guardian-framework 0.1.100 → 0.1.102

package/dist/cli.js

@@ -3197,7 +3197,7 @@ __export(exports_package, {
   bin: () => bin,
   author: () => author
 });
-var name = "guardian-framework", version = "0.1.100", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
+var name = "guardian-framework", version = "0.1.102", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
 var init_package = __esm(() => {
   exports = {
     ".": {

package/dist/exports.js

@@ -1982,7 +1982,7 @@ __export(exports_package, {
   bin: () => bin,
   author: () => author
 });
-var name = "guardian-framework", version = "0.1.100", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
+var name = "guardian-framework", version = "0.1.102", description = "Token-optimized agentic framework scaffolder with pi-first architecture", type = "module", main = "dist/exports.js", exports, types = "dist/exports.d.ts", bin, files, engines, scripts, publishConfig, pi, repository, homepage = "https://github.com/arman-jalili/guardian-framework#readme", bugs, dependencies, devDependencies, keywords, author = "Arman Wolkensteiner-Jalili", license = "MIT", package_default;
 var init_package = __esm(() => {
   exports = {
     ".": {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "guardian-framework",
-	"version": "0.1.100",
+	"version": "0.1.102",
 	"description": "Token-optimized agentic framework scaffolder with pi-first architecture",
 	"type": "module",
 	"main": "dist/exports.js",

package/templates/pi/extensions/architect-lib/generators.ts

@@ -133,30 +133,6 @@ function isJavaProject(cwd?: string): boolean {
 	}
 }
 
-/** Get the test runner command for a project language. */
-function testRunnerFromCwd(cwd?: string): string | null {
-	if (!cwd) return null;
-	try {
-		if (existsSync(join(cwd, "Cargo.toml"))) return "cargo test";
-		if (existsSync(join(cwd, "go.mod"))) return "go test";
-		if (existsSync(join(cwd, "pyproject.toml")) || existsSync(join(cwd, "requirements.txt"))) return "pytest";
-		if (existsSync(join(cwd, "package.json"))) return "bun test";
-	} catch {}
-	return null;
-}
-
-/** Get the implementation file suffix for a project language. */
-function implSuffix(cwd?: string): string {
-	if (!cwd) return "ts";
-	try {
-		if (existsSync(join(cwd, "pom.xml")) || existsSync(join(cwd, "build.gradle")) || existsSync(join(cwd, "build.gradle.kts"))) return "java";
-		if (existsSync(join(cwd, "Cargo.toml"))) return "rs";
-		if (existsSync(join(cwd, "go.mod"))) return "go";
-		if (existsSync(join(cwd, "pyproject.toml")) || existsSync(join(cwd, "requirements.txt"))) return "py";
-	} catch {}
-	return "ts";
-}
-
 // ── Issue Generation ──
 
 export function generateIssueMarkdown(
@@ -182,7 +158,7 @@ export function generateIssueMarkdown(
 	// Language-aware test paths
 	const isJava = isJavaProject(cwd);
 	const testBaseDir = isJava ? "src/test/java" : "tests/unit";
-	const testRunnerHint = isJava ? "mvn test" : testRunnerFromCwd(cwd) || "bun test";
+	const testRunnerHint = isJava ? "mvn test" : "bun test";
 
 	const testLine = tdd
 		? `    - "update: ${testBaseDir}/ (failing tests already generated — make them pass)"`
@@ -276,7 +252,7 @@ ${yamlAcs}
     All Acceptance Criteria in that file must be satisfied before this issue is closed.
     Component focus: ${comp.name}.
     CONCRETE IMPLEMENTATIONS MUST BE CREATED — interface stubs from the contract freeze
-    are not sufficient. Each domain service/aggregate needs a concrete .impl.${implSuffix(cwd)} file.
+    are not sufficient. Each domain service/aggregate needs a concrete .impl.${isJava ? "java" : "ts"} file.
 
