ci: dispatch-only job that puts the dev JWT and Freestyle keys on cmux-platform-development

Merged
TE
5d ago
+47-0

Dispatch-only workflow that puts JWT_PRIVATE_JWK and CLOUD_FREESTYLE_API_KEY (from the environment's FREESTYLE_API_KEY) on the cmux-platform-development Worker, for the CloudDO move into cmux-platform. Same pattern as the existing staging step that keeps cmux-platform-staging's JWT equal to cmux-api-staging's.

  • Only the cmux-next-development environment holds a readable copy; Cloudflare cannot read secrets back.
  • Values go through stdin to wrangler secret put; nothing is printed. The job lists secret names only.
  • Runs only from feat-cmux-next (environment branch policy). Dispatch-only, no triggers. Small, contained: one new workflow file, no app code.
  • Risk: it overwrites those two secrets on cmux-platform-development only. It touches no other Worker.

Agent session: agent session


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.


Summary by cubic

Adds a dispatch-only workflow that copies the development JWT and Freestyle API key onto the cmux-platform-development Worker, supporting the CloudDO move into cmux-platform.

  • Reads JWT_PRIVATE_JWK and FREESTYLE_API_KEY from the cmux-next-development environment and writes them as JWT_PRIVATE_JWK and CLOUD_FREESTYLE_API_KEY.
  • Pipes values via stdin to wrangler secret put; only secret names are ever listed, values are never printed.
  • Runs only from the feat-cmux-next branch and overwrites only those two secrets on cmux-platform-development; no other Worker is touched.