@invarn/cibuild 2.9.6 → 2.9.8

package/dist/src/yaml/steps/xcode.js

@@ -1,1350 +0,0 @@
-/**
- * Xcode step implementations (xcodebuild, xcode-test)
- */
-import { existsSync } from 'node:fs';
-import { BaseStepExecutor } from './base.js';
-import { resolveDestinationInput } from './xcode-destination.js';
-import { APP_PRODUCT_RESOLVER_SOURCE } from './xcode-app-product.js';
-import { pinsSimulatorArm64, simulatorArchsLines, withRuntimeSimulatorArchs } from './xcode-simulator-archs.js';
-import { refusedFetchHelpers, retryOnRefusedFetch } from './git-fetch-retry.js';
-/**
- * Where derived data goes: outside the source tree, keyed by the output dir.
- *
- * It used to be "$DERIVED_DATA_PATH", and OUTPUT_DIR is inside the
- * checkout — so every resolved SPM package sat in the working tree, where an
- * app's own lint or format build phase walks it. vinhnx/Clendar's SwiftLint
- * phase failed the build on 145 serious violations, all of them in
- * third-party packages under build/app/DerivedData/SourcePackages/checkouts.
- * A developer's Xcode keeps derived data under ~/Library, so no repository has
- * a reason to exclude that directory, and it should not have to.
- *
- * CIBUILD_SCRATCH is the runner's per-build local root, which holds the
- * checkout rather than sitting inside it; outside a sandbox it falls back to
- * TMPDIR. The key is a checksum of the absolute output dir, so two steps that
- * name the same output_dir still share derived data (the iOS template relies
- * on that to avoid compiling the app twice) and two that name different ones
- * stay apart, as they did before.
- *
- * **Never under /tmp** (nightly-baseline 58). analogcode/Swift-Radio-Pro's
- * LNPopupController builds its header search paths by deleting
- * `Context.packageDirectory` from the paths FileManager lists, and under /tmp
- * the two disagree by `/private`: xcodebuild folds `/private/tmp` back to
- * `/tmp` however the path is given, and FileManager does not, so every header
- * path came out eight characters short ("troller/…"). Resolving the path did
- * not help, for that reason. The guest's scratch root is
- * `/tmp/cibuild-work-<id>`, so there derived data goes to the build user's
- * real home instead. Measured on runner-mac-01 2026-10-03: the same build
- * fails under /tmp and succeeds under the home, in a fresh VM each. Not
- * /var/folders (TMPDIR): it built correctly there too. SwiftPM caches a
- * manifest's evaluation, relative paths and all, so the first evaluation in a
- * VM decides — another reason the root must be right from the first build.
- */
-function derivedDataPathLines() {
-    return [
-        '# Derived data outside the source tree, keyed by the output dir, and never under /tmp',
-        'cibuild_dd_root="${CIBUILD_SCRATCH:-${TMPDIR:-/tmp}}"',
-        'case "$(cd "$cibuild_dd_root" 2>/dev/null && pwd -P)" in /private/tmp|/private/tmp/*) cibuild_dd_root="${CIBUILD_USER_HOME:-$HOME}/Library/Developer/cibuild" ;; esac',
-        'DERIVED_DATA_PATH="$cibuild_dd_root/cibuild-derived-data/$(printf \'%s\' "$OUTPUT_DIR" | cksum | cut -d\' \' -f1)"',
-        'mkdir -p "$DERIVED_DATA_PATH"',
-        '# Its real path: /tmp and TMPDIR are symlinks on macOS, and a package that builds paths by text arithmetic breaks on them',
-        'DERIVED_DATA_PATH="$(cd "$DERIVED_DATA_PATH" && pwd -P)"',
-        'echo "Derived data: $DERIVED_DATA_PATH"',
-    ];
-}
-/**
- * Xcodebuild step executor
- * Builds iOS/macOS projects using xcodebuild
- */
-export class XcodeBuildStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        const requirements = [];
-        // xcodebuild command must exist
-        requirements.push(this.requireCommand('xcodebuild', 'Xcode Command Line Tools are required for iOS builds', 'Install Xcode from the App Store, then run: xcode-select --install'));
-        // Required inputs
-        requirements.push(this.requireInput('project_path', inputs, 'Path to .xcodeproj or .xcworkspace', 'Provide project_path input in YAML'));
-        requirements.push(this.requireInput('scheme', inputs, 'Xcode scheme name', 'Provide scheme input in YAML'));
-        // Project file - runtime check only if it doesn't already exist locally
-        if (inputs.project_path && !existsSync(inputs.project_path)) {
-            requirements.push(this.runtimeRequirement(inputs.project_path, 'Xcode project/workspace file', 'file', 'the checkout'));
-        }
-        if (inputs.destination === 'auto') {
-            requirements.push(this.requireCommand('xcrun', 'xcrun is required to resolve destination: auto via xcrun simctl', 'Install Xcode and run: xcode-select --install'));
-        }
-        return requirements;
-    }
-    async execute(inputs, env, config) {
-        const stepName = 'xcodebuild';
-        // Get project path - required
-        let projectPath = this.getRequiredInput(inputs, 'project_path', stepName);
-        // Resolve path identifiers
-        if (projectPath.startsWith('builds:')) {
-            projectPath = projectPath.replace('builds:', `${config.paths.buildsDir}/`);
-        }
-        // Get scheme - required
-        const scheme = this.getRequiredInput(inputs, 'scheme', stepName);
-        // Get configuration - defaults to Release
-        const configuration = this.getInput(inputs, 'configuration', 'Release');
-        // Get destination - defaults to generic/platform=iOS.
-        // `auto` triggers runtime resolution via `xcrun simctl`.
-        const destination = resolveDestinationInput(this.getInput(inputs, 'destination', 'generic/platform=iOS'));
-        // Get output directory - defaults to build
-        const outputDir = this.getInput(inputs, 'output_dir', 'build');
-        // Get clean build flag
-        const isCleanBuild = this.getInput(inputs, 'is_clean_build', false);
-        // Get xcconfig content - optional
-        const xcconfigContent = this.getInput(inputs, 'xcconfig_content', '');
-        const commands = [];
-        commands.push('# Xcode Build');
-        commands.push(`echo "Building project: ${this.escapeBash(projectPath)}"`);
-        commands.push(`echo "Scheme: ${this.escapeBash(scheme)}"`);
-        commands.push(`echo "Configuration: ${this.escapeBash(configuration)}"`);
-        // Create output directory and resolve to absolute path. The absolute path
-        // is the load-bearing part: a relative one let xcodebuild create a `build`
-        // directory inside each SPM package checkout in DerivedData, which fails
-        // with "File exists but is not a directory" on repeated runs. That was
-        // originally fixed by making CONFIGURATION_BUILD_DIR absolute; it is now
-        // -derivedDataPath that is absolute instead, which fixes the same thing
-        // without flattening the product tree.
-        commands.push('');
-        commands.push('# Create output directory and resolve to absolute path');
-        commands.push(`mkdir -p '${this.escapeBash(outputDir)}'`);
-        commands.push(`OUTPUT_DIR="$(cd '${this.escapeBash(outputDir)}' && pwd)"`);
-        commands.push(...derivedDataPathLines());
-        // Create xcconfig file if content provided
-        if (xcconfigContent && xcconfigContent.trim() !== '') {
-            commands.push('');
-            commands.push('# Create custom xcconfig file');
-            commands.push('XCCONFIG_FILE=".ci-custom.xcconfig"');
-            commands.push('cat > "$XCCONFIG_FILE" << \'EOF\'');
-            commands.push(xcconfigContent);
-            commands.push('EOF');
-            commands.push('echo "Custom xcconfig created"');
-        }
-        // Determine if workspace or project
-        commands.push('');
-        commands.push('# Determine project type');
-        const escapedPath = this.escapeBash(projectPath);
-        commands.push(`if [[ '${escapedPath}' == *.xcworkspace ]]; then`);
-        commands.push('  PROJECT_TYPE="-workspace"');
-        commands.push('else');
-        commands.push('  PROJECT_TYPE="-project"');
-        commands.push('fi');
-        // Resolve the package graph before building, and retry that on a refused
-        // fetch. Resolution is seconds and the build is minutes, so the retry is
-        // spent on the cheap half. The two -derivedDataPath arguments move
-        // together: the build below reads the same derived data and finds the
-        // graph already resolved. Split them and the retry is spent on work the
-        // build discards.
-        commands.push('');
-        commands.push('# Resolve package dependencies first — see git-fetch-retry');
-        commands.push(...refusedFetchHelpers());
-        commands.push(...retryOnRefusedFetch({
-            label: 'Package resolution',
-            command: 'xcodebuild -resolvePackageDependencies' +
-                ` "$PROJECT_TYPE" '${escapedPath}'` +
-                ` -scheme '${this.escapeBash(scheme)}'` +
-                ' -derivedDataPath "$DERIVED_DATA_PATH"',
-        }));
-        // Build xcodebuild command
-        commands.push('');
-        commands.push('# Build xcodebuild command');
-        let xcodebuildCmd = 'xcodebuild';
-        // Add clean if requested
-        if (isCleanBuild) {
-            xcodebuildCmd += ' clean';
-        }
-        xcodebuildCmd += ' build';
-        xcodebuildCmd += ` "$PROJECT_TYPE" '${escapedPath}'`;
-        xcodebuildCmd += ` -scheme '${this.escapeBash(scheme)}'`;
-        xcodebuildCmd += ` -configuration '${this.escapeBash(configuration)}'`;
-        xcodebuildCmd += ` -destination '${this.escapeBash(destination)}'`;
-        // A derived data path (see derivedDataPathLines), rather than CONFIGURATION_BUILD_DIR.
-        // Same reasoning as XcodeBuildForSimulatorStepExecutor below, where the
-        // full mechanism and the control are written up: the flat directory
-        // collapses xcodebuild's per-configuration/per-platform product separation
-        // and any graph with two tasks producing the same output name is refused
-        // with "Multiple commands produce". It also desynchronises CocoaPods, whose
-        // PODS_CONFIGURATION_BUILD_DIR follows BUILD_DIR and not this setting.
-        xcodebuildCmd += ` -derivedDataPath "$DERIVED_DATA_PATH"`;
-        // Add xcconfig if provided
-        if (xcconfigContent && xcconfigContent.trim() !== '') {
-            xcodebuildCmd += ' -xcconfig "$XCCONFIG_FILE"';
-        }
-        commands.push(xcodebuildCmd);
-        // Show build results
-        commands.push('');
-        commands.push('# Build completed');
-        commands.push('echo "Build completed successfully"');
-        // Products live under the per-platform Products directory now, not flat in
-        // $OUTPUT_DIR, so point the listing at where they actually are — otherwise
-        // the log says "artifacts in build/" above an empty directory.
-        commands.push('echo "Build artifacts in: $DERIVED_DATA_PATH/Build/Products"');
-        commands.push('ls -lhR "$DERIVED_DATA_PATH/Build/Products" 2>/dev/null || true');
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * Xcode test step executor
- * Runs tests for iOS/macOS projects using xcodebuild test
- */
-export class XcodeTestStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        const requirements = [];
-        // xcodebuild command must exist
-        requirements.push(this.requireCommand('xcodebuild', 'Xcode Command Line Tools are required for iOS tests', 'Install Xcode from the App Store, then run: xcode-select --install'));
-        // Required inputs
-        requirements.push(this.requireInput('project_path', inputs, 'Path to .xcodeproj or .xcworkspace', 'Provide project_path input in YAML'));
-        requirements.push(this.requireInput('scheme', inputs, 'Xcode scheme name', 'Provide scheme input in YAML'));
-        // Project file - runtime check only if it doesn't already exist locally
-        if (inputs.project_path && !existsSync(inputs.project_path)) {
-            requirements.push(this.runtimeRequirement(inputs.project_path, 'Xcode project/workspace file', 'file', 'the checkout'));
-        }
-        if (inputs.destination === 'auto') {
-            requirements.push(this.requireCommand('xcrun', 'xcrun is required to resolve destination: auto via xcrun simctl', 'Install Xcode and run: xcode-select --install'));
-        }
-        return requirements;
-    }
-    async execute(inputs, env, config) {
-        const stepName = 'xcode-test';
-        // Get project path - required
-        let projectPath = this.getRequiredInput(inputs, 'project_path', stepName);
-        // Resolve path identifiers
-        if (projectPath.startsWith('builds:')) {
-            projectPath = projectPath.replace('builds:', `${config.paths.buildsDir}/`);
-        }
-        // Get scheme - required
-        const scheme = this.getRequiredInput(inputs, 'scheme', stepName);
-        // Get destination - defaults to platform=iOS Simulator.
-        // `auto` triggers runtime resolution via `xcrun simctl`.
-        const destination = resolveDestinationInput(this.getInput(inputs, 'destination', 'platform=iOS Simulator,name=iPhone 14,OS=latest'));
-        // Get test plan - optional
-        const testPlan = this.getInput(inputs, 'test_plan', '');
-        // Get code coverage flag
-        const isCodeCoverageEnabled = this.getInput(inputs, 'is_code_coverage_enabled', false);
-        const commands = [];
-        commands.push('# Xcode Test');
-        commands.push(`echo "Testing project: ${this.escapeBash(projectPath)}"`);
-        commands.push(`echo "Scheme: ${this.escapeBash(scheme)}"`);
-        // Determine if workspace or project
-        commands.push('');
-        commands.push('# Determine project type');
-        const escapedPath = this.escapeBash(projectPath);
-        commands.push(`if [[ '${escapedPath}' == *.xcworkspace ]]; then`);
-        commands.push('  PROJECT_TYPE="-workspace"');
-        commands.push('else');
-        commands.push('  PROJECT_TYPE="-project"');
-        commands.push('fi');
-        // Build xcodebuild test command
-        commands.push('');
-        commands.push('# Run tests');
-        let xcodebuildCmd = 'xcodebuild test';
-        xcodebuildCmd += ` "$PROJECT_TYPE" '${escapedPath}'`;
-        xcodebuildCmd += ` -scheme '${this.escapeBash(scheme)}'`;
-        xcodebuildCmd += ` -destination '${this.escapeBash(destination)}'`;
-        // Add test plan if specified
-        if (testPlan && testPlan.trim() !== '') {
-            xcodebuildCmd += ` -testPlan '${this.escapeBash(testPlan)}'`;
-        }
-        // Add code coverage if enabled
-        if (isCodeCoverageEnabled) {
-            xcodebuildCmd += ' -enableCodeCoverage YES';
-        }
-        commands.push(xcodebuildCmd);
-        // Show test results
-        commands.push('');
-        commands.push('# Tests completed');
-        commands.push('echo "Tests completed successfully"');
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * xcode-archive step executor
- * Archives and exports an iOS app to IPA, mirroring bitrise xcode-archive@5.
- */
-export class XcodeArchiveStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        const requirements = [];
-        requirements.push(this.requireCommand('xcodebuild', 'Xcode Command Line Tools are required for iOS builds', 'Install Xcode from the App Store, then run: xcode-select --install'));
-        requirements.push(this.requireInput('project_path', inputs, 'Path to .xcodeproj or .xcworkspace', 'Provide project_path input in YAML'));
-        requirements.push(this.requireInput('scheme', inputs, 'Xcode scheme name', 'Provide scheme input in YAML'));
-        // Project file - runtime check only if it doesn't already exist locally
-        if (inputs.project_path && !existsSync(inputs.project_path)) {
-            requirements.push(this.runtimeRequirement(inputs.project_path, 'Xcode project/workspace file', 'file', 'the checkout'));
-        }
-        return requirements;
-    }
-    getOutputs() {
-        return [
-            { name: 'CIBUILD_IPA_PATH', type: 'environment', description: 'Path to the exported IPA file' },
-            { name: 'CIBUILD_XCARCHIVE_PATH', type: 'environment', description: 'Path to the generated .xcarchive' },
-            { name: 'CIBUILD_DSYM_PATH', type: 'environment', description: 'Path to the zipped dSYM files' },
-            { name: 'CIBUILD_APP_PATH', type: 'environment', description: 'Path to the .app inside the xcarchive (when code signing is off)' },
-        ];
-    }
-    async execute(inputs, env, config) {
-        const stepName = 'xcode-archive';
-        let projectPath = this.getRequiredInput(inputs, 'project_path', stepName);
-        if (projectPath.startsWith('builds:')) {
-            projectPath = projectPath.replace('builds:', `${config.paths.buildsDir}/`);
-        }
-        const scheme = this.getRequiredInput(inputs, 'scheme', stepName);
-        const configuration = this.getInput(inputs, 'configuration', 'Release');
-        const platform = this.getInput(inputs, 'platform', 'iOS');
-        const distributionMethod = this.getInput(inputs, 'distribution_method', 'development');
-        const performClean = this.getInput(inputs, 'perform_clean_action', 'no');
-        const compileBitcode = this.getInput(inputs, 'compile_bitcode', 'yes');
-        const uploadBitcode = this.getInput(inputs, 'upload_bitcode', 'yes');
-        const automaticCodeSigning = this.getInput(inputs, 'automatic_code_signing', 'off');
-        const xcodebuildOptions = this.getInput(inputs, 'xcodebuild_options', '');
-        const xcconfigContent = this.getInput(inputs, 'xcconfig_content', 'COMPILER_INDEX_STORE_ENABLE = NO');
-        const exportOptionsPlistContent = this.getInput(inputs, 'export_options_plist_content', '');
-        const signingStyleInput = this.getInput(inputs, 'signing_style', 'automatic');
-        const provisioningProfilesInput = this.getInput(inputs, 'provisioning_profiles', '');
-        const outputDir = this.getInput(inputs, 'output_dir', 'build/ipa');
-        const artifactName = this.getInput(inputs, 'artifact_name', '');
-        const escapedPath = this.escapeBash(projectPath);
-        const escapedScheme = this.escapeBash(scheme);
-        const escapedConfig = this.escapeBash(configuration);
-        const commands = [];
-        commands.push('# xcode-archive — archive and export iOS app to IPA');
-        commands.push(`echo "Project: ${escapedPath}"`);
-        commands.push(`echo "Scheme: ${escapedScheme}"`);
-        commands.push(`echo "Configuration: ${escapedConfig}"`);
-        commands.push(`echo "Distribution method: ${this.escapeBash(distributionMethod)}"`);
-        commands.push('');
-        // Determine project type
-        commands.push('# Determine project type (-workspace vs -project)');
-        commands.push(`if [[ '${escapedPath}' == *.xcworkspace ]]; then`);
-        commands.push('  PROJECT_TYPE="-workspace"');
-        commands.push('else');
-        commands.push('  PROJECT_TYPE="-project"');
-        commands.push('fi');
-        commands.push('');
-        // Derive artifact name
-        if (artifactName) {
-            commands.push(`ARTIFACT_NAME="${this.escapeBash(artifactName)}"`);
-        }
-        else {
-            commands.push(`ARTIFACT_NAME="${escapedScheme}"`);
-        }
-        // Paths
-        commands.push(`OUTPUT_DIR="${this.escapeBash(outputDir)}"`);
-        commands.push('ARCHIVE_PATH="$OUTPUT_DIR/archive/${ARTIFACT_NAME}.xcarchive"');
-        commands.push('mkdir -p "$(dirname "$ARCHIVE_PATH")"');
-        commands.push('mkdir -p "$OUTPUT_DIR"');
-        commands.push('');
-        // Write xcconfig override
-        commands.push('# Write xcconfig overrides');
-        commands.push('XCCONFIG_PATH="$(mktemp -t cibuild-xcconfig).xcconfig"');
-        // When automatic_code_signing is off (default), disable code signing so
-        // archives succeed on CI without a development team / provisioning profile.
