@hivehub/rulebook 5.1.3 → 5.2.0

package/templates/frameworks/ELECTRON.md

@@ -1,147 +1,147 @@
-<!-- ELECTRON:START -->
-# Electron Framework Rules
-
-**Language**: TypeScript, JavaScript  
-**Version**: Electron 28+
-
-## Setup & Configuration
-
-```typescript
-// main.ts (Main Process)
-import { app, BrowserWindow } from 'electron'
-import path from 'path'
-
-function createWindow() {
-  const win = new BrowserWindow({
-    width: 1200,
-    height: 800,
-    webPreferences: {
-      preload: path.join(__dirname, 'preload.js'),
-      contextIsolation: true,
-      nodeIntegration: false,
-    },
-  })
-
-  win.loadFile('index.html')
-}
-
-app.whenReady().then(createWindow)
-```
-
-## Quality Gates
-
-```bash
-# Type check
-npm run type-check
-
-# Lint
-npm run lint
-
-# Tests
-npm test
-
-# Build
-npm run build              # Compile TypeScript
-npm run package            # Package app
-npm run make               # Create distributables
-```
-
-## Best Practices
-
-✅ **DO:**
-- Use contextIsolation: true
-- Disable nodeIntegration
-- Use preload scripts for IPC
-- Implement auto-updates (electron-updater)
-- Sign and notarize apps (production)
-- Use Content Security Policy
-- Implement proper error handling
-- Separate main and renderer processes
-
-❌ **DON'T:**
-- Enable nodeIntegration in renderer
-- Skip contextIsolation
-- Use remote module (deprecated)
-- Ignore security warnings
-- Skip code signing
-- Load remote content without CSP
-- Use synchronous IPC
-- Hardcode credentials
-
-## Project Structure
-
-```
-src/
-├── main/
-│   ├── main.ts           # Main process
-│   ├── preload.ts        # Preload script
-│   └── ipc/              # IPC handlers
-├── renderer/
-│   ├── index.html
-│   ├── renderer.ts
-│   └── components/
-└── shared/
-    └── types.ts
-```
-
-## IPC Communication
-
-```typescript
-// preload.ts
-import { contextBridge, ipcRenderer } from 'electron'
-
-contextBridge.exposeInMainWorld('electronAPI', {
-  sendMessage: (message: string) => ipcRenderer.send('message', message),
-  onReply: (callback: (reply: string) => void) => 
-    ipcRenderer.on('reply', (_event, reply) => callback(reply)),
-})
-
-// main.ts
-import { ipcMain } from 'electron'
-
-ipcMain.on('message', (event, message) => {
-  console.log(message)
-  event.reply('reply', 'Message received')
-})
-
-// renderer.ts
-declare global {
-  interface Window {
-    electronAPI: {
-      sendMessage: (message: string) => void
-      onReply: (callback: (reply: string) => void) => void
-    }
-  }
-}
-
-window.electronAPI.sendMessage('Hello from renderer')
-window.electronAPI.onReply((reply) => console.log(reply))
-```
-
-## Security Checklist
-
-```typescript
-// ✅ Good security configuration
-const win = new BrowserWindow({
-  webPreferences: {
-    contextIsolation: true,        // ✅ MUST enable
-    nodeIntegration: false,        // ✅ MUST disable
-    sandbox: true,                 // ✅ Enable sandbox
-    webSecurity: true,            // ✅ Enable web security
-    allowRunningInsecureContent: false,  // ✅ Block insecure content
-  },
-})
-
-// Content Security Policy
-session.defaultSession.webRequest.onHeadersReceived((details, callback) => {
-  callback({
-    responseHeaders: {
-      ...details.responseHeaders,
-      'Content-Security-Policy': ["default-src 'self'"]
-    }
-  })
-})
-```
-
-<!-- ELECTRON:END -->
-
+<!-- ELECTRON:START -->
+# Electron Framework Rules
+
+**Language**: TypeScript, JavaScript  
+**Version**: Electron 28+
+
+## Setup & Configuration
+
+```typescript
+// main.ts (Main Process)
+import { app, BrowserWindow } from 'electron'
+import path from 'path'
+
+function createWindow() {
+  const win = new BrowserWindow({
+    width: 1200,
+    height: 800,
+    webPreferences: {
+      preload: path.join(__dirname, 'preload.js'),
+      contextIsolation: true,
+      nodeIntegration: false,
+    },
+  })
+
+  win.loadFile('index.html')
+}
+
+app.whenReady().then(createWindow)
+```
+
+## Quality Gates
+
+```bash
+# Type check
+npm run type-check
+
+# Lint
+npm run lint
+
+# Tests
+npm test
+
+# Build
+npm run build              # Compile TypeScript
+npm run package            # Package app
+npm run make               # Create distributables
+```
+
+## Best Practices
+
+✅ **DO:**
+- Use contextIsolation: true
+- Disable nodeIntegration
+- Use preload scripts for IPC
+- Implement auto-updates (electron-updater)
+- Sign and notarize apps (production)
+- Use Content Security Policy
+- Implement proper error handling
+- Separate main and renderer processes
+
+❌ **DON'T:**
+- Enable nodeIntegration in renderer
+- Skip contextIsolation
+- Use remote module (deprecated)
+- Ignore security warnings
+- Skip code signing
+- Load remote content without CSP
+- Use synchronous IPC
+- Hardcode credentials
+
+## Project Structure
+
+```
+src/
+├── main/
+│   ├── main.ts           # Main process
+│   ├── preload.ts        # Preload script
+│   └── ipc/              # IPC handlers
+├── renderer/
+│   ├── index.html
+│   ├── renderer.ts
+│   └── components/
+└── shared/
+    └── types.ts
+```
+
+## IPC Communication
+
+```typescript
+// preload.ts
+import { contextBridge, ipcRenderer } from 'electron'
+
+contextBridge.exposeInMainWorld('electronAPI', {
+  sendMessage: (message: string) => ipcRenderer.send('message', message),
+  onReply: (callback: (reply: string) => void) => 
+    ipcRenderer.on('reply', (_event, reply) => callback(reply)),
+})
+
+// main.ts
+import { ipcMain } from 'electron'
+
+ipcMain.on('message', (event, message) => {
+  console.log(message)
+  event.reply('reply', 'Message received')
+})
+
+// renderer.ts
+declare global {
+  interface Window {
+    electronAPI: {
+      sendMessage: (message: string) => void
+      onReply: (callback: (reply: string) => void) => void
+    }
+  }
+}
+
+window.electronAPI.sendMessage('Hello from renderer')
+window.electronAPI.onReply((reply) => console.log(reply))
+```
+
+## Security Checklist
+
+```typescript
+// ✅ Good security configuration
+const win = new BrowserWindow({
+  webPreferences: {
+    contextIsolation: true,        // ✅ MUST enable
+    nodeIntegration: false,        // ✅ MUST disable
+    sandbox: true,                 // ✅ Enable sandbox
+    webSecurity: true,            // ✅ Enable web security
+    allowRunningInsecureContent: false,  // ✅ Block insecure content
+  },
+})
+
+// Content Security Policy
+session.defaultSession.webRequest.onHeadersReceived((details, callback) => {
+  callback({
+    responseHeaders: {
+      ...details.responseHeaders,
+      'Content-Security-Policy': ["default-src 'self'"]
+    }
+  })
+})
+```
+
+<!-- ELECTRON:END -->
+

