@hivehub/rulebook 5.5.2 → 5.7.0

package/templates/ides/cursor-mdc/rust.mdc

@@ -1,24 +0,0 @@
----
-description: Rust coding standards and best practices
-globs: ["**/*.rs"]
-alwaysApply: false
----
-
-# Rust Rules
-
-See `/.rulebook/specs/RUST.md` for full requirements.
-
-## Key Rules
-
-- Prefer `Result<T, E>` over `unwrap()` / `expect()`
-- Use `thiserror` for library errors, `anyhow` for application errors
-- Minimize `clone()` — prefer borrows and lifetimes
-- Use `clippy` with `#![deny(clippy::all)]`
-- Document public API with `///` doc comments
-- Prefer iterator adapters over manual loops
-
-## Error Handling
-
-- Propagate errors with `?` operator
-- Define domain error enums with `thiserror`
-- Never `panic!` in library code

package/templates/ides/cursor-mdc/typescript.mdc

@@ -1,25 +0,0 @@
----
-description: TypeScript coding standards and best practices
-globs: ["**/*.ts", "**/*.tsx"]
-alwaysApply: false
----
-
-# TypeScript Rules
-
-See `/.rulebook/specs/TYPESCRIPT.md` for full requirements.
-
-## Key Rules
-
-- Strict mode enabled — all types must be explicit
-- No `any` without justification comment
-- Use `interface` for public API shapes, `type` for unions/aliases
-- Prefer `async/await` over raw Promises
-- Use `readonly` for immutable data
-- `path.join()` for file paths (never string concatenation)
-- Export only what is needed (avoid barrel re-exports)
-
-## Error Handling
-
-- Validate at system boundaries (user input, external APIs)
-- Use typed error classes for domain errors
-- Never swallow errors silently

package/templates/ralph/ralph-history.bat

@@ -1,4 +0,0 @@
-@echo off
-REM Ralph History — View iteration history
-REM Generated by @hivehub/rulebook
-npx @hivehub/rulebook@latest ralph history %*

package/templates/ralph/ralph-history.sh

@@ -1,5 +0,0 @@
-#!/bin/sh
-# Ralph History — View iteration history
-# Generated by @hivehub/rulebook
-echo "Loading Ralph history..."
-npx @hivehub/rulebook@latest ralph history "$@"

package/templates/ralph/ralph-init.bat

@@ -1,5 +0,0 @@
-@echo off
-REM Ralph Init — Initialize autonomous loop
-REM Generated by @hivehub/rulebook
-echo Initializing Ralph autonomous loop...
-npx @hivehub/rulebook@latest ralph init %*

package/templates/ralph/ralph-init.sh

@@ -1,5 +0,0 @@
-#!/bin/sh
-# Ralph Init — Initialize autonomous loop
-# Generated by @hivehub/rulebook
-echo "Initializing Ralph autonomous loop..."
-npx @hivehub/rulebook@latest ralph init "$@"

package/templates/ralph/ralph-pause.bat

@@ -1,5 +0,0 @@
-@echo off
-REM Ralph Pause — Pause autonomous loop
-REM Generated by @hivehub/rulebook
-echo Pausing Ralph autonomous loop...
-npx @hivehub/rulebook@latest ralph pause %*

package/templates/ralph/ralph-pause.sh

@@ -1,5 +0,0 @@
-#!/bin/sh
-# Ralph Pause — Pause autonomous loop
-# Generated by @hivehub/rulebook
-echo "Pausing Ralph autonomous loop..."
-npx @hivehub/rulebook@latest ralph pause "$@"

package/templates/ralph/ralph-run.bat

@@ -1,5 +0,0 @@
-@echo off
-REM Ralph Run — Start autonomous loop
-REM Generated by @hivehub/rulebook
-echo Starting Ralph autonomous loop...
-npx @hivehub/rulebook@latest ralph run %*

package/templates/ralph/ralph-run.sh

@@ -1,5 +0,0 @@
-#!/bin/sh
-# Ralph Run — Start autonomous loop
-# Generated by @hivehub/rulebook
-echo "Starting Ralph autonomous loop..."
-npx @hivehub/rulebook@latest ralph run "$@"

package/templates/ralph/ralph-status.bat

@@ -1,4 +0,0 @@
-@echo off
-REM Ralph Status — Check loop status
-REM Generated by @hivehub/rulebook
-npx @hivehub/rulebook@latest ralph status %*

