code-foundry 0.1.4 → 0.2.0

package/.github/scripts/ci.sh

@@ -91,12 +91,14 @@ NODE
 
 package_manager() {
   local configured=""
-  if [ -f .github/template.yml ]; then
+  if [ -x .github/scripts/profile.sh ]; then
+    configured="$(bash .github/scripts/profile.sh get package_manager 2>/dev/null || true)"
+  elif [ -f .github/template.yml ]; then
     configured="$(awk -F': ' '/^package_manager:/ {print $2; exit}' .github/template.yml)"
-    case "$configured" in
-      bun|pnpm|yarn|npm) echo "$configured"; return ;;
-    esac
   fi
+  case "$configured" in
+    bun|pnpm|yarn|npm) echo "$configured"; return ;;
+  esac
   if [ -f bun.lock ] || [ -f bun.lockb ]; then echo bun
   elif [ -f pnpm-lock.yaml ]; then echo pnpm
   elif [ -f yarn.lock ]; then echo yarn

package/.github/scripts/codeql-languages.sh

@@ -23,7 +23,9 @@ esac
 
 if find .github/workflows -type f \( -name '*.yml' -o -name '*.yaml' \) -print -quit | grep -q .; then languages+=(actions); fi
 configured=""
-if [ -f .github/template.yml ]; then
+if [ -x .github/scripts/profile.sh ]; then
+  configured="$(bash .github/scripts/profile.sh get languages 2>/dev/null || true)"
+elif [ -f .github/template.yml ]; then
   configured="$(awk -F': ' '/^languages:/ {print $2; exit}' .github/template.yml)"
 fi
 

package/.github/scripts/doctor.sh

@@ -91,7 +91,7 @@ for workflow in ci codeql security test draft-pr release-pr release; do
   fi
 done
 
-for script in ci.sh codeql-languages.sh security.sh doctor.sh bootstrap.sh sync-template.sh init-repo.sh sync-protection.sh sync-codeowners.sh; do
+for script in ci.sh codeql-languages.sh profile.sh security.sh doctor.sh bootstrap.sh sync-template.sh init-repo.sh sync-protection.sh sync-codeowners.sh; do
   [ -x ".github/scripts/$script" ] || error "missing executable script: .github/scripts/$script"
 done
 

package/.github/scripts/init-repo.sh

@@ -3,15 +3,16 @@ set -euo pipefail
 
 source="${REPO_FOUNDRY_SOURCE:-https://github.com/${GITHUB_REPOSITORY_OWNER:-OWNER}/code-foundry.git}"
 ref="main"
+profile="${REPO_FOUNDRY_PROFILE:-auto}"
 protection=false
 dry_run=false
 prune=false
-languages="auto"
-features="all"
-package_manager="auto"
+languages="${REPO_FOUNDRY_LANGUAGES:-auto}"
+features="${REPO_FOUNDRY_FEATURES:-all}"
+package_manager="${REPO_FOUNDRY_PACKAGE_MANAGER:-auto}"
 bootstrap=true
-release_type="auto"
-npm_publish="false"
+release_type="${REPO_FOUNDRY_RELEASE_TYPE:-auto}"
+npm_publish="${REPO_FOUNDRY_NPM_PUBLISH:-false}"
 tool_dir=""
 
 cleanup() {
@@ -28,6 +29,7 @@ Initialize or synchronize a repository from the shared baseline.
 Options:
   --source PATH_OR_URL       Template source (default: REPO_FOUNDRY_SOURCE or GitHub owner)
   --ref REF                  Template branch or tag (default: main)
+  --profile NAME             auto, application, monorepo, or minimal
   --languages LIST           auto or comma-separated: typescript,rust,python,solidity
   --features LIST            all or comma-separated optional features:
                              ci,codeql,security,test,draft-pr,release-pr,release,dependabot
@@ -51,6 +53,7 @@ while [ "$#" -gt 0 ]; do
   case "$1" in
     --source) source="${2:?missing source path or URL}"; shift 2 ;;
     --ref) ref="${2:?missing ref}"; shift 2 ;;
+    --profile) profile="${2:?missing profile}"; shift 2 ;;
     --languages) languages="${2:?missing language list}"; shift 2 ;;
     --features) features="${2:?missing feature list}"; shift 2 ;;
     --package-manager) package_manager="${2:?missing package manager}"; shift 2 ;;
@@ -92,6 +95,7 @@ fi
 sync_args=(
   --source "$source"
   --ref "$ref"
+  --profile "$profile"
   --languages "$languages"
   --features "$features"
   --package-manager "$package_manager"
@@ -107,11 +111,18 @@ fi
 
