chore(release): publish

- @standardnotes/[email protected].5
 - @standardnotes/[email protected]
 - @standardnotes/[email protected].4
 - @standardnotes/[email protected].6
 - @standardnotes/[email protected].6
 - @standardnotes/[email protected]
 - @standardnotes/[email protected].1
 - @standardnotes/[email protected]
 - @standardnotes/[email protected].1
 - @standardnotes/[email protected].1
 - @standardnotes/[email protected]
 - @standardnotes/[email protected].1

.dockerignore

@@ -1,10 +0,0 @@
-.git/
-.gitignore
-.eslintcache
-node_modules
-dist
-packages/web-server/public/assets
-packages/web-server/tmp
-packages/web-server/vendor/bundles
-packages/desktop
-packages/mobile

.env.sample

@@ -0,0 +1,11 @@
+PORT=3001
+
+DEFAULT_SYNC_SERVER=https://api.standardnotes.com
+
+# Subscription related endpoints
+DASHBOARD_URL=http://standardnotes.com/dashboard
+PLANS_URL=https://standardnotes.com/plans
+PURCHASE_URL=https://standardnotes.com/purchase
+
+# Used by Rails internals and not Standard Notes related
+SECRET_KEY_BASE=<enter a secret string here>

.eslintignore

@@ -1,2 +1,19 @@
 node_modules
-scripts
+scripts
+actions
+.yarn
+.vscode
+.sass-cache
+.husky
+.github
+.git
+**/dist
+**/coverage
+**/node_modules
+packages/components
+packages/docs
+packages/mobile/android
+packages/mobile/ios
+packages/mobile/html
+packages/snjs/mocha
+*.d.ts

.eslintrc.json

@@ -1,4 +1,4 @@
 {
   "extends": ["./node_modules/@standardnotes/config/src/.eslintrc"],
-  "ignorePatterns": [".eslintrc.js", "*.webpack.*.js", "webpack-defaults.js", "jest.config.js", "__mocks__"]
+  "ignorePatterns": [".eslintrc.js", "*.webpack.*.js", "webpack-defaults.js", "jest.config.js", "__mocks__", "**/**/coverage"]
 }

.github/dependabot.yml

@@ -0,0 +1,121 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/api"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/components"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/desktop"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/docs"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/encryption"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/features"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/filepicker"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/files"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/icons"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/mobile"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/models"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/releases"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/responses"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/services"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/sncrypto-common"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/sncrypto-web"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/snjs"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/styles"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/toast"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/utils"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/web"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/codeql-analysis.yml

@@ -13,10 +13,10 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ develop, main ]
+    branches: [ main ]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [ develop ]
+    branches: [ main ]
   schedule:
     - cron: '21 7 * * 0'
 
@@ -37,7 +37,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/desktop.release.beta.yml

@@ -1,16 +0,0 @@
-name: Desktop Beta Release
-
-on:
-  push:
-    tags:
-      - '*standardnotes/*desktop*beta*'
-      - '*standardnotes/*desktop*alpha*'
-      - '!*standardnotes/*inner-desktop*'
-  workflow_dispatch:
-
-jobs:
-  Build:
-    uses: standardnotes/app/.github/workflows/desktop.release.reuse.yml@develop
-    secrets: inherit
-    with:
-      channel: beta

.github/workflows/desktop.release.prod.yml

@@ -1,11 +1,9 @@
-name: Desktop Prod Release
+name: Desktop Release
 
 on:
   push:
     tags:
       - '*standardnotes/*desktop*'
-      - '!*standardnotes/*desktop*beta*'
-      - '!*standardnotes/*desktop*alpha*'
       - '!*standardnotes/*inner-desktop*'
   workflow_dispatch:
 

.github/workflows/desktop.release.reuse.yml

@@ -19,11 +19,13 @@ jobs:
       run:
         working-directory: packages/desktop
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
           registry-url: 'https://registry.npmjs.org'
-      - run: yarn install
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
+      - run: yarn install --immutable
       - run: yarn build:desktop
       - run: echo APP_VERSION=$(node -p "require('./package.json').version") >> $GITHUB_ENV
 
@@ -53,16 +55,18 @@ jobs:
       run:
         working-directory: packages/desktop
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
           registry-url: 'https://registry.npmjs.org'
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
       - name: Install FPM
         run: sudo gem install fpm -f
 
-      - run: yarn install
+      - run: yarn install --immutable
       - run: yarn build:desktop
 
       - run: echo APP_VERSION=$(node -p "require('./package.json').version") >> $GITHUB_ENV
@@ -126,11 +130,13 @@ jobs:
       run:
         working-directory: packages/desktop
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
           registry-url: 'https://registry.npmjs.org'
-      - run: yarn install
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
+      - run: yarn install --immutable
       - run: yarn build:desktop
       - run: yarn run webpack --config desktop.webpack.prod.js
       - run: echo APP_VERSION=$(node -p "require('./package.json').version") >> $GITHUB_ENV
@@ -154,10 +160,14 @@ jobs:
       run:
         working-directory: packages/desktop
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
           registry-url: 'https://registry.npmjs.org'
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
+
+      - run: yarn install --immutable
 
