v0.2.0

What's New

Reliability

• CI pipeline — 3 parallel jobs (test, vet, build) on push to main and PRs
• Backup-before-apply — automatic state snapshots in .beecon/backups/, auto-pruned to last 10
• beecon restore — list and restore state from backups (--list flag)
• 369 test functions (up from 245, +50%) across 16 packages

Security & Correctness (QA Round 4)

• Fixed: Approve stuck state — failure during approval execution no longer orphans the approval as PENDING with a FAILED run
• Fixed: Engine.Force race condition — concurrent /api/apply requests can no longer interfere with each other's budget enforcement (replaced shared field with ApplyOption parameter)
• Fixed: Secret leakage — Wiring.InferredEnvVars now scrubbed in /api/state, API key masked in beecon serve output, ScrubMap recurses into nested maps
• Fixed: CLI exit code — beecon apply returns non-zero exit on partial failure
• Fixed: Wiring targets — needs declarations on ALB, VPC, EKS, and 13 other resource types no longer blocked
• Fixed: ID collisions — NewID includes PID for cross-process uniqueness
• Fixed: Approve cost tracking — resources provisioned via approval workflow now have correct EstimatedCost

DX

• beecon drift --plan — shows reconciliation actions for drifted resources
• Provider test coverage — 100 new helper test functions covering SG parsing, ECS task defs, alarm parsing, IAM trust policies, per-target validation, and more
• Watch minimum interval — enforces 10s floor to prevent API hammering
• State migration errors — migration functions can now return errors instead of silently failing

Install

go install github.com/terracotta-ai/beecon/cmd/beecon@v0.2.0

Stats

• 369 test functions across 16 packages
• 20 CLI commands
• 15 API endpoints
• 25 sensitive key patterns scrubbed
• 4 QA audit rounds completed