@mandujs/cli 0.15.1 → 0.15.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mandujs/cli",
-  "version": "0.15.1",
+  "version": "0.15.3",
   "description": "Agent-Native Fullstack Framework - 에이전트가 코딩해도 아키텍처가 무너지지 않는 개발 OS",
   "type": "module",
   "main": "./src/main.ts",
@@ -32,7 +32,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@mandujs/core": "^0.13.0",
+    "@mandujs/core": "^0.13.2",
     "cfonts": "^3.3.0"
   },
   "engines": {

package/src/commands/check.ts

@@ -15,6 +15,8 @@ import {
   runGuardCheck,
   buildGuardReport,
   printReportSummary,
+  runAutoCorrect,
+  isAutoCorrectableViolation,
   guardConfig,
   formatConfigGuardResult,
   calculateHealthScore,
@@ -25,6 +27,51 @@ import path from "path";
 import { resolveFromCwd, isDirectory, pathExists } from "../util/fs";
 import { resolveOutputFormat } from "../util/output";
 
+interface LegacyCheckDeps {
+  runGuardCheck: typeof runGuardCheck;
+  runAutoCorrect: typeof runAutoCorrect;
+  isAutoCorrectableViolation: typeof isAutoCorrectableViolation;
+}
+
+export async function runLegacyGuardWithAutoHeal(
+  manifest: Parameters<typeof runGuardCheck>[0],
+  rootDir: string,
+  deps: LegacyCheckDeps = { runGuardCheck, runAutoCorrect, isAutoCorrectableViolation }
+): Promise<{
+  passed: boolean;
+  violations: number;
+  autoHealed: boolean;
+  nextAction?: string;
+  checkResult: Awaited<ReturnType<typeof runGuardCheck>>;
+}> {
+  let checkResult = await deps.runGuardCheck(manifest, rootDir);
+  let autoHealed = false;
+
+  if (!checkResult.passed) {
+    const hasAutoCorrectableViolation = checkResult.violations.some(
+      deps.isAutoCorrectableViolation
+    );
+
+    if (hasAutoCorrectableViolation) {
+      const autoCorrectResult = await deps.runAutoCorrect(
+        checkResult.violations,
+        manifest,
+        rootDir
+      );
+      autoHealed = autoCorrectResult.fixed;
+      checkResult = await deps.runGuardCheck(manifest, rootDir);
+    }
+  }
+
+  return {
+    passed: checkResult.passed,
+    violations: checkResult.violations.length,
+    autoHealed,
+    nextAction: checkResult.passed ? undefined : "mandu guard legacy",
+    checkResult,
+  };
+}
+
 export async function check(): Promise<boolean> {
   const rootDir = resolveFromCwd(".");
   const config = await validateAndReport(rootDir);
@@ -175,7 +222,14 @@ export async function check(): Promise<boolean> {
   }
 
   // 3) Legacy Guard 검사 (spec 파일이 있을 때만)
-  let legacySummary: { enabled: boolean; passed: boolean; violations: number; errors?: string[] } = {
+  let legacySummary: {
+    enabled: boolean;
+    passed: boolean;
+    violations: number;
+    errors?: string[];
+    autoHealed?: boolean;
+    nextAction?: string;
+  } = {
     enabled: false,
     passed: true,
     violations: 0,
@@ -195,17 +249,27 @@ export async function check(): Promise<boolean> {
         manifestResult.errors?.forEach((e) => console.error(`  - ${e}`));
       }
     } else {
-      const checkResult = await runGuardCheck(manifestResult.data, rootDir);
-      legacySummary.passed = checkResult.passed;
-      legacySummary.violations = checkResult.violations.length;
-      if (strictWarnings && checkResult.violations.length > 0) {
+      const legacyResult = await runLegacyGuardWithAutoHeal(manifestResult.data, rootDir);
+      legacySummary.passed = legacyResult.passed;
+      legacySummary.violations = legacyResult.violations;
+      legacySummary.autoHealed = legacyResult.autoHealed;
+      legacySummary.nextAction = legacyResult.nextAction;
+
+      if (format === "console" && legacyResult.autoHealed) {
+        log("✅ Legacy spec drift 자동 복구 완료");
+      }
+      if (format === "console" && legacyResult.nextAction) {
+        log("💡 Legacy guard 위반이 남아 있습니다. `mandu guard legacy`로 상세 점검/복구를 진행하세요.");
+      }
+
+      if (strictWarnings && legacyResult.violations > 0) {
         success = false;
       } else {
-        success = success && checkResult.passed;
+        success = success && legacyResult.passed;
       }
 
       if (format === "console") {
-        const legacyReport = buildGuardReport(checkResult);
+        const legacyReport = buildGuardReport(legacyResult.checkResult);
         if (quiet) {
           print(`📊 Legacy Guard: ${legacySummary.violations}개 위반`);
         } else {

package/src/commands/contract.ts

@@ -3,63 +3,63 @@
  * Contract 생성 및 검증 명령어
  */
 
-import {
-  runContractGuardCheck,
-  generateContractTemplate,
-  buildContractRegistry,
-  writeContractRegistry,
-  readContractRegistry,
-  diffContractRegistry,
-  validateAndReport,
-} from "@mandujs/core";
-import path from "path";
-import fs from "fs/promises";
-import { resolveManifest } from "../util/manifest";
+import {
+  runContractGuardCheck,
+  generateContractTemplate,
+  buildContractRegistry,
+  writeContractRegistry,
+  readContractRegistry,
+  diffContractRegistry,
+  validateAndReport,
+} from "@mandujs/core";
+import path from "path";
+import fs from "fs/promises";
+import { resolveManifest } from "../util/manifest";
 
 interface ContractCreateOptions {
   routeId: string;
 }
 
-interface ContractValidateOptions {
-  verbose?: boolean;
-}
-
-interface ContractBuildOptions {
-  output?: string;
-}
-
-interface ContractDiffOptions {
-  from?: string;
-  to?: string;
-  output?: string;
-  json?: boolean;
-}
-
-async function loadRoutesManifest(rootDir: string) {
-  const config = await validateAndReport(rootDir);
-  if (!config) {
-    throw new Error("Invalid mandu.config");
-  }
-  const resolved = await resolveManifest(rootDir, { fsRoutes: config.fsRoutes });
-  return resolved.manifest;
-}
+interface ContractValidateOptions {
+  verbose?: boolean;
+}
+
+interface ContractBuildOptions {
+  output?: string;
+}
+
+interface ContractDiffOptions {
+  from?: string;
+  to?: string;
+  output?: string;
+  json?: boolean;
+}
+
+async function loadRoutesManifest(rootDir: string) {
+  const config = await validateAndReport(rootDir);
+  if (!config) {
+    throw new Error("Invalid mandu.config");
+  }
+  const resolved = await resolveManifest(rootDir, { fsRoutes: config.fsRoutes });
+  return resolved.manifest;
+}
 
 /**
  * Create a new contract file for a route
  */
-export async function contractCreate(options: ContractCreateOptions): Promise<boolean> {
-  const rootDir = process.cwd();
-
-  console.log(`\n📜 Creating contract for route: ${options.routeId}\n`);
-
-  // Load manifest
-  let manifest;
-  try {
-    manifest = await loadRoutesManifest(rootDir);
-  } catch (error) {
-    console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
-    return false;
-  }
+export async function contractCreate(options: ContractCreateOptions): Promise<boolean> {
+  const rootDir = process.cwd();
+
+  console.log(`\n📜 Creating contract for route: ${options.routeId}\n`);
+
+  // Load manifest
+  let manifest;
+  try {
+    manifest = await loadRoutesManifest(rootDir);
+  } catch (error) {
+    console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
+    return false;
+  }
 
