#!/bin/bash
###############################################################################
# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
# SPDX-License-Identifier: Apache-2.0
#
# PURPOSE:
#   Build cloud formation templates for the First Party Data Uploader for
#   Amazon Marketing Cloud solution.
#
# USAGE:
#  ./build-s3-dist.sh [-h] [-v] --template-bucket {TEMPLATE_BUCKET} --code-bucket {CODE_BUCKET} --version {VERSION} --region {REGION} --profile {PROFILE}
#    TEMPLATE_BUCKET should be the name for the S3 bucket location where 
#      cloud formation templates should be saved.
#    CODE_BUCKET should be the name for the S3 bucket location where cloud
#      formation templates should find Lambda source code packages.
#    VERSION can be anything but should be in a format like v1.0.0 just to be consistent
#      with the official solution release labels.
#    REGION needs to be in a format like us-east-1
#    PROFILE is optional. It's the profile that you have setup in ~/.aws/credentials
#      that you want to use for AWS CLI commands.
#
#    The following options are available:
#
#     -h | --help       Print usage
#     -v | --verbose    Print script debug info
#
###############################################################################

trap cleanup_and_die SIGINT SIGTERM ERR

usage() {
  msg "$msg"
  cat <<EOF
Usage: $(basename "${BASH_SOURCE[0]}") [-h] [-v] [--profile PROFILE] --template-bucket TEMPLATE_BUCKET --code-bucket CODE_BUCKET --version VERSION --region REGION --solution-name SOLUTION_NAME

Available options:

-h, --help        Print this help and exit (optional)
-v, --verbose     Print script debug info (optional)
--template-bucket S3 bucket to put cloud formation templates
--code-bucket     S3 bucket to put Lambda code packages
--version         Arbitrary string indicating build version
--region          AWS Region, formatted like us-west-2
--solution-name   Name of the AWS Solution
--profile         AWS profile for CLI commands (optional)
EOF
  exit 1
}

cleanup_and_die() {
  trap - SIGINT SIGTERM ERR
  echo "Trapped signal."
  cleanup
  die 1
}

cleanup() {
  # Deactivate and remove the temporary python virtualenv used to run this script
  if [[ "$VIRTUAL_ENV" != "" ]];
  then
    deactivate
    echo "------------------------------------------------------------------------------"
    echo "Cleaning up complete"
    echo "------------------------------------------------------------------------------"
  fi
}

msg() {
  echo >&2 -e "${1-}"
}

die() {
  local msg=$1
  local code=${2-1} # default exit status 1
  msg "$msg"
  exit "$code"
}

parse_params() {
  # default values of variables set from params
  flag=0
  param=''
  use_solution_builder_pipeline=false

  while :; do
    case "${1-}" in
    -h | --help) usage ;;
    -v | --verbose) set -x ;;
    --template-bucket)
      global_bucket="${2}"
      shift
      ;;
    --code-bucket)
      regional_bucket="${2}"
      shift
      ;;
    --version)
      version="${2}"
      shift
      ;;
    --region)
      region="${2}"
      shift
      ;;
    --solution-name)
      solution_name="${2}"
      shift
      ;;      
    --profile)
      profile="${2}"
      shift
      ;;
    --use_solution_builder_pipeline)
      use_solution_builder_pipeline=true
      shift
      ;;
    -?*) die "Unknown option: $1" ;;
    *) break ;;
    esac
    shift
  done

  args=("$@")

  # check required params and arguments
  [[ -z "${global_bucket}" ]] && usage "Missing required parameter: template-bucket"
  [[ -z "${regional_bucket}" ]] && usage "Missing required parameter: code-bucket"
  [[ -z "${version}" ]] && usage "Missing required parameter: version"
  [[ -z "${region}" ]] && usage "Missing required parameter: region"
  [[ -z "${solution_name}" ]] && usage "Missing required parameter: solution-name"

  return 0
}

parse_params "$@"
msg "Build parameters:"
msg "- Template bucket: ${global_bucket}"
msg "- Code bucket: ${regional_bucket}-${region}"
msg "- Version: ${version}"
msg "- Region: ${region}"
msg "- Solution name: ${solution_name}"
msg "- Profile: ${profile}"
msg "- use_solution_builder_pipeline: ${use_solution_builder_pipeline}"

echo ""
sleep 3
s3domain="s3.$region.amazonaws.com"

# Make sure aws cli is installed
if [[ ! -x "$(command -v aws)" ]]; then
echo "ERROR: This script requires the AWS CLI to be installed. Please install it then run again."
exit 1
fi

# Get reference for all important folders
build_dir="$PWD"
source_dir="$build_dir/../source"
consumer_dir="$build_dir/../source/consumer"
global_dist_dir="$build_dir/global-s3-assets"
regional_dist_dir="$build_dir/regional-s3-assets"

# Create and activate a temporary Python environment for this script.
echo "------------------------------------------------------------------------------"
echo "Creating a temporary Python virtualenv for this script"
echo "------------------------------------------------------------------------------"
python3 -c "import os; print (os.getenv('VIRTUAL_ENV'))" | grep -q None
if [ $? -ne 0 ]; then
    echo "ERROR: Do not run this script inside Virtualenv. Type \`deactivate\` and run again.";
    exit 1;
fi
command -v python3
if [ $? -ne 0 ]; then
    echo "ERROR: install Python3 before running this script"
    exit 1
fi
echo "Using virtual python environment:"
VENV=$(mktemp -d) && echo "$VENV"
command -v python3 > /dev/null
if [ $? -ne 0 ]; then
    echo "ERROR: install Python3 before running this script"
    exit 1
fi
python3 -m venv "$VENV"
source "$VENV"/bin/activate
pip3 install wheel
pip3 install --quiet boto3 chalice requests aws_xray_sdk

echo "------------------------------------------------------------------------------"
echo "Create distribution directory"
echo "------------------------------------------------------------------------------"

# Setting up directories
echo "rm -rf $global_dist_dir"
rm -rf "$global_dist_dir"
echo "mkdir -p $global_dist_dir"
mkdir -p "$global_dist_dir"
echo "rm -rf $regional_dist_dir"
rm -rf "$regional_dist_dir"
echo "mkdir -p $regional_dist_dir"
mkdir -p "$regional_dist_dir"
echo "mkdir -p $regional_dist_dir/website/"
mkdir -p "$regional_dist_dir"/website/

echo "------------------------------------------------------------------------------"
echo "CloudFormation Templates"
echo "------------------------------------------------------------------------------"
echo ""
echo "Preparing template files:"
cp "$build_dir/uploader-from-clean-rooms.yaml" "$global_dist_dir/uploader-from-clean-rooms.yaml"
cp "$build_dir/uploader-from-clean-rooms-glue.yaml" "$global_dist_dir/uploader-from-clean-rooms-glue.yaml"
cp "$build_dir/uploader-from-clean-rooms-auth.yaml" "$global_dist_dir/uploader-from-clean-rooms-auth.yaml"
cp "$build_dir/uploader-from-clean-rooms-web.yaml" "$global_dist_dir/uploader-from-clean-rooms-web.yaml"
find "$global_dist_dir"
echo "Updating template source bucket in template files with '$global_bucket'"
echo "Updating code source bucket in template files with '$regional_bucket'"
echo "Updating solution version in template files with '$version'"
echo "Updating solution name in template files with $solution_name"
new_bucket="s/%%BUCKET_NAME%%/$regional_bucket/g"
new_version="s/%%VERSION%%/$version/g"
new_solution_name="s/%%SOLUTION_NAME%%/$solution_name/g"
# Update templates in place. Copy originals to [filename].orig
sed -i.orig -e "$new_bucket" "$global_dist_dir/uploader-from-clean-rooms.yaml"
sed -i.orig -e "$new_version" "$global_dist_dir/uploader-from-clean-rooms.yaml"
sed -i.orig -e "$new_solution_name" "$global_dist_dir/uploader-from-clean-rooms.yaml"
sed -i.orig -e "$new_bucket" "$global_dist_dir/uploader-from-clean-rooms-glue.yaml"
sed -i.orig -e "$new_version" "$global_dist_dir/uploader-from-clean-rooms-glue.yaml"
sed -i.orig -e "$new_solution_name" "$global_dist_dir/uploader-from-clean-rooms-glue.yaml"
sed -i.orig -e "$new_bucket" "$global_dist_dir/uploader-from-clean-rooms-auth.yaml"
sed -i.orig -e "$new_version" "$global_dist_dir/uploader-from-clean-rooms-auth.yaml"
sed -i.orig -e "$new_solution_name" "$global_dist_dir/uploader-from-clean-rooms-auth.yaml"
sed -i.orig -e "$new_bucket" "$global_dist_dir/uploader-from-clean-rooms-web.yaml"
sed -i.orig -e "$new_version" "$global_dist_dir/uploader-from-clean-rooms-web.yaml"
sed -i.orig -e "$new_solution_name" "$global_dist_dir/uploader-from-clean-rooms-web.yaml"

