Update build workflow for new DuckDB release (v1.5.3) (#22)

Author: habedi

.editorconfig

@@ -20,7 +20,7 @@ trim_trailing_whitespace = false
 [*.sh]
 indent_size = 2
 
-[*.{yaml,yml}]
+[*.{yaml,yml,json}]
 indent_size = 2
 
 [*.{c,cpp,h,hpp}]

.github/workflows/dist_pipeline.yml

@@ -34,34 +34,34 @@ jobs:
       exclude_archs: "windows_amd64_mingw;osx_amd64;wasm_mvp;wasm_eh;wasm_threads"
 
   duckdb-stable-build:
-    uses: duckdb/extension-ci-tools/.github/workflows/_extension_distribution.yml@v1.5.2
+    uses: duckdb/extension-ci-tools/.github/workflows/_extension_distribution.yml@v1.5.3
     with:
-      duckdb_version: v1.5.2
-      ci_tools_version: v1.5.2
+      duckdb_version: v1.5.3
+      ci_tools_version: v1.5.3
       extension_name: infera
       enable_rust: true
       exclude_archs: "windows_amd64_mingw;osx_amd64;wasm_mvp;wasm_eh;wasm_threads"
 
   create-release-draft:
-    name: Create Draft Release with Built Binaries
+    name: Create draft release with built binaries
     needs:
       - duckdb-stable-build
     if: startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:
-      - name: Download All Build Artifacts
+      - name: Download all build artifacts
         uses: actions/download-artifact@v4
         with:
           path: dist
           merge-multiple: true
-      - name: List Artifacts
+      - name: List artifacts
         run: |
           echo "Downloaded artifacts to: $(pwd)/dist"
           ls -la dist || true
           find dist -type f -maxdepth 2 -print || true
-      - name: Create Draft Release and Upload Assets
+      - name: Create draft release and upload assets
         uses: softprops/action-gh-release@v2
         with:
           draft: true

.github/workflows/lints.yml

@@ -17,18 +17,18 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout Code
+      - name: Checkout code
         uses: actions/checkout@v4
         with:
           submodules: recursive
 
       - name: Set up Rust
         uses: actions-rust-lang/setup-rust-toolchain@v1
 
-      - name: Install Dependencies
+      - name: Install dependencies
         run: |
           sudo apt-get update && sudo apt-get upgrade -y
           sudo apt-get install -y gcc curl pkg-config libssl-dev make
 
-      - name: Run Linters
+      - name: Run linters
         run: make rust-lint

.github/workflows/tests.yml

@@ -11,18 +11,19 @@ on:
   push:
     branches:
       - main
+      - develop
 
 permissions:
   contents: read
 
 jobs:
   rust-tests:
-    name: Rust Tests and Code Coverage
+    name: Rust tests and code coverage
     runs-on: ubuntu-latest
     env:
       CARGO_TERM_COLOR: always
     steps:
-      - name: Checkout Code
+      - name: Checkout code
         uses: actions/checkout@v4
         with:
           submodules: recursive
@@ -41,44 +42,44 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-cargo-
 
-      - name: Install System Dependencies
+      - name: Install system dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y gcc curl pkg-config libssl-dev make
           cargo install cargo-tarpaulin --locked || true
 
-      - name: Run Rust Tests
+      - name: Run Rust tests
         run: |
           make rust-test
 
-      - name: Generate Coverage (using Tarpaulin)
+      - name: Generate coverage (using Tarpaulin)
         run: |
           make rust-coverage
 
-      - name: Upload Coverage Reports to Codecov
+      - name: Upload coverage reports to Codecov
         uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
         continue-on-error: false
 
   sqllogictest:
-    name: Sqllogicest Tests
+    name: Sqllogicest tests
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout Code
+      - name: Checkout code
         uses: actions/checkout@v4
         with:
           submodules: recursive
 
       - name: Set up Rust
         uses: actions-rust-lang/setup-rust-toolchain@v1
 
-      - name: Install System Dependencies
+      - name: Install system dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y gcc curl pkg-config libssl-dev make
 
-      - name: Build Extension & Run SQL Tests
+      - name: Build extension and run SQL tests
         run: |
           make release
           make test

.gitignore

@@ -97,3 +97,5 @@ tests/temp_models/
 *.cast
 .claude/
 .codex
+.antigravitycli/
+.agents/

CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

CMakeLists.txt

@@ -1,7 +1,7 @@
 cmake_minimum_required(VERSION 3.5)
 
 set(CORROSION_VERBOSE_OUTPUT ON)
-set(CMAKE_CXX_STANDARD 11)
+set(CMAKE_CXX_STANDARD 17)
 set(CMAKE_CXX_STANDARD_REQUIRED 1)
 
 option(INFERA_ENABLE_ONNX "Enable ONNX (tract) inference backend in Rust crate" ON)

CONTRIBUTING.md

@@ -29,6 +29,9 @@ would like to work on or if it has already been resolved.
 
 ### Development Workflow
 
+> [!IMPORTANT]
+> If you're using an AI-assisted coding tool like Claude Code or Codex, make sure the AI follows the instructions in the [AGENTS.md](AGENTS.md) file.
+
 #### Code Style
 
 - Use the `make rust-format` command to format the code.

README.md

@@ -96,7 +96,7 @@ make release
 #### Trying Infera
 
 ```sql
--- 0. Install and load Infera 
+-- 0. Install and load Infera
 -- Skip this step if you built from source and ran `./build/release/duckdb`
 install infera from community;
 load infera;

extension_config.cmake

@@ -69,7 +69,14 @@ if (EXISTS ${INFERA_RUST_LIB})
     # Create an imported target for the Rust library
     add_library(infera_rust STATIC IMPORTED GLOBAL)
     if(UNIX)
-        set(_INFERA_RUST_LINK_LIBS "pthread;dl;m")
+        if(APPLE)
+            # reqwest 0.13 uses rustls-platform-verifier on Apple platforms, which
+            # calls into the macOS Security and CoreFoundation frameworks. Link them
+            # explicitly so the static Rust archive resolves at extension link time.
+            set(_INFERA_RUST_LINK_LIBS "pthread;dl;m;-framework Security;-framework CoreFoundation;-framework SystemConfiguration")
+        else()
+            set(_INFERA_RUST_LINK_LIBS "pthread;dl;m")
+        endif()
     else()
         set(_INFERA_RUST_LINK_LIBS "")
     endif()
@@ -80,7 +87,11 @@ if (EXISTS ${INFERA_RUST_LIB})
 
     # Add the Rust library to global link libraries so it gets linked to everything
     if(UNIX)
-        link_libraries(${INFERA_RUST_LIB} pthread dl m)
+        if(APPLE)
+            link_libraries(${INFERA_RUST_LIB} pthread dl m "-framework Security" "-framework CoreFoundation" "-framework SystemConfiguration")
+        else()
+            link_libraries(${INFERA_RUST_LIB} pthread dl m)
+        endif()
     else()
         link_libraries(${INFERA_RUST_LIB})
         if(WIN32)
@@ -107,6 +118,11 @@ if (EXISTS ${INFERA_RUST_LIB})
         add_link_options($<$<STREQUAL:$<TARGET_PROPERTY:TYPE>,EXECUTABLE>:-lpthread>)
         add_link_options($<$<STREQUAL:$<TARGET_PROPERTY:TYPE>,EXECUTABLE>:-ldl>)
         add_link_options($<$<STREQUAL:$<TARGET_PROPERTY:TYPE>,EXECUTABLE>:-lm>)
+        # Apple framework flags are NOT added via add_link_options: CMake splits
+        # "-framework Security" at the space inside generator expressions, producing
+        # the literal token '$<0:-framework' instead of an empty string. The frameworks
+        # are already propagated to all targets by link_libraries() and
+        # INTERFACE_LINK_LIBRARIES above, so no add_link_options entry is needed.
     else()
         add_link_options($<$<STREQUAL:$<TARGET_PROPERTY:TYPE>,EXECUTABLE>:${INFERA_RUST_LIB}>)
     endif()