* feat(cli): wire release command and add installer scripts
- Wire up `core build release` subcommand (was orphaned)
- Wire up `core monitor` command (missing import in full variant)
- Add installer scripts for Unix (.sh) and Windows (.bat)
- setup: Interactive with variant selection
- ci: Minimal for CI/CD environments
- dev: Full development variant
- go/php/agent: Targeted development variants
- All scripts include security hardening:
- Secure temp directories (mktemp -d)
- Architecture validation
- Version validation after GitHub API call
- Proper cleanup on exit
- PowerShell PATH updates on Windows (avoids setx truncation)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(build): add tar.xz support and unified installer scripts
- Add tar.xz archive support using Borg's compress package
- ArchiveXZ() and ArchiveWithFormat() for configurable compression
- Better compression ratio than gzip for release artifacts
- Consolidate 12 installer scripts into 2 unified scripts
- install.sh and install.bat with BunnyCDN edge variable support
- Subdomains: setup.core.help, ci.core.help, dev.core.help, etc.
- MODE and VARIANT transformed at edge based on subdomain
- Installers prefer tar.xz with automatic fallback to tar.gz
- Fixed CodeRabbit issues: HTTP status patterns, tar error handling,
verify_install params, VARIANT validation, CI PATH persistence
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* chore: add build and release config files
- .core/build.yaml - cross-platform build configuration
- .core/release.yaml - release workflow configuration
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* chore: move plans from docs/ to tasks/
Consolidate planning documents in tasks/plans/ directory.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(install): address CodeRabbit review feedback
- Add curl timeout (--max-time) to prevent hanging on slow networks
- Rename TMPDIR to WORK_DIR to avoid clobbering system env var
- Add chmod +x to ensure binary has execute permissions
- Add error propagation after subroutine calls in batch file
- Remove System32 install attempt in CI mode (use consistent INSTALL_DIR)
- Fix HTTP status regex for HTTP/2 compatibility
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(rag): add Go RAG implementation with Qdrant + Ollama
Add RAG (Retrieval Augmented Generation) tools for storing documentation
in Qdrant vector database and querying with semantic search. This replaces
the Python tools/rag implementation with a native Go solution.
New commands:
- core rag ingest [directory] - Ingest markdown files into Qdrant
- core rag query [question] - Query vector database with semantic search
- core rag collections - List and manage Qdrant collections
Features:
- Markdown chunking by sections and paragraphs with overlap
- UTF-8 safe text handling for international content
- Automatic category detection from file paths
- Multiple output formats: text, JSON, LLM context injection
- Environment variable support for host configuration
Dependencies:
- github.com/qdrant/go-client (gRPC client)
- github.com/ollama/ollama/api (embeddings API)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(deploy): add pure-Go Ansible executor and Coolify API integration
Implement infrastructure deployment system with:
- pkg/ansible: Pure Go Ansible executor
- Playbook/inventory parsing (types.go, parser.go)
- Full execution engine with variable templating, loops, blocks,
conditionals, handlers, and fact gathering (executor.go)
- SSH client with key/password auth and privilege escalation (ssh.go)
- 35+ module implementations: shell, command, copy, template, file,
apt, service, systemd, user, group, git, docker_compose, etc. (modules.go)
- pkg/deploy/coolify: Coolify API client wrapping Python swagger client
- List/get servers, projects, applications, databases, services
- Generic Call() for any OpenAPI operation
- pkg/deploy/python: Embedded Python runtime for swagger client integration
- internal/cmd/deploy: CLI commands
- core deploy servers/projects/apps/databases/services/team
- core deploy call <operation> [params-json]
This enables Docker-free infrastructure deployment with Ansible-compatible
playbooks executed natively in Go.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(deploy): address linter warnings and build errors
- Fix fmt.Sprintf format verb error in ssh.go (remove unused stat command)
- Fix errcheck warnings by explicitly ignoring best-effort operations
- Fix ineffassign warning in cmd_ansible.go
All golangci-lint checks now pass for deploy packages.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* style(deploy): fix gofmt formatting
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(deploy): use known_hosts for SSH host key verification
Address CodeQL security alert by using the user's known_hosts file
for SSH host key verification when available. Falls back to accepting
any key only when known_hosts doesn't exist (common in containerized
or ephemeral environments).
