@jarwizz/create-jarshop 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jarwizz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,25 @@
+# @jarwizz/create-jarshop
+
+Pre-release generator for independent JarShop Client Projects.
+
+```shell
+pnpm dlx @jarwizz/create-jarshop@0.1.1 new demo-shop --preset sk-standard
+```
+
+The default path performs frozen installs for the generated Vendure project and
+storefront. `--no-install` is an explicit offline/CI escape hatch. The
+generator never uses telemetry. In restricted local runners, set
+`JARSHOP_PNPM_STORE_DIR` to an allowed pnpm store directory; normal developer
+installs do not need this environment variable.
+
+After generation, the normal local workflow is one command:
+
+```shell
+cd demo-shop
+pnpm dev
+```
+
+It creates `.env` from the committed development example only when missing,
+starts PostgreSQL, applies development migrations, runs the idempotent demo
+seed, and opens the server, worker, Dashboard, and storefront through Turbo.
+Use `pnpm db:down` to stop PostgreSQL without deleting its volume.

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export { createProject, parseArgs } from "./generator.js";

package/dist/cli.js

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { createProject } from "./generator.js";
+export { createProject, parseArgs } from "./generator.js";
+const isEntrypoint = process.argv[1] !== undefined &&
+    resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+if (isEntrypoint) {
+    createProject({ argv: process.argv.slice(2), cwd: process.cwd() }).catch((error) => {
+        console.error(error instanceof Error ? error.message : error);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,YAAY,GAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;IAC7B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE9D,IAAI,YAAY,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CACtE,CAAC,KAAc,EAAE,EAAE;QACjB,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/generator.d.ts

@@ -0,0 +1,16 @@
+export interface GeneratorArguments {
+    readonly name: string;
+    readonly noInstall: boolean;
+    readonly preset: "sk-standard";
+}
+export interface CreateProjectOptions {
+    readonly argv: string[];
+    readonly cwd: string;
+    readonly install?: (cwd: string) => Promise<void>;
+    readonly packageVersion?: string;
+    readonly runtimeVersion?: string;
+    readonly templateDigest?: string;
+    readonly templateRoot?: string;
+}
+export declare function parseArgs(argv: string[]): GeneratorArguments;
+export declare function createProject(options: CreateProjectOptions): Promise<string>;

package/dist/generator.js

@@ -0,0 +1,198 @@
+import { execFile } from "node:child_process";
+import { cp, mkdir, mkdtemp, readFile, rename, rm, stat, writeFile, } from "node:fs/promises";
+import { dirname, join, relative, resolve } from "node:path";
+import { promisify } from "node:util";
+import { fileURLToPath } from "node:url";
+import { readTemplateFiles, sha256, sha256Tree, shouldIncludeTemplatePath, } from "./template.js";
+const execFileAsync = promisify(execFile);
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const packagedTemplateRoot = resolve(dirname(fileURLToPath(import.meta.url)), "template");
+const packageManifestPath = join(packageRoot, "package.json");
+const templateManifestPath = resolve(dirname(fileURLToPath(import.meta.url)), "template-manifest.json");
+function fail(message) {
+    throw new Error(message);
+}
+export function parseArgs(argv) {
+    const [command, name, ...flags] = argv;
+    let preset;
+    let noInstall = false;
+    if (command !== "new") {
+        fail("Usage: create-jarshop new <kebab-case-name> --preset sk-standard [--no-install]");
+    }
+    if (!name || !/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(name)) {
+        fail("Project name must be a kebab-case slug");
+    }
+    for (let index = 0; index < flags.length; index += 1) {
+        const flag = flags[index];
+        if (flag === "--preset") {
+            if (preset !== undefined || flags[index + 1] === undefined)
+                fail("The preset option must be provided exactly once");
+            preset = flags[index + 1];
+            index += 1;
+        }
+        else if (flag === "--no-install") {
+            if (noInstall)
+                fail("The no-install option may be provided only once");
+            noInstall = true;
+        }
+        else {
+            fail(`Unknown generator option: ${flag}`);
+        }
+    }
+    if (preset !== "sk-standard")
+        fail("Only the sk-standard preset is supported");
+    return { name, noInstall, preset };
+}
+async function pathExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+function assertSupportedRuntime(version) {
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?$/u.exec(version);
+    if (!match)
+        fail(`Unsupported Node.js runtime: ${version}`);
+    const major = Number(match[1]);
+    const minor = Number(match[2]);
+    if (major !== 24 || minor < 18) {
+        fail(`Unsupported Node.js runtime: ${version}; expected >=24.18.0 <25`);
+    }
+}
+function pnpmInstallArgs() {
+    const storeDir = process.env.JARSHOP_PNPM_STORE_DIR;
+    return storeDir
+        ? ["pnpm", `--config.store-dir=${storeDir}`, "install", "--frozen-lockfile"]
+        : ["pnpm", "install", "--frozen-lockfile"];
+}
+async function runPnpmInstall(cwd) {
+    try {
+        await execFileAsync("corepack", pnpmInstallArgs(), { cwd });
+    }
+    catch (error) {
+        const details = error;
+        const output = details.stderr?.trim() || details.stdout?.trim();
+        throw new Error(`pnpm install failed in ${cwd}${output ? `: ${output}` : ""}`);
+    }
+}
+async function readJson(path) {
+    return JSON.parse(await readFile(path, "utf8"));
+}
+function assertSafeTemplate(files) {
+    for (const file of files) {
+        if (file.path === ".env" ||
+            /(?:^|\/)(?:id_rsa|id_ed25519|.*\.pem)$/u.test(file.path)) {
+            fail(`Secret-like file is not allowed in the template: ${file.path}`);
+        }
+        const text = file.content.toString("utf8");
+        if (/__JARSHOP_[A-Z0-9_]+__/u.test(text)) {
+            fail(`Unresolved JarShop token in template: ${file.path}`);
+        }
+        if (file.path.endsWith("package.json")) {
+            const manifest = JSON.parse(text);
+            for (const section of [
+                "dependencies",
+                "devDependencies",
+                "peerDependencies",
+            ]) {
+                const dependencies = manifest[section];
+                for (const [name, value] of Object.entries(dependencies ?? {})) {
+                    if (typeof value === "string" &&
+                        /^(?:file:|link:|workspace:)/u.test(value)) {
+                        fail(`Local dependency ${name}@${value} is not allowed in ${file.path}`);
+                    }
+                }
+            }
+        }
+    }
+}
+function ownershipKind(path) {
+    return path.startsWith("storefront/app/") ||
+        path.startsWith("storefront/public/")
+        ? "client-owned"
+        : "managed";
+}
+async function writeJarShopManifests(staging, name, packageVersion, templateDigest) {
+    const files = await readTemplateFiles(staging);
+    const storefrontPackage = JSON.parse((await readFile(join(staging, "storefront/package.json"))).toString("utf8"));
+    const commerceSdkVersion = storefrontPackage.dependencies?.["@jarwizz/commerce-sdk"];
+    if (!commerceSdkVersion)
+        fail("Template is missing an exact Commerce SDK dependency");
+    const projectManifest = {
+        schemaVersion: 1,
+        project: { slug: name, preset: "sk-standard" },
+        generator: { package: "@jarwizz/create-jarshop", version: packageVersion },
+        starterRelease: { version: "0.1.0", templateDigest },
+        toolchain: { node: "24.18.0", pnpm: "11.18.0" },
+        packages: { "@jarwizz/commerce-sdk": commerceSdkVersion },
+    };
+    const ownershipManifest = {
+        schemaVersion: 1,
+        templateDigest,
+        files: Object.fromEntries(files.map((file) => [
+            file.path,
+            {
+                baselineDigest: sha256(file.content),
+                ownership: { kind: ownershipKind(file.path) },
+            },
+        ])),
+    };
+    await mkdir(join(staging, ".jarshop"), { recursive: true });
+    await writeFile(join(staging, ".jarshop/project.json"), `${JSON.stringify(projectManifest, null, 2)}\n`);
+    await writeFile(join(staging, ".jarshop/ownership.json"), `${JSON.stringify(ownershipManifest, null, 2)}\n`);
+}
+export async function createProject(options) {
+    const { name, noInstall } = parseArgs(options.argv);
+    assertSupportedRuntime(options.runtimeVersion ?? process.versions.node);
+    const target = resolve(options.cwd, name);
+    if (await pathExists(target))
+        fail(`Target already exists: ${target}`);
+    const templateRoot = options.templateRoot ?? packagedTemplateRoot;
+    if (!(await pathExists(templateRoot)))
+        fail(`Starter template is missing: ${templateRoot}`);
+    const packageVersion = options.packageVersion ??
+        (await readJson(packageManifestPath)).version;
+    const expectedDigest = options.templateDigest ??
+        (await readJson(templateManifestPath)).digest;
+    const staging = await mkdtemp(join(dirname(target), `.${name}.jarshop-`));
+    try {
+        await mkdir(staging, { recursive: true });
+        await cp(templateRoot, staging, {
+            recursive: true,
+            filter: (path) => shouldIncludeTemplatePath(relative(templateRoot, path)),
+        });
+        for (const [packedName, generatedName] of [
+            ["gitignore.template", ".gitignore"],
+            ["env.example.template", ".env.example"],
+        ]) {
+            const packedPath = join(staging, packedName);
+            if (await pathExists(packedPath)) {
+                await rename(packedPath, join(staging, generatedName));
+            }
+        }
+        const actualDigest = await sha256Tree(staging);
+        if (actualDigest !== expectedDigest)
+            fail("Starter template digest verification failed");
+        const templateFiles = await readTemplateFiles(staging);
+        assertSafeTemplate(templateFiles);
+        await writeJarShopManifests(staging, name, packageVersion, actualDigest);
+        if (!noInstall) {
+            const install = options.install ?? runPnpmInstall;
+            await install(staging);
+            await install(join(staging, "storefront"));
+        }
+        await rename(staging, target);
+        console.log(`Created ${target}`);
+        return target;
+    }
+    catch (error) {
+        await rm(staging, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=generator.js.map

package/dist/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../src/generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,EAAE,EACF,KAAK,EACL,OAAO,EACP,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,EACJ,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,iBAAiB,EACjB,MAAM,EACN,UAAU,EACV,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AAEvB,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3E,MAAM,oBAAoB,GAAG,OAAO,CAClC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvC,UAAU,CACX,CAAC;AACF,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AAC9D,MAAM,oBAAoB,GAAG,OAAO,CAClC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvC,wBAAwB,CACzB,CAAC;AA0BF,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IACvC,IAAI,MAA0B,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,IAAI,CACF,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,SAAS;gBACxD,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC1D,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC1B,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YACnC,IAAI,SAAS;gBAAE,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,aAAa;QAC1B,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAEnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,KAAK,GAAG,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,gCAAgC,OAAO,0BAA0B,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpD,OAAO,QAAQ;QACb,CAAC,CAAC,CAAC,MAAM,EAAE,sBAAsB,QAAQ,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC;QAC5E,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAA6C,CAAC;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,0BAA0B,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;AACvD,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAoD;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IACE,IAAI,CAAC,IAAI,KAAK,MAAM;YACpB,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EACzD,CAAC;YACD,IAAI,CAAC,oDAAoD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,yCAAyC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC7D,KAAK,MAAM,OAAO,IAAI;gBACpB,cAAc;gBACd,iBAAiB;gBACjB,kBAAkB;aACV,EAAE,CAAC;gBACX,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CACA,CAAC;gBACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC/D,IACE,OAAO,KAAK,KAAK,QAAQ;wBACzB,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1C,CAAC;wBACD,IAAI,CACF,oBAAoB,IAAI,IAAI,KAAK,sBAAsB,IAAI,CAAC,IAAI,EAAE,CACnE,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;QACrC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAe,EACf,IAAY,EACZ,cAAsB,EACtB,cAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAClC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/B,CAAC;IAC/C,MAAM,kBAAkB,GACtB,iBAAiB,CAAC,YAAY,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAC5D,IAAI,CAAC,kBAAkB;QACrB,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAE/D,MAAM,eAAe,GAAG;QACtB,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;QAC9C,SAAS,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,cAAc,EAAE;QAC1E,cAAc,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE;QACpD,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/C,QAAQ,EAAE,EAAE,uBAAuB,EAAE,kBAAkB,EAAE;KAC1D,CAAC;IACF,MAAM,iBAAiB,GAAG;QACxB,aAAa,EAAE,CAAC;QAChB,cAAc;QACd,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI;YACT;gBACE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;gBACpC,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC9C;SACF,CAAC,CACH;KACF,CAAC;IAEF,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,EACtC,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,EACxC,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B;IAE7B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,sBAAsB,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IAEvE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;IAEvD,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc;QACtB,CAAC,MAAM,QAAQ,CAAkB,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc;QACtB,CAAC,MAAM,QAAQ,CAAmB,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC;IAElE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE;YAC9B,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;SAC1E,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,IAAI;YACxC,CAAC,oBAAoB,EAAE,YAAY,CAAC;YACpC,CAAC,sBAAsB,EAAE,cAAc,CAAC;SAChC,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC7C,IAAI,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,YAAY,KAAK,cAAc;YACjC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAClC,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QAEzE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;YAClD,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/template/AGENTS.md

