gowalk-cicd 1.0.24 → 1.0.25

package/action/.daemux-version

@@ -1 +1 @@
-1.0.24
+1.0.25

package/action/scripts/pbxproj_editor.py

@@ -101,8 +101,22 @@ def _entitlements_from_configs(
     resolve exactly, and then only accepted when the resulting file is really
     there — a missed entitlements file costs a clearer error, a wrong one costs
     a wrong App ID edit.
+
+    Only the ARCHIVE configuration counts: CI archives Release, so its
+    CODE_SIGN_ENTITLEMENTS (falling back to Profile, then to every config
+    only when neither exists) decides provisioning. An entitlement wired
+    into Debug alone — the standard way to simulator-test an Apple-granted
+    capability (CarPlay) before the grant lands — must NOT force that
+    capability onto the App ID for the archive.
     """
-    for cid in config_ids:
+    by_name = {
+        ((objects.get(cid) or {}).get("name") or "").lower(): cid
+        for cid in config_ids
+    }
+    archive_cid = by_name.get("release") or by_name.get("profile")
+    candidates = [archive_cid] if archive_cid else config_ids
+
+    for cid in candidates:
         cfg = objects.get(cid) or {}
         settings = cfg.get("buildSettings") or {}
         value = (settings.get("CODE_SIGN_ENTITLEMENTS") or "").strip().strip('"')

package/action/scripts/test_pbxproj_editor.py

@@ -76,5 +76,78 @@ class EntitlementsFromConfigsTest(unittest.TestCase):
             _entitlements_from_configs({"cfg": {"buildSettings": {}}}, ["cfg"]), "")
 
 
+
+
+class ReleaseConfigPriorityTest(unittest.TestCase):
+    """Release must drive provisioning: an entitlement wired into Debug only
+    (the pre-grant CarPlay simulator-testing setup) must not require the
+    capability on the App ID for the Release archive."""
+
+    def _objects(self):
+        return {
+            "dbg": {
+                "name": "Debug",
+                "buildSettings": {"CODE_SIGN_ENTITLEMENTS": "App/Debug.entitlements"},
+            },
+            "rel": {"name": "Release", "buildSettings": {}},
+            "prof": {"name": "Profile", "buildSettings": {}},
+        }
+
+    def test_debug_only_entitlements_are_invisible_when_release_has_none(self):
+        # The pre-grant CarPlay setup: entitlements wired into Debug for the
+        # simulator, Release deliberately unwired so the archive needs no
+        # Apple-granted capability. The archive config decides — result "".
+        objects = self._objects()
+        self.assertEqual(
+            _entitlements_from_configs(
+                objects, ["dbg", "rel", "prof"], target_name="App",
+                base=Path("/nonexistent")),
+            "",
+        )
+
+    def test_all_configs_scanned_when_no_release_or_profile_exists(self):
+        objects = {
+            "a": {"name": "Staging", "buildSettings": {}},
+            "b": {
+                "name": "Custom",
+                "buildSettings": {"CODE_SIGN_ENTITLEMENTS": "App/App.entitlements"},
+            },
+        }
+        self.assertEqual(
+            _entitlements_from_configs(
+                objects, ["a", "b"], target_name="App", base=Path("/nonexistent")),
+            "App/App.entitlements",
+        )
+
+    def test_release_wins_over_debug_regardless_of_order(self):
+        objects = self._objects()
+        objects["rel"]["buildSettings"]["CODE_SIGN_ENTITLEMENTS"] = (
+            "App/Release.entitlements")
+        for order in (["dbg", "rel", "prof"], ["rel", "dbg", "prof"]):
+            self.assertEqual(
+                _entitlements_from_configs(
+                    objects, order, target_name="App", base=Path("/nonexistent")),
+                "App/Release.entitlements",
+            )
+
+    def test_profile_is_the_archive_config_when_release_does_not_exist(self):
+        objects = {
+            "dbg": {
+                "name": "Debug",
+                "buildSettings": {"CODE_SIGN_ENTITLEMENTS": "App/Debug.entitlements"},
+            },
+            "prof": {
+                "name": "Profile",
+                "buildSettings": {"CODE_SIGN_ENTITLEMENTS": "App/Profile.entitlements"},
+            },
+        }
+        self.assertEqual(
+            _entitlements_from_configs(
+                objects, ["dbg", "prof"], target_name="App",
+                base=Path("/nonexistent")),
+            "App/Profile.entitlements",
+        )
+
+
 if __name__ == "__main__":
     unittest.main()

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.24
+1.0.25

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.24
+1.0.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.24",
+  "version": "1.0.25",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {