{
  "product": "SpotStarter",
  "workerVersion": "0.1.2",
  "packageUrl": "https://spotstarter.app/deploy/spotstarter-function-v0.1.2.zip",
  "latestPackageUrl": "https://spotstarter.app/deploy/spotstarter-function.zip",
  "sha256": "bd91a4b5438803f6b3824ecd5e30d5e9d7432facc5811724d1d14955cfe1c331",
  "sha256Url": "https://spotstarter.app/deploy/spotstarter-function-v0.1.2.zip.sha256",
  "latestSha256Url": "https://spotstarter.app/deploy/spotstarter-function.zip.sha256",
  "releasedAt": "2026-05-27T22:23:57Z",
  "automaticUpdateRestart": {
    "enabledByDefault": true,
    "scheduleUtc": "stable per-deployment randomized UTC minute",
    "workflowNameSuffix": "-nightly-update",
    "behavior": "Restarts the deployed Function App so WEBSITE_RUN_FROM_PACKAGE reloads the stable latest package URL."
  },
  "ownerMetrics": {
    "latestPackagePullPath": "/deploy/spotstarter-function.zip",
    "visibility": "owner-admin-only",
    "behavior": "The public web tier mirrors latest package downloads to an internal API counter without blocking the package response."
  },
  "azurePortalComparePath": "Function App > Settings > Environment variables",
  "azurePortalRestartSetting": "WEBSITE_RUN_FROM_PACKAGE",
  "azurePortalVersionSettings": [
    "WEBSITE_RUN_FROM_PACKAGE",
    "SPOTSTARTER_WORKER_VERSION",
    "SPOTSTARTER_WORKER_PACKAGE_SHA256",
    "SPOTSTARTER_WORKER_PACKAGE_URL",
    "SPOTSTARTER_WORKER_LATEST_PACKAGE_URL",
    "SPOTSTARTER_WORKER_LATEST_URL",
    "SPOTSTARTER_AUTO_UPDATE_RESTART_ENABLED",
    "SPOTSTARTER_AUTO_UPDATE_RESTART_UTC"
  ],
  "updateTrustModel": {
    "channel": "latest-alias-with-versioned-audit-record",
    "leastPrivilegeRole": "SpotStarter VM Starter",
    "roleActions": [
      "Microsoft.Compute/virtualMachines/start/action",
      "Microsoft.Resources/tags/read",
      "Microsoft.Resources/tags/write"
    ],
    "behavior": "WEBSITE_RUN_FROM_PACKAGE uses the latest package alias for easy portal restarts, while SPOTSTARTER_WORKER_PACKAGE_URL and SHA-256 record the versioned release identity for audit."
  },
  "updateHint": "New deployments run WEBSITE_RUN_FROM_PACKAGE from the stable latest package URL, while SPOTSTARTER_WORKER_PACKAGE_URL records the immutable versioned package identity and SPOTSTARTER_WORKER_PACKAGE_SHA256 records the expected SHA-256. In Azure Portal, clicking Restart on the Function App reloads the currently published latest package. New deployments also include a nightly update workflow that restarts the Function App once per day at a stable per-deployment randomized UTC time."
}
