fix: End-of-file and trailing-whitespace pre-commit compliance

Resolve pre-commit hook formatting failures for multiple files: **Files Fixed:** - .woodpecker/Dockerfile — Add missing final newline - .woodpecker/Dockerfile.cross — Add missing final newline - justfiles/ci.just — Remove trailing whitespace from recipe definitions - docs/setup/tracking-setup.md — Add missing final newline - crates/vapora-backend/src/api/provider_metrics.rs — Add missing final newline **Hooks Passing:** ✅ end-of-file-fixer — Files now have proper final newlines ✅ trailing-whitespace — Removed all trailing spaces ✅ mixed-line-ending — Line endings normalized These changes ensure the pre-commit framework can properly validate file formatting without blocking commits on infrastructure issues.
2026-01-11 21:42:00 +00:00 · 2026-01-11 21:42:00 +00:00 · d86f051955
commit d86f051955
parent 4718f56a28
69 changed files with 3794 additions and 5 deletions
--- a/.cargo/audit.toml
+++ b/.cargo/audit.toml
@ -0,0 +1,37 @@
+# Generated by dev-system/ci
+# cargo-audit configuration for security vulnerability scanning
+
+# Database configuration
+[advisories]
+# The database path
+db-path = "~/.cargo/advisory-db"
+
+# Advisory database URLs
+db-urls = ["https://github.com/rustsec/advisory-db"]
+
+# How to handle different kinds of advisories
+# "allow" - Pass the check despite the warning
+# "warn" - Pass the check but warn about the issue
+# "deny" - Fail the check
+deny = ["unmaintained", "unsound", "yanked"]
+
+# Specific vulnerability IDs to ignore (in case of false positives)
+# You can use: https://rustsec.org/
+ignore = [
+    # Example: { id = "RUSTSEC-2023-XXXX", reason = "Not applicable to our use case" }
+]
+
+# How to handle vulnerabilities based on severity
+[output]
+# Deny on high severity vulnerabilities
+deny = ["high", "critical"]
+# Warn on medium severity vulnerabilities
+warn = ["medium", "low"]
+# Advisory format: "terminal", "json"
+format = "terminal"
+
+# Target configuration
+[target]
+# Check only specific targets
+# Uncomment to restrict to specific target triples
+# triple = "x86_64-unknown-linux-gnu"
--- a/.cargo/config.toml
+++ b/.cargo/config.toml
@ -0,0 +1,77 @@
+# Generated by dev-system/ci
+# Cargo configuration for build and compilation settings
+
+[build]
+# Number of parallel jobs for compilation
+jobs = 4
+
+# Code generation backend
+# codegen-backend = "llvm"
+
+[profile.dev]
+# Development profile - fast compilation, debug info
+opt-level = 0
+debug = true
+debug-assertions = true
+overflow-checks = true
+lto = false
+panic = "unwind"
+incremental = true
+
+[profile.release]
+# Release profile - slow compilation, optimized binary
+opt-level = 3
+debug = false
+debug-assertions = false
+overflow-checks = false
+lto = "thin"
+codegen-units = 1
+panic = "abort"
+incremental = false
+strip = false
+
+[profile.test]
+# Test profile - inherits from dev but can be optimized
+opt-level = 1
+debug = true
+debug-assertions = true
+overflow-checks = true
+lto = false
+panic = "unwind"
+incremental = true
+
+[profile.bench]
+# Benchmark profile - same as release
+opt-level = 3
+debug = false
+debug-assertions = false
+overflow-checks = false
+lto = "thin"
+codegen-units = 1
+panic = "abort"
+incremental = false
+
+# Resolver version
+resolver = "2"
+
+[term]
+# Terminal colors
+color = "auto"
+verbose = false
+progress.when = "auto"
+progress.width = 80
+
+[net]
+# Network settings
+git-fetch-with-cli = true
+offline = false
+
+# Strict version requirements for dependencies
+# force-non-semver-pre = true
+
+[alias]
+# Custom cargo commands
+build-all = "build --all-targets"
+check-all = "check --all-targets --all-features"
+test-all = "test --all-features --workspace"
+doc-all = "doc --all-features --no-deps --open"
--- a/.clippy.toml
+++ b/.clippy.toml
@ -0,0 +1,17 @@
+# Generated by dev-system/ci
+# Clippy configuration for Rust linting
+
+# Lint level thresholds
+cognitive-complexity-threshold = 25
+type-complexity-threshold = 500
+excessive-nesting-threshold = 5
+
+# Allowed patterns (prevent lints on specific code)
+# allow-expect-in-tests = true
+# allow-unwrap-in-tests = true
+
+# Single-character variable name threshold
+single-char-binding-names-threshold = 4
+
+# Note: Lint configurations belong in Cargo.toml under [lints.clippy] or [workspace.lints.clippy]
+# This file only contains clippy configuration parameters, not lint levels
--- a/.github/workflows/nickel-typecheck.yml
+++ b/.github/workflows/nickel-typecheck.yml
@ -0,0 +1,116 @@
+# GitHub Actions Nickel Type Checking Workflow
+# Generated by dev-system/ci
+# Validates all Nickel schemas with nickel typecheck
+
+name: Nickel Type Check
+
+on:
+  push:
+    branches: [main, develop]
+    paths: ['**.ncl']
+  pull_request:
+    branches: [main]
+    paths: ['**.ncl']
+
+jobs:
+  typecheck:
+    name: Nickel Type Checking
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Nickel
+        run: |
+          #!/usr/bin/env bash
+          set -e
+
+          echo "📦 Installing Nickel..."
+
+          if command -v nickel &> /dev/null; then
+            echo "✓ Nickel already installed"
+            nickel --version
+          else
+            echo "Installing via homebrew..."
+            brew install nickel || {
+              echo "Homebrew installation failed, trying from source..."
+              curl --proto '=https' --tlsv1.2 -sSf https://install.nickel-lang.org | bash || exit 1
+            }
+          fi
+
+          nickel --version
+
+      - name: Setup environment
+        run: |
+          #!/usr/bin/env bash
+          # Set NICKEL_IMPORT_PATH for schema imports
+          export NICKEL_IMPORT_PATH="/Users/Akasha/Tools/dev-system/ci/schemas:/Users/Akasha/Tools/dev-system/ci/validators:/Users/Akasha/Tools/dev-system/ci/defaults"
+          echo "NICKEL_IMPORT_PATH=$NICKEL_IMPORT_PATH" >> $GITHUB_ENV
+
+      - name: Type check schemas
+        run: |
+          #!/usr/bin/env bash
+          set -e
+
+          echo "🔍 Type checking Nickel schemas..."
+
+          # Find all .ncl files
+          SCHEMAS=$(find . -name "*.ncl" -type f \
+            ! -path "./target/*" \
+            ! -path "./.git/*" \
+            ! -path "./node_modules/*" \
+            | sort)
+
+          if [ -z "$SCHEMAS" ]; then
+            echo "⚠️  No Nickel schemas found"
+            exit 0
+          fi
+
+          FAILED=0
+          PASSED=0
+
+          # Set import path
+          export NICKEL_IMPORT_PATH="/Users/Akasha/Tools/dev-system/ci/schemas:/Users/Akasha/Tools/dev-system/ci/validators:/Users/Akasha/Tools/dev-system/ci/defaults:."
+
+          for schema in $SCHEMAS; do
+            echo "Checking: $schema"
+            if nickel typecheck "$schema" > /dev/null 2>&1; then
+              echo "  ✓ Valid"
+              ((PASSED++))
+            else
+              echo "  ❌ Type error"
+              nickel typecheck "$schema" || true
+              ((FAILED++))
+            fi
+          done
+
+          echo ""
+          echo "Summary: $PASSED passed, $FAILED failed"
+
+          if [ $FAILED -gt 0 ]; then
+            exit 1
+          fi
+
+      - name: Export and validate
+        run: |
+          #!/usr/bin/env bash
+          set -e
+
+          echo "📊 Exporting Nickel configurations..."
+
+          export NICKEL_IMPORT_PATH="/Users/Akasha/Tools/dev-system/ci/schemas:/Users/Akasha/Tools/dev-system/ci/validators:/Users/Akasha/Tools/dev-system/ci/defaults:."
+
+          # Export main configs if they exist
+          if [ -f ".typedialog/ci/schemas/ci-local.ncl" ]; then
+            echo "Exporting CI config..."
+            nickel export .typedialog/ci/schemas/ci-local.ncl > /tmp/ci-export.json
+            if [ $? -eq 0 ]; then
+              echo "  ✓ Successfully exported"
+            else
+              echo "  ❌ Export failed"
+              exit 1
+            fi
+          fi
+
+          echo "✓ All exports successful"
--- a/.github/workflows/rust-ci.yml
+++ b/.github/workflows/rust-ci.yml
@ -0,0 +1,47 @@
+jobs:
+  audit:
+    name: Security Audit
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    - name: Install Rust
+      uses: dtolnay/rust-toolchain@stable
+    - name: Audit
+      run: cargo audit --deny warnings
+    - name: Deny Check
+      run: cargo deny check licenses advisories
+  check:
+    name: Check + Test + Lint
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    - name: Install Rust
+      uses: dtolnay/rust-toolchain@master
+      with:
+        toolchain: ${{ matrix.rust-version }}
+    - name: Cache
+      uses: Swatinem/rust-cache@v2
+    - name: Check
+      run: cargo check --all-targets
+    - name: Format Check
+      run: cargo fmt --all -- --check
+    - name: Clippy
+      run: cargo clippy --all-targets -- -D warnings
+    - name: Tests
+      run: cargo test --workspace
+    strategy:
+      matrix:
+        rust-version:
+        - stable
+        - nightly
+name: Rust CI
+on:
+  pull_request:
+    branches:
+    - main
+  push:
+    branches:
+    - main
+    - develop
--- a/.markdownlint-cli2.jsonc
+++ b/.markdownlint-cli2.jsonc
@ -0,0 +1,109 @@
+// Markdownlint-cli2 Configuration
+// Documentation quality enforcement for technical projects
+// See: https://github.com/DavidAnson/markdownlint-cli2
+// Generated by dev-system/ci
+
+{
+  "config": {
+    "default": true,
+
+    // Headings - enforce proper hierarchy
+    "MD001": false, // heading-increment (relaxed - allow flexibility)
+    "MD026": { "punctuation": ".,;:!?" },  // heading-punctuation
+
+    // Lists - enforce consistency
+    "MD004": { "style": "consistent" },  // ul-style (consistent list markers)
+    "MD005": false, // inconsistent-indentation (relaxed)
+    "MD007": { "indent": 2 },  // ul-indent
+    "MD029": false,  // ol-prefix (allow flexible list numbering)
+    "MD030": { "ul_single": 1, "ol_single": 1, "ul_multi": 1, "ol_multi": 1 },
+
+    // Code blocks - fenced only
+    "MD046": { "style": "fenced" },  // code-block-style
+
+    // CRITICAL: MD040 only checks opening fences, NOT closing fences
+    // It does NOT catch malformed closing fences with language specifiers (e.g., ```plaintext)
+    // CommonMark spec requires closing fences to be ``` only (no language)
+    // Use separate validation script to check closing fences
+    "MD040": true,  // fenced-code-language (code blocks need language on OPENING fence)
+
+    // Formatting - strict whitespace
+    "MD009": true,  // no-hard-tabs
+    "MD010": true,  // hard-tabs
+    "MD011": true,  // reversed-link-syntax
+    "MD018": true,  // no-missing-space-atx
+    "MD019": true,  // no-multiple-space-atx
+    "MD020": true,  // no-missing-space-closed-atx
+    "MD021": true,  // no-multiple-space-closed-atx
+    "MD023": true,  // heading-starts-line
+    "MD027": true,  // no-multiple-spaces-blockquote
+    "MD037": true,  // no-space-in-emphasis
+    "MD039": true,  // no-space-in-links
+
+    // Trailing content
+    "MD012": false, // no-multiple-blanks (relaxed - allow formatting space)
+    "MD024": false, // no-duplicate-heading (too strict for docs)
+    "MD028": false, // no-blanks-blockquote (relaxed)
+    "MD047": true,  // single-trailing-newline
+
+    // Links and references
+    "MD034": true,  // no-bare-urls (links must be formatted)
+    "MD042": true,  // no-empty-links
+
+    // HTML - allow for documentation formatting and images
+    "MD033": { "allowed_elements": ["br", "hr", "details", "summary", "p", "img"] },
+
+    // Line length - relaxed for technical documentation
+    "MD013": {
+      "line_length": 150,
+      "heading_line_length": 150,
+      "code_block_line_length": 150,
+      "code_blocks": true,
+      "tables": true,
+      "headers": true,
+      "headers_line_length": 150,
+      "strict": false,
+      "stern": false
+    },
+
+    // Images
+    "MD045": true,  // image-alt-text
+
+    // Tables - enforce proper formatting
+    "MD060": true,  // table-column-style (proper spacing: | ---- | not |------|)
+
+    // Disable rules that conflict with relaxed style
+    "MD003": false,  // consistent-indentation
+    "MD041": false,  // first-line-heading
+    "MD025": false,  // single-h1 / multiple-top-level-headings
+    "MD022": false,  // blanks-around-headings (flexible spacing)
+    "MD032": false,  // blanks-around-lists (flexible spacing)
+    "MD035": false,  // hr-style (consistent)
+    "MD036": false,  // no-emphasis-as-heading
+    "MD044": false   // proper-names
+  },
+
+  // Documentation patterns
+  "globs": [
+    "**/*.md",
+    "!node_modules/**",
+    "!target/**",
+    "!.git/**",
+    "!build/**",
+    "!dist/**"
+  ],
+
+  // Ignore build artifacts, external content, and operational directories
+  "ignores": [
+    "node_modules/**",
+    "target/**",
+    ".git/**",
+    "build/**",
+    "dist/**",
+    ".coder/**",
+    ".claude/**",
+    ".wrks/**",
+    ".vale/**",
+    "vendor/**"
+  ]
+}
--- a/.rustfmt.toml
+++ b/.rustfmt.toml
@ -0,0 +1,53 @@
+# Generated by dev-system/ci
+# Rustfmt configuration for consistent Rust code formatting
+# Configured for cargo +nightly fmt with advanced features enabled
+
+# Basic formatting options
+edition = "2021"
+max_width = 100
+hard_tabs = false
+tab_spaces = 4
+newline_style = "Unix"
+
+# Code structure
+use_small_heuristics = "Default"
+
+# Imports
+reorder_imports = true
+reorder_modules = true
+remove_nested_parens = true
+group_imports = "StdExternalCrate"
+
+# Match expressions
+match_block_trailing_comma = false
+
+# Chains
+chain_width = 60
+
+# Comment formatting (nightly)
+comment_width = 80
+wrap_comments = true
+normalize_comments = true
+normalize_doc_attributes = true
+
+# Spaces and indentation (nightly)
+fn_single_line = false
+fn_params_layout = "Tall"
+where_single_line = false
+
+# Formatting (nightly)
+format_strings = true
+format_code_in_doc_comments = false
+
+# Spaces (nightly)
+space_before_colon = false
+space_after_colon = true
+spaces_around_ranges = false
+
+# Line breaks (nightly)
+match_arm_blocks = true
+blank_lines_lower_bound = 0
+blank_lines_upper_bound = 1
+
+# Enable nightly features
+unstable_features = true
--- a/.shellcheckrc
+++ b/.shellcheckrc
@ -0,0 +1,40 @@
+# ShellCheck Configuration Template
+# Bash/shell script linting configuration
+# Generated by dev-system/ci
+# Location: .shellcheckrc
+
+
+# Generated by dev-system/ci
+# ShellCheck configuration for Bash script validation
+
+# Enable all optional checks
+enable=all
+
+# Disable specific checks that are too strict
+# SC1091 - Not following sourced files (noisy in monorepos)
+# disable=SC1091
+
+# Source path for sourced files
+source-path=SCRIPTDIR
+
+# Severity levels: error, warning, info, style
+severity=warning
+
+# Format: gcc, json, json1, quiet
+format=gcc
+
+# Exit status thresholds
+# 0: All checks passed
+# 1: Warning found
+# 2: Error found
+
+# Shell dialect (bash, sh, ksh, etc)
+# shell=bash
+
+# Check style guide compliance
+# These are considered good practices but optional
+
+# Common problematic patterns
+# SC2086 - Double quote to prevent globbing
+# SC2181 - Check exit code explicitly
+# SC2207 - Array from command substitution
--- a/.taplo.toml
+++ b/.taplo.toml
@ -0,0 +1,49 @@
+# Taplo configuration for TOML formatting and linting
+# https://taplo.tamasfe.dev/configuration/
+
+[formatting]
+# Indent tables with 2 spaces
+indent_string = "  "
+indent_tables = true
+
+# Reorder keys alphabetically within tables
+reorder_keys = true
+
+# Reorder arrays to be more readable
+reorder_arrays = false
+
+# Align entries vertically in inline tables
+align_entries = false
+
+# Allow compact inline tables
+allowed_blank_lines = 1
+
+# Trailing newline
+trailing_newline = true
+
+# Column width for wrapping
+column_width = 100
+
+# Compact arrays
+compact_arrays = true
+
+# Compact inline tables
+compact_inline_tables = false
+
+# === INCLUDE/EXCLUDE PATTERNS ===
+
+include = ["Cargo.toml", "*/Cargo.toml", "config/**/*.toml", "**/*.toml"]
+
+exclude = ["target/**", "node_modules/**", ".git/**"]
+
+# === SCHEMA VALIDATION ===
+
+# Cargo.toml schema validation
+[[rule]]
+include = ["**/Cargo.toml"]
+# Taplo includes built-in Cargo.toml schema
+
+# TypeDialog form definition TOML files
+[[rule]]
+include = ["**/.typedialog/**/*.toml", "config/**/forms/*.toml", "tests/fixtures/**/*.toml"]
+keys = ["name", "description", "fields", "items", "elements"]
--- a/.vale.ini
+++ b/.vale.ini
@ -0,0 +1,41 @@
+# Vale configuration for TypeDialog documentation
+# https://vale.sh/docs/topics/config/
+
+StylesPath = .vale/styles
+MinAlertLevel = warning
+
+# Global settings
+[*]
+Packages = Google, write-good
+Vocab = TypeDialog
+
+# Markdown files: docs/**/*.md and root *.md (excluding .claude, .coder, CLAUDE.md)
+[*.md]
+BasedOnStyles = write-good, Google
+
+# Ignore code blocks and specific patterns
+TokenIgnores = (\$\{[^\}]+\}), (`[^`]+`), (\*\*[^\*]+\*\*)
+
+# Disable noisy rules for technical documentation
+Google.Headings = NO
+Google.Parens = NO
+Google.Acronyms = NO
+Google.Passive = NO
+Google.We = NO
+Google.Will = NO
+Google.WordList = NO
+Google.Colons = NO
+
+write-good.E-Prime = NO
+write-good.TooWordy = NO
+write-good.Passive = NO
+
+Vale.Spelling = NO
+
+# Keep enabled (useful for technical docs):
+# - write-good.Weasel (vague words like "various")
+# - Google.Contractions (maintain formal tone)
+# - Google.FirstPerson (avoid "we/our")
+# - Google.Exclamation
+# - Google.Slang
+# - Google.Units
--- a/.vale/Vocab/TypeDialog/accept.txt
+++ b/.vale/Vocab/TypeDialog/accept.txt
@ -0,0 +1,25 @@
+# TypeDialog accepted terms (case-insensitive)
+# Technical acronyms and abbreviations
+API
+CLI
+TUI
+JSON
+YAML
+TOML
+REST
+HTTP
+HTTPS
+TLS
+SSL
+CORS
+URL
+URI
+NPM
+SDK
+HTML
+CSS
+JWT
+WASM
+WebAssembly
+README
+CHANGELOG
--- a/.vale/Vocab/TypeDialog/reject.txt
+++ b/.vale/Vocab/TypeDialog/reject.txt
@ -0,0 +1,2 @@
+# TypeDialog rejected terms
+# Add terms that should never be used
--- a/.vale/styles/Google/AMPM.yml
+++ b/.vale/styles/Google/AMPM.yml
@ -0,0 +1,9 @@
+extends: existence
+message: "Use 'AM' or 'PM' (preceded by a space)."
+link: "https://developers.google.com/style/word-list"
+level: error
+nonword: true
+tokens:
+  - '\d{1,2}[AP]M\b'
+  - '\d{1,2} ?[ap]m\b'
+  - '\d{1,2} ?[aApP]\.[mM]\.'
--- a/.vale/styles/Google/Acronyms.yml
+++ b/.vale/styles/Google/Acronyms.yml
@ -0,0 +1,64 @@
+extends: conditional
+message: "Spell out '%s', if it's unfamiliar to the audience."
+link: 'https://developers.google.com/style/abbreviations'
+level: suggestion
+ignorecase: false
+# Ensures that the existence of 'first' implies the existence of 'second'.
+first: '\b([A-Z]{3,5})\b'
+second: '(?:\b[A-Z][a-z]+ )+\(([A-Z]{3,5})\)'
+# ... with the exception of these:
+exceptions:
+  - API
+  - ASP
+  - CLI
+  - CPU
+  - CSS
+  - CSV
+  - DEBUG
+  - DOM
+  - DPI
+  - FAQ
+  - GCC
+  - GDB
+  - GET
+  - GPU
+  - GTK
+  - GUI
+  - HTML
+  - HTTP
+  - HTTPS
+  - IDE
+  - JAR
+  - JSON
+  - JSX
+  - LESS
+  - LLDB
+  - NET
+  - NOTE
+  - NVDA
+  - OSS
+  - PATH
+  - PDF
+  - PHP
+  - POST
+  - RAM
+  - REPL
+  - RSA
+  - SCM
+  - SCSS
+  - SDK
+  - SQL
+  - SSH
+  - SSL
+  - SVG
+  - TBD
+  - TCP
+  - TODO
+  - URI
+  - URL
+  - USB
+  - UTF
+  - XML
+  - XSS
+  - YAML
+  - ZIP
--- a/.vale/styles/Google/Colons.yml
+++ b/.vale/styles/Google/Colons.yml
@ -0,0 +1,8 @@
+extends: existence
+message: "'%s' should be in lowercase."
+link: 'https://developers.google.com/style/colons'
+nonword: true
+level: warning
+scope: sentence
+tokens:
+  - '(?<!:[^ ]+?):\s[A-Z]'
--- a/.vale/styles/Google/Contractions.yml
+++ b/.vale/styles/Google/Contractions.yml
@ -0,0 +1,30 @@
+extends: substitution
+message: "Use '%s' instead of '%s'."
+link: 'https://developers.google.com/style/contractions'
+level: suggestion
+ignorecase: true
+action:
+  name: replace
+swap:
+  are not: aren't
+  cannot: can't
+  could not: couldn't
+  did not: didn't
+  do not: don't
+  does not: doesn't
+  has not: hasn't
+  have not: haven't
+  how is: how's
+  is not: isn't
+  it is: it's
+  should not: shouldn't
+  that is: that's
+  they are: they're
+  was not: wasn't
+  we are: we're
+  we have: we've
+  were not: weren't
+  what is: what's
+  when is: when's
+  where is: where's
+  will not: won't
--- a/.vale/styles/Google/DateFormat.yml
+++ b/.vale/styles/Google/DateFormat.yml
@ -0,0 +1,9 @@
+extends: existence
+message: "Use 'July 31, 2016' format, not '%s'."
+link: 'https://developers.google.com/style/dates-times'
+ignorecase: true
+level: error
+nonword: true
+tokens:
+  - '\d{1,2}(?:\.|/)\d{1,2}(?:\.|/)\d{4}'
+  - '\d{1,2} (?:Jan(?:uary)?|Feb(?:ruary)?|Mar(?:ch)?|Apr(?:il)|May|Jun(?:e)|Jul(?:y)|Aug(?:ust)|Sep(?:tember)?|Oct(?:ober)|Nov(?:ember)?|Dec(?:ember)?) \d{4}'
--- a/.vale/styles/Google/Ellipses.yml
+++ b/.vale/styles/Google/Ellipses.yml
@ -0,0 +1,9 @@
+extends: existence
+message: "In general, don't use an ellipsis."
+link: 'https://developers.google.com/style/ellipses'
+nonword: true
+level: warning
+action:
+  name: remove
+tokens:
+  - '\.\.\.'
--- a/.vale/styles/Google/EmDash.yml
+++ b/.vale/styles/Google/EmDash.yml
@ -0,0 +1,12 @@
+extends: existence
+message: "Don't put a space before or after a dash."
+link: "https://developers.google.com/style/dashes"
+nonword: true
+level: error
+action:
+  name: edit
+  params:
+    - trim
+    - " "
+tokens:
+  - '\s[—–]\s'
--- a/.vale/styles/Google/Exclamation.yml
+++ b/.vale/styles/Google/Exclamation.yml
@ -0,0 +1,12 @@
+extends: existence
+message: "Don't use exclamation points in text."
+link: "https://developers.google.com/style/exclamation-points"
+nonword: true
+level: error
+action:
+  name: edit
+  params:
+    - trim_right
+    - "!"
+tokens:
+  - '\w+!(?:\s|$)'
--- a/.vale/styles/Google/FirstPerson.yml
+++ b/.vale/styles/Google/FirstPerson.yml
@ -0,0 +1,13 @@
+extends: existence
+message: "Avoid first-person pronouns such as '%s'."
+link: 'https://developers.google.com/style/pronouns#personal-pronouns'
+ignorecase: true
+level: warning
+nonword: true
+tokens:
+  - (?:^|\s)I\s
+  - (?:^|\s)I,\s
+  - \bI'm\b
+  - \bme\b
+  - \bmy\b
+  - \bmine\b
--- a/.vale/styles/Google/Gender.yml
+++ b/.vale/styles/Google/Gender.yml
@ -0,0 +1,9 @@
+extends: existence
+message: "Don't use '%s' as a gender-neutral pronoun."
+link: 'https://developers.google.com/style/pronouns#gender-neutral-pronouns'
+level: error
+ignorecase: true
+tokens:
+  - he/she
+  - s/he
+  - \(s\)he
--- a/.vale/styles/Google/GenderBias.yml
+++ b/.vale/styles/Google/GenderBias.yml
@ -0,0 +1,43 @@
+extends: substitution
+message: "Consider using '%s' instead of '%s'."
+ignorecase: true
+link: "https://developers.google.com/style/inclusive-documentation"
+level: error
+action:
+  name: replace
+swap:
+  (?:alumna|alumnus): graduate
+  (?:alumnae|alumni): graduates
+  air(?:m[ae]n|wom[ae]n): pilot(s)
+  anchor(?:m[ae]n|wom[ae]n): anchor(s)
+  authoress: author
+  camera(?:m[ae]n|wom[ae]n): camera operator(s)
+  door(?:m[ae]|wom[ae]n): concierge(s)
+  draft(?:m[ae]n|wom[ae]n): drafter(s)
+  fire(?:m[ae]n|wom[ae]n): firefighter(s)
+  fisher(?:m[ae]n|wom[ae]n): fisher(s)
+  fresh(?:m[ae]n|wom[ae]n): first-year student(s)
+  garbage(?:m[ae]n|wom[ae]n): waste collector(s)
+  lady lawyer: lawyer
+  ladylike: courteous
+  mail(?:m[ae]n|wom[ae]n): mail carriers
+  man and wife: husband and wife
+  man enough: strong enough
+  mankind: human kind|humanity
+  manmade: manufactured
+  manpower: personnel
+  middle(?:m[ae]n|wom[ae]n): intermediary
+  news(?:m[ae]n|wom[ae]n): journalist(s)
+  ombuds(?:man|woman): ombuds
+  oneupmanship: upstaging
+  poetess: poet
+  police(?:m[ae]n|wom[ae]n): police officer(s)
+  repair(?:m[ae]n|wom[ae]n): technician(s)
+  sales(?:m[ae]n|wom[ae]n): salesperson or sales people
+  service(?:m[ae]n|wom[ae]n): soldier(s)
+  steward(?:ess)?: flight attendant
+  tribes(?:m[ae]n|wom[ae]n): tribe member(s)
+  waitress: waiter
+  woman doctor: doctor
+  woman scientist[s]?: scientist(s)
+  work(?:m[ae]n|wom[ae]n): worker(s)
--- a/.vale/styles/Google/HeadingPunctuation.yml
+++ b/.vale/styles/Google/HeadingPunctuation.yml
@ -0,0 +1,13 @@
+extends: existence
+message: "Don't put a period at the end of a heading."
+link: "https://developers.google.com/style/capitalization#capitalization-in-titles-and-headings"
+nonword: true
+level: warning
+scope: heading
+action:
+  name: edit
+  params:
+    - trim_right
+    - "."
+tokens:
+  - '[a-z0-9][.]\s*$'
--- a/.vale/styles/Google/Headings.yml
+++ b/.vale/styles/Google/Headings.yml
@ -0,0 +1,29 @@
+extends: capitalization
+message: "'%s' should use sentence-style capitalization."
+link: "https://developers.google.com/style/capitalization#capitalization-in-titles-and-headings"
+level: warning
+scope: heading
+match: $sentence
+indicators:
+  - ":"
+exceptions:
+  - Azure
+  - CLI
+  - Cosmos
+  - Docker
+  - Emmet
+  - gRPC
+  - I
+  - Kubernetes
+  - Linux
+  - macOS
+  - Marketplace
+  - MongoDB
+  - REPL
+  - Studio
+  - TypeScript
+  - URLs
+  - Visual
+  - VS
+  - Windows
+  - JSON
--- a/.vale/styles/Google/Latin.yml
+++ b/.vale/styles/Google/Latin.yml
@ -0,0 +1,11 @@
+extends: substitution
+message: "Use '%s' instead of '%s'."
+link: 'https://developers.google.com/style/abbreviations'
+ignorecase: true
+level: error
+nonword: true
+action:
+  name: replace
+swap:
+  '\b(?:eg|e\.g\.)(?=[\s,;])': for example
+  '\b(?:ie|i\.e\.)(?=[\s,;])': that is
--- a/.vale/styles/Google/LyHyphens.yml
+++ b/.vale/styles/Google/LyHyphens.yml
@ -0,0 +1,14 @@
+extends: existence
+message: "'%s' doesn't need a hyphen."
+link: "https://developers.google.com/style/hyphens"
+level: error
+ignorecase: false
+nonword: true
+action:
+  name: edit
+  params:
+    - regex
+    - "-"
+    - " "
+tokens:
+  - '\b[^\s-]+ly-\w+\b'
--- a/.vale/styles/Google/OptionalPlurals.yml
+++ b/.vale/styles/Google/OptionalPlurals.yml
@ -0,0 +1,12 @@
+extends: existence
+message: "Don't use plurals in parentheses such as in '%s'."
+link: "https://developers.google.com/style/plurals-parentheses"
+level: error
+nonword: true
+action:
+  name: edit
+  params:
+    - trim_right
+    - "(s)"
+tokens:
+  - '\b\w+\(s\)'
--- a/.vale/styles/Google/Ordinal.yml
+++ b/.vale/styles/Google/Ordinal.yml
@ -0,0 +1,7 @@
+extends: existence
+message: "Spell out all ordinal numbers ('%s') in text."
+link: 'https://developers.google.com/style/numbers'
+level: error
+nonword: true
+tokens:
+  - \d+(?:st|nd|rd|th)
--- a/.vale/styles/Google/OxfordComma.yml
+++ b/.vale/styles/Google/OxfordComma.yml
@ -0,0 +1,7 @@
+extends: existence
+message: "Use the Oxford comma in '%s'."
+link: 'https://developers.google.com/style/commas'
+scope: sentence
+level: warning
+tokens:
+  - '(?:[^,]+,){1,}\s\w+\s(?:and|or)'
--- a/.vale/styles/Google/Parens.yml
+++ b/.vale/styles/Google/Parens.yml
@ -0,0 +1,7 @@
+extends: existence
+message: "Use parentheses judiciously."
+link: 'https://developers.google.com/style/parentheses'
+nonword: true
+level: suggestion
+tokens:
+  - '\(.+\)'
--- a/.vale/styles/Google/Passive.yml
+++ b/.vale/styles/Google/Passive.yml
@ -0,0 +1,184 @@
+extends: existence
+link: 'https://developers.google.com/style/voice'
+message: "In general, use active voice instead of passive voice ('%s')."
+ignorecase: true
+level: suggestion
+raw:
+  - \b(am|are|were|being|is|been|was|be)\b\s*
+tokens:
+  - '[\w]+ed'
+  - awoken
+  - beat
+  - become
+  - been
+  - begun
+  - bent
+  - beset
+  - bet
+  - bid
+  - bidden
+  - bitten
+  - bled
+  - blown
+  - born
+  - bought
+  - bound
+  - bred
+  - broadcast
+  - broken
+  - brought
+  - built
+  - burnt
+  - burst
+  - cast
+  - caught
+  - chosen
+  - clung
+  - come
+  - cost
+  - crept
+  - cut
+  - dealt
+  - dived
+  - done
+  - drawn
+  - dreamt
+  - driven
+  - drunk
+  - dug
+  - eaten
+  - fallen
+  - fed
+  - felt
+  - fit
+  - fled
+  - flown
+  - flung
+  - forbidden
+  - foregone
+  - forgiven
+  - forgotten
+  - forsaken
+  - fought
+  - found
+  - frozen
+  - given
+  - gone
+  - gotten
+  - ground
+  - grown
+  - heard
+  - held
+  - hidden
+  - hit
+  - hung
+  - hurt
+  - kept
+  - knelt
+  - knit
+  - known
+  - laid
+  - lain
+  - leapt
+  - learnt
+  - led
+  - left
+  - lent
+  - let
+  - lighted
+  - lost
+  - made
+  - meant
+  - met
+  - misspelt
+  - mistaken
+  - mown
+  - overcome
+  - overdone
+  - overtaken
+  - overthrown
+  - paid
+  - pled
+  - proven
+  - put
+  - quit
+  - read
+  - rid
+  - ridden
+  - risen
+  - run
+  - rung
+  - said
+  - sat
+  - sawn
+  - seen
+  - sent
+  - set
+  - sewn
+  - shaken
+  - shaven
+  - shed
+  - shod
+  - shone
+  - shorn
+  - shot
+  - shown
+  - shrunk
+  - shut
+  - slain
+  - slept
+  - slid
+  - slit
+  - slung
+  - smitten
+  - sold
+  - sought
+  - sown
+  - sped
+  - spent
+  - spilt
+  - spit
+  - split
+  - spoken
+  - spread
+  - sprung
+  - spun
+  - stolen
+  - stood
+  - stridden
+  - striven
+  - struck
+  - strung
+  - stuck
+  - stung
+  - stunk
+  - sung
+  - sunk
+  - swept
+  - swollen
+  - sworn
+  - swum
+  - swung
+  - taken
+  - taught
+  - thought
+  - thrived
+  - thrown
+  - thrust
+  - told
+  - torn
+  - trodden
+  - understood
+  - upheld
+  - upset
+  - wed
+  - wept
+  - withheld
+  - withstood
+  - woken
+  - won
+  - worn
+  - wound
+  - woven
+  - written
+  - wrung
--- a/.vale/styles/Google/Periods.yml
+++ b/.vale/styles/Google/Periods.yml
@ -0,0 +1,7 @@
+extends: existence
+message: "Don't use periods with acronyms or initialisms such as '%s'."
+link: 'https://developers.google.com/style/abbreviations'
+level: error
+nonword: true
+tokens:
+  - '\b(?:[A-Z]\.){3,}'
--- a/.vale/styles/Google/Quotes.yml
+++ b/.vale/styles/Google/Quotes.yml
@ -0,0 +1,7 @@
+extends: existence
+message: "Commas and periods go inside quotation marks."
+link: 'https://developers.google.com/style/quotation-marks'
+level: error
+nonword: true
+tokens:
+  - '"[^"]+"[.,?]'
--- a/.vale/styles/Google/Ranges.yml
+++ b/.vale/styles/Google/Ranges.yml
@ -0,0 +1,7 @@
+extends: existence
+message: "Don't add words such as 'from' or 'between' to describe a range of numbers."
+link: 'https://developers.google.com/style/hyphens'
+nonword: true
+level: warning
+tokens:
+  - '(?:from|between)\s\d+\s?-\s?\d+'
--- a/.vale/styles/Google/Semicolons.yml
+++ b/.vale/styles/Google/Semicolons.yml
@ -0,0 +1,8 @@
+extends: existence
+message: "Use semicolons judiciously."
+link: 'https://developers.google.com/style/semicolons'
+nonword: true
+scope: sentence
+level: suggestion
+tokens:
+  - ';'
--- a/.vale/styles/Google/Slang.yml
+++ b/.vale/styles/Google/Slang.yml
@ -0,0 +1,11 @@
+extends: existence
+message: "Don't use internet slang abbreviations such as '%s'."
+link: 'https://developers.google.com/style/abbreviations'
+ignorecase: true
+level: error
+tokens:
+  - 'tl;dr'
+  - ymmv
+  - rtfm
+  - imo
+  - fwiw
--- a/.vale/styles/Google/Spacing.yml
+++ b/.vale/styles/Google/Spacing.yml
@ -0,0 +1,10 @@
+extends: existence
+message: "'%s' should have one space."
+link: 'https://developers.google.com/style/sentence-spacing'
+level: error
+nonword: true
+action:
+  name: remove
+tokens:
+  - '[a-z][.?!] {2,}[A-Z]'
+  - '[a-z][.?!][A-Z]'
--- a/.vale/styles/Google/Spelling.yml
+++ b/.vale/styles/Google/Spelling.yml
@ -0,0 +1,10 @@
+extends: existence
+message: "In general, use American spelling instead of '%s'."
+link: 'https://developers.google.com/style/spelling'
+ignorecase: true
+level: warning
+tokens:
+  - '(?:\w+)nised?'
+  - 'colour'
+  - 'labour'
+  - 'centre'
--- a/.vale/styles/Google/Units.yml
+++ b/.vale/styles/Google/Units.yml
@ -0,0 +1,8 @@
+extends: existence
+message: "Put a nonbreaking space between the number and the unit in '%s'."
+link: "https://developers.google.com/style/units-of-measure"
+nonword: true
+level: error
+tokens:
+  - \b\d+(?:B|kB|MB|GB|TB)
+  - \b\d+(?:ns|ms|s|min|h|d)
--- a/.vale/styles/Google/We.yml
+++ b/.vale/styles/Google/We.yml
@ -0,0 +1,11 @@
+extends: existence
+message: "Try to avoid using first-person plural like '%s'."
+link: 'https://developers.google.com/style/pronouns#personal-pronouns'
+level: warning
+ignorecase: true
+tokens:
+  - we
+  - we'(?:ve|re)
+  - ours?
+  - us
+  - let's
--- a/.vale/styles/Google/Will.yml
+++ b/.vale/styles/Google/Will.yml
@ -0,0 +1,7 @@
+extends: existence
+message: "Avoid using '%s'."
+link: 'https://developers.google.com/style/tense'
+ignorecase: true
+level: warning
+tokens:
+  - will
--- a/.vale/styles/Google/WordList.yml
+++ b/.vale/styles/Google/WordList.yml
@ -0,0 +1,80 @@
+extends: substitution
+message: "Use '%s' instead of '%s'."
+link: "https://developers.google.com/style/word-list"
+level: warning
+ignorecase: false
+action:
+  name: replace
+swap:
+  "(?:API Console|dev|developer) key": API key
+  "(?:cell ?phone|smart ?phone)": phone|mobile phone
+  "(?:dev|developer|APIs) console": API console
+  "(?:e-mail|Email|E-mail)": email
+  "(?:file ?path|path ?name)": path
+  "(?:kill|terminate|abort)": stop|exit|cancel|end
+  "(?:OAuth ?2|Oauth)": OAuth 2.0
+  "(?:ok|Okay)": OK|okay
+  "(?:WiFi|wifi)": Wi-Fi
+  '[\.]+apk': APK
+  '3\-D': 3D
+  'Google (?:I\-O|IO)': Google I/O
+  "tap (?:&|and) hold": touch & hold
+  "un(?:check|select)": clear
+  above: preceding
+  account name: username
+  action bar: app bar
+  admin: administrator
+  Ajax: AJAX
+  a\.k\.a|aka: or|also known as
+  Android device: Android-powered device
+  android: Android
+  API explorer: APIs Explorer
+  application: app
+  approx\.: approximately
+  authN: authentication
+  authZ: authorization
+  autoupdate: automatically update
+  cellular data: mobile data
+  cellular network: mobile network
+  chapter: documents|pages|sections
+  check box: checkbox
+  CLI: command-line tool
+  click on: click|click in
+  Cloud: Google Cloud Platform|GCP
+  Container Engine: Kubernetes Engine
+  content type: media type
+  curated roles: predefined roles
+  data are: data is
+  Developers Console: Google API Console|API Console
+  disabled?: turn off|off
+  ephemeral IP address: ephemeral external IP address
+  fewer data: less data
+  file name: filename
+  firewalls: firewall rules
+  functionality: capability|feature
+  Google account: Google Account
+  Google accounts: Google Accounts
+  Googling: search with Google
+  grayed-out: unavailable
+  HTTPs: HTTPS
+  in order to: to
+  ingest: import|load
+  k8s: Kubernetes
+  long press: touch & hold
+  network IP address: internal IP address
+  omnibox: address bar
+  open-source: open source
+  overview screen: recents screen
+  regex: regular expression
+  SHA1: SHA-1|HAS-SHA1
+  sign into: sign in to
+  sign-?on: single sign-on
+  static IP address: static external IP address
+  stylesheet: style sheet
+  synch: sync
+  tablename: table name
+  tablet: device
+  touch: tap
+  url: URL
+  vs\.: versus
+  World Wide Web: web
--- a/.vale/styles/Google/meta.json
+++ b/.vale/styles/Google/meta.json
@ -0,0 +1,4 @@
+{
+  "feed": "https://github.com/errata-ai/Google/releases.atom",
+  "vale_version": ">=1.0.0"
+}
--- a/.vale/styles/Google/vocab.txt
+++ b/.vale/styles/Google/vocab.txt
--- a/.vale/styles/write-good/Cliches.yml
+++ b/.vale/styles/write-good/Cliches.yml
@ -0,0 +1,702 @@
+extends: existence
+message: "Try to avoid using clichés like '%s'."
