chore(ci): Build using Nix (Ubuntu & macOS)

.dockerignore

@@ -0,0 +1,2 @@
+target
+node-modules

.editorconfig

@@ -0,0 +1,19 @@
+# Editor configuration, see https://editorconfig.org
+root = true
+
+[*]
+charset = utf-8
+indent_style = space
+indent_size = 4
+insert_final_newline = false
+trim_trailing_whitespace = true
+
+[*.md]
+max_line_length = off
+trim_trailing_whitespace = false
+
+[makefile]
+
+charset = utf-8
+indent_style = tab
+indent_size = 2

.env.example

@@ -0,0 +1,26 @@
+DATABASE_URL=postgres://postgres:docker@localhost:5432/config?sslmode=disable
+RUST_LOG=debug
+AWS_ACCESS_KEY_ID=test
+AWS_SECRET_ACCESS_KEY=test
+AWS_SESSION_TOKEN=test
+AWS_REGION=ap-south-1
+DB_USER=postgres
+DB_HOST=dockerdns:5432
+DB_NAME=config
+APP_ENV=DEV
+AWS_REGION_ENDPOINT=http://localhost:4566
+ALLOW_SAME_KEYS_OVERLAPPING_CTX=true
+ALLOW_DIFF_KEYS_OVERLAPPING_CTX=true
+ALLOW_SAME_KEYS_NON_OVERLAPPING_CTX=true
+CAC_HOST="http://localhost:8080"
+API_HOSTNAME="http://localhost:8080"
+CONTEXT_AWARE_CONFIG_VERSION="v0.1.0"
+HOSTNAME="<application_name>-<deployment_id>-<replicaset>-<pod>"
+MJOS_ALLOWED_ORIGINS=https://potato.in,https://onion.in,http://localhost:8080
+ACTIX_KEEP_ALIVE=120
+MAX_DB_CONNECTION_POOL_SIZE=3
+ENABLE_TENANT_AND_SCOPE=true
+TENANTS=dev,test
+TENANT_MIDDLEWARE_EXCLUSION_LIST="/health,/assets/favicon.ico,/pkg/frontend.js,/pkg,/pkg/frontend_bg.wasm,/pkg/tailwind.css,/pkg/style.css,/assets,/admin,/"
+SERVICE_PREFIX=""
+SERVICE_NAME="CAC"

.envrc

@@ -0,0 +1 @@
+use flake

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @juspay/sdk-backend

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,23 @@
+## Problem
+Describe the problem you are trying to solve here
+
+## Solution
+Provide a brief summary of your solution so that reviewers can understand your code
+
+## Environment variable changes
+
+What ENVs need to be added or changed
+
+## Pre-deployment activity
+Things needed to be done before deploying this change (if any)
+
+## Post-deployment activity
+Things needed to be done after deploying this change (if any)
+
+## API changes
+| Endpoint        | Method           | Request body  | Response Body |
+| ------------- |:-------------:| -----:| ----------------:|
+| API      | GET/POST, etc | request | response |
+
+## Possible Issues in the future
+Describe any possible issues that could occur because of this change

.github/workflows/ci_check_pr.yaml

@@ -0,0 +1,132 @@
+name: CI Checks on PRs
+
+on:
+    pull_request:
+
+concurrency:
+    group: ${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: true
+
+env:
+    # Disable incremental compilation.
+    #
+    # Incremental compilation is useful as part of an edit-build-test-edit cycle,
+    # as it lets the compiler avoid recompiling code that hasn't changed. However,
+    # on CI, we're not making small edits; we're almost always building the entire
+    # project from scratch. Thus, incremental compilation on CI actually
+    # introduces *additional* overhead to support making future builds
+    # faster...but no future builds will ever occur in any given CI environment.
+    #
+    # See https://matklad.github.io/2021/09/04/fast-rust-builds.html#ci-workflow
+    # for details.
+    CARGO_INCREMENTAL: 0
+    # Allow more retries for network requests in cargo (downloading crates) and
+    # rustup (installing toolchains). This should help to reduce flaky CI failures
+    # from transient network timeouts or other issues.
+    CARGO_NET_RETRY: 10
+    RUSTUP_MAX_RETRIES: 10
+    # Don't emit giant backtraces in the CI logs.
+    RUST_BACKTRACE: short
+    # Use cargo's sparse index protocol
+    CARGO_REGISTRIES_CRATES_IO_PROTOCOL: sparse
+    AWS_ACCESS_KEY_ID: test
+    AWS_SECRET_ACCESS_KEY: test
+    AWS_SESSION_TOKEN: test
+    AWS_REGION: ap-south-1
+    APP_ENV: "TEST"
+
+jobs:
+    formatting:
+        name: Check formatting
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@v4
+              with:
+                  fetch-depth: 0
+
+            # - name: Check git settings
+            #   shell: bash
+            #   run: |
+            #       echo "${{ github.event.pull_request.head.ref }}"
+            #       git log --pretty=oneline --abbrev-commit
+            #       echo "----------------"
+            #       git tag "abc_tag" ${{github.event.pull_request.head.sha}}
+            #       git tag
+
+            - name: Install Rust
+              uses: dtolnay/rust-toolchain@master
+              with:
+                  toolchain: 1.76.0
+                  targets: wasm32-unknown-unknown
+                  components: rustfmt, clippy
+
+            - name: Check formatting
+              shell: bash
+              run: cargo fmt --all --check
+
+            - name: install cocogitto
+              uses: baptiste0928/[email protected]
+              with:
+                  crate: cocogitto
+
+            - name: Check conventional commit
+              shell: bash
+              run: |
+                  git config --global user.name "${{ github.event.pull_request.user.login }}"
+                  git config --global user.email "[email protected]"
+                  commit=$(git log --format=%B -n 1 ${{ github.event.pull_request.head.sha }})
+                  cog verify "$commit"
+
+    test:
+        name: Testing
+        runs-on: ubuntu-latest
+        services:
+            postgres:
+                image: postgres:12-alpine
+                ports:
+                    - 5432:5432
+                env:
+                    POSTGRES_PASSWORD: "docker"
+                    POSTGRES_DB: "config"
+                    restart: on-failure
+
+            localstack:
+                image: localstack/localstack:1.3.0
+                ports:
+                    - 4510-4559:4510-4559 # external service port range
+                    - 4566:4566 # LocalStack Edge Proxy
+                    - 4571:4571
+                env:
+                    LOCALSTACK_SERVICES: kms
+                    AWS_DEFAULT_REGION: ap-south-1
+                    EDGE_PORT: 4566
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@v4
+              with:
+                  fetch-depth: 0
+
+            - name: Install Rust
+              uses: dtolnay/rust-toolchain@master
+              with:
+                  toolchain: 1.76.0
+                  targets: wasm32-unknown-unknown
+                  components: rustfmt, clippy
+
+            - name: install node
+              uses: actions/setup-node@v4
+              with:
+                  node-version: 18.19.0
+
+            - name: Install wasm-pack
+              shell: bash
+              run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh
+
+            - name: run tests
+              shell: bash
+              run: |
+                  export DB_PASSWORD=`./docker-compose/localstack/get_db_password.sh | base64 --decode` && echo $DB_PASSWORD
+                  make ci-test
+              env:
+                  APP_ENV: "TEST"

