name: Deploy to Humanitec v2

on:
  workflow_run:
    workflows: ["Build and Push to ACR"]
    types: [completed]
    branches: [ "main" ]
  workflow_dispatch:
    inputs:
      environment:
        description: 'Target environment'
        required: true
        default: 'dev'
        type: choice
        options: [dev, staging, production]

env:
  HUMANITEC_ORG: skillful-wild-chicken-2617
  HUMANITEC_AUTH_TOKEN: ${{ secrets.HUMANITEC_TOKEN }}
  PROJECT_ID: test-siva-node-1
  DEFAULT_ENV_ID: dev
  ACR_REGISTRY: bstagecjotdevacr.azurecr.io

jobs:
  deploy:
    name: Deploy to Humanitec v2
    runs-on: ubuntu-latest
    if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success'
    steps:
      - uses: actions/checkout@v4
      - name: Install dependencies
        run: apt-get update -qq && apt-get install -y jq
      - name: Install hctl CLI
        run: |
          HCTL_VERSION=$(curl -s https://api.github.com/repos/humanitec/hctl/releases/latest | jq -r '.tag_name')
          mkdir -p /tmp/hctl-install
          curl -sLo /tmp/hctl-install/hctl.tar.gz "https://github.com/humanitec/hctl/releases/download/${HCTL_VERSION}/hctl_${HCTL_VERSION#v}_linux_amd64.tar.gz"
          tar -xzf /tmp/hctl-install/hctl.tar.gz -C /tmp/hctl-install
          install -m 755 /tmp/hctl-install/hctl /usr/local/bin/hctl
      - name: Ensure Humanitec project and environment exist
        env:
          HUMANITEC_AUTH_TOKEN: ${{ secrets.HUMANITEC_TOKEN }}
        run: |
          DISPATCH_ENV="${{ github.event.inputs.environment }}"
          ENV_ID="${DISPATCH_ENV:-$DEFAULT_ENV_ID}"
          # Create project if it doesn't exist (hctl exits 0 if already exists)
          hctl create project "$PROJECT_ID"             --set display_name="test-siva-node-1" 2>&1 | grep -v "already exists" || true
          # Create environment if it doesn't exist
          hctl create environment "$PROJECT_ID" "$ENV_ID"             --set env_type_id=development             --set display_name="Development" 2>&1 | grep -v "already exists" || true
          echo "✓ Project $PROJECT_ID / env $ENV_ID ready"
      - name: Deploy with Score
        env:
          HUMANITEC_AUTH_TOKEN: ${{ secrets.HUMANITEC_TOKEN }}
        run: |
          DISPATCH_ENV="${{ github.event.inputs.environment }}"
          ENV_ID="${DISPATCH_ENV:-$DEFAULT_ENV_ID}"
          DEFAULT_IMAGE="$ACR_REGISTRY/test-siva-node-1:latest"
          # Pre-flight: wait for any deployment from a prior run to finish before calling hctl.
          # hctl refuses to start a new deployment while one is still executing.
          echo "Pre-flight: checking for in-progress deployments..."
          MAX_PREFLIGHT=420
          PREFLIGHT_WAITED=0
          while [ $PREFLIGHT_WAITED -lt $MAX_PREFLIGHT ]; do
            PREFLIGHT_STATUS=$(curl -sf               -H "Authorization: Bearer $HUMANITEC_AUTH_TOKEN"               "https://api.humanitec.dev/orgs/$HUMANITEC_ORG/last-deployments?env_id=$ENV_ID&project_id=$PROJECT_ID&state_change_only=true"               | jq -r '.items[0].status // "none"' 2>/dev/null || echo "none")
            if [ "$PREFLIGHT_STATUS" != "in progress" ] && [ "$PREFLIGHT_STATUS" != "pending" ] && [ "$PREFLIGHT_STATUS" != "executing" ]; then
              echo "Pre-flight passed (status=$PREFLIGHT_STATUS). Proceeding."
              break
            fi
            echo "  Prior deployment still running ($PREFLIGHT_WAITED s elapsed, status=$PREFLIGHT_STATUS)..."
            sleep 15
            PREFLIGHT_WAITED=$((PREFLIGHT_WAITED + 15))
          done
          # First deploy — provisions all resources. On a brand-new Humanitec project the
          # dns-k8s-ingress Terraform module runs before the K8s Service exists, so the
          # ingress backend port falls back to 3000. A second deploy (below) corrects it
          # once the Service is up, which is essential for Java/Python apps on port 8080.
          HCTL_EXIT=0
          timeout 300 hctl score deploy "$PROJECT_ID" "$ENV_ID" score.yaml             --no-prompt             --default-image "$DEFAULT_IMAGE" || HCTL_EXIT=$?
          if [ "$HCTL_EXIT" -eq 0 ]; then
            echo "✓ First deployment complete for test-siva-node-1 to $ENV_ID"
          elif [ "$HCTL_EXIT" -eq 124 ]; then
            echo "✓ First deployment submitted (polling timed out — waiting for K8s to settle)"
          else
            echo "✗ hctl failed with exit code $HCTL_EXIT"
            exit $HCTL_EXIT
          fi
          # Poll Humanitec API until the first deployment is no longer in-progress before
          # re-deploying. A flat sleep is unreliable — Terraform DNS modules can take 4-6 min.
          echo "Waiting for first deployment to finish (polling Humanitec API)..."
          MAX_WAIT=360
          WAITED=0
          while [ $WAITED -lt $MAX_WAIT ]; do
            DEPLOY_STATUS=$(curl -sf               -H "Authorization: Bearer $HUMANITEC_AUTH_TOKEN"               "https://api.humanitec.dev/orgs/$HUMANITEC_ORG/last-deployments?env_id=$ENV_ID&project_id=$PROJECT_ID&state_change_only=true"               | jq -r '.items[0].status // "unknown"' 2>/dev/null || echo "unknown")
            if [ "$DEPLOY_STATUS" != "in progress" ] && [ "$DEPLOY_STATUS" != "pending" ] && [ "$DEPLOY_STATUS" != "executing" ]; then
              echo "First deployment finished with status: $DEPLOY_STATUS"
              break
            fi
            echo "  Still running ($WAITED s elapsed, status=$DEPLOY_STATUS)..."
            sleep 15
            WAITED=$((WAITED + 15))
          done
          if [ $WAITED -ge $MAX_WAIT ]; then
            echo "Warning: first deployment still running after $MAX_WAIT s — proceeding anyway"
          fi
          # Second deploy — dns module now reads the real K8s Service port, fixing the ingress
          HCTL_EXIT2=0
          timeout 120 hctl score deploy "$PROJECT_ID" "$ENV_ID" score.yaml             --no-prompt             --default-image "$DEFAULT_IMAGE" || HCTL_EXIT2=$?
          if [ "$HCTL_EXIT2" -eq 0 ]; then
            echo "✓ Deployment finalised for test-siva-node-1 to $ENV_ID"
          elif [ "$HCTL_EXIT2" -eq 124 ]; then
            echo "✓ Second deployment submitted for test-siva-node-1 to $ENV_ID (polling timed out)"
          else
            echo "✗ Second hctl deploy failed with exit code $HCTL_EXIT2"
            exit $HCTL_EXIT2
          fi