fix: move CLI to its own package, deprecate huma.NewCLI

[danielgtaylor]

This PR moves the built-in optional CLI functionality into its own humacli package and updates all examples & docs. The existing CLI functionality stays but is marked as deprecated to give people time to move to the new package. Switching is fairly easy:

• huma.NewCLI → humacli.New
• huma.CLI → humacli.CLI
• huma.Hooks → humacli.Hooks
• huma.WithOptions → humacli.WithOptions

The plan is to remove the old functionality a few releases from now. This will be a small breaking change to facilitate the removal of some dependencies that are not used by everyone, but will be treated as a bug fix.

Related to #290. This doesn't fix it yet, but sets us on the track to doing so soon.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 95.07%. Comparing base (77be0e2) to head (90125f7).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #291      +/-   ##
==========================================
+ Coverage   95.04%   95.07%   +0.02%     
==========================================
  Files          18       19       +1     
  Lines        2726     2739      +13     
==========================================
+ Hits         2591     2604      +13     
  Misses         98       98              
  Partials       37       37              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[leonklingele]

I wonder if we could use a build constraint to already prevent building with the legacy code: // +build !humanewclipackage and go build -tags humanewclipackage

[simonfr]

Hi,
Sorry but it's a bit strange : you choose to "deprecate" huma.NewCLI but you just delete it from the old package. Looks like a breaking no ?
Also is this really a fix ?

[danielgtaylor]

@simonfr thanks for the feedback. Please take a look at https://github.com/danielgtaylor/huma/releases/tag/v2.13.0

The huma.NewCLI call was deprecated for several releases with a note about migrating to the new humacli package, giving users some time to migrate before removal. While removing it in v2.13.0 is technically a breaking change, it is treated as a fix because it is the only way to remove the underlying hard dependency requirement from the codebase for users who do not want to use the CLI functionality. It turns out this is important for security purposes and in certain organizations like government agencies and NGOs with extremely strict dependency and auditing requirements.

This wasn't a decision taken lightly due to the potential of upsetting people with a small breaking change, however the call was made that it was worth it to enable more people to use Huma. Even if you disagree with this change, I hope you can understand why it was done.