openwork/.github/workflows/release-daytona-snapshot.yml

name: Release Daytona Snapshot

on:
  workflow_call:
    inputs:
      tag:
        description: "Tag to build from (e.g., v0.11.200). Defaults to current ref."
        required: false
        type: string
      deploy_den:
        description: "Whether to promote the published snapshot into the Den Render service"
        required: false
        type: boolean
        default: true
      snapshot_name:
        description: "Optional explicit Daytona snapshot name"
        required: false
        type: string
      snapshot_region:
        description: "Optional Daytona region override for snapshot push"
        required: false
        type: string
  workflow_dispatch:
    inputs:
      tag:
        description: "Tag to build from (e.g., v0.11.200). Defaults to release tag/current ref."
        required: false
        type: string
      deploy_den:
        description: "Whether to promote the published snapshot into the Den Render service"
        required: false
        type: boolean
        default: true
      snapshot_name:
        description: "Optional explicit Daytona snapshot name"
        required: false
        type: string
      snapshot_region:
        description: "Optional Daytona region override for snapshot push"
        required: false
        type: string

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ inputs.tag || github.ref_name }}
  cancel-in-progress: false

jobs:
  publish-daytona-snapshot:
    name: Build and Push Daytona Snapshot
    runs-on: blacksmith-4vcpu-ubuntu-2404
    outputs:
      release_tag: ${{ steps.resolve.outputs.release_tag }}
      snapshot_name: ${{ steps.resolve.outputs.snapshot_name }}
      snapshot_region: ${{ steps.resolve.outputs.snapshot_region }}
    steps:
      - name: Resolve release tag and snapshot name
        id: resolve
        shell: bash
        env:
          INPUT_TAG: ${{ inputs.tag }}
          INPUT_SNAPSHOT_NAME: ${{ inputs.snapshot_name }}
          INPUT_SNAPSHOT_REGION: ${{ inputs.snapshot_region }}
          SNAPSHOT_NAME_BASE: ${{ vars.DAYTONA_SNAPSHOT_NAME_BASE }}
          DEFAULT_SNAPSHOT_REGION: ${{ vars.DAYTONA_SNAPSHOT_REGION }}
        run: |
          set -euo pipefail

          tag="${INPUT_TAG:-}"
          if [ -z "$tag" ]; then
            tag="${GITHUB_REF_NAME}"
          fi
          if [[ "$tag" != v* ]]; then
            tag="v${tag}"
          fi
          if [[ ! "$tag" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]]; then
            echo "Invalid release tag: $tag" >&2
            exit 1
          fi

          base_name="${SNAPSHOT_NAME_BASE:-openwork}"
          if [ -n "${INPUT_SNAPSHOT_NAME:-}" ]; then
            snapshot_name="${INPUT_SNAPSHOT_NAME}"
          else
            snapshot_name="${base_name}-${tag#v}"
          fi
          snapshot_region="${INPUT_SNAPSHOT_REGION:-${DEFAULT_SNAPSHOT_REGION:-}}"

          echo "release_tag=$tag" >> "$GITHUB_OUTPUT"
          echo "snapshot_name=$snapshot_name" >> "$GITHUB_OUTPUT"
          echo "snapshot_region=$snapshot_region" >> "$GITHUB_OUTPUT"

      - name: Checkout release source
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          ref: ${{ steps.resolve.outputs.release_tag }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Install Daytona CLI
        shell: bash
        run: |
          set -euo pipefail

          case "$(uname -s)" in
            Linux) platform="linux" ;;
            Darwin) platform="darwin" ;;
            *)
              echo "Unsupported OS: $(uname -s)" >&2
              exit 1
              ;;
          esac

          case "$(uname -m)" in
            x86_64|amd64) arch="amd64" ;;
            aarch64|arm64) arch="arm64" ;;
            *)
              echo "Unsupported architecture: $(uname -m)" >&2
              exit 1
              ;;
          esac

          asset_name="daytona-${platform}-${arch}"
          install_dir="$HOME/.local/bin"
          mkdir -p "$install_dir"

          release_json="$(curl -fsSL https://api.github.com/repos/daytonaio/daytona/releases/latest)"
          asset_url="$(python3 -c 'import json, sys; data = json.load(sys.stdin); name = sys.argv[1]; print(next(asset["browser_download_url"] for asset in data["assets"] if asset["name"] == name))' "$asset_name" <<<"$release_json")"

          curl -fL "$asset_url" -o "$install_dir/daytona"
          chmod +x "$install_dir/daytona"

          echo "$install_dir" >> "$GITHUB_PATH"
          export PATH="$install_dir:$PATH"

          daytona version

      - name: Build and push snapshot
        shell: bash
        env:
          DAYTONA_API_KEY: ${{ secrets.DAYTONA_API_KEY }}
          DAYTONA_API_URL: ${{ vars.DAYTONA_API_URL }}
          DAYTONA_TARGET: ${{ vars.DAYTONA_TARGET }}
          DAYTONA_SNAPSHOT_REGION: ${{ steps.resolve.outputs.snapshot_region }}
          DAYTONA_SNAPSHOT_NAME: ${{ steps.resolve.outputs.snapshot_name }}
        run: |
          set -euo pipefail

          if [ -z "${DAYTONA_API_KEY:-}" ]; then
            echo "Missing required secret: DAYTONA_API_KEY" >&2
            exit 1
          fi

          export DAYTONA_CONFIG_DIR="$RUNNER_TEMP/daytona"
          mkdir -p "$DAYTONA_CONFIG_DIR"
          daytona login --api-key "$DAYTONA_API_KEY"

          echo "Publishing Daytona snapshot: ${DAYTONA_SNAPSHOT_NAME}"
          ./scripts/create-daytona-openwork-snapshot.sh "${DAYTONA_SNAPSHOT_NAME}"

  deploy-den:
    name: Promote Daytona Snapshot to Den Render Service
    needs: [publish-daytona-snapshot]
    if: ${{ inputs.deploy_den }}
    uses: ./.github/workflows/deploy-den.yml
    with:
      daytona_snapshot: ${{ needs.publish-daytona-snapshot.outputs.snapshot_name }}
    secrets: inherit