deploy.yml

name: deploy

on:
  push:
    branches: [main]
  # So a deploy can be re-run from the Actions tab without a new commit.
  workflow_dispatch:

# The token this grants is what the deploy step authenticates with. Pages needs
# both: `pages` to publish and `id-token` for the deployment's provenance.
permissions:
  contents: read
  pages: write
  id-token: write

# Never run two deploys at once. A queued run is allowed to wait, but is not
# cancelled, so the last push to land is the one that ends up live.
concurrency:
  group: pages
  cancel-in-progress: false

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm

      - run: npm ci

      # Typecheck separately from the build. Vite does not typecheck, so
      # without this a type error ships as a working page with a broken part.
      - run: npx tsc -b

      - run: npm run build

      - uses: actions/configure-pages@v5

      - uses: actions/upload-pages-artifact@v3
        with:
          path: dist

  deploy:
    needs: build
    runs-on: ubuntu-latest
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    steps:
      - id: deployment
        uses: actions/deploy-pages@v4