openship 0.6.1 → 0.6.6

package/README.md

@@ -77,10 +77,13 @@ From the desktop app you connect a server (SSH) or Openship Cloud and deploy to
 Install the CLI (it bundles the API + dashboard), then run **`openship`** — an interactive wizard creates the first admin, wires your domain, and installs Openship as a boot service. Run it again anytime to manage the instance.
 
 ```bash
-curl -fsSL https://get.openship.io | sh          # install  (or: npm i -g openship)
+curl -fsSL https://get.openship.io | sh          # install  (or: npm i -g openship — needs Node 22+)
 openship                                          # guided setup, then control panel
 ```
 
+The install script brings its own Node when your system one is older than 22; a package-manager
+install runs on the Node you already have.
+
 For CI / headless boxes, skip the wizard and drive `openship up` directly:
 
 ```bash
@@ -154,7 +157,9 @@ docker compose --env-file .env -f docker/docker-compose.yml up -d
 
 The stack is **postgres + redis + api + dashboard + edge**. The `edge` is OpenResty on **:80/:443** as a container (`network_mode: host`) — routing + Let's Encrypt, no bare host install. **Linux only** (host networking); on mac/win use `openship up` (bare). The `api` container mounts the host Docker socket so the control plane can build + run your apps as host containers — it's host-privileged through the socket, so run it only on a trusted host.
 
-**Upgrade:** pin `OPENSHIP_VERSION` in `.env` for reproducible pulls, then `docker compose --env-file .env -f docker/docker-compose.yml pull && … up -d` (or just `openship update`). **Build from source instead:** add `-f docker/docker-compose.build.yml … up -d --build`.
+**Upgrade:** pin `OPENSHIP_VERSION` in `.env` for reproducible pulls, then `docker compose --env-file .env -f docker/docker-compose.yml pull && … up -d`. `openship update` only reconciles a stack the CLI installed, and `openship up` would *adopt* this one — don't reach for either here. **Build from source instead:** add `-f docker/docker-compose.build.yml … up -d --build`.
+
+**Host operations** (`:80`/`:443` takeover, the mail engine, host terminal/port scans) need the container→host SSH channel, which `openship up` provisions and this path does not — the five manual steps are in `.env.example` under *Host operations from the container*, and the failure it produces is [Troubleshooting → Host control channel](https://openship.io/docs/troubleshooting/host-channel). Everything else, including deploys, works without it.
 
 > The **root** `docker-compose.yml` is a different file: it's the SaaS / from-source **control plane** (builds from source, ships the marketing site, no edge/socket). It does **not** self-host your apps — use `docker/docker-compose.yml` above or `openship up`.
 

package/dist/{bare-IWS2QHJ3.js → bare-OXJVW3AK.js}

@@ -5,17 +5,19 @@ const require = __ospCreateRequire(import.meta.url);
 import {
   BareRuntime,
   STATIC_RELEASE_BASE
-} from "./chunk-IXM5245F.js";
-import "./chunk-JIMUYEKN.js";
-import "./chunk-IW2UKBVF.js";
-import "./chunk-VDDMADOF.js";
-import "./chunk-UC7YIEHT.js";
-import "./chunk-6ODUBKUB.js";
-import "./chunk-ZCFVHA25.js";
+} from "./chunk-LFE5KQ7Y.js";
+import "./chunk-YIMOCZBZ.js";
+import "./chunk-LH2PLRQO.js";
+import "./chunk-MLYSEZQB.js";
+import "./chunk-Q7WGTQQ5.js";
+import "./chunk-PCPVTH6M.js";
 import "./chunk-6FH4AXVY.js";
-import "./chunk-3LDWWY7U.js";
+import "./chunk-4I2BM2DT.js";
+import "./chunk-YMMQRE5J.js";
+import "./chunk-UVNMQM7W.js";
 import "./chunk-ZFJXPCQP.js";
-import "./chunk-OTLSJYAC.js";
+import "./chunk-SM26HDS2.js";
+import "./chunk-UJ6JZM65.js";
 import "./chunk-PXKCZB2I.js";
 export {
   BareRuntime,

package/dist/{chunk-VZ2ZHPS2.js → chunk-2YM3NI2E.js}

@@ -5,11 +5,12 @@ const require = __ospCreateRequire(import.meta.url);
 import {
   describeProcess,
   probeListeningPort,
+  tryExec,
   waitForPortFree
-} from "./chunk-3LDWWY7U.js";
+} from "./chunk-SM26HDS2.js";
 import {
   AppError
-} from "./chunk-OTLSJYAC.js";
+} from "./chunk-UJ6JZM65.js";
 
 // ../../packages/adapters/src/system/proxy/detect.ts
 var EDGE_PORTS = [80, 443];
@@ -33,13 +34,6 @@ var EdgeMigrateRequested = class extends Error {
     this.name = "EdgeMigrateRequested";
   }
 };
-async function tryExec(executor, command) {
-  try {
-    return await executor.exec(command);
-  } catch {
-    return null;
-  }
-}
 function classifyProxy(text) {
   if (!text) return void 0;
   const t = text.toLowerCase();

package/dist/chunk-4I2BM2DT.js

@@ -0,0 +1,68 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  hostRefusal
+} from "./chunk-YMMQRE5J.js";
+import {
+  elevatedExecutor,
+  resolveEnvironment
+} from "./chunk-UVNMQM7W.js";
+import {
+  answered,
+  refused
+} from "./chunk-UJ6JZM65.js";
+
+// ../../packages/adapters/src/system/privilege.ts
+function rootChecked(executor, why) {
+  void why;
+  return executor;
+}
+var REFUSES_HOST = {
+  refuse: true,
+  proceed: false
+};
+async function privilegedExecutor(executor, purpose, opts = {}) {
+  const profile = await resolveEnvironment(executor);
+  const refusal = hostRefusal(profile);
+  if (refusal && REFUSES_HOST[opts.onRefusedHost ?? "refuse"]) return refused(refusal);
+  const grant = (elevation, why, exec = executor) => answered({ executor: rootChecked(exec, why), profile, elevation });
+  if (profile.isRoot) return grant("root", "the login is root");
+  if (profile.canSudo) {
+    return grant("sudo", "non-root login with passwordless sudo", elevatedExecutor(executor));
+  }
+  if (refusal) return grant("none", "caller chose to proceed unprivileged on a refused host");
+  return refused(
+    `${purpose} needs root. Connect this server as root, or as a user with passwordless sudo.`
+  );
+}
+async function rootOrDegrade(executor, opts) {
+  const grant = await privilegedExecutor(executor, opts.purpose, {
+    // A host we won't PROVISION we can still write files on — none of this installs
+    // packages. Refusing here would take a working edge away from an openSUSE box.
+    onRefusedHost: "proceed"
+  }).catch((err) => {
+    opts.report(
+      `${opts.purpose}: could not check this host's privileges (${err instanceof Error ? err.message : String(err)}). ${opts.consequence}`
+    );
+    return null;
+  });
+  if (!grant) return rootChecked(executor, "host unmeasurable; reported and degraded");
+  if (!grant.supported) {
+    opts.report(`${grant.reason} ${opts.consequence}`);
+    return rootChecked(executor, "gate refused the host; reported and degraded");
+  }
+  if (grant.value.elevation === "none") {
+    opts.report(
+      `${opts.purpose} needs root, and this host's login is neither root nor able to sudo. ${opts.consequence}`
+    );
+  }
+  return grant.value.executor;
+}
+
+export {
+  rootChecked,
+  privilegedExecutor,
+  rootOrDegrade
+};