deploy-dev.yml

name: Deploy to AWS (Development)

on:
  push:
    branches:
      - develop    # Development environment
  workflow_dispatch:
    inputs:
      services:
        description: 'Services to deploy (comma-separated: email,storage,verify or "all")'
        required: true
        default: 'all'

jobs:
  # Run tests first
  test:
    name: Run Tests
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '22.x'
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Validate Serverless configurations
        run: npm run sls-config-check

      - name: Run linter
        run: npm run lint

      - name: Setup environment file
        run: cp .env.example .env

      - name: Run unit tests
        run: npm run test

  # Determine deployment strategy
  determine-deployment:
    name: Determine Deployment Strategy
    runs-on: ubuntu-latest
    needs: test
    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
    outputs:
      deploy-email: ${{ steps.set-services.outputs.deploy-email }}
      deploy-storage: ${{ steps.set-services.outputs.deploy-storage }}
      deploy-verify: ${{ steps.set-services.outputs.deploy-verify }}
    steps:
      - name: Determine services to deploy
        id: set-services
        run: |
          if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
            SERVICES="${{ github.event.inputs.services }}"
          else
            SERVICES="all"
          fi
          
          if [ "$SERVICES" == "all" ]; then
            echo "deploy-email=true" >> $GITHUB_OUTPUT
            echo "deploy-storage=true" >> $GITHUB_OUTPUT
            echo "deploy-verify=true" >> $GITHUB_OUTPUT
          else
            echo "deploy-email=false" >> $GITHUB_OUTPUT
            echo "deploy-storage=false" >> $GITHUB_OUTPUT
            echo "deploy-verify=false" >> $GITHUB_OUTPUT
            
            IFS=',' read -ra SERVICE_ARRAY <<< "$SERVICES"
            for service in "${SERVICE_ARRAY[@]}"; do
              service=$(echo "$service" | xargs) # trim whitespace
              if [ "$service" == "email" ]; then
                echo "deploy-email=true" >> $GITHUB_OUTPUT
              elif [ "$service" == "storage" ]; then
                echo "deploy-storage=true" >> $GITHUB_OUTPUT
              elif [ "$service" == "verify" ]; then
                echo "deploy-verify=true" >> $GITHUB_OUTPUT
              fi
            done
          fi

  # Deploy Email Service
  deploy-email:
    name: Deploy Email Service (Dev)
    needs: determine-deployment
    if: needs.determine-deployment.outputs.deploy-email == 'true'
    uses: ./.github/workflows/deploy-service.yml
    with:
      service-name: email
      service-path: src/email
      environment: dev
    secrets:
      AWS_ACCESS_KEY_ID: ${{ secrets.DEV_AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.DEV_AWS_SECRET_ACCESS_KEY }}
      AWS_REGION: ${{ secrets.DEV_AWS_REGION }}
      SES_KEY_ID: ${{ secrets.DEV_SES_KEY_ID }}
      SES_SECRET: ${{ secrets.DEV_SES_SECRET }}
      SES_REGION: ${{ secrets.DEV_SES_REGION }}
      RECAPTCHA_SECRET: ${{ secrets.DEV_RECAPTCHA_SECRET }}
      EMAIL_API_KEYS: ${{ secrets.DEV_EMAIL_API_KEYS }}
      FROM_EMAIL: ${{ secrets.DEV_FROM_EMAIL }}
      DOMAIN: ${{ secrets.DEV_DOMAIN }}
      CERTIFICATE_DOMAIN: ${{ secrets.DEV_CERTIFICATE_DOMAIN }}
      DISABLE_DOMAIN: ${{ secrets.DEV_DISABLE_DOMAIN }}
      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}

  # Deploy Storage Service
  deploy-storage:
    name: Deploy Storage Service (Dev)
    needs: determine-deployment
    if: needs.determine-deployment.outputs.deploy-storage == 'true'
    uses: ./.github/workflows/deploy-service.yml
    with:
      service-name: storage
      service-path: src/storage
      environment: dev
    secrets:
      AWS_ACCESS_KEY_ID: ${{ secrets.DEV_AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.DEV_AWS_SECRET_ACCESS_KEY }}
      AWS_REGION: ${{ secrets.DEV_AWS_REGION }}
      BUCKET_NAME: ${{ secrets.DEV_BUCKET_NAME }}
      OBJECT_TTL: ${{ secrets.DEV_OBJECT_TTL }}
      ENABLE_STORAGE_UPLOAD_API_KEY: ${{ secrets.DEV_ENABLE_STORAGE_UPLOAD_API_KEY }}
      DOMAIN: ${{ secrets.DEV_DOMAIN }}
      CERTIFICATE_DOMAIN: ${{ secrets.DEV_CERTIFICATE_DOMAIN }}
      DISABLE_DOMAIN: ${{ secrets.DEV_DISABLE_DOMAIN }}
      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}

  # Deploy Verify Service - Development (Sepolia)
  deploy-verify-dev:
    name: Deploy Verify Service (Dev - Sepolia)
    needs: determine-deployment
    if: needs.determine-deployment.outputs.deploy-verify == 'true'
    uses: ./.github/workflows/deploy-service.yml
    with:
      service-name: verify-dev
      service-path: src/verify
      environment: dev
    secrets:
      AWS_ACCESS_KEY_ID: ${{ secrets.DEV_AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.DEV_AWS_SECRET_ACCESS_KEY }}
      AWS_REGION: ${{ secrets.DEV_AWS_REGION }}
      NETWORK: sepolia
      DOMAIN: ${{ secrets.DEV_DOMAIN }}
      CERTIFICATE_DOMAIN: ${{ secrets.DEV_CERTIFICATE_DOMAIN }}
      DISABLE_DOMAIN: ${{ secrets.DEV_DISABLE_DOMAIN }}
      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}

  # Deployment summary
  deployment-summary:
    name: Deployment Summary
    runs-on: ubuntu-latest
    needs: [determine-deployment, deploy-email, deploy-storage, deploy-verify-dev]
    if: always() && (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
    steps:
      - name: Generate deployment summary
        run: |
          echo "## Deployment Summary (Development)" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "**Environment:** Development" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "### Services Deployed:" >> $GITHUB_STEP_SUMMARY
          
          if [ "${{ needs.deploy-email.result }}" != "skipped" ]; then
            echo "- **Email Service:** ${{ needs.deploy-email.result }}" >> $GITHUB_STEP_SUMMARY
          fi
          
          if [ "${{ needs.deploy-storage.result }}" != "skipped" ]; then
            echo "- **Storage Service:** ${{ needs.deploy-storage.result }}" >> $GITHUB_STEP_SUMMARY
          fi
          
          if [ "${{ needs.deploy-verify-dev.result }}" != "skipped" ]; then
            echo "- **Verify Service (Dev - Sepolia):** ${{ needs.deploy-verify-dev.result }}" >> $GITHUB_STEP_SUMMARY
          fi