gowalk-cicd 1.0.122 → 1.0.123

package/action/.daemux-version

@@ -1 +1 @@
-1.0.122
+1.0.123

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.122
+1.0.123

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.122
+1.0.123

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.122",
+  "version": "1.0.123",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/src/install.mjs

@@ -127,6 +127,70 @@ function copyAction(source, destination, repoRoot, dryRun) {
   return { dest, existed, fileCount };
 }
 
+// A workflow overwrite is wholesale: the template replaces the consumer's file.
+// Anything that repo had tuned for itself is gone, and until now silently — the
+// only thing standing between an app and a broken deploy was somebody reading
+// the diff. obd-scanner adopted twice in one morning and both times the
+// template's `runtime-env: ${{ secrets.BACKEND_RUNTIME_ENV }}` replaced an
+// inline runtime env for a secret that repo does not define; adopting it as
+// written would have deployed an empty environment (2026-09-09).
+//
+// So say what changed. This is a receipt, not a merge: the template still wins,
+// and the adopting session is told exactly which of its own bindings to put
+// back. Workflows are committed files, so nothing here is secret material —
+// values are truncated only to keep the report readable.
+const BINDING = /^\s*([A-Za-z0-9_.-]+):\s*(\S.*?)\s*$/;
+const REPORT_LIMIT = 20;
+
+function bindings(text) {
+  // Every distinct `key: value` pair, not one per key. Keys like
+  // `timeout-minutes` appear many times across jobs and an app tunes a
+  // particular one; keying by name alone reported the first occurrence and
+  // silently missed exactly the binding that had been changed.
+  const found = new Map();
+  for (const line of String(text).split('\n')) {
+    const match = BINDING.exec(line);
+    if (!match) continue;
+    const [, key, value] = match;
+    if (!found.has(key)) found.set(key, new Set());
+    found.get(key).add(value);
+  }
+  return found;
+}
+
+function short(value) {
+  const text = String(value).replace(/\s+/g, ' ').trim();
+  return text.length > 80 ? text.slice(0, 77) + '...' : text;
+}
+
+export function changedBindings(before, after) {
+  const old = bindings(before), fresh = bindings(after);
+  const changes = [];
+  for (const [key, values] of old) {
+    const now = fresh.get(key);
+    for (const value of values) {
+      if (now && now.has(value)) continue;          // this exact pair survived
+      changes.push({ key, before: value, after: now ? [...now].join(' | ') : null });
+    }
+  }
+  return changes;
+}
+
+function reportOverwrite(relative, before, after) {
+  const changes = changedBindings(before, after);
+  if (!changes.length) return changes;
+  console.log(`  ${relative}: ${changes.length} binding(s) this repo had set were replaced by the template.`);
+  console.log('  Restore the ones this app owns before committing:');
+  for (const change of changes.slice(0, REPORT_LIMIT)) {
+    console.log(`    ${change.key}: ${short(change.before)}`
+      + (change.after === null ? '  ->  (removed)' : `  ->  ${short(change.after)}`));
+  }
+  if (changes.length > REPORT_LIMIT) {
+    console.log(`    ...and ${changes.length - REPORT_LIMIT} more; read the full diff.`);
+  }
+  return changes;
+}
+
 function copyWorkflow(repoRoot, dryRun) {
   const dest = join(repoRoot, WORKFLOW_DEST_REL);
   const existed = existsSync(dest);
@@ -135,8 +199,10 @@ function copyWorkflow(repoRoot, dryRun) {
     return { dest, existed };
   }
   ensureDir(dirname(dest));
+  const previous = existed ? readFileSync(dest, 'utf8') : '';
   cpSync(WORKFLOW_TEMPLATE, dest, { force: true });
   console.log(`  ${existed ? 'Overwrote' : 'Created'} ${WORKFLOW_DEST_REL}`);
+  if (existed) reportOverwrite(WORKFLOW_DEST_REL, previous, readFileSync(dest, 'utf8'));
   return { dest, existed };
 }
 
@@ -148,8 +214,10 @@ function copyBackendWorkflow(repoRoot, dryRun) {
     return;
   }
   ensureDir(dirname(dest));
+  const previous = existed ? readFileSync(dest, 'utf8') : '';
   cpSync(BACKEND_WORKFLOW_TEMPLATE, dest, { force: true });
   console.log(`  ${existed ? 'Overwrote' : 'Created'} ${BACKEND_WORKFLOW_DEST_REL}`);
+  if (existed) reportOverwrite(BACKEND_WORKFLOW_DEST_REL, previous, readFileSync(dest, 'utf8'));
 }
 
 function writeVersionMarkers(repoRoot, dryRun) {
@@ -244,8 +312,12 @@ export async function runInstall({ dryRun = false } = {}) {
       console.log(`  [dry-run] ${webWorkflowExisted ? 'overwrite' : 'create'} ${WEB_WORKFLOW_DEST_REL}`);
     } else {
       ensureDir(dirname(webWorkflowDest));
+      const webWorkflowPrevious = webWorkflowExisted ? readFileSync(webWorkflowDest, 'utf8') : '';
       cpSync(WEB_WORKFLOW_TEMPLATE, webWorkflowDest, { force: true });
       console.log(`  ${webWorkflowExisted ? 'Overwrote' : 'Created'} ${WEB_WORKFLOW_DEST_REL}`);
+      if (webWorkflowExisted) {
+        reportOverwrite(WEB_WORKFLOW_DEST_REL, webWorkflowPrevious, readFileSync(webWorkflowDest, 'utf8'));
+      }
     }
   }