@byh3071/vhk 1.6.1 → 1.6.3

package/dist/index.js

@@ -1,31 +1,49 @@
 #!/usr/bin/env node
 import {
+  CONTEXT_GIT_MARKER,
   MAX_SCAN_FILE_BYTES,
   MAX_SECRET_FINDINGS,
   NETWORK_EXEC_TIMEOUT_MS,
   __toESM,
   audit,
+  buildAdoptedRules,
+  checkContextDrift,
+  checkRuleDrift,
+  countLocalCommits,
   deploy,
+  detectExistingRuleFiles,
   env,
   envCheck,
   filterSevereFindings,
   filterTrackedPaths,
+  getExecErrorMessage,
+  getGitRoot,
   getVhkVersion,
+  gitOut,
+  gitRun,
+  hasGitRemote,
   ko,
+  listBackups,
+  localDate,
+  printContextResumeHint,
   printNextStep,
   printSecurityWarnings,
   publish,
   readJsonFile,
   require_ignore,
+  restoreBackup,
   safeExecFile,
   scanProjectForSecrets,
   startMcpServer,
+  sync,
   t
-} from "./chunk-O3A6SO7G.js";
+} from "./chunk-53RJHPP6.js";
 
 // src/index.ts
 import { Command, Help } from "commander";
-import inquirer12 from "inquirer";
+import { pathToFileURL } from "url";
+import chalk34 from "chalk";
+import inquirer13 from "inquirer";
 
 // src/lib/nlp-router.ts
 function normalize(input) {
@@ -43,6 +61,14 @@ function matchesKeywords(text, command) {
   return keywords.some((kw) => text.includes(kw.toLowerCase()));
 }
 var RULES = [
+  // restore 는 cloud-pull/undo 보다 먼저 평가 — "백업 복원/되돌려" 가 클라우드 복원이나
+  // 커밋 되돌리기로 새지 않도록. "백업" 한정이라 bare "복원해"(=cloud-pull)·"되돌려"(=undo)는 안 가로챔.
+  {
+    command: "restore",
+    explanation: "sync \uBC31\uC5C5 \uBCF5\uC6D0 (vhk restore)",
+    confidence: "high",
+    test: (t2) => /백업/.test(t2) && /(복원|복구|되돌려|되살려|롤백|restore)/.test(t2)
+  },
   // 영문 `vhk cloud push|pull [id]` 은 commander 가 직접 처리(가로채기 금지) — 한국어 표현만 매칭.
   {
     command: "cloud-pull",
@@ -69,6 +95,28 @@ var RULES = [
     confidence: "high",
     test: (t2) => /프로젝트.*(만들|시작)|폴더.*만들|만들고\s*싶|새\s*프로젝트|^시작$|마법사|기획.*(끝|완료)|검증.*(스킵|건너)|gate.*(스킵|건너)|바로.*시작/.test(t2) && !/디자인|design|팔레트|palette|테마|theme|레퍼런스|reference|다크\s*모드|라이트\s*모드|색상\s*모드|브리핑|brief|컨텍스트|context|맥락|기억|memory|^초기화$|하네스.*만/.test(t2)
   },
+  // 도움말 — 초보자가 "뭐부터/도움말/명령어" 라고 물으면 읽기전용 quick actions 를 출력.
+  // (적대 리뷰 HIGH 수정: 이전엔 start 마법사로 라우팅돼 도움말이 scaffold 를 유발했음.
+  //  도움말은 절대 상태를 바꾸지 않는다.) 실제 서브커맨드는 cli-args R1 가드가 먼저 commander 로 보냄.
+  {
+    command: "help",
+    explanation: "\uC790\uC5F0\uC5B4\uB85C vhk \uC4F0\uB294 \uBC95 \u2014 quick actions \uCD9C\uB825(\uC0C1\uD0DC\uBCC0\uACBD \uC5C6\uC74C)",
+    confidence: "high",
+    test: (t2) => /도움말|사용법|help|^명령어$|뭐\s*(할\s*수\s*있|하면\s*(돼|되|좋)|해야)|처음\s*(뭐|어떻게|시작|할)|어떻게\s*시작|뭐부터/.test(t2)
+  },
+  // Safety Mode — 위험 작업 가드 강도 조회/변경.
+  {
+    command: "mode",
+    explanation: "Safety Mode \uC870\uD68C/\uBCC0\uACBD (vhk mode)",
+    confidence: "high",
+    test: (t2) => /안전\s*모드|safety\s*mode|모드\s*(바꿔|변경|설정|확인|보여|뭐)|위험\s*작업\s*(가드|모드)/.test(t2)
+  },
+  {
+    command: "verify",
+    explanation: "\uC800\uC7A5/\uC704\uD5D8 \uC791\uC5C5 \uC804 \uAC80\uC99D \uBB36\uC74C (vhk verify)",
+    confidence: "high",
+    test: (t2) => /검증\s*묶음|사전\s*검증|저장\s*전\s*(검증|확인)|^verify$/.test(t2)
+  },
   {
     command: "init",
     explanation: "\uBB38\uC11C/\uD558\uB124\uC2A4 \uD30C\uC77C\uB9CC \uC0DD\uC131 (vhk init) \u2014 git/MCP/context\uB294 \uC81C\uC678",
@@ -257,7 +305,8 @@ var RULES = [
     explanation: "\uBAA9\uD45C \uAC8C\uC774\uD2B8 \uAC80\uC99D (vhk goal check)",
     confidence: "high",
     args: ["check"],
-    test: (t2) => /목표\s*(점검|검증|체크)/.test(t2)
+    // '스크립트' 포함 시는 sync 의도(게이트 스크립트 생성) → check 가 가로채지 않게 제외.
+    test: (t2) => /목표\s*(점검|검증|체크)/.test(t2) && !/스크립트/.test(t2)
   },
   {
     command: "goal",
@@ -272,6 +321,13 @@ var RULES = [
     confidence: "high",
     args: ["list"],
     test: (t2) => /목표\s*(목록|리스트)/.test(t2)
+  },
+  {
+    command: "goal",
+    explanation: "\uAC8C\uC774\uD2B8 \uC2A4\uD06C\uB9BD\uD2B8 \uB3D9\uAE30\uD654 (vhk goal sync)",
+    confidence: "high",
+    args: ["sync"],
+    test: (t2) => /(게이트|목표).*(스크립트|동기화)|체크\s*스크립트\s*(생성|만들)/.test(t2)
   }
 ];
 function routeNaturalLanguage(input) {
@@ -294,6 +350,28 @@ function extractNotionUrl(input) {
   return m?.[0];
 }
 
+// src/lib/command-registry.ts
+var CONTAINER_SUBCOMMANDS = {
+  goal: ["list", "next", "check", "init", "done", "sync"],
+  ref: ["add", "list", "open"],
+  memory: ["add", "list", "remove"],
+  cloud: ["push", "pull"],
+  secure: ["scan"],
+  design: ["palette"],
+  env: ["check"],
+  mode: ["lite", "standard", "strict"]
+};
+var CONTAINER_ALIASES = {
+  \uBAA9\uD45C: "goal",
+  \uB808\uD37C\uB7F0\uC2A4: "ref",
+  \uAE30\uC5B5: "memory",
+  \uD074\uB77C\uC6B0\uB4DC: "cloud",
+  \uBCF4\uC548: "secure",
+  \uB514\uC790\uC778: "design",
+  \uD658\uACBD\uBCC0\uC218: "env",
+  \uBAA8\uB4DC: "mode"
+};
+
 // src/lib/cli-args.ts
 var KNOWN_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "gate",
@@ -326,6 +404,8 @@ var KNOWN_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "\uC800\uC7A5",
   "undo",
   "\uB418\uB3CC\uB9AC\uAE30",
+  "restore",
+  "\uBCF5\uC6D0",
   "status",
   "\uC0C1\uD0DC",
   "\uD604\uD669",
@@ -378,11 +458,28 @@ var KNOWN_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "\uAD50\uD6C8",
   "resume",
   "\uC7AC\uAC1C",
+  "mode",
+  "\uBAA8\uB4DC",
+  "verify",
+  "\uC0AC\uC804\uC810\uAC80",
   "help"
 ]);
 function isOptionToken(token) {
   return token.startsWith("-");
 }
+var COMMAND_SUBCOMMANDS = (() => {
+  const map = { ...CONTAINER_SUBCOMMANDS };
+  for (const [alias, canonical] of Object.entries(CONTAINER_ALIASES)) {
+    const subs = CONTAINER_SUBCOMMANDS[canonical];
+    if (subs) map[alias] = subs;
+  }
+  return map;
+})();
+function isRealSubcommandPath(first, second) {
+  if (second === void 0) return false;
+  const subs = COMMAND_SUBCOMMANDS[first];
+  return subs !== void 0 && subs.includes(second);
+}
 function detectNaturalLanguageInput(argv) {
   const rest = argv.slice(2);
   if (rest.length === 0) return null;
@@ -394,6 +491,7 @@ function detectNaturalLanguageInput(argv) {
   const firstIsKnown = KNOWN_COMMAND_TOKENS.has(first);
   if (firstIsKnown && rest.length === 1) return null;
   if (firstIsKnown && rest.length > 1) {
+    if (isRealSubcommandPath(first, rest[1])) return null;
     if (routeNaturalLanguage(input)) return input;
     return null;
   }
@@ -401,8 +499,8 @@ function detectNaturalLanguageInput(argv) {
 }
 
 // src/lib/nlp-run.ts
-import chalk27 from "chalk";
-import inquirer11 from "inquirer";
+import chalk32 from "chalk";
+import inquirer12 from "inquirer";
 
 // src/commands/gate.ts
 import inquirer from "inquirer";
@@ -431,7 +529,7 @@ async function gate() {
   console.log(chalk.bold(`
 ${ko.gate.title}
 `));
-  const { mode } = await inquirer.prompt([{
+  const { mode: mode2 } = await inquirer.prompt([{
     type: "list",
     name: "mode",
     message: ko.gate.modePrompt,
@@ -441,7 +539,7 @@ ${ko.gate.title}
       { name: ko.gate.modeSkipLabel, value: "skip" }
     ]
   }]);
-  if (mode === "skip") {
+  if (mode2 === "skip") {
     const { source } = await inquirer.prompt([{
       type: "input",
       name: "source",
@@ -452,9 +550,9 @@ ${ko.gate.skipGo}`));
     console.log(chalk.dim(ko.gate.skipSourceLabel(source)));
     return;
   }
-  const questions = mode === "quick" ? GATE_QUESTIONS.filter((q) => q.quick) : GATE_QUESTIONS;
+  const questions = mode2 === "quick" ? GATE_QUESTIONS.filter((q) => q.quick) : GATE_QUESTIONS;
   const total = questions.length;
-  const header = mode === "quick" ? ko.gate.quickHeader : ko.gate.fullHeader;
+  const header = mode2 === "quick" ? ko.gate.quickHeader : ko.gate.fullHeader;
   console.log(chalk.dim(`
 ${header} ${ko.gate.modeCountSuffix(total)}
 `));
@@ -542,7 +640,7 @@ import path2 from "path";
 
 // src/templates/claude-md.ts
 function CLAUDE_MD_TEMPLATE(name, _stack) {
-  const d = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const d = localDate();
   const slug = name.toLowerCase().replace(/\s+/g, "-");
   return [
     "---",
@@ -554,12 +652,12 @@ function CLAUDE_MD_TEMPLATE(name, _stack) {
     "# \uAE30\uB85D \uADDC\uCE59 (" + name + ")",
     "",
     "> \uC774 \uD30C\uC77C\uC740 \uAE30\uB85D/\uC6B4\uC601 \uC804\uC6A9. \uCF54\uB529/\uB514\uC790\uC778 \u2192 .cursorrules \uCC38\uC870.",
-    "> See also: AGENTS.md",
+    "> See also: AGENTS.md (`vhk sync` \uB85C \uC0DD\uC131 \u2014 Codex/OpenAI \uACC4\uC5F4 \uD638\uD658).",
     "",
     "## \uD604\uC7AC \uC0C1\uD0DC",
     "- **Phase:** Phase 1 \u2014 MVP",
     "- **\uBE14\uB85C\uCEE4:** \uC5C6\uC74C",
-    "- **\uB2E4\uC74C \uC561\uC158:** __FILL__",
+    "- **\uB2E4\uC74C \uC561\uC158:** **FILL**",
     "- **\uB9C8\uC9C0\uB9C9 \uC5C5\uB370\uC774\uD2B8:** " + d,
     "",
     "## ADR",
@@ -613,8 +711,39 @@ function CURSORRULES_TEMPLATE(name, desc, stack) {
   ].join("\n");
 }
 
+// src/templates/rules-md.ts
+function RULES_MD_TEMPLATE(name, description, stack) {
+  const stackList = stack.split(" + ").map((s) => "- " + s).join("\n");
+  return [
+    "# " + name + " \u2014 Rules",
+    "",
+    "> \uD504\uB85C\uC81D\uD2B8 \uADDC\uCE59\uC758 \uB2E8\uC77C \uC18C\uC2A4(SoT). \uADDC\uCE59 \uBCC0\uACBD\uC740 \uD56D\uC0C1 \uC774 \uD30C\uC77C\uC5D0\uC11C\uB9CC.",
+    "> `vhk sync` \uAC00 Cursor\xB7Claude\xB7Windsurf\xB7Copilot\xB7Antigravity \uADDC\uCE59\uC73C\uB85C \uC804\uD30C\uD569\uB2C8\uB2E4.",
+    "",
+    "## \uD504\uB85C\uC81D\uD2B8 \uC815\uCCB4\uC131",
+    "- \uD55C \uC904 \uC124\uBA85: " + description,
+    "- \uC2A4\uD0DD: " + stack,
+    "",
+    "## \uAE30\uC220 \uC2A4\uD0DD",
+    stackList,
+    "",
+    "## \uCF54\uB529 \uADDC\uCE59",
+    "- TypeScript strict (any \uAE08\uC9C0)",
+    "- try-catch \uD544\uC218, \uBE48 catch \uAE08\uC9C0",
+    "- console.log \uD504\uB85C\uB355\uC158 \uC81C\uAC70",
+    "- \uD30C\uC77C\uBA85\uC740 kebab-case",
+    "",
+    "## \uCEE4\uBC0B \uCEE8\uBCA4\uC158",
+    "- feat: / fix: / refactor: / docs: / chore:",
+    "",
+    "## \uAE30\uB85D \uADDC\uCE59",
+    "- \uC138\uC158 \uC885\uB8CC \uC2DC docs/log/YYYY-MM-DD-{\uC791\uC5C5\uBA85}.md \uC0DD\uC131",
+    "- \uAE30\uC220 \uC120\uD0DD \uC2DC docs/adr/ADR-{\uBC88\uD638}-{\uC81C\uBAA9}.md \uC0DD\uC131"
+  ].join("\n");
+}
+
 // src/templates/prd.ts
-var FILL = "__FILL__";
+var FILL = "**FILL**";
 function fill(value, fallback = FILL) {
   return value?.trim() || fallback;
 }
@@ -683,12 +812,12 @@ function ARCHITECTURE_TEMPLATE(name, stack) {
     "## \uB370\uC774\uD130 \uBAA8\uB378",
     "| \uD14C\uC774\uBE14 | \uD575\uC2EC \uCEEC\uB7FC | \uC124\uBA85 |",
     "|--------|----------|------|",
-    "| __FILL__ | | |",
+    "| **FILL** | | |",
     "",
     "## \uC678\uBD80 \uC11C\uBE44\uC2A4",
     "| \uC11C\uBE44\uC2A4 | \uC6A9\uB3C4 |",
     "|--------|------|",
-    "| __FILL__ | |"
+    "| **FILL** | |"
   ].join("\n");
 }
 
@@ -705,21 +834,22 @@ function ADR_TEMPLATE() {
     "# ADR-000: \uC81C\uBAA9",
     "",
     "## \uB9E5\uB77D (Context)",
-    "__FILL__",
+    "**FILL**",
     "",
     "## \uACB0\uC815 (Decision)",
-    "__FILL__",
+    "**FILL**",
     "",
     "## \uB300\uC548 (Alternatives)",
-    "__FILL__",
+    "**FILL**",
     "",
     "## \uACB0\uACFC (Consequences)",
-    "__FILL__"
+    "**FILL**"
   ].join("\n");
 }
 
 // src/templates/commands-md.ts
-function COMMANDS_MD_TEMPLATE() {
+function COMMANDS_MD_TEMPLATE(opts = {}) {
+  const buildTestRow = opts.hasTest ? '| \uBE4C\uB4DC+\uD14C\uC2A4\uD2B8 | `pnpm build; pnpm test --run` | "\uBE4C\uB4DC\uD558\uACE0 \uD14C\uC2A4\uD2B8 \uB3CC\uB824" |' : '| \uBE4C\uB4DC | `pnpm build` | "\uBE4C\uB4DC\uD574" |';
   return [
     "# \u{1F4CB} \uD55C\uAD6D\uC5B4 \uBA85\uB839\uC5B4 \uAC00\uC774\uB4DC",
     "",
@@ -742,7 +872,7 @@ function COMMANDS_MD_TEMPLATE() {
     '| \uC624\uB298 \uC815\uB9AC | `vhk \uC815\uB9AC` | "\uC624\uB298 \uD55C \uC77C \uC815\uB9AC\uD574" |',
     '| \uADDC\uCE59 \uC810\uAC80 | `vhk \uC810\uAC80` | "\uADDC\uCE59 \uC810\uAC80\uD574" |',
     '| \uBCF4\uC548 \uC2A4\uCE94 | `vhk \uBCF4\uC548 scan` | "\uBCF4\uC548 \uC2A4\uCE94 \uB3CC\uB824" |',
-    '| \uBE4C\uB4DC+\uD14C\uC2A4\uD2B8 | `pnpm build; pnpm test --run` | "\uBE4C\uB4DC\uD558\uACE0 \uD14C\uC2A4\uD2B8 \uB3CC\uB824" |',
+    buildTestRow,
     '| \uBC30\uD3EC | `vhk \uBC30\uD3EC` | "\uBC30\uD3EC\uD574" |',
     "",
     "## \uD658\uACBD \uC810\uAC80",
@@ -762,7 +892,8 @@ function VHK_README_TEMPLATE() {
     "# `.vhk/` \u2014 VHK runtime state",
     "",
     "\uC774 \uB514\uB809\uD1A0\uB9AC\uB294 VHK\uAC00 \uD504\uB85C\uC81D\uD2B8\uBCC4 \uC0C1\uD0DC\uB97C \uC800\uC7A5\uD558\uB294 \uACF3\uC785\uB2C8\uB2E4.",
-    "\uC804\uCCB4 \uADDC\uACA9\uC740 `docs/spec.md` (spec_version 1.0) \uCC38\uC870.",
+    // VHK-006: 생성 프로젝트엔 docs/spec.md 가 없음 → vhk 저장소의 규격 문서를 외부 링크로 참조.
+    "\uC804\uCCB4 \uADDC\uACA9\uC740 [vhk \uADDC\uACA9 \uBB38\uC11C](https://github.com/byh3071-cpu/vhk/blob/main/docs/spec.md) (spec_version 1.0) \uCC38\uC870.",
     "",
     "## \uD2B8\uB798\uD0B9 \uC815\uCC45",
     "",
@@ -782,10 +913,14 @@ function VHK_README_TEMPLATE() {
 }
 function VHK_GITIGNORE_TEMPLATE() {
   return [
-    "# VHK \uB85C\uCEEC \uC804\uC6A9 \u2014 \uAC1C\uC778 \uBA54\uBAA8/\uCC38\uACE0\uB9C1\uD06C/\uC548\uC804\uC2E0\uD638 (docs/spec.md \uD2B8\uB798\uD0B9 \uC815\uCC45)",
+    "# VHK \uB85C\uCEEC \uC804\uC6A9 \u2014 \uAC1C\uC778 \uBA54\uBAA8/\uCC38\uACE0\uB9C1\uD06C/\uC548\uC804\uC2E0\uD638 (.vhk/README.md \uD2B8\uB798\uD0B9 \uC815\uCC45)",
     "memory.json",
     "refs.json",
     "HARD_STOP",
+    "# secret gist \uD3EC\uC778\uD130 (gistId). \uACF5\uAC1C repo \uC5D0 \uCEE4\uBC0B\uB418\uBA74 \uBC31\uC5C5 gist \uAC00 \uB178\uCD9C\uB428 (VHK-022).",
+    "cloud.json",
+    "# sync \uB36E\uC5B4\uC4F0\uAE30 \uC804 \uC790\uB3D9 \uBC31\uC5C5 (\uB85C\uCEEC \uBCF5\uAD6C\uC6A9 \u2014 vhk restore). \uCD94\uC801/\uD074\uB77C\uC6B0\uB4DC \uC81C\uC678.",
+    "backups/",
     ""
   ].join("\n");
 }
@@ -988,6 +1123,40 @@ async function fetchPrdFromNotion(urlOrId) {
   };
 }
 
+// src/lib/stack-detect.ts
+import { join } from "path";
+function detectStackFromDeps(deps) {
+  const stack = [];
+  if (deps.next) stack.push("Next.js");
+  else if (deps.nuxt) stack.push("Nuxt");
+  else if (deps.vite || deps["@vitejs/plugin-react"]) stack.push("Vite");
+  if (deps.react) stack.push("React");
+  else if (deps.vue) stack.push("Vue");
+  else if (deps.svelte) stack.push("Svelte");
+  if (deps.typescript) stack.push("TypeScript");
+  if (deps.tailwindcss || deps["@tailwindcss/vite"]) stack.push("Tailwind CSS");
+  if (deps["@supabase/supabase-js"] || deps["@supabase/ssr"]) stack.push("Supabase");
+  if (deps["@prisma/client"] || deps.prisma) stack.push("Prisma");
+  if (deps["drizzle-orm"]) stack.push("Drizzle");
+  if (deps["@anthropic-ai/sdk"]) stack.push("Anthropic SDK");
+  if (deps.openai) stack.push("OpenAI SDK");
+  if (deps.zod) stack.push("zod");
+  if (deps["@tanstack/react-query"]) stack.push("TanStack Query");
+  return stack;
+}
+function detectProjectStack(cwd = ".") {
+  let pkg;
+  try {
+    pkg = readJsonFile(join(cwd, "package.json"));
+  } catch {
+    return null;
+  }
+  const all = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
+  if (Object.keys(all).length === 0) return null;
+  const stack = detectStackFromDeps(all);
+  return stack.length ? stack : null;
+}
+
 // src/commands/init.ts
 var PROJECT_TYPES = [
   { name: "\u{1F310} \uC6F9 \uC571 (Next.js + Supabase + Vercel)", value: "webapp" },
@@ -1011,23 +1180,30 @@ function resolveType(type) {
   }
   return type;
 }
+function isNonInteractive(options) {
+  return Boolean(options.yes) || !process.stdin.isTTY || !process.stdout.isTTY;
+}
+var DEFAULT_TYPE = PROJECT_TYPES[0].value;
 async function collectAnswers(options, defaults = {}) {
+  const noninteractive = isNonInteractive(options);
   const prompts = [];
-  if (!options.name && !defaults.name) {
-    prompts.push({ type: "input", name: "name", message: ko.init.projectName });
-  }
-  if (!options.description && !defaults.description) {
-    prompts.push({ type: "input", name: "description", message: ko.init.description });
-  }
-  if (!options.type && !defaults.type) {
-    prompts.push({ type: "list", name: "type", message: ko.init.projectType, choices: PROJECT_TYPES });
+  if (!noninteractive) {
+    if (!options.name && !defaults.name) {
+      prompts.push({ type: "input", name: "name", message: ko.init.projectName });
+    }
+    if (!options.description && !defaults.description) {
+      prompts.push({ type: "input", name: "description", message: ko.init.description });
+    }
+    if (!options.type && !defaults.type) {
+      prompts.push({ type: "list", name: "type", message: ko.init.projectType, choices: PROJECT_TYPES });
+    }
   }
   const prompted = prompts.length ? await inquirer2.prompt(prompts) : {};
-  return {
-    name: options.name ?? defaults.name ?? prompted.name,
-    description: options.description ?? defaults.description ?? prompted.description,
-    type: resolveType(options.type ?? defaults.type ?? prompted.type) ?? prompted.type
-  };
+  const fallbackName = path2.basename(process.cwd()) || "my-project";
+  const name = options.name || defaults.name || prompted.name || fallbackName;
+  const description = options.description || defaults.description || prompted.description || `${name} \u2014 vhk \uD504\uB85C\uC81D\uD2B8`;
+  const type = resolveType(options.type || defaults.type || prompted.type) ?? prompted.type ?? DEFAULT_TYPE;
+  return { name, description, type };
 }
 async function init(options = {}) {
   const skipGate = Boolean(options.skipGate || options.fromNotion);
@@ -1060,11 +1236,13 @@ ${ko.init.title}
     log.error("\uD504\uB85C\uC81D\uD2B8 \uC774\uB984, \uC124\uBA85, \uC720\uD615\uC774 \uBAA8\uB450 \uD544\uC694\uD569\uB2C8\uB2E4.");
     process.exit(1);
   }
-  const stack = STACK_PRESETS[answers.type];
+  const detected = detectProjectStack(process.cwd());
+  const stack = detected ?? STACK_PRESETS[answers.type];
+  if (detected) console.log(chalk3.dim("  \u{1F50E} package.json \uC758\uC874\uC131\uC5D0\uC11C \uC2E4\uC81C \uC2A4\uD0DD \uAC10\uC9C0"));
   console.log(chalk3.dim(`
 ${ko.init.recommendedStack} ${stack.join(" + ")}
 `));
-  if (!options.yes) {
+  if (!isNonInteractive(options)) {
     const { confirmStack } = await inquirer2.prompt([{
       type: "confirm",
       name: "confirmStack",
@@ -1077,17 +1255,37 @@ ${ko.init.recommendedStack} ${stack.join(" + ")}
     }
   }
   const cwd = process.cwd();
+  let adoptedRules = null;
+  if (!isNonInteractive(options) && !options.fromNotion) {
+    const existingRules = detectExistingRuleFiles(cwd);
+    if (existingRules.length > 0) {
+      const { adopt } = await inquirer2.prompt([{
+        type: "confirm",
+        name: "adopt",
+        message: ko.init.adoptPrompt(
+          existingRules.length,
+          existingRules.map((f) => f.path).join(", ")
+        ),
+        default: true
+      }]);
+      if (adopt) {
+        adoptedRules = buildAdoptedRules(existingRules, answers.name);
+        console.log(chalk3.dim(`  ${ko.init.adoptPreview(existingRules.length)}`));
+      }
+    }
+  }
   const files = generateFiles(answers.name, answers.description, stack, prdContent, answers.type);
+  if (adoptedRules) files["RULES.md"] = adoptedRules;
   log.step(ko.init.filesGenerating);
   for (const [filePath, content] of Object.entries(files)) {
     const fullPath = path2.join(cwd, filePath);
     if (fileExists(fullPath)) {
-      const { overwrite } = await inquirer2.prompt([{
+      const overwrite = isNonInteractive(options) ? false : (await inquirer2.prompt([{
         type: "confirm",
         name: "overwrite",
         message: ko.init.overwrite(filePath),
         default: false
-      }]);
+      }])).overwrite;
       if (!overwrite) {
         log.warn(ko.init.skipped(filePath));
         continue;
@@ -1096,7 +1294,7 @@ ${ko.init.recommendedStack} ${stack.join(" + ")}
     writeFile(fullPath, content);
     log.success(filePath);
   }
-  await writeInitExtras(cwd);
+  await writeInitExtras(cwd, isNonInteractive(options));
   console.log(chalk3.bold.green(`
 ${ko.init.done}`));
   console.log(chalk3.dim(`
@@ -1131,6 +1329,8 @@ function generateFiles(name, description, stack, prdContent = {}, type = "") {
   return {
     "CLAUDE.md": CLAUDE_MD_TEMPLATE(name, stackStr),
     ".cursorrules": CURSORRULES_TEMPLATE(name, description, stackStr),
+    // RULES.md — 규칙 SoT. init 이 항상 생성해 sync 와 흐름을 연결한다.
+    "RULES.md": RULES_MD_TEMPLATE(name, description, stackStr),
     "docs/PRD.md": PRD_TEMPLATE(name, description, prd),
     "docs/ARCHITECTURE.md": ARCHITECTURE_TEMPLATE(name, stackStr),
     "docs/adr/ADR-000-template.md": ADR_TEMPLATE(),
@@ -1138,8 +1338,9 @@ function generateFiles(name, description, stack, prdContent = {}, type = "") {
     "docs/troubleshooting/.gitkeep": "",
     "docs/til.md": `# TIL (Today I Learned)
 
