2026-10-16T15:10:19.716Z Diffinery runner: job deploy (Deploy to Cloudflare) for codician/diffinery@648c2d700ea2 2026-10-16T15:10:19.737Z Runner: image diffinery-runner:0d9b89e0a449e5faecf2b19c, in lhr13, WEUR, container 15c773f5e17e8e8790f4ba38c81f307d29b48e5500be46c2f08e625ec2ffa455 2026-10-16T15:10:19.737Z Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), this job uses what a smaller runner doesn't have; runs-on: diffinery-large (or -medium, -small, -tiny) sets a size 2026-10-16T15:10:19.737Z Host: AMD EPYC (family 25, model 1), 4 vCPUs, 2000 MHz 2026-10-16T15:10:19.738Z Workspace: /workspace/diffinery 2026-10-16T15:10:19.801Z ##[group]Run actions/checkout@v4 2026-10-16T15:10:19.801Z with: 2026-10-16T15:10:19.801Z ref: 648c2d700ea2ee0be05c40eafa8309f231e0eafa 2026-10-16T15:10:19.801Z ##[endgroup] 2026-10-16T15:10:19.804Z Syncing repository: codician/diffinery 2026-10-16T15:10:19.893Z Fetching the repository (depth 1) 2026-10-16T15:10:20.618Z remote: Enumerating objects: 628, done. 2026-10-16T15:10:20.797Z Receiving objects: 0% (1/628) Receiving objects: 1% (7/628) Receiving objects: 2% (13/628) Receiving objects: 3% (19/628) Receiving objects: 4% (26/628) Receiving objects: 5% (32/628) Receiving objects: 6% (38/628) Receiving objects: 7% (44/628) Receiving objects: 8% (51/628) Receiving objects: 9% (57/628) Receiving objects: 10% (63/628) Receiving objects: 11% (70/628) Receiving objects: 12% (76/628) Receiving objects: 13% (82/628) Receiving objects: 14% (88/628) Receiving objects: 15% (95/628) Receiving objects: 16% (101/628) Receiving objects: 17% (107/628) Receiving objects: 18% (114/628) Receiving objects: 19% (120/628) Receiving objects: 20% (126/628) Receiving objects: 21% (132/628) Receiving objects: 22% (139/628) Receiving objects: 23% (145/628) Receiving objects: 24% (151/628) Receiving objects: 25% (157/628) Receiving objects: 26% (164/628) Receiving objects: 27% (170/628) Receiving objects: 28% (176/628) Receiving objects: 29% (183/628) Receiving objects: 30% (189/628) Receiving objects: 31% (195/628) Receiving objects: 32% (201/628) Receiving objects: 33% (208/628) Receiving objects: 34% (214/628) Receiving objects: 35% (220/628) Receiving objects: 36% (227/628) Receiving objects: 37% (233/628) Receiving objects: 38% (239/628) Receiving objects: 39% (245/628) Receiving objects: 40% (252/628) Receiving objects: 41% (258/628) Receiving objects: 42% (264/628) Receiving objects: 43% (271/628) Receiving objects: 44% (277/628) Receiving objects: 45% (283/628) Receiving objects: 46% (289/628) Receiving objects: 47% (296/628) Receiving objects: 48% (302/628) Receiving objects: 49% (308/628) Receiving objects: 50% (314/628) Receiving objects: 51% (321/628) Receiving objects: 52% (327/628) Receiving objects: 53% (333/628) Receiving objects: 54% (340/628) Receiving objects: 55% (346/628) Receiving objects: 56% (352/628) Receiving objects: 57% (358/628) Receiving objects: 58% (365/628) Receiving objects: 59% (371/628) Receiving objects: 60% (377/628) Receiving objects: 61% (384/628) Receiving objects: 62% (390/628) Receiving objects: 63% (396/628) Receiving objects: 64% (402/628) Receiving objects: 65% (409/628) Receiving objects: 66% (415/628) Receiving objects: 67% (421/628) Receiving objects: 68% (428/628) Receiving objects: 69% (434/628) Receiving objects: 70% (440/628) Receiving objects: 71% (446/628) Receiving objects: 72% (453/628) Receiving objects: 73% (459/628) Receiving objects: 74% (465/628) Receiving objects: 75% (471/628) Receiving objects: 76% (478/628) Receiving objects: 77% (484/628) Receiving objects: 78% (490/628) Receiving objects: 79% (497/628) Receiving objects: 80% (503/628) Receiving objects: 81% (509/628) Receiving objects: 82% (515/628) Receiving objects: 83% (522/628) Receiving objects: 84% (528/628) Receiving objects: 85% (534/628) Receiving objects: 86% (541/628) Receiving objects: 87% (547/628) Receiving objects: 88% (553/628) Receiving objects: 89% (559/628) Receiving objects: 90% (566/628) Receiving objects: 91% (572/628) Receiving objects: 92% (578/628) Receiving objects: 93% (585/628) Receiving objects: 94% (591/628) Receiving objects: 95% (597/628) Receiving objects: 96% (603/628) remote: Total 628 (delta 0), reused 628 (delta 0) 2026-10-16T15:10:20.799Z Receiving objects: 97% (610/628) Receiving objects: 98% (616/628) Receiving objects: 99% (622/628) Receiving objects: 100% (628/628) Receiving objects: 100% (628/628), 2.57 MiB | 14.79 MiB/s, done. 2026-10-16T15:10:20.815Z From https://diffinery.com/codician/diffinery 2026-10-16T15:10:20.815Z * [new ref] 648c2d700ea2ee0be05c40eafa8309f231e0eafa -> origin/diffinery-checkout 2026-10-16T15:10:20.974Z Note: switching to '648c2d700ea2ee0be05c40eafa8309f231e0eafa'. 2026-10-16T15:10:20.974Z 2026-10-16T15:10:20.974Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-16T15:10:20.974Z changes and commit them, and you can discard any commits you make in this 2026-10-16T15:10:20.974Z state without impacting any branches by switching back to a branch. 2026-10-16T15:10:20.974Z 2026-10-16T15:10:20.974Z If you want to create a new branch to retain commits you create, you may 2026-10-16T15:10:20.974Z do so (now or later) by using -c with the switch command. Example: 2026-10-16T15:10:20.974Z 2026-10-16T15:10:20.974Z git switch -c 2026-10-16T15:10:20.974Z 2026-10-16T15:10:20.974Z Or undo this operation with: 2026-10-16T15:10:20.974Z 2026-10-16T15:10:20.974Z git switch - 2026-10-16T15:10:20.974Z 2026-10-16T15:10:20.974Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-16T15:10:20.974Z 2026-10-16T15:10:20.974Z HEAD is now at 648c2d7 Docs: agent code per commit, protected concurrency, search and paging limits, encrypted webhook secrets, key rotation and image proxy in descriptions (#213) 2026-10-16T15:10:20.981Z HEAD is now at 648c2d700ea2ee0be05c40eafa8309f231e0eafa 2026-10-16T15:10:21.131Z Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' 2026-10-16T15:10:21.649Z ##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 2026-10-16T15:10:21.649Z with: 2026-10-16T15:10:21.649Z dest: ~/setup-pnpm 2026-10-16T15:10:21.649Z run_install: null 2026-10-16T15:10:21.649Z cache: false 2026-10-16T15:10:21.649Z cache_dependency_path: pnpm-lock.yaml 2026-10-16T15:10:21.649Z package_json_file: package.json 2026-10-16T15:10:21.649Z standalone: false 2026-10-16T15:10:21.649Z ##[endgroup] 2026-10-16T15:10:22.015Z ##[group]Running self-installer... 2026-10-16T15:10:23.304Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T15:10:23.332Z Packages: +1 2026-10-16T15:10:23.332Z + 2026-10-16T15:10:24.214Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-16T15:10:24.271Z 2026-10-16T15:10:24.271Z dependencies: 2026-10-16T15:10:24.271Z + pnpm 10.28.0 (12.14.0 is available) 2026-10-16T15:10:24.271Z 2026-10-16T15:10:24.278Z Done in 1.8s 2026-10-16T15:10:24.313Z ##[endgroup] 2026-10-16T15:10:24.314Z Installation Completed! 2026-10-16T15:10:24.424Z ##[group]Run actions/setup-node@v4 2026-10-16T15:10:24.424Z with: 2026-10-16T15:10:24.424Z node-version: 22 2026-10-16T15:10:24.424Z cache: pnpm 2026-10-16T15:10:24.424Z ##[endgroup] 2026-10-16T15:10:24.436Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-16T15:10:31.382Z Cache Size: ~216 MB (226515969 B) 2026-10-16T15:10:37.263Z Cache restored from key: node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0 2026-10-16T15:10:37.425Z ##[group]Run pnpm install --frozen-lockfile 2026-10-16T15:10:37.425Z ##[endgroup] 2026-10-16T15:10:38.489Z Scope: all 7 workspace projects 2026-10-16T15:10:38.633Z Lockfile is up to date, resolution step is skipped 2026-10-16T15:10:38.746Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T15:10:38.837Z Packages: +249 2026-10-16T15:10:38.837Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-16T15:10:39.750Z Progress: resolved 249, reused 243, downloaded 0, added 160 2026-10-16T15:10:40.420Z Progress: resolved 249, reused 243, downloaded 0, added 249, done 2026-10-16T15:10:57.969Z 2026-10-16T15:10:57.970Z devDependencies: 2026-10-16T15:10:57.970Z + turbo 2.11.7 2026-10-16T15:10:57.970Z + typescript 5.9.3 2026-10-16T15:10:57.970Z 2026-10-16T15:10:58.592Z Done in 21s using pnpm v10.28.0 2026-10-16T15:10:58.876Z ##[group]Run pnpm -r --if-present build 2026-10-16T15:10:58.876Z ##[endgroup] 2026-10-16T15:10:59.617Z Scope: 6 of 7 workspace projects 2026-10-16T15:10:59.624Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-16T15:10:59.624Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T15:10:59.626Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs 2026-10-16T15:10:59.626Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T15:10:59.773Z apps/cli build: dist/diffinery.mjs 445.1kb 2026-10-16T15:10:59.773Z apps/cli build: ⚡ Done in 104ms 2026-10-16T15:10:59.782Z apps/cli build: Done 2026-10-16T15:10:59.821Z containers/runner build: dist/agent.mjs 666.9kb 2026-10-16T15:10:59.822Z containers/runner build: ⚡ Done in 143ms 2026-10-16T15:10:59.829Z containers/runner build: Done 2026-10-16T15:11:01.629Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-16T15:11:02.342Z apps/diffinery build: docs: 65 pages (+2 generated at runtime), CLI 0.1.0 (234 KiB) 2026-10-16T15:11:02.364Z apps/diffinery build: Done 2026-10-16T15:11:02.506Z ##[group]Run scripts/runner-image.sh 2026-10-16T15:11:02.506Z env: 2026-10-16T15:11:02.506Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T15:11:02.506Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T15:11:02.506Z ##[endgroup] 2026-10-16T15:11:06.963Z reusing diffinery-runner:0d9b89e0a449e5faecf2b19c: the runner hasn't changed since it was built 2026-10-16T15:11:06.963Z registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c 2026-10-16T15:11:07.199Z ##[group]Run scripts/bootstrap.sh 2026-10-16T15:11:07.199Z env: 