name: Deploy CF-WEB-APP to Azure App Service

on:
  push:
    branches:
      - main
    paths:
      - "js/cf-webapp/**"
      - ".github/workflows/deploy_cfwebapp_to_azure.yml"
  workflow_dispatch:

jobs:
  build:
    env:
      NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write
      id-token: write

    steps:
      - uses: actions/checkout@v6

      - name: Setup Node.js environment
        uses: actions/setup-node@v6
        with:
          node-version: "20"
          registry-url: https://npm.pkg.github.com
          scope: "@codeflash-ai"

      - name: Install pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10

      - name: Restore WASM artifacts cache
        uses: actions/cache@v5
        with:
          path: |
            js/cf-webapp/public/web-tree-sitter.wasm
            js/cf-webapp/public/tree-sitter-python.wasm
            js/cf-webapp/public/.tree-sitter-python-version
          key: wasm-${{ runner.os }}-${{ hashFiles('js/pnpm-lock.yaml') }}

      - name: Install dependencies
        working-directory: js
        run: pnpm install --frozen-lockfile

      - name: Restore Next.js build cache
        uses: actions/cache@v5
        with:
          path: js/cf-webapp/.next/cache
          key: nextjs-${{ runner.os }}-${{ hashFiles('js/pnpm-lock.yaml') }}-${{ hashFiles('js/cf-webapp/src/**') }}
          restore-keys: |
            nextjs-${{ runner.os }}-${{ hashFiles('js/pnpm-lock.yaml') }}-
            nextjs-${{ runner.os }}-

      - name: Build and package app
        working-directory: js
        run: pnpm --filter cf-webapp build
          zip -qr cfwebapp.zip . .next node_modules package.json public

      - name: Upload artifact for deployment jobs
        uses: actions/upload-artifact@v7
        with:
          name: cfwebapp-artifact
          path: js/cf-webapp/cfwebapp.zip

  deploy:
    runs-on: ubuntu-latest
    needs: build
    environment:
      name: "dev"
      url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
    permissions:
      id-token: write #This is required for requesting the JWT

    steps:
      - name: Download artifact from build job
        uses: actions/download-artifact@v8
        with:
          name: cfwebapp-artifact

      - name: Unzip artifact for deployment
        run: unzip cfwebapp.zip

      - name: Login to Azure
        uses: azure/login@v3
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - name: "Deploy to Azure App Service - codeflash-webapp-2-staging.azurewebsites.net"
        uses: azure/webapps-deploy@v3
        id: deploy-to-webapp
        with:
          app-name: "codeflash-webapp-2"
          slot-name: "staging"
          # if we deploy a zip we can do Run-From-Zip and skip the oryx build step (which fails if we do a regular zip-deploy because it thinks the project is php for some reason)
          # https://learn.microsoft.com/en-us/azure/app-service/deploy-run-package#enable-running-from-package
          package: "cfwebapp.zip"
          clean: true