gencow 0.1.146 → 0.1.147

package/bin/gencow.mjs

@@ -39,6 +39,7 @@ import {
   updateEnvLocalUrl,
 } from "../lib/cli-project-runtime.mjs";
 import { createCodegenCommand } from "../lib/codegen-command.mjs";
+import { maybeCheckCliVersion } from "../lib/cli-version-check.mjs";
 import { updateComponentReadme } from "../lib/component-readme.mjs";
 import { createConfigCommand } from "../lib/config-command.mjs";
 import { createCorsCommand } from "../lib/cors-command.mjs";
@@ -81,6 +82,8 @@ import {
 import { platformFetch, requireCreds, rpcMutation, rpcQuery } from "../lib/platform-client.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
+const CLI_PACKAGE_JSON = JSON.parse(readFileSync(resolve(__dirname, "..", "package.json"), "utf8"));
+const CLI_VERSION = CLI_PACKAGE_JSON.version || "0.0.0";
 const _drizzleKitCmd = (subcmd, options = {}) => buildDrizzleKitCommand(subcmd, options);
 const generateApiTs = createApiCodegenRuntime({});
 const runAddCommand = createAddCommand({
@@ -282,6 +285,7 @@ const commands = {
   help() {
     log(`
 ${BOLD}${CYAN}Gencow CLI${RESET}  ${DIM}— AI Backend Engine${RESET}
+${DIM}Version: ${CLI_VERSION}${RESET}
 
 ${BOLD}Usage:${RESET}
   gencow <command>
@@ -382,6 +386,10 @@ ${BOLD}Examples:${RESET}
 `);
   },
 
+  version() {
+    log(CLI_VERSION);
+  },
+
   // ── login/logout/whoami ───────────────────────────────
   login: runLoginCommand,
   logout: runLogoutCommand,
@@ -455,7 +463,15 @@ ${BOLD}Examples:${RESET}
 
 // ─── updateReadme: gencow/ 폴더 스캔 → README에 컴포넌트 문서 자동 추가 ────
 
-const [, , cmd = "help", ...args] = process.argv;
+const [, , rawCmd = "help", ...args] = process.argv;
+const cmd = rawCmd === "--help" || rawCmd === "-h" ? "help" : rawCmd === "--version" || rawCmd === "-v" ? "version" : rawCmd;
+maybeCheckCliVersion({
+  command: cmd,
+  currentVersion: CLI_VERSION,
+  errorImpl: error,
+  processEnv: process.env,
+  warnImpl: warn,
+});
 
 if (commands[cmd]) {
   Promise.resolve(commands[cmd](...args)).catch((e) => {

package/lib/cli-artifact-guard.mjs

@@ -0,0 +1,69 @@
+export const REQUIRED_CLI_TARBALL_FILES = Object.freeze([
+  "bin/gencow.mjs",
+  "bin/gencow-mcp.mjs",
+  "lib/readme-codegen.mjs",
+  "lib/deploy-auditor.mjs",
+  "lib/dev-cloud-bundle.mjs",
+  "lib/codegen/index.mjs",
+  "server/index.js",
+  "core/index.js",
+  "dashboard/index.html",
+]);
+
+const FORBIDDEN_CODEGEN_CORE_IMPORTS = Object.freeze([
+  {
+    id: "server-only-procedure-route-collector",
+    pattern: /(?:import\s*{[^}]*\bcollectProcedureRouteMaps\b[^}]*}\s*from\s*["']@gencow\/core["']|collectProcedureRouteMaps[\s\S]{0,240}from\s*["']@gencow\/core["'])/,
+    message: "@gencow/core에서 server-only procedure route collector를 import합니다",
+  },
+]);
+
+export function validateCliTarballFiles(files, requiredFiles = REQUIRED_CLI_TARBALL_FILES) {
+  const fileSet = new Set(files);
+  const errors = [];
+  const forbiddenSourceFiles = files.filter((path) => path === "src" || path.startsWith("src/"));
+
+  for (const path of forbiddenSourceFiles) {
+    errors.push({
+      code: "forbidden-source-file",
+      path,
+      message: "packages/cli/src 는 npm tarball에 포함되면 안 됩니다",
+    });
+  }
+
+  for (const path of requiredFiles) {
+    if (!fileSet.has(path)) {
+      errors.push({
+        code: "missing-required-file",
+        path,
+        message: "필수 CLI artifact가 npm tarball에 없습니다",
+      });
+    }
+  }
+
+  return {
+    ok: errors.length === 0,
+    errors,
+  };
+}
+
+export function validateGeneratedCodegenBundle(source) {
+  const errors = [];
+  for (const rule of FORBIDDEN_CODEGEN_CORE_IMPORTS) {
+    if (rule.pattern.test(source)) {
+      errors.push({
+        code: rule.id,
+        path: "lib/codegen/index.mjs",
+        message: rule.message,
+      });
+    }
+  }
+  return {
+    ok: errors.length === 0,
+    errors,
+  };
+}
+
+export function formatArtifactGuardErrors(errors) {
+  return errors.map((error) => `  ❌ ${error.path} — ${error.message}`).join("\n");
+}

