Zava Storefront

Part of the Zava Workshop Kit — deploy this repo + the rest of the workshop bundle into your own org with one script.

Customer-facing storefront for Zava (fictional e-commerce reference app, used in the Zava workshop bundle).

Stack

• Frontend: Next.js 14 (App Router) + React 18 + TypeScript
• API: Next.js Route Handlers
• Database: PostgreSQL 16
• Container: Distroless Node 20
• Cloud: Azure Container Apps + Azure Database for PostgreSQL Flexible Server
• IaC: Bicep
• CI/CD: GitHub Actions

Agentic SDLC config

This repo pins DevExpGbb/zava-agent-config@^1.0.0 via apm.yml. That gives every contributor:

• 🛡️ The Zava secure-coding-base, ci-cd-golden-paths, docs-style-guide instructions
• 🤖 The meeting-to-issue, panel-review, incident-to-pr skills
• 👤 The architect and security personas
• 🪝 The pr-review-gate pre-push hook
• ✅ The apm-audit CI workflow as a required check

Run apm install after cloning to materialize them into your harness.

Local dev

apm install              # materialize agentic config
pnpm install
pnpm dev

Run audit locally

apm audit                # warn-mode

See also

• zava-agent-config — the central agentic primitives package
• PLATFORM.md — platform reference
• Lloyds Phase 1 delivery plan

Workshop usage

This repo is the canonical target for the zava-skills-workshop-template workshop. The workshop tracks reference these files:

• lib/cart.ts, lib/orders.ts, lib/search.ts — Track 1 (test-improver) and Track 2 (docs-generator) targets. 5 / 5 / 2 exported functions, intentionally undocumented + intentionally under-tested.
• tests/*.test.ts — vitest specs (npm test) — the oracle for Track 1's "must still pass" gate.
• security-fixtures/ — Track 3 (dependency-auditor) target. Deliberately vulnerable deps (lodash 4.17.4 / axios 0.21.0 / minimist 0.0.8), isolated from this app via the preinstall guard in scripts/guard-deps.js.

If you're following the workshop, clone this repo into your generated workshop repo and run npm install --prefix zava-storefront. Track docs do the rest.