create-geonosis 2.0.0 → 2.2.0

package/README.md

@@ -87,8 +87,8 @@ Two things are compared and two are deliberately not:
 - a **value** — never. `doctor.corpus` pointing somewhere else is that repo's answer, not a drift.
 
 **The workspaces are out of the question.** `packages/core/src/money.ts` is a sample that makes a
-new repo compile, not a shape a repo must hold. Measured over dielime: including them turned 24 real
-findings into 52, thirty of which were about a `packages/ui` that repo does not have.
+new repo compile, not a shape a repo must hold. Measured over a consumer: including them turned 24 real
+findings into 52, thirty of them about a sample workspace that repo does not have.
 
 Over dielime — a repo scaffolded before D-054 moved the law — it reads 24, among them `LAW.md`,
 `geonosis.json → law.file`, three architecture rules the plugin has since added, and

package/dist/{chunk-PRX7MKFZ.js → chunk-IQS75GD7.js}

@@ -24,13 +24,13 @@ var SEARCH = {
     "import { pgFtsSearchIndex, type SearchIndex, type SearchProjections } from '@geonosis/search'"
   ],
   name: "@geonosis/search",
-  version: "0.1.1"
+  version: "0.3.3"
 };
 var DOMAINS = [SEARCH];
 var DOMAIN_NAMES = DOMAINS.map((one) => one.field);
 var FOUNDATIONS = [
-  { at: "foundations/db", name: "@geonosis/db", version: "0.2.0" },
-  { at: "foundations/events", name: "@geonosis/events", version: "1.5.0" }
+  { at: "foundations/db", name: "@geonosis/db", version: "0.5.1" },
+  { at: "foundations/events", name: "@geonosis/events", version: "1.5.2" }
 ];
 var domainsNamed = (named) => named.map((one) => {
   const found = DOMAINS.find((domain) => domain.field === one);
@@ -116,12 +116,15 @@ import { basename, resolve } from "path";
 var RUNTIMES = ["bun", "pnpm"];
 var BACKENDS = ["medusa", "none", "sagaflow-cf"];
 var UIS = ["atoms-only", "none", "tiered-shadcn"];
+var MEDUSA_RANGE = "^2.19.0";
+var MEDUSA_PACKAGES = ["@medusajs/framework", "@medusajs/medusa"];
 var VALUED = /* @__PURE__ */ new Set([
   "--backend",
   "--brand",
   "--domains",
   "--kit",
   "--marketplace",
+  "--medusa",
   "--runtime",
   "--themekit",
   "--ui"
@@ -186,6 +189,7 @@ var parseAnswers = (argv, cwd) => {
     domains,
     ...flags["--kit"] === void 0 ? {} : { kit: resolve(cwd, flags["--kit"]) },
     ...flags["--marketplace"] === void 0 ? {} : { marketplace: flags["--marketplace"] },
+    ...flags["--medusa"] === void 0 ? {} : { medusa: flags["--medusa"] },
     name,
     runtime: choose("--runtime", flags["--runtime"], RUNTIMES),
     scope: scopeOf(name),
@@ -372,6 +376,11 @@ var workspacesOf = (answers) => {
       dir: "packages/backend",
       mayDependOn: ["core"],
       name: `${scope}/backend`,
+      ...answers.backend === "medusa" ? {
+        packages: Object.fromEntries(
+          MEDUSA_PACKAGES.map((one) => [one, answers.medusa ?? MEDUSA_RANGE])
+        )
+      } : {},
       sources: {
         "src/handler.ts": HANDLER,
         "src/handler.test.ts": BACKEND_TEST,
@@ -397,7 +406,7 @@ var workspacesOf = (answers) => {
 
