@byh3071/vhk 0.5.3 → 0.7.0

package/README.md

@@ -1,12 +1,12 @@
 ---
 id: vhk-readme
-date: 2026-05-23
-tags: [vhk, cli, readme, v0.5.3]
+date: 2026-05-24
+tags: [vhk, cli, readme, v0.6.0]
 ---
 
 # 🔧 VHK — Vibe Harness Kit
 
-> AI 코딩 에이전트를 부리는 사람을 위한 **한국어 풀사이클 CLI** (v0.5.3)
+> AI 코딩 에이전트를 부리는 사람을 위한 **한국어 풀사이클 CLI** (v0.6.0)
 >
 > 🍽️ **VHK는 VHK로 부트스트랩됨** — 이 레포의 `docs/`, `CLAUDE.md`, `.cursorrules`도 `vhk init`이 만들었습니다.
 
@@ -83,12 +83,18 @@ vhk 기획 끝났고 바로 시작
 | `vhk sync` | `규칙`, `맞추기` | RULES.md → `.cursorrules` + CLAUDE.md |
 | `vhk check` | `점검`, `린트` | RULES.md 규칙 위반 검사 |
 | `vhk secure` | `보안` | 시크릿·키 유출 스캔 (`scan` / `스캔` 동일). **CRITICAL/HIGH 발견 시 exit code 1** (CI용) |
-| `vhk ship` | `배포`, `릴리즈` | 배포 체크리스트 + 회고 + 빌드 로그 |
+| `vhk ship` | `출하` | 배포 체크리스트 + 회고 + 빌드 로그 |
 | `vhk doctor` | `환경`, `진단` | Node / npm / pnpm / Git 환경 점검 |
 | `vhk save` | `저장`, `커밋` | git add · commit · push 한 번에 |
 | `vhk undo` | `되돌리기`, `취소` | 최근 커밋 soft reset (변경은 staged 유지) |
 | `vhk diff` | `변경`, `차이` | staged / unstaged / 새 파일 요약 (줄 수 합계는 tracked·HEAD 기준) |
 | `vhk status` | `상태`, `현황` | 브랜치·변경·커밋·원격·버전 대시보드 |
+| `vhk mcp` | — | MCP 서버 시작 (Cursor 등 MCP 클라이언트용, stdio) |
+| `vhk mcp-init` | `mcp설정` | Cursor `.cursor/mcp.json` 자동 생성 |
+| `vhk deploy` | `배포` | 프로덕션 배포 (Vercel / Netlify / Cloudflare 자동 감지) |
+| `vhk env` | `환경변수` | `.env` → `.env.example` 동기화 + `.gitignore`에 `.env` 자동 추가 |
+| `vhk env-check` | `환경변수점검` | `.env.example` 기준 누락 환경변수 검사 |
+| `vhk publish` | `출시` | npm 배포 자동화 (버전 범프 → 빌드 → 테스트 → publish → git tag) |
 
 ### init 옵션
 
@@ -105,6 +111,33 @@ vhk 기획 끝났고 바로 시작
 |------|------|
 | `--since YYYY-MM-DD` | 분석 시작일 (기본: 오늘) |
 
+## Cursor와 MCP로 연동하기
+
+`v0.6.0`부터 vhk는 [Model Context Protocol](https://modelcontextprotocol.io) 서버를 내장합니다. Cursor 채팅에서 자연어로 vhk 도구를 호출할 수 있습니다.
+
+```powershell
+vhk mcp-init           # .cursor/mcp.json 자동 생성
+# → Cursor 재시작 후 채팅에서 자연어로 vhk 도구 호출 가능
+# 예: "상태 알려줘" → Cursor가 vhk status 도구 호출
+```
+
+노출되는 MCP 도구 8개: `save`, `undo`, `status`, `diff`, `ship`, `doctor`, `check`, `recap`.
+
+MCP 서버를 수동으로 띄우려면:
+
+```powershell
+vhk mcp                # stdio 서버 시작 (Cursor가 자동으로 호출)
+```
+
+## v0.6.0 하이라이트
+
+| 기능 | 설명 |
+|------|------|
+| **MCP 서버** | `vhk mcp` — 8개 도구(save/undo/status/diff/ship/doctor/check/recap)를 stdio로 노출. Cursor 등 MCP 클라이언트에서 자연어로 호출 |
+| **mcp-init** | `vhk mcp-init` — Cursor `.cursor/mcp.json` 자동 생성. 재시작 한 번으로 연동 완료 |
+| **자연어 라우팅 확장** | `vhk mcp설정` → `vhk mcp-init` 별칭 |
+| **보안** | MCP save 도구의 shell injection 차단 — 모든 git 호출에 `execFileSync` 사용 |
+
 ## v0.5.3 하이라이트
 
