@rizom/ops 0.2.0-alpha.265 → 0.2.0-alpha.266

package/dist/schema.d.ts

@@ -10,6 +10,18 @@ export declare const canonicalBundleIdSchema: z.ZodEnum<{
     team: "team";
 }>;
 export type CanonicalBundleId = z.output<typeof canonicalBundleIdSchema>;
+/**
+ * The profile kinds the runtime's profile plugin registers. A user config
+ * selecting anything else composes a brain that fails at boot, so reject it
+ * at parse time. Kept in lockstep with @brains/profile BUILT_IN_PROFILE_KINDS
+ * by a test. Collective/organization brains use "organization".
+ */
+export declare const PROFILE_KINDS: readonly ["professional", "team", "organization"];
+export declare const profileKindSchema: z.ZodEnum<{
+    professional: "professional";
+    team: "team";
+    organization: "organization";
+}>;
 export interface PilotConfig {
     brainVersion: string;
     bundles: CanonicalBundleId[];
@@ -105,7 +117,7 @@ export declare const userSchema: z.ZodObject<{
     domainOverride: z.ZodOptional<z.ZodString>;
     cloudflareZoneId: z.ZodOptional<z.ZodString>;
     contentRepoOverride: z.ZodOptional<z.ZodString>;
-    profileKind: z.ZodOptional<z.ZodString>;
+    profileKind: z.ZodOptional<typeof profileKindSchema>;
     addOverride: z.ZodOptional<z.ZodArray<z.ZodString>>;
     removeOverride: z.ZodOptional<z.ZodArray<z.ZodString>>;
     siteOverride: z.ZodOptional<typeof siteOverrideSchema>;

package/dist/stress-command.d.ts

@@ -0,0 +1,14 @@
+export interface StressCommandOptions {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    stdin?: string;
+}
+export interface StressCommandResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export type StressCommandRunner = (command: string, args: readonly string[], options?: StressCommandOptions) => Promise<StressCommandResult>;
+export declare const runStressCommand: StressCommandRunner;
+export declare function requireCommand(runner: StressCommandRunner, command: string, args: readonly string[], options?: StressCommandOptions): Promise<StressCommandResult>;
+export declare function commandError(command: string, args: readonly string[], result: StressCommandResult): Error;

package/dist/stress-git-checkout.d.ts

@@ -0,0 +1,21 @@
+import { type StressCommandResult, type StressCommandRunner } from "./stress-command";
+/**
+ * Git operations against one content-repo checkout, executed through a
+ * stress command runner with token-bearing credentials.
+ */
+export declare class GitCheckout {
+    #private;
+    readonly dir: string;
+    constructor(runner: StressCommandRunner, dir: string, token: string);
+    /** Clone `repository`'s main branch into `dir` and pin it to origin/main. */
+    static clone(runner: StressCommandRunner, repository: string, dir: string, token: string): Promise<GitCheckout>;
+    run(args: readonly string[], required?: boolean): Promise<StressCommandResult>;
+    output(args: readonly string[]): Promise<string>;
+    sync(hardReset?: boolean): Promise<void>;
+    /** Stage everything and commit as the ops identity. */
+    commitAll(message: string): Promise<void>;
+    pushMainWithRebase(): Promise<void>;
+    /** Delete every remote stress backup branch; returns the deleted names. */
+    pruneStressBackupBranches(): Promise<string[]>;
+    private environment;
+}

package/dist/stress-health-monitor.d.ts

@@ -0,0 +1,46 @@
+import type { FetchLike } from "@brains/deploy-support/origin-ca";
+import { type StressHealthSample, type StressRuntimeSample } from "./directory-sync-stress";
+export interface HealthPayload {
+    version: string;
+    entities: number;
+    entityCounts: {
+        entityType: string;
+        count: number;
+    }[];
+}
+export declare function noteCount(payload: HealthPayload): number;
+export interface StressHealthMonitorOptions {
+    domain: string;
+    fetchImpl: FetchLike;
+    now: () => Date;
+    sleep: (milliseconds: number) => Promise<void>;
+    /** Take one runtime sample (e.g. docker stats over SSH), if available. */
+    sampleRuntime: () => Promise<StressRuntimeSample | undefined>;
+}
+/**
+ * Samples deployment health and runtime resource usage during a stress run,
+ * and answers entity-baseline waits against the operational health endpoint.
+ */
+export declare class StressHealthMonitor {
+    #private;
+    constructor(options: StressHealthMonitorOptions);
+    /** ISO timestamp of the most recent start() call. */
+    get startedAt(): string;
+    /** The first sampling failure since start(), if any. */
+    get error(): unknown;
+    get healthSamples(): readonly StressHealthSample[];
+    get runtimeSamples(): readonly StressRuntimeSample[];
+    /** Health samples between start() and markGateEnd() (or now). */
+    gateHealthSamples(): StressHealthSample[];
+    /** Exclude samples taken after this point from the gate window. */
+    markGateEnd(): void;
+    /** Probe optional health endpoints and add responsive ones to the loop. */
+    discoverEndpoints(): Promise<void>;
+    start(): void;
+    /** Stop sampling and wait for the loops; a loop error stays on `error`. */
+    stop(): Promise<void>;
+    waitForHealthSnapshot(timeoutMs: number): Promise<HealthPayload | undefined>;
+    waitForEntityBaseline(expectedNotes: number | undefined, expectedEntities: number | undefined, timeoutMs: number): Promise<HealthPayload | undefined>;
+    waitForStableEntityBaseline(expectedNotes: number | undefined, expectedEntities: number | undefined, timeoutMs: number): Promise<HealthPayload | undefined>;
+    fetchHealthPayload(): Promise<HealthPayload | undefined>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.265",
+  "version": "0.2.0-alpha.266",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",
@@ -23,6 +23,7 @@
   "devDependencies": {
     "@brains/deploy-support": "workspace:*",
     "@brains/eslint-config": "workspace:*",
+    "@brains/profile": "workspace:*",
     "@brains/site-composition": "workspace:*",
     "@brains/typescript-config": "workspace:*",
     "@brains/utils": "workspace:*",

package/templates/rover-pilot/.github/workflows/build.yml

@@ -11,6 +11,11 @@ on:
         description: 'Space-separated site packages for a per-instance site image (e.g. "@rizom/site-rizom-ai@0.2.0-alpha.148"). Empty builds the default fleet image.'
         required: false
         type: string
+      overwrite:
+        description: Rebuild an existing tag in place. Published tags are immutable; confirm only when replacing a tag whose containers were never deployed.
+        required: false
+        type: boolean
+        default: false
   push:
     branches: ["main"]
     paths:
@@ -54,6 +59,7 @@ jobs:
         env:
           BRAIN_VERSION_INPUT: ${{ inputs.brain_version || '' }}
           SITE_PACKAGES_INPUT: ${{ inputs.site_packages || '' }}
+          ALLOW_TAG_OVERWRITE: ${{ inputs.overwrite && 'true' || 'false' }}
         run: bun deploy/scripts/resolve-missing-images.ts
 
   no_builds: