{"path":".github/workflows/deploy.yml","size":1344,"locked":false,"binary":false,"truncated":false,"content":"name: Deploy (manual)\n\n# INTENTIONALLY manual-trigger only (workflow_dispatch), NOT on push to main.\n#\n# Why: `anchr deploy` signs and sends a real Solana transaction\n# (lib/sns.js) using ANCHR_WALLET_SECRET_KEY. Auto-firing that on every\n# push to main — before the SNS write path has been verified on devnet —\n# risks sending unintended on-chain transactions from CI. Automating this\n# on push is a Week 3 roadmap item (see docs/ROADMAP.md), to be enabled\n# only after the devnet verification in README.md's \"Before running\n# against a real domain\" section has been done.\n#\n# Required repo secrets (Settings → Secrets and variables → Actions):\n#   ANCHR_STORACHA_KEY\n#   ANCHR_STORACHA_PROOF\n#   ANCHR_WALLET_SECRET_KEY\n#   ANCHR_SOLANA_RPC_URL (optional)\n\non:\n  workflow_dispatch:\n\njobs:\n  deploy:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v7\n\n      - uses: actions/setup-node@v6\n        with:\n          node-version-file: '.nvmrc'\n          cache: 'npm'\n\n      - run: npm install\n      - run: node bin/anchr.js deploy\n        env:\n          ANCHR_STORACHA_KEY: ${{ secrets.ANCHR_STORACHA_KEY }}\n          ANCHR_STORACHA_PROOF: ${{ secrets.ANCHR_STORACHA_PROOF }}\n          ANCHR_WALLET_SECRET_KEY: ${{ secrets.ANCHR_WALLET_SECRET_KEY }}\n          ANCHR_SOLANA_RPC_URL: ${{ secrets.ANCHR_SOLANA_RPC_URL }}\n"}