feat: migrate CLI framework from urfave/cli to cobra + huh

- Replace urfave/cli/v2 with spf13/cobra v1.10.2 for CLI framework
- Replace AlecAivazis/survey/v2 with charmbracelet/huh v0.8.0 for interactive forms
- Auto-generated 'completion' command (bash, zsh, fish, powershell)
- Migrate .goreleaser.yml: brews → homebrew_casks, dockers+docker_manifests → dockers_v2
- Update Dockerfile.goreleaser with TARGETPLATFORM ARG for dockers_v2
- Update all 14 command files, tests, golden files, and testscripts
- Remove unused urfave/cli and survey dependencies via go mod tidy

BREAKING CHANGE: CLI help output format changed (cobra conventions)

Author: daniel-garcia

.goreleaser.yml

@@ -59,22 +59,25 @@ changelog:
       - Merge pull request
       - Merge branch
 
-brews:
+homebrew_casks:
   - name: apx
     repository:
       owner: infobloxopen
       name: homebrew-tap
       token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
     homepage: https://github.com/infobloxopen/apx
     description: "API Publishing eXperience CLI"
-    license: Apache-2.0
-    install: |
-      bin.install "apx"
-      (bash_completion/"apx").write `#{bin}/apx completion bash`
-      (fish_completion/"apx.fish").write `#{bin}/apx completion fish`
-      (zsh_completion/"_apx").write `#{bin}/apx completion zsh`
-    test: |
-      system "#{bin}/apx", "--version"
+    hooks:
+      post:
+        install: |
+          if OS.mac?
+            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/apx"]
+          end
+    caveats: |
+      The binary is not signed by Apple. On first run macOS may show a
+      security warning. The post-install hook attempts to clear the
+      quarantine flag automatically. If you still see the warning, run:
+        xattr -dr com.apple.quarantine $(brew --caskroom)/apx
 
 scoops:
   - name: apx
@@ -104,44 +107,24 @@ nfpms:
         dst: /etc/apx/apx.example.yaml
         type: config|noreplace
 
-dockers:
-  - image_templates:
-      - "ghcr.io/infobloxopen/apx:{{ .Version }}-amd64"
-      - "ghcr.io/infobloxopen/apx:latest-amd64"
+dockers_v2:
+  - images:
+      - "ghcr.io/infobloxopen/apx"
+    tags:
+      - "{{ .Version }}"
+      - "{{ if not .IsNightly }}latest{{ end }}"
+    platforms:
+      - linux/amd64
+      - linux/arm64
     dockerfile: Dockerfile.goreleaser
-    use: buildx
     extra_files:
       - apx.example.yaml
-    build_flag_templates:
-      - "--platform=linux/amd64"
-      - "--label=org.opencontainers.image.created={{.Date}}"
-      - "--label=org.opencontainers.image.title={{.ProjectName}}"
-      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
-      - "--label=org.opencontainers.image.version={{.Version}}"
-  - image_templates:
-      - "ghcr.io/infobloxopen/apx:{{ .Version }}-arm64"
-      - "ghcr.io/infobloxopen/apx:latest-arm64"
-    dockerfile: Dockerfile.goreleaser
-    use: buildx
-    extra_files:
-      - apx.example.yaml
-    build_flag_templates:
-      - "--platform=linux/arm64"
-      - "--label=org.opencontainers.image.created={{.Date}}"
-      - "--label=org.opencontainers.image.title={{.ProjectName}}"
-      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
-      - "--label=org.opencontainers.image.version={{.Version}}"
-    goarch: arm64
-
-docker_manifests:
-  - name_template: "ghcr.io/infobloxopen/apx:{{ .Version }}"
-    image_templates:
-      - "ghcr.io/infobloxopen/apx:{{ .Version }}-amd64"
-      - "ghcr.io/infobloxopen/apx:{{ .Version }}-arm64"
-  - name_template: "ghcr.io/infobloxopen/apx:latest"
-    image_templates:
-      - "ghcr.io/infobloxopen/apx:latest-amd64"
-      - "ghcr.io/infobloxopen/apx:latest-arm64"
+    labels:
+      "org.opencontainers.image.created": "{{.Date}}"
+      "org.opencontainers.image.title": "{{.ProjectName}}"
+      "org.opencontainers.image.revision": "{{.FullCommit}}"
+      "org.opencontainers.image.version": "{{.Version}}"
+      "org.opencontainers.image.source": "{{.GitURL}}"
 
 release:
   github:

Dockerfile.goreleaser

@@ -1,5 +1,8 @@
 FROM alpine:latest
 
+# dockers_v2 passes TARGETPLATFORM as a build arg (e.g. linux/amd64)
+ARG TARGETPLATFORM
+
 # Install necessary tools
 RUN apk --no-cache add \
     ca-certificates \
@@ -19,8 +22,8 @@ RUN apk add --no-cache go && \
     go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest && \
     apk del go
 
-# Copy the pre-built binary from GoReleaser
-COPY apx /usr/local/bin/apx
+# Copy the pre-built binary from GoReleaser (dockers_v2 places binaries under $TARGETPLATFORM/)
+COPY ${TARGETPLATFORM}/apx /usr/local/bin/apx
 
 # Copy configuration examples
 COPY apx.example.yaml /etc/apx/apx.example.yaml

cmd/apx/commands/add.go

@@ -1,55 +1,44 @@
 package commands
 
 import (
-	"fmt"
 	"strings"
 
 	"github.com/infobloxopen/apx/internal/config"
 	"github.com/infobloxopen/apx/internal/ui"
-	"github.com/urfave/cli/v2"
+	"github.com/spf13/cobra"
 )
 
-// AddCommand returns the add command for adding dependencies
-func AddCommand() *cli.Command {
-	return &cli.Command{
-		Name:  "add",
-		Usage: "Add a dependency to apx.yaml and apx.lock",
-		Description: `Add a schema module dependency to the project.
+func newAddCmd() *cobra.Command {
+	return &cobra.Command{
+		Use:   "add <module-path>[@version]",
+		Short: "Add a dependency to apx.yaml and apx.lock",
+		Long: `Add a schema module dependency to the project.
 
 The dependency is added to apx.yaml and the version is locked in apx.lock.
 
 Examples:
   apx add proto/payments/ledger/v1@v1.2.3
   apx add proto/payments/wallet/v1         # Uses latest version
   apx add openapi/customer/accounts/v2@v2.0.0`,
-		ArgsUsage: "<module-path>[@version]",
-		Action:    addAction,
+		Args: cobra.ExactArgs(1),
+		RunE: addAction,
 	}
 }
 
-func addAction(c *cli.Context) error {
-	if c.NArg() == 0 {
-		ui.Error("Module path required")
-		return fmt.Errorf("usage: apx add <module-path>[@version]")
-	}
-
-	arg := c.Args().First()
+func addAction(cmd *cobra.Command, args []string) error {
+	arg := args[0]
 
-	// Parse module path and version
 	var modulePath, version string
 	if strings.Contains(arg, "@") {
 		parts := strings.SplitN(arg, "@", 2)
 		modulePath = parts[0]
 		version = parts[1]
 	} else {
 		modulePath = arg
-		version = "" // Will fetch latest
 	}
 
-	// Create dependency manager
 	mgr := config.NewDependencyManager("apx.yaml", "apx.lock")
 
-	// Add dependency
 	if err := mgr.Add(modulePath, version); err != nil {
 		ui.Error("Failed to add dependency: %v", err)
 		return err

cmd/apx/commands/breaking.go

@@ -7,83 +7,60 @@ import (
 
 	"github.com/infobloxopen/apx/internal/ui"
 	"github.com/infobloxopen/apx/internal/validator"
-	"github.com/urfave/cli/v2"
+	"github.com/spf13/cobra"
 )
 
-// BreakingCommand returns the breaking changes command
-func BreakingCommand() *cli.Command {
-	return &cli.Command{
-		Name:      "breaking",
-		Usage:     "Check for breaking changes in schema files",
-		ArgsUsage: "[path]",
-		Flags: []cli.Flag{
-			&cli.StringFlag{
-				Name:     "against",
-				Usage:    "git reference or path to compare against",
-				Required: true,
-			},
-			&cli.StringFlag{
-				Name:    "format",
-				Aliases: []string{"f"},
-				Usage:   "Schema format (proto, openapi, avro, jsonschema, parquet)",
-			},
-		},
-		Action: breakingAction,
+func newBreakingCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "breaking [path]",
+		Short: "Check for breaking changes in schema files",
+		Args:  cobra.MaximumNArgs(1),
+		RunE:  breakingAction,
 	}
+	cmd.Flags().String("against", "", "git reference or path to compare against")
+	_ = cmd.MarkFlagRequired("against")
+	cmd.Flags().StringP("format", "f", "", "Schema format (proto, openapi, avro, jsonschema, parquet)")
+	return cmd
 }
 
-func breakingAction(c *cli.Context) error {
-	// Get path from args or default to current directory
+func breakingAction(cmd *cobra.Command, args []string) error {
 	path := "."
-	if c.Args().Len() > 0 {
-		path = c.Args().First()
+	if len(args) > 0 {
+		path = args[0]
 	}
 
-	// Get the baseline to compare against
-	against := c.String("against")
-	if against == "" {
-		return fmt.Errorf("--against flag is required")
-	}
+	against, _ := cmd.Flags().GetString("against")
 
-	// Resolve absolute paths
 	absPath, err := filepath.Abs(path)
 	if err != nil {
 		return fmt.Errorf("failed to resolve path: %w", err)
 	}
 
-	// Check if path exists
 	if _, err := os.Stat(absPath); os.IsNotExist(err) {
 		return fmt.Errorf("path does not exist: %s", absPath)
 	}
 
-	// Create toolchain resolver with default settings
 	resolver := validator.NewToolchainResolver()
-
-	// Create validator
 	v := validator.NewValidator(resolver)
 
-	// Detect or use specified format
 	format := validator.FormatUnknown
-	if formatStr := c.String("format"); formatStr != "" {
+	if formatStr, _ := cmd.Flags().GetString("format"); formatStr != "" {
 		format = validator.SchemaFormat(formatStr)
 	} else {
 		format = validator.DetectFormat(absPath)
 	}
 
-	// Validate format
 	if format == validator.FormatUnknown {
 		return fmt.Errorf("could not detect schema format for: %s\nPlease specify format with --format flag", absPath)
 	}
 
-	// Run breaking change detection
 	ui.Info("Checking %s for breaking changes against: %s", format, against)
 
-	err = v.Breaking(absPath, against, format)
-	if err != nil {
+	if err := v.Breaking(absPath, against, format); err != nil {
 		ui.Error("Breaking changes detected: %v", err)
 		return err
 	}
 
-	ui.Success("✓ No breaking changes detected")
+	ui.Success("\u2713 No breaking changes detected")
 	return nil
 }

cmd/apx/commands/catalog.go

@@ -3,26 +3,28 @@ package commands
 import (
 	"github.com/infobloxopen/apx/internal/config"
 	"github.com/infobloxopen/apx/internal/ui"
-	"github.com/urfave/cli/v2"
+	"github.com/spf13/cobra"
 )
 
-// CatalogCommand returns the catalog command with subcommands
-func CatalogCommand() *cli.Command {
-	return &cli.Command{
-		Name:  "catalog",
-		Usage: "Catalog operations",
-		Subcommands: []*cli.Command{
-			{
-				Name:   "build",
-				Usage:  "Build module catalog",
-				Action: catalogBuildAction,
-			},
-		},
+func newCatalogCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "catalog",
+		Short: "Catalog operations",
 	}
+	cmd.AddCommand(newCatalogBuildCmd())
+	return cmd
 }
 
-func catalogBuildAction(c *cli.Context) error {
-	cfg, err := loadConfig(c)
+func newCatalogBuildCmd() *cobra.Command {
+	return &cobra.Command{
+		Use:   "build",
+		Short: "Build module catalog",
+		RunE:  catalogBuildAction,
+	}
+}
+
+func catalogBuildAction(cmd *cobra.Command, args []string) error {
+	cfg, err := loadConfig(cmd)
 	if err != nil {
 		ui.Error("Failed to load config: %v", err)
 		return err
@@ -32,7 +34,6 @@ func catalogBuildAction(c *cli.Context) error {
 }
 
 func buildCatalog(cfg *config.Config) error {
-	// TODO: Implement catalog building in internal/catalog package
 	ui.Info("Building module catalog...")
 	ui.Success("Module catalog built successfully")
 	return nil

cmd/apx/commands/commands.go

@@ -1,7 +1,5 @@
 package commands
 
-// This file provides command constructors for the APX CLI.
-// Each command's implementation is in its own file (init.go, lint.go, etc.)
-// This separation keeps the codebase organized and maintainable.
-
-// All command constructors - implementations are in separate files
+// This file previously held urfave/cli command constructors.
+// With the migration to cobra, all commands are registered in root.go
+// via NewRootCmd() → cmd.AddCommand(...).

cmd/apx/commands/common.go

@@ -1,12 +1,14 @@
 package commands
 
 import (
-	"github.com/infobloxopen/apx/internal/config"
-	"github.com/urfave/cli/v2"
+"github.com/infobloxopen/apx/internal/config"
+"github.com/spf13/cobra"
 )
 
-// loadConfig loads the configuration file
-func loadConfig(c *cli.Context) (*config.Config, error) {
-	configPath := c.String("config")
+func loadConfig(cmd *cobra.Command) (*config.Config, error) {
+	configPath, _ := cmd.Root().PersistentFlags().GetString("config")
+	if configPath == "" {
+		configPath = "apx.yaml"
+	}
 	return config.Load(configPath)
 }