@mandujs/cli 0.15.1 → 0.15.3

package/src/commands/init.ts

@@ -19,6 +19,23 @@ export interface InitOptions {
   minimal?: boolean;
 }
 
+const ALLOWED_TEMPLATES = ["default", "realtime-chat"] as const;
+const DEFAULT_MAX_BACKUP_SUFFIX_ATTEMPTS = 50;
+const BACKUP_SUFFIX_START_INDEX = 1;
+type AllowedTemplate = (typeof ALLOWED_TEMPLATES)[number];
+
+export function isAllowedTemplate(template: string): template is AllowedTemplate {
+  return (ALLOWED_TEMPLATES as readonly string[]).includes(template);
+}
+
+function resolveTemplateName(template: string): AllowedTemplate | null {
+  const normalized = path.posix.normalize(template.replace(/\\/g, "/")).trim();
+  if (!normalized || normalized.includes("..") || normalized.startsWith("/")) {
+    return null;
+  }
+  return isAllowedTemplate(normalized) ? normalized : null;
+}
+
 // Files to skip based on CSS/UI options
 const CSS_FILES = [
   "tailwind.config.ts",
@@ -183,9 +200,16 @@ async function resolvePackageVersions(): Promise<{ coreVersion: string; cliVersi
 
 export async function init(options: InitOptions = {}): Promise<boolean> {
   const projectName = options.name || "my-mandu-app";
-  const template = options.template || "default";
+  const requestedTemplate = options.template || "default";
+  const template = resolveTemplateName(requestedTemplate);
   const targetDir = path.resolve(process.cwd(), projectName);
 
+  if (!template) {
+    printCLIError(CLI_ERROR_CODES.INIT_TEMPLATE_NOT_FOUND, { template: requestedTemplate });
+    console.error(`   사용 가능한 템플릿: ${ALLOWED_TEMPLATES.join(", ")}`);
+    return false;
+  }
+
   // Handle minimal flag (shortcut for --css none --ui none)
   const css: CSSFramework = options.minimal ? "none" : (options.css || "tailwind");
   const ui: UILibrary = options.minimal ? "none" : (options.ui || "shadcn");
@@ -218,7 +242,7 @@ export async function init(options: InitOptions = {}): Promise<boolean> {
     await fs.access(templateDir);
   } catch {
     printCLIError(CLI_ERROR_CODES.INIT_TEMPLATE_NOT_FOUND, { template });
-    console.error(`   사용 가능한 템플릿: default`);
+    console.error(`   사용 가능한 템플릿: ${ALLOWED_TEMPLATES.join(", ")}`);
     return false;
   }
 
@@ -272,6 +296,9 @@ export async function init(options: InitOptions = {}): Promise<boolean> {
   console.log(`   cd ${projectName}`);
   console.log(`   bun install`);
   console.log(`   bun run dev`);
+  console.log(`\n💡 CLI 실행 참고 (환경별):`);
+  console.log(`   bun run dev        # 권장 (로컬 스크립트)`);
+  console.log(`   bunx mandu dev     # PATH에 mandu가 없을 때 대안`);
   console.log(`\n📂 파일 구조:`);
   console.log(`   app/layout.tsx    → 루트 레이아웃`);
   console.log(`   app/page.tsx      → http://localhost:3000/`);
@@ -461,7 +488,18 @@ function logMcpConfigStatus(
  * - 파일 없으면 새로 생성
  * - 파일 있으면 mandu 서버만 추가/업데이트 (다른 설정 유지)
  */
-async function setupMcpConfig(targetDir: string): Promise<McpConfigResult> {
+interface SetupMcpConfigOptions {
+  maxBackupSuffixAttempts?: number;
+}
+
+export const __test__ = {
+  setupMcpConfig,
+};
+
+async function setupMcpConfig(
+  targetDir: string,
+  options: SetupMcpConfigOptions = {}
+): Promise<McpConfigResult> {
   const mcpPath = path.join(targetDir, ".mcp.json");
   const claudePath = path.join(targetDir, ".claude.json");
 
@@ -490,8 +528,15 @@ async function setupMcpConfig(targetDir: string): Promise<McpConfigResult> {
       if (!(await fileExists(base))) {
         return base;
       }
-      for (let i = 1; i <= 50; i++) {
-        const candidate = `${basePath}.bak.${i}`;
+      const maxBackupSuffixAttempts =
+        options.maxBackupSuffixAttempts ?? DEFAULT_MAX_BACKUP_SUFFIX_ATTEMPTS;
+
+      for (
+        let suffixIndex = BACKUP_SUFFIX_START_INDEX;
+        suffixIndex <= maxBackupSuffixAttempts;
+        suffixIndex++
+      ) {
+        const candidate = `${basePath}.bak.${suffixIndex}`;
         if (!(await fileExists(candidate))) {
           return candidate;
         }