partweave 0.3.0 → 0.3.2

package/LICENSE

@@ -1,21 +1,201 @@
-MIT License
-
-Copyright (c) 2026 Agrim Sigdel
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Agrim Sigdel
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,16 @@
+partweave
+Copyright 2026 Agrim Sigdel
+
+Created and maintained by Agrim Sigdel <sigdelagrim35@gmail.com>.
+Source: https://github.com/Agrim-Sigdel/partweave
+
+This product is licensed under the Apache License, Version 2.0 (see LICENSE).
+
+"partweave" is a trademark of Agrim Sigdel. The Apache License grants no
+trademark rights (see Section 6): forks and derivative works must not use the
+"partweave" name, logo, or branding to identify themselves or to market a
+derived product. You may of course state, factually, that your work is derived
+from or built on partweave.
+
+Per Section 4(d) of the Apache License, this NOTICE (and the attribution above)
+must be reproduced in any redistribution or derivative work.

package/README.md

@@ -1,5 +1,10 @@
 # partweave — a modular full-stack scaffolder
 
+[![npm version](https://img.shields.io/npm/v/partweave.svg)](https://www.npmjs.com/package/partweave)
+[![CI](https://github.com/Agrim-Sigdel/partweave/actions/workflows/ci.yml/badge.svg)](https://github.com/Agrim-Sigdel/partweave/actions/workflows/ci.yml)
+[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)
+[![Node](https://img.shields.io/node/v/partweave.svg)](https://www.npmjs.com/package/partweave)
+
 Generate new projects that contain **only the parts you pick** — a Django server, a
 Next.js web app, an Expo mobile app, and cross-cutting components (auth, storage, docker,
 CI) — all wired together.
@@ -113,6 +118,19 @@ pnpm --filter partweave typecheck  # typecheck the engine
 The generator locates the catalog by walking up from the CLI to find `modules/`.
 Override with `PARTWEAVE_MODULES_DIR=/path/to/modules`.
 
+See **[CONTRIBUTING.md](CONTRIBUTING.md)** for the full setup, project layout, the checks CI
+enforces, and how to add a component.
+
+## Contributing
+
+Contributions are welcome! The highest-leverage change is usually **a new component** — a
+folder under `modules/` with a `module.json`, no engine changes required.
+
+- Read [CONTRIBUTING.md](CONTRIBUTING.md) and the [module contract](docs/module-contract.md).
+- Be kind — this project follows a [Code of Conduct](CODE_OF_CONDUCT.md).
+- Found a security issue? See [SECURITY.md](SECURITY.md) — please report it privately.
+- Release notes live in [CHANGELOG.md](CHANGELOG.md).
+
 ## Releasing
 
 The CLI is published to npm as [`partweave`](https://www.npmjs.com/package/partweave).
@@ -124,6 +142,23 @@ npm version patch --workspace partweave   # bump version + create a matching git
 git push --follow-tags                       # push the tag → CI publishes to npm
 ```
 
-> One-time setup: add an `NPM_TOKEN` (an npm "Automation" access token) to the repo's
-> **Settings → Secrets and variables → Actions**. The `prepack` script copies `modules/` +
-> README + LICENSE into the package, so `npm publish` ships a self-contained CLI.
+> The `prepack` script copies `modules/`, README, LICENSE + NOTICE into the package, so
+> `npm publish` ships a self-contained CLI. Auth is via npm Trusted Publishing (OIDC) —
+> no `NPM_TOKEN` secret is needed (see [`publish.yml`](.github/workflows/publish.yml)).
+
+## Author
+
+Created and maintained by **Agrim Sigdel** — <sigdelagrim35@gmail.com>.
+
+If you build something with partweave, a mention or a link back is always appreciated.
+
+## License
+
+Licensed under the [Apache License 2.0](LICENSE) — permissive and free for commercial use.
+
+- **Projects you generate are yours.** partweave copies template code into your project; you
+  own that output and carry no obligation back to this repo.
+- **Attribution (Apache §4d):** redistributing partweave itself — or a fork of it — must keep
+  the [`LICENSE`](LICENSE) and [`NOTICE`](NOTICE) files intact.
+- **Trademark (Apache §6):** the **partweave** name and branding are reserved. You may fork
+  and even sell the code, but not market a derivative under the "partweave" name.

