forgedev 1.4.0 → 1.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forgedev",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Universal, AI-first project scaffolding CLI with Claude Code infrastructure",
   "type": "module",
   "bin": {

package/src/chainproof-bridge.js

@@ -43,8 +43,15 @@ export function verifySignature(payload, signatureB64, publicKeyPem) {
       publicKeyPem,
       Buffer.from(signatureB64, 'base64')
     );
-  } catch {
-    // Invalid key or malformed signature
+  } catch (err) {
+    // Verification should never throw — any failure means "not verified"
+    if (err?.code?.startsWith?.('ERR_OSSL') ||
+        err?.code?.startsWith?.('ERR_CRYPTO') ||
+        err instanceof TypeError) {
+      return false;
+    }
+    // Log unexpected errors for debugging but still return false
+    console.warn('Unexpected crypto error during signature verification:', err?.code || err?.message);
     return false;
   }
 }

package/src/ci-mode.js

@@ -2,7 +2,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import chalk from 'chalk';
 import { log } from './utils.js';
-import { scanProject, detectStack } from './scanner.js';
+import { scanProject } from './scanner.js';
 import { runAllChecks } from './doctor-checks.js';
 import { generateReport } from './doctor-prompts.js';
 
@@ -18,10 +18,9 @@ export async function runCI(projectDir) {
   log.info('  DevForge CI  Automated project health check');
   console.log('');
 
-  // Scan project
+  // Scan project (scanProject already calls detectStack internally)
   const scan = scanProject(resolvedDir);
-  const stack = detectStack(resolvedDir, scan);
-  log.dim(`  Stack: ${stack || 'unknown'}`);
+  log.dim(`  Stack: ${scan.stackId || 'unknown'}`);
 
   // Run all checks
   const issues = runAllChecks(resolvedDir, scan);

package/src/composer.js

@@ -1,242 +1,228 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import { ROOT_DIR, ensureDir, readTemplate, replaceVars, toPascalCase, toSnakeCase, getStackMetadata, log } from './utils.js';
-
-const TEMPLATES_DIR = path.join(ROOT_DIR, 'templates');
-
-export async function compose(outputDir, stackConfig) {
-  const variables = buildVariables(stackConfig);
-
-  ensureDir(outputDir);
-
-  for (const mod of stackConfig.templateModules) {
-    const templateDir = path.join(TEMPLATES_DIR, mod.path);
-    if (!fs.existsSync(templateDir)) {
-      log.warn(`Template module not found: ${mod.path}, skipping`);
-      continue;
-    }
-    processTemplateDir(templateDir, outputDir, variables, mod.prefix || '');
-  }
-
-  // Inject auth dependencies into package.json if auth is enabled
-  injectAuthDependencies(outputDir, stackConfig);
-
-  // Apply user plugins from ~/.devforge/templates/ if they exist
-  applyUserPlugins(outputDir, variables, stackConfig);
-}
-
-export function buildVariables(stackConfig) {
-  const vars = {
-    PROJECT_NAME: stackConfig.projectName,
-    PROJECT_NAME_PASCAL: toPascalCase(stackConfig.projectName),
-    PROJECT_NAME_SNAKE: toSnakeCase(stackConfig.projectName),
-  };
-
-  if (stackConfig.frontend) {
-    vars.FRONTEND_FRAMEWORK = stackConfig.frontend.framework;
-    vars.FRONTEND_LANGUAGE = stackConfig.frontend.language;
-    vars.FRONTEND_STYLING = stackConfig.frontend.styling;
-    vars.FRONTEND_UI = stackConfig.frontend.ui || '';
-  }
-
-  if (stackConfig.backend) {
-    vars.BACKEND_FRAMEWORK = stackConfig.backend.framework;
-    vars.BACKEND_LANGUAGE = stackConfig.backend.language;
-    vars.BACKEND_ORM = stackConfig.backend.orm;
-  }
-
-  if (stackConfig.database) {
-    vars.DATABASE_TYPE = stackConfig.database.type;
-    vars.DATABASE_ORM = stackConfig.database.orm;
-  }
-
-  vars.AUTH_TYPE = stackConfig.auth || 'none';
-  vars.DEPLOYMENT = stackConfig.deployment || 'docker';
-
-  // All per-stack values come from a single metadata source
-  const meta = getStackMetadata(stackConfig.stackId);
-  if (meta) {
-    Object.assign(vars, meta.commands);
-    vars.STACK_DESCRIPTION = meta.description;
-    vars.EXTRA_IGNORES = meta.extraIgnores;
-    vars.APP_PORT = meta.port;
-    vars.SETUP_COMMANDS = meta.setupCommands();
-    vars.AVAILABLE_SCRIPTS = meta.availableScripts;
-  } else {
-    vars.STACK_DESCRIPTION = '';
-    vars.EXTRA_IGNORES = '';
-    vars.APP_PORT = '3000';
-    vars.SETUP_COMMANDS = '';
-    vars.AVAILABLE_SCRIPTS = '';
-  }
-
-  vars.IMAGE_TAG = '0.1.0';
-
-  return vars;
-}
-
-export function processTemplateDir(templateDir, outputDir, variables, prefix) {
-  const entries = walkDir(templateDir);
-
-  for (const filePath of entries) {
-    const relativePath = path.relative(templateDir, filePath);
-    const outputRelative = prefix ? path.join(prefix, relativePath) : relativePath;
-
-    // Guard against path traversal (e.g. ../../etc/passwd in plugin templates)
-    const resolved = path.resolve(outputDir, outputRelative);
-    if (!resolved.startsWith(path.resolve(outputDir))) {
-      log.warn(`Skipping "${outputRelative}" (path traversal detected)`);
-      continue;
-    }
-
-    if (outputRelative.endsWith('.template')) {
-      // Process template: replace vars, strip .template extension
-      const content = readTemplate(filePath);
-      const processed = replaceVars(content, variables);
-      const outputPath = path.join(outputDir, outputRelative.replace(/\.template$/, ''));
-      ensureDir(path.dirname(outputPath));
-      fs.writeFileSync(outputPath, processed, 'utf-8');
-    } else if (path.basename(filePath) === '.gitkeep') {
-      // Create the directory but don't copy .gitkeep itself
-      ensureDir(path.join(outputDir, path.dirname(outputRelative)));
-    } else {
-      // Binary copy
-      const outputPath = path.join(outputDir, outputRelative);
-      ensureDir(path.dirname(outputPath));
-      fs.copyFileSync(filePath, outputPath);
-    }
-  }
-}
-
-function walkDir(dir, depth = 0) {
-  if (depth > 20) return []; // guard against deeply nested or circular structures
-  const results = [];
-  const entries = fs.readdirSync(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    if (entry.isSymbolicLink()) continue; // skip symlinks to prevent infinite loops
-    const fullPath = path.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      results.push(...walkDir(fullPath, depth + 1));
-    } else {
-      results.push(fullPath);
-    }
-  }
-  return results;
-}
-
-function injectAuthDependencies(outputDir, stackConfig) {
-  if (!stackConfig.auth || stackConfig.auth === 'none') return;
-
-  // Next.js projects with nextauth
-  if (stackConfig.auth === 'nextauth' || stackConfig.auth === 'both') {
-    const pkgPaths = [
-      path.join(outputDir, 'package.json'),
-      path.join(outputDir, 'frontend', 'package.json'),
-    ];
-    for (const pkgPath of pkgPaths) {
-      if (!fs.existsSync(pkgPath)) continue;
-      let pkg;
-      try {
-        pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-      } catch {
-        log.warn(`Skipping auth dependency injection — could not parse ${pkgPath}`);
-        continue;
-      }
-      pkg.dependencies = pkg.dependencies || {};
-      pkg.dependencies['next-auth'] = '^5.0.0-beta.25';
-      pkg.dependencies['@auth/prisma-adapter'] = '^2.7.4';
-      pkg.dependencies['bcryptjs'] = '^2.4.3';
-      pkg.devDependencies = pkg.devDependencies || {};
-      pkg.devDependencies['@types/bcryptjs'] = '^2.4.6';
-      fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf-8');
-    }
-  }
-
-  // FastAPI projects with jwt-custom
-  if (stackConfig.auth === 'jwt-custom' || stackConfig.auth === 'both') {
-    const reqPaths = [
-      path.join(outputDir, 'requirements.txt'),
-      path.join(outputDir, 'backend', 'requirements.txt'),
-    ];
-    for (const reqPath of reqPaths) {
-      if (!fs.existsSync(reqPath)) continue;
-      const content = fs.readFileSync(reqPath, 'utf-8');
-      const authDeps = ['python-jose[cryptography]', 'passlib[bcrypt]', 'python-multipart'];
-      const additions = authDeps.filter(dep => !content.includes(dep.split('[')[0]));
-      if (additions.length > 0) {
-        fs.writeFileSync(reqPath, content.trimEnd() + '\n' + additions.join('\n') + '\n', 'utf-8');
-      }
-    }
-  }
-}
-
-function applyUserPlugins(outputDir, variables, stackConfig) {
-  const homeDir = process.env.HOME || process.env.USERPROFILE;
-  if (!homeDir) return;
-
-  const pluginDir = path.join(homeDir, '.devforge');
-  if (!fs.existsSync(pluginDir)) return;
-
-  // User templates: ~/.devforge/templates/<stackId>/ → overlay onto output
-  const userTemplatesDir = path.join(pluginDir, 'templates', stackConfig.stackId);
-  if (fs.existsSync(userTemplatesDir)) {
-    processTemplateDir(userTemplatesDir, outputDir, variables, '');
-    log.dim(`  Applied user templates from ~/.devforge/templates/${stackConfig.stackId}/`);
-  }
-
-  // Universal user templates: ~/.devforge/templates/universal/ → always applied
-  const universalDir = path.join(pluginDir, 'templates', 'universal');
-  if (fs.existsSync(universalDir)) {
-    processTemplateDir(universalDir, outputDir, variables, '');
-    log.dim('  Applied user templates from ~/.devforge/templates/universal/');
