name	deploy
description	Guarded production deploy of the Worker to Cloudflare. Verifies the SHARED_SECRET secret is configured (not the committed placeholder), then runs the docgen + wrangler deploy pipeline.
disable-model-invocation	true

Deploy to Cloudflare Workers

Deploying mutates production. Run the pre-flight checks, get explicit confirmation, then deploy.

Secret is set as a real secret, not the placeholder. Check that SHARED_SECRET exists in the secret store:
```
wrangler secret list
```
If SHARED_SECRET is missing, stop and tell the user to run wrangler secret put SHARED_SECRET first.
No real secret is committed. Confirm wrangler.jsonc still has vars.SHARED_SECRET set to "YOUR_SECRET_KEY_HERE". If it holds a real value, warn the user (it would commit a secret and override the secret store) before continuing.
Working tree is clean enough to deploy — surface anything uncommitted that would ship unexpectedly (git status --short).

Confirm with the user that they want to deploy to production. Wait for an explicit yes.
Run the pipeline:
```
npm run deploy
```
(= workers-mcp docgen src/index.ts && wrangler deploy)
Report the deployed *.workers.dev URL (or custom route) from the wrangler output. Offer to smoke-test it with /smoke pointed at the deployed URL.

name	deploy
description	Guarded production deploy of the Worker to Cloudflare. Verifies the SHARED_SECRET secret is configured (not the committed placeholder), then runs the docgen + wrangler deploy pipeline.
disable-model-invocation	true

Deploying mutates production. Run the pre-flight checks, get explicit confirmation, then deploy.

Secret is set as a real secret, not the placeholder. Check that SHARED_SECRET exists in the secret store:
```
wrangler secret list
```
If SHARED_SECRET is missing, stop and tell the user to run wrangler secret put SHARED_SECRET first.
No real secret is committed. Confirm wrangler.jsonc still has vars.SHARED_SECRET set to "YOUR_SECRET_KEY_HERE". If it holds a real value, warn the user (it would commit a secret and override the secret store) before continuing.
Working tree is clean enough to deploy — surface anything uncommitted that would ship unexpectedly (git status --short).

Confirm with the user that they want to deploy to production. Wait for an explicit yes.
Run the pipeline:
```
npm run deploy
```
(= workers-mcp docgen src/index.ts && wrangler deploy)
Report the deployed *.workers.dev URL (or custom route) from the wrangler output. Offer to smoke-test it with /smoke pointed at the deployed URL.

deploy