@adobedjangir/commerce-admin-management 0.0.15 → 0.0.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobedjangir/commerce-admin-management",
-  "version": "0.0.15",
+  "version": "0.0.16",
   "description": "Schema-driven system configuration for Adobe Commerce App Builder sync apps. Magento-style scoped config in Adobe App Builder Database (ABDB) with encryption, Commerce REST helpers, and React Admin UI.",
   "license": "Apache-2.0",
   "author": "Adobe Inc.",

package/scripts/setup.js

@@ -612,6 +612,90 @@ function ensureHostDeps (projectRoot) {
   return { changed: true, bumped }
 }
 
+/**
+ * Seed the host's .env with the two values our actions can't run without:
+ *   - AIO_DB_REGION   defaults to "emea" (override after install if needed)
+ *   - SYSTEM_CONFIG_CRYPT_KEY   freshly generated AES-256 key, base64-encoded
+ *
+ * Never overwrites an existing value. The crypt key in particular must
+ * remain stable for the life of the workspace — rotating it makes every
+ * encrypted value already in ABDB undecryptable. So we only write it
+ * when the key is missing or empty.
+ *
+ * Returns { changed, set: [{key, source}], file }.
+ */
+function ensureEnvDefaults (projectRoot) {
+  const envPath = path.join(projectRoot, '.env')
+  let lines = []
+  let existed = false
+  if (fs.existsSync(envPath)) {
+    existed = true
+    try {
+      lines = fs.readFileSync(envPath, 'utf8').split(/\r?\n/)
+    } catch (_) {
+      return { changed: false, set: [], file: envPath, reason: 'unreadable' }
+    }
+  }
+
+  // Read current values (ignore comments + blanks). Treat KEY=  (empty)
+  // as missing so a half-stubbed .env still gets populated.
+  const current = new Map()
+  for (const raw of lines) {
+    const line = raw.trim()
+    if (!line || line.startsWith('#')) continue
+    const eq = line.indexOf('=')
+    if (eq === -1) continue
+    const k = line.slice(0, eq).trim()
+    const v = line.slice(eq + 1).trim()
+    if (k) current.set(k, v)
+  }
+
+  const set = []
+  const defaults = [
+    { key: 'AIO_DB_REGION',           value: 'emea',
+      comment: '# App Builder Database region — one of: amer | emea | apac | aus' },
+    { key: 'SYSTEM_CONFIG_CRYPT_KEY', value: () => require('crypto').randomBytes(32).toString('base64'),
+      comment: '# AES-256 master key for at-rest encryption.\n# DO NOT rotate — values already in ABDB become undecryptable if you do.\n# Auto-generated on install; back this up like a database password.' }
+  ]
+
+  // Build additions for keys that are missing OR empty.
+  const additions = []
+  for (const def of defaults) {
+    const cur = current.get(def.key)
+    if (cur && cur !== '' && cur !== '""' && cur !== "''") continue
+    const v = typeof def.value === 'function' ? def.value() : def.value
+    additions.push({ key: def.key, value: v, comment: def.comment })
+    set.push({ key: def.key, source: cur === undefined ? 'added' : 'filled-empty' })
+  }
+
+  if (additions.length === 0) return { changed: false, set: [], file: envPath }
+
+  // If the file existed, we either replace empty assignments in place
+  // (preserves user comments / ordering) or append at the bottom.
+  let next = existed ? lines.slice() : []
+  for (const add of additions) {
+    const cur = current.get(add.key)
+    if (cur === '' || cur === '""' || cur === "''") {
+      // Replace the empty line in place.
+      for (let i = 0; i < next.length; i++) {
+        const trimmed = next[i].trim()
+        if (trimmed.startsWith(add.key + '=') || trimmed.startsWith(add.key + ' =')) {
+          next[i] = `${add.key}=${add.value}`
+          break
+        }
+      }
+    } else {
+      // Append.
+      if (next.length && next[next.length - 1].trim() !== '') next.push('')
+      next.push(add.comment)
+      next.push(`${add.key}=${add.value}`)
+    }
+  }
+
+  fs.writeFileSync(envPath, next.join('\n') + (next[next.length - 1] === '' ? '' : '\n'), 'utf8')
+  return { changed: true, set, file: envPath, existed }
+}
+
 function setupAppConfig (projectRoot) {
   const appConfigPath = path.join(projectRoot, 'app.config.yaml')
   if (!fs.existsSync(appConfigPath)) {
@@ -658,6 +742,16 @@ function main () {
     console.log('[@adobedjangir/commerce-admin-management] removed src/dx-excshell-1/ (replaced by commerce/backend-ui/1)')
   }
 
+  // Seed .env with AIO_DB_REGION + SYSTEM_CONFIG_CRYPT_KEY so the consumer
+  // doesn't have to. Never overwrites an existing crypt key — see
+  // ensureEnvDefaults for why.
+  const env = ensureEnvDefaults(projectRoot)
+  if (env.changed) {
+    for (const s of env.set) {
+      console.log(`[@adobedjangir/commerce-admin-management] .env ${s.source}: ${s.key}`)
+    }
+  }
+
   // Bump host package.json so React-18 + Spectrum-4 peers are satisfied
   // without the consumer running a long `npm install --save react@^18 ...`
   // chant. If anything was bumped, automatically re-run npm install so the