deploy-docs.yml

name: "Docs: Build & Upload to R2"

on:
  push:
    branches: [staging, main]

# Serialize deploys per branch. Two pushes in quick succession would otherwise
# run concurrent `aws s3 sync --delete` jobs into the same R2 prefix, where each
# build's --delete removes the other's freshly-uploaded chunks, producing a
# deploy with one build's HTML and another's assets (404'd JS).
concurrency:
  group: deploy-docs-${{ github.ref }}
  cancel-in-progress: true

jobs:
  deploy:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 2

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: yarn

      - run: yarn install --frozen-lockfile

      - name: Set environment
        id: env
        env:
          GIT_REF: ${{ github.ref }}
        run: |
          echo "base_url=docs" >> "$GITHUB_OUTPUT"
          if [ "$GIT_REF" = "refs/heads/main" ]; then
            echo "prod=true" >> "$GITHUB_OUTPUT"
            echo "environment=production" >> "$GITHUB_OUTPUT"
          else
            echo "prod=" >> "$GITHUB_OUTPUT"
            echo "environment=staging" >> "$GITHUB_OUTPUT"
          fi

      - name: Build
        run: yarn build
        env:
          PROD: ${{ steps.env.outputs.prod }}

      - name: Restructure build output
        env:
          BASE_URL: ${{ steps.env.outputs.base_url }}
        run: |
          mv build build-raw
          mkdir -p "build/${BASE_URL}"
          mv build-raw/* "build/${BASE_URL}/"
          rm -rf build-raw
          cp "build/${BASE_URL}/404.html" build/404.html

      - name: Generate cache headers
        env:
          BASE_URL: ${{ steps.env.outputs.base_url }}
        run: |
          printf '%s\n' \
            "/${BASE_URL}/assets/*" \
            "  Cache-Control: public, max-age=31536000, immutable" \
            "" \
            "/${BASE_URL}/img/*" \
            "  Cache-Control: public, max-age=2592000" \
            "" \
            "/${BASE_URL}/*.js" \
            "  Cache-Control: public, max-age=31536000, immutable" \
            > build/_headers

      - name: Upload to R2
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
          AWS_ENDPOINT_URL: https://${{ secrets.CLOUDFLARE_ACCOUNT_ID }}.r2.cloudflarestorage.com
          AWS_REGION: auto
          ENVIRONMENT: ${{ steps.env.outputs.environment }}
        run: |
          aws s3 sync build/ \
            "s3://www-marketdata-app-builds/${ENVIRONMENT}/sources/docs/" \
            --delete

      - name: Notify orchestrator
        if: success()
        uses: peter-evans/repository-dispatch@v3
        with:
          token: ${{ secrets.ORCHESTRATOR_PAT }}
          repository: MarketDataApp/www-marketdata-app
          event-type: site-built
          client-payload: >-
            {
              "source": "docs",
              "source_repo": "MarketDataApp/documentation",
              "environment": "${{ steps.env.outputs.environment }}",
              "commit_sha": "${{ github.sha }}"
            }

      - name: Check if Worker changed
        id: worker
        run: |
          if git diff --name-only HEAD~1 HEAD -- worker/ 2>/dev/null | grep -q .; then
            echo "changed=true" >> "$GITHUB_OUTPUT"
          else
            echo "changed=false" >> "$GITHUB_OUTPUT"
          fi

      - name: Test Worker
        if: steps.worker.outputs.changed == 'true'
        working-directory: worker
        run: |
          yarn install --frozen-lockfile
          yarn test

      - name: Deploy Worker
        if: steps.worker.outputs.changed == 'true'
        uses: cloudflare/wrangler-action@v3
        with:
          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
          command: deploy
          workingDirectory: worker

      - name: Notify Slack on failure
        if: failure()
        env:
          SLACK_NOTIFY_URL: ${{ secrets.SLACK_NOTIFY_URL }}
          SLACK_NOTIFY_TOKEN: ${{ secrets.SLACK_NOTIFY_TOKEN }}
        run: |
          curl -s -d "" \
            -H "X-workflow: ${GITHUB_WORKFLOW}" \
            -H "X-repo: ${GITHUB_REPOSITORY}" \
            -H "X-branch: ${GITHUB_REF_NAME}" \
            -H "X-sha: ${GITHUB_SHA:0:7}" \
            -H "X-run_id: ${GITHUB_RUN_ID}" \
            "${SLACK_NOTIFY_URL}?token=${SLACK_NOTIFY_TOKEN}&type=ci_failure&channel=alerts"