@hivehub/rulebook 1.2.0

package/templates/workflows/go-test.yml

@@ -0,0 +1,59 @@
+name: Go Tests
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, windows-latest, macos-latest ]
+        go-version: [ '1.21', '1.22' ]
+
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Set up Go ${{ matrix.go-version }}
+      uses: actions/setup-go@v5
+      with:
+        go-version: ${{ matrix.go-version }}
+        cache: true
+    
+    - name: Download dependencies
+      run: go mod download
+    
+    - name: Verify dependencies
+      run: go mod verify
+    
+    - name: Build
+      run: go build -v ./...
+    
+    - name: Run tests
+      run: go test -v -race -coverprofile=coverage.out ./...
+    
+    - name: Generate coverage report
+      if: matrix.os == 'ubuntu-latest' && matrix.go-version == '1.22'
+      run: |
+        go tool cover -func=coverage.out
+        go tool cover -html=coverage.out -o coverage.html
+    
+    - name: Upload coverage to Codecov
+      uses: codecov/codecov-action@v4
+      if: matrix.os == 'ubuntu-latest' && matrix.go-version == '1.22'
+      with:
+        files: ./coverage.out
+        flags: unittests
+        fail_ci_if_error: false
+    
+    - name: Security audit
+      run: |
+        echo "Running security audit..."
+        go install github.com/sonatypecommunity/nancy@latest
+        go list -json -m all | nancy sleuth || true
+        echo "Checking for outdated modules..."
+        go list -u -m all || true
+

package/templates/workflows/java-lint.yml

@@ -0,0 +1,60 @@
+name: Java Lint
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  lint-maven:
+    runs-on: ubuntu-latest
+    if: hashFiles('**/pom.xml') != ''
+
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Set up JDK 21
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'temurin'
+        cache: maven
+    
+    - name: Run Checkstyle
+      run: mvn checkstyle:check
+      continue-on-error: true
+    
+    - name: Run PMD
+      run: mvn pmd:check
+      continue-on-error: true
+    
+    - name: Run SpotBugs
+      run: mvn spotbugs:check
+      continue-on-error: true
+
+  lint-gradle:
+    runs-on: ubuntu-latest
+    if: hashFiles('**/build.gradle*') != ''
+
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Set up JDK 21
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'temurin'
+        cache: gradle
+    
+    - name: Grant execute permission for gradlew
+      run: chmod +x gradlew
+    
+    - name: Run Checkstyle
+      run: ./gradlew checkstyleMain checkstyleTest
+      continue-on-error: true
+    
+    - name: Run SpotBugs
+      run: ./gradlew spotbugsMain spotbugsTest
+      continue-on-error: true
+

package/templates/workflows/java-publish.yml

@@ -0,0 +1,120 @@
+name: Publish Java Package
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to publish (e.g., v1.0.0)'
+        required: true
+
+jobs:
+  publish-maven:
+    runs-on: ubuntu-latest
+    if: hashFiles('**/pom.xml') != ''
+    permissions:
+      contents: read
+      packages: write
+    
+    steps:
+    - uses: actions/checkout@v5
+      with:
+        ref: ${{ github.event.inputs.tag || github.ref }}
+    
+    - name: Set up JDK
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'temurin'
+        cache: 'maven'
+        server-id: central  # For Maven Central
+        server-username: MAVEN_USERNAME
+        server-password: MAVEN_PASSWORD
+        gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+        gpg-passphrase: MAVEN_GPG_PASSPHRASE
+    
+    - name: Verify version matches tag
+      run: |
+        TAG="${{ github.event.inputs.tag || github.ref_name }}"
+        TAG_VERSION="${TAG#v}"
+        POM_VERSION=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
+        if [ "$POM_VERSION" != "$TAG_VERSION" ]; then
+          echo "Error: pom.xml version ($POM_VERSION) does not match tag ($TAG_VERSION)"
+          exit 1
+        fi
+        echo "Version check passed: $POM_VERSION"
+    
+    - name: Run tests
+      run: mvn -B test
+    
+    - name: Build package
+      run: mvn -B clean package -DskipTests
+    
+    - name: Publish to GitHub Packages
+      run: mvn -B deploy -DskipTests
+      env:
+        MAVEN_USERNAME: ${{ github.actor }}
+        MAVEN_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
+    
+    - name: Publish to Maven Central
+      if: secrets.MAVEN_USERNAME != ''
+      run: mvn -B deploy -DskipTests -P release
+      env:
+        MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
+        MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+        MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+  
+  publish-gradle:
+    runs-on: ubuntu-latest
+    if: hashFiles('**/build.gradle*') != ''
+    permissions:
+      contents: read
+      packages: write
+    
+    steps:
+    - uses: actions/checkout@v5
+      with:
+        ref: ${{ github.event.inputs.tag || github.ref }}
+    
+    - name: Set up JDK
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'temurin'
+        cache: 'gradle'
+    
+    - name: Grant execute permission for gradlew
+      run: chmod +x gradlew
+    
+    - name: Verify version matches tag
+      run: |
+        TAG="${{ github.event.inputs.tag || github.ref_name }}"
+        TAG_VERSION="${TAG#v}"
+        GRADLE_VERSION=$(./gradlew properties -q | grep "^version:" | awk '{print $2}')
+        if [ "$GRADLE_VERSION" != "$TAG_VERSION" ]; then
+          echo "Error: build.gradle version ($GRADLE_VERSION) does not match tag ($TAG_VERSION)"
+          exit 1
+        fi
+        echo "Version check passed: $GRADLE_VERSION"
+    
+    - name: Run tests
+      run: ./gradlew test
+    
+    - name: Build package
+      run: ./gradlew build -x test
+    
+    - name: Publish to GitHub Packages
+      run: ./gradlew publish
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    
+    - name: Publish to Maven Central
+      if: secrets.SIGNING_KEY != ''
+      run: ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository
+      env:
+        SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+        SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
+        SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
+

package/templates/workflows/java-test.yml

@@ -0,0 +1,85 @@
+name: Java Tests
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  test-maven:
+    runs-on: ${{ matrix.os }}
+    if: hashFiles('**/pom.xml') != ''
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, windows-latest ]
+        java-version: [ '17', '21' ]
+
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Set up JDK ${{ matrix.java-version }}
+      uses: actions/setup-java@v4
+      with:
+        java-version: ${{ matrix.java-version }}
+        distribution: 'temurin'
+        cache: maven
+    
+    - name: Build with Maven
+      run: mvn -B compile --file pom.xml
+    
+    - name: Run tests
+      run: mvn -B test --file pom.xml
+    
+    - name: Generate coverage report
+      if: matrix.os == 'ubuntu-latest' && matrix.java-version == '21'
+      run: mvn -B jacoco:report
+    
+    - name: Upload coverage to Codecov
+      uses: codecov/codecov-action@v4
+      if: matrix.os == 'ubuntu-latest' && matrix.java-version == '21'
+      with:
+        files: ./target/site/jacoco/jacoco.xml
+        flags: unittests
+        fail_ci_if_error: false
+
+  test-gradle:
+    runs-on: ${{ matrix.os }}
+    if: hashFiles('**/build.gradle*') != ''
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, windows-latest ]
+        java-version: [ '17', '21' ]
+
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Set up JDK ${{ matrix.java-version }}
+      uses: actions/setup-java@v4
+      with:
+        java-version: ${{ matrix.java-version }}
+        distribution: 'temurin'
+        cache: gradle
+    
+    - name: Grant execute permission for gradlew
+      if: runner.os != 'Windows'
+      run: chmod +x gradlew
+    
+    - name: Build with Gradle
+      run: ./gradlew build -x test
+    
+    - name: Run tests
+      run: ./gradlew test
+    
+    - name: Generate coverage report
+      if: matrix.os == 'ubuntu-latest' && matrix.java-version == '21'
+      run: ./gradlew jacocoTestReport
+    
+    - name: Upload coverage to Codecov
+      uses: codecov/codecov-action@v4
+      if: matrix.os == 'ubuntu-latest' && matrix.java-version == '21'
+      with:
+        files: ./build/reports/jacoco/test/jacocoTestReport.xml
+        flags: unittests
+        fail_ci_if_error: false
+

