snapshot of https://github.com/tldraw/tldraw.git (main, 2026-09-23; blobs > 131072B omitted)

.github/actions/deploy-templates/action.yml

@@ -0,0 +1,69 @@
+name: Deploy templates
+description: >
+  Build the starter-kit demos against the checked-out SDK and deploy the cloudflare-hosted ones to
+  *.templates.tldraw.dev. Shared by deploy-templates.yml (template changes, manual runs) and
+  publish.yml (releases). Expects the repo to be checked out already; runs the setup action itself.
+
+# The cloudflare credentials are secrets on the deploy-production environment, so the job using
+# this action has to select that environment and pass them in. This is a composite action rather
+# than a workflow_call workflow because a called workflow only ever sees the secrets its caller
+# hands it, and an `environment:` on a job inside the callee does not add that environment's
+# secrets to them — see #10636.
+inputs:
+  license-key:
+    description: tldraw license key the demos are built with (TEMPLATES_TLDRAW_LICENSE_KEY)
+    required: true
+  cloudflare-account-id:
+    description: Cloudflare account the workers deploy to (CLOUDFLARE_ACCOUNT_ID)
+    required: true
+  cloudflare-api-token:
+    description: Cloudflare API token with workers permissions (CLOUDFLARE_API_TOKEN)
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - uses: ./.github/actions/setup
+
+    # most templates run `tsc` as part of their build, which resolves the workspace packages
+    # through their project references and so needs the declarations built first
+    - name: Build types
+      shell: bash
+      env:
+        # build-types pulls in refresh-assets, which rewrites the generated version files. in CI it
+        # exits 1 on any change to a committed asset instead of writing it, which would fail the
+        # deploy on a release ref whose generated files aren't already in sync.
+        ALLOW_REFRESH_ASSETS_CHANGES: 1
+      run: yarn build-types
+
+    - name: Deploy templates
+      shell: bash
+      env:
+        CI: 1
+        PRINT_GITHUB_ANNOTATIONS: 1
+        ALLOW_REFRESH_ASSETS_CHANGES: 1
+        TEMPLATES_TLDRAW_LICENSE_KEY: ${{ inputs.license-key }}
+        CLOUDFLARE_API_TOKEN: ${{ inputs.cloudflare-api-token }}
+        CLOUDFLARE_ACCOUNT_ID: ${{ inputs.cloudflare-account-id }}
+      run: |
+        # the templates import tldraw/tldraw.css, which is generated and gitignored
+        yarn lazy prebuild
+
+        cd templates
+        all_templates=$(ls -d */ | cut -f1 -d'/')
+        cd ..
+
+        # the demos are independent of each other, so deploy them all before failing: one broken
+        # template shouldn't leave the rest stranded on an old build with no signal about which.
+        # templates with no `deploy` config in their package.json skip themselves.
+        failed=""
+        for template in $all_templates; do
+          echo "::group::Deploying $template"
+          yarn tsx ./internal/scripts/deploy-template.ts $template || failed="$failed $template"
+          echo "::endgroup::"
+        done
+
+        if [ -n "$failed" ]; then
+          echo "::error::Failed to deploy templates:$failed"
+          exit 1
+        fi