@crossdelta/platform-sdk 0.19.11 → 0.19.12

package/bin/templates/workspace/infra/package.json.hbs

@@ -7,8 +7,8 @@
     "pulumi": "pulumi"
   },
   "dependencies": {
-    "@crossdelta/cloudevents": "^0.7.7",
-    "@crossdelta/infrastructure": "^0.7.5",
+    "@crossdelta/cloudevents": "^0.7.10",
+    "@crossdelta/infrastructure": "^0.7.6",
     "{{scope}}/contracts": "workspace:*",
     "@pulumi/digitalocean": "^4.55.0",
     "@pulumi/kubernetes": "^4.21.0",

package/bin/templates/workspace/packages/contracts/package.json.hbs

@@ -19,8 +19,8 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@crossdelta/cloudevents": "^0.7.7",
-    "@crossdelta/infrastructure": "^0.7.5",
+    "@crossdelta/cloudevents": "^0.7.10",
+    "@crossdelta/infrastructure": "^0.7.6",
     "zod": "^4.0.0"
   },
   "devDependencies": {

package/bin/templates/workspace/turbo.json

@@ -18,8 +18,7 @@
       "outputs": ["dist/**", "bin/**", ".next/**", ".qwik/**"]
     },
     "test": {
-      "dependsOn": ["^build"],
-      "cache": false
+      "dependsOn": ["^build"]
     },
     "format": {
       "cache": false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossdelta/platform-sdk",
-  "version": "0.19.11",
+  "version": "0.19.12",
   "description": "Platform toolkit for event-driven microservices — keeping code and infrastructure in lockstep.",
   "keywords": [
     "cli",
@@ -118,7 +118,7 @@
     "@ai-sdk/anthropic": "^2.0.53",
     "@ai-sdk/openai": "^2.0.79",
     "@angular-devkit/core": "^21.0.0",
-    "@crossdelta/flowcore": "0.1.2",
+    "@crossdelta/flowcore": "workspace:*",
     "@faker-js/faker": "^9.8.0",
     "@inquirer/prompts": "^7.5.0",
     "@listr2/prompt-adapter-enquirer": "^2.0.15",
@@ -143,8 +143,8 @@
     "zod": "^4.0.0"
   },
   "peerDependencies": {
-    "@crossdelta/cloudevents": "0.7.7",
-    "@crossdelta/infrastructure": "0.7.5",
+    "@crossdelta/cloudevents": "workspace:*",
+    "@crossdelta/infrastructure": "workspace:*",
     "@nestjs/schematics": "^11.0.5",
     "turbo": "^2.0.0"
   },

