feat: migrate from Earthly to Nix + Speakeasy for OpenAPI build pipeline

- Replace Earthly with Nix dev shell (flake.nix) and Just task runner
- Use Speakeasy CLI v1.759.2 for OpenAPI spec merging with modelNamespace
  support, replacing openapi-merge-cli (npm)
- Path prepending handled by yq-go instead of openapi-merge-cli
- Consolidate overlays into shared.overlay.yaml (Speakeasy overlay format)
- Fix Speakeasy registry publish: specs are now properly published and
  tagged (previously only tagging an old registry image)
- Add LATEST_RELEASE tag alongside version tag on registry publish
- Remove Earthly, Docker/QEMU setup action, and npm build dependencies
- Add .envrc for direnv integration

Author: flemzord

.earthlyignore

@@ -0,0 +1,3 @@
+source_env_if_exists ".envrc.local"
+use flake . --impure
+dotenv_if_exists ".env"

.envrc

@@ -7,21 +7,15 @@ permissions:
   contents: write
 
 jobs:
-  OpenAPI:
+  Release:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: earthly/actions-setup@v1
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          version: "latest"
       - uses: "actions/checkout@v4"
         with:
           fetch-depth: 0
-      - name: Setup Env
-        uses: ./.github/actions/env
-      - name: Generate OpenAPI final specification
-        run: >
-          earthly +build-final-spec --version=${{github.ref_name}}
+      - uses: cachix/install-nix-action@v31
+      - name: Build OpenAPI spec and events
+        run: nix develop --impure --command just build ${{github.ref_name}}
       - name: Create Release
         run: gh release create ${{github.ref_name}} --generate-notes
         env:
@@ -32,12 +26,7 @@ jobs:
           gh release upload ${{github.ref_name}} ./events/generated/all.json#events.json
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  publish-registry:
-    needs: OpenAPI
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/tag.yaml@v15
-    with:
-      registry_tags: ${{ github.ref_name }}
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
+      - name: Publish OpenAPI to Speakeasy Registry
+        run: nix develop --impure --command speakeasy run -s all --registry-tags ${{github.ref_name}},LATEST_RELEASE
+        env:
+          SPEAKEASY_API_KEY: ${{ secrets.SPEAKEASY_API_KEY }}

.github/actions/env/action.yml

@@ -27,10 +27,10 @@ worktrees
 .env
 
 
-# Earthly
-.tmp-earthly-out
+# Downloaded OpenAPI specs
+components/
 .DS_Store
-openapi/node_modules
+node_modules/
 
 
 .kubeconfig

.github/workflows/releases.yml

@@ -1,23 +1,41 @@
-speakeasyVersion: 1.755.0
+speakeasyVersion: 1.759.2
 sources:
     stacks-source:
         sourceNamespace: stacks-source
-        sourceRevisionDigest: sha256:5f3efcd6d57a3d10c6117dc8652e196b181e1535d33294062cfb5f997c8abff0
-        sourceBlobDigest: sha256:9e907dbdf2d4f42763a7a8d9e384a155be7a9443e612fa924108231587f827ad
+        sourceRevisionDigest: sha256:55cacc53f19d56070c775a281f59a76932d9d24a1a20af46d16243cc2bef9fb1
+        sourceBlobDigest: sha256:3b3e29bfb7abe6a0e8e1cb9c0601add2558863329b78c6b4759d77ecd5602db7
         tags:
             - latest
-            - v0.0.0
+            - RECONCILIATION_VERSION
 targets: {}
 workflow:
     workflowVersion: 1.0.0
     speakeasyVersion: latest
     sources:
         stacks-source:
             inputs:
-                - location: ./releases/build/generate.json
+                - location: ./releases/base.yaml
+                - location: ./components/auth.openapi.yaml
+                  modelNamespace: auth
+                - location: ./components/gateway.openapi.yaml
+                  modelNamespace: gateway
+                - location: ./components/ledger.openapi.yaml
+                  modelNamespace: ledger
+                - location: ./components/payments.openapi.yaml
+                  modelNamespace: payments
+                - location: ./components/search.openapi.yaml
+                  modelNamespace: search
+                - location: ./components/webhooks.openapi.yaml
+                  modelNamespace: webhooks
+                - location: ./components/wallets.openapi.yaml
+                  modelNamespace: wallets
+                - location: ./components/orchestration.openapi.yaml
+                  modelNamespace: orchestration
+                - location: ./components/reconciliation.openapi.yaml
+                  modelNamespace: reconciliation
             overlays:
                 - location: ./releases/overlays/shared.overlay.yaml
-            output: ./releases/build/openapi-overlaid.yaml
+            output: ./releases/build/generate.json
             registry:
                 location: registry.speakeasyapi.dev/formance/formance/stacks-source
     targets: {}

