@invarn/cibuild 2.9.6 → 2.9.8

package/dist/src/yaml/steps/steps.test.js

@@ -1,881 +0,0 @@
-/**
- * Integration tests for step implementations
- * Tests each step executor with sample inputs
- */
-import { describe, test, expect } from '@jest/globals';
-import { execFileSync } from 'node:child_process';
-import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { GitCloneStepExecutor } from './git-clone.js';
-import { ScriptStepExecutor } from './script.js';
-import { CachePullStepExecutor, CachePushStepExecutor } from './cache.js';
-import { testConfig, testConfigNoPeer } from './test-config.js';
-import { XcodeBuildStepExecutor, XcodeTestStepExecutor } from './xcode.js';
-import { SetJavaVersionStepExecutor, GradleBuildStepExecutor, AndroidLintStepExecutor, AndroidUnitTestStepExecutor, } from './android.js';
-describe('Step Implementations', () => {
-    describe('GitCloneStepExecutor', () => {
-        test('should generate local checkout script', async () => {
-            const executor = new GitCloneStepExecutor();
-            const result = await executor.execute({}, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('git-clone');
-            expect(result.script).toContain('git rev-parse --show-toplevel');
-            expect(result.script).toContain('CIBUILD_SOURCE_DIR');
-            expect(result.script).toContain('COMMIT_HASH');
-        });
-        test('should export commit metadata via envman', async () => {
-            const executor = new GitCloneStepExecutor();
-            const result = await executor.execute({}, {}, testConfig);
-            expect(result.script).toContain('envman add --key CIBUILD_SOURCE_DIR');
-            expect(result.script).toContain('envman add --key GIT_CLONE_COMMIT_HASH');
-            expect(result.script).toContain('envman add --key CIBUILD_GIT_COMMIT');
-            expect(result.script).toContain('envman add --key GIT_CLONE_COMMIT_AUTHOR_NAME');
-            expect(result.script).toContain('envman add --key GIT_CLONE_COMMIT_MESSAGE_SUBJECT');
-        });
-        test('should export CIBUILD variables', async () => {
-            const executor = new GitCloneStepExecutor();
-            const result = await executor.execute({}, {}, testConfig);
-            expect(result.script).toContain('envman add --key CIBUILD_SOURCE_DIR');
-            expect(result.script).toContain('envman add --key CIBUILD_GIT_COMMIT');
-        });
-        test('should fail if not in a git repository', async () => {
-            const executor = new GitCloneStepExecutor();
-            const result = await executor.execute({}, {}, testConfig);
-            expect(result.script).toContain('Not inside a git repository');
-            expect(result.script).toContain('exit 1');
-        });
-    });
-    describe('ScriptStepExecutor', () => {
-        test('should generate bash script', async () => {
-            const executor = new ScriptStepExecutor();
-            const inputs = {
-                content: 'echo "Hello World"',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('script');
-            expect(result.script).toContain('echo "Hello World"');
-        });
-        test('should require content input', async () => {
-            const executor = new ScriptStepExecutor();
-            const inputs = {};
-            await expect(executor.execute(inputs, {}, testConfig)).rejects.toThrow("Missing required input 'content'");
-        });
-        test('should support working directory', async () => {
-            const executor = new ScriptStepExecutor();
-            const inputs = {
-                content: 'pwd',
-                working_dir: '/tmp/test',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('cd');
-            expect(result.script).toContain('/tmp/test');
-        });
-        test('should support python runner', async () => {
-            const executor = new ScriptStepExecutor();
-            const inputs = {
-                content: 'print("Hello from Python")',
-                runner_bin: 'python3',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('python');
-            expect(result.script).toBe('print("Hello from Python")');
-        });
-        test('should support node runner', async () => {
-            const executor = new ScriptStepExecutor();
-            const inputs = {
-                content: 'console.log("Hello from Node")',
-                runner_bin: 'node',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('node');
-            expect(result.script).toBe('console.log("Hello from Node")');
-        });
-        test('should support ruby runner', async () => {
-            const executor = new ScriptStepExecutor();
-            const inputs = {
-                content: 'puts "Hello from Ruby"',
-                runner_bin: 'ruby',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('ruby');
-            expect(result.script).toBe('puts "Hello from Ruby"');
-        });
-    });
-    describe('CachePullStepExecutor', () => {
-        test('should generate cache pull script', async () => {
-            const executor = new CachePullStepExecutor();
-            const inputs = {
-                cache_key: 'node-modules-v1',
-                cache_paths: ['node_modules'],
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('cache-pull');
-            expect(result.script).toContain('cache-pull');
-            expect(result.script).toContain('node-modules-v1');
-            expect(result.script).toContain('.ci-cache');
-        });
-        test('should skip gracefully when cache_key is missing', async () => {
