From 395f7b51e8c956174c51712cc4c4c179a40d5b44 Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Wed, 9 Jul 2025 21:09:47 +0200
Subject: [PATCH 01/10] feat(cli): add wgc grpc-service list-templates & init

---
 cli/package.json                              |  3 +
 .../commands/grpc-service/commands/init.ts    | 87 +++++++++++++++++
 .../grpc-service/commands/list-templates.ts   | 39 ++++++++
 cli/src/commands/grpc-service/index.ts        |  4 +
 pnpm-lock.yaml                                | 94 ++++++++++++++-----
 5 files changed, 202 insertions(+), 25 deletions(-)
 create mode 100644 cli/src/commands/grpc-service/commands/init.ts
 create mode 100644 cli/src/commands/grpc-service/commands/list-templates.ts

diff --git a/cli/package.json b/cli/package.json
index 622df4ccea..ad0cd90545 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -54,6 +54,7 @@
     "commander": "^11.1.0",
     "date-fns": "^3.6.0",
     "decompress": "^4.2.1",
+    "degit": "^2.8.4",
     "dotenv": "^16.6.0",
     "env-ci": "^11.1.0",
     "env-paths": "^3.0.0",
@@ -65,6 +66,7 @@
     "jwt-decode": "^3.1.2",
     "lodash-es": "4.17.21",
     "log-symbols": "^5.1.0",
+    "node-fetch": "^3.3.2",
     "octokit": "^4.1.3",
     "open": "^9.1.0",
     "ora": "^8.2.0",
@@ -83,6 +85,7 @@
     "@types/cli-progress": "^3.11.5",
     "@types/cli-table": "^0.3.1",
     "@types/decompress": "^4.2.7",
+    "@types/degit": "^2.8.6",
     "@types/env-ci": "^3.1.4",
     "@types/inquirer": "^9.0.3",
     "@types/js-yaml": "^4.0.5",
diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
new file mode 100644
index 0000000000..98e8b6a020
--- /dev/null
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -0,0 +1,87 @@
+import { existsSync, readdirSync } from 'node:fs';
+import { mkdir } from 'node:fs/promises';
+import { Command, program } from 'commander';
+import { resolve } from 'pathe';
+import Spinner from 'ora';
+import degit from 'degit';
+import pc from 'picocolors';
+import fetch from 'node-fetch';
+import { BaseCommandOptions } from '../../../core/types/types.js';
+import { fetchAvailableTemplates } from './list-templates.js';
+
+async function checkTemplateExists(template: string): Promise<boolean> {
+  const url = `https://api.github.com/repos/wundergraph/cosmo-grpc-templates/contents/${template}`;
+  const res = await fetch(url, { headers: { Accept: 'application/vnd.github.v3+json' } });
+  if (res.status === 200) {
+    const data: any = await res.json();
+    return Array.isArray(data); // Should be an array if it's a directory
+  }
+  return false;
+}
+
+export default (opts: BaseCommandOptions) => {
+  const command = new Command('init');
+  command.description('Scaffold a new gRPC service project from a template');
+  command.option('-t, --template <template>', 'Template to use', 'typescript-connect-rpc-fastify');
+  command.option('-d, --directory <directory>', 'Output directory', '.');
+  command.action(async (options) => {
+    const spinner = Spinner();
+    const template = options.template || 'typescript-connect-rpc-fastify';
+    const outputDir = resolve(process.cwd(), options.directory || '.');
+    const repo = `wundergraph/cosmo-grpc-templates/${template}`;
+
+    spinner.start(`Checking if template '${template}' exists...`);
+    const exists = await checkTemplateExists(template);
+    if (!exists) {
+      spinner.start('Fetching available templates...');
+      const templates = await fetchAvailableTemplates();
+      spinner.stop();
+      if (templates.length > 0) {
+        console.log(pc.yellow('Available templates:'));
+        for (const t of templates) {
+          console.log(`  - ${t}`);
+        }
+        console.log('');
+        console.log(pc.yellow('To use a template, run:'));
+        console.log(`  wgc grpc-service init --template ${templates[0]} --directory ./output`);
+        console.log('');
+      } else {
+        console.log(pc.red('No templates found in wundergraph/cosmo-grpc-templates.'));
+      }
+      program.error(
+        `Template '${template}' does not exist in wundergraph/cosmo-grpc-templates. Please check the template name and try again.`,
+      );
+    }
+
+    spinner.text = `Scaffolding gRPC service using template '${template}'...`;
+
+    try {
+      if (existsSync(outputDir)) {
+        const files = readdirSync(outputDir);
+        if (files.length > 0) {
+          spinner.fail(pc.red('Output directory is not empty.'));
+          program.error(
+            `The directory '${outputDir}' is not empty. Please use the --directory argument to specify an empty or new directory.`,
+          );
+        }
+      } else {
+        await mkdir(outputDir, { recursive: true });
+      }
+      const emitter = degit(repo, { force: true, verbose: false });
+      emitter.on('info', (info: any) => {
+        spinner.text = info.message;
+      });
+      await emitter.clone(outputDir);
+      spinner.succeed(pc.green(`gRPC service scaffolded in ${outputDir}`));
+      console.log('');
+      console.log(
+        `  Checkout the ${pc.bold(pc.italic('README.md'))} file for instructions on how to use your service.`,
+      );
+      console.log('');
+    } catch (error: any) {
+      spinner.fail(pc.red('Failed to scaffold gRPC service'));
+      program.error(error.message || String(error));
+    }
+  });
+  return command;
+};
diff --git a/cli/src/commands/grpc-service/commands/list-templates.ts b/cli/src/commands/grpc-service/commands/list-templates.ts
new file mode 100644
index 0000000000..bfa612688b
--- /dev/null
+++ b/cli/src/commands/grpc-service/commands/list-templates.ts
@@ -0,0 +1,39 @@
+import { Command } from 'commander';
+import pc from 'picocolors';
+import fetch from 'node-fetch';
+import Spinner from 'ora';
+import { BaseCommandOptions } from '../../../core/types/types.js';
+
+export async function fetchAvailableTemplates(): Promise<string[]> {
+  const url = 'https://api.github.com/repos/wundergraph/cosmo-grpc-templates/contents';
+  const res = await fetch(url, { headers: { Accept: 'application/vnd.github.v3+json' } });
+  if (res.status === 200) {
+    const data = (await res.json()) as any[];
+    // Only return directories
+    return data.filter((item: any) => item.type === 'dir').map((item: any) => item.name);
+  }
+  return [];
+}
+
+export default (_opts: BaseCommandOptions) => {
+  const command = new Command('list-templates');
+  command.description('List all available gRPC service templates');
+  command.action(async () => {
+    const spinner = Spinner('Fetching available templates...').start();
+    const templates = await fetchAvailableTemplates();
+    spinner.stop();
+    if (templates.length > 0) {
+      console.log(pc.yellow('Available templates:'));
+      for (const t of templates) {
+        console.log(`  - ${t}`);
+      }
+      console.log('');
+      console.log(pc.yellow('To use a template, run:'));
+      console.log(`  wgc grpc-service init --template ${templates[0]} --directory ./output`);
+      console.log('');
+    } else {
+      console.log(pc.red('No templates found in wundergraph/cosmo-grpc-templates.'));
+    }
+  });
+  return command;
+};
diff --git a/cli/src/commands/grpc-service/index.ts b/cli/src/commands/grpc-service/index.ts
index 5b0edf096d..61432afa2c 100644
--- a/cli/src/commands/grpc-service/index.ts
+++ b/cli/src/commands/grpc-service/index.ts
@@ -1,11 +1,15 @@
 import { Command } from 'commander';
 import { BaseCommandOptions } from '../../core/types/types.js';
 import generateCommand from './commands/generate.js';
+import initCommand from './commands/init.js';
+import listTemplatesCommand from './commands/list-templates.js';
 
 export default (opts: BaseCommandOptions) => {
   const command = new Command('grpc-service');
   command.description('Manage protobuf schemas for remote gRPC services');
   command.addCommand(generateCommand(opts));
+  command.addCommand(initCommand(opts));
+  command.addCommand(listTemplatesCommand(opts));
 
   return command;
 };
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9533e52f41..089fb8bfde 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -216,6 +216,9 @@ importers:
       decompress:
         specifier: ^4.2.1
         version: 4.2.1
+      degit:
+        specifier: ^2.8.4
+        version: 2.8.4
       dotenv:
         specifier: ^16.6.0
         version: 16.6.0
@@ -249,6 +252,9 @@ importers:
       log-symbols:
         specifier: ^5.1.0
         version: 5.1.0
+      node-fetch:
+        specifier: ^3.3.2
+        version: 3.3.2
       octokit:
         specifier: ^4.1.3
         version: 4.1.3
@@ -298,6 +304,9 @@ importers:
       '@types/decompress':
         specifier: ^4.2.7
         version: 4.2.7
+      '@types/degit':
+        specifier: ^2.8.6
+        version: 2.8.6
       '@types/env-ci':
         specifier: ^3.1.4
         version: 3.1.4
@@ -6973,6 +6982,9 @@ packages:
   '@types/decompress@4.2.7':
     resolution: {integrity: sha512-9z+8yjKr5Wn73Pt17/ldnmQToaFHZxK0N1GHysuk/JIPT8RIdQeoInM01wWPgypRcvb6VH1drjuFpQ4zmY437g==}
 
+  '@types/degit@2.8.6':
+    resolution: {integrity: sha512-y0M7sqzsnHB6cvAeTCBPrCQNQiZe8U4qdzf8uBVmOWYap5MMTN/gB2iEqrIqFiYcsyvP74GnGD5tgsHttielFw==}
+
   '@types/ejs@3.1.5':
     resolution: {integrity: sha512-nv+GSx77ZtXiJzwKdsASqi+YQ5Z7vwHsTP0JY2SiQgjGckkBRKZnk8nIM+7oUZ1VCtuTz0+By4qVR7fqzp/Dfg==}
 
@@ -8497,6 +8509,10 @@ packages:
     resolution: {integrity: sha512-wAV9QHOsNbwnWdNW2FYvE1P56wtgSbM+3SZcdGiWQILwVjACCXDCI3Ai8QlCjMDB8YK5zySiXZYBiwGmNY3lnw==}
     engines: {node: '>=12'}
 
+  data-uri-to-buffer@4.0.1:
+    resolution: {integrity: sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==}
+    engines: {node: '>= 12'}
+
   data-urls@5.0.0:
     resolution: {integrity: sha512-ZYP5VBHshaDAiVZxjbRVcFJpc+4xGgT0bK3vzy1HLN8jTO975HEbuYzZJcHoQEY5K1a0z8YayJkyVETa08eNTg==}
     engines: {node: '>=18'}
@@ -8674,6 +8690,11 @@ packages:
     resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
     engines: {node: '>= 0.4'}
 
