ci(go): enforce gofmt for CLI and agent

.github/workflows/agent.yml

@@ -30,6 +30,15 @@ jobs:
           go-version-file: apps/agent/go.mod
           cache-dependency-path: apps/agent/go.sum
 
+      - name: Check formatting
+        run: |
+          unformatted=$(gofmt -l .)
+          if [ -n "$unformatted" ]; then
+            echo "not gofmt-formatted:"
+            echo "$unformatted"
+            exit 1
+          fi
+
       - name: Verify go.mod is tidy
         run: |
           go mod tidy

.github/workflows/cli.yml

@@ -26,6 +26,15 @@ jobs:
           go-version-file: apps/cli/go.mod
           cache-dependency-path: apps/cli/go.sum
 
+      - name: Check formatting
+        run: |
+          unformatted=$(gofmt -l .)
+          if [ -n "$unformatted" ]; then
+            echo "not gofmt-formatted:"
+            echo "$unformatted"
+            exit 1
+          fi
+
       - name: Vet
         run: go vet ./...
 

apps/agent/cmd/agent/main.go

@@ -1,37 +1,37 @@
-package main
-
-import (
-	"context"
-	"flag"
-	"fmt"
-	"os"
-
-	"docksight-agent/internal/app"
-	"docksight-agent/internal/service"
-	"docksight-agent/internal/version"
-)
-
-func main() {
-	configPath := flag.String("config", "config.yaml", "path to agent config.yaml")
-	showVersion := flag.Bool("version", false, "print version and exit")
-	flag.Parse()
-
-	if *showVersion {
-		fmt.Println(version.String())
-		return
-	}
-
-	application := app.New(*configPath)
-
-	// service.Run decides how the agent is supervised: directly in a console,
-	// or dispatched to the Windows Service Control Manager. The same binary
-	// serves both, detected at runtime rather than selected by a flag.
-	err := service.Run(func(ctx context.Context) error {
-		return application.Run(ctx)
-	})
-
-	if err != nil {
-		fmt.Fprintf(os.Stderr, "docksight-agent: %v\n", err)
-		os.Exit(1)
-	}
-}
+package main
+
+import (
+	"context"
+	"flag"
+	"fmt"
+	"os"
+
+	"docksight-agent/internal/app"
+	"docksight-agent/internal/service"
+	"docksight-agent/internal/version"
+)
+
+func main() {
+	configPath := flag.String("config", "config.yaml", "path to agent config.yaml")
+	showVersion := flag.Bool("version", false, "print version and exit")
+	flag.Parse()
+
+	if *showVersion {
+		fmt.Println(version.String())
+		return
+	}
+
+	application := app.New(*configPath)
+
+	// service.Run decides how the agent is supervised: directly in a console,
+	// or dispatched to the Windows Service Control Manager. The same binary
+	// serves both, detected at runtime rather than selected by a flag.
+	err := service.Run(func(ctx context.Context) error {
+		return application.Run(ctx)
+	})
+
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "docksight-agent: %v\n", err)
+		os.Exit(1)
+	}
+}