-            const executor = new CachePullStepExecutor();
-            const inputs = {};
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('skipped');
-        });
-        test('should support debug mode', async () => {
-            const executor = new CachePullStepExecutor();
-            const inputs = {
-                cache_key: 'test-cache',
-                is_debug_mode: true,
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('Debug mode enabled');
-        });
-        test('should auto-configure for cocoapods technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfig);
-            expect(result.script).toContain('Podfile.lock');
-            expect(result.script).toContain('pods-');
-            expect(result.script).toContain('shasum -a 256');
-        });
-        test('should auto-configure for gradle technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'gradle' }, {}, testConfig);
-            expect(result.script).toContain("-name 'gradle-wrapper.properties'");
-            expect(result.script).toContain("-name 'build.gradle.kts'");
-            expect(result.script).toContain('gradle-');
-        });
-        test('should auto-configure for npm technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'npm' }, {}, testConfig);
-            expect(result.script).toContain('package-lock.json');
-            expect(result.script).toContain('npm-');
-        });
-        test('should auto-configure for dart technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'dart' }, {}, testConfig);
-            expect(result.script).toContain('pubspec.lock');
-            expect(result.script).toContain('dart-');
-        });
-        test('should auto-configure for carthage technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'carthage' }, {}, testConfig);
-            expect(result.script).toContain('Cartfile.resolved');
-            expect(result.script).toContain('carthage-');
-        });
-        test('should auto-configure for spm technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'spm' }, {}, testConfig);
-            expect(result.script).toContain('Package.resolved');
-            expect(result.script).toContain('spm-');
-        });
-        // A static `toContain` check can't catch a control-flow bug in the
-        // fallback chain (the script "contains" both Podfile.lock and
-        // Package.resolved either way). So actually execute the generated
-        // key-derivation in a fixture repo and read the resolved key back.
-        describe('ios fallback chain (executed in a fixture repo)', () => {
-            // Run the generated ios cache-pull in a fixture repo and capture
-            // BOTH streams (the daemon probe writes its noise to stderr).
-            async function runIosPull(build, env = {}) {
-                const script = (await new CachePullStepExecutor().execute({ technology: 'ios' }, {}, testConfigNoPeer)).script;
-                const dir = mkdtempSync(join(tmpdir(), 'cibuild-cache-'));
-                try {
-                    build(dir);
-                    const scriptPath = join(dir, '__cache_pull.sh');
-                    writeFileSync(scriptPath, script);
-                    let stdout = '';
-                    let stderr = '';
-                    try {
-                        stdout = execFileSync('bash', [scriptPath], {
-                            cwd: dir,
-                            encoding: 'utf-8',
-                            stdio: ['ignore', 'pipe', 'pipe'],
-                            env: { ...process.env, ...env },
-                            timeout: 20000,
-                        });
-                    }
-                    catch (e) {
-                        const err = e;
-                        stdout = String(err.stdout ?? '');
-                        stderr = String(err.stderr ?? '');
-                    }
-                    return { stdout, stderr, combined: stdout + stderr };
-                }
-                finally {
-                    rmSync(dir, { recursive: true, force: true });
-                }
-            }
-            async function resolveIosCacheKey(build) {
-                const { combined } = await runIosPull(build);
-                const m = combined.match(/CACHE_KEY=(\S+)/);
-                if (!m)
-                    throw new Error(`No CACHE_KEY in output:\n${combined}`);
-                return m[1];
-            }
-            function writeSpmFixture(dir) {
-                const swiftpm = join(dir, 'App.xcodeproj/project.xcworkspace/xcshareddata/swiftpm');
-                mkdirSync(swiftpm, { recursive: true });
-                writeFileSync(join(swiftpm, 'Package.resolved'), '{"pins":[],"version":3}');
-            }
-            test('a daemon that is not listening is named once, and leaks no raw noise', async () => {
-                // A closed port: curl errors instantly with no server handle to leak.
-                //
-                // This used to assert that the output contained no `curl:` at all —
-                // curl's stderr was silenced whatever the failure mode was, which is
-                // how a 401, a 500 and a dead daemon all came to print the same
-                // `No cache found` as an empty cache. The contract is now narrower: a
-                // *miss* is silent (the 404 case, covered against a real listener in
-                // cache-pull-daemon.test.ts), a *failure* is named exactly once, and
-                // neither leaks the raw pipeline chatter that made the old blanket
-                // silence attractive in the first place.