+  degit@2.8.4:
+    resolution: {integrity: sha512-vqYuzmSA5I50J882jd+AbAhQtgK6bdKUJIex1JNfEUPENCgYsxugzKVZlFyMwV4i06MmnV47/Iqi5Io86zf3Ng==}
+    engines: {node: '>=8.0.0'}
+    hasBin: true
+
   del-cli@5.0.0:
     resolution: {integrity: sha512-rENFhUaYcjoMODwFhhlON+ogN7DoG+4+GFN+bsA1XeDt4w2OKQnQadFP1thHSAlK9FAtl88qgP66wOV+eFZZiQ==}
     engines: {node: '>=14.16'}
@@ -9479,6 +9500,10 @@ packages:
       picomatch:
         optional: true
 
+  fetch-blob@3.2.0:
+    resolution: {integrity: sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==}
+    engines: {node: ^12.20 || >= 14.13}
+
   fflate@0.4.8:
     resolution: {integrity: sha512-FJqqoDBR00Mdj9ppamLa/Y7vxm+PRmNWA67N846RvsoYVMKB4q3y/de5PA7gUmRMYK/8CMz2GDZQmCRN1wBcWA==}
 
@@ -9590,6 +9615,10 @@ packages:
     resolution: {integrity: sha512-0iirZp3uVDjVGt9p49aTaqjk84TrglENEDuqfdlZQ1roC9CWlPk6Avf8EEnZNcAqPonwkG35x4n3ww/1THYAeQ==}
     engines: {node: '>= 12.20'}
 
+  formdata-polyfill@4.0.10:
+    resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
+    engines: {node: '>=12.20.0'}
+
   forwarded@0.2.0:
     resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
     engines: {node: '>= 0.6'}
@@ -11288,6 +11317,7 @@ packages:
   node-domexception@1.0.0:
     resolution: {integrity: sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==}
     engines: {node: '>=10.5.0'}
+    deprecated: Use your platform's native DOMException instead
 
   node-fetch@2.6.13:
     resolution: {integrity: sha512-StxNAxh15zr77QvvkmveSQ8uCQ4+v5FkvNTj0OESmiHu+VRi/gXArXtkWMElOsOUNLtUEvI4yS+rdtOHZTwlQA==}
@@ -11298,6 +11328,10 @@ packages:
       encoding:
         optional: true
 
+  node-fetch@3.3.2:
+    resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   node-gyp-build-optional-packages@5.0.7:
     resolution: {integrity: sha512-YlCCc6Wffkx0kHkmam79GKvDQ6x+QZkMjFGrIMxgFNILFvGSbCp2fCBC55pGTT9gVaz8Na5CLmxt/urtzRv36w==}
     hasBin: true
@@ -21020,6 +21054,8 @@ snapshots:
     dependencies:
       '@types/node': 20.12.12
 
+  '@types/degit@2.8.6': {}
+
   '@types/ejs@3.1.5': {}
 
   '@types/env-ci@3.1.4': {}
@@ -22740,6 +22776,8 @@ snapshots:
 
   dargs@8.1.0: {}
 
+  data-uri-to-buffer@4.0.1: {}
+
   data-urls@5.0.0:
     dependencies:
       whatwg-mimetype: 4.0.0
@@ -22908,6 +22946,8 @@ snapshots:
       has-property-descriptors: 1.0.2
       object-keys: 1.1.1
 
+  degit@2.8.4: {}
+
   del-cli@5.0.0:
     dependencies:
       del: 7.0.0
@@ -23485,10 +23525,10 @@ snapshots:
     dependencies:
       eslint: 8.57.1
 
-  eslint-config-standard@17.1.0(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1))(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1):
+  eslint-config-standard@17.1.0(eslint-plugin-import@2.27.5)(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1):
     dependencies:
       eslint: 8.57.1
-      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
+      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1)
       eslint-plugin-n: 16.6.2(eslint@8.57.1)
       eslint-plugin-promise: 6.6.0(eslint@8.57.1)
 
@@ -23498,9 +23538,9 @@ snapshots:
       '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
       eslint: 8.57.1
       eslint-config-prettier: 8.10.0(eslint@8.57.1)
-      eslint-config-standard: 17.1.0(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1))(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1)
-      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1)
-      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
+      eslint-config-standard: 17.1.0(eslint-plugin-import@2.27.5)(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1)
+      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5)(eslint@8.57.1)
+      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1)
       eslint-plugin-n: 16.6.2(eslint@8.57.1)
       eslint-plugin-node: 11.1.0(eslint@8.57.1)
       eslint-plugin-promise: 6.6.0(eslint@8.57.1)
@@ -23537,13 +23577,13 @@ snapshots:
       - eslint-import-resolver-webpack
       - supports-color
 
-  eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1):
+  eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5)(eslint@8.57.1):
     dependencies:
       debug: 4.3.4
       enhanced-resolve: 5.15.0
       eslint: 8.57.1
-      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
-      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
+      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1)
+      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1)
       get-tsconfig: 4.7.2
       globby: 13.2.2
       is-core-module: 2.12.1
@@ -23555,17 +23595,6 @@ snapshots:
       - eslint-import-resolver-webpack
       - supports-color
 
-  eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1):
-    dependencies:
-      debug: 3.2.7
-    optionalDependencies:
-      '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
-      eslint: 8.57.1
-      eslint-import-resolver-node: 0.3.7
-      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1)
-    transitivePeerDependencies:
-      - supports-color
-
   eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1):
     dependencies:
       debug: 3.2.7
@@ -23573,17 +23602,17 @@ snapshots:
       '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
       eslint: 8.57.1
       eslint-import-resolver-node: 0.3.7
-      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-plugin-import@2.27.5(eslint@8.57.1))(eslint@8.57.1)
+      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5)(eslint@8.57.1)
     transitivePeerDependencies:
       - supports-color
 
-  eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1):
+  eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1):
     dependencies:
       debug: 3.2.7
     optionalDependencies:
       '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
       eslint: 8.57.1
-      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1)
+      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5)(eslint@8.57.1)
     transitivePeerDependencies:
       - supports-color
 
@@ -23600,7 +23629,7 @@ snapshots:
       eslint-utils: 2.1.0
       regexpp: 3.2.0
 
-  eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1):
+  eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1):
     dependencies:
       array-includes: 3.1.6
       array.prototype.flat: 1.3.1
@@ -23609,7 +23638,7 @@ snapshots:
       doctrine: 2.1.0
       eslint: 8.57.1
       eslint-import-resolver-node: 0.3.7
-      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
+      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1)
       has: 1.0.3
       is-core-module: 2.12.1
       is-glob: 4.0.3
@@ -23625,7 +23654,7 @@ snapshots:
       - eslint-import-resolver-webpack
       - supports-color
 
-  eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1):
+  eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1):
     dependencies:
       array-includes: 3.1.6
       array.prototype.flat: 1.3.1
@@ -24065,6 +24094,11 @@ snapshots:
     optionalDependencies:
       picomatch: 4.0.2
 
+  fetch-blob@3.2.0:
+    dependencies:
+      node-domexception: 1.0.0
+      web-streams-polyfill: 3.2.1
+
   fflate@0.4.8: {}
 
   figures@3.2.0:
@@ -24181,6 +24215,10 @@ snapshots:
       node-domexception: 1.0.0
       web-streams-polyfill: 4.0.0-beta.3
 
+  formdata-polyfill@4.0.10:
+    dependencies:
+      fetch-blob: 3.2.0
+
   forwarded@0.2.0: {}
 
   fraction.js@4.2.0: {}
@@ -26195,6 +26233,12 @@ snapshots:
     optionalDependencies:
       encoding: 0.1.13
 
+  node-fetch@3.3.2:
+    dependencies:
+      data-uri-to-buffer: 4.0.1
+      fetch-blob: 3.2.0
+      formdata-polyfill: 4.0.10
+
   node-gyp-build-optional-packages@5.0.7:
     optional: true
 

From 21a7256f4cb4d33fdf449604ba1c146dc620a7d8 Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 09:54:07 +0200
Subject: [PATCH 02/10] chore: refactor to use octokit & tar, remove node-fetch

---
 cli/package.json                              |  10 +-
 .../commands/grpc-service/commands/init.ts    |  66 +++-
 .../grpc-service/commands/list-templates.ts   |  22 +-
 pnpm-lock.yaml                                | 299 ++++++++++++++----
 4 files changed, 311 insertions(+), 86 deletions(-)

diff --git a/cli/package.json b/cli/package.json
index ad0cd90545..b2f9865ad4 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -42,6 +42,7 @@
     "@connectrpc/connect-node": "^1.4.0",
     "@graphql-tools/utils": "^10.2.2",
     "@modelcontextprotocol/sdk": "^1.9.0",
+    "@octokit/rest": "^22.0.0",
     "@wundergraph/composition": "workspace:*",
     "@wundergraph/cosmo-connect": "workspace:*",
     "@wundergraph/cosmo-shared": "workspace:*",
@@ -54,11 +55,11 @@
     "commander": "^11.1.0",
     "date-fns": "^3.6.0",
     "decompress": "^4.2.1",
-    "degit": "^2.8.4",
     "dotenv": "^16.6.0",
     "env-ci": "^11.1.0",
     "env-paths": "^3.0.0",
     "execa": "^9.5.2",
+    "fs-extra": "^11.3.0",
     "graphql": "^16.9.0",
     "https-proxy-agent": "^7.0.5",
     "inquirer": "^9.2.7",
@@ -66,7 +67,6 @@
     "jwt-decode": "^3.1.2",
     "lodash-es": "4.17.21",
     "log-symbols": "^5.1.0",
-    "node-fetch": "^3.3.2",
     "octokit": "^4.1.3",
     "open": "^9.1.0",
     "ora": "^8.2.0",
@@ -76,6 +76,7 @@
     "prompts": "^2.4.2",
     "pupa": "^3.1.0",
     "semver": "^7.7.1",
+    "tar": "^7.4.3",
     "trieve-ts-sdk": "^0.0.80",
     "undici": "^6.21.1",
     "zod": "^3.22.4"
@@ -85,14 +86,15 @@
     "@types/cli-progress": "^3.11.5",
     "@types/cli-table": "^0.3.1",
     "@types/decompress": "^4.2.7",
-    "@types/degit": "^2.8.6",
     "@types/env-ci": "^3.1.4",
+    "@types/fs-extra": "^11.0.4",
     "@types/inquirer": "^9.0.3",
     "@types/js-yaml": "^4.0.5",
     "@types/lodash-es": "4.17.12",
     "@types/node": "^20.3.1",
     "@types/prompts": "^2.4.9",
     "@types/semver": "^7.7.0",
+    "@types/tar": "^6.1.13",
     "del-cli": "^5.0.0",
     "eslint": "^8.57.1",
     "eslint-config-unjs": "^0.2.1",
@@ -103,4 +105,4 @@
     "vitest": "^3.1.2"
   },
   "gitHead": "c37aed755e1b19ed91d30f9b5f7041e15c56901a"
-}
+}
\ No newline at end of file
diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
index 98e8b6a020..138ce13a10 100644
--- a/cli/src/commands/grpc-service/commands/init.ts
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -1,16 +1,18 @@
 import { existsSync, readdirSync } from 'node:fs';
 import { mkdir } from 'node:fs/promises';
+import os from 'node:os';
 import { Command, program } from 'commander';
-import { resolve } from 'pathe';
+import { resolve, join } from 'pathe';
 import Spinner from 'ora';
-import degit from 'degit';
+import { Octokit } from '@octokit/rest';
+import { extract, t } from 'tar';
+import fs from 'fs-extra';
 import pc from 'picocolors';
-import fetch from 'node-fetch';
 import { BaseCommandOptions } from '../../../core/types/types.js';
 import { fetchAvailableTemplates } from './list-templates.js';
 
