6 Commits

Include renames

Author	SHA1	Message	Date
Gabriel Brown	a74017f0c8	CI: run on the VPS runner (plain shell instead of checkout/setup-bun actions) ... Rootless podman on cirunner-vps cannot copy cached actions into job containers (symlinks: "path escapes from parent"), so any job that landed there failed. Checkout is now plain git and Bun comes from its install script; both are verified on cirunner-vps.	2026-10-02 04:36:51 -04:00
Gabriel Brown	d7d18e111d	Keep the deploy key out of the printed CI script ... The deploy step put ${{ secrets.DEPLOY_SSH_KEY }} straight into the run script. The runner prints that script, and Gitea does not mask a multi-line secret once it is split across script lines, so the key body appeared in every deploy log. The key now arrives through the step's env block.	2026-10-01 15:15:16 -04:00
Gabriel Brown	7d1884be41	Deploy from CI with Infisical and ship Payload changes as migrations ... CI reads Infisical staging as the read-only convexmonorepo-ci machine identity, deploys the Convex functions, builds and pushes the image, and asks the VPS to redeploy. Payload schema changes now ship as migrations that production runs on startup; the baseline matches the production schema and is recorded as applied there. The local stack moves to its own ports and syncs the Convex runtime env, and the scripts pick up Infisical account switching, dev-kill and a cache-safe CI install.	2026-10-01 14:42:55 -04:00
Gabriel Brown	a12bf6071b	Move to infisical. Create local dev environment. Add ci gates. Modernize repo	2026-06-21 14:04:02 -05:00
gib	017ef680c9	Maybe build command will work first try?	2026-03-31 13:16:41 -05:00
gib	fcb5556bef	Testing out actions	2026-03-31 11:53:52 -05:00