-                const { stdout, stderr, combined } = await runIosPull(writeSpmFixture, {
-                    CIBUILD_CACHE_DAEMON: 'http://127.0.0.1:1',
-                });
-                expect(stdout).toContain('Warning: cache-pull could not restore');
-                expect(stdout).toMatch(/Failed to connect|Couldn't connect|Connection refused/);
-                // Once, not once per request the step happens to make.
-                expect(stdout.match(/Warning: cache-pull could not restore/gu)).toHaveLength(1);
-                // Whatever curl said arrives inside that one line, on stdout. Nothing
-                // reaches the build log as loose interleaved stderr, and zstd/tar still
-                // do not editorialise about a stream that never arrived.
-                expect(stderr).not.toContain('curl:');
-                expect(combined).not.toContain('unexpected end of file');
-                // Still resolves the SPM key and reports a cold miss.
-                expect(stdout).toContain('CACHE_SOURCE=cold');
-                expect(stdout).toMatch(/CACHE_KEY=spm-/);
-            });
-            test('SPM project (Package.resolved, no Podfile.lock) resolves an spm- key', async () => {
-                const key = await resolveIosCacheKey((dir) => {
-                    // Real Xcode SPM location — Package.resolved committed under
-                    // the shared xcworkspace data, no Podfile.lock anywhere.
-                    const swiftpm = join(dir, 'App.xcodeproj/project.xcworkspace/xcshareddata/swiftpm');
-                    mkdirSync(swiftpm, { recursive: true });
-                    writeFileSync(join(swiftpm, 'Package.resolved'), '{"pins":[],"version":3}');
-                });
-                expect(key).toMatch(/^spm-/);
-                expect(key).not.toContain('no-lockfile');
-            });
-            test('CocoaPods project (Podfile.lock) resolves a pods- key', async () => {
-                const key = await resolveIosCacheKey((dir) => {
-                    writeFileSync(join(dir, 'Podfile.lock'), 'PODS:\n  - Alamofire\n');
-                });
-                expect(key).toMatch(/^pods-/);
-                expect(key).not.toContain('no-lockfile');
-            });
-            test('Podfile.lock wins over Package.resolved when both exist', async () => {
-                const key = await resolveIosCacheKey((dir) => {
-                    writeFileSync(join(dir, 'Podfile.lock'), 'PODS:\n');
-                    writeFileSync(join(dir, 'Package.resolved'), '{"pins":[]}');
-                });
-                expect(key).toMatch(/^pods-/);
-                expect(key).not.toContain('no-lockfile');
-            });
-            test('neither lockfile present falls back to a no-lockfile key', async () => {
-                const key = await resolveIosCacheKey(() => { });
-                expect(key).toContain('no-lockfile');
-            });
-        });
-        test('should auto-configure for yarn technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'yarn' }, {}, testConfig);
-            expect(result.script).toContain('yarn.lock');
-            expect(result.script).toContain('yarn-');
-        });
-        test('should auto-configure for kmm technology', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            expect(result.script).toContain("-name 'gradle-wrapper.properties'");
-            expect(result.script).toContain("-name 'settings.gradle'");
-            expect(result.script).toContain("-name 'build.gradle.kts'");
-            expect(result.script).toContain("-name 'libs.versions.toml'");
-            expect(result.script).toContain('kmm-');
-        });
-        test('should use zstd compression format', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfig);
-            expect(result.script).toContain('.tar.zst');
-            expect(result.script).toContain('zstd -dc');
-            expect(result.script).not.toContain('.tar.gz');
-            expect(result.script).not.toContain('tar -xzf');
-        });
-        test('should throw on unknown technology', async () => {
-            const executor = new CachePullStepExecutor();
-            await expect(executor.execute({ technology: 'unknown' }, {}, testConfig)).rejects.toThrow("Unknown cache technology 'unknown'");
-        });
-        test('should include peer cache fallback when peerCacheDir is set', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfig);
-            expect(result.script).toContain('PEER_CACHE_DIR=');
-            expect(result.script).toContain('PEER_CACHE_FILE=');
-            expect(result.script).toContain('CACHE_SOURCE=local');
-            expect(result.script).toContain('CACHE_SOURCE=peer');
-            expect(result.script).toContain('CACHE_SOURCE=cold');
-            // tee pattern: single read from peer, simultaneous extract + local warm
-            expect(result.script).toContain('tee "$CACHE_FILE.tmp" < "$PEER_CACHE_FILE"');
-        });
-        test('should skip peer fallback when peerCacheDir is not set', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfigNoPeer);
-            expect(result.script).not.toContain('PEER_CACHE_DIR=');
-            expect(result.script).not.toContain('PEER_CACHE_FILE=');
-            expect(result.script).not.toContain('CACHE_SOURCE=peer');
-        });
-        test('should include peer fallback for manual cache_key pull', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ cache_key: 'my-key' }, {}, testConfig);
-            expect(result.script).toContain('PEER_CACHE_DIR=');
-            expect(result.script).toContain('CACHE_SOURCE=peer');
-            expect(result.script).toContain('tee "$CACHE_FILE.tmp" < "$PEER_CACHE_FILE"');
-        });
-        test('should fall back to newest prior tarball scoped to <keyPrefix>-<projectId> on exact-key miss', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // Scope = everything before the last dash (prefix+projectId, not just prefix),
-            // so fallback cannot cross-contaminate between different projects
-            expect(result.script).toContain('__ci_fb_scope="${CACHE_KEY%-*}"');
-            expect(result.script).toContain('ls -t "$CACHE_DIR"/"$__ci_fb_scope"-*.tar.zst');
-            expect(result.script).toContain('CACHE_SOURCE=fallback_');
-            expect(result.script).toContain('FALLBACK_KEY=');
-            // Fallback must NOT warm $CACHE_FILE (otherwise cache-push would skip).
