deploy.yml

# Deploys the Worker and the app to Cloudflare on every push to the default
# branch that touches something deployable. Needs two repository secrets:
#   CLOUDFLARE_API_TOKEN   an API token with the "Edit Cloudflare Workers" template
#   CLOUDFLARE_ACCOUNT_ID  the account that owns the Worker
name: deploy

on:
  push:
    branches: [main]
    paths:
      - "worker/**"
      - "shared/**"
      - "web/**"
      - "data/**"
      - "schemas/**"
      - "index.html"
      - "vite.config.ts"
      - "wrangler.jsonc"
      - "package.json"
      - "package-lock.json"
      - ".github/workflows/deploy.yml"
  workflow_dispatch:

concurrency:
  group: deploy
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
      - run: npm ci
      - run: npm test
      - run: npm run check
      - run: npx vite build
      # The action runs every line of `command` as its own wrangler call, so
      # only the commit subject may go into the message, and never a quote.
      - id: commit
        run: echo "subject=$(git log -1 --pretty=%s | tr -d '"')" >> "$GITHUB_OUTPUT"
      - uses: cloudflare/wrangler-action@v3
        with:
          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
          # Shown in the dashboard's version list: which commit, and which workflow run shipped it.
          command: >-
            deploy --tag "${{ github.sha }}"
            --message "${{ github.workflow }} #${{ github.run_number }}: ${{ steps.commit.outputs.subject }}"