@byh3071/vhk 1.0.2 → 1.3.0

package/dist/chunk-3HGOQLRT.js

@@ -0,0 +1,2116 @@
+#!/usr/bin/env node
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// node_modules/.pnpm/ignore@7.0.5/node_modules/ignore/index.js
+var require_ignore = __commonJS({
+  "node_modules/.pnpm/ignore@7.0.5/node_modules/ignore/index.js"(exports, module) {
+    "use strict";
+    function makeArray(subject) {
+      return Array.isArray(subject) ? subject : [subject];
+    }
+    var UNDEFINED = void 0;
+    var EMPTY = "";
+    var SPACE = " ";
+    var ESCAPE = "\\";
+    var REGEX_TEST_BLANK_LINE = /^\s+$/;
+    var REGEX_INVALID_TRAILING_BACKSLASH = /(?:[^\\]|^)\\$/;
+    var REGEX_REPLACE_LEADING_EXCAPED_EXCLAMATION = /^\\!/;
+    var REGEX_REPLACE_LEADING_EXCAPED_HASH = /^\\#/;
+    var REGEX_SPLITALL_CRLF = /\r?\n/g;
+    var REGEX_TEST_INVALID_PATH = /^\.{0,2}\/|^\.{1,2}$/;
+    var REGEX_TEST_TRAILING_SLASH = /\/$/;
+    var SLASH = "/";
+    var TMP_KEY_IGNORE = "node-ignore";
+    if (typeof Symbol !== "undefined") {
+      TMP_KEY_IGNORE = /* @__PURE__ */ Symbol.for("node-ignore");
+    }
+    var KEY_IGNORE = TMP_KEY_IGNORE;
+    var define = (object, key, value) => {
+      Object.defineProperty(object, key, { value });
+      return value;
+    };
+    var REGEX_REGEXP_RANGE = /([0-z])-([0-z])/g;
+    var RETURN_FALSE = () => false;
+    var sanitizeRange = (range) => range.replace(
+      REGEX_REGEXP_RANGE,
+      (match, from, to) => from.charCodeAt(0) <= to.charCodeAt(0) ? match : EMPTY
+    );
+    var cleanRangeBackSlash = (slashes) => {
+      const { length } = slashes;
+      return slashes.slice(0, length - length % 2);
+    };
+    var REPLACERS = [
+      [
+        // Remove BOM
+        // TODO:
+        // Other similar zero-width characters?
+        /^\uFEFF/,
+        () => EMPTY
+      ],
+      // > Trailing spaces are ignored unless they are quoted with backslash ("\")
+      [
+        // (a\ ) -> (a )
+        // (a  ) -> (a)
+        // (a ) -> (a)
+        // (a \ ) -> (a  )
+        /((?:\\\\)*?)(\\?\s+)$/,
+        (_, m1, m2) => m1 + (m2.indexOf("\\") === 0 ? SPACE : EMPTY)
+      ],
+      // Replace (\ ) with ' '
+      // (\ ) -> ' '
+      // (\\ ) -> '\\ '
+      // (\\\ ) -> '\\ '
+      [
+        /(\\+?)\s/g,
+        (_, m1) => {
+          const { length } = m1;
+          return m1.slice(0, length - length % 2) + SPACE;
+        }
+      ],
+      // Escape metacharacters
+      // which is written down by users but means special for regular expressions.
+      // > There are 12 characters with special meanings:
+      // > - the backslash \,
+      // > - the caret ^,
+      // > - the dollar sign $,
+      // > - the period or dot .,
+      // > - the vertical bar or pipe symbol |,
+      // > - the question mark ?,
+      // > - the asterisk or star *,
+      // > - the plus sign +,
+      // > - the opening parenthesis (,
+      // > - the closing parenthesis ),
+      // > - and the opening square bracket [,
+      // > - the opening curly brace {,
+      // > These special characters are often called "metacharacters".
+      [
+        /[\\$.|*+(){^]/g,
+        (match) => `\\${match}`
+      ],
+      [
+        // > a question mark (?) matches a single character
+        /(?!\\)\?/g,
+        () => "[^/]"
+      ],
+      // leading slash
+      [
+        // > A leading slash matches the beginning of the pathname.
+        // > For example, "/*.c" matches "cat-file.c" but not "mozilla-sha1/sha1.c".
+        // A leading slash matches the beginning of the pathname
+        /^\//,
+        () => "^"
+      ],
+      // replace special metacharacter slash after the leading slash
+      [
+        /\//g,
+        () => "\\/"
+      ],
+      [
+        // > A leading "**" followed by a slash means match in all directories.
+        // > For example, "**/foo" matches file or directory "foo" anywhere,
+        // > the same as pattern "foo".
+        // > "**/foo/bar" matches file or directory "bar" anywhere that is directly
+        // >   under directory "foo".
+        // Notice that the '*'s have been replaced as '\\*'
+        /^\^*\\\*\\\*\\\//,
+        // '**/foo' <-> 'foo'
+        () => "^(?:.*\\/)?"
+      ],
+      // starting
+      [
+        // there will be no leading '/'
+        //   (which has been replaced by section "leading slash")
+        // If starts with '**', adding a '^' to the regular expression also works
+        /^(?=[^^])/,
+        function startingReplacer() {
+          return !/\/(?!$)/.test(this) ? "(?:^|\\/)" : "^";
+        }
+      ],
+      // two globstars
+      [
+        // Use lookahead assertions so that we could match more than one `'/**'`
+        /\\\/\\\*\\\*(?=\\\/|$)/g,
+        // Zero, one or several directories
+        // should not use '*', or it will be replaced by the next replacer
+        // Check if it is not the last `'/**'`
+        (_, index, str) => index + 6 < str.length ? "(?:\\/[^\\/]+)*" : "\\/.+"
+      ],
+      // normal intermediate wildcards
+      [
+        // Never replace escaped '*'
+        // ignore rule '\*' will match the path '*'
+        // 'abc.*/' -> go
+        // 'abc.*'  -> skip this rule,
+        //    coz trailing single wildcard will be handed by [trailing wildcard]
+        /(^|[^\\]+)(\\\*)+(?=.+)/g,
+        // '*.js' matches '.js'
+        // '*.js' doesn't match 'abc'
+        (_, p1, p2) => {
+          const unescaped = p2.replace(/\\\*/g, "[^\\/]*");
+          return p1 + unescaped;
+        }
+      ],
+      [
+        // unescape, revert step 3 except for back slash
+        // For example, if a user escape a '\\*',
+        // after step 3, the result will be '\\\\\\*'
+        /\\\\\\(?=[$.|*+(){^])/g,
+        () => ESCAPE
+      ],
+      [
+        // '\\\\' -> '\\'
+        /\\\\/g,
+        () => ESCAPE
+      ],
+      [
+        // > The range notation, e.g. [a-zA-Z],
+        // > can be used to match one of the characters in a range.
+        // `\` is escaped by step 3
+        /(\\)?\[([^\]/]*?)(\\*)($|\])/g,
+        (match, leadEscape, range, endEscape, close) => leadEscape === ESCAPE ? `\\[${range}${cleanRangeBackSlash(endEscape)}${close}` : close === "]" ? endEscape.length % 2 === 0 ? `[${sanitizeRange(range)}${endEscape}]` : "[]" : "[]"
+      ],
+      // ending
+      [
+        // 'js' will not match 'js.'
+        // 'ab' will not match 'abc'
+        /(?:[^*])$/,
+        // WTF!
+        // https://git-scm.com/docs/gitignore
+        // changes in [2.22.1](https://git-scm.com/docs/gitignore/2.22.1)
+        // which re-fixes #24, #38
+        // > If there is a separator at the end of the pattern then the pattern
+        // > will only match directories, otherwise the pattern can match both
+        // > files and directories.
+        // 'js*' will not match 'a.js'
+        // 'js/' will not match 'a.js'
+        // 'js' will match 'a.js' and 'a.js/'
+        (match) => /\/$/.test(match) ? `${match}$` : `${match}(?=$|\\/$)`
+      ]
+    ];
+    var REGEX_REPLACE_TRAILING_WILDCARD = /(^|\\\/)?\\\*$/;
+    var MODE_IGNORE = "regex";
+    var MODE_CHECK_IGNORE = "checkRegex";
+    var UNDERSCORE = "_";
+    var TRAILING_WILD_CARD_REPLACERS = {
+      [MODE_IGNORE](_, p1) {
+        const prefix = p1 ? `${p1}[^/]+` : "[^/]*";
+        return `${prefix}(?=$|\\/$)`;
+      },
+      [MODE_CHECK_IGNORE](_, p1) {
+        const prefix = p1 ? `${p1}[^/]*` : "[^/]*";
+        return `${prefix}(?=$|\\/$)`;
+      }
+    };
+    var makeRegexPrefix = (pattern) => REPLACERS.reduce(
+      (prev, [matcher, replacer]) => prev.replace(matcher, replacer.bind(pattern)),
+      pattern
+    );
+    var isString = (subject) => typeof subject === "string";
+    var checkPattern = (pattern) => pattern && isString(pattern) && !REGEX_TEST_BLANK_LINE.test(pattern) && !REGEX_INVALID_TRAILING_BACKSLASH.test(pattern) && pattern.indexOf("#") !== 0;
+    var splitPattern = (pattern) => pattern.split(REGEX_SPLITALL_CRLF).filter(Boolean);
+    var IgnoreRule = class {
+      constructor(pattern, mark, body, ignoreCase, negative, prefix) {
+        this.pattern = pattern;
+        this.mark = mark;
+        this.negative = negative;
+        define(this, "body", body);
+        define(this, "ignoreCase", ignoreCase);
+        define(this, "regexPrefix", prefix);
+      }
+      get regex() {
+        const key = UNDERSCORE + MODE_IGNORE;
+        if (this[key]) {
+          return this[key];
+        }
+        return this._make(MODE_IGNORE, key);
+      }
+      get checkRegex() {
+        const key = UNDERSCORE + MODE_CHECK_IGNORE;
+        if (this[key]) {
+          return this[key];
+        }
+        return this._make(MODE_CHECK_IGNORE, key);
+      }
+      _make(mode, key) {
+        const str = this.regexPrefix.replace(
+          REGEX_REPLACE_TRAILING_WILDCARD,
+          // It does not need to bind pattern
+          TRAILING_WILD_CARD_REPLACERS[mode]
+        );
+        const regex = this.ignoreCase ? new RegExp(str, "i") : new RegExp(str);
+        return define(this, key, regex);
+      }
+    };
+    var createRule = ({
+      pattern,
+      mark
+    }, ignoreCase) => {
+      let negative = false;
+      let body = pattern;
+      if (body.indexOf("!") === 0) {
+        negative = true;
+        body = body.substr(1);
+      }
+      body = body.replace(REGEX_REPLACE_LEADING_EXCAPED_EXCLAMATION, "!").replace(REGEX_REPLACE_LEADING_EXCAPED_HASH, "#");
+      const regexPrefix = makeRegexPrefix(body);
+      return new IgnoreRule(
+        pattern,
+        mark,
+        body,
+        ignoreCase,
+        negative,
+        regexPrefix
+      );
+    };
+    var RuleManager = class {
+      constructor(ignoreCase) {
+        this._ignoreCase = ignoreCase;
+        this._rules = [];
+      }
+      _add(pattern) {
+        if (pattern && pattern[KEY_IGNORE]) {
+          this._rules = this._rules.concat(pattern._rules._rules);
+          this._added = true;
+          return;
+        }
+        if (isString(pattern)) {
+          pattern = {
+            pattern
+          };
+        }
+        if (checkPattern(pattern.pattern)) {
+          const rule = createRule(pattern, this._ignoreCase);
+          this._added = true;
+          this._rules.push(rule);
+        }
+      }
+      // @param {Array<string> | string | Ignore} pattern
+      add(pattern) {
+        this._added = false;
+        makeArray(
+          isString(pattern) ? splitPattern(pattern) : pattern
+        ).forEach(this._add, this);
+        return this._added;
+      }
+      // Test one single path without recursively checking parent directories
+      //
+      // - checkUnignored `boolean` whether should check if the path is unignored,
+      //   setting `checkUnignored` to `false` could reduce additional
+      //   path matching.
+      // - check `string` either `MODE_IGNORE` or `MODE_CHECK_IGNORE`
+      // @returns {TestResult} true if a file is ignored
+      test(path3, checkUnignored, mode) {
+        let ignored = false;
+        let unignored = false;
+        let matchedRule;
+        this._rules.forEach((rule) => {
+          const { negative } = rule;
+          if (unignored === negative && ignored !== unignored || negative && !ignored && !unignored && !checkUnignored) {
+            return;
+          }
+          const matched = rule[mode].test(path3);
+          if (!matched) {
+            return;
+          }
+          ignored = !negative;
+          unignored = negative;
+          matchedRule = negative ? UNDEFINED : rule;
+        });
+        const ret = {
+          ignored,
+          unignored
+        };
+        if (matchedRule) {
+          ret.rule = matchedRule;
+        }
+        return ret;
+      }
+    };
+    var throwError = (message, Ctor) => {
+      throw new Ctor(message);
+    };
+    var checkPath = (path3, originalPath, doThrow) => {
+      if (!isString(path3)) {
+        return doThrow(
+          `path must be a string, but got \`${originalPath}\``,
+          TypeError
+        );
+      }
+      if (!path3) {
+        return doThrow(`path must not be empty`, TypeError);
+      }
+      if (checkPath.isNotRelative(path3)) {
+        const r = "`path.relative()`d";
+        return doThrow(
+          `path should be a ${r} string, but got "${originalPath}"`,
+          RangeError
+        );
+      }
+      return true;
+    };
+    var isNotRelative = (path3) => REGEX_TEST_INVALID_PATH.test(path3);
+    checkPath.isNotRelative = isNotRelative;
+    checkPath.convert = (p) => p;
+    var Ignore = class {
+      constructor({
+        ignorecase = true,
+        ignoreCase = ignorecase,
+        allowRelativePaths = false
+      } = {}) {
+        define(this, KEY_IGNORE, true);
+        this._rules = new RuleManager(ignoreCase);
+        this._strictPathCheck = !allowRelativePaths;
+        this._initCache();
+      }
+      _initCache() {
+        this._ignoreCache = /* @__PURE__ */ Object.create(null);
+        this._testCache = /* @__PURE__ */ Object.create(null);
+      }
+      add(pattern) {
+        if (this._rules.add(pattern)) {
+          this._initCache();
+        }
+        return this;
+      }
+      // legacy
+      addPattern(pattern) {
+        return this.add(pattern);
+      }
+      // @returns {TestResult}
+      _test(originalPath, cache, checkUnignored, slices) {
+        const path3 = originalPath && checkPath.convert(originalPath);
+        checkPath(
+          path3,
+          originalPath,
+          this._strictPathCheck ? throwError : RETURN_FALSE
+        );
+        return this._t(path3, cache, checkUnignored, slices);
+      }
+      checkIgnore(path3) {
+        if (!REGEX_TEST_TRAILING_SLASH.test(path3)) {
+          return this.test(path3);
+        }
+        const slices = path3.split(SLASH).filter(Boolean);
+        slices.pop();
+        if (slices.length) {
+          const parent = this._t(
+            slices.join(SLASH) + SLASH,
+            this._testCache,
+            true,
+            slices
+          );
+          if (parent.ignored) {
+            return parent;
+          }
+        }
+        return this._rules.test(path3, false, MODE_CHECK_IGNORE);
+      }
+      _t(path3, cache, checkUnignored, slices) {
+        if (path3 in cache) {
+          return cache[path3];
+        }
+        if (!slices) {
+          slices = path3.split(SLASH).filter(Boolean);
+        }
+        slices.pop();
+        if (!slices.length) {
+          return cache[path3] = this._rules.test(path3, checkUnignored, MODE_IGNORE);
+        }
+        const parent = this._t(
+          slices.join(SLASH) + SLASH,
+          cache,
+          checkUnignored,
+          slices
+        );
+        return cache[path3] = parent.ignored ? parent : this._rules.test(path3, checkUnignored, MODE_IGNORE);
+      }
+      ignores(path3) {
+        return this._test(path3, this._ignoreCache, false).ignored;
+      }
+      createFilter() {
+        return (path3) => !this.ignores(path3);
+      }
+      filter(paths) {
+        return makeArray(paths).filter(this.createFilter());
+      }
+      // @returns {TestResult}
+      test(path3) {
+        return this._test(path3, this._testCache, true);
+      }
+    };
+    var factory = (options) => new Ignore(options);
+    var isPathValid = (path3) => checkPath(path3 && checkPath.convert(path3), path3, RETURN_FALSE);
+    var setupWindows = () => {
+      const makePosix = (str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/");
+      checkPath.convert = makePosix;
+      const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
+      checkPath.isNotRelative = (path3) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path3) || isNotRelative(path3);
+    };
+    if (
+      // Detect `process` so that it can run in browsers.
