add Makefile, ci scripts, and pinned tooling

Root Makefile drives both the Go sidecar under sidecar/ and the Flutter
app under app/ through one interface. Mirrors the pql/claudian pattern:
VERSION read from project.yaml via awk and stamped into the sidecar
binary via -ldflags -X, so the version the codebase claims to be and
the version the binary reports cannot drift.

Flutter targets (app-analyze, app-test, app-build-*) check for
app/pubspec.yaml and flutter on PATH and gracefully noop when either
is missing. That makes the Makefile usable today — before the app is
scaffolded — without ceremony.

ci/ scripts shell out to the Makefile so local dev and CI run the same
commands. lint.sh includes the supply-chain gate (make security) so
there is no version of "green lint, known-vulnerable dep" that CI
accepts.

make tools installs govulncheck, goimports, and golangci-lint at
exact pinned versions — bump deliberately, never floating.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

This commit is contained in:

jpmschweitzer

2026-04-20 20:47:53 +02:00

co-authored by

Claude Opus 4.7

parent 16e43d3096

commit 4ae53ba16a

6 changed files with 211 additions and 0 deletions

									
										ci/test.sh
									
Executable

		+9
		
												View File
												
				@@ -0,0 +1,9 @@

				#!/usr/bin/env bash

				# CI entry: run the full test matrix. Shells out to Makefile targets.

				set -euo pipefail

				cd "$(dirname "$0")/.."

				make test

				make test-race

				make app-test