@dewtech/dare-cli 3.2.0 → 3.4.0

package/templates/stacks/ruby-rails-8/.github/workflows/dare-ci.yml

@@ -1,112 +1,112 @@
-# DARE v3.1 — CI/CD Pipeline for Rails 8 stack
-# Runs on every push and pull_request
-# Validates: bundle audit + rubocop + rspec + dare:metrics (M-01 to M-04)
-
-name: DARE CI
-
-on:
-  push:
-    branches: ["**"]
-  pull_request:
-    branches: ["**"]
-
-jobs:
-  audit:
-    name: Audit dependencies
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.3"
-          bundler-cache: true
-      - name: bundle audit
-        run: |
-          gem install bundler-audit
-          bundle audit check --update
-
-  lint:
-    name: Lint (RuboCop)
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.3"
-          bundler-cache: true
-      - name: rubocop
-        run: bundle exec rubocop
-
-  test:
-    name: Test (Ruby ${{ matrix.ruby }})
-    runs-on: ubuntu-latest
-
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby: ["3.3"]
-
-    services:
-      postgres:
-        image: postgres:14
-        env:
-          POSTGRES_USER:     postgres
-          POSTGRES_PASSWORD: postgres
-          POSTGRES_DB:       app_test
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-        ports:
-          - 5432:5432
-
-      redis:
-        image: redis:7
-        options: >-
-          --health-cmd "redis-cli ping"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-        ports:
-          - 6379:6379
-
-    env:
-      RAILS_ENV:    test
-      DATABASE_URL: postgres://postgres:postgres@localhost:5432/app_test
-      REDIS_URL:    redis://localhost:6379/0
-      RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Set up Ruby ${{ matrix.ruby }}
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: true
-
-      - name: Set up database
-        run: bundle exec rails db:create db:migrate RAILS_ENV=test
-
-      - name: Run RSpec
-        run: bundle exec rspec --format progress --format RspecJunitFormatter --out tmp/rspec.xml
-        continue-on-error: false
-
-      - name: Run DARE metrics validation
-        run: bundle exec rake dare:metrics
-
-      - name: Upload test results
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: rspec-results
-          path: tmp/rspec.xml
-
-      - name: Upload DARE metrics
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: dare-metrics
-          path: tmp/dare_metrics.json
+# DARE v3.1 — CI/CD Pipeline for Rails 8 stack
+# Runs on every push and pull_request
+# Validates: bundle audit + rubocop + rspec + dare:metrics (M-01 to M-04)
+
+name: DARE CI
+
+on:
+  push:
+    branches: ["**"]
+  pull_request:
+    branches: ["**"]
+
+jobs:
+  audit:
+    name: Audit dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+      - name: bundle audit
+        run: |
+          gem install bundler-audit
+          bundle audit check --update
+
+  lint:
+    name: Lint (RuboCop)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+      - name: rubocop
+        run: bundle exec rubocop
+
+  test:
+    name: Test (Ruby ${{ matrix.ruby }})
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby: ["3.3"]
+
+    services:
+      postgres:
+        image: postgres:14
+        env:
+          POSTGRES_USER:     postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB:       app_test
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 5432:5432
+
+      redis:
+        image: redis:7
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 6379:6379
+
+    env:
+      RAILS_ENV:    test
+      DATABASE_URL: postgres://postgres:postgres@localhost:5432/app_test
+      REDIS_URL:    redis://localhost:6379/0
+      RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby ${{ matrix.ruby }}
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler-cache: true
+
+      - name: Set up database
+        run: bundle exec rails db:create db:migrate RAILS_ENV=test
+
+      - name: Run RSpec
+        run: bundle exec rspec --format progress --format RspecJunitFormatter --out tmp/rspec.xml
+        continue-on-error: false
+
+      - name: Run DARE metrics validation
+        run: bundle exec rake dare:metrics
+
+      - name: Upload test results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: rspec-results
+          path: tmp/rspec.xml
+
+      - name: Upload DARE metrics
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: dare-metrics
+          path: tmp/dare_metrics.json

