# IMPORTANT:
# Do not run BinSkim because we do not control producing the binaries. That process is owned by
# Epic. We just provide source code. Since we do not control the build, BinSkim is not needed.

# Manual trigger for now
trigger: none
pr: none

parameters:
- name: SignTypeOverride
  displayName: Signing Type (default is real for the main branch and test otherwise)
  type: string
  default: default
  values:
  - default
  - test
  - real

variables:
  # MicroBuild requires TeamName to be set.
  - name: TeamName
    value: C++ Unreal Engine
  - name: TagName
    value: $[replace(variables['Build.SourceBranch'], 'refs/tags/', '')]
  # If the user didn't override the signing type, then only real-sign on main.
  - ${{ if ne(parameters.SignTypeOverride, 'default') }}:
    - name: SignType
      value: ${{ parameters.SignTypeOverride }}
  - ${{ if and(eq(parameters.SignTypeOverride, 'default'), or(eq(variables['Build.SourceBranchName'], 'main'), startsWith(variables['Build.SourceBranch'], 'refs/tags'))) }}:
    - name: SignType
      value: real
  - ${{ if and(eq(parameters.SignTypeOverride, 'default'), not(or(eq(variables['Build.SourceBranchName'], 'main'), startsWith(variables['Build.SourceBranch'], 'refs/tags')))) }}:
    - name: SignType
      value: test

resources:
  repositories:
  - repository: 1ESPipelineTemplates
    type: git
    name: 1ESPipelineTemplates/1ESPipelineTemplates
    ref: refs/tags/release

extends:
  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
  parameters:
    pool:
      name: VSEngSS-MicroBuild2022-1ES
      os: windows
    customBuildTags:
    - ES365AIMigrationTooling
    stages:
    - stage: stage
      jobs:
      - job: 'UnrealEngine_VisualStudioTools_Release'
        timeoutInMinutes: 1440
        templateContext:
          outputParentDirectory: $(Agent.BuildDirectory)/out/
          outputs:
          - output: pipelineArtifact
            displayName: 'Publish signed plugin files'
            targetPath: $(Agent.BuildDirectory)/out
            artifactName: SignedPlugin
            artifactType: container
            sbomEnabled: false
        steps:
          - powershell: |
              Write-Host "##vso[task.setVariable variable=SHA1]$(git rev-parse HEAD)"
            displayName: Save tag commit hash
            workingDirectory: '$(Build.SourcesDirectory)'
          - task: MicroBuildSigningPlugin@4
            displayName: Install MicroBuild Signing
            inputs:
              signType: $(SignType)
              zipSources: true
          - task: PowerShell@2
            displayName: "Create zip excluding .git folder"
            inputs:
              targetType: 'inline'
              script: |
                $destinationDirectory = "$(Agent.BuildDirectory)/out"
                New-Item -Path $destinationDirectory -ItemType Directory
                git archive -o "$destinationDirectory/VisualStudioTools.zip" $(SHA1)
          - powershell: New-FileCatalog -Path .\VisualStudioTools.zip -CatalogFilePath .\VisualStudioTools.zip.cat -CatalogVersion 2.0
            displayName: Create standalone catalog
            workingDirectory: '$(Agent.BuildDirectory)\out'
          - task: NuGetToolInstaller@1
            inputs:
              versionSpec: 5.7
          - task: NuGetCommand@2
            displayName: 'NuGet Restore MicroBuild Signing Extension'
            inputs:
              command: 'restore'
              restoreSolution: 'Scripts/SignDetached.proj'
              feedsToUse: 'config'
              restoreDirectory: '$(Build.SourcesDirectory)\Scripts\packages'
          - task: MSBuild@1
            displayName: Sign catalogs
            inputs:
              solution: Scripts/SignDetached.proj
              msbuildArguments: /p:SignType=$(SignType) /p:BaseOutputDirectory=$(Agent.BuildDirectory)\out
          # === Disabled for now in favor of uploading the artifacts to the pipeline ===
          # - task: GitHubRelease@1
          #   displayName: Pre-release to public repo
          #   condition: and(succeeded(), startsWith(variables['Build.SourceBranch'], 'refs/tags'))
          #   inputs:
          #     gitHubConnection: GitHub-VSCodeExtensions
          #     repositoryName: microsoft/vc-ue-extensions
          #     action: create
          #     target: $(SHA1)
          #     tagSource: gitTag
          #     tag: $(TagName)
          #     title: $(TagName)
          #     isDraft: true
          #     isPreRelease: true
          #     assets: |
          #         $(Agent.BuildDirectory)\out\VisualStudioTools.zip
          #         $(Agent.BuildDirectory)\out\VisualStudioTools.zip.cat