deploy-cloudflare.yml

name: Deploy to Cloudflare Pages

# Auto-deploys app.kernelcad.com on every push.
#
# kernelcad.com is deployed to the kernelcad-marketing Cloudflare Pages
# project by the private kernelCAD-server workflow. Keep that deploy path
# single-owned so public pushes cannot race or overwrite the production
# marketing site and its Pages Functions bindings.

on:
  push:
    branches:
      - main
      - develop
      - feat/kernelcad-website
    tags:
      - 'v*'
  workflow_dispatch:

concurrency:
  group: cloudflare-${{ github.ref }}
  cancel-in-progress: true

jobs:
  app:
    name: Deploy visual debugger app
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version-file: .nvmrc
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Build Vite app (root-rooted base path for app.kernelcad.com)
        env:
          VITE_BASE_PATH: /
          VITE_SUPABASE_URL: ${{ secrets.VITE_SUPABASE_URL }}
          VITE_SUPABASE_ANON_KEY: ${{ secrets.VITE_SUPABASE_ANON_KEY }}
          VITE_API_BASE_URL: ${{ secrets.VITE_API_BASE_URL }}
          # GitHub OAuth provider is registered and enabled in Supabase Auth.
          VITE_GITHUB_AUTH_ENABLED: 'true'
          # Paid launch 2026-07-02: server-side ENABLE_IN_APP_AGENT is on and
          # billing is live; without this build flag inAppAgentEnabled() hides
          # the whole StudioGenerate UI (agent prompt + 3D concept preview).
          VITE_ENABLE_IN_APP_AGENT: 'true'
        run: npm run build

      - name: Deploy to Cloudflare Pages (kernelcad-app)
        uses: cloudflare/wrangler-action@v3
        with:
          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
          wranglerVersion: '4.94.0'
          command: pages deploy dist --project-name=kernelcad-app --branch=main --commit-dirty=true --skip-caching