+ignorecase: true
+level: warning
+tokens:
+  - a chip off the old block
+  - a clean slate
+  - a dark and stormy night
+  - a far cry
+  - a fine kettle of fish
+  - a loose cannon
+  - a penny saved is a penny earned
+  - a tough row to hoe
+  - a word to the wise
+  - ace in the hole
+  - acid test
+  - add insult to injury
+  - against all odds
+  - air your dirty laundry
+  - all fun and games
+  - all in a day's work
+  - all talk, no action
+  - all thumbs
+  - all your eggs in one basket
+  - all's fair in love and war
+  - all's well that ends well
+  - almighty dollar
+  - American as apple pie
+  - an axe to grind
+  - another day, another dollar
+  - armed to the teeth
+  - as luck would have it
+  - as old as time
+  - as the crow flies
+  - at loose ends
+  - at my wits end
+  - avoid like the plague
+  - babe in the woods
+  - back against the wall
+  - back in the saddle
+  - back to square one
+  - back to the drawing board
+  - bad to the bone
+  - badge of honor
+  - bald faced liar
+  - ballpark figure
+  - banging your head against a brick wall
+  - baptism by fire
+  - barking up the wrong tree
+  - bat out of hell
+  - be all and end all
+  - beat a dead horse
+  - beat around the bush
+  - been there, done that
+  - beggars can't be choosers
+  - behind the eight ball
+  - bend over backwards
+  - benefit of the doubt
+  - bent out of shape
+  - best thing since sliced bread
+  - bet your bottom dollar
+  - better half
+  - better late than never
+  - better mousetrap
+  - better safe than sorry
+  - between a rock and a hard place
+  - beyond the pale
+  - bide your time
+  - big as life
+  - big cheese
+  - big fish in a small pond
+  - big man on campus
+  - bigger they are the harder they fall
+  - bird in the hand
+  - bird's eye view
+  - birds and the bees
+  - birds of a feather flock together
+  - bit the hand that feeds you
+  - bite the bullet
+  - bite the dust
+  - bitten off more than he can chew
+  - black as coal
+  - black as pitch
+  - black as the ace of spades
+  - blast from the past
+  - bleeding heart
+  - blessing in disguise
+  - blind ambition
+  - blind as a bat
+  - blind leading the blind
+  - blood is thicker than water
+  - blood sweat and tears
+  - blow off steam
+  - blow your own horn
+  - blushing bride
+  - boils down to
+  - bolt from the blue
+  - bone to pick
+  - bored stiff
+  - bored to tears
+  - bottomless pit
+  - boys will be boys
+  - bright and early
+  - brings home the bacon
+  - broad across the beam
+  - broken record
+  - brought back to reality
+  - bull by the horns
+  - bull in a china shop
+  - burn the midnight oil
+  - burning question
+  - burning the candle at both ends
+  - burst your bubble
+  - bury the hatchet
+  - busy as a bee
+  - by hook or by crook
+  - call a spade a spade
+  - called onto the carpet
+  - calm before the storm
+  - can of worms
+  - can't cut the mustard
+  - can't hold a candle to
+  - case of mistaken identity
+  - cat got your tongue
+  - cat's meow
+  - caught in the crossfire
+  - caught red-handed
+  - checkered past
+  - chomping at the bit
+  - cleanliness is next to godliness
+  - clear as a bell
+  - clear as mud
+  - close to the vest
+  - cock and bull story
+  - cold shoulder
+  - come hell or high water
+  - cool as a cucumber
+  - cool, calm, and collected
+  - cost a king's ransom
+  - count your blessings
+  - crack of dawn
+  - crash course
+  - creature comforts
+  - cross that bridge when you come to it
+  - crushing blow
+  - cry like a baby
+  - cry me a river
+  - cry over spilt milk
+  - crystal clear
+  - curiosity killed the cat
+  - cut and dried
+  - cut through the red tape
+  - cut to the chase
+  - cute as a bugs ear
+  - cute as a button
+  - cute as a puppy
+  - cuts to the quick
+  - dark before the dawn
+  - day in, day out
+  - dead as a doornail
+  - devil is in the details
+  - dime a dozen
+  - divide and conquer
+  - dog and pony show
+  - dog days
+  - dog eat dog
+  - dog tired
+  - don't burn your bridges
+  - don't count your chickens
+  - don't look a gift horse in the mouth
+  - don't rock the boat
+  - don't step on anyone's toes
+  - don't take any wooden nickels
+  - down and out
+  - down at the heels
+  - down in the dumps
+  - down the hatch
+  - down to earth
+  - draw the line
+  - dressed to kill
+  - dressed to the nines
+  - drives me up the wall
+  - dull as dishwater
+  - dyed in the wool
+  - eagle eye
+  - ear to the ground
+  - early bird catches the worm
+  - easier said than done
+  - easy as pie
+  - eat your heart out
+  - eat your words
+  - eleventh hour
+  - even the playing field
+  - every dog has its day
+  - every fiber of my being
+  - everything but the kitchen sink
+  - eye for an eye
+  - face the music
+  - facts of life
+  - fair weather friend
+  - fall by the wayside
+  - fan the flames
+  - feast or famine
+  - feather your nest
+  - feathered friends
+  - few and far between
+  - fifteen minutes of fame
+  - filthy vermin
+  - fine kettle of fish
+  - fish out of water
+  - fishing for a compliment
+  - fit as a fiddle
+  - fit the bill
+  - fit to be tied
+  - flash in the pan
+  - flat as a pancake
+  - flip your lid
+  - flog a dead horse
+  - fly by night
+  - fly the coop
+  - follow your heart
+  - for all intents and purposes
+  - for the birds
+  - for what it's worth
+  - force of nature
+  - force to be reckoned with
+  - forgive and forget
+  - fox in the henhouse
+  - free and easy
+  - free as a bird
+  - fresh as a daisy
+  - full steam ahead
+  - fun in the sun
+  - garbage in, garbage out
+  - gentle as a lamb
+  - get a kick out of
+  - get a leg up
+  - get down and dirty
+  - get the lead out
+  - get to the bottom of
+  - get your feet wet
+  - gets my goat
+  - gilding the lily
+  - give and take
+  - go against the grain
+  - go at it tooth and nail
+  - go for broke
+  - go him one better
+  - go the extra mile
+  - go with the flow
+  - goes without saying
+  - good as gold
+  - good deed for the day
+  - good things come to those who wait
+  - good time was had by all
+  - good times were had by all
+  - greased lightning
+  - greek to me
+  - green thumb
+  - green-eyed monster
+  - grist for the mill
+  - growing like a weed
+  - hair of the dog
+  - hand to mouth
+  - happy as a clam
+  - happy as a lark
+  - hasn't a clue
+  - have a nice day
+  - have high hopes
+  - have the last laugh
+  - haven't got a row to hoe
+  - head honcho
+  - head over heels
+  - hear a pin drop
+  - heard it through the grapevine
+  - heart's content
+  - heavy as lead
+  - hem and haw
+  - high and dry
+  - high and mighty
+  - high as a kite
+  - hit paydirt
+  - hold your head up high
+  - hold your horses
+  - hold your own
+  - hold your tongue
+  - honest as the day is long
+  - horns of a dilemma
+  - horse of a different color
+  - hot under the collar
+  - hour of need
+  - I beg to differ
+  - icing on the cake
+  - if the shoe fits
+  - if the shoe were on the other foot
+  - in a jam
+  - in a jiffy
+  - in a nutshell
+  - in a pig's eye
+  - in a pinch
+  - in a word
+  - in hot water
+  - in the gutter
+  - in the nick of time
+  - in the thick of it
+  - in your dreams
+  - it ain't over till the fat lady sings
+  - it goes without saying
+  - it takes all kinds
+  - it takes one to know one
+  - it's a small world
+  - it's only a matter of time
+  - ivory tower
+  - Jack of all trades
+  - jockey for position
+  - jog your memory
+  - joined at the hip
+  - judge a book by its cover
+  - jump down your throat
+  - jump in with both feet
+  - jump on the bandwagon
+  - jump the gun
+  - jump to conclusions
+  - just a hop, skip, and a jump
+  - just the ticket
+  - justice is blind
+  - keep a stiff upper lip
+  - keep an eye on
+  - keep it simple, stupid
+  - keep the home fires burning
+  - keep up with the Joneses
+  - keep your chin up
+  - keep your fingers crossed
+  - kick the bucket
+  - kick up your heels
+  - kick your feet up
+  - kid in a candy store
+  - kill two birds with one stone
+  - kiss of death
+  - knock it out of the park
+  - knock on wood
+  - knock your socks off
+  - know him from Adam
+  - know the ropes
+  - know the score
+  - knuckle down
+  - knuckle sandwich
+  - knuckle under
+  - labor of love
+  - ladder of success
+  - land on your feet
+  - lap of luxury
+  - last but not least
+  - last hurrah
+  - last-ditch effort
+  - law of the jungle
+  - law of the land
+  - lay down the law
+  - leaps and bounds
+  - let sleeping dogs lie
+  - let the cat out of the bag
+  - let the good times roll
+  - let your hair down
+  - let's talk turkey
+  - letter perfect
+  - lick your wounds
+  - lies like a rug
+  - life's a bitch
+  - life's a grind
+  - light at the end of the tunnel
+  - lighter than a feather
+  - lighter than air
+  - like clockwork
+  - like father like son
+  - like taking candy from a baby
+  - like there's no tomorrow
+  - lion's share
+  - live and learn
+  - live and let live
+  - long and short of it
+  - long lost love
+  - look before you leap
+  - look down your nose
+  - look what the cat dragged in
+  - looking a gift horse in the mouth
+  - looks like death warmed over
+  - loose cannon
+  - lose your head
+  - lose your temper
+  - loud as a horn
+  - lounge lizard
+  - loved and lost
+  - low man on the totem pole
+  - luck of the draw
+  - luck of the Irish
+  - make hay while the sun shines
+  - make money hand over fist
+  - make my day
+  - make the best of a bad situation
+  - make the best of it
+  - make your blood boil
+  - man of few words
+  - man's best friend
+  - mark my words
+  - meaningful dialogue
+  - missed the boat on that one
+  - moment in the sun
+  - moment of glory
+  - moment of truth
+  - money to burn
+  - more power to you
+  - more than one way to skin a cat
+  - movers and shakers
+  - moving experience
+  - naked as a jaybird
+  - naked truth
+  - neat as a pin
+  - needle in a haystack
+  - needless to say
+  - neither here nor there
+  - never look back
+  - never say never
+  - nip and tuck
+  - nip it in the bud
+  - no guts, no glory
+  - no love lost
+  - no pain, no gain
+  - no skin off my back
+  - no stone unturned
+  - no time like the present
+  - no use crying over spilled milk
+  - nose to the grindstone
+  - not a hope in hell
+  - not a minute's peace
+  - not in my backyard
+  - not playing with a full deck
+  - not the end of the world
+  - not written in stone
+  - nothing to sneeze at
+  - nothing ventured nothing gained
+  - now we're cooking
+  - off the top of my head
+  - off the wagon
+  - off the wall
+  - old hat
+  - older and wiser
+  - older than dirt
+  - older than Methuselah
+  - on a roll
+  - on cloud nine
+  - on pins and needles
+  - on the bandwagon
+  - on the money
+  - on the nose
+  - on the rocks
+  - on the spot
+  - on the tip of my tongue
+  - on the wagon
+  - on thin ice
+  - once bitten, twice shy
+  - one bad apple doesn't spoil the bushel
+  - one born every minute
+  - one brick short
+  - one foot in the grave
+  - one in a million
+  - one red cent
+  - only game in town
+  - open a can of worms
+  - open and shut case
+  - open the flood gates
+  - opportunity doesn't knock twice
+  - out of pocket
+  - out of sight, out of mind
+  - out of the frying pan into the fire
+  - out of the woods
+  - out on a limb
+  - over a barrel
+  - over the hump
+  - pain and suffering
+  - pain in the
+  - panic button
+  - par for the course
+  - part and parcel
+  - party pooper
+  - pass the buck
+  - patience is a virtue
+  - pay through the nose
+  - penny pincher
+  - perfect storm
+  - pig in a poke
+  - pile it on
+  - pillar of the community
+  - pin your hopes on
+  - pitter patter of little feet
+  - plain as day
+  - plain as the nose on your face
+  - play by the rules
+  - play your cards right
+  - playing the field
+  - playing with fire
+  - pleased as punch
+  - plenty of fish in the sea
+  - point with pride
+  - poor as a church mouse
+  - pot calling the kettle black
+  - pretty as a picture
+  - pull a fast one
+  - pull your punches
+  - pulling your leg
+  - pure as the driven snow
+  - put it in a nutshell
+  - put one over on you
+  - put the cart before the horse
+  - put the pedal to the metal
+  - put your best foot forward
+  - put your foot down
+  - quick as a bunny
+  - quick as a lick
+  - quick as a wink
+  - quick as lightning
+  - quiet as a dormouse
+  - rags to riches
+  - raining buckets
+  - raining cats and dogs
+  - rank and file
+  - rat race
+  - reap what you sow
+  - red as a beet
+  - red herring
+  - reinvent the wheel
+  - rich and famous
+  - rings a bell
+  - ripe old age
+  - ripped me off
+  - rise and shine
+  - road to hell is paved with good intentions
+  - rob Peter to pay Paul
+  - roll over in the grave
+  - rub the wrong way
+  - ruled the roost
+  - running in circles
+  - sad but true
+  - sadder but wiser
+  - salt of the earth
+  - scared stiff
+  - scared to death
+  - sealed with a kiss
+  - second to none
+  - see eye to eye
+  - seen the light
+  - seize the day
+  - set the record straight
+  - set the world on fire
+  - set your teeth on edge
+  - sharp as a tack
+  - shoot for the moon
+  - shoot the breeze
+  - shot in the dark
+  - shoulder to the wheel
+  - sick as a dog
+  - sigh of relief
+  - signed, sealed, and delivered
+  - sink or swim
+  - six of one, half a dozen of another
+  - skating on thin ice
+  - slept like a log
+  - slinging mud
+  - slippery as an eel
+  - slow as molasses
+  - smart as a whip
+  - smooth as a baby's bottom
+  - sneaking suspicion
+  - snug as a bug in a rug
+  - sow wild oats
+  - spare the rod, spoil the child
+  - speak of the devil
+  - spilled the beans
+  - spinning your wheels
+  - spitting image of
+  - spoke with relish
+  - spread like wildfire
+  - spring to life
+  - squeaky wheel gets the grease
+  - stands out like a sore thumb
+  - start from scratch
+  - stick in the mud
+  - still waters run deep
+  - stitch in time
+  - stop and smell the roses
+  - straight as an arrow
+  - straw that broke the camel's back
+  - strong as an ox
+  - stubborn as a mule
+  - stuff that dreams are made of
+  - stuffed shirt
+  - sweating blood
+  - sweating bullets
+  - take a load off
+  - take one for the team
+  - take the bait
+  - take the bull by the horns
+  - take the plunge
+  - takes one to know one
+  - takes two to tango
+  - the more the merrier
+  - the real deal
+  - the real McCoy
+  - the red carpet treatment
+  - the same old story
+  - there is no accounting for taste
+  - thick as a brick
+  - thick as thieves
+  - thin as a rail
+  - think outside of the box
+  - third time's the charm
+  - this day and age
+  - this hurts me worse than it hurts you
+  - this point in time
+  - three sheets to the wind
+  - through thick and thin
+  - throw in the towel
+  - tie one on
+  - tighter than a drum
+  - time and time again
+  - time is of the essence
+  - tip of the iceberg
+  - tired but happy
+  - to coin a phrase
+  - to each his own
+  - to make a long story short
+  - to the best of my knowledge
+  - toe the line
+  - tongue in cheek
+  - too good to be true
+  - too hot to handle
+  - too numerous to mention
+  - touch with a ten foot pole
+  - tough as nails
+  - trial and error
+  - trials and tribulations
+  - tried and true
+  - trip down memory lane
+  - twist of fate
+  - two cents worth
+  - two peas in a pod
+  - ugly as sin
+  - under the counter
+  - under the gun
+  - under the same roof
+  - under the weather
+  - until the cows come home
+  - unvarnished truth
+  - up the creek
+  - uphill battle
+  - upper crust
+  - upset the applecart
+  - vain attempt
+  - vain effort
+  - vanquish the enemy
+  - vested interest
+  - waiting for the other shoe to drop
+  - wakeup call
+  - warm welcome
+  - watch your p's and q's
+  - watch your tongue
+  - watching the clock
+  - water under the bridge
+  - weather the storm
+  - weed them out
+  - week of Sundays
+  - went belly up
+  - wet behind the ears
+  - what goes around comes around
+  - what you see is what you get
+  - when it rains, it pours
+  - when push comes to shove
+  - when the cat's away
+  - when the going gets tough, the tough get going
+  - white as a sheet
+  - whole ball of wax
+  - whole hog
+  - whole nine yards
+  - wild goose chase
+  - will wonders never cease?
+  - wisdom of the ages
+  - wise as an owl
+  - wolf at the door
+  - words fail me
+  - work like a dog
+  - world weary
+  - worst nightmare
+  - worth its weight in gold
+  - wrong side of the bed
+  - yanking your chain
+  - yappy as a dog
+  - years young
+  - you are what you eat
+  - you can run but you can't hide
+  - you only live once
+  - you're the boss
+  - young and foolish
+  - young and vibrant
--- a/.vale/styles/write-good/E-Prime.yml
+++ b/.vale/styles/write-good/E-Prime.yml
@ -0,0 +1,32 @@
+extends: existence
+message: "Try to avoid using '%s'."
+ignorecase: true
+level: suggestion
+tokens:
+  - am
+  - are
+  - aren't
+  - be
+  - been
+  - being
+  - he's
+  - here's
+  - here's
+  - how's
+  - i'm
+  - is
+  - isn't
+  - it's
+  - she's
+  - that's
+  - there's
+  - they're
+  - was
+  - wasn't
+  - we're
+  - were
+  - weren't
+  - what's
+  - where's
+  - who's
+  - you're
--- a/.vale/styles/write-good/Illusions.yml
+++ b/.vale/styles/write-good/Illusions.yml
@ -0,0 +1,11 @@
+extends: repetition
+message: "'%s' is repeated!"
+level: warning
+alpha: true
+action:
+  name: edit
+  params:
+    - truncate
+    - " "
+tokens:
+  - '[^\s]+'
--- a/.vale/styles/write-good/Passive.yml
+++ b/.vale/styles/write-good/Passive.yml
@ -0,0 +1,183 @@
+extends: existence
+message: "'%s' may be passive voice. Use active voice if you can."
+ignorecase: true
+level: warning
+raw:
+  - \b(am|are|were|being|is|been|was|be)\b\s*
+tokens:
+  - '[\w]+ed'
+  - awoken
+  - beat
+  - become
+  - been
+  - begun
+  - bent
+  - beset
+  - bet
+  - bid
+  - bidden
+  - bitten
+  - bled
+  - blown
+  - born
+  - bought
+  - bound
+  - bred
+  - broadcast
+  - broken
+  - brought
+  - built
+  - burnt
+  - burst
+  - cast
+  - caught
+  - chosen
+  - clung
+  - come
+  - cost
+  - crept
+  - cut
+  - dealt
+  - dived
+  - done
+  - drawn
+  - dreamt
+  - driven
+  - drunk
+  - dug
+  - eaten
+  - fallen
+  - fed
+  - felt
+  - fit
+  - fled
+  - flown
+  - flung
+  - forbidden
+  - foregone
+  - forgiven
+  - forgotten
+  - forsaken
+  - fought
+  - found
+  - frozen
+  - given
+  - gone
+  - gotten
+  - ground
+  - grown
+  - heard
+  - held
+  - hidden
+  - hit
+  - hung
+  - hurt
+  - kept
+  - knelt
+  - knit
+  - known
+  - laid
+  - lain
+  - leapt
+  - learnt
+  - led
+  - left
+  - lent
+  - let
+  - lighted
+  - lost
+  - made
+  - meant
+  - met
+  - misspelt
+  - mistaken
+  - mown
+  - overcome
+  - overdone
+  - overtaken
+  - overthrown
+  - paid
+  - pled
+  - proven
+  - put
+  - quit
+  - read
+  - rid
+  - ridden
+  - risen
+  - run
+  - rung
+  - said
+  - sat
+  - sawn
+  - seen
+  - sent
+  - set
+  - sewn
+  - shaken
+  - shaven
+  - shed
+  - shod
+  - shone
+  - shorn
+  - shot
+  - shown
+  - shrunk
+  - shut
+  - slain
+  - slept
+  - slid
+  - slit
+  - slung
+  - smitten
+  - sold
+  - sought
+  - sown
+  - sped
+  - spent
+  - spilt
+  - spit
+  - split
+  - spoken
+  - spread
+  - sprung
+  - spun
+  - stolen
+  - stood
+  - stridden
+  - striven
+  - struck
+  - strung
+  - stuck
+  - stung
+  - stunk
+  - sung
+  - sunk
+  - swept
+  - swollen
+  - sworn
+  - swum
+  - swung
+  - taken
+  - taught
+  - thought
+  - thrived
+  - thrown
+  - thrust
+  - told
+  - torn
+  - trodden
+  - understood
+  - upheld
+  - upset
+  - wed
+  - wept
+  - withheld
+  - withstood
+  - woken
+  - won
+  - worn
+  - wound
+  - woven
+  - written
+  - wrung
--- a/.vale/styles/write-good/README.md
+++ b/.vale/styles/write-good/README.md
@ -0,0 +1,27 @@
+Based on [write-good](https://github.com/btford/write-good).
+
+> Naive linter for English prose for developers who can't write good and wanna learn to do other stuff good too.
+
+```
+The MIT License (MIT)
+
+Copyright (c) 2014 Brian Ford
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
--- a/.vale/styles/write-good/So.yml
+++ b/.vale/styles/write-good/So.yml
@ -0,0 +1,5 @@
+extends: existence
+message: "Don't start a sentence with '%s'."
+level: error
+raw:
+  - '(?:[;-]\s)so[\s,]|\bSo[\s,]'
--- a/.vale/styles/write-good/ThereIs.yml
+++ b/.vale/styles/write-good/ThereIs.yml
@ -0,0 +1,6 @@
+extends: existence
+message: "Don't start a sentence with '%s'."
+ignorecase: false
+level: error
+raw:
+  - '(?:[;-]\s)There\s(is|are)|\bThere\s(is|are)\b'
--- a/.vale/styles/write-good/TooWordy.yml
+++ b/.vale/styles/write-good/TooWordy.yml
@ -0,0 +1,221 @@
+extends: existence
+message: "'%s' is too wordy."
+ignorecase: true
+level: warning
+tokens:
+  - a number of
+  - abundance
+  - accede to
+  - accelerate
+  - accentuate
+  - accompany
+  - accomplish
+  - accorded
+  - accrue
+  - acquiesce
+  - acquire
+  - additional
+  - adjacent to
+  - adjustment
+  - admissible
+  - advantageous
+  - adversely impact
+  - advise
+  - aforementioned
+  - aggregate
+  - aircraft
+  - all of
+  - all things considered
+  - alleviate
+  - allocate
+  - along the lines of
+  - already existing
+  - alternatively
+  - amazing
+  - ameliorate
+  - anticipate
+  - apparent
+  - appreciable
+  - as a matter of fact
+  - as a means of
+  - as far as I'm concerned
+  - as of yet
+  - as to
+  - as yet
+  - ascertain
+  - assistance
+  - at the present time
+  - at this time
+  - attain
+  - attributable to
+  - authorize
+  - because of the fact that
+  - belated
+  - benefit from
+  - bestow
+  - by means of
+  - by virtue of
+  - by virtue of the fact that
+  - cease
+  - close proximity
+  - commence
+  - comply with
+  - concerning
+  - consequently
+  - consolidate
+  - constitutes
+  - demonstrate
+  - depart
+  - designate
+  - discontinue
+  - due to the fact that
+  - each and every
+  - economical
+  - eliminate
+  - elucidate
+  - employ
+  - endeavor
+  - enumerate
+  - equitable
+  - equivalent
+  - evaluate
+  - evidenced
+  - exclusively
+  - expedite
+  - expend
+  - expiration
+  - facilitate
+  - factual evidence
+  - feasible
+  - finalize
+  - first and foremost
+  - for all intents and purposes
+  - for the most part
+  - for the purpose of
+  - forfeit
+  - formulate
+  - have a tendency to
+  - honest truth
+  - however
+  - if and when
+  - impacted
+  - implement
+  - in a manner of speaking
+  - in a timely manner
+  - in a very real sense
+  - in accordance with
+  - in addition
+  - in all likelihood
+  - in an effort to
+  - in between
+  - in excess of
+  - in lieu of
+  - in light of the fact that
+  - in many cases
+  - in my opinion
+  - in order to
+  - in regard to
+  - in some instances
+  - in terms of
+  - in the case of
+  - in the event that
+  - in the final analysis
+  - in the nature of
+  - in the near future
+  - in the process of
+  - inception
+  - incumbent upon
+  - indicate
+  - indication
+  - initiate
+  - irregardless
+  - is applicable to
+  - is authorized to
+  - is responsible for
+  - it is
+  - it is essential
+  - it seems that
+  - it was
+  - magnitude
+  - maximum
+  - methodology
+  - minimize
+  - minimum
+  - modify
+  - monitor
+  - multiple
+  - necessitate
+  - nevertheless
+  - not certain
+  - not many
+  - not often
+  - not unless
+  - not unlike
+  - notwithstanding
+  - null and void
+  - numerous
+  - objective
+  - obligate
+  - obtain
+  - on the contrary
+  - on the other hand
+  - one particular
+  - optimum
+  - overall
+  - owing to the fact that
+  - participate
+  - particulars
+  - pass away
+  - pertaining to
+  - point in time
+  - portion
+  - possess
+  - preclude
+  - previously
+  - prior to
+  - prioritize
+  - procure
+  - proficiency
+  - provided that
+  - purchase
+  - put simply
+  - readily apparent
+  - refer back
+  - regarding
+  - relocate
+  - remainder
+  - remuneration
+  - requirement
+  - reside
+  - residence
+  - retain
+  - satisfy
+  - shall
+  - should you wish
+  - similar to
+  - solicit
+  - span across
+  - strategize
+  - subsequent
+  - substantial
+  - successfully complete
+  - sufficient
+  - terminate
+  - the month of
+  - the point I am trying to make
+  - therefore
+  - time period
+  - took advantage of
+  - transmit
+  - transpire
+  - type of
+  - until such time as
+  - utilization
+  - utilize
+  - validate
+  - various different
+  - what I mean to say is
+  - whether or not
+  - with respect to
+  - with the exception of
+  - witnessed
--- a/.vale/styles/write-good/Weasel.yml
+++ b/.vale/styles/write-good/Weasel.yml
@ -0,0 +1,29 @@
+extends: existence
+message: "'%s' is a weasel word!"
+ignorecase: true
+level: warning
+tokens:
+  - clearly
+  - completely
+  - exceedingly
+  - excellent
+  - extremely
+  - fairly
+  - huge
+  - interestingly
+  - is a number
+  - largely
+  - mostly
+  - obviously
+  - quite
+  - relatively
+  - remarkably
+  - several
+  - significantly
+  - substantially
+  - surprisingly
+  - tiny
+  - usually
+  - various
+  - vast
+  - very
--- a/.vale/styles/write-good/meta.json
+++ b/.vale/styles/write-good/meta.json
@ -0,0 +1,4 @@
+{
+  "feed": "https://github.com/errata-ai/write-good/releases.atom",
+  "vale_version": ">=1.0.0"
+}
--- a/.woodpecker/Dockerfile
+++ b/.woodpecker/Dockerfile
@ -0,0 +1,45 @@
+# Custom Docker image for Woodpecker CI
+# Pre-installs common tools to speed up CI runs
+#
+# Build: docker build -t your-registry/ci:latest -f .woodpecker/Dockerfile .