 async function checkTemplateExists(template: string): Promise<boolean> {
-  const url = `https://api.github.com/repos/wundergraph/cosmo-grpc-templates/contents/${template}`;
+  const url = `https://api.github.com/repos/wundergraph/cosmo-templates/contents/grpc-service/${template}`;
   const res = await fetch(url, { headers: { Accept: 'application/vnd.github.v3+json' } });
   if (res.status === 200) {
     const data: any = await res.json();
@@ -19,6 +21,51 @@ async function checkTemplateExists(template: string): Promise<boolean> {
   return false;
 }
 
+async function downloadAndExtractTemplate(template: string, outputDir: string, spinner: any) {
+  const octokit = new Octokit();
+  const owner = 'wundergraph';
+  const repo = 'cosmo-templates';
+  const ref = 'main'; // You may want to make this configurable
+  const tempTarPath = join(os.tmpdir(), `cosmo-templates-${Date.now()}.tar.gz`);
+  const tempExtractDir = join(os.tmpdir(), `cosmo-templates-extract-${Date.now()}`);
+  await fs.ensureDir(tempExtractDir);
+
+  spinner.text = 'Downloading template from GitHub...';
+  const response = await octokit.repos.downloadTarballArchive({ owner, repo, ref });
+  if (response.data instanceof ArrayBuffer) {
+    await fs.writeFile(tempTarPath, new Uint8Array(Buffer.from(response.data)));
+  } else {
+    throw new TypeError('Unexpected tarball response type');
+  }
+
+  spinner.text = 'Extracting template files...';
+  // The tarball will have a top-level directory like cosmo-templates-<sha>/grpc-service/<template>/
+  // We want to extract only grpc-service/<template> and copy its contents to outputDir
+  let topLevelDir = '';
+  await t({
+    file: tempTarPath,
+    onentry: (entry: { path: string }) => {
+      if (!topLevelDir && entry.path.includes('/')) {
+        topLevelDir = entry.path.split('/')[0];
+      }
+    },
+  });
+  const templatePathInTar = `${topLevelDir}/grpc-service/${template}`;
+  await extract({
+    file: tempTarPath,
+    cwd: tempExtractDir,
+    filter: (p: string) => p.startsWith(templatePathInTar + '/'),
+    strip: templatePathInTar.split('/').length,
+  });
+
+  // Copy extracted files to outputDir
+  await fs.copy(tempExtractDir, outputDir, { overwrite: true });
+
+  // Cleanup
+  await fs.remove(tempTarPath);
+  await fs.remove(tempExtractDir);
+}
+
 export default (opts: BaseCommandOptions) => {
   const command = new Command('init');
   command.description('Scaffold a new gRPC service project from a template');
@@ -28,7 +75,6 @@ export default (opts: BaseCommandOptions) => {
     const spinner = Spinner();
     const template = options.template || 'typescript-connect-rpc-fastify';
     const outputDir = resolve(process.cwd(), options.directory || '.');
-    const repo = `wundergraph/cosmo-grpc-templates/${template}`;
 
     spinner.start(`Checking if template '${template}' exists...`);
     const exists = await checkTemplateExists(template);
@@ -46,10 +92,10 @@ export default (opts: BaseCommandOptions) => {
         console.log(`  wgc grpc-service init --template ${templates[0]} --directory ./output`);
         console.log('');
       } else {
-        console.log(pc.red('No templates found in wundergraph/cosmo-grpc-templates.'));
+        console.log(pc.red('No templates found in wundergraph/cosmo-templates under grpc-service.'));
       }
       program.error(
-        `Template '${template}' does not exist in wundergraph/cosmo-grpc-templates. Please check the template name and try again.`,
+        `Template '${template}' does not exist in wundergraph/cosmo-templates under grpc-service. Please check the template name and try again.`,
       );
     }
 
@@ -67,11 +113,7 @@ export default (opts: BaseCommandOptions) => {
       } else {
         await mkdir(outputDir, { recursive: true });
       }
-      const emitter = degit(repo, { force: true, verbose: false });
-      emitter.on('info', (info: any) => {
-        spinner.text = info.message;
-      });
-      await emitter.clone(outputDir);
+      await downloadAndExtractTemplate(template, outputDir, spinner);
       spinner.succeed(pc.green(`gRPC service scaffolded in ${outputDir}`));
       console.log('');
       console.log(
diff --git a/cli/src/commands/grpc-service/commands/list-templates.ts b/cli/src/commands/grpc-service/commands/list-templates.ts
index bfa612688b..199ae51b6d 100644
--- a/cli/src/commands/grpc-service/commands/list-templates.ts
+++ b/cli/src/commands/grpc-service/commands/list-templates.ts
@@ -1,16 +1,22 @@
 import { Command } from 'commander';
 import pc from 'picocolors';
-import fetch from 'node-fetch';
 import Spinner from 'ora';
+import { Octokit } from '@octokit/rest';
 import { BaseCommandOptions } from '../../../core/types/types.js';
 
 export async function fetchAvailableTemplates(): Promise<string[]> {
-  const url = 'https://api.github.com/repos/wundergraph/cosmo-grpc-templates/contents';
-  const res = await fetch(url, { headers: { Accept: 'application/vnd.github.v3+json' } });
-  if (res.status === 200) {
-    const data = (await res.json()) as any[];
-    // Only return directories
-    return data.filter((item: any) => item.type === 'dir').map((item: any) => item.name);
+  const octokit = new Octokit();
+  const owner = 'wundergraph';
+  const repo = 'cosmo-templates';
+  const path = 'grpc-service';
+
+  try {
+    const res = await octokit.repos.getContent({ owner, repo, path });
+    if (Array.isArray(res.data)) {
+      return res.data.filter((item: any) => item.type === 'dir').map((item: any) => item.name);
+    }
+  } catch {
+    console.error('Error listing templates from https://github.com/wundergraph/cosmo-templates/');
   }
   return [];
 }
@@ -32,7 +38,7 @@ export default (_opts: BaseCommandOptions) => {
       console.log(`  wgc grpc-service init --template ${templates[0]} --directory ./output`);
       console.log('');
     } else {
-      console.log(pc.red('No templates found in wundergraph/cosmo-grpc-templates.'));
+      console.log(pc.red('No templates found in wundergraph/cosmo-templates under grpc-service.'));
     }
   });
   return command;
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 089fb8bfde..3f2a778de0 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -180,6 +180,9 @@ importers:
       '@modelcontextprotocol/sdk':
         specifier: ^1.9.0
         version: 1.9.0
+      '@octokit/rest':
+        specifier: ^22.0.0
+        version: 22.0.0
       '@wundergraph/composition':
         specifier: workspace:*
         version: link:../composition
@@ -216,9 +219,6 @@ importers:
       decompress:
         specifier: ^4.2.1
         version: 4.2.1
-      degit:
-        specifier: ^2.8.4
-        version: 2.8.4
       dotenv:
         specifier: ^16.6.0
         version: 16.6.0
@@ -231,6 +231,9 @@ importers:
       execa:
         specifier: ^9.5.2
         version: 9.5.2
+      fs-extra:
+        specifier: ^11.3.0
+        version: 11.3.0
       graphql:
         specifier: 16.9.0
         version: 16.9.0(patch_hash=hafdlc54qtxpqvetpefk646rly)
@@ -252,9 +255,6 @@ importers:
       log-symbols:
         specifier: ^5.1.0
         version: 5.1.0
-      node-fetch:
-        specifier: ^3.3.2
-        version: 3.3.2
       octokit:
         specifier: ^4.1.3
         version: 4.1.3
@@ -282,6 +282,9 @@ importers:
       semver:
         specifier: ^7.7.1
         version: 7.7.1
+      tar:
+        specifier: ^7.4.3
+        version: 7.4.3
       trieve-ts-sdk:
         specifier: ^0.0.80
         version: 0.0.80
@@ -304,12 +307,12 @@ importers:
       '@types/decompress':
         specifier: ^4.2.7
         version: 4.2.7
-      '@types/degit':
-        specifier: ^2.8.6
-        version: 2.8.6
       '@types/env-ci':
         specifier: ^3.1.4
         version: 3.1.4
+      '@types/fs-extra':
+        specifier: ^11.0.4
+        version: 11.0.4
       '@types/inquirer':
         specifier: ^9.0.3
         version: 9.0.3
@@ -328,6 +331,9 @@ importers:
       '@types/semver':
         specifier: ^7.7.0
         version: 7.7.0
+      '@types/tar':
+        specifier: ^6.1.13
+        version: 6.1.13
       del-cli:
         specifier: ^5.0.0
         version: 5.0.0
@@ -4332,6 +4338,10 @@ packages:
     resolution: {integrity: sha512-rh3G3wDO8J9wSjfI436JUKzHIxq8NaiL0tVeB2aXmG6p/9859aUOAjA9pmSPNGGZxfwmaJ9ozOJImuNVJdpvbA==}
     engines: {node: '>= 18'}
 
+  '@octokit/auth-token@6.0.0':
+    resolution: {integrity: sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==}
+    engines: {node: '>= 20'}
+
   '@octokit/auth-unauthenticated@6.1.2':
     resolution: {integrity: sha512-07DlUGcz/AAVdzu3EYfi/dOyMSHp9YsOxPl/MPmtlVXWiD//GlV8HgZsPhud94DEyx+RfrW0wSl46Lx+AWbOlg==}
     engines: {node: '>= 18'}
@@ -4348,6 +4358,10 @@ packages:
     resolution: {integrity: sha512-vvmsN0r7rguA+FySiCsbaTTobSftpIDIpPW81trAmsv9TGxg3YCujAxRYp/Uy8xmDgYCzzgulG62H7KYUFmeIg==}
     engines: {node: '>= 18'}
 
