@payfit/nx-core 0.0.0-e2e

package/dist/src/executors/publisher/helm.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.publishHelm = publishHelm;
+const tslib_1 = require("tslib");
+const fs = require("node:fs");
+const aws_auth_1 = require("../../utils/common/aws-auth");
+const github_1 = require("../../utils/common/github");
+const logger_1 = require("../../utils/common/logger");
+const tsh_1 = require("../../utils/common/tsh");
+const helm_1 = require("../../utils/helm");
+async function publishHelm(options, context, version, projectRoot, projectDist, isDryRun) {
+    const env_1 = { stack: [], error: void 0, hasError: false };
+    try {
+        const helmChartFolder = options.helmChartFolder || '.deploy';
+        const projectHelmFolder = `${projectRoot}/${helmChartFolder}`;
+        const valuesConfigPath = `${projectHelmFolder}/values.yaml`;
+        const chartConfigPath = `${projectHelmFolder}/Chart.yaml`;
+        const destinationHelmFolder = `${projectDist}/chart/`;
+        const gitBranchName = await (0, github_1.getSanitizedCurrentGitBranch)();
+        if (!gitBranchName)
+            throw new Error('Unable to get current Git branch');
+        if (!fs.existsSync(chartConfigPath)) {
+            logger_1.consola.warn(`No helm chart found in project ${context.projectName}, searching ${chartConfigPath}, skipping`);
+            return;
+        }
+        if (!options.chartRegistry) {
+            logger_1.consola.error('Helm chart detected but no chart registry provided, add "chartRegistry" to your project.json metadata');
+            return;
+        }
+        if (isDryRun) {
+            logger_1.consola.box(`Would have published Helm chart located at ${projectHelmFolder} to ${options.ociEcrRegistry ? options.ociEcrRegistry : options.chartRegistry}/${gitBranchName} with version ${version} but --dry-run is enabled`);
+            return;
+        }
+        await (0, aws_auth_1.checkAwsAuth)();
+        logger_1.consola.box(`Publishing Helm chart to ${options.chartRegistry}/${gitBranchName} with version ${version}`);
+        // connect to the chartmuseum through teleport
+        const proxyData = tslib_1.__addDisposableResource(env_1, await (0, tsh_1.getLocalPortForChartMuseum)(), false);
+        await proxyData.isReady();
+        logger_1.consola.start('Building Helm chart');
+        await (0, helm_1.setupTeleportProxyHelmChartFile)(projectHelmFolder, proxyData.port);
+        await (0, helm_1.installHelmRepo)(projectHelmFolder);
+        await (0, helm_1.patchImageTag)(valuesConfigPath, chartConfigPath, version);
+        await (0, helm_1.packageHelm)(projectHelmFolder, version, destinationHelmFolder);
+        await (0, helm_1.resetTeleportProxyHelmChartFile)(projectHelmFolder, proxyData.port);
+        logger_1.consola.success('Helm chart packaged!');
+        const chartConfig = await (0, helm_1.getHelmChartFile)(projectHelmFolder);
+        const packagedHelmChartName = `${chartConfig.name}-${version}.tgz`;
+        const packagedHelmChartPath = `${destinationHelmFolder}${packagedHelmChartName}`;
+        logger_1.consola.start('Publishing Helm chart');
+        // If ociEcrRegistry is provided, push to ECR using OCI format
+        if (options.ociEcrRegistry) {
+            logger_1.consola.log(`Publishing Helm chart to OCI registry ${options.ociEcrRegistry}`);
+            await (0, helm_1.pushOciPackagedHelm)(packagedHelmChartPath, options.ociEcrRegistry);
+        }
+        else {
+            // Otherwise, push to the chartmuseum as before
+            await (0, helm_1.pushPackagedHelm)(packagedHelmChartPath, packagedHelmChartName, options.chartRegistry, gitBranchName);
+        }
+        logger_1.consola.success('Helm chart published successfully!');
+    }
+    catch (e_1) {
+        env_1.error = e_1;
+        env_1.hasError = true;
+    }
+    finally {
+        tslib_1.__disposeResources(env_1);
+    }
+}
+//# sourceMappingURL=helm.js.map

