@tokenbuddy/tb-admin 1.0.12 → 1.0.14

package/dist/src/server-cmd.js

@@ -1,4 +1,10 @@
 import { execSync } from "child_process";
+/**
+ * 检查 flyctl 是否在 PATH 中（或在指定路径）。
+ *
+ * @param flyctlPath 可选 flyctl 完整路径
+ * @returns 是否可用
+ */
 export function checkFlyctlInstalled(flyctlPath) {
     try {
         execSync(`which ${flyctlPath || "flyctl"}`, { stdio: "ignore" });
@@ -8,6 +14,35 @@ export function checkFlyctlInstalled(flyctlPath) {
         return false;
     }
 }
+export function parseFlyMachineIds(json, app) {
+    let parsed;
+    try {
+        parsed = JSON.parse(json || "[]");
+    }
+    catch {
+        throw new Error(`fly machines list returned invalid JSON for ${app}`);
+    }
+    if (!Array.isArray(parsed)) {
+        throw new Error(`fly machines list returned an unexpected shape for ${app}`);
+    }
+    const ids = parsed
+        .map((item) => {
+        if (item && typeof item === "object" && "id" in item) {
+            const id = item.id;
+            return typeof id === "string" && id.length > 0 ? id : undefined;
+        }
+        return undefined;
+    })
+        .filter((id) => Boolean(id));
+    if (ids.length === 0) {
+        throw new Error(`fly app ${app} has no machines to update`);
+    }
+    return ids;
+}
+/**
+ * Fly.io seller provider：把 admin CLI 的 `tb-admin server create` 命令转成 `flyctl` 调用。
+ * 支持 `dryRun` 模式：只打印会执行的命令而不实际修改 Fly 资源。
+ */
 export class FlyProvider {
     providerConfig;
     constructor(providerConfig) {
@@ -32,18 +67,14 @@ export class FlyProvider {
         const { name, dryRun } = options;
         // --app overrides the auto-prefixed name; allows bare "tbs-86d81e" or "tb-seller-foo"
         const appName = options.app || `tb-seller-${name}`;
-        // Merge CLI options with provider config defaults
-        const targetImage = options.image
-            || this.providerConfig?.default_image
-            || "registry.fly.io/tb-seller:latest";
+        const targetImage = options.image;
         const targetRegion = options.region
             || this.providerConfig?.default_region
             || "sin";
         const operatorSecret = options.operatorSecret
             || this.providerConfig?.operator_secret
             || "";
-        const flyConfig = options.flyConfig
-            || this.providerConfig?.default_config;
+        const flyConfig = options.flyConfig;
         const volumeName = options.volumeName
             || this.providerConfig?.volume_name
             || "tb_seller_data";
@@ -52,6 +83,12 @@ export class FlyProvider {
             || 1;
         const volumeSnapshotRetentionDays = options.volumeSnapshotRetentionDays;
         const volumeId = options.volumeId;
+        if (!targetImage) {
+            throw new Error("seller create requires --image registry.fly.io/tb-seller:<v>");
+        }
+        if (!flyConfig) {
+            throw new Error("seller create requires --fly-config deploy/fly.io/fly.tb-seller.toml");
+        }
         if (dryRun) {
             const lines = [
                 `[DRY-RUN] Will create fly app: ${appName}`,
@@ -79,9 +116,7 @@ export class FlyProvider {
         console.log(`[Fly.io] Setting secrets...`);
         execSync(`${this.flyctl} secrets set ALLOW_MOCK=false OPERATOR_SECRET=${operatorSecret} --app ${appName}`, { stdio: "inherit" });
         console.log(`[Fly.io] Deploying image ${targetImage}...`);
-        let deployCmd = flyConfig
-            ? `${this.flyctl} deploy -c ${flyConfig} --image ${targetImage} --region ${targetRegion} --app ${appName} --now`
-            : `${this.flyctl} deploy --image ${targetImage} --region ${targetRegion} --app ${appName} --now`;
+        const deployCmd = `${this.flyctl} deploy -c ${flyConfig} --image ${targetImage} --region ${targetRegion} --app ${appName} --now`;
         execSync(deployCmd, { stdio: "inherit" });
         return `Successfully deployed ${appName} on Fly.io`;
     }
@@ -114,30 +149,34 @@ export class FlyProvider {
         return execSync(`${this.flyctl} status --app ${appName}`, { encoding: "utf8" });
     }
     /**
-     * Redeploy an existing seller app on Fly.io.
+     * Update an existing seller app's Machines to a new image.
+     *
+     * This intentionally does not call `fly deploy --config`: existing seller
+     * deploys must not reconcile volumes, mounts, or service configuration.
      */
     deploySeller(options) {
-        const { app, config, image, dryRun } = options;
-        const flyConfig = config || this.providerConfig?.default_config;
-        const targetImage = image || this.providerConfig?.default_image;
+        const { app, image, dryRun } = options;
+        const targetImage = image;
+        if (!targetImage) {
+            throw new Error("seller deploy requires --image registry.fly.io/tb-seller:<v>");
+        }
         if (dryRun) {
-            const lines = [`[DRY-RUN] Will redeploy app: ${app}`];
-            if (targetImage)
-                lines.push(`  Image: ${targetImage}`);
-            lines.push(`  Config: ${flyConfig || "fly.toml (auto from CWD)"}`);
+            const lines = [`[DRY-RUN] Will update existing app machines: ${app}`];
+            lines.push(`  Image: ${targetImage}`);
+            lines.push("  Config: unchanged");
+            lines.push("  Volumes: unchanged");
             return lines.join("\n");
         }
         if (!checkFlyctlInstalled(this.flyctl)) {
             throw new Error(`\`${this.flyctl}\` is not installed.`);
         }
-        let cmd = `${this.flyctl} deploy --app ${app} --now --yes`;
-        if (flyConfig)
-            cmd += ` --config ${flyConfig}`;
-        if (targetImage)
-            cmd += ` --image ${targetImage}`;
-        console.log(`[Fly.io] Redeploying ${app}...`);
-        execSync(cmd, { stdio: "inherit" });
-        return `Successfully redeployed ${app}`;
+        const machinesJson = execSync(`${this.flyctl} machines list --app ${app} --json`, { encoding: "utf8" });
+        const machineIds = parseFlyMachineIds(machinesJson, app);
+        console.log(`[Fly.io] Updating ${app} image on ${machineIds.length} machine(s)...`);
+        for (const machineId of machineIds) {
+            execSync(`${this.flyctl} machine update ${machineId} --app ${app} --image ${targetImage} --yes`, { stdio: "inherit" });
+        }
+        return `Successfully updated ${app} image`;
     }
 }
 //# sourceMappingURL=server-cmd.js.map

package/dist/src/server-cmd.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-cmd.js","sourceRoot":"","sources":["../../src/server-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,MAAM,UAAU,oBAAoB,CAAC,UAAmB;IACtD,IAAI,CAAC;QACH,QAAQ,CAAC,SAAS,UAAU,IAAI,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAgBD,MAAM,OAAO,WAAW;IACd,cAAc,CAAwB;IAE9C,YAAY,cAAqC;QAC/C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,IAAY,MAAM;QAChB,OAAO,IAAI,CAAC,cAAc,EAAE,WAAW,IAAI,QAAQ,CAAC;IACtD,CAAC;IAED;;OAEG;IACI,QAAQ;QACb,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,0CAA0C,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,OAA4B;QAC9C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACjC,sFAAsF;QACtF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,aAAa,IAAI,EAAE,CAAC;QAEnD,kDAAkD;QAClD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK;eAC5B,IAAI,CAAC,cAAc,EAAE,aAAa;eAClC,kCAAkC,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM;eAC9B,IAAI,CAAC,cAAc,EAAE,cAAc;eACnC,KAAK,CAAC;QACX,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc;eACxC,IAAI,CAAC,cAAc,EAAE,eAAe;eACpC,EAAE,CAAC;QACR,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS;eAC9B,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU;eAChC,IAAI,CAAC,cAAc,EAAE,WAAW;eAChC,gBAAgB,CAAC;QACtB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;eACpC,IAAI,CAAC,cAAc,EAAE,cAAc;eACnC,CAAC,CAAC;QACP,MAAM,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG;gBACZ,kCAAkC,OAAO,EAAE;gBAC3C,aAAa,YAAY,EAAE;gBAC3B,aAAa,WAAW,EAAE;gBAC1B,gCAAgC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE;gBACpE,aAAa,UAAU,KAAK,YAAY,KAAK;aAC9C,CAAC;YACF,IAAI,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;YACxD,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;YACrD,IAAI,2BAA2B,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,2BAA2B,OAAO,CAAC,CAAC;YAC9H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,8BAA8B,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAC;QAC9H,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,OAAO,KAAK,CAAC,CAAC;QACnD,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,gBAAgB,OAAO,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEnF,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,QAAQ,CACN,GAAG,IAAI,CAAC,MAAM,iDAAiD,cAAc,UAAU,OAAO,EAAE,EAChG,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,KAAK,CAAC,CAAC;QAC1D,IAAI,SAAS,GAAG,SAAS;YACvB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,cAAc,SAAS,YAAY,WAAW,aAAa,YAAY,UAAU,OAAO,QAAQ;YAChH,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,mBAAmB,WAAW,aAAa,YAAY,UAAU,OAAO,QAAQ,CAAC;QACnG,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE1C,OAAO,yBAAyB,OAAO,YAAY,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACI,YAAY,CAAC,SAAiB,EAAE,MAAgB;QACrD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,SAAS,EAAE,CAAC;QAC/E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,mCAAmC,OAAO,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,KAAK,CAAC,CAAC;QACrD,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,OAAO,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE/E,OAAO,0BAA0B,OAAO,YAAY,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,IAAY;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,OAKnB;QACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC;QAChE,MAAM,WAAW,GAAG,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC;QAEhE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;YACtD,IAAI,WAAW;gBAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,IAAI,0BAA0B,EAAE,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;QAC3D,IAAI,SAAS;YAAE,GAAG,IAAI,aAAa,SAAS,EAAE,CAAC;QAC/C,IAAI,WAAW;YAAE,GAAG,IAAI,YAAY,WAAW,EAAE,CAAC;QAElD,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,KAAK,CAAC,CAAC;QAC9C,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACpC,OAAO,2BAA2B,GAAG,EAAE,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"