@invarn/cibuild 2.9.6 → 2.9.8

package/dist/src/commands/ios-scheme-ranking.test.js

@@ -1,264 +0,0 @@
-/**
- * Which scheme an iOS pipeline builds.
- *
- * It used to be the first `.xcscheme` the filesystem listed, and that has a
- * rule: a space (0x20) sorts before a period (0x2E), so
- * `"<App> <Suffix>.xcscheme"` always lists before `"<App>.xcscheme"`. An app
- * named after its project loses to its own extension or tvOS companion every
- * time. Four of the eight iOS rows that built in the thirty-app study got a
- * non-app scheme:
- *
- *   Stay       → "Stay Extension" → "There are no test bundles available to test"
- *   Swiftfin   → "Swiftfin tvOS"  → "Unable to find a destination matching … iOS Simulator"
- *   wikipedia  → "ContinueReadingWidget"  (masked by an earlier failure)
- *   pocketcasts → "NotificationContent"   (masked by an earlier failure)
- *
- * The `.xcscheme` XML says what each scheme is, so the ranking reads it.
- */
-import { mkdtempSync, rmSync, mkdirSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { tmpdir } from "node:os";
-import { rankSchemes } from "./ios-scanner.js";
-let root;
-beforeEach(() => {
-    root = mkdtempSync(join(tmpdir(), "cibuild-scheme-"));
-});
-afterEach(() => {
-    rmSync(root, { recursive: true, force: true });
-});
-/** An `.xcscheme` with the parts the ranking reads, in Xcode's own shape. */
-function scheme(project, name, { runnable, testable, appExtension }) {
-    const dir = join(root, `${project}.xcodeproj`, "xcshareddata", "xcschemes");
-    mkdirSync(dir, { recursive: true });
-    // A `.xcodeproj` is its `project.pbxproj`; without one Xcode refuses to open
-    // it and the scanners now skip it, so a fixture that omits it is describing
-    // a directory that cannot exist outside a test. Content is irrelevant here —
-    // the scheme XML is what the ranking reads — but it has to be there.
-    writeFileSync(join(root, `${project}.xcodeproj`, "project.pbxproj"), "// !$*UTF8*$!\n");
-    writeFileSync(join(dir, `${name}.xcscheme`), `<?xml version="1.0" encoding="UTF-8"?>
-<Scheme LastUpgradeVersion = "1600"${appExtension ? `\n   wasCreatedForAppExtension = "YES"` : ""} version = "1.7">
-   <TestAction buildConfiguration = "Debug">
-      <Testables>${testable
-        ? `
-         <TestableReference skipped = "NO">
-            <BuildableReference BuildableName = "${name}Tests.xctest" />
-         </TestableReference>`
-        : ""}
-      </Testables>
-   </TestAction>
-   <LaunchAction buildConfiguration = "Debug">${runnable
-        ? `
-      <BuildableProductRunnable runnableDebuggingMode = "0">
-         <BuildableReference
-            BuildableIdentifier = "primary"
-            BuildableName = "${runnable}"
-            BlueprintName = "${name}"
-            ReferencedContainer = "container:${project}.xcodeproj">
-         </BuildableReference>
-      </BuildableProductRunnable>`
-        : ""}
-   </LaunchAction>
-</Scheme>
-`);
-}
-/** The ranking, given the order `readdirSync` happens to produce. */
-const pick = (projectPath, names) => rankSchemes(root, projectPath, names)[0];
-describe("rankSchemes", () => {
-    // shenruisi/Stay. "Stay Extension" listed first and was written into the
-    // pipeline; the app is named after its project.
-    test("prefers the scheme named after the project", () => {
-        scheme("Stay", "Stay", { runnable: "Stay.app", testable: true });
-        scheme("Stay", "Stay Extension", { runnable: "Stay.app" });
-        expect(pick("Stay.xcodeproj", ["Stay Extension", "Stay"])).toBe("Stay");
-    });
-    // jellyfin/Swiftfin. Every destination "Swiftfin tvOS" offered was tvOS.
-    test("prefers the project's own name over a platform companion", () => {
-        scheme("Swiftfin", "Swiftfin", { runnable: "Swiftfin iOS.app" });
-        scheme("Swiftfin", "Swiftfin tvOS", { runnable: "Swiftfin tvOS.app" });
-        expect(pick("Swiftfin.xcodeproj", ["Swiftfin tvOS", "Swiftfin"])).toBe("Swiftfin");
-    });
-    // Finb/Bark builds from a workspace; the schemes live in the project inside.
-    test("matches the workspace basename too", () => {
-        scheme("Bark", "Bark", { runnable: "Bark.app", testable: true });
-        scheme("Bark", "NotificationContentExtension", { runnable: "Bark.app" });
-        expect(pick("Bark.xcworkspace", ["Bark", "NotificationContentExtension"])).toBe("Bark");
-    });
-    // Automattic/pocket-casts-ios: the scheme is `pocketcasts`, the project is
-    // `podcasts.xcodeproj`, so no name matches. What separates them is that one
-    // launches an app and has tests, and the others are extensions.
-    test("falls back to an app scheme with tests when no name matches", () => {
-        scheme("podcasts", "pocketcasts", { runnable: "podcasts.app", testable: true });
-        scheme("podcasts", "NotificationContent", { runnable: "podcasts.app" });
-        scheme("podcasts", "PocketCastsWatch", { runnable: "PocketCastsWatch.app" });