 | 기능 | 설명 |

package/dist/chunk-NJDRNI3S.js

@@ -0,0 +1,316 @@
+#!/usr/bin/env node
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/mcp/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { existsSync, readFileSync } from "fs";
+
+// src/lib/exec.ts
+import { execFileSync } from "child_process";
+var SHIM_BINARIES = /* @__PURE__ */ new Set(["pnpm", "npm", "npx", "yarn"]);
+function platformCmd(cmd) {
+  if (process.platform === "win32" && SHIM_BINARIES.has(cmd)) {
+    return `${cmd}.cmd`;
+  }
+  return cmd;
+}
+function safeExecFile(cmd, args) {
+  try {
+    const out = execFileSync(platformCmd(cmd), args, {
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).toString();
+    return { ok: true, out: out.trim() };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return { ok: false, err: msg };
+  }
+}
+function safeExecFileStream(cmd, args) {
+  try {
+    execFileSync(platformCmd(cmd), args, {
+      encoding: "utf-8",
+      stdio: "inherit"
+    });
+    return { ok: true };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return { ok: false, err: msg };
+  }
+}
+
+// src/mcp/server.ts
+var SERVER_VERSION = "0.7.0";
+function isGitRepo() {
+  return safeExecFile("git", ["rev-parse", "--is-inside-work-tree"]).ok;
+}
+function createVhkMcpServer() {
+  const server = new McpServer({
+    name: "vhk",
+    version: SERVER_VERSION
+  });
+  server.registerTool(
+    "save",
+    {
+      description: "\uBCC0\uACBD\uC0AC\uD56D \uC800\uC7A5 (git add \u2192 commit \u2192 push)",
+      inputSchema: {
+        message: z.string().optional().describe("\uCEE4\uBC0B \uBA54\uC2DC\uC9C0 (\uBE44\uC6B0\uBA74 \uC790\uB3D9 \uC0DD\uC131)")
+      }
+    },
+    async ({ message }) => {
+      if (!isGitRepo()) {
+        return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+      }
+      const status = safeExecFile("git", ["status", "--porcelain"]);
+      if (!status.ok) {
+        return { content: [{ type: "text", text: `\u274C git status \uC2E4\uD328: ${status.err}` }] };
+      }
+      if (!status.out) {
+        return { content: [{ type: "text", text: "\u{1F4ED} \uC800\uC7A5\uD560 \uBCC0\uACBD\uC0AC\uD56D\uC774 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
+      }
+      const files = status.out.split("\n");
+      const now = /* @__PURE__ */ new Date();
+      const ts = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-${String(now.getDate()).padStart(2, "0")} ${String(now.getHours()).padStart(2, "0")}:${String(now.getMinutes()).padStart(2, "0")}`;
+      const commitMsg = message?.trim() || `\u2728 vhk save: ${ts}`;
+      const add = safeExecFile("git", ["add", "."]);
+      if (!add.ok) {
+        return { content: [{ type: "text", text: `\u274C git add \uC2E4\uD328: ${add.err}` }] };
+      }
+      const commit = safeExecFile("git", ["commit", "-m", commitMsg]);
+      if (!commit.ok) {
+        return { content: [{ type: "text", text: `\u274C commit \uC2E4\uD328: ${commit.err}` }] };
+      }
+      const push = safeExecFile("git", ["push"]);
+      const pushResult = push.ok ? "+ \uC6D0\uACA9 \uC5C5\uB85C\uB4DC \uC644\uB8CC" : "(\uC6D0\uACA9 \uC800\uC7A5\uC18C \uC5C6\uAC70\uB098 push \uC2E4\uD328 \u2192 \uC2A4\uD0B5)";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `\u2705 ${files.length}\uAC1C \uD30C\uC77C \uC800\uC7A5 \uC644\uB8CC! ${pushResult}
+\uCEE4\uBC0B: ${commitMsg}`
+          }
+        ]
+      };
+    }
+  );
+  server.registerTool("undo", { description: "\uCD5C\uADFC \uCEE4\uBC0B \uB418\uB3CC\uB9AC\uAE30 (soft reset, \uBCC0\uACBD\uC0AC\uD56D\uC740 \uC720\uC9C0)" }, async () => {
+    if (!isGitRepo()) {
+      return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+    }
+    const last = safeExecFile("git", ["log", "--oneline", "-1"]);
+    if (!last.ok || !last.out) {
+      return { content: [{ type: "text", text: "\u{1F4ED} \uB418\uB3CC\uB9B4 \uCEE4\uBC0B\uC774 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
+    }
+    const reset = safeExecFile("git", ["reset", "--soft", "HEAD~1"]);
+    if (!reset.ok) {
+      return { content: [{ type: "text", text: `\u274C reset \uC2E4\uD328: ${reset.err}` }] };
+    }
+    return {
+      content: [
+        {
+          type: "text",
+          text: `\u2705 \uB418\uB3CC\uB9AC\uAE30 \uC644\uB8CC!
+\uCDE8\uC18C\uB41C \uCEE4\uBC0B: ${last.out}
+\u{1F4A1} \uBCC0\uACBD\uC0AC\uD56D\uC740 \uC2A4\uD14C\uC774\uC9D5 \uC601\uC5ED\uC5D0 \uB0A8\uC544\uC788\uC2B5\uB2C8\uB2E4.`
+        }
+      ]
+    };
+  });
+  server.registerTool("status", { description: "\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uB300\uC2DC\uBCF4\uB4DC (\uBE0C\uB79C\uCE58/\uBCC0\uACBD\uC0AC\uD56D/\uCD5C\uADFC \uCEE4\uBC0B)" }, async () => {
+    const lines = [];
+    if (existsSync("package.json")) {
+      try {
+        const pkg = JSON.parse(readFileSync("package.json", "utf-8"));
+        lines.push(`\u{1F4E6} \uD504\uB85C\uC81D\uD2B8: ${pkg.name ?? "(\uC774\uB984 \uC5C6\uC74C)"} v${pkg.version ?? "?"}`);
+      } catch {
+      }
+    }
+    if (!isGitRepo()) {
+      lines.push("\u26A0\uFE0F  git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4");
+      return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+    const branch = safeExecFile("git", ["branch", "--show-current"]);
+    if (branch.ok) lines.push(`\u{1F33F} \uBE0C\uB79C\uCE58: ${branch.out || "(detached)"}`);
+    const status = safeExecFile("git", ["status", "--porcelain"]);
+    if (status.ok) {
+      if (!status.out) {
+        lines.push("\u{1F4DD} \uBCC0\uACBD\uC0AC\uD56D: \u2705 \uAE68\uB057\uD568");
+      } else {
+        const fileLines = status.out.split("\n");
+        const staged = fileLines.filter((l) => l[0] !== " " && l[0] !== "?").length;
+        const unstaged = fileLines.filter((l) => l[1] === "M" || l[1] === "D").length;
+        const untracked = fileLines.filter((l) => l.startsWith("??")).length;
+        const parts = [];
+        if (staged) parts.push(`\uC2A4\uD14C\uC774\uC9D5 ${staged}\uAC1C`);
+        if (unstaged) parts.push(`\uC218\uC815 ${unstaged}\uAC1C`);
+        if (untracked) parts.push(`\uC0C8\uD30C\uC77C ${untracked}\uAC1C`);
+        lines.push(`\u{1F4DD} \uBCC0\uACBD\uC0AC\uD56D: ${parts.join(", ")}`);
+      }
+    }
+    const log = safeExecFile("git", ["log", "--oneline", "-3"]);
+    if (log.ok && log.out) {
+      lines.push("\u{1F4DC} \uCD5C\uADFC \uCEE4\uBC0B:");
+      log.out.split("\n").forEach((l) => lines.push(`   ${l}`));
+    }
+    return { content: [{ type: "text", text: lines.join("\n") }] };
+  });
