@rizom/ops 0.2.0-alpha.6 → 0.2.0-alpha.600

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (82) hide show
  1. package/README.md +88 -4
  2. package/dist/age-key-bootstrap.d.ts +17 -0
  3. package/dist/brains-ops.js +790 -166
  4. package/dist/capability-bundle-migration.d.ts +22 -0
  5. package/dist/cert-bootstrap.d.ts +6 -4
  6. package/dist/content-repo-ref.d.ts +10 -0
  7. package/dist/content-repo.d.ts +13 -0
  8. package/dist/default-user-runner.d.ts +1 -1
  9. package/dist/deploy.js +110 -166
  10. package/dist/directory-sync-stress-system.d.ts +75 -0
  11. package/dist/directory-sync-stress.d.ts +117 -0
  12. package/dist/entries/deploy.d.ts +4 -2
  13. package/dist/health-watchdog-smoke.d.ts +54 -0
  14. package/dist/image-inventory.d.ts +4 -0
  15. package/dist/image-types.d.ts +7 -0
  16. package/dist/images.d.ts +89 -0
  17. package/dist/index.d.ts +11 -0
  18. package/dist/index.js +802 -166
  19. package/dist/legacy-pilot-migration.d.ts +11 -0
  20. package/dist/legacy-projection-job-recovery.d.ts +29 -0
  21. package/dist/load-registry.d.ts +88 -6
  22. package/dist/observed-status.d.ts +1 -1
  23. package/dist/onboard-user.d.ts +2 -2
  24. package/dist/parse-args.d.ts +2 -10
  25. package/dist/preview-domain.d.ts +9 -0
  26. package/dist/reconcile-all.d.ts +2 -2
  27. package/dist/reconcile-cohort.d.ts +2 -2
  28. package/dist/reconcile-dry-run.d.ts +9 -0
  29. package/dist/reconcile-lib.d.ts +4 -2
  30. package/dist/run-command.d.ts +22 -6
  31. package/dist/runtime-image-lock.d.ts +12 -0
  32. package/dist/schema.d.ts +147 -69
  33. package/dist/secrets-encrypt.d.ts +26 -0
  34. package/dist/secrets-push.d.ts +2 -2
  35. package/dist/ssh-key-bootstrap.d.ts +1 -26
  36. package/dist/stage-legacy-crossover.d.ts +25 -0
  37. package/dist/stress-command.d.ts +14 -0
  38. package/dist/stress-git-checkout.d.ts +21 -0
  39. package/dist/stress-health-monitor.d.ts +46 -0
  40. package/dist/upgrade.d.ts +10 -0
  41. package/dist/user-add.d.ts +16 -0
  42. package/dist/user-offboard.d.ts +61 -0
  43. package/dist/user-runner.d.ts +5 -0
  44. package/dist/verify-user.d.ts +22 -0
  45. package/package.json +51 -40
  46. package/templates/rover-pilot/.env.schema +28 -2
  47. package/templates/rover-pilot/.github/actions/varlock-env/action.yml +47 -0
  48. package/templates/rover-pilot/.github/workflows/build.yml +72 -17
  49. package/templates/rover-pilot/.github/workflows/deploy.yml +118 -49
  50. package/templates/rover-pilot/.github/workflows/directory-sync-stress.yml +119 -0
  51. package/templates/rover-pilot/.github/workflows/health-watchdog-smoke.yml +95 -0
  52. package/templates/rover-pilot/.github/workflows/offboard.yml +107 -0
  53. package/templates/rover-pilot/.github/workflows/reconcile.yml +23 -3
  54. package/templates/rover-pilot/.github/workflows/upgrade.yml +104 -0
  55. package/templates/rover-pilot/README.md +19 -8
  56. package/templates/rover-pilot/deploy/scripts/create-predeploy-backup.ts +948 -0
  57. package/templates/rover-pilot/deploy/scripts/decrypt-user-secrets.ts +139 -0
  58. package/templates/rover-pilot/deploy/scripts/helpers.ts +3 -0
  59. package/templates/rover-pilot/deploy/scripts/install-health-watchdog.ts +144 -0
  60. package/templates/rover-pilot/deploy/scripts/provision-server.ts +52 -22