server-cmd.js","sourceRoot":"","sources":["../../src/server-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAmB;IACtD,IAAI,CAAC;QACH,QAAQ,CAAC,SAAS,UAAU,IAAI,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAW;IAC1D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,GAAG,GAAG,MAAM;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACrD,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;YACzC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAoBD;;;GAGG;AACH,MAAM,OAAO,WAAW;IACd,cAAc,CAAwB;IAE9C,YAAY,cAAqC;QAC/C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,IAAY,MAAM;QAChB,OAAO,IAAI,CAAC,cAAc,EAAE,WAAW,IAAI,QAAQ,CAAC;IACtD,CAAC;IAED;;OAEG;IACI,QAAQ;QACb,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,0CAA0C,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,OAA4B;QAC9C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACjC,sFAAsF;QACtF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,aAAa,IAAI,EAAE,CAAC;QAEnD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM;eAC9B,IAAI,CAAC,cAAc,EAAE,cAAc;eACnC,KAAK,CAAC;QACX,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc;eACxC,IAAI,CAAC,cAAc,EAAE,eAAe;eACpC,EAAE,CAAC;QACR,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU;eAChC,IAAI,CAAC,cAAc,EAAE,WAAW;eAChC,gBAAgB,CAAC;QACtB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;eACpC,IAAI,CAAC,cAAc,EAAE,cAAc;eACnC,CAAC,CAAC;QACP,MAAM,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG;gBACZ,kCAAkC,OAAO,EAAE;gBAC3C,aAAa,YAAY,EAAE;gBAC3B,aAAa,WAAW,EAAE;gBAC1B,gCAAgC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE;gBACpE,aAAa,UAAU,KAAK,YAAY,KAAK;aAC9C,CAAC;YACF,IAAI,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;YACxD,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;YACrD,IAAI,2BAA2B,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,2BAA2B,OAAO,CAAC,CAAC;YAC9H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,8BAA8B,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAC;QAC9H,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,OAAO,KAAK,CAAC,CAAC;QACnD,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,gBAAgB,OAAO,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEnF,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,QAAQ,CACN,GAAG,IAAI,CAAC,MAAM,iDAAiD,cAAc,UAAU,OAAO,EAAE,EAChG,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,KAAK,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,MAAM,cAAc,SAAS,YAAY,WAAW,aAAa,YAAY,UAAU,OAAO,QAAQ,CAAC;QACjI,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE1C,OAAO,yBAAyB,OAAO,YAAY,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACI,YAAY,CAAC,SAAiB,EAAE,MAAgB;QACrD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,SAAS,EAAE,CAAC;QAC/E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,mCAAmC,OAAO,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,KAAK,CAAC,CAAC;QACrD,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,OAAO,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE/E,OAAO,0BAA0B,OAAO,YAAY,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,IAAY;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;;;;OAKG;IACI,YAAY,CAAC,OAKnB;QACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACvC,MAAM,WAAW,GAAG,KAAK,CAAC;QAE1B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,wBAAwB,GAAG,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAEzD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,aAAa,UAAU,CAAC,MAAM,gBAAgB,CAAC,CAAC;QACpF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,QAAQ,CACN,GAAG,IAAI,CAAC,MAAM,mBAAmB,SAAS,UAAU,GAAG,YAAY,WAAW,QAAQ,EACtF,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QACJ,CAAC;QACD,OAAO,wBAAwB,GAAG,QAAQ,CAAC;IAC7C,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenbuddy/tb-admin",
-  "version": "1.0.12",
+  "version": "1.0.14",
   "description": "Remote admin CLI for TokenBuddy seller apps",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",

