Upgrade to SpacesOps v1.0.1 and fix v1.0.1:1 startup on StartOS.

Bump the image to spacesops/spacesops:v1.0.1, always inject NODE_EXTRA_CA_CERTS from sdk.getSslCertificate so the upstream entrypoint no longer crashes on unset _SCRIPT_DIR, and document the same-host HTTPS behavior in the README.

Co-authored-by: Cursor <cursoragent@cursor.com>

startos/versions/index.ts

@@ -1,7 +1,8 @@
 import { VersionGraph } from '@start9labs/start-sdk'
-import { v_1_0_0_0 } from './v1.0.0.0'
+import { v_1_0_1_0 } from './v1.0.1.0'
+import { v_1_0_1_1 } from './v1.0.1.1'
 
 export const versionGraph = VersionGraph.of({
-  current: v_1_0_0_0,
-  other: [],
+  current: v_1_0_1_1,
+  other: [v_1_0_1_0],
 })

startos/versions/v1.0.0.0.ts

@@ -1,17 +0,0 @@
-import { IMPOSSIBLE, VersionInfo } from '@start9labs/start-sdk'
-
-export const v_1_0_0_0 = VersionInfo.of({
-  version: '1.0.0:0',
-  releaseNotes: {
-    en_US: `Initial StartOS package for SpacesOps (upstream v1.0.0).
-- Runs the SpacesOps web platform (Express + SQLite) from the prebuilt spacesops/spacesops:v1.0.0 image on x86_64 and aarch64.
-- Depends on the Spaces service and auto-connects to its spaced JSON-RPC at spaces.startos:7225 by reading the Spaces RPC credentials from the mounted Spaces volume.
-- Generates a Nostr operator keypair and a strong session secret on first install. "Show Operator Credentials" and "Import Operator Key" actions manage the keypair.
-- "Show Admin Credentials" surfaces the fixed, well-known admin login baked into the image, with a warning to keep the service private.
-- "Configure Platform" optionally sets the Nostr relay, theme mode, CoinGecko pricing, and SUBS backend.`,
-  },
-  migrations: {
-    up: async ({ effects }) => {},
-    down: IMPOSSIBLE,
-  },
-})

startos/versions/v1.0.1.0.ts

@@ -0,0 +1,14 @@
+import { IMPOSSIBLE, VersionInfo } from '@start9labs/start-sdk'
+
+export const v_1_0_1_0 = VersionInfo.of({
+  version: '1.0.1:0',
+  releaseNotes: {
+    en_US: `Upstream upgrade to SpacesOps v1.0.1.
+- Bumps the image to spacesops/spacesops:v1.0.1 on x86_64 and aarch64.
+- No StartOS-side configuration, action, or migration changes; existing operator keypair, session secret, and Configure-Platform settings are preserved.`,
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: IMPOSSIBLE,
+  },
+})

startos/versions/v1.0.1.1.ts

@@ -0,0 +1,13 @@
+import { IMPOSSIBLE, VersionInfo } from '@start9labs/start-sdk'
+
+export const v_1_0_1_1 = VersionInfo.of({
+  version: '1.0.1:1',
+  releaseNotes: {
+    en_US: `- Always sets NODE_EXTRA_CA_CERTS before the v1.0.1 image entrypoint runs, fetching the StartOS root CA via sdk.getSslCertificate (SUBS *.startos hostname when configured, otherwise spaces.startos). Fixes startup crash where setup-spacesops-env.sh references unset _SCRIPT_DIR under set -u.
+- Enables outbound HTTPS to same-host StartOS services from SpacesOps.`,
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: IMPOSSIBLE,
+  },
+})