ci: Replace manual scripts with slack_notification action in Create pre-staging environment (#7761)

Co-authored-by: ppawlowski <piotr@flowfuse.com>

Author: ppawlowski

.github/workflows/branch-deploy.yaml

@@ -584,178 +584,33 @@ jobs:
       PR_NUMBER: ${{ github.event.number == '' && inputs.pr_number || github.event.number }}
 
     steps:
-      # Builds the recipient list (PR author + requested reviewers, or github.actor on workflow_dispatch)
-      # and resolves each GitHub username to a Slack user ID by scanning workspace profiles and picking the value of custom profile field (GitHub).
-      # Outputs `recipients` as JSON: [{ slack_id, github, role }, ...]. Unresolved users are skipped with a warning.
-      - name: Resolve Slack users for recipients
-        id: resolve
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        env:
-          SLACK_BOT_TOKEN: ${{ secrets.SLACK_GHBOT_TOKEN }}
-          SLACK_GITHUB_FIELD_ID: "Xf0A2BPU8U77"
-          PR_AUTHOR: ${{ github.event.pull_request.user.login }}
-          REQUESTED_REVIEWERS: ${{ toJSON(github.event.pull_request.requested_reviewers) }}
-          GITHUB_ACTOR: ${{ github.actor }}
-          EVENT_NAME: ${{ github.event_name }}
+      - name: Notify Slack
+        uses: FlowFuse/github-actions-workflows/actions/slack_notification@slack_notification/v1
         with:
-          script: |
-            const token = process.env.SLACK_BOT_TOKEN;
-            const fieldId = process.env.SLACK_GITHUB_FIELD_ID;
-
-            // Build recipient list with roles, deduped (first-added role wins: Author > Reviewer > Pusher).
-            // Bot accounts (e.g. dependabot[bot]) are skipped — they have no Slack profile.
-            const recipients = [];
-            const seen = new Set();
-            const add = (login, role) => {
-              if (!login) return;
-              if (login.endsWith('[bot]')) return;
-              const key = login.toLowerCase();
-              if (seen.has(key)) return;
-              seen.add(key);
-              recipients.push({ github: key, role });
-            };
-
-            if (process.env.EVENT_NAME === 'workflow_dispatch') {
-              add(process.env.GITHUB_ACTOR, 'Trigger');
-            } else {
-              add(process.env.PR_AUTHOR, 'Author');
-              const reviewers = JSON.parse(process.env.REQUESTED_REVIEWERS || '[]');
-              for (const r of reviewers) add(r.login, 'Reviewer');
-              add(process.env.GITHUB_ACTOR, 'Pusher');
-            }
-
-            if (recipients.length === 0) {
-              core.warning('No recipients to notify');
-              core.setOutput('recipients', '[]');
-              return;
+          bot-token: ${{ secrets.SLACK_GHBOT_TOKEN }}
+          mode: contributors
+          values: |
+            {
+              "PR_TITLE": ${{ toJSON(github.event.pull_request.title || format('#{0}', env.PR_NUMBER)) }},
+              "LOGS_URL": ${{ toJSON(format('https://{0}/explore?orgId=1&left=%7B%22datasource%22:%22P8E80F9AEF21F6940%22,%22queries%22:%5B%7B%22refId%22:%22A%22,%22editorMode%22:%22code%22,%22expr%22:%22%7Bnamespace%3D%5C%22pr-{1}%5C%22%7D%20%7C%3D%20%60%60%20%7C%20json%22,%22queryType%22:%22range%22%7D%5D,%22range%22:%7B%22from%22:%22now-30m%22,%22to%22:%22now%22%7D%7D', secrets.STAGING_GRAFANA_URL, env.PR_NUMBER)) }}
             }
-
-            // Build Slack username -> ID map by scanning workspace profiles
-            const targets = new Set(recipients.map(r => r.github));
-            const resolved = new Map();
-            let cursor;
-            outer: do {
-              const params = new URLSearchParams({ limit: '200' });
-              if (cursor) params.set('cursor', cursor);
-              const res = await fetch(`https://slack.com/api/users.list?${params}`, {