+      typeof process !== "undefined" && process.platform === "win32"
+    ) {
+      setupWindows();
+    }
+    module.exports = factory;
+    factory.default = factory;
+    module.exports.isPathValid = isPathValid;
+    define(module.exports, /* @__PURE__ */ Symbol.for("setupWindows"), setupWindows);
+  }
+});
+
+// src/commands/deploy.ts
+import { existsSync } from "fs";
+import chalk2 from "chalk";
+import inquirer from "inquirer";
+
+// src/lib/exec.ts
+import { execFileSync } from "child_process";
+var SHIM_BINARIES = /* @__PURE__ */ new Set(["pnpm", "npm", "npx", "yarn"]);
+function platformCmd(cmd) {
+  if (process.platform === "win32" && SHIM_BINARIES.has(cmd)) {
+    return `${cmd}.cmd`;
+  }
+  return cmd;
+}
+function resolveCmd(cmd, args) {
+  if (process.platform === "win32" && SHIM_BINARIES.has(cmd)) {
+    return { bin: "cmd.exe", argv: ["/d", "/s", "/c", `${cmd}.cmd`, ...args] };
+  }
+  return { bin: platformCmd(cmd), argv: args };
+}
+function safeExecFile(cmd, args, opts = {}) {
+  const { bin, argv } = resolveCmd(cmd, args);
+  const env2 = opts.env ? { ...process.env, ...opts.env } : void 0;
+  try {
+    const out = execFileSync(bin, argv, {
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"],
+      env: env2
+    }).toString();
+    return { ok: true, out: out.trim() };
+  } catch (err) {
+    const e = err;
+    const stdout = e.stdout ? e.stdout.toString() : "";
+    const msg = e.message ?? String(err);
+    return { ok: false, err: msg, out: stdout.trim() };
+  }
+}
+function safeExecFileStream(cmd, args) {
+  const { bin, argv } = resolveCmd(cmd, args);
+  try {
+    execFileSync(bin, argv, {
+      encoding: "utf-8",
+      stdio: "inherit"
+    });
+    return { ok: true };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return { ok: false, err: msg };
+  }
+}
+
+// src/i18n/ko.ts
+var ko = {
+  status: {
+    title: "\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC",
+    notGitRepo: "Git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2C8\uC5D0\uC694. \uBA3C\uC800 git init\uC744 \uC2E4\uD589\uD558\uC138\uC694.",
+    branch: "\uBE0C\uB79C\uCE58:",
+    changes: "\uBCC0\uACBD:",
+    recentCommits: "\uCD5C\uADFC \uCEE4\uBC0B (3):",
+    noCommits: "\uCEE4\uBC0B \uC5C6\uC74C",
+    remote: "\uC6D0\uACA9:",
+    noUpstream: "upstream \uC5C6\uC74C",
+    inSync: "\uB3D9\uAE30\uD654\uB428",
+    ahead: (n) => `\u2191${n} ahead`,
+    behind: (n) => `\u2193${n} behind`,
+    package: "package.json:",
+    noPackage: "package.json \uC5C6\uC74C",
+    detached: "(detached HEAD)",
+    unknownBranch: "(\uC54C \uC218 \uC5C6\uC74C)"
+  },
+  save: {
+    title: "\uC800\uC7A5\uD558\uAE30",
+    notGitRepo: "git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4. \uBA3C\uC800 git init\uC744 \uC2E4\uD589\uD558\uC138\uC694.",
+    noChanges: "\uC800\uC7A5\uD560 \uBCC0\uACBD\uC0AC\uD56D\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    filesHeader: (n) => `\uBCC0\uACBD\uB41C \uD30C\uC77C (${n}\uAC1C):`,
+    commitMessage: "\uCEE4\uBC0B \uBA54\uC2DC\uC9C0 (Enter\uB85C \uAE30\uBCF8\uAC12 \uC0AC\uC6A9):",
+    saving: "\uC800\uC7A5 \uC911...",
+    pushing: "\uC6D0\uACA9 \uC800\uC7A5\uC18C\uC5D0 \uC62C\uB9AC\uB294 \uC911...",
+    successWithPush: "\uC800\uC7A5 + \uC6D0\uACA9 \uC5C5\uB85C\uB4DC \uC644\uB8CC!",
+    successLocal: "\uB85C\uCEEC \uC800\uC7A5 \uC644\uB8CC!",
+    noRemote: "\uC6D0\uACA9 \uC800\uC7A5\uC18C\uAC00 \uC124\uC815\uB418\uC9C0 \uC54A\uC544 push\uB97C \uAC74\uB108\uB6F0\uC5C8\uC2B5\uB2C8\uB2E4.",
+    failed: "\uC800\uC7A5 \uC2E4\uD328",
+    stagedAfterFail: "\uCEE4\uBC0B\uC740 \uC2E4\uD328\uD588\uC9C0\uB9CC \uD30C\uC77C\uC740 \uC2A4\uD14C\uC774\uC9D5\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4. \uD655\uC778: git status / \uCDE8\uC18C: git reset HEAD",
+    securityWarnHeader: "\uC800\uC7A5 \uC804 \uBCF4\uC548 \uD655\uC778:",
+    secretsFound: (n) => `\uCF54\uB4DC\uC5D0\uC11C CRITICAL/HIGH \uC2DC\uD06C\uB9BF \uD328\uD134 ${n}\uAC74 \uAC10\uC9C0`,
+    secretsConfirm: "\uADF8\uB798\uB3C4 \uCEE4\uBC0B\xB7push\uB97C \uC9C4\uD589\uD560\uAE4C\uC694?",
+    cancelled: "\uC800\uC7A5\uC744 \uCDE8\uC18C\uD588\uC2B5\uB2C8\uB2E4.",
+    pushFailed: "push \uC2E4\uD328 (\uB85C\uCEEC \uCEE4\uBC0B\uC740 \uC644\uB8CC\uB428)",
+    commitOkPushFailed: "\uB85C\uCEEC \uCEE4\uBC0B\uC740 \uB410\uC9C0\uB9CC \uC6D0\uACA9 push\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4. git push\uB97C \uC9C1\uC811 \uD655\uC778\uD558\uC138\uC694.",
+    done: (n) => `${n}\uAC1C \uD30C\uC77C \uC800\uC7A5 \uC644\uB8CC!`,
+    doneLocalOnly: (n) => `${n}\uAC1C \uD30C\uC77C \uB85C\uCEEC \uC800\uC7A5\uB428 (push\uB294 \uC2E4\uD328)`
+  },
+  undo: {
+    title: "\uB418\uB3CC\uB9AC\uAE30",
+    notGitRepo: "git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4.",
+    noCommits: "\uB418\uB3CC\uB9B4 \uCEE4\uBC0B\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    recentHeader: "\u{1F4CB} \uCD5C\uADFC \uCEE4\uBC0B:",
+    howMany: "\uBA87 \uAC1C\uC758 \uCEE4\uBC0B\uC744 \uB418\uB3CC\uB9B4\uAE4C\uC694?",
+    alreadyPushed: "\uC774 \uCEE4\uBC0B\uC740 \uC774\uBBF8 \uC6D0\uACA9\uC5D0 \uC62C\uB77C\uAC14\uC2B5\uB2C8\uB2E4. \uB418\uB3CC\uB9AC\uBA74 \uCDA9\uB3CC\uC774 \uC0DD\uAE38 \uC218 \uC788\uC5B4\uC694.",
+    noUpstreamWarning: "upstream \uBE0C\uB79C\uCE58\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. \uC774\uBBF8 push\uD55C \uCEE4\uBC0B\uC77C \uC218 \uC788\uC5B4\uC694. \uB418\uB3CC\uB9B0 \uB4A4 force push\uAC00 \uD544\uC694\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+    confirmMessage: "\uCD5C\uADFC \uCEE4\uBC0B\uC744 \uB418\uB3CC\uB9AC\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?",
+    confirmRisky: (n) => `\u26A0\uFE0F \uC704\uD5D8: \uCD5C\uADFC ${n}\uAC1C \uCEE4\uBC0B\uC744 soft reset\uD569\uB2C8\uB2E4. \uC6D0\uACA9\uACFC \uC5B4\uAE0B\uB0A0 \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uACC4\uC18D\uD560\uAE4C\uC694?`,
+    cancelled: "\uCDE8\uC18C\uB428",
+    success: "\uB418\uB3CC\uB9AC\uAE30 \uC644\uB8CC! \uBCC0\uACBD\uC0AC\uD56D\uC740 \uADF8\uB300\uB85C \uB0A8\uC544\uC788\uC2B5\uB2C8\uB2E4.",
+    stagedHint: "\uBCC0\uACBD\uC0AC\uD56D\uC740 \uC2A4\uD14C\uC774\uC9D5 \uC601\uC5ED\uC5D0 \uB0A8\uC544 \uC788\uC5B4\uC694.",
+    rootCommit: "\uCCAB \uCEE4\uBC0B\uB9CC \uC788\uC5B4\uC11C \uB354 \uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    forcePushHint: "\uC6D0\uACA9\uACFC \uB9DE\uCD94\uB824\uBA74: git push --force-with-lease (\uD63C\uC790 \uC791\uC5C5\uD55C \uBE0C\uB79C\uCE58\uC5D0\uC11C\uB9CC, \uD300\uACFC \uD569\uC758 \uD6C4)",
+    failed: "\uB418\uB3CC\uB9AC\uAE30 \uC2E4\uD328"
+  },
+  diff: {
+    title: "\uBCC0\uACBD\uC0AC\uD56D \uD655\uC778",
+    notGitRepo: "git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4.",
+    noChanges: "\uBCC0\uACBD\uC0AC\uD56D \uC5C6\uC74C! \uAE68\uB057\uD569\uB2C8\uB2E4.",
+    stagedHeader: "\u{1F4E6} \uCEE4\uBC0B \uB300\uAE30 (staged):",
+    unstagedHeader: "\u270F\uFE0F  \uC218\uC815\uB428 (unstaged):",
+    untrackedHeader: (n) => `\u2795 \uC0C8 \uD30C\uC77C (${n}\uAC1C):`,
+    summaryHeader: "\u{1F4CA} \uCD1D \uBCC0\uACBD \uC694\uC57D (\uC791\uC5C5 \uD2B8\uB9AC vs HEAD)",
+    filesLine: (n) => `\uD30C\uC77C: ${n}\uAC1C`
+  },
+  start: {
+    title: "\u{1F680} VHK \uC0C8 \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791 \uB9C8\uBC95\uC0AC",
+    intro: "4\uB2E8\uACC4\uB85C \uC790\uB3D9 \uC9C4\uD589\uB429\uB2C8\uB2E4:",
+    step1: "1) git \uC800\uC7A5\uC18C \uCD08\uAE30\uD654",
+    step2: "2) \uD504\uB85C\uC81D\uD2B8 \uBB38\uC11C \uC0DD\uC131 (vhk init)",
+    step3: "3) Cursor MCP \uB4F1\uB85D (vhk mcp-init)",
+    step4: "4) AI \uCEE8\uD14D\uC2A4\uD2B8 \uC0DD\uC131 (vhk context)",
+    confirmStart: "\uACC4\uC18D\uD560\uAE4C\uC694?",
+    cancelled: "\uCDE8\uC18C\uD588\uC5B4\uC694. \uB2E4\uC74C\uC5D0 \uB2E4\uC2DC vhk start\uB97C \uC2E4\uD589\uD558\uC138\uC694.",
+    step1Header: "[1/4] git \uC800\uC7A5\uC18C \uCD08\uAE30\uD654",
+    step2Header: "[2/4] \uD504\uB85C\uC81D\uD2B8 \uBB38\uC11C \uC0DD\uC131",
+    step3Header: "[3/4] Cursor MCP \uB4F1\uB85D",
+    step4Header: "[4/4] AI \uCEE8\uD14D\uC2A4\uD2B8 \uC0DD\uC131",
+    gitAlreadyInit: "\uC774\uBBF8 git \uC800\uC7A5\uC18C\uC785\uB2C8\uB2E4. \uAC74\uB108\uB701\uB2C8\uB2E4.",
+    gitInitDone: "git \uC800\uC7A5\uC18C \uCD08\uAE30\uD654 \uC644\uB8CC",
+    allDone: "\u{1F389} \uBAA8\uB4E0 \uB2E8\uACC4 \uC644\uB8CC!",
