docs.yml

name: Documentation
on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: docs-${{ github.ref }}
  cancel-in-progress: true

jobs:
  yew-starter:
    name: Yew PDF and HTML starter (${{ matrix.os }}, Rust ${{ matrix.rust }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 20
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            rust: '1.85.0'
          - os: windows-latest
            rust: '1.97.0'
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: ${{ matrix.rust }}
          targets: wasm32-unknown-unknown
      - run: |
          python -m pip install --only-binary=:all: -r tools/browser-requirements.txt
      - run: python -m playwright install --with-deps chromium
      - name: Reproduce the download and check native and browser component builds
        run: |
          python tools/build_yew_starter.py
          git diff --exit-code -- docs/assets/yew-starter/project.zip docs/assets/yew-starter/source.json
          python tools/verify_yew_starter.py
      - name: Check the exported HTML and PDF downloads in Chromium
        run: python tools/check_yew_starter_browser.py --root target/yew-starter/documents --output target/yew-starter/browser
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: yew-starter-${{ matrix.os }}-${{ matrix.rust }}
          path: target/yew-starter/
          retention-days: 14
  component-kits:
    name: Component kit composition (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: |
          python -m pip install --only-binary=:all: -r examples/component-kits/requirements-check.txt -r tools/browser-requirements.txt
      - run: python -m playwright install --with-deps chromium
      - name: Reproduce the download and verify PDF and HTML customization
        run: |
          python -m unittest discover -s tools -p test_component_kits_png.py
          python tools/build_component_kits.py
          git diff --exit-code -- docs/assets/component-kits/project.zip docs/assets/component-kits/source.json
          python tools/verify_component_kits.py --check-published
          python tools/check_component_kits_browser.py
      - uses: actions/upload-artifact@v7
        if: always()
        with:
          name: component-kits-${{ matrix.os }}
          path: target/component-kits/
          retention-days: 14
  accessible-showcase:
    name: Accessible component showcase (${{ matrix.channel }}, ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
        channel: [alpha4, alpha5, alpha6, alpha7]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: |
          python -m pip install --only-binary=:all: -r examples/accessible-showcase${{ matrix.channel != 'alpha4' && format('-{0}', matrix.channel) || '' }}/requirements-check.txt
      - name: Rebuild the source kit and reproduce the externally validated PDF
        run: |
          python tools/build_accessible_showcase.py --channel ${{ matrix.channel }}
          git diff --exit-code -- docs/assets/accessible-showcase${{ matrix.channel != 'alpha4' && format('-{0}', matrix.channel) || '' }}/project.zip docs/assets/accessible-showcase${{ matrix.channel != 'alpha4' && format('-{0}', matrix.channel) || '' }}/source.json
          python tools/verify_accessible_showcase.py --channel ${{ matrix.channel }} --out target/accessible-showcase

      - name: Verify the PDF/UA-2 source specimen
        if: matrix.channel == 'alpha7'
        run: python tools/verify_accessible_showcase.py --channel alpha7 --pdf-profile pdfua2 --out target/accessible-showcase-pdfua2
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: accessible-showcase-${{ matrix.channel }}-${{ matrix.os }}
          path: target/accessible-showcase/
          retention-days: 14

      - name: Retain PDF/UA-2 source verification
        if: always() && matrix.channel == 'alpha7'
        uses: actions/upload-artifact@v7
        with:
          name: accessible-showcase-alpha7-${{ matrix.os }}-pdfua2
          path: target/accessible-showcase-pdfua2/
          retention-days: 14
  showcase-authoring:
    name: Showcase authoring comparison (${{ matrix.channel }}, ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
        channel: [alpha4, alpha5, alpha6]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: |
          python -m pip install --only-binary=:all: -r examples/showcase-authoring${{ matrix.channel != 'alpha4' && format('-{0}', matrix.channel) || '' }}/requirements.txt pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
      - name: Rebuild the download and compare both authoring paths
        shell: bash
        run: |
          python tools/build_showcase_authoring.py --channel ${{ matrix.channel }}
          git diff --exit-code -- docs/assets/showcase-authoring${{ matrix.channel != 'alpha4' && format('-{0}', matrix.channel) || '' }}/project.zip docs/assets/showcase-authoring${{ matrix.channel != 'alpha4' && format('-{0}', matrix.channel) || '' }}/source.json
          python tools/verify_showcase_authoring.py --channel ${{ matrix.channel }} --out target/showcase-authoring
          python target/showcase-authoring/project/tools/check_showcase_preview.py --project target/showcase-authoring/project/examples/design_showcase --out target/showcase-authoring/live-preview