package/src/bootstrap-registry.ts

@@ -1,5 +1,9 @@
 import * as fs from "fs";
 
+/**
+ * admin CLI 用的 seller 注册表条目结构。
+ * 与 wallet-bootstrap 的 `SellerRegistryEntry` 字段一致，但 `name` 是必填的（CLI 需要展示）。
+ */
 export interface SellerRegistryEntry {
   id: string;
   name: string;
@@ -15,6 +19,9 @@ export interface SellerRegistryEntry {
   recommendedFor?: string[];
 }
 
+/**
+ * 完整 seller 注册表文档根结构。
+ */
 export interface SellerRegistryDocument {
   version: number;
   updatedAt?: string;
@@ -24,6 +31,13 @@ export interface SellerRegistryDocument {
   sellers: SellerRegistryEntry[];
 }
 
+/**
+ * 校验 seller 注册表数据一致性。
+ * 校验项：`version >= 1`、sellers 非空、ID 唯一、URL `https://`、`supportedProtocols` / `paymentMethods` 非空、`defaultSeller` 命中。
+ *
+ * @param doc 待校验的注册表
+ * @throws Error 任何一条不满足
+ */
 export function validateRegistryDocument(doc: SellerRegistryDocument): void {
   if (!doc.version || doc.version < 1) {
     throw new Error("seller registry version must be >= 1");
@@ -60,6 +74,13 @@ export function validateRegistryDocument(doc: SellerRegistryDocument): void {
   }
 }
 
