@ulpi/cli 0.1.0

package/dist/skills/ulpi-generate-guardian/references/language-rules.md

@@ -0,0 +1,596 @@
+# Language-Specific Rules
+
+## Node.js / TypeScript
+
+```yaml
+permissions:
+  auto-approve-npm:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "npm"
+    decision: allow
+
+  auto-approve-pnpm:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "pnpm"
+    decision: allow
+
+  auto-approve-yarn:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "yarn"
+    decision: allow
+
+  auto-approve-bun:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "bun"
+    decision: allow
+
+  auto-approve-node:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "node"
+    decision: allow
+
+  auto-approve-npx:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "npx"
+    decision: allow
+
+  # Lock file protection (use whichever lock file is detected)
+  block-lock-file:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "pnpm-lock.yaml"  # or yarn.lock, package-lock.json, bun.lockb
+    decision: deny
+    message: "Do not edit lock files manually. Use `{package_manager} install` to manage dependencies."
+    locked: true
+
+  # Build artifact protection
+  block-dist:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "dist/**"
+    decision: deny
+    message: "Do not edit build output. Run the build command to regenerate."
+    locked: true
+
+  block-build-output:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "build/**"
+    decision: deny
+    message: "Do not edit build output. Run the build command to regenerate."
+    locked: true
+
+  block-node-modules:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "node_modules/**"
+    decision: deny
+    message: "Do not edit node_modules directly. Use the package manager."
+    locked: true
+
+  block-turbo-cache:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: ".turbo/**"
+    decision: deny
+    message: "Do not edit .turbo cache. Run turbo to regenerate."
+    locked: true
+
+postconditions:
+  # Dependency sync after manifest change
+  install-after-package-json:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "package.json"
+    run: "{package_manager} install"
+    timeout: 60000
+    block_on_failure: false
+```
+
+## Python
+
+```yaml
+permissions:
+  auto-approve-pip:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "pip"
+    decision: allow
+
+  auto-approve-python:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "python"
+    decision: allow
+
+  auto-approve-poetry:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "poetry"
+    decision: allow
+
+  auto-approve-uv:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "uv"
+    decision: allow
+
+  auto-approve-pytest:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "pytest"
+    decision: allow
+
+  auto-approve-ruff:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "ruff"
+    decision: allow
+
+  # Lock file protection (use whichever is detected)
+  block-poetry-lock:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "poetry.lock"  # or uv.lock
+    decision: deny
+    message: "Do not edit lock files manually. Use `poetry install` or `uv sync` to manage dependencies."
+    locked: true
+
+  # Build artifact protection
+  block-pycache:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/__pycache__/**"
+    decision: deny
+    message: "Do not edit __pycache__. These are auto-generated bytecode files."
+    locked: true
+
+  block-egg-info:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.egg-info/**"
+    decision: deny
+    message: "Do not edit .egg-info directories. Run setup.py to regenerate."
+    locked: true
+
+  block-mypy-cache:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: ".mypy_cache/**"
+    decision: deny
+    message: "Do not edit .mypy_cache. Run mypy to regenerate."
+    locked: true
+
+postconditions:
+  # Dependency sync (use detected package manager)
+  install-after-pyproject:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "pyproject.toml"
+    run: "poetry install"  # or "uv sync" if uv detected
+    timeout: 60000
+    block_on_failure: false
+
+  install-after-requirements:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "requirements*.txt"
+    run: "pip install -r {file_path}"
+    timeout: 60000
+    block_on_failure: false
+
+  # Lint on save (use detected linter: ruff, flake8, pylint)
+  lint-on-save:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.py"
+    run: "ruff check {file_path}"  # or flake8/pylint
+    timeout: 15000
+    block_on_failure: false
+
+  # Format check on save (use detected formatter: ruff format, black)
+  format-check-on-save:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.py"
+    run: "ruff format --check {file_path}"  # or "black --check {file_path}"
+    timeout: 10000
+    block_on_failure: false
+```
+
+## Go
+
+```yaml
+permissions:
+  auto-approve-go:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "go"
+    decision: allow
+
+  # Build artifact protection
+  block-go-bin:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "bin/**"
+    decision: deny
+    message: "Do not edit compiled binaries. Run `go build` to regenerate."
+    locked: true
+
+postconditions:
+  # Dependency sync
+  go-mod-tidy:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "go.mod"
+    run: "go mod tidy"
+    timeout: 30000
+    block_on_failure: false
+
+  # Build check on save
+  go-build-check:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.go"
+    run: "go build ./..."
+    timeout: 30000
+    block_on_failure: true
+
+  go-vet:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.go"
+    run: "go vet ./..."
+    timeout: 20000
+    block_on_failure: false
+```
+
+## Rust
+
+```yaml
+permissions:
+  auto-approve-cargo:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "cargo"
+    decision: allow
+
+  # Lock file protection
+  block-cargo-lock:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "Cargo.lock"
+    decision: deny
+    message: "Do not edit Cargo.lock manually. Use `cargo update` to manage dependencies."
+    locked: true
+
+  # Build artifact protection
+  block-target:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "target/**"
+    decision: deny
+    message: "Do not edit target/. Run `cargo build` to regenerate."
+    locked: true
+
+postconditions:
+  # Dependency check after manifest change
+  cargo-check-after-toml:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "Cargo.toml"
+    run: "cargo check"
+    timeout: 60000
+    block_on_failure: false
+
+  # Build check on save
+  cargo-check:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.rs"
+    run: "cargo check"
+    timeout: 60000
+    block_on_failure: true
+
+  # Lint on save
+  cargo-clippy:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.rs"
+    run: "cargo clippy -- -D warnings"
+    timeout: 60000
+    block_on_failure: false
+```
+
+## PHP
+
+```yaml
+permissions:
+  auto-approve-composer:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "composer"
+    decision: allow
+
+  auto-approve-php:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "php"
+    decision: allow
+
+  # Lock file protection
+  block-composer-lock:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "composer.lock"
+    decision: deny
+    message: "Do not edit composer.lock manually. Use `composer install` or `composer update` to manage dependencies."
+    locked: true
+
+  # Build artifact protection
+  block-vendor:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "vendor/**"
+    decision: deny
+    message: "Do not edit vendor/ directly. Use composer to manage dependencies."
+    locked: true
+
+postconditions:
+  # Dependency sync after manifest change
+  composer-install:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "composer.json"
+    run: "composer install"
+    timeout: 60000
+    block_on_failure: false
+```
+
+## Ruby
+
+```yaml
+permissions:
+  auto-approve-bundle:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "bundle"
+    decision: allow
+
+  auto-approve-ruby:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "ruby"
+    decision: allow
+
+  auto-approve-rake:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "rake"
+    decision: allow
+
+  # Lock file protection
+  block-gemfile-lock:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "Gemfile.lock"
+    decision: deny
+    message: "Do not edit Gemfile.lock manually. Use `bundle install` to manage dependencies."
+    locked: true
+
+postconditions:
+  # Dependency sync after manifest change
+  bundle-install:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "Gemfile"
+    run: "bundle install"
+    timeout: 60000
+    block_on_failure: false
+```
+
+## Java
+
+```yaml
+permissions:
+  auto-approve-mvn:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "mvn"
+    decision: allow
+
+  auto-approve-gradle:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "gradle"
+    decision: allow
+
+  auto-approve-gradlew:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "./gradlew"
+    decision: allow
+
+  # Build artifact protection (Maven)
+  block-maven-target:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "target/**"
+    decision: deny
+    message: "Do not edit target/. Run `mvn compile` to regenerate."
+    locked: true
+
+  # Build artifact protection (Gradle)
+  block-gradle-build:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "build/**"
+    decision: deny
+    message: "Do not edit build/. Run `gradle build` to regenerate."
+    locked: true
+
+postconditions:
+  # Dependency resolution after pom change (Maven)
+  mvn-resolve-deps:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "pom.xml"
+    run: "mvn dependency:resolve -q"
+    timeout: 120000
+    block_on_failure: false
+
+  # Dependency resolution after build.gradle change (Gradle)
+  gradle-resolve-deps:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "build.gradle*"
+    run: "./gradlew dependencies --quiet"
+    timeout: 120000
+    block_on_failure: false
+```
+
+## C# / .NET
+
+```yaml
+permissions:
+  auto-approve-dotnet:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "dotnet"
+    decision: allow
+
+  # Build artifact protection
+  block-bin:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "bin/**"
+    decision: deny
+    message: "Do not edit bin/. Run `dotnet build` to regenerate."
+    locked: true
+
+  block-obj:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "obj/**"
+    decision: deny
+    message: "Do not edit obj/. Run `dotnet build` to regenerate."