   // Find the route
   const route = manifest.routes.find((r) => r.id === options.routeId);
@@ -113,22 +113,22 @@ export async function contractCreate(options: ContractCreateOptions): Promise<bo
 /**
  * Validate all contracts against their slot implementations
  */
-export async function contractValidate(options: ContractValidateOptions = {}): Promise<boolean> {
-  const rootDir = process.cwd();
-
-  console.log(`\n🔍 Validating contracts...\n`);
-
-  // Load manifest
-  let manifest;
-  try {
-    manifest = await loadRoutesManifest(rootDir);
-  } catch (error) {
-    console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
-    return false;
-  }
-
-  // Run contract guard check
-  const violations = await runContractGuardCheck(manifest, rootDir);
+export async function contractValidate(options: ContractValidateOptions = {}): Promise<boolean> {
+  const rootDir = process.cwd();
+
+  console.log(`\n🔍 Validating contracts...\n`);
+
+  // Load manifest
+  let manifest;
+  try {
+    manifest = await loadRoutesManifest(rootDir);
+  } catch (error) {
+    console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
+    return false;
+  }
+
+  // Run contract guard check
+  const violations = await runContractGuardCheck(manifest, rootDir);
 
   if (violations.length === 0) {
     console.log(`✅ All contracts are valid!\n`);
@@ -175,112 +175,112 @@ export async function contractValidate(options: ContractValidateOptions = {}): P
     console.log(`💡 Use --verbose for fix suggestions\n`);
   }
 
-  return false;
-}
-
-/**
- * Build contract registry (.mandu/contracts.json)
- */
-export async function contractBuild(options: ContractBuildOptions = {}): Promise<boolean> {
-  const rootDir = process.cwd();
-  const outputPath = options.output || path.join(rootDir, ".mandu", "contracts.json");
-
-  console.log(`\n📦 Building contract registry...\n`);
-
-  let manifest;
-  try {
-    manifest = await loadRoutesManifest(rootDir);
-  } catch (error) {
-    console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
-    return false;
-  }
-  const { registry, warnings } = await buildContractRegistry(manifest, rootDir);
-
-  if (warnings.length > 0) {
-    console.log(`⚠️  ${warnings.length} warning(s):`);
-    for (const warning of warnings) {
-      console.log(`   - ${warning}`);
-    }
-    console.log();
-  }
-
-  await fs.mkdir(path.dirname(outputPath), { recursive: true });
-  await writeContractRegistry(outputPath, registry);
-
-  console.log(`✅ Registry generated: ${path.relative(rootDir, outputPath)}`);
-  console.log(`📊 Contracts: ${registry.contracts.length}`);
-
-  return true;
-}
-
-/**
- * Diff current contracts against a registry
- */
-export async function contractDiff(options: ContractDiffOptions = {}): Promise<boolean> {
-  const rootDir = process.cwd();
-  const fromPath = options.from || path.join(rootDir, ".mandu", "contracts.json");
-
-  console.log(`\n🔍 Diffing contracts...\n`);
-
-  const fromRegistry = await readContractRegistry(fromPath);
-  if (!fromRegistry) {
-    console.error(`❌ Registry not found: ${path.relative(rootDir, fromPath)}`);
-    console.log(`💡 Run \`mandu contract build\` first.`);
-    return false;
-  }
-
-  let toRegistry = options.to ? await readContractRegistry(options.to) : null;
-
-  if (!toRegistry) {
-    let manifest;
-    try {
-      manifest = await loadRoutesManifest(rootDir);
-    } catch (error) {
-      console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
-      return false;
-    }
-    const { registry } = await buildContractRegistry(manifest, rootDir);
-    toRegistry = registry;
-  }
-
-  const diff = diffContractRegistry(fromRegistry, toRegistry);
-
-  if (options.output) {
-    await fs.mkdir(path.dirname(options.output), { recursive: true });
-    await Bun.write(options.output, JSON.stringify(diff, null, 2));
-    console.log(`✅ Diff saved: ${path.relative(rootDir, options.output)}`);
-  }
-
-  if (options.json) {
-    console.log(JSON.stringify(diff, null, 2));
-    return diff.summary.major === 0;
-  }
-
-  console.log(`📊 Summary: major ${diff.summary.major}, minor ${diff.summary.minor}, patch ${diff.summary.patch}`);
-
-  if (diff.added.length > 0) {
-    console.log(`\n🟢 Added (${diff.added.length})`);
-    for (const entry of diff.added) {
-      console.log(`  - ${entry.id} (${entry.routeId})`);
-    }
-  }
-
-  if (diff.removed.length > 0) {
-    console.log(`\n🔴 Removed (${diff.removed.length})`);
-    for (const entry of diff.removed) {
-      console.log(`  - ${entry.id} (${entry.routeId})`);
-    }
-  }
-
-  if (diff.changed.length > 0) {
-    console.log(`\n🟡 Changed (${diff.changed.length})`);
-    for (const change of diff.changed) {
-      console.log(`  - ${change.id} (${change.routeId}) [${change.severity}]`);
-      for (const detail of change.changes) {
-        console.log(`     • ${detail}`);
-      }
-    }
-  }
-
-  return diff.summary.major === 0;
-}
+  return false;
+}
+
+/**
+ * Build contract registry (.mandu/contracts.json)
+ */
+export async function contractBuild(options: ContractBuildOptions = {}): Promise<boolean> {
+  const rootDir = process.cwd();
+  const outputPath = options.output || path.join(rootDir, ".mandu", "contracts.json");
+
+  console.log(`\n📦 Building contract registry...\n`);
+
+  let manifest;
+  try {
+    manifest = await loadRoutesManifest(rootDir);
+  } catch (error) {
+    console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
+    return false;
+  }
+  const { registry, warnings } = await buildContractRegistry(manifest, rootDir);
+
+  if (warnings.length > 0) {
+    console.log(`⚠️  ${warnings.length} warning(s):`);
+    for (const warning of warnings) {
+      console.log(`   - ${warning}`);
+    }
+    console.log();
+  }
+
+  await fs.mkdir(path.dirname(outputPath), { recursive: true });
+  await writeContractRegistry(outputPath, registry);
+
+  console.log(`✅ Registry generated: ${path.relative(rootDir, outputPath)}`);
+  console.log(`📊 Contracts: ${registry.contracts.length}`);
+
+  return true;
+}
+
+/**
+ * Diff current contracts against a registry
+ */
+export async function contractDiff(options: ContractDiffOptions = {}): Promise<boolean> {
+  const rootDir = process.cwd();
+  const fromPath = options.from || path.join(rootDir, ".mandu", "contracts.json");
+
+  console.log(`\n🔍 Diffing contracts...\n`);
+
+  const fromRegistry = await readContractRegistry(fromPath);
+  if (!fromRegistry) {
+    console.error(`❌ Registry not found: ${path.relative(rootDir, fromPath)}`);
+    console.log(`💡 Run \`mandu contract build\` first.`);
+    return false;
+  }
+
+  let toRegistry = options.to ? await readContractRegistry(options.to) : null;
+
+  if (!toRegistry) {
+    let manifest;
+    try {
+      manifest = await loadRoutesManifest(rootDir);
+    } catch (error) {
+      console.error("❌ Failed to load manifest:", error instanceof Error ? error.message : error);
+      return false;
+    }
+    const { registry } = await buildContractRegistry(manifest, rootDir);
+    toRegistry = registry;
+  }
+
+  const diff = diffContractRegistry(fromRegistry, toRegistry);
+
+  if (options.output) {
+    await fs.mkdir(path.dirname(options.output), { recursive: true });
+    await Bun.write(options.output, JSON.stringify(diff, null, 2));
+    console.log(`✅ Diff saved: ${path.relative(rootDir, options.output)}`);
+  }
+
+  if (options.json) {
+    console.log(JSON.stringify(diff, null, 2));
+    return diff.summary.major === 0;
+  }
+
+  console.log(`📊 Summary: major ${diff.summary.major}, minor ${diff.summary.minor}, patch ${diff.summary.patch}`);
+
+  if (diff.added.length > 0) {
+    console.log(`\n🟢 Added (${diff.added.length})`);
+    for (const entry of diff.added) {
+      console.log(`  - ${entry.id} (${entry.routeId})`);
+    }
+  }
+
+  if (diff.removed.length > 0) {
+    console.log(`\n🔴 Removed (${diff.removed.length})`);
+    for (const entry of diff.removed) {
+      console.log(`  - ${entry.id} (${entry.routeId})`);
+    }
+  }
+
+  if (diff.changed.length > 0) {
+    console.log(`\n🟡 Changed (${diff.changed.length})`);
+    for (const change of diff.changed) {
+      console.log(`  - ${change.id} (${change.routeId}) [${change.severity}]`);
+      for (const detail of change.changes) {
+        console.log(`     • ${detail}`);
+      }
+    }
+  }
+
+  return diff.summary.major === 0;
+}

