chore(repo): remove the Go CLI tree and its pipeline

.gitattributes

@@ -14,16 +14,12 @@ apps/cli/src/shared/telemetry/__fixtures__/error-tags.txt text eol=lf
 # statistics and collapses them in pull request diffs -- they are build output to
 # be regenerated, not code to review, and together they outweigh the hand-written
 # source. The attribute is GitHub-only: git, CI, and local diffs are unaffected.
-# Collapsed is not hidden. v1-openapi.yaml and the lockfiles do carry changes
-# worth reading -- an upstream API change, a dependency substitution -- and both
-# stay one click away in review.
-# Regeneration is owned by `go generate` in apps/cli-go and by the `generate`
-# turbo task, whose `outputs` in turbo.json are the source of truth for this list.
-# Only the generated files are listed, not their hand-written inputs
-# (pkg/api/*.cfg.yaml, api/overlay.yaml). apps/docs/content/docs/commands/ is
-# generated too but gitignored, so it needs no entry.
-apps/cli-go/api/v1-openapi.yaml linguist-generated=true
-apps/cli-go/pkg/api/*.gen.go linguist-generated=true
+# Collapsed is not hidden. The lockfile does carry changes worth reading --
+# a dependency substitution -- and stays one click away in review.
+# Regeneration is owned by the `generate` turbo task, whose `outputs` in
+# turbo.json are the source of truth for this list. Only the generated files
+# are listed, not their hand-written inputs. apps/docs/content/docs/commands/
+# is generated too but gitignored, so it needs no entry.
 packages/api/src/generated/* linguist-generated=true
 packages/api/scripts/openapi-source.json linguist-generated=true
 apps/cli/src/shared/feedback/database.types.ts linguist-generated=true
@@ -33,7 +29,6 @@ apps/docs/public/cli/project-config.schema.json linguist-generated=true
 # Lockfiles. Collapsed rather than hidden -- a dependency change is still one
 # click away in review, which is the same treatment GitHub gives package-lock.json.
 pnpm-lock.yaml linguist-generated=true
-apps/cli-go/go.sum linguist-generated=true
 
 # Not a language marker -- this is the service image manifest, not a container build.
 apps/cli/src/shared/services/Dockerfile linguist-detectable=false

.github/CODEOWNERS

@@ -5,8 +5,6 @@
 # catch-all above so CI-green Dependabot PRs can be auto-approved and merged.
 /.github/workflows/*.yml
 **/package.json
-**/go.mod
-**/go.sum
 /apps/cli/src/shared/services/Dockerfile
 /pnpm-lock.yaml
 /pnpm-workspace.yaml
@@ -25,5 +23,4 @@
 
 # Generated code. These ownerless rules override the catch-all above so
 # CI-green sync PRs (e.g. Management API OpenAPI spec) can be auto-merged.
-/apps/cli-go/pkg/api/*.gen.go
 /packages/api/src/generated/

.github/actions/setup/action.yml

@@ -52,25 +52,6 @@ runs:
         restore-keys: |
           pnpm-store-files-${{ runner.os }}-${{ runner.arch }}-
 
-    - name: Resolve Go cache paths
-      if: inputs.dependency-cache == 'true'
-      id: go-cache
-      shell: bash
-      run: |
-        echo "mod=$(go env GOMODCACHE)" >> "$GITHUB_OUTPUT"
-        echo "build=$(go env GOCACHE)" >> "$GITHUB_OUTPUT"
-
-    - name: Configure Go dependency cache
-      if: inputs.dependency-cache == 'true'
-      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-      with:
-        path: |
-          ${{ steps.go-cache.outputs.mod }}
-          ${{ steps.go-cache.outputs.build }}
-        key: go-cache-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('apps/cli-go/go.mod', 'apps/cli-go/go.sum') }}
-        restore-keys: |
-          go-cache-${{ runner.os }}-${{ runner.arch }}-
-
     - name: Install dependencies
       shell: bash
       env:

.github/dependabot.yml

@@ -37,28 +37,6 @@ updates:
         # — never bundle it into the actions-major group.
     cooldown:
       default-days: 7
-  - package-ecosystem: "gomod"
-    directories:
-      - "/apps/cli-go"
-      - "/apps/cli-go/pkg"
-    schedule:
-      interval: "cron"
-      cronjob: "0 0 * * *"
-    commit-message:
-      prefix: "chore(cli-go): "
-    groups:
-      go-minor:
-        update-types:
-          - minor
-          - patch
-        exclude-patterns:
-          - github.com/compose-spec/compose-go/v2
-    ignore:
-      - dependency-name: "github.com/compose-spec/compose-go/v2"
-      - dependency-name: "github.com/docker/cli"
-      - dependency-name: "github.com/docker/docker"
-    cooldown:
-      default-days: 7
   - package-ecosystem: "npm"
     directory: "/"
     schedule:

.github/workflows/build-cli-artifacts.yml

@@ -71,10 +71,6 @@ jobs:
         with:
           dependency-firewall-token: ${{ secrets.DF_FIREWALL_TOKEN }}
 
-      - name: Pre-download Go modules
-        working-directory: apps/cli-go
-        run: go mod download -x
-
       - name: Install nfpm
         env:
           NFPM_VERSION: "2.47.0"
@@ -118,6 +114,9 @@ jobs:
           done
           echo "Checking dist/..."
           ls -la dist/
+          # Single-binary invariant (CLI-2432): no channel may ship a second executable.
+          ! ls packages/*/bin/supabase-go* 2>/dev/null
+          for a in dist/*.tar.gz; do ! tar -tzf "$a" | grep -q 'supabase-go'; done
 
       - name: Check existing build artifacts cache
         id: build-artifacts-cache