guardian-framework 0.1.0

package/templates/pi/scripts/languages/rust/validate-architecture.sh

@@ -0,0 +1,188 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-architecture.sh — Rust
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0
+ERRORS=()
+WARNINGS=()
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Architecture Validation (Rust)"
+echo "============================================"
+echo ""
+
+if [ ! -f "Cargo.toml" ]; then
+    warn "No Cargo.toml found (skipping Rust architecture validation)"
+    echo ""
+    echo "============================================"
+    echo "  Summary"
+    echo "============================================"
+    echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+    echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+    echo ""
+    echo -e "${GREEN}No Rust project detected, nothing to validate.${NC}"
+    exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# Layer structure (clean architecture)
+# ---------------------------------------------------------------------------
+echo "--- Layer Structure ---"
+LAYERS_FOUND=0
+for layer in src/domain src/application src/infrastructure; do
+    if [ -d "$layer" ]; then
+        LAYERS_FOUND=$((LAYERS_FOUND + 1))
+    fi
+done
+if [ "$LAYERS_FOUND" -ge 2 ]; then
+    pass "Clean architecture layers detected ($LAYERS_FOUND/3)"
+elif [ "$LAYERS_FOUND" -eq 1 ]; then
+    warn "Partial layer structure found (1/3 layers)"
+else
+    # Check for alternative common structures
+    if [ -d "src/models" ] || [ -d "src/handlers" ] || [ -d "src/services" ]; then
+        warn "Alternative project structure detected (no clean architecture layers)"
+    else
+        fail "No architectural layers found (no src/domain/, src/application/, or src/infrastructure/)"
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Canonical references
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Canonical References ---"
+if [ -d ".pi/architecture/modules" ]; then
+    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$MODULE_COUNT" -gt 0 ]; then
+        pass "Architecture modules defined ($MODULE_COUNT module files)"
+    else
+        warn "No architecture module files found in .pi/architecture/modules/"
+    fi
+else
+    warn "No .pi/architecture/modules/ directory (no canonical module references)"
+fi
+
+# ---------------------------------------------------------------------------
+# Domain models
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Domain Models ---"
+DOMAIN_MODELS=0
+for dir in src/domain src/models; do
+    if [ -d "$dir" ]; then
+        MODELS=$(grep -rlE '^\s*(pub\s+)?struct\s' "$dir" 2>/dev/null | wc -l | tr -d ' ')
+        DOMAIN_MODELS=$((DOMAIN_MODELS + MODELS))
+    fi
+done
+if [ "$DOMAIN_MODELS" -gt 0 ]; then
+    pass "Domain models found ($DOMAIN_MODELS files with struct definitions)"
+else
+    # Check all of src as fallback
+    ALL_MODELS=$(grep -rlE '^\s*(pub\s+)?struct\s' src/ 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$ALL_MODELS" -gt 0 ]; then
+        pass "Struct definitions found in src/ ($ALL_MODELS files)"
+    else
+        warn "No struct definitions found"
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Dependency direction
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Dependency Direction ---"
+if [ -d "src/domain" ]; then
+    DOMAIN_DEPS=$(grep -rE 'use\s+crate::infrastructure' src/domain/ 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$DOMAIN_DEPS" -eq 0 ]; then
+        pass "Domain layer does not depend on infrastructure"
+    else
+        fail "Domain layer depends on infrastructure ($DOMAIN_DEPS violations)"
+    fi
+else
+    warn "No src/domain/ directory (cannot check dependency direction)"
+fi
+
+# ---------------------------------------------------------------------------
+# Error handling
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Error Handling ---"
+HAS_ERROR_TYPES=0
+if command -v cargo &>/dev/null; then
+    # Check for thiserror, eyre, or anyhow in Cargo.toml
+    if grep -qE '(thiserror|eyre|anyhow)' Cargo.toml 2>/dev/null; then
+        HAS_ERROR_TYPES=1
+    fi
+fi
+# Also check for custom error enum definitions
+CUSTOM_ERRORS=$(grep -rE 'enum\s+\w*Error' src/ 2>/dev/null | wc -l | tr -d ' ')
+if [ "$HAS_ERROR_TYPES" -eq 1 ] || [ "$CUSTOM_ERRORS" -gt 0 ]; then
+    pass "Custom error handling detected"
+else
+    warn "No custom error types found (consider thiserror, eyre, or anyhow)"
+fi
+
+# ---------------------------------------------------------------------------
+# Trait definitions
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Trait Definitions ---"
+TRAITS=$(grep -rE '^\s*(pub\s+)?trait\s+' src/ 2>/dev/null | wc -l | tr -d ' ')
+if [ "$TRAITS" -gt 0 ]; then
+    pass "Trait definitions found ($TRAITS interfaces)"
+else
+    warn "No trait definitions found (consider using traits for interfaces)"
+fi
+
+# ---------------------------------------------------------------------------
+# Crate structure
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Crate Structure ---"
+HAS_LIB=0
+HAS_MAIN=0
+[ -f "src/lib.rs" ] && HAS_LIB=1
+[ -f "src/main.rs" ] && HAS_MAIN=1
+if [ "$HAS_LIB" -eq 1 ] && [ "$HAS_MAIN" -eq 1 ]; then
+    pass "Both lib.rs and main.rs present (library + binary)"
+elif [ "$HAS_LIB" -eq 1 ]; then
+    pass "Library crate detected (lib.rs)"
+elif [ "$HAS_MAIN" -eq 1 ]; then
+    pass "Binary crate detected (main.rs)"
+else
+    warn "No lib.rs or main.rs found"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Architecture validation completed.${NC}"
+exit 0