package/dist/{chunk-XB7H4V4J.js → chunk-Y5FZVVV6.js}

@@ -4,8 +4,80 @@
 import { spawnSync as spawnSync3 } from "child_process";
 import { existsSync as existsSync5, readdirSync as readdirSync3 } from "fs";
 import { basename, resolve as resolve3 } from "path";
-import { confirm as confirm3, intro, isCancel as isCancel3, log as log2, note, outro, spinner as spinner2 } from "@clack/prompts";
-import pc2 from "picocolors";
+import { confirm as confirm3, intro, isCancel as isCancel3, log as log2, note as note2, outro, spinner as spinner2 } from "@clack/prompts";
+import pc3 from "picocolors";
+
+// src/banner.ts
+import pc from "picocolors";
+var WEAVE = ["\u2588", "\u2593"];
+var weaveCell = (row, col) => WEAVE[(row + col) % 2];
+var GLYPHS = {
+  p: ["\u2588\u2588\u2588 ", "\u2588  \u2588", "\u2588\u2588\u2588 ", "\u2588   ", "\u2588   "],
+  a: [" \u2588\u2588 ", "\u2588  \u2588", "\u2588\u2588\u2588\u2588", "\u2588  \u2588", "\u2588  \u2588"],
+  r: ["\u2588\u2588\u2588 ", "\u2588  \u2588", "\u2588\u2588\u2588 ", "\u2588 \u2588 ", "\u2588  \u2588"],
+  t: ["\u2588\u2588\u2588\u2588\u2588", "  \u2588  ", "  \u2588  ", "  \u2588  ", "  \u2588  "],
+  w: ["\u2588   \u2588", "\u2588   \u2588", "\u2588 \u2588 \u2588", "\u2588\u2588 \u2588\u2588", "\u2588   \u2588"],
+  e: ["\u2588\u2588\u2588\u2588", "\u2588   ", "\u2588\u2588\u2588 ", "\u2588   ", "\u2588\u2588\u2588\u2588"],
+  v: ["\u2588   \u2588", "\u2588   \u2588", "\u2588   \u2588", " \u2588 \u2588 ", "  \u2588  "]
+};
+var WORD = "partweave";
+var HEIGHT = 5;
+function colorMode() {
+  if (process.env.NO_COLOR || !process.stdout.isTTY) return "none";
+  if (/truecolor|24bit/i.test(process.env.COLORTERM ?? "")) return "truecolor";
+  return "basic";
+}
+var STOPS = [
+  [124, 92, 246],
+  // violet
+  [190, 75, 219],
+  // magenta
+  [232, 74, 143],
+  // pink
+  [225, 51, 74],
+  // red
+  [248, 96, 76]
+  // coral / bright red
+];
+function gradient(t) {
+  const n = STOPS.length - 1;
+  const scaled = Math.min(Math.max(t, 0), 1) * n;
+  const i = Math.min(Math.floor(scaled), n - 1);
+  const local = scaled - i;
+  const [a, b] = [STOPS[i], STOPS[i + 1]];
+  return [0, 1, 2].map((k) => Math.round(a[k] + (b[k] - a[k]) * local));
+}
+function paint(ch, t, mode) {
+  if (ch === " ") return " ";
+  if (mode === "none") return ch;
+  if (mode === "basic") return t < 0.5 ? pc.magentaBright(ch) : pc.redBright(ch);
+  const [r, g, b] = gradient(t);
+  return `\x1B[38;2;${r};${g};${b}m${ch}\x1B[39m`;
+}
+function compact(mode) {
+  return "  " + (mode === "none" ? "partweave" : word2tone("partweave", mode));
+}
+function word2tone(word, mode) {
+  if (mode === "none") return word;
+  return [...word].map((ch, i) => paint(ch, word.length > 1 ? i / (word.length - 1) : 0, mode)).join("");
+}
+function renderBanner() {
+  const mode = colorMode();
+  if (!process.stdout.isTTY) return compact(mode);
+  const cols = process.stdout.columns ?? 80;
+  const rows = [];
+  for (let r = 0; r < HEIGHT; r++) {
+    rows.push([...WORD].map((ch) => GLYPHS[ch]?.[r] ?? "").join(" "));
+  }
+  const width = rows[0].length;
+  if (width + 2 > cols) return compact(mode);
+  const painted = rows.map(
+    (row, r) => "  " + [...row].map(
+      (ch, c) => ch === " " ? " " : paint(weaveCell(r, c), width > 1 ? c / (width - 1) : 0, mode)
+    ).join("")
+  );
+  return painted.join("\n");
+}
 
 // src/compose.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
@@ -26,14 +98,19 @@ function injectAtAnchor(content, anchorId, lines) {
     throw new Error(`Anchor <partweave:${anchorId}> not found in target file`);
   }
   const indent = match[1] ?? "";
-  const existing = new Set(
-    content.split("\n").map((l) => l.trim()).filter(Boolean)
-  );
-  const toInsert = lines.filter((l) => !existing.has(l.trim()));
+  const before = content.slice(0, match.index).split("\n");
+  if (before[before.length - 1] === "") before.pop();
+  const block = /* @__PURE__ */ new Set();
+  for (let i = before.length - 1; i >= 0; i--) {
+    const trimmed = before[i].trim();
+    if (trimmed === "") break;
+    block.add(trimmed);
+  }
+  const toInsert = lines.filter((l) => !block.has(l.trim()));
   if (toInsert.length === 0) return { content, inserted: 0 };
-  const block = toInsert.map((l) => l ? indent + l : "").join("\n") + "\n";
+  const insertion = toInsert.map((l) => l ? indent + l : "").join("\n") + "\n";
   const anchorStart = match.index;
-  const newContent = content.slice(0, anchorStart) + block + content.slice(anchorStart);
+  const newContent = content.slice(0, anchorStart) + insertion + content.slice(anchorStart);
   return { content: newContent, inserted: toInsert.length };
 }
 function parseDep(dep) {
@@ -50,34 +127,35 @@ function normalizeWorkspaceDeps(deps, workspaceRange) {
     return dep;
   });
 }
+function higherVersion(a, b) {
+  const core = (v) => {
+    const m = v.match(/(\d+)(?:\.(\d+))?(?:\.(\d+))?/);
+    if (!m || m[1] === void 0) return null;
+    return [m[1], m[2], m[3]].map((n) => n === void 0 ? 0 : Number(n));
+  };
+  const ca = core(a);
+  const cb = core(b);
+  if (!ca || !cb) return a;
+  for (let i = 0; i < 3; i++) {
+    if (ca[i] !== cb[i]) return ca[i] > cb[i] ? a : b;
+  }
+  return a;
+}
 function mergePackageJsonDeps(pkgJson, deps, field = "dependencies") {
   if (deps.length === 0) return pkgJson;
   const pkg = JSON.parse(pkgJson);
   const bucket = pkg[field] ?? {};
   for (const dep of deps) {
     const { name, version } = parseDep(dep);
-    if (!(name in bucket)) bucket[name] = version;
+    bucket[name] = name in bucket ? higherVersion(bucket[name], version) : version;
   }
   pkg[field] = Object.fromEntries(
     Object.entries(bucket).sort(([a], [b]) => a.localeCompare(b))
   );
   return JSON.stringify(pkg, null, 2) + "\n";
 }
-function appendEnv(envBody, entries, heading) {
-  const keys = Object.keys(entries);
-  if (keys.length === 0) return envBody;
-  const present = new Set(
-    envBody.split("\n").map((l) => l.split("=")[0]?.trim()).filter(Boolean)
-  );
-  const missing = keys.filter((k) => !present.has(k));
-  if (missing.length === 0) return envBody;
-  let out = envBody.replace(/\n*$/, "\n");
-  if (heading) out += `
-# ${heading}
-`;
-  for (const k of missing) out += `${k}=${entries[k]}
-`;
-  return out;
+function pyDepName(dep) {
+  return dep.trim().replace(/^["']|["']$/g, "").split(/[<>=!~;[\s]/)[0].trim().toLowerCase();
 }
 
 // src/fsutil.ts
@@ -188,7 +266,7 @@ function jsPmProfile(name) {
       runAll: (script) => `npm run ${script} --workspaces --if-present`,
       packageManagerField: null,
       usesWorkspaceYaml: false,
-      needsHoistNpmrc: false,
+      needsHoisting: false,
       workspaceRange: "*"
     };
   }
@@ -199,7 +277,7 @@ function jsPmProfile(name) {
     runAll: (script) => `pnpm -r ${script}`,
     packageManagerField: PNPM_VERSION,
     usesWorkspaceYaml: true,
-    needsHoistNpmrc: true,
+    needsHoisting: true,
     workspaceRange: "workspace:*"
   };
 }
@@ -277,7 +355,11 @@ function buildJsWorkspace(ctx) {
   if (!jsPmProfile(ctx.jsPm).usesWorkspaceYaml) return null;
   const members = jsMembers(ctx);
   if (members.length === 0) return null;
-  return "packages:\n" + members.map((m) => `  - "${m}"`).join("\n") + "\n";
+  let out = "packages:\n" + members.map((m) => `  - "${m}"`).join("\n") + "\n";
+  if (ctx.hasMobile && jsPmProfile(ctx.jsPm).needsHoisting) {
+    out += "\n# Expo / React Native need a flat node_modules layout.\nnodeLinker: hoisted\nshamefullyHoist: true\n";
+  }
+  return out;
 }
 function buildRootPackageJson(ctx, hasDocker) {
   const anyJs = ctx.hasWeb || ctx.hasMobile || ctx.hasShared;
@@ -307,6 +389,25 @@ function buildRootPackageJson(ctx, hasDocker) {
   if (anyJs && !pm.usesWorkspaceYaml) pkg.workspaces = jsMembers(ctx);
   pkg.scripts = scripts;
   if (anyJs) pkg.devDependencies = { typescript: "^5.7.2" };
+  if (anyJs && ctx.jsPm === "pnpm") {
+    const allowed = {};
+    if (ctx.hasMobile) {
+      Object.assign(allowed, {
+        abab: "2",
+        domexception: "4",
+        glob: "7",
+        inflight: "1",
+        rimraf: "3",
+        uuid: "7"
+      });
+    }
+    if (ctx.hasWeb || ctx.hasMobile) {
+      allowed["whatwg-encoding"] = ctx.hasWeb && ctx.hasMobile ? "2 || 3" : ctx.hasWeb ? "3" : "2";
+    }
+    if (Object.keys(allowed).length > 0) {
+      pkg.pnpm = { allowedDeprecatedVersions: allowed };
+    }
+  }
   return JSON.stringify(pkg, null, 2) + "\n";
 }
 function buildTaskRunner(ctx, hasDocker) {
@@ -525,55 +626,82 @@ function buildTsconfigBase(ctx) {
     2
   ) + "\n";
 }
-function buildNpmrc(ctx) {
-  if (!ctx.hasMobile) return null;
-  if (!jsPmProfile(ctx.jsPm).needsHoistNpmrc) return null;
-  return [
-    "# Expo / React Native need a flat node_modules layout.",
-    "node-linker=hoisted",
-    "shamefully-hoist=true",
-    ""
-  ].join("\n");
-}
-function buildBaseEnv(ctx) {
-  const lines = [
-    "# Environment for " + ctx.projectName,
-    "#",
-    "# Every value the app reads from the environment lives here. Copy this file to",
