Auth migration and the first deploy path

milestone auth, deploy, platform

Identity and delivery are unglamorous, yet they decide whether a management sim is a laptop demo or a shared world. Mid-April’s stake was twofold: managers needed a sign-in path we could own end-to-end, and the stack needed a deploy path that was not a collection of tribal SSH habits.

What shipped, on the product side, was a migration from Clerk to Firebase Auth across API and client — token verification, profile sync, email/password and Google sign-in, and an onboarding trigger that still fired when a new manager arrived. On the delivery side, the same day brought the first Terraform-and-Actions shape for DNS, Pages, object storage, and API hosting, with host configuration treated as environment configuration rather than something buried where it did not belong. In simple terms: people could create accounts against a stack we could actually publish.

The challenges were coordination and humility. Auth migrations punish race conditions (signup versus profile provisioning) more than they punish missing buttons, and deploy scaffolding invites over-specificity about infrastructure that a public diary should not recite. We tightened access controls and locked down public ops surfaces at the level the product required, without turning this entry into a runbook. The strength of Firebase for this stage was a clear emulator story for local development and a familiar claim model for later admin tooling. The drawback was another identity rewrite in a young codebase — paid once so that subsequent FA and manager surfaces shared one notion of “who is this person.”

Paths not taken included staying on Clerk while “we focus on gameplay,” or postponing any automated deploy until the product felt finished. The first would have deferred a migration that only gets harder; the second would have left staging as folklore.

What it unlocked was every authenticated loop afterward — including the FA admin console — and a deploy path that later hardening and role splits could refine rather than invent from scratch.

← All entries