Diffinery runner: job deploy (Deploy to Cloudflare) for codician/diffinery@b9e1252d7209Runner: image diffinery-runner:75052421315d69e3ccfad876, in cdg14, WEUR, container dc27f28618c793efc855f74ecec29186fcf7afdc722dc5bba9be4dd804e4e9a2Workspace: /workspace/diffineryJob completed with conclusion: success

##[group]Run actions/checkout@v4with:  ref: b9e1252d7209d811b295689240847fdebb6afdca##[endgroup]Syncing repository: codician/diffineryFetching the repository (depth 1)remote: Enumerating objects: 584, done.        Receiving objects:   0% (1/584)
Receiving objects:   1% (6/584)
Receiving objects:   2% (12/584)
Receiving objects:   3% (18/584)
Receiving objects:   4% (24/584)
Receiving objects:   5% (30/584)
Receiving objects:   6% (36/584)
Receiving objects:   7% (41/584)
Receiving objects:   8% (47/584)
Receiving objects:   9% (53/584)
Receiving objects:  10% (59/584)
Receiving objects:  11% (65/584)
Receiving objects:  12% (71/584)
Receiving objects:  13% (76/584)
Receiving objects:  14% (82/584)
Receiving objects:  15% (88/584)
Receiving objects:  16% (94/584)
Receiving objects:  17% (100/584)
Receiving objects:  18% (106/584)
Receiving objects:  19% (111/584)
Receiving objects:  20% (117/584)
Receiving objects:  21% (123/584)
Receiving objects:  22% (129/584)
Receiving objects:  23% (135/584)
Receiving objects:  24% (141/584)
Receiving objects:  25% (146/584)
Receiving objects:  26% (152/584)
Receiving objects:  27% (158/584)
Receiving objects:  28% (164/584)
Receiving objects:  29% (170/584)
Receiving objects:  30% (176/584)
Receiving objects:  31% (182/584)
Receiving objects:  32% (187/584)
Receiving objects:  33% (193/584)
Receiving objects:  34% (199/584)
Receiving objects:  35% (205/584)
Receiving objects:  36% (211/584)
Receiving objects:  37% (217/584)
Receiving objects:  38% (222/584)
Receiving objects:  39% (228/584)
Receiving objects:  40% (234/584)
Receiving objects:  41% (240/584)
Receiving objects:  42% (246/584)
Receiving objects:  43% (252/584)
Receiving objects:  44% (257/584)
Receiving objects:  45% (263/584)
Receiving objects:  46% (269/584)
Receiving objects:  47% (275/584)
Receiving objects:  48% (281/584)
Receiving objects:  49% (287/584)
Receiving objects:  50% (292/584)
Receiving objects:  51% (298/584)
Receiving objects:  52% (304/584)
Receiving objects:  53% (310/584)
Receiving objects:  54% (316/584)
Receiving objects:  55% (322/584)
Receiving objects:  56% (328/584)
Receiving objects:  57% (333/584)
Receiving objects:  58% (339/584)
Receiving objects:  59% (345/584)
Receiving objects:  60% (351/584)
Receiving objects:  61% (357/584)
Receiving objects:  62% (363/584)
Receiving objects:  63% (368/584)
Receiving objects:  64% (374/584)
Receiving objects:  65% (380/584)
Receiving objects:  66% (386/584)
Receiving objects:  67% (392/584)
Receiving objects:  68% (398/584)
Receiving objects:  69% (403/584)
Receiving objects:  70% (409/584)
Receiving objects:  71% (415/584)
Receiving objects:  72% (421/584)
Receiving objects:  73% (427/584)
Receiving objects:  74% (433/584)
Receiving objects:  75% (438/584)
Receiving objects:  76% (444/584)
Receiving objects:  77% (450/584)
Receiving objects:  78% (456/584)
Receiving objects:  79% (462/584)
Receiving objects:  80% (468/584)
Receiving objects:  81% (474/584)
Receiving objects:  82% (479/584)
Receiving objects:  83% (485/584)
Receiving objects:  84% (491/584)
Receiving objects:  85% (497/584)
Receiving objects:  86% (503/584)
Receiving objects:  87% (509/584)
Receiving objects:  88% (514/584)
Receiving objects:  89% (520/584)
Receiving objects:  90% (526/584)
Receiving objects:  91% (532/584)
Receiving objects:  92% (538/584)
Receiving objects:  93% (544/584)
Receiving objects:  94% (549/584)
Receiving objects:  95% (555/584)
Receiving objects:  96% (561/584)
Receiving objects:  97% (567/584)
remote: Total 584 (delta 0), reused 584 (delta 0)        Receiving objects:  98% (573/584)
Receiving objects:  99% (579/584)
Receiving objects: 100% (584/584)
Receiving objects: 100% (584/584), 2.38 MiB | 11.85 MiB/s, done.From https://diffinery.com/codician/diffinery * [new ref]         b9e1252d7209d811b295689240847fdebb6afdca -> origin/diffinery-checkoutNote: switching to 'b9e1252d7209d811b295689240847fdebb6afdca'.You are in 'detached HEAD' state. You can look around, make experimentalchanges and commit them, and you can discard any commits you make in thisstate without impacting any branches by switching back to a branch.If you want to create a new branch to retain commits you create, you maydo so (now or later) by using -c with the switch command. Example:  git switch -c <new-branch-name>Or undo this operation with:  git switch -Turn off this advice by setting config variable advice.detachedHead to falseHEAD is now at b9e1252 Branch protection: required check names may contain commas (#182)HEAD is now at b9e1252d7209d811b295689240847fdebb6afdca

