docs: polish open source project surface

Author: jesseoue

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @jesseoue

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Questions and ideas
+    url: https://github.com/jesseoue/stackfoundry/discussions
+    about: Use discussions for broad ideas, questions, and roadmap feedback.

.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      production:
+        dependency-type: "production"
+      development:
+        dependency-type: "development"

.github/labeler.yml

@@ -0,0 +1,22 @@
+docs:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "docs/**"
+          - "*.md"
+
+registry:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "registry.json"
+          - "registry/**"
+          - "public/r/**"
+
+cli:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "apps/cli/**"
+
+ci:
+  - changed-files:
+      - any-glob-to-any-file:
+          - ".github/**"

.github/workflows/ci.yml

@@ -8,8 +8,16 @@ on:
 
 permissions:
   contents: read
+  pull-requests: write
 
 jobs:
+  label:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/labeler@v6
+
   check:
     runs-on: ubuntu-latest
     steps:

CODE_OF_CONDUCT.md

@@ -0,0 +1,7 @@
+# Code of Conduct
+
+StackFoundry follows the Contributor Covenant Code of Conduct.
+
+Be respectful, constructive, and focused on making the project better. Harassment, abuse, or discriminatory behavior is not welcome.
+
+Report unacceptable behavior privately to the maintainer.

README.md

@@ -2,6 +2,10 @@
 
 Install production SaaS modules as editable source code.
 
+[![CI](https://github.com/jesseoue/stackfoundry/actions/workflows/ci.yml/badge.svg)](https://github.com/jesseoue/stackfoundry/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](./LICENSE)
+[![Status: Experimental](https://img.shields.io/badge/status-experimental-orange.svg)](./ROADMAP.md)
+
 StackFoundry is a source registry for full-stack app modules: auth, billing, API keys, webhooks, analytics, docs, Drizzle schemas, tests, and deployment workflows.
 
 Every module ships with the code and the operating instructions needed to maintain it.
@@ -10,7 +14,7 @@ No black boxes. No locked framework. Copy the code. Own the code.
 
 ## Status
 
-This repository is the public seed for StackFoundry. The product is the registry and module installer. Presets are only bundles of modules.
+StackFoundry is experimental. The current repository contains the registry, the first installable modules, and a local CLI prototype. Presets are bundles of modules; modules are the product.
 
 StackFoundry sits between three familiar ideas:
 
@@ -44,6 +48,36 @@ The demo should show each module adding:
 - maintenance guidance
 - install metadata for future diff/update safety
 
+## What Works Today
+
+```bash
+node apps/cli/src/cli.mjs list
+node apps/cli/src/cli.mjs presets
+node apps/cli/src/cli.mjs validate
+node apps/cli/src/cli.mjs build
+node apps/cli/src/cli.mjs add api-keys --target ../some-app --dry-run
+node apps/cli/src/cli.mjs add preset next-saas --target ../some-app --dry-run
+node apps/cli/src/cli.mjs diff api-keys --target ../some-app
+```
+
+Current installable modules:
+
+- `drizzle-postgres`
+- `api-keys`
+- `stripe-billing`
+- `ai-chat`
+
+Current presets:
+
+- `next-saas`
+- `developer-platform`
+- `b2b-saas`
+- `ai-saas`
+- `internal-admin`
+- `free-tier-saas`
+- `vercel-native`
+- `cloudflare-native`
+
 ## V1 Golden Path
 
 - `next-saas`
@@ -104,22 +138,37 @@ examples/
 docs/
 ```
 
+## Registry Output
+
+The registry build writes public item JSON to:
+
+```text
+public/r/
+  registry.json
+  api-keys.json
+  drizzle-postgres.json
+  stripe-billing.json
+  presets/
+```
+
 ## Development
 
 The current milestone is to make the first modules installable and safe to diff.
 
 Current local prototype:
 
 ```bash
-node apps/cli/src/cli.mjs list
-node apps/cli/src/cli.mjs presets
-node apps/cli/src/cli.mjs validate
-node apps/cli/src/cli.mjs build
-node apps/cli/src/cli.mjs add api-keys --target ../some-app --dry-run
-node apps/cli/src/cli.mjs add preset next-saas --target ../some-app --dry-run
-node apps/cli/src/cli.mjs diff api-keys --target ../some-app
+pnpm check
 ```
 
 ## Roadmap
 
 See [`ROADMAP.md`](./ROADMAP.md).
+
+## Contributing
+
+See [`CONTRIBUTING.md`](./CONTRIBUTING.md). Module requests are welcome through GitHub issues.
+
+## Security
+
+See [`SECURITY.md`](./SECURITY.md).

docs/index.md

@@ -0,0 +1,13 @@
+# StackFoundry Docs
+
+- [Registry](./registry.md)
+- [Modules](./modules.md)
+- [Providers](./providers.md)
+- [Maintenance instructions](./agents.md)
+
+## Start Here
+
+1. Read the [Registry](./registry.md) docs.
+2. Inspect the first modules in `registry/modules`.
+3. Run `node apps/cli/src/cli.mjs validate`.
+4. Try `node apps/cli/src/cli.mjs add api-keys --target /tmp/app --dry-run`.

docs/launch-checklist.md

@@ -0,0 +1,15 @@
+# Launch Checklist
+
+- [ ] README quick start tested from a clean checkout
+- [ ] `pnpm check` passes
+- [ ] demo GIF recorded with public demo data
+- [ ] example app deployed
+- [ ] repository description and topics configured
+- [ ] issue templates enabled
+- [ ] discussions enabled
+- [ ] branch protection enabled
+- [ ] secret scanning and push protection enabled
+- [ ] funding profile enabled
+- [ ] first roadmap issues created
+- [ ] module request issue created
+- [ ] no private data, internal planning files, or local env files tracked

package.json

@@ -30,7 +30,11 @@
     "ai-sdk",
     "stripe",
     "clerk",
-    "vercel"
+    "vercel",
+    "open-source",
+    "developer-tools",
+    "starter-kit",
+    "fullstack"
   ],
   "repository": {
     "type": "git",