package/bin/chunk-634PL24Z.mjs

@@ -1,20 +0,0 @@
-#!/usr/bin/env node
-var tt=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(r,e)=>(typeof require<"u"?require:r)[e]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});import{existsSync as C,readdirSync as Tt,readFileSync as q,writeFileSync as St}from"fs";import{join as p,resolve as At}from"path";var Mt=process.env.npm_package_version||"0.0.0",_=["bun.lock","bun.lockb","package-lock.json","yarn.lock","pnpm-lock.yaml"],Ht="start:dev";import w from"chalk";function qt(t,r){if(t.length===0)return"No entries to display.";let e=r?.title||"Benchmark Results",n=r?.footer||"",o=r?.maxBarWidth||50,s=r?.unit||"",i=Math.max(...t.map(c=>c.value)),a=[];a.push(""),a.push(e),a.push("");for(let c of t){let g=rt(c.barColor??r?.barColor),u=et(c,i,o,g,s,r?.labelColor);a.push(u)}return n&&(a.push(""),a.push(n)),a.join(`
-`)}function rt(t){return t?w[t]("\u2587"):"\u2587"}function et(t,r,e,n,o,s){let i=Math.round(t.value/r*e),a=t.barColor?w[t.barColor](n.repeat(i)):n.repeat(i),c=t.color??s;return`${w.bold(c?w[c](t.label.padEnd(12)):t.label.padEnd(12))} ${a} ${t.value.toLocaleString()}${o?` ${o}`:""}`}import G from"chalk";import{Command as dt}from"commander";import{Listr as U}from"listr2";var d={SUCCESS:0,GENERAL_ERROR:1,USAGE_ERROR:2,WORKSPACE_ERROR:64,VALIDATION_ERROR:65,CONFIG_ERROR:66,IO_ERROR:74,PERMISSION_ERROR:77,CANCELLED:130};var m=class extends Error{exitCode;category;hint;cause;constructor(r,e=d.GENERAL_ERROR,n={}){super(r),this.name="CliError",this.exitCode=e,this.category=n.category??"process",this.hint=n.hint,this.cause=n.cause}toUserMessage(){let r=[this.message];return this.hint&&r.push(`
-Hint: ${this.hint}`),r.join("")}};var f=class extends m{path;constructor(r,e,n={}){super(r,d.IO_ERROR,{...n,category:"io"}),this.name="IoError",this.path=e}},y=class extends m{constructor(r="Operation cancelled",e={}){super(r,d.CANCELLED,{...e,category:"user"}),this.name="CancelledError"}};import h from"chalk";var nt=t=>t instanceof Error,nr=t=>nt(t)?t.message:typeof t=="string"?t:String(t),W=["ExitPromptError"],I=["Cancelled prompt","User force closed"],ot=["ERR_USE_AFTER_CLOSE"],st=t=>W.some(r=>t.name?.includes(r))||I.some(r=>t.message?.includes(r)),$=t=>{if(t instanceof y)return!0;if(!(t instanceof Error))return!1;if(W.some(e=>t.name?.includes(e))||I.some(e=>t.message?.includes(e)))return!0;let r=t.code;return r&&ot.includes(r)?st(t):!1},it=t=>{if(t instanceof m){let e=t.toUserMessage();return h.red(`\u2716 ${e||"Unexpected error (re-run with DEBUG=true for details)"}`)}if(t instanceof Error){let e=t.message?.trim();return e?h.red(`\u2716 ${e}`):h.red("\u2716 Unexpected error (re-run with DEBUG=true for details)")}let r=String(t);return!r||r==="undefined"||r==="null"?h.red("\u2716 Unexpected error (re-run with DEBUG=true for details)"):h.red(`\u2716 ${r}`)},at=t=>t instanceof m?t.exitCode:$(t)?d.CANCELLED:d.GENERAL_ERROR,J=(t,r={})=>{let{debug:e=process.env.DEBUG==="true",exit:n=!0,logger:o=console.error}=r;if($(t)){n&&process.exit(d.CANCELLED);return}o(it(t)),e&&t instanceof Error&&t.stack&&o(h.dim(t.stack)),t instanceof m&&t.hint&&o(h.dim(`
