antoinetoussaint-byte · Oct 31, 2026 · Oct 31, 2026 · Oct 31, 2026 · Oct 31, 2026 · Oct 31, 2026
diff --git a/module/AGENTS.md b/module/AGENTS.md
@@ -95,7 +95,7 @@ together. Accounts and auth-gateway use released SDK v0.4.1, which owns tracing
 startup and shutdown. Never ship a host release on an untagged Core candidate:
 these services move to a tagged Core that contains that commit before one. Run qualification with
 `GOWORK=off` so a workspace cannot mask the pins.
-Accounts requires Go 1.27.3. All go-grpc services pin released agent 0.1.58,
+Accounts requires Go 1.27.3. All go-grpc services pin released agent 0.1.72,
 whose builder uses Go 1.27.3 under `GOTOOLCHAIN=local`; CI uses the same patch.
 Go 1.27.0 is affected by [GO-2026-6613](https://pkg.go.dev/vuln/GO-2026-6613),
 and Go 1.27.2 by [GO-2026-6809](https://pkg.go.dev/vuln/GO-2026-6809).

diff --git a/module/contracts/runnables/accounts/connect/InvokeSourceOperation/runnable-package.json b/module/contracts/runnables/accounts/connect/InvokeSourceOperation/runnable-package.json
diff --git a/...e/contracts/runnables/accounts/connect/PruneSourceOperationReceipts/runnable-package.json b/...e/contracts/runnables/accounts/connect/PruneSourceOperationReceipts/runnable-package.json
diff --git a/module/contracts/runnables/accounts/connect/ReconcileSource/runnable-package.json b/module/contracts/runnables/accounts/connect/ReconcileSource/runnable-package.json
diff --git a/module/contracts/runnables/index.json b/module/contracts/runnables/index.json
diff --git a/module/services/accounts/code/go.mod b/module/services/accounts/code/go.mod
@@ -7,9 +7,9 @@ require (
 	buf.build/go/protovalidate v1.4.0
 	connectrpc.com/connect v1.21.1
 	connectrpc.com/otelconnect v0.9.0
-	github.com/codefly-dev/authority/libraries/authority-client/go v0.1.1-0.20261030153609-d0210535bc94
-	github.com/codefly-dev/authority/libraries/authority-core/go v0.0.0-20261030153609-d0210535bc94
-	github.com/codefly-dev/authority/libraries/conformance/go v0.0.0-20261030153609-d0210535bc94
+	github.com/codefly-dev/authority/libraries/authority-client/go v0.1.1-0.20261030222015-dea37afac9ad
+	github.com/codefly-dev/authority/libraries/authority-core/go v0.0.0-20261030222015-dea37afac9ad
+	github.com/codefly-dev/authority/libraries/conformance/go v0.0.0-20261030222015-dea37afac9ad
 	github.com/codefly-dev/authority/libraries/delivery/go v0.0.0-20261028224835-f82a98e093ef
 	github.com/codefly-dev/authority/libraries/resources/go v0.0.0-20261028224835-f82a98e093ef
 	github.com/codefly-dev/cli/contracts/deployment v0.0.0-20261006151622-5824cf5342fc

diff --git a/module/services/accounts/code/go.sum b/module/services/accounts/code/go.sum
@@ -56,12 +56,12 @@ github.com/clipperhouse/uax29/v2 v2.7.0 h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJ
 github.com/clipperhouse/uax29/v2 v2.7.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8=
 github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
-github.com/codefly-dev/authority/libraries/authority-client/go v0.1.1-0.20261030153609-d0210535bc94 h1:DlfBy77hpY5SFrLWMmSGC9MSU1cAGFeFrw3ZxxSWQwA=
-github.com/codefly-dev/authority/libraries/authority-client/go v0.1.1-0.20261030153609-d0210535bc94/go.mod h1:4hRjiWuJOKzrEk8AS87pbWCbpiEmhEvQBGQaJo5Hmkg=
-github.com/codefly-dev/authority/libraries/authority-core/go v0.0.0-20261030153609-d0210535bc94 h1:IrHzbYmeXG7KLoAspBorG0amd8xgGdRNFQcpP/cfV1o=
-github.com/codefly-dev/authority/libraries/authority-core/go v0.0.0-20261030153609-d0210535bc94/go.mod h1:Cdk+10ebRh0tZA9ze2dDIrfQC34E+Y7LMi6UjSQ2dQU=
-github.com/codefly-dev/authority/libraries/conformance/go v0.0.0-20261030153609-d0210535bc94 h1:vmCiKG/XQZzmte9c+EeE9Fmk2DeBpgy3caKtqxcBbqw=
-github.com/codefly-dev/authority/libraries/conformance/go v0.0.0-20261030153609-d0210535bc94/go.mod h1:or3dd9bqacXWMjke/n81l/QxRaLwq2lq/hL4V2qtAZo=
+github.com/codefly-dev/authority/libraries/authority-client/go v0.1.1-0.20261030222015-dea37afac9ad h1:fFpOC3bErcM55ouVmz4B+ehyhP6jDQtYBWI2sVsLiG0=
+github.com/codefly-dev/authority/libraries/authority-client/go v0.1.1-0.20261030222015-dea37afac9ad/go.mod h1:4hRjiWuJOKzrEk8AS87pbWCbpiEmhEvQBGQaJo5Hmkg=
+github.com/codefly-dev/authority/libraries/authority-core/go v0.0.0-20261030222015-dea37afac9ad h1:evJ/d2Zi4nBXVc2NvMmWPphR7DN1cABwsfcy5LHjNjw=
+github.com/codefly-dev/authority/libraries/authority-core/go v0.0.0-20261030222015-dea37afac9ad/go.mod h1:Cdk+10ebRh0tZA9ze2dDIrfQC34E+Y7LMi6UjSQ2dQU=
+github.com/codefly-dev/authority/libraries/conformance/go v0.0.0-20261030222015-dea37afac9ad h1:DZt68NLXwaGYWXo1RUM0+JrvuXt/za/EyeHMGYFSix8=
+github.com/codefly-dev/authority/libraries/conformance/go v0.0.0-20261030222015-dea37afac9ad/go.mod h1:or3dd9bqacXWMjke/n81l/QxRaLwq2lq/hL4V2qtAZo=
 github.com/codefly-dev/authority/libraries/delivery/go v0.0.0-20261028224835-f82a98e093ef h1:Mso6TDL7zLY5HwR+gq0pRSNN/zO8fv89F9kzcPf+qI4=
 github.com/codefly-dev/authority/libraries/delivery/go v0.0.0-20261028224835-f82a98e093ef/go.mod h1:XsOFnO2MQdr37vM3ULa0Uwi8ZWptyVx7hRSUyIdaZ1Q=
 github.com/codefly-dev/authority/libraries/hop/go v0.0.0-20261027154629-b57068f61a0f h1:llYwKOBeCB6kS4faxICrR5YYlwnhiV+0qXjuT3IwBd4=

diff --git a/module/services/accounts/code/main.go b/module/services/accounts/code/main.go
@@ -1,23 +1,15 @@
 package main
 
-/* -----------------------------------------------------------------
-
-⚠️ This code is generated by the agent. Do not edit this file!
-
-Recommendation: write your logic in the `work.go` file in the same directory.
-
-
-// Register the work function
-
-func init() {
-	WithWork(doWork)
-}
-
-func doWork(ctx context.Context) (Clean, error) {
-	// Your logic goes here
-}
-
------------------------------------------------------------------ */
+// STOPGAP (codefly-dev/service-go-grpc#223): this entrypoint should be the
+// go-grpc agent's generated output, and it is hand-maintained only until the
+// agent can generate it for this service's shape. The agent's main-only
+// refresh would drop the module authority listener declared in
+// service.codefly.yaml (it resolves one listener per API), and it would start
+// the server before work's wiring completes. So this file carries no
+// generated-code marker, and the agent's Sync leaves it alone, as it leaves
+// this service's adapters and plugins/registry.go. Restore the marker and
+// adopt the generated main when #223 lands. Service logic goes in work.go,
+// registered with WithWork.
 
 import (
 	"accounts/pkg/adapters"

diff --git a/module/services/accounts/code/pkg/permissionsplugin/plugin.go b/module/services/accounts/code/pkg/permissionsplugin/plugin.go
@@ -15,16 +15,11 @@
 //
 // **Operator integration steps** (one-time, post this PR):
 //
-//  1. Edit `plugins/plugins.yaml`:
-//     plugins:
-//     - name: permissions
-//     import: "accounts/pkg/permissionsplugin"
+//  1. List New() in plugins.All (plugins/registry.go). That registry is
+//     hand-written until codefly-dev/service-go-grpc#223 lets the agent
+//     render it from plugins.yaml.
 //
-//  2. Trigger codefly Sync to regenerate registry_gen.go (or
-//     update by hand to match the regen output — see
-//     plugins/registry.go in this PR).
-//
-//  3. Configure the signing secret via the Plugin's With*
+//  2. Configure the signing secret via the Plugin's With*
 //     helpers in main.go.
 package permissionsplugin
 
@@ -49,7 +44,7 @@ type Plugin struct {
 
 // defaultPlugin is the singleton instance returned by New.
 //
-// **Why a singleton.** registry_gen.go calls New() to populate
+// **Why a singleton.** plugins/registry.go calls New() to populate
 // plugins.All(), but main.go also needs a handle to the plugin
 // to wire signing keys via WithHMACSecret / WithEd25519Key
 // before NewServer builds the generated transport registrations. A fresh

diff --git a/module/services/accounts/code/plugins/plugins.yaml b/module/services/accounts/code/plugins/plugins.yaml
diff --git a/...ces/accounts/code/plugins/registry_gen.go → ...ervices/accounts/code/plugins/registry.go b/...ces/accounts/code/plugins/registry_gen.go → ...ervices/accounts/code/plugins/registry.go
@@ -1,10 +1,11 @@
-// Code generated by codefly agent. DO NOT EDIT.
+// Package plugins is accounts' plugin registry.
 //
-// This file is regenerated from plugins.yaml by the codefly agent
-// during Sync. The current contents reflect the YAML state and
-// match what the regenerator produces — hand-edits made here are
-// expected to survive regeneration as long as plugins.yaml stays
-// in sync.
+// STOPGAP (codefly-dev/service-go-grpc#223): this file should be the agent's
+// plugins/registry_gen.go, rendered from plugins/plugins.yaml. The agent renders
+// a registry only alongside its scaffold, and the scaffold needs a single
+// AccountsService that this multi-service layout does not have. The agent
+// refuses a plugins.yaml it cannot render, so the registry is hand-written
+// until #223 lands. Add a plugin by adding it to All.
 package plugins
 
 import (
@@ -15,7 +16,7 @@ import (
 // All returns the list of registered plugins.
 //
 // **Wiring note for operators.** The permissions plugin is
-// constructed without signing keys here so registry_gen.go has
+// constructed without signing keys here so this registry has
 // no dependency on operator config. main.go (or work.go) is
 // responsible for configuring the shared instance via
 // Plugin.WithHMACSecret / Plugin.WithEd25519Key before NewServer.

diff --git a/module/services/accounts/service.codefly.yaml b/module/services/accounts/service.codefly.yaml
@@ -12,7 +12,10 @@ agent:
     # service resolve its own address (service-go-grpc#165).
     # 0.1.58 builds with Go 1.27.3, including the GO-2026-6613 and GO-2026-6809
     # fixes.
-    version: 0.1.58
+    # 0.1.72 hands a native process each environment variable once
+    # (service-go-grpc#220); through 0.1.71 the inherited environment was
+    # appended twice, so accounts refused to start with a ~1 MB environment.
+    version: 0.1.72
     publisher: codefly.dev
 service-dependencies:
     - name: cache

diff --git a/module/services/auth-gateway/service.codefly.yaml b/module/services/auth-gateway/service.codefly.yaml
@@ -15,7 +15,7 @@ description: |
 agent:
     kind: codefly:service
     name: go-grpc
-    version: 0.1.58
+    version: 0.1.72
     publisher: codefly.dev
 service-dependencies:
     - name: accounts

diff --git a/module/services/frontend/code/package-lock.json b/module/services/frontend/code/package-lock.json
diff --git a/module/services/frontend/code/package.json b/module/services/frontend/code/package.json
@@ -99,7 +99,7 @@
 	},
 	"overrides": {
 		"brace-expansion@>=4.0.0 <5.0.12": "5.0.12",
-		"fast-uri@>=3.0.0 <3.1.8": "3.1.8",
+		"fast-uri@>=3.0.0 <3.1.9": "3.1.9",
 		"js-yaml": "$js-yaml",
 		"nanoid@>=3.0.0 <3.3.18": "3.3.18",
 		"postcss": "8.5.26",