# Firebase go-live status (arafstore-14938)

Last automated check: local scripts passed.

## Completed locally

- [x] Service account JSON in 4 paths (api, super-admin, deploy bundle x2)
- [x] Client config matches PHP bootstrap
- [x] `deploy/firebase-server-files.zip` ready for upload
- [x] `api/firebase-smoke-test.php` for server OAuth test
- [x] WhatsApp transfer copy of JSON deleted from this machine

## You must do manually

### Firebase Console

See [FIREBASE_CONSOLE_CHECKLIST.md](FIREBASE_CONSOLE_CHECKLIST.md):

- Realtime Database (US URL)
- Email/Password Auth
- Authorized domains
- Publish [database.rules.json](database.rules.json)

### Production server

1. Upload and extract [deploy/firebase-server-files.zip](deploy/firebase-server-files.zip) at document root
2. `chmod 600` on both `firebase-service-account.local.json` files
3. Run: `php api/firebase-smoke-test.php` → expect `OK`

### End-to-end

See [E2E_TEST_CHECKLIST.md](E2E_TEST_CHECKLIST.md)

### Security (required)

Key `7b344d0c41...` was shared via chat. After go-live, rotate per [FIREBASE_KEY_ROTATION.md](FIREBASE_KEY_ROTATION.md):

```powershell
.\scripts\check-key-rotation-reminder.ps1
```

## Quick commands

```powershell
.\scripts\firebase-go-live.ps1
.\scripts\prepare-production-upload.ps1
```