-Hint: ${t.hint}`)),n&&process.exit(at(t))};import{existsSync as S,unlinkSync as ct,writeFileSync as pt}from"fs";import{join as T}from"path";import L from"chokidar";var lt=".pf-generating",P=t=>T(t,lt),gt=t=>S(P(t)),D=t=>{pt(P(t),"","utf-8")},A=t=>{let r=P(t);S(r)&&ct(r)},ut=t=>{let e=R(t)?.pf?.paths;return e?Object.values(e).filter(n=>typeof n=="object"&&n!==null&&n.watch===!0&&typeof n.path=="string"):[{path:"services"},{path:"apps"}]},mr=(t,r)=>{A(t);let e=ut(t),n=P(t),s=j(async()=>{gt(t)||await r()},300),i=[];i.push(L.watch(n,{ignoreInitial:!0}).on("unlink",()=>r()));for(let a of e){let c=T(t,a.path);if(!S(c))continue;let g=a.ignorePatterns?.map(u=>T(c,u));i.push(L.watch(c,{ignoreInitial:!0,depth:0,ignored:g,usePolling:!0,interval:1e3}).on("addDir",u=>u!==c&&s()).on("unlinkDir",u=>u!==c&&s())),i.push(L.watch(`${c}/*/package.json`,{ignoreInitial:!0,ignored:g}).on("add",s).on("change",s))}return async()=>{await Promise.all(i.map(a=>a.close()))}};var yr=t=>{let r=new dt(t.name).description(t.description).showHelpAfterError();t.arguments?.forEach(([o,s])=>{r.argument(o,s)}),t.options?.forEach(([o,s])=>{r.option(o,s)}),t.exampleUsage&&r.addHelpText("after",()=>`${G.cyan.bold(`
-Example:`)}
-${G.bold(t.exampleUsage)}
-`),t.additionalInfo&&r.addHelpText("after",()=>(typeof t.additionalInfo=="function"?t.additionalInfo():t.additionalInfo)??"");let e=async o=>{t.prompts?.length&&await new U(B(t.prompts,o),{rendererOptions:{lazy:!0,showErrorMessage:!1}}).run(o),await new U(B(t.actions,o),{rendererOptions:{lazy:!1,showErrorMessage:!1}}).run(o),await t.onComplete?.(o)},n=()=>{try{let o=k();return D(o),o}catch{return null}};return r.action(async(...o)=>{let s=null;try{let i=o.at(-1),a=i.args,c=i.opts(),g=mt(t.arguments??[],a);if(t.shouldSkipWorkflow?.(g,c)){await t.onSkipWorkflow?.(g,c);return}let u=await t.buildContext(g,c);s=n(),await e(u)}catch(i){J(i,{exit:!1})}finally{s&&A(s)}}),r},mt=(t,r)=>{let e=t.map(([n],o)=>[n.replace(/[<>[\]]/g,""),r[o]]);return Object.fromEntries(e)},B=(t,r)=>t.map(e=>typeof e=="function"?e(r):e);var j=(t,r)=>{let e=null;return(...n)=>(e&&clearTimeout(e),new Promise(o=>{e=setTimeout(async()=>{e=null,await t(...n),o()},r)}))};import{execaSync as ft}from"execa";function kt(t){try{return ft(t,["--version"]),!0}catch{return!1}}import{readdirSync as ht}from"fs";import{dirname as V,isAbsolute as xt,join as Et,normalize as Ct,resolve as M,sep as wt}from"path";import{fileURLToPath as yt}from"url";import{packageUpSync as Pt}from"package-up";import{rimraf as Rt}from"rimraf";var vt=()=>typeof import.meta?.url=="string"?yt(import.meta.url):process.cwd(),$r=t=>{let r=K()?k():process.cwd();return Et(r,t)},Jr=(t,r)=>{if(!t||!t.trim())throw new f("Path cannot be empty",t,{hint:"Provide a valid relative path"});if(xt(t))throw new f(`Absolute paths are not allowed: ${t}`,t,{hint:"Use a relative path within the target directory"});if(/^[a-zA-Z]:/.test(t))throw new f(`Windows drive paths are not allowed: ${t}`,t,{hint:"Use a relative path within the target directory"});if(t.replace(/\\/g,"/").split("/").some(a=>a===".."))throw new f(`Path traversal not allowed: ${t}`,t,{hint:"The path must stay within the target directory"});let o=Ct(t),s=M(r),i=M(r,o);if(!i.startsWith(s+wt)&&i!==s)throw new f(`Path escapes target directory: ${t}`,t,{hint:"The path must stay within the target directory"});return i},Dr=t=>{try{return ht(t).length===0}catch{return!0}};function H(){let t=Pt({cwd:V(vt())});if(!t)throw new Error("Could not find package.json");return V(t)}var jr=t=>Rt(t);import x from"chalk";var z={debug:0,info:1,warn:2,error:3,silent:4},bt=t=>t==="debug"||t==="info"||t==="warn"||t==="error"||t==="silent",Ot=()=>{let t=process.env.LOG_LEVEL;return bt(t)?t:process.env.DEBUG==="true"||process.env.VERBOSE==="true"?"debug":"info"},v=t=>{let r=Ot();return z[t]>=z[r]};var l={logs:[],breakLine:()=>(console.log(),l),success:(t,...r)=>(console.log(x.green(`\u2714 ${t}`),...r),l),info:(t,...r)=>(v("info")&&console.log(x.cyan(`\u{1F6C8} ${t}`),...r),l),warn:(t,...r)=>(v("warn")&&console.warn(x.yellow(`\u26A0\uFE0E ${t}`),...r),l),error:(t,...r)=>(v("error")&&console.error(x.red(`\u2716 ${t}`),...r),l),debug:(t,...r)=>(v("debug")&&console.log(x.dim(`[debug] ${t}`),...r),l),log:(t,...r)=>(console.log(t,...r),l.logs.push({message:t,context:r.join()}),l),getStoredLogs:t=>t?l.logs.filter(r=>r.context?.includes(t)):l.logs,storeLog:(t,r)=>l.logs.push({message:t,context:r})};import Lt from"chalk";async function Hr(t,r){let e=Date.now(),n=t.title,o=()=>Math.floor((Date.now()-e)/1e3),s=setInterval(()=>{o()>1&&(t.title=`${n} (${o()}s)`)},1e3);try{return await r(o)}finally{clearInterval(s)}}async function Kr(t,r,e){for(let n=0;n<r.length;n++){let o=r[n];t.output=Lt.dim(`[${n+1}/${r.length}] ${o.title}`),await o.fn(e??{},t)}}var F=t=>JSON.parse(q(t,"utf-8")),Nt=F,Ft=(t,r,e)=>St(t,`${JSON.stringify(r,null,2)}
-`,"utf-8"),_t=["@crossdelta/cloudevents"],E={services:"services",apps:"apps",packages:"packages",contracts:"packages/contracts"},Wt={docs:{base:["service.md"],frameworks:{}},serviceTypes:{hono:{commandType:"hono-micro",entryPoint:"src/index.ts",skipFiles:[]},nest:{commandType:"nest-micro",entryPoint:"src/main.ts",skipFiles:[]}}},O=t=>{if(!C(t))return null;try{return JSON.parse(q(t,"utf-8"))}catch{return null}},b=(t,r)=>typeof t=="string"?t:typeof t=="object"&&t!==null&&"path"in t?t.path:r,It=t=>t.split("/").pop()||"workspace",$t=t=>{let r=t.slice(0,t.lastIndexOf("/"));return r===t?null:r},Y=t=>t.split("."),Jt=(t,r)=>{if(!t.workspaces)return!1;if(t.pf||C(p(r,"turbo.json")))return!0;let e=_.some(o=>C(p(r,o))),n=C(p(r,"infra"));return e&&n},Dt=t=>{let r=O(p(t,"package.json"));return r?Jt(r,t):!1},Z=t=>{let r=t;for(;r;){if(Dt(r))return r;r=$t(r)}return null},K=()=>Z(process.cwd())!==null,k=()=>{let t=Z(process.cwd());if(!t)throw new Error(`
-\x1B[31m\u2716\x1B[0m Not in a workspace directory
-
-Current directory: ${process.cwd()}
-
-This command must be run from within a workspace created with \x1B[36mpf new workspace\x1B[0m
-
-To create a new workspace, run:
-
-  \x1B[36mpf new workspace my-platform\x1B[0m
-`);return t},R=t=>{let r=t??k();return O(p(r,"package.json"))},Q=t=>{let r=R(t);if(!r?.pf?.paths)return E;let{paths:e}=r.pf;return{services:b(e.services,E.services),apps:b(e.apps,E.apps),packages:b(e.packages,E.packages),contracts:b(e.contracts,E.contracts)}},le=t=>{let r=R(t);return{plugins:r?.pf?.plugins??_t,dev:{filter:r?.pf?.dev?.filter??[]}}},ge=t=>{let r=t??k(),e=Q(r),n=p(r,e.contracts),s=O(p(n,"package.json"))?.name??`${jt()}/contracts`;return{packagePath:n,eventsPath:p(n,"src","events"),indexPath:p(n,"src","index.ts"),relativePath:e.contracts,packageName:s}},jt=()=>{let t=k(),r=O(p(t,"package.json")),e=`@${It(t)}`;return r?.name?r.name.startsWith("@")?r.name.split("/")[0]:`@${r.name}`:e},Gt=(t,r)=>{let e=Y(r),n=t;for(let o of e){if(n===null||typeof n!="object"||!(o in n))return;n=n[o]}return n},Ut=(t,r,e)=>{let n=Y(r),o=n[n.length-1],s=t;for(let i of n.slice(0,-1))(!(i in s)||typeof s[i]!="object"||s[i]===null)&&(s[i]={}),s=s[i];s[o]=e},ue=(t,r=process.cwd())=>{let e=F(p(r,"package.json"));return Gt(e,t)},de=(t,r,e=process.cwd())=>{let n=p(e,"package.json"),o=F(n);Ut(o,t,r),Ft(n,o,{spaces:2,EOL:`
-`,encoding:"utf-8"})},Bt=t=>{let r=H();return Nt(At(r,t))},N=null,X=()=>(N||(N=Bt("package.json")),N),me=new Proxy({},{get:(t,r)=>X()[r]}),fe=()=>X().generatorConfig??Wt,ke=t=>{let r=t??k(),e=Q(r),n=p(r,e.services);if(!C(n))return[];try{return Tt(n,{withFileTypes:!0}).filter(s=>s.isDirectory()&&!s.name.startsWith(".")).map(s=>`${e.services}/${s.name}`).sort()}catch{return[]}};export{tt as a,d as b,nt as c,nr as d,$ as e,J as f,Ht as g,qt as h,lt as i,mr as j,yr as k,j as l,kt as m,$r as n,Jr as o,Dr as p,jr as q,l as r,Hr as s,Kr as t,K as u,k as v,R as w,Q as x,le as y,ge as z,jt as A,ue as B,de as C,Bt as D,X as E,me as F,fe as G,ke as H};

