@docupace/pipeline 1.0.7-7.micro-cli11 → 1.0.7-alpha.0

package/README.md

@@ -1,136 +0,0 @@
-# Pipeline Shared Scripts
-
-A collection of CLI tools for Docupace's CI/CD pipelines and deployment workflows.
-
-## Overview
-
-This package provides a set of command-line interfaces (CLIs) to facilitate various DevOps operations in the Docupace ecosystem:
-
-- `dp-next-cli`: Deployment and pipeline management for Next applications
-- `dp-changeset-cli`: Versioning and changeset management 
-- `dp-auth0-cli`: Auth0 tenant configuration and management
-
-## Installation
-
-```bash
-npm install @docupace/pipeline
-```
-
-Or with pnpm:
-
-```bash
-pnpm add @docupace/pipeline
-```
-
-## Command Line Interfaces
-
-### dp-next-cli
-
-Manages deployment, Docker image handling, and infrastructure configuration.
-
-```bash
-dp-next-cli [command] [options]
-```
-
-**Commands:**
-
-- `pull <imageName>`: Pull a Docker image from the registry
-- `sonar`: Run Sonar analysis
-- `addApacheSite`: Add site to apache
-- `connectClone`: Clone connect site
-- `haproxySync`: Sync haproxy config
-- `vaultAddSiteData`: Add m2m auth0 data to vault
-  - `-s, --site-name <siteName>`: Site name
-  - `-p, --site-config-remote-path <path>`: Site config remote path
-- `publish`: Publish a Docker image
-- `deploy-from-site`: Deploy an application for a specific site
-  - `-f, --from-env <fromEnv>`: Source environment
-  - `-t, --to-env <toEnv>`: Target environment
-  - `-F, --from-site <fromSite>`: Source site
-  - `-T, --to-site <toSite>`: Target site
-  - `-c, --deploy-core <deployCore>`: Deploy Core (default: "false")
-  - `-C, --deploy-connect <deployConnect>`: Deploy Connect (default: "false")
-- `deploy-template`: Deploy an application for a specific site
-- `deploy-app <application>`: Deploy an application for a specific site
-- `deploy-core <env> <site>`: Deploy Core
-  - `-l, --liquibase <liquibase>`: Application name (default: "true")
-  - `-b, --branch <branch>`: Branch (default: "master")
-- `deploy-connect <env> <site>`: Deploy Connect
-  - `-l, --liquibase <liquibase>`: Application name (default: "true")
-  - `-b, --branch <branch>`: Branch (default: "master")
-- `deploy-core-pipeline <env> <site>`: Deploy Core via pipeline
-  - `-l, --liquibase <liquibase>`: Application name (default: "true")
-  - `-b, --branch <branch>`: Branch (default: "master")
-- `copy`: Copy a Docker image between registries
-  - `-a, --application <application>`: Application name
-  - `-f, --from-env <fromEnv>`: Source environment
-  - `-t, --to-env <toEnv>`: Target environment
-  - `-g, --tag <tag>`: Image tag
-- `run-pipeline`: Trigger a pipeline by name
-  - `-r, --repository <repository>`: Repository name
-  - `-p, --pipeline-name <pipelineName>`: Pipeline name
-  - `-b, --branch <branch>`: Branch name
-  - `-v, --variables <key=value>`: Pipeline variable as key=value pair
-  - `-w, --wait`: Wait for the pipeline to complete (default: false)
-
-### dp-changeset-cli
-
-Manages versioning and changesets for mono-repos and single-package repos.
-
-```bash
-dp-changeset-cli [command] [options]
-```
-
-**Commands:**
-
-- `validate`: Validate changesets for the provided PR
-- `version`: Run Changeset versioning
-- `commit-tag`: Commit and tag the new version
-- `version-commit-tag`: Run versioning and commit-and-tag in sequence
-- `close-version`: Close a version and create a release branch
-- `create-changeset`: Create a changeset based on the current branch and Jira ticket information
-
-### dp-auth0-cli
-
-Manages Auth0 tenant configuration across environments.
-
-```bash
-dp-auth0-cli [command] [options]
-```
-
-**Commands:**
-
-- `configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3>`: Configure Auth0 tenants
-- `getVaultSecrets <vaultPath>`: Get secrets from Vault
-- `configureAlias <site> <env> <username> <password> <realm>`: Configure Core Alias for the given site
-- `exportConf <site> <env>`: Export Auth0 configuration for the given site
-- `getAuth0Metadata <site> <env>`: Get Auth0 metadata for the given site
-
-## Environment Configuration
-
-The CLI tools look for environment configuration in the following locations:
-- `.env.pipeline.local`
-- `config/.env.pipeline.local`
-
-## Examples
-
-```bash
-# Deploy from one site to another
-dp-next-cli deploy-from-site --from-env dev --to-env dev --from-site financialdev --to-site template --deploy-core true
-
-# Run a pipeline
-dp-next-cli run-pipeline -r docupace-next-e2e -b master -p run-tests-qa
-
-# Validate changesets
-dp-changeset-cli validate
-
-# Create a new changeset
-dp-changeset-cli create-changeset
-
-# Configure Auth0 for a site
-dp-auth0-cli configureFromSite sourceSite targetSite dev prod true true true false
-```
-
-## License
-
-ISC