 mkdir -p .github
 template_ref="$(awk -F': ' '/^template:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+profile="$(awk -F': ' '/^profile:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+languages="$(awk -F': ' '/^languages:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+features="$(awk -F': ' '/^features:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+package_manager="$(awk -F': ' '/^package_manager:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+release_type="$(awk -F': ' '/^release_type:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+npm_publish="$(awk -F': ' '/^npm_publish:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
 {
   printf 'version: 1\n'
   if [ -n "$template_ref" ]; then
     printf 'template: %s\n' "$template_ref"
   fi
+  printf 'profile: %s\n' "$profile"
   printf 'languages: %s\n' "$languages"
   printf 'features: %s\n' "$features"
   printf 'package_manager: %s\n' "$package_manager"

package/.github/scripts/profile.sh

@@ -0,0 +1,179 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Resolve repository settings with this precedence:
+# explicit REPO_FOUNDRY_* values (CLI callers can export them), then
+# .github/template.yml, then detected defaults.
+
+root="${REPO_FOUNDRY_ROOT:-$PWD}"
+command="detect"
+requested_key=""
+
+usage() {
+  cat <<'EOF'
+Usage: profile.sh [detect|env|get KEY] [--root PATH]
+
+Commands:
+  detect       Print the resolved profile as key=value lines (default)
+  env          Print REPO_FOUNDRY_* assignments
+  get KEY      Print one resolved profile value
+EOF
+}
+
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    detect|env) command="$1"; shift ;;
+    get) command=get; requested_key="${2:?missing profile key}"; shift 2 ;;
+    --root) root="${2:?missing root path}"; shift 2 ;;
+    -h|--help) usage; exit 0 ;;
+    *) printf 'Unknown option: %s\n' "$1" >&2; exit 2 ;;
+  esac
+done
+
+cd "$root"
+template_file=.github/template.yml
+
+config_value() {
+  local key="$1"
+  [ -f "$template_file" ] || return 0
+  awk -F': *' -v key="$key" '$1 == key { print substr($0, index($0, ":") + 1); exit }' "$template_file" |
+    sed -e 's/^ *//' -e 's/ *$//' -e 's/^['"'"'"]//' -e 's/['"'"'"]$//'
+}
+
+env_value() {
+  local key="$1" env_key
+  env_key="REPO_FOUNDRY_$(printf '%s' "$key" | tr '[:lower:]-' '[:upper:]_')"
+  if [ -n "${!env_key+x}" ] && [ -n "${!env_key}" ]; then
+    printf '%s\n' "${!env_key}"
+  fi
+}
+
+raw_value() {
+  local key="$1" default="${2:-}" value
+  value="$(env_value "$key" || true)"
+  [ -n "$value" ] || value="$(config_value "$key" || true)"
+  [ -n "$value" ] && printf '%s\n' "$value" || printf '%s\n' "$default"
+}
+
+has_source() {
+  find . -path './.git' -prune -o -type f -print |
+    awk -v pattern="(^|/)[^/]+\\.($1)$" '$0 ~ pattern { found=1; exit } END { exit !found }'
+}
+
+detect_languages() {
+  local detected=()
+  if [ -f package.json ] || has_source 'js|jsx|mjs|cjs|ts|tsx|mts|cts' ||
+    [ -f bun.lock ] || [ -f bun.lockb ] || [ -f pnpm-lock.yaml ] ||
+    [ -f yarn.lock ] || [ -f package-lock.json ]; then
+    detected+=(typescript)
+  fi
+  if [ -f Cargo.toml ] || has_source 'rs'; then detected+=(rust); fi
+  if [ -f pyproject.toml ] || [ -f requirements.txt ] || [ -f requirements-dev.txt ] || has_source 'py'; then
+    detected+=(python)
+  fi
+  if find . -path './.git' -prune -o -type f -name '*.sol' -print -quit | grep -q .; then
+    detected+=(solidity)
+  fi
+  (IFS=,; printf '%s\n' "${detected[*]:-none}")
+}
+
+detect_package_manager() {
+  if [ -f bun.lock ] || [ -f bun.lockb ]; then echo bun
+  elif [ -f pnpm-lock.yaml ]; then echo pnpm
+  elif [ -f yarn.lock ]; then echo yarn
+  elif [ -f package-lock.json ]; then echo npm
+  elif [ -f package.json ]; then echo bun
+  else echo none
+  fi
+}
+
+detect_profile() {
+  if [ -f turbo.json ] || [ -f pnpm-workspace.yaml ] ||
+    ( [ -f package.json ] && node -e 'const p=require("./package.json"); process.exit(Array.isArray(p.workspaces) || (p.workspaces && typeof p.workspaces === "object") ? 0 : 1)' 2>/dev/null ); then
+    echo monorepo
+  elif [ -f package.json ] || [ -f pyproject.toml ] || [ -f Cargo.toml ]; then
+    echo application
+  else
+    echo minimal
+  fi
+}
+
+resolve_languages() {
+  local value
+  value="$(raw_value languages auto)"
+  [ "$value" = auto ] && value="$(detect_languages)"
+  printf '%s\n' "$value"
+}
+
+resolve_profile() {
+  local value
+  value="$(raw_value profile auto)"
+  [ "$value" = auto ] && value="$(detect_profile)"
+  printf '%s\n' "$value"
+}
+
+resolve_package_manager() {
+  local value
+  value="$(raw_value package_manager auto)"
+  [ "$value" = auto ] && value="$(detect_package_manager)"
+  printf '%s\n' "$value"
+}
+
+resolve_release_type() {
+  local value
+  value="$(raw_value release_type auto)"
+  if [ "$value" = auto ]; then
+    if [ -f package.json ]; then value=node
+    elif [ -f pyproject.toml ]; then value=python
+    elif [ -f Cargo.toml ]; then value=rust
+    elif [ -f version.txt ]; then value=simple
+    else value=none
+    fi
+  fi
+  printf '%s\n' "$value"
+}
+
+resolve_npm_publish() {
+  local value release_type
+  value="$(raw_value npm_publish false)"
+  release_type="$(resolve_release_type)"
+  [ "$release_type" = node ] || value=false
+  printf '%s\n' "$value"
+}
+
+detect() {
+  local profile languages package_manager release_type npm_publish features runner unit_runner
+  profile="$(resolve_profile)"
+  languages="$(resolve_languages)"
+  package_manager="$(resolve_package_manager)"
+  release_type="$(resolve_release_type)"
+  npm_publish="$(resolve_npm_publish)"
+  features="$(raw_value features all)"
+  runner="$(raw_value runner ubuntu-latest)"
+  unit_runner="$(raw_value unit_runner ubuntu-slim)"
+  printf 'profile=%s\n' "$profile"
+  printf 'languages=%s\n' "$languages"
+  printf 'features=%s\n' "$features"
+  printf 'package_manager=%s\n' "$package_manager"
+  printf 'release_type=%s\n' "$release_type"
+  printf 'npm_publish=%s\n' "$npm_publish"
+  printf 'runner=%s\n' "$runner"
+  printf 'unit_runner=%s\n' "$unit_runner"
+  printf 'cache_packages=%s\n' "$(raw_value cache_packages auto)"
+  printf 'cache_build=%s\n' "$(raw_value cache_build auto)"
+  printf 'coverage_minimum=%s\n' "$(raw_value coverage_minimum 80)"
+  printf 'turbo_remote=%s\n' "$(raw_value turbo_remote auto)"
+}
+
+case "$command" in
+  detect) detect ;;
+  get)
+    detect | awk -F= -v key="$requested_key" '$1 == key { print substr($0, index($0, "=") + 1); found=1 } END { exit !found }'
+    ;;
+  env)
+    detect | while IFS='=' read -r key value; do
+      env_key="REPO_FOUNDRY_$(printf '%s' "$key" | tr '[:lower:]-' '[:upper:]_')"
+      printf '%s=%q\n' "$env_key" "$value"
+    done
+    ;;
+esac

package/.github/scripts/security.sh

@@ -103,12 +103,14 @@ run_parallel() {
 
 package_manager() {
   local configured=""
-  if [ -f .github/template.yml ]; then
+  if [ -x .github/scripts/profile.sh ]; then
+    configured="$(bash .github/scripts/profile.sh get package_manager 2>/dev/null || true)"
+  elif [ -f .github/template.yml ]; then
     configured="$(awk -F': ' '/^package_manager:/ {print $2; exit}' .github/template.yml)"
-    case "$configured" in
-      bun|pnpm|yarn|npm) echo "$configured"; return ;;
-    esac
   fi
+  case "$configured" in
+    bun|pnpm|yarn|npm) echo "$configured"; return ;;
+  esac
   if [ -f bun.lock ] || [ -f bun.lockb ]; then echo bun
   elif [ -f pnpm-lock.yaml ]; then echo pnpm
   elif [ -f yarn.lock ]; then echo yarn

package/.github/scripts/sync-template.sh

@@ -9,6 +9,7 @@ Synchronize the repository-owned baseline without replacing project-specific
 README files, mise tool selections, or additional workflows.
 
 Options:
+  --profile NAME    auto, application, monorepo, or minimal
   --languages LIST  auto or comma-separated: typescript,rust,python,solidity
   --features LIST   all or comma-separated standard features
   --package-manager NAME  auto, bun, pnpm, yarn, or npm
@@ -22,16 +23,26 @@ source_ref="main"
 mode="check"
 source=""
 temp_dir=""
-languages="auto"
-features="all"
+profile="${REPO_FOUNDRY_PROFILE:-auto}"
+languages="${REPO_FOUNDRY_LANGUAGES:-auto}"
+features="${REPO_FOUNDRY_FEATURES:-all}"
 prune=false
 languages_set=false
+profile_set=false
 features_set=false
-package_manager=""
+[ -n "${REPO_FOUNDRY_LANGUAGES:-}" ] && languages_set=true
+[ -n "${REPO_FOUNDRY_PROFILE:-}" ] && profile_set=true
+[ -n "${REPO_FOUNDRY_FEATURES:-}" ] && features_set=true
+package_manager="${REPO_FOUNDRY_PACKAGE_MANAGER:-}"
 package_manager_set=false
+[ -n "${REPO_FOUNDRY_PACKAGE_MANAGER:-}" ] && package_manager_set=true
 template_ref=""
-release_type="auto"
-npm_publish="false"
+release_type="${REPO_FOUNDRY_RELEASE_TYPE:-auto}"
+npm_publish="${REPO_FOUNDRY_NPM_PUBLISH:-false}"
+release_type_set=false
+npm_publish_set=false
+[ -n "${REPO_FOUNDRY_RELEASE_TYPE:-}" ] && release_type_set=true
+[ -n "${REPO_FOUNDRY_NPM_PUBLISH:-}" ] && npm_publish_set=true
 node_version="24.18.0"
 bun_version="1.3.14"
 python_version="3.13"
@@ -43,6 +54,7 @@ custom_ignores=""
 
 valid_languages="typescript rust python solidity"
 valid_features="ci codeql security test draft-pr release-pr release dependabot"
+valid_profiles="auto application monorepo minimal"
 valid_release_types="auto node python rust simple none"
 
 contains_word() {
@@ -80,6 +92,7 @@ while [ "$#" -gt 0 ]; do
   case "$1" in
     --source) source="${2:?missing source path or URL}"; shift 2 ;;
     --ref) source_ref="${2:?missing ref}"; shift 2 ;;
+    --profile) profile="${2:?missing profile}"; profile_set=true; shift 2 ;;
     --languages) languages="${2:?missing language list}"; languages_set=true; shift 2 ;;
     --features) features="${2:?missing feature list}"; features_set=true; shift 2 ;;
     --package-manager) package_manager="${2:?missing package manager}"; package_manager_set=true; shift 2 ;;
@@ -93,6 +106,10 @@ done
 