-        expect(pick("podcasts.xcodeproj", ["NotificationContent", "PocketCastsWatch", "pocketcasts"])).toBe("pocketcasts");
-    });
-    // thebaselab/codeapp: `Code App` launches `Code.app` and declares no tests
-    // at all; `Code UI` has two test bundles and launches `CodeUI.app`. The
-    // product named after the project is the app; tests are a weaker signal.
-    test("prefers the product named after the project over one with tests", () => {
-        scheme("Code", "Code App", { runnable: "Code.app" });
-        scheme("Code", "Code UI", { runnable: "CodeUI.app", testable: true });
-        scheme("Code", "extension", { runnable: "CodeUI.app" });
-        expect(pick("Code.xcodeproj", ["Code App", "Code UI", "extension"])).toBe("Code App");
-    });
-    // oblador/hush: `Hush iOS` and `Hush macOS`, project `Hush.xcodeproj`.
-    test("prefers the iOS variant over the macOS one", () => {
-        scheme("Hush", "Hush iOS", { runnable: "Hush.app", testable: true });
-        scheme("Hush", "Hush macOS", { runnable: "Hush.app" });
-        expect(pick("Hush.xcodeproj", ["Hush iOS", "Hush macOS"])).toBe("Hush iOS");
-    });
-    // home-assistant/iOS: App-Debug and App-Release, both runnable, both with
-    // tests. Debug is what the template builds.
-    test("prefers the debug configuration when two app schemes tie", () => {
-        scheme("HomeAssistant", "App-Debug", { runnable: "Home Assistant.app", testable: true });
-        scheme("HomeAssistant", "App-Release", { runnable: "Home Assistant.app", testable: true });
-        expect(pick("HomeAssistant.xcodeproj", ["App-Debug", "App-Release"])).toBe("App-Debug");
-    });
-    test("prefers the shortest name when nothing else separates them", () => {
-        scheme("Demo", "App", { runnable: "App.app", testable: true });
-        scheme("Demo", "App With A Longer Name", { runnable: "App.app", testable: true });
-        expect(pick("Demo.xcodeproj", ["App With A Longer Name", "App"])).toBe("App");
-    });
-    // The whole defect: a space sorts before a period, so the companion is
-    // always listed first. The answer must not depend on that.
-    test("gives the same answer whatever order the filesystem lists", () => {
-        scheme("Stay", "Stay", { runnable: "Stay.app", testable: true });
-        scheme("Stay", "Stay Extension", { runnable: "Stay.app" });
-        scheme("Stay", "Stay Widget", { runnable: "Stay.app" });
-        const orders = [
-            ["Stay Extension", "Stay Widget", "Stay"],
-            ["Stay", "Stay Extension", "Stay Widget"],
-            ["Stay Widget", "Stay", "Stay Extension"],
-        ];
-        for (const order of orders) {
-            expect([order.join(","), pick("Stay.xcodeproj", order)]).toEqual([
-                order.join(","),
-                "Stay",
-            ]);
-        }
-    });
-    test("keeps every scheme in the list, only reordered", () => {
-        scheme("Stay", "Stay", { runnable: "Stay.app", testable: true });
-        scheme("Stay", "Stay Extension", { runnable: "Stay.app" });
-        const ranked = rankSchemes(root, "Stay.xcodeproj", ["Stay Extension", "Stay"]);
-        expect([...ranked].sort()).toEqual(["Stay", "Stay Extension"]);
-    });
-    test("leaves a single scheme alone", () => {
-        scheme("Solo", "Solo", { runnable: "Solo.app", testable: true });
-        expect(pick("Solo.xcodeproj", ["Solo"])).toBe("Solo");
-    });
-    // A scheme with no shared `.xcscheme` on disk — `detectSchemes` falls back
-    // to the project name — must still come out first, not be ranked below a
-    // companion it cannot read.
-    test("keeps the order it was given when nothing can be read", () => {
-        expect(pick("Solo.xcodeproj", ["Solo", "Other"])).toBe("Solo");
-    });
-});
-/**
- * An app extension is launched *through its host app*, so an extension scheme's
- * LaunchAction runnable is the host `.app` — the same value the app's own
- * scheme carries. Launching the app binary is therefore not sufficient to be
- * the app scheme, and no name blocklist reaches the case: `Today` names nothing.
- *
- * Xcode states the fact itself, on the `<Scheme>` element of any scheme it
- * created for an extension target. Measured across all 125 shared schemes in
- * the thirty-app study's clones: 29 carry `wasCreatedForAppExtension`, all 29
- * are extension schemes, and 27 of them build the host `.app` too — which is
- * why "require an `.app` among the BuildAction entries" does not separate them.
- */
-describe("rankSchemes and app-extension schemes", () => {
-    /**
-     * `mozilla-mobile/firefox-ios`, all thirteen schemes of
-     * `firefox-ios/Client.xcodeproj`, read off the clone. The project is
-     * `Client.xcodeproj`, so five schemes launch `Client.app` and land in the
-     * same tier; none carries an `iOS` or `Debug` token, so the tie fell to name
-     * length and `Today` (5) beat `Fennec` (6). The build then failed compiling
-     * `ActionExtension` — `bld_b1b38dda58f4111080415283`.
-     */
-    const FIREFOX_IOS = [
-        ["Account", { runnable: "libAccount.a", testable: true }],
-        ["Fennec", { runnable: "Client.app", testable: true }],
-        ["Fennec_Enterprise", { runnable: "Client.app", testable: true }],
-        ["Firefox", { runnable: "Client.app", testable: true }],
-        ["FirefoxBeta", { runnable: "Client.app", testable: true }],
-        ["FirefoxStaging", { runnable: "Client.app", testable: true }],
-        ["L10nSnapshotTests", { runnable: "L10nSnapshotTests.xctest", testable: true }],
-        ["Periphery", {}],
-        ["ShareTo", { runnable: "ShareTo.appex", appExtension: true }],
-        ["Storage", { runnable: "libStorage.a", testable: true }],
-        ["Sync", { runnable: "Sync.framework", testable: true }],
-        ["Telemetry", { runnable: "libSyncTelemetry.a", testable: true }],
-        ["Today", { runnable: "Client.app", testable: true, appExtension: true }],
-    ];
-    function firefoxIos() {
-        for (const [name, shape] of FIREFOX_IOS)
-            scheme("Client", name, shape);
-        return FIREFOX_IOS.map(([name]) => name);
-    }
-    test("picks the browser, not its widget", () => {
-        const names = firefoxIos();
-        expect(pick("Client.xcodeproj", names)).toBe("Fennec");
-    });
-    // The defect only became visible because a five-character extension name won
-    // a length tiebreak. The answer must not depend on the order either.
-    test("picks the browser whatever order the filesystem lists", () => {
-        const names = firefoxIos();
-        const orders = [
-            names,
-            [...names].reverse(),
-            ["Today", ...names.filter((n) => n !== "Today")],
-            ["ShareTo", "Today", ...names.filter((n) => n !== "Today" && n !== "ShareTo")],
-        ];
-        for (const order of orders) {
-            expect([order[0], pick("Client.xcodeproj", order)]).toEqual([order[0], "Fennec"]);
-        }
-    });
-    test("still keeps every scheme in the list", () => {
-        const names = firefoxIos();
-        expect([...rankSchemes(root, "Client.xcodeproj", names)].sort()).toEqual([...names].sort());
-    });
-    // The narrow statement, without the other twelve schemes around it.
-    test("an extension scheme launching the host app is not the app scheme", () => {
-        scheme("Client", "Fennec", { runnable: "Client.app", testable: true });
-        scheme("Client", "Today", { runnable: "Client.app", testable: true, appExtension: true });
-        expect(pick("Client.xcodeproj", ["Today", "Fennec"])).toBe("Fennec");
-    });
-    // Xcode's own word about the target outranks a name coincidence, so it
-    // disqualifies the name-match tier too.
-    test("outranks a scheme named exactly after the project", () => {
-        scheme("Widget", "Widget", { runnable: "Host.app", appExtension: true });
-        scheme("Widget", "HostApp", { runnable: "Host.app", testable: true });
-        expect(pick("Widget.xcodeproj", ["Widget", "HostApp"])).toBe("HostApp");
-    });
-    /**
-     * The attribute is a sufficient signal, not a necessary one — a hand-written
-     * or pre-Xcode-10 scheme may omit it. Its absence must change nothing, or
-     * every scheme that ranked correctly before this could regress.
-     *
-     * `chenqi92/primuse` is the row that makes the point concrete: its `Primuse`
-     * scheme is the real app scheme and builds two widget `.appex` bundles
-     * alongside `Primuse.app`, so "demote anything that builds an extension"
-     * would have taken the wrong one.
-     */
-    test("an untagged app scheme ranks exactly as it did before", () => {
-        scheme("Primuse", "Primuse", { runnable: "Primuse.app", testable: true });
-        scheme("Primuse", "PrimuseWidgets", { runnable: "Primuse.app" });
-        expect(pick("Primuse.xcodeproj", ["PrimuseWidgets", "Primuse"])).toBe("Primuse");
-    });
-    // When every candidate is an extension scheme there is no app scheme to
-    // find. Both land in the bottom tier, nothing is filtered out, and the
-    // pre-existing within-tier rule decides — so the caller still gets a
-    // deterministic answer rather than one that depends on the directory order.
-    test("still answers deterministically when every scheme is an extension", () => {
-        scheme("Client", "ShareTo", { runnable: "ShareTo.appex", appExtension: true });
-        scheme("Client", "Today", { runnable: "Client.app", appExtension: true });
-        for (const order of [
-            ["Today", "ShareTo"],
-            ["ShareTo", "Today"],
-        ]) {
-            expect([order[0], pick("Client.xcodeproj", order)]).toEqual([order[0], "Today"]);
-        }
-        expect(rankSchemes(root, "Client.xcodeproj", ["ShareTo", "Today"])).toHaveLength(2);
-    });
-});
-//# sourceMappingURL=ios-scheme-ranking.test.js.map

package/dist/src/commands/local-properties-reaches-every-workflow.test.d.ts

@@ -1,30 +0,0 @@
-/**
- * A properties file the Secrets Gradle Plugin reads is a credential like any
- * other, and it has to reach every workflow that builds — not just `release`.
- *
- * The scanner has always found this one: it emits a `secrets-plugin` warning
- * whenever a build file applies the plugin and the properties file it reads is
- * gitignored, and `ci init` prints *"The file is gitignored — inject it as a
- * file step before building"* along with the exact step to write. Then it
- * generates a pipeline without that step. The advice was correct and nobody
- * acted on it, so the pipeline it wrote could not configure Gradle at all.
- *
- * Measured, not supposed: the first build in the record to consume an uploaded
- * credential (`bld_f5167b731b95974e61350390`, 2026-09-09) got past
- * google-services and died four steps later on
- *
- *     A problem occurred configuring project ':analytics'.
- *        > The file '<repo>/local.properties' could not be found
- *
- * on a repository whose `release` workflow had a `file@` step for it and whose
- * `primary` and `pull-request` did not. The plugin's evaluation listener runs
- * for every variant, so a debug build needs the file exactly as much as a
- * release one does.
- *
- * Declaring the slot matters as much as the step. `unsetEnvKeys` — what
- * `invarn setup` searches by — reads `envs`, not step inputs, so an undeclared
- * `LOCAL_PROPERTIES` is never discovered on the developer's machine and never
- * offered for upload, however many steps name it.
- */
-export {};
-//# sourceMappingURL=local-properties-reaches-every-workflow.test.d.ts.map