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: showcase-authoring-${{ matrix.channel }}-${{ matrix.os }}
          path: target/showcase-authoring/
          retention-days: 14
  component-notebook:
    name: Component notebook (${{ matrix.channel }}, ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
        channel: [alpha3, alpha5, alpha6, alpha6-r1]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: |
          python -m pip install --only-binary=:all: -r tools/component-notebook-requirements.txt
      - name: Execute the notebook and check PDF, HTML and ZIP downloads
        run: python -I tools/verify_component_notebook.py --channel ${{ matrix.channel }} --check-downloads --out target/component-notebook
      - name: Install the optional Jupyter browser test tools
        if: matrix.channel == 'alpha6-r1'
        run: |
          python -m pip install --only-binary=:all: -r tools/component-notebook-browser-requirements.txt
      - name: Edit, run and download in Jupyter Notebook
        if: matrix.channel == 'alpha6-r1'
        run: python -I tools/check_component_notebook_jupyter.py --reference target/component-notebook --out target/component-notebook/browser --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: component-notebook-${{ matrix.channel }}-${{ matrix.os }}
          path: target/component-notebook/
          retention-days: 14
  page-band-notebook:
    name: Report notebook (${{ matrix.channel }}, ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
        channel: [alpha9, alpha10, alpha11]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: |
          python -m pip install --only-binary=:all: -r tools/component-notebook-browser-requirements.txt
      - name: Execute the page-band notebook and inspect PDF, HTML and ZIP files
        run: python -I tools/verify_page_band_notebook.py --channel ${{ matrix.channel }} --notebook examples/${{ matrix.channel == 'alpha9' && 'page-band-notebook-alpha9/component_page_bands.ipynb' || format('styling-notebook-{0}/component_styling.ipynb', matrix.channel) }} --out target/page-band-notebook
      - name: Reproduce the styling notebook and its exact download
        if: matrix.channel != 'alpha9'
        run: |
          python tools/build_styling_notebook.py --channel ${{ matrix.channel }}
          git diff --exit-code -- examples/styling-notebook-${{ matrix.channel }}/component_styling.ipynb docs/assets/styling-notebook-${{ matrix.channel }}/component_styling.ipynb
      - name: Check private notebook process cleanup and isolation
        run: python -I tools/test_notebook_browser_processes.py
      - name: Edit, run and download the page-band notebook in Jupyter
        run: python -I tools/check_page_band_notebook_jupyter.py --reference target/page-band-notebook --out target/page-band-notebook/browser --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: page-band-notebook-${{ matrix.channel }}-${{ matrix.os }}
          path: target/page-band-notebook/
          retention-days: 14
  complete-html:
    name: Complete HTML guide and download (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: python -m pip install fullbleed==2.5.26 pypdf==6.19.0
      - run: python -I tools/verify_complete_html.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: complete-html-${{ matrix.os }}
          path: target/complete-html/
          retention-days: 14
  component-preview:
    name: Experimental component preview (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - name: Install the exact preview wheel without building Rust
        run: python -m pip install --force-reinstall --report component-preview-install.json -r examples/component-preview/requirements-preview.txt
      - name: Install independent verification readers
        run: python -m pip install pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
      - name: Verify the exact example download, editing tasks and guide
        shell: bash
        run: |
          python tools/build_component_preview_starter.py
          git diff --exit-code -- docs/assets/component-preview/project.zip docs/assets/component-preview/source.json examples/component-preview/requirements-preview.txt examples/component-preview/wheels.html
          python tools/verify_component_preview_starter.py --install-report component-preview-install.json
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: experimental-component-source-${{ matrix.os }}
          path: target/component-preview/
          retention-days: 14
  bootstrap-preview:
    name: Static Bootstrap ${{ matrix.channel }} (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
        channel: [preview, alpha, alpha2, alpha3, alpha4, alpha5, alpha6]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - name: Install the exact Bootstrap wheel
        run: python -m pip install --pre --force-reinstall --report bootstrap-install.json -r examples/bootstrap-${{ matrix.channel }}/${{ matrix.channel != 'preview' && 'requirements.txt' || 'requirements-preview.txt' }}
      - name: Install independent verification readers
