@codions/portta 0.0.0-develop.150.sha-ed65081 → 0.0.0-develop.153.sha-2877bc7

package/dist/cli.js

@@ -22364,7 +22364,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@codions/portta",
-      version: "0.0.0-develop.150.sha-ed65081",
+      version: "0.0.0-develop.153.sha-2877bc7",
       description: "Machine-first CLI for a shared Docker development gateway",
       license: "MIT",
       type: "module",
@@ -22438,7 +22438,7 @@ var init_version = __esm({
     "use strict";
     init_package();
     CLI_VERSION = package_default.version;
-    CLI_BUILD_DATE = true ? "2026-09-16T05:05:26Z" : void 0;
+    CLI_BUILD_DATE = true ? "2026-09-16T05:20:48Z" : void 0;
   }
 });
 
@@ -89799,7 +89799,7 @@ function createDaemonTaskflowHost(context) {
       port: hostListen(env).port,
       workflowBuiltinsDir: taskflowAssets(env).workflowBuiltinsDir,
       version: env.PORTTA_VERSION || "0.0.0-local",
-      buildDate: true ? "2026-09-16T05:05:26Z" : (/* @__PURE__ */ new Date()).toISOString(),
+      buildDate: true ? "2026-09-16T05:20:48Z" : (/* @__PURE__ */ new Date()).toISOString(),
       environmentStore: createEnvironmentStore(paths3.database),
       hostEnvironmentProvider: new HostEnvironmentProvider(),
       devContainerProvider: new DevContainerProvider(),
@@ -115055,6 +115055,8 @@ var ProjectSummary = named(
     description: external_exports.string().nullable(),
     archived: external_exports.boolean(),
     taskProvider: TaskProvider.nullable().describe("Null means derived: GitHub when a repository has a GitHub remote"),
+    /** The Linear team, when the provider is Linear. Null otherwise. */
+    linearTeam: external_exports.string().nullable(),
     relativePath: external_exports.string().nullable(),
     location: ProjectLocation,
     repositoryCount: external_exports.number().int(),
@@ -115083,6 +115085,8 @@ var Project = named(
     description: external_exports.string().nullable(),
     archived: external_exports.boolean(),
     taskProvider: TaskProvider.nullable().describe("Null means derived: GitHub when a repository has a GitHub remote"),
+    /** The Linear team, when the provider is Linear. GitHub needs no equivalent: its coordinate is the remote. */
+    linearTeam: external_exports.string().nullable(),
     /** Where this Project's work actually is, once the provider is resolved. */
     work: external_exports.object({
       provider: TaskProvider.nullable(),
@@ -119027,12 +119031,17 @@ function prepareWebUp(options, command) {
     }
   }
   const protectedPanel = initial.env["PORTTA_AUTH_MODE"] === "required";
-  if (expose !== "local" && !protectedPanel) {
+  if (!allowsDisabledAuth(expose) && !protectedPanel) {
     throw new RefusedError(
-      `panel access '${expose}' needs the panel to sign people in`,
+      `panel access '${expose}' answers whoever finds the address, and the panel would answer them as the local operator`,
       "portta config set panel.auth required"
     );
   }
+  if (allowsDisabledAuth(expose) && !protectedPanel && expose !== "local") {
+    new Output(globals4(command)).warning(
+      `anybody who reaches the panel over the ${expose === "tailscale" ? "tailnet" : "VPN"} is the local operator`
+    );
+  }
   const readOnly = options.writable ? false : options.readOnly ?? (expose === "vpn" ? true : initial.config.webReadOnly);
   const values = {
     PORTTA_WEB: "true",
@@ -121803,7 +121812,7 @@ async function inspectCommand(command) {
   const options = globals8(command);
   const context = gatewayContext({ profile: options.profile });
   const output2 = new Output(options);
-  const secrets = /* @__PURE__ */ new Set(["TS_AUTHKEY", "CF_DNS_API_TOKEN", "PORTTA_RUNTIME_DATABASE_URL", "PORTTA_RUNTIME_DB_PASSWORD", "PORTTA_AUTH_SECRET"]);
+  const secrets = /* @__PURE__ */ new Set(["TS_AUTHKEY", "CF_DNS_API_TOKEN", "PORTTA_AUTH_SECRET"]);
   const configuration = Object.fromEntries(Object.entries(context.env).filter(([key]) => key.startsWith("PORTTA_") || ["TLS_ENABLED", "TLS_MODE", "PUBLIC_DOMAIN", "PRIVATE_DOMAIN", "TAILSCALE_ENABLED"].includes(key)).map(([key, value3]) => [key, secrets.has(key) ? value3 ? "<set>" : "<unset>" : value3]));
   if (output2.json) output2.data({ profile: context.config.profile, configuration, composeFiles: context.composeFiles });
   else {
@@ -122315,8 +122324,6 @@ var SETTINGS = {
 };
 var SECRETS = /* @__PURE__ */ new Set([
   "PORTTA_AUTH_SECRET",
-  "PORTTA_RUNTIME_DB_PASSWORD",
-  "PORTTA_RUNTIME_DATABASE_URL",
   "TS_AUTHKEY",
   "CF_DNS_API_TOKEN"
 ]);
@@ -123327,7 +123334,7 @@ function paths2(root2) {
 init_src();
 init_context();
 init_errors3();
-import { chmodSync as chmodSync14, cpSync as cpSync2, existsSync as existsSync43, mkdirSync as mkdirSync23, mkdtempSync as mkdtempSync3, readFileSync as readFileSync35, rmSync as rmSync12, statSync as statSync12, writeFileSync as writeFileSync17 } from "node:fs";
+import { chmodSync as chmodSync14, copyFileSync as copyFileSync5, cpSync as cpSync2, existsSync as existsSync43, mkdirSync as mkdirSync23, mkdtempSync as mkdtempSync3, readFileSync as readFileSync35, rmSync as rmSync12, statSync as statSync12, writeFileSync as writeFileSync17 } from "node:fs";
 import { hostname as hostname3, tmpdir as tmpdir5 } from "node:os";
 import { dirname as dirname32, join as join65 } from "node:path";
 function globals16(command) {
@@ -123350,19 +123357,19 @@ function parseManifest(text) {
     return null;
   }
 }
-function dbContainer(env) {
-  return `${env["PORTTA_PROJECT_NAME"] || "portta"}-db-1`;
-}
 async function containerRunning(name) {
   const result = await runProcess("docker", ["inspect", "-f", "{{.State.Running}}", name], { reject: false });
   return !result.failed && result.stdout.trim() === "true";
 }
 async function dumpDatabase(context, target) {
-  const container = dbContainer(context.env);
-  if (!await containerRunning(container)) return false;
-  const dump = await runProcess("docker", ["exec", container, "pg_dump", "-U", "portta", "-d", "portta", "--clean", "--if-exists"], { reject: false });
-  if (dump.failed || !dump.stdout) return false;
-  writeFileSync17(target, dump.stdout, { mode: 384 });
+  const source = databaseFileFor(context.root);
+  if (!existsSync43(source)) return false;
+  const sqlite = await runProcess("sh", ["-c", "command -v sqlite3"], { reject: false });
+  const binary = sqlite.stdout.trim();
+  if (sqlite.failed || !binary) return false;
+  const copied = await runProcess(binary, [source, `VACUUM INTO '${target.replaceAll("'", "''")}'`], { reject: false });
+  if (copied.failed || !existsSync43(target)) return false;
+  chmodSync14(target, 384);
   return true;
 }
 async function backupCommand(options, command) {
@@ -123387,7 +123394,7 @@ async function backupCommand(options, command) {
     }
     let database = false;
     if (options.database !== false) {
-      database = await dumpDatabase(context, join65(staging, "database.sql"));
+      database = await dumpDatabase(context, join65(staging, "panel.db"));
       if (!database) {
         output2.warning("the panel database was not included");
         output2.hint("it is only there when the panel is running; --no-database silences this");
@@ -123465,18 +123472,18 @@ async function restoreCommand(archive, options, command) {
       output2.progress("configuration and state restored");
     }
     if (existsSync43(join65(context.root, ".env"))) chmodSync14(join65(context.root, ".env"), 384);
-    const dump = join65(staging, "database.sql");
+    const dump = join65(staging, "panel.db");
     if (existsSync43(dump)) {
-      const container = dbContainer(context.env);
-      const loaded = await containerRunning(container) ? await runProcess(
-        "docker",
-        ["exec", "-i", container, "psql", "-U", "portta", "-d", "portta", "-v", "ON_ERROR_STOP=1", "-q"],
-        { input: readFileSync35(dump, "utf8"), reject: false }
-      ) : { failed: true };
-      if (loaded.failed) {
-        output2.warning("the database dump was not loaded");
-        output2.hint(`start the gateway, then: portta restore ${archive} --force`);
+      const panelUp = await containerRunning(`${context.env["PORTTA_PROJECT_NAME"] || "portta"}-web-1`);
+      const target = databaseFileFor(context.root);
+      if (panelUp) {
+        output2.warning("the panel is running, so its database was not replaced");
+        output2.hint(`portta web down   then: portta restore ${archive} --force`);
       } else {
+        mkdirSync23(dirname32(target), { recursive: true });
+        for (const file2 of databaseFiles(target)) rmSync12(file2, { force: true });
+        copyFileSync5(dump, target);
+        chmodSync14(target, 384);
         output2.progress("panel database restored");
       }
     }