@@ -0,0 +1,41 @@
+# JarShop Client Project Rules
+
+## Read order
+
+1. Read the current approved issue and inspect `git status --short --branch`.
+2. Read this file and the affected section of `CONTEXT.md`.
+3. Read the nearest subtree rules, affected code, tests and manifests.
+4. Check `.jarshop/ownership.json` before changing generated managed content.
+
+## Invariants
+
+- This Client Project is independent: it owns its repository, database,
+  configuration, secrets, deployment and infrastructure state.
+- Storefront UI code accesses commerce only through `storefront/lib/commerce.ts`.
+  Do not import raw Vendure GraphQL contracts into UI components.
+- Never silently overwrite client-owned files or a modified managed baseline.
+- Migrations and seeds are explicit operations. Application startup never runs
+  them; the local `pnpm dev` orchestrator invokes them only in `APP_ENV=dev`.
+- Never commit `.env`, credentials, private keys, production data or state.
+
+## Change workflow
+
+- Work on one approved issue and one cohesive diff at a time.
+- Preserve unrelated and client-owned changes.
+- Run focused checks first and relevant build/runtime proof before review.
+- Keep source presence, local checks, CI, staging and production evidence
+  clearly separated.
+- Update the technical documentation in the same change as its contract.
+
+## Useful commands
+
+```shell
+pnpm dev
+pnpm db:migrate
+pnpm db:seed
+pnpm db:down
+pnpm build
+pnpm --dir storefront lint
+pnpm --dir storefront typecheck
+pnpm --dir storefront build
+```

