@invarn/cibuild 2.9.6 → 2.9.8

package/dist/src/commands/ios-scanner.js

@@ -1,492 +0,0 @@
-import { resolve, relative } from "node:path";
-import { existsSync, readFileSync, readdirSync } from "node:fs";
-import { xcodeContainersIn } from "../shared/detect-project.js";
-// ---------------------------------------------------------------------------
-// File discovery
-// ---------------------------------------------------------------------------
-function safeRead(filePath) {
-    try {
-        return readFileSync(filePath, "utf-8");
-    }
-    catch {
-        return "";
-    }
-}
-function relPath(root, filePath) {
-    return relative(root, filePath);
-}
-/**
- * Finds the primary Xcode project path.
- * Prefers .xcworkspace over .xcodeproj (CocoaPods projects use workspace).
- * Returns the relative path from root, or empty string if not found.
- *
- * A candidate must be a real container — `isXcodeContainer` — and not merely
- * a directory with the right suffix. `Uwi0/Oakane` ships `iosApp.xcodeproj`
- * with no `project.pbxproj` beside the `oakane.xcodeproj` that has one, and
- * this function returned the husk because it was first.
- */
-function findXcodeProjectPath(root) {
-    const containers = xcodeContainersIn(root);
-    const workspaces = containers.filter((e) => e.endsWith(".xcworkspace"));
-    const projects = containers.filter((e) => e.endsWith(".xcodeproj"));
-    // Prefer workspace (CocoaPods / multi-package setups use these)
-    if (workspaces.length > 0)
-        return workspaces[0];
-    if (projects.length > 0)
-        return projects[0];
-    return "";
-}
-/**
- * Names a scheme carries when it builds something beside the app rather than
- * the app: an extension, a widget, a watch or TV companion, a test or
- * screenshot harness. Matched case-insensitively on the whole name.
- */
-const COMPANION_SCHEME = /(extension|widget|clip|intents?|notification|tvos|macos|watchos|visionos|tests?|screenshots?|staging|prototype|codegen)/i;
-function readSchemeFacts(root, name) {
-    for (const entry of xcodeContainersIn(root)) {
-        if (!entry.endsWith(".xcodeproj"))
-            continue;
-        const path = resolve(root, entry, "xcshareddata", "xcschemes", `${name}.xcscheme`);
-        if (!existsSync(path))
-            continue;
-        const xml = safeRead(path);
-        if (!xml)
-            continue;
-        const launch = /<LaunchAction[\s\S]*?<\/LaunchAction>/.exec(xml)?.[0] ?? "";
-        // Attribute values carry no `>`, so the opening tag alone is a safe scope
-        // and no attribute deeper in the document can be mistaken for it.
-        const schemeTag = /<Scheme\b[^>]*>/.exec(xml)?.[0] ?? "";
-        return {
-            runnable: /BuildableName\s*=\s*"([^"]+)"/.exec(launch)?.[1],
-            testable: /<TestableReference/.test(xml),
-            appExtension: /wasCreatedForAppExtension\s*=\s*"YES"/.test(schemeTag),
-        };
-    }
-    return undefined;
-}
-/**
- * The detected schemes, best first.
- *
- * `detectedSchemes[0]` is what every caller writes into `IOS_SCHEME`, and it
- * used to be whatever `readdirSync` returned first. A space (0x20) sorts
- * before a period (0x2E), so `"<App> <Suffix>.xcscheme"` **always** lists
- * before `"<App>.xcscheme"`: an app named after its own project loses to its
- * extension or its tvOS companion every time. Four of the eight iOS rows that
- * built in the thirty-app study were given a non-app scheme that way — Stay
- * built its extension and reported "no test bundles available to test";
- * Swiftfin built its tvOS scheme and could not find an iOS Simulator
- * destination.
- *
- * The order, in the terms the scheme XML actually states:
- *
- *  1. named after the project or workspace — the commonest case, and
- *     unambiguous;
- *  2. launches the product named after the project, and is not a companion.
- *     `thebaselab/codeapp` is why this outranks the next one: its `Code App`
- *     scheme launches `Code.app` and declares no tests at all, while `Code UI`
- *     has two test bundles and launches `CodeUI.app`;
- *  3. launches an `.app`, declares tests (the template runs them), and is not a
- *     companion; among several, the iOS or Debug one, then the shortest;
- *  4. launches an `.app` and is not a companion;
- *  5. whatever order it came in.
- *
- * Every scheme stays in the list — this reorders, it does not filter, so a
- * caller wanting the extension can still find it.
- *
- * **What "companion" has to mean, and why a name is not enough.**
- * `mozilla-mobile/firefox-ios` broke tiers 1-4 without touching the directory
- * order this function was written for. Its project is `Client.xcodeproj`, so
- * `projectName` is `Client`. An app extension is launched *through its host
- * app*, so the `Today` widget scheme's LaunchAction runnable is `Client.app` —
- * identical to `Fennec`'s. Both landed in tier 1, neither name carries an `iOS`
- * or `Debug` token, and the tie fell to name length:
- *
- *     "Today"  -> 5 characters      <- won
- *     "Fennec" -> 6 characters
- *
- * The build then failed compiling `ActionExtension` rather than the browser
- * (`bld_b1b38dda58f4111080415283`).
- *
- * Launching the app binary is therefore not sufficient, and the answer is not a
- * longer name blocklist either — `Today` names nothing. Xcode states the fact
- * outright: it writes `wasCreatedForAppExtension = "YES"` onto the `<Scheme>`
- * element of a scheme it created for an extension target, so that is what is
- * read.
- *
- * Measured over all 125 shared schemes in the thirty-app study's clones: 29
- * carry the attribute, and **all 29 are extension schemes** — no false
- * positive. It is also the only signal that would have worked. Two that were
- * considered and are wrong on this same evidence:
- *
- *  - *require an `.app` among the BuildAction entries.* 27 of the 29 extension
- *    schemes build the host app too — `Today` builds
- *    `["Today.appex", "Client.app"]` — so this demotes 2 of 29 and leaves
- *    firefox-ios picking `Today`.
- *  - *demote anything building an `.appex`.* `chenqi92/primuse`'s `Primuse`
- *    scheme is the real app scheme and builds two widget extensions alongside
- *    `Primuse.app`.
- *
- * The attribute is a sufficient signal, not a necessary one: a hand-written or
- * pre-Xcode-10 scheme may omit it, and its absence changes nothing, so nothing
- * that ranked before can regress on a scheme that does not carry it.
- */
-export function rankSchemes(root, projectPath, schemes) {
-    return rankSchemesWithReason(root, projectPath, schemes).schemes;
-}
-/** The ranking, plus the sentence explaining its first entry. */
-export function rankSchemesWithReason(root, projectPath, schemes) {
-    if (schemes.length < 2)
-        return { schemes };
-    const projectName = projectPath.replace(/\.(xcodeproj|xcworkspace)$/, "").split("/").pop();
-    const scored = schemes.map((name, index) => {
-        const facts = readSchemeFacts(root, name);
-        // Two ways to be a companion: the name says so, or Xcode does. Xcode's
-        // word outranks a name match, so it disqualifies tier 0 as well.
-        const companion = COMPANION_SCHEME.test(name) || (facts?.appExtension ?? false);
-        const app = facts?.runnable?.endsWith(".app") ?? false;
-        let tier = 4;
-        if (name === projectName && !facts?.appExtension)
-            tier = 0;
-        else if (facts?.runnable === `${projectName}.app` && !companion)
-            tier = 1;
-        else if (app && facts?.testable && !companion)
-            tier = 2;
-        else if (app && !companion)
-            tier = 3;
-        return {
-            name,
-            index,
-            tier,
-            // Within a tier: an iOS or Debug variant first, then the shorter name.
-            preferred: /(^|[^A-Za-z])(iOS|Debug)([^A-Za-z]|$)/i.test(name) ? 0 : 1,
-            length: name.length,
-        };
-    });
-    scored.sort((a, b) => a.tier - b.tier ||
-        a.preferred - b.preferred ||
-        a.length - b.length ||
-        a.index - b.index);
-    const best = scored[0];
-    const others = scored.length - 1;
-    const why = [
-        "named after the project",
-        `launches ${projectName}.app`,
-        "the app scheme that runs the tests",
-        "the only app scheme that is not a companion",
-        "first in the list, and nothing here separates them",
-    ][best.tier];
-    return {
-        schemes: scored.map((s) => s.name),
-        reason: `${best.name} — ${why}; ${others} other scheme${others === 1 ? "" : "s"} here`,
-    };
-}
-/**
- * Detects Xcode schemes by reading *.xcscheme files from the
- * xcshareddata/xcschemes/ directory inside a .xcodeproj bundle.
