@vodailoc/kilo-kit-mcp 1.1.0

package/skills/engineering/render-deploy/LICENSE.txt

@@ -0,0 +1,201 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf of
+   any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+   To apply the Apache License to your work, attach the following
+   boilerplate notice, with the fields enclosed by brackets "[]"
+   replaced with your own identifying information. (Don\'t include
+   the brackets!)  The text should be enclosed in the appropriate
+   comment syntax for the file format. We also recommend that a
+   file or class name and description of purpose be included on the
+   same "printed page" as the copyright notice for easier
+   identification within third-party archives.
+
+Copyright [yyyy] [name of copyright owner]
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/skills/engineering/render-deploy/SKILL.md

@@ -0,0 +1,479 @@
+---
+name: render-deploy
+description: Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render's cloud platform.
+---
+
+# Deploy to Render
+
+Render supports **Git-backed** services and **prebuilt Docker image** services.
+
+This skill covers **Git-backed** flows:
+1. **Blueprint Method** - Generate render.yaml for Infrastructure-as-Code deployments
+2. **Direct Creation** - Create services instantly via MCP tools
+
+Blueprints can also run a **prebuilt Docker image** by using `runtime: image`, but the `render.yaml` still must live in a Git repo.
+
+If there is no Git remote, stop and ask the user to either:
+- Create/push a Git remote (can be minimal if only the Blueprint is needed), or
+- Use the Render Dashboard/API to deploy a prebuilt Docker image (MCP cannot create image-backed services).
+
+## Prerequisites
+
+- When sandboxing blocks the deployment network calls, rerun with `sandbox_permissions=require_escalated`.
+- The deployment might take a few minutes. Use appropriate timeout values.
+
+## When to Use This Skill
+
+Activate this skill when users want to:
+- Deploy an application to Render
+- Create a render.yaml Blueprint file
+- Set up Render deployment for their project
+- Host or publish their application on Render's cloud platform
+- Create databases, cron jobs, or other Render resources
+
+## Happy Path (New Users)
+
+Use this short prompt sequence before deep analysis to reduce friction:
+1. Ask whether they want to deploy from a Git repo or a prebuilt Docker image.
+2. Ask whether Render should provision everything the app needs (based on what seems likely from the user's description) or only the app while they bring their own infra. If dependencies are unclear, ask a short follow-up to confirm whether they need a database, workers, cron, or other services.
+
+Then proceed with the appropriate method below.
+
+## Choose Your Source Path
+
+**Git Repo Path:** Required for both Blueprint and Direct Creation. The repo must be pushed to GitHub, GitLab, or Bitbucket.
+
+**Prebuilt Docker Image Path:** Supported by Render via image-backed services. This is **not** supported by MCP; use the Dashboard/API. Ask for:
+- Image URL (registry + tag)
+- Registry auth (if private)
+- Service type (web/worker) and port
+
+If the user chooses a Docker image, guide them to the Render Dashboard image deploy flow or ask them to add a Git remote (so you can use a Blueprint with `runtime: image`).
+
+## Choose Your Deployment Method (Git Repo)
+
+Both methods require a Git repository pushed to GitHub, GitLab, or Bitbucket. (If using `runtime: image`, the repo can be minimal and only contain `render.yaml`.)
+
+| Method | Best For | Pros |
+|--------|----------|------|
+| **Blueprint** | Multi-service apps, IaC workflows | Version controlled, reproducible, supports complex setups |
+| **Direct Creation** | Single services, quick deployments | Instant creation, no render.yaml file needed |
+
+### Method Selection Heuristic
+
+Use this decision rule by default unless the user requests a specific method. Analyze the codebase first; only ask if deployment intent is unclear (e.g., DB, workers, cron).
+
+**Use Direct Creation (MCP) when ALL are true:**
+- Single service (one web app or one static site)
+- No separate worker/cron services
+- No attached databases or Key Value
+- Simple env vars only (no shared env groups)
+If this path fits and MCP isn't configured yet, stop and guide MCP setup before proceeding.
+
+**Use Blueprint when ANY are true:**
+- Multiple services (web + worker, API + frontend, etc.)
+- Databases, Redis/Key Value, or other datastores are required
+- Cron jobs, background workers, or private services
+- You want reproducible IaC or a render.yaml committed to the repo
+- Monorepo or multi-env setup that needs consistent configuration
+
+If unsure, ask a quick clarifying question, but default to Blueprint for safety. For a single service, strongly prefer Direct Creation via MCP and guide MCP setup if needed.
+
+## Prerequisites Check
+
+When starting a deployment, verify these requirements in order:
+
+**1. Confirm Source Path (Git vs Docker)**
+
+If using Git-based methods (Blueprint or Direct Creation), the repo must be pushed to GitHub/GitLab/Bitbucket. Blueprints that reference a prebuilt image still require a Git repo with `render.yaml`.
