@supacloud/admin 0.7.7 → 0.7.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +38 -14
  2. package/dist/index.js +1610 -52
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -39,23 +39,47 @@ external Edge Runtime as a single rollback-capable transaction:
39
39
 
40
40
  ```bash
41
41
  npx @supacloud/admin ssh upgrade \
42
- --version 0.50.27 \
43
- --edge_runtime_version 0.16.7 \
42
+ --version 0.50.31 \
43
+ --edge_runtime_version 0.16.8 \
44
+ --artifact_transport local \
44
45
  --github_proxy direct
45
46
  ```
46
47
 
47
- The command supports direct root SSH and passwordless `sudo -n`. It installs
48
- the pinned GitHub provenance verifier when needed, verifies each component
49
- against its own release checksum and attestation, and preserves the Edge
50
- Runtime systemd `ExecStart`, port, mode, and enabled state. Component upgrades
51
- require persisted `EDGE_RUNTIME_MODE=external`; embedded mode is rejected
52
- before release artifacts or services are changed.
53
-
54
- Omitting `--edge_runtime_version` retains the Management and Web Console-only
55
- upgrade behavior and reports that Edge Runtime was not upgraded. Caddy and
56
- GoTrue are outside this transaction and are not replaced. After a capable
57
- Management release is active, an exact rollback can use that active upgrader
58
- with explicit older targets, for example:
48
+ Local artifact transport downloads exact releases directly on the Admin host,
49
+ verifies their signed release manifests, checksums, sizes, provenance, source
50
+ commit, and architecture, then transfers them through an atomic SFTP staging
51
+ directory. The server takes root ownership, repeats offline verification, and
52
+ runs the uploaded target Management binary without GitHub egress or a
53
+ third-party proxy. The server reuses an installed `gh` only when it supports all
54
+ required strict attestation flags. Otherwise Admin transfers a pinned temporary
55
+ Linux `gh` verifier that is removed with the staging directory and never
56
+ replaces `/usr/local/bin/gh`.
57
+
58
+ The command supports direct root SSH and passwordless `sudo -n`. The transaction
59
+ runs in a uniquely named transient systemd unit with protected atomic status
60
+ records; Admin polls that record without tying the transaction to a long-lived
61
+ SSH channel. It preserves the Edge Runtime systemd `ExecStart`, port, mode, and
62
+ enabled state. Component upgrades require persisted `EDGE_RUNTIME_MODE=external`;
63
+ embedded mode is rejected before release artifacts or services are changed.
64
+ Local, remote, and direct server upgrades share one nonblocking host-wide lock.
65
+
66
+ Admin observes the remote transaction for up to 30 minutes. Reaching that
67
+ deadline stops only local observation; it does not stop, clean up, or mark the
68
+ remote transaction as failed. The CLI reports the unit, stage, status, log, and
69
+ upload-drop paths for reconciliation. Inspect that evidence before retrying and
70
+ do not retry blindly while the remote transaction may still be running.
71
+
72
+ `--artifact_transport local` accepts only `--github_proxy direct` or `none` and
73
+ clears proxy environment variables on both hosts. The legacy server-download
74
+ path remains available as `--artifact_transport remote`.
75
+
76
+ With `--artifact_transport remote` (the default), omitting
77
+ `--edge_runtime_version` retains the Management and Web Console-only upgrade
78
+ behavior and reports that Edge Runtime was not upgraded. Local transport
79
+ requires exact Management and Edge Runtime versions. Caddy and GoTrue are
80
+ outside this transaction and are not replaced. After a capable Management
81
+ release is active, an exact rollback can use that active upgrader with explicit
82
+ older targets, for example:
59
83
 
60
84
  ```bash
61
85
  npx @supacloud/admin ssh upgrade \