@invarn/cibuild 2.9.6 → 2.9.8

package/dist/src/envman/envstore-round-trip.test.js

@@ -1,130 +0,0 @@
-/**
- * A build whose HEAD commit has a multi-line message completes every step.
- *
- * This is the regression that started the whole thread. On 2026-08-30 the first
- * real `invarn setup` proof died of it: `git-clone` publishes the commit body,
- * and every step after it failed loading the envstore —
- *
- *     [step_2] Running: cache-pull
- *     …: line 59: export: `value nothing provides.': not a valid identifier
- *     ✗ Pipeline failed: Step "Install CocoaPods" failed with exit code 1
- *
- * `src/yaml/steps/envstore-loader.test.ts` drives the *reader* with hostile
- * content written by hand, which is the right shape for the defect but stops
- * short of the thing that actually happened: the value came out of a real
- * repository, through a real producer. This closes that gap — a real
- * `git commit`, the real `git-clone` step reading it with `git log -1
- * --format=%b`, the real `envman` writer (`envmanShellFunction`, the same
- * bytes the runner prepends to every script step), and the real reader in the
- * next step's preamble.
- *
- * The fixture's commit message carries both consequences the PRD names, because
- * they need different bytes to surface: a line that is *not* a valid assignment
- * (which killed the step) and a line that *is* one (which let the commit's
- * author set `PATH` for every step after it).
- */
-import { describe, test, expect, beforeAll, afterAll } from '@jest/globals';
-import { execFileSync, spawnSync } from 'child_process';
-import { mkdtempSync, readFileSync, mkdirSync, rmSync, writeFileSync, existsSync } from 'fs';
-import { join } from 'path';
-import { tmpdir } from 'os';
-import { envmanShellFunction } from './shim.js';
-import { GitCloneStepExecutor } from '../yaml/steps/git-clone.js';
-import { ScriptStepExecutor } from '../yaml/steps/script.js';
-import { testConfigNoPeer } from '../yaml/steps/test-config.js';
-const SUBJECT = 'Add Invarn pipeline';
-/**
- * Three lines and a blank one. Line 2 is not a valid assignment; line 4 is.
- * `git log --format=%b` emits a trailing newline that `$( )` strips, so the
- * expected value below carries none.
- */
-const BODY = [
-    'cibuild sets CIBUILD_GIT_BRANCH, so pre-execution validation asked for a',
-    'value nothing provides.',
-    '',
-    'PATH=/tmp/attacker-controlled',
-].join('\n');
-describe('a multi-line commit message, from the repository to the next step', () => {
-    let repoDir;
-    let envstorePath;
-    let captureDir;
-    beforeAll(() => {
-        repoDir = mkdtempSync(join(tmpdir(), 'envstore-round-trip-'));
-        envstorePath = join(repoDir, '.ci', '.envstore.json');
-        captureDir = join(repoDir, 'captured');
-        mkdirSync(captureDir, { recursive: true });
-        writeFileSync(join(repoDir, 'README.md'), 'fixture\n', 'utf-8');
-        const git = (...args) => {
-            execFileSync('git', args, { cwd: repoDir, stdio: 'ignore' });
-        };
-        git('init', '-b', 'main');
-        git('config', 'user.name', 'CI Build Tests');
-        git('config', 'user.email', 'cibuild-tests@example.com');
-        git('config', 'commit.gpgsign', 'false');
-        git('add', '.');
