deploy-staging.yml

name: Deploy (staging)

on:
  workflow_run:
    workflows: ['Validate'] # must match validate.yml's name
    types: [completed]
    branches: [main]

concurrency:
  group: cf-worker-staging
  cancel-in-progress: true

jobs:
  deploy:
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    runs-on: ubuntu-latest
    environment: staging
    permissions:
      contents: read
      deployments: write
    steps:
      - name: ⬇️ Checkout the validated commit
        uses: actions/checkout@v7
        with:
          ref: ${{ github.event.workflow_run.head_sha }}

      - uses: pnpm/action-setup@v6
      - uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: pnpm

      - name: 📥 Install deps
        run: pnpm i --frozen-lockfile

      - name: 🏗️ Build (inject staging vars)
        env:
          SITE_URL: ${{ vars.SITE_URL }}
          ENV_NAME: staging
          PUBLIC_UMAMI_SITE_ID: ${{ vars.PUBLIC_UMAMI_SITE_ID }}
          PUBLIC_UMAMI_SHARE_URL: ${{ vars.PUBLIC_UMAMI_SHARE_URL}}
          GH_API_TOKEN: ${{ vars.GH_API_TOKEN }}
        run: pnpm build

      - name: 🚀 Deploy with Wrangler
        uses: cloudflare/wrangler-action@v4
        with:
          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
          command: deploy --env staging