rdst 0.1.185__tar.gz

rdst-0.1.185/.buildkite/build_package.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Build Python package (wheel and sdist) with automatic versioning
+cd rdst
+
+# Clean old build artifacts
+echo "Cleaning old build artifacts..."
+rm -rf dist/ build/ *.egg-info
+
+echo "Installing build dependencies..."
+# Use PyPI directly to avoid CodeArtifact credential issues for build tools
+python -m pip install --upgrade --index-url https://pypi.org/simple build twine
+
+# Read major and minor version from _version.py
+# Change to rdst directory if we're in the repo root
+if [[ -f "rdst/_version.py" ]]; then
+  VERSION_FILE="rdst/_version.py"
+elif [[ -f "_version.py" ]]; then
+  VERSION_FILE="_version.py"
+else
+  echo "Error: Cannot find _version.py"
+  exit 1
+fi
+
+MAJOR=$(grep "^MAJOR = " "$VERSION_FILE" | cut -d '=' -f 2 | tr -d ' ')
+MINOR=$(grep "^MINOR = " "$VERSION_FILE" | cut -d '=' -f 2 | tr -d ' ')
+
+if [[ -z "$MAJOR" ]] || [[ -z "$MINOR" ]]; then
+  echo "Error: Could not read MAJOR/MINOR from $VERSION_FILE"
+  exit 1
+fi
+
+echo "Base version from _version.py: $MAJOR.$MINOR"
+
+# Generate full version using semantic versioning (major.minor.patch[.build])
+if [[ -n "${BUILDKITE_BUILD_NUMBER:-}" ]]; then
+  # Buildkite release: major.minor.patch where patch = build number
+  # Format: 0.1.123 (e.g., version 0.1 with build 123)
+  export RDST_VERSION="${MAJOR}.${MINOR}.${BUILDKITE_BUILD_NUMBER}"
+  echo "Release build version: $RDST_VERSION"
+else
+  # Local/dev build: major.minor.0.dev<timestamp> (PEP 440 compliant)
+  # Format: 0.1.0.dev20251204081653
+  TIMESTAMP=$(date +%Y%m%d%H%M%S)
+  export RDST_VERSION="${MAJOR}.${MINOR}.0.dev${TIMESTAMP}"
+  echo "Local dev build version: $RDST_VERSION"
+fi
+
+# Get git hash for metadata (optional but useful for tracing)
+GIT_HASH=$(git rev-parse --short HEAD 2>/dev/null || echo "unknown")
+echo "Git commit: $GIT_HASH"
+
+# Write version to _version_build.py for hatchling to read (not tracked in git)
+echo "Writing version $RDST_VERSION to _version_build.py..."
+cat > _version_build.py <<EOF
+"""
+RDST Version Information
+
+This file is AUTO-GENERATED by the build system.
+Do not edit manually - it will be overwritten on next build.
+
+Current version: $RDST_VERSION
+Git commit: $GIT_HASH
+"""
+
+# Version constants
+MAJOR = ${MAJOR}
+MINOR = ${MINOR}
+
+# Full version (set by build system)
+__version__ = "${RDST_VERSION}"
+__version_info__ = tuple(map(int, "${RDST_VERSION}".split('.')[:2]))
+EOF
+
+# Force build tool to use PyPI for isolated environment (fixes 401 error)
+export PIP_INDEX_URL=https://pypi.org/simple
+
+echo "Building Python package version $RDST_VERSION..."
+python -m build
+
+echo "Build artifacts:"
+ls -lh dist/

rdst-0.1.185/.buildkite/deploy_dev.sh

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Ensure twine is installed (may run on different agent than build step)
+python -m pip install --upgrade --quiet twine
+
+# Deploy Python packages to AWS CodeArtifact (dev repository)
+# This provides better version management and standard pip/uvx installation
+
+# CodeArtifact configuration - adjust these as needed
+CODEARTIFACT_DOMAIN="${CODEARTIFACT_DOMAIN:-readyset}"
+CODEARTIFACT_REPOSITORY="${CODEARTIFACT_REPOSITORY:-rdst-dev}"
+CODEARTIFACT_REGION="${CODEARTIFACT_REGION:-us-east-2}"
+CODEARTIFACT_ACCOUNT="${CODEARTIFACT_ACCOUNT:-888984949675}"
+
+echo "Publishing to AWS CodeArtifact..."
+echo "  Domain: $CODEARTIFACT_DOMAIN"
+echo "  Repository: $CODEARTIFACT_REPOSITORY"
+echo "  Region: $CODEARTIFACT_REGION"
+echo "  Account: $CODEARTIFACT_ACCOUNT"
+
+# Verify AWS account
+CURRENT_ACCOUNT=$(aws sts get-caller-identity --query Account --output text 2>/dev/null || echo "unknown")
+if [[ "$CURRENT_ACCOUNT" == "$CODEARTIFACT_ACCOUNT" ]]; then
+  echo "✓ Using account $CODEARTIFACT_ACCOUNT"
+elif [[ "$CURRENT_ACCOUNT" != "unknown" ]]; then
+  echo "ℹ️  Cross-account deployment from $CURRENT_ACCOUNT to account $CODEARTIFACT_ACCOUNT"
+else
+  echo "⚠️  Could not determine current AWS account, proceeding anyway..."
+fi
+
+# Skip artifact download if running locally (artifacts only exist in Buildkite)
+if command -v buildkite-agent &> /dev/null; then
+  echo "Downloading build artifacts..."
+  buildkite-agent artifact download "rdst/dist/*.whl" .
+  buildkite-agent artifact download "rdst/dist/*.tar.gz" .
+  DIST_PATH="rdst/dist"
+else
+  echo "Running locally - using existing dist/ folder"
+  # Detect if we're in repo root or rdst/ directory
+  if [[ -d "rdst/dist" ]]; then
+    DIST_PATH="rdst/dist"
+  elif [[ -d "dist" ]]; then
+    DIST_PATH="dist"
+  else
+    echo "Error: Cannot find dist/ directory"
+    exit 1
+  fi
+fi
+
+# Get CodeArtifact authentication token (valid for 12 hours)
+echo "Authenticating with CodeArtifact..."
+CODEARTIFACT_TOKEN=$(aws codeartifact get-authorization-token \
+  --domain "$CODEARTIFACT_DOMAIN" \
+  --domain-owner "$CODEARTIFACT_ACCOUNT" \
+  --region "$CODEARTIFACT_REGION" \
+  --query authorizationToken \
+  --output text)
+
+# Get CodeArtifact repository endpoint
+CODEARTIFACT_ENDPOINT=$(aws codeartifact get-repository-endpoint \
+  --domain "$CODEARTIFACT_DOMAIN" \
+  --domain-owner "$CODEARTIFACT_ACCOUNT" \
+  --repository "$CODEARTIFACT_REPOSITORY" \
+  --region "$CODEARTIFACT_REGION" \
+  --format pypi \
+  --query repositoryEndpoint \
+  --output text)
+
+echo "✓ Authenticated with CodeArtifact"
+echo "  Endpoint: $CODEARTIFACT_ENDPOINT"
+
+# Publish to CodeArtifact using twine
+echo "Publishing packages to CodeArtifact..."
+python -m twine upload \
+  --repository-url "$CODEARTIFACT_ENDPOINT" \
+  --username aws \
+  --password "$CODEARTIFACT_TOKEN" \
+  "$DIST_PATH"/*.whl \
+  "$DIST_PATH"/*.tar.gz
+
+echo ""
+echo "✓ Dev deployment complete!"
+echo ""
+echo "Users can install with:"
+echo "  # Configure pip to use CodeArtifact (one-time setup):"
+echo "  aws codeartifact login --tool pip \\"
+echo "    --domain $CODEARTIFACT_DOMAIN \\"
+echo "    --domain-owner $CODEARTIFACT_ACCOUNT \\"
+echo "    --repository $CODEARTIFACT_REPOSITORY \\"
+echo "    --region $CODEARTIFACT_REGION"
+echo ""
+echo "  # Then install/upgrade rdst:"
+echo "  pip install rdst"
+echo "  pipx install rdst"
+echo "  uvx rdst"
+echo ""

rdst-0.1.185/.buildkite/deploy_release.sh

@@ -0,0 +1,253 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Ensure twine is installed (may run on different agent than build step)
+python -m pip install --upgrade --quiet twine
+
+# Deploy Python packages to AWS CodeArtifact AND public PyPI
+# This hybrid approach provides:
+# - CodeArtifact: Private repository access for internal teams
+# - PyPI: Public access for anyone (pipx install rdst, uvx rdst)
+
+# CodeArtifact configuration - adjust these as needed
+CODEARTIFACT_DOMAIN="${CODEARTIFACT_DOMAIN:-readyset}"
+CODEARTIFACT_REPOSITORY="${CODEARTIFACT_REPOSITORY:-rdst}"
+CODEARTIFACT_REGION="${CODEARTIFACT_REGION:-us-east-2}"
+CODEARTIFACT_ACCOUNT="${CODEARTIFACT_ACCOUNT:-888984949675}"
+
+# PyPI configuration
+PUBLISH_TO_PYPI="${PUBLISH_TO_PYPI:-true}"  # Set to false to skip PyPI publishing
+
+echo "Publishing to AWS CodeArtifact (RELEASE)..."
+echo "  Domain: $CODEARTIFACT_DOMAIN"
+echo "  Repository: $CODEARTIFACT_REPOSITORY (PRODUCTION)"
+echo "  Region: $CODEARTIFACT_REGION"
+echo "  Account: $CODEARTIFACT_ACCOUNT"
+
+# Verify AWS account
+CURRENT_ACCOUNT=$(aws sts get-caller-identity --query Account --output text 2>/dev/null || echo "unknown")
+if [[ "$CURRENT_ACCOUNT" == "$CODEARTIFACT_ACCOUNT" ]]; then
+  echo "✓ Using account $CODEARTIFACT_ACCOUNT"
+elif [[ "$CURRENT_ACCOUNT" != "unknown" ]]; then
+  echo "ℹ️  Cross-account deployment from $CURRENT_ACCOUNT to account $CODEARTIFACT_ACCOUNT"
+else
+  echo "⚠️  Could not determine current AWS account, proceeding anyway..."
+fi
+
+# Skip artifact download if running locally (artifacts only exist in Buildkite)
+if command -v buildkite-agent &> /dev/null; then
+  echo "Downloading build artifacts..."
+  buildkite-agent artifact download "rdst/dist/*.whl" .
+  buildkite-agent artifact download "rdst/dist/*.tar.gz" .
+  DIST_PATH="rdst/dist"
+else
+  echo "Running locally - using existing dist/ folder"
+  # Detect if we're in repo root or rdst/ directory
+  if [[ -d "rdst/dist" ]]; then
+    DIST_PATH="rdst/dist"
+  elif [[ -d "dist" ]]; then
+    DIST_PATH="dist"
+  else
+    echo "Error: Cannot find dist/ directory"
+    echo "Please run .buildkite/build_package.sh first to create build artifacts"
+    exit 1
+  fi
+fi
+
+# Get package version from wheel filename
+WHEEL_FILE=$(ls "$DIST_PATH"/*.whl | head -1)
+WHEEL_BASENAME=$(basename "$WHEEL_FILE")
+# Extract version using semantic versioning pattern (e.g., rdst-0.1.123-py3-none-any.whl)
+VERSION=$(echo "$WHEEL_BASENAME" | grep -oP '(?<=rdst-)[0-9]+\.[0-9]+\.[0-9]+' || echo "unknown")
+
+echo ""
+echo "📦 Publishing RDST version: $VERSION"
+echo ""
+echo "ℹ️  This version will be published to BOTH:"
+echo "   • CodeArtifact (rdst repository)"
+echo "   • PyPI (public)"
+echo "   Using the same build artifacts to ensure version consistency."
+echo ""
+
+# Get CodeArtifact authentication token (valid for 12 hours)
+echo "Authenticating with CodeArtifact..."
+CODEARTIFACT_TOKEN=$(aws codeartifact get-authorization-token \
+  --domain "$CODEARTIFACT_DOMAIN" \
+  --domain-owner "$CODEARTIFACT_ACCOUNT" \
+  --region "$CODEARTIFACT_REGION" \
+  --query authorizationToken \
+  --output text)
+
+# Get CodeArtifact repository endpoint
+CODEARTIFACT_ENDPOINT=$(aws codeartifact get-repository-endpoint \
+  --domain "$CODEARTIFACT_DOMAIN" \
+  --domain-owner "$CODEARTIFACT_ACCOUNT" \
+  --repository "$CODEARTIFACT_REPOSITORY" \
+  --region "$CODEARTIFACT_REGION" \
+  --format pypi \
+  --query repositoryEndpoint \
+  --output text)
+
+echo "✓ Authenticated with CodeArtifact"
+echo "  Endpoint: $CODEARTIFACT_ENDPOINT"
+
+# Publish to CodeArtifact using twine
+echo "Publishing packages to CodeArtifact (PRODUCTION)..."
