@invarn/cibuild 2.9.4 → 2.9.7

package/dist/src/yaml/steps/cocoapods-locked-bundler.test.js

@@ -1,282 +0,0 @@
-/**
- * A Gemfile.lock names the bundler that must run it, and the step has to run
- * that one.
- *
- * `BUNDLED WITH 2.3.21` is routine. The step found `bundle` on PATH — on a mac
- * guest that is /usr/bin/bundle, system Ruby 2.6 — and ran `bundle install`,
- * and RubyGems refused to start any bundler but the locked one:
- *
- *   Could not find 'bundler' (2.3.21) required by your Gemfile.lock.
- *   (Gem::GemNotFoundException)
- *
- * System Ruby cannot `gem install` without sudo either, so nothing in the step
- * could recover. These tests run the generated script against stand-in `gem`,
- * `bundle`, `pod` and `brew` executables and read back what it invoked.
- */
-import { execFileSync } from 'node:child_process';
-import { chmodSync, mkdirSync, mkdtempSync, readFileSync, existsSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { describe, test, expect } from '@jest/globals';
-import { CocoapodsInstallStepExecutor } from './ios-deps.js';
-import { testConfig } from './test-config.js';
-const LOCK_WITH_BUNDLER = `GEM
-  remote: https://rubygems.org/
-  specs:
-    cocoapods (1.15.2)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  cocoapods
-
-BUNDLED WITH
-   2.3.21
-`;
-const executable = (path, body) => {
-    writeFileSync(path, `#!/bin/bash\n${body}\n`);
-    chmodSync(path, 0o755);
-};
-/**
- * Runs the step in a fresh project directory. `installed` lists the bundler
- * versions the stand-in `gem` reports as already present.
- */
-const run = async (opts) => {
-    const root = mkdtempSync(join(tmpdir(), 'cibuild-bundler-'));
-    const project = join(root, 'repo');
-    const bin = join(root, 'bin');
-    const scratch = join(root, 'scratch');
-    const log = join(root, 'calls.log');
-    mkdirSync(project);
-    mkdirSync(bin);
-    mkdirSync(scratch);
-    writeFileSync(join(project, 'Podfile'), "platform :ios, '15.0'\n");
-    if (opts.lock !== undefined)
-        writeFileSync(join(project, 'Gemfile.lock'), opts.lock);
-    writeFileSync(join(project, 'Gemfile'), opts.gemfile ?? "gem 'cocoapods'\n");
-    if (opts.rubyVersionFile !== undefined) {
-        writeFileSync(join(project, '.ruby-version'), opts.rubyVersionFile);
-    }
-    const installed = (opts.installed ?? []).join(' ');
-    executable(join(bin, 'gem'), `echo "gem $*" >> '${log}'
-if [ "$1" = "list" ]; then
-  for v in ${installed}; do [ "$v" = "$5" ] && exit 0; done
-  exit 1
-fi
-if [ "$1" = "install" ]; then
-  ${opts.gemInstallFails ? 'exit 1' : 'mkdir -p "$GEM_HOME/bin"; cp "$(dirname "$0")/bundle" "$GEM_HOME/bin/bundle"; exit 0'}
-fi`);
-    executable(join(bin, 'bundle'), `echo "bundle $* (GEM_HOME=$GEM_HOME)" >> '${log}'`);
-    executable(join(bin, 'pod'), `echo "pod $*" >> '${log}'`);
-    executable(join(bin, 'ruby'), `echo "ruby $*" >> '${log}'; printf '2.6.10'`);
-    if (opts.brewRuby || opts.ruby33) {
-        const brewVersion = opts.brewRubyVersion ?? '3.4.1';
-        const keg = join(root, 'homebrew-ruby');
-        const keg33 = join(root, 'homebrew-ruby@3.3');
-        if (opts.brewRuby) {
-            mkdirSync(join(keg, 'bin'), { recursive: true });
-            executable(join(keg, 'bin', 'ruby'), `echo "brew-ruby $*" >> '${log}'; printf '${brewVersion}'`);
-        }
-        if (opts.ruby33) {
-            mkdirSync(join(keg33, 'bin'), { recursive: true });
-            executable(join(keg33, 'bin', 'ruby'), `echo "ruby33 $*" >> '${log}'; printf '3.3.10'`);
-        }
-        executable(join(bin, 'brew'), [
-            `if [ "$*" = "--prefix --installed ruby" ]; then ${opts.brewRuby ? `echo '${keg}'; exit 0` : 'exit 1'}; fi`,
-            `if [ "$*" = "list --versions ruby" ]; then ${opts.brewRuby ? `echo 'ruby ${brewVersion}'; exit 0` : 'exit 1'}; fi`,
-            `if [ "$*" = "--prefix --installed ruby@3.3" ]; then ${opts.ruby33 ? `echo '${keg33}'; exit 0` : 'exit 1'}; fi`,
-            'exit 1',
