@supacloud/admin 0.1.0 → 0.1.2

package/dist/index.js

@@ -4144,12 +4144,23 @@ var require_bcrypt_pbkdf = __commonJS((exports, module) => {
   };
 });
 
+// node_modules/cpu-features/build/Release/cpufeatures.node
+var require_cpufeatures = __commonJS((exports, module) => {
+  module.exports = __require("./cpufeatures-1yrn0vtw.node");
+});
+
+// node_modules/cpu-features/lib/index.js
+var require_lib2 = __commonJS((exports, module) => {
+  var binding = require_cpufeatures();
+  module.exports = binding.getCPUInfo;
+});
+
 // node_modules/ssh2/lib/protocol/constants.js
 var require_constants = __commonJS((exports, module) => {
   var crypto = __require("crypto");
   var cpuInfo;
   try {
-    cpuInfo = (()=>{throw new Error("Cannot require module "+"cpu-features");})()();
+    cpuInfo = require_lib2()();
   } catch {}
   var { bindingAvailable, CIPHER_INFO, MAC_INFO } = require_crypto();
   var eddsaSupported = (() => {
@@ -4746,9 +4757,14 @@ var require_utils = __commonJS((exports, module) => {
   };
 });
 
+// node_modules/ssh2/lib/protocol/crypto/build/Release/sshcrypto.node
+var require_sshcrypto = __commonJS((exports, module) => {
+  module.exports = __require("./sshcrypto-w7mnkyjv.node");
+});
+
 // node_modules/ssh2/lib/protocol/crypto/poly1305.js
 var require_poly1305 = __commonJS((exports, module) => {
-  var __dirname = "/Volumes/Data/workspace/supacloud/packages/admin/node_modules/ssh2/lib/protocol/crypto", __filename = "/Volumes/Data/workspace/supacloud/packages/admin/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
+  var __dirname = "/home/runner/work/supacloud/supacloud/packages/admin/node_modules/ssh2/lib/protocol/crypto", __filename = "/home/runner/work/supacloud/supacloud/packages/admin/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
   var createPoly1305 = function() {
     var _scriptDir = typeof document !== "undefined" && document.currentScript ? document.currentScript.src : undefined;
     if (typeof __filename !== "undefined")
@@ -5232,7 +5248,7 @@ var require_crypto = __commonJS((exports, module) => {
   var ChaChaPolyDecipher;
   var GenericDecipher;
   try {
-    binding = (()=>{throw new Error("Cannot require module "+"./crypto/build/Release/sshcrypto.node");})();
+    binding = require_sshcrypto();
     ({
       AESGCMCipher,
       ChaChaPolyCipher,
@@ -7521,7 +7537,7 @@ ${formatted}-----END ${type} KEY-----`;
 
 // node_modules/ssh2/lib/agent.js
 var require_agent = __commonJS((exports, module) => {
-  var __dirname = "/Volumes/Data/workspace/supacloud/packages/admin/node_modules/ssh2/lib";
+  var __dirname = "/home/runner/work/supacloud/supacloud/packages/admin/node_modules/ssh2/lib";
   var { Socket } = __require("net");
   var { Duplex } = __require("stream");
   var { resolve: resolve2 } = __require("path");
@@ -18787,7 +18803,7 @@ var require_keygen = __commonJS((exports, module) => {
 });
 
 // node_modules/ssh2/lib/index.js
-var require_lib2 = __commonJS((exports, module) => {
+var require_lib3 = __commonJS((exports, module) => {
   var {
     AgentProtocol,
     BaseAgent,
@@ -23162,7 +23178,7 @@ class HttpTransport {
 }
 