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(ai,security,ide): add agentic MVP, security jobs, and Core IDE desktop app
Wire up AI infrastructure with unified pkg/ai package (metrics JSONL,
RAG integration), move RAG under `core ai rag`, add `core ai metrics`
command, and enrich task context with Qdrant documentation.
Add `--target` flag to all security commands for external repo scanning,
`core security jobs` for distributing findings as GitHub Issues, and
consistent error logging across scan/deps/alerts/secrets commands.
Add Core IDE Wails v3 desktop app with Angular 20 frontend, MCP bridge
(loopback-only HTTP server), WebSocket hub, and Claude Code bridge.
Production-ready with Lethean CIC branding, macOS code signing support,
and security hardening (origin validation, body size limits, URL scheme
checks, memory leak prevention, XSS mitigation).
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix: address PR review comments from CodeRabbit, Copilot, and Gemini
Fixes across 25 files addressing 46+ review comments:
- pkg/ai/metrics.go: handle error from Close() on writable file handle
- pkg/ansible: restore loop vars after loop, restore become settings,
fix Upload with become=true and no password (use sudo -n), honour
SSH timeout config, use E() helper for contextual errors, quote git
refs in checkout commands
- pkg/rag: validate chunk config, guard negative-to-uint64 conversion,
use E() helper for errors, add context timeout to Ollama HTTP calls
- pkg/deploy/python: fix exec.ExitError type assertion (was os.PathError),
handle os.UserHomeDir() error
- pkg/build/buildcmd: use cmd.Context() instead of context.Background()
for proper Ctrl+C cancellation
- install.bat: add curl timeouts, CRLF line endings, use --connect-timeout
for archive downloads
- install.sh: use absolute path for version check in CI mode
- tools/rag: fix broken ingest.py function def, escape HTML in query.py,
pin qdrant-client version, add markdown code block languages
- internal/cmd/rag: add chunk size validation, env override handling
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(build): make release dry-run by default and remove darwin/amd64 target
Replace --dry-run (default false) with --we-are-go-for-launch (default
false) so `core build release` is safe by default. Remove darwin/amd64
from default build targets (arm64 only for macOS). Fix cmd_project.go
to use command context instead of context.Background().
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
316 lines
8.2 KiB
Go
316 lines
8.2 KiB
Go
package build
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
// setupConfigTestDir creates a temp directory with optional .core/build.yaml content.
|
|
func setupConfigTestDir(t *testing.T, configContent string) string {
|
|
t.Helper()
|
|
dir := t.TempDir()
|
|
|
|
if configContent != "" {
|
|
coreDir := filepath.Join(dir, ConfigDir)
|
|
