mirror of
https://github.com/tiennm99/goclaw.git
synced 2026-10-11 12:18:59 +00:00
fchengyan
52ced3710f
* fix(build): embed commit SHA for release provenance (#1571 part 2) Docker builds exclude .git via .dockerignore, so buildvcs cannot read VCS metadata and published images carry no commit information. A running image cannot be lined up with the source commit it was built from. Embed cmd.CommitSHA at link time (maintainer-endorsed option 2) and surface it in goclaw version output: - cmd: add CommitSHA var, print commit in version cmd when injected - Makefile: pass git rev-parse HEAD via LDFLAGS - Dockerfile: accept COMMIT_SHA build arg (default unknown) - docker-compose.yml: pass GOCLAW_COMMIT_SHA through as build arg - release workflows: inject github.sha into release and dev-beta builds Backward compatible: binaries built without the flag keep the existing version output format. * fix(build): pass COMMIT_SHA to docker image builds, surface it in doctor/upgrade Review follow-up for PR #1590: - Add COMMIT_SHA=${{ github.sha }} to the build-args of every docker/build-push-action step (release.yaml, dev-beta-release.yaml, release-beta.yaml, fork-image.yaml) so published images — the artifact issue #1571 is about — carry the commit, not just release tarball binaries. - Surface the commit in doctor and upgrade output (App version line) via a shared commitSuffix() helper, so operators can read provenance from logs without exec'ing goclaw version (review suggestion #2). - version cmd refactored onto the same helper; output unchanged.
168 lines
5.4 KiB
Makefile
168 lines
5.4 KiB
Makefile
VERSION ?= $(shell git describe --tags --abbrev=0 --match "v[0-9]*" 2>/dev/null || echo dev)
|
|
COMMIT_SHA ?= $(shell git rev-parse HEAD 2>/dev/null || echo unknown)
|
|
LDFLAGS = -s -w -X github.com/nextlevelbuilder/goclaw/cmd.Version=$(VERSION) -X github.com/nextlevelbuilder/goclaw/cmd.CommitSHA=$(COMMIT_SHA)
|
|
BINARY = goclaw
|
|
|
|
.PHONY: build build-full build-tui run clean version up up-build down logs reset test vet check-web dev migrate setup ci desktop-dev desktop-build desktop-dmg test-hooks test-hooks-unit test-hooks-e2e test-hooks-chaos test-hooks-rbac test-hooks-tracing
|
|
|
|
# Build backend only (API-only, no embedded web UI)
|
|
build:
|
|
CGO_ENABLED=0 go build -ldflags="$(LDFLAGS)" -o $(BINARY) .
|
|
|
|
# Build with embedded web UI (recommended for production)
|
|
build-full: check-web
|
|
rm -rf internal/webui/dist && mkdir -p internal/webui/dist
|
|
cp -r ui/web/dist/* internal/webui/dist/
|
|
CGO_ENABLED=0 go build -tags embedui -ldflags="$(LDFLAGS)" -o $(BINARY) .
|
|
|
|
# Build with TUI (Bubble Tea enhanced CLI)
|
|
build-tui:
|
|
CGO_ENABLED=0 go build -tags tui -ldflags="$(LDFLAGS)" -o $(BINARY) .
|
|
|
|
run: build
|
|
./$(BINARY)
|
|
|
|
clean:
|
|
rm -f $(BINARY)
|
|
rm -rf internal/webui/dist
|
|
|
|
version:
|
|
@echo $(VERSION)
|
|
|
|
# ── Docker Compose ──
|
|
# Default: backend (with embedded web UI) + Postgres. No separate nginx needed.
|
|
# Add WITH_WEB_NGINX=1 for separate nginx on :3000 (custom SSL, reverse proxy).
|
|
# Cloudflare Tunnel: if `.env.cloudflared` exists it is merged automatically (same as
|
|
# docker-compose.cloudflared.yml). Set WITH_CLOUDFLARED=0 to skip.
|
|
COMPOSE_BASE = docker compose -f docker-compose.yml -f docker-compose.postgres.yml
|
|
ifdef WITH_WEB_NGINX
|
|
COMPOSE_BASE += -f docker-compose.selfservice.yml
|
|
export ENABLE_EMBEDUI=false
|
|
endif
|
|
COMPOSE_EXTRA =
|
|
ifdef WITH_BROWSER
|
|
COMPOSE_EXTRA += -f docker-compose.browser.yml
|
|
endif
|
|
ifdef WITH_OTEL
|
|
COMPOSE_EXTRA += -f docker-compose.otel.yml
|
|
endif
|
|
ifdef WITH_SANDBOX
|
|
COMPOSE_EXTRA += -f docker-compose.sandbox.yml
|
|
endif
|
|
ifdef WITH_TAILSCALE
|
|
COMPOSE_EXTRA += -f docker-compose.tailscale.yml
|
|
endif
|
|
ifdef WITH_REDIS
|
|
COMPOSE_EXTRA += -f docker-compose.redis.yml
|
|
endif
|
|
ifdef WITH_CLAUDE_CLI
|
|
COMPOSE_EXTRA += -f docker-compose.claude-cli.yml
|
|
endif
|
|
ifneq ($(WITH_CLOUDFLARED),0)
|
|
ifneq ($(wildcard .env.cloudflared),)
|
|
COMPOSE_EXTRA += -f docker-compose.cloudflared.yml
|
|
endif
|
|
endif
|
|
COMPOSE = $(COMPOSE_BASE) $(COMPOSE_EXTRA)
|
|
UPGRADE = docker compose -f docker-compose.yml -f docker-compose.postgres.yml -f docker-compose.upgrade.yml
|
|
|
|
version-file:
|
|
@echo $(VERSION) > VERSION
|
|
|
|
# Pull latest published image (if changed) and start. Use for deploy/update flows.
|
|
up: version-file
|
|
GOCLAW_VERSION=$(VERSION) $(COMPOSE) up -d --pull always
|
|
$(UPGRADE) run --rm upgrade
|
|
|
|
# Build image from local source (with pulled base layers), then start. Use for dev changes.
|
|
up-build: version-file
|
|
GOCLAW_VERSION=$(VERSION) $(COMPOSE) build --pull
|
|
GOCLAW_VERSION=$(VERSION) $(COMPOSE) up -d
|
|
$(UPGRADE) run --rm upgrade
|
|
|
|
down:
|
|
$(COMPOSE) down
|
|
|
|
logs:
|
|
$(COMPOSE) logs -f goclaw
|
|
|
|
reset: version-file
|
|
$(COMPOSE) down -v
|
|
GOCLAW_VERSION=$(VERSION) $(COMPOSE) up -d --pull always
|
|
|
|
test:
|
|
go test -race -timeout=5m ./...
|
|
|
|
# ── Layered Testing ──
|
|
# P0: Invariant tests - tenant isolation, permission enforcement (MUST pass)
|
|
test-invariants:
|
|
go test -race -timeout=90s -tags integration ./tests/invariants/...
|
|
|
|
# P1: Contract tests - API schema validation (MUST pass)
|
|
test-contracts:
|
|
go test -race -timeout=90s -tags integration ./tests/contracts/...
|
|
|
|
# P2: Scenario tests - end-to-end user journeys (warning only)
|
|
test-scenarios:
|
|
go test -race -timeout=180s -tags integration ./tests/scenarios/...
|
|
|
|
# Critical tests (P0 + P1) - run before merge
|
|
test-critical: test-invariants test-contracts
|
|
|
|
# ── Agent Hooks targets (phase 4) ──
|
|
# Requires TEST_DATABASE_URL pointing at a pgvector:pg18 container on :5433
|
|
test-hooks-unit:
|
|
go test -race ./internal/hooks/... ./internal/gateway/methods/
|
|
|
|
test-hooks-e2e:
|
|
go test -race -timeout=180s -tags integration -run "TestHooksE2E" ./tests/integration/
|
|
|
|
test-hooks-chaos:
|
|
go test -race -timeout=180s -tags integration -run "TestHooksChaos" ./tests/integration/
|
|
|
|
test-hooks-rbac:
|
|
go test -race -timeout=90s -tags integration -run "TestHooksRBAC" ./tests/integration/
|
|
|
|
test-hooks-tracing:
|
|
go test -race -timeout=90s -tags integration -run "TestHooksTracing" ./tests/integration/
|
|
|
|
# Full hook test suite (unit + integration)
|
|
test-hooks: test-hooks-unit test-hooks-e2e test-hooks-chaos test-hooks-rbac test-hooks-tracing
|
|
|
|
vet:
|
|
go vet ./...
|
|
|
|
check-web:
|
|
cd ui/web && pnpm install --frozen-lockfile && pnpm build
|
|
|
|
dev:
|
|
cd ui/web && pnpm dev
|
|
|
|
migrate:
|
|
$(COMPOSE) run --rm goclaw migrate up
|
|
|
|
setup:
|
|
go mod download
|
|
cd ui/web && pnpm install --frozen-lockfile
|
|
|
|
ci: build test vet check-web
|
|
|
|
# ── Desktop (Wails + SQLite) ──
|
|
|
|
desktop-dev:
|
|
cd ui/desktop && wails dev -tags sqliteonly
|
|
|
|
desktop-build:
|
|
cd ui/desktop && wails build -tags sqliteonly -ldflags="-s -w -X github.com/nextlevelbuilder/goclaw/cmd.Version=$(VERSION)"
|
|
|
|
desktop-dmg: desktop-build
|
|
@echo "Creating DMG..."
|
|
rm -rf /tmp/goclaw-dmg-staging
|
|
mkdir -p /tmp/goclaw-dmg-staging
|
|
cp -R ui/desktop/build/bin/goclaw-lite.app /tmp/goclaw-dmg-staging/
|
|
ln -s /Applications /tmp/goclaw-dmg-staging/Applications
|
|
hdiutil create -volname "GoClaw Lite $(VERSION)" -srcfolder /tmp/goclaw-dmg-staging \
|
|
-ov -format UDZO "goclaw-lite-$(VERSION)-darwin-$$(uname -m | sed 's/x86_64/amd64/').dmg"
|
|
rm -rf /tmp/goclaw-dmg-staging
|
|
@echo "DMG created: goclaw-lite-$(VERSION)-darwin-$$(uname -m | sed 's/x86_64/amd64/').dmg"
|