azcodr 2.0.0 → 2.1.0

package/lib/cli.js

@@ -1,12 +1,13 @@
-'use strict';
-
-const { scaffold, getTemplateDir } = require('./scaffold.js');
-const { parseArgs } = require('./cli-parse.js');
-const { askQuestion, resolveTargetDir, ensureWritableTarget } = require('./cli-target.js');
-const pkg = require('../package.json');
-
-function printHelp(out = console.log) {
-  out(`
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { scaffold, getTemplateDir } from './scaffold.js';
+import { parseArgs } from './cli-parse.js';
+import { askQuestion, resolveTargetDir, ensureWritableTarget } from './cli-target.js';
+const pkg = JSON.parse(fs.readFileSync(path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'package.json'), 'utf-8'));
+export function printHelp(out = console.log) {
+    out(`
 azcodr v${pkg.version}
 Enterprise Multi-Tenant Architecture & Agentic Engineering Starter Template
 
@@ -30,151 +31,136 @@ Examples:
   npx azcodr . --force
 `);
 }
-
-function printVersion(out = console.log) {
-  out(pkg.version);
+export function printVersion(out = console.log) {
+    out(pkg.version);
 }
-
 function normalizeIo(io = {}) {
-  const {
-    out = console.log,
-    err = console.error,
-    exit = process.exit,
-    stdin = process.stdin,
-    stdout = process.stdout,
-    cwd = process.cwd(),
-    templateDir = getTemplateDir(),
-    scaffold: scaffoldFn = scaffold
-  } = io;
-  return { out, err, exit, stdin, stdout, cwd, templateDir, scaffoldFn };
+    const { out = console.log, err = console.error, exit = process.exit, stdin = process.stdin, stdout = process.stdout, cwd = process.cwd(), templateDir = getTemplateDir(), scaffold: scaffoldFn = scaffold } = io;
+    return { out, err, exit, stdin, stdout, cwd, templateDir, scaffoldFn };
 }
-
 function outBanner(fullIo) {
-  fullIo.out('\n🚀 azcodr - Enterprise Multi-Tenant Architecture & Agentic Engineering\n');
+    fullIo.out('\n🚀 azcodr - Enterprise Multi-Tenant Architecture & Agentic Engineering\n');
 }
-
 function handleTerminal(parsed, io) {
-  const { out, err, exit } = io;
-  if (parsed.terminal === 'help') {
-    printHelp(out);
-    return exit(0);
-  }
-  if (parsed.terminal === 'version') {
-    printVersion(out);
-    return exit(0);
-  }
-  err(`❌ Error: ${parsed.message}`);
-  return exit(1);
+    const { out, err, exit } = io;
+    if (parsed.terminal === 'help') {
+        printHelp(out);
+        return exit(0);
+    }
+    if (parsed.terminal === 'version') {
+        printVersion(out);
+        return exit(0);
+    }
+    err(`❌ Error: ${parsed.message}`);
+    return exit(1);
 }
-
 function reportDryRun(result, out) {
-  for (const action of result.actions) {
-    out(`  [preview] ${action}`);
-  }
-  out('\n🎉 Dry run completed. 0 files modified on disk.\n');
+    for (const action of result.actions) {
+        out(`  [preview] ${action}`);
+    }
+    out('\n🎉 Dry run completed. 0 files modified on disk.\n');
 }
-
 function reportSuccess(result, targetDir, out) {
-  out('  ✅ Progressive disclosure rules copied (docs/rules/)');
-  out('  ✅ Workspace knowledge hub and ADR ledger copied (docs/knowledge/, memory.md)');
-  out('  ✅ Specialized agentic skills copied (.agents/skills/)');
-  out('  ✅ Editor formatting standards initialized (.editorconfig)');
-  out('  ✅ Agent directives and harness symlinks established (AGENTS.md, CLAUDE.md, agents.md, GEMINI.md, .cursorrules, .windsurfrules, .github/copilot-instructions.md)');
-  out('  ✅ Project configuration initialized (package.json)');
-  if (result.gitInitialized) {
-    out('  ✅ Git repository initialized');
-  }
-  out('\n🎉 azcodr initialized successfully!\n');
-  out('Next steps:');
-  let step = 1;
-  if (targetDir !== '.' && targetDir !== './') {
-    out(`  ${step++}. cd ${targetDir}`);
-  }
-  out(`  ${step++}. Open the project in your AI coding assistant (Antigravity, Claude Code, Cursor, OpenHands)`);
-  out(`  ${step++}. Run /lets-build to start the architectural interview and scaffold your application stack!\n`);
+    out('  ✅ Progressive disclosure rules copied (docs/rules/)');
+    out('  ✅ Workspace knowledge hub and ADR ledger copied (docs/knowledge/, memory.md)');
+    out('  ✅ Specialized agentic skills copied (.agents/skills/)');
+    out('  ✅ Editor formatting standards initialized (.editorconfig)');
+    out('  ✅ Agent directives and harness symlinks established (AGENTS.md, CLAUDE.md, agents.md, GEMINI.md, .cursorrules, .windsurfrules, .github/copilot-instructions.md)');
+    out('  ✅ Project configuration initialized (package.json)');
+    if (result.gitInitialized) {
+        out('  ✅ Git repository initialized');
+    }
+    out('\n🎉 azcodr initialized successfully!\n');
+    out('Next steps:');
+    let step = 1;
+    if (targetDir !== '.' && targetDir !== './') {
+        out(`  ${step++}. cd ${targetDir}`);
+    }
+    out(`  ${step++}. Open the project in your AI coding assistant (Antigravity, Claude Code, Cursor, OpenHands)`);
+    out(`  ${step++}. Run /lets-build to start the architectural interview and scaffold your application stack!\n`);
