chore: promote main to stable

Author: github-actions[bot]

.github/workflows/deploy-demo.yml

@@ -42,6 +42,8 @@ jobs:
           cache: "pnpm"
 
       - name: Install and Build
+        env:
+          VITE_API_BASE_URL: https://esign-demo-proxy-server-191591660773.us-central1.run.app
         run: |
           pnpm install
           rm -rf dist

.github/workflows/deploy-proxy-server.yml

@@ -0,0 +1,70 @@
+name: Deploy Proxy Server
+
+on:
+  workflow_dispatch:
+
+env:
+  PROJECT_ID: ${{ vars.GCP_PROJECT_ID }}
+  REGION: ${{ vars.GCP_REGION }}
+  SERVICE_NAME: ${{ vars.GCP_SERVICE_NAME }}
+  SUPERDOC_SERVICES_API_KEY: ${{ secrets.SUPERDOC_SERVICES_API_KEY }}
+  SUPERDOC_SERVICES_BASE_URL: ${{ vars.SUPERDOC_SERVICES_BASE_URL }}
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Auth to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.GCP_SA_KEY }}
+
+      - name: Setup gcloud
+        uses: google-github-actions/setup-gcloud@v2
+        with:
+          project_id: ${{ env.PROJECT_ID }}
+
+      - name: Build and push container with Cloud Build
+        run: |
+          REGION="${REGION:-us-central1}"
+          SERVICE_NAME="${SERVICE_NAME:-esign-demo-proxy-server}"
+          IMAGE="gcr.io/${PROJECT_ID}/${SERVICE_NAME}:${GITHUB_SHA}"
+
+          echo "REGION=${REGION}" >> $GITHUB_ENV
+          echo "SERVICE_NAME=${SERVICE_NAME}" >> $GITHUB_ENV
+          echo "IMAGE=${IMAGE}" >> $GITHUB_ENV
+
+          gcloud builds submit demo/server --tag "${IMAGE}"
+        env:
+          PROJECT_ID: ${{ env.PROJECT_ID }}
+          REGION: ${{ env.REGION }}
+          SERVICE_NAME: ${{ env.SERVICE_NAME }}
+
+      - name: Deploy container to Cloud Run
+        run: |
+          REGION="${REGION:-us-central1}"
+          SERVICE_NAME="${SERVICE_NAME:-esign-demo-proxy-server}"
+          IMAGE="${IMAGE}"
+          SUPERDOC_SERVICES_BASE_URL="${SUPERDOC_SERVICES_BASE_URL:-https://api.superdoc.dev}"
+
+          gcloud run deploy "${SERVICE_NAME}" \
+            --image "${IMAGE}" \
+            --region "${REGION}" \
+            --memory=1Gi \
+            --cpu=1 \
+            --allow-unauthenticated \
+            --set-env-vars SUPERDOC_SERVICES_BASE_URL="${SUPERDOC_SERVICES_BASE_URL}" \
+            --set-secrets="SUPERDOC_SERVICES_API_KEY=esign-demo-sd-services-api-key:latest"
+        env:
+          IMAGE: ${{ env.IMAGE }}
+          REGION: ${{ env.REGION }}
+          SERVICE_NAME: ${{ env.SERVICE_NAME }}
+          SUPERDOC_SERVICES_API_KEY: ${{ env.SUPERDOC_SERVICES_API_KEY }}
+          SUPERDOC_SERVICES_BASE_URL: ${{ env.SUPERDOC_SERVICES_BASE_URL }}

.github/workflows/release-package.yml

@@ -51,3 +51,24 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           pnpm dlx semantic-release
+
+      - name: Create sync PR to main
+        if: github.ref == 'refs/heads/stable'
+        env:
+          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
+          GH_TOKEN: ${{ steps.generate_token.outputs.token }}
+        run: |
+          pr_number=$(gh pr list --base main --head stable --state open --json number --jq '.[0].number')
+          if [ -z "$pr_number" ]; then
+            git fetch origin main
+            if git diff --quiet origin/main...HEAD; then
+              echo "Main is already up to date with stable; skipping PR."
+              exit 0
+            fi
+            pr_url=$(gh pr create --base main --head stable --title "chore: sync stable release to main" --body "Automated PR to merge the latest stable changes back into main.")
+            pr_number=$(echo "$pr_url" | grep -oE '[0-9]+$')
+            echo "Created PR #$pr_number to sync stable into main."
+          else
+            echo "PR #$pr_number already open to sync stable into main."
+          fi
+          gh pr merge "$pr_number" --merge --auto || echo "Auto-merge setup skipped (conditions not met)."