guardian-ci 2026.10.28.182143

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 5ad09001bf7bb6524936b56a6382523f90ea430d4022aab240bda6d01e147575
+  data.tar.gz: 4556cbc10f2e9e7916d3ba3fd4314c2752535c915fbd23d539e76e37f29a970a
+SHA512:
+  metadata.gz: 99d71d4aabb2dfdec661a4192d751d4705ca2a7aa8b753114db73a3fe703ed1ccd74c1d94a7131fe09b9701ecf410b7dbc0c93b8b7cb556232a5827b7d9e513e
+  data.tar.gz: 46df525921a8075935822e0e3a317237260c6ef4d80c8864d3d4b20c3a269cb7838c4615c5eb5f3e219dbe29040904a7b8726b13fd09f229b93e926b70c4fc1a

data/.fluence-ci.yml

@@ -0,0 +1,5 @@
+# Per-project options for the fluence-eu/ci-workflows@v7 reusables.
+# Full key schema: https://github.com/fluence-eu/ci-workflows#per-project-configuration-fluence-ciyml
+release:
+  gem_specs: guardian-ci
+  version: date

data/.yardopts

@@ -0,0 +1,11 @@
+--markup markdown
+--no-private
+--hide-api private
+--output-dir doc
+--readme README.md
+--template-path yard-templates
+lib/**/*.rb
+-
+CHANGELOG.md
+CONTRIBUTING.md
+LICENSE.txt

data/.yardstick.yml

@@ -0,0 +1,34 @@
+---
+# yardstick quality checks for the gem's public API.
+# @api tags document the stability contract: public methods are part
+# of SemVer, private ones may change without notice.
+threshold: 95
+require_exact_threshold: false
+verbose: true
+path:
+  - 'lib/**/*.rb'
+rules:
+  ApiTag::Presence:
+    enabled: true
+    exclude: []
+  ApiTag::Inclusion:
+    enabled: true
+    exclude: []
+  ApiTag::ProtectedMethod:
+    enabled: false
+  ApiTag::PrivateMethod:
+    enabled: false
+  ExampleTag:
+    enabled: false
+  ReturnTag:
+    enabled: true
+    exclude: []
+  Summary::Presence:
+    enabled: true
+    exclude: []
+  Summary::Length:
+    enabled: false
+  Summary::Delimiter:
+    enabled: false
+  Summary::SingleLine:
+    enabled: false

data/Appraisals

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+# Generate per-Rails-version Gemfiles for CI. Regenerate with:
+#   bundle exec appraisal install
+#
+# The set of Rails versions tested here must stay in sync with the
+# matrix in .github/workflows/main.yml. Older Rails minors stay in
+# scope as long as Rails::Generators::Base remains source-stable.
+
+appraise 'rails-7.0' do
+  gem 'rails', '~> 7.0.0'
+end
+
+appraise 'rails-7.1' do
+  gem 'rails', '~> 7.1.0'
+end
+
+appraise 'rails-7.2' do
+  gem 'rails', '~> 7.2.0'
+end
+
+appraise 'rails-8.0' do
+  gem 'rails', '~> 8.0.0'
+end
+
+appraise 'rails-8.1' do
+  gem 'rails', '~> 8.1.0'
+end

