@invarn/cibuild 2.9.4 → 2.9.7

package/dist/src/yaml/platform-detector.test.js

@@ -1,525 +0,0 @@
-/**
- * Unit tests for platform detection
- */
-import { describe, test, expect } from '@jest/globals';
-import { PlatformDetector, detectPlatform, detectPlatformInfo, PlatformDetectionError } from './platform-detector.js';
-describe('PlatformDetector', () => {
-    describe('Priority 1: Extract from meta.cibuild.io.stack', () => {
-        test('should detect macOS from stack', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    'cibuild.io': {
-                        stack: 'macos-ventura-xcode-15.1',
-                        machine_type: 'performance',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: { content: 'echo "test"' } } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-            expect(detector.getStack()).toBe('macos-ventura-xcode-15.1');
-            expect(detector.getMachineType()).toBe('performance');
-        });
-        test('should detect linux from stack', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    'cibuild.io': {
-                        stack: 'linux-docker-android-22.04',
-                        machine_type: 'standard',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: { content: 'echo "test"' } } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-            expect(detector.getStack()).toBe('linux-docker-android-22.04');
-            expect(detector.getMachineType()).toBe('standard');
-        });
-    });
-    describe('Priority 1: Extract from meta.invarn.stack', () => {
-        test('should detect macOS from meta.invarn stack when only invarn is present', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    invarn: {
-                        stack: 'macos-xcode-26.4',
-                        machine_type: 'standard',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: { content: 'echo "test"' } } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-            expect(detector.getStack()).toBe('macos-xcode-26.4');
-            expect(detector.getMachineType()).toBe('standard');
-        });
-        test('should prefer meta.invarn over meta.cibuild.io when both are present', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    invarn: {
-                        stack: 'macos-xcode-26.4',
-                        machine_type: 'performance',
-                    },
-                    'cibuild.io': {
-                        stack: 'linux-docker-android-22.04',
-                        machine_type: 'standard',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-            expect(detector.getStack()).toBe('macos-xcode-26.4');
-            expect(detector.getMachineType()).toBe('performance');
-        });
-        test('should expose meta.invarn fields via getPlatformInfo()', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    invarn: {
-                        stack: 'linux-docker-android-22.04',
-                        machine_type: 'performance',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            const info = detector.getPlatformInfo();
-            expect(info.platform).toBe('linux');
-            expect(info.stack).toBe('linux-docker-android-22.04');
-            expect(info.machineType).toBe('performance');
-        });
-        test('should treat a partial meta.invarn block as the sole source — meta.cibuild.io is ignored field-by-field', () => {
-            // PRD: "When both are present, meta.invarn wins." Block-level precedence — once
-            // meta.invarn appears, the legacy meta.cibuild.io block is treated as stale and ignored.
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    invarn: {
-                        stack: 'macos-xcode-26.4',
-                    },
-                    'cibuild.io': {
-                        stack: 'linux-docker-android-22.04',
-                        machine_type: 'performance',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getStack()).toBe('macos-xcode-26.4');
-            expect(detector.getMachineType()).toBeNull();
-        });
-        test('should fall back to meta.cibuild.io when meta.invarn is absent (backward-compat lock-in)', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    'cibuild.io': {
-                        stack: 'macos-xcode-26.4',
-                        machine_type: 'performance',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-            expect(detector.getStack()).toBe('macos-xcode-26.4');
-            expect(detector.getMachineType()).toBe('performance');
-        });
-    });
-    describe('Priority 2: Use meta.platform field', () => {
-        test('should use meta.platform when stack not specified', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    platform: 'macos',
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: { content: 'echo "test"' } } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-            expect(detector.getStack()).toBeNull();
-            expect(detector.getMachineType()).toBeNull();
-        });
-        test('should use meta.platform: linux', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    platform: 'linux',
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: { content: 'echo "test"' } } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-        });
-    });
-    describe('Priority 3: Auto-detect from workflow steps', () => {
-        test('should detect macOS from xcodebuild step', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'git-clone@4.0.17': { inputs: {} } },
-                            { 'xcodebuild@5.0.0': { inputs: { project_path: './MyApp.xcodeproj' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-        });
-        test('should detect macOS from ui-fidelity-render step', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'git-clone@4.0.17': { inputs: {} } },
-                            {
-                                'ui-fidelity-render@1.0.0': {
-                                    inputs: { package_path: './MyPackage', target: 'MyViews' },
-                                },
-                            },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-        });
-        test('should detect macOS from xcode-test step', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'xcode-test@2.0.0': { inputs: { project_path: './MyApp.xcodeproj' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-        });
-        test('should detect linux from gradle-build step', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'git-clone@4.0.17': { inputs: {} } },
-                            { 'gradle-build@1.0.0': { inputs: { project_location: './android' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-        });
-        test('should detect linux from android-lint step', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'android-lint@1.0.0': { inputs: { project_location: './android' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-        });