-            // Both transports declare a scope, so anchor on the last one — the
-            // filesystem branch, which is the only one with a $CACHE_FILE to warm.
-            const sections = result.script.split('__ci_fb_scope=');
-            const fallbackSection = sections[sections.length - 1] ?? '';
-            expect(fallbackSection).not.toContain('mv "$CACHE_FILE.tmp" "$CACHE_FILE"');
-        });
-        test('asks the daemon for the scope fallback, dated, when there is no shared dir', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // The daemon answers the same two questions the directory listing did:
-            // which key, and how old.
-            expect(result.script).toContain('"$CIBUILD_CACHE_DAEMON/cache/scope/$__ci_fb_scope/latest"');
-            expect(result.script).toContain('CACHE_SOURCE=fallback_daemon');
-            // The 30-day cap has to survive losing `stat`, so it reads the daemon's
-            // mtime instead. Without this the cap silently disappears.
-            expect(result.script).toContain('__ci_fb_mtime');
-            expect(result.script).toContain('-le 30');
-            expect(result.script).toContain('FALLBACK_REJECTED=');
-        });
-        test('should try peer dir for fallback when local has no prior tarball', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            expect(result.script).toContain('ls -t "$PEER_CACHE_DIR"/"$__ci_fb_scope"-*.tar.zst');
-            expect(result.script).toContain('__ci_fb_src=peer');
-        });
-        test('should skip peer fallback branch when peerCacheDir is not set', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfigNoPeer);
-            expect(result.script).not.toContain('ls -t "$PEER_CACHE_DIR"');
-            // Local fallback still available
-            expect(result.script).toContain('ls -t "$CACHE_DIR"/"$__ci_fb_scope"-*.tar.zst');
-        });
-        test('should include project-scope id ($__ci_proj) in cache key', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // Project id derived from stripped git remote URL, 8-char hash
-            expect(result.script).toContain('git config --get remote.origin.url');
-            expect(result.script).toContain('__ci_proj=$');
-            // Key format: <prefix>-<projid>-<fp>
-            expect(result.script).toContain('CACHE_KEY="kmm-${__ci_proj}-${CHECKSUM}"');
-        });
-        test('should include project-scope id in lockfile-based preset keys', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfig);
-            expect(result.script).toContain('__ci_proj=$');
-            expect(result.script).toContain('CACHE_KEY="pods-${__ci_proj}-${CHECKSUM}"');
-        });
-        test('should enforce 30-day age cap on fallback, going cold when older', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // Computes age in days from stat mtime, rejects if over 30
-            expect(result.script).toContain('__ci_fb_age_days=$(( ($(date +%s) - $(stat -f %m "$__ci_fb")) / 86400 ))');
-            expect(result.script).toContain('if [ "$__ci_fb_age_days" -le 30 ]');
-            expect(result.script).toContain('exceeds 30d cap — going cold');
-            expect(result.script).toContain('FALLBACK_REJECTED=');
-        });
-        test('routes a preset pull miss through the cache daemon when CIBUILD_CACHE_DAEMON is set', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // Daemon branch is gated at runtime on the injected env var (so the same
-            // generated script is a no-op when the runner doesn't inject a daemon).
-            expect(result.script).toContain('[ -n "$CIBUILD_CACHE_DAEMON" ]');
-            // Exact-key GET against the per-runner daemon.
-            expect(result.script).toContain('"$CIBUILD_CACHE_DAEMON/cache/$CACHE_KEY.tar.zst"');
-            // Stream-extract: the daemon already persisted the tarball to ~/cache via
-            // resolveMiss, so we pipe straight to extraction with no redundant write.
-            expect(result.script).toContain('CACHE_SOURCE=daemon CACHE_KEY=$CACHE_KEY');
-        });
-        test('sends the per-build bearer token only when CIBUILD_CACHE_TOKEN is set', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // ${VAR:+...} expands the -H flag only when the token is non-empty, so an
-            // unauthenticated daemon isn't sent a bogus "Bearer " header.
-            expect(result.script).toContain('${CIBUILD_CACHE_TOKEN:+-H "Authorization: Bearer $CIBUILD_CACHE_TOKEN"}');
-        });
-        test('picks its transport up front — daemon when configured, directory otherwise', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // The daemon is no longer a branch *within* the directory search; it is
-            // the alternative to it, chosen before any lookup happens. A runner has
-            // no cache directory to search once the mount is gone, and standalone
-            // cibuild has no daemon — the same script has to serve both.
-            const splitAt = result.script.indexOf('if [ -n "$CIBUILD_CACHE_DAEMON" ]; then');
-            const daemonAt = result.script.indexOf('CACHE_SOURCE=daemon');
-            const localAt = result.script.indexOf('CACHE_SOURCE=local');
-            expect(splitAt).toBeGreaterThanOrEqual(0);
-            expect(daemonAt).toBeGreaterThan(splitAt);
-            expect(localAt).toBeGreaterThan(daemonAt);
-        });
-        test('does not require the cache directory to exist when using the daemon', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // An unconditional mkdir aborts the step under errexit once the mount is
-            // gone, which is how this fails in production rather than in a test.
-            expect(result.script).toContain('[ -n "$CIBUILD_CACHE_DAEMON" ] || mkdir -p "$CACHE_DIR"');
-            expect(result.script).not.toContain('\nmkdir -p "$CACHE_DIR"');
-        });
-        test('routes a manual cache_key pull miss through the cache daemon', async () => {
-            const executor = new CachePullStepExecutor();
-            const result = await executor.execute({ cache_key: 'my-key' }, {}, testConfig);
-            expect(result.script).toContain('[ -n "$CIBUILD_CACHE_DAEMON" ]');
-            expect(result.script).toContain('"$CIBUILD_CACHE_DAEMON/cache/$CACHE_KEY.tar.zst"');
-            // An explicit-key step reports the bare source, matching its sibling
-            // markers; the key is already fixed and echoed by the step header.
-            expect(result.script).toContain('CACHE_SOURCE=daemon');
-        });
-    });
-    describe('CachePushStepExecutor', () => {
-        test('should generate cache push script', async () => {
-            const executor = new CachePushStepExecutor();
-            const inputs = {
-                cache_key: 'node-modules-v1',
-                cache_paths: ['node_modules', '.gradle'],
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('cache-push');
-            expect(result.script).toContain('cache-push');
-            expect(result.script).toContain('node-modules-v1');
-            expect(result.script).toContain('.ci-cache');
-        });
-        test('uploads to the daemon when one is configured, on both step forms', async () => {
-            const executor = new CachePushStepExecutor();
-            const manual = await executor.execute({ cache_key: 'my-key', cache_paths: ['build'] }, {}, testConfig);
-            const preset = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // This is the half that used to be missing: push wrote only to the
-            // shared directory, so removing the mount would have silently dropped
-            // every cache while still reporting success.
-            for (const result of [manual, preset]) {
-                expect(result.script).toContain('-T - "$CIBUILD_CACHE_DAEMON/cache/$CACHE_KEY.tar.zst"');
-                expect(result.script).toContain('${CIBUILD_CACHE_TOKEN:+-H "Authorization: Bearer $CIBUILD_CACHE_TOKEN"}');
-                // Streamed straight out — nothing is staged on the guest, so there is
-                // no temp file to collide with a concurrent slot or orphan on failure.
-                expect(result.script).toContain('| zstd -3 | curl');
-            }
-        });
-        test('a failed upload warns instead of failing the build', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            expect(result.script).toContain('Warning: failed to upload cache to the daemon');
-        });
-        test('still writes to the cache directory when no daemon is configured', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // Standalone cibuild has no daemon and must keep working unchanged.
-            expect(result.script).toContain('CACHE_TMP="$CACHE_FILE.$$.$RANDOM.tmp"');
-            expect(result.script).toContain('mv "$CACHE_TMP" "$CACHE_FILE"');
-        });
-        test('should skip gracefully when cache_key is missing', async () => {
-            const executor = new CachePushStepExecutor();
-            const inputs = {
-                cache_paths: ['node_modules'],
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('skipped');
-        });
-        test('uses a per-process-unique temp for the atomic write (CBR-12)', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            // The old fixed "$CACHE_FILE.tmp" assumed a single writer ("runs
-            // serialized per runner") — false with two VM slots, and it collides with
-            // the host cache daemon mutating the same VirtioFS-shared dir. A unique
-            // temp (PID + $RANDOM) removes the collision; the atomic mv is preserved.
-            expect(result.script).not.toContain('> "$CACHE_FILE.tmp"');
-            expect(result.script).toContain('CACHE_TMP="$CACHE_FILE.$$.$RANDOM.tmp"');
-            expect(result.script).toContain('mv "$CACHE_TMP" "$CACHE_FILE"');
-            // A failed compress/mv cleans its own temp instead of leaking orphans,
-            // and stays non-fatal (never fails the build).
-            expect(result.script).toContain('rm -f "$CACHE_TMP"');
-        });
-        test('should require cache_paths', async () => {
-            const executor = new CachePushStepExecutor();
-            const inputs = {
-                cache_key: 'test-cache',
-                cache_paths: [],
-            };
-            await expect(executor.execute(inputs, {}, testConfig)).rejects.toThrow("Missing or empty 'cache_paths'");
-        });
-        test('should support debug mode', async () => {
-            const executor = new CachePushStepExecutor();
-            const inputs = {
-                cache_key: 'test-cache',
-                cache_paths: ['build'],
-                is_debug_mode: true,
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('Debug mode enabled');
-        });
-        test('should auto-configure for cocoapods technology', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfig);
-            expect(result.script).toContain('Podfile.lock');
-            expect(result.script).toContain('pods-');
-            expect(result.script).toContain('Pods');
-            expect(result.script).toContain('zstd -3');
-        });
-        test('should auto-configure for gradle technology', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'gradle' }, {}, testConfig);
-            expect(result.script).toContain("-name 'gradle-wrapper.properties'");
-            expect(result.script).toContain("-name 'build.gradle.kts'");
-            expect(result.script).toContain('~/.gradle/caches');
-        });
-        test('should auto-configure for npm technology', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'npm' }, {}, testConfig);
-            expect(result.script).toContain('package-lock.json');
-            expect(result.script).toContain('node_modules');
-        });
-        test('should auto-configure for dart technology', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'dart' }, {}, testConfig);
-            expect(result.script).toContain('pubspec.lock');
-            expect(result.script).toContain('.dart_tool');
-            expect(result.script).toContain('.pub-cache');
-        });
-        test('should auto-configure for kmm technology', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            expect(result.script).toContain("-name 'gradle-wrapper.properties'");
-            expect(result.script).toContain("-name 'settings.gradle.kts'");
-            expect(result.script).toContain("-name 'libs.versions.toml'");
-            expect(result.script).toContain('kmm-');
-            expect(result.script).toContain('~/.gradle/caches');
-            expect(result.script).toContain('~/.gradle/wrapper/dists');
-            expect(result.script).toContain('~/.konan');
-        });
-        test('should use zstd compression format', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfig);
-            expect(result.script).toContain('.tar.zst');
-            expect(result.script).toContain('zstd -3');
-            expect(result.script).not.toContain('.tar.gz');
-            expect(result.script).not.toContain('tar -czf');
-        });
-        test('should throw on unknown technology', async () => {
-            const executor = new CachePushStepExecutor();
-            await expect(executor.execute({ technology: 'unknown' }, {}, testConfig)).rejects.toThrow("Unknown cache technology 'unknown'");
-        });
-        test('should not use shlock (flaky on virtiofs cache mount) for preset push', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'cocoapods' }, {}, testConfig);
-            expect(result.script).not.toContain('shlock');
-            expect(result.script).not.toContain('LOCK_FILE');
-            expect(result.script).not.toContain('__ci_lock_tries');
-        });
-        test('should not use shlock for manual cache_key push', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ cache_key: 'my-key', cache_paths: ['build'] }, {}, testConfig);
-            expect(result.script).not.toContain('shlock');
-            expect(result.script).not.toContain('LOCK_FILE');
-        });
-        test('should use atomic write (tmp + mv) for preset push', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'gradle' }, {}, testConfig);
-            expect(result.script).toContain('> "$CACHE_TMP"');
-            expect(result.script).toContain('mv "$CACHE_TMP" "$CACHE_FILE"');
-        });
-        test('should NOT emit guest-side retention (the peer cache daemon owns it, CBR-6)', async () => {
-            // ADR 0002 / CBR-6: retention moved into the long-lived peer cache daemon,
-            // which knows (via the manager) which scopes this runner owns and must never
-            // evict. The guest cache-push no longer prunes — it could only reap an owner's
-            // durable copy, having no ownership knowledge of its own.