package/lib/cli-version-check.mjs

@@ -0,0 +1,146 @@
+import { execFileSync } from "child_process";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { dirname, resolve } from "path";
+
+const DEFAULT_CACHE_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+const DEFAULT_NPM_TIMEOUT_MS = 1500;
+
+function isEnabled(value) {
+  return value === "1" || value === "true" || value === "yes";
+}
+
+export function parseCliSemver(version) {
+  const match = String(version ?? "").trim().match(/^v?(\d+)\.(\d+)\.(\d+)/);
+  if (!match) return null;
+  return {
+    major: Number(match[1]),
+    minor: Number(match[2]),
+    patch: Number(match[3]),
+  };
+}
+
+export function compareCliSemver(left, right) {
+  const a = typeof left === "string" ? parseCliSemver(left) : left;
+  const b = typeof right === "string" ? parseCliSemver(right) : right;
+  if (!a || !b) return 0;
+  for (const key of ["major", "minor", "patch"]) {
+    if (a[key] > b[key]) return 1;
+    if (a[key] < b[key]) return -1;
+  }
+  return 0;
+}
+
+export function shouldWarnForStaleCli({ currentVersion, latestVersion }) {
+  return compareCliSemver(latestVersion, currentVersion) > 0;
+}
+
+export function resolveVersionCheckCachePath({ homeDir = homedir(), processEnv = process.env } = {}) {
+  return processEnv.GENCOW_VERSION_CHECK_CACHE || resolve(homeDir, ".gencow", "version-check.json");
+}
+
+function readCache(cachePath, { existsSyncImpl = existsSync, readFileSyncImpl = readFileSync } = {}) {
+  try {
+    if (!existsSyncImpl(cachePath)) return {};
+    return JSON.parse(readFileSyncImpl(cachePath, "utf8"));
+  } catch {
+    return {};
+  }
+}
+
+function writeCache(cachePath, cache, { mkdirSyncImpl = mkdirSync, writeFileSyncImpl = writeFileSync } = {}) {
+  try {
+    mkdirSyncImpl(dirname(cachePath), { recursive: true });
+    writeFileSyncImpl(cachePath, JSON.stringify(cache, null, 2) + "\n");
+  } catch {
+    /* version check cache must never break CLI commands */
+  }
+}
+
+function isFresh(timestamp, now, maxAgeMs) {
+  return typeof timestamp === "number" && now - timestamp >= 0 && now - timestamp < maxAgeMs;
+}
+
+function fetchLatestVersion({ execFileSyncImpl = execFileSync, timeoutMs = DEFAULT_NPM_TIMEOUT_MS } = {}) {
+  return String(
+    execFileSyncImpl("npm", ["view", "gencow", "version", "--silent"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: timeoutMs,
+    }),
+  ).trim();
+}
+
+export function formatStaleCliWarning({ currentVersion, latestVersion, command }) {
+  const suffix = command ? ` ${command}` : "";
+  return [
+    `Gencow CLI is older than npm latest (current ${currentVersion}, latest ${latestVersion}).`,
+    `Use project-local/latest CLI for verification: bunx gencow@latest${suffix}`,
+    "If this came from a global install, check: which gencow && gencow --version",
+    "Skip this check with GENCOW_SKIP_VERSION_CHECK=true.",
+  ].join("\n");
+}
+
+export function maybeCheckCliVersion({
