@harness-forge/cli 0.1.0

package/rules/golang/README.md

@@ -0,0 +1,19 @@
+# Go rules
+
+## Apply Order
+
+1. start with `rules/common/`
+2. layer `rules/golang/` on top for package, API, and testing choices
+3. consult the structured docs and examples before deviating from the promoted patterns
+
+## Focus Areas
+
+- package layout and public API boundaries
+- error handling, testing, and concurrency
+- service overlays such as Gin when relevant
+
+## Related Pack Assets
+
+- `knowledge-bases/structured/go/docs/`
+- `knowledge-bases/structured/go/examples/`
+- `skills/go-engineering/SKILL.md`

package/rules/golang/coding-style.md

@@ -0,0 +1,3 @@
+# Go coding style
+
+Favor readable, explicit code and consistent error handling.

package/rules/golang/patterns.md

@@ -0,0 +1,3 @@
+# Go patterns
+
+Prefer well-known project layouts, dependency boundaries, and testable seams.

package/rules/golang/security.md

@@ -0,0 +1,3 @@
+# Go security
+
+Validate untrusted input, avoid secret leakage, and prefer safe default execution paths.

package/rules/golang/testing.md

@@ -0,0 +1,3 @@
+# Go testing
+
+Keep a fast default test command and cover critical behavior before refactors.

package/rules/golang/tooling.md

@@ -0,0 +1,3 @@
+# Go tooling
+
+Document the expected formatter, linter, build command, and test command.

package/rules/java/README.md

@@ -0,0 +1,41 @@
+---
+id: rules-java
+kind: rule
+title: Java Rules
+summary: Entry point for the seeded Java baseline and language-specific rule set.
+status: stable
+owner: core
+applies_to:
+  - codex
+  - claude-code
+  - cursor
+  - opencode
+languages:
+  - java
+generated: false
+---
+# Java Rules
+
+## Promoted baseline guidance
+
+- `rules/common/coding-style.md`
+- `rules/common/patterns.md`
+- `rules/common/testing.md`
+- `rules/common/security.md`
+- `rules/common/hooks.md`
+
+## Promoted language-specific guidance
+
+- `rules/java/coding-style.md`
+- `rules/java/patterns.md`
+- `rules/java/testing.md`
+- `rules/java/security.md`
+- `rules/java/hooks.md`
+
+## Canonical seed source
+
+- `knowledge-bases/seeded/java/rules/java/coding-style.md`
+- `knowledge-bases/seeded/java/rules/java/patterns.md`
+- `knowledge-bases/seeded/java/rules/java/testing.md`
+- `knowledge-bases/seeded/java/rules/java/security.md`
+- `knowledge-bases/seeded/java/rules/java/hooks.md`

package/rules/java/coding-style.md

@@ -0,0 +1,22 @@
+---
+paths:
+  - "**/*.java"
+extends: ../common/coding-style.md
+language: java
+layer: language
+---
+# Java Coding Style
+
+> This file extends [common/coding-style.md](../common/coding-style.md) with Java-specific guidance.
+
+## Defaults
+
+- Prefer immutable models and `record` for value types where supported.
+- Use constructor injection, not field injection.
+- Keep package structure aligned with domains or features.
+- Keep APIs explicit and readable rather than overly abstract.
+
+## Modern language features
+
+- Use records, sealed hierarchies, pattern matching, text blocks, and switch expressions when they improve clarity.
+- Avoid introducing modern syntax only for novelty; keep readability first.