package/templates/frameworks/FLASK.md

@@ -1,38 +1,38 @@
-<!-- FLASK:START -->
-# Flask Framework Rules
-
-**Language**: Python  
-**Version**: Flask 3.0+
-
-## Setup
-
-```python
-from flask import Flask
-app = Flask(__name__)
-app.config.from_object('config.ProductionConfig')
-
-# Use Flask-SQLAlchemy for ORM
-# Use Flask-Migrate for migrations
-# Use Flask-Login for auth
-```
-
-## Quality Gates
-
-```bash
-black .
-ruff check .
-pytest --cov=app
-```
-
-## Best Practices
-
-✅ Use application factory pattern  
-✅ Enable CORS properly  
-✅ Use blueprints for organization  
-✅ Implement error handlers  
-
-❌ Don't use `debug=True` in production  
-❌ Don't store secrets in code  
-
-<!-- FLASK:END -->
-
+<!-- FLASK:START -->
+# Flask Framework Rules
+
+**Language**: Python  
+**Version**: Flask 3.0+
+
+## Setup
+
+```python
+from flask import Flask
+app = Flask(__name__)
+app.config.from_object('config.ProductionConfig')
+
+# Use Flask-SQLAlchemy for ORM
+# Use Flask-Migrate for migrations
+# Use Flask-Login for auth
+```
+
+## Quality Gates
+
+```bash
+black .
+ruff check .
+pytest --cov=app
+```
+
+## Best Practices
+
+✅ Use application factory pattern  
+✅ Enable CORS properly  
+✅ Use blueprints for organization  
+✅ Implement error handlers  
+
+❌ Don't use `debug=True` in production  
+❌ Don't store secrets in code  
+
+<!-- FLASK:END -->
+

package/templates/frameworks/FLUTTER.md

@@ -1,55 +1,55 @@
-<!-- FLUTTER:START -->
-# Flutter Framework Rules
-
-**Language**: Dart  
-**Version**: Flutter 3.10+
-
-## Setup
-
-```yaml
-# pubspec.yaml
-dependencies:
-  flutter:
-    sdk: flutter
-  cupertino_icons: ^1.0.2
-
-dev_dependencies:
-  flutter_test:
-    sdk: flutter
-  flutter_lints: ^2.0.0
-```
-
-## Quality Gates
-
-```bash
-dart format --set-exit-if-changed .
-dart analyze --fatal-infos
-flutter test
-flutter build apk --release  # Test build
-```
-
-## Best Practices
-
-✅ Use StatelessWidget when possible  
-✅ Implement proper state management (Provider, Riverpod, Bloc)  
-✅ Use const constructors  
-✅ Optimize widget rebuilds  
-✅ Test on multiple devices  
-
-❌ Don't use `print()` in production  
-❌ Don't skip null safety  
-❌ Don't ignore platform differences  
-
-## Project Structure
-
-```
-lib/
-├── main.dart
-├── models/
-├── screens/
-├── widgets/
-└── services/
-```
-
-<!-- FLUTTER:END -->
-
+<!-- FLUTTER:START -->
+# Flutter Framework Rules
+
+**Language**: Dart  
+**Version**: Flutter 3.10+
+
+## Setup
+
+```yaml
+# pubspec.yaml
+dependencies:
+  flutter:
+    sdk: flutter
+  cupertino_icons: ^1.0.2
+
+dev_dependencies:
+  flutter_test:
+    sdk: flutter
+  flutter_lints: ^2.0.0
+```
+
+## Quality Gates
+
+```bash
+dart format --set-exit-if-changed .
+dart analyze --fatal-infos
+flutter test
+flutter build apk --release  # Test build
+```
+
+## Best Practices
+
+✅ Use StatelessWidget when possible  
+✅ Implement proper state management (Provider, Riverpod, Bloc)  
+✅ Use const constructors  
+✅ Optimize widget rebuilds  
+✅ Test on multiple devices  
+
+❌ Don't use `print()` in production  
+❌ Don't skip null safety  
+❌ Don't ignore platform differences  
+
+## Project Structure
+
+```
+lib/
+├── main.dart
+├── models/
+├── screens/
+├── widgets/
+└── services/
+```
+
+<!-- FLUTTER:END -->
+

package/templates/frameworks/JQUERY.md

@@ -1,32 +1,32 @@
-<!-- JQUERY:START -->
-# jQuery Framework Rules
-
-**Language**: JavaScript  
-**Version**: jQuery 3.x+
-
-## Setup
-
-```html
-<script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
-```
-
-## Best Practices
-
-✅ Use modern JS alongside jQuery  
-✅ Minimize DOM manipulation  
-✅ Cache jQuery selectors  
-✅ Use event delegation  
-
-❌ Don't use jQuery for everything  
-❌ Don't pollute global scope  
-❌ Don't skip CSP headers  
-
-## Quality Gates
-
-```bash
-eslint src/**/*.js
-jest
-```
-
-<!-- JQUERY:END -->
-
+<!-- JQUERY:START -->
+# jQuery Framework Rules
+
+**Language**: JavaScript  
+**Version**: jQuery 3.x+
+
+## Setup
+
+```html
+<script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
+```
+
+## Best Practices
+
+✅ Use modern JS alongside jQuery  
+✅ Minimize DOM manipulation  
+✅ Cache jQuery selectors  
+✅ Use event delegation  
+
+❌ Don't use jQuery for everything  
+❌ Don't pollute global scope  
+❌ Don't skip CSP headers  
+
+## Quality Gates
+
+```bash
+eslint src/**/*.js
+jest
+```
+
+<!-- JQUERY:END -->
+

package/templates/frameworks/LARAVEL.md

@@ -1,38 +1,38 @@
-<!-- LARAVEL:START -->
-# Laravel Framework Rules
-
-**CRITICAL**: Laravel services must respect these conventions and quality checks.
-
-## Quality Commands
-- Static analysis: `./vendor/bin/pint --test`
-- Lint style: `./vendor/bin/phpcs --standard=PSR12 app/`
-- Unit tests: `php artisan test`
-- Feature tests: `php artisan test --testsuite=Feature`
-- Coverage: ensure `php artisan test --coverage` ≥ 80%
-
-## Project Structure
-- Keep HTTP controllers in `app/Http/Controllers`
-- Use form requests for validation in `app/Http/Requests`
-- Organize business logic in `app/Services`
-- Leverage repositories for data persistence where appropriate
-- Store queued jobs in `app/Jobs`
-
-## Implementation Guidelines
-- Use migrations for every schema change (`php artisan make:migration`)
-- Keep Eloquent models lean; move heavy logic into services
-- Cache configuration after deployment (`php artisan config:cache`)
-- Register scheduled tasks in `app/Console/Kernel.php`
-- Ensure `app/Providers` registers new bindings/events
-
-## Composer Hygiene
-```bash
-composer install --no-dev --prefer-dist
-composer dump-autoload
-```
-
-## Additional Checks
-- Sync `.env.example` whenever new variables are introduced
-- Document API changes in `/docs/laravel-api.md`
-- Generate API resources via `php artisan make:resource`
-
-<!-- LARAVEL:END -->
+<!-- LARAVEL:START -->
+# Laravel Framework Rules
+
+**CRITICAL**: Laravel services must respect these conventions and quality checks.
+
+## Quality Commands
+- Static analysis: `./vendor/bin/pint --test`
+- Lint style: `./vendor/bin/phpcs --standard=PSR12 app/`
+- Unit tests: `php artisan test`
+- Feature tests: `php artisan test --testsuite=Feature`
+- Coverage: ensure `php artisan test --coverage` ≥ 80%
+
+## Project Structure
+- Keep HTTP controllers in `app/Http/Controllers`
+- Use form requests for validation in `app/Http/Requests`
+- Organize business logic in `app/Services`
+- Leverage repositories for data persistence where appropriate
+- Store queued jobs in `app/Jobs`
+
+## Implementation Guidelines
+- Use migrations for every schema change (`php artisan make:migration`)
+- Keep Eloquent models lean; move heavy logic into services
+- Cache configuration after deployment (`php artisan config:cache`)
+- Register scheduled tasks in `app/Console/Kernel.php`
+- Ensure `app/Providers` registers new bindings/events
+
+## Composer Hygiene
+```bash
+composer install --no-dev --prefer-dist
+composer dump-autoload
+```
+
+## Additional Checks
+- Sync `.env.example` whenever new variables are introduced
+- Document API changes in `/docs/laravel-api.md`
+- Generate API resources via `php artisan make:resource`
+
+<!-- LARAVEL:END -->