@invarn/cibuild 2.7.6 → 2.7.7

package/dist/src/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/commands/run.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAiJ3E"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/commands/run.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAkJ3E"}

package/dist/src/commands/run.js

@@ -106,7 +106,7 @@ export async function handleRunCommand(opts = {}) {
                 interactive: isInteractiveTTY(),
             });
             pipeline = conversionResult.pipeline;
-            await runner.runPipeline(pipeline, conversionResult.warnings, conversionResult.skippedSteps);
+            await runner.runPipeline(pipeline, conversionResult.warnings, conversionResult.skippedSteps, conversionResult.checkout);
         }
         else if (isJavaScriptModule) {
             // The one dynamic import that has to stay dynamic: the specifier is a

package/dist/src/runner.d.ts

@@ -1,4 +1,5 @@
 import type { StepDef, PipelineDef, CIConfig } from "./types.js";
+import type { CheckoutWitness } from "./yaml/converter.js";
 export declare class StepExecutionError extends Error {
     stepId: string;
     stepName: string;
@@ -12,6 +13,19 @@ export declare class PipelineRunner {
     private formatDuration;
     validatePipeline(pipeline: PipelineDef): void;
     displayWarnings(warnings: string[], skippedSteps: number): void;
-    runPipeline(pipeline: PipelineDef, warnings?: string[], skippedSteps?: number): Promise<void>;
+    /**
+     * The commit this build compiled, printed under the banner.
+     *
+     * Every build carries it, whatever steps it declares. The dashboard's sha is
+     * the one that was *dispatched*; this one was read off the disk the compiler
+     * is about to read, and it is what a later argument about which code shipped
+     * has to be settled against. It used to live only in `git-clone`'s echo,
+     * which is optional and no longer in the curated templates.
+     *
+     * Labels match that echo's on purpose — where both appear they are the same
+     * three facts, and they have to agree.
+     */
+    displayCheckout(checkout: CheckoutWitness): void;
+    runPipeline(pipeline: PipelineDef, warnings?: string[], skippedSteps?: number, checkout?: CheckoutWitness): Promise<void>;
 }
 //# sourceMappingURL=runner.d.ts.map

package/dist/src/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAOjE,qBAAa,kBAAmB,SAAQ,KAAK;IAElC,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;gBAFhB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAK1B;AAED,qBAAa,cAAc;IACb,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,QAAQ;IAE9B,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiHhE,OAAO,CAAC,cAAc;IAYtB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;IAwB7C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAczD,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA2CpG"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAO3D,qBAAa,kBAAmB,SAAQ,KAAK;IAElC,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;gBAFhB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAK1B;AAED,qBAAa,cAAc;IACb,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,QAAQ;IAE9B,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiHhE,OAAO,CAAC,cAAc;IAYtB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;IAwB7C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAc/D;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAO1C,WAAW,CACf,QAAQ,EAAE,WAAW,EACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,eAAe,GACzB,OAAO,CAAC,IAAI,CAAC;CA+CjB"}

package/dist/src/runner.js

@@ -175,7 +175,27 @@ export class PipelineRunner {
         console.log(`ℹ️  Skipped ${skippedSteps} unsupported step${skippedSteps !== 1 ? 's' : ''}. Build will continue.`);
         console.log("═".repeat(60) + "\n");
     }
-    async runPipeline(pipeline, warnings, skippedSteps) {
+    /**
+     * The commit this build compiled, printed under the banner.
+     *
+     * Every build carries it, whatever steps it declares. The dashboard's sha is
+     * the one that was *dispatched*; this one was read off the disk the compiler
+     * is about to read, and it is what a later argument about which code shipped
+     * has to be settled against. It used to live only in `git-clone`'s echo,
+     * which is optional and no longer in the curated templates.
+     *
+     * Labels match that echo's on purpose — where both appear they are the same
+     * three facts, and they have to agree.
+     */
+    displayCheckout(checkout) {
+        console.log(`Commit:  ${checkout.commit}`);
+        if (checkout.author)
+            console.log(`Author:  ${checkout.author}`);
+        if (checkout.subject)
+            console.log(`Message: ${checkout.subject}`);
+        console.log("");
+    }
+    async runPipeline(pipeline, warnings, skippedSteps, checkout) {
         // Ensure .ci directory exists (envstore lives there)
         mkdirSync(resolve(process.cwd(), ".ci"), { recursive: true });
         // Clear envstore at the start of each build for a clean slate
@@ -185,6 +205,9 @@ export class PipelineRunner {
         console.log(`\n╔═════════════════════════════════════════════════════════╗`);
         console.log(`║  Pipeline: ${pipeline.name.padEnd(42)} ║`);
         console.log(`╚═════════════════════════════════════════════════════════╝\n`);
+        if (checkout) {
+            this.displayCheckout(checkout);
+        }
         // Display warnings if provided
         if (warnings && warnings.length > 0) {
             this.displayWarnings(warnings, skippedSteps || 0);