-        ].join('\n'));
-    }
-    const script = (await new CocoapodsInstallStepExecutor().execute({ source_root_path: project }, {}, testConfig)).script;
-    const scriptPath = join(root, 'step.sh');
-    writeFileSync(scriptPath, script);
-    let output = '';
-    try {
-        output = execFileSync('bash', [scriptPath], {
-            cwd: root,
-            env: { PATH: `${bin}:/usr/bin:/bin`, HOME: root, CIBUILD_SCRATCH: scratch },
-            stdio: 'pipe',
-        }).toString();
-    }
-    catch (err) {
-        output = `${err.stdout ?? ''}${err.stderr ?? ''}\nEXIT ${err.status}`;
-    }
-    const calls = existsSync(log) ? readFileSync(log, 'utf-8').trim().split('\n') : [];
-    return { calls, output, gemHome: join(scratch, 'cibuild-gems'), scratch };
-};
-describe('cocoapods-install runs the bundler Gemfile.lock names', () => {
-    test('installs the locked bundler when it is missing', async () => {
-        const { calls } = await run({ lock: LOCK_WITH_BUNDLER });
-        expect(calls).toContain('gem install bundler -v 2.3.21 --no-document');
-    });
-    test('installs it into a writable GEM_HOME outside the checkout', async () => {
-        const { calls, gemHome } = await run({ lock: LOCK_WITH_BUNDLER });
-        const install = calls.find((c) => c.startsWith('bundle _2.3.21_ install'));
-        expect(install).toBeDefined();
-        expect(install).toContain(`GEM_HOME=${gemHome}`);
-    });
-    test('runs install and pod through that exact version', async () => {
-        const { calls } = await run({ lock: LOCK_WITH_BUNDLER });
-        expect(calls.some((c) => c.startsWith('bundle _2.3.21_ install'))).toBe(true);
-        expect(calls.some((c) => c.startsWith('bundle _2.3.21_ exec pod install'))).toBe(true);
-        // Never an unversioned bundle, which is what RubyGems refused.
-        expect(calls.some((c) => /^bundle (install|exec)/.test(c))).toBe(false);
-    });
-    test('does not reinstall a bundler that is already there', async () => {
-        const { calls } = await run({ lock: LOCK_WITH_BUNDLER, installed: ['2.3.21'] });
-        expect(calls.some((c) => c.startsWith('gem install'))).toBe(false);
-        expect(calls.some((c) => c.startsWith('bundle _2.3.21_ exec pod install'))).toBe(true);
-    });
-    test('a lockfile without BUNDLED WITH keeps plain bundle', async () => {
-        const { calls } = await run({ lock: LOCK_WITH_BUNDLER.replace(/BUNDLED WITH\n.*\n/, '') });
-        expect(calls.some((c) => c.startsWith('gem install'))).toBe(false);
-        expect(calls.some((c) => c.startsWith('bundle exec pod install'))).toBe(true);
-    });
-    test('a Gemfile with no lock keeps plain bundle', async () => {
-        const { calls } = await run({});
-        expect(calls.some((c) => c.startsWith('bundle install'))).toBe(true);
-        expect(calls.some((c) => c.startsWith('bundle exec pod install'))).toBe(true);
-    });
-    test('a project without cocoapods in its Gemfile runs pod directly', async () => {
-        const { calls } = await run({ gemfile: "gem 'fastlane'\n" });
-        expect(calls).toContain('pod install');
-        expect(calls.some((c) => c.startsWith('bundle'))).toBe(false);
-    });
-    test('says which bundler it could not install, and fails', async () => {
-        const { output } = await run({ lock: LOCK_WITH_BUNDLER, gemInstallFails: true });
-        expect(output).toContain('bundler 2.3.21');
-        expect(output).toContain('BUNDLED WITH');
-        expect(output).toMatch(/EXIT [1-9]/);
-    });
-});
-// Issue 08 preferred Homebrew's Ruby whenever it was installed. On the mac
-// image that is Ruby 4, and an old lockfile's gems do not load there: rake
-// 13.0.6 requires `ostruct`, which stopped being a default gem in Ruby 4.0,
-// so a native-extension build died inside rake. The lockfile decides instead:
-// its `RUBY VERSION`, then `.ruby-version`, and system Ruby when neither names
-// one. Homebrew's Ruby only when the named Ruby is 3 or newer.