package/dist/src/commands/local-properties-reaches-every-workflow.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-properties-reaches-every-workflow.test.d.ts","sourceRoot":"","sources":["../../../src/commands/local-properties-reaches-every-workflow.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG"}

package/dist/src/commands/local-properties-reaches-every-workflow.test.js

@@ -1,146 +0,0 @@
-/**
- * A properties file the Secrets Gradle Plugin reads is a credential like any
- * other, and it has to reach every workflow that builds — not just `release`.
- *
- * The scanner has always found this one: it emits a `secrets-plugin` warning
- * whenever a build file applies the plugin and the properties file it reads is
- * gitignored, and `ci init` prints *"The file is gitignored — inject it as a
- * file step before building"* along with the exact step to write. Then it
- * generates a pipeline without that step. The advice was correct and nobody
- * acted on it, so the pipeline it wrote could not configure Gradle at all.
- *
- * Measured, not supposed: the first build in the record to consume an uploaded
- * credential (`bld_f5167b731b95974e61350390`, 2026-09-09) got past
- * google-services and died four steps later on
- *
- *     A problem occurred configuring project ':analytics'.
- *        > The file '<repo>/local.properties' could not be found
- *
- * on a repository whose `release` workflow had a `file@` step for it and whose
- * `primary` and `pull-request` did not. The plugin's evaluation listener runs
- * for every variant, so a debug build needs the file exactly as much as a
- * release one does.
- *
- * Declaring the slot matters as much as the step. `unsetEnvKeys` — what
- * `invarn setup` searches by — reads `envs`, not step inputs, so an undeclared
- * `LOCAL_PROPERTIES` is never discovered on the developer's machine and never
- * offered for upload, however many steps name it.
- */
-import { describe, test, expect } from '@jest/globals';
-import { load } from 'js-yaml';
-import { generateAndroidPipeline, detectSetupNeeds } from './build.js';
-const BASE = {
-    keystore: false,
-    keystoreProperties: false,
-    googleServices: false,
-    googlePlayDeploy: false,
-    googlePlayPackageName: '',
-    artifactType: 'apk',
-    keystorePaths: {},
-    googleServicesPaths: {},
-    workflowFlavors: {},
-    secretsProperties: false,
-    secretsPropertiesPath: 'local.properties',
-};
-function parse(yaml) {
-    return load(yaml);
-}
-function envs(parsed) {
-    return Object.assign({}, ...(parsed.app?.envs ?? []));
-}
-function stepNames(parsed, workflow) {
-    return (parsed.workflows?.[workflow]?.steps ?? []).map((s) => Object.keys(s)[0]);
-}
-function fileStepsOf(parsed, workflow) {
-    return (parsed.workflows?.[workflow]?.steps ?? [])
-        .filter((s) => Object.keys(s)[0] === 'file@1.0.0')
-        .map((s) => s['file@1.0.0']);
-}
-describe('a properties file the build reads at configuration time', () => {
-    test('is declared once and written in every workflow that builds', () => {
-        const parsed = parse(generateAndroidPipeline(17, { ...BASE, secretsProperties: true }));
-        expect(envs(parsed).LOCAL_PROPERTIES).toBe('');
-        // One object per workflow so a failure names the workflow that lost it.
-        const written = ['primary', 'pull-request', 'release'].map((workflow) => {
-            const step = fileStepsOf(parsed, workflow).find((s) => s.inputs.var_name === 'LOCAL_PROPERTIES');
-            return {
-                workflow,
-                target: step?.inputs.target_path,
-                // Text, not binary: re-encoding a properties file as base64 would
-                // write base64 to disk and the plugin would read gibberish.
-                base64: step?.inputs.base64_encoded,
-            };
-        });
-        expect(written).toEqual([
-            { workflow: 'primary', target: 'local.properties', base64: undefined },
-            { workflow: 'pull-request', target: 'local.properties', base64: undefined },
