2026-10-14T16:00:04.243Z Diffinery runner: job deploy (Deploy to Cloudflare) for codician/diffinery@844812ff12a3 2026-10-14T16:00:04.308Z Runner: image diffinery-runner:75052421315d69e3ccfad876, in ams17, WEUR, container f303cfac14899379464fd3ab031d5322f4da3f033fe3e3601bb8a1b3cefd6de2 2026-10-14T16:00:04.308Z Workspace: /workspace/diffinery 2026-10-14T16:00:04.391Z ##[group]Run actions/checkout@v4 2026-10-14T16:00:04.391Z with: 2026-10-14T16:00:04.391Z ref: 844812ff12a3662e35afa8349c50860676ba412e 2026-10-14T16:00:04.391Z ##[endgroup] 2026-10-14T16:00:04.398Z Syncing repository: codician/diffinery 2026-10-14T16:00:04.546Z Fetching the repository (depth 1) 2026-10-14T16:00:05.460Z remote: Enumerating objects: 596, done. 2026-10-14T16:00:05.665Z Receiving objects: 0% (1/596) Receiving objects: 1% (6/596) Receiving objects: 2% (12/596) Receiving objects: 3% (18/596) Receiving objects: 4% (24/596) Receiving objects: 5% (30/596) Receiving objects: 6% (36/596) Receiving objects: 7% (42/596) Receiving objects: 8% (48/596) Receiving objects: 9% (54/596) Receiving objects: 10% (60/596) Receiving objects: 11% (66/596) Receiving objects: 12% (72/596) Receiving objects: 13% (78/596) Receiving objects: 14% (84/596) Receiving objects: 15% (90/596) Receiving objects: 16% (96/596) Receiving objects: 17% (102/596) Receiving objects: 18% (108/596) Receiving objects: 19% (114/596) Receiving objects: 20% (120/596) Receiving objects: 21% (126/596) Receiving objects: 22% (132/596) Receiving objects: 23% (138/596) Receiving objects: 24% (144/596) Receiving objects: 25% (149/596) Receiving objects: 26% (155/596) Receiving objects: 27% (161/596) Receiving objects: 28% (167/596) Receiving objects: 29% (173/596) Receiving objects: 30% (179/596) Receiving objects: 31% (185/596) Receiving objects: 32% (191/596) Receiving objects: 33% (197/596) Receiving objects: 34% (203/596) Receiving objects: 35% (209/596) Receiving objects: 36% (215/596) Receiving objects: 37% (221/596) Receiving objects: 38% (227/596) Receiving objects: 39% (233/596) Receiving objects: 40% (239/596) Receiving objects: 41% (245/596) Receiving objects: 42% (251/596) Receiving objects: 43% (257/596) Receiving objects: 44% (263/596) Receiving objects: 45% (269/596) Receiving objects: 46% (275/596) Receiving objects: 47% (281/596) Receiving objects: 48% (287/596) Receiving objects: 49% (293/596) Receiving objects: 50% (298/596) Receiving objects: 51% (304/596) Receiving objects: 52% (310/596) Receiving objects: 53% (316/596) Receiving objects: 54% (322/596) Receiving objects: 55% (328/596) Receiving objects: 56% (334/596) Receiving objects: 57% (340/596) Receiving objects: 58% (346/596) Receiving objects: 59% (352/596) Receiving objects: 60% (358/596) Receiving objects: 61% (364/596) Receiving objects: 62% (370/596) Receiving objects: 63% (376/596) Receiving objects: 64% (382/596) Receiving objects: 65% (388/596) Receiving objects: 66% (394/596) Receiving objects: 67% (400/596) Receiving objects: 68% (406/596) Receiving objects: 69% (412/596) Receiving objects: 70% (418/596) Receiving objects: 71% (424/596) Receiving objects: 72% (430/596) Receiving objects: 73% (436/596) Receiving objects: 74% (442/596) Receiving objects: 75% (447/596) Receiving objects: 76% (453/596) Receiving objects: 77% (459/596) Receiving objects: 78% (465/596) Receiving objects: 79% (471/596) Receiving objects: 80% (477/596) Receiving objects: 81% (483/596) Receiving objects: 82% (489/596) Receiving objects: 83% (495/596) Receiving objects: 84% (501/596) Receiving objects: 85% (507/596) Receiving objects: 86% (513/596) Receiving objects: 87% (519/596) Receiving objects: 88% (525/596) Receiving objects: 89% (531/596) Receiving objects: 90% (537/596) Receiving objects: 91% (543/596) Receiving objects: 92% (549/596) Receiving objects: 93% (555/596) Receiving objects: 94% (561/596) Receiving objects: 95% (567/596) Receiving objects: 96% (573/596) remote: Total 596 (delta 0), reused 596 (delta 0) 2026-10-14T16:00:05.667Z Receiving objects: 97% (579/596) Receiving objects: 98% (585/596) Receiving objects: 99% (591/596) Receiving objects: 100% (596/596) Receiving objects: 100% (596/596), 2.42 MiB | 12.03 MiB/s, done. 2026-10-14T16:00:05.692Z From https://diffinery.com/codician/diffinery 2026-10-14T16:00:05.692Z * [new ref] 844812ff12a3662e35afa8349c50860676ba412e -> origin/diffinery-checkout 2026-10-14T16:00:05.793Z Note: switching to '844812ff12a3662e35afa8349c50860676ba412e'. 2026-10-14T16:00:05.793Z 2026-10-14T16:00:05.793Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-14T16:00:05.793Z changes and commit them, and you can discard any commits you make in this 2026-10-14T16:00:05.793Z state without impacting any branches by switching back to a branch. 2026-10-14T16:00:05.793Z 2026-10-14T16:00:05.793Z If you want to create a new branch to retain commits you create, you may 2026-10-14T16:00:05.793Z do so (now or later) by using -c with the switch command. Example: 2026-10-14T16:00:05.793Z 2026-10-14T16:00:05.793Z git switch -c 2026-10-14T16:00:05.793Z 2026-10-14T16:00:05.793Z Or undo this operation with: 2026-10-14T16:00:05.793Z 2026-10-14T16:00:05.793Z git switch - 2026-10-14T16:00:05.793Z 2026-10-14T16:00:05.793Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-14T16:00:05.793Z 2026-10-14T16:00:05.794Z HEAD is now at 844812f One-line CLI install, and CLI sign-in through the browser (#185) 2026-10-14T16:00:05.798Z HEAD is now at 844812ff12a3662e35afa8349c50860676ba412e 2026-10-14T16:00:05.973Z Download action repository 'pnpm/action-setup@v4' 2026-10-14T16:00:06.825Z ##[group]Run pnpm/action-setup@v4 2026-10-14T16:00:06.825Z with: 2026-10-14T16:00:06.825Z dest: ~/setup-pnpm 2026-10-14T16:00:06.825Z run_install: null 2026-10-14T16:00:06.825Z cache: false 2026-10-14T16:00:06.825Z cache_dependency_path: pnpm-lock.yaml 2026-10-14T16:00:06.825Z package_json_file: package.json 2026-10-14T16:00:06.825Z standalone: false 2026-10-14T16:00:06.825Z ##[endgroup] 2026-10-14T16:00:07.213Z ##[group]Running self-installer... 