Skip to content

demo: ask the investigator with the token compose resolved — the shell, then ./.env, then the default #14

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
itswl merged 1 commit into from
Oct 19, 2026
Merged

demo: ask the investigator with the token compose resolved — the shell, then ./.env, then the default #14

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions docs/releasing.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ The release notes are not a separate document. They are the implemented decision
records that landed since the last tag — that is what the bucket is for, and a
second place to write them is the duplicate-source mistake this repository keeps
finding its way back to. There are **no GitHub Release objects**: the annotated
tag's own message is the note, which is how 0.5.0 and 0.6.0 shipped.
tag's own message is the note, which is how 0.5.0, 0.6.0 and 0.7.0 shipped.

## The steps

Expand Down Expand Up @@ -45,7 +45,10 @@ tag's own message is the note, which is how 0.5.0 and 0.6.0 shipped.
interpolation, and the checkout's `.env` is a deployment's: run from the
repository root on 2026-10-19, the quickstart's investigator took the work
stack's `HOOKPROBE_TOKEN` and every `demo.sh` lookup answered 401 — a
release that was fine, failing a check that was not testing it.
release that was fine, failing a check that was not testing it. `demo.sh`
has read that token the way compose does since then (the shell, then
`./.env`, then the default), but the rule stands: the same `.env` also
chooses the investigator's runtime and model, and a stranger has neither.

## A note on tags vs. digests

Expand Down
10 changes: 9 additions & 1 deletion scripts/demo.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,14 @@ set -euo pipefail
base="${HOOKRELAY_URL:-http://127.0.0.1:8100}"
judge="${HOOKJUDGE_URL:-http://127.0.0.1:8200}"
probe="${HOOKPROBE_URL:-http://127.0.0.1:8088}"
ptoken="${HOOKPROBE_TOKEN:-quickstart-token}"
# The investigator's token the way compose resolved it: the shell first, then
# `./.env`, then the compose file's default. Asked with any other token, every
# lookup below answers 401 — which is what a checkout's .env did on 2026-10-19,
# being a deployment's (docs/releasing.md says to run the stranger's check from
# an empty directory; this keeps the demo honest when somebody does not).
dotenv() { [ -f .env ] && sed -nE "s/^(export )?$1=//p" .env | tail -n 1 | sed -E "s/^\"(.*)\"\$/\1/; s/^'(.*)'\$/\1/" || true; }
ptoken="${HOOKPROBE_TOKEN:-$(dotenv HOOKPROBE_TOKEN)}"
ptoken="${ptoken:-quickstart-token}"

say() { printf '\n\033[1;34m── %s\033[0m\n' "$1"; }
post() { curl -sf "$base/hook/inbound" -H "content-type: application/json" -d "$1" | python3 -m json.tool; }
Expand All @@ -58,6 +65,7 @@ except Exception: print("")' "$1"; }
say "health"
curl -sf "$base/healthz" >/dev/null && echo "pipe is up"
curl -sf "$probe/healthz" >/dev/null && echo "investigator is up" || echo "investigator is not answering on $probe — the loop steps below will wait for it"
[ -z "${HOOKPROBE_TOKEN:-}" ] && [ -n "$(dotenv HOOKPROBE_TOKEN)" ] && echo "investigator token: taken from ./.env, as compose did"

say "1. fresh alert → the ai route (stub model, visible tokens, zero cost)"
post '{"title":"Payment gateway 5xx rate 8.1%","message":"gateway-2 5xx at 8.1% over the last 5 minutes","state":"alerting","env":"prod"}'
Expand Down
Loading