        run: python -m pip install pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
      - name: Verify the exact Bootstrap download and guide
        shell: bash
        run: |
          python tools/build_bootstrap_preview_starter.py --channel ${{ matrix.channel }}
          git diff --exit-code -- docs/assets/bootstrap-${{ matrix.channel }} examples/bootstrap-${{ matrix.channel }}
          python tools/verify_bootstrap_preview_starter.py --channel ${{ matrix.channel }} --install-report bootstrap-install.json --out target/bootstrap-${{ matrix.channel }}
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: bootstrap-${{ matrix.channel }}-${{ matrix.os }}
          path: target/bootstrap-${{ matrix.channel }}/
          retention-days: 14
  dotnet-components:
    name: C# component download (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '10.0.x'
      - run: python -m pip install pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
      - name: Verify the exact C# download and component guide
        run: |
          python tools/build_dotnet_component_starter.py
          git diff --exit-code -- docs/assets/dotnet-components/project.zip docs/assets/dotnet-components/source.json
          python tools/verify_dotnet_component_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: dotnet-component-download-${{ matrix.os }}
          path: output/dotnet-components-verification/
          retention-days: 14
  node-components:
    name: JavaScript component download (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-node@v6
        with:
          node-version: '22'
          package-manager-cache: false
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: python -m pip install pypdf==6.19.0
      - name: Verify the actual JavaScript and TSX project download
        run: |
          python tools/build_node_component_starter.py
          git diff --exit-code -- docs/assets/node-components/project.zip docs/assets/node-components/source.json
          python tools/verify_node_component_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: node-component-download-${{ matrix.os }}
          path: target/node-component-starter/
          retention-days: 14
  components:
    name: Python component download (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: python -m pip install fullbleed==2.5.25 pypdf==6.19.0
      - name: Verify the actual component project download
        run: |
          python tools/build_component_starter.py
          git diff --exit-code -- docs/assets/components/project.zip docs/assets/components/source.json
          python tools/verify_component_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: component-download-${{ matrix.os }}
          path: target/component-starter/
          retention-days: 14
  laravel-queue:
    name: Laravel PDF queue (PHP ${{ matrix.php }})
    runs-on: ubuntu-24.04
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        php: ['8.4', '8.5']
    steps:
      - uses: actions/checkout@v7
      - uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php }}
          extensions: mbstring, pdo_sqlite
          coverage: none
          tools: composer:2.10.3
      - uses: actions/setup-python@v6
        with:
          python-version: '3.13'
      - name: Install the published engine and independent verifiers
        run: python -m pip install fullbleed==2.5.21 pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0 playwright==1.63.0
      - run: python -m playwright install --with-deps chromium
      - name: Verify the exact Laravel download and real queue lifecycle
        run: |
          python tools/build_laravel_starter.py
          git diff --exit-code -- docs/assets/laravel-starter/project.zip docs/assets/laravel-starter/source.json
          python tools/verify_laravel_starter.py --browser chromium
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: laravel-queue-php-${{ matrix.php }}
          path: |
            output/laravel-verification/*.json
            output/laravel-verification/*.pdf
            output/laravel-verification/*.png
            output/laravel-verification/*.txt
            output/laravel-verification/*.log
            output/laravel-verification/native-preview/
          retention-days: 14
  laravel-platform:
    name: Laravel PHP 8.3 rejection
    runs-on: ubuntu-24.04
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v7
      - uses: shivammathur/setup-php@v2
        with:
          php-version: '8.3'
          extensions: mbstring, pdo_sqlite
          coverage: none
          tools: composer:2.10.3
      - uses: actions/setup-python@v6
        with:
          python-version: '3.13'
      - name: Verify the downloadable starter rejects unsupported PHP before setup
        run: python tools/verify_laravel_platform.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: laravel-php-83-rejection
          path: output/laravel-platform/*.json
          retention-days: 14
  n8n-workflow:
    name: n8n invoice workflow
    runs-on: ubuntu-24.04
    timeout-minutes: 25
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.13'
      - name: Install independent PDF readers and the browser verifier
        run: python -m pip install pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0 playwright==1.63.0
      - run: python -m playwright install --with-deps chromium
      - name: Verify the exact download in the real n8n runtime
        run: |
          python tools/build_n8n_starter.py
          git diff --exit-code -- docs/assets/n8n-starter
          python tools/verify_n8n_starter.py --browser
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: n8n-workflow-verification
          path: output/n8n-verification
          retention-days: 14
  lambda-starter:
    name: Lambda runtime starter (${{ matrix.arch }})
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-24.04
            arch: x86_64
          - os: ubuntu-24.04-arm
            arch: arm64
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.13'
      - uses: docker/setup-buildx-action@v3
      - name: Install the public engine, independent readers, and template validator
        run: |
          python -m pip install --only-binary=:all: fullbleed==2.5.20 pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0 cfn-lint==1.57.2
      - name: Validate CloudFormation and the exact downloadable project
        run: |
          cfn-lint examples/lambda-pdf/template.yaml
          python tools/build_lambda_starter.py
          git diff --exit-code -- docs/assets/lambda-starter/project.zip docs/assets/lambda-starter/source.json
          python tools/verify_lambda_starter.py --docker-arch ${{ matrix.arch }}
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: lambda-verification-${{ matrix.arch }}
          path: output/lambda-verification
          retention-days: 14
  axum:
    name: Axum PDF starter (${{ matrix.os }}, Rust ${{ matrix.rust }})
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            rust: '1.85.0'
          - os: ubuntu-latest
            rust: '1.97.0'
          - os: windows-latest
            rust: '1.97.0'
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: ${{ matrix.rust }}
          components: rustfmt
      - name: Install independent PDF readers and the browser verifier
        run: python -m pip install pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0 playwright==1.63.0
      - name: Install the verification browser
        run: python -m playwright install --with-deps chromium
      - name: Verify the exact ZIP, real HTTP endpoint, and browser downloads
        run: |
          python tools/build_axum_starter.py
          git diff --exit-code -- docs/assets/axum-starter/project.zip docs/assets/axum-starter/source.json
          python tools/verify_axum_starter.py --browser chromium --toolchain ${{ matrix.rust }}
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: axum-verification-${{ matrix.os }}-${{ matrix.rust }}
          path: output/axum-verification
          retention-days: 14
  numbered-report:
    name: Numbered report (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - name: Install the public engine and independent PDF readers
        run: |
          python -m pip install --only-binary=:all: -r examples/numbered-report/requirements.txt pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
      - name: Verify the exact download and edited section numbering
        run: |
          python tools/build_numbered_report.py
          git diff --exit-code -- docs/assets/numbered-report/project.zip docs/assets/numbered-report/source.json
          python tools/verify_numbered_report.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: numbered-report-verification-${{ matrix.os }}
          path: output/numbered-report-verification
          retention-days: 14
  streamlit:
    name: Streamlit PDF app (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.11'
      - name: Install the public app packages and verification tools
        run: |
          python -m pip install --only-binary=:all: -r examples/streamlit-report/requirements.txt pypdf==6.19.0 pypdfium2==5.14.0 pillow==12.3.0 playwright==1.63.0
          python -m playwright install --with-deps chromium
      - name: Verify early browser failure evidence and error preservation
        run: python tools/verify_streamlit_startup_evidence.py --browser chromium
      - name: Verify the downloaded app, PDFs and browser sessions
        run: |
          python tools/build_streamlit_starter.py
          git diff --exit-code -- docs/assets/streamlit-report/project.zip docs/assets/streamlit-report/source.json
          python tools/verify_streamlit_starter.py --browser chromium
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: streamlit-verification-${{ matrix.os }}
          path: |
            output/streamlit-verification/*.json
            output/streamlit-verification/*.txt
            output/streamlit-verification/*.pdf
            output/streamlit-verification/*.png
            output/streamlit-verification/*.log
            output/streamlit-verification/*.html
            output/streamlit-startup-controls/
          retention-days: 14
  pandas-components:
    name: pandas component report (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - run: |
          python -m pip install --only-binary=:all: -r examples/pandas-components/requirements-check.txt