   file_changes:
     - "create: src/${moduleId}/domain/"
@@ -331,7 +307,7 @@ ${stepsMarkdown}
 > **Agent instructions:**
 > 1. Open \`.pi/architecture/modules/${slice.module}.md\` — read the full Acceptance Criteria table
 > 2. Identify which rows are your responsibility for **${comp.name}**
-> 3. Create concrete implementation files (\`.impl.${implSuffix(cwd)}\`) in \`src/${moduleId}/\` — the interface stubs from the contract freeze are NOT enough
+> 3. Create concrete implementation files (\`.impl.${isJava ? "java" : "ts"}\`) in \`src/${moduleId}/\` — the interface stubs from the contract freeze are NOT enough
 > 4. Each domain aggregate/service must have a working implementation with business logic
 > 5. Verify each AC row is satisfied in \`src/\` before marking done
 > 6. Run validators and create MR
@@ -466,8 +442,8 @@ ${implSteps.length > 0
 
 > **Agent:** Create interface-only files. No implementation. Use Clean Architecture layers:
 > 1. Read the architecture module to understand each component's role
-> 2. Place domain interfaces in domain/, service interfaces in application/, API contracts in interfaces/http/
-> 3. DTOs with proper validation decorators go in application/
+> 2. Place domain interfaces in domain/, service interfaces in application/, DTOs in application/
+> 3. Controllers/routers are CONCRETE — they do NOT get interfaces. The concrete router/handler class goes directly in interfaces/http/ without a separate contract file.
 > 4. Event schemas go in domain/event/
 > 5. Repository interfaces go in infrastructure/repository/
 >
@@ -598,6 +574,16 @@ run_stage "11" "${moduleId}_proofing" \\
 > 3. Self-documenting with --help
 > 4. Exit 0 for pass, 1 for fail
 >
+> CRITICAL: Do NOT map handler type files to separate impl files. Controllers/routers
+> are concrete — they DO NOT have a separate interface. The contract checker must:
+> - ✅ Verify domain and application interfaces have impls
+> - ✅ Verify DTO schemas exist and match the module doc
+> - ❌ NOT check for a handlers.ts → router.impl.ts mapping (handlers are concrete)
+> - ❌ NOT create separate contract files for the HTTP layer
+>
+> For the HTTP layer, just verify the router file exists in interfaces/http/. That\'s
+> the concrete handler — no interface needed.
+>
 > End by running the full CI pipeline to verify integration:
 > \`bash .pi/scripts/ci/run_hardening_stages.sh\`
 `;

package/templates/pi/preflight_report.json

@@ -1,5 +1,5 @@
 {
-  "timestamp": "2026-07-19T05:59:04Z",
+  "timestamp": "2026-07-20T12:29:56Z",
   "mode": "all",
   "stages_run": [],
   "summary": {

package/templates/pi/scripts/languages/go/validate-architecture.sh

@@ -40,7 +40,7 @@ fi
 echo ""
 echo "--- Canonical References ---"
 if [ -d ".pi/architecture/modules" ]; then
-    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     pass "Canonical architecture documents found ($MODULE_COUNT modules)"
 else
     warn "No canonical architecture directory (.pi/architecture/modules) found"

package/templates/pi/scripts/languages/go/validate-canonical.sh

@@ -20,7 +20,7 @@ echo ""
 # ---------------------------------------------------------------------------
 echo "--- Architecture Reference Tracing ---"
 if [ -f "go.mod" ]; then
-    GO_FILES=$(find . -name "*.go" -not -path "./vendor/*" 2>/dev/null | wc -l | tr -d ' ')
+    GO_FILES=$(find . -name "*.go" -not -path "./vendor/*" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$GO_FILES" -gt 0 ]; then
         CANONICAL_REFS=$(grep -rlE '//\s*(Canonical:|@canonical|Reference:|Canonical\s+ref)' . --include="*.go" 2>/dev/null | wc -l | tr -d ' ') || true
         if [ "$CANONICAL_REFS" -gt 0 ]; then
@@ -75,7 +75,7 @@ echo ""
 echo "--- Package Documentation ---"
 if [ -f "go.mod" ]; then
     PKG_FILES_WITH_DOC=$(grep -rlE '//\s*Package\s+\w+\s+(implements|provides|defines|is|contains)' . --include="*.go" 2>/dev/null | wc -l | tr -d ' ') || true
-    GO_PACKAGES=$(go list ./... 2>/dev/null | wc -l | tr -d ' ')
+    GO_PACKAGES=$(go list ./... 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$GO_PACKAGES" -gt 0 ] && [ "$PKG_FILES_WITH_DOC" -gt 0 ]; then
         pass "Package documentation found in $PKG_FILES_WITH_DOC files"
     else
@@ -91,7 +91,7 @@ fi
 echo ""
 echo "--- ADR Linkage ---"
 if [ -d ".pi/architecture/decisions" ]; then
-    ADR_COUNT=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    ADR_COUNT=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$ADR_COUNT" -gt 0 ]; then
         ADR_REFS=$(grep -rlE '//\s*ADR[-_]?\d+' . --include="*.go" 2>/dev/null | wc -l | tr -d ' ') || true
         if [ "$ADR_REFS" -gt 0 ]; then

package/templates/pi/scripts/languages/go/validate-ci.sh

@@ -42,7 +42,7 @@ fi
 echo ""
 echo "--- Tests ---"
 if [ -f "go.mod" ]; then
-    TEST_FILES=$(find . -name "*_test.go" -not -path "./vendor/*" 2>/dev/null | wc -l | tr -d ' ')
+    TEST_FILES=$(find . -name "*_test.go" -not -path "./vendor/*" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$TEST_FILES" -gt 0 ]; then
         if go test ./... -count=1 2>/dev/null; then
             pass "All tests passed"

package/templates/pi/scripts/languages/go/validate-integration.sh

@@ -65,7 +65,7 @@ fi
 echo ""
 echo "--- Contract Tests ---"
 if [ -f "go.mod" ]; then
-    CONTRACT_FILES=$(find . -name "*_contract_test.go" -not -path "./vendor/*" 2>/dev/null | wc -l | tr -d ' ')
+    CONTRACT_FILES=$(find . -name "*_contract_test.go" -not -path "./vendor/*" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$CONTRACT_FILES" -gt 0 ]; then
         pass "Contract test files found ($CONTRACT_FILES files)"
     else

package/templates/pi/scripts/languages/go/validate-security.sh

@@ -67,7 +67,7 @@ if command -v govulncheck &>/dev/null && [ -f "go.mod" ]; then
         warn "govulncheck reported findings (review manually)"
     fi
 elif [ -f "go.mod" ]; then
-    DEP_COUNT=$(go list -m all 2>/dev/null | wc -l | tr -d ' ')
+    DEP_COUNT=$(go list -m all 2>/dev/null | wc -l | tr -d ' ') || true
     warn "govulncheck not available; $DEP_COUNT dependencies require manual review"
 else
     warn "Not in a Go module, skipping dependency audit"
@@ -99,7 +99,7 @@ fi
 echo ""
 echo "--- Input Validation ---"
 if [ -f "go.mod" ]; then
-    TEXT_TEMPLATE=$(grep -rl '"text/template"' . --include="*.go" 2>/dev/null | grep -v "_test.go" | wc -l | tr -d ' ')
+    TEXT_TEMPLATE=$(grep -rl '"text/template"' . --include="*.go" 2>/dev/null | grep -v "_test.go" | wc -l | tr -d ' ') || true
     HTML_TEMPLATE=$(grep -rl '"html/template"' . --include="*.go" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$TEXT_TEMPLATE" -eq 0 ]; then
         pass "No text/template usage in production code (html/template auto-escapes)"

package/templates/pi/scripts/languages/java/validate-annotations.sh

@@ -95,7 +95,7 @@ if [ -d "$SRC_DIR" ]; then
     if [ -n "$FIELD_AUTOWIRED" ]; then
         # Count field-level @Autowired (not constructor)
         FIELD_COUNT=$(echo "$FIELD_AUTOWIRED" | wc -l | tr -d ' ')
-        CONSTRUCTOR_COUNT=$(grep -rn "@Autowired\s*$" "$SRC_DIR" --include="*.java" 2>/dev/null | grep -v "//\|/\*" | wc -l | tr -d ' ')
+        CONSTRUCTOR_COUNT=$(grep -rn "@Autowired\s*$" "$SRC_DIR" --include="*.java" 2>/dev/null | grep -v "//\|/\*" | wc -l | tr -d ' ') || true
 
