openship 0.5.0 → 0.6.0

package/dist/server/migrations/0089_auto_scan_infra.sql

@@ -0,0 +1,7 @@
+-- instance_settings.auto_scan_infra — when on (default), the dashboard runs one
+-- detect-only container scan on a relevant surface load (Infrastructure tab /
+-- home) if the cached drift state is stale, so the attention dot + issue list
+-- stay fresh without a manual Scan. Detect-only; auto-APPLY stays the separate
+-- auto_update_infra. Idempotent ADD COLUMN IF NOT EXISTS + DEFAULT true so both
+-- a clean create and an existing settings row converge on "on".
+ALTER TABLE "instance_settings" ADD COLUMN IF NOT EXISTS "auto_scan_infra" boolean DEFAULT true NOT NULL;

package/dist/server/migrations/0090_project_collect_paths.sql

@@ -0,0 +1,18 @@
+-- Top Paths becomes opt-in.
+--
+-- The per-path aggregation is the one analytics dimension that isn't effectively free.
+-- Measured on the shipped edge image, per request:
+--
+--   paths (whole block)     1.72 us   <- 57% of the log handler's counter path
+--     of which string work  1.38 us   normalize_path + is_static_asset
+--   minute buckets          0.61 us
+--   country                 0.24 us
+--   status                  0.14 us
+--
+-- It is also the highest-cardinality dimension (up to 2000 keys per domain per day) and
+-- the largest column in the daily rollup. So it is now a per-project switch, read on the
+-- hot path from the edge's `rules` shared dict and pushed there on every route apply.
+--
+-- DEFAULT false, which turns it off for existing projects as well. Deliberate: no one
+-- opted into the cost, so no one should keep paying it without asking.
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "collect_paths" boolean DEFAULT false NOT NULL;

package/dist/server/migrations/0091_project_server_id.sql

@@ -0,0 +1,26 @@
+-- Durable server ownership on the project.
+--
+-- A project's deploy target lived ONLY in the active deployment's volatile
+-- meta.serverId. When resolveSnapshotTarget couldn't re-derive that binding from
+-- a fresh/partial snapshot, the deploy fell back to "local", which then nulled
+-- the project's verified custom-domain ports and regressed the Access URL to
+-- localhost:3000. This makes the server binding a durable, first-class column.
+--
+-- cloudWorkspaceId still owns "is this a cloud project", so we deliberately do
+-- NOT add a deployTarget column (that would be a second source of truth for the
+-- same fact); the effective target is derived — cloudWorkspaceId ? "cloud" :
+-- server_id ? "server" : "local".
+--
+-- ON DELETE SET NULL: removing a server unbinds its projects rather than
+-- cascade-deleting them.
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "server_id" text REFERENCES "servers"("id") ON DELETE SET NULL;
+--> statement-breakpoint
+-- Backfill the binding from each project's active-deployment meta so existing
+-- server-hosted projects survive the next redeploy without regressing to local.
+UPDATE "project" SET "server_id" = (
+  SELECT d."meta"->>'serverId'
+  FROM "deployment" d
+  WHERE d."id" = "project"."active_deployment_id"
+)
+WHERE "server_id" IS NULL
+  AND "active_deployment_id" IS NOT NULL;

package/dist/server/migrations/0092_project_internal_alias.sql

@@ -0,0 +1,13 @@
+-- User-chosen internal DNS alias for a single-app native project.
+--
+-- Single-app containers now join their own `openship-<slug>` network with a
+-- stable default alias (`<slug>`), the same east-west reachability compose
+-- services already have. This column lets an operator add a custom hostname
+-- that resolves ALONGSIDE the default (both point at the container) — it never
+-- replaces the default and never changes public exposure (the edge stays the
+-- sole public ingress; publishing is loopback-only).
+--
+-- Nullable, no default: absence means "default alias only" and existing rows
+-- need no backfill. Compose services store the equivalent in the zero-migration
+-- `service.advanced.alias` JSONB, so only single-app needs a column.
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "internal_alias" text;