package/templates/stacks/ruby-rails-8/Gemfile.erb

@@ -1,61 +1,61 @@
-# frozen_string_literal: true
-
-source "https://rubygems.org"
-
-ruby ">= 3.3.0"
-
-# Core — Rails 8 Omakase
-gem "rails", "~> 8.0"
-gem "puma", ">= 5.0"
-gem "bootsnap", require: false
-gem "tzinfo-data", platforms: %i[windows jruby]
-
-# Database
-gem "pg", "~> 1.1"
-
-# Solid Suite (Rails 8 Omakase)
-gem "solid_cache"
-gem "solid_queue"
-
-# Real-time
-gem "redis", "~> 5.0"
-gem "redis-actioncable", require: false
-
-# OpenAPI — single source of truth via rswag
-gem "rswag-api"
-gem "rswag-ui"
-
-# Rate limiting
-gem "rack-attack"
-
-# JSON Schema validation
-gem "json_schemer"
-
-# HTTP client for LLM providers
-gem "faraday", "~> 2.0"
-gem "faraday-retry"
-
-# Background processing
-gem "solid_queue"
-
-group :development, :test do
-  gem "debug", platforms: %i[mri windows linux]
-  gem "rspec-rails", "~> 6.0"
-  gem "factory_bot_rails", "~> 6.0"
-  gem "faker", "~> 3.0"
-  gem "rswag-specs"
-  gem "shoulda-matchers", "~> 5.0"
-  gem "simplecov", require: false
-end
-
-group :development do
-  gem "web-console"
-  gem "rack-mini-profiler"
-  gem "rubocop-rails-omakase", require: false
-end
-
-group :test do
-  gem "database_cleaner-active_record"
-  gem "webmock"
-  gem "vcr"
-end
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+
+ruby ">= 3.3.0"
+
+# Core — Rails 8 Omakase
+gem "rails", "~> 8.0"
+gem "puma", ">= 5.0"
+gem "bootsnap", require: false
+gem "tzinfo-data", platforms: %i[windows jruby]
+
+# Database
+gem "pg", "~> 1.1"
+
+# Solid Suite (Rails 8 Omakase)
+gem "solid_cache"
+gem "solid_queue"
+
+# Real-time
+gem "redis", "~> 5.0"
+gem "redis-actioncable", require: false
+
+# OpenAPI — single source of truth via rswag
+gem "rswag-api"
+gem "rswag-ui"
+
+# Rate limiting
+gem "rack-attack"
+
+# JSON Schema validation
+gem "json_schemer"
+
+# HTTP client for LLM providers
+gem "faraday", "~> 2.0"
+gem "faraday-retry"
+
+# Background processing
+gem "solid_queue"
+
+group :development, :test do
+  gem "debug", platforms: %i[mri windows linux]
+  gem "rspec-rails", "~> 6.0"
+  gem "factory_bot_rails", "~> 6.0"
+  gem "faker", "~> 3.0"
+  gem "rswag-specs"
+  gem "shoulda-matchers", "~> 5.0"
+  gem "simplecov", require: false
+end
+
+group :development do
+  gem "web-console"
+  gem "rack-mini-profiler"
+  gem "rubocop-rails-omakase", require: false
+end
+
+group :test do
+  gem "database_cleaner-active_record"
+  gem "webmock"
+  gem "vcr"
+end

package/templates/stacks/ruby-rails-8/app/channels/application_cable/channel.rb

@@ -1,11 +1,11 @@
-# frozen_string_literal: true
-
-# DARE v3.0 — ApplicationCable::Channel base
-# All channels inherit from this; subscription authorization happens here
-
-module ApplicationCable
-  class Channel < ActionCable::Channel::Base
-    # Convenience: access current_user from connection in all channels
-    delegate :current_user, to: :connection
-  end
-end
+# frozen_string_literal: true
+
+# DARE v3.0 — ApplicationCable::Channel base
+# All channels inherit from this; subscription authorization happens here
+
+module ApplicationCable
+  class Channel < ActionCable::Channel::Base
+    # Convenience: access current_user from connection in all channels
+    delegate :current_user, to: :connection
+  end
+end

package/templates/stacks/ruby-rails-8/app/channels/application_cable/connection.rb

@@ -1,34 +1,34 @@
-# frozen_string_literal: true
-
-# DARE v3.0 — Action Cable Connection with cookie-based auth
-# Convention (ADR-03): Every connection validates authentication
-# Unauthorized connections are rejected at the connection level
-
-module ApplicationCable
-  class Connection < ActionCable::Connection::Base
-    identified_by :current_user
-
-    def connect
-      self.current_user = find_verified_user
-    end
-
-    private
-
-    def find_verified_user
-      # Strategy 1: cookie-based session (most common for Rails apps)
-      if (user_id = cookies.signed[:user_id])
-        user = User.find_by(id: user_id)
-        return user if user&.active?
-      end
-
-      # Strategy 2: token-based (for mobile/API clients)
-      if (token = request.params[:token].presence || env["HTTP_X_ACTION_CABLE_TOKEN"])
-        # Implement your token lookup here:
-        # user = User.find_by_auth_token(token)
-        # return user if user&.active?
-      end
-
-      reject_unauthorized_connection
-    end
-  end
-end
+# frozen_string_literal: true
+
+# DARE v3.0 — Action Cable Connection with cookie-based auth
+# Convention (ADR-03): Every connection validates authentication
+# Unauthorized connections are rejected at the connection level
+
+module ApplicationCable
+  class Connection < ActionCable::Connection::Base
+    identified_by :current_user
+
+    def connect
+      self.current_user = find_verified_user
+    end
+
+    private
+
+    def find_verified_user
+      # Strategy 1: cookie-based session (most common for Rails apps)
+      if (user_id = cookies.signed[:user_id])
+        user = User.find_by(id: user_id)
+        return user if user&.active?
+      end
+
+      # Strategy 2: token-based (for mobile/API clients)
+      if (token = request.params[:token].presence || env["HTTP_X_ACTION_CABLE_TOKEN"])
+        # Implement your token lookup here:
+        # user = User.find_by_auth_token(token)
+        # return user if user&.active?
+      end
+
+      reject_unauthorized_connection
+    end
+  end
+end