+  server.registerTool("diff", { description: "\uBCC0\uACBD\uC0AC\uD56D \uD655\uC778 (staged/unstaged/\uC0C8\uD30C\uC77C + \uCD1D \uBCC0\uACBD \uC694\uC57D)" }, async () => {
+    if (!isGitRepo()) {
+      return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+    }
+    const unstaged = safeExecFile("git", ["diff", "--stat"]);
+    const staged = safeExecFile("git", ["diff", "--cached", "--stat"]);
+    const untracked = safeExecFile("git", ["ls-files", "--others", "--exclude-standard"]);
+    const unstagedOut = unstaged.ok ? unstaged.out : "";
+    const stagedOut = staged.ok ? staged.out : "";
+    const untrackedOut = untracked.ok ? untracked.out : "";
+    if (!unstagedOut && !stagedOut && !untrackedOut) {
+      return { content: [{ type: "text", text: "\u2705 \uBCC0\uACBD\uC0AC\uD56D \uC5C6\uC74C! \uAE68\uB057\uD569\uB2C8\uB2E4." }] };
+    }
+    const lines = [];
+    if (stagedOut) {
+      lines.push("\u{1F4E6} \uCEE4\uBC0B \uB300\uAE30 (staged):");
+      lines.push(stagedOut);
+    }
+    if (unstagedOut) {
+      lines.push("\u270F\uFE0F \uC218\uC815\uB428 (unstaged):");
+      lines.push(unstagedOut);
+    }
+    if (untrackedOut) {
+      const files = untrackedOut.split("\n");
+      lines.push(`\u2795 \uC0C8 \uD30C\uC77C (${files.length}\uAC1C):`);
+      files.forEach((f) => lines.push(`   + ${f}`));
+    }
+    const numstat = safeExecFile("git", ["diff", "--numstat", "HEAD"]);
+    if (numstat.ok && numstat.out) {
+      let totalAdd = 0;
+      let totalDel = 0;
+      let fileCount = 0;
+      numstat.out.split("\n").forEach((line) => {
+        const [add, del] = line.split("	");
+        totalAdd += parseInt(add, 10) || 0;
+        totalDel += parseInt(del, 10) || 0;
+        fileCount += 1;
+      });
+      lines.push(`
+\u{1F4CA} \uCD1D \uBCC0\uACBD: ${fileCount}\uAC1C \uD30C\uC77C, +${totalAdd}\uC904 -${totalDel}\uC904`);
+    }
+    return { content: [{ type: "text", text: lines.join("\n") }] };
+  });
+  server.registerTool("ship", { description: "\uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 \uC2E4\uD589 (\uBE4C\uB4DC + \uD14C\uC2A4\uD2B8 + \uBC84\uC804 + git \uC0C1\uD0DC)" }, async () => {
+    const checks = [];
+    const build = safeExecFile("pnpm", ["build"]);
+    checks.push(build.ok ? "\u2705 \uBE4C\uB4DC \uC131\uACF5" : "\u274C \uBE4C\uB4DC \uC2E4\uD328");
+    const test = safeExecFile("pnpm", ["test", "--run"]);
+    checks.push(test.ok ? "\u2705 \uD14C\uC2A4\uD2B8 \uD1B5\uACFC" : "\u274C \uD14C\uC2A4\uD2B8 \uC2E4\uD328");
+    if (existsSync("package.json")) {
+      try {
+        const pkg = JSON.parse(readFileSync("package.json", "utf-8"));
+        checks.push(`\u{1F4E6} \uBC84\uC804: ${pkg.version}`);
+      } catch {
+      }
+    }
+    if (isGitRepo()) {
+      const status = safeExecFile("git", ["status", "--porcelain"]);
+      if (status.ok) {
+        if (status.out) {
+          checks.push(`\u26A0\uFE0F \uCEE4\uBC0B\uB418\uC9C0 \uC54A\uC740 \uBCC0\uACBD\uC0AC\uD56D ${status.out.split("\n").length}\uAC1C`);
+        } else {
+          checks.push("\u2705 \uC6CC\uD0B9 \uB514\uB809\uD1A0\uB9AC \uAE68\uB057\uD568");
+        }
+      }
+    }
+    return { content: [{ type: "text", text: "\u{1F680} \uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8\n" + checks.join("\n") }] };
+  });
+  server.registerTool("doctor", { description: "\uAC1C\uBC1C \uD658\uACBD \uC810\uAC80 (Node/Git/npm/pnpm/TypeScript)" }, async () => {
+    const checks = [];
+    const node = safeExecFile("node", ["--version"]);
+    checks.push(node.ok ? `\u2705 Node.js: ${node.out}` : "\u274C Node.js: \uC124\uCE58 \uC548 \uB428");
+    const git = safeExecFile("git", ["--version"]);
+    checks.push(git.ok ? `\u2705 Git: ${git.out}` : "\u274C Git: \uC124\uCE58 \uC548 \uB428");
+    const pnpm = safeExecFile("pnpm", ["--version"]);
+    checks.push(pnpm.ok ? `\u2705 pnpm: v${pnpm.out}` : "\u26A0\uFE0F pnpm: \uC124\uCE58 \uC548 \uB428");
+    const npm = safeExecFile("npm", ["--version"]);
+    checks.push(npm.ok ? `\u2705 npm: v${npm.out}` : "\u274C npm: \uC124\uCE58 \uC548 \uB428");
+    const tsc = safeExecFile("npx", ["tsc", "--version"]);
+    checks.push(tsc.ok ? `\u2705 TypeScript: ${tsc.out}` : "\u26A0\uFE0F TypeScript: \uD504\uB85C\uC81D\uD2B8\uC5D0 \uC5C6\uC74C");
+    return { content: [{ type: "text", text: "\u{1FA7A} \uD658\uACBD \uC810\uAC80 \uACB0\uACFC\n" + checks.join("\n") }] };
+  });
+  server.registerTool("check", { description: "\uD504\uB85C\uC81D\uD2B8 \uAD6C\uC870 \uC810\uAC80 (\uD544\uC218 \uD30C\uC77C + VHK \uD558\uB124\uC2A4 \uD30C\uC77C)" }, async () => {
+    const required = ["package.json", "tsconfig.json", "README.md", ".gitignore"];
+    const recommended = ["CLAUDE.md", ".cursorrules", "docs/PRD.md", "docs/ARCHITECTURE.md"];
+    const lines = ["\u{1F50D} \uD504\uB85C\uC81D\uD2B8 \uC810\uAC80", "", "\uD544\uC218:"];
+    required.forEach((f) => {
+      lines.push(`  ${existsSync(f) ? "\u2705" : "\u274C"} ${f}`);
+    });
+    lines.push("", "\uAD8C\uC7A5 (VHK \uD558\uB124\uC2A4):");
+    recommended.forEach((f) => {
+      lines.push(`  ${existsSync(f) ? "\u2705" : "\u26A0\uFE0F"} ${f}`);
+    });
+    return { content: [{ type: "text", text: lines.join("\n") }] };
+  });
+  server.registerTool(
+    "recap",
+    {
+      description: "\uCD5C\uADFC \uC791\uC5C5 \uC694\uC57D (\uCEE4\uBC0B \uD788\uC2A4\uD1A0\uB9AC \uAE30\uBC18, \uB0A0\uC9DC \uD3EC\uD568)",
+      inputSchema: {
+        count: z.number().optional().describe("\uD45C\uC2DC\uD560 \uCEE4\uBC0B \uC218 (\uAE30\uBCF8: 10)")
+      }
+    },
+    async ({ count }) => {
+      if (!isGitRepo()) {
+        return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+      }
+      const n = count && count > 0 ? Math.floor(count) : 10;
+      const log = safeExecFile("git", ["log", "--format=%h %ad %s", "--date=short", `-${n}`]);
+      if (!log.ok) {
+        return { content: [{ type: "text", text: `\u274C git log \uC2E4\uD328: ${log.err}` }] };
+      }
+      if (!log.out) {
+        return { content: [{ type: "text", text: "\u{1F4ED} \uCEE4\uBC0B \uD788\uC2A4\uD1A0\uB9AC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
+      }
+      return { content: [{ type: "text", text: `\u{1F4CB} \uCD5C\uADFC \uC791\uC5C5 (${n}\uAC1C):
+${log.out}` }] };
+    }
+  );
+  return server;
+}
+async function startMcpServer() {
+  const server = createVhkMcpServer();
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+
+export {
+  __commonJS,
+  __toESM,
+  safeExecFile,
+  safeExecFileStream,
+  startMcpServer
+};

