discharger 0.3.3 → 0.3.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 22ff9b0cc383ea213a6a8766f713ef4afa97a114c679c76b37954f73872b74e3
-  data.tar.gz: a3cfa43c5c9665704e13bce7a3bb19e36ccd4810b700b149a2646815fcca9f6a
+  metadata.gz: 97070aca58c88a6f43e34f7d45bec964122a6db867e9bd5333988a082bb41d47
+  data.tar.gz: 0f39ea2c1136914a33666593af2bdaeed6f358a34364f9ffcb9b1557976c3fae
 SHA512:
-  metadata.gz: 0e01ea39ed9eba5c973951784d44b5488a1f6f00effc59a1192d5f1f3cfd2aafbe14895a1d6ce920520acb7c501bc79720febc7360bed35a301c742ab30728ad
-  data.tar.gz: 309f1fd0b7ea3d78814aedd8c8bb945e0c63806260007dc8391126863254d4f19d87adc0e9ec7cdd584c3173982fd69465e87c06a13a97f90870aa60d93b2f6d
+  metadata.gz: 617ed8ed6727d1e1817e7859ce8121553399bd1ec0c5c70b2002d93eb0273915e112d5b30d6ba2e045e18ff0b4fd1bf075cc78d0000f0b8abdc360102d14cb0c
+  data.tar.gz: d8470a667ff24259e5efc590ad63fb7be3884e31ce3e35a5e3b8d22fdb3a399fe4948b3e8e465d2b4aee34e24e2ef25fce86453a041083abb6947b6b3454d7f7

data/CHANGELOG.md

@@ -5,19 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
-## [0.3.3] - 2026-07-22
+## [0.3.5] - 2026-08-10
 
 ### Added
 
-- Post-release runbook announcement in the Slack release thread, from Reissue's runbook_file (0cf9620)
+- github_packages setup step storing bundler credentials for a private GitHub Packages gem source via the gh CLI (2cff4b6)
 
-## [0.3.2] - 2026-07-15
+## [0.3.4] - 2026-07-22
 
-### Changed
-
-- Treat generated pg_tools setup as opt-in for apps that use structure.sql or PostgreSQL CLI workflows.
-
-### Fixed
+### Added
 
-- Retry `brew bundle` once before failing setup, so transient Homebrew lock contention (e.g. two `bin/setup` runs on the same host) doesn't hard-fail the whole run.
-- pg-tools wrappers no longer forward localhost -h/-p flags into docker exec, where the host-mapped port doesn't exist; remote hosts still pass through untouched (a3869d2)
+- Runbook announcement on stage builds, previewing post-release steps before production (c77b552)

data/README.md

@@ -112,8 +112,10 @@ Runbook: Run \`rake data:cleanup\` after deploy"
 ```
 
 `rake release:prepare` finalizes the runbook alongside the changelog, so the release tag
-records exactly which steps that version needs. After the production release, Discharger
-posts the checklist to Slack as a reply in the release thread, right after the changelog:
+records exactly which steps that version needs. Discharger posts the checklist to Slack as
+a reply in the deploy thread — both on the stage build (`rake release:build` /
+`rake release:stage`, threaded under "Building…") and after the production release
+(threaded under the release announcement, right after the changelog):
 
