name: $(Date:yyyyMMdd).$(Rev:r)
variables:
  - name: Codeql.Enabled
    value: true
resources:
  repositories:
    - repository: self
      type: git
      ref: refs/heads/main
    - repository: 1esPipelines
      type: git
      name: 1ESPipelineTemplates/1ESPipelineTemplates
      ref: refs/tags/release
trigger: none
extends:
  template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
  parameters:
    pool:
      name: 1ES_JavaTooling_Pool
      image: 1ES_JavaTooling_Windows_2022
      os: windows
    sdl:
      sourceAnalysisPool:
        name: 1ES_JavaTooling_Pool
        image: 1ES_JavaTooling_Windows_2022
        os: windows
    customBuildTags:
      - MigrationTooling-mseng-VSJava-9019-Tool
    stages:
      - stage: Build
        jobs:
          - job: Job_1
            displayName: RC
            templateContext:
              outputs:
                - output: pipelineArtifact
                  artifactName: extension
                  targetPath: $(Build.ArtifactStagingDirectory)
                  displayName: "Publish Artifact: extension"
            steps:
              - checkout: self
                clean: true
                fetchTags: true
              - task: NodeTool@0
                displayName: Use Node 20.x
                inputs:
                  versionSpec: 20.x
              - task: JavaToolInstaller@0
                displayName: Use Java 17
                inputs:
                  versionSpec: "17"
                  jdkArchitectureOption: x64
                  jdkSourceOption: PreInstalled
              - task: Npm@1
                displayName: npm install
                inputs:
                  verbose: false
              - task: Bash@3
                displayName: npx gulp build_server
                inputs:
                  targetType: inline
                  script: |-
                    # Build the jars to the server folder.
                    npm run build-server
              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
                displayName: ESRP CodeSigning
                inputs:
                  ConnectedServiceName: 'ESRP-Release-Test'
                  AppRegistrationClientId: '1992ee18-e9d2-42d6-ab20-94dd947a44b6'
                  AppRegistrationTenantId: '72f988bf-86f1-41af-91ab-2d7cd011db47'
                  AuthAKVName: 'vscjavaci'
                  AuthCertName: 'vscjava-esrprelease-auth'
                  AuthSignCertName: 'VSCJava-CodeSign'
                  FolderPath: server
                  Pattern: com.microsoft.jdtls.ext.*.jar
                  signConfigType: inlineSignParams
                  inlineOperation: |-
                    [
                            {
                                "KeyCode" : "CP-447347-Java",
                                "OperationCode" : "JavaSign",
                                "Parameters" : {
                                    "SigAlg" : "SHA256withRSA",
                                    "Timestamp" : "-tsa http://sha256timestamp.ws.digicert.com/sha256/timestamp"
                                },
                                "ToolName" : "sign",
                                "ToolVersion" : "1.0"
                            },
                            {
                                "KeyCode" : "CP-447347-Java",
                                "OperationCode" : "JavaVerify",
                                "Parameters" : {},
                                "ToolName" : "sign",
                                "ToolVersion" : "1.0"
                            }
                    ]
              - task: CmdLine@2
                displayName: Replace AI Key
                inputs:
                  script: npx json@9.0.6 -I -f package.json -e "this.aiKey=\"%AI_KEY%\""
              - task: Bash@3
                displayName: vsce package
                inputs:
                  targetType: inline
                  script: npx @vscode/vsce@latest package -o extension.vsix
              ### Copy files for APIScan
              - task: CopyFiles@2
                displayName: "Copy Files for APIScan"
                inputs:
                  Contents: "*.vsix"
                  TargetFolder: $(Agent.TempDirectory)/APIScanFiles
                condition: and(succeeded(), ne(variables['DisableAPIScan'], 'true'))
              ### Run latest version of APIScan listed at https://www.1eswiki.com/wiki/APIScan_Build_Task
              - task: APIScan@2
                displayName: Run APIScan
                inputs:
                  softwareFolder: $(Agent.TempDirectory)/APIScanFiles
                  softwareName: "vscode-java-dependency"
                  softwareVersionNum: "$(Build.BuildId)"
                  isLargeApp: false
                  toolVersion: "Latest"
                condition: and(succeeded(), ne(variables['DisableAPIScan'], 'true'))
                env:
                  AzureServicesAuthConnectionString: runAs=App;AppId=$(ApiScanClientId);TenantId=$(ApiScanTenant);AppKey=$(ApiScanSecret)
              - script: npx @vscode/vsce@latest generate-manifest -i extension.vsix -o extension.manifest
                displayName: 'Generate extension manifest'
              - script: cp extension.manifest extension.signature.p7s
                displayName: 'Prepare manifest for signing'
              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
                inputs:
                  ConnectedServiceName: 'ESRP-Release-Test'
                  AppRegistrationClientId: '1992ee18-e9d2-42d6-ab20-94dd947a44b6'
                  AppRegistrationTenantId: '72f988bf-86f1-41af-91ab-2d7cd011db47'
                  AuthAKVName: 'vscjavaci'
                  AuthCertName: 'vscjava-esrprelease-auth'
                  AuthSignCertName: 'VSCJava-CodeSign'
                  FolderPath: '.'
                  Pattern: 'extension.signature.p7s'
                  signConfigType: inlineSignParams
                  inlineOperation: |
                    [
                      {
                        "keyCode": "CP-401405",
                        "operationSetCode": "VSCodePublisherSign",
                        "parameters" : [],
                        "toolName": "sign",
                        "toolVersion": "1.0"
                      }
                    ]
                  SessionTimeout: 90
                  MaxConcurrency: 25
                  MaxRetryAttempts: 5
                  PendingAnalysisWaitTimeoutMinutes: 5
                displayName: 'Sign extension'
              - task: CopyFiles@2
                displayName: "Copy Files to: $(Build.ArtifactStagingDirectory)"
                inputs:
                  Contents: |
                    extension.vsix
                    extension.manifest
                    extension.signature.p7s
                  TargetFolder: $(Build.ArtifactStagingDirectory)