data/CHANGELOG.md

@@ -0,0 +1,159 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+## [2026.10.28.182143] - 2026-10-28
+
+### Build
+
+- build(gemspec): drop allowed_push_host
+
+### CI
+
+- ci: add the Claude PR review workflow
+- ci: release dated versions
+- ci: bump workflows to ci-workflows@v7
+- ci: publish releases to rubygems.org
+
+### Other
+
+- chore(gemspec): move the Thor comment above the thor dependency
+
+### Refactored
+
+- refactor: drop Fluence branding from the tool's own wording
+- refactor!: write report-mode artefacts under tmp/guardian-report
+- refactor(cli)!: rename fluence-ci executable and generator to guardian-ci
+- refactor!: rename gem to guardian-ci under Guardian::Ci
+
+## [0.6.1] - 2026-10-05
+
+### Build
+
+- build: raise brakeman, reek, rubocop and rubocop-rspec floors
+- build!: require Ruby >= 3.3
+
+### CI
+
+- ci: bump actions/checkout to v7
+- ci: deploy the YARD docs to GitHub Pages
+- ci: forward the release bot key on codequality-pr
+- ci: keep codequality-pr without the release bot key
+- ci: forward the release bot key on codequality-pr
+- ci: migrate to ci-workflows@v6 config file
+- ci(workflows): bump ci-workflows pins from @v2 to @v5 + drop github.actor
+- ci: bump ci-workflows to @v5 (multi-gem-capable reusables)
+
+### Documentation
+
+- docs: align the YARD config with the gems family
+- docs: refresh CONTRIBUTING.md after ci-workflows@v5 migration
+- docs(readme): split SimpleCov snippet into rails/gem variants
+- docs(readme): document .yardopts, .yardstick.yml and cliff.toml
+- docs(readme): document SimpleCov spec_helper snippet
+
+### Other
+
+- chore: migrate to ci-workflows v4 (FLUENCE_*_BOT_* naming)
+
+## [0.6.0] - 2026-04-29
+
+### Added
+
+- feat(docs): add --build mode for HTML site generation
+
+### Refactored
+
+- refactor(cli): extract dynamic command registration into class methods
+
+### Style
+
+- style(cli): use if/else block instead of multi-line ternary
+
+## [0.5.1] - 2026-04-28
+
+### Added
+
+- feat(cli): forward all Steps kwargs as Thor options, not just --report
+
+### Documentation
+
+- docs(readme): document v0.5 CLI surface (--report, per-group commands)
+
+## [0.5.0] - 2026-04-28
+
+### Added
+
+- feat(steps): align codequality + docs report mode with ci-workflows v3
+
+### CI
+
+- ci(main): gate matrix steps with if:, not job-level
+
+### Refactored
+
+- refactor(yardstick_runner): drop unused parity helpers
+
+### Tests
+
+- test(yardstick_runner): cover happy path, threshold failure, missing yml
+
+## [0.4.0] - 2026-04-28
+
+### Added
+
+- feat(steps,cli): expose per-group commands with --report flag
+- feat(generator): bin/fluence-ci supports per-group sub-commands
+- feat(generator): drop config/ci.rb inject in favor of bin/fluence-ci
+
+### CI
+
+- ci: skip rubocop and main matrix on release PRs
+
+## [0.3.0] - 2026-04-28
+
+### Added
+
+- feat: ship install generator, fluence-ci CLI, and Steps/Runner catalog (Phase 2)
+
+### CI
+
+- ci: activate consumer-style quality gates and 100% YARD coverage
+
+### Tests
+
+- test: add multi-Rails matrix and integration specs for CLI + generator
+- test: configure SimpleCov + Undercover formatter in spec_helper
+
+## [0.2.0] - 2026-04-28
+
+### Build
+
+- build: add benchmark runtime dep for undercover on Ruby 3.5+
+
+### CI
+
+- ci: grant `packages: read` on @v2 wrappers (fix startup_failure)
+- ci: add workflow_dispatch to publish.yml for manual republish
+- ci: forward RELEASE_APP_PRIVATE_KEY to release.yml
+
+### Documentation
+
+- docs: refresh README pins + add CONTRIBUTING.md
+
+## [0.1.1] - 2026-04-28
+
+### Other
+
+- chore: add cliff.toml for changelog generation
+- chore: pin remaining tool versions
+
+### Style
+
+- style: convert string literals from double to single quotes
+
+## [0.1.0] - 2026-04-28
+
+### Other
+
+- chore: initial commit
+

