# Deploy

Use when ready to ship, runs pre-push gates (lint, typecheck, build, tests, security...

- Repository: https://github.com/jeremylongshore/tons-of-skills-marketplace (2890 stars)
- Category: Testing
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add jeremylongshore/tons-of-skills-marketplace --skill deploy -g -a claude-code -y`
Codex: `npx skills add jeremylongshore/tons-of-skills-marketplace --skill deploy -g -a codex -y`
Cursor: `npx skills add jeremylongshore/tons-of-skills-marketplace --skill deploy -g -a cursor -y`
Gemini CLI: `npx skills add jeremylongshore/tons-of-skills-marketplace --skill deploy -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add jeremylongshore/tons-of-skills-marketplace`

## Description

Use when ready to ship, runs pre-push gates (lint, typecheck, build, tests, security sweep), commits, releases, and pushes. Standalone, never auto-invoked. Push always requires explicit confirmation. Trigger with /hyperflow:deploy, "ship it", "ready to push", "release", "cut a release", "deploy".

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Deploy

No gate skipped, no failure ignored. If any gate fails, halt and report. Never `--no-verify`. Never bypass.

**Failure recovery (rule 14).** Worker errors and Quality Gate failures follow the canonical policy in [`skills/hyperflow/failure-recovery.md`](../hyperflow/failure-recovery.md). Gate failures are user-surfaced, never auto-fixed, print the failing command + full stderr and halt the push. Never `--no-verify`, never force-push to main.

## Per-Step Agent Map

| Step | Sub-phase | Workers | Reviewer | Notes |
|---|---|---|---|---|
| 1a | Repo-state scan | Worker A (git status), Worker B (git log) | Reviewer |, |
| 1b | Tool detection | Worker A (profile.md + lockfiles), Worker B (testing.md + devDeps) | Reviewer |, |
| 2a | Lint + typecheck (parallel) | Worker A (linter), Worker B (formatter), Worker C (tsc) | Reviewer | Step 3 (Security Sweep) runs in parallel with Step 2 at orchestrator level; 2a halts chain on any failure before 2b |
| 2b | Build gate | Worker A (prod build), Worker B (dev build) | Reviewer | Depends on 2a PASS |
| 2c | Test gate | Worker A (unit), Worker B (integration/E2E) | Reviewer | Parallel (P1); depends on 2b PASS |
| 3a | Secrets scan | Worker A (diff pattern), Worker B (file pattern) | **`security-reviewer`** | Runs in parallel with Step 2 (pre-build; read-only) |
| 3b | Dependency audit | Worker A (CVE audit), Worker B (license check) | **`vulnerability-reviewer`** (web-research-first) |, |
| 4 | Commit | single Worker | Reviewer | atomic-exempt (DOCTRINE 12.2) |
| 5a | Release execution | single Worker | Reviewer | atomic-exempt (DOCTRINE 12.2) |
| 5b | Version sync | Worker A (manifests), Worker B (changelog) | Reviewer |, |
| 6 | Push gate | AskUserQuestion |, | structural gate; atomic-exempt |
| 7 | Output | single print |, | atomic-exempt (§12.1) |

## Step 1, Survey State

Sub-phases run in parallel (P1).

### Step 1a, Repo-state scan

Two Workers in parallel:

The rest: https://github.com/jeremylongshore/tons-of-skills-marketplace/blob/HEAD/plugins/ai-agency/hyperflow/skills/deploy/SKILL.md