package/dist/template/CONTEXT.md

@@ -0,0 +1,37 @@
+# JarShop Client Project Context
+
+## System map
+
+- `src/index.ts`: Vendure Shop/Admin APIs and Dashboard on port `3000`.
+- `src/index-worker.ts`: background jobs using the same database.
+- `src/vendure-config.ts`: runtime composition; no automatic schema sync.
+- `src/migrations/`: explicit, versioned PostgreSQL schema changes.
+- `src/seed.ts`: idempotent development-only SK/EN demo catalog seed.
+- `storefront/`: independent Next.js application on port `3001`.
+- `storefront/lib/commerce.ts`: typed Commerce Facade used by storefront routes.
+- `docker-compose.yml`: local PostgreSQL only; production infrastructure is
+  intentionally outside this development contract.
+- `.jarshop/`: exact generator, Starter Release, package and ownership facts.
+
+## Ownership
+
+- `storefront/app/**` and `storefront/public/**` are client-owned.
+- Other generated files are managed baselines unless the Ownership Manifest
+  records a structured exception.
+- A future upgrade must stop atomically when managed content changed or an
+  ownership conflict cannot be resolved.
+
+## Vocabulary
+
+- **Client Project**: this independently deployable generated shop.
+- **Starter Release**: the immutable template baseline recorded in the Project
+  Manifest.
+- **Commerce SDK**: framework-neutral, typed server-side commerce operations.
+- **Commerce Facade**: this project's adapter between Next.js and the SDK.
+- **Dashboard**: Vendure's operator UI; it is not the storefront.
+
+## Runtime boundary
+
+`pnpm dev` is a local convenience flow. It may create `.env`, start Docker,
+apply development migrations and seed demo data. Staging and production use
+separate secrets and explicit migration/deployment procedures.

package/dist/template/MEMORY.md

@@ -0,0 +1,16 @@
+# JarShop Client Project Memory Index
+
+This file is navigation, not a work log.
+
+- Operating rules: `AGENTS.md`
+- Architecture and vocabulary: `CONTEXT.md`
+- Developer onboarding and troubleshooting: `README.md`
+- Generator and package facts: `.jarshop/project.json`
+- File ownership and baseline digests: `.jarshop/ownership.json`
+- Vendure composition: `src/vendure-config.ts`
+- Database changes: `src/migrations/`
+- Commerce boundary: `storefront/lib/commerce.ts`
+
+Use code, tests, manifests and CI as behavior evidence. Keep live handoff notes
+in the issue or pull request, never in this index. Do not store secrets,
+credentials, speculative claims or copied chat history here.

package/dist/template/README.md

@@ -0,0 +1,63 @@
+# JarShop Client Project Starter
+
+This is the Vendure-based runtime starter generated for a JarShop Client Project.
+It is intentionally neutral: client branding, commerce features and deployment
+configuration are added by later feature slices.
+
+## Local setup
+
+```shell
+pnpm install --frozen-lockfile
+pnpm dev
+```
+
+`pnpm dev` creates `.env` when needed, starts PostgreSQL, waits for readiness,
+runs development-only migrations and the idempotent demo seed, then starts the
+Vendure server, worker and storefront in Turbo TUI. PostgreSQL remains running
+after the dev processes stop; use `pnpm db:down` when you want to stop it.
+
+Open the generated applications at:
+
+- Storefront SK: <http://localhost:3001/sk>
+- Storefront EN: <http://localhost:3001/en>
+- Vendure Dashboard: <http://localhost:3000/dashboard>
+- Health check: <http://localhost:3000/health>
+
+Sign in to the local Dashboard with `SUPERADMIN_USERNAME` and
+`SUPERADMIN_PASSWORD` from your untracked `.env`. The committed values are
+development placeholders, not reusable staging or production credentials.
+
+The `.env.example` values are development placeholders only. Before staging or
+production, replace every credential and provide secrets through the deployment
+secret store. Never commit `.env`, production credentials, private keys or
+Terraform state.
+
+Database schema changes are explicit. The server does not run migrations during
+startup. Use `pnpm db:migrate` after the database is available.
+
+## Generated tree
+
+```text
+.jarshop/                  Generator, release and ownership facts
+src/                       Vendure server, worker, migration and seed source
+storefront/app/            Client-owned SK/EN routes and UI
+storefront/lib/commerce.ts Typed Commerce Facade
+docker-compose.yml         Local PostgreSQL
+AGENTS.md                  Human and agent operating rules
+CONTEXT.md                 Stable architecture and vocabulary
+MEMORY.md                  Short navigation index
+```
+
+Read `AGENTS.md`, then only the affected part of `CONTEXT.md`, before changing a
+generated project. Check `.jarshop/ownership.json` before editing managed files.
+
+## Troubleshooting
+
+- **Unsupported Node.js:** install exact Node `24.18.0`, then rerun `pnpm dev`.
+- **Docker is not available:** start Docker Desktop and rerun the command.
+- **Port 3000 or 3001 is occupied:** stop the conflicting local process.
+- **PostgreSQL port 6543 is occupied:** set the same free
+  `JARSHOP_POSTGRES_PORT` and `DB_PORT` values in `.env`.
+- **Reset only running PostgreSQL:** use `pnpm db:down`. The database volume is
+  retained intentionally; never delete production data as a troubleshooting
+  shortcut.