+    nextHintMessage: "\uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791 \uC900\uBE44 \uB05D! \uC774\uC81C \uAC1C\uBC1C\uC744 \uC2DC\uC791\uD558\uC138\uC694.",
+    nextHintCursor: "docs/PRD.md \uBCF4\uACE0 \uAC1C\uBC1C \uC2DC\uC791\uD574\uC918"
+  },
+  gate: {
+    title: "\u{1F4A1} \uC544\uC774\uB514\uC5B4 \uAC80\uC99D",
+    welcome: "\uC0C8 \uC544\uC774\uB514\uC5B4\uB97C \uAC80\uC99D\uD569\uB2C8\uB2E4. \uC9C8\uBB38\uC5D0 \uB2F5\uD574\uC8FC\uC138\uC694.",
+    modePrompt: "\uC5B4\uB5BB\uAC8C \uAC80\uC99D\uD560\uAE4C\uC694?",
+    modeQuickLabel: "\u26A1 \uC9E7\uAC8C (\uD575\uC2EC 5\uBB38\uD56D) \u2014 \uB9C9 \uB5A0\uC62C\uB790\uC744 \uB54C",
+    modeFullLabel: "\u{1F50D} \uC790\uC138\uD788 (13\uBB38\uD56D) \u2014 \uAE30\uD68D\uC774 \uC5B4\uB290 \uC815\uB3C4 \uC7A1\uD614\uC744 \uB54C",
+    modeSkipLabel: "\u23ED\uFE0F \uAC74\uB108\uB6F0\uAE30 \u2014 \uB178\uC158\xB7\uBB38\uC11C\uC5D0 \uC774\uBBF8 \uAE30\uD68D\uD574 \uB460",
+    skipSourcePrompt: "\u{1F4C4} \uAE30\uD68D \uBB38\uC11C \uC704\uCE58 (\uB178\uC158 \uC8FC\uC18C, \uD30C\uC77C \uACBD\uB85C \uB4F1):",
+    skipGo: "\u2705 \uC2DC\uC791\uD574\uB3C4 \uB3FC\uC694! \uC774\uC81C \uD504\uB85C\uC81D\uD2B8\uB97C \uB9CC\uB4E4\uC5B4 \uBCF4\uC138\uC694 (vhk init)",
+    skipSourceLabel: (source) => `\uAE30\uD68D \uBB38\uC11C: ${source}`,
+    quickHeader: "\u26A1 \uC9E7\uC740 \uAC80\uC99D",
+    fullHeader: "\u{1F50D} \uC790\uC138\uD55C \uAC80\uC99D",
+    modeCountSuffix: (total) => `\u2014 ${total}\uBB38\uD56D`,
+    idea: "\u{1F4A1} \uC5B4\uB5A4 \uAC78 \uB9CC\uB4E4 \uAC74\uAC00\uC694? (\uD55C \uC904)",
+    ideaHint: '\uC608: "\uD300 \uD560 \uC77C\uC744 3\uCD08\uC5D0 \uCD94\uAC00\uD558\uB294 \uC571"',
+    painPoint: "\u{1F624} \uC774 \uBB38\uC81C, \uB204\uAC00 \uC5BC\uB9C8\uB098 \uC544\uD30C\uD574\uC694?",
+    painPointHint: '\uC608: "\uB9E4\uC77C \uC5D1\uC140\uC5D0 \uBCF5\uBD99\uD558\uB290\uB77C 30\uBD84\uC529 \uB0A0\uB9BC"',
+    edge: "\u{1F4AA} \uB098\uB9CC\uC758 \uAC15\uC810\uC740? (\uBE44\uC2B7\uD55C \uAC8C \uC788\uB294\uB370 \uC65C \uC774\uAC78?)",
+    edgeHint: '\uC608: "\uD55C\uAD6D\uC5B4\uB85C \uB41C \uAC00\uC774\uB4DC + \uBC14\uB85C \uC4F0\uB294 \uD15C\uD50C\uB9BF"',
+    checklistStart: "\u2500\u2500\u2500 \uC774\uC5B4\uC11C \uC9C8\uBB38\uD569\uB2C8\uB2E4 \u2500\u2500\u2500",
+    hintPrefix: "  \u{1F4A1}",
+    verdictPrompt: (_failIf) => "  \u2192 \uC9C0\uAE08 \uC0C1\uD0DC\uB294?",
+    statusPassChoice: "\u2705 \uAD1C\uCC2E\uC544\uC694",
+    statusHoldChoice: "\u{1F7E1} \uC544\uC9C1 \uBAA8\uB974\uACA0\uC5B4\uC694 (\uB098\uC911\uC5D0 \uCC44\uC6CC\uB3C4 \uB429\uB2C8\uB2E4)",
+    statusFailChoice: "\u{1F504} \uBC94\uC704\uB97C \uC904\uC5EC\uBCFC\uAC8C\uC694",
+    statusPassLine: "  \u2705 \uAD1C\uCC2E\uC544\uC694",
+    statusHoldLine: "  \u{1F7E1} \uBCF4\uB958 \u2014 \uAC1C\uBC1C\uD558\uBA74\uC11C \uCC44\uC6CC\uB3C4 \uB429\uB2C8\uB2E4",
+    statusFailLine: "  \u{1F504} \uBC94\uC704 \uC870\uC815\uC774 \uD544\uC694\uD574 \uBCF4\uC5EC\uC694",
+    verdictTitle: "\u2550\u2550\u2550 \uACB0\uACFC \u2550\u2550\u2550",
+    ideaLabel: "\uB9CC\uB4E4 \uAC83:",
+    painPointLabel: "\uC544\uD508 \uC810:",
+    edgeLabel: "\uB098\uB9CC\uC758 \uAC15\uC810:",
+    countLine: (failCount, holdCount, total) => `\uBC94\uC704 \uC870\uC815 ${failCount}\uAC1C \xB7 \uBCF4\uB958 ${holdCount}\uAC1C / ${total}\uBB38\uD56D`,
+    go: "\u2705 \uC2DC\uC791\uD574\uB3C4 \uB3FC\uC694! \uB2E4\uC74C \uB2E8\uACC4(\uD504\uB85C\uC81D\uD2B8 \uB9CC\uB4E4\uAE30)\uB85C \uB118\uC5B4\uAC00\uC138\uC694.",
+    refine: "\u{1F504} \uC870\uAE08 \uB354 \uB2E4\uB4EC\uC73C\uBA74 \uC88B\uACA0\uC5B4\uC694. \uC704 \uD56D\uBAA9\uC744 \uBCF4\uC644\uD574 \uBCF4\uC138\uC694.",
+    drop: "\u{1F4A1} \uB2E4\uB978 \uC544\uC774\uB514\uC5B4\uB97C \uAC80\uD1A0\uD574 \uBCF4\uB294 \uAC74 \uC5B4\uB5A8\uAE4C\uC694?",
+    nextCommand: "\uB2E4\uC74C: vhk init (\uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791\uD558\uAE30)",
+    holdRemainHint: "\u{1F4A1} \uBCF4\uB958\uD55C \uD56D\uBAA9\uC740 \uAC1C\uBC1C\uD558\uBA74\uC11C \uCC44\uC6CC\uB3C4 \uAD1C\uCC2E\uC544\uC694.",
+    failMessage: "\uC544\uC9C1 \uBAA8\uB974\uACA0\uC5B4\uC694 \u2192 \uAD1C\uCC2E\uC544\uC694, \uAC1C\uBC1C\uD558\uBA74\uC11C \uCC44\uC6CC\uB3C4 \uB429\uB2C8\uB2E4."
+  },
+  init: {
+    title: "\u{1F6E0}\uFE0F \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791\uD558\uAE30",
+    skipGate: "\u23ED\uFE0F 1\uB2E8\uACC4(\uC544\uC774\uB514\uC5B4 \uAC80\uC99D) \uAC74\uB108\uB6F0\uAE30 \u2014 \uAE30\uD68D\xB7\uC124\uACC4\uAC00 \uC774\uBBF8 \uC788\uC5B4\uC694",
+    projectName: "\u{1F4E6} \uD504\uB85C\uC81D\uD2B8 \uC774\uB984\uC740?",
+    projectNameHint: '\uC608: "\uD300 \uD560 \uC77C \uC571"',
+    description: "\u{1F4DD} \uD55C \uC904\uB85C \uC124\uBA85\uD558\uBA74?",
+    descriptionHint: '\uC608: "3\uCD08 \uB9CC\uC5D0 \uD560 \uC77C \uCD94\uAC00"',
+    projectType: "\u{1F3D7}\uFE0F \uC5B4\uB5A4 \uC885\uB958\uC778\uAC00\uC694?",
+    confirmStack: "\uC774 \uAE30\uC220 \uBB36\uC74C\uC73C\uB85C \uC9C4\uD589\uD560\uAE4C\uC694?",
+    canceled: "\uCDE8\uC18C\uD588\uC5B4\uC694. \uAE30\uC220 \uBB36\uC74C\uC744 \uBC14\uAFB8\uB824\uBA74 \uB2E4\uC2DC vhk init\uC744 \uC2E4\uD589\uD558\uC138\uC694.",
+    recommendedStack: "\uCD94\uCC9C \uAE30\uC220 \uBB36\uC74C:",
+    filesGenerating: "\u{1F4C2} \uD544\uC694\uD55C \uD30C\uC77C \uB9CC\uB4DC\uB294 \uC911...",
+    overwrite: (filePath) => `  \u26A0\uFE0F ${filePath} \uD30C\uC77C\uC774 \uC788\uC5B4\uC694. \uB36E\uC5B4\uC4F8\uAE4C\uC694?`,
+    skipped: (filePath) => `${filePath} \u2014 \uAC74\uB108\uB700`,
+    done: "\u{1F389} \uD504\uB85C\uC81D\uD2B8 \uBF08\uB300\uAC00 \uC900\uBE44\uB410\uC5B4\uC694!",
+    nextSteps: "\uB2E4\uC74C\uC5D0 \uD560 \uC77C:",
+    fillHint: "CLAUDE.md \xB7 .cursorrules\uC5D0\uC11C \u{1F449} \uC5EC\uAE30\uB97C \uCC44\uC6CC\uC8FC\uC138\uC694 \uD45C\uC2DC\uB97C \uCC3E\uC544 \uCC44\uC6B0\uC138\uC694",
+    prdHint: "docs/PRD.md\uC5D0 1\uCC28 \uBC84\uC804\uC5D0 \uB123\uC744 \uAE30\uB2A5\xB7\uBE7C\uB294 \uAE30\uB2A5\uC744 \uC801\uC5B4 \uBCF4\uC138\uC694",
+    notionFetching: "\u{1F4E1} \uB178\uC158 \uAE30\uD68D \uD398\uC774\uC9C0 \uBD88\uB7EC\uC624\uB294 \uC911...",
+    notionDone: (name) => `\uB178\uC158\uC5D0\uC11C \uAC00\uC838\uC624\uAE30 \uC644\uB8CC: ${name}`,
+    notionReviewHint: "docs/PRD.md\uB97C \uC77D\uACE0 \u{1F449} \uC5EC\uAE30\uB97C \uCC44\uC6CC\uC8FC\uC138\uC694 \uD56D\uBAA9\uC744 \uCC44\uC6B0\uC138\uC694",
+    gitHintLabel: "\uD130\uBBF8\uB110\uC5D0 \uBCF5\uC0AC\uD560 \uBA85\uB839 (\uC544\uB798 \uBC15\uC2A4 \uBCF5\uBD99):",
+    gitHintCommand: 'git init && git add . && git commit -m "feat: \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791"',
+    startDev: "\uC774\uC81C \uAC1C\uBC1C\uD574 \uBCF4\uC138\uC694! \u{1F680}",
+    commandsMdDone: "\u{1F4CB} COMMANDS.md \uC0DD\uC131",
+    scriptsDone: "\u{1F4E6} package.json scripts \uCD94\uAC00"
+  },
+  recap: {
+    title: "\u{1F4DD} \uC624\uB298 \uD55C \uC77C \uC815\uB9AC",
+    analyzing: "\u{1F4CA} \uC624\uB298 \uBC14\uB010 \uD30C\uC77C\xB7\uCEE4\uBC0B\uC744 \uC0B4\uD3B4\uBCF4\uB294 \uC911...",
+    noRepo: "\u274C Git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2C8\uC5D0\uC694. \uBA3C\uC800 git init\uC744 \uC2E4\uD589\uD558\uC138\uC694.",
+    noChanges: "\u26A0\uFE0F \uC624\uB298 \uBC14\uB010 \uB0B4\uC6A9\uC774 \uC5C6\uC5B4\uC694.",
+    summary: "\u{1F4DD} \uC774\uBC88\uC5D0 \uBB58 \uD588\uB098\uC694? (1~3\uC904)",
+    summaryHint: '\uC608: "\uB85C\uADF8\uC778 \uD654\uBA74 \uB9CC\uB4E4\uACE0 \uBC84\uD2BC \uC0C9 \uACE0\uCE68"',
+    decisions: "\u{1F9ED} \uC815\uD55C \uACB0\uC815\uC774 \uC788\uB098\uC694? (\uC5C6\uC73C\uBA74 Enter)",
+    nextTodo: "\u23ED\uFE0F \uB2E4\uC74C\uC5D0 \uD560 \uC77C\uC740?",
+    blockers: "\u{1F6A7} \uB9C9\uD78C \uAC8C \uC788\uB098\uC694? (\uC5C6\uC73C\uBA74 Enter)",
+    done: "\u2705 \uC624\uB298 \uAE30\uB85D\uC744 \uC800\uC7A5\uD588\uC5B4\uC694!",
+    updateClaude: 'CLAUDE.md "\uC9C0\uAE08 \uC0C1\uD0DC"\uB3C4 \uAC19\uC774 \uACE0\uCE60\uAE4C\uC694?',
+    adrDetected: "\u{1F4D0} \uC4F0\uB294 \uAE30\uC220\xB7\uC124\uC815\uC774 \uBC14\uB010 \uAC83 \uAC19\uC544\uC694!",
+    createAdr: "\uC65C \uADF8\uB807\uAC8C \uD588\uB294\uC9C0 \uAE30\uB85D \uBB38\uC11C\uB97C \uB9CC\uB4E4\uAE4C\uC694?",
+    troubleDetected: "\u{1F527} \uBC84\uADF8\xB7\uC624\uB958\uB97C \uACE0\uCE5C \uCEE4\uBC0B\uC774 \uBCF4\uC5EC\uC694!",
+    createTroubleshoot: "\uC5B4\uB5BB\uAC8C \uACE0\uCCE4\uB294\uC9C0 \uBA54\uBAA8\uB97C \uB0A8\uAE38\uAE4C\uC694?"
+  },
+  check: {
+    title: "\u{1F50D} \uD504\uB85C\uC81D\uD2B8 \uADDC\uCE59 \uC810\uAC80",
+    noRules: "\u26A0\uFE0F RULES.md \uD30C\uC77C\uC774 \uC5C6\uC5B4\uC694.",
+    noAutoRules: "\u26A0\uFE0F \uC790\uB3D9\uC73C\uB85C \uAC80\uC0AC\uD560 \uADDC\uCE59\uC774 \uC5C6\uC5B4\uC694.",
+    allPassed: "\u{1F389} \uADDC\uCE59\uC744 \uBAA8\uB450 \uC9C0\uCF30\uC5B4\uC694!",
+    summary: "\u{1F4CA} \uC810\uAC80 \uACB0\uACFC:"
+  },
+  doctor: {
+    title: "\u{1FA7A} \uAC1C\uBC1C \uD658\uACBD \uC810\uAC80",
+    allOk: "\u{1F389} \uAC1C\uBC1C \uD658\uACBD \uC900\uBE44 \uC644\uB8CC!",
+    missing: "\u26A0\uFE0F \uC77C\uBD80 \uB3C4\uAD6C\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    missingHint: "\uC704 \uC548\uB0B4\uB97C \uB530\uB77C \uC124\uCE58\uD558\uC138\uC694.",
+    projectFiles: "\u{1F4C1} \uD504\uB85C\uC81D\uD2B8 \uD30C\uC77C \uD655\uC778:",
+    envNotIgnored: "\u26A0\uFE0F .env\uAC00 .gitignore\uC5D0 \uC5C6\uC74C! \uCD94\uAC00\uD558\uC138\uC694",
+    nextOkMessage: "\uD658\uACBD \uC810\uAC80 \uD1B5\uACFC! \uC774\uC81C \uD504\uB85C\uC81D\uD2B8\uB97C \uC2DC\uC791\uD558\uC138\uC694.",
+    nextRetryMessage: "\uC704 \uB3C4\uAD6C\uB97C \uC124\uCE58\uD55C \uD6C4 \uB2E4\uC2DC \uC810\uAC80\uD558\uC138\uC694.",
+    updateAvailable: (latest) => `\u{1F195} v${latest} \uC0AC\uC6A9 \uAC00\uB2A5 \u2014 npm i -g @byh3071/vhk`,
+    updateCurrent: "\uCD5C\uC2E0 \uBC84\uC804\uC744 \uC4F0\uACE0 \uC788\uC5B4\uC694"
+  },
+  nlp: {
+    matched: "\uC774\uAC8C \uB9DE\uB098\uC694?",
+    notMatched: "\uBB34\uC2A8 \uB73B\uC778\uC9C0 \uBAA8\uB974\uACA0\uC5B4\uC694. vhk\uB97C \uC785\uB825\uD558\uBA74 \uBA54\uB274\uC5D0\uC11C \uC120\uD0DD\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+    menuHint: "vhk\uB97C \uC785\uB825\uD558\uBA74 \uBA54\uB274\uC5D0\uC11C \uC120\uD0DD\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4."
+  },
+  secure: {
+    title: "\u{1F512} \uBE44\uBC00\uBC88\uD638\xB7\uD0A4 \uC720\uCD9C \uAC80\uC0AC",
+    noGitignore: "\u26A0\uFE0F .gitignore \uD30C\uC77C\uC774 \uC5C6\uC5B4\uC694!",
+    noEnvInGitignore: "\u26A0\uFE0F .gitignore\uC5D0 .env\uAC00 \uC5C6\uC5B4\uC694!",
+    scanning: "\u{1F50D} \uD30C\uC77C\uC744 \uC0B4\uD3B4\uBCF4\uB294 \uC911...",
+    clean: "\u{1F389} \uBE44\uBC00\uBC88\uD638\xB7\uD0A4\uAC00 \uCF54\uB4DC\uC5D0 \uBCF4\uC774\uC9C0 \uC54A\uC544\uC694!",
+    summary: "\u{1F4CA} \uAC80\uC0AC \uC694\uC57D:"
+  },
+  sync: {
+    title: "\u{1F504} \uADDC\uCE59 \uD30C\uC77C \uB9DE\uCD94\uAE30",
+    noRules: "\u26A0\uFE0F RULES.md \uD30C\uC77C\uC774 \uC5C6\uC5B4\uC694.",
+    cursorrulesDone: "\u2705 .cursorrules \uB9DE\uCDA4 \uC644\uB8CC",
+    claudeDone: "\u2705 CLAUDE.md \uB9DE\uCDA4 \uC644\uB8CC",
+    done: "\u{1F504} \uB9DE\uCD94\uAE30 \uC644\uB8CC!"
+  },
+  ship: {
+    title: "\u{1F680} \uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8",
+    checklist: "\u{1F4CB} \uBC30\uD3EC \uC804 \uCCB4\uD06C\uB9AC\uC2A4\uD2B8",
+    retro: "\u{1F50D} \uBC30\uD3EC \uD68C\uACE0",
+    buildLogCreated: "\u2705 \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131 \uC644\uB8CC",
+    buildLogDone: (rel) => `\u2705 \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131 \uC644\uB8CC: ${rel}`,
+    questionWell: "\uC798\uB41C \uC810\uC740?",
+    questionWrong: "\uC5B4\uB824\uC6E0\uB358 \uC810\uC740?",
+    questionLearned: "\uBC30\uC6B4 \uC810\uC740?",
+    questionNext: "\uB2E4\uC74C \uBC84\uC804\uC5D0\uC11C \uD560 \uAC83\uC740?",
+    checkboxPrompt: "\uC644\uB8CC\uD55C \uD56D\uBAA9\uC744 \uC120\uD0DD\uD558\uC138\uC694:",
+    incompleteHeader: "\u26A0\uFE0F \uC544\uC9C1 \uC644\uB8CC\uD558\uC9C0 \uC54A\uC740 \uD56D\uBAA9:",
+    proceedConfirm: "\uADF8\uB798\uB3C4 \uACC4\uC18D \uC9C4\uD589\uD560\uAE4C\uC694?",
+    allPassed: "\u2705 \uBAA8\uB4E0 \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 \uD1B5\uACFC!",
+    retryMessage: "\uCCB4\uD06C\uB9AC\uC2A4\uD2B8\uB97C \uB9C8\uCE5C \uB4A4 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uBCF4\uC138\uC694.",
+    retryCursorHint: "\uBE4C\uB4DC\uD558\uACE0 \uD14C\uC2A4\uD2B8 \uB3CC\uB824\uC918",
+    versionPrompt: "\uBC30\uD3EC \uBC84\uC804\uC740?",
+    versionHint: "\uC608: 0.4.0",
+    emptySection: "(\uBBF8\uC791\uC131)",
+    emptyNext: "(\uBBF8\uC815)",
+    deployMessage: "\uBE4C\uB4DC \uB85C\uADF8\uB97C \uC800\uC7A5\uD588\uC5B4\uC694! \uC774\uC81C \uC2E4\uC81C \uBC30\uD3EC\uB97C \uC9C4\uD589\uD558\uC138\uC694.",
+    deployCursorHint: "\uBC30\uD3EC\uD574\uC918",
+    checkBuild: "\uBE4C\uB4DC\uAC00 \uC131\uACF5\uD588\uB098\uC694?",
+    hintBuild: "pnpm build",
+    checkTest: "\uBAA8\uB4E0 \uD14C\uC2A4\uD2B8\uAC00 \uD1B5\uACFC\uD588\uB098\uC694?",
+    hintTest: "pnpm test --run",
+    checkVersion: "package.json \uBC84\uC804\uC744 \uC62C\uB838\uB098\uC694?",
+    hintVersion: "version \uD544\uB4DC \uD655\uC778",
+    checkChangelog: "\uBCC0\uACBD \uB0B4\uC6A9\uC744 \uAE30\uB85D\uD588\uB098\uC694?",
+    hintChangelog: "README \uB610\uB294 CHANGELOG",
+    checkSecurity: "\uBCF4\uC548 \uC2A4\uCE94\uC744 \uB3CC\uB838\uB098\uC694?",
+    hintSecurity: "vhk \uBCF4\uC548 scan",
+    checkCommit: "\uBAA8\uB4E0 \uBCC0\uACBD\uC774 \uCEE4\uBC0B\uB418\uC5C8\uB098\uC694?",
+    hintCommit: "git status \uD655\uC778",
+    changelogUpdated: (version) => `CHANGELOG.md \uAC31\uC2E0\uB428 \u2014 [Unreleased] \u2192 [${version}] \uC139\uC158\uC73C\uB85C \uC774\uB3D9`,
+    changelogNoUnreleased: "CHANGELOG.md\uC5D0 [Unreleased] \uC139\uC158\uC774 \uC5C6\uC5B4 \uC790\uB3D9 \uAC31\uC2E0\uC744 \uC2A4\uD0B5\uD588\uC5B4\uC694",
+    changelogMissing: "CHANGELOG.md\uAC00 \uC5C6\uC5B4\uC694. \uB9CC\uB4E4\uBA74 ship\uC774 \uC790\uB3D9\uC73C\uB85C [Unreleased] \u2192 \uBC84\uC804 \uC139\uC158\uC73C\uB85C \uC62E\uACA8\uC90D\uB2C8\uB2E4."
+  },
+  design: {
+    title: "\uB514\uC790\uC778 \uD1A0\uD070 \uC0DD\uC131",
+    selectPalette: "\uCEEC\uB7EC \uD314\uB808\uD2B8\uB97C \uC120\uD0DD\uD558\uC138\uC694:"
+  },
+  theme: {
+    title: "\uD14C\uB9C8 \uC124\uC815 (\uB2E4\uD06C/\uB77C\uC774\uD2B8 \uBAA8\uB4DC)"
+  },
+  ref: {
+    addTitle: "\uB808\uD37C\uB7F0\uC2A4 \uCD94\uAC00",
+    listTitle: "\uB808\uD37C\uB7F0\uC2A4 \uBAA9\uB85D"
+  },
+  memory: {
+    addTitle: "\uAE30\uC5B5 \uCD94\uAC00",
+    listTitle: "\uAE30\uC5B5 \uBAA9\uB85D"
+  },
+  mcp: {
+    initTitle: "Cursor MCP \uC5F0\uB3D9 \uC124\uC815",
+    serverStarted: "VHK MCP \uC11C\uBC84 \uC2DC\uC791\uB428"
+  },
+  deploy: {
+    title: "\uBC30\uD3EC\uD558\uAE30",
+    selectPlatform: "\uC5B4\uB5A4 \uD50C\uB7AB\uD3FC\uC5D0 \uBC30\uD3EC\uD560\uAE4C\uC694?",
+    deploying: "\uBC30\uD3EC \uC911...",
+    success: "\uBC30\uD3EC \uC131\uACF5!",
+    failed: "\uBC30\uD3EC \uC2E4\uD328"
+  },
+  env: {
+    title: "\uD658\uACBD\uBCC0\uC218 \uAD00\uB9AC",
+    checkTitle: "\uD658\uACBD\uBCC0\uC218 \uC810\uAC80"
+  },
+  publish: {
+    title: "npm \uBC30\uD3EC",
+    selectBump: "\uBC84\uC804\uC744 \uC5B4\uB5BB\uAC8C \uC62C\uB9B4\uAE4C\uC694?",
+    building: "\uBE4C\uB4DC \uC911...",
+    buildSuccess: "\uBE4C\uB4DC \uC131\uACF5",
+    buildFailed: "\uBE4C\uB4DC \uC2E4\uD328",
+    testing: "\uD14C\uC2A4\uD2B8 \uC911...",
+    testSuccess: "\uD14C\uC2A4\uD2B8 \uD1B5\uACFC",
+    testFailed: "\uD14C\uC2A4\uD2B8 \uC2E4\uD328",
+    publishing: "npm \uBC30\uD3EC \uC911...",
+    publishSuccess: "npm \uBC30\uD3EC \uC131\uACF5!",
+    publishFailed: "npm \uBC30\uD3EC \uC2E4\uD328"
+  },
+  harness: {
+    title: "\uD1B5\uD569 \uD488\uC9C8 \uC810\uAC80"
+  },
+  audit: {
+    title: "\uBCF4\uC548 \uAC10\uC0AC"
+  },
+  migrate: {
+    title: "\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658",
+    selectTarget: "\uC5B4\uB5A4 \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800\uB85C \uC804\uD658\uD560\uAE4C\uC694?"
+  },
+  update: {
+    title: "VHK CLI \uC5C5\uB370\uC774\uD2B8"
+  },
+  context: {
+    title: "\uD504\uB85C\uC81D\uD2B8 \uCEE8\uD14D\uC2A4\uD2B8 \uC0DD\uC131",
+    showTitle: "\uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C"
+  },
+  brief: {
+    title: "\uD504\uB85C\uC81D\uD2B8 \uBE0C\uB9AC\uD551"
+  },
+  goal: {
+    listTitle: "\u{1F3AF} Goal \uBAA9\uB85D",
+    nextTitle: "\u27A1\uFE0F  \uB2E4\uC74C Goal",
+    initTitle: "\u{1F3D7}\uFE0F  goals/ \uAD6C\uC870 \uC2A4\uCE90\uD3F4\uB529",
+    checkTitle: "\u2705 Goal \uAC8C\uC774\uD2B8 \uAC80\uC99D",
+    doneTitle: "\u{1F3C1} Goal \uC644\uB8CC \uCC98\uB9AC"
+  },
+  agent: {
+    blockerTitle: "\u{1F6D1} Blocker \uAE30\uB85D",
+    learnTitle: "\u{1F9E0} Learning \uAE30\uB85D",
+    resumeTitle: "\u25B6\uFE0F  HARD_STOP \uD574\uC81C"
+  }
+};
+function lookup(path3) {
+  const parts = path3.split(".");
+  let cur = ko;
+  for (const part of parts) {
+    if (cur === null || typeof cur !== "object") return void 0;
+    cur = cur[part];
+  }
+  return cur;
+}
+function t(key, ...args) {
+  const value = lookup(key);
+  if (typeof value === "function") {
+    return value(...args);
+  }
+  if (typeof value === "string") return value;
+  return key;
+}
+
+// src/lib/next-step.ts
+import chalk from "chalk";
+function printNextStep(step) {
+  console.log("");
+  console.log(chalk.cyan.bold("\u2501\u2501\u2501 \uB2E4\uC74C\uC5D0 \uC774\uAC83\uB9CC \uD558\uC138\uC694 \u2501\u2501\u2501"));
+  console.log("");
+  console.log(`  ${step.message}`);
+  if (step.command) {
+    console.log("");
+    console.log(chalk.white.bgGray(" \uD130\uBBF8\uB110\uC5D0 \uBCF5\uBD99 "));
+    console.log(chalk.green(`  ${step.command}`));
+  }
+  if (step.cursorHint) {
+    console.log("");
+    console.log(chalk.white.bgBlue(" Cursor\uC5D0\uAC8C \uB9D0\uD558\uAE30 "));
+    console.log(chalk.blue(`  "${step.cursorHint}"`));
+  }
+  if (step.alternative) {
+    console.log("");
+    console.log(chalk.dim(`  \uB610\uB294: ${step.alternative}`));
+  }
+  console.log("");
+  console.log(chalk.cyan.bold("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"));
+  console.log("");
+}
+
+// src/commands/deploy.ts
+var PLATFORMS = {
+  vercel: {
+    name: "Vercel",
+    detectFiles: ["vercel.json", ".vercel"],
+    command: "vercel",
+    commandArgs: ["--prod"],
+    checkArgs: ["--version"],
+    installHint: "npm i -g vercel"
+  },
+  netlify: {
+    name: "Netlify",
+    detectFiles: ["netlify.toml", ".netlify"],
+    command: "netlify",
+    commandArgs: ["deploy", "--prod"],
+    checkArgs: ["--version"],
+    installHint: "npm i -g netlify-cli"
+  },
+  cloudflare: {
+    name: "Cloudflare Workers",
+    detectFiles: ["wrangler.toml"],
+    command: "wrangler",
+    commandArgs: ["deploy"],
+    checkArgs: ["--version"],
+    installHint: "npm i -g wrangler"
+  }
+};
+function detectPlatform() {
+  for (const [key, config] of Object.entries(PLATFORMS)) {
+    for (const file of config.detectFiles) {
+      if (existsSync(file)) return key;
+    }
+  }
+  return null;
+}
+function isCLIAvailable(cmd, checkArgs) {
+  return safeExecFile(cmd, checkArgs).ok;
+}
+async function deploy() {
+  console.log(chalk2.bold("\n\u{1F680} " + t("deploy.title")));
+  console.log(chalk2.gray("\u2500".repeat(40)));
+  let platform = detectPlatform();
+  if (platform) {
+    console.log(chalk2.cyan(`
+\u{1F50D} \uAC10\uC9C0\uB41C \uD50C\uB7AB\uD3FC: ${PLATFORMS[platform].name}`));
+  } else {
+    const { selected } = await inquirer.prompt([
+      {
+        type: "list",
+        name: "selected",
+        message: t("deploy.selectPlatform"),
+        choices: [
+          { name: "\u25B2 Vercel", value: "vercel" },
+          { name: "\u25C6 Netlify", value: "netlify" },
+          { name: "\u2601 Cloudflare Workers", value: "cloudflare" }
+        ]
+      }
+    ]);
+    platform = selected;
+  }
+  const config = PLATFORMS[platform];
+  if (!isCLIAvailable(config.command, config.checkArgs)) {
+    console.log(chalk2.red(`
+\u274C ${config.name} CLI\uAC00 \uC124\uCE58\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`));
+    console.log(chalk2.yellow(`   \u2192 ${config.installHint}`));
+    return;
+  }
+  const { confirm } = await inquirer.prompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `${config.name}\uC5D0 \uD504\uB85C\uB355\uC158 \uBC30\uD3EC\uD560\uAE4C\uC694?`,
+      default: true
+    }
+  ]);
+  if (!confirm) {
+    console.log(chalk2.gray("\uCDE8\uC18C\uB428"));
+    return;
+  }
+  console.log(chalk2.cyan(`
+${t("deploy.deploying")}
+`));
+  const result = safeExecFileStream(config.command, config.commandArgs);
+  if (result.ok) {
+    console.log(chalk2.green(`
+\u2705 ${t("deploy.success")}`));
+    printNextStep({
+      message: "\uBC30\uD3EC \uC644\uB8CC! \uC0AC\uC774\uD2B8\uB97C \uD655\uC778\uD558\uC138\uC694.",
+      command: "vhk status",
+      cursorHint: "\uC0C1\uD0DC \uD655\uC778\uD574\uC918"
+    });
+  } else {
+    console.log(chalk2.red(`
+\u274C ${t("deploy.failed")}`));
+    console.log(chalk2.red(result.err));
+  }
+}
+
+// src/commands/env.ts
+import { existsSync as existsSync2, readFileSync, writeFileSync, appendFileSync } from "fs";
+import chalk3 from "chalk";
+function parseEnvKeys(content) {
+  return content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#")).map((line) => line.split("=")[0].trim()).filter(Boolean);
+}
+function ensureGitignore() {
+  const gitignorePath = ".gitignore";
+  if (existsSync2(gitignorePath)) {
+    const content = readFileSync(gitignorePath, "utf-8");
+    if (!content.split("\n").some((l) => l.trim() === ".env")) {
+      appendFileSync(gitignorePath, "\n.env\n");
+      console.log(chalk3.green("\n\u{1F512} .gitignore\uC5D0 .env \uCD94\uAC00\uB428"));
+    }
+  } else {
+    writeFileSync(gitignorePath, ".env\nnode_modules/\ndist/\n");
+    console.log(chalk3.green("\n\u{1F512} .gitignore \uC0DD\uC131 (.env \uD3EC\uD568)"));
+  }
+}
+async function env() {
+  console.log(chalk3.bold("\n\u{1F510} " + t("env.title")));
+  console.log(chalk3.gray("\u2500".repeat(40)));
+  if (!existsSync2(".env")) {
+    console.log(chalk3.yellow("\n\u26A0\uFE0F  .env \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk3.gray("   .env \uD30C\uC77C\uC744 \uBA3C\uC800 \uB9CC\uB4E4\uC5B4\uC8FC\uC138\uC694."));
+    return;
+  }
+  const envContent = readFileSync(".env", "utf-8");
+  const keys = parseEnvKeys(envContent);
+  if (keys.length === 0) {
+    console.log(chalk3.yellow("\n\u{1F4ED} .env\uC5D0 \uD658\uACBD\uBCC0\uC218\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    return;
+  }
+  const exampleContent = keys.map((k) => `${k}=`).join("\n") + "\n";
+  writeFileSync(".env.example", exampleContent, "utf-8");
+  console.log(chalk3.green(`
+\u2705 .env.example \uC0DD\uC131 (${keys.length}\uAC1C \uD0A4)`));
+  keys.forEach((k) => console.log(chalk3.gray(`   ${k}`)));
+  ensureGitignore();
+  printNextStep({
+    message: ".env.example \uC0DD\uC131 \uC644\uB8CC!",
+    command: "vhk env-check",
+    cursorHint: "\uD658\uACBD\uBCC0\uC218 \uC810\uAC80\uD574\uC918"
+  });
+}
+async function envCheck() {
+  console.log(chalk3.bold("\n\u{1F50D} " + t("env.checkTitle")));
+  console.log(chalk3.gray("\u2500".repeat(40)));
+  if (!existsSync2(".env.example")) {
+    console.log(chalk3.yellow("\n\u26A0\uFE0F  .env.example\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 vhk env\uB97C \uC2E4\uD589\uD558\uC138\uC694."));
+    return;
+  }
+  const requiredKeys = parseEnvKeys(readFileSync(".env.example", "utf-8"));
+  const currentKeys = existsSync2(".env") ? parseEnvKeys(readFileSync(".env", "utf-8")) : [];
+  const missing = requiredKeys.filter((k) => !currentKeys.includes(k));
+  const extra = currentKeys.filter((k) => !requiredKeys.includes(k));
+  console.log(chalk3.cyan(`
+\u{1F4CB} \uD544\uC218 \uD658\uACBD\uBCC0\uC218: ${requiredKeys.length}\uAC1C`));
+  if (missing.length === 0) {
+    console.log(chalk3.green("\n\u2705 \uBAA8\uB4E0 \uD544\uC218 \uD658\uACBD\uBCC0\uC218\uAC00 \uC124\uC815\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4!"));
+  } else {
+    console.log(chalk3.red(`
+\u274C \uB204\uB77D\uB41C \uD658\uACBD\uBCC0\uC218 (${missing.length}\uAC1C):`));
+    missing.forEach((k) => console.log(chalk3.red(`   \u2022 ${k}`)));
+  }
+  if (extra.length > 0) {
+    console.log(chalk3.yellow(`
+\u{1F4A1} .env.example\uC5D0 \uC5C6\uB294 \uCD94\uAC00 \uBCC0\uC218 (${extra.length}\uAC1C):`));
+    extra.forEach((k) => console.log(chalk3.yellow(`   \u2022 ${k}`)));
+  }
+  ensureGitignore();
+}
+
+// src/commands/publish.ts
+import { existsSync as existsSync3, writeFileSync as writeFileSync2 } from "fs";
+import chalk4 from "chalk";
+import inquirer2 from "inquirer";
+import ora from "ora";
+
+// src/lib/read-json.ts
+import { readFileSync as readFileSync2 } from "fs";
+function stripBom(text) {
+  return text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+}
+function readJsonFile(filePath) {
+  const raw = stripBom(readFileSync2(filePath, "utf-8"));
+  return JSON.parse(raw);
+}
+
+// src/commands/publish.ts
+function bumpVersion(current, type) {
+  const [major, minor, patch] = current.split(".").map((n) => parseInt(n, 10) || 0);
+  switch (type) {
+    case "major":
+      return `${major + 1}.0.0`;
+    case "minor":
+      return `${major}.${minor + 1}.0`;
+    case "patch":
+      return `${major}.${minor}.${patch + 1}`;
+  }
+}
+async function publish() {
+  console.log(chalk4.bold("\n\u{1F4E6} " + t("publish.title")));
+  console.log(chalk4.gray("\u2500".repeat(40)));
+  if (!existsSync3("package.json")) {
+    console.log(chalk4.red("\u274C package.json\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    return;
+  }
+  let pkg;
+  try {
+    pkg = readJsonFile("package.json");
+  } catch {
+    console.log(chalk4.red("\u274C package.json \uD30C\uC2F1 \uC2E4\uD328"));
+    return;
+  }
+  const currentVersion = pkg.version || "0.0.0";
+  console.log(chalk4.cyan(`
+\u{1F4CC} \uD604\uC7AC \uBC84\uC804: v${currentVersion}`));
+  const { bumpType } = await inquirer2.prompt([
+    {
+      type: "list",
+      name: "bumpType",
+      message: t("publish.selectBump"),
+      choices: [
+        { name: `\u{1F527} patch (${bumpVersion(currentVersion, "patch")}) \u2014 \uBC84\uADF8 \uC218\uC815`, value: "patch" },
+        { name: `\u2728 minor (${bumpVersion(currentVersion, "minor")}) \u2014 \uC0C8 \uAE30\uB2A5`, value: "minor" },
+        { name: `\u{1F4A5} major (${bumpVersion(currentVersion, "major")}) \u2014 \uD638\uD658\uC131 \uBCC0\uACBD`, value: "major" }
+      ]
+    }
+  ]);
+  const newVersion = bumpVersion(currentVersion, bumpType);
+  console.log(chalk4.cyan(`
+\u{1F195} \uC0C8 \uBC84\uC804: v${newVersion}`));
+  pkg.version = newVersion;
+  writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+  console.log(chalk4.green("\u2705 package.json \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8"));
+  const buildSpinner = ora(t("publish.building")).start();
+  const buildResult = safeExecFile("pnpm", ["build"]);
+  if (!buildResult.ok) {
+    buildSpinner.fail(t("publish.buildFailed"));
+    console.log(chalk4.red(buildResult.err.slice(0, 500)));
+    pkg.version = currentVersion;
+    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    return;
+  }
+  buildSpinner.succeed(t("publish.buildSuccess"));
+  const testSpinner = ora(t("publish.testing")).start();
+  const testResult = safeExecFile("pnpm", ["test", "--run"]);
+  if (!testResult.ok) {
+    testSpinner.fail(t("publish.testFailed"));
+    console.log(chalk4.red(testResult.err.slice(0, 500)));
+    pkg.version = currentVersion;
+    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    return;
+  }
+  testSpinner.succeed(t("publish.testSuccess"));
+  const { confirm } = await inquirer2.prompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `v${newVersion}\uC744 npm\uC5D0 \uBC30\uD3EC\uD560\uAE4C\uC694?`,
+      default: true
+    }
+  ]);
+  if (!confirm) {
+    pkg.version = currentVersion;
+    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    console.log(chalk4.gray("\uCDE8\uC18C\uB428. \uBC84\uC804\uC774 \uC6D0\uB798\uB300\uB85C \uBCF5\uAD6C\uB429\uB2C8\uB2E4."));
+    return;
+  }
+  console.log(chalk4.cyan(`
+\u{1F4E4} ${t("publish.publishing")}`));
+  console.log(chalk4.gray("   2FA \uD65C\uC131\uD654 \uC2DC: OTP 6\uC790\uB9AC \uC785\uB825 \uB610\uB294 \uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D URL \uD074\uB9AD (Windows Hello / PIN \uC9C0\uC6D0)"));
+  const pubResult = safeExecFileStream("npm", ["publish", "--access", "public"]);
+  if (!pubResult.ok) {
+    console.log(chalk4.red(`
+\u2716 ${t("publish.publishFailed")}`));
+    console.log(chalk4.red(pubResult.err.slice(0, 500)));
+    pkg.version = currentVersion;
+    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    console.log(chalk4.gray(`\u{1F4E6} package.json \uBC84\uC804\uC744 v${currentVersion}\uB85C \uBCF5\uAD6C\uD588\uC2B5\uB2C8\uB2E4.`));
+    return;
+  }
+  console.log(chalk4.green(`
+\u2714 ${t("publish.publishSuccess")}`));
+  const addResult = safeExecFile("git", ["add", "package.json"]);
+  if (addResult.ok) {
+    safeExecFile("git", ["commit", "-m", `chore: release v${newVersion}`]);
+    const tagResult = safeExecFile("git", ["tag", `v${newVersion}`]);
+    if (tagResult.ok) {
+      const pushResult = safeExecFile("git", ["push"]);
+      const pushTagsResult = safeExecFile("git", ["push", "--tags"]);
+      if (pushResult.ok && pushTagsResult.ok) {
+        console.log(chalk4.green(`
+\u{1F3F7}\uFE0F  git tag v${newVersion} \uC0DD\uC131 + push \uC644\uB8CC`));
+      } else {
+        console.log(chalk4.yellow(`
+\u{1F3F7}\uFE0F  git tag v${newVersion} \uC0DD\uC131\uB428 (push\uB294 \uC218\uB3D9\uC73C\uB85C)`));
+      }
+    }
+  }
+  console.log(chalk4.green.bold(`
+\u{1F389} v${newVersion} \uBC30\uD3EC \uC644\uB8CC!`));
+  printNextStep({
+    message: "npm \uBC30\uD3EC \uC644\uB8CC!",
+    command: "vhk status",
+    cursorHint: "\uC0C1\uD0DC \uD655\uC778\uD574\uC918"
+  });
+}
+
+// src/commands/audit.ts
+import { existsSync as existsSync4 } from "fs";
+import chalk5 from "chalk";
+import inquirer3 from "inquirer";
+import ora2 from "ora";
+function detectCurrentPM() {
+  if (existsSync4("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync4("yarn.lock")) return "yarn";
+  return "npm";
+}
+function parseAuditOutput(output, pm) {
+  const empty = { critical: 0, high: 0, moderate: 0, low: 0, total: 0 };
+  if (!output) return empty;
+  try {
+    const json = JSON.parse(output);
+    const meta = json.metadata?.vulnerabilities;
+    if (meta) {
+      const summary = {
+        critical: meta.critical ?? 0,
+        high: meta.high ?? 0,
+        moderate: meta.moderate ?? 0,
+        low: meta.low ?? 0,
+        total: meta.total ?? 0
+      };
+      if (!summary.total) {
+        summary.total = summary.critical + summary.high + summary.moderate + summary.low;
+      }
+      return summary;
+    }
+    void pm;
+    return empty;
+  } catch {
+    return empty;
+  }
+}
+function runAuditJson(pm) {
+  const result = safeExecFile(pm, ["audit", "--json"]);
+  return result.out;
+}
+function runAuditFix(pm) {
+  if (pm !== "npm") {
+    return { ok: false, err: `${pm}\uC740 \uC790\uB3D9 fix\uB97C \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. npm \uD658\uACBD\uC5D0\uC11C\uB9CC \uB3D9\uC791\uD569\uB2C8\uB2E4.` };
+  }
+  const result = safeExecFile("npm", ["audit", "fix"]);
+  return result.ok ? { ok: true } : { ok: false, err: result.err };
+}
+async function audit(autoFix = false) {
+  console.log(chalk5.bold("\n\u{1F6E1}\uFE0F  " + t("audit.title")));
+  console.log(chalk5.gray("\u2500".repeat(40)));
+  const pm = detectCurrentPM();
+  console.log(chalk5.cyan(`\u{1F4E6} \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800: ${pm}`));
+  const spinner = ora2("\uBCF4\uC548 \uAC10\uC0AC \uC2E4\uD589 \uC911...").start();
+  const output = runAuditJson(pm);
+  spinner.stop();
+  const summary = parseAuditOutput(output, pm);
+  if (summary.total === 0) {
+    console.log(chalk5.green.bold("\n\u{1F389} \uCDE8\uC57D\uC810\uC774 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4!"));
+    return;
+  }
+  console.log(chalk5.bold("\n\u{1F4CA} \uCDE8\uC57D\uC810 \uC694\uC57D:"));
+  if (summary.critical > 0) console.log(chalk5.red(`  \u{1F534} Critical: ${summary.critical}`));
+  if (summary.high > 0) console.log(chalk5.red(`  \u{1F7E0} High: ${summary.high}`));
+  if (summary.moderate > 0) console.log(chalk5.yellow(`  \u{1F7E1} Moderate: ${summary.moderate}`));
+  if (summary.low > 0) console.log(chalk5.gray(`  \u26AA Low: ${summary.low}`));
+  console.log(chalk5.bold(`
+  \uCD1D ${summary.total}\uAC1C\uC758 \uCDE8\uC57D\uC810`));
+  const shouldRunFix = autoFix ? true : summary.critical > 0 || summary.high > 0 ? (await inquirer3.prompt([
+    {
+      type: "confirm",
+      name: "shouldFix",
+      message: "\uC790\uB3D9 \uC218\uC815\uC744 \uC2DC\uB3C4\uD560\uAE4C\uC694? (npm audit fix)",
+      default: true
+    }
+  ])).shouldFix : false;
+  if (shouldRunFix) {
+    const fixSpinner = ora2("\uC790\uB3D9 \uC218\uC815 \uC911...").start();
+    const result = runAuditFix(pm);
+    if (result.ok) {
+      fixSpinner.succeed("\uC790\uB3D9 \uC218\uC815 \uC644\uB8CC!");
+    } else {
+      fixSpinner.warn(result.err ?? "\uC77C\uBD80 \uCDE8\uC57D\uC810\uC740 \uC218\uB3D9 \uC218\uC815\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.");
+    }
+  }
+  printNextStep({
+    message: "\uBCF4\uC548 \uAC10\uC0AC \uC644\uB8CC.",
+    command: "vhk harness",
+    cursorHint: "\uD488\uC9C8 \uC810\uAC80\uD574\uC918"
+  });
+}
+
+// src/mcp/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3, appendFileSync as appendFileSync2 } from "fs";
+
+// src/lib/scan-secrets.ts
+import fs3 from "fs";
+
+// src/lib/secret-patterns.ts
+var SECRET_PATTERNS = [
+  {
+    id: "aws-access-key",
+    name: "AWS Access Key",
+    severity: "critical",
+    pattern: /AKIA[0-9A-Z]{16}/
+  },
+  {
+    id: "aws-secret-key",
+    name: "AWS Secret Key",
+    severity: "critical",
+    pattern: /aws_secret_access_key\s*=\s*['"]?[A-Za-z0-9/+=]{40}['"]?/i
+  },
+  {
+    id: "private-key",
+    name: "Private Key",
+    severity: "critical",
+    pattern: /-----BEGIN (RSA |EC |OPENSSH )?PRIVATE KEY-----/
+  },
+  {
+    id: "notion-token",
+    name: "Notion Integration Token",
+    severity: "critical",
+    pattern: /secret_[A-Za-z0-9]{40,50}/
+  },
+  {
+    id: "github-token",
+    name: "GitHub Token",
+    severity: "critical",
+    pattern: /ghp_[A-Za-z0-9]{36,}/
+  },
+  {
+    id: "openai-key",
+    name: "OpenAI API Key",
+    severity: "critical",
+    pattern: /\bsk-(?:proj-|ant-api03-|live-)[A-Za-z0-9_-]{16,}\b/
+  },
+  {
+    id: "generic-api-key",
+    name: "Generic API Key",
+    severity: "high",
+    pattern: /(?:api[_-]?key|apikey|access[_-]?token)\s*[:=]\s*['"]?[A-Za-z0-9_\-]{16,}['"]?/i
+  },
+  {
+    id: "password-inline",
+    name: "Inline Password",
+    severity: "high",
+    pattern: /(?:password|passwd|pwd)\s*[:=]\s*['"][^'"]{8,}['"]/i
+  },
+  {
+    id: "jwt",
+    name: "JWT Token",
+    severity: "medium",
+    pattern: /eyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/
+  }
+];
+function maskSecret(value) {
+  if (value.length <= 8) return "****";
+  const visible = Math.min(8, value.length - 4);
+  return value.slice(0, visible) + "****";
+}
+
+// src/lib/scan-files.ts
+import fs2 from "fs";
+import path2 from "path";
+
+// src/lib/check-secure.ts
+var import_ignore = __toESM(require_ignore(), 1);
+import fs from "fs";
+import path from "path";
+import chalk6 from "chalk";
+function loadGitignore(rootDir) {
+  const ig = (0, import_ignore.default)();
+  const gitignorePath = path.join(rootDir, ".gitignore");
+  if (fs.existsSync(gitignorePath)) {
+    const content = fs.readFileSync(gitignorePath, "utf-8");
+    ig.add(content);
+  }
+  return ig;
+}
+function isPathIgnored(ig, relativePath) {
+  const normalized = relativePath.replace(/\\/g, "/");
+  return ig.ignores(normalized);
+}
+function findExposedSensitiveFiles(rootDir, ig = loadGitignore(rootDir), maxDepth = 8) {
+  const exposed = [];
+  function walk(dir, depth) {
+    if (depth > maxDepth) return;
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (entry.name === "node_modules" || entry.name === ".git") continue;
+      const fullPath = path.join(dir, entry.name);
+      const rel = path.relative(rootDir, fullPath).replace(/\\/g, "/");
+      if (entry.isDirectory()) {
+        if (!isPathIgnored(ig, rel + "/")) walk(fullPath, depth + 1);
+        continue;
+      }
+      if (isSensitiveName(entry.name) && !isPathIgnored(ig, rel)) {
+        exposed.push(rel);
+      }
+    }
+  }
+  walk(rootDir, 0);
+  return exposed;
+}
+function isSensitiveName(name) {
+  const lower = name.toLowerCase();
+  if (lower === ".env" || lower.startsWith(".env.")) return true;
+  if (lower.endsWith(".pem") || lower.endsWith(".key")) return true;
+  if (lower === "credentials.json" || lower === "secrets.json") return true;
+  if (lower.startsWith("id_rsa")) return true;
+  return false;
+}
+function checkProjectSecurity(rootDir = process.cwd()) {
+  const gitignorePath = path.join(rootDir, ".gitignore");
+  const missingGitignore = !fs.existsSync(gitignorePath);
+  const ig = loadGitignore(rootDir);
+  const exposedPaths = findExposedSensitiveFiles(rootDir, ig);
+  const warnings = [];
+  if (missingGitignore) {
+    warnings.push(".gitignore \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBBFC\uAC10\uD55C \uD30C\uC77C\uC774 \uC2E4\uC218\uB85C \uC62C\uB77C\uAC08 \uC218 \uC788\uC5B4\uC694.");
+  }
+  if (exposedPaths.length > 0) {
+    warnings.push(
+      `ignore\uB418\uC9C0 \uC54A\uC740 \uBBFC\uAC10 \uD30C\uC77C ${exposedPaths.length}\uAC1C: ${exposedPaths.join(", ")}`
+    );
+  }
+  return {
+    ok: !missingGitignore && exposedPaths.length === 0,
+    missingGitignore,
+    exposedPaths,
+    warnings
+  };
+}
+function printSecurityWarnings(rootDir = process.cwd()) {
+  const result = checkProjectSecurity(rootDir);
+  if (result.ok) return true;
+  for (const w of result.warnings) {
+    console.log(chalk6.yellow(`   \u26A0\uFE0F  ${w}`));
+  }
+  return false;
+}
+function filterTrackedPaths(paths, rootDir = process.cwd()) {
+  const ig = loadGitignore(rootDir);
+  return paths.filter((p) => !isPathIgnored(ig, p.replace(/\\/g, "/")));
+}
+
+// src/lib/scan-files.ts
+var IGNORE_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  ".next",
+  ".nuxt",
+  "build",
+  "coverage",
+  "out",
+  ".turbo",
+  ".vercel",
+  ".cache",
+  ".pnpm",
+  ".idea",
+  ".claude",
+  ".cursor"
+]);
+var SKIP_FILE_NAMES = /* @__PURE__ */ new Set([
+  "pnpm-lock.yaml",
+  "package-lock.json",
+  "yarn.lock"
+]);
+var SCAN_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".ts",
+  ".tsx",
+  ".js",
+  ".jsx",
+  ".mjs",
+  ".cjs",
+  ".json",
+  ".yaml",
+  ".yml",
+  ".toml"
+]);
+var MAX_SCAN_FILE_BYTES = 512 * 1024;
+function isScannableFileName(fileName) {
+  if (SKIP_FILE_NAMES.has(fileName)) return false;
+  if (fileName.startsWith(".env")) return true;
+  return SCAN_EXTENSIONS.has(path2.extname(fileName).toLowerCase());
+}
+function walkProjectFiles(rootDir, onFile, ig = loadGitignore(rootDir)) {
+  function walk(dir) {
+    let entries;
+    try {
+      entries = fs2.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const fullPath = path2.join(dir, entry.name);
+      const rel = path2.relative(rootDir, fullPath).replace(/\\/g, "/");
+      if (entry.isDirectory()) {
+        if (IGNORE_DIRS.has(entry.name)) continue;
+        if (isPathIgnored(ig, `${rel}/`)) continue;
+        walk(fullPath);
+        continue;
+      }
+      if (!isScannableFileName(entry.name)) continue;
+      if (isPathIgnored(ig, rel)) continue;
+      let size = 0;
+      try {
+        size = fs2.statSync(fullPath).size;
+      } catch {
+        continue;
+      }
+      if (size > MAX_SCAN_FILE_BYTES) continue;
+      onFile(fullPath, rel);
+    }
+  }
+  walk(rootDir);
+}
+
+// src/lib/scan-secrets.ts
+var MAX_SECRET_FINDINGS = 200;
+var MAX_LINE_CHARS = 4e3;
+function globalPattern(pattern) {
+  const flags = pattern.flags.includes("g") ? pattern.flags : `${pattern.flags}g`;
+  return new RegExp(pattern.source, flags);
+}
+function findSecretsInLine(line, relPath, lineNum) {
+  const found = [];
+  const trimmed = line.trim();
+  if (trimmed.startsWith("//") && trimmed.includes("example")) return found;
+  if (trimmed.startsWith("#") && trimmed.includes("example")) return found;
+  if (line.length > MAX_LINE_CHARS) return found;
+  for (const pattern of SECRET_PATTERNS) {
+    const regex = globalPattern(pattern.pattern);
+    for (const match of line.matchAll(regex)) {
+      found.push({
+        patternId: pattern.id,
+        patternName: pattern.name,
+        severity: pattern.severity,
+        file: relPath,
+        line: lineNum,
+        match: maskSecret(match[0])
+      });
+    }
+  }
+  return found;
+}
+function scanProjectForSecrets(cwd) {
+  const findings = [];
+  let scannedFiles = 0;
+  let truncated = false;
+  walkProjectFiles(cwd, (filePath, relPath) => {
+    scannedFiles++;
+    const content = fs3.readFileSync(filePath, "utf-8");
+    const lines = content.split("\n");
+    lines.forEach((line, idx) => {
+      if (truncated) return;
+      const lineFindings = findSecretsInLine(line, relPath, idx + 1);
+      for (const f of lineFindings) {
+        findings.push(f);
+        if (findings.length >= MAX_SECRET_FINDINGS) {
+          truncated = true;
+          return;
+        }
+      }
+    });
+  });
+  return { findings, scannedFiles, truncated };
+}
+function filterSevereFindings(findings) {
+  return findings.filter((f) => f.severity === "critical" || f.severity === "high");
+}
+
+// src/mcp/server.ts
+var SERVER_VERSION = "1.3.0";
+function isGitRepo() {
+  return safeExecFile("git", ["rev-parse", "--is-inside-work-tree"]).ok;
+}
+var ANSI_RE = /\x1B\[[0-9;?]*[ -/]*[@-~]/g;
+function stripAnsi(s) {
+  return s.replace(ANSI_RE, "");
+}
+function runVhkCli(args, headline) {
+  const result = safeExecFile("vhk", args, { env: { FORCE_COLOR: "0", NO_COLOR: "1" } });
+  const body = stripAnsi(result.out || (result.ok ? "" : `(stdout \uC5C6\uC74C)
+${result.err}`));
+  const prefix = result.ok ? `\u2705 ${headline}` : `\u274C ${headline} \uC2E4\uD328`;
+  return { content: [{ type: "text", text: `${prefix}
+${body}`.trim() }] };
+}
+function createVhkMcpServer() {
+  const server = new McpServer({
+    name: "vhk",
+    version: SERVER_VERSION
+  });
+  server.registerTool(
+    "save",
+    {
+      description: "\uBCC0\uACBD\uC0AC\uD56D \uC800\uC7A5 (git add \u2192 commit \u2192 push)",
+      inputSchema: {
+        message: z.string().optional().describe("\uCEE4\uBC0B \uBA54\uC2DC\uC9C0 (\uBE44\uC6B0\uBA74 \uC790\uB3D9 \uC0DD\uC131)")
+      }
+    },
+    async ({ message }) => {
+      if (!isGitRepo()) {
+        return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+      }
+      const status = safeExecFile("git", ["status", "--porcelain"]);
+      if (!status.ok) {
+        return { content: [{ type: "text", text: `\u274C git status \uC2E4\uD328: ${status.err}` }] };
+      }
+      if (!status.out) {
+        return { content: [{ type: "text", text: "\u{1F4ED} \uC800\uC7A5\uD560 \uBCC0\uACBD\uC0AC\uD56D\uC774 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
+      }
+      const files = status.out.split("\n");
+      const severe = filterSevereFindings(scanProjectForSecrets(process.cwd()).findings);
+      if (severe.length > 0) {
+        const preview = severe.slice(0, 5).map((f) => `  ${f.file}:${f.line} \u2014 ${f.patternName}`).join("\n");
+        const more = severe.length > 5 ? `
+  ... \uC678 ${severe.length - 5}\uAC74` : "";
+        return {
+          content: [
+            {
+              type: "text",
+              text: `\u{1F6D1} \uC2DC\uD06C\uB9BF \uC758\uC2EC ${severe.length}\uAC74 \uBC1C\uACAC \u2014 MCP \uBAA8\uB4DC\uC5D0\uC11C\uB294 commit \uAC70\uBD80.