package/templates/pi/scripts/languages/rust/validate-canonical.sh

@@ -0,0 +1,146 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-canonical.sh — Rust
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0
+ERRORS=()
+WARNINGS=()
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Canonical Reference Validation (Rust)"
+echo "============================================"
+echo ""
+
+if [ ! -f "Cargo.toml" ]; then
+    warn "No Cargo.toml found (skipping Rust canonical validation)"
+    echo ""
+    echo "============================================"
+    echo "  Summary"
+    echo "============================================"
+    echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+    echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+    echo ""
+    echo -e "${GREEN}No Rust project detected, nothing to validate.${NC}"
+    exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# Architecture reference tracing
+# ---------------------------------------------------------------------------
+echo "--- Architecture Reference Tracing ---"
+CANONICAL_REFS=0
+TOTAL_RS=0
+
+# Count all Rust source files
+TOTAL_RS=$(find src -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+if [ "$TOTAL_RS" -gt 0 ]; then
+    # Look for canonical reference patterns in doc comments
+    CANONICAL_REFS=$(grep -rE '(///\s*Canonical:|//!\s*@canonical|///\s*Reference:)' src/ 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$CANONICAL_REFS" -gt 0 ]; then
+        PCT=$((CANONICAL_REFS * 100 / TOTAL_RS))
+        pass "Canonical references found: ${CANONICAL_REFS} files (${PCT}% of ${TOTAL_RS} Rust files)"
+    else
+        fail "No canonical references found in Rust doc comments"
+    fi
+else
+    warn "No Rust source files in src/"
+fi
+
+# ---------------------------------------------------------------------------
+# Module-to-implementation mapping
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Module-to-Implementation Mapping ---"
+if [ -d ".pi/architecture/modules" ]; then
+    MODULE_FILES=$(find .pi/architecture/modules -name "*.md" 2>/dev/null)
+    MAPPED=0
+    TOTAL_MODULES=0
+    for mf in $MODULE_FILES; do
+        TOTAL_MODULES=$((TOTAL_MODULES + 1))
+        MODULE_NAME=$(basename "$mf" .md)
+        # Check if a matching Rust file exists (exact match or containing module name)
+        if find src -name "*${MODULE_NAME}*" -name "*.rs" 2>/dev/null | grep -q .; then
+            MAPPED=$((MAPPED + 1))
+        fi
+    done
+    if [ "$TOTAL_MODULES" -gt 0 ] && [ "$MAPPED" -eq "$TOTAL_MODULES" ]; then
+        pass "All $TOTAL_MODULES architecture modules mapped to implementation"
+    elif [ "$MAPPED" -gt 0 ]; then
+        pass "$MAPPED/$TOTAL_MODULES architecture modules mapped to implementation"
+    else
+        fail "No architecture modules mapped to Rust implementation files"
+    fi
+else
+    warn "No .pi/architecture/modules/ directory (no module mapping to validate)"
+fi
+
+# ---------------------------------------------------------------------------
+# Module documentation
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Module Documentation ---"
+if [ "$TOTAL_RS" -gt 0 ]; then
+    MOD_DOCS=$(grep -rlE '^//!\s' src/ 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$MOD_DOCS" -gt 0 ]; then
+        PCT=$((MOD_DOCS * 100 / TOTAL_RS))
+        pass "Module documentation found in ${MOD_DOCS}/${TOTAL_RS} files (${PCT}%)"
+    else
+        warn "No module-level doc comments found (use //! for module docs)"
+    fi
+else
+    warn "No Rust source files to check for documentation"
+fi
+
+# ---------------------------------------------------------------------------
+# ADR linkage
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- ADR Linkage ---"
+if [ -d ".pi/architecture/decisions" ]; then
+    ADR_FILES=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$ADR_FILES" -gt 0 ]; then
+        ADR_REFS=$(grep -rE '///\s*ADR-' src/ 2>/dev/null | wc -l | tr -d ' ')
+        if [ "$ADR_REFS" -gt 0 ]; then
+            pass "ADR references found in code ($ADR_REFS references)"
+        else
+            warn "No ADR references in code (consider adding /// ADR-NNN comments)"
+        fi
+    else
+        warn "No ADR files found in .pi/architecture/decisions/"
+    fi
+else
+    warn "No .pi/architecture/decisions/ directory (no ADRs to link)"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Canonical reference validation completed.${NC}"
+exit 0

