@invarn/cibuild 2.9.5 → 2.9.7

package/dist/src/commands/edit.test.js

@@ -1,45 +0,0 @@
-/**
- * Unit tests for edit-command helpers.
- * Focused on the dual-read of meta.invarn + meta.cibuild.io for the platform hint.
- */
-import { describe, test, expect } from '@jest/globals';
-import { detectWorkflowPlatform } from './edit.js';
-describe('detectWorkflowPlatform — meta dual-read', () => {
-    function pipelineWithMeta(meta) {
-        return {
-            format_version: '4',
-            meta,
-            workflows: {
-                primary: {
-                    steps: [{ 'script@1.0.0': { inputs: {} } }],
-                },
-            },
-        };
-    }
-    test('reads platform from meta.invarn when only invarn is present', () => {
-        const pipeline = pipelineWithMeta({
-            invarn: { platform: 'ios' },
-        });
-        expect(detectWorkflowPlatform(pipeline, 'primary')).toBe('ios');
-    });
-    test('prefers meta.invarn.platform over meta.cibuild.io.platform when both are present', () => {
-        const pipeline = pipelineWithMeta({
-            invarn: { platform: 'ios' },
-            'cibuild.io': { platform: 'android' },
-        });
-        expect(detectWorkflowPlatform(pipeline, 'primary')).toBe('ios');
-    });
-    test('falls back to meta.cibuild.io.platform when meta.invarn is absent', () => {
-        const pipeline = pipelineWithMeta({
-            'cibuild.io': { platform: 'android' },
-        });
-        expect(detectWorkflowPlatform(pipeline, 'primary')).toBe('android');
-    });
-    test('maps kmm to ios from meta.invarn', () => {
-        const pipeline = pipelineWithMeta({
-            invarn: { platform: 'kmm' },
-        });
-        expect(detectWorkflowPlatform(pipeline, 'primary')).toBe('ios');
-    });
-});
-//# sourceMappingURL=edit.test.js.map

package/dist/src/commands/fidelity-trim.d.ts

@@ -1,13 +0,0 @@
-/**
- * `ci fidelity-trim <in.png> <out.png> [<aligned.png> <reference.png>]`
- *
- * Internal command: the trim/align helper the generated UI-fidelity render
- * scripts (iOS + Android) spawn after each screen renders. It crops a render
- * to its content bounding box in place, optionally writes a reference-sized
- * aligned copy, and prints a `TRIMDIMS` line — the exact argv/stdout/exit-code
- * contract of the retired embedded Swift (CoreGraphics) helper, now pure JS so
- * the same bytes run on macOS and Linux workers.
- */
-/** Runs the helper and returns its exit status (0 on success). */
-export declare function handleFidelityTrimCommand(args: string[]): number;
-//# sourceMappingURL=fidelity-trim.d.ts.map

package/dist/src/commands/fidelity-trim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fidelity-trim.d.ts","sourceRoot":"","sources":["../../../src/commands/fidelity-trim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,kEAAkE;AAClE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAKhE"}

package/dist/src/commands/fidelity-trim.js

@@ -1,21 +0,0 @@
-/**
- * `ci fidelity-trim <in.png> <out.png> [<aligned.png> <reference.png>]`
- *
- * Internal command: the trim/align helper the generated UI-fidelity render
- * scripts (iOS + Android) spawn after each screen renders. It crops a render
- * to its content bounding box in place, optionally writes a reference-sized
- * aligned copy, and prints a `TRIMDIMS` line — the exact argv/stdout/exit-code
- * contract of the retired embedded Swift (CoreGraphics) helper, now pure JS so
- * the same bytes run on macOS and Linux workers.
- */
-import { runTrimAlign } from '../yaml/steps/trim-align.js';
-/** Runs the helper and returns its exit status (0 on success). */
-export function handleFidelityTrimCommand(args) {
-    const result = runTrimAlign(args);
-    if (result.stdout)
-        process.stdout.write(result.stdout);
-    if (result.stderr)
-        process.stderr.write(result.stderr);
-    return result.status;
-}
-//# sourceMappingURL=fidelity-trim.js.map

package/dist/src/commands/fidelity-trim.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Tests for the `ci fidelity-trim` command — the process seam over the pure
- * trim/align core. The generated fidelity render scripts (iOS + Android) spawn
- * this instead of the retired Swift helper, so the argv contract, TRIMDIMS
- * stdout line, and exit codes are load-bearing.
- */
-export {};
-//# sourceMappingURL=fidelity-trim.test.d.ts.map

package/dist/src/commands/fidelity-trim.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fidelity-trim.test.d.ts","sourceRoot":"","sources":["../../../src/commands/fidelity-trim.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/src/commands/fidelity-trim.test.js