-- [${(/* @__PURE__ */ new Date()).toISOString().split("T")[0]}] \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791
+- [${localDate()}] \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791
 `,
+    // VHK-019
     "BACKLOG.md": `# BACKLOG
 
 > v1 OUT \uAE30\uB2A5\uC740 \uC5EC\uAE30\uC5D0 \uAE30\uB85D. \uBC94\uC704 \uC218\uBE44 \uD544\uC218.
@@ -1197,19 +1398,30 @@ function enhancePackageScripts(projectDir) {
   fs2.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n", "utf-8");
   return true;
 }
-async function writeInitExtras(projectDir) {
+function projectHasTestScript(projectDir) {
+  const pkgPath = path2.join(projectDir, "package.json");
+  if (!fs2.existsSync(pkgPath)) return false;
+  try {
+    const pkg = readJsonFile(pkgPath);
+    return Boolean(pkg.scripts?.test?.trim());
+  } catch {
+    return false;
+  }
+}
+async function writeInitExtras(projectDir, noninteractive = false) {
   const commandsPath = path2.join(projectDir, "COMMANDS.md");
+  const hasTest = projectHasTestScript(projectDir);
   if (fileExists(commandsPath)) {
-    const { overwrite } = await inquirer2.prompt([{
+    const overwrite = noninteractive ? false : (await inquirer2.prompt([{
       type: "confirm",
       name: "overwrite",
       message: ko.init.overwrite("COMMANDS.md"),
       default: false
-    }]);
+    }])).overwrite;
     if (!overwrite) {
       log.warn(ko.init.skipped("COMMANDS.md"));
     } else {
-      writeFile(commandsPath, COMMANDS_MD_TEMPLATE());
+      writeFile(commandsPath, COMMANDS_MD_TEMPLATE({ hasTest }));
       log.success(ko.init.commandsMdDone);
     }
   } else {
@@ -1229,7 +1441,7 @@ async function writeInitExtras(projectDir) {
 
 // src/commands/recap.ts
 import inquirer3 from "inquirer";
-import chalk4 from "chalk";
+import chalk6 from "chalk";
 import fs4 from "fs";
 import path5 from "path";
 
@@ -1273,10 +1485,13 @@ function buildSessionDiffFromSummary(diffSummary) {
     files
   };
 }
+var EMPTY_TREE_SHA = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
 async function getSessionDiff(since) {
-  const sinceDate = since || (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const sinceDate = since || localDate();
   try {
-    const diffSummary = await git.diffSummary([`--since=${sinceDate}`]);
+    const boundary = (await git.raw(["rev-list", "-1", `--before=${sinceDate}`, "HEAD"])).trim();
+    const base = boundary || EMPTY_TREE_SHA;
+    const diffSummary = await git.diffSummary([`${base}..HEAD`]);
     const normalized = diffSummary.files.map((f) => ({
       file: f.file,
       insertions: "insertions" in f ? f.insertions : 0,
@@ -1379,7 +1594,7 @@ function createAdrFile(cwd, title, context2, decision, consequences) {
   const adrDir = path4.join(cwd, "docs", "adr");
   if (!fs3.existsSync(adrDir)) fs3.mkdirSync(adrDir, { recursive: true });
   const num = nextAdrNumber(adrDir);
-  const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const today = localDate();
   const fileName = `ADR-${String(num).padStart(3, "0")}-${slugify(title)}.md`;
   const filePath = path4.join(adrDir, fileName);
   const content = [
@@ -1411,50 +1626,191 @@ function createAdrFile(cwd, title, context2, decision, consequences) {
   return filePath;
 }
 
+// src/lib/interactive.ts
+import chalk4 from "chalk";
+function ensureInteractive(hint = "") {
+  if (process.stdin.isTTY) return true;
+  console.error(chalk4.yellow("  \u26A0\uFE0F  \uC774 \uBA85\uB839\uC740 \uB300\uD654\uD615 \uC785\uB825\uC774 \uD544\uC694\uD569\uB2C8\uB2E4 \u2014 \uBE44-TTY/\uD30C\uC774\uD504 \uD658\uACBD\uC5D0\uC11C\uB294 \uC2E4\uD589\uD560 \uC218 \uC5C6\uC5B4\uC694."));
+  if (hint) console.error(chalk4.dim(`     ${hint}`));
+  process.exitCode = 1;
+  return false;
+}
+function isPromptAbortError(err) {
+  const msg = err instanceof Error ? err.message : String(err);
+  return /ERR_USE_AFTER_CLOSE|force closed|ExitPromptError|readline was closed|User force closed/i.test(msg);
+}
+
+// src/lib/hard-stop-guard.ts
+import chalk5 from "chalk";
+
+// src/lib/state-files.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync, rmSync } from "fs";
+import { join as join2 } from "path";
+var STATE_DIR = "docs/state";
+var BLOCKERS_PATH = join2(STATE_DIR, "blockers.md");
+var LEARNINGS_PATH = join2(STATE_DIR, "learnings.md");
+var VHK_DIR = ".vhk";
+var HARD_STOP_PATH = join2(VHK_DIR, "HARD_STOP");
+var HARD_STOP_BLOCKER_THRESHOLD = 3;
+function ensureStateDir() {
+  mkdirSync(STATE_DIR, { recursive: true });
+}
+function ensureVhkDir() {
+  mkdirSync(VHK_DIR, { recursive: true });
+}
+function isoDate() {
+  return localDate();
+}
+var ACTIVE_BLOCKER_RE = /^- (?!~~)\[/;
+function countActiveBlockers(content) {
+  let count = 0;
+  for (const line of content.split(/\r?\n/)) {
+    if (ACTIVE_BLOCKER_RE.test(line)) count++;
+  }
+  return count;
+}
+function appendBlocker(description, goalId) {
+  ensureStateDir();
+  const tag = goalId !== void 0 ? `goal-${goalId}` : "no-goal";
+  const line = `- [${isoDate()} ${tag}] ${description.trim()}`;
+  if (!existsSync(BLOCKERS_PATH)) {
+    writeFileSync(
+      BLOCKERS_PATH,
+      `# Blockers
+
+_Append-only. \uD574\uACB0 \uD56D\uBAA9\uC740 ~~\uCDE8\uC18C\uC120~~\uC73C\uB85C \uD45C\uAE30._
+
+${line}
+`,
+      "utf-8"
+    );
+  } else {
+    appendFileSync(BLOCKERS_PATH, `${line}
+`, "utf-8");
+  }
+  const current = readFileSync(BLOCKERS_PATH, "utf-8");
+  const count = countActiveBlockers(current);
+  let hardStopTripped = false;
+  if (count >= HARD_STOP_BLOCKER_THRESHOLD && !existsSync(HARD_STOP_PATH)) {
+    writeHardStop(`auto: ${count} active blockers (threshold ${HARD_STOP_BLOCKER_THRESHOLD})`);
+    hardStopTripped = true;
+  }
+  return { count, hardStopTripped };
+}
+function appendLearning(lesson, goalId) {
+  ensureStateDir();
+  const tag = goalId !== void 0 ? `goal-${goalId}` : "no-goal";
+  const line = `- [${isoDate()} ${tag}] ${lesson.trim()}`;
+  if (!existsSync(LEARNINGS_PATH)) {
+    writeFileSync(
+      LEARNINGS_PATH,
+      `# Learnings
+
+_Append-only. \uD55C \uC904 = \uD55C \uAD50\uD6C8._
+
+${line}
+`,
+      "utf-8"
+    );
+  } else {
+    appendFileSync(LEARNINGS_PATH, `${line}
+`, "utf-8");
+  }
+}
+function getRecentLearnings(limit = 3) {
+  if (!existsSync(LEARNINGS_PATH)) return [];
+  const lines = readFileSync(LEARNINGS_PATH, "utf-8").split(/\r?\n/);
+  const entries = lines.filter((l) => l.startsWith("- ["));
+  return entries.slice(-limit);
+}
+function getActiveBlockers(limit = 3) {
+  if (!existsSync(BLOCKERS_PATH)) return [];
+  const lines = readFileSync(BLOCKERS_PATH, "utf-8").split(/\r?\n/);
+  const entries = lines.filter((l) => ACTIVE_BLOCKER_RE.test(l));
+  return entries.slice(-limit);
+}
+function writeHardStop(reason) {
+  ensureVhkDir();
+  const ts = (/* @__PURE__ */ new Date()).toISOString();
+  writeFileSync(HARD_STOP_PATH, `${ts}
+${reason}
+`, "utf-8");
+}
+function isHardStopActive() {
+  return existsSync(HARD_STOP_PATH);
+}
+function readHardStopReason() {
+  if (!existsSync(HARD_STOP_PATH)) return null;
+  try {
+    return readFileSync(HARD_STOP_PATH, "utf-8").trim();
+  } catch {
+    return null;
+  }
+}
+function clearHardStop() {
+  if (!existsSync(HARD_STOP_PATH)) return false;
+  rmSync(HARD_STOP_PATH, { force: true });
+  return true;
+}
+
+// src/lib/hard-stop-guard.ts
+function ensureNotHardStopped(action) {
+  if (!isHardStopActive()) return true;
+  console.error(chalk5.red.bold(`
+\u{1F6D1} HARD STOP \uD65C\uC131 \u2014 '${action}' \uC744(\uB97C) \uC2E4\uD589\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.`));
+  const reason = readHardStopReason();
+  if (reason) console.error(chalk5.dim(`   \uC0AC\uC720: ${reason.replace(/\s*\n\s*/g, " ")}`));
+  console.error(chalk5.dim("   \uD574\uC81C: vhk resume --confirm (\uC0AC\uB78C\uC774 \uC9C1\uC811 \uC2E4\uD589)"));
+  process.exitCode = 1;
+  return false;
+}
+
 // src/commands/recap.ts
 async function recap(options = {}) {
-  console.log(chalk4.bold(`
+  if (!ensureNotHardStopped("recap")) return;
+  console.log(chalk6.bold(`
 ${ko.recap.title}
 `));
   if (!await isGitRepo()) {
-    console.log(chalk4.red(ko.recap.noRepo));
+    console.log(chalk6.red(ko.recap.noRepo));
     return;
   }
   if (!await hasAnyCommits()) {
-    console.log(chalk4.yellow("\u26A0\uFE0F  \uC544\uC9C1 \uCEE4\uBC0B\uC774 \uC5C6\uC5B4\uC694."));
-    console.log(chalk4.gray("   \uD30C\uC77C\uC744 \uCD94\uAC00\uD558\uACE0 `vhk save` \uB610\uB294 `git commit`\uC73C\uB85C \uCCAB \uCEE4\uBC0B\uC744 \uB9CC\uB4E4\uC5B4 \uBCF4\uC138\uC694."));
+    console.log(chalk6.yellow("\u26A0\uFE0F  \uC544\uC9C1 \uCEE4\uBC0B\uC774 \uC5C6\uC5B4\uC694."));
+    console.log(chalk6.gray("   \uD30C\uC77C\uC744 \uCD94\uAC00\uD558\uACE0 `vhk save` \uB610\uB294 `git commit`\uC73C\uB85C \uCCAB \uCEE4\uBC0B\uC744 \uB9CC\uB4E4\uC5B4 \uBCF4\uC138\uC694."));
     return;
   }
   printSecurityWarnings();
-  console.log(chalk4.dim(`${ko.recap.analyzing}
+  console.log(chalk6.dim(`${ko.recap.analyzing}
 `));
-  const since = options.since || (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const since = options.since || localDate();
   const diff2 = await getSessionDiff(since);
   const commits = await getRecentCommits(10, since);
   if (diff2.filesChanged === 0 && commits.length === 0) {
-    console.log(chalk4.yellow(ko.recap.noChanges));
+    console.log(chalk6.yellow(ko.recap.noChanges));
     return;
   }
-  console.log(chalk4.bold("\u{1F4CA} \uBCC0\uACBD \uC694\uC57D:"));
-  console.log(`  \uD30C\uC77C: ${chalk4.cyan(String(diff2.filesChanged))}\uAC1C \uBCC0\uACBD`);
-  console.log(`  \uCD94\uAC00: ${chalk4.green("+" + diff2.insertions)} / \uC0AD\uC81C: ${chalk4.red("-" + diff2.deletions)}`);
+  console.log(chalk6.bold("\u{1F4CA} \uBCC0\uACBD \uC694\uC57D:"));
+  console.log(`  \uD30C\uC77C: ${chalk6.cyan(String(diff2.filesChanged))}\uAC1C \uBCC0\uACBD`);
+  console.log(`  \uCD94\uAC00: ${chalk6.green("+" + diff2.insertions)} / \uC0AD\uC81C: ${chalk6.red("-" + diff2.deletions)}`);
   if (diff2.files.length > 0) {
-    console.log(chalk4.dim("\n  \uBCC0\uACBD \uD30C\uC77C:"));
+    console.log(chalk6.dim("\n  \uBCC0\uACBD \uD30C\uC77C:"));
     diff2.files.slice(0, 15).forEach((f) => {
-      const icon = f.status === "new" ? chalk4.green("\u{1F195}") : f.status === "deleted" ? chalk4.red("\u{1F5D1}\uFE0F") : chalk4.yellow("\u270F\uFE0F");
+      const icon = f.status === "new" ? chalk6.green("\u{1F195}") : f.status === "deleted" ? chalk6.red("\u{1F5D1}\uFE0F") : chalk6.yellow("\u270F\uFE0F");
       console.log(`  ${icon} ${f.file}`);
     });
     if (diff2.files.length > 15) {
-      console.log(chalk4.dim(`  ... \uC678 ${diff2.files.length - 15}\uAC1C`));
+      console.log(chalk6.dim(`  ... \uC678 ${diff2.files.length - 15}\uAC1C`));
     }
   }
   if (commits.length > 0) {
-    console.log(chalk4.dim("\n  \uCD5C\uADFC \uCEE4\uBC0B:"));
+    console.log(chalk6.dim("\n  \uCD5C\uADFC \uCEE4\uBC0B:"));
     commits.slice(0, 5).forEach((c) => {
-      console.log(chalk4.dim(`  \u2022 ${c.message}`));
+      console.log(chalk6.dim(`  \u2022 ${c.message}`));
     });
   }
   console.log("");
+  if (!ensureInteractive("\uD68C\uACE0 \uC785\uB825\uC740 \uB300\uD654\uD615\uC73C\uB85C\uB9CC \uAC00\uB2A5\uD569\uB2C8\uB2E4.")) return;
   const answers = await inquirer3.prompt([
     {
       type: "input",
@@ -1479,7 +1835,7 @@ ${ko.recap.title}
       default: "\uC5C6\uC74C"
     }
   ]);
-  const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const today = localDate();
   const logDir = path5.join(process.cwd(), "docs", "log");
   if (!fs4.existsSync(logDir)) fs4.mkdirSync(logDir, { recursive: true });
   const existing = fs4.readdirSync(logDir).filter((f) => f.startsWith(today));
@@ -1519,11 +1875,11 @@ ${ko.recap.title}
   fs4.writeFileSync(filePath, content, "utf-8");
   const adrCandidates = detectAdrCandidates(diff2);
   if (adrCandidates.length > 0) {
-    console.log(chalk4.cyan.bold(`
+    console.log(chalk6.cyan.bold(`
 ${ko.recap.adrDetected} (${adrCandidates.length}\uAC74)`));
     for (const candidate of adrCandidates) {
-      console.log(chalk4.cyan(`  \u2022 ${candidate.title}: ${candidate.context}`));
-      candidate.files.forEach((f) => console.log(chalk4.dim(`    ${f}`)));
+      console.log(chalk6.cyan(`  \u2022 ${candidate.title}: ${candidate.context}`));
+      candidate.files.forEach((f) => console.log(chalk6.dim(`    ${f}`)));
     }
     const { createAdr } = await inquirer3.prompt([{
       type: "confirm",
@@ -1553,17 +1909,17 @@ ${ko.recap.adrDetected} (${adrCandidates.length}\uAC74)`));
           adrAnswers.decision,
           adrAnswers.consequences
         );
-        console.log(chalk4.green(`  \u2705 ADR \uC0DD\uC131: ${path5.relative(process.cwd(), adrPath)}`));
+        console.log(chalk6.green(`  \u2705 ADR \uC0DD\uC131: ${path5.relative(process.cwd(), adrPath)}`));
       }
     }
   }
   const troubleshootingKeywords = /fix|bug|error|crash|hotfix|patch|revert|트러블|에러|버그|수정|핫픽스/i;
   const troubleCommits = commits.filter((c) => troubleshootingKeywords.test(c.message));
   if (troubleCommits.length > 0) {
-    console.log(chalk4.yellow.bold(`
+    console.log(chalk6.yellow.bold(`
 ${ko.recap.troubleDetected} (${troubleCommits.length}\uAC74)`));
     troubleCommits.forEach((c) => {
-      console.log(chalk4.dim(`  \u2022 ${c.message}`));
+      console.log(chalk6.dim(`  \u2022 ${c.message}`));
     });
     const { createTroubleshoot } = await inquirer3.prompt([{
       type: "confirm",
@@ -1614,12 +1970,12 @@ ${ko.recap.troubleDetected} (${troubleCommits.length}\uAC74)`));
         `*Generated by \`vhk recap\` at ${(/* @__PURE__ */ new Date()).toISOString()}*`
       ].join("\n");
       fs4.writeFileSync(tsFilePath, tsContent, "utf-8");
-      console.log(chalk4.green(`  \u2705 \uD2B8\uB7EC\uBE14\uC288\uD305 \uBB38\uC11C \uC0DD\uC131: ${path5.relative(process.cwd(), tsFilePath)}`));
+      console.log(chalk6.green(`  \u2705 \uD2B8\uB7EC\uBE14\uC288\uD305 \uBB38\uC11C \uC0DD\uC131: ${path5.relative(process.cwd(), tsFilePath)}`));
     }
   }
-  console.log(chalk4.green.bold(`
+  console.log(chalk6.green.bold(`
 ${ko.recap.done}`));
-  console.log(chalk4.dim(`  \u{1F4C4} ${path5.relative(process.cwd(), filePath)}`));
+  console.log(chalk6.dim(`  \u{1F4C4} ${path5.relative(process.cwd(), filePath)}`));
   const claudeMdPath = path5.join(process.cwd(), "CLAUDE.md");
   if (fs4.existsSync(claudeMdPath)) {
     const { updateClaude } = await inquirer3.prompt([{
@@ -1639,7 +1995,7 @@ ${ko.recap.done}`));
         `- **\uB2E4\uC74C \uC561\uC158:** ${answers.nextTodo}`
       );
       fs4.writeFileSync(claudeMdPath, claudeContent, "utf-8");
-      console.log(chalk4.green("  \u2705 CLAUDE.md \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC"));
+      console.log(chalk6.green("  \u2705 CLAUDE.md \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC"));
     }
   }
   const gitSaveCmd = process.platform === "win32" ? 'git add .; git commit -m "recap: \uC138\uC158 \uAE30\uB85D"' : 'git add . && git commit -m "recap: \uC138\uC158 \uAE30\uB85D"';
@@ -1650,237 +2006,73 @@ ${ko.recap.done}`));
   });
 }
 