 [ -n "$source" ] || { usage >&2; exit 2; }
 if [ -f .github/template.yml ]; then
+  if [ "$profile_set" = false ]; then
+    configured_profile="$(awk -F': ' '/^profile:/ {print $2; exit}' .github/template.yml)"
+    [ -n "$configured_profile" ] && profile="$configured_profile"
+  fi
   if [ "$languages_set" = false ]; then
     configured_languages="$(awk -F': ' '/^languages:/ {print $2; exit}' .github/template.yml)"
     [ -n "$configured_languages" ] && languages="$configured_languages"
@@ -105,10 +122,14 @@ if [ -f .github/template.yml ]; then
     package_manager="$(awk -F': ' '/^package_manager:/ {print $2; exit}' .github/template.yml)"
   fi
   template_ref="$(awk -F': ' '/^template:/ {print $2; exit}' .github/template.yml)"
-  configured_release_type="$(awk -F': ' '/^release_type:/ {print $2; exit}' .github/template.yml)"
-  configured_npm_publish="$(awk -F': ' '/^npm_publish:/ {print $2; exit}' .github/template.yml)"
-  [ -n "$configured_release_type" ] && release_type="$configured_release_type"
-  [ -n "$configured_npm_publish" ] && npm_publish="$configured_npm_publish"
+  if [ "$release_type_set" != true ]; then
+    configured_release_type="$(awk -F': ' '/^release_type:/ {print $2; exit}' .github/template.yml)"
+    [ -n "$configured_release_type" ] && release_type="$configured_release_type"
+  fi
+  if [ "$npm_publish_set" != true ]; then
+    configured_npm_publish="$(awk -F': ' '/^npm_publish:/ {print $2; exit}' .github/template.yml)"
+    [ -n "$configured_npm_publish" ] && npm_publish="$configured_npm_publish"
+  fi
 fi
 [ -n "$package_manager" ] || package_manager=auto
 case "$package_manager" in
@@ -117,6 +138,10 @@ case "$package_manager" in
 esac
 validate_list language "$languages" "$valid_languages"
 validate_list feature "$features" "$valid_features"
+contains_word "$valid_profiles" "$profile" || {
+  printf 'Unsupported profile: %s\n' "$profile" >&2
+  exit 2
+}
 contains_word "$valid_release_types" "$release_type" || {
   printf 'Unsupported release type: %s\n' "$release_type" >&2
   exit 2
@@ -131,6 +156,26 @@ else
   template_root="$temp_dir/template-repo"
 fi
 
+# Resolve the effective profile after the template is available. This gives
+# CLI flags and GitHub repository variables priority over template defaults,
+# while making automatic detection concrete in the generated profile.
+if [ -f "$template_root/.github/scripts/profile.sh" ]; then
+  profile_output="$(
+    REPO_FOUNDRY_PROFILE="$profile" \
+    REPO_FOUNDRY_LANGUAGES="$languages" \
+    REPO_FOUNDRY_FEATURES="$features" \
+    REPO_FOUNDRY_PACKAGE_MANAGER="$package_manager" \
+    REPO_FOUNDRY_RELEASE_TYPE="$release_type" \
+    REPO_FOUNDRY_NPM_PUBLISH="$npm_publish" \
+    bash "$template_root/.github/scripts/profile.sh" detect --root "$PWD"
+  )"
+  profile="$(printf '%s\n' "$profile_output" | awk -F= '$1 == "profile" {print substr($0, index($0, "=") + 1)}')"
+  languages="$(printf '%s\n' "$profile_output" | awk -F= '$1 == "languages" {print substr($0, index($0, "=") + 1)}')"
+  package_manager="$(printf '%s\n' "$profile_output" | awk -F= '$1 == "package_manager" {print substr($0, index($0, "=") + 1)}')"
+  release_type="$(printf '%s\n' "$profile_output" | awk -F= '$1 == "release_type" {print substr($0, index($0, "=") + 1)}')"
+  npm_publish="$(printf '%s\n' "$profile_output" | awk -F= '$1 == "npm_publish" {print substr($0, index($0, "=") + 1)}')"
+fi
+
 if [ -f "$template_root/package.json" ]; then
   template_version="$(awk -F'"' '/"version"[[:space:]]*:/ {print $4; exit}' "$template_root/package.json")"
   [ -n "$template_version" ] && template_ref="code-foundry@$template_version"
@@ -160,6 +205,7 @@ files=(
   .github/actions/setup/action.yml
   .github/actions/cache/action.yml
   .github/actions/codeql/action.yml
+  .github/scripts/profile.sh
   .github/scripts/bootstrap.sh
   .github/scripts/changed-files.sh
   .github/scripts/ci.sh
@@ -404,6 +450,7 @@ if [ "$mode" = "apply" ]; then
     if [ -n "$template_ref" ]; then
       printf 'template: %s\n' "$template_ref"
     fi
+    printf 'profile: %s\n' "$profile"
     printf 'languages: %s\n' "$languages"
     printf 'features: %s\n' "$features"
     if [ -n "$package_manager" ]; then

package/.github/template.yml

@@ -1,7 +1,14 @@
 version: 1
 template: code-foundry@latest
+profile: auto
 languages: typescript
 features: all
 package_manager: bun
 release_type: node
 npm_publish: true
+runner: ubuntu-latest
+unit_runner: ubuntu-slim
+cache_packages: auto
+cache_build: auto
+coverage_minimum: 80
+turbo_remote: auto

package/.github/template.yml.example

@@ -1,8 +1,15 @@
 # Repository-specific settings for the shared initializer and sync scripts.
 version: 1
 template: code-foundry@latest
+profile: auto
 languages: auto
 features: all
 package_manager: auto
 release_type: auto
 npm_publish: false
+runner: ubuntu-latest
+unit_runner: ubuntu-slim
+cache_packages: auto
+cache_build: auto
+coverage_minimum: 80
+turbo_remote: auto

package/.github/workflows/ci.yml

@@ -13,6 +13,13 @@ permissions:
 env:
   TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
   TURBO_TEAM: ${{ vars.TURBO_TEAM }}
+  REPO_FOUNDRY_PROFILE: ${{ vars.REPO_FOUNDRY_PROFILE }}
+  REPO_FOUNDRY_LANGUAGES: ${{ vars.REPO_FOUNDRY_LANGUAGES }}
+  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
+  REPO_FOUNDRY_PACKAGE_MANAGER: ${{ vars.REPO_FOUNDRY_PACKAGE_MANAGER }}
+  REPO_FOUNDRY_RUNNER: ${{ vars.REPO_FOUNDRY_RUNNER }}
+  REPO_FOUNDRY_CACHE_PACKAGES: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
+  REPO_FOUNDRY_CACHE_BUILD: ${{ vars.REPO_FOUNDRY_CACHE_BUILD || 'auto' }}
   REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
 
 concurrency:
@@ -22,7 +29,7 @@ concurrency:
 jobs:
   format:
     name: Format
-    runs-on: ${{ vars.REPO_FOUNDRY_FAST_RUNNER || 'ubuntu-latest' }}
+    runs-on: ${{ vars.REPO_FOUNDRY_RUNNER || vars.REPO_FOUNDRY_FAST_RUNNER || 'ubuntu-latest' }}
     timeout-minutes: 15
     steps:
       - name: Checkout
@@ -77,7 +84,7 @@ jobs:
 
   lint:
     name: Lint
-    runs-on: ${{ vars.REPO_FOUNDRY_FAST_RUNNER || 'ubuntu-latest' }}
+    runs-on: ${{ vars.REPO_FOUNDRY_RUNNER || vars.REPO_FOUNDRY_FAST_RUNNER || 'ubuntu-latest' }}
     timeout-minutes: 20
     steps:
       - name: Checkout

package/.github/workflows/codeql.yml

@@ -15,6 +15,11 @@ permissions:
   packages: read
   security-events: write
 
+env:
+  REPO_FOUNDRY_PROFILE: ${{ vars.REPO_FOUNDRY_PROFILE }}
+  REPO_FOUNDRY_LANGUAGES: ${{ vars.REPO_FOUNDRY_LANGUAGES }}
+  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
   cancel-in-progress: true

package/.github/workflows/release-pr.yml

@@ -23,7 +23,14 @@ jobs:
       - name: Check
         id: check-pr
         run: |
-          EXISTING=$(gh pr list --limit 1 --base main --head staging --state open --json number 2>/dev/null | jq 'length')
+          set -euo pipefail
+          EXISTING=$(gh pr list \
+            --repo "$GITHUB_REPOSITORY" \
+            --limit 1 \
+            --base main \
+            --head staging \
+            --state open \
+            --json number | jq 'length')
           echo "existing=$EXISTING" >> "$GITHUB_OUTPUT"
 
       - name: Create
@@ -60,6 +67,7 @@ jobs:
           EOF
 
           gh pr create \
+            --repo "$GITHUB_REPOSITORY" \
             --base main \
             --head staging \
             --title "Release: staging -> main ($DATE)" \

package/.github/workflows/release.yml

@@ -10,6 +10,14 @@ permissions:
   issues: write
   pull-requests: write
 
+env:
+  REPO_FOUNDRY_PROFILE: ${{ vars.REPO_FOUNDRY_PROFILE }}
+  REPO_FOUNDRY_LANGUAGES: ${{ vars.REPO_FOUNDRY_LANGUAGES }}
+  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
+  REPO_FOUNDRY_PACKAGE_MANAGER: ${{ vars.REPO_FOUNDRY_PACKAGE_MANAGER }}
+  REPO_FOUNDRY_RELEASE_TYPE: ${{ vars.REPO_FOUNDRY_RELEASE_TYPE }}
+  REPO_FOUNDRY_NPM_PUBLISH: ${{ vars.REPO_FOUNDRY_NPM_PUBLISH }}
+
 jobs:
   release:
     name: Release / Version
@@ -33,8 +41,13 @@ jobs:
         id: profile
         shell: bash
         run: |
-          release_type="$(awk -F': ' '/^release_type:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
-          npm_publish="$(awk -F': ' '/^npm_publish:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+          if [ -x .github/scripts/profile.sh ]; then
+            release_type="$(bash .github/scripts/profile.sh get release_type)"
+            npm_publish="$(bash .github/scripts/profile.sh get npm_publish)"
+          else
+            release_type="$(awk -F': ' '/^release_type:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+            npm_publish="$(awk -F': ' '/^npm_publish:/ {print $2; exit}' .github/template.yml 2>/dev/null || true)"
+          fi
           [ -n "$release_type" ] || release_type=auto
           [ -n "$npm_publish" ] || npm_publish=false
 
@@ -64,7 +77,6 @@ jobs:
           token: ${{ secrets.RELEASE_PLEASE_TOKEN || github.token }}
           config-file: release-please-config.json
           release-type: ${{ steps.profile.outputs.release_type }}
-          bump-minor-pre-major: true
 
   npm:
     name: Release / Publish npm

package/.github/workflows/security.yml

@@ -11,6 +11,11 @@ permissions:
   contents: read
 
 env:
+  REPO_FOUNDRY_PROFILE: ${{ vars.REPO_FOUNDRY_PROFILE }}
+  REPO_FOUNDRY_LANGUAGES: ${{ vars.REPO_FOUNDRY_LANGUAGES }}
+  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
+  REPO_FOUNDRY_PACKAGE_MANAGER: ${{ vars.REPO_FOUNDRY_PACKAGE_MANAGER }}
+  REPO_FOUNDRY_CACHE_PACKAGES: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
   REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
 
 concurrency:

package/.github/workflows/test.yml

@@ -13,6 +13,12 @@ permissions:
 env:
   TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
   TURBO_TEAM: ${{ vars.TURBO_TEAM }}
+  REPO_FOUNDRY_PROFILE: ${{ vars.REPO_FOUNDRY_PROFILE }}
+  REPO_FOUNDRY_LANGUAGES: ${{ vars.REPO_FOUNDRY_LANGUAGES }}
+  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
+  REPO_FOUNDRY_PACKAGE_MANAGER: ${{ vars.REPO_FOUNDRY_PACKAGE_MANAGER }}
+  REPO_FOUNDRY_CACHE_PACKAGES: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
+  REPO_FOUNDRY_CACHE_BUILD: ${{ vars.REPO_FOUNDRY_CACHE_BUILD || 'auto' }}
   REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
 
 concurrency:

package/CHANGELOG.md

@@ -1,3 +1,12 @@
 # Changelog
 
+## [0.2.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.1.4...v0.2.0) (2026-07-28)
+
+
+### Features
+
+* document repository profile diagnostics ([29f132a](https://github.com/0xPlayerOne/code-foundry/commit/29f132a2b15053b06c7fe22c27324dc59151adee))
+
+## Changelog
+
 All notable changes to this project are documented here.

package/README.md

@@ -44,7 +44,7 @@ bash .github/scripts/init-repo.sh
 
 Use `bash .github/scripts/sync-template.sh --source ... --check` to preview differences. For local template development, pass the template checkout as `--source` and `--ref staging`.
 
-The initializer is intentionally flag-driven so the same baseline can be used as a small repository package. Language selection controls CodeQL and records the repository profile; feature selection controls which standard workflows are installed. `auto` detects supported languages, while `all` enables every standard workflow.
+The initializer is intentionally flag-driven so the same baseline can be used as a small repository package. Language selection controls CodeQL and records the repository profile; feature selection controls which standard workflows are installed. `auto` detects supported languages, while `all` enables every standard workflow. The resolver profiles the repository for language, package manager, project shape, release type, runners, and cache policy.
 
 ```bash
 # Preview a TypeScript + Python repository without changing files
@@ -59,7 +59,11 @@ bash .github/scripts/init-repo.sh \
   --features ci,codeql,security,test
 ```
 
