create-nymbal-app 0.0.0 → 0.2.0

package/bin/create-nymbal-app.mjs

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import { main } from '../dist/index.js'
+import pc from 'picocolors'
+
+main(process.argv).catch((err) => {
+  console.error(pc.red('✗ create-nymbal-app failed'))
+  console.error(err)
+  process.exit(1)
+})

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+type PackageManager = 'npm' | 'pnpm' | 'yarn-classic' | 'yarn-berry' | 'bun';
+interface Answers {
+    name: string;
+    directory: string;
+    currency: 'GBP' | 'USD' | 'EUR';
+    template: 'astro' | 'nextjs';
+    seedDemo: boolean;
+}
+/**
+ * Runs a command in `cwd` (with `env` when given, else the process environment) and rejects on a non-zero exit.
+ * Injected into `main` so tests do not shell out.
+ */
+type Runner = (cmd: string, args: string[], cwd: string, env?: NodeJS.ProcessEnv) => Promise<void>;
+interface MainDeps {
+    run?: Runner;
+}
+declare function detectPackageManager(): PackageManager;
+declare const TEMPLATES: readonly ["astro", "nextjs"];
+declare const CURRENCIES: readonly ["GBP", "USD", "EUR"];
+interface CliFlags {
+    name?: string;
+    template?: (typeof TEMPLATES)[number];
+    currency?: (typeof CURRENCIES)[number];
+    yes: boolean;
+    /** Present (false) only with `--no-install`. */
+    install?: boolean;
+}
+/** A command-line flag that is missing its value or names a value outside the allowed set. */
+declare class CliFlagError extends Error {
+    constructor(message: string);
+}
+/** Parses process.argv (node and script first): --name, --template and --currency take `--flag v` or `--flag=v`. */
+declare function parseCliFlags(argv: string[]): CliFlags;
+declare function main(argv?: string[], deps?: MainDeps): Promise<void>;
+declare function scaffold(dir: string, answers: Answers): Promise<void>;
+
+export { CliFlagError, type CliFlags, type MainDeps, type PackageManager, type Runner, detectPackageManager, main, parseCliFlags, scaffold };

package/dist/index.js

@@ -0,0 +1,419 @@
+// src/index.ts
+import { cp, readFile, mkdir, readdir, rm, writeFile } from "fs/promises";
+import { existsSync } from "fs";
+import { dirname, resolve } from "path";
+import { fileURLToPath } from "url";
+import { spawn, spawnSync } from "child_process";
+import { randomBytes } from "crypto";
+import { cancel, confirm, intro, isCancel, note, outro, select, text } from "@clack/prompts";
+import pc from "picocolors";
+var HERE = dirname(fileURLToPath(import.meta.url));
+var SCAFFOLD_ROOT = resolve(HERE, "..", "scaffold");
+var API_PORT = 3001;
+function newAdminCredentials() {
+  return { email: "admin@nymbal.local", password: randomBytes(16).toString("base64url") };
+}
+async function writeAdminEnv(dir, admin) {
+  const lines = [
+    "# The admin account the seed creates. Keep this file out of version control (.gitignore lists it).",
+    `NYMBAL_ADMIN_EMAIL=${admin.email}`,
+    `NYMBAL_ADMIN_PASSWORD=${admin.password}`,
+    ""
+  ];
+  await writeFile(resolve(dir, ".env"), lines.join("\n"), { encoding: "utf8", mode: 384 });
+}
+function adminSignIn(admin) {
+  return [
+    `Admin: http://localhost:${API_PORT}/admin/`,
+    `  email     ${admin.email}`,
+    `  password  ${admin.password} (saved in .env)`
+  ];
+}
+function packageManagerField() {
+  const token = (process.env["npm_config_user_agent"] ?? "").split(" ")[0] ?? "";
+  const match = /^(npm|pnpm|yarn|bun)\/(\d+\.\d+\.\d+\S*)$/.exec(token);
+  if (match) return `${match[1]}@${match[2]}`;
+  const npm = spawnSync("npm", ["-v"], { encoding: "utf8", shell: process.platform === "win32" });
+  const version = npm.status === 0 ? npm.stdout.trim() : "";
+  return version ? `npm@${version}` : void 0;
+}
+function detectPackageManager() {
+  const ua = process.env["npm_config_user_agent"];
+  if (!ua) return "npm";
+  const token = ua.split(" ")[0] ?? "";
+  const slash = token.indexOf("/");
+  const pm = slash >= 0 ? token.slice(0, slash) : token;
+  const version = slash >= 0 ? token.slice(slash + 1) : "";
+  if (pm === "pnpm") return "pnpm";
+  if (pm === "bun") return "bun";
+  if (pm === "yarn") {
+    const major = parseInt(version.split(".")[0] ?? "1", 10);
+    return major < 2 ? "yarn-classic" : "yarn-berry";
+  }
+  return "npm";
+}
+function installCmd(pm) {
+  switch (pm) {
+    case "pnpm":
+      return ["pnpm", ["install"]];
+    case "bun":
+      return ["bun", ["install"]];
+    case "yarn-classic":
+    case "yarn-berry":
+      return ["yarn", ["install"]];
+    default:
+      return ["npm", ["install"]];
+  }
+}
+function seedCmd(pm) {
+  switch (pm) {
+    case "pnpm":
+      return ["pnpm", ["exec", "nymbal", "seed"]];
+    case "bun":
+      return ["bunx", ["nymbal", "seed"]];
+    case "yarn-classic":
+      return ["yarn", ["run", "nymbal", "seed"]];
+    case "yarn-berry":
+      return ["yarn", ["exec", "nymbal", "seed"]];
+    default:
+      return ["npx", ["nymbal", "seed"]];
+  }
+}
+function devCmd(pm) {
+  switch (pm) {
+    case "pnpm":
+      return "pnpm dev";
+    case "bun":
+      return "bun dev";
+    case "yarn-classic":
+    case "yarn-berry":
+      return "yarn dev";
+    default:
+      return "npm run dev";
+  }
+}
+var TEMPLATES = ["astro", "nextjs"];
+var CURRENCIES = ["GBP", "USD", "EUR"];
+var CliFlagError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "CliFlagError";
+  }
+};
+function oneOf(flag, value, allowed) {
+  if (allowed.includes(value)) return value;
+  throw new CliFlagError(`Unknown ${flag} "${value}". Allowed: ${allowed.join(", ")}`);
+}
+function parseCliFlags(argv) {
+  const flags = { yes: false };
+  const args = argv.slice(2);
+  let positional;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--yes" || arg === "-y") {
+      flags.yes = true;
+      continue;
+    }
+    if (arg === "--no-install") {
+      flags.install = false;
+      continue;
+    }
+    const match = /^--(name|template|currency)(?:=(.*))?$/s.exec(arg);
+    if (match) {
+      const flag = match[1];
+      let value = match[2];
+      if (value === void 0) {
+        const next = args[i + 1];
+        if (next === void 0 || next.startsWith("-")) throw new CliFlagError(`--${flag} needs a value`);
+        value = next;
+        i++;
+      }
+      if (flag === "name") flags.name = value;
+      else if (flag === "template") flags.template = oneOf("--template", value, TEMPLATES);
+      else flags.currency = oneOf("--currency", value, CURRENCIES);
+    } else if (!arg.startsWith("-") && positional === void 0) {
+      positional = arg;
+    }
+  }
+  if (flags.name === void 0 && positional !== void 0) flags.name = positional;
+  return flags;
+}
+async function main(argv = process.argv, deps = {}) {
+  const run = deps.run ?? runCmd;
+  let flags;
+  try {
+    flags = parseCliFlags(argv);
+  } catch (err) {
+    if (!(err instanceof CliFlagError)) throw err;
+    process.stderr.write(`Error: ${err.message}
+`);
+    process.exit(1);
+  }
+  const pm = detectPackageManager();
+  if (flags.yes) {
+    if (!flags.name) {
+      process.stderr.write("Error: --yes requires --name or a positional name argument\n");
+      process.exit(1);
+    }
+    const name2 = flags.name.trim();
+    const answers2 = {
+      name: name2,
+      directory: toDirectoryName(name2),
+      currency: flags.currency ?? "GBP",
+      template: flags.template ?? "astro",
+      seedDemo: true
+    };
+    const targetDir2 = resolve(process.cwd(), answers2.directory);
+    if (existsSync(targetDir2)) {
+      const entries = await readdir(targetDir2);
+      if (entries.length > 0) {
+        process.stderr.write(`Error: Directory ${answers2.directory} already exists and is not empty.
+`);
+        process.exit(1);
+      }
+    } else {
+      await mkdir(targetDir2, { recursive: true });
+    }
+    await scaffold(targetDir2, answers2);
+    const admin2 = newAdminCredentials();
+    await writeAdminEnv(targetDir2, admin2);
+    process.stdout.write(`Created ${answers2.directory}
+`);
+    if (flags.install !== false) {
+      await installAndSeed(targetDir2, pm, answers2.seedDemo, run, admin2);
+    } else {
+      process.stdout.write(`Next: cd ${answers2.directory} && ${installCmd(pm)[0]} install
+`);
+    }
+    process.stdout.write(`${adminSignIn(admin2).join("\n")}
+`);
+    return;
+  }
+  intro(pc.cyan(pc.bold("\u25C6 create-nymbal-app")));
+  const name = flags.name ? flags.name : await text({
+    message: "Store name",
+    placeholder: "My Store",
+    validate: (v) => !v || v.trim().length === 0 ? "Required" : void 0
+  });
+  if (isCancel(name)) return cancel("Cancelled");
+  const currencyOptions = [
+    { value: "GBP", label: "GBP \u2014 British Pound" },
+    { value: "USD", label: "USD \u2014 US Dollar" },
+    { value: "EUR", label: "EUR \u2014 Euro" }
+  ];
+  const currency = await select({
+    message: "Store currency",
+    options: currencyOptions,
+    initialValue: "GBP"
+  });
+  if (isCancel(currency)) return cancel("Cancelled");
+  const templateOptions = [
+    { value: "astro", label: "Astro (recommended \u2014 performance-first)" },
+    { value: "nextjs", label: "Next.js (migration-friendly)" }
+  ];
+  const template = await select({
+    message: "Storefront template",
+    options: templateOptions,
+    initialValue: "astro"
+  });
+  if (isCancel(template)) return cancel("Cancelled");
+  const seedDemo = await confirm({
+    message: "Generate demo content?",
+    initialValue: true
+  });
+  if (isCancel(seedDemo)) return cancel("Cancelled");
+  const shouldInstall = flags.install === false ? false : await confirm({
+    message: "Install dependencies now?",
+    initialValue: true
+  });
+  if (isCancel(shouldInstall)) return cancel("Cancelled");
+  const answers = {
+    name: String(name).trim(),
+    directory: toDirectoryName(String(name).trim()),
+    currency,
+    template,
+    seedDemo
+  };
+  const targetDir = resolve(process.cwd(), answers.directory);
+  if (existsSync(targetDir)) {
+    const entries = await readdir(targetDir);
+    if (entries.length > 0) {
+      cancel(`Directory ${answers.directory} already exists and is not empty.`);
+      process.exit(1);
+    }
+  } else {
+    await mkdir(targetDir, { recursive: true });
+  }
+  note(pc.dim(`Scaffolding into ${targetDir}`), "Creating project");
+  await scaffold(targetDir, answers);
+  const admin = newAdminCredentials();
+  await writeAdminEnv(targetDir, admin);
+  if (shouldInstall) {
+    await installAndSeed(targetDir, pm, answers.seedDemo, run, admin);
+  }
+  const cmd = devCmd(pm);
+  const nextSteps = [
+    `  ${pc.cyan("cd")} ${answers.directory}`
+  ];
+  if (!shouldInstall) {
+    const [ic] = installCmd(pm);
+    nextSteps.push(`  ${pc.cyan(ic + " install")}`);
+  }
+  nextSteps.push(`  ${pc.cyan(cmd)}`);
+  outro(
+    [pc.green(`\u2713 Created ${answers.directory}`), "", ...nextSteps, "", ...adminSignIn(admin)].join(
+      "\n"
+    )
+  );
+}
+async function installAndSeed(dir, pm, seedDemo, run, admin) {
+  const [installBin, installArgs] = installCmd(pm);
+  process.stdout.write(`Running ${installBin} install (this may take a moment)...
+`);
+  await run(installBin, installArgs, dir);
+  if (seedDemo) {
+    process.stdout.write("Seeding demo content...\n");
+    const [seedBin, seedArgs] = seedCmd(pm);
+    await run(seedBin, seedArgs, dir, {
+      ...process.env,
+      NYMBAL_ADMIN_EMAIL: admin.email,
+      NYMBAL_ADMIN_PASSWORD: admin.password
+    });
+  }
+}
+async function scaffold(dir, answers) {
+  await copyScaffoldDir(resolve(SCAFFOLD_ROOT, "templates", answers.template), dir);
+  const projectLayer = resolve(SCAFFOLD_ROOT, "project", answers.template);
+  if (existsSync(projectLayer)) {
+    await copyScaffoldDir(projectLayer, dir);
+  }
+  await writeFile(resolve(dir, "nymbal.config.ts"), renderConfig(answers), "utf8");
+  await patchPackageJson(dir, answers.directory);
+}
+async function patchPackageJson(dir, name) {
+  const pkgPath = resolve(dir, "package.json");
+  const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+  pkg["name"] = name;
+  pkg["private"] = true;
+  const packageManager = packageManagerField();
+  if (packageManager) pkg["packageManager"] = packageManager;
+  await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + "\n", "utf8");
+}
+async function copyScaffoldDir(src, dest) {
+  if (!existsSync(src)) {
+    throw new Error(`Scaffold directory not found: ${src}`);
+  }
+  await cp(src, dest, {
+    recursive: true,
+    filter: (source) => !source.endsWith("node_modules")
+  });
+  await renameDotFiles(dest);
+}
+async function renameDotFiles(dir) {
+  const entries = await readdir(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory() && entry.name.startsWith("_dot.")) {
+      const full = resolve(dir, entry.name);
+      const renamed = resolve(dir, "." + entry.name.slice(5));
+      await writeFile(renamed, await readFile(full));
+      await rm(full);
+    }
+  }
+}
+function renderConfig(answers) {
+  return `import { defineConfig, env } from '@nymbalhq/config'
+
+export default defineConfig({
+  store: {
+    name: '${escape(answers.name)}',
+    currency: '${answers.currency}',
+    locale: '${defaultLocale(answers.currency)}',
+    timezone: '${defaultTimezone(answers.currency)}',
+  },
+
+  template: '${answers.template}',
+
+  infrastructure: {
+    cloud: 'local',
+    commandStore: 'sqlite',
+    documentStore: 'in-memory',
+    eventBus: 'in-process',
+    compute: 'in-process',
+  },
+
+  security: {
+    adapter: 'middleware',
+    rateLimit: {
+      '/checkout': { requests: 10, window: '60s', action: 'block' },
+      '/auth/*': { requests: 5, window: '60s', action: 'challenge' },
+      '/api/*': { requests: 100, window: '60s', action: 'throttle' },
+      '/webhooks/*': { requests: 200, window: '60s', action: 'throttle' },
+    },
+    botProtection: { mode: 'managed', allowList: ['googlebot', 'bingbot', 'stripe-webhooks'] },
+    headers: {
+      hsts: true,
+      contentSecurityPolicy: 'strict',
+      referrerPolicy: 'strict-origin-when-cross-origin',
+      xFrameOptions: 'deny',
+    },
+    csrf: true,
+  },
+
+  commerce: {
+    payments: { provider: 'native' },
+    email: { provider: 'native' },
+    reviews: { provider: 'native' },
+    search: { provider: 'native' },
+    analytics: { provider: 'native' },
+    shipping: { provider: 'native' },
+    tax: { provider: 'native' },
+    ai: { provider: 'anthropic', config: { apiKey: env('ANTHROPIC_API_KEY', 'anthropic-placeholder') } },
+  },
+
+  http: {
+    adapter: 'fastify',
+    port: ${API_PORT},
+  },
+
+  deployment: {
+    strategy: 'standard',
+  },
+
+  features: {
+    staging: false,
+    heartbeat: false,
+    autoUpdates: false,
+  },
+})
+`;
+}
+function defaultLocale(currency) {
+  return currency === "USD" ? "en-US" : "en-GB";
+}
+function defaultTimezone(currency) {
+  return currency === "USD" ? "America/New_York" : "Europe/London";
+}
+function escape(v) {
+  return v.replace(/'/g, "\\'");
+}
+function toDirectoryName(name) {
+  return name.toLowerCase().replace(/[^a-z0-9-_ ]/g, "").trim().replace(/\s+/g, "-");
+}
+var runCmd = (cmd, args, cwd, env = process.env) => {
+  return new Promise((resolve2, reject) => {
+    const child = spawn(cmd, args, { cwd, env, stdio: "inherit", shell: false });
+    child.on("error", reject);
+    child.on("exit", (code) => {
+      if (code === 0) return resolve2();
+      reject(new Error(`${cmd} ${args.join(" ")} exited with ${code}`));
+    });
+  });
+};
+export {
+  CliFlagError,
+  detectPackageManager,
+  main,
+  parseCliFlags,
+  scaffold
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { cp, readFile, mkdir, readdir, rm, writeFile } from 'node:fs/promises'\nimport { existsSync } from 'node:fs'\nimport { dirname, resolve } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport { spawn, spawnSync } from 'node:child_process'\nimport { randomBytes } from 'node:crypto'\nimport { cancel, confirm, intro, isCancel, note, outro, select, text } from '@clack/prompts'\nimport pc from 'picocolors'\n\nconst HERE = dirname(fileURLToPath(import.meta.url))\nconst SCAFFOLD_ROOT = resolve(HERE, '..', 'scaffold')\n\nexport type PackageManager = 'npm' | 'pnpm' | 'yarn-classic' | 'yarn-berry' | 'bun'\n\ninterface Answers {\n  name: string\n  directory: string\n  currency: 'GBP' | 'USD' | 'EUR'\n  template: 'astro' | 'nextjs'\n  seedDemo: boolean\n}\n\n/**\n * Runs a command in `cwd` (with `env` when given, else the process environment) and rejects on a non-zero exit.\n * Injected into `main` so tests do not shell out.\n */\nexport type Runner = (\n  cmd: string,\n  args: string[],\n  cwd: string,\n  env?: NodeJS.ProcessEnv,\n) => Promise<void>\n\n/** The port `renderConfig` gives the API, which serves the admin at /admin/. */\nconst API_PORT = 3001\n\ninterface AdminCredentials {\n  email: string\n  password: string\n}\n\n/** A fresh admin password per project (128 bits, base64url), so no two stores share the seed's default. */\nfunction newAdminCredentials(): AdminCredentials {\n  return { email: 'admin@nymbal.local', password: randomBytes(16).toString('base64url') }\n}\n\n/** `.env` holds the admin credentials the seed (and a first `nymbal dev`) creates the admin from. */\nasync function writeAdminEnv(dir: string, admin: AdminCredentials): Promise<void> {\n  const lines = [\n    '# The admin account the seed creates. Keep this file out of version control (.gitignore lists it).',\n    `NYMBAL_ADMIN_EMAIL=${admin.email}`,\n    `NYMBAL_ADMIN_PASSWORD=${admin.password}`,\n    '',\n  ]\n  await writeFile(resolve(dir, '.env'), lines.join('\\n'), { encoding: 'utf8', mode: 0o600 })\n}\n\nfunction adminSignIn(admin: AdminCredentials): string[] {\n  return [\n    `Admin: http://localhost:${API_PORT}/admin/`,\n    `  email     ${admin.email}`,\n    `  password  ${admin.password} (saved in .env)`,\n  ]\n}\n\nexport interface MainDeps {\n  run?: Runner\n}\n\n/**\n * The `packageManager` field for the package manager that launched us (`npm_config_user_agent`), read when called.\n * Without a usable user agent it is the installed npm; undefined when npm cannot be run either.\n */\nfunction packageManagerField(): string | undefined {\n  const token = (process.env['npm_config_user_agent'] ?? '').split(' ')[0] ?? ''\n  const match = /^(npm|pnpm|yarn|bun)\\/(\\d+\\.\\d+\\.\\d+\\S*)$/.exec(token)\n  if (match) return `${match[1]}@${match[2]}`\n  const npm = spawnSync('npm', ['-v'], { encoding: 'utf8', shell: process.platform === 'win32' })\n  const version = npm.status === 0 ? npm.stdout.trim() : ''\n  return version ? `npm@${version}` : undefined\n}\n\nexport function detectPackageManager(): PackageManager {\n  const ua = process.env['npm_config_user_agent']\n  if (!ua) return 'npm'\n  const token = ua.split(' ')[0] ?? ''\n  const slash = token.indexOf('/')\n  const pm = slash >= 0 ? token.slice(0, slash) : token\n  const version = slash >= 0 ? token.slice(slash + 1) : ''\n  if (pm === 'pnpm') return 'pnpm'\n  if (pm === 'bun') return 'bun'\n  if (pm === 'yarn') {\n    const major = parseInt(version.split('.')[0] ?? '1', 10)\n    return major < 2 ? 'yarn-classic' : 'yarn-berry'\n  }\n  return 'npm'\n}\n\nfunction installCmd(pm: PackageManager): [string, string[]] {\n  switch (pm) {\n    case 'pnpm': return ['pnpm', ['install']]\n    case 'bun': return ['bun', ['install']]\n    case 'yarn-classic':\n    case 'yarn-berry': return ['yarn', ['install']]\n    default: return ['npm', ['install']]\n  }\n}\n\nfunction seedCmd(pm: PackageManager): [string, string[]] {\n  switch (pm) {\n    case 'pnpm': return ['pnpm', ['exec', 'nymbal', 'seed']]\n    case 'bun': return ['bunx', ['nymbal', 'seed']]\n    case 'yarn-classic': return ['yarn', ['run', 'nymbal', 'seed']]\n    case 'yarn-berry': return ['yarn', ['exec', 'nymbal', 'seed']]\n    default: return ['npx', ['nymbal', 'seed']]\n  }\n}\n\nfunction devCmd(pm: PackageManager): string {\n  switch (pm) {\n    case 'pnpm': return 'pnpm dev'\n    case 'bun': return 'bun dev'\n    case 'yarn-classic':\n    case 'yarn-berry': return 'yarn dev'\n    default: return 'npm run dev'\n  }\n}\n\nconst TEMPLATES = ['astro', 'nextjs'] as const\nconst CURRENCIES = ['GBP', 'USD', 'EUR'] as const\n\nexport interface CliFlags {\n  name?: string\n  template?: (typeof TEMPLATES)[number]\n  currency?: (typeof CURRENCIES)[number]\n  yes: boolean\n  /** Present (false) only with `--no-install`. */\n  install?: boolean\n}\n\n/** A command-line flag that is missing its value or names a value outside the allowed set. */\nexport class CliFlagError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'CliFlagError'\n  }\n}\n\nfunction oneOf<T extends string>(flag: string, value: string, allowed: readonly T[]): T {\n  if ((allowed as readonly string[]).includes(value)) return value as T\n  throw new CliFlagError(`Unknown ${flag} \"${value}\". Allowed: ${allowed.join(', ')}`)\n}\n\n/** Parses process.argv (node and script first): --name, --template and --currency take `--flag v` or `--flag=v`. */\nexport function parseCliFlags(argv: string[]): CliFlags {\n  const flags: CliFlags = { yes: false }\n  const args = argv.slice(2)\n  let positional: string | undefined\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i]!\n    if (arg === '--yes' || arg === '-y') {\n      flags.yes = true\n      continue\n    }\n    if (arg === '--no-install') {\n      flags.install = false\n      continue\n    }\n    const match = /^--(name|template|currency)(?:=(.*))?$/s.exec(arg)\n    if (match) {\n      const flag = match[1]!\n      let value = match[2]\n      if (value === undefined) {\n        const next = args[i + 1]\n        if (next === undefined || next.startsWith('-')) throw new CliFlagError(`--${flag} needs a value`)\n        value = next\n        i++\n      }\n      if (flag === 'name') flags.name = value\n      else if (flag === 'template') flags.template = oneOf('--template', value, TEMPLATES)\n      else flags.currency = oneOf('--currency', value, CURRENCIES)\n    } else if (!arg.startsWith('-') && positional === undefined) {\n      positional = arg\n    }\n  }\n  if (flags.name === undefined && positional !== undefined) flags.name = positional\n  return flags\n}\n\nexport async function main(\n  argv: string[] = process.argv,\n  deps: MainDeps = {},\n): Promise<void> {\n  const run = deps.run ?? runCmd\n  let flags: CliFlags\n  try {\n    flags = parseCliFlags(argv)\n  } catch (err) {\n    if (!(err instanceof CliFlagError)) throw err\n    process.stderr.write(`Error: ${err.message}\\n`)\n    process.exit(1)\n  }\n\n  const pm = detectPackageManager()\n\n  if (flags.yes) {\n    if (!flags.name) {\n      process.stderr.write('Error: --yes requires --name or a positional name argument\\n')\n      process.exit(1)\n    }\n    const name = flags.name.trim()\n    const answers: Answers = {\n      name,\n      directory: toDirectoryName(name),\n      currency: flags.currency ?? 'GBP',\n      template: flags.template ?? 'astro',\n      seedDemo: true,\n    }\n    const targetDir = resolve(process.cwd(), answers.directory)\n    if (existsSync(targetDir)) {\n      const entries = await readdir(targetDir)\n      if (entries.length > 0) {\n        process.stderr.write(`Error: Directory ${answers.directory} already exists and is not empty.\\n`)\n        process.exit(1)\n      }\n    } else {\n      await mkdir(targetDir, { recursive: true })\n    }\n    await scaffold(targetDir, answers)\n    const admin = newAdminCredentials()\n    await writeAdminEnv(targetDir, admin)\n    process.stdout.write(`Created ${answers.directory}\\n`)\n    if (flags.install !== false) {\n      await installAndSeed(targetDir, pm, answers.seedDemo, run, admin)\n    } else {\n      process.stdout.write(`Next: cd ${answers.directory} && ${installCmd(pm)[0]} install\\n`)\n    }\n    process.stdout.write(`${adminSignIn(admin).join('\\n')}\\n`)\n    return\n  }\n\n  intro(pc.cyan(pc.bold('◆ create-nymbal-app')))\n\n  const name = flags.name\n    ? flags.name\n    : ((await text({\n        message: 'Store name',\n        placeholder: 'My Store',\n        validate: (v) => (!v || v.trim().length === 0 ? 