-        let effectiveXcconfig = xcconfigContent.trim() || 'COMPILER_INDEX_STORE_ENABLE = NO';
-        if (automaticCodeSigning === 'off') {
-            effectiveXcconfig += '\nCODE_SIGNING_ALLOWED = NO';
-            effectiveXcconfig += '\nCODE_SIGN_IDENTITY = -';
-        }
-        commands.push(`cat > "$XCCONFIG_PATH" << 'XCCONFIG_EOF'`);
-        commands.push(effectiveXcconfig);
-        commands.push('XCCONFIG_EOF');
-        commands.push('');
-        // Detect Apple API key for cloud-managed signing (xcodebuild
-        // -allowProvisioningUpdates). When APPLE_API_KEY_ID/ISSUER_ID/KEY_PATH
-        // are resolved by the env-resolver (from .cibuild-secrets.json or
-        // CIBUILD_SW__* env vars), embed the .p8 into the generated script via
-        // heredoc and bake the IDs as literals. Reading from $APPLE_API_KEY_ID
-        // at script runtime would not work because cibuild's runner only
-        // forwards process.env to spawned scripts, and EnvResolver-decoded
-        // secrets live in its in-memory map, not process.env.
-        let xcodeAuthFlags = '';
-        if (automaticCodeSigning !== 'off') {
-            const apiKeyId = (env['APPLE_API_KEY_ID'] || '').trim();
-            const apiIssuerId = (env['APPLE_API_ISSUER_ID'] || '').trim();
-            const apiKeySecret = env['APPLE_API_KEY_PATH'] || '';
-            // Secret may be raw PEM (`-----BEGIN PRIVATE KEY-----…`) or base64-encoded.
-            let p8Pem = '';
-            if (apiKeySecret) {
-                if (apiKeySecret.trimStart().startsWith('-----BEGIN')) {
-                    p8Pem = apiKeySecret;
-                }
-                else {
-                    try {
-                        p8Pem = Buffer.from(apiKeySecret, 'base64').toString('utf-8');
-                    }
-                    catch {
-                        p8Pem = '';
-                    }
-                }
-            }
-            const p8LooksValid = p8Pem.includes('-----BEGIN') && p8Pem.includes('PRIVATE KEY');
-            if (apiKeyId && apiIssuerId && p8LooksValid) {
-                commands.push('# Apple API key resolved — embedding for cloud-managed signing');
-                // BSD/macOS mktemp requires X's at the end of the template; any chars
-                // after them are literal and not substituted. Don't add a .p8 suffix.
-                commands.push('API_KEY_TEMP_FILE="$(mktemp /tmp/cibuild-api-key.XXXXXX)"');
-                commands.push(`trap 'rm -f "$API_KEY_TEMP_FILE"' EXIT`);
-                // Quoted heredoc so the PEM body isn't subject to shell expansion.
-                commands.push(`cat > "$API_KEY_TEMP_FILE" << 'CIBUILD_API_KEY_EOF'`);
-                commands.push(p8Pem.replace(/\r\n/g, '\n').replace(/\n+$/, ''));
-                commands.push('CIBUILD_API_KEY_EOF');
-                commands.push('echo "✓ Cloud-managed signing enabled (API key: '
-                    + this.escapeBash(apiKeyId) + ')"');
-                commands.push('');
-                // Build a bash-syntax fragment that gets concatenated directly into
-                // the archive/export command lines. Single quotes here are real shell
-                // quotes (consumed by bash) — unlike the previous approach that put
-                // them inside a doubly-quoted variable assignment, where they would
-                // become literal characters in the value.
-                xcodeAuthFlags =
-                    ` -allowProvisioningUpdates` +
-                        ` -authenticationKeyPath "$API_KEY_TEMP_FILE"` +
-                        ` -authenticationKeyID '${this.escapeBash(apiKeyId)}'` +
-                        ` -authenticationKeyIssuerID '${this.escapeBash(apiIssuerId)}'`;
-            }
-        }
-        // Build xcodebuild archive command
-        commands.push('# Run xcodebuild archive');
-        let archiveCmd = 'xcodebuild';
-        if (performClean === 'yes')
-            archiveCmd += ' clean';
-        archiveCmd += ' archive';
-        archiveCmd += ` "$PROJECT_TYPE" '${escapedPath}'`;
-        archiveCmd += ` -scheme '${escapedScheme}'`;
-        archiveCmd += ` -configuration '${escapedConfig}'`;
-        archiveCmd += ` -destination 'generic/platform=${this.escapeBash(platform)}'`;
-        archiveCmd += ' -archivePath "$ARCHIVE_PATH"';
-        archiveCmd += ' -xcconfig "$XCCONFIG_PATH"';
-        // When code signing is off, also pass settings as command-line build
-        // settings so they take highest priority and override any target-level
-        // signing configuration in the Xcode project.
-        if (automaticCodeSigning === 'off') {
-            archiveCmd += ' CODE_SIGNING_ALLOWED=NO CODE_SIGN_IDENTITY=- CODE_SIGNING_REQUIRED=NO';
-        }
-        else {
-            archiveCmd += xcodeAuthFlags;
-            // Don't override CODE_SIGN_IDENTITY here. Xcode 26.3+ rejects an explicit
-            // identity when the project is configured for automatic signing
-            // ("conflicting provisioning settings" at GatherProvisioningInputs).
-            // Archive with the project's automatic identity (Development); the
-            // exportArchive step re-signs with Distribution via exportOptionsPlist
-            // (method=app-store + signingStyle=automatic), mirroring Xcode IDE's
-            // Archive → Distribute flow. DEVELOPMENT_TEAM is still injected so SPM
-            // frameworks without an explicit team in Package.swift can sign.
-            const teamId = (env['APPLE_TEAM_ID'] || '').trim();
-            if (teamId) {
-                archiveCmd += ` DEVELOPMENT_TEAM='${this.escapeBash(teamId)}'`;
-            }
-        }
-        if (xcodebuildOptions) {
-            archiveCmd += ` ${xcodebuildOptions}`;
-        }
-        commands.push(archiveCmd);
-        commands.push('');
-        commands.push('echo "✓ Archive created: $ARCHIVE_PATH"');
-        commands.push('');
-        // Write output env var helper (used in both signing and non-signing paths)
-        commands.push('# Export output environment variables');
-        commands.push('ENVSTORE_FILE="${ENVMAN_ENVSTORE_PATH:-.ci/.envstore.json}"');
-        commands.push('export_env() {');
-        commands.push('  local key="$1" val="$2"');
-        commands.push('  if [ -f "$ENVSTORE_FILE" ]; then');
-        commands.push('    node -e "');
-        commands.push('      const fs=require(\'fs\');');
-        commands.push('      const s=JSON.parse(fs.readFileSync(process.argv[1],\'utf-8\'));');
-        commands.push('      s.envs=s.envs||[];');
-        commands.push('      s.envs=s.envs.filter(e=>e.key!==process.argv[2]);');
-        commands.push('      s.envs.push({key:process.argv[2],value:process.argv[3]});');
-        commands.push('      fs.writeFileSync(process.argv[1],JSON.stringify(s));');
-        commands.push('    " "$ENVSTORE_FILE" "$key" "$val" 2>/dev/null || true');
-        commands.push('  fi');
-        commands.push('  export "$key=$val"');
-        commands.push('  echo "  $key=$val"');
-        commands.push('}');
-        commands.push('');
-        if (automaticCodeSigning === 'off') {
-            // Signing is disabled — skip IPA export (unsigned archives cannot be exported).
-            // Output the xcarchive path and the .app inside it instead.
-            commands.push('# Code signing disabled — export xcarchive path only');
-            commands.push('export_env CIBUILD_XCARCHIVE_PATH "$(pwd)/$ARCHIVE_PATH"');
-            commands.push('');
-            commands.push('# Locate .app inside the xcarchive for downstream use');
-            commands.push('APP_PATH=$(find "$ARCHIVE_PATH/Products" -name "*.app" -maxdepth 3 2>/dev/null | head -1 || true)');
-            commands.push('[ -n "$APP_PATH" ] && export_env CIBUILD_APP_PATH "$(pwd)/$APP_PATH" || true');
-            commands.push('');
-            commands.push('echo "✓ xcode-archive complete (unsigned — code signing disabled)"');
-        }
-        else {
-            // Signing enabled — generate ExportOptions.plist and export to IPA
-            commands.push('# Generate ExportOptions.plist');
-            commands.push('EXPORT_PLIST="$(mktemp -t ExportOptions).plist"');
-            if (exportOptionsPlistContent.trim()) {
-                commands.push(`cat > "$EXPORT_PLIST" << 'PLIST_EOF'`);
-                commands.push(exportOptionsPlistContent);
-                commands.push('PLIST_EOF');
-            }
-            else {
-                // Map deprecated "development" method name to "debugging" (Apple renamed it in Xcode 15)
-                const exportMethod = distributionMethod === 'development' ? 'debugging' : distributionMethod;
-                const compileBitcodeVal = compileBitcode === 'yes' ? 'true' : 'false';
-                const uploadBitcodeVal = uploadBitcode === 'yes' ? 'true' : 'false';
-                const signingStyle = signingStyleInput === 'manual' ? 'manual' : 'automatic';
-                // Parse provisioning_profiles input: each non-empty line is `bundleId=ProfileName`.
