@smoothbricks/cli 0.3.4 → 0.4.1

package/dist/monorepo/package-hygiene.js

@@ -1,20 +1,34 @@
-import { run, runStatus } from '../lib/run.js';
-const defaultShell = { run, runStatus };
+import { printCommandOutput, run, runResult, runStatus } from '../lib/run.js';
+const defaultShell = { run, runResult, runStatus };
 export async function fixPackageHygiene(root, verboseOrShell = false, maybeShell = defaultShell) {
     const verbose = typeof verboseOrShell === 'boolean' ? verboseOrShell : false;
     const shell = typeof verboseOrShell === 'boolean' ? maybeShell : verboseOrShell;
-    const status = await shell.runStatus('sherif', ['-f', '--select', 'highest'], root, !verbose);
+    const result = await runPackageHygieneCommand(shell, 'sherif', ['-f', '--select', 'highest'], root, verbose);
+    const status = result.exitCode;
     if (status !== 0) {
+        if (!verbose) {
+            printCommandOutput(result.stdout, result.stderr);
+        }
         throw new Error(`sherif -f --select highest failed with exit code ${status}`);
     }
 }
 export async function validatePackageHygiene(root, verboseOrShell = false, maybeShell = defaultShell) {
     const verbose = typeof verboseOrShell === 'boolean' ? verboseOrShell : false;
     const shell = typeof verboseOrShell === 'boolean' ? maybeShell : verboseOrShell;
-    const status = await shell.runStatus('sherif', ['--fail-on-warnings'], root, !verbose);
+    const result = await runPackageHygieneCommand(shell, 'sherif', ['--fail-on-warnings'], root, verbose);
+    const status = result.exitCode;
     if (status !== 0) {
+        if (!verbose) {
+            printCommandOutput(result.stdout, result.stderr);
+        }
         console.error('sherif package hygiene validation failed');
         return 1;
     }
     return 0;
 }
+async function runPackageHygieneCommand(shell, command, args, root, verbose) {
+    if (!verbose && shell.runResult) {
+        return shell.runResult(command, args, root);
+    }
+    return { exitCode: await shell.runStatus(command, args, root, !verbose), stdout: '', stderr: '' };
+}

package/dist/monorepo/package-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-policy.d.ts","sourceRoot":"","sources":["../../src/monorepo/package-policy.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAGL,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,+CAA+C,CAAC;AA6BvD,YAAY,EAAE,0BAA0B,IAAI,iCAAiC,EAAE,sBAAsB,EAAE,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,CAAC;AAUhE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAuB1D;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMxD;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAuC7D;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B,GAAG,IAAI,CAwB7G;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMzD;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAoB7D;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAEvE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAezD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsC9D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAW5D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAyB3D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA0DlE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B,GAAG,MAAM,CAiC5G"}
+{"version":3,"file":"package-policy.d.ts","sourceRoot":"","sources":["../../src/monorepo/package-policy.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAGL,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,+CAA+C,CAAC;AA6BvD,YAAY,EAAE,0BAA0B,IAAI,iCAAiC,EAAE,sBAAsB,EAAE,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,CAAC;AAYhE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAuB1D;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMxD;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAuC7D;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B,GAAG,IAAI,CAwB7G;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMzD;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAoB7D;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAEvE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAezD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsC9D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAW5D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAyB3D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA0DlE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B,GAAG,MAAM,CAiC5G"}

