discharger 0.3.4 → 0.3.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 25a6ab71ff65d9ada8fe82ce0a706b08d335aaa533b10c1b57a652434149cd91
-  data.tar.gz: 524b68d60300a017c7d83bc7162f1962819b44f1be1255ec1fd8651b47740374
+  metadata.gz: 97070aca58c88a6f43e34f7d45bec964122a6db867e9bd5333988a082bb41d47
+  data.tar.gz: 0f39ea2c1136914a33666593af2bdaeed6f358a34364f9ffcb9b1557976c3fae
 SHA512:
-  metadata.gz: 7b67aaf1127f81ca25f3f4f78ce3fc5884920048baa022128b46dfa24e4ab01dee3b4574894d7e3305026cdfc7eb4659351b3cf649dc509e2d8c76982207bf01
-  data.tar.gz: 894a03d8fd806db6d0c831a1c47191332aa5cae0ab02fdf7709a040cab2e50f9e8a2ee02030d6e5015bfe2ab03d8a5e7ae806d6e79e9f0fe3f020a8f2cdc8a75
+  metadata.gz: 617ed8ed6727d1e1817e7859ce8121553399bd1ec0c5c70b2002d93eb0273915e112d5b30d6ba2e045e18ff0b4fd1bf075cc78d0000f0b8abdc360102d14cb0c
+  data.tar.gz: d8470a667ff24259e5efc590ad63fb7be3884e31ce3e35a5e3b8d22fdb3a399fe4948b3e8e465d2b4aee34e24e2ef25fce86453a041083abb6947b6b3454d7f7

data/CHANGELOG.md

@@ -5,14 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
-## [0.3.4] - 2026-07-22
+## [0.3.5] - 2026-08-10
 
 ### Added
 
-- Runbook announcement on stage builds, previewing post-release steps before production (c77b552)
+- github_packages setup step storing bundler credentials for a private GitHub Packages gem source via the gh CLI (2cff4b6)
 
-## [0.3.3] - 2026-07-22
+## [0.3.4] - 2026-07-22
 
 ### Added
 
-- Post-release runbook announcement in the Slack release thread, from Reissue's runbook_file (0cf9620)
+- Runbook announcement on stage builds, previewing post-release steps before production (c77b552)

data/README.md

@@ -274,6 +274,7 @@ The `steps` array specifies which built-in setup commands to run. Available comm
 - `brew` - Install Homebrew dependencies
 - `asdf` - Setup version management with asdf
 - `git` - Configure git settings
+- `github_packages` - Store bundler credentials for a private GitHub Packages gem source using the GitHub CLI (run before `bundler`; requires a `github_packages.source` config entry)
 - `bundler` - Install Ruby gems
 - `yarn` - Install JavaScript packages
 - `config` - Copy configuration files

data/lib/discharger/setup_runner/commands/github_packages_command.rb

@@ -0,0 +1,106 @@
+# frozen_string_literal: true
+
+require_relative "base_command"
+
+module Discharger
+  module SetupRunner
+    module Commands
+      # Stores bundler credentials for a private GitHub Packages gem source
+      # using the GitHub CLI, so Gemfiles don't need embedded tokens.
+      # Credentials are written to the app's .bundle/config — keep .bundle
+      # gitignored. Run this step before "bundler" in setup.yml.
+      class GithubPackagesCommand < BaseCommand
+        def execute
+          unless gh_installed?
+            log "GitHub CLI (gh) not found; skipping. Install gh and rerun setup or `bundle install` may fail for #{source}"
+            return
+          end
+
+          unless authenticated? || login
+            log "Not logged in to GitHub; skipping. Run `gh auth login` and rerun setup."
+            return
+          end
+
+          username = gh("api", "user", "--jq", ".login")
+          token = gh("auth", "token")
+          if username.to_s.empty? || token.to_s.empty?
+            log "Could not read GitHub credentials from gh; skipping."
+            return
+          end
+
+          store_bundler_credentials(username, token)
+          if credentials_valid?(username, token)
+            log "Configured bundler credentials for #{source}"
+          else
+            log "#{source} rejected the stored credentials. Your gh token may lack " \
+              "the read:packages scope — run `gh auth refresh -s read:packages` and rerun setup."
+          end
+        end
+
+        def can_execute?
+          !source.to_s.empty?
+        end
+
+        def description
+          "Configure GitHub Packages credentials"
+        end
+
+        protected
+
+        def source
+          config.github_packages&.source if config.respond_to?(:github_packages)
+        end
+
+        def gh_installed?
+          system_quiet("which gh")
+        end
+
+        def authenticated?
+          system_quiet("gh auth status")
+        end
+
+        def login
+          return false unless $stdin.tty?
+          log "Logging in to GitHub..."
+          system("gh", "auth", "login")
+          authenticated?
+        end
+
+        def gh(*args)
+          require "open3"
+          stdout, _stderr, status = Open3.capture3("gh", *args)
+          status.success? ? stdout.chomp : nil
+        end
+
+        # Runs bundle config directly instead of through system! so the
+        # token never reaches the spinner display or the debug log.
+        def store_bundler_credentials(username, token)
+          require "open3"
+          _stdout, stderr, status = Open3.capture3(
+            "bundle", "config", "set", "--local", source, "#{username}:#{token}"
+          )
+          raise "bundle config set --local #{source} failed: #{stderr}" unless status.success?
+        end
+
+        # Probes the source's compact index with the stored credentials.
+        # Only a definite 401/403 counts as invalid — network trouble must
+        # not fail setup over an unverifiable token.
+        def credentials_valid?(username, token)
+          require "net/http"
+          require "uri"
+          uri = URI.join("#{source.chomp("/")}/", "versions")
+          response = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https",
+            open_timeout: 5, read_timeout: 10) do |http|
+            request = Net::HTTP::Get.new(uri)
+            request.basic_auth(username, token)
+            http.request(request)
+          end
+          !%w[401 403].include?(response.code)
+        rescue => e
+          logger&.debug("Could not verify GitHub Packages credentials: #{e.message}")
+          true
+        end
+      end
+    end
+  end
+end