      - name: Rebuild the source kit and inspect its actual saved PDFs
        shell: bash
        run: |
          python tools/build_pandas_components.py
          git diff --exit-code -- docs/assets/pandas-components/project.zip docs/assets/pandas-components/source.json
          python tools/verify_pandas_components.py --out target/pandas-components
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: pandas-component-report-${{ matrix.os }}
          path: target/pandas-components/
          retention-days: 14
  matplotlib:
    name: Matplotlib report (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - name: Install the public engine, chart dependencies and independent readers
        run: |
          python -m pip install --only-binary=:all: -r examples/matplotlib-report/requirements.txt pypdf==6.19.0 pypdfium2==5.14.0
      - name: Verify the actual chart-report ZIP and guide
        run: |
          python tools/build_matplotlib_starter.py
          git diff --exit-code -- docs/assets/matplotlib-report/project.zip docs/assets/matplotlib-report/source.json
          python tools/verify_matplotlib_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: matplotlib-verification-${{ matrix.os }}
          path: |
            output/matplotlib-verification/*.json
            output/matplotlib-verification/*.txt
            output/matplotlib-verification/*.png
            output/matplotlib-verification/render/
            output/matplotlib-verification/edited/
          retention-days: 14
  arabic:
    name: Arabic and English example (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - name: Install the public engine and independent PDF readers
        run: |
          python -m pip install --only-binary=:all: -r examples/arabic-invoice/requirements.txt pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
      - name: Verify the actual ZIP, fonts, guide, and customized PDF
        run: |
          python tools/build_arabic_example.py
          git diff --exit-code -- docs/assets/arabic-invoice/project.zip docs/assets/arabic-invoice/source.json
          python tools/verify_arabic_example.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: arabic-verification-${{ matrix.os }}
          path: |
            output/arabic-verification/*.json
            output/arabic-verification/*.txt
            output/arabic-verification/*.png
            output/arabic-verification/render/
            output/arabic-verification/edited/
          retention-days: 14
  rust-download:
    name: Rust starter (Windows)
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: '1.97.0'
          components: rustfmt
      - run: python -m pip install pypdf==6.19.0 Pillow==12.3.0
      - name: Verify the actual standalone Rust download
        run: python tools/verify_rust_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: rust-starter-verification-Windows
          path: output/rust-starter-verification
          retention-days: 14
  markdown:
    name: Markdown starter (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - name: Install the public engine and independent verification tools
        run: |
          python -m pip install --only-binary=:all: -r examples/markdown/requirements.txt pypdf==6.19.0 pypdfium2==5.14.0 fonttools==4.65.0 Pillow==12.3.0
      - name: Verify the actual ZIP, CLI, fonts, images, and PDF
        run: python tools/verify_markdown_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: markdown-verification-${{ matrix.os }}
          path: |
            output/markdown-verification/*.json
            output/markdown-verification/*.txt
            output/markdown-verification/*.png
            output/markdown-verification/render/
            output/markdown-verification/edited/
            output/markdown-verification/images/
            output/markdown-verification/extra-font/
          retention-days: 14
  chinese:
    name: Chinese-font example (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - name: Install the public engine and independent verification tools
        run: |
          python -m pip install --only-binary=:all: -r examples/chinese-invoice/requirements.txt -r examples/chinese-invoice/requirements-fonts.txt pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
      - name: Verify the actual ZIP, prepared font, guide and PDF
        run: python tools/verify_chinese_example.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: chinese-font-verification-${{ matrix.os }}
          path: |
            output/chinese-verification/*.json
            output/chinese-verification/*.txt
            output/chinese-verification/*.png
            output/chinese-verification/render/
            output/chinese-verification/edited/
            output/chinese-verification/missing/
          retention-days: 14
  aspnet:
    name: ASP.NET starter (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '10.0.x'
      - run: python -m pip install pypdf==6.1.1
      - name: Verify the actual ZIP and isolated publish output
        run: python tools/verify_aspnet_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: aspnet-verification-${{ matrix.os }}
          path: |
            output/aspnet-verification/*.json
            output/aspnet-verification/*.txt
            output/aspnet-verification/*.log
            output/aspnet-verification/preview/*
          retention-days: 14
  tagged-notice:
    name: C# tagged notice (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '10.0.x'
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '21'
      - run: python -m pip install pypdf==6.19.0
      - name: Verify the downloaded ZIP and isolated published tagged notice
        run: python tools/verify_dotnet_accessibility.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: dotnet-accessibility-verification-${{ matrix.os }}
          path: |
            output/dotnet-accessibility-verification/verification.json
            output/dotnet-accessibility-verification/*.txt
            output/dotnet-accessibility-verification/ua1/
            output/dotnet-accessibility-verification/ua2/
          retention-days: 14
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: '3.12'
          cache: pip
      - uses: actions/setup-node@v6
        with:
          node-version: '22'
      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: '1.97.0'
          targets: wasm32-wasip1
          components: rustfmt
      - run: python -m pip install -r requirements.txt
      - run: python tools/build_playground.py
      - run: node tools/verify_playground.mjs
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: playground-native-evidence
          path: |
            playground/verification/*.json
            playground/verification/*.html
            playground/verification/*.css
            playground/verification/**/*.pdf
            playground/verification/**/*.png
          retention-days: 7
      - name: Verify downloadable playground projects
        run: |
          python -m pip install fullbleed==2.5.29 pypdf==6.19.0
          node tools/verify_project_export.mjs
          python -I tools/verify_project_export.py
          python -I tools/verify_node_project_export.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: playground-project-verification
          path: |
            playground/project-verification
            !playground/project-verification/**/node_modules/**
            !playground/project-verification/node-npm-cache/**
          retention-days: 7
      - name: Compile and render the Rust quickstart examples
        run: python tools/verify_rust_examples.py
      - name: Verify the actual standalone Rust download
        run: |
          python -m pip install Pillow==12.3.0
          python tools/build_rust_starter.py
          git diff --exit-code -- docs/assets/rust-starter
          python tools/verify_rust_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: rust-starter-verification-Linux
          path: output/rust-starter-verification
          retention-days: 14
      - name: Verify the downloadable PDF regression starter
        run: |
          python -m venv output/pdf-regression-env
          output/pdf-regression-env/bin/python -m pip install --only-binary=:all: fullbleed==2.5.3
          python tools/check_ci_starter.py --python "$PWD/output/pdf-regression-env/bin/python"
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: pdf-regression-download-verification
          path: output/pdf-regression-verification
          retention-days: 7
      - name: Verify the introductory Python examples
        run: |
          python -m venv output/reference-env
          output/reference-env/bin/python -m pip install --only-binary=:all: fullbleed==2.5.34
          output/reference-env/bin/python -I tools/verify_quickstarts.py
      - name: Verify the downloadable Node invoice and guide
        run: python tools/verify_node_examples.py
      - name: Verify the Node queue download and guide
        run: |
          python -m pip install pypdf==6.19.0 pypdfium2==5.14.0
          python tools/build_node_queue.py
          git diff --exit-code -- docs/assets/node-queue/project.zip docs/assets/node-queue/source.json
          python tools/verify_node_queue.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: node-queue-verification
          path: |
            output/node-queue-verification/*.json
            output/node-queue-verification/*.txt
            output/node-queue-verification/**/*.pdf
            output/node-queue-verification/**/*.png
          retention-days: 14
      - name: Verify the downloadable Python web starter and actual HTTP servers
        run: python tools/verify_python_web_starter.py --docker
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: python-web-starter-verification
          path: |
            output/python-web-verification/*.json
            output/python-web-verification/*.log
            output/python-web-verification/checks
            output/python-web-verification/docker
          retention-days: 14
      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '10.0.x'
      - name: Install and execute the C# guide and invoice from NuGet
        run: |
          python -m pip install pypdf==6.1.1
