use gh_workflow::*;use indoc::{formatdoc, indoc}; use crate::tasks::workflows::{    runners,    steps::{        self, CommonPermissionSets, DEFAULT_REPOSITORY_OWNER_GUARD, GitRef, NamedJob, RefSha,        RepositoryTarget, TokenPermissions, generate_token, named,    },    vars::{self, StepOutput, WorkflowInput},}; const EXTENSION_CLI_TAG: &str = "extension-cli"; pub fn publish_extension_cli() -> Workflow {    let message = WorkflowInput::string("message", None).description(        "Describe why the extension CLI is being bumped and/or what changes are included.",    );     let publish = publish_job();    let update_sha_in_zed = update_sha_in_zed(&publish, &message);    let update_sha_in_extensions = update_sha_in_extensions(&publish, &message);     named::workflow()        .with_minimal_permissions()        .on(Event::default().workflow_dispatch(            WorkflowDispatch::default().add_input(message.name, message.input()),        ))        .add_env(("CARGO_TERM_COLOR", "always"))        .add_env(("CARGO_INCREMENTAL", 0))        .add_job(publish.name, publish.job)        .add_job(update_sha_in_zed.name, update_sha_in_zed.job)        .add_job(update_sha_in_extensions.name, update_sha_in_extensions.job)} // `workflow_dispatch` can be triggered from any branch where this workflow file// exists, so we additionally guard the jobs to only run when dispatched from// `main`. Jobs that depend on `publish_job` inherit this guard transitively// because they are skipped when `publish_job` is skipped.fn dispatched_from_main_guard() -> Expression {    Expression::new(format!(        "{DEFAULT_REPOSITORY_OWNER_GUARD} && github.ref == 'refs/heads/main'"    ))} fn publish_job() -> NamedJob {    fn build_extension_cli() -> Step<Run> {        named::bash("cargo build --release --package extension_cli")    }     fn upload_binary() -> Step<Run> {        named::bash(r#"script/upload-extension-cli "$GITHUB_SHA""#)            .add_env((                "DIGITALOCEAN_SPACES_ACCESS_KEY",                vars::DIGITALOCEAN_SPACES_ACCESS_KEY,            ))            .add_env((                "DIGITALOCEAN_SPACES_SECRET_KEY",                vars::DIGITALOCEAN_SPACES_SECRET_KEY,            ))    }     let (authenticate, token) = steps::authenticate_as_zippy()        .for_repository(RepositoryTarget::current())        .with_permissions([(TokenPermissions::Contents, Level::Write)])        .into();     named::job(        Job::default()            .cond(dispatched_from_main_guard())            .runs_on(runners::LINUX_DEFAULT)            .add_step(steps::checkout_repo())            .add_step(steps::cache_rust_dependencies_namespace())            .add_step(steps::setup_linux())            .add_step(build_extension_cli())            .add_step(upload_binary())            .add_step(authenticate)            .add_step(steps::update_ref(                GitRef::tag(EXTENSION_CLI_TAG),                RefSha::Context,                &token,                true,            )),    )} fn update_sha_in_zed(publish_job: &NamedJob, message: &WorkflowInput) -> NamedJob {    let (generate_token, generated_token) =        generate_token(vars::ZED_ZIPPY_APP_ID, vars::ZED_ZIPPY_APP_PRIVATE_KEY)            .for_repository(RepositoryTarget::current())            .with_permissions([                (TokenPermissions::Contents, Level::Write),                (TokenPermissions::PullRequests, Level::Write),                (TokenPermissions::Workflows, Level::Write),            ])            .into();     fn replace_sha() -> Step<Run> {        named::bash(indoc! {r#"            sed -i "s/ZED_EXTENSION_CLI_SHA: &str = \"[a-f0-9]*\"/ZED_EXTENSION_CLI_SHA: \&str = \"$GITHUB_SHA\"/" \                tooling/xtask/src/tasks/workflows/extension_tests.rs        "#})    }     fn regenerate_workflows() -> Step<Run> {        named::bash("cargo xtask workflows")    }     let (get_short_sha_step, short_sha) = get_short_sha();     named::job(        Job::default()            .cond(dispatched_from_main_guard())            .needs(vec![publish_job.name.clone()])            .runs_on(runners::LINUX_LARGE)            .add_step(generate_token)            .add_step(steps::checkout_repo())            .add_step(steps::cache_rust_dependencies_namespace())            .add_step(get_short_sha_step)            .add_step(replace_sha())            .add_step(regenerate_workflows())            .add_step(create_pull_request_zed(                &generated_token,                &short_sha,                message,            )),    )} fn create_pull_request_zed(    generated_token: &StepOutput,    short_sha: &StepOutput,    message: &WorkflowInput,) -> Step<Use> {    let title = format!(        "extension_ci: Bump extension CLI version to `{}`",        short_sha    );     let body = formatdoc! {r#"        This PR bumps the extension CLI version used in the extension workflows to `${{{{ github.sha }}}}`.         {message}         Release Notes:         - N/A    "#};     steps::CreatePrStep::new(title, "update-extension-cli-sha", generated_token)        .with_body(body)        .into()} fn update_sha_in_extensions(publish_job: &NamedJob, message: &WorkflowInput) -> NamedJob {    let extensions_repo = RepositoryTarget::new("zed-industries", &["extensions"]);    let (generate_token, generated_token) =        generate_token(vars::ZED_ZIPPY_APP_ID, vars::ZED_ZIPPY_APP_PRIVATE_KEY)            .for_repository(extensions_repo)            .with_permissions([                (TokenPermissions::Contents, Level::Write),                (TokenPermissions::PullRequests, Level::Write),                (TokenPermissions::Workflows, Level::Write),            ])            .into();     fn checkout_extensions_repo(token: &StepOutput) -> Step<Use> {        named::uses(            "actions",            "checkout",            "11bd71901bbe5b1630ceea73d27597364c9af683", // v4        )        .add_with(("repository", "zed-industries/extensions"))        .add_with(("token", token.to_string()))    }     fn replace_sha() -> Step<Run> {        named::bash(indoc! {r#"            sed -i "s/ZED_EXTENSION_CLI_SHA: [a-f0-9]*/ZED_EXTENSION_CLI_SHA: $GITHUB_SHA/" \                .github/workflows/ci.yml        "#})    }     let (get_short_sha_step, short_sha) = get_short_sha();     named::job(        Job::default()            .cond(dispatched_from_main_guard())            .needs(vec![publish_job.name.clone()])            .runs_on(runners::LINUX_SMALL)            .add_step(generate_token)            .add_step(get_short_sha_step)            .add_step(checkout_extensions_repo(&generated_token))            .add_step(replace_sha())            .add_step(create_pull_request_extensions(                &generated_token,                &short_sha,                message,            )),    )} fn create_pull_request_extensions(    generated_token: &StepOutput,    short_sha: &StepOutput,    message: &WorkflowInput,) -> Step<Use> {    let title = format!("Bump extension CLI version to `{}`", short_sha);     let body = formatdoc! {r#"        This PR bumps the extension CLI version to https://github.com/zed-industries/zed/commit/${{{{ github.sha }}}}.         {message}    "#};     steps::CreatePrStep::new(title, "update-extension-cli-sha", generated_token)        .with_body(body)        .with_labels("allow-no-extension")        .into()} fn get_short_sha() -> (Step<Run>, StepOutput) {    let step = named::bash(indoc::indoc! {r#"        echo "sha_short=$(echo "$GITHUB_SHA" | cut -c1-7)" >> "$GITHUB_OUTPUT"    "#})    .id("short-sha");     let step_output = vars::StepOutput::new(&step, "sha_short");     (step, step_output)}