.gitignore

@@ -3,10 +3,28 @@ speakeasyVersion: latest
 sources:
     stacks-source:
         inputs:
-            - location: ./releases/build/generate.json
+            - location: ./releases/base.yaml
+            - location: ./components/auth.openapi.yaml
+              modelNamespace: auth
+            - location: ./components/gateway.openapi.yaml
+              modelNamespace: gateway
+            - location: ./components/ledger.openapi.yaml
+              modelNamespace: ledger
+            - location: ./components/payments.openapi.yaml
+              modelNamespace: payments
+            - location: ./components/search.openapi.yaml
+              modelNamespace: search
+            - location: ./components/webhooks.openapi.yaml
+              modelNamespace: webhooks
+            - location: ./components/wallets.openapi.yaml
+              modelNamespace: wallets
+            - location: ./components/orchestration.openapi.yaml
+              modelNamespace: orchestration
+            - location: ./components/reconciliation.openapi.yaml
+              modelNamespace: reconciliation
         overlays:
             - location: ./releases/overlays/shared.overlay.yaml
-        output: ./releases/build/openapi-overlaid.yaml
+        output: ./releases/build/generate.json
         registry:
             location: registry.speakeasyapi.dev/formance/formance/stacks-source
 targets: {}

.speakeasy/workflow.lock

@@ -0,0 +1,55 @@
+# Component versions
+LEDGER_VERSION := "v2.4.0"
+PAYMENTS_VERSION := "v3.2.0"
+WALLETS_VERSION := "v2.1.5"
+WEBHOOKS_VERSION := "v2.2.0"
+AUTH_VERSION := "v2.4.3"
+SEARCH_VERSION := "v2.1.0"
+ORCHESTRATION_VERSION := "v2.4.1"
+RECONCILIATION_VERSION := "v2.2.2"
+GATEWAY_VERSION := "v2.2.0"
+
+# Download all component OpenAPI specs from GitHub releases
+download-specs:
+    mkdir -p components
+    wget -q https://github.com/formancehq/ledger/releases/download/{{LEDGER_VERSION}}/openapi.yaml -O components/ledger.openapi.yaml
+    wget -q https://github.com/formancehq/payments/releases/download/{{PAYMENTS_VERSION}}/openapi.yaml -O components/payments.openapi.yaml
+    wget -q https://github.com/formancehq/gateway/releases/download/{{GATEWAY_VERSION}}/openapi.yaml -O components/gateway.openapi.yaml
+    wget -q https://github.com/formancehq/auth/releases/download/{{AUTH_VERSION}}/openapi.yaml -O components/auth.openapi.yaml
+    wget -q https://github.com/formancehq/search/releases/download/{{SEARCH_VERSION}}/openapi.yaml -O components/search.openapi.yaml
+    wget -q https://github.com/formancehq/webhooks/releases/download/{{WEBHOOKS_VERSION}}/openapi.yaml -O components/webhooks.openapi.yaml
+    wget -q https://github.com/formancehq/wallets/releases/download/{{WALLETS_VERSION}}/openapi.yaml -O components/wallets.openapi.yaml
+    wget -q https://github.com/formancehq/reconciliation/releases/download/{{RECONCILIATION_VERSION}}/openapi.yaml -O components/reconciliation.openapi.yaml
+    wget -q https://github.com/formancehq/flows/releases/download/{{ORCHESTRATION_VERSION}}/openapi.yaml -O components/orchestration.openapi.yaml
+
+# Prepend API path prefix to each component spec
+prepend-paths: download-specs
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/auth" + .key) | from_entries)' components/auth.openapi.yaml
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/ledger" + .key) | from_entries)' components/ledger.openapi.yaml
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/payments" + .key) | from_entries)' components/payments.openapi.yaml
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/search" + .key) | from_entries)' components/search.openapi.yaml
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/webhooks" + .key) | from_entries)' components/webhooks.openapi.yaml
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/wallets" + .key) | from_entries)' components/wallets.openapi.yaml
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/orchestration" + .key) | from_entries)' components/orchestration.openapi.yaml
+    yq -i '.paths |= (to_entries | map(select(.key == "/*").key = "/api/reconciliation" + .key) | from_entries)' components/reconciliation.openapi.yaml
+
+# Build the merged OpenAPI spec using Speakeasy
+build-openapi version="v0.0.0": prepend-paths
+    mkdir -p releases/build
+    speakeasy run -s all
+    cd releases && sed -i'' -e 's/SDK_VERSION/{{version}}/g' build/generate.json
+
+# Generate event schemas
+generate-events:
+    cd events && npm install
+    cd events && node index.js
+
+# Build everything (OpenAPI spec + events)
+build version="v0.0.0": (build-openapi version) generate-events
+
+# Publish OpenAPI spec to Speakeasy Registry
+publish-speakeasy version: prepend-paths
+    speakeasy run -s all --registry-tags {{version}},LATEST_RELEASE
+
+# Pre-commit: build spec and generate events
+pre-commit: (build-openapi) generate-events