-Supported languages are `typescript`, `rust`, `python`, and `solidity`. Supported feature flags are `ci`, `codeql`, `security`, `test`, `draft-pr`, `release-pr`, `release`, and `dependabot`. Use `--prune` only when you explicitly want disabled standard workflows removed; custom workflows are always preserved. The selected profile is stored in `.github/template.yml`, which makes later syncs repeatable and lets workflows consume repository-specific settings without duplicating the template scripts.
+Supported profiles are `application`, `monorepo`, and `minimal`; use `auto` to detect one. Supported languages are `typescript`, `rust`, `python`, and `solidity`. Supported feature flags are `ci`, `codeql`, `security`, `test`, `draft-pr`, `release-pr`, `release`, and `dependabot`. Use `--prune` only when you explicitly want disabled standard workflows removed; custom workflows are always preserved. The selected profile is stored in `.github/template.yml`, which makes later syncs repeatable and lets workflows consume repository-specific settings without duplicating the template scripts.
+
+Profile precedence is consistent everywhere: explicit CLI flags, then `REPO_FOUNDRY_*` GitHub repository variables/environment values, then `.github/template.yml`, then automatic detection and standard defaults. Useful repository variables include `REPO_FOUNDRY_PROFILE`, `REPO_FOUNDRY_LANGUAGES`, `REPO_FOUNDRY_FEATURES`, `REPO_FOUNDRY_PACKAGE_MANAGER`, `REPO_FOUNDRY_RUNNER`, `REPO_FOUNDRY_UNIT_RUNNER`, `REPO_FOUNDRY_CACHE_PACKAGES`, `REPO_FOUNDRY_CACHE_BUILD`, `REPO_FOUNDRY_COVERAGE_MINIMUM`, and `REPO_FOUNDRY_TURBO_REMOTE`. Use CLI flags for one-off initialization; use repository variables for local overrides that should not be committed.
+
+Inspect the resolved profile at any time with `bash .github/scripts/profile.sh detect`; use `profile.sh get KEY` when another script needs one setting.
 
 ## Releases and publishing
 

package/package.json

@@ -1,9 +1,17 @@
 {
   "name": "code-foundry",
-  "version": "0.1.4",
+  "version": "0.2.0",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/0xPlayerOne/code-foundry.git"
+  },
+  "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
+  "bugs": {
+    "url": "https://github.com/0xPlayerOne/code-foundry/issues"
+  },
   "packageManager": "bun@1.3.14",
   "bin": {
     "code-foundry": "src/cli.mjs"

package/src/cli.mjs

@@ -18,6 +18,7 @@ Init/sync options:
   --target PATH             Repository directory (default: current directory)
   --source PATH_OR_URL      Template source override
   --ref REF                 Template branch or tag (default: main)
+  --profile NAME            auto, application, monorepo, or minimal
   --languages LIST          auto or typescript,rust,python,solidity
   --features LIST           all or ci,codeql,security,test,draft-pr,release-pr,release,dependabot
   --package-manager NAME    auto, bun, pnpm, yarn, or npm
@@ -41,11 +42,12 @@ function parseArgs(argv) {
     target: process.cwd(),
     source: packageRoot,
     ref: 'main',
-    languages: 'auto',
-    features: 'all',
-    packageManager: 'auto',
-    releaseType: 'auto',
-    npmPublish: false,
+    profile: process.env.REPO_FOUNDRY_PROFILE || 'auto',
+    languages: process.env.REPO_FOUNDRY_LANGUAGES || 'auto',
+    features: process.env.REPO_FOUNDRY_FEATURES || 'all',
+    packageManager: process.env.REPO_FOUNDRY_PACKAGE_MANAGER || 'auto',
+    releaseType: process.env.REPO_FOUNDRY_RELEASE_TYPE || 'auto',
+    npmPublish: process.env.REPO_FOUNDRY_NPM_PUBLISH === 'true',
     languagesSet: false,
     featuresSet: false,
     dryRun: false,
@@ -57,6 +59,7 @@ function parseArgs(argv) {
     ['--target', 'target'],
     ['--source', 'source'],
     ['--ref', 'ref'],
+    ['--profile', 'profile'],
     ['--languages', 'languages'],
     ['--features', 'features'],
     ['--package-manager', 'packageManager'],
@@ -114,6 +117,7 @@ function main() {
     const initArgs = [
       '--source', options.source,
       '--ref', options.ref,
+      '--profile', options.profile,
       '--languages', options.languages,
       '--features', options.features,
       '--package-manager', options.packageManager,