-  }
-
-  // User agents: ~/.devforge/agents/*.md → copy into .claude/agents/
-  const userAgentsDir = path.join(pluginDir, 'agents');
-  if (fs.existsSync(userAgentsDir)) {
-    const agents = fs.readdirSync(userAgentsDir).filter(f => f.endsWith('.md'));
-    for (const agent of agents) {
-      const src = path.join(userAgentsDir, agent);
-      const dest = path.join(outputDir, '.claude', 'agents', agent);
-      ensureDir(path.dirname(dest));
-      fs.copyFileSync(src, dest);
-    }
-    if (agents.length > 0) {
-      log.dim(`  Applied ${agents.length} user agent(s) from ~/.devforge/agents/`);
-    }
-  }
-
-  // User commands: ~/.devforge/commands/*.md → copy into .claude/commands/
-  const userCommandsDir = path.join(pluginDir, 'commands');
-  if (fs.existsSync(userCommandsDir)) {
-    const commands = fs.readdirSync(userCommandsDir).filter(f => f.endsWith('.md'));
-    for (const cmd of commands) {
-      const src = path.join(userCommandsDir, cmd);
-      const dest = path.join(outputDir, '.claude', 'commands', cmd);
-      ensureDir(path.dirname(dest));
-      fs.copyFileSync(src, dest);
-    }
-    if (commands.length > 0) {
-      log.dim(`  Applied ${commands.length} user command(s) from ~/.devforge/commands/`);
-    }
-  }
-
-  // User skills: ~/.devforge/skills/<name>/SKILL.md → copy into .claude/skills/
-  const userSkillsDir = path.join(pluginDir, 'skills');
-  if (fs.existsSync(userSkillsDir)) {
-    const skills = fs.readdirSync(userSkillsDir, { withFileTypes: true })
-      .filter(d => d.isDirectory())
-      .map(d => d.name);
-    for (const skill of skills) {
-      const skillFile = path.join(userSkillsDir, skill, 'SKILL.md');
-      if (fs.existsSync(skillFile)) {
-        const dest = path.join(outputDir, '.claude', 'skills', skill, 'SKILL.md');
-        ensureDir(path.dirname(dest));
-        fs.copyFileSync(skillFile, dest);
-      }
-    }
-    if (skills.length > 0) {
-      log.dim(`  Applied ${skills.length} user skill(s) from ~/.devforge/skills/`);
-    }
-  }
-}
+import fs from 'node:fs';
+import path from 'node:path';
+import { ROOT_DIR, ensureDir, readTemplate, replaceVars, toPascalCase, toSnakeCase, getStackMetadata, walkDir, log } from './utils.js';
+
+const TEMPLATES_DIR = path.join(ROOT_DIR, 'templates');
+
+export async function compose(outputDir, stackConfig) {
+  const variables = buildVariables(stackConfig);
+
+  ensureDir(outputDir);
+
+  for (const mod of stackConfig.templateModules) {
+    const templateDir = path.join(TEMPLATES_DIR, mod.path);
+    if (!fs.existsSync(templateDir)) {
+      log.warn(`Template module not found: ${mod.path}, skipping`);
+      continue;
+    }
+    processTemplateDir(templateDir, outputDir, variables, mod.prefix || '');
+  }
+
+  // Inject auth dependencies into package.json if auth is enabled
+  injectAuthDependencies(outputDir, stackConfig);
+
+  // Apply user plugins from ~/.devforge/templates/ if they exist
+  applyUserPlugins(outputDir, variables, stackConfig);
+}
+
+export function buildVariables(stackConfig) {
+  const vars = {
+    PROJECT_NAME: stackConfig.projectName,
+    PROJECT_NAME_PASCAL: toPascalCase(stackConfig.projectName),
+    PROJECT_NAME_SNAKE: toSnakeCase(stackConfig.projectName),
+  };
+
+  if (stackConfig.frontend) {
+    vars.FRONTEND_FRAMEWORK = stackConfig.frontend.framework;
+    vars.FRONTEND_LANGUAGE = stackConfig.frontend.language;
+    vars.FRONTEND_STYLING = stackConfig.frontend.styling;
+    vars.FRONTEND_UI = stackConfig.frontend.ui || '';
+  }
+
+  if (stackConfig.backend) {
+    vars.BACKEND_FRAMEWORK = stackConfig.backend.framework;