         # Heuristic: more field injections than constructor injections
         if [ "$FIELD_COUNT" -gt "$CONSTRUCTOR_COUNT" ]; then

package/templates/pi/scripts/languages/java/validate-architecture.sh

@@ -86,7 +86,7 @@ fi
 echo ""
 echo "--- Canonical References ---"
 if [ -d ".pi/architecture/modules" ]; then
-    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     pass "Canonical architecture documents found ($MODULE_COUNT modules)"
 else
     warn "No .pi/architecture/modules directory found"

package/templates/pi/scripts/languages/java/validate-canonical.sh

@@ -39,7 +39,7 @@ fi
 echo ""
 echo "--- Implementation File References ---"
 if [ -d "$SRC_DIR" ]; then
-    JAVA_FILES=$(find "$SRC_DIR" -name "*.java" 2>/dev/null | wc -l | tr -d ' ')
+    JAVA_FILES=$(find "$SRC_DIR" -name "*.java" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$JAVA_FILES" -gt 0 ]; then
         # Check for canonical reference headers in Java files
         WITH_REFS=0
@@ -81,7 +81,7 @@ fi
 echo ""
 echo "--- ADR References ---"
 if [ -d ".pi/architecture/decisions" ]; then
-    ADR_COUNT=$(find .pi/architecture/decisions -name "*.md" -not -name "ADR-template.md" 2>/dev/null | wc -l | tr -d ' ')
+    ADR_COUNT=$(find .pi/architecture/decisions -name "*.md" -not -name "ADR-template.md" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$ADR_COUNT" -gt 0 ]; then
         pass "Architecture Decision Records found ($ADR_COUNT ADRs)"
     else

package/templates/pi/scripts/languages/python/validate-architecture.sh

@@ -41,7 +41,7 @@ fi
 echo ""
 echo "--- Canonical References ---"
 if [ -d ".pi/architecture/modules" ]; then
-    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     pass "Canonical architecture documents found ($MODULE_COUNT modules)"
 else
     warn "No canonical architecture directory found"
@@ -50,7 +50,7 @@ fi
 # Domain models
 echo ""
 echo "--- Domain Models ---"
-DOMAIN_FILES=$(find "$SRC_DIR" -path "*/domain/*.py" 2>/dev/null | wc -l | tr -d ' ')
+DOMAIN_FILES=$(find "$SRC_DIR" -path "*/domain/*.py" 2>/dev/null | wc -l | tr -d ' ') || true
 if [ "$DOMAIN_FILES" -gt 0 ]; then
     pass "Domain model files found ($DOMAIN_FILES files)"
 else

package/templates/pi/scripts/languages/python/validate-canonical.sh

@@ -26,7 +26,7 @@ SRC_DIR="${1:-src}"
 
 # ── Architecture reference tracing ──
 echo "--- Architecture Reference Tracing ---"
-TOTAL_PY_FILES=$(find "$SRC_DIR" -name "*.py" 2>/dev/null | wc -l | tr -d ' ')
+TOTAL_PY_FILES=$(find "$SRC_DIR" -name "*.py" 2>/dev/null | wc -l | tr -d ' ') || true
 if [ "$TOTAL_PY_FILES" -gt 0 ]; then
     FILES_WITH_REFS=$(grep -rlE "(Canonical:|@canonical|Reference:.*\.pi/architecture)" "$SRC_DIR" --include="*.py" 2>/dev/null | wc -l | tr -d ' ') || true
     PCT=$((FILES_WITH_REFS * 100 / TOTAL_PY_FILES))
@@ -92,7 +92,7 @@ fi
 echo ""
 echo "--- ADR Linkage ---"
 if [ -d ".pi/architecture/decisions" ]; then
-    ADR_COUNT=$(find .pi/architecture/decisions -name "ADR-*.md" 2>/dev/null | wc -l | tr -d ' ')
+    ADR_COUNT=$(find .pi/architecture/decisions -name "ADR-*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     ADR_REFS=$(grep -rlE "ADR-[0-9]+" "$SRC_DIR" --include="*.py" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$ADR_REFS" -gt 0 ]; then
         pass "ADR references found in $ADR_REFS source files ($ADR_COUNT ADRs exist)"