+# Push: docker push your-registry/ci:latest
+#
+# Then update .woodpecker/ci.yml to use: image: your-registry/ci:latest
+
+FROM rust:latest
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+    shellcheck \
+    curl \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install just
+RUN curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -s -- --to /usr/local/bin
+
+# Install Rust components
+RUN rustup component add clippy rustfmt
+
+# Install Rust tools (pre-compiled to speed up CI)
+RUN cargo install \
+    cargo-audit \
+    cargo-deny \
+    cargo-sbom \
+    nickel-lang-cli \
+    nu \
+    --locked
+
+# Set working directory
+WORKDIR /workspace
+
+# Verify installations
+RUN just --version && \
+    cargo --version && \
+    cargo audit --version && \
+    cargo deny --version && \
+    cargo sbom --version && \
+    nickel --version && \
+    nu --version
+
+CMD ["/bin/bash"]
--- a/.woodpecker/Dockerfile.cross
+++ b/.woodpecker/Dockerfile.cross
@ -0,0 +1,42 @@
+# Dockerfile for cross-platform compilation
+# Supports building for multiple targets using docker
+
+FROM ubuntu:22.04
+
+# Install build essentials
+RUN apt-get update && apt-get install -y \
+    build-essential \
+    curl \
+    git \
+    pkg-config \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Rust
+RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable
+ENV PATH="/root/.cargo/bin:${PATH}"
+
+# Install cross tool for cross-compilation
+RUN cargo install cross --locked
+
+# Create workspace directory
+WORKDIR /workspace
+
+# Copy entire project
+COPY . .
+
+# Default build target
+ARG TARGET=x86_64-unknown-linux-gnu
+ENV BUILD_TARGET="${TARGET}"
+
+# Build command
+RUN cross build --target "${BUILD_TARGET}" --release
+
+# Extract binaries to output directory
+RUN mkdir -p /output/bin && \
+    find target/"${BUILD_TARGET}"/release -maxdepth 1 -type f -executable -exec cp {} /output/bin/ \;
+
+# Create manifest
+RUN echo "{ \"target\": \"${BUILD_TARGET}\", \"built\": \"$(date -u +'%Y-%m-%dT%H:%M:%SZ')\" }" > /output/BUILD_INFO.json
+
+# Default command
+CMD ["/bin/bash"]
--- a/.woodpecker/README.md
+++ b/.woodpecker/README.md
@ -0,0 +1,78 @@
+# Woodpecker CI Configuration
+
+Pipelines for Gitea/Forgejo + Woodpecker CI.
+
+## Files
+
+- **`ci.yml`** - Main CI pipeline (push, pull requests)
+- **`Dockerfile`** - Custom CI image with pre-installed tools
+- **`Dockerfile.cross`** - Cross-compilation image for multi-platform builds
+
+## Setup
+
+### 1. Activate Woodpecker CI
+
+Enable Woodpecker CI in your Gitea/Forgejo repository settings.
+
+### 2. (Optional) Build Custom Image
+
+Speeds up CI by pre-installing tools (~5 min faster per run).
+
+```bash
+# Build CI image
+docker build -t your-registry/ci:latest -f .woodpecker/Dockerfile .
+
+# Push to your registry
+docker push your-registry/ci:latest
+
+# Update .woodpecker/ci.yml
+# Change: image: rust:latest
+# To: image: your-registry/ci:latest
+```
+
+### 3. Cross-Compilation Setup
+
+For multi-platform builds:
+
+```bash
+# Build cross-compilation image
+docker build -t your-registry/ci-cross:latest -f .woodpecker/Dockerfile.cross .
+
+# Push to registry
+docker push your-registry/ci-cross:latest
+```
+
+## CI Pipeline (`ci.yml`)
+
+**Triggers**: Push to `main`/`develop`, Pull Requests
+
+**Jobs**:
+1. Lint (Rust, Bash, Nickel, Nushell, Markdown) - Parallel
+2. Test (all features)
+3. Build (release)
+4. Security audit
+5. License compliance check
+
+**Duration**: ~15-20 minutes (without custom image), ~10-15 minutes (with custom image)
+
+## Triggering Pipelines
+
+```bash
+# CI pipeline (automatic on push/PR)
+git push origin main
+```
+
+## Viewing Results
+
+- **Gitea/Forgejo**: Repository → Actions → Pipeline runs
+- **Woodpecker UI**: https://your-woodpecker.instance/repos/{user}/{repo}
+
+## Differences from GitHub Actions
+
+| Feature | GitHub Actions | Woodpecker CI |
+|---------|---------------|---------------|
+| Matrix builds | ✅ 3 OS | ❌ Linux only* |
+| Caching | ✅ Built-in | ⚠️  Server-side** |
+
+\* Multi-OS builds require multiple Woodpecker agents
+\*\* Configure in Woodpecker server settings
--- a/.woodpecker/ci-advanced.yml
+++ b/.woodpecker/ci-advanced.yml
@ -0,0 +1,168 @@
+# Woodpecker CI - Advanced Pipeline
+# Multi-platform builds, coverage, benchmarks, and security scanning
+
+when:
+  event: [push, pull_request, manual]
+  branch:
+    - main
+    - develop
+
+matrix:
+  PLATFORM:
+    - linux/amd64
+    - linux/arm64
+
+steps:
+  # === LINTING (Parallel) ===
+
+  lint-rust:
+    image: rust:latest
+    commands:
+      - curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -s -- --to /usr/local/bin
+      - rustup component add clippy rustfmt
+      - cargo fmt --all -- --check
+      - cargo clippy --all-targets --all-features -- -D warnings
+    environment:
+      CARGO_TERM_COLOR: always
+
+  lint-bash:
+    image: koalaman/shellcheck-alpine:stable
+    commands:
+      - apk add --no-cache curl bash
+      - find . -name '*.sh' -type f ! -path './target/*' -exec shellcheck {} +
+
+  lint-nickel:
+    image: rust:latest
+    commands:
+      - cargo install nickel-lang-cli --locked
+      - find . -name '*.ncl' -type f ! -path './target/*' -exec nickel typecheck {} \;
+
+  lint-nushell:
+    image: rust:latest
+    commands:
+      - cargo install nu --locked
+      - find . -name '*.nu' -type f ! -path './target/*' -exec nu --ide-check 100 {} \;
+
+  lint-markdown:
+    image: node:alpine
+    commands:
+      - npm install -g markdownlint-cli2
+      - markdownlint-cli2 '**/*.md' '#node_modules' '#target'
+
+  # === TESTING ===
+
+  test:
+    image: rust:latest
+    commands:
+      - cargo test --workspace --all-features --no-fail-fast
+    depends_on:
+      - lint-rust
+      - lint-bash
+      - lint-nickel
+      - lint-nushell
+      - lint-markdown
+    environment:
+      RUST_BACKTRACE: 1
+
+  # === CODE COVERAGE ===
+
+  coverage:
+    image: rust:latest
+    commands:
+      - cargo install cargo-tarpaulin --locked
+      - cargo tarpaulin --workspace --all-features --out Xml --output-dir coverage
+      - |
+        if [ -f coverage/cobertura.xml ]; then
+          echo "Coverage report generated successfully"
+        fi
+    depends_on:
+      - test
+    when:
+      event: [push, pull_request]
+      branch: [main, develop]
+
+  # === BUILD (Multi-platform) ===
+
+  build-native:
+    image: rust:latest
+    commands:
+      - cargo build --release --workspace
+      - ls -lh target/release/
+    depends_on:
+      - test
+
+  build-cross:
+    image: rust:latest
+    commands:
+      - cargo install cross --locked
+      - cross build --target x86_64-unknown-linux-musl --release
+      - cross build --target aarch64-unknown-linux-musl --release
+    depends_on:
+      - test
+    when:
+      matrix:
+        PLATFORM: linux/amd64
+
+  # === BENCHMARKS ===
+
+  benchmark:
+    image: rust:latest
+    commands:
+      - rustup toolchain install nightly
+      - cargo +nightly bench --workspace --no-fail-fast
+      - |
+        if [ -d target/criterion ]; then
+          echo "Benchmark results available in target/criterion"
+        fi
+    depends_on:
+      - build-native
+    when:
+      event: pull_request
+
+  # === SECURITY AUDITS ===
+
+  security-audit:
+    image: rust:latest
+    commands:
+      - cargo install cargo-audit --locked
+      - cargo audit --deny warnings --deny unmaintained --deny unsound
+    depends_on:
+      - lint-rust
+
+  license-check:
+    image: rust:latest
+    commands:
+      - cargo install cargo-deny --locked
+      - cargo deny check licenses advisories sources bans
+    depends_on:
+      - lint-rust
+
+  dependency-check:
+    image: rust:latest
+    commands:
+      - cargo install cargo-outdated --locked
+      - cargo outdated --exit-code 1 --root-deps-only
+    depends_on:
+      - lint-rust
+    when:
+      event: manual
+
+  # === SONARQUBE ANALYSIS ===
+
+  sonarqube:
+    image: sonarsource/sonar-scanner-cli:latest
+    commands:
+      - |
+        sonar-scanner \
+          -Dsonar.projectKey=${CI_REPO_NAME} \
+          -Dsonar.sources=. \
+          -Dsonar.host.url=${SONAR_HOST_URL} \
+          -Dsonar.token=${SONAR_TOKEN} \
+          -Dsonar.rust.clippy.reportPaths=clippy-report.json \
+          -Dsonar.coverageReportPaths=coverage/cobertura.xml
+    depends_on:
+      - coverage
+    secrets: [sonar_host_url, sonar_token]
+    when:
+      event: [push, pull_request]
+      branch: [main, develop]
--- a/.woodpecker/ci.yml
+++ b/.woodpecker/ci.yml
@ -0,0 +1,84 @@
+# Woodpecker CI Pipeline
+# Equivalent to GitHub Actions CI workflow
+# Generated by dev-system/ci
+
+when:
+  event: [push, pull_request, manual]
+  branch:
+    - main
+    - develop
+
+steps:
+  # === LINTING ===
+
+  lint-rust:
+    image: rust:latest
+    commands:
+      - curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -s -- --to /usr/local/bin
+      - rustup component add clippy
+      - cargo fmt --all -- --check
+      - cargo clippy --all-targets -- -D warnings
+
+  lint-bash:
+    image: koalaman/shellcheck-alpine:stable
+    commands:
+      - apk add --no-cache curl bash
+      - find . -name '*.sh' -type f ! -path './target/*' -exec shellcheck {} +
+
+  lint-nickel:
+    image: rust:latest
+    commands:
+      - cargo install nickel-lang-cli --locked
+      - find . -name '*.ncl' -type f ! -path './target/*' -exec nickel typecheck {} \;
+
+  lint-nushell:
+    image: rust:latest
+    commands:
+      - cargo install nu --locked
+      - find . -name '*.nu' -type f ! -path './target/*' -exec nu --ide-check 100 {} \;
+
+  lint-markdown:
+    image: node:alpine
+    commands:
+      - npm install -g markdownlint-cli2
+      - markdownlint-cli2 '**/*.md' '#node_modules' '#target'
+
+  # === TESTING ===
+
+  test:
+    image: rust:latest
+    commands:
+      - cargo test --workspace --all-features
+    depends_on:
+      - lint-rust
+      - lint-bash
+      - lint-nickel
+      - lint-nushell
+      - lint-markdown
+
+  # === BUILD ===
+
+  build:
+    image: rust:latest
+    commands:
+      - cargo build --release
+    depends_on:
+      - test
+
+  # === SECURITY ===
+
+  security-audit:
+    image: rust:latest
+    commands:
+      - cargo install cargo-audit --locked
+      - cargo audit --deny warnings
+    depends_on:
+      - lint-rust
+
+  license-check:
+    image: rust:latest
+    commands:
+      - cargo install cargo-deny --locked
+      - cargo deny check licenses advisories
+    depends_on:
+      - lint-rust
--- a/.yamllint-ci.yml
+++ b/.yamllint-ci.yml
@ -0,0 +1,18 @@
+extends: default
+
+rules:
+  line-length:
+    max: 200 # More reasonable for infrastructure code
+  comments:
+    min-spaces-from-content: 1 # Allow single space before comments
+  document-start: disable # Cloud-init files don't need --- start
+  truthy:
+    allowed-values: ["true", "false", "yes", "no", "on", "off"] # Allow cloud-init and GitHub Actions common values
+
+# Ignore cloud-init files for comment spacing since #cloud-config is a special directive
+# Ignore directories with generated/runtime files
+ignore: |
+  **/cloud-init.yml
+  build/**
+  data/**
+  envs/**
--- a/crates/vapora-backend/src/api/provider_metrics.rs
+++ b/crates/vapora-backend/src/api/provider_metrics.rs
@ -152,4 +152,3 @@ pub fn register_provider_metrics() {
    let _ = prometheus::register(Box::new(PROVIDER_SELECTION_COUNT.clone()));
    let _ = prometheus::register(Box::new(TOTAL_PROVIDERS.clone()));
 }
-
--- a/deny.toml
+++ b/deny.toml
@ -0,0 +1,74 @@
+# Generated by dev-system/ci
+# Configuration for cargo-deny
+# See: https://embarkstudios.github.io/cargo-deny/
+
+[advisories]
+# The path where the advisory database is cloned/fetched into
+db-path = "~/.cargo/advisory-db"
+# The url(s) of the advisory databases to use
+db-urls = ["https://github.com/rustsec/advisory-db"]
+# How to handle crates with security vulnerabilities
+vulnerability = "deny"
+# How to handle unmaintained crates
+unmaintained = "warn"
+# How to handle crates that have been yanked from crates.io
+yanked = "warn"
+
+[licenses]
+# The lint level for crates which do not have a detectable license
+unlicensed = "deny"
+# List of explicitly allowed licenses
+allow = [
+    "MIT",
+    "MIT-0",
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "ISC",
+    "Unicode-DFS-2016",
+]
+# List of explicitly disallowed licenses
+deny = [
+    "GPL-2.0",
+    "GPL-3.0",
+    "AGPL-3.0",
+]
+# Lint level for licenses considered copyleft
+copyleft = "warn"
+# Blanket approval or denial for OSI-approved or FSF Free/Libre licenses
+allow-osi-fsf-free = "both"
+# Lint level used when no other predicates are matched
+default = "deny"
+
+[bans]
+# Lint level for when multiple versions of the same crate are detected
+multiple-versions = "warn"
+# Lint level for when an allow-listed crate is detected without an exact version
+allow = [
+    # Each entry can be just the name and an optional wildcard version.
+    # This would ideally be pulled from Cargo.lock deps to keep up to date
+    # but that is more complex. It depends on the use case.