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ technology: 'kmm' }, {}, testConfig);
-            expect(result.script).not.toContain('__ci_ret_scope');
-            expect(result.script).not.toContain('__ci_ret_count_cap');
-            expect(result.script).not.toContain('__ci_ret_age_cap');
-            expect(result.script).not.toContain('CIBUILD_CACHE_SCOPE_BUDGET_KB');
-            // The successful-push path itself is unchanged.
-            expect(result.script).toContain('Cache created successfully');
-        });
-        test('should not emit retention for a manual cache_key push either', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ cache_key: 'my-key', cache_paths: ['build'] }, {}, testConfig);
-            expect(result.script).not.toContain('__ci_ret_scope');
-            expect(result.script).not.toContain('__ci_ret_count_cap');
-        });
-        test('should use atomic write (tmp + mv) for manual cache_key push', async () => {
-            const executor = new CachePushStepExecutor();
-            const result = await executor.execute({ cache_key: 'my-key', cache_paths: ['build'] }, {}, testConfig);
-            expect(result.script).toContain('> "$CACHE_TMP"');
-            expect(result.script).toContain('mv "$CACHE_TMP" "$CACHE_FILE"');
-        });
-    });
-    describe('XcodeBuildStepExecutor', () => {
-        test('should generate xcodebuild script', async () => {
-            const executor = new XcodeBuildStepExecutor();
-            const inputs = {
-                project_path: 'MyApp.xcodeproj',
-                scheme: 'MyApp',
-                configuration: 'Release',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('xcodebuild');
-            expect(result.script).toContain('xcodebuild');
-            expect(result.script).toContain('MyApp.xcodeproj');
-            expect(result.script).toContain('-scheme');
-            expect(result.script).toContain('MyApp');
-            expect(result.script).toContain('-configuration');
-            expect(result.script).toContain('Release');
-        });
-        test('should require project_path', async () => {
-            const executor = new XcodeBuildStepExecutor();
-            const inputs = {
-                scheme: 'MyApp',
-            };
-            await expect(executor.execute(inputs, {}, testConfig)).rejects.toThrow("Missing required input 'project_path'");
-        });
-        test('should require scheme', async () => {
-            const executor = new XcodeBuildStepExecutor();
-            const inputs = {
-                project_path: 'MyApp.xcodeproj',
-            };
-            await expect(executor.execute(inputs, {}, testConfig)).rejects.toThrow("Missing required input 'scheme'");
-        });
-        test('should support workspace files', async () => {
-            const executor = new XcodeBuildStepExecutor();
-            const inputs = {
-                project_path: 'MyApp.xcworkspace',
-                scheme: 'MyApp',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('xcworkspace');
-        });
-        test('should support clean build', async () => {
-            const executor = new XcodeBuildStepExecutor();
-            const inputs = {
-                project_path: 'MyApp.xcodeproj',
-                scheme: 'MyApp',
-                is_clean_build: true,
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('clean');
-        });
-    });
-    describe('XcodeTestStepExecutor', () => {
-        test('should generate xcode test script', async () => {
-            const executor = new XcodeTestStepExecutor();
-            const inputs = {
-                project_path: 'MyApp.xcodeproj',
-                scheme: 'MyApp',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('xcode-test');
-            expect(result.script).toContain('xcodebuild test');
-            expect(result.script).toContain('MyApp.xcodeproj');
-        });
-        test('should support code coverage', async () => {
-            const executor = new XcodeTestStepExecutor();
-            const inputs = {
-                project_path: 'MyApp.xcodeproj',
-                scheme: 'MyApp',
-                is_code_coverage_enabled: true,
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('enableCodeCoverage YES');
-        });
-        test('should support test plan', async () => {
-            const executor = new XcodeTestStepExecutor();
-            const inputs = {
-                project_path: 'MyApp.xcodeproj',
-                scheme: 'MyApp',
-                test_plan: 'MyTestPlan',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('-testPlan');
-            expect(result.script).toContain('MyTestPlan');
-        });
-    });
-    describe('SetJavaVersionStepExecutor', () => {
-        test('should generate java version script', async () => {
-            const executor = new SetJavaVersionStepExecutor();
-            const inputs = {
-                java_version: '17',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('set-java-version');
-            expect(result.script).toContain('JAVA_HOME');
-            expect(result.script).toContain('17');
-        });
-        test('should default to Java 17', async () => {
-            const executor = new SetJavaVersionStepExecutor();
-            const inputs = {};
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('17');
-        });
-        test('should support different Java versions', async () => {
-            const executor = new SetJavaVersionStepExecutor();
-            const inputs = {
-                java_version: '11',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('11');
-        });
-        // The generated script ends in `exit 1` when it cannot find the JDK, so a
-        // missing one is not information — it is the build, already lost. Reported
-        // as info it let the run proceed and die at the very next step.
