create-nymbal-app 0.2.0 → 0.3.0

package/dist/index.js

@@ -321,7 +321,7 @@ async function renameDotFiles(dir) {
   }
 }
 function renderConfig(answers) {
-  return `import { defineConfig, env } from '@nymbalhq/config'
+  return `import { defineConfig } from '@nymbalhq/config'
 
 export default defineConfig({
   store: {
@@ -367,7 +367,7 @@ export default defineConfig({
     analytics: { provider: 'native' },
     shipping: { provider: 'native' },
     tax: { provider: 'native' },
-    ai: { provider: 'anthropic', config: { apiKey: env('ANTHROPIC_API_KEY', 'anthropic-placeholder') } },
+    ai: { provider: 'none' },
   },
 
   http: {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { cp, readFile, mkdir, readdir, rm, writeFile } from 'node:fs/promises'\nimport { existsSync } from 'node:fs'\nimport { dirname, resolve } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport { spawn, spawnSync } from 'node:child_process'\nimport { randomBytes } from 'node:crypto'\nimport { cancel, confirm, intro, isCancel, note, outro, select, text } from '@clack/prompts'\nimport pc from 'picocolors'\n\nconst HERE = dirname(fileURLToPath(import.meta.url))\nconst SCAFFOLD_ROOT = resolve(HERE, '..', 'scaffold')\n\nexport type PackageManager = 'npm' | 'pnpm' | 'yarn-classic' | 'yarn-berry' | 'bun'\n\ninterface Answers {\n  name: string\n  directory: string\n  currency: 'GBP' | 'USD' | 'EUR'\n  template: 'astro' | 'nextjs'\n  seedDemo: boolean\n}\n\n/**\n * Runs a command in `cwd` (with `env` when given, else the process environment) and rejects on a non-zero exit.\n * Injected into `main` so tests do not shell out.\n */\nexport type Runner = (\n  cmd: string,\n  args: string[],\n  cwd: string,\n  env?: NodeJS.ProcessEnv,\n) => Promise<void>\n\n/** The port `renderConfig` gives the API, which serves the admin at /admin/. */\nconst API_PORT = 3001\n\ninterface AdminCredentials {\n  email: string\n  password: string\n}\n\n/** A fresh admin password per project (128 bits, base64url), so no two stores share the seed's default. */\nfunction newAdminCredentials(): AdminCredentials {\n  return { email: 'admin@nymbal.local', password: randomBytes(16).toString('base64url') }\n}\n\n/** `.env` holds the admin credentials the seed (and a first `nymbal dev`) creates the admin from. */\nasync function writeAdminEnv(dir: string, admin: AdminCredentials): Promise<void> {\n  const lines = [\n    '# The admin account the seed creates. Keep this file out of version control (.gitignore lists it).',\n    `NYMBAL_ADMIN_EMAIL=${admin.email}`,\n    `NYMBAL_ADMIN_PASSWORD=${admin.password}`,\n    '',\n  ]\n  await writeFile(resolve(dir, '.env'), lines.join('\\n'), { encoding: 'utf8', mode: 0o600 })\n}\n\nfunction adminSignIn(admin: AdminCredentials): string[] {\n  return [\n    `Admin: http://localhost:${API_PORT}/admin/`,\n    `  email     ${admin.email}`,\n    `  password  ${admin.password} (saved in .env)`,\n  ]\n}\n\nexport interface MainDeps {\n  run?: Runner\n}\n\n/**\n * The `packageManager` field for the package manager that launched us (`npm_config_user_agent`), read when called.\n * Without a usable user agent it is the installed npm; undefined when npm cannot be run either.\n */\nfunction packageManagerField(): string | undefined {\n  const token = (process.env['npm_config_user_agent'] ?? '').split(' ')[0] ?? ''\n  const match = /^(npm|pnpm|yarn|bun)\\/(\\d+\\.\\d+\\.\\d+\\S*)$/.exec(token)\n  if (match) return `${match[1]}@${match[2]}`\n  const npm = spawnSync('npm', ['-v'], { encoding: 'utf8', shell: process.platform === 'win32' })\n  const version = npm.status === 0 ? npm.stdout.trim() : ''\n  return version ? `npm@${version}` : undefined\n}\n\nexport function detectPackageManager(): PackageManager {\n  const ua = process.env['npm_config_user_agent']\n  if (!ua) return 'npm'\n  const token = ua.split(' ')[0] ?? ''\n  const slash = token.indexOf('/')\n  const pm = slash >= 0 ? token.slice(0, slash) : token\n  const version = slash >= 0 ? token.slice(slash + 1) : ''\n  if (pm === 'pnpm') return 'pnpm'\n  if (pm === 'bun') return 'bun'\n  if (pm === 'yarn') {\n    const major = parseInt(version.split('.')[0] ?? '1', 10)\n    return major < 2 ? 'yarn-classic' : 'yarn-berry'\n  }\n  return 'npm'\n}\n\nfunction installCmd(pm: PackageManager): [string, string[]] {\n  switch (pm) {\n    case 'pnpm': return ['pnpm', ['install']]\n    case 'bun': return ['bun', ['install']]\n    case 'yarn-classic':\n    case 'yarn-berry': return ['yarn', ['install']]\n    default: return ['npm', ['install']]\n  }\n}\n\nfunction seedCmd(pm: PackageManager): [string, string[]] {\n  switch (pm) {\n    case 'pnpm': return ['pnpm', ['exec', 'nymbal', 'seed']]\n    case 'bun': return ['bunx', ['nymbal', 'seed']]\n    case 'yarn-classic': return ['yarn', ['run', 'nymbal', 'seed']]\n    case 'yarn-berry': return ['yarn', ['exec', 'nymbal', 'seed']]\n    default: return ['npx', ['nymbal', 'seed']]\n  }\n}\n\nfunction devCmd(pm: PackageManager): string {\n  switch (pm) {\n    case 'pnpm': return 'pnpm dev'\n    case 'bun': return 'bun dev'\n    case 'yarn-classic':\n    case 'yarn-berry': return 'yarn dev'\n    default: return 'npm run dev'\n  }\n}\n\nconst TEMPLATES = ['astro', 'nextjs'] as const\nconst CURRENCIES = ['GBP', 'USD', 'EUR'] as const\n\nexport interface CliFlags {\n  name?: string\n  template?: (typeof TEMPLATES)[number]\n  currency?: (typeof CURRENCIES)[number]\n  yes: boolean\n  /** Present (false) only with `--no-install`. */\n  install?: boolean\n}\n\n/** A command-line flag that is missing its value or names a value outside the allowed set. */\nexport class CliFlagError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'CliFlagError'\n  }\n}\n\nfunction oneOf<T extends string>(flag: string, value: string, allowed: readonly T[]): T {\n  if ((allowed as readonly string[]).includes(value)) return value as T\n  throw new CliFlagError(`Unknown ${flag} \"${value}\". Allowed: ${allowed.join(', ')}`)\n}\n\n/** Parses process.argv (node and script first): --name, --template and --currency take `--flag v` or `--flag=v`. */\nexport function parseCliFlags(argv: string[]): CliFlags {\n  const flags: CliFlags = { yes: false }\n  const args = argv.slice(2)\n  let positional: string | undefined\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i]!\n    if (arg === '--yes' || arg === '-y') {\n      flags.yes = true\n      continue\n    }\n    if (arg === '--no-install') {\n      flags.install = false\n      continue\n    }\n    const match = /^--(name|template|currency)(?:=(.*))?$/s.exec(arg)\n    if (match) {\n      const flag = match[1]!\n      let value = match[2]\n      if (value === undefined) {\n        const next = args[i + 1]\n        if (next === undefined || next.startsWith('-')) throw new CliFlagError(`--${flag} needs a value`)\n        value = next\n        i++\n      }\n      if (flag === 'name') flags.name = value\n      else if (flag === 'template') flags.template = oneOf('--template', value, TEMPLATES)\n      else flags.currency = oneOf('--currency', value, CURRENCIES)\n    } else if (!arg.startsWith('-') && positional === undefined) {\n      positional = arg\n    }\n  }\n  if (flags.name === undefined && positional !== undefined) flags.name = positional\n  return flags\n}\n\nexport async function main(\n  argv: string[] = process.argv,\n  deps: MainDeps = {},\n): Promise<void> {\n  const run = deps.run ?? runCmd\n  let flags: CliFlags\n  try {\n    flags = parseCliFlags(argv)\n  } catch (err) {\n    if (!(err instanceof CliFlagError)) throw err\n    process.stderr.write(`Error: ${err.message}\\n`)\n    process.exit(1)\n  }\n\n  const pm = detectPackageManager()\n\n  if (flags.yes) {\n    if (!flags.name) {\n      process.stderr.write('Error: --yes requires --name or a positional name argument\\n')\n      process.exit(1)\n    }\n    const name = flags.name.trim()\n    const answers: Answers = {\n      name,\n      directory: toDirectoryName(name),\n      currency: flags.currency ?? 'GBP',\n      template: flags.template ?? 'astro',\n      seedDemo: true,\n    }\n    const targetDir = resolve(process.cwd(), answers.directory)\n    if (existsSync(targetDir)) {\n      const entries = await readdir(targetDir)\n      if (entries.length > 0) {\n        process.stderr.write(`Error: Directory ${answers.directory} already exists and is not empty.\\n`)\n        process.exit(1)\n      }\n    } else {\n      await mkdir(targetDir, { recursive: true })\n    }\n    await scaffold(targetDir, answers)\n    const admin = newAdminCredentials()\n    await writeAdminEnv(targetDir, admin)\n    process.stdout.write(`Created ${answers.directory}\\n`)\n    if (flags.install !== false) {\n      await installAndSeed(targetDir, pm, answers.seedDemo, run, admin)\n    } else {\n      process.stdout.write(`Next: cd ${answers.directory} && ${installCmd(pm)[0]} install\\n`)\n    }\n    process.stdout.write(`${adminSignIn(admin).join('\\n')}\\n`)\n    return\n  }\n\n  intro(pc.cyan(pc.bold('◆ create-nymbal-app')))\n\n  const name = flags.name\n    ? flags.name\n    : ((await text({\n        message: 'Store name',\n        placeholder: 'My Store',\n        validate: (v) => (!v || v.trim().length === 0 ? 'Required' : undefined),\n      })) as string | symbol)\n\n  if (isCancel(name)) return cancel('Cancelled')\n\n  type Currency = 'GBP' | 'USD' | 'EUR'\n  const currencyOptions: { value: Currency; label: string }[] = [\n    { value: 'GBP', label: 'GBP — British Pound' },\n    { value: 'USD', label: 'USD — US Dollar' },\n    { value: 'EUR', label: 'EUR — Euro' },\n  ]\n  const currency = await select({\n    message: 'Store currency',\n    options: currencyOptions,\n    initialValue: 'GBP' as Currency,\n  })\n\n  if (isCancel(currency)) return cancel('Cancelled')\n\n  type Template = 'astro' | 'nextjs'\n  const templateOptions: { value: Template; label: string }[] = [\n    { value: 'astro', label: 'Astro (recommended — performance-first)' },\n    { value: 'nextjs', label: 'Next.js (migration-friendly)' },\n  ]\n  const template = await select({\n    message: 'Storefront template',\n    options: templateOptions,\n    initialValue: 'astro' as Template,\n  })\n\n  if (isCancel(template)) return cancel('Cancelled')\n\n  const seedDemo = (await confirm({\n    message: 'Generate demo content?',\n    initialValue: true,\n  })) as boolean | symbol\n\n  if (isCancel(seedDemo)) return cancel('Cancelled')\n\n  const shouldInstall =\n    flags.install === false\n      ? false\n      : ((await confirm({\n          message: 'Install dependencies now?',\n          initialValue: true,\n        })) as boolean | symbol)\n\n  if (isCancel(shouldInstall)) return cancel('Cancelled')\n\n  const answers: Answers = {\n    name: String(name).trim(),\n    directory: toDirectoryName(String(name).trim()),\n    currency: currency as 'GBP' | 'USD' | 'EUR',\n    template: template as 'astro' | 'nextjs',\n    seedDemo: seedDemo as boolean,\n  }\n\n  const targetDir = resolve(process.cwd(), answers.directory)\n  if (existsSync(targetDir)) {\n    const entries = await readdir(targetDir)\n    if (entries.length > 0) {\n      cancel(`Directory ${answers.directory} already exists and is not empty.`)\n      process.exit(1)\n    }\n  } else {\n    await mkdir(targetDir, { recursive: true })\n  }\n\n  note(pc.dim(`Scaffolding into ${targetDir}`), 'Creating project')\n\n  await scaffold(targetDir, answers)\n  const admin = newAdminCredentials()\n  await writeAdminEnv(targetDir, admin)\n\n  if (shouldInstall) {\n    await installAndSeed(targetDir, pm, answers.seedDemo, run, admin)\n  }\n\n  const cmd = devCmd(pm)\n  const nextSteps = [\n    `  ${pc.cyan('cd')} ${answers.directory}`,\n  ]\n  if (!shouldInstall) {\n    const [ic] = installCmd(pm)\n    nextSteps.push(`  ${pc.cyan(ic + ' install')}`)\n  }\n  nextSteps.push(`  ${pc.cyan(cmd)}`)\n\n  outro(\n    [pc.green(`✓ Created ${answers.directory}`), '', ...nextSteps, '', ...adminSignIn(admin)].join(\n      '\\n',\n    ),\n  )\n}\n\n/** Install with the detected package manager, then seed through the project's own `nymbal` bin. */\nasync function installAndSeed(\n  dir: string,\n  pm: PackageManager,\n  seedDemo: boolean,\n  run: Runner,\n  admin: AdminCredentials,\n): Promise<void> {\n  const [installBin, installArgs] = installCmd(pm)\n  process.stdout.write(`Running ${installBin} install (this may take a moment)...\\n`)\n  await run(installBin, installArgs, dir)\n  if (seedDemo) {\n    process.stdout.write('Seeding demo content...\\n')\n    const [seedBin, seedArgs] = seedCmd(pm)\n    // Explicit, so a value exported in the shell cannot replace the one in .env and the outro.\n    await run(seedBin, seedArgs, dir, {\n      ...process.env,\n      NYMBAL_ADMIN_EMAIL: admin.email,\n      NYMBAL_ADMIN_PASSWORD: admin.password,\n    })\n  }\n}\n\nexport async function scaffold(dir: string, answers: Answers): Promise<void> {\n  // Copy the chosen template directly into dir (flat — no storefront/ subdirectory)\n  await copyScaffoldDir(resolve(SCAFFOLD_ROOT, 'templates', answers.template), dir)\n\n  // Overlay the project layer (scaffold/project/<template>) on top of the template\n  // defaults. Project files WIN on path collision — this is the override model:\n  // anything in the project layer shadows the template default at the same path.\n  // scaffold/project/ lives outside scaffold/templates/, so sync-scaffold's\n  // rm -rf of scaffold/templates/* never deletes it.\n  const projectLayer = resolve(SCAFFOLD_ROOT, 'project', answers.template)\n  if (existsSync(projectLayer)) {\n    await copyScaffoldDir(projectLayer, dir)\n  }\n\n  // Write nymbal.config.ts (answers-dependent, so generated at runtime)\n  await writeFile(resolve(dir, 'nymbal.config.ts'), renderConfig(answers), 'utf8')\n\n  // Patch the copied package.json: set name to the project directory name\n  await patchPackageJson(dir, answers.directory)\n}\n\nasync function patchPackageJson(dir: string, name: string): Promise<void> {\n  const pkgPath = resolve(dir, 'package.json')\n  const pkg = JSON.parse(await readFile(pkgPath, 'utf8')) as Record<string, unknown>\n  pkg['name'] = name\n  pkg['private'] = true\n  const packageManager = packageManagerField()\n  if (packageManager) pkg['packageManager'] = packageManager\n  await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\\n', 'utf8')\n}\n\nasync function copyScaffoldDir(src: string, dest: string): Promise<void> {\n  if (!existsSync(src)) {\n    throw new Error(`Scaffold directory not found: ${src}`)\n  }\n  await cp(src, dest, {\n    recursive: true,\n    filter: (source) => !source.endsWith('node_modules'),\n  })\n  await renameDotFiles(dest)\n}\n\nasync function renameDotFiles(dir: string): Promise<void> {\n  // Non-recursive: only rename _dot.* files at the project root.\n  // All shared dotfiles (_dot.gitignore, _dot.env.example) live at template root.\n  const entries = await readdir(dir, { withFileTypes: true })\n  for (const entry of entries) {\n    if (!entry.isDirectory() && entry.name.startsWith('_dot.')) {\n      const full = resolve(dir, entry.name)\n      const renamed = resolve(dir, '.' + entry.name.slice(5))\n      await writeFile(renamed, await readFile(full))\n      await rm(full)\n    }\n  }\n}\n\nfunction renderConfig(answers: Answers): string {\n  return `import { defineConfig, env } from '@nymbalhq/config'\n\nexport default defineConfig({\n  store: {\n    name: '${escape(answers.name)}',\n    currency: '${answers.currency}',\n    locale: '${defaultLocale(answers.currency)}',\n    timezone: '${defaultTimezone(answers.currency)}',\n  },\n\n  template: '${answers.template}',\n\n  infrastructure: {\n    cloud: 'local',\n    commandStore: 'sqlite',\n    documentStore: 'in-memory',\n    eventBus: 'in-process',\n    compute: 'in-process',\n  },\n\n  security: {\n    adapter: 'middleware',\n    rateLimit: {\n      '/checkout': { requests: 10, window: '60s', action: 'block' },\n      '/auth/*': { requests: 5, window: '60s', action: 'challenge' },\n      '/api/*': { requests: 100, window: '60s', action: 'throttle' },\n      '/webhooks/*': { requests: 200, window: '60s', action: 'throttle' },\n    },\n    botProtection: { mode: 'managed', allowList: ['googlebot', 'bingbot', 'stripe-webhooks'] },\n    headers: {\n      hsts: true,\n      contentSecurityPolicy: 'strict',\n      referrerPolicy: 'strict-origin-when-cross-origin',\n      xFrameOptions: 'deny',\n    },\n    csrf: true,\n  },\n\n  commerce: {\n    payments: { provider: 'native' },\n    email: { provider: 'native' },\n    reviews: { provider: 'native' },\n    search: { provider: 'native' },\n    analytics: { provider: 'native' },\n    shipping: { provider: 'native' },\n    tax: { provider: 'native' },\n    ai: { provider: 'anthropic', config: { apiKey: env('ANTHROPIC_API_KEY', 'anthropic-placeholder') } },\n  },\n\n  http: {\n    adapter: 'fastify',\n    port: ${API_PORT},\n  },\n\n  deployment: {\n    strategy: 'standard',\n  },\n\n  features: {\n    staging: false,\n    heartbeat: false,\n    autoUpdates: false,\n  },\n})\n`\n}\n\nfunction defaultLocale(currency: Answers['currency']): string {\n  return currency === 'USD' ? 'en-US' : 'en-GB'\n}\n\nfunction defaultTimezone(currency: Answers['currency']): string {\n  return currency === 'USD' ? 'America/New_York' : 'Europe/London'\n}\n\nfunction escape(v: string): string {\n  return v.replace(/'/g, \"\\\\'\")\n}\n\nfunction toDirectoryName(name: string): string {\n  return name\n    .toLowerCase()\n    .replace(/[^a-z0-9-_ ]/g, '')\n    .trim()\n    .replace(/\\s+/g, '-')\n}\n\nconst runCmd: Runner = (cmd, args, cwd, env = process.env) => {\n  return new Promise((resolve, reject) => {\n    const child = spawn(cmd, args, { cwd, env, stdio: 'inherit', shell: false })\n    child.on('error', reject)\n    child.on('exit', (code) => {\n      if (code === 0) return resolve()\n      reject(new Error(`${cmd} ${args.join(' ')} exited with ${code}`))\n    })\n  })\n}\n"],"mappings":";AAAA,SAAS,IAAI,UAAU,OAAO,SAAS,IAAI,iBAAiB;AAC5D,SAAS,kBAAkB;AAC3B,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAC9B,SAAS,OAAO,iBAAiB;AACjC,SAAS,mBAAmB;AAC5B,SAAS,QAAQ,SAAS,OAAO,UAAU,MAAM,OAAO,QAAQ,YAAY;AAC5E,OAAO,QAAQ;AAEf,IAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,IAAM,gBAAgB,QAAQ,MAAM,MAAM,UAAU;AAwBpD,IAAM,WAAW;AAQjB,SAAS,sBAAwC;AAC/C,SAAO,EAAE,OAAO,sBAAsB,UAAU,YAAY,EAAE,EAAE,SAAS,WAAW,EAAE;AACxF;AAGA,eAAe,cAAc,KAAa,OAAwC;AAChF,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA,sBAAsB,MAAM,KAAK;AAAA,IACjC,yBAAyB,MAAM,QAAQ;AAAA,IACvC;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,KAAK,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AAC3F;AAEA,SAAS,YAAY,OAAmC;AACtD,SAAO;AAAA,IACL,2BAA2B,QAAQ;AAAA,IACnC,eAAe,MAAM,KAAK;AAAA,IAC1B,eAAe,MAAM,QAAQ;AAAA,EAC/B;AACF;AAUA,SAAS,sBAA0C;AACjD,QAAM,SAAS,QAAQ,IAAI,uBAAuB,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAC5E,QAAM,QAAQ,4CAA4C,KAAK,KAAK;AACpE,MAAI,MAAO,QAAO,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACzC,QAAM,MAAM,UAAU,OAAO,CAAC,IAAI,GAAG,EAAE,UAAU,QAAQ,OAAO,QAAQ,aAAa,QAAQ,CAAC;AAC9F,QAAM,UAAU,IAAI,WAAW,IAAI,IAAI,OAAO,KAAK,IAAI;AACvD,SAAO,UAAU,OAAO,OAAO,KAAK;AACtC;AAEO,SAAS,uBAAuC;AACrD,QAAM,KAAK,QAAQ,IAAI,uBAAuB;AAC9C,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,KAAK;AAClC,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,QAAM,KAAK,SAAS,IAAI,MAAM,MAAM,GAAG,KAAK,IAAI;AAChD,QAAM,UAAU,SAAS,IAAI,MAAM,MAAM,QAAQ,CAAC,IAAI;AACtD,MAAI,OAAO,OAAQ,QAAO;AAC1B,MAAI,OAAO,MAAO,QAAO;AACzB,MAAI,OAAO,QAAQ;AACjB,UAAM,QAAQ,SAAS,QAAQ,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE;AACvD,WAAO,QAAQ,IAAI,iBAAiB;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,WAAW,IAAwC;AAC1D,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;AAAA,IACxC,KAAK;AAAO,aAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AAAA,IACtC,KAAK;AAAA,IACL,KAAK;AAAc,aAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;AAAA,IAC9C;AAAS,aAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AAAA,EACrC;AACF;AAEA,SAAS,QAAQ,IAAwC;AACvD,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO,CAAC,QAAQ,CAAC,QAAQ,UAAU,MAAM,CAAC;AAAA,IACvD,KAAK;AAAO,aAAO,CAAC,QAAQ,CAAC,UAAU,MAAM,CAAC;AAAA,IAC9C,KAAK;AAAgB,aAAO,CAAC,QAAQ,CAAC,OAAO,UAAU,MAAM,CAAC;AAAA,IAC9D,KAAK;AAAc,aAAO,CAAC,QAAQ,CAAC,QAAQ,UAAU,MAAM,CAAC;AAAA,IAC7D;AAAS,aAAO,CAAC,OAAO,CAAC,UAAU,MAAM,CAAC;AAAA,EAC5C;AACF;AAEA,SAAS,OAAO,IAA4B;AAC1C,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO;AAAA,IACpB,KAAK;AAAO,aAAO;AAAA,IACnB,KAAK;AAAA,IACL,KAAK;AAAc,aAAO;AAAA,IAC1B;AAAS,aAAO;AAAA,EAClB;AACF;AAEA,IAAM,YAAY,CAAC,SAAS,QAAQ;AACpC,IAAM,aAAa,CAAC,OAAO,OAAO,KAAK;AAYhC,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,MAAwB,MAAc,OAAe,SAA0B;AACtF,MAAK,QAA8B,SAAS,KAAK,EAAG,QAAO;AAC3D,QAAM,IAAI,aAAa,WAAW,IAAI,KAAK,KAAK,eAAe,QAAQ,KAAK,IAAI,CAAC,EAAE;AACrF;AAGO,SAAS,cAAc,MAA0B;AACtD,QAAM,QAAkB,EAAE,KAAK,MAAM;AACrC,QAAM,OAAO,KAAK,MAAM,CAAC;AACzB,MAAI;AACJ,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,MAAM,KAAK,CAAC;AAClB,QAAI,QAAQ,WAAW,QAAQ,MAAM;AACnC,YAAM,MAAM;AACZ;AAAA,IACF;AACA,QAAI,QAAQ,gBAAgB;AAC1B,YAAM,UAAU;AAChB;AAAA,IACF;AACA,UAAM,QAAQ,0CAA0C,KAAK,GAAG;AAChE,QAAI,OAAO;AACT,YAAM,OAAO,MAAM,CAAC;AACpB,UAAI,QAAQ,MAAM,CAAC;AACnB,UAAI,UAAU,QAAW;AACvB,cAAM,OAAO,KAAK,IAAI,CAAC;AACvB,YAAI,SAAS,UAAa,KAAK,WAAW,GAAG,EAAG,OAAM,IAAI,aAAa,KAAK,IAAI,gBAAgB;AAChG,gBAAQ;AACR;AAAA,MACF;AACA,UAAI,SAAS,OAAQ,OAAM,OAAO;AAAA,eACzB,SAAS,WAAY,OAAM,WAAW,MAAM,cAAc,OAAO,SAAS;AAAA,UAC9E,OAAM,WAAW,MAAM,cAAc,OAAO,UAAU;AAAA,IAC7D,WAAW,CAAC,IAAI,WAAW,GAAG,KAAK,eAAe,QAAW;AAC3D,mBAAa;AAAA,IACf;AAAA,EACF;AACA,MAAI,MAAM,SAAS,UAAa,eAAe,OAAW,OAAM,OAAO;AACvE,SAAO;AACT;AAEA,eAAsB,KACpB,OAAiB,QAAQ,MACzB,OAAiB,CAAC,GACH;AACf,QAAM,MAAM,KAAK,OAAO;AACxB,MAAI;AACJ,MAAI;AACF,YAAQ,cAAc,IAAI;AAAA,EAC5B,SAAS,KAAK;AACZ,QAAI,EAAE,eAAe,cAAe,OAAM;AAC1C,YAAQ,OAAO,MAAM,UAAU,IAAI,OAAO;AAAA,CAAI;AAC9C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,KAAK,qBAAqB;AAEhC,MAAI,MAAM,KAAK;AACb,QAAI,CAAC,MAAM,MAAM;AACf,cAAQ,OAAO,MAAM,8DAA8D;AACnF,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAMA,QAAO,MAAM,KAAK,KAAK;AAC7B,UAAMC,WAAmB;AAAA,MACvB,MAAAD;AAAA,MACA,WAAW,gBAAgBA,KAAI;AAAA,MAC/B,UAAU,MAAM,YAAY;AAAA,MAC5B,UAAU,MAAM,YAAY;AAAA,MAC5B,UAAU;AAAA,IACZ;AACA,UAAME,aAAY,QAAQ,QAAQ,IAAI,GAAGD,SAAQ,SAAS;AAC1D,QAAI,WAAWC,UAAS,GAAG;AACzB,YAAM,UAAU,MAAM,QAAQA,UAAS;AACvC,UAAI,QAAQ,SAAS,GAAG;AACtB,gBAAQ,OAAO,MAAM,oBAAoBD,SAAQ,SAAS;AAAA,CAAqC;AAC/F,gBAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,IACF,OAAO;AACL,YAAM,MAAMC,YAAW,EAAE,WAAW,KAAK,CAAC;AAAA,IAC5C;AACA,UAAM,SAASA,YAAWD,QAAO;AACjC,UAAME,SAAQ,oBAAoB;AAClC,UAAM,cAAcD,YAAWC,MAAK;AACpC,YAAQ,OAAO,MAAM,WAAWF,SAAQ,SAAS;AAAA,CAAI;AACrD,QAAI,MAAM,YAAY,OAAO;AAC3B,YAAM,eAAeC,YAAW,IAAID,SAAQ,UAAU,KAAKE,MAAK;AAAA,IAClE,OAAO;AACL,cAAQ,OAAO,MAAM,YAAYF,SAAQ,SAAS,OAAO,WAAW,EAAE,EAAE,CAAC,CAAC;AAAA,CAAY;AAAA,IACxF;AACA,YAAQ,OAAO,MAAM,GAAG,YAAYE,MAAK,EAAE,KAAK,IAAI,CAAC;AAAA,CAAI;AACzD;AAAA,EACF;AAEA,QAAM,GAAG,KAAK,GAAG,KAAK,0BAAqB,CAAC,CAAC;AAE7C,QAAM,OAAO,MAAM,OACf,MAAM,OACJ,MAAM,KAAK;AAAA,IACX,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU,CAAC,MAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa;AAAA,EAC/D,CAAC;AAEL,MAAI,SAAS,IAAI,EAAG,QAAO,OAAO,WAAW;AAG7C,QAAM,kBAAwD;AAAA,IAC5D,EAAE,OAAO,OAAO,OAAO,2BAAsB;AAAA,IAC7C,EAAE,OAAO,OAAO,OAAO,uBAAkB;AAAA,IACzC,EAAE,OAAO,OAAO,OAAO,kBAAa;AAAA,EACtC;AACA,QAAM,WAAW,MAAM,OAAO;AAAA,IAC5B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAGjD,QAAM,kBAAwD;AAAA,IAC5D,EAAE,OAAO,SAAS,OAAO,+CAA0C;AAAA,IACnE,EAAE,OAAO,UAAU,OAAO,+BAA+B;AAAA,EAC3D;AACA,QAAM,WAAW,MAAM,OAAO;AAAA,IAC5B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAEjD,QAAM,WAAY,MAAM,QAAQ;AAAA,IAC9B,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAEjD,QAAM,gBACJ,MAAM,YAAY,QACd,QACE,MAAM,QAAQ;AAAA,IACd,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAEP,MAAI,SAAS,aAAa,EAAG,QAAO,OAAO,WAAW;AAEtD,QAAM,UAAmB;AAAA,IACvB,MAAM,OAAO,IAAI,EAAE,KAAK;AAAA,IACxB,WAAW,gBAAgB,OAAO,IAAI,EAAE,KAAK,CAAC;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,QAAQ,IAAI,GAAG,QAAQ,SAAS;AAC1D,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,UAAU,MAAM,QAAQ,SAAS;AACvC,QAAI,QAAQ,SAAS,GAAG;AACtB,aAAO,aAAa,QAAQ,SAAS,mCAAmC;AACxE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,OAAO;AACL,UAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C;AAEA,OAAK,GAAG,IAAI,oBAAoB,SAAS,EAAE,GAAG,kBAAkB;AAEhE,QAAM,SAAS,WAAW,OAAO;AACjC,QAAM,QAAQ,oBAAoB;AAClC,QAAM,cAAc,WAAW,KAAK;AAEpC,MAAI,eAAe;AACjB,UAAM,eAAe,WAAW,IAAI,QAAQ,UAAU,KAAK,KAAK;AAAA,EAClE;AAEA,QAAM,MAAM,OAAO,EAAE;AACrB,QAAM,YAAY;AAAA,IAChB,KAAK,GAAG,KAAK,IAAI,CAAC,IAAI,QAAQ,SAAS;AAAA,EACzC;AACA,MAAI,CAAC,eAAe;AAClB,UAAM,CAAC,EAAE,IAAI,WAAW,EAAE;AAC1B,cAAU,KAAK,KAAK,GAAG,KAAK,KAAK,UAAU,CAAC,EAAE;AAAA,EAChD;AACA,YAAU,KAAK,KAAK,GAAG,KAAK,GAAG,CAAC,EAAE;AAElC;AAAA,IACE,CAAC,GAAG,MAAM,kBAAa,QAAQ,SAAS,EAAE,GAAG,IAAI,GAAG,WAAW,IAAI,GAAG,YAAY,KAAK,CAAC,EAAE;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AACF;AAGA,eAAe,eACb,KACA,IACA,UACA,KACA,OACe;AACf,QAAM,CAAC,YAAY,WAAW,IAAI,WAAW,EAAE;AAC/C,UAAQ,OAAO,MAAM,WAAW,UAAU;AAAA,CAAwC;AAClF,QAAM,IAAI,YAAY,aAAa,GAAG;AACtC,MAAI,UAAU;AACZ,YAAQ,OAAO,MAAM,2BAA2B;AAChD,UAAM,CAAC,SAAS,QAAQ,IAAI,QAAQ,EAAE;AAEtC,UAAM,IAAI,SAAS,UAAU,KAAK;AAAA,MAChC,GAAG,QAAQ;AAAA,MACX,oBAAoB,MAAM;AAAA,MAC1B,uBAAuB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,SAAS,KAAa,SAAiC;AAE3E,QAAM,gBAAgB,QAAQ,eAAe,aAAa,QAAQ,QAAQ,GAAG,GAAG;AAOhF,QAAM,eAAe,QAAQ,eAAe,WAAW,QAAQ,QAAQ;AACvE,MAAI,WAAW,YAAY,GAAG;AAC5B,UAAM,gBAAgB,cAAc,GAAG;AAAA,EACzC;AAGA,QAAM,UAAU,QAAQ,KAAK,kBAAkB,GAAG,aAAa,OAAO,GAAG,MAAM;AAG/E,QAAM,iBAAiB,KAAK,QAAQ,SAAS;AAC/C;AAEA,eAAe,iBAAiB,KAAa,MAA6B;AACxE,QAAM,UAAU,QAAQ,KAAK,cAAc;AAC3C,QAAM,MAAM,KAAK,MAAM,MAAM,SAAS,SAAS,MAAM,CAAC;AACtD,MAAI,MAAM,IAAI;AACd,MAAI,SAAS,IAAI;AACjB,QAAM,iBAAiB,oBAAoB;AAC3C,MAAI,eAAgB,KAAI,gBAAgB,IAAI;AAC5C,QAAM,UAAU,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,MAAM,MAAM;AACtE;AAEA,eAAe,gBAAgB,KAAa,MAA6B;AACvE,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,UAAM,IAAI,MAAM,iCAAiC,GAAG,EAAE;AAAA,EACxD;AACA,QAAM,GAAG,KAAK,MAAM;AAAA,IAClB,WAAW;AAAA,IACX,QAAQ,CAAC,WAAW,CAAC,OAAO,SAAS,cAAc;AAAA,EACrD,CAAC;AACD,QAAM,eAAe,IAAI;AAC3B;AAEA,eAAe,eAAe,KAA4B;AAGxD,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC1D,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,OAAO,GAAG;AAC1D,YAAM,OAAO,QAAQ,KAAK,MAAM,IAAI;AACpC,YAAM,UAAU,QAAQ,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,CAAC;AACtD,YAAM,UAAU,SAAS,MAAM,SAAS,IAAI,CAAC;AAC7C,YAAM,GAAG,IAAI;AAAA,IACf;AAAA,EACF;AACF;AAEA,SAAS,aAAa,SAA0B;AAC9C,SAAO;AAAA;AAAA;AAAA;AAAA,aAII,OAAO,QAAQ,IAAI,CAAC;AAAA,iBAChB,QAAQ,QAAQ;AAAA,eAClB,cAAc,QAAQ,QAAQ,CAAC;AAAA,iBAC7B,gBAAgB,QAAQ,QAAQ,CAAC;AAAA;AAAA;AAAA,eAGnC,QAAQ,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAyCnB,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcpB;AAEA,SAAS,cAAc,UAAuC;AAC5D,SAAO,aAAa,QAAQ,UAAU;AACxC;AAEA,SAAS,gBAAgB,UAAuC;AAC9D,SAAO,aAAa,QAAQ,qBAAqB;AACnD;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,EAAE,QAAQ,MAAM,KAAK;AAC9B;AAEA,SAAS,gBAAgB,MAAsB;AAC7C,SAAO,KACJ,YAAY,EACZ,QAAQ,iBAAiB,EAAE,EAC3B,KAAK,EACL,QAAQ,QAAQ,GAAG;AACxB;AAEA,IAAM,SAAiB,CAAC,KAAK,MAAM,KAAK,MAAM,QAAQ,QAAQ;AAC5D,SAAO,IAAI,QAAQ,CAACC,UAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,OAAO,WAAW,OAAO,MAAM,CAAC;AAC3E,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,QAAQ,CAAC,SAAS;AACzB,UAAI,SAAS,EAAG,QAAOA,SAAQ;AAC/B,aAAO,IAAI,MAAM,GAAG,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;AAAA,IAClE,CAAC;AAAA,EACH,CAAC;AACH;","names":["name","answers","targetDir","admin","resolve"]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { cp, readFile, mkdir, readdir, rm, writeFile } from 'node:fs/promises'\nimport { existsSync } from 'node:fs'\nimport { dirname, resolve } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport { spawn, spawnSync } from 'node:child_process'\nimport { randomBytes } from 'node:crypto'\nimport { cancel, confirm, intro, isCancel, note, outro, select, text } from '@clack/prompts'\nimport pc from 'picocolors'\n\nconst HERE = dirname(fileURLToPath(import.meta.url))\nconst SCAFFOLD_ROOT = resolve(HERE, '..', 'scaffold')\n\nexport type PackageManager = 'npm' | 'pnpm' | 'yarn-classic' | 'yarn-berry' | 'bun'\n\ninterface Answers {\n  name: string\n  directory: string\n  currency: 'GBP' | 'USD' | 'EUR'\n  template: 'astro' | 'nextjs'\n  seedDemo: boolean\n}\n\n/**\n * Runs a command in `cwd` (with `env` when given, else the process environment) and rejects on a non-zero exit.\n * Injected into `main` so tests do not shell out.\n */\nexport type Runner = (\n  cmd: string,\n  args: string[],\n  cwd: string,\n  env?: NodeJS.ProcessEnv,\n) => Promise<void>\n\n/** The port `renderConfig` gives the API, which serves the admin at /admin/. */\nconst API_PORT = 3001\n\ninterface AdminCredentials {\n  email: string\n  password: string\n}\n\n/** A fresh admin password per project (128 bits, base64url), so no two stores share the seed's default. */\nfunction newAdminCredentials(): AdminCredentials {\n  return { email: 'admin@nymbal.local', password: randomBytes(16).toString('base64url') }\n}\n\n/** `.env` holds the admin credentials the seed (and a first `nymbal dev`) creates the admin from. */\nasync function writeAdminEnv(dir: string, admin: AdminCredentials): Promise<void> {\n  const lines = [\n    '# The admin account the seed creates. Keep this file out of version control (.gitignore lists it).',\n    `NYMBAL_ADMIN_EMAIL=${admin.email}`,\n    `NYMBAL_ADMIN_PASSWORD=${admin.password}`,\n    '',\n  ]\n  await writeFile(resolve(dir, '.env'), lines.join('\\n'), { encoding: 'utf8', mode: 0o600 })\n}\n\nfunction adminSignIn(admin: AdminCredentials): string[] {\n  return [\n    `Admin: http://localhost:${API_PORT}/admin/`,\n    `  email     ${admin.email}`,\n    `  password  ${admin.password} (saved in .env)`,\n  ]\n}\n\nexport interface MainDeps {\n  run?: Runner\n}\n\n/**\n * The `packageManager` field for the package manager that launched us (`npm_config_user_agent`), read when called.\n * Without a usable user agent it is the installed npm; undefined when npm cannot be run either.\n */\nfunction packageManagerField(): string | undefined {\n  const token = (process.env['npm_config_user_agent'] ?? '').split(' ')[0] ?? ''\n  const match = /^(npm|pnpm|yarn|bun)\\/(\\d+\\.\\d+\\.\\d+\\S*)$/.exec(token)\n  if (match) return `${match[1]}@${match[2]}`\n  const npm = spawnSync('npm', ['-v'], { encoding: 'utf8', shell: process.platform === 'win32' })\n  const version = npm.status === 0 ? npm.stdout.trim() : ''\n  return version ? `npm@${version}` : undefined\n}\n\nexport function detectPackageManager(): PackageManager {\n  const ua = process.env['npm_config_user_agent']\n  if (!ua) return 'npm'\n  const token = ua.split(' ')[0] ?? ''\n  const slash = token.indexOf('/')\n  const pm = slash >= 0 ? token.slice(0, slash) : token\n  const version = slash >= 0 ? token.slice(slash + 1) : ''\n  if (pm === 'pnpm') return 'pnpm'\n  if (pm === 'bun') return 'bun'\n  if (pm === 'yarn') {\n    const major = parseInt(version.split('.')[0] ?? '1', 10)\n    return major < 2 ? 'yarn-classic' : 'yarn-berry'\n  }\n  return 'npm'\n}\n\nfunction installCmd(pm: PackageManager): [string, string[]] {\n  switch (pm) {\n    case 'pnpm': return ['pnpm', ['install']]\n    case 'bun': return ['bun', ['install']]\n    case 'yarn-classic':\n    case 'yarn-berry': return ['yarn', ['install']]\n    default: return ['npm', ['install']]\n  }\n}\n\nfunction seedCmd(pm: PackageManager): [string, string[]] {\n  switch (pm) {\n    case 'pnpm': return ['pnpm', ['exec', 'nymbal', 'seed']]\n    case 'bun': return ['bunx', ['nymbal', 'seed']]\n    case 'yarn-classic': return ['yarn', ['run', 'nymbal', 'seed']]\n    case 'yarn-berry': return ['yarn', ['exec', 'nymbal', 'seed']]\n    default: return ['npx', ['nymbal', 'seed']]\n  }\n}\n\nfunction devCmd(pm: PackageManager): string {\n  switch (pm) {\n    case 'pnpm': return 'pnpm dev'\n    case 'bun': return 'bun dev'\n    case 'yarn-classic':\n    case 'yarn-berry': return 'yarn dev'\n    default: return 'npm run dev'\n  }\n}\n\nconst TEMPLATES = ['astro', 'nextjs'] as const\nconst CURRENCIES = ['GBP', 'USD', 'EUR'] as const\n\nexport interface CliFlags {\n  name?: string\n  template?: (typeof TEMPLATES)[number]\n  currency?: (typeof CURRENCIES)[number]\n  yes: boolean\n  /** Present (false) only with `--no-install`. */\n  install?: boolean\n}\n\n/** A command-line flag that is missing its value or names a value outside the allowed set. */\nexport class CliFlagError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'CliFlagError'\n  }\n}\n\nfunction oneOf<T extends string>(flag: string, value: string, allowed: readonly T[]): T {\n  if ((allowed as readonly string[]).includes(value)) return value as T\n  throw new CliFlagError(`Unknown ${flag} \"${value}\". Allowed: ${allowed.join(', ')}`)\n}\n\n/** Parses process.argv (node and script first): --name, --template and --currency take `--flag v` or `--flag=v`. */\nexport function parseCliFlags(argv: string[]): CliFlags {\n  const flags: CliFlags = { yes: false }\n  const args = argv.slice(2)\n  let positional: string | undefined\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i]!\n    if (arg === '--yes' || arg === '-y') {\n      flags.yes = true\n      continue\n    }\n    if (arg === '--no-install') {\n      flags.install = false\n      continue\n    }\n    const match = /^--(name|template|currency)(?:=(.*))?$/s.exec(arg)\n    if (match) {\n      const flag = match[1]!\n      let value = match[2]\n      if (value === undefined) {\n        const next = args[i + 1]\n        if (next === undefined || next.startsWith('-')) throw new CliFlagError(`--${flag} needs a value`)\n        value = next\n        i++\n      }\n      if (flag === 'name') flags.name = value\n      else if (flag === 'template') flags.template = oneOf('--template', value, TEMPLATES)\n      else flags.currency = oneOf('--currency', value, CURRENCIES)\n    } else if (!arg.startsWith('-') && positional === undefined) {\n      positional = arg\n    }\n  }\n  if (flags.name === undefined && positional !== undefined) flags.name = positional\n  return flags\n}\n\nexport async function main(\n  argv: string[] = process.argv,\n  deps: MainDeps = {},\n): Promise<void> {\n  const run = deps.run ?? runCmd\n  let flags: CliFlags\n  try {\n    flags = parseCliFlags(argv)\n  } catch (err) {\n    if (!(err instanceof CliFlagError)) throw err\n    process.stderr.write(`Error: ${err.message}\\n`)\n    process.exit(1)\n  }\n\n  const pm = detectPackageManager()\n\n  if (flags.yes) {\n    if (!flags.name) {\n      process.stderr.write('Error: --yes requires --name or a positional name argument\\n')\n      process.exit(1)\n    }\n    const name = flags.name.trim()\n    const answers: Answers = {\n      name,\n      directory: toDirectoryName(name),\n      currency: flags.currency ?? 'GBP',\n      template: flags.template ?? 'astro',\n      seedDemo: true,\n    }\n    const targetDir = resolve(process.cwd(), answers.directory)\n    if (existsSync(targetDir)) {\n      const entries = await readdir(targetDir)\n      if (entries.length > 0) {\n        process.stderr.write(`Error: Directory ${answers.directory} already exists and is not empty.\\n`)\n        process.exit(1)\n      }\n    } else {\n      await mkdir(targetDir, { recursive: true })\n    }\n    await scaffold(targetDir, answers)\n    const admin = newAdminCredentials()\n    await writeAdminEnv(targetDir, admin)\n    process.stdout.write(`Created ${answers.directory}\\n`)\n    if (flags.install !== false) {\n      await installAndSeed(targetDir, pm, answers.seedDemo, run, admin)\n    } else {\n      process.stdout.write(`Next: cd ${answers.directory} && ${installCmd(pm)[0]} install\\n`)\n    }\n    process.stdout.write(`${adminSignIn(admin).join('\\n')}\\n`)\n    return\n  }\n\n  intro(pc.cyan(pc.bold('◆ create-nymbal-app')))\n\n  const name = flags.name\n    ? flags.name\n    : ((await text({\n        message: 'Store name',\n        placeholder: 'My Store',\n        validate: (v) => (!v || v.trim().length === 0 ? 'Required' : undefined),\n      })) as string | symbol)\n\n  if (isCancel(name)) return cancel('Cancelled')\n\n  type Currency = 'GBP' | 'USD' | 'EUR'\n  const currencyOptions: { value: Currency; label: string }[] = [\n    { value: 'GBP', label: 'GBP — British Pound' },\n    { value: 'USD', label: 'USD — US Dollar' },\n    { value: 'EUR', label: 'EUR — Euro' },\n  ]\n  const currency = await select({\n    message: 'Store currency',\n    options: currencyOptions,\n    initialValue: 'GBP' as Currency,\n  })\n\n  if (isCancel(currency)) return cancel('Cancelled')\n\n  type Template = 'astro' | 'nextjs'\n  const templateOptions: { value: Template; label: string }[] = [\n    { value: 'astro', label: 'Astro (recommended — performance-first)' },\n    { value: 'nextjs', label: 'Next.js (migration-friendly)' },\n  ]\n  const template = await select({\n    message: 'Storefront template',\n    options: templateOptions,\n    initialValue: 'astro' as Template,\n  })\n\n  if (isCancel(template)) return cancel('Cancelled')\n\n  const seedDemo = (await confirm({\n    message: 'Generate demo content?',\n    initialValue: true,\n  })) as boolean | symbol\n\n  if (isCancel(seedDemo)) return cancel('Cancelled')\n\n  const shouldInstall =\n    flags.install === false\n      ? false\n      : ((await confirm({\n          message: 'Install dependencies now?',\n          initialValue: true,\n        })) as boolean | symbol)\n\n  if (isCancel(shouldInstall)) return cancel('Cancelled')\n\n  const answers: Answers = {\n    name: String(name).trim(),\n    directory: toDirectoryName(String(name).trim()),\n    currency: currency as 'GBP' | 'USD' | 'EUR',\n    template: template as 'astro' | 'nextjs',\n    seedDemo: seedDemo as boolean,\n  }\n\n  const targetDir = resolve(process.cwd(), answers.directory)\n  if (existsSync(targetDir)) {\n    const entries = await readdir(targetDir)\n    if (entries.length > 0) {\n      cancel(`Directory ${answers.directory} already exists and is not empty.`)\n      process.exit(1)\n    }\n  } else {\n    await mkdir(targetDir, { recursive: true })\n  }\n\n  note(pc.dim(`Scaffolding into ${targetDir}`), 'Creating project')\n\n  await scaffold(targetDir, answers)\n  const admin = newAdminCredentials()\n  await writeAdminEnv(targetDir, admin)\n\n  if (shouldInstall) {\n    await installAndSeed(targetDir, pm, answers.seedDemo, run, admin)\n  }\n\n  const cmd = devCmd(pm)\n  const nextSteps = [\n    `  ${pc.cyan('cd')} ${answers.directory}`,\n  ]\n  if (!shouldInstall) {\n    const [ic] = installCmd(pm)\n    nextSteps.push(`  ${pc.cyan(ic + ' install')}`)\n  }\n  nextSteps.push(`  ${pc.cyan(cmd)}`)\n\n  outro(\n    [pc.green(`✓ Created ${answers.directory}`), '', ...nextSteps, '', ...adminSignIn(admin)].join(\n      '\\n',\n    ),\n  )\n}\n\n/** Install with the detected package manager, then seed through the project's own `nymbal` bin. */\nasync function installAndSeed(\n  dir: string,\n  pm: PackageManager,\n  seedDemo: boolean,\n  run: Runner,\n  admin: AdminCredentials,\n): Promise<void> {\n  const [installBin, installArgs] = installCmd(pm)\n  process.stdout.write(`Running ${installBin} install (this may take a moment)...\\n`)\n  await run(installBin, installArgs, dir)\n  if (seedDemo) {\n    process.stdout.write('Seeding demo content...\\n')\n    const [seedBin, seedArgs] = seedCmd(pm)\n    // Explicit, so a value exported in the shell cannot replace the one in .env and the outro.\n    await run(seedBin, seedArgs, dir, {\n      ...process.env,\n      NYMBAL_ADMIN_EMAIL: admin.email,\n      NYMBAL_ADMIN_PASSWORD: admin.password,\n    })\n  }\n}\n\nexport async function scaffold(dir: string, answers: Answers): Promise<void> {\n  // Copy the chosen template directly into dir (flat — no storefront/ subdirectory)\n  await copyScaffoldDir(resolve(SCAFFOLD_ROOT, 'templates', answers.template), dir)\n\n  // Overlay the project layer (scaffold/project/<template>) on top of the template\n  // defaults. Project files WIN on path collision — this is the override model:\n  // anything in the project layer shadows the template default at the same path.\n  // scaffold/project/ lives outside scaffold/templates/, so sync-scaffold's\n  // rm -rf of scaffold/templates/* never deletes it.\n  const projectLayer = resolve(SCAFFOLD_ROOT, 'project', answers.template)\n  if (existsSync(projectLayer)) {\n    await copyScaffoldDir(projectLayer, dir)\n  }\n\n  // Write nymbal.config.ts (answers-dependent, so generated at runtime)\n  await writeFile(resolve(dir, 'nymbal.config.ts'), renderConfig(answers), 'utf8')\n\n  // Patch the copied package.json: set name to the project directory name\n  await patchPackageJson(dir, answers.directory)\n}\n\nasync function patchPackageJson(dir: string, name: string): Promise<void> {\n  const pkgPath = resolve(dir, 'package.json')\n  const pkg = JSON.parse(await readFile(pkgPath, 'utf8')) as Record<string, unknown>\n  pkg['name'] = name\n  pkg['private'] = true\n  const packageManager = packageManagerField()\n  if (packageManager) pkg['packageManager'] = packageManager\n  await writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\\n', 'utf8')\n}\n\nasync function copyScaffoldDir(src: string, dest: string): Promise<void> {\n  if (!existsSync(src)) {\n    throw new Error(`Scaffold directory not found: ${src}`)\n  }\n  await cp(src, dest, {\n    recursive: true,\n    filter: (source) => !source.endsWith('node_modules'),\n  })\n  await renameDotFiles(dest)\n}\n\nasync function renameDotFiles(dir: string): Promise<void> {\n  // Non-recursive: only rename _dot.* files at the project root.\n  // All shared dotfiles (_dot.gitignore, _dot.env.example) live at template root.\n  const entries = await readdir(dir, { withFileTypes: true })\n  for (const entry of entries) {\n    if (!entry.isDirectory() && entry.name.startsWith('_dot.')) {\n      const full = resolve(dir, entry.name)\n      const renamed = resolve(dir, '.' + entry.name.slice(5))\n      await writeFile(renamed, await readFile(full))\n      await rm(full)\n    }\n  }\n}\n\nfunction renderConfig(answers: Answers): string {\n  return `import { defineConfig } from '@nymbalhq/config'\n\nexport default defineConfig({\n  store: {\n    name: '${escape(answers.name)}',\n    currency: '${answers.currency}',\n    locale: '${defaultLocale(answers.currency)}',\n    timezone: '${defaultTimezone(answers.currency)}',\n  },\n\n  template: '${answers.template}',\n\n  infrastructure: {\n    cloud: 'local',\n    commandStore: 'sqlite',\n    documentStore: 'in-memory',\n    eventBus: 'in-process',\n    compute: 'in-process',\n  },\n\n  security: {\n    adapter: 'middleware',\n    rateLimit: {\n      '/checkout': { requests: 10, window: '60s', action: 'block' },\n      '/auth/*': { requests: 5, window: '60s', action: 'challenge' },\n      '/api/*': { requests: 100, window: '60s', action: 'throttle' },\n      '/webhooks/*': { requests: 200, window: '60s', action: 'throttle' },\n    },\n    botProtection: { mode: 'managed', allowList: ['googlebot', 'bingbot', 'stripe-webhooks'] },\n    headers: {\n      hsts: true,\n      contentSecurityPolicy: 'strict',\n      referrerPolicy: 'strict-origin-when-cross-origin',\n      xFrameOptions: 'deny',\n    },\n    csrf: true,\n  },\n\n  commerce: {\n    payments: { provider: 'native' },\n    email: { provider: 'native' },\n    reviews: { provider: 'native' },\n    search: { provider: 'native' },\n    analytics: { provider: 'native' },\n    shipping: { provider: 'native' },\n    tax: { provider: 'native' },\n    ai: { provider: 'none' },\n  },\n\n  http: {\n    adapter: 'fastify',\n    port: ${API_PORT},\n  },\n\n  deployment: {\n    strategy: 'standard',\n  },\n\n  features: {\n    staging: false,\n    heartbeat: false,\n    autoUpdates: false,\n  },\n})\n`\n}\n\nfunction defaultLocale(currency: Answers['currency']): string {\n  return currency === 'USD' ? 'en-US' : 'en-GB'\n}\n\nfunction defaultTimezone(currency: Answers['currency']): string {\n  return currency === 'USD' ? 'America/New_York' : 'Europe/London'\n}\n\nfunction escape(v: string): string {\n  return v.replace(/'/g, \"\\\\'\")\n}\n\nfunction toDirectoryName(name: string): string {\n  return name\n    .toLowerCase()\n    .replace(/[^a-z0-9-_ ]/g, '')\n    .trim()\n    .replace(/\\s+/g, '-')\n}\n\nconst runCmd: Runner = (cmd, args, cwd, env = process.env) => {\n  return new Promise((resolve, reject) => {\n    const child = spawn(cmd, args, { cwd, env, stdio: 'inherit', shell: false })\n    child.on('error', reject)\n    child.on('exit', (code) => {\n      if (code === 0) return resolve()\n      reject(new Error(`${cmd} ${args.join(' ')} exited with ${code}`))\n    })\n  })\n}\n"],"mappings":";AAAA,SAAS,IAAI,UAAU,OAAO,SAAS,IAAI,iBAAiB;AAC5D,SAAS,kBAAkB;AAC3B,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAC9B,SAAS,OAAO,iBAAiB;AACjC,SAAS,mBAAmB;AAC5B,SAAS,QAAQ,SAAS,OAAO,UAAU,MAAM,OAAO,QAAQ,YAAY;AAC5E,OAAO,QAAQ;AAEf,IAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,IAAM,gBAAgB,QAAQ,MAAM,MAAM,UAAU;AAwBpD,IAAM,WAAW;AAQjB,SAAS,sBAAwC;AAC/C,SAAO,EAAE,OAAO,sBAAsB,UAAU,YAAY,EAAE,EAAE,SAAS,WAAW,EAAE;AACxF;AAGA,eAAe,cAAc,KAAa,OAAwC;AAChF,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA,sBAAsB,MAAM,KAAK;AAAA,IACjC,yBAAyB,MAAM,QAAQ;AAAA,IACvC;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,KAAK,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AAC3F;AAEA,SAAS,YAAY,OAAmC;AACtD,SAAO;AAAA,IACL,2BAA2B,QAAQ;AAAA,IACnC,eAAe,MAAM,KAAK;AAAA,IAC1B,eAAe,MAAM,QAAQ;AAAA,EAC/B;AACF;AAUA,SAAS,sBAA0C;AACjD,QAAM,SAAS,QAAQ,IAAI,uBAAuB,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAC5E,QAAM,QAAQ,4CAA4C,KAAK,KAAK;AACpE,MAAI,MAAO,QAAO,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACzC,QAAM,MAAM,UAAU,OAAO,CAAC,IAAI,GAAG,EAAE,UAAU,QAAQ,OAAO,QAAQ,aAAa,QAAQ,CAAC;AAC9F,QAAM,UAAU,IAAI,WAAW,IAAI,IAAI,OAAO,KAAK,IAAI;AACvD,SAAO,UAAU,OAAO,OAAO,KAAK;AACtC;AAEO,SAAS,uBAAuC;AACrD,QAAM,KAAK,QAAQ,IAAI,uBAAuB;AAC9C,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,KAAK;AAClC,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,QAAM,KAAK,SAAS,IAAI,MAAM,MAAM,GAAG,KAAK,IAAI;AAChD,QAAM,UAAU,SAAS,IAAI,MAAM,MAAM,QAAQ,CAAC,IAAI;AACtD,MAAI,OAAO,OAAQ,QAAO;AAC1B,MAAI,OAAO,MAAO,QAAO;AACzB,MAAI,OAAO,QAAQ;AACjB,UAAM,QAAQ,SAAS,QAAQ,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE;AACvD,WAAO,QAAQ,IAAI,iBAAiB;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,WAAW,IAAwC;AAC1D,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;AAAA,IACxC,KAAK;AAAO,aAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AAAA,IACtC,KAAK;AAAA,IACL,KAAK;AAAc,aAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;AAAA,IAC9C;AAAS,aAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AAAA,EACrC;AACF;AAEA,SAAS,QAAQ,IAAwC;AACvD,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO,CAAC,QAAQ,CAAC,QAAQ,UAAU,MAAM,CAAC;AAAA,IACvD,KAAK;AAAO,aAAO,CAAC,QAAQ,CAAC,UAAU,MAAM,CAAC;AAAA,IAC9C,KAAK;AAAgB,aAAO,CAAC,QAAQ,CAAC,OAAO,UAAU,MAAM,CAAC;AAAA,IAC9D,KAAK;AAAc,aAAO,CAAC,QAAQ,CAAC,QAAQ,UAAU,MAAM,CAAC;AAAA,IAC7D;AAAS,aAAO,CAAC,OAAO,CAAC,UAAU,MAAM,CAAC;AAAA,EAC5C;AACF;AAEA,SAAS,OAAO,IAA4B;AAC1C,UAAQ,IAAI;AAAA,IACV,KAAK;AAAQ,aAAO;AAAA,IACpB,KAAK;AAAO,aAAO;AAAA,IACnB,KAAK;AAAA,IACL,KAAK;AAAc,aAAO;AAAA,IAC1B;AAAS,aAAO;AAAA,EAClB;AACF;AAEA,IAAM,YAAY,CAAC,SAAS,QAAQ;AACpC,IAAM,aAAa,CAAC,OAAO,OAAO,KAAK;AAYhC,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,MAAwB,MAAc,OAAe,SAA0B;AACtF,MAAK,QAA8B,SAAS,KAAK,EAAG,QAAO;AAC3D,QAAM,IAAI,aAAa,WAAW,IAAI,KAAK,KAAK,eAAe,QAAQ,KAAK,IAAI,CAAC,EAAE;AACrF;AAGO,SAAS,cAAc,MAA0B;AACtD,QAAM,QAAkB,EAAE,KAAK,MAAM;AACrC,QAAM,OAAO,KAAK,MAAM,CAAC;AACzB,MAAI;AACJ,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,MAAM,KAAK,CAAC;AAClB,QAAI,QAAQ,WAAW,QAAQ,MAAM;AACnC,YAAM,MAAM;AACZ;AAAA,IACF;AACA,QAAI,QAAQ,gBAAgB;AAC1B,YAAM,UAAU;AAChB;AAAA,IACF;AACA,UAAM,QAAQ,0CAA0C,KAAK,GAAG;AAChE,QAAI,OAAO;AACT,YAAM,OAAO,MAAM,CAAC;AACpB,UAAI,QAAQ,MAAM,CAAC;AACnB,UAAI,UAAU,QAAW;AACvB,cAAM,OAAO,KAAK,IAAI,CAAC;AACvB,YAAI,SAAS,UAAa,KAAK,WAAW,GAAG,EAAG,OAAM,IAAI,aAAa,KAAK,IAAI,gBAAgB;AAChG,gBAAQ;AACR;AAAA,MACF;AACA,UAAI,SAAS,OAAQ,OAAM,OAAO;AAAA,eACzB,SAAS,WAAY,OAAM,WAAW,MAAM,cAAc,OAAO,SAAS;AAAA,UAC9E,OAAM,WAAW,MAAM,cAAc,OAAO,UAAU;AAAA,IAC7D,WAAW,CAAC,IAAI,WAAW,GAAG,KAAK,eAAe,QAAW;AAC3D,mBAAa;AAAA,IACf;AAAA,EACF;AACA,MAAI,MAAM,SAAS,UAAa,eAAe,OAAW,OAAM,OAAO;AACvE,SAAO;AACT;AAEA,eAAsB,KACpB,OAAiB,QAAQ,MACzB,OAAiB,CAAC,GACH;AACf,QAAM,MAAM,KAAK,OAAO;AACxB,MAAI;AACJ,MAAI;AACF,YAAQ,cAAc,IAAI;AAAA,EAC5B,SAAS,KAAK;AACZ,QAAI,EAAE,eAAe,cAAe,OAAM;AAC1C,YAAQ,OAAO,MAAM,UAAU,IAAI,OAAO;AAAA,CAAI;AAC9C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,KAAK,qBAAqB;AAEhC,MAAI,MAAM,KAAK;AACb,QAAI,CAAC,MAAM,MAAM;AACf,cAAQ,OAAO,MAAM,8DAA8D;AACnF,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAMA,QAAO,MAAM,KAAK,KAAK;AAC7B,UAAMC,WAAmB;AAAA,MACvB,MAAAD;AAAA,MACA,WAAW,gBAAgBA,KAAI;AAAA,MAC/B,UAAU,MAAM,YAAY;AAAA,MAC5B,UAAU,MAAM,YAAY;AAAA,MAC5B,UAAU;AAAA,IACZ;AACA,UAAME,aAAY,QAAQ,QAAQ,IAAI,GAAGD,SAAQ,SAAS;AAC1D,QAAI,WAAWC,UAAS,GAAG;AACzB,YAAM,UAAU,MAAM,QAAQA,UAAS;AACvC,UAAI,QAAQ,SAAS,GAAG;AACtB,gBAAQ,OAAO,MAAM,oBAAoBD,SAAQ,SAAS;AAAA,CAAqC;AAC/F,gBAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,IACF,OAAO;AACL,YAAM,MAAMC,YAAW,EAAE,WAAW,KAAK,CAAC;AAAA,IAC5C;AACA,UAAM,SAASA,YAAWD,QAAO;AACjC,UAAME,SAAQ,oBAAoB;AAClC,UAAM,cAAcD,YAAWC,MAAK;AACpC,YAAQ,OAAO,MAAM,WAAWF,SAAQ,SAAS;AAAA,CAAI;AACrD,QAAI,MAAM,YAAY,OAAO;AAC3B,YAAM,eAAeC,YAAW,IAAID,SAAQ,UAAU,KAAKE,MAAK;AAAA,IAClE,OAAO;AACL,cAAQ,OAAO,MAAM,YAAYF,SAAQ,SAAS,OAAO,WAAW,EAAE,EAAE,CAAC,CAAC;AAAA,CAAY;AAAA,IACxF;AACA,YAAQ,OAAO,MAAM,GAAG,YAAYE,MAAK,EAAE,KAAK,IAAI,CAAC;AAAA,CAAI;AACzD;AAAA,EACF;AAEA,QAAM,GAAG,KAAK,GAAG,KAAK,0BAAqB,CAAC,CAAC;AAE7C,QAAM,OAAO,MAAM,OACf,MAAM,OACJ,MAAM,KAAK;AAAA,IACX,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU,CAAC,MAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa;AAAA,EAC/D,CAAC;AAEL,MAAI,SAAS,IAAI,EAAG,QAAO,OAAO,WAAW;AAG7C,QAAM,kBAAwD;AAAA,IAC5D,EAAE,OAAO,OAAO,OAAO,2BAAsB;AAAA,IAC7C,EAAE,OAAO,OAAO,OAAO,uBAAkB;AAAA,IACzC,EAAE,OAAO,OAAO,OAAO,kBAAa;AAAA,EACtC;AACA,QAAM,WAAW,MAAM,OAAO;AAAA,IAC5B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAGjD,QAAM,kBAAwD;AAAA,IAC5D,EAAE,OAAO,SAAS,OAAO,+CAA0C;AAAA,IACnE,EAAE,OAAO,UAAU,OAAO,+BAA+B;AAAA,EAC3D;AACA,QAAM,WAAW,MAAM,OAAO;AAAA,IAC5B,SAAS;AAAA,IACT,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAEjD,QAAM,WAAY,MAAM,QAAQ;AAAA,IAC9B,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,SAAS,QAAQ,EAAG,QAAO,OAAO,WAAW;AAEjD,QAAM,gBACJ,MAAM,YAAY,QACd,QACE,MAAM,QAAQ;AAAA,IACd,SAAS;AAAA,IACT,cAAc;AAAA,EAChB,CAAC;AAEP,MAAI,SAAS,aAAa,EAAG,QAAO,OAAO,WAAW;AAEtD,QAAM,UAAmB;AAAA,IACvB,MAAM,OAAO,IAAI,EAAE,KAAK;AAAA,IACxB,WAAW,gBAAgB,OAAO,IAAI,EAAE,KAAK,CAAC;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,QAAQ,IAAI,GAAG,QAAQ,SAAS;AAC1D,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,UAAU,MAAM,QAAQ,SAAS;AACvC,QAAI,QAAQ,SAAS,GAAG;AACtB,aAAO,aAAa,QAAQ,SAAS,mCAAmC;AACxE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,OAAO;AACL,UAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C;AAEA,OAAK,GAAG,IAAI,oBAAoB,SAAS,EAAE,GAAG,kBAAkB;AAEhE,QAAM,SAAS,WAAW,OAAO;AACjC,QAAM,QAAQ,oBAAoB;AAClC,QAAM,cAAc,WAAW,KAAK;AAEpC,MAAI,eAAe;AACjB,UAAM,eAAe,WAAW,IAAI,QAAQ,UAAU,KAAK,KAAK;AAAA,EAClE;AAEA,QAAM,MAAM,OAAO,EAAE;AACrB,QAAM,YAAY;AAAA,IAChB,KAAK,GAAG,KAAK,IAAI,CAAC,IAAI,QAAQ,SAAS;AAAA,EACzC;AACA,MAAI,CAAC,eAAe;AAClB,UAAM,CAAC,EAAE,IAAI,WAAW,EAAE;AAC1B,cAAU,KAAK,KAAK,GAAG,KAAK,KAAK,UAAU,CAAC,EAAE;AAAA,EAChD;AACA,YAAU,KAAK,KAAK,GAAG,KAAK,GAAG,CAAC,EAAE;AAElC;AAAA,IACE,CAAC,GAAG,MAAM,kBAAa,QAAQ,SAAS,EAAE,GAAG,IAAI,GAAG,WAAW,IAAI,GAAG,YAAY,KAAK,CAAC,EAAE;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AACF;AAGA,eAAe,eACb,KACA,IACA,UACA,KACA,OACe;AACf,QAAM,CAAC,YAAY,WAAW,IAAI,WAAW,EAAE;AAC/C,UAAQ,OAAO,MAAM,WAAW,UAAU;AAAA,CAAwC;AAClF,QAAM,IAAI,YAAY,aAAa,GAAG;AACtC,MAAI,UAAU;AACZ,YAAQ,OAAO,MAAM,2BAA2B;AAChD,UAAM,CAAC,SAAS,QAAQ,IAAI,QAAQ,EAAE;AAEtC,UAAM,IAAI,SAAS,UAAU,KAAK;AAAA,MAChC,GAAG,QAAQ;AAAA,MACX,oBAAoB,MAAM;AAAA,MAC1B,uBAAuB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,SAAS,KAAa,SAAiC;AAE3E,QAAM,gBAAgB,QAAQ,eAAe,aAAa,QAAQ,QAAQ,GAAG,GAAG;AAOhF,QAAM,eAAe,QAAQ,eAAe,WAAW,QAAQ,QAAQ;AACvE,MAAI,WAAW,YAAY,GAAG;AAC5B,UAAM,gBAAgB,cAAc,GAAG;AAAA,EACzC;AAGA,QAAM,UAAU,QAAQ,KAAK,kBAAkB,GAAG,aAAa,OAAO,GAAG,MAAM;AAG/E,QAAM,iBAAiB,KAAK,QAAQ,SAAS;AAC/C;AAEA,eAAe,iBAAiB,KAAa,MAA6B;AACxE,QAAM,UAAU,QAAQ,KAAK,cAAc;AAC3C,QAAM,MAAM,KAAK,MAAM,MAAM,SAAS,SAAS,MAAM,CAAC;AACtD,MAAI,MAAM,IAAI;AACd,MAAI,SAAS,IAAI;AACjB,QAAM,iBAAiB,oBAAoB;AAC3C,MAAI,eAAgB,KAAI,gBAAgB,IAAI;AAC5C,QAAM,UAAU,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,MAAM,MAAM;AACtE;AAEA,eAAe,gBAAgB,KAAa,MAA6B;AACvE,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,UAAM,IAAI,MAAM,iCAAiC,GAAG,EAAE;AAAA,EACxD;AACA,QAAM,GAAG,KAAK,MAAM;AAAA,IAClB,WAAW;AAAA,IACX,QAAQ,CAAC,WAAW,CAAC,OAAO,SAAS,cAAc;AAAA,EACrD,CAAC;AACD,QAAM,eAAe,IAAI;AAC3B;AAEA,eAAe,eAAe,KAA4B;AAGxD,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC1D,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,OAAO,GAAG;AAC1D,YAAM,OAAO,QAAQ,KAAK,MAAM,IAAI;AACpC,YAAM,UAAU,QAAQ,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,CAAC;AACtD,YAAM,UAAU,SAAS,MAAM,SAAS,IAAI,CAAC;AAC7C,YAAM,GAAG,IAAI;AAAA,IACf;AAAA,EACF;AACF;AAEA,SAAS,aAAa,SAA0B;AAC9C,SAAO;AAAA;AAAA;AAAA;AAAA,aAII,OAAO,QAAQ,IAAI,CAAC;AAAA,iBAChB,QAAQ,QAAQ;AAAA,eAClB,cAAc,QAAQ,QAAQ,CAAC;AAAA,iBAC7B,gBAAgB,QAAQ,QAAQ,CAAC;AAAA;AAAA;AAAA,eAGnC,QAAQ,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAyCnB,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcpB;AAEA,SAAS,cAAc,UAAuC;AAC5D,SAAO,aAAa,QAAQ,UAAU;AACxC;AAEA,SAAS,gBAAgB,UAAuC;AAC9D,SAAO,aAAa,QAAQ,qBAAqB;AACnD;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,EAAE,QAAQ,MAAM,KAAK;AAC9B;AAEA,SAAS,gBAAgB,MAAsB;AAC7C,SAAO,KACJ,YAAY,EACZ,QAAQ,iBAAiB,EAAE,EAC3B,KAAK,EACL,QAAQ,QAAQ,GAAG;AACxB;AAEA,IAAM,SAAiB,CAAC,KAAK,MAAM,KAAK,MAAM,QAAQ,QAAQ;AAC5D,SAAO,IAAI,QAAQ,CAACC,UAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,OAAO,WAAW,OAAO,MAAM,CAAC;AAC3E,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,QAAQ,CAAC,SAAS;AACzB,UAAI,SAAS,EAAG,QAAOA,SAAQ;AAC/B,aAAO,IAAI,MAAM,GAAG,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;AAAA,IAClE,CAAC;AAAA,EACH,CAAC;AACH;","names":["name","answers","targetDir","admin","resolve"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-nymbal-app",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Scaffold a new Nymbal commerce project",
   "license": "MIT",
   "repository": {