2026-10-16T15:11:07.199Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T15:11:07.199Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T15:11:07.199Z ##[endgroup] 2026-10-16T15:11:07.222Z ##[group]D1 database 2026-10-16T15:11:07.604Z D1 database exists: 2c3f0cb1-7ded-438c-88ef-4c3d39930ba6 2026-10-16T15:11:08.007Z read replication: auto (turn it on with the 'D1 read replication' workflow) 2026-10-16T15:11:08.008Z ##[endgroup] 2026-10-16T15:11:08.008Z ##[group]R2 bucket 2026-10-16T15:11:08.528Z R2 bucket exists 2026-10-16T15:11:09.472Z R2 lifecycle rules set 2026-10-16T15:11:09.472Z ##[endgroup] 2026-10-16T15:11:09.472Z ##[group]Queues 2026-10-16T15:11:10.328Z queue diffinery-events exists 2026-10-16T15:11:10.333Z queue diffinery-events-dlq exists 2026-10-16T15:11:10.343Z queue diffinery-mail exists 2026-10-16T15:11:10.344Z queue diffinery-mail-dlq exists 2026-10-16T15:11:10.351Z queue diffinery-mail-events exists 2026-10-16T15:11:10.351Z ##[endgroup] 2026-10-16T15:11:10.351Z ##[group]Email Sending event subscription 2026-10-16T15:11:12.088Z event subscription acc79fd40fbe4ed3ae2ecd2a538a1605 sends diffinery.com's bounces and complaints to diffinery-mail-events 2026-10-16T15:11:12.088Z ##[endgroup] 2026-10-16T15:11:12.094Z ##[group]Email Sending for diffinery.com 2026-10-16T15:11:12.514Z zone diffinery.com (379c97b13ecaec46db00b8e87f377c37) 2026-10-16T15:11:12.731Z can't read Email Sending settings with this token (10000: Authentication error), checking public DNS instead 2026-10-16T15:11:12.833Z ok MX cf-bounce.diffinery.com 2026-10-16T15:11:12.931Z ok TXT cf-bounce.diffinery.com (SPF) 2026-10-16T15:11:13.049Z ok TXT _dmarc.diffinery.com 2026-10-16T15:11:13.049Z diffinery.com looks onboarded to Email Sending (public DNS) 2026-10-16T15:11:13.051Z ##[endgroup] 2026-10-16T15:11:13.051Z ##[group]Turnstile 2026-10-16T15:11:14.052Z Turnstile widget "diffinery diffinery.com" exists: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-16T15:11:14.984Z TURNSTILE_SECRET goes with site key 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-16T15:11:14.985Z site key: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-16T15:11:14.985Z ##[endgroup] 2026-10-16T15:11:14.985Z ##[group]Cloudflare Access 2026-10-16T15:11:18.543Z Access app covers diffinery.com/auth/access 2026-10-16T15:11:18.652Z team=assaysol-pages.cloudflareaccess.com aud=set 2026-10-16T15:11:18.652Z ##[endgroup] 2026-10-16T15:11:18.652Z ##[group]Render config and migrate D1 2026-10-16T15:11:18.733Z wrote /workspace/diffinery/apps/diffinery/wrangler.deploy.jsonc 2026-10-16T15:11:21.948Z 2026-10-16T15:11:21.948Z ⛅️ wrangler 4.149.0 2026-10-16T15:11:21.948Z ──────────────────── 2026-10-16T15:11:21.949Z Resource location: remote 2026-10-16T15:11:21.949Z 2026-10-16T15:11:22.854Z ✅ No migrations to apply! 