       - uses: actions/download-artifact@v3
         with:
@@ -172,19 +182,36 @@ jobs:
         uses: martinbeentjes/npm-get-version-action@main
         with:
           path: packages/desktop
+
+      - name: Generate Release Notes
+        uses: ./actions/release-notes
+        with:
+          package: web desktop
+        id: release-notes
+        continue-on-error: true
+
       - name: Release
         uses: softprops/action-gh-release@v1
         with:
           token: ${{ secrets.CI_PAT_TOKEN }}
           tag_name: "@standardnotes/desktop@${{ steps.package-version.outputs.current-version}}"
+          name: "Desktop ${{ steps.package-version.outputs.current-version }}"
+          body: ${{ steps.release-notes.outputs.result }}
           prerelease: true
-          draft: ${{ inputs.channel == 'beta' && true || false }}
-          name: "Desktop ${{ inputs.channel == 'beta' && 'Beta' || '' }} ${{ steps.package-version.outputs.current-version }}"
+          draft: false
           files: packages/desktop/dist/*
+
+      - name: Notify Release Update
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.CI_PAT_TOKEN }}
+          repository: ${{ secrets.RELEASES_EVENT_RECEIVING_REPO }}
+          event-type: releases-updated-event
+
       - name: Publish Snap
         continue-on-error: true
         run: |
           sudo snap install snapcraft --classic
           echo "${{ secrets.SNAPCRAFT_LOGIN_FILE }}" >> snapauth.txt
           snapcraft login --with=snapauth.txt
-          snapcraft upload dist/standard-notes-${{ steps.package-version.outputs.current-version}}-linux-amd64.snap
+          snapcraft upload dist/standard-notes-${{ steps.package-version.outputs.current-version}}-linux-amd64.snap --release stable,candidate,beta,edge

.github/workflows/desktop.windows.sign.yml

@@ -14,11 +14,13 @@ jobs:
       run:
         working-directory: packages/desktop
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
           registry-url: 'https://registry.npmjs.org'
-      - run: yarn install
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
+      - run: yarn install --immutable
       - run: yarn build:desktop
       - run: yarn run webpack --config desktop.webpack.prod.js
       - run: echo APP_VERSION=$(node -p "require('./package.json').version") >> $GITHUB_ENV
@@ -41,10 +43,12 @@ jobs:
       run:
         working-directory: packages/desktop
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
           registry-url: 'https://registry.npmjs.org'
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
       - uses: actions/download-artifact@v3
         with:
           name: assets

.github/workflows/docs.deploy.yml

@@ -0,0 +1,30 @@
+name: Deploy Docs to GitHub Pages
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - packages/docs/**
+
+jobs:
+  deploy:
+    name: Deploy to GitHub Pages
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          cache: yarn
+
+      - name: Install dependencies
+        run: yarn install --immutable
+
+      - name: Build
+        run: yarn workspace @standardnotes/docs run build
+
+      - name: Deploy to GitHub Pages
+        uses: peaceiris/actions-gh-pages@v3
+        with:
+          github_token: ${{ secrets.CI_PAT_TOKEN }}
+          publish_dir: ./packages/docs/build

.github/workflows/git-sync.yml

@@ -1,4 +1,13 @@
-on: push
+name: Sync Repo
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - '*'
+      - '*/*'
+      - '**'
+
 jobs:
   git-sync:
     runs-on: ubuntu-latest
@@ -11,3 +20,39 @@ jobs:
           destination_repo: "standardnotes/internal-app"
           destination_branch: "refs/heads/*"
           ssh_private_key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Sleep to allow git-sync to fully complete
+        run: sleep 10
+        shell: bash
+
+      - uses: actions/checkout@v3
+        with:
+          token: ${{ secrets.CI_PAT_TOKEN }}
+          repository: standardnotes/internal-app
+          ref: ${{ github.ref }}
+
+      - name: Extract branch name
+        shell: bash
+        run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})"
+        id: extract_branch
+
+      - name: Find open PR
+        uses: juliangruber/find-pull-request-action@v1
+        id: find-pull-request
+        with:
+          branch: ${{ steps.extract_branch.outputs.branch }}
+      - run: echo "Pull Request ${number} (${sha})"
+        env:
+          number: ${{ steps.find-pull-request.outputs.number }}
+          sha: ${{ steps.find-pull-request.outputs.head-sha }}
+
+      - uses: peter-evans/create-pull-request@v4
+        if: startsWith(github.event.head_commit.message, 'chore(deps)') == false && startsWith(github.event.head_commit.message, 'chore(deps-dev)') == false
+        with:
+          token: ${{ secrets.CI_PAT_TOKEN }}
+          branch: ${{ github.ref }}
+          base: main
+          title: ${{ steps.extract_branch.outputs.branch }}
+          body: "Public PR: https://github.com/standardnotes/app/pull/${{ steps.find-pull-request.outputs.number }}"
+          assignees: ${{ github.actor }}
+          reviewers: ${{ github.actor }}