package/bin/config-CKQHYOF4.mjs

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{A as g,B as h,C as i,D as j,E as k,F as l,G as m,H as n,u as a,v as b,w as c,x as d,y as e,z as f}from"./chunk-634PL24Z.mjs";export{n as discoverAvailableServices,b as findWorkspaceRoot,f as getContractsConfig,m as getGeneratorConfig,h as getPackageJsonField,e as getPfConfig,k as getPkgJson,g as getRootPackageScope,c as getWorkspacePackageJson,d as getWorkspacePathsConfig,a as isInWorkspace,l as pkgJson,j as readPackageConfig,i as updatePackageJsonField};

package/bin/templates/workspace/.github/README.md

@@ -1,70 +0,0 @@
-# CI/CD Workflows
-
-This project includes GitHub Actions workflows for continuous integration and deployment.
-
-## Workflows
-
-### Pull Request Checks (`lint-and-tests.yml`)
-
-Runs on every pull request to `main`:
-- Lints the codebase (`bun lint`)
-- Runs tests (`bun test`)
-- Uses dependency caching for faster builds
-
-### Build and Deploy (`build-and-deploy.yml`)
-
-Runs on pushes to `main` and after package publishing:
-- Builds Docker images for changed scopes (apps/services)
-- Pushes images to GitHub Container Registry (GHCR)
-- Deploys infrastructure using Pulumi
-
-## Required Secrets
-
-Configure these secrets in your GitHub repository settings:
-
-| Secret | Description |
-|--------|-------------|
-| `PULUMI_ACCESS_TOKEN` | Pulumi Cloud access token for infrastructure deployment |
-| `DIGITALOCEAN_TOKEN` | DigitalOcean API token for DOKS/spaces access |
-
-## Required Variables
-
-Configure these variables in your GitHub repository settings:
-
-| Variable | Description | Example |
-|----------|-------------|---------|
-| `PULUMI_STACK_BASE` | Base name for Pulumi stacks | `myorg/myproject` |
-
-## Automatic Permissions
-
-These are handled automatically via `permissions` in workflows:
-- `GITHUB_TOKEN` - GitHub-provided token for GHCR push and API access
-
-## Custom Actions
-
-The workflows use these local actions:
-
-| Action | Purpose |
-|--------|---------|
-| `setup-bun-install` | Setup Bun runtime with caching |
-| `generate-scope-matrix` | Discover Docker-enabled scopes for matrix builds |
-| `check-image-tag-exists` | Skip builds if image tag already exists in GHCR |
-| `check-path-changes` | Detect file changes for conditional steps |
-| `prepare-build-context` | Flatten turbo prune output for Docker builds |
-| `resolve-scope-tags` | Map scope names to image tags for deployment |
-| `detect-skipped-services` | Find services marked with `skip: true` in infra config |
-
-## Infrastructure Configuration
-
-Each service in `infra/services/*.ts` can be configured with:
-
-```typescript
-const config: K8sServiceConfig = {
-  name: 'my-service',
-  containerPort: 4001,
-  skip: false, // Set to true to skip deployment
-  // ... other config
-}
-```
-
-Services with `skip: true` will be excluded from deployment.

package/bin/templates/workspace/.github/actions/check-image-tag-exists/action.yml

@@ -1,27 +0,0 @@
-name: Check image tag exists
-inputs:
-  scope-short-name:
-    description: Short directory name of the scope (e.g., storefront)
-    required: true
-  image-tag:
-    description: Checksum-based image tag to look for
-    required: true
-  github-token:
-    description: GitHub token with read:packages to query GHCR
-    required: true
-  repository-owner:
-    description: GitHub organization or user that owns the container package
-    required: false
-  repository-prefix:
-    description: Prefix used for GHCR packages (defaults to $GHCR_REPOSITORY_PREFIX or "platform")
-    required: false
-  max-pages:
-    description: Maximum number of pagination pages to inspect (100 tags each)
-    required: false
-    default: '5'
-outputs:
-  exists:
-    description: 'true if the tag already exists in GHCR'
-runs:
-  using: node20
-  main: index.js

package/bin/templates/workspace/.github/actions/check-image-tag-exists/index.js

@@ -1,179 +0,0 @@
-/**
- * Check Image Tag Exists Action
- *
- * Checks if a specific Docker image tag already exists in GitHub Container Registry (GHCR).
- * Used to skip redundant builds when the image checksum hasn't changed.
- *
- * @example
- * - uses: ./.github/actions/check-image-tag-exists
- *   with:
- *     scope-short-name: storefront
- *     image-tag: abc123def456
- *     github-token: ${{ secrets.GITHUB_TOKEN }}
- *
- * @outputs exists - 'true' if the tag exists, 'false' otherwise
- */
-
-const { appendFileSync } = require('node:fs')
-const { exit } = require('node:process')
-
-/**
- * Builds environment variable keys for GitHub Actions inputs.
- * @param {string} name - Input name (e.g., 'scope-short-name')
- * @returns {string[]} Possible environment variable keys
- */
-const buildInputKeys = (name) => {
-  const trimmed = name.trim()
-  const upper = trimmed.toUpperCase()
-  const normalized = upper.replace(/[^A-Z0-9]+/g, '_')
-  return Array.from(new Set([`INPUT_${upper}`, `INPUT_${normalized}`]))
-}
-
-/**
- * Retrieves a GitHub Actions input value from environment variables.
- * @param {string} name - Input name as defined in action.yml
- * @param {Object} options - Options
- * @param {boolean} [options.required=false] - Whether the input is required
- * @param {string} [options.defaultValue=''] - Default value if input is not set
- * @returns {string} The input value
- */
-const getInput = (name, { required = false, defaultValue = '' } = {}) => {
-  const keys = buildInputKeys(name)
-  const raw = keys.map((key) => process.env[key]).find((value) => typeof value === 'string')
-  const value = (typeof raw === 'string' ? raw : defaultValue).trim()
-
-  if (required && !value) {
-    console.error(`Input "${name}" is required`)
-    exit(1)
-  }
-
-  return value
-}
-
-/**
- * Sets a GitHub Actions output value.
- * @param {string} name - Output name
- * @param {string} value - Output value
- */
-const setOutput = (name, value) => {
-  const outputFile = process.env.GITHUB_OUTPUT
-  if (outputFile) {
-    appendFileSync(outputFile, `${name}=${value}\n`)
-  } else {
-    console.log(`${name}=${value}`)
-  }
-}
-
-// Required inputs
-const scopeShortName = getInput('scope-short-name', { required: true })
-const imageTag = getInput('image-tag', { required: true })
-const githubToken = getInput('github-token', { required: true })
-
-// Optional inputs - defaults from environment for portability
-const repositoryOwner = getInput('repository-owner', { defaultValue: process.env.GITHUB_REPOSITORY_OWNER })
-const repositoryPrefixInput = getInput('repository-prefix')
-const repositoryPrefix =
-  repositoryPrefixInput || process.env.GHCR_REPOSITORY_PREFIX || process.env.GITHUB_REPOSITORY?.split('/')[1] || 'platform'
-const maxPages = Number(getInput('max-pages', { defaultValue: '5' }))
-
-// GitHub API request headers
-const headers = {
-  Authorization: `Bearer ${githubToken}`,
-  Accept: 'application/vnd.github+json',
-  'X-GitHub-Api-Version': '2022-11-28',
-}
-
-// Construct the full package name (e.g., 'platform/storefront')
-const packageName = `${repositoryPrefix}/${scopeShortName}`
-const encodedPackage = encodeURIComponent(packageName)
-
-/**
- * Fetches a page of container versions from the GitHub Packages API.
- * @param {number} page - Page number (1-indexed)
- * @returns {Promise<Object>} Result with versions array, hasMore flag, and notFound flag
- */
-const fetchVersions = async (page) => {
-  const url = `https://api.github.com/orgs/${repositoryOwner}/packages/container/${encodedPackage}/versions?per_page=100&page=${page}`
-  const response = await fetch(url, { headers })
-
-  // 404 means the package doesn't exist yet (first build)
-  if (response.status === 404) {
-    return { notFound: true, versions: [], hasMore: false }
-  }
-
-  if (!response.ok) {
-    const body = await response.text()
-    throw new Error(`GitHub API error (${response.status}): ${body}`)
-  }
-
-  const data = await response.json()
-  const versions = Array.isArray(data) ? data : []
-  return {
-    versions,
-    hasMore: versions.length === 100, // Full page means there might be more
-    notFound: false,
-  }
-}
-
-/**
- * Checks if the target tag exists in a list of container versions.
- * @param {Object[]} versions - Array of version objects from GitHub API
- * @param {string} targetTag - The tag to search for
- * @returns {boolean} True if tag is found
- */
-const tagExistsInVersions = (versions, targetTag) => {
-  for (const version of versions) {
-    const tags = version?.metadata?.container?.tags
-    if (!Array.isArray(tags)) continue
-    if (tags.includes(targetTag)) {
-      return true
-    }
-  }
-  return false
-}
-
-/**
- * Checks if the image tag exists in GHCR by paginating through all versions.
- * @returns {Promise<boolean>} True if tag exists
- */
-const check = async () => {
-  const targetTag = imageTag.trim()
-
-  // Paginate through versions until we find the tag or run out of pages
-  for (let page = 1; page <= maxPages; page += 1) {
-    const { versions, hasMore, notFound } = await fetchVersions(page)
-
-    // Package doesn't exist yet - tag definitely doesn't exist
-    if (notFound) {
-      return false
-    }
-
-    // Check if target tag is in this page
-    if (tagExistsInVersions(versions, targetTag)) {
-      return true
-    }
-
-    // No more pages to check
-    if (!hasMore) {
-      break
-    }
-  }
-
-  return false
-}
-
-/**
- * Main entry point - runs the check and outputs the result.
- */
-const run = async () => {
-  try {
-    const exists = await check()
-    setOutput('exists', String(exists))
-  } catch (error) {
-    console.error('Failed to check image tag existence:', error)
-    setOutput('exists', 'false')
-    exit(1)
-  }
-}
-
-run()