-describe('cocoapods-install runs the Ruby the project names', () => {
-    const usedBrew = (calls) => calls.some((c) => c.startsWith('brew-ruby'));
-    const usedSystem = (calls) => calls.some((c) => c.startsWith('ruby '));
-    const lockWithRuby = (v) => LOCK_WITH_BUNDLER.replace('BUNDLED WITH', `RUBY VERSION\n   ruby ${v}\n\nBUNDLED WITH`);
-    test('a lock that names no Ruby runs system Ruby, with the locked bundler', async () => {
-        const { calls, output, gemHome } = await run({ lock: LOCK_WITH_BUNDLER, brewRuby: true });
-        expect(usedSystem(calls)).toBe(true);
-        expect(usedBrew(calls)).toBe(false);
-        expect(calls).toContain('gem install bundler -v 2.3.21 --no-document');
-        expect(calls.find((c) => c.startsWith('bundle _2.3.21_ install'))).toContain(`GEM_HOME=${gemHome}`);
-        expect(output).toMatch(/^Ruby: .*\(2\.6\.10\), GEM_HOME: .* — system: lockfile names no Ruby, and no Ruby 3\.3 is installed$/m);
-    });
-    test('a lock whose RUBY VERSION is 3 or newer runs Homebrew Ruby', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('3.3.4p94'), brewRuby: true });
-        expect(usedBrew(calls)).toBe(true);
-        expect(usedSystem(calls)).toBe(false);
-        expect(output).toMatch(/^Ruby: .*homebrew-ruby\/bin\/ruby \(3\.4\.1\), .* — from Gemfile\.lock RUBY VERSION 3\.3\.4$/m);
-    });
-    test('a lock whose RUBY VERSION is 2.x runs system Ruby', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('2.7.2p137'), brewRuby: true });
-        expect(usedBrew(calls)).toBe(false);
-        expect(output).toContain('— from Gemfile.lock RUBY VERSION 2.7.2');
-    });
-    test('the lock outranks .ruby-version', async () => {
-        const { calls, output } = await run({
-            lock: lockWithRuby('3.3.4p94'),
-            rubyVersionFile: '2.7.6\n',
-            brewRuby: true,
-        });
-        expect(usedBrew(calls)).toBe(true);
-        expect(output).toContain('— from Gemfile.lock RUBY VERSION 3.3.4');
-    });
-    test('.ruby-version of 3 or newer runs Homebrew Ruby when the lock names none', async () => {
-        const { calls, output } = await run({ lock: LOCK_WITH_BUNDLER, rubyVersionFile: 'ruby-3.2.2\n', brewRuby: true });
-        expect(usedBrew(calls)).toBe(true);
-        expect(output).toContain('— from .ruby-version 3.2.2');
-    });
-    test('.ruby-version of 2.7 runs system Ruby, and says so', async () => {
-        const { calls, output } = await run({ lock: LOCK_WITH_BUNDLER, rubyVersionFile: '2.7.6\n', brewRuby: true });
-        expect(usedBrew(calls)).toBe(false);
-        expect(usedSystem(calls)).toBe(true);
-        expect(output).toContain('— from .ruby-version 2.7.6');
-    });
-    test('a .ruby-version that names no version is ignored', async () => {
-        const { calls, output } = await run({ lock: LOCK_WITH_BUNDLER, rubyVersionFile: 'system\n', brewRuby: true });
-        expect(usedBrew(calls)).toBe(false);
-        expect(output).toContain('— system: lockfile names no Ruby');
-    });
-    test('Ruby 3 named, no Homebrew Ruby installed: system Ruby, and says so', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('3.3.4p94') });
-        expect(usedSystem(calls)).toBe(true);
-        expect(output).toContain('— from Gemfile.lock RUBY VERSION 3.3.4, but no Homebrew Ruby is installed');
-    });
-    test('a project without cocoapods in its Gemfile never picks a Ruby', async () => {
-        const { calls } = await run({ gemfile: "gem 'fastlane'\n", rubyVersionFile: '3.3.0\n', brewRuby: true });
-        expect(calls).toContain('pod install');
-        expect(usedBrew(calls)).toBe(false);
-        expect(usedSystem(calls)).toBe(false);
-    });
-});
-// With the lock naming no Ruby, the step chose system Ruby 2.6 as above, and the build still died:
-// the Xcode 26.4 SDK's Ruby 2.6 headers have no `ruby/config.h`, so no native extension (json, ffi)
-// compiles. Homebrew's Ruby is 4, where the lock's rake 13.0.6 cannot load. So a Ruby 3.3 runs when
-// the lock names no Ruby or one below 3; a named 3.x runs 3.3 unless Homebrew's matches it better; a
-// named 4.x runs Homebrew's. A machine without 3.3 behaves as before.
