@mandujs/mcp 0.9.19 → 0.9.21

package/src/resources/skills/mandu-deployment/rules/deploy-cicd-github.md

@@ -0,0 +1,219 @@
+---
+title: GitHub Actions CI/CD
+impact: HIGH
+impactDescription: Automates testing and deployment pipeline
+tags: deployment, cicd, github, automation
+---
+
+## GitHub Actions CI/CD
+
+**Impact: HIGH (Automates testing and deployment pipeline)**
+
+GitHub Actions를 사용하여 테스트, 빌드, 배포를 자동화하세요.
+
+**.github/workflows/ci.yml:**
+
+```yaml
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Type check
+        run: bun run typecheck
+
+      - name: Lint
+        run: bun run lint
+
+      - name: Test
+        run: bun test --coverage
+
+      - name: Upload coverage
+        uses: codecov/codecov-action@v3
+        with:
+          files: ./coverage/lcov.info
+
+  build:
+    runs-on: ubuntu-latest
+    needs: test
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Build
+        run: bun run build
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+```
+
+## 배포 워크플로우
+
+```yaml
+# .github/workflows/deploy.yml
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy-render:
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+
+    steps:
+      - name: Deploy to Render
+        uses: johnbeynon/render-deploy-action@v0.0.8
+        with:
+          service-id: ${{ secrets.RENDER_SERVICE_ID }}
+          api-key: ${{ secrets.RENDER_API_KEY }}
+
+  deploy-fly:
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Fly
+        uses: superfly/flyctl-actions/setup-flyctl@master
+
+      - name: Deploy to Fly.io
+        run: flyctl deploy --remote-only
+        env:
+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
+```
+
+## Docker 이미지 빌드 & 푸시
+
+```yaml
+# .github/workflows/docker.yml
+name: Docker
+
+on:
+  push:
+    branches: [main]
+    tags: ['v*']
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=sha,prefix=
+
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+```
+
+## E2E 테스트 (Playwright)
+
+```yaml
+  e2e:
+    runs-on: ubuntu-latest
+    needs: build
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Install Playwright browsers
+        run: bunx playwright install --with-deps
+
+      - name: Run E2E tests
+        run: bunx playwright test
+
+      - name: Upload test results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report
+          path: playwright-report/
+```
+
+## 환경별 배포
+
+```yaml
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: ${{ github.ref == 'refs/heads/main' && 'production' || 'staging' }}
+
+    steps:
+      - name: Deploy
+        run: |
+          echo "Deploying to ${{ github.ref == 'refs/heads/main' && 'production' || 'staging' }}"
+        env:
+          API_URL: ${{ secrets.API_URL }}
+```
+
+## 시크릿 설정
+
+```bash
+# GitHub CLI로 시크릿 설정
+gh secret set RENDER_API_KEY --body "rnd_xxx"
+gh secret set RENDER_SERVICE_ID --body "srv_xxx"
+gh secret set FLY_API_TOKEN --body "xxx"
+gh secret set DATABASE_URL --body "postgresql://..."
+```
+
+Reference: [GitHub Actions Documentation](https://docs.github.com/en/actions)

package/src/resources/skills/mandu-deployment/rules/deploy-docker-bun.md

@@ -0,0 +1,150 @@
+---
+title: Docker with Bun
+impact: HIGH
+impactDescription: Ensures consistent deployment environment
+tags: deployment, docker, bun, container
+---
+
+## Docker with Bun
+
+**Impact: HIGH (Ensures consistent deployment environment)**
+
+Docker를 사용하여 Bun 기반 Mandu 앱을 컨테이너화하세요.
+
+**Dockerfile (Production):**
+
+```dockerfile
+# Build stage
+FROM oven/bun:1.0 as builder
+
+WORKDIR /app
+
+# 의존성 설치 (캐시 활용)
+COPY package.json bun.lockb ./
+RUN bun install --frozen-lockfile
+
+# 소스 복사 및 빌드
+COPY . .
+RUN bun run build
+
+# 프로덕션 의존성만 설치
+RUN bun install --frozen-lockfile --production
+
+# Production stage
+FROM oven/bun:1.0-slim
+
+WORKDIR /app
+
+# 빌드 결과물만 복사
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./
+
+# 보안: non-root 사용자
+USER bun
+
+EXPOSE 3000
+
+# 헬스체크
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD curl -f http://localhost:3000/health || exit 1
+
+CMD ["bun", "run", "start"]
+```
+
+## .dockerignore
+
+```
+node_modules
+dist
+.git
+.gitignore
+*.md
+*.log
+.env*
+!.env.example
+tests
+coverage
+.github
+```
+
+## 멀티스테이지 빌드 최적화
+
+```dockerfile
+# Alpine 기반 (더 작은 이미지)
+FROM oven/bun:1.0-alpine as builder
+# ... 빌드 과정
+
+FROM oven/bun:1.0-alpine
+# ... 프로덕션 설정
+
+# distroless 기반 (최소 공격면)
+FROM gcr.io/distroless/cc
+COPY --from=builder /app/dist /app/dist
+COPY --from=builder /usr/local/bin/bun /usr/local/bin/bun
+CMD ["/usr/local/bin/bun", "run", "/app/dist/server.js"]
+```
+
+## 빌드 및 실행
+
+```bash
+# 이미지 빌드
+docker build -t mandu-app:latest .
+
+# 빌드 캐시 활용
+docker build --cache-from mandu-app:latest -t mandu-app:latest .
+
+# 컨테이너 실행
+docker run -d \
+  --name mandu \
+  -p 3000:3000 \
+  -e DATABASE_URL="postgresql://..." \
+  -e SESSION_SECRET="..." \
+  mandu-app:latest
+
+# 로그 확인
+docker logs -f mandu
+
+# 컨테이너 접속
+docker exec -it mandu sh
+```
+
+## 개발용 Dockerfile
+
+```dockerfile
+# Dockerfile.dev
+FROM oven/bun:1.0
+
+WORKDIR /app
+
+# Hot reload를 위한 볼륨 마운트용
+COPY package.json bun.lockb ./
+RUN bun install
+
+EXPOSE 3000
+
+CMD ["bun", "run", "dev"]
+```
+
+```bash
+# 개발 모드 실행
+docker build -f Dockerfile.dev -t mandu-dev .
+docker run -v $(pwd):/app -p 3000:3000 mandu-dev
+```
+
+## 이미지 크기 최적화
+
+```bash
+# 이미지 크기 확인
+docker images mandu-app
+
+# 레이어 분석
+docker history mandu-app:latest
+
+# 최적화 목표
+# - oven/bun:1.0-slim: ~150MB base
+# - 프로덕션 deps만: 추가 50-100MB
+# - 총 목표: < 300MB
+```
+
+Reference: [Bun Docker Images](https://hub.docker.com/r/oven/bun)

package/src/resources/skills/mandu-deployment/rules/deploy-docker-compose.md

@@ -0,0 +1,223 @@
+---
+title: Docker Compose Setup
+impact: MEDIUM
+impactDescription: Orchestrates multi-container development and deployment
+tags: deployment, docker, compose, orchestration
+---
+
+## Docker Compose Setup
+
+**Impact: MEDIUM (Orchestrates multi-container development and deployment)**
+
+Docker Compose를 사용하여 Mandu 앱과 관련 서비스를 함께 관리하세요.
+
+**docker-compose.yml (Production):**
+
+```yaml
+version: "3.8"
+
+services:
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    ports:
+      - "3000:3000"
+    environment:
+      - NODE_ENV=production
+      - DATABASE_URL=postgresql://postgres:${POSTGRES_PASSWORD}@db:5432/mandu
+      - REDIS_URL=redis://cache:6379
+    depends_on:
+      db:
+        condition: service_healthy
+      cache:
+        condition: service_started
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+  db:
+    image: postgres:16-alpine
+    environment:
+      - POSTGRES_USER=postgres
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=mandu
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  cache:
+    image: redis:7-alpine
+    volumes:
+      - redis_data:/data
+    command: redis-server --appendonly yes
+
+volumes:
+  postgres_data:
+  redis_data:
+```
+
+## 개발용 Compose
+
+```yaml
+# docker-compose.dev.yml
+version: "3.8"
+
+services:
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile.dev
+    volumes:
+      - .:/app
+      - /app/node_modules  # node_modules 제외
+    ports:
+      - "3000:3000"
+    environment:
+      - NODE_ENV=development
+      - DATABASE_URL=postgresql://postgres:devpass@db:5432/mandu_dev
+    depends_on:
+      - db
+
+  db:
+    image: postgres:16-alpine
+    environment:
+      - POSTGRES_USER=postgres
+      - POSTGRES_PASSWORD=devpass
+      - POSTGRES_DB=mandu_dev
+    ports:
+      - "5432:5432"
+    volumes:
+      - dev_postgres:/var/lib/postgresql/data
+
+volumes:
+  dev_postgres:
+```
+
+## 환경별 오버라이드
+
+```yaml
+# docker-compose.override.yml (로컬 개발 자동 적용)
+version: "3.8"
+
+services:
+  app:
+    volumes:
+      - .:/app
+    environment:
+      - DEBUG=true
+```
+
+```yaml
+# docker-compose.staging.yml
+version: "3.8"
+
+services:
+  app:
+    image: ghcr.io/your-org/mandu-app:staging
+    environment:
+      - NODE_ENV=staging
+```
+
+## 명령어
+
+```bash
+# 개발 환경 시작
+docker compose -f docker-compose.dev.yml up -d
+
+# 프로덕션 빌드 및 시작
+docker compose up -d --build
+
+# 스케일링
+docker compose up -d --scale app=3
+
+# 로그 확인
+docker compose logs -f app
+
+# 서비스 상태
+docker compose ps
+
+# 정리
+docker compose down -v  # 볼륨 포함 삭제
+```
+
+## 네트워크 구성
+
+```yaml
+services:
+  app:
+    networks:
+      - frontend
+      - backend
+
+  db:
+    networks:
+      - backend
+
+  nginx:
+    networks:
+      - frontend
+    ports:
+      - "80:80"
+      - "443:443"
+
+networks:
+  frontend:
+  backend:
+    internal: true  # 외부 접근 차단
+```
+
+## 리버스 프록시 (Nginx)
+
+```yaml
+  nginx:
+    image: nginx:alpine
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./certs:/etc/nginx/certs:ro
+    depends_on:
+      - app
+```
+
+```nginx
+# nginx.conf
+upstream mandu_app {
+    server app:3000;
+}
+
+server {
+    listen 80;
+    server_name example.com;
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name example.com;
+
+    ssl_certificate /etc/nginx/certs/fullchain.pem;
+    ssl_certificate_key /etc/nginx/certs/privkey.pem;
+
+    location / {
+        proxy_pass http://mandu_app;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+    }
+}
+```
+
+Reference: [Docker Compose Documentation](https://docs.docker.com/compose/)