  61. package/templates/rover-pilot/deploy/scripts/resolve-deploy-handles.ts +19 -4
  62. package/templates/rover-pilot/deploy/scripts/resolve-missing-images.ts +13 -0
  63. package/templates/rover-pilot/deploy/scripts/resolve-user-config.ts +56 -14
  64. package/templates/rover-pilot/deploy/scripts/sync-content-repo.ts +183 -0
  65. package/templates/rover-pilot/deploy/scripts/update-dns.ts +72 -16
  66. package/templates/rover-pilot/deploy/scripts/validate-secrets.ts +12 -1
  67. package/templates/rover-pilot/deploy/scripts/verify-runtime-image.ts +18 -0
  68. package/templates/rover-pilot/docs/canonical-crossover-record.md +107 -0
  69. package/templates/rover-pilot/docs/onboarding-checklist.md +39 -13
  70. package/templates/rover-pilot/docs/operator-playbook.md +421 -22
  71. package/templates/rover-pilot/docs/user-onboarding.md +90 -0
  72. package/templates/rover-pilot/package.json +4 -0
  73. package/templates/rover-pilot/pilot.yaml +9 -3
  74. package/templates/rover-pilot/users/alice.yaml +5 -1
  75. package/dist/origin-ca.d.ts +0 -1
  76. package/dist/push-secrets.d.ts +0 -9
  77. package/dist/push-target.d.ts +0 -2
  78. package/dist/run-subprocess.d.ts +0 -5
  79. package/dist/user-secret-names.d.ts +0 -6
  80. package/templates/rover-pilot/.kamal/hooks/pre-deploy +0 -9
  81. package/templates/rover-pilot/deploy/Dockerfile +0 -15
  82. package/templates/rover-pilot/deploy/kamal/deploy.yml +0 -39
package/templates/rover-pilot/.kamal/hooks/pre-deploy DELETED
@@ -1,9 +0,0 @@
1
- #!/usr/bin/env bash
2
- set -euo pipefail
3
-
4
- BRAIN_FILE="${BRAIN_YAML_PATH:-brain.yaml}"
5
- SSH_USER="$(ruby -e 'require "yaml"; config = YAML.load_file("deploy/kamal/deploy.yml") || {}; puts(config.dig("ssh", "user") || "root")')"
6
- IFS=',' read -ra HOSTS <<< "$KAMAL_HOSTS"
7
- for host in "${HOSTS[@]}"; do
8
- scp -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null "$BRAIN_FILE" "${SSH_USER}@${host}:/opt/brain.yaml"
9
- done
package/templates/rover-pilot/deploy/Dockerfile DELETED
@@ -1,15 +0,0 @@
1
- ARG BUN_VERSION=1.3.10
2
- FROM oven/bun:${BUN_VERSION}-slim
3
-
4
- ARG BRAIN_VERSION
5
- WORKDIR /app
6
-
7
- RUN test -n "$BRAIN_VERSION" \
8
- && printf '{"name":"rover-pilot-runtime","private":true}\n' > package.json \
9
- && bun add @rizom/brain@$BRAIN_VERSION
10
-
11
- ENV XDG_DATA_HOME=/data
12
- ENV XDG_CONFIG_HOME=/config
13
- RUN mkdir -p /app/brain-data /data /config && chmod -R 777 /app/brain-data /data /config
14
-
15
- CMD ["sh", "-c", "exec ./node_modules/.bin/brain start"]
package/templates/rover-pilot/deploy/kamal/deploy.yml DELETED
@@ -1,39 +0,0 @@
1
- service: rover
2
- image: <%= ENV['IMAGE_REPOSITORY'] %>
3
-
4
- servers:
5
- web:
6
- hosts:
7
- - <%= ENV['SERVER_IP'] %>
8
-
9
- proxy:
10
- ssl:
11
- certificate_pem: CERTIFICATE_PEM
12
- private_key_pem: PRIVATE_KEY_PEM
13
- hosts:
14
- - <%= ENV['BRAIN_DOMAIN'] %>
15
- app_port: 3333
16
- healthcheck:
17
- path: /health
18
-
19
- registry:
20
- server: ghcr.io
21
- username: <%= ENV['REGISTRY_USERNAME'] %>
22
- password:
23
- - KAMAL_REGISTRY_PASSWORD
24
-
25
- builder:
26
- arch: amd64
27
-
28
- env:
29
- clear:
30
- NODE_ENV: production
31
- secret:
32
- - AI_API_KEY
33
- - GIT_SYNC_TOKEN
34
- - MCP_AUTH_TOKEN
35
- - DISCORD_BOT_TOKEN
36
-
37
- volumes:
38
- - /opt/brain-data:/app/brain-data
39
- - /opt/brain.yaml:/app/brain.yaml