 // src/files.ts
 import { countersFor, LAW_SOURCE, rulesFor, tiersFor } from "@geonosis/cli";
-var VERSION = "2.0.0";
+var VERSION = "2.2.0";
 var SCHEMA = "https://raw.githubusercontent.com/oxc-project/oxc/main/npm/oxlint/configuration_schema.json";
 var CATALOG = {
   "@types/node": "^24.3.0",
@@ -497,9 +506,15 @@ var workspaceManifest = (workspace, answers, workspaces) => {
           return found === void 0 || found.name === workspace.name ? [] : [[found.name, "workspace:*"]];
         })
       ),
-      // With --kit the floors are linked from a workspace AFTER the install, and the manifest is
-      // rewritten to say so — the same reason the root's kit versions are left out.
-      ...answers.kit === void 0 ? workspace.packages : {}
+      // With --kit the FLOORS are linked from a workspace AFTER the install, and the manifest is
+      // rewritten to say so — the same reason the root's kit versions are left out. Everything else
+      // a workspace declares is third-party and stays: an engine dropped here is an engine the
+      // doctor cannot find, and a rule that presumes it then reads as a rule with no finding.
+      ...Object.fromEntries(
+        Object.entries(workspace.packages ?? {}).filter(
+          ([name]) => answers.kit === void 0 || !name.startsWith("@geonosis/")
+        )
+      )
     }
   });
 };
@@ -512,12 +527,61 @@ var kitDependencies = (answers) => ({
   "@geonosis/verify": `^${VERSION}`,
   ...answers.themekit === void 0 ? {} : { "@geonosis/themekit": `^${VERSION}` }
 });
+var GRAPH_SYNCS = [
+  { target: "turbo", write: "turbo.json" },
+  { target: "layer-walls", write: ".oxlintrc.json" }
+];
+var graphScript = GRAPH_SYNCS.map(
+  ({ target, write: write2 }) => `geonosis-ledger sync --target ${target} --write ${write2}`
+).join(" && ");
+var HOOK_INSTALLER = "scripts/install-hooks.mjs";
+var hookInstaller = () => [
+  "import { spawnSync } from 'node:child_process'",
+  "import { existsSync, lstatSync } from 'node:fs'",
+  "import { join, resolve } from 'node:path'",
+  "",
+  "const git = (...args) => {",
+  "  const done = spawnSync('git', args, { encoding: 'utf8' })",
+  "",
+  "  return done.status === 0 ? done.stdout.trim() : undefined",
+  "}",
+  "",
+  "const say = (line) => process.stdout.write(`install-hooks: ${line}\n`)",
+  "",
+  "const common = git('rev-parse', '--path-format=absolute', '--git-common-dir')",
+  "if (common === undefined) {",
+  "  say('git says nothing about this directory, so there is no hooks path to install into.')",
+  "  process.exit(0)",
+  "}",
+  "",
+  "// A worktree's own .git is a FILE; the hooks it would install into belong to the checkout the",
+  "// common dir names, and writing them from here changes the tree somebody else is in.",
+  "const here = resolve(process.cwd(), '.git')",
+  "if (existsSync(here) && lstatSync(here).isFile() && resolve(common) !== here) {",
+  "  say(`this is a git worktree and its hooks path is shared with ${common} \u2014 install them there instead.`)",
+  "  process.exit(0)",
+  "}",
+  "",
+  "const lefthook = join(process.cwd(), 'node_modules/.bin/lefthook')",
+  "if (!existsSync(lefthook)) {",
+  "  say('lefthook is not installed here yet, so no hook was written.')",
+  "  process.exit(0)",
+  "}",
+  "",
+  "const done = spawnSync(lefthook, ['install'], { stdio: 'inherit' })",
+  "process.exit(done.status ?? 0)",
+  ""
+].join("\n");
 var rootScripts = ({ runtime }) => ({
   doctor: "geonosis-doctor",
+  prepare: `node ${HOOK_INSTALLER}`,
   "format:check": "oxfmt --config .oxfmtrc.json --check .",
   format: "oxfmt --config .oxfmtrc.json .",
   lint: "oxlint --config .oxlintrc.json .",
+  // A counter nothing has ever seen read its own planted finding has not been shown to measure.
+  prove: "geonosis-ratchet --prove",
   ratchet: "geonosis-ratchet",
+  "sync:graph": graphScript,
   sync: "geonosis sync",
   test: everyWorkspace(runtime, "test"),
   typecheck: everyWorkspace(runtime, "typecheck"),
@@ -799,6 +863,7 @@ var filesFor = (answers) => {
       )
     ),
     "skills-lock.json": json({ skills: {}, version: 1 }),
+    [HOOK_INSTALLER]: hookInstaller(),
     "lefthook.yml": [
       "# Staged scope only, so a commit never waits on a file it did not touch. When one fires, fix",
       "# or delete the code \u2014 never downgrade the rule to get past it.",
@@ -1010,8 +1075,9 @@ exec node "${join2(from, entry)}" "$@"
       )
     )
   );
+  const rootDeclares = new Set(Object.keys(kitDependencies(answers)));
   for (const [name, from] of at) {
-    if (!owned.has(name)) {
+    if (!owned.has(name) && rootDeclares.has(name)) {
       manifest.devDependencies = { ...manifest.devDependencies, [name]: `link:${from}` };
     }
   }
@@ -1042,22 +1108,17 @@ var finish = ({ answers, install }) => {
   }
   const ledger = join2(answers.dir, "node_modules/.bin/geonosis-ledger");
   if (existsSync2(ledger)) {
-    steps.push(
-      run("sync the edges table into turbo.json", answers.dir, ledger, [
-        "sync",
-        "--target",
-        "turbo",
-        "--write",
-        "turbo.json"
-      ]),
-      run("sync the edges table into .oxlintrc.json", answers.dir, ledger, [
-        "sync",
-        "--target",
-        "layer-walls",
-        "--write",
-        ".oxlintrc.json"
-      ])
-    );
+    for (const { target, write: into } of GRAPH_SYNCS) {
+      steps.push(
+        run(`sync the edges table into ${into}`, answers.dir, ledger, [
+          "sync",
+          "--target",
+          target,
+          "--write",
+          into
+        ])
+      );
+    }
   }
   const oxfmt = join2(answers.dir, "node_modules/.bin/oxfmt");
   if (existsSync2(oxfmt)) {
@@ -1078,6 +1139,7 @@ export {
   RUNTIMES,
   BACKENDS,
   UIS,
+  MEDUSA_RANGE,
   parseAnswers,
   wantsInstall,
   CORPUS_DIR,

