golang-spf13-cobra

от samber

We need to translate the given text from English to Russian. The text describes a Golang CLI command tree library using spf13/cobra. It lists various features and concepts. We must preserve the name "golang-spf13-cobra" but it's not in the text, so we don't include it. We also preserve technical terms like "cobra.Command", "RunE", "Run", "PersistentPreRunE", "Args validators", "NoArgs", "ExactArgs", "MatchAll", "ValidArgsFunction", "RegisterFlagCompletionFunc", "ShellCompDirective", "SetArgs/SetOut/SetErr", and the import path. Also preserve URLs? There is no URL. Numbers? None. Technical terms should be kept as is or transliterated? Usually in Russian technical documentation, English terms are often kept in Latin or transliterated. But the instruction says "preserve product names, protocol names, URLs, numbers, and technical terms." So we should keep them in English. However, for readability, some terms might

npx skills add https://github.com/samber/cc-skills-golang --skill golang-spf13-cobra

Persona: You are a Go CLI engineer building command trees that feel native to the Unix shell. You design the user-facing surface first, then wire behavior into the right hook.

Modes:

  • Build — creating a new CLI from scratch: follow command tree setup, hook wiring, and flag sections sequentially.
  • Extend — adding subcommands, flags, or completions to an existing CLI: read the current command tree first, then apply changes consistent with the existing structure.
  • Review — auditing an existing CLI: check the Common Mistakes table, verify RunE usage, OutOrStdout(), hook chain ordering, and args validation.

Using spf13/cobra for CLI command trees in Go

Cobra is the de facto standard for Go CLI applications. It provides the command/subcommand tree, flag parsing (via pflag), args validation, shell completion generation, and documentation generation. It does not handle configuration layering — that's viper's job.

Official Resources:

This skill is not exhaustive. Please refer to library documentation and code examples for more information. For Go package docs, symbols, versions, importers, and known vulnerabilities, → See samber/cc-skills-golang@golang-pkg-go-dev skill (godig) — prefer it over Context7 for Go package facts. To navigate this library's usage in your own code (definitions, call sites, diagnostics), → See samber/cc-skills-golang@golang-gopls skill (gopls). Context7 remains a fallback for docs not indexed on pkg.go.dev.

go get github.com/spf13/cobra@latest

Cobra vs. viper

These libraries do fundamentally different things and can be used independently.

Concerncobraviper
OwnsCommand tree, flags, arg validation, completionsConfiguration value resolution
User-facing?Yes — subcommands, flags, help textNo — purely a key-value resolver
Without the other?Yes — a CLI with flags only needs cobraYes — a daemon reading YAML + env needs only viper
Integration seamHands pflag.Flag to viper via BindPFlagTreats the cobra flag as the highest-precedence layer

Use cobra alone when your binary takes flags and args but needs no config file or env resolution. Use viper alone when you have a long-running service reading config from YAML + env with no CLI subcommands. Use both when you need both — bind at PersistentPreRunE on the root command.

→ See samber/cc-skills-golang@golang-spf13-viper for the viper side of this integration.

Command tree

Every cobra CLI has a root command plus zero or more subcommands registered with AddCommand. The root command name is the binary name.

var rootCmd = &cobra.Command{
    Use:          "myapp",
    Short:        "One-line summary",
    SilenceUsage: true,  // ✓ prevents usage wall on every error
    SilenceErrors: true, // ✓ lets you control error output format
}

Use AddGroup to label subcommands in help output — register groups before the AddCommand calls that reference them; cobra does not retroactively assign groups.

The Run* family

Cobra commands have five run hooks executed in order:

PersistentPreRunE → PreRunE → RunE → PostRunE → PersistentPostRunE

Always use *E variants — the non-E forms cannot return errors. Key rules:

  • PersistentPreRunE on the root runs before every subcommand — use it for config init and auth checks.
  • A child PersistentPreRunE replaces the parent's entirely — call the parent explicitly if you need both.
  • PostRunE runs only if RunE succeeded.

For the full lifecycle and inheritance rules, see commands-and-args.md.

Args validators

Cobra validates positional arguments before RunE runs. Never write len(args) checks inside RunE — that bypasses cobra's standard error messages and arg count tracking.

Built-ins: NoArgs, ExactArgs(n), MinimumNArgs(n), MaximumNArgs(n), RangeArgs(min,max), OnlyValidArgs, ExactValidArgs(n). Compose with MatchAll(v1, v2). Custom validator: func(cmd *cobra.Command, args []string) error.

For the full validator set with examples and MatchAll patterns, see commands-and-args.md.

Flags primer

Cobra delegates flag parsing to pflag. Persistent flags (PersistentFlags()) are inherited by all subcommands; local flags (Flags()) apply only to the declaring command.

rootCmd.PersistentFlags().StringVar(&cfgFile, "config", "", "config file path") // inherited by all subcommands
serveCmd.Flags().IntVar(&port, "port", 8080, "listen port")                     // local to serveCmd only
serveCmd.MarkFlagRequired("port")
serveCmd.MarkFlagsMutuallyExclusive("json", "yaml")

For pflag types, custom flag values, flag groups, and viper binding, see flags.md.

Completions primer

Cobra generates shell completions automatically. Extend them with:

  • ValidArgs []string — static positional arg completion.
  • ValidArgsFunction — dynamic: func(cmd, args, toComplete string) ([]string, ShellCompDirective). Return ShellCompDirectiveNoFileComp to suppress file fallback.
  • RegisterFlagCompletionFunc(name, fn) — flag value completion.

For ShellCompDirective values, annotations, and testing, see completions.md.

Testing commands

Test commands by executing them programmatically. Never use os.Stdout / os.Stderr directly in command handlers — use cmd.OutOrStdout() / cmd.ErrOrStderr() so tests can redirect output.

func TestServeCmd(t *testing.T) {
    buf := new(bytes.Buffer)
    rootCmd.SetOut(buf)
    rootCmd.SetArgs([]string{"serve", "--port", "9090"})
    require.NoError(t, rootCmd.Execute())
    assert.Contains(t, buf.String(), "listening on :9090")
}

Cobra accumulates flag state across Execute() calls — build a fresh command tree per test. For isolation patterns, golden files, and testing completions, see testing.md.

Best Practices

  1. Always use RunE, never RunRun cannot return an error; the only escape is os.Exit or panic, bypassing defers.
  2. Put config initialization in PersistentPreRunE — it runs before every subcommand; the right place for viper binding and auth checks.
  3. Validate positional args with Args, not inside RunEArgs gives cobra's standard error messages; MatchAll composes validators.
  4. Use cmd.OutOrStdout() / cmd.ErrOrStderr() for all output — direct os.Stdout writes cannot be captured by tests.
  5. Re-create the command tree per test — cobra accumulates flag state across Execute() calls on the same instance.

Common Mistakes

MistakeWhy it failsFix
Using Run instead of RunECannot return an error — only escape is os.Exit or panic, bypassing defersUse RunE — return the error, let cobra handle the exit
Writing len(args) checks in RunEBypasses cobra's standard error messages ("accepts 1 arg, received 2")Declare Args: cobra.ExactArgs(1) on the command
Writing to os.Stdout directlyTests cannot capture output — os-level file handles can't be redirectedUse cmd.OutOrStdout() / cmd.ErrOrStderr()
Child PersistentPreRunE silently drops parent'sCobra does not chain — the child replaces the parent's hook entirelyCall parent.PersistentPreRunE(cmd, args) from the child's hook
Reusing a root command across testsCobra accumulates flag state; second Execute() sees flags from the firstBuild a fresh command tree per test

Further Reading

  • commands-and-args.md — full PreRun*/PostRun* chain, every Args validator, PersistentPreRunE inheritance rules
  • flags.md — pflag types, required/exclusive/oneRequired groups, custom value types, viper binding
  • completions.md — ShellCompDirective set, annotation-based completions, testing completions
  • generators.md — man page, markdown, YAML, RST doc generation; cobra-cli scaffolder
  • testing.md — isolation patterns, golden files, testing completions, table-driven command tests

Cross-References

  • → See samber/cc-skills-golang@golang-cli skill for general CLI architecture — project layout, exit codes, signal handling, I/O patterns
  • → See samber/cc-skills-golang@golang-spf13-viper skill for configuration layering alongside cobra (flag → env → file → default precedence)
  • → See samber/cc-skills-golang@golang-testing skill for general Go testing patterns

If you encounter a bug or unexpected behavior in spf13/cobra, open an issue at https://github.com/spf13/cobra/issues.

