@ulpi/cli 0.1.5 → 0.1.6

package/dist/skills/ulpi-generate-guardian/references/language-rules.md

@@ -1,591 +0,0 @@
-# Language-Specific Rules
-
-## Node.js / TypeScript
-
-**IMPORTANT:** Only auto-approve the DETECTED package manager, not all of them. If the project uses pnpm, only include the pnpm rule. Do not include npm/yarn/bun rules for a pnpm project.
-
-```yaml
-permissions:
-  # Include ONLY the detected package manager — pick ONE of these:
-  # If pnpm detected (pnpm-lock.yaml):
-  auto-approve-pnpm:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "pnpm"
-    decision: allow
-  # If npm detected (package-lock.json):
-  # auto-approve-npm:
-  #   command_pattern: "npm"
-  # If yarn detected (yarn.lock):
-  # auto-approve-yarn:
-  #   command_pattern: "yarn"
-  # If bun detected (bun.lockb):
-  # auto-approve-bun:
-  #   command_pattern: "bun"
-
-  auto-approve-node:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "node"
-    decision: allow
-
-  auto-approve-npx:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "npx"
-    decision: allow
-
-  # Lock file protection (use whichever lock file is detected)
-  block-lock-file:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "pnpm-lock.yaml"  # or yarn.lock, package-lock.json, bun.lockb
-    decision: deny
-    message: "Do not edit lock files manually. Use `{package_manager} install` to manage dependencies."
-    locked: true
-
-  # Build artifact protection
-  block-dist:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "dist/**"
-    decision: deny
-    message: "Do not edit build output. Run the build command to regenerate."
-    locked: true
-
-  block-build-output:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "build/**"
-    decision: deny
-    message: "Do not edit build output. Run the build command to regenerate."
-    locked: true
-
-  block-node-modules:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "node_modules/**"
-    decision: deny
-    message: "Do not edit node_modules directly. Use the package manager."
-    locked: true
-
-  block-turbo-cache:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: ".turbo/**"
-    decision: deny
-    message: "Do not edit .turbo cache. Run turbo to regenerate."
-    locked: true
-
-postconditions:
-  # Dependency sync after manifest change
-  install-after-package-json:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "package.json"
-    run: "{package_manager} install"
-    timeout: 60000
-    block_on_failure: false
-```
-
-## Python
-
-```yaml
-permissions:
-  auto-approve-pip:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "pip"
-    decision: allow
-
-  auto-approve-python:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "python"
-    decision: allow
-
-  auto-approve-poetry:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "poetry"
-    decision: allow
-
-  auto-approve-uv:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "uv"
-    decision: allow
-
-  auto-approve-pytest:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "pytest"
-    decision: allow
-
-  auto-approve-ruff:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "ruff"
-    decision: allow
-
-  # Lock file protection (use whichever is detected)
-  block-poetry-lock:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "poetry.lock"  # or uv.lock
-    decision: deny
-    message: "Do not edit lock files manually. Use `poetry install` or `uv sync` to manage dependencies."
-    locked: true
-
-  # Build artifact protection
-  block-pycache:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/__pycache__/**"
-    decision: deny
-    message: "Do not edit __pycache__. These are auto-generated bytecode files."
-    locked: true
-
-  block-egg-info:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.egg-info/**"
-    decision: deny
-    message: "Do not edit .egg-info directories. Run setup.py to regenerate."
-    locked: true
-
-  block-mypy-cache:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: ".mypy_cache/**"
-    decision: deny
-    message: "Do not edit .mypy_cache. Run mypy to regenerate."
