@equinor/fusion-framework-cli 11.2.0 → 11.3.0

package/dist/esm/lib/utils/assert.js

@@ -1,17 +1,31 @@
 import assert, { AssertionError } from 'node:assert';
 import { fileExists } from './file-exists.js';
+import { isGitDir } from './is-git-dir.js';
 /**
  * Re-exports the core Node.js assert function and AssertionError class.
- * Useful for consistent assertion handling throughout the codebase.
+ *
+ * This provides consistent assertion handling throughout the codebase
+ * with proper TypeScript type narrowing support.
  */
 export { assert, AssertionError };
 /**
  * Asserts that the provided value is a valid number (not NaN).
- * Throws an AssertionError if the value is not a number.
  *
- * @param value - The value to check for being a number.
- * @param message - Optional custom error message for assertion failure.
- * @throws {AssertionError} If value is NaN.
+ * This function checks that the value is not NaN, which is useful for
+ * validating numeric inputs that might be strings or other types that
+ * could convert to NaN.
+ *
+ * @param value - The value to check for being a valid number
+ * @param message - Optional custom error message for assertion failure
+ * @throws {AssertionError} If value is NaN
+ *
+ * @example
+ * ```typescript
+ * assertNumber(42); // ✅ Passes
+ * assertNumber('42'); // ✅ Passes (string converts to number)
+ * assertNumber(NaN); // ❌ Throws AssertionError
+ * assertNumber('invalid'); // ❌ Throws AssertionError
+ * ```
  */
 export function assertNumber(value, message) {
     // Ensure the value is not NaN; this does not check for type 'number'.
@@ -23,26 +37,44 @@ export function assertNumber(value, message) {
 }
 /**
  * Asserts that a file exists at the given path.
- * Throws an error if the file does not exist.
  *
- * @param value - The file path to check.
- * @param message - Optional custom error message for assertion failure.
- * @throws {AssertionError} If the file does not exist.
+ * This function uses the fileExists utility to check for file presence
+ * and throws an AssertionError if the file is not found.
+ *
+ * @param value - The file path to check
+ * @param message - Optional custom error message for assertion failure
+ * @throws {AssertionError} If the file does not exist
+ *
+ * @example
+ * ```typescript
+ * assertFileExists('/path/to/file.txt'); // ✅ Passes if file exists
+ * assertFileExists('/nonexistent/file.txt'); // ❌ Throws AssertionError
+ * ```
  */
 export const assertFileExists = (value, message) => {
-    // Use fileExists utility to check for file presence.
+    // Use fileExists utility to check for file presence
     assert(fileExists(value), message ?? `file ${String(value)} does not exist`);
 };
 /**
  * Asserts that the provided value is an object.
- * Throws an error if the value is not an object.
  *
- * @param value - The value to check for being an object.
- * @param message - Optional custom error message or Error instance.
- * @throws {AssertionError} If value is not an object.
+ * This function checks that the value has type 'object'. Note that
+ * typeof null is 'object' in JavaScript, so null values will pass this check.
+ *
+ * @param value - The value to check for being an object
+ * @param message - Optional custom error message or Error instance
+ * @throws {AssertionError} If value is not an object
+ *
+ * @example
+ * ```typescript
+ * assertObject({}); // ✅ Passes
+ * assertObject([]); // ✅ Passes
+ * assertObject(null); // ✅ Passes (typeof null === 'object')
+ * assertObject('string'); // ❌ Throws AssertionError
+ * ```
  */
 export function assertObject(value, message) {
-    // typeof null is 'object', so this does not exclude null values.
+    // typeof null is 'object', so this does not exclude null values
     assert(typeof value === 'object', message);
 }
 /**
@@ -84,4 +116,27 @@ export function assertObjectEntries(value, options) {
         assertion(value[prop], prop, `${preMessage} property [${String(prop)}] to have value`);
     }
 }
+/**
+ * Asserts that a directory exists and is a valid git repository.
+ *
+ * This function checks if the specified directory contains a valid
+ * git repository by looking for the .git directory or file.
+ *
+ * @param dir - Directory path to check for git repository
+ * @param message - Optional custom error message for assertion failure
+ * @throws {AssertionError} If the directory is not a git repository
+ *
+ * @example
+ * ```typescript
+ * assertGitRepository('/path/to/git/repo'); // ✅ Passes if .git exists
+ * assertGitRepository('/path/to/regular/dir'); // ❌ Throws AssertionError
+ * ```
+ */
+export function assertGitRepository(dir, message) {
+    assert(isGitDir(dir), new AssertionError({
+        message: message ?? `Directory is not a git repository: ${dir}`,
+        actual: dir,
+        expected: '<git repository>',
+    }));
+}
 //# sourceMappingURL=assert.js.map

