deployangel 0.1.17 → 0.1.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a288e6edf81d6e4119526b5ce13d87e033a9bc54d5a02679bf5d5585771e67fb
-  data.tar.gz: 0530abbe1a6dd018fbb528697e0a86fd7c10377ba09271b1bfd576ac2cca2e3e
+  metadata.gz: bf16d5f1c1214f77e3b72e911693d7e52efd852da3dcaa21308957d8789bbb63
+  data.tar.gz: 6957cf6b461965450428d49b7d12631bcd2431e7a71bdfd9d995de9b63bd8f0a
 SHA512:
-  metadata.gz: 12968f549c284c8c96f5151455341f6966f1c4dc5ee2e3a8a634cbe0d751235c8868ec254a6e40a49376ab260497262107da682ab16f20f0a53c5446ebde6989
-  data.tar.gz: '01408cbd6f6fcb74ef21eb0b3f2db04ebf9c24981c7d798f897edca04487018ad84383216cb6744102b5e6eba1a51f6be5a6204b7757daab328176bca1f76f63'
+  metadata.gz: f8eb73de68335aec60421c1e550c4983e1a1ffd0e93e27726ce75028d13245a4cc41ec3ea9193d4dbadb48a30eb6953e1bd41cac7837634cefea05bb9b2820f8
+  data.tar.gz: 2c910d0882a1c2bed0b0e4bf24dc8b238121702d1d77ae760d74e207050757795b60d054a7f5fa3a6a0b113ee10d736da344ed49db29dfb3f9f6cf76f1a9f766

data/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.1.19 (2026-10-09)
+
+- `deployangel install agents` sets up Claude Code, Cursor, and Codex in a
+  project: the MCP server in `.mcp.json`, `.cursor/mcp.json`, and
+  `.codex/config.toml` (forwarding `DEPLOYANGEL_API_TOKEN`), and instructions
+  to wait for a verdict after deploying in `AGENTS.md`, with a `CLAUDE.md`
+  that imports it. It never replaces existing entries, and re-running it only
+  updates its own instructions.
+
+## 0.1.18 (2026-10-08)
+
+- In Rails, the agent gets its file digests when it starts, so the reporter
+  works out the code fingerprint right away rather than at its first send, a
+  minute or two later. A file changed in between, as by an in-place
+  `git pull`, no longer ends up in the fingerprint of code that isn't running.
+
 ## 0.1.17 (2026-10-08)
 
 - The agent reports from every Rails environment but `development` and `test`,

data/README.md

@@ -413,6 +413,22 @@ choose with `--format=text|json`. Exit codes:
 
 ### MCP server
 
+To set up Claude Code, Cursor, and Codex for a project in one step, run this
+in the project:
+
+```bash
+bundle exec deployangel install agents
+```
+
+It adds the MCP server to `.mcp.json` (Claude Code), `.cursor/mcp.json`
+(Cursor), and `.codex/config.toml` (Codex, which reads it only in projects you
+trust), and the instructions below to `AGENTS.md`, with a `CLAUDE.md` that
+imports it. It never replaces an existing entry, and running it again updates
+only its own instructions. Commit the files; the token stays in your
+environment.
+
+Or add the server yourself:
+
 ```bash
 claude mcp add deployangel -- bundle exec deployangel mcp    # Claude Code
 ```
@@ -450,7 +466,8 @@ so its plan lists nothing.
 