-// src/commands/sync.ts
-import chalk5 from "chalk";
-import fs5 from "fs";
-import path6 from "path";
-var CURSORRULES_KEYS = ["\uCF54\uB529 \uADDC\uCE59", "\uAE30\uC220 \uC2A4\uD0DD", "\uC544\uD0A4\uD14D\uCC98", "\uB514\uC790\uC778", "Anti-patterns", "\uCEE4\uBC0B"];
-var CLAUDE_MD_KEYS = ["\uAE30\uB85D", "\uB85C\uADF8", "ADR", "\uD2B8\uB7EC\uBE14\uC288\uD305", "TIL", "/done", "\uCCB4\uD06C\uB9AC\uC2A4\uD2B8"];
-function parseRulesMd(content) {
-  const sections = [];
-  const lines = content.split("\n");
-  let currentTitle = "";
-  let currentContent = [];
-  for (const line of lines) {
-    if (line.startsWith("## ")) {
-      if (currentTitle) {
-        sections.push({ title: currentTitle, content: currentContent.join("\n").trim() });
-      }
-      currentTitle = line.replace("## ", "").trim();
-      currentContent = [];
-    } else {
-      currentContent.push(line);
-    }
-  }
-  if (currentTitle) {
-    sections.push({ title: currentTitle, content: currentContent.join("\n").trim() });
-  }
-  return sections;
-}
-function buildCodingDoc(headerTitle, sections, projectName) {
-  const codingSections = sections.filter(
-    (s) => CURSORRULES_KEYS.some((k) => s.title.includes(k))
-  );
-  const lines = [
-    `# ${projectName} \u2014 ${headerTitle}`,
-    "",
-    "> \uCF54\uB529/\uB514\uC790\uC778 \uC804\uC6A9. \uAE30\uB85D/\uC6B4\uC601 \u2192 CLAUDE.md \uCC38\uC870.",
-    "> \u26A1 \uC774 \uD30C\uC77C\uC740 RULES.md\uC5D0\uC11C \uC790\uB3D9 \uC0DD\uC131\uB428 (vhk sync). \uC9C1\uC811 \uC218\uC815 \uAE08\uC9C0.",
-    "",
-    "## \uD544\uC218 \uCC38\uC870",
-    "- docs/PRD.md \xB7 docs/ARCHITECTURE.md \xB7 CLAUDE.md \xB7 RULES.md",
-    ""
-  ];
-  for (const section of codingSections) {
-    lines.push(`## ${section.title}`);
-    lines.push(section.content);
-    lines.push("");
-  }
-  return lines.join("\n");
-}
-function toCursorrules(sections, projectName) {
-  return buildCodingDoc("Cursor Rules", sections, projectName);
-}
-function toWindsurfrules(sections, projectName) {
-  return buildCodingDoc("Windsurf Rules", sections, projectName);
-}
-function toCopilotInstructions(sections, projectName) {
-  return buildCodingDoc("GitHub Copilot Instructions", sections, projectName);
-}
-var ANTIGRAVITY_CHAR_LIMIT = 12e3;
-var ANTIGRAVITY_TRUNCATE_MARKER = "\n\n<!-- \u26A0\uFE0F Antigravity 12,000\uC790 \uC81C\uD55C\uC73C\uB85C \uC808\uC0AD\uB428 \u2014 \uC804\uCCB4 \uADDC\uCE59\uC740 RULES.md \uCC38\uC870 -->\n";
-function truncateForAntigravity(content, limit = ANTIGRAVITY_CHAR_LIMIT) {
-  if (Buffer.byteLength(content, "utf8") <= limit) return content;
-  const SAFETY = 200;
-  const budget = limit - Buffer.byteLength(ANTIGRAVITY_TRUNCATE_MARKER, "utf8") - SAFETY;
-  let lo = 0;
-  let hi = content.length;
-  while (lo < hi) {
-    const mid = lo + hi + 1 >> 1;
-    if (Buffer.byteLength(content.slice(0, mid), "utf8") <= budget) lo = mid;
-    else hi = mid - 1;
-  }
-  const charCut = lo;
-  let cut = content.lastIndexOf("\n## ", charCut);
-  if (cut < charCut * 0.5) {
-    const nl = content.lastIndexOf("\n", charCut);
-    cut = nl > 0 ? nl : charCut;
-  }
-  return content.slice(0, cut).trimEnd() + ANTIGRAVITY_TRUNCATE_MARKER;
-}
-function toAntigravityRules(sections, projectName) {
-  return truncateForAntigravity(buildCodingDoc("Antigravity Rules", sections, projectName));
-}
-function toClaudeMd(sections, existing) {
-  const recordSections = sections.filter(
-    (s) => CLAUDE_MD_KEYS.some((k) => s.title.includes(k))
-  );
-  const statusMatch = existing.match(/## 현재 상태[\s\S]*?(?=\n## |$)/);
-  const statusSection = statusMatch ? statusMatch[0] : "";
-  const header = existing.split("## ")[0].trim();
-  const lines = [
-    header,
-    "",
-    statusSection,
-    "",
-    "> \u26A1 \uC544\uB798 \uADDC\uCE59 \uC139\uC158\uC740 RULES.md\uC5D0\uC11C \uC790\uB3D9 \uC0DD\uC131\uB428 (vhk sync). \uC9C1\uC811 \uC218\uC815 \uAE08\uC9C0.",
-    ""
-  ];
-  for (const section of recordSections) {
-    lines.push(`## ${section.title}`);
-    lines.push(section.content);
-    lines.push("");
-  }
-  return lines.join("\n");
-}
-function deriveProjectName(rulesContent) {
-  const firstLine = rulesContent.split("\n")[0];
-  return firstLine.replace(/^#\s*/, "").replace(/\s*—.*/, "").trim() || "Project";
-}
-var SYNC_TARGETS = [
-  { path: ".cursorrules", generate: toCursorrules, doneMessage: ko.sync.cursorrulesDone },
-  { path: ".windsurfrules", generate: toWindsurfrules, doneMessage: ko.sync.windsurfDone },
-  { path: ".github/copilot-instructions.md", generate: toCopilotInstructions, doneMessage: ko.sync.copilotDone },
-  { path: ".agents/rules/vhk-rules.md", generate: toAntigravityRules, doneMessage: ko.sync.antigravityDone }
-];
-async function sync() {
-  console.log(chalk5.bold(`
-${ko.sync.title}
-`));
-  const cwd = process.cwd();
-  const rulesPath = path6.join(cwd, "RULES.md");
-  if (!fs5.existsSync(rulesPath)) {
-    console.log(chalk5.yellow(ko.sync.noRules));
-    console.log(chalk5.dim("  RULES.md\uB294 \uD504\uB85C\uC81D\uD2B8 \uADDC\uCE59\uC758 Single Source of Truth\uC785\uB2C8\uB2E4."));
-    console.log(chalk5.dim("  \uC0DD\uC131\uD558\uB824\uBA74: vhk init \uC2E4\uD589 \uD6C4 RULES.md\uB97C \uC791\uC131\uD558\uC138\uC694."));
-    console.log("");
-    console.log(chalk5.dim("  RULES.md \uAE30\uBCF8 \uAD6C\uC870:"));
-    console.log(chalk5.dim("  ## \uD504\uB85C\uC81D\uD2B8 \uC815\uCCB4\uC131"));
-    console.log(chalk5.dim("  ## \uAE30\uC220 \uC2A4\uD0DD"));
-    console.log(chalk5.dim("  ## \uCF54\uB529 \uADDC\uCE59"));
-    console.log(chalk5.dim("  ## \uAE30\uB85D \uADDC\uCE59"));
-    console.log(chalk5.dim("  ## \uCEE4\uBC0B \uCEE8\uBCA4\uC158"));
-    return;
-  }
-  const rulesContent = fs5.readFileSync(rulesPath, "utf-8");
-  const sections = parseRulesMd(rulesContent);
-  console.log(chalk5.dim(`  \u{1F4C4} RULES.md \uD30C\uC2F1 \uC644\uB8CC \u2014 ${sections.length}\uAC1C \uC139\uC158`));
-  const projectName = deriveProjectName(rulesContent);
-  for (const target of SYNC_TARGETS) {
-    const fullPath = path6.join(cwd, target.path);
-    fs5.mkdirSync(path6.dirname(fullPath), { recursive: true });
-    const content = target.generate(sections, projectName);
-    fs5.writeFileSync(fullPath, content, "utf-8");
-    console.log(chalk5.green(`  ${target.doneMessage}`));
-    if (content.includes("Antigravity 12,000\uC790 \uC81C\uD55C\uC73C\uB85C \uC808\uC0AD\uB428")) {
-      console.log(chalk5.yellow(`    \u26A0\uFE0F  ${ko.sync.antigravityTruncated}`));
-    }
-  }
-  const claudePath = path6.join(cwd, "CLAUDE.md");
-  const existingClaude = fs5.existsSync(claudePath) ? fs5.readFileSync(claudePath, "utf-8") : `# \uAE30\uB85D \uADDC\uCE59 (${projectName})
-
-## \uD604\uC7AC \uC0C1\uD0DC
-- **Phase:** __FILL__
-- **\uBE14\uB85C\uCEE4:** \uC5C6\uC74C
-- **\uB2E4\uC74C \uC561\uC158:** __FILL__
-- **\uB9C8\uC9C0\uB9C9 \uC5C5\uB370\uC774\uD2B8:** ${(/* @__PURE__ */ new Date()).toISOString().split("T")[0]}`;
-  fs5.writeFileSync(claudePath, toClaudeMd(sections, existingClaude), "utf-8");
-  console.log(chalk5.green(`  ${ko.sync.claudeDone}`));
-  console.log(chalk5.bold.green(`
-${ko.sync.done}`));
-  console.log(chalk5.dim("  RULES.md (\uC6D0\uBCF8) \u2192 .cursorrules + CLAUDE.md + .windsurfrules"));
-  console.log(chalk5.dim("             + .github/copilot-instructions.md + .agents/rules/vhk-rules.md (\uC790\uB3D9 \uC0DD\uC131)"));
-  console.log(chalk5.dim("  \uADDC\uCE59 \uBCC0\uACBD\uC740 \uD56D\uC0C1 RULES.md\uC5D0\uC11C\uB9CC \uD558\uC138\uC694."));
-  printNextStep({
-    message: "\uADDC\uCE59 \uB3D9\uAE30\uD654 \uC644\uB8CC! \uC774\uC81C Cursor\uAC00 \uC0C8 \uADDC\uCE59\uC744 \uB530\uB985\uB2C8\uB2E4.",
-    command: "vhk \uC810\uAC80",
-    cursorHint: "\uADDC\uCE59 \uC810\uAC80\uD574\uC918"
-  });
-}
-
 // src/commands/check.ts
-import chalk7 from "chalk";
-import path8 from "path";
-import fs7 from "fs";
+import chalk8 from "chalk";
+import path7 from "path";
+import fs6 from "fs";
 