data/CONTRIBUTING.md

@@ -0,0 +1,174 @@
+# Contributing
+
+Thanks for contributing! Here's how to get started:
+
+1. Open an issue to discuss the proposed change
+2. Create a branch from `main`
+3. Implement the change
+4. Make sure tests and linting pass
+5. Open a pull request targeting `main`
+
+---
+
+## Setup
+
+```bash
+git clone git@github.com:fluence-eu/guardian-ci.git
+cd guardian-ci
+bin/setup
+```
+
+Requires Ruby 3.3+.
+
+## Development
+
+```bash
+bundle exec rspec             # tests
+bundle exec rubocop           # linting
+bundle exec rubocop -a        # auto-fix linting
+```
+
+This gem is mostly a gemspec — its job is to declare a curated set of dev-tool dependencies and ship them to consumers via a single Gemfile entry. There is no application code to write under `lib/` (yet — see Phase 2 in `README.md`). The bulk of contributions therefore land in `guardian-ci.gemspec`.
+
+### Bumping or adding a tool
+
+1. Edit `guardian-ci.gemspec` (`spec.add_dependency` lines).
+2. Run `bundle install` to verify the new constraint resolves.
+3. Run `gem build guardian-ci.gemspec` to confirm the gem still builds.
+4. Update the « What's included » table in `README.md` if pin or tool list changed.
+5. Open the PR.
+
+After merge, cut a release via the standard flow (see below). Consumers pick up the new pin with `bundle update guardian-ci`.
+
+### Interactive console
+
+```bash
+bin/console
+```
+
+---
+
+## Commit Convention
+
+This project follows [Conventional Commits](https://www.conventionalcommits.org/).
+
+### Format
+
+```
+<type>(<scope>): <description>
+
+[body]
+
+[footer(s)]
+```
+
+### Types
+
+| Type | Description |
+|---|---|
+| `feat` | New feature |
+| `fix` | Bug fix |
+| `docs` | Documentation only changes |
+| `style` | Formatting changes (whitespace, commas, etc.) — no logic |
+| `refactor` | Code change that neither fixes a bug nor adds a feature |
+| `perf` | Performance improvement |
+| `test` | Adding or updating tests |
+| `build` | Changes to build system or dependencies |
+| `ci` | CI/CD configuration changes |
+| `chore` | Other changes that don't modify source or tests |
+| `revert` | Revert a previous commit |
+
+### Scope
+
+Optional — indicates the area affected:
+
+- `chore(gemspec): pin reek to ~> 6.6`
+- `docs(readme): add migration example for Rails apps`
+- `ci: bump release.yml to ci-workflows@v5`
+
+### Description
+
+- Imperative mood ("add", not "adds" or "added")
+- No capital letter at the start
+- No period at the end
+- Maximum 72 characters
+
+### Body (optional)
+
+- Explains *why* — the diff already shows *what*
+- Wrapped at 72 columns
+- Separated from the description by a blank line
+
+### Footers (optional)
+
+- `Refs #123` to reference an issue
+- `BREAKING CHANGE: <description>` if the change is incompatible
+- And/or a `BREAKING CHANGE:` footer in the body
+
+---
+
+## Pull Request Convention
+
+### PR Title
+
+- Same format as commits: `<type>(<scope>): <description>`
+- Under 72 characters
+
+### Rules
+
+- One topic per PR — don't mix unrelated changes
+- Run `bundle exec rspec` and `bundle exec rubocop` locally before pushing
+- Never commit secrets or credentials
+- Don't commit `Gemfile.lock` or `*.gem` build artifacts (both gitignored)
+
+---
+
+## Architecture
+
+```
+guardian-ci.gemspec                      # The whole point of this gem — 13 add_dependency lines
+lib/guardian/ci.rb                       # Module stub
+lib/guardian/ci/version.rb               # Dated version (written by release workflow)
+cliff.toml                               # git-cliff config for CHANGELOG generation
+.github/workflows/                       # See « CI » below
+```
+
+There is intentionally no production code under `lib/`. Phase 2 will add a Thor + Railtie generator (CLI + scaffolds) — until then, this gem ships only its gemspec dependencies.
+
+## Code Conventions
+
+- `frozen_string_literal: true` on every Ruby file
+- Strings: single quotes (unless interpolation is needed)
+- RuboCop: no rule disabling without justification
+- Version in `lib/guardian/ci/version.rb` — do not modify unless for an explicit release
+
+## CI
+
+GitHub Actions workflows under `.github/workflows/`, all wired through `fluence-eu/ci-workflows@v7` reusables:
+
+- **rubocop-pr.yml** — runs RuboCop on every PR, posts a sticky comment with offense delta vs `main`
+- **rubocop-measure.yml** — establishes the `main` baseline (artifact `rubocop-report`)
+- **prepare-release.yml** — manual dispatch opens a release PR versioned with the UTC dispatch time (`YYYY.MM.DD.HHMMSS`)
+- **release.yml** — on merge of a release PR, creates the tag + GitHub Release
+- **publish.yml** — on Release published, pushes the gem to GitHub Packages (also dispatchable manually with a `tag` input for republishing past versions)
+- **publish-rubygems.yml** — on Release published, pushes the same gem to rubygems.org through trusted publishing (same manual `tag` dispatch)
+
+The release App secret `FLUENCE_RELEASE_BOT_PRIVATE_KEY` is forwarded to `release.yml` so the GitHub Release is created with an App-issued token — required for the `publish.yml` chain to fire (see fluence-eu/ci-workflows#12 for the rationale).
+
+---
+
+## AI-Assisted Contributions
+
+When using AI tools (Claude, Copilot, etc.) to generate commits or PRs:
+
+- **Classify first** — determine if the change is critical, major, minor, or trivial
+- **Focus on the "why"** — the diff already shows the "what"
+- **Skip boilerplate** — don't add empty sections or placeholder text
+
+The person opening the PR takes full responsibility for the code. Before submitting:
+
+- [ ] I have read and understood every line of code in this PR
+- [ ] I can explain why each change was made
+- [ ] I have tested the changes locally
+
+Do **not** add AI co-author lines (`Co-Authored-By`), "Generated with" footers, or any AI attribution in commits or PR descriptions.

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2026 Jonathan PHILIPPE
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.