package/dist/server/migrations/0093_service_incident_org_index.sql

@@ -0,0 +1,13 @@
+-- Org-wide incident reads for the global issue tracker.
+--
+-- The existing indexes on this table are project-keyed (`idx_service_incident_project`)
+-- or exist to enforce the one-open-incident invariant. Both are wrong shapes for the
+-- new question: "every incident in THIS organization, newest first" — the Issues feed's
+-- Open tab and its Resolved tab, which sorts org-wide across up to 30 days of retained
+-- history. Without this the feed sequentially scans the whole table and filters, which
+-- gets slower exactly as an instance accumulates the history that makes the tab useful.
+--
+-- Covers both scopes: server-scoped rows have `project_id IS NULL`, so a project-keyed
+-- index can't serve them at all.
+CREATE INDEX IF NOT EXISTS "idx_service_incident_org"
+  ON "service_incident" ("organization_id", "opened_at" DESC);

package/dist/server/migrations/0094_backup_restore_meta.sql

@@ -0,0 +1,15 @@
+-- Record WHICH integrity check a restore actually performed.
+--
+-- Prepare used to comment that it verified every artifact's sha256 while
+-- comparing only byte sizes. Now that it really re-hashes the archive, the row
+-- has to say so — because the check is downgradeable (a run with no recorded
+-- digest falls back to size-only, and a policy can defer verification to apply
+-- time), and "restore succeeded" means something different in each case. An
+-- operator reading a month-old restore has no other way to tell a re-hashed
+-- archive from a length-matched one.
+--
+-- Keys written today: `integrity` ("sha256" | "size-only" | "deferred"),
+-- `verifiedBytes`, `verifyMs`, `manifest` ("verified" | "missing").
+-- JSONB rather than columns so the cancel/partial-write facts that follow need
+-- no further migration.
+ALTER TABLE "backup_restore" ADD COLUMN IF NOT EXISTS "meta" jsonb DEFAULT '{}'::jsonb;

package/dist/server/migrations/0095_backup_restore_cancel.sql

@@ -0,0 +1,19 @@
+-- Make "cancel a restore" durable.
+--
+-- Cancel used to be advisory at best: it refused `applying` outright, and for
+-- `preparing` it wrote the row while the running phase carried on and
+-- overwrote it with `prepared` — so the operator saw a cancel that never
+-- happened. Cancelling has to survive the phase it interrupts, and the node
+-- receiving the request is not guaranteed to be the node running the apply, so
+-- the in-process AbortController cannot be the only signal.
+--
+-- `cancel_requested_at` is also the force-terminal window: an `applying` row
+-- whose request is older than a couple of minutes (operator pressed cancel,
+-- waited, pressed again) can be force-terminaled without a second endpoint,
+-- which is the only escape from a wedged row that otherwise blocks project
+-- deletion.
+ALTER TABLE "backup_restore" ADD COLUMN IF NOT EXISTS "cancel_requested" boolean DEFAULT false NOT NULL;
+--> statement-breakpoint
+ALTER TABLE "backup_restore" ADD COLUMN IF NOT EXISTS "cancel_requested_at" timestamp;
+--> statement-breakpoint
+ALTER TABLE "backup_restore" ADD COLUMN IF NOT EXISTS "cancelled_at" timestamp;