package/dist/src/executors/publisher/helm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../../../src/executors/publisher/helm.ts"],"names":[],"mappings":";;AAoBA,kCA6EC;;AAjGD,8BAA6B;AAI7B,0DAA0D;AAC1D,sDAAwE;AACxE,sDAAmD;AACnD,gDAAmE;AACnE,2CASyB;AAGlB,KAAK,UAAU,WAAW,CAC/B,OAAiC,EACjC,OAAwB,EACxB,OAAe,EACf,WAAmB,EACnB,WAAmB,EACnB,QAAiB;;;QAEjB,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,SAAS,CAAA;QAC5D,MAAM,iBAAiB,GAAG,GAAG,WAAW,IAAI,eAAe,EAAE,CAAA;QAC7D,MAAM,gBAAgB,GAAG,GAAG,iBAAiB,cAAc,CAAA;QAC3D,MAAM,eAAe,GAAG,GAAG,iBAAiB,aAAa,CAAA;QACzD,MAAM,qBAAqB,GAAG,GAAG,WAAW,SAAS,CAAA;QACrD,MAAM,aAAa,GAAG,MAAM,IAAA,qCAA4B,GAAE,CAAA;QAE1D,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAEvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,gBAAO,CAAC,IAAI,CACV,kCAAkC,OAAO,CAAC,WAAW,eAAe,eAAe,YAAY,CAChG,CAAA;YACD,OAAM;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,gBAAO,CAAC,KAAK,CACX,uGAAuG,CACxG,CAAA;YACD,OAAM;QACR,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,gBAAO,CAAC,GAAG,CACT,8CAA8C,iBAAiB,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,aAAa,iBAAiB,OAAO,2BAA2B,CAClN,CAAA;YACD,OAAM;QACR,CAAC;QAED,MAAM,IAAA,uBAAY,GAAE,CAAA;QAEpB,gBAAO,CAAC,GAAG,CACT,4BAA4B,OAAO,CAAC,aAAa,IAAI,aAAa,iBAAiB,OAAO,EAAE,CAC7F,CAAA;QACD,8CAA8C;QAC9C,MAAM,SAAS,0CAAG,MAAM,IAAA,gCAA0B,GAAE,QAAA,CAAA;QACpD,MAAM,SAAS,CAAC,OAAO,EAAE,CAAA;QAEzB,gBAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACpC,MAAM,IAAA,sCAA+B,EAAC,iBAAiB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QACxE,MAAM,IAAA,sBAAe,EAAC,iBAAiB,CAAC,CAAA;QACxC,MAAM,IAAA,oBAAa,EAAC,gBAAgB,EAAE,eAAe,EAAE,OAAO,CAAC,CAAA;QAC/D,MAAM,IAAA,kBAAW,EAAC,iBAAiB,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAA;QACpE,MAAM,IAAA,sCAA+B,EAAC,iBAAiB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QACxE,gBAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;QAEvC,MAAM,WAAW,GAAG,MAAM,IAAA,uBAAgB,EAAC,iBAAiB,CAAC,CAAA;QAC7D,MAAM,qBAAqB,GAAG,GAAG,WAAW,CAAC,IAAI,IAAI,OAAO,MAAM,CAAA;QAClE,MAAM,qBAAqB,GAAG,GAAG,qBAAqB,GAAG,qBAAqB,EAAE,CAAA;QAEhF,gBAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;QACtC,8DAA8D;QAC9D,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,gBAAO,CAAC,GAAG,CACT,yCAAyC,OAAO,CAAC,cAAc,EAAE,CAClE,CAAA;YACD,MAAM,IAAA,0BAAmB,EAAC,qBAAqB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;QAC1E,CAAC;aAAM,CAAC;YACN,+CAA+C;YAC/C,MAAM,IAAA,uBAAgB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,OAAO,CAAC,aAAa,EACrB,aAAa,CACd,CAAA;QACH,CAAC;QAED,gBAAO,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAA;;;;;;;;;CACtD"}

package/dist/src/executors/publisher/lambda.d.ts

@@ -0,0 +1,18 @@
+import { ExecutorContext } from '@nx/devkit';
+import { PublisherExecutorOptions } from './schema';
+/**
+ * Function called by nx-release-publish, it :
+ * - publish zip to S3
+ * - creates new version via Spacelift
+ * - runs smoke tests
+ * - create alias for lambda function
+ * - push OCI in ECR registry
+ *
+ * @param options - Contains lambdaBucket, lambdaFunctions, and lambdaStacks configuration
+ * @param context - NX executor context with project information
+ * @param version - Version string for deployment
+ * @param projectRoot - Project root directory path
+ * @param projectDist - Built code directory path
+ * @param isDryRun - Skip actual deployment if true
+ */
+export declare function publishLambda(options: PublisherExecutorOptions, context: ExecutorContext, version: string, projectRoot: string, projectDist: string, isDryRun: boolean): Promise<void>;

package/dist/src/executors/publisher/lambda.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.publishLambda = publishLambda;
+const path_1 = require("path");
+const aws_auth_1 = require("../../utils/common/aws-auth");
+const github_1 = require("../../utils/common/github");
+const logger_1 = require("../../utils/common/logger");
+const s3_1 = require("../../utils/common/s3");
+const lambda_1 = require("../../utils/lambda/lambda");
+const oci_1 = require("../../utils/lambda/oci");
+const publish_1 = require("../../utils/lambda/publish");
+/**
+ * Function called by nx-release-publish, it :
+ * - publish zip to S3
+ * - creates new version via Spacelift
+ * - runs smoke tests
+ * - create alias for lambda function
+ * - push OCI in ECR registry
+ *
+ * @param options - Contains lambdaBucket, lambdaFunctions, and lambdaStacks configuration
+ * @param context - NX executor context with project information
+ * @param version - Version string for deployment
+ * @param projectRoot - Project root directory path
+ * @param projectDist - Built code directory path
+ * @param isDryRun - Skip actual deployment if true
+ */
+async function publishLambda(options, context, version, projectRoot, projectDist, isDryRun) {
+    const gitBranchName = await (0, github_1.getSanitizedCurrentGitBranch)();
+    const repoUrl = await (0, github_1.getSanitizedCurrentGitRepoUrl)();
+    const repoName = repoUrl.split('/').pop() ?? 'unknown-repo';
+    // Sanitize project name to ensure it is a valid S3 key
+    // Remove any characters that are not alphanumeric, hyphen, or underscore
+    // remove the @payfit/ prefix if it exists
+    const sanitizedProjectName = context.projectName
+        .replace(/^@payfit\//, '')
+        .replace(/[^a-zA-Z0-9-_]/g, '-');
+    const zipName = `${version}.zip`;
+    const zipFileNameS3 = `${options.lambdaBucket}/${repoName}/${sanitizedProjectName}/${zipName}`;
+    if (!gitBranchName)
+        throw new Error('Unable to get current Git branch');
+    if (!options.lambdaFunctions) {
+        logger_1.consola.info(`No lambda functions provided in project ${context.projectName} no "lambdaFunctions" parameter in project.json metadata, skipping`);
+        return;
+    }
+    if (!options.lambdaStacks) {
+        logger_1.consola.error('No lambda spacelift stacks provided, add "lambdaStacks" to your project.json metadata');
+        return;
+    }
+    if (!options.lambdaHealthCheckPayload) {
+        logger_1.consola.error('A healthCheck payload should be defined to run smoke test before releasing the lambda', 'Add "lambdaHealthCheckPayload" to your project.json metadata');
+        return;
+    }
+    else {
+        const lambdaPayload = options.lambdaHealthCheckPayload;
+        try {
+            JSON.parse(lambdaPayload);
+        }
+        catch (error) {
+            logger_1.consola.error(`lambdaHealthCheckPayload should be a JSON string, got ${lambdaPayload}`);
+            return;
+        }
+    }
+    if (isDryRun) {
+        logger_1.consola.box(`Would have published lambda artefact to S3 ${zipFileNameS3} but --dry-run is enabled`);
+        return;
+    }
+    await (0, aws_auth_1.checkAwsAuth)();
+    logger_1.consola.box(`Publishing the lambda artefact ${zipFileNameS3}`);
+    logger_1.consola.info(`Zipping ${zipName} from ${projectDist}`);
+    await (0, lambda_1.createZip)(projectDist, zipName);
+    const zipPath = (0, path_1.join)(projectDist, zipName);
+    logger_1.consola.info(`Uploading ${zipPath} to S3 at ${zipFileNameS3}`);
+    await (0, s3_1.pushToS3)(zipPath, zipFileNameS3);
+    logger_1.consola.success(`Lambda artefact successfully pushed to S3 at ${zipFileNameS3}`);
+    logger_1.consola.box(`Creating new Lambda version and running smoke tests`);
+    await (0, publish_1.createLambdaVersion)(options.lambdaStacks, options.lambdaFunctions, version, options.lambdaHealthCheckPayload);
+    const packageJsonPath = (0, path_1.join)(projectDist, 'package.json');
+    for (const registry of options.lambdaFunctions) {
+        logger_1.consola.info(`Pushing empty image to ECR ${process.env.AWS_ECR_REGISTRY}/${registry}:${version}`);
+        await (0, aws_auth_1.loginToEcr)(process.env.AWS_ECR_REGISTRY);
+        await (0, oci_1.pushImageToEcr)(registry, version, packageJsonPath);
+    }
+    logger_1.consola.success('Lambda artifact successfully pushed to S3!');
+    logger_1.consola.success(`Lambda version ${version} successfully created and smoke tests passed, you're lambda is ready to be promoted in Kargo !`);
+}
+//# sourceMappingURL=lambda.js.map