package/src/commands/dev.ts

@@ -15,12 +15,6 @@ import {
   validateAndReport,
   isTailwindProject,
   startCSSWatch,
-  readLockfile,
-  readMcpConfig,
-  validateWithPolicy,
-  detectMode,
-  formatPolicyAction,
-  formatValidationResult,
   type RoutesManifest,
   type GuardConfig,
   type Violation,
@@ -32,6 +26,11 @@ import { CLI_ERROR_CODES, printCLIError } from "../errors";
 import { importFresh } from "../util/bun";
 import { resolveManifest } from "../util/manifest";
 import { resolveAvailablePort } from "../util/port";
+import {
+  validateRuntimeLockfile,
+  handleBlockedLockfile,
+  printRuntimeLockfileStatus,
+} from "../util/lockfile";
 import { registerManifestHandlers } from "../util/handlers";
 import path from "path";
 
@@ -49,35 +48,8 @@ export async function dev(options: DevOptions = {}): Promise<void> {
   }
 
   // Lockfile 검증 (설정 무결성)
-  const lockfile = await readLockfile(rootDir);
-  let mcpConfig: Record<string, unknown> | null = null;
-  try {
-    mcpConfig = await readMcpConfig(rootDir);
-  } catch (error) {
-    console.warn(
-      `⚠️  MCP 설정 로드 실패: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-  const { result: lockResult, action, bypassed } = validateWithPolicy(
-    config,
-    lockfile,
-    detectMode(),
-    mcpConfig
-  );
-
-  if (action === "block") {
-    console.error("🛑 서버 시작 차단: Lockfile 불일치");
-    console.error("   설정이 변경되었습니다. 의도한 변경이라면:");
-    console.error("   $ mandu lock");
-    console.error("");
-    console.error("   변경 사항 확인:");
-    console.error("   $ mandu lock --diff");
-    if (lockResult) {
-      console.error("");
-      console.error(formatValidationResult(lockResult));
-    }
-    process.exit(1);
-  }
+  const { lockfile, lockResult, action, bypassed } = await validateRuntimeLockfile(config, rootDir);
+  handleBlockedLockfile(action, lockResult);
 
   const serverConfig = config.server ?? {};
   const devConfig = config.dev ?? {};
@@ -87,13 +59,7 @@ export async function dev(options: DevOptions = {}): Promise<void> {
   console.log(`🥟 Mandu Dev Server`);
 
   // Lockfile 상태 출력
-  if (action === "warn") {
-    console.log(`⚠️  ${formatPolicyAction(action, bypassed)}`);
-  } else if (lockfile && lockResult?.valid) {
-    console.log(`🔒 설정 무결성 확인됨 (${lockResult.currentHash?.slice(0, 8)})`);
-  } else if (!lockfile) {
-    console.log(`💡 Lockfile 없음 - 'mandu lock'으로 생성 권장`);
-  }
+  printRuntimeLockfileStatus(action, bypassed, lockfile, lockResult);
 
   // .env 파일 로드
   const envResult = await loadEnv({
@@ -328,6 +294,7 @@ export async function dev(options: DevOptions = {}): Promise<void> {
     bundleManifest: devBundler?.initialBuild.manifest,
     cors: serverConfig.cors,
     streaming: serverConfig.streaming,
+    rateLimit: serverConfig.rateLimit,
     // Tailwind 감지 시에만 CSS 링크 주입
     cssPath: hasTailwind ? cssWatcher?.serverPath : false,
   });