data/lib/discharger/setup_runner/configuration.rb

@@ -5,12 +5,13 @@ require "yaml"
 module Discharger
   module SetupRunner
     class Configuration
-      attr_accessor :app_name, :database, :redis, :services, :steps, :custom_steps, :pre_steps
+      attr_accessor :app_name, :database, :redis, :github_packages, :services, :steps, :custom_steps, :pre_steps
 
       def initialize
         @app_name = "Application"
         @database = DatabaseConfig.new
         @redis = nil
+        @github_packages = nil
         @services = []
         @steps = []
         @custom_steps = []
@@ -27,6 +28,7 @@ module Discharger
         config.app_name = yaml["app_name"] if yaml["app_name"]
         config.database.from_hash(yaml["database"]) if yaml["database"]
         config.redis = RedisConfig.new.tap { |r| r.from_hash(yaml["redis"]) } if yaml["redis"]
+        config.github_packages = GithubPackagesConfig.new.tap { |g| g.from_hash(yaml["github_packages"]) } if yaml["github_packages"]
         config.services = yaml["services"] || []
         config.steps = yaml["steps"] || []
         config.custom_steps = yaml["custom_steps"] || []
@@ -56,6 +58,18 @@ module Discharger
       end
     end
 
+    class GithubPackagesConfig
+      attr_accessor :source
+
+      def initialize
+        @source = nil
+      end
+
+      def from_hash(hash)
+        @source = hash["source"] if hash["source"]
+      end
+    end
+
     class RedisConfig
       attr_accessor :port, :name, :version
 

data/lib/discharger/version.rb

@@ -1,3 +1,3 @@
 module Discharger
-  VERSION = "0.3.4"
+  VERSION = "0.3.5"
 end

data/lib/generators/discharger/install/templates/setup.yml

@@ -18,6 +18,14 @@ redis:
   name: "redis-your-app"
   version: "latest"
 
+# Private GitHub Packages gem source (optional)
+# Stores bundler credentials from the GitHub CLI (gh) so the Gemfile
+# doesn't need an embedded token. Add "github_packages" to steps, before
+# "bundler". Credentials are written to .bundle/config — keep .bundle
+# gitignored.
+# github_packages:
+#   source: "https://rubygems.pkg.github.com/your-org"
+
 # Pre-Rails steps (run BEFORE Rails loads)
 # These are for system dependencies and environment setup that must happen
 # before bundler/Rails can initialize. Use sparingly.
@@ -36,7 +44,7 @@ pre_steps: []
   # - postgresql_tools # Optional: for apps that use structure.sql or pg_dump/psql directly
 
 # Built-in commands to run (empty array runs all available commands)
-# Available commands: brew, asdf, git, bundler, yarn, config, docker, pg_tools, env, database
+# Available commands: brew, asdf, git, github_packages, bundler, yarn, config, docker, pg_tools, env, database
 steps:
   - brew
   - asdf

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: discharger
 version: !ruby/object:Gem::Version
-  version: 0.3.4
+  version: 0.3.5
 platform: ruby
 authors:
 - Jim Gay
@@ -122,6 +122,7 @@ files:
 - lib/discharger/setup_runner/commands/docker_command.rb
 - lib/discharger/setup_runner/commands/env_command.rb
 - lib/discharger/setup_runner/commands/git_command.rb
+- lib/discharger/setup_runner/commands/github_packages_command.rb
 - lib/discharger/setup_runner/commands/pg_tools_command.rb
 - lib/discharger/setup_runner/commands/yarn_command.rb
 - lib/discharger/setup_runner/condition_evaluator.rb