chore: update configuration files for consistency and clarity; adjust .editorconfig, .gitattributes, .gitignore, .styleci.yml, and README.md.

.ecrc

@@ -5,6 +5,7 @@
  "\\.min\\.css$",
  "\\.min\\.js$",
  "^vendor/",
- "^runtime/"
+ "^runtime/",
+ "scaffold-lock\\.json$"
  ]
 }

.editorconfig

@@ -13,6 +13,18 @@ trim_trailing_whitespace = true
 [*.js]
 indent_size = 2
 
+[*.scss]
+indent_size = 2
+
+[*.css]
+indent_size = 2
+
+[package.json]
+indent_size = 2
+
+[package-lock.json]
+indent_size = 2
+
 [*.md]
 indent_size = 2
 trim_trailing_whitespace = false

.gitattributes

@@ -22,14 +22,21 @@
 *.ttf binary
 
 # Exclude files from the archive
-/.github/dependabot.yml export-ignore
-/.github/workflows export-ignore
+/.editorconfig export-ignore
+/.gitattributes export-ignore
+/.github export-ignore
+/.gitignore export-ignore
+/.styleci.yml export-ignore
 /codeception.yml export-ignore
+/composer-require-checker.json export-ignore
 /docs export-ignore
+/ecs.php export-ignore
 /infection.json* export-ignore
 /phpstan*.neon* export-ignore
 /phpunit.xml.dist export-ignore
+/rector.php export-ignore
 /runtime export-ignore
+/scaffold-lock.json export-ignore
 /tests export-ignore
 
 # Avoid merge conflicts in CHANGELOG

.github/linters/.editorconfig-checker.json

@@ -0,0 +1,11 @@
+{
+ "Exclude": [
+ "phpstan-baseline\\.neon$",
+ "^tests/runtime/",
+ "\\.min\\.css$",
+ "\\.min\\.js$",
+ "^vendor/",
+ "^runtime/",
+ "scaffold-lock\\.json$"
+ ]
+}

.github/linters/.gitleaks.toml

@@ -1,6 +1,6 @@
 title = "gitleaks config"
 
-[[allowlists]]
+[allowlist]
 description = "Allow test fixture data with dummy credentials"
 paths = [
  '''tests/support/data/.*\.php''',

.gitignore

@@ -1,3 +1,7 @@
+# AI agents (if present)
+.codex
+.claude
+
 # codecoverage (if present)
 code_coverage
 
@@ -24,13 +28,14 @@ nbproject
 # node_modules (if present)
 node_modules
 package-lock.json
-
-# phpstorm project (if present)
-.idea
+!src/assets/package-lock.json
 
 # phpactor (if present)
 .phpactor.*
 
+# phpstorm project (if present)
+.idea
+
 # phpunit (if present)
 .phpunit.cache
 .phpunit.result.cache
@@ -52,3 +57,4 @@ Thumbs.db
 .buildpath
 .project
 .settings
+phpunit.xml

.prettierignore

@@ -16,3 +16,6 @@ tests/runtime/**
 
 # Tool configs maintained by hand to keep their array order meaningful.
 composer-require-checker.json
+
+# Auto-generated by yii2-extensions/scaffold; never hand-edited.
+scaffold-lock.json

.styleci.yml

@@ -1,7 +1,7 @@
 preset: psr12
 risky: true
 
-version: 8.1
+version: 8.3
 
 finder:
  exclude:

CHANGELOG.md

@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.3.0 Under development
+
+- feat!: ship `ecs.php` and `rector.php` wrappers from `src/config/` via `scaffold.json`; metadata moves to `php-forge/baseline`.
+
 ## 0.2.0 May 04, 2026
 
 - docs: add social media badge for following on X in `README.md`.

README.md

@@ -13,19 +13,29 @@
  <em>Share one set of rules across multiple repositories via Composer.</em>
 </p>
 
-## Features
+## System requirements
 
-<picture>
- <source media="(min-width: 768px)" srcset="./docs/svgs/features.svg">
- <img src="./docs/svgs/features-mobile.svg" alt="Feature Overview" style="width: 100%;">
-</picture>
+- [`PHP`](https://www.php.net/downloads) 8.3 or higher.
+- [`Composer`](https://getcomposer.org/download/) for dependency management.
 
 ## Installation
 
 ```bash
-composer require php-forge/coding-standard:^0.2 --dev
+composer require php-forge/coding-standard:^0.3 --dev
 ```
 
+Or add the dependency manually to `composer.json`:
+
+```json
+{
+ "require-dev": {
+ "php-forge/coding-standard": "^0.3"
+ }
+}
+```
+
+Then run `composer update`.
+
 ## Configuration files
 
 This package ships shared ECS and Rector configurations under
@@ -127,15 +137,11 @@ return static function (RectorConfig $rectorConfig): void {
 };
 ```
 
-## Scaffolded distribution (optional)
+## Scaffolded distribution
 
-This package is also a [`yii2-extensions/scaffold`](https://github.com/yii2-extensions/scaffold) provider.
-
-When the scaffold plugin is installed and authorized, `composer install` distributes the canonical metadata and
-super-linter configs into your repository root automatically; so the ECS / Rector wrappers above and the shared linter
-rules stay in lock-step across every repository that opts in.
-
-Opt in by adding the plugin and authorizing this package as a provider:
+This package is a [`yii2-extensions/scaffold`](https://github.com/yii2-extensions/scaffold) provider for the
+**root `ecs.php` and `rector.php` wrapper templates** (sourced from `src/config/` via `scaffold.json`). Consumers can
+opt in by allowing the plugin and listing this package as an authorised provider:
 
