@corbat-tech/coding-standards-mcp 1.0.2 → 1.1.0

package/profiles/examples/startup-fast.yaml

@@ -0,0 +1,67 @@
+# ============================================================================
+# CORBAT MCP - Startup Fast Profile (Example)
+# ============================================================================
+# For startups and MVPs that prioritize speed over perfection.
+# Relaxed rules while still maintaining basic quality.
+#
+# Usage:
+#   1. Copy this file to profiles/custom/startup-fast.yaml
+#   2. Or reference in .corbat.json: { "profile": "startup-fast" }
+# ============================================================================
+
+name: "Startup Fast"
+description: "Pragmatic standards for startups - ship fast while maintaining basic quality"
+extends: "nodejs"
+
+# Relaxed code quality for faster iteration
+codeQuality:
+  maxMethodLines: 30           # More lenient (default: 20)
+  maxClassLines: 300           # More lenient (default: 200)
+  maxFileLines: 500            # More lenient (default: 400)
+  maxMethodParameters: 5       # More lenient (default: 4)
+  maxCyclomaticComplexity: 15  # More lenient (default: 10)
+  minimumTestCoverage: 60      # More lenient (default: 80)
+  requireDocumentation: false  # Don't require docs on everything
+  requireTests: true           # Still require tests
+  principles:
+    - "Working code > perfect code"
+    - "Test critical paths thoroughly"
+    - "Document only complex logic"
+    - "Refactor when it hurts, not before"
+
+# Simpler testing requirements
+testing:
+  framework: "Vitest"
+  assertionLibrary: "Vitest"
+  mockingLibrary: "Vitest"
+  types:
+    unit:
+      suffix: "test"
+      coverage: 60
+      fastExecution: true
+    integration:
+      suffix: "integration.test"
+      useTestcontainers: false  # Keep it simple initially
+    e2e:
+      framework: "Playwright"
+
+# Simpler architecture - avoid over-engineering
+architecture:
+  type: "feature-based"
+  enforceLayerDependencies: false  # Allow flexibility
+
+# No strict DDD/CQRS requirements
+ddd:
+  enabled: false
+
+cqrs:
+  enabled: false
+
+# Basic security only
+security:
+  authentication:
+    method: "JWT"
+  practices:
+    - "Validate user input"
+    - "Use HTTPS in production"
+    - "Don't log sensitive data"

package/profiles/examples/strict-enterprise.yaml

@@ -0,0 +1,62 @@
+# ============================================================================
+# CORBAT MCP - Strict Enterprise Profile (Example)
+# ============================================================================
+# For enterprise projects with strict quality requirements.
+# Copy to profiles/custom/ and modify as needed.
+#
+# Usage:
+#   1. Copy this file to profiles/custom/strict-enterprise.yaml
+#   2. Or reference in .corbat.json: { "profile": "strict-enterprise" }
+# ============================================================================
+
+name: "Strict Enterprise"
+description: "Enterprise-grade standards with strict quality gates for mission-critical systems"
+extends: "java-spring-backend"
+
+# Override code quality with stricter limits
+codeQuality:
+  maxMethodLines: 15           # Stricter than default (20)
+  maxClassLines: 150           # Stricter than default (200)
+  maxFileLines: 300            # Stricter than default (400)
+  maxMethodParameters: 3       # Stricter than default (4)
+  maxCyclomaticComplexity: 8   # Stricter than default (10)
+  minimumTestCoverage: 90      # Stricter than default (80)
+  requireDocumentation: true
+  requireTests: true
+  principles:
+    - "SOLID principles are mandatory"
+    - "All public APIs must have JavaDoc"
+    - "No @SuppressWarnings without justification comment"
+    - "All TODOs must have JIRA ticket reference"
+
+# Enhanced testing requirements
+testing:
+  framework: "JUnit5"
+  assertionLibrary: "AssertJ"
+  mockingLibrary: "Mockito"
+  types:
+    unit:
+      suffix: "Test"
+      coverage: 90
+      fastExecution: true
+    integration:
+      suffix: "IT"
+      useTestcontainers: true
+    architecture:
+      tool: "ArchUnit"
+      recommended: true
+
+# Stricter security requirements
+security:
+  authentication:
+    method: "OAuth2/OIDC"
+  authorization:
+    method: "RBAC with fine-grained permissions"
+    framework: "Spring Security"
+  practices:
+    - "All endpoints require authentication except health checks"
+    - "Sensitive data must be encrypted at rest and in transit"
+    - "Input validation on all external boundaries"
+    - "Security headers on all HTTP responses"
+    - "Rate limiting on public endpoints"
+    - "Audit logging for all data modifications"