-                // Lines starting with # are treated as comments. Whitespace is trimmed.
-                const profileEntries = [];
-                if (signingStyle === 'manual' && provisioningProfilesInput.trim()) {
-                    for (const rawLine of provisioningProfilesInput.split('\n')) {
-                        const line = rawLine.trim();
-                        if (!line || line.startsWith('#'))
-                            continue;
-                        const eq = line.indexOf('=');
-                        if (eq === -1)
-                            continue;
-                        const bundleId = line.slice(0, eq).trim();
-                        const profile = line.slice(eq + 1).trim();
-                        if (bundleId && profile)
-                            profileEntries.push({ bundleId, profile });
-                    }
-                }
-                if (signingStyle === 'manual') {
-                    if (profileEntries.length === 0) {
-                        throw new Error(`xcode-archive: signing_style=manual requires provisioning_profiles input ` +
-                            `(newline-separated 'bundleId=ProfileName' pairs).`);
-                    }
-                    // Manual export needs APPLE_TEAM_ID at runtime — fail fast with a clear message.
-                    commands.push('# signing_style=manual — verify APPLE_TEAM_ID is available');
-                    commands.push('if [ -z "${APPLE_TEAM_ID:-}" ]; then');
-                    commands.push('  echo "❌ Error: signing_style=manual requires APPLE_TEAM_ID env var." >&2');
-                    commands.push('  echo "   Set via: ci secrets add APPLE_TEAM_ID -w <workflow>" >&2');
-                    commands.push('  exit 1');
-                    commands.push('fi');
-                    commands.push('');
-                }
-                // Manual mode references ${APPLE_TEAM_ID}, which requires an *unquoted* heredoc
-                // delimiter so bash performs variable expansion. Automatic mode uses single-quoted
-                // delimiter so the plist content is preserved literally.
-                const heredocOpen = signingStyle === 'manual'
-                    ? `cat > "$EXPORT_PLIST" << PLIST_EOF`
-                    : `cat > "$EXPORT_PLIST" << 'PLIST_EOF'`;
-                commands.push(heredocOpen);
-                commands.push('<?xml version="1.0" encoding="UTF-8"?>');
-                commands.push('<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">');
-                commands.push('<plist version="1.0">');
-                commands.push('<dict>');
-                commands.push('    <key>method</key>');
-                commands.push(`    <string>${exportMethod}</string>`);
-                commands.push('    <key>signingStyle</key>');
-                commands.push(`    <string>${signingStyle}</string>`);
-                if (signingStyle === 'manual') {
-                    commands.push('    <key>teamID</key>');
-                    commands.push('    <string>${APPLE_TEAM_ID}</string>');
-                    commands.push('    <key>provisioningProfiles</key>');
-                    commands.push('    <dict>');
-                    for (const { bundleId, profile } of profileEntries) {
-                        commands.push(`        <key>${bundleId}</key>`);
-                        commands.push(`        <string>${profile}</string>`);
-                    }
-                    commands.push('    </dict>');
-                }
-                if (exportMethod !== 'app-store') {
-                    commands.push('    <key>compileBitcode</key>');
-                    commands.push(`    <${compileBitcodeVal}/>`);
-                }
-                if (exportMethod === 'app-store') {
-                    commands.push('    <key>uploadBitcode</key>');
-                    commands.push(`    <${uploadBitcodeVal}/>`);
-                }
-                commands.push('</dict>');
-                commands.push('</plist>');
-                commands.push('PLIST_EOF');
-            }
-            commands.push('');
-            // Export archive to IPA
-            commands.push('# Export archive to IPA');
-            let exportCmd = 'xcodebuild -exportArchive';
-            exportCmd += ' -archivePath "$ARCHIVE_PATH"';
-            exportCmd += ' -exportOptionsPlist "$EXPORT_PLIST"';
-            exportCmd += ' -exportPath "$OUTPUT_DIR"';
-            exportCmd += xcodeAuthFlags;
-            commands.push(exportCmd);
-            commands.push('');
-            // Locate generated IPA
-            commands.push('# Locate generated IPA and export paths');
-            commands.push('IPA_PATH=$(find "$OUTPUT_DIR" -name "*.ipa" | head -1)');
-            commands.push('DSYM_PATH=$(find "$OUTPUT_DIR" -name "*.dSYM.zip" 2>/dev/null | head -1 || true)');
-            commands.push('');
-            commands.push('if [ -z "$IPA_PATH" ]; then');
-            commands.push('  echo "Error: IPA not found in $OUTPUT_DIR" >&2');
-            commands.push('  exit 1');
-            commands.push('fi');
-            commands.push('');
-            commands.push('echo "✓ IPA created: $IPA_PATH"');
-            commands.push('ls -lh "$IPA_PATH"');
-            commands.push('');
-            commands.push('export_env CIBUILD_IPA_PATH "$IPA_PATH"');
-            commands.push('export_env CIBUILD_XCARCHIVE_PATH "$(pwd)/$ARCHIVE_PATH"');
-            commands.push('[ -n "$DSYM_PATH" ] && export_env CIBUILD_DSYM_PATH "$DSYM_PATH" || true');
-            commands.push('');
-            commands.push('echo "✓ xcode-archive complete"');
-            commands.push('rm -f "$EXPORT_PLIST"');
-        }
-        commands.push('rm -f "$XCCONFIG_PATH"');
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * iOS Archive step executor
- * Creates an IPA file from a .app bundle
- */
-export class IosArchiveStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        const requirements = [];
-        // Required input
-        requirements.push(this.requireInput('app_path', inputs, 'Path to .app bundle', 'Provide app_path input pointing to your built .app file'));
-        // zip command for creating IPA
-        requirements.push(this.requireCommand('zip', 'zip utility for creating IPA files', 'zip should be pre-installed on macOS'));
-        // .app file - runtime check (created by xcodebuild)
-        if (inputs.app_path) {
-            requirements.push(this.runtimeRequirement(inputs.app_path, '.app bundle file', 'directory', 'xcodebuild'));
-        }
-        return requirements;
-    }
-    async execute(inputs, env, config) {
-        const stepName = 'ios-archive';
-        // Get app path - required
-        let appPath = this.getRequiredInput(inputs, 'app_path', stepName);
-        // Resolve path identifiers
-        if (appPath.startsWith('builds:')) {
-            appPath = appPath.replace('builds:', `${config.paths.buildsDir}/`);
-        }
-        // Get output path - defaults to artifacts/
-        const outputPath = this.getInput(inputs, 'output_path', 'artifacts');
-        // Get output name - optional, will derive from .app name if not provided
-        const outputName = this.getInput(inputs, 'output_name', '');
-        const commands = [];
-        commands.push('# iOS Archive - Create IPA');
-        commands.push(`echo "Creating IPA from: ${this.escapeBash(appPath)}"`);
-        // Check if .app exists
-        commands.push('');
-        commands.push('# Verify .app bundle exists');
-        commands.push(`if [ ! -d '${this.escapeBash(appPath)}' ]; then`);
-        commands.push(`  echo "Error: .app bundle not found at ${this.escapeBash(appPath)}"`);
-        commands.push('  exit 1');
-        commands.push('fi');
-        // Determine output IPA name
-        commands.push('');
-        commands.push('# Determine IPA name');
-        if (outputName && outputName.trim() !== '') {
-            // Use provided name
-            const cleanName = outputName.replace(/\.ipa$/, '');
-            commands.push(`IPA_NAME="${this.escapeBash(cleanName)}"`);
-        }
-        else {
-            // Derive from .app bundle name
-            commands.push(`APP_BUNDLE='${this.escapeBash(appPath)}'`);
-            commands.push('IPA_NAME=$(basename "$APP_BUNDLE" .app)');
-        }
-        commands.push('echo "IPA name: $IPA_NAME.ipa"');
-        // Create IPA
-        commands.push('');
-        commands.push('# Create IPA structure');
-        commands.push('TEMP_DIR=$(mktemp -d)');
-        commands.push('mkdir -p "$TEMP_DIR/Payload"');
-        commands.push('');
-        commands.push('# Copy .app to Payload directory');
-        commands.push(`cp -r '${this.escapeBash(appPath)}' "$TEMP_DIR/Payload/"`);
-        commands.push('');
-        commands.push('# Create IPA (zip with .ipa extension)');
-        commands.push('cd "$TEMP_DIR"');
-        commands.push(`zip -r "$IPA_NAME.ipa" Payload -q`);
-        commands.push('cd - > /dev/null');
-        commands.push('');
-        commands.push('# Create output directory and move IPA');
-        commands.push(`mkdir -p '${this.escapeBash(outputPath)}'`);
-        commands.push(`mv "$TEMP_DIR/$IPA_NAME.ipa" '${this.escapeBash(outputPath)}/'`);
-        commands.push('');
-        commands.push('# Cleanup temp directory');
-        commands.push('rm -rf "$TEMP_DIR"');
-        commands.push('');
-        commands.push('# Show result');
-        commands.push('echo "✓ IPA created successfully"');
-        commands.push(`ls -lh '${this.escapeBash(outputPath)}'/"$IPA_NAME.ipa"`);
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * OTA install step executor.
