pockethost 3.1.0 → 4.1.0

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 Formerly published as `phio`. Versions below 3.0.0 are phio's history.
 
+## 4.1.0
+
+### Minor Changes
+
+- New file commands that work over HTTPS with your token, replacing SFTP:
+  - `pockethost files [path] [-r]` lists files on the instance.
+  - `pockethost pull [paths...]` downloads files into the current folder (everything except `pb_data` by default;
+    `--data` includes it, and `node_modules` is skipped unless you name it). Files that haven't changed since the last
+    pull are skipped.
+  - `pockethost upload <local> [remote]` uploads a file or folder, for example an existing `pb_data` or your
+    `node_modules` (deploys never touch `node_modules`). Large files go up in 32 MB chunks, eight files at a time.
+  - `pockethost rm <paths...> [-r]` deletes files, for example a migration that keeps the instance from starting.
+  - Add `-I <instance>` to target an instance other than the linked one. `pb_data` needs the instance powered off.
+- `pockethost sftp`, `deploy --sftp` and `dev --sftp` print a notice: SFTP shuts down on February 6, 2027.
+
+## 4.0.0
+
+### Major Changes
+
+- The CLI signs in with a personal access token only. Email/password login is gone: `pockethost login` opens
+  Account → API Tokens and saves the token you paste (`pockethost login <token>` works too), and
+  `POCKETHOST_USERNAME`/`POCKETHOST_PASSWORD` are ignored with a message pointing to `POCKETHOST_TOKEN`. A login saved
+  by 3.x no longer works; run `pockethost login` once.
+- `list`, `link` and `logs` work with a token and show only the instances the token can reach. `logs` streams over
+  the instance's HTTPS endpoint, so it works from CI.
+- `sftp`, `deploy --sftp` and `dev --sftp` no longer register an SSH key for you, because tokens can't add SSH keys.
+  Add the CLI's public key under Account → Keys once; the CLI prints it when it's missing. Keys registered by earlier
+  versions keep working.
+- `info` shows the token, linked instance and whether the SFTP key is on your account.
+- Dropped the `pocketbase` dependency.
+
 ## 3.1.0
 
 ### Minor Changes

package/LICENSE.md

@@ -0,0 +1,16 @@
+The MIT License (MIT)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software
+and associated documentation files (the "Software"), to deal in the Software without restriction,
+including without limitation the rights to use, copy, modify, merge, publish, distribute,
+sublicense, and/or sell copies of the Software, and to permit persons to whom the Software
+is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or
+substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
+BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -16,14 +16,14 @@ npm install -g pockethost
 npm rm -g phio && npm i -g pockethost
 ```
 
-Everything carries over on first run: your login and deploy key are copied from phio's config folder (`~/.config/phio-nodejs` on Linux), `.phioconfig` is
+Your deploy key is copied from phio's config folder (`~/.config/phio-nodejs` on Linux), `.phioconfig` is
 renamed to `.pockethostconfig` (commit it), and the `PHIO_*` environment variables keep working with a warning until
 you rename them to `POCKETHOST_*`.
 
 ## Commands
 
 ```bash
-pockethost login             # or: pockethost login --token
+pockethost login [token]     # save a personal access token
 pockethost token [set|clear|status]
 pockethost logout
 pockethost info          # alias: pockethost whoami
@@ -31,14 +31,23 @@ pockethost list          # alias: pockethost ls
 pockethost link [instance]
 pockethost dev [instance]
 pockethost deploy [instance]
-pockethost sftp [instance]
+pockethost files [path]
+pockethost pull [paths...]
+pockethost upload <local> [remote]
+pockethost rm <paths...>
+pockethost sftp [instance]   # shuts down Feb 6, 2027
 pockethost logs [instance]
 ```
 
 - **`pockethost dev`**: watch local changes and deploy them
 - **`pockethost deploy`**: deploy once
-- **`pockethost token`**: save, clear, or check a personal access token
-- **`pockethost sftp`**: interactive SFTP session (uses system `sftp` when available)
+- **`pockethost login`**: open Account → API Tokens and save the token you paste
+- **`pockethost token`**: save, clear, or check the token
+- **`pockethost files`**: list files on the instance (`-r` for everything below a folder)
+- **`pockethost pull`**: download instance files into this folder (`--data` includes `pb_data`)
+- **`pockethost upload`**: upload a file or folder, such as an existing `pb_data`
+- **`pockethost rm`**: delete files on the instance
+- **`pockethost sftp`**: interactive SFTP session. SFTP shuts down on February 6, 2027
 - **`pockethost logs`**: tail instance logs
 
 `dev` and `deploy` accept `-v/--verbose`, `-i/--include`, `-e/--exclude`, and `--sftp` (sync over SFTP instead of
@@ -84,13 +93,16 @@ on the instance that aren't in your project are removed. `node_modules` and `.gi
 
 ## Authentication
 
-`deploy` and `dev` use, in order:
+The CLI signs in with a personal access token (`ph_pat_…`) only. Every command uses, in order:
 
-1. `POCKETHOST_TOKEN` (a personal access token, `ph_pat_…`)
-2. a token saved with `pockethost token set` (or `pockethost login --token`)
-3. your email/password login (`pockethost login`, or `POCKETHOST_USERNAME`/`POCKETHOST_PASSWORD`)
+1. `POCKETHOST_TOKEN`
+2. the token saved by `pockethost login` (or `pockethost token set`)
 
-Create tokens under Account → API Tokens in the dashboard. Deploy from GitHub Actions:
+Create tokens under [Account → API Tokens](https://app.pockethost.io/account/tokens). A token sees only the instances
+you give it; `list`, `link` and `logs` need read access, `deploy` and `dev` need write access. Email/password login
+was removed in 4.0.
+
+Deploy from GitHub Actions:
 
 ```yaml
 - run: npx pockethost@latest deploy myapp-${{ github.ref_name }}
@@ -100,12 +112,14 @@ Create tokens under Account → API Tokens in the dashboard. Deploy from GitHub
 
 Docs: https://pockethost.io/docs/deploy-from-ci
 
-## Deploy key (`--sftp` and `pockethost sftp`)
+## SSH key (`--sftp` and `pockethost sftp`)
 
-`pockethost dev --sftp`, `pockethost deploy --sftp` and `pockethost sftp` use **SFTP** (`ftp.pockethost.io:2222`) using an Ed25519 deploy key
-stored under `POCKETHOST_HOME` (default `~/.config/pockethost/`). The CLI auto-registers a **`PocketHost CLI`** key
-under Account → Keys on first use (an existing **`Phio`** key from phio is reused). Run `pockethost info` to inspect
-key status.
+`pockethost dev --sftp`, `pockethost deploy --sftp` and `pockethost sftp` use **SFTP** (`ftp.pockethost.io:2222`)
+with an Ed25519 key stored under `POCKETHOST_HOME` (default `~/.config/pockethost/`), created on first use. Tokens
+can't add SSH keys, so add the public key (`pockethost_deploy_ed25519.pub`) under
+[Account → Keys](https://app.pockethost.io/account/keys) once; the CLI prints it if it's missing. Keys you registered
+with an earlier version (`PocketHost CLI` or `Phio`) keep working. `pockethost info` shows whether the key is on your
+account.
 
 Customer docs: https://pockethost.io/docs/cli
 
@@ -113,16 +127,14 @@ Customer docs: https://pockethost.io/docs/cli
 
 | Variable | Purpose |
 | -------- | ------- |
-| `POCKETHOST_TOKEN` | Personal access token for `deploy`/`dev` (CI) |
-| `POCKETHOST_USERNAME` | Override saved email (non-interactive login) |
-| `POCKETHOST_PASSWORD` | Override saved password |
+| `POCKETHOST_TOKEN` | Personal access token (CI); overrides the saved one |
 | `POCKETHOST_INSTANCE_NAME` | Override linked instance name |
 | `POCKETHOST_MOTHERSHIP_URL` | Override mothership API URL |
 | `POCKETHOST_HOME` | Override config directory |
 | `POCKETHOST_PROJECT_DIR` | Override project root detection |
 
 Environment variables take precedence over `.pockethostconfig`. The old `PHIO_*` names still work (with a deprecation
-warning) and will be removed in the next major version.
+warning) and will be removed in a future major version.
 
 ## Development (monorepo)