 }
-
 function runScaffold(resolvedTarget, parsed, io) {
-  const { out, err, exit, templateDir, scaffoldFn } = io;
-  const banner = parsed.dryRun
-    ? `🔍 DRY RUN: Simulating azcodr scaffolding into: ${resolvedTarget}\n`
-    : `📦 Scaffolding azcodr into: ${resolvedTarget}`;
-  if (!parsed.silent) out(banner);
-  try {
-    const result = scaffoldFn({
-      targetDir: resolvedTarget,
-      force: parsed.force,
-      noGit: parsed.noGit,
-      templateDir,
-      dryRun: parsed.dryRun,
-      silent: parsed.silent
-    });
-    if (!parsed.silent) {
-      if (parsed.dryRun) reportDryRun(result, out);
-      else reportSuccess(result, parsed.targetDir, out);
+    const { out, err, exit, templateDir, scaffoldFn } = io;
+    const banner = parsed.dryRun
+        ? `🔍 DRY RUN: Simulating azcodr scaffolding into: ${resolvedTarget}\n`
+        : `📦 Scaffolding azcodr into: ${resolvedTarget}`;
+    if (!parsed.silent)
+        out(banner);
+    try {
+        const result = scaffoldFn({
+            targetDir: resolvedTarget,
+            force: parsed.force,
+            noGit: parsed.noGit,
+            templateDir,
+            dryRun: parsed.dryRun,
+            silent: parsed.silent
+        });
+        if (!parsed.silent) {
+            if (parsed.dryRun)
+                reportDryRun(result, out);
+            else
+                reportSuccess(result, parsed.targetDir, out);
+        }
+        return exit(0);
+    }
+    catch (error) {
+        err(`\n❌ Scaffolding failed: ${error.message}\n`);
+        return exit(1);
     }
-    return exit(0);
-  } catch (error) {
-    err(`\n❌ Scaffolding failed: ${error.message}\n`);
-    return exit(1);
-  }
 }
-
 async function resolvePhase(parsed, fullIo) {
-  const { resolvedTarget, chosen, error } = await resolveTargetDir(parsed.targetDir, fullIo);
-  if (error !== null) {
-    fullIo.err(`❌ Error: ${error}`);
-    return { exitCode: 1 };
-  }
-  return { resolvedTarget, chosen };
+    const { resolvedTarget, chosen, error } = await resolveTargetDir(parsed.targetDir, fullIo);
+    if (error !== null) {
+        fullIo.err(`❌ Error: ${error}`);
+        return { exitCode: 1 };
+    }
+    return { resolvedTarget, chosen };
 }
-
 async function writablePhase(target, force, fullIo) {
-  const writable = await ensureWritableTarget({
-    chosen: target.chosen,
-    resolvedTarget: target.resolvedTarget,
-    force,
-    io: fullIo
-  });
-  if (writable.exitCode === undefined) return { force: writable.force };
-  if (writable.message) {
-    fullIo.err(`❌ Error: ${writable.message}`);
-  }
-  return { exitCode: writable.exitCode };
+    const writable = await ensureWritableTarget({
+        chosen: target.chosen,
+        resolvedTarget: target.resolvedTarget,
+        force,
+        io: fullIo
+    });
+    if (writable.exitCode === undefined)
+        return { force: writable.force };
+    if (writable.message) {
+        fullIo.err(`❌ Error: ${writable.message}`);
+    }
+    return { exitCode: writable.exitCode };
 }
-
-async function runCli(rawArgs = process.argv.slice(2), io = {}) {
-  const fullIo = normalizeIo(io);
-
-  const parsed = parseArgs(rawArgs);
-  if (parsed.terminal !== null) return handleTerminal(parsed, fullIo);
-
-  if (!parsed.silent) {
-    outBanner(fullIo);
-  }
-
-  const target = await resolvePhase(parsed, fullIo);
-  if (target.exitCode !== undefined) return fullIo.exit(target.exitCode);
-
-  const ready = await writablePhase(target, parsed.force, fullIo);
-  if (ready.exitCode !== undefined) return fullIo.exit(ready.exitCode);
-
-  return runScaffold(target.resolvedTarget, { ...parsed, force: ready.force }, fullIo);
+export async function runCli(rawArgs = process.argv.slice(2), io = {}) {
+    const fullIo = normalizeIo(io);
+    const parsed = parseArgs(rawArgs);
+    if (parsed.terminal !== null)
+        return handleTerminal(parsed, fullIo);
+    if (!parsed.silent) {
+        outBanner(fullIo);
+    }
+    const target = await resolvePhase(parsed, fullIo);
+    if (target.exitCode !== undefined)
+        return fullIo.exit(target.exitCode);
+    const ready = await writablePhase(target, parsed.force, fullIo);
+    if (ready.exitCode !== undefined)
+        return fullIo.exit(ready.exitCode);
+    return runScaffold(target.resolvedTarget, { ...parsed, force: ready.force }, fullIo);
 }
-
-async function main() {
-  try {
-    await runCli(process.argv.slice(2));
-  } catch (err) {
-    console.error('Unexpected error:', err);
-    process.exit(1);
-  }
+export async function main() {
+    try {
+        await runCli(process.argv.slice(2));
+    }
+    catch (err) {
+        console.error('Unexpected error:', err);
+        process.exit(1);
+    }
 }
-
-module.exports = {
-  runCli,
-  main,
-  printHelp,
-  printVersion,
-  askQuestion
+export { askQuestion };
+export default {
+    runCli,
+    main,
+    printHelp,
+    printVersion,
+    askQuestion
 };
+//# sourceMappingURL=cli.js.map

