deployangel 0.1.18 → 0.1.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 66584e07c5d50f166891f5b6779fa2fa8db383a923d074458e7bb09ff46e525a
-  data.tar.gz: 95b445b37424f7b92ab0ec5394f5fa35c10864f5738f10959dfb9822c73c0980
+  metadata.gz: bf16d5f1c1214f77e3b72e911693d7e52efd852da3dcaa21308957d8789bbb63
+  data.tar.gz: 6957cf6b461965450428d49b7d12631bcd2431e7a71bdfd9d995de9b63bd8f0a
 SHA512:
-  metadata.gz: 87ce3ddb256c2df177bb3a4c2390b2ce50a98d97bd25e654d90153b29d9474bd4208cfb80b2bca3cf61d6a5174042dbe8a4e2c966e374a38b0371bf2e3dc19ad
-  data.tar.gz: ff4a1a677217b025f7393b0c586472a57b4b232406d44e4c76b3cb37ed4fd09d265f9052f47d9d50e182c9d3ddb5892e1757dbd7293b3910cb3a248000dabb0d
+  metadata.gz: f8eb73de68335aec60421c1e550c4983e1a1ffd0e93e27726ce75028d13245a4cc41ec3ea9193d4dbadb48a30eb6953e1bd41cac7837634cefea05bb9b2820f8
+  data.tar.gz: 2c910d0882a1c2bed0b0e4bf24dc8b238121702d1d77ae760d74e207050757795b60d054a7f5fa3a6a0b113ee10d736da344ed49db29dfb3f9f6cf76f1a9f766

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.1.19 (2026-10-09)
+
+- `deployangel install agents` sets up Claude Code, Cursor, and Codex in a
+  project: the MCP server in `.mcp.json`, `.cursor/mcp.json`, and
+  `.codex/config.toml` (forwarding `DEPLOYANGEL_API_TOKEN`), and instructions
+  to wait for a verdict after deploying in `AGENTS.md`, with a `CLAUDE.md`
+  that imports it. It never replaces existing entries, and re-running it only
+  updates its own instructions.
+
 ## 0.1.18 (2026-10-08)
 
 - In Rails, the agent gets its file digests when it starts, so the reporter

data/README.md

@@ -413,6 +413,22 @@ choose with `--format=text|json`. Exit codes:
 
 ### MCP server
 
+To set up Claude Code, Cursor, and Codex for a project in one step, run this
+in the project:
+
+```bash
+bundle exec deployangel install agents
+```
+
+It adds the MCP server to `.mcp.json` (Claude Code), `.cursor/mcp.json`
+(Cursor), and `.codex/config.toml` (Codex, which reads it only in projects you
+trust), and the instructions below to `AGENTS.md`, with a `CLAUDE.md` that
+imports it. It never replaces an existing entry, and running it again updates
+only its own instructions. Commit the files; the token stays in your
+environment.
+
+Or add the server yourself:
+
 ```bash
 claude mcp add deployangel -- bundle exec deployangel mcp    # Claude Code
 ```
@@ -450,7 +466,8 @@ so its plan lists nothing.
 