 // src/lib/rules-parser.ts
-import fs6 from "fs";
-import path7 from "path";
+import fs5 from "fs";
+import path6 from "path";
 function parseRules(rulesPath) {
-  if (!fs6.existsSync(rulesPath)) return [];
-  const content = fs6.readFileSync(rulesPath, "utf-8");
+  if (!fs5.existsSync(rulesPath)) return [];
+  const content = fs5.readFileSync(rulesPath, "utf-8");
   const lines = content.split("\n");
   const rules = [];
   let currentSection = "";
-  let ruleIndex = 0;
-  for (const line of lines) {
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    const lineNo = i + 1;
     if (line.startsWith("## ")) {
       currentSection = line.replace("## ", "").trim();
       continue;
     }
     const bulletMatch = line.match(/^[-*]\s+(.+)/);
     if (!bulletMatch) continue;
+    if (isMetaSection(currentSection)) continue;
     const ruleText = bulletMatch[1];
-    ruleIndex++;
     if (/kebab[- ]?case/i.test(ruleText)) {
-      rules.push(createNamingRule(
-        `naming-${ruleIndex}`,
-        currentSection,
-        ruleText,
-        "kebab-case"
-      ));
+      rules.push(createNamingRule(`naming-L${lineNo}`, currentSection, ruleText, "kebab-case"));
     } else if (/camel[- ]?case/i.test(ruleText)) {
-      rules.push(createNamingRule(
-        `naming-${ruleIndex}`,
-        currentSection,
-        ruleText,
-        "camelCase"
-      ));
-    }
-    const pathMatch = ruleText.match(/`([a-zA-Z0-9_/.-]+\/)`/);
-    if (pathMatch) {
-      rules.push(createStructureRule(
-        `structure-${ruleIndex}`,
-        currentSection,
-        ruleText,
-        pathMatch[1]
-      ));
+      rules.push(createNamingRule(`naming-L${lineNo}`, currentSection, ruleText, "camelCase"));
     }
-    if (/금지|사용하지|쓰지 마|하지 않는다|never use|do not use/i.test(ruleText)) {
-      const backtickContent = ruleText.match(/`([^`]+)`/);
-      if (backtickContent) {
-        rules.push(createContentRule(
-          `ban-${ruleIndex}`,
-          currentSection,
-          ruleText,
-          backtickContent[1],
-          "banned"
-        ));
+    if (isStructureSection(currentSection)) {
+      const pathMatch = ruleText.match(/`([a-zA-Z0-9_/.-]+\/)`/);
+      if (pathMatch) {
+        rules.push(createStructureRule(`structure-L${lineNo}`, currentSection, ruleText, pathMatch[1]));
       }
     }
+    const banToken = extractBanToken(ruleText);
+    if (banToken) {
+      rules.push(createContentRule(`ban-L${lineNo}`, currentSection, ruleText, banToken, "banned"));
+    }
   }
   return rules;
 }
+function isMetaSection(section) {
+  const s = section.toLowerCase();
+  return ["\uAE30\uB85D", "\uB85C\uADF8", "adr", "\uD2B8\uB7EC\uBE14", "til", "/done", "\uCCB4\uD06C\uB9AC\uC2A4\uD2B8", "\uC9C0\uCE68", "\uC774\uC288", "\uC6B4\uC601", "\uCEE4\uBC0B"].some(
+    (k) => s.includes(k)
+  );
+}
+function isStructureSection(section) {
+  const s = section.toLowerCase();
+  return ["\uC544\uD0A4\uD14D\uCC98", "\uAD6C\uC870", "\uB514\uB809\uD130\uB9AC", "\uD3F4\uB354", "architecture", "structure"].some((k) => s.includes(k));
+}
+function extractBanToken(ruleText) {
+  const banKw = ruleText.search(/금지|사용하지|쓰지\s*마|하지\s*않는다|never use|do not use/i);
+  if (banKw < 0) return null;
+  let token = null;
+  const before = [...ruleText.slice(0, banKw).matchAll(/`([^`]+)`/g)].pop();
+  if (before) token = before[1];
+  else {
+    const after = ruleText.slice(banKw).match(/^(?:금지|사용하지|쓰지\s*마|do not use|never use)\s*[:：]?\s*`([^`]+)`/i);
+    if (after) token = after[1];
+  }
+  if (!token) return null;
+  if (/:\/\/|www\.|\.(com|io|dev|net|org|app)\b|\//.test(token)) return null;
+  return token;
+}
 function createNamingRule(id, section, desc, convention) {
   return {
     id,
@@ -1889,17 +2081,17 @@ function createNamingRule(id, section, desc, convention) {
     description: desc,
     check: (cwd) => {
       const violations = [];
-      const srcDir = path7.join(cwd, "src");
-      if (!fs6.existsSync(srcDir)) return violations;
+      const srcDir = path6.join(cwd, "src");
+      if (!fs5.existsSync(srcDir)) return violations;
       walkFiles(srcDir, (filePath) => {
-        const name = path7.basename(filePath, path7.extname(filePath));
+        const name = path6.basename(filePath, path6.extname(filePath));
         if (convention === "kebab-case" && !/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name)) {
           if (!["index", "vite.config", "tsconfig"].includes(name)) {
             violations.push({
               ruleId: id,
               severity: "warning",
               message: `\uD30C\uC77C\uBA85\uC774 kebab-case\uAC00 \uC544\uB2D8: ${name}`,
-              file: path7.relative(cwd, filePath)
+              file: path6.relative(cwd, filePath)
             });
           }
         }
@@ -1915,8 +2107,8 @@ function createStructureRule(id, section, desc, expectedPath) {
     type: "structure",
     description: desc,
     check: (cwd) => {
-      const fullPath = path7.join(cwd, expectedPath);
-      if (!fs6.existsSync(fullPath)) {
+      const fullPath = path6.join(cwd, expectedPath);
+      if (!fs5.existsSync(fullPath)) {
         return [{
           ruleId: id,
           severity: "error",
@@ -1936,11 +2128,11 @@ function createContentRule(id, section, desc, pattern, type) {
     pattern: new RegExp(escapeRegex(pattern), "i"),
     check: (cwd) => {
       const violations = [];
-      const srcDir = path7.join(cwd, "src");
-      if (!fs6.existsSync(srcDir)) return violations;
+      const srcDir = path6.join(cwd, "src");
+      if (!fs5.existsSync(srcDir)) return violations;
       const regex = new RegExp(escapeRegex(pattern), "i");
       walkFiles(srcDir, (filePath) => {
-        const fileContent = fs6.readFileSync(filePath, "utf-8");
+        const fileContent = fs5.readFileSync(filePath, "utf-8");
         const fileLines = fileContent.split("\n");
         fileLines.forEach((line, idx) => {
           if (regex.test(line)) {
@@ -1948,7 +2140,7 @@ function createContentRule(id, section, desc, pattern, type) {
               ruleId: id,
               severity: type === "banned" ? "error" : "warning",
               message: type === "banned" ? `\uAE08\uC9C0 \uD328\uD134 \uBC1C\uACAC: \`${pattern}\`` : `\uD544\uC218 \uD328\uD134 \uB204\uB77D: \`${pattern}\``,
-              file: path7.relative(cwd, filePath),
+              file: path6.relative(cwd, filePath),
               line: idx + 1
             });
           }
@@ -1960,9 +2152,9 @@ function createContentRule(id, section, desc, pattern, type) {
   };
 }
 function walkFiles(dir, callback) {
-  const entries = fs6.readdirSync(dir, { withFileTypes: true });
+  const entries = fs5.readdirSync(dir, { withFileTypes: true });
   for (const entry of entries) {
-    const fullPath = path7.join(dir, entry.name);
+    const fullPath = path6.join(dir, entry.name);
     if (entry.isDirectory()) {
       if (!["node_modules", ".git", "dist", ".next"].includes(entry.name)) {
         walkFiles(fullPath, callback);
@@ -1977,13 +2169,13 @@ function escapeRegex(str) {
 }
 
 // src/commands/goal.ts
-import { existsSync as existsSync2, mkdirSync, writeFileSync, readFileSync as readFileSync2 } from "fs";
-import { join as join2 } from "path";
-import chalk6 from "chalk";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, readFileSync as readFileSync3 } from "fs";
+import { join as join4 } from "path";
+import chalk7 from "chalk";
 
 // src/lib/goal-frontmatter.ts
-import { existsSync, readFileSync, readdirSync, statSync } from "fs";
-import { join } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync, statSync } from "fs";
+import { join as join3 } from "path";
 var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/;
 function parseFrontmatter(content) {
   const m = content.match(FRONTMATTER_RE);
@@ -2015,9 +2207,9 @@ function parseSimpleYaml(yaml) {
   return out;
 }
 function parseGoalFile(filePath) {
-  if (!existsSync(filePath)) return null;
+  if (!existsSync2(filePath)) return null;
   try {
-    const content = readFileSync(filePath, "utf-8");
+    const content = readFileSync2(filePath, "utf-8");
     const { frontmatter, body } = parseFrontmatter(content);
     return { filePath, frontmatter, body };
   } catch {
@@ -2025,7 +2217,7 @@ function parseGoalFile(filePath) {
   }
 }
 function listGoals(goalsDir) {
-  if (!existsSync(goalsDir)) return [];
+  if (!existsSync2(goalsDir)) return [];
   let entries;
   try {
     entries = readdirSync(goalsDir);
@@ -2036,7 +2228,7 @@ function listGoals(goalsDir) {
   for (const name of entries) {
     if (!name.endsWith(".md")) continue;
     if (name === "_meta.md") continue;
-    const fp = join(goalsDir, name);
+    const fp = join3(goalsDir, name);
     try {
       if (!statSync(fp).isFile()) continue;
     } catch {
@@ -2051,10 +2243,40 @@ function listGoals(goalsDir) {
   parsed.sort((a, b) => a.frontmatter.id - b.frontmatter.id);
   return parsed;
 }
-function findDuplicateIds(goals) {
-  const counts = /* @__PURE__ */ new Map();
-  for (const g of goals) {
-    const id = g.frontmatter.id;
+function findSkippedGoalFiles(goalsDir) {
+  if (!existsSync2(goalsDir)) return [];
+  let entries;
+  try {
+    entries = readdirSync(goalsDir);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const name of entries) {
+    if (!name.endsWith(".md")) continue;
+    if (name === "_meta.md") continue;
+    const fp = join3(goalsDir, name);
+    try {
+      if (!statSync(fp).isFile()) continue;
+    } catch {
+      continue;
+    }
+    const g = parseGoalFile(fp);
+    if (!g) continue;
+    const fm = g.frontmatter;
+    if (fm.type === "goal" && typeof fm.id === "number") continue;
+    if (fm.type === "meta") continue;
+    const looksLikeGoal = fm.type === "goal" || "id" in fm || "status" in fm || "priority" in fm || "title" in fm;
+    if (!looksLikeGoal) continue;
+    const reason = fm.type !== "goal" ? "type: goal \uB204\uB77D (frontmatter \uC5D0 'type: goal' \uD544\uC694)" : "id \uAC00 \uC22B\uC790\uAC00 \uC544\uB2D8 ('id: 1' \uCC98\uB7FC \uC22B\uC790\uB9CC)";
+    out.push({ file: name, reason });
+  }
+  return out;
+}
+function findDuplicateIds(goals) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const g of goals) {
+    const id = g.frontmatter.id;
     if (typeof id !== "number") continue;
     counts.set(id, (counts.get(id) ?? 0) + 1);
   }
@@ -2102,7 +2324,7 @@ ${body}`;
 