package/dist/monorepo/package-policy.js

@@ -9,10 +9,12 @@ import { getWorkspacePackageManifests, getWorkspacePackages, listPackageJsonReco
 export { SMOO_NX_RELEASE_TAG_PATTERN, SMOO_NX_VERSION_ACTIONS };
 const extraCommitScopes = ['release'];
 const rootScriptPolicy = {
+    clean: 'nx run-many -t clean; nx reset',
+    'clean:node_modules': 'rm -rf node_modules && find e* t* p* -type d -name node_modules -print0 | xargs -0 rm -rvf',
+    'format:changed': 'git-format-staged --config tooling/git-hooks/git-format-staged.yml --also-unstaged',
+    'format:staged': 'git-format-staged --config tooling/git-hooks/git-format-staged.yml',
     lint: 'nx run-many -t lint',
     'lint:fix': 'git-format-staged --config tooling/git-hooks/git-format-staged.yml --unstaged',
-    'format:staged': 'git-format-staged --config tooling/git-hooks/git-format-staged.yml',
-    'format:changed': 'git-format-staged --config tooling/git-hooks/git-format-staged.yml --also-unstaged',
 };
 export function applyFixableMonorepoDefaults(root) {
     applyRootScriptDefaults(root);

package/dist/monorepo/packed-package.js

@@ -3,7 +3,7 @@ import { join } from 'node:path';
 import { publint } from 'publint';
 import { formatMessage } from 'publint/utils';
 import { isRecord } from '../lib/json.js';
-import { runResult, runStatus } from '../lib/run.js';
+import { printCommandOutput, runResult } from '../lib/run.js';
 import { listPublicPackages } from '../lib/workspace.js';
 import { readPackedPackageJson, validatePackedWorkspaceDependencies } from './packed-manifest.js';
 export async function validatePackedPublicPackages(root) {
@@ -116,9 +116,10 @@ async function packPackage(root, pkg) {
     const tarballName = `.smoo-${process.pid}-${Date.now()}.tgz`;
     const tarballPath = join(root, tarballName);
     try {
-        const status = await runStatus('bun', ['pm', 'pack', '--filename', tarballName, '--ignore-scripts', '--quiet'], packageDir, true);
-        if (status !== 0) {
-            throw new Error(`bun pm pack failed with exit code ${status}`);
+        const result = await runResult('bun', ['pm', 'pack', '--filename', tarballName, '--ignore-scripts', '--quiet'], packageDir);
+        if (result.exitCode !== 0) {
+            printCommandOutput(result.stdout, result.stderr);
+            throw new Error(`bun pm pack failed with exit code ${result.exitCode}`);
         }
         const bytes = new Uint8Array(readFileSync(tarballPath));
         return { path: tarballPath, arrayBuffer: bytes.slice().buffer };

package/dist/monorepo/packs/index.js

@@ -1,6 +1,6 @@
 import { chmodSync, existsSync, statSync } from 'node:fs';
 import { join } from 'node:path';
-import { runStatus } from '../../lib/run.js';
+import { printCommandOutput, runResult, runStatus } from '../../lib/run.js';
 import { readProjectTargets } from '../../nx/index.js';
 import { syncBunLockfileVersions, validateBunLockfileVersions } from '../lockfile.js';
 import { validateManagedFiles } from '../managed-files.js';
@@ -221,10 +221,14 @@ async function runBuild(ctx, options = {}) {
     if (options.verbose) {
         printCheckHeading('build', true);
     }
-    const status = await runStatus('nx', ['run-many', '-t', 'build'], ctx.root, options.verbose !== true);
+    const result = options.verbose
+        ? { exitCode: await runStatus('nx', ['run-many', '-t', 'build'], ctx.root, false), stdout: '', stderr: '' }
+        : await runResult('nx', ['run-many', '-t', 'build'], ctx.root);
+    const status = result.exitCode;
     if (status !== 0) {
         if (!options.verbose) {
             printCheckHeading('build', true);
+            printCommandOutput(result.stdout, result.stderr);
         }
         console.error('nx run-many -t build failed');
         printCheckStatus('build', 1);

