@rizom/ops 0.2.0-alpha.243 → 0.2.0-alpha.244

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. package/README.md +16 -1
  2. package/dist/brains-ops.js +289 -142
  3. package/dist/deploy.js +59 -59
  4. package/dist/images.d.ts +3 -3
  5. package/dist/index.d.ts +1 -0
  6. package/dist/index.js +315 -168
  7. package/dist/legacy-pilot-migration.d.ts +11 -0
  8. package/dist/load-registry.d.ts +7 -5
  9. package/dist/reconcile-dry-run.d.ts +9 -0
  10. package/dist/schema.d.ts +39 -33
  11. package/dist/secrets-encrypt.d.ts +2 -0
  12. package/dist/stage-legacy-crossover.d.ts +20 -0
  13. package/dist/verify-user.d.ts +1 -1
  14. package/package.json +3 -2
  15. package/templates/rover-pilot/.env.schema +7 -0
  16. package/templates/rover-pilot/README.md +6 -3
  17. package/templates/rover-pilot/deploy/scripts/decrypt-user-secrets.ts +2 -0
  18. package/templates/rover-pilot/deploy/scripts/validate-secrets.ts +11 -0
  19. package/templates/rover-pilot/docs/canonical-crossover-record.md +103 -0
  20. package/templates/rover-pilot/docs/onboarding-checklist.md +8 -12
  21. package/templates/rover-pilot/docs/operator-playbook.md +69 -50
  22. package/templates/rover-pilot/docs/user-onboarding.md +39 -68
  23. package/templates/rover-pilot/pilot.yaml +2 -3
package/README.md CHANGED
@@ -5,6 +5,7 @@ Operator CLI package for managing pilot brain fleet registry repos.
5
5
  ## Commands
6
6
 
7
7
  - `brains-ops init <repo>`
8
+ - `brains-ops crossover:stage <source-repo> <output-dir> [site-pins.yaml]` — creates a separate secret-free canonical review copy without mutating the source; a reviewed pins file is required when hosted site overrides exist
8
9
  - `brains-ops render <repo>` — regenerates `views/users.md` and fills status columns from built-in live probes (`DNS`, `/health`, unauthenticated `/mcp`)
9
10
  - `brains-ops user:add <repo> <handle> --cohort <cohort>` — scaffolds a user file, per-user secrets template, and cohort membership
10
11
  - `brains-ops onboard <repo> <handle>` — creates/seeds the user's content repo using `CONTENT_REPO_ADMIN_TOKEN` for GitHub repo administration and `GIT_SYNC_TOKEN` for git clone/push
@@ -13,14 +14,28 @@ Operator CLI package for managing pilot brain fleet registry repos.
13
14
  - `brains-ops cert:bootstrap <repo>`
14
15
  - `brains-ops secrets:push <repo>`
15
16
  - `brains-ops secrets:encrypt <repo> <handle>`
16
- - `brains-ops verify-user <repo> <handle>` — checks `/health`, unauthenticated `/mcp`, and default-preset browser/CMS routes
17
+ - `brains-ops verify-user <repo> <handle>` — checks `/health`, unauthenticated `/mcp`, and site-enabled browser/CMS routes
17
18
  - `brains-ops reconcile-cohort <repo> <cohort>`
18
19
  - `brains-ops reconcile-all <repo>`
20
+ - `brains-ops reconcile-all <repo> --dry-run` — reconciles an isolated copy twice with external content-repository access blocked, reports first-pass drift, and requires second-pass zero drift
19
21
 
20
22
  ## Scope
21
23
 
22
24
  `brains-ops` lives in the `brains` monorepo and is consumed as a separate package.
23
25
 
26
+ The active loader accepts one unversioned canonical schema. Legacy parsing is isolated to the temporary `crossover:stage` command and is never used by render, verify, or reconciliation paths.
27
+
28
+ Crossover staging excludes source `.git`, `.operator`, `.brains-ops`, `.turbo`, `dist`, `node_modules`, plaintext `.env`/`.env.local`, and `*.secrets.yaml` artifacts. It generates fresh per-user `.env` selector files in the review copy without copying source secret values. Hosted sites must be enumerated in a separate reviewed file; staging rejects missing, extra, or identity-mismatched pins instead of inferring versions:
29
+
30
+ ```yaml
31
+ sites:
32
+ example:
33
+ package: "@rizom/site-example"
34
+ version: 0.2.0-alpha.1
35
+ theme: "@rizom/theme-example"
36
+ themeVersion: 0.2.0-alpha.1
37
+ ```
38
+
24
39
  It operates on a separate private data repo, such as `rover-pilot/`, which stores:
25
40
 
26
41
  - `pilot.yaml`