Cloud Deploy Pack

Run npm run cloud:command-center:deploy:preflight and then npm run cloud:command-center:deploy:pack after saving Cloudflare account, domain, Access, D1, R2, Worker URL, or token setup progress.

Safe Command Sequence

Cloud Handoff Actions

Cloud Deploy Pack JSON

{
  "schemaVersion": 1,
  "generatedAt": "2026-07-18T13:47:07.011Z",
  "status": "READY_FOR_CLOUD_DEPLOY_RUNBOOK",
  "label": "Ready For Cloud Deploy Runbook",
  "preflight": {
    "status": "READY_FOR_CLOUDFLARE_DEPLOY",
    "label": "Ready For Cloudflare Deploy",
    "checkedAt": "2026-07-18T13:47:06.754Z",
    "passCount": 21,
    "blockedCount": 0,
    "postDeployCount": 2,
    "failCount": 0
  },
  "resourceTargets": {
    "pagesProjectName": "nyra-command-center-dashboard",
    "workerName": "nyra-command-center-api",
    "d1DatabaseName": "nyra_command_center",
    "d1DatabaseId": "586ddfd8-a4f4-4f38-a5b6-1e70a3f5ed23",
    "r2BucketName": "nyra-command-center-uploads",
    "dashboardDomain": "command.porterlabz.com",
    "accessRequirement": "Protect the dashboard with Cloudflare Access or equivalent private access before entering real business records."
  },
  "counts": {
    "totalActions": 2,
    "blockedActions": 0,
    "postDeployActions": 2,
    "failedActions": 0,
    "userActions": 0,
    "codexActions": 2,
    "deployCommands": 8
  },
  "actions": [
    {
      "id": "env-api-url",
      "phase": "5. First Cloud Sync",
      "priority": "P1",
      "owner": "Codex",
      "status": "post-deploy",
      "label": "Cloud API URL available for sync",
      "detail": "After deploy, set NYRA_COMMAND_CENTER_API_URL in a temporary shell before cloud sync.",
      "action": "After Worker deployment, set NYRA_COMMAND_CENTER_API_URL in a temporary shell and the browser Cloud Connection URL field.",
      "evidenceNeeded": "Temporary shell value or browser Cloud Connection config only. The API URL can be saved; private tokens cannot.",
      "dashboardPage": "pages/cloud.html",
      "dashboardField": "cloudSync.apiUrl",
      "uploadSlot": "cloud-handoff",
      "verificationCommand": "npm run cloud:command-center:deploy:preflight",
      "noGoRule": "Do not treat cloud as source of truth until this action is proven by dashboard state, config, command output, or cloud health check."
    },
    {
      "id": "env-api-token",
      "phase": "5. First Cloud Sync",
      "priority": "P1",
      "owner": "Codex",
      "status": "post-deploy",
      "label": "Cloud API token available for sync",
      "detail": "After deploy, set NYRA_COMMAND_CENTER_TOKEN in a temporary shell only; never write it to repo files.",
      "action": "Set NYRA_COMMAND_CENTER_TOKEN in a temporary shell using the same private value as NYRA_COMMAND_TOKEN after the Worker secret is created.",
      "evidenceNeeded": "Use only temporary shell or browser localStorage. Never paste the bearer token into dashboard state, CSV, Markdown, screenshots, repo files, or chat.",
      "dashboardPage": "pages/cloud.html",
      "dashboardField": "browser localStorage only: nyraCommandCenterApiConfig.token",
      "uploadSlot": "cloud-handoff",
      "verificationCommand": "npm run cloud:command-center:deploy:preflight",
      "noGoRule": "Do not treat cloud as source of truth until this action is proven by dashboard state, config, command output, or cloud health check."
    }
  ],
  "phases": [
    {
      "phase": "5. First Cloud Sync",
      "actions": [
        {
          "id": "env-api-url",
          "phase": "5. First Cloud Sync",
          "priority": "P1",
          "owner": "Codex",
          "status": "post-deploy",
          "label": "Cloud API URL available for sync",
          "detail": "After deploy, set NYRA_COMMAND_CENTER_API_URL in a temporary shell before cloud sync.",
          "action": "After Worker deployment, set NYRA_COMMAND_CENTER_API_URL in a temporary shell and the browser Cloud Connection URL field.",
          "evidenceNeeded": "Temporary shell value or browser Cloud Connection config only. The API URL can be saved; private tokens cannot.",
          "dashboardPage": "pages/cloud.html",
          "dashboardField": "cloudSync.apiUrl",
          "uploadSlot": "cloud-handoff",
          "verificationCommand": "npm run cloud:command-center:deploy:preflight",
          "noGoRule": "Do not treat cloud as source of truth until this action is proven by dashboard state, config, command output, or cloud health check."
        },
        {
          "id": "env-api-token",
          "phase": "5. First Cloud Sync",
          "priority": "P1",
          "owner": "Codex",
          "status": "post-deploy",
          "label": "Cloud API token available for sync",
