Skip to content
Sentinel Sentinel Sentinel

Deployment

Prerequisites

Section titled “Prerequisites”
  • Cloudflare Workers Paid plan (required for Durable Objects, Queues, D1)
  • A GitHub personal access token with repo scope
  • Wrangler CLI authenticated (bunx wrangler login)

First Deployment

Section titled “First Deployment”

Create D1 Database

Section titled “Create D1 Database”
Terminal window
bunx wrangler@latest d1 create sentinel-db

Update wrangler.jsonc with the returned database_id.

Create R2 Bucket

Section titled “Create R2 Bucket”
Terminal window
bunx wrangler@latest r2 bucket create sentinel-artifacts

Create Queues

Section titled “Create Queues”
Terminal window
bunx wrangler@latest queues create sentinel-errors-detected
Terminal window
bunx wrangler@latest queues create sentinel-triage-ready
Terminal window
bunx wrangler@latest queues create sentinel-fix-ready
Terminal window
bunx wrangler@latest queues create sentinel-trace-external
Terminal window
bunx wrangler@latest queues create sentinel-completed
Terminal window
bunx wrangler@latest queues create sentinel-dlq

Set Secrets

Section titled “Set Secrets”
Terminal window
bunx wrangler@latest secret put GITHUB_TOKEN
Terminal window
bunx wrangler@latest secret put ANTHROPIC_API_KEY

Initialize Database Schema

Section titled “Initialize Database Schema”
Terminal window
bunx wrangler@latest d1 execute sentinel-db --file=src/db/schema.sql

Deploy

Section titled “Deploy”
Terminal window
bunx wrangler@latest deploy

Subsequent Deployments

Section titled “Subsequent Deployments”
Terminal window
bunx wrangler@latest deploy

Wrangler handles Durable Object migrations automatically based on the migration tags in wrangler.jsonc.

Verify Deployment

Section titled “Verify Deployment”
Terminal window
curl https://sentinel.{your-subdomain}.workers.dev/api/health

Expected response:

{ "status": "ok", "startedAt": "2026-02-20T10:00:00Z" }

Custom Domain

Section titled “Custom Domain”

To use a custom domain, add a route in wrangler.jsonc:

"routes": [
  { "pattern": "sentinel.example.com", "custom_domain": true }
]

Or configure via the Cloudflare dashboard under Workers → Triggers → Custom Domains.

Sandbox Container

Section titled “Sandbox Container”

The Sandbox container image needs to be built and pushed before the SANDBOX binding can be enabled:

Terminal window
cd sandbox-image
docker build -t sentinel-sandbox .

Then update wrangler.jsonc to uncomment the containers binding and reference the image.

Monitoring

Section titled “Monitoring”

After deployment, monitor via:

  • Workers Observability — logs and traces for all agent executions
  • Orchestrator API — /api/stats for aggregate metrics
  • D1 Console — direct SQL queries on the sentinel-db database
  • R2 Dashboard — browse artifacts in the sentinel-artifacts bucket