config.yml

# Root CircleCI configuration
# Configuration for individual packages lives in .circleci/src/{commands,jobs,workflows}

version: 2.1

setup: true

orbs:
  continuation: circleci/continuation@0.3.1
  path-filtering: circleci/path-filtering@0.1.1
  slack: circleci/slack@4.12.0

parameters:
  workflow:
    type: string
    default: 'main'

commands:
  create_concatenated_patch_file:
    description: 'Concatenate all patch-files. File is used as checksum source for part of caching key.'
    parameters:
      filename:
        type: string
    steps:
      - run:
          name: Combine patch-files to single file
          command: ls -d -- packages/*/patches/*.patch | xargs cat > << parameters.filename >>

jobs:
  # Generate the CircleCI continue_config.yml from .circleci/src
  generate-config:
    docker:
      - image: cimg/base:2021.04
    steps:
      # The circleci cli exposed in the image doesn't support config packing
      # so we install a version that does
      - run:
          name: Install cli
          command: curl -fLSs https://raw.githubusercontent.com/CircleCI-Public/circleci-cli/master/install.sh | DESTDIR=~/cli bash
      - checkout
      - run:
          name: Generate config
          command: ~/cli config pack .circleci/src > .circleci/continue_config.yml
      - persist_to_workspace:
          root: ./
          paths:
            - .circleci/continue_config.yml

  init:
    working_directory: ~/apps
    docker:
      - image: cimg/node:20.19
    resource_class: large
    steps:
      - checkout

      - create_concatenated_patch_file:
          filename: combined-patch-file.txt

      - restore_cache:
          keys:
            - npm-cache-2025-10-01-{{ checksum "package-lock.json" }}-{{ checksum "combined-patch-file.txt" }}

      - run: sudo apt-get update
      - run: sudo apt-get install -y build-essential libssl-dev
      - run:
          name: Install dependencies
          command: |
            if [[ -d node_modules ]]; then
              echo "Using cached node_modules, running postinstall..."
              CI=true npm run postinstall
            else
              echo "No cache found, running fresh install..."
              CI=true npm ci --prefer-offline
            fi

      - save_cache:
          key: npm-cache-2025-10-01-{{ checksum "package-lock.json" }}-{{ checksum "combined-patch-file.txt" }}
          paths:
            - ./node_modules
            - ./packages/protocol-dashboard/node_modules
            - ./packages/web/node_modules
            - ./packages/mobile/node_modules
            - ./packages/embed/node_modules
            - ./packages/harmony/node_modules
            - ./packages/common/node_modules
            - ./packages/libs/node_modules
            - ./packages/sdk/node_modules
            - ./packages/identity-service/node_modules
            - ./packages/es-indexer/node_modules
            - ./packages/ddex-entrypoint/node_modules
            - ./packages/create-audius-app/node_modules
            - ./packages/dotenv-linter/bin

  generate-release-branch:
    working_directory: ~/apps
    resource_class: small
    docker:
      - image: cimg/base:2023.01
    steps:
      - checkout
      - add_ssh_keys:
          fingerprints:
            - 'd0:0b:a0:19:ac:46:58:e4:6c:ac:34:99:f6:1b:31:bb' # github.com
      - run:
          name: Set git config
          command: |
            git config --global user.email "audius-infra@audius.co"
            git config --global user.name "audius-infra"
      - run:
          name: Create + push branch
          command: |
            OLD_VERSION=$(jq -r .version packages/discovery-provider/.version.json)
            NEW_VERSION=$(echo ${OLD_VERSION} | awk -F. '{$NF = $NF + 1;} 1' | sed 's/ /./g')

            # Bump version for discovery node
            jq --arg version "$NEW_VERSION" '.version=$version' packages/discovery-provider/.version.json > /tmp/.version.json
            mv /tmp/.version.json packages/discovery-provider/.version.json
            git add packages/discovery-provider/.version.json

            PROTOCOL_DIRS=$(bash ./scripts/get-release-dirs.sh protocol)
            CHANGELOG=$(git log --pretty=format:"[%h] %s %an" --date=short protocol-v${OLD_VERSION}..HEAD -- ${PROTOCOL_DIRS})
            MESSAGE="Audius Protocol v${NEW_VERSION}