- * Generates manifest.plist and a QR code for itms-services:// OTA installation.
- * The IPA and manifest must be hosted at user-provided HTTPS URLs.
- */
-export class OtaInstallStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        return [
-            this.requireInput('ipa_url', inputs, 'HTTPS URL where the IPA file will be hosted', 'Provide the full HTTPS URL to where the IPA will be uploaded'),
-            this.requireInput('bundle_id', inputs, 'iOS bundle identifier (e.g. com.example.app)'),
-            this.requireInput('bundle_version', inputs, 'App version string (e.g. 1.2.3)'),
-            this.requireInput('title', inputs, 'App display name shown during install'),
-        ];
-    }
-    getOutputs() {
-        return [
-            {
-                name: 'CIBUILD_PUBLIC_INSTALL_PAGE_QR_CODE_IMAGE_URL',
-                type: 'environment',
-                description: 'QR code image URL for the OTA install page (api.qrserver.com link)',
-            },
-        ];
-    }
-    async execute(inputs, _env, _config) {
-        const stepName = 'ota-install';
-        const ipaUrl = this.getRequiredInput(inputs, 'ipa_url', stepName);
-        const bundleId = this.getRequiredInput(inputs, 'bundle_id', stepName);
-        const bundleVersion = this.getRequiredInput(inputs, 'bundle_version', stepName);
-        const title = this.getRequiredInput(inputs, 'title', stepName);
-        const outputDir = this.getInput(inputs, 'output_dir', '.ci/artifacts');
-        const manifestUrlInput = this.getInput(inputs, 'manifest_url', '');
-        const escapedIpaUrl = this.escapeBash(ipaUrl);
-        const escapedBundleId = this.escapeBash(bundleId);
-        const escapedBundleVersion = this.escapeBash(bundleVersion);
-        const escapedTitle = this.escapeBash(title);
-        const escapedOutputDir = this.escapeBash(outputDir);
-        const commands = [];
-        commands.push('# ota-install — generate OTA manifest + QR code');
-        commands.push(`IPA_URL='${escapedIpaUrl}'`);
-        commands.push(`BUNDLE_ID='${escapedBundleId}'`);
-        commands.push(`BUNDLE_VERSION='${escapedBundleVersion}'`);
-        commands.push(`TITLE='${escapedTitle}'`);
-        commands.push(`OUTPUT_DIR='${escapedOutputDir}'`);
-        commands.push('');
-        // Derive manifest URL if not provided
-        if (manifestUrlInput.trim()) {
-            commands.push(`MANIFEST_URL='${this.escapeBash(manifestUrlInput)}'`);
-        }
-        else {
-            commands.push('# Derive manifest URL from IPA URL (same directory, manifest.plist filename)');
-            commands.push('MANIFEST_URL="$(dirname "$IPA_URL")/manifest.plist"');
-        }
-        commands.push('');
-        // Build OTA link
-        commands.push('OTA_URL="itms-services://?action=download-manifest&url=${MANIFEST_URL}"');
-        commands.push('');
-        // Create output dir and write manifest.plist
-        commands.push('mkdir -p "$OUTPUT_DIR"');
-        commands.push('');
-        commands.push('# Write manifest.plist');
-        commands.push('cat > "$OUTPUT_DIR/manifest.plist" << PLIST_EOF');
-        commands.push('<?xml version="1.0" encoding="UTF-8"?>');
-        commands.push('<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">');
-        commands.push('<plist version="1.0">');
-        commands.push('<dict>');
-        commands.push('  <key>items</key>');
-        commands.push('  <array>');
-        commands.push('    <dict>');
-        commands.push('      <key>assets</key>');
-        commands.push('      <array>');
-        commands.push('        <dict>');
-        commands.push('          <key>kind</key><string>software-package</string>');
-        commands.push('          <key>url</key><string>${IPA_URL}</string>');
-        commands.push('        </dict>');
-        commands.push('      </array>');
-        commands.push('      <key>metadata</key>');
-        commands.push('      <dict>');
-        commands.push('        <key>bundle-identifier</key><string>${BUNDLE_ID}</string>');
-        commands.push('        <key>bundle-version</key><string>${BUNDLE_VERSION}</string>');
-        commands.push('        <key>kind</key><string>software</string>');
-        commands.push('        <key>title</key><string>${TITLE}</string>');
-        commands.push('      </dict>');
-        commands.push('    </dict>');
-        commands.push('  </array>');
-        commands.push('</dict>');
-        commands.push('</plist>');
-        commands.push('PLIST_EOF');
-        commands.push('');
-        commands.push('echo "✓ manifest.plist written to $OUTPUT_DIR/manifest.plist"');
-        commands.push('');
-        // Generate QR code (qrencode preferred; graceful fallback)
-        commands.push('# Generate QR code');
-        commands.push('if command -v qrencode &>/dev/null; then');
-        commands.push('  echo ""');
-        commands.push('  echo "Scan to install:"');
-        commands.push('  qrencode -t ansiutf8 "$OTA_URL"');
-        commands.push('else');
-        commands.push('  echo "ℹ  Install qrencode for terminal QR: brew install qrencode"');
-        commands.push('fi');
-        commands.push('');
-        // Print summary
-        commands.push('echo ""');
-        commands.push('echo "─────────────────────────────────────────"');
-        commands.push('echo "OTA Install Summary"');
-        commands.push('echo "─────────────────────────────────────────"');
-        commands.push('echo "IPA URL:      $IPA_URL"');
-        commands.push('echo "Manifest URL: $MANIFEST_URL"');
-        commands.push('echo "OTA Link:     $OTA_URL"');
-        commands.push('echo ""');
-        commands.push('echo "Host the IPA and manifest.plist at the URLs above, then share the OTA link."');
-        commands.push('echo "─────────────────────────────────────────"');
-        commands.push('');
-        // Export QR image URL to envstore (api.qrserver.com image link, usable in notifications)
-        commands.push('# Export QR image URL to envstore for downstream steps (e.g. Slack notifications)');
-        commands.push('ENCODED_OTA="$(python3 -c "import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))" "$OTA_URL" 2>/dev/null || printf "%s" "$OTA_URL" | sed \'s/ /%20/g; s/:/%3A/g; s|/|%2F|g; s/?/%3F/g; s/=/%3D/g; s/&/%26/g\')"');
-        commands.push('QR_IMAGE_URL="https://api.qrserver.com/v1/create-qr-code/?size=300x300&data=${ENCODED_OTA}"');
-        commands.push('');
-        commands.push('ENVSTORE_FILE="${ENVMAN_ENVSTORE_PATH:-.ci/.envstore.json}"');
-        commands.push('if [ -f "$ENVSTORE_FILE" ]; then');
-        commands.push('  node -e "');
-        commands.push('    const fs=require(\'fs\');');
-        commands.push('    const s=JSON.parse(fs.readFileSync(process.argv[1],\'utf-8\'));');
-        commands.push('    s.envs=s.envs||[];');
-        commands.push('    s.envs=s.envs.filter(e=>e.key!==\'CIBUILD_PUBLIC_INSTALL_PAGE_QR_CODE_IMAGE_URL\');');
-        commands.push('    s.envs.push({key:\'CIBUILD_PUBLIC_INSTALL_PAGE_QR_CODE_IMAGE_URL\',value:process.argv[2]});');
-        commands.push('    fs.writeFileSync(process.argv[1],JSON.stringify(s));');
-        commands.push('  " "$ENVSTORE_FILE" "$QR_IMAGE_URL" 2>/dev/null || true');
-        commands.push('fi');
-        commands.push('export CIBUILD_PUBLIC_INSTALL_PAGE_QR_CODE_IMAGE_URL="$QR_IMAGE_URL"');
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * Builds the app and tests without executing them.
- * Produces an .xctestrun file for use with xcode-test-without-building.
- */
-export class XcodeBuildForTestStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        const requirements = [];
-        requirements.push(this.requireCommand('xcodebuild', 'Xcode Command Line Tools are required', 'Install Xcode, then run: xcode-select --install'));
-        requirements.push(this.requireInput('project_path', inputs, 'Path to .xcodeproj or .xcworkspace'));
-        requirements.push(this.requireInput('scheme', inputs, 'Xcode scheme name'));
-        if (inputs.project_path && !existsSync(inputs.project_path)) {
-            requirements.push(this.runtimeRequirement(inputs.project_path, 'Xcode project/workspace file', 'file', 'the checkout'));
-        }
-        if (inputs.destination === 'auto') {
-            requirements.push(this.requireCommand('xcrun', 'xcrun is required to resolve destination: auto via xcrun simctl', 'Install Xcode and run: xcode-select --install'));
-        }
-        return requirements;
-    }
-    getOutputs() {
-        return [
-            { name: 'CIBUILD_TEST_BUNDLE_PATH', type: 'environment', description: 'Directory containing the built test bundle' },
-            { name: 'CIBUILD_XCTESTRUN_FILE_PATH', type: 'environment', description: 'Path to the generated .xctestrun file' },
-        ];
-    }
-    async execute(inputs, _env, _config) {
-        const stepName = 'xcode-build-for-test';
-        const projectPath = this.getRequiredInput(inputs, 'project_path', stepName);
-        const scheme = this.getRequiredInput(inputs, 'scheme', stepName);
-        const configuration = this.getInput(inputs, 'configuration', 'Debug');
-        // `auto` triggers runtime resolution via `xcrun simctl`.
