VERSION 0.7

appimage:
  FROM --platform=linux/amd64 +base-rust
  RUN apt-get update && \
      apt-get -y install wget pipx binutils coreutils desktop-file-utils fakeroot fuse libgdk-pixbuf2.0-dev patchelf python3-pip python3-setuptools squashfs-tools strace util-linux zsync && \
      pipx ensurepath && \
      pipx install appimage-builder
  COPY +upend-bin/upend AppDir/usr/bin/upend
  COPY --dir +webui/dist AppDir/usr/share/upend/webui
  COPY assets/upend.png AppDir/usr/share/icons/upend.png
  COPY build/AppImageBuilder.yml .
  RUN sed -e "s/latest/$(./AppDir/usr/bin/upend --version | cut -d ' ' -f 2)/" -i AppImageBuilder.yml
  RUN pipx run appimage-builder
  SAVE ARTIFACT UpEnd* AS LOCAL dist/

docker-minimal:
  FROM debian:bookworm
  RUN apt-get update && \
    apt-get -y install libssl3 ca-certificates && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*
  DO +DOCKER_COMMON
  ARG tag=trunk
  SAVE IMAGE --push upend/upend:$tag-minimal

docker:
  FROM debian:bookworm
  RUN apt-get update && \
    apt-get -y install --no-install-recommends ffmpeg wget libssl3 ca-certificates && \
    wget https://github.com/bbc/audiowaveform/releases/download/1.8.1/audiowaveform_1.8.1-1-12_amd64.deb && \
    apt-get -y install ./audiowaveform_1.8.1-1-12_amd64.deb && \
    rm -v audiowaveform_1.8.1-1-12_amd64.deb && \
    apt-get remove -y wget && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*
  DO +DOCKER_COMMON
  ARG tag=trunk
  SAVE IMAGE --push upend/upend:$tag

DOCKER_COMMON:
  COMMAND
  COPY +upend-bin/upend /usr/bin/upend
  COPY --dir +webui/dist /usr/share/upend/webui
  ENTRYPOINT ["/usr/bin/upend"]
  CMD ["serve", "/vault", "--bind", "0.0.0.0:8093"]
  EXPOSE 8093
  ENV UPEND_NO_DESKTOP=true
  ENV UPEND_ALLOW_HOST='*'

upend-bin:
  FROM +base-rust
  RUN cargo build --release
  COPY +git-version/version.txt .
  RUN UPEND_VERSION=$(cat version.txt) cargo build --release
  SAVE ARTIFACT target/release/upend upend

webui:
  FROM +base-node
  COPY +jslib/jslib tools/upend_js
  WORKDIR webui
  RUN pnpm install --frozen-lockfile
  RUN pnpm build
  SAVE ARTIFACT dist

wasmlib:
  FROM --platform=linux/amd64 +base-rust
  WORKDIR tools/upend_wasm
  RUN wasm-pack build --target web --out-dir pkg-web && \
      wasm-pack build --target nodejs --out-dir pkg-node
  RUN sed -e 's%"name": "upend_wasm"%"name": "@upnd/wasm-web"%' -i pkg-web/package.json && \
      sed -e 's%"name": "upend_wasm"%"name": "@upnd/wasm-node"%' -i pkg-node/package.json
  SAVE ARTIFACT pkg-web AS LOCAL tools/upend_wasm/pkg-web
  SAVE ARTIFACT pkg-node AS LOCAL tools/upend_wasm/pkg-node

jslib:
  FROM +base-node
  WORKDIR tools/upend_js
  RUN pnpm build
  SAVE ARTIFACT . jslib 

webext:
  FROM +base-node
  WORKDIR webext
  RUN pnpm build

lint:
  WAIT
    BUILD +lint-backend
    BUILD +lint-frontend
    BUILD +lint-jslib
  END

lint-backend:
  FROM +base-rust
  RUN cargo clippy --workspace

lint-frontend:
  FROM +base-node
  COPY +jslib/jslib tools/upend_js
  WORKDIR webui
  RUN pnpm install --frozen-lockfile
  RUN pnpm check && pnpm lint
  
lint-jslib:
  FROM +base-node
  WORKDIR tools/upend_js
  RUN pnpm lint

audit:
  WAIT
    BUILD +audit-backend
    BUILD +audit-frontend
  END

audit-backend:
  FROM +base-rust
  RUN cargo audit --workspace

audit-frontend:
  FROM +base-node
  COPY +jslib/jslib tools/upend_js
  WORKDIR webui
  RUN pnpm install --frozen-lockfile
  RUN pnpm audit