-        git('commit', '-m', `${SUBJECT}\n\n${BODY}`);
-    });
-    afterAll(() => {
-        rmSync(repoDir, { recursive: true, force: true });
-    });
-    /**
-     * Runs one generated step the way the runner does: the envman shell function
-     * prepended, bash, the envstore path in the environment so it survives the
-     * `cd` the step does.
-     */
-    function runStep(script) {
-        const scriptPath = join(repoDir, '__step.sh');
-        writeFileSync(scriptPath, envmanShellFunction() + script, 'utf-8');
-        const proc = spawnSync('bash', [scriptPath], {
-            cwd: repoDir,
-            encoding: 'utf-8',
-            env: {
-                ...process.env,
-                ENVMAN_ENVSTORE_PATH: envstorePath,
-                CAPTURE_DIR: captureDir,
-            },
-        });
-        return { status: proc.status, stdout: proc.stdout ?? '', stderr: proc.stderr ?? '' };
-    }
-    function captured(name) {
-        const file = join(captureDir, name);
-        return existsSync(file) ? readFileSync(file, 'utf-8') : undefined;
-    }
-    test('git-clone publishes the commit body without dying on it', async () => {
-        const { script } = await new GitCloneStepExecutor().execute({}, {}, testConfigNoPeer);
-        const run = runStep(script);
-        expect(run.status).toBe(0);
-        expect(run.stdout).toContain(`Message: ${SUBJECT}`);
-        // The envstore is what the next step reads, so it has to exist and to hold
-        // the body as data rather than as three more records.
-        const store = JSON.parse(readFileSync(envstorePath, 'utf-8'));
-        expect(store.envs.find(e => e.key === 'GIT_CLONE_COMMIT_MESSAGE_BODY')?.value).toBe(BODY);
-        expect(store.envs.map(e => e.key)).not.toContain('PATH');
-    });
-    test('the next step loads it, completes, and is not reconfigured by it', async () => {
-        // Runs after git-clone above: the envstore on disk is the real one that
-        // step wrote.
-        const { script } = await new ScriptStepExecutor().execute({
-            content: [
-                `printf '%s' "\${GIT_CLONE_COMMIT_MESSAGE_BODY-}" > "$CAPTURE_DIR/body"`,
-                `printf '%s' "\${GIT_CLONE_COMMIT_MESSAGE_SUBJECT-}" > "$CAPTURE_DIR/subject"`,
-                `printf '%s' "$PATH" > "$CAPTURE_DIR/path"`,
-                'echo step-completed',
-            ].join('\n'),
-        }, {}, testConfigNoPeer);
-        const run = runStep(script);
-        // "Completes every step" — the whole acceptance criterion, and what the
-        // production build could not do.
-        expect(run.status).toBe(0);
-        expect(run.stdout).toContain('step-completed');
-        expect(run.stderr).not.toContain('not a valid identifier');
-        // Correctness: byte for byte, internal blank line and all.
-        expect(captured('body')).toBe(BODY);
-        expect(captured('subject')).toBe(SUBJECT);
-        // Security: the commit's author does not get to choose PATH. Compared
-        // against what the parent process held, which is what "unchanged" means.
-        expect(captured('path')).toBe(process.env.PATH ?? '');
-        expect(captured('path')).not.toContain('/tmp/attacker-controlled');
-    });
-});
-//# sourceMappingURL=envstore-round-trip.test.js.map

