fix(worker): preserve production runtime dependencies

[kapustazh]

Summary

Fixes the production worker crash loop caused by pnpm prune --prod removing @privy-io/node from the workspace-layout runtime image. Also makes the remote Subgraph MCP endpoint optional so deployments without a hosted MCP server use the existing deployment-pinned The Graph Gateway discovery path.

Scope and acceptance criteria

• The change is limited to the stated worker runtime deployment failure.
• The final worker image retains @privy-io/node and other runtime dependencies.
• Omitting ONESHOT_SUBGRAPH_MCP_ENDPOINT selects the existing pinned Gateway fallback.
• Explicit MCP endpoints retain HTTPS validation and the existing MCP JSON-RPC path.
• No unrelated cleanup is included.

Product and security invariants

• Tenant isolation remains fail-closed.
• Sponsor authorization, auditability, and daily caps remain enforced where applicable.
• Recipients cannot modify sponsor controls or access sponsor-only data.
• No secret, token, production identifier, or personal data is committed or pasted into review prompts.

Invariant notes:

The Graph and Recovery Agent remain discovery/advisory-only; settlementPermission: NEVER is unchanged. Idempotency, UNKNOWN, no-blind-retry, policy denial, parallel-worker, and reconciliation behavior is unchanged.

Validation

Commands and results:

pnpm test: PASS — 64 files / 945 tests
pnpm --filter @oneshot/web test:browser: PASS — 7 tests
pnpm lint: PASS
pnpm typecheck: PASS
pnpm format:check: PASS
pnpm check:generated: PASS
Cloud Build e4f10b6f-0765-44b3-9949-8677242b8f37: PASS — worker image
Cloud Build 6c4145f7-a32e-4ffc-ba07-48d76bb9d97d: PASS — final-container import of @privy-io/node

Independent review evidence

Gate A — exact candidate tree before push

• Base commit SHA: 6a968786dddb9c411ff403bac282bac59a87fbcb

• Candidate tree SHA: 6c06177e6012b1274838e32575feff1613e64457

• Candidate commit SHA: 3364e05b8f7fd89a96a50571e7ff545ca28d7859

• Reviewer tool: free-pi-cli

• Reviewer model: glm-5.3-flash

• Verdict: VERDICT: PASS

• Findings or residual risks: final image is larger until a safe production-only workspace deploy replaces prune; The Graph qualification must not rely on the direct Gateway fallback alone; four pending jobs remain and two allowlisted jobs total 2 USDC testnet exposure if the worker is enabled.

• The reviewed tree equals the committed tree.

Gate B — exact remote PR head

Pending required CI.

Risk and rollback

• Residual risks: the worker remains intentionally disabled pending an operator decision about the two allowlisted queued payments. No live database or chain mutation was performed.
• Rollback or recovery plan: keep the Cloud Run worker disabled, or roll back to the prior worker revision/image; no ledger migration is involved.

Human merge

• A human owner has reviewed the evidence and will perform the merge.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	oneshot	3364e05	Sep 10 2026, 03:28 AM

[kapustazh]

Gate B — PASS

• Reviewer: free-pi-cli / glm-5.3-flash
• Base: 6a968786dddb9c411ff403bac282bac59a87fbcb
• Head: 3364e05b8f7fd89a96a50571e7ff545ca28d7859
• Head tree / Gate A tree: 6c06177e6012b1274838e32575feff1613e64457
• Blocking findings: none
• Required CI: 5/5 passed
• Residual: worker remains disabled until the operator explicitly chooses whether the two pending allowlisted 1 USDC testnet jobs may execute. Direct Graph Gateway fallback is not Subgraph MCP sponsor qualification.