+    locked: true
+
+postconditions:
+  # Build check on save
+  dotnet-build:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.cs"
+    run: "dotnet build"
+    timeout: 60000
+    block_on_failure: true
+
+  # Dependency sync after csproj change
+  dotnet-restore:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.csproj"
+    run: "dotnet restore"
+    timeout: 60000
+    block_on_failure: false
+```
+
+## Elixir
+
+```yaml
+permissions:
+  auto-approve-mix:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "mix"
+    decision: allow
+
+  auto-approve-iex:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "iex"
+    decision: allow
+
+  # Lock file protection
+  block-mix-lock:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "mix.lock"
+    decision: deny
+    message: "Do not edit mix.lock manually. Use `mix deps.get` to manage dependencies."
+    locked: true
+
+  # Build artifact protection
+  block-elixir-build:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "_build/**"
+    decision: deny
+    message: "Do not edit _build/. Run `mix compile` to regenerate."
+    locked: true
+
+postconditions:
+  # Dependency sync after manifest change
+  mix-deps-get:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "mix.exs"
+    run: "mix deps.get"
+    timeout: 60000
+    block_on_failure: false
+
+  # Build check on save
+  mix-compile:
+    trigger: PostToolUse
+    matcher: "Write|Edit"
+    file_pattern: "**/*.ex"
+    run: "mix compile --warnings-as-errors"
+    timeout: 30000
+    block_on_failure: true
+```
+
+## Docker (Add if Dockerfile present)
+
+```yaml
+permissions:
+  auto-approve-docker:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "docker"
+    decision: allow
+
+  auto-approve-docker-compose:
+    trigger: PermissionRequest
+    matcher: Bash
+    command_pattern: "docker compose"
+    decision: allow
+
+  block-system-prune:
+    trigger: PreToolUse
+    matcher: Bash
+    command_pattern: "docker system prune"
+    decision: deny
+    message: "docker system prune removes all unused data."
+
+preconditions:
+  warn-dockerfile:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "Dockerfile"
+    message: "Dockerfile changes affect container builds and deployment. Rebuild and test locally."
+    priority: 60
+
+  warn-compose:
+    trigger: PreToolUse
+    matcher: "Write|Edit"
+    file_pattern: "docker-compose.yml"  # or compose.yml
+    message: "Docker Compose changes affect service orchestration. Test with `docker compose up` after editing."
+    priority: 60
+```

package/dist/skills-CX73O3IV.js

@@ -0,0 +1,76 @@
+import {
+  loadSkillSync
+} from "./chunk-6OCEY7JY.js";
+import "./chunk-7LXY5UVC.js";
+import "./chunk-4VNS5WPM.js";
+
+// src/commands/skills.ts
+import * as fs from "fs";
+import * as path from "path";
+import chalk from "chalk";
+async function runSkills(args, _projectDir) {
+  const subcommand = args[0];
+  switch (subcommand) {
+    case "list":
+      return listSkills();
+    case "get":
+      return getSkill(args[1]);
+    default:
+      console.log(`
+Usage: ulpi skills <subcommand>
+
+Subcommands:
+  list       List available skills
+  get        Show skill content
+`.trim());
+  }
+}
+function listSkills() {
+  console.log(chalk.bold("\nBundled Skills:\n"));
+  const skillPaths = [
+    path.join(process.cwd(), ".ulpi", "skills")
+  ];
+  try {
+    let dir = path.dirname(new URL(import.meta.url).pathname);
+    for (let i = 0; i < 10; i++) {
+      const candidate = path.join(dir, "node_modules", "@ulpi", "templates-engine", "skills");
+      if (fs.existsSync(candidate)) {
+        skillPaths.push(candidate);
+        break;
+      }
+      dir = path.dirname(dir);
+    }
+  } catch {
+  }
+  let found = false;
+  for (const skillDir of skillPaths) {
+    if (!fs.existsSync(skillDir)) continue;
+    const files = fs.readdirSync(skillDir).filter((f) => f.endsWith(".md"));
+    for (const file of files) {
+      const name = file.replace(/\.md$/, "");
+      const content = fs.readFileSync(path.join(skillDir, file), "utf-8");
+      const firstLine = content.split("\n")[0]?.replace(/^#+\s*/, "") ?? name;
+      console.log(`  ${chalk.cyan(name.padEnd(30))} ${firstLine}`);
+      found = true;
+    }
+  }
+  if (!found) {
+    console.log(chalk.dim("  No skills found."));
+  }
+  console.log("");
+}
+function getSkill(name) {
+  if (!name) {
+    console.log(chalk.red("Usage: ulpi skills get <name>"));
+    return;
+  }
+  const content = loadSkillSync(name, process.cwd());
+  if (content) {
+    console.log(content);
+  } else {
+    console.log(chalk.red(`Skill "${name}" not found`));
+  }
+}
+export {
+  runSkills
+};