macos_64_env_gen.yml

parameters:
  pythonVersion: ''
  artifactName: ''
  grpcBuild: ''

steps:
- task: UsePythonVersion@0
  inputs:
    versionSpec: ${{ parameters.pythonVersion }}
    allowUnstable: true
    addToPath: true
- task: PipAuthenticate@1
  displayName: 'Pip Authenticate'
  inputs:
    artifactFeeds: 'internal/PythonWorker_Internal_PublicPackages'
- powershell: |
    # Parse the Python minor version
    $PY_VER = "$(pythonVersion)"
    Write-Host "Python version: $PY_VER"
    # Extract minor version as integers
    $versionParts = $PY_VER.Split('.')
    $PY_MAJOR = [int]$versionParts[0]
    Write-Host "Major version: $PY_MAJOR"
    Write-Host "##vso[task.setvariable variable=majorVersion;]$PY_MAJOR"

    $PY_MINOR = [int]$versionParts[1]
    Write-Host "Minor version: $PY_MINOR"
    Write-Host "##vso[task.setvariable variable=minorVersion;]$PY_MINOR"

    # Detect if this is an RC build
    if ($PY_VER -match "rc") {
      Write-Host "RC version detected"
      Write-Host "##vso[task.setvariable variable=isRC;]true"
    }
    else {
      Write-Host "Stable version detected"
      Write-Host "##vso[task.setvariable variable=isRC;]false"
    }

    # Set build-related variables based on Python minor version
    if( $PY_MINOR -ge 13 )
    {
      Write-Host "##vso[task.setvariable variable=workerPath;]$(proxyV4Path)"
      Write-Host "##vso[task.setvariable variable=proxyWorker;]true"
    }
    else
    {
      Write-Host "##vso[task.setvariable variable=workerPath;]$(prodV4Path)"
      Write-Host "##vso[task.setvariable variable=proxyWorker;]false"
    }
  displayName: 'Set necessary variables'
  env:
    pythonVersion: ${{ parameters.pythonVersion }}
- powershell: |
    Write-Host "workerPath: $(workerPath)"
    Write-Host "proxyWorker: $(proxyWorker)"
  displayName: 'Display variables'
- task: ShellScript@2
  inputs:
    disableAutoCwd: true
    scriptPath: 'eng/pack/scripts/mac_arm64_deps.sh'
    args: '${{ parameters.pythonVersion }}'
  displayName: 'Install dependencies'
#   condition: eq(variables['isRC'], 'false')
# - task: ShellScript@2
#   inputs:
#     disableAutoCwd: true
#     scriptPath: 'eng/pack/scripts/rc_mac_arm64_deps.sh'
#     args: '${{ parameters.pythonVersion }}'
#   displayName: 'Build dependencies from source'
#   condition: eq(variables['isRC'], 'true')
- bash: |
    pip install pip-audit
    cd workers
    pip-audit -r requirements.txt
  displayName: 'Run vulnerability scan'
  continueOnError: true
- task: CopyFiles@2
  inputs:
    contents: '$(workerPath)'
    targetFolder: '$(Build.ArtifactStagingDirectory)'
    flattenFolders: true
- task: CopyFiles@2
  inputs:
    sourceFolder: '$(Build.SourcesDirectory)/deps'
    contents: |
      **
      !grpc_tools/**/*
      !grpcio_tools*/*
      !build/**
      !docs/**
      !eng/**
      !python/**
      !tests/**
      !setuptools*/**
      !_distutils_hack/**
      !distutils-precedence.pth
      !pkg_resources/**
      !*.dist-info/**
      !werkzeug/debug/shared/debugger.js
      !proxy_worker/**
    targetFolder: '$(Build.ArtifactStagingDirectory)'
  condition: eq(variables['proxyWorker'], false)
  displayName: 'Copy azure_functions_worker files'
- powershell: |
    $root = "$(Build.ArtifactStagingDirectory)"
    $cythonDir = Join-Path $root "grpc/_cython"

    # Define expected files/folders relative to root
    $expected = @(
        ".artifactignore",
        "azure",
        "azurefunctions",
        "azure_functions_worker",
        "azure_functions_worker/protos/FunctionRpc_pb2.py",
        "azure_functions_worker/protos/FunctionRpc_pb2_grpc.py",
        "azure_functions_worker/protos/_src",
        "azure_functions_worker/protos/identity",
        "azure_functions_worker/protos/identity/ClaimsIdentityRpc_pb2.py",
        "azure_functions_worker/protos/identity/ClaimsIdentityRpc_pb2_grpc.py",
        "azure_functions_worker/protos/shared",
        "azure_functions_worker/protos/shared/NullableTypes_pb2.py",
        "azure_functions_worker/protos/shared/NullableTypes_pb2_grpc.py",
        "dateutil",
        "google",
        "grpc",
        "markupsafe",
        "six.py",
        "werkzeug",
        "worker.py"
    )

