Merge pull request #77 from nathfavour/master

🚀 release: Go 1.21 alignment and agentic safeguards

Author: nathfavour

.github/workflows/release.yml

@@ -29,6 +29,18 @@ jobs:
             **/go.sum
             go.work
 
+      - name: Go Build Cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/go-build
+            ~/Library/Caches/go-build
+            ~/AppData/Local/go-build
+          key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum', 'go.work') }}-${{ github.run_id }}
+          restore-keys: |
+            ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum', 'go.work') }}-
+            ${{ runner.os }}-go-build-
+
       - name: Build binaries
         run: |
           set -e

AGENTS.md

@@ -17,9 +17,11 @@ VibeAuracle is not just a CLI; it's a "God-tier" engineering companion that unif
 ### For AI & Human Contributors
 -   **No Binaries in Git**: NEVER commit binaries, executables, or build artifacts to the repository.
 -   **Build Isolation**: All local builds must be directed to the `/build/` directory (which is git-ignored). Create the directory if it does not exist.
--   **Strict Go Patterns**: We use Go 1.25+ Workspaces. Maintain decoupling between modules.
+-   **Strict Go Patterns**: We use Go Workspaces. Maintain decoupling between modules. **Go 1.21 is the intentional minimum version** to ensure the project remains buildable from source on older environments; do not upgrade the toolchain requirement unless explicitly discussed.
 -   **Security First**: Never expose secrets. Use the `vault` module. Tool execution requires explicit intent awareness.
 -   **TUI Integrity**: UI changes must adhere to the Bubble Tea (TEA) pattern. Styling is done via Lipgloss.
+-   **No Unauthorized PRs**: NEVER create, submit, or merge Pull Requests without explicit, per-action permission from the user.
+-   **Branch Management**: NEVER create new feature branches or delete any existing branches. All work must be performed on the branch designated by the user.
 -   **Agentic Responsibility**: When acting as an agent, prioritize `executeToolCalls` for multi-step tasks. Use the official Copilot SDK runtime (`/agent /sdk`) for high-stakes engineering.
 
 ## 🧠 Specialized Skills

README.md

@@ -13,7 +13,7 @@
 
   [![Stable](https://img.shields.io/badge/Stable-ec1de87-10B981?style=for-the-badge&logo=git&logoColor=white)](https://github.com/nathfavour/vibeauracle/tree/release)
   [![Beta](https://img.shields.io/badge/Beta-7ebb650-7C3AED?style=for-the-badge&logo=git&logoColor=white)](https://github.com/nathfavour/vibeauracle/tree/master)
-  [![Go Version](https://img.shields.io/badge/Go-1.25+-00ADD8?style=for-the-badge&logo=go&logoColor=white)](https://go.dev)
+  [![Go Version](https://img.shields.io/badge/Go-1.21+-00ADD8?style=for-the-badge&logo=go&logoColor=white)](https://go.dev)
   [![License](https://img.shields.io/badge/License-MIT-F59E0B?style=for-the-badge)](LICENSE)
 </div>
 

cmd/vibeaura/go.mod

@@ -1,6 +1,6 @@
 module github.com/nathfavour/vibeauracle/cmd/vibeaura
 
-go 1.25.0
+go 1.21
 
 require (
 	github.com/atotto/clipboard v0.1.4

go.work

@@ -1,4 +1,4 @@
-go 1.25.0
+go 1.21
 
 use (
 	./cmd/vibeaura

internal/audit/go.mod

@@ -1,3 +1,3 @@
 module github.com/nathfavour/vibeauracle/internal/audit
 
-go 1.25.0
+go 1.21

internal/auth/go.mod

@@ -1,6 +1,6 @@
 module github.com/nathfavour/vibeauracle/auth
 
-go 1.25.0
+go 1.21
 
 require github.com/cli/go-gh/v2 v2.13.0
 

internal/connect/go.mod

@@ -1,6 +1,6 @@
 module github.com/nathfavour/vibeauracle/connect
 
-go 1.24.6
+go 1.21
 
 require github.com/libp2p/go-libp2p v0.46.0
 

internal/context/go.mod

@@ -1,6 +1,6 @@
 module github.com/nathfavour/vibeauracle/context
 
-go 1.24.4
+go 1.21
 
 require (
 	github.com/glebarez/go-sqlite v1.22.0

internal/copilot-sdk-go/go.mod

@@ -1,5 +1,5 @@
 module github.com/github/copilot-sdk/go
 
-go 1.23.0
+go 1.21
 
 require github.com/google/jsonschema-go v0.4.2