From de883fb79cb883b11a81de01e1ca0ac547c5ba33 Mon Sep 17 00:00:00 2001
From: AI Agent Bot <ai-agent@localhost>
Date: Wed, 25 Feb 2026 03:00:53 -0600
Subject: [PATCH 1/2] ci: deploy GitHub Pages from main-ci workflow on
 self-hosted runner

The static site/ folder can't auto-publish via the default Pages source,
so deploy it as part of the main CI pipeline using actions/deploy-pages.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/main-ci.yml | 32 +++++++++++++++++++++++++++++++-
 1 file changed, 31 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main-ci.yml b/.github/workflows/main-ci.yml
index 1c8cfcc..61bd79a 100644
--- a/.github/workflows/main-ci.yml
+++ b/.github/workflows/main-ci.yml
@@ -326,10 +326,39 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+  # ── Deploy GitHub Pages ────────────────────────────────────────
+  deploy-pages:
+    name: Deploy GitHub Pages
+    needs: ci
+    if: github.ref == 'refs/heads/main'
+    runs-on: self-hosted
+    timeout-minutes: 10
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deploy.outputs.page_url }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: site
+          fetch-depth: 1
+
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: site
+
+      - name: Deploy to GitHub Pages
+        id: deploy
+        uses: actions/deploy-pages@v4
+
   # ── CI Summary ─────────────────────────────────────────────────
   notify:
     name: CI Summary
-    needs: [ci, build-release-binaries, create-release]
+    needs: [ci, build-release-binaries, create-release, deploy-pages]
     if: always()
     runs-on: self-hosted
     steps:
@@ -345,6 +374,7 @@ jobs:
           echo "| CI | ${{ needs.ci.result }} |" >> $GITHUB_STEP_SUMMARY
           echo "| Build Binaries | ${{ needs.build-release-binaries.result }} |" >> $GITHUB_STEP_SUMMARY
           echo "| GitHub Release | ${{ needs.create-release.result }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| GitHub Pages | ${{ needs.deploy-pages.result }} |" >> $GITHUB_STEP_SUMMARY
 
           if [[ "${{ needs.ci.result }}" == "failure" ]]; then
             echo "" >> $GITHUB_STEP_SUMMARY

From 018cc2fdf5f89912be6a9ee78d0b58365ff525da Mon Sep 17 00:00:00 2001
From: AI Review Agent <ai-review-agent@localhost>
Date: Wed, 25 Feb 2026 03:08:55 -0600
Subject: [PATCH 2/2] fix: address AI review feedback (iteration 1)

Automated fix by Claude in response to Gemini/Codex review.

Iteration: 1/5

Co-Authored-By: AI Review Agent <noreply@anthropic.com>
---
 .github/workflows/main-ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/main-ci.yml b/.github/workflows/main-ci.yml
index 61bd79a..9ba35cf 100644
--- a/.github/workflows/main-ci.yml
+++ b/.github/workflows/main-ci.yml
@@ -334,6 +334,7 @@ jobs:
     runs-on: self-hosted
     timeout-minutes: 10
     permissions:
+      contents: read
       pages: write
       id-token: write
     environment: