@hivehub/rulebook 5.5.1 → 5.7.0

package/templates/services/SQLSERVER.md

@@ -1,294 +0,0 @@
-<!-- SQLSERVER:START -->
-# SQL Server Database Instructions
-
-**CRITICAL**: Use SQL Server for enterprise relational data storage with advanced features, high availability, and Windows integration.
-
-## Core Features
-
-### Connection
-```typescript
-// Using mssql (Node.js)
-import sql from 'mssql'
-
-const pool = await sql.connect({
-  server: process.env.DB_HOST || 'localhost',
-  port: parseInt(process.env.DB_PORT || '1433'),
-  database: process.env.DB_NAME || 'myapp',
-  user: process.env.DB_USER,
-  password: process.env.DB_PASSWORD,
-  options: {
-    encrypt: process.env.NODE_ENV === 'production',
-    trustServerCertificate: process.env.NODE_ENV !== 'production',
-    enableArithAbort: true,
-    connectionTimeout: 30000,
-    requestTimeout: 30000,
-  },
-  pool: {
-    max: 10,
-    min: 0,
-    idleTimeoutMillis: 30000,
-  },
-})
-
-// Using tedious (lower level)
-import { Connection } from 'tedious'
-
-const connection = new Connection({
-  server: process.env.DB_HOST || 'localhost',
-  authentication: {
-    type: 'default',
-    options: {
-      userName: process.env.DB_USER,
-      password: process.env.DB_PASSWORD,
-    },
-  },
-  options: {
-    encrypt: true,
-    database: process.env.DB_NAME,
-    trustServerCertificate: true,
-  },
-})
-```
-
-### Basic Queries
-```typescript
-// SELECT
-const result = await pool.request()
-  .input('userId', sql.Int, userId)
-  .query('SELECT * FROM Users WHERE Id = @userId')
-const users = result.recordset
-
-// INSERT
-const result = await pool.request()
-  .input('name', sql.NVarChar, 'John Doe')
-  .input('email', sql.NVarChar, 'john@example.com')
-  .query('INSERT INTO Users (Name, Email) OUTPUT INSERTED.* VALUES (@name, @email)')
-const newUser = result.recordset[0]
-
-// UPDATE
-const result = await pool.request()
-  .input('id', sql.Int, userId)
-  .input('name', sql.NVarChar, 'Jane Doe')
-  .query('UPDATE Users SET Name = @name WHERE Id = @id')
-
-// DELETE
-await pool.request()
-  .input('id', sql.Int, userId)
-  .query('DELETE FROM Users WHERE Id = @id')
-```
-
-### Transactions
-```typescript
-const transaction = new sql.Transaction(pool)
-
-try {
-  await transaction.begin()
-  
-  const request = new sql.Request(transaction)
-  await request
-    .input('userId', sql.Int, userId)
-    .input('amount', sql.Decimal(18, 2), 1000)
-    .query('INSERT INTO Accounts (UserId, Balance) VALUES (@userId, @amount)')
-  
-  await request
-    .input('accountId', sql.Int, accountId)
-    .input('amount', sql.Decimal(18, 2), 1000)
-    .query('INSERT INTO Transactions (AccountId, Amount) VALUES (@accountId, @amount)')
-  
-  await transaction.commit()
-} catch (error) {
-  await transaction.rollback()
-  throw error
-}
-```
-
-### Advanced Features
-```typescript
-// Stored procedures
-const result = await pool.request()
-  .input('userId', sql.Int, userId)
-  .execute('sp_GetUserDetails')
-
-// JSON operations (SQL Server 2016+)
-const result = await pool.request()
-  .query(`
-    SELECT 
-      Id,
-      Name,
-      JSON_VALUE(Metadata, '$.category') AS Category
-    FROM Products
-    WHERE JSON_VALUE(Metadata, '$.category') = 'electronics'
-  `)
-
-// Full-text search
-const result = await pool.request()
-  .input('searchTerm', sql.NVarChar, 'search term')
-  .query(`
-    SELECT * FROM Articles
-    WHERE CONTAINS(Content, @searchTerm)
-  `)
-
-// Window functions
-const result = await pool.request()
-  .query(`
-    SELECT 
-      Name,
-      Salary,
-      ROW_NUMBER() OVER (PARTITION BY DepartmentId ORDER BY Salary DESC) AS Rank
-    FROM Employees
-  `)
-```
-
-## Common Patterns
-
-### Connection Pooling
-```typescript
-let pool: sql.ConnectionPool | null = null
-
-export async function getPool(): Promise<sql.ConnectionPool> {
-  if (!pool) {
-    pool = await sql.connect({
-      // ... config
-    })
-    
-    pool.on('error', (err) => {
-      console.error('SQL Server pool error', err)
-    })
-  }
-  return pool
-}
-
-// Graceful shutdown
-process.on('SIGINT', async () => {
-  if (pool) {
-    await pool.close()
-  }
-  process.exit(0)
-})
-```
-
-### Parameterized Queries
-```typescript
-// Always use parameters to prevent SQL injection
-// ❌ WRONG
-await pool.request().query(`SELECT * FROM Users WHERE Email = '${email}'`)
-
-// ✅ CORRECT
-await pool.request()
-  .input('email', sql.NVarChar, email)
-  .query('SELECT * FROM Users WHERE Email = @email')
-```
-
-### Error Handling
-```typescript
-try {
-  const result = await pool.request()
-    .input('id', sql.Int, userId)
-    .query('SELECT * FROM Users WHERE Id = @id')
-  
-  if (result.recordset.length === 0) {
-    throw new Error('User not found')
-  }
-  return result.recordset[0]
-} catch (error: any) {
-  if (error.number === 2627) { // Unique constraint violation
-    throw new Error('Duplicate entry')
-  }
-  if (error.number === 547) { // Foreign key constraint violation
-    throw new Error('Referenced record does not exist')
-  }
-  throw error
-}
-```
-
-## Best Practices
-
-✅ **DO:**
-- Use connection pooling (10-20 connections)
-- Always use parameterized queries (@param)
-- Use transactions for multi-step operations
-- Create indexes on frequently queried columns
-- Use appropriate data types (NVarChar for Unicode)
-- Enable encryption in production
-- Use stored procedures for complex logic
-- Monitor connection pool usage
-- Use appropriate timeout values
-- Implement retry logic for transient errors
-
-❌ **DON'T:**
-- Use string concatenation for queries (SQL injection risk)
-- Create too many connections
-- Skip error handling
-- Ignore connection pool limits
-- Use SELECT * in production
-- Skip indexes on foreign keys
-- Hardcode connection strings
-- Skip encryption in production
-- Ignore query performance
-- Use synchronous operations
-
-## Configuration
-
-### Environment Variables
-```bash
-DB_HOST=localhost
-DB_PORT=1433
-DB_NAME=myapp
-DB_USER=sa
-DB_PASSWORD=securepassword
-```
-
-### Docker Compose
-```yaml
-services:
-  sqlserver:
-    image: mcr.microsoft.com/mssql/server:2022-latest
-    ports:
-      - "1433:1433"
-    environment:
-      ACCEPT_EULA: Y
-      SA_PASSWORD: securepassword
-      MSSQL_PID: Developer
-    volumes:
-      - sqlserver_data:/var/opt/mssql
-    healthcheck:
-      test: ["CMD-SHELL", "/opt/mssql-tools/bin/sqlcmd -S localhost -U sa -P securepassword -Q 'SELECT 1' || exit 1"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-volumes:
-  sqlserver_data:
-```
-
-## Integration with Development
-
-### Testing
-```typescript
-// Use test database
-const testPool = await sql.connect({
-  database: 'myapp_test',
-  // ... config
-})
-
-// Clean up after tests
-afterEach(async () => {
-  await testPool.request().query('DELETE FROM Users')
-  await testPool.request().query('DELETE FROM Posts')
-})
-```
-
-### Health Checks
-```typescript
-async function checkDatabaseHealth(): Promise<boolean> {
-  try {
-    const result = await pool.request().query('SELECT 1 AS Health')
-    return result.recordset.length > 0
-  } catch {
-    return false
-  }
-}
-```
-
-<!-- SQLSERVER:END -->
-

