deployangel 0.1.27 → 0.1.28

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 480a4d0a0e8ff4206659a86d40ea0fbfb2c5cc20f55e205aa5a724914add1acf
-  data.tar.gz: bdd81c91faac1642d5f78633ab48bd2efb80e15d6a8b3022d4a0d8e18c967f4f
+  metadata.gz: fde8310f8129827b4b759369146c2346542a776ab13ac91fe7001617e93a7ebb
+  data.tar.gz: 15a216435704ea45fce03e0a1433d615dc28f6c07fdd6e33c90bebed23361779
 SHA512:
-  metadata.gz: e669f7ad136b1328c7f672120dc00b7f5afb20a09a6ca7b27a37c25e26709f678aec6c5fb24dcc1de68c2ffd04a73e1687d2132f09c94ea95cabf72d4731c597
-  data.tar.gz: 88e02d9c250287ac051b233bada6a7469507860aa62cc03390dee8b566770eba38c79431b0e882778b9351a9ca59d03c68b26c8d9cd188c390ee65ad0a4093e8
+  metadata.gz: e6e7ae24a04e3999af5865e2cf5be14054cdfc92b5644b1a4f5d8bd56c407faf874b122db23508bbcb3b268e461a89d68a16a3a235e166cf457e10e063a4c3f9
+  data.tar.gz: 3e2bb9e11c4d8b35134fdb9088beabcaf0ba5b99b484c9e4b0e2dfc3b710aa544507b55f6a3a222c0446d4b6edbec0f935f0049f03e2039cc19e253767560530

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.1.28 (2026-10-12)
+
+- Clearer setup for coding agents, from a first-day rehearsal: `setup` says
+  the running app reads its token only from `DEPLOYANGEL_TOKEN` and points to
+  the per-host steps instead of printing Fly and Heroku examples; `install
+  agents` says the saved token is used here once `setup` has run; `doctor`'s
+  fix for an agent that hasn't reported says how to pass a saved app token;
+  and the help says `release` defaults to the current commit and when
+  `--format` defaults to json.
+
 ## 0.1.27 (2026-10-12)
 
 - The MCP server's instructions, and the ones `deployangel install agents`

data/lib/deployangel/cli.rb

@@ -49,7 +49,8 @@ module DeployAngel
                    into a host's or CI's secrets
         mcp        Run the MCP server over stdio (for coding agents)
 
-      With no target, verify, plan, and check use the current git HEAD commit.
+      With no target, release, verify, plan, and check use the current git HEAD commit.
+      --format defaults to text in a terminal and json otherwise, such as in a pipe or an agent.
       In GitHub Actions, GitLab CI, CircleCI, and Buildkite, release fills in the
       commit, a build label (e.g. run-123), and a link to the run automatically.
       In a Kamal hook, it registers Kamal's release (KAMAL_VERSION).
@@ -123,10 +124,19 @@ module DeployAngel
       #{AGENTS_END}
     MARKDOWN
 
+    # After `deployangel setup`, the MCP server and CLI here use its saved token.
+    AGENTS_SAVED_TOKEN_HELP = <<~HELP.chomp
+      Here, the MCP server and CLI use the token `deployangel setup` saved in .deployangel/.
+      Teammates redeem their own setup code, or set DEPLOYANGEL_API_TOKEN to a
+      "CLI & coding agents" token from the app's Settings, for example in an .envrc
+      with direnv. These files hold no token and are meant to be committed.
+      Codex reads .codex/config.toml only in projects you've marked as trusted.
+    HELP
     AGENTS_TOKEN_HELP = <<~HELP.chomp
       The MCP server and CLI need DEPLOYANGEL_API_TOKEN, a "CLI & coding agents" token
       from the app's Settings, in the environment your agent runs in (for example in
-      an .envrc with direnv). Never put it in these files: they're meant to be committed.
+      an .envrc with direnv), or a token saved here by `deployangel setup`.
+      Never put it in these files: they're meant to be committed.
       Codex reads .codex/config.toml only in projects you've marked as trusted.
     HELP
 
@@ -414,7 +424,7 @@ module DeployAngel
           install_codex_mcp(command),
           *install_agent_instructions
         ]
-        @stdout.puts(*lines, "", AGENTS_TOKEN_HELP)
+        @stdout.puts(*lines, "", Credentials.find(@root) ? AGENTS_SAVED_TOKEN_HELP : AGENTS_TOKEN_HELP)
         0
       end
 
@@ -621,11 +631,11 @@ module DeployAngel
           Set up DeployAngel for #{app["name"]} (#{app["environment"]}). Saved its app token and a "CI deploys" token to
           #{relative}, kept out of git and not shown here. The deployangel command and MCP server here use them.
 
-          Give production the app token without printing it, for example:
-            fly secrets set DEPLOYANGEL_TOKEN=$(#{command_name} token app)
-            heroku config:set DEPLOYANGEL_TOKEN=$(#{command_name} token app)
-          and CI the "CI deploys" token:
-            #{command_name} token api | gh secret set DEPLOYANGEL_API_TOKEN
+          The running app reads its token only from DEPLOYANGEL_TOKEN in its environment, so give it the app
+          token without printing it: $(#{command_name} token app) in the command that starts it or sets your
+          host's secrets, or #{command_name} token app | <a command that reads a secret>. The same goes for CI and
+          the "CI deploys" token (#{command_name} token api). Steps for each host:
+          https://www.deployangel.com/setup-for-agents.md
         TEXT
         0
       end

data/lib/deployangel/doctor.rb

@@ -2,6 +2,7 @@
 
 require "time"
 require_relative "configuration"
+require_relative "credentials"
 require_relative "metadata"
 require_relative "rails/metadata"
 require_relative "core/release"
@@ -99,8 +100,20 @@ module DeployAngel
           Check.new(status: :warn, message: "The agent last reported #{time(agent["last_received_at"])}, and nothing since",
             fix: "Check the app is running, and that DEPLOYANGEL_TOKEN is still set on its processes.")
         else
-          Check.new(status: :warn, message: "The agent hasn't reported yet",
-            fix: "Deploy with DEPLOYANGEL_TOKEN set to the app's agent token (Settings, Tokens: \"Deployed application\").")
+          Check.new(status: :warn, message: "The agent hasn't reported yet", fix: token_fix)
+        end
+      end
+
+      # The running app reads its token only from DEPLOYANGEL_TOKEN in its
+      # environment, never from the file `deployangel setup` saves.
+      def token_fix
+        if Credentials.find(@root)
+          command = File.exist?(File.join(@root, "Gemfile")) ? "bundle exec deployangel" : "deployangel"
+          "Start or deploy the app with DEPLOYANGEL_TOKEN in its processes' environment. The app token is saved here, " \
+            "so pass it without printing it: $(#{command} token app) in the start command or your host's secrets command."
+        else
+          "Start or deploy the app with DEPLOYANGEL_TOKEN in its processes' environment, set to its app token " \
+            "(\"Deployed application\" in the app's Settings, under API tokens)."
         end
       end
 

data/lib/deployangel/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DeployAngel
-  VERSION = "0.1.27"
+  VERSION = "0.1.28"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: deployangel
 version: !ruby/object:Gem::Version
-  version: 0.1.27
+  version: 0.1.28
 platform: ruby
 authors:
 - Jordan Owens
@@ -86,7 +86,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.0
+rubygems_version: 3.6.9
 specification_version: 4
 summary: 'DeployAngel agent for Rails: production verification for every deployment.'
 test_files: []