+    vars.BACKEND_LANGUAGE = stackConfig.backend.language;
+    vars.BACKEND_ORM = stackConfig.backend.orm;
+  }
+
+  if (stackConfig.database) {
+    vars.DATABASE_TYPE = stackConfig.database.type;
+    vars.DATABASE_ORM = stackConfig.database.orm;
+  }
+
+  vars.AUTH_TYPE = stackConfig.auth || 'none';
+  vars.DEPLOYMENT = stackConfig.deployment || 'docker';
+
+  // All per-stack values come from a single metadata source
+  const meta = getStackMetadata(stackConfig.stackId);
+  if (meta) {
+    Object.assign(vars, meta.commands);
+    vars.STACK_DESCRIPTION = meta.description;
+    vars.EXTRA_IGNORES = meta.extraIgnores;
+    vars.APP_PORT = meta.port;
+    vars.SETUP_COMMANDS = meta.setupCommands();
+    vars.AVAILABLE_SCRIPTS = meta.availableScripts;
+  } else {
+    vars.STACK_DESCRIPTION = '';
+    vars.EXTRA_IGNORES = '';
+    vars.APP_PORT = '3000';
+    vars.SETUP_COMMANDS = '';
+    vars.AVAILABLE_SCRIPTS = '';
+  }
+
+  vars.IMAGE_TAG = '0.1.0';
+
+  return vars;
+}
+
+export function processTemplateDir(templateDir, outputDir, variables, prefix) {
+  const entries = walkDir(templateDir);
+
+  for (const filePath of entries) {
+    const relativePath = path.relative(templateDir, filePath);
+    const outputRelative = prefix ? path.join(prefix, relativePath) : relativePath;
+
+    // Guard against path traversal (e.g. ../../etc/passwd in plugin templates)
+    const resolved = path.resolve(outputDir, outputRelative);
+    if (!resolved.startsWith(path.resolve(outputDir))) {
+      log.warn(`Skipping "${outputRelative}" (path traversal detected)`);
+      continue;
+    }
+
+    if (outputRelative.endsWith('.template')) {
+      // Process template: replace vars, strip .template extension
+      const content = readTemplate(filePath);
+      const processed = replaceVars(content, variables);
+      const outputPath = path.join(outputDir, outputRelative.replace(/\.template$/, ''));
+      ensureDir(path.dirname(outputPath));
+      fs.writeFileSync(outputPath, processed, 'utf-8');
+    } else if (path.basename(filePath) === '.gitkeep') {
+      // Create the directory but don't copy .gitkeep itself
+      ensureDir(path.join(outputDir, path.dirname(outputRelative)));
+    } else {
+      // Binary copy
+      const outputPath = path.join(outputDir, outputRelative);
+      ensureDir(path.dirname(outputPath));
+      fs.copyFileSync(filePath, outputPath);
+    }
+  }
+}
+
+// walkDir is imported from utils.js (shared with doctor-checks.js)
+
+function injectAuthDependencies(outputDir, stackConfig) {
+  if (!stackConfig.auth || stackConfig.auth === 'none') return;
+
+  // Next.js projects with nextauth
+  if (stackConfig.auth === 'nextauth' || stackConfig.auth === 'both') {
+    const pkgPaths = [
+      path.join(outputDir, 'package.json'),
+      path.join(outputDir, 'frontend', 'package.json'),
+    ];
+    for (const pkgPath of pkgPaths) {
+      if (!fs.existsSync(pkgPath)) continue;
+      let pkg;
+      try {
+        pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+      } catch {
+        log.warn(`Skipping auth dependency injection — could not parse ${pkgPath}`);
+        continue;
+      }
+      pkg.dependencies = pkg.dependencies || {};
+      pkg.dependencies['next-auth'] = '^5.0.0-beta.25';
+      pkg.dependencies['@auth/prisma-adapter'] = '^2.7.4';
+      pkg.dependencies['bcryptjs'] = '^2.4.3';
+      pkg.devDependencies = pkg.devDependencies || {};
+      pkg.devDependencies['@types/bcryptjs'] = '^2.4.6';
+      fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf-8');
+    }
+  }
+
+  // FastAPI projects with jwt-custom
+  if (stackConfig.auth === 'jwt-custom' || stackConfig.auth === 'both') {