package/templates/workflows/kotlin-lint.yml

@@ -0,0 +1,34 @@
+name: Kotlin Lint
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - uses: actions/checkout@v5
+    
+    - name: Set up JDK
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'temurin'
+        cache: gradle
+    
+    - name: Grant execute permission for gradlew
+      run: chmod +x gradlew
+    
+    - name: Run ktlint
+      run: ./gradlew ktlintCheck
+    
+    - name: Run Detekt
+      run: ./gradlew detekt
+    
+    - name: Build with warnings as errors
+      run: ./gradlew build -x test
+

package/templates/workflows/kotlin-publish.yml

@@ -0,0 +1,56 @@
+name: Publish Kotlin Package
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to publish (e.g., v1.0.0)'
+        required: true
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    
+    steps:
+    - uses: actions/checkout@v5
+      with:
+        ref: ${{ github.event.inputs.tag || github.ref }}
+    
+    - name: Set up JDK
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'temurin'
+        cache: gradle
+    
+    - name: Grant execute permission for gradlew
+      run: chmod +x gradlew
+    
+    - name: Run tests
+      run: ./gradlew test
+    
+    - name: Run Detekt
+      run: ./gradlew detekt
+    
+    - name: Build
+      run: ./gradlew build -x test
+    
+    - name: Publish to GitHub Packages
+      run: ./gradlew publish
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    
+    - name: Publish to Maven Central
+      if: secrets.SIGNING_KEY != ''
+      run: ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository
+      env:
+        SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+        SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
+        SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
+

package/templates/workflows/kotlin-test.yml

@@ -0,0 +1,48 @@
+name: Kotlin Tests
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, windows-latest ]
+        java-version: [ '17', '21' ]
+    
+    steps:
+    - uses: actions/checkout@v5
+    
+    - name: Set up JDK ${{ matrix.java-version }}
+      uses: actions/setup-java@v4
+      with:
+        java-version: ${{ matrix.java-version }}
+        distribution: 'temurin'
+        cache: gradle
+    
+    - name: Grant execute permission for gradlew
+      if: runner.os != 'Windows'
+      run: chmod +x gradlew
+    
+    - name: Build with Gradle
+      run: ./gradlew build -x test
+    
+    - name: Run tests
+      run: ./gradlew test
+    
+    - name: Generate coverage report
+      if: matrix.os == 'ubuntu-latest' && matrix.java-version == '21'
+      run: ./gradlew koverXmlReport
+    
+    - name: Upload coverage to Codecov
+      uses: codecov/codecov-action@v4
+      if: matrix.os == 'ubuntu-latest' && matrix.java-version == '21'
+      with:
+        files: ./build/reports/kover/report.xml
+        flags: unittests
+        fail_ci_if_error: false
+

package/templates/workflows/php-lint.yml

@@ -0,0 +1,39 @@
+name: PHP Lint
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - uses: actions/checkout@v5
+    
+    - name: Setup PHP
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: '8.3'
+        extensions: mbstring, xml, ctype, iconv, intl
+    
+    - name: Cache Composer packages
+      uses: actions/cache@v4
+      with:
+        path: vendor
+        key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }}
+    
+    - name: Install dependencies
+      run: composer install --prefer-dist --no-progress
+    
+    - name: Run PHP-CS-Fixer
+      run: composer cs-check
+    
+    - name: Run PHPStan
+      run: composer stan
+    
+    - name: Run PHPCS
+      run: composer phpcs
+

