create-mercato-app 0.4.2-canary-e5804f7db1

package/README.md

@@ -0,0 +1,94 @@
+# create-mercato-app
+
+Create a new Open Mercato application with a single command.
+
+## Quick Start
+
+```bash
+npx create-mercato-app my-app
+cd my-app
+```
+
+## Usage
+
+```bash
+npx create-mercato-app <app-name> [options]
+```
+
+### Arguments
+
+| Argument | Description |
+|----------|-------------|
+| `app-name` | Name of the application (creates folder with this name) |
+
+### Options
+
+| Option | Description |
+|--------|-------------|
+| `--registry <url>` | Custom npm registry URL |
+| `--verdaccio` | Use local Verdaccio registry (http://localhost:4873) |
+| `--help`, `-h` | Show help |
+| `--version`, `-v` | Show version |
+
+### Examples
+
+```bash
+# Create a new app using the public npm registry
+npx create-mercato-app my-store
+
+# Create a new app using a local Verdaccio registry
+npx create-mercato-app my-store --verdaccio
+
+# Create a new app using a custom registry
+npx create-mercato-app my-store --registry http://localhost:4873
+```
+
+## After Creating Your App
+
+1. Navigate to your app directory:
+   ```bash
+   cd my-app
+   ```
+
+2. Copy and configure your environment:
+   ```bash
+   cp .env.example .env
+   # Edit .env with your database credentials
+   ```
+
+3. Install dependencies:
+   ```bash
+   yarn install
+   ```
+
+4. Generate required files:
+   ```bash
+   yarn generate
+   ```
+
+5. Run database migrations:
+   ```bash
+   yarn db:migrate
+   ```
+
+6. Initialize the application:
+   ```bash
+   yarn initialize
+   ```
+
+7. Start the development server:
+   ```bash
+   yarn dev
+   ```
+
+## Requirements
+
+- Node.js 18 or later
+- PostgreSQL database
+- Yarn (recommended) or npm
+
+## Learn More
+
+For more information about Open Mercato, visit:
+- [GitHub Repository](https://github.com/open-mercato/open-mercato)
+- [Documentation](https://docs.openmercato.com)

package/bin/create-mercato-app

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+
+// Stub loader for the create-mercato-app CLI
+// This file exists so yarn/npm can create bin symlinks before the package is built.
+// It dynamically loads the actual CLI from dist/index.js
+
+import { existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const distIndex = join(__dirname, '..', 'dist', 'index.js');
+
+if (!existsSync(distIndex)) {
+  console.error('Error: CLI not built. Run "yarn build" first.');
+  console.error(`Expected: ${distIndex}`);
+  process.exit(1);
+}
+
+// Import the actual CLI
+await import(distIndex);