package/dist/index.js

@@ -1,29 +1,11 @@
 #!/usr/bin/env node
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
+import {
+  __commonJS,
+  __toESM,
+  safeExecFile,
+  safeExecFileStream,
+  startMcpServer
+} from "./chunk-NJDRNI3S.js";
 
 // node_modules/.pnpm/ignore@7.0.5/node_modules/ignore/index.js
 var require_ignore = __commonJS({
@@ -485,7 +467,7 @@ var require_ignore = __commonJS({
 
 // src/index.ts
 import { Command, Help } from "commander";
-import inquirer8 from "inquirer";
+import inquirer10 from "inquirer";
 
 // src/lib/nlp-router.ts
 function normalize(input) {
@@ -523,6 +505,12 @@ var RULES = [
     confidence: "high",
     test: (t2) => /프로젝트.*(만들|시작)|폴더.*만들|만들고\s*싶|하네스|초기화/.test(t2) || /^시작$/.test(t2)
   },
+  {
+    command: "mcp-init",
+    explanation: "Cursor MCP \uC5F0\uB3D9 \uC124\uC815 (vhk mcp-init)",
+    confidence: "high",
+    test: (t2) => /mcp.*(설정|연동|초기|init)|커서.*(연동|설정|mcp)|cursor.*mcp/.test(t2)
+  },
   {
     command: "secure",
     explanation: "\uBCF4\uC548 \uC2A4\uCE94 (vhk \uBCF4\uC548)",
@@ -585,9 +573,33 @@ var RULES = [
   },
   {
     command: "ship",
-    explanation: "\uBC30\uD3EC \uCCB4\uD06C + \uD68C\uACE0 (vhk ship)",
+    explanation: "\uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 + \uD68C\uACE0 (vhk \uCD9C\uD558)",
+    confidence: "high",
+    test: (t2) => /^출하$|^ship$|빌드\s*전|(배포|출하)\s*(체크|준비|점검)/.test(t2)
+  },
+  {
+    command: "deploy",
+    explanation: "\uD504\uB85C\uB355\uC158 \uBC30\uD3EC (vhk deploy)",
+    confidence: "high",
+    test: (t2) => /^배포$|배포\s*해|배포하|배포해줘|^deploy$|디플로이|vercel|netlify|cloudflare|wrangler|프로덕션|올려줘/.test(t2) && !/체크|준비|점검|출하|회고|빌드\s*전/.test(t2)
+  },
+  {
+    command: "env-check",
+    explanation: "\uD658\uACBD\uBCC0\uC218 \uB204\uB77D \uAC80\uC0AC (vhk env-check)",
+    confidence: "high",
+    test: (t2) => /환경변수\s*(점검|확인|누락)|env\s*(체크|확인|check)|키\s*(확인|누락)/.test(t2)
+  },
+  {
+    command: "env",
+    explanation: "\uD658\uACBD\uBCC0\uC218 \uAD00\uB9AC (vhk env)",
+    confidence: "high",
+    test: (t2) => /환경변수|\.env|env\s*example|env\s*동기화|시크릿\s*정리|키\s*설정/.test(t2) && !/점검|확인|누락|체크|check/.test(t2)
+  },
+  {
+    command: "publish",
+    explanation: "npm \uBC30\uD3EC (vhk publish)",
     confidence: "high",
-    test: (t2) => /배포|출시|릴리스|ship|빌드\s*전/.test(t2)
+    test: (t2) => /^출시$|출시\s*해|^publish$|퍼블리시|npm\s*(배포|출시)|버전\s*올|^릴리즈$|^release$/.test(t2) && !/체크|준비|회고/.test(t2)
   }
 ];
 function routeNaturalLanguage(input) {
@@ -632,8 +644,6 @@ var KNOWN_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "scan",
   "\uC2A4\uCE94",
   "ship",
-  "\uBC30\uD3EC",
-  "\uB9B4\uB9AC\uC988",
   "doctor",
   "\uD658\uACBD",
   "\uC9C4\uB2E8",
@@ -647,6 +657,18 @@ var KNOWN_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "diff",
   "\uBCC0\uACBD",
   "\uCC28\uC774",
+  "mcp",
+  "mcp-init",
+  "mcp\uC124\uC815",
+  "deploy",
+  "\uBC30\uD3EC",
+  "env",
+  "\uD658\uACBD\uBCC0\uC218",
+  "env-check",
+  "\uD658\uACBD\uBCC0\uC218\uC810\uAC80",
+  "publish",
+  "\uCD9C\uC2DC",
+  "\uCD9C\uD558",
   "help"
 ]);
 function isOptionToken(token) {
@@ -670,8 +692,8 @@ function detectNaturalLanguageInput(argv) {
 }
 
 // src/lib/nlp-run.ts
-import chalk16 from "chalk";
-import inquirer7 from "inquirer";
+import chalk20 from "chalk";
+import inquirer9 from "inquirer";
 
 // src/i18n/ko.ts
 var ko = {
@@ -915,6 +937,34 @@ var ko = {
     changelogUpdated: (version) => `CHANGELOG.md \uAC31\uC2E0\uB428 \u2014 [Unreleased] \u2192 [${version}] \uC139\uC158\uC73C\uB85C \uC774\uB3D9`,
     changelogNoUnreleased: "CHANGELOG.md\uC5D0 [Unreleased] \uC139\uC158\uC774 \uC5C6\uC5B4 \uC790\uB3D9 \uAC31\uC2E0\uC744 \uC2A4\uD0B5\uD588\uC5B4\uC694",
     changelogMissing: "CHANGELOG.md\uAC00 \uC5C6\uC5B4\uC694. \uB9CC\uB4E4\uBA74 ship\uC774 \uC790\uB3D9\uC73C\uB85C [Unreleased] \u2192 \uBC84\uC804 \uC139\uC158\uC73C\uB85C \uC62E\uACA8\uC90D\uB2C8\uB2E4."
+  },
+  mcp: {
+    initTitle: "Cursor MCP \uC5F0\uB3D9 \uC124\uC815",
+    serverStarted: "VHK MCP \uC11C\uBC84 \uC2DC\uC791\uB428"
+  },
+  deploy: {
+    title: "\uBC30\uD3EC\uD558\uAE30",
+    selectPlatform: "\uC5B4\uB5A4 \uD50C\uB7AB\uD3FC\uC5D0 \uBC30\uD3EC\uD560\uAE4C\uC694?",
+    deploying: "\uBC30\uD3EC \uC911...",
+    success: "\uBC30\uD3EC \uC131\uACF5!",
+    failed: "\uBC30\uD3EC \uC2E4\uD328"
+  },
+  env: {
+    title: "\uD658\uACBD\uBCC0\uC218 \uAD00\uB9AC",
+    checkTitle: "\uD658\uACBD\uBCC0\uC218 \uC810\uAC80"
+  },
+  publish: {
+    title: "npm \uBC30\uD3EC",
+    selectBump: "\uBC84\uC804\uC744 \uC5B4\uB5BB\uAC8C \uC62C\uB9B4\uAE4C\uC694?",
+    building: "\uBE4C\uB4DC \uC911...",
+    buildSuccess: "\uBE4C\uB4DC \uC131\uACF5",
+    buildFailed: "\uBE4C\uB4DC \uC2E4\uD328",
+    testing: "\uD14C\uC2A4\uD2B8 \uC911...",
+    testSuccess: "\uD14C\uC2A4\uD2B8 \uD1B5\uACFC",
+    testFailed: "\uD14C\uC2A4\uD2B8 \uC2E4\uD328",
+    publishing: "npm \uBC30\uD3EC \uC911...",
+    publishSuccess: "npm \uBC30\uD3EC \uC131\uACF5!",
+    publishFailed: "npm \uBC30\uD3EC \uC2E4\uD328"
   }
 };
 function lookup(path15) {
@@ -3553,6 +3603,360 @@ ${t("diff.summaryHeader")}`));
   console.log("");
 }
 
+// src/commands/mcp-init.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { join } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import chalk16 from "chalk";
+function resolveVhkMcpPath() {
+  try {
+    const pkgPath = join(process.cwd(), "package.json");
+    if (existsSync(pkgPath)) {
+      const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+      if (pkg.name === "@byh3071/vhk") {
+        return join(process.cwd(), "dist", "mcp", "index.js");
+      }
+    }
+  } catch {
+  }
+  try {
+    const url = import.meta.resolve?.("@byh3071/vhk/dist/mcp/index.js");
+    if (typeof url === "string") return fileURLToPath2(url);
+  } catch {
+  }
+  return join(process.cwd(), "node_modules", "@byh3071", "vhk", "dist", "mcp", "index.js");
+}
+async function mcpInit() {
+  console.log(chalk16.bold("\n\u{1F50C} " + t("mcp.initTitle")));
+  console.log(chalk16.gray("\u2500".repeat(40)));
+  const cursorDir = join(process.cwd(), ".cursor");
+  if (!existsSync(cursorDir)) {
+    mkdirSync(cursorDir, { recursive: true });
+  }
+  const configPath = join(cursorDir, "mcp.json");
+  const vhkEntry = {
+    command: "node",
+    args: [resolveVhkMcpPath()]
+  };
+  let config;
+  if (existsSync(configPath)) {
+    try {
+      const parsed = JSON.parse(readFileSync(configPath, "utf-8"));
+      config = {
+        mcpServers: { ...parsed.mcpServers ?? {}, vhk: vhkEntry }
+      };
+    } catch {
+      console.log(chalk16.yellow("\u26A0\uFE0F  \uAE30\uC874 .cursor/mcp.json \uD30C\uC2F1 \uC2E4\uD328 \u2014 \uC0C8 \uD30C\uC77C\uB85C \uB36E\uC5B4\uC501\uB2C8\uB2E4."));
+      config = { mcpServers: { vhk: vhkEntry } };
+    }
+  } else {
+    config = { mcpServers: { vhk: vhkEntry } };
+  }
+  writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  console.log(chalk16.green("\n\u2705 Cursor MCP \uC124\uC815 \uC644\uB8CC!"));
+  console.log(chalk16.cyan("\u{1F4C1} \uC0DD\uC131\uB41C \uD30C\uC77C:"));
+  console.log(`   ${configPath}`);
+  console.log(chalk16.cyan("\n\u{1F504} \uB2E4\uC74C \uB2E8\uACC4:"));
+  console.log("   1. Cursor\uB97C \uC7AC\uC2DC\uC791\uD558\uC138\uC694");
+  console.log("   2. Cursor \uCC44\uD305\uC5D0\uC11C vhk \uB3C4\uAD6C\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4");
+  console.log(chalk16.gray('\n\u{1F4A1} \uC608: "\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uC54C\uB824\uC918" \u2192 Cursor\uAC00 vhk status \uD638\uCD9C'));
+}
+
+// src/commands/deploy.ts
+import { existsSync as existsSync2 } from "fs";
+import chalk17 from "chalk";
+import inquirer7 from "inquirer";
+var PLATFORMS = {
+  vercel: {
+    name: "Vercel",
+    detectFiles: ["vercel.json", ".vercel"],
+    command: "vercel",
+    commandArgs: ["--prod"],
+    checkArgs: ["--version"],
+    installHint: "npm i -g vercel"
+  },
+  netlify: {
+    name: "Netlify",
+    detectFiles: ["netlify.toml", ".netlify"],
+    command: "netlify",
+    commandArgs: ["deploy", "--prod"],
+    checkArgs: ["--version"],
+    installHint: "npm i -g netlify-cli"
+  },
+  cloudflare: {
+    name: "Cloudflare Workers",
+    detectFiles: ["wrangler.toml"],
+    command: "wrangler",
+    commandArgs: ["deploy"],
+    checkArgs: ["--version"],
+    installHint: "npm i -g wrangler"
+  }
+};
+function detectPlatform() {
+  for (const [key, config] of Object.entries(PLATFORMS)) {
+    for (const file of config.detectFiles) {
+      if (existsSync2(file)) return key;
+    }
+  }
+  return null;
+}
+function isCLIAvailable(cmd, checkArgs) {
+  return safeExecFile(cmd, checkArgs).ok;
+}
+async function deploy() {
+  console.log(chalk17.bold("\n\u{1F680} " + t("deploy.title")));
+  console.log(chalk17.gray("\u2500".repeat(40)));
+  let platform = detectPlatform();
+  if (platform) {
+    console.log(chalk17.cyan(`
+\u{1F50D} \uAC10\uC9C0\uB41C \uD50C\uB7AB\uD3FC: ${PLATFORMS[platform].name}`));
+  } else {
+    const { selected } = await inquirer7.prompt([
+      {
+        type: "list",
+        name: "selected",
+        message: t("deploy.selectPlatform"),
+        choices: [
+          { name: "\u25B2 Vercel", value: "vercel" },
+          { name: "\u25C6 Netlify", value: "netlify" },
+          { name: "\u2601 Cloudflare Workers", value: "cloudflare" }
+        ]
+      }
+    ]);
+    platform = selected;
+  }
+  const config = PLATFORMS[platform];
+  if (!isCLIAvailable(config.command, config.checkArgs)) {
+    console.log(chalk17.red(`
+\u274C ${config.name} CLI\uAC00 \uC124\uCE58\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`));
+    console.log(chalk17.yellow(`   \u2192 ${config.installHint}`));
+    return;
+  }
+  const { confirm } = await inquirer7.prompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `${config.name}\uC5D0 \uD504\uB85C\uB355\uC158 \uBC30\uD3EC\uD560\uAE4C\uC694?`,
+      default: true
+    }
+  ]);
+  if (!confirm) {
+    console.log(chalk17.gray("\uCDE8\uC18C\uB428"));
+    return;
+  }
+  console.log(chalk17.cyan(`
+${t("deploy.deploying")}
+`));
+  const result = safeExecFileStream(config.command, config.commandArgs);
+  if (result.ok) {
+    console.log(chalk17.green(`
+\u2705 ${t("deploy.success")}`));
+    printNextStep({
+      message: "\uBC30\uD3EC \uC644\uB8CC! \uC0AC\uC774\uD2B8\uB97C \uD655\uC778\uD558\uC138\uC694.",
+      command: "vhk status",
+      cursorHint: "\uC0C1\uD0DC \uD655\uC778\uD574\uC918"
+    });
+  } else {
+    console.log(chalk17.red(`
+\u274C ${t("deploy.failed")}`));
+    console.log(chalk17.red(result.err));
+  }
+}
+
+// src/commands/env.ts
+import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2, appendFileSync } from "fs";
+import chalk18 from "chalk";
+function parseEnvKeys(content) {
+  return content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#")).map((line) => line.split("=")[0].trim()).filter(Boolean);
+}
+function ensureGitignore() {
+  const gitignorePath = ".gitignore";
+  if (existsSync3(gitignorePath)) {
+    const content = readFileSync2(gitignorePath, "utf-8");
+    if (!content.split("\n").some((l) => l.trim() === ".env")) {
+      appendFileSync(gitignorePath, "\n.env\n");
+      console.log(chalk18.green("\n\u{1F512} .gitignore\uC5D0 .env \uCD94\uAC00\uB428"));
+    }
+  } else {
+    writeFileSync2(gitignorePath, ".env\nnode_modules/\ndist/\n");
+    console.log(chalk18.green("\n\u{1F512} .gitignore \uC0DD\uC131 (.env \uD3EC\uD568)"));
+  }
+}
+async function env() {
+  console.log(chalk18.bold("\n\u{1F510} " + t("env.title")));
+  console.log(chalk18.gray("\u2500".repeat(40)));
+  if (!existsSync3(".env")) {
+    console.log(chalk18.yellow("\n\u26A0\uFE0F  .env \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk18.gray("   .env \uD30C\uC77C\uC744 \uBA3C\uC800 \uB9CC\uB4E4\uC5B4\uC8FC\uC138\uC694."));
+    return;
+  }
