@smoothbricks/cli 0.10.10 → 0.10.11

package/dist/monorepo/ci-workflow.js

@@ -252,7 +252,6 @@ function renderE2eDeploymentJob(options) {
     if (!options.e2eDeployment)
         return '';
     return `
-
   e2e-deployment:
     name: Deployment E2E
     needs: main

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smoothbricks/cli",
-  "version": "0.10.10",
+  "version": "0.10.11",
   "type": "module",
   "description": "SmoothBricks monorepo automation CLI",
   "bin": {

package/src/monorepo/__tests__/ci-workflow.test.ts

@@ -67,17 +67,10 @@ describe('CI workflow definition', () => {
 
     expect(rendered).toContain('CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}');
     expect(rendered).toContain('CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}');
-    for (const appSecret of [
-      'GITHUB_CLIENT_SECRET',
-      'GITHUB_APP_PRIVATE_KEY',
-      'GITHUB_APP_PRIVATE_KEY_PEM',
-      'OAUTH_STATE_SIGNING_KEY',
-      'MAIL_CAPTURE_CONTROL_TOKEN',
-      'TOKEN_ENCRYPTION_KEY',
-      'E2E_CONTROL_TOKEN',
-    ]) {
-      expect(rendered).not.toContain(appSecret);
-    }
+    expect(rendered.match(/^\s+[A-Z][A-Z0-9_]+: \${{ secrets\.[A-Z][A-Z0-9_]+ }}$/gm)).toEqual([
+      '          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}',
+      '          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}',
+    ]);
   });
 
   it('renders deployment E2E as a dependent job with an independent stage input', () => {
@@ -93,7 +86,6 @@ describe('CI workflow definition', () => {
       'smoo github-ci nx-smart --target e2e-deployment --mode run-many --stage "${{ needs.main.outputs.deployment-stage }}" --name "Deployment E2E" --step 4',
     );
     expect(rendered.match(/name: Deployment E2E/g)).toHaveLength(2);
-    expect(rendered).not.toContain('E2E_CONTROL_TOKEN');
   });
 
   it('omits optional browser and deployment-E2E lanes when disabled', () => {

package/src/monorepo/ci-workflow.ts

@@ -294,7 +294,6 @@ function renderYamlList(values: string[], spaces: number): string {
 function renderE2eDeploymentJob(options: CiWorkflowDefinitionOptions): string {
   if (!options.e2eDeployment) return '';
   return `
-
   e2e-deployment:
     name: Deployment E2E
     needs: main

package/src/monorepo/wrangler.test.ts

@@ -89,11 +89,11 @@ describe('applyWranglerDefaults', () => {
   it('preserves a human-authored .dev.vars.example and does not log a creation', async () => {
     const root = await createWorkspace([{ dir: 'api', name: '@acme/api', toml: 'name = "svc"\n' }]);
     const examplePath = join(root, 'packages/api/.dev.vars.example');
-    await writeFile(examplePath, 'GITHUB_CLIENT_SECRET=\n');
+    await writeFile(examplePath, 'EXISTING_SECRET=\n');
     const logs = captureConsoleLogs();
     try {
       applyWranglerDefaults(root);
-      expect(await readFile(examplePath, 'utf8')).toBe('GITHUB_CLIENT_SECRET=\n');
+      expect(await readFile(examplePath, 'utf8')).toBe('EXISTING_SECRET=\n');
       expect(logs.some((line) => line.startsWith('created') && line.includes('.dev.vars.example'))).toBe(false);
     } finally {
       console.log = originalConsoleLog;

package/src/wrangler/deploy-stage.test.ts

@@ -186,7 +186,7 @@ describe('deploy-stage remote version fallback', () => {
 
   it('uploads a missing tag with a temporary config and secure secrets file, then removes both', async () => {
     const root = await fixtureRoot();
-    await writeFile(join(root, '.dev.vars.example'), 'OAUTH_STATE_SIGNING_KEY=""\nTOKEN_ENCRYPTION_KEY=""\n');
+    await writeFile(join(root, '.dev.vars.example'), 'FIXTURE_SECRET=""\nFIXTURE_TOKEN=""\n');
     const runner = new FakeRunner([], { versions: [{ version_id: 'version-2', percentage: 100 }] });
 
     const result = await deployStage(root, 'pr123', {
@@ -196,8 +196,8 @@ describe('deploy-stage remote version fallback', () => {
         CLOUDFLARE_API_TOKEN: 'token',
         NX_TASK_HASH: HASH,
         NX_TASK_TARGET_PROJECT: 'fixture',
-        OAUTH_STATE_SIGNING_KEY: 'shared-secret',
-        TOKEN_ENCRYPTION_KEY: 'encryption-secret',
+        FIXTURE_SECRET: 'shared-secret',
+        FIXTURE_TOKEN: 'encryption-secret',
       },
     });
 
@@ -207,8 +207,8 @@ describe('deploy-stage remote version fallback', () => {
     expect(runner.calls.at(-1)).toContain(`nx-${HASH}`);
     expect(runner.secretsMode).toBe(0o600);
     expect(JSON.parse(requiredTestValue(runner.secretsJson, 'secrets JSON'))).toEqual({
-      OAUTH_STATE_SIGNING_KEY: 'shared-secret',
-      TOKEN_ENCRYPTION_KEY: 'encryption-secret',
+      FIXTURE_SECRET: 'shared-secret',
+      FIXTURE_TOKEN: 'encryption-secret',
     });
     expect(existsSync(requiredTestValue(runner.configPathSeen, 'config path'))).toBe(false);
     expect(existsSync(requiredTestValue(runner.secretsPathSeen, 'secrets path'))).toBe(false);
@@ -216,7 +216,7 @@ describe('deploy-stage remote version fallback', () => {
 
   it('passes only present manifest values for fixed stages and preserves absent remote secrets', async () => {
     const root = await fixtureRoot();
-    await writeFile(join(root, '.dev.vars.example'), 'OAUTH_STATE_SIGNING_KEY=""\nTOKEN_ENCRYPTION_KEY=""\n');
+    await writeFile(join(root, '.dev.vars.example'), 'FIXTURE_SECRET=""\nFIXTURE_TOKEN=""\n');
     const runner = new FakeRunner([], {});
     const cloudflare = new FakeCloudflare();
 
@@ -226,20 +226,20 @@ describe('deploy-stage remote version fallback', () => {
       processEnv: {
         CLOUDFLARE_ACCOUNT_ID: 'account-1',
         CLOUDFLARE_API_TOKEN: 'token',
-        OAUTH_STATE_SIGNING_KEY: 'shared-secret',
+        FIXTURE_SECRET: 'shared-secret',
       },
     });
 
     expect(result.action).toBe('deployed');
     expect(JSON.parse(requiredTestValue(runner.secretsJson, 'secrets JSON'))).toEqual({
-      OAUTH_STATE_SIGNING_KEY: 'shared-secret',
+      FIXTURE_SECRET: 'shared-secret',
     });
     expect(existsSync(requiredTestValue(runner.secretsPathSeen, 'secrets path'))).toBe(false);
   });
 
   it('rejects a first PR Worker with missing manifest secrets before mutating Cloudflare', async () => {
     const root = await fixtureRoot();
-    await writeFile(join(root, '.dev.vars.example'), 'OAUTH_STATE_SIGNING_KEY=""\n');
+    await writeFile(join(root, '.dev.vars.example'), 'FIXTURE_SECRET=""\n');
     const cloudflare = new FakeCloudflare();
     cloudflare.scripts = [];
 
@@ -253,7 +253,7 @@ describe('deploy-stage remote version fallback', () => {
           NX_TASK_TARGET_PROJECT: 'fixture',
         },
       }),
-    ).rejects.toThrow(/OAUTH_STATE_SIGNING_KEY/);
+    ).rejects.toThrow(/FIXTURE_SECRET/);
     expect(cloudflare.mutations).toEqual([]);
   });