+${preview}${more}
+
+\uD574\uACB0: \uC2DC\uD06C\uB9BF\uC744 \uC81C\uAC70\uD558\uAC70\uB098 .gitignore \uCC98\uB9AC \uD6C4, \uC758\uC2DD\uC801\uC73C\uB85C \uC9C4\uD589\uD558\uB824\uBA74 \uD130\uBBF8\uB110\uC5D0\uC11C \`vhk save\` (CLI \uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uD1B5\uACFC \uD6C4 \uC9C4\uD589 \uAC00\uB2A5).`
+            }
+          ]
+        };
+      }
+      const now = /* @__PURE__ */ new Date();
+      const ts = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-${String(now.getDate()).padStart(2, "0")} ${String(now.getHours()).padStart(2, "0")}:${String(now.getMinutes()).padStart(2, "0")}`;
+      const commitMsg = message?.trim() || `\u2728 vhk save: ${ts}`;
+      const add = safeExecFile("git", ["add", "."]);
+      if (!add.ok) {
+        return { content: [{ type: "text", text: `\u274C git add \uC2E4\uD328: ${add.err}` }] };
+      }
+      const commit = safeExecFile("git", ["commit", "-m", commitMsg]);
+      if (!commit.ok) {
+        return { content: [{ type: "text", text: `\u274C commit \uC2E4\uD328: ${commit.err}` }] };
+      }
+      const push = safeExecFile("git", ["push"]);
+      const pushResult = push.ok ? "+ \uC6D0\uACA9 \uC5C5\uB85C\uB4DC \uC644\uB8CC" : "(\uC6D0\uACA9 \uC800\uC7A5\uC18C \uC5C6\uAC70\uB098 push \uC2E4\uD328 \u2192 \uC2A4\uD0B5)";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `\u2705 ${files.length}\uAC1C \uD30C\uC77C \uC800\uC7A5 \uC644\uB8CC! ${pushResult}
+\uCEE4\uBC0B: ${commitMsg}`
+          }
+        ]
+      };
+    }
+  );
+  server.registerTool("undo", { description: "\uCD5C\uADFC \uCEE4\uBC0B \uB418\uB3CC\uB9AC\uAE30 (soft reset, \uBCC0\uACBD\uC0AC\uD56D\uC740 \uC720\uC9C0)" }, async () => {
+    if (!isGitRepo()) {
+      return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+    }
+    const last = safeExecFile("git", ["log", "--oneline", "-1"]);
+    if (!last.ok || !last.out) {
+      return { content: [{ type: "text", text: "\u{1F4ED} \uB418\uB3CC\uB9B4 \uCEE4\uBC0B\uC774 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
+    }
+    const reset = safeExecFile("git", ["reset", "--soft", "HEAD~1"]);
+    if (!reset.ok) {
+      return { content: [{ type: "text", text: `\u274C reset \uC2E4\uD328: ${reset.err}` }] };
+    }
+    return {
+      content: [
+        {
+          type: "text",
+          text: `\u2705 \uB418\uB3CC\uB9AC\uAE30 \uC644\uB8CC!
+\uCDE8\uC18C\uB41C \uCEE4\uBC0B: ${last.out}
+\u{1F4A1} \uBCC0\uACBD\uC0AC\uD56D\uC740 \uC2A4\uD14C\uC774\uC9D5 \uC601\uC5ED\uC5D0 \uB0A8\uC544\uC788\uC2B5\uB2C8\uB2E4.`
+        }
+      ]
+    };
+  });
+  server.registerTool("status", { description: "\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uB300\uC2DC\uBCF4\uB4DC (\uBE0C\uB79C\uCE58/\uBCC0\uACBD\uC0AC\uD56D/\uCD5C\uADFC \uCEE4\uBC0B)" }, async () => {
+    const lines = [];
+    if (existsSync5("package.json")) {
+      try {
+        const pkg = readJsonFile("package.json");
+        lines.push(`\u{1F4E6} \uD504\uB85C\uC81D\uD2B8: ${pkg.name ?? "(\uC774\uB984 \uC5C6\uC74C)"} v${pkg.version ?? "?"}`);
+      } catch {
+      }
+    }
+    if (!isGitRepo()) {
+      lines.push("\u26A0\uFE0F  git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4");
+      return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+    const branch = safeExecFile("git", ["branch", "--show-current"]);
+    if (branch.ok) lines.push(`\u{1F33F} \uBE0C\uB79C\uCE58: ${branch.out || "(detached)"}`);
+    const status = safeExecFile("git", ["status", "--porcelain"]);
+    if (status.ok) {
+      if (!status.out) {
+        lines.push("\u{1F4DD} \uBCC0\uACBD\uC0AC\uD56D: \u2705 \uAE68\uB057\uD568");
+      } else {
+        const fileLines = status.out.split("\n");
+        const staged = fileLines.filter((l) => l[0] !== " " && l[0] !== "?").length;
+        const unstaged = fileLines.filter((l) => l[1] === "M" || l[1] === "D").length;
+        const untracked = fileLines.filter((l) => l.startsWith("??")).length;
+        const parts = [];
+        if (staged) parts.push(`\uC2A4\uD14C\uC774\uC9D5 ${staged}\uAC1C`);
+        if (unstaged) parts.push(`\uC218\uC815 ${unstaged}\uAC1C`);
+        if (untracked) parts.push(`\uC0C8\uD30C\uC77C ${untracked}\uAC1C`);
+        lines.push(`\u{1F4DD} \uBCC0\uACBD\uC0AC\uD56D: ${parts.join(", ")}`);
+      }
+    }
+    const log = safeExecFile("git", ["log", "--oneline", "-3"]);
+    if (log.ok && log.out) {
+      lines.push("\u{1F4DC} \uCD5C\uADFC \uCEE4\uBC0B:");
+      log.out.split("\n").forEach((l) => lines.push(`   ${l}`));
+    }
+    return { content: [{ type: "text", text: lines.join("\n") }] };
+  });
+  server.registerTool("diff", { description: "\uBCC0\uACBD\uC0AC\uD56D \uD655\uC778 (staged/unstaged/\uC0C8\uD30C\uC77C + \uCD1D \uBCC0\uACBD \uC694\uC57D)" }, async () => {
+    if (!isGitRepo()) {
+      return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+    }
+    const unstaged = safeExecFile("git", ["diff", "--stat"]);
+    const staged = safeExecFile("git", ["diff", "--cached", "--stat"]);
+    const untracked = safeExecFile("git", ["ls-files", "--others", "--exclude-standard"]);
+    const unstagedOut = unstaged.ok ? unstaged.out : "";
+    const stagedOut = staged.ok ? staged.out : "";
+    const untrackedOut = untracked.ok ? untracked.out : "";
+    if (!unstagedOut && !stagedOut && !untrackedOut) {
+      return { content: [{ type: "text", text: "\u2705 \uBCC0\uACBD\uC0AC\uD56D \uC5C6\uC74C! \uAE68\uB057\uD569\uB2C8\uB2E4." }] };
+    }
+    const lines = [];
+    if (stagedOut) {
+      lines.push("\u{1F4E6} \uCEE4\uBC0B \uB300\uAE30 (staged):");
+      lines.push(stagedOut);
+    }
+    if (unstagedOut) {
+      lines.push("\u270F\uFE0F \uC218\uC815\uB428 (unstaged):");
+      lines.push(unstagedOut);
+    }
+    if (untrackedOut) {
+      const files = untrackedOut.split("\n");
+      lines.push(`\u2795 \uC0C8 \uD30C\uC77C (${files.length}\uAC1C):`);
+      files.forEach((f) => lines.push(`   + ${f}`));
+    }
+    const numstat = safeExecFile("git", ["diff", "--numstat", "HEAD"]);
+    if (numstat.ok && numstat.out) {
+      let totalAdd = 0;
+      let totalDel = 0;
+      let fileCount = 0;
+      numstat.out.split("\n").forEach((line) => {
+        const [add, del] = line.split("	");
+        totalAdd += parseInt(add, 10) || 0;
+        totalDel += parseInt(del, 10) || 0;
+        fileCount += 1;
+      });
+      lines.push(`
+\u{1F4CA} \uCD1D \uBCC0\uACBD: ${fileCount}\uAC1C \uD30C\uC77C, +${totalAdd}\uC904 -${totalDel}\uC904`);
+    }
+    return { content: [{ type: "text", text: lines.join("\n") }] };
+  });
+  server.registerTool("ship", { description: "\uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 \uC2E4\uD589 (\uBE4C\uB4DC + \uD14C\uC2A4\uD2B8 + \uBC84\uC804 + git \uC0C1\uD0DC)" }, async () => {
+    const checks = [];
+    const build = safeExecFile("pnpm", ["build"]);
+    checks.push(build.ok ? "\u2705 \uBE4C\uB4DC \uC131\uACF5" : "\u274C \uBE4C\uB4DC \uC2E4\uD328");
+    const test = safeExecFile("pnpm", ["test", "--run"]);
+    checks.push(test.ok ? "\u2705 \uD14C\uC2A4\uD2B8 \uD1B5\uACFC" : "\u274C \uD14C\uC2A4\uD2B8 \uC2E4\uD328");
+    if (existsSync5("package.json")) {
+      try {
+        const pkg = readJsonFile("package.json");
+        checks.push(`\u{1F4E6} \uBC84\uC804: ${pkg.version}`);
+      } catch {
+      }
+    }
+    if (isGitRepo()) {
+      const status = safeExecFile("git", ["status", "--porcelain"]);
+      if (status.ok) {
+        if (status.out) {
+          checks.push(`\u26A0\uFE0F \uCEE4\uBC0B\uB418\uC9C0 \uC54A\uC740 \uBCC0\uACBD\uC0AC\uD56D ${status.out.split("\n").length}\uAC1C`);
+        } else {
+          checks.push("\u2705 \uC6CC\uD0B9 \uB514\uB809\uD1A0\uB9AC \uAE68\uB057\uD568");
+        }
+      }
+    }
+    return { content: [{ type: "text", text: "\u{1F680} \uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8\n" + checks.join("\n") }] };
+  });
+  server.registerTool("doctor", { description: "\uAC1C\uBC1C \uD658\uACBD \uC810\uAC80 (Node/Git/npm/pnpm/TypeScript)" }, async () => {
+    const checks = [];
+    const node = safeExecFile("node", ["--version"]);
+    checks.push(node.ok ? `\u2705 Node.js: ${node.out}` : "\u274C Node.js: \uC124\uCE58 \uC548 \uB428");
+    const git = safeExecFile("git", ["--version"]);
+    checks.push(git.ok ? `\u2705 Git: ${git.out}` : "\u274C Git: \uC124\uCE58 \uC548 \uB428");
+    const pnpm = safeExecFile("pnpm", ["--version"]);
+    checks.push(pnpm.ok ? `\u2705 pnpm: v${pnpm.out}` : "\u26A0\uFE0F pnpm: \uC124\uCE58 \uC548 \uB428");
+    const npm = safeExecFile("npm", ["--version"]);
+    checks.push(npm.ok ? `\u2705 npm: v${npm.out}` : "\u274C npm: \uC124\uCE58 \uC548 \uB428");
+    const tsc = safeExecFile("npx", ["tsc", "--version"]);
+    checks.push(tsc.ok ? `\u2705 TypeScript: ${tsc.out}` : "\u26A0\uFE0F TypeScript: \uD504\uB85C\uC81D\uD2B8\uC5D0 \uC5C6\uC74C");
+    return { content: [{ type: "text", text: "\u{1FA7A} \uD658\uACBD \uC810\uAC80 \uACB0\uACFC\n" + checks.join("\n") }] };
+  });
+  server.registerTool("check", { description: "\uD504\uB85C\uC81D\uD2B8 \uAD6C\uC870 \uC810\uAC80 (\uD544\uC218 \uD30C\uC77C + VHK \uD558\uB124\uC2A4 \uD30C\uC77C)" }, async () => {
+    const required = ["package.json", "tsconfig.json", "README.md", ".gitignore"];
+    const recommended = ["CLAUDE.md", ".cursorrules", "docs/PRD.md", "docs/ARCHITECTURE.md"];
+    const lines = ["\u{1F50D} \uD504\uB85C\uC81D\uD2B8 \uC810\uAC80", "", "\uD544\uC218:"];
+    required.forEach((f) => {
+      lines.push(`  ${existsSync5(f) ? "\u2705" : "\u274C"} ${f}`);
+    });
+    lines.push("", "\uAD8C\uC7A5 (VHK \uD558\uB124\uC2A4):");
+    recommended.forEach((f) => {
+      lines.push(`  ${existsSync5(f) ? "\u2705" : "\u26A0\uFE0F"} ${f}`);
+    });
+    return { content: [{ type: "text", text: lines.join("\n") }] };
+  });
+  server.registerTool(
+    "recap",
+    {
+      description: "\uCD5C\uADFC \uC791\uC5C5 \uC694\uC57D (\uCEE4\uBC0B \uD788\uC2A4\uD1A0\uB9AC \uAE30\uBC18, \uB0A0\uC9DC \uD3EC\uD568)",
+      inputSchema: {
+        count: z.number().optional().describe("\uD45C\uC2DC\uD560 \uCEE4\uBC0B \uC218 (\uAE30\uBCF8: 10)")
+      }
+    },
+    async ({ count }) => {
+      if (!isGitRepo()) {
+        return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
+      }
+      const n = count && count > 0 ? Math.floor(count) : 10;
+      const log = safeExecFile("git", ["log", "--format=%h %ad %s", "--date=short", `-${n}`]);
+      if (!log.ok) {
+        return { content: [{ type: "text", text: `\u274C git log \uC2E4\uD328: ${log.err}` }] };
+      }
+      if (!log.out) {
+        return { content: [{ type: "text", text: "\u{1F4ED} \uCEE4\uBC0B \uD788\uC2A4\uD1A0\uB9AC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
+      }
+      return { content: [{ type: "text", text: `\u{1F4CB} \uCD5C\uADFC \uC791\uC5C5 (${n}\uAC1C):
+${log.out}` }] };
+    }
+  );
+  server.registerTool(
+    "env",
+    {
+      description: ".env \u2192 .env.example \uB3D9\uAE30\uD654 + .gitignore\uC5D0 .env \uC790\uB3D9 \uCD94\uAC00"
+    },
+    async () => {
+      if (!existsSync5(".env")) {
+        return { content: [{ type: "text", text: "\u26A0\uFE0F  .env \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 .env\uB97C \uB9CC\uB4E4\uC5B4\uC8FC\uC138\uC694." }] };