-        test('missing JDK is a pre-execution error, not an info note', () => {
-            const executor = new SetJavaVersionStepExecutor();
-            const [requirement] = executor.getValidationRequirements({ java_version: '23' }, {}, testConfig);
-            expect(requirement.severity).toBe('error');
-            expect(requirement.timing).toBe('pre-execution');
-        });
-        // GitHub Actions publishes preinstalled JDKs as JAVA_HOME_<ver>_X64 and
-        // the step reads it; a check that did not would fail a build the step
-        // would have run.
-        test('finds a JDK GitHub Actions published, as the step does', async () => {
-            const executor = new SetJavaVersionStepExecutor();
-            // A version no developer machine has, so the Homebrew and java_home
-            // branches cannot answer first and the Actions branch is what is tested.
-            const key = 'JAVA_HOME_99_X64';
-            const previous = process.env[key];
-            process.env[key] = process.cwd();
-            try {
-                const [requirement] = executor.getValidationRequirements({ java_version: '99' }, {}, testConfig);
-                const result = await requirement.check();
-                expect(result.passed).toBe(true);
-                expect(result.message).toContain('GitHub Actions');
-            }
-            finally {
-                if (previous === undefined)
-                    delete process.env[key];
-                else
-                    process.env[key] = previous;
-            }
-        });
-    });
-    describe('GradleBuildStepExecutor', () => {
-        test('should generate gradle build script', async () => {
-            const executor = new GradleBuildStepExecutor();
-            const inputs = {
-                project_location: '.',
-                build_type: 'Release',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('gradle-build');
-            expect(result.script).toContain('Gradle Build');
-            expect(result.script).toContain('assembleRelease');
-        });
-        test('should support debug build', async () => {
-            const executor = new GradleBuildStepExecutor();
-            const inputs = {
-                build_type: 'Debug',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('assembleDebug');
-        });
-        test('should support custom gradle task', async () => {
-            const executor = new GradleBuildStepExecutor();
-            const inputs = {
-                gradle_task: 'bundleRelease',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('bundleRelease');
-        });
-        test('should support custom project location', async () => {
-            const executor = new GradleBuildStepExecutor();
-            const inputs = {
-                project_location: 'android',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('cd');
-            expect(result.script).toContain('android');
-        });
-        test('should support gradle options', async () => {
-            const executor = new GradleBuildStepExecutor();
-            const inputs = {
-                gradle_options: '--stacktrace --no-daemon',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('--stacktrace --no-daemon');
-        });
-    });
-    describe('AndroidLintStepExecutor', () => {
-        test('should generate lint script', async () => {
-            const executor = new AndroidLintStepExecutor();
-            const inputs = {
-                module: 'app',
-                variant: 'debug',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('android-lint');
-            expect(result.script).toContain('lint');
-            expect(result.script).toContain(':app:lintDebug');
-        });
-        test('should support custom module', async () => {
-            const executor = new AndroidLintStepExecutor();
-            const inputs = {
-                module: 'library',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain(':library:');
-        });
-        test('should capitalize variant correctly', async () => {
-            const executor = new AndroidLintStepExecutor();
-            const inputs = {
-                variant: 'release',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('lintRelease');
-        });
-    });
-    describe('AndroidUnitTestStepExecutor', () => {
-        test('should generate unit test script', async () => {
-            const executor = new AndroidUnitTestStepExecutor();
-            const inputs = {
-                module: 'app',
-                variant: 'debug',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.kind).toBe('script');
-            expect(result.name).toBe('android-unit-test');
-            expect(result.script).toContain('test');
-            expect(result.script).toContain(':app:testDebugUnitTest');
-        });
-        test('should support test filter', async () => {
-            const executor = new AndroidUnitTestStepExecutor();
-            const inputs = {
-                test_filter: 'com.example.MyTest',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('--tests');
-            expect(result.script).toContain('com.example.MyTest');
-        });
-        test('should support custom variant', async () => {
-            const executor = new AndroidUnitTestStepExecutor();
-            const inputs = {
-                variant: 'staging',
-            };
-            const result = await executor.execute(inputs, {}, testConfig);
-            expect(result.script).toContain('testStagingUnitTest');
-        });
-    });
-});
-//# sourceMappingURL=steps.test.js.map