-        test('should detect linux from android-unit-test step', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'android-unit-test@1.0.0': { inputs: { project_location: './android' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-        });
-        test('should detect linux from set-java-version step', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'set-java-version@1.0.0': { inputs: { java_version: '17' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-        });
-        test('should default to linux for platform-agnostic steps', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'git-clone@4.0.17': { inputs: {} } },
-                            { 'script@1.0.0': { inputs: { content: 'npm install' } } },
-                            { 'cache-push@2.0.0': { inputs: { cache_paths: 'node_modules' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-        });
-    });
-    describe('Mixed platform detection (FR-37)', () => {
-        test('should throw error for mixed macOS and Linux steps', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'xcodebuild@5.0.0': { inputs: { project_path: './ios' } } },
-                            { 'gradle-build@1.0.0': { inputs: { project_location: './android' } } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(() => detector.getPlatform()).toThrow(PlatformDetectionError);
-            expect(() => detector.getPlatform()).toThrow(/contains steps for multiple platforms/);
-            expect(() => detector.getPlatform()).toThrow(/xcodebuild/);
-            expect(() => detector.getPlatform()).toThrow(/gradle-build/);
-        });
-        test('should throw error listing all mixed platform steps', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'xcodebuild@5.0.0': { inputs: {} } },
-                            { 'xcode-test@2.0.0': { inputs: {} } },
-                            { 'gradle-build@1.0.0': { inputs: {} } },
-                            { 'android-lint@1.0.0': { inputs: {} } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(() => detector.getPlatform()).toThrow(/xcodebuild.*xcode-test/);
-            expect(() => detector.getPlatform()).toThrow(/gradle-build.*android-lint/);
-        });
-    });
-    describe('Step name parsing', () => {
-        test('should parse step name with version', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { 'xcodebuild@5.0.0': { inputs: {} } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-        });
-        test('should parse step name without version', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [
-                            { xcodebuild: { inputs: {} } },
-                        ],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos');
-        });
-    });
-    describe('getPlatformInfo()', () => {
-        test('should return complete platform info with all fields', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    'cibuild.io': {
-                        stack: 'macos-ventura-xcode-15.1',
-                        machine_type: 'performance',
-                    },
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            const info = detector.getPlatformInfo();
-            expect(info.platform).toBe('macos');
-            expect(info.stack).toBe('macos-ventura-xcode-15.1');
-            expect(info.machineType).toBe('performance');
-        });
-        test('should return platform info with only platform field', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [{ 'xcodebuild@5.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            const info = detector.getPlatformInfo();
-            expect(info.platform).toBe('macos');
-            expect(info.stack).toBeUndefined();
-            expect(info.machineType).toBeUndefined();
-        });
-    });
-    describe('Helper functions', () => {
-        test('detectPlatform() should work', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [{ 'xcodebuild@5.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const platform = detectPlatform(pipeline, 'primary');
-            expect(platform).toBe('macos');
-        });
-        test('detectPlatform() should throw for non-existent workflow', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [{ 'xcodebuild@5.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            expect(() => detectPlatform(pipeline, 'nonexistent')).toThrow(/not found/);
-        });
-        test('detectPlatformInfo() should work', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    'cibuild.io': {
-                        stack: 'linux-docker-android-22.04',
-                    },
-                },
-                workflows: {
-                    build: {
-                        steps: [{ 'gradle-build@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const info = detectPlatformInfo(pipeline, 'build');
-            expect(info.platform).toBe('linux');
-            expect(info.stack).toBe('linux-docker-android-22.04');
-        });
-        test('detectPlatformInfo() should throw for non-existent workflow', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            expect(() => detectPlatformInfo(pipeline, 'missing')).toThrow(/not found/);
-        });
-    });
-    describe('Edge cases', () => {
-        test('should handle empty steps array (defaults to linux)', () => {
-            const pipeline = {
-                format_version: '4',
-                workflows: {
-                    primary: {
-                        steps: [],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux');
-        });
-        test('should handle stack with priority over platform field', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    'cibuild.io': {
-                        stack: 'macos-ventura-xcode-15.1',
-                    },
-                    platform: 'linux', // This should be ignored
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'script@1.0.0': { inputs: {} } }],
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('macos'); // Stack takes priority
-        });
-        test('should handle platform field with priority over step detection', () => {
-            const pipeline = {
-                format_version: '4',
-                meta: {
-                    platform: 'linux',
-                },
-                workflows: {
-                    primary: {
-                        steps: [{ 'xcodebuild@5.0.0': { inputs: {} } }], // Would auto-detect as macOS
-                    },
-                },
-            };
-            const detector = new PlatformDetector(pipeline, pipeline.workflows.primary, 'primary');
-            expect(detector.getPlatform()).toBe('linux'); // Explicit platform takes priority
-        });
-    });
-});
-//# sourceMappingURL=platform-detector.test.js.map

package/dist/src/yaml/preflight-validation.d.ts

@@ -1,29 +0,0 @@
-/**
- * Pre-flight validation hook that runs before any workflow step executes.
- *
- * It no longer checks anything. The checks it used to carry — that
- * CIBUILD_GIT_REPOSITORY_URL is set and reachable, and that activate-ssh-key
- * precedes git-clone — assumed cibuild would clone the repository itself. It
- * does not: the source is already on disk when a pipeline runs (a runner
- * checks out the dispatched commit before cibuild starts; locally it is the
- * working copy), so there is no remote to validate before execution. The
- * class and its `validate()` signature are kept so the call site in
- * pipeline-with-secrets.ts is unchanged.
- */
-import type { MissingEnvironmentVariableError } from './env-resolver.js';
-import type { SecretsManager } from './secrets-manager.js';
-import type { YAMLWorkflow } from './types.js';
-/**
- * Pre-flight validation results
- */
-export interface PreFlightResult {
-    success: boolean;
-    error?: MissingEnvironmentVariableError;
-}
-export declare class PreFlightValidator {
-    /**
-     * Run all pre-flight validations. Always succeeds — see the file comment.
-     */
-    validate(_env: Record<string, string>, _secretsManager?: SecretsManager, _workflow?: YAMLWorkflow): Promise<PreFlightResult>;
-}
-//# sourceMappingURL=preflight-validation.d.ts.map

package/dist/src/yaml/preflight-validation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"preflight-validation.d.ts","sourceRoot":"","sources":["../../../src/yaml/preflight-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,+BAA+B,CAAC;CACzC;AAED,qBAAa,kBAAkB;IAC7B;;OAEG;IACG,QAAQ,CACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,eAAe,CAAC,EAAE,cAAc,EAChC,SAAS,CAAC,EAAE,YAAY,GACvB,OAAO,CAAC,eAAe,CAAC;CAG5B"}

package/dist/src/yaml/preflight-validation.js

@@ -1,21 +0,0 @@
-/**
- * Pre-flight validation hook that runs before any workflow step executes.
- *
- * It no longer checks anything. The checks it used to carry — that
- * CIBUILD_GIT_REPOSITORY_URL is set and reachable, and that activate-ssh-key
- * precedes git-clone — assumed cibuild would clone the repository itself. It
- * does not: the source is already on disk when a pipeline runs (a runner
- * checks out the dispatched commit before cibuild starts; locally it is the
- * working copy), so there is no remote to validate before execution. The
- * class and its `validate()` signature are kept so the call site in
- * pipeline-with-secrets.ts is unchanged.
- */
-export class PreFlightValidator {
-    /**
-     * Run all pre-flight validations. Always succeeds — see the file comment.
-     */
-    async validate(_env, _secretsManager, _workflow) {
-        return { success: true };
-    }
-}
-//# sourceMappingURL=preflight-validation.js.map

