@or3/cloud 0.1.65 → 0.1.66

package/README.md

@@ -98,6 +98,11 @@ Update recovery reads the authenticated pre-update snapshot recorded in
 including its data and release assets, before clearing the pending operation.
 Legacy `adopt-source-*` directories are preserved outside managed backup
 retention and are not treated as authenticated restore points.
+Backups from releases before authentication tags existed are also preserved:
+`backup list` and retention skip `backup-*` entries with no `manifest.auth` and
+print a warning. They do not sign, migrate, or delete those archives. An existing
+but invalid tag remains an error; restore, recovery, and export still require
+valid deployment authentication.
 Backup artifacts are allocated in that journal before archiving, fully
 revalidated before success is reported, and safely removed by `recover` if a
 hard interruption leaves an incomplete artifact. A standalone backup and a

package/dist/cli.mjs

@@ -31,7 +31,7 @@ import { fileURLToPath } from "node:url";
 import { createGunzip } from "node:zlib";
 var execFile = promisify(execFileCallback);
 var PACKAGE_ROOT = resolve(fileURLToPath(new URL("../", import.meta.url)));
-var PACKAGE_VERSION = "0.1.65";
+var PACKAGE_VERSION = "0.1.66";
 var IMAGE_REPOSITORY = "ghcr.io/saluana/or3-chat";
 var ASSET_ROOT = resolve(fileURLToPath(new URL("../assets/", import.meta.url)));
 var STATE_SCHEMA_VERSION = 1;
@@ -1843,6 +1843,14 @@ async function enumerateBackups(directory) {
       throw new Error(`Backup store contains an unexpected artifact ${join(backupsRoot, entry)}. Refusing to use it for retention; inspect or remove it explicitly.`);
     }
     const path = join(backupsRoot, entry);
+    try {
+      await lstat(join(path, "manifest.auth"));
+    } catch (error) {
+      if (error.code !== "ENOENT")
+        throw error;
+      console.warn(`Preserving unauthenticated backup ${entry}: no manifest.auth; excluded from managed backup listing and retention.`);
+      continue;
+    }
     const manifest = await readManifest(path, directory);
     if (manifest.backupId !== entry) {
       throw new Error(`Backup directory ${path} does not match manifest ID ${manifest.backupId}. Refusing to use it for retention.`);
@@ -2746,7 +2754,7 @@ async function backupListCommand(directory) {
   const loaded = await loadManaged(directory);
   const backups = await enumerateBackups(loaded.directory);
   if (backups.length === 0) {
-    console.log(`No backups exist yet for ${loaded.directory}. Run "npx @or3/cloud backup" to create one.`);
+    console.log(`No authenticated backups are available for ${loaded.directory}. Run "npx @or3/cloud backup" to create one.`);
     return;
   }
   console.log(`OR3 Cloud backups for ${loaded.directory} (${backups.length}):`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@or3/cloud",
-  "version": "0.1.65",
+  "version": "0.1.66",
   "description": "Install and operate the OR3 Cloud container distribution",
   "type": "module",
   "license": "GPL-3.0",
@@ -18,9 +18,9 @@
   "or3Cloud": {
     "dashboardUpdateProtocol": 1,
     "dashboardUpdateMinimumSourceVersion": "0.1.40",
-    "imageDigest": "sha256:cce2c2331419dbb2e2d0b17e0a7da0c9f3106b3c6dc30f680a6d9f145f0c6c6e",
-    "operatorImageDigest": "sha256:b8732a186a6bcfbd47f93333b7ed90991b20f4dd569ec08aec509e9f21ab6561",
-    "sourceRevision": "19b8889981b2f5f958c23679887a9a4bebd0f58c"
+    "imageDigest": "sha256:fbe393d371bcd2cfdcdd4e8295cbb61c6ec11bbedccf84b88042ff28b8155fb6",
+    "operatorImageDigest": "sha256:7eda3cab7508094bc51a43bb0c10924a806eb6127160cd6fccbd77a8fda99e7f",
+    "sourceRevision": "79691e3f6b14ac7555aba765aee794263583d503"
   },
   "files": [
     "dist",