* feat(cli): wire release command and add installer scripts
- Wire up `core build release` subcommand (was orphaned)
- Wire up `core monitor` command (missing import in full variant)
- Add installer scripts for Unix (.sh) and Windows (.bat)
- setup: Interactive with variant selection
- ci: Minimal for CI/CD environments
- dev: Full development variant
- go/php/agent: Targeted development variants
- All scripts include security hardening:
- Secure temp directories (mktemp -d)
- Architecture validation
- Version validation after GitHub API call
- Proper cleanup on exit
- PowerShell PATH updates on Windows (avoids setx truncation)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(build): add tar.xz support and unified installer scripts
- Add tar.xz archive support using Borg's compress package
- ArchiveXZ() and ArchiveWithFormat() for configurable compression
- Better compression ratio than gzip for release artifacts
- Consolidate 12 installer scripts into 2 unified scripts
- install.sh and install.bat with BunnyCDN edge variable support
- Subdomains: setup.core.help, ci.core.help, dev.core.help, etc.
- MODE and VARIANT transformed at edge based on subdomain
- Installers prefer tar.xz with automatic fallback to tar.gz
- Fixed CodeRabbit issues: HTTP status patterns, tar error handling,
verify_install params, VARIANT validation, CI PATH persistence
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* chore: add build and release config files
- .core/build.yaml - cross-platform build configuration
- .core/release.yaml - release workflow configuration
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* chore: move plans from docs/ to tasks/
Consolidate planning documents in tasks/plans/ directory.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(install): address CodeRabbit review feedback
- Add curl timeout (--max-time) to prevent hanging on slow networks
- Rename TMPDIR to WORK_DIR to avoid clobbering system env var
- Add chmod +x to ensure binary has execute permissions
- Add error propagation after subroutine calls in batch file
- Remove System32 install attempt in CI mode (use consistent INSTALL_DIR)
- Fix HTTP status regex for HTTP/2 compatibility
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(rag): add Go RAG implementation with Qdrant + Ollama
Add RAG (Retrieval Augmented Generation) tools for storing documentation
in Qdrant vector database and querying with semantic search. This replaces
the Python tools/rag implementation with a native Go solution.
New commands:
- core rag ingest [directory] - Ingest markdown files into Qdrant
- core rag query [question] - Query vector database with semantic search
- core rag collections - List and manage Qdrant collections
Features:
- Markdown chunking by sections and paragraphs with overlap
- UTF-8 safe text handling for international content
- Automatic category detection from file paths
- Multiple output formats: text, JSON, LLM context injection
- Environment variable support for host configuration
Dependencies:
- github.com/qdrant/go-client (gRPC client)
- github.com/ollama/ollama/api (embeddings API)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(deploy): add pure-Go Ansible executor and Coolify API integration
Implement infrastructure deployment system with:
- pkg/ansible: Pure Go Ansible executor
- Playbook/inventory parsing (types.go, parser.go)
- Full execution engine with variable templating, loops, blocks,
conditionals, handlers, and fact gathering (executor.go)
- SSH client with key/password auth and privilege escalation (ssh.go)
- 35+ module implementations: shell, command, copy, template, file,
apt, service, systemd, user, group, git, docker_compose, etc. (modules.go)
- pkg/deploy/coolify: Coolify API client wrapping Python swagger client
- List/get servers, projects, applications, databases, services
- Generic Call() for any OpenAPI operation
- pkg/deploy/python: Embedded Python runtime for swagger client integration
- internal/cmd/deploy: CLI commands
- core deploy servers/projects/apps/databases/services/team
- core deploy call <operation> [params-json]
This enables Docker-free infrastructure deployment with Ansible-compatible
playbooks executed natively in Go.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(deploy): address linter warnings and build errors
- Fix fmt.Sprintf format verb error in ssh.go (remove unused stat command)
- Fix errcheck warnings by explicitly ignoring best-effort operations
- Fix ineffassign warning in cmd_ansible.go
All golangci-lint checks now pass for deploy packages.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* style(deploy): fix gofmt formatting
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(deploy): use known_hosts for SSH host key verification
Address CodeQL security alert by using the user's known_hosts file
for SSH host key verification when available. Falls back to accepting
any key only when known_hosts doesn't exist (common in containerized
or ephemeral environments).
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(ai,security,ide): add agentic MVP, security jobs, and Core IDE desktop app
Wire up AI infrastructure with unified pkg/ai package (metrics JSONL,
RAG integration), move RAG under `core ai rag`, add `core ai metrics`
command, and enrich task context with Qdrant documentation.
Add `--target` flag to all security commands for external repo scanning,
`core security jobs` for distributing findings as GitHub Issues, and
consistent error logging across scan/deps/alerts/secrets commands.
Add Core IDE Wails v3 desktop app with Angular 20 frontend, MCP bridge
(loopback-only HTTP server), WebSocket hub, and Claude Code bridge.