package/templates/pi/scripts/languages/python/validate-integration.sh

@@ -49,7 +49,7 @@ fi
 # ── Contract Tests ──
 echo ""
 echo "--- Contract Tests ---"
-CONTRACT_COUNT=$(find tests -name "*contract*" -o -name "*pact*" 2>/dev/null | wc -l | tr -d ' ')
+CONTRACT_COUNT=$(find tests -name "*contract*" -o -name "*pact*" 2>/dev/null | wc -l | tr -d ' ') || true
 if [ "$CONTRACT_COUNT" -gt 0 ]; then
     pass "Contract test files found ($CONTRACT_COUNT)"
 else

package/templates/pi/scripts/languages/python/validate-security.sh

@@ -23,7 +23,7 @@ echo "============================================"
 
 # Hardcoded secrets
 echo "--- Hardcoded Secrets ---"
-SECRET_COUNT=$(grep -rE "(api_key|secret_key|password|token)\s*=\s*['\"][^'\"]{8,}" "$SRC_DIR" --include="*.py" 2>/dev/null | grep -v "__init__" | grep -v "test" | wc -l | tr -d ' ')
+SECRET_COUNT=$(grep -rE "(api_key|secret_key|password|token)\s*=\s*['\"][^'\"]{8,}" "$SRC_DIR" --include="*.py" 2>/dev/null | grep -v "__init__" | grep -v "test" | wc -l | tr -d ' ') || true
 if [ "$SECRET_COUNT" -eq 0 ]; then
     pass "No hardcoded secrets detected"
 else

package/templates/pi/scripts/languages/rust/validate-architecture.sh

@@ -64,7 +64,7 @@ fi
 echo ""
 echo "--- Canonical References ---"
 if [ -d ".pi/architecture/modules" ]; then
-    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$MODULE_COUNT" -gt 0 ]; then
         pass "Architecture modules defined ($MODULE_COUNT module files)"
     else

package/templates/pi/scripts/languages/rust/validate-canonical.sh

@@ -43,7 +43,7 @@ CANONICAL_REFS=0
 TOTAL_RS=0
 
 # Count all Rust source files
-TOTAL_RS=$(find src -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+TOTAL_RS=$(find src -name "*.rs" 2>/dev/null | wc -l | tr -d ' ') || true
 if [ "$TOTAL_RS" -gt 0 ]; then
     # Look for canonical reference patterns in doc comments
     CANONICAL_REFS=$(grep -rE '(///\s*Canonical:|//!\s*@canonical|///\s*Reference:)' src/ 2>/dev/null | wc -l | tr -d ' ') || true
@@ -108,7 +108,7 @@ fi
 echo ""
 echo "--- ADR Linkage ---"
 if [ -d ".pi/architecture/decisions" ]; then
-    ADR_FILES=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    ADR_FILES=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$ADR_FILES" -gt 0 ]; then
         ADR_REFS=$(grep -rE '///\s*ADR-' src/ 2>/dev/null | wc -l | tr -d ' ') || true
         if [ "$ADR_REFS" -gt 0 ]; then

package/templates/pi/scripts/languages/rust/validate-integration.sh

@@ -40,7 +40,7 @@ fi
 # ---------------------------------------------------------------------------
 echo "--- Integration Test Runner ---"
 if [ -d "tests" ]; then
-    INT_TEST_FILES=$(find tests -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+    INT_TEST_FILES=$(find tests -name "*.rs" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$INT_TEST_FILES" -gt 0 ]; then
         if cargo test --test '*' --quiet 2>/dev/null; then
             pass "Integration tests passed ($INT_TEST_FILES test files)"
@@ -70,7 +70,7 @@ fi
 # ---------------------------------------------------------------------------
 echo ""
 echo "--- Contract Tests ---"
-CONTRACT_TESTS=$(find . -name "*contract*test*.rs" -o -name "*test*contract*.rs" 2>/dev/null | wc -l | tr -d ' ')
+CONTRACT_TESTS=$(find . -name "*contract*test*.rs" -o -name "*test*contract*.rs" 2>/dev/null | wc -l | tr -d ' ') || true
 if [ "$CONTRACT_TESTS" -gt 0 ]; then
     pass "Contract test files found ($CONTRACT_TESTS)"
 else
@@ -101,7 +101,7 @@ fi
 # ---------------------------------------------------------------------------
 echo ""
 echo "--- Database Integration ---"
-DB_INTEG=$(find . -name "*_integration_test.rs" -o -name "*db*test*.rs" 2>/dev/null | wc -l | tr -d ' ')
+DB_INTEG=$(find . -name "*_integration_test.rs" -o -name "*db*test*.rs" 2>/dev/null | wc -l | tr -d ' ') || true
 if [ "$DB_INTEG" -gt 0 ]; then
     pass "Database integration test files found ($DB_INTEG)"
 else