package/rules/java/hooks.md

@@ -0,0 +1,23 @@
+---
+paths:
+  - "**/*.java"
+  - "**/pom.xml"
+  - "**/build.gradle*"
+extends: ../common/hooks.md
+language: java
+layer: language
+---
+# Java Hooks
+
+> This file extends [common/hooks.md](../common/hooks.md) with Java-specific hook suggestions.
+
+## Post-edit hooks
+
+- format with Spotless or project formatter
+- compile changed modules
+- run nearby tests when behavior changes
+
+## Stop hooks
+
+- final module build
+- dependency vulnerability check when build files change

package/rules/java/patterns.md

@@ -0,0 +1,22 @@
+---
+paths:
+  - "**/*.java"
+extends: ../common/patterns.md
+language: java
+layer: language
+---
+# Java Patterns
+
+> This file extends [common/patterns.md](../common/patterns.md) with Java-specific patterns.
+
+## Recommended architecture
+
+- Keep controllers/resources thin.
+- Put orchestration in services/use cases.
+- Keep persistence and transport concerns away from the domain model.
+- Prefer explicit transaction boundaries.
+
+## Build systems
+
+- Support both Gradle and Maven in docs where practical.
+- Do not make framework-specific assumptions in core rules unless the file is clearly framework-scoped.

package/rules/java/security.md

@@ -0,0 +1,21 @@
+---
+paths:
+  - "**/*.java"
+extends: ../common/security.md
+language: java
+layer: language
+---
+# Java Security
+
+> This file extends [common/security.md](../common/security.md) with Java-specific security guidance.
+
+## Application security
+
+- Validate external inputs at the web or messaging edge.
+- Use framework security primitives instead of ad hoc auth parsing.
+- Do not expose stack traces, SQL text, or internal paths in responses.
+
+## Data access
+
+- Use prepared statements or framework equivalents.
+- Review ORM fetch strategies and serialization carefully to avoid data leakage.

package/rules/java/testing.md

@@ -0,0 +1,23 @@
+---
+paths:
+  - "**/*.java"
+extends: ../common/testing.md
+language: java
+layer: language
+---
+# Java Testing
+
+> This file extends [common/testing.md](../common/testing.md) with Java-specific testing guidance.
+
+## Defaults
+
+- Prefer JUnit 5.
+- Prefer AssertJ for fluent assertions.
+- Use Mockito sparingly; prefer real collaborators when they are cheap to construct.
+- Use Testcontainers for integration tests with real databases or brokers.
+
+## Test layering
+
+- fast domain/unit tests
+- slice tests for web/data boundaries
+- integration tests for full behavior

package/rules/kotlin/README.md

@@ -0,0 +1,19 @@
+# Kotlin rules
+
+## Apply Order
+
+1. start with `rules/common/`
+2. layer `rules/kotlin/` on top for module, nullability, and coroutine choices
+3. consult the structured docs and examples before deviating from the promoted patterns
+
+## Focus Areas
+
+- module boundaries and state handling
+- testing, null-safety, and concurrency
+- framework overlays such as Ktor when relevant
+
+## Related Pack Assets
+
+- `knowledge-bases/structured/kotlin/docs/`
+- `knowledge-bases/structured/kotlin/examples/`
+- `skills/kotlin-engineering/SKILL.md`

package/rules/kotlin/coding-style.md

@@ -0,0 +1,3 @@
+# Kotlin coding style
+
+Favor readable, explicit code and consistent error handling.

package/rules/kotlin/patterns.md

@@ -0,0 +1,3 @@
+# Kotlin patterns
+
+Prefer well-known project layouts, dependency boundaries, and testable seams.

package/rules/kotlin/security.md

@@ -0,0 +1,3 @@
+# Kotlin security
+
+Validate untrusted input, avoid secret leakage, and prefer safe default execution paths.

package/rules/kotlin/testing.md

@@ -0,0 +1,3 @@
+# Kotlin testing
+
+Keep a fast default test command and cover critical behavior before refactors.

package/rules/kotlin/tooling.md

@@ -0,0 +1,3 @@
+# Kotlin tooling
+
+Document the expected formatter, linter, build command, and test command.

package/rules/lua/README.md

@@ -0,0 +1,41 @@
+---
+id: rules-lua
+kind: rule
+title: Lua Rules
+summary: Entry point for the seeded Lua baseline and language-specific rule set.
+status: stable
+owner: core
+applies_to:
+  - codex
+  - claude-code
+  - cursor
+  - opencode
+languages:
+  - lua
+generated: false
+---
+# Lua Rules
+
+## Promoted baseline guidance
+
+- `rules/common/coding-style.md`
+- `rules/common/patterns.md`
+- `rules/common/testing.md`
+- `rules/common/security.md`
+- `rules/common/hooks.md`
+
+## Promoted language-specific guidance
+
+- `rules/lua/coding-style.md`
+- `rules/lua/patterns.md`
+- `rules/lua/testing.md`
+- `rules/lua/security.md`
+- `rules/lua/hooks.md`
+
+## Canonical seed source
+
+- `knowledge-bases/seeded/lua/rules/lua/coding-style.md`
+- `knowledge-bases/seeded/lua/rules/lua/patterns.md`
+- `knowledge-bases/seeded/lua/rules/lua/testing.md`
+- `knowledge-bases/seeded/lua/rules/lua/security.md`
+- `knowledge-bases/seeded/lua/rules/lua/hooks.md`

package/rules/lua/coding-style.md

@@ -0,0 +1,27 @@
+---
+paths:
+  - "**/*.lua"
+extends: ../common/coding-style.md
+language: lua
+layer: language
+---
+# Lua Coding Style
+
+> This file extends [common/coding-style.md](../common/coding-style.md) with Lua-specific guidance.
+
+## Defaults
+
+- Keep modules small and explicit.
+- Avoid accidental globals; prefer `local` by default.
+- Use tables deliberately: distinguish array-like, map-like, and object-like usage.
+- Prefer clear function contracts over metatable cleverness.
+
+## Nil and truthiness
+
+- Document when `nil` is a valid return value.
+- Avoid APIs where `false` and `nil` become ambiguous.
+
+## Module design
+
+- Return explicit module tables.
+- Keep side effects at module load time minimal.

package/rules/lua/hooks.md

@@ -0,0 +1,21 @@
+---
+paths:
+  - "**/*.lua"
+extends: ../common/hooks.md
+language: lua
+layer: language
+---
+# Lua Hooks
+
+> This file extends [common/hooks.md](../common/hooks.md) with Lua-specific hook suggestions.
+
+## Post-edit hooks
+
+- `stylua` on edited files
+- `luacheck` for static analysis
+- `busted` for nearby test suites
+
+## Stop hooks
+
+- host-specific smoke test when plugin/runtime integration changed
+- warn on shell execution changes and dynamic code loading

package/rules/lua/patterns.md

@@ -0,0 +1,23 @@
+---
+paths:
+  - "**/*.lua"
+extends: ../common/patterns.md
+language: lua
+layer: language
+---
+# Lua Patterns
+
+> This file extends [common/patterns.md](../common/patterns.md) with Lua-specific patterns.
+
+## Recommended patterns
+
+- pure helper modules for business logic
+- adapter modules for host/editor/runtime integration
+- table-based configuration with validation/normalization step
+- explicit module return tables instead of hidden shared state
+
+## Environment-specific notes
+
+- Neovim: isolate editor API calls behind small adapters.
+- OpenResty: separate request parsing, business logic, and response writing.
+- Games/embedded hosts: isolate frame/update state mutation from pure computations.

package/rules/lua/security.md

@@ -0,0 +1,20 @@
+---
+paths:
+  - "**/*.lua"
+extends: ../common/security.md
+language: lua
+layer: language
+---
+# Lua Security
+
+> This file extends [common/security.md](../common/security.md) with Lua-specific security guidance.
+
+## Defaults
+
+- Never concatenate untrusted input into shell commands.
+- Validate file paths, command arguments, and network inputs.
+- Be careful with dynamic `load`, `loadfile`, or code evaluation features.
+
+## Host-specific note
+
+- OpenResty and editor/plugin environments still process untrusted data; validate aggressively at boundaries.

package/rules/lua/testing.md

@@ -0,0 +1,23 @@
+---
+paths:
+  - "**/*.lua"
+extends: ../common/testing.md
+language: lua
+layer: language
+---
+# Lua Testing
+
+> This file extends [common/testing.md](../common/testing.md) with Lua-specific testing guidance.
+
+## Defaults
+
+- Use Busted for Lua tests where practical.
+- Prefer pure functions and small modules that are easy to test outside the host runtime.
+- Stub host APIs explicitly in Neovim, OpenResty, or game-hosted code.
+
+## Coverage priorities
+
+- config normalization
+- command routing
+- host API adapters
+- serialization/parsing behavior

package/rules/perl/README.md

@@ -0,0 +1,19 @@
+# Perl rules
+
+## Apply Order
+
+1. start with `rules/common/`
+2. layer `rules/perl/` on top for module, compatibility, and testing choices
+3. consult the structured docs and examples before deviating from the promoted patterns
+
+## Focus Areas
+
+- module structure and compatibility-safe refactors
+- testing, validation, and runtime expectations
+- legacy automation constraints when relevant
+
+## Related Pack Assets
+
+- `knowledge-bases/structured/perl/docs/`
+- `knowledge-bases/structured/perl/examples/`
+- `skills/perl-engineering/SKILL.md`

package/rules/perl/coding-style.md

@@ -0,0 +1,3 @@
+# Perl coding style
+
+Favor readable, explicit code and consistent error handling.

package/rules/perl/patterns.md

@@ -0,0 +1,3 @@
+# Perl patterns
+
+Prefer well-known project layouts, dependency boundaries, and testable seams.

package/rules/perl/security.md

@@ -0,0 +1,3 @@
+# Perl security
+
+Validate untrusted input, avoid secret leakage, and prefer safe default execution paths.

package/rules/perl/testing.md

@@ -0,0 +1,3 @@
+# Perl testing
+
+Keep a fast default test command and cover critical behavior before refactors.

package/rules/perl/tooling.md

@@ -0,0 +1,3 @@
+# Perl tooling
+
+Document the expected formatter, linter, build command, and test command.

package/rules/php/README.md

@@ -0,0 +1,19 @@
+# PHP rules
+
+## Apply Order
+
+1. start with `rules/common/`
+2. layer `rules/php/` on top for application, framework, and testing choices
+3. consult the structured docs and examples before deviating from the promoted patterns
+
+## Focus Areas
+
+- application structure and dependency flow
+- validation, testing, and framework behavior
+- overlays such as Laravel and Symfony when relevant
+
+## Related Pack Assets
+
+- `knowledge-bases/structured/php/docs/`
+- `knowledge-bases/structured/php/examples/`
+- `skills/php-engineering/SKILL.md`

package/rules/php/coding-style.md

@@ -0,0 +1,3 @@
+# PHP coding style
+
+Favor readable, explicit code and consistent error handling.

package/rules/php/patterns.md

@@ -0,0 +1,3 @@
+# PHP patterns
+
+Prefer well-known project layouts, dependency boundaries, and testable seams.

package/rules/php/security.md

@@ -0,0 +1,3 @@
+# PHP security
+
+Validate untrusted input, avoid secret leakage, and prefer safe default execution paths.

package/rules/php/testing.md

@@ -0,0 +1,3 @@
+# PHP testing
+
+Keep a fast default test command and cover critical behavior before refactors.

package/rules/php/tooling.md

@@ -0,0 +1,3 @@
+# PHP tooling
+
+Document the expected formatter, linter, build command, and test command.