package/dist/src/executors/publisher/lambda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.js","sourceRoot":"","sources":["../../../../src/executors/publisher/lambda.ts"],"names":[],"mappings":";;AA+BA,sCAqGC;AApID,+BAA2B;AAI3B,0DAAsE;AACtE,sDAGkC;AAClC,sDAAmD;AACnD,8CAAgD;AAChD,sDAAqD;AACrD,gDAAuD;AACvD,wDAAgE;AAGhE;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,aAAa,CACjC,OAAiC,EACjC,OAAwB,EACxB,OAAe,EACf,WAAmB,EACnB,WAAmB,EACnB,QAAiB;IAEjB,MAAM,aAAa,GAAG,MAAM,IAAA,qCAA4B,GAAE,CAAA;IAE1D,MAAM,OAAO,GAAG,MAAM,IAAA,sCAA6B,GAAE,CAAA;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,cAAc,CAAA;IAE3D,uDAAuD;IACvD,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW;SAC7C,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAA;IAElC,MAAM,OAAO,GAAG,GAAG,OAAO,MAAM,CAAA;IAChC,MAAM,aAAa,GAAG,GAAG,OAAO,CAAC,YAAY,IAAI,QAAQ,IAAI,oBAAoB,IAAI,OAAO,EAAE,CAAA;IAE9F,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAEvE,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC7B,gBAAO,CAAC,IAAI,CACV,2CAA2C,OAAO,CAAC,WAAW,oEAAoE,CACnI,CAAA;QACD,OAAM;IACR,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,gBAAO,CAAC,KAAK,CACX,uFAAuF,CACxF,CAAA;QACD,OAAM;IACR,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACtC,gBAAO,CAAC,KAAK,CACX,uFAAuF,EACvF,8DAA8D,CAC/D,CAAA;QACD,OAAM;IACR,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,OAAO,CAAC,wBAAwB,CAAA;QACtD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAO,CAAC,KAAK,CACX,yDAAyD,aAAa,EAAE,CACzE,CAAA;YACD,OAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,gBAAO,CAAC,GAAG,CACT,8CAA8C,aAAa,2BAA2B,CACvF,CAAA;QACD,OAAM;IACR,CAAC;IAED,MAAM,IAAA,uBAAY,GAAE,CAAA;IACpB,gBAAO,CAAC,GAAG,CAAC,kCAAkC,aAAa,EAAE,CAAC,CAAA;IAE9D,gBAAO,CAAC,IAAI,CAAC,WAAW,OAAO,SAAS,WAAW,EAAE,CAAC,CAAA;IACtD,MAAM,IAAA,kBAAS,EAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAErC,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAC1C,gBAAO,CAAC,IAAI,CAAC,aAAa,OAAO,aAAa,aAAa,EAAE,CAAC,CAAA;IAC9D,MAAM,IAAA,aAAQ,EAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAEtC,gBAAO,CAAC,OAAO,CACb,gDAAgD,aAAa,EAAE,CAChE,CAAA;IAED,gBAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAA;IAElE,MAAM,IAAA,6BAAmB,EACvB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,eAAe,EACvB,OAAO,EACP,OAAO,CAAC,wBAAwB,CACjC,CAAA;IAED,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAA;IAEzD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/C,gBAAO,CAAC,IAAI,CACV,8BAA8B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,QAAQ,IAAI,OAAO,EAAE,CACpF,CAAA;QACD,MAAM,IAAA,qBAAU,EAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC9C,MAAM,IAAA,oBAAc,EAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,CAAA;IAC1D,CAAC;IAED,gBAAO,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAA;IAC7D,gBAAO,CAAC,OAAO,CACb,kBAAkB,OAAO,gGAAgG,CAC1H,CAAA;AACH,CAAC"}

package/dist/src/executors/publisher/schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Publisher executor",
+  "description": "Publish the helm chart to the chartmuseum and docker image to ECR",
+  "type": "object",
+  "properties": {
+    "chartRegistry": {
+      "type": "string",
+      "description": "The helm chart registry"
+    },
+    "ecrRegistry": {
+      "type": "string",
+      "description": "The docker registry"
+    },
+    "ociEcrRegistry": {
+      "type": "string",
+      "description": "The docker registry in oci format (AWS ECR)"
+    },
+    "isPublicRegistry": {
+      "type": "boolean",
+      "description": "Whether to use the public ECR registry",
+      "default": false
+    },
+    "helmChartFolder": {
+      "type": "string",
+      "description": "The folder containing the Helm chart files (Chart.yaml, values.yaml, etc.)",
+      "default": ".deploy"
+    },
+    "extraReleaseTags": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "Additional tags to add to the Docker image during a release",
+      "default": []
+    },
+    "dryRun": {
+      "type": "boolean",
+      "description": "Whether to run in dry run mode. When true, shows what would be published without actually publishing.",
+      "default": false
+    },
+    "lambdaBucket": {
+      "type": "string",
+      "description": "The S3 bucket for lambda",
+      "default": "payfit-shared-lambda-artifacts"
+    },
+    "lambdaStacks": {
+      "type": "array",
+      "description": "The list of stacks to publish the lambda to"
+    },
+    "lambdaFunctions": {
+      "type": "array",
+      "description": "The list of lambda functions inside the workload"
+    },
+    "lambdaHealthCheckPayload": {
+      "type": "string",
+      "description": "Health check payload for the lambda functions. Must be in JSON string format"
+    }
+  },
+  "required": []
+}

package/dist/src/executors/release/README.md

@@ -0,0 +1,15 @@
+# nx-core release executor
+
+It is handling all the release using the SDK of Nx
+
+https://nx.dev/features/manage-releases#using-the-programmatic-api-for-nx-release
+
+```mermaid
+flowchart LR
+    A(["releaseVersion"]) --> B(["releaseChangelog"])
+    B --> C(["releasePublish"])
+```
+
+1. **releaseVersion**: will define affected apps & calculate new versions based on the version actions defined (so semver, calver, ...)
+2. **releaseChangelog**: will generate the changelog based on the git history
+3. **releasePublish**: will trigger the `nx-release-publish` target on all the affected apps

package/dist/src/executors/release/executor.d.ts

@@ -0,0 +1,4 @@
+import { ExecutorContext } from '@nx/devkit';
+import { ReleaseExecutorOptions, ReleaseExecutorSchema } from './schema';
+declare const runExecutor: (options: ReleaseExecutorOptions, context: ExecutorContext) => Promise<ReleaseExecutorSchema>;
+export default runExecutor;

package/dist/src/executors/release/executor.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const release_1 = require("nx/release");
+const circleci_1 = require("../../utils/common/circleci");
+const github_1 = require("../../utils/common/github");
+const logger_1 = require("../../utils/common/logger");
+const nx_1 = require("../../utils/common/nx");
+const tsh_1 = require("../../utils/common/tsh");
+const runExecutor = async (options, context) => {
+    const dryRun = process.env.NX_DRY_RUN === 'true' || options.dryRun || false;
+    if ((0, circleci_1.isCircleCIRunner)()) {
+        logger_1.consola.start('CircleCI runner detected, setting it up!');
+        await (0, circleci_1.setupCircleCIRunner)();
+        await (0, tsh_1.startTbot)();
+        logger_1.consola.success('CircleCI runner setup successfully!');
+    }
+    const branchName = await (0, github_1.getSanitizedCurrentGitBranch)();
+    const commit = await (0, github_1.getCurrentGitCommitSha)();
+    const isPreRelease = options?.preRelease != null
+        ? options.preRelease
+        : branchName != 'main' && branchName != 'master';
+    const specifier = isPreRelease ? 'prerelease' : options.specifier;
+    const groups = options.groups && options.groups.length > 0 ? options.groups : undefined;
+    if (isPreRelease)
+        logger_1.consola.warn('This is an ephemeral release');
+    const allProjects = await (0, nx_1.getAffectedProjects)(groups);
+    if (allProjects.length === 0) {
+        logger_1.consola.warn('No projects to publish');
+        return {
+            success: true,
+        };
+    }
+    logger_1.consola.success(`Found ${allProjects.length} affected projects: ${allProjects.join(', ')}`);
+    // Step 1: Version Release
+    logger_1.consola.start('Calculating new versions');
+    const { projectsVersionData } = await (0, release_1.releaseVersion)({
+        dryRun,
+        verbose: options.verbose,
+        specifier,
+        projects: allProjects,
+        preid: isPreRelease
+            ? `ephemeral-${branchName.substring(0, 100)}-${commit.substring(0, 7)}`
+            : undefined,
+    });
+    logger_1.consola.success('New versions calculated successfully!');
+    // iterate over `projectsVersionData` to extract changed projects
+    const changedProjects = Object.entries(projectsVersionData)
+        .map(([projectName, versionData]) => {
+        if (versionData?.newVersion) {
+            logger_1.consola.info(`Project '${projectName}' will be updated to version ${versionData.newVersion}`);
+            return projectName;
+        }
+        return null; // filter out projects that didn't change
+    })
+        .filter(Boolean);
+    if (changedProjects.length === 0) {
+        logger_1.consola.warn('No project to publish');
+        return {
+            success: true,
+        };
+    }
+    // Step 2: Changelog Release
+    logger_1.consola.start('Generating & pushing changelogs');
+    await (0, release_1.releaseChangelog)({
+        versionData: projectsVersionData,
+        dryRun,
+        verbose: options.verbose,
+        projects: changedProjects,
+        createRelease: isPreRelease ? false : 'github',
+    });
+    logger_1.consola.success('Generated & pushed changelogs successfully!');
+    if (options.skipPublish) {
+        logger_1.consola.warn('Skipping publishing step as skipPublish = true');
+        return {
+            success: true,
+        };
+    }
+    // Step 3: Publish Release
+    logger_1.consola.start('Publishing packages');
+    const publishResults = await (0, release_1.releasePublish)({
+        projects: changedProjects,
+        dryRun,
+        verbose: options.verbose,
+        tag: isPreRelease ? 'ephemeral' : undefined,
+    });
+    // Log publish results
+    let publishError = false;
+    Object.entries(publishResults).forEach(([projectName, result]) => {
+        if (result.code === 0) {
+            logger_1.consola.success(`Published ${projectName} successfully!`);
+        }
+        else {
+            publishError = true;
+            logger_1.consola.fail(`Failed to publish ${projectName} with exit code ${result.code}`);
+        }
+    });
+    if (publishError)
+        throw new Error('We got errors when publishing, check the logs');
+    return {
+        success: true,
+    };
+};
+exports.default = runExecutor;
+//# sourceMappingURL=executor.js.map

package/dist/src/executors/release/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../src/executors/release/executor.ts"],"names":[],"mappings":";;AACA,wCAA6E;AAE7E,0DAGoC;AACpC,sDAGkC;AAClC,sDAAmD;AACnD,8CAA2D;AAC3D,gDAAkD;AAGlD,MAAM,WAAW,GAGqB,KAAK,EACzC,OAA+B,EAC/B,OAAwB,EACxB,EAAE;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAA;IAE3E,IAAI,IAAA,2BAAgB,GAAE,EAAE,CAAC;QACvB,gBAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAA;QACzD,MAAM,IAAA,8BAAmB,GAAE,CAAA;QAC3B,MAAM,IAAA,eAAS,GAAE,CAAA;QACjB,gBAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,qCAA4B,GAAE,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAsB,GAAE,CAAA;IAE7C,MAAM,YAAY,GAChB,OAAO,EAAE,UAAU,IAAI,IAAI;QACzB,CAAC,CAAC,OAAO,CAAC,UAAU;QACpB,CAAC,CAAC,UAAU,IAAI,MAAM,IAAI,UAAU,IAAI,QAAQ,CAAA;IACpD,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAA;IACjE,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAE1E,IAAI,YAAY;QAAE,gBAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAE9D,MAAM,WAAW,GAAa,MAAM,IAAA,wBAAmB,EAAC,MAAM,CAAC,CAAA;IAE/D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,gBAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QACtC,OAAO;YACL,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,gBAAO,CAAC,OAAO,CACb,SAAS,WAAW,CAAC,MAAM,uBAAuB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAA;IAED,0BAA0B;IAC1B,gBAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACzC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,IAAA,wBAAc,EAAC;QACnD,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,YAAY;YACjB,CAAC,CAAC,aAAa,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACvE,CAAC,CAAC,SAAS;KACd,CAAC,CAAA;IACF,gBAAO,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAA;IAExD,iEAAiE;IACjE,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE;QAClC,IAAI,WAAW,EAAE,UAAU,EAAE,CAAC;YAC5B,gBAAO,CAAC,IAAI,CACV,YAAY,WAAW,gCAAgC,WAAW,CAAC,UAAU,EAAE,CAChF,CAAA;YACD,OAAO,WAAW,CAAA;QACpB,CAAC;QACD,OAAO,IAAI,CAAA,CAAC,yCAAyC;IACvD,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAa,CAAA;IAE9B,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,gBAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;QACrC,OAAO;YACL,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,4BAA4B;IAC5B,gBAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAChD,MAAM,IAAA,0BAAgB,EAAC;QACrB,WAAW,EAAE,mBAAmB;QAChC,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,eAAe;QACzB,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;KAC/C,CAAC,CAAA;IACF,gBAAO,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAA;IAE9D,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,gBAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;QAC9D,OAAO;YACL,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,0BAA0B;IAC1B,gBAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACpC,MAAM,cAAc,GAAG,MAAM,IAAA,wBAAc,EAAC;QAC1C,QAAQ,EAAE,eAAe;QACzB,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC5C,CAAC,CAAA;IAEF,sBAAsB;IACtB,IAAI,YAAY,GAAG,KAAK,CAAA;IAExB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,gBAAO,CAAC,OAAO,CAAC,aAAa,WAAW,gBAAgB,CAAC,CAAA;QAC3D,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,IAAI,CAAA;YACnB,gBAAO,CAAC,IAAI,CACV,qBAAqB,WAAW,mBAAmB,MAAM,CAAC,IAAI,EAAE,CACjE,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IACF,IAAI,YAAY;QACd,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAElE,OAAO;QACL,OAAO,EAAE,IAAI;KACd,CAAA;AACH,CAAC,CAAA;AAED,kBAAe,WAAW,CAAA"}

