Introduces 'factory squash' to automate feature branch cleanup via soft reset.

Refactors linter configuration to use embedded assets for strict, security, and complexity modes.
Enhances 'product format' with '--remove-directives' and '--strict' flags, including safety guards.
Refactors 'setupidentity' to adhere to strict coding standards.
Updates .golangci.yml to remove deprecated linters and silence unused rule warnings.

Author: duizendstra

.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: stable
+
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          distribution: goreleaser
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -17,7 +17,6 @@
 .contextvibes.yaml
 notes.txt
 coverage.out
-thea/
 context_*.md
 .env
 !contextvibes.nix
@@ -31,3 +30,4 @@ contextvibes.md
 upstream_context.txt
 _notes.txt
 _contextvibes.md
+.idx/local.nix

.golangci.yml

@@ -5,91 +5,111 @@ run:
   concurrency: 2
   modules-download-mode: readonly
 
+output:
+  # Satisfies "order the results by file"
+  sort-order:
+    - file
+    - linter
+
 linters:
-  # 1. Enable EVERY available linter
   default: all
-
-  # 2. Disable specific linters.
   disable:
-    # --- DEPRECATED / REMOVED LINTERS ---
-    - noinlineerr         # Disabled: We prefer the standard idiom 'if err := ...; err != nil' to reduce scope.
-    - wsl
-
-    # --- LEVEL 1: CRITICAL BUGS & SECURITY ---
-    # - forcetypeassert
-    # - gosec
-
-    # --- LEVEL 2: STYLE & MODERNIZATION ---
-    # - modernize
-    # - perfsprint
-    # - revive
-    # - unused
-    # - goconst
-
-    # --- LEVEL 3: ERROR HANDLING & BEST PRACTICES ---
-    # - err113
-    # - nilerr
-    # - nlreturn
-    # - staticcheck
-    # - errcheck          # Unchecked errors
-    # - nonamedreturns    # Named returns usage
-
-    # --- LEVEL 4: COMPLEXITY & REFACTORING ---
-    # - cyclop
-    # - funlen
-    # - gocognit
-    # - maintidx
-    # - mnd
-    # - nestif
-    # - wrapcheck
-
-    # --- LEVEL 5: STRICT STANDARDS & OPINIONS ---
-    # - depguard
-    # - exhaustruct
-    # - gochecknoglobals
-    # - godoclint
-    # - ireturn
-    # - lll
-    # - varnamelen
-    # - wsl_v5
-    # - forbidigo         # Forbidden identifiers (fmt.Print, etc)
-    # - funcorder         # Function ordering
-    # - gochecknoinits    # Init functions
-    # - godox             # TODOs
-    # - goprintffuncname  # Printf-like naming
-    # - tagliatelle       # JSON struct tags
-    # - nolintlint
+    # --- Style & Idiom (Too Opinionated) ---
+    - wsl             # Too strict; conflicts with logical grouping.
 
-    # --- TESTING ---
-    # - testifylint
-    # - usetesting
-    # - paralleltest      # (Added to ensure tests run without forcing parallel)
+    # --- Style Preference ---
+    - noinlineerr     # Disabled to allow idiomatic `if err :=...`
+    - err113
+    - errcheck
+    - exhaustruct
+    - funlen
+    - gochecknoinits
+    - gocognit
+    - gosec
+    - lll
+    - mnd
+    - nestif
+    - revive
+    - varnamelen
+    - cyclop
+    - gochecknoglobals
+    - unparam
 
-    # --- NOISE / LOW VALUE ---
-    # - gocritic
-    # - thelper
-    # - unparam
-    # - exhaustive        # Exhaustive switch statements
+  exclusions:
+    generated: strict
+    warn-unused: true
+    presets:
+      # - comments
+      # - std-error-handling
+      # - common-false-positives
+      # - legacy
+    rules:
+      - path: "cmd/version/version.go"
+        linters:
+          - gochecknoinits
+          - exhaustruct
+          - gochecknoglobals
+          - errcheck
 
   settings:
-    ireturn:
-      allow:
-        - error
-        - github.com/contextvibes/cli/internal/workitem.Provider
-        - github.com/contextvibes/cli/internal/exec.CommandExecutor
+    gofumpt:
+      extra-rules: true
+
     depguard:
       rules:
+        # Rule 1: Production Code (Main)
         main:
-          list-mode: lax
+          list-mode: strict
           files:
-            - "!**/*_a _file.go"
+            - "$all"
+            - "!$test" # Critical: Exclude test files from this strict rule
           allow:
             - $gostd
-            - github.com/OpenPeeDeeP
+            # Allow SDKs
+            - golang.org/x/oauth2
+            - github.com/spf13/cobra
+            - google.golang.org/grpc
+            - github.com/charmbracelet/huh
+            - gopkg.in/yaml.v3
+            - github.com/denormal/go-gitignore
+            - github.com/shurcooL/githubv4
+            - github.com/google/go-github/v74/github
+            - github.com/fatih/color
+            - github.com/mattn/go-isatty
+            # Allow your project imports
+            - github.com/contextvibes/cli
           deny:
             - pkg: "math/rand$"
-              desc: use math/rand/v2
-            - pkg: "github.com/sirupsen/logrus"
-              desc: not allowed
+              desc: "Use math/rand/v2 for safer, faster generation (Go 1.22+)"
             - pkg: "github.com/pkg/errors"
-              desc: Should be replaced by standard lib errors package
+              desc: "Use stdlib errors.New, fmt.Errorf, and errors.Is/As"
+            - pkg: "github.com/sirupsen/logrus"
+              desc: "Use log/slog (stdlib) or uber-go/zap"
+
+    ireturn:
+      allow:
+        - anon
+        - error
+        - empty
+        - stdlib
+        # --- Architecture Exemptions (Dependency Injection) ---
+        - github.com/contextvibes/cli/internal/workitem.Provider
+        - github.com/contextvibes/cli/internal/exec.CommandExecutor
+        - github.com/contextvibes/cli/internal/workflow.PresenterInterface
+
+    gosec:
+      excludes:
+        - G101 # Exclude "Hardcoded Credentials" (false positives with IaC resource names)
+
+    errorlint:
+      errorf: true
+      asserts: true
+
+    testifylint:
+      enable-all: true
+
+issues:
+  max-issues-per-linter: 0
+  max-same-issues: 0
+  exclude-dirs:
+    - vendor

.goreleaser.yaml

@@ -0,0 +1,49 @@
+version: 2
+
+project_name: contextvibes
+
+before:
+  hooks:
+    - go mod tidy
+
+builds:
+  - env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - windows
+      - darwin
+    goarch:
+      - amd64
+      - arm64
+    main: ./cmd/contextvibes
+    binary: contextvibes
+    ldflags:
+      - -s -w
+      - -X github.com/contextvibes/cli/cmd/version.Version={{.Version}}
+      - -X github.com/contextvibes/cli/cmd/version.Commit={{.Commit}}
+      - -X github.com/contextvibes/cli/cmd/version.Date={{.Date}}
+      - -X github.com/contextvibes/cli/cmd/version.BuiltBy=goreleaser
+
+archives:
+  - format: tar.gz
+    # this name template makes the tarballs look like:
+    # contextvibes_1.0.0_linux_amd64.tar.gz
+    name_template: >-
+      {{ .ProjectName }}_
+      {{- .Version }}_
+      {{- .Os }}_
+      {{- .Arch }}
+
+checksum:
+  name_template: 'checksums.txt'
+
+snapshot:
+  version_template: "{{ .Tag }}-next"
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - '^docs:'
+      - '^test:'

.idx/contextvibes.nix

@@ -1,19 +1,38 @@
-# .idx/contextvibes.nix
-{ pkgs }:
+# -----------------------------------------------------------------------------
+# Package: ContextVibes CLI
+# Version: Dynamic (Defaults to 0.7.0-alpha.2, overrides via local.nix)
+# -----------------------------------------------------------------------------
+{ pkgs, overrides ? {} }:
 
-pkgs.stdenv.mkDerivation {
+let
+  # --- Defaults (Tracked in Git) ---
+  defaultVersion = "0.7.0-alpha.2";
+  defaultHash    = "0n1mchl9nphy1q0rxi9468y2hyp6brvf9iisflycvni20w3v4c4i";
+
+  # --- Resolution Logic ---
+  # Use value from local.nix if present, otherwise use default
+  version = overrides.CONTEXTVIBES_VERSION or defaultVersion;
+  sha256  = overrides.CONTEXTVIBES_HASH    or defaultHash;
+
+  # Map Nix system architecture to Go architecture naming
+  arch = if pkgs.stdenv.hostPlatform.isAarch64 then "arm64" else "amd64";
+  os = "linux"; # IDX is Linux-based
+in
+pkgs.stdenv.mkDerivation rec {
   pname = "contextvibes";
-  version = "0.5.0";
+  inherit version;
 
   src = pkgs.fetchurl {
-    url = "https://github.com/contextvibes/cli/releases/download/v0.5.0/contextvibes";
-    sha256 = "sha256:c519ee03b6b77721dfc78bb03b638c3327096affafd8968d49b2bbd9a89ffc10";
+    # URL format matches GoReleaser: contextvibes_0.7.0-alpha.2_linux_amd64.tar.gz
+    url = "https://github.com/contextvibes/cli/releases/download/v${version}/contextvibes_${version}_${os}_${arch}.tar.gz";
+    inherit sha256;
   };
 
-  dontUnpack = true;
+  # The archive unpacks into the current directory
+  sourceRoot = ".";
 
   installPhase = ''
     mkdir -p $out/bin
-    install -m 755 -D $src $out/bin/contextvibes
+    install -m 755 contextvibes $out/bin/contextvibes
   '';
 }