-        const destination = resolveDestinationInput(this.getInput(inputs, 'destination', 'generic/platform=iOS Simulator'));
-        const testPlan = this.getInput(inputs, 'test_plan', '');
-        const xcconfigContent = this.getInput(inputs, 'xcconfig_content', '');
-        const xcodebuildOptions = this.getInput(inputs, 'xcodebuild_options', '');
-        const outputDir = this.getInput(inputs, 'output_dir', 'build');
-        const escapedPath = this.escapeBash(projectPath);
-        const escapedScheme = this.escapeBash(scheme);
-        const commands = [];
-        commands.push('# xcode-build-for-test — build-for-testing');
-        commands.push(`echo "Building for testing: ${escapedPath}"`);
-        commands.push(`echo "Scheme: ${escapedScheme}"`);
-        commands.push('');
-        // Output directory
-        commands.push(`mkdir -p '${this.escapeBash(outputDir)}'`);
-        commands.push(`OUTPUT_DIR="$(cd '${this.escapeBash(outputDir)}' && pwd)"`);
-        commands.push(...derivedDataPathLines());
-        commands.push('');
-        // xcconfig
-        if (xcconfigContent.trim()) {
-            commands.push('XCCONFIG_FILE="$(mktemp -t cibuild-xcconfig).xcconfig"');
-            commands.push(`cat > "$XCCONFIG_FILE" << 'XCCONFIG_EOF'`);
-            commands.push(xcconfigContent);
-            commands.push('XCCONFIG_EOF');
-            commands.push('');
-        }
-        // Determine project type
-        commands.push(`if [[ '${escapedPath}' == *.xcworkspace ]]; then`);
-        commands.push('  PROJECT_TYPE="-workspace"');
-        commands.push('else');
-        commands.push('  PROJECT_TYPE="-project"');
-        commands.push('fi');
-        commands.push('');
-        // Resolve the package graph on its own, ahead of the build, so a refused
-        // fetch costs a retry of something that takes seconds rather than a re-run
-        // of build-for-testing, which takes minutes. The build that follows reads
-        // the same derived data and finds the graph already resolved.
-        commands.push('# Resolve package dependencies first — see git-fetch-retry');
-        commands.push(...refusedFetchHelpers());
-        commands.push(...retryOnRefusedFetch({
-            label: 'Package resolution',
-            command: 'xcodebuild -resolvePackageDependencies' +
-                ` "$PROJECT_TYPE" '${escapedPath}'` +
-                ` -scheme '${escapedScheme}'` +
-                ' -derivedDataPath "$DERIVED_DATA_PATH"',
-        }));
-        const pinsArm64 = pinsSimulatorArm64(xcodebuildOptions);
-        if (pinsArm64) {
-            commands.push(...simulatorArchsLines({
-                projectPath: escapedPath,
-                scheme: escapedScheme,
-                configuration: this.escapeBash(configuration),
-                destination: this.escapeBash(destination),
-                xcconfig: Boolean(xcconfigContent.trim()),
-            }));
-        }
-        // Build command
-        let cmd = 'xcodebuild build-for-testing';
-        cmd += ` "$PROJECT_TYPE" '${escapedPath}'`;
-        cmd += ` -scheme '${escapedScheme}'`;
-        cmd += ` -configuration '${this.escapeBash(configuration)}'`;
-        cmd += ` -destination '${this.escapeBash(destination)}'`;
-        cmd += ` -derivedDataPath "$DERIVED_DATA_PATH"`;
-        if (testPlan) {
-            cmd += ` -testPlan '${this.escapeBash(testPlan)}'`;
-        }
-        if (xcconfigContent.trim()) {
-            cmd += ' -xcconfig "$XCCONFIG_FILE"';
-        }
-        if (xcodebuildOptions) {
-            cmd += ` ${pinsArm64 ? withRuntimeSimulatorArchs(xcodebuildOptions) : xcodebuildOptions}`;
-        }
-        commands.push(cmd);
-        commands.push('');
-        // Locate .xctestrun file
-        commands.push('# Locate generated .xctestrun file');
-        commands.push('XCTESTRUN_PATH=$(find "$DERIVED_DATA_PATH/Build/Products" -name "*.xctestrun" | head -1)');
-        commands.push('if [ -z "$XCTESTRUN_PATH" ]; then');
-        commands.push('  echo "❌ Error: .xctestrun file not found"');
-        commands.push('  exit 1');
-        commands.push('fi');
-        commands.push('');
-        commands.push('TEST_BUNDLE_DIR="$(dirname "$XCTESTRUN_PATH")"');
-        commands.push('echo "✅ Build for testing complete"');
-        commands.push('echo "xctestrun: $XCTESTRUN_PATH"');
-        commands.push('');
-        // Export env vars
-        commands.push('envman add --key CIBUILD_TEST_BUNDLE_PATH --value "$TEST_BUNDLE_DIR"');
-        commands.push('envman add --key CIBUILD_XCTESTRUN_FILE_PATH --value "$XCTESTRUN_PATH"');
-        if (xcconfigContent.trim()) {
-            commands.push('rm -f "$XCCONFIG_FILE"');
-        }
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * Runs pre-compiled tests from an .xctestrun file.
- */
-export class XcodeTestWithoutBuildingStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        const requirements = [
-            this.requireCommand('xcodebuild', 'Xcode Command Line Tools are required', 'Install Xcode, then run: xcode-select --install'),
-        ];
-        if (inputs.destination === 'auto') {
-            requirements.push(this.requireCommand('xcrun', 'xcrun is required to resolve destination: auto via xcrun simctl', 'Install Xcode and run: xcode-select --install'));
-        }
-        return requirements;
-    }
-    getOutputs() {
-        return [
-            { name: 'CIBUILD_XCRESULT_PATH', type: 'environment', description: 'Path to the .xcresult test result bundle' },
-        ];
-    }
-    async execute(inputs, _env, _config) {
-        const stepName = 'xcode-test-without-building';
-        const xctestrun = this.getInput(inputs, 'xctestrun', '$CIBUILD_XCTESTRUN_FILE_PATH');
-        // `auto` triggers runtime resolution via `xcrun simctl`.
-        const destination = resolveDestinationInput(this.getInput(inputs, 'destination', 'platform=iOS Simulator,name=iPhone 15,OS=latest'));
-        const onlyTesting = this.getInput(inputs, 'only_testing', '');
-        const skipTesting = this.getInput(inputs, 'skip_testing', '');
-        const repetitionMode = this.getInput(inputs, 'test_repetition_mode', 'none');
-        const maxRepetitions = this.getInput(inputs, 'maximum_test_repetitions', '3');
-        const xcodebuildOptions = this.getInput(inputs, 'xcodebuild_options', '');
-        const commands = [];
-        commands.push('# xcode-test-without-building');
-        commands.push('echo "Running pre-built tests..."');
-        commands.push('');
-        // Resolve xctestrun path
-        commands.push(`XCTESTRUN_FILE="${xctestrun}"`);
-        commands.push('if [ -z "$XCTESTRUN_FILE" ]; then');
-        commands.push('  echo "❌ Error: xctestrun file path is empty. Run xcode-build-for-test first."');
-        commands.push('  exit 1');
-        commands.push('fi');
-        commands.push('if [ ! -f "$XCTESTRUN_FILE" ]; then');
-        commands.push('  echo "❌ Error: xctestrun file not found: $XCTESTRUN_FILE"');
-        commands.push('  exit 1');
-        commands.push('fi');
-        commands.push('echo "xctestrun: $XCTESTRUN_FILE"');
-        commands.push('');
-        // Result bundle path
-        commands.push('RESULT_BUNDLE_PATH="build/test-results/$(date +%Y%m%d_%H%M%S).xcresult"');
-        commands.push('mkdir -p "$(dirname "$RESULT_BUNDLE_PATH")"');
-        commands.push('');
-        // Build command
-        let cmd = 'xcodebuild test-without-building';
-        cmd += ' -xctestrun "$XCTESTRUN_FILE"';
-        cmd += ` -destination '${this.escapeBash(destination)}'`;
-        cmd += ' -resultBundlePath "$RESULT_BUNDLE_PATH"';
-        // Test filtering
-        if (onlyTesting) {
-            for (const test of onlyTesting.split('\n').filter(Boolean)) {
-                cmd += ` -only-testing:'${this.escapeBash(test.trim())}'`;
-            }
-        }
-        if (skipTesting) {
-            for (const test of skipTesting.split('\n').filter(Boolean)) {
-                cmd += ` -skip-testing:'${this.escapeBash(test.trim())}'`;
-            }
-        }
-        // Repetition
-        if (repetitionMode && repetitionMode !== 'none') {
-            if (repetitionMode === 'until_failure') {
-                cmd += ' -run-tests-until-failure';
-            }
-            else if (repetitionMode === 'retry_on_failure') {
-                cmd += ' -retry-tests-on-failure';
-            }
-            cmd += ` -test-iterations ${maxRepetitions}`;
-        }
-        if (xcodebuildOptions) {
-            cmd += ` ${xcodebuildOptions}`;
-        }
-        commands.push(cmd);
-        commands.push('');
-        commands.push('echo "✅ Tests completed"');
-        commands.push('echo "Result bundle: $RESULT_BUNDLE_PATH"');
-        commands.push('');
-        // Export
-        commands.push('envman add --key CIBUILD_XCRESULT_PATH --value "$RESULT_BUNDLE_PATH"');
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * Builds an iOS/tvOS/watchOS app for the simulator.
