@cloudcommerce/cli 0.0.51 → 0.0.52

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
-@cloudcommerce/cli:build: cache hit, replaying output 2cc60bd241fc5476
+@cloudcommerce/cli:build: cache hit, replaying output 9d994ce12db97548
 @cloudcommerce/cli:build: 
-@cloudcommerce/cli:build: > @cloudcommerce/cli@0.0.50 build /home/leo/code/ecomplus/cloud-commerce/packages/cli
+@cloudcommerce/cli:build: > @cloudcommerce/cli@0.0.51 build /home/leo/code/ecomplus/cloud-commerce/packages/cli
 @cloudcommerce/cli:build: > sh ../../scripts/build-lib.sh
 @cloudcommerce/cli:build: 

package/config/firebase.json

@@ -36,7 +36,22 @@
       "firebase.json",
       "**/.*",
       "**/node_modules/**"
-    ]
+    ],
+    "rewrites": [
+      {
+        "source": "/api/modules/**",
+        "function": "modules"
+      },
+      {
+        "source": "/api/passport/**",
+        "function": "passport"
+      },
+      {
+        "source": "**/!(*(*.)js|*(*.)css|*(*.)ico|*(*.)png|*(*.)gif|*(*.)jpg|*(*.)jpeg|*(*.)webp|*(*.)avif|*(*.)svg|*(*.)woff|*(*.)woff2|*(*.)otf|*(*.)ttf|*(*.)eot)",
+        "function": "ssr"
+      }
+    ],
+    "cleanUrls": true
   },
   "storage": {
     "rules": "storage.rules"

package/lib/config-gcloud.js

@@ -1,22 +1,27 @@
 import path from 'path';
-import { $, echo, fs } from 'zx';
+import { $, fs } from 'zx';
 
 const serviceAccountId = 'cloud-commerce-gh-actions';
-const serviceAccountEmail = (projectId) => {
+const getAccountEmail = (projectId) => {
   return `${serviceAccountId}@${projectId}.iam.gserviceaccount.com`;
 };
 const checkServiceAccountExists = async (projectId) => {
+  let hasServiceAccount;
   try {
-    return $`gcloud iam service-accounts describe ${serviceAccountEmail(projectId)}`;
+    const { stderr } = await $`gcloud iam service-accounts describe ${getAccountEmail(projectId)}`;
+    hasServiceAccount = !/not_?found/i.test(stderr);
   } catch (e) {
     return null;
   }
+  return hasServiceAccount;
 };
 const siginGcloudAndSetIAM = async (projectId, pwd) => {
-  await $`gcloud auth login`;
-  await $`gcloud config set project ${projectId} `;
+  if (/no credential/i.test((await $`gcloud auth list`).stderr)) {
+    await $`gcloud auth login`;
+  }
+  await $`gcloud config set project ${projectId}`;
   const roles = [
-    'roles/cloudconfig.admin',
+    'roles/firebase.admin',
     'roles/appengine.appAdmin',
     'roles/appengine.appCreator',
     'roles/artifactregistry.admin',
@@ -29,17 +34,18 @@ const siginGcloudAndSetIAM = async (projectId, pwd) => {
   const serviceAccount = await checkServiceAccountExists(projectId);
   if (!serviceAccount) {
     await $`gcloud iam service-accounts create ${serviceAccountId} \
-        --description="A service account with permission to deploy Cloud Commerce from the GitHub repository to Firebase" \
-        --display-name="Cloud Commerce GH Actions"`;
+      --description="A service account with permission to deploy Cloud Commerce from the GitHub repository to Firebase" \
+      --display-name="Cloud Commerce GH Actions"`;
   }
-  const pathPolicyIAM = path.join(pwd, 'policyIAM.json');
+  await fs.ensureDir(path.join(pwd, '.cloudcommerce'));
+  const pathPolicyIAM = path.join(pwd, '.cloudcommerce', 'policyIAM.json');
   await $`gcloud projects get-iam-policy ${projectId} --format json > ${pathPolicyIAM}`;
   const policyIAM = fs.readJSONSync(pathPolicyIAM);
   const { bindings } = policyIAM;
-  let updatePolicy = false;
+  let mustUpdatePolicy = false;
   roles.forEach((role) => {
     const roleFound = bindings.find((binding) => binding.role === role);
-    const memberServiceAccount = `serviceAccount:${serviceAccountEmail(projectId)}`;
+    const memberServiceAccount = `serviceAccount:${getAccountEmail(projectId)}`;
     if (!roleFound) {
       const newBinding = {
         members: [
@@ -48,26 +54,26 @@ const siginGcloudAndSetIAM = async (projectId, pwd) => {
         role,
       };
       bindings.push(newBinding);
-      updatePolicy = true;
+      mustUpdatePolicy = true;
     } else {
       const serviceAccountHavePermission = roleFound.members.find((account) => account === memberServiceAccount);
       if (!serviceAccountHavePermission) {
         roleFound.members.push(memberServiceAccount);
-        updatePolicy = true;
+        mustUpdatePolicy = true;
       }
     }
   });
-  if (updatePolicy) {
+  if (mustUpdatePolicy) {
     fs.writeJSONSync(pathPolicyIAM, policyIAM);
     return $`gcloud projects set-iam-policy ${projectId} ${pathPolicyIAM}`;
   }
-  return echo``;
+  return null;
 };
 const createKeyServiceAccount = async (projectId, pwd) => {
   try {
-    const pathFileKey = path.join(pwd, 'serviceAccountKey.json');
+    const pathFileKey = path.join(pwd, '.cloudcommerce', 'serviceAccountKey.json');
     await $`gcloud iam service-accounts keys create ${pathFileKey} \
-      --iam-account=${serviceAccountEmail(projectId)}`;
+      --iam-account=${getAccountEmail(projectId)}`;
     return JSON.stringify(fs.readJSONSync(pathFileKey));
   } catch (e) {
     return null;

package/lib/index.js

@@ -29,7 +29,7 @@ if (projectId) {
       const firebaserc = fs.readJSONSync(path.join(pwd, '.firebaserc'));
       projectId = firebaserc.projects.default;
     } catch (e) {
-      projectId = 'ecom2-hello';
+      projectId = 'ecom2-001';
     }
   }
 }
@@ -37,7 +37,7 @@ if (projectId) {
 export default async () => {
   await fs.copy(path.join(__dirname, '..', 'config'), pwd);
   const options = Object.keys(argv).reduce((opts, key) => {
-    if (key !== '_' && key !== 'deploy' && key !== 'commit') {
+    if (key !== '_' && argv[key] !== false) {
       // eslint-disable-next-line no-param-reassign
       opts += ` --${key} ${argv[key]}`;
     }
@@ -99,11 +99,13 @@ ECOM_STORE_ID=${storeId}
       }
     }
     let serviceAccountJSON = null;
-    try {
-      await siginGcloudAndSetIAM(projectId, pwd);
-      serviceAccountJSON = await createKeyServiceAccount(projectId, pwd);
-    } catch (e) {
-      //
+    if (argv.gcloud !== false) {
+      try {
+        await siginGcloudAndSetIAM(projectId, pwd);
+        serviceAccountJSON = await createKeyServiceAccount(projectId, pwd);
+      } catch (e) {
+        //
+      }
     }
     return echo`
     ****

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cloudcommerce/cli",
   "type": "module",
-  "version": "0.0.51",
+  "version": "0.0.52",
   "description": "E-Com Plus Cloud Commerce CLI tools",
   "bin": {
     "cloudcommerce": "./bin/run.mjs"
@@ -23,7 +23,7 @@
   },
   "homepage": "https://github.com/ecomplus/cloud-commerce/tree/main/packages/cli#readme",
   "dependencies": {
-    "@cloudcommerce/api": "0.0.51",
+    "@cloudcommerce/api": "0.0.52",
     "md5": "^2.3.0",
     "zx": "^7.0.8"
   },

package/src/config-gcloud.ts

@@ -1,27 +1,29 @@
 import path from 'path';
-import { $, echo, fs } from 'zx';
+import { $, fs } from 'zx';
 
 const serviceAccountId = 'cloud-commerce-gh-actions';
-const serviceAccountEmail = (projectId: string) => {
+const getAccountEmail = (projectId: string) => {
   return `${serviceAccountId}@${projectId}.iam.gserviceaccount.com`;
 };
 
 const checkServiceAccountExists = async (projectId: string) => {
+  let hasServiceAccount: boolean;
   try {
-    return $`gcloud iam service-accounts describe ${serviceAccountEmail(projectId)}`;
+    const { stderr } = await $`gcloud iam service-accounts describe ${getAccountEmail(projectId)}`;
+    hasServiceAccount = !/not_?found/i.test(stderr);
   } catch (e) {
     return null;
   }
+  return hasServiceAccount;
 };
 
-const siginGcloudAndSetIAM = async (
-  projectId: string,
-  pwd: string,
-) => {
-  await $`gcloud auth login`;
-  await $`gcloud config set project ${projectId} `;
+const siginGcloudAndSetIAM = async (projectId: string, pwd: string) => {
+  if (/no credential/i.test((await $`gcloud auth list`).stderr)) {
+    await $`gcloud auth login`;
+  }
+  await $`gcloud config set project ${projectId}`;
   const roles = [
-    'roles/cloudconfig.admin',
+    'roles/firebase.admin',
     'roles/appengine.appAdmin',
     'roles/appengine.appCreator',
     'roles/artifactregistry.admin',
@@ -34,20 +36,21 @@ const siginGcloudAndSetIAM = async (
   const serviceAccount = await checkServiceAccountExists(projectId);
   if (!serviceAccount) {
     await $`gcloud iam service-accounts create ${serviceAccountId} \
-        --description="A service account with permission to deploy Cloud Commerce from the GitHub repository to Firebase" \
-        --display-name="Cloud Commerce GH Actions"`;
+      --description="A service account with permission to deploy Cloud Commerce from the GitHub repository to Firebase" \
+      --display-name="Cloud Commerce GH Actions"`;
   }
-  const pathPolicyIAM = path.join(pwd, 'policyIAM.json');
+  await fs.ensureDir(path.join(pwd, '.cloudcommerce'));
+  const pathPolicyIAM = path.join(pwd, '.cloudcommerce', 'policyIAM.json');
   await $`gcloud projects get-iam-policy ${projectId} --format json > ${pathPolicyIAM}`;
   const policyIAM = fs.readJSONSync(pathPolicyIAM);
   const { bindings } = policyIAM;
-  let updatePolicy = false;
 
+  let mustUpdatePolicy = false;
   roles.forEach((role) => {
     const roleFound = bindings.find(
       (binding: { [key: string]: string | string[] }) => binding.role === role,
     );
-    const memberServiceAccount = `serviceAccount:${serviceAccountEmail(projectId)}`;
+    const memberServiceAccount = `serviceAccount:${getAccountEmail(projectId)}`;
     if (!roleFound) {
       const newBinding = {
         members: [
@@ -56,29 +59,29 @@ const siginGcloudAndSetIAM = async (
         role,
       };
       bindings.push(newBinding);
-      updatePolicy = true;
+      mustUpdatePolicy = true;
     } else {
       const serviceAccountHavePermission = roleFound.members.find(
         (account: string) => account === memberServiceAccount,
       );
       if (!serviceAccountHavePermission) {
         roleFound.members.push(memberServiceAccount);
-        updatePolicy = true;
+        mustUpdatePolicy = true;
       }
     }
   });
-  if (updatePolicy) {
+  if (mustUpdatePolicy) {
     fs.writeJSONSync(pathPolicyIAM, policyIAM);
     return $`gcloud projects set-iam-policy ${projectId} ${pathPolicyIAM}`;
   }
-  return echo``;
+  return null;
 };
 
 const createKeyServiceAccount = async (projectId: string, pwd: string) => {
   try {
-    const pathFileKey = path.join(pwd, 'serviceAccountKey.json');
+    const pathFileKey = path.join(pwd, '.cloudcommerce', 'serviceAccountKey.json');
     await $`gcloud iam service-accounts keys create ${pathFileKey} \
-      --iam-account=${serviceAccountEmail(projectId)}`;
+      --iam-account=${getAccountEmail(projectId)}`;
     return JSON.stringify(fs.readJSONSync(pathFileKey));
   } catch (e) {
     return null;

package/src/index.ts

@@ -41,7 +41,7 @@ if (projectId) {
       const firebaserc = fs.readJSONSync(path.join(pwd, '.firebaserc'));
       projectId = firebaserc.projects.default;
     } catch (e) {
-      projectId = 'ecom2-hello';
+      projectId = 'ecom2-001';
     }
   }
 }
@@ -50,7 +50,7 @@ export default async () => {
   await fs.copy(path.join(__dirname, '..', 'config'), pwd);
 
   const options = Object.keys(argv).reduce((opts, key) => {
-    if (key !== '_' && key !== 'deploy' && key !== 'commit') {
+    if (key !== '_' && argv[key] !== false) {
       // eslint-disable-next-line no-param-reassign
       opts += ` --${key} ${argv[key]}`;
     }
@@ -121,11 +121,13 @@ ECOM_STORE_ID=${storeId}
       }
     }
     let serviceAccountJSON : string | null = null;
-    try {
-      await siginGcloudAndSetIAM(projectId as string, pwd);
-      serviceAccountJSON = await createKeyServiceAccount(projectId as string, pwd);
-    } catch (e) {
-      //
+    if (argv.gcloud !== false) {
+      try {
+        await siginGcloudAndSetIAM(projectId as string, pwd);
+        serviceAccountJSON = await createKeyServiceAccount(projectId as string, pwd);
+      } catch (e) {
+        //
+      }
     }
 
     return echo`