module github.com/nself-org/cli

// go 1.26.10 (full patch version, not bare "1.26"): workflows resolve the Go
// version via `go-version-file: go.mod`, and a bare "1.26" made setup-go pick a
// cached 1.26.5, after which the `toolchain` directive forced a runtime
// toolchain download that failed with tar "File exists" collisions. Pinning the
// patch here makes every workflow resolve 1.26.10 directly.
//
// 1.26.10 patches GO-2026-6809 (crypto/x509 Certificate.Verify: distrust of
// compromised intermediate certificates).
// 1.26.9 patches GO-2026-6599, GO-2026-6600, GO-2026-6603, GO-2026-6604,
// GO-2026-6605, GO-2026-6607, GO-2026-6608, GO-2026-6610, GO-2026-6611,
// GO-2026-6612, GO-2026-6613 and GO-2026-6617 (net/http, crypto/tls,
// html/template, net/textproto, os; x/net v0.60.0 for the x/net halves).
// 1.26.6 patched GO-2026-6218 (net/url quadratic resolvePath), GO-2026-6091
// (html/template JS regexp context), GO-2026-6090 (crypto/tls post-handshake
// message limit), GO-2026-6089 (net/http H2C ReadHeaderTimeout), GO-2026-6088
// (encoding/xml recursion depth), GO-2026-5972 (encoding/asn1 recursion depth),
// GO-2026-5856 (crypto/tls ECH privacy leak) and GO-2026-5026 (net/http idna
// Punycode), plus the earlier GO-2026-5039 / GO-2026-5037 / GO-2026-4971 /
// GO-2026-4918 stdlib fixes. Upgrade when rebuilding release artifacts.
go 1.26.10

require (
	github.com/bytecodealliance/wasmtime-go/v25 v25.0.0
	github.com/cenkalti/backoff/v5 v5.0.3
	github.com/go-chi/chi/v5 v5.5.0
	github.com/google/jsonschema-go v0.4.3
	github.com/google/uuid v1.6.0
	github.com/jackc/pgx/v5 v5.12.0
	github.com/joho/godotenv v1.5.1
	github.com/mark3labs/mcp-go v0.58.0
	github.com/prometheus/client_golang v1.25.0
	github.com/spf13/cobra v1.10.2
	github.com/spf13/pflag v1.1.0
	go.opentelemetry.io/otel v1.47.0
	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.47.0
	go.opentelemetry.io/otel/sdk v1.47.0
	go.opentelemetry.io/otel/trace v1.47.0
	golang.org/x/term v0.47.0
	golang.org/x/text v0.43.0
	gopkg.in/yaml.v3 v3.0.1
)

require (
	github.com/beorn7/perks v1.0.1 // indirect
	github.com/cespare/xxhash/v2 v2.3.0 // indirect
	github.com/dlclark/regexp2 v1.11.5 // indirect
	github.com/go-logr/logr v1.4.4 // indirect
	github.com/go-logr/stdr v1.2.2 // indirect
	github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 // indirect
	github.com/inconshreveable/mousetrap v1.1.0 // indirect
	github.com/jackc/pgpassfile v1.0.0 // indirect
	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
	github.com/jackc/puddle/v2 v2.2.3 // indirect
	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
	github.com/prometheus/client_model v0.6.3 // indirect
	github.com/prometheus/common v0.72.0 // indirect
	github.com/prometheus/procfs v0.22.0 // indirect
	github.com/spf13/cast v1.7.1 // indirect
	github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.47.0 // indirect
	go.opentelemetry.io/otel/log v1.47.0 // indirect
	go.opentelemetry.io/otel/metric v1.47.0 // indirect
	go.opentelemetry.io/proto/otlp v1.11.0 // indirect
	golang.org/x/net v0.62.0 // indirect
	golang.org/x/sync v0.24.0 // indirect
	google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc // indirect
	google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc // indirect
	google.golang.org/grpc v1.83.2 // indirect
	google.golang.org/protobuf v1.36.12 // indirect
)

require (
	github.com/nself-org/cli/sdk/go/v2 v2.0.0-00010101000000-000000000000
	github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
	golang.org/x/sys v0.50.0
)

replace github.com/nself-org/cli/sdk/go/v2 => ./sdk/go