+  '@octokit/core@7.0.2':
+    resolution: {integrity: sha512-ODsoD39Lq6vR6aBgvjTnA3nZGliknKboc9Gtxr7E4WDNqY24MxANKcuDQSF0jzapvGb3KWOEDrKfve4HoWGK+g==}
+    engines: {node: '>= 20'}
+
   '@octokit/endpoint@10.1.3':
     resolution: {integrity: sha512-nBRBMpKPhQUxCsQQeW+rCJ/OPSMcj3g0nfHn01zGYZXuNDvvXudF/TYY6APj5THlurerpFN4a/dQAIAaM6BYhA==}
     engines: {node: '>= 18'}
@@ -4356,6 +4370,10 @@ packages:
     resolution: {integrity: sha512-OlYOlZIsfEVZm5HCSR8aSg02T2lbUWOsCQoPKfTXJwDzcHQBrVBGdGXb89dv2Kw2ToZaRtudp8O3ZIYoaOjKlA==}
     engines: {node: '>= 18'}
 
+  '@octokit/endpoint@11.0.0':
+    resolution: {integrity: sha512-hoYicJZaqISMAI3JfaDr1qMNi48OctWuOih1m80bkYow/ayPw6Jj52tqWJ6GEoFTk1gBqfanSoI1iY99Z5+ekQ==}
+    engines: {node: '>= 20'}
+
   '@octokit/graphql@8.2.1':
     resolution: {integrity: sha512-n57hXtOoHrhwTWdvhVkdJHdhTv0JstjDbDRhJfwIRNfFqmSo1DaK/mD2syoNUoLCyqSjBpGAKOG0BuwF392slw==}
     engines: {node: '>= 18'}
@@ -4364,6 +4382,10 @@ packages:
     resolution: {integrity: sha512-Yi8hcoqsrXGdt0yObxbebHXFOiUA+2v3n53epuOg1QUgOB6c4XzvisBNVXJSl8RYA5KrDuSL2yq9Qmqe5N0ryA==}
     engines: {node: '>= 18'}
 
+  '@octokit/graphql@9.0.1':
+    resolution: {integrity: sha512-j1nQNU1ZxNFx2ZtKmL4sMrs4egy5h65OMDmSbVyuCzjOcwsHq6EaYjOTGXPQxgfiN8dJ4CriYHk6zF050WEULg==}
+    engines: {node: '>= 20'}
+
   '@octokit/oauth-app@7.1.6':
     resolution: {integrity: sha512-OMcMzY2WFARg80oJNFwWbY51TBUfLH4JGTy119cqiDawSFXSIBujxmpXiKbGWQlvfn0CxE6f7/+c6+Kr5hI2YA==}
     engines: {node: '>= 18'}
@@ -4386,6 +4408,9 @@ packages:
   '@octokit/openapi-types@25.0.0':
     resolution: {integrity: sha512-FZvktFu7HfOIJf2BScLKIEYjDsw6RKc7rBJCdvCTfKsVnx2GEB/Nbzjr29DUdb7vQhlzS/j8qDzdditP0OC6aw==}
 
+  '@octokit/openapi-types@25.1.0':
+    resolution: {integrity: sha512-idsIggNXUKkk0+BExUn1dQ92sfysJrje03Q0bv0e+KPLrvyqZF8MnBpFz8UNfYDwB3Ie7Z0TByjWfzxt7vseaA==}
+
   '@octokit/openapi-webhooks-types@10.4.0':
     resolution: {integrity: sha512-HMiF7FUiVBYfp8pPijMTkWuPELQB6XkPftrnSuK1C1YXaaq2+0ganiQkorEQfXTmhtwlgHJwXT6P8miVhIyjQA==}
 
@@ -4410,12 +4435,24 @@ packages:
     peerDependencies:
       '@octokit/core': '>=6'
 
+  '@octokit/plugin-paginate-rest@13.1.1':
+    resolution: {integrity: sha512-q9iQGlZlxAVNRN2jDNskJW/Cafy7/XE52wjZ5TTvyhyOD904Cvx//DNyoO3J/MXJ0ve3rPoNWKEg5iZrisQSuw==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@octokit/core': '>=6'
+
   '@octokit/plugin-request-log@5.3.1':
     resolution: {integrity: sha512-n/lNeCtq+9ofhC15xzmJCNKP2BWTv8Ih2TTy+jatNCCq/gQP/V7rK3fjIfuz0pDWDALO/o/4QY4hyOF6TQQFUw==}
     engines: {node: '>= 18'}
     peerDependencies:
       '@octokit/core': '>=6'
 
+  '@octokit/plugin-request-log@6.0.0':
+    resolution: {integrity: sha512-UkOzeEN3W91/eBq9sPZNQ7sUBvYCqYbrrD8gTbBuGtHEuycE4/awMXcYvx6sVYo7LypPhmQwwpUe4Yyu4QZN5Q==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@octokit/core': '>=6'
+
   '@octokit/plugin-rest-endpoint-methods@13.5.0':
     resolution: {integrity: sha512-9Pas60Iv9ejO3WlAX3maE1+38c5nqbJXV5GrncEfkndIpZrJ/WPMRd2xYDcPPEt5yzpxcjw9fWNoPhsSGzqKqw==}
     engines: {node: '>= 18'}
@@ -4428,6 +4465,12 @@ packages:
     peerDependencies:
       '@octokit/core': '>=6'
 
+  '@octokit/plugin-rest-endpoint-methods@16.0.0':
+    resolution: {integrity: sha512-kJVUQk6/dx/gRNLWUnAWKFs1kVPn5O5CYZyssyEoNYaFedqZxsfYs7DwI3d67hGz4qOwaJ1dpm07hOAD1BXx6g==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@octokit/core': '>=6'
+
   '@octokit/plugin-retry@7.2.1':
     resolution: {integrity: sha512-wUc3gv0D6vNHpGxSaR3FlqJpTXGWgqmk607N9L3LvPL4QjaxDgX/1nY2mGpT37Khn+nlIXdljczkRnNdTTV3/A==}
     engines: {node: '>= 18'}
@@ -4448,6 +4491,14 @@ packages:
     resolution: {integrity: sha512-WEi/R0Jmq+IJKydWlKDmryPcmdYSVjL3ekaiEL1L9eo1sUnqMJ+grqmC9cjk7CA7+b2/T397tO5d8YLOH3qYpQ==}
     engines: {node: '>= 18'}
 
+  '@octokit/request-error@7.0.0':
+    resolution: {integrity: sha512-KRA7VTGdVyJlh0cP5Tf94hTiYVVqmt2f3I6mnimmaVz4UG3gQV/k4mDJlJv3X67iX6rmN7gSHCF8ssqeMnmhZg==}
+    engines: {node: '>= 20'}
+
+  '@octokit/request@10.0.3':
+    resolution: {integrity: sha512-V6jhKokg35vk098iBqp2FBKunk3kMTXlmq+PtbV9Gl3TfskWlebSofU9uunVKhUN7xl+0+i5vt0TGTG8/p/7HA==}
+    engines: {node: '>= 20'}
+
   '@octokit/request@9.2.2':
     resolution: {integrity: sha512-dZl0ZHx6gOQGcffgm1/Sf6JfEpmh34v3Af2Uci02vzUYz6qEN6zepoRtmybWXIGXFIK8K9ylE3b+duCWqhArtg==}
     engines: {node: '>= 18'}
@@ -4460,12 +4511,19 @@ packages:
     resolution: {integrity: sha512-sTQV7va0IUVZcntzy1q3QqPm/r8rWtDCqpRAmb8eXXnKkjoQEtFe3Nt5GTVsHft+R6jJoHeSiVLcgcvhtue/rg==}
     engines: {node: '>= 18'}
 
+  '@octokit/rest@22.0.0':
+    resolution: {integrity: sha512-z6tmTu9BTnw51jYGulxrlernpsQYXpui1RK21vmXn8yF5bp6iX16yfTtJYGK5Mh1qDkvDOmp2n8sRMcQmR8jiA==}
+    engines: {node: '>= 20'}
+
   '@octokit/types@13.10.0':
     resolution: {integrity: sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==}
 
   '@octokit/types@14.0.0':
     resolution: {integrity: sha512-VVmZP0lEhbo2O1pdq63gZFiGCKkm8PPp8AUOijlwPO6hojEVjspA0MWKP7E4hbvGxzFKNqKr6p0IYtOH/Wf/zA==}
 
+  '@octokit/types@14.1.0':
+    resolution: {integrity: sha512-1y6DgTy8Jomcpu33N+p5w58l6xyt55Ar2I91RPiIA0xCJBXyUAhXCcmZaDWSANiha7R9a6qJJ2CRomGPZ6f46g==}
+
   '@octokit/webhooks-methods@5.1.1':
     resolution: {integrity: sha512-NGlEHZDseJTCj8TMMFehzwa9g7On4KJMPVHDSrHxCQumL6uSQR8wIkP/qesv52fXqV1BPf4pTxwtS31ldAt9Xg==}
     engines: {node: '>= 18'}
@@ -6982,9 +7040,6 @@ packages:
   '@types/decompress@4.2.7':
     resolution: {integrity: sha512-9z+8yjKr5Wn73Pt17/ldnmQToaFHZxK0N1GHysuk/JIPT8RIdQeoInM01wWPgypRcvb6VH1drjuFpQ4zmY437g==}
 
-  '@types/degit@2.8.6':
-    resolution: {integrity: sha512-y0M7sqzsnHB6cvAeTCBPrCQNQiZe8U4qdzf8uBVmOWYap5MMTN/gB2iEqrIqFiYcsyvP74GnGD5tgsHttielFw==}
-
   '@types/ejs@3.1.5':
     resolution: {integrity: sha512-nv+GSx77ZtXiJzwKdsASqi+YQ5Z7vwHsTP0JY2SiQgjGckkBRKZnk8nIM+7oUZ1VCtuTz0+By4qVR7fqzp/Dfg==}
 
@@ -7009,6 +7064,9 @@ packages:
   '@types/estree@1.0.7':
     resolution: {integrity: sha512-w28IoSUCJpidD/TGviZwwMJckNESJZXFu7NBZ5YJ4mEUnNraUn9Pm8HSZm/jDF1pDWYKspWE7oVphigUPRakIQ==}
 
