create-fuzionx 0.1.38 → 0.1.39

package/fx.js

@@ -8,7 +8,7 @@
  *   fx make:controller User → 로컬 @fuzionx/framework CLI 위임
  *   fx dev                  → 로컬 @fuzionx/framework CLI 위임
  */
-import { execSync } from 'node:child_process';
+import { spawnSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -31,14 +31,18 @@ const localBin = path.resolve('node_modules', '.bin', 'fx');
 const localCli = path.resolve('node_modules', '@fuzionx', 'framework', 'bin', 'fx.js');
 
 if (existsSync(localBin) || existsSync(localCli)) {
-    const bin = existsSync(localBin) ? localBin : `node ${localCli}`;
-    try {
-        execSync(`${bin} ${process.argv.slice(2).join(' ')}`, {
-            stdio: 'inherit',
-            cwd: process.cwd(),
-        });
-    } catch {
-        process.exit(1);
+    // spawnSync 배열 방식 — 쉘 인젝션 방지
+    const useLocalBin = existsSync(localBin);
+    const bin = useLocalBin ? localBin : process.execPath;
+    const spawnArgs = useLocalBin
+        ? process.argv.slice(2)
+        : [localCli, ...process.argv.slice(2)];
+    const result = spawnSync(bin, spawnArgs, {
+        stdio: 'inherit',
+        cwd: process.cwd(),
+    });
+    if (result.status !== 0) {
+        process.exit(result.status ?? 1);
     }
 } else if (!command || command === 'help') {
     console.log(`

package/index.js

@@ -157,15 +157,18 @@ async function createApp(name, targetDir, type = 'spa') {
     return dir;
 }
 
-// ── CLI 엔트리 ──
+// ── CLI 엔트리 (direct 실행 시만 동작) ──
 
-const allArgs = process.argv.slice(2);
-const name = allArgs.find(a => !a.startsWith('--'));
-const typeFlag = allArgs.find(a => a.startsWith('--type='));
-const type = typeFlag?.split('=')[1] || 'spa';
+const isDirectEntry = process.argv[1]?.includes('create-fuzionx') || process.argv[1]?.endsWith('index.js');
 
-if (!name) {
-    console.error(`
+if (isDirectEntry) {
+    const allArgs = process.argv.slice(2);
+    const name = allArgs.find(a => !a.startsWith('--'));
+    const typeFlag = allArgs.find(a => a.startsWith('--type='));
+    const type = typeFlag?.split('=')[1] || 'spa';
+
+    if (!name) {
+        console.error(`
   Usage: npx create-fuzionx <app-name> [--type=ssr|spa]
 
   Examples:
@@ -173,19 +176,19 @@ if (!name) {
     npx create-fuzionx my-app --type=ssr   # MPA (SSR)
     npx create-fuzionx my-app --type=spa   # SPA (Vue.js 3 + SSR)
 `);
-    process.exit(1);
-}
+        process.exit(1);
+    }
 
-const validTypes = ['ssr', 'spa'];
-if (!validTypes.includes(type)) {
-    console.error(`❌ Unknown type: ${type}. Available: ${validTypes.join(', ')}`);
-    process.exit(1);
-}
+    const validTypes = ['ssr', 'spa'];
+    if (!validTypes.includes(type)) {
+        console.error(`❌ Unknown type: ${type}. Available: ${validTypes.join(', ')}`);
+        process.exit(1);
+    }
 
-try {
-    const dir = await createApp(name, null, type);
-    const nextCmd = type === 'spa' ? 'npx fx dev:spa' : 'npx fx dev';
-    console.log(`
+    try {
+        const dir = await createApp(name, null, type);
+        const nextCmd = type === 'spa' ? 'npx fx dev:spa' : 'npx fx dev';
+        console.log(`
   ✅ Created ${name} at ${dir} (type: ${type})
 
   Next steps:
@@ -196,7 +199,8 @@ try {
     ` : ''}npx fx db:sync --apply
     ${nextCmd}
 `);
-} catch (err) {
-    console.error(`❌ Failed to create app: ${err.message}`);
-    process.exit(1);
+    } catch (err) {
+        console.error(`❌ Failed to create app: ${err.message}`);
+        process.exit(1);
+    }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-fuzionx",
-  "version": "0.1.38",
+  "version": "0.1.39",
   "description": "Create a new FuzionX application — npx create-fuzionx my-app",
   "type": "module",
   "bin": {

package/templates/common/package.json.tpl

@@ -9,8 +9,8 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@fuzionx/framework": "^0.1.38",
-    "@fuzionx/client": "^0.1.38",
+    "@fuzionx/framework": "^0.1.39",
+    "@fuzionx/client": "^0.1.39",
     "joi": "^18.1.1"
   },
   "devDependencies": {

package/templates/spa/meta.json

@@ -4,7 +4,7 @@
   "description": "Vue.js 3 SPA + Tera SSR 하이브리드. WASM 암호화 통신.",
   "features": ["auth", "board", "i18n", "asp", "wasm"],
   "dependencies": {
-    "@fuzionx/client": "^0.1.38"
+    "@fuzionx/client": "^0.1.39"
   },
   "devDependencies": {},
   "spaDevDependencies": {