@@ -1,79 +0,0 @@
-/**
- * Tests for the `ci fidelity-trim` command — the process seam over the pure
- * trim/align core. The generated fidelity render scripts (iOS + Android) spawn
- * this instead of the retired Swift helper, so the argv contract, TRIMDIMS
- * stdout line, and exit codes are load-bearing.
- */
-import { mkdtempSync, rmSync, writeFileSync, readFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { PNG } from 'pngjs';
-import { describe, test, expect, afterAll, jest } from '@jest/globals';
-import { handleFidelityTrimCommand } from './fidelity-trim.js';
-const dirs = [];
-function scene() {
-    const dir = mkdtempSync(join(tmpdir(), 'fidelity-trim-cmd-'));
-    dirs.push(dir);
-    return dir;
-}
-afterAll(() => {
-    for (const dir of dirs) {
-        try {
-            rmSync(dir, { recursive: true, force: true });
-        }
-        catch {
-            // best effort
-        }
-    }
-});
-function craftOpaqueRect(w, h, x, y, rw, rh) {
-    const png = new PNG({ width: w, height: h });
-    for (let yy = y; yy < y + rh; yy++) {
-        for (let xx = x; xx < x + rw; xx++) {
-            const i = (yy * w + xx) * 4;
-            png.data[i] = 255;
-            png.data[i + 3] = 255;
-        }
-    }
-    return PNG.sync.write(png);
-}
-describe('handleFidelityTrimCommand', () => {
-    test('trims in place, prints TRIMDIMS to stdout, returns 0', () => {
-        const dir = scene();
-        const input = join(dir, 'in.png');
-        writeFileSync(input, craftOpaqueRect(100, 80, 10, 20, 30, 40));
-        const out = join(dir, 'out.png');
-        const stdout = jest.spyOn(process.stdout, 'write').mockImplementation(() => true);
-        const stderr = jest.spyOn(process.stderr, 'write').mockImplementation(() => true);
-        try {
-            const status = handleFidelityTrimCommand([input, out]);
-            expect(status).toBe(0);
-            const printed = stdout.mock.calls.map((c) => String(c[0])).join('');
-            expect(printed).toBe('TRIMDIMS 30 40 0 0 100 80 10 20\n');
-            expect(stderr).not.toHaveBeenCalled();
-        }
-        finally {
-            stdout.mockRestore();
-            stderr.mockRestore();
-        }
-        const trimmed = PNG.sync.read(readFileSync(out));
-        expect([trimmed.width, trimmed.height]).toEqual([30, 40]);
-    });
-    test('propagates the helper exit code and stderr on failure', () => {
-        const dir = scene();
-        const stdout = jest.spyOn(process.stdout, 'write').mockImplementation(() => true);
-        const stderr = jest.spyOn(process.stderr, 'write').mockImplementation(() => true);
-        try {
-            const status = handleFidelityTrimCommand([join(dir, 'missing.png'), join(dir, 'out.png')]);
-            expect(status).toBe(65);
-            const printed = stderr.mock.calls.map((c) => String(c[0])).join('');
-            expect(printed).toContain('could not read image at');
-            expect(stdout).not.toHaveBeenCalled();
-        }
-        finally {
-            stdout.mockRestore();
-            stderr.mockRestore();
-        }
-    });
-});
-//# sourceMappingURL=fidelity-trim.test.js.map