package/lib/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAMtF,MAAM,GAAG,GAAqB,IAAI,CAAC,KAAK,CACtC,EAAE,CAAC,YAAY,CACb,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAC7E,OAAO,CACR,CACF,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,MAA6B,OAAO,CAAC,GAAG;IAChE,GAAG,CAAC;UACI,GAAG,CAAC,OAAO;;;;;;;;;;;;;;;;;;;;;CAqBpB,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAA6B,OAAO,CAAC,GAAG;IACnE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAwBD,SAAS,WAAW,CAAC,KAAY,EAAE;IACjC,MAAM,EACJ,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,GAAG,GAAG,OAAO,CAAC,KAAK,EACnB,IAAI,GAAG,OAAO,CAAC,IAAI,EACnB,KAAK,GAAG,OAAO,CAAC,KAAK,EACrB,MAAM,GAAG,OAAO,CAAC,MAAM,EACvB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,WAAW,GAAG,cAAc,EAAE,EAC9B,QAAQ,EAAE,UAAU,GAAG,QAAQ,EAChC,GAAG,EAAE,CAAC;IACP,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,MAAuB;IACxC,MAAM,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CAAC,MAAwB,EAAE,EAAmB;IACnE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAsB,EAAE,GAA0B;IACtE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,GAAG,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,GAAG,CAAC,qDAAqD,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB,EAAE,SAAwB,EAAE,GAA0B;IACjG,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAC7D,GAAG,CAAC,gFAAgF,CAAC,CAAC;IACtF,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAC/D,GAAG,CAAC,6DAA6D,CAAC,CAAC;IACnE,GAAG,CAAC,mKAAmK,CAAC,CAAC;IACzK,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACxC,CAAC;IACD,GAAG,CAAC,yCAAyC,CAAC,CAAC;IAC/C,GAAG,CAAC,aAAa,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,KAAK,IAAI,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,GAAG,CAAC,KAAK,IAAI,EAAE,8FAA8F,CAAC,CAAC;IAC/G,GAAG,CAAC,KAAK,IAAI,EAAE,+FAA+F,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,WAAW,CAAC,cAAsB,EAAE,MAAwB,EAAE,EAAmB;IACxF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;QAC1B,CAAC,CAAC,mDAAmD,cAAc,IAAI;QACvE,CAAC,CAAC,+BAA+B,cAAc,EAAE,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,SAAS,EAAE,cAAc;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,MAAM,CAAC,MAAM;gBAAE,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;;gBACxC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,2BAA4B,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAQD,KAAK,UAAU,YAAY,CAAC,MAAwB,EAAE,MAAuB;IAC3E,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3F,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAOD,KAAK,UAAU,aAAa,CAC1B,MAAkD,EAClD,KAAc,EACd,MAAuB;IAEvB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK;QACL,EAAE,EAAE,MAAM;KACX,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACtE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,UAAoB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACzC,KAAY,EAAE;IAEd,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAE/B,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,MAAoD,EACpD,MAAM,CAAC,KAAK,EACZ,MAAM,CACP,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAErE,OAAO,WAAW,CAAC,MAAM,CAAC,cAAe,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAM,EAAE,EAAE,MAAM,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC;AAEvB,eAAe;IACb,MAAM;IACN,IAAI;IACJ,SAAS;IACT,YAAY;IACZ,WAAW;CACZ,CAAC"}