-    locked: true
-
-postconditions:
-  # Dependency sync (use detected package manager)
-  install-after-pyproject:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "pyproject.toml"
-    run: "poetry install"  # or "uv sync" if uv detected
-    timeout: 60000
-    block_on_failure: false
-
-  install-after-requirements:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "requirements*.txt"
-    run: "pip install -r {file_path}"
-    timeout: 60000
-    block_on_failure: false
-
-  # Lint on save (use detected linter: ruff, flake8, pylint)
-  lint-on-save:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.py"
-    run: "ruff check {file_path}"  # or flake8/pylint
-    timeout: 15000
-    block_on_failure: false
-
-  # Format check on save (use detected formatter: ruff format, black)
-  format-check-on-save:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.py"
-    run: "ruff format --check {file_path}"  # or "black --check {file_path}"
-    timeout: 10000
-    block_on_failure: false
-```
-
-## Go
-
-```yaml
-permissions:
-  auto-approve-go:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "go"
-    decision: allow
-
-  # Build artifact protection
-  block-go-bin:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "bin/**"
-    decision: deny
-    message: "Do not edit compiled binaries. Run `go build` to regenerate."
-    locked: true
-
-postconditions:
-  # Dependency sync
-  go-mod-tidy:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "go.mod"
-    run: "go mod tidy"
-    timeout: 30000
-    block_on_failure: false
-
-  # Build check on save
-  go-build-check:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.go"
-    run: "go build ./..."
-    timeout: 30000
-    block_on_failure: true
-
-  go-vet:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.go"
-    run: "go vet ./..."
-    timeout: 20000
-    block_on_failure: false
-```
-
-## Rust
-
-```yaml
-permissions:
-  auto-approve-cargo:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "cargo"
-    decision: allow
-
-  # Lock file protection
-  block-cargo-lock:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "Cargo.lock"
-    decision: deny
-    message: "Do not edit Cargo.lock manually. Use `cargo update` to manage dependencies."
-    locked: true
-
-  # Build artifact protection
-  block-target:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "target/**"
-    decision: deny
-    message: "Do not edit target/. Run `cargo build` to regenerate."
-    locked: true
-
-postconditions:
-  # Dependency check after manifest change
-  cargo-check-after-toml:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "Cargo.toml"
-    run: "cargo check"
-    timeout: 60000
-    block_on_failure: false
-
-  # Build check on save
-  cargo-check:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.rs"
-    run: "cargo check"
-    timeout: 60000
-    block_on_failure: true
-
-  # Lint on save
-  cargo-clippy:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.rs"
-    run: "cargo clippy -- -D warnings"
-    timeout: 60000
-    block_on_failure: false
-```
-
-## PHP
-
-```yaml
-permissions:
-  auto-approve-composer:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "composer"
-    decision: allow
-
-  auto-approve-php:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "php"
-    decision: allow
-
-  # Lock file protection
-  block-composer-lock:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "composer.lock"
-    decision: deny
-    message: "Do not edit composer.lock manually. Use `composer install` or `composer update` to manage dependencies."
-    locked: true
-
-  # Build artifact protection
-  block-vendor:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "vendor/**"
-    decision: deny
-    message: "Do not edit vendor/ directly. Use composer to manage dependencies."
-    locked: true
-
-postconditions:
-  # Dependency sync after manifest change
-  composer-install:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "composer.json"
-    run: "composer install"
-    timeout: 60000
-    block_on_failure: false
-```
-
-## Ruby
-
-```yaml
-permissions:
-  auto-approve-bundle:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "bundle"
-    decision: allow
-
-  auto-approve-ruby:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "ruby"
-    decision: allow
-
-  auto-approve-rake:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "rake"
-    decision: allow
-
-  # Lock file protection
-  block-gemfile-lock:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "Gemfile.lock"
-    decision: deny
-    message: "Do not edit Gemfile.lock manually. Use `bundle install` to manage dependencies."
-    locked: true
-
-postconditions:
-  # Dependency sync after manifest change
-  bundle-install:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "Gemfile"
-    run: "bundle install"
-    timeout: 60000
-    block_on_failure: false
-```
-
-## Java
-
-```yaml
-permissions:
-  auto-approve-mvn:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "mvn"
-    decision: allow
-
-  auto-approve-gradle:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "gradle"
-    decision: allow
-
-  auto-approve-gradlew:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "./gradlew"
-    decision: allow
-
-  # Build artifact protection (Maven)
-  block-maven-target:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "target/**"
-    decision: deny
-    message: "Do not edit target/. Run `mvn compile` to regenerate."
-    locked: true
-
-  # Build artifact protection (Gradle)
-  block-gradle-build:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "build/**"
-    decision: deny
-    message: "Do not edit build/. Run `gradle build` to regenerate."
-    locked: true
-
-postconditions:
-  # Dependency resolution after pom change (Maven)
-  mvn-resolve-deps:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "pom.xml"
-    run: "mvn dependency:resolve -q"
-    timeout: 120000
-    block_on_failure: false
-
-  # Dependency resolution after build.gradle change (Gradle)
-  gradle-resolve-deps:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "build.gradle*"
-    run: "./gradlew dependencies --quiet"
-    timeout: 120000
-    block_on_failure: false
-```
-
-## C# / .NET
-
-```yaml
-permissions:
-  auto-approve-dotnet:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "dotnet"
-    decision: allow
-
-  # Build artifact protection
-  block-bin:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "bin/**"
-    decision: deny
-    message: "Do not edit bin/. Run `dotnet build` to regenerate."
-    locked: true
-
-  block-obj:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "obj/**"
-    decision: deny
-    message: "Do not edit obj/. Run `dotnet build` to regenerate."
-    locked: true
-
-postconditions:
-  # Build check on save
-  dotnet-build:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.cs"
-    run: "dotnet build"
-    timeout: 60000
-    block_on_failure: true
-
-  # Dependency sync after csproj change
-  dotnet-restore:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.csproj"
-    run: "dotnet restore"
-    timeout: 60000
-    block_on_failure: false
-```
-
-## Elixir
-
-```yaml
-permissions:
-  auto-approve-mix:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "mix"
-    decision: allow
-
-  auto-approve-iex:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "iex"
-    decision: allow
-
-  # Lock file protection
-  block-mix-lock:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "mix.lock"
-    decision: deny
-    message: "Do not edit mix.lock manually. Use `mix deps.get` to manage dependencies."
-    locked: true
-
-  # Build artifact protection
-  block-elixir-build:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "_build/**"
-    decision: deny
-    message: "Do not edit _build/. Run `mix compile` to regenerate."
-    locked: true
-
-postconditions:
-  # Dependency sync after manifest change
-  mix-deps-get:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "mix.exs"
-    run: "mix deps.get"
-    timeout: 60000
-    block_on_failure: false
-
-  # Build check on save
-  mix-compile:
-    trigger: PostToolUse
-    matcher: "Write|Edit"
-    file_pattern: "**/*.ex"
-    run: "mix compile --warnings-as-errors"
-    timeout: 30000
-    block_on_failure: true
-```
-
-## Docker (Add if Dockerfile present)
-
-```yaml
-permissions:
-  auto-approve-docker:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "docker"
-    decision: allow
-
-  auto-approve-docker-compose:
-    trigger: PermissionRequest
-    matcher: Bash
-    command_pattern: "docker compose"
-    decision: allow
-
-  block-system-prune:
-    trigger: PreToolUse
-    matcher: Bash
-    command_pattern: "docker system prune"
-    decision: deny
-    message: "docker system prune removes all unused data."
-
-preconditions:
-  warn-dockerfile:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "Dockerfile"
-    message: "Dockerfile changes affect container builds and deployment. Rebuild and test locally."
-    priority: 60
-
-  warn-compose:
-    trigger: PreToolUse
-    matcher: "Write|Edit"
-    file_pattern: "docker-compose.yml"  # or compose.yml
-    message: "Docker Compose changes affect service orchestration. Test with `docker compose up` after editing."
-    priority: 60
-```