test:
  WAIT
    BUILD +test-jslib
    BUILD +test-backend
  END

test-jslib:
  FROM +base-node
  WORKDIR tools/upend_js
  RUN pnpm build && pnpm test

test-backend:
  FROM +base-rust
  RUN cargo nextest run --workspace

appimage-signed:
  FROM alpine
  RUN apk add gpg gpg-agent
  RUN --secret GPG_SIGN_KEY echo "$GPG_SIGN_KEY" | gpg --import
  COPY +appimage/*.AppImage .
  RUN gpg --clear-sign *.AppImage
  SAVE ARTIFACT *.AppImage
  SAVE ARTIFACT *.asc

deploy-appimage-nightly:
  FROM alpine
  RUN apk add openssh-client
  RUN --secret SSH_CONFIG --secret SSH_UPLOAD_KEY --secret SSH_KNOWN_HOSTS \
    mkdir -p $HOME/.ssh && \
    echo "$SSH_CONFIG" > $HOME/.ssh/config && \
    echo "$SSH_UPLOAD_KEY" > $HOME/.ssh/id_rsa && \
    echo "$SSH_KNOWN_HOSTS" > $HOME/.ssh/known_hosts && \
    chmod 600 $HOME/.ssh/*
  COPY +appimage-signed/* .
  RUN --push scp -v *.AppImage *.asc mainsite:releases/nightly

NPM_PUBLISH:
  COMMAND
  ARG pkg_name
  IF [ "`npm view $pkg_name version`" != "`node -p \"require('./package.json').version\"`" ]
    RUN echo "Publishing $pkg_name to npm..."
    RUN --push npm publish --access public
  ELSE
    RUN echo "Nothing to do for $pkg_name."
  END

base-npm-publish:
  FROM +base-node
  RUN --secret NPM_TOKEN echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > $HOME/.npmrc
  COPY +jslib/jslib tools/upend_js

publish-js-lib:
  FROM +base-npm-publish
  WORKDIR /upend/tools/upend_js
  DO +NPM_PUBLISH --pkg_name=@upnd/upend

publish-js-wasm:
  FROM +base-npm-publish
  WORKDIR /upend/tools/upend_wasm/pkg-web
  DO +NPM_PUBLISH --pkg_name=@upnd/wasm-web
  WORKDIR /upend/tools/upend_wasm/pkg-node
  DO +NPM_PUBLISH --pkg_name=@upnd/wasm-node

publish-js-all:
  BUILD +publish-js-wasm
  BUILD +publish-js-lib

git-version:
  LOCALLY
  RUN ./build/get_version.sh | tee /tmp/upend_version.txt
  SAVE ARTIFACT /tmp/upend_version.txt version.txt
  RUN rm /tmp/upend_version.txt

changelog:
  FROM orhunp/git-cliff
  COPY .git .git
  RUN git-cliff -o CHANGELOG.md
  SAVE ARTIFACT CHANGELOG.md

update-changelog:
  LOCALLY
  COPY +changelog/CHANGELOG.md .
  RUN git add CHANGELOG.md && git commit -m "Update CHANGELOG"
  RUN --push git push

base-rust:
  FROM rust:bookworm
  RUN rustup component add clippy
  RUN curl -LsSf https://get.nexte.st/latest/linux | tar zxf - -C /usr/local/cargo/bin
  RUN cargo install wasm-pack wasm-bindgen-cli && rustup target add wasm32-unknown-unknown
  RUN cargo install cargo-audit
  WORKDIR /upend
  COPY Cargo.toml Cargo.lock .
  COPY base/Cargo.toml base/Cargo.toml
  COPY cli/Cargo.toml cli/Cargo.toml
  COPY db/Cargo.toml db/Cargo.toml
  COPY tools/upend_wasm/Cargo.toml tools/upend_wasm/Cargo.toml
  RUN cargo fetch --locked
  COPY --dir base cli db Cargo.toml Cargo.lock .
  COPY --dir tools/upend_wasm tools/

base-node:
  FROM node:lts
  RUN npm install -g pnpm
  WORKDIR /upend
  COPY +wasmlib/pkg-web tools/upend_wasm/pkg-web
  COPY +wasmlib/pkg-node tools/upend_wasm/pkg-node
  COPY tools/upend_js/package.json tools/upend_js/pnpm-lock.yaml tools/upend_js/
  RUN cd tools/upend_js && pnpm install --frozen-lockfile
  COPY webui/package.json webui/pnpm-lock.yaml webui/
  RUN cd webui && pnpm install --frozen-lockfile
  COPY --dir webui webext .
  COPY --dir tools/upend_js tools/