deploy.yml

name: Deploy AppBundle

on:
  push:
    branches: [main, dev]

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        include:
          - revit-year: "2026"
            dotnet-version: "8.0.x"
            engine: "Autodesk.Revit+2026"
          - revit-year: "2027"
            dotnet-version: "10.0.x"
            engine: "Autodesk.Revit+2027"
    uses: ./.github/workflows/build.yml
    with:
      revit-year: ${{ matrix.revit-year }}
      dotnet-version: ${{ matrix.dotnet-version }}
    secrets: inherit

  deploy:
    needs: build
    runs-on: ubuntu-latest
    environment: ${{ github.ref_name == 'main' && 'production' || 'development' }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - revit-year: "2026"
            dotnet-version: "8.0.x"
            engine: "Autodesk.Revit+2026"
          - revit-year: "2027"
            dotnet-version: "10.0.x"
            engine: "Autodesk.Revit+2027"
    env:
      APS_CLIENT_ID: ${{ secrets.APS_CLIENT_ID }}
      APS_CLIENT_SECRET: ${{ secrets.APS_CLIENT_SECRET }}
      DA_BASE_URL: https://developer.api.autodesk.com/da/us-east/v3
      APPBUNDLE_NAME: RevitMcpTools${{ matrix.revit-year }}
      ENGINE: ${{ matrix.engine }}
    steps:
      - name: Download artifact
        uses: actions/download-artifact@v4
        with:
          name: appbundle-${{ matrix.revit-year }}

      - name: Determine alias
        run: |
          if [ "${{ github.ref_name }}" = "main" ]; then
            echo "ALIAS=prod" >> "$GITHUB_ENV"
          else
            echo "ALIAS=dev" >> "$GITHUB_ENV"
          fi

      - name: Get APS access token
        run: |
          RESPONSE=$(curl -s -X POST \
            "https://developer.api.autodesk.com/authentication/v2/token" \
            -H "Authorization: Basic $(printf '%s' "$APS_CLIENT_ID:$APS_CLIENT_SECRET" | base64 -w 0)" \
            -H "Content-Type: application/x-www-form-urlencoded" \
            -d "grant_type=client_credentials&scope=code:all")
          TOKEN=$(echo "$RESPONSE" | jq -r '.access_token')
          if [ "$TOKEN" = "null" ] || [ -z "$TOKEN" ]; then
            echo "::error::Failed to get access token"
            echo "$RESPONSE" | jq .
            exit 1
          fi
          echo "::add-mask::$TOKEN"
          echo "APS_TOKEN=$TOKEN" >> "$GITHUB_ENV"

      - name: Get APS app nickname
        run: |
          RESPONSE=$(curl -s -X GET \
            "$DA_BASE_URL/forgeapps/me" \
            -H "Authorization: Bearer $APS_TOKEN")

          NICKNAME=$(echo "$RESPONSE" | jq -r 'if type=="object" then .nickname elif type=="string" then . else empty end' 2>/dev/null)

          if [ -z "$NICKNAME" ] || [ "$NICKNAME" = "null" ]; then
            echo "::error::Failed to get app nickname"
            echo "$RESPONSE"
            exit 1
          fi

          echo "NICKNAME=$NICKNAME" >> "$GITHUB_ENV"

      - name: Create or version AppBundle
        run: |
          # Create-first: POST /appbundles creates the bundle. If it already
          # exists DA returns 409, in which case we POST a new version instead.
          # (A GET-existence probe is unreliable here: DA can answer 400 for a
          # not-yet-created bundle, which previously sent us down the wrong path.)
          BODY=$(mktemp)
          STATUS=$(curl -s -o "$BODY" -w "%{http_code}" -X POST \
            "$DA_BASE_URL/appbundles" \
            -H "Authorization: Bearer $APS_TOKEN" \
            -H "Content-Type: application/json" \
            -d "{\"id\":\"$APPBUNDLE_NAME\",\"engine\":\"$ENGINE\",\"description\":\"deploy $GITHUB_SHA\"}")