package/dist/src/yaml/a-runtime-requirement-names-a-real-provider.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * A requirement that cannot be checked yet must not name a step as its source
+ * unless a step is its source.
+ *
+ * Nine runtime requirements — `gradlew` in the three Android steps and the
+ * Bitrise gradle wrapper, `project_path` in five Xcode steps — carried
+ * `providedBy: 'git-clone'`. The lookup behind `providedBy` is keyed by step
+ * *output names* (`CIBUILD_SOURCE_DIR`, `GIT_CLONE_COMMIT_HASH`, …) and these
+ * requirements are named after a path or a command, so it could never match:
+ * every Android validation printed "'gradlew' will be provided by 'git-clone'
+ * step at runtime" whether the step was in the workflow or not.
+ *
+ * `git-clone` provides no files at all — the runner's checkout does, before
+ * any step runs — and once it is out of the curated templates the sentence
+ * names a step the pipeline does not contain.
+ */
+import './steps/index.js';
+//# sourceMappingURL=a-runtime-requirement-names-a-real-provider.test.d.ts.map

package/dist/src/yaml/a-runtime-requirement-names-a-real-provider.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a-runtime-requirement-names-a-real-provider.test.d.ts","sourceRoot":"","sources":["../../../src/yaml/a-runtime-requirement-names-a-real-provider.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,kBAAkB,CAAC"}

package/dist/src/yaml/a-runtime-requirement-names-a-real-provider.test.js

@@ -0,0 +1,66 @@
+/**
+ * A requirement that cannot be checked yet must not name a step as its source
+ * unless a step is its source.
+ *
+ * Nine runtime requirements — `gradlew` in the three Android steps and the
+ * Bitrise gradle wrapper, `project_path` in five Xcode steps — carried
+ * `providedBy: 'git-clone'`. The lookup behind `providedBy` is keyed by step
+ * *output names* (`CIBUILD_SOURCE_DIR`, `GIT_CLONE_COMMIT_HASH`, …) and these
+ * requirements are named after a path or a command, so it could never match:
+ * every Android validation printed "'gradlew' will be provided by 'git-clone'
+ * step at runtime" whether the step was in the workflow or not.
+ *
+ * `git-clone` provides no files at all — the runner's checkout does, before
+ * any step runs — and once it is out of the curated templates the sentence
+ * names a step the pipeline does not contain.
+ */
+import { describe, test, expect } from '@jest/globals';
+import './steps/index.js';
+import { StepValidator } from './step-validator.js';
+import { loadConfig } from '../config.js';
+const config = loadConfig();
+/** An Android workflow with no `git-clone` step, as issue 05 leaves it. */
+function gradlePipeline() {
+    return {
+        format_version: '1',
+        meta: { invarn: { stack: 'linux-android-35' } },
+        app: { envs: [{ JAVA_HOME: '/usr/lib/jvm/java-21' }] },
+        workflows: {
+            primary: {
+                steps: [
+                    {
+                        'gradle-build@1.0.0': {
+                            title: 'Build Debug APK',
+                            inputs: { gradle_task: 'assembleDebug' },
+                        },
+                    },
+                ],
+            },
+        },
+    };
+}
+describe('a runtime requirement names a real provider', () => {
+    test('a clone-free workflow never mentions git-clone', async () => {
+        const validator = new StepValidator(gradlePipeline(), 'primary', config);
+        const result = await validator.validateWorkflow();
+        const messages = result.issues.map((i) => i.result.message ?? '').join('\n');
+        expect(messages).not.toContain('git-clone');
+    });
+    test('the checkout is named as the source of the gradle wrapper', async () => {
+        const validator = new StepValidator(gradlePipeline(), 'primary', config);
+        const result = await validator.validateWorkflow();
+        const gradlew = result.issues.find((i) => i.requirement.name === 'gradlew');
+        expect(gradlew).toBeDefined();
+        expect(gradlew.requirement.severity).toBe('info');
+        expect(gradlew.result.message).toContain('the checkout');
+        // The wording must not promise a step: no step puts the wrapper on disk.
+        expect(gradlew.result.message).not.toMatch(/'the checkout' step/);
+    });
+    test('the info does not fail validation', async () => {
+        const validator = new StepValidator(gradlePipeline(), 'primary', config);
+        const result = await validator.validateWorkflow();
+        expect(result.valid).toBe(true);
+        expect(result.counts.errors).toBe(0);
+    });
+});
+//# sourceMappingURL=a-runtime-requirement-names-a-real-provider.test.js.map

package/dist/src/yaml/converter.d.ts

@@ -10,10 +10,32 @@ export declare class YAMLConversionError extends Error {
 /**
  * Result of YAML to PipelineDef conversion
  */
+/**
+ * What was on disk when the pipeline was converted — the only thing that can
+ * say which commit a build actually compiled.
+ *
+ * A dashboard's sha is the one that was *dispatched*. Between dispatch and
+ * checkout a branch can move, a tag can be re-pointed, and a shared checkout
+ * can be pushed over. Until now the sole in-log evidence was `git-clone`'s
+ * own echo, which is optional and on its way out of the templates.
+ */
+export interface CheckoutWitness {
+    /** Full SHA of HEAD. */
+    commit: string;
+    /** `Name <email>` of the commit's author, empty when unknown. */
+    author: string;
+    /** First line of the commit message, empty when unknown. */
+    subject: string;
+}
 export interface ConversionResult {
     pipeline: PipelineDef;
     warnings: string[];
     skippedSteps: number;
+    /**
+     * Absent only when the working directory is not a git checkout — a local
+     * `ci run` in a plain directory, never a runner.
+     */
+    checkout?: CheckoutWitness;
 }
 /**
  * A credential a `file@` step writes, and where it goes.

package/dist/src/yaml/converter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../src/yaml/converter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAW,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,YAAY,CAAC;AAMzE,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,WAAW,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAaD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAaD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CASjF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,MAAM,EAAE,SAAS,oBAAoB,EAAE,GACtC,mBAAmB,EAAE,CAgBvB;AAED,qDAAqD;AACrD,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,mBAAmB,GAC7B,MAAM,CAaR;AAkCD;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,QAAQ,EAChB,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAyM3B;AAwGD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,EAAE,CAEtE"}
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../src/yaml/converter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAW,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,YAAY,CAAC;AAMzE,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,WAAW,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAaD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAaD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CASjF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,MAAM,EAAE,SAAS,oBAAoB,EAAE,GACtC,mBAAmB,EAAE,CAgBvB;AAED,qDAAqD;AACrD,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,mBAAmB,GAC7B,MAAM,CAaR;AA6DD;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,QAAQ,EAChB,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CA0M3B;AAwGD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,EAAE,CAEtE"}

package/dist/src/yaml/converter.js

@@ -132,6 +132,31 @@ const BITRISE_TO_CIBUILD = {
     'android-detekt': 'detekt',
     'bitrise-step-flutter-installer': 'flutter-installer',
 };
+/**
+ * Reads the checkout's identity back out of the resolver, which computed it
+ * from the very working directory the build is about to run in.
+ *
+ * Read through `getAll()` rather than `get()`: the latter records every name
+ * it is asked for in `referencedVars`, and a pipeline is refused when a
+ * referenced name has no value. Nothing here is a variable the pipeline
+ * referenced.
+ *
+ * `EnvResolver` falls back to the literal string `HEAD` when `git rev-parse`
+ * fails, so the shape of the hash — not a second question to git — is what
+ * tells a real checkout from a plain directory.
+ */
+function checkoutWitnessFrom(env) {
+    const commit = env['CIBUILD_GIT_COMMIT'] ?? '';
+    if (!/^[0-9a-f]{7,40}$/.test(commit))
+        return undefined;
+    const name = env['GIT_CLONE_COMMIT_AUTHOR_NAME'] ?? '';
+    const email = env['GIT_CLONE_COMMIT_AUTHOR_EMAIL'] ?? '';
+    return {
+        commit,
+        author: name && email ? `${name} <${email}>` : name || email,
+        subject: env['GIT_CLONE_COMMIT_MESSAGE_SUBJECT'] ?? '',
+    };
+}
 /**
  * Converts a YAML pipeline workflow to PipelineDef format
  * @param pipeline Parsed YAML pipeline
@@ -302,6 +327,7 @@ export async function convertYAMLToPipelineDef(pipeline, config, workflowName, y
         pipeline: pipelineDef,
         warnings,
         skippedSteps,
+        checkout: checkoutWitnessFrom(envResolver.getAll()),
     };
 }
 /**

package/dist/src/yaml/every-build-log-witnesses-the-commit-on-disk.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Every build log says which commit was on disk.
+ *
+ * The dashboard's sha is the one that was *dispatched*. The only in-log
+ * evidence of what was actually compiled was `git-clone`'s echo of
+ * `Commit:` / `Author:` / `Message:` — and that step is optional, does not
+ * appear in a `ci init` pipeline or a protocol pipeline, and is being taken
+ * out of the curated templates. A pipeline written after that would have
+ * carried no witness at all.
+ *
+ * The run banner now carries it, from the values `EnvResolver` already read
+ * off the same checkout, so it does not depend on which steps a workflow
+ * declares.
+ */
+import './steps/index.js';
+//# sourceMappingURL=every-build-log-witnesses-the-commit-on-disk.test.d.ts.map

package/dist/src/yaml/every-build-log-witnesses-the-commit-on-disk.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"every-build-log-witnesses-the-commit-on-disk.test.d.ts","sourceRoot":"","sources":["../../../src/yaml/every-build-log-witnesses-the-commit-on-disk.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,kBAAkB,CAAC"}

package/dist/src/yaml/every-build-log-witnesses-the-commit-on-disk.test.js

@@ -0,0 +1,126 @@
+/**
+ * Every build log says which commit was on disk.
+ *
+ * The dashboard's sha is the one that was *dispatched*. The only in-log
+ * evidence of what was actually compiled was `git-clone`'s echo of
+ * `Commit:` / `Author:` / `Message:` — and that step is optional, does not
+ * appear in a `ci init` pipeline or a protocol pipeline, and is being taken
+ * out of the curated templates. A pipeline written after that would have
+ * carried no witness at all.
+ *
+ * The run banner now carries it, from the values `EnvResolver` already read
+ * off the same checkout, so it does not depend on which steps a workflow
+ * declares.
+ */
+import { describe, test, expect } from '@jest/globals';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import './steps/index.js';
+import { convertYAMLToPipelineDef } from './converter.js';
+import { PipelineRunner } from '../runner.js';
+import { loadConfig } from '../config.js';
+const config = loadConfig();
+/** The three marker contracts Invarn's log parser reads. */
+const STEP_MARKER = /▸ INVARN_STEP:(\d+):(.+)/;
+const PHASE_MARKER = /▸ INVARN_PHASE:([a-z0-9_-]+):(start|ok|fail)\b/;
+const STEP_HEADING = /^\[step_\d+\] Running: /;
+function pipelineWith(steps) {
+    return {
+        format_version: '1',
+        meta: { invarn: { stack: 'macos-xcode-26.4' } },
+        workflows: { primary: { steps } },
+    };
+}
+/** What `git` says, asked directly rather than through the resolver. */
+function git(...args) {
+    return execFileSync('git', args, { encoding: 'utf8' }).trim();
+}
+/** Everything `runPipeline` printed, for a workflow with no steps. */
+async function bannerOf(checkout) {
+    const lines = [];
+    const original = console.log;
+    const cwd = process.cwd();
+    // `runPipeline` creates `.ci/` beside the working directory for the
+    // envstore. Somewhere disposable, so a test never leaves one in the repo.
+    const scratch = mkdtempSync(join(tmpdir(), 'cibuild-banner-'));
+    console.log = (...args) => {
+        lines.push(args.map(String).join(' '));
+    };
+    try {
+        process.chdir(scratch);
+        const runner = new PipelineRunner(config);
+        await runner.runPipeline({ name: 'primary (YAML)', artifacts: [], steps: [], stepsOrder: [] }, undefined, undefined, checkout);
+    }
+    finally {
+        console.log = original;
+        process.chdir(cwd);
+        rmSync(scratch, { recursive: true, force: true });
+    }
+    return lines;
+}
+const witness = {
+    commit: '0123456789abcdef0123456789abcdef01234567',
+    author: 'Ada Lovelace <ada@example.com>',
+    subject: 'the subject line',
+};
+describe('every build log witnesses the commit on disk', () => {
+    test('the conversion carries the commit that is on disk', async () => {
+        const result = await convertYAMLToPipelineDef(pipelineWith([{ 'git-clone@1.0.0': {} }]), config, 'primary');
+        expect(result.checkout).toBeDefined();
+        expect(result.checkout.commit).toBe(git('rev-parse', 'HEAD'));
+        expect(result.checkout.subject).toBe(git('log', '-1', '--format=%s'));
+        expect(result.checkout.author).toBe(`${git('log', '-1', '--format=%an')} <${git('log', '-1', '--format=%ae')}>`);
+    });
+    test('a workflow with no git-clone step carries it just the same', async () => {
+        // The whole point: the witness must not depend on a declared step.
+        const result = await convertYAMLToPipelineDef(pipelineWith([{ 'script@1.0.0': { inputs: { content: 'true' } } }]), config, 'primary');
+        expect(result.checkout?.commit).toBe(git('rev-parse', 'HEAD'));
+    });
+    test('the banner prints hash, author and subject exactly once', async () => {
+        const lines = await bannerOf(witness);
+        expect(lines.filter((l) => l.includes(witness.commit))).toHaveLength(1);
+        expect(lines.filter((l) => l.includes(witness.author))).toHaveLength(1);
+        expect(lines.filter((l) => l.includes(witness.subject))).toHaveLength(1);
+    });
+    test('the banner is at the top, before anything a step prints', async () => {
+        const lines = await bannerOf(witness);
+        const pipelineLine = lines.findIndex((l) => l.includes('Pipeline:'));
+        const commitLine = lines.findIndex((l) => l.includes(witness.commit));
+        expect(pipelineLine).toBeGreaterThanOrEqual(0);
+        expect(commitLine).toBeGreaterThan(pipelineLine);
+    });
+    test('a run with no witness prints no empty Commit line', async () => {
+        // `EnvResolver` falls back to the literal `HEAD`, so a plain directory
+        // would otherwise produce `Commit: HEAD` — worse than saying nothing.
+        const lines = await bannerOf(undefined);
+        expect(lines.filter((l) => l.startsWith('Commit:'))).toHaveLength(0);
+        expect(lines.filter((l) => l.startsWith('Author:'))).toHaveLength(0);
+    });
+    test('an author or subject git could not read is left out', async () => {
+        const lines = await bannerOf({ commit: witness.commit, author: '', subject: '' });
+        expect(lines.filter((l) => l.startsWith('Commit:'))).toHaveLength(1);
+        expect(lines.filter((l) => l.startsWith('Author:'))).toHaveLength(0);
+        expect(lines.filter((l) => l.startsWith('Message:'))).toHaveLength(0);
+    });
+    test('no line of the banner can be read as a marker or a step heading', async () => {
+        // Invarn's step-progress parser splits a build log on these. A banner line
+        // that matched one would invent a step or move a boundary.
+        for (const line of await bannerOf(witness)) {
+            expect(line).not.toMatch(STEP_MARKER);
+            expect(line).not.toMatch(PHASE_MARKER);
+            expect(line).not.toMatch(STEP_HEADING);
+        }
+    });
+    test('the banner and git-clone read the same commit', async () => {
+        // Where both appear they must agree. The step echoes `git rev-parse HEAD`
+        // from the shell; the banner reports what the resolver read from the same
+        // checkout in the same directory.
+        const result = await convertYAMLToPipelineDef(pipelineWith([{ 'git-clone@1.0.0': {} }]), config, 'primary');
+        const step = result.pipeline.steps.find((s) => s.name === 'git-clone');
+        expect(step.script).toContain('COMMIT_HASH="$(git rev-parse HEAD)"');
+        expect(result.checkout.commit).toBe(git('rev-parse', 'HEAD'));
+    });
+});
+//# sourceMappingURL=every-build-log-witnesses-the-commit-on-disk.test.js.map