package/dist/server/migrations/0096_backup_policy_retention_defaults.sql

@@ -0,0 +1,20 @@
+-- Turn retention on for policies that never said anything about it.
+--
+-- `retain_count` and `retain_days` were the only two fields on the policy
+-- insert with neither an API default nor a column default, so every policy
+-- created through the API or MCP stored NULL for both. `prunePolicy`
+-- short-circuits on "no retention configured", so retention silently never ran
+-- for those policies and their runs accumulated until the destination filled.
+-- The dashboard's form defaults to 7, so a human creating a policy in the UI
+-- got retention and the same policy created over the API did not.
+--
+-- 7 = the dashboard's own default (PolicyEditor), now shared as
+-- DEFAULT_RETAIN_COUNT so the column, the API fallback, and the form agree.
+--
+-- The backfill is what actually fixes instances running today, and it is
+-- narrowed to rows where BOTH fields are null: a policy with only `retain_days`
+-- set has retention configured deliberately, and writing a count there would
+-- silently tighten a window the operator chose.
+ALTER TABLE "backup_policy" ALTER COLUMN "retain_count" SET DEFAULT 7;
+--> statement-breakpoint
+UPDATE "backup_policy" SET "retain_count" = 7 WHERE "retain_count" IS NULL AND "retain_days" IS NULL;

package/dist/server/migrations/0097_update_status_upstream_only.sql

@@ -0,0 +1,35 @@
+-- update_status becomes an UPSTREAM-only cache.
+--
+-- The table used to cache both halves of the drift answer: what the source offers
+-- (upstream) and what is currently deployed. Only the first half is expensive and
+-- poll-only. The second half — `behind`, `latest_in_progress`, `current_label` —
+-- is derived from the project's ACTIVE deployment, which seven separate code paths
+-- write (deploy success, rollback, reconcile, activate, clear, self-deploy,
+-- migrate). Caching it meant each of those needed an invalidation hook; only one
+-- ever had it, so rows froze mid-window and the dashboard advertised updates for
+-- commits the operator had already shipped.
+--
+-- Those columns are now computed on read, so keeping them would leave a copy that
+-- looks authoritative while describing a superseded release. `latest_label` goes
+-- too: it's rendered from `detail` alongside the live current label, in one code
+-- path, so the two can never disagree.
+--
+-- Existing rows keep `detail`, but rows written before this migration carry only
+-- the 7-char sha prefix in the dropped `latest_label` — never a full `latestSha`
+-- in `detail` — so a commit row cannot be compared until it is re-polled. Clear
+-- them and let `updates:scan` (or the dashboard's explicit check) repopulate;
+-- until then those projects simply report no update, which is the conservative
+-- direction.
+DELETE FROM "update_status";
+--> statement-breakpoint
+DROP INDEX IF EXISTS "idx_update_status_org_behind";
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "idx_update_status_org" ON "update_status" ("organization_id");
+--> statement-breakpoint
+ALTER TABLE "update_status" DROP COLUMN IF EXISTS "behind";
+--> statement-breakpoint
+ALTER TABLE "update_status" DROP COLUMN IF EXISTS "latest_in_progress";
+--> statement-breakpoint
+ALTER TABLE "update_status" DROP COLUMN IF EXISTS "current_label";
+--> statement-breakpoint
+ALTER TABLE "update_status" DROP COLUMN IF EXISTS "latest_label";

package/dist/server/migrations/meta/_journal.json

@@ -575,6 +575,118 @@
       "when": 1786054907324,
       "tag": "0081_project_readiness_repair",
       "breakpoints": true
+    },
+    {
+      "idx": 82,
+      "version": "7",
+      "when": 1786141307324,
+      "tag": "0082_edge_target_verification",
+      "breakpoints": true
+    },
+    {
+      "idx": 83,
+      "version": "7",
+      "when": 1786227707324,
+      "tag": "0083_service_incident",
+      "breakpoints": true
+    },
+    {
+      "idx": 84,
+      "version": "7",
+      "when": 1786314107324,
+      "tag": "0084_analytics_daily_rollup",
+      "breakpoints": true
+    },
+    {
+      "idx": 85,
+      "version": "7",
+      "when": 1786400507324,
+      "tag": "0085_resource_usage",
+      "breakpoints": true
+    },
+    {
+      "idx": 86,
+      "version": "7",
+      "when": 1786486907324,
+      "tag": "0086_remote_infra_updates",
+      "breakpoints": true
+    },
+    {
+      "idx": 87,
+      "version": "7",
+      "when": 1786573307324,
+      "tag": "0087_server_container_version_columns",
+      "breakpoints": true
+    },
+    {
+      "idx": 88,
+      "version": "7",
+      "when": 1786659707324,
+      "tag": "0088_audit_source_and_settings",
+      "breakpoints": true
+    },
+    {
+      "idx": 89,
+      "version": "7",
+      "when": 1786746107324,
+      "tag": "0089_auto_scan_infra",
+      "breakpoints": true
+    },
+    {
+      "idx": 90,
+      "version": "7",
+      "when": 1786746107325,
+      "tag": "0090_project_collect_paths",
+      "breakpoints": true
+    },
+    {
+      "idx": 91,
+      "version": "7",
+      "when": 1786832507325,
+      "tag": "0091_project_server_id",
+      "breakpoints": true
+    },
+    {
+      "idx": 92,
+      "version": "7",
+      "when": 1786918907325,
+      "tag": "0092_project_internal_alias",
+      "breakpoints": true
+    },
+    {
+      "idx": 93,
+      "version": "7",
+      "when": 1787005307325,
+      "tag": "0093_service_incident_org_index",
+      "breakpoints": true
+    },
+    {
+      "idx": 94,
+      "version": "7",
+      "when": 1787091707325,
+      "tag": "0094_backup_restore_meta",
+      "breakpoints": true
+    },
+    {
+      "idx": 95,
+      "version": "7",
+      "when": 1787178107325,
+      "tag": "0095_backup_restore_cancel",
+      "breakpoints": true
+    },
+    {
+      "idx": 96,
+      "version": "7",
+      "when": 1787264507325,
+      "tag": "0096_backup_policy_retention_defaults",
+      "breakpoints": true
+    },
+    {
+      "idx": 97,
+      "version": "7",
+      "when": 1787350907325,
+      "tag": "0097_update_status_upstream_only",
+      "breakpoints": true
     }
   ]
 }

package/dist/setup-FA4PW4NU.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  SystemManager
+} from "./chunk-EP2TNALB.js";
+import "./chunk-GUQ3QCJ7.js";
+import "./chunk-IW2UKBVF.js";
+import "./chunk-ZCFVHA25.js";
+import "./chunk-QEH4QUBX.js";
+import "./chunk-I3DPMTSF.js";
+import "./chunk-VZ2ZHPS2.js";
+import "./chunk-3LDWWY7U.js";
+import "./chunk-OGY63DGD.js";
+import "./chunk-ZFJXPCQP.js";
+import "./chunk-OTLSJYAC.js";
+import "./chunk-PXKCZB2I.js";
+export {
+  SystemManager
+};

package/dist/{signin-ITOPKKUB.js → signin-3M3UPB6K.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env sh
-":" //# ; exec "$(command -v bun || command -v node)" "$0" "$@"
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
 import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   AwsRestJsonProtocol
-} from "./chunk-6B5YCFFV.js";
+} from "./chunk-RVER2EOO.js";
 import {
   NoAuthSigner,
   package_default
-} from "./chunk-DYPH4HCI.js";
-import "./chunk-EI575GHN.js";
+} from "./chunk-AO252K7Z.js";
+import "./chunk-PDW4L3NV.js";
 import {
   AwsSdkSigV4Signer,
   DefaultIdentityProviderConfig,
@@ -19,10 +19,10 @@ import {
   getSchemaSerdePlugin,
   resolveAwsSdkSigV4Config,
   streamCollector
-} from "./chunk-IXCHURVK.js";
+} from "./chunk-DOD2BXHQ.js";
 import {
   NodeHttpHandler
-} from "./chunk-OWED2GRM.js";
+} from "./chunk-42WQABXM.js";
 import {
   BinaryDecisionDiagram,
   Client,
@@ -56,7 +56,7 @@ import {
   resolveHostHeaderConfig,
   resolveRetryConfig,
   resolveUserAgentConfig
-} from "./chunk-VWPEKOH6.js";
+} from "./chunk-DRK3MEDS.js";
 import {
   NODE_REGION_CONFIG_FILE_OPTIONS,
   NODE_REGION_CONFIG_OPTIONS,
@@ -72,7 +72,7 @@ import {
   resolveDefaultsModeConfig,
   resolveHttpHandlerRuntimeConfig,
   resolveRegionConfig
-} from "./chunk-W73X43R7.js";
+} from "./chunk-3NQQXMDR.js";
 import {
   Hash,
   calculateBodyLength,
@@ -80,8 +80,8 @@ import {
   fromUtf8,
   toBase64,
   toUtf8
-} from "./chunk-JYGD5WSN.js";
-import "./chunk-KI2EY3WB.js";
+} from "./chunk-ZWLDLTJP.js";
+import "./chunk-PXKCZB2I.js";
 
 // ../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/auth/httpAuthSchemeProvider.js
 var defaultSigninHttpAuthSchemeParametersProvider = async (config, context, input) => {

package/dist/{sso-oidc-NON2PD7Y.js → sso-oidc-3VDIYOEJ.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env sh
-":" //# ; exec "$(command -v bun || command -v node)" "$0" "$@"
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
 import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   AwsRestJsonProtocol
-} from "./chunk-6B5YCFFV.js";
+} from "./chunk-RVER2EOO.js";
 import {
   NoAuthSigner,
   package_default
-} from "./chunk-DYPH4HCI.js";
-import "./chunk-EI575GHN.js";
+} from "./chunk-AO252K7Z.js";
+import "./chunk-PDW4L3NV.js";
 import {
   AwsSdkSigV4Signer,
   DefaultIdentityProviderConfig,
@@ -19,10 +19,10 @@ import {
   getSchemaSerdePlugin,
   resolveAwsSdkSigV4Config,
   streamCollector
-} from "./chunk-IXCHURVK.js";
+} from "./chunk-DOD2BXHQ.js";
 import {
   NodeHttpHandler
-} from "./chunk-OWED2GRM.js";
+} from "./chunk-42WQABXM.js";
 import {
   BinaryDecisionDiagram,
   Client,
@@ -56,7 +56,7 @@ import {
   resolveHostHeaderConfig,
   resolveRetryConfig,
   resolveUserAgentConfig
-} from "./chunk-VWPEKOH6.js";
+} from "./chunk-DRK3MEDS.js";
 import {
   NODE_REGION_CONFIG_FILE_OPTIONS,
   NODE_REGION_CONFIG_OPTIONS,
@@ -72,7 +72,7 @@ import {
   resolveDefaultsModeConfig,
   resolveHttpHandlerRuntimeConfig,
   resolveRegionConfig
-} from "./chunk-W73X43R7.js";
+} from "./chunk-3NQQXMDR.js";
 import {
   Hash,
   calculateBodyLength,
@@ -80,8 +80,8 @@ import {
   fromUtf8,
   toBase64,
   toUtf8
-} from "./chunk-JYGD5WSN.js";
-import "./chunk-KI2EY3WB.js";
+} from "./chunk-ZWLDLTJP.js";
+import "./chunk-PXKCZB2I.js";
 
 // ../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/auth/httpAuthSchemeProvider.js
 var defaultSSOOIDCHttpAuthSchemeParametersProvider = async (config, context, input) => {