+/**
+ * 从 JSON 文件加载 seller 注册表并校验。
+ *
+ * @param filePath 注册表 JSON 文件路径
+ * @returns 已校验的注册表
+ * @throws Error 文件读取 / 解析 / 校验失败
+ */
 export function loadRegistryFile(filePath: string): SellerRegistryDocument {
   const content = fs.readFileSync(filePath, "utf8");
   const doc = JSON.parse(content) as SellerRegistryDocument;

package/src/cli.ts

@@ -142,6 +142,20 @@ function loadYamlOrJsonFile(filePath: string): any {
   return YAML.load(fs.readFileSync(filePath, "utf8"));
 }
 
+function requireUpstreamModels(data: any): any[] {
+  if (!Array.isArray(data?.models)) {
+    throw new Error("operator upstream summary must contain top-level models array");
+  }
+  return data.models;
+}
+
+/**
+ * 构造 admin commander program，绑定所有 `tb-admin` 子命令（profile / registry / seller / config / backup 等）。
+ * 顶层选项支持 `--url` / `--token` / `--profile` / `--config`，与 `ConfigManager` 协同解析。
+ *
+ * @param configManager 配置管理器
+ * @returns 配置完整的 commander Command 实例
+ */
 export function buildAdminCli(configManager: ConfigManager): Command {
   const program = new Command();
   program
@@ -343,26 +357,31 @@ export function buildAdminCli(configManager: ConfigManager): Command {
   program
     .command("models")
     .description("List available upstream models")
-    .action(async () => {
+    .option("--json", "Print current upstream model summary as JSON")
+    .action(async (options) => {
       try {
         const client = getClient();
         const data = await client.get("/operator/admin/upstreams");
+        const models = requireUpstreamModels(data);
+        if (options.json) {
+          console.log(JSON.stringify({ models }, null, 2));
+          return;
+        }
         const table = new Table({ head: ["Model ID", "Input Price/1M", "Output Price/1M", "Streaming"] });
         
-        for (const ups of data.upstreams || []) {
-          for (const model of ups.models || []) {
-            table.push([
-              model.id,
-              `${model.inputPriceMicrosPer1m} micros`,
-              `${model.outputPriceMicrosPer1m} micros`,
-              model.streaming ? "Yes" : "No"
-            ]);
-          }
+        for (const model of models) {
+          table.push([
+            model.id,
+            `${model.inputPriceMicrosPer1m ?? "unknown"} micros`,
+            `${model.outputPriceMicrosPer1m ?? "unknown"} micros`,
+            model.streaming ? "Yes" : "No"
+          ]);
         }
         console.log("=== Upstream Model Configurations ===");
         console.log(table.toString());
       } catch (err: any) {
         console.error("Error:", err.message);
+        process.exit(1);
       }
     });
 
@@ -412,9 +431,6 @@ export function buildAdminCli(configManager: ConfigManager): Command {
           console.log("Auto-refreshing upstream model catalog (upstream URL or key changed)...");
           const refreshResp = await client.post("/operator/admin/upstreams/refresh", { autoModels: true });
           console.log(`  refreshed: ${refreshResp.refreshedModels ?? 0} models from upstream`);
-          if (refreshResp.upstreams && refreshResp.upstreams[0]?.error) {
-            throw new Error(`upstream refresh failed: ${refreshResp.upstreams[0].error}`);
-          }
         }
 
