@coze-arch/cli 0.1.2 → 0.1.3-alpha.32023e

package/lib/__templates__/nextjs/scripts/build.sh

@@ -6,7 +6,7 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
 
 echo "Building the Next.js project..."
 pnpm next build

package/lib/__templates__/nextjs/scripts/prepare-node-modules.sh

@@ -0,0 +1,142 @@
+#!/usr/bin/env bash
+# Install dependencies on local disk and expose them to the source tree by symlink.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+if [ "$(basename "$(dirname "$SCRIPT_DIR")")" = ".cozeproj" ]; then
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd -P)"
+else
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
+fi
+
+command -v pnpm >/dev/null 2>&1 || {
+  echo "[node_modules] pnpm is required" >&2
+  exit 1
+}
+
+DRIVE_ROOT="${COZE_DRIVE_ROOT:-/Coze/Drive}"
+if [ -d "$DRIVE_ROOT" ]; then
+  DRIVE_ROOT="$(cd "$DRIVE_ROOT" && pwd -P)"
+else
+  DRIVE_ROOT="${DRIVE_ROOT%/}"
+fi
+case "$PROJECT_ROOT" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*) ;;
+  *)
+    (cd "$PROJECT_ROOT" && pnpm install "$@")
+    exit 0
+    ;;
+esac
+
+COZE_ROOT="${COZE_DIR_PATH:-${HOME}/Coze/tmp}"
+PROJECT_ID="$(basename "$PROJECT_ROOT")-$(printf '%s' "$PROJECT_ROOT" | cksum | awk '{print $1}')"
+mkdir -p "$COZE_ROOT/nm"
+COZE_ROOT="$(cd "$COZE_ROOT" && pwd -P)"
+WORK_DIR="$COZE_ROOT/nm/$PROJECT_ID"
+mkdir -p "$WORK_DIR"
+case "$WORK_DIR" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*)
+    echo "[node_modules] local dependency directory must not be on Coze Drive: $WORK_DIR" >&2
+    exit 1
+    ;;
+esac
+
+# Mirror the project with symlinks. node_modules stays real in WORK_DIR;
+# workspace directories stay real too, so pnpm never writes them to Drive.
+mirror_root() {
+  local entry name
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|pnpm-lock.yaml) continue ;;
+      client|server)
+        [ -f "$PROJECT_ROOT/$name/package.json" ] && continue
+        ;;
+    esac
+    rm -rf "$entry"
+  done < <(find "$WORK_DIR" -mindepth 1 -maxdepth 1 -print0)
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|pnpm-lock.yaml) continue ;;
+      client|server)
+        [ -f "$entry/package.json" ] && continue
+        ;;
+    esac
+    ln -s "$entry" "$WORK_DIR/$name"
+  done < <(find "$PROJECT_ROOT" -mindepth 1 -maxdepth 1 -print0)
+}
+
+mirror_workspace() {
+  local workspace="$1" source_dir="$PROJECT_ROOT/$1" work_dir="$WORK_DIR/$1"
+  local entry name
+  if [ -L "$work_dir" ] || { [ -e "$work_dir" ] && [ ! -d "$work_dir" ]; }; then
+    rm -rf "$work_dir"
+  fi
+  mkdir -p "$work_dir"
+
+  while IFS= read -r -d '' entry; do
+    [ "$(basename "$entry")" = "node_modules" ] || rm -rf "$entry"
+  done < <(find "$work_dir" -mindepth 1 -maxdepth 1 -print0)
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    [ "$name" = "node_modules" ] || ln -s "$entry" "$work_dir/$name"
+  done < <(find "$source_dir" -mindepth 1 -maxdepth 1 -print0)
+}
+
+mirror_root
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    mirror_workspace "$workspace"
+  fi
+done
+
+# pnpm refuses to update a symlinked lockfile, so install against a local copy.
+rm -rf "$WORK_DIR/pnpm-lock.yaml"
+if [ -f "$PROJECT_ROOT/pnpm-lock.yaml" ]; then
+  cp "$PROJECT_ROOT/pnpm-lock.yaml" "$WORK_DIR/pnpm-lock.yaml"
+fi
+
+echo "[node_modules] Installing dependencies in $WORK_DIR"
+if ! (cd "$WORK_DIR" && pnpm install "$@"); then
+  rm -f "$WORK_DIR/pnpm-lock.yaml"
+  exit 1
+fi
+
+if [ -f "$WORK_DIR/pnpm-lock.yaml" ]; then
+  temporary_lockfile="$(mktemp "$PROJECT_ROOT/.pnpm-lock.yaml.XXXXXX")"
+  cp "$WORK_DIR/pnpm-lock.yaml" "$temporary_lockfile"
+  chmod 0644 "$temporary_lockfile"
+  mv -f "$temporary_lockfile" "$PROJECT_ROOT/pnpm-lock.yaml"
+fi
+
+link_node_modules() {
+  local source_dir="$1" target_dir="$2"
+  local current=""
+  mkdir -p "$target_dir"
+  if [ -L "$source_dir/node_modules" ]; then
+    current="$(readlink "$source_dir/node_modules")"
+    case "$current" in
+      "$COZE_ROOT"/nm/*/node_modules|"$COZE_ROOT"/nm/*/*/node_modules) ;;
+      *)
+        echo "[node_modules] refusing to replace unmanaged symlink: $source_dir/node_modules" >&2
+        exit 1
+        ;;
+    esac
+    rm "$source_dir/node_modules"
+  elif [ -e "$source_dir/node_modules" ]; then
+    rm -rf "$source_dir/node_modules"
+  fi
+  ln -s "$target_dir" "$source_dir/node_modules"
+}
+
+link_node_modules "$PROJECT_ROOT" "$WORK_DIR/node_modules"
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    link_node_modules "$PROJECT_ROOT/$workspace" "$WORK_DIR/$workspace/node_modules"
+  fi
+done
+
+echo "[node_modules] Dependencies ready"

