@supacloud/admin 0.7.7 → 0.7.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +38 -14
- package/dist/index.js +1610 -52
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -39,23 +39,47 @@ external Edge Runtime as a single rollback-capable transaction:
|
|
|
39
39
|
|
|
40
40
|
```bash
|
|
41
41
|
npx @supacloud/admin ssh upgrade \
|
|
42
|
-
--version 0.50.
|
|
43
|
-
--edge_runtime_version 0.16.
|
|
42
|
+
--version 0.50.31 \
|
|
43
|
+
--edge_runtime_version 0.16.8 \
|
|
44
|
+
--artifact_transport local \
|
|
44
45
|
--github_proxy direct
|
|
45
46
|
```
|
|
46
47
|
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
48
|
+
Local artifact transport downloads exact releases directly on the Admin host,
|
|
49
|
+
verifies their signed release manifests, checksums, sizes, provenance, source
|
|
50
|
+
commit, and architecture, then transfers them through an atomic SFTP staging
|
|
51
|
+
directory. The server takes root ownership, repeats offline verification, and
|
|
52
|
+
runs the uploaded target Management binary without GitHub egress or a
|
|
53
|
+
third-party proxy. The server reuses an installed `gh` only when it supports all
|
|
54
|
+
required strict attestation flags. Otherwise Admin transfers a pinned temporary
|
|
55
|
+
Linux `gh` verifier that is removed with the staging directory and never
|
|
56
|
+
replaces `/usr/local/bin/gh`.
|
|
57
|
+
|
|
58
|
+
The command supports direct root SSH and passwordless `sudo -n`. The transaction
|
|
59
|
+
runs in a uniquely named transient systemd unit with protected atomic status
|
|
60
|
+
records; Admin polls that record without tying the transaction to a long-lived
|
|
61
|
+
SSH channel. It preserves the Edge Runtime systemd `ExecStart`, port, mode, and
|
|
62
|
+
enabled state. Component upgrades require persisted `EDGE_RUNTIME_MODE=external`;
|
|
63
|
+
embedded mode is rejected before release artifacts or services are changed.
|
|
64
|
+
Local, remote, and direct server upgrades share one nonblocking host-wide lock.
|
|
65
|
+
|
|
66
|
+
Admin observes the remote transaction for up to 30 minutes. Reaching that
|
|
67
|
+
deadline stops only local observation; it does not stop, clean up, or mark the
|
|
68
|
+
remote transaction as failed. The CLI reports the unit, stage, status, log, and
|
|
69
|
+
upload-drop paths for reconciliation. Inspect that evidence before retrying and
|
|
70
|
+
do not retry blindly while the remote transaction may still be running.
|
|
71
|
+
|
|
72
|
+
`--artifact_transport local` accepts only `--github_proxy direct` or `none` and
|
|
73
|
+
clears proxy environment variables on both hosts. The legacy server-download
|
|
74
|
+
path remains available as `--artifact_transport remote`.
|
|
75
|
+
|
|
76
|
+
With `--artifact_transport remote` (the default), omitting
|
|
77
|
+
`--edge_runtime_version` retains the Management and Web Console-only upgrade
|
|
78
|
+
behavior and reports that Edge Runtime was not upgraded. Local transport
|
|
79
|
+
requires exact Management and Edge Runtime versions. Caddy and GoTrue are
|
|
80
|
+
outside this transaction and are not replaced. After a capable Management
|
|
81
|
+
release is active, an exact rollback can use that active upgrader with explicit
|
|
82
|
+
older targets, for example:
|
|
59
83
|
|
|
60
84
|
```bash
|
|
61
85
|
npx @supacloud/admin ssh upgrade \
|