set up Jenkins for apps/wallet (#662)

* set up Jenkins for `apps/wallet`

* generalize Jenkinsfile to be usable for multiple apps

Signed-off-by: Jakub Sokołowski <[email protected]>

* add `getBuildDir`

* update `husky`

* use `wasm-unsafe-eval`

* add changesets

---------

Signed-off-by: Jakub Sokołowski <[email protected]>
Co-authored-by: Jakub Sokołowski <[email protected]>

Author: felicio

.changeset/lovely-dancers-tie.md

@@ -0,0 +1,5 @@
+---
+'wallet': patch
+---
+
+add build steps

.changeset/shy-garlics-breathe.md

@@ -0,0 +1,5 @@
+---
+'connector': patch
+---
+
+update build step

Jenkinsfile

@@ -0,0 +1,155 @@
+#!/usr/bin/env groovy
+library '[email protected]'
+
+def changesDetected = false
+
+pipeline {
+  agent { label 'linux' }
+
+  options {
+    timestamps()
+    /* Prevent Jenkins jobs from running forever */
+    timeout(time: 10, unit: 'MINUTES')
+    /* manage how many builds we keep */
+    buildDiscarder(logRotator(
+      numToKeepStr: '20',
+      daysToKeepStr: '30',
+    ))
+    disableConcurrentBuilds()
+  }
+
+  parameters {
+    choice(
+      name: 'APP_NAME',
+      description: 'Name of app from apps folder.',
+      choices: choiceFromJobName(params.APP_NAME, ['connector', 'wallet']),
+    )
+  }
+
+  environment {
+    PLATFORM = "${params.APP_NAME}"
+    ZIP_NAME = utils.pkgFilename(
+      type: 'Extension',
+      version: 'none',
+      arch: 'chrome',
+      ext: 'zip',
+    )
+  }
+
+  stages {
+    stage('Check Changed Files') {
+      when {
+        changeset(
+          pattern: "apps/${params.APP_NAME}/**",
+          comparator: "GLOB"
+        )
+      }
+      steps {
+        script {
+          changesDetected = true
+        }
+      }
+    }
+
+    stage('Install') {
+      when { expression { changesDetected } }
+      steps {
+        dir("${env.WORKSPACE}/apps/${params.APP_NAME}") {
+          script {
+            nix.shell(
+              'pnpm install --frozen-lockfile',
+              pure: false,
+              entryPoint: "${env.WORKSPACE}/apps/${params.APP_NAME}/shell.nix"
+            )
+          }
+        }
+      }
+    }
+
+    stage('Build') {
+      when { expression { changesDetected } }
+      steps {
+        dir("${env.WORKSPACE}") {
+          script {
+            nix.shell(
+              "pnpm turbo run build --filter=${params.APP_NAME}",
+              pure: false,
+              entryPoint: "${env.WORKSPACE}/apps/${params.APP_NAME}/shell.nix"
+            )
+          }
+        }
+      }
+    }
+
+    stage('Zip') {
+      when { expression { changesDetected } }
+      steps {
+        dir("${env.WORKSPACE}/apps/${params.APP_NAME}") {
+          zip(
+            zipFile: env.ZIP_NAME,
+            dir: getBuildDir(params.APP_NAME),
+            archive: false,
+          )
+        }
+      }
+    }
+
+    stage('Archive') {
+      when { expression { changesDetected } }
+      steps {
+        dir("${env.WORKSPACE}/apps/${params.APP_NAME}") {
+          archiveArtifacts(
+            artifacts: env.ZIP_NAME,
+            fingerprint: true,
+          )
+        }
+      }
+    }
+
+    stage('Upload') {
+      when { expression { changesDetected } }
+      steps {
+        dir("${env.WORKSPACE}/apps/${params.APP_NAME}") {
+          script {
+            env.PKG_URL = s5cmd.upload(env.ZIP_NAME)
+          }
+        }
+      }
+    }
+  }
+
+  post {
+    success { script { if(changesDetected) { github.notifyPR(true) } } }
+    failure { script { if(changesDetected) { github.notifyPR(false) } } }
+    cleanup { cleanWs() }
+  }
+}
+
+List<String> moveToStart(List<String> original, String input) {
+  original.split {it.equals(input)}.flatten()
+}
+
+/* If job name contains one of choices make that the default(first). */
+def choiceFromJobName(String previousChoice, List defaultChoices) {
+  if (previousChoice != null) {
+    return moveToStart(defaultChoices, previousChoice)
+  }
+  def tokens = env.JOB_NAME.split('/')
+  for (choice in defaultChoices) {
+    if (tokens.contains(choice)) {
+      return moveToStart(defaultChoices, choice)
+    }
+  }
+  return defaultChoices
+}
+
+def getBuildDir(String appName) {
+  switch(appName) {
+    case 'connector':
+      return 'build/chrome-mv3-prod'
+    case 'wallet':
+      return '.output/chrome-mv3'
+    default:
+      error("Unknown app: ${appName}.")
+  }
+}

apps/connector/Jenkinsfile

@@ -45,7 +45,6 @@
     "@types/react": "18.2.48",
     "@types/react-dom": "18.2.18",
     "autoprefixer": "^10.4.19",
-    "husky": "^8.0.3",
     "postcss": "^8.4.38",
     "prettier": "3.2.4",
     "prettier-plugin-tailwindcss": "^0.6.1",

apps/connector/package.json

@@ -7,7 +7,7 @@
 }:
 
 pkgs.mkShell {
-  name = "browser-extension-shell";
+  name = "connector-shell";
 
   buildInputs = with pkgs; [
     nodejs_20

apps/connector/shell.nix

@@ -156,7 +156,6 @@
     "eslint-plugin-tailwindcss": "^3.17.4",
     "ethereum-cryptography": "^3.0.0",
     "globals": "^15.12.0",
-    "husky": "^8.0.3",
     "knip": "^5.30.2",
     "lint-staged": "^13.2.0",
     "mdast": "^3.0.0",

apps/portfolio/package.json

@@ -68,7 +68,6 @@
     "@wxt-dev/module-react": "^1.1.2",
     "autoprefixer": "^10.4.19",
     "globals": "^15.12.0",
-    "husky": "^8.0.3",
     "postcss": "^8.4.38",
     "postcss-load-config": "^6.0.1",
     "prettier": "3.2.4",

apps/wallet/package.json

@@ -0,0 +1,16 @@
+{
+  source ? builtins.fetchTarball {
+    url = "https://github.com/NixOS/nixpkgs/archive/df27247e6f3e636c119e2610bf12d38b5e98cc79.tar.gz";
+    sha256 = "sha256:0bbvimk7xb7akrx106mmsiwf9nzxnssisqmqffla03zz51d0kz2n";
+  },
+  pkgs ? import (source) {}
+}:
+
+pkgs.mkShell {
+  name = "wallet-shell";
+
+  buildInputs = with pkgs; [
+    nodejs_20
+    pnpm
+  ];
+}

apps/wallet/shell.nix

@@ -21,6 +21,10 @@ export default defineConfig({
         matches: ['<all_urls>'],
       },
     ],
+    content_security_policy: {
+      extension_pages:
+        "script-src 'self' 'wasm-unsafe-eval'; object-src 'self'",
+    },
   },
   runner: {
     disabled: true,