Production-ready with Lethean CIC branding, macOS code signing support,
and security hardening (origin validation, body size limits, URL scheme
checks, memory leak prevention, XSS mitigation).
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix: address PR review comments from CodeRabbit, Copilot, and Gemini
Fixes across 25 files addressing 46+ review comments:
- pkg/ai/metrics.go: handle error from Close() on writable file handle
- pkg/ansible: restore loop vars after loop, restore become settings,
fix Upload with become=true and no password (use sudo -n), honour
SSH timeout config, use E() helper for contextual errors, quote git
refs in checkout commands
- pkg/rag: validate chunk config, guard negative-to-uint64 conversion,
use E() helper for errors, add context timeout to Ollama HTTP calls
- pkg/deploy/python: fix exec.ExitError type assertion (was os.PathError),
handle os.UserHomeDir() error
- pkg/build/buildcmd: use cmd.Context() instead of context.Background()
for proper Ctrl+C cancellation
- install.bat: add curl timeouts, CRLF line endings, use --connect-timeout
for archive downloads
- install.sh: use absolute path for version check in CI mode
- tools/rag: fix broken ingest.py function def, escape HTML in query.py,
pin qdrant-client version, add markdown code block languages
- internal/cmd/rag: add chunk size validation, env override handling
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(build): make release dry-run by default and remove darwin/amd64 target
Replace --dry-run (default false) with --we-are-go-for-launch (default
false) so `core build release` is safe by default. Remove darwin/amd64
from default build targets (arm64 only for macOS). Fix cmd_project.go
to use command context instead of context.Background().
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
170 lines
No EOL
4.9 KiB
Batchfile
170 lines
No EOL
4.9 KiB
Batchfile
@echo off
|
|
REM Core CLI unified installer (Windows)
|
|
REM Served via *.core.help with BunnyCDN edge transformation
|
|
REM
|
|
REM Usage:
|
|
REM curl -fsSL setup.core.help -o install.bat && install.bat # Interactive (default)
|
|
REM curl -fsSL ci.core.help -o install.bat && install.bat # CI/CD
|
|
REM curl -fsSL dev.core.help -o install.bat && install.bat # Full development
|
|
REM curl -fsSL go.core.help -o install.bat && install.bat # Go variant
|
|
REM curl -fsSL php.core.help -o install.bat && install.bat # PHP variant
|
|
REM curl -fsSL agent.core.help -o install.bat && install.bat # Agent variant
|
|
REM
|
|
setlocal enabledelayedexpansion
|
|
|
|
REM === BunnyCDN Edge Variables (transformed at edge based on subdomain) ===
|
|
set "MODE={{CORE_MODE}}"
|
|
set "VARIANT={{CORE_VARIANT}}"
|
|
|
|
REM === Fallback for local testing ===
|
|
if "!MODE!"=="{{CORE_MODE}}" (
|
|
if defined CORE_MODE (set "MODE=!CORE_MODE!") else (set "MODE=setup")
|
|
)
|
|
if "!VARIANT!"=="{{CORE_VARIANT}}" (
|
|
if defined CORE_VARIANT (set "VARIANT=!CORE_VARIANT!") else (set "VARIANT=")
|
|
)
|
|
|
|
REM === Configuration ===
|
|
set "VERSION=%~1"
|
|
if "%VERSION%"=="" set "VERSION=latest"
|
|
set "REPO=host-uk/core"
|
|
set "BINARY=core"
|
|
set "INSTALL_DIR=%LOCALAPPDATA%\Programs\core"
|
|
|
|
REM === Resolve Version ===
|
|
if "%VERSION%"=="latest" (
|
|
for /f "tokens=2 delims=:" %%a in ('curl -fsSL --max-time 10 "https://api.github.com/repos/%REPO%/releases/latest" ^| findstr "tag_name"') do (
|
|
set "VERSION=%%a"
|
|
set "VERSION=!VERSION:"=!"
|
|
set "VERSION=!VERSION: =!"
|
|
set "VERSION=!VERSION:,=!"
|
|
)
|
|
if "!VERSION!"=="" (
|
|
echo ERROR: Failed to fetch latest version
|
|
exit /b 1
|
|
)
|
|
if "!VERSION!"=="latest" (
|
|
echo ERROR: Failed to resolve version
|
|
exit /b 1
|
|
)
|
|
)
|
|
|
|
REM === Create install directory ===
|
|
if not exist "%INSTALL_DIR%" mkdir "%INSTALL_DIR%"
|
|
|
|
REM === Mode dispatch ===
|
|
if "%MODE%"=="ci" goto :install_ci
|
|
if "%MODE%"=="dev" goto :install_dev
|
|
if "%MODE%"=="variant" goto :install_variant
|
|
goto :install_setup
|
|
|
|
:install_setup
|
|
echo Installing %BINARY% !VERSION! for Windows...