+  '@types/fs-extra@11.0.4':
+    resolution: {integrity: sha512-yTbItCNreRooED33qjunPthRcSjERP1r4MqCZc7wv0u2sUkzTFp45tgUfS5+r7FrZPdmCCNflLhVSP/o+SemsQ==}
+
   '@types/geojson@7946.0.10':
     resolution: {integrity: sha512-Nmh0K3iWQJzniTuPRcJn5hxXkfB1T1pgB89SBig5PlJQU5yocazeu4jATJlaA0GYFKWMqDdvYemoSnF2pXgLVA==}
 
@@ -7030,6 +7088,9 @@ packages:
   '@types/json5@0.0.29':
     resolution: {integrity: sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==}
 
+  '@types/jsonfile@6.1.4':
+    resolution: {integrity: sha512-D5qGUYwjvnNNextdU59/+fI+spnwtTFmyQP0h+PfIOSkNfpU6AOICUOkm4i0OnSk+NyjdPJrxCDro0sJsWlRpQ==}
+
   '@types/linkify-it@3.0.2':
     resolution: {integrity: sha512-HZQYqbiFVWufzCwexrvh694SOim8z2d+xJl5UNamcvQFejLY/2YUtzXHYi3cHdI7PMlS8ejH2slRAOJQ32aNbA==}
 
@@ -7167,6 +7228,9 @@ packages:
   '@types/stream-json@1.7.7':
     resolution: {integrity: sha512-hHG7cLQ09H/m9i0jzL6UJAeLLxIWej90ECn0svO4T8J0nGcl89xZDQ2ujT4WKlvg0GWkcxJbjIDzW/v7BYUM6Q==}
 
+  '@types/tar@6.1.13':
+    resolution: {integrity: sha512-IznnlmU5f4WcGTh2ltRu/Ijpmk8wiWXfF0VA4s+HPjHZgvFggk1YaIkbo5krX/zUCzWF8N/l4+W/LNxnvAJ8nw==}
+
   '@types/tedious@4.0.14':
     resolution: {integrity: sha512-KHPsfX/FoVbUGbyYvk1q9MMQHLPeRZhRJZdO45Q4YjvFkv4hMNghCWTvy7rdKessBsmtz4euWCWAB6/tVpI1Iw==}
 
@@ -7729,6 +7793,9 @@ packages:
   before-after-hook@3.0.2:
     resolution: {integrity: sha512-Nik3Sc0ncrMK4UUdXQmAnRtzmNQTAAXmXIopizwZ1W1t8QmfJj+zL4OA2I7XPTPW5z5TDqv4hRo/JzouDJnX3A==}
 
+  before-after-hook@4.0.0:
+    resolution: {integrity: sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==}
+
   bidi-js@1.0.3:
     resolution: {integrity: sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==}
 
@@ -8509,10 +8576,6 @@ packages:
     resolution: {integrity: sha512-wAV9QHOsNbwnWdNW2FYvE1P56wtgSbM+3SZcdGiWQILwVjACCXDCI3Ai8QlCjMDB8YK5zySiXZYBiwGmNY3lnw==}
     engines: {node: '>=12'}
 
-  data-uri-to-buffer@4.0.1:
-    resolution: {integrity: sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==}
-    engines: {node: '>= 12'}
-
   data-urls@5.0.0:
     resolution: {integrity: sha512-ZYP5VBHshaDAiVZxjbRVcFJpc+4xGgT0bK3vzy1HLN8jTO975HEbuYzZJcHoQEY5K1a0z8YayJkyVETa08eNTg==}
     engines: {node: '>=18'}
@@ -8690,11 +8753,6 @@ packages:
     resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
     engines: {node: '>= 0.4'}
 
-  degit@2.8.4:
-    resolution: {integrity: sha512-vqYuzmSA5I50J882jd+AbAhQtgK6bdKUJIex1JNfEUPENCgYsxugzKVZlFyMwV4i06MmnV47/Iqi5Io86zf3Ng==}
-    engines: {node: '>=8.0.0'}
-    hasBin: true
-
   del-cli@5.0.0:
     resolution: {integrity: sha512-rENFhUaYcjoMODwFhhlON+ogN7DoG+4+GFN+bsA1XeDt4w2OKQnQadFP1thHSAlK9FAtl88qgP66wOV+eFZZiQ==}
     engines: {node: '>=14.16'}
@@ -9408,6 +9466,9 @@ packages:
   fast-content-type-parse@2.0.1:
     resolution: {integrity: sha512-nGqtvLrj5w0naR6tDPfB4cUmYCqouzyQiz6C5y/LtcDllJdrcc6WaWW6iXyIIOErTa/XRybj28aasdn4LkVk6Q==}
 
+  fast-content-type-parse@3.0.0:
+    resolution: {integrity: sha512-ZvLdcY8P+N8mGQJahJV5G4U88CSvT1rP8ApL6uETe88MBXrBHAkZlSEySdUlyztF7ccb+Znos3TFqaepHxdhBg==}
+
   fast-copy@3.0.1:
     resolution: {integrity: sha512-Knr7NOtK3HWRYGtHoJrjkaWepqT8thIVGAwt0p0aUs1zqkAzXZV4vo9fFNwyb5fcqK1GKYFYxldQdIDVKhUAfA==}
 
@@ -9500,10 +9561,6 @@ packages:
       picomatch:
         optional: true
 
-  fetch-blob@3.2.0:
-    resolution: {integrity: sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==}
-    engines: {node: ^12.20 || >= 14.13}
-
   fflate@0.4.8:
     resolution: {integrity: sha512-FJqqoDBR00Mdj9ppamLa/Y7vxm+PRmNWA67N846RvsoYVMKB4q3y/de5PA7gUmRMYK/8CMz2GDZQmCRN1wBcWA==}
 
@@ -9615,10 +9672,6 @@ packages:
     resolution: {integrity: sha512-0iirZp3uVDjVGt9p49aTaqjk84TrglENEDuqfdlZQ1roC9CWlPk6Avf8EEnZNcAqPonwkG35x4n3ww/1THYAeQ==}
     engines: {node: '>= 12.20'}
 
-  formdata-polyfill@4.0.10:
-    resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
-    engines: {node: '>=12.20.0'}
-
   forwarded@0.2.0:
     resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
     engines: {node: '>= 0.6'}
@@ -11328,10 +11381,6 @@ packages:
       encoding:
         optional: true
 
-  node-fetch@3.3.2:
-    resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-
   node-gyp-build-optional-packages@5.0.7:
     resolution: {integrity: sha512-YlCCc6Wffkx0kHkmam79GKvDQ6x+QZkMjFGrIMxgFNILFvGSbCp2fCBC55pGTT9gVaz8Na5CLmxt/urtzRv36w==}
     hasBin: true
@@ -17911,6 +17960,8 @@ snapshots:
 
   '@octokit/auth-token@5.1.1': {}
 
+  '@octokit/auth-token@6.0.0': {}
+
   '@octokit/auth-unauthenticated@6.1.2':
     dependencies:
       '@octokit/request-error': 6.1.8
@@ -17941,6 +17992,16 @@ snapshots:
       before-after-hook: 3.0.2
       universal-user-agent: 7.0.2
 
+  '@octokit/core@7.0.2':
+    dependencies:
+      '@octokit/auth-token': 6.0.0
+      '@octokit/graphql': 9.0.1
+      '@octokit/request': 10.0.3
+      '@octokit/request-error': 7.0.0
+      '@octokit/types': 14.0.0
+      before-after-hook: 4.0.0
+      universal-user-agent: 7.0.2
+
   '@octokit/endpoint@10.1.3':
     dependencies:
       '@octokit/types': 13.10.0
@@ -17951,6 +18012,11 @@ snapshots:
       '@octokit/types': 14.0.0
       universal-user-agent: 7.0.2
 
+  '@octokit/endpoint@11.0.0':
+    dependencies:
+      '@octokit/types': 14.0.0
+      universal-user-agent: 7.0.2
+
   '@octokit/graphql@8.2.1':
     dependencies:
       '@octokit/request': 9.2.2
@@ -17963,6 +18029,12 @@ snapshots:
       '@octokit/types': 14.0.0
       universal-user-agent: 7.0.2
 
+  '@octokit/graphql@9.0.1':
+    dependencies:
+      '@octokit/request': 10.0.3
+      '@octokit/types': 14.0.0
+      universal-user-agent: 7.0.2
+
   '@octokit/oauth-app@7.1.6':
     dependencies:
       '@octokit/auth-oauth-app': 8.1.3
@@ -17994,6 +18066,8 @@ snapshots:
 
   '@octokit/openapi-types@25.0.0': {}
 
+  '@octokit/openapi-types@25.1.0': {}
+
   '@octokit/openapi-webhooks-types@10.4.0': {}
 
   '@octokit/plugin-enterprise-rest@6.0.1': {}
@@ -18012,10 +18086,19 @@ snapshots:
       '@octokit/core': 6.1.5
       '@octokit/types': 14.0.0
 
+  '@octokit/plugin-paginate-rest@13.1.1(@octokit/core@7.0.2)':
+    dependencies:
+      '@octokit/core': 7.0.2
+      '@octokit/types': 14.1.0
+
   '@octokit/plugin-request-log@5.3.1(@octokit/core@6.1.4)':
     dependencies:
       '@octokit/core': 6.1.4
 
+  '@octokit/plugin-request-log@6.0.0(@octokit/core@7.0.2)':
+    dependencies:
+      '@octokit/core': 7.0.2
+
   '@octokit/plugin-rest-endpoint-methods@13.5.0(@octokit/core@6.1.4)':
     dependencies:
       '@octokit/core': 6.1.4
@@ -18026,6 +18109,11 @@ snapshots:
       '@octokit/core': 6.1.5
       '@octokit/types': 14.0.0
 
+  '@octokit/plugin-rest-endpoint-methods@16.0.0(@octokit/core@7.0.2)':
+    dependencies:
+      '@octokit/core': 7.0.2
+      '@octokit/types': 14.1.0
+
   '@octokit/plugin-retry@7.2.1(@octokit/core@6.1.5)':
     dependencies:
       '@octokit/core': 6.1.5
@@ -18047,6 +18135,18 @@ snapshots:
     dependencies:
       '@octokit/types': 14.0.0
 
+  '@octokit/request-error@7.0.0':
+    dependencies:
+      '@octokit/types': 14.0.0
+
+  '@octokit/request@10.0.3':
+    dependencies:
+      '@octokit/endpoint': 11.0.0
+      '@octokit/request-error': 7.0.0
+      '@octokit/types': 14.0.0
+      fast-content-type-parse: 3.0.0
+      universal-user-agent: 7.0.2
+
   '@octokit/request@9.2.2':
     dependencies:
       '@octokit/endpoint': 10.1.3
@@ -18070,6 +18170,13 @@ snapshots:
       '@octokit/plugin-request-log': 5.3.1(@octokit/core@6.1.4)
       '@octokit/plugin-rest-endpoint-methods': 13.5.0(@octokit/core@6.1.4)
 