package/templates/pi/scripts/languages/rust/validate-tests.sh

@@ -42,7 +42,7 @@ echo "--- Unit Tests ---"
 if cargo test --lib --quiet 2>/dev/null; then
     pass "Library unit tests passed"
 else
-    LIB_SOURCES=$(find src -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+    LIB_SOURCES=$(find src -name "*.rs" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$LIB_SOURCES" -eq 0 ]; then
         pass "No library source files (skipped)"
     else
@@ -65,7 +65,7 @@ if [ -d "tests" ]; then
         fi
     else
         # Run all integration test files
-        TEST_COUNT=$(find tests -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+        TEST_COUNT=$(find tests -name "*.rs" 2>/dev/null | wc -l | tr -d ' ') || true
         if [ "$TEST_COUNT" -gt 0 ]; then
             if cargo test --test '*' --quiet 2>/dev/null; then
                 pass "Integration tests passed"

package/templates/pi/scripts/languages/typescript/validate-architecture.sh

@@ -44,7 +44,7 @@ fi
 echo ""
 echo "--- Canonical References ---"
 if [ -d ".pi/architecture/modules" ]; then
-    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     pass "Canonical architecture documents found ($MODULE_COUNT modules)"
 else
     warn "No .pi/architecture/modules directory found"

package/templates/pi/scripts/languages/typescript/validate-canonical.sh

@@ -24,7 +24,7 @@ echo "--- Architecture Reference Tracing ---"
 CANONICAL_REFS=0
 TOTAL_TS_FILES=0
 if [ -d "$SRC_DIR" ]; then
-    TOTAL_TS_FILES=$(find "$SRC_DIR" -name "*.ts" -o -name "*.tsx" 2>/dev/null | wc -l | tr -d ' ')
+    TOTAL_TS_FILES=$(find "$SRC_DIR" -name "*.ts" -o -name "*.tsx" 2>/dev/null | wc -l | tr -d ' ') || true
     CANONICAL_REFS=$(find "$SRC_DIR" -type f \( -name "*.ts" -o -name "*.tsx" \) -exec grep -lE '(// Canonical:|@canonical).*\.pi/architecture/' {} + 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$TOTAL_TS_FILES" -gt 0 ] && [ "$CANONICAL_REFS" -gt 0 ]; then
         PCT=$((CANONICAL_REFS * 100 / TOTAL_TS_FILES))
@@ -99,7 +99,7 @@ fi
 echo ""
 echo "--- ADR Linkage ---"
 if [ -d ".pi/architecture/decisions" ]; then
-    ADR_FILES=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    ADR_FILES=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ') || true
     ADR_REFS=$(find "$SRC_DIR" -type f \( -name "*.ts" -o -name "*.tsx" \) -exec grep -rlE '(@adr|ADR-)' {} + 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$ADR_FILES" -gt 0 ] && [ "$ADR_REFS" -gt 0 ]; then
         pass "ADR references found: $ADR_REFS files link to $ADR_FILES decisions"

