# This file is dual licensed under the terms of the Apache License, Version
# 2.0, and the BSD License. See the LICENSE file in the root of this repository
# for complete details.

from __future__ import annotations

import glob
import json

import nox

nox.options.reuse_existing_virtualenvs = True


def install(session: nox.Session, *args: str) -> None:
    session.install(
        "-v",
        "-c",
        "ci-constraints-requirements.txt",
        *args,
        silent=False,
    )


@nox.session
@nox.session(name="tests-ssh")
@nox.session(name="tests-randomorder")
@nox.session(name="tests-nocoverage")
def tests(session: nox.Session) -> None:
    extras = "test"
    if session.name == "tests-ssh":
        extras += ",ssh"
    if session.name == "tests-randomorder":
        extras += ",test-randomorder"

    install(session, f".[{extras}]")
    install(session, "-e", "./vectors")

    session.run("pip", "list")

    if session.name != "tests-nocoverage":
        cov_args = [
            "--cov=cryptography",
            "--cov=tests",
        ]
    else:
        cov_args = []

    session.run(
        "pytest",
        "-n",
        "auto",
        "--dist=worksteal",
        *cov_args,
        "--durations=10",
        *session.posargs,
        "tests/",
    )


@nox.session
def docs(session: nox.Session) -> None:
    install(session, ".[docs,docstest,sdist,ssh]")

    temp_dir = session.create_tmp()
    session.run(
        "sphinx-build",
        "-T",
        "-W",
        "-b",
        "html",
        "-d",
        f"{temp_dir}/doctrees",
        "docs",
        "docs/_build/html",
    )
    session.run(
        "sphinx-build",
        "-T",
        "-W",
        "-b",
        "latex",
        "-d",
        f"{temp_dir}/doctrees",
        "docs",
        "docs/_build/latex",
    )

    session.run(
        "sphinx-build",
        "-T",
        "-W",
        "-b",
        "doctest",
        "-d",
        f"{temp_dir}/doctrees",
        "docs",
        "docs/_build/html",
    )
    session.run(
        "sphinx-build",
        "-T",
        "-W",
        "-b",
        "spelling",
        "docs",
        "docs/_build/html",
    )

    # This is in the docs job because `twine check` verifies that the README
    # is valid reStructuredText.
    session.run("python", "-m", "build", "--sdist")
    session.run("twine", "check", "dist/*")


@nox.session(name="docs-linkcheck")
def docs_linkcheck(session: nox.Session) -> None:
    install(session, ".[docs]")

    session.run(
        "sphinx-build", "-W", "-b", "linkcheck", "docs", "docs/_build/html"
    )


@nox.session
def flake(session: nox.Session) -> None:
    install(session, ".[pep8test,test,ssh,nox]")

    session.run("ruff", ".")
    session.run("black", "--check", ".")
    session.run("check-manifest")
    session.run(
        "mypy",
        "src/cryptography/",
        "vectors/cryptography_vectors/",
        "tests/",
        "release.py",
        "noxfile.py",
    )


@nox.session
def rust(session: nox.Session) -> None:
    install(session, ".")

    with session.chdir("src/rust/"):
        session.run("cargo", "fmt", "--all", "--", "--check", external=True)
        session.run("cargo", "clippy", "--", "-D", "warnings", external=True)
        session.run("cargo", "test", "--no-default-features", external=True)


@nox.session
def rust_coverage(session: nox.Session) -> None:
    session.env.update(
        {
            "RUSTFLAGS": "-Cinstrument-coverage",
            "LLVM_PROFILE_FILE": "rust-cov/cov-%p.profraw",
        }
    )
    # cryptography will be install command in the tests function
    tests(session)

    with session.chdir("src/rust/"):
        session.run("cargo", "test", "--no-default-features", external=True)
        paths = glob.glob("**/*.profraw", recursive=True)
        session.run(
            "cargo",
            "profdata",
            "--",
            "merge",
            "-sparse",
            *paths,
            "-o",
            "rust-cov.profdata",
            external=True,
        )

        json_blobs = session.run(
            "cargo",
            "test",
            "--no-default-features",
            "--all",
            "--tests",
            "--no-run",
            "-q",
            "--message-format=json",
            external=True,
            silent=True,
        )
        filenames = []
        if json_blobs:
            assert isinstance(json_blobs, str)
            for blob in json_blobs.splitlines():
                data = json.loads(blob)
                try:
                    if data["profile"]["test"]:
                        assert len(data["filenames"]) == 1
                        filenames.append("-object")
                        filenames.extend(data["filenames"])
                except KeyError:
                    pass
            rust_so = glob.glob(
                f"{session.virtualenv.location}/lib/**/site-packages"
                f"/cryptography/hazmat/bindings/_rust_abi3.so"
            )
            with open("../../cov.lcov", "wb") as f:
                session.run(
                    "cargo",
                    "cov",
                    "--",
                    "export",
                    *rust_so,
                    *filenames,
                    "-instr-profile=rust-cov.profdata",
                    "--ignore-filename-regex='/.cargo/'",
                    "--ignore-filename-regex='/rustc/'",
                    "--ignore-filename-regex='/.rustup/toolchains/'",
                    "--format=lcov",
                    external=True,
                    stdout=f,
                )