diff --git a/.woodpecker.yml b/.woodpecker.yml
index 59c2163..12ee60b 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -14,18 +14,29 @@
 # `npm ci` in the install step is enough for every later step to reuse.
 
 steps:
+  # Explicit event filter on these three (rather than the no-`when` default,
+  # which runs on every event Woodpecker knows about) because a deploy-time
+  # re-run of this pipeline is a `deployment` event, not `push` — install
+  # has to fire there too, or deploy-production's `npm run build` would run
+  # with no node_modules.
   - name: install
     image: node:22-bookworm
+    when:
+      - event: [push, deployment]
     commands:
       - npm ci
 
   - name: lint
     image: node:22-bookworm
+    when:
+      - event: [push, deployment]
     commands:
       - npm run lint
 
   - name: typecheck
     image: node:22-bookworm
+    when:
+      - event: [push, deployment]
     commands:
       - npx tsc -b