feat(packaging): Add Debian package infrastructure

.github/workflows/build-deb.yml

@@ -0,0 +1,173 @@
+name: Build Debian Packages
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to build (e.g., 0.1.0)'
+        required: false
+        default: ''
+      upload_to_apt_repo:
+        description: 'Upload packages to apt-repo'
+        required: false
+        default: 'false'
+        type: boolean
+
+permissions:
+  contents: write
+
+jobs:
+  build-deb:
+    runs-on: ubuntu-22.04
+    strategy:
+      matrix:
+        arch: [amd64]
+        # arm64 can be added later with QEMU emulation
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            devscripts \
+            debhelper \
+            dh-python \
+            python3-all \
+            python3-setuptools \
+            python3-wheel \
+            python3-build \
+            cmake \
+            g++ \
+            pkg-config \
+            libsystemd-dev \
+            libssl-dev \
+            uuid-dev \
+            fakeroot \
+            lintian
+
+      - name: Update changelog version (if release)
+        if: github.event_name == 'release'
+        run: |
+          VERSION="${{ github.event.release.tag_name }}"
+          # Remove 'v' prefix if present
+          VERSION="${VERSION#v}"
+
+          # Update debian/changelog with release version
+          cat > debian/changelog << EOF
+          cortex (${VERSION}-1) stable; urgency=medium
+
+            * Release ${VERSION}
+            * See https://github.com/cortexlinux/cortex/releases/tag/${{ github.event.release.tag_name }}
+
+           -- Mike Morgan <mike@cortexlinux.com>  $(date -R)
+          EOF
+
+      - name: Update changelog version (if manual)
+        if: github.event_name == 'workflow_dispatch' && github.event.inputs.version != ''
+        run: |
+          VERSION="${{ github.event.inputs.version }}"
+
+          cat > debian/changelog << EOF
+          cortex (${VERSION}-1) unstable; urgency=medium
+
+            * Manual build ${VERSION}
+
+           -- Mike Morgan <mike@cortexlinux.com>  $(date -R)
+          EOF
+
+      - name: Build Debian packages
+        run: |
+          # Build source and binary packages
+          dpkg-buildpackage -us -uc -b
+
+          # Move packages to dist directory
+          mkdir -p dist
+          mv ../*.deb dist/
+          mv ../*.buildinfo dist/ || true
+          mv ../*.changes dist/ || true
+
+      - name: List built packages
+        run: |
+          ls -la dist/
+          for deb in dist/*.deb; do
+            echo "=== $deb ==="
+            dpkg-deb -I "$deb"
+            echo ""
+          done
+
+      - name: Run lintian checks
+        run: |
+          # Run lintian but don't fail on warnings
+          lintian dist/*.deb --no-tag-display-limit || true
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: debian-packages-${{ matrix.arch }}
+          path: dist/*.deb
+          retention-days: 30
+
+      - name: Upload to GitHub Release
+        if: github.event_name == 'release'
+        uses: softprops/action-gh-release@v1
+        with:
+          files: dist/*.deb
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  # Optional job to push to apt-repo
+  push-to-apt-repo:
+    needs: build-deb
+    runs-on: ubuntu-22.04
+    if: |
+      github.event_name == 'release' ||
+      (github.event_name == 'workflow_dispatch' && github.event.inputs.upload_to_apt_repo == 'true')
+
+    steps:
+      - name: Download built packages
+        uses: actions/download-artifact@v4
+        with:
+          name: debian-packages-amd64
+          path: packages/
+
+      - name: List downloaded packages
+        run: ls -la packages/
+
+      - name: Trigger apt-repo update
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.APT_REPO_TOKEN }}
+          repository: cortexlinux/apt-repo
+          event-type: new-packages
+          client-payload: |
+            {
+              "packages": "cortex-linux,cortexd",
+              "version": "${{ github.event.release.tag_name || github.event.inputs.version }}",
+              "source_repo": "${{ github.repository }}",
+              "run_id": "${{ github.run_id }}"
+            }
+
+      # Alternative: Direct push to apt-repo (requires PAT with repo access)
+      # - name: Clone apt-repo
+      #   uses: actions/checkout@v4
+      #   with:
+      #     repository: cortexlinux/apt-repo
+      #     token: ${{ secrets.APT_REPO_TOKEN }}
+      #     path: apt-repo
+      #
+      # - name: Copy packages to apt-repo
+      #   run: |
+      #     cp packages/*.deb apt-repo/packages/cortex/
+      #     cd apt-repo
+      #     git config user.name "GitHub Actions"
+      #     git config user.email "actions@github.com"
+      #     git add packages/
+      #     git commit -m "Add cortex packages from ${{ github.event.release.tag_name || 'manual build' }}"
+      #     git push

.gitignore

@@ -59,3 +59,12 @@ htmlcov/
 *.log
 logs/
 coverage.xml
+
+# Debian build artifacts
+debian/.debhelper/
+debian/*.substvars
+debian/cortex-linux/
+debian/cortexd/
+debian/debhelper-build-stamp
+debian/files
+debian/*.debhelper

daemon/CMakeLists.txt

@@ -1,8 +1,10 @@
 cmake_minimum_required(VERSION 3.20)
 project(cortexd VERSION 1.0.0 LANGUAGES CXX)
 
-# CMake policies
-cmake_policy(SET CMP0135 NEW)
+# CMake policies (CMP0135 was added in CMake 3.24)
+if(POLICY CMP0135)
+    cmake_policy(SET CMP0135 NEW)
+endif()
 