          python tools/verify_dotnet_examples.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: dotnet-guide-verification
          path: output/dotnet-verification
          retention-days: 14
      - name: Build and exercise the downloadable Next.js starter
        run: python tools/verify_nextjs_starter.py
      - name: Verify the locked Workers invoice download in local workerd
        run: |
          python -m pip install pypdf==6.19.0 pillow==12.3.0
          python tools/build_cloudflare_starter.py
          git diff --exit-code -- docs/assets/cloudflare-starter/project.zip docs/assets/cloudflare-starter/source.json
          python tools/verify_cloudflare_starter.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: cloudflare-starter-verification
          path: |
            output/cloudflare-starter-verification/*.json
            output/cloudflare-starter-verification/*.log
            output/cloudflare-starter-verification/*.pdf
            output/cloudflare-starter-verification/*.png
          retention-days: 14
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: nextjs-download-verification
          path: |
            output/nextjs-verification/*.json
            output/nextjs-verification/*.txt
            output/nextjs-verification/*.log
            output/nextjs-verification/*.pdf
            output/nextjs-verification/*.png
          retention-days: 14
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: node-guide-verification
          path: |
            output/node-verification/*.json
            output/node-verification/*.txt
            output/node-verification/**/*.pdf
            output/node-verification/**/*.png
          retention-days: 7
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: quickstart-verification
          path: output/quickstart-verification
          retention-days: 7
      - uses: actions/upload-artifact@v4
        with:
          name: rust-quickstart-verification
          path: examples/rust/verification
      - uses: actions/upload-artifact@v4
        with:
          name: playground-verification
          path: |
            docs/assets/playground/build.json
            docs/assets/playground/verification.json
      - name: Verify renderer comparison downloads and published measurements
        run: |
          python -m pip install pypdf==6.19.0 pypdfium2==5.14.0 Pillow==12.3.0
          python tools/verify_renderer_comparison.py
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: renderer-comparison-verification
          path: output/renderer-comparison-verification/verification.json
          retention-days: 14
      - name: Build the downloadable browser starter and test its static demo
        run: |
          sudo python3 - <<'PY'
          from pathlib import Path
          path = Path('/etc/apt/apt-mirrors.txt')
          if path.is_file():
              lines = path.read_text().splitlines()
              if any(line.startswith('https://archive.ubuntu.com/ubuntu') for line in lines):
                  path.write_text('\n'.join(line for line in lines if 'azure.archive.ubuntu.com' not in line) + '\n')
          PY
          python -m pip install -r tools/browser-requirements.txt
          python -m playwright install --with-deps chrome
          python tools/build_browser_starter.py
          python tools/check_online_starter.py browser
          python tools/check_browser_starter.py --dist docs/assets/browser-demo --out output/browser-starter-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: browser-starter-verification
          path: |
            output/browser-starter/*.json
            output/browser-starter/*.log
            output/browser-starter-ui/
            output/browser-online/
          retention-days: 14
      - name: Build the exact React starter ZIP and check its live-preview workflow
        run: |
          python tools/build_react_starter.py
          python tools/check_online_starter.py react
          python tools/check_react_starter.py --dist docs/assets/react-demo --out output/react-starter-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: react-starter-verification
          path: |
            output/react-starter/*.json
            output/react-starter/*.log
            output/react-starter-ui/
            output/react-online/
          retention-days: 14
      - name: Build the exact Vue starter ZIP and check reactive previews
        run: |
          python tools/build_vue_starter.py
          python tools/check_online_starter.py vue
          python tools/check_vue_starter.py --dist docs/assets/vue-demo --out output/vue-starter-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: vue-starter-verification
          path: |
            output/vue-starter/*.json
            output/vue-starter/*.log
            output/vue-starter-ui/
            output/vue-online/
          retention-days: 14
      - run: python -m mkdocs build --strict
      - name: Materialize the verified published-wheel CSS evidence
        run: python tools/prepare_css_corpus_site.py site
      - run: python tools/check_site.py site
      - name: Verify pandas component downloads and both standalone HTML exports