 ### Suggested instructions for your coding agent
 
-Add this to your `CLAUDE.md` or `AGENTS.md`:
+`deployangel install agents` adds instructions like these. To add them
+yourself, put this in your `CLAUDE.md` or `AGENTS.md`:
 
 ```markdown
 ## Production verification

data/lib/deployangel/cli.rb

@@ -33,8 +33,9 @@ module DeployAngel
         exception  Details for a fingerprint     deployangel exception FINGERPRINT
         check      Report a smoke test result    --name=NAME --status=pass|fail [--covers=a,b]
                                                  [--commit=SHA | --deployment=ID] [--details-url=URL]
-        install    Add a Kamal deploy hook, or    deployangel install kamal
-                   bake the commit into an image  deployangel install docker
+        install    Add a Kamal deploy hook,       deployangel install kamal
+                   bake the commit into an image, deployangel install docker
+                   or set up coding agents        deployangel install agents
         mcp        Run the MCP server over stdio (for coding agents)
 
       With no target, verify, plan, and check use the current git HEAD commit.
@@ -71,6 +72,46 @@ module DeployAngel
       Kamal apps don't need this: DeployAngel reads Kamal's KAMAL_VERSION.
     HELP
 
+    # The block `deployangel install agents` keeps in AGENTS.md (and CLAUDE.md
+    # when it doesn't import AGENTS.md), replaced whole on each run.
+    AGENTS_START = "<!-- deployangel:start -->"
+    AGENTS_END = "<!-- deployangel:end -->"
+    AGENT_INSTRUCTIONS = <<~MARKDOWN
+      #{AGENTS_START}
+      ## Production verification (DeployAngel)
+
+      After deploying, or pushing a commit that deploys, wait for DeployAngel's
+      verdict: call the `wait_for_verification` MCP tool with the commit and
+      `until: "initial"`, calling again while it's in progress, or run
+      `bundle exec deployangel verify --commit=<sha> --wait --until=initial`.
+
+      - Exit 0 / verified: the release is cleared. Report the clearance line and
+        anything DeployAngel is still watching, then move on.
+      - Exit 6: no problems so far, but NOT cleared. Report "no problems so far, not
+        yet cleared" and the expected clearance time. DeployAngel keeps verifying and
+        alerts on failure.
+      - Exit 7: warnings at the initial check. Report them and review the findings.
+        The release is NOT cleared.
+      - Exit 2 / inconclusive: the release is NOT verified. Do not claim success.
+      - Exit 1 / failed: read the findings and exceptions (`get_exception`),
+        investigate the likely cause, and propose a fix. Do not roll back or change
+        production without explicit approval.
+      - Exit 3: still verifying; run the command again.
+      - Not cleared yet: call `get_exercise_plan` (or `bundle exec deployangel plan`).
+        If its status is "exercisable" or "waiting_for_activity", say what it lists
+        and offer to exercise it: read-only routes freely, routes marked mutating
+        only with a test account or after asking. If the status is "warm_up",
+        nothing run can clear it.
+      #{AGENTS_END}
+    MARKDOWN
+
+    AGENTS_TOKEN_HELP = <<~HELP.chomp
+      The MCP server and CLI need DEPLOYANGEL_API_TOKEN, a "CLI & coding agents" token
+      from the app's Settings, in the environment your agent runs in (for example in
+      an .envrc with direnv). Never put it in these files: they're meant to be committed.
+      Codex reads .codex/config.toml only in projects you've marked as trusted.
+    HELP
+
     DOCKERFILE_LINES = <<~DOCKERFILE
       # The commit this image runs, for DeployAngel. Build with --build-arg GIT_SHA=$(git rev-parse HEAD).
       ARG GIT_SHA
@@ -230,7 +271,8 @@ module DeployAngel
         case (target = @argv.shift)
         when "kamal" then install_kamal
         when "docker" then install_docker
-        else usage_error("install needs a target: deployangel install kamal, or deployangel install docker")
+        when "agents" then install_agents
+        else usage_error("install needs a target: deployangel install kamal, docker, or agents")
         end
       end
 
@@ -256,6 +298,93 @@ module DeployAngel
         0
       end
 
+      # Sets up Claude Code, Cursor, and Codex in this project: the MCP server
+      # in each one's project config, and instructions to wait for a verdict
+      # after deploying. Never overwrites what's there: an existing entry is
+      # kept, and a file it can't read is left for you to edit.
+      def install_agents
+        command = %w[bundle exec deployangel mcp]
+        lines = [
+          install_json_mcp(".mcp.json", command, "Claude Code"),
+          install_json_mcp(File.join(".cursor", "mcp.json"), command, "Cursor"),
+          install_codex_mcp(command),
+          *install_agent_instructions
+        ]
+        @stdout.puts(*lines, "", AGENTS_TOKEN_HELP)
+        0
+      end
+
+      def install_json_mcp(relative, command, agent)
+        path = File.join(@root, relative)
+        config = File.exist?(path) ? JSON.parse(File.read(path)) : {}
+        raise JSON::ParserError, "not a JSON object" unless config.is_a?(Hash)
+
+        servers = (config["mcpServers"] ||= {})
+        return "#{relative} already has a deployangel MCP server (#{agent})." if servers.key?("deployangel")
+
+        created = !File.exist?(path)
+        servers["deployangel"] = { "command" => command.first, "args" => command.drop(1) }
+        FileUtils.mkdir_p(File.dirname(path))
+        File.write(path, "#{JSON.pretty_generate(config)}\n")
+        "#{created ? "Created" : "Updated"} #{relative}: the DeployAngel MCP server for #{agent}."
+      rescue JSON::ParserError
+        "Couldn't read #{relative}, so it's unchanged. Add a \"deployangel\" server to its mcpServers: " \
+          "command \"#{command.first}\", args #{command.drop(1).to_json}."
+      end
+
+      def install_codex_mcp(command)
+        relative = File.join(".codex", "config.toml")
+        path = File.join(@root, relative)
+        existing = File.exist?(path) ? File.read(path) : nil
+        return "#{relative} already has a deployangel MCP server (Codex)." if existing&.include?("[mcp_servers.deployangel]")
+
+        table = <<~TOML
+          [mcp_servers.deployangel]
+          command = #{command.first.to_json}
+          args = #{command.drop(1).to_json.gsub(",", ", ")}
+          env_vars = ["DEPLOYANGEL_API_TOKEN", "DEPLOYANGEL_URL"]
+        TOML
+        FileUtils.mkdir_p(File.dirname(path))
+        File.write(path, existing ? "#{existing.sub(/\n*\z/, "\n")}\n#{table}" : table)
+        "#{existing ? "Updated" : "Created"} #{relative}: the DeployAngel MCP server for Codex."
+      end
+
+      # AGENTS.md serves Codex and Cursor. Claude Code reads CLAUDE.md, so it
+      # gets the block too, unless it already imports AGENTS.md; a project
+      # without one gets a CLAUDE.md that does.
+      def install_agent_instructions
+        lines = [ upsert_instructions("AGENTS.md") ]
+        claude = File.join(@root, "CLAUDE.md")
+        if !File.exist?(claude)
+          File.write(claude, "@AGENTS.md\n")
+          lines << "Created CLAUDE.md, which imports AGENTS.md for Claude Code."
+        elsif !File.read(claude).match?(/^@AGENTS\.md\s*$/)
+          lines << upsert_instructions("CLAUDE.md")
+        end
+        lines
+      end
+
+      def upsert_instructions(relative)
+        path = File.join(@root, relative)
+        unless File.exist?(path)
+          File.write(path, AGENT_INSTRUCTIONS)
+          return "Created #{relative} with instructions to wait for DeployAngel's verdict after deploying."
+        end
+
+        content = File.read(path)
+        block = /#{Regexp.escape(AGENTS_START)}.*?#{Regexp.escape(AGENTS_END)}\n?/m
+        if content.match?(block)
+          updated = content.sub(block, AGENT_INSTRUCTIONS)
+          return "#{relative} already has DeployAngel's instructions." if updated == content
+
+          File.write(path, updated)
+          "Updated DeployAngel's instructions in #{relative}."
+        else
+          File.write(path, "#{content.sub(/\n*\z/, "\n")}\n#{AGENT_INSTRUCTIONS}")
+          "Added instructions to wait for DeployAngel's verdict after deploying to #{relative}."
+        end
+      end
+
       # Adds DEPLOYANGEL_REVISION, from a GIT_SHA build arg, to the Dockerfile.
       # It never edits CI workflows; it says what to pass instead.
       def install_docker

data/lib/deployangel/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DeployAngel
-  VERSION = "0.1.18"
+  VERSION = "0.1.19"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: deployangel
 version: !ruby/object:Gem::Version
-  version: 0.1.18
+  version: 0.1.19
 platform: ruby
 authors:
 - Jordan Owens
@@ -82,7 +82,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.0
+rubygems_version: 4.0.10
 specification_version: 4
 summary: 'DeployAngel agent for Rails: production verification for every deployment.'
 test_files: []