         const document = await getSellerConfig(client);
@@ -765,8 +781,8 @@ export function buildAdminCli(configManager: ConfigManager): Command {
     .description("Deploy a new machines instance on Fly.io")
     .option("--app <app>", "Fly.io app name (bypasses tb-seller- prefix; use tbs-<random> format)")
     .option("--region <region>", "Fly region (default: sin)", "sin")
-    .option("--image <image>", "Docker image name")
-    .option("--config <path>", "fly.toml config file path")
+    .requiredOption("--image <image>", "Published Docker image, for example registry.fly.io/tb-seller:<v>")
+    .requiredOption("--fly-config <path>", "Fly.io config file path, for example deploy/fly.io/fly.tb-seller.toml")
     .option("--volume-name <name>", "Persistent volume name")
     .option("--volume-size-gb <gb>", "Persistent volume size in GB", (v) => parseInt(v, 10))
     .option("--volume-id <id>", "Attach existing volume by ID (skips volume creation)")
@@ -780,7 +796,7 @@ export function buildAdminCli(configManager: ConfigManager): Command {
           app: options.app,
           region: options.region,
           image: options.image,
-          flyConfig: options.config,
+          flyConfig: options.flyConfig,
           volumeName: options.volumeName,
           volumeSizeGb: options.volumeSizeGb,
           volumeId: options.volumeId,
@@ -796,15 +812,13 @@ export function buildAdminCli(configManager: ConfigManager): Command {
 
   sellerCmd
     .command("deploy <app>")
-    .description("Redeploy an existing seller app on Fly.io (reads fly.toml from CWD)")
-    .option("--config <path>", "fly.toml config file path")
-    .option("--image <image>", "Docker image name")
+    .description("Update an existing seller app's Machines to an explicit image without changing Fly.io config or volumes")
+    .requiredOption("--image <image>", "Published Docker image, for example registry.fly.io/tb-seller:<v>")
     .option("--dry-run", "Dry run")
     .action((app, options) => {
       try {
         const res = flyProvider.deploySeller({
           app,
-          config: options.config,
           image: options.image,
           dryRun: options.dryRun
         });

package/src/client.ts

@@ -1,3 +1,7 @@
+/**
+ * admin CLI 调 wallet-bootstrap / seller 服务的轻量 HTTP 客户端。
+ * 内部封装 Bearer Token 鉴权、JSON 序列化、非 2xx 抛错的统一行为。
+ */
 export class AdminClient {
   private baseUrl: string;
   private token: string;

package/src/config.ts

@@ -3,36 +3,70 @@ import * as path from "path";
 import * as os from "os";
 import TOML from "@iarna/toml";
 
+/**
+ * admin CLI 单个 profile：远程 wallet-bootstrap / seller 服务的 URL + 鉴权 token。
+ */
 export interface AdminProfile {
+  /** 服务 base URL（如 `https://bootstrap.example.com`） */
   url: string;
+  /** 鉴权 token（脱敏写入配置文件） */
   token: string;
 }
 
+/**
+ * seller provider（如 Fly.io）的配置。
+ * 字段命名采用 snake_case 匹配 TOML 习惯。
+ */
 export interface SellerProviderConfig {
+  /** Fly.io API token */
   token?: string;
+  /** flyctl 可执行路径（默认从 PATH 解析） */
   flyctl_path?: string;
+  /** 默认 seller app 名称（创建新 seller 时复用） */
   default_app?: string;
+  /** 默认部署 region（如 `sin` / `nrt`） */
   default_region?: string;
+  /** 默认 Docker 镜像 */
   default_image?: string;
+  /** 默认 seller config YAML 路径 */
   default_config?: string;
+  /** seller operator 接口的 secret（写盘 / 重启用） */
   operator_secret?: string;
+  /** 持久化 volume 名 */
   volume_name?: string;
+  /** volume 容量（GB） */
   volume_size_gb?: number;
+  /** 已存在的 volume ID（attach 用） */
   volume_id?: string;
+  /** volume snapshot 保留天数 */
   volume_snapshot_retention_days?: number;
 }
 
+/**
+ * admin CLI 配置根结构。
+ * `default_profile` 缺省时使用第一个 profile。
+ */
 export interface AdminConfig {
   default_profile?: string;
   profiles: { [name: string]: AdminProfile };
   seller_providers?: { [name: string]: SellerProviderConfig };
 }
 
