/hugo-update

./scripts/hugo-update.sh status      # Show current vs target versions
./scripts/hugo-update.sh preview     # Update preview env var and trigger a build
./scripts/hugo-update.sh production  # Update production env var

./scripts/hugo-update.sh status

hugo version

hugo serve --minify --enableGitInfo --baseURL http://localhost:1313

./scripts/hugo-update.sh preview

CF_TOKEN=$(cloudflared access token --app="<preview-url>" 2>/dev/null)
curl -sSf -o /dev/null -w '%{http_code}' -b "CF_Authorization=$CF_TOKEN" "<preview-url>/"

./scripts/hugo-update.sh production

#!/usr/bin/env bash
set -euo pipefail

HUGO_VERSION_FILE=".hugo-version"

die() {
  echo "ERROR: $*" >&2
  exit 1
}

usage() {
  echo "Usage: $(basename "$0") <status|preview|production>" >&2
  echo "" >&2
  echo "  status      Show current vs target HUGO_VERSION in Cloudflare Pages" >&2
  echo "  preview     Update preview env var and trigger a preview deployment" >&2
  echo "  production  Update production env var (takes effect on next main deployment)" >&2
  exit 1
}

read_target_version() {
  [[ -f "$HUGO_VERSION_FILE" ]] || die ".hugo-version not found"
  local version
  version=$(tr -d '[:space:]' < "$HUGO_VERSION_FILE")
  [[ -n "$version" ]] || die ".hugo-version is empty"
  echo "$version"
}

fetch_token() {
  local token
  token=$(op read 'op://claude/Cloudflare Workers/cloudflare_api_token' 2>/dev/null) || \
    die "Failed to read token from 1Password. Is 'op' installed and authenticated?"
  [[ -n "$token" ]] || die "Token from 1Password is empty"
  echo "$token"
}

discover_account() {
  local token="$1"
  local response count
  response=$(curl -sf https://api.cloudflare.com/client/v4/accounts \
    -H "Authorization: Bearer $token") || die "Failed to reach Cloudflare API"
  count=$(echo "$response" | jq '.result | length')
  [[ "$count" -eq 1 ]] || die "Expected 1 Cloudflare account, found $count"
  echo "$response" | jq -r '.result[0].id'
}

discover_project() {
  local token="$1"
  local account_id="$2"
  local response matches count
  response=$(curl -sf "https://api.cloudflare.com/client/v4/accounts/$account_id/pages/projects" \
    -H "Authorization: Bearer $token") || die "Failed to list Pages projects"
  matches=$(echo "$response" | jq '[.result[] | select(.deployment_configs.production.env_vars.HUGO_VERSION != null)]')
  count=$(echo "$matches" | jq 'length')
  [[ "$count" -eq 1 ]] || die "Expected 1 Pages project with HUGO_VERSION configured, found $count"
  echo "$matches" | jq -r '.[0].name'
}

get_versions() {
  local token="$1"
  local account_id="$2"
  local project="$3"
  local response
  response=$(curl -sf "https://api.cloudflare.com/client/v4/accounts/$account_id/pages/projects/$project" \
    -H "Authorization: Bearer $token") || die "Failed to fetch project details"
  echo "$response" | jq -r '{
      preview:    (.result.deployment_configs.preview.env_vars.HUGO_VERSION.value    // "unset"),
      production: (.result.deployment_configs.production.env_vars.HUGO_VERSION.value // "unset")
    }'
}

patch_env_var() {
  local token="$1"
  local account_id="$2"
  local project="$3"
  local env="$4"
  local version="$5"
  local result success
  result=$(curl -sf -X PATCH \
    "https://api.cloudflare.com/client/v4/accounts/$account_id/pages/projects/$project" \
    -H "Authorization: Bearer $token" \
    -H "Content-Type: application/json" \
    --data "$(jq -n \
      --arg env "$env" \
      --arg ver "$version" \
      '{deployment_configs: {($env): {env_vars: {HUGO_VERSION: {value: $ver, type: "plain_text"}}}}}'
    )") || die "PATCH request failed for $env environment"
  success=$(echo "$result" | jq -r '.success')
  [[ "$success" == "true" ]] || die "Update failed: $(echo "$result" | jq -c '.errors')"
}

