What changed

apps/api/scripts/deploy-realtime.ps1 now tells "the maintenance switch is off" apart from "the switch couldn't be read":

• It says the switch is off only when wrangler reports 404: Not Found for the key.
• Any other failure, such as a 401 or 403 from a token without Workers KV read access or wrangler missing, stops the deploy with wrangler's own error, colour codes removed.
• Wrangler's stderr no longer stops the script before its exit code is read, under both PowerShell 7 (CI) and Windows PowerShell.

Why

The first non-initial relay deploy, run 41042458630 on 2026-10-30, stopped with "The realtime maintenance switch is off". The switch was on. Read with wrangler locally just before and after the run, it gave {"enabled":true,"since":"2026-10-30T10:32:45Z",...}.

The script ran wrangler with 2>$null and treated any failure as "off", so the real error was thrown away. This check had never run in CI: the only earlier relay deploy used -Initial, which skips it. The likely cause is that the CI Cloudflare token can't read Workers KV, since gateway deploys only need Workers access. That's inferred, not confirmed: the token's permissions can't be seen from here. This PR makes the next run say exactly what failed.

How

• Capture wrangler's output with 2>&1 and the error preference relaxed just around the call, then restore Stop.
• Take the JSON line as the switch value, and match the 404 on the /values/<key> URL exactly. A broad "not found" match would treat Command "wrangler" not found as "switch off" (found while testing).

Before and after

Method: the new block run with Windows PowerShell 5.1 against the real KV namespace (read-only kv key get), in four cases.

Verification

• The four cases above, run locally with Windows PowerShell 5.1. The 401 case used a deliberately invalid token.
• Not verified: PowerShell 7 locally (pwsh isn't installed on this machine); CI runs the script with pwsh. The real cause in CI is shown on the next workflow run after merge.
• The realtime maintenance switch is still on (since 10:32:45Z) with 0 live sessions, so the relay deploy can rerun as soon as this merges.

Model: Claude Opus 5.5 (effort unknown) · Harness: Claude Code in T3 Code

🤖 Generated with Claude Code