package/rules/powershell/README.md

@@ -0,0 +1,41 @@
+---
+id: rules-powershell
+kind: rule
+title: PowerShell Rules
+summary: Entry point for the seeded PowerShell baseline and language-specific rule set.
+status: stable
+owner: core
+applies_to:
+  - codex
+  - claude-code
+  - cursor
+  - opencode
+languages:
+  - powershell
+generated: false
+---
+# PowerShell Rules
+
+## Promoted baseline guidance
+
+- `rules/common/coding-style.md`
+- `rules/common/patterns.md`
+- `rules/common/testing.md`
+- `rules/common/security.md`
+- `rules/common/hooks.md`
+
+## Promoted language-specific guidance
+
+- `rules/powershell/coding-style.md`
+- `rules/powershell/patterns.md`
+- `rules/powershell/testing.md`
+- `rules/powershell/security.md`
+- `rules/powershell/hooks.md`
+
+## Canonical seed source
+
+- `knowledge-bases/seeded/powershell/rules/powershell/coding-style.md`
+- `knowledge-bases/seeded/powershell/rules/powershell/patterns.md`
+- `knowledge-bases/seeded/powershell/rules/powershell/testing.md`
+- `knowledge-bases/seeded/powershell/rules/powershell/security.md`
+- `knowledge-bases/seeded/powershell/rules/powershell/hooks.md`

package/rules/powershell/coding-style.md

@@ -0,0 +1,25 @@
+---
+paths:
+  - "**/*.ps1"
+  - "**/*.psm1"
+  - "**/*.psd1"
+extends: ../common/coding-style.md
+language: powershell
+layer: language
+---
+# PowerShell Coding Style
+
+> This file extends [common/coding-style.md](../common/coding-style.md) with PowerShell-specific guidance.
+
+## Defaults
+
+- Prefer advanced functions with `[CmdletBinding()]` for reusable automation.
+- Design around the object pipeline, not text scraping, when the source supports objects.
+- Use approved verbs and clear noun names.
+- Avoid implicit global state; keep script/module scope disciplined.
+
+## Parameters
+
+- Validate parameters explicitly.
+- Provide pipeline support only when it makes the function clearer and safer.
+- Prefer structured objects over stringly typed parameter bundles.

package/rules/powershell/hooks.md

@@ -0,0 +1,24 @@
+---
+paths:
+  - "**/*.ps1"
+  - "**/*.psm1"
+  - "**/*.psd1"
+extends: ../common/hooks.md
+language: powershell
+layer: language
+---
+# PowerShell Hooks
+
+> This file extends [common/hooks.md](../common/hooks.md) with PowerShell-specific hook suggestions.
+
+## Post-edit hooks
+
+- `Invoke-ScriptAnalyzer` on affected files
+- Pester tests for nearby modules/scripts
+- manifest validation when `.psd1` changes
+
+## Stop hooks
+
+- final script analyzer pass
+- optional smoke run for bootstrap/install scripts
+- warn on credential handling or remoting changes

package/rules/powershell/patterns.md

@@ -0,0 +1,23 @@
+---
+paths:
+  - "**/*.ps1"
+  - "**/*.psm1"
+extends: ../common/patterns.md
+language: powershell
+layer: language
+---
+# PowerShell Patterns
+
+> This file extends [common/patterns.md](../common/patterns.md) with PowerShell-specific patterns.
+
+## Recommended patterns
+
+- advanced functions for reusable operations
+- script modules for cohesive command groups
+- small wrappers around external CLIs that normalize output into objects
+- explicit diagnostic/result objects for automation pipelines
+
+## Cross-platform note
+
+- Keep PowerShell 7+ as the default unless a Windows-only dependency is truly required.
+- Call out Windows PowerShell compatibility separately when necessary.

package/rules/powershell/security.md

@@ -0,0 +1,23 @@
+---
+paths:
+  - "**/*.ps1"
+  - "**/*.psm1"
+extends: ../common/security.md
+language: powershell
+layer: language
+---
+# PowerShell Security
+
+> This file extends [common/security.md](../common/security.md) with PowerShell-specific security guidance.
+
+## Defaults
+
+- Avoid `Invoke-Expression` unless there is a compelling reviewed reason.
+- Validate paths, remoting targets, and CLI arguments.
+- Redact credentials and tokens from logs.
+- Use secure credential flows and managed identities where possible.
+
+## Execution safety
+
+- Support `-WhatIf`/`-Confirm` for destructive operations when appropriate.
+- Prefer explicit allowlists over free-form command construction.