chore: sync shared website updates into v13

.gitattributes

@@ -1,4 +1,4 @@
 *.res linguist-language=ReScript
 *.resi linguist-language=ReScript
 
-/public/playground-bundles/**  binary linguist-vendored
+/apps/docs/public/playground-bundles/**  binary linguist-vendored

.github/scripts/clean-tracked-rescript-output.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# rescript clean only knows sources that still belong to the build. Identify
+# tracked compiler output from the index so deleted/excluded sources are covered,
+# while handwritten JavaScript and configuration remain untouched.
+git ls-files -z -- '*.jsx' '*.mjs' |
+  while IFS= read -r -d '' output; do
+    committed=$(git show ":$output")
+    if [[ "$committed" == "// Generated by ReScript,"* ]]; then
+      rm -f -- "$output"
+    fi
+  done

.github/scripts/deployment-environment.sh

@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Keep the v13 custom domain on its Pages preview branch, including explicit
+# releases from workflow_dispatch. Other branches keep isolated preview aliases.
+if [[ "$RAW_BRANCH" == "v13" ]] && {
+  [[ "${GITHUB_EVENT_NAME:-}" == "push" ]] ||
+  [[ "${GITHUB_EVENT_NAME:-}" == "workflow_dispatch" && "${DEPLOY_ENVIRONMENT:-}" == "production" ]];
+}; then
+  {
+    echo "SAFE_BRANCH=v13"
+    echo "DOCS_DEPLOYMENT_ENVIRONMENT=preview"
+    echo "VITE_DEPLOYMENT_URL=https://v13.rescript-lang.org"
+    echo "DOCS_DEPLOYMENT_URL=https://v13.rescript-lang.org"
+  } >> "$GITHUB_ENV"
+  exit 0
+fi
+
+# Pages selects production by branch. Manual previews of master must use a
+# preview alias, while a manual production deploy must explicitly target master.
+if [[ "${GITHUB_EVENT_NAME:-}" == "push" && "$RAW_BRANCH" == "master" ]] ||
+   [[ "${GITHUB_EVENT_NAME:-}" == "workflow_dispatch" && "${DEPLOY_ENVIRONMENT:-}" == "production" ]]; then
+  {
+    echo "SAFE_BRANCH=master"
+    echo "DOCS_DEPLOYMENT_ENVIRONMENT=production"
+    echo "VITE_DEPLOYMENT_URL="
+    echo "DOCS_DEPLOYMENT_URL=https://rescript-lang.org"
+  } >> "$GITHUB_ENV"
+else
+  SANITIZED_BRANCH=$(echo "$RAW_BRANCH" | tr '[:upper:]' '[:lower:]' | sed -E 's/[^a-z0-9-]+/-/g; s/^-+//; s/-+$//; s/-+/-/g')
+  BRANCH_PREFIX="${SANITIZED_BRANCH:0:19}"
+  BRANCH_PREFIX="${BRANCH_PREFIX:-preview}"
+  BRANCH_DIGEST=$(node --input-type=module -e '
+    import {createHash} from "node:crypto";
+    process.stdout.write(createHash("sha256").update(process.env.RAW_BRANCH).digest("hex").slice(0, 8));
+  ')
+  SAFE_BRANCH="${BRANCH_PREFIX}-${BRANCH_DIGEST}"
+  {
+    echo "SAFE_BRANCH=$SAFE_BRANCH"
+    echo "DOCS_DEPLOYMENT_ENVIRONMENT=preview"
+    echo "VITE_DEPLOYMENT_URL=https://${SAFE_BRANCH}.rescript-lang.pages.dev"
+    echo "DOCS_DEPLOYMENT_URL=https://${SAFE_BRANCH}.rescript-lang.pages.dev"
+  } >> "$GITHUB_ENV"
+fi

.github/scripts/homepage-e2e.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Serve the production docs build on Cypress's fixed test port, wait until it is
+# reachable, then run the homepage E2E command with any caller-provided options.
+# The static server otherwise silently selects a different occupied port.
+node --input-type=module -e '
+  import {createServer} from "node:net";
+  const server = createServer();
+  server.once("error", () => {
+    console.error("Port 4173 must be free before running homepage tests");
+    process.exitCode = 1;
+  });
+  server.listen(4173, "127.0.0.1", () => server.close());
+'
+
+SERVER=$(node --input-type=module -e 'import {fileURLToPath} from "node:url"; console.log(fileURLToPath(import.meta.resolve("@node-cli/static-server")))')
+node "$SERVER" --host 127.0.0.1 --port 4173 build/client &
+SERVER_PID=$!
+trap 'kill "$SERVER_PID" 2>/dev/null || true; wait "$SERVER_PID" 2>/dev/null || true' EXIT
+
+for _ in {1..30}; do
+  if curl --fail --silent --max-time 2 http://127.0.0.1:4173/ > /dev/null; then
+    yarn ci:test:e2e "$@"
+    exit 0
+  fi
+  kill -0 "$SERVER_PID"
+  sleep 1
+done
+
+echo "Homepage test server did not become ready" >&2
+exit 1

.github/scripts/lighthouse-cleanup.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Remove older Lighthouse artifacts for this branch after preserving the
+# artifact uploaded by the current workflow run.
+gh api --method GET \
+  "/repos/${GITHUB_REPOSITORY}/actions/artifacts" \
+  -f name="$LIGHTHOUSE_ARTIFACT_NAME" \
+  -f per_page=100 \
+  --jq '.artifacts[].id' | while read -r ARTIFACT_ID; do
+    if [[ "$ARTIFACT_ID" != "$CURRENT_ARTIFACT_ID" ]]; then
+      gh api --method DELETE "/repos/${GITHUB_REPOSITORY}/actions/artifacts/${ARTIFACT_ID}"
+    fi
+  done

.github/scripts/lighthouse-environment.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Export stable artifact keys for the current branch and its comparison branch;
+# pull requests compare against their live base branch.
+REPOSITORY_ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)
+
+if [[ "$GITHUB_EVENT_NAME" == "pull_request" ]]; then
+  RAW_TARGET_BRANCH=$(gh api "/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}" --jq '.base.ref')
+  TARGET_ENVIRONMENT=""
+else
+  RAW_TARGET_BRANCH="$RAW_BRANCH"
+  TARGET_ENVIRONMENT="${DOCS_DEPLOYMENT_ENVIRONMENT:-}"
+fi
+
+ARTIFACT_NAME=$(node "$REPOSITORY_ROOT/apps/docs/scripts/lighthouse-report.mjs" artifact-name "$RAW_BRANCH" "${DOCS_DEPLOYMENT_ENVIRONMENT:-}")
+TARGET_ARTIFACT_NAME=$(node "$REPOSITORY_ROOT/apps/docs/scripts/lighthouse-report.mjs" artifact-name "$RAW_TARGET_BRANCH" "$TARGET_ENVIRONMENT")
+
+{
+  echo "LIGHTHOUSE_ARTIFACT_NAME=$ARTIFACT_NAME"
+  echo "LIGHTHOUSE_BRANCH=$RAW_BRANCH"
+  echo "LIGHTHOUSE_TARGET_ARTIFACT_NAME=$TARGET_ARTIFACT_NAME"
+  echo "LIGHTHOUSE_TARGET_BRANCH=$RAW_TARGET_BRANCH"
+} >> "$GITHUB_ENV"

.github/scripts/lighthouse-restore.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Restore the newest Lighthouse baseline for the comparison branch, tolerating
+# artifacts removed by a concurrent workflow while retaining other failures.
+mkdir -p .lighthouse-target
+
+ARCHIVE_PATH="$RUNNER_TEMP/lighthouse-target.zip"
+DOWNLOAD_ERROR="$RUNNER_TEMP/lighthouse-target-error.log"
+
+for ATTEMPT in 1 2 3; do
+  ARTIFACT_ID=$(gh api --method GET \
+    "/repos/${GITHUB_REPOSITORY}/actions/artifacts" \
+    -f name="$LIGHTHOUSE_TARGET_ARTIFACT_NAME" \
+    -f per_page=100 \
+    --jq '.artifacts | map(select(.expired == false)) | sort_by(.created_at) | last | .id // empty')
+
+  if [[ -z "$ARTIFACT_ID" ]]; then
+    echo "No Lighthouse baseline found for target branch $LIGHTHOUSE_TARGET_BRANCH"
+    exit 0
+  fi
+
+  if gh api "/repos/${GITHUB_REPOSITORY}/actions/artifacts/${ARTIFACT_ID}/zip" > "$ARCHIVE_PATH" 2> "$DOWNLOAD_ERROR"; then
+    unzip -q "$ARCHIVE_PATH" -d .lighthouse-target
+    exit 0
+  else
+    DOWNLOAD_STATUS=$?
+  fi
+
+  cat "$DOWNLOAD_ERROR" >&2
+  rm -f "$ARCHIVE_PATH"
+  if ! grep -Eq '^gh: .* \(HTTP (404|410)\)$' "$DOWNLOAD_ERROR"; then
+    exit "$DOWNLOAD_STATUS"
+  fi
+
+  echo "Lighthouse baseline artifact $ARTIFACT_ID disappeared during download (attempt $ATTEMPT of 3)"
+done
+
+echo "No Lighthouse baseline available for target branch $LIGHTHOUSE_TARGET_BRANCH after 3 attempts"

