@savvy-web/github-action-builder 2.0.6 → 2.1.1

package/README.md

@@ -106,6 +106,8 @@ export default GitHubAction.create({
 });
 ```
 
+Every build runs in production mode, so `minify` alone decides whether the output is minified and a local build produces the same bytes CI does. License notices from bundled dependencies are folded into the bundle, keeping the output a single committed file with its attribution intact.
+
 ## action.yml requirements
 
 Your `action.yml` must use Node.js 24:

package/bin/github-action-builder.js

@@ -24,7 +24,7 @@ const rootCommand = Command.make("github-action-builder").pipe(Command.withSubco
 /**
 * CLI application: reads argv from the Stdio service provided by NodeServices.
 */
-const cli = Command.run(rootCommand, { version: "2.0.6" });
+const cli = Command.run(rootCommand, { version: "2.1.1" });
 /**
 * Combined layer: AppLayer + the Node implementations of the CLI
 * environment (FileSystem, Path, Terminal, Stdio, ChildProcessSpawner).

package/cli/commands/init.js

@@ -20,7 +20,7 @@ const forceOption = Flag.boolean("force").pipe(Flag.withAlias("f"), Flag.withDes
 * Get current package version (replaced at build time).
 */
 const getPackageVersion = () => {
-	return "2.0.6";
+	return "2.1.1";
 };
 /**
 * Generate package.json content.

package/index.d.ts

@@ -802,9 +802,9 @@ type AppError = ConfigError | ValidationError | BuildError | PersistError;
  */
 declare const LoadConfigOptionsSchema: Schema.Struct<{
   /** Working directory to search for config. Accepts string, Buffer, or URL. */
-  readonly cwd: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<URL, unknown>]>, never, never>>;
+  readonly cwd: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<import("node:url").URL, unknown>]>, never, never>>;
   /** Explicit path to config file. Accepts string, Buffer, or URL. */
-  readonly configPath: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<URL, unknown>]>, never, never>>;
+  readonly configPath: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<import("node:url").URL, unknown>]>, never, never>>;
 }>;
 /**
  * Options for loading configuration.
@@ -934,7 +934,7 @@ declare class ConfigService extends ConfigService_base {}
  */
 declare const BuildRunnerOptionsSchema: Schema.Struct<{
   /** Working directory for the build. Accepts string, Buffer, or URL. */
-  readonly cwd: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<URL, unknown>]>, never, never>>;
+  readonly cwd: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<import("node:url").URL, unknown>]>, never, never>>;
   /** Clean output directory before building. Defaults to true. */
   readonly clean: Schema.optional<Schema.Boolean>;
 }>;
@@ -1190,7 +1190,7 @@ declare class PersistLocalService extends PersistLocalService_base {}
  */
 declare const ValidateOptionsSchema: Schema.Struct<{
   /** Working directory for file operations. Accepts string, Buffer, or URL. */
-  readonly cwd: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<URL, unknown>]>, never, never>>;
+  readonly cwd: Schema.optional<Schema.decodeTo<Schema.String, Schema.Union<readonly [Schema.String, Schema.instanceOf<Buffer<ArrayBufferLike>, unknown>, Schema.instanceOf<import("node:url").URL, unknown>]>, never, never>>;
   /** Force strict mode regardless of environment. Auto-detects from CI when undefined. */
   readonly strict: Schema.optional<Schema.Boolean>;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@savvy-web/github-action-builder",
-	"version": "2.0.6",
+	"version": "2.1.1",
 	"private": false,
 	"description": "A zero-config build tool for creating GitHub Actions from TypeScript. Bundles with rsbuild, validates action.yml against GitHub's schema, and outputs production-ready Node.js 24 actions.",
 	"keywords": [
@@ -50,7 +50,7 @@
 	"dependencies": {
 		"@effect/platform-node": "4.0.0-beta.101",
 		"@effected/yaml": "^0.6.0",
-		"@rsbuild/core": "^2.1.6",
+		"@rsbuild/core": "^2.1.8",
 		"effect": "4.0.0-beta.101",
 		"jiti": "^2.7.0",
 		"picocolors": "^1.1.1"

package/services/build-live.js

@@ -3,8 +3,8 @@ import { BuildService } from "./build.js";
 import { ConfigService } from "./config.js";
 import { buildNativeDynamicImportRules } from "./native-dynamic-imports.js";
 import { Effect, Layer, Result } from "effect";
-import { existsSync, mkdirSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
+import { existsSync, mkdirSync, readFileSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { basename, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { createRsbuild } from "@rsbuild/core";
 
@@ -99,6 +99,36 @@ function writeFile(path, content) {
 	});
 }
 /**
+* Fold an extracted `*.LICENSE.txt` sidecar back into its bundle.
+*
+* `legalComments: "linked"` is the only mode whose extraction actually sees
+* bundled license banners — the "inline" mode's SWC comment-preservation path
+* never receives them and silently drops attribution (verified against
+* rsbuild 2.1.8). A committed action still must not carry sidecar files
+* (issue #94), so the sidecar's verbatim comment blocks replace the
+* `LICENSE:` reference banner in the bundle and the sidecar is deleted —
+* attribution inline, no extra dist file.
+*/
+function inlineLicenseSidecar(outputPath) {
+	return Effect.try({
+		try: () => {
+			const sidecarPath = `${outputPath}.LICENSE.txt`;
+			if (!existsSync(sidecarPath)) return;
+			const licenses = readFileSync(sidecarPath, "utf8").trim();
+			const bundle = readFileSync(outputPath, "utf8");
+			const reference = `/*! LICENSE: ${basename(sidecarPath)} */`;
+			const afterReference = bundle.startsWith(reference) && bundle.charAt(reference.length) === "\n" ? reference.length + 1 : bundle.startsWith(reference) ? reference.length : 0;
+			writeFileSync(outputPath, `${licenses}\n${bundle.slice(afterReference)}`, "utf8");
+			unlinkSync(sidecarPath);
+		},
+		/* v8 ignore next 5 - error branch requires fs permission failures */
+		catch: (error) => new WriteError({
+			path: outputPath,
+			cause: error
+		})
+	});
+}
+/**
 * Bundle a single entry with rsbuild.
 */
 /* v8 ignore start - bundling requires actual rsbuild execution */
@@ -118,6 +148,7 @@ function bundleEntry(entry, config, cwd) {
 		}
 		const rsbuild = yield* Effect.tryPromise({
 			try: () => createRsbuild({ rsbuildConfig: {
+				mode: "production",
 				source: { entry: { [entry.type]: entry.path } },
 				resolve: { alias: ignoreAlias },
 				output: {
@@ -133,7 +164,7 @@ function bundleEntry(entry, config, cwd) {
 						return false;
 					},
 					cleanDistPath: false,
-					legalComments: "inline",
+					legalComments: "linked",
 					minify: config.build.minify,
 					sourceMap: config.build.sourceMap ? { js: "source-map" } : false
 				},
@@ -171,6 +202,7 @@ function bundleEntry(entry, config, cwd) {
 			})
 		});
 		const outputPath = resolve(outputDir, `${entry.type}.js`);
+		yield* inlineLicenseSidecar(outputPath);
 		const size = yield* Effect.try({
 			try: () => statSync(outputPath).size,
 			catch: (error) => new BundleFailed({

package/tsconfig/action.json

@@ -1,4 +1,5 @@
 {
+	"//": "types and lib REPLACE the base list rather than merging with it. If you override either, re-list every entry you still need, including node.",
 	"compilerOptions": {
 		"allowJs": true,
 		"esModuleInterop": true,