+
+```bash
+git remote -v
+```
+
+- If no remote exists, stop and ask the user to create/push a remote **or** switch to Docker image deploy.
+
+**2. Check MCP Tools Availability (Preferred for Single-Service)**
+
+MCP tools provide the best experience. Check if available by attempting:
+```
+list_services()
+```
+
+If MCP tools are available, you can skip CLI installation for most operations.
+
+**3. Check Render CLI Installation (for Blueprint validation)**
+```bash
+render --version
+```
+If not installed, offer to install:
+- macOS: `brew install render`
+- Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | sh`
+
+**4. MCP Setup (if MCP isn't configured)**
+
+If `list_services()` fails because MCP isn't configured, ask whether they want to set up MCP (preferred) or continue with the CLI fallback. If they choose MCP, ask which AI tool they're using, then provide the matching instructions below. Always use their API key.
+
+### Cursor
+
+Walk the user through these steps:
+
+1) Get a Render API key:
+```
+https://dashboard.render.com/u/*/settings#api-keys
+```
+
+2) Add this to `~/.cursor/mcp.json` (replace `<YOUR_API_KEY>`):
+```json
+{
+  "mcpServers": {
+    "render": {
+      "url": "https://mcp.render.com/mcp",
+      "headers": {
+        "Authorization": "Bearer <YOUR_API_KEY>"
+      }
+    }
+  }
+}
+```
+
+3) Restart Cursor, then retry `list_services()`.
+
+### Claude Code
+
+Walk the user through these steps:
+
+1) Get a Render API key:
+```
+https://dashboard.render.com/u/*/settings#api-keys
+```
+
+2) Add the MCP server with Claude Code (replace `<YOUR_API_KEY>`):
+```bash
+claude mcp add --transport http render https://mcp.render.com/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
+```
+
+3) Restart Claude Code, then retry `list_services()`.
+
+### Codex
+
+Walk the user through these steps:
+
+1) Get a Render API key:
+```
+https://dashboard.render.com/u/*/settings#api-keys
+```
+
+2) Set it in their shell:
+```bash
+export RENDER_API_KEY="<YOUR_API_KEY>"
+```
+
+3) Add the MCP server with the Codex CLI:
+```bash
+codex mcp add render --url https://mcp.render.com/mcp --bearer-token-env-var RENDER_API_KEY
+```
+
+4) Restart Codex, then retry `list_services()`.
+
+### Other Tools
+
+If the user is on another AI app, direct them to the Render MCP docs for that tool's setup steps and install method.
+
+### Workspace Selection
+
+After MCP is configured, have the user set the active Render workspace with a prompt like:
+
+```
+Set my Render workspace to [WORKSPACE_NAME]
+```
+
+**5. Check Authentication (CLI fallback only)**
+
+If MCP isn't available, use the CLI instead and verify you can access your account:
+```bash
+# Check if user is logged in (use -o json for non-interactive mode)
+render whoami -o json
+```
+
+If `render whoami` fails or returns empty data, the CLI is not authenticated. The CLI won't always prompt automatically, so explicitly prompt the user to authenticate:
+
+If neither is configured, ask user which method they prefer:
+- **API Key (CLI)**: `export RENDER_API_KEY="rnd_xxxxx"` (Get from https://dashboard.render.com/u/*/settings#api-keys)
+- **Login**: `render login` (Opens browser for OAuth)
+
+**6. Check Workspace Context**
+
+Verify the active workspace:
+```
+get_selected_workspace()
+```
+
+Or via CLI:
+```bash
+render workspace current -o json
+```
+
+To list available workspaces:
+```
+list_workspaces()
+```
+
+If user needs to switch workspaces, they must do so via Dashboard or CLI (`render workspace set`).
+
+Once prerequisites are met, proceed with deployment workflow.
+
+---
+
+# Method 1: Blueprint Deployment (Recommended for Complex Apps)
+
+## Blueprint Workflow
+
+### Step 1: Analyze Codebase
+
+Analyze the codebase to determine framework/runtime, build and start commands, required env vars, datastores, and port binding. Use the detailed checklists in [references/codebase-analysis.md](references/codebase-analysis.md).
+
+### Step 2: Generate render.yaml
+
+Create a `render.yaml` Blueprint file following the Blueprint specification.