-    "# `.env` and adjust as needed \u2014 the server, web/mobile apps, and each component",
-    "# read their configuration from it, so there's nothing to configure elsewhere.",
-    ""
-  ];
+function envScopeFor(key) {
+  if (key.startsWith("POSTGRES_")) return "root";
+  if (key.startsWith("NEXT_PUBLIC_")) return "web";
+  if (key.startsWith("EXPO_PUBLIC_")) return "mobile";
+  return "server";
+}
+function buildEnvFiles(ctx, modules) {
+  const componentBlocks = { server: [], web: [], mobile: [], root: [] };
+  for (const m of modules) {
+    const byScope = { server: [], web: [], mobile: [], root: [] };
+    for (const [key, value] of Object.entries(m.manifest.env)) {
+      byScope[envScopeFor(key)].push(`${key}=${value}`);
+    }
+    for (const scope of ["server", "web", "mobile", "root"]) {
+      if (byScope[scope].length === 0) continue;
+      componentBlocks[scope].push(`# ${m.manifest.title}`, ...byScope[scope], "");
+    }
+  }
+  const render2 = (lines) => lines.join("\n").replace(/\n*$/, "\n");
+  const files = [];
   if (ctx.hasServer) {
-    lines.push(
-      "# --- server ---",
-      "# Unique per-project key generated at scaffold time; signs sessions and JWTs.",
-      "# Use a separate secret value in production (and never commit the real one).",
-      `DJANGO_SECRET_KEY=${randomBytes(48).toString("base64url")}`,
+    const serverBase = (secretLine) => [
+      `# ${ctx.projectName} \u2014 server (Django). Read by apps/server.`,
+      "# `.env` is gitignored; keep real secrets here, not in `.env.example`.",
+      "",
+      "# Unique per-project key; signs sessions and JWTs.",
+      secretLine,
       "DJANGO_DEBUG=true",
-      "DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1",
-      "# Web origins allowed to call the API when DEBUG is off (comma-separated).",
-      "# In DEBUG every origin is allowed, so this is only needed in production.",
+      "# Leave DJANGO_ALLOWED_HOSTS unset in dev: with DEBUG on, any host is allowed,",
+      "# so a phone/simulator can reach the server over your LAN (e.g. 192.168.x.y).",
+      "# Set it (comma-separated) in production, e.g. DJANGO_ALLOWED_HOSTS=api.example.com",
+      "# Origins allowed to call the API when DEBUG is off (comma-separated).",
       "# DJANGO_CORS_ALLOWED_ORIGINS=https://app.example.com",
-      "# DATABASE_URL \u2014 the server uses local SQLite by default; set a database URL",
-      "# to switch (the `db-postgres` component sets a Postgres DSN here for you).",
+      "# DATABASE_URL \u2014 unset uses local SQLite; the db-postgres component sets a Postgres DSN.",
       ""
-    );
+    ];
+    files.push({
+      dir: "apps/server",
+      example: render2([...serverBase("DJANGO_SECRET_KEY=replace-with-a-generated-secret"), ...componentBlocks.server]),
+      env: render2([...serverBase(`DJANGO_SECRET_KEY=${randomBytes(48).toString("base64url")}`), ...componentBlocks.server])
+    });
   }
   if (ctx.hasWeb) {
-    lines.push("# --- web ---", "NEXT_PUBLIC_API_URL=http://localhost:8000", "");
+    const web = [
+      `# ${ctx.projectName} \u2014 web (Next.js). Read by apps/web.`,
+      "# Only NEXT_PUBLIC_* is exposed to the browser.",
+      "NEXT_PUBLIC_API_URL=http://localhost:8000",
+      "",
+      ...componentBlocks.web
+    ];
+    const body = render2(web);
+    files.push({ dir: "apps/web", example: body, env: body });
   }
   if (ctx.hasMobile) {
-    lines.push(
-      "# --- mobile (Expo) ---",
-      "# In dev the app auto-detects your machine's LAN IP so a physical device can",
-      "# reach the server \u2014 leave this unset. Set it for simulators or production,",
-      "# in the environment or apps/mobile/.env (Expo reads EXPO_PUBLIC_* from there).",
+    const mobile = [
+      `# ${ctx.projectName} \u2014 mobile (Expo). Read by apps/mobile.`,
+      "# Only EXPO_PUBLIC_* is exposed to the app. In dev the app auto-detects your",
+      "# machine's LAN IP, so this can stay unset; set it for simulators/device/production.",
       "# EXPO_PUBLIC_API_URL=http://localhost:8000",
-      ""
-    );
-  }
-  return lines.join("\n");
+      "",
+      ...componentBlocks.mobile
+    ];
+    const body = render2(mobile);
+    files.push({ dir: "apps/mobile", example: body, env: body });
+  }
+  if (componentBlocks.root.length > 0) {
+    const root = [
+      `# ${ctx.projectName} \u2014 infrastructure. Read by docker compose (--env-file .env).`,
+      "# Keep these in sync with DATABASE_URL in apps/server/.env.",
+      "",
+      ...componentBlocks.root
