fix(go): align bindings and installer versions

Author: anirudh-makuluri

.github/workflows/publish-go-sdk.yml

@@ -48,11 +48,6 @@ jobs:
           // NativeLibReleaseTag is the GitHub release tag used to fetch native artifacts.
           const NativeLibReleaseTag = "${C_SDK_VERSION}"
           EOF
-          cat > sdks/go/tools/install/release.go <<EOF
-          package main
-
-          const defaultReleaseTag = "${C_SDK_VERSION}"
-          EOF
 
       - name: Publish source-only module tags
         run: ./sdks/go/scripts/publish-sdk-module-tags.sh "${{ github.event.inputs.go_version }}"

sdks/go/bindings/lib/darwin-arm64/.gitignore

@@ -1 +1,2 @@
 libmoss.a
+.moss-install-checksum

sdks/go/bindings/lib/linux-amd64/.gitignore

@@ -1 +1,2 @@
 libmoss.a
+.moss-install-checksum

sdks/go/bindings/lib/linux-arm64/.gitignore

@@ -1 +1,2 @@
 libmoss.a
+.moss-install-checksum

sdks/go/bindings/lib/windows-amd64/.gitignore

@@ -1,3 +1,4 @@
 moss.lib
 moss.dll
 moss.dll.lib
+.moss-install-checksum

sdks/go/bindings/libmoss.go

@@ -1,4 +1,4 @@
-//go:build cgo
+//go:build cgo && ((linux && (amd64 || arm64)) || (darwin && arm64) || (windows && amd64))
 
 package mosscore
 

sdks/go/bindings/stub.go

@@ -1,4 +1,4 @@
-//go:build !cgo
+//go:build !cgo || !((linux && (amd64 || arm64)) || (darwin && arm64) || (windows && amd64))
 
 package mosscore
 

sdks/go/tools/install/main.go

@@ -24,6 +24,7 @@ import (
 const (
 	defaultRepo        = "usemoss/moss"
 	bindingsModulePath = "github.com/usemoss/moss/sdks/go/bindings"
+	installReceiptName = ".moss-install-checksum"
 )
 
 type platform struct {
@@ -54,7 +55,7 @@ var platforms = []platform{
 
 func main() {
 	all := flag.Bool("all", false, "install libraries for all supported platforms")
-	releaseTag := flag.String("release", defaultReleaseTag, "C SDK GitHub release tag")
+	releaseTag := flag.String("release", "", "C SDK GitHub release tag (default: target bindings metadata)")
 	repo := flag.String("repo", defaultRepo, "GitHub repository (owner/name)")
 	bindingsDir := flag.String("bindings", "", "bindings directory (default: auto-detect)")
 	vendor := flag.Bool("vendor", false, "run go mod vendor before installing into a downloaded module")
@@ -65,6 +66,12 @@ func main() {
 	if err != nil {
 		fatal(err)
 	}
+	if *releaseTag == "" {
+		*releaseTag, err = nativeReleaseTag(root)
+		if err != nil {
+			fatal(err)
+		}
+	}
 
 	version := strings.TrimPrefix(*releaseTag, "c-sdk-")
 	version = strings.TrimPrefix(version, "v")
@@ -182,6 +189,31 @@ func goEnv(name string) (string, error) {
 	return strings.TrimSpace(string(out)), nil
 }
 
+func nativeReleaseTag(bindingsRoot string) (string, error) {
+	f, err := os.Open(filepath.Join(bindingsRoot, "version.go"))
+	if err != nil {
+		return "", fmt.Errorf("read bindings native version: %w", err)
+	}
+	defer f.Close()
+
+	const prefix = "const NativeLibReleaseTag = \""
+	scanner := bufio.NewScanner(f)
+	for scanner.Scan() {
+		line := strings.TrimSpace(scanner.Text())
+		if !strings.HasPrefix(line, prefix) || !strings.HasSuffix(line, "\"") {
+			continue
+		}
+		tag := strings.TrimSuffix(strings.TrimPrefix(line, prefix), "\"")
+		if tag != "" {
+			return tag, nil
+		}
+	}
+	if err := scanner.Err(); err != nil {
+		return "", fmt.Errorf("read bindings native version: %w", err)
+	}
+	return "", errors.New("NativeLibReleaseTag not found in bindings/version.go; pass -release explicitly")
+}
+
 func selectPlatforms(all bool) ([]platform, error) {
 	if all {
 		return platforms, nil
@@ -245,17 +277,9 @@ func installPlatform(bindingsRoot, libDir string, installHeader bool, baseURL, v
 	destLib := filepath.Join(destDir, p.libFile)
 	headerPath := filepath.Join(bindingsRoot, "include", "libmoss.h")
 