        run: python tools/check_pandas_components_browser.py --site site --out output/pandas-components-browser
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: pandas-components-browser-verification
          path: output/pandas-components-browser/
          retention-days: 14
      - name: Verify the experimental guide and its visible downloads
        run: python tools/check_component_preview_ui.py --site site --out output/component-preview-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: component-preview-browser-verification
          path: output/component-preview-ui/
          retention-days: 14
      - name: Verify CSS evidence filters, shared links and actual PDF downloads
        run: python tools/check_css_explorer.py --site site --out output/css-explorer-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: css-explorer-browser-verification
          path: output/css-explorer-ui/
          retention-days: 14
      - name: Verify the paired authoring guide, source tabs and downloads
        run: python tools/check_showcase_authoring_ui.py --site site --out output/showcase-authoring-ui --browser chrome
      - name: Verify the accessible showcase and its PDF, HTML and source downloads
        run: python tools/check_accessible_showcase_ui.py --site site --out output/accessible-showcase-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: accessible-showcase-browser-verification
          path: output/accessible-showcase-ui/
          retention-days: 14
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: showcase-authoring-browser-verification
          path: output/showcase-authoring-ui/
          retention-days: 14
      - name: Verify live component previews and browser downloads
        run: |
          python -m venv output/showcase-live-env
          output/showcase-live-env/bin/python -m pip install --only-binary=:all: -r examples/showcase-authoring-alpha6/requirements.txt
          python examples/showcase-authoring-alpha6/tools/check_showcase_preview_browser.py --project examples/showcase-authoring-alpha6/examples/design_showcase --python output/showcase-live-env/bin/python --out output/showcase-live-ui --channel chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: showcase-live-preview-browser
          path: output/showcase-live-ui/
          retention-days: 14
      - name: Verify the Bootstrap guide and standalone HTML downloads
        run: python tools/check_bootstrap_preview_ui.py --site site --out output/bootstrap-preview-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: bootstrap-preview-browser-verification
          path: output/bootstrap-preview-ui/
          retention-days: 14
      - name: Verify the component notebook page and its real download
        run: python tools/check_component_notebook_ui.py --site site --out output/component-notebook-ui --browser chrome --verify-published-source
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: component-notebook-browser-verification
          path: output/component-notebook-ui/
          retention-days: 14
      - name: Verify the component styling tutorial and its real downloads
        run: python tools/check_component_styling_ui.py --site site --out output/component-styling-ui --browser chrome --verify-published-source
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: component-styling-browser-verification
          path: output/component-styling-ui/
          retention-days: 14
      - name: Verify the built playground PDF and project downloads
        run: python tools/check_playground_ui.py --site site --out output/playground-ui --browser chrome
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: playground-browser-verification
          path: output/playground-ui/
          retention-days: 14
      - name: Include search notification ownership file
        if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
        env:
          INDEXNOW_KEY: ${{ secrets.INDEXNOW_KEY }}
        run: |
          python - <<'PY'
          import os
          import re
          from pathlib import Path
          key = os.environ.get("INDEXNOW_KEY", "")
          if key:
              if not re.fullmatch(r"[A-Za-z0-9-]{8,128}", key):
                  raise SystemExit("Invalid IndexNow ownership key format")
              Path("site", key + ".txt").write_text(key, encoding="utf-8")
          PY
      - uses: actions/upload-pages-artifact@v4
        if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
        with:
          path: site
  deploy:
    if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
    needs: [build, yew-starter, component-kits, accessible-showcase, showcase-authoring, component-notebook, page-band-notebook, complete-html, component-preview, bootstrap-preview, components, node-components, dotnet-components, aspnet, chinese, arabic, markdown, tagged-notice, rust-download, matplotlib, pandas-components, numbered-report, axum, lambda-starter, n8n-workflow, laravel-queue, laravel-platform, streamlit]
    runs-on: ubuntu-latest
    permissions:
      pages: write
      id-token: write
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    steps:
      - uses: actions/deploy-pages@v4
        id: deployment