+python -m twine upload \
+  --repository-url "$CODEARTIFACT_ENDPOINT" \
+  --username aws \
+  --password "$CODEARTIFACT_TOKEN" \
+  "$DIST_PATH"/*.whl \
+  "$DIST_PATH"/*.tar.gz
+
+echo ""
+echo "✓ Published to CodeArtifact successfully!"
+echo ""
+
+# ============================================================================
+# Publish to public PyPI
+# ============================================================================
+
+if [[ "$PUBLISH_TO_PYPI" != "true" ]]; then
+    echo ""
+    echo "⚠️  Skipping PyPI publication (PUBLISH_TO_PYPI=$PUBLISH_TO_PYPI)"
+    echo ""
+    exit 0
+fi
+
+echo ""
+echo "========================================="
+echo "Publishing to PyPI (public)"
+echo "========================================="
+echo ""
+
+# Get PyPI token from environment or AWS Secrets Manager
+# NOTE: Secret buildkite/rdst/pypi-token is stored as JSON: {"PYPI_TOKEN": "pypi-..."}
+if [[ -n "${PYPI_TOKEN:-}" ]]; then
+    echo "✓ Using PYPI_TOKEN from environment"
+elif command -v aws &> /dev/null; then
+    echo "Fetching PyPI token from AWS Secrets Manager..."
+    echo "  Secret: buildkite/rdst/pypi-token (account 305232526136, region us-east-2)"
+
+    # Fetch the secret JSON
+    SECRET_JSON=$(aws secretsmanager get-secret-value \
+        --secret-id buildkite/rdst/pypi-token \
+        --region us-east-2 \
+        --query SecretString \
+        --output text 2>/dev/null)
+
+    if [[ -n "$SECRET_JSON" ]]; then
+        # Extract PYPI_TOKEN from JSON key-value pair
+        PYPI_TOKEN=$(echo "$SECRET_JSON" | python3 -c "import sys, json; print(json.load(sys.stdin).get('PYPI_TOKEN', ''))" 2>/dev/null)
+
+        if [[ -n "$PYPI_TOKEN" ]]; then
+            echo "✓ Retrieved PYPI_TOKEN from AWS Secrets Manager"
+            export PYPI_TOKEN
+        else
+            echo "❌ ERROR: Secret found but PYPI_TOKEN key is missing or empty in JSON"
+            echo "Secret should be stored as: {\"PYPI_TOKEN\": \"pypi-...\"}"
+            exit 1
+        fi
+    else
+        echo ""
+        echo "❌ ERROR: Could not retrieve PYPI_TOKEN"
+        echo ""
+        echo "PyPI token not found in environment or AWS Secrets Manager."
+        echo ""
+        echo "To fix this, either:"
+        echo "  1. Set PYPI_TOKEN environment variable in Buildkite"
+        echo "  2. Store token in AWS Secrets Manager (account 305232526136):"
+        echo "     aws secretsmanager create-secret \\"
+        echo "       --name buildkite/rdst/pypi-token \\"
+        echo "       --secret-string '{\"PYPI_TOKEN\":\"pypi-...\"}' \\"
+        echo "       --region us-east-2"
+        echo ""
+        echo "See PYPI_SETUP.md for detailed instructions."
+        echo ""
+        exit 1
+    fi
+else
+    echo ""
+    echo "❌ ERROR: PYPI_TOKEN not set and AWS CLI not available"
+    echo ""
+    echo "Set PYPI_TOKEN environment variable or install AWS CLI."
+    echo "See PYPI_SETUP.md for setup instructions."
+    echo ""
+    exit 1
+fi
+
+# Verify token format
+if [[ ! "$PYPI_TOKEN" =~ ^pypi- ]]; then
+    echo ""
+    echo "⚠️  WARNING: PYPI_TOKEN doesn't start with 'pypi-'"
+    echo "This might not be a valid PyPI token."
+    echo ""
+fi
+
+# Publish to PyPI using twine
+echo "Publishing rdst version $VERSION to PyPI..."
+echo ""
+
+python -m twine upload \
+    --repository pypi \
+    --username __token__ \
+    --password "$PYPI_TOKEN" \
+    --non-interactive \
+    --skip-existing \
+    --verbose \
+    "$DIST_PATH"/*.whl \
+    "$DIST_PATH"/*.tar.gz
+
+PYPI_EXIT_CODE=$?
