wiki-plugin-shoppe 0.0.27 → 0.0.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wiki-plugin-shoppe",
-  "version": "0.0.27",
+  "version": "0.0.29",
   "description": "Multi-tenant digital goods shoppe for federated wiki, powered by Sanora",
   "keywords": [
     "wiki",

package/server/server.js

@@ -2,6 +2,7 @@
 const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
+const { execSync } = require('child_process');
 const fetch = require('node-fetch');
 const multer = require('multer');
 const FormData = require('form-data');
@@ -672,9 +673,15 @@ async function lucilleUploadVideo(tenant, title, fileBuffer, filename, lucilleUr
 // ============================================================
 
 async function processArchive(zipPath) {
-  const zip = new AdmZip(zipPath);
   const tmpDir = path.join(TMP_DIR, `extract-${Date.now()}`);
-  zip.extractAllTo(tmpDir, true);
+  fs.mkdirSync(tmpDir, { recursive: true });
+  // Use system unzip to stream-extract without loading entire archive into RAM.
+  // AdmZip loads the whole zip into memory upfront, which OOM-kills Node on large archives.
+  try {
+    execSync(`unzip -o "${zipPath}" -d "${tmpDir}"`, { stdio: 'pipe' });
+  } catch (err) {
+    throw new Error(`Failed to extract archive: ${err.stderr ? err.stderr.toString().trim() : err.message}`);
+  }
 
   try {
     // Find manifest.json — handle zips wrapped in a top-level folder and
@@ -1222,8 +1229,14 @@ async function processArchive(zipPath) {
 // ============================================================
 
 async function getShoppeGoods(tenant) {
-  const resp = await fetch(`${getSanoraUrl()}/products/${tenant.uuid}`);
-  const products = await resp.json();
+  let products = {};
+  try {
+    const resp = await fetch(`${getSanoraUrl()}/products/${tenant.uuid}`, { timeout: 15000 });
+    if (resp.ok) products = await resp.json();
+    else console.warn(`[shoppe] getShoppeGoods: Sanora returned ${resp.status} for ${tenant.uuid}`);
+  } catch (err) {
+    console.warn(`[shoppe] getShoppeGoods: Sanora unreachable — ${err.message}`);
+  }
   const redirects = tenant.redirects || {};
 
   const goods = { books: [], music: [], posts: [], albums: [], products: [], videos: [], appointments: [], subscriptions: [] };
@@ -1422,8 +1435,13 @@ function checkOwnerSignature(req, tenant, maxAgeMs = 5 * 60 * 1000) {
 // Returns an array of { product, orders } objects.
 async function getAllOrders(tenant) {
   const sanoraUrl  = getSanoraUrl();
-  const productsResp = await fetch(`${sanoraUrl}/products/${tenant.uuid}`);
-  const products   = await productsResp.json();
+  let products = {};
+  try {
+    const productsResp = await fetch(`${sanoraUrl}/products/${tenant.uuid}`, { timeout: 15000 });
+    if (productsResp.ok) products = await productsResp.json();
+  } catch (err) {
+    console.warn(`[shoppe] getAllOrders: Sanora unreachable — ${err.message}`);
+  }
 
   sessionless.getKeys = () => tenant.keys;