+
+Complete specification: [references/blueprint-spec.md](references/blueprint-spec.md)
+
+**Key Points:**
+- Always use `plan: free` unless user specifies otherwise
+- Include ALL environment variables the app needs
+- Mark secrets with `sync: false` (user fills these in Dashboard)
+- Use appropriate service type: `web`, `worker`, `cron`, `static`, or `pserv`
+- Use appropriate runtime: [references/runtimes.md](references/runtimes.md)
+
+**Basic Structure:**
+```yaml
+services:
+  - type: web
+    name: my-app
+    runtime: node
+    plan: free
+    buildCommand: npm ci
+    startCommand: npm start
+    envVars:
+      - key: DATABASE_URL
+        fromDatabase:
+          name: postgres
+          property: connectionString
+      - key: JWT_SECRET
+        sync: false  # User fills in Dashboard
+
+databases:
+  - name: postgres
+    databaseName: myapp_db
+    plan: free
+```
+
+**Service Types:**
+- `web`: HTTP services, APIs, web applications (publicly accessible)
+- `worker`: Background job processors (not publicly accessible)
+- `cron`: Scheduled tasks that run on a cron schedule
+- `static`: Static sites (HTML/CSS/JS served via CDN)
+- `pserv`: Private services (internal only, within same account)
+
+Service type details: [references/service-types.md](references/service-types.md)
+Runtime options: [references/runtimes.md](references/runtimes.md)
+Template examples: [assets/](assets/)
+
+### Step 2.5: Immediate Next Steps (Always Provide)
+
+After creating `render.yaml`, always give the user a short, explicit checklist and run validation immediately when the CLI is available:
+1. **Authenticate (CLI)**: run `render whoami -o json` (if not logged in, run `render login` or set `RENDER_API_KEY`)
+2. **Validate (recommended)**: run `render blueprints validate`
+   - If the CLI isn't installed, offer to install it and provide the command.
+3. **Commit + push**: `git add render.yaml && git commit -m "Add Render deployment configuration" && git push origin main`
+4. **Open Dashboard**: Use the Blueprint deeplink and complete Git OAuth if prompted
+5. **Fill secrets**: Set env vars marked `sync: false`
+6. **Deploy**: Click "Apply" and monitor the deploy
+
+### Step 3: Validate Configuration
+
+Validate the render.yaml file to catch errors before deployment. If the CLI is installed, run the commands directly; only prompt the user if the CLI is missing:
+
+```bash
+render whoami -o json  # Ensure CLI is authenticated (won't always prompt)
+render blueprints validate
+```
+
+Fix any validation errors before proceeding. Common issues:
+- Missing required fields (`name`, `type`, `runtime`)
+- Invalid runtime values
+- Incorrect YAML syntax
+- Invalid environment variable references
+
+Configuration guide: [references/configuration-guide.md](references/configuration-guide.md)
+
+### Step 4: Commit and Push
+
+**IMPORTANT:** You must merge the `render.yaml` file into your repository before deploying.
+
+Ensure the `render.yaml` file is committed and pushed to your Git remote:
+
+```bash
+git add render.yaml
+git commit -m "Add Render deployment configuration"
+git push origin main
+```
+
+If there is no Git remote yet, stop here and guide the user to create a GitHub/GitLab/Bitbucket repo, add it as `origin`, and push before continuing.
+
+**Why this matters:** The Dashboard deeplink will read the render.yaml from your repository. If the file isn't merged and pushed, Render won't find the configuration and deployment will fail.
+
+Verify the file is in your remote repository before proceeding to the next step.
+
+### Step 5: Generate Deeplink
+
+Get the Git repository URL:
+
+```bash
+git remote get-url origin
+```
+
+This will return a URL from your Git provider. **If the URL is SSH format, convert it to HTTPS:**
+
+| SSH Format | HTTPS Format |
+|------------|--------------|
+| `git@github.com:user/repo.git` | `https://github.com/user/repo` |
+| `git@gitlab.com:user/repo.git` | `https://gitlab.com/user/repo` |
+| `git@bitbucket.org:user/repo.git` | `https://bitbucket.org/user/repo` |
+
+**Conversion pattern:** Replace `git@<host>:` with `https://<host>/` and remove `.git` suffix.
+
+Format the Dashboard deeplink using the HTTPS repository URL:
+```
+https://dashboard.render.com/blueprint/new?repo=<REPOSITORY_URL>
+```
+
+Example:
+```
+https://dashboard.render.com/blueprint/new?repo=https://github.com/username/repo-name
+```
+
+### Step 6: Guide User
+
+**CRITICAL:** Ensure the user has merged and pushed the render.yaml file to their repository before clicking the deeplink. If the file isn't in the repository, Render cannot read the Blueprint configuration and deployment will fail.
+
+Provide the deeplink to the user with these instructions:
+
+1. **Verify render.yaml is merged** - Confirm the file exists in your repository on GitHub/GitLab/Bitbucket
+2. Click the deeplink to open Render Dashboard
+3. Complete Git provider OAuth if prompted
+4. Name the Blueprint (or use default from render.yaml)
+5. Fill in secret environment variables (marked with `sync: false`)
+6. Review services and databases configuration
+7. Click "Apply" to deploy
+
+The deployment will begin automatically. Users can monitor progress in the Render Dashboard.
+
+### Step 7: Verify Deployment
+
+After the user deploys via Dashboard, verify everything is working.
+
+**Check deployment status via MCP:**
+```
+list_deploys(serviceId: "<service-id>", limit: 1)
+```
+Look for `status: "live"` to confirm successful deployment.
+
+**Check for runtime errors (wait 2-3 minutes after deploy):**
+```
+list_logs(resource: ["<service-id>"], level: ["error"], limit: 20)
+```
+
+**Check service health metrics:**
+```
+get_metrics(
+  resourceId: "<service-id>",
+  metricTypes: ["http_request_count", "cpu_usage", "memory_usage"]
+)
+```
+
+If errors are found, proceed to the **Post-deploy verification and basic triage** section below.
+
+---
+
+# Method 2: Direct Service Creation (Quick Single-Service Deployments)
+
+For simple deployments without Infrastructure-as-Code, create services directly via MCP tools.
+
+## When to Use Direct Creation
+
+- Single web service or static site
+- Quick prototypes or demos
+- When you don't need a render.yaml file in your repo
+- Adding databases or cron jobs to existing projects
+
+## Prerequisites for Direct Creation
+
+**Repository must be pushed to a Git provider.** Render clones your repository to build and deploy services.
+
+```bash
+git remote -v  # Verify remote exists
+git push origin main  # Ensure code is pushed
+```
+
+Supported providers: GitHub, GitLab, Bitbucket
+
+If no remote exists, stop and ask the user to create/push a remote or switch to Docker image deploy.
+
+**Note:** MCP does not support creating image-backed services. Use the Dashboard/API for prebuilt Docker image deploys.
+
+## Direct Creation Workflow
+
+Use the concise steps below, and refer to [references/direct-creation.md](references/direct-creation.md) for full MCP command examples and follow-on configuration.
+
+### Step 1: Analyze Codebase
+Use [references/codebase-analysis.md](references/codebase-analysis.md) to determine runtime, build/start commands, env vars, and datastores.
+
+### Step 2: Create Resources via MCP
+Create the service (web or static) and any required databases or key-value stores. See [references/direct-creation.md](references/direct-creation.md).
+
+If MCP returns an error about missing Git credentials or repo access, stop and guide the user to connect their Git provider in the Render Dashboard, then retry.
+
+### Step 3: Configure Environment Variables
+Add required env vars via MCP after creation. See [references/direct-creation.md](references/direct-creation.md).
+
+Remind the user that secrets can be set in the Dashboard if they prefer not to pass them via MCP.
+
+### Step 4: Verify Deployment
+Check deploy status, logs, and metrics. See [references/direct-creation.md](references/direct-creation.md).
+
+---
+
+For service discovery, configuration details, quick commands, and common issues, see [references/deployment-details.md](references/deployment-details.md).
+
+---
+
+# Post-deploy verification and basic triage (All Methods)
+
+Keep this short and repeatable. If any check fails, fix it before redeploying.
+
+1. Confirm the latest deploy is `live` and serving traffic
+2. Hit the health endpoint (or root) and verify a 200 response
+3. Scan recent error logs for a clear failure signature
+4. Verify required env vars and port binding (`0.0.0.0:$PORT`)
+
+Detailed checklist and commands: [references/post-deploy-checks.md](references/post-deploy-checks.md)
+
+If the service fails to start or health checks time out, use the basic triage guide:
+[references/troubleshooting-basics.md](references/troubleshooting-basics.md)
+
+## Troubleshooting
+
+### Escalated Network Access
+
+If deployment fails due to network issues (timeouts, DNS errors, connection resets), rerun the deploy with escalated permissions (use `sandbox_permissions=require_escalated`). The deploy requires escalated network access when sandbox networking blocks outbound requests.
+
+Example guidance to the user:
+
+```
+The deploy needs escalated network access to deploy to Render. I can rerun the command with escalated permissions—want me to proceed?
+```
+
+Optional: If you need deeper diagnostics (metrics/DB checks/error catalog), suggest installing the
+`render-debug` skill. It is not required for the core deploy flow.

package/skills/engineering/render-deploy/agents/openai.yaml

@@ -0,0 +1,14 @@
+interface:
+  display_name: "Render Deploy"
+  short_description: "Deploy applications to Render via Blueprints or MCP"
+  icon_small: "./assets/render-small.svg"
+  icon_large: "./assets/render.png"
+  default_prompt: "Deploy this application to Render and provide service URL, env vars, and next checks."
+
+dependencies:
+  tools:
+    - type: "mcp"
+      value: "render"
+      description: "Render MCP server"
+      transport: "streamable_http"
+      url: "https://mcp.render.com/mcp"