fix(cloudflare): Upload built Worker and SPA assets (#1400)

## Why
The first exact-version production deployment uploaded source `public/`
assets instead of Vite's built SPA. That directory has no `index.html`;
candidate root smoke returned 404 before promotion, and the workflow
recovered the previous version.

## Change
- Upload using the generated `dist/sentry_mcp/wrangler.json` Worker
config and `dist/client` assets, checking both exist first.
- Add a regression for the version-upload inputs and update deployment
docs.

## Validation
- `pnpm run tsc`, `pnpm run lint`, `pnpm run test:ci-projects` (28
passed), `pnpm --filter @sentry/mcp-cloudflare run test` (431 passed),
docs/generated checks, and Wrangler dry run passed.
- Full `pnpm run test` timed out after ten minutes while the CLI suite
was running; exact-head CI will run the full gate.

Co-authored-by: GPT-6 Sol <agent@openai.com>

Author: BYK

.github/workflows/deploy.yml

@@ -96,8 +96,11 @@ jobs:
           TESTED_SHA: ${{ github.event.workflow_run.head_sha }}
           WRANGLER_OUTPUT_FILE_PATH: ${{ runner.temp }}/wrangler-upload.jsonl
         run: |
+          test -s dist/client/index.html
+          test -s dist/sentry_mcp/wrangler.json
           pnpm exec wrangler versions upload --experimental-auto-create=false \
-            --config wrangler.jsonc \
+            --config dist/sentry_mcp/wrangler.json \
+            --assets dist/client \
             --message "toolkit-mcp:$GITHUB_RUN_ID:$GITHUB_RUN_ATTEMPT:$TESTED_SHA:upload"
 
       - name: Identify uploaded production version

docs/operations/github-actions.md

@@ -21,11 +21,13 @@ smoke-test suite remains in its own workflow.
 ### deploy.yml
 Runs after a successful `Test` push run on `main`. Checks out the tested commit
 and requires that it is still the tip of `main`. Builds once, records the active
-production version, and uploads one new version of `sentry-mcp`. It stages the
-candidate at 0% alongside the old version at 100%, then runs smoke tests
-through the production route with a version override on every request. The
-version endpoint confirms the override reaches the candidate. Only then does
-it promotes the tested version to 100% and repeats the smoke tests. On failure
+production version, and uploads one new version of `sentry-mcp` from Vite's
+generated Worker config and `dist/client` assets. The source `public` directory
+does not contain the built SPA's `index.html`. It stages the candidate at 0%
+alongside the old version at 100%, then runs smoke tests through the production
+route with a version override on every request. The version endpoint confirms
+the override reaches the candidate. Only then does it promote the tested
+version to 100% and repeat the smoke tests. On failure,
 it restores the exact captured prior version only if the live deployments still
 belong to this run.
 

docs/releases/cloudflare.md

@@ -143,7 +143,8 @@ after the `Test` workflow succeeds for the current `main` commit:
 
 1. Merge a PR into `main`; GitHub Actions tests that exact commit.
 2. The workflow builds once, captures the live production version, and uploads
-   a new version of the production Worker without shifting traffic.
+   the generated Worker bundle and `dist/client` SPA assets without shifting
+   traffic. The source `public` directory does not contain the built homepage.
 3. It stages that version at 0% while the prior version serves 100%, then tests
    it with a version override through the production route. The version probe
    confirms that the candidate handled the overridden request.

scripts/deploy-workflow.test.mjs

@@ -72,6 +72,16 @@ test("production deploy requires a successful Test run on this repository's main
   );
 });
 
+test("version upload includes the built Worker and SPA assets", () => {
+  const upload = workflow.match(
+    /- name: Upload production version without moving traffic[\s\S]*?(?=\n {6}- name: Identify uploaded production version)/,
+  )?.[0];
+  assert.ok(upload);
+  assert.match(upload, /test -s dist\/client\/index\.html/);
+  assert.match(upload, /--config dist\/sentry_mcp\/wrangler\.json/);
+  assert.match(upload, /--assets dist\/client/);
+});
+
 test("deployment failures never invoke an unqualified rollback", () => {
   assert.doesNotMatch(workflow, /(?:command:|pnpm exec wrangler)\s+rollback\b/);
   assert.match(