package/dist/src/yaml/step-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"step-validator.d.ts","sourceRoot":"","sources":["../../../src/yaml/step-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,YAAY,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAGV,wBAAwB,EAGzB,MAAM,uBAAuB,CAAC;AAwB/B;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAC,CAAS;IAG9B,OAAO,CAAC,gBAAgB,CAAoE;IAG5F,OAAO,CAAC,mBAAmB,CAA6B;IAKxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;gBAGvC,QAAQ,EAAE,YAAY,EACtB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,QAAQ,EAChB,YAAY,CAAC,EAAE,MAAM;IA0BvB;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAwN3D;;OAEG;YACW,mBAAmB;IAmEjC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsBjC;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;OAEG;IACH,OAAO,CAAC,SAAS;CA8BlB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CA4D/E"}
+{"version":3,"file":"step-validator.d.ts","sourceRoot":"","sources":["../../../src/yaml/step-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,YAAY,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAGV,wBAAwB,EAGzB,MAAM,uBAAuB,CAAC;AAwB/B;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAC,CAAS;IAG9B,OAAO,CAAC,gBAAgB,CAAoE;IAG5F,OAAO,CAAC,mBAAmB,CAA6B;IAKxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;gBAGvC,QAAQ,EAAE,YAAY,EACtB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,QAAQ,EAChB,YAAY,CAAC,EAAE,MAAM;IA0BvB;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAwN3D;;OAEG;YACW,mBAAmB;IAuEjC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsBjC;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;OAEG;IACH,OAAO,CAAC,SAAS;CA8BlB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CA4D/E"}

package/dist/src/yaml/step-validator.js

@@ -260,14 +260,18 @@ export class StepValidator {
             if (requirement.providedBy) {
                 const provider = this.availableOutputs.get(requirement.name);
                 if (!provider) {
-                    // Output not provided by any earlier step - this is an info message
+                    // Nothing declares this name as an output, so say where it does come
+                    // from and leave it at that. `providedBy` is prose: most of these
+                    // requirements are named after a path or a command rather than a
+                    // step output, so the lookup above was never going to match one, and
+                    // the sentence must stay true when the source is not a step at all.
                     return {
                         stepName,
                         stepIndex,
                         requirement,
                         result: {
                             passed: false,
-                            message: `'${requirement.name}' will be provided by '${requirement.providedBy}' step at runtime`,
+                            message: `'${requirement.name}' is not here yet — expected from ${requirement.providedBy} at runtime`,
                         },
                     };
                 }

package/dist/src/yaml/steps/android.js

@@ -270,7 +270,7 @@ export class GradleBuildStepExecutor extends BaseStepExecutor {
     getValidationRequirements(_inputs, env, _config) {
         return [
             this.requireEnvVar('JAVA_HOME', 'Java installation directory', env, 'Add a set-java-version step before gradle-build, or set JAVA_HOME env var'),
-            this.runtimeRequirement('gradlew', 'Gradle wrapper (./gradlew) or gradle command', 'file', 'git-clone'),
+            this.runtimeRequirement('gradlew', 'Gradle wrapper (./gradlew) or gradle command', 'file', 'the checkout'),
         ];
     }
     async execute(inputs, env, config) {
@@ -595,7 +595,7 @@ export class AndroidLintStepExecutor extends BaseStepExecutor {
     getValidationRequirements(_inputs, env, _config) {
         return [
             this.requireEnvVar('JAVA_HOME', 'Java installation directory', env, 'Add a set-java-version step before android-lint, or set JAVA_HOME env var'),
-            this.runtimeRequirement('gradlew', 'Gradle wrapper (./gradlew) or gradle command', 'file', 'git-clone'),
+            this.runtimeRequirement('gradlew', 'Gradle wrapper (./gradlew) or gradle command', 'file', 'the checkout'),
         ];
     }
     async execute(inputs, env, config) {
@@ -782,7 +782,7 @@ export class AndroidUnitTestStepExecutor extends BaseStepExecutor {
     getValidationRequirements(_inputs, env, _config) {
         return [
             this.requireEnvVar('JAVA_HOME', 'Java installation directory', env, 'Add a set-java-version step before android-unit-test, or set JAVA_HOME env var'),
-            this.runtimeRequirement('gradlew', 'Gradle wrapper (./gradlew) or gradle command', 'file', 'git-clone'),
+            this.runtimeRequirement('gradlew', 'Gradle wrapper (./gradlew) or gradle command', 'file', 'the checkout'),
         ];
     }
     async execute(inputs, env, config) {

package/dist/src/yaml/steps/base.d.ts

@@ -193,7 +193,12 @@ export declare abstract class BaseStepExecutor implements StepExecutor {
     protected requireInput(inputName: string, inputs: any, description: string, hint?: string): ValidationRequirement;
     /**
      * Creates a runtime-only requirement (checked at step execution time)
-     * Used for files/directories that will be created by earlier steps
+     * Used for files/directories that are not on disk when validation runs.
+     *
+     * `providedBy` is the sentence a reader gets — an earlier step's name, or
+     * `'the checkout'` for anything the runner lays down before step 1. Naming
+     * a step that does not declare `name` as one of its outputs just makes the
+     * sentence wrong; nothing checks it.
      */
     protected runtimeRequirement(name: string, description: string, category?: ValidationCategory, providedBy?: string): ValidationRequirement;
     /**

package/dist/src/yaml/steps/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EACV,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,UAAU,EACX,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAGpE;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtF;;;;;;;OAOG;IACH,yBAAyB,CAAC,CACxB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,MAAM,EAAE,QAAQ,GACf,qBAAqB,EAAE,CAAC;IAE3B;;;;OAIG;IACH,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;IAE5B;;;OAGG;IACH,oBAAoB,CAAC,IAAI,OAAO,CAAC;CAClC;AAED;;GAEG;AACH,8BAAsB,gBAAiB,YAAW,YAAY;IAC5D;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAE9F;;;;;OAKG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAUjE;;;;;OAKG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IASjE;;;;;OAKG;IACH,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAS/D;;;;;OAKG;IACH,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAS/D;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC;IAOnE;;;;;;;OAOG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG;IAS3E;;;;OAIG;IACH,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAKzC;;;;;;OAMG;IACH,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM;IAgB7E;;;;;;OAMG;IACH,SAAS,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IA0B3E;;;;;OAKG;IACH,SAAS,CAAC,4BAA4B,CACpC,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,EAAE,MAAM,GACf,MAAM;IAQT;;;OAGG;IACH,yBAAyB,CACvB,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAI1B;;;OAGG;IACH,UAAU,IAAI,UAAU,EAAE;IAI1B;;;;OAIG;IACH,oBAAoB,IAAI,OAAO;IAI/B;;;OAGG;IACH,SAAS,CAAC,cAAc,CACtB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAYxB;;;OAGG;IACH,SAAS,CAAC,aAAa,CACrB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;OAGG;IACH,SAAS,CAAC,WAAW,CACnB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CACxB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;OAGG;IACH,SAAS,CAAC,YAAY,CACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,GAAG,EACX,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;OAGG;IACH,SAAS,CAAC,kBAAkB,CAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,kBAA2B,EACrC,UAAU,CAAC,EAAE,MAAM,GAClB,qBAAqB;IAWxB;;;OAGG;cACa,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiBnF;;;OAGG;cACa,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA2BlF;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE;QACP,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;KAClC,CAAC;CACH"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EACV,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,UAAU,EACX,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAGpE;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtF;;;;;;;OAOG;IACH,yBAAyB,CAAC,CACxB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,MAAM,EAAE,QAAQ,GACf,qBAAqB,EAAE,CAAC;IAE3B;;;;OAIG;IACH,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;IAE5B;;;OAGG;IACH,oBAAoB,CAAC,IAAI,OAAO,CAAC;CAClC;AAED;;GAEG;AACH,8BAAsB,gBAAiB,YAAW,YAAY;IAC5D;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAE9F;;;;;OAKG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAUjE;;;;;OAKG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IASjE;;;;;OAKG;IACH,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAS/D;;;;;OAKG;IACH,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAS/D;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC;IAOnE;;;;;;;OAOG;IACH,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG;IAS3E;;;;OAIG;IACH,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAKzC;;;;;;OAMG;IACH,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM;IAgB7E;;;;;;OAMG;IACH,SAAS,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IA0B3E;;;;;OAKG;IACH,SAAS,CAAC,4BAA4B,CACpC,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,EAAE,MAAM,GACf,MAAM;IAQT;;;OAGG;IACH,yBAAyB,CACvB,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAI1B;;;OAGG;IACH,UAAU,IAAI,UAAU,EAAE;IAI1B;;;;OAIG;IACH,oBAAoB,IAAI,OAAO;IAI/B;;;OAGG;IACH,SAAS,CAAC,cAAc,CACtB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAYxB;;;OAGG;IACH,SAAS,CAAC,aAAa,CACrB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;OAGG;IACH,SAAS,CAAC,WAAW,CACnB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CACxB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;OAGG;IACH,SAAS,CAAC,YAAY,CACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,GAAG,EACX,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,GACZ,qBAAqB;IAiBxB;;;;;;;;OAQG;IACH,SAAS,CAAC,kBAAkB,CAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,kBAA2B,EACrC,UAAU,CAAC,EAAE,MAAM,GAClB,qBAAqB;IAWxB;;;OAGG;cACa,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiBnF;;;OAGG;cACa,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA2BlF;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE;QACP,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;KAClC,CAAC;CACH"}