package/dist/esm/lib/utils/assert.js.map

@@ -1 +1 @@
-{"version":3,"file":"assert.js","sourceRoot":"","sources":["../../../../src/lib/utils/assert.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,OAAgB;IAC3D,sEAAsE;IACtE,MAAM,CACJ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EACpB,IAAI,cAAc,CAAC;QACjB,OAAO;QACP,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,UAAU;KACrB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAE,OAAgB,EAAiB,EAAE;IAClF,qDAAqD;IACrD,MAAM,CAAC,UAAU,CAAC,KAAe,CAAC,EAAE,OAAO,IAAI,QAAQ,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,OAAwB;IAClE,iEAAiE;IACjE,MAAM,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAI,KAAc,EAAE,IAAO,EAAE,OAAgB;IAC1E,kEAAkE;IAClE,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,6BAA6B,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,OAIC;IAED,+DAA+D;IAC/D,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;IAC7C,4DAA4D;IAC5D,MAAM,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,GAAG,UAAU,oBAAoB,CAAC,CAAC;IACrE,uDAAuD;IACvD,MAAM,SAAS,GAAqC,OAAO,EAAE,SAAS,IAAI,sBAAsB,CAAC;IACjG,wDAAwD;IACxD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gDAAgD;QAChD,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE,GAAG,UAAU,sBAAsB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1E,sDAAsD;QACtD,SAAS,CACP,KAAK,CAAC,IAAe,CAAC,EACtB,IAAoB,EACpB,GAAG,UAAU,cAAc,MAAM,CAAC,IAAI,CAAC,iBAAiB,CACzD,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"assert.js","sourceRoot":"","sources":["../../../../src/lib/utils/assert.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAElC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,OAAgB;IAC3D,sEAAsE;IACtE,MAAM,CACJ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EACpB,IAAI,cAAc,CAAC;QACjB,OAAO;QACP,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,UAAU;KACrB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAE,OAAgB,EAAiB,EAAE;IAClF,oDAAoD;IACpD,MAAM,CAAC,UAAU,CAAC,KAAe,CAAC,EAAE,OAAO,IAAI,QAAQ,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,OAAwB;IAClE,gEAAgE;IAChE,MAAM,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAI,KAAc,EAAE,IAAO,EAAE,OAAgB;IAC1E,kEAAkE;IAClE,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,6BAA6B,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAQ,EACR,OAIC;IAED,+DAA+D;IAC/D,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;IAC7C,4DAA4D;IAC5D,MAAM,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,GAAG,UAAU,oBAAoB,CAAC,CAAC;IACrE,uDAAuD;IACvD,MAAM,SAAS,GAAqC,OAAO,EAAE,SAAS,IAAI,sBAAsB,CAAC;IACjG,wDAAwD;IACxD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gDAAgD;QAChD,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE,GAAG,UAAU,sBAAsB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1E,sDAAsD;QACtD,SAAS,CACP,KAAK,CAAC,IAAe,CAAC,EACtB,IAAoB,EACpB,GAAG,UAAU,cAAc,MAAM,CAAC,IAAI,CAAC,iBAAiB,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAAgB;IAC/D,MAAM,CACJ,QAAQ,CAAC,GAAG,CAAC,EACb,IAAI,cAAc,CAAC;QACjB,OAAO,EAAE,OAAO,IAAI,sCAAsC,GAAG,EAAE;QAC/D,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE,kBAAkB;KAC7B,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/esm/lib/utils/is-git-dir.js

