bard-api 0.6.3 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e51131122902484d133bcaaf0ca3f01abea607acf01b6b89a7459ad99a5afe45
-  data.tar.gz: 713e9aac75181d545f6807259a8031c96064b58fc6c02d32e1bdea5f870cc154
+  metadata.gz: 8d3a962a491b792f640982845bad5d5b46aa8706c42c90fa535e4fb9bc2368d3
+  data.tar.gz: 67d6ef64e755766f4303f404736735bcccbd1fdcdb9260ca9f7204e55dba74c0
 SHA512:
-  metadata.gz: 8294f16c4750b0e560ecb26477a24527dbb29a229cec6e200fd6494d2d31b88bccbd3f0041516aeb1db87d36c1361e7bae678a0d66035aead9d92e86983f2716
-  data.tar.gz: 445de7f208e078a97efe9ec981556d585540003828c60d07de236ea736edae2433e6f9bc0afee3949a1c56267c407761822186328f427fb157cb05ee4780c75d
+  metadata.gz: 03e502b74a416d3d2fc309b5925e3ce708d97e272990ba72f0ae59ff26ce285cfaf7ed1b3b627f9fa19d2beda59ed75d90c6777ab3dc7b02ef8625bb0785a85c
+  data.tar.gz: e761c08bf627e729bbaa25658c82e54fab2367fb4f9a330d8859dedc62ec929a7a07f26ad53b637e53bac5087a420637a5950d662107d66f35a276e2471ad120

data/lib/bard/api/app.rb

@@ -26,22 +26,32 @@ module Bard
           @deploy_runner ||= method(:spawn_detached_deploy)
         end
 
-        # with_unbundled_env is essential: this worker runs under the app's bundle
+        # The deploy must start from a clean env: this worker runs under the app's bundle
         # (RUBYOPT=-rbundler/setup, BUNDLE_GEMFILE). Inherited into the deploy, that makes every
-        # ruby command — bundle install included — crash at startup the moment git pull lands a
-        # lockfile with not-yet-installed gems. The deploy must start from a clean env.
+        # ruby command — bin/setup and bundle install included — crash at startup the moment
+        # git pull lands a lockfile with not-yet-installed gems.
         def spawn_detached_deploy(command)
           Bundler.with_unbundled_env do
-            # A Passenger web worker is spawned without a login session, so it has no XDG_RUNTIME_DIR;
-            # systemd-run --user needs it to find the (linger-backed) user bus at $XDG_RUNTIME_DIR/bus.
             pid = Process.spawn(
-              { "XDG_RUNTIME_DIR" => "/run/user/#{Process.uid}" },
+              deploy_env,
               "systemd-run", "--user", "--scope", "--collect", "--quiet", "bash", "-lc", command,
               :in => "/dev/null", %i[out err] => ["log/bard-deploy.log", "a"],
             )
             Process.detach(pid)
           end
         end
+
+        # with_unbundled_env alone isn't enough: it restores Bundler::ORIGINAL_ENV, and under
+        # Passenger RUBYOPT=-rbundler/setup is injected before the app boots, so it's part of
+        # ORIGINAL_ENV and survives the scrub (took brianporter.com down on 2026-07-15). Strip
+        # the bundler vars explicitly — nil values remove them from the spawned env.
+        # XDG_RUNTIME_DIR: a Passenger web worker is spawned without a login session, so it's
+        # unset; systemd-run --user needs it to find the (linger-backed) user bus.
+        def deploy_env
+          bundler_vars = ENV.keys.grep(/\A(BUNDLE_|BUNDLER_)/) + %w[RUBYOPT RUBYLIB]
+          bundler_vars.to_h { |key| [key, nil] }
+            .merge("XDG_RUNTIME_DIR" => "/run/user/#{Process.uid}")
+        end
       end
 
       DEPLOY_LOCK = "tmp/bard-deploy.lock"
@@ -56,11 +66,15 @@ module Bard
       # HEAD before the bundle/migrate/restart run, so HEAD alone would read as "done" too early.
       # On any failure, stamp the attempted sha so we don't re-spawn (and restart Puma) on every
       # poll; the marker is written inside the flock, so it's on disk before the lock releases.
+      # Then roll the tree back to the pre-pull sha: code sitting ahead of its installed gems is
+      # a time bomb — the next app-process respawn (e.g. an nginx reload) can't boot and the
+      # site 500s until someone intervenes. Better to keep running the old code.
       DEPLOY_COMMAND =
         "flock -n #{DEPLOY_LOCK} -c '" \
           "rm -f #{FAILED_SHA}; " \
+          "before=$(git rev-parse HEAD); " \
           "git pull --ff-only origin master && bin/setup && git rev-parse HEAD > #{DEPLOYED_SHA} " \
-          "|| git rev-parse origin/master > #{FAILED_SHA}'"
+          "|| { git rev-parse origin/master > #{FAILED_SHA}; git reset --hard \"$before\"; }'"
 
       def call(env)
         request = Rack::Request.new(env)
@@ -206,7 +220,7 @@ module Bard
             enabled: backup.enabled?,
             bard_managed: backup.bard?,
             self_managed: backup.self_managed?,
-            encryption_enabled: !!backup.encrypt,
+            encryption_enabled: Bard::Backup::Destination.resolve(backup.destinations).any?(&:encryption_key),
             destinations: backup.destinations.map { |d| { name: d[:name], type: d[:type] } },
           },
           servers: production ? { production: { pings: production.ping } } : {},

data/lib/bard/api/version.rb

@@ -2,6 +2,6 @@
 
 module Bard
   module Api
-    VERSION = "0.6.3"
+    VERSION = "0.7.0"
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: bard-api
 version: !ruby/object:Gem::Version
-  version: 0.6.3
+  version: 0.7.0
 platform: ruby
 authors:
 - Micah Geisel
 bindir: exe
 cert_chain: []
-date: 2026-07-10 00:00:00.000000000 Z
+date: 2026-08-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -51,34 +51,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-- !ruby/object:Gem::Dependency
-  name: bard
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '2.0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: bard-backup
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.11'
+        version: '0.15'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.11'
+        version: '0.15'
 - !ruby/object:Gem::Dependency
   name: rack-test
   requirement: !ruby/object:Gem::Requirement