yamine 0.6.0 → 0.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1fef68ea493be93af6dfb3271b446b793536a373d11b030f62e54c0d90438e88
-  data.tar.gz: 69c64d3bd1523b05ca6277f76329e20415879f16c95cd0640e30c9adf77f69cf
+  metadata.gz: 8066e974d3f0f4849a0b6173c3a8d6acf5f576149afffc9bec3981623ce7faee
+  data.tar.gz: ded221f8f3f2c6430383c4666d69bc2d397ee924e9f1409d04b0096c750674d7
 SHA512:
-  metadata.gz: 2864def84f4afefe2dd79adda834a2381964e964da864f99c8740321c19559669ad48874cce4485222c0a09d5a285b343d99d2fdea5f1029ee54f8dc8cd86a76
-  data.tar.gz: fe58b77da7a315e3f6aa3fd59f7c153fe8a0d342ffdbbdf923e4199e8ccba02b039c2cde777a7c9d1855d127563ef3f021171b308c1696f5f7446b9ac068430e
+  metadata.gz: 28e06d646cb8f5d7e5a9a16a40f1e4a091ed544f39a5dcd6753d7bd740d11cfa331c213c23c417543670d3c2ab09485edd50717abd5eef3533034d0f1e58d883
+  data.tar.gz: 6b1180bffb37227e10bff3d0072faae0d790d684b2e74f462e64b3db3ded819c3a96736b27e8b30098c0ad2abcf50ed95f292babc02409e242d7887eac8d6e03

data/CHANGELOG.md

@@ -1,6 +1,23 @@
 # Changelog
 
-## [0.6.0] — Unreleased
+## [0.6.1] — 2026-09-10
+
+### Fixed
+
+- **Healthchecks no longer speak TLS to the backend.** `--wait` probed
+  `127.0.0.1:$PORT` — the app's own listener — with the *proxy's* `tls`
+  flag, so any app declaring `healthcheck: { path: }` could never boot
+  under the default TLS-on proxy: the probe began an SSL handshake
+  against a plaintext Puma, which logged `Invalid HTTP format, parsing
+  fails. Are you trying to open an SSL connection to a non-SSL Puma?`
+  once per attempt until the process phase timed out and the whole boot
+  was torn down. TLS is the proxy's job; the proxy dials backends with a
+  bare `TCPSocket`, so `Readiness.probe`/`probe_http`/`wait_healthy`/
+  `wait_all` drop the `tls:` keyword entirely (an `https://` banner URL
+  never implied the backend speaks TLS). Reported from anyworkers, whose
+  web process healthchecks `/up`.
+
+## [0.6.0] — 2026-09-09
 
 `yamine start --wait` + boot readiness protocol. The remaining gap from
 “one-storey building” onwards: boot had no definitive answer — agents

data/README.md

@@ -95,7 +95,9 @@ Optional top-level `db: false` opts out of per-worktree databases
 (exotic setups — manual `establish_connection`, shared staging DB, …);
 `db.schema_load` overrides the schema-load command. Per-process
 `healthcheck: { path: /up, timeout: 30 }` declares what `--wait` polls
-(TCP accept when absent).
+(TCP accept when absent). The poll is plain HTTP against the app's own
+`127.0.0.1:$PORT` listener — TLS is terminated by the proxy, so the path
+is reached over http regardless of the `https://` URL in the banner.)
 
 `yamine init` creates the file (migrating an existing Procfile);
 Rails apps need no extra gem — yamine injects `RAILS_DEVELOPMENT_HOSTS`

data/lib/yamine/cli/boot.rb

@@ -183,7 +183,7 @@ module Yamine
               database_url: db_url, force: opts[:force])
           }
         end
-        wait_result = Readiness.wait_all(apps, tls: ctx.proxy_tls, out: nil)
+        wait_result = Readiness.wait_all(apps, out: nil)
         failed = wait_result.select { |r| r[:status] != "ok" }
 
         if failed.empty?

data/lib/yamine/readiness.rb

@@ -3,7 +3,6 @@
 require "json"
 require "net/http"
 require "open3"
-require "openssl"
 require "socket"
 require "timeout"
 require "uri"
@@ -89,11 +88,17 @@ module Yamine
     # Poll an HTTP route until healthy or timeout. Healthy = healthcheck
     # path returns 2xx-3xx, or (no healthcheck) TCP accept on the port.
     # Returns [healthy, detail].
-    def wait_healthy(hostname, port:, tls:, path: nil, timeout: 30)
+    #
+    # Probes are plaintext by construction: the target is the app's OWN
+    # listener (127.0.0.1:$PORT). TLS is terminated by the proxy, which
+    # dials backends with a bare TCPSocket (Proxy#connect_backend), so a
+    # `tls:` flag taken from the proxy must never reach here — an
+    # https:// URL in the banner does not mean the backend speaks TLS.
+    def wait_healthy(hostname, port:, path: nil, timeout: 30)
       deadline = Process.clock_gettime(Process::CLOCK_MONOTONIC) + timeout
       last_error = "not yet attempted"
       until Process.clock_gettime(Process::CLOCK_MONOTONIC) > deadline
-        ok, detail = probe(hostname, port, tls: tls, path: path)
+        ok, detail = probe(hostname, port, path: path)
         return [true, nil] if ok
 
         last_error = detail
@@ -102,9 +107,9 @@ module Yamine
       [false, last_error]
     end
 
-    def probe(hostname, port, tls:, path: nil)
+    def probe(hostname, port, path: nil)
       if path
-        probe_http(hostname, port, tls: tls, path: path)
+        probe_http(hostname, port, path: path)
       else
         probe_tcp(port)
       end
@@ -117,10 +122,8 @@ module Yamine
       [false, e.message.lines.first&.strip]
     end
 
-    def probe_http(hostname, port, tls:, path:)
+    def probe_http(hostname, port, path:)
       http = Net::HTTP.new("127.0.0.1", port)
-      http.use_ssl = tls
-      http.verify_mode = OpenSSL::SSL::VERIFY_NONE if tls
       http.open_timeout = 3
       http.read_timeout = 5
       res = http.get(path, { "Host" => hostname })
@@ -140,17 +143,17 @@ module Yamine
     # or "timeout" (never answered within its healthcheck timeout).
     # Dead-pid short-circuit: a reaped backend fails immediately
     # instead of burning its full timeout on connection-refused.
-    def wait_all(apps, tls: true, out: nil)
+    def wait_all(apps, out: nil)
       threads = apps.map do |name, slot|
         Thread.new do
-          Thread.current[:result] = wait_one(name, slot, tls: tls, out: out)
+          Thread.current[:result] = wait_one(name, slot, out: out)
         end
       end
       threads.each(&:join)
       threads.map { |t| t[:result] }
     end
 
-    def wait_one(name, slot, tls:, out:)
+    def wait_one(name, slot, out:)
       item = slot[:item]
       app = slot[:app]
       hc = item[:entry]["healthcheck"] || {}
@@ -165,7 +168,7 @@ module Yamine
           return fail_result(name, started, ms,
             "process exited before becoming healthy — see log/yamine-#{name}.log", out)
         end
-        ok, detail = probe(item[:hostname], item[:port], tls: tls, path: path)
+        ok, detail = probe(item[:hostname], item[:port], path: path)
         if ok
           ms = elapsed_ms(started)
           return ok_result(name, started, ms, path, out)

data/lib/yamine/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Yamine
-  VERSION = "0.6.0"
+  VERSION = "0.6.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: yamine
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.6.1
 platform: ruby
 authors:
 - Kaka Ruto