@@ -0,0 +1,19 @@
+import { join } from 'node:path';
+import { existsSync } from 'node:fs';
+/**
+ * Checks if a directory exists and is a valid git repository.
+ *
+ * @param dir - Directory path to check.
+ * @returns True if the directory exists and is a git repository, false otherwise.
+ * @public
+ */
+export function isGitDir(dir) {
+    if (!existsSync(dir)) {
+        return false;
+    }
+    // Check if .git directory exists (for regular git repos) or .git file exists (for worktrees)
+    const gitDir = join(dir, '.git');
+    return existsSync(gitDir);
+}
+export default isGitDir;
+//# sourceMappingURL=is-git-dir.js.map

package/dist/esm/lib/utils/is-git-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-git-dir.js","sourceRoot":"","sources":["../../../../src/lib/utils/is-git-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6FAA6F;IAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,eAAe,QAAQ,CAAC"}

package/dist/esm/lib/utils/package-info.js

@@ -0,0 +1,135 @@
+/**
+ * Fetches complete package information from npm registry.
+ *
+ * This function retrieves all available metadata for a package including
+ * version information, dependencies, and package details. It performs
+ * validation to ensure the package exists and has a valid latest version.
+ *
+ * @param packageName - The name of the package to fetch (e.g., "@equinor/fusion-framework")
+ * @param registry - The npm registry URL (defaults to https://registry.npmjs.org)
+ * @returns Promise resolving to complete package information
+ * @throws {Error} If the package cannot be found, fetched, or has invalid data
+ *
+ * @example
+ * ```typescript
+ * // Fetch package info for a scoped package
+ * const info = await fetchPackageInfo('@equinor/fusion-framework');
+ * console.log(`Latest version: ${info.latest}`);
+ *
+ * // Fetch from custom registry
+ * const info = await fetchPackageInfo('my-package', 'https://my-registry.com');
+ * ```
+ */
+export async function fetchPackageInfo(packageName, registry = 'https://registry.npmjs.org') {
+    try {
+        // Make HTTP request to npm registry API
+        const response = await fetch(`${registry}/${packageName}`);
+        if (!response.ok) {
+            throw new Error(`Failed to fetch package info for ${packageName}: ${response.statusText}`);
+        }
+        // Parse JSON response from registry
+        const data = await response.json();
+        // Validate that we received valid package data
+        if (!data.name) {
+            throw new Error(`Invalid package data received for ${packageName}`);
+        }
+        // Extract latest version from dist-tags (required for package resolution)
+        const latestVersion = data['dist-tags']?.latest;
+        if (!latestVersion) {
+            throw new Error(`No latest version found for package ${packageName}`);
+        }
+        // Transform registry data to our PackageInfo interface
+        return {
+            name: data.name,
+            latest: latestVersion,
+            versions: Object.keys(data.versions || {}),
+            'dist-tags': data['dist-tags'] || {},
+            description: data.description,
+            homepage: data.homepage,
+            repository: data.repository,
+            author: data.author,
+            license: data.license,
+            keywords: data.keywords,
+            dependencies: data.dependencies,
+            devDependencies: data.devDependencies,
+            peerDependencies: data.peerDependencies,
+        };
+    }
+    catch (error) {
+        // Wrap any errors with context about the failed operation
+        throw new Error(`Failed to fetch package info for ${packageName}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Fetches only the latest version of a package from npm registry.
+ *
+ * This is a convenience function that retrieves only the latest version
+ * string without the overhead of fetching complete package metadata.
+ * Useful for simple version checks and dependency resolution.
+ *
+ * @param packageName - The name of the package to fetch (e.g., "@equinor/fusion-framework")
+ * @param registry - The npm registry URL (defaults to https://registry.npmjs.org)
+ * @returns Promise resolving to the latest version string (e.g., "1.0.0")
+ * @throws {Error} If the package cannot be found or fetched
+ *
+ * @example
+ * ```typescript
+ * // Get latest version for dependency resolution
+ * const version = await fetchLatestVersion('@equinor/fusion-framework');
+ * console.log(`Latest version: ${version}`);
+ * ```
+ */
+export async function fetchLatestVersion(packageName, registry = 'https://registry.npmjs.org') {
+    // Delegate to fetchPackageInfo and extract only the latest version
+    const packageInfo = await fetchPackageInfo(packageName, registry);
+    return packageInfo.latest;
+}
+/**
+ * Fetches multiple packages' information in parallel for better performance.
+ *
+ * This function efficiently retrieves package information for multiple packages
+ * simultaneously, using Promise.allSettled to handle individual failures gracefully.
+ * Failed packages are silently excluded from the results.
+ *
+ * @param packageNames - Array of package names to fetch (e.g., ["@equinor/fusion-framework", "react"])
+ * @param registry - The npm registry URL (defaults to https://registry.npmjs.org)
+ * @returns Promise resolving to a map of package names to their information
+ *
+ * @example
+ * ```typescript
+ * // Fetch multiple packages for dependency analysis
+ * const packages = await fetchMultiplePackageInfo([
+ *   '@equinor/fusion-framework',
+ *   'react',
+ *   'typescript'
+ * ]);
+ *
+ * // Check which packages were successfully fetched
+ * console.log(`Fetched ${Object.keys(packages).length} packages`);
+ * ```
+ */
+export async function fetchMultiplePackageInfo(packageNames, registry = 'https://registry.npmjs.org') {
+    const results = {};
+    // Create promises for all packages to fetch them in parallel
+    const promises = packageNames.map(async (packageName) => {
+        try {
+            const packageInfo = await fetchPackageInfo(packageName, registry);
+            return { packageName, packageInfo };
+        }
+        catch (error) {
+            // Return null for failed packages - they'll be filtered out later
+            return null;
+        }
+    });
+    // Wait for all promises to settle (both success and failure)
+    const settledPromises = await Promise.allSettled(promises);
+    // Process results and build the final map
+    for (const result of settledPromises) {
+        if (result.status === 'fulfilled' && result.value) {
+            const { packageName, packageInfo } = result.value;
+            results[packageName] = packageInfo;
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=package-info.js.map