 // src/commands/goal.ts
 var GOALS_DIR = "goals";
-var STATE_DIR = "docs/state";
+var STATE_DIR2 = "docs/state";
 var SCRIPTS_DIR = "scripts";
 var STATUS_ICON = {
   NOT_STARTED: "\u26AA",
@@ -2128,13 +2350,15 @@ function resolveGoalId(optId, goals) {
   return selectActiveId(goals);
 }
 async function goalList() {
-  console.log(chalk6.bold(`
+  console.log(chalk7.bold(`
 ${ko.goal.listTitle}
 `));
   const goals = listGoals(GOALS_DIR);
+  const skipped = findSkippedGoalFiles(GOALS_DIR);
   if (goals.length === 0) {
-    console.log(chalk6.yellow("  \u{1F4ED} goals/ \uB514\uB809\uD1A0\uB9AC\uC5D0 goal \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
-    console.log(chalk6.dim("  vhk goal init \uC73C\uB85C \uC2DC\uC791\uD558\uC138\uC694."));
+    console.log(chalk7.yellow("  \u{1F4ED} goals/ \uB514\uB809\uD1A0\uB9AC\uC5D0 goal \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk7.dim("  vhk goal init \uC73C\uB85C \uC2DC\uC791\uD558\uC138\uC694."));
+    printSkippedGoalWarnings(skipped);
     return;
   }
   for (const g of goals) {
@@ -2151,17 +2375,33 @@ ${ko.goal.listTitle}
   const dups = findDuplicateIds(goals);
   if (dups.length > 0) {
     console.log("");
-    console.log(chalk6.yellow(`  ${ko.goal.duplicateId(dups.join(", "))}`));
+    console.log(chalk7.yellow(`  ${ko.goal.duplicateId(dups.join(", "))}`));
+  }
+  printSkippedGoalWarnings(skipped);
+}
+function printSkippedGoalWarnings(skipped) {
+  if (skipped.length > 0) {
+    console.log("");
+    console.log(chalk7.yellow(`  ${ko.goal.skippedFiles(skipped.length)}`));
+    for (const s of skipped) {
+      console.log(chalk7.yellow(`    - goals/${s.file}: ${s.reason}`));
+    }
+    console.log(chalk7.dim("    \uD544\uC218: type: goal + \uC22B\uC790 id. \uC2A4\uD0A4\uB9C8 \uC804\uCCB4: goals/_meta.md"));
   }
 }
 async function goalNext() {
-  console.log(chalk6.bold(`
+  console.log(chalk7.bold(`
 ${ko.goal.nextTitle}
 `));
   const goals = listGoals(GOALS_DIR);
+  if (goals.length === 0) {
+    console.log(chalk7.yellow("  \u{1F4ED} \uC815\uC758\uB41C goal \uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk7.dim("  vhk goal init \uC73C\uB85C \uC2DC\uC791\uD558\uC138\uC694."));
+    return;
+  }
   const activeId = selectActiveId(goals);
   if (activeId === null) {
-    console.log(chalk6.green("  \u{1F389} \uBAA8\uB4E0 goal \uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4!"));
+    console.log(chalk7.green("  \u{1F389} \uBAA8\uB4E0 goal \uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4!"));
     return;
   }
   const active = goals.find((g) => g.frontmatter.id === activeId);
@@ -2180,10 +2420,10 @@ ${ko.goal.nextTitle}
     "```",
     ""
   ].join("\n");
-  mkdirSync(STATE_DIR, { recursive: true });
-  writeFileSync(join2(STATE_DIR, "next-task.md"), text, "utf-8");
+  mkdirSync2(STATE_DIR2, { recursive: true });
+  writeFileSync2(join4(STATE_DIR2, "next-task.md"), text, "utf-8");
   console.log(
-    chalk6.green(
+    chalk7.green(
       `  \u2705 next-task.md \uAC31\uC2E0 \u2014 Goal ${activeId}: ${active.frontmatter.title ?? ""}`
     )
   );
@@ -2202,35 +2442,70 @@ version: v0.1
 ## Forbidden Actions (\uC804\uC5ED)
 
 - (\uD574\uB2F9 \uC0AC\uD56D)
+
+## Goal \uD30C\uC77C \uC2A4\uD0A4\uB9C8 (\uD544\uB3C5 \u2014 VHK-021)
+
+\`vhk goal list/next/check/done\` \uB294 \`goals/*.md\`(\uC774 \`_meta.md\` \uC81C\uC678) \uC911 \uC544\uB798
+frontmatter \uB97C \uB9CC\uC871\uD558\uB294 \uD30C\uC77C\uB9CC goal \uB85C \uC778\uC2DD\uD55C\uB2E4. **\uD558\uB098\uB77C\uB3C4 \uC5B4\uAE0B\uB098\uBA74 \uC870\uC6A9\uD788 \uBB34\uC2DC**\uB418\uBA70
+\`vhk goal list\` \uAC00 \uACBD\uACE0\uB85C \uC54C\uB824\uC900\uB2E4.
+
+| \uD544\uB4DC | \uD544\uC218 | \uAC12 |
+| --- | --- | --- |
+| \`type\` | \u2705 | \`goal\` (\uBB38\uC790\uC5F4 \uADF8\uB300\uB85C) |
+| \`id\` | \u2705 | **\uC22B\uC790\uB9CC** (\`1\`, \`2\` \u2026 \u2014 \`G1\` \uAC19\uC740 \uBB38\uC790\uC5F4 \u274C) |
+| \`status\` | \u2705 | \`NOT_STARTED\` | \`IN_PROGRESS\` | \`DONE\` | \`BLOCKED\` |
+| \`priority\` | \uAD8C\uC7A5 | \`P0\` | \`P1\` | \`P2\` |
+| \`title\` | \uAD8C\uC7A5 | \uD55C \uC904 \uC81C\uBAA9 |
+
+\uD30C\uC77C\uBA85 \uADDC\uCE59: \`goals/<id>-<name>.md\` (\uC608: \`goals/1-login.md\`).
+
+### \uC0C8 goal \uD15C\uD50C\uB9BF (\uBCF5\uBD99)
+
+\`\`\`markdown
+---
+vhk_format: 1
+type: goal
+id: 1
+title: \uB85C\uADF8\uC778 \uAE30\uB2A5
+status: NOT_STARTED
+priority: P0
+---
+
+# Goal 1: \uB85C\uADF8\uC778 \uAE30\uB2A5
+
+## \uBC30\uACBD / \uB3D9\uC791 / Completion Check ...
+\`\`\`
+
+\uAC8C\uC774\uD2B8 \uC2A4\uD06C\uB9BD\uD2B8\uB294 \`vhk goal sync\` \uB85C \`scripts/check-goal-<id>.mjs\` \uB97C \uBC31\uD544\uD55C\uB2E4.
 `;
 var STATE_NEXT_TASK_TEMPLATE = "# Next Task\n\n```\nTASK: (vhk goal next \uB85C \uC790\uB3D9 \uAC31\uC2E0)\n```\n";
 var STATE_BLOCKERS_TEMPLATE = "# Blockers\n\n_Append-only. \uD574\uACB0 \uD56D\uBAA9\uC740 ~~\uCDE8\uC18C\uC120~~\uC73C\uB85C \uD45C\uAE30._\n";
 var STATE_LEARNINGS_TEMPLATE = "# Learnings\n\n_Append-only. \uD55C \uC904 = \uD55C \uAD50\uD6C8._\n";
 async function goalInit() {
-  console.log(chalk6.bold(`
+  console.log(chalk7.bold(`
 ${ko.goal.initTitle}
 `));
   const targets = [
-    { path: join2(GOALS_DIR, "_meta.md"), content: META_TEMPLATE },
-    { path: join2(STATE_DIR, "next-task.md"), content: STATE_NEXT_TASK_TEMPLATE },
-    { path: join2(STATE_DIR, "blockers.md"), content: STATE_BLOCKERS_TEMPLATE },
-    { path: join2(STATE_DIR, "learnings.md"), content: STATE_LEARNINGS_TEMPLATE }
+    { path: join4(GOALS_DIR, "_meta.md"), content: META_TEMPLATE },
+    { path: join4(STATE_DIR2, "next-task.md"), content: STATE_NEXT_TASK_TEMPLATE },
+    { path: join4(STATE_DIR2, "blockers.md"), content: STATE_BLOCKERS_TEMPLATE },
+    { path: join4(STATE_DIR2, "learnings.md"), content: STATE_LEARNINGS_TEMPLATE }
   ];
-  mkdirSync(GOALS_DIR, { recursive: true });
-  mkdirSync(STATE_DIR, { recursive: true });
+  mkdirSync2(GOALS_DIR, { recursive: true });
+  mkdirSync2(STATE_DIR2, { recursive: true });
   let created = 0;
   let skipped = 0;
   for (const t2 of targets) {
-    if (existsSync2(t2.path)) {
-      console.log(chalk6.gray(`  \u2298 skip (\uC774\uBBF8 \uC874\uC7AC): ${t2.path}`));
+    if (existsSync3(t2.path)) {
+      console.log(chalk7.gray(`  \u2298 skip (\uC774\uBBF8 \uC874\uC7AC): ${t2.path}`));
       skipped++;
     } else {
-      writeFileSync(t2.path, t2.content, "utf-8");
-      console.log(chalk6.green(`  \u2713 created: ${t2.path}`));
+      writeFileSync2(t2.path, t2.content, "utf-8");
+      console.log(chalk7.green(`  \u2713 created: ${t2.path}`));
       created++;
     }
   }
-  console.log(chalk6.bold(`
+  console.log(chalk7.bold(`
   \u{1F4CA} created=${created} skipped=${skipped}`));
   if (created > 0) {
     printNextStep({
@@ -2241,10 +2516,10 @@ ${ko.goal.initTitle}
   }
 }
 function findGateScript(id) {
-  const mjs = join2(SCRIPTS_DIR, `check-goal-${id}.mjs`);
-  if (existsSync2(mjs)) return mjs;
-  const sh = join2(SCRIPTS_DIR, `check-goal-${id}.sh`);
-  if (existsSync2(sh)) return sh;
+  const mjs = join4(SCRIPTS_DIR, `check-goal-${id}.mjs`);
+  if (existsSync3(mjs)) return mjs;
+  const sh = join4(SCRIPTS_DIR, `check-goal-${id}.sh`);
+  if (existsSync3(sh)) return sh;
   return null;
 }
 function runGate(scriptPath) {
@@ -2253,82 +2528,93 @@ function runGate(scriptPath) {
   const r = safeExecFile(runner, [scriptPath]);
   return { ok: r.ok, out: r.out, err: r.ok ? "" : r.err, runner };
 }
+function warnIfBashOnWindows(scriptPath) {
+  if (process.platform === "win32" && scriptPath.endsWith(".sh")) {
+    console.log(
+      chalk7.yellow(
+        "  \u26A0 Windows: .sh \uAC8C\uC774\uD2B8\uB294 bash \uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. cross-platform .mjs \uB85C \uBC31\uD544\uD558\uC138\uC694 \u2192 vhk goal sync"
+      )
+    );
+  }
+}
 async function goalCheck(opts) {
-  console.log(chalk6.bold(`
+  console.log(chalk7.bold(`
 ${ko.goal.checkTitle}
 `));
   const goals = listGoals(GOALS_DIR);
   const id = resolveGoalId(opts.id, goals);
   if (id === null) {
     console.log(
-      chalk6.yellow("  \u26A0 \uB300\uC0C1 goal \uC744 \uACB0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (--id \uBA85\uC2DC \uB610\uB294 active goal \uD544\uC694).")
+      chalk7.yellow("  \u26A0 \uB300\uC0C1 goal \uC744 \uACB0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (--id \uBA85\uC2DC \uB610\uB294 active goal \uD544\uC694).")
     );
     process.exitCode = 1;
     return;
   }
   if (!goals.some((g) => g.frontmatter.id === id)) {
-    console.log(chalk6.red(`  \u274C ${ko.goal.notFound(id)}`));
+    console.log(chalk7.red(`  \u274C ${ko.goal.notFound(id)}`));
     process.exitCode = 1;
     return;
   }
   const scriptPath = findGateScript(id);
   if (!scriptPath) {
     console.log(
-      chalk6.red(`  \u274C \uAC8C\uC774\uD2B8 \uC2A4\uD06C\uB9BD\uD2B8 \uC5C6\uC74C: scripts/check-goal-${id}.{mjs,sh}`)
+      chalk7.red(`  \u274C \uAC8C\uC774\uD2B8 \uC2A4\uD06C\uB9BD\uD2B8 \uC5C6\uC74C: scripts/check-goal-${id}.{mjs,sh}`)
     );
     process.exitCode = 1;
     return;
   }
+  warnIfBashOnWindows(scriptPath);
   const gate2 = runGate(scriptPath);
-  console.log(chalk6.dim(`  \u25B6 ${gate2.runner} ${scriptPath}
+  console.log(chalk7.dim(`  \u25B6 ${gate2.runner} ${scriptPath}
 `));
   if (gate2.out) console.log(gate2.out);
   if (gate2.ok) {
-    console.log(chalk6.green(`
+    console.log(chalk7.green(`
   \u2705 Goal ${id} \uAC8C\uC774\uD2B8 \uD1B5\uACFC`));
   } else {
-    console.log(chalk6.red(`
+    console.log(chalk7.red(`
   \u274C Goal ${id} \uAC8C\uC774\uD2B8 \uC2E4\uD328`));
-    if (gate2.err && !gate2.out) console.log(chalk6.dim(gate2.err.slice(0, 500)));
+    if (gate2.err && !gate2.out) console.log(chalk7.dim(gate2.err.slice(0, 500)));
     process.exitCode = 1;
   }
 }
 async function goalDone(opts) {
-  console.log(chalk6.bold(`
+  console.log(chalk7.bold(`
 ${ko.goal.doneTitle}
 `));
   const goals = listGoals(GOALS_DIR);
   const id = resolveGoalId(opts.id, goals);
   if (id === null) {
     console.log(
-      chalk6.yellow("  \u26A0 \uB300\uC0C1 goal \uC744 \uACB0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (--id \uBA85\uC2DC \uB610\uB294 active goal \uD544\uC694).")
+      chalk7.yellow("  \u26A0 \uB300\uC0C1 goal \uC744 \uACB0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (--id \uBA85\uC2DC \uB610\uB294 active goal \uD544\uC694).")
     );
     process.exitCode = 1;
     return;
   }
   const target = goals.find((g) => g.frontmatter.id === id);
   if (!target) {
-    console.log(chalk6.red(`  \u274C ${ko.goal.notFound(id)}`));
+    console.log(chalk7.red(`  \u274C ${ko.goal.notFound(id)}`));
     process.exitCode = 1;
     return;
   }
   const scriptPath = findGateScript(id);
   if (!scriptPath) {
     console.log(
-      chalk6.red(
+      chalk7.red(
         `  \u274C \uAC8C\uC774\uD2B8 \uC2A4\uD06C\uB9BD\uD2B8 \uC5C6\uC74C \u2014 done \uCC98\uB9AC \uAC70\uBD80: scripts/check-goal-${id}.{mjs,sh}`
       )
     );
     process.exitCode = 1;
     return;
   }
+  warnIfBashOnWindows(scriptPath);
   const gate2 = runGate(scriptPath);
-  console.log(chalk6.dim(`  \u25B6 \uAC8C\uC774\uD2B8 \uAC80\uC99D: ${gate2.runner} ${scriptPath}
+  console.log(chalk7.dim(`  \u25B6 \uAC8C\uC774\uD2B8 \uAC80\uC99D: ${gate2.runner} ${scriptPath}
 `));
   if (gate2.out) console.log(gate2.out);
   if (!gate2.ok) {
     console.log(
-      chalk6.red(
+      chalk7.red(
         `
   \u274C \uAC8C\uC774\uD2B8 \uC2E4\uD328 \u2014 frontmatter \uBCC0\uACBD \uC5C6\uC774 \uC885\uB8CC. (Forbidden: \uC2E4\uD328 = \uBCF4\uC874)`
       )
@@ -2336,11 +2622,11 @@ ${ko.goal.doneTitle}
     process.exitCode = 1;
     return;
   }
-  const content = readFileSync2(target.filePath, "utf-8");
-  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const content = readFileSync3(target.filePath, "utf-8");
+  const today = localDate();
   const updated = updateFrontmatterStatus(content, "DONE", { completed: today });
-  writeFileSync(target.filePath, updated, "utf-8");
-  console.log(chalk6.green(`
+  writeFileSync2(target.filePath, updated, "utf-8");
+  console.log(chalk7.green(`
   \u2705 Goal ${id} \u2192 DONE (completed: ${today})`));
   printNextStep({
     message: `Goal ${id} \uC644\uB8CC! \uB2E4\uC74C goal \uB85C:`,
@@ -2348,6 +2634,112 @@ ${ko.goal.doneTitle}
     cursorHint: "\uB2E4\uC74C goal \uC54C\uB824\uC918"
   });
 }
+function generateGateScript(id) {
+  const ID = String(id);
+  return [
+    "#!/usr/bin/env node",
+    `// scripts/check-goal-${ID}.mjs \u2014 \uC790\uB3D9 \uC0DD\uC131 (vhk goal sync).`,
+    "// \uAE30\uBCF8 \uAC8C\uC774\uD2B8 = typecheck + (lint) + test + build. goal \uACE0\uC720 \uAC80\uC99D\uC740 \uC544\uB798 \uAD6C\uC5ED\uC5D0 \uCD94\uAC00.",
+    "// sync \uC7AC\uC2E4\uD589\uD574\uB3C4 \uAE30\uC874 \uD30C\uC77C\uC740 \uB36E\uC5B4\uC4F0\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 (idempotent).",
+    "//",
+    "// Env: VHK_GATES_SKIP_DEEP=1  \u2192 test + build \uC2A4\uD0B5 (\uBE60\uB978 typecheck-only \uD328\uC2A4)",
+    "",
+    "import { execFileSync } from 'node:child_process'",
+    "import { existsSync, readFileSync } from 'node:fs'",
+    "",
+    "const SHIM = new Set(['pnpm', 'npm', 'npx', 'yarn'])",
+    "function run(cmd, args) {",
+    "  let bin = cmd, argv = args",
+    "  if (process.platform === 'win32' && SHIM.has(cmd)) {",
+    "    // Windows: .cmd shim \uC9C1\uC811 spawn \uC740 Node CVE-2024-27980 \uC73C\uB85C EINVAL \u2192 cmd.exe \uB798\uD551.",
+    "    bin = 'cmd.exe'; argv = ['/d', '/s', '/c', cmd + '.cmd', ...args]",
+    "  }",
+    "  try {",
+    "    // maxBuffer \uC0C1\uD5A5: \uD070 \uBE4C\uB4DC/\uD14C\uC2A4\uD2B8 \uB85C\uADF8(>1MB)\uC5D0\uC11C \uC131\uACF5\uD574\uB3C4 ENOBUFS \uAC70\uC9D3\uC2E4\uD328 \uBC29\uC9C0.",
+    "    execFileSync(bin, argv, { stdio: ['pipe', 'pipe', 'pipe'], encoding: 'utf-8', maxBuffer: 64 * 1024 * 1024 })",
+    "    return true",
+    "  } catch (e) {",
+    "    const out = (e?.stdout?.toString() ?? '') + (e?.stderr?.toString() ?? '')",
+    "    if (out.trim()) console.log(out.split('\\n').slice(-25).join('\\n'))",
+    "    return false",
+    "  }",
+    "}",
+    "",
+    "if (existsSync('.vhk/HARD_STOP')) {",
+    `  console.log('\u{1F6D1} .vhk/HARD_STOP detected \u2014 refusing to run goal ${ID} gate.')`,
+    "  process.exit(1)",
+    "}",
+    "",
+    "const pkg = existsSync('package.json') ? JSON.parse(readFileSync('package.json', 'utf-8')) : {}",
+    "const scripts = pkg.scripts ?? {}",
+    "const pm = existsSync('pnpm-lock.yaml') ? 'pnpm' : existsSync('yarn.lock') ? 'yarn' : 'npm'",
+    "const skipDeep = process.env.VHK_GATES_SKIP_DEEP === '1'",
+    "let pass = true",
+    `const gate = (label, ok) => { console.log('[goal ${ID}] ' + label + ': ' + (ok ? '\u2713' : '\u2717')); if (!ok) pass = false }`,
+    "const must = (cond, label) => { console.log((cond ? '    \u2713 ' : '    \u2717 ') + label); if (!cond) pass = false }",
+    "",
+    "// typecheck (\uC2A4\uD06C\uB9BD\uD2B8 \uC6B0\uC120, \uC5C6\uC73C\uBA74 tsc --noEmit)",
+    "if (scripts.typecheck) gate('typecheck', run(pm, ['run', 'typecheck']))",
+    "else if (existsSync('tsconfig.json')) gate('tsc --noEmit', run(pm, pm === 'npm' ? ['exec', '--', 'tsc', '--noEmit'] : ['exec', 'tsc', '--noEmit']))",
+    "if (scripts.lint) gate('lint', run(pm, ['run', 'lint']))",
+    "if (!skipDeep) {",
+    "  if (scripts['test:run']) gate('test', run(pm, ['run', 'test:run']))",
+    "  else if (scripts.test && /vitest/.test(scripts.test)) gate('test', run(pm, ['run', 'test', '--', '--run']))",
+    "  else if (scripts.test) gate('test', run(pm, ['run', 'test']))",
+    "  if (scripts.build) gate('build', run(pm, ['run', 'build']))",
+    "}",
+    "",
+    `// \u2500\u2500\u2500 goal ${ID} \uACE0\uC720 \uAC80\uC99D (\uC9C1\uC811 \uCD94\uAC00) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+    "// const read = (p) => existsSync(p) ? readFileSync(p, 'utf-8') : null",
+    "// must(read('src/foo.ts')?.includes('bar'), 'foo.ts \uC5D0 bar \uC874\uC7AC')",
+    "",
+    `if (pass) { console.log('\u2705 goal ${ID} gate passes'); process.exit(0) }`,
+    `console.log('\u274C goal ${ID} gate failed'); process.exit(1)`,
+    ""
+  ].join("\n");
+}
+async function goalSync() {
+  console.log(chalk7.bold(`
+${ko.goal.syncTitle}
+`));
+  const goals = listGoals(GOALS_DIR);
+  const result = { created: [], skipped: [] };
+  if (goals.length === 0) {
+    console.log(
+      chalk7.yellow("  \u{1F4ED} goals/ \uC5D0 goal \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. vhk goal init \uC73C\uB85C \uC2DC\uC791\uD558\uC138\uC694.")
+    );
+    return result;
+  }
+  mkdirSync2(SCRIPTS_DIR, { recursive: true });
+  for (const g of goals) {
+    const id = g.frontmatter.id;
+    if (typeof id !== "number") continue;
+    const target = join4(SCRIPTS_DIR, `check-goal-${id}.mjs`);
+    if (existsSync3(target)) {
+      console.log(chalk7.gray(`  \u2298 skip (\uC774\uBBF8 \uC874\uC7AC): ${target}`));
+      result.skipped.push(id);
+      continue;
+    }
+    const shOnly = existsSync3(join4(SCRIPTS_DIR, `check-goal-${id}.sh`));
+    writeFileSync2(target, generateGateScript(id), "utf-8");
+    console.log(
+      chalk7.green(`  \u2713 created: ${target}${shOnly ? "  (.sh \u2192 .mjs \uBC31\uD544, Windows 1\uAE09)" : ""}`)
+    );
+    result.created.push(id);
+  }
+  console.log(
+    chalk7.bold(`
+  \u{1F4CA} created=${result.created.length} skipped=${result.skipped.length}`)
+  );
+  if (result.created.length > 0) {
+    printNextStep({
+      message: `\uAC8C\uC774\uD2B8 \uC2A4\uD06C\uB9BD\uD2B8 ${result.created.length}\uAC1C \uC0DD\uC131 (goal ${result.created.join(", ")}). \uAC80\uC99D\uD558\uB824\uBA74:`,
+      command: `vhk goal check --id ${result.created[0]}`,
+      cursorHint: `goal ${result.created[0]} \uAC8C\uC774\uD2B8 \uAC80\uC99D\uD574\uC918`
+    });
+  }
+  return result;
+}
 
 // src/commands/check.ts
 async function check(opts = {}) {
@@ -2357,22 +2749,22 @@ async function check(opts = {}) {
   return checkRules();
 }
 async function checkRules() {
-  console.log(chalk7.bold(`
+  console.log(chalk8.bold(`
 ${ko.check.title}
 `));
   const cwd = process.cwd();
-  const rulesPath = path8.join(cwd, "RULES.md");
-  if (!fs7.existsSync(rulesPath)) {
-    console.log(chalk7.yellow(ko.check.noRules));
-    console.log(chalk7.dim("  vhk init\uC73C\uB85C \uC2DC\uC791\uD558\uAC70\uB098 RULES.md\uB97C \uB9CC\uB4E4\uC5B4 \uBCF4\uC138\uC694."));
+  const rulesPath = path7.join(cwd, "RULES.md");
+  if (!fs6.existsSync(rulesPath)) {
+    console.log(chalk8.yellow(ko.check.noRules));
+    console.log(chalk8.dim("  vhk init\uC73C\uB85C \uC2DC\uC791\uD558\uAC70\uB098 RULES.md\uB97C \uB9CC\uB4E4\uC5B4 \uBCF4\uC138\uC694."));
     return;
   }
   const rules = parseRules(rulesPath);
-  console.log(chalk7.dim(`  \u{1F4CF} ${rules.length}\uAC1C \uAC80\uC99D \uAC00\uB2A5\uD55C \uADDC\uCE59 \uAC10\uC9C0
+  console.log(chalk8.dim(`  \u{1F4CF} \uC790\uB3D9 \uAC80\uC99D \uAC00\uB2A5\uD55C \uADDC\uCE59 ${rules.length}\uAC1C \uAC10\uC9C0 (\uB098\uBA38\uC9C0 \uADDC\uCE59\uC740 \uC218\uB3D9/\uB3C4\uAD6C \uD655\uC778)
 `));
   if (rules.length === 0) {
-    console.log(chalk7.yellow(ko.check.noAutoRules));
-    console.log(chalk7.dim("  RULES.md\uC5D0 \uD30C\uC77C \uC774\uB984\xB7\uD3F4\uB354 \uADDC\uCE59\uC744 \uC801\uC73C\uBA74 \uC790\uB3D9\uC73C\uB85C \uC810\uAC80\uD574\uC694."));
+    console.log(chalk8.yellow(ko.check.noAutoRules));
+    console.log(chalk8.dim("  RULES.md\uC5D0 \uD30C\uC77C \uC774\uB984\xB7\uD3F4\uB354 \uADDC\uCE59\uC744 \uC801\uC73C\uBA74 \uC790\uB3D9\uC73C\uB85C \uC810\uAC80\uD574\uC694."));
     return;
   }
   const allViolations = [];
@@ -2380,13 +2772,14 @@ ${ko.check.title}
   for (const rule of rules) {
     const violations = rule.check(cwd);
     if (violations.length === 0) {
-      console.log(chalk7.green(`  \u2705 ${rule.id}`) + chalk7.dim(` \u2014 ${rule.description.slice(0, 60)}`));
+      const patternHint = rule.type === "content" && rule.pattern ? chalk8.dim(` [\uAC80\uC0AC: ${rule.pattern.source}]`) : "";
+      console.log(chalk8.green(`  \u2705 ${rule.id}`) + chalk8.dim(` \u2014 ${rule.description.slice(0, 60)}`) + patternHint);
       passCount++;
     } else {
-      console.log(chalk7.red(`  \u274C ${rule.id}`) + chalk7.dim(` \u2014 ${violations.length}\uAC74 \uC704\uBC18`));
+      console.log(chalk8.red(`  \u274C ${rule.id}`) + chalk8.dim(` \u2014 ${violations.length}\uAC74 \uC704\uBC18`));
       violations.forEach((v) => {
-        const loc = v.file ? chalk7.dim(` (${v.file}${v.line ? ":" + v.line : ""})`) : "";
-        const icon = v.severity === "error" ? chalk7.red("\u2716") : v.severity === "warning" ? chalk7.yellow("\u26A0") : chalk7.blue("\u2139");
+        const loc = v.file ? chalk8.dim(` (${v.file}${v.line ? ":" + v.line : ""})`) : "";
+        const icon = v.severity === "error" ? chalk8.red("\u2716") : v.severity === "warning" ? chalk8.yellow("\u26A0") : chalk8.blue("\u2139");
         console.log(`    ${icon} ${v.message}${loc}`);
       });
       allViolations.push(...violations);
@@ -2396,17 +2789,18 @@ ${ko.check.title}
   const errors = allViolations.filter((v) => v.severity === "error").length;
   const warnings = allViolations.filter((v) => v.severity === "warning").length;
   if (allViolations.length === 0) {
-    console.log(chalk7.green.bold(`${ko.check.allPassed} (${passCount}/${rules.length})`));
+    console.log(chalk8.green.bold(`\u2705 \uC790\uB3D9 \uAC80\uC99D \uAC00\uB2A5\uD55C \uADDC\uCE59 ${passCount}\uAC1C \uD1B5\uACFC`));
+    console.log(chalk8.dim("   (RULES.md \uC758 \uB098\uBA38\uC9C0 \uADDC\uCE59\uC740 \uCF54\uB4DC \uC790\uB3D9 \uAC80\uC0AC \uBD88\uAC00 \u2014 \uC9C1\uC811/\uB3C4\uAD6C\uB85C \uD655\uC778\uD558\uC138\uC694.)"));
     printNextStep({
       message: "\uBAA8\uB4E0 \uADDC\uCE59 \uD1B5\uACFC! \uBCF4\uC548 \uC2A4\uCE94\uB3C4 \uD574\uBCFC\uAE4C\uC694?",
       command: "vhk \uBCF4\uC548 scan",
       cursorHint: "\uBCF4\uC548 \uC2A4\uCE94 \uB3CC\uB824\uC918"
     });
   } else {
-    console.log(chalk7.bold(ko.check.summary));
-    console.log(`  \uADDC\uCE59: ${chalk7.cyan(String(rules.length))}\uAC1C | \uD1B5\uACFC: ${chalk7.green(String(passCount))}\uAC1C | \uC704\uBC18: ${chalk7.red(String(allViolations.length))}\uAC74`);
-    if (errors > 0) console.log(`  ${chalk7.red(`\u2716 ${errors}\uAC1C \uC5D0\uB7EC`)}`);
-    if (warnings > 0) console.log(`  ${chalk7.yellow(`\u26A0 ${warnings}\uAC1C \uACBD\uACE0`)}`);
+    console.log(chalk8.bold(ko.check.summary));
+    console.log(`  \uADDC\uCE59: ${chalk8.cyan(String(rules.length))}\uAC1C | \uD1B5\uACFC: ${chalk8.green(String(passCount))}\uAC1C | \uC704\uBC18: ${chalk8.red(String(allViolations.length))}\uAC74`);
+    if (errors > 0) console.log(`  ${chalk8.red(`\u2716 ${errors}\uAC1C \uC5D0\uB7EC`)}`);
+    if (warnings > 0) console.log(`  ${chalk8.yellow(`\u26A0 ${warnings}\uAC1C \uACBD\uACE0`)}`);
     printNextStep({
       message: "\uC704\uBC18 \uD56D\uBAA9\uC744 \uC218\uC815\uD55C \uD6C4 \uB2E4\uC2DC \uC810\uAC80\uD558\uC138\uC694.",
       command: "vhk \uC810\uAC80",
@@ -2419,36 +2813,36 @@ ${ko.check.title}
 }
 
