gencow 0.1.132 → 0.1.133

package/bin/gencow.mjs

@@ -36,6 +36,7 @@ import { fileURLToPath } from "url";
 import { createRequire } from "module";
 import { buildApiObject, buildGeneratedApiTs } from "../lib/api-codegen.mjs";
 import { buildReadmeMarkdown, extractComponentsBlock } from "../lib/readme-codegen.mjs";
+import { resolveCloudAppTarget } from "../lib/cloud-targets.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -202,6 +203,68 @@ function parseDurationToMinutes(raw, label = "duration") {
   return value * 60 * 24;
 }
 
+function normalizeCliCorsOrigin(raw) {
+  const trimmed = raw.trim();
+  if (!trimmed) {
+    throw new Error("Origin is required");
+  }
+
+  if (trimmed.includes("*")) {
+    throw new Error("Wildcard origins are not supported");
+  }
+
+  let url;
+  try {
+    url = new URL(trimmed);
+  } catch {
+    throw new Error("Origin must be a valid URL");
+  }
+
+  if (url.protocol !== "https:") {
+    throw new Error("Origin must start with https://");
+  }
+
+  if (url.username || url.password) {
+    throw new Error("Origin cannot include username or password");
+  }
+
+  if (url.pathname !== "/" || url.search || url.hash) {
+    throw new Error("Origin must be a bare origin without path, query, or hash");
+  }
+
+  return url.origin;
+}
+
+function printCorsStatus(appId, config) {
+  log(`\n${BOLD}${CYAN}CORS Origins${RESET} — ${appId} (${config.env})\n`);
+
+  log(`  ${DIM}Automatically allowed:${RESET}`);
+  for (const entry of config.autoOrigins) {
+    log(`  ${GREEN}${entry.label}${RESET}  ${DIM}${entry.note}${RESET}`);
+  }
+
+  if (config.customDomain) {
+    const statusLabel = config.customDomain.status ? ` (${config.customDomain.status})` : "";
+    log(
+      `  ${GREEN}${config.customDomain.origin}${RESET}  ${DIM}same-origin custom domain${statusLabel}${RESET}`,
+    );
+  }
+
+  if (config.customOrigins.length === 0) {
+    log(`\n  ${DIM}Custom origins:${RESET}`);
+    info("No custom origins configured.");
+  } else {
+    log(`\n  ${DIM}Custom origins:${RESET}`);
+    for (const origin of config.customOrigins) {
+      log(`  ${origin}`);
+    }
+  }
+
+  log("");
+  info("Only needed when your frontend is hosted outside Gencow.");
+  log("");
+}
+
 // ─── gencow.config.ts parser ─────────────────────────────
 //
 // Reads gencow.config.ts from project root and returns the config object.
@@ -861,8 +924,8 @@ const commands = {
       "@gencow/core": "latest",
       "@electric-sql/pglite": "^0.3.15",
       "better-auth": "^1.5.1",
-      "drizzle-orm": "^0.45.1",
-      "drizzle-kit": "^0.31.4",
+      "drizzle-orm": "^1.0.0-beta || ^1.0.0",
+      "drizzle-kit": "^1.0.0-beta || ^1.0.0",
       hono: "^4.12.0",
       postgres: "^3.4.8",
     };
@@ -1955,6 +2018,9 @@ ${BOLD}Commands (login required):${RESET}
   ${GREEN}env set K=V${RESET}      Set cloud env var ${DIM}(hot-reload, no restart)${RESET}
   ${GREEN}env unset KEY${RESET}    Remove cloud env var
   ${GREEN}env push${RESET}         Push .env to cloud ${DIM}(--prod reads .env.production)${RESET}
+  ${GREEN}cors list${RESET}        Show allowed CORS origins ${DIM}(auto + custom)${RESET}
+  ${GREEN}cors add URL${RESET}     Allow external frontend origin ${DIM}(HTTPS only)${RESET}
+  ${GREEN}cors remove URL${RESET}  Remove custom CORS origin
   ${GREEN}files upload${RESET}     Upload files to app storage ${DIM}(--recursive for dirs)${RESET}
   ${GREEN}files list${RESET}       List uploaded files
   ${GREEN}files delete${RESET}     Delete uploaded file ${DIM}(--yes to skip confirm)${RESET}
@@ -1983,7 +2049,7 @@ ${BOLD}Ops (Observability):${RESET}
                      ${DIM}--prod       Target production app${RESET}
 