+  const envContent = readFileSync2(".env", "utf-8");
+  const keys = parseEnvKeys(envContent);
+  if (keys.length === 0) {
+    console.log(chalk18.yellow("\n\u{1F4ED} .env\uC5D0 \uD658\uACBD\uBCC0\uC218\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    return;
+  }
+  const exampleContent = keys.map((k) => `${k}=`).join("\n") + "\n";
+  writeFileSync2(".env.example", exampleContent, "utf-8");
+  console.log(chalk18.green(`
+\u2705 .env.example \uC0DD\uC131 (${keys.length}\uAC1C \uD0A4)`));
+  keys.forEach((k) => console.log(chalk18.gray(`   ${k}`)));
+  ensureGitignore();
+  printNextStep({
+    message: ".env.example \uC0DD\uC131 \uC644\uB8CC!",
+    command: "vhk env-check",
+    cursorHint: "\uD658\uACBD\uBCC0\uC218 \uC810\uAC80\uD574\uC918"
+  });
+}
+async function envCheck() {
+  console.log(chalk18.bold("\n\u{1F50D} " + t("env.checkTitle")));
+  console.log(chalk18.gray("\u2500".repeat(40)));
+  if (!existsSync3(".env.example")) {
+    console.log(chalk18.yellow("\n\u26A0\uFE0F  .env.example\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 vhk env\uB97C \uC2E4\uD589\uD558\uC138\uC694."));
+    return;
+  }
+  const requiredKeys = parseEnvKeys(readFileSync2(".env.example", "utf-8"));
+  const currentKeys = existsSync3(".env") ? parseEnvKeys(readFileSync2(".env", "utf-8")) : [];
+  const missing = requiredKeys.filter((k) => !currentKeys.includes(k));
+  const extra = currentKeys.filter((k) => !requiredKeys.includes(k));
+  console.log(chalk18.cyan(`
+\u{1F4CB} \uD544\uC218 \uD658\uACBD\uBCC0\uC218: ${requiredKeys.length}\uAC1C`));
+  if (missing.length === 0) {
+    console.log(chalk18.green("\n\u2705 \uBAA8\uB4E0 \uD544\uC218 \uD658\uACBD\uBCC0\uC218\uAC00 \uC124\uC815\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4!"));
+  } else {
+    console.log(chalk18.red(`
+\u274C \uB204\uB77D\uB41C \uD658\uACBD\uBCC0\uC218 (${missing.length}\uAC1C):`));
+    missing.forEach((k) => console.log(chalk18.red(`   \u2022 ${k}`)));
+  }
+  if (extra.length > 0) {
+    console.log(chalk18.yellow(`
+\u{1F4A1} .env.example\uC5D0 \uC5C6\uB294 \uCD94\uAC00 \uBCC0\uC218 (${extra.length}\uAC1C):`));
+    extra.forEach((k) => console.log(chalk18.yellow(`   \u2022 ${k}`)));
+  }
+  ensureGitignore();
+}
+
+// src/commands/publish.ts
+import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import chalk19 from "chalk";
+import inquirer8 from "inquirer";
+import ora2 from "ora";
+function bumpVersion(current, type) {
+  const [major, minor, patch] = current.split(".").map((n) => parseInt(n, 10) || 0);
+  switch (type) {
+    case "major":
+      return `${major + 1}.0.0`;
+    case "minor":
+      return `${major}.${minor + 1}.0`;
+    case "patch":
+      return `${major}.${minor}.${patch + 1}`;
+  }
+}
+async function publish() {
+  console.log(chalk19.bold("\n\u{1F4E6} " + t("publish.title")));
+  console.log(chalk19.gray("\u2500".repeat(40)));
+  if (!existsSync4("package.json")) {
+    console.log(chalk19.red("\u274C package.json\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    return;
+  }
+  let pkg;
+  try {
+    pkg = JSON.parse(readFileSync3("package.json", "utf-8"));
+  } catch {
+    console.log(chalk19.red("\u274C package.json \uD30C\uC2F1 \uC2E4\uD328"));
+    return;
+  }
+  const currentVersion = pkg.version || "0.0.0";
+  console.log(chalk19.cyan(`
+\u{1F4CC} \uD604\uC7AC \uBC84\uC804: v${currentVersion}`));
+  const { bumpType } = await inquirer8.prompt([
+    {
+      type: "list",
+      name: "bumpType",
+      message: t("publish.selectBump"),
+      choices: [
+        { name: `\u{1F527} patch (${bumpVersion(currentVersion, "patch")}) \u2014 \uBC84\uADF8 \uC218\uC815`, value: "patch" },
+        { name: `\u2728 minor (${bumpVersion(currentVersion, "minor")}) \u2014 \uC0C8 \uAE30\uB2A5`, value: "minor" },
+        { name: `\u{1F4A5} major (${bumpVersion(currentVersion, "major")}) \u2014 \uD638\uD658\uC131 \uBCC0\uACBD`, value: "major" }
+      ]
+    }
+  ]);
+  const newVersion = bumpVersion(currentVersion, bumpType);
+  console.log(chalk19.cyan(`
+\u{1F195} \uC0C8 \uBC84\uC804: v${newVersion}`));
+  pkg.version = newVersion;
+  writeFileSync3("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+  console.log(chalk19.green("\u2705 package.json \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8"));
+  const buildSpinner = ora2(t("publish.building")).start();
+  const buildResult = safeExecFile("pnpm", ["build"]);
+  if (!buildResult.ok) {
+    buildSpinner.fail(t("publish.buildFailed"));
+    console.log(chalk19.red(buildResult.err.slice(0, 500)));
+    pkg.version = currentVersion;
+    writeFileSync3("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    return;
+  }
+  buildSpinner.succeed(t("publish.buildSuccess"));
+  const testSpinner = ora2(t("publish.testing")).start();
+  const testResult = safeExecFile("pnpm", ["test", "--run"]);
+  if (!testResult.ok) {
+    testSpinner.fail(t("publish.testFailed"));
+    console.log(chalk19.red(testResult.err.slice(0, 500)));
+    pkg.version = currentVersion;
+    writeFileSync3("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    return;
+  }
+  testSpinner.succeed(t("publish.testSuccess"));
+  const { confirm } = await inquirer8.prompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `v${newVersion}\uC744 npm\uC5D0 \uBC30\uD3EC\uD560\uAE4C\uC694?`,
+      default: true
+    }
+  ]);
+  if (!confirm) {
+    pkg.version = currentVersion;
+    writeFileSync3("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    console.log(chalk19.gray("\uCDE8\uC18C\uB428. \uBC84\uC804\uC774 \uC6D0\uB798\uB300\uB85C \uBCF5\uAD6C\uB429\uB2C8\uB2E4."));
+    return;
+  }
+  const pubSpinner = ora2(t("publish.publishing")).start();
+  const pubResult = safeExecFile("npm", ["publish", "--access", "public"]);
+  if (!pubResult.ok) {
+    pubSpinner.fail(t("publish.publishFailed"));
+    console.log(chalk19.red(pubResult.err.slice(0, 500)));
+    pkg.version = currentVersion;
+    writeFileSync3("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    console.log(chalk19.gray(`\u{1F4E6} package.json \uBC84\uC804\uC744 v${currentVersion}\uB85C \uBCF5\uAD6C\uD588\uC2B5\uB2C8\uB2E4.`));
+    return;
+  }
+  pubSpinner.succeed(t("publish.publishSuccess"));
+  const addResult = safeExecFile("git", ["add", "package.json"]);
+  if (addResult.ok) {
+    safeExecFile("git", ["commit", "-m", `chore: release v${newVersion}`]);
+    const tagResult = safeExecFile("git", ["tag", `v${newVersion}`]);
+    if (tagResult.ok) {
+      const pushResult = safeExecFile("git", ["push"]);
+      const pushTagsResult = safeExecFile("git", ["push", "--tags"]);
+      if (pushResult.ok && pushTagsResult.ok) {
+        console.log(chalk19.green(`
