build(core)!: adopt core v0.15.0 (#82)

* build(core)!: adopt core v0.15.0

This agent vendored a core from before the reach/addressing split, and an
endpoint's `exposure` field enters the proto only at core v0.14.0. An agent
that cannot represent the field returns endpoints without it, so the CLI —
which does vendor v0.15.0 — then refuses the module's own manifest with

  declares visibility "public" but states no exposure

about a manifest that states it. The field is lost in the agent hop.

Also fixes a production defect found on the way: CreateEndpoints set
Visibility=public on the REST and gRPC endpoints and never set Exposure, so
core refuses the manifest this agent itself scaffolds. "Expose API as public"
has always meant reachable from outside the workspace, which is exactly
exposure public, so the old single-axis answer projects onto both axes.

Test adaptation: core replaced IsRestrictedOutputProfile with a parsed
OutputProfile whose Restricted() answers the same question.

Known not green: TestCreateToRunDocker loads zero endpoints and needs its own
diagnosis. Named rather than skipped.

Production code builds and vets clean at v0.15.0.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* chore: drop the diagnostic probes used to locate core's NewAPI defect

The cause was in core, not here: resources.NewAPI dropped Exposure and
Location, so this agent emitted a public endpoint with no exposure and core
then refused it. codefly-dev/core#738 carries the fix; verified locally with
a replace directive that this agent's suite passes against it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* build(core): v0.15.1, which carries NewAPI's fix

core v0.15.0's resources.NewAPI dropped Exposure and Location, so this agent
emitted a public endpoint with no exposure and core then refused it — naming
the module's manifest rather than the conversion. codefly-dev/core#738 carries
the fix and v0.15.1 publishes it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Antoine Toussaint <312536060+antoinetoussaint-byte@users.noreply.github.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: antoinetoussaint-byte

builder.go

@@ -573,7 +573,15 @@ func (s *Builder) CreateEndpoints(ctx context.Context) error {
 	}
 
 	if s.FastAPI.Settings.PublicEndpoint {
+		// Since core v0.14.0 an endpoint declares two independent axes, and a
+		// PUBLIC one must state both: visibility is reach, exposure is
+		// addressing. "Expose API as public" has always meant reachable from
+		// outside the workspace, which is exactly exposure public, so the old
+		// single-axis answer projects onto both rather than leaving the second
+		// unset. A manifest scaffolded without it is one core refuses to load,
+		// and the service then reports no endpoints at all.
 		endpoint.Visibility = resources.VisibilityPublic
+		endpoint.Exposure = resources.ExposurePublic
 	}
 
 	rest, loadErr := resources.LoadRestAPI(ctx, shared.Pointer(openapiFile))
@@ -620,7 +628,15 @@ func (s *Builder) grpcEndpoint(ctx context.Context) (*basev0.Endpoint, error) {
 	}
 	endpoint := s.Base.BaseEndpoint(standards.GRPC)
 	if s.FastAPI.Settings.PublicEndpoint {
+		// Since core v0.14.0 an endpoint declares two independent axes, and a
+		// PUBLIC one must state both: visibility is reach, exposure is
+		// addressing. "Expose API as public" has always meant reachable from
+		// outside the workspace, which is exactly exposure public, so the old
+		// single-axis answer projects onto both rather than leaving the second
+		// unset. A manifest scaffolded without it is one core refuses to load,
+		// and the service then reports no endpoints at all.
 		endpoint.Visibility = resources.VisibilityPublic
+		endpoint.Exposure = resources.ExposurePublic
 	}
 	api, err := resources.NewAPI(ctx, endpoint, resources.ToGrpcAPI(grpc))
 	if err != nil {