package/dist/src/yaml/secrets-manager.d.ts

@@ -1,87 +0,0 @@
-/**
- * Universal secrets management for CI Build
- * Stores sensitive values by exact variable name — no UUIDs, no YAML modification
- * Supports per-workflow scoping with global fallback
- *
- * File format:
- * {
- *   "global": { "VAR_NAME": "value" },
- *   "workflows": {
- *     "staging-java-17": { "VAR_NAME": "value" }
- *   }
- * }
- */
-export interface SecretsFile {
-    global: Record<string, string>;
-    workflows: Record<string, Record<string, string>>;
-}
-export declare class SecretsManager {
-    private secretsFilePath;
-    private data;
-    private fileLoaded;
-    constructor(secretsFilePath?: string);
-    private loadSecrets;
-    /**
-     * Reads structured env vars (CIBUILD_S__* and CIBUILD_SW__*) and decodes them
-     * back into a SecretsFile structure. Used when running in CI where secrets
-     * were uploaded via `ci secrets upload`.
-     */
-    private getStructuredEnvSecrets;
-    private saveSecrets;
-    /**
-     * Store a secret by variable name, optionally scoped to a workflow.
-     * @returns The variable name (used as the key)
-     */
-    storeSecret(name: string, value: string, workflow?: string): string;
-    private static readonly ENV_PREFIX;
-    /**
-     * Reads all CIBUILD_-prefixed env vars, stripping the prefix from the keys.
-     * e.g. CIBUILD_SSH_RSA_PRIVATE_KEY → SSH_RSA_PRIVATE_KEY
-     */
-    private getEnvSecrets;
-    /**
-     * Get a secret value by variable name.
-     * Workflow-specific value takes precedence over global.
-     * Falls back to CIBUILD_-prefixed env vars when no secrets file is present.
-     *
-     * The stored data is consulted before that fallback, and not only when a
-     * file was loaded. `storeSecret` writes the file but cannot make it one this
-     * instance *loaded*, so a value collected by `ci init` on a repository that
-     * had no store — which is the only kind of run that collects anything — read
-     * back as absent from the instance that had just stored it. `ci init`'s own
-     * `getSecret('KEYSTORE_PROPERTIES', wf)`, which is how a workflow's keystore
-     * target is taken from `storeFile=`, returned undefined on every fresh
-     * repository because of it.
-     */
-    getSecret(name: string, workflow?: string): string | undefined;
-    /**
-     * Get all secrets merged: global + workflow-specific (workflow overrides global).
-     * Falls back to CIBUILD_-prefixed env vars when no secrets file is present —
-     * for the keys the store does not hold. See `getSecret`.
-     */
-    getAll(workflow?: string): Record<string, string>;
-    /**
-     * Returns the variable name if a secret exists for it, undefined otherwise.
-     * Checks workflow scope first, then global, then the CIBUILD_-prefixed env
-     * vars when no secrets file is present. See `getSecret`.
-     */
-    getSecretIdByName(name: string, workflow?: string): string | undefined;
-    /**
-     * Returns the name itself (API compatibility).
-     */
-    getSecretName(id: string): string | undefined;
-    /**
-     * Check if a secret exists by variable name (global or any workflow).
-     */
-    hasSecret(name: string, workflow?: string): boolean;
-    /**
-     * Get all stored variable names (global + all workflows, deduplicated).
-     */
-    getAllSecretNames(): string[];
-    /**
-     * Delete a secret by variable name (from workflow scope or global).
-     */
-    deleteSecret(name: string, workflow?: string): boolean;
-    getSecretsFilePath(): string;
-}
-//# sourceMappingURL=secrets-manager.d.ts.map

package/dist/src/yaml/secrets-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets-manager.d.ts","sourceRoot":"","sources":["../../../src/yaml/secrets-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,UAAU,CAAkB;gBAExB,eAAe,CAAC,EAAE,MAAM;IAMpC,OAAO,CAAC,WAAW;IAqCnB;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAkB/B,OAAO,CAAC,WAAW;IAUnB;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM;IAanE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAc;IAEhD;;;OAGG;IACH,OAAO,CAAC,aAAa;IAUrB;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAa9D;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IASjD;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAatE;;OAEG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI7C;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAInD;;OAEG;IACH,iBAAiB,IAAI,MAAM,EAAE;IAQ7B;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAetD,kBAAkB,IAAI,MAAM;CAG7B"}