package/templates/ralph/ralph-status.sh

@@ -1,5 +0,0 @@
-#!/bin/sh
-# Ralph Status — Check loop status
-# Generated by @hivehub/rulebook
-echo "Checking Ralph status..."
-npx @hivehub/rulebook@latest ralph status "$@"

package/templates/services/AZURE_BLOB.md

@@ -1,184 +0,0 @@
-<!-- AZURE_BLOB:START -->
-# Azure Blob Storage Instructions
-
-**CRITICAL**: Use Azure Blob Storage for object storage, file uploads, static assets, and backup storage in Azure cloud.
-
-## Core Features
-
-### Connection
-```typescript
-// Using @azure/storage-blob
-import { BlobServiceClient, StorageSharedKeyCredential } from '@azure/storage-blob'
-
-const accountName = process.env.AZURE_STORAGE_ACCOUNT_NAME || ''
-const accountKey = process.env.AZURE_STORAGE_ACCOUNT_KEY || ''
-
-const sharedKeyCredential = new StorageSharedKeyCredential(accountName, accountKey)
-const blobServiceClient = new BlobServiceClient(
-  `https://${accountName}.blob.core.windows.net`,
-  sharedKeyCredential
-)
-
-const containerClient = blobServiceClient.getContainerClient(
-  process.env.AZURE_CONTAINER_NAME || 'mycontainer'
-)
-```
-
-### Basic Operations
-```typescript
-// Create container
-await containerClient.createIfNotExists({
-  access: 'blob', // 'blob', 'container', or 'private'
-})
-
-// Upload blob
-const blockBlobClient = containerClient.getBlockBlobClient('path/to/file.jpg')
-await blockBlobClient.upload(fileBuffer, fileBuffer.length, {
-  blobHTTPHeaders: {
-    blobContentType: 'image/jpeg',
-  },
-  metadata: {
-    userId: '123',
-    originalName: 'photo.jpg',
-  },
-})
-
-// Download blob
-const downloadResponse = await blockBlobClient.download()
-const fileContent = await streamToBuffer(downloadResponse.readableStreamBody)
-
-// Delete blob
-await blockBlobClient.delete()
-
-// List blobs
-for await (const blob of containerClient.listBlobsFlat()) {
-  console.log(blob.name, blob.properties.contentLength)
-}
-```
-
-### Advanced Features
-```typescript
-// Generate SAS URL
-import { generateBlobSASQueryParameters, BlobSASPermissions, StorageSharedKeyCredential } from '@azure/storage-blob'
-
-const sasToken = generateBlobSASQueryParameters(
-  {
-    containerName: 'mycontainer',
-    blobName: 'path/to/file.jpg',
-    permissions: BlobSASPermissions.parse('r'), // read
-    startsOn: new Date(),
-    expiresOn: new Date(new Date().valueOf() + 3600 * 1000), // 1 hour
-  },
-  sharedKeyCredential
-).toString()
-
-const sasUrl = `https://${accountName}.blob.core.windows.net/mycontainer/path/to/file.jpg?${sasToken}`
-
-// Copy blob
-const sourceBlobClient = containerClient.getBlockBlobClient('source/file.jpg')
-const destBlobClient = containerClient.getBlockBlobClient('dest/file.jpg')
-await destBlobClient.beginCopyFromURL(sourceBlobClient.url)
-
-// Set blob metadata
-await blockBlobClient.setMetadata({
-  category: 'profile',
-  uploadedBy: 'user-123',
-})
-
-// Get blob properties
-const properties = await blockBlobClient.getProperties()
-console.log(properties.contentType, properties.contentLength, properties.metadata)
-```
-
-## Common Patterns
-
-### File Upload Handler
-```typescript
-async function uploadFile(file: Buffer, filename: string, userId: string) {
-  const blobName = `users/${userId}/${Date.now()}-${filename}`
-  const blobClient = containerClient.getBlockBlobClient(blobName)
-  
-  await blobClient.upload(file, file.length, {
-    blobHTTPHeaders: {
-      blobContentType: getContentType(filename),
-    },
-    metadata: {
-      userId,
-      originalName: filename,
-      uploadedAt: new Date().toISOString(),
-    },
-  })
-  
-  return {
-    blobName,
-    url: blobClient.url,
-  }
-}
-```
-
-### Temporary Access URL
-```typescript
-async function generateTemporaryUrl(blobName: string, expiresInMinutes: number = 60) {
-  const blobClient = containerClient.getBlockBlobClient(blobName)
-  const sasToken = generateBlobSASQueryParameters(
-    {
-      containerName: containerClient.containerName,
-      blobName,
-      permissions: BlobSASPermissions.parse('r'),
-      expiresOn: new Date(Date.now() + expiresInMinutes * 60 * 1000),
-    },
-    sharedKeyCredential
-  ).toString()
-  
-  return `${blobClient.url}?${sasToken}`
-}
-```
-
-## Best Practices
-
-✅ **DO:**
-- Use appropriate access tiers (Hot, Cool, Archive)
-- Set blob metadata for organization
-- Use SAS tokens for temporary access
-- Implement proper error handling
-- Use appropriate content types
-- Enable soft delete for important data
-- Monitor storage usage and costs
-- Use lifecycle management policies
-- Implement retry logic
-- Use connection strings or managed identity
-
-❌ **DON'T:**
-- Store sensitive data without encryption
-- Use public access unnecessarily
-- Hardcode credentials
-- Ignore error handling
-- Skip content-type validation
-- Ignore lifecycle policies
-- Skip access logging
-- Use default access levels
-- Ignore cost optimization
-- Store large files without chunking
-
-## Configuration
-
-### Environment Variables
-```bash
-AZURE_STORAGE_ACCOUNT_NAME=myaccount
-AZURE_STORAGE_ACCOUNT_KEY=your-account-key
-AZURE_CONTAINER_NAME=mycontainer
-AZURE_STORAGE_CONNECTION_STRING=DefaultEndpointsProtocol=https;AccountName=...
-```
-
-### Managed Identity (Recommended)
-```typescript
-import { DefaultAzureCredential } from '@azure/identity'
-
-const blobServiceClient = new BlobServiceClient(
-  `https://${accountName}.blob.core.windows.net`,
-  new DefaultAzureCredential()
-)
-```
-
-<!-- AZURE_BLOB:END -->
-

