Diffinery runner: job deploy (Deploy to Cloudflare) for codician/diffinery@683b739beb0eRunner: image diffinery-runner:4d3bf17f06575e64ab4155b3, in dub02, WEUR, container 10988ed53b5bc390d9925db70ff29e100a7e0f8e10581aa6e610c32501cdd01cRunner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), this job uses what a smaller runner doesn't have; runs-on: diffinery-large (or -medium, -small, -tiny) sets a sizeHost: AMD EPYC (family 25, model 17), 4 vCPUs, 2550 MHzWorkspace: /workspace/diffineryHost: 0% of the vCPUs' time went to other work on the host (steal)Job completed with conclusion: failureResources: 0.6 of 4 vCPUs busy on average (2.4 at the 95th percentile), peak memory 1.3 GiB of 11.9 GiB, peak disk 2.1 GB of 19.2 GB

##[group]Run actions/checkout@v4with:  ref: 683b739beb0ea3e50cf58e3a579f825990056406##[endgroup]Syncing repository: codician/diffineryFetching the repository (depth 1)remote: Enumerating objects: 785, done.        Receiving objects:   0% (1/785)
Receiving objects:   1% (8/785)
Receiving objects:   2% (16/785)
Receiving objects:   3% (24/785)
Receiving objects:   4% (32/785)
Receiving objects:   5% (40/785)
Receiving objects:   6% (48/785)
Receiving objects:   7% (55/785)
Receiving objects:   8% (63/785)
Receiving objects:   9% (71/785)
Receiving objects:  10% (79/785)
Receiving objects:  11% (87/785)
Receiving objects:  12% (95/785)
Receiving objects:  13% (103/785)
Receiving objects:  14% (110/785)
Receiving objects:  15% (118/785)
Receiving objects:  16% (126/785)
Receiving objects:  17% (134/785)
Receiving objects:  18% (142/785)
Receiving objects:  19% (150/785)
Receiving objects:  20% (157/785)
Receiving objects:  21% (165/785)
Receiving objects:  22% (173/785)
Receiving objects:  23% (181/785)
Receiving objects:  24% (189/785)
Receiving objects:  25% (197/785)
Receiving objects:  26% (205/785)
Receiving objects:  27% (212/785)
Receiving objects:  28% (220/785)
Receiving objects:  29% (228/785)
Receiving objects:  30% (236/785)
Receiving objects:  31% (244/785)
Receiving objects:  32% (252/785)
Receiving objects:  33% (260/785)
Receiving objects:  34% (267/785)
Receiving objects:  35% (275/785)
Receiving objects:  36% (283/785)
Receiving objects:  37% (291/785)
Receiving objects:  38% (299/785)
Receiving objects:  39% (307/785)
Receiving objects:  40% (314/785)
Receiving objects:  41% (322/785)
Receiving objects:  42% (330/785)
Receiving objects:  43% (338/785)
Receiving objects:  44% (346/785)
Receiving objects:  45% (354/785)
Receiving objects:  46% (362/785)
Receiving objects:  47% (369/785)
Receiving objects:  48% (377/785)
Receiving objects:  49% (385/785)
Receiving objects:  50% (393/785)
Receiving objects:  51% (401/785)
Receiving objects:  52% (409/785)
Receiving objects:  53% (417/785)
Receiving objects:  54% (424/785)
Receiving objects:  55% (432/785)
Receiving objects:  56% (440/785)
Receiving objects:  57% (448/785)
Receiving objects:  58% (456/785)
Receiving objects:  59% (464/785)
Receiving objects:  60% (471/785)
Receiving objects:  61% (479/785)
Receiving objects:  62% (487/785)
Receiving objects:  63% (495/785)
Receiving objects:  64% (503/785)
Receiving objects:  65% (511/785)
Receiving objects:  66% (519/785)
Receiving objects:  67% (526/785)
Receiving objects:  68% (534/785)
Receiving objects:  69% (542/785)
Receiving objects:  70% (550/785)
Receiving objects:  71% (558/785)
Receiving objects:  72% (566/785)
Receiving objects:  73% (574/785)
Receiving objects:  74% (581/785)
Receiving objects:  75% (589/785)
Receiving objects:  76% (597/785)
Receiving objects:  77% (605/785)
Receiving objects:  78% (613/785)
Receiving objects:  79% (621/785)
Receiving objects:  80% (628/785)
Receiving objects:  81% (636/785)
Receiving objects:  82% (644/785)
Receiving objects:  83% (652/785)
Receiving objects:  84% (660/785)
Receiving objects:  85% (668/785)
Receiving objects:  86% (676/785)
Receiving objects:  87% (683/785)
Receiving objects:  88% (691/785)
Receiving objects:  89% (699/785)
Receiving objects:  90% (707/785)
Receiving objects:  91% (715/785)
Receiving objects:  92% (723/785)
Receiving objects:  93% (731/785)
Receiving objects:  94% (738/785)
Receiving objects:  95% (746/785)
Receiving objects:  96% (754/785)
Receiving objects:  97% (762/785)
remote: Total 785 (delta 0), reused 785 (delta 0)        Receiving objects:  98% (770/785)
Receiving objects:  99% (778/785)
Receiving objects: 100% (785/785)
Receiving objects: 100% (785/785), 3.59 MiB | 12.85 MiB/s, done.From https://diffinery.com/codician/diffinery * [new ref]         683b739beb0ea3e50cf58e3a579f825990056406 -> origin/diffinery-checkoutNote: switching to '683b739beb0ea3e50cf58e3a579f825990056406'.You are in 'detached HEAD' state. You can look around, make experimentalchanges and commit them, and you can discard any commits you make in thisstate without impacting any branches by switching back to a branch.If you want to create a new branch to retain commits you create, you maydo so (now or later) by using -c with the switch command. Example:  git switch -c <new-branch-name>Or undo this operation with:  git switch -Turn off this advice by setting config variable advice.detachedHead to falseHEAD is now at 683b739 Merge pull request #269 from claude/faster-pagesHEAD is now at 683b739beb0ea3e50cf58e3a579f825990056406

Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1'##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1with:  dest: ~/setup-pnpm  run_install: null  cache: false  cache_dependency_path: pnpm-lock.yaml  package_json_file: package.json  standalone: false##[endgroup]##[group]Running self-installer...Progress: resolved 1, reused 0, downloaded 0, added 0Packages: +1+Progress: resolved 1, reused 0, downloaded 1, added 1, donedependencies:+ pnpm 10.28.0 (12.15.0 is available)Done in 936ms##[endgroup]Installation Completed!

##[group]Run actions/setup-node@v4with:  node-version: 22  cache: pnpm##[endgroup]Found in cache @ 22.22.0 (pre-installed node satisfies '22')Cache Size: ~216 MB (226934503 B)Cache restored from key: node-cache-Linux-x64-pnpm-42d02c0263a3b5f911ed6ae8e9210922b97166ca02e60b2c70c55dfa1f00371b

##[group]Run pnpm install --frozen-lockfile##[endgroup]Scope: all 8 workspace projectsLockfile is up to date, resolution step is skippedProgress: resolved 1, reused 0, downloaded 0, added 0Packages: +251++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Progress: resolved 251, reused 245, downloaded 0, added 250Progress: resolved 251, reused 245, downloaded 0, added 251, done.../node_modules/workerd postinstall$ node install.js.../esbuild@0.25.12/node_modules/esbuild postinstall$ node install.js.../node_modules/workerd postinstall$ node install.js.../esbuild@0.25.11/node_modules/esbuild postinstall$ node install.js.../esbuild@0.28.1/node_modules/esbuild postinstall$ node install.js.../node_modules/workerd postinstall: Done.../esbuild@0.25.11/node_modules/esbuild postinstall: Done.../esbuild@0.25.12/node_modules/esbuild postinstall: Done.../esbuild@0.28.2/node_modules/esbuild postinstall$ node install.js.../esbuild@0.28.1/node_modules/esbuild postinstall: Done.../node_modules/workerd postinstall: Done.../esbuild@0.28.2/node_modules/esbuild postinstall: DonedevDependencies:+ turbo 2.11.7+ typescript 5.9.3Done in 2.7s using pnpm v10.28.0

##[group]Run pnpm -r --if-present build##[endgroup]Scope: 7 of 8 workspace projectsapps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env nodeimport { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjscontainers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"containers/runner build:   dist/agent.mjs  684.1kbcontainers/runner build: ⚡ Done in 57msapps/cli build:   dist/diffinery.mjs  465.9kbapps/cli build: ⚡ Done in 60msapps/cli build: Donecontainers/runner build: Doneapps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KBapps/diffinery build: docs: 75 pages (+2 generated at runtime), 10 site pages, 11 images, CLI 0.1.0 (248 KiB), editor extension 0.1.1 (20 KiB), JetBrains plugin 0.1.0 (64 KiB), Claude Code plugins diffinery 0.1.1, diffinery-ci 0.2.1apps/diffinery build: Done

##[group]Run scripts/runner-image.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]reusing diffinery-runner:4d3bf17f06575e64ab4155b3: the runner hasn't changed since it was builtregistry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3

##[group]Run scripts/bootstrap.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]##[group]D1 databaseD1 database exists: 2c3f0cb1-7ded-438c-88ef-4c3d39930ba6read replication: auto (turn it on with the 'D1 read replication' workflow)##[endgroup]##[group]R2 bucketR2 bucket existsR2 lifecycle rules set##[endgroup]##[group]Queuesqueue diffinery-events existsqueue diffinery-events-dlq existsqueue diffinery-mail existsqueue diffinery-mail-dlq existsqueue diffinery-mail-events exists##[endgroup]##[group]Email Sending event subscriptionevent subscription acc79fd40fbe4ed3ae2ecd2a538a1605 sends diffinery.com's bounces and complaints to diffinery-mail-events##[endgroup]##[group]Email Sending for diffinery.comzone diffinery.com (379c97b13ecaec46db00b8e87f377c37)can't read Email Sending settings with this token (10000: Authentication error), checking public DNS insteadok       MX cf-bounce.diffinery.comok       TXT cf-bounce.diffinery.com (SPF)ok       TXT _dmarc.diffinery.comdiffinery.com looks onboarded to Email Sending (public DNS)##[endgroup]##[group]TurnstileTurnstile widget "diffinery diffinery.com" exists: 0x4AAAAAAFWX2OQHwh_jT9_hTURNSTILE_SECRET goes with site key 0x4AAAAAAFWX2OQHwh_jT9_hsite key: 0x4AAAAAAFWX2OQHwh_jT9_h##[endgroup]##[group]Cloudflare AccessAccess app covers diffinery.com/auth/accessteam=assaysol-pages.cloudflareaccess.com aud=set##[endgroup]##[group]Render config and migrate D1wrote /workspace/diffinery/apps/diffinery/wrangler.deploy.jsonc ⛅️ wrangler 4.149.0────────────────────Resource location: remote ✅ No migrations to apply!##[endgroup]

##[group]Run pnpm exec wrangler deploy -c wrangler.deploy.jsoncenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup] ⛅️ wrangler 4.149.0 (update available 4.152.0)───────────────────────────────────────────────Cloudflare collects anonymous telemetry about your usage of Wrangler. Learn more at https://github.com/cloudflare/workers-sdk/tree/main/packages/wrangler/telemetry.mdTotal Upload: 14349.77 KiB / gzip: 3779.46 KiBWorker Startup Time: 93 msYour Worker has access to the following bindings:Binding                                                                   Resource                     env.REPO (RepoDO)                                                         Durable Object               env.SCHEDULER (SchedulerDO)                                               Durable Object               env.COMPOSE (ComposeDO)                                                   Durable Object               env.RUNNER (RunnerContainer)                                              Durable Object               env.RUNNER_MEDIUM (RunnerContainerMedium)                                 Durable Object               env.RUNNER_SMALL (RunnerContainerSmall)                                   Durable Object               env.RUNNER_TINY (RunnerContainerTiny)                                     Durable Object               env.SANDBOX (SandboxContainer)                                            Durable Object               env.IMPORTER (ImportContainer)                                            Durable Object               env.PROJECT (ProjectDO)                                                   Durable Object               env.RUN_WORKFLOW (RunWorkflow)                                            Workflow                     env.IMPORT_WORKFLOW (ImportWorkflow)                                      Workflow                     env.ACCOUNT_WORKFLOW (AccountWorkflow)                                    Workflow                     env.EMAIL (unrestricted)                                                  Send Email                   env.EVENTS (inherited)                                                    Queue                        env.MAIL (inherited)                                                      Queue                        env.DB (diffinery)                                                        D1 Database                  env.BUCKET (diffinery-data)                                               R2 Bucket                    env.RL_AUTH (20 requests/60s)                                             Rate Limit                   env.RL_ANON (300 requests/60s)                                            Rate Limit                   env.RL_ACCOUNT (2000 requests/60s)                                        Rate Limit                   env.RL_CREATE (60 requests/60s)                                           Rate Limit                   env.RL_MODEL (600 requests/60s)                                           Rate Limit                   env.CF_VERSION_METADATA                                                   Worker Version Metadata      env.PUBLIC_URL ("https://diffinery.com")                                  Environment Variable         env.MAIL_FROM ("notifications@diffinery.com")                             Environment Variable         env.BOOTSTRAP_ADMINS ("iletisim@canberkdemirci.com,canberkde...")         Environment Variable         env.ACCESS_TEAM_DOMAIN ("assaysol-pages.cloudflareaccess.com")            Environment Variable         env.ACCESS_AUD ("a40b189c8d5b52a71b3c3ec3260f18157c284...")               Environment Variable         env.RUNNER_IMAGE ("diffinery-runner:4d3bf17f06575e64ab41...")             Environment Variable         env.TURNSTILE_SITE_KEY ("0x4AAAAAAFWX2OQHwh_jT9_h")                       Environment Variable         The following containers are available:- diffinery-runnercontainer (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3)- diffinery-runnercontainermedium (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3)- diffinery-runnercontainersmall (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3)- diffinery-runnercontainertiny (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3)- diffinery-sandboxcontainer (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3)- diffinery-importcontainer (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3)Uploaded diffinery (9.86 sec)╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainer│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainermedium│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainersmall│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainertiny│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-sandboxcontainer│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-importcontainer│╰ No changes to be made Deployed diffinery triggers (7.55 sec)  diffinery.com/* (zone name: diffinery.com)  schedule: */5 * * * *  Producer for diffinery-events  Producer for diffinery-mail  Consumer for diffinery-events  Consumer for diffinery-mail  Consumer for diffinery-mail-events  workflow: diffinery-run  workflow: diffinery-import  workflow: diffinery-accountCurrent Version ID: 5b2a3a7d-3845-40d2-85d6-8a1ca0e298ce

##[group]Run scripts/wait-container-rollout.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]diffinery-runnercontainersmall: completed, step 1 of 1 completed, 7/7 instances updated; the rollout reached its last step and this job, on an old-image container, is still running

##[group]Run scripts/ensure-secrets.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]

##[group]Run # A new custom domain can take a few minutes to get its certificate.for i in $(seq 1 30); do  code=$(curl -s -o /dev/null -w '%{http_code}' https://$DIFFINERY_DOMAIN/healthz) && [ "$code" = 200 ] && exit 0  sleep 10doneecho "::error::https://$DIFFINERY_DOMAIN/healthz did not return 200 (last: $code). Check that the $DIFFINERY_DOMAIN DNS record is proxied (orange cloud)."; exit 1##[endgroup]

##[group]Run set -upage=$(curl -sS https://$DIFFINERY_DOMAIN/login)grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; }echo "/login serves the passkey sign-in page"loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://$DIFFINERY_DOMAIN/auth/access)echo "/auth/access -> $loc"[[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work"report=$(curl -sS -w '\n%{http_code}' https://$DIFFINERY_DOMAIN/security/report)code=${report##*$'\n'}if grep -q 'class="cf-turnstile"' <<<"$report"; then  echo "/security/report shows Turnstile to people who aren't signed in"elif grep -q 'has no Turnstile configured' <<<"$report"; then  echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: the Worker lacks TURNSTILE_SITE_KEY or TURNSTILE_SECRET (see the bootstrap and Worker secrets steps)"else  echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: it answered $code without the form"fifor kind in js css; do  asset=$(grep -o "/-/kumo/[a-z0-9]*\.$kind" <<<"$page" | head -1)  [ -n "$asset" ] || { echo "::error::/login does not load the Kumo $kind bundle"; exit 1; }  code=$(curl -sS -o /dev/null -w '%{http_code}' "https://$DIFFINERY_DOMAIN$asset")  [ "$code" = 200 ] || { echo "::error::$asset returned $code"; exit 1; }  echo "$asset -> 200"done##[endgroup]/login serves the passkey sign-in page/auth/access -> 302 https://assaysol-pages.cloudflareaccess.com/cdn-cgi/access/login/diffinery.com?kid=a40b189c8d5b52a71b3c3ec3260f18157c2840312dbfc32bee30e2609b15d02e&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjhlZTM2NTQ0OTNkMjJhYTM1NzJlMjVjMGUwZTM0ZDIxNDk4YjZjNmIxMzRhMWE2ZjcxNzk4MDFkMjVmMTcwMDQifQ.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.WqI5EqT63ZqVPvTazUHhIuO7RSY2Kn7Zi_xwL2TScFKggpBDL5Txf4TPZZDbmq_jmOvpmLRjS4uteR1GER1puh-TyGcA4TBLw5vrINz-nvFXHoyArHqdF0BuHN_K7TwdJjq0uTGNb0YmOcgpeSv_9VRChdk0fXQ0PpCeyiFsXRApLpoxy7ezyH-NWq7po6_TFyIUl_T7_hh_Mi1zUZ4PwJZzr6kvxaAVOUGDoNAkPR_Ggf9cAtWMMN0SJtvzAPONGTsmj7iK2j8rWHzNvgNR_WJuPTrYA2stagmKTXD4WfR0Xk5JUWFW4g3ezFIlMy2SEqJ1F_sABCxdJE9zXtHQkA&redirect_url=%2Fauth%2Faccess/security/report shows Turnstile to people who aren't signed in##[error]Process completed with exit code 1.

Pruning is unnecessary.

Removing persisted credentials