    $missing = @()

    foreach ($item in $expected) {
        $path = Join-Path $root $item
        if (-not (Test-Path $path)) {
            $missing += $item
        }
    }
    # === gRPC check ===
    $grpcPattern = "*$(majorVersion)$(minorVersion)*-${{ parameters.grpcBuild }}"
    $grpcMatch = Get-ChildItem -Path $cythonDir -Name -ErrorAction SilentlyContinue |
                Where-Object { $_ -like $grpcPattern }

    if (-not $grpcMatch) {
        $missing += "grpc/_cython/$grpcPattern"
    } else {
        Write-Host "✅ Found gRPC binary: $grpcMatch"
    }

    if ($missing.Count -gt 0) {
        Write-Error "Validation failed. Missing expected files/folders:`n$($missing -join "`n")"
        exit 1
    }
    else {
        Write-Host "✅ Validation passed. All expected files/folders are present."
    }
  displayName: "Validate azure_functions_worker artifact contents"
  condition: eq(variables['proxyWorker'], false)
- task: CopyFiles@2
  inputs:
    sourceFolder: '$(Build.SourcesDirectory)/deps'
    contents: |
      **
      !grpc_tools/**/*
      !grpcio_tools*/*
      !build/**
      !docs/**
      !eng/**
      !python/**
      !tests/**
      !setuptools*/**
      !_distutils_hack/**
      !distutils-precedence.pth
      !pkg_resources/**
      !*.dist-info/**
      !werkzeug/debug/shared/debugger.js
      !azure_functions_worker/**
      !dateutil/**
      !Cython/**
      !__pycache__/**
      !bin/**
      !cython.py
      !pip/**
      !pyximport/**
      !typing_extensions.py
      !wheel/**
    targetFolder: '$(Build.ArtifactStagingDirectory)'
  condition: eq(variables['proxyWorker'], true)
  displayName: 'Copy proxy_worker files'
- powershell: |
    $root = "$(Build.ArtifactStagingDirectory)"
    $cythonDir = Join-Path $root "grpc/_cython"

    # Define expected files/folders relative to root
    $expected = @(
        ".artifactignore",
        "azure",
        "azure_functions_runtime",
        "azure_functions_runtime_v1",
        "azurefunctions",
        "google",
        "grpc",
        "markupsafe",
        "proxy_worker",
        "proxy_worker/protos/FunctionRpc_pb2.py",
        "proxy_worker/protos/FunctionRpc_pb2_grpc.py",
        "proxy_worker/protos/_src",
        "proxy_worker/protos/identity",
        "proxy_worker/protos/identity/ClaimsIdentityRpc_pb2.py",
        "proxy_worker/protos/identity/ClaimsIdentityRpc_pb2_grpc.py",
        "proxy_worker/protos/shared",
        "proxy_worker/protos/shared/NullableTypes_pb2.py",
        "proxy_worker/protos/shared/NullableTypes_pb2_grpc.py",
        "six.py",
        "uvloop",
        "werkzeug",
        "worker.py"
    )

    $missing = @()

    foreach ($item in $expected) {
        $path = Join-Path $root $item
        if (-not (Test-Path $path)) {
            $missing += $item
        }
    }

    # === gRPC check ===
    $grpcPattern = "*$(majorVersion)$(minorVersion)*-${{ parameters.grpcBuild }}"
    $grpcMatch = Get-ChildItem -Path $cythonDir -Name -ErrorAction SilentlyContinue |
                Where-Object { $_ -like $grpcPattern }

    if (-not $grpcMatch) {
        $missing += "grpc/_cython/$grpcPattern"
    } else {
        Write-Host "✅ Found gRPC binary: $grpcMatch"
    }

    if ($missing.Count -gt 0) {
        Write-Error "Validation failed. Missing expected files/folders:`n$($missing -join "`n")"
        exit 1
    }
    else {
        Write-Host "✅ Validation passed. All expected files/folders are present."
    }
  displayName: "Validate proxy_worker artifact contents"
  condition: eq(variables['proxyWorker'], true)