+  '@octokit/rest@22.0.0':
+    dependencies:
+      '@octokit/core': 7.0.2
+      '@octokit/plugin-paginate-rest': 13.1.1(@octokit/core@7.0.2)
+      '@octokit/plugin-request-log': 6.0.0(@octokit/core@7.0.2)
+      '@octokit/plugin-rest-endpoint-methods': 16.0.0(@octokit/core@7.0.2)
+
   '@octokit/types@13.10.0':
     dependencies:
       '@octokit/openapi-types': 24.2.0
@@ -18078,6 +18185,10 @@ snapshots:
     dependencies:
       '@octokit/openapi-types': 25.0.0
 
+  '@octokit/types@14.1.0':
+    dependencies:
+      '@octokit/openapi-types': 25.1.0
+
   '@octokit/webhooks-methods@5.1.1': {}
 
   '@octokit/webhooks-types@7.6.1': {}
@@ -21054,8 +21165,6 @@ snapshots:
     dependencies:
       '@types/node': 20.12.12
 
-  '@types/degit@2.8.6': {}
-
   '@types/ejs@3.1.5': {}
 
   '@types/env-ci@3.1.4': {}
@@ -21080,6 +21189,11 @@ snapshots:
 
   '@types/estree@1.0.7': {}
 
+  '@types/fs-extra@11.0.4':
+    dependencies:
+      '@types/jsonfile': 6.1.4
+      '@types/node': 20.12.12
+
   '@types/geojson@7946.0.10': {}
 
   '@types/hast@3.0.3':
@@ -21099,6 +21213,10 @@ snapshots:
 
   '@types/json5@0.0.29': {}
 
+  '@types/jsonfile@6.1.4':
+    dependencies:
+      '@types/node': 20.12.12
+
   '@types/linkify-it@3.0.2': {}
 
   '@types/linkify-it@5.0.0': {}
@@ -21245,6 +21363,11 @@ snapshots:
       '@types/node': 20.12.12
       '@types/stream-chain': 2.0.1
 
+  '@types/tar@6.1.13':
+    dependencies:
+      '@types/node': 20.12.12
+      minipass: 4.2.8
+
   '@types/tedious@4.0.14':
     dependencies:
       '@types/node': 20.12.12
@@ -21957,6 +22080,8 @@ snapshots:
 
   before-after-hook@3.0.2: {}
 
+  before-after-hook@4.0.0: {}
+
   bidi-js@1.0.3:
     dependencies:
       require-from-string: 2.0.2
@@ -22776,8 +22901,6 @@ snapshots:
 
   dargs@8.1.0: {}
 
-  data-uri-to-buffer@4.0.1: {}
-
   data-urls@5.0.0:
     dependencies:
       whatwg-mimetype: 4.0.0
@@ -22946,8 +23069,6 @@ snapshots:
       has-property-descriptors: 1.0.2
       object-keys: 1.1.1
 
-  degit@2.8.4: {}
-
   del-cli@5.0.0:
     dependencies:
       del: 7.0.0
@@ -23525,10 +23646,10 @@ snapshots:
     dependencies:
       eslint: 8.57.1
 
-  eslint-config-standard@17.1.0(eslint-plugin-import@2.27.5)(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1):
+  eslint-config-standard@17.1.0(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1))(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1):
     dependencies:
       eslint: 8.57.1
-      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1)
+      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
       eslint-plugin-n: 16.6.2(eslint@8.57.1)
       eslint-plugin-promise: 6.6.0(eslint@8.57.1)
 
@@ -23538,9 +23659,9 @@ snapshots:
       '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
       eslint: 8.57.1
       eslint-config-prettier: 8.10.0(eslint@8.57.1)
-      eslint-config-standard: 17.1.0(eslint-plugin-import@2.27.5)(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1)
-      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5)(eslint@8.57.1)
-      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1)
+      eslint-config-standard: 17.1.0(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1))(eslint-plugin-n@16.6.2(eslint@8.57.1))(eslint-plugin-promise@6.6.0(eslint@8.57.1))(eslint@8.57.1)
+      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1)
+      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
       eslint-plugin-n: 16.6.2(eslint@8.57.1)
       eslint-plugin-node: 11.1.0(eslint@8.57.1)
       eslint-plugin-promise: 6.6.0(eslint@8.57.1)
@@ -23577,6 +23698,24 @@ snapshots:
       - eslint-import-resolver-webpack
       - supports-color
 
+  eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1):
+    dependencies:
+      debug: 4.3.4
+      enhanced-resolve: 5.15.0
+      eslint: 8.57.1
+      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
+      eslint-plugin-import: 2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
+      get-tsconfig: 4.7.2
+      globby: 13.2.2
+      is-core-module: 2.12.1
+      is-glob: 4.0.3
+      synckit: 0.8.5
+    transitivePeerDependencies:
+      - '@typescript-eslint/parser'
+      - eslint-import-resolver-node
+      - eslint-import-resolver-webpack
+      - supports-color
+
   eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5)(eslint@8.57.1):
     dependencies:
       debug: 4.3.4
@@ -23594,6 +23733,18 @@ snapshots:
       - eslint-import-resolver-node
       - eslint-import-resolver-webpack
       - supports-color
+    optional: true
+
+  eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1):
+    dependencies:
+      debug: 3.2.7
+    optionalDependencies:
+      '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
+      eslint: 8.57.1
+      eslint-import-resolver-node: 0.3.7
+      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1)
+    transitivePeerDependencies:
+      - supports-color
 
   eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1):
     dependencies:
@@ -23606,6 +23757,16 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1):
+    dependencies:
+      debug: 3.2.7
+    optionalDependencies:
+      '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
+      eslint: 8.57.1
+      eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1)
+    transitivePeerDependencies:
+      - supports-color
+
   eslint-module-utils@2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1):
     dependencies:
       debug: 3.2.7
@@ -23615,6 +23776,7 @@ snapshots:
       eslint-import-resolver-typescript: 3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5)(eslint@8.57.1)
     transitivePeerDependencies:
       - supports-color
+    optional: true
 
   eslint-plugin-es-x@7.8.0(eslint@8.57.1):
     dependencies:
@@ -23629,6 +23791,31 @@ snapshots:
       eslint-utils: 2.1.0
       regexpp: 3.2.0
 
+  eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1):
+    dependencies:
+      array-includes: 3.1.6
+      array.prototype.flat: 1.3.1
+      array.prototype.flatmap: 1.3.1
+      debug: 3.2.7
+      doctrine: 2.1.0
+      eslint: 8.57.1
+      eslint-import-resolver-node: 0.3.7
+      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
+      has: 1.0.3
+      is-core-module: 2.12.1
+      is-glob: 4.0.3
+      minimatch: 3.1.2
+      object.values: 1.1.6
+      resolve: 1.22.2
+      semver: 6.3.1
+      tsconfig-paths: 3.14.2
+    optionalDependencies:
+      '@typescript-eslint/parser': 5.62.0(eslint@8.57.1)(typescript@5.5.2)
+    transitivePeerDependencies:
+      - eslint-import-resolver-typescript
+      - eslint-import-resolver-webpack
+      - supports-color
+
   eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1):
     dependencies:
       array-includes: 3.1.6
@@ -23663,7 +23850,7 @@ snapshots:
       doctrine: 2.1.0
       eslint: 8.57.1
       eslint-import-resolver-node: 0.3.7
-      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5)(eslint@8.57.1)
+      eslint-module-utils: 2.8.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-import-resolver-node@0.3.7)(eslint-import-resolver-typescript@3.5.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint-plugin-import@2.27.5(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.5.2))(eslint@8.57.1))(eslint@8.57.1))(eslint@8.57.1)
       has: 1.0.3
       is-core-module: 2.12.1
       is-glob: 4.0.3
@@ -23678,6 +23865,7 @@ snapshots:
       - eslint-import-resolver-typescript
       - eslint-import-resolver-webpack
       - supports-color
+    optional: true
 
   eslint-plugin-jsx-a11y@6.7.1(eslint@8.57.1):
     dependencies:
@@ -23985,6 +24173,8 @@ snapshots:
 
   fast-content-type-parse@2.0.1: {}
 
+  fast-content-type-parse@3.0.0: {}
+
   fast-copy@3.0.1: {}
 
   fast-decode-uri-component@1.0.1: {}
@@ -24094,11 +24284,6 @@ snapshots:
     optionalDependencies:
       picomatch: 4.0.2
 
-  fetch-blob@3.2.0:
-    dependencies:
-      node-domexception: 1.0.0
-      web-streams-polyfill: 3.2.1
-
   fflate@0.4.8: {}
 
   figures@3.2.0:
@@ -24215,10 +24400,6 @@ snapshots:
       node-domexception: 1.0.0
       web-streams-polyfill: 4.0.0-beta.3
 
-  formdata-polyfill@4.0.10:
-    dependencies:
-      fetch-blob: 3.2.0
-
   forwarded@0.2.0: {}
 
   fraction.js@4.2.0: {}
@@ -24795,7 +24976,7 @@ snapshots:
   http-proxy-agent@7.0.2:
     dependencies:
       agent-base: 7.1.3
-      debug: 4.4.0
+      debug: 4.4.1
     transitivePeerDependencies:
       - supports-color
 
@@ -24816,7 +24997,7 @@ snapshots:
   https-proxy-agent@7.0.6:
     dependencies:
       agent-base: 7.1.3
-      debug: 4.4.0
+      debug: 4.4.1
     transitivePeerDependencies:
       - supports-color
 
@@ -26233,12 +26414,6 @@ snapshots:
     optionalDependencies:
       encoding: 0.1.13
 
-  node-fetch@3.3.2:
-    dependencies:
-      data-uri-to-buffer: 4.0.1
-      fetch-blob: 3.2.0
-      formdata-polyfill: 4.0.10
-
   node-gyp-build-optional-packages@5.0.7:
     optional: true
 

From 13b7eb10c1d71b966f3a395aaa96963a3019113f Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 10:01:29 +0200
Subject: [PATCH 03/10] chore: refactor checkTemplateExists

