api-dev.yaml

name: API DEV CI/CD

on:
  push:
    branches: [develop]
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: deploy-dev
  cancel-in-progress: true

env:
  AZURE_WEBAPP_NAME: app-dfx-api-dev
  AZURE_WEBAPP_PACKAGE_PATH: '.'
  NODE_VERSION: '20.x'
  DEV_API_URL: https://dev.api.dfx.swiss

jobs:
  build-and-deploy:
    name: Build, test and deploy to DEV
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Use Node.js ${{ env.NODE_VERSION }}
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'

      - name: Install packages
        uses: nick-fields/retry@v3
        with:
          timeout_minutes: 10
          max_attempts: 3
          retry_on: error
          command: npm ci

      - name: Run linter
        run: npm run lint

      - name: Format check
        run: npm run format:check

      - name: Build code
        run: npm run build

      - name: Run tests
        run: npm run test

      - name: Security audit
        run: npm audit --audit-level=high
        continue-on-error: true

      - name: Write version file
        run: echo "${{ github.sha }}" > dist/version.txt

      - name: Deploy to Azure App Service (DEV)
        uses: azure/webapps-deploy@v3
        with:
          app-name: ${{ env.AZURE_WEBAPP_NAME }}
          publish-profile: ${{ secrets.DEV_PUBLISH_PROFILE }}
          package: ${{ env.AZURE_WEBAPP_PACKAGE_PATH }}

      - name: Verify DEV deployment
        timeout-minutes: 15
        run: |
          EXPECTED=${{ github.sha }}
          echo "Expected commit: $EXPECTED"

          for i in {1..30}; do
            if RESPONSE=$(curl -sf ${{ env.DEV_API_URL }}/version 2>&1); then
              ACTUAL=$(echo "$RESPONSE" | jq -r '.commit')
              echo "Attempt $i: DEV running $ACTUAL"

              if [ "$EXPECTED" == "$ACTUAL" ]; then
                echo "DEV is running the latest develop commit"
                exit 0
              fi
            else
              echo "Attempt $i: DEV API not reachable"
            fi

            sleep 30
          done

          echo "::error::DEV is not running the latest develop commit after 15 minutes"
          exit 1