- * Falls back to deriving the scheme name from the project file name.
- */
-function detectSchemes(root) {
-    const schemes = new Set();
-    // Real projects only. The fallback below invents a scheme from the
-    // directory's name, so a husk with no shared schemes contributes a scheme
-    // named after a project that cannot be opened — which is how `Uwi0/Oakane`
-    // got `IOS_SCHEME: iosApp` as well as `IOS_PROJECT_PATH: iosApp.xcodeproj`.
-    const entries = xcodeContainersIn(root);
-    for (const entry of entries) {
-        if (!entry.endsWith(".xcodeproj"))
-            continue;
-        const schemesDir = resolve(root, entry, "xcshareddata", "xcschemes");
-        let schemeFiles;
-        try {
-            schemeFiles = readdirSync(schemesDir);
-        }
-        catch {
-            // No shared schemes — fall back to project name
-            const projectName = entry.replace(/\.xcodeproj$/, "");
-            schemes.add(projectName);
-            continue;
-        }
-        for (const sf of schemeFiles) {
-            if (sf.endsWith(".xcscheme")) {
-                schemes.add(sf.replace(/\.xcscheme$/, ""));
-            }
-        }
-    }
-    return Array.from(schemes);
-}
-// ---------------------------------------------------------------------------
-// xcconfig env var detection
-// ---------------------------------------------------------------------------
-/**
- * Recursively finds all *.xcconfig files under root, skipping build/DerivedData/Pods.
- */
-const SKIP_XCCONFIG_DIRS = new Set(["build", "DerivedData", "Pods", ".git", ".ci", "node_modules"]);
-function findXcconfigFiles(dir) {
-    const results = [];
-    let entries;
-    try {
-        entries = readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return results;
-    }
-    for (const entry of entries) {
-        if (entry.isDirectory()) {
-            if (!SKIP_XCCONFIG_DIRS.has(entry.name)) {
-                results.push(...findXcconfigFiles(resolve(dir, entry.name)));
-            }
-        }
-        else if (entry.name.endsWith(".xcconfig")) {
-            results.push(resolve(dir, entry.name));
-        }
-    }
-    return results;
-}
-/**
- * Extract environment variable references from xcconfig content.
- * xcconfig uses $(VAR_NAME) syntax.
- */
-function extractXcconfigEnvRefs(content) {
-    const results = [];
-    // Match $(VAR_NAME) — only uppercase + underscore patterns (likely env vars)
-    const re = /\$\(([A-Z][A-Z0-9_]+)\)/g;
-    const known = new Set(["SRCROOT", "PROJECT_DIR", "CONFIGURATION", "PRODUCT_NAME", "TARGET_NAME", "BUILT_PRODUCTS_DIR"]);
-    let m;
-    while ((m = re.exec(content)) !== null) {
-        const name = m[1];
-        if (!known.has(name)) {
-            results.push(name);
-        }
-    }
-    return [...new Set(results)];
-}
-// ---------------------------------------------------------------------------
-// Signing config detection
-// ---------------------------------------------------------------------------
-/**
- * Returns true if project.pbxproj indicates manual (non-automatic) code signing.
- * Automatic signing sets PROVISIONING_PROFILE_SPECIFIER = "" and
- * CODE_SIGN_STYLE = Automatic.
- */
-function detectManualSigning(root) {
-    let entries;
-    try {
-        entries = readdirSync(root);
-    }
-    catch {
-        return false;
-    }
-    for (const entry of entries) {
-        if (!entry.endsWith(".xcodeproj"))
-            continue;
-        const pbxprojPath = resolve(root, entry, "project.pbxproj");
-        const content = safeRead(pbxprojPath);
-        if (!content)
-            continue;
-        // Automatic signing sets CODE_SIGN_STYLE = Automatic
-        const isAutomatic = /CODE_SIGN_STYLE\s*=\s*Automatic/.test(content);
-        // Manual signing has a non-empty PROVISIONING_PROFILE_SPECIFIER or explicit identity.
-        // Modern Xcode emits "Apple Development" / "Apple Distribution"; older projects
-        // still use the legacy "iPhone Developer" / "iPhone Distribution" names.