package/lib/errors.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Machine-readable failure codes.
+ *
+ * Consumers branch on `err.code`, never on message text: a wording change must
+ * never be a breaking change (learned from typed-settings, where `docs/errors.md`
+ * explicitly tells users not to regex the message). Pinned by
+ * tests/error-codes.test.js.
+ */
+export declare const ERROR_CODES: {
+    readonly E_TARGET_IS_TEMPLATE: "Cannot scaffold into the azcodr template directory itself";
+    readonly E_TARGET_NOT_EMPTY: "Target directory is not empty";
+    readonly E_TARGET_IS_PROTECTED: "Refusing to scaffold into a protected system directory";
+    readonly E_GIT_ARGS_INVALID: "runGit requires a non-empty argv array";
+    readonly E_GIT_BLOCKED: "Blocked git subcommand";
+    readonly E_PATH_ESCAPE: "Path escapes allowed root";
+};
+export type ScaffoldErrorCode = keyof typeof ERROR_CODES;
+export interface ScaffoldErrorShape extends Error {
+    name: 'ScaffoldError';
+    code: ScaffoldErrorCode;
+}
+export declare class ScaffoldError extends Error implements ScaffoldErrorShape {
+    readonly name: 'ScaffoldError';
+    readonly code: ScaffoldErrorCode;
+    constructor(code: ScaffoldErrorCode, message: string);
+}
+declare const _default: {
+    ERROR_CODES: {
+        readonly E_TARGET_IS_TEMPLATE: "Cannot scaffold into the azcodr template directory itself";
+        readonly E_TARGET_NOT_EMPTY: "Target directory is not empty";
+        readonly E_TARGET_IS_PROTECTED: "Refusing to scaffold into a protected system directory";
+        readonly E_GIT_ARGS_INVALID: "runGit requires a non-empty argv array";
+        readonly E_GIT_BLOCKED: "Blocked git subcommand";
+        readonly E_PATH_ESCAPE: "Path escapes allowed root";
+    };
+    ScaffoldError: typeof ScaffoldError;
+};
+export default _default;
+//# sourceMappingURL=errors.d.ts.map