- * Produces a .app bundle with code signing disabled by default.
- */
-export class XcodeBuildForSimulatorStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(inputs, _env, _config) {
-        const requirements = [];
-        requirements.push(this.requireCommand('xcodebuild', 'Xcode Command Line Tools are required', 'Install Xcode, then run: xcode-select --install'));
-        requirements.push(this.requireInput('project_path', inputs, 'Path to .xcodeproj or .xcworkspace'));
-        requirements.push(this.requireInput('scheme', inputs, 'Xcode scheme name'));
-        if (inputs.project_path && !existsSync(inputs.project_path)) {
-            requirements.push(this.runtimeRequirement(inputs.project_path, 'Xcode project/workspace file', 'file', 'the checkout'));
-        }
-        if (inputs.destination === 'auto') {
-            requirements.push(this.requireCommand('xcrun', 'xcrun is required to resolve destination: auto via xcrun simctl', 'Install Xcode and run: xcode-select --install'));
-        }
-        return requirements;
-    }
-    getOutputs() {
-        return [
-            { name: 'CIBUILD_APP_DIR_PATH', type: 'environment', description: 'Path to the generated .app directory' },
-        ];
-    }
-    async execute(inputs, _env, _config) {
-        const stepName = 'xcode-build-for-simulator';
-        const projectPath = this.getRequiredInput(inputs, 'project_path', stepName);
-        const scheme = this.getRequiredInput(inputs, 'scheme', stepName);
-        const configuration = this.getInput(inputs, 'configuration', '');
-        // `auto` triggers runtime resolution via `xcrun simctl`.
-        const destination = resolveDestinationInput(this.getInput(inputs, 'destination', 'generic/platform=iOS Simulator'));
-        const performClean = this.getInput(inputs, 'perform_clean_action', 'no');
-        const xcconfigContent = this.getInput(inputs, 'xcconfig_content', 'CODE_SIGNING_ALLOWED=NO');
-        const xcodebuildOptions = this.getInput(inputs, 'xcodebuild_options', '');
-        const outputDir = this.getInput(inputs, 'output_dir', 'build');
-        const escapedPath = this.escapeBash(projectPath);
-        const escapedScheme = this.escapeBash(scheme);
-        const commands = [];
-        commands.push('# xcode-build-for-simulator');
-        commands.push(`echo "Building for simulator: ${escapedPath}"`);
-        commands.push(`echo "Scheme: ${escapedScheme}"`);
-        commands.push('');
-        // Output dir
-        commands.push(`mkdir -p '${this.escapeBash(outputDir)}'`);
-        commands.push(`OUTPUT_DIR="$(cd '${this.escapeBash(outputDir)}' && pwd)"`);
-        commands.push(...derivedDataPathLines());
-        commands.push('');
-        // xcconfig
-        commands.push('XCCONFIG_FILE="$(mktemp -t cibuild-xcconfig).xcconfig"');
-        if (xcconfigContent.trim()) {
-            commands.push(`cat > "$XCCONFIG_FILE" << 'XCCONFIG_EOF'`);
-            commands.push(xcconfigContent);
-            commands.push('XCCONFIG_EOF');
-        }
-        else {
-            commands.push('echo "CODE_SIGNING_ALLOWED=NO" > "$XCCONFIG_FILE"');
-        }
-        commands.push('');
-        // Project type
-        commands.push(`if [[ '${escapedPath}' == *.xcworkspace ]]; then`);
-        commands.push('  PROJECT_TYPE="-workspace"');
-        commands.push('else');
-        commands.push('  PROJECT_TYPE="-project"');
-        commands.push('fi');
-        commands.push('');
-        // Resolve the package graph before building, under the refused-fetch
-        // retry. This is the step an iOS app is normally built with, so it is the
-        // one a refused dependency fetch lands on first. The build below reads the
-        // same derived data and finds the graph already resolved — the two
-        // -derivedDataPath arguments have to move together, or the resolve
-        // populates one location and the build re-resolves into another, which
-        // silently spends the retry on work the build then throws away.
-        commands.push('# Resolve package dependencies first — see git-fetch-retry');
-        commands.push(...refusedFetchHelpers());
-        commands.push(...retryOnRefusedFetch({
-            label: 'Package resolution',
-            command: 'xcodebuild -resolvePackageDependencies' +
-                ` "$PROJECT_TYPE" '${escapedPath}'` +
-                ` -scheme '${escapedScheme}'` +
-                ' -derivedDataPath "$DERIVED_DATA_PATH"',
-        }));
-        const pinsArm64 = pinsSimulatorArm64(xcodebuildOptions);
-        if (pinsArm64) {
-            commands.push(...simulatorArchsLines({
-                projectPath: escapedPath,
-                scheme: escapedScheme,
-                configuration: configuration ? this.escapeBash(configuration) : '',
-                destination: this.escapeBash(destination),
-                xcconfig: true,
-            }));
-        }
-        // Build command
-        let cmd = 'xcodebuild';
-        if (performClean === 'yes') {
-            cmd += ' clean';
-        }
-        cmd += ' build';
-        cmd += ` "$PROJECT_TYPE" '${escapedPath}'`;
-        cmd += ` -scheme '${escapedScheme}'`;
-        if (configuration) {
-            cmd += ` -configuration '${this.escapeBash(configuration)}'`;
-        }
-        cmd += ` -destination '${this.escapeBash(destination)}'`;
-        // -derivedDataPath rather than CONFIGURATION_BUILD_DIR. The latter was set
-        // to keep xcodebuild from writing a `build` directory inside each SPM
-        // package checkout in DerivedData ("File exists but is not a directory" on
-        // repeated runs) — but note what that fix actually was: making the path
-        // ABSOLUTE. Pointing derived data somewhere writable achieves the same
-        // thing without the cost below, and matches xcode-build-for-test.
-        //
-        // The cost, measured 2026-09-09 on four of the six iOS corpus rows:
-        // CONFIGURATION_BUILD_DIR overrides the per-configuration/per-platform
-        // product separation xcodebuild normally provides under
-        // DerivedData/Build/Products/<config>-<platform>/, flattening every target
-        // in the graph into ONE directory. Two build tasks for the same target then
-        // declare the same absolute output path and xcodebuild refuses the whole
-        // build with "Multiple commands produce". Read the notes it prints: they
-        // name the SAME target twice. It is not two packages colliding on a name,
-        // it is one target built twice into one directory. 16 collisions on
-        // jellyfin/Swiftfin, 266 on Automattic/pocket-casts-ios, 425 on
-        // home-assistant/iOS.
-        //
-        // It also breaks CocoaPods, which is the same defect wearing a disguise.
-        // CocoaPods derives PODS_CONFIGURATION_BUILD_DIR from BUILD_DIR, and
-        // BUILD_DIR is NOT what CONFIGURATION_BUILD_DIR overrides — so pod products
-        // are written to the flat directory while every generated copy-resources
-        // script and linker search path still points into DerivedData. On
-        // shenruisi/Stay that surfaced as "Resource SDWebImage.bundle not found.
-        // Run pod install", for a bundle that had in fact been built, two
-        // directories away.
-        //
-        // Proved by control, same repo and image and flags, only this line
-        // differing: CONFIGURATION_BUILD_DIR reproduced the collision and exit 65
-        // with no .app; -derivedDataPath reached BUILD SUCCEEDED in 2m06s and left
-        // both Debug and Debug-iphonesimulator under Products — the separation the
-        // flat directory destroys.
-        cmd += ` -derivedDataPath "$DERIVED_DATA_PATH"`;
-        cmd += ' -xcconfig "$XCCONFIG_FILE"';
-        if (xcodebuildOptions) {
-            cmd += ` ${pinsArm64 ? withRuntimeSimulatorArchs(xcodebuildOptions) : xcodebuildOptions}`;
-        }
-        commands.push(cmd);
-        commands.push('');
-        // Locate .app. It now lands under the per-platform Products directory
-        // rather than flat in $OUTPUT_DIR, so the guard has to follow it — at
-        // maxdepth 1 this found nothing and the step would fail every build with
-        // ".app not found" while the app had compiled perfectly.
-        //
-        // Following the products is not enough on its own, though, because a scheme
-        // that builds a watchOS or tvOS companion produces more than one bundle and
-        // a scan has no way to tell them apart. Ask the scheme, which knows: see
-        // xcode-app-product.ts. The scan below is what runs when the scheme cannot
-        // answer — a project with no shared scheme is ordinary and builds fine, so
-        // this resolves the same bundle it always did there.