package/templates/services/WINSTON.md

@@ -1,30 +0,0 @@
-<!-- WINSTON:START -->
-# Winston — Logging
-
-## Configuration
-```typescript
-const logger = winston.createLogger({
-  level: process.env.LOG_LEVEL || 'info',
-  format: winston.format.combine(
-    winston.format.timestamp(),
-    winston.format.json()  // Always JSON in production
-  ),
-  transports: [
-    new winston.transports.Console(),
-    new winston.transports.File({ filename: 'logs/error.log', level: 'error' }),
-  ],
-});
-```
-
-## Log Levels
-- Use semantic levels: `error`, `warn`, `info`, `http`, `debug`
-- Set `level: 'info'` in production; `level: 'debug'` in development
-
-## Metadata
-- Include structured metadata: `logger.info('message', { userId, requestId, duration })`
-- Never log sensitive data (tokens, passwords, credit card numbers)
-
-## Custom Transports
-- Add external service transports (Datadog, Loggly) as additional transports
-- Always keep console transport as fallback
-<!-- WINSTON:END -->

package/templates/skills/frameworks/angular/SKILL.md

@@ -1,46 +0,0 @@
----
-name: "Angular"
-description: "Angular projects must meet these standards before delivery."
-version: "1.0.0"
-category: "frameworks"
-author: "Rulebook"
-tags: ["frameworks", "framework"]
-dependencies: []
-conflicts: []
----
-<!-- ANGULAR:START -->
-# Angular Framework Rules
-
-**CRITICAL**: Angular projects must meet these standards before delivery.
-
-## Quality Commands
-- Lint: `npm run lint`
-- Unit tests: `npm run test -- --watch=false --code-coverage`
-- e2e tests: `npm run e2e`
-- Build: `npm run build -- --configuration production`
-
-## Project Structure
-- Colocate features inside `src/app/<feature>/`
-- Keep shared modules in `src/app/shared`
-- Avoid `providedIn: 'root'` unless service truly global
-- Leverage `OnPush` change detection for performance-critical components
-
-## Implementation Guidelines
-- Define interfaces for component inputs/outputs
-- Use `HttpClient` interceptors for auth/logging
-- Isolate environment variables in `src/environments/`
-- Prefer Reactive Forms and RxJS operators over manual subscriptions
-
-## Pre-Commit Sequence
-```bash
-npm run lint
-npm run test -- --watch=false
-npm run build -- --configuration production
-```
-
-## Documentation
-- Update `/docs/angular-architecture.md` with new modules and routes
-- Record shared component APIs in Storybook or `/docs/ui-components.md`
-- Version major route changes in `/docs/roadmap.md`
-
-<!-- ANGULAR:END -->

package/templates/skills/frameworks/django/SKILL.md

@@ -1,93 +0,0 @@
----
-name: "Django"
-description: "Language: Python"
-version: "1.0.0"
-category: "frameworks"
-author: "Rulebook"
-tags: ["frameworks", "framework"]
-dependencies: []
-conflicts: []
----
-<!-- DJANGO:START -->
-# Django Framework Rules
-
-**Language**: Python  
-**Version**: Django 4.2+ (LTS) or 5.0+
-
-## Setup & Configuration
-
-```python
-# settings.py
-SECRET_KEY = env('SECRET_KEY')  # Never hardcode
-DEBUG = env.bool('DEBUG', default=False)
-ALLOWED_HOSTS = env.list('ALLOWED_HOSTS')
-
-INSTALLED_APPS = [
-    # Django apps
-    'django.contrib.admin',
-    'django.contrib.auth',
-    # Third-party
-    'rest_framework',
-    'corsheaders',
-    # Local apps
-    'apps.users',
-]
-
-DATABASES = {
-    'default': env.db('DATABASE_URL')  # Use django-environ
-}
-```
-
-## Quality Gates
-
-```bash
-# Code quality
-black .                          # Format
-ruff check .                     # Lint
-mypy .                          # Type check
-
-# Tests
-python manage.py test            # Run tests
-pytest --cov=apps --cov-report=html  # With coverage
-
-# Security
-python manage.py check --deploy  # Production checks
-bandit -r apps/                  # Security scan
-```
-
-## Best Practices
-
-✅ **DO:**
-- Use Class-Based Views (CBVs) or Django REST Framework ViewSets
-- Implement custom User model from start
-- Use Django ORM properly (select_related, prefetch_related)
-- Enable CSRF protection
-- Use environment variables for secrets
-- Write tests for views, models, and forms
-
-❌ **DON'T:**
-- Use `DEBUG=True` in production
-- Store secrets in settings.py
-- Use raw SQL without parameterization
-- Skip migrations
-- Ignore security middleware
-
-## Project Structure
-
-```
-project/
-├── manage.py
-├── requirements.txt
-├── apps/
-│   ├── users/
-│   ├── api/
-│   └── core/
-├── config/
-│   ├── settings.py
-│   ├── urls.py
-│   └── wsgi.py
-└── tests/
-```
-
-<!-- DJANGO:END -->
-

package/templates/skills/frameworks/electron/SKILL.md

@@ -1,157 +0,0 @@
----
-name: "Electron"
-description: "Language: TypeScript, JavaScript"
-version: "1.0.0"
-category: "frameworks"
-author: "Rulebook"
-tags: ["frameworks", "framework"]
-dependencies: []
-conflicts: []
----
-<!-- ELECTRON:START -->
-# Electron Framework Rules
-
-**Language**: TypeScript, JavaScript  
-**Version**: Electron 28+
-
-## Setup & Configuration
-
-```typescript
-// main.ts (Main Process)
-import { app, BrowserWindow } from 'electron'
-import path from 'path'
-
-function createWindow() {
-  const win = new BrowserWindow({
-    width: 1200,
-    height: 800,
-    webPreferences: {
-      preload: path.join(__dirname, 'preload.js'),
-      contextIsolation: true,
-      nodeIntegration: false,
-    },
-  })
-
-  win.loadFile('index.html')
-}
-
-app.whenReady().then(createWindow)
-```
-
-## Quality Gates
-
-```bash
-# Type check
-npm run type-check
-
-# Lint
-npm run lint
-
-# Tests
-npm test
-
-# Build
-npm run build              # Compile TypeScript
-npm run package            # Package app
-npm run make               # Create distributables
-```
-
-## Best Practices
-
-✅ **DO:**
-- Use contextIsolation: true
-- Disable nodeIntegration
-- Use preload scripts for IPC
-- Implement auto-updates (electron-updater)
-- Sign and notarize apps (production)
-- Use Content Security Policy
-- Implement proper error handling
-- Separate main and renderer processes
-
-❌ **DON'T:**
-- Enable nodeIntegration in renderer
-- Skip contextIsolation
-- Use remote module (deprecated)
-- Ignore security warnings
-- Skip code signing
-- Load remote content without CSP
-- Use synchronous IPC
-- Hardcode credentials
-
-## Project Structure
-
-```
-src/
-├── main/
-│   ├── main.ts           # Main process
-│   ├── preload.ts        # Preload script
-│   └── ipc/              # IPC handlers
-├── renderer/
-│   ├── index.html
-│   ├── renderer.ts
-│   └── components/
-└── shared/
-    └── types.ts
-```
-
-## IPC Communication
-
-```typescript
-// preload.ts
-import { contextBridge, ipcRenderer } from 'electron'
-
-contextBridge.exposeInMainWorld('electronAPI', {
-  sendMessage: (message: string) => ipcRenderer.send('message', message),
-  onReply: (callback: (reply: string) => void) => 
-    ipcRenderer.on('reply', (_event, reply) => callback(reply)),
-})
-
-// main.ts
-import { ipcMain } from 'electron'
-
-ipcMain.on('message', (event, message) => {
-  console.log(message)
-  event.reply('reply', 'Message received')
-})
-
-// renderer.ts
-declare global {
-  interface Window {
-    electronAPI: {
-      sendMessage: (message: string) => void
-      onReply: (callback: (reply: string) => void) => void
-    }
-  }
-}
-
-window.electronAPI.sendMessage('Hello from renderer')
-window.electronAPI.onReply((reply) => console.log(reply))
-```
-
-## Security Checklist
-
-```typescript
-// ✅ Good security configuration
-const win = new BrowserWindow({
-  webPreferences: {
-    contextIsolation: true,        // ✅ MUST enable
-    nodeIntegration: false,        // ✅ MUST disable
-    sandbox: true,                 // ✅ Enable sandbox
-    webSecurity: true,            // ✅ Enable web security
-    allowRunningInsecureContent: false,  // ✅ Block insecure content
-  },
-})
-
-// Content Security Policy
-session.defaultSession.webRequest.onHeadersReceived((details, callback) => {
-  callback({
-    responseHeaders: {
-      ...details.responseHeaders,
-      'Content-Security-Policy': ["default-src 'self'"]
-    }
-  })
-})
-```
-
-<!-- ELECTRON:END -->
-

package/templates/skills/frameworks/flask/SKILL.md

@@ -1,48 +0,0 @@
----
-name: "Flask"
-description: "Language: Python"
-version: "1.0.0"
-category: "frameworks"
-author: "Rulebook"
-tags: ["frameworks", "framework"]
-dependencies: []
-conflicts: []
----
-<!-- FLASK:START -->
-# Flask Framework Rules
-
-**Language**: Python  
-**Version**: Flask 3.0+
-
-## Setup
-
-```python
-from flask import Flask
-app = Flask(__name__)
-app.config.from_object('config.ProductionConfig')
-
-# Use Flask-SQLAlchemy for ORM
-# Use Flask-Migrate for migrations
-# Use Flask-Login for auth
-```
-
-## Quality Gates
-
-```bash
-black .
-ruff check .
-pytest --cov=app
-```
-
-## Best Practices
-
-✅ Use application factory pattern  
-✅ Enable CORS properly  
-✅ Use blueprints for organization  
-✅ Implement error handlers  
-
-❌ Don't use `debug=True` in production  
-❌ Don't store secrets in code  
-
-<!-- FLASK:END -->
-