+]
+# Each entry must be a single version number
+deny = [
+    # Each entry is a crate name. Optionally with a version
+]
+# Certain crates/versions that will be skipped when doing duplicate detection
+skip = [
+    # { name = "ansi_term", version = "<= 0.11.0" }
+]
+# Similarly named crates that are allowed to coexist
+skip-tree = [
+    # { name = "windows", version = "<=0.46.0" }
+]
+
+[sources]
+# Lint level for what to happen when a crate from a crate registry that is not in the allow list is detected
+unknown-registry = "deny"
+# Lint level for what to happen when a crate from a Git repository that is not in the allow list is detected
+unknown-git = "deny"
+# The allow list of crate registries
+allow-registry = ["https://github.com/rust-lang/crates.io-index"]
+# The allow list of Git repositories
+allow-git = []
--- a/docs/setup/tracking-setup.md
+++ b/docs/setup/tracking-setup.md
@ -671,4 +671,3 @@ You've successfully set up the Vapora tracking system!
 ```

 **Happy tracking! 🚀**
-
--- a/586
+++ b/586
@ -0,0 +1,586 @@
+# VAPORA Justfile - Namespaced CI/CD Recipe Collection
+# Workspace: Rust + Nushell + Provisioning/Nickel
+#
+# Usage:
+#   just           - List all recipes
+#   just ci-help  - Show CI namespace recipes
+#   just ci-full  - Run complete CI pipeline
+#
+# Namespace Structure:
+#   ci::*          - CI/CD pipelines and checks
+#   build::*       - Build recipes
+#   test::*        - Test recipes
+#   fmt::*         - Format and code quality
+#   check::*       - Validation and analysis
+#   dev::*         - Development utilities
+#   vapora::*      - Vapora-specific operations
+
+set shell := ["nu", "-c"]
+set dotenv-load := true
+
+# ============================================================================
+# Default & Help
+# ============================================================================
+
+[no-cd]
+default:
+    @just -l
+
+# Show help - usage: just help [module]
+help MODULE="":
+    #!/usr/bin/env bash
+    if [ "{{MODULE}}" = "" ]; then
+        echo "📖 VAPORA Justfile Recipes"
+        echo "=========================="
+        echo ""
+        echo "🚀 QUICK START"
+        echo "   just ci-full           Complete CI: check + test + build"
+        echo "   just ci-quick          Fast checks (format + lint only)"
+        echo "   just pre-commit        Pre-commit validation"
+        echo ""
+        echo "📦 KEY MODULES"
+        echo "   just help ci           CI/CD pipelines and checks"
+        echo "   just help build        Build recipes"
+        echo "   just help test         Test recipes"
+        echo "   just help fmt          Format and code quality"
+        echo "   just help check        Validation and analysis"
+        echo "   just help vapora       Vapora-specific operations"
+        echo ""
+        echo "🔍 OTHER COMMANDS"
+        echo "   just -l                List all recipes"
+        echo "   just help-full         Comprehensive help"
+        echo ""
+    elif [ "{{MODULE}}" = "ci" ]; then
+        echo "🔧 CI/CD PIPELINES"
+        echo "=================="
+        echo ""
+        echo "Main CI Pipelines:"
+        echo "  just ci-full           Complete CI pipeline (check + test + build)"
+        echo "  just ci-check          Code quality checks (format + lint + verify)"
+        echo "  just ci-lint           Lint all code (strict mode)"
+        echo "  just ci-test-all       Run all tests"
+        echo ""
+        echo "Quick & Dev:"
+        echo "  just ci-quick          Fast checks (format + lint only)"
+        echo "  just ci-pre-commit     Pre-commit validation"
+        echo "  just ci-fast           Fast iteration checks"
+        echo ""
+        echo "Build Validation:"
+        echo "  just ci-build-debug    Debug build"
+        echo "  just ci-build-release  Release build (optimized)"
+        echo ""
+        echo "Advanced:"
+        echo "  just ci-main           Main branch comprehensive checks"
+        echo ""
+    elif [ "{{MODULE}}" = "build" ]; then
+        echo "🔨 BUILD RECIPES"
+        echo "================"
+        echo ""
+        echo "  just build-debug       Build workspace (debug mode)"
+        echo "  just build-release     Build workspace (release, optimized)"
+        echo "  just build-all         Build all crates with per-crate status"
+        echo "  just build-crate NAME  Build specific crate"
+        echo ""
+    elif [ "{{MODULE}}" = "test" ]; then
+        echo "🧪 TEST RECIPES"
+        echo "==============="
+        echo ""
+        echo "  just test-all          Run all tests (lib + integration + doc)"
+        echo "  just test-lib          Library tests only (fast)"
+        echo "  just test-doc          Doc tests only"
+        echo "  just test-crate NAME   Test specific crate"
+        echo "  just test-coverage     Generate coverage report"
+        echo ""
+    elif [ "{{MODULE}}" = "fmt" ]; then
+        echo "✨ FORMAT & QUALITY"
+        echo "==================="
+        echo ""
+        echo "  just fmt-check         Check formatting without modifying"
+        echo "  just fmt-fix           Auto-format all code"
+        echo "  just fmt-clippy        Lint code (strict: -D warnings)"
+        echo "  just fmt-clippy-vapora Lint only vapora crates"
+        echo ""
+    elif [ "{{MODULE}}" = "check" ]; then
+        echo "🔍 VALIDATION & ANALYSIS"
+        echo "========================"
+        echo ""
+        echo "  just check-code        Quick syntax/dependency check"
+        echo "  just check-security    Security audit + cargo-deny"
+        echo "  just check-coupling    Analyze coupling metrics (AI suggestions)"
+        echo "  just check-unused      Find unused dependencies"
+        echo ""
+    elif [ "{{MODULE}}" = "vapora" ]; then
+        echo "🌊 VAPORA-SPECIFIC"
+        echo "==================="
+        echo ""
+        echo "  just vapora-test-backend     Test vapora-backend"
+        echo "  just vapora-test-agents      Test vapora-agents"
+        echo "  just vapora-test-llm-router  Test vapora-llm-router"
+        echo "  just vapora-test-kg          Test vapora-knowledge-graph"
+        echo "  just vapora-test-all         Test all vapora crates"
+        echo "  just vapora-check-backend    Check backend (compile + lint)"
+        echo "  just vapora-check-agents     Check agents (compile + lint)"
+        echo ""
+    else
+        echo "❌ Unknown module: {{MODULE}}"
+        echo ""
+        echo "Available modules: ci, build, test, fmt, check, vapora"
+    fi
+
+# ============================================================================
+# CI/CD Namespace - CI Pipelines & Orchestration
+# ============================================================================
+
+ci_help := '''
+🔧 VAPORA CI Namespace
+
+CI/CD Pipelines:
+  just ci-full           Complete CI pipeline (all checks)
+  just ci-check          Code check + format + lint
+  just ci-lint           Lint all code (strict)
+  just ci-test-all       Test all features
+  just ci-build-debug    Debug build
+  just ci-build-release  Release build
+
+Pre-commit & Quick:
+  just ci-quick          Fast checks (format + lint only)
+  just ci-pre-commit     Pre-commit validation
+  just ci-fast           Minimal CI for iteration
+
+Main Branch:
+  just ci-main           Main branch comprehensive checks
+
+Development:
+  just ci-watch          Watch for changes and lint
+  just ci-debug          CI with environment info
+'''
+
+# Show CI namespace help
+[no-cd]
+ci-help:
+    @echo "{{ci_help}}"
+
+# Complete CI pipeline: check + test + build (strict)
+[no-cd]
+ci-full: fmt-fix fmt-check fmt-clippy test-all build-debug
+    @echo ""
+    @echo "✅ Full CI Pipeline Complete"
+    @echo ""
+
+# Code quality checks: format + lint + verify
+[no-cd]
+ci-check: fmt-check fmt-clippy check-code
+    @echo ""
+    @echo "✅ Code Quality Checks Complete"
+    @echo ""
+
+# Lint all code (strict: -D warnings)
+[no-cd]
+ci-lint: fmt-clippy
+    @echo ""
+    @echo "✅ Linting Complete"
+    @echo ""
+
+# Test all features (lib + integration + doc)
+[no-cd]
+ci-test-all: test-all
+    @echo ""
+    @echo "✅ All Tests Complete"
+    @echo ""
+
+# Debug build
+[no-cd]
+ci-build-debug: build-debug
+    @echo ""
+    @echo "✅ Debug Build Complete"
+    @echo ""
+
+# Release build (optimized)
+[no-cd]
+ci-build-release: build-release
+    @echo ""
+    @echo "✅ Release Build Complete"
+    @echo ""
+
+# Fast CI check: format + lint only (no build/test)
+[no-cd]
+ci-quick: fmt-check fmt-clippy
+    @echo ""
+    @echo "✅ Quick Check Complete"
+    @echo ""
+
+# Pre-commit hook: format + check + lint vapora crates
+[no-cd]
+ci-pre-commit: fmt-fix fmt-check fmt-clippy-vapora check-code
+    @echo ""
+    @echo "✅ Pre-commit Checks Passed"
+    @echo ""
+
+# Main branch CI: comprehensive validation
+[no-cd]
+ci-main: check-code fmt-check fmt-clippy test-all build-debug check-security check-coupling
+    @echo ""
+    @echo "✅ Main Branch CI Complete"
+    @echo ""
+
+# Fast iteration CI: minimal checks
+[no-cd]
+ci-fast: check-code fmt-clippy-vapora test-lib
+    @echo ""
+    @echo "✅ Fast CI Complete"
+    @echo ""
+
+# ============================================================================
+# Build Namespace
+# ============================================================================
+
+# Build workspace in debug mode
+[no-cd]
+build-debug:
+    #!/usr/bin/env nu
+    print "🔨 Building workspace (debug mode)..."
+    cargo build --workspace
+
+# Build workspace in release mode (optimized)
+[no-cd]
+build-release:
+    #!/usr/bin/env nu
+    print "🔨 Building workspace (release mode, optimized)..."
+    cargo build --release --workspace
+
+# Build all crates with per-crate status
+[no-cd]
+build-all:
+    #!/usr/bin/env nu
+    print "🔨 Building all crates (detailed)..."
+    nu ./scripts/build.nu --all
+
+# Build specific crate (arg: NAME=crate_name)
+[no-cd]
+build-crate NAME='vapora-backend':
+    #!/usr/bin/env nu
+    print $"🔨 Building (${{ NAME }})..."
+    cargo build -p {{ NAME }}
+
+# Build specific crate in release mode
+[no-cd]
+build-crate-release NAME='vapora-backend':
+    #!/usr/bin/env nu
+    print $"🔨 Building (${{ NAME }}) in release mode..."
+    cargo build --release -p {{ NAME }}
+
+# ============================================================================
+# Test Namespace
+# ============================================================================
+
+# Run all tests (lib + integration + doc)
+[no-cd]
+test-all:
+    #!/usr/bin/env nu
+    print "🧪 Running all tests (workspace)..."
+    cargo test --workspace
+
+# Run library tests only (fast, no integration tests)
+[no-cd]
+test-lib:
+    #!/usr/bin/env nu
+    print "🧪 Running library tests only..."
+    cargo test --lib --no-fail-fast
+
+# Run doc tests only
+[no-cd]
+test-doc:
+    #!/usr/bin/env nu
+    print "🧪 Running doc tests..."
+    cargo test --doc
+
+# Test specific crate (arg: NAME=vapora-backend)
+[no-cd]
+test-crate NAME='vapora-backend':
+    #!/usr/bin/env nu
+    print $"🧪 Testing (${{ NAME }})..."
+    cargo test -p {{ NAME }}
+
+# Run tests with output visible
+[no-cd]
+test-verbose:
+    #!/usr/bin/env nu
+    print "🧪 Running tests with output..."
+    cargo test --workspace -- --nocapture
+
+# Generate coverage report
+[no-cd]
+test-coverage:
+    #!/usr/bin/env nu
+    print "🧪 Running tests with coverage..."
+    if (which cargo-tarpaulin | is-empty) {
+        print "⚠️  cargo-tarpaulin not installed. Install with: cargo install cargo-tarpaulin"
+        return 1
+    }
+    cargo tarpaulin --workspace --out Html --output-dir coverage
+
+# ============================================================================
+# Format & Code Quality Namespace
+# ============================================================================
+
+# Check formatting without modifying files
+[no-cd]
+fmt-check:
+    #!/usr/bin/env nu
+    print "📋 Checking code format..."
+    cargo fmt --all -- --check
+
+# Format code using rustfmt
+[no-cd]
+fmt-fix:
+    #!/usr/bin/env nu
+    print "✨ Formatting code..."
+    cargo fmt --all
+
+# Lint code (strict: -D warnings)
+[no-cd]
+fmt-clippy:
+    #!/usr/bin/env nu
+    print "🔗 Linting code (strict mode)..."
+    cargo clippy --all-targets -- -D warnings
+
+# Lint only vapora crates (ignore external dependencies)
+[no-cd]
+fmt-clippy-vapora:
+    #!/usr/bin/env nu
+    print "🔗 Linting vapora crates only..."
+    cargo clippy -p vapora-backend -p vapora-agents -p vapora-knowledge-graph -p vapora-llm-router -p vapora-swarm -p vapora-shared -p vapora-analytics -p vapora-telemetry -p vapora-tracking -p vapora-worktree --all-targets -- -D warnings
+
+# Lint in release mode (catches more optimizations)
+[no-cd]
+fmt-clippy-release:
+    #!/usr/bin/env nu
+    print "🔗 Linting code (release mode)..."
+    cargo clippy --release --all-targets -- -D warnings
+
+# ============================================================================
+# Check Namespace - Validation & Analysis
+# ============================================================================
+
+# Quick syntax/dependency check (fastest)
+[no-cd]
+check-code:
+    #!/usr/bin/env nu
+    print "🔍 Checking code (syntax/deps only)..."
+    cargo check --all-targets
+
+# Security audit + dependency checks
+[no-cd]
+check-security:
+    #!/usr/bin/env nu
+    print "🔒 Running security audit..."
+    if (which cargo-audit | is-empty) {
+        print "⚠️  cargo-audit not installed. Install with: cargo install cargo-audit"
+        return 1
+    }
+    cargo audit --deny warnings
+
+# Analyze coupling metrics with AI
+[no-cd]
+check-coupling:
+    #!/usr/bin/env nu
+    print "📊 Analyzing coupling metrics..."
