@supacloud/admin 0.15.2 → 0.15.3

package/dist/index.js

@@ -4757,6 +4757,11 @@ var require_utils = __commonJS((exports, module) => {
   };
 });
 
+// node_modules/ssh2/lib/protocol/crypto/build/Release/sshcrypto.node
+var require_sshcrypto = __commonJS((exports, module) => {
+  module.exports = __require("./sshcrypto-vd2k5hq9.node");
+});
+
 // node_modules/ssh2/lib/protocol/crypto/poly1305.js
 var require_poly1305 = __commonJS((exports, module) => {
   var __dirname = "/home/runner/work/supacloud/supacloud/packages/admin/node_modules/ssh2/lib/protocol/crypto", __filename = "/home/runner/work/supacloud/supacloud/packages/admin/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
@@ -5243,7 +5248,7 @@ var require_crypto = __commonJS((exports, module) => {
   var ChaChaPolyDecipher;
   var GenericDecipher;
   try {
-    binding = (()=>{throw new Error("Cannot require module "+"./crypto/build/Release/sshcrypto.node");})();
+    binding = require_sshcrypto();
     ({
       AESGCMCipher,
       ChaChaPolyCipher,
@@ -26362,7 +26367,7 @@ function quoteShell(shellText) {
 // src/shared/releases/local-upgrade-bundle.ts
 import { spawn } from "node:child_process";
 import { createHash as createHash2, randomUUID as randomUUID2 } from "node:crypto";
-import { accessSync, chmodSync as chmodSync2, constants as fsConstants, createWriteStream, lstatSync, mkdirSync, mkdtempSync as mkdtempSync2, readFileSync as readFileSync3, readdirSync, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { accessSync, chmodSync as chmodSync2, constants as fsConstants, createWriteStream, lstatSync, mkdirSync, mkdtempSync as mkdtempSync2, readFileSync as readFileSync3, readdirSync, renameSync, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { get } from "node:https";
 import { tmpdir as tmpdir2 } from "node:os";
 import { basename, delimiter, join } from "node:path";
@@ -26376,6 +26381,14 @@ var RELEASE_CHECKSUMS_NAME = "SHA256SUMS";
 var RELEASE_REPOSITORY = "vibeunion/supacloud";
 var RELEASE_SOURCE_REF = "refs/heads/main";
 var RELEASE_SIGNER_WORKFLOW = `${RELEASE_REPOSITORY}/.github/workflows/release-please.yml`;
+var LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY = {
+  repository: "zuohuadong/supacloud",
+  workflow: "zuohuadong/supacloud/.github/workflows/release-please.yml",
+  component: "edge-runtime",
+  version: "0.18.2",
+  tag: "edge-runtime-v0.18.2",
+  sourceCommit: "c6a3a87cf4e41e0f3dafadb018dd0c7d5b99b7d9"
+};
 var MEBIBYTE = 1024 * 1024;
 var RELEASE_BUNDLE_SIZE_LIMITS = {
   manifest: MEBIBYTE,
@@ -26482,6 +26495,16 @@ function parseArtifacts(candidate, component) {
     throw new Error(`Release manifest artifact ${oversized.name} exceeds its size limit`);
   return artifacts;
 }
+function parseIdentity(manifest, source, release) {
+  const current = manifest.repository === RELEASE_REPOSITORY && manifest.workflow === RELEASE_SIGNER_WORKFLOW;
+  const legacyEdgeRuntime = manifest.repository === LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY.repository && manifest.workflow === LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY.workflow && release.component === LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY.component && release.version === LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY.version && release.tag === LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY.tag && source.commit === LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY.sourceCommit;
+  if (!current && !legacyEdgeRuntime)
+    throw new Error("Release manifest identity is invalid");
+  return {
+    repository: manifest.repository,
+    workflow: manifest.workflow
+  };
+}
 function parseReleaseManifest(text, expected) {
   let candidate;
   try {
@@ -26491,15 +26514,16 @@ function parseReleaseManifest(text, expected) {
   }
   const manifest = manifestObject(candidate, "Release manifest");
   assertExactKeys(manifest, ["schemaVersion", "repository", "source", "workflow", "release", "artifacts"], "Release manifest");
-  if (manifest.schemaVersion !== 1 || manifest.repository !== RELEASE_REPOSITORY || manifest.workflow !== RELEASE_SIGNER_WORKFLOW) {
+  if (manifest.schemaVersion !== 1)
     throw new Error("Release manifest identity is invalid");
-  }
+  const source = parseSource(manifest.source);
+  const release = parseRelease(manifest.release, expected);
+  const identity = parseIdentity(manifest, source, release);
   return {
     schemaVersion: 1,
-    repository: RELEASE_REPOSITORY,
-    source: parseSource(manifest.source),
-    workflow: RELEASE_SIGNER_WORKFLOW,
-    release: parseRelease(manifest.release, expected),
+    ...identity,
+    source,
+    release,
     artifacts: parseArtifacts(manifest.artifacts, expected.component)
   };
 }
@@ -26989,11 +27013,11 @@ function githubAttestationVerificationArguments(request) {
     "--bundle",
     request.bundlePath,
     "--repo",
-    RELEASE_REPOSITORY,
+    request.manifest.repository,
     "--signer-workflow",
-    RELEASE_SIGNER_WORKFLOW,
+    request.manifest.workflow,
     "--source-ref",
-    RELEASE_SOURCE_REF,
+    request.manifest.source.ref,
     "--source-digest",
     request.manifest.source.commit,
     "--deny-self-hosted-runners",
@@ -27036,13 +27060,27 @@ async function downloadReleaseMetadata(component, version, directory) {
     rmSync2(metadataPath, { force: true });
   }
 }
-async function downloadManifestAttestation(manifestPath, destination) {
+function manifestAttestationDownloadUrl(release, manifest, manifestDigest) {
+  if (manifest.repository === RELEASE_REPOSITORY) {
+    return `${ATTESTATIONS_API}/sha256:${manifestDigest}`;
+  }
+  if (manifest.repository === LEGACY_EDGE_RUNTIME_RELEASE_IDENTITY.repository) {
+    return releaseAssetUrl(release, RELEASE_ATTESTATION_NAME);
+  }
+  throw new Error("Release manifest repository is not supported");
+}
+async function downloadManifestAttestation(request) {
+  const { release, manifest, manifestPath, destination } = request;
   const responsePath = `${destination}.response`;
   try {
-    await downloadDirect(`${ATTESTATIONS_API}/sha256:${sha256File(manifestPath)}`, responsePath, RELEASE_BUNDLE_SIZE_LIMITS.attestation);
-    const bundles = serializeAttestationBundles(parseJsonFile(responsePath, "GitHub attestation response"));
-    writeFileSync2(destination, bundles, { mode: 384, flag: "wx" });
-    chmodSync2(destination, 384);
+    await downloadDirect(manifestAttestationDownloadUrl(release, manifest, sha256File(manifestPath)), responsePath, RELEASE_BUNDLE_SIZE_LIMITS.attestation);
+    if (manifest.repository === RELEASE_REPOSITORY) {
+      const bundles = serializeAttestationBundles(parseJsonFile(responsePath, "GitHub attestation response"));
+      writeFileSync2(destination, bundles, { mode: 384, flag: "wx" });
+      chmodSync2(destination, 384);
+    } else {
+      renameSync(responsePath, destination);
+    }
   } finally {
     rmSync2(responsePath, { force: true });
   }
@@ -27053,7 +27091,7 @@ async function downloadComponent(request) {
   const attestationPath = directChildPath(request.destination, RELEASE_ATTESTATION_NAME);
   await downloadDirect(releaseAssetUrl(release, RELEASE_MANIFEST_NAME), manifestPath, RELEASE_BUNDLE_SIZE_LIMITS.manifest);
   const manifest = parseReleaseManifest(readFileSync3(manifestPath, "utf8"), request);
-  await downloadManifestAttestation(manifestPath, attestationPath);
+  await downloadManifestAttestation({ release, manifest, manifestPath, destination: attestationPath });
   await verifyManifestAttestation({
     artifactPath: manifestPath,
     bundlePath: attestationPath,
@@ -32116,7 +32154,7 @@ Actions: list_releases, get_release, upload_release, activate_release`, {
 // package.json
 var package_default = {
   name: "@supacloud/admin",
-  version: "0.15.2",
+  version: "0.15.3",
   description: "Platform administration CLI for SupaCloud operators",
   type: "module",
   main: "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/admin",
-  "version": "0.15.2",
+  "version": "0.15.3",
   "description": "Platform administration CLI for SupaCloud operators",
   "type": "module",
   "main": "./dist/index.js",