Single CI workflow: test → (deploy + dist) in parallel

Before: `deploy.yml` and `ci.yml` ran independently on every push. A
broken library build wouldn't block a site deploy, and a broken site
build wouldn't block a dist publish.

Now one workflow: `build-and-test` runs first (library `pnpm build`);
if it passes, `build-site`/`deploy-site` and `build-dist` fan out in
parallel. PR pushes stop at `build-and-test`.

Also fix the dist branch: npm-dist's `preserve_dirs` mode *replaces*
the built output with only the preserved source dirs (found by
inspecting the first dist-branch run — it had react/ + package.json
but no index.js, and the package.json pointed `main` at the missing
file). Fix: the `build` script copies `react/` into `dist/react/` as a
post-build step, so dist/ is a single self-contained tree; drop
`preserve_dirs: react`, default flattening then does the right thing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: ryan-williams

.github/workflows/ci.yml

@@ -6,6 +6,15 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: true
+
 jobs:
   build-and-test:
     runs-on: ubuntu-latest
@@ -21,12 +30,43 @@ jobs:
       - run: pnpm install --frozen-lockfile
       - run: pnpm build
 
+  build-site:
+    needs: build-and-test
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 10
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: cd site && pnpm build
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: site/dist
+
+  deploy-site:
+    needs: build-site
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - id: deployment
+        uses: actions/deploy-pages@v4
+
   build-dist:
     needs: build-and-test
     if: github.ref == 'refs/heads/main'
     uses: runsascoded/npm-dist/.github/workflows/build-dist.yml@v1
     with:
-      preserve_dirs: react
+      # `dist/` includes built src/ + a copy of react/ (see `build` in package.json).
+      # Default mode (no preserve_dirs) flattens dist/* to the dist branch root.
       exports_map: '{"./src/index.ts": {"types": "./index.d.ts", "import": "./index.js"}}'
       pkg_kvs: |
         {

.github/workflows/deploy.yml

@@ -18,7 +18,7 @@
     "react"
   ],
   "scripts": {
-    "build": "vite build",
+    "build": "vite build && cp -r react dist/react",
     "clean": "rm -rf node_modules/.vite dist",
     "dev": "cd site && vite",
     "test": "vitest run",