airbridge-react-native-sdk-restricted 2.8.9 → 4.1.2

package/.github/workflows/build.yml

@@ -1,39 +1,28 @@
 name: build
 
 on:
+  pull_request:
+    types: [labeled]
+
+  workflow_dispatch:
+
   workflow_call:
     inputs:
-      reference:
-        description: Reference to build
-        type: string
-        required: true
-    secrets:
-      AWS_ROLE_TO_ASSUME:
-        required: true
-      APP_STORE_CONNECT_ISSUER_ID:
-        required: true
-      APP_STORE_CONNECT_KEY_ID:
-        required: true
-      APP_STORE_CONNECT_PRIVATE_KEY:
-        required: true
-      CERTIFICATE_DEVELOPMENT_PRIVATE_KEY:
-        required: true
-      CERTIFICATE_DEVELOPMENT_PRIVATE_KEY_PASSWORD:
-        required: true
-      CERTIFICATE_DISTRIBUTION_PRIVATE_KEY:
-        required: true
-      CERTIFICATE_DISTRIBUTION_PRIVATE_KEY_PASSWORD:
-        required: true
+      workflow-call:
+        description: Check event is workflow call (Do not use it)
+        type: boolean
+        default: true
+        required: false
     outputs:
-      expire:
-        description: Expire of build
-        value: ${{ jobs.build-ios.outputs.expire }}
       version:
         description: Version of build
         value: ${{ jobs.prepare.outputs.version }}
       commit:
         description: Commit hash of build
         value: ${{ jobs.prepare.outputs.commit }}
+      build-number:
+        description: Build number
+        value: ${{ jobs.prepare.outputs.build-number }}
       qa-ios-application-install-url:
         description: QA iOS Application install URL of build
         value: ${{ jobs.build-ios.outputs.install-url }}
@@ -43,29 +32,35 @@ on:
       qa-android-application-download-url:
         description: QA Android Application download URL of build
         value: ${{ jobs.build-android.outputs.download-url }}
-  issue_comment:
-    types:
-      - created
-  pull_request:
-    types: labeled
-  workflow_dispatch:
 
 env:
-  REPOSITORY: ab180/airbridge-react-native-sdk
   TRIGGER: ${{
-      (inputs.reference != null) && 'workflow_call'
-      || (github.event_name == 'issue_comment') && 'issue_comment'
+      (inputs.workflow-call != null) && 'workflow_call'
       || (github.event_name == 'pull_request') && 'pull_request'
       || (github.event_name == 'workflow_dispatch') && 'workflow_dispatch'
     }}
-  REFERENCE: ${{
-      (inputs.reference != null) && inputs.reference
-      || (github.event_name == 'issue_comment') && format('refs/pull/{0}/merge', github.event.issue.number)
-      || (github.event_name == 'pull_request') && format('refs/pull/{0}/merge', github.event.pull_request.number)
-      || (github.event_name == 'workflow_dispatch') && github.event.ref
+  BRANCH: ${{ github.event.pull_request.head.label || github.ref_name }}
+  TYPE: ${{
+      github.event_name == 'pull_request'
+        && startsWith(github.event.pull_request.head.label, 'release/')
+        && 'Release'
+        || 'Feature'
     }}
-  AWS_REGION: ap-northeast-1
-  AWS_ROLE_TO_ASSUME: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+  TAG: ${{
+      format(
+        '@{0} {1}',
+        github.event.pull_request.user.login || github.actor,
+        github.event_name == 'pull_request' && join(github.event.pull_request.requested_reviewers.*.login, '') != ''
+          && format('@{0}', join(github.event.pull_request.requested_reviewers.*.login, ' @'))
+          || ''
+      )
+    }}
+
+  AWS_REGION: ${{ vars.AWS_REGION }}
+  AWS_BUCKET: ${{ vars.INTERNAL_BUCKET }}
+  AWS_DOMAIN: ${{ vars.INTERNAL_BUCKET_DOMAIN }}
+  DISTRIBUTION_ID: ${{ vars.INTERNAL_DISTRIBUTION }}
+
   APP_STORE_CONNECT_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
   APP_STORE_CONNECT_KEY_ID: ${{ secrets.APP_STORE_CONNECT_KEY_ID }}
   APP_STORE_CONNECT_PRIVATE_KEY: ${{ secrets.APP_STORE_CONNECT_PRIVATE_KEY }}
@@ -84,54 +79,60 @@ jobs:
   prepare:
     runs-on: ${{ vars.LINUX_INSTANCE }}
     if: |
-      (
-        (inputs.reference != null)
-        || (
-          (github.event_name == 'issue_comment' && github.event.issue.pull_request != null)
-          && startsWith(github.event.comment.body, '!build')
-        )
-        || (
-          (github.event_name == 'pull_request')
-          && github.event.label.name == '!Build'
-        )
-        || (github.event_name == 'workflow_dispatch')
+      inputs.workflow-call != null
+      || (
+        github.event_name == 'pull_request'
+        && github.event.label.name == '!Build'
       )
+      || (github.event_name == 'workflow_dispatch')
 
