create-foundry-workspace 1.0.0 → 1.0.1

package/README.md

@@ -1,170 +1,172 @@
-# Foundry (`create-foundry-workspace`)
-
-> **Deterministic, local-first, zero-LLM CLI for initializing AI-ready software development workspaces.**
-
-[![CI](https://github.com/Harshitkant21/Foundry/actions/workflows/ci.yml/badge.svg)](https://github.com/Harshitkant21/Foundry/actions)
-[![npm version](https://img.shields.io/npm/v/create-foundry-workspace.svg?style=flat&color=CB3837)](https://www.npmjs.com/package/create-foundry-workspace)
-[![Node: >=18.0.0](https://img.shields.io/badge/Node->=18.0.0-green.svg)](package.json)
-[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
-[![Zero-LLM Runtime](https://img.shields.io/badge/Architecture-Deterministic%20Zero--LLM-8A2BE2.svg)](docs/ARCHITECTURE.md)
-
----
-
-## What is Foundry?
-
-Modern developers increasingly rely on AI coding assistants such as **Cursor**, **Claude Code**, and **GitHub Copilot**. However, when starting a new project, developers are forced to manually author and repeatedly recreate AI instruction files, project rules, context files, and guardrails.
-
-**Foundry** is an open-source, deterministic developer tool distributed via npm as **`create-foundry-workspace`**. When starting a new project, running:
-
-```bash
-npx create-foundry-workspace
-# or: npm create foundry-workspace
-```
-
-asks a minimal set of meaningful project initialization questions and deterministically scaffolds an **AI-ready software workspace** based on predefined, versioned, and maintainable templates.
-
----
-
-## What Foundry Does
-
-- **Establishes a Canonical Contract:** Generates a clean, machine-readable `ai-workspace.yaml` manifest.
-- **Generates Native Tool Adapters:** Renders native, complete instruction files for **Cursor** (`.cursor/rules/*.mdc`), **Claude Code** (`CLAUDE.md`), **GitHub Copilot** (`.github/copilot-instructions.md`), and the cross-tool open standard **`AGENTS.md`**.
-- **Generates Project README:** Creates a deterministic, human-facing `README.md` tailored to the selected project stack, commands, and AI tools.
-- **Enforces Architectural Guardrails:** Injects strict or standard code quality, security, and testing guardrails.
-- **Safeguards Existing Files:** Supports non-destructive safe-merges, overwrite protection, and dry-run execution.
-
----
-
-## What Foundry Explicitly Does NOT Do
-
-Foundry is **NOT an AI agent** and does not use AI to generate workspaces:
-- ❌ **NO OpenAI, Anthropic, or Gemini API calls**
-- ❌ **NO local or remote LLM inference**
-- ❌ **NO network requests at runtime** (100% offline and local-first)
-- ❌ **NO hidden API keys or telemetry**
-- ❌ **NO autonomous code generation**
-
-Output is 100% deterministic: given the same inputs and version, the generated workspace is bit-for-bit identical every time.
-
----
-
-## Quick Start
-
-Initialize an AI-ready workspace in your current directory:
-```bash
-npx create-foundry-workspace
-# or: npm create foundry-workspace
-```
-
-Or target a specific folder:
-```bash
-npx create-foundry-workspace ./my-new-project
-```
-
-### Non-Interactive (CI / Scripted) Usage
-```bash
-npx create-foundry-workspace ./my-new-service \
-  --name my-new-service \
-  --type api \
-  --lang python \
-  --strictness strict \
-  --ai cursor,claude,copilot,agents \
-  --yes
-```
-
----
-
-## CLI Options
-
-| Flag | Description | Default |
-|---|---|---|
-| `[directory]` | Target directory to initialize | `.` |
-| `-n, --name <string>` | Project name | Inferred from folder or `package.json` |
-| `-t, --type <type>` | `web` \| `api` \| `fullstack` \| `cli` \| `library` \| `data-ml` \| `mobile` \| `custom` | Inferred or `fullstack` |
-| `-l, --lang <lang>` | `typescript` \| `javascript` \| `python` \| `java` \| `go` \| `rust` \| `other` | Inferred or `typescript` |
-| `-r, --repo <repo>` | `github` \| `gitlab` \| `none` | `github` |
-| `-s, --strictness <level>` | `standard` \| `strict` | `standard` |
-| `-a, --ai <adapters>` | Comma-separated list of adapters (`claude,cursor,agents,copilot,codex,gemini,generic`) | `claude,cursor,agents` |
-| `--dry-run` | Preview files in terminal without writing to disk | `false` |
-| `-f, --force` | Overwrite conflicting files | `false` |
-| `-y, --yes` | Accept all defaults non-interactively | `false` |
-| `-v, --version` | Display version | |
-| `-h, --help` | Display help | |
-
----
-
-## Generated Workspace Structure
-
-Foundry generates a deterministic, standardized workspace with zero bloat and zero hallucinations:
-
-```text
-my-project/
-├── ai-workspace.yaml               # Canonical machine contract
-├── README.md                       # Project documentation & stack guide
-├── AI_CONTEXT.md                   # System map and entrypoint for AI assistants
-├── PROJECT_GUARDRAILS.md           # Standalone architectural guardrails & testing rules
-├── CONTRIBUTING.md                 # Contribution workflow & guidelines
-├── .gitignore                      # Language-tailored ignore rules
-│
-├── .ai/                            # AI operational intelligence directory
-│   ├── context/project-context.md  # Detailed project domain background
-│   ├── rules/00-core-rules.md      # Core workspace rules & coding conventions
-│   ├── architecture/system-design.md # High-level architecture & layer boundaries
-│   ├── decisions/0001-project-init.md # Initial architecture decision record (ADR)
-│   └── tasks/task-backlog.md       # Operational scratchpad for AI agent task execution
-│
-├── docs/                           # Human-facing project documentation
-│   ├── README.md                   # Documentation index
-│   ├── ARCHITECTURE.md             # System architecture & component design
-│   ├── DEVELOPMENT.md              # Local setup, run, and test guides
-│   └── DECISIONS.md                # Architecture decision records index
-│
-└── [Tool Adapters]                 # Based on user selection:
-    ├── AGENTS.md                   # Multi-Agent open standard
-    ├── CLAUDE.md                   # Anthropic Claude Code CLI
-    ├── .cursor/rules/*.mdc         # Cursor IDE modular rules
-    ├── .github/copilot-instructions.md # GitHub Copilot context
-    ├── .codex/instructions.md      # OpenAI Codex context
-    ├── GEMINI.md                   # Google Antigravity & Gemini CLI
-    └── AI_INSTRUCTIONS.md          # Generic AI assistant instructions
-```
-
----
-
-## Repository Architecture & Dogfooding
-
-Foundry strictly practices **dogfooding**. The Foundry repository itself is governed by the same `ai-workspace.yaml`, `AGENTS.md`, `CLAUDE.md`, `.cursor/`, and `.github/` files that it generates for users.
-
-For deeper architectural details, review the internal documentation:
-- [docs/SPECIFICATION.md](file:///d:/Extentions/Foundry/docs/SPECIFICATION.md) — Formal specification of the AI Workspace contract.
-- [docs/ARCHITECTURE.md](file:///d:/Extentions/Foundry/docs/ARCHITECTURE.md) — System architecture, module boundaries, and pure core pipeline.
-- [docs/ADAPTERS.md](file:///d:/Extentions/Foundry/docs/ADAPTERS.md) — Adapter interface specification and registry design.
-- [docs/DEVELOPMENT.md](file:///d:/Extentions/Foundry/docs/DEVELOPMENT.md) — Developer setup and testing guide.
-
----
-
-## Development & Testing
-
-```bash
-# Clone the repository
-git clone https://github.com/Harshitkant21/Foundry.git
-cd Foundry
-
-# Install dependencies
-npm install
-
-# Run Vitest test suite
-npm test
-
-# Build TypeScript to dist/
-npm run build
-
-# Run local development CLI
-npx tsx src/bin.ts --dry-run
-```
-
----
-
-## License
-
-MIT © Foundry Contributors
+# Foundry (`create-foundry-workspace`)
+
+> **Deterministic, local-first, zero-LLM CLI for initializing AI-ready software development workspaces.**
+
+[![CI](https://github.com/Harshitkant21/Foundry/actions/workflows/ci.yml/badge.svg)](https://github.com/Harshitkant21/Foundry/actions)
+[![npm version](https://img.shields.io/npm/v/create-foundry-workspace.svg?style=flat&color=CB3837)](https://www.npmjs.com/package/create-foundry-workspace)
+[![Node: >=18.0.0](https://img.shields.io/badge/Node->=18.0.0-green.svg)](package.json)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![Zero-LLM Runtime](https://img.shields.io/badge/Architecture-Deterministic%20Zero--LLM-8A2BE2.svg)](docs/architecture/ARCHITECTURE.md)
+
+---
+
+## What is Foundry?
+
+Modern developers increasingly rely on AI coding assistants such as **Cursor**, **Claude Code**, and **GitHub Copilot**. However, when starting a new project, developers are forced to manually author and repeatedly recreate AI instruction files, project rules, context files, and guardrails.
+
+**Foundry** is an open-source, deterministic developer tool distributed via npm as **`create-foundry-workspace`**. When starting a new project, running:
+
+```bash
+npx create-foundry-workspace
+# or: npm create foundry-workspace
+```
+
+asks a minimal set of meaningful project initialization questions and deterministically scaffolds an **AI-ready software workspace** based on predefined, versioned, and maintainable templates.
+
+---
+
+## What Foundry Does
+
+- **Establishes a Canonical Contract:** Generates a clean, machine-readable `ai-workspace.yaml` manifest.
+- **Generates Native Tool Adapters:** Renders native, complete instruction files for **Cursor** (`.cursor/rules/*.mdc`), **Claude Code** (`CLAUDE.md`), **GitHub Copilot** (`.github/copilot-instructions.md`), and the cross-tool open standard **`AGENTS.md`**.
+- **Generates Project README:** Creates a deterministic, human-facing `README.md` tailored to the selected project stack, commands, and AI tools.
+- **Enforces Architectural Guardrails:** Injects strict or standard code quality, security, and testing guardrails.
+- **Safeguards Existing Files:** Supports non-destructive safe-merges, overwrite protection, and dry-run execution.
+
+---
+
+## What Foundry Explicitly Does NOT Do
+
+Foundry is **NOT an AI agent** and does not use AI to generate workspaces:
+- ❌ **NO OpenAI, Anthropic, or Gemini API calls**
+- ❌ **NO local or remote LLM inference**
+- ❌ **NO network requests at runtime** (100% offline and local-first)
+- ❌ **NO hidden API keys or telemetry**
+- ❌ **NO autonomous code generation**
+
+Output is 100% deterministic: given the same inputs and version, the generated workspace is bit-for-bit identical every time.
+
+---
+
+## Quick Start
+
+Initialize an AI-ready workspace in your current directory:
+```bash
+npx create-foundry-workspace
+# or: npm create foundry-workspace
+```
+
+Or target a specific folder:
+```bash
+npx create-foundry-workspace ./my-new-project
+```
+
+### Non-Interactive (CI / Scripted) Usage
+```bash
+npx create-foundry-workspace ./my-new-service \
+  --name my-new-service \
+  --type api \
+  --lang python \
+  --strictness strict \
+  --ai cursor,claude,copilot,agents \
+  --yes
+```
+
+---
+
+## CLI Options
+
+| Flag | Description | Default |
+|---|---|---|
+| `[directory]` | Target directory to initialize | `.` |
+| `-n, --name <string>` | Project name | Inferred from folder or `package.json` |
+| `-t, --type <type>` | `web` \| `api` \| `fullstack` \| `cli` \| `library` \| `data-ml` \| `mobile` \| `custom` | Inferred or `fullstack` |
+| `-l, --lang <lang>` | `typescript` \| `javascript` \| `python` \| `java` \| `go` \| `rust` \| `other` | Inferred or `typescript` |
+| `-r, --repo <repo>` | `github` \| `gitlab` \| `none` | `github` |
+| `-s, --strictness <level>` | `standard` \| `strict` | `standard` |
+| `-a, --ai <adapters>` | Comma-separated list of adapters (`claude,cursor,agents,copilot,codex,gemini,generic`) | `claude,cursor,agents` |