package/bin/azuread_update_callbacks_for_app.sh

@@ -1,58 +0,0 @@
-#!/bin/bash
-set -e
-
-ENV=$1
-
-if [ -z "$ENV" ]; then
-    echo "Usage: $0 <environment>"
-    exit 1
-fi
-
-TENANT_ID="docupace.onmicrosoft.com"
-CLIENT_ID=$ARM_CLIENT_ID
-CLIENT_SECRET=$ARM_CLIENT_SECRET
-NEW_REDIRECT="https://docupace-$ENV-$SITE_NAME.us.auth0.com/login/callback"
-APP_ID="auth0-$ENV-docupace"
-APP_SCOPE="https://graph.microsoft.com/.default"
-GRAPH_API="https://graph.microsoft.com/v1.0"
-
-ACCESS_TOKEN=$(curl -s -X POST \
--H "Content-Type: application/x-www-form-urlencoded" \
--d "grant_type=client_credentials&client_id=$CLIENT_ID&client_secret=$CLIENT_SECRET&scope=$APP_SCOPE" \
-https://login.microsoftonline.com/$TENANT_ID/oauth2/v2.0/token | jq -r '.access_token')
-
-APP_DETAILS=$(curl -s -G "https://graph.microsoft.com/v1.0/applications" \
-    -H "Authorization: Bearer $ACCESS_TOKEN" \
-    -H "Content-Type: application/json" \
-    --data-urlencode "\$filter=appId eq '$CLIENT_ID'")
-
-APP_ID=$(echo "$APP_DETAILS" | jq -r '.value[0].id')
-echo "Application ID: $APP_ID"
-
-CURRENT_REDIRECTS=$(echo "$APP_DETAILS" | jq -r '.value[0].web.redirectUris // []')
-echo "Current redirect URIs: $CURRENT_REDIRECTS"
-
-if echo "$CURRENT_REDIRECTS" | jq -e --arg uri "$NEW_REDIRECT" 'index($uri)' > /dev/null; then
-    echo "Redirect URI '$NEW_REDIRECT' already exists. No update needed."
-else
-    UPDATED_REDIRECTS=$(echo "$CURRENT_REDIRECTS" | jq --arg uri "$NEW_REDIRECT" '. + [$uri]')
-    echo "Updated redirect URIs: $UPDATED_REDIRECTS"
-
-    UPDATE_REDIRECTS=$(curl -fs -X PATCH \
-        -H "Authorization: Bearer $ACCESS_TOKEN" \
-        -H "Content-Type: application/json" \
-        -d "{
-          \"web\": {
-            \"redirectUris\": $UPDATED_REDIRECTS
-          }
-        }" \
-        "https://graph.microsoft.com/v1.0/applications/$APP_ID")
-
-    if [ $? -eq 0 ]; then
-        echo "Successfully updated redirect URIs"
-        echo $UPDATE_REDIRECTS
-    else
-        echo "Failed to update redirect URIs"
-        echo $UPDATE_REDIRECTS
-    fi
-fi