+
+if [[ $PYPI_EXIT_CODE -eq 0 ]]; then
+    echo ""
+    echo "========================================="
+    echo "✓ Published to PyPI successfully!"
+    echo "========================================="
+    echo ""
+    echo "📦 Package: rdst version $VERSION"
+    echo ""
+    echo "✅ Version Consistency Check:"
+    echo "   • CodeArtifact (rdst): $VERSION"
+    echo "   • PyPI (public):       $VERSION"
+    echo "   → Same version published to both locations ✓"
+    echo ""
+    echo "🌍 Public Access (PyPI):"
+    echo "  PyPI page: https://pypi.org/project/rdst/$VERSION/"
+    echo "  Install: pipx install rdst"
+    echo "  Run: uvx rdst"
+    echo "  Upgrade: pipx upgrade rdst"
+    echo ""
+    echo "🔒 Internal Access (CodeArtifact):"
+    echo "  aws codeartifact login --tool pip \\"
+    echo "    --domain $CODEARTIFACT_DOMAIN \\"
+    echo "    --domain-owner $CODEARTIFACT_ACCOUNT \\"
+    echo "    --repository $CODEARTIFACT_REPOSITORY \\"
+    echo "    --region $CODEARTIFACT_REGION"
+    echo "  pip install rdst==$VERSION"
+    echo ""
+else
+    echo ""
+    echo "========================================="
+    echo "⚠️  PyPI publication failed!"
+    echo "========================================="
+    echo ""
+    echo "Exit code: $PYPI_EXIT_CODE"
+    echo ""
+    echo "Common issues:"
+    echo "  - Version $VERSION already exists on PyPI (cannot overwrite)"
+    echo "  - Invalid PYPI_TOKEN"
+    echo "  - Network connectivity issues"
+    echo "  - Package metadata issues"
+    echo ""
+    echo "The package was successfully published to CodeArtifact."
+    echo "Users with AWS credentials can still access it."
+    echo ""
+    echo "To retry PyPI publication:"
+    echo "  1. Fix the issue (see error above)"
+    echo "  2. Increment version in _version.py if version conflict"
+    echo "  3. Re-run this script or trigger a new build"
+    echo ""
+    exit 1
+fi

rdst-0.1.185/.buildkite/pipeline.yml

@@ -0,0 +1,122 @@
+# RDST Build and Deployment Pipeline
+# Tests run on pre-merge only (CLs). After merge to main:
+# - Dev builds → published to AWS CodeArtifact (private)
+# - Production releases → published to CodeArtifact AND public PyPI (manual approval required)
+
+steps:
+  # If this is a gerrit change list build, notify Gerrit that the build started
+  - label: ":gerrit: Start CL"
+    branches: "!refs/heads/main"
+    command: .buildkite/set_gerrit_running.sh
+    agents:
+      queue: t3a-small
+
+  - wait
+  # Run unit tests on pre-merge only
+  - label: ":test_tube: Run RDST Unit Tests"
+    key: "rdst-unit-tests"
+    branches: "!refs/heads/main"
+    command: "chmod +x rdst/.buildkite/run_unit_tests.sh && rdst/.buildkite/run_unit_tests.sh"
+    artifact_paths:
+      - "rdst/test-results/*.xml"
+    agents:
+      queue: t3a-small
+    timeout_in_minutes: 15
+    retry:
+      automatic:
+        - exit_status: -1
+          limit: 2
+
+  # Run integration tests on pre-merge only - PostgreSQL
+  - label: ":postgres: RDST Integration Tests (PostgreSQL)"
+    key: "rdst-integration-postgresql"
+    branches: "!refs/heads/main"
+    depends_on: "rdst-unit-tests"
+    command: "chmod +x rdst/.buildkite/run_integration_tests.sh && rdst/.buildkite/run_integration_tests.sh postgresql"
+    env:
+      DUPLO_ENV: dev
+      DUPLO_TENANT: dev01
+    agents:
+      queue: t3a-small
+    timeout_in_minutes: 30
+    retry:
+      automatic:
+        - exit_status: -1
+          limit: 2
+
+  # Run integration tests on pre-merge only - MySQL
+  - label: ":mysql: RDST Integration Tests (MySQL)"
+    key: "rdst-integration-mysql"
+    branches: "!refs/heads/main"
+    depends_on: "rdst-unit-tests"
+    command: "chmod +x rdst/.buildkite/run_integration_tests.sh && rdst/.buildkite/run_integration_tests.sh mysql"
+    env:
+      DUPLO_ENV: dev
+      DUPLO_TENANT: dev01
+    agents:
+      queue: t3a-small
+    timeout_in_minutes: 30
+    retry:
+      automatic:
+        - exit_status: -1
+          limit: 2
+