+    ];
+    const body = render2(root);
+    files.push({ dir: "", example: body, env: body });
+  }
+  return files;
 }
 function jsCiSteps(ctx) {
   if (ctx.jsPm === "npm") {
@@ -665,7 +793,10 @@ ${jsCiSteps(ctx)}
 function buildReadme(ctx, modules) {
   const parts = [];
   parts.push(`# ${ctx.projectName}`, "", ctx.description, "");
-  parts.push("Generated with **partweave** \u2014 a modular full-stack scaffolder.", "");
+  parts.push(
+    "Generated with [partweave](https://github.com/Agrim-Sigdel/partweave) \u2014 a modular full-stack scaffolder by Agrim Sigdel.",
+    ""
+  );
   parts.push("## What's inside", "");
   if (ctx.hasServer) parts.push(`- \`apps/server\` \u2014 Django + DRF API (managed by \`${ctx.pyPm}\`)`);
   if (ctx.hasWeb) parts.push("- `apps/web` \u2014 Next.js web app");
@@ -695,7 +826,18 @@ function buildReadme(ctx, modules) {
   if (ctx.hasWeb) parts.push("npm run web      # http://localhost:3000");
   if (ctx.hasMobile) parts.push("npm run mobile   # Expo dev server");
   parts.push("```", "");
-  parts.push("Copy `.env.example` to `.env` and fill in values before running.", "");
+  parts.push("## Configuration", "");
+  parts.push(
+    "Each app reads its **own** env file, created for you (and gitignored) with a",
+    "committed `.env.example` template alongside it. Edit the `.env` to change values:",
+    ""
+  );
+  const envFiles = [];
+  if (ctx.hasServer) envFiles.push("- `apps/server/.env` \u2014 Django secret key, allowed hosts, `DATABASE_URL`");
+  if (ctx.hasWeb) envFiles.push("- `apps/web/.env` \u2014 `NEXT_PUBLIC_*` (browser-exposed)");
+  if (ctx.hasMobile) envFiles.push("- `apps/mobile/.env` \u2014 `EXPO_PUBLIC_*` (app-exposed)");
+  if (hasDocker) envFiles.push("- `.env` (root) \u2014 `POSTGRES_*` for the database container");
+  parts.push(...envFiles, "");
   return parts.join("\n");
 }
 function buildServerDockerfile(ctx) {
@@ -822,7 +964,7 @@ var ManifestSchema = z.object({
   conflicts: z.array(z.string()).default([]),
   /** capability/interface this module satisfies (for conflict grouping) */
   provides: z.string().optional(),
-  /** env keys → default value, appended to .env.example */
+  /** env keys → default value; routed to the consuming app's .env/.env.example by prefix (POSTGRES_→root, NEXT_PUBLIC_→web, EXPO_PUBLIC_→mobile, else server) */
   env: z.record(z.string()).default({}),
   /** per-target wiring (files are copied separately from wiring injection) */
   wiring: z.record(z.enum(TARGETS), WiringForTargetSchema).default({}),
@@ -912,6 +1054,25 @@ function injectIntoFiles(index, anchorId, lines, targetLabel) {
     writeFileSync2(file, next);
   }
 }
+function injectPyDeps(index, deps, targetLabel) {
+  const files = index.get("deps");
+  if (!files || files.length === 0) {
+    throw new Error(
+      `Wiring error: anchor <partweave:deps> not found in ${targetLabel}. Add the anchor to the _core/${targetLabel} scaffold.`
+    );
+  }
+  for (const file of files) {
+    const content = readFileSync2(file, "utf8");
+    const region = content.match(/dependencies\s*=\s*\[([\s\S]*?)\]/)?.[1] ?? content;
+    const present = new Set(
+      [...region.matchAll(/["']([^"']+)["']/g)].map((m) => pyDepName(m[1]))
+    );
+    const fresh = deps.filter((d) => !present.has(pyDepName(d)));
+    if (fresh.length === 0) continue;
+    const { content: next } = injectAtAnchor(content, "deps", fresh.map((d) => `"${d}",`));
+    writeFileSync2(file, next);
+  }
+}
 function applyWiring(outDir, targets, modules, workspaceRange) {
   const indexes = /* @__PURE__ */ new Map();
   for (const t of targets) {
@@ -929,8 +1090,7 @@ function applyWiring(outDir, targets, modules, workspaceRange) {
       }
       if (wiring.deps?.length) {
         if (t === "server") {
-          const lines = wiring.deps.map((d) => `"${d}",`);
-          injectIntoFiles(index, "deps", lines, t);
+          injectPyDeps(index, wiring.deps, t);
         } else {
           const pkgPath = join2(targetDir, "package.json");
           if (existsSync2(pkgPath)) {
@@ -945,14 +1105,19 @@ function applyWiring(outDir, targets, modules, workspaceRange) {
     }
   }
 }
-function applyEnv(outDir, modules) {
-  const envPath = join2(outDir, ".env.example");
-  let body = existsSync2(envPath) ? readFileSync2(envPath, "utf8") : "";
-  for (const mod of modules) {
-    if (Object.keys(mod.manifest.env).length === 0) continue;
-    body = appendEnv(body, mod.manifest.env, mod.manifest.title);
+function writeEnvFiles(outDir, ctx, modules) {
+  const written = [];
+  for (const file of buildEnvFiles(ctx, modules)) {
+    const exampleRel = join2(file.dir, ".env.example");
+    writeFileEnsured(join2(outDir, exampleRel), file.example);
+    written.push(exampleRel);
+    const envRel = join2(file.dir, ".env");
+    if (!existsSync2(join2(outDir, envRel))) {
+      writeFileEnsured(join2(outDir, envRel), file.env);
+      written.push(envRel);
+    }
   }
-  if (body) writeFileSync2(envPath, body);
+  return written;
 }
 function writeStructuralRootFiles(outDir, ctx, modules) {
   const workspace = buildJsWorkspace(ctx);
@@ -964,13 +1129,10 @@ function writeStructuralRootFiles(outDir, ctx, modules) {
   if (turbo) writeFileEnsured(join2(outDir, "turbo.json"), turbo);
   const tsbase = buildTsconfigBase(ctx);
   if (tsbase) writeFileEnsured(join2(outDir, "tsconfig.base.json"), tsbase);
-  const npmrc = buildNpmrc(ctx);
-  if (npmrc) writeFileEnsured(join2(outDir, ".npmrc"), npmrc);
   const pipSync = buildPipSyncScript(ctx);
   if (pipSync) writeFileEnsured(join2(outDir, "apps/server/scripts/sync_deps.py"), pipSync);
   writeFileEnsured(join2(outDir, "scripts/run.mjs"), buildTaskRunner(ctx, hasDocker));
   writeFileEnsured(join2(outDir, "Makefile"), buildMakefile(ctx, hasDocker));
-  writeFileEnsured(join2(outDir, ".env.example"), buildBaseEnv(ctx));
 }
 function compose(opts) {
   const { selection, registry, scaffoldTargets, wireTargets, rootFiles } = opts;
@@ -999,7 +1161,7 @@ function compose(opts) {
     }
   }
   applyWiring(outDir, wireTargets, modules, jsPmProfile(ctx.jsPm).workspaceRange);
-  applyEnv(outDir, modules);
+  if (rootFiles !== "none") written.push(...writeEnvFiles(outDir, ctx, modules));
   if (selection.modules.includes("ci")) {
     for (const [rel, content] of Object.entries(buildCiWorkflows(ctx))) {
       writeFileEnsured(join2(outDir, rel), content);
@@ -1195,11 +1357,28 @@ function resolveModules(registry, chosen) {
       provided.set(cap, id);
     }
   }
-  const order = [...resolved].sort((a, b) => {
-    const da = registry.require(a).manifest.requires.length;
-    const db = registry.require(b).manifest.requires.length;
-    return da - db || a.localeCompare(b);
-  });
+  const ids = [...resolved];
+  const deps = new Map(
+    ids.map((id) => [id, registry.require(id).manifest.requires.filter((r) => resolved.has(r))])
+  );
+  const indegree = new Map(ids.map((id) => [id, deps.get(id).length]));
+  const dependents = new Map(ids.map((id) => [id, []]));
+  for (const id of ids) for (const d of deps.get(id)) dependents.get(d).push(id);
+  const byId = (a, b) => a.localeCompare(b);
+  const ready = ids.filter((id) => indegree.get(id) === 0).sort(byId);
+  const order = [];
+  while (ready.length > 0) {
+    const id = ready.shift();
+    order.push(id);
+    for (const dep of dependents.get(id)) {
+      const n = indegree.get(dep) - 1;
+      indegree.set(dep, n);
+      if (n === 0) {
+        ready.push(dep);
+        ready.sort(byId);
+      }
+    }
+  }
   return { modules: order, autoAdded: [...autoAdded].sort() };
 }
 function validateApps(registry, moduleIds, apps) {
@@ -1228,12 +1407,13 @@ import {
   confirm as confirm2,
   isCancel as isCancel2,
   multiselect,
+  note,
   select,
   text
 } from "@clack/prompts";
-import pc from "picocolors";
+import pc2 from "picocolors";
 import { resolve as resolve2 } from "path";
-var MULTI_HINT = pc.dim("\u2191/\u2193 move \xB7 space toggle \xB7 a all \xB7 enter confirm");
+var MULTI_HINT = pc2.dim("\u2191/\u2193 move \xB7 space toggle \xB7 a all \xB7 enter confirm");
 function bail(v) {
   if (isCancel2(v)) {
     cancel("Cancelled.");
@@ -1313,9 +1493,19 @@ async function promptCreate(registry, defaults) {
     bail(pyRaw);
     pyPm = pyRaw;
   }
-  const ok = await confirm2({
-    message: `Scaffold ${apps.join(" + ")}${modules.length ? " with " + modules.join(", ") : ""} into ${outDir}?`
-  });
+  const row = (k, v) => `${pc2.dim(k.padEnd(8))} ${v}`;
+  const tooling = [anyJs ? jsPm : null, apps.includes("server") ? pyPm : null].filter(Boolean).join(pc2.dim(" \xB7 "));
+  note(
+    [
+      row("project", pc2.bold(projectName)),
+      row("where", outDir),
+      row("apps", apps.join(pc2.dim(" \xB7 "))),
+      row("add-ons", modules.length ? modules.join(pc2.dim(" \xB7 ")) : pc2.dim("none")),
+      row("tooling", tooling)
+    ].join("\n"),
+    "Review"
+  );
+  const ok = await confirm2({ message: "Scaffold this?" });
   bail(ok);
   if (!ok) {
     cancel("Cancelled.");