package/templates/services/CASSANDRA.md

@@ -1,239 +0,0 @@
-<!-- CASSANDRA:START -->
-# Apache Cassandra Database Instructions
-
-**CRITICAL**: Use Cassandra for distributed NoSQL database with high availability, linear scalability, and eventual consistency.
-
-## Core Features
-
-### Connection
-```typescript
-// Using cassandra-driver
-import { Client } from 'cassandra-driver'
-
-const client = new Client({
-  contactPoints: (process.env.CASSANDRA_HOSTS || 'localhost').split(','),
-  localDataCenter: process.env.CASSANDRA_DATACENTER || 'datacenter1',
-  keyspace: process.env.CASSANDRA_KEYSPACE || 'myapp',
-  credentials: {
-    username: process.env.CASSANDRA_USER || 'cassandra',
-    password: process.env.CASSANDRA_PASSWORD || 'cassandra',
-  },
-  queryOptions: {
-    consistency: 1, // ONE, QUORUM, ALL
-    prepare: true,
-  },
-})
-```
-
-### Basic Operations
-```typescript
-// Create keyspace
-await client.execute(`
-  CREATE KEYSPACE IF NOT EXISTS myapp
-  WITH REPLICATION = {
-    'class': 'SimpleStrategy',
-    'replication_factor': 1
-  }
-`)
-
-// Use keyspace
-await client.execute('USE myapp')
-
-// Create table
-await client.execute(`
-  CREATE TABLE IF NOT EXISTS users (
-    id UUID PRIMARY KEY,
-    email TEXT,
-    name TEXT,
-    created_at TIMESTAMP
-  )
-`)
-
-// Create index
-await client.execute('CREATE INDEX IF NOT EXISTS ON users (email)')
-
-// Insert
-await client.execute(
-  'INSERT INTO users (id, email, name, created_at) VALUES (?, ?, ?, ?)',
-  [cassandra.types.Uuid.random(), 'john@example.com', 'John Doe', new Date()],
-  { prepare: true }
-)
-
-// Select
-const result = await client.execute(
-  'SELECT * FROM users WHERE id = ?',
-  [userId],
-  { prepare: true }
-)
-const user = result.first()
-
-// Update
-await client.execute(
-  'UPDATE users SET name = ? WHERE id = ?',
-  ['Jane Doe', userId],
-  { prepare: true }
-)
-
-// Delete
-await client.execute(
-  'DELETE FROM users WHERE id = ?',
-  [userId],
-  { prepare: true }
-)
-```
-
-### Advanced Features
-```typescript
-// Batch operations
-const queries = [
-  {
-    query: 'INSERT INTO users (id, email, name) VALUES (?, ?, ?)',
-    params: [id1, 'user1@example.com', 'User 1'],
-  },
-  {
-    query: 'INSERT INTO users (id, email, name) VALUES (?, ?, ?)',
-    params: [id2, 'user2@example.com', 'User 2'],
-  },
-]
-
-await client.batch(queries, { prepare: true })
-
-// Collections
-await client.execute(`
-  CREATE TABLE IF NOT EXISTS products (
-    id UUID PRIMARY KEY,
-    name TEXT,
-    tags SET<TEXT>,
-    metadata MAP<TEXT, TEXT>
-  )
-`)
-
-await client.execute(
-  'UPDATE products SET tags = tags + ? WHERE id = ?',
-  [['electronics', 'gadgets'], productId],
-  { prepare: true }
-)
-
