@rizom/ops 0.2.0-alpha.4 → 0.2.0-alpha.6

package/dist/observed-status.d.ts

@@ -0,0 +1,12 @@
+import type { FetchLike } from "@brains/utils/origin-ca";
+import type { ObservedUserStatus, ResolvedUserIdentity } from "./load-registry";
+export interface LookupResult {
+    address: string;
+    family: number;
+}
+export type LookupHost = (hostname: string) => Promise<LookupResult>;
+export interface CreateObservedStatusResolverOptions {
+    fetchImpl?: FetchLike;
+    lookupHost?: LookupHost;
+}
+export declare function createObservedStatusResolver(options?: CreateObservedStatusResolverOptions): (user: ResolvedUserIdentity) => Promise<ObservedUserStatus>;

package/dist/origin-ca.d.ts

@@ -1 +1 @@
-export { createOriginCertificateRequest, generateOriginKeyPair, issueCloudflareOriginCertificate, setCloudflareZoneSslStrict, type CloudflareOriginCaResult, type FetchLike, type OriginCertificateRequest, type OriginKeyPair, } from "@brains/utils";
+export { createOriginCertificateRequest, generateOriginKeyPair, issueCloudflareOriginCertificate, setCloudflareZoneSslStrict, type CloudflareOriginCaResult, type FetchLike, type OriginCertificateRequest, type OriginKeyPair, } from "@brains/utils/origin-ca";

package/dist/run-command.d.ts

@@ -1,5 +1,6 @@
-import type { FetchLike } from "@brains/utils";
+import type { FetchLike } from "@brains/utils/origin-ca";
 import type { LoadPilotRegistryOptions } from "./load-registry";
+import { type LookupHost } from "./observed-status";
 import type { ParsedArgs } from "./parse-args";
 import { type RunCommand as OpsRunCommand } from "./run-subprocess";
 import { type SshKeygen } from "./ssh-key-bootstrap";
@@ -13,6 +14,7 @@ export interface CommandDependencies extends LoadPilotRegistryOptions {
     env?: NodeJS.ProcessEnv | undefined;
     logger?: ((message: string) => void) | undefined;
     fetchImpl?: FetchLike | undefined;
+    lookupHost?: LookupHost | undefined;
     secretRunCommand?: OpsRunCommand | undefined;
     bootstrapRunCommand?: OpsRunCommand | undefined;
     sshKeygen?: SshKeygen | undefined;

package/dist/ssh-key-bootstrap.d.ts

@@ -1,4 +1,4 @@
-import { type FetchLike } from "@brains/utils";
+import { type FetchLike } from "@brains/utils/origin-ca";
 import { type RunCommand } from "./run-subprocess";
 export interface SshKeyBootstrapOptions {
     env?: NodeJS.ProcessEnv | undefined;

package/package.json

@@ -4,7 +4,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.2.0-alpha.4",
+  "version": "0.2.0-alpha.6",
   "type": "module",
   "exports": {
     ".": {

package/templates/rover-pilot/.github/workflows/deploy.yml

@@ -192,6 +192,10 @@ jobs:
         env:
           SERVER_IP: ${{ steps.provision.outputs.server_ip }}
           VERSION: brain-${{ steps.user_config.outputs.brain_version }}
+          IMAGE_REPOSITORY: ${{ steps.user_config.outputs.image_repository }}
+          REGISTRY_USERNAME: ${{ steps.user_config.outputs.registry_username }}
+          BRAIN_DOMAIN: ${{ steps.user_config.outputs.brain_domain }}
+          BRAIN_YAML_PATH: ${{ steps.user_config.outputs.brain_yaml_path }}
         run: kamal setup --skip-push -c deploy/kamal/deploy.yml
 
       - name: Verify origin TLS

package/templates/rover-pilot/README.md

@@ -36,7 +36,7 @@ When a push changes only deploy contract files, CI prints `No affected user conf
 ## Commands
 
 - `brains-ops init <repo>`
-- `brains-ops render <repo>`
+- `brains-ops render <repo>` — regenerates `views/users.md` with live DNS, `/health`, and unauthenticated `/mcp` status checks
 - `brains-ops onboard <repo> <handle>`
 - `brains-ops ssh-key:bootstrap <repo>`
 - `brains-ops cert:bootstrap <repo> <handle>`

package/templates/rover-pilot/deploy/kamal/deploy.yml

@@ -2,7 +2,7 @@ service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 
 servers:
-  mcp:
+  web:
     hosts:
       - <%= ENV['SERVER_IP'] %>
 

package/templates/rover-pilot/docs/onboarding-checklist.md

@@ -9,5 +9,8 @@
 7. Run `bunx brains-ops cert:bootstrap <repo> <handle> --push-to gh`.
 8. Run `bunx brains-ops secrets:push <repo> <handle>`.
 9. Run `bunx brains-ops onboard <repo> <handle>`.
-10. For fleet upgrades, edit `pilot.yaml.brainVersion` and push once; CI rebuilds the shared image tag, refreshes generated user env files, and redeploys affected users.
-11. Hand the MCP connection details to the user.
+10. Verify the deployed rover core contract:
+    - `https://<handle>.rizom.ai/health` returns `200`
+    - unauthenticated `POST https://<handle>.rizom.ai/mcp` returns `401`
+11. For fleet upgrades, edit `pilot.yaml.brainVersion` and push once; CI rebuilds the shared image tag, refreshes generated user env files, and redeploys affected users.
+12. Hand the MCP connection details to the user.

package/templates/rover-pilot/docs/operator-playbook.md

@@ -53,6 +53,16 @@ When `@rizom/ops` changes the scaffolded deploy contract:
 3. review the resulting changes to `.env.schema`, `deploy/scripts/`, and workflows in git
 4. commit the updated deploy artifacts together
 
+## Rover-core verification notes
+
+Rover core is MCP-only. Do not expect the bare domain to serve a website.
+
+Use these checks after deploy:
+
+- `https://<handle>.rizom.ai/health` should return `200`
+- unauthenticated `POST https://<handle>.rizom.ai/mcp` should return `401 Unauthorized: Bearer token required`
+- a bare `GET /` may also return `401`; that is expected for rover core and does not indicate a bad deploy
+
 ## Recovery notes
 
 Document known failure modes, recovery steps, and operator notes here.