@pagopa/dx-cli 0.18.1 → 0.18.3

package/dist/adapters/azure/cloud-account-service.js

@@ -85,6 +85,7 @@ export class AzureCloudAccountService {
             const requiredRoles = [
                 "8e3af657-a8ff-443c-a75c-2fe8c4bcb635", // Owner
                 "ba92f5b4-2d11-453d-a403-e96b0029c9fe", // Storage Blob Data Contributor
+                "b86a8fe4-44ce-4948-aee5-eccb2c155cd7", // Key Vault Secrets Officer
             ];
             const scope = `/subscriptions/${cloudAccountId}`;
             // Collect all role definition IDs assigned to the user or their groups
@@ -152,9 +153,14 @@ export class AzureCloudAccountService {
             const kvClient = new KeyVaultManagementClient(this.#credential, cloudAccount.id);
             const keyVaultName = `${prefix}-${short.env}-${short.location}-common-kv-01`;
             const secretsProtectionEnabled = short.env === "p";
+            const result = await kvClient.vaults.checkNameAvailability({
+                name: keyVaultName,
+                type: "Microsoft.KeyVault/vaults",
+            });
             await kvClient.vaults.beginCreateOrUpdateAndWait(resourceGroupName, keyVaultName, {
                 location: cloudAccount.defaultLocation,
                 properties: {
+                    createMode: result.nameAvailable ? "default" : "recover",
                     enabledForDiskEncryption: true,
                     enablePurgeProtection: secretsProtectionEnabled ? true : undefined,
                     enableRbacAuthorization: true,
@@ -175,7 +181,7 @@ export class AzureCloudAccountService {
             await Promise.all([
                 secretClient.setSecret("github-runner-app-id", runnerAppCredentials.id),
                 secretClient.setSecret("github-runner-app-installation-id", runnerAppCredentials.installationId),
-                secretClient.setSecret("github-runner-app-key", runnerAppCredentials.key),
+                secretClient.setSecret("github-runner-app-key", Buffer.from(runnerAppCredentials.key, "utf-8").toString("base64")),
             ]);
             logger.debug("Created secrets in key vault {keyVaultName} in subscription {subscriptionId}", { keyVaultName, subscriptionId: cloudAccount.id });
         }

package/dist/adapters/commander/commands/init.d.ts

@@ -1,7 +1,14 @@
 import { Command } from "commander";
 import { ResultAsync } from "neverthrow";
 import { GitHubService } from "../../../domain/github.js";
-export declare const checkPreconditions: () => ResultAsync<string, Error>;
+export declare const checkPreconditions: () => ResultAsync<import("execa").Result<{
+    environment: {
+        NO_COLOR: string;
+        TF_IN_AUTOMATION: string;
+        TF_INPUT: string;
+    };
+    shell: true;
+}>, Error>;
 type InitCommandDependencies = {
     gitHubService: GitHubService;
 };

package/dist/adapters/commander/commands/init.js

@@ -36,6 +36,7 @@ const displaySummary = (initResult) => {
     }
 };
 const checkTerraformCliIsInstalled = () => withSpinner("Checking Terraform installation...", "Terraform is installed!", "Please install terraform CLI before running this command. If you use tfenv, run: tfenv install latest && tfenv use latest", tf$ `terraform -version`);
+const checkCorepackIsInstalled = () => withSpinner("Checking Corepack installation...", "Corepack is installed!", "Please install Corepack before running this command.", tf$ `corepack -v`);
 const azureAccountSchema = z.object({
     user: z.object({
         name: z.string().min(1),
@@ -49,7 +50,10 @@ const ensureAzLogin = async () => {
     return user.name;
 };
 const checkAzLogin = () => withSpinner("Check Azure login status...", (userName) => `You are logged in to Azure (${userName})`, "Please log in to Azure CLI using `az login` before running this command.", ensureAzLogin());
-export const checkPreconditions = () => checkTerraformCliIsInstalled().andThen(() => checkAzLogin());
+// TODO(CES-1810): Make these checks concurrent to speed up the preconditions check phase
+export const checkPreconditions = () => checkTerraformCliIsInstalled()
+    .andThen(() => checkAzLogin())
+    .andThen(() => checkCorepackIsInstalled());
 const createRemoteRepository = ({ repoName, repoOwner, }) => {
     const logger = getLogger(["dx-cli", "init"]);
     const repo$ = tf$({ cwd: path.resolve("infra", "repository") });

package/dist/adapters/plop/actions/setup-pnpm.js

@@ -17,6 +17,7 @@ export default function (plop) {
             env,
             extendEnv: false, // Don't include process.env variables
         });
+        await pnpm$ `corepack enable`;
         await pnpm$ `corepack use pnpm@latest`;
         await pnpm$ `pnpm -w add -D turbo @changesets/cli @devcontainers/cli`;
         await pnpm$ `pnpm changeset init`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pagopa/dx-cli",
-  "version": "0.18.1",
+  "version": "0.18.3",
   "type": "module",
   "description": "A CLI useful to manage DX tools.",
   "repository": {
@@ -33,6 +33,7 @@
     "@azure/storage-blob": "^12.29.1",
     "@logtape/logtape": "^1.3.4",
     "@microsoft/microsoft-graph-client": "^3.0.7",
+    "@pagopa/dx-savemoney": "0.1.4",
     "chalk": "^5.6.2",
     "commander": "^14.0.2",
     "core-js": "^3.47.0",
@@ -46,8 +47,7 @@
     "replace-in-file": "^8.4.0",
     "semver": "^7.7.2",
     "yaml": "^2.8.2",
-    "zod": "^4.2.1",
-    "@pagopa/dx-savemoney": "^0.1.5"
+    "zod": "^4.2.1"
   },
   "devDependencies": {
     "@tsconfig/node24": "24.0.0",