1use std::cell::RefCell;
  2
  3use gh_workflow::{Concurrency, Env, Expression};
  4
  5use crate::tasks::workflows::{runners::Platform, steps::NamedJob};
  6
  7macro_rules! secret {
  8    ($secret_name:ident) => {
  9        pub const $secret_name: &str = concat!("${{ secrets.", stringify!($secret_name), " }}");
 10    };
 11}
 12
 13macro_rules! var {
 14    ($secret_name:ident) => {
 15        pub const $secret_name: &str = concat!("${{ vars.", stringify!($secret_name), " }}");
 16    };
 17}
 18
 19secret!(APPLE_NOTARIZATION_ISSUER_ID);
 20secret!(APPLE_NOTARIZATION_KEY);
 21secret!(APPLE_NOTARIZATION_KEY_ID);
 22secret!(AZURE_SIGNING_CLIENT_ID);
 23secret!(AZURE_SIGNING_CLIENT_SECRET);
 24secret!(AZURE_SIGNING_TENANT_ID);
 25secret!(CACHIX_AUTH_TOKEN);
 26secret!(DIGITALOCEAN_SPACES_ACCESS_KEY);
 27secret!(DIGITALOCEAN_SPACES_SECRET_KEY);
 28secret!(GITHUB_TOKEN);
 29secret!(MACOS_CERTIFICATE);
 30secret!(MACOS_CERTIFICATE_PASSWORD);
 31secret!(SENTRY_AUTH_TOKEN);
 32secret!(ZED_CLIENT_CHECKSUM_SEED);
 33secret!(ZED_CLOUD_PROVIDER_ADDITIONAL_MODELS_JSON);
 34secret!(ZED_SENTRY_MINIDUMP_ENDPOINT);
 35
 36// todo(ci) make these secrets too...
 37var!(AZURE_SIGNING_ACCOUNT_NAME);
 38var!(AZURE_SIGNING_CERT_PROFILE_NAME);
 39var!(AZURE_SIGNING_ENDPOINT);
 40
 41pub fn bundle_envs(platform: Platform) -> Env {
 42    let env = Env::default()
 43        .add("CARGO_INCREMENTAL", 0)
 44        .add("ZED_CLIENT_CHECKSUM_SEED", ZED_CLIENT_CHECKSUM_SEED)
 45        .add("ZED_MINIDUMP_ENDPOINT", ZED_SENTRY_MINIDUMP_ENDPOINT);
 46
 47    match platform {
 48        Platform::Linux => env,
 49        Platform::Mac => env
 50            .add("MACOS_CERTIFICATE", MACOS_CERTIFICATE)
 51            .add("MACOS_CERTIFICATE_PASSWORD", MACOS_CERTIFICATE_PASSWORD)
 52            .add("APPLE_NOTARIZATION_KEY", APPLE_NOTARIZATION_KEY)
 53            .add("APPLE_NOTARIZATION_KEY_ID", APPLE_NOTARIZATION_KEY_ID)
 54            .add("APPLE_NOTARIZATION_ISSUER_ID", APPLE_NOTARIZATION_ISSUER_ID),
 55        Platform::Windows => env
 56            .add("AZURE_TENANT_ID", AZURE_SIGNING_TENANT_ID)
 57            .add("AZURE_CLIENT_ID", AZURE_SIGNING_CLIENT_ID)
 58            .add("AZURE_CLIENT_SECRET", AZURE_SIGNING_CLIENT_SECRET)
 59            .add("ACCOUNT_NAME", AZURE_SIGNING_ACCOUNT_NAME)
 60            .add("CERT_PROFILE_NAME", AZURE_SIGNING_CERT_PROFILE_NAME)
 61            .add("ENDPOINT", AZURE_SIGNING_ENDPOINT)
 62            .add("FILE_DIGEST", "SHA256")
 63            .add("TIMESTAMP_DIGEST", "SHA256")
 64            .add("TIMESTAMP_SERVER", "http://timestamp.acs.microsoft.com"),
 65    }
 66}
 67
 68pub(crate) fn one_workflow_per_non_main_branch() -> Concurrency {
 69    Concurrency::default()
 70        .group("${{ github.workflow }}-${{ github.ref_name }}-${{ github.ref_name == 'main' && github.sha || 'anysha' }}")
 71        .cancel_in_progress(true)
 72}
 73
 74// Represents a pattern to check for changed files and corresponding output variable
 75pub(crate) struct PathCondition {
 76    pub name: &'static str,
 77    pub pattern: &'static str,
 78    pub invert: bool,
 79    pub set_by_step: RefCell<Option<String>>,
 80}
 81impl PathCondition {
 82    pub fn new(name: &'static str, pattern: &'static str) -> Self {
 83        Self {
 84            name,
 85            pattern,
 86            invert: false,
 87            set_by_step: Default::default(),
 88        }
 89    }
 90    pub fn inverted(name: &'static str, pattern: &'static str) -> Self {
 91        Self {
 92            name,
 93            pattern,
 94            invert: true,
 95            set_by_step: Default::default(),
 96        }
 97    }
 98    pub fn guard(&self, job: NamedJob) -> NamedJob {
 99        let set_by_step = self
100            .set_by_step
101            .borrow()
102            .clone()
103            .unwrap_or_else(|| panic!("condition {},is never set", self.name));
104        NamedJob {
105            name: job.name,
106            job: job
107                .job
108                .add_needs(set_by_step.clone())
109                .cond(Expression::new(format!(
110                    "needs.{}.outputs.{} == 'true'",
111                    &set_by_step, self.name
112                ))),
113        }
114    }
115}
116
117pub mod assets {
118    // NOTE: these asset names also exist in the zed.dev codebase.
119    pub const MAC_AARCH64: &str = "Zed-aarch64.dmg";
120    pub const MAC_X86_64: &str = "Zed-x86_64.dmg";
121    pub const LINUX_AARCH64: &str = "zed-linux-aarch64.tar.gz";
122    pub const LINUX_X86_64: &str = "zed-linux-x86_64.tar.gz";
123    pub const WINDOWS_X86_64: &str = "Zed-x86_64.exe";
124    pub const WINDOWS_AARCH64: &str = "Zed-aarch64.exe";
125
126    pub const REMOTE_SERVER_MAC_AARCH64: &str = "zed-remote-server-macos-aarch64.gz";
127    pub const REMOTE_SERVER_MAC_X86_64: &str = "zed-remote-server-macos-x86_64.gz";
128    pub const REMOTE_SERVER_LINUX_AARCH64: &str = "zed-remote-server-linux-aarch64.gz";
129    pub const REMOTE_SERVER_LINUX_X86_64: &str = "zed-remote-server-linux-x86_64.gz";
130
131    pub fn all() -> Vec<&'static str> {
132        vec![
133            MAC_AARCH64,
134            MAC_X86_64,
135            LINUX_AARCH64,
136            LINUX_X86_64,
137            WINDOWS_X86_64,
138            WINDOWS_AARCH64,
139            REMOTE_SERVER_MAC_AARCH64,
140            REMOTE_SERVER_MAC_X86_64,
141            REMOTE_SERVER_LINUX_AARCH64,
142            REMOTE_SERVER_LINUX_X86_64,
143        ]
144    }
145}