err := os.MkdirAll(coreDir, 0755)
|
|
require.NoError(t, err)
|
|
|
|
configPath := filepath.Join(coreDir, ConfigFileName)
|
|
err = os.WriteFile(configPath, []byte(configContent), 0644)
|
|
require.NoError(t, err)
|
|
}
|
|
|
|
return dir
|
|
}
|
|
|
|
func TestLoadConfig_Good(t *testing.T) {
|
|
t.Run("loads valid config", func(t *testing.T) {
|
|
content := `
|
|
version: 1
|
|
project:
|
|
name: myapp
|
|
description: A test application
|
|
main: ./cmd/myapp
|
|
binary: myapp
|
|
build:
|
|
cgo: true
|
|
flags:
|
|
- -trimpath
|
|
- -race
|
|
ldflags:
|
|
- -s
|
|
- -w
|
|
env:
|
|
- FOO=bar
|
|
targets:
|
|
- os: linux
|
|
arch: amd64
|
|
- os: darwin
|
|
arch: arm64
|
|
`
|
|
dir := setupConfigTestDir(t, content)
|
|
|
|
cfg, err := LoadConfig(dir)
|
|
require.NoError(t, err)
|
|
require.NotNil(t, cfg)
|
|
|
|
assert.Equal(t, 1, cfg.Version)
|
|
assert.Equal(t, "myapp", cfg.Project.Name)
|
|
assert.Equal(t, "A test application", cfg.Project.Description)
|
|
assert.Equal(t, "./cmd/myapp", cfg.Project.Main)
|
|
assert.Equal(t, "myapp", cfg.Project.Binary)
|
|
assert.True(t, cfg.Build.CGO)
|
|
assert.Equal(t, []string{"-trimpath", "-race"}, cfg.Build.Flags)
|
|
assert.Equal(t, []string{"-s", "-w"}, cfg.Build.LDFlags)
|
|
assert.Equal(t, []string{"FOO=bar"}, cfg.Build.Env)
|
|
assert.Len(t, cfg.Targets, 2)
|
|
assert.Equal(t, "linux", cfg.Targets[0].OS)
|
|
assert.Equal(t, "amd64", cfg.Targets[0].Arch)
|
|
assert.Equal(t, "darwin", cfg.Targets[1].OS)
|
|
assert.Equal(t, "arm64", cfg.Targets[1].Arch)
|
|
})
|
|
|
|
t.Run("returns defaults when config file missing", func(t *testing.T) {
|
|
dir := t.TempDir()
|
|
|
|
cfg, err := LoadConfig(dir)
|
|
require.NoError(t, err)
|
|
require.NotNil(t, cfg)
|
|
|
|
defaults := DefaultConfig()
|
|
assert.Equal(t, defaults.Version, cfg.Version)
|
|
assert.Equal(t, defaults.Project.Main, cfg.Project.Main)
|
|
assert.Equal(t, defaults.Build.CGO, cfg.Build.CGO)
|
|
assert.Equal(t, defaults.Build.Flags, cfg.Build.Flags)
|
|
assert.Equal(t, defaults.Build.LDFlags, cfg.Build.LDFlags)
|
|
assert.Equal(t, defaults.Targets, cfg.Targets)
|
|
})
|
|
|
|
t.Run("applies defaults for missing fields", func(t *testing.T) {
|
|
content := `
|
|
version: 2
|
|
project:
|
|
name: partial
|
|
`
|
|
dir := setupConfigTestDir(t, content)
|
|
|
|
cfg, err := LoadConfig(dir)
|
|
require.NoError(t, err)
|
|
require.NotNil(t, cfg)
|
|
|
|
// Explicit values preserved
|
|
assert.Equal(t, 2, cfg.Version)
|
|
assert.Equal(t, "partial", cfg.Project.Name)
|
|
|
|
// Defaults applied
|
|
defaults := DefaultConfig()
|
|
assert.Equal(t, defaults.Project.Main, cfg.Project.Main)
|
|
assert.Equal(t, defaults.Build.Flags, cfg.Build.Flags)
|
|
assert.Equal(t, defaults.Build.LDFlags, cfg.Build.LDFlags)
|
|
assert.Equal(t, defaults.Targets, cfg.Targets)
|
|
})
|
|
|
|
t.Run("preserves empty arrays when explicitly set", func(t *testing.T) {
|