package/bitbucket-pipelines.yml

@@ -1,60 +0,0 @@
-# bitbucket-pipelines.yml
-clone:
-  depth: 2
-
-pipelines:
-  pull-requests:
-    '**':
-      - step:
-          runs-on:
-            - self.hosted
-            - linux.shell
-          name: On Pull Request
-          script:
-            - npm install -g pnpm
-            - pnpm config set //registry.npmjs.org/:_authToken $DOCUPACE_NPM_TOKEN
-            - pnpm install --frozen-lockfile
-            - 'npx eslint . --rule "no-unused-vars: warn" --rule "no-useless-escape: warn" --color'
-            - pnpm test
-          artifacts:
-            - coverage/**
-          after-script:
-            - echo "Pipeline completed with status $BITBUCKET_EXIT_CODE"
-
-  custom:
-    scheduled-tests:
-      - step:
-          runs-on:
-            - self.hosted
-            - linux.shell
-          name: Scheduled Tests
-          script:
-            - npm install -g pnpm
-            - pnpm config set //registry.npmjs.org/:_authToken $DOCUPACE_NPM_TOKEN
-            - pnpm install --frozen-lockfile
-            - 'npx eslint . --rule "no-unused-vars: warn" --rule "no-useless-escape: warn" --color'
-            - pnpm test
-          artifacts:
-            - coverage/**
-          after-script:
-            - echo "Pipeline completed with status $BITBUCKET_EXIT_CODE"
-
-  branches:
-    main:
-      - step:
-          runs-on:
-            - self.hosted
-            - linux.shell
-          name: Main Branch Build
-          script:
-            - npm install -g pnpm
-            - pnpm config set //registry.npmjs.org/:_authToken $DOCUPACE_NPM_TOKEN
-            - pnpm install --frozen-lockfile
-            - 'npx eslint . --rule "no-unused-vars: warn" --rule "no-useless-escape: warn" --color'
-            - pnpm test
-          artifacts:
-            - coverage/**
-
-definitions:
-  caches:
-    pnpm: ~/.pnpm-store

package/jest.config.js

@@ -1,15 +0,0 @@
-// jest.config.js
-export default {
-  testEnvironment: 'node',
-  transform: {},
-  verbose: true,
-  collectCoverage: true,
-  coverageDirectory: 'coverage',
-  coverageReporters: ['text', 'lcov', 'json', 'html'],
-  collectCoverageFrom: [
-    'src/**/*.{js,ts}',
-    '!src/**/cli.js',
-    '!src/**/*.test.{js,ts}',
-    '!**/node_modules/**',
-  ],
-};

package/src/auth0/alias.js

@@ -1,79 +0,0 @@
-import axios from 'axios';
-import { createAlias } from '../next/alias.js';
-import { getAuth0AuthToken } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-import { getVaultSecretsConfigs } from '../next/config.js';
-import { cloneEnvRepository, readDeployConfig } from '../next/deploy.js';
-
-export async function getCCAlias({ application, auth0Domain, auth0AuthToken }) {
-  console.log(`Forming alias name for application ${application}...`);
-
-  try {
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0AuthToken}` },
-      },
-    );
-
-    const appAuth0ClientIdData = auth0Response.data.find(
-      (client) => client.name === `${application}`,
-    );
-    const appAuth0ClientId = appAuth0ClientIdData.client_id;
-
-    console.log(`Client Credentials Alias: ${appAuth0ClientId}@clients`);
-    return `${appAuth0ClientId}@clients`;
-  } catch (err) {
-    console.error(
-      `Failed to form alias name for application: ${application}: ${err.message}`,
-    );
-  }
-}
-
-export async function configureAlias(
-  site,
-  env,
-  username,
-  password,
-  realm,
-  auth0Tenant,
-) {
-  console.log(`Creating alias for site: ${site} in env: ${env}`);
-  // Site Common Secrets
-  const siteCommonSecretsPath =
-    getVaultSecretsConfigs(site).siteCommonSecretsPath;
-  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-  const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-
-  let auth0Domain;
-  if (auth0Tenant === '') {
-    auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
-  } else {
-    auth0Domain = `${auth0Tenant}.us.auth0.com`;
-  }
-  const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-  const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  const auth0Token = await getAuth0AuthToken(
-    auth0Domain,
-    auth0ClientId,
-    auth0ClientSecret,
-  );
-
-  await cloneEnvRepository(env);
-
-  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
-    'graphql-server',
-    env,
-    site,
-    'values',
-  );
-  const coreUrl = deployGraphQLServerConfig.graphqlServer.coreUrl;
-
-  const clientCredentialsAlias = await getCCAlias({
-    application: 'docupace-graphql-client-credentials',
-    auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token,
-  });
-
-  await createAlias(coreUrl, username, password, realm, clientCredentialsAlias);
-}

