Equimentum OS
Control Plane
One place to manage every customer deployment - no per-customer login needed for tier changes.
Pre-deployed, blank instances ready to hand to a new customer - no code deploy at provision time. Restocking (adding a new spare) is still a manual/CLI step, done occasionally.
Published from Kenny's personal repo via publish_release.sh (occasional, Claude-assisted - same category as restocking the pool). Personal is the source; everyone else catches up to it.
Cloudflare API Token - needed to reach into a customer's live deployment when changing their tier (Account: Workers Scripts:Edit, D1:Edit).
Google OAuth Client ID - the one Equimentum OAuth app, used everywhere (Console sign-in, Gmail sending, and every customer instance's Drive/Gmail Connect). From Google Cloud Console → Credentials → this app's OAuth Client.
Google OAuth Client Secret - needed once, to connect Gmail sending below. From Google Cloud Console → Credentials → this app's OAuth Client.
Push Google OAuth to an instance - sends the Client ID/Secret above into that instance's own app_settings (drive.js reads them from there, never from wrangler). One-time per instance; already-connected instances don't need this repeated.
Gmail Sending - lets Control Plane email customers their instance link, sent from whichever Google account you connect below.