package/templates/stacks/ruby-rails-8/app/channels/dare_updates_channel.rb

@@ -1,18 +1,18 @@
-# frozen_string_literal: true
-
-# DARE v3.0 — DareUpdatesChannel
-# Convention (ADR-03): subscriptions authorize before streaming
-# This is a generic channel for DARE system events (metrics, deploys, etc.)
-
-class DareUpdatesChannel < ApplicationCable::Channel
-  def subscribed
-    # Reject if not authenticated (connection already checks, but belt-and-suspenders)
-    reject_subscription unless current_user
-
-    stream_from "dare_updates:#{current_user.id}"
-  end
-
-  def unsubscribed
-    stop_all_streams
-  end
-end
+# frozen_string_literal: true
+
+# DARE v3.0 — DareUpdatesChannel
+# Convention (ADR-03): subscriptions authorize before streaming
+# This is a generic channel for DARE system events (metrics, deploys, etc.)
+
+class DareUpdatesChannel < ApplicationCable::Channel
+  def subscribed
+    # Reject if not authenticated (connection already checks, but belt-and-suspenders)
+    reject_subscription unless current_user
+
+    stream_from "dare_updates:#{current_user.id}"
+  end
+
+  def unsubscribed
+    stop_all_streams
+  end
+end

package/templates/stacks/ruby-rails-8/app/channels/user_updates_channel.rb

@@ -1,23 +1,23 @@
-# frozen_string_literal: true
-
-# DARE v3.0 — UserUpdatesChannel
-# Convention (ADR-03): per-user channel with authorization check
-# Frontend subscribes with: consumer.subscriptions.create({ channel: "UserUpdatesChannel", user_id: 123 })
-
-class UserUpdatesChannel < ApplicationCable::Channel
-  def subscribed
-    user_id = params[:user_id].to_i
-
-    # Authorization: only subscribe to your own updates (or admin)
-    unless current_user.can_view?(user_id)
-      reject_subscription
-      return
-    end
-
-    stream_for user_id
-  end
-
-  def unsubscribed
-    stop_all_streams
-  end
-end
+# frozen_string_literal: true
+
+# DARE v3.0 — UserUpdatesChannel
+# Convention (ADR-03): per-user channel with authorization check
+# Frontend subscribes with: consumer.subscriptions.create({ channel: "UserUpdatesChannel", user_id: 123 })
+
+class UserUpdatesChannel < ApplicationCable::Channel
+  def subscribed
+    user_id = params[:user_id].to_i
+
+    # Authorization: only subscribe to your own updates (or admin)
+    unless current_user.can_view?(user_id)
+      reject_subscription
+      return
+    end
+
+    stream_for user_id
+  end
+
+  def unsubscribed
+    stop_all_streams
+  end
+end

package/templates/stacks/ruby-rails-8/app/controllers/application_controller.rb

@@ -1,44 +1,44 @@
-# frozen_string_literal: true
-
-# DARE v3.0 — ApplicationController
-# - CSRF protection active (RS-01)
-# - RFC 7807 Problem Details included (D-006)
-# - Thin controller: HTTP concerns only, delegates to Services
-
-class ApplicationController < ActionController::API
-  include ProblemDetails
-
-  # Enforce JSON responses for all API endpoints
-  before_action :set_default_response_format
-
-  private
-
-  def set_default_response_format
-    request.format = :json
-  end
-
-  # Override in specific controllers if authentication is needed
-  def current_user
-    @current_user ||= authenticate_user_from_token
-  end
-
-  def authenticate_user_from_token
-    token = request.headers["Authorization"]&.sub(/\ABearer /, "")
-    return nil unless token
-
-    # TODO: implement your token strategy here (JWT, session, etc.)
-    # User.find_by_token(token)
-    nil
-  end
-
-  def require_authentication!
-    return if current_user
-
-    render_problem(
-      status: :unauthorized,
-      title:  "Unauthorized",
-      detail: "You must be authenticated to access this resource.",
-      type:   "https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/401"
-    )
-  end
-end
+# frozen_string_literal: true
+
+# DARE v3.0 — ApplicationController
+# - CSRF protection active (RS-01)
+# - RFC 7807 Problem Details included (D-006)
+# - Thin controller: HTTP concerns only, delegates to Services
+
+class ApplicationController < ActionController::API
+  include ProblemDetails
+
+  # Enforce JSON responses for all API endpoints
+  before_action :set_default_response_format
+
+  private
+
+  def set_default_response_format
+    request.format = :json
+  end
+
+  # Override in specific controllers if authentication is needed
+  def current_user
+    @current_user ||= authenticate_user_from_token
+  end
+
+  def authenticate_user_from_token
+    token = request.headers["Authorization"]&.sub(/\ABearer /, "")
+    return nil unless token
+
+    # TODO: implement your token strategy here (JWT, session, etc.)
+    # User.find_by_token(token)
+    nil
+  end
+
+  def require_authentication!
+    return if current_user
+
+    render_problem(
+      status: :unauthorized,
+      title:  "Unauthorized",
+      detail: "You must be authenticated to access this resource.",
+      type:   "https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/401"
+    )
+  end
+end