          "detail": "After deploy, set NYRA_COMMAND_CENTER_TOKEN in a temporary shell only; never write it to repo files.",
          "action": "Set NYRA_COMMAND_CENTER_TOKEN in a temporary shell using the same private value as NYRA_COMMAND_TOKEN after the Worker secret is created.",
          "evidenceNeeded": "Use only temporary shell or browser localStorage. Never paste the bearer token into dashboard state, CSV, Markdown, screenshots, repo files, or chat.",
          "dashboardPage": "pages/cloud.html",
          "dashboardField": "browser localStorage only: nyraCommandCenterApiConfig.token",
          "uploadSlot": "cloud-handoff",
          "verificationCommand": "npm run cloud:command-center:deploy:preflight",
          "noGoRule": "Do not treat cloud as source of truth until this action is proven by dashboard state, config, command output, or cloud health check."
        }
      ]
    }
  ],
  "deployCommands": [
    {
      "id": "validate-local-cloud-stack",
      "phase": "0. Local Pack Validation",
      "owner": "Codex",
      "command": "npm run cloud:command-center:check && npm run test:cloud-command-center-sync && npm run cloud:command-center:pages:check",
      "purpose": "Verify Worker routes, local sync tooling, and the static Pages dashboard artifact before touching cloud.",
      "noGoRule": "Do not deploy while local Worker, sync, or Pages checks fail."
    },
    {
      "id": "create-d1",
      "phase": "3. D1 And R2 Resources",
      "owner": "User + Codex",
      "command": "npx wrangler d1 create nyra_command_center",
      "purpose": "Create the D1 database that stores command-center state, upload metadata, and agent run markers.",
      "noGoRule": "Copy only the resulting database_id into the dashboard/config; never copy account tokens into repo files."
    },
    {
      "id": "create-r2",
      "phase": "3. D1 And R2 Resources",
      "owner": "User + Codex",
      "command": "npx wrangler r2 bucket create nyra-command-center-uploads",
      "purpose": "Create private upload storage for handoff files and future cloud intake evidence.",
      "noGoRule": "Do not make the upload bucket public."
    },
    {
      "id": "set-command-token",
      "phase": "4. Worker Configuration",
      "owner": "User + Codex",
      "command": "npx wrangler secret put NYRA_COMMAND_TOKEN --cwd cloud/command-center-worker --env production",
      "purpose": "Set the private bearer token used by the command-center Worker API.",
      "noGoRule": "The token must go through Wrangler secrets only, not wrangler.jsonc, dashboard state, Markdown, CSV, screenshots, or chat."
    },
    {
      "id": "sync-worker-config",
      "phase": "4. Worker Configuration",
      "owner": "Codex",
      "command": "npm run cloud:command-center:config:sync && npm run cloud:command-center:deploy:preflight",
      "purpose": "Apply non-secret Cloud page handoffs to the production Worker config and re-check deploy readiness.",
      "noGoRule": "This step must not write NYRA_COMMAND_TOKEN, Stripe secrets, or Cloudflare API tokens to repo files."
    },
    {
      "id": "deploy-worker",
      "phase": "5. First Cloud Sync",
      "owner": "Codex",
      "command": "npm run cloud:command-center:deploy",
      "purpose": "Deploy the nyra-command-center-api Worker after D1/R2, ALLOWED_ORIGIN, and NYRA_COMMAND_TOKEN are configured.",
      "noGoRule": "Do not deploy with placeholder production D1 database_id or placeholder ALLOWED_ORIGIN."
    },
    {
      "id": "deploy-pages",
      "phase": "5. First Cloud Sync",
      "owner": "Codex",
      "command": "npm run cloud:command-center:pages:deploy",
      "purpose": "Deploy the private dashboard Pages project nyra-command-center-dashboard.",
      "noGoRule": "Protect the dashboard with Cloudflare Access or equivalent private access before storing real business records."
    },
    {
      "id": "first-cloud-sync",
      "phase": "5. First Cloud Sync",
      "owner": "Codex",
      "command": "npm run cloud:command-center:health && npm run cloud:command-center:push && npm run cloud:command-center:scan && npm run cloud:command-center:ingest && npm run cloud:command-center:roundtrip",
      "purpose": "Push current command-center state to cloud, run cloud intake scan, safely ingest cloud handoffs, and verify roundtrip sync.",
      "noGoRule": "Use only temporary shell env vars for NYRA_COMMAND_CENTER_API_URL and NYRA_COMMAND_CENTER_TOKEN."
    }
  ],
  "outputs": {
    "json": "docs/launch_command_center/cloud-deploy-pack.json",
    "csv": "docs/launch_command_center/cloud-deploy-pack.csv",
    "report": "docs/launch_command_center/CLOUD_DEPLOY_PACK.md",
    "dashboard": "docs/launch_command_center/pages/cloud-deploy-pack.html"
  }
}