@tutti-os/nexight-devops 0.5.4 → 0.6.1

package/README.md

@@ -39,8 +39,6 @@ nexight-devops datafinder dashboard export --count 100
 nexight-devops datafinder query shared-agent-summary --count 100
 nexight-devops datafinder query p2p-health --count 100
 nexight-devops datafinder query exec ./query.mjs -- arg1 arg2
-nexight-devops diagnose shared-agent --room-id <room-id> --at '2026-08-12T12:00:00+08:00'
-nexight-devops diagnose shared-agent --room-id <room-id> --at '2026-08-12T12:00:00+08:00' --json
 nexight-devops ppe-lane deploy
 nexight-devops ppe-lane destroy
 nexight-devops ppe-lane status
@@ -50,6 +48,10 @@ nexight-devops release hotfix
 nexight-devops release approve
 nexight-devops release rollback
 nexight-devops release rollback tutti-server
+nexight-devops release rollback platform-web
+nexight-devops release rollback platform-web --previous --yes --reason "entry failure"
+nexight-devops release rollback platform-web --version-id <uuid> --yes
+nexight-devops release rollback platform-web --probe
 ```
 
 ### Function overview
@@ -64,12 +66,12 @@ nexight-devops release rollback tutti-server
 - `admin computer logs` resolves an online Computer and bundles recall, polling, and temporary download into one Agent-friendly workflow.
 - `admin computer log-recall` exposes the lower-level task operations for troubleshooting and recovery.
 - `datafinder` validates access, reads dashboards/reports, runs trusted local JavaScript queries, and exposes fixed reliability queries.
-- `diagnose shared-agent` runs a bounded, read-only CloudWatch playbook that correlates room descriptor results, Owner lease observations, client version, and HTTP failures. It verifies the production AWS account before querying and supports stable `--json` output.
-- `ppe-lane deploy` deploys selected backend repositories, including `tutti-server`, and the optional `zk-web/canvas` staging artifact to a PPE lane.
+- `ppe-lane deploy` deploys selected backend repositories to a PPE lane. Supported targets are `tutti-server`, `zk-admin-server`, `account`, and `zk-websocket`.
 - `ppe-lane destroy` checks existing lane instances and triggers destroy workflows after a lane-name confirmation. `tutti-server` must be selected explicitly for destruction.
 - `ppe-lane status` queries AWS Cloud Map for one lane, or all lanes with `--all`, including `tutti-server`.
 - `release prepare`, `release hotfix`, and `release approve` run the controlled release lifecycle through GitHub Actions and approval issues.
-- `release rollback` lets you choose `tutti-server` interactively; `release rollback tutti-server` selects it directly. The command reads the current production image and up to ten recent Helm deployments directly when local read access to the production cluster is available. Otherwise it retrieves the verified list through GitHub Actions. The selected image is always revalidated and restored by GitHub Actions, followed by health checks. Use `--revision <number> --yes` with the explicit repository for scripted selection and confirmation.
+- `release rollback` lets you choose `tutti-server` or `platform-web` interactively. For `tutti-server`, the command reads the current production image and up to ten recent Helm deployments directly when local cluster read access is available, otherwise through GitHub Actions. The selected image is revalidated and restored by GitHub Actions, followed by health checks. Use `--revision <number> --yes` for scripted selection.
+- `release rollback platform-web` restores a retained, previously deployed Cloudflare Worker version through Tutti's lightweight `platform-web-rollback.yml`. It does not build, test, install packages, upload assets, or roll back ingress/storage. The interactive flow binds your confirmation to the displayed deployment ID; if production changes, execution refuses the stale selection. `--previous --yes` starts only one workflow and selects the latest eligible previous version from live history under the writer lock, excluding versions withdrawn by earlier recorded rollbacks. `--version-id <uuid> --yes` explicitly selects a previously deployed version, including a withdrawn version. `--yes` skips confirmation only. `--reason` records up to 200 UTF-8 bytes; missing historical SHA/run mappings remain unknown. Results distinguish deployment switching, public entry/assets, version/content identity, and unverified Room behavior, and include queue/setup, switch, verification, and total timings. `--probe` measures the same read-only production checks without changing traffic. The CLI needs GitHub access; Cloudflare credentials remain in the production environment's GitHub Secrets.
 
 ## Controlled Release
 
@@ -83,6 +85,8 @@ nexight-devops release approve
 - `release hotfix` starts a controlled hotfix flow and supports an explicit override when release-branch patches have not yet been absorbed by `main`.
 - `release approve` posts the approval command to the pending release issue and advances the release.
 
+The controlled release targets are `account`, `zk-admin-server`, and `zk-websocket` in `zk-org-test`.
+
 ## Management Backend
 
 `admin auth login` stores the verified token in the CLI config with `0600` permissions. The API origin defaults to `https://tutti.sh`; an `admin.tutti.sh` page URL is normalized automatically. For CI or temporary access, use `NEXIGHT_ADMIN_TOKEN` or `TUTTI_ADMIN_TOKEN`, and optionally `NEXIGHT_ADMIN_URL` or `TUTTI_ADMIN_URL`.
@@ -127,19 +131,6 @@ nexight-devops admin computer log-recall get --computer-id <computer-id> --task-
 nexight-devops admin computer log-recall download --computer-id <computer-id> --task-id <task-id>
 ```
 
-## Shared Agent diagnosis
-
-```bash
-nexight-devops diagnose shared-agent \
-  --room-id <room-id> \
-  --at '2026-08-12T12:00:00+08:00' \
-  --shared-agent-id <shared-agent-id>
-```
-
-The default query window is 30 minutes centered on `--at`, capped at the current time. Use `--window-minutes` to change it; the command rejects windows over 24 hours. When an issued descriptor exposes the Owner device, the playbook derives the same pseudonymous reference as `tsh-server` and joins sampled Owner lease evidence without requiring an Owner diagnostics bundle. `--owner-device-id` or `--authority-id` can provide the join key when it is already known.
-
-The command is read-only. It returns partial results and explicit missing-evidence reasons when a secondary query fails or the Owner identity cannot be derived. Raw log lines are not included in the result.
-
 ## Development
 
 - Node.js 20+