name: deploy
on:
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read
  pages: write
  id-token: write

concurrency:
  group: pages
  cancel-in-progress: true

jobs:
  build-deploy:
    runs-on: ubuntu-latest
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: npm
      # numbl is a `file:../../numbl` dependency: we use its compiler internals
      # (parser, lowerer, IR, inline pass), which its published package `exports`
      # do not expose. Clone it where that relative path expects it. Pinned so a
      # change to those internals cannot silently break the build — the surface we
      # rely on is written down in src/mgpu/numbl.d.ts.
      #
      # numbl's own dependencies are NOT needed: the slice we import is
      # self-contained TypeScript, verified by building against a checkout with no
      # node_modules.
      - name: Check out numbl (sibling dependency)
        env:
          NUMBL_REF: 38ce14046d64d03ecf05cb57def53057a6bc64ab
        run: |
          git clone --filter=blob:none --no-checkout \
            https://github.com/flatironinstitute/numbl.git "$GITHUB_WORKSPACE/../../numbl"
          git -C "$GITHUB_WORKSPACE/../../numbl" checkout --quiet "$NUMBL_REF"
      # --ignore-scripts: npm runs a linked package's `prepare` script, and
      # numbl's is husky, which is not installed here.
      - run: npm ci --ignore-scripts
      - run: npm run test:node
      - run: npm run build
      # Pages must already be enabled with "GitHub Actions" as the source; the
      # workflow token cannot create the site itself (`enablement: true` fails
      # with "Resource not accessible by integration").
      - uses: actions/configure-pages@v5
      - uses: actions/upload-pages-artifact@v3
        with:
          path: dist
      - id: deployment
        uses: actions/deploy-pages@v4