package/dist/src/commands/file-secret-collector.d.ts

@@ -1,50 +0,0 @@
-import { SecretsManager } from "../yaml/secrets-manager.js";
-export interface WorkflowGroup {
-    label: string;
-    workflows: string[];
-}
-export interface FileSecretConfig {
-    /** Display name used in prompts, e.g. "keystore" */
-    displayName: string;
-    /** The secret variable name, e.g. "KEYSTORE_BASE64" */
-    secretName: string;
-    /** Returns true if a filename matches (e.g. name === "google-services.json") */
-    fileMatch: (name: string) => boolean;
-    /**
-     * Narrows the candidates by their path relative to the project root, once
-     * `fileMatch` has found them by name.
-     *
-     * A credential Android keeps one copy of per product flavor has the same
-     * basename in every source set — four `google-services.json` under
-     * `app/`, `app/src/dev/`, `app/src/prod/` and `app/src/ciDynamic/` — so a
-     * name is not enough to say which one a workflow needs. Without this the
-     * single-candidate auto-apply below never fires on a flavored repository,
-     * and the answer comes from a prompt or from whichever the walk reached
-     * first.
-     */
-    pathMatch?: (relativePath: string) => boolean;
-    /** How to read the file into a string value. Defaults to "text". */
-    readAs?: "text" | "base64";
-    /** Workflow groups to scope the secret to */
-    workflowGroups: WorkflowGroup[];
-    /**
-     * When true, prompt for the relative project path where this file should
-     * be placed at runtime whenever content is provided manually (not picked
-     * from disk candidates). The answer is stored in the returned paths map.
-     */
-    promptTargetPath?: boolean;
-}
-/**
- * Maps each workflow name to the relative path of the file that was selected
- * or auto-detected from disk. Empty when the value was pasted manually.
- */
-export type FileSecretPaths = Record<string, string>;
-export declare function findProjectFiles(dir: string, match: (name: string) => boolean): string[];
-/**
- * Finds, prompts for, and stores a file-based secret.
- * Only prompts for workflow groups that don't already have the secret.
- * Returns a map of workflow → relative file path for every workflow
- * that was resolved from disk (not from a manual paste).
- */
-export declare function collectFileSecret(config: FileSecretConfig, cwd: string, secretsManager: SecretsManager, nonInteractive?: boolean): Promise<FileSecretPaths>;
-//# sourceMappingURL=file-secret-collector.d.ts.map

package/dist/src/commands/file-secret-collector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-secret-collector.d.ts","sourceRoot":"","sources":["../../../src/commands/file-secret-collector.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3B,6CAA6C;IAC7C,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAMrD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,EAAE,CAkBxF;AAiDD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,cAAc,EAC9B,cAAc,UAAQ,GACrB,OAAO,CAAC,eAAe,CAAC,CA6I1B"}

