create-ait-cmp-app 0.0.0-stage → 1.0.0-alpha02

package/README.md

@@ -1,3 +1,32 @@
-# Temporary Holding Version
+# create-ait-cmp-app
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+앱인토스용 Compose Multiplatform 프로젝트를 대화형으로 만드는 CLI입니다. 앱인토스 전용 앱으로 시작하고 Android·iOS·독립 웹 타깃을 함께 선택할 수 있습니다.
+
+## 생성하는 프로젝트
+
+`shared-core`에 서비스 모델·API 클라이언트·저장 계약을, `shared-ui`에 공통 화면을 둡니다. `appsInTossApp`은 토스 연동을 담당합니다. 선택한 타깃의 호스트 디렉터리, Gradle Wrapper, Yarn 잠금 파일, 린트 설정, 기본 GitHub Actions CI를 포함합니다.
+
+생성 앱은 CLI와 같은 버전의 SDK를 Maven Central에서 가져옵니다.
+
+## 사용
+
+Node 24 이상과 Corepack이 필요합니다.
+
+```sh
+corepack enable
+yarn dlx create-ait-cmp-app@alpha my-app
+```
+
+타깃·Kotlin 패키지·콘솔 appName·표시 이름을 질문하고, 생성 전에 요약과 확인을 받습니다. 기본 타깃은 앱인토스만 선택합니다.
+
+자동화 환경에서는 입력값을 명시합니다.
+
+```sh
+yarn dlx create-ait-cmp-app@alpha my-app --yes \
+  --package io.example.myapp --app-name my-app \
+  --display-name '내 앱' --targets apps-in-toss,android,ios,web
+```
+
+`--skip-install`로 설치를 생략할 수 있습니다. 기본 설치는 프로젝트에 지정한 Yarn 4의 `install --immutable`을 사용합니다. 기존 파일·비어 있지 않은 경로·심볼릭 링크를 보호하며 덮어쓰기 옵션은 제공하지 않습니다.
+
+Git 초기화·커밋·앱인토스 콘솔 등록·배포·네이티브 도구 설치는 수행하지 않습니다. 생성 앱의 README는 앱 구성을, 개발 가이드는 실행·검사·CI 방법을 안내합니다. 전체 옵션은 `yarn dlx create-ait-cmp-app@alpha --help`로 확인합니다.