-describe('cocoapods-install runs Ruby 3.3 where system Ruby cannot build native gems', () => {
-    const used33 = (calls) => calls.some((c) => c.startsWith('ruby33'));
-    const usedBrew = (calls) => calls.some((c) => c.startsWith('brew-ruby'));
-    const usedSystem = (calls) => calls.some((c) => c.startsWith('ruby '));
-    const lockWithRuby = (v) => LOCK_WITH_BUNDLER.replace('BUNDLED WITH', `RUBY VERSION\n   ruby ${v}\n\nBUNDLED WITH`);
-    const image = { brewRuby: true, brewRubyVersion: '4.0.2', ruby33: true };
-    test('a lock that names no Ruby runs 3.3, with the locked bundler', async () => {
-        const { calls, output, gemHome } = await run({ lock: LOCK_WITH_BUNDLER, ...image });
-        expect(used33(calls)).toBe(true);
-        expect(usedSystem(calls)).toBe(false);
-        expect(usedBrew(calls)).toBe(false);
-        expect(calls).toContain('gem install bundler -v 2.3.21 --no-document');
-        expect(calls.find((c) => c.startsWith('bundle _2.3.21_ install'))).toContain(`GEM_HOME=${gemHome}`);
-        expect(output).toMatch(/^Ruby: .*homebrew-ruby@3\.3\/bin\/ruby \(3\.3\.10\), GEM_HOME: .* — Ruby 3\.3: lockfile names no Ruby, and system Ruby 2\.6 cannot build native gems$/m);
-    });
-    test('a lock whose RUBY VERSION is 2.x runs 3.3', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('2.7.2p137'), ...image });
-        expect(used33(calls)).toBe(true);
-        expect(output).toContain('— from Gemfile.lock RUBY VERSION 2.7.2, run on Ruby 3.3: system Ruby 2.6 cannot build native gems');
-    });
-    test('a 2.x .ruby-version runs 3.3', async () => {
-        const { calls } = await run({ lock: LOCK_WITH_BUNDLER, rubyVersionFile: '2.7.6\n', ...image });
-        expect(used33(calls)).toBe(true);
-    });
-    test('a named 3.x that Homebrew does not match runs 3.3', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('3.2.2'), ...image });
-        expect(used33(calls)).toBe(true);
-        expect(usedBrew(calls)).toBe(false);
-        expect(output).toContain('— from Gemfile.lock RUBY VERSION 3.2.2, run on Ruby 3.3');
-    });
-    test('a named 3.3 runs 3.3 and needs no aside', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('3.3.4p94'), ...image });
-        expect(used33(calls)).toBe(true);
-        expect(output).toMatch(/— from Gemfile\.lock RUBY VERSION 3\.3\.4$/m);
-    });
-    test('a named 3.x that Homebrew matches runs Homebrew Ruby', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('3.4.1'), brewRuby: true, brewRubyVersion: '3.4.7', ruby33: true });
-        expect(usedBrew(calls)).toBe(true);
-        expect(used33(calls)).toBe(false);
-        expect(output).toMatch(/— from Gemfile\.lock RUBY VERSION 3\.4\.1$/m);
-    });
-    test('a named 4.x runs Homebrew Ruby', async () => {
-        const { calls } = await run({ lock: lockWithRuby('4.0.1'), ...image });
-        expect(usedBrew(calls)).toBe(true);
-        expect(used33(calls)).toBe(false);
-    });
-    test('without 3.3, a lock that names no Ruby runs system Ruby, and says 3.3 is missing', async () => {
-        const { calls, output } = await run({ lock: LOCK_WITH_BUNDLER, brewRuby: true, brewRubyVersion: '4.0.2' });
-        expect(usedSystem(calls)).toBe(true);
-        expect(output).toContain('— system: lockfile names no Ruby, and no Ruby 3.3 is installed');
-    });
-    test('without 3.3, a 2.x lock runs system Ruby, and says 3.3 is missing', async () => {
-        const { calls, output } = await run({ lock: lockWithRuby('2.7.2p137'), brewRuby: true });
-        expect(usedSystem(calls)).toBe(true);
-        expect(output).toContain('— from Gemfile.lock RUBY VERSION 2.7.2, and no Ruby 3.3 is installed');
-    });
-});
-//# sourceMappingURL=cocoapods-locked-bundler.test.js.map

package/dist/src/yaml/steps/cocoapods-skip-if-absent.test.d.ts

@@ -1,17 +0,0 @@
-/**
- * `cocoapods-install` can be asked to skip a project that has no Podfile.
