azure-pipelines.yml

trigger:
  branches:
    include:
      - main
      - rel/*

pr:
  branches:
    include:
    - main
    - rel/*

variables:
  BuildPlatform: Any CPU
  DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true

stages:
- stage: Build
  jobs:
  - template: azure-pipelines-build-jobs.yml
    parameters:
      pools: [ { name: 'Windows', vmImage: 'windows-latest' }, { name: 'Linux', vmImage: 'ubuntu-latest' } ]
      projects: [ 'Nuqleon', 'Reaqtive', 'Reaqtor' ]
      configurations: [ 'Debug', 'Release' ]

  - job: Reaqtor_Dotnet_Format
    displayName: Run dotnet-format checks
    pool:
      vmImage: windows-latest

    steps:
    - task: UseDotNet@2
      displayName: Use .NET SDK from global.json
      inputs:
        useGlobalJson: true
        performMultiLevelLookup: true

    - task: DotNetCoreCLI@2
      displayName: Restore
      inputs:
        command: restore
        projects: All.slnx

    # The command + its exclusions live in eng/Run-DotnetFormat.ps1 (single source of
    # truth shared with local use). It runs `dotnet format style` with two exclusions,
    # both tracked by https://github.com/reaqtive/reaqtor/issues/138:
    #   * Nuqleon.Linq.Expressions.Optimizers - IDE0001 is pathologically slow here.
    #   * ~16 files <Compile Link>'d into multiple projects with different symbols
    #     (the USE_SLIM Bonsai links); dotnet format crashes merging their per-project
    #     edits (TryApplyChanges / LinkedFileMergeConflictCommentAdditionService).
    # Primary-constructor conversion (IDE0290) is disabled in .editorconfig.
    #
    # This check is enforcing. The #138 exclusions above only affect this
    # solution-scoped *apply/verify* path; the excluded files are still style-checked
    # at build time (EnforceCodeStyleInBuild=true, see Directory.Build.props), so they
    # cannot rot. To format them locally, run dotnet format scoped to a single project
    # (each linked file then has one compilation, so there is no merge to corrupt).
    - pwsh: ./eng/Run-DotnetFormat.ps1 -Verify -NoRestore
      displayName: Run dotnet-format

  - job: Build_and_Pack
    pool:
      vmImage: windows-latest

    steps:
    - task: UseDotNet@2
      displayName: Use .NET SDK from global.json
      inputs:
        useGlobalJson: true
        performMultiLevelLookup: true

    - powershell: |
        $existing = & dotnet tool list -g | Select-String "nbgv" 
        if (!$existing) {
            & dotnet tool install -g nbgv
        }
      displayName: Install NBGV tool

    - script: nbgv cloud -a
      displayName: Set Version

    - task: DotNetCoreCLI@2
      inputs:
        command: build
        projects: All.slnx
        configuration: Release
        verbosity: Minimal
        arguments: -c Release /p:CreatePackage=true /p:PackageOutputPath=$(Build.ArtifactStagingDirectory)/artifacts /bl:$(Build.ArtifactStagingDirectory)/Logs/Build.binlog
      displayName: Build and Pack

    - publish:  config
      artifact: SigningScripts
      displayName: Publish signing config

    - script: del $(Build.ArtifactStagingDirectory)\artifacts\*.symbols.nupkg
      displayName: Remove redundant packages from upload

    - publish: $(Build.ArtifactStagingDirectory)/artifacts
      displayName: Publish artifacts
      artifact: BuildPackages

    - publish: $(Build.ArtifactStagingDirectory)/Logs
      artifact: Logs_Build_and_Pack
      displayName: Publish Build Logs
      condition: always()

- stage: ProcessCodeCoverage
  dependsOn: Build
  condition: succeededOrFailed()
  jobs: 
  - job: ProcessCoverage
    pool:
      vmImage: ubuntu-latest
    steps:
    - checkout: self
      fetchDepth: 1
      
    # Each matrix job publishes its own RawCoverage_* pipeline artifact (immutable, unlike
    # the retired PublishBuildArtifacts@1 which let all jobs append into one artifact).
    # NB: download patterns match paths INSIDE each artifact (not artifact-name-prefixed),
    # so filter by file type; the reportgenerator glob below narrows to the RawCoverage_*
    # artifact folders that the download step lays out under $(Pipeline.Workspace).
    - download: current
      patterns: '**/*.xml'

    - task: DotNetCoreCLI@2
      inputs:
        command: custom
        custom: tool
        arguments: install -g dotnet-reportgenerator-globaltool
      displayName: Install ReportGenerator tool

    - script: |
        dotnet tool update -g dotnet-reportgenerator-globaltool
        export PATH=$PATH:$HOME/.dotnet/tools
        . ~/.bashrc
        reportgenerator -reports:$(Pipeline.Workspace)/RawCoverage_*/**/*.xml -sourcedirs:$(Build.SourcesDirectory) -targetdir:$(Build.SourcesDirectory)/coverage/reports -reporttypes:"Cobertura;lcov"
      displayName: Consolidate Reports from Jobs

    - task: PublishCodeCoverageResults@2
      displayName: Publish code coverage
      inputs:
        pathToSources: $(Build.SourcesDirectory)
        summaryFileLocation: $(Build.SourcesDirectory)/coverage/reports/Cobertura.xml

    - script: |
        bash <(curl -s https://codecov.io/bash)
      displayName: 'Upload to codecov.io'
      workingDirectory: $(Build.SourcesDirectory)/coverage/reports
      env:
        CODECOV_TOKEN: $(CODECOV_TOKEN)
      condition: ne(variables['build.reason'], 'PullRequest')

- stage: CodeSign
  dependsOn: Build
  condition: and(succeeded('Build'), not(or(eq(variables['build.reason'], 'PullRequest'), eq(variables['build.reason'], 'Schedule'))))
  jobs:
  - deployment: CodeSign
    displayName: Code Signing
    pool:
      vmImage: windows-latest
    environment: Code Sign
    variables:
    - group: SignClient Credentials
    strategy:
      runOnce:
        deploy:
          steps:

          - download: current
            artifact: SigningScripts

          - download: current
            artifact: BuildPackages

          - task: DotNetCoreCLI@2
            inputs:
              command: custom
              custom: tool
              arguments: install --tool-path . SignClient
            displayName: Install SignTool tool

          - pwsh: |
              .\SignClient "Sign" `
              --baseDirectory "$(Pipeline.Workspace)\BuildPackages" `
              --input "**/*.nupkg" `
              --config "$(Pipeline.Workspace)\SigningScripts\signclient.json" `
              --user "$(SignClientUser)" `
              --secret "$(SignClientSecret)" `
              --name "Reaqtive" `
              --description "Reaqtive" `
              --descriptionUrl "https://github.com/reaqtive/reaqtor" `
              --logLevel "Verbose"
            displayName: Sign packages

          - publish: $(Pipeline.Workspace)/BuildPackages
            displayName: Publish Signed Packages
            artifact: SignedPackages