Feature: Firestore (#394)

* Feature: Firestore

This changeset fills out the Firestore adapter structure, including `FirestoreDriver` and associated manager objects like `CollapsedMessage`.

Author: sgammon

.bazelproject

@@ -19,6 +19,7 @@ targets:
   //js/...
   //style/...
   //tests/...
+  //javatests/...
   //jstests/...
 
 ts_config_rules:

.bazelversion

@@ -1 +1 @@
-3.4.1
+3.7.0

.gitignore

@@ -13,3 +13,4 @@ bazel-out
 .bazelrc.user
 reports
 report-ci.py
+crypto/build-key.json

Makefile

@@ -16,6 +16,7 @@
 ##
 
 CI ?= no
+DEV ?= no
 CACHE ?= no
 REMOTE ?= no
 DEBUG ?= no
@@ -51,7 +52,7 @@ OUTPATH ?= $(DISTPATH)/out
 BINPATH ?= $(DISTPATH)/bin
 UNZIP ?= $(shell which unzip)
 REVISION ?= $(shell git describe --abbrev=7 --always --tags HEAD)
-BASE_VERSION ?= v1a
+BASE_VERSION ?= v1b
 VERSION ?= $(shell (cat package.json | grep version | head -1 | awk -F: '{ print $2 }' | sed 's/[",]//g' | tr -d '[[:space:]]' | sed 's/version\://g'))
 CHROME_COVERAGE ?= $(shell find dist/out/$(OUTPUT_BASE)/bin -name "coverage*.dat" | grep chrome | xargs)
 COVERAGE_DATA ?= $(OUTPATH)/_coverage/_coverage_report.dat
@@ -81,9 +82,18 @@ endif
 TEST_ARGS_WITH_COVERAGE ?= --combined_report=lcov --nocache_test_results
 BUILD_ARGS ?= --define project=$(PROJECT)
 
+BUILDKEY_PLAINTEXT ?= $(shell pwd)/crypto/build-key.json
+BUILDKEY_CIPHERTEXT ?= $(BUILDKEY_PLAINTEXT).enc
+BUILDKEY_KMS_LOCATION ?= global
+BUILDKEY_KMS_KEYRING ?= dev
+BUILDKEY_KMS_KEY ?= key-material
+BUILDKEY_BASE_ARGS ?= --location=$(BUILDKEY_KMS_LOCATION) --keyring=$(BUILDKEY_KMS_KEYRING) --key=$(BUILDKEY_KMS_KEY) \
+			--plaintext-file=$(BUILDKEY_PLAINTEXT) --ciphertext-file=$(BUILDKEY_CIPHERTEXT) --project=$(IMAGE_PROJECT)
+
 POSIX_FLAGS ?=
 BAZELISK_ARGS ?=
 BASE_ARGS ?=
+BAZELISK_PREAMBLE ?=
 
 
 # Flag: `FORCE_COVERAGE`
@@ -94,6 +104,12 @@ else
 TEST_COMMAND ?= test
 endif
 
+# Flag: `DEV`
+ifeq ($(DEV),yes)
+BASE_ARGS += --config=devkey --test_output=errors
+BAZELISK_PREAMBLE = GOOGLE_APPLICATION_CREDENTIALS=$(BUILDKEY_PLAINTEXT)
+endif
+
 # Flag: `STRICT`.
 ifeq ($(STRICT),yes)
 BAZELISK_ARGS += --strict
@@ -125,7 +141,7 @@ GENHTML ?= /bin/genhtml
 else
 TAG += --config=dev
 IBAZEL ?= $(shell which ibazel)
-BAZELISK ?= $(shell which bazelisk)
+BAZELISK ?= $(BAZELISK_PREAMBLE) $(shell which bazelisk)
 GENHTML ?= $(shell which genhtml)
 endif
 
@@ -163,6 +179,7 @@ dev:  ## Develop against the specified target.
 	$(_RULE)$(IBAZEL) run $(TAG) --define=LIVE_RELOAD=enabled --define=dev=enabled $(APP)
 
 clean: clean-docs clean-reports  ## Clean ephemeral targets.
+	$(_RULE)rm -f $(BUILDKEY_PLAINTEXT)
 	$(_RULE)$(BAZELISK) $(BAZELISK_ARGS) clean
 
 clean-docs:  ## Clean built documentation.
@@ -189,7 +206,7 @@ samples:  ## Build and push sample app images.
         done
 
 distclean: clean  ## Clean targets, caches and dependencies.
-	$(_RULE)$(BAZELISK) $(BAZELISK_ARGS) clean --expunge_async
+	$(_RULE)$(BAZELISK) $(BAZELISK_ARGS) clean --expunge
 
 forceclean: distclean  ## Clean everything, and sanitize the codebase (DANGEROUS).
 	$(_RULE)git reset --hard && git clean -xdf
@@ -287,5 +304,21 @@ release-images:  ## Pull, tag, and release Docker images.
 	$(_RULE)docker push $(REGISTRY)/sample-ssr-jvm:$(VERSION);
 
