pipecraft 0.0.0-releaseit → 0.26.0

package/.github/example/workflows/job.analyze.code.yml

@@ -1,26 +0,0 @@
-name: CodeQL Analysis
-
-on:
-  workflow_call: 
-  workflow_dispatch: 
-
-jobs:
-  analyze:
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-    strategy:
-      fail-fast: false
-      matrix:
-        language: [javascript, typescript]
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-      # - name: Initialize CodeQL
-      #   uses: github/codeql-action/init@v3
-      #   with:
-      #     languages: ${{ matrix.language }}
-      # - name: Perform CodeQL Analysis
-      #   uses: github/codeql-action/analyze@v3

package/.github/example/workflows/job.analyze.docker.yml

@@ -1,32 +0,0 @@
-name: Trivy Security Scan
-
-on:
-    workflow_call: 
-    workflow_dispatch:
-
-jobs:
-  analyze:
-    runs-on: ubuntu-latest
-    container: aquasec/trivy:latest  # 🔹 Use Trivy's Docker image directly
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v4
-
-      # ✅ Scan all directories containing a Dockerfile for misconfigurations
-      - name: Scan Dockerfile Misconfigurations
-        run: |
-          echo "Scanning directories containing Dockerfiles..."
-          for dir in $(find . -name "Dockerfile" -exec dirname {} \; | sort -u); do
-            echo "Scanning $dir..."
-            trivy config --severity HIGH,CRITICAL --exit-code 1 "$dir"
-          done
-
-      # ✅ Scan images listed in Docker Compose files
-      - name: Scan Docker Compose Images
-        run: |
-          echo "Extracting images from docker-compose.yml files..."
-          images=$(grep -hPo '(?<=image: )\S+' **/docker-compose.yml | sort -u || true)
-          for image in $images; do
-            echo "Scanning $image..."
-            trivy image --exit-code 1 --severity HIGH,CRITICAL "$image"
-          done

package/.github/example/workflows/job.app.api.deploy.yml

@@ -1,127 +0,0 @@
-name: "API:Job:Deploy"
-
-on:
-  workflow_call:
-    inputs:
-      version:
-        description: 'The version to deploy'
-        required: true
-        type: string
-      project_id:
-        description: 'The project ID for the environment'
-        required: true
-        type: string
-
-jobs:
-  deploy:
-    environment: ${{ github.ref_name == 'main' && 'production' || github.ref_name }}
-    env: 
-      ENV: ${{ github.ref_name == 'main' && 'production' || github.ref_name }}
-      API_DIR: "apps/api"
-      PROJECT_ID: ${{ inputs.project_id }}
-      REGION: "us-east4"
-
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-tags: true
-
-      - name: Debug Environment Variables
-        run: |
-          echo "PROJECT_ID from env: $PROJECT_ID"
-          echo "Input project_id: ${{ inputs.project_id }}"
-          echo "All environment variables:"
-          env | sort
-            
-
-      - name: Get SHA for "migration" tag
-        id: get-migration-sha
-        run: |
-          if git rev-parse refs/tags/migration >/dev/null 2>&1; then
-            echo "MIGRATION_SHA=$(git rev-parse refs/tags/_migration-${{ env.ENV }})"
-            echo "MIGRATION_SHA=$(git rev-parse refs/tags/_migration-${{ env.ENV }})" >> $GITHUB_ENV
-          else
-            echo "MIGRATION_SHA=${GITHUB_SHA}" >> $GITHUB_ENV
-          fi
-
-      - name: Get changes in migrations folder
-        id: changed-files-migrations
-        uses: tj-actions/changed-files@v42
-        with:
-          files: apps/api/migrations/**
-          sha: ${{ env.MIGRATION_SHA }}
-
-
-      - name: Authenticate with Google
-        uses: 'google-github-actions/auth@v2'
-        with:
-          project_id: ${{ env.PROJECT_ID }}
-          credentials_json: ${{ secrets.GCP_CREDENTIALS }}
-
-      - name: Build and Push Container
-        uses: whoan/docker-build-with-cache-action@v5
-        with:
-          username: _json_key
-          password: ${{ secrets.GCP_CREDENTIALS }}
-          registry: ${{ vars.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ vars.AR_REPO }}
-          image_name: api-${{ env.PROJECT_ID }}
-          image_tag: ${{ github.sha }}
-          context: .
-          dockerfile: ${{ env.API_DIR }}/Dockerfile
-
-      # - name: Deploy to Cloud Run with Migration
-      #   id: migration
-      #   if: steps.changed-files-migrations.outputs.any_changed == 'true' || github.event.inputs.migration_input == true
-      #   uses: google-github-actions/deploy-cloudrun@v2.0.0
-      #   with:
-      #     project_id: ${{ env.PROJECT_ID }}
-      #     service: api-${{ env.PROJECT_ID }}
-      #     region: ${{ env.REGION }}
-      #     image: ${{ vars.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ vars.AR_REPO }}/api-${{ env.PROJECT_ID }}:${{ github.sha }}
-      #     env_vars: |
-      #       MIGRATION=${{ toJson(github.event.inputs.migration_input) || steps.changed-files-migrations.outputs.any_changed }}
-      #       NODE_CONFIG_ENV=${{ env.ENV }}
-      #       SEED=false
-      #     no_traffic: true
-
-      # - name: Create Migration tag 
-      #   if: steps.migration.outcome == 'success'
-      #   uses: actions/github-script@v7
-      #   with:
-      #     script: require('./libs/cicd/upsertTag.cjs')({ github, context, tag:"_migration-${{ env.ENV }}" })
-
-      # - name: Seed Data to Instance
-      #   id: seed
-      #   if: steps.changed-files-migrations.outputs.any_changed == 'true' || github.event.inputs.migration_input == true
-      #   uses: google-github-actions/deploy-cloudrun@v2.0.0
-      #   with:
-      #     project_id: ${{ env.PROJECT_ID }}
-      #     service: api-${{ env.PROJECT_ID }}
-      #     region: ${{ env.REGION }}
-      #     image: ${{ vars.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ vars.AR_REPO }}/api-${{ env.PROJECT_ID }}:${{ github.sha }}
-      #     env_vars: |
-      #       MIGRATION=false
-      #       SEED=${{ github.ref_name == 'main' && 'false' || toJson(github.event.inputs.migration_input) || 'true' }}
-      #       NODE_CONFIG_ENV=${{ env.ENV }}
-      #     no_traffic: true
-
-      - name: Deploy to Cloud Run
-        uses: google-github-actions/deploy-cloudrun@v2.6.1
-        with:
-          project_id: ${{ env.PROJECT_ID }}
-          service: api-${{ env.PROJECT_ID }}
-          region: ${{ env.REGION }}
-          image: ${{ vars.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ vars.AR_REPO }}/api-${{ env.PROJECT_ID }}:${{ github.sha }}
-          env_vars: |
-            MIGRATION=false
-            SEED=false
-            NODE_CONFIG_ENV=${{ env.ENV }}
-
-      
-      # - name: Create Deployed Tag
-      #   uses: actions/github-script@v7
-      #   with:
-      #     script: require('./libs/cicd/upsertTag.cjs')({ github, context, tag:"_deployed-${{ env.ENV }}" })
-     