.github/workflows/clear-ok-to-deploy.yml

@@ -5,7 +5,7 @@ on:
 
 jobs:
   clear-label:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       pull-requests: write
     steps:

.github/workflows/deploy-fork-preview.yml

@@ -10,15 +10,15 @@ on:
 
 jobs:
   deploy-fork:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     if: ${{ github.event_name == 'workflow_dispatch' || github.event.label.name == 'ok-to-deploy' }}
     permissions:
       contents: read
       deployments: write
-      pull-requests: write
+      pull-requests: read
     steps:
-      # Note: fork PR workflows get a read-only GITHUB_TOKEN even if we request
-      # pull-requests: write, so we can't post PR comments here.
+      # The `ok-to-deploy` label permits the base-repository workflow to deploy
+      # the checked-out fork commit and publish its preview to GitHub.
       - name: Fetch PR info
         id: pr
         uses: actions/github-script@v9.0.0
@@ -55,14 +55,18 @@ jobs:
           ref: ${{ steps.pr.outputs.sha }}
           persist-credentials: false
 
+      - name: Install Corepack
+        run: npm install --global corepack
+
+      - name: Enable Corepack
+        run: corepack enable
+
       - name: Setup Node.js environment
         uses: actions/setup-node@v6.3.0
         with:
           node-version-file: ".node-version"
           cache: "yarn"
 
-      - name: Enable Corepack
-        run: corepack enable
       - name: Install dependencies
         run: yarn install
 
@@ -74,28 +78,44 @@ jobs:
 
       - name: Deploy
         id: deploy
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           workingDirectory: apps/docs
           command: pages deploy out --project-name=rescript-lang-org
-          gitHubToken: ${{ secrets.GITHUB_TOKEN }}
-          wranglerVersion: 4.85.0
+          wranglerVersion: 4.130.0
         continue-on-error: true
         env:
           FORCE_COLOR: 0
-
-      - name: Comment PR with deployment link
-        if: ${{ github.event_name != 'workflow_dispatch' }}
-        uses: marocchino/sticky-pull-request-comment@v2
+      - name: Publish fork preview deployment to GitHub
+        if: ${{ steps.deploy.outcome == 'success' }}
+        uses: actions/github-script@v9.0.0
         with:
-          recreate: true
-          header: fork-preview-deployment
-          message: |
-            ## Fork PR Cloudflare deployment
-            PR: #${{ steps.pr.outputs.number }}
-            Deployement ID: ${{ steps.deploy.outputs.pages-deployment-id }}
-            Deployment Environment: ${{ steps.deploy.outputs.pages-environment }}
+          script: |
+            const deployment = await github.rest.repos.createDeployment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              ref: process.env.PR_HEAD_SHA,
+              auto_merge: false,
+              required_contexts: [],
+              environment: "fork-preview",
+              production_environment: false,
+              transient_environment: true,
+              description: "Cloudflare fork preview",
+            });
 
-            ${{ steps.deploy.outputs.command-output }}
+            await github.rest.repos.createDeploymentStatus({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              deployment_id: deployment.data.id,
+              state: "success",
+              environment: "fork-preview",
+              environment_url: process.env.DEPLOYMENT_URL,
+              log_url: `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`,
+              description: "Cloudflare fork preview deployed",
+              auto_inactive: false,
+            });
+        env:
+          DEPLOYMENT_URL: ${{ steps.deploy.outputs.deployment-url }}
+          PR_HEAD_SHA: ${{ steps.pr.outputs.sha }}