deployment.yml

name: 🚀 Deploy
on:
  push:
    branches:
      - main
      - dev
  pull_request:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  changes:
    name: 🔎 Determine deployable changes
    runs-on: ubuntu-latest
    outputs:
      DEPLOYABLE: ${{steps.changes.outputs.DEPLOYABLE}}
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6
        with:
          fetch-depth: '50'

      - name: ⎔ Setup node
        uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: 🔎 Determine deployable changes
        id: changes
        run:
          echo "DEPLOYABLE=$(node ./other/is-deployable.js ${{ github.sha }})"
          >> "$GITHUB_OUTPUT"

      - name: ❓ Deployable
        run: >-
          echo "DEPLOYABLE: ${{steps.changes.outputs.DEPLOYABLE}}"

  lint:
    name: ⬣ ESLint
    needs: [changes]
    if: needs.changes.outputs.DEPLOYABLE == 'true'
    runs-on: ubuntu-latest
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6

      - name: ⎔ Setup node
        uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: 📥 Download deps
        uses: bahmutov/npm-install@v1.11.2

      - name: 🔬 Lint
        run: npm run lint

  typecheck:
    name: ʦ TypeScript
    needs: [changes]
    if: needs.changes.outputs.DEPLOYABLE == 'true'
    runs-on: ubuntu-latest
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6

      - name: ⎔ Setup node
        uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: 📥 Download deps
        uses: bahmutov/npm-install@v1.11.2

      - name: 🔎 Type check
        run: npm run typecheck

  pre-deploy-health-check:
    name: 🏥 Pre-deploy health check
    needs: [changes]
    timeout-minutes: 15
    # Only run when we would actually deploy (keeps PRs fast).
    if:
      ${{ github.ref == 'refs/heads/main' && github.event_name == 'push' &&
      needs.changes.outputs.DEPLOYABLE == 'true' }}
    runs-on: ubuntu-latest
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6

      - name: ⎔ Setup node
        uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: 📥 Download deps
        uses: bahmutov/npm-install@v1.11.2

      - name: 🏄 Copy test env vars
        run: cp .env.example .env

      - name: 🏗 Build (production)
        run: npm run build

      - name: 🏦 Prime Site Cache
        id: site-cache
        uses: actions/cache@v5
        with:
          path: other/cache.db
          key: site-cache

      - name: 😅 Generate Site Cache
        if: steps.site-cache.outputs.cache-hit != 'true'
        run: npm run prime-cache:mocks

      - name: 🩺 Smoke test /healthcheck (production build)
        run: npm run predeploy:healthcheck
        env:
          MOCKS: 'true'

  playwright:
    name: 🎭 Playwright
    needs: [changes]
    if: needs.changes.outputs.DEPLOYABLE == 'true'
    runs-on: ubuntu-latest
    timeout-minutes: 60
    continue-on-error: true
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6

      - name: 🏄 Copy test env vars
        run: cp .env.example .env

      - name: ⎔ Setup node
        uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: 🎬 Setup ffmpeg
        continue-on-error: true
        uses: FedericoCarboni/setup-ffmpeg@v3

      - name: 🎬 Ensure ffmpeg installed
        run: |
          if command -v ffmpeg >/dev/null 2>&1; then
            ffmpeg -version
            exit 0
          fi

          # Fallback: if the setup action flakes (ex: fetch fails), install via apt.
          sudo apt-get -o Acquire::Retries=3 update
          sudo apt-get -o Acquire::Retries=3 install -y ffmpeg
          ffmpeg -version

      - name: 📥 Download deps
        uses: bahmutov/npm-install@v1.11.2
        with:
          useLockFile: false

      - name: 🌐 Install Playwright Browsers
        run: npm run test:e2e:install

      - name: 🛠 Setup Database
        run: npx prisma migrate reset --force

      - name: 🏗 Build
        run: npm run build

      - name: 🏦 Prime Site Cache
        id: site-cache
        uses: actions/cache@v5
        with:
          path: other/cache.db
          key: site-cache

      - name: 😅 Generate Site Cache
        if: steps.site-cache.outputs.cache-hit != 'true'
        run: npm run prime-cache:mocks

      - name: 🎭 Playwright tests
        run: npx playwright test
        env:
          PORT: 8811

      - name: 📊 Upload report
        uses: actions/upload-artifact@v6
        if: always()
        with:
          name: playwright-report
          path: playwright-report/
          retention-days: 30

  deploy:
    name: 🚀 Deploy
    runs-on: ubuntu-latest
    needs: [changes, lint, typecheck, pre-deploy-health-check]
    # only build/deploy main branch on pushes
    if:
      ${{ (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/dev') &&
      github.event_name == 'push' && needs.changes.outputs.DEPLOYABLE == 'true'
      }}

    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6
        with:
          fetch-depth: '50'

      - name: 👀 Read app name
        uses: SebRollen/toml-action@v1.2.0
        id: app_name
        with:
          file: 'fly.toml'
          field: 'app'

      - name: 🎈 Setup Fly
        uses: superfly/flyctl-actions/setup-flyctl@1.5

      - name: 🤖 update robots
        if: ${{ github.ref == 'refs/heads/dev' }}
        run:
          # replace "Allow" with "Disallow" in public/robots.txt for staging
          sed -i 's/Allow/Disallow/g' public/robots.txt

      - name: 🚀 Deploy Staging
        if: ${{ github.ref == 'refs/heads/dev' }}
        run:
          flyctl deploy --depot --remote-only --build-arg COMMIT_SHA=${{
          github.sha }} --app ${{ steps.app_name.outputs.value }}-staging
        env:
          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

      - name: 🚀 Deploy Production
        if: ${{ github.ref == 'refs/heads/main' }}
        run:
          flyctl deploy --depot --remote-only --build-arg COMMIT_SHA=${{
          github.sha }} --build-secret SENTRY_AUTH_TOKEN=${{
          secrets.SENTRY_AUTH_TOKEN }}
        env:
          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}