package/.github/example/workflows/job.app.api.test.yml

@@ -1,102 +0,0 @@
-on:
-  workflow_call:
-  workflow_dispatch:
-
-env:
-  API_DIR: apps/api
-  DOCKER_REGISTRY: https://ghcr.io # the github registry
-  COMPOSE_FILE: apps/api/test/contracts/contract.docker-compose.yml
-
-jobs:
-  blueprint:
-    env:
-      CONTRACT_TYPE: "blueprint"
-    runs-on: ubuntu-latest
-    timeout-minutes: 7
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-tags: true
-
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Start stack
-        shell: bash
-        run: |
-          echo OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }} > ${{ env.API_DIR }}/.env
-          echo CONTRACT_TYPE=${{ env.CONTRACT_TYPE }} >> ${{ env.API_DIR }}/.env
-          docker compose --env-file ${{ env.API_DIR }}/.env -f ${{ env.COMPOSE_FILE }} up --exit-code-from newman
-        
-      - name: Stop stacks
-        if: always()
-        shell: bash
-        run: |
-          docker compose -f ${{ env.COMPOSE_FILE }} down
-  
-  plugin-loader:
-    env:
-      CONTRACT_TYPE: "plugin-loader"
-    runs-on: ubuntu-latest
-    timeout-minutes: 7
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-tags: true
-
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Start stack
-        shell: bash
-        run: |
-          echo OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }} > ${{ env.API_DIR }}/.env
-          echo CONTRACT_TYPE=${{ env.CONTRACT_TYPE }} >> ${{ env.API_DIR }}/.env
-          docker compose --env-file ${{ env.API_DIR }}/.env -f ${{ env.COMPOSE_FILE }} up --exit-code-from newman
-        
-      - name: Stop stacks
-        if: always()
-        shell: bash
-        run: |
-          docker compose -f ${{ env.COMPOSE_FILE }} down 
-
-  raw-parser:
-    env:
-      CONTRACT_TYPE: "raw-parser"
-    runs-on: ubuntu-latest
-    timeout-minutes: 7
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-tags: true
-
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Start stack
-        shell: bash
-        run: |
-          echo CONTRACT_TYPE=${{ env.CONTRACT_TYPE }} > ${{ env.API_DIR }}/.env
-          docker compose --env-file ${{ env.API_DIR }}/.env -f ${{ env.COMPOSE_FILE }} up parser newman --exit-code-from newman
-        
-      - name: Stop stacks
-        if: always()
-        shell: bash
-        run: |
-          docker compose -f ${{ env.COMPOSE_FILE }} down
-

package/.github/example/workflows/job.app.docs.deploy.yml

@@ -1,40 +0,0 @@
-name: "Docs:Deploy"
-
-
-on:
-  workflow_dispatch:
-  push:
-    branches:
-      - main
-    paths:
-      - apps/docs/**/*
-    # Review gh actions docs if you want to further define triggers, paths, etc
-    # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#on
-  workflow_call: 
-    inputs:
-      version:
-        description: 'The version to deploy'
-        required: true
-        type: string
-    
-jobs:
-  deploy:
-    # Grant GITHUB_TOKEN the permissions required to make a Pages deployment
-    permissions:
-      pages: write # to deploy to Pages
-      id-token: write # to verify the deployment originates from an appropriate source
-    if: github.ref == 'refs/heads/main'
-    name: Deploy to GitHub Pages
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Download Build Artifact
-        uses: actions/download-artifact@v3
-        with:
-          name: docs-build
-
-      - name: Deploy to GitHub Pages
-        id: deployment
-        uses: actions/deploy-pages@v4

package/.github/example/workflows/job.app.docs.test.yml

@@ -1,50 +0,0 @@
-name: "Docs:Deploy"
-
-
-on:
-  workflow_dispatch:
-  workflow_call: 
-
-jobs:
-  build:
-    name: Build Docusaurus
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache-dependency-path: 'pnpm-lock.yaml'
-
-      - name: Install pnpm
-        run: npm install -g pnpm
-
-      - name: Get pnpm store directory
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-
-      - uses: actions/cache@v4
-        name: Setup pnpm cache
-        with:
-          path: ${{ env.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
-  
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile --filter @madi/docs
-    
-      - name: Build website
-        working-directory: ./apps/docs
-        run: pnpm run build
-      
-      - name: Upload Build Artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: docs-build
-          path: ./apps/docs/build

package/.github/example/workflows/job.app.web.deploy.yml

@@ -1,96 +0,0 @@
-name: Build and Deploy to Google Cloud Storage
-on:
-  workflow_call:
-    inputs:
-      project_id:
-        description: 'The project ID for the environment'
-        required: true
-        type: string
-      bucket:
-        description: 'The bucket to store the deployment'
-        required: true
-        type: string
-
-jobs:
-  build_and_push_image:
-    environment: ${{ github.ref_name == 'main' && 'production' || github.ref_name }}
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    runs-on: ubuntu-latest
-    env:
-      WORKING_DIR: ./apps/interfaces/web
-      WEB_STORAGE: ${{ inputs.bucket }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Authenticate with Google
-        uses: 'google-github-actions/auth@v2'
-        with:
-          project_id: ${{ inputs.project_id }}
-          credentials_json: ${{ secrets.GCP_CREDENTIALS }}
-
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-
-      - name: Install pnpm
-        run: npm install -g pnpm
-        working-directory: ${{ env.WORKING_DIR }}
-
-      - name: Cache pnpm store
-        uses: actions/cache@v4
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('${{ env.WORKING_DIR }}/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-${{ env.WORKING_DIR }}-
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile -F @madi/web
-
-      - name: Cache Next.js
-        uses: actions/cache@v4
-        with:
-          path: |
-            ~/.pnpm-store
-            ${{ github.workspace }}/${{ env.WORKING_DIR }}/.next/cache
-          key: ${{ runner.os }}-nextjs-${{ env.WORKING_DIR }}-${{ hashFiles('${{ env.WORKING_DIR }}/pnpm-lock.yaml') }}-${{ hashFiles('${{ env.WORKING_DIR }}/**/*.js', '${{ env.WORKING_DIR }}/**/*.jsx', '${{ env.WORKING_DIR }}/**/*.ts', '${{ env.WORKING_DIR }}/**/*.tsx') }}
-          restore-keys: |
-            ${{ runner.os }}-nextjs-${{ env.WORKING_DIR }}-${{ hashFiles('${{ env.WORKING_DIR }}/pnpm-lock.yaml') }}-
-
-      - name: Build the distribution
-        run: pnpm -F @madi/web run build;
-
-      - name: Store release SHA in JSON file
-        working-directory: ${{ env.WORKING_DIR }} 
-        run: |
-          mkdir -p ${{ env.WORKING_DIR }}/dist
-          REPO_NAME=$(echo "${{ github.repository }}" | cut -d'/' -f2)
-          echo '{
-            "sha": "${{ github.sha }}",
-            "owner": "${{ github.repository_owner }}",
-            "repo": "'$REPO_NAME'",
-            "branch": "${{ github.ref_name }}"
-          }' > ${{ env.WORKING_DIR }}/dist/sha.json
-
-      - name: Download Built Documentation
-        uses: actions/download-artifact@v4
-        with:
-          name: docs-build
-          path: ${{ env.WORKING_DIR }}/dist/docs
-
-      - name: 'Set up Cloud SDK'
-        uses: 'google-github-actions/setup-gcloud@v2'
-        with:
-          version: 'latest'
-          project_id: ${{ inputs.project_id }}
-
-      - name: 'Sync dist to bucket (delete the old files)'
-        run: |
-          gsutil -m -h "Cache-Control:public, max-age=0" rsync -d -r "${{ env.WORKING_DIR }}/dist" "gs://${{ env.WEB_STORAGE }}"
-
-## TODO:  Set max-age back up to 3600 when stack stabilizes.
-# gs://web-app-hq-madi-dev-4ebd7d92-7d0cb30c/

package/.github/example/workflows/job.app.web.test.yml

@@ -1,49 +0,0 @@
-name: "Web: Lint & Test"
-
-on:
-  workflow_call:
-  workflow_dispatch:
-    
-jobs:
-  smoke-tests:
-    timeout-minutes: 60
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-      
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-
-      - name: Install pnpm
-        run: npm install -g pnpm
-
-      - name: Cache dependencies
-        uses: actions/cache@v4
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-
-
-      - name: Install dependencies
-        run: pnpm install -F @madi/web
-
-      - name: Cache Playwright browsers
-        id: cache-playwright-browsers
-        uses: actions/cache@v4
-        with:
-          path: ~/.cache/ms-playwright
-          key: ${{ runner.os }}-playwright-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-playwright-
-
-      - name: Install Playwright Browsers
-        run: pnpm exec playwright install --with-deps
-        working-directory: apps/interfaces/web
-      
-      - name: Run Playwright tests
-        run: pnpm exec playwright test
-        working-directory: apps/interfaces/web

package/.github/example/workflows/job.changes.yml

@@ -1,82 +0,0 @@
-name: "Changes"
-
-on:
-  workflow_call:
-    outputs:
-      api: 
-        value: ${{ jobs.changes.outputs.api }}
-      web: 
-        value: ${{ jobs.changes.outputs.web }}
-      docs: 
-        value: ${{ jobs.changes.outputs.docs }}
-      libs: 
-        value: ${{ jobs.changes.outputs.libs }}
-      cicd:
-        value: ${{ jobs.changes.outputs.cicd }}
-      
-  workflow_dispatch:
-
-jobs:
-  changes:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: read
-    outputs:
-      api: ${{ steps.merge.outputs.api }}
-      web: ${{ steps.merge.outputs.web }}
-      docs: ${{ steps.merge.outputs.docs }}
-      libs: ${{ steps.merge.outputs.libs }}
-      cicd: ${{ steps.merge.outputs.cicd }}
-    steps:
-
-    - uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-
-    - name: Set Base Branch
-      id: set-base
-      ## if base branch is develop compare to test.  Test and Main always fully deploy
-      run: |
-        base_branch=$(
-          if [[ '${{ github.ref }}' == 'refs/heads/develop' ]]; then
-            echo 'test'
-          else
-            echo 'develop'
-          fi
-        )
-        echo "Base branch determined: $base_branch"
-        echo "base_branch=$base_branch" >> $GITHUB_ENV
-
-    - uses: dorny/paths-filter@v3
-      id: filter
-      with:
-        base: ${{ env.base_branch }}
-        filters: |
-          api:
-            - 'apps/api/**'
-          web:
-            - 'apps/interfaces/web/**'
-          docs:
-            - 'apps/docs/**'
-          libs:
-            - 'libs/**'
-          cicd: 
-            - '.github/workflows/**'
-
-    - name: Merge filter outputs with branch condition
-      id: merge
-      run: |
-        echo "api=${{ steps.filter.outputs.api == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
-        echo "web=${{ steps.filter.outputs.web == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
-        echo "docs=${{ steps.filter.outputs.docs == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
-        echo "libs=${{ steps.filter.outputs.libs == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
-        echo "cicd=${{ steps.filter.outputs.cicd == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
-
-    - name: Debug Paths Filter Outputs
-      run: |
-        echo "API: ${{ steps.merge.outputs.api }}"
-        echo "WEB: ${{ steps.merge.outputs.web }}"
-        echo "DOCS: ${{ steps.merge.outputs.docs }}"
-        echo "LIBS: ${{ steps.merge.outputs.libs }}"
-        echo "CICD: ${{ steps.merge.outputs.cicd }}"