polyci 0.0.1

package/dist/cli.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import main from "./main.js";
+main();

package/dist/main.js

@@ -0,0 +1,323 @@
+import { Command } from "commander";
+import { execSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import pino from "pino";
+import pretty from "pino-pretty";
+const log = pino(pretty());
+function exec(command, cwd) {
+    return execSync(command, {
+        encoding: "utf8",
+        cwd: cwd ?? process.cwd(),
+    }).trim();
+}
+const BRANCH_RULE = "/^(main)|(develop)|(release(-[a-z0-9]+)*)|(feature(-[a-z0-9]+)*)|(patch(-[a-z0-9]+)*)$/";
+const IGNORED_DIRS = new Set(["node_modules", ".git", "dist"]);
+function parseArgs() {
+    const program = new Command();
+    program
+        .argument("[output]", "Output pipeline file path (or use --output)")
+        .option("-o, --output <path>", "Output pipeline file path")
+        .option("--cwd <path>", "Working directory", process.cwd())
+        .parse();
+    const options = program.opts();
+    const output = options.output ?? program.args[0] ?? "";
+    const cwd = path.resolve(options.cwd);
+    return { cwd, output };
+}
+function toPosixPath(p) {
+    return p.split(path.sep).join("/");
+}
+function toJobId(value) {
+    return value
+        .replace(/[^a-zA-Z0-9_]/g, "_")
+        .replace(/_+/g, "_")
+        .replace(/^_+|_+$/g, "")
+        .toLowerCase();
+}
+function detectModuleType(directory) {
+    const packageJson = path.join(directory, "package.json");
+    const viteConfig = path.join(directory, "vite.config.ts");
+    if (fs.existsSync(packageJson) && fs.existsSync(viteConfig)) {
+        return "node-vite";
+    }
+    if (!fs.existsSync(packageJson)) {
+        return null;
+    }
+    try {
+        const packageData = fs.readFileSync(packageJson, "utf8");
+        const packageJsonParsed = JSON.parse(packageData);
+        if (packageJsonParsed.dependencies?.express !== undefined) {
+            return "node-express";
+        }
+    }
+    catch (error) {
+        log.warn({ directory, error }, "Unable to read package.json while detecting module type");
+    }
+    return null;
+}
+function discoverModulesRecursively(scanDir, repoRoot, modules) {
+    const moduleType = detectModuleType(scanDir);
+    if (moduleType !== null) {
+        const relativeModulePath = toPosixPath(path.relative(repoRoot, scanDir));
+        const moduleName = path.basename(scanDir);
+        modules.push({
+            moduleName,
+            modulePath: relativeModulePath,
+            moduleType,
+            jobId: toJobId(relativeModulePath),
+        });
+        return;
+    }
+    const entries = fs.readdirSync(scanDir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        if (IGNORED_DIRS.has(entry.name))
+            continue;
+        discoverModulesRecursively(path.join(scanDir, entry.name), repoRoot, modules);
+    }
+}
+function discoverModules(repoRoot) {
+    const modulesRoot = path.join(repoRoot, "modules");
+    if (!fs.existsSync(modulesRoot) || !fs.statSync(modulesRoot).isDirectory()) {
+        return [];
+    }
+    const modules = [];
+    discoverModulesRecursively(modulesRoot, repoRoot, modules);
+    modules.sort((a, b) => a.modulePath.localeCompare(b.modulePath));
+    return modules;
+}
+function appendGlobalVariables(lines) {
+    lines.push("variables:");
+    lines.push("  IMAGE_LINUX: alpine:latest #alpine:3.23.3");
+    lines.push("  IMAGE_NODE: node:alpine #node:25.6.0-alpine3.23");
+    lines.push("  IMAGE_GIT: alpine/git:latest");
+    lines.push("  IMAGE_NGINX: nginx:alpine-slim #nginx:1.29.5-alpine3.23-slim");
+    lines.push("  IMAGE_DOCKER: docker:latest #docker:29.2.1-dind-alpine3.23");
+    lines.push("  IMAGE_COMPOSE: docker:cli");
+    lines.push("  GIT_PACKAGE: git #git=2.47.2-r0");
+    lines.push("");
+    lines.push("stages:");
+    lines.push("  - build");
+    lines.push("  - test");
+    lines.push("  - release");
+    lines.push("  - publish");
+    lines.push("  - deploy");
+    lines.push("");
+}
+function appendRulesForModule(lines, modulePath) {
+    lines.push("  rules:");
+    lines.push("    - if: $CI_COMMIT_MESSAGE =~ /^release:/");
+    lines.push("      when: never");
+    lines.push(`    - if: $CI_COMMIT_BRANCH =~ ${BRANCH_RULE}`);
+    lines.push("      changes:");
+    lines.push(`        - ${modulePath}/**/*`);
+}
+function appendModuleBuildJob(lines, module) {
+    lines.push(`${module.jobId}_build:`);
+    lines.push("  stage: build");
+    appendRulesForModule(lines, module.modulePath);
+    lines.push("  image: $IMAGE_NODE");
+    lines.push("  variables:");
+    lines.push(`    MODULE_NAME: ${module.moduleName}`);
+    lines.push(`    MODULE_PATH: ${module.modulePath}`);
+    lines.push(`    MODULE_TYPE: ${module.moduleType}`);
+    lines.push("  script:");
+    lines.push("    - cd $MODULE_PATH");
+    lines.push("    - npm ci");
+    lines.push("    - npm run build");
+    lines.push("  artifacts:");
+    lines.push("    paths:");
+    lines.push("      - $MODULE_PATH/dist/");
+    lines.push("    expire_in: 1 day");
+    lines.push("");
+}
+function appendModuleTestJob(lines, module) {
+    lines.push(`${module.jobId}_test:`);
+    lines.push("  stage: test");
+    appendRulesForModule(lines, module.modulePath);
+    lines.push("  needs:");
+    lines.push(`    - job: ${module.jobId}_build`);
+    lines.push("      optional: true");
+    lines.push("  image: $IMAGE_LINUX");
+    lines.push("  variables:");
+    lines.push(`    MODULE_NAME: ${module.moduleName}`);
+    lines.push(`    MODULE_PATH: ${module.modulePath}`);
+    lines.push(`    MODULE_TYPE: ${module.moduleType}`);
+    lines.push("  script:");
+    lines.push("    - cd $MODULE_PATH");
+    lines.push('    - echo "test is tasty"');
+    lines.push("");
+}
+function appendGlobalReleaseJob(lines, modules) {
+    lines.push("release_and_tag:");
+    lines.push("  stage: release");
+    lines.push("  image: $IMAGE_NODE");
+    lines.push("  variables:");
+    lines.push("    GITLAB_TOKEN: $SEMANTIC_RELEASE_TOKEN # Used to push release commits/tags.");
+    lines.push("  script:");
+    lines.push("    - apk update");
+    lines.push("    - apk add $GIT_PACKAGE");
+    lines.push("    - |");
+    lines.push("      set -euo pipefail");
+    lines.push("      git config user.email \"ci-release@local\"");
+    lines.push("      git config user.name \"CI Release\"");
+    lines.push("      git remote set-url origin \"https://oauth2:${GITLAB_TOKEN}@${CI_SERVER_HOST}/${CI_PROJECT_PATH}.git\"");
+    lines.push("");
+    lines.push("      if [ -n \"${CI_COMMIT_BEFORE_SHA:-}\" ] && [ \"${CI_COMMIT_BEFORE_SHA}\" != \"0000000000000000000000000000000000000000\" ]; then");
+    lines.push("        CHANGED_FILES=$(git diff --name-only \"${CI_COMMIT_BEFORE_SHA}\" \"${CI_COMMIT_SHA}\")");
+    lines.push("      else");
+    lines.push("        CHANGED_FILES=$(git show --pretty='' --name-only \"${CI_COMMIT_SHA}\")");
+    lines.push("      fi");
+    lines.push("");
+    lines.push("      MODULE_MATRIX=$(cat <<'EOF'");
+    for (const module of modules) {
+        lines.push(`      ${module.moduleName}|${module.modulePath}`);
+    }
+    lines.push("      EOF");
+    lines.push("      )");
+    lines.push("");
+    lines.push("      AFFECTED_MODULES=\"\"");
+    lines.push("      while IFS='|' read -r MODULE_NAME MODULE_PATH; do");
+    lines.push("        [ -n \"${MODULE_NAME}\" ] || continue");
+    lines.push("        if printf '%s\\n' \"${CHANGED_FILES}\" | grep -q \"^${MODULE_PATH}/\"; then");
+    lines.push("          AFFECTED_MODULES=\"${AFFECTED_MODULES} ${MODULE_NAME}|${MODULE_PATH}\"");
+    lines.push("        fi");
+    lines.push("      done <<'EOF'");
+    for (const module of modules) {
+        lines.push(`      ${module.moduleName}|${module.modulePath}`);
+    }
+    lines.push("      EOF");
+    lines.push("");
+    lines.push("      if [ -z \"${AFFECTED_MODULES}\" ]; then");
+    lines.push("        echo \"No affected modules in current commit range\" ");
+    lines.push("        exit 0");
+    lines.push("      fi");
+    lines.push("");
+    lines.push("      for entry in ${AFFECTED_MODULES}; do");
+    lines.push("        MODULE_NAME=${entry%%|*}");
+    lines.push("        MODULE_PATH=${entry#*|}");
+    lines.push("        echo \"Tagging release for ${MODULE_NAME} (${MODULE_PATH})\"");
+    lines.push("        cd \"${MODULE_PATH}\"");
+    lines.push("        npm ci");
+    lines.push("        npx semalease semalease.env");
+    lines.push("        source semalease.env");
+    lines.push("        cd - >/dev/null");
+    lines.push("");
+    lines.push("        if [ -z \"${NEXT_VERSION:-}\" ]; then");
+    lines.push("          echo \"No NEXT_VERSION for ${MODULE_NAME}, skipping tag\"");
+    lines.push("          continue");
+    lines.push("        fi");
+    lines.push("");
+    lines.push("        TAG_NAME=\"${MODULE_NAME}/v${NEXT_VERSION}\"");
+    lines.push("        if git rev-parse \"${TAG_NAME}\" >/dev/null 2>&1; then");
+    lines.push("          echo \"Tag ${TAG_NAME} already exists, skipping\"");
+    lines.push("          continue");
+    lines.push("        fi");
+    lines.push("        git tag \"${TAG_NAME}\"");
+    lines.push("      done");
+    lines.push("");
+    lines.push("      if [ -n \"$(git status --porcelain)\" ]; then");
+    lines.push("        git add -A");
+    lines.push("        git commit -m \"release: update affected modules\"");
+    lines.push("      fi");
+    lines.push("");
+    lines.push("      git push origin HEAD");
+    lines.push("      git push origin --tags");
+    lines.push("");
+}
+function appendModulePublishJob(lines, module) {
+    lines.push(`${module.jobId}_publish:`);
+    lines.push("  stage: publish");
+    appendRulesForModule(lines, module.modulePath);
+    lines.push("  needs:");
+    lines.push(`    - job: ${module.jobId}_test`);
+    lines.push("      optional: true");
+    lines.push("    - job: release_and_tag");
+    lines.push("      optional: true");
+    lines.push("  image: $IMAGE_DOCKER");
+    lines.push("  variables:");
+    lines.push(`    MODULE_NAME: ${module.moduleName}`);
+    lines.push(`    MODULE_PATH: ${module.modulePath}`);
+    lines.push(`    MODULE_TYPE: ${module.moduleType}`);
+    lines.push("  script:");
+    lines.push("    - cd $MODULE_PATH");
+    lines.push("    - npm ci");
+    lines.push("    - npx semalease semalease.env");
+    lines.push("    - source semalease.env");
+    lines.push("    - node ../ci/set-release-data.js -i $CI_COMMIT_BRANCH --version=${NEXT_VERSION} -t");
+    lines.push("    - npm run build");
+    lines.push("    - node ci/prepare-deploy-variables.js");
+    lines.push("    - echo -n $CI_JOB_TOKEN | docker login -u $CI_REGISTRY_USER --password-stdin $CI_REGISTRY");
+    lines.push("    - cp ../ci/$MODULE_TYPE/Dockerfile .");
+    lines.push("    - docker build --tag $CI_REGISTRY_IMAGE/$MODULE_NAME:v$INSTANCE_VERSION .");
+    lines.push("    - docker push $CI_REGISTRY_IMAGE/$MODULE_NAME:v$INSTANCE_VERSION");
+    lines.push("  artifacts:");
+    lines.push("    reports:");
+    lines.push("      dotenv: $MODULE_PATH/.env.deploy");
+    lines.push("    expire_in: 1 day");
+    lines.push("");
+}
+function appendModuleDeployJob(lines, module) {
+    lines.push(`${module.jobId}_deploy:`);
+    lines.push("  stage: deploy");
+    appendRulesForModule(lines, module.modulePath);
+    lines.push("  needs:");
+    lines.push(`    - job: ${module.jobId}_publish`);
+    lines.push("      optional: true");
+    lines.push("  image: $IMAGE_COMPOSE");
+    lines.push("  variables:");
+    lines.push(`    MODULE_NAME: ${module.moduleName}`);
+    lines.push(`    MODULE_PATH: ${module.modulePath}`);
+    lines.push(`    MODULE_TYPE: ${module.moduleType}`);
+    lines.push("  script:");
+    lines.push("    - apk add --update --no-cache openssh");
+    lines.push("    - eval $(ssh-agent -s)");
+    lines.push('    - echo "$DEPLOY_USER_KEY" | tr -d \'\\r\' | ssh-add -');
+    lines.push("    - mkdir -p ~/.ssh");
+    lines.push("    - chmod 700 ~/.ssh");
+    lines.push("    - ssh-keyscan -p $DEPLOY_PORT $DEPLOY_ADDRESS >> ~/.ssh/known_hosts");
+    lines.push("    - chmod 644 ~/.ssh/known_hosts");
+    lines.push("    - echo -n $CI_JOB_TOKEN | docker login -u $CI_REGISTRY_USER --password-stdin $CI_REGISTRY");
+    lines.push('    - docker context create remote --docker "host=ssh://$DEPLOY_USER@$DEPLOY_ADDRESS:$DEPLOY_PORT"');
+    lines.push("    - docker context use remote");
+    lines.push("    - cd ci");
+    lines.push("    - docker compose -p $INSTANCE_CONTAINER down --remove-orphans");
+    lines.push("    - docker compose pull");
+    lines.push("    - docker compose -p $INSTANCE_CONTAINER up -d");
+    lines.push("    - rm -rf ~/.ssh");
+    lines.push("");
+}
+function buildPipeline(modules) {
+    const lines = [];
+    appendGlobalVariables(lines);
+    for (const module of modules) {
+        appendModuleBuildJob(lines, module);
+        appendModuleTestJob(lines, module);
+    }
+    appendGlobalReleaseJob(lines, modules);
+    for (const module of modules) {
+        appendModulePublishJob(lines, module);
+        appendModuleDeployJob(lines, module);
+    }
+    return `${lines.join("\n").trimEnd()}\n`;
+}
+function main() {
+    const { cwd, output } = parseArgs();
+    if (!output) {
+        log.error("Output path is required. Use [output] or --output <path>.");
+        process.exit(1);
+    }
+    const modules = discoverModules(cwd);
+    if (modules.length === 0) {
+        log.error({ cwd }, "No supported modules were discovered under ./modules");
+        process.exit(1);
+    }
+    const pipeline = buildPipeline(modules);
+    const outputPath = path.resolve(cwd, output);
+    fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+    fs.writeFileSync(outputPath, pipeline, "utf8");
+    log.info({ modules: modules.map((m) => m.modulePath), outputPath }, "Generated GitLab pipeline");
+}
+export default main;

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "polyci",
+  "description": "Monorepo CI/CD utilities.",
+  "version": "0.0.1",
+  "type": "module",
+  "private": false,
+  "author": "Alexander Tsarev",
+  "license": "MIT",
+  "main": "./dist/main.js",
+  "bin": "./dist/cli.js",
+  "files": ["dist", "readme.md"],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx main.ts"
+  },
+  "dependencies": {
+    "commander": "^14.0.3",
+    "pino": "^10.3.1",
+    "pino-pretty": "^13.1.3"
+  },
+  "devDependencies": {
+    "@types/node": "^25.3.3",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}