|
|
call :find_archive "" ARCHIVE
|
|
if errorlevel 1 exit /b 1
|
|
call :download_and_extract
|
|
if errorlevel 1 exit /b 1
|
|
call :install_binary
|
|
if errorlevel 1 exit /b 1
|
|
call :verify_install
|
|
if errorlevel 1 exit /b 1
|
|
goto :done
|
|
|
|
:install_ci
|
|
echo Installing %BINARY% !VERSION! (CI)...
|
|
call :find_archive "" ARCHIVE
|
|
if errorlevel 1 exit /b 1
|
|
call :download_and_extract
|
|
if errorlevel 1 exit /b 1
|
|
call :install_binary
|
|
if errorlevel 1 exit /b 1
|
|
|
|
%BINARY% --version
|
|
if errorlevel 1 exit /b 1
|
|
goto :done
|
|
|
|
:install_dev
|
|
echo Installing %BINARY% !VERSION! (full) for Windows...
|
|
call :find_archive "" ARCHIVE
|
|
if errorlevel 1 exit /b 1
|
|
call :download_and_extract
|
|
if errorlevel 1 exit /b 1
|
|
call :install_binary
|
|
if errorlevel 1 exit /b 1
|
|
call :verify_install
|
|
if errorlevel 1 exit /b 1
|
|
echo.
|
|
echo Full development variant installed. Available commands:
|
|
echo core dev - Multi-repo workflows
|
|
echo core build - Cross-platform builds
|
|
echo core release - Build and publish releases
|
|
goto :done
|
|
|
|
:install_variant
|
|
echo Installing %BINARY% !VERSION! (%VARIANT% variant) for Windows...
|
|
call :find_archive "%VARIANT%" ARCHIVE
|
|
if errorlevel 1 exit /b 1
|
|
call :download_and_extract
|
|
if errorlevel 1 exit /b 1
|
|
call :install_binary
|
|
if errorlevel 1 exit /b 1
|
|
call :verify_install
|
|
if errorlevel 1 exit /b 1
|
|
goto :done
|
|
|
|
REM === Helper Functions ===
|
|
|
|
:find_archive
|
|
set "_variant=%~1"
|
|
set "_result=%~2"
|
|
|
|
REM Try variant-specific first, then full
|
|
if not "%_variant%"=="" (
|
|
set "_try=%BINARY%-%_variant%-windows-amd64.zip"
|
|
curl -fsSLI --max-time 10 "https://github.com/%REPO%/releases/download/!VERSION!/!_try!" 2>nul | findstr /r "HTTP/[12].* [23][0-9][0-9]" >nul
|
|
if not errorlevel 1 (
|
|
set "%_result%=!_try!"
|
|
exit /b 0
|
|
)
|
|
echo Using full variant ^(%_variant% variant not available^)
|
|
)
|
|
|
|
set "%_result%=%BINARY%-windows-amd64.zip"
|
|
exit /b 0
|
|
|
|
:download_and_extract
|
|
curl -fsSL --connect-timeout 10 "https://github.com/%REPO%/releases/download/!VERSION!/!ARCHIVE!" -o "%TEMP%\!ARCHIVE!"
|
|
if errorlevel 1 (
|
|
echo ERROR: Failed to download !ARCHIVE!
|
|
exit /b 1
|
|
)
|
|
|
|
powershell -Command "try { Expand-Archive -Force '%TEMP%\!ARCHIVE!' '%INSTALL_DIR%' } catch { exit 1 }"
|
|
if errorlevel 1 (
|
|
echo ERROR: Failed to extract archive
|
|
del "%TEMP%\!ARCHIVE!" 2>nul
|
|
exit /b 1
|
|
)
|
|
del "%TEMP%\!ARCHIVE!" 2>nul
|
|
exit /b 0
|
|
|
|
:install_binary
|
|
REM Add to PATH using PowerShell (avoids setx 1024 char limit)
|
|
echo %PATH% | findstr /i /c:"%INSTALL_DIR%" >nul
|
|
if errorlevel 1 (
|
|
powershell -Command "[Environment]::SetEnvironmentVariable('Path', [Environment]::GetEnvironmentVariable('Path', 'User') + ';%INSTALL_DIR%', 'User')"
|
|
set "PATH=%PATH%;%INSTALL_DIR%"
|
|
)
|
|
exit /b 0
|
|
|
|
:verify_install
|
|
if not exist "%INSTALL_DIR%\%BINARY%.exe" (
|
|
echo ERROR: Installation failed - binary not found
|
|
exit /b 1
|
|
)
|
|
"%INSTALL_DIR%\%BINARY%.exe" --version
|
|
if errorlevel 1 exit /b 1
|
|
exit /b 0
|
|
|
|
:done
|
|
endlocal |