package/templates/pi/scripts/languages/rust/validate-ci.sh

@@ -0,0 +1,147 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-ci.sh — Rust
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0
+ERRORS=()
+WARNINGS=()
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  CI/MR Validation (Rust)"
+echo "============================================"
+echo ""
+
+# ---------------------------------------------------------------------------
+# Cargo.toml detection
+# ---------------------------------------------------------------------------
+echo "--- Project Detection ---"
+if [ -f "Cargo.toml" ]; then
+    pass "Cargo.toml found"
+    # Extract workspace info if available
+    if grep -q '^\[workspace\]' Cargo.toml; then
+        echo "  Workspace project detected"
+    fi
+else
+    fail "No Cargo.toml found (not a Rust project)"
+    echo ""
+    echo "============================================"
+    echo "  Summary"
+    echo "============================================"
+    echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+    echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+    echo ""
+    if [ ${#ERRORS[@]} -gt 0 ]; then
+        echo "FAILURES:"
+        for err in "${ERRORS[@]}"; do
+            echo "  - $err"
+        done
+    fi
+    exit 1
+fi
+
+# ---------------------------------------------------------------------------
+# Build
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Build ---"
+if cargo build --quiet 2>/dev/null; then
+    pass "Build succeeded"
+else
+    fail "Build failed"
+fi
+
+# ---------------------------------------------------------------------------
+# Tests
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Tests ---"
+if cargo test --quiet 2>/dev/null; then
+    pass "All tests passed"
+else
+    fail "Tests failed"
+fi
+
+# ---------------------------------------------------------------------------
+# Lint
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Lint ---"
+if command -v cargo &>/dev/null && cargo clippy --version &>/dev/null; then
+    if cargo clippy --all-targets -- -D warnings 2>/dev/null; then
+        pass "Clippy passed"
+    else
+        fail "Clippy found issues"
+    fi
+else
+    warn "cargo clippy not available, skipping lint"
+fi
+
+# ---------------------------------------------------------------------------
+# Format
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Format ---"
+if command -v cargo &>/dev/null && cargo fmt --version &>/dev/null; then
+    if cargo fmt --check 2>/dev/null; then
+        pass "Format check passed"
+    else
+        fail "Format check failed (run 'cargo fmt')"
+    fi
+else
+    warn "cargo fmt not available, skipping format check"
+fi
+
+# ---------------------------------------------------------------------------
+# Security Audit
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Security Audit ---"
+if command -v cargo &>/dev/null && cargo audit --version &>/dev/null; then
+    AUDIT_OUT=$(cargo audit 2>&1 || true)
+    if echo "$AUDIT_OUT" | grep -q "No advisabilities found\|No known vulnerabilities\|info"; then
+        pass "No known vulnerabilities"
+    else
+        warn "cargo audit reported findings (review manually)"
+    fi
+elif command -v cargo &>/dev/null && cargo deny --version &>/dev/null; then
+    if cargo deny check 2>/dev/null; then
+        pass "cargo deny passed"
+    else
+        warn "cargo deny reported issues (review manually)"
+    fi
+else
+    warn "No Rust audit tools available (cargo audit / cargo deny), skipping vulnerability audit"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}All CI checks passed.${NC}"
+exit 0

