Prepare Ghostable v3 CLI release

.github/workflows/ci.yml

@@ -83,7 +83,7 @@ jobs:
           if [ "$GOOS" = "windows" ]; then
             output="${output}.exe"
           fi
-          go build -trimpath -ldflags "-s -w -X github.com/ghostable-dev/ghostable/internal/app.version=ci" -o "$output" ./cmd/ghostable
+          go build -trimpath -ldflags "-s -w -X github.com/ghostable-dev/ghostable/v3/internal/app.version=ci" -o "$output" ./cmd/ghostable
 
   native-platform-smoke:
     runs-on: ${{ matrix.os }}
@@ -122,7 +122,7 @@ jobs:
             binary="${binary}.exe"
           fi
 
-          go build -trimpath -ldflags "-s -w -X github.com/ghostable-dev/ghostable/internal/app.version=ci" -o "$binary" ./cmd/ghostable
+          go build -trimpath -ldflags "-s -w -X github.com/ghostable-dev/ghostable/v3/internal/app.version=ci" -o "$binary" ./cmd/ghostable
           "$binary" --help
           "$binary" version
 

.goreleaser.yaml

@@ -25,7 +25,7 @@ builds:
     flags:
       - -trimpath
     ldflags:
-      - -s -w -X github.com/ghostable-dev/ghostable/internal/app.version={{ .Version }}
+      - -s -w -X github.com/ghostable-dev/ghostable/v3/internal/app.version={{ .Version }}
 
 archives:
   - id: ghostable
@@ -86,9 +86,12 @@ release:
   github:
     owner: ghostable-dev
     name: ghostable
+  name_template: "{{ .Tag }} Release"
+  prerelease: auto
+  make_latest: '{{ if .Prerelease }}false{{ else }}true{{ end }}'
 
 npms:
-  - name: "@ghostable/beta"
+  - name: "@ghostable/cli"
     ids:
       - ghostable-npm
     description: "Local-first encrypted environment management CLI"
@@ -105,7 +108,7 @@ npms:
     repository: "https://github.com/ghostable-dev/ghostable"
     bugs: "https://github.com/ghostable-dev/ghostable/issues"
     access: public
-    tag: latest
+    tag: '{{ if .Prerelease }}next{{ else }}latest{{ end }}'
     format: tar.gz
     disable: '{{ not (isEnvSet "NPM_TOKEN") }}'
 
@@ -127,3 +130,4 @@ homebrew_casks:
       name: ghostable-release-bot
       email: release-bot@ghostable.dev
     commit_msg_template: "Update ghostable Homebrew cask to {{ .Tag }}"
+    skip_upload: auto

README.md

@@ -2,8 +2,8 @@
 
 [![Release](https://img.shields.io/github/v/release/ghostable-dev/ghostable?sort=semver)](https://github.com/ghostable-dev/ghostable/releases/latest)
 [![Downloads](https://img.shields.io/github/downloads/ghostable-dev/ghostable/total?label=downloads)](https://github.com/ghostable-dev/ghostable/releases)
-[![npm](https://img.shields.io/npm/v/@ghostable/beta?label=npm)](https://www.npmjs.com/package/@ghostable/beta)
-[![npm downloads](https://img.shields.io/npm/dm/@ghostable/beta?label=npm%20downloads)](https://www.npmjs.com/package/@ghostable/beta)
+[![npm](https://img.shields.io/npm/v/@ghostable/cli?label=npm)](https://www.npmjs.com/package/@ghostable/cli)
+[![npm downloads](https://img.shields.io/npm/dm/@ghostable/cli?label=npm%20downloads)](https://www.npmjs.com/package/@ghostable/cli)
 [![CI](https://img.shields.io/github/actions/workflow/status/ghostable-dev/ghostable/ci.yml?branch=main&label=ci)](https://github.com/ghostable-dev/ghostable/actions/workflows/ci.yml)
 [![License](https://img.shields.io/github/license/ghostable-dev/ghostable)](LICENSE)
 [![macOS](https://img.shields.io/badge/macOS-signed%20%26%20notarized-2ea44f)](https://github.com/ghostable-dev/ghostable/releases/latest)
@@ -21,8 +21,8 @@ file-backed identity store otherwise.
 
 ## Security Status
 
-Ghostable is beta security software and has not completed an external security
-audit. The repository includes a public [security policy](SECURITY.md), a
+Ghostable has not completed an external security audit. The repository includes
+a public [security policy](SECURITY.md), a
 [threat model](docs/security/threat-model.md), and stable
 [test vectors](docs/security/test-vectors.md) so developers can inspect the
 claims and reproduce the critical cryptographic checks.
@@ -49,12 +49,18 @@ brew install --cask ghostable
 Node/npm projects:
 
 ```sh
-npm install @ghostable/beta
+npm install @ghostable/cli
 ```
 
 This installs a project-local `ghostable` binary at
 `node_modules/.bin/ghostable`.
 
+When available, release candidates use npm's `next` tag:
+
+```sh
+npm install @ghostable/cli@next
+```
+
 Other platforms can download the matching archive from the
 [latest release](https://github.com/ghostable-dev/ghostable/releases/latest) and put
 the `ghostable` binary on `PATH`.

SECURITY.md

@@ -15,7 +15,7 @@ restrictive file-backed identity store otherwise.
 