- *
- * The default stays a hard failure, because a pipeline that names this step is
- * asserting the project uses CocoaPods and a missing Podfile is a real error.
- *
- * The iOS template needs the other behaviour: it serves every iOS project and a
- * large share of them resolve dependencies through Swift Package Manager, where
- * "Podfile not found" would be a CocoaPods error in a project that does not use
- * CocoaPods. Until this input existed the template could not use this step at
- * all, so it ran `pod install` from an inline `script@1.0.0` — which put it out
- * of reach of the refused-fetch retry this step carries. That is the gap this
- * closes, and it is why the release order matters: this must ship before the
- * template is pointed at the step, or every SPM-only iOS repo breaks.
- */
-export {};
-//# sourceMappingURL=cocoapods-skip-if-absent.test.d.ts.map

package/dist/src/yaml/steps/cocoapods-skip-if-absent.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cocoapods-skip-if-absent.test.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/cocoapods-skip-if-absent.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/src/yaml/steps/cocoapods-skip-if-absent.test.js

@@ -1,132 +0,0 @@
-/**
- * `cocoapods-install` can be asked to skip a project that has no Podfile.
- *
- * The default stays a hard failure, because a pipeline that names this step is
- * asserting the project uses CocoaPods and a missing Podfile is a real error.
- *
- * The iOS template needs the other behaviour: it serves every iOS project and a
- * large share of them resolve dependencies through Swift Package Manager, where
- * "Podfile not found" would be a CocoaPods error in a project that does not use
- * CocoaPods. Until this input existed the template could not use this step at
- * all, so it ran `pod install` from an inline `script@1.0.0` — which put it out
- * of reach of the refused-fetch retry this step carries. That is the gap this
- * closes, and it is why the release order matters: this must ship before the
- * template is pointed at the step, or every SPM-only iOS repo breaks.
- */
-import { describe, test, expect } from '@jest/globals';
-import { CocoapodsInstallStepExecutor } from './ios-deps.js';
-import { testConfig } from './test-config.js';
-const build = async (inputs = {}) => {
-    const executor = new CocoapodsInstallStepExecutor();
-    const result = await executor.execute(inputs, {}, testConfig);
-    return result.script;
-};
-/** The body of the `if [ ! -f "Podfile" ]` branch, which is what changes. */
-const absentBranch = (script) => {
-    const lines = script.split('\n');
-    const start = lines.findIndex((l) => l.includes('if [ ! -f "Podfile" ]'));
-    expect(start).toBeGreaterThanOrEqual(0);
-    const end = lines.findIndex((l, i) => i > start && l.trim() === 'fi');
-    return lines.slice(start, end + 1).join('\n');
-};
-describe('by default a missing Podfile is still an error', () => {
-    test('exits non-zero', async () => {
-        expect(absentBranch(await build())).toContain('exit 1');
-    });
-    test('says what was not found', async () => {
-        expect(absentBranch(await build())).toContain('Podfile not found');
-    });
-    test('an explicit false is the same as omitting it', async () => {
-        expect(absentBranch(await build({ skip_if_absent: false }))).toContain('exit 1');
-    });
-});
-describe('skip_if_absent turns it into a clean no-op', () => {
-    test('exits zero instead of one', async () => {
-        const branch = absentBranch(await build({ skip_if_absent: true }));
-        expect(branch).toContain('exit 0');
-        expect(branch).not.toContain('exit 1');
-    });
-    test('says it skipped rather than that something failed', async () => {
-        const branch = absentBranch(await build({ skip_if_absent: true }));
-        expect(branch).toContain('skipping CocoaPods install');
-        expect(branch).not.toContain('Error');
-    });
-    test('still runs pod install when a Podfile IS present', async () => {
-        // The skip is a branch, not a mode — the rest of the step is untouched.
-        const script = await build({ skip_if_absent: true });
-        expect(script).toContain('POD_INVOCATION');
-        expect(script).toContain('$POD_INVOCATION $POD_CMD');
-    });
-    test('still wraps the pod fetch in the refused-fetch retry', async () => {
-        // This is the entire point of letting the template use the step.