package/bin/templates/workspace/.github/actions/check-path-changes/action.yml

@@ -1,21 +0,0 @@
-name: Detect path changes
-description: Reports whether the specified paths changed between two git references.
-
-inputs:
-  paths:
-    description: Newline or comma-delimited list of paths to check.
-    required: true
-  base-ref:
-    description: Base git ref/sha to diff from. Falls back to GITHUB_EVENT_BEFORE or parent commit.
-    default: ''
-  head-ref:
-    description: Head git ref/sha to diff against. Falls back to GITHUB_SHA.
-    default: ''
-
-outputs:
-  changed:
-    description: 'true' if any of the provided paths changed.
-
-runs:
-  using: node20
-  main: index.js

package/bin/templates/workspace/.github/actions/check-path-changes/index.js

@@ -1,192 +0,0 @@
-/**
- * Check Path Changes Action
- *
- * Detects whether specified paths have changed between two git references.
- * Useful for conditional workflow steps based on file changes.
- *
- * @example
- * - uses: ./.github/actions/check-path-changes
- *   with:
- *     paths: infra,packages/cloudevents
- *     base-ref: main
- *
- * @outputs changed - 'true' if any of the provided paths changed
- */
-
-const { appendFileSync } = require('node:fs')
-const { spawnSync } = require('node:child_process')
-
-/**
- * Builds environment variable keys for GitHub Actions inputs.
- * @param {string} name - Input name
- * @returns {string[]} Possible environment variable keys
- */
-const buildInputKeys = (name) => {
-  const trimmed = name.trim()
-  const upper = trimmed.toUpperCase()
-  const normalized = upper.replace(/[^A-Z0-9]+/g, '_')
-  return Array.from(new Set([`INPUT_${upper}`, `INPUT_${normalized}`]))
-}
-
-/**
- * Retrieves a GitHub Actions input value from environment variables.
- * @param {string} name - Input name
- * @param {Object} options - Options
- * @param {boolean} [options.required=false] - Whether the input is required
- * @param {string} [options.defaultValue=''] - Default value if not set
- * @returns {string} The input value
- */
-const getInput = (name, { required = false, defaultValue = '' } = {}) => {
-  const keys = buildInputKeys(name)
-  const raw = keys.map((key) => process.env[key]).find((value) => typeof value === 'string')
-  const value = typeof raw === 'string' ? raw.trim() : defaultValue
-
-  if (required && !value) {
-    console.error(`Input "${name}" is required`)
-    process.exit(1)
-  }
-
-  return value
-}
-
-/**
- * Sets a GitHub Actions output value.
- * @param {string} name - Output name
- * @param {string|object} value - Output value
- */
-const setOutput = (name, value) => {
-  const outputFile = process.env.GITHUB_OUTPUT
-  const stringValue = typeof value === 'string' ? value : JSON.stringify(value)
-  if (outputFile) {
-    appendFileSync(outputFile, `${name}=${stringValue}\n`)
-  } else {
-    console.log(`${name}=${stringValue}`)
-  }
-}
-
-/**
- * Parses a comma/newline-separated list of paths.
- * @param {string} value - Input string
- * @returns {string[]} Array of paths
- */
-const parseList = (value) => {
-  if (!value) return []
-  return value
-    .split(/[^a-zA-Z0-9._\-\/]+/)
-    .map((entry) => entry.trim())
-    .filter(Boolean)
-}
-
-/**
- * Runs a git command and returns stdout.
- * @param {string[]} args - Git command arguments
- * @returns {string} Command output
- */
-const runGit = (args) => {
-  const result = spawnSync('git', args, { encoding: 'utf8' })
-  if (result.error) {
-    throw result.error
-  }
-  if (result.status !== 0) {
-    throw new Error(`git ${args.join(' ')} failed: ${result.stderr || result.stdout}`)
-  }
-  return result.stdout.trim()
-}
-
-const resolveHeadRef = (headRefInput) => {
-  if (headRefInput) {
-    return headRefInput
-  }
-  if (process.env.GITHUB_SHA) {
-    return process.env.GITHUB_SHA
-  }
-  return runGit(['rev-parse', 'HEAD'])
-}
-
-/**
- * Checks if a ref is a zero (null) ref.
- * @param {string} ref - Git reference
- * @returns {boolean} True if zero ref
- */
-const isZeroRef = (ref) => !ref || /^0+$/.test(ref)
-
-/**
- * Resolves the base ref for comparison.
- * @param {string} baseRefInput - User-provided base ref
- * @param {string} headRef - Resolved head ref
- * @returns {string} Base ref to use
- */
-const resolveBaseRef = (baseRefInput, headRef) => {
-  if (baseRefInput && !isZeroRef(baseRefInput)) {
-    return baseRefInput
-  }
-
-  const eventBefore = process.env.GITHUB_EVENT_BEFORE
-  if (eventBefore && !isZeroRef(eventBefore)) {
-    return eventBefore
-  }
-
-  try {
-    const parent = runGit(['rev-parse', `${headRef}^`])
-    if (parent) {
-      return parent
-    }
-  } catch (error) {
-    // ignore and fall through
-  }
-
-  return headRef
-}
-
-/**
- * Checks if a specific path has changed between two commits.
- * @param {string} baseRef - Base commit ref
- * @param {string} headRef - Head commit ref
- * @param {string} targetPath - Path to check
- * @returns {boolean} True if path has changes
- */
-const pathChanged = (baseRef, headRef, targetPath) => {
-  const result = spawnSync('git', ['diff', '--name-only', baseRef, headRef, '--', targetPath], { encoding: 'utf8' })
-  if (result.error) {
-    throw result.error
-  }
-
-  if (result.status !== 0) {
-    throw new Error(result.stderr || `git diff exited with status ${result.status}`)
-  }
-
-  return result.stdout.trim().length > 0
-}
-
-/**
- * Main entry point.
- */
-const main = () => {
-  const pathsInput = getInput('paths', { required: true })
-  const baseRefInput = getInput('base-ref')
-  const headRefInput = getInput('head-ref')
-
-  const paths = parseList(pathsInput)
-  if (paths.length === 0) {
-    console.error('At least one valid path must be provided via the paths input')
-    process.exit(1)
-  }
-
-  const headRef = resolveHeadRef(headRefInput)
-  const baseRef = resolveBaseRef(baseRefInput, headRef)
-
-  let changed = false
-  for (const targetPath of paths) {
-    if (pathChanged(baseRef, headRef, targetPath)) {
-      changed = true
-      break
-    }
-  }
-
-  setOutput('changed', changed ? 'true' : 'false')
-}
-
-main().catch((error) => {
-  console.error('check-path-changes action failed:', error)
-  process.exit(1)
-})