     outputs:
-      check-id: ${{ steps.report-start-github-check.outputs.check-id }}
-      comment-id: ${{ steps.report-start-github-comment.outputs.comment-id }}
-      uuid: ${{ steps.prepare-environment.outputs.uuid }}
       version: ${{ steps.prepare-environment.outputs.version }}
       commit: ${{ steps.prepare-environment.outputs.commit }}
+      branch: ${{ steps.prepare-environment.outputs.branch }}
+      
+      build-number: ${{ steps.prepare-build-number.outputs.build-number }}
+
+      build-version: ${{ steps.prepare-build.outputs.build-version }}
+      identifier: ${{ steps.prepare-build.outputs.identifier }}
+      path: ${{ steps.prepare-build.outputs.path }}
+
+      comment-id: ${{ steps.report-start-github-comment.outputs.comment-id }}
+      
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-        with:
-          repository: ${{ env.REPOSITORY }}
-          ref: ${{ env.REFERENCE }}
 
-      - name: Report start to GitHub check
-        id: report-start-github-check
-        if: env.TRIGGER == 'issue_comment'
-        uses: ./.github/actions/add-github-check
+      - name: Prepare environment
+        id: prepare-environment
+        run: |
+          echo "version=$(grep -E '"version": *"[^"]+"' package.json | awk -F '"' '{print $4}')" >> $GITHUB_OUTPUT
+          echo "commit=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
+          echo "branch=$(git branch --show-current)" >> $GITHUB_OUTPUT
+
+      - name: Prepare build number
+        id: prepare-build-number
+        uses: ab180/airbridge-sdk-tool/action/prepare-github-build-number@v1
         with:
-          status: in_progress
+          github-app-id: ${{ secrets.SDK_TEAM_APP_ID }}
+          github-app-private-key: ${{ secrets.SDK_TEAM_APP_PRIVATE_KEY }}
+          github-app-owner: ab180
 
+      - name: prepare build
+        id: prepare-build
+        run: |
+          echo "build-version=${{ steps.prepare-build-number.outputs.build-number }},Android,${{ steps.prepare-environment.outputs.version }},${{ steps.prepare-environment.outputs.branch }}" >> $GITHUB_OUTPUT
+          IDENTIFIER='${{ steps.prepare-environment.outputs.version }}-build-${{ steps.prepare-build-number.outputs.build-number }}'
+          echo "identifier=$IDENTIFIER" >> $GITHUB_OUTPUT
+          echo "path=build/${{ github.event.repository.name }}/$IDENTIFIER" >> $GITHUB_OUTPUT
+      
       - name: Report start to GitHub comment
         id: report-start-github-comment
-        if: env.TRIGGER == 'issue_comment' || env.TRIGGER == 'pull_request'
-        uses: ./.github/actions/add-github-comment
+        if: env.TRIGGER == 'pull_request'
+        uses: ab180/airbridge-sdk-tool/action/add-github-comment@v1
         with:
           comment: 'Build is started.'
 
-      - name: Prepare environment
-        id: prepare-environment
-        run: |
-          git fetch --tags --quiet
-          echo "uuid=$(uuidgen)" >> $GITHUB_OUTPUT
-          echo "version=1.0" >> $GITHUB_OUTPUT
-          echo "commit=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
-
   build-ios:
     runs-on: ${{ vars.MACOS_INSTANCE }}
     needs: ['prepare']
@@ -143,9 +144,6 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-        with:
-          repository: ${{ env.REPOSITORY }}
-          ref: ${{ env.REFERENCE }}
 
       - name: Prepare certificate
         uses: ab180/apple-action/prepare-certificate@v3
@@ -170,7 +168,7 @@ jobs:
       - name: Prepare aws
         uses: aws-actions/configure-aws-credentials@v4
         with:
-          role-to-assume: ${{ env.AWS_ROLE_TO_ASSUME }}
+          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           aws-region: ${{ env.AWS_REGION }}
 
       - name: Prepare Node
@@ -191,39 +189,39 @@ jobs:
             ${{ runner.os }}-pods-
 
       - name: Build QA
-        run: ./scripts/build-qa.sh
+        run: |
+          ./script/BuildQA.sh
         env:
           BUILD_QA: ios
+          BUILD_NUMBER: ${{ needs.prepare.outputs.build-number }}
 
       - name: Deploy QA iOS Application
         id: deploy-qa-ios-application
         uses: ab180/apple-action/deploy-ios-application-to-aws@v3
         with:
-          application: build/ios-application.ipa
+          application: build/qa/ios-application.ipa
           application-version: ${{ needs.prepare.outputs.version }}
           application-identifier: co.ab180.airbridge.qa.application
-          bucket: ${{ vars.INTERNAL_BUCKET }}
-          distribution: ${{ vars.INTERNAL_DISTRIBUTION }}
-          domain: sdk-internal.airbridge.io
-          directory: build/${{ needs.prepare.outputs.uuid }}
+          bucket: ${{ env.AWS_BUCKET }}
+          distribution: ${{ env.DISTRIBUTION_ID }}
+          domain: ${{ env.AWS_DOMAIN }}
+          directory: ${{ needs.prepare.outputs.path }}
 
   build-android:
     runs-on: ${{ vars.LINUX_INSTANCE }}
     needs: ['prepare']
     
     outputs:
-      download-url: ${{ steps.deploy-qa-android-application.outputs.download-url }}
+      expire: ${{ steps.prepare-environment.outputs.expire }}
+      download-url: ${{ steps.result.outputs.download-url }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-        with:
-          repository: ${{ env.REPOSITORY }}
-          ref: ${{ env.REFERENCE }}
 
       - name: Prepare aws
         uses: aws-actions/configure-aws-credentials@v4
         with:
-          role-to-assume: ${{ env.AWS_ROLE_TO_ASSUME }}
+          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           aws-region: ${{ env.AWS_REGION }}
 
       - name: Prepare Node
@@ -241,127 +239,219 @@ jobs:
           cache: 'gradle'
 
       - name: Build QA
-        run: ./scripts/build-qa.sh
+        run: |
+          ./script/BuildQA.sh
         env:
           BUILD_QA: android
+          BUILD_NUMBER: ${{ needs.prepare.outputs.build-number }}
           KEYSTORE: ${{ secrets.KEYSTORE }}
           KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
           KEYSTORE_ALIAS: ${{ secrets.KEYSTORE_ALIAS }}
           KEYSTORE_ALIAS_PASSWORD: ${{ secrets.KEYSTORE_ALIAS_PASSWORD }}
 
