From 78f28105a95f7f5f18f48c4d5401897bb0d71678 Mon Sep 17 00:00:00 2001
From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com>
Date: Tue, 10 Feb 2026 17:12:34 -0500
Subject: [PATCH] ci/deploy: enforce dist artifact deployment settings

---
 README.md    | 6 ++++++
 netlify.toml | 2 +-
 vercel.json  | 4 ++++
 3 files changed, 11 insertions(+), 1 deletion(-)
 create mode 100644 vercel.json

diff --git a/README.md b/README.md
index c06d97d5..b7b5418e 100644
--- a/README.md
+++ b/README.md
@@ -342,6 +342,12 @@ The generated `css/tailwind.generated.css` artifact is ignored in git. CI
 workflows and Netlify deploys run `npm run build` to produce the compiled
 stylesheet during deployment, so source changes are all you need to commit.
 
+Deploy targets must publish the `dist/` directory as the web root (never the
+repository root). CI enforces deploy artifact integrity with
+`npm run verify:dist:deploy-artifact` immediately after `npm run build`, and
+hosts that support a publish/output directory (for example Netlify and Vercel)
+should be configured to use `dist`.
+
 #### Netlify cache policy for safe fast rollouts
 
 bitvid uses path-class cache rules so deployments propagate quickly without
diff --git a/netlify.toml b/netlify.toml
index ddfd011d..132ac188 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -1,5 +1,5 @@
 [build]
-  command = "npm run build"
+  command = "npm run build && npm run verify:dist:deploy-artifact"
   publish = "dist"
 
 [build.environment]
diff --git a/vercel.json b/vercel.json
new file mode 100644
index 00000000..45f2c430
--- /dev/null
+++ b/vercel.json
@@ -0,0 +1,4 @@
+{
+  "buildCommand": "npm run build",
+  "outputDirectory": "dist"
+}