 
+## Crypto
+$(BUILDKEY_CIPHERTEXT):
+	@echo "Encrypting build key..."
+	$(_RULE)gcloud kms encrypt $(BUILDKEY_BASE_ARGS)
+
+encrypt: $(BUILDKEY_CIPHERTEXT)  ## Encrypt private key material.
+	@echo "Key material encrypted."
+
+$(BUILDKEY_PLAINTEXT):
+	@echo "Decrypting build key..."
+	$(_RULE)gcloud kms decrypt $(BUILDKEY_BASE_ARGS)
+
+decrypt: $(BUILDKEY_PLAINTEXT)  ## Decrypt private key material.
+	@echo "Key material decrypted."
+
+
 .PHONY: build test help samples release-images update-deps devtools
 

README.md

@@ -2,7 +2,7 @@
 
 <hr />
 
-_**Gust is alpha software. Consider yourself warned...**_
+_**Gust is beta software. Consider yourself warned...**_
 
 <hr />
 
@@ -95,10 +95,12 @@ builder-image                  Build a new version of the CI builder image for G
 clean-docs                     Clean built documentation.
 clean-reports                  Clean built reports.
 clean                          Clean ephemeral targets.
+decrypt                        Decrypt private key material.
 dev                            Develop against the specified target.
 devtools                       Install local development dependencies.
 distclean                      Clean targets, caches and dependencies.
 docs                           Build documentation for the framework.
+encrypt                        Encrypt private key material.
 forceclean                     Clean everything, and sanitize the codebase (DANGEROUS).
 help                           Show this help text.
 release-images                 Pull, tag, and release Docker images.

WORKSPACE

@@ -53,16 +53,33 @@ load(
 protobuf_deps()
 
 
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+
+
+#
+# Java
+#
+
+RULES_JVM_EXTERNAL_TAG = "3.2"
+RULES_JVM_EXTERNAL_SHA = "82262ff4223c5fda6fb7ff8bd63db8131b51b413d26eb49e3131037e79e324af"
+
+http_archive(
+    name = "rules_jvm_external",
+    strip_prefix = "rules_jvm_external-%s" % RULES_JVM_EXTERNAL_TAG,
+    sha256 = RULES_JVM_EXTERNAL_SHA,
+    url = "https://github.com/bazelbuild/rules_jvm_external/archive/%s.zip" % RULES_JVM_EXTERNAL_TAG,
+)
+
+
 #
 # Extensions
 #
 
 ## NodeJS
-load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 http_archive(
     name = "build_bazel_rules_nodejs",
-    sha256 = "6a67a8a1bf6fddc9113f73471029b819eef4575c3a936a4a01d57e411894d692",
-    urls = ["https://github.com/bazelbuild/rules_nodejs/releases/download/2.0.2/rules_nodejs-2.0.2.tar.gz"],
+    sha256 = "f2194102720e662dbf193546585d705e645314319554c6ce7e47d8b59f459e9c",
+    urls = ["https://github.com/bazelbuild/rules_nodejs/releases/download/2.2.2/rules_nodejs-2.2.2.tar.gz"],
 )
 
 load("@build_bazel_rules_nodejs//:index.bzl",
@@ -109,6 +126,9 @@ graal_bindist_repository(
 load("//defs/toolchain/java:repos.bzl", "gust_java_repositories")
 gust_java_repositories()
 
+load("@maven//:compat.bzl", "compat_repositories")
+compat_repositories()
+
 load("@maven//:defs.bzl", "pinned_maven_install")
 pinned_maven_install()
 
@@ -189,10 +209,6 @@ browser_repositories(
     firefox = True,
 )
 
-## Toolchains (RBE)
-load("@bazel_toolchains//rules:rbe_repo.bzl", "rbe_autoconfig")
-rbe_autoconfig(name = "rbe_default")
-
 ## Stardoc
 load("@io_bazel_stardoc//:setup.bzl", "stardoc_repositories")
 stardoc_repositories()