package/dist/create-geonosis-cli.js

@@ -1,5 +1,6 @@
 import {
   DOMAIN_NAMES,
+  MEDUSA_RANGE,
   PLATFORM_FILE,
   checkScaffold,
   describeDrift,
@@ -7,11 +8,12 @@ import {
   parseAnswers,
   wantsInstall,
   writeScaffold
-} from "./chunk-PRX7MKFZ.js";
+} from "./chunk-IQS75GD7.js";
 
 // src/create-geonosis-cli.ts
 import { existsSync } from "fs";
 var USAGE = `create-geonosis <dir> --runtime pnpm|bun --backend medusa|sagaflow-cf|none --ui tiered-shadcn|atoms-only|none
+                     [--medusa <range>]
                 [--domains <a,b>] [--brand <name>] [--themekit <name>] [--marketplace <path>] [--kit <path>] [--no-install]
                 [--check]
 
@@ -27,6 +29,11 @@ default borrowed from another repo would be that repo's stack hardcoded into thi
   --domains      the domains this repo composes \u2014 ${DOMAIN_NAMES.join(", ")}. Each one writes its
                  store into the app's ${PLATFORM_FILE}: the composition root, in two lifetimes, with
                  the tenant session opened before any store is built. A name nothing ships is refused.
+  --medusa <range>
+                 the Medusa a --backend medusa tree declares. Defaults to ${MEDUSA_RANGE}, the version
+                 the one Medusa consumer of this kit runs (measured 2026-09-02): the Medusa rules
+                 the scaffold turns on presume the engine, and a tree that enables them while
+                 declaring no @medusajs/* earns nine doctor WARNs for rules with no finding.
   --kit <path>   read the kit from a workspace instead of the registry. A proof aid: it symlinks the
                  packages after the install and rewrites the manifest to say so.
   --no-install   write the files and stop. The gates cannot run until the two "geonosis sync

package/dist/index.d.ts

@@ -13,6 +13,8 @@ type Answers = {
     /** The kit read from a workspace instead of the registry — a proof aid, never the default. */
     kit?: string;
     marketplace?: string;
+    /** The Medusa range a `--backend medusa` tree declares. `MEDUSA_RANGE` unless one is named. */
+    medusa?: string;
     name: string;
     runtime: Runtime;
     scope: string;
@@ -129,7 +131,7 @@ declare const corpusFor: (answers: Answers, workspaces: Workspace[]) => Record<s
 declare const filesFor: (answers: Answers) => Record<string, string>;
 declare const presetsChosenBy: (answers: Answers) => string[];
 
-/** The kit packages a scaffolded repo declares, and therefore the ones `--kit` has to link. */
+/** The kit packages a scaffolded repo RESOLVES, and therefore the ones `--kit` has to link. */
 declare const KIT_PACKAGES: string[];
 /**
  * Every file, and never over the top of anything. A scaffold that overwrote a tree is a scaffold

package/dist/index.js

@@ -23,7 +23,7 @@ import {
   wantsInstall,
   workspacesOf,
   writeScaffold
-} from "./chunk-PRX7MKFZ.js";
+} from "./chunk-IQS75GD7.js";
 export {
   BACKENDS,
   CORPUS_DIR,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-geonosis",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "types": "./dist/index.d.ts",
   "description": "Scaffold a microcompany repo that passes its own geonosis gates on day one.",
   "keywords": [
@@ -34,7 +34,7 @@
     "dist"
   ],
   "dependencies": {
-    "@geonosis/cli": "2.0.0"
+    "@geonosis/cli": "2.2.0"
   },
   "engines": {
     "node": ">=22"