@rizom/ops 0.2.0-alpha.1 → 0.2.0-alpha.2

package/dist/parse-args.d.ts

@@ -4,6 +4,7 @@ export interface ParsedArgs {
     flags: {
         help?: boolean | undefined;
         version?: boolean | undefined;
+        dryRun?: boolean | undefined;
     };
 }
 export declare function parseArgs(argv: string[]): ParsedArgs;

package/dist/run-command.d.ts

@@ -1,5 +1,6 @@
 import type { LoadPilotRegistryOptions } from "./load-registry";
 import type { ParsedArgs } from "./parse-args";
+import { type RunCommand as SecretRunCommand } from "./secrets-push";
 import type { UserRunner } from "./user-runner";
 export interface CommandResult {
     success: boolean;
@@ -7,5 +8,8 @@ export interface CommandResult {
 }
 export interface CommandDependencies extends LoadPilotRegistryOptions {
     runner?: UserRunner;
+    env?: NodeJS.ProcessEnv | undefined;
+    logger?: ((message: string) => void) | undefined;
+    secretRunCommand?: SecretRunCommand | undefined;
 }
 export declare function runCommand(parsed: ParsedArgs, dependencies?: CommandDependencies): Promise<CommandResult>;

package/dist/secrets-push.d.ts

@@ -0,0 +1,16 @@
+export interface SecretsPushOptions {
+    env?: NodeJS.ProcessEnv | undefined;
+    logger?: ((message: string) => void) | undefined;
+    dryRun?: boolean | undefined;
+    runCommand?: RunCommand | undefined;
+}
+export interface SecretsPushResult {
+    pushedKeys: string[];
+    skippedKeys: string[];
+    dryRun?: boolean | undefined;
+}
+export type RunCommand = (command: string, args: string[], options?: {
+    stdin?: string;
+    env?: NodeJS.ProcessEnv;
+}) => Promise<void>;
+export declare function pushPilotSecrets(rootDir: string, handle: string, options?: SecretsPushOptions): Promise<SecretsPushResult>;

package/package.json

@@ -4,7 +4,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.2.0-alpha.1",
+  "version": "0.2.0-alpha.2",
   "type": "module",
   "exports": {
     ".": {

package/templates/rover-pilot/.github/workflows/deploy.yml

@@ -28,6 +28,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           ref: ${{ github.sha }}
+          fetch-depth: 0
 
       - uses: oven-sh/setup-bun@v2
 

package/templates/rover-pilot/README.md

@@ -38,5 +38,6 @@ When a push changes only deploy contract files, CI prints `No affected user conf
 - `brains-ops init <repo>`
 - `brains-ops render <repo>`
 - `brains-ops onboard <repo> <handle>`
+- `brains-ops secrets:push <repo> <handle>`
 - `brains-ops reconcile-cohort <repo> <cohort>`
 - `brains-ops reconcile-all <repo>`

package/templates/rover-pilot/docs/onboarding-checklist.md

@@ -5,6 +5,7 @@
 3. Add or edit `users/<handle>.yaml`.
 4. Add the user to a cohort in `cohorts/*.yaml`.
 5. Run `bunx brains-ops render <repo>`.
-6. Run `bunx brains-ops onboard <repo> <handle>`.
-7. For fleet upgrades, edit `pilot.yaml.brainVersion` and push once; CI rebuilds the shared image tag, refreshes generated user env files, and redeploys affected users.
-8. Hand the MCP connection details to the user.
+6. Run `bunx brains-ops secrets:push <repo> <handle>`.
+7. Run `bunx brains-ops onboard <repo> <handle>`.
+8. For fleet upgrades, edit `pilot.yaml.brainVersion` and push once; CI rebuilds the shared image tag, refreshes generated user env files, and redeploys affected users.
+9. Hand the MCP connection details to the user.