 // src/shared/transports/ssh.ts
-var import_ssh2 = __toESM(require_lib2(), 1);
+var import_ssh2 = __toESM(require_lib3(), 1);
 var BLOCKED_COMMANDS = [
   "rm -rf /",
   "mkfs",
@@ -23338,6 +23354,7 @@ class SshTransport {
 // src/shared/tools/ssh-tools.ts
 var SAFE_CONTAINER_NAME = /^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/;
 var SAFE_PROJECT_REF = /^[a-z0-9-]{1,20}$/;
+var SAFE_RELEASE_TAG = /^[a-zA-Z0-9._-]{1,80}$/;
 var SAFE_TIMEOUT_SECONDS = 300;
 var ALLOWED_EXEC_PREFIXES = [
   "systemctl ",
@@ -23373,6 +23390,26 @@ function assertSafeContainerName(value) {
   }
   return value;
 }
+function assertSafeReleaseTag(value) {
+  if (!SAFE_RELEASE_TAG.test(value)) {
+    throw new Error("Invalid release version");
+  }
+  return value;
+}
+function assertSafeGithubProxy(value) {
+  const trimmed = value.trim();
+  if (/[\s\n\r;&|`$<>]/.test(trimmed)) {
+    throw new Error("Invalid github_proxy");
+  }
+  if (trimmed.toLowerCase() === "direct" || trimmed.toLowerCase() === "none") {
+    return trimmed;
+  }
+  const parsed = new URL(trimmed);
+  if (!["http:", "https:"].includes(parsed.protocol)) {
+    throw new Error("Invalid github_proxy protocol");
+  }
+  return parsed.toString();
+}
 function getExecTimeoutMs(timeoutSeconds) {
   const seconds = timeoutSeconds || 60;
   if (!Number.isFinite(seconds) || seconds <= 0 || seconds > SAFE_TIMEOUT_SECONDS) {
@@ -23420,6 +23457,7 @@ Actions: ping, setup, install, upgrade, diagnose, exec, troubleshoot, container_
     edge_runtime: exports_external.enum(["bun"]).optional().describe("[install] Runtime (default: bun)"),
     storage_type: exports_external.enum(["juicefs", "garage", "rustfs", "minio", "external"]).optional().describe("[install] Storage backend"),
     version: exports_external.string().optional().describe("[upgrade] Specific version"),
+    github_proxy: exports_external.string().optional().describe("[upgrade] GitHub proxy prefix, e.g. https://ghproxy.net/ or direct"),
     focus: exports_external.enum(["all", "containers", "database", "network", "disk", "logs"]).optional().describe("[troubleshoot] Focus area"),
     container: exports_external.string().optional().describe("[container_logs] Container name"),
     lines: exports_external.number().optional().describe("[container_logs] Number of log lines (default: 100)"),
@@ -23488,7 +23526,12 @@ ${result.stderr.slice(-500)}`;
         break;
       }
       case "upgrade": {
-        const cmd = args.version ? `cd ~/supacloud && git fetch && git checkout ${args.version} && bash install.sh` : `cd ~/supacloud && git pull && bash install.sh`;
+        const envParts = [
+          args.version ? `SUPACLOUD_UPGRADE_TAG=${assertSafeReleaseTag(args.version)}` : "",
+          args.github_proxy ? `SUPACLOUD_GITHUB_PROXY=${assertSafeGithubProxy(args.github_proxy)}` : ""
+        ].filter(Boolean);
+        const envPrefix = envParts.length > 0 ? `${envParts.join(" ")} ` : "";
+        const cmd = "if [ ! -x /usr/local/bin/supacloud ]; then " + "echo 'SupaCloud binary not found at /usr/local/bin/supacloud; run ssh install first.' >&2; exit 127; " + `fi; ${envPrefix}/usr/local/bin/supacloud upgrade --yes`;
         const r = await ssh.exec(cmd, 600000);
         text = r.success ? `✅ Upgrade done
 ${r.stdout.slice(-300)}` : `❌ Failed (exit ${r.code})

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/admin",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Platform administration CLI for SupaCloud operators",
   "type": "module",
   "main": "./dist/index.js",