package/lib/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW;;;;;;;CAOd,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,WAAW,CAAC;AAEzD,MAAM,WAAW,kBAAmB,SAAQ,KAAK;IAC/C,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,qBAAa,aAAc,SAAQ,KAAM,YAAW,kBAAkB;IACpE,SAAkB,IAAI,EAAE,eAAe,CAAmB;IAC1D,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAErB,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM;CAIrD;;;;;;;;;;;;AAED,wBAA8C"}

package/lib/errors.js

@@ -1,5 +1,3 @@
-'use strict';
-
 /**
  * Machine-readable failure codes.
  *
@@ -8,21 +6,21 @@
  * explicitly tells users not to regex the message). Pinned by
  * tests/error-codes.test.js.
  */
-const ERROR_CODES = {
-  E_TARGET_IS_TEMPLATE: 'Cannot scaffold into the azcodr template directory itself',
-  E_TARGET_NOT_EMPTY: 'Target directory is not empty',
-  E_TARGET_IS_PROTECTED: 'Refusing to scaffold into a protected system directory',
-  E_GIT_ARGS_INVALID: 'runGit requires a non-empty argv array',
-  E_GIT_BLOCKED: 'Blocked git subcommand',
-  E_PATH_ESCAPE: 'Path escapes allowed root'
+export const ERROR_CODES = {
+    E_TARGET_IS_TEMPLATE: 'Cannot scaffold into the azcodr template directory itself',
+    E_TARGET_NOT_EMPTY: 'Target directory is not empty',
+    E_TARGET_IS_PROTECTED: 'Refusing to scaffold into a protected system directory',
+    E_GIT_ARGS_INVALID: 'runGit requires a non-empty argv array',
+    E_GIT_BLOCKED: 'Blocked git subcommand',
+    E_PATH_ESCAPE: 'Path escapes allowed root'
 };
-
-class ScaffoldError extends Error {
-  constructor(code, message) {
-    super(message);
-    this.name = 'ScaffoldError';
-    this.code = code;
-  }
+export class ScaffoldError extends Error {
+    name = 'ScaffoldError';
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
 }
-
-module.exports = { ERROR_CODES, ScaffoldError };
+export default { ERROR_CODES, ScaffoldError };
+//# sourceMappingURL=errors.js.map

package/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,oBAAoB,EAAE,2DAA2D;IACjF,kBAAkB,EAAE,+BAA+B;IACnD,qBAAqB,EAAE,wDAAwD;IAC/E,kBAAkB,EAAE,wCAAwC;IAC5D,aAAa,EAAE,wBAAwB;IACvC,aAAa,EAAE,2BAA2B;CAClC,CAAC;AASX,MAAM,OAAO,aAAc,SAAQ,KAAK;IACpB,IAAI,GAAoB,eAAe,CAAC;IACjD,IAAI,CAAoB;IAEjC,YAAY,IAAuB,EAAE,OAAe;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC"}

package/lib/git.d.ts

@@ -0,0 +1,15 @@
+import cp from 'node:child_process';
+/**
+ * Socket-hardened process boundary (Supply Chain: shell access).
+ * Scaffolder must spawn `git`, but never via a shell string.
+ * Uses execFileSync with argv (shell:false) and an explicit subcommand allowlist.
+ * No network, no env exfiltration; cwd is constrained to targetDir callers.
+ */
+export declare const GIT_ALLOWED_SUBCOMMANDS: Set<string>;
+export declare function runGit(args: string[], options?: cp.ExecFileSyncOptions): string;
+declare const _default: {
+    GIT_ALLOWED_SUBCOMMANDS: Set<string>;
+    runGit: typeof runGit;
+};
+export default _default;
+//# sourceMappingURL=git.d.ts.map

package/lib/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGpC;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aAMlC,CAAC;AAEH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,EAAE,CAAC,mBAAwB,GAAG,MAAM,CAcnF;;;;;AAED,wBAAmD"}