package/dist/template/docker-compose.yml

@@ -0,0 +1,14 @@
+services:
+  postgres_db:
+    image: postgres:16.14-alpine3.24@sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777
+    ports:
+      - "${JARSHOP_POSTGRES_PORT:-6543}:5432"
+    environment:
+      POSTGRES_DB: vendure
+      POSTGRES_USER: vendure
+      POSTGRES_PASSWORD: change-me-locally
+    volumes:
+      - postgres_db_data:/var/lib/postgresql/data
+
+volumes:
+  postgres_db_data:

package/dist/template/env.example.template

@@ -0,0 +1,14 @@
+APP_ENV=dev
+VENDURE_DISABLE_TELEMETRY=true
+NEXT_TELEMETRY_DISABLED=1
+PORT=3000
+COOKIE_SECRET=replace-with-a-local-development-secret
+SUPERADMIN_USERNAME=superadmin
+SUPERADMIN_PASSWORD=change-me-locally
+DB_HOST=localhost
+DB_PORT=6543
+JARSHOP_POSTGRES_PORT=6543
+DB_NAME=vendure
+DB_USERNAME=vendure
+DB_PASSWORD=change-me-locally
+DB_SCHEMA=public

package/dist/template/gitignore.template

@@ -0,0 +1,10 @@
+node_modules/
+dist/
+.next/
+.turbo/
+*.tsbuildinfo
+.vendure/
+.env
+static/assets/*
+static/email/test-emails/*
+!.gitkeep

package/dist/template/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@jarwizz/jarshop-client-project",
+  "version": "0.1.0",
+  "private": true,
+  "engines": {
+    "node": ">=24.18.0"
+  },
+  "packageManager": "pnpm@11.18.0",
+  "scripts": {
+    "dev:server": "vendure dev server",
+    "dev:worker": "vendure dev worker",
+    "dev:storefront": "pnpm --dir storefront dev --port 3001",
+    "dev": "tsx ./src/dev.ts",
+    "build": "vendure build all",
+    "build:server": "vendure build server",
+    "build:worker": "vendure build worker",
+    "build:dashboard": "vendure build dashboard",
+    "start:server": "node ./dist/index.js",
+    "start:worker": "node ./dist/index-worker.js",
+    "db:up": "docker compose up -d postgres_db",
+    "db:migrate": "vendure migrate --run",
+    "db:seed": "tsx ./src/seed.ts",
+    "stack:up": "pnpm db:up",
+    "db:down": "docker compose down"
+  },
+  "dependencies": {
+    "@vendure/asset-server-plugin": "3.7.1",
+    "@vendure/common": "3.7.1",
+    "@vendure/core": "3.7.1",
+    "@vendure/dashboard": "3.7.1",
+    "@vendure/email-plugin": "3.7.1",
+    "@vendure/graphiql-plugin": "3.7.1",
+    "dotenv": "17.4.2",
+    "pg": "8.22.0",
+    "typeorm": "0.3.31"
+  },
+  "devDependencies": {
+    "@vendure/cli": "3.7.1",
+    "gql.tada": "1.11.3",
+    "graphql": "16.14.2",
+    "tsx": "4.20.3",
+    "turbo": "2.10.6",
+    "typescript": "5.8.2",
+    "vite": "7.3.6"
+  }
+}