          if [ "$STATUS" = "409" ]; then
            echo "AppBundle exists, creating new version..."
            STATUS=$(curl -s -o "$BODY" -w "%{http_code}" -X POST \
              "$DA_BASE_URL/appbundles/$APPBUNDLE_NAME/versions" \
              -H "Authorization: Bearer $APS_TOKEN" \
              -H "Content-Type: application/json" \
              -d "{\"engine\":\"$ENGINE\",\"description\":\"deploy $GITHUB_SHA\"}")
          else
            echo "Creating new AppBundle..."
          fi

          if [ "$STATUS" -lt 200 ] || [ "$STATUS" -ge 300 ]; then
            echo "::error::Failed to create AppBundle/version (HTTP $STATUS)"
            cat "$BODY"
            exit 1
          fi

          RESPONSE=$(cat "$BODY")
          VERSION=$(echo "$RESPONSE" | jq -r '.version // empty')
          UPLOAD_URL=$(echo "$RESPONSE" | jq -r '.uploadParameters.endpointURL // empty')
          FORM_DATA=$(echo "$RESPONSE" | jq -c '.uploadParameters.formData // empty')

          if [ -z "$VERSION" ] || [ -z "$UPLOAD_URL" ] || [ -z "$FORM_DATA" ]; then
            echo "::error::AppBundle response missing version or upload parameters"
            echo "$RESPONSE" | jq . || echo "$RESPONSE"
            exit 1
          fi

          echo "VERSION=$VERSION" >> "$GITHUB_ENV"
          echo "UPLOAD_URL=$UPLOAD_URL" >> "$GITHUB_ENV"
          echo "FORM_DATA=$FORM_DATA" >> "$GITHUB_ENV"

      - name: Upload zip to S3
        run: |
          CURL_ARGS=()
          while IFS='=' read -r key value; do
            CURL_ARGS+=("-F" "$key=$value")
          done < <(echo "$FORM_DATA" | jq -r 'to_entries[] | .key + "=" + .value')

          CURL_ARGS+=("-F" "file=@RevitMcpTools.bundle.zip")

          HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
            -X POST "$UPLOAD_URL" \
            "${CURL_ARGS[@]}")

          if [ "$HTTP_STATUS" -lt 200 ] || [ "$HTTP_STATUS" -ge 300 ]; then
            echo "::error::S3 upload failed with HTTP $HTTP_STATUS"
            exit 1
          fi
          echo "Upload successful (HTTP $HTTP_STATUS)"

      - name: Create or update alias
        run: |
          HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
            -X PATCH "$DA_BASE_URL/appbundles/$APPBUNDLE_NAME/aliases/$ALIAS" \
            -H "Authorization: Bearer $APS_TOKEN" \
            -H "Content-Type: application/json" \
            -d "{\"version\":$VERSION}")

          if [ "$HTTP_STATUS" = "404" ]; then
            echo "Alias does not exist, creating..."
            curl -s -X POST \
              "$DA_BASE_URL/appbundles/$APPBUNDLE_NAME/aliases" \
              -H "Authorization: Bearer $APS_TOKEN" \
              -H "Content-Type: application/json" \
              -d "{\"id\":\"$ALIAS\",\"version\":$VERSION}" | jq .
          elif [ "$HTTP_STATUS" -lt 200 ] || [ "$HTTP_STATUS" -ge 300 ]; then
            echo "::error::Failed to update alias (HTTP $HTTP_STATUS)"
            exit 1
          else
            echo "Alias updated successfully"
          fi

      - name: Log AppBundle ID
        run: |
          APPBUNDLE_ID="$NICKNAME.$APPBUNDLE_NAME+$ALIAS"
          echo "## Deploy Summary" >> "$GITHUB_STEP_SUMMARY"
          echo "- **AppBundle:** \`$APPBUNDLE_ID\`" >> "$GITHUB_STEP_SUMMARY"
          echo "- **Version:** $VERSION" >> "$GITHUB_STEP_SUMMARY"
          echo "- **Alias:** $ALIAS" >> "$GITHUB_STEP_SUMMARY"
          echo "- **Commit:** $GITHUB_SHA" >> "$GITHUB_STEP_SUMMARY"