+  # Wait for all non-main-only steps to complete before updating Gerrit CL status
+  - wait: ~
+    branches: '!refs/heads/main'
+    continue_on_failure: true
+
+  # Update gerrit with CL build status (pass/fail)
+  - label: ":gerrit: Update CL status"
+    key: set-gerrit-status
+    branches: '!refs/heads/main'
+    depends_on:
+      - "rdst-unit-tests"
+      - "rdst-integration-postgresql"
+      - "rdst-integration-mysql"
+    command: .buildkite/set_gerrit_status.sh
+    agents:
+      queue: t3a-small
+    retry:
+      manual:
+        permit_on_passed: true
+
+#             All main-only steps must appear below this line
+# -------------------------------------------------------------------------------------------------
+
+  # After merge to main: Build and publish Python package to dev CodeArtifact
+  - label: ":package: Build RDST Python Package"
+    key: "build-package"
+    branches: "refs/heads/main"
+    command: "chmod +x rdst/.buildkite/build_package.sh && rdst/.buildkite/build_package.sh"
+    artifact_paths:
+      - "rdst/dist/*.whl"
+      - "rdst/dist/*.tar.gz"
+    agents:
+      queue: t3a-small
+
+  # Publish to dev CodeArtifact repository
+  - label: ":rocket: Publish to Dev CodeArtifact"
+    key: "publish-dev"
+    branches: "refs/heads/main"
+    depends_on:
+      - "build-package"
+    command: "chmod +x rdst/.buildkite/deploy_dev.sh && rdst/.buildkite/deploy_dev.sh"
+    agents:
+      queue: t3a-small
+
+  # Manual approval required to promote to production (CodeArtifact + PyPI)
+  - block: ":rocket: Publish to Production (PyPI)"
+    key: "release-approval"
+    branches: "refs/heads/main"
+    prompt: "Ready to publish RDST to public PyPI and production CodeArtifact? This will make the package publicly available."
+    depends_on: "publish-dev"
+
+  # Publish to production: CodeArtifact (rdst) AND public PyPI
+  - label: ":globe_with_meridians: Publish to PyPI + CodeArtifact"
+    key: "publish-release"
+    branches: "refs/heads/main"
+    depends_on: "release-approval"
+    command: "chmod +x rdst/.buildkite/deploy_release.sh && rdst/.buildkite/deploy_release.sh"
+    agents:
+      queue: t3a-small

rdst-0.1.185/.buildkite/run_integration_tests.sh

@@ -0,0 +1,120 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+# Get database type from argument
+DB_TYPE="${1:-}"
+
+if [[ -z "$DB_TYPE" ]]; then
+  echo "ERROR: Database type argument required (postgresql or mysql)" >&2
+  echo "Usage: $0 [postgresql|mysql]" >&2
+  exit 1
+fi
+
+if [[ "$DB_TYPE" != "postgresql" && "$DB_TYPE" != "mysql" ]]; then
+  echo "ERROR: Invalid database type: $DB_TYPE" >&2
+  echo "Must be 'postgresql' or 'mysql'" >&2
+  exit 1
+fi
+
+echo "================================================================="
+echo "RDST CLI Integration Tests - $DB_TYPE"
+echo "================================================================="
+echo ""
+
+# Set up environment
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
+TEST_SCRIPT="${REPO_ROOT}/rdst/tests/integration/run_tests.sh"
+
+# Verify test script exists
+if [[ ! -f "$TEST_SCRIPT" ]]; then
+  echo "ERROR: Test script not found at: $TEST_SCRIPT" >&2
+  exit 1
+fi
+
+# Ensure script is executable
+chmod +x "$TEST_SCRIPT"
+
+# Determine API base URL based on environment
+if [[ -z "${DUPLO_ENV:-}" ]] || [[ -z "${DUPLO_TENANT:-}" ]]; then
+  echo "ERROR: DUPLO_ENV and DUPLO_TENANT must be set" >&2
+  exit 1
+fi
+
+if [[ "${DUPLO_ENV}" == "dev" ]]; then
+  if [[ "${DUPLO_TENANT}" == "dev01" ]]; then
+    API_PREFIX="api-dev01.apps"
+  elif [[ "${DUPLO_TENANT}" == "dev02" ]]; then
+    API_PREFIX="api-dev02.apps"
+  else
+    API_PREFIX="api-${DUPLO_TENANT}.apps"
+  fi
+elif [[ "${DUPLO_ENV}" == "stage" ]]; then
+  API_PREFIX="api-stage"
+elif [[ "${DUPLO_ENV}" == "prod" ]]; then
+  API_PREFIX="api"
+else
+  echo "ERROR: Unsupported environment: ${DUPLO_ENV}" >&2
+  exit 1
+fi
+
+export API_BASE_URL="https://${API_PREFIX}.readyset.cloud"
+
+# Obtain Supabase authentication token for admin API
+echo "Obtaining authentication token..."
