Agent-first release automation CLI for mobile, web, and custom deployments
Project description
CDT 
CDT is an agent-first release automation CLI built around project-local YAML pipelines, safe preflight checks, and reusable steps for mobile, web, and custom deployments. Direct human operation remains a first-class workflow.
CDT includes built-in steps for Flutter, native iOS/Xcode, Android, web, Firebase/AppTester, TestFlight, Python hooks, and custom steps via its SDK.
Installation
CDT is published as the cdt-release Python distribution and installs the cdt command. pipx is the recommended installation method:
pipx install cdt-release
A specific GitHub release can also be installed directly:
pipx install "git+https://github.com/Sergionius/cdt.git@v0.4.0"
Upgrade or reinstall:
cdt self-update --check
cdt self-update --manager pipx
cdt self-update --dry-run # preview the release tag and command without running it
Or manually:
pipx uninstall cdt-release
pipx install cdt-release
For local development:
git clone https://github.com/Sergionius/cdt.git
cd cdt
python -m pip install -e '.[dev]'
# or reinstall the local checkout as a pipx CLI:
scripts/reinstall.sh
pip install cdt-release also works, but pipx keeps the CLI isolated from project Python environments.
The distribution is named cdt-release because the cdt project name on PyPI belongs to another project. The installed command remains cdt.
Upgrading from CDT 0.3.x
CDT 0.3.x installed from GitHub used the distribution name cdt. Migrate the pipx environment once:
pipx uninstall cdt
pipx install cdt-release
Project configuration does not require migration: cdt.yaml version 1 remains supported, and pipeline risk defaults to standard when omitted. Existing pipeline-named agent-release status files remain readable for compatibility; new runs use .cdt/runs/<run-id>/.
Commands
cdt --version
cdt init
cdt run <pipeline>
cdt run <pipeline> --dry-run
cdt history
cdt status <run-id>
cdt logs <run-id>
cdt pipeline list
cdt pipeline inspect <pipeline> --json
cdt pipeline plan <pipeline> --json
cdt pipeline validate [pipeline]
cdt pipeline steps
cdt schema --output cdt.schema.json
cdt doctor
cdt self-update --check
cdt self-update --manager pipx
cdt self-update --json --check
Static planning commands (cdt pipeline plan <pipeline> and cdt run <pipeline> --dry-run) show the step tree, risk, warnings, and artifact flow without executing steps.
Every real run is recorded under .cdt/runs/<run-id>/ with an atomic status file, manifest, exit code, and log location. Human operators can continue to use cdt run test directly; run IDs are only needed for later inspection with cdt history, cdt status, or cdt logs. See Run records for lifecycle, concurrency, retention, and recovery.
Resume status migration note: current CDT status files store stable step ids (0, 1, 1/0, 1/0/1) instead of step names. Older name-based status files are rejected because duplicate names such as anonymous parallel groups are ambiguous. Recreate the status file by rerunning without --skip-completed, or use cdt pipeline inspect <pipeline> / cdt pipeline plan <pipeline> to map completed work to step ids manually.
cdt self-update updates the installed CLI to the latest GitHub release. It supports --manager pipx, --manager pip, and --manager uv; editable/local installs should be updated manually. Use cdt self-update --check to check without changing files, --json for machine-readable output, and --dry-run to see the release tag and update command without running it. The command requires outbound HTTPS access to api.github.com.
For a quick first run, use cdt init in a Flutter project and see Getting started in 5 minutes. cdt init creates a reviewable test pipeline; it never adds uploads, credentials, or production steps automatically.
Minimal cdt.yaml
version: 1
pipelines:
prod:
risk: production
steps:
- flutter.increment_build_number
- flutter.pub_get
- parallel:
steps:
- sequence:
steps:
- ios.flutter_build_ipa:
profile: prod
flavor: prod
artifact: ios_ipa
- appstore.upload_testflight:
artifact: ios_ipa
changelog: prod build
- sequence:
steps:
- android.build_aab:
profile: prod
flavor: prod
artifact: android_aab
- android.build_apk:
profile: prod
flavor: prod
artifact: android_apk
- notify.prod_user_agent
- notify.success
See examples/cdt.yaml and docs/pipelines.md for a fuller prod pipeline, plugins, artifacts, and hooks.
Release notes
See CHANGELOG.md for release notes.
Releasing
After updating versions and the changelog, push a v* tag (for example v0.4.0). GitHub Actions runs lint, tests, build, and twine check, publishes cdt-release to PyPI through trusted publishing, creates a GitHub Release, and attaches the wheel and source archive from dist/. Use python scripts/release.py <version> to prepare the release commit and annotated tag locally. Use python scripts/release.py <version> --push only after explicit confirmation to rebase, push the commit, and push the tag.
Agent-friendly automation
CDT is agent-first, not agent-only. Humans keep the direct cdt run <pipeline> workflow, while automation clients can use JSON planning and detached execution without parsing full build logs.
CDT ships an Agent Skill at skills/cdt-release/SKILL.md. It makes agents inspect cdt.yaml, avoid production pipelines without exact confirmation, use isolated run IDs, wait on compact status JSON, and return concise structured summaries.
Repository-level guidance lives in AGENTS.md; hard release safety rules live in .agents/rules/cdt-release.md. Agent Skills compatible clients can copy or link skills/cdt-release/ according to their installation mechanism. See docs/ai-agents.md for setup and the stable automation contract.
Built-in steps
Use cdt pipeline steps for the complete list. Common built-ins:
flutter.increment_build_numberflutter.pub_getios.flutter_build_ipaandroid.build_aabandroid.build_apkappstore.upload_testflightartifact.copy_to_downloadshook.python_scriptnotify.prod_user_agentnotify.success
Build steps use profile for CDT presets (profile: prod adds --dart-define=ENV=prod). Flutter flavor is separate. Build steps do not run flutter pub get or increment versions implicitly.
Python hooks
- hook.python_script:
script: cdt/hooks/fetch_offline_data.py
env:
OFFLINE_API_URL: ${OFFLINE_API_URL}
outputs:
- assets/offline_data.json
Hooks run from the project root as python3 <script> and must stay inside the project root.
Contributing and security
See CONTRIBUTING.md for development checks and pull request guidance. Report vulnerabilities privately as described in SECURITY.md. CDT is available under the MIT License.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file cdt_release-0.4.0.tar.gz.
File metadata
- Download URL: cdt_release-0.4.0.tar.gz
- Upload date:
- Size: 144.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
37a003710550c06085ac7437a2d2cf8448d0bf096ca49ec8b7d6ff9fe961fc6f
|
|
| MD5 |
a130d97bc4758fcff478033139740bf4
|
|
| BLAKE2b-256 |
ec1c2c63f886b62009608192fdf28d13d3bb15d156b2d8717999f10023e8bb07
|
Provenance
The following attestation bundles were made for cdt_release-0.4.0.tar.gz:
Publisher:
release.yml on Sergionius/cdt
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
cdt_release-0.4.0.tar.gz -
Subject digest:
37a003710550c06085ac7437a2d2cf8448d0bf096ca49ec8b7d6ff9fe961fc6f - Sigstore transparency entry: 2212430676
- Sigstore integration time:
-
Permalink:
Sergionius/cdt@d747f5c9b2c7af59c6ca6a33112c5c3925cc84c7 -
Branch / Tag:
refs/tags/v0.4.0 - Owner: https://github.com/Sergionius
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@d747f5c9b2c7af59c6ca6a33112c5c3925cc84c7 -
Trigger Event:
push
-
Statement type:
File details
Details for the file cdt_release-0.4.0-py3-none-any.whl.
File metadata
- Download URL: cdt_release-0.4.0-py3-none-any.whl
- Upload date:
- Size: 80.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
80f5911ed40a34831d560e4aa131de69b3852e5b6d7ae4f9892edb8f4fd63325
|
|
| MD5 |
55d5c7056287a0847d0413161614b8bc
|
|
| BLAKE2b-256 |
fec0b47fa6cca565f26ac26b4b65c42aa7e8a13c1dd998d57a8f325ecebbbbec
|
Provenance
The following attestation bundles were made for cdt_release-0.4.0-py3-none-any.whl:
Publisher:
release.yml on Sergionius/cdt
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
cdt_release-0.4.0-py3-none-any.whl -
Subject digest:
80f5911ed40a34831d560e4aa131de69b3852e5b6d7ae4f9892edb8f4fd63325 - Sigstore transparency entry: 2212430699
- Sigstore integration time:
-
Permalink:
Sergionius/cdt@d747f5c9b2c7af59c6ca6a33112c5c3925cc84c7 -
Branch / Tag:
refs/tags/v0.4.0 - Owner: https://github.com/Sergionius
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@d747f5c9b2c7af59c6ca6a33112c5c3925cc84c7 -
Trigger Event:
push
-
Statement type: