2026-10-25T17:01:28.245Z Diffinery runner: job deploy (Deploy to Cloudflare) for codician/diffinery@62a16b953bb1 2026-10-25T17:01:28.342Z Runner: image diffinery-runner:4d3bf17f06575e64ab4155b3, in ams13, WEUR, container a9f938c7a9f38375d5af9163837098c932ba89178217473ea7a9065a97d3a6cc 2026-10-25T17:01:28.342Z Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), this job uses what a smaller runner doesn't have; runs-on: diffinery-large (or -medium, -small, -tiny) sets a size 2026-10-25T17:01:28.343Z Host: AMD EPYC (family 25, model 1), 4 vCPUs, 2000 MHz 2026-10-25T17:01:28.347Z Workspace: /workspace/diffinery 2026-10-25T17:01:28.427Z ##[group]Run actions/checkout@v4 2026-10-25T17:01:28.427Z with: 2026-10-25T17:01:28.427Z ref: 62a16b953bb11b21dfb4fef5d915e868171a49b1 2026-10-25T17:01:28.427Z ##[endgroup] 2026-10-25T17:01:28.430Z Syncing repository: codician/diffinery 2026-10-25T17:01:28.561Z Fetching the repository (depth 1) 2026-10-25T17:01:29.276Z remote: Enumerating objects: 874, done. 2026-10-25T17:01:29.469Z Receiving objects: 0% (1/874) Receiving objects: 1% (9/874) Receiving objects: 2% (18/874) Receiving objects: 3% (27/874) Receiving objects: 4% (35/874) Receiving objects: 5% (44/874) Receiving objects: 6% (53/874) Receiving objects: 7% (62/874) Receiving objects: 8% (70/874) Receiving objects: 9% (79/874) Receiving objects: 10% (88/874) Receiving objects: 11% (97/874) Receiving objects: 12% (105/874) Receiving objects: 13% (114/874) Receiving objects: 14% (123/874) Receiving objects: 15% (132/874) Receiving objects: 16% (140/874) Receiving objects: 17% (149/874) Receiving objects: 18% (158/874) Receiving objects: 19% (167/874) Receiving objects: 20% (175/874) Receiving objects: 21% (184/874) Receiving objects: 22% (193/874) Receiving objects: 23% (202/874) Receiving objects: 24% (210/874) Receiving objects: 25% (219/874) Receiving objects: 26% (228/874) Receiving objects: 27% (236/874) Receiving objects: 28% (245/874) Receiving objects: 29% (254/874) Receiving objects: 30% (263/874) Receiving objects: 31% (271/874) Receiving objects: 32% (280/874) Receiving objects: 33% (289/874) Receiving objects: 34% (298/874) Receiving objects: 35% (306/874) Receiving objects: 36% (315/874) Receiving objects: 37% (324/874) Receiving objects: 38% (333/874) Receiving objects: 39% (341/874) Receiving objects: 40% (350/874) Receiving objects: 41% (359/874) Receiving objects: 42% (368/874) Receiving objects: 43% (376/874) Receiving objects: 44% (385/874) Receiving objects: 45% (394/874) Receiving objects: 46% (403/874) Receiving objects: 47% (411/874) Receiving objects: 48% (420/874) Receiving objects: 49% (429/874) Receiving objects: 50% (437/874) Receiving objects: 51% (446/874) Receiving objects: 52% (455/874) Receiving objects: 53% (464/874) Receiving objects: 54% (472/874) Receiving objects: 55% (481/874) Receiving objects: 56% (490/874) Receiving objects: 57% (499/874) Receiving objects: 58% (507/874) Receiving objects: 59% (516/874) Receiving objects: 60% (525/874) Receiving objects: 61% (534/874) Receiving objects: 62% (542/874) Receiving objects: 63% (551/874) Receiving objects: 64% (560/874) Receiving objects: 65% (569/874) Receiving objects: 66% (577/874) Receiving objects: 67% (586/874) Receiving objects: 68% (595/874) Receiving objects: 69% (604/874) Receiving objects: 70% (612/874) Receiving objects: 71% (621/874) Receiving objects: 72% (630/874) Receiving objects: 73% (639/874) Receiving objects: 74% (647/874) Receiving objects: 75% (656/874) Receiving objects: 76% (665/874) Receiving objects: 77% (673/874) Receiving objects: 78% (682/874) Receiving objects: 79% (691/874) Receiving objects: 80% (700/874) Receiving objects: 81% (708/874) Receiving objects: 82% (717/874) Receiving objects: 83% (726/874) Receiving objects: 84% (735/874) Receiving objects: 85% (743/874) Receiving objects: 86% (752/874) Receiving objects: 87% (761/874) Receiving objects: 88% (770/874) Receiving objects: 89% (778/874) Receiving objects: 90% (787/874) Receiving objects: 91% (796/874) Receiving objects: 92% (805/874) Receiving objects: 93% (813/874) Receiving objects: 94% (822/874) Receiving objects: 95% (831/874) Receiving objects: 96% (840/874) Receiving objects: 97% (848/874) remote: Total 874 (delta 0), reused 874 (delta 0) 2026-10-25T17:01:29.471Z Receiving objects: 98% (857/874) Receiving objects: 99% (866/874) Receiving objects: 100% (874/874) Receiving objects: 100% (874/874), 3.79 MiB | 19.88 MiB/s, done. 2026-10-25T17:01:29.496Z From https://diffinery.com/codician/diffinery 2026-10-25T17:01:29.496Z * [new ref] 62a16b953bb11b21dfb4fef5d915e868171a49b1 -> origin/diffinery-checkout 2026-10-25T17:01:29.656Z Note: switching to '62a16b953bb11b21dfb4fef5d915e868171a49b1'. 2026-10-25T17:01:29.656Z 2026-10-25T17:01:29.656Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-25T17:01:29.656Z changes and commit them, and you can discard any commits you make in this 2026-10-25T17:01:29.656Z state without impacting any branches by switching back to a branch. 2026-10-25T17:01:29.656Z 2026-10-25T17:01:29.656Z If you want to create a new branch to retain commits you create, you may 2026-10-25T17:01:29.656Z do so (now or later) by using -c with the switch command. Example: 2026-10-25T17:01:29.656Z 2026-10-25T17:01:29.656Z git switch -c 2026-10-25T17:01:29.656Z 2026-10-25T17:01:29.656Z Or undo this operation with: 2026-10-25T17:01:29.656Z 2026-10-25T17:01:29.656Z git switch - 2026-10-25T17:01:29.656Z 2026-10-25T17:01:29.656Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-25T17:01:29.656Z 2026-10-25T17:01:29.656Z HEAD is now at 62a16b9 Keep the Claude Code and Codex plugins in this repository (#295) 2026-10-25T17:01:29.663Z HEAD is now at 62a16b953bb11b21dfb4fef5d915e868171a49b1 2026-10-25T17:01:29.840Z Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' 2026-10-25T17:01:30.420Z ##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 2026-10-25T17:01:30.420Z with: 2026-10-25T17:01:30.420Z dest: ~/setup-pnpm 2026-10-25T17:01:30.420Z run_install: null 2026-10-25T17:01:30.420Z cache: false 2026-10-25T17:01:30.420Z cache_dependency_path: pnpm-lock.yaml 2026-10-25T17:01:30.420Z package_json_file: package.json 2026-10-25T17:01:30.420Z standalone: false 2026-10-25T17:01:30.420Z ##[endgroup] 2026-10-25T17:01:30.809Z ##[group]Running self-installer... 2026-10-25T17:01:32.416Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-25T17:01:32.439Z Packages: +1 2026-10-25T17:01:32.440Z + 2026-10-25T17:01:33.561Z Progress: resolved 1, reused 0, downloaded 1, added 0 2026-10-25T17:01:33.722Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-25T17:01:33.786Z 2026-10-25T17:01:33.787Z dependencies: 2026-10-25T17:01:33.787Z + pnpm 10.28.0 (12.15.0 is available) 2026-10-25T17:01:33.787Z 2026-10-25T17:01:33.793Z Done in 2.5s 2026-10-25T17:01:33.833Z ##[endgroup] 2026-10-25T17:01:33.834Z Installation Completed! 2026-10-25T17:01:33.975Z ##[group]Run actions/setup-node@v4 2026-10-25T17:01:33.975Z with: 2026-10-25T17:01:33.975Z node-version: 22 2026-10-25T17:01:33.975Z cache: pnpm 2026-10-25T17:01:33.975Z ##[endgroup] 2026-10-25T17:01:33.992Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-25T17:01:35.686Z Cache Size: ~216 MB (226934503 B) 2026-10-25T17:01:46.686Z Cache restored from key: node-cache-Linux-x64-pnpm-42d02c0263a3b5f911ed6ae8e9210922b97166ca02e60b2c70c55dfa1f00371b 2026-10-25T17:01:47.788Z ##[group]Run pnpm install --frozen-lockfile 2026-10-25T17:01:47.788Z ##[endgroup] 2026-10-25T17:01:48.681Z Scope: all 8 workspace projects 2026-10-25T17:01:48.819Z Lockfile is up to date, resolution step is skipped 2026-10-25T17:01:48.928Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-25T17:01:49.040Z Packages: +251 2026-10-25T17:01:49.040Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-25T17:01:49.930Z Progress: resolved 251, reused 245, downloaded 0, added 60 2026-10-25T17:01:50.931Z Progress: resolved 251, reused 245, downloaded 0, added 170 2026-10-25T17:01:51.465Z Progress: resolved 251, reused 245, downloaded 0, added 251, done 2026-10-25T17:01:52.158Z .../esbuild@0.28.1/node_modules/esbuild postinstall$ node install.js 2026-10-25T17:01:52.160Z .../esbuild@0.25.12/node_modules/esbuild postinstall$ node install.js 2026-10-25T17:01:52.162Z .../esbuild@0.25.11/node_modules/esbuild postinstall$ node install.js 2026-10-25T17:01:52.163Z .../node_modules/workerd postinstall$ node install.js 2026-10-25T17:01:52.177Z .../node_modules/workerd postinstall$ node install.js 2026-10-25T17:01:52.765Z .../esbuild@0.25.12/node_modules/esbuild postinstall: Done 2026-10-25T17:01:52.782Z .../node_modules/workerd postinstall: Done 2026-10-25T17:01:52.792Z .../esbuild@0.28.2/node_modules/esbuild postinstall$ node install.js 2026-10-25T17:01:52.803Z .../esbuild@0.25.11/node_modules/esbuild postinstall: Done 2026-10-25T17:01:53.007Z .../node_modules/workerd postinstall: Done 2026-10-25T17:01:53.009Z .../esbuild@0.28.1/node_modules/esbuild postinstall: Done 2026-10-25T17:01:53.076Z .../esbuild@0.28.2/node_modules/esbuild postinstall: Done 2026-10-25T17:01:54.009Z 2026-10-25T17:01:54.009Z devDependencies: 2026-10-25T17:01:54.009Z + turbo 2.11.7 2026-10-25T17:01:54.009Z + typescript 5.9.3 2026-10-25T17:01:54.009Z 2026-10-25T17:01:55.091Z Done in 7.2s using pnpm v10.28.0 2026-10-25T17:01:55.270Z ##[group]Run pnpm -r --if-present build 2026-10-25T17:01:55.270Z ##[endgroup] 2026-10-25T17:01:55.901Z Scope: 7 of 8 workspace projects 2026-10-25T17:01:55.908Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-25T17:01:55.908Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-25T17:01:55.910Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs 2026-10-25T17:01:55.910Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-25T17:01:56.089Z apps/cli build: dist/diffinery.mjs 468.9kb 2026-10-25T17:01:56.097Z apps/cli build: ⚡ Done in 148ms 2026-10-25T17:01:56.109Z apps/cli build: Done 2026-10-25T17:01:56.109Z containers/runner build: dist/agent.mjs 684.1kb 2026-10-25T17:01:56.109Z containers/runner build: ⚡ Done in 162ms 2026-10-25T17:01:56.114Z containers/runner build: Done 2026-10-25T17:01:59.967Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-25T17:02:01.131Z apps/diffinery build: docs: 83 pages (+2 generated at runtime), 18 site pages, 11 images, CLI 0.1.0 (250 KiB), editor extension 0.1.1 (20 KiB), JetBrains plugin 0.1.0 (64 KiB), Claude Code plugins diffinery 0.1.2, diffinery-ci 0.2.2 2026-10-25T17:02:01.152Z apps/diffinery build: Done 2026-10-25T17:02:01.300Z ##[group]Run scripts/runner-image.sh 2026-10-25T17:02:01.300Z env: 2026-10-25T17:02:01.300Z CLOUDFLARE_API_TOKEN: *** 2026-10-25T17:02:01.300Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-25T17:02:01.300Z ##[endgroup] 2026-10-25T17:02:12.756Z reusing diffinery-runner:4d3bf17f06575e64ab4155b3: the runner hasn't changed since it was built 2026-10-25T17:02:12.756Z registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3 2026-10-25T17:02:12.980Z ##[group]Run scripts/bootstrap.sh 2026-10-25T17:02:12.980Z env: 2026-10-25T17:02:12.980Z CLOUDFLARE_API_TOKEN: *** 2026-10-25T17:02:12.980Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-25T17:02:12.980Z ##[endgroup] 2026-10-25T17:02:13.014Z ##[group]D1 database 2026-10-25T17:02:13.425Z D1 database exists: 2c3f0cb1-7ded-438c-88ef-4c3d39930ba6 2026-10-25T17:02:13.950Z read replication: auto (turn it on with the 'D1 read replication' workflow) 2026-10-25T17:02:13.951Z ##[endgroup] 2026-10-25T17:02:13.951Z ##[group]R2 bucket 2026-10-25T17:02:14.689Z R2 bucket exists 2026-10-25T17:02:15.644Z R2 lifecycle rules set 2026-10-25T17:02:15.644Z ##[endgroup] 2026-10-25T17:02:15.644Z ##[group]Queues 2026-10-25T17:02:16.415Z queue diffinery-events exists 2026-10-25T17:02:16.418Z queue diffinery-events-dlq exists 2026-10-25T17:02:16.422Z queue diffinery-mail exists 2026-10-25T17:02:16.425Z queue diffinery-mail-dlq exists 2026-10-25T17:02:16.428Z queue diffinery-mail-events exists 2026-10-25T17:02:16.428Z ##[endgroup] 2026-10-25T17:02:16.428Z ##[group]Email Sending event subscription 2026-10-25T17:02:18.143Z event subscription acc79fd40fbe4ed3ae2ecd2a538a1605 sends diffinery.com's bounces and complaints to diffinery-mail-events 2026-10-25T17:02:18.143Z ##[endgroup] 2026-10-25T17:02:18.148Z ##[group]Email Sending for diffinery.com 2026-10-25T17:02:18.541Z zone diffinery.com (379c97b13ecaec46db00b8e87f377c37) 2026-10-25T17:02:18.739Z can't read Email Sending settings with this token (10000: Authentication error), checking public DNS instead 2026-10-25T17:02:18.855Z ok MX cf-bounce.diffinery.com 2026-10-25T17:02:18.955Z ok TXT cf-bounce.diffinery.com (SPF) 2026-10-25T17:02:19.051Z ok TXT _dmarc.diffinery.com 2026-10-25T17:02:19.051Z diffinery.com looks onboarded to Email Sending (public DNS) 2026-10-25T17:02:19.052Z ##[endgroup] 2026-10-25T17:02:19.052Z ##[group]Turnstile 2026-10-25T17:02:19.891Z Turnstile widget "diffinery diffinery.com" exists: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-25T17:02:20.786Z TURNSTILE_SECRET goes with site key 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-25T17:02:20.787Z site key: 0x4AAAAAAFWX2OQHwh_jT9_h 2026-10-25T17:02:20.787Z ##[endgroup] 2026-10-25T17:02:20.787Z ##[group]Cloudflare Access 2026-10-25T17:02:23.634Z Access app covers diffinery.com/auth/access 2026-10-25T17:02:23.747Z team=assaysol-pages.cloudflareaccess.com aud=set 2026-10-25T17:02:23.747Z ##[endgroup] 2026-10-25T17:02:23.747Z ##[group]Bootstrap administrators 2026-10-25T17:02:24.804Z BOOTSTRAP_ADMINS: 3 address(es), from the deployed diffinery Worker (kept as it is) 2026-10-25T17:02:24.805Z ##[endgroup] 2026-10-25T17:02:24.805Z ##[group]Render config and migrate D1 2026-10-25T17:02:24.871Z wrote /workspace/diffinery/apps/diffinery/wrangler.deploy.jsonc 2026-10-25T17:02:27.788Z 2026-10-25T17:02:27.789Z ⛅️ wrangler 4.149.0 2026-10-25T17:02:27.789Z ──────────────────── 2026-10-25T17:02:27.791Z Resource location: remote 2026-10-25T17:02:27.791Z 2026-10-25T17:02:28.497Z ✅ No migrations to apply! 2026-10-25T17:02:29.652Z ##[endgroup] 2026-10-25T17:02:29.787Z ##[group]Run pnpm exec wrangler deploy -c wrangler.deploy.jsonc 2026-10-25T17:02:29.787Z env: 2026-10-25T17:02:29.787Z CLOUDFLARE_API_TOKEN: *** 2026-10-25T17:02:29.787Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-25T17:02:29.787Z ##[endgroup] 2026-10-25T17:02:33.379Z 2026-10-25T17:02:33.379Z ⛅️ wrangler 4.149.0 (update available 4.152.0) 2026-10-25T17:02:33.379Z ─────────────────────────────────────────────── 2026-10-25T17:02:33.418Z 2026-10-25T17:02:33.418Z Cloudflare collects anonymous telemetry about your usage of Wrangler. Learn more at https://github.com/cloudflare/workers-sdk/tree/main/packages/wrangler/telemetry.md 2026-10-25T17:02:41.381Z Total Upload: 14878.00 KiB / gzip: 4023.98 KiB 2026-10-25T17:02:50.239Z Worker Startup Time: 150 ms 2026-10-25T17:02:50.243Z Your Worker has access to the following bindings: 2026-10-25T17:02:50.243Z Binding Resource 2026-10-25T17:02:50.243Z env.REPO (RepoDO) Durable Object 2026-10-25T17:02:50.244Z env.SCHEDULER (SchedulerDO) Durable Object 2026-10-25T17:02:50.244Z env.COMPOSE (ComposeDO) Durable Object 2026-10-25T17:02:50.244Z env.RUNNER (RunnerContainer) Durable Object 2026-10-25T17:02:50.244Z env.RUNNER_MEDIUM (RunnerContainerMedium) Durable Object 2026-10-25T17:02:50.244Z env.RUNNER_SMALL (RunnerContainerSmall) Durable Object 2026-10-25T17:02:50.244Z env.RUNNER_TINY (RunnerContainerTiny) Durable Object 2026-10-25T17:02:50.245Z env.SANDBOX (SandboxContainer) Durable Object 2026-10-25T17:02:50.245Z env.IMPORTER (ImportContainer) Durable Object 2026-10-25T17:02:50.245Z env.PROJECT (ProjectDO) Durable Object 2026-10-25T17:02:50.245Z env.RUN_WORKFLOW (RunWorkflow) Workflow 2026-10-25T17:02:50.245Z env.IMPORT_WORKFLOW (ImportWorkflow) Workflow 2026-10-25T17:02:50.245Z env.ACCOUNT_WORKFLOW (AccountWorkflow) Workflow 2026-10-25T17:02:50.245Z env.EMAIL (unrestricted) Send Email 2026-10-25T17:02:50.246Z env.EVENTS (inherited) Queue 2026-10-25T17:02:50.246Z env.MAIL (inherited) Queue 2026-10-25T17:02:50.246Z env.DB (diffinery) D1 Database 2026-10-25T17:02:50.246Z env.BUCKET (diffinery-data) R2 Bucket 2026-10-25T17:02:50.246Z env.RL_AUTH (20 requests/60s) Rate Limit 2026-10-25T17:02:50.246Z env.RL_ANON (300 requests/60s) Rate Limit 2026-10-25T17:02:50.246Z env.RL_ACCOUNT (2000 requests/60s) Rate Limit 2026-10-25T17:02:50.246Z env.RL_CREATE (60 requests/60s) Rate Limit 2026-10-25T17:02:50.247Z env.RL_MODEL (600 requests/60s) Rate Limit 2026-10-25T17:02:50.247Z env.CF_VERSION_METADATA Worker Version Metadata 2026-10-25T17:02:50.247Z env.PUBLIC_URL ("https://diffinery.com") Environment Variable 2026-10-25T17:02:50.247Z env.MAIL_FROM ("notifications@diffinery.com") Environment Variable 2026-10-25T17:02:50.247Z env.BOOTSTRAP_ADMINS ("iletisim@canberkdemirci.com,canberkde...") Environment Variable 2026-10-25T17:02:50.247Z env.ACCESS_TEAM_DOMAIN ("assaysol-pages.cloudflareaccess.com") Environment Variable 2026-10-25T17:02:50.247Z env.ACCESS_AUD ("a40b189c8d5b52a71b3c3ec3260f18157c284...") Environment Variable 2026-10-25T17:02:50.247Z env.RUNNER_IMAGE ("diffinery-runner:4d3bf17f06575e64ab41...") Environment Variable 2026-10-25T17:02:50.247Z env.TURNSTILE_SITE_KEY ("0x4AAAAAAFWX2OQHwh_jT9_h") Environment Variable 2026-10-25T17:02:50.248Z 2026-10-25T17:02:50.248Z The following containers are available: 2026-10-25T17:02:50.248Z - diffinery-runnercontainer (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3) 2026-10-25T17:02:50.248Z - diffinery-runnercontainermedium (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3) 2026-10-25T17:02:50.248Z - diffinery-runnercontainersmall (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3) 2026-10-25T17:02:50.248Z - diffinery-runnercontainertiny (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3) 2026-10-25T17:02:50.248Z - diffinery-sandboxcontainer (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3) 2026-10-25T17:02:50.248Z - diffinery-importcontainer (registry.cloudflare.com/***/diffinery-runner:4d3bf17f06575e64ab4155b3) 2026-10-25T17:02:50.248Z 2026-10-25T17:02:50.249Z Uploaded diffinery (11.17 sec) 2026-10-25T17:02:51.278Z ╭ Deploy a container application deploy changes to your application 2026-10-25T17:02:51.278Z │ 2026-10-25T17:02:52.041Z │ Container application changes 2026-10-25T17:02:52.041Z │ 2026-10-25T17:02:52.049Z ├ no changes diffinery-runnercontainer 2026-10-25T17:02:52.049Z │ 2026-10-25T17:02:52.049Z ╰ No changes to be made 2026-10-25T17:02:52.049Z 2026-10-25T17:02:52.049Z ╭ Deploy a container application deploy changes to your application 2026-10-25T17:02:52.049Z │ 2026-10-25T17:02:52.278Z │ Container application changes 2026-10-25T17:02:52.278Z │ 2026-10-25T17:02:52.279Z ├ no changes diffinery-runnercontainermedium 2026-10-25T17:02:52.279Z │ 2026-10-25T17:02:52.279Z ╰ No changes to be made 2026-10-25T17:02:52.279Z 2026-10-25T17:02:52.279Z ╭ Deploy a container application deploy changes to your application 2026-10-25T17:02:52.279Z │ 2026-10-25T17:02:52.512Z │ Container application changes 2026-10-25T17:02:52.513Z │ 2026-10-25T17:02:52.513Z ├ no changes diffinery-runnercontainersmall 2026-10-25T17:02:52.513Z │ 2026-10-25T17:02:52.513Z ╰ No changes to be made 2026-10-25T17:02:52.513Z 2026-10-25T17:02:52.513Z ╭ Deploy a container application deploy changes to your application 2026-10-25T17:02:52.513Z │ 2026-10-25T17:02:52.740Z │ Container application changes 2026-10-25T17:02:52.740Z │ 2026-10-25T17:02:52.740Z ├ no changes diffinery-runnercontainertiny 2026-10-25T17:02:52.740Z │ 2026-10-25T17:02:52.740Z ╰ No changes to be made 2026-10-25T17:02:52.740Z 2026-10-25T17:02:52.740Z ╭ Deploy a container application deploy changes to your application 2026-10-25T17:02:52.740Z │ 2026-10-25T17:02:53.080Z │ Container application changes 2026-10-25T17:02:53.080Z │ 2026-10-25T17:02:53.082Z ├ no changes diffinery-sandboxcontainer 2026-10-25T17:02:53.082Z │ 2026-10-25T17:02:53.082Z ╰ No changes to be made 2026-10-25T17:02:53.082Z 2026-10-25T17:02:53.082Z ╭ Deploy a container application deploy changes to your application 2026-10-25T17:02:53.082Z │ 2026-10-25T17:02:53.619Z │ Container application changes 2026-10-25T17:02:53.619Z │ 2026-10-25T17:02:53.620Z ├ no changes diffinery-importcontainer 2026-10-25T17:02:53.620Z │ 2026-10-25T17:02:53.620Z ╰ No changes to be made 2026-10-25T17:02:53.620Z 2026-10-25T17:03:01.818Z Deployed diffinery triggers (8.20 sec) 2026-10-25T17:03:01.818Z diffinery.com/* (zone name: diffinery.com) 2026-10-25T17:03:01.818Z schedule: */5 * * * * 2026-10-25T17:03:01.818Z Producer for diffinery-events 2026-10-25T17:03:01.818Z Producer for diffinery-mail 2026-10-25T17:03:01.818Z Consumer for diffinery-events 2026-10-25T17:03:01.818Z Consumer for diffinery-mail 2026-10-25T17:03:01.818Z Consumer for diffinery-mail-events 2026-10-25T17:03:01.818Z workflow: diffinery-run 2026-10-25T17:03:01.819Z workflow: diffinery-import 2026-10-25T17:03:01.819Z workflow: diffinery-account 2026-10-25T17:03:01.819Z Current Version ID: 055d28ee-73da-4cbd-8e90-f6ac9d700444 2026-10-25T17:03:02.176Z ##[group]Run scripts/wait-container-rollout.sh 2026-10-25T17:03:02.176Z env: 2026-10-25T17:03:02.176Z CLOUDFLARE_API_TOKEN: *** 2026-10-25T17:03:02.176Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-25T17:03:02.176Z ##[endgroup] 2026-10-25T17:03:03.411Z diffinery-runnercontainersmall: completed, step 1 of 1 completed, 7/7 instances updated; 2026-10-25T17:03:03.411Z the rollout reached its last step and this job, on an old-image container, is still running 2026-10-25T17:03:03.520Z ##[group]Run scripts/ensure-secrets.sh 2026-10-25T17:03:03.520Z env: 2026-10-25T17:03:03.520Z CLOUDFLARE_API_TOKEN: *** 2026-10-25T17:03:03.520Z CLOUDFLARE_ACCOUNT_ID: *** 2026-10-25T17:03:03.520Z ##[endgroup] 2026-10-25T17:03:08.456Z ##[group]Run # A new custom domain can take a few minutes to get its certificate. 2026-10-25T17:03:08.456Z for i in $(seq 1 30); do 2026-10-25T17:03:08.456Z code=$(curl -s -o /dev/null -w '%{http_code}' https://$DIFFINERY_DOMAIN/healthz) && [ "$code" = 200 ] && exit 0 2026-10-25T17:03:08.456Z sleep 10 2026-10-25T17:03:08.456Z done 2026-10-25T17:03:08.456Z echo "::error::https://$DIFFINERY_DOMAIN/healthz did not return 200 (last: $code). Check that the $DIFFINERY_DOMAIN DNS record is proxied (orange cloud)."; exit 1 2026-10-25T17:03:08.456Z ##[endgroup] 2026-10-25T17:03:08.704Z ##[group]Run set -u 2026-10-25T17:03:08.704Z page=$(curl -sS https://$DIFFINERY_DOMAIN/login) 2026-10-25T17:03:08.704Z grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; } 2026-10-25T17:03:08.704Z echo "/login serves the passkey sign-in page" 2026-10-25T17:03:08.704Z loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://$DIFFINERY_DOMAIN/auth/access) 2026-10-25T17:03:08.704Z echo "/auth/access -> $loc" 2026-10-25T17:03:08.704Z [[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work" 2026-10-25T17:03:08.704Z report=$(curl -sS -w '\n%{http_code}' https://$DIFFINERY_DOMAIN/security/report) 2026-10-25T17:03:08.704Z code=${report##*$'\n'} 2026-10-25T17:03:08.704Z if grep -q 'class="cf-turnstile"' <<<"$report"; then 2026-10-25T17:03:08.704Z echo "/security/report shows Turnstile to people who aren't signed in" 2026-10-25T17:03:08.704Z elif grep -q 'has no Turnstile configured' <<<"$report"; then 2026-10-25T17:03:08.704Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: the Worker lacks TURNSTILE_SITE_KEY or TURNSTILE_SECRET (see the bootstrap and Worker secrets steps)" 2026-10-25T17:03:08.704Z else 2026-10-25T17:03:08.704Z echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: it answered $code without the form" 2026-10-25T17:03:08.704Z fi 2026-10-25T17:03:08.704Z for kind in js css; do 2026-10-25T17:03:08.704Z asset=$(grep -o "/-/kumo/[a-z0-9]*\.$kind" <<<"$page" | head -1) 2026-10-25T17:03:08.704Z [ -n "$asset" ] || { echo "::error::/login does not load the Kumo $kind bundle"; exit 1; } 2026-10-25T17:03:08.704Z code=$(curl -sS -o /dev/null -w '%{http_code}' "https://$DIFFINERY_DOMAIN$asset") 2026-10-25T17:03:08.704Z [ "$code" = 200 ] || { echo "::error::$asset returned $code"; exit 1; } 2026-10-25T17:03:08.704Z echo "$asset -> 200" 2026-10-25T17:03:08.704Z done 2026-10-25T17:03:08.704Z ##[endgroup] 2026-10-25T17:03:08.837Z /login serves the passkey sign-in page 2026-10-25T17:03:08.937Z /auth/access -> 302 https://assaysol-pages.cloudflareaccess.com/cdn-cgi/access/login/diffinery.com?kid=a40b189c8d5b52a71b3c3ec3260f18157c2840312dbfc32bee30e2609b15d02e&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjhlZTM2NTQ0OTNkMjJhYTM1NzJlMjVjMGUwZTM0ZDIxNDk4YjZjNmIxMzRhMWE2ZjcxNzk4MDFkMjVmMTcwMDQifQ.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.12o9HVOiIbzNNN7VxUn0A0F0CIlbSvuvaTPllujrRyE1GLT7Kd2I3oqKKZwYPBTxcM9aamtev2GwvcdqndP8dkoCGD6BIKVhr9yoGGRitXmfn9QxlD0OLO4w6ssvaH9SJ_ZljmZLid2wDw5yd1UjV7WwwcGy7mdSrBUdLuXZLG-kjeULiFazD7GCvpO_6vdVP-rLigdz1COQq76D8_cXM3NgpdN5fzH-CYRWLLyjKDu72DIKEuWCIIo8q0GegF-qE5DRA6ZbBxDzWW42SwRFmtbUIyqyD7w0n6_VuKJwvu_PN4M8hx3FxgPCwpCPx_GNb1tZU-6526rn1vOUZetJ4g&redirect_url=%2Fauth%2Faccess 2026-10-25T17:03:09.075Z /security/report shows Turnstile to people who aren't signed in 2026-10-25T17:03:09.226Z /-/kumo/1ommpsj.js -> 200 2026-10-25T17:03:09.389Z /-/kumo/1tekldh.css -> 200 2026-10-25T17:03:09.478Z ##[group]Run set -u 2026-10-25T17:03:09.478Z for p in /favicon.ico /favicon.svg /favicon-48.png /apple-touch-icon.png /og-image.png /site.webmanifest /robots.txt /sitemap.xml; do 2026-10-25T17:03:09.478Z code=$(curl -sS -o /dev/null -w '%{http_code} %{content_type}' "https://$DIFFINERY_DOMAIN$p") 2026-10-25T17:03:09.478Z [[ "$code" == 200\ * ]] || { echo "::error::$p returned $code"; exit 1; } 2026-10-25T17:03:09.478Z echo "$p -> $code" 2026-10-25T17:03:09.478Z done 2026-10-25T17:03:09.478Z home=$(curl -sS https://$DIFFINERY_DOMAIN/) 2026-10-25T17:03:09.478Z for tag in 'rel="icon" href="/favicon.ico"' 'property="og:image"' 'rel="canonical"' 'application/ld+json'; do 2026-10-25T17:03:09.478Z grep -qF "$tag" <<<"$home" || { echo "::error::the home page is missing $tag"; exit 1; } 2026-10-25T17:03:09.478Z done 2026-10-25T17:03:09.478Z echo "the home page carries the favicon, canonical, Open Graph and structured data tags" 2026-10-25T17:03:09.478Z bm=$(curl -sS -D - -o /dev/null https://$DIFFINERY_DOMAIN/sitemap.xml | tr -d '\r' | sed -n 's/^x-d1-bookmark: //Ip') 2026-10-25T17:03:09.478Z [ -n "$bm" ] || { echo "::error::D1 queries don't run in a session (no x-d1-bookmark header)"; exit 1; } 2026-10-25T17:03:09.478Z echo "D1 sessions are on (bookmark $bm)" 2026-10-25T17:03:09.478Z ##[endgroup] 2026-10-25T17:03:09.582Z /favicon.ico -> 200 image/x-icon 2026-10-25T17:03:09.677Z /favicon.svg -> 200 image/svg+xml 2026-10-25T17:03:09.762Z /favicon-48.png -> 200 image/png 2026-10-25T17:03:09.873Z /apple-touch-icon.png -> 200 image/png 2026-10-25T17:03:09.991Z /og-image.png -> 200 image/png 2026-10-25T17:03:10.073Z /site.webmanifest -> 200 application/manifest+json 2026-10-25T17:03:10.152Z /robots.txt -> 200 text/plain; charset=UTF-8 2026-10-25T17:03:10.603Z /sitemap.xml -> 200 application/xml; charset=utf-8 2026-10-25T17:03:10.758Z the home page carries the favicon, canonical, Open Graph and structured data tags 2026-10-25T17:03:11.051Z D1 sessions are on (bookmark 000009a3-000009b4-0000510f-31fbeb73c82c65fe5a8bf7d995b9d33c) 2026-10-25T17:03:11.191Z Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-42d02c0263a3b5f911ed6ae8e9210922b97166ca02e60b2c70c55dfa1f00371b, not saving cache. 2026-10-25T17:03:11.799Z Pruning is unnecessary. 2026-10-25T17:03:11.914Z Removing persisted credentials 2026-10-25T17:03:11.976Z Host: 3% of the vCPUs' time went to other work on the host (steal) 2026-10-25T17:03:11.976Z Job completed with conclusion: success 2026-10-25T17:03:11.979Z Resources: 0.8 of 4 vCPUs busy on average (2.6 at the 95th percentile), peak memory 1.4 GiB of 11.9 GiB, peak disk 2.1 GB of 19.2 GB