-// Time-to-Live (TTL)
-await client.execute(
-  'INSERT INTO sessions (id, data) VALUES (?, ?) USING TTL 3600',
-  [sessionId, sessionData],
-  { prepare: true }
-)
-```
-
-## Common Patterns
-
-### Data Modeling
-```typescript
-// Design tables for query patterns
-// Query: Get users by email
-await client.execute(`
-  CREATE TABLE users_by_email (
-    email TEXT PRIMARY KEY,
-    id UUID,
-    name TEXT,
-    created_at TIMESTAMP
-  )
-`)
-
-// Query: Get posts by user and date
-await client.execute(`
-  CREATE TABLE posts_by_user (
-    user_id UUID,
-    created_at TIMESTAMP,
-    post_id UUID,
-    title TEXT,
-    content TEXT,
-    PRIMARY KEY (user_id, created_at, post_id)
-  ) WITH CLUSTERING ORDER BY (created_at DESC)
-`)
-```
-
-### Consistency Levels
-```typescript
-// Read with QUORUM consistency
-const result = await client.execute(
-  'SELECT * FROM users WHERE id = ?',
-  [userId],
-  {
-    consistency: 2, // QUORUM
-    prepare: true,
-  }
-)
-
-// Write with ALL consistency (strongest)
-await client.execute(
-  'INSERT INTO users (id, email, name) VALUES (?, ?, ?)',
-  [id, email, name],
-  {
-    consistency: 3, // ALL
-    prepare: true,
-  }
-)
-```
-
-## Best Practices
-
-✅ **DO:**
-- Design tables for query patterns (denormalize)
-- Use appropriate partition keys
-- Use clustering keys for sorting
-- Create secondary indexes sparingly
-- Use prepared statements
-- Set appropriate consistency levels
-- Use TTL for time-based data
-- Monitor cluster health
-- Use batch operations carefully
-- Implement retry logic
-
-❌ **DON'T:**
-- Use secondary indexes on high-cardinality columns
-- Create too many secondary indexes
-- Use ALL consistency for all operations
-- Store large values (> 1MB)
-- Skip error handling
-- Ignore cluster topology
-- Hardcode contact points
-- Use SELECT * in production
-- Ignore data modeling best practices
-- Skip monitoring
-
-## Configuration
-
-### Environment Variables
-```bash
-CASSANDRA_HOSTS=localhost
-CASSANDRA_HOSTS=node1:9042,node2:9042,node3:9042
-CASSANDRA_DATACENTER=datacenter1
-CASSANDRA_KEYSPACE=myapp
-CASSANDRA_USER=cassandra
-CASSANDRA_PASSWORD=securepassword
-```
-
-### Docker Compose
-```yaml
-services:
-  cassandra:
-    image: cassandra:4
-    ports:
-      - "9042:9042"
-    environment:
-      CASSANDRA_CLUSTER_NAME: my-cluster
-      CASSANDRA_DC: datacenter1
-      CASSANDRA_RACK: rack1
-      CASSANDRA_ENDPOINT_SNITCH: GossipingPropertyFileSnitch
-    volumes:
-      - cassandra_data:/var/lib/cassandra
-    healthcheck:
-      test: ["CMD-SHELL", "nodetool status | grep -E '^UN' || exit 1"]
-      interval: 30s
-      timeout: 10s
-      retries: 5
-
-volumes:
-  cassandra_data:
-```
-
-<!-- CASSANDRA:END -->
-

