sayren 0.6.1 → 0.8.0

package/dist/index.mjs

@@ -890,7 +890,8 @@ const cli_app_dev_error = ((inputs, options = {}) => {
 const ko_cli_app_dev_listening = (i) => {
 	return `앱 로컬 실행 중 http://localhost:${i?.port} — 상점 ${i?.store} · 이벤트 ${i?.events}
   이벤트: npx sayren app trigger ORDER.PAID --order <orderId>
-  HTTP: http://localhost:${i?.port}/_http/<경로>
+  HTTP: http://localhost:${i?.port}/_http/<경로> · 공개 HTTP: http://localhost:${i?.port}/hooks/<설치 id>/<경로>
+  예약 작업: npx sayren app trigger --schedule <이름>
   설정·비밀 값: .env의 SAYREN_APP_SETTING_*·SAYREN_APP_SECRET_*
 종료는 Ctrl-C`;
 };
@@ -1036,7 +1037,7 @@ const cli_app_handle_mismatch = ((inputs, options = {}) => {
 /** @typedef {import('../runtime.js').LocalizedString} LocalizedString */
 /** @typedef {{ events: NonNullable<unknown> }} Cli_App_Handler_MissingInputs */
 const ko_cli_app_handler_missing = (i) => {
-	return `매니페스트 events에 있지만 이벤트 함수가 없습니다: ${i?.events} (HANDLER_MISSING)`;
+	return `매니페스트(events·schedules·http.public·flow.notifications·mcp.tools)에 있지만 코드에 함수가 없습니다: ${i?.events} (HANDLER_MISSING)`;
 };
 /**
 
@@ -1532,7 +1533,7 @@ const cli_app_trigger_failed = ((inputs, options = {}) => {
 /** @typedef {import('../runtime.js').LocalizedString} LocalizedString */
 /** @typedef {{}} Cli_App_Trigger_Type_RequiredInputs */
 const ko_cli_app_trigger_type_required = () => {
-	return `이벤트 종류가 필요합니다. 예: npx sayren app trigger ORDER.PAID --order ord_…`;
+	return `이벤트 종류가 필요합니다. 예: npx sayren app trigger ORDER.PAID --order ord_… (예약 작업은 --schedule <이름>)`;
 };
 /**
 
@@ -5249,11 +5250,15 @@ const ko_cli_usage = (i) => {
   --key <키>           app: 앱 배포 키(developer.sayren.app에서 발행, SAYREN_APP_KEY). CI에서 deploy·release·status·logs·secret에 씁니다
   -m, --message <메모> app deploy: 버전 메모
   --name <이름>        app init: 앱 이름(기본: handle)
+  --private-store <storeId>  app init: 이 상점 하나에만 설치되는 비공개 앱으로 만듭니다
   --port <포트>        app dev·trigger: 로컬 포트(기본 4020)
   --since <기간>       app logs: 최근 기간만(30m·1h·2d)
   --tail               app logs: 새 기록을 계속 봅니다
   --data <json>        app trigger: 이벤트 데이터
   --order <orderId>    app trigger: 주문 id를 데이터에 넣습니다
+  --schedule <이름>    app trigger: 이벤트 대신 예약 작업을 실행합니다
+  --flow <이름>        app trigger: 이벤트 대신 흐름 알림을 보냅니다(--data는 알림 값)
+  --tool <이름>        app trigger: 이벤트 대신 에이전트 도구를 부릅니다(--data는 입력)
   --lang <로케일>      메시지 언어(기본: SAYREN_LANG → 시스템 로케일 → ko)
 
 종료 코드: 0 성공 · 1 실패 · 3 승인 대기(에이전트 토큰)`;
@@ -9177,7 +9182,7 @@ async function selectStore(auth, client, io, candidates, folderStore = null) {
 
 //#endregion
 //#region package.json
-var version = "0.6.1";
+var version = "0.8.0";
 