package/scaffold/templates/astro/package.json

@@ -17,14 +17,14 @@
     "seed": "nymbal seed"
   },
   "dependencies": {
-    "nymbal": "0.2.0",
-    "@nymbalhq/config": "0.2.0",
-    "@nymbalhq/platform": "0.2.0",
-    "@nymbalhq/stack": "0.2.0",
+    "nymbal": "1.0.0",
+    "@nymbalhq/config": "1.0.0",
+    "@nymbalhq/platform": "1.0.0",
+    "@nymbalhq/stack": "1.0.0",
     "@astrojs/node": "^11.1.8",
-    "@nymbalhq/sdk": "0.2.0",
-    "@nymbalhq/types": "0.2.0",
-    "@nymbalhq/web-components": "0.2.0",
+    "@nymbalhq/sdk": "1.0.0",
+    "@nymbalhq/types": "1.0.0",
+    "@nymbalhq/web-components": "1.0.0",
     "@stripe/stripe-js": "^4.0.0",
     "astro": "^7.4.0"
   },
@@ -34,26 +34,26 @@
   },
   "pnpm": {
     "overrides": {
-      "nymbal": "0.2.0",
-      "@nymbalhq/config": "0.2.0",
-      "@nymbalhq/http": "0.2.0",
-      "@nymbalhq/platform": "0.2.0",
-      "@nymbalhq/react": "0.2.0",
-      "@nymbalhq/sdk": "0.2.0",
-      "@nymbalhq/stack": "0.2.0",
-      "@nymbalhq/types": "0.2.0",
-      "@nymbalhq/web-components": "0.2.0"
+      "nymbal": "1.0.0",
+      "@nymbalhq/config": "1.0.0",
+      "@nymbalhq/http": "1.0.0",
+      "@nymbalhq/platform": "1.0.0",
+      "@nymbalhq/react": "1.0.0",
+      "@nymbalhq/sdk": "1.0.0",
+      "@nymbalhq/stack": "1.0.0",
+      "@nymbalhq/types": "1.0.0",
+      "@nymbalhq/web-components": "1.0.0"
     }
   },
   "overrides": {
-    "nymbal": "0.2.0",
-    "@nymbalhq/config": "0.2.0",
-    "@nymbalhq/http": "0.2.0",
-    "@nymbalhq/platform": "0.2.0",
-    "@nymbalhq/react": "0.2.0",
-    "@nymbalhq/sdk": "0.2.0",
-    "@nymbalhq/stack": "0.2.0",
-    "@nymbalhq/types": "0.2.0",
-    "@nymbalhq/web-components": "0.2.0"
+    "nymbal": "1.0.0",
+    "@nymbalhq/config": "1.0.0",
+    "@nymbalhq/http": "1.0.0",
+    "@nymbalhq/platform": "1.0.0",
+    "@nymbalhq/react": "1.0.0",
+    "@nymbalhq/sdk": "1.0.0",
+    "@nymbalhq/stack": "1.0.0",
+    "@nymbalhq/types": "1.0.0",
+    "@nymbalhq/web-components": "1.0.0"
   }
 }

package/scaffold/templates/astro/src/components/ReviewForm.astro

@@ -61,33 +61,7 @@ const { productId } = Astro.props
 </form>
 
 <script>
-  import { client } from '../lib/client.js'
-
-  const form = document.getElementById('review-form') as HTMLFormElement | null
-  const messageEl = document.getElementById('review-form-message')
-
-  form?.addEventListener('submit', async (e) => {
-    e.preventDefault()
-    if (!form || !messageEl) return
-
-    const productId = form.dataset.productId ?? ''
-    const formData = new FormData(form)
-    const rating = Number(formData.get('rating'))
-    const title = String(formData.get('title'))
-    const body = String(formData.get('body'))
-
-    try {
-      await client.adapter.reviews.submit({ productId, rating, title, body })
-      messageEl.textContent = 'Thank you for your review!'
-      messageEl.style.display = 'block'
-      messageEl.style.color = 'var(--nymbal-color-success, #16a34a)'
-      form.reset()
-    } catch {
-      messageEl.textContent = 'Something went wrong. Please try again.'
-      messageEl.style.display = 'block'
-      messageEl.style.color = 'var(--nymbal-color-error, #dc2626)'
-    }
-  })
+  import '../scripts/review-form.js'
 </script>
 
 <style>

package/scaffold/templates/astro/src/layouts/AccountLayout.astro

@@ -102,6 +102,8 @@ const { title } = Astro.props
   }
 
   .account-sidebar {
+    /* Lets the one-column track shrink to the viewport, so the nav row scrolls instead of widening the page. */
+    min-width: 0;
     border-bottom: 1px solid var(--nymbal-color-border, #e4e4e7);
     padding-bottom: var(--nymbal-spacing-md, 1rem);
   }

package/scaffold/templates/astro/src/lib/submit-once.ts

@@ -0,0 +1,44 @@
+/** What a handler resolves when it has sent the browser elsewhere (`location.href = …`): the form stays locked. */
+export type SubmitOutcome = void | 'leaving'
+
+export type SubmitHandler = (event: SubmitEvent) => Promise<SubmitOutcome> | SubmitOutcome
+
+function submitButtonOf(event: SubmitEvent, form: HTMLFormElement): HTMLButtonElement | null {
+  if (event.submitter instanceof HTMLButtonElement) return event.submitter
+  return form.querySelector<HTMLButtonElement>('button[type="submit"], button:not([type])')
+}
+
+/**
+ * Runs `handler` for a submit of `form`, ignoring every further submit until it settles. The flag, not the button, is
+ * the guard: `requestSubmit()` and Enter in a field still fire `submit` while the button is disabled.
+ */
+export function submitOnce(form: HTMLFormElement | null, handler: SubmitHandler): void {
+  if (form === null) return
+  let inFlight = false
+
+  form.addEventListener('submit', (event) => {
+    event.preventDefault()
+    if (inFlight) return
+    inFlight = true
+    const button = submitButtonOf(event as SubmitEvent, form)
+    if (button) button.disabled = true
+
+    const release = () => {
+      inFlight = false
+      if (button) button.disabled = false
+    }
+
+    // Inside `then`, a synchronous throw from the handler becomes a rejection and releases the form like one.
+    Promise.resolve()
+      .then(() => handler(event as SubmitEvent))
+      .then(
+        (outcome) => {
+          if (outcome !== 'leaving') release()
+        },
+        (reason: unknown) => {
+          release()
+          console.error('A form submit handler failed', reason)
+        },
+      )
+  })
+}

package/scaffold/templates/astro/src/pages/account/addresses.astro

@@ -30,6 +30,7 @@ import AddressForm from '../../components/AddressForm.astro'
   import type { Address, CustomerAddress } from '@nymbalhq/types'
   import { client } from '../../lib/client.js'
   import { escapeHtml } from '../../lib/format.js'
+  import { submitOnce } from '../../lib/submit-once.js'
 
   const container = document.getElementById('addresses-container')
   const form = document.getElementById('add-address-form') as HTMLFormElement | null
@@ -75,8 +76,7 @@ import AddressForm from '../../components/AddressForm.astro'
     }
   }
 
-  form?.addEventListener('submit', async (e) => {
-    e.preventDefault()
+  submitOnce(form, async () => {
     if (!form || !messageEl) return
 
     const formData = new FormData(form)

package/scaffold/templates/astro/src/pages/account/profile.astro

@@ -65,67 +65,5 @@ import AccountLayout from '../../layouts/AccountLayout.astro'
 </AccountLayout>
 
 <script>
-  import { client } from '../../lib/client.js'
-
-  const form = document.getElementById('profile-form') as HTMLFormElement | null
-  const messageEl = document.getElementById('profile-message')
-
-  function populateForm() {
-    const profile = client.auth.getState().customer
-    if (!profile) return
-
-    const firstNameEl = document.getElementById('profile-firstName') as HTMLInputElement
-    const lastNameEl = document.getElementById('profile-lastName') as HTMLInputElement
-    const emailEl = document.getElementById('profile-email') as HTMLInputElement
-    const phoneEl = document.getElementById('profile-phone') as HTMLInputElement
-
-    if (firstNameEl) firstNameEl.value = profile.firstName ?? ''
-    if (lastNameEl) lastNameEl.value = profile.lastName ?? ''
-    if (emailEl) emailEl.value = profile.email ?? ''
-    if (phoneEl) phoneEl.value = profile.phone ?? ''
-  }
-
-  // Load profile data
-  async function init() {
-    try {
-      await client.auth.loadProfile()
-    } catch {
-      // ignore
-    }
-    populateForm()
-  }
-
-  client.auth.subscribe(populateForm)
-  init()
-
-  form?.addEventListener('submit', async (e) => {
-    e.preventDefault()
-    if (!form || !messageEl) return
-
-    const firstName = (document.getElementById('profile-firstName') as HTMLInputElement)?.value
-    const lastName = (document.getElementById('profile-lastName') as HTMLInputElement)?.value
-    const phone = (document.getElementById('profile-phone') as HTMLInputElement)?.value
-
-    const submitBtn = form.querySelector('[data-testid="profile-save"]') as HTMLButtonElement
-    if (submitBtn) {
-      submitBtn.disabled = true
-      submitBtn.textContent = 'Saving...'
-    }
-
-    try {
-      await client.auth.updateProfile({ firstName, lastName, phone })
-      messageEl.textContent = 'Profile updated successfully.'
-      messageEl.style.color = 'var(--nymbal-color-success, #16a34a)'
-      messageEl.style.display = 'block'
-    } catch (err) {
-      messageEl.textContent = err instanceof Error ? err.message : 'Failed to update profile.'
-      messageEl.style.color = 'var(--nymbal-color-error, #dc2626)'
-      messageEl.style.display = 'block'
-    } finally {
-      if (submitBtn) {
-        submitBtn.disabled = false
-        submitBtn.textContent = 'Save Changes'
-      }
-    }
-  })
+  import '../../scripts/profile-form.js'
 </script>

package/scaffold/templates/astro/src/scripts/auth-forms.ts

@@ -1,4 +1,5 @@
 import { client } from '../lib/client.js'
+import { submitOnce } from '../lib/submit-once.js'
 
 function getRedirectUrl(): string {
   const params = new URLSearchParams(window.location.search)
@@ -23,8 +24,7 @@ function hideFormError(formId: string) {
 
