Jinwoo-H c8ecd7830a fix(push): close the final security review findings in the gateway and infra (#8129) ...

- app.onError logs only the error name and answers a bare 500; hono's default
  handler printed the whole error, and a pg error carries the row in detail
- a second per-IP bucket (240/min) runs ahead of the bearer lookup on every
  authenticated route, so forged bearers cannot spend the two-connection pool
- one live session per host: minting deletes the host's earlier row
- device-less hosts are pruned after 1 h, not 30 d; any keypair mints one free
- notificationId is printable ASCII, since it becomes the APNs collapse header
- the impersonated FCM probe token is masked in the workflow log
- prevent_destroy on the Apple secrets and the orca_push database

2026-09-06 15:19:21 -04:00

..

capture-terraform-plan-baseline.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

capture-terraform-plan-baseline.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

classify-relay-production-capacity-director.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

classify-relay-production-capacity-director.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

classify-relay-staging-bootstrap.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

classify-relay-staging-bootstrap.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

cloud-sql-rollout-lock-census.mjs

chore(cloud): Terraform and deploy workflow for the push gateway (#8129)

2026-09-06 15:19:19 -04:00

deploy-relay-blue-green.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

deploy-relay-blue-green.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

deploy-relay-gce-candidate.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

deploy-relay-gce-candidate.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

deploy-relay-gce-multi-target.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

deploy-relay-gce-multi-target.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

github-smoke-token.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

github-smoke-token.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

infra.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

infra.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

load-relay-controls.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

operate-relay-asia-admission.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

operate-relay-asia-admission.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

operate-relay-regional-rehome.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

operate-relay-regional-rehome.test.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

power-staging-relay.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

power-staging-relay.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

prepare-relay-asia-director-cells.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

prepare-relay-asia-director-cells.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

prepare-relay-asia-topology-input.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

prepare-relay-asia-topology-input.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

prepare-relay-capacity-canary.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

prepare-relay-capacity-canary.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

prepare-relay-production-capacity-canary.mjs

fix(cloud): let the same-cap roll isolate Asia cells (#18811)

2026-09-05 01:51:06 -07:00

prepare-relay-production-capacity-canary.test.mjs

fix(cloud): let the same-cap roll isolate Asia cells (#18811)

2026-09-05 01:51:06 -07:00

probe-relay-legacy-admission.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

probe-relay-legacy-admission.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

probe-relay-rehome-trust.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

probe-relay-rehome-trust.test.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

production-cell-image-digest-consistency.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

production-cloud-sql-rollout-lock.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

push-gateway-workflow.test.mjs

fix(push): close the final security review findings in the gateway and infra (#8129)

2026-09-06 15:19:21 -04:00

read-relay-production-capacity-identity.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

read-relay-production-capacity-identity.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

read-relay-serving-regional-placement-version.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

read-relay-serving-regional-placement-version.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-admin-endpoint-retry-workflow.test.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

relay-admin-transient-retry.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

relay-admin-transient-retry.test.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

relay-admission-selector.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-admission-selector.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-asia-admission-workflow.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-asia-cloud-sql-metrics.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-asia-rollout-evidence.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-asia-rollout-evidence.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-asia-topology-workflow.test.mjs

fix(cloud): stop passing manage_artifact_dns to the relay root (#18442)

2026-09-03 07:18:29 -04:00

relay-cloud-sql-connection-budget.mjs

fix(cloud): harden the push deploy workflow and size the gateway to the budget (#8129)

2026-09-06 15:19:21 -04:00

relay-cloud-sql-connection-budget.test.mjs

fix(cloud): harden the push deploy workflow and size the gateway to the budget (#8129)

2026-09-06 15:19:21 -04:00

relay-evidence-code-provenance.mjs

fix(relay-ops): accept monitor evidence from an ancestor commit with identical monitor code (#18754)

2026-09-04 20:54:40 -04:00

relay-gce-terraform-fence.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-gce-terraform-fence.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-connection-failure.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-connection-failure.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-control-peer.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-control-peer.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-director-capacity-gate.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-director-capacity-gate.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-model.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-model.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-phase-barrier.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-phase-barrier.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-placement-boundary.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-placement-boundary.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-profile.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-profile.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-reader-evidence.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-reader-evidence.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-rebind-boundary.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-rebind-boundary.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-region-behavior.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-region-behavior.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-request-unit-boundary.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-request-unit-boundary.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-run-lifecycle.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-load-run-lifecycle.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-monitor-evidence.mjs

fix(relay-ops): accept monitor evidence from an ancestor commit with identical monitor code (#18754)

2026-09-04 20:54:40 -04:00

relay-monitor-evidence.test.mjs

fix(relay-ops): accept monitor evidence from an ancestor commit with identical monitor code (#18754)

2026-09-04 20:54:40 -04:00

relay-production-capacity-wave.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-production-capacity-wave.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-production-capacity-workflow.test.mjs

fix(cloud): stop passing manage_artifact_dns to the relay root (#18442)

2026-09-03 07:18:29 -04:00

relay-production-identity-boundaries.test.mjs

chore(cloud): Terraform and deploy workflow for the push gateway (#8129)

2026-09-06 15:19:19 -04:00

relay-production-same-cap-wave.mjs

fix(relay-ops): accept monitor evidence from an ancestor commit with identical monitor code (#18754)

2026-09-04 20:54:40 -04:00

relay-production-same-cap-wave.test.mjs

fix(relay-ops): accept monitor evidence from an ancestor commit with identical monitor code (#18754)

2026-09-04 20:54:40 -04:00

relay-public-workflow-contract.test.mjs

chore(cloud): Terraform and deploy workflow for the push gateway (#8129)

2026-09-06 15:19:19 -04:00

relay-recovery-wave-gate.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-recovery-wave-gate.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-region-observation-evidence.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-region-observation-evidence.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-regional-rehome-workflow.test.mjs

fix(cloud): validate protocol-0 same-cap cell plans without rehome trust lines (#18818)

2026-09-05 05:42:37 -04:00

relay-rehome-aggregate-evidence.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-rehome-aggregate-evidence.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-repository.mjs

fix(relay-ops): accept monitor evidence from an ancestor commit with identical monitor code (#18754)

2026-09-04 20:54:40 -04:00

relay-repository.test.mjs

chore(cloud): close the Workload Identity cutover onto stablyai/orca (#18509)

2026-09-03 15:57:00 -04:00

relay-same-cap-script-census.test.mjs

fix(cloud): validate protocol-0 same-cap cell plans without rehome trust lines (#18818)

2026-09-05 05:42:37 -04:00

relay-staging-c4-refresh-workflow.test.mjs

chore(cloud): pin staging relay c3 to the director's image (#18508)

2026-09-03 15:36:41 -04:00

relay-staging-capacity-identity.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

relay-staging-deploy-identity.test.mjs

chore(cloud): close the Workload Identity cutover onto stablyai/orca (#18509)

2026-09-03 15:57:00 -04:00

render-workload-identity-conditions.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

run-relay-load-model.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

run-relay-recovery-wave-gate.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

sanitize-relay-asia-admission-result.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

sanitize-relay-asia-admission-result.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

smoke-relay.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

staging-relay-apply-guard.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

staging-relay-apply-guard.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

terraform-root-partition.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

terraform-root-partition.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

validate-relay-asia-topology-plan.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

validate-relay-asia-topology-plan.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

validate-relay-capacity-plan.mjs

fix(cloud): validate protocol-0 same-cap cell plans without rehome trust lines (#18818)

2026-09-05 05:42:37 -04:00

validate-relay-capacity-plan.test.mjs

fix(cloud): validate protocol-0 same-cap cell plans without rehome trust lines (#18818)

2026-09-05 05:42:37 -04:00

verify-relay-capacity-transition.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

verify-relay-capacity-transition.test.mjs

fix(relay-ops): retry transient admin-endpoint failures in same-cap verify and rehome jobs (#18769)

2026-09-04 22:04:21 -04:00

verify-relay-legacy-bootstrap.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

verify-relay-legacy-bootstrap.test.mjs

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

workload-identity-attribute-conditions.test.mjs

chore(cloud): Terraform and deploy workflow for the push gateway (#8129)

2026-09-06 15:19:19 -04:00