package/templates/pi/scripts/languages/typescript/validate-integration.sh

@@ -64,9 +64,9 @@ fi
 echo ""
 echo "--- Docker/Compose ---"
 if [ -f "docker-compose.yml" ] || [ -f "docker-compose.yaml" ]; then
-    SERVICES=$(grep -E "^\s{2}\w+:" docker-compose.yml 2>/dev/null | grep -vE "^\s{2}version:|^\s{2}services:" | wc -l | tr -d ' ')
+    SERVICES=$(grep -E "^\s{2}\w+:" docker-compose.yml 2>/dev/null | grep -vE "^\s{2}version:|^\s{2}services:" | wc -l | tr -d ' ') || true
     if [ -f "docker-compose.yaml" ] && [ "$SERVICES" -eq 0 ]; then
-        SERVICES=$(grep -E "^\s{2}\w+:" docker-compose.yaml 2>/dev/null | grep -vE "^\s{2}version:|^\s{2}services:" | wc -l | tr -d ' ')
+        SERVICES=$(grep -E "^\s{2}\w+:" docker-compose.yaml 2>/dev/null | grep -vE "^\s{2}version:|^\s{2}services:" | wc -l | tr -d ' ') || true
     fi
     pass "Docker Compose found ($SERVICES services — integration tests may require running services)"
 else
@@ -81,7 +81,7 @@ echo "--- Contract Tests ---"
 CONTRACT_FILES=0
 for dir in tests test; do
     if [ -d "$dir" ]; then
-        COUNT=$(find "$dir" -name "*.contract.test.ts" -o -name "*.contract.test.tsx" 2>/dev/null | wc -l | tr -d ' ')
+        COUNT=$(find "$dir" -name "*.contract.test.ts" -o -name "*.contract.test.tsx" 2>/dev/null | wc -l | tr -d ' ') || true
         CONTRACT_FILES=$((CONTRACT_FILES + COUNT))
     fi
 done
@@ -116,7 +116,7 @@ echo "--- Database Integration ---"
 DB_INTEGRATION_FILES=0
 for dir in tests test; do
     if [ -d "$dir" ]; then
-        COUNT=$(find "$dir" -name "*_integration.test.ts" -o -name "*_integration.test.tsx" -o -name "*.db.test.ts" -o -name "*.db.test.tsx" 2>/dev/null | wc -l | tr -d ' ')
+        COUNT=$(find "$dir" -name "*_integration.test.ts" -o -name "*_integration.test.tsx" -o -name "*.db.test.ts" -o -name "*.db.test.tsx" 2>/dev/null | wc -l | tr -d ' ') || true
         DB_INTEGRATION_FILES=$((DB_INTEGRATION_FILES + COUNT))
     fi
 done

package/templates/pi/scripts/languages/typescript/validate-security.sh

@@ -121,7 +121,7 @@ if [ "$SANITIZE_LIBS" -gt 0 ]; then
     pass "Sanitization libraries detected ($SANITIZE_LIBS files)"
 else
     # Only warn if there are TSX files (likely has JSX/DOM rendering)
-    TSX_COUNT=$(find . -name "*.tsx" -not -path "./node_modules/*" -not -path "./.next/*" -not -path "./dist/*" 2>/dev/null | wc -l | tr -d ' ')
+    TSX_COUNT=$(find . -name "*.tsx" -not -path "./node_modules/*" -not -path "./.next/*" -not -path "./dist/*" 2>/dev/null | wc -l | tr -d ' ') || true
     if [ "$TSX_COUNT" -gt 0 ]; then
         warn "No sanitization library found in TSX files (consider DOMPurify or sanitize-html)"
     else
@@ -137,7 +137,7 @@ echo "--- HTTPS Enforcement ---"
 HTTP_ONLY=0
 for ext in ts tsx; do
     COUNT=$(find . -name "*.$ext" -not -path "./node_modules/*" -not -path "./.next/*" -not -path "./dist/*" \
-        -exec grep -E "['\"]http://(?!localhost)" {} + 2>/dev/null | grep -ivE "(test|spec|mock|example|dev)" | wc -l | tr -d ' ')
+        -exec grep -E "['\"]http://(?!localhost)" {} + 2>/dev/null | grep -ivE "(test|spec|mock|example|dev)" | wc -l | tr -d ' ') || true
     HTTP_ONLY=$((HTTP_ONLY + COUNT))
 done
 if [ "$HTTP_ONLY" -eq 0 ]; then