ToolJet/.github/workflows/vercel-deploy.yml

name: Deploy to Vercel

# This workflow deploys the ToolJet frontend to Vercel
# Pattern based on cloud-frontend.yml and cloud-frontend-gcp.yml
#
# Required GitHub Secrets:
# - VERCEL_TOKEN: Vercel API token (get from https://vercel.com/account/tokens)
# - VERCEL_ORG_ID: team_SsaGMOGYsC8KFX3InHcUiy3T
# - VERCEL_PROJECT_ID: prj_iX5rpyQy7hq8upcHijcED3jkRQn4
# - CUSTOM_GITHUB_TOKEN: For submodule checkout
# - ALLOWED_USER1_USERNAME, ALLOWED_USER2_USERNAME, ALLOWED_USER3_USERNAME: Authorized users
# - CLOUD_GOOGLE_MAPS_API_KEY, CLOUD_NODE_ENV, CLOUD_SENTRY_*, etc.: Build environment variables

on:
  workflow_dispatch:
    inputs:
      branch:
        description: 'Git branch to deploy (must start with "lts-", e.g., lts-3.16)'
        required: true
      environment:
        description: 'Deployment environment'
        required: true
        type: choice
        options:
          - preview
          - production

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - name: ✅ Check user authorization
        run: |
          allowed_user1=${{ secrets.ALLOWED_USER1_USERNAME }}
          allowed_user2=${{ secrets.ALLOWED_USER2_USERNAME }}
          allowed_user3=${{ secrets.ALLOWED_USER3_USERNAME }}

          if [[ "${{ github.actor }}" != "$allowed_user1" && \
                "${{ github.actor }}" != "$allowed_user2" && \
                "${{ github.actor }}" != "$allowed_user3" ]]; then
            echo "❌ User '${{ github.actor }}' is not authorized to trigger this workflow."
            exit 1
          else
            echo "✅ User '${{ github.actor }}' is authorized."
          fi          

      - name: 📥 Manual Git checkout with submodules
        run: |
          set -e

          BRANCH="${{ github.event.inputs.branch }}"
          REPO="https://x-access-token:${{ secrets.CUSTOM_GITHUB_TOKEN }}@github.com/${{ github.repository }}"

          git config --global url."https://x-access-token:${{ secrets.CUSTOM_GITHUB_TOKEN }}@github.com/".insteadOf "https://github.com/"
          git config --global http.version HTTP/1.1
          git config --global http.postBuffer 524288000

          echo "👉 Cloning $REPO (branch: $BRANCH)"
          git clone --recurse-submodules --depth=1 --branch "$BRANCH" "$REPO" repo
          cd repo

          echo "🔎 Main repo: verifying checkout"
          MAIN_CURRENT=$(git rev-parse --abbrev-ref HEAD)
          echo "✅ Main repo: successfully checked out branch $MAIN_CURRENT"
          echo "📍 Main repo: current commit $(git rev-parse --short HEAD): $(git log -1 --pretty=%s)"

          echo "🔁 Updating submodules"
          git submodule update --init --recursive

          echo "🔀 Attempting to checkout '$BRANCH' in each submodule and validating"

          BRANCH="$BRANCH" git submodule foreach --recursive bash -c '
            name="$sm_path"
            echo ""
            echo "Entering '\''$name'\''"
            echo "↪ $name: trying to checkout branch '\''$BRANCH'\''"

            if git ls-remote --exit-code --heads origin "$BRANCH" >/dev/null; then
              git fetch origin "$BRANCH:$BRANCH" || {
                echo "❌ $name: fetch failed for $BRANCH"
                exit 1
              }

              PREV=$(git rev-parse --short HEAD || echo "unknown")
              git checkout "$BRANCH" || {
                echo "❌ $name: checkout failed for $BRANCH"
                exit 1
              }

              echo "Previous HEAD position was $PREV: $(git log -1 --pretty=%s || echo '\''unknown'\'')"
              echo "✅ $name: checked out branch $BRANCH"
            else
              echo "⚠️ $name: branch '\''$BRANCH'\'' not found on origin. Falling back to '\''lts-3.16'\''"
              PREV=$(git rev-parse --short HEAD || echo "unknown")
              git fetch origin lts-3.16:lts-3.16 || {
                echo "❌ $name: fetch failed for lts-3.16"
                exit 1
              }
              git checkout lts-3.16 || {
                echo "❌ $name: fallback to lts-3.16 failed"
                exit 1
              }
              echo "Previous HEAD position was $PREV: $(git log -1 --pretty=%s || echo '\''unknown'\'')"
              echo "✅ $name: now on branch lts-3.16"
            fi

            CURRENT=$(git rev-parse --abbrev-ref HEAD)
            echo "🔎 $name: current branch = $CURRENT"
            if [ "$CURRENT" != "$BRANCH" ] && [ "$CURRENT" != "lts-3.16" ]; then
              echo "❌ $name: unexpected branch state — wanted '\''$BRANCH'\'' or fallback '\''lts-3.16'\'', got '\''$CURRENT'\''"
              exit 1
            fi
          '          

      - name: 🧰 Setup Node.js
        uses: actions/setup-node@v2
        with:
          node-version: 22.15.1

      - name: 📦 Install dependencies
        run: npm install
        working-directory: repo

      - name: 🛠️ Build the project
        run: npm run build:plugins:prod && npm run build:frontend
        working-directory: repo
        env:
          GOOGLE_MAPS_API_KEY: ${{ secrets.CLOUD_GOOGLE_MAPS_API_KEY }}
          NODE_ENV: ${{ secrets.CLOUD_NODE_ENV }}
          NODE_OPTIONS: ${{ secrets.CLOUD_NODE_OPTIONS }}
          SENTRY_AUTH_TOKEN: ${{ secrets.CLOUD_SENTRY_AUTH_TOKEN }}
          SENTRY_ORG: ${{ secrets.CLOUD_SENTRY_ORG }}
          SENTRY_PROJECT: ${{ secrets.CLOUD_SENTRY_PROJECT }}
          SERVE_CLIENT: ${{ secrets.CLOUD_SERVE_CLIENT }}
          SERVER_IP: ${{ secrets.CLOUD_SERVER_IP }}
          TJDB_SQL_MODE_DISABLE: ${{ secrets.CLOUD_TJDB_SQL_MODE_DISABLE }}
          TOOLJET_SERVER_URL: ${{ secrets.CLOUD_TOOLJET_SERVER_URL }}
          TOOLJET_EDITION: cloud
          WEBSITE_SIGNUP_URL: https://website-stage.tooljet.ai/signup

      - name: 🚀 Deploy to Vercel
        run: |
          npm install -g vercel@latest

          if [ "${{ github.event.inputs.environment }}" = "production" ]; then
            echo "🚀 Deploying to production..."
            vercel deploy --prod \
              --token=$VERCEL_TOKEN \
              --cwd=frontend/build
          else
            echo "🔍 Deploying to preview..."
            vercel deploy \
              --token=$VERCEL_TOKEN \
              --cwd=frontend/build
          fi          
        working-directory: repo
        env:
          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}