.github/workflows/mobile.release.dev.yml

@@ -1,111 +0,0 @@
-name: Mobile Build Development
-
-on:
-  push:
-    tags:
-      - '*standardnotes/*mobile*beta*'
-      - '*standardnotes/*mobile*alpha*'
-  workflow_dispatch:
-
-jobs:
-  android:
-    defaults:
-      run:
-        working-directory: packages/mobile
-    runs-on: ubuntu-latest
-    timeout-minutes: 45
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v2
-      - name: Export version from package.json
-        run: |
-          echo "PACKAGE_VERSION=$(grep '"version"' package.json | cut -d '"' -f 4 | cut -d "-" -f 1)" >> $GITHUB_ENV
-      - name: Setup react-native kernel and increase watchers
-        run: echo fs.inotify.max_user_watches=524288 | sudo tee -a /etc/sysctl.conf && sudo sysctl -p
-      - name: Decode Dev Android keystore
-        run: |
-          echo "${{ secrets.DEV_KEYSTORE }}" > keystore.keystore.asc
-          gpg -d --passphrase "${{ secrets.DEV_KEYSTORE_PASSPHRASE }}" --batch keystore.keystore.asc > android/app/keystore.keystore
-      - name: Ruby Setup for Fastlane
-        uses: ruby/setup-ruby@v1
-      - name: Install dependencies
-        run: yarn install
-      - run: yarn build:mobile
-      - name: fastlane
-        uses: maierj/[email protected]
-        env:
-          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
-          BUILD_NUMBER: ${{ github.run_number }}
-          ANDROID_KEYSTORE_ALIAS: ${{ secrets.DEV_ANDROID_KEYSTORE_ALIAS }}
-          ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD: ${{ secrets.DEV_ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD }}
-          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.DEV_ANDROID_KEYSTORE_PASSWORD }}
-          GOOGLE_PLAY_JSON_KEY_DATA: ${{ secrets.GOOGLE_PLAY_JSON_KEY_DATA }}
-        with:
-          lane: 'android dev'
-          subdirectory: 'packages/mobile'
-
-      - name: get-npm-version
-        id: package-version
-        uses: martinbeentjes/npm-get-version-action@main
-        with:
-          path: packages/mobile
-      - name: Release
-        uses: softprops/action-gh-release@v1
-        with:
-          token: ${{ secrets.CI_PAT_TOKEN }}
-          tag_name: "@standardnotes/mobile@${{ steps.package-version.outputs.current-version}}"
-          prerelease: true
-          draft: false
-          name: "Mobile Beta ${{ steps.package-version.outputs.current-version }}"
-          files: |
-            packages/mobile/android/app/build/outputs/apk/dev/release/app-dev-release.apk
-  ios:
-    defaults:
-      run:
-        working-directory: packages/mobile
-    runs-on: macos-11
-    timeout-minutes: 90
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v2
-      - name: Export version from package.json
-        run: |
-          echo "PACKAGE_VERSION=$(grep '"version"' package.json | cut -d '"' -f 4 | cut -d "-" -f 1)" >> $GITHUB_ENV
-      - name: Ruby Setup for Fastlane
-        uses: ruby/setup-ruby@v1
-      - name: Install dependencies
-        run: yarn install && yarn install:pods
-      - run: yarn build:mobile
-      - name: Set ssh connection to Github
-        uses: webfactory/[email protected]
-        with:
-          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
-      - name: Export Apple AppStore Connect API key
-        run: echo "${{ secrets.APPSTORE_CONNECT_KEY }}" > ios/Authkey.p8
-      - name: Setup fastlane
-        uses: maierj/[email protected]
-        env:
-          FASTLANE_USER: ${{ secrets.FASTLANE_USER }}
-          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
-        with:
-          lane: 'ios setup'
-          subdirectory: 'packages/mobile'
-      - name: fastlane
-        uses: maierj/[email protected]
-        env:
-          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
-          APPLE_APP_ID: ${{ secrets.DEV_APP_APPLE_ID }}
-          APPSTORE_CONNECT_KEY_ID: ${{ secrets.APPSTORE_CONNECT_KEY_ID }}
-          APPSTORE_CONNECT_KEY_ISSUER_ID: ${{ secrets.APPSTORE_CONNECT_KEY_ISSUER_ID }}
-          FASTLANE_USER: ${{ secrets.FASTLANE_USER }}
-          FASTLANE_SESSION: ${{ secrets.FASTLANE_SESSION }}
-          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-          MATCH_CERTIFICATES_URL: ${{ secrets.MATCH_CERTIFICATES_URL }}
-          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
-          FASTLANE_PASSWORD: ${{ secrets.FASTLANE_PASSWORD }}
-          MATCH_GIT_BASIC_AUTHORIZATION: ${{ secrets.MATCH_GIT_BASIC_AUTHORIZATION }}
-          BUILD_NUMBER: ${{ github.run_number }}
-        with:
-          lane: 'ios dev'
-          subdirectory: 'packages/mobile'