deployment_test.go

@@ -300,7 +300,13 @@ func renderProfile(t *testing.T, profile builderv0.KubernetesOutputProfile) stri
 		Identity:    identity,
 		Information: &services.Information{Service: resources.ToServiceWithCase(identity), Module: resources.ToModuleWithCase(identity)},
 	}
-	if services.IsRestrictedOutputProfile(profile) {
+	// core v0.15.0 replaced the IsRestrictedOutputProfile helper with a parsed
+	// OutputProfile whose Restricted() answers the same question. Parsed rather
+	// than compared against an enum value, so a profile this agent does not
+	// know is an error here instead of silently reading as unrestricted.
+	parsedProfile, profileErr := services.ParseOutputProfile(profile)
+	require.NoError(t, profileErr)
+	if parsedProfile.Restricted() {
 		base.SetDockerImage(&resources.DockerImage{Name: "example/service", Digest: "sha256:" + strings.Repeat("a", 64)})
 	} else {
 		base.SetDockerImage(resources.NewDockerImage("example/service:1.2.3"))

go.mod

@@ -3,7 +3,7 @@ module github.com/codefly-dev/service-python-fastapi
 go 1.27.0
 
 require (
-	github.com/codefly-dev/core v0.7.1
+	github.com/codefly-dev/core v0.15.1
 	github.com/codefly-dev/service-python v0.0.66
 	github.com/pelletier/go-toml/v2 v2.4.3
 	github.com/stretchr/testify v1.12.1

go.sum

@@ -43,8 +43,8 @@ github.com/clipperhouse/uax29/v2 v2.7.0 h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJ
 github.com/clipperhouse/uax29/v2 v2.7.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/cloudflare/circl v1.6.5 h1:O64F26HEqNhznd/hrC5KZXVKYuKM2rx4deZDTc4ihQA=
 github.com/cloudflare/circl v1.6.5/go.mod h1:h5LNyxAc5nTue9DS5jT+48en2PSDYt3zdGnz5OstK6c=
-github.com/codefly-dev/core v0.7.1 h1:fU4ZU9BvUTVLLOR4LU/zbU3htOGDu0kjNkBH4KoT6/I=
-github.com/codefly-dev/core v0.7.1/go.mod h1:2wt5DdL+OnJbIQT0w4cc7dS2sAGVK3QjnwW43r5cQQg=
+github.com/codefly-dev/core v0.15.1 h1:emWxsFL4yCqw+OIMIV73D4HBAby3pLh76hO0Xx+SGvw=
+github.com/codefly-dev/core v0.15.1/go.mod h1:rp4YZkCJEOufliWQAgK3sv8YlO7Xcva7+cN7hIlAR0I=
 github.com/codefly-dev/gortk v0.2.0 h1:7bOlS5valYz2zil+fZctQNcPCYBcPj86abcw9N8h1hQ=
 github.com/codefly-dev/gortk v0.2.0/go.mod h1:dDWUMFgAP063OCGhTEpV7FFUj9+zTcxxO/nV80VKEwg=
 github.com/codefly-dev/service-python v0.0.66 h1:Y74QvKAYMaOnZcsfRxuD9dpQo3//7Mjo12RYELyrp5o=

main_test.go

@@ -52,6 +52,12 @@ func testCreateToRun(t *testing.T, runtimeContext *basev0.RuntimeContext) {
 	service := resources.Service{Name: serviceName, Version: "0.0.0"}
 	err = service.SaveAtDir(ctx, path.Join(tmpDir, fmt.Sprintf("mod/%s", service.Name)))
 	service.WithModule("mod")
+	// core#721 judges every edge against the composition that carries both
+	// ends, so a fixture has to BE one. `layout: modules` rather than `flat`:
+	// postLoad replaces a flat workspace's module list with a single
+	// reference named after the workspace, which is not the module here.
+	require.NoError(t, os.WriteFile(path.Join(tmpDir, "workspace.codefly.yaml"),
+		[]byte("name: test\nlayout: modules\nmodules:\n    - name: mod\n      path: mod\n"), 0o644))
 
 	require.NoError(t, err)