package/bin/templates/workspace/.github/actions/detect-skipped-services/action.yml

@@ -1,38 +0,0 @@
-name: Detect skipped services
-description: Detects services with skip:true and outputs them for workflow use
-inputs:
-  services-dir:
-    description: Directory containing service configuration files
-    required: false
-    default: infra/services
-outputs:
-  skipped-services:
-    description: Comma-separated list of skipped service names
-    value: ${{ steps.detect.outputs.skipped_services }}
-runs:
-  using: composite
-  steps:
-    - name: Detect skipped services
-      id: detect
-      shell: bash
-      env:
-        SERVICES_DIR: ${{ inputs.services-dir }}
-      run: |
-        set -euo pipefail
-        
-        SKIPPED=""
-        for file in "$SERVICES_DIR"/*.ts; do
-          if [ -f "$file" ] && grep -q "skip:\s*true" "$file" 2>/dev/null; then
-            SERVICE_NAME=$(grep -oP "name:\s*['\"]?\K[a-zA-Z0-9_-]+" "$file" | head -1)
-            if [ -n "$SERVICE_NAME" ]; then
-              if [ -z "$SKIPPED" ]; then
-                SKIPPED="$SERVICE_NAME"
-              else
-                SKIPPED="$SKIPPED,$SERVICE_NAME"
-              fi
-            fi
-          fi
-        done
-        
-        echo "skipped_services=$SKIPPED" >> "$GITHUB_OUTPUT"
-        echo "Detected skipped services: $SKIPPED"

package/bin/templates/workspace/.github/actions/generate-scope-matrix/action.yml

@@ -1,21 +0,0 @@
-name: Generate scope matrix
-description: Discover Docker scopes and output JSON matrix entries for changed scopes
-inputs:
-  scope-roots:
-    description: Comma/space separated list of directories containing scope folders
-    required: false
-  force-scope-short-names:
-    description: Optional short-name list to force into the matrix even if unchanged
-    required: false
-  force-all:
-    description: When true, include ALL discovered scopes regardless of changes
-    required: false
-    default: 'false'
-outputs:
-  scopes:
-    description: JSON array describing scopes for the matrix strategy
-  scopes_count:
-    description: Number of scopes detected in the matrix
-runs:
-  using: node20
-  main: index.js