package/lib/__templates__/nextjs/scripts/prepare.sh

@@ -6,7 +6,4 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
-if command -v coze-dev > /dev/null 2>&1 && coze-dev check-bins --help > /dev/null 2>&1; then
-  coze-dev check-bins --fix
-fi
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only

package/lib/__templates__/nextjs/template.config.js

@@ -1,9 +1,5 @@
 
 
-import { spawn } from 'child_process';
-import { resolve, join, basename } from 'path';
-import { appendFileSync, openSync, closeSync, mkdirSync } from 'fs';
-import { homedir } from 'os';
 
 
 
@@ -57,61 +53,6 @@ const config = {
   onAfterRender: async (_context, _outputPath) => {
     // 输出由 init 命令统一处理
   },
-
-  onComplete: async (_context, outputPath) => {
-    // Skip pnpm update in test environment to avoid monorepo workspace issues
-    if (process.env.NODE_ENV === 'test') {
-      console.log('⊘ Skipping dependency update in test environment');
-      return;
-    }
-
-    const cmd = 'pnpm';
-    const args = ['update', 'coze-coding-dev-sdk@^0.7.25'];
-    console.log(
-      `\nTriggering: ${cmd} ${args.join(' ')} (running in background)`,
-    );
-
-    try {
-      const projectRoot = resolve(outputPath);
-
-      // Determine log directory
-      const cozeHome = process.env.COZE_HOME || join(homedir(), '.coze');
-      const logDir = process.env.COZE_LOG_DIR || join(cozeHome, 'logs');
-      mkdirSync(logDir, { recursive: true });
-
-      // Use project name in log file to avoid conflicts
-      const projectName = basename(projectRoot);
-      const logFile = join(logDir, `${projectName}-init.log`);
-
-      // Write log header
-      const timestamp = new Date().toISOString();
-      appendFileSync(
-        logFile,
-        `\n=== [${timestamp}] ${cmd} ${args.join(' ')} ===\n`,
-      );
-
-      // Open log file for appending
-      const logFd = openSync(logFile, 'a');
-
-      // Spawn in detached mode
-      const child = spawn(cmd, args, {
-        cwd: projectRoot,
-        detached: true,
-        stdio: ['ignore', logFd, logFd],
-      });
-
-      child.unref();
-      closeSync(logFd);
-
-      console.log(
-        '✓ coze-coding-dev-sdk update triggered (running in background)',
-      );
-      console.log(`  Log file: ${logFile}`);
-    } catch (error) {
-      console.error('✗ Failed to trigger coze-coding-dev-sdk update:', error);
-      console.log('  You can manually run: pnpm update coze-coding-dev-sdk');
-    }
-  },
 };
 
 export default config;

