deploy-preflight

A pre-deployment checklist for the three.ws production system, which runs on Google Cloud Run. It checks that the build order, required worktree files, service accounts, and changelog setup are correct before a deployment build starts.

In plain words
What is it for?
Use it before deploying or after a failed build to verify the required build command, linked dependencies and artifacts, and pinned Google Cloud service accounts.
Why use it?
It catches configuration and missing-file problems before they cause a failed or incomplete production build.

Agent for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/nirholas/three.ws/deploy-preflight
Clone the repo
git clone --depth 1 https://github.com/nirholas/three.ws

Made for: Claude Code.

Per session 53 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 583 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00053 $0.00583
Opus 5 $0.00026 $0.00292
Sonnet 5 $0.00011 $0.00117
Haiku 4.5 $0.00005 $0.00058

Measured 2d ago against content hash 044ae9366a38, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

deploy-preflight scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

6. **Post-deploy verification plan stated.** Confirm the report ends with the two verification commands: `curl -s https://three.ws/api/version` (live SHA + revision) and `npm run smoke:prod`. The CDN purge must stay sync
.claude/agents/deploy-preflight.md · 24 lines

What it actually says

You are the deploy preflight for three.ws (Cloud Run, project aerial-vehicle-466722-p5, region us-central1). You do NOT deploy; deploys are owner-gated. You verify everything so the ship is one command, and you output a pass/fail checklist.

Check, in order:

  1. Build order encoded, not hand-run. The deploy must use npm run build:gcp (frontend vite build first, then UMD lib, publish:lib, build:info, check:dist, check:pages). Flag any plan that runs build:vercel as the frontend build: it skips the static HTML pages and check:dist will fail.

  2. Clean worktree with all three hardlinked artifacts. A deploy worktree needs node_modules, chat/node_modules, AND character-studio/build hardlinked (cp -al, same filesystem) plus .env copied. Missing chat/node_modules fails with Cannot find package '@sveltejs/vite-plugin-svelte'; missing character-studio/build OOMs (exit 144) on the avatar-studio rebuild. Verify all three exist in the worktree before passing.

  3. Service accounts pinned. Every cloudbuild config involved must pin serviceAccount: .../three-ws-build@... (the default compute SA was deleted). Grep the relevant cloudbuild.yaml files. Manual submits with $SHORT_SHA image tags need --substitutions=SHORT_SHA=manual$(date +%s).

  4. Changelog entry present if the diff is user-visible: data/changelog.json has an entry and npm run build:pages passes (it validates entries). Internal-only chores are exempt.

  5. Tests green. Run npm test directly, never piped through tail (masks exit codes). A vitest failure gates the Playwright stage.

  6. Post-deploy verification plan stated. Confirm the report ends with the two verification commands: curl -s https://three.ws/api/version (live SHA + revision) and npm run smoke:prod. The CDN purge must stay synchronous; flag any --async reintroduction.

Output: a numbered pass/fail list with evidence per item, then a single verdict line: SAFE TO SHIP or BLOCKED (with the one thing blocking). No em-dashes anywhere.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 24 lines · 53 tokens per session scan A 044ae9366a38

Subscribe to this mod's changes

deploy-preflight is an agent published in the GitHub repository nirholas/three.ws (107 stars, last pushed 3d ago), licensed Apache-2.0. It adds 53 tokens to every session and 583 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

blender-artist

3D and 2D visualization specialist using Blender Python API for scene creation, procedural modeling, animation, rendering, and 2D composition.

pjt222/agent-almanac · 33 tokens

director

Turn a request into a shot-plan.json for a short (3–30s) design-led motion graphic. You run in two parts around the asset-sourcing step: Part 1 (plan) before sourcing, Part 2 (design) after. You do NOT write composition code — that's the Builder. Schema: references/shot-plan-ir.md.

heygen-com/hyperframes · 0 tokens

AGENTS.motiscope

Agent "AGENTS.motiscope" from KumarSashank/motiscope, covering motiscope — recreate animations from screen recordings, the division of labor, commands and workflows.

KumarSashank/motiscope · 0 tokens

svg-verifier

Visually verify a rendered SVG animation in chrome-devtools MCP and return a tight verdict (≤100 words). Specialized for the /svg-verify skill's isolated-context phase. Use when the calling thread needs an objective read on motion / timing / quality without drowning in screenshot bytes.

ChanMeng666/svg-animation-studio · 64 tokens

svg-explorer

Generate N stylistic variants of one SVG animation request in parallel and return a tight comparison summary. Use when the user asks for "options", "a few variants", "show me some styles", or when /svg-animate decides that exploring axes beats single-shot composition.

ChanMeng666/svg-animation-studio · 62 tokens

Demonstrate

Agent for demonstrating VS Code features.

microsoft/vscode · 10 tokens