.github/workflows/ci_merge_main.yaml

@@ -0,0 +1,49 @@
+name: Create release tags
+
+permissions:
+    contents: write
+
+on: workflow_dispatch
+
+concurrency:
+    group: ${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: true
+
+jobs:
+    tag-release:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@v4
+              with:
+                  fetch-depth: 0
+                  token: ${{ secrets.SUPERPOSITION_TOKEN }}
+
+            - name: Install Rust
+              uses: dtolnay/rust-toolchain@master
+              with:
+                  toolchain: 1.76.0
+                  targets: wasm32-unknown-unknown
+                  components: rustfmt, clippy
+
+            - name: install cargo-edit to perform set-version
+              uses: baptiste0928/[email protected]
+              with:
+                  crate: cargo-edit
+
+            - name: install cocogitto
+              uses: baptiste0928/[email protected]
+              with:
+                  crate: cocogitto
+
+            - name: Semver release
+              shell: bash
+              run: |
+                git config user.email "[email protected]"
+                git config user.name "Superposition Bot"
+                cog bump --auto --skip-ci-override "[skip ci]"
+
+            - name: Push code to main
+              shell: bash
+              run: |
+                git push origin --tags

.github/workflows/nix.yaml

@@ -0,0 +1,24 @@
+name: "CI Nix"
+on:
+  # Run only when pushing to main branch, and making PRs
+  push:
+    branches:
+      - main
+  pull_request:
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-14]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          extra-conf: |
+            trusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
+            substituters = https://cache.garnix.io?priority=41 https://cache.nixos.org/
+      - uses: yaxitech/nix-install-pkgs-action@v3
+        with:
+          packages: "github:srid/nixci"
+      - run: nixci build

.gitignore

@@ -1,61 +1,33 @@
-# These are some examples of commonly ignored file patterns.
-# You should customize this list as applicable to your project.
-# Learn more about .gitignore:
-#     https://www.atlassian.com/git/tutorials/saving-changes/gitignore
-
 # Node artifact files
 node_modules/
 dist/
-build/
-
-
-
-/backend/target
-
-# Compiled Java class files
-*.class
-
-
-
-*Cargo.lock
-
-# Compiled Python bytecode
-*.py[cod]
 
 # Log files
 *.log
 
-# Package files
-*.jar
-
-# Maven
+# cargo
 target/
-dist/
-
-# JetBrains IDE
-.idea/
-
-# Unit test reports
-TEST*.xml
 
 # Generated by MacOS
 .DS_Store
 
-# Generated by Windows
-Thumbs.db
-
-# Applications
-*.app
-*.exe
-*.war
-
-# Large media files
-*.mp4
-*.tiff
-*.avi
-*.flv
-*.mov
-*.wmv
-
-.package-lock.json
-
+.env
+
+# nix build outputs
+backend/result
+backend/.tmp
+backend/logfile
+backend/*PGSQL*
+backend/.env
+.direnv
+/result
+/result-*
+clients/haskell/result
+clients/haskell/dist-newstyle
+# dev
+bacon.toml
+docker-compose/localstack/export_cyphers.sh
+test_logs
+.keep
+.vscode
+*.session.sql

.rustfmt.toml

@@ -0,0 +1,2 @@
+edition="2018"
+max_width=90