deploy.yml

name: Deploy

on:
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read
  pages: write
  id-token: write

concurrency:
  group: pages
  cancel-in-progress: true

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
      - name: Install dependencies
        run: npm ci
      - name: Verify (phase checks + RFC 9381 known-answer test)
        run: npm run check
      - name: Install Playwright Chromium
        run: npx playwright install --with-deps chromium
      - name: End-to-end + accessibility (axe) test
        run: npm run e2e
      - name: Build
        run: npm run build
      - name: Accessibility gate (axe, WCAG A/AA, both themes)
        run: npm run test:a11y
      - name: Upload pages artifact
        uses: actions/upload-pages-artifact@v3
        with:
          path: ./dist

  deploy:
    needs: build
    runs-on: ubuntu-latest
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    steps:
      - name: Deploy to GitHub Pages
        id: deployment
        uses: actions/deploy-pages@v4