+      - name: prepare environment
+        id: prepare-environment
+        run: |
+          echo "expire=$(date -d '+90 days' '+%Y-%m-%d')" >> $GITHUB_OUTPUT
+        shell: bash
+
       - name: Deploy QA Android Application
         id: deploy-qa-android-application
         run: |
           aws s3 cp \
-            'build/android-application.apk' \
-            's3://${{ vars.INTERNAL_BUCKET }}/build/${{ needs.prepare.outputs.uuid }}/android-application.apk'
+            --expires '${{ steps.prepare-environment.outputs.expire }}' \
+            'build/qa/android-application.apk' \
+            's3://${{ env.AWS_BUCKET }}/${{ needs.prepare.outputs.path }}/android-application.apk'
           aws cloudfront create-invalidation \
-            --distribution-id '${{ vars.INTERNAL_DISTRIBUTION }}' \
-            --paths '/build/${{ needs.prepare.outputs.uuid }}/android-application.apk'
-          echo "download-url=https://sdk-internal.airbridge.io/build/${{ needs.prepare.outputs.uuid }}/android-application.apk" >> $GITHUB_OUTPUT
+            --distribution-id ${{ env.DISTRIBUTION_ID }} \
+            --paths "/${{ needs.prepare.outputs.path }}/android-application.apk"
+
+      - name: result
+        id: result
+        run: |
+          echo "download-url=https://${{ env.AWS_DOMAIN }}/${{ needs.prepare.outputs.path }}/android-application.apk" >> $GITHUB_OUTPUT
           
-  finish-success:
+  report-success:
     runs-on: ${{ vars.LINUX_INSTANCE }}
-    needs: ['prepare', 'build-ios', 'build-android']
+    needs: 
+      - prepare
+      - build-ios
+      - build-android
+    if: ${{ always() && needs.prepare.result != 'skipped' && !contains(needs.*.result, 'failure') }}
 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-        with:
-          repository: ${{ env.REPOSITORY }}
-          ref: ${{ env.REFERENCE }}
-      
-      - name: Report complete to GitHub check
-        if: env.TRIGGER == 'issue_comment'
-        uses: ./.github/actions/edit-github-check
-        with:
-          check-id: ${{ needs.prepare.outputs.check-id }}
-          status: completed
-          conclusion: success
 
-      - name: Report complete to GitHub comment
-        if: env.TRIGGER == 'issue_comment' || env.TRIGGER == 'pull_request'
-        uses: ./.github/actions/edit-github-comment
-        with:
-          comment-id: ${{ needs.prepare.outputs.comment-id }}
-          comment: "${{
+      - name: Generate github message
+        id: generate-github-message
+        run: |
+          echo 'message<<EOF' >> $GITHUB_OUTPUT
+          echo "$MESSAGE" >> $GITHUB_OUTPUT
+          echo 'EOF' >> $GITHUB_OUTPUT
+        env:
+          MESSAGE: "${{
               format(
-                '{0}\\n{1}\\n{2}\\n\\n{3}',
-                'Build is finished.',
+                '{0}\\n{1}{2}{3}{4}{5}{6}\\n{7}{8}\\n{9}{10}',
                 format(
-                  '- iOS Application: [Download]({0}), [Install]({1})',
-                  needs.build-ios.outputs.download-url,
-                  needs.build-ios.outputs.install-url
+                  '*Airbridge React Native SDK Build {0}*\\n',
+                  needs.prepare.outputs.build-number
                 ),
+                env.TRIGGER == 'pull_request' && format(
+                    '*Pull Request*: [{1}]({0})\\n',
+                    github.event.pull_request.html_url,
+                    github.event.pull_request.title
+                ) || '',
                 format(
-                  '- Android Application: [Download]({0})',
-                  needs.build-android.outputs.download-url
+                  '*Type*: {0}\\n',
+                  env.TYPE
                 ),
                 format(
-                  'Expire: {0}',
-                  needs.build-ios.outputs.expire
-                )
-              ) 
-            }}"
-
-      - name: Report complete to Slack
-        if: env.TRIGGER != 'workflow_call'
-        uses: ./.github/actions/add-slack-message
-        with:
-          message: "${{
-              format(
-                '{0}\\n\\n{1}{2}\\n{3}\\n\\n{4}',
+                  '*Identifier*: {0}\\n',
+                  needs.prepare.outputs.identifier
+                ),
                 format(
-                  'Airbridge React Native SDK Build - {0}',
-                  env.REFERENCE
+                  '*Version*: {0}\\n',
+                  needs.prepare.outputs.build-version
                 ),
-                (github.event.issue != null || github.event.pull_request.html_url)
-                  && format(
-                    '- Pull Request: <{0}|{1}>\\n',
-                    github.event.issue.url || github.event.pull_request.html_url,
-                    github.event.issue.title || github.event.pull_request.title
-                  )
-                  || '',
                 format(
-                  '- iOS Application: <{0}|Download>, <{1}|Install>',
+                  '*Commit*: {0}\\n',
+                  needs.prepare.outputs.commit
+                ),
+                format(
+                  '*Tag*: {0}\\n',
+                  env.TAG
+                ),
+                format(
+                  '*iOS Application*: [Download]({0}), [Install]({1})\\n',
                   needs.build-ios.outputs.download-url,
                   needs.build-ios.outputs.install-url
                 ),
                 format(
-                  '- Android Application: <{0}|Download>',
+                  '*iOS Expire*: {0}\\n',
+                  needs.build-ios.outputs.expire
+                ),
+                format(
+                  '*Android Application*: [Download]({0})\\n',
                   needs.build-android.outputs.download-url
                 ),
                 format(
-                  'Expire: {0}',
-                  needs.build-ios.outputs.expire
+                  '*Android Expire*: {0}\\n',
+                  needs.build-android.outputs.expire
                 )
               )
             }}"
+    
+      - name: Generate slack message
+        id: generate-slack-message
+        uses: ab180/airbridge-sdk-tool/action/replace-markdown@v1
+        with:
+          message: ${{ steps.generate-github-message.outputs.message }}
+          source: github
+          destination: slack
+    
+      - name: Report complete to GitHub comment
+        if: ${{ env.TRIGGER == 'pull_request' }}
+        uses: ab180/airbridge-sdk-tool/action/edit-github-comment@v1
+        with:
+          comment-id: ${{ needs.prepare.outputs.comment-id }}
+          comment: ${{ steps.generate-github-message.outputs.message }}
+  
+      - name: Report complete to Slack
+        uses: ab180/airbridge-sdk-tool/action/add-slack-message@v1
+        with:
+          message: ${{ steps.generate-slack-message.outputs.message }}
           incoming-webhook-url: ${{ secrets.SLACK_SDK_BUILD_INCOMING_WEBHOOK_URL }}
 