+  cacheMaxAgeMs = DEFAULT_CACHE_MAX_AGE_MS,
+  command,
+  currentVersion,
+  errorImpl = console.error,
+  execFileSyncImpl = execFileSync,
+  exitImpl = (code) => process.exit(code),
+  existsSyncImpl = existsSync,
+  homeDirImpl = homedir,
+  mkdirSyncImpl = mkdirSync,
+  nowImpl = () => Date.now(),
+  processEnv = process.env,
+  readFileSyncImpl = readFileSync,
+  warnImpl = console.warn,
+  writeFileSyncImpl = writeFileSync,
+} = {}) {
+  if (isEnabled(processEnv.GENCOW_SKIP_VERSION_CHECK)) {
+    return { status: "skipped" };
+  }
+  if (command === "help" || command === "version") {
+    return { status: "skipped" };
+  }
+
+  const requireLatest = isEnabled(processEnv.GENCOW_REQUIRE_LATEST_CLI);
+  const now = nowImpl();
+  const cachePath = resolveVersionCheckCachePath({ homeDir: homeDirImpl(), processEnv });
+  const cache = readCache(cachePath, { existsSyncImpl, readFileSyncImpl });
+  let latestVersion = cache.latestVersion;
+
+  if (!latestVersion || !isFresh(cache.checkedAt, now, cacheMaxAgeMs)) {
+    try {
+      latestVersion = fetchLatestVersion({ execFileSyncImpl });
+      cache.latestVersion = latestVersion;
+      cache.checkedAt = now;
+      writeCache(cachePath, cache, { mkdirSyncImpl, writeFileSyncImpl });
+    } catch (caught) {
+      return { status: "unverified", error: caught };
+    }
+  }
+
+  if (!shouldWarnForStaleCli({ currentVersion, latestVersion })) {
+    return { status: "fresh", latestVersion };
+  }
+
+  const message = formatStaleCliWarning({ currentVersion, latestVersion, command });
+  if (requireLatest) {
+    errorImpl(message);
+    exitImpl(1);
+    return { status: "blocked", latestVersion };
+  }
+
+  const warnedRecently =
+    cache.warnedForVersion === latestVersion && isFresh(cache.warnedAt, now, cacheMaxAgeMs);
+  if (!warnedRecently) {
+    warnImpl(message);
+    cache.warnedAt = now;
+    cache.warnedForVersion = latestVersion;
+    writeCache(cachePath, cache, { mkdirSyncImpl, writeFileSyncImpl });
+    return { status: "warned", latestVersion };
+  }
+
+  return { status: "stale-suppressed", latestVersion };
+}

package/lib/init-command.mjs

@@ -13,9 +13,13 @@ export const INIT_TEMPLATES = [
   {
     id: "fullstack",
     label: "Tasks + Files + AI Chat + Agent 백엔드",
-    deps: { ai: "^4.0.0", "@ai-sdk/openai": "^1.0.0" },
+    deps: { ai: "^5.0.0", "@ai-sdk/openai": "^2.0.0", "@ai-sdk/provider-utils": "^3.0.0" },
+  },
+  {
+    id: "ai-chat",
+    label: "AI 챗봇 + Memory 백엔드",
+    deps: { ai: "^5.0.0", "@ai-sdk/openai": "^2.0.0", "@ai-sdk/provider-utils": "^3.0.0" },
   },
-  { id: "ai-chat", label: "AI 챗봇 + Memory 백엔드", deps: { ai: "^4.0.0", "@ai-sdk/openai": "^1.0.0" } },
 ];
 
 const BASE_DEPS = {
@@ -30,11 +34,19 @@ const BASE_DEPS = {
 };
 
 const DEFAULT_SCRIPTS = {
+  codegen: "gencow codegen",
   dev: "gencow dev",
+  typecheck: "tsc --noEmit",
+  build: "tsc -p tsconfig.json",
   "db:push": "gencow db:push",
   "db:generate": "gencow db:generate",
 };
 