            ${CHANGELOG}"
            git commit -m "${MESSAGE}"

            git tag protocol-v${NEW_VERSION}
            git push origin protocol-v${NEW_VERSION}

            # Weird way to push both to main and the new release branch
            git branch "release-v$NEW_VERSION"
            git checkout "release-v$NEW_VERSION"
            git push --set-upstream origin main "release-v$NEW_VERSION"

  approve-foundation-deployment-holds:
    resource_class: small
    docker:
      - image: cimg/base:2023.01
    steps:
      - checkout
      - run:
          name: Approve Foundation Deployment
          command: bash .circleci/scripts/auto-approve-release.sh foundation

  approve-sp-deployment-holds:
    resource_class: small
    docker:
      - image: cimg/base:2023.01
    steps:
      - checkout
      - run:
          name: Approve SP Deployment
          command: bash .circleci/scripts/auto-approve-release.sh sp

  notify-pipeline-status:
    working_directory: ~/apps
    resource_class: small
    docker:
      - image: cimg/base:2023.01
    steps:
      - checkout
      - run:
          name: Wait For Pipeline
          command: bash .circleci/scripts/wait-for-pipeline.sh
      - run:
          name: Generate Slack Template
          command: bash .circleci/scripts/generate-slack-template.sh
      - slack/notify:
          channel: 'C06SP746DA7'
          template: PIPELINE_STATUS_TEMPLATE

  aggregate-pipeline-status:
    working_directory: ~/apps
    resource_class: small
    docker:
      - image: cimg/base:2023.01
    steps:
      - checkout
      - run:
          name: Wait For Pipeline
          command: bash .circleci/scripts/wait-for-pipeline.sh
      - run:
          name: Generate Slack Template
          command: bash .circleci/scripts/generate-slack-template.sh
      - run:
          name: Check status
          command: bash .circleci/scripts/check-workflow-statuses.sh
      - slack/notify:
          template: PIPELINE_STATUS_TEMPLATE

workflows:
  setup:
    when:
      and:
        - equal: ['main', << pipeline.parameters.workflow >>]
        - equal: ['disabled', 'enabled']  # Always false - CircleCI disabled
    jobs:
      - generate-config
      - init:
          context:
            - Vercel
      - path-filtering/filter:
          name: trigger-relevant-workflows
          filters:
            branches:
              ignore:
                - main
                - /^release.*$/
          base-revision: main
          config-path: ../workspace/.circleci/continue_config.yml
          mapping: |
            comms/.* run-discovery-workflow true
            packages/identity-service/.* run-identity-workflow true
            eth-contracts/.* run-eth-contracts-workflow true
            .circleci/.* run-discovery-workflow true
            .circleci/.* run-identity-workflow true
            .circleci/.* run-eth-contracts-workflow true
            .circleci/.* run-protocol-dashboard-workflow true
            .circleci/.* run-sdk-workflow true
            .circleci/.* run-web-workflow false
            .circleci/.* run-mobile-workflow false
            .circleci/.* run-embed-workflow true
            package-lock.json run-sdk-workflow true
            .* run-integration-workflow true
            .* run-release-workflow false
            packages/discovery-provider/.* run-discovery-workflow true
            packages/web/.* run-web-workflow false
            packages/web/e2e/.* run-integration-workflow true
            packages/mobile/.* run-mobile-workflow false
            packages/embed/.* run-embed-workflow true
            packages/common/.* run-common-workflow true
            packages/common/.* run-web-workflow false
            packages/common/.* run-mobile-workflow false
            packages/common/.* run-protocol-dashboard-workflow true
            packages/protocol-dashboard/.* run-protocol-dashboard-workflow true
            packages/harmony/.* run-web-workflow false
            packages/harmony/.* run-protocol-dashboard-workflow true
            packages/harmony/.* run-embed-workflow true
            packages/eslint-config-audius/.* run-web-workflow false
            packages/eslint-config-audius/.* run-mobile-workflow false
            packages/sdk/.* run-sdk-workflow true
            packages/sdk/.* run-create-audius-app-workflow true
            packages/create-audius-app/.* run-create-audius-app-workflow true
            packages/fixed-decimal/.* run-sdk-workflow true
            packages/fixed-decimal/.* run-web-workflow false
            packages/fixed-decimal/.* run-mobile-workflow false
            packages/fixed-decimal/.* run-common-workflow true
            packages/spl/.* run-sdk-workflow true
            packages/spl/.* run-identity-workflow true
          requires:
            - generate-config
            - init
          workspace_path: ../workspace