package/lib/__templates__/nuxt-vue/scripts/build.sh

@@ -6,7 +6,7 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
 
 echo "Building the Nuxt.js project..."
 pnpm nuxt build

package/lib/__templates__/nuxt-vue/scripts/prepare-node-modules.sh

@@ -0,0 +1,142 @@
+#!/usr/bin/env bash
+# Install dependencies on local disk and expose them to the source tree by symlink.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+if [ "$(basename "$(dirname "$SCRIPT_DIR")")" = ".cozeproj" ]; then
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd -P)"
+else
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
+fi
+
+command -v pnpm >/dev/null 2>&1 || {
+  echo "[node_modules] pnpm is required" >&2
+  exit 1
+}
+
+DRIVE_ROOT="${COZE_DRIVE_ROOT:-/Coze/Drive}"
+if [ -d "$DRIVE_ROOT" ]; then
+  DRIVE_ROOT="$(cd "$DRIVE_ROOT" && pwd -P)"
+else
+  DRIVE_ROOT="${DRIVE_ROOT%/}"
+fi
+case "$PROJECT_ROOT" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*) ;;
+  *)
+    (cd "$PROJECT_ROOT" && pnpm install "$@")
+    exit 0
+    ;;
+esac
+
+COZE_ROOT="${COZE_DIR_PATH:-${HOME}/Coze/tmp}"
+PROJECT_ID="$(basename "$PROJECT_ROOT")-$(printf '%s' "$PROJECT_ROOT" | cksum | awk '{print $1}')"
+mkdir -p "$COZE_ROOT/nm"
+COZE_ROOT="$(cd "$COZE_ROOT" && pwd -P)"
+WORK_DIR="$COZE_ROOT/nm/$PROJECT_ID"
+mkdir -p "$WORK_DIR"
+case "$WORK_DIR" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*)
+    echo "[node_modules] local dependency directory must not be on Coze Drive: $WORK_DIR" >&2
+    exit 1
+    ;;
+esac
+
+# Mirror the project with symlinks. node_modules stays real in WORK_DIR;
+# workspace directories stay real too, so pnpm never writes them to Drive.
+mirror_root() {
+  local entry name
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|pnpm-lock.yaml) continue ;;
+      client|server)
+        [ -f "$PROJECT_ROOT/$name/package.json" ] && continue
+        ;;
+    esac
+    rm -rf "$entry"
+  done < <(find "$WORK_DIR" -mindepth 1 -maxdepth 1 -print0)
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|pnpm-lock.yaml) continue ;;
+      client|server)
+        [ -f "$entry/package.json" ] && continue
+        ;;
+    esac
+    ln -s "$entry" "$WORK_DIR/$name"
+  done < <(find "$PROJECT_ROOT" -mindepth 1 -maxdepth 1 -print0)
+}
+
+mirror_workspace() {
+  local workspace="$1" source_dir="$PROJECT_ROOT/$1" work_dir="$WORK_DIR/$1"
+  local entry name
+  if [ -L "$work_dir" ] || { [ -e "$work_dir" ] && [ ! -d "$work_dir" ]; }; then
+    rm -rf "$work_dir"
+  fi
+  mkdir -p "$work_dir"
+
+  while IFS= read -r -d '' entry; do
+    [ "$(basename "$entry")" = "node_modules" ] || rm -rf "$entry"
+  done < <(find "$work_dir" -mindepth 1 -maxdepth 1 -print0)
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    [ "$name" = "node_modules" ] || ln -s "$entry" "$work_dir/$name"
+  done < <(find "$source_dir" -mindepth 1 -maxdepth 1 -print0)
+}
+
+mirror_root
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    mirror_workspace "$workspace"
+  fi
+done
+
+# pnpm refuses to update a symlinked lockfile, so install against a local copy.
+rm -rf "$WORK_DIR/pnpm-lock.yaml"
+if [ -f "$PROJECT_ROOT/pnpm-lock.yaml" ]; then
+  cp "$PROJECT_ROOT/pnpm-lock.yaml" "$WORK_DIR/pnpm-lock.yaml"
+fi
+
+echo "[node_modules] Installing dependencies in $WORK_DIR"
+if ! (cd "$WORK_DIR" && pnpm install "$@"); then
+  rm -f "$WORK_DIR/pnpm-lock.yaml"
+  exit 1
+fi
+
+if [ -f "$WORK_DIR/pnpm-lock.yaml" ]; then
+  temporary_lockfile="$(mktemp "$PROJECT_ROOT/.pnpm-lock.yaml.XXXXXX")"
+  cp "$WORK_DIR/pnpm-lock.yaml" "$temporary_lockfile"
+  chmod 0644 "$temporary_lockfile"
+  mv -f "$temporary_lockfile" "$PROJECT_ROOT/pnpm-lock.yaml"
+fi
+
+link_node_modules() {
+  local source_dir="$1" target_dir="$2"
+  local current=""
+  mkdir -p "$target_dir"
+  if [ -L "$source_dir/node_modules" ]; then
+    current="$(readlink "$source_dir/node_modules")"
+    case "$current" in
+      "$COZE_ROOT"/nm/*/node_modules|"$COZE_ROOT"/nm/*/*/node_modules) ;;
+      *)
+        echo "[node_modules] refusing to replace unmanaged symlink: $source_dir/node_modules" >&2
+        exit 1
+        ;;
+    esac
+    rm "$source_dir/node_modules"
+  elif [ -e "$source_dir/node_modules" ]; then
+    rm -rf "$source_dir/node_modules"
+  fi
+  ln -s "$target_dir" "$source_dir/node_modules"
+}
+
+link_node_modules "$PROJECT_ROOT" "$WORK_DIR/node_modules"
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    link_node_modules "$PROJECT_ROOT/$workspace" "$WORK_DIR/$workspace/node_modules"
+  fi
+done
+
+echo "[node_modules] Dependencies ready"

package/lib/__templates__/nuxt-vue/scripts/prepare.sh

@@ -6,10 +6,7 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline
-if command -v coze-dev > /dev/null 2>&1 && coze-dev check-bins --help > /dev/null 2>&1; then
-  coze-dev check-bins --fix
-fi
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline
 
 echo "Preparing Nuxt project..."
 pnpm exec nuxt prepare

package/lib/__templates__/taro/.cozeproj/scripts/deploy_build.sh

@@ -1,7 +1,8 @@
 #!/bin/bash
 set -Eeuo pipefail
 
-cd "${COZE_WORKSPACE_PATH}"
+ROOT_DIR="$(cd "$(dirname "$0")/../.." && pwd)"
+cd "$ROOT_DIR"
 if [ -f "./.cozeproj/scripts/init_env.sh" ]; then
     echo "⚙️ Initializing environment..."
     # 使用 bash 执行，确保即使没有 x 权限也能跑
@@ -11,7 +12,7 @@ else
 fi
 echo "Installing dependencies..."
 # 安装所有依赖（包含 Taro 核心和 React）
-pnpm install
+bash "$ROOT_DIR/.cozeproj/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline
 
 echo "Building the Taro project..."
 pnpm build

package/lib/__templates__/taro/.cozeproj/scripts/dev_build.sh

@@ -1,2 +1,5 @@
 #!/bin/bash
 set -Eeuo pipefail
+
+ROOT_DIR="$(cd "$(dirname "$0")/../.." && pwd)"
+bash "$ROOT_DIR/.cozeproj/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline

package/lib/__templates__/taro/.cozeproj/scripts/dev_run.sh

@@ -194,7 +194,7 @@ cleanup_previous_run() {
 # ---------------------------------------------------------
 echo "📦 Installing dependencies..."
 PNPM_BIN="$(command -v pnpm)"
-"${PNPM_BIN}" install
+bash "$ROOT_DIR/.cozeproj/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline
 echo "✅ Dependencies installed successfully!"
 