package/src/auth0/alias.test.js

@@ -1,172 +0,0 @@
-// alias.test.js
-import { jest } from '@jest/globals';
-
-// --------- ESM-Compatible Mocks ---------
-jest.unstable_mockModule('axios', () => ({
-  default: {
-    get: jest.fn(),
-  },
-}));
-
-jest.unstable_mockModule('../next/alias.js', () => ({
-  createAlias: jest.fn(),
-}));
-
-jest.unstable_mockModule('./configure.js', () => ({
-  getAuth0AuthToken: jest.fn(),
-}));
-
-jest.unstable_mockModule('./vault.js', () => ({
-  getVaultSecrets: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/config.js', () => ({
-  getVaultSecretsConfigs: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/deploy.js', () => ({
-  cloneEnvRepository: jest.fn(),
-  readDeployConfig: jest.fn(),
-}));
-
-// --------- Import AFTER mocks ---------
-const { configureAlias, getCCAlias } = await import('./alias.js');
-const axios = (await import('axios')).default;
-const { createAlias } = await import('../next/alias.js');
-const { getAuth0AuthToken } = await import('./configure.js');
-const { getVaultSecrets } = await import('./vault.js');
-const { getVaultSecretsConfigs } = await import('../next/config.js');
-const { cloneEnvRepository, readDeployConfig } = await import(
-  '../next/deploy.js'
-);
-
-// --------- Shared Test Setup ---------
-beforeAll(() => {
-  jest.spyOn(console, 'log').mockImplementation(() => {}); // silence logs
-});
-
-afterAll(() => {
-  console.log.mockRestore();
-});
-
-describe('configureAlias', () => {
-  const site = 'example';
-  const env = 'dev';
-  const username = 'admin';
-  const password = 'pass';
-  const realm = 'Users';
-  const auth0Tenant = '';
-
-  const mockSecrets = {
-    AUTH0_CLIENT_ID: 'client-id',
-    AUTH0_CLIENT_SECRET: 'client-secret',
-  };
-
-  const mockToken = 'mocked-auth0-token';
-
-  const mockClients = [
-    { name: 'docupace-graphql-client-credentials', client_id: 'client-123' },
-  ];
-
-  const mockConfig = {
-    deployConfig: {
-      graphqlServer: {
-        coreUrl: 'https://core.example.com',
-      },
-    },
-  };
-
-  beforeEach(() => {
-    jest.clearAllMocks();
-
-    getVaultSecretsConfigs.mockReturnValue({
-      siteCommonSecretsPath: 'vault/path/to/secrets',
-    });
-
-    getVaultSecrets.mockResolvedValue(mockSecrets);
-    getAuth0AuthToken.mockResolvedValue(mockToken);
-    axios.get.mockResolvedValue({ data: mockClients });
-    cloneEnvRepository.mockResolvedValue(undefined);
-    readDeployConfig.mockResolvedValue(mockConfig);
-    createAlias.mockResolvedValue(undefined);
-  });
-
-  it('should configure alias with default tenant and call all required steps', async () => {
-    await configureAlias(site, env, username, password, realm, auth0Tenant);
-
-    expect(getVaultSecretsConfigs).toHaveBeenCalledWith(site);
-    expect(getVaultSecrets).toHaveBeenCalledWith('vault/path/to/secrets');
-
-    expect(getAuth0AuthToken).toHaveBeenCalledWith(
-      'docupace-dev-example.us.auth0.com',
-      'client-id',
-      'client-secret',
-    );
-
-    expect(cloneEnvRepository).toHaveBeenCalledWith(env);
-
-    expect(readDeployConfig).toHaveBeenCalledWith(
-      'graphql-server',
-      env,
-      site,
-      'values',
-    );
-
-    expect(axios.get).toHaveBeenCalledWith(
-      'https://docupace-dev-example.us.auth0.com/api/v2/clients',
-      { headers: { authorization: `Bearer ${mockToken}` } },
-    );
-
-    expect(createAlias).toHaveBeenCalledWith(
-      'https://core.example.com',
-      username,
-      password,
-      realm,
-      'client-123@clients',
-    );
-  });
-});
-
-describe('getCCAlias', () => {
-  const application = 'docupace-graphql-client-credentials';
-  const auth0Domain = 'example.auth0.com';
-  const auth0AuthToken = 'token';
-
-  it('should return correct alias string for client', async () => {
-    axios.get.mockResolvedValue({
-      data: [{ name: application, client_id: 'abc123' }],
-    });
-
-    const alias = await getCCAlias({
-      application,
-      auth0Domain,
-      auth0AuthToken,
-    });
-    expect(alias).toBe('abc123@clients');
-
-    expect(axios.get).toHaveBeenCalledWith(
-      'https://example.auth0.com/api/v2/clients',
-      { headers: { authorization: 'Bearer token' } },
-    );
-  });
-
-  it('should log error and return undefined if axios fails', async () => {
-    axios.get.mockRejectedValue(new Error('Network error'));
-    const errorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
-
-    const result = await getCCAlias({
-      application,
-      auth0Domain,
-      auth0AuthToken,
-    });
-    expect(result).toBeUndefined();
-
-    expect(errorSpy).toHaveBeenCalledWith(
-      expect.stringContaining(
-        'Failed to form alias name for application: docupace-graphql-client-credentials: Network error',
-      ),
-    );
-
-    errorSpy.mockRestore();
-  });
-});

package/src/auth0/cli.js

@@ -1,82 +0,0 @@
-#!/usr/bin/env node
-
-import { Command } from 'commander';
-import { configureFromSite } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-
-import dotenv from 'dotenv';
-import { configureAlias } from './alias.js';
-import { exportConf } from './export.js';
-import { getAuth0Metadata } from './metadata.js';
-
-dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
-
-const program = new Command();
-
-program
-  .command(
-    'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3Ui> <deployCCUI> <useS3Gq> [auth0Tenant]',
-  )
-  .description('Configure the Auth0 tenants in env for the given site')
-  .action(
-    async (
-      fromSite,
-      toSite,
-      fromEnv,
-      toEnv,
-      deployUI,
-      deployGraphQLServer,
-      useNewDomain,
-      useS3Ui,
-      deployCCUI,
-      useS3Gq,
-      auth0Tenant = '',
-    ) => {
-      await configureFromSite(
-        fromSite,
-        toSite,
-        fromEnv,
-        toEnv,
-        deployUI,
-        deployGraphQLServer,
-        useNewDomain,
-        useS3Ui === 'true' || useS3Ui === true,
-        deployCCUI,
-        useS3Gq === 'true' || useS3Gq === true,
-        auth0Tenant,
-      );
-    },
-  );
-
-program
-  .command('getVaultSecrets <vaultPath>')
-  .description('Get Secrets for Vault PATH')
-  .action(async (vaultPath) => {
-    const data = await getVaultSecrets(vaultPath);
-    console.log(JSON.stringify(data, 'null', 2));
-  });
-
-program
-  .command(
-    'configureAlias <site> <env> <username> <password> <realm> [auth0Tenant]',
-  )
-  .description('Configure Core Alias for the given site')
-  .action(async (site, env, username, password, realm, auth0Tenant = '') => {
-    await configureAlias(site, env, username, password, realm, auth0Tenant);
-  });
-
-program
-  .command('exportConf <site> <env> [auth0Tenant]')
-  .description('Export Auth0 configuration for the given site')
-  .action(async (site, env, auth0Tenant = '') => {
-    await exportConf(site, env, auth0Tenant);
-  });
-
-program
-  .command('getAuth0Metadata <site> <env> [auth0Tenant] [jiraTicket]')
-  .description('Get Auth0 metadata for the given site')
-  .action(async (site, env, auth0Tenant = '', jiraTicket = '') => {
-    await getAuth0Metadata(site, env, auth0Tenant, jiraTicket);
-  });
-
-program.parse(process.argv);