Operations
Migrations, secret rotation, observability, and recovery practices.
Routine verification
pnpm run typecheck
pnpm test
pnpm run openapi:check
pnpm run docs:build
pnpm run deploy:dry-run
pnpm run startup:checkRotate the administrator token
pnpm run admin-token:rotateWrangler prompts without putting the new secret value in command history. Rotation invalidates the previous administrator token.
Database migrations
Change src/db/schema.ts, generate a new Drizzle migration, and commit both the
schema and generated migration artifacts. Apply remote migrations through the
DB binding so deployments remain independent of a particular database name.
Logs and traces
The Worker enables Cloudflare logs and sampled traces. Proxy responses also return
Server-Timing measurements for authentication, limit evaluation, and provider
time-to-first-byte.