@@ -1325,6 +1515,21 @@ async function promptCreate(registry, defaults) {
 }
 
 // src/commands/create.ts
+function isInsideGitRepo(dir) {
+  return spawnSync3("git", ["rev-parse", "--is-inside-work-tree"], { cwd: dir, stdio: "ignore" }).status === 0;
+}
+function initGit(dir) {
+  if (spawnSync3("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" }).status !== 0) {
+    spawnSync3("git", ["init"], { cwd: dir, stdio: "ignore" });
+    spawnSync3("git", ["branch", "-M", "main"], { cwd: dir, stdio: "ignore" });
+  }
+  spawnSync3("git", ["add", "-A"], { cwd: dir, stdio: "ignore" });
+  const msg = "Initial commit (scaffolded with partweave)";
+  const opts = { cwd: dir, stdio: "ignore" };
+  if (spawnSync3("git", ["commit", "-m", msg], opts).status === 0) return true;
+  const id = ["-c", "user.name=partweave", "-c", "user.email=partweave@users.noreply.github.com"];
+  return spawnSync3("git", [...id, "commit", "-m", msg], opts).status === 0;
+}
 function resolvePm(value, allowed, detect, flag) {
   if (value === void 0) return detect();
   if (allowed.includes(value)) return value;
@@ -1346,7 +1551,8 @@ function defaultModules(registry, apps) {
   return registry.features().filter((m) => m.manifest.default).filter((m) => m.manifest.targets.some((t) => present.has(t))).filter((m) => m.manifest.requiresApps.every((a) => apps.includes(a))).map((m) => m.manifest.id);
 }
 async function runCreate(flags) {
-  intro(pc2.bgCyan(pc2.black(" partweave ")) + pc2.dim(" full-stack scaffolder"));
+  console.log("\n" + renderBanner());
+  intro(pc3.dim("full-stack scaffolder \u2014 pick the parts, own the code"));
   const registry = new Registry();
   const flagApps = appsFromFlags(flags);
   const nonInteractive = flags.yes === true || flagApps !== null;
@@ -1447,6 +1653,27 @@ async function runCreate(flags) {
       installed = false;
     }
   }
+  let gitInitialized = false;
+  const gitAvailable = hasCommand("git");
+  const alreadyRepo = gitAvailable && isInsideGitRepo(choices.outDir);
+  let wantGit;
+  if (flags.git !== void 0) {
+    wantGit = flags.git;
+  } else if (nonInteractive) {
+    wantGit = false;
+  } else {
+    const ans = await confirm3({ message: "Initialize a git repository?" });
+    wantGit = !isCancel3(ans) && ans === true;
+  }
+  if (wantGit && gitAvailable && !alreadyRepo) {
+    gitInitialized = initGit(choices.outDir);
+    if (gitInitialized) log2.success("Initialized a git repository (branch main, initial commit).");
+    else log2.warn("Couldn't create the initial git commit \u2014 the repo was left uninitialized.");
+  } else if (wantGit && !gitAvailable) {
+    log2.warn("git isn't installed \u2014 skipped repository initialization.");
+  } else if (wantGit && alreadyRepo) {
+    log2.info("Target is already inside a git repository \u2014 skipped `git init`.");
+  }
   const rel = basename(choices.outDir);
   const hasDocker = resolved.modules.includes("docker");
   const steps = [`cd ${rel}`];
@@ -1457,12 +1684,12 @@ async function runCreate(flags) {
   }
   if (choices.apps.includes("web")) steps.push("npm run web");
   if (choices.apps.includes("mobile")) steps.push("npm run mobile");
-  note(
-    steps.join("\n") + "\n\n" + pc2.dim("These work on macOS, Linux & Windows. On macOS/Linux, `make <task>` works too."),
+  note2(
+    steps.join("\n") + "\n\n" + pc3.dim("These work on macOS, Linux & Windows. On macOS/Linux, `make <task>` works too."),
     "Next steps"
   );
-  if (result.notes.length) note(result.notes.join("\n"), "Notes");
-  outro(pc2.green("Done."));
+  if (result.notes.length) note2(result.notes.join("\n"), "Notes");
+  outro(pc3.green("Done."));
 }
 
 export {
@@ -1482,4 +1709,4 @@ export {
   validateApps,
   runCreate
 };
-//# sourceMappingURL=chunk-XB7H4V4J.js.map
+//# sourceMappingURL=chunk-Y5FZVVV6.js.map

package/dist/create-bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCreate
-} from "./chunk-XB7H4V4J.js";
+} from "./chunk-Y5FZVVV6.js";
 
 // src/create-bin.ts
 import { Command } from "commander";

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   selectedTargets,
   validateApps,
   writeProjectManifest
-} from "./chunk-XB7H4V4J.js";
+} from "./chunk-Y5FZVVV6.js";
 
 // src/index.ts
 import { Command } from "commander";
@@ -178,7 +178,7 @@ async function runDoctor(flags) {
 function buildProgram() {
   const program = new Command();
   program.name("partweave").description("A modular full-stack scaffolder \u2014 pick parts, generate only that code.").version("0.1.0");
