@geonosis/cli 1.0.0 → 1.1.0

package/README.md

@@ -32,7 +32,7 @@ the version skew `geonosis-doctor` exists to catch.
 
 | Command | What it does |
 |---|---|
-| `geonosis init --presets a,b [--brand x] [--runtime pnpm\|bun]` | Writes `geonosis.json`, `.oxlintrc.json`, `geonosis.ratchet.json` and `gate-baseline.json` into an EXISTING repo. It refuses to overwrite any of them — and when one exists, it writes none of the others. |
+| `geonosis init --presets a,b [--brand x] [--runtime pnpm\|bun]` | Writes `geonosis.json`, `.oxlintrc.json`, `geonosis.ratchet.json` and `gate-baseline.json` into an EXISTING repo — each one that is absent; each one that exists is kept byte for byte and named (`kept … already yours`), never overwritten and never merged into. An existing repo is exactly the one that already has some of them. `init --help` prints the syntax; a flag it does not have is refused by name. |
 | `geonosis sync [--check] [--target turbo\|layer-walls\|restricted-imports --into <file>]` | Generates `AGENTS.md` and `.cursor/rules/*.mdc` from `CLAUDE.md` and this repo's skills — one law, every tool (D-002). Deterministic, so `--check` is a gate. With `--target` it hands the edges table to `geonosis-ledger sync`, exit code and all. |
 | `geonosis discover [--config <file>] [paths…]` | Reads the findings this repo's own oxlint config already produces into `fixShape` candidates — rule, count, first three sites. It writes nothing: the scored agent never writes the scoreboard. |
 | `geonosis skills list\|lock\|audit` | `skills-lock.json` by content hash, in during.day's shape (`source`, `sourceType`, `skillPath`, `computedHash`). `audit` fails on drift, on a skill nobody pinned, and on an **executable file inside a skill directory** — the Vercel incident class a markdown hash cannot see. |

package/bin/geonosis.mjs

@@ -1,4 +1,27 @@
 #!/usr/bin/env node
 // Committed, so `pnpm install` can link the bin on a fresh clone — before `pnpm build` has
 // produced dist/. A bin that only exists after a build is a bin that is missing when you need it.
-import '../dist/geonosis-cli.js'
+//
+// In the repo, `src/` sits beside `dist/`, and a dist older than src answered for a fix it did not
+// carry once (#62). The published package ships no src, so there the check is skipped.
+import { existsSync, readdirSync, statSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const newest = (dir) =>
+  existsSync(dir)
+    ? readdirSync(dir, { withFileTypes: true }).reduce((most, entry) => {
+        const at = join(dir, entry.name)
+        return Math.max(most, entry.isDirectory() ? newest(at) : statSync(at).mtimeMs)
+      }, 0)
+    : 0
+const src = join(here, '..', 'src')
+if (existsSync(src) && newest(src) > newest(join(here, '..', 'dist'))) {
+  process.stderr.write(
+    'geonosis: dist is older than src — run pnpm build before trusting this bin.\n',
+  )
+  process.exit(2)
+}
+
+await import('../dist/geonosis-cli.js')

package/dist/{chunk-U3TBZWD3.js → chunk-RKOVR7WT.js}

@@ -37,11 +37,13 @@ var inputFor = (id, argv, cwd) => {
   if (valued === void 0) return { args: [...argv], cwd };
   const { flags, positional, switches } = parseArgv(argv, valued);
   if (id === "init") {
+    const unknownFlags = [...switches, ...Object.keys(flags)].filter((one) => !valued.has(one));
     return {
       ...flags["--brand"] === void 0 ? {} : { brand: flags["--brand"] },
       cwd,
       presets: list(flags["--presets"]),
-      ...flags["--runtime"] === void 0 ? {} : { runtime: flags["--runtime"] }
+      ...flags["--runtime"] === void 0 ? {} : { runtime: flags["--runtime"] },
+      ...unknownFlags.length === 0 ? {} : { unknownFlags }
     };
   }
   if (id === "sync") {
@@ -133,8 +135,8 @@ var optionsNeededBy = () => {
 };
 
 // src/init.ts
-import { existsSync as existsSync2, writeFileSync } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync2, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { dirname, join as join2 } from "path";
 import { PRESETS } from "@geonosis/oxlint-plugin-biological-architecture";
 var PREFIX = "biological-architecture/";
 var SCHEMA = "https://raw.githubusercontent.com/oxc-project/oxc/main/npm/oxlint/configuration_schema.json";
@@ -211,17 +213,36 @@ var oxlintConfig = (rules2) => ({
 var json = (value) => `${JSON.stringify(value, void 0, 2)}
 `;
 var refusal = (output) => resultOf(1, output);
+var baselineNamedBy = (cwd) => {
+  const at = join2(cwd, "geonosis.ratchet.json");
+  if (!existsSync2(at)) return "gate-baseline.json";
+  try {
+    const parsed = JSON.parse(readFileSync(at, "utf8"));
+    return typeof parsed.baseline === "string" && parsed.baseline !== "" ? parsed.baseline : "gate-baseline.json";
+  } catch {
+    return "gate-baseline.json";
+  }
+};
+var INIT_USAGE = "geonosis init --presets <a,b,c> [--brand <name>] [--runtime pnpm|bun] \u2014 writes geonosis.json, .oxlintrc.json, geonosis.ratchet.json and gate-baseline.json where they are absent; a file that exists is kept, never overwritten.";
 var runInit = async ({
   brand,
   cwd,
   presets,
-  runtime
+  runtime,
+  unknownFlags = []
 }) => {
   const known = Object.keys(PRESETS).toSorted();
+  if (unknownFlags.length > 0) {
+    return refusal(
+      `geonosis init: ${unknownFlags.join(", ")} is not a flag of this command \u2014 ${INIT_USAGE}
+`
+    );
+  }
   const unknown = presets.filter((name) => !known.includes(name));
   if (presets.length === 0 || unknown.length > 0) {
     return refusal(
       `geonosis init: ${presets.length === 0 ? "name at least one preset" : `no preset called ${unknown.join(", ")}`} \u2014 the kit ships ${known.join(", ")}.
+  ${INIT_USAGE}
 `
     );
   }
@@ -237,26 +258,33 @@ var runInit = async ({
     brand === void 0 ? {} : { "no-brand-names": ["error", { brands: [brand] }] }
   );
   const counters = countersFor(chosen);
+  const baselinePath = baselineNamedBy(cwd);
   const files = {
     "geonosis.json": json({ verify: tiersOf(chosen) }),
     ".oxlintrc.json": json(oxlintConfig(rules2)),
     "geonosis.ratchet.json": json({ baseline: "gate-baseline.json", counters }),
-    "gate-baseline.json": json(Object.fromEntries(counters.map((one) => [keyOf(one), 0])))
+    [baselinePath]: json(Object.fromEntries(counters.map((one) => [keyOf(one), 0])))
   };
-  const already = Object.keys(files).filter((file) => existsSync2(join2(cwd, file)));
-  if (already.length > 0) {
-    return refusal(
-      `geonosis init: ${already.join(", ")} already exists in ${cwd} \u2014 nothing was written. Move what is there, or edit it by hand.
+  const kept = Object.keys(files).filter((file) => existsSync2(join2(cwd, file)));
+  const wrote = Object.keys(files).filter((file) => !kept.includes(file));
+  for (const file of wrote) {
+    mkdirSync(dirname(join2(cwd, file)), { recursive: true });
+    writeFileSync(join2(cwd, file), files[file] ?? "");
+  }
+  if (wrote.length === 0) {
+    return resultOf(
+      0,
+      `geonosis init \u2014 nothing to write: ${kept.join(", ")} already exist in ${cwd} and are kept as they are.
 `
     );
   }
-  for (const [file, body] of Object.entries(files)) writeFileSync(join2(cwd, file), body);
   return resultOf(
     0,
     [
       `geonosis init \u2014 ${chosen}, ${Object.keys(rules2).length} rule(s) enabled from ${presets.join(" + ")}`,
       "",
-      ...Object.keys(files).map((file) => `  wrote  ${file}`),
+      ...wrote.map((file) => `  wrote  ${file}`),
+      ...kept.map((file) => `  kept   ${file} (already yours \u2014 not touched)`),
       "",
       ...unanswered.length === 0 ? [] : [
         `  ${unanswered.length} rule(s) were NOT enabled: each needs an option only this repo can answer.`,
@@ -273,7 +301,7 @@ var runInit = async ({
 
 // src/skills.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync3, readdirSync, readFileSync, statSync, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync2, statSync, writeFileSync as writeFileSync2 } from "fs";
 import { join as join3, relative, sep } from "path";
 var LOCK_FILE = "skills-lock.json";
 var SKILL_FILE = "SKILL.md";
@@ -292,7 +320,7 @@ var skillsIn = (cwd) => {
       if (!existsSync3(skill)) continue;
       found.push({
         dir,
-        hash: hashOf(readFileSync(skill)),
+        hash: hashOf(readFileSync2(skill)),
         name: entry.name,
         skillPath: posix(relative(cwd, skill))
       });
@@ -303,7 +331,7 @@ var skillsIn = (cwd) => {
 var readLock = (cwd) => {
   const path = join3(cwd, LOCK_FILE);
   if (!existsSync3(path)) return void 0;
-  return JSON.parse(readFileSync(path, "utf8"));
+  return JSON.parse(readFileSync2(path, "utf8"));
 };
 var executablesIn = (dir, cwd) => {
   const found = [];
@@ -403,7 +431,7 @@ var runSkills = async ({ cwd, verb }) => {
 
 // src/spawn.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import { createRequire } from "module";
 import { join as join4 } from "path";
 import { fileURLToPath } from "url";
@@ -412,7 +440,7 @@ var OUTPUT_LIMIT = 8 * 1024 * 1024;
 var entryOf = (from, name) => createRequire(join4(from, "noop.js")).resolve(name);
 var binPath = (from, ref) => {
   const dir = packageDirOf(entryOf(from, ref.package), ref.package);
-  const manifest = JSON.parse(readFileSync2(join4(dir, "package.json"), "utf8"));
+  const manifest = JSON.parse(readFileSync3(join4(dir, "package.json"), "utf8"));
   const declared = typeof manifest.bin === "string" ? manifest.bin : manifest.bin?.[ref.bin];
   if (declared === void 0) {
     throw new Error(`${ref.package} declares no bin called "${ref.bin}"`);
@@ -423,7 +451,7 @@ var SELF = fileURLToPath(new URL("..", import.meta.url));
 var versionOf = (from, name) => {
   try {
     const dir = packageDirOf(entryOf(from, name), name);
-    const manifest = JSON.parse(readFileSync2(join4(dir, "package.json"), "utf8"));
+    const manifest = JSON.parse(readFileSync3(join4(dir, "package.json"), "utf8"));
     return manifest.version ?? "an unknown version";
   } catch {
     return "an unknown version";
@@ -464,8 +492,8 @@ var runBin = async (cwd, ref, args) => {
 };
 
 // src/sync.ts
-import { existsSync as existsSync4, mkdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { dirname, join as join5 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname2, join as join5 } from "path";
 var LAW_FILE = "CLAUDE.md";
 var AGENTS_FILE = "AGENTS.md";
 var CURSOR_RULES = ".cursor/rules";
@@ -481,10 +509,10 @@ var frontOf = (source) => {
   };
 };
 var generate = (cwd) => {
-  const law = readFileSync3(join5(cwd, LAW_FILE), "utf8").trimEnd();
+  const law = readFileSync4(join5(cwd, LAW_FILE), "utf8").trimEnd();
   const skills = skillsIn(cwd).map((skill) => ({
     ...skill,
-    ...frontOf(readFileSync3(join5(skill.dir, "SKILL.md"), "utf8"))
+    ...frontOf(readFileSync4(join5(skill.dir, "SKILL.md"), "utf8"))
   }));
   const files = {
     [AGENTS_FILE]: [
@@ -551,7 +579,7 @@ var runSync = async (input) => {
   if (input.check === true) {
     const stale = Object.entries(files).filter(([file, body]) => {
       const path = join5(input.cwd, file);
-      return !existsSync4(path) || readFileSync3(path, "utf8") !== body;
+      return !existsSync4(path) || readFileSync4(path, "utf8") !== body;
     });
     return stale.length === 0 ? resultOf(0, `sync check PASS \u2014 ${Object.keys(files).length} file(s) match the law.
 `) : resultOf(
@@ -563,7 +591,7 @@ sync check FAIL \u2014 run \`geonosis sync --write\`.
   }
   for (const [file, body] of Object.entries(files)) {
     const path = join5(input.cwd, file);
-    mkdirSync(dirname(path), { recursive: true });
+    mkdirSync2(dirname2(path), { recursive: true });
     writeFileSync3(path, body);
   }
   return resultOf(
@@ -590,7 +618,7 @@ var WRAPPED = [
   },
   {
     bin: "geonosis-doctor",
-    description: "Ask the four questions a version bump is not finished without: loaded, exercised, baseline, runner.",
+    description: "Ask the seven questions a version bump is not finished without: loaded, exercised, baseline, runner, drift, observability, deployed.",
     id: "doctor",
     kind: "read",
     package: "@geonosis/doctor"
@@ -637,6 +665,13 @@ var WRAPPED = [
     kind: "read",
     package: "@geonosis/walk"
   },
+  {
+    bin: "geonosis-release",
+    description: "Refuse a migration the serving version cannot survive, validate the release contract, prove a smoke named the version that answered it, and read declared against deployed.",
+    id: "release",
+    kind: "read",
+    package: "@geonosis/release"
+  },
   {
     bin: "geonosis-review",
     description: "Apply or check a review decision against the acceptance criteria a plan states \u2014 decision in, verdict out.",
@@ -681,7 +716,8 @@ var initInput = z.object({
   brand: z.string().optional(),
   cwd: z.string(),
   presets: z.array(z.string()),
-  runtime: z.enum(["bun", "pnpm"]).optional()
+  runtime: z.enum(["bun", "pnpm"]).optional(),
+  unknownFlags: z.array(z.string()).optional()
 });
 var syncInput = z.object({
   check: z.boolean().optional(),
@@ -702,7 +738,8 @@ var OWN = [
     id: "init",
     inputSchema: initInput,
     kind: "write",
-    run: async (input) => runInit(initInput.parse(input))
+    run: async (input) => runInit(initInput.parse(input)),
+    usage: INIT_USAGE
   },
   {
     description: "Generate AGENTS.md and the Cursor rules from CLAUDE.md and this repo\u2019s skills, or hand a --target to the ledger\u2019s edges table.",

package/dist/geonosis-cli.js

@@ -2,7 +2,7 @@ import {
   COMMANDS,
   commandById,
   inputFor
-} from "./chunk-U3TBZWD3.js";
+} from "./chunk-RKOVR7WT.js";
 
 // src/geonosis-cli.ts
 var REFUSED = 2;
@@ -46,6 +46,11 @@ var main = async () => {
 `);
     return REFUSED;
   }
+  if (command.usage !== void 0 && rest.slice(1).some((one) => one === "--help" || one === "-h")) {
+    process.stdout.write(`${command.usage}
+`);
+    return 0;
+  }
   const result = await command.run(inputFor(id, rest.slice(1), process.cwd()));
   process.stdout.write(
     json ? `${JSON.stringify({ command: id, exitCode: result.exitCode, ok: result.ok, output: result.output }, void 0, 2)}

package/dist/index.d.ts

@@ -44,6 +44,8 @@ type CommandKind = 'read' | 'write';
  */
 type Command = {
     description: string;
+    /** The command's own `--help`: one line of syntax the door prints and refusals quote. */
+    usage?: string;
     id: string;
     inputSchema: ZodType;
     kind: CommandKind;
@@ -83,6 +85,8 @@ type InitInput = {
     cwd: string;
     presets: string[];
     runtime?: Runtime;
+    /** Flags the door did not recognise — refused by name rather than read as "no preset". */
+    unknownFlags?: string[];
 };
 declare const runtimeOf: (cwd: string) => Runtime | undefined;
 declare const countersFor: (runtime: Runtime) => Record<string, unknown>[];
@@ -99,12 +103,7 @@ type Rules = {
  * listed — `optionsNeededBy` asks the rules themselves.
  */
 declare const rulesFor: (presets: string[], answers?: Record<string, unknown[]>) => Rules;
-/**
- * The four files an existing repo needs before any gate can run, written once and never over the
- * top of anything. A tool that overwrote a config would be a tool nobody dares run twice, and the
- * one thing worse than a repo without a baseline is a repo whose baseline was silently replaced.
- */
-declare const runInit: ({ brand, cwd, presets, runtime, }: InitInput) => Promise<CommandResult>;
+declare const runInit: ({ brand, cwd, presets, runtime, unknownFlags, }: InitInput) => Promise<CommandResult>;
 
 /**
  * Which rules refuse to run without options, MEASURED by asking them.

package/dist/index.js

@@ -29,7 +29,7 @@ import {
   runSync,
   runtimeOf,
   skillsIn
-} from "./chunk-U3TBZWD3.js";
+} from "./chunk-RKOVR7WT.js";
 export {
   AGENTS_FILE,
   COMMANDS,

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@geonosis/cli",
-  "version": "1.0.0",
+  "version": "1.1.0",
+  "types": "./dist/index.d.ts",
   "description": "One declarative command registry over every geonosis bin — the CLI door onto it, plus init, sync, discover and skills.",
   "keywords": [
     "cli",
@@ -24,7 +25,10 @@
     "geonosis": "bin/geonosis.mjs"
   },
   "exports": {
-    ".": "./dist/index.js"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
   },
   "files": [
     "bin",
@@ -32,18 +36,19 @@
   ],
   "dependencies": {
     "zod": "^4.0.0",
-    "@geonosis/doctor": "1.0.0",
-    "@geonosis/lint-parity": "1.0.0",
-    "@geonosis/observability": "1.0.0",
-    "@geonosis/ledger": "1.0.0",
-    "@geonosis/oxlint-plugin-biological-architecture": "1.0.0",
-    "@geonosis/testbed": "1.0.0",
-    "@geonosis/verify": "1.0.0",
-    "@geonosis/verify-arch": "1.0.0",
-    "@geonosis/ratchet": "1.0.0",
-    "@geonosis/review": "1.0.0",
-    "@geonosis/visual-diff": "1.0.0",
-    "@geonosis/walk": "1.0.0"
+    "@geonosis/lint-parity": "1.1.0",
+    "@geonosis/observability": "1.1.0",
+    "@geonosis/doctor": "1.1.0",
+    "@geonosis/oxlint-plugin-biological-architecture": "1.1.0",
+    "@geonosis/ledger": "1.1.0",
+    "@geonosis/ratchet": "1.1.0",
+    "@geonosis/verify": "1.1.0",
+    "@geonosis/testbed": "1.1.0",
+    "@geonosis/release": "1.1.0",
+    "@geonosis/review": "1.1.0",
+    "@geonosis/visual-diff": "1.1.0",
+    "@geonosis/verify-arch": "1.1.0",
+    "@geonosis/walk": "1.1.0"
   },
   "peerDependencies": {
     "oxlint": ">=1.77"