Before deploy

| Step | Owner | Action | |------|-------|--------| | 1 | Agent/CI | php tests/run.php green on Birkly main | | 2 | Agent/CI | Marketplace test suite green | | 3 | Human | Back up production content/, settings/, media/, marketplace data/ | | 4 | Human | Note current git commit SHA for rollback |

Birkly CMS deploy

1. Pull latest main on the server (or run ./scripts/deploy-pull.sh).
2. Ensure writable dirs: content/, media/, settings/, data/, cache/, logs/.
3. Run smoke script: ./scripts/production-smoke.sh (or manual checks below).
4. Log in to admin; verify Commerce, Plugins → Marketplace, Settings → Security, and Settings → Monitoring load.
5. Hit GET /api/health.php — extended checks: disk writable, plugin state, marketplace reachability. Configure alert email in Monitoring before go-live (see Monitoring and health alerts).

Marketplace deploy

1. Pull Birkly-Marketplace main.
2. Set production env: Stripe live keys, GITHUB_APP_*, webhook secrets.
3. Register webhooks:

- GitHub App → POST /webhooks/github - Stripe → POST /webhooks/stripe

1. Run marketplace smoke (registry GET /api/v1/registry, provider login, catalog page).
2. See Marketplace production runbook.

Client site (kekaba example)

1. From Birkly repo: ./scripts/sync-client-embed.sh /path/to/kekaba
2. In kekaba repo: git pull origin main
3. Verify static pages load; Commerce buy buttons resolve.
4. Do not commit runtime content/, users/, settings/ from server.

Human-only (cannot be automated)

• [ ] DNS / TLS certificates valid
• [ ] Stripe live mode enabled for Commerce and Marketplace Connect
• [ ] Legal pages updated (privacy, terms, marketplace provider agreement links)
• [ ] Email deliverability (SPF/DKIM) for dunning and order receipts
• [ ] Monitoring alerts configured

Post-deploy smoke (manual)

| Check | Expected | |-------|----------| | Admin login | /admin loads | | Commerce catalog | Products indexed | | Marketplace tab | Official plugins install | | Health endpoint | HTTP 200, checks pass | | Checkout (test) | Test mode order or small live transaction | | Subscriptions | List loads; upgrade UI on detail | | Plugin denylist | Add/remove test entry in Settings → Security |

Rollback

1. Revert server git to previous SHA.
2. Restore settings/ and content/ from backup if schema changed.
3. Re-run smoke script.