---
 .../commands/grpc-service/commands/init.ts    | 19 +++++++++++++------
 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
index 138ce13a10..b3eba94574 100644
--- a/cli/src/commands/grpc-service/commands/init.ts
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -12,13 +12,20 @@ import { BaseCommandOptions } from '../../../core/types/types.js';
 import { fetchAvailableTemplates } from './list-templates.js';
 
 async function checkTemplateExists(template: string): Promise<boolean> {
-  const url = `https://api.github.com/repos/wundergraph/cosmo-templates/contents/grpc-service/${template}`;
-  const res = await fetch(url, { headers: { Accept: 'application/vnd.github.v3+json' } });
-  if (res.status === 200) {
-    const data: any = await res.json();
-    return Array.isArray(data); // Should be an array if it's a directory
+  const octokit = new Octokit();
+  const owner = 'wundergraph';
+  const repo = 'cosmo-templates';
+  const path = `grpc-service/${template}`;
+  try {
+    const res = await octokit.repos.getContent({ owner, repo, path });
+    // If it's a directory, res.data will be an array
+    return Array.isArray(res.data);
+  } catch (error: any) {
+    if (error.status === 404) {
+      return false;
+    }
+    throw error;
   }
-  return false;
 }
 
 async function downloadAndExtractTemplate(template: string, outputDir: string, spinner: any) {

From 6de306104a36b4afa5438402a01f36b175fa2c56 Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 11:19:49 +0200
Subject: [PATCH 04/10] chore: refactor init & generate

---
 .../grpc-service/commands/generate.ts         |   7 +-
 .../commands/grpc-service/commands/init.ts    | 222 +++++++++++-------
 2 files changed, 136 insertions(+), 93 deletions(-)

diff --git a/cli/src/commands/grpc-service/commands/generate.ts b/cli/src/commands/grpc-service/commands/generate.ts
index 65d3e21086..5b70aceb95 100644
--- a/cli/src/commands/grpc-service/commands/generate.ts
+++ b/cli/src/commands/grpc-service/commands/generate.ts
@@ -1,6 +1,6 @@
-import { readFile, writeFile } from 'node:fs/promises';
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { existsSync, lstatSync } from 'node:fs';
-import { resolve, dirname } from 'pathe';
+import { resolve } from 'pathe';
 import Spinner from 'ora';
 import { Command, program } from 'commander';
 import { compileGraphQLToMapping, compileGraphQLToProto, ProtoLock } from '@wundergraph/protographic';
@@ -38,8 +38,9 @@ async function generateCommandAction(name: string, options: any) {
   try {
     const inputFile = resolve(options.input);
 
+    // Ensure output directory exists
     if (!existsSync(options.output)) {
-      program.error(`Output directory ${options.output} does not exist`);
+      await mkdir(options.output, { recursive: true });
     }
 
     if (!lstatSync(options.output).isDirectory()) {
diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
index b3eba94574..7c45b97ff4 100644
--- a/cli/src/commands/grpc-service/commands/init.ts
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -1,5 +1,4 @@
-import { existsSync, readdirSync } from 'node:fs';
-import { mkdir } from 'node:fs/promises';
+import { existsSync, readdirSync, mkdirSync } from 'node:fs';
 import os from 'node:os';
 import { Command, program } from 'commander';
 import { resolve, join } from 'pathe';
@@ -12,7 +11,14 @@ import { BaseCommandOptions } from '../../../core/types/types.js';
 import { fetchAvailableTemplates } from './list-templates.js';
 
 async function checkTemplateExists(template: string): Promise<boolean> {
-  const octokit = new Octokit();
+  const octokit = new Octokit({
+    log: {
+      debug: () => {},
+      info: () => {},
+      warn: () => {},
+      error: () => {},
+    },
+  });
   const owner = 'wundergraph';
   const repo = 'cosmo-templates';
   const path = `grpc-service/${template}`;
@@ -20,11 +26,8 @@ async function checkTemplateExists(template: string): Promise<boolean> {
     const res = await octokit.repos.getContent({ owner, repo, path });
     // If it's a directory, res.data will be an array
     return Array.isArray(res.data);
-  } catch (error: any) {
-    if (error.status === 404) {
-      return false;
-    }
-    throw error;
+  } catch {
+    return false;
   }
 }
 
@@ -35,102 +38,141 @@ async function downloadAndExtractTemplate(template: string, outputDir: string, s
   const ref = 'main'; // You may want to make this configurable
   const tempTarPath = join(os.tmpdir(), `cosmo-templates-${Date.now()}.tar.gz`);
   const tempExtractDir = join(os.tmpdir(), `cosmo-templates-extract-${Date.now()}`);
-  await fs.ensureDir(tempExtractDir);
-
-  spinner.text = 'Downloading template from GitHub...';
-  const response = await octokit.repos.downloadTarballArchive({ owner, repo, ref });
-  if (response.data instanceof ArrayBuffer) {
-    await fs.writeFile(tempTarPath, new Uint8Array(Buffer.from(response.data)));
-  } else {
-    throw new TypeError('Unexpected tarball response type');
-  }
 
-  spinner.text = 'Extracting template files...';
-  // The tarball will have a top-level directory like cosmo-templates-<sha>/grpc-service/<template>/
-  // We want to extract only grpc-service/<template> and copy its contents to outputDir
   let topLevelDir = '';
-  await t({
-    file: tempTarPath,
-    onentry: (entry: { path: string }) => {
-      if (!topLevelDir && entry.path.includes('/')) {
-        topLevelDir = entry.path.split('/')[0];
+  try {
+    await fs.ensureDir(tempExtractDir);
+
+    spinner.text = 'Downloading template from GitHub...';
+    let response;
+    try {
+      response = await octokit.repos.downloadTarballArchive({ owner, repo, ref });
+    } catch (err: any) {
+      throw new Error(`Failed to download template tarball from GitHub: ${err.message || err}`);
+    }
+    if (response.data instanceof ArrayBuffer) {
+      try {
+        await fs.writeFile(tempTarPath, new Uint8Array(Buffer.from(response.data)));
+      } catch (err: any) {
+        throw new Error(`Failed to write tarball to disk: ${err.message || err}`);
       }
-    },
-  });
-  const templatePathInTar = `${topLevelDir}/grpc-service/${template}`;
-  await extract({
-    file: tempTarPath,
-    cwd: tempExtractDir,
-    filter: (p: string) => p.startsWith(templatePathInTar + '/'),
-    strip: templatePathInTar.split('/').length,
-  });
+    } else {
+      throw new TypeError('Unexpected tarball response type');
+    }
 
-  // Copy extracted files to outputDir
-  await fs.copy(tempExtractDir, outputDir, { overwrite: true });
+    spinner.text = 'Extracting template files...';
+    try {
+      await t({
+        file: tempTarPath,
+        onentry: (entry: { path: string }) => {
+          if (!topLevelDir && entry.path.includes('/')) {
+            topLevelDir = entry.path.split('/')[0];
+          }
+        },
+      });
+    } catch (err: any) {
+      throw new Error(`Failed to inspect tarball for top-level directory: ${err.message || err}`);
+    }
+    const templatePathInTar = `${topLevelDir}/grpc-service/${template}`;
+    let extracted = false;
+    try {
+      await extract({
+        file: tempTarPath,
+        cwd: tempExtractDir,
+        filter: (p: string) => p.startsWith(templatePathInTar + '/'),
+        strip: templatePathInTar.split('/').length,
+      });
+      // Validate extraction
+      const extractedTemplateDir = join(tempExtractDir);
+      const files = await fs.readdir(extractedTemplateDir);
+      if (!files || files.length === 0) {
+        throw new Error('Extracted template directory is empty. The template may not exist or is misconfigured.');
+      }
+      extracted = true;
+    } catch (err: any) {
+      throw new Error(`Failed to extract template files: ${err.message || err}`);
+    }
 
-  // Cleanup
-  await fs.remove(tempTarPath);
-  await fs.remove(tempExtractDir);
+    // Copy extracted files to outputDir
+    try {
+      await fs.copy(tempExtractDir, outputDir, { overwrite: true });
+    } catch (err: any) {
+      throw new Error(`Failed to copy extracted files to output directory: ${err.message || err}`);
+    }
+  } catch (error: any) {
+    spinner.fail(pc.red('Error during template extraction.'));
+    throw error;
+  } finally {
+    // Cleanup
+    try {
+      await fs.remove(tempTarPath);
+    } catch {}
+    try {
+      await fs.remove(tempExtractDir);
+    } catch {}
+  }
 }
 
 export default (opts: BaseCommandOptions) => {
-  const command = new Command('init');
-  command.description('Scaffold a new gRPC service project from a template');
-  command.option('-t, --template <template>', 'Template to use', 'typescript-connect-rpc-fastify');
-  command.option('-d, --directory <directory>', 'Output directory', '.');
-  command.action(async (options) => {
-    const spinner = Spinner();
-    const template = options.template || 'typescript-connect-rpc-fastify';
-    const outputDir = resolve(process.cwd(), options.directory || '.');
+  const command = new Command();
+  command
+    .name('init')
+    .description('Scaffold a new gRPC service project from a template')
+    .option('-t, --template <template>', 'Template to use', 'typescript-connect-rpc-fastify')
+    .option('-d, --directory <directory>', 'Output directory', '.')
+    .action(async (options: { template: string; directory: string }) => {
+      const spinner = Spinner();
+      const template = options.template || 'typescript-connect-rpc-fastify';
+      const outputDir = resolve(process.cwd(), options.directory || '.');
 
-    spinner.start(`Checking if template '${template}' exists...`);
-    const exists = await checkTemplateExists(template);
-    if (!exists) {
-      spinner.start('Fetching available templates...');
-      const templates = await fetchAvailableTemplates();
-      spinner.stop();
-      if (templates.length > 0) {
-        console.log(pc.yellow('Available templates:'));
-        for (const t of templates) {
-          console.log(`  - ${t}`);
+      spinner.start(`Checking if template '${template}' exists...`);
+      const templateExists = await checkTemplateExists(template);
+      if (!templateExists) {
+        spinner.start('Fetching available templates...');
+        const templates = await fetchAvailableTemplates();
+        spinner.stop();
+        if (templates.length > 0) {
+          console.log(pc.yellow('Available templates:'));
+          for (const t of templates) {
+            console.log(`  - ${t}`);
+          }
+          console.log('');
+          console.log(
+            `\n${pc.yellow('To use a template, run:')}\n  wgc grpc-service init --template ${templates[0]} --directory ./output\n`,
+          );
+        } else {
+          console.log(pc.red('No templates found in wundergraph/cosmo-templates under grpc-service.'));
         }
-        console.log('');
-        console.log(pc.yellow('To use a template, run:'));
-        console.log(`  wgc grpc-service init --template ${templates[0]} --directory ./output`);
-        console.log('');
-      } else {
-        console.log(pc.red('No templates found in wundergraph/cosmo-templates under grpc-service.'));
+        program.error(
+          `Template '${template}' does not exist in wundergraph/cosmo-templates under grpc-service. Please check the template name and try again.`,
+        );
       }
-      program.error(
-        `Template '${template}' does not exist in wundergraph/cosmo-templates under grpc-service. Please check the template name and try again.`,
-      );
-    }
 