package/templates/pi/scripts/languages/rust/validate-integration.sh

@@ -0,0 +1,149 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-integration.sh — Rust
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0
+ERRORS=()
+WARNINGS=()
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Integration Validation (Rust)"
+echo "============================================"
+echo ""
+
+if [ ! -f "Cargo.toml" ]; then
+    warn "No Cargo.toml found (skipping Rust integration validation)"
+    echo ""
+    echo "============================================"
+    echo "  Summary"
+    echo "============================================"
+    echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+    echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+    echo ""
+    echo -e "${GREEN}No Rust project detected, nothing to validate.${NC}"
+    exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# Integration test runner
+# ---------------------------------------------------------------------------
+echo "--- Integration Test Runner ---"
+if [ -d "tests" ]; then
+    INT_TEST_FILES=$(find tests -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$INT_TEST_FILES" -gt 0 ]; then
+        if cargo test --test '*' --quiet 2>/dev/null; then
+            pass "Integration tests passed ($INT_TEST_FILES test files)"
+        else
+            fail "Integration tests failed"
+        fi
+    else
+        warn "tests/ directory exists but contains no .rs files"
+    fi
+else
+    warn "No tests/ directory found (no integration tests to run)"
+fi
+
+# ---------------------------------------------------------------------------
+# Docker/Compose services
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Docker/Compose ---"
+if [ -f "docker-compose.yml" ] || [ -f "docker-compose.yaml" ]; then
+    warn "Docker Compose detected — integration tests may require services (run docker-compose up)"
+else
+    pass "No Docker Compose configuration found"
+fi
+
+# ---------------------------------------------------------------------------
+# Contract tests
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Contract Tests ---"
+CONTRACT_TESTS=$(find . -name "*contract*test*.rs" -o -name "*test*contract*.rs" 2>/dev/null | wc -l | tr -d ' ')
+if [ "$CONTRACT_TESTS" -gt 0 ]; then
+    pass "Contract test files found ($CONTRACT_TESTS)"
+else
+    warn "No contract test files found (consider adding contract tests for external interfaces)"
+fi
+
+# ---------------------------------------------------------------------------
+# Mock/stub detection
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Mock/Stub Detection ---"
+MOCK_LIBS=0
+if grep -qE '^\s*(mockall|mockito|wiremock)\s*=' Cargo.toml 2>/dev/null; then
+    MOCK_LIBS=1
+    pass "Mocking library detected in Cargo.toml"
+fi
+if [ "$MOCK_LIBS" -eq 0 ]; then
+    # Also check for manual mock patterns
+    if grep -rqE '#\[mockall|MockServer|mock_' --include="*.rs" . 2>/dev/null; then
+        pass "Mocking patterns found in source"
+    else
+        warn "No mocking library or patterns detected (mockall, mockito, or wiremock)"
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Database integration
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Database Integration ---"
+DB_INTEG=$(find . -name "*_integration_test.rs" -o -name "*db*test*.rs" 2>/dev/null | wc -l | tr -d ' ')
+if [ "$DB_INTEG" -gt 0 ]; then
+    pass "Database integration test files found ($DB_INTEG)"
+else
+    warn "No database integration test files found"
+fi
+
+# ---------------------------------------------------------------------------
+# HTTP integration
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- HTTP Integration ---"
+HTTP_TEST=0
+if grep -rqE 'axum::test|reqwest|actix_web::test' --include="*.rs" . 2>/dev/null; then
+    HTTP_TEST=1
+    pass "HTTP integration testing detected"
+fi
+if grep -qE '^\s*(axum|actix-web|warp|rocket)\s*=' Cargo.toml 2>/dev/null; then
+    if [ "$HTTP_TEST" -eq 0 ]; then
+        warn "HTTP framework detected but no HTTP test imports found (consider adding integration tests)"
+    fi
+else
+    pass "No HTTP framework dependency found"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Integration validation completed.${NC}"
+exit 0