package/cli.js

@@ -0,0 +1,268 @@
+#!/usr/bin/env node
+import { lstat, readdir, readFile, mkdir, writeFile, chmod, realpath } from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createInterface } from 'node:readline/promises';
+import { spawn } from 'node:child_process';
+
+const {version: VERSION} = JSON.parse(await readFile(new URL('./package.json', import.meta.url), 'utf8'));
+const TARGETS = ['apps-in-toss', 'android', 'ios', 'web'];
+const TEMPLATE = fileURLToPath(new URL('./templates/app/', import.meta.url));
+const HELP = `Usage: create-ait-cmp-app [directory] [options]
+
+Create a Compose Multiplatform app. Interactive prompts are the default.
+  --package <id>         Kotlin package, Android application ID and iOS bundle ID
+  --app-name <name>      Apps in Toss console appName (lowercase letters, digits, hyphens)
+  --display-name <name>  App title
+  --targets <list>       apps-in-toss,android,ios,web (default: apps-in-toss)
+  --yes                 Skip prompts; directory and all three metadata options required
+  --skip-install        Generate files without running corepack yarn install --immutable
+  --help                Show help
+  --version             Show version
+
+Node.js 24 or newer is required. Existing files and symlink paths are protected.
+`;
+const KEYWORDS = new Set('as break class continue do else false for fun if in interface is null object package return super this throw true try typealias typeof val var when while'.split(' '));
+
+export function validate(field, value) {
+  if (typeof value !== 'string' || !value.trim()) throw new Error(`${field} is required.`);
+  if (field === 'project' && !/^[a-z][a-z0-9-]{0,79}$/.test(value)) {
+    throw new Error('Project name must start with a lowercase letter and contain only lowercase letters, digits and hyphens (max 80 characters).');
+  }
+  if (field === 'package' && (!/^[A-Za-z][A-Za-z0-9_]*(\.[A-Za-z][A-Za-z0-9_]*)+$/.test(value)
+      || value.split('.').some(part => KEYWORDS.has(part) || part.includes('_')))) {
+    throw new Error('Package must have at least two dot-separated segments starting with letters, using letters and digits only, without Kotlin keywords.');
+  }
+  if (field === 'app-name' && !/^[a-z][a-z0-9-]{0,79}$/.test(value)) {
+    throw new Error('appName must start with a lowercase letter and contain lowercase letters, digits and hyphens (max 80 characters).');
+  }
+  // Reject control characters in display names before writing any files.
+  // eslint-disable-next-line no-control-regex
+  if (field === 'display-name' && (/[\u0000-\u001f\u007f]/.test(value) || value.length > 100)) {
+    throw new Error('Display name must contain 1–100 characters without control characters.');
+  }
+  if (field === 'targets') {
+    const selected = value.split(',');
+    if (!selected.includes('apps-in-toss') || selected.some(t => !TARGETS.includes(t)) || new Set(selected).size !== selected.length) {
+      throw new Error(`Targets must include apps-in-toss and use each of ${TARGETS.join(',')} at most once.`);
+    }
+  }
+  return value;
+}
+
+export function parseArgs(argv) {
+  const options = {};
+  const flags = new Set(['yes', 'skip-install', 'help', 'version']);
+  const values = new Set(['package', 'app-name', 'display-name', 'targets']);
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg.startsWith('--')) {
+      const [name, ...rest] = arg.slice(2).split('=');
+      if (Object.hasOwn(options, name)) throw new Error(`Duplicate option --${name}.`);
+      if (flags.has(name) && !rest.length) options[name] = true;
+      else if (values.has(name)) {
+        const value = rest.length ? rest.join('=') : argv[++i];
+        if (value === undefined || value.startsWith('--')) throw new Error(`Missing value for --${name}.`);
+        options[name] = validate(name, value);
+      } else throw new Error(`Unknown option ${arg}. Use --help.`);
+    } else {
+      if (arg.startsWith('-')) throw new Error(`Unknown option ${arg}. Use --help.`);
+      if (options.directory !== undefined) throw new Error('Provide only one target directory.');
+      options.directory = arg;
+    }
+  }
+  return options;
+}
+
+export async function checkDirectory(directory) {
+  // Check every ancestor so a symlink cannot redirect a nominally safe destination.
+  let current = path.parse(directory).root;
+  for (const part of directory.slice(current.length).split(path.sep).filter(Boolean)) {
+    current = path.join(current, part);
+    try {
+      const stat = await lstat(current);
+      if (stat.isSymbolicLink()) throw new Error(`Refusing symlink path: ${current}`);
+      if (!stat.isDirectory()) throw new Error(`Path is not a directory: ${current}`);
+    } catch (error) {
+      if (error.code === 'ENOENT') break;
+      throw error;
+    }
+  }
+  try {
+    const entries = await readdir(directory);
+    if (entries.some(entry => entry !== '.git')) throw new Error(`Directory is not empty: ${directory}`);
+    if (entries.includes('.git') && (await lstat(path.join(directory, '.git'))).isSymbolicLink()) {
+      throw new Error('Refusing symlink .git entry.');
+    }
+  } catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+  }
+}
+
+function escapeValue(value, filename) {
+  const ext = path.extname(filename);
+  if (['.xml', '.plist', '.html'].includes(ext)) {
+    return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;').replaceAll("'", '&apos;');
+  }
+  if (['.json', '.js', '.mjs', '.cjs', '.ts', '.tsx', '.kt', '.kts', '.swift', '.pbxproj'].includes(ext)) {
+    const escaped = JSON.stringify(value).slice(1, -1).replaceAll('\u2028', '\\u2028').replaceAll('\u2029', '\\u2029');
+    if (ext === '.swift') return escaped.replaceAll('\\u2028', '\\u{2028}').replaceAll('\\u2029', '\\u{2029}');
+    return ['.kt', '.kts'].includes(ext) ? escaped.replaceAll('$', '\\$') : escaped;
+  }
+  if (ext === '.properties') return value.replace(/[\\:=#! ]/g, char => `\\${char}`);
+  if (['.md', '.txt'].includes(ext)) return value;
+  throw new Error(`Template metadata has no escaping contract for ${filename}.`);
+}
+
+async function templateFiles(root, options, prefix = '') {
+  const files = [];
+  const omitted = new Set([!options.targets.includes('android') && 'androidApp', !options.targets.includes('ios') && 'iosApp', !options.targets.includes('web') && 'webApp']);
+  for (const entry of await readdir(path.join(root, prefix), { withFileTypes: true })) {
+    if (!prefix && omitted.has(entry.name)) continue;
+    const relative = path.join(prefix, entry.name);
+    if (entry.isSymbolicLink()) throw new Error(`Template symlink is not supported: ${relative}`);
+    if (entry.isDirectory()) files.push(...await templateFiles(root, options, relative));
+    else if (entry.isFile()) {
+      const source = await readFile(path.join(root, relative));
+      let content = source;
+      const text = source.toString('utf8');
+      if (/__(PROJECT_NAME|PACKAGE_NAME|APP_NAME|DISPLAY_NAME)__/.test(text)) {
+        const metadata = { PROJECT_NAME: options.project, PACKAGE_NAME: options.package, APP_NAME: options['app-name'], DISPLAY_NAME: options['display-name'] };
+        content = Buffer.from(text.replace(/__(PROJECT_NAME|PACKAGE_NAME|APP_NAME|DISPLAY_NAME)__/g,
+          (_, key) => escapeValue(metadata[key], relative)));
+      }
+      // Package replacement can change the import order required by .editorconfig.
+      if (relative.endsWith('.kt')) {
+        content = Buffer.from(content.toString('utf8').replace(/^(?:import [^\n]+\n)+/gm,
+          block => `${block.trimEnd().split('\n').sort().join('\n')}\n`));
+      }
+      if (relative === 'package.json') {
+        const json = JSON.parse(content.toString('utf8'));
+        json.name = options.project;
+        if (relative === 'package.json' && !options.targets.includes('web')) {
+          delete json.scripts?.['dev:web'];
+          delete json.scripts?.['build:web'];
+        }
+        content = Buffer.from(`${JSON.stringify(json, null, 2)}\n`);
+      }
+      if (relative === '_yarn.lock') {
+        // Yarn requires canonical entry order even when only the workspace name changes.
+        const blocks = content.toString('utf8').replaceAll('ait-cmp-template', options.project).trimEnd().split('\n\n');
+        const firstEntry = blocks.findIndex(block => block.startsWith('"'));
+        if (firstEntry < 0) throw new Error('Bundled Yarn lockfile has no entries.');
+        content = Buffer.from([...blocks.slice(0, firstEntry), ...blocks.slice(firstEntry).sort()].join('\n\n') + '\n');
+      }
+      const destination = relative.startsWith(`_github${path.sep}`)
+        ? `.github${relative.slice('_github'.length)}`
+        : ({'_gitignore':'.gitignore','_yarn.lock':'yarn.lock','_yarnrc.yml':'.yarnrc.yml'})[relative] ?? relative;
+      files.push({ relative: destination, content, mode: (await lstat(path.join(root, relative))).mode & 0o777 });
+    }
+  }
+  return files;
+}
+
+function install(directory) {
+  return new Promise((resolve, reject) => {
+    const command = process.platform === 'win32' ? 'corepack.cmd' : 'corepack';
+    const child = spawn(command, ['yarn', 'install', '--immutable'], {
+      cwd: directory, stdio: 'inherit', shell: process.platform === 'win32'
+    });
+    child.once('error', reject);
+    child.once('exit', code => code === 0 ? resolve() : reject(new Error(`corepack yarn install --immutable exited with ${code ?? 'a signal'}.`)));
+  });
+}
+
+export async function run(argv, context = {}) {
+  const output = context.output ?? process.stdout;
+  const input = context.input ?? process.stdin;
+  const log = message => output.write(`${message}\n`);
+  const options = parseArgs(argv);
+  if (options.help) { output.write(HELP); return 0; }
+  if (options.version) { log(VERSION); return 0; }
+  if (Number(process.versions.node.split('.')[0]) < 24) throw new Error('Node.js 24 or newer is required.');
+  if (!options.yes && !input.isTTY && !context.ask) {
+    throw new Error('No interactive terminal. Use <directory> --yes --package <id> --app-name <name> --display-name <name>.');
+  }
+  if (options.yes) {
+    const missing = ['directory', 'package', 'app-name', 'display-name'].filter(key => options[key] === undefined);
+    if (missing.length) throw new Error(`--yes requires ${missing.map(key => key === 'directory' ? '<directory>' : `--${key}`).join(', ')}.`);
+  }
+  let rl;
+  let cancelled = false;
+  let abortQuestion;
+  const ask = context.ask ?? (question => {
+    if (!rl) {
+      rl = createInterface({ input, output });
+      rl.on('SIGINT', () => { cancelled = true; abortQuestion?.abort(); rl.close(); });
+    }
+    abortQuestion = new AbortController();
+    return rl.question(question, { signal: abortQuestion.signal });
+  });
+  async function prompt(field, label, fallback) {
+    if (options[field] !== undefined) return;
+    for (;;) {
+      const answer = (await ask(`${label} [${fallback}]: `)).trim() || fallback;
+      try {
+        if (field === 'directory') validate('project', path.basename(path.resolve(context.cwd ?? process.cwd(), answer)));
+        options[field] = field === 'directory' ? answer : validate(field, answer);
+        return;
+      }
+      catch (error) { log(error.message); }
+    }
+  }
+  try {
+    if (!options.yes) await prompt('directory', 'Project directory', 'my-app');
+    validate('directory', options.directory);
+    const directory = path.resolve(context.cwd ?? process.cwd(), options.directory);
+    options.project = validate('project', path.basename(directory));
+    await checkDirectory(directory);
+    if (!options.yes) {
+      await prompt('targets', 'Targets (comma-separated)', 'apps-in-toss');
+      await prompt('package', 'Kotlin package / application ID', `io.example.${options.project.replaceAll('-', '')}`);
+      await prompt('app-name', 'Apps in Toss appName (must match your console registration)', options.project);
+      await prompt('display-name', 'Display name', options.project);
+    }
+    options.targets = (options.targets ?? 'apps-in-toss').split(',');
+    log(`\nDirectory: ${directory}\nProject: ${options.project}\nTargets: ${options.targets.join(', ')}\nPackage: ${options.package}\nappName: ${options['app-name']}\nDisplay name: ${options['display-name']}\nInstall dependencies: ${!options['skip-install']}`);
+    if (!options.yes && !/^(y|yes)$/i.test((await ask('Create project? [y/N]: ')).trim())) {
+      log('Cancelled.'); return 0;
+    }
+    rl?.close();
+    // Render everything before creating a directory: invalid templates leave no output.
+    const files = await templateFiles(context.template ?? TEMPLATE, options);
+    if (!files.length) throw new Error('Bundled template is empty.');
+    await checkDirectory(directory);
+    await mkdir(directory, { recursive: true });
+    for (const file of files) {
+      const destination = path.join(directory, file.relative);
+      await mkdir(path.dirname(destination), { recursive: true });
+      await writeFile(destination, file.content, { flag: 'wx', mode: file.mode });
+      await chmod(destination, file.mode);
+    }
+    log(`\nCreated ${options.project}.`);
+    if (!options['skip-install']) {
+      try { await (context.install ?? install)(directory); }
+      catch (error) {
+        log(`Dependency installation failed: ${error.message}\nGenerated files are preserved. Retry corepack yarn install --immutable in ${directory}.`);
+        return 1;
+      }
+    }
+    log(`\nNext steps in ${directory}:`);
+    if (options['skip-install']) log('  corepack yarn install --immutable');
+    log('  yarn lint\n  yarn dev\n  yarn build');
+    if (options.targets.includes('android')) log('  ./gradlew :androidApp:assembleDebug (requires JDK 17 and Android SDK)');
+    if (options.targets.includes('ios')) log('  Open iosApp in Xcode on macOS and configure your signing team.');
+    if (options.targets.includes('web')) log('  yarn dev:web\n  yarn build:web');
+    log('Configure the Apps in Toss console values and logo before a production build.');
+    return 0;
+  } catch (error) {
+    if (cancelled || error.code === 'ABORT_ERR' || error.code === 'ERR_USE_AFTER_CLOSE') { log('Cancelled.'); return 130; }
+    throw error;
+  } finally { rl?.close(); }
+}
+
+if (process.argv[1] && await realpath(process.argv[1]).catch(() => '') === fileURLToPath(import.meta.url)) {
+  run(process.argv.slice(2)).then(code => { process.exitCode = code; }).catch(error => {
+    process.stderr.write(`Error: ${error.message}\n`); process.exitCode = 1;
+  });
+}

package/package.json

@@ -1,6 +1,32 @@
 {
   "name": "create-ait-cmp-app",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "1.0.0-alpha02",
+  "description": "앱인토스용 Compose Multiplatform 프로젝트 생성 도구",
+  "type": "module",
+  "bin": "cli.js",
+  "engines": {
+    "node": ">=24"
+  },
+  "files": [
+    "cli.js",
+    "templates"
+  ],
+  "scripts": {
+    "test": "node --test"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "executableFiles": [
+      "cli.js",
+      "templates/app/gradlew"
+    ],
+    "access": "public",
+    "provenance": false
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/l2hyunwoo/apps-in-toss-cmp-sdk.git",
+    "directory": "packages/create-ait-cmp-app"
+  },
+  "packageManager": "yarn@4.18.1"
 }

package/templates/app/.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+
+[*.{kt,kts}]
+indent_size = 4
+ktlint_code_style = intellij_idea
+ij_kotlin_imports_layout = *
+ktlint_function_naming_ignore_when_annotated_with = Composable
+ktlint_standard_no-wildcard-imports = disabled

package/templates/app/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 l2hyunwoo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/templates/app/README.md

@@ -0,0 +1,25 @@
+# __DISPLAY_NAME__
+
+앱인토스에서 사용하는 Compose Multiplatform 메모 서비스입니다. 메모 목록을 보고 내용을 수정·저장할 수 있으며, 공통 화면과 서비스 로직을 다른 앱·웹에 재사용할 수 있습니다.
+
+## 기능
+
+- 메모 목록·상세·편집 화면
+- 기기에 초안 저장과 텍스트 공유
+- 앱인토스 전용 로그인·호스트 이벤트·안전 영역 연결
+
+## 구성
+
+| 모듈 | 역할 |
+| --- | --- |
+| [shared-core](shared-core/README.md) | 데이터 모델·조회 API·저장 계약 |
+| [shared-ui](shared-ui/README.md) | 재사용 가능한 Compose 화면 |
+| [appsInTossApp](appsInTossApp/README.md) | 토스 연동과 앱인토스 진입점 |
+
+Android·iOS·독립 웹 호스트는 프로젝트 생성 시 선택한 경우에 포함됩니다. 공통 UI는 Compose Material 3을 사용하며 TDS는 포함하지 않습니다.
+
+## 현재 제공 범위
+
+조회는 데모 데이터를 사용하고 초안은 기기에 저장합니다. 운영 서버·계정 연동·서버 인증 교환은 별도로 연결해야 합니다. 개발용 mock의 로그인 결과는 인증에 사용할 수 없습니다.
+
+[개발 가이드](docs/development.md)에서 실행·검사·GitHub Actions CI와 플랫폼 확장 방법을 확인할 수 있습니다.

package/templates/app/_github/workflows/ci.yml

@@ -0,0 +1,56 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  javascript:
+    name: JS 린트
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
+        with:
+          node-version: '24'
+          package-manager-cache: false
+      - name: Yarn 4 설치
+        run: corepack enable
+      - name: 의존성 설치
+        run: yarn install --immutable
+      - name: JS·TS 린트
+        run: yarn lint:js
+
+  kotlin:
+    name: Kotlin 린트·테스트
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+        with:
+          distribution: temurin
+          java-version: '17'
+      - uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        with:
+          cache-provider: basic
+          cache-read-only: ${{ github.event_name == 'pull_request' }}
+      - name: Kotlin·Gradle 린트
+        run: ./gradlew ktlintCheck --no-daemon --console=plain
+      - name: Kotlin JVM 테스트
+        run: ./gradlew :shared-core:jvmTest --no-daemon --console=plain

package/templates/app/_gitignore

@@ -0,0 +1,11 @@
+**/build/
+.gradle/
+.kotlin/
+node_modules/
+local.properties
+**/dist/
+*.ait
+.DS_Store
+**/xcuserdata/
+kotlin-js-store/
+.yarn/