2026-10-16T15:11:23.011Z ##[endgroup] 2026-10-16T15:11:23.167Z ##[group]Run pnpm exec wrangler deploy -c wrangler.deploy.jsonc 2026-10-16T15:11:23.167Z env: 2026-10-16T15:11:23.167Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T15:11:23.167Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T15:11:23.167Z ##[endgroup] 2026-10-16T15:11:25.692Z 2026-10-16T15:11:25.692Z ⛅️ wrangler 4.149.0 (update available 4.151.1) 2026-10-16T15:11:25.692Z ─────────────────────────────────────────────── 2026-10-16T15:11:25.715Z 2026-10-16T15:11:25.715Z Cloudflare collects anonymous telemetry about your usage of Wrangler. Learn more at https://github.com/cloudflare/workers-sdk/tree/main/packages/wrangler/telemetry.md 2026-10-16T15:11:32.942Z Total Upload: 12584.50 KiB / gzip: 2937.78 KiB 2026-10-16T15:11:41.042Z Worker Startup Time: 70 ms 2026-10-16T15:11:41.046Z Your Worker has access to the following bindings: 2026-10-16T15:11:41.047Z Binding Resource 2026-10-16T15:11:41.047Z env.REPO (RepoDO) Durable Object 2026-10-16T15:11:41.047Z env.SCHEDULER (SchedulerDO) Durable Object 2026-10-16T15:11:41.047Z env.RUNNER (RunnerContainer) Durable Object 2026-10-16T15:11:41.048Z env.RUNNER_MEDIUM (RunnerContainerMedium) Durable Object 2026-10-16T15:11:41.048Z env.RUNNER_SMALL (RunnerContainerSmall) Durable Object 2026-10-16T15:11:41.048Z env.RUNNER_TINY (RunnerContainerTiny) Durable Object 2026-10-16T15:11:41.048Z env.SANDBOX (SandboxContainer) Durable Object 2026-10-16T15:11:41.048Z env.IMPORTER (ImportContainer) Durable Object 2026-10-16T15:11:41.048Z env.PROJECT (ProjectDO) Durable Object 2026-10-16T15:11:41.048Z env.RUN_WORKFLOW (RunWorkflow) Workflow 2026-10-16T15:11:41.048Z env.IMPORT_WORKFLOW (ImportWorkflow) Workflow 2026-10-16T15:11:41.048Z env.ACCOUNT_WORKFLOW (AccountWorkflow) Workflow 2026-10-16T15:11:41.049Z env.EMAIL (unrestricted) Send Email 2026-10-16T15:11:41.049Z env.EVENTS (inherited) Queue 2026-10-16T15:11:41.049Z env.MAIL (inherited) Queue 2026-10-16T15:11:41.049Z env.DB (diffinery) D1 Database 2026-10-16T15:11:41.049Z env.BUCKET (diffinery-data) R2 Bucket 2026-10-16T15:11:41.049Z env.RL_AUTH (20 requests/60s) Rate Limit 2026-10-16T15:11:41.049Z env.RL_ANON (300 requests/60s) Rate Limit 2026-10-16T15:11:41.049Z env.RL_ACCOUNT (2000 requests/60s) Rate Limit 2026-10-16T15:11:41.049Z env.RL_CREATE (60 requests/60s) Rate Limit 2026-10-16T15:11:41.049Z env.RL_MODEL (600 requests/60s) Rate Limit 2026-10-16T15:11:41.050Z env.PUBLIC_URL ("https://diffinery.com") Environment Variable 2026-10-16T15:11:41.050Z env.MAIL_FROM ("notifications@diffinery.com") Environment Variable 2026-10-16T15:11:41.050Z env.BOOTSTRAP_ADMINS ("iletisim@canberkdemirci.com,canberkde...") Environment Variable 2026-10-16T15:11:41.050Z env.ACCESS_TEAM_DOMAIN ("assaysol-pages.cloudflareaccess.com") Environment Variable 2026-10-16T15:11:41.050Z env.ACCESS_AUD ("a40b189c8d5b52a71b3c3ec3260f18157c284...") Environment Variable 2026-10-16T15:11:41.050Z env.RUNNER_IMAGE ("diffinery-runner:0d9b89e0a449e5faecf2...") Environment Variable 2026-10-16T15:11:41.050Z env.TURNSTILE_SITE_KEY ("0x4AAAAAAFWX2OQHwh_jT9_h") Environment Variable 2026-10-16T15:11:41.050Z 2026-10-16T15:11:41.051Z The following containers are available: 2026-10-16T15:11:41.051Z - diffinery-runnercontainer (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c) 2026-10-16T15:11:41.051Z - diffinery-runnercontainermedium (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c) 2026-10-16T15:11:41.051Z - diffinery-runnercontainersmall (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c) 2026-10-16T15:11:41.051Z - diffinery-runnercontainertiny (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c) 2026-10-16T15:11:41.051Z - diffinery-sandboxcontainer (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c) 2026-10-16T15:11:41.051Z - diffinery-importcontainer (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c) 2026-10-16T15:11:41.051Z 2026-10-16T15:11:41.051Z Uploaded diffinery (10.13 sec) 2026-10-16T15:11:41.777Z ╭ Deploy a container application deploy changes to your application 2026-10-16T15:11:41.778Z │ 2026-10-16T15:11:42.122Z │ Container application changes 2026-10-16T15:11:42.122Z │ 2026-10-16T15:11:42.127Z ├ no changes diffinery-runnercontainer 2026-10-16T15:11:42.127Z │ 2026-10-16T15:11:42.127Z ╰ No changes to be made 2026-10-16T15:11:42.127Z 2026-10-16T15:11:42.127Z ╭ Deploy a container application deploy changes to your application 2026-10-16T15:11:42.127Z │ 2026-10-16T15:11:42.719Z │ Container application changes 2026-10-16T15:11:42.719Z │ 2026-10-16T15:11:42.720Z ├ no changes diffinery-runnercontainermedium 2026-10-16T15:11:42.720Z │ 2026-10-16T15:11:42.720Z ╰ No changes to be made 2026-10-16T15:11:42.720Z 2026-10-16T15:11:42.721Z ╭ Deploy a container application deploy changes to your application 2026-10-16T15:11:42.721Z │ 2026-10-16T15:11:43.113Z │ Container application changes 2026-10-16T15:11:43.113Z │ 2026-10-16T15:11:43.114Z ├ no changes diffinery-runnercontainersmall 2026-10-16T15:11:43.114Z │ 2026-10-16T15:11:43.114Z ╰ No changes to be made 2026-10-16T15:11:43.114Z 2026-10-16T15:11:43.114Z ╭ Deploy a container application deploy changes to your application 2026-10-16T15:11:43.114Z │ 2026-10-16T15:11:43.398Z │ Container application changes 2026-10-16T15:11:43.398Z │ 2026-10-16T15:11:43.398Z ├ no changes diffinery-runnercontainertiny 2026-10-16T15:11:43.398Z │ 2026-10-16T15:11:43.398Z ╰ No changes to be made 2026-10-16T15:11:43.398Z 2026-10-16T15:11:43.398Z ╭ Deploy a container application deploy changes to your application 2026-10-16T15:11:43.398Z │ 2026-10-16T15:11:43.658Z │ Container application changes 2026-10-16T15:11:43.658Z │ 2026-10-16T15:11:43.659Z ├ no changes diffinery-sandboxcontainer 2026-10-16T15:11:43.659Z │ 2026-10-16T15:11:43.659Z ╰ No changes to be made 2026-10-16T15:11:43.659Z 2026-10-16T15:11:43.659Z ╭ Deploy a container application deploy changes to your application 2026-10-16T15:11:43.659Z │ 2026-10-16T15:11:43.897Z │ Container application changes 2026-10-16T15:11:43.897Z │ 2026-10-16T15:11:43.898Z ├ no changes diffinery-importcontainer 2026-10-16T15:11:43.898Z │ 2026-10-16T15:11:43.898Z ╰ No changes to be made 2026-10-16T15:11:43.898Z 2026-10-16T15:11:52.196Z Deployed diffinery triggers (8.30 sec) 2026-10-16T15:11:52.196Z diffinery.com/* (zone name: diffinery.com) 2026-10-16T15:11:52.196Z schedule: */5 * * * * 2026-10-16T15:11:52.196Z Producer for diffinery-events 2026-10-16T15:11:52.196Z Producer for diffinery-mail 2026-10-16T15:11:52.196Z Consumer for diffinery-events 2026-10-16T15:11:52.196Z Consumer for diffinery-mail 2026-10-16T15:11:52.196Z Consumer for diffinery-mail-events 2026-10-16T15:11:52.196Z workflow: diffinery-run 2026-10-16T15:11:52.196Z workflow: diffinery-import 2026-10-16T15:11:52.197Z workflow: diffinery-account 2026-10-16T15:11:52.198Z Current Version ID: 5a848289-eae2-4fc9-8406-39084e39eb2d 2026-10-16T15:11:52.522Z ##[group]Run scripts/wait-container-rollout.sh 