.github/workflows/mobile.release.prod.yml

@@ -1,11 +1,9 @@
-name: Mobile Build Production
+name: Mobile Release Production
 
 on:
   push:
     tags:
       - '*standardnotes/mobile*'
-      - '!*standardnotes/mobile*beta*'
-      - '!*standardnotes/mobile*alpha*'
   workflow_dispatch:
 
 jobs:
@@ -17,7 +15,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Export version from package.json
         run:
           echo "PACKAGE_VERSION=$(grep '"version"' package.json | cut -d '"' -f 4 | cut -d "-" -f 1)" >> $GITHUB_ENV
@@ -28,7 +26,7 @@ jobs:
           echo "${{ secrets.ANDROID_KEYSTORE }}" > keystore.keystore.asc
           gpg -d --passphrase "${{ secrets.KEYSTORE_PASSPHRASE }}" --batch keystore.keystore.asc > android/app/keystore.keystore
       - name: Install dependencies
-        run: yarn install
+        run: yarn install --immutable
       - run: yarn build:mobile
       - name: Ruby Setup for Fastlane
         uses: ruby/setup-ruby@v1
@@ -50,14 +48,23 @@ jobs:
         uses: martinbeentjes/npm-get-version-action@main
         with:
           path: packages/mobile
+
+      - name: Generate Release Notes
+        uses: ./actions/release-notes
+        with:
+          package: mobile
+        id: release-notes
+        continue-on-error: true
+
       - name: Release
         uses: softprops/action-gh-release@v1
         with:
           token: ${{ secrets.CI_PAT_TOKEN }}
           tag_name: "@standardnotes/mobile@${{ steps.package-version.outputs.current-version}}"
-          prerelease: false
-          draft: false
           name: "Mobile ${{ steps.package-version.outputs.current-version }}"
+          body: ${{ steps.release-notes.outputs.result }}
+          prerelease: true
+          draft: false
           files: |
             packages/mobile/android/app/build/outputs/bundle/prodRelease/app-prod-release.aab
             packages/mobile/android/app/build/outputs/apk/prod/release/app-prod-release.apk
@@ -70,12 +77,12 @@ jobs:
     timeout-minutes: 90
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Export version from package.json
         run:
           echo "PACKAGE_VERSION=$(grep '"version"' package.json | cut -d '"' -f 4 | cut -d "-" -f 1)" >> $GITHUB_ENV
       - name: Install dependencies
-        run: yarn install && yarn install:pods
+        run: yarn install --immutable && yarn install:pods
       - run: yarn build:mobile
       - name: Set ssh connection to Github
         uses: webfactory/[email protected]

.github/workflows/mobile.release.test.yml

@@ -0,0 +1,100 @@
+name: Mobile TestFlight
+
+on:
+  push:
+    tags:
+      - '*standardnotes/mobile*'
+  workflow_dispatch:
+
+jobs:
+  android:
+    defaults:
+      run:
+        working-directory: packages/mobile
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Export version from package.json
+        run: |
+          echo "PACKAGE_VERSION=$(grep '"version"' package.json | cut -d '"' -f 4 | cut -d "-" -f 1)" >> $GITHUB_ENV
+      - name: Setup react-native kernel and increase watchers
+        run: echo fs.inotify.max_user_watches=524288 | sudo tee -a /etc/sysctl.conf && sudo sysctl -p
+      - name: Decode Dev Android keystore
+        run: |
+          echo "${{ secrets.DEV_KEYSTORE }}" > keystore.keystore.asc
+          gpg -d --passphrase "${{ secrets.DEV_KEYSTORE_PASSPHRASE }}" --batch keystore.keystore.asc > android/app/keystore.keystore
+      - name: Ruby Setup for Fastlane
+        uses: ruby/setup-ruby@v1
+      - name: Install dependencies
+        run: yarn install --immutable
+      - run: yarn build:mobile
+      - name: fastlane
+        uses: maierj/[email protected]
+        env:
+          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
+          BUILD_NUMBER: ${{ github.run_number }}
+          ANDROID_KEYSTORE_ALIAS: ${{ secrets.DEV_ANDROID_KEYSTORE_ALIAS }}
+          ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD: ${{ secrets.DEV_ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD }}
+          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.DEV_ANDROID_KEYSTORE_PASSWORD }}
+          GOOGLE_PLAY_JSON_KEY_DATA: ${{ secrets.GOOGLE_PLAY_JSON_KEY_DATA }}
+        with:
+          lane: 'android dev'
+          subdirectory: 'packages/mobile'
+
+      - name: get-npm-version
+        id: package-version
+        uses: martinbeentjes/npm-get-version-action@main
+        with:
+          path: packages/mobile
+  ios:
+    defaults:
+      run:
+        working-directory: packages/mobile
+    runs-on: macos-11
+    timeout-minutes: 90
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Export version from package.json
+        run: |
+          echo "PACKAGE_VERSION=$(grep '"version"' package.json | cut -d '"' -f 4 | cut -d "-" -f 1)" >> $GITHUB_ENV
+      - name: Ruby Setup for Fastlane
+        uses: ruby/setup-ruby@v1
+      - name: Install dependencies
+        run: yarn install --immutable && yarn install:pods
+      - run: yarn build:mobile
+      - name: Set ssh connection to Github
+        uses: webfactory/[email protected]
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+      - name: Export Apple AppStore Connect API key
+        run: echo "${{ secrets.APPSTORE_CONNECT_KEY }}" > ios/Authkey.p8
+      - name: Setup fastlane
+        uses: maierj/[email protected]
+        env:
+          FASTLANE_USER: ${{ secrets.FASTLANE_USER }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
+        with:
+          lane: 'ios setup'
+          subdirectory: 'packages/mobile'
+      - name: fastlane
+        uses: maierj/[email protected]
+        env:
+          PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
+          APPLE_APP_ID: ${{ secrets.DEV_APP_APPLE_ID }}
+          APPSTORE_CONNECT_KEY_ID: ${{ secrets.APPSTORE_CONNECT_KEY_ID }}
+          APPSTORE_CONNECT_KEY_ISSUER_ID: ${{ secrets.APPSTORE_CONNECT_KEY_ISSUER_ID }}
+          FASTLANE_USER: ${{ secrets.FASTLANE_USER }}
+          FASTLANE_SESSION: ${{ secrets.FASTLANE_SESSION }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          MATCH_CERTIFICATES_URL: ${{ secrets.MATCH_CERTIFICATES_URL }}
+          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
+          FASTLANE_PASSWORD: ${{ secrets.FASTLANE_PASSWORD }}
+          MATCH_GIT_BASIC_AUTHORIZATION: ${{ secrets.MATCH_GIT_BASIC_AUTHORIZATION }}
+          BUILD_NUMBER: ${{ github.run_number }}
+        with:
+          lane: 'ios dev'
+          subdirectory: 'packages/mobile'

.github/workflows/mobile.test.yml

@@ -1,73 +0,0 @@
-name: Mobile e2e
-
-on: [workflow_dispatch]
-
-jobs:
-  android:
-    defaults:
-      run:
-        working-directory: ./packages/mobile
-    runs-on: macos-latest
-    timeout-minutes: 30
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          fetch-depth: 1
-
-      - name: Download Android Emulator Image
-        run: |
-          $ANDROID_HOME/tools/bin/sdkmanager --install "system-images;android-28;default;x86_64"
-          $ANDROID_HOME/tools/bin/avdmanager create avd -n pixel -d "Nexus 5X" --package "system-images;android-28;default;x86_64"
-
-      - name: Install Dependencies
-        run: yarn install
-
-      - name: Add usesCleartextTraffic to release AndroidManifest.xml
-        run: yarn replace-in-file '<application' '<application android:usesCleartextTraffic="true"' ./android/app/src/main/AndroidManifest.xml
-
-      - name: Build for detox
-        env:
-          DETOX_CI: true
-        run: yarn detox build --configuration android.emu.release
-
-      - name: Setup Emulator
-        timeout-minutes: 10
-        run: |
-          echo "Starting emulator"
-          nohup $ANDROID_HOME/emulator/emulator -avd pixel -no-audio -no-snapshot -no-window -gpu swiftshader_indirect &
-          $ANDROID_HOME/platform-tools/adb wait-for-device shell 'while [[ -z $(getprop sys.boot_completed | tr -d '\r') ]]; do sleep 1; done; input keyevent 82'
-          $ANDROID_HOME/platform-tools/adb shell settings put global window_animation_scale 0 &
-          $ANDROID_HOME/platform-tools/adb shell settings put global transition_animation_scale 0 &
-          $ANDROID_HOME/platform-tools/adb shell settings put global animator_duration_scale 0 &
-          echo "Emulator started"
-      - name: Run tests
-        run: yarn detox test --configuration android.emu.release
-
-  ios:
-    defaults:
-      run:
-        working-directory: ./packages/mobile
-    runs-on: macos-latest
-    timeout-minutes: 30
-
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v2
-      with:
-          fetch-depth: 1
-
-    - name: Install Dependencies
-      run: yarn install
-
-    - name: Install Pods
-      run: npx pod-install ios
-
-    - name: Install detox dependencies
-      run: brew tap wix/brew
-    - name: Install simulator utils
-      run: brew install applesimutils
-    - name: Build for detox
-      run: yarn detox build --configuration ios.sim.release
-    - name: Run tests
-      run: yarn detox test --configuration ios.sim.release

.github/workflows/pr.components.yml

@@ -3,7 +3,6 @@ name: Components PR
 on:
   pull_request:
     branches:
-      - develop
       - main
     paths:
       - packages/components/**
@@ -13,27 +12,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
 
       - name: Install dependencies
         run: yarn install
 
+      - name: Build components
+        run: yarn build:components
+
       - name: Lint components
         run: yarn lint
         working-directory: packages/components
 
-      - name: Build components
-        run: yarn build:components
-
       - name: Test components
         run: yarn test
         working-directory: packages/components
 
-      - name: Lint all
-        run: yarn lint
       - name: Build all
         run: yarn build:all
+      - name: Lint all
+        run: yarn lint
       - name: Test all
         run: yarn test

.github/workflows/pr.yml

@@ -3,7 +3,6 @@ name: General PR
 on:
   pull_request:
     branches:
-      - develop
       - main
     paths:
       - '**/**'
@@ -14,15 +13,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: actions/checkout@v3
       - name: Install dependencies
-        run: yarn install
-      - name: ESLint
-        run: yarn lint
+        run: yarn install --immutable
       - name: Build
         run: yarn build:all
+      - name: ESLint
+        run: yarn lint
       - name: Build Android
         run: yarn android:bundle
       - name: Test