package/templates/workflows/php-publish.yml

@@ -0,0 +1,50 @@
+name: Publish to Packagist
+
+# Note: Packagist automatically updates from GitHub when you push tags.
+# This workflow just validates the package before tagging.
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to publish (e.g., v1.0.0)'
+        required: true
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - uses: actions/checkout@v5
+      with:
+        ref: ${{ github.event.inputs.tag || github.ref }}
+    
+    - name: Setup PHP
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: '8.3'
+        extensions: mbstring, xml, ctype, iconv, intl
+    
+    - name: Validate composer.json
+      run: composer validate --strict
+    
+    - name: Install dependencies
+      run: composer install --prefer-dist --no-progress
+    
+    - name: Run tests
+      run: composer test
+    
+    - name: Run PHPStan
+      run: composer stan
+    
+    - name: Run PHP-CS-Fixer
+      run: composer cs-check
+    
+    - name: Package validated
+      run: |
+        echo "✅ Package validation successful"
+        echo "Packagist will automatically update from GitHub tag"
+        echo "View at: https://packagist.org/packages/${{ github.repository }}"
+

package/templates/workflows/php-test.yml

@@ -0,0 +1,54 @@
+name: PHP Tests
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, windows-latest ]
+        php-version: [ '8.2', '8.3' ]
+    
+    steps:
+    - uses: actions/checkout@v5
+    
+    - name: Setup PHP
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php-version }}
+        extensions: mbstring, xml, ctype, iconv, intl, pdo_sqlite, dom, filter, gd, json, pcov
+        coverage: pcov
+    
+    - name: Validate composer.json
+      run: composer validate --strict
+    
+    - name: Cache Composer packages
+      uses: actions/cache@v4
+      with:
+        path: vendor
+        key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }}
+        restore-keys: ${{ runner.os }}-php-
+    
+    - name: Install dependencies
+      run: composer install --prefer-dist --no-progress
+    
+    - name: Run tests
+      run: composer test
+    
+    - name: Generate coverage report
+      if: matrix.os == 'ubuntu-latest' && matrix.php-version == '8.3'
+      run: ./vendor/bin/phpunit --coverage-clover coverage.xml
+    
+    - name: Upload coverage to Codecov
+      uses: codecov/codecov-action@v4
+      if: matrix.os == 'ubuntu-latest' && matrix.php-version == '8.3'
+      with:
+        files: ./coverage.xml
+        flags: unittests
+        fail_ci_if_error: false
+

package/templates/workflows/python-lint.yml

@@ -0,0 +1,47 @@
+name: Python Lint
+
+on:
+  push:
+    branches: [ master, main, develop ]
+  pull_request:
+    branches: [ '**' ]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v5
+    
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.12'
+        # MONOREPO: Uncomment and adjust path if in monorepo subdirectory
+        # cache: 'pip'
+        # cache-dependency-path: 'subdirectory/requirements.txt'
+        # Note: Cache may fail in monorepo - disable if you get path resolution errors
+    
+    - name: Install dependencies
+      # MONOREPO: Add working-directory if in subdirectory
+      # working-directory: ./subdirectory
+      run: |
+        python -m pip install --upgrade pip
+        pip install ruff mypy black
+    
+    - name: Check code formatting with black
+      # MONOREPO: Add working-directory if in subdirectory
+      # working-directory: ./subdirectory
+      run: black --check .
+    
+    - name: Run ruff linter
+      # MONOREPO: Add working-directory if in subdirectory
+      # working-directory: ./subdirectory
+      run: ruff check .
+    
+    - name: Run mypy type checker
+      # MONOREPO: Add working-directory if in subdirectory
+      # working-directory: ./subdirectory
+      run: mypy . || echo "Type checking optional"
+      continue-on-error: true
+