deploy.yml

name: Deploy

permissions:
  contents: read

on:
  push:
    tags:
      - "*"
  workflow_dispatch:

jobs:
  deploy:
    name: Build and deploy
    runs-on: ubuntu-latest
    env:
      PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: "1"
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0

      # A manual (workflow_dispatch) run checks out whatever ref the UI's
      # branch/tag picker was left on — pin it onto the most recent tag so a
      # manual test run always deploys the same thing a real tag push would.
      - name: Pin to most recent tag (manual runs only)
        if: github.event_name == 'workflow_dispatch'
        run: |
          latest_tag=$(git describe --tags "$(git rev-list --tags --max-count=1)")
          echo "Checking out most recent tag: $latest_tag"
          git checkout "$latest_tag"

      - uses: actions/setup-node@v7
        with:
          node-version: 24
          cache: npm

      - run: npm ci

      # `build`'s own `prebuild` hook fetches the online WAD catalog (~170 MB,
      # see onlineWadCatalog.ts) if not already present — same cache as the
      # verify workflow, so a normal run restores from cache instead of
      # re-downloading from 3 external hosts.
      - name: Cache online WAD assets
        uses: actions/cache@v6
        with:
          path: public/wads
          key: online-wads-${{ hashFiles('src/wad/onlineWadCatalog.ts') }}

      # VITE_MULTIPLAYER_SERVER_URL is baked in at build time (see
      # doc/dev/multiplayer-deployment.md#2-client-build-pointed-at-the-signaling-server).
      # Local production builds pick it up from the gitignored
      # .env.production.local; CI has no such file, so it's hardcoded here
      # instead — it's not a secret, it ends up in the public JS bundle
      # either way. Without it the deployed build ships with multiplayer
      # unconfigured (the Multiplayer tab silently hides itself).
      - run: npm run build
        env:
          VITE_MULTIPLAYER_SERVER_URL: "https://mp.codeenstein3d.mcdope.org"

      - name: Deploy to FTP
        uses: SamKirkland/FTP-Deploy-Action@v4.4.0
        with:
          server: ${{ secrets.DEPLOY_HOST }}
          username: ${{ secrets.DEPLOY_USER }}
          password: ${{ secrets.DEPLOY_PASS }}
          protocol: ftps
          local-dir: ./dist/
          server-dir: ./