deploy.yml

name: Deploy to Firebase

on:
  push:
    branches: [master]

concurrency:
  group: deploy-prod
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version-file: .nvmrc
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Install functions dependencies
        working-directory: functions
        run: npm ci

      - name: Build production app
        run: npm run build:prod

      - name: Authenticate to Google Cloud
        env:
          FIREBASE_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT }}
        run: |
          if [ -z "$FIREBASE_SERVICE_ACCOUNT" ]; then
            echo "Missing FIREBASE_SERVICE_ACCOUNT repository secret."
            exit 1
          fi
          echo "$FIREBASE_SERVICE_ACCOUNT" > "${RUNNER_TEMP}/firebase-service-account.json"
          echo "GOOGLE_APPLICATION_CREDENTIALS=${RUNNER_TEMP}/firebase-service-account.json" >> "$GITHUB_ENV"

      - name: Deploy to Firebase
        run: npx firebase deploy -P prod --non-interactive --force