   ${DIM}Tip: Most commands support --prod to target the production app.${RESET}
-  ${DIM}     e.g. gencow deploy --prod, gencow env list --prod${RESET}
+  ${DIM}     e.g. gencow deploy --prod, gencow env list --prod, gencow cors list --prod${RESET}
 
 ${BOLD}Examples:${RESET}
   ${DIM}# New project:${RESET}
@@ -3437,37 +3503,16 @@ ${BOLD}Examples:${RESET}
     const subCmd = envArgs[0] || "list";
     const restArgs = envArgs.slice(1);
 
-    // 앱 ID 결정
-    let appId = null;
-    let envTarget = "dev";
-
-    for (let i = 0; i < restArgs.length; i++) {
-      if (restArgs[i] === "--app" || restArgs[i] === "-a") appId = restArgs[++i];
-      if (restArgs[i] === "--prod") envTarget = "prod";
-    }
-
-    if (!appId) {
-      const gencowJsonPath = resolve(process.cwd(), "gencow.json");
-      if (existsSync(gencowJsonPath)) {
-        const gencowJson = JSON.parse(readFileSync(gencowJsonPath, "utf8"));
-        appId = gencowJson.appId || gencowJson.appName; // 하위 호환
-        // --prod 시 prod 앱으로 대상 전환
-        if (envTarget === "prod" && gencowJson.prodApp) {
-          appId = gencowJson.prodApp;
-        }
-      }
-    }
-
-    // --prod인데 prod 앱이 없는 경우
-    if (envTarget === "prod" && appId && !appId.endsWith("-prod")) {
-      error("No prod app yet. Run gencow deploy first.");
+    const target = resolveCloudAppTarget(restArgs, {
+      missingAppMessage: "App ID not found. Run gencow deploy first.",
+      missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
+    });
+    if (target.error) {
+      error(target.error);
       return;
     }
 
-    if (!appId) {
-      error("App ID not found. Run gencow deploy first.");
-      return;
-    }
+    const { appId, envTarget } = target;
 
     switch (subCmd) {
       case "list":
@@ -3588,6 +3633,157 @@ ${BOLD}Examples:${RESET}
     }
   },
 