 //#endregion
 //#region src/client.ts
@@ -9391,7 +9396,10 @@ async function loadBundle(dir, server) {
 		app,
 		meta: {
 			events: [...meta.events],
-			http: [...meta.http]
+			http: [...meta.http],
+			schedules: [...meta.schedules ?? []],
+			flows: [...meta.flows ?? []],
+			tools: [...meta.tools ?? []]
 		}
 	};
 }
@@ -9432,14 +9440,39 @@ function collectListing(dir, manifest) {
 	};
 }
 /** 로컬 검사 — 매니페스트, 번들, 이벤트 함수 존재, 비밀 값 형식, 크기. 서버 `VERIFY`·`BUNDLE`과 같은 규칙 */
+/**
+* 외부 런타임 앱(매뉴얼 「개발자 서버에서 실행」)이 올리는 서버 자리 — 코드는 개발자 서버에 있어 sayren 실행 환경에는 이것만 둔다(호출되지 않는다)
+*/
+const EXTERNAL_STUB_SERVER = "export default { fetch() { return new Response(\"external runtime\", { status: 404 }); } };\n";
+const EMPTY_META = {
+	events: [],
+	http: [],
+	schedules: [],
+	flows: [],
+	tools: []
+};
 async function verifyApp(dir) {
 	const { raw, manifest } = loadManifest(dir);
-	const server = await bundleServer(dir);
+	const external = manifest.runtime === "external";
+	const server = external ? EXTERNAL_STUB_SERVER : await bundleServer(dir);
 	if (APP_SECRET_PATTERNS.find((pattern) => pattern.test(server))) throw new CliError(cli_app_secret_in_source());
 	const gzipBytes = gzipSync(server).byteLength;
 	if (gzipBytes > APP_SERVER_BUNDLE_MAX_GZIP_BYTES) throw new CliError(cli_app_bundle_too_large({ size: formatMb(gzipBytes) }));
-	const { app, meta } = await loadBundle(dir, server);
-	const missing = manifest.events.filter((event) => !meta.events.includes(event));
+	const { app, meta } = external ? {
+		app: {
+			fetch: async () => new Response("external runtime", { status: 404 }),
+			__sayrenApp: EMPTY_META
+		},
+		meta: { ...EMPTY_META }
+	} : await loadBundle(dir, server);
+	const httpKeys = new Set(meta.http.map((key) => key.trim().replace(/\s+/g, " ")));
+	const missing = external ? [] : [
+		...manifest.events.filter((event) => !meta.events.includes(event)),
+		...Object.keys(manifest.schedules).filter((name) => !meta.schedules.includes(name)),
+		...Object.keys(manifest.flow?.notifications ?? {}).filter((name) => !meta.flows.includes(name)),
+		...Object.keys(manifest.mcp?.tools ?? {}).filter((name) => !meta.tools.includes(name)),
+		...(manifest.http?.public ?? []).filter((key) => !httpKeys.has(key))
+	];
 	if (missing.length) throw new CliError(cli_app_handler_missing({ events: missing.join(", ") }));
 	const warnings = [];
 	const listed = manifest.events;
@@ -9554,9 +9587,11 @@ async function appInit(handle, flags, io) {
 	if (existsSync(join(dir, APP_MANIFEST_FILE))) throw new CliError(cli_app_dir_exists({ dir: relative(io.cwd, dir) || "." }));
 	const name = flags.name?.trim() || handle;
 	const auth = await developerAuth(flags, dir, io, { accountOnly: true });
+	const privateStoreId = flags.privateStore?.trim();
 	const app = await devApi(auth, io, "POST", "/apps", {
 		handle,
-		name
+		name,
+		...privateStoreId ? { privateStoreId } : {}
 	});
 	mkdirSync(join(dir, "src"), { recursive: true });
 	for (const [path, content] of Object.entries(initFiles(handle, name))) {
@@ -9803,15 +9838,27 @@ function devEnvelope(input) {
 			versionNumber: 0,
 			storeId: input.token?.storeId ?? "store_dev",
 			storeName: "(dev)",
-			apiBaseUrl: input.apiBaseUrl
+			apiBaseUrl: input.apiBaseUrl,
+			publicBaseUrl: `${input.publicOrigin}/hooks/${input.token?.installationId ?? "inst_dev"}`
 		},
 		token: input.token?.token ?? null,
 		settings: input.settings,
 		secrets: input.secrets,
-		...input.kind === "http" ? { user: {
+		...input.kind === "http" && !input.public ? { user: {
 			userId: "user_dev",
 			role: "OWNER"
 		} } : {},
+		...input.schedule ? { schedule: input.schedule } : {},
+		...input.tool ? { tool: input.tool } : {},
+		...input.flow ? { flow: {
+			orderId: "ord_dev",
+			orderItemIds: ["oi_dev"],
+			flowId: "flow_dev",
+			flowVersion: 1,
+			state: "dev",