 ### Suggested instructions for your coding agent
 
-Add this to your `CLAUDE.md` or `AGENTS.md`:
+`deployangel install agents` adds instructions like these. To add them
+yourself, put this in your `CLAUDE.md` or `AGENTS.md`:
 
 ```markdown
 ## Production verification

data/lib/deployangel/agent.rb

@@ -20,7 +20,7 @@ module DeployAngel
     attr_writer :metadata
 
     def initialize(config:, environment:, root: nil, framework: nil, framework_version: nil,
-                   env: ENV, transport: nil, clock: -> { Time.now.utc }, eager: false)
+                   env: ENV, transport: nil, clock: -> { Time.now.utc }, eager: false, metadata: nil)
       @config = config
       @active = config.active?(environment)
       @release = Release.resolve(config: config, env: env, root: root)
@@ -35,6 +35,7 @@ module DeployAngel
       @root = root
       @clock = clock
       @eager = eager
+      @metadata = metadata
       @thread_mutex = Mutex.new
       @warned = {}
       reset_process_state

data/lib/deployangel/cli.rb

@@ -33,8 +33,9 @@ module DeployAngel
         exception  Details for a fingerprint     deployangel exception FINGERPRINT
         check      Report a smoke test result    --name=NAME --status=pass|fail [--covers=a,b]
                                                  [--commit=SHA | --deployment=ID] [--details-url=URL]
-        install    Add a Kamal deploy hook, or    deployangel install kamal
-                   bake the commit into an image  deployangel install docker
+        install    Add a Kamal deploy hook,       deployangel install kamal
+                   bake the commit into an image, deployangel install docker
+                   or set up coding agents        deployangel install agents
         mcp        Run the MCP server over stdio (for coding agents)
 
       With no target, verify, plan, and check use the current git HEAD commit.
@@ -71,6 +72,46 @@ module DeployAngel
       Kamal apps don't need this: DeployAngel reads Kamal's KAMAL_VERSION.
     HELP
 
+    # The block `deployangel install agents` keeps in AGENTS.md (and CLAUDE.md
+    # when it doesn't import AGENTS.md), replaced whole on each run.
+    AGENTS_START = "<!-- deployangel:start -->"
+    AGENTS_END = "<!-- deployangel:end -->"
+    AGENT_INSTRUCTIONS = <<~MARKDOWN
+      #{AGENTS_START}
+      ## Production verification (DeployAngel)
+
+      After deploying, or pushing a commit that deploys, wait for DeployAngel's
+      verdict: call the `wait_for_verification` MCP tool with the commit and
+      `until: "initial"`, calling again while it's in progress, or run
+      `bundle exec deployangel verify --commit=<sha> --wait --until=initial`.
+
+      - Exit 0 / verified: the release is cleared. Report the clearance line and
+        anything DeployAngel is still watching, then move on.
+      - Exit 6: no problems so far, but NOT cleared. Report "no problems so far, not
+        yet cleared" and the expected clearance time. DeployAngel keeps verifying and
+        alerts on failure.
+      - Exit 7: warnings at the initial check. Report them and review the findings.
+        The release is NOT cleared.
+      - Exit 2 / inconclusive: the release is NOT verified. Do not claim success.
+      - Exit 1 / failed: read the findings and exceptions (`get_exception`),
+        investigate the likely cause, and propose a fix. Do not roll back or change
+        production without explicit approval.
+      - Exit 3: still verifying; run the command again.
+      - Not cleared yet: call `get_exercise_plan` (or `bundle exec deployangel plan`).
+        If its status is "exercisable" or "waiting_for_activity", say what it lists
+        and offer to exercise it: read-only routes freely, routes marked mutating
+        only with a test account or after asking. If the status is "warm_up",
+        nothing run can clear it.
+      #{AGENTS_END}
+    MARKDOWN
+
+    AGENTS_TOKEN_HELP = <<~HELP.chomp
+      The MCP server and CLI need DEPLOYANGEL_API_TOKEN, a "CLI & coding agents" token
+      from the app's Settings, in the environment your agent runs in (for example in
+      an .envrc with direnv). Never put it in these files: they're meant to be committed.
+      Codex reads .codex/config.toml only in projects you've marked as trusted.
+    HELP
+
     DOCKERFILE_LINES = <<~DOCKERFILE
       # The commit this image runs, for DeployAngel. Build with --build-arg GIT_SHA=$(git rev-parse HEAD).
       ARG GIT_SHA
@@ -230,7 +271,8 @@ module DeployAngel
         case (target = @argv.shift)
         when "kamal" then install_kamal
         when "docker" then install_docker
-        else usage_error("install needs a target: deployangel install kamal, or deployangel install docker")
+        when "agents" then install_agents
+        else usage_error("install needs a target: deployangel install kamal, docker, or agents")
         end
       end
 
@@ -256,6 +298,93 @@ module DeployAngel
         0
       end
 
+      # Sets up Claude Code, Cursor, and Codex in this project: the MCP server
+      # in each one's project config, and instructions to wait for a verdict
+      # after deploying. Never overwrites what's there: an existing entry is
+      # kept, and a file it can't read is left for you to edit.
+      def install_agents
+        command = %w[bundle exec deployangel mcp]
+        lines = [
+          install_json_mcp(".mcp.json", command, "Claude Code"),
+          install_json_mcp(File.join(".cursor", "mcp.json"), command, "Cursor"),
+          install_codex_mcp(command),
+          *install_agent_instructions
+        ]
+        @stdout.puts(*lines, "", AGENTS_TOKEN_HELP)
+        0
+      end
+
+      def install_json_mcp(relative, command, agent)
+        path = File.join(@root, relative)
+        config = File.exist?(path) ? JSON.parse(File.read(path)) : {}