|
content := `
|
|
version: 1
|
|
project:
|
|
name: noflags
|
|
build:
|
|
flags: []
|
|
ldflags: []
|
|
targets:
|
|
- os: linux
|
|
arch: amd64
|
|
`
|
|
dir := setupConfigTestDir(t, content)
|
|
|
|
cfg, err := LoadConfig(dir)
|
|
require.NoError(t, err)
|
|
require.NotNil(t, cfg)
|
|
|
|
// Empty arrays are preserved (not replaced with defaults)
|
|
assert.Empty(t, cfg.Build.Flags)
|
|
assert.Empty(t, cfg.Build.LDFlags)
|
|
// Targets explicitly set
|
|
assert.Len(t, cfg.Targets, 1)
|
|
})
|
|
}
|
|
|
|
func TestLoadConfig_Bad(t *testing.T) {
|
|
t.Run("returns error for invalid YAML", func(t *testing.T) {
|
|
content := `
|
|
version: 1
|
|
project:
|
|
name: [invalid yaml
|
|
`
|
|
dir := setupConfigTestDir(t, content)
|
|
|
|
cfg, err := LoadConfig(dir)
|
|
assert.Error(t, err)
|
|
assert.Nil(t, cfg)
|
|
assert.Contains(t, err.Error(), "failed to parse config file")
|
|
})
|
|
|
|
t.Run("returns error for unreadable file", func(t *testing.T) {
|
|
dir := t.TempDir()
|
|
coreDir := filepath.Join(dir, ConfigDir)
|
|
err := os.MkdirAll(coreDir, 0755)
|
|
require.NoError(t, err)
|
|
|
|
// Create config as a directory instead of file
|
|
configPath := filepath.Join(coreDir, ConfigFileName)
|
|
err = os.Mkdir(configPath, 0755)
|
|
require.NoError(t, err)
|
|
|
|
cfg, err := LoadConfig(dir)
|
|
assert.Error(t, err)
|
|
assert.Nil(t, cfg)
|
|
assert.Contains(t, err.Error(), "failed to read config file")
|
|
})
|
|
}
|
|
|
|
func TestDefaultConfig_Good(t *testing.T) {
|
|
t.Run("returns sensible defaults", func(t *testing.T) {
|
|
cfg := DefaultConfig()
|
|
|
|
assert.Equal(t, 1, cfg.Version)
|
|
assert.Equal(t, ".", cfg.Project.Main)
|
|
assert.Empty(t, cfg.Project.Name)
|
|
assert.Empty(t, cfg.Project.Binary)
|
|
assert.False(t, cfg.Build.CGO)
|
|
assert.Contains(t, cfg.Build.Flags, "-trimpath")
|
|
assert.Contains(t, cfg.Build.LDFlags, "-s")
|
|
assert.Contains(t, cfg.Build.LDFlags, "-w")
|
|
assert.Empty(t, cfg.Build.Env)
|
|
|
|
// Default targets cover common platforms
|
|
assert.Len(t, cfg.Targets, 4)
|
|
hasLinuxAmd64 := false
|
|
hasDarwinArm64 := false
|
|
hasWindowsAmd64 := false
|
|
for _, t := range cfg.Targets {
|
|
if t.OS == "linux" && t.Arch == "amd64" {
|
|
hasLinuxAmd64 = true
|
|
}
|
|
if t.OS == "darwin" && t.Arch == "arm64" {
|
|
hasDarwinArm64 = true
|
|
}
|
|
if t.OS == "windows" && t.Arch == "amd64" {
|
|
hasWindowsAmd64 = true
|
|
}
|
|
}
|
|
assert.True(t, hasLinuxAmd64)
|
|
assert.True(t, hasDarwinArm64)
|
|
assert.True(t, hasWindowsAmd64)
|
|
})
|
|
}
|
|
|
|
func TestConfigPath_Good(t *testing.T) {
|
|
t.Run("returns correct path", func(t *testing.T) {
|
|
path := ConfigPath("/project/root")
|
|
assert.Equal(t, "/project/root/.core/build.yaml", path)
|
|
})
|
|
}
|
|
|
|
func TestConfigExists_Good(t *testing.T) {
|
|
t.Run("returns true when config exists", func(t *testing.T) {
|
|
dir := setupConfigTestDir(t, "version: 1")