package/dist/src/envman/index.d.ts

@@ -1,23 +0,0 @@
-/**
- * CI Build Environment Variable Manager (envman)
- *
- * A tool for managing environment variables between CI/CD pipeline steps.
- * Similar to Bitrise's envman, this allows scripts to register outputs
- * that subsequent steps can use as environment variables.
- *
- * @example
- * // In a script step:
- * // envman add --key BUILD_VERSION --value '1.2.3'
- * // envman add --key APK_PATH --valuefile ./build/output/path.txt
- *
- * @example
- * // Programmatic usage:
- * import { add, getAll, run } from './envman/index.js';
- *
- * add({ key: 'BUILD_VERSION', value: '1.2.3' });
- * const envs = getAll();
- * await run(['gradle', 'assembleRelease']);
- */
-export * from './envman.js';
-export * from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/src/envman/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/envman/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/src/envman/index.js

@@ -1,23 +0,0 @@
-/**
- * CI Build Environment Variable Manager (envman)
- *
- * A tool for managing environment variables between CI/CD pipeline steps.
- * Similar to Bitrise's envman, this allows scripts to register outputs
- * that subsequent steps can use as environment variables.
- *
- * @example
- * // In a script step:
- * // envman add --key BUILD_VERSION --value '1.2.3'
- * // envman add --key APK_PATH --valuefile ./build/output/path.txt
- *
- * @example
- * // Programmatic usage:
- * import { add, getAll, run } from './envman/index.js';
- *
- * add({ key: 'BUILD_VERSION', value: '1.2.3' });
- * const envs = getAll();
- * await run(['gradle', 'assembleRelease']);
- */
-export * from './envman.js';
-export * from './types.js';
-//# sourceMappingURL=index.js.map

package/dist/src/envman/shim.d.ts

@@ -1,16 +0,0 @@
-/**
- * The `envman` shell function prepended to every script step.
- *
- * Steps call `envman add --key K --value V` to publish a value to the steps
- * after them. This is a bash function rather than a call to the `ci` binary
- * because pkg-built binaries mishandle subcommands — so the writer half of the
- * envstore contract is generated bash, exactly like the reader half in
- * `createBashScript`.
- *
- * Lives in its own module so a test can run the *same bytes production runs*
- * against a real producer, rather than a copy that can drift from it. The
- * reader is driven directly in `src/yaml/steps/envstore-loader.test.ts`; the
- * pair is exercised end to end in `src/envman/envstore-round-trip.test.ts`.
- */
-export declare function envmanShellFunction(): string;
-//# sourceMappingURL=shim.d.ts.map

package/dist/src/envman/shim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shim.d.ts","sourceRoot":"","sources":["../../../src/envman/shim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAkD5C"}

package/dist/src/envman/shim.js

@@ -1,66 +0,0 @@
-/**
- * The `envman` shell function prepended to every script step.
- *
- * Steps call `envman add --key K --value V` to publish a value to the steps
- * after them. This is a bash function rather than a call to the `ci` binary
- * because pkg-built binaries mishandle subcommands — so the writer half of the
- * envstore contract is generated bash, exactly like the reader half in
- * `createBashScript`.
- *
- * Lives in its own module so a test can run the *same bytes production runs*
- * against a real producer, rather than a copy that can drift from it. The
- * reader is driven directly in `src/yaml/steps/envstore-loader.test.ts`; the
- * pair is exercised end to end in `src/envman/envstore-round-trip.test.ts`.
- */
-export function envmanShellFunction() {
-    return `envman() {
-  local cmd="$1"; shift
-  local store="\${ENVMAN_ENVSTORE_PATH:-.ci/.envstore.json}"
-  case "$cmd" in
-    add)
-      local key="" value="" valuefile="" sensitive=false skipifempty=false append=false
-      while [ $# -gt 0 ]; do
-        case "$1" in
-          --key|-k) key="$2"; shift 2 ;;
-          --value|-v) value="$2"; shift 2 ;;
-          --valuefile|-f) valuefile="$2"; shift 2 ;;
-          --sensitive|-s) sensitive=true; shift ;;
-          --skip-if-empty) skipifempty=true; shift ;;
-          --append|-a) append=true; shift ;;
-          *) shift ;;
-        esac
-      done
-      [ -z "$key" ] && { echo "envman add: --key required" >&2; return 1; }
-      if [ -n "$valuefile" ]; then
-        value="$(cat "$valuefile")"
-      elif [ -z "$value" ] && ! [ -t 0 ]; then
-        value="$(cat)"
-      fi
-      [ "$skipifempty" = true ] && [ -z "$value" ] && return 0
-      node -e '
-        const fs=require("fs");
-        const f=process.argv[1], k=process.argv[2], v=process.argv[3];
-        const s=process.argv[4]==="true", a=process.argv[5]==="true";
-        let store={envs:[]};
-        try{store=JSON.parse(fs.readFileSync(f,"utf-8"))}catch{}
-        const idx=store.envs.findIndex(e=>e.key===k);
-        if(a && idx>=0){store.envs[idx].value+=v}
-        else if(idx>=0){store.envs[idx].value=v;store.envs[idx].sensitive=s}
-        else{store.envs.push({key:k,value:v,sensitive:s})}
-        fs.mkdirSync(require("path").dirname(f),{recursive:true});
-        fs.writeFileSync(f,JSON.stringify(store,null,2));
-      ' "$store" "$key" "$value" "$sensitive" "$append"
-      echo "envman: $key set"
-      ;;
-    init)
-      node -e 'const fs=require("fs");const f=process.argv[1];fs.mkdirSync(require("path").dirname(f),{recursive:true});fs.writeFileSync(f,JSON.stringify({envs:[]},null,2))' "$store"
-      ;;
-    *)
-      echo "envman: unknown command: $cmd" >&2; return 1
-      ;;
-  esac
-}
-export -f envman
-`;
-}
-//# sourceMappingURL=shim.js.map