package/dist/src/yaml/steps/base.js

@@ -305,7 +305,12 @@ ${scriptContent}
     }
     /**
      * Creates a runtime-only requirement (checked at step execution time)
-     * Used for files/directories that will be created by earlier steps
+     * Used for files/directories that are not on disk when validation runs.
+     *
+     * `providedBy` is the sentence a reader gets — an earlier step's name, or
+     * `'the checkout'` for anything the runner lays down before step 1. Naming
+     * a step that does not declare `name` as one of its outputs just makes the
+     * sentence wrong; nothing checks it.
      */
     runtimeRequirement(name, description, category = 'file', providedBy) {
         return {

package/dist/src/yaml/steps/bitrise-android-tools.js

@@ -51,7 +51,7 @@ export class BitriseAndroidToolsStepExecutor extends BaseStepExecutor {
                     };
                 },
             },
-            this.runtimeRequirement('gradlew', 'Gradle wrapper', 'file', 'git-clone'),
+            this.runtimeRequirement('gradlew', 'Gradle wrapper', 'file', 'the checkout'),
         ];
     }
     getOutputs() {

package/dist/src/yaml/steps/git-clone-names-the-inputs-it-ignores.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `git-clone` reads none of its inputs, and said nothing about it.
+ *
+ * The step does not clone. By the time it runs, the runner has already checked
+ * the dispatched ref out — `git-clone` locates that checkout and republishes
+ * its commit metadata. `execute()` takes `_inputs` and never opens it. So
+ * `branch: release/2.0` parsed, validated, ran green, and built `main`; a
+ * Bitrise-migrated `git-clone@8` carried `clone_depth: 0`, `fetch_tags` and
+ * `submodule_update_depth` through the converter and into nothing.
+ *
+ * Accepting configuration that has no effect is the defect. The step now names
+ * every input it was handed, at warning severity: every pipeline written to
+ * date carries some of these, and all of them must keep building.
+ */
+import './index.js';
+//# sourceMappingURL=git-clone-names-the-inputs-it-ignores.test.d.ts.map

package/dist/src/yaml/steps/git-clone-names-the-inputs-it-ignores.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-clone-names-the-inputs-it-ignores.test.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/git-clone-names-the-inputs-it-ignores.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,YAAY,CAAC"}