+			params: {},
+			...input.flow
+		} } : {},
 		...input.event ? { event: {
 			id: `evt_dev_${devSeq}`,
 			type: input.event.type,
@@ -9880,12 +9927,71 @@ async function appDev(flags, io) {
 	await ensureToken();
 	const local = () => localSettingsOf(manifest, readEnvFile(dir));
 	const apiBaseUrl = `${state.apiOrigin}/v1`;
+	const publicOrigin = `http://localhost:${port}`;
 	const uiRoot = join(dir, UI_DIR);
 	const handle = async (req, res) => {
 		const url = new URL(req.url ?? "/", `http://localhost:${port}`);
 		try {
 			if (req.method === "POST" && url.pathname === "/_trigger") {
 				const body = JSON.parse(await readBody(req) || "{}");
+				if (body.tool) {
+					const { settings: settings$1, secrets: secrets$1 } = local();
+					const result$1 = await invokeLocal(app, devEnvelope({
+						kind: "tool",
+						tool: {
+							name: body.tool,
+							input: body.data ?? {}
+						},
+						publicOrigin,
+						token: await ensureToken(),
+						apiBaseUrl,
+						appId: state.appId,
+						settings: settings$1,
+						secrets: secrets$1
+					}));
+					printResult(`[tool] ${body.tool}`, result$1, io);
+					if (result$1.response?.body) io.out(`  → ${result$1.response.body}`);
+					res.writeHead(200, { "content-type": "application/json" });
+					res.end(JSON.stringify(result$1));
+					return;
+				}
+				if (body.flow) {
+					const { settings: settings$1, secrets: secrets$1 } = local();
+					const result$1 = await invokeLocal(app, devEnvelope({
+						kind: "flow",
+						flow: {
+							...body.data ?? {},
+							name: body.flow
+						},
+						publicOrigin,
+						token: await ensureToken(),
+						apiBaseUrl,
+						appId: state.appId,
+						settings: settings$1,
+						secrets: secrets$1
+					}));
+					printResult(`[flow] ${body.flow}`, result$1, io);
+					res.writeHead(200, { "content-type": "application/json" });
+					res.end(JSON.stringify(result$1));
+					return;
+				}
+				if (body.schedule) {
+					const { settings: settings$1, secrets: secrets$1 } = local();
+					const result$1 = await invokeLocal(app, devEnvelope({
+						kind: "schedule",
+						schedule: body.schedule,
+						publicOrigin,
+						token: await ensureToken(),
+						apiBaseUrl,
+						appId: state.appId,
+						settings: settings$1,
+						secrets: secrets$1
+					}));
+					printResult(`[schedule] ${body.schedule}`, result$1, io);
+					res.writeHead(200, { "content-type": "application/json" });
+					res.end(JSON.stringify(result$1));
+					return;
+				}
 				if (!body.type) {
 					res.writeHead(400, { "content-type": "application/json" });
 					res.end(JSON.stringify({ error: "TYPE_REQUIRED" }));
@@ -9894,6 +10000,7 @@ async function appDev(flags, io) {
 				const { settings, secrets } = local();
 				const result = await invokeLocal(app, devEnvelope({
 					kind: "event",
+					publicOrigin,
 					token: await ensureToken(),
 					apiBaseUrl,
 					appId: state.appId,
@@ -9909,13 +10016,17 @@ async function appDev(flags, io) {
 				res.end(JSON.stringify(result));
 				return;
 			}
-			if (url.pathname.startsWith("/_http/")) {
+			const hook = /^\/hooks\/[^/]+(\/.*)$/.exec(url.pathname);
+			if (url.pathname.startsWith("/_http/") || hook) {
+				const route = hook ? hook[1] : url.pathname.slice(6);
 				const headers = {};
 				for (const [key, value] of Object.entries(req.headers)) if (typeof value === "string" && key !== "host") headers[key] = value;
 				const method = (req.method ?? "GET").toUpperCase();
 				const { settings, secrets } = local();
 				const result = await invokeLocal(app, devEnvelope({
 					kind: "http",
+					public: Boolean(hook),
+					publicOrigin,
 					token: await ensureToken(),
 					apiBaseUrl,
 					appId: state.appId,
@@ -9923,12 +10034,12 @@ async function appDev(flags, io) {
 					secrets,
 					request: {
 						method,
-						path: `${url.pathname.slice(6)}${url.search}`,
+						path: `${route}${url.search}`,
 						headers,
 						body: method === "GET" ? null : await readBody(req)
 					}
 				}));
-				printResult(`[http] ${method} ${url.pathname}`, result, io);
+				printResult(`[${hook ? "hook" : "http"}] ${method} ${route}`, result, io);
 				if (!result.response) {
 					res.writeHead(500, { "content-type": "application/json" });
 					res.end(JSON.stringify({
@@ -9982,6 +10093,59 @@ async function appDev(flags, io) {
 	return 0;
 }
 async function appTrigger(type, flags, io) {
+	const port = Number(flags.port ?? io.env.SAYREN_APP_PORT ?? APP_DEV_PORT);
+	if (flags.tool) {
+		let toolInput = {};
+		if (flags.data) try {
+			toolInput = JSON.parse(flags.data);
+		} catch {
+			throw new CliError(cli_app_trigger_data_invalid());
+		}
+		const res$1 = await io.fetch(`http://127.0.0.1:${port}/_trigger`, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				tool: flags.tool,
+				data: toolInput
+			})
+		});
+		if (!res$1.ok) throw new CliError(cli_app_trigger_failed({ status: String(res$1.status) }));
+		const result$1 = await res$1.json();
+		printResult(`[tool] ${flags.tool}`, result$1, io);
+		if (result$1.response?.body) io.out(`  → ${result$1.response.body}`);
+		return result$1.outcome === "OK" ? 0 : 1;
+	}
+	if (flags.flow) {
+		let flowData = {};
+		if (flags.data) try {
+			flowData = JSON.parse(flags.data);
+		} catch {
+			throw new CliError(cli_app_trigger_data_invalid());
+		}
+		const res$1 = await io.fetch(`http://127.0.0.1:${port}/_trigger`, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				flow: flags.flow,
+				data: flowData
+			})
+		});
+		if (!res$1.ok) throw new CliError(cli_app_trigger_failed({ status: String(res$1.status) }));
+		const result$1 = await res$1.json();
+		printResult(`[flow] ${flags.flow}`, result$1, io);
+		return result$1.outcome === "OK" ? 0 : 1;
+	}
+	if (flags.schedule) {
+		const res$1 = await io.fetch(`http://127.0.0.1:${port}/_trigger`, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({ schedule: flags.schedule })
+		});
+		if (!res$1.ok) throw new CliError(cli_app_trigger_failed({ status: String(res$1.status) }));
+		const result$1 = await res$1.json();
+		printResult(`[schedule] ${flags.schedule}`, result$1, io);
+		return result$1.outcome === "OK" ? 0 : 1;
+	}
 	if (!type) throw new CliError(cli_app_trigger_type_required());
 	let data = {};
 	if (flags.data) try {
@@ -9993,7 +10157,6 @@ async function appTrigger(type, flags, io) {
 		...data,
 		orderId: flags.order
 	};
-	const port = Number(flags.port ?? io.env.SAYREN_APP_PORT ?? APP_DEV_PORT);
 	const res = await io.fetch(`http://127.0.0.1:${port}/_trigger`, {
 		method: "POST",
 		headers: { "content-type": "application/json" },
@@ -11905,7 +12068,11 @@ const VALUE_FLAGS = new Set([
 	"port",
 	"since",
 	"data",
-	"order"
+	"order",
+	"schedule",
+	"private-store",
+	"flow",
+	"tool"
 ]);
 const BOOL_FLAGS = new Set([
 	"force",
@@ -11990,6 +12157,10 @@ async function main(argv, io) {
 			tail: parsed.flags.tail === true,
 			data: str(parsed.flags.data),
 			order: str(parsed.flags.order),
+			schedule: str(parsed.flags.schedule),
+			privateStore: str(parsed.flags["private-store"]),
+			flow: str(parsed.flags.flow),
+			tool: str(parsed.flags.tool),
 			yes: parsed.flags.yes === true
 		}, io);
 		case "init": return init({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sayren",
-  "version": "0.6.1",
+  "version": "0.8.0",
   "type": "module",
   "description": "sayren CLI — 호스팅 스토어프론트(init·pull·deploy)와 서드파티 앱(app init·dev·deploy·release)",
   "bin": {
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "esbuild": "^0.28.2",
-    "@sayren/store-sdk": "^0.30.11"
+    "@sayren/store-sdk": "^0.30.13"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.14",