frontend-deploy.yml

name: Deploy frontend

on:
  push:
    branches:
      - main
      - prod
    paths:
      - 'apps/frontend/**/*'
      - 'packages/ui/**/*'
      - 'packages/utils/**/*'
      - 'packages/assets/**/*'
      - 'packages/moderation/**/*'
      - '**/wrangler.jsonc'
      - '**/pnpm-*.yaml'
      - '.github/workflows/frontend-deploy.yml'
  workflow_dispatch:
  workflow_call:
    inputs:
      preview:
        required: false
        type: boolean
        description: 'Whether this is a preview deployment'
      head_sha:
        required: false
        type: string
        description: 'The commit SHA to deploy (defaults to github.sha)'
      head_ref:
        required: false
        type: string
        description: 'The branch name to deploy (defaults to github.ref_name)'
      branch_alias:
        required: false
        type: string
        description: 'The persistent preview alias for the branch'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-${{ inputs.preview && 'preview' || 'push' }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/prod' }}

env:
  TURBO_TELEMETRY_DISABLED: 1
  pnpm_config_color: always

jobs:
  deploy:
    runs-on: namespace-profile-modrinth-frontend
    permissions:
      contents: read
      deployments: write
      pull-requests: write
    steps:
      - name: Checkout code
        uses: namespacelabs/nscloud-checkout-action@66f2dc6f6c42a8ac6c4e53473c4840006822831e # v9.0.1
        with:
          fetch-depth: 0
          dissociate: true

      - name: Configure environment
        id: meta
        env:
          PREVIEW_INPUT: ${{ inputs.preview }}
          REF: ${{ github.ref }}
          BRANCH_ALIAS: ${{ inputs.branch_alias }}
        run: |
          echo "cmd=deploy" >> $GITHUB_OUTPUT

          if [ "$PREVIEW_INPUT" = "true" ]; then
            URL="https://$BRANCH_ALIAS.frontend.rinth.dev"
            STAGING_URL="https://$BRANCH_ALIAS.frontend-staging.rinth.dev"
            echo "env=production" >> $GITHUB_OUTPUT
            echo "url=$URL" >> $GITHUB_OUTPUT
            echo "cmd=preview --name $BRANCH_ALIAS --var CF_PAGES_URL:$URL" >> $GITHUB_OUTPUT
            echo "staging_cmd=preview --env staging --name $BRANCH_ALIAS --var CF_PAGES_URL:$STAGING_URL" >> $GITHUB_OUTPUT

          elif [ "$REF" = "refs/heads/main" ]; then
            echo "env=staging" >> $GITHUB_OUTPUT
            echo "url=https://staging.modrinth.com" >> $GITHUB_OUTPUT

          else
            # Production env (no preview)
            echo "env=production" >> $GITHUB_OUTPUT
            echo "url=https://modrinth.com" >> $GITHUB_OUTPUT
          fi

      - name: Setup Node
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version-file: .nvmrc

      - name: Enable Corepack
        run: corepack enable

      - name: Set up caches
        uses: namespacelabs/nscloud-cache-action@1124a6f3ce44e5cf84cc22111530961f4d2a15f9 # v1.7.0
        with:
          cache: |
            rust
            pnpm
            apt

      - name: Set up Turborepo caching
        uses: namespace-actions/setup-turbocache@a94b84c111f2cc781a4a83c4d07a99f2c63e33d6 # v0.0.3

      - name: Inject build variables
        working-directory: ./apps/frontend
        run: |
          if [ "${{ steps.meta.outputs.env }}" == "staging" ]; then
            echo "Injecting staging variables from wrangler.jsonc..."
            jq -r '.env.staging.vars | to_entries[] | "\(.key)=\(.value)"' wrangler.jsonc >> $GITHUB_ENV
          else
            echo "Injecting production variables from wrangler.jsonc..."
            jq -r '.vars | to_entries[] | "\(.key)=\(.value)"' wrangler.jsonc >> $GITHUB_ENV
          fi

      - name: Install dependencies
        working-directory: ./apps/frontend
        run: pnpm install

      - name: Build frontend
        run: pnpm web:build
        env:
          CF_PAGES_BRANCH: ${{ inputs.head_ref || github.ref_name }}
          CF_PAGES_COMMIT_SHA: ${{ inputs.head_sha || github.sha }}
          CF_PAGES_URL: ${{ steps.meta.outputs.url }}
          BUILD_ENV: ${{ steps.meta.outputs.env }}
          PREVIEW: ${{ inputs.preview && 'true' || 'false' }}

      - name: Install Wrangler CLI
        uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
        with:
          apiToken: ${{ secrets.CF_API_TOKEN }}
          accountId: ${{ secrets.CF_ACCOUNT_ID }}
          workingDirectory: ./apps/frontend
          packageManager: pnpm
          wranglerVersion: '4.149.0'
          command: --version

      - parallel:
          - name: Deploy Cloudflare Worker
            id: wrangler
            uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
            env:
              WRANGLER_OUTPUT_FILE_PATH: ${{ runner.temp }}/wrangler-production.json
            with:
              apiToken: ${{ secrets.CF_API_TOKEN }}
              accountId: ${{ secrets.CF_ACCOUNT_ID }}
              environment: ${{ steps.meta.outputs.env != 'production' && steps.meta.outputs.env || '' }}
              workingDirectory: ./apps/frontend
              command: ${{ steps.meta.outputs.cmd }}

          - name: Deploy staging Cloudflare Worker preview
            if: ${{ inputs.preview }}
            uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
            env:
              WRANGLER_OUTPUT_FILE_PATH: ${{ runner.temp }}/wrangler-staging.json
            with:
              apiToken: ${{ secrets.CF_API_TOKEN }}
              accountId: ${{ secrets.CF_ACCOUNT_ID }}
              workingDirectory: ./apps/frontend
              command: ${{ steps.meta.outputs.staging_cmd }}

      - name: Write deployment URLs to files
        if: ${{ inputs.preview }}
        run: |
          jq -r 'select(.type == "preview") | .deployment_urls[0]' "$RUNNER_TEMP/wrangler-production.json" > deployment-url-production.txt
          jq -r 'select(.type == "preview") | .deployment_urls[0]' "$RUNNER_TEMP/wrangler-staging.json" > deployment-url-staging.txt

      - parallel:
          - name: Upload production deployment URL
            if: ${{ inputs.preview }}
            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
            with:
              name: deployment-url-production
              path: deployment-url-production.txt

          - name: Upload staging deployment URL
            if: ${{ inputs.preview }}
            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
            with:
              name: deployment-url-staging
              path: deployment-url-staging.txt