+/**
+ * 解析 admin CLI 的默认配置路径：`~/.config/tokenbuddy/admin.toml`。
+ * 兼容旧版 `~/.tokenbuddy/admin.json`（legacy JSON），由 `ConfigManager` 自动识别。
+ *
+ * @returns 配置文件绝对路径
+ */
 export function getDefaultConfigPath(): string {
   const home = os.homedir();
   return path.join(home, ".config", "tokenbuddy", "admin.toml");
 }
 
+/**
+ * admin CLI 配置的读写管理器（TOML 优先，legacy JSON 兼容）。
+ * 写盘时自动 chmod 0600（best effort）保护含 token 的配置文件。
+ */
 export class ConfigManager {
   private configPath: string;
 

package/src/index.ts

@@ -1,6 +1,9 @@
 import { ConfigManager } from "./config.js";
 import { buildAdminCli } from "./cli.js";
 
+/**
+ * admin CLI 入口：构造 `ConfigManager`、绑定 commander program、同步解析 argv。
+ */
 export function run() {
   const configManager = new ConfigManager();
   const program = buildAdminCli(configManager);

package/src/server-cmd.ts

@@ -1,6 +1,12 @@
 import { execSync } from "child_process";
 import { SellerProviderConfig } from "./config.js";
 
+/**
+ * 检查 flyctl 是否在 PATH 中（或在指定路径）。
+ *
+ * @param flyctlPath 可选 flyctl 完整路径
+ * @returns 是否可用
+ */
 export function checkFlyctlInstalled(flyctlPath?: string): boolean {
   try {
     execSync(`which ${flyctlPath || "flyctl"}`, { stdio: "ignore" });
@@ -10,6 +16,39 @@ export function checkFlyctlInstalled(flyctlPath?: string): boolean {
   }
 }
 
+export function parseFlyMachineIds(json: string, app: string): string[] {
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(json || "[]");
+  } catch {
+    throw new Error(`fly machines list returned invalid JSON for ${app}`);
+  }
+
+  if (!Array.isArray(parsed)) {
+    throw new Error(`fly machines list returned an unexpected shape for ${app}`);
+  }
+
+  const ids = parsed
+    .map((item) => {
+      if (item && typeof item === "object" && "id" in item) {
+        const id = (item as { id?: unknown }).id;
+        return typeof id === "string" && id.length > 0 ? id : undefined;
+      }
+      return undefined;
+    })
+    .filter((id): id is string => Boolean(id));
+
+  if (ids.length === 0) {
+    throw new Error(`fly app ${app} has no machines to update`);
+  }
+
+  return ids;
+}
+
+/**
+ * `FlyProvider.createSeller` 的输入。
+ * 字段未提供时回退到 `SellerProviderConfig` 的默认值。
+ */
 export interface SellerCreateOptions {
   name: string;
   app?: string;
@@ -24,6 +63,10 @@ export interface SellerCreateOptions {
   dryRun?: boolean;
 }
 
+/**
+ * Fly.io seller provider：把 admin CLI 的 `tb-admin server create` 命令转成 `flyctl` 调用。
+ * 支持 `dryRun` 模式：只打印会执行的命令而不实际修改 Fly 资源。
+ */
 export class FlyProvider {
   private providerConfig?: SellerProviderConfig;
 
@@ -53,18 +96,14 @@ export class FlyProvider {
     // --app overrides the auto-prefixed name; allows bare "tbs-86d81e" or "tb-seller-foo"
     const appName = options.app || `tb-seller-${name}`;
 
-    // Merge CLI options with provider config defaults
-    const targetImage = options.image
-      || this.providerConfig?.default_image
-      || "registry.fly.io/tb-seller:latest";
+    const targetImage = options.image;
     const targetRegion = options.region
       || this.providerConfig?.default_region
       || "sin";
     const operatorSecret = options.operatorSecret
       || this.providerConfig?.operator_secret
       || "";
-    const flyConfig = options.flyConfig
-      || this.providerConfig?.default_config;
+    const flyConfig = options.flyConfig;
     const volumeName = options.volumeName
       || this.providerConfig?.volume_name
       || "tb_seller_data";
@@ -74,6 +113,13 @@ export class FlyProvider {
     const volumeSnapshotRetentionDays = options.volumeSnapshotRetentionDays;
     const volumeId = options.volumeId;
 
+    if (!targetImage) {
+      throw new Error("seller create requires --image registry.fly.io/tb-seller:<v>");
+    }
+    if (!flyConfig) {
+      throw new Error("seller create requires --fly-config deploy/fly.io/fly.tb-seller.toml");
+    }
+
     if (dryRun) {
       const lines = [
         `[DRY-RUN] Will create fly app: ${appName}`,
@@ -106,9 +152,7 @@ export class FlyProvider {
     );
 
     console.log(`[Fly.io] Deploying image ${targetImage}...`);
-    let deployCmd = flyConfig
-      ? `${this.flyctl} deploy -c ${flyConfig} --image ${targetImage} --region ${targetRegion} --app ${appName} --now`
-      : `${this.flyctl} deploy --image ${targetImage} --region ${targetRegion} --app ${appName} --now`;
+    const deployCmd = `${this.flyctl} deploy -c ${flyConfig} --image ${targetImage} --region ${targetRegion} --app ${appName} --now`;
     execSync(deployCmd, { stdio: "inherit" });
 
     return `Successfully deployed ${appName} on Fly.io`;
@@ -148,7 +192,10 @@ export class FlyProvider {
   }
 
   /**
-   * Redeploy an existing seller app on Fly.io.
+   * Update an existing seller app's Machines to a new image.
+   *
+   * This intentionally does not call `fly deploy --config`: existing seller
+   * deploys must not reconcile volumes, mounts, or service configuration.
    */
   public deploySeller(options: {
     app: string;
@@ -156,14 +203,18 @@ export class FlyProvider {
     image?: string;
     dryRun?: boolean;
   }): string {
-    const { app, config, image, dryRun } = options;
-    const flyConfig = config || this.providerConfig?.default_config;
-    const targetImage = image || this.providerConfig?.default_image;
+    const { app, image, dryRun } = options;
+    const targetImage = image;
+
+    if (!targetImage) {
+      throw new Error("seller deploy requires --image registry.fly.io/tb-seller:<v>");
+    }
 
     if (dryRun) {
-      const lines = [`[DRY-RUN] Will redeploy app: ${app}`];
-      if (targetImage) lines.push(`  Image: ${targetImage}`);
-      lines.push(`  Config: ${flyConfig || "fly.toml (auto from CWD)"}`);
+      const lines = [`[DRY-RUN] Will update existing app machines: ${app}`];
+      lines.push(`  Image: ${targetImage}`);
+      lines.push("  Config: unchanged");
+      lines.push("  Volumes: unchanged");
       return lines.join("\n");
     }
 
@@ -171,12 +222,16 @@ export class FlyProvider {
       throw new Error(`\`${this.flyctl}\` is not installed.`);
     }
 
-    let cmd = `${this.flyctl} deploy --app ${app} --now --yes`;
-    if (flyConfig) cmd += ` --config ${flyConfig}`;
-    if (targetImage) cmd += ` --image ${targetImage}`;
+    const machinesJson = execSync(`${this.flyctl} machines list --app ${app} --json`, { encoding: "utf8" });
+    const machineIds = parseFlyMachineIds(machinesJson, app);
 
-    console.log(`[Fly.io] Redeploying ${app}...`);
-    execSync(cmd, { stdio: "inherit" });
-    return `Successfully redeployed ${app}`;
+    console.log(`[Fly.io] Updating ${app} image on ${machineIds.length} machine(s)...`);
+    for (const machineId of machineIds) {
+      execSync(
+        `${this.flyctl} machine update ${machineId} --app ${app} --image ${targetImage} --yes`,
+        { stdio: "inherit" }
+      );
+    }
+    return `Successfully updated ${app} image`;
   }
 }