package/dist/index.js

@@ -0,0 +1,177 @@
+#!/usr/bin/env node
+
+
+// src/index.ts
+import { existsSync, mkdirSync, readdirSync, statSync, readFileSync, writeFileSync, copyFileSync } from "node:fs";
+import { join, dirname, basename, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import pc from "picocolors";
+var __dirname = dirname(fileURLToPath(import.meta.url));
+var PACKAGE_VERSION = "0.4.1";
+var TEMPLATE_DIR = join(__dirname, "..", "template");
+function showHelp() {
+  console.log(`
+${pc.bold("create-mercato-app")} - Create a new Open Mercato application
+
+${pc.bold("Usage:")}
+  create-mercato-app <app-name> [options]
+
+${pc.bold("Arguments:")}
+  app-name           Name of the application (will create folder with this name)
+
+${pc.bold("Options:")}
+  --registry <url>   Custom npm registry URL
+  --verdaccio        Use local Verdaccio registry (http://localhost:4873)
+  --help, -h         Show help
+  --version, -v      Show version
+
+${pc.bold("Examples:")}
+  npx create-mercato-app my-store
+  npx create-mercato-app my-store --verdaccio
+  npx create-mercato-app my-store --registry http://localhost:4873
+`);
+}
+function showVersion() {
+  console.log(`create-mercato-app v${PACKAGE_VERSION}`);
+}
+function parseArgs(args) {
+  const options = {
+    registry: void 0,
+    verdaccio: false,
+    help: false,
+    version: false
+  };
+  let appName = null;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--help" || arg === "-h") {
+      options.help = true;
+    } else if (arg === "--version" || arg === "-v") {
+      options.version = true;
+    } else if (arg === "--verdaccio") {
+      options.verdaccio = true;
+    } else if (arg === "--registry") {
+      options.registry = args[++i];
+    } else if (!arg.startsWith("-")) {
+      appName = arg;
+    }
+  }
+  return { appName, options };
+}
+function validateAppName(name) {
+  if (!name) {
+    return { valid: false, error: "App name is required" };
+  }
+  if (!/^[a-z0-9-]+$/.test(name)) {
+    return {
+      valid: false,
+      error: "App name must be lowercase alphanumeric with hyphens only (e.g., my-app)"
+    };
+  }
+  if (name.startsWith("-") || name.endsWith("-")) {
+    return { valid: false, error: "App name cannot start or end with a hyphen" };
+  }
+  return { valid: true };
+}
+var FILE_RENAMES = {
+  gitignore: ".gitignore"
+};
+function copyDirRecursive(src, dest, placeholders) {
+  if (!existsSync(dest)) {
+    mkdirSync(dest, { recursive: true });
+  }
+  const entries = readdirSync(src);
+  for (const entry of entries) {
+    const srcPath = join(src, entry);
+    const destName = FILE_RENAMES[entry] ?? entry;
+    let destPath = join(dest, destName);
+    const stat = statSync(srcPath);
+    if (stat.isDirectory()) {
+      copyDirRecursive(srcPath, destPath, placeholders);
+    } else if (entry.endsWith(".template")) {
+      const finalName = entry.replace(".template", "");
+      destPath = join(dest, finalName);
+      let content = readFileSync(srcPath, "utf-8");
+      for (const [key, value] of Object.entries(placeholders)) {
+        content = content.replace(new RegExp(`\\{\\{${key}\\}\\}`, "g"), value);
+      }
+      writeFileSync(destPath, content);
+    } else {
+      copyFileSync(srcPath, destPath);
+    }
+  }
+}
+async function main() {
+  const args = process.argv.slice(2);
+  const { appName: appNameArg, options } = parseArgs(args);
+  if (options.help) {
+    showHelp();
+    process.exit(0);
+  }
+  if (options.version) {
+    showVersion();
+    process.exit(0);
+  }
+  if (!appNameArg) {
+    console.error(pc.red("Error: App name is required"));
+    console.error("");
+    showHelp();
+    process.exit(1);
+  }
+  const targetDir = resolve(process.cwd(), appNameArg);
+  const appName = basename(targetDir);
+  const validation = validateAppName(appName);
+  if (!validation.valid) {
+    console.error(pc.red(`Error: ${validation.error}`));
+    process.exit(1);
+  }
+  if (existsSync(targetDir)) {
+    console.error(pc.red(`Error: Directory "${appName}" already exists`));
+    process.exit(1);
+  }
+  if (!existsSync(TEMPLATE_DIR)) {
+    console.error(pc.red("Error: Template directory not found"));
+    console.error(`Expected: ${TEMPLATE_DIR}`);
+    process.exit(1);
+  }
+  let registryConfig = "";
+  if (options.verdaccio) {
+    registryConfig = `npmScopes:
+  open-mercato:
+    npmRegistryServer: "http://localhost:4873"`;
+  } else if (options.registry) {
+    registryConfig = `npmScopes:
+  open-mercato:
+    npmRegistryServer: "${options.registry}"`;
+  }
+  console.log("");
+  console.log(pc.bold(`Creating a new Open Mercato app in ${pc.cyan(targetDir)}`));
+  console.log("");
+  const placeholders = {
+    APP_NAME: appName,
+    PACKAGE_VERSION,
+    REGISTRY_CONFIG: registryConfig
+  };
+  try {
+    copyDirRecursive(TEMPLATE_DIR, targetDir, placeholders);
+    console.log(pc.green("Success!") + ` Created ${pc.bold(appName)}`);
+    console.log("");
+    console.log("Next steps:");
+    console.log("");
+    console.log(pc.cyan(`  cd ${appName}`));
+    console.log(pc.cyan("  cp .env.example .env"));
+    console.log(pc.dim("  # Edit .env with your database credentials"));
+    console.log(pc.cyan("  yarn install"));
+    console.log(pc.cyan("  yarn generate"));
+    console.log(pc.cyan("  yarn db:migrate"));
+    console.log(pc.cyan("  yarn initialize"));
+    console.log(pc.cyan("  yarn dev"));
+    console.log("");
+    console.log(pc.dim("For more information, visit https://github.com/open-mercato/open-mercato"));
+    console.log("");
+  } catch (error) {
+    console.error(pc.red("Error creating app:"), error);
+    process.exit(1);
+  }
+}
+main();

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "create-mercato-app",
+  "version": "0.4.2-canary-e5804f7db1",
+  "type": "module",
+  "description": "Create a new Open Mercato application",
+  "main": "./dist/index.js",
+  "bin": "./bin/create-mercato-app",
+  "files": [
+    "bin",
+    "dist",
+    "template"
+  ],
+  "scripts": {
+    "build": "node build.mjs",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "picocolors": "^1.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.10.1",
+    "esbuild": "^0.25.0",
+    "typescript": "^5.9.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/open-mercato/open-mercato.git",
+    "directory": "packages/create-app"
+  },
+  "keywords": [
+    "open-mercato",
+    "erp",
+    "commerce",
+    "scaffolding",
+    "cli"
+  ],
+  "license": "MIT",
+  "stableVersion": "0.4.1"
+}

package/template/.env.example

@@ -0,0 +1,217 @@
+# Example environment configuration
+# Copy this file to .env and adjust values for your environment.
+
+# PostgreSQL Configuration
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DB=open-mercato
+POSTGRES_PORT=5432
+
+# PostgreSQL connection string (required)
+DATABASE_URL=postgres://postgres:postgres@localhost:5432/open-mercato
+
+# JWT secret for auth tokens (required)
+JWT_SECRET=change-me-dev-secret
+
+# Events transport (choose one)
+# REDIS_URL=redis://localhost:6379
+# or
+# EVENTS_REDIS_URL=redis://localhost:6379
+
+# Email provider (optional)
+# RESEND_API_KEY=
+
+# Public URL used in emails and onboarding flows
+APP_URL=http://localhost:3000
+
+# Enable self-service onboarding (default: false)
+SELF_SERVICE_ONBOARDING_ENABLED=false
+DEMO_MODE=true
+
+# Admin email to notify about onboarding submissions
+ADMIN_EMAIL=ops@your-domain.com
+
+# Node environment
+NODE_ENV=development
+
+# Auto-spawn workers when starting the app (default: true)
+# Set to false to run workers separately in production
+AUTO_SPAWN_WORKERS=true
+
+# SSL Certificate Configuration
+# Path to additional CA certificates for Node.js HTTPS connections
+# Required for Raiffeisen Bank API which doesn't send complete certificate chain
+# The GeoTrust EV RSA CA G2 intermediate certificate is needed for SSL verification
+# Certificate valid until: July 2, 2030
+# To update: curl -o certs/geotrust-ev-rsa-ca-g2.pem https://cacerts.digicert.com/GeoTrustEVRSACAG2.crt.pem
+NODE_EXTRA_CA_CERTS=./certs/geotrust-ev-rsa-ca-g2.pem
+
+# Hybrid query engine SQL logging (optional, default: false)
+# Set to true to log raw SQL statements from the hybrid query engine.
+QUERY_ENGINE_DEBUG_SQL=false
+
+# Enable tree profiler for matching resources/entities (comma-separated filters, e.g. * - for all profilers,customers.*, customers.people)
+# OM_PROFILE=
+# Enable detailed CRUD profiling for matching resources (comma-separated filters, e.g. customers.*, *)
+# OM_CRUD_PROFILE=
+# Enable hybrid query engine profiling for matching entities (comma-separated filters, e.g. customers.*, customers.people)
+# OM_QE_PROFILE=
+
+# Enable cache for CRUD API responses (default: false)
+ENABLE_CRUD_API_CACHE=false
+
+# Auto-reindex query indexes when coverage gaps are detected (default: true)
+SCHEDULE_AUTO_REINDEX=true
+
+# Skip immediate coverage recalculation on read (default: false)
+OPTIMIZE_INDEX_COVERAGE_STATS=false
+
+# Continue serving results from entity indexes when coverage gaps are detected (default: true)
+FORCE_QUERY_INDEX_ON_PARTIAL_INDEXES=true
+
+# Hashed search tokenization defaults
+OM_SEARCH_ENABLED=true
+OM_SEARCH_MIN_LEN=3
+OM_SEARCH_ENABLE_PARTIAL=true
+OM_SEARCH_HASH_ALGO=sha256
+OM_SEARCH_STORE_RAW_TOKENS=false
+# Optional comma-separated blocklist of field name substrings to skip during tokenization
+# OM_SEARCH_FIELD_BLOCKLIST=password,token,secret,hash
+
+# Search module debug logging (Meilisearch, vector search, reindex operations)
+OM_SEARCH_DEBUG=false
+
+# Query index engine debug logging (search:source-has-tokens, coverage, etc.)
+OM_QUERY_INDEX_DEBUG=false
+
+# Toggle EAV backward compatibility for user-defined entities (custom field values)
+# When true, DataEngine will also write to custom_field_values on create/update of custom entities.
+# Default is false: values are only stored in custom_entities_storage.
+ENTITIES_BACKCOMPAT_EAV_FOR_CUSTOM=false
+
+# Cache strategy (default: memory)
+CACHE_STRATEGY=sqlite
+
+# Default TTL in milliseconds (optional)
+CACHE_TTL=300000
+
+# Redis Configuration
+#REDIS_PORT=6379
+
+# Redis configuration (for redis strategy)
+#CACHE_REDIS_URL=redis://localhost:6379
+
+# SQLite configuration (for sqlite strategy)
+CACHE_SQLITE_PATH=./data/cache.db
+
+# JSON file configuration (for jsonfile strategy)
+#CACHE_JSON_FILE_PATH=./data/cache.json
+
+# Database pooling settings
+DB_POOL_MIN=5
+DB_POOL_MAX=20
+DB_POOL_IDLE_TIMEOUT=30000
+DB_POOL_ACQUIRE_TIMEOUT=60000
+
+# Audit log retention windows
+# Core resources (users, roles) keep access history longer to support investigations.
+AUDIT_LOGS_CORE_RETENTION_DAYS=7
+# Non-core reads rotate aggressively to limit storage.
+AUDIT_LOGS_NON_CORE_RETENTION_HOURS=8
+
+# Tenant data encryption (enabled by default)
+TENANT_DATA_ENCRYPTION=yes
+TENANT_DATA_ENCRYPTION_DEBUG=false
+# Preferred fallback key when Vault is unavailable (use a strong 32+ char secret)
+TENANT_DATA_ENCRYPTION_FALLBACK_KEY=dev-tenant-encryption-fallback-key-32chars
+# Legacy secondary fallback secret (optional)
+TENANT_DATA_ENCRYPTION_KEY=
+# Hashicorp Vault configuration
+VAULT_ADDR=http://localhost:8200
+VAULT_TOKEN=dev-only-token
+VAULT_KV_PATH=secret/data
+
+# ============================================================================
+# Embedding Provider Configuration (for vector search)
+# ============================================================================
+# Vector search requires ONE embedding provider to be configured.
+# OpenAI is the default provider if no explicit configuration is set.
+
+# OpenAI (default embedding provider)
+# Models: text-embedding-3-small (1536 dim), text-embedding-3-large (3072 dim)
+OPENAI_API_KEY=your_openai_api_key_here
+
+# Google Generative AI
+# Models: text-embedding-004 (768 dim), embedding-001 (768 dim)
+# GOOGLE_GENERATIVE_AI_API_KEY=
+
+# Mistral AI
+# Models: mistral-embed (1024 dim)
+# MISTRAL_API_KEY=
+
+# Cohere
+# Models: embed-english-v3.0 (1024 dim), embed-multilingual-v3.0 (1024 dim)
+# COHERE_API_KEY=
+
+# Amazon Bedrock
+# Models: amazon.titan-embed-text-v2:0 (1024 dim), cohere.embed-english-v3 (1024 dim)
+# AWS_ACCESS_KEY_ID=
+# AWS_SECRET_ACCESS_KEY=
+# AWS_REGION=us-east-1
+
+# Ollama (Local/Self-hosted)
+# Models: nomic-embed-text (768 dim), mxbai-embed-large (1024 dim), all-minilm (384 dim)
+# Default: http://localhost:11434 (no /api suffix needed)
+# OLLAMA_BASE_URL=http://localhost:11434
+
+# ============================================================================
+# OCR (Optical Character Recognition) Configuration
+# ============================================================================
+# Default OCR model for image and PDF text extraction (optional)
+# Falls back to 'gpt-4o' if not specified. Can be overridden per partition.
+# Supported models: gpt-4o, gpt-4o-mini
+OCR_MODEL=gpt-4o
+
+# Custom OCR prompt (optional, advanced)
+# Override the default prompt sent to the LLM for text extraction
+# OCR_DEFAULT_PROMPT="Extract all text content from this image..."
+
+# Enable/disable OCR for new partitions by default (default: true)
+# OPENMERCATO_DEFAULT_ATTACHMENT_OCR_ENABLED=true
+
+# ============================================================================
+# OpenCode AI Assistant Configuration
+# ============================================================================
+# OpenCode handles AI requests for the AI Assistant feature.
+# Configure the provider and set the corresponding API key.
+
+# Provider selection: anthropic, openai, or google (default: anthropic)
+OPENCODE_PROVIDER=anthropic
+
+# Optional: Override the default model for the selected provider
+# Default models by provider:
+#   - anthropic: claude-haiku-4-5-20251001
+#   - openai: gpt-4o-mini
+#   - google: gemini-2.0-flash
+# OPENCODE_MODEL=anthropic/claude-sonnet-4-20250514
+
+# Provider API keys (set the one matching OPENCODE_PROVIDER)
+OPENCODE_ANTHROPIC_API_KEY=your_anthropic_api_key_here
+# OPENCODE_OPENAI_API_KEY=your_openai_api_key_here
+# OPENCODE_GOOGLE_API_KEY=your_google_api_key_here
+
+# ============================================================================
+# Meilisearch Configuration (for hybrid search)
+# ============================================================================
+# Meilisearch provides fast full-text fuzzy search capabilities.
+# When configured, it becomes the primary search strategy.
+# If not configured, the system falls back to token-based search.
+
+# Meilisearch server URL (required for Meilisearch strategy)
+# MEILISEARCH_HOST=http://localhost:7700
+
+# Meilisearch API key (required for production, optional for development)
+# MEILISEARCH_API_KEY=your_master_key_here
+
+# Index prefix for tenant isolation (default: om)
+# MEILISEARCH_INDEX_PREFIX=om

package/template/.yarnrc.yml.template

@@ -0,0 +1,2 @@
+nodeLinker: node-modules
+{{REGISTRY_CONFIG}}

package/template/components.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://ui.shadcn.com/schema.json",
+  "style": "new-york",
+  "rsc": true,
+  "tsx": true,
+  "tailwind": {
+    "config": "",
+    "css": "src/app/globals.css",
+    "baseColor": "neutral",
+    "cssVariables": true,
+    "prefix": ""
+  },
+  "iconLibrary": "lucide",
+  "aliases": {
+    "components": "@/components",
+    "utils": "@/lib/utils",
+    "ui": "@/components/ui",
+    "lib": "@/lib",
+    "hooks": "@/hooks"
+  },
+  "registries": {}
+}

package/template/gitignore

@@ -0,0 +1,50 @@
+# Dependencies
+node_modules
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/sdks
+!.yarn/versions
+
+# Next.js
+.next/
+out/
+
+# Build outputs
+dist/
+build/
+
+# Environment files
+.env
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+# Generated files
+.mercato/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Testing
+coverage/
+
+# Logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Misc
+*.tgz
+.cache/

package/template/next.config.ts

@@ -0,0 +1,28 @@
+import type { NextConfig } from "next";
+
+const nextConfig: NextConfig = {
+  experimental: {
+    serverMinification: false,
+    turbopackMinify: false,
+  },
+  // Transpile @open-mercato packages that have TypeScript in src/
+  // Note: @open-mercato/shared is excluded as it has pre-built dist/ files
+  transpilePackages: [
+    '@open-mercato/core',
+    '@open-mercato/ui',
+    '@open-mercato/events',
+    '@open-mercato/cache',
+    '@open-mercato/queue',
+    '@open-mercato/search',
+    '@open-mercato/content',
+    '@open-mercato/onboarding',
+    '@open-mercato/ai-assistant',
+  ],
+  serverExternalPackages: [
+    'esbuild',
+    '@esbuild/darwin-arm64',
+    '@open-mercato/cli',
+  ],
+}
+
+export default nextConfig