2026-10-14T16:00:08.468Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-14T16:00:08.505Z Packages: +1 2026-10-14T16:00:08.505Z + 2026-10-14T16:00:09.467Z Progress: resolved 1, reused 0, downloaded 1, added 0 2026-10-14T16:00:09.519Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-14T16:00:09.561Z 2026-10-14T16:00:09.561Z dependencies: 2026-10-14T16:00:09.561Z + pnpm 10.28.0 (12.11.2 is available) 2026-10-14T16:00:09.561Z 2026-10-14T16:00:09.565Z Done in 1.9s 2026-10-14T16:00:09.601Z ##[endgroup] 2026-10-14T16:00:09.601Z Installation Completed! 2026-10-14T16:00:09.723Z ##[group]Run actions/setup-node@v4 2026-10-14T16:00:09.723Z with: 2026-10-14T16:00:09.723Z node-version: 22 2026-10-14T16:00:09.723Z cache: pnpm 2026-10-14T16:00:09.723Z ##[endgroup] 2026-10-14T16:00:09.749Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-14T16:00:18.787Z Cache Size: ~215 MB (225870423 B) 2026-10-14T16:00:26.434Z Cache restored from key: node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08 2026-10-14T16:00:26.555Z ##[group]Run pnpm install --frozen-lockfile 2026-10-14T16:00:26.555Z ##[endgroup] 2026-10-14T16:00:29.141Z Scope: all 7 workspace projects 2026-10-14T16:00:29.247Z Lockfile is up to date, resolution step is skipped 2026-10-14T16:00:29.379Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-14T16:00:29.480Z Packages: +248 2026-10-14T16:00:29.480Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-14T16:00:30.383Z Progress: resolved 248, reused 107, downloaded 0, added 0 2026-10-14T16:00:31.383Z Progress: resolved 248, reused 242, downloaded 0, added 98 2026-10-14T16:00:32.385Z Progress: resolved 248, reused 242, downloaded 0, added 109 2026-10-14T16:00:32.852Z Progress: resolved 248, reused 242, downloaded 0, added 248, done 2026-10-14T16:00:47.746Z 2026-10-14T16:00:47.746Z devDependencies: 2026-10-14T16:00:47.746Z + turbo 2.11.7 2026-10-14T16:00:47.746Z + typescript 5.9.3 2026-10-14T16:00:47.746Z 2026-10-14T16:00:48.058Z Done in 19.4s using pnpm v10.28.0 2026-10-14T16:00:48.347Z ##[group]Run pnpm -r --if-present build 2026-10-14T16:00:48.347Z ##[endgroup] 2026-10-14T16:00:48.758Z Scope: 6 of 7 workspace projects 2026-10-14T16:00:48.762Z ##[group]@diffinery/cli@0.1.0 : build apps/cli 2026-10-14T16:00:48.764Z 2026-10-14T16:00:48.764Z > @diffinery/cli@0.1.0 build /workspace/diffinery/apps/cli 2026-10-14T16:00:48.764Z > esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-14T16:00:48.764Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-14T16:00:48.764Z 2026-10-14T16:00:48.854Z 2026-10-14T16:00:48.854Z dist/diffinery.mjs 439.5kb 2026-10-14T16:00:48.854Z 2026-10-14T16:00:48.854Z ⚡ Done in 78ms 2026-10-14T16:00:48.858Z ##[endgroup] 2026-10-14T16:00:48.858Z ##[group]@diffinery/app@0.1.0 : build apps/diffinery 2026-10-14T16:00:48.859Z 2026-10-14T16:00:48.859Z > @diffinery/app@0.1.0 build /workspace/diffinery/apps/diffinery 2026-10-14T16:00:48.859Z > node islands/build.mjs && node scripts/build-docs.mjs 2026-10-14T16:00:48.859Z 2026-10-14T16:00:51.286Z islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-14T16:00:51.845Z docs: 62 pages (+2 generated at runtime), CLI 0.1.0 (230 KiB) 2026-10-14T16:00:51.862Z ##[endgroup] 2026-10-14T16:00:51.862Z ##[group]@diffinery/runner@0.1.0 : build containers/runner 2026-10-14T16:00:51.862Z 