 # ---------------------------------------------------------

package/lib/__templates__/taro/.cozeproj/scripts/prepare-node-modules.sh

@@ -0,0 +1,142 @@
+#!/usr/bin/env bash
+# Install dependencies on local disk and expose them to the source tree by symlink.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+if [ "$(basename "$(dirname "$SCRIPT_DIR")")" = ".cozeproj" ]; then
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd -P)"
+else
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
+fi
+
+command -v pnpm >/dev/null 2>&1 || {
+  echo "[node_modules] pnpm is required" >&2
+  exit 1
+}
+
+DRIVE_ROOT="${COZE_DRIVE_ROOT:-/Coze/Drive}"
+if [ -d "$DRIVE_ROOT" ]; then
+  DRIVE_ROOT="$(cd "$DRIVE_ROOT" && pwd -P)"
+else
+  DRIVE_ROOT="${DRIVE_ROOT%/}"
+fi
+case "$PROJECT_ROOT" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*) ;;
+  *)
+    (cd "$PROJECT_ROOT" && pnpm install "$@")
+    exit 0
+    ;;
+esac
+
+COZE_ROOT="${COZE_DIR_PATH:-${HOME}/Coze/tmp}"
+PROJECT_ID="$(basename "$PROJECT_ROOT")-$(printf '%s' "$PROJECT_ROOT" | cksum | awk '{print $1}')"
+mkdir -p "$COZE_ROOT/nm"
+COZE_ROOT="$(cd "$COZE_ROOT" && pwd -P)"
+WORK_DIR="$COZE_ROOT/nm/$PROJECT_ID"
+mkdir -p "$WORK_DIR"
+case "$WORK_DIR" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*)
+    echo "[node_modules] local dependency directory must not be on Coze Drive: $WORK_DIR" >&2
+    exit 1
+    ;;
+esac
+
+# Mirror the project with symlinks. node_modules stays real in WORK_DIR;
+# workspace directories stay real too, so pnpm never writes them to Drive.
+mirror_root() {
+  local entry name
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|pnpm-lock.yaml) continue ;;
+      client|server)
+        [ -f "$PROJECT_ROOT/$name/package.json" ] && continue
+        ;;
+    esac
+    rm -rf "$entry"
+  done < <(find "$WORK_DIR" -mindepth 1 -maxdepth 1 -print0)
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|pnpm-lock.yaml) continue ;;
+      client|server)
+        [ -f "$entry/package.json" ] && continue
+        ;;
+    esac
+    ln -s "$entry" "$WORK_DIR/$name"
+  done < <(find "$PROJECT_ROOT" -mindepth 1 -maxdepth 1 -print0)
+}
+
+mirror_workspace() {
+  local workspace="$1" source_dir="$PROJECT_ROOT/$1" work_dir="$WORK_DIR/$1"
+  local entry name
+  if [ -L "$work_dir" ] || { [ -e "$work_dir" ] && [ ! -d "$work_dir" ]; }; then
+    rm -rf "$work_dir"
+  fi
+  mkdir -p "$work_dir"
+
+  while IFS= read -r -d '' entry; do
+    [ "$(basename "$entry")" = "node_modules" ] || rm -rf "$entry"
+  done < <(find "$work_dir" -mindepth 1 -maxdepth 1 -print0)
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    [ "$name" = "node_modules" ] || ln -s "$entry" "$work_dir/$name"
+  done < <(find "$source_dir" -mindepth 1 -maxdepth 1 -print0)
+}
+
+mirror_root
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    mirror_workspace "$workspace"
+  fi
+done
+
+# pnpm refuses to update a symlinked lockfile, so install against a local copy.
+rm -rf "$WORK_DIR/pnpm-lock.yaml"
+if [ -f "$PROJECT_ROOT/pnpm-lock.yaml" ]; then
+  cp "$PROJECT_ROOT/pnpm-lock.yaml" "$WORK_DIR/pnpm-lock.yaml"
+fi
+
+echo "[node_modules] Installing dependencies in $WORK_DIR"
+if ! (cd "$WORK_DIR" && pnpm install "$@"); then
+  rm -f "$WORK_DIR/pnpm-lock.yaml"
+  exit 1
+fi
+
+if [ -f "$WORK_DIR/pnpm-lock.yaml" ]; then
+  temporary_lockfile="$(mktemp "$PROJECT_ROOT/.pnpm-lock.yaml.XXXXXX")"
+  cp "$WORK_DIR/pnpm-lock.yaml" "$temporary_lockfile"
+  chmod 0644 "$temporary_lockfile"
+  mv -f "$temporary_lockfile" "$PROJECT_ROOT/pnpm-lock.yaml"
+fi
+
+link_node_modules() {
+  local source_dir="$1" target_dir="$2"
+  local current=""
+  mkdir -p "$target_dir"
+  if [ -L "$source_dir/node_modules" ]; then
+    current="$(readlink "$source_dir/node_modules")"
+    case "$current" in
+      "$COZE_ROOT"/nm/*/node_modules|"$COZE_ROOT"/nm/*/*/node_modules) ;;
+      *)
+        echo "[node_modules] refusing to replace unmanaged symlink: $source_dir/node_modules" >&2
+        exit 1
+        ;;
+    esac
+    rm "$source_dir/node_modules"
+  elif [ -e "$source_dir/node_modules" ]; then
+    rm -rf "$source_dir/node_modules"
+  fi
+  ln -s "$target_dir" "$source_dir/node_modules"
+}
+
+link_node_modules "$PROJECT_ROOT" "$WORK_DIR/node_modules"
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    link_node_modules "$PROJECT_ROOT/$workspace" "$WORK_DIR/$workspace/node_modules"
+  fi
+done
+
+echo "[node_modules] Dependencies ready"

package/lib/__templates__/vite/scripts/build.sh

@@ -6,7 +6,7 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
 
 echo "Building frontend with Vite..."
 pnpm vite build