@wp-typia/project-tools 0.19.1 → 0.19.3

package/dist/runtime/template-source-seeds.js

@@ -2,9 +2,10 @@ import fs from 'node:fs';
 import { promises as fsp } from 'node:fs';
 import { createRequire } from 'node:module';
 import path from 'node:path';
-import { execFileSync } from 'node:child_process';
+import { spawnSync } from 'node:child_process';
 import semver from 'semver';
 import { x as extractTarball } from 'tar';
+import { createExternalTemplateTimeoutError, fetchWithExternalTemplateTimeout, getExternalTemplateMetadataMaxBytes, getExternalTemplateTarballMaxBytes, getExternalTemplateTimeoutMs, readBufferResponseWithLimit, readJsonResponseWithLimit, } from './external-template-guards.js';
 import { OFFICIAL_WORKSPACE_TEMPLATE_PACKAGE, PROJECT_TOOLS_PACKAGE_ROOT, } from './template-registry.js';
 import { isPlainObject } from './object-utils.js';
 import { createManagedTempRoot } from './temp-roots.js';
@@ -43,11 +44,17 @@ function selectRegistryVersion(metadata, locator) {
 }
 async function fetchNpmTemplateSource(locator) {
     const registryBase = (process.env.NPM_CONFIG_REGISTRY ?? 'https://registry.npmjs.org').replace(/\/$/, '');
-    const metadataResponse = await fetch(`${registryBase}/${encodeURIComponent(locator.name)}`);
+    const metadataLabel = `fetching npm template metadata for ${locator.raw}`;
+    const metadataResponse = await fetchWithExternalTemplateTimeout(`${registryBase}/${encodeURIComponent(locator.name)}`, {
+        label: metadataLabel,
+    });
     if (!metadataResponse.ok) {
         throw new Error(`Failed to fetch npm template metadata for ${locator.raw}: ${metadataResponse.status}`);
     }
-    const metadata = (await metadataResponse.json());
+    const metadata = await readJsonResponseWithLimit(metadataResponse, {
+        label: `npm template metadata for ${locator.raw}`,
+        maxBytes: getExternalTemplateMetadataMaxBytes(),
+    });
     const resolvedVersion = selectRegistryVersion(metadata, locator);
     const versions = isPlainObject(metadata.versions) ? metadata.versions : {};
     const versionMetadata = versions[resolvedVersion];
@@ -60,14 +67,19 @@ async function fetchNpmTemplateSource(locator) {
     }
     const { path: tempRoot, cleanup } = await createManagedTempRoot('wp-typia-template-source-');
     try {
-        const tarballResponse = await fetch(tarballUrl);
+        const tarballResponse = await fetchWithExternalTemplateTimeout(tarballUrl, {
+            label: `downloading npm template tarball for ${locator.raw}@${resolvedVersion}`,
+        });
         if (!tarballResponse.ok) {
             throw new Error(`Failed to download npm template tarball for ${locator.raw}: ${tarballResponse.status}`);
         }
         const tarballPath = path.join(tempRoot, 'template.tgz');
         const unpackDir = path.join(tempRoot, 'source');
         await fsp.mkdir(unpackDir, { recursive: true });
-        await fsp.writeFile(tarballPath, Buffer.from(await tarballResponse.arrayBuffer()));
+        await fsp.writeFile(tarballPath, await readBufferResponseWithLimit(tarballResponse, {
+            label: `npm template tarball for ${locator.raw}@${resolvedVersion}`,
+            maxBytes: getExternalTemplateTarballMaxBytes(),
+        }));
         await extractTarball({
             cwd: unpackDir,
             file: tarballPath,
@@ -183,7 +195,29 @@ async function resolveGitHubTemplateSource(locator) {
             args.push('--branch', locator.ref);
         }
         args.push(`https://github.com/${locator.owner}/${locator.repo}.git`, checkoutDir);
-        execFileSync('git', args, { stdio: 'ignore' });
+        const cloneTimeoutMs = getExternalTemplateTimeoutMs();
+        const cloneResult = spawnSync('git', args, {
+            stdio: 'ignore',
+            timeout: cloneTimeoutMs,
+        });
+        if (cloneResult.error) {
+            const errorCode = typeof cloneResult.error === 'object' &&
+                cloneResult.error !== null &&
+                'code' in cloneResult.error
+                ? String(cloneResult.error.code)
+                : '';
+            if (errorCode === 'ETIMEDOUT') {
+                throw createExternalTemplateTimeoutError(`cloning GitHub template ${locator.owner}/${locator.repo}`, cloneTimeoutMs);
+            }
+            throw cloneResult.error;
+        }
+        if (cloneResult.signal === 'SIGTERM' ||
+            cloneResult.signal === 'SIGKILL') {
+            throw createExternalTemplateTimeoutError(`cloning GitHub template ${locator.owner}/${locator.repo}`, cloneTimeoutMs);
+        }
+        if (cloneResult.status !== 0) {
+            throw new Error(`Failed to clone GitHub template source ${locator.owner}/${locator.repo}.`);
+        }
         const sourceDir = path.resolve(checkoutDir, locator.sourcePath);
         const relativeSourceDir = path.relative(checkoutDir, sourceDir);
         if (relativeSourceDir.startsWith('..') ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wp-typia/project-tools",
-  "version": "0.19.1",
+  "version": "0.19.3",
   "description": "Project orchestration and programmatic tooling for wp-typia",
   "packageManager": "bun@1.3.11",
   "type": "module",
@@ -27,6 +27,11 @@
       "import": "./dist/runtime/cli-doctor.js",
       "default": "./dist/runtime/cli-doctor.js"
     },
+    "./cli-init": {
+      "types": "./dist/runtime/cli-init.d.ts",
+      "import": "./dist/runtime/cli-init.js",
+      "default": "./dist/runtime/cli-init.js"
+    },
     "./cli-prompt": {
       "types": "./dist/runtime/cli-prompt.d.ts",
       "import": "./dist/runtime/cli-prompt.js",
@@ -90,7 +95,7 @@
     "prepack": "bun run build && node ./scripts/publish-manifest.mjs prepare",
     "postpack": "node ./scripts/publish-manifest.mjs restore",
     "test": "bun run build && bun test tests/*.test.ts",
-    "test:scaffold-core": "bun run build && bun test tests/block-generator-service.test.ts tests/built-in-block-artifacts.test.ts tests/scaffold-basic.test.ts tests/scaffold-persistence.test.ts tests/template-source.test.ts tests/cli-entry.test.ts tests/cli-prompt.test.ts tests/import-policy.test.ts",
+    "test:scaffold-core": "bun run build && bun test tests/block-generator-service.test.ts tests/built-in-block-artifacts.test.ts tests/scaffold-basic.test.ts tests/scaffold-persistence.test.ts tests/template-source.test.ts tests/init-command.test.ts tests/cli-entry.test.ts tests/cli-prompt.test.ts tests/import-policy.test.ts",
     "test:workspace": "bun run build && bun test tests/workspace-add.test.ts tests/workspace-doctor.test.ts",
     "test:compound": "bun run build && bun test tests/scaffold-compound.test.ts",
     "test:migration-planning": "bun run build && bun test tests/migration-init.test.ts tests/migration-config.test.ts tests/migration-plan-wizard.test.ts",

package/templates/_shared/base/package.json.mustache

@@ -21,7 +21,6 @@
   "devDependencies": {
     "@wp-typia/block-runtime": "{{blockRuntimePackageVersion}}",
     "@wp-typia/block-types": "{{blockTypesPackageVersion}}",
-    "ajv": "^8.18.0",
     "@types/wordpress__block-editor": "^11.5.17",
     "@types/wordpress__blocks": "^12.5.18",
     "@wordpress/browserslist-config": "^6.42.0",

package/templates/_shared/compound/core/package.json.mustache

@@ -29,7 +29,6 @@
     "@types/react-dom": "^19.2.2",
     "@types/wordpress__block-editor": "^11.5.17",
     "@types/wordpress__blocks": "^12.5.18",
-    "ajv": "^8.18.0",
     "eslint-plugin-jsx-a11y": "^6.10.2",
     "prettier": "3.8.2",
     "tsx": "^4.20.5",

package/templates/_shared/compound/persistence/package.json.mustache

@@ -32,7 +32,6 @@
     "@types/react-dom": "^19.2.2",
     "@types/wordpress__block-editor": "^11.5.17",
     "@types/wordpress__blocks": "^12.5.18",
-    "ajv": "^8.18.0",
     "eslint-plugin-jsx-a11y": "^6.10.2",
     "prettier": "3.8.2",
     "tsx": "^4.20.5",

package/templates/_shared/persistence/core/package.json.mustache

@@ -24,7 +24,6 @@
 		"@wp-typia/api-client": "{{apiClientPackageVersion}}",
 		"@wp-typia/block-types": "{{blockTypesPackageVersion}}",
 		"@wp-typia/rest": "{{restPackageVersion}}",
-		"ajv": "^8.18.0",
 		"@types/wordpress__block-editor": "^11.5.17",
 		"@types/wordpress__blocks": "^12.5.18",
 		"@wordpress/browserslist-config": "^6.42.0",

package/templates/interactivity/package.json.mustache

@@ -21,7 +21,6 @@
 	"devDependencies": {
 		"@wp-typia/block-runtime": "{{blockRuntimePackageVersion}}",
 		"@wp-typia/block-types": "{{blockTypesPackageVersion}}",
-		"ajv": "^8.18.0",
 		"@types/wordpress__block-editor": "^11.5.17",
 		"@types/wordpress__blocks": "^12.5.18",
 		"@wordpress/browserslist-config": "^6.42.0",