2026-10-16T15:11:52.522Z env: 2026-10-16T15:11:52.522Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T15:11:52.522Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T15:11:52.522Z ##[endgroup] 2026-10-16T15:11:52.944Z ##[group]Run scripts/ensure-secrets.sh 2026-10-16T15:11:52.944Z env: 2026-10-16T15:11:52.944Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T15:11:52.944Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T15:11:52.944Z ##[endgroup] 2026-10-16T15:11:56.476Z ##[group]Run # A new custom domain can take a few minutes to get its certificate. 2026-10-16T15:11:56.476Z for i in $(seq 1 30); do 2026-10-16T15:11:56.476Z code=$(curl -s -o /dev/null -w '%{http_code}' https://$DIFFINERY_DOMAIN/healthz) && [ "$code" = 200 ] && exit 0 2026-10-16T15:11:56.476Z sleep 10 2026-10-16T15:11:56.476Z done 2026-10-16T15:11:56.476Z echo "::error::https://$DIFFINERY_DOMAIN/healthz did not return 200 (last: $code). Check that the $DIFFINERY_DOMAIN DNS record is proxied (orange cloud)."; exit 1 2026-10-16T15:11:56.476Z ##[endgroup] 2026-10-16T15:11:56.692Z ##[group]Run set -u 2026-10-16T15:11:56.692Z page=$(curl -sS https://$DIFFINERY_DOMAIN/login) 2026-10-16T15:11:56.692Z grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; } 2026-10-16T15:11:56.692Z echo "/login serves the passkey sign-in page" 2026-10-16T15:11:56.692Z loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://$DIFFINERY_DOMAIN/auth/access) 2026-10-16T15:11:56.692Z echo "/auth/access -> $loc" 2026-10-16T15:11:56.692Z [[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work" 2026-10-16T15:11:56.692Z report=$(curl -sS -w '\n%{http_code}' https://$DIFFINERY_DOMAIN/security/report) 2026-10-16T15:11:56.692Z code=${report##*$'\n'} 2026-10-16T15:11:56.692Z if grep -q 'class="cf-turnstile"' <<<"$report"; then 2026-10-16T15:11:56.692Z echo "/security/report shows Turnstile to people who aren't signed in" 2026-10-16T15:11:56.692Z elif grep -q 'has no Turnstile configured' <<<"$report"; then 2026-10-16T15:11:56.692Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: the Worker lacks TURNSTILE_SITE_KEY or TURNSTILE_SECRET (see the bootstrap and Worker secrets steps)" 2026-10-16T15:11:56.692Z else 2026-10-16T15:11:56.692Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: it answered $code without the form" 2026-10-16T15:11:56.692Z fi 2026-10-16T15:11:56.692Z for kind in js css; do 2026-10-16T15:11:56.692Z asset=$(grep -o "/-/kumo/[a-z0-9]*\.$kind" <<<"$page" | head -1) 2026-10-16T15:11:56.692Z [ -n "$asset" ] || { echo "::error::/login does not load the Kumo $kind bundle"; exit 1; } 2026-10-16T15:11:56.692Z code=$(curl -sS -o /dev/null -w '%{http_code}' "https://$DIFFINERY_DOMAIN$asset") 2026-10-16T15:11:56.692Z [ "$code" = 200 ] || { echo "::error::$asset returned $code"; exit 1; } 2026-10-16T15:11:56.692Z echo "$asset -> 200" 2026-10-16T15:11:56.692Z done 2026-10-16T15:11:56.692Z ##[endgroup] 2026-10-16T15:11:56.810Z /login serves the passkey sign-in page 2026-10-16T15:11:56.899Z /auth/access -> 302 https://assaysol-pages.cloudflareaccess.com/cdn-cgi/access/login/diffinery.com?kid=a40b189c8d5b52a71b3c3ec3260f18157c2840312dbfc32bee30e2609b15d02e&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjhlZTM2NTQ0OTNkMjJhYTM1NzJlMjVjMGUwZTM0ZDIxNDk4YjZjNmIxMzRhMWE2ZjcxNzk4MDFkMjVmMTcwMDQifQ.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.gaGhun4oByZ3rvoAH6fnULFAJ0XMYFH2K3mGiMzx5qXJ00ADCBrkNytTIM43OM41nF_cOlTcYmcGv_VDmA2xFV8_swvq_Z48hYITASOBfi1HYtaw-Fpvtlx523ASk6xp5PGP94MMcroC6mwTHjmrm2FE0g3U_KBq0W3afpjw4weQk33WW3s0qMPVOueO42yNNceFsPJidWrEaP6cqumdJ2tdNnHk3dy21k8DPWB9HuDTmVMp66uJuVobt_h_2ywFMT7sQAAG3s5XgK9p-hem9oKRG4ck0Gn5_WqT9PRZWC0ZpO8nhJOYR7W0kEsh8dZf0V8tVayNPh7LoAfTi4bwjw&redirect_url=%2Fauth%2Faccess 2026-10-16T15:11:57.019Z /security/report shows Turnstile to people who aren't signed in 2026-10-16T15:11:57.112Z /-/kumo/1emzyjz.js -> 200 2026-10-16T15:11:57.234Z /-/kumo/1tekldh.css -> 200 2026-10-16T15:11:57.348Z ##[group]Run set -u 2026-10-16T15:11:57.348Z for p in /favicon.ico /favicon.svg /favicon-48.png /apple-touch-icon.png /og-image.png /site.webmanifest /robots.txt /sitemap.xml; do 2026-10-16T15:11:57.348Z code=$(curl -sS -o /dev/null -w '%{http_code} %{content_type}' "https://$DIFFINERY_DOMAIN$p") 2026-10-16T15:11:57.348Z [[ "$code" == 200\ * ]] || { echo "::error::$p returned $code"; exit 1; } 2026-10-16T15:11:57.348Z echo "$p -> $code" 2026-10-16T15:11:57.348Z done 2026-10-16T15:11:57.348Z home=$(curl -sS https://$DIFFINERY_DOMAIN/) 2026-10-16T15:11:57.348Z for tag in 'rel="icon" href="/favicon.ico"' 'property="og:image"' 'rel="canonical"' 'application/ld+json'; do 2026-10-16T15:11:57.348Z grep -qF "$tag" <<<"$home" || { echo "::error::the home page is missing $tag"; exit 1; } 2026-10-16T15:11:57.348Z done 2026-10-16T15:11:57.348Z echo "the home page carries the favicon, canonical, Open Graph and structured data tags" 2026-10-16T15:11:57.348Z bm=$(curl -sS -D - -o /dev/null https://$DIFFINERY_DOMAIN/sitemap.xml | tr -d '\r' | sed -n 's/^x-d1-bookmark: //Ip') 2026-10-16T15:11:57.348Z [ -n "$bm" ] || { echo "::error::D1 queries don't run in a session (no x-d1-bookmark header)"; exit 1; } 2026-10-16T15:11:57.348Z echo "D1 sessions are on (bookmark $bm)" 2026-10-16T15:11:57.348Z ##[endgroup] 2026-10-16T15:11:57.447Z /favicon.ico -> 200 image/x-icon 2026-10-16T15:11:57.554Z /favicon.svg -> 200 image/svg+xml 2026-10-16T15:11:57.650Z /favicon-48.png -> 200 image/png 2026-10-16T15:11:57.758Z /apple-touch-icon.png -> 200 image/png 2026-10-16T15:11:57.861Z /og-image.png -> 200 image/png 2026-10-16T15:11:57.975Z /site.webmanifest -> 200 application/manifest+json 2026-10-16T15:11:58.060Z /robots.txt -> 200 text/plain; charset=UTF-8 2026-10-16T15:11:58.507Z /sitemap.xml -> 200 application/xml; charset=utf-8 2026-10-16T15:11:58.643Z the home page carries the favicon, canonical, Open Graph and structured data tags 2026-10-16T15:11:58.776Z D1 sessions are on (bookmark 00000340-00004ca3-00005106-f8ef89a339aa688c07900a995a0cb358) 2026-10-16T15:11:58.883Z Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0, not saving cache. 2026-10-16T15:11:59.392Z Pruning is unnecessary. 2026-10-16T15:11:59.503Z Removing persisted credentials 2026-10-16T15:11:59.583Z Host: 2% of the vCPUs' time went to other work on the host (steal) 2026-10-16T15:11:59.583Z Job completed with conclusion: success 2026-10-16T15:11:59.584Z Resources: 0.9 of 4 vCPUs busy on average (2.5 at the 95th percentile), peak memory 2.9 GiB of 11.9 GiB, peak disk 2.3 GB of 19.3 GB