@ipul-labs/forge 1.16.4 → 1.16.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ipul-labs/forge",
-  "version": "1.16.4",
+  "version": "1.16.5",
   "description": "AI-powered code change & deploy control panel — connects Claude, GitLab, and Kubernetes",
   "readmeFilename": "README.md",
   "type": "module",
@@ -16,6 +16,7 @@
   "files": [
     "README.md",
     "bin",
+    "scripts",
     "server/forge",
     "dist"
   ],
@@ -26,7 +27,7 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",
-    "prepack": "node -e \"const p=require('./package.json'),fs=require('fs');p.readme=fs.readFileSync('README.md','utf8');fs.writeFileSync('package.json',JSON.stringify(p,null,2)+'\\n')\""
+    "prepack": "node scripts/inject-readme.cjs"
   },
   "dependencies": {
     "@kubernetes/client-node": "^1.0.0",

package/scripts/inject-readme.cjs

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+const fs = require("fs");
+const path = require("path");
+
+const root = path.resolve(__dirname, "..");
+const pkgPath = path.join(root, "package.json");
+const readmePath = path.join(root, "README.md");
+
+if (!fs.existsSync(readmePath)) process.exit(0);
+
+const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+pkg.readme = fs.readFileSync(readmePath, "utf8");
+fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");

package/scripts/local-rollout.sh

@@ -0,0 +1,134 @@
+#!/usr/bin/env bash
+# ──────────────────────────────────────────────────────────────────────────────
+# Local dry-run of the same manifests + commands the *-rollout CI jobs execute.
+# Catches manifest bugs, missing env vars, image-pull problems, and rollout
+# logic errors BEFORE burning another CI cycle. Uses your local kubeconfig
+# (admin creds against k3s), so it does NOT test the agent SA's RBAC — for
+# that, the actual CI run is still the source of truth.
+#
+#   ./scripts/local-rollout.sh [test|prep|prod] [image-tag]
+#
+# Defaults: env=test, image-tag=<current deployment's tag OR "latest">
+#
+# Exits non-zero on the first failure with a clear message.
+# ──────────────────────────────────────────────────────────────────────────────
+
+set -euo pipefail
+
+ENV=${1:-test}
+IMAGE_TAG=${2:-}
+
+case "$ENV" in
+	test) NS=test; DEPLOY=forge-test; MANIFEST_DIR=manifests/test/forge-test ;;
+	prep) NS=prep; DEPLOY=forge-prep; MANIFEST_DIR=manifests/prep/forge-prep ;;
+	prod) NS=prod; DEPLOY=forge;      MANIFEST_DIR=manifests/prod/forge ;;
+	*) echo "Usage: $0 [test|prep|prod] [image-tag]"; exit 2 ;;
+esac
+
+# All envs pull from the same consolidated image repo. Per-env differences
+# live in the manifests, not in the image.
+IMAGE_REPO=iplayulisten/forge
+
+# ─── Helpers ──────────────────────────────────────────────────────────────────
+
+c_step()   { printf '\n\033[1;34m── %s ──\033[0m\n' "$*"; }
+c_ok()     { printf '\033[1;32m✓\033[0m %s\n' "$*"; }
+c_warn()   { printf '\033[1;33m⚠\033[0m %s\n' "$*"; }
+c_fail()   { printf '\033[1;31m✗\033[0m %s\n' "$*"; exit 1; }
+
+require() { command -v "$1" >/dev/null 2>&1 || c_fail "missing required binary: $1"; }
+
+# ─── Preflight ────────────────────────────────────────────────────────────────
+
+c_step "Preflight"
+require kubectl
+require openssl
+
+CTX=$(kubectl config current-context 2>/dev/null || true)
+[ -n "$CTX" ] || c_fail "no current kubectl context — set one with 'kubectl config use-context <name>'"
+c_ok "kubectl context: $CTX"
+
+if ! kubectl get ns "$NS" >/dev/null 2>&1; then
+	c_warn "namespace '$NS' doesn't exist — creating it"
+	kubectl create namespace "$NS"
+	c_ok "namespace '$NS' created"
+else
+	c_ok "namespace '$NS' exists"
+fi
+
+[ -d "$MANIFEST_DIR" ] || c_fail "manifest dir not found: $MANIFEST_DIR"
+c_ok "manifest dir: $MANIFEST_DIR"
+
+# ─── Secret creation (mirrors CI) ─────────────────────────────────────────────
+
+c_step "Secret: forge-secret"
+: "${FORGE_TOKEN:=}"
+: "${ANTHROPIC_API_KEY:=}"
+: "${GITLAB_TOKEN:=}"
+
+if [ -z "$FORGE_TOKEN" ]; then
+	c_warn "FORGE_TOKEN unset — generating a throwaway for this run"
+	FORGE_TOKEN=$(openssl rand -hex 32)
+fi
+[ -n "$GITLAB_TOKEN" ] || c_warn "GITLAB_TOKEN unset (forge backend needs this at runtime — ok for manifest test)"
+[ -n "$ANTHROPIC_API_KEY" ] || c_warn "ANTHROPIC_API_KEY unset (optional, only needed for quota probe)"
+
+kubectl create secret generic forge-secret \
+	--from-literal=FORGE_TOKEN="$FORGE_TOKEN" \
+	--from-literal=ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
+	--from-literal=GITLAB_TOKEN="$GITLAB_TOKEN" \
+	-n "$NS" --dry-run=client -o yaml | kubectl apply -f -
+c_ok "forge-secret applied"
+
+# ─── Apply manifests in CI order ──────────────────────────────────────────────
+
+for f in config-map.yaml service.yaml deployment.yaml; do
+	path="$MANIFEST_DIR/$f"
+	[ -f "$path" ] || c_fail "missing manifest: $path"
+	c_step "Applying $f"
+	kubectl apply -f "$path"
+	c_ok "$f applied"
+done
+
+# ─── Image tag ────────────────────────────────────────────────────────────────
+
+if [ -z "$IMAGE_TAG" ]; then
+	CURRENT_IMAGE=$(kubectl get deploy/"$DEPLOY" -n "$NS" -o jsonpath='{.spec.template.spec.containers[0].image}' 2>/dev/null || true)
+	if [ -n "$CURRENT_IMAGE" ] && [ "$CURRENT_IMAGE" != "*__VERSION__*" ] && [[ "$CURRENT_IMAGE" != *__VERSION__* ]]; then
+		IMAGE_TAG=${CURRENT_IMAGE##*:}
+		c_ok "reusing current deployment image tag: $IMAGE_TAG"
+	else
+		IMAGE_TAG=latest
+		c_warn "no usable tag in current deployment — falling back to '$IMAGE_TAG' (may fail to pull)"
+	fi
+fi
+
+c_step "kubectl set image → ${IMAGE_REPO}:${IMAGE_TAG}"
+kubectl set image deployment/"$DEPLOY" -n "$NS" "${DEPLOY}=${IMAGE_REPO}:${IMAGE_TAG}"
+c_ok "image set"
+
+# ─── Rollout ──────────────────────────────────────────────────────────────────
+
+c_step "Rollout status (120s timeout)"
+if kubectl rollout status deployment/"$DEPLOY" -n "$NS" --timeout=120s; then
+	c_ok "rollout succeeded"
+else
+	c_warn "rollout did not finish in 120s — dumping pod state to help diagnose"
+	kubectl get pods -n "$NS" -l app="$DEPLOY" -o wide || true
+	kubectl describe deployment/"$DEPLOY" -n "$NS" | sed -n '/Events:/,$p' || true
+	kubectl get events -n "$NS" --sort-by=.lastTimestamp | tail -20 || true
+	exit 1
+fi
+
+# ─── Summary ──────────────────────────────────────────────────────────────────
+
+c_step "Summary"
+kubectl get pods,svc,deploy -n "$NS" -l app="$DEPLOY"
+c_ok "local rollout for '$ENV' passed"
+echo
+echo "Next: push CI. If CI fails where this didn't, it's agent SA RBAC."
+echo "To tear down what this script created:"
+echo "  kubectl delete -f $MANIFEST_DIR/deployment.yaml -n $NS"
+echo "  kubectl delete -f $MANIFEST_DIR/service.yaml -n $NS"
+echo "  kubectl delete -f $MANIFEST_DIR/config-map.yaml -n $NS"
+echo "  kubectl delete secret forge-secret -n $NS"