.github/workflows/promote.develop.yml

@@ -1,37 +0,0 @@
-name: Promote Develop To Main
-
-on:
-  workflow_dispatch:
-
-jobs:
-  Run:
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v2
-        with:
-          ref: develop
-          token: ${{ secrets.CI_PAT_TOKEN }}
-          fetch-depth: 0
-
-      - name: Setup git config
-        run: |
-          git config --global user.name "standardci"
-          git config --global user.email "[email protected]"
-      - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v4
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.PASSPHRASE }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-
-      - name: Merge Develop into Main
-        run: |
-          git config pull.rebase false
-          git checkout main
-          git pull origin develop
-          git push origin main
-
-

.github/workflows/publish.yml

@@ -1,25 +1,26 @@
-name: Version Bump
+name: Publish Packages
 
 on:
   push:
-    branches: [ develop, main ]
+    branches: [ main ]
 
 jobs:
   Build:
-    if: contains(github.event.head_commit.message, 'chore(release)') == false
+    if: "${{ contains(github.event.head_commit.message, 'chore(release): publish') == false }}"
     runs-on: ubuntu-latest
-    env:
-      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           token: ${{ secrets.CI_PAT_TOKEN }}
           fetch-depth: 0
 
-      - uses: actions/setup-node@v3
+      - name: Set up Node
+        uses: actions/setup-node@v3
         with:
           registry-url: 'https://registry.npmjs.org'
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
 
       - name: Setup git config
         run: |
@@ -32,46 +33,59 @@ jobs:
           passphrase: ${{ secrets.PASSPHRASE }}
           git_user_signingkey: true
           git_commit_gpgsign: true
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
 
-      - name: Install Dependencies
-        run: yarn install
+      - name: Install dependencies
+        run: yarn install --immutable
 
-      - name: Bump Prod Version Graduate
-        continue-on-error: true
-        id: graduateRelease
-        if: ${{ github.ref == 'refs/heads/main' }}
-        run: |
-          yarn release:prod:graduate
-          yarn publish:prod
+      - name: Build
+        run: yarn build:all
 
-      - name: Bump Prod Version Fallback
-        if: ${{ always() && github.ref == 'refs/heads/main' && steps.graduateRelease.outcome == 'failure'  }}
-        run: |
-          echo Falling back to non-graduate release due to https://github.com/lerna/lerna/issues/2532
-          git stash
-          yarn release:prod
-          yarn publish:prod
+      - name: ESLint
+        run: yarn lint
 
-      - name: Bump Beta Version
-        if: ${{ github.ref == 'refs/heads/develop' }}
-        run: |
-          yarn release:beta
-          yarn publish:beta
+      - name: Build Android
+        run: yarn android:bundle
 
-      - name: Merge release into develop
-        if: ${{ github.ref == 'refs/heads/main' }}
-        run: |
-          git config pull.rebase false
-          git checkout develop
-          git pull origin main
-          git push origin develop
+      - name: Test
+        run: yarn test
 
-      - name: Notify Release Update
-        if: ${{ github.ref == 'refs/heads/main' }}
-        uses: peter-evans/repository-dispatch@v2
+      - name: Login to Docker Hub
+        if: "${{ contains(github.event.head_commit.message, 'skip e2e') == false }}"
+        uses: docker/login-action@v2
         with:
-          token: ${{ secrets.CI_PAT_TOKEN }}
-          repository: ${{ secrets.RELEASES_EVENT_RECEIVING_REPO }}
-          event-type: releases-updated-event
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Publish SNJS Docker image for E2E testing
+        if: "${{ contains(github.event.head_commit.message, 'skip e2e') == false }}"
+        run: |
+          yarn docker build @standardnotes/snjs -t standardnotes/snjs:${{ github.sha }}
+          docker push standardnotes/snjs:${{ github.sha }}
+
+      - name: Run E2E test suite
+        if: "${{ contains(github.event.head_commit.message, 'skip e2e') == false }}"
+        uses: convictional/[email protected]
+        with:
+          owner: standardnotes
+          repo: e2e
+          github_token: ${{ secrets.CI_PAT_TOKEN }}
+          workflow_file_name: testing-with-stable-server.yml
+          wait_interval: 30
+          client_payload: '{"image_tag": "${{ github.sha }}"}'
+          propagate_failure: true
+          trigger_workflow: true
+          wait_workflow: true
+
+      - name: Bump version
+        run: yarn release:prod
+
+      - name: Publish
+        run: yarn publish:prod
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.CI_NPM_TOKEN }}
+
+      - name: Publish SNJS Docker image as stable
+        if: "${{ contains(github.event.head_commit.message, 'skip e2e') == false }}"
+        run: |
+          docker tag standardnotes/snjs:${{ github.sha }} standardnotes/snjs:latest
+          docker push standardnotes/snjs:latest