-            { workflow: 'release', target: 'local.properties', base64: undefined },
-        ]);
-    });
-    test('is written before anything that could read it', () => {
-        const parsed = parse(generateAndroidPipeline(17, { ...BASE, secretsProperties: true }));
-        const order = ['primary', 'pull-request', 'release'].map((workflow) => {
-            const names = stepNames(parsed, workflow);
-            const wrote = names.indexOf('file@1.0.0');
-            const firstBuildTool = names.findIndex((n) => /^(gradle-build|android-lint|android-unit-test)@/.test(n));
-            return { workflow, writesBeforeBuilding: wrote >= 0 && firstBuildTool > wrote };
-        });
-        expect(order).toEqual([
-            { workflow: 'primary', writesBeforeBuilding: true },
-            { workflow: 'pull-request', writesBeforeBuilding: true },
-            { workflow: 'release', writesBeforeBuilding: true },
-        ]);
-    });
-    test('follows the plugin to a properties file that is not local.properties', () => {
-        const parsed = parse(generateAndroidPipeline(17, {
-            ...BASE,
-            secretsProperties: true,
-            secretsPropertiesPath: 'config/secrets.properties',
-        }));
-        const written = fileStepsOf(parsed, 'primary').find((s) => s.inputs.var_name === 'LOCAL_PROPERTIES');
-        expect(written.inputs.target_path).toBe('config/secrets.properties');
-    });
-    test('appears nowhere in a repository that does not use the plugin', () => {
-        // The whole point of scanning: a pipeline must not declare a slot the
-        // build never reads. After issue 03 a declared-and-empty slot fails the
-        // build, so an unnecessary one turns a working repository red.
-        const yaml = generateAndroidPipeline(17, BASE);
-        expect(yaml).not.toContain('LOCAL_PROPERTIES');
-        expect(fileStepsOf(parse(yaml), 'primary')).toEqual([]);
-    });
-});
-describe('the scan that decides it', () => {
-    const warning = (over) => ({
-        category: 'secrets-plugin',
-        severity: 'warning',
-        message: 'Secrets plugin key: MAPS_API_KEY',
-        location: 'local.properties',
-        ...over,
-    });
-    test('takes the properties file from the per-key warning', () => {
-        const needs = detectSetupNeeds([warning({})]);
-        expect(needs.secretsProperties).toBe(true);
-        expect(needs.secretsPropertiesPath).toBe('local.properties');
-    });
-    test('takes it from the message when the warning has no defaults file', () => {
-        // The two `secrets-plugin` warnings disagree about `location`: the
-        // per-key one carries the properties file, the fallback one carries the
-        // *build file* that applies the plugin. Reading the wrong one would point
-        // the step at `app/build.gradle.kts`.
-        const needs = detectSetupNeeds([
-            warning({
-                message: "Google Secrets Gradle Plugin reads 'config/secrets.properties' which is absent in CI",
-                location: 'app/build.gradle.kts',
-            }),
-        ]);
-        expect(needs.secretsProperties).toBe(true);
-        expect(needs.secretsPropertiesPath).toBe('config/secrets.properties');
-    });
-    test('is off when nothing reports the plugin', () => {
-        const needs = detectSetupNeeds([
-            { category: 'missing-file', severity: 'warning', message: 'keystore.properties not found' },
-        ]);
-        expect(needs.secretsProperties).toBe(false);
-    });
-});
-//# sourceMappingURL=local-properties-reaches-every-workflow.test.js.map

package/dist/src/commands/reset.d.ts

@@ -1,7 +0,0 @@
-/**
- * Reset command — removes all files and folders created by cibuild.
- */
-export declare function handleResetCommand(options?: {
-    force?: boolean;
-}): Promise<void>;
-//# sourceMappingURL=reset.d.ts.map

package/dist/src/commands/reset.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../../../src/commands/reset.ts"],"names":[],"mappings":"AAAA;;GAEG;AAsBH,wBAAsB,kBAAkB,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzF"}