+\u{1F3F7}\uFE0F  git tag v${newVersion} \uC0DD\uC131 + push \uC644\uB8CC`));
+      } else {
+        console.log(chalk19.yellow(`
+\u{1F3F7}\uFE0F  git tag v${newVersion} \uC0DD\uC131\uB428 (push\uB294 \uC218\uB3D9\uC73C\uB85C)`));
+      }
+    }
+  }
+  console.log(chalk19.green.bold(`
+\u{1F389} v${newVersion} \uBC30\uD3EC \uC644\uB8CC!`));
+  printNextStep({
+    message: "npm \uBC30\uD3EC \uC644\uB8CC!",
+    command: "vhk status",
+    cursorHint: "\uC0C1\uD0DC \uD655\uC778\uD574\uC918"
+  });
+}
+
 // src/lib/nlp-run.ts
 async function dispatchNlpRoute(route, input) {
   switch (route.command) {
@@ -3583,28 +3987,38 @@ async function dispatchNlpRoute(route, input) {
       return status();
     case "diff":
       return diff();
+    case "mcp-init":
+      return mcpInit();
+    case "deploy":
+      return deploy();
+    case "env":
+      return env();
+    case "env-check":
+      return envCheck();
+    case "publish":
+      return publish();
   }
 }
 async function runNaturalLanguageRoute(input) {
   const route = routeNaturalLanguage(input);
   if (!route) {
-    console.log(chalk16.yellow(`
+    console.log(chalk20.yellow(`
   \u2753 "${input}" \u2014 ${ko.nlp.notMatched}
 `));
     return;
   }
   console.log("");
-  console.log(chalk16.cyan(`  \u{1F4AC} "${input}"`));
-  console.log(chalk16.cyan(`  \u2192 ${route.explanation}`));
+  console.log(chalk20.cyan(`  \u{1F4AC} "${input}"`));
+  console.log(chalk20.cyan(`  \u2192 ${route.explanation}`));
   if (route.confidence === "low") {
-    const { confirm } = await inquirer7.prompt([{
+    const { confirm } = await inquirer9.prompt([{
       type: "confirm",
       name: "confirm",
       message: `${route.explanation} \u2014 ${ko.nlp.matched}`,
       default: true
     }]);
     if (!confirm) {
-      console.log(chalk16.dim(`  ${ko.nlp.menuHint}`));
+      console.log(chalk20.dim(`  ${ko.nlp.menuHint}`));
       return;
     }
   }
@@ -3622,21 +4036,28 @@ var KO_ALIASES = {
   sync: "\uADDC\uCE59",
   check: "\uC810\uAC80",
   secure: "\uBCF4\uC548",
-  ship: "\uBC30\uD3EC",
+  ship: "\uCD9C\uD558",
   doctor: "\uD658\uACBD",
   save: "\uC800\uC7A5",
   undo: "\uB418\uB3CC\uB9AC\uAE30",
   status: "\uC0C1\uD0DC",
-  diff: "\uBCC0\uACBD"
+  diff: "\uBCC0\uACBD",
+  deploy: "\uBC30\uD3EC",
+  env: "\uD658\uACBD\uBCC0\uC218",
+  "env-check": "\uD658\uACBD\uBCC0\uC218\uC810\uAC80",
+  publish: "\uCD9C\uC2DC"
 };
-program.name("vhk").description("VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58 (\uD55C\uAD6D\uC5B4\uB85C \uC548\uB0B4\uD569\uB2C8\uB2E4)").version("0.5.3");
+program.name("vhk").description("VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58 (\uD55C\uAD6D\uC5B4\uB85C \uC548\uB0B4\uD569\uB2C8\uB2E4)").version("0.7.0");
 program.configureHelp({
   formatHelp(cmd, helper) {
     if (cmd.parent) {
       return defaultHelp.formatHelp(cmd, helper);
     }
     const subs = helper.visibleCommands(cmd).filter((c) => c.name() !== "help");
-    const terms = subs.map((c) => `${c.name()} (${KO_ALIASES[c.name()]})`);
+    const terms = subs.map((c) => {
+      const alias = KO_ALIASES[c.name()];
+      return alias ? `${c.name()} (${alias})` : c.name();
+    });
     const termWidth = Math.max(...terms.map((t2) => t2.length), 0);
     const lines = [
       helper.commandDescription(cmd),
@@ -3657,7 +4078,7 @@ program.command("sync").alias("\uB9DE\uCD94\uAE30").alias("\uADDC\uCE59").descri
 program.command("check").alias("\uC810\uAC80").alias("\uB9B0\uD2B8").description("RULES.md \uADDC\uCE59 \uC810\uAC80 \u2014 \uCF54\uB4DC \uC704\uBC18 \uAC80\uC0AC").action(check);
 var secureCmd = program.command("secure").alias("\uBCF4\uC548").description("\uBCF4\uC548 \uB3C4\uAD6C \uBAA8\uC74C \u2014 scan: \uC2DC\uD06C\uB9BF\xB7\uD0A4 \uC720\uCD9C \uAC80\uC0AC").action(secure);
 secureCmd.command("scan").alias("\uC2A4\uCE94").description("\uC2DC\uD06C\uB9BF/\uD0A4 \uC720\uCD9C \uC2A4\uCE94").action(secure);
-program.command("ship").alias("\uBC30\uD3EC").alias("\uB9B4\uB9AC\uC988").description("\uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 + \uD68C\uACE0 + \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131").action(ship);
+program.command("ship").alias("\uCD9C\uD558").description("\uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 + \uD68C\uACE0 + \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131").action(ship);
 program.command("doctor").alias("\uD658\uACBD").alias("\uC9C4\uB2E8").description("\uAC1C\uBC1C \uD658\uACBD \uC810\uAC80 \u2014 Node/Git/npm \uC0C1\uD0DC \uD655\uC778").action(doctor);
 program.command("save").alias("\uC800\uC7A5").description("\uBCC0\uACBD\uC0AC\uD56D \uC800\uC7A5 (git add \u2192 commit \u2192 push)").action(async () => {
   await save();
@@ -3669,6 +4090,24 @@ program.command("status").alias("\uC0C1\uD0DC").description("\uD504\uB85C\uC81D\
   await status();
 });
 program.command("diff").alias("\uBCC0\uACBD").alias("\uCC28\uC774").description("Git \uBCC0\uACBD\uC0AC\uD56D \uD55C\uAD6D\uC5B4 \uC694\uC57D (staged / unstaged / \uC0C8 \uD30C\uC77C)").action(diff);
+program.command("mcp").description("MCP \uC11C\uBC84 \uC2DC\uC791 (Cursor \uB4F1 MCP \uD074\uB77C\uC774\uC5B8\uD2B8\uC6A9)").action(async () => {
+  await startMcpServer();
+});
+program.command("mcp-init").alias("mcp\uC124\uC815").description("Cursor MCP \uC5F0\uB3D9 \uC124\uC815 \uC790\uB3D9 \uC0DD\uC131 (.cursor/mcp.json)").action(async () => {
+  await mcpInit();
+});
+program.command("deploy").alias("\uBC30\uD3EC").description("\uD504\uB85C\uB355\uC158 \uBC30\uD3EC (Vercel/Netlify/Cloudflare \uC790\uB3D9 \uAC10\uC9C0)").action(async () => {
+  await deploy();
+});
+program.command("env").alias("\uD658\uACBD\uBCC0\uC218").description(".env \u2192 .env.example \uB3D9\uAE30\uD654 + .gitignore \uC790\uB3D9 \uCD94\uAC00").action(async () => {
+  await env();
+});
+program.command("env-check").alias("\uD658\uACBD\uBCC0\uC218\uC810\uAC80").description("\uD544\uC218 \uD658\uACBD\uBCC0\uC218 \uB204\uB77D \uAC80\uC0AC").action(async () => {
+  await envCheck();
+});
+program.command("publish").alias("\uCD9C\uC2DC").description("npm \uBC30\uD3EC (\uBC84\uC804 \uBC94\uD504 \u2192 \uBE4C\uB4DC \u2192 \uD14C\uC2A4\uD2B8 \u2192 publish)").action(async () => {
+  await publish();
+});
 program.on("command:*", async (operands) => {
   const unknown = operands[0] ?? "";
   const rest = operands.slice(1);
@@ -3677,7 +4116,7 @@ program.on("command:*", async (operands) => {
 });
 program.action(async () => {
   console.log("\n\u{1F3AF} VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58\n");
-  const { choice } = await inquirer8.prompt([{
+  const { choice } = await inquirer10.prompt([{
     type: "list",
     name: "choice",
     message: "\uBB58 \uB3C4\uC640\uB4DC\uB9B4\uAE4C\uC694?",