2026-10-14T16:00:51.862Z > @diffinery/runner@0.1.0 build /workspace/diffinery/containers/runner 2026-10-14T16:00:51.862Z > esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-14T16:00:51.862Z 2026-10-14T16:00:51.990Z 2026-10-14T16:00:51.990Z dist/agent.mjs 657.2kb 2026-10-14T16:00:51.990Z 2026-10-14T16:00:51.990Z ⚡ Done in 119ms 2026-10-14T16:00:51.996Z ##[endgroup] 2026-10-14T16:00:52.078Z ##[group]Run scripts/runner-image.sh 2026-10-14T16:00:52.078Z ##[endgroup] 2026-10-14T16:00:57.304Z reusing diffinery-runner:75052421315d69e3ccfad876: the runner hasn't changed since it was built 2026-10-14T16:00:57.304Z registry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876 2026-10-14T16:00:57.414Z ##[group]Run scripts/bootstrap.sh 2026-10-14T16:00:57.414Z ##[endgroup] 2026-10-14T16:00:57.427Z ##[group]D1 database 2026-10-14T16:00:57.768Z D1 database exists: 2c3f0cb1-7ded-438c-88ef-4c3d39930ba6 2026-10-14T16:00:58.217Z read replication: auto (turn it on with the 'D1 read replication' workflow) 2026-10-14T16:00:58.217Z ##[endgroup] 2026-10-14T16:00:58.217Z ##[group]R2 bucket 2026-10-14T16:00:58.800Z R2 bucket exists 2026-10-14T16:00:59.790Z R2 lifecycle rules set 2026-10-14T16:00:59.790Z ##[endgroup] 2026-10-14T16:00:59.790Z ##[group]Queues 2026-10-14T16:01:00.536Z queue diffinery-events exists 2026-10-14T16:01:00.537Z queue diffinery-events-dlq exists 2026-10-14T16:01:00.539Z queue diffinery-mail exists 2026-10-14T16:01:00.541Z queue diffinery-mail-dlq exists 2026-10-14T16:01:00.543Z queue diffinery-mail-events exists 2026-10-14T16:01:00.543Z ##[endgroup] 2026-10-14T16:01:00.543Z ##[group]Email Sending event subscription 2026-10-14T16:01:02.325Z event subscription acc79fd40fbe4ed3ae2ecd2a538a1605 sends diffinery.com's bounces and complaints to diffinery-mail-events 2026-10-14T16:01:02.325Z ##[endgroup] 2026-10-14T16:01:02.326Z ##[group]Email Sending for diffinery.com 2026-10-14T16:01:02.986Z zone diffinery.com (379c97b13ecaec46db00b8e87f377c37) 2026-10-14T16:01:03.154Z can't read Email Sending settings with this token (10000: Authentication error), checking public DNS instead 2026-10-14T16:01:03.228Z ok MX cf-bounce.diffinery.com 2026-10-14T16:01:03.288Z ok TXT cf-bounce.diffinery.com (SPF) 2026-10-14T16:01:03.366Z ok TXT _dmarc.diffinery.com 2026-10-14T16:01:03.366Z diffinery.com looks onboarded to Email Sending (public DNS) 2026-10-14T16:01:03.366Z ##[endgroup] 2026-10-14T16:01:03.367Z ##[group]Turnstile 2026-10-14T16:01:04.160Z Turnstile widget "diffinery diffinery.com" exists: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-14T16:01:05.232Z TURNSTILE_SECRET goes with site key 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-14T16:01:05.232Z site key: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-14T16:01:05.232Z ##[endgroup] 2026-10-14T16:01:05.232Z ##[group]Cloudflare Access 2026-10-14T16:01:08.006Z Access app covers diffinery.com/auth/access 2026-10-14T16:01:08.099Z team=assaysol-pages.cloudflareaccess.com aud=set 2026-10-14T16:01:08.099Z ##[endgroup] 2026-10-14T16:01:08.099Z ##[group]Render config and migrate D1 2026-10-14T16:01:08.140Z wrote /workspace/diffinery/apps/diffinery/wrangler.deploy.jsonc 2026-10-14T16:01:09.849Z 2026-10-14T16:01:09.849Z ⛅️ wrangler 4.149.0 2026-10-14T16:01:09.849Z ──────────────────── 2026-10-14T16:01:09.850Z Resource location: remote 2026-10-14T16:01:09.850Z 2026-10-14T16:01:10.717Z Migrations to be applied: 2026-10-14T16:01:10.723Z ┌─────────────────────┐ 2026-10-14T16:01:10.723Z │ name │ 2026-10-14T16:01:10.723Z ├─────────────────────┤ 2026-10-14T16:01:10.723Z │ 0034_cli_logins.sql │ 2026-10-14T16:01:10.723Z └─────────────────────┘ 2026-10-14T16:01:10.724Z ? About to apply 1 migration(s) 2026-10-14T16:01:10.724Z Your database may not be available to serve requests during the migration, continue? 2026-10-14T16:01:10.724Z 🤖 Using fallback value in non-interactive context: yes 2026-10-14T16:01:10.725Z 🌀 Executing on remote database diffinery (2c3f0cb1-7ded-438c-88ef-4c3d39930ba6): 2026-10-14T16:01:10.725Z 🌀 To execute on your local development database, remove the --remote flag from your wrangler command. 2026-10-14T16:01:10.985Z 🚣 Executed 4 commands in 4.84ms 2026-10-14T16:01:10.986Z ┌─────────────────────┬────────┐ 2026-10-14T16:01:10.987Z │ name │ status │ 2026-10-14T16:01:10.987Z ├─────────────────────┼────────┤ 2026-10-14T16:01:10.987Z │ 0034_cli_logins.sql │ ✅ │ 2026-10-14T16:01:10.987Z └─────────────────────┴────────┘ 2026-10-14T16:01:11.057Z ##[endgroup] 2026-10-14T16:01:11.157Z ##[group]Run pnpm exec wrangler deploy -c wrangler.deploy.jsonc 2026-10-14T16:01:11.157Z ##[endgroup] 2026-10-14T16:01:12.813Z 2026-10-14T16:01:12.813Z ⛅️ wrangler 4.149.0 (update available 4.151.0) 2026-10-14T16:01:12.813Z ─────────────────────────────────────────────── 2026-10-14T16:01:12.830Z 2026-10-14T16:01:12.830Z Cloudflare collects anonymous telemetry about your usage of Wrangler. Learn more at https://github.com/cloudflare/workers-sdk/tree/main/packages/wrangler/telemetry.md 2026-10-14T16:01:20.984Z Total Upload: 11925.08 KiB / gzip: 2801.70 KiB 2026-10-14T16:01:31.707Z Worker Startup Time: 167 ms 2026-10-14T16:01:31.711Z Your Worker has access to the following bindings: 2026-10-14T16:01:31.720Z Binding Resource 2026-10-14T16:01:31.720Z env.REPO (RepoDO) Durable Object 2026-10-14T16:01:31.720Z env.SCHEDULER (SchedulerDO) Durable Object 2026-10-14T16:01:31.720Z env.RUNNER (RunnerContainer) Durable Object 2026-10-14T16:01:31.720Z env.SANDBOX (SandboxContainer) Durable Object 2026-10-14T16:01:31.720Z env.IMPORTER (ImportContainer) Durable Object 2026-10-14T16:01:31.720Z env.PROJECT (ProjectDO) Durable Object 2026-10-14T16:01:31.720Z env.RUN_WORKFLOW (RunWorkflow) Workflow 2026-10-14T16:01:31.720Z env.IMPORT_WORKFLOW (ImportWorkflow) Workflow 2026-10-14T16:01:31.720Z env.ACCOUNT_WORKFLOW (AccountWorkflow) Workflow 2026-10-14T16:01:31.720Z env.EMAIL (unrestricted) Send Email 2026-10-14T16:01:31.720Z env.EVENTS (inherited) Queue 2026-10-14T16:01:31.720Z env.MAIL (inherited) Queue 2026-10-14T16:01:31.720Z env.DB (diffinery) D1 Database 2026-10-14T16:01:31.720Z env.BUCKET (diffinery-data) R2 Bucket 2026-10-14T16:01:31.720Z env.RL_AUTH (20 requests/60s) Rate Limit 2026-10-14T16:01:31.720Z env.RL_ANON (300 requests/60s) Rate Limit 2026-10-14T16:01:31.720Z env.RL_ACCOUNT (2000 requests/60s) Rate Limit 2026-10-14T16:01:31.720Z env.RL_CREATE (60 requests/60s) Rate Limit 2026-10-14T16:01:31.720Z env.RL_MODEL (600 requests/60s) Rate Limit 2026-10-14T16:01:31.720Z env.PUBLIC_URL ("https://diffinery.com") Environment Variable 2026-10-14T16:01:31.720Z env.MAIL_FROM ("notifications@diffinery.com") Environment Variable 2026-10-14T16:01:31.720Z env.BOOTSTRAP_ADMINS ("iletisim@canberkdemirci.com,canberkde...") Environment Variable 2026-10-14T16:01:31.720Z env.ACCESS_TEAM_DOMAIN ("assaysol-pages.cloudflareaccess.com") Environment Variable 2026-10-14T16:01:31.720Z env.ACCESS_AUD ("a40b189c8d5b52a71b3c3ec3260f18157c284...") Environment Variable 2026-10-14T16:01:31.720Z env.RUNNER_IMAGE ("diffinery-runner:75052421315d69e3ccfa...") Environment Variable 2026-10-14T16:01:31.720Z env.TURNSTILE_SITE_KEY ("0x4AAAAAAFWX2OQHwh_jT9_h") Environment Variable 2026-10-14T16:01:31.720Z 2026-10-14T16:01:31.720Z The following containers are available: 2026-10-14T16:01:31.720Z - diffinery-runnercontainer (registry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876) 2026-10-14T16:01:31.720Z - diffinery-sandboxcontainer (registry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876) 2026-10-14T16:01:31.720Z - diffinery-importcontainer (registry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876) 2026-10-14T16:01:31.721Z 2026-10-14T16:01:31.721Z Uploaded diffinery (13.04 sec) 2026-10-14T16:01:32.500Z ╭ Deploy a container application deploy changes to your application 2026-10-14T16:01:32.500Z │ 2026-10-14T16:01:32.672Z │ Container application changes 2026-10-14T16:01:32.672Z │ 2026-10-14T16:01:32.673Z ├ no changes diffinery-runnercontainer 2026-10-14T16:01:32.673Z │ 2026-10-14T16:01:32.673Z ╰ No changes to be made 2026-10-14T16:01:32.673Z 2026-10-14T16:01:32.673Z ╭ Deploy a container application deploy changes to your application 2026-10-14T16:01:32.673Z │ 2026-10-14T16:01:33.092Z │ Container application changes 2026-10-14T16:01:33.092Z │ 2026-10-14T16:01:33.092Z ├ no changes diffinery-sandboxcontainer 2026-10-14T16:01:33.092Z │ 2026-10-14T16:01:33.092Z ╰ No changes to be made 2026-10-14T16:01:33.092Z 2026-10-14T16:01:33.092Z ╭ Deploy a container application deploy changes to your application 2026-10-14T16:01:33.092Z │ 2026-10-14T16:01:34.008Z │ Container application changes 2026-10-14T16:01:34.008Z │ 2026-10-14T16:01:34.008Z ├ no changes diffinery-importcontainer 2026-10-14T16:01:34.008Z │ 2026-10-14T16:01:34.008Z ╰ No changes to be made 2026-10-14T16:01:34.008Z 2026-10-14T16:01:41.616Z Deployed diffinery triggers (7.61 sec) 2026-10-14T16:01:41.616Z diffinery.com/* (zone name: diffinery.com) 2026-10-14T16:01:41.616Z schedule: */5 * * * * 2026-10-14T16:01:41.616Z Producer for diffinery-events 2026-10-14T16:01:41.616Z Producer for diffinery-mail 2026-10-14T16:01:41.616Z Consumer for diffinery-events 2026-10-14T16:01:41.616Z Consumer for diffinery-mail 2026-10-14T16:01:41.616Z Consumer for diffinery-mail-events 2026-10-14T16:01:41.616Z workflow: diffinery-run 2026-10-14T16:01:41.616Z workflow: diffinery-import 2026-10-14T16:01:41.616Z workflow: diffinery-account 2026-10-14T16:01:41.616Z Current Version ID: fd21545f-5b87-4a9b-90e9-02567ea0a949 2026-10-14T16:01:41.834Z ##[group]Run scripts/wait-container-rollout.sh 2026-10-14T16:01:41.834Z ##[endgroup] 2026-10-14T16:01:42.794Z ##[group]Run scripts/ensure-secrets.sh 2026-10-14T16:01:42.794Z ##[endgroup] 2026-10-14T16:01:45.725Z ##[group]Run # A new custom domain can take a few minutes to get its certificate. 2026-10-14T16:01:45.725Z for i in $(seq 1 30); do 2026-10-14T16:01:45.725Z code=$(curl -s -o /dev/null -w '%{http_code}' https://$DIFFINERY_DOMAIN/healthz) && [ "$code" = 200 ] && exit 0 2026-10-14T16:01:45.725Z sleep 10 2026-10-14T16:01:45.725Z done 2026-10-14T16:01:45.725Z echo "::error::https://$DIFFINERY_DOMAIN/healthz did not return 200 (last: $code). Check that the $DIFFINERY_DOMAIN DNS record is proxied (orange cloud)."; exit 1 2026-10-14T16:01:45.725Z ##[endgroup] 2026-10-14T16:01:45.918Z ##[group]Run set -u 2026-10-14T16:01:45.918Z page=$(curl -sS https://$DIFFINERY_DOMAIN/login) 2026-10-14T16:01:45.918Z grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; } 2026-10-14T16:01:45.918Z echo "/login serves the passkey sign-in page" 2026-10-14T16:01:45.918Z loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://$DIFFINERY_DOMAIN/auth/access) 2026-10-14T16:01:45.918Z echo "/auth/access -> $loc" 2026-10-14T16:01:45.918Z [[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work" 2026-10-14T16:01:45.918Z report=$(curl -sS -w '\n%{http_code}' https://$DIFFINERY_DOMAIN/security/report) 2026-10-14T16:01:45.918Z code=${report##*$'\n'} 2026-10-14T16:01:45.918Z if grep -q 'class="cf-turnstile"' <<<"$report"; then 2026-10-14T16:01:45.918Z echo "/security/report shows Turnstile to people who aren't signed in" 2026-10-14T16:01:45.918Z elif grep -q 'has no Turnstile configured' <<<"$report"; then 2026-10-14T16:01:45.918Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: the Worker lacks TURNSTILE_SITE_KEY or TURNSTILE_SECRET (see the bootstrap and Worker secrets steps)" 2026-10-14T16:01:45.918Z else 2026-10-14T16:01:45.918Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: it answered $code without the form" 2026-10-14T16:01:45.918Z fi 2026-10-14T16:01:45.918Z for kind in js css; do 2026-10-14T16:01:45.918Z asset=$(grep -o "/-/kumo/[a-z0-9]*\.$kind" <<<"$page" | head -1) 2026-10-14T16:01:45.918Z [ -n "$asset" ] || { echo "::error::/login does not load the Kumo $kind bundle"; exit 1; } 2026-10-14T16:01:45.918Z code=$(curl -sS -o /dev/null -w '%{http_code}' "https://$DIFFINERY_DOMAIN$asset") 2026-10-14T16:01:45.918Z [ "$code" = 200 ] || { echo "::error::$asset returned $code"; exit 1; } 2026-10-14T16:01:45.918Z echo "$asset -> 200" 2026-10-14T16:01:45.918Z done 2026-10-14T16:01:45.918Z ##[endgroup] 2026-10-14T16:01:46.019Z /login serves the passkey sign-in page 2026-10-14T16:01:46.086Z /auth/access -> 302 https://assaysol-pages.cloudflareaccess.com/cdn-cgi/access/login/diffinery.com?kid=a40b189c8d5b52a71b3c3ec3260f18157c2840312dbfc32bee30e2609b15d02e&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjhlZTM2NTQ0OTNkMjJhYTM1NzJlMjVjMGUwZTM0ZDIxNDk4YjZjNmIxMzRhMWE2ZjcxNzk4MDFkMjVmMTcwMDQifQ.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.c4MDhY5Qg1SCJ35YQtFE_EXAAbuHWXdPSZFPdByImxZC5WAnW7gfBoafQLOJYwLVaUubjhOkrbbXz2Vq--a6l8cR4yT14g0hTXCknVrtyVzdgIaPoP7KokFgcmDu8SDXGEkmYdVEidfE3FfvtRMrcttruJny5xV8CpxcqrHX2U1B6G0c5jbPT0uN8Kw1cAWb07Sy98OlfJIs_lFMdd1ONQZm2D5pbTpFv4kaykroYX6qRHR2CHjhjXrhS-oB8xV0c-DiAe9Z-QNRpQ4RW9rADjeR9Ntdd-OCFSl0Dj-XPnatcmImwkL5uR8mrs5QtlTNGUxepFxzGOARTaKJd2jYmQ&redirect_url=%2Fauth%2Faccess 2026-10-14T16:01:46.153Z /security/report shows Turnstile to people who aren't signed in 2026-10-14T16:01:46.247Z /-/kumo/1emzyjz.js -> 200 2026-10-14T16:01:46.338Z /-/kumo/1tekldh.css -> 200 2026-10-14T16:01:46.467Z ##[group]Run set -u 2026-10-14T16:01:46.467Z for p in /favicon.ico /favicon.svg /favicon-48.png /apple-touch-icon.png /og-image.png /site.webmanifest /robots.txt /sitemap.xml; do 2026-10-14T16:01:46.467Z code=$(curl -sS -o /dev/null -w '%{http_code} %{content_type}' "https://$DIFFINERY_DOMAIN$p") 2026-10-14T16:01:46.467Z [[ "$code" == 200\ * ]] || { echo "::error::$p returned $code"; exit 1; } 2026-10-14T16:01:46.467Z echo "$p -> $code" 2026-10-14T16:01:46.467Z done 2026-10-14T16:01:46.467Z home=$(curl -sS https://$DIFFINERY_DOMAIN/) 2026-10-14T16:01:46.467Z for tag in 'rel="icon" href="/favicon.ico"' 'property="og:image"' 'rel="canonical"' 'application/ld+json'; do 2026-10-14T16:01:46.467Z grep -qF "$tag" <<<"$home" || { echo "::error::the home page is missing $tag"; exit 1; } 2026-10-14T16:01:46.467Z done 2026-10-14T16:01:46.467Z echo "the home page carries the favicon, canonical, Open Graph and structured data tags" 2026-10-14T16:01:46.467Z bm=$(curl -sS -D - -o /dev/null https://$DIFFINERY_DOMAIN/sitemap.xml | tr -d '\r' | sed -n 's/^x-d1-bookmark: //Ip') 2026-10-14T16:01:46.467Z [ -n "$bm" ] || { echo "::error::D1 queries don't run in a session (no x-d1-bookmark header)"; exit 1; } 2026-10-14T16:01:46.467Z echo "D1 sessions are on (bookmark $bm)" 2026-10-14T16:01:46.467Z ##[endgroup] 2026-10-14T16:01:46.532Z /favicon.ico -> 200 image/x-icon 2026-10-14T16:01:46.585Z /favicon.svg -> 200 image/svg+xml 2026-10-14T16:01:46.644Z /favicon-48.png -> 200 image/png 2026-10-14T16:01:46.699Z /apple-touch-icon.png -> 200 image/png 2026-10-14T16:01:46.784Z /og-image.png -> 200 image/png 2026-10-14T16:01:46.861Z /site.webmanifest -> 200 application/manifest+json 2026-10-14T16:01:46.944Z /robots.txt -> 200 text/plain; charset=UTF-8 2026-10-14T16:01:47.073Z /sitemap.xml -> 200 application/xml; charset=utf-8 2026-10-14T16:01:47.170Z the home page carries the favicon, canonical, Open Graph and structured data tags 2026-10-14T16:01:47.313Z D1 sessions are on (bookmark 00000142-00005d27-00005104-2d3d8f695b53bb672482ba50b993e6ab) 2026-10-14T16:01:47.407Z Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08, not saving cache. 2026-10-14T16:01:47.766Z Pruning is unnecessary. 2026-10-14T16:01:47.869Z Removing persisted credentials 2026-10-14T16:01:47.919Z Job completed with conclusion: success