mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-12 15:03:55 +09:00
The panel can now run the signed commands Cloud sends, and the first four of them are the Storage Hub's. A destination assigned in Cloud is tested here before it is saved, written as `s3.path_prefix` (which every upload, list and verify path already honoured), and reported back on a `storage` stream. Unassigning hands it back and deletes nothing in the bucket. - backend/app/services/connect_commands.py — verify a command JWT against ServerKit Cloud's JWKS (signature, audience, exp, nonce, consent scope), run the handler on its own thread, report running/succeeded/failed. An action this version does not know fails with a sentence saying so. - backend/app/services/connect_storage.py — storage.assign/unassign/ test/report, and the snapshot the storage stream carries. - backend/app/services/connect_client.py — handle `command` opens, fetch the JWKS per connection, publish a storage snapshot on connect and every five minutes. - backend/app/api/backups.py — GET /storage says when Cloud owns the destination; PUT answers 409 rather than letting two writers race. - frontend/src/pages/Backups.jsx — the local form is read-only while Cloud manages it, with the sentence that says how to take it back. - backend/tests/test_connect_storage.py — 23 tests, no network. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018q56AfqpgKjio4n9KYubvZ