package/dist/esm/lib/utils/package-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-info.js","sourceRoot":"","sources":["../../../../src/lib/utils/package-info.ts"],"names":[],"mappings":"AAmCA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,QAAQ,GAAG,4BAA4B;IAEvC,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,oCAAoC;QACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,+CAA+C;QAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,0EAA0E;QAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAChD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,WAAW,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,uDAAuD;QACvD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC1C,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YACpC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0DAA0D;QAC1D,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,KAC7C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,QAAQ,GAAG,4BAA4B;IAEvC,mEAAmE;IACnE,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClE,OAAO,WAAW,CAAC,MAAM,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAsB,EACtB,QAAQ,GAAG,4BAA4B;IAEvC,MAAM,OAAO,GAAG,EAAiC,CAAC;IAElD,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAClE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kEAAkE;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE3D,0CAA0C;IAC1C,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClD,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;YAClD,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/esm/lib/utils/path-security.js

@@ -0,0 +1,56 @@
+import { resolve } from 'node:path';
+import { rmSync } from 'node:fs';
+import isPathInside from 'is-path-inside';
+/**
+ * Validates that a target path is safe for file system operations.
+ *
+ * Uses the well-established `is-path-inside` library to prevent path traversal attacks
+ * by ensuring the target path is within expected bounds.
+ *
+ * @param targetPath - The path to validate
+ * @param baseDir - The base directory that the target path should be within (optional)
+ * @returns The resolved, validated path
+ * @throws {Error} If the path is invalid or potentially dangerous
+ *
+ * @example
+ * ```typescript
+ * // Validate a user-provided path within a specific directory
+ * const safePath = validateSafePath(userInput, '/path/to/base/directory');
+ *
+ * // Validate a path without base directory constraint
+ * const safePath = validateSafePath('/tmp/safe-directory');
+ * ```
+ */
+export function validateSafePath(targetPath, baseDir) {
+    if (typeof targetPath !== 'string' || targetPath.trim() === '') {
+        throw new Error('Target path must be a non-empty string');
+    }
+    // Resolve the target path to get absolute path
+    const resolvedPath = resolve(targetPath);
+    // If baseDir is provided, ensure target path is within it using the established library
+    if (baseDir) {
+        const resolvedBaseDir = resolve(baseDir);
+        if (!isPathInside(resolvedPath, resolvedBaseDir)) {
+            throw new Error('The target path must be within the specified base directory. Please specify a relative path or ensure the absolute path is within the base directory.');
+        }
+    }
+    return resolvedPath;
+}
+/**
+ * Safely removes a directory with path traversal protection.
+ *
+ * This function validates the target path before performing the removal
+ * operation to prevent accidental deletion of unintended directories.
+ *
+ * @param targetPath - The path to remove
+ * @param options - rmSync options
+ * @param baseDir - Optional base directory constraint
+ * @throws {Error} If path validation fails or removal operation fails
+ */
+export function safeRmSync(targetPath, options, baseDir) {
+    // Validate the path before removal
+    const safePath = validateSafePath(targetPath, baseDir);
+    // Perform the removal operation
+    rmSync(safePath, options);
+}
+//# sourceMappingURL=path-security.js.map

package/dist/esm/lib/utils/path-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-security.js","sourceRoot":"","sources":["../../../../src/lib/utils/path-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,YAAY,MAAM,gBAAgB,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,OAAgB;IACnE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,+CAA+C;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzC,wFAAwF;IACxF,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,uJAAuJ,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CACxB,UAAkB,EAClB,OAA+C,EAC/C,OAAgB;IAEhB,mCAAmC;IACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAEvD,gCAAgC;IAChC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC"}

package/dist/esm/version.js

@@ -1,3 +1,3 @@
 // Generated by genversion.
-export const version = '11.2.0';
+export const version = '11.3.0';
 //# sourceMappingURL=version.js.map

package/dist/types/bin/helpers/ProjectTemplate.d.ts

@@ -0,0 +1,61 @@
+import type { ConsoleLogger } from '@equinor/fusion-framework-cli/bin';
+import type { TemplateResource, TemplateItem } from './project-templates.schema.js';
+/**
+ * Represents a template for creating Fusion Framework applications.
+ *
+ * This class encapsulates a project template definition and provides methods
+ * for copying template resources to a target directory. Templates are defined
+ * in the templates.json manifest and can include files, directories, and other
+ * resources that make up a complete project structure.
+ *
+ * @example
+ * ```typescript
+ * const template = new ProjectTemplate(templateItem, '/path/to/source', { logger });
+ * template.copyTo('/path/to/target');
+ * ```
+ */
+export declare class ProjectTemplate {
+    #private;
+    /**
+     * The name of the template as defined in the manifest.
+     * Used for template identification and selection.
+     */
+    get name(): string;
+    /**
+     * The description of the template as defined in the manifest.
+     * Provides human-readable information about what the template creates.
+     */
+    get description(): string;
+    /**
+     * The resources included in this template.
+     * Each resource defines a file or directory to be copied to the target.
+     */
+    get resources(): TemplateResource[];
+    /**
+     * Creates a new ProjectTemplate instance.
+     *
+     * @param item - The template item definition from the manifest
+     * @param source - The source directory path where template files are located
+     * @param options - Configuration options including optional logger
+     */
+    constructor(item: TemplateItem, source: string, options: {
+        logger?: ConsoleLogger;
+    });
+    /**
+     * Copies all template resources to the specified target directory.
+     *
+     * This method iterates through all resources defined in the template and copies
+     * them to the target directory. Files are copied using copyFileSync, while
+     * directories are copied using cpSync with optional recursive copying.
+     *
+     * @param targetDir - The target directory where resources should be copied
+     * @throws {Error} If any resource fails to copy
+     *
+     * @example
+     * ```typescript
+     * const template = new ProjectTemplate(templateItem, '/source', { logger });
+     * template.copyTo('/path/to/new/project');
+     * ```
+     */
+    copyTo(targetDir: string): void;
+}

package/dist/types/bin/helpers/ProjectTemplateRepository.d.ts

@@ -0,0 +1,113 @@
+import type { ConsoleLogger } from '@equinor/fusion-framework-cli/bin';
+import { ProjectTemplate } from './ProjectTemplate.js';
+/**
+ * Git protocol options for repository operations.
+ * Supports both HTTPS and SSH authentication methods.
+ */
+export type GitClientProtocol = 'https' | 'ssh';
+/**
+ * Manages a Git repository containing project templates.
+ *
+ * This class handles cloning, updating, and managing a template repository
+ * that contains project templates defined in a templates.json manifest.
+ * It provides methods for initializing the repository, fetching templates,
+ * and cleaning up temporary files.
+ *
+ * @example
+ * ```typescript
+ * const repo = new ProjectTemplateRepository('equinor/fusion-app-template', {
+ *   baseDir: '/tmp/templates',
+ *   log: logger,
+ *   protocol: 'https',
+ *   branch: 'main'
+ * });
+ * await repo.initialize();
+ * const templates = await repo.getAvailableTemplates();
+ * ```
+ */
+export declare class ProjectTemplateRepository {
+    #private;
+    readonly repo: string;
+    /**
+     * Gets the current Git protocol being used for repository operations.
+     * @returns The current protocol ('https' or 'ssh')
+     */
+    get protocol(): 'https' | 'ssh';
+    /**
+     * Sets the Git protocol for repository operations.
+     * @param protocol - The protocol to use ('https' or 'ssh')
+     * @throws {AssertionError} If protocol is not 'https' or 'ssh'
+     */
+    set protocol(protocol: GitClientProtocol);
+    /**
+     * Gets the current branch being used for repository operations.
+     * @returns The current branch name
+     */
+    get branch(): string;
+    /**
+     * Gets the full GitHub URL for the repository based on the current protocol.
+     * @returns The complete GitHub URL (HTTPS or SSH format)
+     */
+    private get repoUrl();
+    /**
+     * Sets the branch for repository operations.
+     * If the repository is already initialized, it will checkout the new branch.
+     * @param branch - The branch name to use
+     */
+    set branch(branch: string);
+    /**
+     * Creates a new ProjectTemplateRepository instance.
+     *
+     * @param repo - The repository name (e.g., 'equinor/fusion-app-template')
+     * @param options - Configuration options for the repository
+     * @param options.baseDir - Base directory for the repository (defaults to temp directory)
+     * @param options.log - Optional logger instance for output
+     * @param options.protocol - Git protocol to use (auto-detected if not specified)
+     * @param options.branch - Branch to checkout (defaults to 'main')
+     */
+    constructor(repo: string, options: {
+        baseDir?: string;
+        log?: ConsoleLogger;
+        protocol?: GitClientProtocol;
+        branch?: string;
+    });
+    /**
+     * Initializes the repository by cloning or updating it.
+     *
+     * This method handles the complete repository setup process:
+     * - Creates the base directory if it doesn't exist
+     * - Clones the repository if it's not already initialized
+     * - Updates the repository if it already exists
+     * - Checks out the specified branch
+     *
+     * @throws {Error} If repository initialization fails
+     */
+    initialize(): Promise<void>;
+    /**
+     * Retrieves all available project templates from the repository.
+     *
+     * This method reads the templates.json manifest file from the repository
+     * and parses it to create ProjectTemplate instances. It combines global
+     * resources with template-specific resources to create complete templates.
+     *
+     * @returns Promise resolving to an array of available project templates
+     * @throws {Error} If templates.json cannot be read or parsed
+     *
+     * @example
+     * ```typescript
+     * const templates = await repo.getAvailableTemplates();
+     * console.log(`Found ${templates.length} templates`);
+     * ```
+     */
+    getAvailableTemplates(): Promise<ProjectTemplate[]>;
+    /**
+     * Clean up the repository directory by removing it from the filesystem.
+     * This is useful for cleaning up temporary template repositories.
+     *
+     * @returns Promise resolving to true if cleanup was performed, false if failed
+     */
+    cleanup(): Promise<boolean>;
+    _cloneRepo(): Promise<void>;
+    _checkoutBranch(): Promise<void>;
+    _setupOutputHandler(): void;
+}

package/dist/types/bin/helpers/install-package-dependencies.d.ts

@@ -0,0 +1,11 @@
+import type { ConsoleLogger } from '@equinor/fusion-framework-cli/bin';
+/**
+ * Install package dependencies using the specified package manager.
+ *
+ * @param targetDir - Directory to run package manager install in
+ * @param packageManager - Package manager to use ('npm' or 'pnpm')
+ * @param logger - Logger instance for output
+ * @returns Promise resolving to the package manager name used
+ */
+export declare function installPackageDependencies(targetDir: string, packageManager: string, logger?: ConsoleLogger): Promise<string>;
+export default installPackageDependencies;