-        const script = await build({ skip_if_absent: true });
-        expect(script).toContain('cibuild_fetch_was_refused');
-        expect(script).toContain('CIBUILD_FETCH_MAX_ATTEMPTS');
-    });
-    test('still chooses between bundle exec and bare pod', async () => {
-        const script = await build({ skip_if_absent: true });
-        expect(script).toContain('USE_BUNDLE_EXEC');
-        expect(script).toContain('$BUNDLE_CMD exec pod');
-    });
-});
-/**
- * The inline script the template used did two things, not one: it skipped a
- * project with no Podfile, AND it looked for that Podfile beside the Xcode
- * project rather than at the repository root. Both have to exist as inputs or
- * the template cannot be switched — about a quarter of iOS repositories keep
- * the app one directory down, and template inputs interpolate variables, not
- * `$(dirname …)`.
- */
-describe('project_path finds the Podfile beside the project', () => {
-    test('changes into the project directory, not the repo root', async () => {
-        const script = await build({ project_path: 'ios/MyApp.xcworkspace' });
-        expect(script).toContain(`WORK_DIR="$(dirname 'ios/MyApp.xcworkspace')"`);
-        expect(script).toContain('cd "$WORK_DIR"');
-    });
-    test('does not fall back to CIBUILD_SOURCE_DIR when it is given', async () => {
-        const script = await build({ project_path: 'ios/MyApp.xcworkspace' });
-        expect(script).not.toContain('cd "$CIBUILD_SOURCE_DIR"');
-    });
-    test('still falls back to CIBUILD_SOURCE_DIR when nothing is given', async () => {
-        expect(await build()).toContain('cd "$CIBUILD_SOURCE_DIR"');
-    });
-    test('an explicit source_root_path still wins over project_path', async () => {
-        const script = await build({
-            project_path: 'ios/MyApp.xcworkspace',
-            source_root_path: 'somewhere/else',
-        });
-        expect(script).toContain(`cd 'somewhere/else'`);
-        expect(script).not.toContain('dirname');
-    });
-    test('composes with skip_if_absent, which is how the template uses it', async () => {
-        const script = await build({ project_path: 'ios/MyApp.xcworkspace', skip_if_absent: true });
-        expect(script).toContain(`WORK_DIR="$(dirname 'ios/MyApp.xcworkspace')"`);
-        expect(absentBranch(script)).toContain('exit 0');
-        expect(script).toContain('cibuild_fetch_was_refused');
-    });
-});
-/**
- * The exact input combination the iOS template sends. Pinned here because the
- * template lives in another repository and deploys on a different cadence, so
- * nothing else would notice this step drifting away from what it sends.
- */
-describe('the iOS template combination', () => {
-    const templateInputs = {
-        project_path: 'MyApp.xcworkspace',
-        skip_if_absent: true,
-        command: 'install --repo-update',
-    };
-    test('produces pod install --repo-update, flags intact', async () => {
-        const script = await build(templateInputs);
-        expect(script).toContain('POD_CMD="install --repo-update"');
-    });
-    test('runs that under the refused-fetch retry, exactly once', async () => {
-        const script = await build(templateInputs);
-        expect(script).toContain('$POD_INVOCATION $POD_CMD');
-        expect(script.split('CIBUILD_FETCH_MAX_ATTEMPTS=').length - 1).toBe(1);
-    });
-    test('skips instead of failing when the repo has no Podfile', async () => {
-        expect(absentBranch(await build(templateInputs))).toContain('exit 0');
-    });
-});
-//# sourceMappingURL=cocoapods-skip-if-absent.test.js.map

package/dist/src/yaml/steps/envstore-loader.test.d.ts

@@ -1,15 +0,0 @@
-/**
- * The envstore loader carried by every generated step.
- *
- * These tests drive the *reader* — the preamble `createBashScript` prepends —
- * directly, with hostile envstore content written by hand. Going through a
- * producer such as git-clone would only prove the one value that producer
- * happens to write; the defect lives in the reader, so the reader is what gets
- * the hostile input.
- *
- * Each case actually runs bash. Assertions are made on files the script body
- * writes with `printf '%s'`, not on stdout, so a value's own newlines and
- * quoting cannot be confused with the test's framing.
- */
-export {};
-//# sourceMappingURL=envstore-loader.test.d.ts.map

package/dist/src/yaml/steps/envstore-loader.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"envstore-loader.test.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/envstore-loader.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/src/yaml/steps/envstore-loader.test.js

@@ -1,143 +0,0 @@
-/**
- * The envstore loader carried by every generated step.