+| `--dry-run` | Preview files in terminal without writing to disk | `false` |
+| `-f, --force` | Overwrite conflicting files | `false` |
+| `-y, --yes` | Accept all defaults non-interactively | `false` |
+| `-v, --version` | Display version | |
+| `-h, --help` | Display help | |
+
+---
+
+## Generated Workspace Structure
+
+Foundry generates a deterministic, standardized workspace with zero bloat and zero hallucinations:
+
+```text
+my-project/
+├── ai-workspace.yaml               # Canonical machine contract
+├── README.md                       # Project documentation & stack guide
+├── AI_CONTEXT.md                   # System map and entrypoint for AI assistants
+├── PROJECT_GUARDRAILS.md           # Standalone architectural guardrails & testing rules
+├── CONTRIBUTING.md                 # Contribution workflow & guidelines
+├── .gitignore                      # Language-tailored ignore rules
+│
+├── .ai/                            # AI operational intelligence directory
+│   ├── context/project-context.md  # Detailed project domain background
+│   ├── rules/00-core-rules.md      # Core workspace rules & coding conventions
+│   ├── architecture/system-design.md # High-level architecture & layer boundaries
+│   ├── decisions/0001-project-init.md # Initial architecture decision record (ADR)
+│   └── tasks/task-backlog.md       # Operational scratchpad for AI agent task execution
+│
+├── docs/                           # Human-facing project documentation
+│   ├── README.md                   # Documentation index
+│   ├── ARCHITECTURE.md             # System architecture & component design
+│   ├── DEVELOPMENT.md              # Local setup, run, and test guides
+│   └── DECISIONS.md                # Architecture decision records index
+│
+└── [Tool Adapters]                 # Based on user selection:
+    ├── AGENTS.md                   # Multi-Agent open standard
+    ├── CLAUDE.md                   # Anthropic Claude Code CLI
+    ├── .cursor/rules/*.mdc         # Cursor IDE modular rules
+    ├── .github/copilot-instructions.md # GitHub Copilot context
+    ├── .codex/instructions.md      # OpenAI Codex context
+    ├── GEMINI.md                   # Google Antigravity & Gemini CLI
+    └── AI_INSTRUCTIONS.md          # Generic AI assistant instructions
+```
+
+---
+
+## Repository Architecture & Dogfooding
+
+Foundry strictly practices **dogfooding**. The Foundry repository itself is governed by the same `ai-workspace.yaml`, `AGENTS.md`, `CLAUDE.md`, `.cursor/`, and `.github/` files that it generates for users.
+
+For deeper architectural details and future roadmap, review the internal documentation:
+- [docs/README.md](docs/README.md) — Documentation index and repository guide.
+- [docs/specifications/SPECIFICATION.md](docs/specifications/SPECIFICATION.md) — Formal specification of the AI Workspace contract.
+- [docs/architecture/ARCHITECTURE.md](docs/architecture/ARCHITECTURE.md) — System architecture, module boundaries, and pure core pipeline.
+- [docs/architecture/ADAPTERS.md](docs/architecture/ADAPTERS.md) — Adapter interface specification and registry design.
+- [docs/development/DEVELOPMENT.md](docs/development/DEVELOPMENT.md) — Developer setup and testing guide.
+- [docs/planning/FOUNDRY_AUDIT_AND_ROADMAP.md](docs/planning/FOUNDRY_AUDIT_AND_ROADMAP.md) — Comprehensive repository audit, architecture evaluation, and phased roadmap (Proposed / Working Plan — Pending Review).
+
+---
+
+## Development & Testing
+
+```bash
+# Clone the repository
+git clone https://github.com/Harshitkant21/Foundry.git
+cd Foundry
+
+# Install dependencies
+npm install
+
+# Run Vitest test suite
+npm test
+
+# Build TypeScript to dist/
+npm run build
+
+# Run local development CLI
+npx tsx src/bin.ts --dry-run
+```
+
+---
+
+## License
+
+MIT © Foundry Contributors

package/dist/detection/detector.d.ts

@@ -1,4 +1,5 @@
 import { AppType, Language } from '../config/schema.js';
+import { ProjectFileSystem } from '../io/scanner.js';
 export interface DetectedEnvironment {
     readonly name: string;
     readonly language: Language;
@@ -7,7 +8,7 @@ export interface DetectedEnvironment {
 }
 /**
  * Deterministically inspects target directory markers to infer project defaults.
- * Completely decoupled from CLI prompt parsing.
+ * Decoupled from physical disk I/O via the ProjectFileSystem abstraction.
  */
-export declare function detectProjectEnvironment(targetDir: string): Promise<DetectedEnvironment>;
+export declare function detectProjectEnvironment(targetDir: string, projectFs?: ProjectFileSystem): Promise<DetectedEnvironment>;
 //# sourceMappingURL=detector.d.ts.map

package/dist/detection/detector.js

@@ -1,5 +1,6 @@
 import path from 'node:path';
 import { DEFAULT_APP_TYPE, DEFAULT_LANGUAGE } from '../config/defaults.js';
+import { NodeProjectFileSystem } from '../io/scanner.js';
 import { detectGo } from './rules/go.js';
 import { detectJava } from './rules/java.js';
 import { detectNode } from './rules/node.js';
@@ -7,12 +8,13 @@ import { detectPython } from './rules/python.js';
 import { detectRust } from './rules/rust.js';
 /**
  * Deterministically inspects target directory markers to infer project defaults.
- * Completely decoupled from CLI prompt parsing.
+ * Decoupled from physical disk I/O via the ProjectFileSystem abstraction.
  */
-export async function detectProjectEnvironment(targetDir) {
+export async function detectProjectEnvironment(targetDir, projectFs) {
+    const fs = projectFs ?? new NodeProjectFileSystem(targetDir);
     const fallbackName = path.basename(path.resolve(targetDir)) || 'my-workspace';
     // Run detectors in priority order
-    const node = await detectNode(targetDir);
+    const node = await detectNode(fs);
     if (node) {
         return {
             name: node.name || fallbackName,
@@ -21,7 +23,7 @@ export async function detectProjectEnvironment(targetDir) {
             isDetected: true,
         };
     }
-    const rust = await detectRust(targetDir);
+    const rust = await detectRust(fs);
     if (rust) {
         return {
             name: rust.name || fallbackName,
@@ -30,7 +32,7 @@ export async function detectProjectEnvironment(targetDir) {
             isDetected: true,
         };
     }
-    const go = await detectGo(targetDir);
+    const go = await detectGo(fs);
     if (go) {
         return {
             name: go.name || fallbackName,
@@ -39,7 +41,7 @@ export async function detectProjectEnvironment(targetDir) {
             isDetected: true,
         };
     }
-    const python = await detectPython(targetDir);
+    const python = await detectPython(fs);
     if (python) {
         return {
             name: fallbackName,
@@ -48,7 +50,7 @@ export async function detectProjectEnvironment(targetDir) {
             isDetected: true,
         };
     }
-    const java = await detectJava(targetDir);
+    const java = await detectJava(fs);
     if (java) {
         return {
             name: fallbackName,

package/dist/detection/rules/go.d.ts

@@ -1,3 +1,4 @@
+import { ProjectFileSystem } from '../../io/scanner.js';
 import { DetectionCandidate } from './node.js';
-export declare function detectGo(targetDir: string): Promise<DetectionCandidate | null>;
+export declare function detectGo(fs: ProjectFileSystem): Promise<DetectionCandidate | null>;
 //# sourceMappingURL=go.d.ts.map

package/dist/detection/rules/go.js

@@ -1,9 +1,7 @@
-import fs from 'node:fs/promises';
 import path from 'node:path';
-export async function detectGo(targetDir) {
-    const goMod = path.join(targetDir, 'go.mod');
+export async function detectGo(fs) {
     try {
-        const raw = await fs.readFile(goMod, 'utf-8');
+        const raw = await fs.readFile('go.mod');
         const match = raw.match(/module\s+([^\s]+)/);
         const modName = match && match[1] ? path.basename(match[1]) : undefined;
         return {

package/dist/detection/rules/java.d.ts

@@ -1,3 +1,4 @@
+import { ProjectFileSystem } from '../../io/scanner.js';
 import { DetectionCandidate } from './node.js';
-export declare function detectJava(targetDir: string): Promise<DetectionCandidate | null>;
+export declare function detectJava(fs: ProjectFileSystem): Promise<DetectionCandidate | null>;
 //# sourceMappingURL=java.d.ts.map

package/dist/detection/rules/java.js

@@ -1,27 +1,10 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-export async function detectJava(targetDir) {
-    const pomXml = path.join(targetDir, 'pom.xml');
-    const gradle = path.join(targetDir, 'build.gradle');
-    const gradleKts = path.join(targetDir, 'build.gradle.kts');
-    let hasJava = false;
-    try {
-        await fs.access(pomXml);
-        hasJava = true;
-    }
-    catch { }
-    try {
-        await fs.access(gradle);
-        hasJava = true;
-    }
-    catch { }
-    try {
-        await fs.access(gradleKts);
-        hasJava = true;
-    }
-    catch { }
-    if (!hasJava)
+export async function detectJava(fs) {
+    const hasPom = await fs.exists('pom.xml');
+    const hasGradle = await fs.exists('build.gradle');
+    const hasGradleKts = await fs.exists('build.gradle.kts');
+    if (!hasPom && !hasGradle && !hasGradleKts) {
         return null;
+    }
     return {
         language: 'java',
         type: 'api',

package/dist/detection/rules/node.d.ts

@@ -1,8 +1,9 @@
 import { AppType, Language } from '../../config/schema.js';
+import { ProjectFileSystem } from '../../io/scanner.js';
 export interface DetectionCandidate {
     name?: string;
     language?: Language;
     type?: AppType;
 }
-export declare function detectNode(targetDir: string): Promise<DetectionCandidate | null>;
+export declare function detectNode(fs: ProjectFileSystem): Promise<DetectionCandidate | null>;
 //# sourceMappingURL=node.d.ts.map

package/dist/detection/rules/node.js

@@ -1,9 +1,6 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-export async function detectNode(targetDir) {
-    const pkgPath = path.join(targetDir, 'package.json');
+export async function detectNode(fs) {
     try {
-        const raw = await fs.readFile(pkgPath, 'utf-8');
+        const raw = await fs.readFile('package.json');
         const pkg = JSON.parse(raw);
         const name = typeof pkg.name === 'string' ? pkg.name.replace(/^@[^/]+\//, '') : undefined;
         let language = 'javascript';
@@ -12,11 +9,9 @@ export async function detectNode(targetDir) {
             (pkg.dependencies && pkg.dependencies.typescript)) {
             language = 'typescript';
         }
-        try {
-            await fs.access(path.join(targetDir, 'tsconfig.json'));
+        if (await fs.exists('tsconfig.json')) {
             language = 'typescript';
         }
-        catch { }
         let type = 'fullstack';
         if (pkg.bin) {
             type = 'cli';

package/dist/detection/rules/python.d.ts

@@ -1,3 +1,4 @@
+import { ProjectFileSystem } from '../../io/scanner.js';
 import { DetectionCandidate } from './node.js';
-export declare function detectPython(targetDir: string): Promise<DetectionCandidate | null>;
+export declare function detectPython(fs: ProjectFileSystem): Promise<DetectionCandidate | null>;
 //# sourceMappingURL=python.d.ts.map

package/dist/detection/rules/python.js

@@ -1,27 +1,10 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-export async function detectPython(targetDir) {
-    const pyproject = path.join(targetDir, 'pyproject.toml');
-    const requirements = path.join(targetDir, 'requirements.txt');
-    const setupPy = path.join(targetDir, 'setup.py');
-    let hasPython = false;
-    try {
-        await fs.access(pyproject);
-        hasPython = true;
-    }
-    catch { }
-    try {
-        await fs.access(requirements);
-        hasPython = true;
-    }
-    catch { }
-    try {
-        await fs.access(setupPy);
-        hasPython = true;
-    }
-    catch { }
-    if (!hasPython)
+export async function detectPython(fs) {
+    const hasPyproject = await fs.exists('pyproject.toml');
+    const hasReqs = await fs.exists('requirements.txt');
+    const hasSetup = await fs.exists('setup.py');
+    if (!hasPyproject && !hasReqs && !hasSetup) {
         return null;
+    }
     return {
         language: 'python',
         type: 'api',

package/dist/detection/rules/rust.d.ts

@@ -1,3 +1,4 @@
+import { ProjectFileSystem } from '../../io/scanner.js';
 import { DetectionCandidate } from './node.js';
-export declare function detectRust(targetDir: string): Promise<DetectionCandidate | null>;
+export declare function detectRust(fs: ProjectFileSystem): Promise<DetectionCandidate | null>;
 //# sourceMappingURL=rust.d.ts.map

package/dist/detection/rules/rust.js

@@ -1,9 +1,6 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-export async function detectRust(targetDir) {
-    const cargoToml = path.join(targetDir, 'Cargo.toml');
+export async function detectRust(fs) {
     try {
-        const raw = await fs.readFile(cargoToml, 'utf-8');
+        const raw = await fs.readFile('Cargo.toml');
         const nameMatch = raw.match(/name\s*=\s*["']([^"']+)["']/);
         const projName = nameMatch && nameMatch[1] ? nameMatch[1] : undefined;
         return {

package/dist/index.d.ts

@@ -7,6 +7,7 @@ export * from './core/context.js';
 export * from './core/generator.js';
 export * from './core/interpolator.js';
 export * from './io/paths.js';
+export * from './io/scanner.js';
 export * from './io/writer.js';
 export * from './cli/command.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -7,6 +7,7 @@ export * from './core/context.js';
 export * from './core/generator.js';
 export * from './core/interpolator.js';
 export * from './io/paths.js';
+export * from './io/scanner.js';
 export * from './io/writer.js';
 export * from './cli/command.js';
 //# sourceMappingURL=index.js.map

package/dist/io/paths.js

@@ -13,7 +13,8 @@ export function normalizeRelativePath(filePath) {
 export function resolveSafePath(baseDir, relativePath) {
     const resolvedBase = path.resolve(baseDir);
     const resolvedTarget = path.resolve(resolvedBase, relativePath);
-    if (!resolvedTarget.startsWith(resolvedBase)) {
+    const rel = path.relative(resolvedBase, resolvedTarget);
+    if (rel.startsWith('..') || path.isAbsolute(rel)) {
         throw new Error(`Security Exception: Target path '${relativePath}' traverses outside base directory.`);
     }
     return resolvedTarget;

package/dist/io/scanner.d.ts

@@ -0,0 +1,18 @@
+/**
+ * File system scanner interface for project detection.
+ * Enforces pure core isolation by keeping disk access inside src/io/.
+ */
+export interface ProjectFileSystem {
+    readFile(relativePath: string): Promise<string>;
+    exists(relativePath: string): Promise<boolean>;
+}
+/**
+ * Default Node.js filesystem adapter for inspecting project directories.
+ */
+export declare class NodeProjectFileSystem implements ProjectFileSystem {
+    private readonly rootDir;
+    constructor(targetDir: string);
+    readFile(relativePath: string): Promise<string>;
+    exists(relativePath: string): Promise<boolean>;
+}
+//# sourceMappingURL=scanner.d.ts.map

package/dist/io/scanner.js

@@ -0,0 +1,26 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+/**
+ * Default Node.js filesystem adapter for inspecting project directories.
+ */
+export class NodeProjectFileSystem {
+    rootDir;
+    constructor(targetDir) {
+        this.rootDir = path.resolve(targetDir);
+    }
+    async readFile(relativePath) {
+        const filePath = path.join(this.rootDir, relativePath);
+        return fs.readFile(filePath, 'utf-8');
+    }
+    async exists(relativePath) {
+        const filePath = path.join(this.rootDir, relativePath);
+        try {
+            await fs.access(filePath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=scanner.js.map

package/dist/templates/contributing.js

@@ -1,19 +1,67 @@
 export function renderContributing(context) {
     const { config, commands } = context;
-    return `# Contributing to ${config.project.name}
-
-Thank you for contributing! Please follow the established development workflow and AI guidelines.
-
-## Development Workflow
-1. Fork or branch from \`main\`.
-2. Make modular, focused changes.
-3. Verify formatting and linting: \`${commands.lint}\`.
-4. Run the full test suite: \`${commands.test}\`.
-5. Ensure build succeeds: \`${commands.build}\`.
-
-## AI-Assisted Contributions
-- When using AI coding assistants (Cursor, Claude, Copilot, etc.), ensure they respect [\`PROJECT_GUARDRAILS.md\`](./PROJECT_GUARDRAILS.md).
-- AI-generated code must be fully understood, tested, and reviewed by a human contributor.
+    return `# Contributing to ${config.project.name}
+
+Thank you for contributing! Please adhere to our standardized engineering standards, branch conventions, and AI guardrails.
+
+---
+
+## 1. Development & Quality Workflow
+
+Before submitting changes, ensure your working tree passes all verification gates:
+
+1. **Install dependencies & build:**
+   \`\`\`bash
+   ${commands.build}
+   \`\`\`
+2. **Format and lint:**
+   \`\`\`bash
+   ${commands.lint}
+   \`\`\`
+3. **Execute automated tests:**
+   \`\`\`bash
+   ${commands.test}
+   \`\`\`
+
+---
+
+## 2. Branching & Conventional Commits
+
+We follow the [Conventional Commits](https://www.conventionalcommits.org/) specification for structured, machine-parseable commit history:
+
+### Commit Format
+\`\`\`text
+<type>(<scope>): <short description>
+\`\`\`
+
+### Allowed Types
+- **\`feat\`**: A new feature or capability.
+- **\`fix\`**: A bug or regression fix.
+- **\`docs\`**: Documentation additions or corrections.
+- **\`refactor\`**: Code change that neither fixes a bug nor adds a feature.
+- **\`test\`**: Adding or modifying test suites.
+- **\`chore\`**: Tooling, dependencies, or repository maintenance.
+
+### Branch Naming Patterns
+- \`feature/<short-topic>\` (e.g. \`feature/langgraph-adapter\`)
+- \`bugfix/<issue-number>-<short-topic>\` (e.g. \`bugfix/102-path-traversal\`)
+- \`docs/<topic>\` (e.g. \`docs/contributing-guide\`)
+
+---
+
+## 3. Pull Request Standards
+
+- **Atomic Scope:** PRs must focus on a single conceptual change. Avoid bundling unrelated refactorings.
+- **Zero Broken Tests:** All tests must pass before opening a PR.
+- **Commit History:** Keep history clean and avoid merge commits where squashing or rebasing is requested.
+
+---
+
+## 4. AI-Assisted Contributions
+
+- When using AI coding assistants (Cursor, Claude, Copilot, Antigravity, etc.), verify they strictly adhere to [\`PROJECT_GUARDRAILS.md\`](./PROJECT_GUARDRAILS.md).
+- AI agents operate in **read-only Git mode by default**. Never allow an agent to stage or commit code without manual human inspection.
+- All AI-generated code must be fully understood, tested, and reviewed by a human maintainer.
 `;
 }
 //# sourceMappingURL=contributing.js.map

package/package.json

@@ -1,64 +1,64 @@
-{
-  "name": "create-foundry-workspace",
-  "version": "1.0.0",
-  "description": "Deterministic, local-first CLI for scaffolding AI-ready software workspaces.",
-  "type": "module",
-  "main": "./dist/index.js",
-  "bin": {
-    "create-foundry-workspace": "./bin/index.js",
-    "foundry": "./bin/index.js"
-  },
-  "files": [
-    "dist",
-    "!dist/**/*.map",
-    "bin",
-    "README.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsx src/bin.ts",
-    "prepublishOnly": "npm run build && npm test",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "typecheck": "tsc --noEmit"
-  },
-  "keywords": [
-    "ai",
-    "ai-coding",
-    "developer-tools",
-    "cli",
-    "scaffolding",
-    "workspace",
-    "developer-experience",
-    "cursor",
-    "claude",
-    "copilot",
-    "codex",
-    "gemini"
-  ],
-  "author": "Harshit Kant",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Harshitkant21/Foundry.git"
-  },
-  "bugs": {
-    "url": "https://github.com/Harshitkant21/Foundry/issues"
-  },
-  "homepage": "https://github.com/Harshitkant21/Foundry#readme",
-  "license": "MIT",
-  "dependencies": {
-    "@clack/prompts": "^0.8.2",
-    "commander": "^12.1.0",
-    "zod": "^3.23.8"
-  },
-  "devDependencies": {
-    "@types/node": "^22.5.5",
-    "tsx": "^4.19.1",
-    "typescript": "^5.6.2",
-    "vitest": "^2.1.1"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  }
-}
+{
+  "name": "create-foundry-workspace",
+  "version": "1.0.1",
+  "description": "Deterministic, local-first CLI for scaffolding AI-ready software workspaces.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "bin": {
+    "create-foundry-workspace": "./bin/index.js",
+    "foundry": "./bin/index.js"
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.map",
+    "bin",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/bin.ts",
+    "prepublishOnly": "npm run build && npm test",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "ai",
+    "ai-coding",
+    "developer-tools",
+    "cli",
+    "scaffolding",
+    "workspace",
+    "developer-experience",
+    "cursor",
+    "claude",
+    "copilot",
+    "codex",
+    "gemini"
+  ],
+  "author": "Harshit Kant",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Harshitkant21/Foundry.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Harshitkant21/Foundry/issues"
+  },
+  "homepage": "https://github.com/Harshitkant21/Foundry#readme",
+  "license": "MIT",
+  "dependencies": {
+    "@clack/prompts": "^0.8.2",
+    "commander": "^12.1.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.5.5",
+    "tsx": "^4.19.1",
+    "typescript": "^5.6.2",
+    "vitest": "^2.1.1"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}