package/templates/services/DATADOG.md

@@ -1,26 +0,0 @@
-<!-- DATADOG:START -->
-# Datadog — APM and Monitoring
-
-## Initialization
-- Import `dd-trace` as the FIRST import in application entry point
-- Configure via environment variables: `DD_AGENT_HOST`, `DD_TRACE_AGENT_PORT`, `DD_ENV`, `DD_SERVICE`, `DD_VERSION`
-
-## Tracing
-- Use automatic instrumentation for Express, pg, Redis, etc.
-- Add manual traces for business-critical operations:
-  ```typescript
-  const tracer = require('dd-trace');
-  const span = tracer.startSpan('operation.name');
-  ```
-
-## Logs
-- Inject trace IDs into log records for correlation:
-  ```typescript
-  const span = tracer.scope().active();
-  if (span) log.info({ dd: { trace_id: span.context().toTraceId(), span_id: span.context().toSpanId() }, message });
-  ```
-
-## Custom Metrics
-- Use `dogstatsd-client` for custom metrics: counters, gauges, histograms
-- Tag metrics with `env`, `service`, `version` for consistent filtering
-<!-- DATADOG:END -->

package/templates/services/DOCKER.md

@@ -1,124 +0,0 @@
-<!-- DOCKER:START -->
-# Docker Instructions
-
-**CRITICAL**: Follow these Docker best practices for all container builds.
-
-## Build Patterns
-
-### Multi-Stage Builds
-Use multi-stage builds to minimize final image size and separate build-time dependencies from runtime:
-
-```dockerfile
-FROM node:20-alpine AS builder
-WORKDIR /app
-COPY package*.json ./
-RUN npm ci
-COPY . .
-RUN npm run build
-
-FROM node:20-alpine AS runtime
-RUN adduser -D appuser
-USER appuser
-WORKDIR /app
-COPY --from=builder /app/dist ./dist
-COPY --from=builder /app/node_modules ./node_modules
-COPY --from=builder /app/package.json ./
-HEALTHCHECK --interval=30s --timeout=3s CMD node -e "require('http').get('http://localhost:3000/health', (r) => { process.exit(r.statusCode === 200 ? 0 : 1) })"
-CMD ["node", "dist/index.js"]
-```
-
-### Base Image Selection
-- Pin base image versions: `node:20-alpine` not `node:latest`
-- Prefer `-alpine` or `-slim` variants for smaller images
-- Use official images from Docker Hub verified publishers
-
-## Security Requirements
-
-### Non-Root User
-ALL containers MUST run as a non-root user:
-```dockerfile
-RUN adduser -D appuser
-USER appuser
-```
-
-### Secrets
-- NEVER copy secrets (`.env`, credentials, keys) into image layers
-- Use Docker secrets or runtime environment variables instead
-- Scan images with `docker scout cves` or `trivy image` before pushing
-- Add `--no-cache` to package install commands to reduce attack surface
-
-### Image Scanning
-```bash
-# Docker Scout (built-in)
-docker scout cves <image>
-
-# Trivy
-trivy image <image>
-```
-
-## Required Instructions
-
-### HEALTHCHECK
-ALL production images MUST include a HEALTHCHECK:
-```dockerfile
-HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
-  CMD curl -f http://localhost:3000/health || exit 1
-```
-
-### .dockerignore Requirements
-Every Docker project MUST have a `.dockerignore` file containing at minimum:
-```
-.git
-node_modules
-dist
-coverage
-*.log
-.env*
-.DS_Store
-*.md
-.vscode
-.idea
-```
-
-## Common Patterns
-
-### Layer Caching
-Order Dockerfile instructions from least-changing to most-changing:
-```dockerfile
-# 1. Base image (rarely changes)
-FROM node:20-alpine
-
-# 2. System dependencies (changes rarely)
-RUN apk add --no-cache curl
-
-# 3. Package files (changes when deps change)
-COPY package*.json ./
-RUN npm ci --only=production
-
-# 4. Application code (changes frequently)
-COPY . .
-```
-
-### Production Optimization
-```dockerfile
-# Use npm ci for deterministic installs
-RUN npm ci --only=production
-
-# Remove unnecessary files
-RUN rm -rf /tmp/* /var/cache/apk/*
-
-# Set NODE_ENV
-ENV NODE_ENV=production
-```
-
-## Best Practices
-
-- Use `.dockerignore` to exclude unnecessary files from build context
-- One process per container (do not run multiple services in one container)
-- Use `COPY` over `ADD` unless extracting archives
-- Combine RUN commands to reduce layers: `RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*`
-- Set explicit `WORKDIR` instead of `RUN cd`
-- Use `EXPOSE` to document listening ports
-- Tag images with semantic versions, not just `latest`
-
-<!-- DOCKER:END -->