package/dist/src/envman/types.d.ts

@@ -1,55 +0,0 @@
-/**
- * Type definitions for the CI Build Environment Variable Manager (envman)
- */
-/**
- * A single environment variable entry in the store
- */
-export interface EnvEntry {
-    key: string;
-    value: string;
-    sensitive?: boolean;
-    createdAt: string;
-    updatedAt: string;
-}
-/**
- * The environment variable store structure
- */
-export interface EnvStore {
-    version: string;
-    envs: EnvEntry[];
-}
-/**
- * Options for adding an environment variable
- */
-export interface AddOptions {
-    key: string;
-    value?: string;
-    valueFile?: string;
-    sensitive?: boolean;
-    skipIfEmpty?: boolean;
-    append?: boolean;
-}
-/**
- * Options for running a command with environment variables
- */
-export interface RunOptions {
-    command: string[];
-    expandEnvs?: boolean;
-}
-/**
- * Result of an envman operation
- */
-export interface EnvmanResult {
-    success: boolean;
-    message?: string;
-    error?: string;
-}
-/**
- * Default store file name
- */
-export declare const DEFAULT_STORE_FILE = ".envstore.json";
-/**
- * Current store version
- */
-export declare const STORE_VERSION = "1.0.0";
-//# sourceMappingURL=types.d.ts.map

package/dist/src/envman/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/envman/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAEnD;;GAEG;AACH,eAAO,MAAM,aAAa,UAAU,CAAC"}

package/dist/src/envman/types.js

@@ -1,12 +0,0 @@
-/**
- * Type definitions for the CI Build Environment Variable Manager (envman)
- */
-/**
- * Default store file name
- */
-export const DEFAULT_STORE_FILE = '.envstore.json';
-/**
- * Current store version
- */
-export const STORE_VERSION = '1.0.0';
-//# sourceMappingURL=types.js.map

package/dist/src/lib.d.ts

@@ -1,33 +0,0 @@
-/**
- * @invarn/cibuild library API
- *
- * Programmatic access to cibuild pipeline parsing, conversion, and execution.
- * This is the non-interactive library surface — no prompts, no TTY dependencies.
- *
- * Usage:
- *   import {
- *     loadYAMLPipeline,
- *     convertYAMLToPipelineDef,
- *     PipelineRunner,
- *     loadConfig,
- *   } from '@invarn/cibuild/lib';
- */
-import './yaml/steps/index.js';
-export { PipelineRunner, StepExecutionError } from './runner.js';
-export { loadConfig } from './config.js';
-export { loadYAMLPipeline, getWorkflowNames, hasWorkflow, YAMLParseError, YAMLValidationError, } from './yaml/parser.js';
-export { loadFidelityManifest, parseFidelityManifest, buildSurfaceDispatchInputs, FidelityManifestError, } from './yaml/fidelity-manifest.js';
-export type { FidelityManifest, FidelitySurface, FidelityState, StateReference, ReferenceProvenance, BaselineEntry, SurfaceDispatchInputs, } from './yaml/fidelity-manifest.js';
-export { convertYAMLToPipelineDef, getAvailableWorkflows, YAMLConversionError, } from './yaml/converter.js';
-export type { ConversionResult } from './yaml/converter.js';
-export { pipeline } from './pipeline.js';
-export { renderUiFidelityPreview } from './yaml/steps/ui-fidelity-preview.js';
-export type { UiFidelityPreviewOptions, UiFidelityPreviewScreen, UiFidelityPreviewResult, UiFidelityPreviewScreenResult, UiFidelityPreviewDimensions, } from './yaml/steps/ui-fidelity-preview.js';
-export { renderUiFidelityPreviewAndroid, ANDROID_TOOLCHAIN_MISSING, } from './yaml/steps/ui-fidelity-preview-android.js';
-export type { UiFidelityPreviewAndroidOptions } from './yaml/steps/ui-fidelity-preview-android.js';
-export { getStepExecutor, hasStep, getAvailableSteps, registerStep, getStepMetadata, } from './yaml/steps/registry.js';
-export type { StepDef, PipelineDef, CIConfig, PipelineFactory, PipelineContext, StepBuilders, } from './types.js';
-export type { StepExecutor, StepMetadata, StepPlatform, StepExecutionContext, } from './yaml/steps/base.js';
-export type { YAMLPipeline, YAMLWorkflow, YAMLStep, YAMLStepInputs, YAMLEnvVar, YAMLApp, YAMLMeta, ParsedStep, PlatformInfo, Platform, MachineType, } from './yaml/types.js';
-export { MissingEnvironmentVariableError } from './yaml/env-resolver.js';
-//# sourceMappingURL=lib.d.ts.map

