create-mcp-use-app 0.3.4 → 0.4.0

package/dist/index.js

@@ -1,15 +1,42 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { execSync } from "child_process";
+import chalk from "chalk";
+import { Command } from "commander";
+import inquirer from "inquirer";
+import { spawn } from "child_process";
 import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join, resolve } from "path";
 import { fileURLToPath } from "url";
-import { createInterface } from "readline";
-import { Command } from "commander";
+import ora from "ora";
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = dirname(__filename);
+function runPackageManager(packageManager, args, cwd) {
+  return new Promise((resolve2, reject) => {
+    const child = spawn(packageManager, args, {
+      cwd,
+      stdio: "inherit",
+      shell: false
+      // Disable shell to prevent command injection
+    });
+    child.on("close", (code) => {
+      if (code === 0) {
+        resolve2();
+      } else {
+        reject(new Error(`Process exited with code ${code}`));
+      }
+    });
+    child.on("error", (err) => {
+      reject(err);
+    });
+  });
+}
 var program = new Command();
+function renderLogo() {
+  console.log(chalk.cyan("\u259B\u259B\u258C\u259B\u2598\u259B\u258C\u2584\u2596\u258C\u258C\u259B\u2598\u2588\u258C"));
+  console.log(chalk.cyan("\u258C\u258C\u258C\u2599\u2596\u2599\u258C  \u2599\u258C\u2584\u258C\u2599\u2596"));
+  console.log(chalk.cyan("     \u258C         "));
+}
 var packageJson = JSON.parse(
   readFileSync(join(__dirname, "../package.json"), "utf-8")
 );
@@ -49,8 +76,13 @@ function getCurrentPackageVersions() {
     );
     versions["@mcp-use/inspector"] = inspectorPackage.version;
   } catch (error) {
-    console.warn("\u26A0\uFE0F  Could not read workspace package versions, using defaults");
-    console.warn(`   Error: ${error}`);
+    if (process.env.NODE_ENV === "development") {
+      console.warn("\u26A0\uFE0F  Could not read workspace package versions, using defaults");
+      console.warn(`   Error: ${error instanceof Error ? error.message : String(error)}`);
+      if (error instanceof Error && error.stack) {
+        console.warn(`   Stack: ${error.stack}`);
+      }
+    }
   }
   return versions;
 }
@@ -73,88 +105,122 @@ function processTemplateFile(filePath, versions, isDevelopment = false) {
   }
   return processedContent;
 }
-program.name("create-mcp-use-app").description("Create a new MCP server project").version(packageJson.version).argument("[project-name]", "Name of the MCP server project").option("-t, --template <template>", "Template to use", "ui").option("--no-install", "Skip installing dependencies").option("--dev", "Use workspace dependencies for development").action(async (projectName, options) => {
+program.name("create-mcp-use-app").description("Create a new MCP server project").version(packageJson.version).argument("[project-name]", "Name of the MCP server project").option("-t, --template <template>", "Template to use", "simple").option("--no-install", "Skip installing dependencies").option("--dev", "Use workspace dependencies for development").action(async (projectName, options) => {
   try {
+    let selectedTemplate = options.template;
     if (!projectName) {
-      console.log("\u{1F3AF} Welcome to create-mcp-use-app!");
       console.log("");
-      const promptedName = await promptForProjectName();
-      if (!promptedName) {
-        console.log("\u274C Project creation cancelled.");
-        process.exit(0);
-      }
-      projectName = promptedName;
+      renderLogo();
+      console.log("");
+      console.log(chalk.bold("Welcome to create-mcp-use-app!"));
+      console.log("");
+      projectName = await promptForProjectName();
+      console.log("");
+      selectedTemplate = await promptForTemplate();
+    }
+    const sanitizedProjectName = projectName.trim();
+    if (!sanitizedProjectName) {
+      console.error(chalk.red("\u274C Project name cannot be empty"));
+      process.exit(1);
     }
-    console.log(`\u{1F680} Creating MCP server "${projectName}"...`);
-    const projectPath = resolve(process.cwd(), projectName);
+    if (sanitizedProjectName.includes("..") || sanitizedProjectName.includes("/") || sanitizedProjectName.includes("\\")) {
+      console.error(chalk.red('\u274C Project name cannot contain path separators or ".."'));
+      console.error(chalk.yellow('   Use simple names like "my-mcp-server"'));
+      process.exit(1);
+    }
+    const protectedNames = ["node_modules", ".git", ".env", "package.json", "src", "dist"];
+    if (protectedNames.includes(sanitizedProjectName.toLowerCase())) {
+      console.error(chalk.red(`\u274C Cannot use protected name "${sanitizedProjectName}"`));
+      console.error(chalk.yellow("   Please choose a different project name"));
+      process.exit(1);
+    }
+    console.log(chalk.cyan(`\u{1F680} Creating MCP server "${sanitizedProjectName}"...`));
+    const projectPath = resolve(process.cwd(), sanitizedProjectName);
     if (existsSync(projectPath)) {
-      console.error(`\u274C Directory "${projectName}" already exists!`);
+      console.error(chalk.red(`\u274C Directory "${sanitizedProjectName}" already exists!`));
+      console.error(chalk.yellow("   Please choose a different name or remove the existing directory"));
       process.exit(1);
     }
     mkdirSync(projectPath, { recursive: true });
+    const validatedTemplate = validateTemplateName(selectedTemplate);
     const versions = getCurrentPackageVersions();
-    await copyTemplate(projectPath, options.template, versions, options.dev);
-    updatePackageJson(projectPath, projectName);
+    await copyTemplate(projectPath, validatedTemplate, versions, options.dev);
+    updatePackageJson(projectPath, sanitizedProjectName);
     if (options.install) {
-      console.log("\u{1F4E6} Installing dependencies...");
+      const spinner = ora("Installing packages...").start();
       try {
-        execSync("pnpm install", { cwd: projectPath, stdio: "inherit" });
+        await runPackageManager("pnpm", ["install"], projectPath);
+        spinner.succeed("Packages installed successfully");
       } catch {
-        console.log("\u26A0\uFE0F  pnpm not found, trying npm...");
+        spinner.text = "pnpm not found, trying npm...";
         try {
-          execSync("npm install", { cwd: projectPath, stdio: "inherit" });
-        } catch {
-          console.log('\u26A0\uFE0F  npm install failed, please run "npm install" manually');
+          await runPackageManager("npm", ["install"], projectPath);
+          spinner.succeed("Packages installed successfully");
+        } catch (error) {
+          spinner.fail("Package installation failed");
+          console.log('\u26A0\uFE0F  Please run "npm install" or "pnpm install" manually');
         }
       }
     }
-    console.log("\u2705 MCP server created successfully!");
+    console.log("");
+    console.log(chalk.green("\u2705 MCP server created successfully!"));
     if (options.dev) {
-      console.log("\u{1F527} Development mode: Using workspace dependencies");
+      console.log(chalk.yellow("\u{1F527} Development mode: Using workspace dependencies"));
     }
     console.log("");
-    console.log("\u{1F4C1} Project structure:");
-    console.log(`   ${projectName}/`);
-    if (options.template === "ui") {
-      console.log("   \u251C\u2500\u2500 src/");
-      console.log("   \u2502   \u2514\u2500\u2500 server.ts");
+    console.log(chalk.bold("\u{1F4C1} Project structure:"));
+    console.log(`   ${sanitizedProjectName}/`);
+    console.log("   \u251C\u2500\u2500 src/");
+    console.log("   \u2502   \u2514\u2500\u2500 server.ts");
+    if (validatedTemplate === "ui") {
       console.log("   \u251C\u2500\u2500 resources/");
       console.log("   \u2502   \u251C\u2500\u2500 data-visualization.tsx");
       console.log("   \u2502   \u251C\u2500\u2500 kanban-board.tsx");
       console.log("   \u2502   \u2514\u2500\u2500 todo-list.tsx");
-      console.log("   \u251C\u2500\u2500 index.ts");
-      console.log("   \u251C\u2500\u2500 package.json");
-      console.log("   \u251C\u2500\u2500 tsconfig.json");
-      console.log("   \u2514\u2500\u2500 README.md");
-    } else {
-      console.log("   \u251C\u2500\u2500 src/");
-      console.log("   \u2502   \u2514\u2500\u2500 server.ts");
-      console.log("   \u251C\u2500\u2500 package.json");
-      console.log("   \u251C\u2500\u2500 tsconfig.json");
-      console.log("   \u2514\u2500\u2500 README.md");
     }
+    console.log("   \u251C\u2500\u2500 index.ts");
+    console.log("   \u251C\u2500\u2500 package.json");
+    console.log("   \u251C\u2500\u2500 tsconfig.json");
+    console.log("   \u2514\u2500\u2500 README.md");
     console.log("");
-    console.log("\u{1F680} To get started:");
-    console.log(`   cd ${projectName}`);
+    console.log(chalk.bold("\u{1F680} To get started:"));
+    console.log(chalk.cyan(`   cd ${sanitizedProjectName}`));
     if (!options.install) {
-      console.log("   npm install");
+      console.log(chalk.cyan("   npm install"));
     }
-    console.log("   npm run dev");
+    console.log(chalk.cyan("   npm run dev"));
     console.log("");
     if (options.dev) {
-      console.log("\u{1F4A1} Development mode: Your project uses workspace dependencies");
-      console.log("   Make sure you're in the mcp-use workspace root for development");
+      console.log(chalk.yellow("\u{1F4A1} Development mode: Your project uses workspace dependencies"));
+      console.log(chalk.yellow("   Make sure you're in the mcp-use workspace root for development"));
+      console.log("");
     }
-    console.log("\u{1F4DA} Learn more: https://docs.mcp-use.io");
+    console.log(chalk.blue("\u{1F4DA} Learn more: https://docs.mcp-use.com"));
+    console.log(chalk.gray("\u{1F4AC} For feedback and bug reporting visit:"));
+    console.log(chalk.gray("   https://github.com/mcp-use/mcp-use or https://mcp-use.com"));
   } catch (error) {
     console.error("\u274C Error creating MCP server:", error);
     process.exit(1);
   }
 });
+function validateTemplateName(template) {
+  const sanitized = template.trim();
+  if (sanitized.includes("..") || sanitized.includes("/") || sanitized.includes("\\")) {
+    console.error(chalk.red("\u274C Invalid template name"));
+    console.error(chalk.yellow("   Template name cannot contain path separators"));
+    process.exit(1);
+  }
+  if (!/^[a-zA-Z0-9_-]+$/.test(sanitized)) {
+    console.error(chalk.red("\u274C Invalid template name"));
+    console.error(chalk.yellow("   Template name can only contain letters, numbers, hyphens, and underscores"));
+    process.exit(1);
+  }
+  return sanitized;
+}
 async function copyTemplate(projectPath, template, versions, isDevelopment = false) {
   const templatePath = join(__dirname, "templates", template);
   if (!existsSync(templatePath)) {
-    console.error(`\u274C Template "${template}" not found!`);
+    console.error(chalk.red(`\u274C Template "${template}" not found!`));
     const templatesDir = join(__dirname, "templates");
     if (existsSync(templatesDir)) {
       const availableTemplates = readdirSync(templatesDir, { withFileTypes: true }).filter((dirent) => dirent.isDirectory()).map((dirent) => dirent.name).sort();
@@ -193,35 +259,49 @@ function updatePackageJson(projectPath, projectName) {
   packageJsonContent.description = `MCP server: ${projectName}`;
   writeFileSync(packageJsonPath, JSON.stringify(packageJsonContent, null, 2));
 }
-function promptForProjectName() {
-  return new Promise((resolvePromise) => {
-    const rl = createInterface({
-      input: process.stdin,
-      output: process.stdout
-    });
-    const askForName = () => {
-      rl.question("What is your project name? ", (answer) => {
-        const trimmed = answer.trim();
+async function promptForProjectName() {
+  const { projectName } = await inquirer.prompt([
+    {
+      type: "input",
+      name: "projectName",
+      message: "What is your project name?",
+      validate: (input) => {
+        const trimmed = input.trim();
         if (!trimmed) {
-          console.log("\u274C Project name is required");
-          askForName();
-          return;
+          return "Project name is required";
         }
         if (!/^[a-zA-Z0-9-_]+$/.test(trimmed)) {
-          console.log("\u274C Project name can only contain letters, numbers, hyphens, and underscores");
-          askForName();
-          return;
+          return "Project name can only contain letters, numbers, hyphens, and underscores";
         }
         if (existsSync(join(process.cwd(), trimmed))) {
-          console.log(`\u274C Directory "${trimmed}" already exists! Please choose a different name.`);
-          askForName();
-          return;
+          return `Directory "${trimmed}" already exists! Please choose a different name.`;
         }
-        rl.close();
-        resolvePromise(trimmed);
-      });
-    };
-    askForName();
-  });
+        return true;
+      }
+    }
+  ]);
+  return projectName;
+}
+async function promptForTemplate() {
+  const templatesDir = join(__dirname, "templates");
+  const availableTemplates = existsSync(templatesDir) ? readdirSync(templatesDir, { withFileTypes: true }).filter((dirent) => dirent.isDirectory()).map((dirent) => dirent.name).sort() : ["simple", "ui", "uiresource"];
+  const templateDescriptions = {
+    "simple": "Simple MCP server with a basic calculator tool (add numbers)",
+    "ui": "MCP Server with mcp-ui resources returned from tools",
+    "uiresource": "MCP Server with mcp-ui resources"
+  };
+  const { template } = await inquirer.prompt([
+    {
+      type: "list",
+      name: "template",
+      message: "Select a template:",
+      default: "simple",
+      choices: availableTemplates.map((template2) => ({
+        name: `${template2} - ${templateDescriptions[template2] || "MCP server template"}`,
+        value: template2
+      }))
+    }
+  ]);
+  return template;
 }
 program.parse();