@serve.zone/appstore 1.4.0 → 1.4.2

package/apps/cloudly/app.json

@@ -4,8 +4,8 @@
   "description": "Multi-node serve.zone control plane for clusters, workload services, domains, and deployments.",
   "category": "Dev Tools",
   "iconName": "server",
-  "latestVersion": "1.1.0",
-  "versions": ["1.0.0", "1.1.0"],
+  "latestVersion": "1.1.1",
+  "versions": ["1.0.0", "1.1.0", "1.1.1"],
   "maintainer": "serve.zone",
   "links": {
     "Source": "https://code.foss.global/serve.zone/cloudly",

package/apps/cloudly/versions/1.1.1/config.json

@@ -0,0 +1,120 @@
+{
+  "image": "code.foss.global/serve.zone/cloudly@sha256:510b3edb65eed00d3edce4d482f90c864b26b759e3c8f7605109516791fb47f9",
+  "targetPorts": [
+    { "name": "web", "port": 3000, "protocol": "http", "default": true }
+  ],
+  "envVars": [
+    {
+      "key": "SERVEZONE_ENVIRONMENT",
+      "value": "production",
+      "description": "Cloudly runtime environment.",
+      "required": true
+    },
+    {
+      "key": "SERVEZONE_PUBLIC_ORIGIN",
+      "value": "https://${SERVICE_DOMAIN}",
+      "description": "Canonical public Cloudly origin including protocol and optional public port.",
+      "required": true
+    },
+    {
+      "key": "SERVEZONE_LISTENPORT",
+      "value": "3000",
+      "description": "Internal Cloudly HTTP port inside the container.",
+      "required": true
+    },
+    {
+      "key": "SERVEZONE_SSLMODE",
+      "value": "external",
+      "description": "Use external TLS termination through Onebox or dcrouter.",
+      "required": true
+    },
+    {
+      "key": "MONGODB_URL",
+      "value": "${MONGODB_URI}",
+      "description": "Authenticated MongoDB connection URL provisioned by Onebox.",
+      "required": true
+    },
+    {
+      "key": "MONGODB_NAME",
+      "value": "${MONGODB_DATABASE}",
+      "description": "MongoDB database name provisioned by Onebox.",
+      "required": true
+    },
+    {
+      "key": "MONGODB_USER",
+      "value": "${MONGODB_USERNAME}",
+      "description": "MongoDB username provisioned by Onebox.",
+      "required": true
+    },
+    {
+      "key": "MONGODB_PASS",
+      "value": "${MONGODB_PASSWORD}",
+      "description": "MongoDB password provisioned by Onebox.",
+      "required": true
+    },
+    {
+      "key": "S3_ENDPOINT",
+      "value": "onebox-minio",
+      "description": "S3 endpoint host for the MinIO service provisioned by Onebox.",
+      "required": true
+    },
+    {
+      "key": "S3_PORT",
+      "value": "9000",
+      "description": "S3 endpoint port for the MinIO service provisioned by Onebox.",
+      "required": true
+    },
+    {
+      "key": "S3_USESSL",
+      "value": "false",
+      "description": "Use plain HTTP for internal MinIO traffic on the Onebox network.",
+      "required": true
+    },
+    {
+      "key": "S3_BUCKET",
+      "value": "${S3_BUCKET}",
+      "description": "S3 bucket provisioned by Onebox for Cloudly's registry.",
+      "required": true
+    },
+    {
+      "key": "S3_ACCESSKEY",
+      "value": "${S3_ACCESS_KEY}",
+      "description": "S3 access key provisioned by Onebox.",
+      "required": true
+    },
+    {
+      "key": "S3_SECRETKEY",
+      "value": "${S3_SECRET_KEY}",
+      "description": "S3 secret key provisioned by Onebox.",
+      "required": true
+    }
+  ],
+  "platformRequirements": {
+    "mongodb": true,
+    "s3": true
+  },
+  "platformOidc": {
+    "redirectPath": "/auth/oidc/callback",
+    "roles": [
+      {
+        "id": "admin",
+        "label": "Administrator",
+        "description": "Full Cloudly administration for this hosted instance."
+      },
+      {
+        "id": "user",
+        "label": "User",
+        "description": "Standard authenticated Cloudly access for this hosted instance."
+      }
+    ],
+    "environmentVariables": {
+      "issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
+      "clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
+      "clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
+      "redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
+      "audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
+    },
+    "clientAuthenticationMethod": "client_secret_basic"
+  },
+  "minOneboxVersion": "2.2.0"
+}

package/appstore.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "updatedAt": "2026-07-21T00:00:00Z",
+  "updatedAt": "2026-07-25T00:00:00Z",
   "apps": [
     {
       "id": "nginx",
@@ -152,7 +152,7 @@
       "description": "Multi-node serve.zone control plane for clusters, workload services, domains, and deployments.",
       "category": "Dev Tools",
       "iconName": "server",
-      "latestVersion": "1.0.0",
+      "latestVersion": "1.1.1",
       "tags": ["serve.zone", "control-plane", "clusters", "deployments"]
     },
     {

package/changelog.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 2026-07-28 - 1.4.2
+
+### Fixes
+
+- publish Cloudly App Store version 1.1.1 with the exact 14.5.3 image digest (cloudly)
+  - Gives Onebox a managed, immutable upgrade target for the control-plane recovery release while preserving the existing storage and Platform OIDC contract.
+
+## 2026-07-25 - 1.4.1
+
+### Fixes
+
+- enforce authoritative latest version resolution (resolver)
+  - Reject index/app metadata divergence and stale latestVersion declarations before returning catalog data.
+  - Select implicit latest repo-manifest versions by highest semantic value instead of array position, requiring explicit intent for multiple non-semver versions.
+  - Apply configurable timeouts to remote catalog, manifest, registry, and body fetches and cancel unread failed-response bodies.
+  - Return isolated validated metadata snapshots so callers cannot mutate cached catalog state.
+  - Align bundled catalog data with Cloudly 1.1.0 metadata.
+
 ## 2026-07-24 - 1.4.0
 
 ### Features

package/dist_ts_client/classes.appstoreresolver.d.ts

@@ -10,8 +10,10 @@ export declare class AppStoreResolver {
     private readonly fetchRef;
     private readonly source;
     private readonly resolveDockerDigests;
+    private readonly requestTimeoutMs;
     private readonly now;
     private appStoreCache;
+    private inlineAppMetaCache;
     private sourceAppCache;
     constructor(optionsArg?: IAppStoreResolverOptions);
     getSourceInfo(): IAppStoreSourceInfo;
@@ -36,8 +38,11 @@ export declare class AppStoreResolver {
     private resolveServezoneAppStoreManifest;
     private resolveConfigSource;
     private applyDockerImageSourceToConfig;
+    private validateInlineAppMetadata;
     private createAppMetaFromAppStoreApp;
     private getAppStoreApp;
+    private withRemoteResponse;
+    private fetchRemoteHeaders;
     private fetchJson;
     fetchText(pathArg: string): Promise<string>;
     private fetchTextFromUrl;