create-brainerce-store 1.28.0 → 1.28.1

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "create-brainerce-store",
-      version: "1.28.0",
+      version: "1.28.1",
       description: "Scaffold a production-ready e-commerce storefront connected to Brainerce",
       bin: {
         "create-brainerce-store": "dist/index.js"
@@ -164,17 +164,28 @@ async function installDependencies(projectDir, pkgManager) {
     throw new Error(`Unsupported package manager: ${pkgManager}`);
   }
   return new Promise((resolve, reject) => {
-    const cmd = process.platform === "win32" ? `${pkgManager}.cmd` : pkgManager;
+    const isWindows = process.platform === "win32";
     const args = pkgManager === "yarn" ? [] : ["install"];
-    const child = (0, import_child_process.spawn)(cmd, args, {
+    const child = (0, import_child_process.spawn)(pkgManager, args, {
       cwd: projectDir,
-      stdio: "ignore"
+      stdio: ["ignore", "ignore", "pipe"],
+      shell: isWindows
+    });
+    let stderrBuf = "";
+    child.stderr?.on("data", (chunk) => {
+      stderrBuf += chunk.toString();
+      if (stderrBuf.length > 8192) {
+        stderrBuf = stderrBuf.slice(-8192);
+      }
     });
     child.on("close", (code) => {
       if (code === 0) {
         resolve();
       } else {
-        reject(new Error(`${pkgManager} install exited with code ${code}`));
+        const tail = stderrBuf.trim();
+        const detail = tail ? `
+${tail}` : "";
+        reject(new Error(`${pkgManager} install exited with code ${code}${detail}`));
       }
     });
     child.on("error", (err) => {
@@ -785,17 +796,21 @@ program.name("create-brainerce-store").description("Scaffold a production-ready
       const gitSpinner = createSpinner("Initializing git...");
       gitSpinner.start();
       try {
-        const { execSync: execSync2 } = require("child_process");
+        const { execFileSync } = require("child_process");
         const cwd = scaffoldInPlace ? "." : projectName;
-        execSync2("git init", { cwd, stdio: "ignore" });
-        execSync2("git add -A", { cwd, stdio: "ignore" });
-        execSync2('git commit -m "Initial commit from create-brainerce-store"', {
-          cwd,
-          stdio: "ignore"
-        });
+        const gitOpts = { cwd, stdio: ["ignore", "ignore", "pipe"] };
+        execFileSync("git", ["init"], gitOpts);
+        execFileSync("git", ["add", "-A"], gitOpts);
+        execFileSync(
+          "git",
+          ["commit", "-m", "Initial commit from create-brainerce-store"],
+          gitOpts
+        );
         gitSpinner.succeed("Git initialized");
-      } catch {
-        gitSpinner.fail("Git initialization failed (git may not be installed)");
+      } catch (err) {
+        gitSpinner.fail("Git initialization failed");
+        const detail = err && typeof err === "object" && "stderr" in err ? String(err.stderr).trim() : err instanceof Error ? err.message : "";
+        if (detail) logger.warn(detail);
       }
     }
     if (!skipInstall) {
@@ -804,8 +819,9 @@ program.name("create-brainerce-store").description("Scaffold a production-ready
       try {
         await installDependencies(scaffoldInPlace ? "." : projectName, pkgManager);
         installSpinner.succeed("Dependencies installed");
-      } catch {
+      } catch (err) {
         installSpinner.fail("Dependency installation failed");
+        if (err instanceof Error && err.message) logger.warn(err.message);
         logger.warn(
           scaffoldInPlace ? `Run \`${pkgManager} install\` manually.` : `Run \`cd ${projectName} && ${pkgManager} install\` manually.`
         );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-brainerce-store",
-  "version": "1.28.0",
+  "version": "1.28.1",
   "description": "Scaffold a production-ready e-commerce storefront connected to Brainerce",
   "bin": {
     "create-brainerce-store": "dist/index.js"

package/templates/nextjs/base/src/app/layout.tsx.ejs

@@ -60,6 +60,7 @@ export default async function RootLayout({
         <script
           type="application/ld+json"
           nonce={nonce}
+          suppressHydrationWarning
           dangerouslySetInnerHTML={{
             __html: JSON.stringify(organizationJsonLd)
               .replace(/</g, '\\u003c')
@@ -133,6 +134,7 @@ export default async function RootLayout({
         <script
           type="application/ld+json"
           nonce={nonce}
+          suppressHydrationWarning
           dangerouslySetInnerHTML={{
             __html: JSON.stringify(organizationJsonLd)
               .replace(/</g, '\\u003c')

package/templates/nextjs/base/src/components/seo/product-json-ld.tsx

@@ -64,11 +64,13 @@ export async function ProductJsonLd({ product, url, currency = 'USD' }: ProductJ
       <script
         type="application/ld+json"
         nonce={nonce}
+        suppressHydrationWarning
         dangerouslySetInnerHTML={{ __html: serializeJsonLd(productJsonLd) }}
       />
       <script
         type="application/ld+json"
         nonce={nonce}
+        suppressHydrationWarning
         dangerouslySetInnerHTML={{ __html: serializeJsonLd(breadcrumbJsonLd) }}
       />
     </>

package/templates/nextjs/base/src/middleware.ts.ejs

@@ -20,9 +20,15 @@ function generateNonce(): string {
 }
 
 function buildCsp(nonce: string): string {
+  const isDev = process.env.NODE_ENV === 'development';
+  // Next dev uses webpack's eval-source-map devtool, which requires 'unsafe-eval'
+  // to execute module code. Prod builds never eval, so this only loosens dev.
+  const scriptSrc = isDev
+    ? `script-src 'self' 'nonce-${nonce}' 'strict-dynamic' 'unsafe-eval'`
+    : `script-src 'self' 'nonce-${nonce}' 'strict-dynamic'`;
   return [
     "default-src 'self'",
-    `script-src 'self' 'nonce-${nonce}' 'strict-dynamic'`,
+    scriptSrc,
     "style-src 'self' 'unsafe-inline' https://cdn.meshulam.co.il",
     "img-src 'self' data: blob: https:",
     "font-src 'self' data:",
@@ -105,9 +111,15 @@ function generateNonce(): string {
 }
 
 function buildCsp(nonce: string): string {
+  const isDev = process.env.NODE_ENV === 'development';
+  // Next dev uses webpack's eval-source-map devtool, which requires 'unsafe-eval'
+  // to execute module code. Prod builds never eval, so this only loosens dev.
+  const scriptSrc = isDev
+    ? `script-src 'self' 'nonce-${nonce}' 'strict-dynamic' 'unsafe-eval'`
+    : `script-src 'self' 'nonce-${nonce}' 'strict-dynamic'`;
   return [
     "default-src 'self'",
-    `script-src 'self' 'nonce-${nonce}' 'strict-dynamic'`,
+    scriptSrc,
     "style-src 'self' 'unsafe-inline' https://cdn.meshulam.co.il",
     "img-src 'self' data: blob: https:",
     "font-src 'self' data:",