+const DEFAULT_DEV_DEPS = {
+  "@types/node": "^20.0.0",
+  typescript: "^5.0.0",
+};
+
 const GENERATED_CODEGEN_ARTIFACTS = ["api.ts", "db.d.ts", "operations.d.ts", "zod.ts"];
 const CODEGEN_ARTIFACT_DIRS = ["src/gencow", "gencow"];
 
@@ -127,6 +139,7 @@ export function parseInitArgs(initArgs) {
     force: false,
     help: false,
     name: null,
+    noInstall: false,
     templateId: null,
   };
 
@@ -138,6 +151,8 @@ export function parseInitArgs(initArgs) {
       parsed.templateId = initArgs[++i] ?? null;
     } else if (arg === "--force" || arg === "-f") {
       parsed.force = true;
+    } else if (arg === "--no-install") {
+      parsed.noInstall = true;
     } else if (!arg.startsWith("-")) {
       parsed.name = arg;
     }
@@ -160,6 +175,10 @@ export function buildInitPackageJson({ name, templateDeps = {}, existingPackageJ
     ...BASE_DEPS,
     ...templateDeps,
   };
+  pkg.devDependencies = {
+    ...(existingPackageJson?.devDependencies || {}),
+    ...DEFAULT_DEV_DEPS,
+  };
   pkg.scripts = { ...(existingPackageJson?.scripts || {}) };
 
   for (const [key, value] of Object.entries(DEFAULT_SCRIPTS)) {
@@ -194,7 +213,8 @@ function renderInitHelp(logImpl) {
   logImpl(`    ${CYAN}name${RESET}               Project name (creates directory) or "." for current dir\n`);
   logImpl(`  ${BOLD}Options:${RESET}`);
   logImpl(`    ${DIM}--template, -t${RESET}     Select template (default, task-app, fullstack, ai-chat)`);
-  logImpl(`    ${DIM}--force, -f${RESET}        Initialize in non-empty directory\n`);
+  logImpl(`    ${DIM}--force, -f${RESET}        Initialize in non-empty directory`);
+  logImpl(`    ${DIM}--no-install${RESET}       Skip dependency install (CI/canary)\n`);
   logImpl(`  ${BOLD}Examples:${RESET}`);
   logImpl(`    gencow init my-app`);
   logImpl(`    gencow init . --force`);
@@ -268,7 +288,7 @@ export function createInitCommand({
       return;
     }
 
-    let { name, templateId, force } = parsed;
+    let { name, templateId, force, noInstall } = parsed;
     if (!name) {
       name = await promptQuestion(`\n  ${DIM}Enter project name (current folder: .):${RESET} `, {
         createInterfaceImpl,
@@ -493,16 +513,20 @@ export function createInitCommand({
     }
     successImpl("Linked @gencow/core + drizzle-orm + hono (when resolvable)");
 
-    infoImpl("Installing dependencies...");
-    try {
-      execSyncImpl("bun install", { cwd: projectDir, stdio: ["ignore", "pipe", "pipe"] });
-      successImpl("Dependencies installed");
-    } catch {
-      warnImpl(
-        "Package install failed — " +
-          (isCwd ? "bun install" : "cd " + name + " && bun install") +
-          " to install manually",
-      );
+    if (noInstall) {
+      infoImpl("Skipping dependency install (--no-install).");
+    } else {
+      infoImpl("Installing dependencies...");
+      try {
+        execSyncImpl("bun install", { cwd: projectDir, stdio: ["ignore", "pipe", "pipe"] });
+        successImpl("Dependencies installed");
+      } catch {
+        warnImpl(
+          "Package install failed — " +
+            (isCwd ? "bun install" : "cd " + name + " && bun install") +
+            " to install manually",
+        );
+      }
     }
 