package/dist/src/executors/release/schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Publisher executor",
+  "description": "Publish the helm chart to the chartmuseum and docker image to ECR",
+  "type": "object",
+  "properties": {
+    "preRelease": {
+      "type": "boolean",
+      "description": "The release is an ephemeral/rc"
+    },
+    "skipPublish": {
+      "type": "boolean",
+      "description": "Should skip publish"
+    },
+    "dryRun": {
+      "type": "boolean",
+      "description": "Is dry run"
+    },
+    "verbose": {
+      "type": "boolean",
+      "description": "Is verbose"
+    },
+    "groups": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "Release groups to target (optional). If not specified, all configured projects will be released."
+    },
+    "specifier": {
+      "type": "string",
+      "description": "Exact version or semver keyword to apply (e.g., 'patch', 'minor', 'major', '1.2.3')"
+    }
+  },
+  "required": []
+}

package/dist/src/generators/init/README.md

@@ -0,0 +1,5 @@
+# nx-core `init` Generator
+
+The `init` generator is executed automatically when you install the `@payfit/nx-core` package with `npx nx add @payfit/nx-core`.
+
+It handles the initial workspace configuration required to use this plugin.

package/dist/src/generators/init/files/.circleci/config.yml.template

@@ -0,0 +1,232 @@
+version: 2.1
+<% if (keepContinuationJobs) { %>
+setup: true
+<% } %>
+orbs:
+  nx: nrwl/nx@1.7
+  aws-cli: circleci/aws-cli@5.4
+  github: payfit/github@0.9
+  node: circleci/node@7.1
+  <% if (keepContinuationJobs) { %>
+  continuation: circleci/continuation@1.0
+  payfit-nx: payfit/nx@2
+  <% } %>
+
+references:
+  setup_env_node: &setup_env_node
+    docker:
+      - image: cimg/node:22.16
+  setup_env_machine: &setup_env_machine # Used for getting docker cli
+    machine:
+      image: ubuntu-2204:current
+  install_packages: &install_packages
+    check-cache: always
+    pkg-manager: yarn-berry
+  attach_workspace: &attach_workspace
+    at: ~/project
+  nx/set-shas: &nx_set_shas_option
+    error-on-no-successful-workflow: false
+    main-branch-name: main
+    workflow-name: build-test-deploy
+<% if (keepContinuationJobs) { %>
+  only_main_and_deploy_branches: &only_main_and_deploy_branches
+    branches:
+      only:
+        - main
+        - /^deploy.*/
+<% } %>
+
+jobs:
+  install_packages:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+
+  lint:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+      - nx/set-shas: *nx_set_shas_option
+      - run: npx nx affected -t lint
+
+  nx-conformance:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+      - run: npx nx-cloud record -- npx nx-cloud conformance:check
+
+  nx-sync:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+      - run: npx nx-cloud record -- npx nx sync:check
+
+  format:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+      - run: npx nx-cloud record -- npx nx format:check
+
+  build:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+      - nx/set-shas: *nx_set_shas_option
+      - run: npx nx run-many -t build
+      - persist_to_workspace:
+          root: '.'
+          paths:
+            - dist
+            - apps/*/dist
+            - packages/*/dist
+            - libs/*/dist
+
+  test:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+      - nx/set-shas: *nx_set_shas_option
+      - run: npx nx affected -t test
+
+  publish:
+    <<: *setup_env_machine
+    steps:
+      - checkout
+      - attach_workspace: *attach_workspace
+      - node/install:
+          install-yarn: true
+      - node/install-packages: *install_packages
+      - nx/set-shas: *nx_set_shas_option
+      - aws-cli/setup:
+          role_arn: ${PUBLISH_ROLE_ARN}
+          profile_name: 'OIDC-PROFILE'
+      - run:
+          name: 'Install Helm 3'
+          command: |
+            curl -sSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
+      - run:
+          name: 'Install Tsh'
+          command: |
+            curl -LsSO https://cdn.teleport.dev/teleport-${TELEPORT_VERSION}-linux-amd64-bin.tar.gz
+            tar -xzf teleport-${TELEPORT_VERSION}-linux-amd64-bin.tar.gz
+            cd teleport
+            sudo ./install
+      - run:
+          name: 'Install Oras'
+          command: |
+            VERSION="1.2.2"
+            curl -LO "https://github.com/oras-project/oras/releases/download/v${VERSION}/oras_${VERSION}_linux_amd64.tar.gz"
+            mkdir -p oras-install/
+            tar -zxf oras_${VERSION}_*.tar.gz -C oras-install/
+            sudo mv oras-install/oras /usr/local/bin/
+            rm -rf oras_${VERSION}_*.tar.gz oras-install/
+      - run:
+          name: Release
+          command: |
+            export GH_TOKEN="$(cat github_token)"
+            export GITHUB_TOKEN="$(cat github_token)"
+            git remote set-url origin https://x-access-token:${GH_TOKEN}@github.com/PayFit/${CIRCLE_PROJECT_REPONAME}.git
+            npx nx run <%= packageJsonName %>:release
+
+  <% if (keepContinuationJobs) { %>
+  affected-merge-continuation:
+    <<: *setup_env_node
+    steps:
+      - checkout
+      - node/install-packages: *install_packages
+      - nx/set-shas: *nx_set_shas_option
+      - payfit-nx/affected-apps:
+          output-file: affected-list.txt
+          main-branch-name: main
+          allow-on-hold-workflow: true
+          nx-ci-execution-id: $CIRCLE_WORKFLOW_ID
+          projects-to-exclude: '<%= packageJsonName %>'
+      - payfit-nx/merge-circle-config:
+          shared-config-file: .circleci/shared-config.yml
+          affected-list-file: affected-list.txt
+          config-output: .circleci/continue-config.yml
+      - run:
+          name: skip if no affected-apps
+          command: |
+            # If `affected-apps` is unavailable, stop this job without continuation
+            if [ ! -f ".circleci/continue-config.yml" ] || [ ! -s ".circleci/continue-config.yml" ]
+            then
+              echo 'No affected apps, nothing to do.'
+              circleci-agent step halt
+              exit
+            fi
+      - run:
+          name: Setup parameters
+          command: |
+            echo "{\"workflow-id\": \"$CIRCLE_WORKFLOW_ID\"}" > parameters.json
+      - continuation/continue:
+          configuration_path: .circleci/continue-config.yml
+          parameters: parameters.json
+  <% } %>
+
+workflows:
+  build-test-deploy:
+    jobs:
+      - github/auth:
+          outputFile: github_token
+          name: github_authenticate
+          context:
+            - NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+      - install_packages:
+          context: NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+
+      - lint:
+          context: NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+          requires:
+            - install_packages
+
+      - nx-sync:
+          context: NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+          requires:
+            - install_packages
+
+      - format:
+          context: NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+          requires:
+            - install_packages
+
+      - nx-conformance:
+          context: NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+          requires:
+            - install_packages
+
+      - build:
+          context: NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+          requires:
+            - install_packages
+
+      - test:
+          context: NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+          requires:
+            - install_packages
+
+      - publish:
+          name: Publish
+          requires:
+            - github_authenticate
+            - test
+            - build
+          context:
+            - NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+
+     <% if (keepContinuationJobs) { %>
+      - affected-merge-continuation:
+          requires:
+            - build
+            - test
+          context:
+            - NX_COMMON_PACKAGES # TSH config / AWS credentials / NPM token
+          filters: *only_main_and_deploy_branches
+     <% } %>