package/dist/src/commands/file-secret-collector.js

@@ -1,217 +0,0 @@
-import { resolve, relative, sep } from "node:path";
-import { readdirSync, readFileSync } from "node:fs";
-import * as readline from "node:readline";
-import prompts from "prompts";
-const SKIP_DIRS = new Set([
-    ".git", ".ci", "build", "dist", "node_modules", ".gradle", ".idea",
-]);
-export function findProjectFiles(dir, match) {
-    const results = [];
-    let entries;
-    try {
-        entries = readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return results;
-    }
-    for (const entry of entries) {
-        if (entry.isDirectory()) {
-            if (!SKIP_DIRS.has(entry.name)) {
-                results.push(...findProjectFiles(resolve(dir, entry.name), match));
-            }
-        }
-        else if (match(entry.name)) {
-            results.push(resolve(dir, entry.name));
-        }
-    }
-    return results;
-}
-/**
- * Reads multiline content from stdin via readline.
- * The user terminates input by typing .done on its own line.
- */
-function readMultilineContent(label) {
-    return new Promise((resolvePromise) => {
-        console.log(`\n  ${label}`);
-        console.log("  Paste content, then type .done on its own line and press Enter:\n");
-        if (process.stdin.isTTY) {
-            try {
-                process.stdin.setRawMode(false);
-            }
-            catch { /* ignore */ }
-        }
-        process.stdin.resume();
-        const rl = readline.createInterface({ input: process.stdin, terminal: false });
-        const lines = [];
-        rl.on("line", (line) => {
-            if (line.trim() === ".done") {
-                rl.close();
-                return;
-            }
-            lines.push(line);
-        });
-        rl.once("close", () => {
-            process.stdin.pause();
-            resolvePromise(lines.length > 0 ? lines.join("\n") : undefined);
-        });
-        rl.on("SIGINT", () => { rl.close(); resolvePromise(undefined); });
-    });
-}
-/**
- * Prompts the user for the relative path in the project where the file
- * should be written at runtime (e.g. "app/release.jks").
- */
-async function promptTargetPathInProject(displayName) {
-    const { targetPath } = await prompts({
-        type: "text",
-        name: "targetPath",
-        message: `Where should the ${displayName} be placed in the project? (e.g. app/release.jks)`,
-    });
-    return targetPath?.trim() || undefined;
-}
-/**
- * Finds, prompts for, and stores a file-based secret.
- * Only prompts for workflow groups that don't already have the secret.
- * Returns a map of workflow → relative file path for every workflow
- * that was resolved from disk (not from a manual paste).
- */
-export async function collectFileSecret(config, cwd, secretsManager, nonInteractive = false) {
-    const paths = {};
-    const readContent = (p) => config.readAs === "base64"
-        ? readFileSync(p).toString("base64")
-        : readFileSync(p, "utf-8");
-    const relativeToCwd = (p) => relative(cwd, p).split(sep).join("/");
-    const candidates = findProjectFiles(cwd, config.fileMatch).filter((p) => config.pathMatch?.(relativeToCwd(p)) ?? true);
-    // A stored value answers "what are the bytes". It does not answer "where does
-    // each workflow write them", and `.cibuild-secrets.json` cannot: the store
-    // records values and never targets. So a caller that consumes the returned
-    // map has to be asked whichever state the value is in.
-    //
-    // `promptTargetPath` marks that caller — the keystore, the only one whose
-    // return value the generator assigns. Conflating the two questions lost the
-    // keystore split on every repository that had ever run `ci init`: a *global*
-    // entry satisfies `hasSecret` for every workflow, so nothing was pending, an
-    // empty map went back, and the generator's fallback handed all three
-    // workflows one path. A fresh clone asked and split correctly, which is why
-    // no fixture-built test saw it.
-    //
-    // Only when there is something on disk to choose between. With no candidate
-    // the question has no answer worth interrupting for, and the short-circuit is
-    // still the kinder branch.
-    const callerNeedsTargets = config.promptTargetPath === true && candidates.length > 0;
-    const pendingGroups = config.workflowGroups.filter((g) => callerNeedsTargets ||
-        !g.workflows.every((wf) => secretsManager.hasSecret(config.secretName, wf)));
-    if (pendingGroups.length === 0) {
-        console.log(`   ✅ ${config.secretName} already in .cibuild-secrets.json — will be used at runtime.`);
-        return paths;
-    }
-    const pendingWorkflows = pendingGroups.flatMap((g) => g.workflows);
-    if (candidates.length === 1 && config.workflowGroups.length === 1) {
-        // Single file, single-group config — auto-apply without prompting
-        const content = readContent(candidates[0]);
-        const relPath = relative(cwd, candidates[0]);
-        for (const wf of pendingWorkflows) {
-            secretsManager.storeSecret(config.secretName, content, wf);
-            paths[wf] = relPath;
-        }
-        console.log(`   ✅ Read ${relPath} and stored as ${config.secretName} (workflows: ${pendingWorkflows.join(", ")})`);
-    }
-    else if (candidates.length > 0 && nonInteractive) {
-        // Non-interactive: auto-pick first candidate for all pending groups
-        const content = readContent(candidates[0]);
-        const relPath = relative(cwd, candidates[0]);
-        for (const wf of pendingWorkflows) {
-            secretsManager.storeSecret(config.secretName, content, wf);
-            paths[wf] = relPath;
-        }
-        console.log(`   ✅ Auto-selected ${relPath} for ${config.secretName} (workflows: ${pendingWorkflows.join(", ")})`);
-    }
-    else if (candidates.length > 0) {
-        // One or more files found — prompt per pending group
-        const ENTER_PATH = "__ENTER_PATH__";
-        for (const group of pendingGroups) {
-            const fileChoices = candidates.map((p) => ({
-                title: relative(cwd, p),
-                value: p,
-            }));
-            fileChoices.push({ title: "Enter file path", value: ENTER_PATH });
-            fileChoices.push({ title: "Skip (add manually later)", value: null });
-            const { chosen } = await prompts({
-                type: "select",
-                name: "chosen",
-                message: `Select ${config.displayName} for ${group.label}:`,
-                choices: fileChoices,
-            });
-            if (chosen === ENTER_PATH) {
-                const { filePath } = await prompts({
-                    type: "text",
-                    name: "filePath",
-                    message: `Enter path to ${config.displayName} file:`,
-                });
-                if (filePath?.trim()) {
-                    const expandedPath = filePath.trim().replace(/^~/, process.env.HOME ?? "~");
-                    try {
-                        const content = readContent(expandedPath);
-                        const targetPath = config.promptTargetPath
-                            ? await promptTargetPathInProject(config.displayName)
-                            : undefined;
-                        for (const wf of group.workflows) {
-                            secretsManager.storeSecret(config.secretName, content, wf);
-                            if (targetPath)
-                                paths[wf] = targetPath;
-                        }
-                        console.log(`   ✅ Stored ${config.secretName} for workflows: ${group.workflows.join(", ")}`);
-                    }
-                    catch {
-                        console.log(`   Could not read ${expandedPath} — check the path and try again.`);
-                        console.log(`   Add later: ci secrets add ${config.secretName} .ci/pipelines/cibuild.yml -w ${group.workflows[0]}`);
-                    }
-                }
-                else {
-                    console.log(`   Add later: ci secrets add ${config.secretName} .ci/pipelines/cibuild.yml -w ${group.workflows[0]}`);
-                }
-            }
-            else if (chosen) {
-                const content = readContent(chosen);
-                const relPath = relative(cwd, chosen);
-                for (const wf of group.workflows) {
-                    secretsManager.storeSecret(config.secretName, content, wf);
-                    paths[wf] = relPath;
-                }
-                console.log(`   ✅ Stored ${config.secretName} for workflows: ${group.workflows.join(", ")}`);
-            }
-            else if (chosen === null) {
-                console.log(`   Add later: ci secrets add ${config.secretName} .ci/pipelines/cibuild.yml -w ${group.workflows[0]}`);
-            }
-        }
-    }
-    else if (nonInteractive) {
-        // Non-interactive: no files found — skip with hint
-        console.log(`   ⚠  No ${config.displayName} files found — add later: ci secrets add ${config.secretName}`);
-    }
-    else {
-        // Nothing found on disk — prompt per pending group
-        for (const group of pendingGroups) {
-            const label = pendingGroups.length > 1
-                ? `Enter ${config.displayName} content for ${group.label} (or type .done immediately to add later):`
-                : `Enter ${config.displayName} content (or type .done immediately to add later):`;
-            const value = await readMultilineContent(label);
-            if (value) {
-                const targetPath = config.promptTargetPath
-                    ? await promptTargetPathInProject(config.displayName)
-                    : undefined;
-                for (const wf of group.workflows) {
-                    secretsManager.storeSecret(config.secretName, value, wf);
-                    if (targetPath)
-                        paths[wf] = targetPath;
-                }
-                console.log(`   ✅ ${config.secretName} stored (workflows: ${group.workflows.join(", ")})`);
-            }
-            else {
-                console.log(`   Add later: ci secrets add ${config.secretName} .ci/pipelines/cibuild.yml -w ${group.workflows[0]}`);
-            }
-        }
-    }
-    return paths;
-}
-//# sourceMappingURL=file-secret-collector.js.map