+      }
+      const keys = parseEnvKeys(readFileSync4(".env", "utf-8"));
+      if (keys.length === 0) {
+        return { content: [{ type: "text", text: "\u{1F4ED} .env\uC5D0 \uD658\uACBD\uBCC0\uC218\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
+      }
+      const exampleContent = keys.map((k) => `${k}=`).join("\n") + "\n";
+      writeFileSync3(".env.example", exampleContent, "utf-8");
+      const gitignoreLines = [];
+      if (existsSync5(".gitignore")) {
+        const content = readFileSync4(".gitignore", "utf-8");
+        if (!content.split("\n").some((l) => l.trim() === ".env")) {
+          appendFileSync2(".gitignore", "\n.env\n");
+          gitignoreLines.push("\u{1F512} .gitignore\uC5D0 .env \uCD94\uAC00\uB428");
+        }
+      } else {
+        writeFileSync3(".gitignore", ".env\nnode_modules/\ndist/\n");
+        gitignoreLines.push("\u{1F512} .gitignore \uC0DD\uC131 (.env \uD3EC\uD568)");
+      }
+      const lines = [`\u2705 .env.example \uC0DD\uC131 (${keys.length}\uAC1C \uD0A4)`, ...keys.map((k) => `   ${k}`)];
+      if (gitignoreLines.length) lines.push("", ...gitignoreLines);
+      return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+  );
+  server.registerTool(
+    "env-check",
+    {
+      description: "\uD544\uC218 \uD658\uACBD\uBCC0\uC218 \uB204\uB77D \uAC80\uC0AC (.env.example \uAE30\uC900)"
+    },
+    async () => {
+      if (!existsSync5(".env.example")) {
+        return { content: [{ type: "text", text: "\u26A0\uFE0F  .env.example\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 env \uB3C4\uAD6C\uB97C \uC2E4\uD589\uD558\uC138\uC694." }] };
+      }
+      const requiredKeys = parseEnvKeys(readFileSync4(".env.example", "utf-8"));
+      const currentKeys = existsSync5(".env") ? parseEnvKeys(readFileSync4(".env", "utf-8")) : [];
+      const missing = requiredKeys.filter((k) => !currentKeys.includes(k));
+      const extra = currentKeys.filter((k) => !requiredKeys.includes(k));
+      const lines = [`\u{1F4CB} \uD544\uC218 \uD658\uACBD\uBCC0\uC218: ${requiredKeys.length}\uAC1C`];
+      if (missing.length === 0) {
+        lines.push("\u2705 \uBAA8\uB4E0 \uD544\uC218 \uD658\uACBD\uBCC0\uC218\uAC00 \uC124\uC815\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4!");
+      } else {
+        lines.push(`\u274C \uB204\uB77D\uB41C \uD658\uACBD\uBCC0\uC218 (${missing.length}\uAC1C):`);
+        missing.forEach((k) => lines.push(`   \u2022 ${k}`));
+      }
+      if (extra.length > 0) {
+        lines.push(`\u{1F4A1} .env.example\uC5D0 \uC5C6\uB294 \uCD94\uAC00 \uBCC0\uC218 (${extra.length}\uAC1C):`);
+        extra.forEach((k) => lines.push(`   \u2022 ${k}`));
+      }
+      return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+  );
+  server.registerTool(
+    "sync",
+    { description: "RULES.md \u2192 .cursorrules + CLAUDE.md \uC790\uB3D9 \uB3D9\uAE30\uD654" },
+    async () => runVhkCli(["sync"], "sync")
+  );
+  server.registerTool(
+    "secure",
+    { description: "\uC2DC\uD06C\uB9BF/\uD658\uACBD\uBCC0\uC218 \uBCF4\uC548 \uC2A4\uCE94 (.env \uB178\uCD9C + \uD0A4 \uD328\uD134 \uD0D0\uC9C0)" },
+    async () => runVhkCli(["secure"], "secure")
+  );
+  server.registerTool(
+    "audit",
+    {
+      description: "npm/pnpm/yarn \uBCF4\uC548 \uCDE8\uC57D\uC810 \uAC10\uC0AC \u2014 \uC694\uC57D\uB9CC (MCP \uBAA8\uB4DC: \uC2E4\uC81C fix \uBBF8\uC218\uD589, `vhk audit` \uC548\uB0B4)"
+    },
+    async () => {
+      const pm = detectCurrentPM();
+      const output = runAuditJson(pm);
+      const summary = parseAuditOutput(output, pm);
+      if (summary.total === 0) {
+        return {
+          content: [{ type: "text", text: `\u{1F389} ${pm}: \uCDE8\uC57D\uC810 0\uAC74.` }]
+        };
+      }
+      const breakdown = [
+        summary.critical > 0 ? `\u{1F534} critical ${summary.critical}` : null,
+        summary.high > 0 ? `\u{1F7E0} high ${summary.high}` : null,
+        summary.moderate > 0 ? `\u{1F7E1} moderate ${summary.moderate}` : null,
+        summary.low > 0 ? `\u26AA low ${summary.low}` : null
+      ].filter(Boolean).join("  ");
+      return {
+        content: [
+          {
+            type: "text",
+            text: `\u{1F4E6} PM: ${pm}
+\u{1F4CA} \uCD1D ${summary.total}\uAC74
+  ${breakdown}
+
+\uC2E4\uC81C fix \uB294 \uD130\uBBF8\uB110\uC5D0\uC11C: vhk audit (\uB610\uB294 ${pm} audit fix)`
+          }
+        ]
+      };
+    }
+  );
+  server.registerTool(
+    "harness",
+    { description: "lint + typecheck + test + build \uD1B5\uD569 \uD488\uC9C8 \uC810\uAC80" },
+    async () => runVhkCli(["harness"], "harness")
+  );
+  server.registerTool(
+    "context",
+    { description: "\uD504\uB85C\uC81D\uD2B8 \uB9E5\uB77D \uD30C\uC77C(.vhk/context.md) \uC0DD\uC131 \u2014 \uAE30\uC220 \uC2A4\uD0DD + \uB514\uB809\uD1A0\uB9AC + \uBA85\uB839\uC5B4 + \uACB0\uC815\uC0AC\uD56D" },
+    async () => runVhkCli(["context"], "context")
+  );
+  server.registerTool(
+    "brief",
+    { description: "\uD504\uB85C\uC81D\uD2B8 \uBE0C\uB9AC\uD551(.vhk/brief.md) \uC0DD\uC131 \u2014 git \uC0C1\uD0DC + \uACB0\uC815\uC0AC\uD56D + \uB2E4\uC74C \uB2E8\uACC4 \uC81C\uC548" },
+    async () => runVhkCli(["brief"], "brief")
+  );
+  server.registerTool(
+    "deploy",
+    {
+      description: "\uBC30\uD3EC \uD50C\uB7AB\uD3FC \uC790\uB3D9 \uAC10\uC9C0 + CLI \uC124\uCE58 \uD655\uC778 (MCP \uBAA8\uB4DC: \uC2E4\uC81C \uBC30\uD3EC \uBBF8\uC218\uD589 \u2014 `vhk deploy` \uC548\uB0B4)"
+    },
+    async () => {
+      const platform = detectPlatform();
+      if (!platform) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "\u274C \uBC30\uD3EC \uD50C\uB7AB\uD3FC \uBBF8\uAC10\uC9C0 (vercel.json / netlify.toml / wrangler.toml \uC5C6\uC74C).\n\uD50C\uB7AB\uD3FC \uC124\uC815 \uD30C\uC77C \uCD94\uAC00 \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4."
+            }
+          ]
+        };
+      }
+      const cliCheck = safeExecFile(platform, ["--version"]);
+      const cliStatus = cliCheck.ok ? `\u2713 ${platform} CLI \uC124\uCE58\uB428 (${cliCheck.out})` : `\u2717 ${platform} CLI \uBBF8\uC124\uCE58 \u2014 npm i -g ${platform}`;
+      return {
+        content: [
+          {
+            type: "text",
+            text: `\u{1F680} \uAC10\uC9C0\uB41C \uD50C\uB7AB\uD3FC: ${platform}
+${cliStatus}
+
+\uC2E4\uC81C \uBC30\uD3EC\uB294 \uD130\uBBF8\uB110\uC5D0\uC11C: vhk deploy`
+          }
+        ]
+      };
+    }
+  );
+  server.registerTool(
+    "publish",
+    {
+      description: "\uD604\uC7AC \uBC84\uC804 + bump \uD6C4\uBCF4 \uD45C\uC2DC (MCP \uBAA8\uB4DC: \uC2E4\uC81C npm publish \uBBF8\uC218\uD589 \u2014 `vhk publish` \uC548\uB0B4)"
+    },
+    async () => {
+      if (!existsSync5("package.json")) {
+        return { content: [{ type: "text", text: "\u274C package.json \uC5C6\uC74C." }] };
+      }
+      try {
+        const pkg = readJsonFile("package.json");
+        const v = pkg.version ?? "0.0.0";
+        const lines = [
+          `\u{1F4E6} ${pkg.name ?? "(\uC774\uB984 \uC5C6\uC74C)"} \uD604\uC7AC v${v}`,
+          `  patch \u2192 v${bumpVersion(v, "patch")}`,
+          `  minor \u2192 v${bumpVersion(v, "minor")}`,
+          `  major \u2192 v${bumpVersion(v, "major")}`,
+          "",
+          "\uC2E4\uC81C \uBC30\uD3EC\uB294 \uD130\uBBF8\uB110\uC5D0\uC11C: vhk publish"
+        ];
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+      } catch (e) {
+        return {
+          content: [{ type: "text", text: `\u274C package.json \uD30C\uC2F1 \uC2E4\uD328: ${String(e)}` }]
+        };
+      }
+    }
+  );
+  server.registerTool(
+    "migrate",
+    {
+      description: "\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uAC10\uC9C0 + \uC804\uD658 \uD6C4\uBCF4 \uAC00\uC6A9\uC131 (MCP \uBAA8\uB4DC: \uC2E4\uC81C \uC804\uD658 \uBBF8\uC218\uD589 \u2014 `vhk migrate <target>` \uC548\uB0B4)"
+    },
+    async () => {
+      const current = existsSync5("pnpm-lock.yaml") ? "pnpm" : existsSync5("yarn.lock") ? "yarn" : existsSync5("package-lock.json") ? "npm" : null;
+      const candidates = ["npm", "yarn", "pnpm"].filter((pm) => pm !== current);
+      const lines = [`\uD604\uC7AC PM: ${current ?? "\uAC10\uC9C0 \uBD88\uAC00 (lock \uD30C\uC77C \uC5C6\uC74C)"}`];
+      for (const pm of candidates) {
+        const r = safeExecFile(pm, ["--version"]);
+        lines.push(`  ${pm}: ${r.ok ? `\u2713 v${r.out}` : "\u2717 \uBBF8\uC124\uCE58"}`);
+      }
+      lines.push("", "\uC2E4\uC81C \uC804\uD658\uC740 \uD130\uBBF8\uB110\uC5D0\uC11C: vhk migrate <pnpm|npm|yarn>");
+      return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+  );
+  server.registerTool(
+    "update",
+    {
+      description: "VHK \uD604\uC7AC/\uCD5C\uC2E0 \uBC84\uC804 \uBE44\uAD50 (MCP \uBAA8\uB4DC: --check \uB9CC \u2014 \uC2E4\uC81C \uC5C5\uB370\uC774\uD2B8 \uBBF8\uC218\uD589)"
+    },
+    async () => {
+      const cur = safeExecFile("vhk", ["--version"]);
+      const latest = safeExecFile("npm", ["view", "@byh3071/vhk", "version"]);
+      const lines = [
+        `\uD604\uC7AC: ${cur.ok ? `v${cur.out.replace(/^v/, "")}` : "\uD655\uC778 \uC2E4\uD328"}`,
+        `\uCD5C\uC2E0: ${latest.ok ? `v${latest.out.replace(/^v/, "")}` : "\uD655\uC778 \uC2E4\uD328 (\uB124\uD2B8\uC6CC\uD06C \uB610\uB294 npm registry)"}`
+      ];
+      if (cur.ok && latest.ok) {
+        const same = cur.out.replace(/^v/, "") === latest.out.replace(/^v/, "");
+        lines.push(
+          same ? "\u2713 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4." : "\u2B06\uFE0F  \uC5C5\uB370\uC774\uD2B8 \uAC00\uB2A5. \uD130\uBBF8\uB110\uC5D0\uC11C: vhk update (\uB610\uB294 npm update -g @byh3071/vhk)"
+        );
+      }
+      return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+  );
+  server.registerTool(
+    "ref-list",
+    { description: "\uC800\uC7A5\uB41C \uB808\uD37C\uB7F0\uC2A4 URL \uBAA9\uB85D \uBCF4\uAE30 (add/open \uC740 \uC778\uC790/\uB300\uD654\uD615 \u2192 CLI \uC804\uC6A9)" },
+    async () => runVhkCli(["ref", "list"], "ref list")
+  );
+  server.registerTool(
+    "memory-list",
+    { description: "\uC800\uC7A5\uB41C \uACB0\uC815\uC0AC\uD56D(memory) \uBAA9\uB85D \uBCF4\uAE30 (add/remove \uB294 \uC778\uC790 \uD544\uC694 \u2192 CLI \uC804\uC6A9)" },
+    async () => runVhkCli(["memory", "list"], "memory list")
+  );
+  server.registerTool(
+    "context-show",
+    { description: ".vhk/context.md \uD30C\uC77C \uB0B4\uC6A9 \uBCF4\uAE30 (\uC5C6\uC73C\uBA74 `vhk context` \uC548\uB0B4)" },
+    async () => runVhkCli(["context-show"], "context-show")
+  );
+  server.registerTool(
+    "mcp-init",
+    { description: ".cursor/mcp.json \uC0DD\uC131/\uAC31\uC2E0 \u2014 vhk MCP \uC11C\uBC84 \uB4F1\uB85D (Cursor \uC7AC\uC2DC\uC791 \uD544\uC694)" },
+    async () => runVhkCli(["mcp-init"], "mcp-init")
+  );
+  return server;
+}
+async function startMcpServer() {
+  const server = createVhkMcpServer();
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+
+export {
+  ko,
+  t,
+  printNextStep,
+  printSecurityWarnings,
+  filterTrackedPaths,
+  readJsonFile,
+  safeExecFile,
+  MAX_SCAN_FILE_BYTES,
+  MAX_SECRET_FINDINGS,
+  scanProjectForSecrets,
+  filterSevereFindings,
+  deploy,
+  env,
+  envCheck,
+  publish,
+  audit,
+  startMcpServer
+};