     logImpl(renderNextSteps({ isCwd, name, templateId: template.id }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.146",
+  "version": "0.1.147",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {

package/scripts/pre-publish-check.mjs

@@ -11,20 +11,18 @@ import { execSync } from "child_process";
 import { readFileSync, existsSync } from "fs";
 import { resolve, dirname, relative, join } from "path";
 import { fileURLToPath } from "url";
+import {
+  REQUIRED_CLI_TARBALL_FILES,
+  formatArtifactGuardErrors,
+  validateCliTarballFiles,
+  validateGeneratedCodegenBundle,
+} from "../lib/cli-artifact-guard.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const CLI_ROOT = resolve(__dirname, "..");
 
 // ── 1. 필수 파일 목록 (반드시 tarball에 포함되어야 함) ─────
-const REQUIRED_FILES = [
-  "bin/gencow.mjs",
-  "bin/gencow-mcp.mjs",
-  "lib/readme-codegen.mjs",
-  "lib/deploy-auditor.mjs",
-  "lib/codegen/index.mjs",
-  "server/index.js",
-  "core/index.js",
-];
+const REQUIRED_FILES = REQUIRED_CLI_TARBALL_FILES;
 
 // ── 2. gencow.mjs에서 import 경로 자동 추출 ───────────────
 function extractImports(entryFile) {
@@ -67,9 +65,9 @@ function checkGeneratedCodegenBundle() {
     return false;
   }
 
-  const bundledCodegen = readFileSync(codegenBundlePath, "utf8");
-  if (/collectProcedureRouteMaps[\s\S]{0,240}from "@gencow\/core"/.test(bundledCodegen)) {
-    console.error("  ❌ lib/codegen/index.mjs — @gencow/core에서 server-only procedure route collector를 import합니다");
+  const validation = validateGeneratedCodegenBundle(readFileSync(codegenBundlePath, "utf8"));
+  if (!validation.ok) {
+    console.error(formatArtifactGuardErrors(validation.errors));
     console.error("     packages/cli/src/codegen/frontend/registry-extractor.ts를 확인한 뒤 CLI build를 다시 실행하세요");
     return false;
   }
@@ -94,13 +92,14 @@ function main() {
   }
 
   const tarballSet = new Set(tarballFiles);
+  const tarballValidation = validateCliTarballFiles(tarballFiles, REQUIRED_FILES);
 
   // 4-1b. TypeScript 소스(src/)는 번들 산출물만 배포 — tarball에 포함되면 실패
   console.log("  ── 소스 디렉터리 제외 확인 ───────────────");
-  const forbiddenSource = tarballFiles.filter((p) => p === "src" || p.startsWith("src/"));
+  const forbiddenSource = tarballValidation.errors.filter((item) => item.code === "forbidden-source-file");
   if (forbiddenSource.length > 0) {
-    for (const p of forbiddenSource) {
-      console.error(`  ❌ ${p} — packages/cli/src 는 npm 에 포함되면 안 됩니다 (lib/ 번들만 배포)`);
+    for (const item of forbiddenSource) {
+      console.error(`  ❌ ${item.path} — ${item.message} (lib/ 번들만 배포)`);
     }
     hasError = true;
   } else {

package/templates/ai-chat/ai.ts

@@ -8,14 +8,13 @@ import {
   embed as aiEmbed,
   embedMany as aiEmbedMany,
   generateObject as aiGenerateObject,
-  type FlexibleSchema,
   type GenerateObjectResult,
-  type InferSchema,
   type LanguageModel,
   type LanguageModelUsage,
   type ModelMessage,
   type ToolSet,
 } from "ai";
+import type { FlexibleSchema, InferSchema } from "@ai-sdk/provider-utils";
 import { createOpenAI } from "@ai-sdk/openai";
 
 // ── Gencow AI 자동 전환 ─────────────────────────────────

package/templates/ai-chat/chat.ts

@@ -14,6 +14,11 @@ import { query, mutation, v } from "@gencow/core";
 import { ai } from "./ai";
 import { conversations, messages } from "./schema";
 
+type ChatMessageRow = {
+  role: string;
+  content: string;
+};
+
 // ─── Queries ─────────────────────────────────────────────
 
 export const listConversations = query("chat.listConversations", {
@@ -31,18 +36,20 @@ export const getMessages = query("chat.getMessages", {
   args: { conversationId: v.number() },
   handler: async (ctx, args) => {
     const user = ctx.auth.requireAuth(); // 🔒 인증 필수
+    const conversationId = args.conversationId;
+    if (typeof conversationId !== "number") return [];
 
     // 🔒 대화 소유권 확인 (다른 사람 대화 메시지 조회 차단)
     const conv = await ctx.db
       .select()
       .from(conversations)
-      .where(and(eq(conversations.id, args.conversationId), eq(conversations.userId, user.id)));
+      .where(and(eq(conversations.id, conversationId), eq(conversations.userId, user.id)));
     if (conv.length === 0) return [];
 
     return await ctx.db
       .select()
       .from(messages)
-      .where(eq(messages.conversationId, args.conversationId))
+      .where(eq(messages.conversationId, conversationId))
       .orderBy(messages.createdAt);
   },
 });
@@ -57,6 +64,11 @@ export const send = mutation({
   },
   handler: async (ctx, args) => {
     const user = ctx.auth.requireAuth(); // 🔒 인증 필수
+    const userMessage = args.message;
+    if (typeof userMessage !== "string" || userMessage.trim().length === 0) {
+      throw new Error("Message is required");
+    }
+
     let convId = args.conversationId;
 
     // 새 대화 자동 생성
@@ -64,10 +76,11 @@ export const send = mutation({
       const [conv] = await ctx.db
         .insert(conversations)
         .values({
-          title: args.message.slice(0, 50),
+          title: userMessage.slice(0, 50),
           userId: user.id, // 🔒 소유자 기록
         })
         .returning();
+      if (!conv?.id) throw new Error("Conversation creation failed");
       convId = conv.id;
     } else {
       // 🔒 기존 대화 소유권 확인
@@ -79,12 +92,13 @@ export const send = mutation({
         throw new Error("Conversation not found");
       }
     }
+    if (typeof convId !== "number") throw new Error("Conversation not found");
 
     // 사용자 메시지 저장
     await ctx.db.insert(messages).values({
       conversationId: convId,
       role: "user",
-      content: args.message,
+      content: userMessage,
     });
 
     // 대화 히스토리 로드
@@ -99,7 +113,7 @@ export const send = mutation({
       model: "gpt-4o-mini",
       messages: [
         { role: "system", content: "You are a helpful assistant. 한국어로 답변해주세요." },
-        ...history.map((m) => ({ role: m.role, content: m.content })),
+        ...(history as ChatMessageRow[]).map((m: ChatMessageRow) => ({ role: m.role, content: m.content })),
       ],
     });
 

package/templates/ai.ts

@@ -8,14 +8,13 @@ import {
   embed as aiEmbed,
   embedMany as aiEmbedMany,
   generateObject as aiGenerateObject,
-  type FlexibleSchema,
   type GenerateObjectResult,
-  type InferSchema,
   type LanguageModel,
   type LanguageModelUsage,
   type ModelMessage,
   type ToolSet,
 } from "ai";
+import type { FlexibleSchema, InferSchema } from "@ai-sdk/provider-utils";
 import { createOpenAI } from "@ai-sdk/openai";
 
 // ── Gencow AI 자동 전환 ─────────────────────────────────

package/templates/fullstack/ai.ts

@@ -8,14 +8,13 @@ import {
   embed as aiEmbed,
   embedMany as aiEmbedMany,
   generateObject as aiGenerateObject,
-  type FlexibleSchema,
   type GenerateObjectResult,
-  type InferSchema,
   type LanguageModel,
   type LanguageModelUsage,
   type ModelMessage,
   type ToolSet,
 } from "ai";
+import type { FlexibleSchema, InferSchema } from "@ai-sdk/provider-utils";
 import { createOpenAI } from "@ai-sdk/openai";
 
 // ── Gencow AI 자동 전환 ─────────────────────────────────