      - path-filtering/filter:
          name: trigger-main-workflows
          filters:
            branches:
              only: /^main$/
          base-revision: main~1
          config-path: ../workspace/.circleci/continue_config.yml
          mapping: |
            comms/.* run-discovery-workflow true
            packages/identity-service/.* run-identity-workflow true
            eth-contracts/.* run-eth-contracts-workflow true
            .circleci/.* run-discovery-workflow true
            .circleci/.* run-identity-workflow true
            .circleci/.* run-eth-contracts-workflow true
            .circleci/.* run-protocol-dashboard-workflow true
            .circleci/.* run-sdk-workflow true
            .circleci/.* run-web-workflow false
            .circleci/.* run-mobile-workflow false
            .circleci/.* run-embed-workflow true
            package-lock.json run-sdk-workflow true
            .* run-integration-workflow true
            .* run-release-workflow false
            packages/discovery-provider/.* run-discovery-workflow true
            packages/web/.* run-web-workflow false
            packages/mobile/.* run-mobile-workflow false
            packages/embed/.* run-embed-workflow true
            packages/common/.* run-common-workflow true
            packages/common/.* run-web-workflow false
            packages/common/.* run-mobile-workflow false
            packages/protocol-dashboard/.* run-protocol-dashboard-workflow true
            packages/harmony/.* run-web-workflow false
            packages/eslint-config-audius/.* run-web-workflow false
            packages/eslint-config-audius/.* run-mobile-workflow false
            packages/sdk/.* run-sdk-workflow true
            packages/sdk/.* run-create-audius-app-workflow true
            packages/create-audius-app/.* run-create-audius-app-workflow true
            packages/fixed-decimal/.* run-sdk-workflow true
            packages/fixed-decimal/.* run-web-workflow false
            packages/fixed-decimal/.* run-mobile-workflow false
            packages/fixed-decimal/.* run-common-workflow true
            packages/spl/.* run-sdk-workflow true
            packages/spl/.* run-identity-workflow true
            .* run-web-workflow false
            .* run-mobile-workflow false
          requires:
            - generate-config
            - init
          workspace_path: ../workspace

      - path-filtering/filter:
          name: trigger-release-workflows
          filters:
            branches:
              only: /^release-v.*$/
          base-revision: main
          config-path: ../workspace/.circleci/continue_config.yml
          mapping: |
            .* run-integration-workflow true
            .* run-eth-contracts-workflow true
            .* run-release-workflow true
            .* run-sdk-workflow true
          requires:
            - generate-config
            - init
          workspace_path: ../workspace

      - notify-pipeline-status:
          context:
            - slack-secrets
          requires:
            - trigger-main-workflows
          filters:
            branches:
              only: /^main$/

      - aggregate-pipeline-status:
          context:
            - slack-secrets
          requires:
            - trigger-relevant-workflows
          filters:
            branches:
              ignore:
                - main
                - /^release.*$/

  release-create-branch:
    when:
      and:
        - equal: ['release-create-branch', << pipeline.parameters.workflow >>]
        - equal: ['disabled', 'enabled']  # Always false - CircleCI disabled
    jobs:
      - generate-release-branch

  auto-approve-foundation-deploy:
    when:
      and:
        - equal: ['auto-approve-foundation-deploy', << pipeline.parameters.workflow >>]
        - equal: ['disabled', 'enabled']  # Always false - CircleCI disabled
    jobs:
      - approve-foundation-deployment-holds:
          context: [slack-secrets, circle-daily-deploy-secrets]

  mobile-prod-build:
    when:
      and:
        - equal: ['mobile-prod-build', << pipeline.parameters.workflow >>]
        - equal: ['disabled', 'enabled']  # Always false - CircleCI disabled
    jobs:
      - generate-config
      - init:
          context:
            - Vercel
      - continuation/continue:
          config_path: .circleci/continue_config.yml
          parameters:
            run-mobile-prod-build-workflow: true