ci: migrate publish-preview workflow to MetaMask/github-tools (#73)

## Explanation

<!--
Thanks for your contribution! Take a moment to answer these questions so
that reviewers have the information they need to properly understand
your changes:

* What is the current state of things and why does it need to change?
* What is the solution your changes offer and how does it work?
* Are there any changes whose purpose might not obvious to those
unfamiliar with the domain?
* If your primary goal was to update one package but you found you had
to update another one along the way, why did you do so?
* If you had to upgrade a dependency, why did you do so?
-->
Replace the bespoke publish-preview workflow and its supporting scripts
with a call to the reusable workflow from MetaMask/github-tools. The
reusable workflow (with is-snap: true) now handles manifest renaming,
publishing, and PR comment generation, so the local helper scripts are
no longer needed.

Build-time configuration is forwarded to the reusable workflow via the
new BUILD_ENV secret.

Note: the workflow is temporarily pinned to the
mikesposito/snap-previews branch of github-tools for testing. This
should be updated to a tagged release before merging.

## References

<!--
Are there any issues that this pull request is tied to?
Are there other links that reviewers should consult to understand these
changes better?
Are there client or consumer pull requests to adopt any breaking
changes?

For example:

* Fixes #12345
* Related to #67890
-->
N/A

## Checklist

- [ ] I've updated the test suite for new or updated code as appropriate
- [ ] I've updated documentation (JSDoc, Markdown, etc.) for new or
updated code as appropriate
- [ ] I've communicated my changes to consumers by [updating changelogs
for packages I've
changed](https://github.com/MetaMask/core/tree/main/docs/processes/updating-changelogs.md)
- [ ] I've introduced [breaking
changes](https://github.com/MetaMask/core/tree/main/docs/processes/breaking-changes.md)
in this PR and have prepared draft pull requests for clients and
consumer packages to resolve them

Author: mikesposito

.github/workflows/publish-preview.yml

@@ -4,69 +4,32 @@ on:
   issue_comment:
     types: created
 
-jobs:
-  is-fork-pull-request:
-    name: Determine whether this issue comment was on a pull request from a fork
-    if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '@metamaskbot publish-preview') }}
-    runs-on: ubuntu-latest
-    outputs:
-      IS_FORK: ${{ steps.is-fork.outputs.IS_FORK }}
-    steps:
-      - uses: actions/checkout@v5
-      - name: Determine whether this PR is from a fork
-        id: is-fork
-        run: echo "IS_FORK=$(gh pr view --json isCrossRepository --jq '.isCrossRepository' "${PR_NUMBER}" )" >> "$GITHUB_OUTPUT"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PR_NUMBER: ${{ github.event.issue.number }}
+permissions:
+  contents: read
+  pull-requests: write
 
