@olivervea/pipelines 2.0.0-beta.35 → 2.0.0-beta.36

package/README.md

@@ -436,6 +436,7 @@ Exact format: [`manifest.schema.json`](manifest.schema.json) (JSON Schema 2020-1
   - `{kind: "webhook", name, verify: {scheme: "hmac-sha256", secret, header, prefix} | {scheme: "bearer", secret}}`. The `map-trigger` event is `{headers, body}`; a `null` mapping yields a `skipped` envelope (the delivery is ignored).
 - **`failureHandlers`** is a list of `{step: Step, steps: [names] | null}`. Each handler's inputs are all FailureContext (`{"ref": "failure"}`).
 - **`retention`** (when present) is `{keepLatestRuns?, minRunAgeDays?, buildGraceDays?}`, non-negative integers that replace the instance's thresholds for this pipeline. Omitted when the definition sets none.
+- **`ci`** (when present) is `{description?, input, secrets, stages}`: the checks run on pull requests. `input` is a model, `secrets` the sorted names CI steps may declare (each one a pipeline secret), `stages` shaped like the pipeline's. A step name in both the pipeline and `ci` is one step: everything it declares but its `input` mappings must match. CI steps can't have external inputs. Omitted when there is no CI.
 - **`secrets`** lists every secret used by steps, polls and webhooks, sorted, as `{name, description}`.
 - **`config`** lists every config entry steps declare, sorted by name, as `{name, description, required, schema}`. `schema` is the `z.input` view (defaults listed); it validates the entry's value in the config document. `required` is false when the schema accepts a missing value. A `secretRef` field is marked `"x-olve-kind": "secretRef"`, with the secret's name as `properties.secret.const`. Omitted when there are no entries.
 - **Step `configEntries`** names the entries the step receives (sorted; omitted when none). It is part of the step's content, like `secrets`. The step key `config` is the step's `settings`.

package/manifest.schema.json

@@ -52,6 +52,41 @@
           "const": "2.0",
           "type": "string"
         },
+        "ci": {
+          "additionalProperties": false,
+          "description": "Checks run on pull requests (omitted when none). Steps are matched by name: a step in both the pipeline and CI is the same step.",
+          "properties": {
+            "description": {
+              "type": "string"
+            },
+            "input": {
+              "description": "CI input model.",
+              "pattern": "^[A-Za-z][A-Za-z0-9_]*$",
+              "type": "string"
+            },
+            "secrets": {
+              "description": "The pipeline secrets CI steps may declare, sorted by name.",
+              "items": {
+                "description": "Secret name; also the env var name in the step container.",
+                "pattern": "^[A-Z_][A-Z0-9_]*$",
+                "type": "string"
+              },
+              "type": "array"
+            },
+            "stages": {
+              "items": {
+                "$ref": "#/$defs/Stage"
+              },
+              "type": "array"
+            }
+          },
+          "required": [
+            "input",
+            "secrets",
+            "stages"
+          ],
+          "type": "object"
+        },
         "codeHash": {
           "description": "Hash of the whole build: the pipeline and its code bundled, plus the harness. Any code change makes a new pipeline version.",
           "pattern": "^sha256:[0-9a-f]{64}$",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@olivervea/pipelines",
-  "version": "2.0.0-beta.35",
+  "version": "2.0.0-beta.36",
   "description": "Olve.Pipelines v2 SDK: typed pipeline authoring, the step harness, and the build tool.",
   "type": "module",
   "license": "MIT",

package/src/describe/manifest-schema.ts

@@ -390,6 +390,19 @@ export const Manifest = z
       ),
     triggers: z.array(Trigger),
     stages: z.array(Stage),
+    ci: z
+      .strictObject({
+        description: z.string().optional(),
+        input: modelName.describe('CI input model.'),
+        secrets: z
+          .array(secretName)
+          .describe('The pipeline secrets CI steps may declare, sorted by name.'),
+        stages: z.array(Stage),
+      })
+      .optional()
+      .describe(
+        'Checks run on pull requests (omitted when none). Steps are matched by name: a step in both the pipeline and CI is the same step.',
+      ),
     failureHandlers: z.array(
       z.strictObject({
         step: StepDescriptor.describe(