[POC] spcs project

.github/CODEOWNERS

@@ -1 +1,27 @@
-* @sfc-gh-turbaszek @sfc-gh-pjob @sfc-gh-jsikorski @sfc-gh-astus
+* @snowflakedb/snowcli
+
+# Shared ownership
+**/__snapshots__/ @snowflakedb/snowcli @snowflakedb/nade
+**/testing_utils/ @snowflakedb/snowcli @snowflakedb/nade
+src/snowflake/cli/api/utils/ @snowflakedb/snowcli @snowflakedb/nade
+**/test_data @snowflakedb/snowcli @snowflakedb/nade
+tests_e2e/conftest.py @snowflakedb/snowcli @snowflakedb/nade
+
+## Workspaces (shared ownership)
+src/snowflake/cli/_plugins/workspace/ @snowflakedb/snowcli @snowflakedb/nade
+src/snowflake/cli/api/entities/ @snowflakedb/snowcli @snowflakedb/nade
+src/snowflake/cli/api/project/schemas/entities/ @snowflakedb/snowcli @snowflakedb/nade
+tests/workspace/ @snowflakedb/snowcli @snowflakedb/nade
+tests_integration/workspaces/ @snowflakedb/snowcli @snowflakedb/nade
+
+# Native Apps Owners
+**/nativeapp/ @snowflakedb/nade
+**/native_app/ @snowflakedb/nade
+tests_e2e/test_nativeapp.py @snowflakedb/nade
+
+# Project Definition Owners
+tests/project/ @snowflakedb/snowcli @snowflakedb/nade
+
+# No ownership to reduce friction
+RELEASE-NOTES.md
+src/snowflake/cli/api/errno.py  # SQL error codes

.github/ISSUE_TEMPLATE/BUG-REPORT.yml

@@ -1,11 +1,16 @@
 name: Bug Report
 description: File a bug report
 body:
+  - type: input
+    attributes:
+      label: "SnowCLI version"
+      description: "What version of snow are you using?"
+      placeholder: "Run `snow --version`"
   - type: input
     attributes:
       label: "Python version"
       description: "What version of Python are you using?"
-      placeholder: "Run `python --version --version`"
+      placeholder: "Run `python --version`"
   - type: input
     attributes:
       label: "Platform"

.github/pull_request_template.md

@@ -1,7 +1,11 @@
 ### Pre-review checklist
    * [ ] I've confirmed that instructions included in README.md are still correct after my changes in the codebase.
-   * [ ] I've added new automated tests to verify correctness of my new code.
+   * [ ] I've added or updated automated unit tests to verify correctness of my new code.
+   * [ ] I've added or updated integration tests to verify correctness of my new code.
+   * [ ] I've confirmed that my changes are working by executing CLI's commands manually on MacOS.
+   * [ ] I've confirmed that my changes are working by executing CLI's commands manually on Windows.
    * [ ] I've confirmed that my changes are up-to-date with the target branch.
+   * [ ] I've described my changes in the release notes.
    * [ ] I've described my changes in the section below.
 
 ### Changes description

.github/repo_meta.yaml

@@ -0,0 +1,10 @@
+point_of_contact: @snowflakedb/snowcli
+production: true
+distributed: true
+modified: false
+code_owners_file_present: true
+release_branches:
+  - release-*
+  - main
+jira_area: Developer Platform
+audit_in_scope: true

.github/workflows/build.yaml

@@ -3,74 +3,43 @@ name: Build
 on:
   pull_request:
     branches:
-      - main
+      - "*"
   push:
     tags:
       - "v*" # Push events to matching v*, i.e. v1.0, v20.15.10
     branches:
-      - "**"
-
-jobs:
+      - main
 
-  lint:
-    name: Check linting
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - name: Set up Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: '3.x'
-      - name: Install pre-commit
-        run: python -m pip install pre-commit
-      - name: Run pre-commit
-        run: pre-commit run --all-files
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
 
+jobs:
+  define-matrix:
+    uses: ./.github/workflows/matrix.yaml
   build:
-    name: Build packages
-    runs-on: ${{ matrix.os }}
-    needs: lint
+    needs: define-matrix
+    runs-on: ubuntu-latest
     strategy:
+      fail-fast: true
       matrix:
-        include:
-          - os: macos-latest
-            TARGET: macos
-            CMD_BUILD: >
-              pyinstaller snowcli.spec &&
-              cd ./dist/snow &&
-              zip -g ../../snow.zip -r .
-            ARTIFACT_NAME: snow-${{ github.sha }}-darwin
-            PATH: snow.zip
-          - os: windows-latest
-            TARGET: windows
-            CMD_BUILD: pyinstaller snowcli.spec
-            ARTIFACT_NAME: snow-${{ github.sha }}-windows
-            PATH: ./dist/snow/
-          - os: ubuntu-latest
-            TARGET: linux
-            CMD_BUILD: >
-              pyinstaller snowcli.spec &&
-              cd ./dist/snow &&
-              zip -g ../../snow.zip -r .
-            ARTIFACT_NAME: snow-${{ github.sha }}-linux
-            PATH: snow.zip
+        os: ${{ fromJSON(needs.define-matrix.outputs.os) }}
+        python-version: ${{ fromJSON(needs.define-matrix.outputs.python) }}
     steps:
-      - uses: actions/checkout@v3
-      - name: Set up Python 3.11
-        uses: actions/setup-python@v4
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
         with:
-          python-version: "3.11"
-      - name: Install dependencies
+          python-version: ${{ matrix.python-version }}
+      - name: Install Snowflake CLI
         run: |
           python -m pip install --upgrade pip
           pip install .
           pip check
-          pip install -U pyinstaller
-      - name: Build with pyinstaller for ${{matrix.TARGET}}
-        run: ${{matrix.CMD_BUILD}}
-      - name: Archive python artifact
-        uses: actions/upload-artifact@v3
-        with:
-          name: ${{matrix.ARTIFACT_NAME}}
-          path: ${{matrix.PATH}}
-          retention-days: 7
+          snow --help
+      - name: Install dev dependencies
+        run: |
+          pip install ".[development]"
+          pip check

.github/workflows/cleanup.yaml

@@ -0,0 +1,16 @@
+name: Environment cleanup
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 10 * * *"
+
+jobs:
+  tests:
+    uses: ./.github/workflows/test_trusted.yaml
+    with:
+      runs-on: ubuntu-latest
+      python-version: "3.11"
+      python-env: e2e
+      hatch-run: e2e:cleanup
+    secrets: inherit

.github/workflows/jira_close.yml

@@ -9,12 +9,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: snowflakedb/gh-actions
           ref: jira_v1
           token: ${{ secrets.SNOWFLAKE_GITHUB_TOKEN }} # stored in GitHub secrets
           path: .
+          persist-credentials: false
       - name: Jira login
         uses: atlassian/gajira-login@master
         env:
@@ -26,7 +27,7 @@ jobs:
         env:
           TITLE: "${{ github.event.issue.title }}"
         run: |
-          jira=$(echo -n $TITLE | awk '{print $1}' | sed -e 's/://')
+          jira=$(echo -n "${TITLE}" | awk '{print $1}' | sed -e 's/://')
           echo ::set-output name=jira::$jira
       - name: Close issue
         uses: ./jira/gajira-close

.github/workflows/jira_comment.yml

@@ -19,7 +19,7 @@ jobs:
         env:
           TITLE: "${{ github.event.issue.title }}"
         run: |
-          jira=$(echo -n $TITLE | awk '{print $1}' | sed -e 's/://')
+          jira=$(echo -n "${TITLE}" | awk '{print $1}' | sed -e 's/://')
           echo ::set-output name=jira::$jira
       - name: Comment on issue
         uses: atlassian/gajira-comment@master

.github/workflows/jira_issue.yml

@@ -19,20 +19,23 @@ jobs:
         && (github.event.comment.user.login == 'sfc-gh-turbaszek'
         || github.event.comment.user.login == 'sfc-gh-astus'
         || github.event.comment.user.login == 'sfc-gh-pjob'
-        || github.event.comment.user.login == 'sfc-gh-jsikorski')
+        || github.event.comment.user.login == 'sfc-gh-jsikorski'
+        || github.event.comment.user.login == 'sfc-gh-pczajka'
+        || github.event.comment.user.login == 'sfc-gh-mraba')
       )
       || (github.event_name == 'issues' && github.event.pull_request.user.login != 'whitesource-for-github-com[bot]'))
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: snowflakedb/gh-actions
           ref: jira_v1
           token: ${{ secrets.SNOWFLAKE_GITHUB_TOKEN }} # stored in GitHub secrets
           path: .
+          persist-credentials: false
 