echo "------------------------------------------------------------------------------"
echo "Audience Uploader from AWS Clean Rooms API Stack"
echo "------------------------------------------------------------------------------"

echo "Building API Lambda handler"
cd "$source_dir/api" || exit 1
[ -e dist ] && rm -rf dist
mkdir -p dist
if ! [ -x "$(command -v chalice)" ]; then
  echo 'Chalice is not installed. It is required for this solution. Exiting.'
  exit 1
fi

# Remove chalice deployments to force redeploy when there are changes to configuration only
# Otherwise, chalice will use the existing deployment package
[ -e .chalice/deployments ] && rm -rf .chalice/deployments

echo "Running chalice..."
chalice package --merge-template external_resources.json dist
echo "Finished running chalice."
echo "cp ./dist/sam.json $global_dist_dir/uploader-from-clean-rooms-api.yaml"
cp dist/sam.json "$global_dist_dir"/uploader-from-clean-rooms-api.yaml
if [ $? -ne 0 ]; then
  echo "ERROR: Failed to build  api template"
  exit 1
fi
echo "cp ./dist/deployment.zip $regional_dist_dir/uploader-from-clean-rooms-api.zip"
cp ./dist/deployment.zip "$regional_dist_dir"/uploader-from-clean-rooms-api.zip
if [ $? -ne 0 ]; then
  echo "ERROR: Failed to build  api template"
  exit 1
fi
rm -rf ./dist

echo "------------------------------------------------------------------------------"
echo "Glue ETL"
echo "------------------------------------------------------------------------------"
echo "Building Glue ETL script"
cd "$source_dir/glue" || exit 1
echo "cp *_transformations.py $regional_dist_dir/"
cp *_transformations.py "$regional_dist_dir"

echo "------------------------------------------------------------------------------"
echo "Build vue website"
echo "------------------------------------------------------------------------------"

echo "Building Vue.js website"
cd "$source_dir/website/" || exit 1
echo "Installing node dependencies"
npm install
echo "Compiling the vue app"
npm run build
echo "Finished building website"
cp -r ./dist/* "$regional_dist_dir"/website/
rm -rf ./dist

echo "------------------------------------------------------------------------------"
echo "Generate webapp manifest file"
echo "------------------------------------------------------------------------------"
# This manifest file contains a list of all the webapp files. It is necessary in
# order to use the least privileges for deploying the webapp.
#
# Details: The website_helper.py Lambda function needs this list in order to copy
# files from $regional_dist_dir/website to the WebsiteBucket (see uploader-from-clean-rooms-web.yaml).  Since the manifest file is computed during build
# time, the website_helper.py Lambda can use that to figure out what files to copy
# instead of doing a list bucket operation, which would require ListBucket permission.
# Furthermore, the S3 bucket used to host AWS solutions disallows ListBucket 
# access, so the only way to copy the website files from that bucket from
# to WebsiteBucket is to use said manifest file.

#
cd $regional_dist_dir"/website/" || exit 1
manifest=(`find . -type f | sed 's|^./||'`)
manifest_json=$(IFS=,;printf "%s" "${manifest[*]}")
echo "[\"$manifest_json\"]" | sed 's/,/","/g' > "$source_dir/helper/webapp-manifest.json"
cat "$source_dir/helper/webapp-manifest.json"

echo "------------------------------------------------------------------------------"
echo "Build website helper function"
echo "------------------------------------------------------------------------------"

echo "Building website helper function"
cd "$source_dir/helper" || exit 1
[ -e dist ] && rm -r dist
mkdir -p dist
zip -q -g ./dist/websitehelper.zip ./website_helper.py webapp-manifest.json
cp "./dist/websitehelper.zip" "$regional_dist_dir/websitehelper.zip"

# Copy generated assets to tmp location
echo "Create tmp assets location to copy generated assets..."
rm -rf "$build_dir"/cfn-templates
rm -rf "$build_dir"/regional-assets
mkdir "$build_dir"/cfn-templates
mkdir "$build_dir"/regional-assets
cp -r "$global_dist_dir"/* "$build_dir"/cfn-templates/.
cp -r "$regional_dist_dir"/* "$build_dir"/regional-assets/.


# build-s3-cdk-dist deploy
echo "------------------------------------------------------------------------------"
echo "Preparing virtualenv to run build-s3-cdk-dist deploy"
echo "------------------------------------------------------------------------------"
cd "$source_dir" || exit 1
echo "pip install requirements-dev.txt"
pip3 install -r requirements-dev.txt
echo "Build starting..."
cd "$build_dir" || exit 1
echo "build-s3-cdk-dist deploy --source-bucket-name=${regional_bucket} --solution-name=${solution_name} --version-code=${version} --cdk-app-path=../source/infrastructure/app.py --cdk-app-entrypoint=app:build_app"
build-s3-cdk-dist deploy --source-bucket-name=${regional_bucket} --solution-name=${solution_name} --version-code=${version} --cdk-app-path=../source/infrastructure/app.py --cdk-app-entrypoint=app:build_app
echo "Build completed!"

# Copy generated assets back
echo "Copy generated assets back to original location..."
cp -r "$build_dir"/cfn-templates/* "$global_dist_dir"/.
cp -r "$build_dir"/regional-assets/* "$regional_dist_dir"/.

# Skip copy dist to S3 if building for solution builder because
# that pipeline takes care of copying the dist in another script.
if [ $use_solution_builder_pipeline = false ]; then

  echo "------------------------------------------------------------------------------"
  echo "Copy dist to S3"
  echo "------------------------------------------------------------------------------"
  echo "Validating ownership of s3://$global_bucket"
  # Get account id
  account_id=$(aws sts get-caller-identity --query Account --output text $(if [ ! -z $profile ]; then echo "--profile $profile"; fi))
  if [ $? -ne 0 ]; then
    msg "ERROR: Failed to get AWS account ID"
    die 1
  fi
  # Validate ownership of $global_bucket
  aws s3api head-bucket --bucket $global_bucket --expected-bucket-owner $account_id $(if [ ! -z $profile ]; then echo "--profile $profile"; fi)
  if [ $? -ne 0 ]; then
    msg "ERROR: Your AWS account does not own s3://$global_bucket/"
    die 1
  fi
  echo "Validating ownership of s3://${regional_bucket}-${region}"
  # Validate ownership of ${regional_bucket}-${region}
  aws s3api head-bucket --bucket ${regional_bucket}-${region} --expected-bucket-owner $account_id $(if [ ! -z $profile ]; then echo "--profile $profile"; fi)
  if [ $? -ne 0 ]; then
    msg "ERROR: Your AWS account does not own s3://${regional_bucket}-${region} "
    die 1
  fi
  # Copy deployment assets to distribution buckets
  cd "$build_dir"/ || exit 1

  echo "*******************************************************************************"
  echo "*******************************************************************************"
  echo "**********                    I M P O R T A N T                      **********"
  echo "*******************************************************************************"
  echo "** You are about to upload templates and code to S3. Please confirm that     **"
  echo "** buckets ${global_bucket} and ${regional_bucket}-${region} are appropriately     **"
  echo "** secured (not world-writeable, public access blocked) before continuing.   **"
  echo "*******************************************************************************"
  echo "*******************************************************************************"
  echo "PROCEED WITH UPLOAD? (y/n) [n]: "
  read input
  if [ "$input" != "y" ] ; then
      echo "Upload aborted."
      exit
  fi

  echo "=========================================================================="
  echo "Uploading CloudFormation templates and Lambda code to S3"
  echo "=========================================================================="
  echo "Templates: ${global_bucket}-reference/$solution_name/$version/"
  echo "Lambda code: ${regional_bucket}-${region}/$solution_name/$version/"
  echo "---"

  set -x
  aws s3 sync $global_dist_dir s3://$global_bucket/${solution_name}/$version/ $(if [ ! -z $profile ]; then echo "--profile $profile"; fi)
  aws s3 sync $regional_dist_dir s3://${regional_bucket}-${region}/${solution_name}/$version/ $(if [ ! -z $profile ]; then echo "--profile $profile"; fi)
  set +x

  echo "------------------------------------------------------------------------------"
  echo "S3 packaging complete"
  echo "------------------------------------------------------------------------------"

  echo ""
  echo "Template to deploy:"
  echo ""
  echo "TEMPLATE='"https://"$global_bucket"."$s3domain"/${solution_name}/"$version"/audience-uploader-from-aws-clean-rooms.template"'"
fi

cleanup
echo "Done"
exit 0