 ```bash
 composer require yii2-extensions/scaffold:^0.1 --dev
@@ -150,6 +156,7 @@ composer require yii2-extensions/scaffold:^0.1 --dev
  },
  "extra": {
  "scaffold": {
+ "auto": false,
  "allowed-packages": [
  "php-forge/coding-standard"
  ]
@@ -158,45 +165,20 @@ composer require yii2-extensions/scaffold:^0.1 --dev
 }
 ```
 
-On the next `composer install` / `composer update`, these files land in your repository root:
-
-| File | Mode | Purpose |
-| ------------------------------------ | ---------- | -------------------------------------------------------- |
-| `.editorconfig` | `replace` | Editor settings (UTF-8, LF, indent) |
-| `.gitattributes` | `replace` | Text/binary handling, archive excludes |
-| `.gitignore` | `append` | Common ignore patterns; project-specific lines preserved |
-| `.styleci.yml` | `replace` | StyleCI config (PSR-12 + risky) |
-| `.ecrc` | `replace` | editor-config-checker exclusions |
-| `.prettierignore` | `replace` | Paths Prettier should skip |
-| `.prettierrc.json` | `replace` | Prettier formatting rules |
-| `.stylelintignore` | `replace` | Paths stylelint should skip |
-| `composer-require-checker.json` | `preserve` | Composer require-checker whitelist (project-specific) |
-| `.github/linters/actionlint.yml` | `replace` | actionlint config for Super-Linter |
-| `.github/linters/.codespellrc` | `replace` | codespell config |
-| `.github/linters/.gitleaks.toml` | `replace` | gitleaks config |
-| `.github/linters/.markdown-lint.yml` | `replace` | markdownlint config |
-| `ecs.php` | `preserve` | ECS wrapper for the project root |
-| `rector.php` | `preserve` | Rector wrapper for the project root |
-
-Mode semantics:
-
-- `replace`: lock-step with this package. Local edits trigger a warning and the file is skipped on update.
- Use `vendor/bin/scaffold reapply <file> --force` to re-sync.
-- `append`: provider content is appended to the existing file. Project lines are never blown away.
-- `preserve`: file is written once on first install and never overwritten.
-
-The scaffolded `ecs.php` / `rector.php` ship with `83` as the default PHP target; switch to `81`, `82`, or `84` to match
-your minimum PHP version. Mode `preserve` protects your edits across `composer update`.
-
-### Scaffold commands
+With `auto: false`, the plugin does not run on `composer install`; sync the wrappers manually:
 
 ```bash
-vendor/bin/scaffold status # show which files are synced/modified/missing
-vendor/bin/scaffold diff <file> # diff between local and provider version
-vendor/bin/scaffold reapply [<file>] [--force] # re-apply provider content
-vendor/bin/scaffold eject <file> # stop tracking a file (kept on disk)
+vendor/bin/scaffold reapply --provider=php-forge/coding-standard
 ```
 
+Both wrappers ship in mode `preserve`; written once on first install, never overwritten so consumer edits to paths
+or PHP target version survive subsequent runs.
+
+## Related packages
+
+For dev environment scaffolding, see [`php-forge/baseline`](https://github.com/php-forge/baseline). The two packages
+are independent; adopt either, both, or neither.
+
 ## Composer scripts
 
 Follow the same convention used across PHP Forge repositories:
@@ -210,10 +192,6 @@ Follow the same convention used across PHP Forge repositories:
 }
 ```
 
-## Documentation
-
-- 📚 [Installation Guide](docs/installation.md)
-
 ## Package information
 
 [![PHP](https://img.shields.io/badge/%3E%3D8.3-777BB4.svg?style=for-the-badge&logo=php&logoColor=white)](https://www.php.net/releases/8.3/en.php)

composer.json

@@ -1,7 +1,7 @@
 {
  "name": "php-forge/coding-standard",
  "type": "library",
- "description": "Centralized ECS, Rector, and tooling configurations for PHP projects.",
+ "description": "Centralized ECSand Rector configurations for PHP projects.",
  "keywords": [
  "coding-standard",
  "ecs",
@@ -10,11 +10,17 @@
  "scaffold-provider"
  ],
  "license": "BSD-3-Clause",
+ "minimum-stability": "dev",
+ "prefer-stable": true,
  "require": {
  "php": ">=8.3",
  "rector/rector": "^2.1",
  "symplify/easy-coding-standard": "^13.0"
  },
+ "require-dev": {
+ "php-forge/baseline": "dev-main",
+ "yii2-extensions/scaffold": "dev-main"
+ },
  "autoload": {
  "psr-4": {
  "PHPForge\\CodingStandard\\": "./"
@@ -25,33 +31,18 @@
  "dev-main": "0.3.x-dev"
  },
  "scaffold": {
- "copy": [
- ".editorconfig",
- ".gitattributes",
- ".gitignore",
- ".styleci.yml",
- ".ecrc",
- ".prettierignore",
- ".prettierrc.json",
- ".stylelintignore",
- "composer-require-checker.json",
- ".github/linters/actionlint.yml",
- ".github/linters/.codespellrc",
- ".github/linters/.gitleaks.toml",
- ".github/linters/.markdown-lint.yml",
- "ecs.php",
- "rector.php"
- ],
- "modes": {
- ".gitignore": "append",
- "composer-require-checker.json": "preserve",
- "ecs.php": "preserve",
- "rector.php": "preserve"
- }
+ "manifest": "scaffold.json",
+ "auto": false,
+ "allowed-packages": [
+ "php-forge/baseline"
+ ]
  }
  },
  "config": {
- "sort-packages": true
+ "sort-packages": true,
+ "allow-plugins": {
+ "yii2-extensions/scaffold": true
+ }
  },
  "scripts": {
  "ecs": "./vendor/bin/ecs check src --config src/ecs-83.php --fix",