+    const reqPaths = [
+      path.join(outputDir, 'requirements.txt'),
+      path.join(outputDir, 'backend', 'requirements.txt'),
+    ];
+    for (const reqPath of reqPaths) {
+      if (!fs.existsSync(reqPath)) continue;
+      const content = fs.readFileSync(reqPath, 'utf-8');
+      const authDeps = ['python-jose[cryptography]', 'passlib[bcrypt]', 'python-multipart'];
+      const additions = authDeps.filter(dep => !content.includes(dep.split('[')[0]));
+      if (additions.length > 0) {
+        fs.writeFileSync(reqPath, content.trimEnd() + '\n' + additions.join('\n') + '\n', 'utf-8');
+      }
+    }
+  }
+}
+
+function applyUserPlugins(outputDir, variables, stackConfig) {
+  const homeDir = process.env.HOME || process.env.USERPROFILE;
+  if (!homeDir) return;
+
+  const pluginDir = path.join(homeDir, '.devforge');
+  if (!fs.existsSync(pluginDir)) return;
+
+  // User templates: ~/.devforge/templates/<stackId>/ → overlay onto output
+  const userTemplatesDir = path.join(pluginDir, 'templates', stackConfig.stackId);
+  if (fs.existsSync(userTemplatesDir)) {
+    processTemplateDir(userTemplatesDir, outputDir, variables, '');
+    log.dim(`  Applied user templates from ~/.devforge/templates/${stackConfig.stackId}/`);
+  }
+
+  // Universal user templates: ~/.devforge/templates/universal/ → always applied
+  const universalDir = path.join(pluginDir, 'templates', 'universal');
+  if (fs.existsSync(universalDir)) {
+    processTemplateDir(universalDir, outputDir, variables, '');
+    log.dim('  Applied user templates from ~/.devforge/templates/universal/');
+  }
+
+  // User agents: ~/.devforge/agents/*.md → copy into .claude/agents/
+  const userAgentsDir = path.join(pluginDir, 'agents');
+  if (fs.existsSync(userAgentsDir)) {
+    const agents = fs.readdirSync(userAgentsDir).filter(f => f.endsWith('.md'));
+    for (const agent of agents) {
+      const src = path.join(userAgentsDir, agent);
+      const dest = path.join(outputDir, '.claude', 'agents', agent);
+      ensureDir(path.dirname(dest));
+      fs.copyFileSync(src, dest);
+    }
+    if (agents.length > 0) {
+      log.dim(`  Applied ${agents.length} user agent(s) from ~/.devforge/agents/`);
+    }
+  }
+
+  // User commands: ~/.devforge/commands/*.md → copy into .claude/commands/
+  const userCommandsDir = path.join(pluginDir, 'commands');
+  if (fs.existsSync(userCommandsDir)) {
+    const commands = fs.readdirSync(userCommandsDir).filter(f => f.endsWith('.md'));
+    for (const cmd of commands) {
+      const src = path.join(userCommandsDir, cmd);
+      const dest = path.join(outputDir, '.claude', 'commands', cmd);
+      ensureDir(path.dirname(dest));
+      fs.copyFileSync(src, dest);
+    }
+    if (commands.length > 0) {
+      log.dim(`  Applied ${commands.length} user command(s) from ~/.devforge/commands/`);
+    }
+  }
+
+  // User skills: ~/.devforge/skills/<name>/SKILL.md → copy into .claude/skills/
+  const userSkillsDir = path.join(pluginDir, 'skills');
+  if (fs.existsSync(userSkillsDir)) {
+    const skills = fs.readdirSync(userSkillsDir, { withFileTypes: true })
+      .filter(d => d.isDirectory())
+      .map(d => d.name);
+    for (const skill of skills) {
+      const skillFile = path.join(userSkillsDir, skill, 'SKILL.md');
+      if (fs.existsSync(skillFile)) {
+        const dest = path.join(outputDir, '.claude', 'skills', skill, 'SKILL.md');
+        ensureDir(path.dirname(dest));
+        fs.copyFileSync(skillFile, dest);
+      }
+    }
+    if (skills.length > 0) {
+      log.dim(`  Applied ${skills.length} user skill(s) from ~/.devforge/skills/`);
+    }
+  }
+}