'Required' : undefined),\n      })) as string | symbol)\n\n  if (isCancel(name)) return cancel('Cancelled')\n\n  type Currency = 'GBP' | 'USD' | 'EUR'\n  const currencyOptions: { value: Currency; label: string }[] = [\n    { value: 'GBP', label: 'GBP — British Pound' },\n    { value: 'USD', label: 'USD — US Dollar' },\n    { value: 'EUR', label: 'EUR — Euro' },\n  ]\n  const currency = await select({\n    message: 'Store currency',\n    options: currencyOptions,\n    initialValue: 'GBP' as Currency,\n  })\n\n  if (isCancel(currency)) return cancel('Cancelled')\n\n  type Template = 'astro' | 'nextjs'\n  const templateOptions: { value: Template; label: string }[] = [\n    { value: 'astro', label: 'Astro (recommended — performance-first)' },\n    { value: 'nextjs', label: 'Next.js (migration-friendly)' },\n  ]\n  const template = await select({\n    message: 'Storefront template',\n    options: templateOptions,\n    initialValue: 'astro' as Template,\n  })\n\n  if (isCancel(template)) return cancel('Cancelled')\n\n  const seedDemo = (await confirm({\n    message: 'Generate demo content?',\n    initialValue: true,\n  })) as boolean | symbol\n\n  if (isCancel(seedDemo)) return cancel('Cancelled')\n\n  const shouldInstall =\n    flags.install === false\n      ? false\n      : ((await confirm({\n          message: 'Install dependencies now?',\n          initialValue: true,\n        })) as boolean | symbol)\n\n  if (isCancel(shouldInstall)) return cancel('Cancelled')\n\n  const answers: Answers = {\n    name: String(name).trim(),\n    directory: toDirectoryName(String(name).trim()),\n    currency: currency as 'GBP' | 'USD' | 'EUR',\n    template: template as 'astro' | 'nextjs',\n    seedDemo: seedDemo as boolean,\n  }\n\n  const targetDir = resolve(process.cwd(), answers.directory)\n  if (existsSync(targetDir)) {\n    const entries = await readdir(targetDir)\n    if (entries.length > 0) {\n      cancel(`Directory ${answers.directory} already exists and is not empty.`)\n      process.exit(1)\n    }\n  } else {\n    await mkdir(targetDir, { recursive: true })\n  }\n\n  note(pc.dim(`Scaffolding into ${targetDir}`), 'Creating project')\n\n  await scaffold(targetDir, answers)\n  const admin = newAdminCredentials()\n  await writeAdminEnv(targetDir, admin)\n\n  if (shouldInstall) {\n    await installAndSeed(targetDir, pm, answers.seedDemo, run, admin)\n  }\n\n  const cmd = devCmd(pm)\n  const nextSteps = [\n    `  ${pc.cyan('cd')} ${answers.directory}`,\n  ]\n  if (!shouldInstall) {\n    const [ic] = installCmd(pm)\n    nextSteps.push(`  ${pc.cyan(ic + ' install')}`)\n  }\n  nextSteps.push(`  ${pc.cyan(cmd)}`)\n\n  outro(\n    [pc.green(`✓ Created ${answers.directory}`), '', ...nextSteps, '', ...adminSignIn(admin)].join(\n      '\\n',\n    ),\n  )\n}\n\n/** Install with the detected package manager, then seed through the project's own `nymbal` bin. */\nasync function installAndSeed(\n  dir: string,\n  pm: PackageManager,\n  seedDemo: boolean,\n  run: Runner,\n  admin: AdminCredentials,\n): Promise<void> {\n  const [installBin, installArgs] = installCmd(pm)\n  process.stdout.write(`Running ${installBin} install (this may take a moment)...\\n`)\n  await run(installBin, installArgs, dir)\n  if (seedDemo) {\n    process.stdout.write('Seeding demo content...\\n')\n    const [seedBin, seedArgs] = seedCmd(pm)\n    // Explicit, so a value exported in the shell cannot replace the one in .env and the outro.\n    await run(seedBin, seedArgs, dir, {\n      ...process.env,\n      NYMBAL_ADMIN_EMAIL: admin.email,\n      NYMBAL_ADMIN_PASSWORD: admin.password,\n    })\n  }\n}\n\nexport async function scaffold(dir: string, answers: Answers): Promise<void> {\n  // Copy the chosen template directly into dir (flat — no storefront/ subdirectory)\n  await copyScaffoldDir(resolve(SCAFFOLD_ROOT, 'templates', answers.template), dir)\n\n  // Overlay the project layer (scaffold/project/<template>) on top of the template\n  // defaults. Project files WIN on path collision — this is the override model:\n  // anything in the project layer shadows the template default at the same path.\n  // scaffold/project/ lives outside scaffold/templates/, so sync-scaffold's\n  // rm -rf of scaffold/templates/* never deletes it.\n  const projectLayer = resolve(SCAFFOLD_ROOT, 'project', answers.template)\n  if (existsSync(projectLayer)) {\n    await copyScaffoldDir(projectLayer, dir)\n  }\n\n  // Write nymbal.config.ts (answers-dependent, so generated at runtime)\n  await writeFile(resolve(dir, 'nymbal.config.ts'), renderConfig(answers), 'utf8')\n\n  // Patch the copied package.json: set name to the project directory name\n  await patchPackageJson(dir, answers.directory)\n}\n\nasync function patchPackageJson(dir: string, name: string): Promise<void> {\n  const pkgPath = resolve(dir, 'package.json')\n  const pkg = JSON.parse(await readFile(pkgPath, 'utf8')) as Record<string, unknown>\n  pkg['name'] = name\n  pkg['private'] = true\n  const packageManager = packageManagerField()\n  if (packageManager) pkg['packageManager'] = packageManager\n  await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\\n', 'utf8')\n}\n\nasync function copyScaffoldDir(src: string, dest: string): Promise<void> {\n  if (!existsSync(src)) {\n    throw new Error(`Scaffold directory not found: ${src}`)\n  }\n  await cp(src, dest, {\n    recursive: true,\n    filter: (source) => !source.endsWith('node_modules'),\n  })\n  await renameDotFiles(dest)\n}\n\nasync function renameDotFiles(dir: string): Promise<void> {\n  // Non-recursive: only rename _dot.* files at the project root.\n  // All shared dotfiles (_dot.gitignore, _dot.env.example) live at template root.\n  const entries = await readdir(dir, { withFileTypes: true })\n  for (const entry of entries) {\n    if (!entry.isDirectory() && entry.name.startsWith('_dot.')) {\n      const full = resolve(dir, entry.name)\n      const renamed = resolve(dir, '.' + entry.name.slice(5))\n      await writeFile(renamed, await readFile(full))\n      await rm(full)\n    }\n  }\n}\n\nfunction renderConfig(answers: Answers): string {\n  return `import { defineConfig, env } from '@nymbalhq/config'\n\nexport default defineConfig({\n  store: {\n    name: '${escape(answers.name)}',\n    currency: '${answers.currency}',\n    locale: '${defaultLocale(answers.currency)}',\n    timezone: '${defaultTimezone(answers.currency)}',\n  },\n\n  template: '${answers.template}',\n\n  infrastructure: {\n    cloud: 'local',\n    commandStore: 'sqlite',\n    documentStore: 'in-memory',\n    eventBus: 'in-process',\n    compute: 'in-process',\n  },\n\n  security: {\n    adapter: 'middleware',\n    rateLimit: {\n      '/checkout': { requests: 10, window: '60s', action: 'block' },\n      '/auth/*': { requests: 5, window: '60s', action: 'challenge' },\n      '/api/*': { requests: 100, window: '60s', action: 'throttle' },\n      '/webhooks/*': { requests: 200, window: '60s', action: 'throttle' },\n    },\n    botProtection: { mode: 'managed', allowList: ['googlebot', 'bingbot', 'stripe-webhooks'] },\n    headers: {\n      hsts: true,\n      contentSecurityPolicy: 'strict',\n      referrerPolicy: 'strict-origin-when-cross-origin',\n      xFrameOptions: 'deny',\n    },\n    csrf: true,\n  },\n\n  commerce: {\n    payments: { provider: 'native' },\n    email: { provider: 'native' },\n    reviews: { provider: 'native' },\n    search: { provider: 'native' },\n    analytics: { provider: 'native' },\n    shipping: { provider: 'native' },\n    tax: { provider: 'native' },\n    ai: { provider: 'anthropic', config: { apiKey: env('ANTHROPIC_API_KEY', 'anthropic-placeholder') } },\n  },\n\n  http: {\n    adapter: 'fastify',\n    port: ${API_PORT},\n  },\n\n  deployment: {\n    strategy: 'standard',\n  },\n\n  features: {\n    staging: false,\n    heartbeat: false,\n    autoUpdates: false,\n  },\n})\n`\n}\n\nfunction defaultLocale(currency: Answers['currency']): string {\n  return currency === 'USD' ? 'en-US' : 'en-GB'\n}\n\nfunction defaultTimezone(currency: Answers['currency']): string {\n  return currency === 'USD' ? 'America/New_York' : 'Europe/London'\n}\n\nfunction escape(v: string): string {\n  return v.replace(/'/g, \"\\\\'\")\n}\n\nfunction toDirectoryName(name: string): string {\n  return name\n    .toLowerCase()\n    .replace(/[^a-z0-9-_ ]/g, '')\n    .trim()\n    .replace(/\\s+/g, '-')\n}\n\nconst runCmd: Runner = (cmd, args, cwd, env = process.env) => {\n  return new Promise((resolve, reject) => {\n    const child = spawn(cmd, args, { cwd, env, stdio: 'inherit', shell: false })\n    child.on('error', reject)\n    child.on('exit', (code) => {\n      if (code === 0) return resolve()\n      reject(new Error(`${cmd} ${args.join(' ')} exited with ${code}`))\n    })\n  })\n}\n"],"mappings":";AAAA,SAAS,IAAI,UAAU,OAAO,SAAS,IAAI,iBAAiB;AAC5D,SAAS,kBAAkB;AAC3B,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAC9B,SAAS,OAAO,iBAAiB;AACjC,SAAS,mBAAmB;AAC5B,SAAS,QAAQ,SAAS,OAAO,UAAU,MAAM,OAAO,QAAQ,YAAY;AAC5E,OAAO,QAAQ;AAEf,IAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,IAAM,gBAAgB,QAAQ,MAAM,MAAM,UAAU;AAwBpD,IAAM,WAAW;AAQjB,SAAS,sBAAwC;AAC/C,SAAO,EAAE,OAAO,sBAAsB,UAAU,YAAY,EAAE,EAAE,SAAS,WAAW,EAAE;AACxF;AAGA,eAAe,cAAc,KAAa,OAAwC;AAChF,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA,sBAAsB,MAAM,KAAK;AAAA,IACjC,yBAAyB,MAAM,QAAQ;AAAA,IACvC;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,KAAK,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AAC3F;AAEA,SAAS,YAAY,OAAmC;AACtD,SAAO;AAAA,IACL,2BAA2B,QAAQ;AAAA,IACnC,eAAe,MAAM,KAAK;AAAA,IAC1B,eAAe,MAAM,QAAQ;AAAA,EAC/B;AACF;AAUA,SAAS,sBAA0C;AACjD,QAAM,SAAS,QAAQ,IAAI,uBAAuB,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAC5E,QAAM,QAAQ,4CAA4C,KAAK,KAAK;AACpE,MAAI,MAAO,QAAO,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACzC,QAAM,MAAM,UAAU,OAAO,CAAC,IAAI,GAAG,EAAE,UAAU,QAAQ,OAAO,QAAQ,aAAa,QAAQ,CAAC;AAC9F,QAAM,UAAU,IAAI,WAAW,IAAI,IAAI,OAAO,KAAK,IAAI;AACvD,SAAO,UAAU,OAAO,OAAO,KAAK;AACtC;AAEO,SAAS,uBAAuC;AACrD,QAAM,KAAK,QAAQ,IAAI,uBAAuB;AAC9C,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,KAAK;AAClC,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,QAAM,KAAK,SAAS,IAAI,MAAM,MAAM,GAAG,KAAK,IAAI;AAChD,QAAM,UAAU,SAAS,IAAI,MAAM,MAAM,QAAQ,CAAC,IAAI;AACtD,MAAI,OAAO,OAAQ,QAAO;AAC1B,MAAI,OAAO,MAAO,QAAO;AACzB,MAAI,OAAO,QAAQ;AACjB,UAAM,QAAQ,SAAS,QAAQ,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE;AACvD,WAAO,QAAQ,IAAI,iBAAiB;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,WAAW,IAAwC;AAC1D,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;AAAA,IACxC,KAAK;AAAO,aAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AAAA,IACtC,KAAK;AAAA,IACL,KAAK;AAAc,aAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;AAAA,IAC9C;AAAS,aAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AAAA,EACrC;AACF;AAEA,SAAS,QAAQ,IAAwC;AACvD,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO,CAAC,QAAQ,CAAC,QAAQ,UAAU,MAAM,CAAC;AAAA,IACvD,KAAK;AAAO,aAAO,CAAC,QAAQ,CAAC,UAAU,MAAM,CAAC;AAAA,IAC9C,KAAK;AAAgB,aAAO,CAAC,QAAQ,CAAC,OAAO,UAAU,MAAM,CAAC;AAAA,IAC9D,KAAK;AAAc,aAAO,CAAC,QAAQ,CAAC,QAAQ,UAAU,MAAM,CAAC;AAAA,IAC7D;AAAS,aAAO,CAAC,OAAO,CAAC,UAAU,MAAM,CAAC;AAAA,EAC5C;AACF;AAEA,SAAS,OAAO,IAA4B;AAC1C,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO;AAAA,IACpB,KAAK;AAAO,aAAO;AAAA,IACnB,KAAK;AAAA,IACL,KAAK;AAAc,aAAO;AAAA,IAC1B;AAAS,aAAO;AAAA,EAClB;AACF;AAEA,IAAM,YAAY,CAAC,SAAS,QAAQ;AACpC,IAAM,aAAa,CAAC,OAAO,OAAO,KAAK;AAYhC,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,MAAwB,MAAc,OAAe,SAA0B;AACtF,MAAK,QAA8B,SAAS,KAAK,EAAG,QAAO;AAC3D,QAAM,IAAI,aAAa,WAAW,IAAI,KAAK,KAAK,eAAe,QAAQ,KAAK,IAAI,CAAC,EAAE;AACrF;AAGO,SAAS,cAAc,MAA0B;AACtD,QAAM,QAAkB,EAAE,KAAK,MAAM;AACrC,QAAM,OAAO,KAAK,MAAM,CAAC;AACzB,MAAI;AACJ,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,MAAM,KAAK,CAAC;AAClB,QAAI,QAAQ,WAAW,QAAQ,MAAM;AACnC,YAAM,MAAM;AACZ;AAAA,IACF;AACA,QAAI,QAAQ,gBAAgB;AAC1B,YAAM,UAAU;AAChB;AAAA,IACF;AACA,UAAM,QAAQ,0CAA0C,KAAK,GAAG;AAChE,QAAI,OAAO;AACT,YAAM,OAAO,MAAM,CAAC;AACpB,UAAI,QAAQ,MAAM,CAAC;AACnB,UAAI,UAAU,QAAW;AACvB,cAAM,OAAO,KAAK,IAAI,CAAC;AACvB,YAAI,SAAS,UAAa,KAAK,WAAW,GAAG,EAAG,OAAM,IAAI,aAAa,KAAK,IAAI,gBAAgB;AAChG,gBAAQ;AACR;AAAA,MACF;AACA,UAAI,SAAS,OAAQ,OAAM,OAAO;AAAA,eACzB,SAAS,WAAY,OAAM,WAAW,MAAM,cAAc,OAAO,SAAS;AAAA,UAC9E,OAAM,WAAW,MAAM,cAAc,OAAO,UAAU;AAAA,IAC7D,WAAW,CAAC,IAAI,WAAW,GAAG,KAAK,eAAe,QAAW;AAC3D,mBAAa;AAAA,IACf;AAAA,EACF;AACA,MAAI,MAAM,SAAS,UAAa,eAAe,OAAW,OAAM,OAAO;AACvE,SAAO;AACT;AAEA,eAAsB,KACpB,OAAiB,QAAQ,MACzB,OAAiB,CAAC,GACH;AACf,QAAM,MAAM,KAAK,OAAO;AACxB,MAAI;AACJ,MAAI;AACF,YAAQ,cAAc,IAAI;AAAA,EAC5B,SAAS,KAAK;AACZ,QAAI,EAAE,eAAe,cAAe,OAAM;AAC1C,YAAQ,OAAO,MAAM,UAAU,IAAI,OAAO;AAAA,CAAI;AAC9C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,KAAK,qBAAqB;AAEhC,MAAI,MAAM,KAAK;AACb,QAAI,CAAC,MAAM,MAAM;AACf,cAAQ,OAAO,MAAM,8DAA8D;AACnF,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAMA,QAAO,MAAM,KAAK,KAAK;AAC7B,UAAMC,WAAmB;AAAA,MACvB,MAAAD;AAAA,MACA,WAAW,gBAAgBA,KAAI;AAAA,MAC/B,UAAU,MAAM,YAAY;AAAA,MAC5B,UAAU,MAAM,YAAY;AAAA,MAC5B,UAAU;AAAA,IACZ;AACA,UAAME,aAAY,QAAQ,QAAQ,IAAI,GAAGD,SAAQ,SAAS;AAC1D,QAAI,WAAWC,UAAS,GAAG;AACzB,YAAM,UAAU,MAAM,QAAQA,UAAS;AACvC,UAAI,QAAQ,SAAS,GAAG;AACtB,gBAAQ,OAAO,MAAM,oBAAoBD,SAAQ,SAAS;AAAA,CAAqC;AAC/F,gBAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,IACF,OAAO;AACL,YAAM,MAAMC,YAAW,EAAE,WAAW,KAAK,CAAC;AAAA,IAC5C;AACA,UAAM,SAASA,YAAWD,QAAO;AACjC,UAAME,SAAQ,oBAAoB;AAClC,UAAM,cAAcD,YAAWC,MAAK;AACpC,YAAQ,OAAO,MAAM,WAAWF,SAAQ,SAAS;AAAA,CAAI;AACrD,QAAI,MAAM,YAAY,OAAO;AAC3B,YAAM,eAAeC,YAAW,IAAID,SAAQ,UAAU,KAAKE,MAAK;AAAA,IAClE,OAAO;AACL,cAAQ,OAAO,MAAM,YAAYF,SAAQ,SAAS,OAAO,WAAW,EAAE,EAAE,CAAC,CAAC;AAAA,CAAY;AAAA,IACxF;AACA,YAAQ,OAAO,MAAM,GAAG,YAAYE,MAAK,EAAE,KAAK,IAAI,CAAC;AAAA,CAAI;AACzD;AAAA,EACF;AAEA,QAAM,GAAG,KAAK,GAAG,KAAK,0BAAqB,CAAC,CAAC;AAE7C,QAAM,OAAO,MAAM,OACf,MAAM,OACJ,MAAM,KAAK;AAAA,IACX,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU,CAAC,MAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa;AAAA,EAC/D,CAAC;AAEL,MAAI,SAAS,IAAI,EAAG,QAAO,OAAO,WAAW;AAG7C,QAAM,kBAAwD;AAAA,IAC5D,EAAE,OAAO,OAAO,OAAO,2BAAsB;AAAA,IAC7C,EAAE,OAAO,OAAO,OAAO,uBAAkB;AAAA,IACzC,EAAE,OAAO,OAAO,OAAO,kBAAa;AAAA,EACtC;AACA,QAAM,WAAW,MAAM,OAAO;AAAA,IAC5B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAGjD,QAAM,kBAAwD;AAAA,IAC5D,EAAE,OAAO,SAAS,OAAO,+CAA0C;AAAA,IACnE,EAAE,OAAO,UAAU,OAAO,+BAA+B;AAAA,EAC3D;AACA,QAAM,WAAW,MAAM,OAAO;AAAA,IAC5B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAEjD,QAAM,WAAY,MAAM,QAAQ;AAAA,IAC9B,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAEjD,QAAM,gBACJ,MAAM,YAAY,QACd,QACE,MAAM,QAAQ;AAAA,IACd,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAEP,MAAI,SAAS,aAAa,EAAG,QAAO,OAAO,WAAW;AAEtD,QAAM,UAAmB;AAAA,IACvB,MAAM,OAAO,IAAI,EAAE,KAAK;AAAA,IACxB,WAAW,gBAAgB,OAAO,IAAI,EAAE,KAAK,CAAC;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,QAAQ,IAAI,GAAG,QAAQ,SAAS;AAC1D,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,UAAU,MAAM,QAAQ,SAAS;AACvC,QAAI,QAAQ,SAAS,GAAG;AACtB,aAAO,aAAa,QAAQ,SAAS,mCAAmC;AACxE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,OAAO;AACL,UAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C;AAEA,OAAK,GAAG,IAAI,oBAAoB,SAAS,EAAE,GAAG,kBAAkB;AAEhE,QAAM,SAAS,WAAW,OAAO;AACjC,QAAM,QAAQ,oBAAoB;AAClC,QAAM,cAAc,WAAW,KAAK;AAEpC,MAAI,eAAe;AACjB,UAAM,eAAe,WAAW,IAAI,QAAQ,UAAU,KAAK,KAAK;AAAA,EAClE;AAEA,QAAM,MAAM,OAAO,EAAE;AACrB,QAAM,YAAY;AAAA,IAChB,KAAK,GAAG,KAAK,IAAI,CAAC,IAAI,QAAQ,SAAS;AAAA,EACzC;AACA,MAAI,CAAC,eAAe;AAClB,UAAM,CAAC,EAAE,IAAI,WAAW,EAAE;AAC1B,cAAU,KAAK,KAAK,GAAG,KAAK,KAAK,UAAU,CAAC,EAAE;AAAA,EAChD;AACA,YAAU,KAAK,KAAK,GAAG,KAAK,GAAG,CAAC,EAAE;AAElC;AAAA,IACE,CAAC,GAAG,MAAM,kBAAa,QAAQ,SAAS,EAAE,GAAG,IAAI,GAAG,WAAW,IAAI,GAAG,YAAY,KAAK,CAAC,EAAE;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AACF;AAGA,eAAe,eACb,KACA,IACA,UACA,KACA,OACe;AACf,QAAM,CAAC,YAAY,WAAW,IAAI,WAAW,EAAE;AAC/C,UAAQ,OAAO,MAAM,WAAW,UAAU;AAAA,CAAwC;AAClF,QAAM,IAAI,YAAY,aAAa,GAAG;AACtC,MAAI,UAAU;AACZ,YAAQ,OAAO,MAAM,2BAA2B;AAChD,UAAM,CAAC,SAAS,QAAQ,IAAI,QAAQ,EAAE;AAEtC,UAAM,IAAI,SAAS,UAAU,KAAK;AAAA,MAChC,GAAG,QAAQ;AAAA,MACX,oBAAoB,MAAM;AAAA,MAC1B,uBAAuB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,SAAS,KAAa,SAAiC;AAE3E,QAAM,gBAAgB,QAAQ,eAAe,aAAa,QAAQ,QAAQ,GAAG,GAAG;AAOhF,QAAM,eAAe,QAAQ,eAAe,WAAW,QAAQ,QAAQ;AACvE,MAAI,WAAW,YAAY,GAAG;AAC5B,UAAM,gBAAgB,cAAc,GAAG;AAAA,EACzC;AAGA,QAAM,UAAU,QAAQ,KAAK,kBAAkB,GAAG,aAAa,OAAO,GAAG,MAAM;AAG/E,QAAM,iBAAiB,KAAK,QAAQ,SAAS;AAC/C;AAEA,eAAe,iBAAiB,KAAa,MAA6B;AACxE,QAAM,UAAU,QAAQ,KAAK,cAAc;AAC3C,QAAM,MAAM,KAAK,MAAM,MAAM,SAAS,SAAS,MAAM,CAAC;AACtD,MAAI,MAAM,IAAI;AACd,MAAI,SAAS,IAAI;AACjB,QAAM,iBAAiB,oBAAoB;AAC3C,MAAI,eAAgB,KAAI,gBAAgB,IAAI;AAC5C,QAAM,UAAU,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,MAAM,MAAM;AACtE;AAEA,eAAe,gBAAgB,KAAa,MAA6B;AACvE,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,UAAM,IAAI,MAAM,iCAAiC,GAAG,EAAE;AAAA,EACxD;AACA,QAAM,GAAG,KAAK,MAAM;AAAA,IAClB,WAAW;AAAA,IACX,QAAQ,CAAC,WAAW,CAAC,OAAO,SAAS,cAAc;AAAA,EACrD,CAAC;AACD,QAAM,eAAe,IAAI;AAC3B;AAEA,eAAe,eAAe,KAA4B;AAGxD,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC1D,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,OAAO,GAAG;AAC1D,YAAM,OAAO,QAAQ,KAAK,MAAM,IAAI;AACpC,YAAM,UAAU,QAAQ,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,CAAC;AACtD,YAAM,UAAU,SAAS,MAAM,SAAS,IAAI,CAAC;AAC7C,YAAM,GAAG,IAAI;AAAA,IACf;AAAA,EACF;AACF;AAEA,SAAS,aAAa,SAA0B;AAC9C,SAAO;AAAA;AAAA;AAAA;AAAA,aAII,OAAO,QAAQ,IAAI,CAAC;AAAA,iBAChB,QAAQ,QAAQ;AAAA,eAClB,cAAc,QAAQ,QAAQ,CAAC;AAAA,iBAC7B,gBAAgB,QAAQ,QAAQ,CAAC;AAAA;AAAA;AAAA,eAGnC,QAAQ,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAyCnB,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcpB;AAEA,SAAS,cAAc,UAAuC;AAC5D,SAAO,aAAa,QAAQ,UAAU;AACxC;AAEA,SAAS,gBAAgB,UAAuC;AAC9D,SAAO,aAAa,QAAQ,qBAAqB;AACnD;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,EAAE,QAAQ,MAAM,KAAK;AAC9B;AAEA,SAAS,gBAAgB,MAAsB;AAC7C,SAAO,KACJ,YAAY,EACZ,QAAQ,iBAAiB,EAAE,EAC3B,KAAK,EACL,QAAQ,QAAQ,GAAG;AACxB;AAEA,IAAM,SAAiB,CAAC,KAAK,MAAM,KAAK,MAAM,QAAQ,QAAQ;AAC5D,SAAO,IAAI,QAAQ,CAACC,UAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,OAAO,WAAW,OAAO,MAAM,CAAC;AAC3E,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,QAAQ,CAAC,SAAS;AACzB,UAAI,SAAS,EAAG,QAAOA,SAAQ;AAC/B,aAAO,IAAI,MAAM,GAAG,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;AAAA,IAClE,CAAC;AAAA,EACH,CAAC;AACH;","names":["name","answers","targetDir","admin","resolve"]}

package/package.json

@@ -1,10 +1,44 @@
 {
   "name": "create-nymbal-app",
-  "version": "0.0.0",
-  "description": "Scaffolder for Nymbal, the open source commerce platform. This name is reserved by the project. See the repository for status.",
+  "version": "0.2.0",
+  "description": "Scaffold a new Nymbal commerce project",
   "license": "MIT",
-  "repository": { "type": "git", "url": "git+https://github.com/nymbalhq/nymbal.git" },
-  "homepage": "https://github.com/nymbalhq/nymbal",
-  "files": ["README.md"],
-  "publishConfig": { "access": "public" }
-}
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nymbalhq/nymbal.git",
+    "directory": "packages/create-app"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "create-nymbal-app": "./bin/create-nymbal-app.mjs"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "bin",
+    "dist",
+    "scaffold"
+  ],
+  "dependencies": {
+    "@clack/prompts": "^0.7.0",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "tsup": "^8.3.5",
+    "typescript": "^5.6.3",
+    "vitest": "^3.0.0"
+  },
+  "scripts": {
+    "build": "tsup && pnpm sync:scaffold",
+    "dev": "tsup --watch",
+    "sync:scaffold": "node ./scripts/sync-scaffold.mjs",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}

package/scaffold/project/astro/src/pages/index.astro

@@ -0,0 +1,57 @@
+---
+import '../styles/pages/home.css'
+import BaseLayout from '../layouts/BaseLayout.astro'
+import HeroSection from '../components/HeroSection.astro'
+import CategoryNav from '../components/CategoryNav.astro'
+import ProductCard from '../components/ProductCard.astro'
+import NewsletterSignup from '../components/NewsletterSignup.astro'
+import { fetchProducts, fetchCategories } from '../lib/api'
+import { organizationJsonLd } from '../lib/seo'
+
+const [productResult, categories] = await Promise.all([
+  fetchProducts({ limit: 8 }),
+  fetchCategories(),
+])
+
+const products = productResult.items
+const jsonLd = organizationJsonLd('Nymbal', Astro.url.origin)
+---
+
+<BaseLayout title="Nymbal — Modern Storefront" jsonLd={jsonLd}>
+  {/* Marks this page as the project-scaffolded override of the template default.
+      Rendered as a real (hidden) element rather than an HTML comment because the
+      Astro compiler strips bare comments that lead a component fragment, which
+      would silently break the override smoke check. */}
+  <div hidden data-nymbal-marker="nymbal:project-override homepage"></div>
+  <HeroSection />
+
+  <section class="section container">
+    <p class="section-tagline" style="text-align: center; color: var(--nymbal-color-text-muted, #71717a);">
+      Welcome to your store — this homepage is yours to customise.
+    </p>
+    <h2 class="section-title">Shop by Category</h2>
+    <CategoryNav categories={categories} />
+  </section>
+
+  <section class="featured-section section">
+    <div class="container">
+      <div class="featured-header">
+        <h2 class="section-title" style="margin-bottom: 0;">Our Featured Picks</h2>
+        <a href="/products" class="featured-link">View all</a>
+      </div>
+      {products.length > 0 ? (
+        <div class="product-grid">
+          {products.map((product) => (
+            <ProductCard product={product} />
+          ))}
+        </div>
+      ) : (
+        <p style="text-align: center; color: var(--nymbal-color-text-muted, #71717a);">
+          Products coming soon.
+        </p>
+      )}
+    </div>
+  </section>
+
+  <NewsletterSignup />
+</BaseLayout>

package/scaffold/templates/astro/README.md

@@ -0,0 +1,26 @@
+# Your Nymbal Store
+
+A commerce project scaffolded with [create-nymbal-app](https://github.com/nymbal/nymbal).
+
+## Scripts
+
+```
+pnpm dev         # start Astro dev server
+pnpm build       # production build
+pnpm preview     # preview production build locally
+pnpm migrate     # run database migrations
+pnpm seed        # re-seed demo content
+```
+
+## Configuration
+
+All configuration lives in `nymbal.config.ts`. Adapters, template, security, and deployment
+settings are centralized there — the CLI and every package reads from the same source of truth.
+
+## Swapping the command store
+
+For local development you get SQLite out of the box. To move to Postgres:
+
+1. Set `DATABASE_URL=postgres://…` in `.env`.
+2. Change `infrastructure.commandStore` to `'postgres'` in `nymbal.config.ts`.
+3. Run `pnpm migrate`.

package/scaffold/templates/astro/_dot.env.example

@@ -0,0 +1,6 @@
+# Copy to .env and fill in as needed
+NYMBAL_API_URL=http://localhost:3001
+# DATABASE_URL=postgres://user:pass@localhost:5432/nymbal
+# STRIPE_SECRET_KEY=
+# STRIPE_WEBHOOK_SECRET=
+# ANTHROPIC_API_KEY=