Migrate to Kiln

.github/workflows/deploy.yml

@@ -0,0 +1,114 @@
+name: Deploy API Docs
+
+on:
+  push:
+    branches: [main]
+  workflow_call:
+    inputs:
+      package:
+        description: "Package repo to rebuild e.g. vapor/jwt-kit"
+        type: string
+        required: true
+      ref:
+        description: "Branch to use"
+        type: string
+        required: false
+        default: ""
+  workflow_dispatch:
+    inputs:
+      package:
+        description: "Package repo to rebuild (leave blank to build all packages)"
+        type: string
+        required: false
+        default: ""
+      ref:
+        description: "Branch of the package to rebuild"
+        type: string
+        required: false
+        default: ""
+      rebuild-all:
+        description: "Regenerate every DocC archive from scratch."
+        type: boolean
+        required: false
+        default: false
+
+concurrency:
+  group: deploy-api-docs
+  cancel-in-progress: false
+
+permissions:
+  id-token: write
+  contents: read
+
+env:
+  AWS_PAGER: ""
+  ARCHIVE_BUCKET: s3://vapor-api-docs-archives
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          repository: vapor/api-docs
+          ref: main
+
+      - name: Install Swift
+        uses: vapor/swiftly-action@bedb227456c5f495afbef80baebee17a8a02cef4 # v0.2.1
+        with:
+          toolchain: latest
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
+        with:
+          role-to-assume: ${{ vars.OIDC_ROLE_ARN }}
+          aws-region: ${{ vars.OIDC_ROLE_REGION }}
+
+      - name: Restore DocC archive cache
+        run: aws s3 sync "$ARCHIVE_BUCKET" ./Content/archives --no-progress
+      - name: Build site
+        env:
+          PACKAGE: ${{ inputs.package }}
+          REF: ${{ inputs.ref }}
+          REBUILD_ALL: ${{ inputs.rebuild-all }}
+        run: |
+          args=()
+          if [ "$REBUILD_ALL" = "true" ]; then
+            args+=(--rebuild-all)
+          elif [ -n "$PACKAGE" ] && [ -n "$REF" ]; then
+            args+=(--rebuild "${PACKAGE}@${REF}")
+          elif [ -n "$PACKAGE" ]; then
+            args+=(--rebuild "$PACKAGE")
+          fi
+          swift run APIDocs "${args[@]}"
+
+      # Re-assume: a cold-cache build can outrun the 1h assume-role session.
+      - name: Refresh AWS credentials
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
+        with:
+          role-to-assume: ${{ vars.OIDC_ROLE_ARN }}
+          aws-region: ${{ vars.OIDC_ROLE_REGION }}
+
+      - name: Save DocC archive cache
+        run: aws s3 sync ./Content/archives "$ARCHIVE_BUCKET" --no-progress --delete
+
+      - name: Deploy CloudFormation stack
+        uses: aws-actions/aws-cloudformation-github-deploy@81e3b03d2266bcb76c4bcc37a7d71d9cb67838bb # v2.2.0
+        with:
+          name: vapor-api-docs
+          template: stack.yaml
+          parameter-overrides: >-
+            BucketName=vapor-api-docs-site,
+            SubDomainName=api,
+            HostedZoneName=vapor.codes,
+            AcmCertificateArn=${{ secrets.API_DOCS_CERTIFICATE_ARN }}
+
+      - name: Deploy site to S3
+        env:
+          S3_BUCKET_URL: ${{ secrets.VAPOR_API_DOCS_S3_BUCKET_URL }}
+        run: aws s3 sync ./site "$S3_BUCKET_URL" --no-progress --acl public-read --delete
+
+      - name: Invalidate CloudFront
+        env:
+          DISTRIBUTION_ID: ${{ secrets.VAPOR_API_DOCS_DISTRIBUTION_ID }}
+        run: aws cloudfront create-invalidation --distribution-id "$DISTRIBUTION_ID" --paths "/*"

.github/workflows/pr-closed.yml

@@ -0,0 +1,32 @@
+name: PR - Closed
+on:
+  pull_request:
+    branches:
+      - main
+    types: [closed]
+permissions:
+  contents: read
+  id-token: write
+  deployments: write
+
+env:
+  AWS_PAGER: ""
+
+jobs:
+  delete-s3:
+    name: Delete S3 Website
+    runs-on: ubuntu-latest
+    if: ${{ github.event.pull_request.head.repo.full_name == 'vapor/api-docs' && github.actor != 'dependabot[bot]' }}
+    steps:
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
+        with:
+          role-to-assume: ${{ vars.OIDC_ROLE_ARN }}
+          aws-region: ${{ vars.OIDC_ROLE_REGION }}
+      - name: Delete Website Bucket
+        uses: brokenhandsio/s3-website-pr-action@6ebd9b622b4bb33358228571a50e05d375cbd4de # v3.1.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          bucket-prefix: "vapor-api-docs-pulls"
+          bucket-region: "eu-west-2"

.github/workflows/pr.yml

@@ -0,0 +1,62 @@
+name: PR
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+on:
+  pull_request:
+    branches:
+      - main
+permissions:
+  contents: read
+  id-token: write
+  deployments: write
+
+env:
+  AWS_PAGER: ""
+  ARCHIVE_BUCKET: s3://vapor-api-docs-archives
+
+jobs:
+  build:
+    name: Build and Deploy PR
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install latest Swift
+        uses: vapor/swiftly-action@bedb227456c5f495afbef80baebee17a8a02cef4 # v0.2.1
+        with:
+          toolchain: latest
+      - name: Checkout code
+        uses: actions/checkout@v7
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.14"
+      - name: Setup CloudFormation linter
+        uses: ScottBrenner/cfn-lint-action@ed184e91f5085a2932501da8314e899e5e0ef5be # v2.7.1
+      - name: Run CloudFormation linter
+        run: cfn-lint -t stack.yaml
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
+        with:
+          role-to-assume: ${{ vars.OIDC_ROLE_ARN }}
+          aws-region: ${{ vars.OIDC_ROLE_REGION }}
+      - name: Restore DocC archive cache
+        run: aws s3 sync "$ARCHIVE_BUCKET" ./Content/archives --no-progress
+      - name: Build site
+        run: swift run APIDocs
+      # Re-assume: a cold-cache build can outrun the 1h assume-role session.
+      - name: Refresh AWS credentials
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
+        with:
+          role-to-assume: ${{ vars.OIDC_ROLE_ARN }}
+          aws-region: ${{ vars.OIDC_ROLE_REGION }}
+      - name: Save DocC archive cache
+        run: aws s3 sync ./Content/archives "$ARCHIVE_BUCKET" --no-progress
+      - name: Deploy S3 Website
+        if: ${{ github.event.pull_request.head.repo.full_name == 'vapor/api-docs' && github.actor != 'dependabot[bot]' }}
+        uses: brokenhandsio/s3-website-pr-action@6ebd9b622b4bb33358228571a50e05d375cbd4de # v3.1.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          bucket-prefix: "vapor-api-docs-pulls"
+          folder-to-copy: "./site"
+          bucket-region: "eu-west-2"

.gitignore

@@ -3,3 +3,7 @@ code
 /packages
 /swift-doc
 /public
+/site
+/.build
+/Content/archives
+.vscode/