🎉 feat(apps): initial code with several guards

Author: anadinema

.github/workflows/ci-main-release.yml

@@ -0,0 +1,73 @@
+name: ci-main-release
+
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - "v*"
+    branches:
+      - main
+
+permissions:
+  contents: write
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  build:
+    name: build
+    runs-on: macos-latest
+    steps:
+      - name: checkout-repository
+        uses: actions/checkout@v6
+        with:
+          submodules: recursive
+          fetch-depth: 0
+
+      - name: setup-just
+        uses: extractions/setup-just@v3
+        with:
+          just-version: "1.46.0"
+
+      - name: setup-go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+
+      - name: build-and-test
+        run: just build
+
+  release:
+    runs-on: macos-latest
+    if: ${{ github.ref_type == 'tag' }}
+    needs: build
+    concurrency:
+      group: release-${{ github.repository_id }}
+      cancel-in-progress: true
+    steps:
+      - name: checkout-repository
+        uses: actions/checkout@v6
+        with:
+          submodules: recursive
+          fetch-depth: 0
+
+      - name: setup-just
+        uses: extractions/setup-just@v3
+        with:
+          just-version: "1.46.0"
+
+      - name: setup-go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+
+      - name: run-goreleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAP_GITHUB_TOKEN: ${{ secrets.TAP_GITHUB_TOKEN }}

.gitignore

@@ -18,6 +18,10 @@ __pycache__/
 # Documentation build output
 site/
 
+# temporary files
+temp/
+bin/
+
 # IDE
 .idea/
 .vscode/

.golangci.yml

@@ -0,0 +1,7 @@
+run:
+  timeout: 2m
+
+linters:
+  default: standard
+
+version: '2'

.goreleaser.yaml

@@ -0,0 +1,67 @@
+version: 2
+
+project_name: yak
+
+before:
+  hooks:
+    - go mod tidy
+    - go test ./...
+
+builds:
+  - id: yak
+    binary: yak
+    main: ./cmd/yak
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - darwin
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w
+      - -X github.com/anadinema/yak/internal/version.Version={{.Version}}
+      - -X github.com/anadinema/yak/internal/version.Commit={{.Commit}}
+      - -X github.com/anadinema/yak/internal/version.Date={{.Date}}
+
+archives:
+  - id: default
+    formats: [tar.gz]
+    format_overrides:
+      - goos: windows
+        formats: [zip]
+    name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}"
+
+checksum:
+  name_template: "checksums.txt"
+
+release:
+  github:
+    owner: anadinema
+    name: yak
+
+homebrew_casks:
+  - name: yak
+    ids:
+      - yak
+    repository:
+      owner: anadinema
+      name: homebrew-tap
+      token: "{{ .Env.TAP_GITHUB_TOKEN }}"
+    homepage: "https://yak.anadinema.dev"
+    description: "Yet Another AWS Kit — AWS SSO and credential management"
+    license: MIT
+    binaries: ["yak"]
+    generate_completions_from_executable:
+      executable: "bin/yak"
+      args:
+        - completion
+      shell_parameter_format: cobra
+      shells:
+        - bash
+        - zsh
+        - fish
+    url:
+      verified: github.com/anadinema/yak

Justfile

@@ -0,0 +1,31 @@
+BINARY := "yak"
+CMD_PATH := "./cmd/yak"
+INSTALL := env_var("HOME") + "/.local/bin"
+
+default:
+    @just --list
+
+build:
+    go build -o bin/{{BINARY}} {{CMD_PATH}}
+
+install: build
+    mkdir -p {{INSTALL}}
+    cp bin/{{BINARY}} {{INSTALL}}/{{BINARY}}
+
+clean:
+    rm -rf bin/
+
+test:
+    go test ./...
+
+lint:
+    golangci-lint run ./...
+
+tidy:
+    go mod tidy
+
+fmt:
+    golangci-lint fmt ./...
+
+fmt-check:
+    golangci-lint fmt --diff ./...

cmd/yak/main.go

@@ -0,0 +1,7 @@
+package main
+
+import "github.com/anadinema/yak/internal/cmd"
+
+func main() {
+	cmd.Execute()
+}

docs/commands/index.md

@@ -1,6 +1,6 @@
 # Commands
 
-yak provides a focused set of commands for AWS account and credential management. For anything yak doesn't handle, enable [passthrough](../guides/shell-integration.md#passthrough) to forward commands to the AWS CLI transparently.
+yak provides a focused set of commands for AWS account and credential management.
 
 | Command                       | Description                                   |
 |-------------------------------|-----------------------------------------------|

docs/config/examples/toml-env.md

@@ -18,10 +18,6 @@ config_path      = "~/.aws/config"
 [secrets]
 cache_ttl = 60    # minutes, 0 = no cache
 
-[passthrough]
-enabled         = false
-cli_binary_path = ""
-
 [safeguards]
 enabled                 = true
 protected_accounts      = ["prod", "mgmt"]

docs/config/examples/toml-op.md

@@ -23,10 +23,6 @@ config_path      = "~/.aws/config"
 [secrets]
 cache_ttl = 60    # minutes, 0 = no cache
 
-[passthrough]
-enabled         = false
-cli_binary_path = ""
-
 [safeguards]
 enabled                 = true
 protected_accounts      = ["prod", "mgmt"]

docs/config/examples/yaml-env.md

@@ -16,10 +16,6 @@ aws:
 secrets:
   cache_ttl: 60
 
-passthrough:
-  enabled: false
-  cli_binary_path: ""
-
 safeguards:
   enabled: true
   protected_accounts: [prod, mgmt]