+jobs:
   publish-preview:
-    name: Publish build preview
-    needs: is-fork-pull-request
-    permissions:
-      pull-requests: write
-    # This ensures we don't publish on forks. We can't trust forks with this token.
-    if: ${{ needs.is-fork-pull-request.outputs.IS_FORK == 'false' }}
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-      - name: Check out pull request
-        run: gh pr checkout "${PR_NUMBER}"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PR_NUMBER: ${{ github.event.issue.number }}
-      - name: Checkout and setup environment
-        uses: MetaMask/action-checkout-and-setup@v2
-        with:
-          is-high-risk-environment: true
-      - name: Build
-        run: yarn build:prod
-        env:
-          ENVIRONMENT: production
-          LOG_LEVEL: all
-          RPC_URL_MAINNET: ${{ secrets.RPC_URL_MAINNET }}
-          HORIZON_URL_MAINNET: ${{ secrets.HORIZON_URL_MAINNET }}
-          EXPLORER_MAINNET_BASE_URL: ${{ secrets.EXPLORER_MAINNET_BASE_URL }}
-          RPC_URL_TESTNET: ${{ secrets.RPC_URL_TESTNET }}
-          HORIZON_URL_TESTNET: ${{ secrets.HORIZON_URL_TESTNET }}
-          EXPLORER_TESTNET_BASE_URL: ${{ secrets.EXPLORER_TESTNET_BASE_URL }}
-          TOKEN_API_BASE_URL: ${{ secrets.TOKEN_API_BASE_URL }}
-          STATIC_API_BASE_URL: ${{ secrets.STATIC_API_BASE_URL }}
-          PRICE_API_BASE_URL: ${{ secrets.PRICE_API_BASE_URL }}
-      - name: Get commit SHA
-        id: commit-sha
-        run: echo "COMMIT_SHA=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
-      - name: Prepare preview builds
-        run: yarn prepare-preview-builds @metamask-previews ${{ steps.commit-sha.outputs.COMMIT_SHA }}
-      - name: Publish preview build
-        run: yarn publish-previews
-        env:
-          YARN_NPM_AUTH_TOKEN: ${{ secrets.PUBLISH_PREVIEW_NPM_TOKEN }}
-      - name: Generate preview build message
-        run: yarn tsx scripts/generate-preview-build-message.ts
-      - name: Post build preview in comment
-        run: gh pr comment "${PR_NUMBER}" --body-file preview-build-message.txt
-        env:
-          COMMIT_SHA: ${{ steps.commit-sha.outputs.COMMIT_SHA }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PR_NUMBER: ${{ github.event.issue.number }}
+    if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '@metamaskbot publish-preview') }}
+    uses: MetaMask/github-tools/.github/workflows/publish-preview.yml@mikesposito/snap-previews
+    with:
+      is-snap: true
+      environment: default-branch
+      build-command: yarn workspace @metamask/stellar-wallet-snap build:prod
+      docs-url: 'https://github.com/MetaMask/core/blob/main/docs/processes/preview-builds.md'
+    secrets:
+      PUBLISH_PREVIEW_NPM_TOKEN: ${{ secrets.PUBLISH_PREVIEW_NPM_TOKEN }}
+      BUILD_ENV: |
+        {
+          "ENVIRONMENT": "production",
+          "LOG_LEVEL": "all",
+          "RPC_URL_MAINNET": "${{ secrets.RPC_URL_MAINNET }}",
+          "HORIZON_URL_MAINNET": "${{ secrets.HORIZON_URL_MAINNET }}",
+          "EXPLORER_MAINNET_BASE_URL": "${{ secrets.EXPLORER_MAINNET_BASE_URL }}",
+          "RPC_URL_TESTNET": "${{ secrets.RPC_URL_TESTNET }}",
+          "HORIZON_URL_TESTNET": "${{ secrets.HORIZON_URL_TESTNET }}",
+          "EXPLORER_TESTNET_BASE_URL": "${{ secrets.EXPLORER_TESTNET_BASE_URL }}",
+          "TOKEN_API_BASE_URL": "${{ secrets.TOKEN_API_BASE_URL }}",
+          "STATIC_API_BASE_URL": "${{ secrets.STATIC_API_BASE_URL }}",
+          "PRICE_API_BASE_URL": "${{ secrets.PRICE_API_BASE_URL }}"
+        }

package.json

@@ -29,8 +29,6 @@
     "lint:misc": "yarn workspaces foreach --all --parallel --verbose run lint:misc",
     "lint:types": "yarn workspaces foreach --all --parallel --verbose run lint:types",
     "format": "yarn workspaces foreach --all --parallel --verbose run format",
-    "prepare-preview-builds": "./scripts/prepare-preview-builds.sh",
-    "publish-previews": "yarn workspaces foreach --all --no-private --parallel --verbose run publish:preview",
     "start": "yarn workspaces foreach --all --parallel --verbose --interlaced run start",
     "test": "yarn workspace @metamask/stellar-wallet-snap run test",
     "test:integration": "yarn workspace @metamask/stellar-wallet-snap run test:integration"

packages/snap/package.json

@@ -35,7 +35,6 @@
     "lint:types": "tsc --noEmit",
     "format": "prettier '**/*.ts' '**/*.tsx' --write",
     "prepublishOnly": "mm-snap manifest",
-    "publish:preview": "yarn npm publish --tag preview",
     "serve": "mm-snap serve",
     "start": "node scripts/update-manifest-local.js && concurrently \"mm-snap watch\" \"yarn build:locale:watch\"",
     "test": "jest --passWithNoTests --coverage=false",