package/dist/src/commands/flavors-a-convention-plugin-creates-are-still-found.test.d.ts

@@ -1,38 +0,0 @@
-/**
- * Product flavors a convention plugin creates are still the project's flavors.
- *
- * `detectBuildVariants` looked for a literal `productFlavors { … }` block in a
- * Gradle file. Modern Android does not write one: the flavors are an enum in a
- * convention plugin's Kotlin source and are created programmatically —
- * `AppFlavor.values().forEach { create(flavor.name) }` — so the block the
- * scan looks for does not exist anywhere in the repository.
- *
- * `android-variant-resolution.test.ts` already records the *runtime* half of
- * this: nowinandroid declares its flavors the same way, Gradle refused
- * `:app:lintDebug` as ambiguous, and the step now reads the candidates out of
- * Gradle's own error. That recovers a task name during a build. It cannot
- * recover anything decided *before* the build:
- *
- *   - `googleServicesTargets` writes every workflow's `google-services.json`
- *     to the module root instead of its flavor's source set, which is the
- *     silent wrong-file failure `bld_8e60d90ab4e55f85d2f72459` spent 1292
- *     Gradle tasks discovering;
- *   - `variantFlavors` reports no flavor for any workflow, so `credentialSlots`
- *     sees no disagreement and declares one flat slot where the workflows need
- *     one value each;
- *   - the variant prompt offers `debug, release` and nothing else.
- *
- * Gradle is not available to the scan — it is a static read, and running a
- * configuration phase to list flavors would cost minutes. The evidence that
- * *is* on disk is the one AGP itself relies on: a flavor has a source set.
- * `app/src/ciDynamic/`, `app/src/prod/` — the same directories
- * `findGoogleServices` in `invarn setup` has always read the flavor from,
- * which is why setup resolves this repository correctly while the generator
- * does not.
- *
- * It is a **fallback**, not a merge: a project whose Gradle files declare
- * flavors literally is decided by those files exactly as before, so this can
- * only change the answer for a project that currently detects none.
- */
-export {};
-//# sourceMappingURL=flavors-a-convention-plugin-creates-are-still-found.test.d.ts.map

package/dist/src/commands/flavors-a-convention-plugin-creates-are-still-found.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"flavors-a-convention-plugin-creates-are-still-found.test.d.ts","sourceRoot":"","sources":["../../../src/commands/flavors-a-convention-plugin-creates-are-still-found.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG"}