ci: dispatch-only job that puts the dev JWT and Freestyle keys on cmux-platform-development
Merged
TE
5d ago+47+47+01234567890123456789-0-0-0123456789
Dispatch-only workflow that puts JWT_PRIVATE_JWK and CLOUD_FREESTYLE_API_KEY (from the environment's FREESTYLE_API_KEY) on the cmux-platform-development Worker, for the CloudDO move into cmux-platform. Same pattern as the existing staging step that keeps cmux-platform-staging's JWT equal to cmux-api-staging's.
- Only the
cmux-next-developmentenvironment holds a readable copy; Cloudflare cannot read secrets back. - Values go through stdin to
wrangler secret put; nothing is printed. The job lists secret names only. - Runs only from
feat-cmux-next(environment branch policy). Dispatch-only, no triggers. Small, contained: one new workflow file, no app code. - Risk: it overwrites those two secrets on cmux-platform-development only. It touches no other Worker.
Agent session: agent session
![View with [code]smith](https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v3-3x.png)
![Autofix with [code]smith](https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark-3x.png)
Need help on this PR? Tag @codesmith-bot with what you need.
Summary by cubic
Adds a dispatch-only workflow that copies the development JWT and Freestyle API key onto the cmux-platform-development Worker, supporting the CloudDO move into cmux-platform.
- Reads
JWT_PRIVATE_JWKandFREESTYLE_API_KEYfrom thecmux-next-developmentenvironment and writes them asJWT_PRIVATE_JWKandCLOUD_FREESTYLE_API_KEY. - Pipes values via stdin to
wrangler secret put; only secret names are ever listed, values are never printed. - Runs only from the
feat-cmux-nextbranch and overwrites only those two secrets oncmux-platform-development; no other Worker is touched.