+  // ── cors ──────────────────────────────────────────────
+  async cors(...corsArgs) {
+    if (corsArgs.includes("--help") || corsArgs.includes("-h")) {
+      log(`\n${BOLD}${CYAN}gencow cors${RESET} — Manage allowed CORS origins\n`);
+      log(`  ${BOLD}Usage:${RESET}  gencow cors <command> [options]\n`);
+      log(`  ${BOLD}Commands:${RESET}`);
+      log(`    ${CYAN}list${RESET}                 Show allowed origins`);
+      log(`    ${CYAN}add${RESET} <origin>         Allow a new HTTPS origin`);
+      log(`    ${CYAN}remove${RESET} <origin>      Remove a custom origin\n`);
+      log(`  ${BOLD}Options:${RESET}`);
+      log(`    ${DIM}--prod${RESET}               Target production app`);
+      log(`    ${DIM}--app, -a${RESET}            Target specific app\n`);
+      log(`  ${BOLD}Examples:${RESET}`);
+      log(`    gencow cors add https://myapp.vercel.app`);
+      log(`    gencow cors list --prod\n`);
+      info("Custom domains connected with gencow domain set are same-origin, so they do not need CORS entries.");
+      return;
+    }
+
+    const creds = requireCreds();
+    const subCmd = corsArgs[0] || "list";
+    const restArgs = corsArgs.slice(1);
+    const target = resolveCloudAppTarget(restArgs, {
+      missingAppMessage: "App ID not found. Run gencow deploy first.",
+      missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
+    });
+
+    if (target.error) {
+      error(target.error);
+      return;
+    }
+
+    const { appId, envTarget } = target;
+
+    async function fetchCorsConfig() {
+      const res = await platformFetch(
+        creds,
+        `/platform/apps/${appId}/cors?env=${encodeURIComponent(envTarget)}`,
+        { method: "GET" },
+      );
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) {
+        throw new Error(data.error || res.statusText || "Failed to fetch CORS origins");
+      }
+      return data;
+    }
+
+    function resolveOriginArg() {
+      const rawOrigin = restArgs.find((arg, index) => {
+        if (arg.startsWith("-")) return false;
+        const prev = restArgs[index - 1];
+        return prev !== "--app" && prev !== "-a";
+      });
+
+      if (!rawOrigin) {
+        throw new Error("Origin is required");
+      }
+
+      return normalizeCliCorsOrigin(rawOrigin);
+    }
+
+    switch (subCmd) {
+      case "list":
+      case "ls": {
+        try {
+          printCorsStatus(appId, await fetchCorsConfig());
+        } catch (e) {
+          error(e.message);
+        }
+        break;
+      }
+
+      case "add": {
+        let origin;
+        try {
+          origin = resolveOriginArg();
+        } catch (e) {
+          error(e.message);
+          info("Usage: gencow cors add <origin>");
+          info("  Example: gencow cors add https://myapp.com");
+          return;
+        }
+
+        const res = await platformFetch(creds, `/platform/apps/${appId}/cors`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ origin, env: envTarget }),
+        });
+        const data = await res.json().catch(() => ({}));
+        if (!res.ok) {
+          error(data.error || res.statusText || "Failed to add origin");
+          return;
+        }
+
+        if (data.status === "added") {
+          success(`CORS origin added: ${data.origin}`);
+        } else if (data.status === "already_exists") {
+          info(`Already allowed: ${data.origin}`);
+        } else if (data.status === "same_origin_domain") {
+          info(`${data.origin} is your app's custom domain — same-origin, so no CORS entry is needed.`);
+        } else {
+          info(`${data.origin} is already auto-allowed by Gencow.`);
+        }
+
+        printCorsStatus(appId, data.config);
+        break;
+      }
+
+      case "remove":
+      case "rm": {
+        let origin;
+        try {
+          origin = resolveOriginArg();
+        } catch (e) {
+          error(e.message);
+          info("Usage: gencow cors remove <origin>");
+          info("  Example: gencow cors remove https://myapp.com");
+          return;
+        }
+
+        const res = await platformFetch(
+          creds,
+          `/platform/apps/${appId}/cors?env=${encodeURIComponent(envTarget)}&origin=${encodeURIComponent(origin)}`,
+          { method: "DELETE" },
+        );
+        const data = await res.json().catch(() => ({}));
+        if (!res.ok) {
+          error(data.error || res.statusText || "Failed to remove origin");
+          return;
+        }
+
+        if (data.status === "removed") {
+          success(`CORS origin removed: ${data.origin}`);
+        } else if (data.status === "not_found") {
+          info(`Not configured: ${data.origin}`);
+        } else if (data.status === "same_origin_domain") {
+          info(`${data.origin} is your app's custom domain — same-origin, so there is no CORS entry to remove.`);
+        } else {
+          info(`${data.origin} is auto-allowed by Gencow and is not stored as a custom origin.`);
+        }
+
+        printCorsStatus(appId, data.config);
+        break;
+      }
+
+      default:
+        error(`Unknown subcommand: ${subCmd}`);
+        info("Usage: gencow cors [list|add|remove] ...");
+    }
+  },
+
   // ── config ────────────────────────────────────────────
   async config(...configArgs) {
     // --help handler
@@ -5320,7 +5516,6 @@ process.exit(0);
   // ── env — 환경변수 관리 (Cloud only) ─────────
   async env(...envArgs) {
     const filteredArgs = envArgs.filter((a) => a !== "--local");
-    const subcmd = filteredArgs[0] || "list";
 
     // --local 사용 시 .env 파일 사용 안내
     if (envArgs.includes("--local")) {
@@ -5330,32 +5525,37 @@ process.exit(0);
       return;
     }
 
-    // ── 클라우드 모드 (기본) ──
-    // gencow.json에서 appId 읽기
-    const gencowJsonPath = resolve(process.cwd(), "gencow.json");
-    let appId = null;
-    if (existsSync(gencowJsonPath)) {
-      try {
-        const gencowJson = JSON.parse(readFileSync(gencowJsonPath, "utf8"));
-        appId = gencowJson.appId || gencowJson.appName;
-      } catch {
-        /* ignore parse error */
-      }
-    }
-
-    if (!appId) {
-      error("No gencow.json found. Cannot determine cloud app.");
-      info(`Run ${GREEN}gencow deploy${RESET} first to create a cloud app.`);
-      info(`Or use ${GREEN}.env${RESET} file for local development.`);
+    if (filteredArgs.includes("--help") || filteredArgs.includes("-h")) {
+      log(`\n${BOLD}${CYAN}gencow env${RESET} — Environment variable management\n`);
+      log(`  ${BOLD}Usage:${RESET}  gencow env <command> [options]\n`);
+      log(`  ${BOLD}Commands:${RESET}`);
+      log(`    ${CYAN}list${RESET}             List cloud env vars`);
+      log(`    ${CYAN}set${RESET} KEY=VALUE    Set cloud env var (hot-reload)`);
+      log(`    ${CYAN}unset${RESET} KEY        Remove cloud env var`);
+      log(`    ${CYAN}push${RESET}             Push .env to cloud\n`);
+      log(`  ${BOLD}Options:${RESET}`);
+      log(`    ${DIM}--prod${RESET}           Target production app`);
+      log(`    ${DIM}--app, -a${RESET}        Target specific app\n`);
       return;
     }
 
+    const subcmd = filteredArgs[0] || "list";
+    const restArgs = filteredArgs.slice(1);
     const creds = requireCreds();
+    const target = resolveCloudAppTarget(restArgs, {
+      missingAppMessage: "App ID not found. Run gencow deploy first.",
+      missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
+    });
+    if (target.error) {
+      error(target.error);
+      return;
+    }
+    const { appId, envTarget } = target;
 
     // ── cloud env list ──
-    if (subcmd === "list") {
+    if (subcmd === "list" || subcmd === "ls") {
       try {
-        const res = await platformFetch(creds, `/platform/apps/${appId}/env`, {
+        const res = await platformFetch(creds, `/platform/apps/${appId}/env?env=${envTarget}`, {
           method: "GET",
         });
         if (!res.ok) {
@@ -5365,7 +5565,7 @@ process.exit(0);
         const vars = await res.json();
 
         log(
-          `\n${BOLD}Environment Variables${RESET}  ${DIM}(cloud: ${appId}, ${vars.length} total)${RESET}\n`,
+          `\n${BOLD}Environment Variables${RESET}  ${DIM}(cloud: ${appId}, ${envTarget}, ${vars.length} total)${RESET}\n`,
         );
 
         if (vars.length === 0) {
@@ -5388,7 +5588,7 @@ process.exit(0);
 
     // ── cloud env set KEY=VALUE ──
     if (subcmd === "set") {
-      const pairs = filteredArgs.slice(1);
+      const pairs = restArgs.filter((arg) => arg.includes("=") && !arg.startsWith("-"));
       if (pairs.length === 0) {
         error("Usage: gencow env set KEY=VALUE [KEY2=VALUE2 ...]");
         return;
@@ -5418,13 +5618,13 @@ process.exit(0);
           const res = await platformFetch(creds, `/platform/apps/${appId}/env`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ key: name, value }),
+            body: JSON.stringify({ key: name, value, env: envTarget }),
           });
           if (!res.ok) {
             const body = await res.json().catch(() => ({}));
             throw new Error(body.error || `HTTP ${res.status}`);
           }
-          success(`Set ${BOLD}${name}${RESET} ${DIM}(cloud: ${appId})${RESET}`);
+          success(`Set ${BOLD}${name}${RESET} ${DIM}(cloud: ${appId}, ${envTarget})${RESET}`);
         } catch (e) {
           error(`Failed to set ${name}: ${e.message}`);
         }
@@ -5436,7 +5636,7 @@ process.exit(0);
 
     // ── cloud env unset KEY ──
     if (subcmd === "unset" || subcmd === "remove" || subcmd === "delete") {
-      const keys = filteredArgs.slice(1);
+      const keys = restArgs.filter((arg) => !arg.startsWith("-"));
       if (keys.length === 0) {
         error("Usage: gencow env unset KEY [KEY2 ...]");
         return;
@@ -5444,14 +5644,18 @@ process.exit(0);
       for (const rawKey of keys) {
         const key = rawKey.toUpperCase().replace(/[^A-Z0-9_]/g, "");
         try {
-          const res = await platformFetch(creds, `/platform/apps/${appId}/env/${encodeURIComponent(key)}`, {
-            method: "DELETE",
-          });
+          const res = await platformFetch(
+            creds,
+            `/platform/apps/${appId}/env/${encodeURIComponent(key)}?env=${envTarget}`,
+            {
+              method: "DELETE",
+            },
+          );
           if (!res.ok) {
             const body = await res.json().catch(() => ({}));
             throw new Error(body.error || `HTTP ${res.status}`);
           }
-          success(`Removed ${BOLD}${key}${RESET} ${DIM}(cloud: ${appId})${RESET}`);
+          success(`Removed ${BOLD}${key}${RESET} ${DIM}(cloud: ${appId}, ${envTarget})${RESET}`);
         } catch (e) {
           error(`Failed to remove ${key}: ${e.message}`);
         }
@@ -5462,9 +5666,9 @@ process.exit(0);
 
     // ── cloud env push — .env to cloud ──
     if (subcmd === "push") {
-      const envPath = resolve(process.cwd(), ".env");
+      const envPath = resolve(process.cwd(), envTarget === "prod" ? ".env.production" : ".env");
       if (!existsSync(envPath)) {
-        error("No .env file found in current directory");
+        error(`${envPath} not found.`);
         return;
       }
 
@@ -5493,13 +5697,13 @@ process.exit(0);
         return;
       }
 
-      log(`\n${BOLD}Pushing .env${RESET}  ${DIM}(cloud: ${appId}, ${count} variables)${RESET}\n`);
+      log(`\n${BOLD}Pushing .env${RESET}  ${DIM}(cloud: ${appId}, ${envTarget}, ${count} variables)${RESET}\n`);
 
       try {
         const res = await platformFetch(creds, `/platform/apps/${appId}/env/bulk`, {
           method: "PUT",
           headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ vars }),
+          body: JSON.stringify({ vars, env: envTarget }),
         });
         if (!res.ok) {
           const body = await res.json().catch(() => ({}));
@@ -5509,7 +5713,7 @@ process.exit(0);
         for (const key of Object.keys(vars)) {
           success(`${key}`);
         }
-        log(`\n  ${GREEN}${data.count || count} set${RESET} ${DIM}(cloud: ${appId})${RESET}`);
+        log(`\n  ${GREEN}${data.count || count} set${RESET} ${DIM}(cloud: ${appId}, ${envTarget})${RESET}`);
       } catch (e) {
         error(`Failed to push env vars: ${e.message}`);
       }

package/lib/__tests__/cloud-targets.test.ts

@@ -0,0 +1,47 @@
+import { afterEach, describe, expect, it } from "bun:test";
+import { mkdtempSync, rmSync, writeFileSync } from "fs";
+import { tmpdir } from "os";
+import { resolve } from "path";
+import { resolveCloudAppTarget } from "../cloud-targets.mjs";
+
+const originalCwd = process.cwd();
+
+afterEach(() => {
+  process.chdir(originalCwd);
+});
+
+describe("resolveCloudAppTarget", () => {
+  it("uses the project prod app when --prod is provided", () => {
+    const cwd = mkdtempSync(resolve(tmpdir(), "gencow-cloud-targets-"));
+    writeFileSync(
+      resolve(cwd, "gencow.json"),
+      JSON.stringify({ appId: "demo-app", prodApp: "demo-app-prod" }, null, 2),
+    );
+
+    expect(resolveCloudAppTarget(["--prod"], { cwd })).toEqual({
+      appId: "demo-app-prod",
+      envTarget: "prod",
+    });
+
+    rmSync(cwd, { recursive: true, force: true });
+  });
+
+  it("rejects an explicit dev app when combined with --prod", () => {
+    const cwd = mkdtempSync(resolve(tmpdir(), "gencow-cloud-targets-"));
+    writeFileSync(
+      resolve(cwd, "gencow.json"),
+      JSON.stringify({ appId: "demo-app", prodApp: "demo-app-prod" }, null, 2),
+    );
+
+    expect(
+      resolveCloudAppTarget(["--app", "demo-app", "--prod"], {
+        cwd,
+        missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
+      }),
+    ).toEqual({
+      error: "No prod app yet. Run gencow deploy --prod first.",
+    });
+
+    rmSync(cwd, { recursive: true, force: true });
+  });
+});

package/lib/__tests__/readme-codegen.test.ts

@@ -318,7 +318,8 @@ describe("buildDeploySection — 배포 가이드", () => {
 
   it("CORS 설정 안내", () => {
     const md = buildDeploySection();
-    expect(md).toContain("CORS_ORIGINS");
+    expect(md).toContain("gencow cors add");
+    expect(md).toContain("same-origin");
   });
 
   it("풀스택 통합 배포 (백엔드 자동 감지) 안내", () => {

package/lib/cloud-targets.mjs

@@ -0,0 +1,65 @@
+import { existsSync, readFileSync } from "fs";
+import { resolve } from "path";
+
+export function readProjectAppTargets(cwd = process.cwd()) {
+  const gencowJsonPath = resolve(cwd, "gencow.json");
+  if (!existsSync(gencowJsonPath)) {
+    return { appId: null, prodApp: null };
+  }
+
+  try {
+    const gencowJson = JSON.parse(readFileSync(gencowJsonPath, "utf8"));
+    return {
+      appId: gencowJson.appId || gencowJson.appName || null,
+      prodApp: gencowJson.prodApp || null,
+    };
+  } catch {
+    return { appId: null, prodApp: null };
+  }
+}
+
+export function resolveCloudAppTarget(restArgs, options = {}) {
+  const {
+    cwd = process.cwd(),
+    missingAppMessage = "App ID not found. Run gencow deploy first.",
+    missingProdMessage = "No prod app yet. Run gencow deploy first.",
+  } = options;
+
+  let appId = null;
+  let envTarget = "dev";
+  let explicitApp = false;
+
+  for (let i = 0; i < restArgs.length; i++) {
+    if (restArgs[i] === "--app" || restArgs[i] === "-a") {
+      appId = restArgs[++i];
+      explicitApp = true;
+      continue;
+    }
+    if (restArgs[i] === "--prod") {
+      envTarget = "prod";
+    }
+  }
+
+  const projectTargets = readProjectAppTargets(cwd);
+  if (!appId && projectTargets.appId) {
+    appId = envTarget === "prod" && projectTargets.prodApp ? projectTargets.prodApp : projectTargets.appId;
+  }
+
+  if (envTarget === "prod" && !explicitApp && projectTargets.prodApp) {
+    appId = projectTargets.prodApp;
+  }
+
+  if (envTarget === "prod" && explicitApp && appId && !appId.endsWith("-prod")) {
+    return { error: missingProdMessage };
+  }
+
+  if (envTarget === "prod" && !appId) {
+    return { error: missingProdMessage };
+  }
+
+  if (!appId) {
+    return { error: missingAppMessage };
+  }
+
+  return { appId, envTarget };
+}

package/lib/readme-codegen.mjs

@@ -558,9 +558,12 @@ export function buildDeploySection() {
   md += `> ⛔ \`child_process\`, \`vm\`, \`os\`, \`cluster\`, \`worker_threads\` 모듈은 보안상 차단됩니다.\n\n`;
   md += `### CORS 설정\n\n`;
   md += `- \`*.{BASE_DOMAIN}\` 서브도메인 간 요청은 **자동 허용**됩니다.\n`;
-  md += `- 커스텀 도메인에서 API를 호출하려면 환경변수를 설정하세요:\n\n`;
+  md += `- 프론트엔드가 Gencow 바깥(Vercel, Netlify 등)에서 호스팅될 때만 추가 설정이 필요합니다.\n`;
+  md += `- 커스텀 도메인(\`gencow domain set\`)은 same-origin 이므로 CORS 설정이 필요 없습니다.\n\n`;
   md += `\`\`\`bash\n`;
-  md += `gencow env set CORS_ORIGINS=https://myapp.com,https://www.myapp.com   # 클라우드에 설정\n`;
+  md += `gencow cors add https://myapp.com\n`;
+  md += `gencow cors add https://myapp.vercel.app\n`;
+  md += `gencow cors list\n`;
   md += `\`\`\`\n\n`;
 
   // 해싱/암호화 대안

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.132",
+  "version": "0.1.133",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {