@supacloud/admin 0.7.11 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -5
- package/dist/index.js +706 -551
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -27,11 +27,19 @@ Examples:
|
|
|
27
27
|
```bash
|
|
28
28
|
npx @supacloud/admin status
|
|
29
29
|
npx @supacloud/admin ssh ping
|
|
30
|
+
npx @supacloud/admin ssh versions
|
|
30
31
|
npx @supacloud/admin ssh diagnose
|
|
31
32
|
npx @supacloud/admin project create --name my-app
|
|
32
33
|
npx @supacloud/admin project list
|
|
33
34
|
```
|
|
34
35
|
|
|
36
|
+
`ssh versions` emits JSON with `schema_version: 1` and fixed
|
|
37
|
+
`management_api`, `edge_runtime`, `caddy`, and `web_console` component fields.
|
|
38
|
+
Each component reports `status` as `ok`, `unknown`, or `error`; a failed probe
|
|
39
|
+
never substitutes a guessed version. Binary evidence is bound to the active
|
|
40
|
+
systemd `ExecStart`, and Web Console evidence comes from its component marker
|
|
41
|
+
plus an explicit `tree_sha256` digest.
|
|
42
|
+
|
|
35
43
|
## Verified platform upgrades
|
|
36
44
|
|
|
37
45
|
Use one explicit Admin command to upgrade Management, Web Console, and an
|
|
@@ -49,11 +57,13 @@ Local artifact transport downloads exact releases directly on the Admin host,
|
|
|
49
57
|
verifies their signed release manifests, checksums, sizes, provenance, source
|
|
50
58
|
commit, and architecture, then transfers them through an atomic SFTP staging
|
|
51
59
|
directory. The server takes root ownership, repeats offline verification, and
|
|
52
|
-
runs the uploaded target Management binary without GitHub
|
|
53
|
-
third-party proxy.
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
60
|
+
runs the uploaded target Management binary without GitHub or Sigstore TUF
|
|
61
|
+
egress or a third-party proxy. Admin and Management use the same reviewed,
|
|
62
|
+
digest-pinned Sigstore Public Good trusted root via `--custom-trusted-root`, so
|
|
63
|
+
the offline handoff does not depend on a pre-populated TUF cache. The server
|
|
64
|
+
reuses an installed `gh` only when it supports all required strict attestation
|
|
65
|
+
flags. Otherwise Admin transfers a pinned temporary Linux `gh` verifier that is
|
|
66
|
+
removed with the staging directory and never replaces `/usr/local/bin/gh`.
|
|
57
67
|
|
|
58
68
|
The command supports direct root SSH and passwordless `sudo -n`. The transaction
|
|
59
69
|
runs in a uniquely named transient systemd unit with protected atomic status
|