+
+# Get Supabase project secrets
+SUPABASE_PROJECT_SECRETS_NAME="supabase/${DUPLO_TENANT}"
+SUPABASE_PROJECT_SECRETS=$(aws secretsmanager get-secret-value --secret-id ${SUPABASE_PROJECT_SECRETS_NAME} --cli-connect-timeout 1 | jq -r .SecretString)
+
+SUPABASE_PROJECT_URL=$(echo ${SUPABASE_PROJECT_SECRETS} | jq -r '.SUPABASE_PROJECT_URL')
+SUPABASE_PROJECT_API_KEY=$(echo ${SUPABASE_PROJECT_SECRETS} | jq -r '.SUPABASE_PROJECT_API_KEY')
+
+# Get Supabase user credentials for authentication
+SUPABASE_BUILDKITE_SECRETS_NAME="supabase-buildkite-creds/${DUPLO_TENANT}"
+SUPABASE_BUILDKITE_SECRETS=$(aws secretsmanager get-secret-value --secret-id ${SUPABASE_BUILDKITE_SECRETS_NAME} --cli-connect-timeout 1 | jq -r .SecretString)
+
+SUPABASE_USERNAME=$(echo ${SUPABASE_BUILDKITE_SECRETS} | jq -r '.username')
+SUPABASE_PASSWORD=$(echo ${SUPABASE_BUILDKITE_SECRETS} | jq -r '.password')
+
+# Obtain an access token from Supabase
+TMP_CREDS=$(curl -s --location --request POST "${SUPABASE_PROJECT_URL}/auth/v1/token?grant_type=password" \
+             --header "Content-Type: application/json" \
+             --header "apikey: ${SUPABASE_PROJECT_API_KEY}" \
+             --data-raw '{"email": "'${SUPABASE_USERNAME}'", "password": "'${SUPABASE_PASSWORD}'"}')
+
+export ADMIN_API_TOKEN=$(echo ${TMP_CREDS} | jq -r '.access_token')
+
+if [[ -z "$ADMIN_API_TOKEN" || "$ADMIN_API_TOKEN" == "null" ]]; then
+  echo "ERROR: Failed to obtain authentication token" >&2
+  echo "Response: $TMP_CREDS" >&2
+  exit 1
+fi
+
+echo "✓ Authentication token obtained"
+
+# Install Python dependencies
+echo ""
+echo "Installing Python dependencies..."
+cd "$REPO_ROOT/rdst"
+if [[ -f "requirements.txt" ]]; then
+  pip3 install --quiet --user -r requirements.txt 2>&1 | grep -v "WARNING: The script" || true
+  echo "✓ Python dependencies installed"
+fi
+
+USER_SITE=$(python3 -c "import site; print(site.getusersitepackages())")
+if [[ -n "$USER_SITE" ]]; then
+  export PYTHONPATH="${USER_SITE}${PYTHONPATH:+:${PYTHONPATH}}"
+fi
+
+echo ""
+echo "Configuration:"
+echo "  Environment: ${DUPLO_ENV}"
+echo "  Tenant: ${DUPLO_TENANT}"
+echo "  Database Type: $DB_TYPE"
+echo "  API Base URL: $API_BASE_URL"
+echo ""
+
+# Run the tests for the specified database type
+exec "$TEST_SCRIPT" "$DB_TYPE"