-	if !force {
-		if err := verifyFileChecksum(destLib, wantChecksum); err == nil {
-			if !installHeader {
-				fmt.Printf("skip %s (already installed)\n", p.id)
-				return nil
-			}
-			if _, err := os.Stat(headerPath); err == nil {
-				fmt.Printf("skip %s (already installed)\n", p.id)
-				return nil
-			}
-		}
+	if !force && fileExists(destLib) && (!installHeader || fileExists(headerPath)) && receiptMatches(filepath.Join(destDir, installReceiptName), archive, wantChecksum) {
+		fmt.Printf("skip %s (already installed)\n", p.id)
+		return nil
 	}
 
 	if err := os.MkdirAll(destDir, 0o755); err != nil {
@@ -291,11 +315,45 @@ func installPlatform(bindingsRoot, libDir string, installHeader bool, baseURL, v
 	if err := copyFile(filepath.Join(extractedRoot, p.srcLib), destLib); err != nil {
 		return err
 	}
+	if err := writeReceipt(filepath.Join(destDir, installReceiptName), archive, wantChecksum); err != nil {
+		return err
+	}
 
 	fmt.Printf("installed %s -> %s\n", p.id, destLib)
 	return nil
 }
 
+func fileExists(path string) bool {
+	info, err := os.Stat(path)
+	return err == nil && !info.IsDir()
+}
+
+func receiptMatches(path, archive, checksum string) bool {
+	contents, err := os.ReadFile(path)
+	if err != nil {
+		return false
+	}
+	return strings.TrimSpace(string(contents)) == checksum+"  "+archive
+}
+
+func writeReceipt(path, archive, checksum string) error {
+	tmp, err := os.CreateTemp(filepath.Dir(path), ".moss-install-*")
+	if err != nil {
+		return err
+	}
+	tmpPath := tmp.Name()
+	defer os.Remove(tmpPath)
+
+	if _, err := fmt.Fprintf(tmp, "%s  %s\n", checksum, archive); err != nil {
+		tmp.Close()
+		return err
+	}
+	if err := tmp.Close(); err != nil {
+		return err
+	}
+	return os.Rename(tmpPath, path)
+}
+
 func extractTarGz(archivePath, destRoot, version, triple string) error {
 	f, err := os.Open(archivePath)
 	if err != nil {
@@ -412,23 +470,6 @@ func downloadFile(url, dest, wantChecksum string) error {
 	return os.Rename(tmpPath, dest)
 }
 
-func verifyFileChecksum(path, want string) error {
-	f, err := os.Open(path)
-	if err != nil {
-		return err
-	}
-	defer f.Close()
-
-	hasher := sha256.New()
-	if _, err := io.Copy(hasher, f); err != nil {
-		return err
-	}
-	if hex.EncodeToString(hasher.Sum(nil)) != want {
-		return fmt.Errorf("checksum mismatch")
-	}
-	return nil
-}
-
 func copyFile(src, dest string) error {
 	in, err := os.Open(src)
 	if err != nil {

sdks/go/tools/install/main_test.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"os"
 	"path/filepath"
 	"testing"
 )
@@ -23,3 +24,31 @@ func TestSafeArchiveTarget(t *testing.T) {
 		}
 	}
 }
+
+func TestNativeReleaseTag(t *testing.T) {
+	root := t.TempDir()
+	if err := os.WriteFile(filepath.Join(root, "version.go"), []byte("package mosscore\n\nconst NativeLibReleaseTag = \"c-sdk-v1.2.3\"\n"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	tag, err := nativeReleaseTag(root)
+	if err != nil {
+		t.Fatalf("nativeReleaseTag returned an error: %v", err)
+	}
+	if tag != "c-sdk-v1.2.3" {
+		t.Fatalf("nativeReleaseTag() = %q, want c-sdk-v1.2.3", tag)
+	}
+}
+
+func TestInstallReceipt(t *testing.T) {
+	path := filepath.Join(t.TempDir(), installReceiptName)
+	if err := writeReceipt(path, "libmoss-v0.9.0-x86_64-unknown-linux-gnu.tar.gz", "abc123"); err != nil {
+		t.Fatalf("writeReceipt returned an error: %v", err)
+	}
+	if !receiptMatches(path, "libmoss-v0.9.0-x86_64-unknown-linux-gnu.tar.gz", "abc123") {
+		t.Fatal("receiptMatches() = false, want true")
+	}
+	if receiptMatches(path, "libmoss-v0.9.0-x86_64-unknown-linux-gnu.tar.gz", "different") {
+		t.Fatal("receiptMatches() = true for a different checksum, want false")
+	}
+}