feat(indexer): protected-main auto-deploy and /health git SHA #1282

Merged

PlasticDigits merged 16 commits from issue/1276 into main

2026-09-21 03:49:54 +00:00

PlasticDigits commented

2026-09-20 19:49:12 +00:00

Owner

Summary

Slice 1–2 for #1276: generic GET /health stays liveness ({"status":"ok"}) and adds optional "git_sha" when baked GIT_SHA (non-empty after trim) or else SOURCE_COMMIT parses as lowercase hex 7–40 (H1276-1, H1276-2). HEAD / main / refs/ / secrets / non-hex are omitted, never echoed. Handler reads env per request; fee-discount health unchanged (H1276-4).
docker/indexer/Dockerfile re-declares runtime ARG/ENV GIT_SHA + SOURCE_COMMIT after COPY --from=builder and before the HTTP health probe (H1276-3). Empty GIT_SHA falls through to include-source-commit.
make verify-issue-1276 covers parser units, serial API tests, Dockerfile pin, leftover-complete FAIL-before-curl without VERIFY1276_EXPECT_SHA, and SKIP live Coolify unless a live flag is set.
Expand-only sqlx fix: rename colliding 20260916120000_usdt_quote_usd_null_backfill.sql → 20260916120001_… so a fresh _sqlx_migrations can apply both #1258 and #1269 files. verify-issue-1258 path updated.
Docs/invariants/skill: architecture + indexer-invariants Health git SHA (#1276) describe the shipped handler; leftover checkbox remains operator / #297 (H1276-6). AGENTS.md unchanged (it does not list 1276). M573/M590 not rewritten.

Closes #1276

Test plan

make verify-issue-1276 — 7 passed, 0 failed (lib health_git_sha, api_health, api_fee_discount_health, docs/Dockerfile pin, leftover-complete selftest)
Live GET https://indexer.dex.cl8y.com/health → {"status":"ok"} with omitted git_sha (expected until leftover bake)
Coolify leftover (operator / #297, not this implement): auto-deploy on protected main, include-source-commit, never copy HEAD into GIT_SHA, then VERIFY1276_REQUIRE_LIVE=1 VERIFY1276_EXPECT_SHA=<merge hex> make verify-issue-1276
Do not infer the checkbox from HTTP. Do not scrape Coolify.

Gaps

Slice 3 leftover is operator: live /health currently omits git_sha (no bake yet). Loki {service="coolify"} |= "git_sha" last 15m returned 0 lines. Checkbox + tip-match are not merge blockers for this code MR.
This implement did not flip Coolify, merge main, or deploy.

## Summary - Slice 1–2 for **#1276**: generic `GET /health` stays liveness (`{"status":"ok"}`) and adds optional `"git_sha"` when baked `GIT_SHA` (non-empty after trim) or else `SOURCE_COMMIT` parses as lowercase hex 7–40 (**H1276-1**, **H1276-2**). `HEAD` / `main` / `refs/` / secrets / non-hex are omitted, never echoed. Handler reads env per request; fee-discount health unchanged (**H1276-4**). - `docker/indexer/Dockerfile` re-declares runtime `ARG`/`ENV` `GIT_SHA` + `SOURCE_COMMIT` after `COPY --from=builder` and before the HTTP health probe (**H1276-3**). Empty `GIT_SHA` falls through to include-source-commit. - `make verify-issue-1276` covers parser units, serial API tests, Dockerfile pin, leftover-complete **FAIL-before-curl** without `VERIFY1276_EXPECT_SHA`, and SKIP live Coolify unless a live flag is set. - Expand-only sqlx fix: rename colliding `20260916120000_usdt_quote_usd_null_backfill.sql` → `20260916120001_…` so a fresh `_sqlx_migrations` can apply both #1258 and #1269 files. `verify-issue-1258` path updated. - Docs/invariants/skill: architecture + indexer-invariants **Health git SHA (#1276)** describe the shipped handler; leftover checkbox remains operator / #297 (**H1276-6**). AGENTS.md unchanged (it does not list 1276). M573/M590 not rewritten. Closes #1276 ## Test plan - [x] `make verify-issue-1276` — 7 passed, 0 failed (lib `health_git_sha`, `api_health`, `api_fee_discount_health`, docs/Dockerfile pin, leftover-complete selftest) - [x] Live `GET https://indexer.dex.cl8y.com/health` → `{"status":"ok"}` with **omitted** `git_sha` (expected until leftover bake) - [ ] Coolify leftover (operator / #297, not this implement): auto-deploy on protected `main`, include-source-commit, never copy `HEAD` into `GIT_SHA`, then `VERIFY1276_REQUIRE_LIVE=1 VERIFY1276_EXPECT_SHA=<merge hex> make verify-issue-1276` - [ ] Do not infer the checkbox from HTTP. Do not scrape Coolify. ## Gaps - **Slice 3 leftover** is operator: live `/health` currently omits `git_sha` (no bake yet). Loki `{service="coolify"} |= "git_sha"` last 15m returned **0** lines. Checkbox + tip-match are not merge blockers for this code MR. - This implement did not flip Coolify, merge `main`, or deploy.

Rows
Columns