# CircleCI automatically reads this file from our repo and uses it for
# configuration. Docs:
# https://circleci.com/docs/2.1/configuration-reference/
# https://circleci.com/docs/2.1/sample-config/
version: 2.1

jobs:
  build:
    docker:
      - image: cimg/python:3.11

    steps:
      - checkout

      - restore_cache:
          key: venv-5-{{ .Branch }}-{{ checksum "requirements.txt" }}

      - run:
          name: Base dependencies
          command: |
            # google-cloud-sdk: https://cloud.google.com/sdk/docs/install#deb
            echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
            curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key --keyring /usr/share/keyrings/cloud.google.gpg add -
            sudo apt-get update
            sudo apt-get install -y apt-transport-https ca-certificates gnupg google-cloud-sdk google-cloud-cli-firestore-emulator default-jre

      - run:
          name: Python dependencies
          command: |
            pip install -U pip flake8
            pip  -V
            # make sure we install these at head, below
            pip uninstall -y arroba granary lexrpc oauth-dropins
            pip install -U -r requirements.txt
            pip install coverage coveralls

            ln -sf `pyenv prefix`/lib/python3.11/site-packages/oauth_dropins/fonts oauth_dropins_fonts
            ln -sf `pyenv prefix`/lib/python3.11/site-packages/oauth_dropins/static oauth_dropins_static

      - run:
          name: Build and test
          command: |
            CLOUDSDK_CORE_PROJECT=brid-gy gcloud emulators firestore start --host-port=:8089 --database-mode=datastore-mode < /dev/null >& /tmp/firestore-emulator.log &
            sleep 5s
            python -m coverage run --source=. --omit=appengine_config.py,logs.py,tests/\* -m unittest discover -v
            python -m coverage html -d /tmp/coverage_html
            if [ "$COVERALLS_REPO_TOKEN" != "" ]; then coveralls || true; fi

            # check for unintentionally overridden test methods
            # https://flake8.pycqa.org/en/latest/user/error-codes.html#error-codes
            # https://flake8.pycqa.org/en/latest/user/options.html#cmdoption-flake8-select
            flake8 --select=F811 tests/test_*.py

      # only runs if all previous steps succeed, including tests
      # https://circleci.com/docs/configuration-reference/#the-when-attribute
      - run:
          name: Deploy
          command: |
            echo $CIRCLE_BRANCH
            if [ $CIRCLE_BRANCH = "main" ]; then
              echo $FLASK_SECRET_KEY > flask_secret_key
              echo $GCLOUD_SERVICE_KEY | gcloud auth activate-service-account --key-file=-
              # TODO: add hub.yaml when we're ready
              gcloud -q beta app deploy --no-cache --project bridgy-federated app.yaml index.yaml queue.yaml
            fi

      - save_cache:
          key: venv-5-{{ .Branch }}-{{ checksum "requirements.txt" }}
          paths:
            - /home/circleci/.pyenv
            # Ideally we'd cache these, but they need root, and the cimg/python
            # Docker image's default user is circleci :/
            # https://github.com/cypress-io/circleci-orb/issues/269
            #
            # - /usr/lib/google-cloud-sdk
            # - /usr/lib/jvm/java-11-openjdk-amd64

      - store_artifacts:
          path: /tmp/coverage_html