refactor: Use XDG compliant isolated directory structure

- Using $BOOTSTRAP_BIN, $BOOTSTRAP_OPT, etc
- Add defensive fallback for undefined vars in common.sh

lib/common.sh

@@ -7,6 +7,15 @@ if [ -n "${_LIB_COMMON_SOURCED:-}" ]; then
 fi
 _LIB_COMMON_SOURCED=1
 
+# Export global environment paths with default fallbacks
+export BOOTSTRAP_DIR="${BOOTSTRAP_DIR:-$HOME/.config/bootstrap}"
+export BOOTSTRAP_DATA_DIR="${BOOTSTRAP_DATA_DIR:-$HOME/.local/share/bootstrap}"
+export BOOTSTRAP_STATE_DIR="${BOOTSTRAP_STATE_DIR:-$HOME/.local/state/bootstrap}"
+export BOOTSTRAP_CACHE_DIR="${BOOTSTRAP_CACHE_DIR:-$HOME/.cache/bootstrap}"
+export BOOTSTRAP_BIN="${BOOTSTRAP_BIN:-$BOOTSTRAP_DATA_DIR/bin}"
+export BOOTSTRAP_OPT="${BOOTSTRAP_OPT:-$BOOTSTRAP_DATA_DIR/opt}"
+export BOOTSTRAP_RUNTIMES="${BOOTSTRAP_RUNTIMES:-$BOOTSTRAP_DATA_DIR/runtimes}"
+
 # Ensure running in Bash
 require_bash() {
     if [ -z "${BASH_VERSION:-}" ]; then
@@ -88,7 +97,7 @@ version_lt() {
 download_file() {
     local url="$1"
     local dest="$2"
-    local cache_dir="$HOME/.local/state/bootstrap/cache"
+    local cache_dir="$BOOTSTRAP_CACHE_DIR/downloads"
     
     mkdir -p "$cache_dir"
     

lib/registry_helpers.sh

@@ -3,7 +3,7 @@
 
 # Ensures the registry file exists
 ensure_registry() {
-    local registry_file="${BOOTSTRAP_DIR:-$HOME/.config/bootstrap}/registry.json"
+    local registry_file="$BOOTSTRAP_STATE_DIR/registry.json"
     if [ ! -f "$registry_file" ]; then
         mkdir -p "$(dirname "$registry_file")"
         echo '{"tools": {}}' > "$registry_file"
@@ -36,7 +36,7 @@ register_tool() {
     local source="${4:-}"
     local timestamp=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
 
-    local bindir="${BOOTSTRAP_DIR:-$HOME/.config/bootstrap}/bin"
+    local bindir="$BOOTSTRAP_BIN"
     
     local filter='if .tools == null then .tools = {} else . end |
         .tools[$tool].strategy = $strategy |
@@ -80,7 +80,7 @@ registry_remove_tool() {
 # Usage: registry_get_sys_deps <tool_name>
 registry_get_sys_deps() {
     local tool="$1"
-    local registry_file="${BOOTSTRAP_DIR:-$HOME/.config/bootstrap}/registry.json"
+    local registry_file="$BOOTSTRAP_STATE_DIR/registry.json"
     if [ -f "$registry_file" ]; then
         jq -r --arg tool "$tool" '.tools[$tool].system_dependencies[]? // empty' "$registry_file"
     fi