-        commands.push('# Locate generated .app — the one this scheme builds');
-        commands.push('PRODUCTS_DIR="$DERIVED_DATA_PATH/Build/Products"');
-        commands.push('APP_RESOLVER="$(mktemp -t cibuild-app-product).cjs"');
-        commands.push(`cat > "$APP_RESOLVER" << 'CIBUILD_APP_PRODUCT_EOF'`);
-        commands.push(APP_PRODUCT_RESOLVER_SOURCE.trim());
-        commands.push('CIBUILD_APP_PRODUCT_EOF');
-        commands.push('APP_PATH=$(node "$APP_RESOLVER" "$PRODUCTS_DIR"' +
-            ` '${escapedPath}' '${escapedScheme}' '${this.escapeBash(destination)}' 2>/dev/null || true)`);
-        commands.push('rm -f "$APP_RESOLVER"');
-        commands.push('if [ -z "$APP_PATH" ]; then');
-        commands.push('  APP_PATH=$(find "$PRODUCTS_DIR" -maxdepth 2 -name "*.app" -type d 2>/dev/null | head -1)');
-        commands.push('fi');
-        commands.push('if [ -z "$APP_PATH" ]; then');
-        commands.push('  echo "❌ Error: .app not found under $PRODUCTS_DIR"');
-        commands.push('  exit 1');
-        commands.push('fi');
-        commands.push('');
-        commands.push('echo "✅ Simulator build complete"');
-        commands.push('echo "App: $APP_PATH"');
-        commands.push('');
-        // Export
-        commands.push('envman add --key CIBUILD_APP_DIR_PATH --value "$APP_PATH"');
-        commands.push('');
-        // Deliver it, the way gradle-build delivers its .apk.
-        //
-        // gradle-build copies its own output into the artifacts directory; this
-        // step located the bundle, exported the path and left it in DerivedData —
-        // which the runner excludes from artifact discovery. So the app was
-        // findable and deliberately not found, and an iOS proof could go green
-        // handing the user nothing to install. Pipelines that added a collecting
-        // step of their own delivered; every other one did not, which made
-        // delivery a property of the pipeline rather than of the build.
-        //
-        // It zips rather than copying the bundle in, and that is not cosmetic. A
-        // .app is a directory: staged as a directory it becomes one artifact per
-        // file inside it — every asset, nib and framework separately — and an
-        // internal symlink pointing outside the workspace fails the stage
-        // outright. A .zip is a plain file, stages as exactly one artifact, and is
-        // what someone downloading it wants anyway. ditto is the macOS-native
-        // archiver and preserves the bundle's permissions and symlinks, which a
-        // plain recursive zip does not do faithfully.
-        commands.push('# Deliver the app as one artifact');
-        commands.push('ARTIFACTS_DIR="${CIBUILD_ARTIFACTS_DIR:-.ci/artifacts}"');
-        commands.push('mkdir -p "$ARTIFACTS_DIR"');
-        commands.push('APP_NAME="$(basename "$APP_PATH")"');
-        commands.push('rm -f "$ARTIFACTS_DIR/$APP_NAME.zip"');
-        commands.push('ditto -c -k --keepParent "$APP_PATH" "$ARTIFACTS_DIR/$APP_NAME.zip"');
-        commands.push('echo "  → Collected: $APP_NAME.zip"');
-        commands.push('echo "✅ Artifacts copied to: $ARTIFACTS_DIR"');
-        commands.push('ls -lh "$ARTIFACTS_DIR"');
-        commands.push('');
-        commands.push('rm -f "$XCCONFIG_FILE"');
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-/**
- * Exports an IPA from an existing .xcarchive using xcodebuild -exportArchive.
- */
-export class ExportXcarchiveStepExecutor extends BaseStepExecutor {
-    getValidationRequirements(_inputs, _env, _config) {
-        return [
-            this.requireCommand('xcodebuild', 'Xcode is required for archive export'),
-        ];
-    }
-    getOutputs() {
-        return [
-            { name: 'CIBUILD_IPA_PATH', type: 'environment', description: 'Path to the exported IPA file' },
-            { name: 'CIBUILD_DSYM_PATH', type: 'environment', description: 'Path to the zipped dSYM files' },
-        ];
-    }
-    async execute(inputs, _env, _config) {
-        const stepName = 'export-xcarchive';
-        const archivePath = this.getRequiredInput(inputs, 'archive_path', stepName);
-        const product = this.getInput(inputs, 'product', 'app');
-        const distributionMethod = this.getInput(inputs, 'distribution_method', 'development');
-        const compileBitcode = this.getInput(inputs, 'compile_bitcode', 'yes') === 'yes';
-        const uploadBitcode = this.getInput(inputs, 'upload_bitcode', 'yes') === 'yes';
-        const exportOptionsPlistContent = this.getInput(inputs, 'export_options_plist_content', '');
-        const verbose = this.getInput(inputs, 'verbose_log', 'no') === 'yes';
-        const commands = [];
-        commands.push('# export-xcarchive — export IPA from .xcarchive');
-        commands.push('echo "📦 Exporting IPA from xcarchive..."');
-        commands.push('');
-        commands.push(`ARCHIVE_PATH='${this.escapeBash(archivePath)}'`);
-        commands.push('');
-        // Validate archive exists
-        commands.push('if [ ! -d "$ARCHIVE_PATH" ]; then');
-        commands.push('  echo "❌ Error: Archive not found: $ARCHIVE_PATH"');
-        commands.push('  exit 1');
-        commands.push('fi');
-        commands.push('');
-        // Set up export directory
-        commands.push('EXPORT_DIR="${CIBUILD_DEPLOY_DIR:-./artifacts}/export"');
-        commands.push('mkdir -p "$EXPORT_DIR"');
-        commands.push('');
-        // Generate or use provided ExportOptions.plist
-        commands.push('EXPORT_OPTIONS="$EXPORT_DIR/ExportOptions.plist"');
-        if (exportOptionsPlistContent) {
-            commands.push('cat > "$EXPORT_OPTIONS" << \'PLIST_EOF\'');
-            commands.push(exportOptionsPlistContent);
-            commands.push('PLIST_EOF');
-        }
-        else {
-            // Map distribution method for Xcode 15.3+
-            commands.push('# Determine distribution method');
-            commands.push(`METHOD='${this.escapeBash(distributionMethod)}'`);
-            commands.push('XCODE_VERSION=$(xcodebuild -version | head -1 | grep -oE "[0-9]+\\.[0-9]+" || echo "0.0")');
-            commands.push('XCODE_MAJOR=$(echo "$XCODE_VERSION" | cut -d. -f1)');
-            commands.push('XCODE_MINOR=$(echo "$XCODE_VERSION" | cut -d. -f2)');
-            commands.push('if [ "$XCODE_MAJOR" -ge 16 ] || ([ "$XCODE_MAJOR" -eq 15 ] && [ "$XCODE_MINOR" -ge 3 ]); then');
-            commands.push('  case "$METHOD" in');
-            commands.push('    development) METHOD="debugging" ;;');
-            commands.push('    app-store) METHOD="app-store-connect" ;;');
-            commands.push('    ad-hoc) METHOD="release-testing" ;;');
-            commands.push('  esac');
-            commands.push('fi');
-            commands.push('');
-            commands.push('cat > "$EXPORT_OPTIONS" << PLIST_EOF');
-            commands.push('<?xml version="1.0" encoding="UTF-8"?>');
-            commands.push('<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">');
-            commands.push('<plist version="1.0">');
-            commands.push('<dict>');
-            commands.push('  <key>method</key>');
-            commands.push('  <string>$METHOD</string>');
-            commands.push(`  <key>compileBitcode</key>`);
-            commands.push(`  <${compileBitcode}/>`);
-            commands.push(`  <key>uploadBitcode</key>`);
-            commands.push(`  <${uploadBitcode}/>`);
-            if (product === 'app-clip') {
-                commands.push('  <key>exportForThinning</key>');
-                commands.push('  <string>app-clip</string>');
-            }
-            commands.push('</dict>');
-            commands.push('</plist>');
-            commands.push('PLIST_EOF');
-        }
-        commands.push('');
-        // Run xcodebuild -exportArchive
-        const verboseFlag = verbose ? '' : ' -quiet';
-        commands.push('echo "Exporting with method: $METHOD"');
-        commands.push(`xcodebuild -exportArchive \\`);
-        commands.push(`  -archivePath "$ARCHIVE_PATH" \\`);
-        commands.push(`  -exportPath "$EXPORT_DIR" \\`);
-        commands.push(`  -exportOptionsPlist "$EXPORT_OPTIONS"${verboseFlag}`);
-        commands.push('');
-        // Find IPA
-        commands.push('# Find exported IPA');
-        commands.push('IPA_PATH=$(find "$EXPORT_DIR" -name "*.ipa" | head -1)');
-        commands.push('if [ -z "$IPA_PATH" ]; then');
-        commands.push('  echo "❌ Error: No IPA found in export directory"');
-        commands.push('  exit 1');
-        commands.push('fi');
-        commands.push('echo "✅ Exported IPA: $IPA_PATH"');
-        commands.push('');
-        // Collect dSYMs
-        commands.push('# Collect dSYMs');
-        commands.push('DSYM_DIR="$ARCHIVE_PATH/dSYMs"');
-        commands.push('DSYM_ZIP=""');
-        commands.push('if [ -d "$DSYM_DIR" ] && [ "$(ls -A "$DSYM_DIR" 2>/dev/null)" ]; then');
-        commands.push('  DSYM_ZIP="$EXPORT_DIR/dSYMs.zip"');
-        commands.push('  cd "$DSYM_DIR" && zip -r "$DSYM_ZIP" . && cd -');
-        commands.push('  echo "dSYMs: $DSYM_ZIP"');
-        commands.push('fi');
-        commands.push('');
-        // Export env vars
-        commands.push('envman add --key CIBUILD_IPA_PATH --value "$IPA_PATH"');
-        commands.push('if [ -n "$DSYM_ZIP" ]; then');
-        commands.push('  envman add --key CIBUILD_DSYM_PATH --value "$DSYM_ZIP"');
-        commands.push('fi');
-        const script = this.createBashScriptFromCommands(commands, stepName);
-        return this.createScriptStep(script, stepName);
-    }
-}
-//# sourceMappingURL=xcode.js.map