 // Login form handler
 const loginForm = document.getElementById('login-form') as HTMLFormElement | null
-loginForm?.addEventListener('submit', async (e) => {
-  e.preventDefault()
+submitOnce(loginForm, async () => {
   hideFormError('login')
 
   const email = (document.getElementById('login-email') as HTMLInputElement)?.value
@@ -35,28 +35,24 @@ loginForm?.addEventListener('submit', async (e) => {
     return
   }
 
-  const submitBtn = loginForm.querySelector('[data-testid="login-submit"]') as HTMLButtonElement | null
-  if (submitBtn) {
-    submitBtn.disabled = true
-    submitBtn.textContent = 'Signing in...'
-  }
+  const submitBtn = loginForm?.querySelector(
+    '[data-testid="login-submit"]',
+  ) as HTMLButtonElement | null
+  if (submitBtn) submitBtn.textContent = 'Signing in...'
 
   try {
     await client.auth.login(email, password)
     window.location.href = getRedirectUrl()
+    return 'leaving'
   } catch (err: any) {
     showFormError('login', err.message ?? 'Invalid email or password.')
-    if (submitBtn) {
-      submitBtn.disabled = false
-      submitBtn.textContent = 'Sign In'
-    }
+    if (submitBtn) submitBtn.textContent = 'Sign In'
   }
 })
 
 // Register form handler
 const registerForm = document.getElementById('register-form') as HTMLFormElement | null
-registerForm?.addEventListener('submit', async (e) => {
-  e.preventDefault()
+submitOnce(registerForm, async () => {
   hideFormError('register')
 
   const email = (document.getElementById('register-email') as HTMLInputElement)?.value
@@ -70,20 +66,17 @@ registerForm?.addEventListener('submit', async (e) => {
     return
   }
 
-  const submitBtn = registerForm.querySelector('[data-testid="register-submit"]') as HTMLButtonElement | null
-  if (submitBtn) {
-    submitBtn.disabled = true
-    submitBtn.textContent = 'Creating account...'
-  }
+  const submitBtn = registerForm?.querySelector(
+    '[data-testid="register-submit"]',
+  ) as HTMLButtonElement | null
+  if (submitBtn) submitBtn.textContent = 'Creating account...'
 
   try {
     await client.auth.register({ email, password, firstName, lastName, phone })
     window.location.href = getRedirectUrl()
+    return 'leaving'
   } catch (err: any) {
     showFormError('register', err.message ?? 'Registration failed. Please try again.')
-    if (submitBtn) {
-      submitBtn.disabled = false
-      submitBtn.textContent = 'Create Account'
-    }
+    if (submitBtn) submitBtn.textContent = 'Create Account'
   }
 })

package/scaffold/templates/astro/src/scripts/checkout.ts

@@ -1,5 +1,6 @@
 import { client } from '../lib/client.js'
 import { formatPrice } from '../lib/format.js'
+import { submitOnce } from '../lib/submit-once.js'
 
 const steps = ['contact', 'shipping', 'payment'] as const
 type Step = (typeof steps)[number]
@@ -195,27 +196,21 @@ mountStripe()
 
 // Payment form
 const paymentForm = document.getElementById('payment-form') as HTMLFormElement | null
-paymentForm?.addEventListener('submit', async (e) => {
-  e.preventDefault()
+submitOnce(paymentForm, async () => {
   hideError()
 
-  const submitBtn = paymentForm.querySelector(
+  const submitBtn = paymentForm?.querySelector(
     '[data-testid="place-order"]',
   ) as HTMLButtonElement | null
-  if (submitBtn) {
-    submitBtn.disabled = true
-    submitBtn.textContent = 'Processing...'
-  }
+  if (submitBtn) submitBtn.textContent = 'Processing...'
   const stay = (message: string) => {
     showError(message)
-    if (submitBtn) {
-      submitBtn.disabled = false
-      submitBtn.textContent = 'Place Order'
-    }
+    if (submitBtn) submitBtn.textContent = 'Place Order'
   }
   const leaveFor = (orderNumber: string) => {
     client.checkout.reset()
     window.location.href = `/order/${encodeURIComponent(orderNumber)}`
+    return 'leaving' as const
   }
 
   try {
@@ -256,7 +251,7 @@ paymentForm?.addEventListener('submit', async (e) => {
       if (error) return stay(error.message ?? 'Payment failed.')
       client.checkout.markConfirmed()
     }
-    leaveFor(result.orderNumber)
+    return leaveFor(result.orderNumber)
   } catch (err: any) {
     stay(err.message ?? 'Payment failed. Please try again.')
   }

package/scaffold/templates/astro/src/scripts/profile-form.ts

@@ -0,0 +1,57 @@
+import { client } from '../lib/client.js'
+import { submitOnce } from '../lib/submit-once.js'
+
+const form = document.getElementById('profile-form') as HTMLFormElement | null
+const messageEl = document.getElementById('profile-message')
+
+function populateForm() {
+  const profile = client.auth.getState().customer
+  if (!profile) return
+
+  const firstNameEl = document.getElementById('profile-firstName') as HTMLInputElement
+  const lastNameEl = document.getElementById('profile-lastName') as HTMLInputElement
+  const emailEl = document.getElementById('profile-email') as HTMLInputElement
+  const phoneEl = document.getElementById('profile-phone') as HTMLInputElement
+
+  if (firstNameEl) firstNameEl.value = profile.firstName ?? ''
+  if (lastNameEl) lastNameEl.value = profile.lastName ?? ''
+  if (emailEl) emailEl.value = profile.email ?? ''
+  if (phoneEl) phoneEl.value = profile.phone ?? ''
+}
+
+// Load profile data
+async function init() {
+  try {
+    await client.auth.loadProfile()
+  } catch {
+    // ignore
+  }
+  populateForm()
+}
+
+client.auth.subscribe(populateForm)
+init()
+
+submitOnce(form, async () => {
+  if (!form || !messageEl) return
+
+  const firstName = (document.getElementById('profile-firstName') as HTMLInputElement)?.value
+  const lastName = (document.getElementById('profile-lastName') as HTMLInputElement)?.value
+  const phone = (document.getElementById('profile-phone') as HTMLInputElement)?.value
+
+  const submitBtn = form.querySelector('[data-testid="profile-save"]') as HTMLButtonElement | null
+  if (submitBtn) submitBtn.textContent = 'Saving...'
+
+  try {
+    await client.auth.updateProfile({ firstName, lastName, phone })
+    messageEl.textContent = 'Profile updated successfully.'
+    messageEl.style.color = 'var(--nymbal-color-success, #16a34a)'
+    messageEl.style.display = 'block'
+  } catch (err) {
+    messageEl.textContent = err instanceof Error ? err.message : 'Failed to update profile.'
+    messageEl.style.color = 'var(--nymbal-color-error, #dc2626)'
+    messageEl.style.display = 'block'
+  } finally {
+    if (submitBtn) submitBtn.textContent = 'Save Changes'
+  }
+})

package/scaffold/templates/astro/src/scripts/review-form.ts

@@ -0,0 +1,27 @@
+import { client } from '../lib/client.js'
+import { submitOnce } from '../lib/submit-once.js'
+
+const form = document.getElementById('review-form') as HTMLFormElement | null
+const messageEl = document.getElementById('review-form-message')
+
+submitOnce(form, async () => {
+  if (!form || !messageEl) return
+
+  const productId = form.dataset.productId ?? ''
+  const formData = new FormData(form)
+  const rating = Number(formData.get('rating'))
+  const title = String(formData.get('title'))
+  const body = String(formData.get('body'))
+
+  try {
+    await client.adapter.reviews.submit({ productId, rating, title, body })
+    messageEl.textContent = 'Thank you for your review!'
+    messageEl.style.display = 'block'
+    messageEl.style.color = 'var(--nymbal-color-success, #16a34a)'
+    form.reset()
+  } catch {
+    messageEl.textContent = 'Something went wrong. Please try again.'
+    messageEl.style.display = 'block'
+    messageEl.style.color = 'var(--nymbal-color-error, #dc2626)'
+  }
+})

package/scaffold/templates/nextjs/package.json

@@ -17,17 +17,17 @@
     "seed": "nymbal seed"
   },
   "dependencies": {
-    "nymbal": "0.2.0",
-    "@nymbalhq/config": "0.2.0",
-    "@nymbalhq/platform": "0.2.0",
-    "@nymbalhq/stack": "0.2.0",
+    "nymbal": "1.0.0",
+    "@nymbalhq/config": "1.0.0",
+    "@nymbalhq/platform": "1.0.0",
+    "@nymbalhq/stack": "1.0.0",
     "next": "^16.4.2",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
-    "@nymbalhq/sdk": "0.2.0",
-    "@nymbalhq/react": "0.2.0",
-    "@nymbalhq/web-components": "0.2.0",
-    "@nymbalhq/types": "0.2.0",
+    "@nymbalhq/sdk": "1.0.0",
+    "@nymbalhq/react": "1.0.0",
+    "@nymbalhq/web-components": "1.0.0",
+    "@nymbalhq/types": "1.0.0",
     "@stripe/stripe-js": "^4.0.0",
     "@stripe/react-stripe-js": "^3.0.0"
   },
@@ -39,26 +39,26 @@
   },
   "pnpm": {
     "overrides": {
-      "nymbal": "0.2.0",
-      "@nymbalhq/config": "0.2.0",
-      "@nymbalhq/http": "0.2.0",
-      "@nymbalhq/platform": "0.2.0",
-      "@nymbalhq/react": "0.2.0",
-      "@nymbalhq/sdk": "0.2.0",
-      "@nymbalhq/stack": "0.2.0",
-      "@nymbalhq/types": "0.2.0",
-      "@nymbalhq/web-components": "0.2.0"
+      "nymbal": "1.0.0",
+      "@nymbalhq/config": "1.0.0",
+      "@nymbalhq/http": "1.0.0",
+      "@nymbalhq/platform": "1.0.0",
+      "@nymbalhq/react": "1.0.0",
+      "@nymbalhq/sdk": "1.0.0",
+      "@nymbalhq/stack": "1.0.0",
+      "@nymbalhq/types": "1.0.0",
+      "@nymbalhq/web-components": "1.0.0"
     }
   },
   "overrides": {
-    "nymbal": "0.2.0",
-    "@nymbalhq/config": "0.2.0",
-    "@nymbalhq/http": "0.2.0",
-    "@nymbalhq/platform": "0.2.0",
-    "@nymbalhq/react": "0.2.0",
-    "@nymbalhq/sdk": "0.2.0",
-    "@nymbalhq/stack": "0.2.0",
-    "@nymbalhq/types": "0.2.0",
-    "@nymbalhq/web-components": "0.2.0"
+    "nymbal": "1.0.0",
+    "@nymbalhq/config": "1.0.0",
+    "@nymbalhq/http": "1.0.0",
+    "@nymbalhq/platform": "1.0.0",
+    "@nymbalhq/react": "1.0.0",
+    "@nymbalhq/sdk": "1.0.0",
+    "@nymbalhq/stack": "1.0.0",
+    "@nymbalhq/types": "1.0.0",
+    "@nymbalhq/web-components": "1.0.0"
   }
 }