       - name: Login
-        uses: atlassian/gajira-login@v2.0.0
+        uses: atlassian/gajira-login@v3.0.1
         env:
           JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
           JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}
@@ -45,9 +48,10 @@ jobs:
           project: SNOW
           issuetype: Bug
           summary: '${{ github.event.issue.title }}'
-          description: |
-            ${{ github.event.issue.body }} \\ \\ _Created from GitHub Action_ for ${{ github.event.issue.html_url }}
-          fields: '{"customfield_11401":{"id":"14723"},"labels":["dp-snowcli","github"]}'
+          description: >
+            _Created from GitHub Action_ for ${{ github.event.issue.html_url }}
+            ```${{ github.event.issue.body }}```
+          fields: '{"customfield_11401":{"id":"14723"},"labels":["dp-snowcli","github"],"parent":{"key":"SNOW-1555958"}}'
 
       - name: Update GitHub Issue
         uses: ./jira/gajira-issue-update
@@ -58,3 +62,8 @@ jobs:
           owner: "{{ event.repository.owner.login }}"
           name: "{{ event.repository.name }}"
           jira: "${{ steps.create.outputs.issue }}"
+      - name: Transition issue
+        uses: atlassian/gajira-transition@v3
+        with:
+          issue: "${{ steps.create.outputs.issue }}"
+          transition: "TODO"

.github/workflows/lint.yaml

@@ -0,0 +1,32 @@
+name: Code quality checks
+
+on:
+  pull_request:
+    branches:
+      - "*"
+  push:
+    tags:
+      - "v*" # Push events to matching v*, i.e. v1.0, v20.15.10
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    name: Check code quality
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.x'
+      - name: Install pre-commit
+        run: python -m pip install pre-commit tomlkit
+      - name: Run pre-commit
+        run: pre-commit run --all-files

.github/workflows/matrix.yaml

@@ -0,0 +1,34 @@
+name: shared matrix
+on:
+  workflow_call:
+    # Map the workflow outputs to job outputs
+    outputs:
+      os:
+        value: ${{ jobs.define-matrix.outputs.os }}
+      python:
+        value: ${{ jobs.define-matrix.outputs.python }}
+
+jobs:
+  define-matrix:
+    runs-on: ubuntu-latest
+    outputs:
+      os:  ${{ steps.os.outputs.os }}
+      python:  ${{ steps.python.outputs.python }}
+    steps:
+      - name: Define OS versions
+        id: os
+        run: |
+          if [ "${{ github.event_name }}" = "schedule" ]; then
+            echo 'os=["windows-latest", "ubuntu-latest", "macos-latest"]' >> "$GITHUB_OUTPUT"
+          else
+            echo 'os=["windows-latest", "ubuntu-latest"]' >> "$GITHUB_OUTPUT"
+          fi
+      - name: Define python versions
+        id: python
+        run: |
+          if [ "${{ github.event_name }}" = "schedule" ]; then
+            echo 'python=["3.10", "3.11", "3.12"]' >> "$GITHUB_OUTPUT"
+          else
+            # Last supported and most frequently used
+            echo 'python=["3.10"]' >> "$GITHUB_OUTPUT"
+          fi

.github/workflows/ok_to_test.yml

@@ -0,0 +1,32 @@
+# If someone with write access comments "/ok-to-test" on a pull request, emit a repository_dispatch event
+name: Ok To Test
+
+on:
+  issue_comment:
+    types: [created]
+
+jobs:
+  ok-to-test:
+    runs-on: ubuntu-latest
+    environment: ok-to-test
+    permissions:
+      pull-requests: write
+    # Only run for PRs, not issue comments
+    if: ${{ github.event.issue.pull_request }}
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.PRIVATE_KEY }}
+
+      - name: Slash Command Dispatch
+        uses: peter-evans/slash-command-dispatch@13bc09769d122a64f75aa5037256f6f2d78be8c4
+        env:
+          TOKEN: ${{ steps.app-token.outputs.token }}
+        with:
+          token: ${{ env.TOKEN }}
+          reaction-token: ${{ secrets.GITHUB_TOKEN }}
+          issue-type: pull-request
+          commands: ok-to-test
+          permission: write

.github/workflows/publish.yaml

@@ -9,12 +9,15 @@ permissions:
 
 jobs:
   deploy:
+    environment: release
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: "3.11"
       - name: Install dependencies