Rebrand BemiDB as PgStack with local Search and Audit

Author: exAspArk

.dockerignore

@@ -0,0 +1,16 @@
+**
+!cdc/
+!cdc/*.go
+!cdc/go.mod
+!cdc/go.sum
+!processor/
+!processor/*.go
+!processor/go.mod
+!processor/go.sum
+!server/
+!server/*.go
+!server/go.mod
+!server/go.sum
+!local-entrypoint.sh
+!Dockerfile
+!local_config.py

.env.sample

@@ -0,0 +1,115 @@
+name: Test and release
+on:
+  push:
+    branches: [main]
+  pull_request:
+  release:
+    types: [published]
+  workflow_dispatch:
+permissions:
+  contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
+  cancel-in-progress: ${{ github.event_name != 'release' }}
+jobs:
+  test:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        module: [cdc, processor, server]
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        with:
+          go-version: '1.26'
+          cache-dependency-path: '${{ matrix.module }}/go.sum'
+      - run: go vet ./... && go test ./...
+        working-directory: ${{ matrix.module }}
+  config-checks:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - run: sudo apt-get update && sudo apt-get install -y python3-yaml jq shellcheck
+      - run: /usr/bin/python3 -m unittest discover -p 'test_local_config.py'
+      - run: shellcheck local-entrypoint.sh tests/smoke.sh
+  container:
+    needs: [test, config-checks]
+    timeout-minutes: 45
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - runner: ubuntu-24.04
+            arch: amd64
+          - runner: ubuntu-24.04-arm
+            arch: arm64
+    runs-on: ${{ matrix.runner }}
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        with:
+          context: .
+          load: true
+          tags: pgstack:test
+          cache-from: type=gha,scope=${{ matrix.arch }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.arch }}
+      - run: bash tests/smoke.sh pgstack:test
+  publish:
+    if: github.event_name == 'release'
+    needs: container
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
+      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
+        id: meta
+        with:
+          images: ghcr.io/pgstack-io/pgstack
+          flavor: latest=false
+          tags: |
+            type=ref,event=tag
+            type=semver,pattern={{version}}
+            type=raw,value=latest,enable=${{ !github.event.release.prerelease }}
+      - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          provenance: mode=max
+          sbom: true
+          cache-from: |
+            type=gha,scope=amd64
+            type=gha,scope=arm64
+      - name: Verify anonymous image access
+        env:
+          IMAGE_TAG: ${{ github.event.release.tag_name }}
+        run: |
+          docker logout ghcr.io
+          if ! docker buildx imagetools inspect "ghcr.io/pgstack-io/pgstack:${IMAGE_TAG}"; then
+            echo "Set the GHCR package visibility to public, then verify an anonymous pull." >&2
+            exit 1
+          fi

.github/workflows/build.yml

@@ -1,12 +1,7 @@
-/iceberg
-/iceberg-test
-/src/iceberg
-/src/iceberg-test
-.DS_Store
-.vscode
 .env
-/benchmark/tpch-kit
-/benchmark/data/*.tbl
-/build
-bemidb
-/src/__debug*
+.env.*
+!.env.example
+.devbox/
+.DS_Store
+*.log
+__pycache__/

.github/workflows/image.yml

@@ -0,0 +1,15 @@
+# Contributing
+
+Bug reports and focused pull requests are welcome. Include a minimal reproduction, source Postgres version, PgStack version, and redacted logs. Never include database credentials, API keys, or customer data.
+
+The repository contains three Go modules:
+
+- `cdc`: Postgres logical replication and initial Search snapshots.
+- `processor`: Audit storage and Search indexing.
+- `server`: SQL compatibility, query execution, and authentication.
+
+Use `make test` and `make lint` with Devbox, then `make build` to check the complete local image. Add regression tests for behavior changes. Keep fixtures synthetic. Document public configuration changes in the README and preserve the simple local quickstart.
+
+BemiDB 1.x history remains available in Git. PgStack 2.x is a new runtime and configuration; do not assume compatibility with old deployment instructions or storage layouts.
+
+Contributions are provided under the repository's AGPL-3.0 license.

.gitignore

@@ -1,88 +1,60 @@
-ARG PLATFORM=linux/arm64
+FROM golang:1.26-bookworm AS go-builder
 
-FROM --platform=$PLATFORM debian:12-slim AS base
+WORKDIR /src
 
-RUN apt-get update \
-  && apt-get install -y --no-install-recommends \
-  curl ca-certificates \
-  postgresql-client \
-  gcc g++ libc6-dev \
-  && rm -rf /var/lib/apt/lists/*
+COPY cdc/ ./cdc/
+COPY processor/ ./processor/
+COPY server/ ./server/
 
-RUN adduser --disabled-login app
+RUN --mount=type=cache,target=/go/pkg/mod \
+    --mount=type=cache,target=/root/.cache/go-build \
+    cd cdc && CGO_ENABLED=1 go build -mod=readonly -trimpath -ldflags="-s -w" -o /out/cdc . && \
+    cd ../processor && CGO_ENABLED=1 go build -mod=readonly -trimpath -ldflags="-s -w" -o /out/processor . && \
+    cd ../server && CGO_ENABLED=1 go build -mod=readonly -trimpath -ldflags="-s -w" -o /out/server .
 
-WORKDIR /app
-
-COPY --chown=app:app scripts/catalog.sql /app/scripts/
-
-# Set up syncers and server ########################################################################
-
-FROM base AS compile
+################################################################################
 
-# Install Go
+FROM nats:2.11.8 AS nats-server
 
-ENV GOROOT /usr/local/go
-ENV GOPATH /go
-ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH
+################################################################################
 
-RUN \
-  ARCH=$(dpkg --print-architecture) \
-  && curl -L "https://go.dev/dl/go1.24.4.linux-$ARCH.tar.gz" -o go.tar.gz \
-  && tar -C /usr/local -xzf go.tar.gz \
-  && rm go.tar.gz \
-  && mkdir -p "$GOPATH/src" "$GOPATH/bin" \
-  && chmod -R 777 "$GOPATH"
+FROM natsio/nats-box:0.19.7 AS nats-box
 
-# Compile syncers and server
+################################################################################
 
-COPY --chown=app:app src/common/go.mod src/common/go.sum /app/src/common/
+FROM rclone/rclone:1.74.2 AS rclone
 
-COPY --chown=app:app src/syncer-postgres/lib/go.mod src/syncer-postgres/lib/go.sum /app/src/syncer-postgres/lib/
-COPY --chown=app:app src/syncer-postgres/go.mod src/syncer-postgres/go.sum /app/src/syncer-postgres/
-RUN cd /app/src/syncer-postgres && go mod download
+################################################################################
 
-COPY --chown=app:app src/syncer-amplitude/lib/go.mod src/syncer-amplitude/lib/go.sum /app/src/syncer-amplitude/lib/
-COPY --chown=app:app src/syncer-amplitude/go.mod src/syncer-amplitude/go.sum /app/src/syncer-amplitude/
-RUN cd /app/src/syncer-amplitude && go mod download
+FROM debian:bookworm-slim
 
-COPY --chown=app:app src/syncer-attio/lib/go.mod src/syncer-attio/lib/go.sum /app/src/syncer-attio/lib/
-COPY --chown=app:app src/syncer-attio/go.mod src/syncer-attio/go.sum /app/src/syncer-attio/
-RUN cd /app/src/syncer-attio && go mod download
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates libstdc++6 postgresql-client tini jq python3-yaml && \
+    rm -rf /var/lib/apt/lists/*
 
-COPY --chown=app:app src/syncer-dialpad/lib/go.mod src/syncer-dialpad/lib/go.sum /app/src/syncer-dialpad/lib/
-COPY --chown=app:app src/syncer-dialpad/go.mod src/syncer-dialpad/go.sum /app/src/syncer-dialpad/
-RUN cd /app/src/syncer-dialpad && go mod download
+RUN useradd --create-home --uid 10001 app && \
+    mkdir -p /app/bin /var/lib/pgstack && \
+    chown -R app:app /app /var/lib/pgstack
 
-COPY --chown=app:app src/server/go.mod src/server/go.sum /app/src/server/
-RUN cd /app/src/server && go mod download
+COPY --from=nats-server /nats-server /usr/local/bin/nats-server
+COPY --from=nats-box /usr/local/bin/nats /usr/local/bin/nats
+COPY --from=rclone /usr/local/bin/rclone /usr/local/bin/rclone
+COPY --from=go-builder /out/cdc /app/bin/cdc
+COPY --from=go-builder /out/processor /app/bin/processor
+COPY --from=go-builder /out/server /app/bin/server
+COPY --chown=app:app local-entrypoint.sh /app/local-entrypoint.sh
 
-COPY --chown=app:app src/common /app/src/common
-COPY --chown=app:app src/syncer-postgres /app/src/syncer-postgres
-COPY --chown=app:app src/syncer-amplitude /app/src/syncer-amplitude
-COPY --chown=app:app src/syncer-attio /app/src/syncer-attio
-COPY --chown=app:app src/syncer-dialpad /app/src/syncer-dialpad
-COPY --chown=app:app src/server /app/src/server
+COPY --chown=app:app local_config.py /app/local_config.py
 
-RUN ARCH=$(dpkg --print-architecture) \
-  && cd /app/src/syncer-postgres && CGO_ENABLED=1 GOOS=linux GOARCH=$ARCH go build -o /app/bin/syncer-postgres \
-    && cd /app/src/syncer-amplitude && CGO_ENABLED=1 GOOS=linux GOARCH=$ARCH go build -o /app/bin/syncer-amplitude \
-    && cd /app/src/syncer-attio && CGO_ENABLED=1 GOOS=linux GOARCH=$ARCH go build -o /app/bin/syncer-attio \
-    && cd /app/src/syncer-dialpad && CGO_ENABLED=1 GOOS=linux GOARCH=$ARCH go build -o /app/bin/syncer-dialpad \
-    && cd /app/src/server && CGO_ENABLED=1 GOOS=linux GOARCH=$ARCH go build -o /app/bin/server
-
-# Prepare final image ##############################################################################
+USER app
+WORKDIR /app
 
-FROM base AS final
+LABEL org.opencontainers.image.title="PgStack" \
+      org.opencontainers.image.source="https://github.com/pgstack-io/pgstack" \
+      org.opencontainers.image.licenses="AGPL-3.0"
 
-COPY --chown=app:app --from=compile \
-  /app/bin/syncer-postgres \
-  /app/bin/syncer-amplitude \
-  /app/bin/syncer-attio \
-  /app/bin/syncer-dialpad \
-  /app/bin/server \
-  /app/bin/
-COPY --chown=app:app docker/bin /app/bin/
+ENV PGHOST=127.0.0.1 PGPORT=54321 PGDATABASE=pgstack PGUSER=pgstack
 
-USER app
+EXPOSE 54321
 
-ENTRYPOINT ["/app/bin/run.sh"]
+ENTRYPOINT ["/usr/bin/tini", "-g", "--", "/app/local-entrypoint.sh"]