2026-10-16T14:00:38.952Z Diffinery runner: job deploy (Deploy to Cloudflare) for codician/diffinery@26c09b152037 2026-10-16T14:00:38.971Z Runner: image diffinery-runner:aeeb9e24ddf78dd4d8e258a7, in lhr21, WEUR, container bca340486926155d846401dbf081a8893f0d7c7c2f1480471a4200acfeeb4047 2026-10-16T14:00:38.971Z Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), an earlier run of this job wasn't measured; runs-on: diffinery-large (or -medium, -small, -tiny) sets a size 2026-10-16T14:00:38.971Z Workspace: /workspace/diffinery 2026-10-16T14:00:39.075Z ##[group]Run actions/checkout@v4 2026-10-16T14:00:39.075Z with: 2026-10-16T14:00:39.075Z ref: 26c09b152037265bc1cbd6dfcb1905b028365c4d 2026-10-16T14:00:39.075Z ##[endgroup] 2026-10-16T14:00:39.078Z Syncing repository: codician/diffinery 2026-10-16T14:00:39.185Z Fetching the repository (depth 1) 2026-10-16T14:00:40.230Z remote: Enumerating objects: 612, done. 2026-10-16T14:00:40.386Z Receiving objects: 0% (1/612) Receiving objects: 1% (7/612) Receiving objects: 2% (13/612) Receiving objects: 3% (19/612) Receiving objects: 4% (25/612) Receiving objects: 5% (31/612) Receiving objects: 6% (37/612) Receiving objects: 7% (43/612) Receiving objects: 8% (49/612) Receiving objects: 9% (56/612) Receiving objects: 10% (62/612) Receiving objects: 11% (68/612) Receiving objects: 12% (74/612) Receiving objects: 13% (80/612) Receiving objects: 14% (86/612) Receiving objects: 15% (92/612) Receiving objects: 16% (98/612) Receiving objects: 17% (105/612) Receiving objects: 18% (111/612) Receiving objects: 19% (117/612) Receiving objects: 20% (123/612) Receiving objects: 21% (129/612) Receiving objects: 22% (135/612) Receiving objects: 23% (141/612) Receiving objects: 24% (147/612) Receiving objects: 25% (153/612) Receiving objects: 26% (160/612) Receiving objects: 27% (166/612) Receiving objects: 28% (172/612) Receiving objects: 29% (178/612) Receiving objects: 30% (184/612) Receiving objects: 31% (190/612) Receiving objects: 32% (196/612) Receiving objects: 33% (202/612) Receiving objects: 34% (209/612) Receiving objects: 35% (215/612) Receiving objects: 36% (221/612) Receiving objects: 37% (227/612) Receiving objects: 38% (233/612) Receiving objects: 39% (239/612) Receiving objects: 40% (245/612) Receiving objects: 41% (251/612) Receiving objects: 42% (258/612) Receiving objects: 43% (264/612) Receiving objects: 44% (270/612) Receiving objects: 45% (276/612) Receiving objects: 46% (282/612) Receiving objects: 47% (288/612) Receiving objects: 48% (294/612) Receiving objects: 49% (300/612) Receiving objects: 50% (306/612) Receiving objects: 51% (313/612) Receiving objects: 52% (319/612) Receiving objects: 53% (325/612) Receiving objects: 54% (331/612) Receiving objects: 55% (337/612) Receiving objects: 56% (343/612) Receiving objects: 57% (349/612) Receiving objects: 58% (355/612) Receiving objects: 59% (362/612) Receiving objects: 60% (368/612) Receiving objects: 61% (374/612) Receiving objects: 62% (380/612) Receiving objects: 63% (386/612) Receiving objects: 64% (392/612) Receiving objects: 65% (398/612) Receiving objects: 66% (404/612) Receiving objects: 67% (411/612) Receiving objects: 68% (417/612) Receiving objects: 69% (423/612) Receiving objects: 70% (429/612) Receiving objects: 71% (435/612) Receiving objects: 72% (441/612) Receiving objects: 73% (447/612) Receiving objects: 74% (453/612) Receiving objects: 75% (459/612) Receiving objects: 76% (466/612) Receiving objects: 77% (472/612) Receiving objects: 78% (478/612) Receiving objects: 79% (484/612) Receiving objects: 80% (490/612) Receiving objects: 81% (496/612) Receiving objects: 82% (502/612) Receiving objects: 83% (508/612) Receiving objects: 84% (515/612) Receiving objects: 85% (521/612) Receiving objects: 86% (527/612) Receiving objects: 87% (533/612) Receiving objects: 88% (539/612) Receiving objects: 89% (545/612) Receiving objects: 90% (551/612) Receiving objects: 91% (557/612) Receiving objects: 92% (564/612) Receiving objects: 93% (570/612) Receiving objects: 94% (576/612) Receiving objects: 95% (582/612) Receiving objects: 96% (588/612) remote: Total 612 (delta 0), reused 612 (delta 0) 2026-10-16T14:00:40.388Z Receiving objects: 97% (594/612) Receiving objects: 98% (600/612) Receiving objects: 99% (606/612) Receiving objects: 100% (612/612) Receiving objects: 100% (612/612), 2.50 MiB | 16.73 MiB/s, done. 2026-10-16T14:00:40.403Z From https://diffinery.com/codician/diffinery 2026-10-16T14:00:40.403Z * [new ref] 26c09b152037265bc1cbd6dfcb1905b028365c4d -> origin/diffinery-checkout 2026-10-16T14:00:40.507Z Note: switching to '26c09b152037265bc1cbd6dfcb1905b028365c4d'. 2026-10-16T14:00:40.507Z 2026-10-16T14:00:40.507Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-16T14:00:40.507Z changes and commit them, and you can discard any commits you make in this 2026-10-16T14:00:40.507Z state without impacting any branches by switching back to a branch. 2026-10-16T14:00:40.507Z 2026-10-16T14:00:40.507Z If you want to create a new branch to retain commits you create, you may 2026-10-16T14:00:40.507Z do so (now or later) by using -c with the switch command. Example: 2026-10-16T14:00:40.507Z 2026-10-16T14:00:40.507Z git switch -c 2026-10-16T14:00:40.507Z 2026-10-16T14:00:40.507Z Or undo this operation with: 2026-10-16T14:00:40.507Z 2026-10-16T14:00:40.507Z git switch - 2026-10-16T14:00:40.507Z 2026-10-16T14:00:40.507Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-16T14:00:40.507Z 2026-10-16T14:00:40.507Z HEAD is now at 26c09b1 Security audit, part 3: agent origin per commit (ACT-3), protected runs can't be cancelled from other branches (ACT-7) (#201) 2026-10-16T14:00:40.513Z HEAD is now at 26c09b152037265bc1cbd6dfcb1905b028365c4d 2026-10-16T14:00:40.663Z Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' 2026-10-16T14:00:41.016Z ##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 2026-10-16T14:00:41.016Z with: 2026-10-16T14:00:41.016Z dest: ~/setup-pnpm 2026-10-16T14:00:41.016Z run_install: null 2026-10-16T14:00:41.016Z cache: false 2026-10-16T14:00:41.016Z cache_dependency_path: pnpm-lock.yaml 2026-10-16T14:00:41.016Z package_json_file: package.json 2026-10-16T14:00:41.016Z standalone: false 2026-10-16T14:00:41.016Z ##[endgroup] 2026-10-16T14:00:41.281Z ##[group]Running self-installer... 2026-10-16T14:00:42.187Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T14:00:42.198Z Packages: +1 2026-10-16T14:00:42.198Z + 2026-10-16T14:00:44.023Z Progress: resolved 1, reused 0, downloaded 1, added 0 2026-10-16T14:00:44.127Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-16T14:00:44.178Z 2026-10-16T14:00:44.178Z dependencies: 2026-10-16T14:00:44.178Z + pnpm 10.28.0 (12.14.0 is available) 2026-10-16T14:00:44.178Z 2026-10-16T14:00:44.183Z Done in 2.6s 2026-10-16T14:00:44.209Z ##[endgroup] 2026-10-16T14:00:44.209Z Installation Completed! 2026-10-16T14:00:44.361Z ##[group]Run actions/setup-node@v4 2026-10-16T14:00:44.361Z with: 2026-10-16T14:00:44.361Z node-version: 22 2026-10-16T14:00:44.361Z cache: pnpm 2026-10-16T14:00:44.361Z ##[endgroup] 2026-10-16T14:00:44.373Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-16T14:00:55.203Z Cache Size: ~216 MB (226515969 B) 2026-10-16T14:01:00.413Z Cache restored from key: node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0 2026-10-16T14:01:00.666Z ##[group]Run pnpm install --frozen-lockfile 2026-10-16T14:01:00.666Z ##[endgroup] 2026-10-16T14:01:01.098Z Scope: all 7 workspace projects 2026-10-16T14:01:01.183Z Lockfile is up to date, resolution step is skipped 2026-10-16T14:01:01.243Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T14:01:01.311Z Packages: +249 2026-10-16T14:01:01.311Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-16T14:01:02.244Z Progress: resolved 249, reused 243, downloaded 0, added 244 2026-10-16T14:01:02.399Z Progress: resolved 249, reused 243, downloaded 0, added 249, done 2026-10-16T14:01:14.544Z 2026-10-16T14:01:14.544Z devDependencies: 2026-10-16T14:01:14.544Z + turbo 2.11.7 2026-10-16T14:01:14.544Z + typescript 5.9.3 2026-10-16T14:01:14.544Z 2026-10-16T14:01:14.879Z Done in 14.1s using pnpm v10.28.0 2026-10-16T14:01:15.169Z ##[group]Run pnpm -r --if-present build 2026-10-16T14:01:15.169Z ##[endgroup] 2026-10-16T14:01:15.589Z Scope: 6 of 7 workspace projects 2026-10-16T14:01:15.593Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-16T14:01:15.593Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T14:01:15.594Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs 2026-10-16T14:01:15.595Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T14:01:15.674Z apps/cli build: dist/diffinery.mjs 441.4kb 2026-10-16T14:01:15.679Z apps/cli build: ⚡ Done in 53ms 2026-10-16T14:01:15.689Z apps/cli build: Done 2026-10-16T14:01:15.706Z containers/runner build: dist/agent.mjs 665.1kb 2026-10-16T14:01:15.708Z containers/runner build: ⚡ Done in 76ms 2026-10-16T14:01:15.711Z containers/runner build: Done 2026-10-16T14:01:16.637Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-16T14:01:16.996Z apps/diffinery build: docs: 64 pages (+2 generated at runtime), CLI 0.1.0 (232 KiB) 2026-10-16T14:01:17.010Z apps/diffinery build: Done 2026-10-16T14:01:17.168Z ##[group]Run scripts/runner-image.sh 2026-10-16T14:01:17.168Z env: 2026-10-16T14:01:17.168Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T14:01:17.168Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T14:01:17.168Z ##[endgroup] 2026-10-16T14:01:20.684Z reusing diffinery-runner:aeeb9e24ddf78dd4d8e258a7: the runner hasn't changed since it was built 2026-10-16T14:01:20.684Z registry.cloudflare.com/***/diffinery-runner:aeeb9e24ddf78dd4d8e258a7 2026-10-16T14:01:20.779Z ##[group]Run scripts/bootstrap.sh 2026-10-16T14:01:20.779Z env: 2026-10-16T14:01:20.779Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T14:01:20.779Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T14:01:20.779Z ##[endgroup] 2026-10-16T14:01:20.793Z ##[group]D1 database 2026-10-16T14:01:21.098Z D1 database exists: 2c3f0cb1-7ded-438c-88ef-4c3d39930ba6 2026-10-16T14:01:21.497Z read replication: auto (turn it on with the 'D1 read replication' workflow) 2026-10-16T14:01:21.497Z ##[endgroup] 2026-10-16T14:01:21.497Z ##[group]R2 bucket 2026-10-16T14:01:21.992Z R2 bucket exists 2026-10-16T14:01:22.815Z R2 lifecycle rules set 2026-10-16T14:01:22.815Z ##[endgroup] 2026-10-16T14:01:22.815Z ##[group]Queues 2026-10-16T14:01:23.721Z queue diffinery-events exists 2026-10-16T14:01:23.727Z queue diffinery-events-dlq exists 2026-10-16T14:01:23.729Z queue diffinery-mail exists 2026-10-16T14:01:23.731Z queue diffinery-mail-dlq exists 2026-10-16T14:01:23.733Z queue diffinery-mail-events exists 2026-10-16T14:01:23.734Z ##[endgroup] 2026-10-16T14:01:23.734Z ##[group]Email Sending event subscription 2026-10-16T14:01:25.418Z event subscription acc79fd40fbe4ed3ae2ecd2a538a1605 sends diffinery.com's bounces and complaints to diffinery-mail-events 2026-10-16T14:01:25.418Z ##[endgroup] 2026-10-16T14:01:25.422Z ##[group]Email Sending for diffinery.com 2026-10-16T14:01:25.842Z zone diffinery.com (379c97b13ecaec46db00b8e87f377c37) 2026-10-16T14:01:26.000Z can't read Email Sending settings with this token (10000: Authentication error), checking public DNS instead 2026-10-16T14:01:26.060Z ok MX cf-bounce.diffinery.com 2026-10-16T14:01:26.111Z ok TXT cf-bounce.diffinery.com (SPF) 2026-10-16T14:01:26.177Z ok TXT _dmarc.diffinery.com 2026-10-16T14:01:26.177Z diffinery.com looks onboarded to Email Sending (public DNS) 2026-10-16T14:01:26.177Z ##[endgroup] 2026-10-16T14:01:26.177Z ##[group]Turnstile 2026-10-16T14:01:27.583Z Turnstile widget "diffinery diffinery.com" exists: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-16T14:01:28.523Z TURNSTILE_SECRET goes with site key 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-16T14:01:28.525Z site key: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-16T14:01:28.525Z ##[endgroup] 2026-10-16T14:01:28.525Z ##[group]Cloudflare Access 2026-10-16T14:01:31.873Z Access app covers diffinery.com/auth/access 2026-10-16T14:01:31.980Z team=assaysol-pages.cloudflareaccess.com aud=set 2026-10-16T14:01:31.980Z ##[endgroup] 2026-10-16T14:01:31.980Z ##[group]Render config and migrate D1 2026-10-16T14:01:32.027Z wrote /workspace/diffinery/apps/diffinery/wrangler.deploy.jsonc 2026-10-16T14:01:33.755Z 2026-10-16T14:01:33.755Z ⛅️ wrangler 4.149.0 2026-10-16T14:01:33.755Z ──────────────────── 2026-10-16T14:01:33.756Z Resource location: remote 2026-10-16T14:01:33.756Z 2026-10-16T14:01:34.386Z ✅ No migrations to apply! 2026-10-16T14:01:34.458Z ##[endgroup] 2026-10-16T14:01:34.828Z ##[group]Run pnpm exec wrangler deploy -c wrangler.deploy.jsonc 2026-10-16T14:01:34.829Z env: 2026-10-16T14:01:34.829Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T14:01:34.829Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T14:01:34.829Z ##[endgroup] 2026-10-16T14:01:36.382Z 2026-10-16T14:01:36.382Z ⛅️ wrangler 4.149.0 (update available 4.151.1) 2026-10-16T14:01:36.382Z ─────────────────────────────────────────────── 2026-10-16T14:01:36.398Z 2026-10-16T14:01:36.398Z Cloudflare collects anonymous telemetry about your usage of Wrangler. Learn more at https://github.com/cloudflare/workers-sdk/tree/main/packages/wrangler/telemetry.md 2026-10-16T14:01:42.064Z Total Upload: 12489.17 KiB / gzip: 2910.48 KiB 2026-10-16T14:01:50.063Z Worker Startup Time: 52 ms 2026-10-16T14:01:50.065Z Your Worker has access to the following bindings: 2026-10-16T14:01:50.065Z Binding Resource 2026-10-16T14:01:50.066Z env.REPO (RepoDO) Durable Object 2026-10-16T14:01:50.066Z env.SCHEDULER (SchedulerDO) Durable Object 2026-10-16T14:01:50.066Z env.RUNNER (RunnerContainer) Durable Object 2026-10-16T14:01:50.066Z env.RUNNER_MEDIUM (RunnerContainerMedium) Durable Object 2026-10-16T14:01:50.066Z env.RUNNER_SMALL (RunnerContainerSmall) Durable Object 2026-10-16T14:01:50.066Z env.RUNNER_TINY (RunnerContainerTiny) Durable Object 2026-10-16T14:01:50.066Z env.SANDBOX (SandboxContainer) Durable Object 2026-10-16T14:01:50.067Z env.IMPORTER (ImportContainer) Durable Object 2026-10-16T14:01:50.067Z env.PROJECT (ProjectDO) Durable Object 2026-10-16T14:01:50.067Z env.RUN_WORKFLOW (RunWorkflow) Workflow 2026-10-16T14:01:50.067Z env.IMPORT_WORKFLOW (ImportWorkflow) Workflow 2026-10-16T14:01:50.067Z env.ACCOUNT_WORKFLOW (AccountWorkflow) Workflow 2026-10-16T14:01:50.067Z env.EMAIL (unrestricted) Send Email 2026-10-16T14:01:50.067Z env.EVENTS (inherited) Queue 2026-10-16T14:01:50.067Z env.MAIL (inherited) Queue 2026-10-16T14:01:50.067Z env.DB (diffinery) D1 Database 2026-10-16T14:01:50.067Z env.BUCKET (diffinery-data) R2 Bucket 2026-10-16T14:01:50.067Z env.RL_AUTH (20 requests/60s) Rate Limit 2026-10-16T14:01:50.067Z env.RL_ANON (300 requests/60s) Rate Limit 2026-10-16T14:01:50.067Z env.RL_ACCOUNT (2000 requests/60s) Rate Limit 2026-10-16T14:01:50.067Z env.RL_CREATE (60 requests/60s) Rate Limit 2026-10-16T14:01:50.067Z env.RL_MODEL (600 requests/60s) Rate Limit 2026-10-16T14:01:50.068Z env.PUBLIC_URL ("https://diffinery.com") Environment Variable 2026-10-16T14:01:50.068Z env.MAIL_FROM ("notifications@diffinery.com") Environment Variable 2026-10-16T14:01:50.068Z env.BOOTSTRAP_ADMINS ("iletisim@canberkdemirci.com,canberkde...") Environment Variable 2026-10-16T14:01:50.068Z env.ACCESS_TEAM_DOMAIN ("assaysol-pages.cloudflareaccess.com") Environment Variable 2026-10-16T14:01:50.068Z env.ACCESS_AUD ("a40b189c8d5b52a71b3c3ec3260f18157c284...") Environment Variable 2026-10-16T14:01:50.068Z env.RUNNER_IMAGE ("diffinery-runner:aeeb9e24ddf78dd4d8e2...") Environment Variable 2026-10-16T14:01:50.068Z env.TURNSTILE_SITE_KEY ("0x4AAAAAAFWX2OQHwh_jT9_h") Environment Variable 2026-10-16T14:01:50.068Z 2026-10-16T14:01:50.068Z The following containers are available: 2026-10-16T14:01:50.068Z - diffinery-runnercontainer (registry.cloudflare.com/***/diffinery-runner:aeeb9e24ddf78dd4d8e258a7) 2026-10-16T14:01:50.068Z - diffinery-runnercontainermedium (registry.cloudflare.com/***/diffinery-runner:aeeb9e24ddf78dd4d8e258a7) 2026-10-16T14:01:50.068Z - diffinery-runnercontainersmall (registry.cloudflare.com/***/diffinery-runner:aeeb9e24ddf78dd4d8e258a7) 2026-10-16T14:01:50.068Z - diffinery-runnercontainertiny (registry.cloudflare.com/***/diffinery-runner:aeeb9e24ddf78dd4d8e258a7) 2026-10-16T14:01:50.068Z - diffinery-sandboxcontainer (registry.cloudflare.com/***/diffinery-runner:aeeb9e24ddf78dd4d8e258a7) 2026-10-16T14:01:50.068Z - diffinery-importcontainer (registry.cloudflare.com/***/diffinery-runner:aeeb9e24ddf78dd4d8e258a7) 2026-10-16T14:01:50.068Z 2026-10-16T14:01:50.068Z Uploaded diffinery (9.97 sec) 2026-10-16T14:01:50.863Z ╭ Deploy a container application deploy changes to your application 2026-10-16T14:01:50.864Z │ 2026-10-16T14:01:51.111Z │ Container application changes 2026-10-16T14:01:51.111Z │ 2026-10-16T14:01:51.114Z ├ no changes diffinery-runnercontainer 2026-10-16T14:01:51.114Z │ 2026-10-16T14:01:51.114Z ╰ No changes to be made 2026-10-16T14:01:51.114Z 2026-10-16T14:01:51.114Z ╭ Deploy a container application deploy changes to your application 2026-10-16T14:01:51.114Z │ 2026-10-16T14:01:51.774Z │ Container application changes 2026-10-16T14:01:51.774Z │ 2026-10-16T14:01:51.775Z ├ no changes diffinery-runnercontainermedium 2026-10-16T14:01:51.775Z │ 2026-10-16T14:01:51.775Z ╰ No changes to be made 2026-10-16T14:01:51.775Z 2026-10-16T14:01:51.775Z ╭ Deploy a container application deploy changes to your application 2026-10-16T14:01:51.775Z │ 2026-10-16T14:01:51.979Z │ Container application changes 2026-10-16T14:01:51.979Z │ 2026-10-16T14:01:51.980Z ├ no changes diffinery-runnercontainersmall 2026-10-16T14:01:51.980Z │ 2026-10-16T14:01:51.980Z ╰ No changes to be made 2026-10-16T14:01:51.980Z 2026-10-16T14:01:51.980Z ╭ Deploy a container application deploy changes to your application 2026-10-16T14:01:51.980Z │ 2026-10-16T14:01:52.260Z │ Container application changes 2026-10-16T14:01:52.260Z │ 2026-10-16T14:01:52.261Z ├ no changes diffinery-runnercontainertiny 2026-10-16T14:01:52.261Z │ 2026-10-16T14:01:52.261Z ╰ No changes to be made 2026-10-16T14:01:52.261Z 2026-10-16T14:01:52.261Z ╭ Deploy a container application deploy changes to your application 2026-10-16T14:01:52.261Z │ 2026-10-16T14:01:52.558Z │ Container application changes 2026-10-16T14:01:52.558Z │ 2026-10-16T14:01:52.558Z ├ no changes diffinery-sandboxcontainer 2026-10-16T14:01:52.558Z │ 2026-10-16T14:01:52.558Z ╰ No changes to be made 2026-10-16T14:01:52.558Z 2026-10-16T14:01:52.558Z ╭ Deploy a container application deploy changes to your application 2026-10-16T14:01:52.558Z │ 2026-10-16T14:01:52.802Z │ Container application changes 2026-10-16T14:01:52.802Z │ 2026-10-16T14:01:52.802Z ├ no changes diffinery-importcontainer 2026-10-16T14:01:52.802Z │ 2026-10-16T14:01:52.802Z ╰ No changes to be made 2026-10-16T14:01:52.802Z 2026-10-16T14:02:00.612Z Deployed diffinery triggers (7.81 sec) 2026-10-16T14:02:00.612Z diffinery.com/* (zone name: diffinery.com) 2026-10-16T14:02:00.612Z schedule: */5 * * * * 2026-10-16T14:02:00.612Z Producer for diffinery-events 2026-10-16T14:02:00.612Z Producer for diffinery-mail 2026-10-16T14:02:00.612Z Consumer for diffinery-events 2026-10-16T14:02:00.612Z Consumer for diffinery-mail 2026-10-16T14:02:00.612Z Consumer for diffinery-mail-events 2026-10-16T14:02:00.612Z workflow: diffinery-run 2026-10-16T14:02:00.612Z workflow: diffinery-import 2026-10-16T14:02:00.612Z workflow: diffinery-account 2026-10-16T14:02:00.612Z Current Version ID: 9cf96071-ea9c-4a74-beb6-471efd7e5812 2026-10-16T14:02:01.345Z ##[group]Run scripts/wait-container-rollout.sh 2026-10-16T14:02:01.345Z env: 2026-10-16T14:02:01.345Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T14:02:01.345Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T14:02:01.345Z ##[endgroup] 2026-10-16T14:02:03.192Z ##[group]Run scripts/ensure-secrets.sh 2026-10-16T14:02:03.192Z env: 2026-10-16T14:02:03.192Z CLOUDFLARE_API_TOKEN: *** 2026-10-16T14:02:03.193Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-16T14:02:03.193Z ##[endgroup] 2026-10-16T14:02:06.605Z ##[group]Run # A new custom domain can take a few minutes to get its certificate. 2026-10-16T14:02:06.605Z for i in $(seq 1 30); do 2026-10-16T14:02:06.605Z code=$(curl -s -o /dev/null -w '%{http_code}' https://$DIFFINERY_DOMAIN/healthz) && [ "$code" = 200 ] && exit 0 2026-10-16T14:02:06.605Z sleep 10 2026-10-16T14:02:06.605Z done 2026-10-16T14:02:06.605Z echo "::error::https://$DIFFINERY_DOMAIN/healthz did not return 200 (last: $code). Check that the $DIFFINERY_DOMAIN DNS record is proxied (orange cloud)."; exit 1 2026-10-16T14:02:06.605Z ##[endgroup] 2026-10-16T14:02:07.207Z ##[group]Run set -u 2026-10-16T14:02:07.207Z page=$(curl -sS https://$DIFFINERY_DOMAIN/login) 2026-10-16T14:02:07.207Z grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; } 2026-10-16T14:02:07.207Z echo "/login serves the passkey sign-in page" 2026-10-16T14:02:07.207Z loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://$DIFFINERY_DOMAIN/auth/access) 2026-10-16T14:02:07.207Z echo "/auth/access -> $loc" 2026-10-16T14:02:07.207Z [[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work" 2026-10-16T14:02:07.207Z report=$(curl -sS -w '\n%{http_code}' https://$DIFFINERY_DOMAIN/security/report) 2026-10-16T14:02:07.207Z code=${report##*$'\n'} 2026-10-16T14:02:07.207Z if grep -q 'class="cf-turnstile"' <<<"$report"; then 2026-10-16T14:02:07.207Z echo "/security/report shows Turnstile to people who aren't signed in" 2026-10-16T14:02:07.207Z elif grep -q 'has no Turnstile configured' <<<"$report"; then 2026-10-16T14:02:07.207Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: the Worker lacks TURNSTILE_SITE_KEY or TURNSTILE_SECRET (see the bootstrap and Worker secrets steps)" 2026-10-16T14:02:07.207Z else 2026-10-16T14:02:07.207Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: it answered $code without the form" 2026-10-16T14:02:07.207Z fi 2026-10-16T14:02:07.207Z for kind in js css; do 2026-10-16T14:02:07.207Z asset=$(grep -o "/-/kumo/[a-z0-9]*\.$kind" <<<"$page" | head -1) 2026-10-16T14:02:07.207Z [ -n "$asset" ] || { echo "::error::/login does not load the Kumo $kind bundle"; exit 1; } 2026-10-16T14:02:07.207Z code=$(curl -sS -o /dev/null -w '%{http_code}' "https://$DIFFINERY_DOMAIN$asset") 2026-10-16T14:02:07.207Z [ "$code" = 200 ] || { echo "::error::$asset returned $code"; exit 1; } 2026-10-16T14:02:07.207Z echo "$asset -> 200" 2026-10-16T14:02:07.207Z done 2026-10-16T14:02:07.207Z ##[endgroup] 2026-10-16T14:02:07.316Z /login serves the passkey sign-in page 2026-10-16T14:02:07.419Z /auth/access -> 302 https://assaysol-pages.cloudflareaccess.com/cdn-cgi/access/login/diffinery.com?kid=a40b189c8d5b52a71b3c3ec3260f18157c2840312dbfc32bee30e2609b15d02e&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjhlZTM2NTQ0OTNkMjJhYTM1NzJlMjVjMGUwZTM0ZDIxNDk4YjZjNmIxMzRhMWE2ZjcxNzk4MDFkMjVmMTcwMDQifQ.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.krcj2CiYWVI23XAHOuOeMVBbClrP9ZBId3B5nO6HEJlNZuCLnvx3BdX8xxN1z5neqsbHxVBIAMTeIndJi1TYUSkvxuQf9Wo7Mo2_dHI53UqZGQEIq24m8YaBuZBRdO03Z-C_rDKqE1cFDxCKsZKcq11bfPFI1ebgiEJF3yMT8Cz4W9fqnLosf5v_jbcZVEHlrmE_sKoSBHUpZ5flKyciAt3kpJBQ-K2PPc71Z1Mrzida9Ld3VjR_9d9d17KQil2XACyPrHSrcIicv9oyC6XM5YfvbwvfaHYnxI9vpOAdas_fK4pW1ACSXnFcPNUxJm4AY944w0AR53SiseHO-_Mdsw&redirect_url=%2Fauth%2Faccess 2026-10-16T14:02:07.508Z /security/report shows Turnstile to people who aren't signed in 2026-10-16T14:02:08.101Z /-/kumo/1emzyjz.js -> 200 2026-10-16T14:02:08.209Z /-/kumo/1tekldh.css -> 200 2026-10-16T14:02:08.771Z ##[group]Run set -u 2026-10-16T14:02:08.771Z for p in /favicon.ico /favicon.svg /favicon-48.png /apple-touch-icon.png /og-image.png /site.webmanifest /robots.txt /sitemap.xml; do 2026-10-16T14:02:08.771Z code=$(curl -sS -o /dev/null -w '%{http_code} %{content_type}' "https://$DIFFINERY_DOMAIN$p") 2026-10-16T14:02:08.771Z [[ "$code" == 200\ * ]] || { echo "::error::$p returned $code"; exit 1; } 2026-10-16T14:02:08.771Z echo "$p -> $code" 2026-10-16T14:02:08.771Z done 2026-10-16T14:02:08.771Z home=$(curl -sS https://$DIFFINERY_DOMAIN/) 2026-10-16T14:02:08.771Z for tag in 'rel="icon" href="/favicon.ico"' 'property="og:image"' 'rel="canonical"' 'application/ld+json'; do 2026-10-16T14:02:08.771Z grep -qF "$tag" <<<"$home" || { echo "::error::the home page is missing $tag"; exit 1; } 2026-10-16T14:02:08.771Z done 2026-10-16T14:02:08.771Z echo "the home page carries the favicon, canonical, Open Graph and structured data tags" 2026-10-16T14:02:08.771Z bm=$(curl -sS -D - -o /dev/null https://$DIFFINERY_DOMAIN/sitemap.xml | tr -d '\r' | sed -n 's/^x-d1-bookmark: //Ip') 2026-10-16T14:02:08.771Z [ -n "$bm" ] || { echo "::error::D1 queries don't run in a session (no x-d1-bookmark header)"; exit 1; } 2026-10-16T14:02:08.771Z echo "D1 sessions are on (bookmark $bm)" 2026-10-16T14:02:08.771Z ##[endgroup] 2026-10-16T14:02:08.864Z /favicon.ico -> 200 image/x-icon 2026-10-16T14:02:08.937Z /favicon.svg -> 200 image/svg+xml 2026-10-16T14:02:09.019Z /favicon-48.png -> 200 image/png 2026-10-16T14:02:09.090Z /apple-touch-icon.png -> 200 image/png 2026-10-16T14:02:09.166Z /og-image.png -> 200 image/png 2026-10-16T14:02:09.249Z /site.webmanifest -> 200 application/manifest+json 2026-10-16T14:02:09.316Z /robots.txt -> 200 text/plain; charset=UTF-8 2026-10-16T14:02:09.463Z /sitemap.xml -> 200 application/xml; charset=utf-8 2026-10-16T14:02:09.563Z the home page carries the favicon, canonical, Open Graph and structured data tags 2026-10-16T14:02:09.726Z D1 sessions are on (bookmark 00000340-00003290-00005106-7dd369f3cfed45fb76e30492a5ae703b) 2026-10-16T14:02:09.861Z Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0, not saving cache. 2026-10-16T14:02:10.246Z Pruning is unnecessary. 2026-10-16T14:02:10.375Z Removing persisted credentials 2026-10-16T14:02:10.531Z Job completed with conclusion: success 2026-10-16T14:02:10.532Z Resources: 0.6 of 4 vCPUs busy on average (1.6 at the 95th percentile), peak memory 2.7 GiB of 11.9 GiB, peak disk 2.2 GB of 19.3 GB