package/src/doctor-checks-chainproof.js

@@ -66,17 +66,20 @@ export function checkChainproofIntegrity(projectDir) {
         effort: 'medium',
       }];
     }
-  } catch {
-    // Malformed chain.json
-    return [{
-      severity: 'critical',
-      title: 'ChainProof chain.json is malformed',
-      impact: 'Cannot verify trust chain integrity',
-      files: ['.chainproof/chain.json'],
-      autoFixable: false,
-      promptId: 'CHAINPROOF_MALFORMED',
-      effort: 'medium',
-    }];
+  } catch (err) {
+    // JSON parse errors → malformed file; anything else should propagate
+    if (err instanceof SyntaxError) {
+      return [{
+        severity: 'critical',
+        title: 'ChainProof chain.json is malformed',
+        impact: 'Cannot verify trust chain integrity',
+        files: ['.chainproof/chain.json'],
+        autoFixable: false,
+        promptId: 'CHAINPROOF_MALFORMED',
+        effort: 'medium',
+      }];
+    }
+    throw err;
   }
 
   return [];

package/src/doctor-checks.js

@@ -1,5 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
+import { walkDir, DEFAULT_SKIP_DIRS } from './utils.js';
 import {
   checkChainproofExists,
   checkChainproofIntegrity,
@@ -739,24 +740,7 @@ function checkAIPrompts(projectDir) {
 // Helpers
 
 function findFiles(dir, ext) {
-  const results = [];
-  if (!fs.existsSync(dir)) return results;
-
-  try {
-    const entries = fs.readdirSync(dir, { withFileTypes: true });
-    for (const entry of entries) {
-      const fullPath = path.join(dir, entry.name);
-      if (entry.isDirectory()) {
-        if (['node_modules', '.next', '__pycache__', '.git', 'venv', '.venv', 'dist', 'build'].includes(entry.name)) continue;
-        results.push(...findFiles(fullPath, ext));
-      } else if (entry.name.endsWith(ext)) {
-        results.push(fullPath);
-      }
-    }
-  } catch {
-    // Permission errors, etc.
-  }
-
-  return results;
+  if (!fs.existsSync(dir)) return [];
+  return walkDir(dir, { ext, skipDirs: DEFAULT_SKIP_DIRS });
 }
 

package/src/index.js

@@ -2,7 +2,7 @@ import path from 'node:path';
 import fs from 'node:fs';
 import { execSync } from 'node:child_process';
 import chalk from 'chalk';
-import { log, toKebabCase, copyEnvCmd } from './utils.js';
+import { log, toKebabCase, getStackMetadata } from './utils.js';
 import { askServiceType, askRefinements, askNewMode, confirmStack } from './prompts.js';
 import { recommend } from './recommender.js';
 import { compose } from './composer.js';
@@ -123,39 +123,11 @@ export function printNextSteps(projectName, config, isGuided = false) {
   console.log(chalk.bold('  Next steps:'));
   console.log(`    cd ${projectName}`);
 
-  if (config.stackId === 'nextjs-fullstack') {
-    console.log('    npm install');
-    console.log(`    ${copyEnvCmd()}`);
-    console.log('    npx prisma db push');
-    console.log('    npm run dev');
-  } else if (config.stackId === 'fastapi-backend') {
-    console.log('    cd backend');
-    console.log('    python -m venv venv');
-    console.log('    source venv/bin/activate  # or venv\\Scripts\\activate on Windows');
-    console.log('    pip install -r requirements.txt');
-    console.log(`    ${copyEnvCmd()}`);
-    console.log('    uvicorn app.main:app --reload');
-  } else if (config.stackId === 'polyglot-fullstack') {
-    console.log('    docker compose up -d postgres');
-    console.log('    # Frontend:');
-    console.log('    cd frontend && npm install && npm run dev');
-    console.log('    # Backend:');
-    console.log('    cd backend && pip install -r requirements.txt && uvicorn app.main:app --reload');
-  } else if (config.stackId === 'react-express') {
-    console.log('    # Frontend:');
-    console.log('    cd frontend && npm install && npm run dev');
-    console.log('    # Backend (in a separate terminal):');
-    console.log(`    cd backend && npm install && ${copyEnvCmd()} && npx prisma db push && npm run dev`);
-  } else if (config.stackId === 'remix-fullstack') {
-    console.log('    npm install');
-    console.log(`    ${copyEnvCmd()}`);
-    console.log('    npx prisma db push');
-    console.log('    npm run dev');
-  } else if (config.stackId === 'hono-api') {
-    console.log('    npm install');
-    console.log(`    ${copyEnvCmd()}`);
-    console.log('    npx prisma db push');
-    console.log('    npm run dev');
+  const meta = getStackMetadata(config.stackId);
+  if (meta) {
+    for (const line of meta.setupCommands().split('\n')) {
+      console.log(`    ${line}`);
+    }
   }
 
   if (config.claudeCode) {