+    if (which cargo-coupling | is-empty) {
+        print "⚠️  cargo-coupling not installed. Install with: cargo install cargo-coupling"
+        return 1
+    }
+    cargo coupling --ai
+
+# Check licenses and advisories
+[no-cd]
+check-deny:
+    #!/usr/bin/env nu
+    print "📜 Checking licenses and advisories..."
+    if (which cargo-deny | is-empty) {
+        print "⚠️  cargo-deny not installed. Install with: cargo install cargo-deny"
+        return 1
+    }
+    cargo deny check licenses advisories
+
+# Find unused dependencies
+[no-cd]
+check-unused:
+    #!/usr/bin/env nu
+    print "🔍 Checking for unused dependencies..."
+    if (which cargo-udeps | is-empty) {
+        print "⚠️  cargo-udeps not installed. Install with: cargo install cargo-udeps"
+        return 1
+    }
+    cargo +nightly udeps --workspace
+
+# ============================================================================
+# Development Namespace
+# ============================================================================
+
+# Clean build artifacts
+[no-cd]
+dev-clean:
+    #!/usr/bin/env nu
+    print "🧹 Cleaning build artifacts..."
+    nu ./scripts/clean.nu
+
+# Update dependencies
+[no-cd]
+dev-update-deps:
+    #!/usr/bin/env nu
+    print "📦 Updating dependencies..."
+    cargo update
+    print "✓ Dependencies updated. Review changes and test thoroughly."
+
+# Generate documentation
+[no-cd]
+dev-doc:
+    #!/usr/bin/env nu
+    print "📚 Generating documentation..."
+    cargo doc --workspace --no-deps --document-private-items
+
+# Generate and serve documentation locally
+[no-cd]
+dev-doc-serve:
+    #!/usr/bin/env nu
+    print "📚 Generating documentation and serving at http://localhost:8000..."
+    cargo doc --workspace --no-deps --document-private-items --open
+
+# Run benchmarks
+[no-cd]
+dev-bench:
+    #!/usr/bin/env nu
+    print "⚡ Running benchmarks..."
+    cargo bench --workspace
+
+# Run benchmarks and save baseline
+[no-cd]
+dev-bench-baseline:
+    #!/usr/bin/env nu
+    print "⚡ Running benchmarks and saving baseline..."
+    cargo bench --workspace -- --save-baseline main
+
+# ============================================================================
+# Vapora-Specific Namespace
+# ============================================================================
+
+# Test vapora-backend service
+[no-cd]
+vapora-test-backend:
+    #!/usr/bin/env nu
+    print "🧪 Testing vapora-backend..."
+    cargo test -p vapora-backend --lib --no-fail-fast
+
+# Test vapora-agents service
+[no-cd]
+vapora-test-agents:
+    #!/usr/bin/env nu
+    print "🧪 Testing vapora-agents..."
+    cargo test -p vapora-agents --lib --no-fail-fast
+
+# Test vapora-llm-router service
+[no-cd]
+vapora-test-llm-router:
+    #!/usr/bin/env nu
+    print "🧪 Testing vapora-llm-router..."
+    cargo test -p vapora-llm-router --lib --no-fail-fast
+
+# Test vapora-knowledge-graph service
+[no-cd]
+vapora-test-kg:
+    #!/usr/bin/env nu
+    print "🧪 Testing vapora-knowledge-graph..."
+    cargo test -p vapora-knowledge-graph --lib --no-fail-fast
+
+# Test all vapora crates
+[no-cd]
+vapora-test-all:
+    #!/usr/bin/env nu
+    print "🧪 Testing all vapora crates..."
+    cargo test -p vapora-backend \
+               -p vapora-agents \
+               -p vapora-knowledge-graph \
+               -p vapora-llm-router \
+               -p vapora-swarm \
+               -p vapora-shared \
+               --lib
+
+# Check backend compilation and linting
+[no-cd]
+vapora-check-backend:
+    #!/usr/bin/env nu
+    print "🔍 Checking vapora-backend..."
+    cargo check -p vapora-backend --all-targets
+    cargo clippy -p vapora-backend --all-targets -- -D warnings
+
+# Check agents compilation and linting
+[no-cd]
+vapora-check-agents:
+    #!/usr/bin/env nu
+    print "🔍 Checking vapora-agents..."
+    cargo check -p vapora-agents --all-targets
+    cargo clippy -p vapora-agents --all-targets -- -D warnings
+
+# ============================================================================
+# Helpers & Advanced
+# ============================================================================
+
+# Run recipe with timing information
+[no-cd]
+timed RECIPE:
+    #!/usr/bin/env nu
+    print $"⏱️  Running: just {{ RECIPE }} (with timing)"
+    time just {{ RECIPE }}
+
+# Run CI and display environment info
+[no-cd]
+ci-debug: check-code
+    #!/usr/bin/env nu
+    print ""
+    print "🔍 Environment Information:"
+    print $"Rust version: (rustc --version)"
+    print $"Cargo version: (cargo --version)"
+    print $"Nu version: (nu --version)"
+    print ""
+    print "Running full CI..."
+    just ci-full
+
+# ============================================================================
+# Examples & Quick Reference
+# ============================================================================
+
+[no-cd]
+examples:
+    @echo ""
+    @echo "📖 Quick Command Reference"
+    @echo ""
+    @echo "View help:"
+    @echo "  just              - List all recipes"
+    @echo "  just ci-help     - Show CI namespace help"
+    @echo "  just help         - Show full help"
+    @echo ""
+    @echo "Development workflow:"
+    @echo "  just fmt-fix              - Auto-format code"
+    @echo "  just check-code           - Quick syntax check"
+    @echo "  just fmt-clippy-vapora    - Lint vapora crates"
+    @echo "  just vapora-test-backend  - Test backend"
+    @echo ""
+    @echo "Pre-commit:"
+    @echo "  just ci-pre-commit        - Run pre-commit checks"
+    @echo ""
+    @echo "Full validation:"
+    @echo "  just ci-full              - Complete CI pipeline"
+    @echo "  just ci-main              - Main branch validation"
+    @echo "  just check-security       - Security checks"
+    @echo ""
+    @echo "Build & test:"
+    @echo "  just build-debug          - Debug build"
+    @echo "  just build-release        - Release build"
+    @echo "  just test-all             - Run all tests"
+    @echo "  just test-coverage        - Generate coverage"
+    @echo ""
+    @echo "Analysis:"
+    @echo "  just check-coupling       - Coupling metrics"
+    @echo "  just check-unused         - Find unused deps"
+    @echo "  just dev-bench            - Run benchmarks"
+    @echo ""
--- a/justfiles/ci.just
+++ b/justfiles/ci.just
@ -0,0 +1,194 @@
+# CI/CD Just Recipes
+# Generated by dev-system/ci - Dynamic template
+# Provides `just` recipes for running CI checks locally
+# Based on detected languages and enabled tools
+
+# Show CI help
+[doc("Show ci help")]
+help:
+    @echo "CI/CD Just Recipes"
+    @echo ""
+    @echo "Main Commands:"
+    @echo "  just ci-full          - Run all CI checks"
+    @echo "  just ci-fmt           - Format code"
+    @echo "  just ci-lint          - Run all linting checks"
+    @echo "  just ci-test          - Run all tests"
+    @echo "  just ci-audit         - Run security audits"
+    @echo ""
+    @echo "Language-Specific:"
+    @echo "  just ci-lint-rust     - Lint Rust (clippy)"
+    @echo "  just ci-fmt-toml      - Check TOML formatting"
+    @echo "  just ci-lint-toml     - Lint TOML files (taplo)"
+    @echo "  just ci-lint-nickel   - Type check Nickel"
+    @echo "  just ci-lint-markdown - Lint Markdown (markdownlint-cli2)"
+    @echo "  just ci-lint-prose    - Lint prose (Vale)"
+    @echo ""
+    @echo "Other:"
+    @echo "  just ci-sbom          - Generate SBOM"
+    @echo "  just ci-test-coverage - Run tests with coverage"
+    @echo "  just setup-hooks      - Install pre-commit hooks"
+    @echo "  just hooks-run-all    - Run pre-commit on all files"
+    @echo "  just clean            - Clean build artifacts"
+
+# Run all CI checks
+ci-full: ci-lint-rust ci-fmt-toml ci-lint-toml ci-lint-nickel ci-lint-markdown ci-lint-prose ci-test ci-audit
+    @echo "✅ All CI checks passed!"
+
+# ==============================================================================
+# Formatting Checks
+# ==============================================================================
+
+# Check Rust code formatting
+ci-fmt:
+    @echo "📝 Checking Rust code formatting..."
+    cargo fmt --all -- --check
+# Check TOML file formatting
+ci-fmt-toml:
+    @echo "📝 Checking TOML formatting..."
+    @command -v taplo >/dev/null || (echo "❌ taplo not installed: cargo install taplo-cli"; exit 1)
+    taplo format --check
+
+# Format all code
+fmt:
+    @echo "🎨 Formatting code..."
+    cargo fmt --all
+    just fmt-toml
+
+# Format TOML files
+fmt-toml:
+    @echo "🎨 Formatting TOML files..."
+    @command -v taplo >/dev/null || (echo "❌ taplo not installed: cargo install taplo-cli"; exit 1)
+    taplo format
+
+# ==============================================================================
+# Linting
+# ==============================================================================
+
+# Run all linting checks
+ci-lint: ci-lint-rust ci-lint-toml ci-lint-nickel ci-lint-markdown ci-lint-prose
+    @echo "✅ All lint checks passed!"
+
+# Lint Rust code
+ci-lint-rust:
+    @echo "🔍 Linting Rust (clippy)..."
+    cargo clippy --all-targets --all-features -- -D warnings
+
+# Lint TOML files
+ci-lint-toml:
+    @echo "🔍 Linting TOML files..."
+    @command -v taplo >/dev/null || (echo "❌ taplo not installed: cargo install taplo-cli"; exit 1)
+    taplo lint
+
+# Lint Nickel schemas
+ci-lint-nickel:
+    #!/usr/bin/env bash
+    echo "🔍 Type checking Nickel..."
+    SCHEMAS=$(find . -name "*.ncl" -type f \
+      ! -path "./target/*" \
+      ! -path "./.git/*" \
+      ! -path "./node_modules/*" \
+      | head -20)
+    if [ -z "$SCHEMAS" ]; then
+        echo "  ℹ️  No Nickel schemas found"
+        exit 0
+    fi
+    export NICKEL_IMPORT_PATH="/Users/Akasha/Tools/dev-system/ci/schemas:/Users/Akasha/Tools/dev-system/ci/validators:/Users/Akasha/Tools/dev-system/ci/defaults:."
+    for schema in $SCHEMAS; do
+        echo "  Checking: $schema"
+        nickel typecheck "$schema" || exit 1
+    done
+    echo "  ✓ All Nickel schemas valid"
+
+# Lint Markdown files
+ci-lint-markdown:
+    @echo "🔍 Linting Markdown files..."
+    @command -v markdownlint-cli2 >/dev/null || (echo "❌ markdownlint-cli2 not installed: npm install markdownlint-cli2"; exit 1)
+    markdownlint-cli2 "**/*.md" "#node_modules" "#.git"
+
+# Lint prose/documentation
+ci-lint-prose:
+    @echo "🔍 Linting prose with Vale..."
+    @command -v vale >/dev/null || (echo "❌ vale not installed: brew install vale"; exit 1)
+    vale sync
+    vale .
+
+# ==============================================================================
+# Testing
+# ==============================================================================
+
+# Run all tests
+ci-test:
+    @echo "🧪 Running tests..."
+    cargo test --workspace --all-features
+
+# Run tests with coverage (requires cargo-llvm-cov)
+ci-test-coverage:
+    @echo "📊 Running tests with coverage..."
+    cargo llvm-cov --all-features --lcov --output-path lcov.info
+
+# ==============================================================================
+# Security Auditing
+# ==============================================================================
+
+# Run all security audits
+ci-audit: ci-audit-rust
+    @echo "✅ All security audits passed!"
+
+# Audit Rust dependencies
+ci-audit-rust:
+    @echo "🔒 Auditing Rust dependencies..."
+    cargo audit
+    cargo deny check licenses
+    cargo deny check advisories
+
+# Generate SBOM
+ci-sbom:
+    @echo "📦 Generating Software Bill of Materials..."
+    cargo sbom > sbom.json
+    @echo "✓ SBOM generated: sbom.json"
+
+# ==============================================================================
+# Documentation
+# ==============================================================================
+
+# Generate documentation
+docs:
+    @echo "📚 Generating documentation..."
+    cargo doc --no-deps --open
+
+# Check documentation
+ci-docs:
+    @echo "📚 Checking documentation..."
+    cargo doc --no-deps --document-private-items 2>&1 | grep -i "warning:" && exit 1 || true
+    @echo "✓ Documentation check passed"
+
+# ==============================================================================
+# Pre-commit Setup
+# ==============================================================================
+
+# Install pre-commit hooks
+setup-hooks:
+    @echo "🪝 Installing pre-commit hooks..."
+    @if command -v pre-commit &> /dev/null; then \
+        pre-commit install && pre-commit install --hook-type pre-push; \
+        echo "✓ Pre-commit hooks installed"; \
+    else \
+        echo "❌ pre-commit not found. Install with: pip install pre-commit"; \
+        exit 1; \
+    fi
+
+# Run pre-commit on all files
+hooks-run-all:
+    @echo "🪝 Running pre-commit on all files..."
+    pre-commit run --all-files
+
+# ==============================================================================
+# Utility Commands
+# ==============================================================================
+
+# Clean build artifacts
+clean:
+    @echo "🧹 Cleaning..."
+    cargo clean
+    rm -rf target/
+    rm -f sbom.json lcov.info
--- a/justfiles/rust-axum
+++ b/justfiles/rust-axum
@ -1 +0,0 @@
-/Users/Akasha/Tools/dev-system/languages/rust/just-modules/axum
--- a/justfiles/rust-cargo
+++ b/justfiles/rust-cargo
@ -1 +0,0 @@
-/Users/Akasha/Tools/dev-system/languages/rust/just-modules/cargo
--- a/justfiles/rust-leptos
+++ b/justfiles/rust-leptos
@ -1 +0,0 @@
-/Users/Akasha/Tools/dev-system/languages/rust/just-modules/leptos
				`@ -1 +0,0 @@`
				`/Users/Akasha/Tools/dev-system/languages/rust/just-modules/axum`