 ## Security Status
 
-Ghostable is beta software and has not completed an external security audit.
+Ghostable has not completed an external security audit.
 The current assurance evidence is repository-visible: focused security tests,
 documented test vectors, and the public threat model in
 `docs/security/threat-model.md`. Do not treat the current release as formally

cmd/ghostable/main.go

@@ -3,7 +3,7 @@ package main
 import (
 	"os"
 
-	"github.com/ghostable-dev/ghostable/internal/app"
+	"github.com/ghostable-dev/ghostable/v3/internal/app"
 )
 
 func main() {

docs/security/test-vectors.md

@@ -2,7 +2,7 @@
 
 The fixture file `docs/security/test-vectors.json` contains deterministic
 vectors for security-sensitive compatibility checks. These vectors are public
-evidence for developers reviewing the beta security design; they are not an
+evidence for developers reviewing the security design; they are not an
 external audit.
 
 The vectors cover:

docs/security/threat-model.md

@@ -1,6 +1,6 @@
 # Ghostable Threat Model
 
-This threat model documents the current beta security design. It is not a
+This threat model documents the current security design. It is not a
 substitute for an external audit.
 
 ## Assets

go.mod

@@ -1,4 +1,4 @@
-module github.com/ghostable-dev/ghostable
+module github.com/ghostable-dev/ghostable/v3
 
 go 1.25.10
 

internal/app/adopt.go

@@ -5,7 +5,7 @@ import (
 	"io"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
 )
 
 type adoptSection struct {

internal/app/agent.go

@@ -7,8 +7,8 @@ import (
 	"path/filepath"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 const agentsBlockStart = "<!-- ghostable:start -->"

internal/app/agent_test.go

@@ -9,8 +9,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/ghostable-dev/ghostable/internal/prompt"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/prompt"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 func TestRunAccessCreateCreatesToken(t *testing.T) {

internal/app/app.go

@@ -12,9 +12,9 @@ import (
 	"strconv"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/prompt"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/prompt"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 var version = "dev"

internal/app/app_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/ghostable-dev/ghostable/internal/prompt"
+	"github.com/ghostable-dev/ghostable/v3/internal/prompt"
 	"github.com/manifoldco/promptui"
 )
 

internal/app/deploy.go

@@ -4,7 +4,7 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
 )
 
 func (r *Runner) runDeploy(args []string) error {

internal/app/deploy_laravel_cloud.go

@@ -9,8 +9,8 @@ import (
 	"strings"
 	"time"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 const cloudCommandTimeout = 2 * time.Minute

internal/app/deploy_laravel_forge.go

@@ -9,9 +9,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/dotenv"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/dotenv"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 const forgeCommandTimeout = 2 * time.Minute

internal/app/deploy_laravel_providers_test.go

@@ -7,8 +7,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 func TestRunDeployCloudInvokesLaravelCloudCLI(t *testing.T) {

internal/app/deploy_laravel_vapor.go

@@ -11,10 +11,10 @@ import (
 	"strings"
 	"time"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/dotenv"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/dotenv"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 const vaporCommandTimeout = 2 * time.Minute

internal/app/deploy_laravel_vapor_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 func TestRunDeployVaporDryRunUsesEnvironmentVariables(t *testing.T) {

internal/app/deploy_test.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 func TestRunDeployWritesEnvironmentToDotenv(t *testing.T) {

internal/app/device.go

@@ -7,10 +7,10 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/prompt"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/prompt"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 var deviceCommandOptions = []commandOption{

internal/app/device_test.go

@@ -8,9 +8,9 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/prompt"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/prompt"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 func TestPrintAccessDeviceRowsStripsTerminalControlSequences(t *testing.T) {

internal/app/env.go

@@ -10,10 +10,10 @@ import (
 	"strings"
 	"time"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/dotenv"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/dotenv"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 var envCommandOptions = []commandOption{

internal/app/env_clean.go

@@ -7,8 +7,8 @@ import (
 	"path/filepath"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 type envCleanResult struct {

internal/app/env_run.go

@@ -12,10 +12,10 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/store"
-	"github.com/ghostable-dev/ghostable/internal/validation"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/validation"
 )
 
 type envRunRequest struct {

internal/app/env_shell.go

@@ -6,7 +6,7 @@ import (
 	"runtime"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
 )
 
 var resolveEnvShellCommand = defaultEnvShellCommand

internal/app/env_test.go

@@ -12,9 +12,9 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/prompt"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/prompt"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 func TestRunEnvCreatePromptsForEnvironmentType(t *testing.T) {

internal/app/example.go

@@ -6,12 +6,12 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/ghostable-dev/ghostable/internal/cli"
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/dotenv"
-	"github.com/ghostable-dev/ghostable/internal/review"
-	"github.com/ghostable-dev/ghostable/internal/store"
-	"github.com/ghostable-dev/ghostable/internal/validation"
+	"github.com/ghostable-dev/ghostable/v3/internal/cli"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/dotenv"
+	"github.com/ghostable-dev/ghostable/v3/internal/review"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/validation"
 )
 
 var exampleCommandOptions = []commandOption{

internal/app/example_hygiene_test.go

@@ -9,9 +9,9 @@ import (
 	"testing"
 	"time"
 
-	"github.com/ghostable-dev/ghostable/internal/domain"
-	"github.com/ghostable-dev/ghostable/internal/prompt"
-	"github.com/ghostable-dev/ghostable/internal/store"
+	"github.com/ghostable-dev/ghostable/v3/internal/domain"
+	"github.com/ghostable-dev/ghostable/v3/internal/prompt"
+	"github.com/ghostable-dev/ghostable/v3/internal/store"
 )
 
 func TestRunExampleGenerateDiscoversStoredSchemaAndCodeKeys(t *testing.T) {