Release v0.1.1:2 with certrelay, nacho, and prebuilt subspaces.

Remove the embedded explorer/indexer stack, switch subspaces to prebuilt images, add certrelay and nacho as always-on services, expose Spaces and Subs APIs, and wire optional HTTP basic auth for subs and subs-prover with the correct SUBS_BASIC_AUTH_PASSWORD env var. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 12:06:16 -04:00
parent 931becd274
commit ad64a47d42
30 changed files with 1364 additions and 831 deletions
@@ -144,6 +144,37 @@ const dict = {
  'Spaces API': 143,
  'JSON-RPC API served by the spaced daemon. Authenticated with the spaced RPC credentials (SPACED_RPC_USER / SPACED_RPC_PASSWORD from store.spacedAuth). spaced binds 0.0.0.0 so external processes can reach this endpoint.':
    144,
+  'Show Spaces API Credentials': 145,
+  'Display the spaced RPC username and password (SPACED_RPC_USER / SPACED_RPC_PASSWORD) used to authenticate against the Spaces API.':
+    146,
+  'Use these credentials to authenticate against the spaced JSON-RPC (the Spaces API). The connection URL shown uses the loopback address; for external access, substitute the host StartOS exposes for the Spaces API interface.':
+    147,
+  SPACED_RPC_USER: 148,
+  SPACED_RPC_PASSWORD: 149,
+  Nacho: 150,
+  'nacho is ready': 151,
+  'nacho is not ready': 152,
+  'Nacho Expo dev server. Configure the EXPO_PUBLIC_IGNORE_NAMES list via the "Configure Nacho" action. EXPO_PUBLIC_API_BASE_URL is derived dynamically from the Subs API StartOS interface (the .local URL is preferred).':
+    153,
+  'Configure Nacho': 154,
+  'Set the user-tunable nacho settings. The Ignore Names list is written to /data/nacho/ignore_names.txt (read by nacho at runtime). The Workshop PDF link text is set via EXPO_PUBLIC_WORKSHOP_PDF_LINK_TEXT. Saving restarts the service. To upload a new Workshop PDF, use the separate "Upload Support PDF" action.':
+    155,
+  'Ignore Names': 156,
+  'Comma-separated list of names for the nacho UI to ignore (EXPO_PUBLIC_IGNORE_NAMES).':
+    157,
+  'Nacho configuration saved. Ignore Names written to /data/nacho/ignore_names.txt; the service is restarting to apply the new values.':
+    158,
+  'Could not write ignore_names.txt: ${error}': 167,
+  'Workshop PDF Link Text': 159,
+  'Display text for the workshop PDF link in the nacho UI (EXPO_PUBLIC_WORKSHOP_PDF_LINK_TEXT). Leave empty to suppress the label.':
+    160,
+  'Workshop PDF': 161,
+  'PDF to write to /data/support.pdf (overwrites any existing file).': 162,
+  'Upload Support PDF': 163,
+  'Upload a PDF that replaces /data/support.pdf on the main volume (overwrites if it exists). Used by nacho as the workshop PDF.':
+    164,
+  'Could not write support PDF: ${error}': 165,
+  'Workshop PDF written to /data/support.pdf (${size} bytes).': 166,