package/dist/{sts-HHFFSAY2.js → sts-B3WIYLXR.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env sh
-":" //# ; exec "$(command -v bun || command -v node)" "$0" "$@"
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
 import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   NoAuthSigner,
   package_default
-} from "./chunk-DYPH4HCI.js";
+} from "./chunk-AO252K7Z.js";
 import {
   SignatureV4MultiRegion,
   XmlShapeDeserializer
-} from "./chunk-6APIPIJY.js";
+} from "./chunk-QWHBRY2K.js";
 import {
   AwsSdkSigV4ASigner,
   AwsSdkSigV4Signer,
@@ -24,10 +24,10 @@ import {
   resolveAwsSdkSigV4AConfig,
   resolveAwsSdkSigV4Config,
   streamCollector
-} from "./chunk-IXCHURVK.js";
+} from "./chunk-DOD2BXHQ.js";
 import {
   NodeHttpHandler
-} from "./chunk-OWED2GRM.js";
+} from "./chunk-42WQABXM.js";
 import {
   BinaryDecisionDiagram,
   Client,
@@ -64,7 +64,7 @@ import {
   resolveUserAgentConfig,
   setCredentialFeature,
   stsRegionDefaultResolver
-} from "./chunk-VWPEKOH6.js";
+} from "./chunk-DRK3MEDS.js";
 import {
   NODE_REGION_CONFIG_FILE_OPTIONS,
   NODE_REGION_CONFIG_OPTIONS,
@@ -86,7 +86,7 @@ import {
   resolveDefaultsModeConfig,
   resolveHttpHandlerRuntimeConfig,
   resolveRegionConfig
-} from "./chunk-W73X43R7.js";
+} from "./chunk-3NQQXMDR.js";
 import {
   Hash,
   NumericValue,
@@ -97,8 +97,8 @@ import {
   generateIdempotencyToken,
   toBase64,
   toUtf8
-} from "./chunk-JYGD5WSN.js";
-import "./chunk-KI2EY3WB.js";
+} from "./chunk-ZWLDLTJP.js";
+import "./chunk-PXKCZB2I.js";
 
 // ../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/bdd.js
 var q = "ref";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openship",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Openship CLI - deploy, manage, and open your Openship platform from the terminal",
   "license": "Apache-2.0",
   "repository": {
@@ -18,7 +18,7 @@
   ],
   "type": "module",
   "bin": {
-    "openship": "./dist/index.js"
+    "openship": "./dist/node-entry.js"
   },
   "files": [
     "dist",
@@ -26,6 +26,7 @@
   ],
   "scripts": {
     "build": "tsup && bun run build/stage-server.ts",
+    "build:payload": "tsup && bun run build/stage-server.ts && bun run build/stage-cli-payload.ts",
     "cli": "bun dist/index.js",
     "dev": "bun run build && bun run build/stage-dashboard.ts && OPENSHIP_DASHBOARD_DIR=\"$(cd ../dashboard/.next/standalone && pwd)\" bun dist/index.js",
     "lint": "tsc --noEmit",
@@ -35,11 +36,13 @@
     "prepack": "cp ../../README.md README.md"
   },
   "dependencies": {
+    "@bomb.sh/tab": "^0.0.22",
     "@clack/prompts": "^0.11.0",
-    "commander": "^14.0.3",
     "chalk": "^5.6.2",
+    "commander": "^14.0.3",
     "dockerode": "^4.0.9",
     "open": "^10.2.0",
+    "openship": "^0.5.0",
     "ora": "^9.3.0",
     "ssh2": "^1.17.0"
   },

package/dist/bare-VRGE5MXH.js

@@ -1,23 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v bun || command -v node)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-import {
-  BareRuntime,
-  STATIC_RELEASE_BASE
-} from "./chunk-YWMODKWL.js";
-import "./chunk-KNTJ7PSF.js";
-import "./chunk-KZOBYJUW.js";
-import "./chunk-I6PSTQIR.js";
-import "./chunk-K2RPVGPN.js";
-import "./chunk-ZCOQJCZO.js";
-import "./chunk-RPHRPFEH.js";
-import "./chunk-TYVME3XD.js";
-import "./chunk-FPRHYBY2.js";
-import "./chunk-ILFETZOM.js";
-import "./chunk-UMQP7SYT.js";
-import "./chunk-KI2EY3WB.js";
-export {
-  BareRuntime,
-  STATIC_RELEASE_BASE
-};