-        const hasProvisioningSpecifier = /PROVISIONING_PROFILE_SPECIFIER\s*=\s*"[^"]+"\s*;/.test(content);
-        const hasExplicitIdentity = /CODE_SIGN_IDENTITY\s*=\s*"(?:iPhone|Apple) (?:Developer|Development|Distribution)"/.test(content);
-        if (!isAutomatic && (hasProvisioningSpecifier || hasExplicitIdentity)) {
-            return true;
-        }
-    }
-    return false;
-}
-/**
- * Extracts the DEVELOPMENT_TEAM value from project.pbxproj.
- * Returns the first non-empty team ID found, or empty string.
- */
-function detectDevelopmentTeam(root) {
-    let entries;
-    try {
-        entries = readdirSync(root);
-    }
-    catch {
-        return "";
-    }
-    for (const entry of entries) {
-        if (!entry.endsWith(".xcodeproj"))
-            continue;
-        const pbxprojPath = resolve(root, entry, "project.pbxproj");
-        const content = safeRead(pbxprojPath);
-        if (!content)
-            continue;
-        const match = content.match(/DEVELOPMENT_TEAM\s*=\s*([A-Z0-9]{10})\s*;/);
-        if (match)
-            return match[1];
-    }
-    return "";
-}
-// ---------------------------------------------------------------------------
-// Gitignore check
-// ---------------------------------------------------------------------------
-const IOS_RELEVANT_GITIGNORE_PATTERNS = [
-    { pattern: /^Pods\/$|^\/Pods\//, label: "Pods/ (CocoaPods dependencies)" },
-    { pattern: /\*\.p12|\*\.cer/, label: "certificates (*.p12, *.cer)" },
-    { pattern: /\*\.mobileprovision/, label: "provisioning profiles (*.mobileprovision)" },
-    { pattern: /\.env$|\*\.env/, label: ".env files" },
-];
-function checkGitignore(root) {
-    const gitignorePath = resolve(root, ".gitignore");
-    if (!existsSync(gitignorePath))
-        return [];
-    const content = safeRead(gitignorePath);
-    const lines = content.split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
-    const found = [];
-    for (const { pattern, label } of IOS_RELEVANT_GITIGNORE_PATTERNS) {
-        if (lines.some((l) => pattern.test(l))) {
-            found.push(label);
-        }
-    }
-    return found;
-}
-// ---------------------------------------------------------------------------
-// Main scanner
-// ---------------------------------------------------------------------------
-export async function scanIosProject(projectRoot) {
-    const warnings = [];
-    // 1. Find project path
-    const projectPath = findXcodeProjectPath(projectRoot);
-    // 2. Detect schemes, best first — `detectedSchemes[0]` is what becomes
-    //    IOS_SCHEME, and the filesystem's order is not a ranking.
-    const ranked = rankSchemesWithReason(projectRoot, projectPath, detectSchemes(projectRoot));
-    const detectedSchemes = ranked.schemes;
-    // 3. CocoaPods
-    const hasCocoaPods = existsSync(resolve(projectRoot, "Podfile"));
-    // 4. SPM
-    const hasSPM = existsSync(resolve(projectRoot, "Package.swift"));
-    // 5. Signing config + team ID
-    const hasSigningConfig = detectManualSigning(projectRoot);
-    const developmentTeam = detectDevelopmentTeam(projectRoot);
-    // 6. CocoaPods warnings
-    const gitignoreItems = checkGitignore(projectRoot);
-    const podsGitignored = gitignoreItems.some((i) => i.includes("Pods/"));
-    if (hasCocoaPods) {
-        if (podsGitignored) {
-            warnings.push({
-                category: "cocoapods",
-                severity: "info",
-                message: "Pods/ is gitignored — pod install will run on CI",
-                hint: "The generated pipeline includes a pod install step",
-            });
-        }
-        if (!existsSync(resolve(projectRoot, "Podfile.lock"))) {
-            warnings.push({
-                category: "cocoapods",
-                severity: "warning",
-                message: "Podfile.lock not found",
-                hint: "Run 'pod install' locally and commit Podfile.lock for reproducible builds",
-            });
-        }
-    }
-    // 7. Signing warnings
-    if (hasSigningConfig) {
-        warnings.push({
-            category: "signing-config",
-            severity: "warning",
-            message: "Manual code signing detected in project.pbxproj",