  // interfaces.ts
  'Space-CLI Web UI': 12,
@@ -198,6 +229,66 @@ const dict = {
  'Could not parse wallet JSON: ${error}': 49,
  'Wallet imported and loaded.': 50,
  'Could not import wallet: ${error}': 51,
+  'Enable Subspaces Auth': 168,
+  'Turn on HTTP basic auth in front of the Subspaces Web UI and the Subs API (both on port 7777). If no credentials have been set yet, a random password is generated (username defaults to "spaces"). Use "Show Subspaces Auth Credentials" afterwards to retrieve them. Service restarts so subs picks up the auth env vars.':
+    169,
+  'Subspaces Auth enabled with the existing stored credentials. The service is restarting; use "Show Subspaces Auth Credentials" to view them.':
+    170,
+  'Subspaces Auth enabled and a fresh credential pair was generated. The service is restarting; use "Show Subspaces Auth Credentials" to view them.':
+    171,
+  'Disable Subspaces Auth': 172,
+  'Turn off HTTP basic auth in front of the Subspaces Web UI / Subs API. Stored credentials are preserved so re-enabling does not generate new ones; use "Set Subspaces Auth Credentials" to rotate. Service restarts.':
+    173,
+  'Subspaces Auth disabled. The service is restarting; subs will serve unauthenticated again on port 7777. Stored credentials are kept for the next enable.':
+    174,
+  'Show Subspaces Auth Credentials': 175,
+  'Display the HTTP basic auth username and password used in front of the Subspaces Web UI and Subs API. Returns blanks if no credentials have been set yet.':
+    176,
+  'Auth is ENABLED — these credentials are enforced.': 177,
+  'Auth is DISABLED — subs is serving unauthenticated. These credentials will take effect when enabled.':
+    178,
+  SUBS_BASIC_AUTH_USER: 179,
+  SUBS_BASIC_AUTH_PASSWORD: 180,
+  'Set Subspaces Auth Credentials': 181,
+  'Username for HTTP basic auth in front of subs (SUBS_BASIC_AUTH_USER).': 183,
+  'Password for HTTP basic auth in front of subs (SUBS_BASIC_AUTH_PASSWORD). Leave blank to auto-generate a random one.':
+    185,
+  'Set or rotate the HTTP basic auth credentials enforced in front of the Subspaces Web UI and Subs API. Auth is enabled automatically. Saving restarts the service.':
+    186,
+  'Subspaces Auth credentials saved. The service is restarting so subs picks up the new credentials.':
+    187,
+  'Subspaces Auth credentials saved. Auth is currently DISABLED — enable it with "Enable Subspaces Auth" to enforce these credentials.':
+    188,
+  'Enable Subspaces Prover Auth': 189,
+  'Turn on HTTP basic auth in front of the Subspaces Prover (port 8888). If no credentials have been set yet, a random password is generated (username defaults to "spaces"). Use "Show Subspaces Prover Auth Credentials" afterwards to retrieve them. Service restarts so subs-prover picks up the auth env vars.':
+    190,
+  'Subspaces Prover Auth enabled with the existing stored credentials. The service is restarting; use "Show Subspaces Prover Auth Credentials" to view them.':
+    191,
+  'Subspaces Prover Auth enabled and a fresh credential pair was generated. The service is restarting; use "Show Subspaces Prover Auth Credentials" to view them.':
+    192,
+  'Disable Subspaces Prover Auth': 193,
+  'Turn off HTTP basic auth in front of the Subspaces Prover. Stored credentials are preserved so re-enabling does not generate new ones; use "Set Subspaces Prover Auth Credentials" to rotate. Service restarts.':
+    194,
+  'Subspaces Prover Auth disabled. The service is restarting; subs-prover will serve unauthenticated again on port 8888. Stored credentials are kept for the next enable.':
+    195,
+  'Show Subspaces Prover Auth Credentials': 196,
+  'Display the HTTP basic auth username and password used in front of the Subspaces Prover. Returns blanks if no credentials have been set yet.':
+    197,
+  'Auth is DISABLED — subs-prover is serving unauthenticated. These credentials will take effect when enabled.':
+    198,
+  SUBS_PROVER_BASIC_AUTH_USER: 199,
+  SUBS_PROVER_BASIC_AUTH_PASSWORD: 200,
+  'Set Subspaces Prover Auth Credentials': 201,
+  'Username for HTTP basic auth in front of subs-prover (SUBS_PROVER_BASIC_AUTH_USER).':
+    202,
+  'Password for HTTP basic auth in front of subs-prover (SUBS_PROVER_BASIC_AUTH_PASSWORD). Leave blank to auto-generate a random one.':
+    203,
+  'Set or rotate the HTTP basic auth credentials enforced in front of the Subspaces Prover. Saving restarts the service if auth is currently enabled.':
+    204,
+  'Subspaces Prover Auth credentials saved. The service is restarting so subs-prover picks up the new credentials.':
+    205,
+  'Subspaces Prover Auth credentials saved. Auth is currently DISABLED — enable it with "Enable Subspaces Prover Auth" to enforce these credentials.':
+    206,
 } as const

 /**