- *
- * These tests drive the *reader* — the preamble `createBashScript` prepends —
- * directly, with hostile envstore content written by hand. Going through a
- * producer such as git-clone would only prove the one value that producer
- * happens to write; the defect lives in the reader, so the reader is what gets
- * the hostile input.
- *
- * Each case actually runs bash. Assertions are made on files the script body
- * writes with `printf '%s'`, not on stdout, so a value's own newlines and
- * quoting cannot be confused with the test's framing.
- */
-import { describe, test, expect, beforeEach, afterEach } from '@jest/globals';
-import { spawnSync } from 'child_process';
-import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync, existsSync } from 'fs';
-import { join } from 'path';
-import { tmpdir } from 'os';
-import { BaseStepExecutor } from './base.js';
-/** Exposes the protected preamble builder so the reader can be tested on its own. */
-class PreambleProbe extends BaseStepExecutor {
-    async execute(_inputs, _env, _config) {
-        throw new Error('not used');
-    }
-    build(scriptContent) {
-        return this.createBashScript(scriptContent, 'envstore-loader-probe');
-    }
-}
-describe('envstore loader', () => {
-    let workDir;
-    beforeEach(() => {
-        workDir = mkdtempSync(join(tmpdir(), 'envstore-loader-'));
-    });
-    afterEach(() => {
-        rmSync(workDir, { recursive: true, force: true });
-    });
-    /**
-     * Writes an envstore, runs the generated preamble over it, and captures the
-     * named variables as the step body sees them.
-     */
-    function run(envs, capture, extraBody = '') {
-        const storePath = join(workDir, 'envstore.json');
-        const outDir = join(workDir, 'captured');
-        mkdirSync(outDir, { recursive: true });
-        writeFileSync(storePath, JSON.stringify({ envs: envs.map(e => ({ ...e, sensitive: false })) }), 'utf-8');
-        const body = [
-            ...capture.map(name => `printf '%s' "\${${name}-}" > "$CAPTURE_DIR/${name}"`),
-            extraBody,
-        ].join('\n');
-        const scriptPath = join(workDir, 'step.sh');
-        writeFileSync(scriptPath, new PreambleProbe().build(body), 'utf-8');
-        const proc = spawnSync('bash', [scriptPath], {
-            cwd: workDir,
-            encoding: 'utf-8',
-            env: {
-                ...process.env,
-                ENVMAN_ENVSTORE_PATH: storePath,
-                CAPTURE_DIR: outDir,
-            },
-        });
-        return {
-            status: proc.status,
-            stderr: proc.stderr ?? '',
-            captured(name) {
-                const file = join(outDir, name);
-                return existsSync(file) ? readFileSync(file, 'utf-8') : undefined;
-            },
-        };
-    }
-    test('a value containing newlines round-trips byte for byte', () => {
-        const body = 'first line\nsecond line\nthird line';
-        const result = run([{ key: 'GIT_CLONE_COMMIT_MESSAGE_BODY', value: body }], ['GIT_CLONE_COMMIT_MESSAGE_BODY']);
-        expect(result.status).toBe(0);
-        expect(result.captured('GIT_CLONE_COMMIT_MESSAGE_BODY')).toBe(body);
-    });
-    test('security: a value whose lines look like assignments sets nothing', () => {
-        const hostile = 'looks harmless\nPATH=/tmp/attacker-controlled\nNODE_OPTIONS=--require=/tmp/evil.js';
-        const result = run([{ key: 'GIT_CLONE_COMMIT_MESSAGE_BODY', value: hostile }], ['GIT_CLONE_COMMIT_MESSAGE_BODY', 'PATH', 'NODE_OPTIONS']);
-        expect(result.status).toBe(0);
-        // The value arrives intact...
-        expect(result.captured('GIT_CLONE_COMMIT_MESSAGE_BODY')).toBe(hostile);
-        // ...and none of its lines became a variable. Both are compared against
-        // what the parent environment held, which is what "unchanged" means here:
-        // the test runner itself sets NODE_OPTIONS.