-            hint: "Provide CERTIFICATE_P12, CERTIFICATE_PASSWORD, and PROVISIONING_PROFILE as secrets",
-        });
-    }
-    // 8. xcconfig env var warnings
-    const seenEnvVars = new Set();
-    const xcconfigFiles = findXcconfigFiles(projectRoot);
-    for (const xcconfigPath of xcconfigFiles) {
-        const content = safeRead(xcconfigPath);
-        const rel = relPath(projectRoot, xcconfigPath);
-        for (const varName of extractXcconfigEnvRefs(content)) {
-            if (!seenEnvVars.has(varName)) {
-                seenEnvVars.add(varName);
-                warnings.push({
-                    category: "env-var",
-                    severity: "warning",
-                    message: `Environment variable referenced: ${varName}`,
-                    hint: `Add via: ci secrets add ${varName}`,
-                    location: rel,
-                });
-            }
-        }
-    }
-    // 9. Gitignore cross-check for certs / profiles
-    for (const item of gitignoreItems) {
-        if (item.includes("certificate") || item.includes("provisioning")) {
-            warnings.push({
-                category: "missing-file",
-                severity: "info",
-                message: `${item} is in .gitignore — likely absent in CI`,
-                hint: "Provide as secrets (CERTIFICATE_P12, PROVISIONING_PROFILE)",
-            });
-        }
-    }
-    return {
-        warnings,
-        detectedSchemes,
-        ...(ranked.reason ? { schemeChoiceReason: ranked.reason } : {}),
-        hasCocoaPods,
-        hasSPM,
-        projectPath,
-        hasSigningConfig,
-        developmentTeam,
-    };
-}
-// ---------------------------------------------------------------------------
-// Formatter
-// ---------------------------------------------------------------------------
-const CATEGORY_LABELS = {
-    "missing-file": "Missing files",
-    "env-var": "Environment variables referenced in xcconfig files",
-    "signing-config": "Code signing configuration",
-    "cocoapods": "CocoaPods",
-};
-export function formatIosScanResult(result) {
-    const lines = [];
-    const sep = "─".repeat(50);
-    if (result.detectedSchemes.length > 0) {
-        lines.push(`ℹ  Detected schemes: ${result.detectedSchemes.join(", ")}`);
-        lines.push("");
-    }
-    if (result.hasSPM) {
-        lines.push("ℹ  Swift Package Manager detected — dependencies resolved automatically by Xcode");
-        lines.push("");
-    }
-    if (result.warnings.length === 0) {
-        lines.push("✅ No potential unknowns detected.");
-        return lines.join("\n") + "\n";
-    }
-    lines.push("⚠  iOS Project Scan — Potential Unknowns");
-    lines.push(sep);
-    lines.push("");
-    const byCategory = new Map();
-    for (const w of result.warnings) {
-        if (!byCategory.has(w.category))
-            byCategory.set(w.category, []);
-        byCategory.get(w.category).push(w);
-    }
-    for (const [cat, items] of byCategory) {
-        lines.push(`${CATEGORY_LABELS[cat]}:`);
-        for (const w of items) {
-            const icon = w.severity === "warning" ? "⚠ " : "ℹ ";
-            const loc = w.location ? `  (${w.location})` : "";
-            lines.push(`  ${icon} ${w.message}${loc}`);
-            if (w.hint) {
-                lines.push(`     Hint: ${w.hint}`);
-            }
-        }
-        lines.push("");
-    }
-    lines.push(sep);
-    const warnCount = result.warnings.filter((w) => w.severity === "warning").length;
-    const infoCount = result.warnings.filter((w) => w.severity === "info").length;
-    const parts = [];
-    if (warnCount > 0)
-        parts.push(`${warnCount} warning(s)`);
-    if (infoCount > 0)
-        parts.push(`${infoCount} info`);
-    lines.push(`${parts.join(", ")} found. Review before running on CI.`);
-    return lines.join("\n");
-}
-//# sourceMappingURL=ios-scanner.js.map

package/dist/src/commands/ios-scheme-ranking.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=ios-scheme-ranking.test.d.ts.map

package/dist/src/commands/ios-scheme-ranking.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ios-scheme-ranking.test.d.ts","sourceRoot":"","sources":["../../../src/commands/ios-scheme-ranking.test.ts"],"names":[],"mappings":""}