.github/workflows/snjs.pr.yml

@@ -0,0 +1,53 @@
+name: SNJS PR — E2E Tests
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'packages/api/**'
+      - 'packages/encryption/**'
+      - 'packages/features/**'
+      - 'packages/filepicker/**'
+      - 'packages/files/**'
+      - 'packages/models/**'
+      - 'packages/responses/**'
+      - 'packages/services/**'
+      - 'packages/sncrypto-common/**'
+      - 'packages/sncrypto-web/**'
+      - 'packages/snjs/**'
+      - 'packages/utils/**'
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Install dependencies
+        run: yarn install --immutable
+      - name: Build
+        run: yarn build:snjs
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Publish SNJS Docker image for E2E testing
+        run: |
+          yarn docker build @standardnotes/snjs -t standardnotes/snjs:${{ github.sha }}
+          docker push standardnotes/snjs:${{ github.sha }}
+          docker tag standardnotes/snjs:${{ github.sha }} standardnotes/snjs:test
+          docker push standardnotes/snjs:test
+      - name: Run E2E test suite
+        uses: convictional/[email protected]
+        with:
+          owner: standardnotes
+          repo: e2e
+          github_token: ${{ secrets.CI_PAT_TOKEN }}
+          workflow_file_name: testing-with-stable-server.yml
+          wait_interval: 30
+          client_payload: '{"image_tag": "${{ github.sha }}"}'
+          propagate_failure: true
+          trigger_workflow: true
+          wait_workflow: true

.github/workflows/snjs.upgrade.event.yml

@@ -0,0 +1,48 @@
+name: Update SNJS Packages
+
+on:
+  workflow_dispatch:
+  repository_dispatch:
+    types: [snjs-updated-event]
+
+jobs:
+  SNJSUpdateEvent:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          ref: main
+          token: ${{ secrets.CI_PAT_TOKEN }}
+      - uses: actions/setup-node@v3
+        with:
+          registry-url: 'https://registry.npmjs.org'
+          node-version-file: '.nvmrc'
+          cache: 'yarn'
+      - name: Setup git config
+        run: |
+          git config --global user.name "standardci"
+          git config --global user.email "[email protected]"
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v4
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+
+      - run: yarn install
+      - run: |
+          yarn upgrade:snjs
+          yarn install --no-immutable
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v4
+        with:
+          token: ${{ secrets.CI_PAT_TOKEN }}
+          title: "${{ 'chore(deps): upgrade snjs' }}"
+          body: Updates all packages prefixed with "@standardnotes/" in root workspace, web, and mobile.
+          commit-message: "${{ 'chore(deps): upgrade snjs' }}"
+          delete-branch: true
+          committer: standardci <[email protected]>
+          author: standardci <[email protected]>

.github/workflows/web.release.beta.yml

@@ -1,78 +0,0 @@
-name: Web Server Beta
-
-on:
-  push:
-    branches: [ beta/* ]
-    paths:
-      - packages/web-server/**
-      - packages/web/**
-  workflow_dispatch:
-
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v2
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-      - name: Install dependencies
-        run: yarn install
-      - name: ESLint
-        run: yarn lint
-      - name: Build
-        run: yarn build:web-server
-      - name: Test
-        run: yarn test
-
-  deploy:
-    runs-on: ubuntu-latest
-    needs: test
-
-    steps:
-    - uses: actions/checkout@v2
-    - name: Copy robots.txt
-      run: cp public/robots.txt.development public/robots.txt
-    - name: Publish to Registry
-      uses: elgohr/Publish-Docker-Github-Action@master
-      with:
-        name: standardnotes/web
-        username: ${{ secrets.DOCKER_USERNAME }}
-        password: ${{ secrets.DOCKER_PASSWORD }}
-        tags: "beta,${{ github.sha }}"
-    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
-      with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-        aws-region: us-east-1
-    - name: Download task definition
-      run: |
-        aws ecs describe-task-definition --task-definition app-beta-dev --query taskDefinition > task-definition.json
-
-    - name: Fill in the new image ID in the Amazon ECS task definition
-      id: task-def
-      uses: aws-actions/amazon-ecs-render-task-definition@v1
-      with:
-        task-definition: task-definition.json
-        container-name: app-beta-dev
-        image: "standardnotes/web:${{ github.sha }}"
-
-    - name: Deploy Amazon ECS task definition
-      uses: aws-actions/amazon-ecs-deploy-task-definition@v1
-      with:
-        task-definition: ${{ steps.task-def.outputs.task-definition }}
-        service: app-beta-dev
-        cluster: dev
-        wait-for-service-stability: true
-
-  notify_discord:
-    needs: deploy
-
-    runs-on: ubuntu-latest
-
-    steps:
-    - name: Run Discord Webhook
-      uses: johnnyhuy/actions-discord-git-webhook@main
-      with:
-        webhook_url: ${{ secrets.DISCORD_WEBHOOK_URL }}