package/dist/monorepo/publish-workflow.d.ts

@@ -1,6 +1,7 @@
 export type PublishWorkflowBump = 'auto' | 'patch' | 'minor' | 'major' | 'prerelease';
-export type PublishWorkflowCondition = 'version-mode-not-none' | 'failure' | 'always';
+export type PublishWorkflowCondition = 'version-mode-not-none' | 'deploy-production' | 'failure' | 'always';
 export type PublishWorkflowNxTarget = 'build' | 'lint' | 'test';
+export type PublishWorkflowDeployEnvironment = 'none' | 'production';
 export declare enum PublishWorkflowStepKind {
     Checkout = "checkout",
     SetupDevenv = "setup-devenv",
@@ -15,6 +16,7 @@ export declare enum PublishWorkflowStepKind {
     UploadTraceDbs = "upload-trace-dbs",
     ValidateMonorepoConfig = "validate-monorepo-config",
     PublishRelease = "publish-release",
+    DeployProduction = "deploy-production",
     SaveNixDevenv = "save-nix-devenv"
 }
 export interface PublishWorkflowStep {
@@ -29,10 +31,13 @@ export interface PublishWorkflowDefinition {
     steps: PublishWorkflowStep[];
 }
 export interface PublishWorkflowDefinitionOptions {
+    deploy?: boolean;
+    deployProvider?: 'cloudflare';
     repoName?: string;
 }
 export interface PublishWorkflowInputs {
     bump: PublishWorkflowBump;
+    deployEnvironment: PublishWorkflowDeployEnvironment;
     dryRun: boolean;
 }
 export interface PublishWorkflowVersionOutputs {
@@ -66,6 +71,7 @@ export interface PublishWorkflowCallbacks {
         bump: PublishWorkflowBump;
         dryRun: boolean;
     }): Promise<void>;
+    deployProduction(): Promise<void>;
     saveNixDevenv(input: PublishWorkflowSetupOutputs): Promise<void>;
 }
 export interface PublishWorkflowRunContext {

package/dist/monorepo/publish-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish-workflow.d.ts","sourceRoot":"","sources":["../../src/monorepo/publish-workflow.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,YAAY,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,uBAAuB,GAAG,SAAS,GAAG,QAAQ,CAAC;AACtF,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhE,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,WAAW,iBAAiB;IAC5B,sBAAsB,6BAA6B;IACnD,kBAAkB,0BAA0B;IAC5C,qBAAqB,4BAA4B;IACjD,cAAc,oBAAoB;IAClC,yBAAyB,iCAAiC;IAC1D,KAAK,UAAU;IACf,IAAI,SAAS;IACb,SAAS,eAAe;IACxB,cAAc,qBAAqB;IACnC,sBAAsB,6BAA6B;IACnD,cAAc,oBAAoB;IAClC,aAAa,oBAAoB;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACpD,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,qBAAqB,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC9G,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,uBAAuB,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,aAAa,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,SAAS,EAAE,wBAAwB,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,6BAA6B,CAAC;IACvC,MAAM,EAAE,OAAO,CAAC;CACjB;AAID,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,gCAAqC,GAAG,yBAAyB,CA0D/G;AAMD,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAmEnC;AAYD,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,gCAAqC,GAAG,MAAM,CAGhG"}
+{"version":3,"file":"publish-workflow.d.ts","sourceRoot":"","sources":["../../src/monorepo/publish-workflow.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,YAAY,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,uBAAuB,GAAG,mBAAmB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC5G,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAChE,MAAM,MAAM,gCAAgC,GAAG,MAAM,GAAG,YAAY,CAAC;AAErE,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,WAAW,iBAAiB;IAC5B,sBAAsB,6BAA6B;IACnD,kBAAkB,0BAA0B;IAC5C,qBAAqB,4BAA4B;IACjD,cAAc,oBAAoB;IAClC,yBAAyB,iCAAiC;IAC1D,KAAK,UAAU;IACf,IAAI,SAAS;IACb,SAAS,eAAe;IACxB,cAAc,qBAAqB;IACnC,sBAAsB,6BAA6B;IACnD,cAAc,oBAAoB;IAClC,gBAAgB,sBAAsB;IACtC,aAAa,oBAAoB;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,iBAAiB,EAAE,gCAAgC,CAAC;IACpD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACpD,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,qBAAqB,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC9G,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,uBAAuB,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,aAAa,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,SAAS,EAAE,wBAAwB,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,6BAA6B,CAAC;IACvC,MAAM,EAAE,OAAO,CAAC;CACjB;AAID,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,gCAAqC,GAAG,yBAAyB,CAoE/G;AAMD,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAsEnC;AAoBD,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,gCAAqC,GAAG,MAAM,CAGhG"}

package/dist/monorepo/publish-workflow.js

@@ -14,6 +14,7 @@ export var PublishWorkflowStepKind;
     PublishWorkflowStepKind["UploadTraceDbs"] = "upload-trace-dbs";
     PublishWorkflowStepKind["ValidateMonorepoConfig"] = "validate-monorepo-config";
     PublishWorkflowStepKind["PublishRelease"] = "publish-release";
+    PublishWorkflowStepKind["DeployProduction"] = "deploy-production";
     PublishWorkflowStepKind["SaveNixDevenv"] = "save-nix-devenv";
 })(PublishWorkflowStepKind || (PublishWorkflowStepKind = {}));
 export function definePublishWorkflow(options = {}) {
@@ -26,6 +27,19 @@ export function definePublishWorkflow(options = {}) {
     if (isSmoothBricksCodebasePackageName(options.repoName)) {
         setupSteps.push({ kind: PublishWorkflowStepKind.BuildSelfHostedCli, name: '🏗️ Build self-hosted smoo' });
     }
+    const releaseSteps = [
+        {
+            kind: PublishWorkflowStepKind.PublishRelease,
+            name: `📦 Publish release (${versionMode})`,
+        },
+    ];
+    if (options.deploy === true) {
+        releaseSteps.push({
+            kind: PublishWorkflowStepKind.DeployProduction,
+            name: '🚀 Deploy production',
+            condition: 'deploy-production',
+        });
+    }
     return {
         steps: numberWorkflowSteps([
             ...setupSteps,
@@ -63,10 +77,7 @@ export function definePublishWorkflow(options = {}) {
                 name: `✅ Validate monorepo config (${versionMode})`,
                 condition: 'version-mode-not-none',
             },
-            {
-                kind: PublishWorkflowStepKind.PublishRelease,
-                name: `📦 Publish release (${versionMode})`,
-            },
+            ...releaseSteps,
             {
                 kind: PublishWorkflowStepKind.SaveNixDevenv,
                 name: '🧹 Cleanup and cache Nix/devenv',
@@ -84,7 +95,7 @@ export async function runPublishWorkflow(workflow, context) {
     let failed = false;
     let failure;
     for (const step of workflow.steps) {
-        if (!shouldRunStep(step, version, failed)) {
+        if (!shouldRunStep(step, version, failed, context.inputs)) {
             continue;
         }
         try {
@@ -132,6 +143,9 @@ export async function runPublishWorkflow(workflow, context) {
                         dryRun: context.inputs.dryRun,
                     });
                     break;
+                case PublishWorkflowStepKind.DeployProduction:
+                    await context.callbacks.deployProduction();
+                    break;
                 case PublishWorkflowStepKind.SaveNixDevenv:
                     await context.callbacks.saveNixDevenv(setupOutputs);
                     break;
@@ -147,10 +161,13 @@ export async function runPublishWorkflow(workflow, context) {
     }
     return { version, failed };
 }
-function shouldRunStep(step, version, failed) {
+function shouldRunStep(step, version, failed, inputs) {
     if (step.condition === 'version-mode-not-none') {
         return version.mode !== 'none';
     }
+    if (step.condition === 'deploy-production') {
+        return version.mode !== 'none' && inputs.deployEnvironment === 'production' && !inputs.dryRun;
+    }
     if (step.condition === 'failure') {
         return failed;
     }
@@ -158,9 +175,17 @@ function shouldRunStep(step, version, failed) {
 }
 export function renderPublishWorkflowYaml(options = {}) {
     const steps = definePublishWorkflow(options).steps;
-    return `${renderPublishWorkflowHeader()}${renderPublishWorkflowSteps(steps)}`;
+    return `${renderPublishWorkflowHeader(options)}${renderPublishWorkflowSteps(steps, options)}`;
 }
-function renderPublishWorkflowHeader() {
+function renderPublishWorkflowHeader(options) {
+    const deployInput = options.deploy === true
+        ? `
+      deploy_environment:
+        type: choice
+        description: Deploy live systems after a successful publish.
+        options: [none, production]
+        default: none`
+        : '';
     return `name: Publish
 
 on:
@@ -176,7 +201,7 @@ on:
       dry_run:
         type: boolean
         description: Run release commands without writing versions, tags, publishes, or GitHub Releases.
-        default: false
+        default: false${deployInput}
 
 permissions:
   contents: write
@@ -199,12 +224,12 @@ jobs:
     steps:
 `;
 }
-function renderPublishWorkflowSteps(steps) {
+function renderPublishWorkflowSteps(steps, options) {
     const lines = [];
     for (const step of steps) {
         lines.push(...sectionLinesBefore(step));
         lines.push(...commentLinesForStep(step));
-        lines.push(...yamlLinesForStep(step));
+        lines.push(...yamlLinesForStep(step, options));
         lines.push('');
     }
     return `${lines.join('\n').trimEnd()}\n`;
@@ -244,7 +269,7 @@ function commentLinesForStep(step) {
     }
     return [`      # Step ${step.number}`];
 }
-function yamlLinesForStep(step) {
+function yamlLinesForStep(step, options) {
     switch (step.kind) {
         case PublishWorkflowStepKind.Checkout:
             return [
@@ -312,6 +337,8 @@ function yamlLinesForStep(step) {
                 '        # Missing package names are bootstrapped locally before trust setup.',
                 `        run: smoo release publish --bump "${githubExpression('inputs.bump')}" --dry-run "${githubExpression('inputs.dry_run')}"`,
             ];
+        case PublishWorkflowStepKind.DeployProduction:
+            return deployProductionStep(step, options);
         case PublishWorkflowStepKind.SaveNixDevenv:
             return [
                 `      - name: ${step.name}`,
@@ -323,13 +350,30 @@ function yamlLinesForStep(step) {
             ];
     }
 }
-function conditionalRunStep(step, run) {
+function deployProductionStep(step, options) {
     return [
         `      - name: ${step.name}`,
-        `        if: ${githubExpression("steps.version.outputs.mode != 'none'")}`,
-        `        run: ${run}`,
+        '        if:',
+        "          ${{ steps.version.outputs.mode != 'none' && inputs.deploy_environment == 'production' && inputs.dry_run !=",
+        "          'true' }}",
+        ...deployEnvLines(options),
+        '        run: smoo github-ci nx-deploy --configuration production --mode run-many --verify --name "Deploy Production"',
     ];
 }
+function deployEnvLines(options) {
+    if (options.deployProvider !== 'cloudflare') {
+        return [];
+    }
+    return [
+        '        env:',
+        '          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}',
+        '          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}',
+    ];
+}
+function conditionalRunStep(step, run) {
+    const condition = "steps.version.outputs.mode != 'none'";
+    return [`      - name: ${step.name}`, `        if: ${githubExpression(condition)}`, `        run: ${run}`];
+}
 function githubExpression(expression) {
     return ['$', '{{ ', expression, ' }}'].join('');
 }

package/managed/raw/git-format-staged.yml

@@ -42,6 +42,10 @@ formatters:
       - '!*.nix'
       # Bun lockfiles are generated and should not be rewritten by Prettier
       - '!bun.lock'
+      # Binary artifacts: Prettier reads them as UTF-8 and can corrupt them
+      # by replacing invalid byte sequences.
+      - '!*.wasm'
+      - '!*.wasm.sha256'
 
   # Alejandra for Nix files
   alejandra:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smoothbricks/cli",
-  "version": "0.3.4",
+  "version": "0.4.1",
   "type": "module",
   "description": "SmoothBricks monorepo automation CLI",
   "bin": {
@@ -45,7 +45,7 @@
   ],
   "dependencies": {
     "@arethetypeswrong/cli": "^0.18.2",
-    "@smoothbricks/nx-plugin": "0.2.3",
+    "@smoothbricks/nx-plugin": "0.2.4",
     "@smoothbricks/validation": "0.1.1",
     "commander": "^14.0.3",
     "publint": "^0.3.18",

package/src/cli.ts

@@ -298,18 +298,48 @@ function buildProgram(): Command {
     .requiredOption('--target <target>')
     .option('--name <name>')
     .option('--step <step>')
-    .action(async (options: { target: string; name?: string; step?: string }) => {
-      const { githubCiNxSmart } = await import('./github-ci/index.js');
-      await githubCiNxSmart(await findRepoRoot(), options);
-    });
+    .option('--mode <mode>', 'auto, affected, or run-many', 'auto')
+    .option('--configuration <configuration>')
+    .action(
+      async (options: {
+        target: string;
+        name?: string;
+        step?: string;
+        mode?: 'auto' | 'affected' | 'run-many';
+        configuration?: string;
+      }) => {
+        const { githubCiNxSmart } = await import('./github-ci/index.js');
+        await githubCiNxSmart(await findRepoRoot(), options);
+      },
+    );
   githubCi
     .command('nx-run-many')
     .requiredOption('--targets <targets>')
     .option('--projects <projects>')
-    .action(async (options: { targets: string; projects?: string }) => {
+    .option('--configuration <configuration>')
+    .action(async (options: { targets: string; projects?: string; configuration?: string }) => {
       const { githubCiNxRunMany } = await import('./github-ci/index.js');
       await githubCiNxRunMany(await findRepoRoot(), options);
     });
+  githubCi
+    .command('nx-deploy')
+    .requiredOption('--configuration <configuration>')
+    .option('--mode <mode>', 'auto, affected, or run-many', 'run-many')
+    .option('--name <name>')
+    .option('--step <step>')
+    .option('--verify', 'run build, lint, and test before deploy')
+    .action(
+      async (options: {
+        configuration: string;
+        mode?: 'auto' | 'affected' | 'run-many';
+        name?: string;
+        step?: string;
+        verify?: boolean;
+      }) => {
+        const { githubCiNxDeploy } = await import('./github-ci/index.js');
+        await githubCiNxDeploy(await findRepoRoot(), options);
+      },
+    );
 
   return program;
 }

package/src/github-ci/index.ts

@@ -4,6 +4,8 @@ import { dirname, join } from 'node:path';
 import { $ } from 'bun';
 import { decode, run, runStatus } from '../lib/run.js';
 
+type NxSmartMode = 'auto' | 'affected' | 'run-many';
+
 export async function cleanupGithubCiCache(root: string): Promise<void> {
   const githubOutput = process.env.GITHUB_OUTPUT;
   const markCacheReady = async (ready: boolean): Promise<void> => {
@@ -113,17 +115,17 @@ async function addReferencesFrom(roots: Set<string>, path: string, cwd: string):
 
 export async function githubCiNxSmart(
   root: string,
-  options: { target: string; name?: string; step?: string },
+  options: { target: string; name?: string; step?: string; mode?: NxSmartMode; configuration?: string },
 ): Promise<void> {
   const name = options.name ?? options.target;
   const step = options.step ?? '';
   await createGithubStatus(name, step);
-  const mode =
-    process.env.GITHUB_EVENT_NAME === 'push' && process.env.GITHUB_REF_NAME === 'main' ? 'run-many' : 'affected';
-  const nxArgs =
-    mode === 'run-many'
-      ? ['run-many', '-t', options.target, '--parallel=5']
-      : ['affected', '-t', options.target, '--parallel=5'];
+  const mode = resolveNxSmartMode(options.mode ?? 'auto');
+  const nxArgs = mode === 'run-many' ? ['run-many', '-t', options.target] : ['affected', '-t', options.target];
+  if (options.configuration) {
+    nxArgs.push(`--configuration=${options.configuration}`);
+  }
+  nxArgs.push('--parallel=5');
   const status = await runStatus('nx', nxArgs, root);
   await updateGithubStatus(name, status === 0 ? 'success' : 'failure', step);
   if (status !== 0) {
@@ -131,14 +133,98 @@ export async function githubCiNxSmart(
   }
 }
 
-export async function githubCiNxRunMany(root: string, options: { targets: string; projects?: string }): Promise<void> {
+export async function githubCiNxRunMany(
+  root: string,
+  options: { targets: string; projects?: string; configuration?: string },
+): Promise<void> {
   const nxArgs = ['run-many', '-t', options.targets, '--parallel=5'];
   if (options.projects) {
     nxArgs.push(`--projects=${options.projects}`);
   }
+  if (options.configuration) {
+    nxArgs.push(`--configuration=${options.configuration}`);
+  }
   await run('nx', nxArgs, root);
 }
 
+export async function githubCiNxDeploy(
+  root: string,
+  options: { configuration: string; mode?: NxSmartMode; name?: string; step?: string; verify?: boolean },
+): Promise<void> {
+  const name = options.name ?? `Deploy ${options.configuration}`;
+  const step = options.step ?? '';
+  await createGithubStatus(name, step);
+  const mode = resolveNxSmartMode(options.mode ?? 'run-many');
+  const projects = await deployProjectsWithConfiguration(root, options.configuration, mode);
+  if (projects.length === 0) {
+    console.log(`No ${mode} deploy projects with configuration ${options.configuration}; skipping.`);
+    await updateGithubStatus(name, 'success', step);
+    return;
+  }
+
+  const projectList = projects.join(',');
+  const targets = options.verify === true ? ['build', 'lint', 'test', 'deploy'] : ['deploy'];
+  for (const target of targets) {
+    const nxArgs = ['run-many', '-t', target, `--projects=${projectList}`, '--parallel=5'];
+    if (target === 'deploy') {
+      nxArgs.push(`--configuration=${options.configuration}`);
+    }
+    const status = await runStatus('nx', nxArgs, root);
+    if (status !== 0) {
+      await updateGithubStatus(name, 'failure', step);
+      throw new Error(`nx ${nxArgs.join(' ')} failed with exit code ${status}`);
+    }
+  }
+  await updateGithubStatus(name, 'success', step);
+}
+
+function resolveNxSmartMode(mode: NxSmartMode): 'affected' | 'run-many' {
+  if (mode === 'affected' || mode === 'run-many') {
+    return mode;
+  }
+  return process.env.GITHUB_EVENT_NAME === 'push' && process.env.GITHUB_REF_NAME === 'main' ? 'run-many' : 'affected';
+}
+
+async function deployProjectsWithConfiguration(
+  root: string,
+  configuration: string,
+  mode: 'affected' | 'run-many',
+): Promise<string[]> {
+  const listArgs =
+    mode === 'affected'
+      ? ['show', 'projects', '--affected', '--withTarget', 'deploy', '--json']
+      : ['show', 'projects', '--withTarget', 'deploy', '--json'];
+  const result = await $`nx ${listArgs}`.cwd(root).quiet();
+  const candidates = nxProjectList(decode(result.stdout));
+  const projects: string[] = [];
+  for (const project of candidates) {
+    if (await deployTargetHasConfiguration(root, project, configuration)) {
+      projects.push(project);
+    }
+  }
+  return projects.sort((a, b) => a.localeCompare(b));
+}
+
+async function deployTargetHasConfiguration(root: string, project: string, configuration: string): Promise<boolean> {
+  const result = await $`nx show project ${project} --json`.cwd(root).quiet();
+  const parsed: unknown = JSON.parse(decode(result.stdout));
+  const targets = recordValue(parsed)?.targets;
+  const deploy = recordValue(targets)?.deploy;
+  const configurations = recordValue(deploy)?.configurations;
+  return recordValue(configurations)?.[configuration] !== undefined;
+}
+
+function nxProjectList(output: string): string[] {
+  const parsed: unknown = JSON.parse(output);
+  return Array.isArray(parsed) ? parsed.filter((project): project is string => typeof project === 'string') : [];
+}
+
+function recordValue(value: unknown): Record<string, unknown> | undefined {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : undefined;
+}
+
 async function createGithubStatus(name: string, step: string): Promise<void> {
   await postGithubStatus(name, 'pending', `Running ${name}...`, step);
 }

package/src/lib/run.ts

@@ -70,6 +70,15 @@ export async function runResult(
   };
 }
 
+export function printCommandOutput(stdout: string, stderr: string): void {
+  if (stdout.length > 0) {
+    console.log(trimTrailingNewline(stdout));
+  }
+  if (stderr.length > 0) {
+    console.error(trimTrailingNewline(stderr));
+  }
+}
+
 function mergeEnv(env: Record<string, string>): Record<string, string> {
   const merged: Record<string, string> = {};
   for (const [key, value] of Object.entries(process.env)) {
@@ -118,3 +127,7 @@ export async function findRepoRoot(): Promise<string> {
 export function decode(bytes: Uint8Array): string {
   return new TextDecoder().decode(bytes);
 }
+
+function trimTrailingNewline(value: string): string {
+  return value.endsWith('\n') ? value.slice(0, -1) : value;
+}

package/src/monorepo/__tests__/ci-workflow.test.ts

@@ -0,0 +1,34 @@
+import { describe, expect, it } from 'bun:test';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { CiWorkflowStepKind, defineCiWorkflow, renderCiWorkflowYaml } from '../ci-workflow.js';
+
+describe('CI workflow definition', () => {
+  it('renders the checked-in local CI workflow copy', async () => {
+    const rendered = renderCiWorkflowYaml({ deploy: false, pushBranches: ['main'] });
+    const packageRoot = join(import.meta.dir, '..', '..', '..');
+
+    await expect(readFile(join(packageRoot, '..', '..', '.github/workflows/ci.yml'), 'utf8')).resolves.toBe(rendered);
+  });
+
+  it('inserts deploy after tests and renumbers following deeplink steps', () => {
+    const steps = defineCiWorkflow({ deploy: true, pushBranches: ['main'] });
+    const rendered = renderCiWorkflowYaml({ deploy: true, pushBranches: ['main'] });
+
+    expect(steps.map((step) => [step.kind, step.number])).toContainEqual([CiWorkflowStepKind.Deploy, 9]);
+    expect(rendered).toContain('- name: 🚀 Deploy Staging');
+    expect(rendered).not.toContain('CLOUDFLARE_API_TOKEN');
+    expect(rendered).not.toContain('CLOUDFLARE_ACCOUNT_ID');
+    expect(rendered).toContain(
+      'smoo github-ci nx-deploy --configuration staging --mode affected --name "Deploy Staging" --step 9',
+    );
+    expect(rendered).toContain("# Step 10\n      # Nx's database cache needs artifact files");
+  });
+
+  it('adds Cloudflare credentials for Wrangler-backed deploys', () => {
+    const rendered = renderCiWorkflowYaml({ deploy: true, deployProvider: 'cloudflare', pushBranches: ['main'] });
+
+    expect(rendered).toContain('CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}');
+    expect(rendered).toContain('CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}');
+  });
+});