-  program.command("create", { isDefault: true }).argument("[name]", "project name").description("Scaffold a new project").option("-d, --dir <path>", "target directory").option("--server", "include the Django server").option("--no-server", "exclude the server").option("--web", "include the Next.js web app").option("--no-web", "exclude the web app").option("--mobile", "include the Expo mobile app").option("--no-mobile", "exclude the mobile app").option("--with <ids>", "comma-separated component ids (e.g. auth,docker,ci)").option("--js-pm <pm>", "JS package manager: pnpm | npm (default: auto-detect)").option("--py-pm <pm>", "Python package manager: uv | pip (default: auto-detect)").option("-y, --yes", "skip prompts; use flags/defaults").option("-f, --force", "write into a non-empty directory").option("--install", "install dependencies after scaffolding (default: ask, off with --yes)").action(async (name, opts) => {
+  program.command("create", { isDefault: true }).argument("[name]", "project name").description("Scaffold a new project").option("-d, --dir <path>", "target directory").option("--server", "include the Django server").option("--no-server", "exclude the server").option("--web", "include the Next.js web app").option("--no-web", "exclude the web app").option("--mobile", "include the Expo mobile app").option("--no-mobile", "exclude the mobile app").option("--with <ids>", "comma-separated component ids (e.g. auth,docker,ci)").option("--js-pm <pm>", "JS package manager: pnpm | npm (default: auto-detect)").option("--py-pm <pm>", "Python package manager: uv | pip (default: auto-detect)").option("-y, --yes", "skip prompts; use flags/defaults").option("-f, --force", "write into a non-empty directory").option("--install", "install dependencies after scaffolding (default: ask, off with --yes)").option("--git", "initialize a git repo + initial commit (default: ask, off with --yes)").option("--no-git", "skip git initialization").action(async (name, opts) => {
     const flags = { ...opts, name: name ?? opts.name };
     await runCreate(flags);
   });

package/modules/_core/mobile/metro.config.js

@@ -17,4 +17,20 @@ config.resolver.nodeModulesPaths = [
 // non-hoisted install) some Expo sub-deps (e.g. expo-asset) resolve from
 // expo/node_modules, and disabling the walk-up breaks bundling them.
 
+// Keep test files out of the native bundle. Expo Router builds a require.context
+// over the whole app/ directory, so a colocated `*.test.tsx` would otherwise get
+// bundled — dragging in @testing-library/react-native and Node built-ins
+// (console, util) that don't exist in the RN runtime, and failing the build.
+// Metro's blockList removes them from resolution (and thus from require.context);
+// Jest doesn't read this config, so `npm test` still finds and runs them.
+config.resolver.blockList = [
+  ...(Array.isArray(config.resolver.blockList)
+    ? config.resolver.blockList
+    : config.resolver.blockList
+      ? [config.resolver.blockList]
+      : []),
+  /\.(test|spec)\.[jt]sx?$/,
+  /[/\\]__tests__[/\\]/,
+];
+
 module.exports = config;

package/modules/db-postgres/module.json

@@ -16,7 +16,7 @@
     }
   },
   "notes": [
-    "PostgreSQL: set DATABASE_URL in .env (already added to .env.example).",
+    "PostgreSQL: DATABASE_URL lives in apps/server/.env (created for you, with a matching .env.example).",
     "Need a local database? Include the 'docker' component and run `make db-up`."
   ]
 }

package/modules/docker/module.json

@@ -14,6 +14,6 @@
   },
   "notes": [
     "Local DB: `make db-up` (docker compose). Server image: `docker build apps/server`.",
-    "Postgres creds/port come from .env (POSTGRES_USER/PASSWORD/DB/PORT); keep them in sync with DATABASE_URL."
+    "Postgres creds/port come from the root `.env` (POSTGRES_USER/PASSWORD/DB/PORT); keep them in sync with DATABASE_URL in apps/server/.env."
   ]
 }

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "partweave",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "A modular full-stack scaffolder — pick the parts you need (Django server, Next.js web, Expo mobile) and generate only that code, wired together.",
   "type": "module",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
   },
-  "author": "Agrim Sigdel",
+  "author": "Agrim Sigdel <sigdelagrim35@gmail.com>",
   "homepage": "https://github.com/Agrim-Sigdel/partweave#readme",
   "repository": {
     "type": "git",
@@ -41,7 +41,8 @@
     "dist/**/*.js",
     "modules",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "NOTICE"
   ],
   "scripts": {
     "build": "tsup",