package/dist/src/lib.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lib.d.ts","sourceRoot":"","sources":["../../src/lib.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,uBAAuB,CAAC;AAI/B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAIjE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AAIrC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAI5D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAIzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,YAAY,EACV,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,6CAA6C,CAAC;AACrD,YAAY,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAInG,OAAO,EACL,eAAe,EACf,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAIlC,YAAY,EACV,OAAO,EACP,WAAW,EACX,QAAQ,EACR,eAAe,EACf,eAAe,EACf,YAAY,GACb,MAAM,YAAY,CAAC;AAIpB,YAAY,EACV,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAI9B,YAAY,EACV,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,UAAU,EACV,OAAO,EACP,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,WAAW,GACZ,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/src/lib.js

@@ -1,37 +0,0 @@
-/**
- * @invarn/cibuild library API
- *
- * Programmatic access to cibuild pipeline parsing, conversion, and execution.
- * This is the non-interactive library surface — no prompts, no TTY dependencies.
- *
- * Usage:
- *   import {
- *     loadYAMLPipeline,
- *     convertYAMLToPipelineDef,
- *     PipelineRunner,
- *     loadConfig,
- *   } from '@invarn/cibuild/lib';
- */
-// Side-effect: initialize the step registry (registers all step executors).
-// Must run before any convertYAMLToPipelineDef call.
-import './yaml/steps/index.js';
-// ─── Runner ─────────────────────────────────────────────────────────────
-export { PipelineRunner, StepExecutionError } from './runner.js';
-// ─── Config ─────────────────────────────────────────────────────────────
-export { loadConfig } from './config.js';
-// ─── YAML parser ────────────────────────────────────────────────────────
-export { loadYAMLPipeline, getWorkflowNames, hasWorkflow, YAMLParseError, YAMLValidationError, } from './yaml/parser.js';
-// ─── UI fidelity manifest ───────────────────────────────────────────────
-export { loadFidelityManifest, parseFidelityManifest, buildSurfaceDispatchInputs, FidelityManifestError, } from './yaml/fidelity-manifest.js';
-// ─── YAML converter (non-interactive) ───────────────────────────────────
-export { convertYAMLToPipelineDef, getAvailableWorkflows, YAMLConversionError, } from './yaml/converter.js';
-// ─── Pipeline DSL factory ───────────────────────────────────────────────
-export { pipeline } from './pipeline.js';
-// ─── UI fidelity local preview ──────────────────────────────────────────
-export { renderUiFidelityPreview } from './yaml/steps/ui-fidelity-preview.js';
-export { renderUiFidelityPreviewAndroid, ANDROID_TOOLCHAIN_MISSING, } from './yaml/steps/ui-fidelity-preview-android.js';
-// ─── Step registry ──────────────────────────────────────────────────────
-export { getStepExecutor, hasStep, getAvailableSteps, registerStep, getStepMetadata, } from './yaml/steps/registry.js';
-// ─── Error types ────────────────────────────────────────────────────────
-export { MissingEnvironmentVariableError } from './yaml/env-resolver.js';
-//# sourceMappingURL=lib.js.map