package/lib/git.js

@@ -1,29 +1,32 @@
-'use strict';
-
-const cp = require('node:child_process');
-const { ScaffoldError, ERROR_CODES } = require('./errors.js');
-
+import cp from 'node:child_process';
+import { ScaffoldError, ERROR_CODES } from './errors.js';
 /**
  * Socket-hardened process boundary (Supply Chain: shell access).
  * Scaffolder must spawn `git`, but never via a shell string.
  * Uses execFileSync with argv (shell:false) and an explicit subcommand allowlist.
  * No network, no env exfiltration; cwd is constrained to targetDir callers.
  */
-const GIT_ALLOWED_SUBCOMMANDS = new Set(['rev-parse', 'init', 'branch', 'add', 'commit']);
-
-function runGit(args, options = {}) {
-  if (!Array.isArray(args) || args.length === 0) {
-    throw new ScaffoldError('E_GIT_ARGS_INVALID', ERROR_CODES.E_GIT_ARGS_INVALID);
-  }
-  if (!GIT_ALLOWED_SUBCOMMANDS.has(args[0])) {
-    throw new ScaffoldError('E_GIT_BLOCKED', `${ERROR_CODES.E_GIT_BLOCKED}: ${String(args[0])}`);
-  }
-  return cp.execFileSync('git', args, {
-    encoding: 'utf-8',
-    stdio: 'pipe',
-    shell: false,
-    ...options
-  });
+export const GIT_ALLOWED_SUBCOMMANDS = new Set([
+    'rev-parse',
+    'init',
+    'branch',
+    'add',
+    'commit'
+]);
+export function runGit(args, options = {}) {
+    if (!Array.isArray(args) || args.length === 0) {
+        throw new ScaffoldError('E_GIT_ARGS_INVALID', ERROR_CODES.E_GIT_ARGS_INVALID);
+    }
+    const subcommand = args[0];
+    if (!subcommand || !GIT_ALLOWED_SUBCOMMANDS.has(subcommand)) {
+        throw new ScaffoldError('E_GIT_BLOCKED', `${ERROR_CODES.E_GIT_BLOCKED}: ${String(subcommand)}`);
+    }
+    return cp.execFileSync('git', args, {
+        encoding: 'utf-8',
+        stdio: 'pipe',
+        shell: false,
+        ...options
+    });
 }
-
-module.exports = { GIT_ALLOWED_SUBCOMMANDS, runGit };
+export default { GIT_ALLOWED_SUBCOMMANDS, runGit };
+//# sourceMappingURL=git.js.map

package/lib/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IAC7C,WAAW;IACX,MAAM;IACN,QAAQ;IACR,KAAK;IACL,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,UAAU,MAAM,CAAC,IAAc,EAAE,UAAkC,EAAE;IACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,GAAG,WAAW,CAAC,aAAa,KAAK,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;QAClC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,KAAK;QACZ,GAAG,OAAO;KACX,CAAW,CAAC;AACf,CAAC;AAED,eAAe,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC"}

package/lib/guards.d.ts

@@ -0,0 +1,35 @@
+export interface ProtectedTargetOptions {
+    templateDir?: string;
+    force?: boolean;
+    dryRun?: boolean;
+    allowProtected?: boolean;
+}
+/**
+ * Filesystem scope guard (Supply Chain: filesystem access).
+ * Constrains all reads/writes to targetDir / templateDir.
+ */
+export declare function assertInside(root: string, candidate: string, message?: string): void;
+/**
+ * Normalizes a path for protected-target comparison. On Windows the filesystem
+ * is case-insensitive, so `C:\Users\Name` and `c:\users\name` are the same
+ * directory and must compare equal.
+ */
+export declare function normalizeForComparison(p: string): string;
+/**
+ * Returns true when `targetDir` is a location the scaffolder must never write
+ * into: the filesystem root, the user's home directory, the home directory's
+ * parent (e.g. /home, C:\Users -- scaffolding there affects every user), or an
+ * ancestor of the template itself (scaffolding into D:\projects would merge
+ * the template into its own parent).
+ *
+ * Lexical comparison is not enough: a symlink pointing at home must also be
+ * caught, so an existing target is resolved with realpath before comparing.
+ */
+export declare function isProtectedTarget(targetDir: string, options?: ProtectedTargetOptions): boolean;
+declare const _default: {
+    assertInside: typeof assertInside;
+    normalizeForComparison: typeof normalizeForComparison;
+    isProtectedTarget: typeof isProtectedTarget;
+};
+export default _default;
+//# sourceMappingURL=guards.d.ts.map

package/lib/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAOpF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGxD;AAwCD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CASlG;;;;;;AAED,wBAIE"}