feat: auto-generate harmonised, ergonomic SDKs across 12 languages

.gitattributes

@@ -0,0 +1 @@
+src/spec/resources/testprojects/**/* linguist-generated=true

.gitguardian.yaml

@@ -0,0 +1,6 @@
+version: 2
+# Test TLS certificates committed intentionally for integration test use.
+# These are self-signed certs generated for the chasm mock server and
+# carry no real-world trust or access. They are not production secrets.
+ignore-paths:
+  - src/spec/resources/generated/*/certs/

.github/workflows/format.yml

@@ -14,13 +14,16 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Runner Common Setup
+        uses: mridang/action-runner-common@v1
+
       - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
-          java-version: '17'
+          java-version: '25'
           distribution: 'corretto'
           cache: maven
 

.github/workflows/lint.yml

@@ -3,7 +3,7 @@ name: Lint Code (Checkstyle and Spotbugs)
 on: push
 
 permissions:
-  contents: write
+  contents: read
 
 defaults:
   run:
@@ -14,13 +14,16 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Runner Common Setup
+        uses: mridang/action-runner-common@v1
+
       - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
-          java-version: '17'
+          java-version: '25'
           distribution: 'corretto'
           cache: maven
 

.github/workflows/release.yml

@@ -13,18 +13,25 @@ defaults:
   run:
     working-directory: ./
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
 jobs:
   publish-package:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Runner Common Setup
+        uses: mridang/action-runner-common@v1
+
       - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
-          java-version: '17'
+          java-version: '25'
           distribution: 'corretto'
           cache: maven
 

.github/workflows/test.yml

@@ -3,7 +3,7 @@ name: Run Tests
 on: push
 
 permissions:
-  contents: write
+  contents: read
 
 defaults:
   run:
@@ -14,6 +14,15 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Runner Common Setup
+        uses: mridang/action-runner-common@v1
+        with:
+          # Polyglot test matrix pulls ~12 GB of language images during the
+          # job. Free runner bloat (Android SDK, .NET, Haskell, CodeQL,
+          # PyPy, etc.) up front so the post-step bin-pack has room to
+          # actually save those images to cache.
+          docker-cache-free-disk: 'true'
+
       - name: Checkout code
         uses: actions/checkout@v4
 
@@ -42,7 +51,7 @@ jobs:
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
-          java-version: '17'
+          java-version: '25'
           distribution: 'corretto'
           cache: maven
 

.gitignore

@@ -27,3 +27,24 @@ devbox.lock
 .devbox
 
 .out
+.phpcsf
+.phpstan
+
+# Elixir compiled files and crash dumps
+*.beam
+erl_crash.dump
+
+# Generated client lockfiles — consumers regenerate against their resolver
+# state. The generator does not ship lockfiles; they appear here only when
+# the integration-test containers run the package manager. See plan tier E1.
+src/spec/resources/generated/*/Gemfile.lock
+src/spec/resources/generated/*/Cargo.lock
+src/spec/resources/generated/*/package-lock.json
+src/spec/resources/generated/*/yarn.lock
+src/spec/resources/generated/*/pnpm-lock.yaml
+src/spec/resources/generated/*/pubspec.lock
+src/spec/resources/generated/*/composer.lock
+src/spec/resources/generated/*/mix.lock
+
+# Stray openapi-generator build artifact directory
+/org/