-        expect(result.captured('PATH')).toBe(process.env.PATH ?? '');
-        expect(result.captured('NODE_OPTIONS')).toBe(process.env.NODE_OPTIONS ?? '');
-        expect(result.captured('NODE_OPTIONS')).not.toContain('/tmp/evil.js');
-    });
-    test('awkward bytes in a value all survive unchanged', () => {
-        const cases = [
-            { key: 'HAS_EQUALS', value: 'a=b=c' },
-            { key: 'HAS_QUOTES', value: `single ' double " both '"` },
-            { key: 'HAS_BACKTICKS', value: 'a `whoami` b' },
-            { key: 'HAS_SUBSHELL', value: 'a $(whoami) b ${HOME} c' },
-            { key: 'HAS_TRAILING_NEWLINE', value: 'ends with a newline\n' },
-            { key: 'HAS_LONE_CR', value: 'before\rafter' },
-            { key: 'HAS_BACKSLASHES', value: 'C:\\path\\to\\thing and \\n literal' },
-            { key: 'HAS_LEADING_SPACE', value: '   padded   ' },
-        ];
-        const result = run(cases, cases.map(c => c.key));
-        expect(result.status).toBe(0);
-        for (const { key, value } of cases) {
-            expect({ key, value: result.captured(key) }).toEqual({ key, value });
-        }
-    });
-    test('a non-identifier key is skipped without failing the step under set -e', () => {
-        const result = run([
-            { key: 'not a valid identifier', value: 'x' },
-            { key: '2_LEADING_DIGIT', value: 'x' },
-            { key: '', value: 'x' },
-            { key: 'GOOD_KEY', value: 'kept' },
-        ], ['GOOD_KEY'], 'echo reached-the-end');
-        expect(result.status).toBe(0);
-        expect(result.captured('GOOD_KEY')).toBe('kept');
-        expect(result.stderr).not.toContain('not a valid identifier');
-    });
-    test('regression: a multi-line commit message does not end the step', () => {
-        // The shape that killed the first real proof on 2026-08-30: git-clone
-        // publishes the commit body, and every later step died loading it.
-        const result = run([
-            { key: 'GIT_CLONE_COMMIT_MESSAGE_SUBJECT', value: 'Add Invarn pipeline' },
-            {
-                key: 'GIT_CLONE_COMMIT_MESSAGE_BODY',
-                value: 'cibuild sets CIBUILD_GIT_BRANCH, so pre-execution validation asked for a\nvalue nothing provides.\n\nSecond paragraph.',
-            },
-        ], ['GIT_CLONE_COMMIT_MESSAGE_SUBJECT'], 'echo step-completed');
-        expect(result.status).toBe(0);
-        expect(result.captured('GIT_CLONE_COMMIT_MESSAGE_SUBJECT')).toBe('Add Invarn pipeline');
-        expect(result.stderr).not.toContain('not a valid identifier');
-    });
-    test('an absent envstore leaves the step to run normally', () => {
-        const scriptPath = join(workDir, 'no-store.sh');
-        writeFileSync(scriptPath, new PreambleProbe().build('echo ran'), 'utf-8');
-        const proc = spawnSync('bash', [scriptPath], {
-            cwd: workDir,
-            encoding: 'utf-8',
-            env: { ...process.env, ENVMAN_ENVSTORE_PATH: join(workDir, 'missing.json') },
-        });
-        expect(proc.status).toBe(0);
-        expect(proc.stdout).toContain('ran');
-    });
-});
-//# sourceMappingURL=envstore-loader.test.js.map

package/dist/src/yaml/steps/fastlane.d.ts

@@ -1,27 +0,0 @@
-/**
- * Fastlane step: run a fastlane lane
- */
-import { BaseStepExecutor } from './base.js';
-import type { StepDef, CIConfig } from '../../types.js';
-import type { ValidationRequirement, StepOutput } from '../validation-types.js';
-export interface FastlaneInputs {
-    /** Fastlane lane to run (required) */
-    lane?: string;
-    /** Working directory (parent of fastlane directory) */
-    work_dir?: string;
-    /** Update fastlane gem before run (true/false) */
-    update_fastlane?: string;
-    /** Enable verbose logging (yes/no) */
-    verbose_log?: string;
-    /** Enable collecting cache files (yes/no) */
-    enable_cache?: string;
-}
-/**
- * Runs a fastlane lane with Gemfile detection and optional gem update.
- */
-export declare class FastlaneStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(_inputs: FastlaneInputs, _env: Record<string, string>, _config: CIConfig): ValidationRequirement[];
-    getOutputs(): StepOutput[];
-    execute(inputs: FastlaneInputs, _env: Record<string, string>, _config: CIConfig): Promise<StepDef>;
-}
-//# sourceMappingURL=fastlane.d.ts.map

package/dist/src/yaml/steps/fastlane.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fastlane.d.ts","sourceRoot":"","sources":["../../../../src/yaml/steps/fastlane.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhF,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,gBAAgB;IACxD,yBAAyB,CACvB,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,GAChB,qBAAqB,EAAE;IAM1B,UAAU,IAAI,UAAU,EAAE;IAIpB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAuEzG"}