 # Require C++17
 set(CMAKE_CXX_STANDARD 17)
@@ -98,15 +100,15 @@ set(DAEMON_SOURCES
     # Core
     src/main.cpp
     src/core/daemon.cpp
-    
+
     # Config
     src/config/config.cpp
-    
+
     # IPC
     src/ipc/server.cpp
     src/ipc/protocol.cpp
     src/ipc/handlers.cpp
-    
+
     # Utils
     src/utils/logger.cpp
 )
@@ -169,14 +171,14 @@ message(STATUS "")
 # Tests (optional)
 if(BUILD_TESTS)
     enable_testing()
-    
+
     # Fetch Google Test
     FetchContent_Declare(googletest
         GIT_REPOSITORY https://github.com/google/googletest.git
         GIT_TAG v1.14.0
         GIT_SHALLOW TRUE
     )
     FetchContent_MakeAvailable(googletest)
-    
+
     add_subdirectory(tests)
 endif()

debian/changelog

@@ -0,0 +1,10 @@
+cortex (0.1.0-1) unstable; urgency=medium
+
+  * Initial release.
+  * AI-powered package manager with natural language support
+  * Multiple LLM provider support (Anthropic, OpenAI)
+  * Secure sandbox execution environment
+  * Rich terminal UI with interactive dashboard
+  * cortexd daemon with systemd integration
+
+ -- Mike Morgan <mike@cortexlinux.com>  Tue, 21 Jan 2026 12:00:00 +0000

debian/control

@@ -0,0 +1,65 @@
+Source: cortex
+Section: admin
+Priority: optional
+Maintainer: Mike Morgan <mike@cortexlinux.com>
+Build-Depends: debhelper-compat (= 13),
+               python3 (>= 3.10),
+               python3-pip,
+               python3-venv,
+               python3-setuptools,
+               python3-wheel,
+               python3-build,
+               cmake (>= 3.20),
+               g++,
+               pkg-config,
+               libsystemd-dev,
+               libssl-dev,
+               uuid-dev
+Standards-Version: 4.6.2
+Homepage: https://github.com/cortexlinux/cortex
+Vcs-Git: https://github.com/cortexlinux/cortex.git
+Vcs-Browser: https://github.com/cortexlinux/cortex
+Rules-Requires-Root: no
+
+Package: cortex-linux
+Architecture: all
+Depends: ${python3:Depends},
+         ${misc:Depends},
+         python3 (>= 3.10),
+         python3-requests,
+         python3-yaml,
+         python3-cryptography,
+         python3-dotenv,
+         python3-rich,
+         python3-typing-extensions
+Recommends: cortexd
+Suggests: python3-psutil, python3-nvidia-ml-py
+Description: AI-powered package manager for Debian/Ubuntu
+ Cortex Linux is an AI-powered package manager that understands natural
+ language commands. It provides an intelligent interface to APT, allowing
+ users to install, remove, and manage packages using conversational queries.
+ .
+ Features:
+  - Natural language package management
+  - Multiple LLM provider support (Anthropic, OpenAI)
+  - Secure sandbox execution
+  - Rich terminal UI
+  - Comprehensive audit logging
+
+Package: cortexd
+Architecture: any
+Depends: ${shlibs:Depends},
+         ${misc:Depends},
+         systemd
+Recommends: cortex-linux
+Description: Cortex daemon for background AI operations
+ The Cortex daemon (cortexd) provides background services for the Cortex
+ AI package manager. It handles IPC communication, manages LLM sessions,
+ and provides system-level integration via systemd.
+ .
+ Features:
+  - Unix socket IPC with JSON-RPC protocol
+  - systemd integration with watchdog support
+  - Hot-reload configuration
+  - Security-hardened service
+  - Sub-millisecond startup time

debian/copyright

@@ -0,0 +1,35 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: cortex
+Upstream-Contact: Mike Morgan <mike@cortexlinux.com>
+Source: https://github.com/cortexlinux/cortex
+
+Files: *
+Copyright: 2024-2026 Cortex Linux
+License: BUSL-1.1
+
+Files: debian/*
+Copyright: 2024-2026 Cortex Linux
+License: BUSL-1.1
+
+License: BUSL-1.1
+ Business Source License 1.1
+ .
+ Licensor: Cortex Linux
+ .
+ Licensed Work: Cortex
+ .
+ The Licensed Work is (c) 2024-2026 Cortex Linux.
+ .
+ Additional Use Grant: You may make use of the Licensed Work, provided that
+ you do not use the Licensed Work for a Package Management Service.
+ .
+ A "Package Management Service" is a commercial offering that allows third
+ parties to access the functionality of the Licensed Work by performing
+ package management operations.
+ .
+ Change Date: Four years from the date the Licensed Work is published.
+ .
+ Change License: Apache License, Version 2.0
+ .
+ For more information, see the LICENSE file in the source distribution
+ or visit https://github.com/cortexlinux/cortex

debian/cortex-linux.postinst

@@ -0,0 +1,35 @@
+#!/bin/sh
+set -e
+
+case "$1" in
+    configure)
+        # Create cortex configuration directory if it doesn't exist
+        if [ ! -d /etc/cortex ]; then
+            mkdir -p /etc/cortex
+            chmod 755 /etc/cortex
+        fi
+
+        # Create cortex state directory
+        if [ ! -d /var/lib/cortex ]; then
+            mkdir -p /var/lib/cortex
+            chmod 750 /var/lib/cortex
+        fi
+
+        # Create user config directory hint
+        echo "Cortex Linux installed successfully."
+        echo "Run 'cortex --help' to get started."
+        echo "Configure your LLM API key with 'cortex config set api_key YOUR_KEY'"
+        ;;
+
+    abort-upgrade|abort-remove|abort-deconfigure)
+        ;;
+
+    *)
+        echo "postinst called with unknown argument '$1'" >&2
+        exit 1
+        ;;
+esac
+
+#DEBHELPER#
+
+exit 0