@rizom/ops 0.2.0-alpha.12 → 0.2.0-alpha.120

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. package/README.md +7 -3
  2. package/dist/age-key-bootstrap.d.ts +17 -0
  3. package/dist/brains-ops.js +281 -160
  4. package/dist/cert-bootstrap.d.ts +3 -3
  5. package/dist/content-repo.d.ts +4 -0
  6. package/dist/deploy.js +3 -170
  7. package/dist/entries/deploy.d.ts +2 -2
  8. package/dist/index.d.ts +4 -0
  9. package/dist/index.js +280 -159
  10. package/dist/load-registry.d.ts +12 -3
  11. package/dist/observed-status.d.ts +1 -1
  12. package/dist/origin-ca.d.ts +1 -1
  13. package/dist/parse-args.d.ts +2 -0
  14. package/dist/push-secrets.d.ts +1 -1
  15. package/dist/run-command.d.ts +1 -2
  16. package/dist/schema.d.ts +64 -10
  17. package/dist/secrets-encrypt.d.ts +32 -0
  18. package/dist/secrets-push.d.ts +1 -1
  19. package/dist/ssh-key-bootstrap.d.ts +1 -1
  20. package/dist/user-add.d.ts +15 -0
  21. package/dist/verify-user.d.ts +19 -0
  22. package/package.json +7 -3
  23. package/templates/rover-pilot/.env.schema +21 -2
  24. package/templates/rover-pilot/.github/workflows/build.yml +13 -5
  25. package/templates/rover-pilot/.github/workflows/deploy.yml +64 -27
  26. package/templates/rover-pilot/.github/workflows/reconcile.yml +16 -2
  27. package/templates/rover-pilot/README.md +6 -3
  28. package/templates/rover-pilot/deploy/scripts/decrypt-user-secrets.ts +79 -0
  29. package/templates/rover-pilot/deploy/scripts/provision-server.ts +1 -1
  30. package/templates/rover-pilot/deploy/scripts/resolve-deploy-handles.ts +15 -6
  31. package/templates/rover-pilot/deploy/scripts/resolve-user-config.ts +12 -12
  32. package/templates/rover-pilot/deploy/scripts/update-dns.ts +14 -4
  33. package/templates/rover-pilot/docs/onboarding-checklist.md +43 -14
  34. package/templates/rover-pilot/docs/operator-playbook.md +159 -10
  35. package/templates/rover-pilot/docs/user-onboarding.md +156 -295
  36. package/templates/rover-pilot/package.json +3 -0
  37. package/templates/rover-pilot/pilot.yaml +3 -0
  38. package/templates/rover-pilot/users/alice.yaml +2 -1
  39. package/dist/user-secret-names.d.ts +0 -6
  40. package/templates/rover-pilot/.kamal/hooks/pre-deploy +0 -9
  41. package/templates/rover-pilot/deploy/Caddyfile +0 -72
  42. package/templates/rover-pilot/deploy/Dockerfile +0 -38
  43. package/templates/rover-pilot/deploy/kamal/deploy.yml +0 -40
package/templates/rover-pilot/deploy/Dockerfile DELETED
@@ -1,38 +0,0 @@
1
- ARG BUN_VERSION=1.3.10
2
- FROM oven/bun:${BUN_VERSION}-slim AS runtime
3
-
4
- WORKDIR /app
5
-
6
- RUN apt-get update && apt-get install -y --no-install-recommends \
7
- curl ca-certificates git gnupg debian-keyring debian-archive-keyring apt-transport-https \
8
- && curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg \
9
- && curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | tee /etc/apt/sources.list.d/caddy-stable.list \
10
- && apt-get update && apt-get install -y --no-install-recommends caddy libcap2-bin \
11
- && setcap cap_net_bind_service=+ep $(which caddy) \
12
- && rm -rf /var/lib/apt/lists/*
13
-
14
- COPY deploy/Caddyfile /etc/caddy/Caddyfile
15
-
16
- RUN mkdir -p /srv/fallback && \
17
- printf '<!doctype html><html><head><meta charset="utf-8"><title>brain</title></head><body></body></html>\n' \
18
- > /srv/fallback/index.html
19
-
20
- ENV XDG_DATA_HOME=/data
21
- ENV XDG_CONFIG_HOME=/config
22
- RUN mkdir -p /app/data /app/cache /app/brain-data && \
23
- chmod -R 777 /app/data /app/cache /app/brain-data
24
-
25
- CMD ["sh", "-c", "caddy start --config /etc/caddy/Caddyfile && exec ./node_modules/.bin/brain start"]
26
-
27
- # --- standalone: bake full project into image (brain-cli deploy) ---
28
- FROM runtime AS standalone
29
- COPY package.json ./package.json
30
- RUN bun install --production --ignore-scripts
31
- COPY . .
32
-
33
- # --- fleet: install published brain at pinned version (ops deploy) ---
34
- FROM runtime AS fleet
35
- ARG BRAIN_VERSION
36
- RUN test -n "$BRAIN_VERSION" \
37
- && printf '{"name":"rover-pilot-runtime","private":true}\n' > package.json \
38
- && bun add @rizom/brain@$BRAIN_VERSION
package/templates/rover-pilot/deploy/kamal/deploy.yml DELETED
@@ -1,40 +0,0 @@
1
- service: rover
2
- image: <%= ENV['IMAGE_REPOSITORY'] %>
3
-
4
- servers:
5
- web:
6
- hosts:
7
- - <%= ENV['SERVER_IP'] %>
8
-
9
- proxy:
10
- ssl:
11
- certificate_pem: CERTIFICATE_PEM
12
- private_key_pem: PRIVATE_KEY_PEM
13
- hosts:
14
- - <%= ENV['BRAIN_DOMAIN'] %>
15
- - preview.<%= ENV['BRAIN_DOMAIN'] %>
16
- app_port: 80
17
- healthcheck:
18
- path: /health
19
-
20
- registry:
21
- server: ghcr.io
22
- username: <%= ENV['REGISTRY_USERNAME'] %>
23
- password:
24
- - KAMAL_REGISTRY_PASSWORD
25
-
26
- builder:
27
- arch: amd64
28
-
29
- env:
30
- clear:
31
- NODE_ENV: production
32
- secret:
33
- - AI_API_KEY
34
- - GIT_SYNC_TOKEN
35
- - MCP_AUTH_TOKEN
36
- - DISCORD_BOT_TOKEN
37
-
38
- volumes:
39
- - /opt/brain-data:/app/brain-data
40
- - /opt/brain.yaml:/app/brain.yaml