@tutti-os/nexight-devops 0.5.3 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +7 -20
  2. package/dist/cli.js +717 -1640
  3. package/dist/cli.js.map +1 -1
  4. package/package.json +3 -3
package/README.md CHANGED
@@ -39,8 +39,6 @@ nexight-devops datafinder dashboard export --count 100
39
39
  nexight-devops datafinder query shared-agent-summary --count 100
40
40
  nexight-devops datafinder query p2p-health --count 100
41
41
  nexight-devops datafinder query exec ./query.mjs -- arg1 arg2
42
- nexight-devops diagnose shared-agent --room-id <room-id> --at '2026-08-12T12:00:00+08:00'
43
- nexight-devops diagnose shared-agent --room-id <room-id> --at '2026-08-12T12:00:00+08:00' --json
44
42
  nexight-devops ppe-lane deploy
45
43
  nexight-devops ppe-lane destroy
46
44
  nexight-devops ppe-lane status
@@ -48,6 +46,7 @@ nexight-devops ppe-lane status --all
48
46
  nexight-devops release prepare
49
47
  nexight-devops release hotfix
50
48
  nexight-devops release approve
49
+ nexight-devops release rollback
51
50
  nexight-devops release rollback tutti-server
52
51
  ```
53
52
 
@@ -63,12 +62,11 @@ nexight-devops release rollback tutti-server
63
62
  - `admin computer logs` resolves an online Computer and bundles recall, polling, and temporary download into one Agent-friendly workflow.
64
63
  - `admin computer log-recall` exposes the lower-level task operations for troubleshooting and recovery.
65
64
  - `datafinder` validates access, reads dashboards/reports, runs trusted local JavaScript queries, and exposes fixed reliability queries.
66
- - `diagnose shared-agent` runs a bounded, read-only CloudWatch playbook that correlates room descriptor results, Owner lease observations, client version, and HTTP failures. It verifies the production AWS account before querying and supports stable `--json` output.
67
- - `ppe-lane deploy` deploys selected backend repositories and the optional `zk-web/canvas` staging artifact to a PPE lane.
68
- - `ppe-lane destroy` checks existing lane instances and triggers destroy workflows after a lane-name confirmation.
69
- - `ppe-lane status` queries AWS Cloud Map for one lane, or all lanes with `--all`.
65
+ - `ppe-lane deploy` deploys selected backend repositories to a PPE lane. Supported targets are `tutti-server`, `zk-admin-server`, `account`, and `zk-websocket`.
66
+ - `ppe-lane destroy` checks existing lane instances and triggers destroy workflows after a lane-name confirmation. `tutti-server` must be selected explicitly for destruction.
67
+ - `ppe-lane status` queries AWS Cloud Map for one lane, or all lanes with `--all`, including `tutti-server`.
70
68
  - `release prepare`, `release hotfix`, and `release approve` run the controlled release lifecycle through GitHub Actions and approval issues.
71
- - `release rollback tutti-server` reads the current production image and up to ten recent Helm deployments directly when local read access to the production cluster is available. Otherwise it retrieves the verified list through GitHub Actions. The selected image is always revalidated and restored by GitHub Actions, followed by health checks. Use `--revision <number> --yes` for scripted selection and confirmation.
69
+ - `release rollback` lets you choose `tutti-server` interactively; `release rollback tutti-server` selects it directly. The command reads the current production image and up to ten recent Helm deployments directly when local read access to the production cluster is available. Otherwise it retrieves the verified list through GitHub Actions. The selected image is always revalidated and restored by GitHub Actions, followed by health checks. Use `--revision <number> --yes` with the explicit repository for scripted selection and confirmation.
72
70
 
73
71
  ## Controlled Release
74
72
 
@@ -82,6 +80,8 @@ nexight-devops release approve
82
80
  - `release hotfix` starts a controlled hotfix flow and supports an explicit override when release-branch patches have not yet been absorbed by `main`.
83
81
  - `release approve` posts the approval command to the pending release issue and advances the release.
84
82
 
83
+ The controlled release targets are `account`, `zk-admin-server`, and `zk-websocket` in `zk-org-test`.
84
+
85
85
  ## Management Backend
86
86
 
87
87
  `admin auth login` stores the verified token in the CLI config with `0600` permissions. The API origin defaults to `https://tutti.sh`; an `admin.tutti.sh` page URL is normalized automatically. For CI or temporary access, use `NEXIGHT_ADMIN_TOKEN` or `TUTTI_ADMIN_TOKEN`, and optionally `NEXIGHT_ADMIN_URL` or `TUTTI_ADMIN_URL`.
@@ -126,19 +126,6 @@ nexight-devops admin computer log-recall get --computer-id <computer-id> --task-
126
126
  nexight-devops admin computer log-recall download --computer-id <computer-id> --task-id <task-id>
127
127
  ```
128
128
 
129
- ## Shared Agent diagnosis
130
-
131
- ```bash
132
- nexight-devops diagnose shared-agent \
133
- --room-id <room-id> \
134
- --at '2026-08-12T12:00:00+08:00' \
135
- --shared-agent-id <shared-agent-id>
136
- ```
137
-
138
- The default query window is 30 minutes centered on `--at`, capped at the current time. Use `--window-minutes` to change it; the command rejects windows over 24 hours. When an issued descriptor exposes the Owner device, the playbook derives the same pseudonymous reference as `tsh-server` and joins sampled Owner lease evidence without requiring an Owner diagnostics bundle. `--owner-device-id` or `--authority-id` can provide the join key when it is already known.
139
-
140
- The command is read-only. It returns partial results and explicit missing-evidence reasons when a secondary query fails or the Owner identity cannot be derived. Raw log lines are not included in the result.
141
-
142
129
  ## Development
143
130
 
144
131
  - Node.js 20+