-                headers: { Authorization: `Bearer ${token}` }
-              });
-              const data = await res.json();
-              if (!data.ok) return core.setFailed(`Slack users.list error: ${data.error}`);
-              for (const member of data.members) {
-                if (member.deleted || member.is_bot) continue;
-                const profileRes = await fetch(`https://slack.com/api/users.profile.get?user=${member.id}`, {
-                  headers: { Authorization: `Bearer ${token}` }
-                });
-                const profileData = await profileRes.json();
-                if (!profileData.ok) continue;
-                const ghField = profileData.profile?.fields?.[fieldId]?.value;
-                if (!ghField) continue;
-                const ghLower = ghField.toLowerCase();
-                if (targets.has(ghLower)) {
-                  resolved.set(ghLower, member.id);
-                  if (resolved.size === targets.size) break outer;
-                }
-              }
-              cursor = data.response_metadata?.next_cursor;
-            } while (cursor);
-
-            const output = [];
-            for (const r of recipients) {
-              const slack_id = resolved.get(r.github);
-              if (slack_id) {
-                output.push({ slack_id, github: r.github, role: r.role });
-              } else {
-                core.warning(`No Slack user found with GitHub username: ${r.github} (role: ${r.role})`);
-              }
-            }
-            core.info(`Resolved ${output.length}/${recipients.length} recipients`);
-            core.setOutput('recipients', JSON.stringify(output));
-
-      # Sends one DM per resolved recipient via Slack chat.postMessage.
-      # Same message content for everyone, with a *Role:* field indicating Author / Reviewer / Trigger.
-      # Step fails only if all sends fail; partial failures are logged as warnings.
-      - name: Send Slack notifications
-        if: steps.resolve.outputs.recipients != '' && steps.resolve.outputs.recipients != '[]'
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        env:
-          SLACK_BOT_TOKEN: ${{ secrets.SLACK_GHBOT_TOKEN }}
-          RECIPIENTS: ${{ steps.resolve.outputs.recipients }}
-          PR_NUMBER: ${{ env.PR_NUMBER }}
-          PR_TITLE: ${{ github.event.pull_request.title }}
-          PR_AUTHOR: ${{ github.event.pull_request.user.login }}
-          DEPLOY_RESULT: ${{ needs.deploy.result }}
-          COMMIT_SHA: ${{ github.event.pull_request.head.sha }}
-          SERVER_URL: ${{ github.server_url }}
-          REPOSITORY: ${{ github.repository }}
-          RUN_ID: ${{ github.run_id }}
-          GRAFANA_URL: ${{ secrets.STAGING_GRAFANA_URL }}
-        with:
-          script: |
-            const token = process.env.SLACK_BOT_TOKEN;
-            const recipients = JSON.parse(process.env.RECIPIENTS);
-            const prNumber = process.env.PR_NUMBER;
-            const prTitle = process.env.PR_TITLE || `#${prNumber}`;
-            const prAuthor = process.env.PR_AUTHOR || 'n/a';
-            const deployResult = process.env.DEPLOY_RESULT;
-            const commitSha = process.env.COMMIT_SHA;
-            const serverUrl = process.env.SERVER_URL;
-            const repository = process.env.REPOSITORY;
-            const runId = process.env.RUN_ID;
-            const grafanaUrl = process.env.GRAFANA_URL;
-
-            const statusText = deployResult === 'success' ? ':white_check_mark: Success' : ':x: Failure ';
-            const logsUrl = `https://${grafanaUrl}/explore?orgId=1&left=%7B%22datasource%22:%22P8E80F9AEF21F6940%22,%22queries%22:%5B%7B%22refId%22:%22A%22,%22editorMode%22:%22code%22,%22expr%22:%22%7Bnamespace%3D%5C%22pr-${prNumber}%5C%22%7D%20%7C%3D%20%60%60%20%7C%20json%22,%22queryType%22:%22range%22%7D%5D,%22range%22:%7B%22from%22:%22now-30m%22,%22to%22:%22now%22%7D%7D`;
-
-            let failures = 0;
-            for (const r of recipients) {
-              const blocks = [
-                {
-                  type: 'header',
-                  text: { type: 'plain_text', text: `Pull Request ${prNumber} pre-staging deployment`, emoji: true }
-                },
-                {
-                  type: 'section',
-                  fields: [
-                    { type: 'mrkdwn', text: `*Status:*\n${statusText}` },
-                    { type: 'mrkdwn', text: `*Role:*\n${r.role}` },
-                    { type: 'mrkdwn', text: `*Pull Request:*\n<https://github.com/FlowFuse/flowfuse/pull/${prNumber}|${prTitle}>` },
-                    { type: 'mrkdwn', text: `*Workflow run:*\n<${serverUrl}/${repository}/actions/runs/${runId}|View>` }
-                  ]
-                },
-                {
-                  type: 'section',
-                  fields: [
-                    { type: 'mrkdwn', text: `*Author:*\n${prAuthor}` },
-                    { type: 'mrkdwn', text: `*Commit SHA:*\n<${serverUrl}/${repository}/commit/${commitSha}|${commitSha}>` },
-                    { type: 'mrkdwn', text: `*Deployed to:*\n<https://${prNumber}.flowfuse.dev|https://${prNumber}.flowfuse.dev>` },
-                    { type: 'mrkdwn', text: `*Logs:*\n<${logsUrl}|View>` }
-                  ]
-                }
-              ];
-
-              const res = await fetch('https://slack.com/api/chat.postMessage', {
-                method: 'POST',
-                headers: {
-                  Authorization: `Bearer ${token}`,
-                  'Content-Type': 'application/json; charset=utf-8'
-                },
-                body: JSON.stringify({ channel: r.slack_id, blocks })
-              });
-              const data = await res.json();
-              if (!data.ok) {
-                core.warning(`Slack chat.postMessage failed for ${r.github} (${r.slack_id}): ${data.error}`);
-                failures++;
-              } else {
-                core.info(`Notified ${r.github} (${r.role}) at ${r.slack_id}`);
-              }
-            }
-
-            if (failures > 0 && failures === recipients.length) {
-              core.setFailed(`All ${failures} Slack notifications failed`);
-            }
-
-
+          blocks: |
+            [
+              { "type": "header", "text": { "type": "plain_text", "text": "Pull Request ${{ env.PR_NUMBER }} pre-staging deployment", "emoji": true } },
+              { "type": "section", "fields": [
+                { "type": "mrkdwn", "text": "*Status:*\n${{ needs.deploy.result == 'success' && ':white_check_mark: Success' || ':x: Failure' }}" },
+                { "type": "mrkdwn", "text": "*Role:*\n{{ROLE}}" },
+                { "type": "mrkdwn", "text": "*Pull Request:*\n<https://github.com/FlowFuse/flowfuse/pull/${{ env.PR_NUMBER }}|{{PR_TITLE}}>" },
+                { "type": "mrkdwn", "text": "*Workflow run:*\n<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|View>" }
+              ] },
+              { "type": "section", "fields": [
+                { "type": "mrkdwn", "text": "*Author:*\n${{ github.event.pull_request.user.login || 'n/a' }}" },
+                { "type": "mrkdwn", "text": "*Commit SHA:*\n<${{ github.server_url }}/${{ github.repository }}/commit/${{ github.event.pull_request.head.sha }}|${{ github.event.pull_request.head.sha }}>" },
+                { "type": "mrkdwn", "text": "*Deployed to:*\n<https://${{ env.PR_NUMBER }}.flowfuse.dev|https://${{ env.PR_NUMBER }}.flowfuse.dev>" },
+                { "type": "mrkdwn", "text": "*Logs:*\n<{{LOGS_URL}}|View>" }
+              ] }
+            ]
+  
   destroy:
     name: Remove application
     needs: [ validate-user ]