package/dist/mcp/index.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  startMcpServer
+} from "../chunk-NJDRNI3S.js";
+
+// src/mcp/index.ts
+startMcpServer().catch((err) => {
+  console.error("VHK MCP \uC11C\uBC84 \uC2DC\uC791 \uC2E4\uD328:", err);
+  process.exit(1);
+});

package/package.json

@@ -1,62 +1,65 @@
-{
-  "name": "@byh3071/vhk",
-  "version": "0.5.3",
-  "description": "Vibe Harness Kit — 바이브코딩 풀사이클 CLI",
-  "bin": {
-    "vhk": "dist/index.js"
-  },
-  "type": "module",
-  "scripts": {
-    "dev": "tsx src/index.ts",
-    "build": "tsup",
-    "test": "vitest",
-    "test:run": "vitest --run",
-    "prepublishOnly": "pnpm build && pnpm test:run",
-    "save": "vhk save",
-    "check": "vhk check",
-    "scan": "vhk secure scan",
-    "recap": "vhk recap",
-    "ship": "vhk ship",
-    "doctor": "vhk doctor"
-  },
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE"
-  ],
-  "keywords": [
-    "vibe-coding",
-    "harness",
-    "cli",
-    "scaffold",
-    "session-log",
-    "rules-sync"
-  ],
-  "author": "byh3071 <byh3071@gmail.com>",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/byh3071-cpu/vhk.git"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "dependencies": {
-    "@notionhq/client": "^5.22.0",
-    "chalk": "^5.6.2",
-    "commander": "^14.0.3",
-    "handlebars": "^4.7.9",
-    "inquirer": "^9.3.8",
-    "ora": "^9.4.0",
-    "simple-git": "^3.36.0"
-  },
-  "devDependencies": {
-    "@types/inquirer": "^9.0.9",
-    "@types/node": "^25.9.1",
-    "ignore": "^7.0.5",
-    "tsup": "^8.5.1",
-    "tsx": "^4.22.3",
-    "typescript": "^6.0.3",
-    "vitest": "^4.1.7"
-  }
-}
+{
+  "name": "@byh3071/vhk",
+  "version": "0.7.0",
+  "description": "Vibe Harness Kit — 바이브코딩 풀사이클 CLI",
+  "bin": {
+    "vhk": "dist/index.js",
+    "vhk-mcp": "dist/mcp/index.js"
+  },
+  "type": "module",
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "build": "tsup",
+    "test": "vitest",
+    "test:run": "vitest --run",
+    "prepublishOnly": "pnpm build && pnpm test:run",
+    "save": "vhk save",
+    "check": "vhk check",
+    "scan": "vhk secure scan",
+    "recap": "vhk recap",
+    "ship": "vhk ship",
+    "doctor": "vhk doctor"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "vibe-coding",
+    "harness",
+    "cli",
+    "scaffold",
+    "session-log",
+    "rules-sync"
+  ],
+  "author": "byh3071 <byh3071@gmail.com>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/byh3071-cpu/vhk.git"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@notionhq/client": "^5.22.0",
+    "chalk": "^5.6.2",
+    "commander": "^14.0.3",
+    "handlebars": "^4.7.9",
+    "inquirer": "^9.3.8",
+    "ora": "^9.4.0",
+    "simple-git": "^3.36.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/inquirer": "^9.0.9",
+    "@types/node": "^25.9.1",
+    "ignore": "^7.0.5",
+    "tsup": "^8.5.1",
+    "tsx": "^4.22.3",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.7"
+  }
+}