Download action repository 'pnpm/action-setup@v4'##[group]Run pnpm/action-setup@v4with:  dest: ~/setup-pnpm  run_install: null  cache: false  cache_dependency_path: pnpm-lock.yaml  package_json_file: package.json  standalone: false##[endgroup]##[group]Running self-installer...Progress: resolved 1, reused 0, downloaded 0, added 0Packages: +1+Progress: resolved 1, reused 0, downloaded 1, added 1, donedependencies:+ pnpm 10.28.0 (12.11.2 is available)Done in 1.3s##[endgroup]Installation Completed!

##[group]Run actions/setup-node@v4with:  node-version: 22  cache: pnpm##[endgroup]Found in cache @ 22.22.0 (pre-installed node satisfies '22')Cache Size: ~215 MB (225870423 B)Cache restored from key: node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08

##[group]Run pnpm install --frozen-lockfile##[endgroup]Scope: all 7 workspace projectsLockfile is up to date, resolution step is skippedProgress: resolved 1, reused 0, downloaded 0, added 0Packages: +248++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Progress: resolved 248, reused 152, downloaded 0, added 0Progress: resolved 248, reused 242, downloaded 0, added 153Progress: resolved 248, reused 242, downloaded 0, added 248, donedevDependencies:+ turbo 2.11.7+ typescript 5.9.3Done in 17.3s using pnpm v10.28.0

##[group]Run pnpm -r --if-present build##[endgroup]Scope: 6 of 7 workspace projects##[group]@diffinery/cli@0.1.0 : build apps/cli> @diffinery/cli@0.1.0 build /workspace/diffinery/apps/cli> esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env nodeimport { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"  dist/diffinery.mjs  428.7kb⚡ Done in 87ms##[endgroup]##[group]@diffinery/app@0.1.0 : build apps/diffinery> @diffinery/app@0.1.0 build /workspace/diffinery/apps/diffinery> node islands/build.mjs && node scripts/build-docs.mjsislands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KBdocs: 61 pages (+2 generated at runtime), CLI 0.1.0 (222 KiB)##[endgroup]##[group]@diffinery/runner@0.1.0 : build containers/runner> @diffinery/runner@0.1.0 build /workspace/diffinery/containers/runner> esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"  dist/agent.mjs  657.2kb⚡ Done in 150ms##[endgroup]

##[group]Run scripts/runner-image.sh##[endgroup]reusing diffinery-runner:75052421315d69e3ccfad876: the runner hasn't changed since it was builtregistry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876

##[group]Run scripts/bootstrap.sh##[endgroup]##[group]D1 databaseD1 database exists: 2c3f0cb1-7ded-438c-88ef-4c3d39930ba6read replication: auto (turn it on with the 'D1 read replication' workflow)##[endgroup]##[group]R2 bucketR2 bucket existsR2 lifecycle rules set##[endgroup]##[group]Queuesqueue diffinery-events existsqueue diffinery-events-dlq existsqueue diffinery-mail existsqueue diffinery-mail-dlq existsqueue diffinery-mail-events exists##[endgroup]##[group]Email Sending event subscriptionevent subscription acc79fd40fbe4ed3ae2ecd2a538a1605 sends diffinery.com's bounces and complaints to diffinery-mail-events##[endgroup]##[group]Email Sending for diffinery.comzone diffinery.com (379c97b13ecaec46db00b8e87f377c37)can't read Email Sending settings with this token (10000: Authentication error), checking public DNS insteadok       MX cf-bounce.diffinery.comok       TXT cf-bounce.diffinery.com (SPF)ok       TXT _dmarc.diffinery.comdiffinery.com looks onboarded to Email Sending (public DNS)##[endgroup]##[group]TurnstileTurnstile widget "diffinery diffinery.com" exists: 0x4AAAAAAFWX2OQHwh_jT9_hTURNSTILE_SECRET goes with site key 0x4AAAAAAFWX2OQHwh_jT9_hsite key: 0x4AAAAAAFWX2OQHwh_jT9_h##[endgroup]##[group]Cloudflare AccessAccess app covers diffinery.com/auth/accessteam=assaysol-pages.cloudflareaccess.com aud=set##[endgroup]##[group]Render config and migrate D1wrote /workspace/diffinery/apps/diffinery/wrangler.deploy.jsonc ⛅️ wrangler 4.149.0────────────────────Resource location: remote ✅ No migrations to apply!##[endgroup]

##[group]Run pnpm exec wrangler deploy -c wrangler.deploy.jsonc##[endgroup] ⛅️ wrangler 4.149.0 (update available 4.151.0)───────────────────────────────────────────────Cloudflare collects anonymous telemetry about your usage of Wrangler. Learn more at https://github.com/cloudflare/workers-sdk/tree/main/packages/wrangler/telemetry.mdTotal Upload: 11863.92 KiB / gzip: 2782.28 KiBWorker Startup Time: 56 msYour Worker has access to the following bindings:Binding                                                                  Resource                  env.REPO (RepoDO)                                                        Durable Object            env.SCHEDULER (SchedulerDO)                                              Durable Object            env.RUNNER (RunnerContainer)                                             Durable Object            env.SANDBOX (SandboxContainer)                                           Durable Object            env.IMPORTER (ImportContainer)                                           Durable Object            env.PROJECT (ProjectDO)                                                  Durable Object            env.RUN_WORKFLOW (RunWorkflow)                                           Workflow                  env.IMPORT_WORKFLOW (ImportWorkflow)                                     Workflow                  env.ACCOUNT_WORKFLOW (AccountWorkflow)                                   Workflow                  env.EMAIL (unrestricted)                                                 Send Email                env.EVENTS (inherited)                                                   Queue                     env.MAIL (inherited)                                                     Queue                     env.DB (diffinery)                                                       D1 Database               env.BUCKET (diffinery-data)                                              R2 Bucket                 env.RL_AUTH (20 requests/60s)                                            Rate Limit                env.RL_ANON (300 requests/60s)                                           Rate Limit                env.RL_ACCOUNT (2000 requests/60s)                                       Rate Limit                env.RL_CREATE (60 requests/60s)                                          Rate Limit                env.RL_MODEL (600 requests/60s)                                          Rate Limit                env.PUBLIC_URL ("https://diffinery.com")                                 Environment Variable      env.MAIL_FROM ("notifications@diffinery.com")                            Environment Variable      env.BOOTSTRAP_ADMINS ("iletisim@canberkdemirci.com,canberkde...")        Environment Variable      env.ACCESS_TEAM_DOMAIN ("assaysol-pages.cloudflareaccess.com")           Environment Variable      env.ACCESS_AUD ("a40b189c8d5b52a71b3c3ec3260f18157c284...")              Environment Variable      env.RUNNER_IMAGE ("diffinery-runner:75052421315d69e3ccfa...")            Environment Variable      env.TURNSTILE_SITE_KEY ("0x4AAAAAAFWX2OQHwh_jT9_h")                      Environment Variable      The following containers are available:- diffinery-runnercontainer (registry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876)- diffinery-sandboxcontainer (registry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876)- diffinery-importcontainer (registry.cloudflare.com/***/diffinery-runner:75052421315d69e3ccfad876)Uploaded diffinery (10.60 sec)╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainer│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-sandboxcontainer│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-importcontainer│╰ No changes to be made Deployed diffinery triggers (8.17 sec)  diffinery.com/* (zone name: diffinery.com)  schedule: */5 * * * *  Producer for diffinery-events  Producer for diffinery-mail  Consumer for diffinery-events  Consumer for diffinery-mail  Consumer for diffinery-mail-events  workflow: diffinery-run  workflow: diffinery-import  workflow: diffinery-accountCurrent Version ID: 08e86dd7-0e8c-4368-8352-e6a4ad7f78c5

##[group]Run scripts/wait-container-rollout.sh##[endgroup]

##[group]Run scripts/ensure-secrets.sh##[endgroup]

##[group]Run # A new custom domain can take a few minutes to get its certificate.for i in $(seq 1 30); do  code=$(curl -s -o /dev/null -w '%{http_code}' https://$DIFFINERY_DOMAIN/healthz) && [ "$code" = 200 ] && exit 0  sleep 10doneecho "::error::https://$DIFFINERY_DOMAIN/healthz did not return 200 (last: $code). Check that the $DIFFINERY_DOMAIN DNS record is proxied (orange cloud)."; exit 1##[endgroup]

##[group]Run set -upage=$(curl -sS https://$DIFFINERY_DOMAIN/login)grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; }echo "/login serves the passkey sign-in page"loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://$DIFFINERY_DOMAIN/auth/access)echo "/auth/access -> $loc"[[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work"report=$(curl -sS -w '\n%{http_code}' https://$DIFFINERY_DOMAIN/security/report)code=${report##*$'\n'}if grep -q 'class="cf-turnstile"' <<<"$report"; then  echo "/security/report shows Turnstile to people who aren't signed in"elif grep -q 'has no Turnstile configured' <<<"$report"; then  echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: the Worker lacks TURNSTILE_SITE_KEY or TURNSTILE_SECRET (see the bootstrap and Worker secrets steps)"else  echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: it answered $code without the form"fifor kind in js css; do  asset=$(grep -o "/-/kumo/[a-z0-9]*\.$kind" <<<"$page" | head -1)  [ -n "$asset" ] || { echo "::error::/login does not load the Kumo $kind bundle"; exit 1; }  code=$(curl -sS -o /dev/null -w '%{http_code}' "https://$DIFFINERY_DOMAIN$asset")  [ "$code" = 200 ] || { echo "::error::$asset returned $code"; exit 1; }  echo "$asset -> 200"done##[endgroup]/login serves the passkey sign-in page/auth/access -> 302 https://assaysol-pages.cloudflareaccess.com/cdn-cgi/access/login/diffinery.com?kid=a40b189c8d5b52a71b3c3ec3260f18157c2840312dbfc32bee30e2609b15d02e&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjhlZTM2NTQ0OTNkMjJhYTM1NzJlMjVjMGUwZTM0ZDIxNDk4YjZjNmIxMzRhMWE2ZjcxNzk4MDFkMjVmMTcwMDQifQ.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.OVw3UOsI9jH0RpZgIpZbHd-Mbx1TkaDmMpj77sHtRlSLdbcr0za3Oovy124WdySnB7uqC-Szn6KeofZa4SaAkWmXK7p2vhUq26iub7MxmFGsVUvxlnUl-jisJonF35IS0cu6s0h-37TcnpXjgb5Ad5lddLjH1RmYDQH-naWWb5RUaAgpn7ydK4-hrAEIL8dIop4ot24LMBi03vujkHJMCG4euEkeroEH-ZLgku9XcFBQix7sjfHDbbi4Dz8vVZoM82NVScsMclCYtE4kPX17b5qr4x-gs_8t6gtMINgtGKsNBBYjRZ9b2tGIV1XP9mOa5YYzXlkXla0QcGlt9j90BA&redirect_url=%2Fauth%2Faccess/security/report shows Turnstile to people who aren't signed in/-/kumo/1emzyjz.js -> 200/-/kumo/1tekldh.css -> 200

##[group]Run set -ufor p in /favicon.ico /favicon.svg /favicon-48.png /apple-touch-icon.png /og-image.png /site.webmanifest /robots.txt /sitemap.xml; do  code=$(curl -sS -o /dev/null -w '%{http_code} %{content_type}' "https://$DIFFINERY_DOMAIN$p")  [[ "$code" == 200\ * ]] || { echo "::error::$p returned $code"; exit 1; }  echo "$p -> $code"donehome=$(curl -sS https://$DIFFINERY_DOMAIN/)for tag in 'rel="icon" href="/favicon.ico"' 'property="og:image"' 'rel="canonical"' 'application/ld+json'; do  grep -qF "$tag" <<<"$home" || { echo "::error::the home page is missing $tag"; exit 1; }doneecho "the home page carries the favicon, canonical, Open Graph and structured data tags"bm=$(curl -sS -D - -o /dev/null https://$DIFFINERY_DOMAIN/sitemap.xml | tr -d '\r' | sed -n 's/^x-d1-bookmark: //Ip')[ -n "$bm" ] || { echo "::error::D1 queries don't run in a session (no x-d1-bookmark header)"; exit 1; }echo "D1 sessions are on (bookmark $bm)"##[endgroup]/favicon.ico -> 200 image/x-icon/favicon.svg -> 200 image/svg+xml/favicon-48.png -> 200 image/png/apple-touch-icon.png -> 200 image/png/og-image.png -> 200 image/png/site.webmanifest -> 200 application/manifest+json/robots.txt -> 200 text/plain; charset=UTF-8/sitemap.xml -> 200 application/xml; charset=utf-8the home page carries the favicon, canonical, Open Graph and structured data tagsD1 sessions are on (bookmark 00000142-000004d5-00005104-2bce8fa39207d9953dad0da3172a666e)

Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08, not saving cache.

Pruning is unnecessary.

Removing persisted credentials