withcache 0.8.6__tar.gz → 0.8.7__tar.gz

{withcache-0.8.6 → withcache-0.8.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: withcache
-Version: 0.8.6
+Version: 0.8.7
 Summary: Operator-curated, URL-keyed artifact cache for a small lab (CUDA/ROCm/DOCA/firmware)
 Project-URL: Homepage, https://github.com/safl/withcache
 Author-email: "Simon A. F. Lund" <safl@safl.dk>
@@ -257,6 +257,7 @@ never log in; the **operator surface** (`/`, `/admin/*`) is gated.
 | `CURLWITHCACHE_SERVER` / `WGETWITHCACHE_SERVER` | Per-tool override of the above       |
 | `WITHCACHE_ADMIN_PASSWORD` | Operator login password (unset ⇒ UI open, with a warning) |
 | `WITHCACHE_SESSION_SECRET` | Override the persisted cookie-signing key (optional)     |
+| `WITHCACHE_CATALOG_URL`    | Pin the image-catalog URL; env value beats the /admin/catalog_set_url override so a locked-down deploy stays locked (optional) |
 
 [bty]: https://github.com/safl/bty
 

{withcache-0.8.6 → withcache-0.8.7}/README.md

@@ -239,6 +239,7 @@ never log in; the **operator surface** (`/`, `/admin/*`) is gated.
 | `CURLWITHCACHE_SERVER` / `WGETWITHCACHE_SERVER` | Per-tool override of the above       |
 | `WITHCACHE_ADMIN_PASSWORD` | Operator login password (unset ⇒ UI open, with a warning) |
 | `WITHCACHE_SESSION_SECRET` | Override the persisted cookie-signing key (optional)     |
+| `WITHCACHE_CATALOG_URL`    | Pin the image-catalog URL; env value beats the /admin/catalog_set_url override so a locked-down deploy stays locked (optional) |
 
 [bty]: https://github.com/safl/bty
 

{withcache-0.8.6 → withcache-0.8.7}/deploy/compose.yml

@@ -14,7 +14,12 @@ services:
       # Protect the operator UI. Unset => UI is open (a warning is logged).
       - WITHCACHE_ADMIN_PASSWORD=${WITHCACHE_ADMIN_PASSWORD:-}
       # Optional: pin the session-signing key (else persisted under /data).
-      # - WITHCACHE_SESSION_SECRET=${WITHCACHE_SESSION_SECRET:-}
+      - WITHCACHE_SESSION_SECRET=${WITHCACHE_SESSION_SECRET:-}
+      # Optional: pin the image-catalog URL. When set, the env value
+      # wins over any /admin/catalog_set_url operator override so a
+      # locked-down deploy stays locked. Unset uses the default
+      # (safl/nosi's ``catalog.toml`` on GitHub).
+      - WITHCACHE_CATALOG_URL=${WITHCACHE_CATALOG_URL:-}
     volumes:
       - withcache-data:/data
     restart: unless-stopped

{withcache-0.8.6 → withcache-0.8.7}/shim/build.zig.zon

@@ -2,7 +2,7 @@
     .name = .withcache_shim,
     // Zig requires a literal here; keep it in lockstep with the project's
     // single source (src/withcache/__init__.py) via `make bump` / `make version-check`.
-    .version = "0.8.6",
+    .version = "0.8.7",
     .fingerprint = 0xd7d96c5ed212ccaa,
     .minimum_zig_version = "0.16.0",
     .paths = .{

{withcache-0.8.6 → withcache-0.8.7}/src/withcache/__init__.py

@@ -17,6 +17,6 @@ All modules are stdlib-only and self-contained.
 from . import oras
 from .client import blob_url, cache_base, is_cached, serve_url
 
-__version__ = "0.8.6"
+__version__ = "0.8.7"
 
 __all__ = ["__version__", "blob_url", "cache_base", "is_cached", "oras", "serve_url"]