 ```
 *Post-release runbook for 1.2.3* — 2 steps
@@ -122,6 +124,9 @@ posts the checklist to Slack as a reply in the release thread, right after the c
 • Re-index search documents (def5678)
 ```
 
+Staging shows the steps as a preview so the team sees what production will need before it
+happens; the production thread repeats them when the release actually lands.
+
 When a release needs no follow-up, the thread says so explicitly rather than staying
 silent, so nobody has to wonder whether the check was skipped:
 
@@ -269,6 +274,7 @@ The `steps` array specifies which built-in setup commands to run. Available comm
 - `brew` - Install Homebrew dependencies
 - `asdf` - Setup version management with asdf
 - `git` - Configure git settings
+- `github_packages` - Store bundler credentials for a private GitHub Packages gem source using the GitHub CLI (run before `bundler`; requires a `github_packages.source` config entry)
 - `bundler` - Install Ruby gems
 - `yarn` - Install JavaScript packages
 - `config` - Copy configuration files

data/lib/discharger/setup_runner/commands/github_packages_command.rb

@@ -0,0 +1,106 @@
+# frozen_string_literal: true
+
+require_relative "base_command"
+
+module Discharger
+  module SetupRunner
+    module Commands
+      # Stores bundler credentials for a private GitHub Packages gem source
+      # using the GitHub CLI, so Gemfiles don't need embedded tokens.
+      # Credentials are written to the app's .bundle/config — keep .bundle
+      # gitignored. Run this step before "bundler" in setup.yml.
+      class GithubPackagesCommand < BaseCommand
+        def execute
+          unless gh_installed?
+            log "GitHub CLI (gh) not found; skipping. Install gh and rerun setup or `bundle install` may fail for #{source}"
+            return
+          end
+
+          unless authenticated? || login
+            log "Not logged in to GitHub; skipping. Run `gh auth login` and rerun setup."
+            return
+          end
+
+          username = gh("api", "user", "--jq", ".login")
+          token = gh("auth", "token")
+          if username.to_s.empty? || token.to_s.empty?
+            log "Could not read GitHub credentials from gh; skipping."
+            return
+          end
+
+          store_bundler_credentials(username, token)
+          if credentials_valid?(username, token)
+            log "Configured bundler credentials for #{source}"
+          else
+            log "#{source} rejected the stored credentials. Your gh token may lack " \
+              "the read:packages scope — run `gh auth refresh -s read:packages` and rerun setup."
+          end
+        end
+
+        def can_execute?
+          !source.to_s.empty?
+        end
+
+        def description
+          "Configure GitHub Packages credentials"
+        end
+
+        protected
+
+        def source
+          config.github_packages&.source if config.respond_to?(:github_packages)
+        end
+
+        def gh_installed?
+          system_quiet("which gh")
+        end
+
+        def authenticated?
+          system_quiet("gh auth status")
+        end
+
+        def login
+          return false unless $stdin.tty?
+          log "Logging in to GitHub..."
+          system("gh", "auth", "login")
+          authenticated?
+        end
+
+        def gh(*args)
+          require "open3"
+          stdout, _stderr, status = Open3.capture3("gh", *args)
+          status.success? ? stdout.chomp : nil
+        end
+
+        # Runs bundle config directly instead of through system! so the
+        # token never reaches the spinner display or the debug log.
+        def store_bundler_credentials(username, token)
+          require "open3"
+          _stdout, stderr, status = Open3.capture3(
+            "bundle", "config", "set", "--local", source, "#{username}:#{token}"
+          )
+          raise "bundle config set --local #{source} failed: #{stderr}" unless status.success?
+        end
+
+        # Probes the source's compact index with the stored credentials.
+        # Only a definite 401/403 counts as invalid — network trouble must
+        # not fail setup over an unverifiable token.
+        def credentials_valid?(username, token)
+          require "net/http"
+          require "uri"
+          uri = URI.join("#{source.chomp("/")}/", "versions")
+          response = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https",
+            open_timeout: 5, read_timeout: 10) do |http|
+            request = Net::HTTP::Get.new(uri)
+            request.basic_auth(username, token)
+            http.request(request)
+          end
+          !%w[401 403].include?(response.code)
+        rescue => e
+          logger&.debug("Could not verify GitHub Packages credentials: #{e.message}")
+          true
+        end
+      end
+    end
+  end
+end

data/lib/discharger/setup_runner/configuration.rb

@@ -5,12 +5,13 @@ require "yaml"
 module Discharger
   module SetupRunner
     class Configuration
