name: deploy
on:
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read
  pages: write
  id-token: write

concurrency:
  group: pages
  cancel-in-progress: true

jobs:
  build-deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: npm
      # --ignore-scripts skips the `webgpu` package's install step (prebuilt
      # Google Dawn), which only the CLI renderer and the GPU test suite
      # use; the page build needs nothing from it. Omitting optional deps
      # entirely would also drop the bundler's own platform binding, so
      # they stay. The full suite (which also wants a soundbox checkout and
      # a GPU) runs locally, not here.
      - run: npm ci --ignore-scripts
      # The checked-in instrument files must be exactly the builder's
      # output; regenerate and refuse to deploy drift.
      - run: npm run author
      - run: git diff --exit-code instruments/
      - run: npm run build
      - uses: actions/configure-pages@v5
      - uses: actions/upload-pages-artifact@v3
        with:
          path: dist
      - id: deployment
        uses: actions/deploy-pages@v4