-  finish-failure:
-    runs-on: ${{ vars.LINUX_INSTANCE }}
-    needs: ['prepare', 'build-ios', 'build-android']
-    if: failure()
+  report-failure:
+    runs-on: ubuntu-latest
+    needs: 
+      - prepare
+      - build-ios
+      - build-android
+    if: ${{ always() && needs.prepare.result != 'skipped' && contains(needs.*.result, 'failure') }}
 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+
+      - name: Generate github message
+        id: generate-github-message
+        run: |
+          echo 'message<<EOF' >> $GITHUB_OUTPUT
+          echo "$MESSAGE" >> $GITHUB_OUTPUT
+          echo 'EOF' >> $GITHUB_OUTPUT
+        env:
+          MESSAGE: "${{
+              format(
+                '{0}\\n{1}{2}{3}{4}{5}{6}',
+                format(
+                  '*Airbridge React Native SDK Build fail {0}*\\n',
+                  needs.prepare.outputs.build-number
+                ),
+                env.TRIGGER == 'pull_request' && format(
+                    '*Pull Request*: [{1}]({0})\\n',
+                    github.event.pull_request.html_url,
+                    github.event.pull_request.title
+                ) || '',
+                format(
+                  '*Type*: {0}\\n',
+                  env.TYPE
+                ),
+                format(
+                  '*Identifier*: {0}\\n',
+                  needs.prepare.outputs.identifier
+                ),
+                format(
+                  '*Version*: {0}\\n',
+                  needs.prepare.outputs.build-version
+                ),
+                format(
+                  '*Commit*: {0}\\n',
+                  needs.prepare.outputs.commit
+                ),
+                format(
+                  '*Tag*: {0}\\n',
+                  env.TAG
+                )
+              )
+            }}"
+
+      - name: Generate slack message
+        id: generate-slack-message
+        uses: ab180/airbridge-sdk-tool/action/replace-markdown@v1
         with:
-          repository: ${{ env.REPOSITORY }}
-          ref: ${{ env.REFERENCE }}
+          message: ${{ steps.generate-github-message.outputs.message }}
+          source: github
+          destination: slack
 
