Initial Commit
This commit is contained in:
FanaticPythoner (Nathan Trudeau)
175
Justfile
Normal file
175
Justfile
Normal file
@@ -0,0 +1,175 @@
|
||||
# welcome-to-codevalet-as-a-platform-operator
|
||||
#
|
||||
# Recipe definitions for the platform operator onboarding flow.
|
||||
# Implementation lives in scripts/; each script has corresponding
|
||||
# tests under tests/.
|
||||
|
||||
set shell := ["bash", "-euo", "pipefail", "-c"]
|
||||
set dotenv-load := true
|
||||
set positional-arguments
|
||||
|
||||
# Default: show the onboarding plan and the recipe list.
|
||||
default:
|
||||
@just welcome
|
||||
@echo ""
|
||||
@just --list
|
||||
|
||||
# Full interactive onboarding. Accepts --headless / --no-browser / --deploy. Honours FORGE_SETUP_YES=1.
|
||||
setup *args:
|
||||
@bash scripts/setup.sh {{args}}
|
||||
|
||||
# Full onboarding + orchestrator operator-setup handoff.
|
||||
deploy *args:
|
||||
@bash scripts/setup.sh --deploy {{args}}
|
||||
|
||||
# Print the onboarding plan.
|
||||
welcome:
|
||||
@echo "================================================================"
|
||||
@echo " Welcome to codevalet."
|
||||
@echo "================================================================"
|
||||
@echo ""
|
||||
@echo " just deploy # full onboarding + operator-setup handoff"
|
||||
@echo " just deploy --headless # same, without opening a browser"
|
||||
@echo " just setup # onboarding only (stops after clone)"
|
||||
@echo " just next-steps # print the orchestrator's operator-setup plan"
|
||||
@echo " just run-next-steps # execute that plan (== just operator-setup"
|
||||
@echo " # inside the orchestrator checkout)"
|
||||
@echo " just relogin # switch Gitea user on the current machine"
|
||||
@echo " just --list # every available recipe"
|
||||
|
||||
# Check prerequisites (tools + Python version + PATH hygiene).
|
||||
doctor:
|
||||
@bash scripts/doctor.sh
|
||||
|
||||
# Create .env from .env.example the first time. Never overwrites.
|
||||
init-env:
|
||||
@if [ -f .env ]; then \
|
||||
echo "[init-env] .env already exists; leaving it alone."; \
|
||||
else \
|
||||
cp .env.example .env; \
|
||||
echo "[init-env] wrote .env"; \
|
||||
echo "[init-env] set FORGE_GITEA_USERNAME in .env before login."; \
|
||||
fi
|
||||
|
||||
# Ping Gitea /api/v1/version to confirm FORGE_GITEA_URL is reachable.
|
||||
check-gitea:
|
||||
@test -n "${FORGE_GITEA_URL:-}" \
|
||||
|| { echo "[error] FORGE_GITEA_URL unset: run 'just init-env' and edit .env"; exit 1; }
|
||||
@echo "[check-gitea] GET $FORGE_GITEA_URL/api/v1/version"
|
||||
@curl -fsS --max-time 10 ${FORGE_INSECURE_TLS:+-k} "$FORGE_GITEA_URL/api/v1/version" \
|
||||
| python3 -c 'import json,sys; d=json.load(sys.stdin); print("[check-gitea] Gitea version:", d.get("version","?"))'
|
||||
@echo "[check-gitea] OK. Gitea is reachable."
|
||||
|
||||
# Browser OAuth2 (PKCE) login. Reuses a live token; runs the flow otherwise.
|
||||
login:
|
||||
@bash scripts/forge_login.sh
|
||||
|
||||
# Like `just login`, but prints the URL instead of opening a browser.
|
||||
login-headless:
|
||||
@bash scripts/forge_login.sh --no-browser
|
||||
|
||||
# Clear stored Gitea tokens (keeps the credential helper installed and the orchestrator-gateway fields). Run `just login` afterwards to sign in as a different user.
|
||||
logout:
|
||||
@python3 scripts/forge_auth.py logout
|
||||
|
||||
# `just logout` + `just login` in one step. Equivalent to switching users.
|
||||
relogin:
|
||||
@bash scripts/forge_login.sh --force
|
||||
|
||||
# Open Gitea's "Authorized OAuth2 Applications" page to revoke a stale grant. Resolves the "different scope" failure mode (see docs/oauth-grant-scope-mismatch.md).
|
||||
revoke-grant:
|
||||
@bash scripts/revoke_grant.sh
|
||||
|
||||
# Force a token refresh (normally automatic inside the credential helper).
|
||||
refresh:
|
||||
@python3 scripts/forge_auth.py refresh --force
|
||||
|
||||
# Print the current OAuth state (paths, whether the token is live).
|
||||
status:
|
||||
@python3 scripts/forge_auth.py status
|
||||
|
||||
# git ls-remote against FORGE_ORCHESTRATOR_REPO_URL to confirm access.
|
||||
check-access:
|
||||
@test -n "${FORGE_ORCHESTRATOR_REPO_URL:-}" \
|
||||
|| { echo "[error] FORGE_ORCHESTRATOR_REPO_URL unset: run 'just init-env' and edit .env"; exit 1; }
|
||||
@echo "[check-access] git ls-remote $FORGE_ORCHESTRATOR_REPO_URL"
|
||||
@GIT_TERMINAL_PROMPT=0 GCM_INTERACTIVE=Never \
|
||||
GIT_ASKPASS='' SSH_ASKPASS='' \
|
||||
VSCODE_GIT_ASKPASS_MAIN='' VSCODE_GIT_ASKPASS_NODE='' \
|
||||
VSCODE_GIT_ASKPASS_EXTRA_ARGS='' VSCODE_GIT_IPC_HANDLE='' \
|
||||
DISPLAY='' WAYLAND_DISPLAY='' \
|
||||
git ls-remote "$FORGE_ORCHESTRATOR_REPO_URL" HEAD >/dev/null 2>&1 \
|
||||
&& { \
|
||||
echo "[check-access] OK. Orchestrator access is available."; \
|
||||
} || { \
|
||||
echo "[check-access] FAILED. Likely causes:"; \
|
||||
echo " - 'just login' has not completed"; \
|
||||
echo " - the stored refresh token expired; run 'just relogin'"; \
|
||||
echo " - the Gitea account is not yet in the org"; \
|
||||
echo " - FORGE_ORCHESTRATOR_REPO_URL in .env is wrong"; \
|
||||
exit 1; \
|
||||
}
|
||||
|
||||
# Clone the orchestrator into FORGE_WORKSPACE_ROOT (idempotent).
|
||||
clone-orchestrator:
|
||||
@test -n "${FORGE_ORCHESTRATOR_REPO_URL:-}" \
|
||||
|| { echo "[error] FORGE_ORCHESTRATOR_REPO_URL unset: run 'just init-env' and edit .env"; exit 1; }
|
||||
@bash -c 'set -euo pipefail; \
|
||||
root="${FORGE_WORKSPACE_ROOT:-.}"; \
|
||||
mkdir -p "$root"; \
|
||||
name="$(basename "$FORGE_ORCHESTRATOR_REPO_URL" .git)"; \
|
||||
dest="$root/$name"; \
|
||||
if [ -d "$dest/.git" ]; then \
|
||||
echo "[clone-orchestrator] already cloned at: $dest"; \
|
||||
else \
|
||||
echo "[clone-orchestrator] cloning into: $dest"; \
|
||||
export GIT_TERMINAL_PROMPT=0 GCM_INTERACTIVE=Never; \
|
||||
unset GIT_ASKPASS SSH_ASKPASS \
|
||||
VSCODE_GIT_ASKPASS_MAIN VSCODE_GIT_ASKPASS_NODE \
|
||||
VSCODE_GIT_ASKPASS_EXTRA_ARGS VSCODE_GIT_IPC_HANDLE \
|
||||
DISPLAY WAYLAND_DISPLAY; \
|
||||
if [ -n "${FORGE_ORCHESTRATOR_BRANCH:-}" ]; then \
|
||||
git clone --branch "$FORGE_ORCHESTRATOR_BRANCH" "$FORGE_ORCHESTRATOR_REPO_URL" "$dest" \
|
||||
|| { echo "[clone-orchestrator] FAILED. Run \"just login\" (or \"just relogin\" if expired) and retry." >&2; exit 1; }; \
|
||||
else \
|
||||
git clone "$FORGE_ORCHESTRATOR_REPO_URL" "$dest" \
|
||||
|| { echo "[clone-orchestrator] FAILED. Run \"just login\" (or \"just relogin\" if expired) and retry." >&2; exit 1; }; \
|
||||
fi; \
|
||||
fi; \
|
||||
echo; \
|
||||
echo "[clone-orchestrator] orchestrator is at:"; \
|
||||
echo " $dest"; \
|
||||
echo; \
|
||||
echo "Continue in that checkout via its README or \"just next-steps\"."'
|
||||
|
||||
# Print the platform operator onboarding plan from the orchestrator's manifest.
|
||||
next-steps *args:
|
||||
@bash scripts/next_steps.sh {{args}}
|
||||
|
||||
# Exec the orchestrator's `just operator-setup` (default; override via --recipe); forwards all flags.
|
||||
run-next-steps *args:
|
||||
@bash scripts/next_steps.sh --run {{args}}
|
||||
|
||||
# Remove the credential helper and welcome-managed fields from client-auth.json.
|
||||
uninstall:
|
||||
@bash scripts/uninstall.sh
|
||||
|
||||
# Run the full test suite.
|
||||
test:
|
||||
@echo "[test] running Python unit tests..."
|
||||
@python3 -m unittest discover -t . -s tests -p 'test_*.py' -v
|
||||
@echo ""
|
||||
@echo "[test] running shell integration tests..."
|
||||
@bash tests/test_forge_auth_integration.sh
|
||||
@echo ""
|
||||
@echo "[test] running setup.sh argument / headless-wiring test..."
|
||||
@bash tests/test_setup_args.sh
|
||||
@echo ""
|
||||
@echo "[test] running doctor.sh fix-command test..."
|
||||
@bash tests/test_doctor.sh
|
||||
@echo ""
|
||||
@echo "[test] running next_steps.sh manifest-driven test..."
|
||||
@bash tests/test_next_steps.sh
|
||||
@echo ""
|
||||
@echo "[test] running setup.sh --deploy flag test..."
|
||||
@bash tests/test_setup_deploy_flag.sh
|
||||
Reference in New Issue
Block a user