-      attr_accessor :app_name, :database, :redis, :services, :steps, :custom_steps, :pre_steps
+      attr_accessor :app_name, :database, :redis, :github_packages, :services, :steps, :custom_steps, :pre_steps
 
       def initialize
         @app_name = "Application"
         @database = DatabaseConfig.new
         @redis = nil
+        @github_packages = nil
         @services = []
         @steps = []
         @custom_steps = []
@@ -27,6 +28,7 @@ module Discharger
         config.app_name = yaml["app_name"] if yaml["app_name"]
         config.database.from_hash(yaml["database"]) if yaml["database"]
         config.redis = RedisConfig.new.tap { |r| r.from_hash(yaml["redis"]) } if yaml["redis"]
+        config.github_packages = GithubPackagesConfig.new.tap { |g| g.from_hash(yaml["github_packages"]) } if yaml["github_packages"]
         config.services = yaml["services"] || []
         config.steps = yaml["steps"] || []
         config.custom_steps = yaml["custom_steps"] || []
@@ -56,6 +58,18 @@ module Discharger
       end
     end
 
+    class GithubPackagesConfig
+      attr_accessor :source
+
+      def initialize
+        @source = nil
+      end
+
+      def from_hash(hash)
+        @source = hash["source"] if hash["source"]
+      end
+    end
+
     class RedisConfig
       attr_accessor :port, :name, :version
 

data/lib/discharger/task.rb

@@ -201,6 +201,19 @@ module Discharger
         items.map { |item| "• #{item}" }.join("\n")
     end
 
+    # Post the runbook as a reply in a Slack thread, when a runbook is
+    # configured. Reuses the same message on the stage build and the
+    # production release. Returns the message posted, or nil when there is
+    # no thread to reply to or no runbook to announce.
+    def post_runbook_to_thread(version, thread_ts)
+      return unless thread_ts.present?
+      return unless (message = runbook_announcement(version))
+
+      tasker["#{name}:slack"].reenable
+      tasker["#{name}:slack"].invoke(message, release_message_channel, ":clipboard:", thread_ts)
+      message
+    end
+
     def existing_pr_number(base, head)
       stdout, _, status = Open3.capture3(
         "gh", "pr", "list",
@@ -315,10 +328,7 @@ module Discharger
             tasker["#{name}:slack"].reenable
             tasker["#{name}:slack"].invoke(text, release_message_channel, ":log:", thread_ts)
 
-            if (runbook_message = runbook_announcement(current_version))
-              tasker["#{name}:slack"].reenable
-              tasker["#{name}:slack"].invoke(runbook_message, release_message_channel, ":clipboard:", thread_ts)
-            end
+            post_runbook_to_thread(current_version, thread_ts)
           end
           # Signal success — no branch switch needed since we stay on working_branch throughout
           true
@@ -385,6 +395,7 @@ module Discharger
           ) do
             current_version = Object.const_get(version_constant)
             tasker["#{name}:slack"].invoke("Building #{app_name} #{current_version} (#{commit_identifier.call}) on #{staging_branch}.", release_message_channel)
+            post_runbook_to_thread(current_version, last_message_ts)
             syscall ["git checkout #{build_branch}"]
           end
         end

data/lib/discharger/version.rb

@@ -1,3 +1,3 @@
 module Discharger
-  VERSION = "0.3.3"
+  VERSION = "0.3.5"
 end

data/lib/generators/discharger/install/templates/setup.yml

@@ -18,6 +18,14 @@ redis:
   name: "redis-your-app"
   version: "latest"
 
+# Private GitHub Packages gem source (optional)
+# Stores bundler credentials from the GitHub CLI (gh) so the Gemfile
+# doesn't need an embedded token. Add "github_packages" to steps, before
+# "bundler". Credentials are written to .bundle/config — keep .bundle
+# gitignored.
+# github_packages:
+#   source: "https://rubygems.pkg.github.com/your-org"
+
 # Pre-Rails steps (run BEFORE Rails loads)
 # These are for system dependencies and environment setup that must happen
 # before bundler/Rails can initialize. Use sparingly.
@@ -36,7 +44,7 @@ pre_steps: []
   # - postgresql_tools # Optional: for apps that use structure.sql or pg_dump/psql directly
 
 # Built-in commands to run (empty array runs all available commands)
-# Available commands: brew, asdf, git, bundler, yarn, config, docker, pg_tools, env, database
+# Available commands: brew, asdf, git, github_packages, bundler, yarn, config, docker, pg_tools, env, database
 steps:
   - brew
   - asdf

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: discharger
 version: !ruby/object:Gem::Version
-  version: 0.3.3
+  version: 0.3.5
 platform: ruby
 authors:
 - Jim Gay
@@ -122,6 +122,7 @@ files:
 - lib/discharger/setup_runner/commands/docker_command.rb
 - lib/discharger/setup_runner/commands/env_command.rb
 - lib/discharger/setup_runner/commands/git_command.rb
+- lib/discharger/setup_runner/commands/github_packages_command.rb
 - lib/discharger/setup_runner/commands/pg_tools_command.rb
 - lib/discharger/setup_runner/commands/yarn_command.rb
 - lib/discharger/setup_runner/condition_evaluator.rb