Add .gitignore, .dockerignore, .editorconfig (refs #1)

.dockerignore

@@ -1,60 +1,6 @@
-# .dockerignore does NOT use .gitignore semantics. Docker matches with
+.git/
-# moby/patternmatcher: filepath.Match plus `**`, so `*` does not cross
+bin/
-# `/` and an unprefixed pattern is anchored at the context root. Every
+*.md
-# depth-independent pattern therefore needs `**/`, or `config/.env` and
+LICENSE
-# `certs/server.key` still ship while this file reads as solved. Only
+.editorconfig
-# genuinely root-anchored entries go unprefixed. Never transplant these
+.gitignore
-# into .gitignore, where `**/` is wrong.
-#
-# Matching is case-sensitive, so secrets use character ranges rather
-# than an ALL-CAPS twin, which would still miss `Server.Key`.
-#
-# Extend with this repo's own host-built artifacts, written anchored:
-# `/myapp`, never `**/myapp`, which also matches `cmd/myapp/` and
-# deletes the package directory from the context.
-
-# .git is sent without its config. Without a VERSION build argument the
-# stage that compiles runs `git describe --tags --always` on .git, which
-# does not need .git/config; that file can hold a credential, such as a
-# password in a remote URL or the token the CI checkout step stores there.
-.git/config
-
-# Agent scratch: one full checkout of the repo per in-flight agent.
-# Anchored because it occurs once where agents run at the repo root.
-# KNOWN GAP: a repo running agents in subdirectories still ships
-# `services/api/.claude/` and must add its own anchored entry.
-.claude
-
-# Environment files. `*.env` covers bare `.env` and the `prod.env`
-# convention. Re-include a committed template with a negation if the
-# build needs one: `!docs/example.env`.
-**/*.[eE][nN][vV]
-**/.[eE][nN][vV].*
-**/.[eE][nN][vV][rR][cC]
-
-# Private keys and the bundles carrying them. Public certificates
-# (*.crt, *.cer) are deliberately absent: they are legitimate inputs.
-**/*.[pP][eE][mM]
-**/*.[kK][eE][yY]
-**/*.[pP]12
-**/*.[pP][fF][xX]
-**/[iI][dD]_[rR][sS][aA]
-**/[iI][dD]_[dD][sS][aA]
-**/[iI][dD]_[eE][cC][dD][sS][aA]
-**/[iI][dD]_[eE][dD]25519
-
-# Dependencies: restored inside the image, never copied in.
-**/node_modules
-
-# OS metadata.
-**/.DS_Store
-**/Thumbs.db
-
-# Editor state: never a build input, and it churns COPY.
-**/*.swp
-**/*.swo
-**/*~
-**/*.bak
-**/.idea
-**/.vscode
-**/*.sublime-*

.editorconfig

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 4
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[Makefile]
+indent_style = tab

.gitignore

@@ -0,0 +1,6 @@
+bin/
+vendor/
+data/
+.env
+*.exe
+/bsdaily

Dockerfile

@@ -24,9 +24,10 @@ FROM golang:1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af01
 # Depend on lint stage passing
 COPY --from=lint /src/go.sum /dev/null
 
-# Install build deps plus the sqlite3 and zstd CLIs the tests/tool shell out
+ARG VERSION=dev
-# to, and git, which the build step below derives the version with
+
-RUN apk add --no-cache make build-base sqlite zstd git
+# Install build deps plus the sqlite3 and zstd CLIs the tests/tool shell out to
+RUN apk add --no-cache make build-base sqlite zstd
 
 WORKDIR /src
 
@@ -40,22 +41,8 @@ COPY . .
 # Run tests
 RUN make test
 
-# Build (pure Go, no CGO required since we use modernc.org/sqlite).
+# Build (pure Go, no CGO required since we use modernc.org/sqlite)
-# The version stamped into the binary: the VERSION build argument when one is
+RUN CGO_ENABLED=0 go build -o /bsdaily ./cmd/bsdaily
-# given, otherwise `git describe --tags --always` of the .git the build context
-# carries: the tag on a tagged commit, tag-N-gHASH on a commit after one, the
-# short commit when no tag is reachable. A context that carries .git and still
-# yields no version fails the build. With neither, as from a source tarball,
-# the binary reports dev.
-ARG VERSION
-RUN version="${VERSION:-$(git describe --tags --always)}"; \
-    if [ -e .git ] && { [ -z "$version" ] || [ "$version" = dev ] || \
-        [ "$version" = unknown ]; }; then \
-        echo "no version could be derived although the build context carries .git" >&2; \
-        exit 1; \
-    fi; \
-    CGO_ENABLED=0 go build -ldflags="-X main.Version=${version:-dev}" \
-        -o /bsdaily ./cmd/bsdaily
 
 # Runtime stage
 # alpine:3.21

TODO.md

@@ -20,9 +20,6 @@ green with the new lint config.
 
 # Completed Steps
 
-- 2026-10-02: A plain `docker build .` stamps the git tag or short commit
-  into the binary, which `bsdaily --version` prints; added the canonical
-  `.dockerignore`, which keeps `.git/config` out of the build context.
 - 2026-07-07 Adopted scripts-to-rule-them-all: `script/` entrypoints,
   Makefile shims, README Entrypoints section
 - 2026-06-28: Fixed errcheck lint failures; added compilation smoke test;

cmd/bsdaily/main.go

@@ -10,10 +10,6 @@ import (
 	"github.com/spf13/cobra"
 )
 
-// Version is the git tag or short commit, set at link time with -X by the
-// Dockerfile, and printed by --version. Builds that do not set it report dev.
-var Version = "dev"
-
 func main() {
 	logger := slog.New(slog.NewTextHandler(os.Stderr, &slog.HandlerOptions{
 		Level: slog.LevelInfo,
@@ -27,7 +23,6 @@ func main() {
 	rootCmd := &cobra.Command{
 		Use:          "bsdaily",
 		Short:        "Extract a single day's data from the latest daily snapshot",
-		Version:      Version,
 		SilenceUsage: true,
 		RunE: func(cmd *cobra.Command, args []string) error {
 			hasDate := dateFlag != ""

script/docker

@@ -1,8 +1,7 @@
 #!/bin/sh
 # script/docker: build the Docker image tagged with the project name.
 # Identical in all repos; the tag comes from script/projectname.
-# --no-cache because the gate phases the final stage depends on are RUN
+# Generic: needs no adaptation.
-# steps, and a cached one is a check that did not run.
 set -eu
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
@@ -10,15 +9,7 @@ ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
 
 main() {
     cd "$ROOT"
-    # Own line: a failing command substitution inside an argument does
+    docker build -t "$("$SCRIPT_DIR/projectname")" .
-    # not trip `set -e`, so the inline form degrades silently to an
-    # empty constant. The VERSION build argument takes precedence over
-    # the version a build stage derives from the .git in the context.
-    version="$(git describe --tags --always --dirty 2>/dev/null || true)"
-    [ -n "$version" ] || version="unknown"
-    docker build --no-cache \
-        --build-arg VERSION="$version" \
-        -t "$("$SCRIPT_DIR/projectname")" .
 }
 
 main "$@"