package/dist/src/pipeline.d.ts

@@ -1,3 +0,0 @@
-import type { PipelineFactory } from "./types.js";
-export declare const pipeline: PipelineFactory;
-//# sourceMappingURL=pipeline.d.ts.map

package/dist/src/pipeline.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA8C,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9F,eAAO,MAAM,QAAQ,EAAE,eAmEtB,CAAC"}

package/dist/src/pipeline.js

@@ -1,57 +0,0 @@
-export const pipeline = (name, builder) => {
-    const def = {
-        name,
-        artifacts: [],
-        steps: [],
-        stepsOrder: [],
-    };
-    const stepBuilders = {
-        script(name, options) {
-            def.steps.push({
-                id: options.id,
-                name,
-                kind: "script",
-                shell: options.shell,
-                script: options.script,
-            });
-        },
-        python(name, options) {
-            def.steps.push({
-                id: options.id,
-                name,
-                kind: "python",
-                script: options.script,
-            });
-        },
-        ruby(name, options) {
-            def.steps.push({
-                id: options.id,
-                name,
-                kind: "ruby",
-                script: options.script,
-            });
-        },
-        node(name, options) {
-            def.steps.push({
-                id: options.id,
-                name,
-                kind: "node",
-                script: options.script,
-            });
-        },
-    };
-    const pipelineContext = {
-        artifacts(paths) {
-            def.artifacts = paths;
-        },
-        steps(builder) {
-            builder(stepBuilders);
-        },
-        stepsOrder(ids) {
-            def.stepsOrder = ids;
-        },
-    };
-    builder(pipelineContext);
-    return def;
-};
-//# sourceMappingURL=pipeline.js.map

package/dist/src/runner-node-step.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * Node-kind step execution must ride a temp script FILE, never `node -e`.
- *
- * The released `ci` binary is pkg-built. pkg's bootstrap intercepts child
- * spawns of `node` and re-executes the pkg binary itself — and that
- * bootstrap cannot handle `-e`: it resolves it as an entrypoint path and
- * dies with `Cannot find module '<cwd>/-e'` before the script runs. A
- * real file path works under both a system node and the pkg bootstrap,
- * exactly like bash steps already do via their temp-file pattern.
- */
-export {};
-//# sourceMappingURL=runner-node-step.test.d.ts.map

package/dist/src/runner-node-step.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runner-node-step.test.d.ts","sourceRoot":"","sources":["../../src/runner-node-step.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/src/runner-node-step.test.js

@@ -1,61 +0,0 @@
-/**
- * Node-kind step execution must ride a temp script FILE, never `node -e`.
- *
- * The released `ci` binary is pkg-built. pkg's bootstrap intercepts child
- * spawns of `node` and re-executes the pkg binary itself — and that
- * bootstrap cannot handle `-e`: it resolves it as an entrypoint path and
- * dies with `Cannot find module '<cwd>/-e'` before the script runs. A
- * real file path works under both a system node and the pkg bootstrap,
- * exactly like bash steps already do via their temp-file pattern.
- */
-import { describe, test, expect, afterEach } from '@jest/globals';
-import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { PipelineRunner, StepExecutionError } from './runner.js';
-import { loadConfig } from './config.js';
-function nodeStep(script) {
-    return {
-        id: 'step_test',
-        name: 'node-under-test',
-        kind: 'node',
-        script,
-    };
-}
-describe('PipelineRunner node-kind steps', () => {
-    let outDir = null;
-    afterEach(() => {
-        if (outDir)
-            rmSync(outDir, { recursive: true, force: true });
-        outDir = null;
-    });
-    test('executes the script from a file: argv[1] is a real path, never -e', async () => {
-        outDir = mkdtempSync(join(tmpdir(), 'cibuild-node-step-'));
-        const probePath = join(outDir, 'probe.json');
-        const runner = new PipelineRunner(loadConfig('/nonexistent/ci.config.json'));
-        await runner.runStep(nodeStep(`require('fs').writeFileSync(${JSON.stringify(probePath)}, JSON.stringify({` +
-            `argv1: process.argv[1] ?? null,` +
-            `filename: typeof __filename === 'string' ? __filename : null` +
-            `}))`));
-        const probe = JSON.parse(readFileSync(probePath, 'utf-8'));
-        // `node -e` leaves argv[1] undefined and has no __filename; a
-        // file-executed script has both, and neither may be the literal '-e'.
-        expect(probe.argv1).not.toBeNull();
-        expect(probe.argv1).not.toBe('-e');
-        expect(probe.filename).not.toBeNull();
-        expect(probe.filename).toMatch(/\.cjs$/);
-    });
-    test('propagates a non-zero exit as StepExecutionError', async () => {
-        const runner = new PipelineRunner(loadConfig('/nonexistent/ci.config.json'));
-        await expect(runner.runStep(nodeStep('process.exit(3)'))).rejects.toThrow(StepExecutionError);
-    });
-    test('cleans up the temp script file after the step exits', async () => {
-        outDir = mkdtempSync(join(tmpdir(), 'cibuild-node-step-'));
-        const probePath = join(outDir, 'probe.json');
-        const runner = new PipelineRunner(loadConfig('/nonexistent/ci.config.json'));
-        await runner.runStep(nodeStep(`require('fs').writeFileSync(${JSON.stringify(probePath)}, JSON.stringify({ filename: __filename }))`));
-        const { filename } = JSON.parse(readFileSync(probePath, 'utf-8'));
-        expect(() => readFileSync(filename)).toThrow();
-    });
-});
-//# sourceMappingURL=runner-node-step.test.js.map

package/dist/src/runner.d.ts

@@ -1,31 +0,0 @@
-import type { StepDef, PipelineDef, CIConfig } from "./types.js";
-import type { CheckoutWitness } from "./yaml/converter.js";
-export declare class StepExecutionError extends Error {
-    stepId: string;
-    stepName: string;
-    exitCode: number;
-    constructor(stepId: string, stepName: string, exitCode: number);
-}
-export declare class PipelineRunner {
-    private config;
-    constructor(config: CIConfig);
-    runStep(step: StepDef, stepNumber?: number): Promise<void>;
-    private formatDuration;
-    validatePipeline(pipeline: PipelineDef): void;
-    displayWarnings(warnings: string[], skippedSteps: number): void;
-    /**
-     * The commit this build compiled, printed under the banner.
-     *
-     * Every build carries it, whatever steps it declares. The dashboard's sha is
-     * the one that was *dispatched*; this one was read off the disk the compiler
-     * is about to read, and it is what a later argument about which code shipped
-     * has to be settled against. It used to live only in `git-clone`'s echo,
-     * which is optional and no longer in the curated templates.
-     *
-     * Labels match that echo's on purpose — where both appear they are the same
-     * three facts, and they have to agree.
-     */
-    displayCheckout(checkout: CheckoutWitness): void;
-    runPipeline(pipeline: PipelineDef, warnings?: string[], skippedSteps?: number, checkout?: CheckoutWitness): Promise<void>;
-}
-//# sourceMappingURL=runner.d.ts.map

package/dist/src/runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAO3D,qBAAa,kBAAmB,SAAQ,KAAK;IAElC,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;gBAFhB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAK1B;AAED,qBAAa,cAAc;IACb,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,QAAQ;IAE9B,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiHhE,OAAO,CAAC,cAAc;IAYtB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;IAwB7C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAc/D;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAO1C,WAAW,CACf,QAAQ,EAAE,WAAW,EACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,eAAe,GACzB,OAAO,CAAC,IAAI,CAAC;CA+CjB"}