@tutti-os/nexight-devops 0.5.4 → 0.6.0

package/README.md

@@ -39,8 +39,6 @@ nexight-devops datafinder dashboard export --count 100
 nexight-devops datafinder query shared-agent-summary --count 100
 nexight-devops datafinder query p2p-health --count 100
 nexight-devops datafinder query exec ./query.mjs -- arg1 arg2
-nexight-devops diagnose shared-agent --room-id <room-id> --at '2026-08-12T12:00:00+08:00'
-nexight-devops diagnose shared-agent --room-id <room-id> --at '2026-08-12T12:00:00+08:00' --json
 nexight-devops ppe-lane deploy
 nexight-devops ppe-lane destroy
 nexight-devops ppe-lane status
@@ -64,8 +62,7 @@ nexight-devops release rollback tutti-server
 - `admin computer logs` resolves an online Computer and bundles recall, polling, and temporary download into one Agent-friendly workflow.
 - `admin computer log-recall` exposes the lower-level task operations for troubleshooting and recovery.
 - `datafinder` validates access, reads dashboards/reports, runs trusted local JavaScript queries, and exposes fixed reliability queries.
-- `diagnose shared-agent` runs a bounded, read-only CloudWatch playbook that correlates room descriptor results, Owner lease observations, client version, and HTTP failures. It verifies the production AWS account before querying and supports stable `--json` output.
-- `ppe-lane deploy` deploys selected backend repositories, including `tutti-server`, and the optional `zk-web/canvas` staging artifact to a PPE lane.
+- `ppe-lane deploy` deploys selected backend repositories to a PPE lane. Supported targets are `tutti-server`, `zk-admin-server`, `account`, and `zk-websocket`.
 - `ppe-lane destroy` checks existing lane instances and triggers destroy workflows after a lane-name confirmation. `tutti-server` must be selected explicitly for destruction.
 - `ppe-lane status` queries AWS Cloud Map for one lane, or all lanes with `--all`, including `tutti-server`.
 - `release prepare`, `release hotfix`, and `release approve` run the controlled release lifecycle through GitHub Actions and approval issues.
@@ -83,6 +80,8 @@ nexight-devops release approve
 - `release hotfix` starts a controlled hotfix flow and supports an explicit override when release-branch patches have not yet been absorbed by `main`.
 - `release approve` posts the approval command to the pending release issue and advances the release.
 
+The controlled release targets are `account`, `zk-admin-server`, and `zk-websocket` in `zk-org-test`.
+
 ## Management Backend
 
 `admin auth login` stores the verified token in the CLI config with `0600` permissions. The API origin defaults to `https://tutti.sh`; an `admin.tutti.sh` page URL is normalized automatically. For CI or temporary access, use `NEXIGHT_ADMIN_TOKEN` or `TUTTI_ADMIN_TOKEN`, and optionally `NEXIGHT_ADMIN_URL` or `TUTTI_ADMIN_URL`.
@@ -127,19 +126,6 @@ nexight-devops admin computer log-recall get --computer-id <computer-id> --task-
 nexight-devops admin computer log-recall download --computer-id <computer-id> --task-id <task-id>
 ```
 
-## Shared Agent diagnosis
-
-```bash
-nexight-devops diagnose shared-agent \
-  --room-id <room-id> \
-  --at '2026-08-12T12:00:00+08:00' \
-  --shared-agent-id <shared-agent-id>
-```
-
-The default query window is 30 minutes centered on `--at`, capped at the current time. Use `--window-minutes` to change it; the command rejects windows over 24 hours. When an issued descriptor exposes the Owner device, the playbook derives the same pseudonymous reference as `tsh-server` and joins sampled Owner lease evidence without requiring an Owner diagnostics bundle. `--owner-device-id` or `--authority-id` can provide the join key when it is already known.
-
-The command is read-only. It returns partial results and explicit missing-evidence reasons when a secondary query fails or the Owner identity cannot be derived. Raw log lines are not included in the result.
-
 ## Development
 
 - Node.js 20+