ci: improved workflow

.github/workflows/check.yml

@@ -1,26 +1,25 @@
 name: Check
 
 on:
-  pull_request:
-    types: [opened, synchronize]
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  workflow_call:
 
 jobs:
   check:
-    name: Check
+    name: Check Quality
     runs-on: ubuntu-latest
 
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: 16
+          node-version: 20
           cache: npm
 
       - name: Install Dependencies

.github/workflows/deploy.yml

@@ -0,0 +1,38 @@
+name: Deploy
+
+on:
+  workflow_call:
+
+jobs:
+  deploy:
+    name: Deploy Apps
+    runs-on: ubuntu-latest
+    concurrency: ${{ github.workflow }}-${{ github.ref }}
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+
+      - name: Install Dependencies
+        run: |
+          npm config set //registry.npmjs.org/:_authToken ${{ secrets.NPM_TOKEN }}
+          npm ci
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ vars.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ vars.AWS_REGION }}
+
+      - name: Deploy Apps
+        run: |
+          export NODE_OPTIONS="--max_old_space_size=4096"
+          npm run build -- --env-mode=loose
+          npm run deploy -- --env-mode=loose

.github/workflows/feature.yml

@@ -0,0 +1,10 @@
+name: Feature
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+jobs:
+  check:
+    uses: ./.github/workflows/check.yml
+    secrets: inherit

.github/workflows/main.yml

@@ -0,0 +1,25 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  check:
+    uses: ./.github/workflows/check.yml
+    secrets: inherit
+
+  version:
+    needs: check
+    uses: ./.github/workflows/version.yml
+    secrets: inherit
+
+  publish:
+    uses: ./.github/workflows/publish.yml
+    secrets: inherit
+
+  deploy:
+    needs: check
+    uses: ./.github/workflows/deploy.yml
+    secrets: inherit

.github/workflows/publish.yml

@@ -0,0 +1,36 @@
+name: Publish
+
+on:
+  workflow_call:
+
+jobs:
+  publish:
+    name: Publish Packages
+    runs-on: ubuntu-latest
+    if: github.event.head_commit.message == 'version packages'
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install Dependencies
+        run: |
+          npm config set //registry.npmjs.org/:_authToken ${{ secrets.NPM_TOKEN }}
+          npm ci
+
+      - name: Build Packages
+        run: |
+          npm run build:packages
+
+      - name: Publish Packages
+        uses: changesets/action@v1
+        with:
+          publish: npx changeset publish
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/version.yml

@@ -0,0 +1,31 @@
+name: Release
+
+on:
+  workflow_call:
+
+jobs:
+  version:
+    name: Version Packages
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install Dependencies
+        run: |
+          npm config set //registry.npmjs.org/:_authToken ${{ secrets.NPM_TOKEN }}
+          npm ci
+
+      - name: Version Packages
+        uses: changesets/action@v1
+        with:
+          commit: version packages
+          publish: echo "This step is not configured for publishing."
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

apps/infrastructure/constructs/ToolkitSite.ts

@@ -2,21 +2,24 @@ import { StaticSite, StaticSiteProps } from "@codedazur/cdk-static-site";
 import { env } from "@codedazur/essentials";
 import { Construct } from "constructs";
 
-interface ToolkitSiteProps extends Omit<StaticSiteProps, "domain"> {
+interface ToolkitSiteProps {
+  directory: string;
   subdomain?: string;
 }
 
 export class ToolkitSite extends StaticSite {
   constructor(
     scope: Construct,
     id: string,
-    { subdomain, ...props }: ToolkitSiteProps,
+    { directory, subdomain }: ToolkitSiteProps,
   ) {
     super(scope, id, {
-      ...props,
-      domain: {
-        name: env("DOMAIN_NAME", "toolkit.codedazur.cloud"),
-        subdomain,
+      source: directory,
+      distribution: {
+        domain: {
+          name: env("DOMAIN_NAME", "toolkit.codedazur.cloud"),
+          subdomain,
+        },
       },
     });
   }

apps/infrastructure/stacks/Storybook.ts

@@ -7,7 +7,7 @@ export class Storybook extends Stack {
     super(scope, id, props);
 
     new ToolkitSite(this, "Storybook", {
-      path: "../storybook/.storybook",
+      directory: "../storybook/.storybook",
       subdomain: env("STORYBOOK_SUBDOMAIN", "storybook"),
     });
   }

apps/infrastructure/stacks/Website.ts

@@ -7,7 +7,7 @@ export class Website extends Stack {
     super(scope, id, props);
 
     new ToolkitSite(this, "Website", {
-      path: "../website/out",
+      directory: "../website/out",
       subdomain: env("WEBSITE_SUBDOMAIN"),
     });
   }