-    spinner.text = `Scaffolding gRPC service using template '${template}'...`;
+      spinner.text = `Scaffolding gRPC service using template '${template}'...`;
 
-    try {
-      if (existsSync(outputDir)) {
-        const files = readdirSync(outputDir);
-        if (files.length > 0) {
-          spinner.fail(pc.red('Output directory is not empty.'));
-          program.error(
-            `The directory '${outputDir}' is not empty. Please use the --directory argument to specify an empty or new directory.`,
-          );
+      try {
+        if (existsSync(outputDir)) {
+          const files = readdirSync(outputDir);
+          if (files.length > 0) {
+            spinner.fail(pc.red('Output directory is not empty.'));
+            program.error(
+              `The directory '${outputDir}' is not empty. Please use the --directory argument to specify an empty or new directory.`,
+            );
+          }
+        } else {
+          mkdirSync(outputDir, { recursive: true });
         }
-      } else {
-        await mkdir(outputDir, { recursive: true });
+        await downloadAndExtractTemplate(template, outputDir, spinner);
+        spinner.succeed(pc.green(`gRPC service scaffolded in ${outputDir}`));
+        console.log('');
+        console.log(
+          `  Checkout the ${pc.bold(pc.italic('README.md'))} file for instructions on how to use your service.`,
+        );
+        console.log('');
+      } catch (error: any) {
+        spinner.fail(pc.red('Failed to scaffold gRPC service'));
+        program.error(error.message || String(error));
       }
-      await downloadAndExtractTemplate(template, outputDir, spinner);
-      spinner.succeed(pc.green(`gRPC service scaffolded in ${outputDir}`));
-      console.log('');
-      console.log(
-        `  Checkout the ${pc.bold(pc.italic('README.md'))} file for instructions on how to use your service.`,
-      );
-      console.log('');
-    } catch (error: any) {
-      spinner.fail(pc.red('Failed to scaffold gRPC service'));
-      program.error(error.message || String(error));
-    }
-  });
+    });
   return command;
 };

From 105922ba37ac65891674c3408cafda804ae93112 Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 11:22:54 +0200
Subject: [PATCH 05/10] chore: validate template name

---
 cli/src/commands/grpc-service/commands/init.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
index 7c45b97ff4..29b710a5be 100644
--- a/cli/src/commands/grpc-service/commands/init.ts
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -123,6 +123,12 @@ export default (opts: BaseCommandOptions) => {
     .action(async (options: { template: string; directory: string }) => {
       const spinner = Spinner();
       const template = options.template || 'typescript-connect-rpc-fastify';
+      // Validate template name to prevent path traversal
+      if (!/^[\w-]+$/.test(template)) {
+        program.error(
+          `Invalid template name '${template}'. Template names can only contain letters, numbers, hyphens, and underscores.`,
+        );
+      }
       const outputDir = resolve(process.cwd(), options.directory || '.');
 
       spinner.start(`Checking if template '${template}' exists...`);

From 55b33c14251d0a68233f87438628864ada32cc1d Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 11:28:30 +0200
Subject: [PATCH 06/10] chore: improve error handling

---
 .../grpc-service/commands/list-templates.ts   | 43 +++++++++++--------
 1 file changed, 25 insertions(+), 18 deletions(-)

diff --git a/cli/src/commands/grpc-service/commands/list-templates.ts b/cli/src/commands/grpc-service/commands/list-templates.ts
index 199ae51b6d..f67dba1e4d 100644
--- a/cli/src/commands/grpc-service/commands/list-templates.ts
+++ b/cli/src/commands/grpc-service/commands/list-templates.ts
@@ -22,24 +22,31 @@ export async function fetchAvailableTemplates(): Promise<string[]> {
 }
 
 export default (_opts: BaseCommandOptions) => {
-  const command = new Command('list-templates');
-  command.description('List all available gRPC service templates');
-  command.action(async () => {
-    const spinner = Spinner('Fetching available templates...').start();
-    const templates = await fetchAvailableTemplates();
-    spinner.stop();
-    if (templates.length > 0) {
-      console.log(pc.yellow('Available templates:'));
-      for (const t of templates) {
-        console.log(`  - ${t}`);
+  const command = new Command();
+  command
+    .name('list-templates')
+    .description('List all available gRPC service templates')
+    .action(async () => {
+      const spinner = Spinner('Fetching available templates...').start();
+      try {
+        const templates = await fetchAvailableTemplates();
+        spinner.stop();
+        if (templates.length > 0) {
+          console.log(pc.yellow('Available templates:'));
+          for (const t of templates) {
+            console.log(`  - ${t}`);
+          }
+          console.log('');
+          console.log(pc.yellow('To use a template, run:'));
+          console.log(`  wgc grpc-service init --template ${templates[0]} --directory ./output`);
+          console.log('');
+        } else {
+          console.log(pc.red('No templates found in wundergraph/cosmo-templates under grpc-service.'));
+        }
+      } catch (error) {
+        spinner.fail('Failed to fetch templates');
+        console.error(error);
       }
-      console.log('');
-      console.log(pc.yellow('To use a template, run:'));
-      console.log(`  wgc grpc-service init --template ${templates[0]} --directory ./output`);
-      console.log('');
-    } else {
-      console.log(pc.red('No templates found in wundergraph/cosmo-templates under grpc-service.'));
-    }
-  });
+    });
   return command;
 };

From e9db1206f96f6685300f77c02f74d5bf57e33543 Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 11:31:44 +0200
Subject: [PATCH 07/10] chore: update test

---
 cli/test/grpc-service.test.ts | 39 +++++++++++++++++++++--------------
 1 file changed, 23 insertions(+), 16 deletions(-)

diff --git a/cli/test/grpc-service.test.ts b/cli/test/grpc-service.test.ts
index 07f75a978b..373d557fff 100644
--- a/cli/test/grpc-service.test.ts
+++ b/cli/test/grpc-service.test.ts
@@ -50,7 +50,7 @@ describe('gRPC Generate Command', () => {
     expect(existsSync(join(tmpDir, 'service.proto.lock.json'))).toBe(true);
   });
 
-  test('should fail when output path does not exist', async () => {
+  test('should create output directory if it does not exist', async () => {
     const client: Client = {
       platform: createPromiseClient(PlatformService, mockPlatformTransport()),
     };
@@ -65,21 +65,28 @@ describe('gRPC Generate Command', () => {
       rmSync(nonExistentDir, { recursive: true, force: true });
     }
 
-    await expect(
-      program.parseAsync(
-        [
-          'generate',
-          'testservice',
-          '-i',
-          'test/fixtures/full-schema.graphql',
-          '-o',
-          nonExistentDir,
-        ],
-        {
-          from: 'user',
-        }
-      )
-    ).rejects.toThrow();
+    await program.parseAsync(
+      [
+        'generate',
+        'testservice',
+        '-i',
+        'test/fixtures/full-schema.graphql',
+        '-o',
+        nonExistentDir,
+      ],
+      {
+        from: 'user',
+      }
+    );
+
+    // Verify the output directory and files exist
+    expect(existsSync(nonExistentDir)).toBe(true);
+    expect(existsSync(join(nonExistentDir, 'mapping.json'))).toBe(true);
+    expect(existsSync(join(nonExistentDir, 'service.proto'))).toBe(true);
+    expect(existsSync(join(nonExistentDir, 'service.proto.lock.json'))).toBe(true);
+
+    // Cleanup
+    rmSync(nonExistentDir, { recursive: true, force: true });
   });
 
   test('should fail when input file does not exist', async (testContext) => {

From df73f349510ac31851b248f60a6f3620397857c7 Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 11:48:00 +0200
Subject: [PATCH 08/10] Update cli/src/commands/grpc-service/commands/init.ts

Co-authored-by: endigma <endigma@mailcat.ca>
---
 cli/src/commands/grpc-service/commands/init.ts | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
index 29b710a5be..57d5e6da71 100644
--- a/cli/src/commands/grpc-service/commands/init.ts
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -104,12 +104,8 @@ async function downloadAndExtractTemplate(template: string, outputDir: string, s
     throw error;
   } finally {
     // Cleanup
-    try {
-      await fs.remove(tempTarPath);
-    } catch {}
-    try {
-      await fs.remove(tempExtractDir);
-    } catch {}
+    await fs.remove(tempTarPath).catch();
+    await fs.remove(tempExtractDir).catch();
   }
 }
 

From cfe06678d93d8ba6dc1f8ad6883edc40df582e47 Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 11:48:16 +0200
Subject: [PATCH 09/10] Update cli/src/commands/grpc-service/commands/init.ts

Co-authored-by: endigma <endigma@mailcat.ca>
---
 cli/src/commands/grpc-service/commands/init.ts | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
index 57d5e6da71..0004e89f83 100644
--- a/cli/src/commands/grpc-service/commands/init.ts
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -94,11 +94,9 @@ async function downloadAndExtractTemplate(template: string, outputDir: string, s
     }
 
     // Copy extracted files to outputDir
-    try {
-      await fs.copy(tempExtractDir, outputDir, { overwrite: true });
-    } catch (err: any) {
-      throw new Error(`Failed to copy extracted files to output directory: ${err.message || err}`);
-    }
+   await fs.copy(tempExtractDir, outputDir, { overwrite: true }).catch(err => {
+       throw new Error(`Failed to copy extracted files to output directory: ${err.message || err}`);
+   }
   } catch (error: any) {
     spinner.fail(pc.red('Error during template extraction.'));
     throw error;

From 52066b00fd1271720052c129430d19a1f8ae1e7c Mon Sep 17 00:00:00 2001
From: Jens Neuse <jens.neuse@gmx.de>
Date: Thu, 10 Jul 2025 11:58:26 +0200
Subject: [PATCH 10/10] chore: fix ts

---
 cli/src/commands/grpc-service/commands/init.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/cli/src/commands/grpc-service/commands/init.ts b/cli/src/commands/grpc-service/commands/init.ts
index 0004e89f83..fb3967448e 100644
--- a/cli/src/commands/grpc-service/commands/init.ts
+++ b/cli/src/commands/grpc-service/commands/init.ts
@@ -94,9 +94,9 @@ async function downloadAndExtractTemplate(template: string, outputDir: string, s
     }
 
     // Copy extracted files to outputDir
-   await fs.copy(tempExtractDir, outputDir, { overwrite: true }).catch(err => {
-       throw new Error(`Failed to copy extracted files to output directory: ${err.message || err}`);
-   }
+    await fs.copy(tempExtractDir, outputDir, { overwrite: true }).catch((err: any) => {
+      throw new Error(`Failed to copy extracted files to output directory: ${err.message || err}`);
+    });
   } catch (error: any) {
     spinner.fail(pc.red('Error during template extraction.'));
     throw error;