package/dist/src/commands/reset.js

@@ -1,81 +0,0 @@
-/**
- * Reset command — removes all files and folders created by cibuild.
- */
-import { existsSync, readFileSync, writeFileSync, rmSync } from 'node:fs';
-import { resolve } from 'node:path';
-import prompts from 'prompts';
-/** Paths that cibuild creates, relative to project root. */
-const CIBUILD_PATHS = [
-    '.ci',
-    '.cibuild-secrets.json',
-    '.ci-builds',
-    '.ci-cache',
-    'ci.config.json',
-];
-/** Lines that `ci init` appends to .gitignore. */
-const GITIGNORE_ENTRIES = [
-    '.cibuild-secrets.json',
-    '.ci/.envstore.json',
-    '.ci/keys/',
-];
-export async function handleResetCommand(options = {}) {
-    const cwd = process.cwd();
-    // Discover what actually exists
-    const existing = CIBUILD_PATHS
-        .map((p) => ({ rel: p, abs: resolve(cwd, p) }))
-        .filter(({ abs }) => existsSync(abs));
-    const gitignorePath = resolve(cwd, '.gitignore');
-    const hasGitignoreEntries = existsSync(gitignorePath) && hasAnyEntry(gitignorePath);
-    if (existing.length === 0 && !hasGitignoreEntries) {
-        console.log('Nothing to reset — no cibuild files found.');
-        return;
-    }
-    // Show what will be removed
-    console.log('\nThe following will be removed:\n');
-    for (const { rel } of existing) {
-        console.log(`  • ${rel}`);
-    }
-    if (hasGitignoreEntries) {
-        console.log('  • cibuild entries from .gitignore');
-    }
-    console.log('');
-    // Confirm unless --force
-    if (!options.force) {
-        const { confirmed } = await prompts({
-            type: 'confirm',
-            name: 'confirmed',
-            message: 'Are you sure? This cannot be undone.',
-            initial: false,
-        });
-        if (!confirmed) {
-            console.log('\n❌ Cancelled');
-            return;
-        }
-    }
-    // Remove paths
-    for (const { rel, abs } of existing) {
-        rmSync(abs, { recursive: true, force: true });
-        console.log(`  Removed ${rel}`);
-    }
-    // Clean .gitignore
-    if (hasGitignoreEntries) {
-        cleanGitignore(gitignorePath);
-        console.log('  Cleaned .gitignore');
-    }
-    console.log('\n✅ Reset complete\n');
-}
-function hasAnyEntry(gitignorePath) {
-    const content = readFileSync(gitignorePath, 'utf-8');
-    return GITIGNORE_ENTRIES.some((entry) => content.split('\n').includes(entry));
-}
-function cleanGitignore(gitignorePath) {
-    const lines = readFileSync(gitignorePath, 'utf-8').split('\n');
-    const filtered = lines.filter((line) => !GITIGNORE_ENTRIES.includes(line));
-    // Remove trailing blank lines left over from removal
-    while (filtered.length > 0 && filtered[filtered.length - 1] === '') {
-        filtered.pop();
-    }
-    const result = filtered.length > 0 ? filtered.join('\n') + '\n' : '';
-    writeFileSync(gitignorePath, result);
-}
-//# sourceMappingURL=reset.js.map

package/dist/src/commands/run.d.ts

@@ -1,22 +0,0 @@
-export interface RunOptions {
-    /**
-     * Absolute path to the pipeline file. If omitted, the handler looks
-     * inside `./.ci/pipelines/` and prompts when multiple files exist.
-     */
-    pipelinePath?: string;
-    workflow?: string;
-    validateOnly?: boolean;
-    production?: boolean;
-    skipValidation?: boolean;
-    local?: boolean;
-}
-/**
- * Run a pipeline locally. Mirrors `ci run <path>`.
- *
- * - `.yml` / `.yaml` → parse, validate, optionally prompt for missing
- *   env vars, then execute via `PipelineRunner`.
- * - `.ts` / `.js`    → dynamic-import the module, use its default export
- *   as the `PipelineDef`, then execute.
- */
-export declare function handleRunCommand(opts?: RunOptions): Promise<void>;
-//# sourceMappingURL=run.d.ts.map

package/dist/src/commands/run.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/commands/run.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAkJ3E"}