deploy.sh

#!/bin/bash

set -e

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
CYAN='\033[0;36m'
WHITE='\033[1;37m'
NC='\033[0m' # No Color

# Function to print colored output
print_color() {
    local color=$1
    local message=$2
    echo -e "${color}${message}${NC}"
}

# Function to check if command exists
command_exists() {
    command -v "$1" >/dev/null 2>&1
}

# Print usage
usage() {
    echo "Usage: $0 [-a <account>] [-r <region>] [-e <environment>] [-p <profile>] [-y]"
    echo ""
    echo "Parameters (auto-detected in AWS CloudShell):"
    echo "  -a, --account      AWS Account ID (auto-detected from AWS credentials)"
    echo "  -r, --region       AWS Region (auto-detected from AWS_REGION)"
    echo ""
    echo "Optional parameters:"
    echo "  -e, --environment  Environment (default: dev)"
    echo "  -p, --profile      AWS Profile (default: uses IAM role or environment credentials)"
    echo "  -y, --yes          Auto-approve (skip confirmation prompts)"
    echo "  -q, --quiet        Quiet mode (less verbose output)"
    echo ""
    echo "Examples:"
    echo "  $0                                           # In CloudShell (auto-detect)"
    echo "  $0 -y                                        # Auto-approve deployment"
    echo "  $0 -a 123456789012 -r us-west-1"
    echo "  $0 -a 123456789012 -r us-west-1 -e staging -p my-profile"
    exit 1
}

# Parse command line arguments
ENVIRONMENT="dev"
PROFILE=""
AUTO_APPROVE=0
QUIET_MODE=0

while [[ $# -gt 0 ]]; do
    case $1 in
        -a|--account)
            ACCOUNT="$2"
            shift 2
            ;;
        -r|--region)
            REGION="$2"
            shift 2
            ;;
        -e|--environment)
            ENVIRONMENT="$2"
            shift 2
            ;;
        -p|--profile)
            PROFILE="$2"
            shift 2
            ;;
        -y|--yes|--auto-approve)
            AUTO_APPROVE=1
            shift
            ;;
        -q|--quiet)
            QUIET_MODE=1
            shift
            ;;
        -h|--help)
            usage
            ;;
        *)
            echo "Unknown option: $1"
            usage
            ;;
    esac
done

# Auto-detect account and region if not provided (useful for CloudShell)
if [[ -z "$ACCOUNT" ]]; then
    print_color $YELLOW "Account not specified, attempting to auto-detect..."
    ACCOUNT=$(aws sts get-caller-identity --query Account --output text 2>/dev/null || echo "")
    if [[ -n "$ACCOUNT" ]]; then
        print_color $GREEN "✓ Detected AWS Account: $ACCOUNT"
    fi
fi

if [[ -z "$REGION" ]]; then
    print_color $YELLOW "Region not specified, attempting to auto-detect..."
    REGION="${AWS_REGION:-${AWS_DEFAULT_REGION:-}}"
    if [[ -n "$REGION" ]]; then
        print_color $GREEN "✓ Detected AWS Region: $REGION"
    fi
fi

# Validate required parameters
if [[ -z "$ACCOUNT" || -z "$REGION" ]]; then
    print_color $RED "Error: Account and Region are required parameters"
    print_color $YELLOW "Tip: In AWS CloudShell, these are auto-detected. Otherwise, provide them explicitly."
    usage
fi

print_color $GREEN "=== AS2 Application Deployment Script ==="
print_color $YELLOW "Account: $ACCOUNT"
print_color $YELLOW "Region: $REGION"
print_color $YELLOW "Environment: $ENVIRONMENT"
print_color $YELLOW "Profile: ${PROFILE:-<using IAM role>}"
echo ""

# Confirmation prompt (unless auto-approve)
if [[ "$AUTO_APPROVE" != "1" ]]; then
    echo -e -n "${CYAN}Proceed with deployment? [Y/n]:${NC} "
    read -r response
    case "$response" in
        [nN][oO]|[nN])
            print_color $YELLOW "Deployment cancelled"
            exit 0
            ;;
    esac
fi

# Track deployment progress
TOTAL_STEPS=4
CURRENT_STEP=0

step_start() {
    CURRENT_STEP=$((CURRENT_STEP + 1))
    print_color $BLUE "\n[$CURRENT_STEP/$TOTAL_STEPS] $1"
}

step_done() {
    print_color $GREEN "    ✓ $1"
}

step_fail() {
    print_color $RED "    ✗ $1"
}

# Check prerequisites
step_start "Checking prerequisites..."

if ! command_exists aws; then
    print_color $RED "AWS CLI is not installed or not in PATH"
    exit 1
fi

if ! command_exists cdk; then
    print_color $RED "AWS CDK is not installed or not in PATH"
    exit 1
fi

if ! command_exists mvn; then
    print_color $YELLOW "Maven is not installed. Attempting to install..."

    # Detect OS and install Maven
    if [[ -f /etc/os-release ]]; then
        . /etc/os-release
        case "$ID" in
            amzn|rhel|centos|fedora)
                # Amazon Linux, RHEL, CentOS, Fedora
                if command_exists dnf; then
                    sudo dnf install -y maven
                elif command_exists yum; then
                    sudo yum install -y maven
                else
                    print_color $RED "Package manager not found for $ID"
                    exit 1
                fi
                ;;
            ubuntu|debian)
                sudo apt-get update
                sudo apt-get install -y maven
                ;;
            *)
                print_color $RED "Unsupported OS: $ID. Please install Maven manually."
                exit 1
                ;;
        esac
    elif [[ "$(uname)" == "Darwin" ]]; then
        # macOS
        if command_exists brew; then
            brew install maven
        else
            print_color $RED "Homebrew not found. Please install Maven manually or install Homebrew first."
            exit 1
        fi
    else
        print_color $RED "Unable to detect OS. Please install Maven manually."
        exit 1
    fi

    # Verify installation
    if command_exists mvn; then
        print_color $GREEN "✓ Maven installed successfully"
    else
        print_color $RED "Maven installation failed. Please install manually."
        exit 1
    fi
fi

if ! command_exists npm; then
    print_color $RED "Node.js/npm is not installed or not in PATH"
    exit 1
fi

step_done "All prerequisites installed"

# Set AWS profile only if specified
if [[ -n "$PROFILE" ]]; then
    export AWS_PROFILE=$PROFILE
    PROFILE_ARG="--profile $PROFILE"
else
    PROFILE_ARG=""
fi

# Verify AWS credentials
print_color $BLUE "Verifying AWS credentials..."
if ! aws sts get-caller-identity $PROFILE_ARG --output text >/dev/null 2>&1; then
    print_color $RED "Failed to verify AWS credentials. Please configure AWS CLI or ensure IAM role is attached."
    exit 1
fi

CALLER_IDENTITY=$(aws sts get-caller-identity $PROFILE_ARG --output json)
CURRENT_ACCOUNT=$(echo $CALLER_IDENTITY | jq -r '.Account')
print_color $GREEN "✓ AWS credentials verified for account: $CURRENT_ACCOUNT"

# Navigate to project root
PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$PROJECT_ROOT"

print_color $YELLOW "Project root: $PROJECT_ROOT"

# Step 2: Build backend
step_start "Building backend..."
cd backend

if mvn clean package -DskipTests=true -q; then
    step_done "Backend JAR built"
else
    step_fail "Backend build failed"
    exit 1
fi

cd "$PROJECT_ROOT"

# Step 3: Deploy backend infrastructure
step_start "Deploying backend infrastructure..."
cd cdk

if mvn compile -q; then
    step_done "CDK dependencies installed"
else
    step_fail "CDK dependencies installation failed"
    exit 1
fi

if cdk bootstrap aws://$ACCOUNT/$REGION $PROFILE_ARG 2>/dev/null; then
    step_done "CDK bootstrapped"
else
    print_color $YELLOW "    ⚠ CDK bootstrap may have failed, continuing..."
fi

# Stack names with env + region suffix for multi-instance support
STACK_SUFFIX="-$ENVIRONMENT-$REGION"
S3_EVENT_STACK="S3EventLambdaStack$STACK_SUFFIX"
SQS_STACK="SQSLambdaStack$STACK_SUFFIX"
AS2_RECEIVER_STACK="AS2ReceiverLambdaStack$STACK_SUFFIX"
MANAGE_STACK="ManageLambdaStack$STACK_SUFFIX"
FRONTEND_STACK="FrontendDeploymentStack$STACK_SUFFIX"

# Resource names are defined in ResourceNames.java
print_color $BLUE "Resource names (defined in ResourceNames.java):"
print_color $WHITE "  S3 Buckets: as2-{send|receive|frontend}-bucket-$ENVIRONMENT-$REGION-$ACCOUNT"
print_color $WHITE "  SQS Queue: as2-sqs-queue-$ENVIRONMENT-$REGION"
print_color $WHITE "  DynamoDB Tables: as2-table-{name}-$ENVIRONMENT-$REGION"
print_color $WHITE "  Lambda Functions: as2-lambda-{name}-$ENVIRONMENT-$REGION"
echo ""

# Deploy S3EventLambdaStack and SQSLambdaStack first
if cdk deploy "$S3_EVENT_STACK" "$SQS_STACK" --require-approval never $PROFILE_ARG --context account=$ACCOUNT --context region=$REGION --context env=$ENVIRONMENT; then
    step_done "S3 and SQS stacks deployed"
else
    step_fail "Backend infrastructure deployment failed"
    exit 1
fi

# Deploy AS2ReceiverLambdaStack
if cdk deploy "$AS2_RECEIVER_STACK" --require-approval never $PROFILE_ARG --context account=$ACCOUNT --context region=$REGION --context env=$ENVIRONMENT; then
    step_done "AS2 Receiver stack deployed"
else
    step_fail "AS2ReceiverLambdaStack deployment failed"
    exit 1
fi