.github/workflows/web.release.dev.yml

@@ -1,87 +0,0 @@
-name: Web Server Dev
-
-concurrency:
-  group: dev_environment
-  cancel-in-progress: true
-
-on:
-  push:
-    tags:
-      - '*standardnotes/*web-server*beta*'
-      - '*standardnotes/*web-server*alpha*'
-  workflow_dispatch:
-
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v2
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-      - name: Install dependencies
-        run: yarn install
-      - name: ESLint
-        run: yarn lint
-      - name: Build
-        run: yarn build:web-server
-      - name: Test
-        run: yarn test
-
-
-  deploy:
-    runs-on: ubuntu-latest
-
-    needs: test
-
-    steps:
-    - uses: actions/checkout@v2
-
-    - name: Copy robots.txt
-      run: cp packages/web-server/public/robots.txt.development packages/web-server/public/robots.txt
-
-    - name: Publish to Registry
-      uses: elgohr/Publish-Docker-Github-Action@master
-      with:
-        name: standardnotes/web
-        username: ${{ secrets.DOCKER_USERNAME }}
-        password: ${{ secrets.DOCKER_PASSWORD }}
-        tags: "latest,${{ github.sha }}"
-
-    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
-      with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-        aws-region: us-east-1
-
-    - name: Download task definition
-      run: |
-        aws ecs describe-task-definition --task-definition app-dev --query taskDefinition > task-definition.json
-
-    - name: Fill in the new image ID in the Amazon ECS task definition
-      id: task-def
-      uses: aws-actions/amazon-ecs-render-task-definition@v1
-      with:
-        task-definition: task-definition.json
-        container-name: app-dev
-        image: "standardnotes/web:${{ github.sha }}"
-
-    - name: Deploy Amazon ECS task definition
-      uses: aws-actions/amazon-ecs-deploy-task-definition@v1
-      with:
-        task-definition: ${{ steps.task-def.outputs.task-definition }}
-        service: app-dev
-        cluster: dev
-        wait-for-service-stability: true
-
-  notify_discord:
-    needs: deploy
-
-    runs-on: ubuntu-latest
-
-    steps:
-    - name: Run Discord Webhook
-      uses: johnnyhuy/actions-discord-git-webhook@main
-      with:
-        webhook_url: ${{ secrets.DISCORD_WEBHOOK_URL }}

.github/workflows/web.release.prod.yml

@@ -1,4 +1,4 @@
-name: Web Server Prod
+name: Web Deploy
 
 concurrency:
   group: prod_environment
@@ -7,72 +7,52 @@ concurrency:
 on:
   push:
     tags:
-      - '*standardnotes/*web-server*'
-      - '!*standardnotes/*web-server*beta*'
-      - '!*standardnotes/*web-server*alpha*'
+      - '*standardnotes/*web*'
+      - '!*standardnotes/*web*beta*'
+      - '!*standardnotes/*web*alpha*'
 
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: actions/checkout@v3
       - name: Install dependencies
-        run: yarn install
+        run: yarn install --immutable
+      - name: Build
+        run: yarn build:web
       - name: ESLint
         run: yarn lint
-      - name: Build
-        run: yarn build:web-server
       - name: Test
         run: yarn test
-
   deploy:
-    runs-on: ubuntu-latest
-
     needs: test
 
+    runs-on: ubuntu-latest
+
     steps:
-    - uses: actions/checkout@v2
-
-    - name: Copy robots.txt
-      run: cp packages/web-server/public/robots.txt.production packages/web-server/public/robots.txt
-
-    - name: Publish to Registry
-      uses: elgohr/Publish-Docker-Github-Action@master
-      with:
-        name: standardnotes/web
-        username: ${{ secrets.DOCKER_USERNAME }}
-        password: ${{ secrets.DOCKER_PASSWORD }}
-        tags: "stable,${{ github.sha }}"
-
-    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
-      with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-        aws-region: us-east-1
-
-    - name: Download task definition
-      run: |
-        aws ecs describe-task-definition --task-definition app-prod --query taskDefinition > task-definition.json
-
-    - name: Fill in the new image ID in the Amazon ECS task definition
-      id: task-def
-      uses: aws-actions/amazon-ecs-render-task-definition@v1
-      with:
-        task-definition: task-definition.json
-        container-name: app-prod
-        image: "standardnotes/web:${{ github.sha }}"
-
-    - name: Deploy Amazon ECS task definition
-      uses: aws-actions/amazon-ecs-deploy-task-definition@v1
-      with:
-        task-definition: ${{ steps.task-def.outputs.task-definition }}
-        service: app-prod
-        cluster: prod
-        wait-for-service-stability: true
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Install dependencies
+        run: yarn install --immutable
+      - name: Build
+        run: yarn build:web
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: us-east-1
+      - name: Deploy static site to S3 bucket
+        run: aws s3 sync packages/web/dist/ s3://app.standardnotes.com --delete
+      - name: Invalidate CloudFront Cache
+        uses: chetan/invalidate-cloudfront-action@master
+        env:
+          DISTRIBUTION: ${{ secrets.WEBAPP_CLOUDFRONT_DISTRIBUTION_ID }}
+          PATHS: '/*'
+          AWS_REGION: 'us-east-1'
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
 
   notify_discord:
     needs: deploy

.gitignore

@@ -3,22 +3,31 @@
 .vscode
 .idea
 node_modules
-
-packages/web/dist
-
 .sass-cache
-
 .env
 .ssh
 dump.rdb
 .vscode
-/dist
 yarn-error.log
 package-lock.json
 codeqldb
 coverage
 lerna-debug.log
 
+packages/web/dist
+packages/filepicker/dist
+packages/features/dist
+packages/encryption/dist
+packages/files/dist
+packages/models/dist
+packages/services/dist
+packages/utils/dist
+packages/api/dist
+packages/responses/dist
+packages/sncrypto-common/dist
+packages/sncrypto-web/dist
+packages/snjs/dist
+
 **/.pnp.*
 **/.yarn/*
 !.yarn/patches
@@ -26,4 +35,4 @@ lerna-debug.log
 !.yarn/releases
 !.yarn/sdks
 !.yarn/versions
-!.yarn/cache
+!.yarn/cache

.nvmrc

@@ -1 +1 @@
-16.11.1
+16.15.1