|
|
assert.True(t, ConfigExists(dir))
|
|
})
|
|
|
|
t.Run("returns false when config missing", func(t *testing.T) {
|
|
dir := t.TempDir()
|
|
assert.False(t, ConfigExists(dir))
|
|
})
|
|
|
|
t.Run("returns false when .core dir missing", func(t *testing.T) {
|
|
dir := t.TempDir()
|
|
assert.False(t, ConfigExists(dir))
|
|
})
|
|
}
|
|
|
|
func TestLoadConfig_Good_SignConfig(t *testing.T) {
|
|
tmpDir := t.TempDir()
|
|
coreDir := filepath.Join(tmpDir, ".core")
|
|
os.MkdirAll(coreDir, 0755)
|
|
|
|
configContent := `version: 1
|
|
sign:
|
|
enabled: true
|
|
gpg:
|
|
key: "ABCD1234"
|
|
macos:
|
|
identity: "Developer ID Application: Test"
|
|
notarize: true
|
|
`
|
|
os.WriteFile(filepath.Join(coreDir, "build.yaml"), []byte(configContent), 0644)
|
|
|
|
cfg, err := LoadConfig(tmpDir)
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %v", err)
|
|
}
|
|
|
|
if !cfg.Sign.Enabled {
|
|
t.Error("expected Sign.Enabled to be true")
|
|
}
|
|
if cfg.Sign.GPG.Key != "ABCD1234" {
|
|
t.Errorf("expected GPG.Key 'ABCD1234', got %q", cfg.Sign.GPG.Key)
|
|
}
|
|
if cfg.Sign.MacOS.Identity != "Developer ID Application: Test" {
|
|
t.Errorf("expected MacOS.Identity, got %q", cfg.Sign.MacOS.Identity)
|
|
}
|
|
if !cfg.Sign.MacOS.Notarize {
|
|
t.Error("expected MacOS.Notarize to be true")
|
|
}
|
|
}
|
|
|
|
func TestBuildConfig_ToTargets_Good(t *testing.T) {
|
|
t.Run("converts TargetConfig to Target", func(t *testing.T) {
|
|
cfg := &BuildConfig{
|
|
Targets: []TargetConfig{
|
|
{OS: "linux", Arch: "amd64"},
|
|
{OS: "darwin", Arch: "arm64"},
|
|
{OS: "windows", Arch: "386"},
|
|
},
|
|
}
|
|
|
|
targets := cfg.ToTargets()
|
|
require.Len(t, targets, 3)
|
|
|
|
assert.Equal(t, Target{OS: "linux", Arch: "amd64"}, targets[0])
|
|
assert.Equal(t, Target{OS: "darwin", Arch: "arm64"}, targets[1])
|
|
assert.Equal(t, Target{OS: "windows", Arch: "386"}, targets[2])
|
|
})
|
|
|
|
t.Run("returns empty slice for no targets", func(t *testing.T) {
|
|
cfg := &BuildConfig{
|
|
Targets: []TargetConfig{},
|
|
}
|
|
|
|
targets := cfg.ToTargets()
|
|
assert.Empty(t, targets)
|
|
})
|
|
}
|
|
|
|
// TestLoadConfig_Testdata tests loading from the testdata fixture.
|
|
func TestLoadConfig_Testdata(t *testing.T) {
|
|
t.Run("loads config-project fixture", func(t *testing.T) {
|
|
cfg, err := LoadConfig("testdata/config-project")
|
|
require.NoError(t, err)
|
|
require.NotNil(t, cfg)
|
|
|
|
assert.Equal(t, 1, cfg.Version)
|
|
assert.Equal(t, "example-cli", cfg.Project.Name)
|
|
assert.Equal(t, "An example CLI application", cfg.Project.Description)
|
|
assert.Equal(t, "./cmd/example", cfg.Project.Main)
|
|
assert.Equal(t, "example", cfg.Project.Binary)
|
|
assert.False(t, cfg.Build.CGO)
|
|
assert.Equal(t, []string{"-trimpath"}, cfg.Build.Flags)
|
|
assert.Equal(t, []string{"-s", "-w"}, cfg.Build.LDFlags)
|
|
assert.Len(t, cfg.Targets, 3)
|
|
})
|
|
}
|