+        raise JSON::ParserError, "not a JSON object" unless config.is_a?(Hash)
+
+        servers = (config["mcpServers"] ||= {})
+        return "#{relative} already has a deployangel MCP server (#{agent})." if servers.key?("deployangel")
+
+        created = !File.exist?(path)
+        servers["deployangel"] = { "command" => command.first, "args" => command.drop(1) }
+        FileUtils.mkdir_p(File.dirname(path))
+        File.write(path, "#{JSON.pretty_generate(config)}\n")
+        "#{created ? "Created" : "Updated"} #{relative}: the DeployAngel MCP server for #{agent}."
+      rescue JSON::ParserError
+        "Couldn't read #{relative}, so it's unchanged. Add a \"deployangel\" server to its mcpServers: " \
+          "command \"#{command.first}\", args #{command.drop(1).to_json}."
+      end
+
+      def install_codex_mcp(command)
+        relative = File.join(".codex", "config.toml")
+        path = File.join(@root, relative)
+        existing = File.exist?(path) ? File.read(path) : nil
+        return "#{relative} already has a deployangel MCP server (Codex)." if existing&.include?("[mcp_servers.deployangel]")
+
+        table = <<~TOML
+          [mcp_servers.deployangel]
+          command = #{command.first.to_json}
+          args = #{command.drop(1).to_json.gsub(",", ", ")}
+          env_vars = ["DEPLOYANGEL_API_TOKEN", "DEPLOYANGEL_URL"]
+        TOML
+        FileUtils.mkdir_p(File.dirname(path))
+        File.write(path, existing ? "#{existing.sub(/\n*\z/, "\n")}\n#{table}" : table)
+        "#{existing ? "Updated" : "Created"} #{relative}: the DeployAngel MCP server for Codex."
+      end
+
+      # AGENTS.md serves Codex and Cursor. Claude Code reads CLAUDE.md, so it
+      # gets the block too, unless it already imports AGENTS.md; a project
+      # without one gets a CLAUDE.md that does.
+      def install_agent_instructions
+        lines = [ upsert_instructions("AGENTS.md") ]
+        claude = File.join(@root, "CLAUDE.md")
+        if !File.exist?(claude)
+          File.write(claude, "@AGENTS.md\n")
+          lines << "Created CLAUDE.md, which imports AGENTS.md for Claude Code."
+        elsif !File.read(claude).match?(/^@AGENTS\.md\s*$/)
+          lines << upsert_instructions("CLAUDE.md")
+        end
+        lines
+      end
+
+      def upsert_instructions(relative)
+        path = File.join(@root, relative)
+        unless File.exist?(path)
+          File.write(path, AGENT_INSTRUCTIONS)
+          return "Created #{relative} with instructions to wait for DeployAngel's verdict after deploying."
+        end
+
+        content = File.read(path)
+        block = /#{Regexp.escape(AGENTS_START)}.*?#{Regexp.escape(AGENTS_END)}\n?/m
+        if content.match?(block)
+          updated = content.sub(block, AGENT_INSTRUCTIONS)
+          return "#{relative} already has DeployAngel's instructions." if updated == content
+
+          File.write(path, updated)
+          "Updated DeployAngel's instructions in #{relative}."
+        else
+          File.write(path, "#{content.sub(/\n*\z/, "\n")}\n#{AGENT_INSTRUCTIONS}")
+          "Added instructions to wait for DeployAngel's verdict after deploying to #{relative}."
+        end
+      end
+
       # Adds DEPLOYANGEL_REVISION, from a GIT_SHA build arg, to the Dockerfile.
       # It never edits CI workflows; it says what to pass instead.
       def install_docker

data/lib/deployangel/rails/railtie.rb

@@ -22,14 +22,16 @@ module DeployAngel
 
       config.after_initialize do |app|
         DeployAngel::Apartment.install if DeployAngel.configuration.exception_messages
-        agent = DeployAngel.start(
+        # The metadata goes in at start, before the reporter thread can run:
+        # the code fingerprint is built from its file digests.
+        DeployAngel.start(
           environment: ::Rails.env,
           root: ::Rails.root.to_s,
           framework: "rails",
           framework_version: ::Rails.version,
-          logger: ::Rails.logger
+          logger: ::Rails.logger,
+          metadata: DeployAngel::Rails::Metadata.new(app: app, config: DeployAngel.configuration, root: ::Rails.root.to_s, environment: ::Rails.env)
         )
-        agent&.metadata = DeployAngel::Rails::Metadata.new(app: app, config: DeployAngel.configuration, root: ::Rails.root.to_s, environment: ::Rails.env)
       end
     end
   end

data/lib/deployangel/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DeployAngel
-  VERSION = "0.1.17"
+  VERSION = "0.1.19"
 end

data/lib/deployangel.rb

@@ -34,10 +34,10 @@ module DeployAngel
     # Called by the Railtie after the app boots. Web server processes start
     # reporting immediately, so idle processes still send heartbeats; other
     # processes (console, rake) only report after recording a request.
-    def start(environment:, root: nil, framework: nil, framework_version: nil, logger: nil)
+    def start(environment:, root: nil, framework: nil, framework_version: nil, logger: nil, metadata: nil)
       configuration.logger = logger if logger
       @agent = Agent.new(config: configuration, environment: environment, root: root,
-        framework: framework, framework_version: framework_version, eager: server_process?)
+        framework: framework, framework_version: framework_version, eager: server_process?, metadata: metadata)
       install_exit_hook
       @agent
     rescue StandardError => e

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: deployangel
 version: !ruby/object:Gem::Version
-  version: 0.1.17
+  version: 0.1.19
 platform: ruby
 authors:
 - Jordan Owens
@@ -82,7 +82,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.0
+rubygems_version: 4.0.10
 specification_version: 4
 summary: 'DeployAngel agent for Rails: production verification for every deployment.'
 test_files: []