Больше skills от samber

golang-code-style
samber
Golang code style conventions — line length and breaking, variable declarations, control flow clarity, when comments help vs hurt. Use when writing or reviewing Go code, asking about style or clarity, or establishing project coding standards. Not for naming conventions (→ See `samber/cc-skills-golang@golang-naming` skill), linter configuration (→ See `samber/cc-skills-golang@golang-lint` skill), or doc comments (→ See `samber/cc-skills-golang@golang-documentation` skill).
developmentcode-review
golang-testing
samber
We need to translate the given text from English to Russian, preserving the name "golang-testing" if it appears. The text is a description of a skill for Go testing. The instruction says: "Translate only the text inside <text>. Do not include the name unless it appears in the source text." The name "golang-testing" does not appear in the source text, so we should not add it. Also, preserve product names, protocol names, URLs, numbers, technical terms. So "golang-testing" is not in the source, but "golang-stretchr-testify" is. We must preserve that. Also "goleak" is a tool name, preserve. "testify" is a library name, preserve. "CI" is an acronym, preserve. "Go" is a language name, preserve. "table-driven tests", "testify suites and mocks", "parallel tests", "fuzzing", "fixtures", "goroutine leak detection", "snapshot testing", "code coverage", "integration tests",
developmenttestingcode-review
golang-design-patterns
samber
Идиоматические шаблоны проектирования Golang — функциональные опции, конструкторы, обработка ошибок и каскадирование, управление ресурсами и жизненным циклом, корректное завершение работы, отказоустойчивость, архитектура, внедрение зависимостей, работа с данными, стриминг и другое. Применяйте при осознанном выборе между архитектурными шаблонами, реализации функциональных опций, проектировании API конструкторов, настройке корректного завершения работы, применении шаблонов отказоустойчивости или при выборе идиоматического шаблона Go для конкретной задачи.
developmentdesigncode-review
golang-error-handling
samber
We need to translate the given text from English to Russian, preserving the name "golang-error-handling" but only if it appears in the source text. The source text does not contain the name "golang-error-handling" explicitly; it only appears in the instruction as the directory item name. The instruction says: "Do not include the name unless it appears in the source text." So we should not add it. Also preserve product names, protocol names, URLs, numbers, technical terms. The text includes: "Golang", "%w", "errors.Is/As", "errors.Join", "panic/recover", "slog", "HTTP", "samber/oops", "samber/cc-skills-golang@golang-samber-oops". Also "3rd-party" should be preserved as is or translated? "3rd-party" is a term, but we can translate as "сторонних" but keep the number? Better to keep "3rd-party" as is? The instruction says "preserve ... numbers, technical terms". "3rd
developmentcode-review
golang-performance
samber
Шаблоны и методология оптимизации производительности Golang — если узкое место X, примени Y. Охватывает снижение аллокаций, эффективность CPU, компоновку памяти, настройку GC, пулинг, кэширование и оптимизацию горячих путей. Используйте, когда профилирование или бенчмарки выявили узкое место и вам нужен правильный шаблон оптимизации для его устранения. Также используйте при проведении код-ревью производительности, чтобы предложить улучшения или бенчмарки, которые помогут выявить быстрые выигрыши в производительности. Не для методологии измерений (→...
developmentcode-review
golang-security
samber
Лучшие практики безопасности и предотвращение уязвимостей для Golang. Охватывает инъекции (SQL, командные, XSS), криптографию, безопасность файловой системы, сетевую безопасность, куки, управление секретами, безопасность памяти и логирование. Применяется при написании, рецензировании или аудите Go-кода на безопасность, а также при работе с любым рискованным кодом, связанным с криптографией, вводом-выводом, управлением секретами, обработкой пользовательского ввода или аутентификацией. Включает настройку инструментов безопасности.
securitycode-reviewdevelopment
golang-database
samber
Полное руководство по работе с базами данных в Go — параметризованные запросы, сканирование структур, NULL-допустимые столбцы, транзакции, уровни изоляции, SELECT FOR UPDATE, пул соединений, пакетная обработка, передача контекста и инструменты миграции. Используйте при написании, ревью или отладке Golang-кода, взаимодействующего с PostgreSQL, MariaDB, MySQL или SQLite; для тестирования баз данных; или по вопросам, связанным с database/sql, sqlx или pgx. НЕ генерирует схемы баз данных или SQL-миграции.
developmentdatabase
golang-lint
samber
Лучшие практики линтинга и настройка golangci-lint для проектов на Golang — запуск линтеров, настройка .golangci.yml, подавление предупреждений с помощью директив nolint, интерпретация вывода линтера и выбор линтеров. Используйте при настройке golangci-lint, вопросах о предупреждениях линтера или подавлении nolint, настройке инструментов качества кода или выборе линтеров. Также используйте, когда пользователь упоминает golangci-lint, go vet, staticcheck или revive.
developmentcode-reviewtesting