# Deploy ManageLambdaStack
if cdk deploy "$MANAGE_STACK" --require-approval never $PROFILE_ARG --context account=$ACCOUNT --context region=$REGION --context env=$ENVIRONMENT; then
    step_done "Management API stack deployed"
else
    step_fail "ManageLambdaStack deployment failed"
    exit 1
fi

cd "$PROJECT_ROOT"

# Step 4: Deploy frontend
step_start "Deploying frontend..."
cd cdk

# Deploy FrontendDeploymentStack - it will automatically fetch backend outputs and configure frontend
if cdk deploy "$FRONTEND_STACK" --require-approval never $PROFILE_ARG --context account=$ACCOUNT --context region=$REGION --context env=$ENVIRONMENT; then
    step_done "Frontend and CloudFront deployed"
else
    step_fail "Frontend deployment failed"
    exit 1
fi

cd "$PROJECT_ROOT"

# Display deployment information
echo ""
print_color $GREEN "════════════════════════════════════════════════════════════"
print_color $GREEN "              DEPLOYMENT COMPLETED SUCCESSFULLY"
print_color $GREEN "════════════════════════════════════════════════════════════"

echo ""

if command_exists jq; then
    # Get stack outputs
    MANAGE_OUTPUTS=$(aws cloudformation describe-stacks --stack-name "$MANAGE_STACK" --region $REGION $PROFILE_ARG --query "Stacks[0].Outputs" --output json 2>/dev/null || echo "[]")
    FRONTEND_OUTPUTS=$(aws cloudformation describe-stacks --stack-name "$FRONTEND_STACK" --region $REGION $PROFILE_ARG --query "Stacks[0].Outputs" --output json 2>/dev/null || echo "[]")
    
    print_color $CYAN "\n📋 Deployment Information:"
    print_color $CYAN "═══════════════════════════"
    
    # Parse backend outputs
    API_URL=$(echo $MANAGE_OUTPUTS | jq -r '.[] | select(.OutputKey=="ManageAPIOutput") | .OutputValue' 2>/dev/null || echo "")
    USER_POOL_ID=$(echo $MANAGE_OUTPUTS | jq -r '.[] | select(.OutputKey=="CognitoUserPoolIdOutput") | .OutputValue' 2>/dev/null || echo "")
    CLIENT_ID=$(echo $MANAGE_OUTPUTS | jq -r '.[] | select(.OutputKey=="CognitoUserPoolClientIdOutput") | .OutputValue' 2>/dev/null || echo "")
    
    # Parse frontend outputs
    WEBSITE_URL=$(echo $FRONTEND_OUTPUTS | jq -r '.[] | select(.OutputKey=="WebsiteURL") | .OutputValue' 2>/dev/null || echo "")
    CLOUDFRONT_URL=$(echo $FRONTEND_OUTPUTS | jq -r '.[] | select(.OutputKey=="CloudFrontURL") | .OutputValue' 2>/dev/null || echo "")
    
    # Parse AS2 Receiver outputs
    AS2_RECEIVER_OUTPUTS=$(aws cloudformation describe-stacks --stack-name "$AS2_RECEIVER_STACK" --region $REGION $PROFILE_ARG --query "Stacks[0].Outputs" --output json 2>/dev/null || echo "[]")
    AS2_RECEIVER_URL=$(echo $AS2_RECEIVER_OUTPUTS | jq -r '.[] | select(.OutputKey=="AS2ReceiverApiUrl") | .OutputValue' 2>/dev/null || echo "")

    [[ -n "$API_URL" ]] && print_color $WHITE "🔗 Backend API URL: $API_URL"
    [[ -n "$USER_POOL_ID" ]] && print_color $WHITE "🔐 Cognito User Pool ID: $USER_POOL_ID"
    [[ -n "$CLIENT_ID" ]] && print_color $WHITE "🔑 Cognito Client ID: $CLIENT_ID"
    [[ -n "$WEBSITE_URL" ]] && print_color $WHITE "🌐 Frontend Website URL: $WEBSITE_URL"
    [[ -n "$CLOUDFRONT_URL" ]] && print_color $WHITE "⚡ CloudFront Distribution URL: $CLOUDFRONT_URL"
    [[ -n "$AS2_RECEIVER_URL" ]] && print_color $WHITE "📨 AS2 Receiver API URL: $AS2_RECEIVER_URL"
    
    print_color $GREEN "\n✅ Deployment completed successfully!"
    print_color $GREEN "Your AS2 application is now ready to use."
else
    print_color $YELLOW "⚠ jq not found, cannot parse deployment outputs"
    print_color $GREEN "✅ Deployment completed!"
fi

print_color $CYAN "\n📝 Next Steps:"
print_color $WHITE "1. Access your application at: $CLOUDFRONT_URL"
print_color $WHITE "2. Create a user account by clicking 'Sign Up' on the login page"
print_color $WHITE "3. Configure your AS2 partners and certificates"