-      - name: Report fail to GitHub check
-        if: (env.TRIGGER == 'issue_comment')
-        uses: ./.github/actions/edit-github-check
+      - name: Report to Slack
+        uses: ab180/airbridge-sdk-tool/action/add-slack-message@v1
         with:
-          check-id: ${{ needs.prepare.outputs.check-id }}
-          status: completed
-          conclusion: failure
+          message: ${{ steps.generate-slack-message.outputs.message }}
+          incoming-webhook-url: ${{ secrets.SLACK_SDK_BUILD_INCOMING_WEBHOOK_URL }}
 
       - name: Report fail to GitHub comment
-        if: (env.TRIGGER == 'issue_comment' || env.TRIGGER == 'pull_request')
-        uses: ./.github/actions/edit-github-comment
+        if: ${{ env.TRIGGER == 'pull_request' }}
+        uses: ab180/airbridge-sdk-tool/action/edit-github-comment@v1
         with:
           comment-id: ${{ needs.prepare.outputs.comment-id }}
           comment: 'Build is failed.'
+
+  finish:
+    runs-on: ubuntu-latest
+    needs:
+      - prepare
+      - report-success
+      - report-failure
+    if: ${{ always() && needs.prepare.result != 'skipped' }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Remove GitHub label
+        if: ${{ env.TRIGGER == 'pull_request' }}
+        uses: ab180/airbridge-sdk-tool/action/remove-github-label@v1
+        with:
+          label: '!Build'

package/.github/workflows/documentation.yml

@@ -0,0 +1,79 @@
+name: documentation
+
+on:
+  workflow_run:
+    workflows: [ "release" ]
+    types:
+      - completed
+    
+  workflow_dispatch:
+    inputs:
+      latest:
+        description: 'upload latest version'
+        type: boolean
+        required: true
+        default: true
+
+env:
+  AWS_REGION: ap-northeast-1
+  AWS_ROLE_TO_ASSUME: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+  AWS_BUCKET: ${{ vars.REFERENCE_BUCKET }}
+  DISTRIBUTION_ID: ${{ vars.REFERENCE_DISTRIBUTION_ID }}
+  AWS_BUCKET_PATH: airbridge-react-native-sdk
+  IS_LATEST: "${{ github.event.workflow_run.conclusion == 'success' || github.event.inputs.latest }}"
+
+jobs:
+  documentation:
+    if: |
+      ${{ github.event.workflow_run.conclusion == 'success' }} ||
+      ${{ github.event.inputs.latest != null }}
+    
+    runs-on: ubuntu-latest
+
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: clone repository
+        uses: actions/checkout@v3
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: documentation
+        run: |
+          sh script/BuildDocument.sh
+      
+      - name: prepare environment
+        id: prepare-environment
+        run: |
+          VERSION_NAME=$(cat package.json | grep version | head -1 | awk -F: '{print $2}' | sed 's/[", ]//g')
+          echo "version=$VERSION_NAME" >> $GITHUB_OUTPUT
+        shell: bash
+        
+      - name: Configure aws credential for publish
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: ${{ env.AWS_ROLE_TO_ASSUME }}
+          aws-region: ${{ env.AWS_REGION }}
+      
+      - name: publish
+        run: |
+          aws s3 cp \
+          build/document/ \
+          s3://${{ env.AWS_BUCKET }}/${{ env.AWS_BUCKET_PATH }}/${{ steps.prepare-environment.outputs.version }}/ \
+          --recursive
+          aws cloudfront create-invalidation \
+          --distribution-id ${{ env.DISTRIBUTION_ID }} \
+          --paths "/${{ env.AWS_BUCKET_PATH }}/${{ steps.prepare-environment.outputs.version }}/*"
+
+      - name: publish to latest
+        if: ${{ env.IS_LATEST == 'true' }}
+        run: |
+          aws s3 sync --delete \
+          build/document \
+          s3://${{ env.AWS_BUCKET }}/${{ env.AWS_BUCKET_PATH }}/latest
+          aws cloudfront create-invalidation \
+          --distribution-id ${{ env.DISTRIBUTION_ID }} \
+          --paths "/${{ env.AWS_BUCKET_PATH }}/latest/*"