trigger_deployment() {
  local token="$1"
  local account_id="$2"
  local project="$3"
  local branch="$4"
  local version="$5"
  local response
  response=$(curl -sf -X POST \
    "https://api.cloudflare.com/client/v4/accounts/$account_id/pages/projects/$project/deployments" \
    -H "Authorization: Bearer $token" \
    -H "Content-Type: application/json" \
    --data "$(jq -n --arg branch "$branch" --arg ver "$version" \
      '{branch: $branch, env_vars: {HUGO_VERSION: {value: $ver, type: "plain_text"}}}')") || \
    die "Failed to trigger deployment"
  echo "$response"
}

cmd_status() {
  local target token account_id project versions preview_ver production_ver
  target=$(read_target_version)
  token=$(fetch_token)
  account_id=$(discover_account "$token")
  project=$(discover_project "$token" "$account_id")
  versions=$(get_versions "$token" "$account_id" "$project")
  preview_ver=$(echo "$versions" | jq -r '.preview')
  production_ver=$(echo "$versions" | jq -r '.production')

  printf "%-12s %-10s %s\n" "Environment" "Current"       "Target"
  printf "%-12s %-10s %s\n" "-----------" "-------"       "------"
  printf "%-12s %-10s %s\n" "preview"     "$preview_ver"    "$target"
  printf "%-12s %-10s %s\n" "production"  "$production_ver" "$target"

  if [[ "$preview_ver" == "$target" && "$production_ver" == "$target" ]]; then
    echo ""
    echo "Already up to date."
    exit 2
  fi
}

cmd_preview() {
  local target token account_id project versions preview_ver branch response deploy_url deploy_id deploy_hugo dashboard_url
  target=$(read_target_version)
  token=$(fetch_token)
  account_id=$(discover_account "$token")
  project=$(discover_project "$token" "$account_id")
  versions=$(get_versions "$token" "$account_id" "$project")
  preview_ver=$(echo "$versions" | jq -r '.preview')

  if [[ "$preview_ver" == "$target" ]]; then
    echo "Preview already at Hugo $target."
    exit 2
  fi

  patch_env_var "$token" "$account_id" "$project" "preview" "$target"

  branch=$(git branch --show-current)
  response=$(trigger_deployment "$token" "$account_id" "$project" "$branch" "$target")

  deploy_url=$(echo "$response" | jq -r '.result.url')
  deploy_id=$(echo "$response" | jq -r '.result.id')
  deploy_hugo=$(echo "$response" | jq -r '.result.env_vars.HUGO_VERSION.value // "unset"')
  dashboard_url="https://dash.cloudflare.com/$account_id/pages/view/$project/$deploy_id"

  echo "Updated preview: $preview_ver → $target"
  echo "Dashboard:  $dashboard_url"
  echo "Preview:    $deploy_url"

  if [[ "$deploy_hugo" != "$target" ]]; then
    echo "WARNING: Deployment env var is '$deploy_hugo', expected '$target'" >&2
    exit 1
  fi
  echo "Verified:   deployment will use Hugo $deploy_hugo"
}

cmd_production() {
  local target token account_id project versions production_ver
  target=$(read_target_version)
  token=$(fetch_token)
  account_id=$(discover_account "$token")
  project=$(discover_project "$token" "$account_id")
  versions=$(get_versions "$token" "$account_id" "$project")
  production_ver=$(echo "$versions" | jq -r '.production')

  if [[ "$production_ver" == "$target" ]]; then
    echo "Production already at Hugo $target."
    exit 2
  fi

  patch_env_var "$token" "$account_id" "$project" "production" "$target"
  echo "Updated production: $production_ver → $target"
  echo "Hugo $target takes effect on the next production deployment (merge to main)."
}

case "${1:-}" in
  status)     cmd_status ;;
  preview)    cmd_preview ;;
  production) cmd_production ;;
  *)          usage ;;
esac