Clone an environment and publish

#!/usr/bin/env bash
# Recipe: clone-and-publish
#
# Ships a change the way you would in production: clone the live environment so
# you can work without touching it, publish the copy, and confirm the release
# landed. Then remove the copy.
#
# Required environment:
#   VF_PAT         personal access token (Settings -> Access tokens), vfp_..._...
#   VF_PROJECT_ID  the project ID (Settings -> General -> Metadata)
set -euo pipefail

: "${VF_PAT:?set VF_PAT to a personal access token from Settings -> Access tokens}"
: "${VF_PROJECT_ID:?set VF_PROJECT_ID to the project ID from Settings -> General -> Metadata}"

BASE="https://realtime-api.voiceflow.com/v1/stable"
AUTH="Authorization: Bearer $VF_PAT"
Q="projectID=$VF_PROJECT_ID"

fail() { echo "FAIL at $1" >&2; exit 1; }

# Read the main alias rather than assuming "main": isMain survives a rename.
ENVS=$(curl -sf "$BASE/environment?$Q" -H "$AUTH") || fail "list environments"
SOURCE=$(echo "$ENVS" | jq -r '.environments[] | select(.isMain) | .alias')
[ -n "$SOURCE" ] || fail "no environment is flagged isMain"

ALIAS="cookbook$(date +%s)"

# 1. Clone. The copy starts as a full duplicate of the source, so you can edit
#    it without any traffic reaching your change.
CLONE=$(curl -sf -X POST "$BASE/environment/$SOURCE/clone?$Q" -H "$AUTH" -H 'Content-Type: application/json' \
  -d "{\"name\":\"Cookbook clone\",\"alias\":\"$ALIAS\"}") \
  || fail "clone environment '$SOURCE' (a 400 'invalid environment tag' means the source alias does not exist)"
echo "$CLONE" | jq -e '.environment.alias | type == "string"' > /dev/null \
  || fail "clone returned no environment"

cleanup() { curl -sf -X DELETE "$BASE/environment/$ALIAS?$Q" -H "$AUTH" > /dev/null 2>&1 || true; }
trap cleanup EXIT

# 2. Publish the clone. This promotes its DRAFT to its PUBLISHED version - it
#    does not touch the environment you cloned from.
PUBLISHED=$(curl -sf -X POST "$BASE/environment/$ALIAS/publish?$Q" -H "$AUTH" -H 'Content-Type: application/json' \
  -d '{"name":"Cookbook release","description":"Published by the Voiceflow cookbook"}') \
  || fail "publish environment '$ALIAS' (422 'expected string, received undefined' at path name means the body omitted the RELEASE name - publish names the release it creates, it is not optional)"

# 3. Confirm a release exists. Publishing is the only thing that creates one,
#    so a non-empty releases list is the proof the promotion happened.
AFTER=$(curl -sf "$BASE/environment?$Q" -H "$AUTH") || fail "re-list environments"
echo "$AFTER" | jq -e --arg a "$ALIAS" '[.environments[] | select(.alias == $a)] | length == 1' > /dev/null \
  || fail "the clone is not in the environment list"
echo "$AFTER" | jq -e --arg a "$ALIAS" '.environments[] | select(.alias == $a) | .releases | length > 0' > /dev/null \
  || fail "the published clone carries no release"

# 4. Remove the clone and prove it is gone.
trap - EXIT
curl -sf -X DELETE "$BASE/environment/$ALIAS?$Q" -H "$AUTH" > /dev/null || fail "delete the clone"
FINAL=$(curl -sf "$BASE/environment?$Q" -H "$AUTH") || fail "re-list after delete"
echo "$FINAL" | jq -e --arg a "$ALIAS" '[.environments[] | select(.alias == $a)] | length == 0' > /dev/null \
  || fail "the clone still exists after deletion"

echo "ok: cloned '$SOURCE' to '$ALIAS', published it ($(echo "$AFTER" | jq -r --arg a "$ALIAS" '.environments[] | select(.alias==$a) | .releases | length') release), deleted it; project is back to $(echo "$FINAL" | jq '.environments | length') environment(s)"