deeplink-parity 0.4.0 → 0.5.0

package/README.md

@@ -97,6 +97,35 @@ npx deeplink-parity . --sha256 "AB:CD:…"               # include the fingerpri
 The Android signing fingerprint comes from Play Console → App integrity → App signing.
 Without it the fingerprint check is skipped and reported as such.
 
+### GitHub Action
+
+```yaml
+- uses: camosss/deeplink-parity@v1
+  with:
+    paths: ios android          # one per checkout; omit for a single repo
+    sha256: ${{ secrets.ANDROID_SHA256 }}
+```
+
+Findings appear as annotations on the run, and counts are available to later steps:
+
+```yaml
+- uses: camosss/deeplink-parity@v1
+  id: links
+  with:
+    fail-on: never              # report without blocking while a backlog is cleared
+- run: echo "${{ steps.links.outputs.errors }} errors, ${{ steps.links.outputs.warnings }} warnings"
+```
+
+| Input | Default | |
+|---|---|---|
+| `paths` | `.` | Checkout paths, whitespace separated |
+| `sha256` | — | Android signing fingerprint |
+| `well-known` | — | Read from disk instead of the network |
+| `fail-on` | `error` | `never` to report without failing the step |
+| `version` | pinned | npm version to run |
+
+Outputs: `errors`, `warnings`, `notices`, `domains`, `report` (path to the JSON result).
+
 ### In CI
 
 | Exit code | Meaning |

package/dist/cli.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { writeFile } from 'node:fs/promises';
 import { resolve } from 'node:path';
 import { localSource, networkSource } from './fetch/wellKnown.js';
 import { exitCodeFor, printReport } from './report/console.js';
@@ -18,7 +19,8 @@ Usage
 Options
   --sha256 <fingerprint>   Android signing fingerprint to look for in assetlinks.json
   --well-known <dir>       Read well-known files from <dir>/<domain>/ instead of the network
-  --json                   Machine-readable output
+  --json                   Machine-readable output on stdout
+  --output <file>          Also write the JSON result to a file
   --format github          GitHub Actions annotations (auto-detected on Actions)
   -h, --help               Show this message
 `;
@@ -29,6 +31,7 @@ function parseArgs(argv) {
     let help = false;
     let sha256;
     let wellKnown;
+    let output;
     // Actions sets GITHUB_ACTIONS=true; annotate by default there
     let format = process.env.GITHUB_ACTIONS === 'true' ? 'github' : 'console';
     for (let i = 0; i < args.length; i++) {
@@ -43,6 +46,8 @@ function parseArgs(argv) {
             wellKnown = args[++i];
         else if (arg === '--format')
             format = args[++i];
+        else if (arg === '--output')
+            output = args[++i];
         else if (!arg.startsWith('-'))
             roots.push(arg);
     }
@@ -53,10 +58,11 @@ function parseArgs(argv) {
         sha256,
         wellKnown,
         format,
+        output,
     };
 }
 async function main() {
-    const { roots, json, help, sha256, wellKnown, format } = parseArgs(process.argv);
+    const { roots, json, help, sha256, wellKnown, format, output } = parseArgs(process.argv);
     if (help) {
         console.log(USAGE);
         return;
@@ -78,27 +84,36 @@ async function main() {
         console.error('Expected a .entitlements file with applinks:, or an AndroidManifest.xml with intent-filters.');
         process.exit(2);
     }
+    const payload = {
+        ios: result.iosApps.map((a) => ({
+            entitlements: a.entitlementsPath,
+            teamId: a.teamId,
+            bundleId: a.bundleId,
+            domains: a.domains,
+        })),
+        android: result.androidApps.map((a) => ({
+            manifest: a.manifestPath,
+            packageIds: a.packageIds,
+            hosts: a.hosts.map((h) => h.host),
+        })),
+        summary: {
+            domains: result.domains.length,
+            error: result.findings.filter((f) => f.severity === 'error').length,
+            warn: result.findings.filter((f) => f.severity === 'warn').length,
+            info: result.findings.filter((f) => f.severity === 'info').length,
+        },
+        findings: result.findings,
+    };
+    // A file keeps stdout free, so annotations and the readable report can coexist with
+    // machine-readable output in the same run.
+    if (output)
+        await writeFile(output, `${JSON.stringify(payload, null, 2)}\n`);
     if (json) {
-        console.log(JSON.stringify({
-            ios: result.iosApps.map((a) => ({
-                entitlements: a.entitlementsPath,
-                teamId: a.teamId,
-                bundleId: a.bundleId,
-                domains: a.domains,
-            })),
-            android: result.androidApps.map((a) => ({
-                manifest: a.manifestPath,
-                packageIds: a.packageIds,
-                hosts: a.hosts.map((h) => h.host),
-            })),
-            findings: result.findings,
-        }, null, 2));
-    }
-    else if (format === 'github') {
-        printGithubAnnotations(result.findings);
-        printReport(result.findings, result.domains);
+        console.log(JSON.stringify(payload, null, 2));
     }
     else {
+        if (format === 'github')
+            printGithubAnnotations(result.findings);
         printReport(result.findings, result.domains);
     }
     process.exit(exitCodeFor(result.findings));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deeplink-parity",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Checks that what your mobile app declares about deep links matches what is actually hosted — across iOS and Android.",
   "type": "module",
   "bin": {