 // src/commands/secure.ts
-import chalk8 from "chalk";
-import fs8 from "fs";
-import path9 from "path";
+import chalk9 from "chalk";
+import fs7 from "fs";
+import path8 from "path";
 async function secure() {
-  console.log(chalk8.bold(`
+  console.log(chalk9.bold(`
 ${ko.secure.title}
 `));
   const cwd = process.cwd();
-  const gitignorePath = path9.join(cwd, ".gitignore");
-  const hasGitignore = fs8.existsSync(gitignorePath);
+  const gitignorePath = path8.join(cwd, ".gitignore");
+  const hasGitignore = fs7.existsSync(gitignorePath);
   if (!hasGitignore) {
-    console.log(chalk8.yellow(`  ${ko.secure.noGitignore}`));
-    console.log(chalk8.dim("  .env \uD30C\uC77C\uC774 \uCEE4\uBC0B\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"));
+    console.log(chalk9.yellow(`  ${ko.secure.noGitignore}`));
+    console.log(chalk9.dim("  .env \uD30C\uC77C\uC774 \uCEE4\uBC0B\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"));
   } else {
-    const gitignoreContent = fs8.readFileSync(gitignorePath, "utf-8");
+    const gitignoreContent = fs7.readFileSync(gitignorePath, "utf-8");
     if (!gitignoreContent.includes(".env")) {
-      console.log(chalk8.yellow(`  ${ko.secure.noEnvInGitignore}`));
-      console.log(chalk8.dim("  \uCD94\uAC00\uB97C \uAD8C\uC7A5\uD569\uB2C8\uB2E4.\n"));
+      console.log(chalk9.yellow(`  ${ko.secure.noEnvInGitignore}`));
+      console.log(chalk9.dim("  \uCD94\uAC00\uB97C \uAD8C\uC7A5\uD569\uB2C8\uB2E4.\n"));
     }
   }
-  console.log(chalk8.dim(`  ${ko.secure.scanning}
+  console.log(chalk9.dim(`  ${ko.secure.scanning}
 `));
   const { findings, scannedFiles, truncated } = scanProjectForSecrets(cwd);
-  console.log(chalk8.dim(`  \u{1F4C2} ${scannedFiles}\uAC1C \uD30C\uC77C \uC2A4\uCE94 \uC644\uB8CC (lock\xB7node_modules\xB7>${MAX_SCAN_FILE_BYTES / 1024}KB \uC81C\uC678)`));
+  console.log(chalk9.dim(`  \u{1F4C2} ${scannedFiles}\uAC1C \uD30C\uC77C \uC2A4\uCE94 \uC644\uB8CC (lock\xB7node_modules\xB7>${MAX_SCAN_FILE_BYTES / 1024}KB \uC81C\uC678)`));
   if (truncated) {
-    console.log(chalk8.yellow(`  \u26A0\uFE0F  \uACB0\uACFC ${MAX_SECRET_FINDINGS}\uAC74\uC5D0\uC11C \uCD9C\uB825\uC744 \uC81C\uD55C\uD588\uC2B5\uB2C8\uB2E4. lock \uD30C\uC77C \uB4F1\uC740 \uC790\uB3D9 \uC81C\uC678\uB429\uB2C8\uB2E4.`));
+    console.log(chalk9.yellow(`  \u26A0\uFE0F  \uACB0\uACFC ${MAX_SECRET_FINDINGS}\uAC74\uC5D0\uC11C \uCD9C\uB825\uC744 \uC81C\uD55C\uD588\uC2B5\uB2C8\uB2E4. lock \uD30C\uC77C \uB4F1\uC740 \uC790\uB3D9 \uC81C\uC678\uB429\uB2C8\uB2E4.`));
   }
   console.log("");
   if (findings.length === 0) {
-    console.log(chalk8.green.bold(`  ${ko.secure.clean}`));
+    console.log(chalk9.green.bold(`  ${ko.secure.clean}`));
     printNextStep({
       message: "\uBCF4\uC548 \uC774\uC0C1 \uC5C6\uC74C! \uAE68\uB057\uD569\uB2C8\uB2E4.",
       command: "vhk \uC815\uB9AC",
@@ -2460,161 +2854,46 @@ ${ko.secure.title}
   const high = findings.filter((f) => f.severity === "high");
   const medium = findings.filter((f) => f.severity === "medium");
   if (critical.length > 0) {
-    console.log(chalk8.red.bold(`  \u{1F6A8} CRITICAL \u2014 ${critical.length}\uAC74`));
+    console.log(chalk9.red.bold(`  \u{1F6A8} CRITICAL \u2014 ${critical.length}\uAC74`));
     critical.forEach((f) => {
-      console.log(chalk8.red(`    \u2716 ${f.patternName}`));
-      console.log(chalk8.dim(`      ${f.file}:${f.line} \u2192 ${f.match}`));
+      console.log(chalk9.red(`    \u2716 ${f.patternName}`));
+      console.log(chalk9.dim(`      ${f.file}:${f.line} \u2192 ${f.match}`));
     });
     console.log("");
   }
   if (high.length > 0) {
-    console.log(chalk8.yellow.bold(`  \u26A0\uFE0F HIGH \u2014 ${high.length}\uAC74`));
+    console.log(chalk9.yellow.bold(`  \u26A0\uFE0F HIGH \u2014 ${high.length}\uAC74`));
     high.forEach((f) => {
-      console.log(chalk8.yellow(`    \u26A0 ${f.patternName}`));
-      console.log(chalk8.dim(`      ${f.file}:${f.line} \u2192 ${f.match}`));
+      console.log(chalk9.yellow(`    \u26A0 ${f.patternName}`));
+      console.log(chalk9.dim(`      ${f.file}:${f.line} \u2192 ${f.match}`));
     });
     console.log("");
   }
   if (medium.length > 0) {
-    console.log(chalk8.blue.bold(`  \u2139 MEDIUM \u2014 ${medium.length}\uAC74`));
+    console.log(chalk9.blue.bold(`  \u2139 MEDIUM \u2014 ${medium.length}\uAC74`));
     medium.forEach((f) => {
-      console.log(chalk8.blue(`    \u2139 ${f.patternName}`));
-      console.log(chalk8.dim(`      ${f.file}:${f.line} \u2192 ${f.match}`));
+      console.log(chalk9.blue(`    \u2139 ${f.patternName}`));
+      console.log(chalk9.dim(`      ${f.file}:${f.line} \u2192 ${f.match}`));
     });
     console.log("");
   }
-  console.log(chalk8.bold(`  ${ko.secure.summary}`));
-  console.log(`  \uCD1D ${chalk8.red(String(findings.length))}\uAC74 \uAC10\uC9C0 | CRITICAL: ${critical.length} | HIGH: ${high.length} | MEDIUM: ${medium.length}`);
+  console.log(chalk9.bold(`  ${ko.secure.summary}`));
+  console.log(`  \uCD1D ${chalk9.red(String(findings.length))}\uAC74 \uAC10\uC9C0 | CRITICAL: ${critical.length} | HIGH: ${high.length} | MEDIUM: ${medium.length}`);
   console.log("");
-  console.log(chalk8.dim("  \u{1F4A1} \uC870\uCE58 \uBC29\uBC95:"));
-  console.log(chalk8.dim("    1. \uD574\uB2F9 \uD30C\uC77C\uC5D0\uC11C \uC2DC\uD06C\uB9BF\uC744 \uC81C\uAC70\uD558\uACE0 \uD658\uACBD\uBCC0\uC218\uB85C \uC774\uB3D9"));
-  console.log(chalk8.dim("    2. git history\uC5D0\uC11C\uB3C4 \uC81C\uAC70: git filter-branch \uB610\uB294 BFG Repo-Cleaner"));
-  console.log(chalk8.dim("    3. \uC720\uCD9C\uB41C \uD0A4\uB294 \uC989\uC2DC \uD3D0\uAE30\uD558\uACE0 \uC7AC\uBC1C\uAE09\n"));
+  console.log(chalk9.dim("  \u{1F4A1} \uC870\uCE58 \uBC29\uBC95:"));
+  console.log(chalk9.dim("    1. \uD574\uB2F9 \uD30C\uC77C\uC5D0\uC11C \uC2DC\uD06C\uB9BF\uC744 \uC81C\uAC70\uD558\uACE0 \uD658\uACBD\uBCC0\uC218\uB85C \uC774\uB3D9"));
+  console.log(chalk9.dim("    2. git history\uC5D0\uC11C\uB3C4 \uC81C\uAC70: git filter-branch \uB610\uB294 BFG Repo-Cleaner"));
+  console.log(chalk9.dim("    3. \uC720\uCD9C\uB41C \uD0A4\uB294 \uC989\uC2DC \uD3D0\uAE30\uD558\uACE0 \uC7AC\uBC1C\uAE09\n"));
   if (critical.length > 0 || high.length > 0) {
     process.exitCode = 1;
   }
 }
 
 // src/commands/doctor.ts
-import chalk9 from "chalk";
-import fs10 from "fs";
-import path11 from "path";
+import chalk10 from "chalk";
+import fs8 from "fs";
+import path9 from "path";
 import { fileURLToPath } from "url";
-
-// src/lib/drift.ts
-import fs9 from "fs";
-import path10 from "path";
-
-// src/lib/git-repo.ts
-import { execFileSync } from "child_process";
-function getGitRoot(cwd = process.cwd()) {
-  return execFileSync("git", ["rev-parse", "--show-toplevel"], {
-    encoding: "utf-8",
-    cwd,
-    stdio: ["pipe", "pipe", "pipe"]
-  }).trim();
-}
-function gitOut(args, cwd) {
-  return execFileSync("git", args, {
-    encoding: "utf-8",
-    cwd,
-    stdio: ["pipe", "pipe", "pipe"]
-  });
-}
-function gitRun(args, cwd) {
-  execFileSync("git", args, { stdio: "pipe", cwd });
-}
-function getExecErrorMessage(err) {
-  if (err && typeof err === "object" && "stderr" in err) {
-    const stderr = err.stderr;
-    if (Buffer.isBuffer(stderr)) return stderr.toString("utf-8").trim();
-    if (typeof stderr === "string") return stderr.trim();
-  }
-  return err instanceof Error ? err.message : String(err);
-}
-function hasGitRemote(cwd) {
-  try {
-    return gitOut(["remote"], cwd).trim().length > 0;
-  } catch {
-    return false;
-  }
-}
-function countLocalCommits(cwd) {
-  try {
-    const out = gitOut(["rev-list", "--count", "HEAD"], cwd).trim();
-    return parseInt(out, 10) || 0;
-  } catch {
-    return 0;
-  }
-}
-
-// src/lib/drift.ts
-function normalizeForCompare(s) {
-  return s.replace(/\r\n/g, "\n").replace(/[ \t]+$/gm, "").replace(/\n+$/, "\n");
-}
-function checkRuleDrift(rootDir) {
-  const rulesPath = path10.join(rootDir, "RULES.md");
-  if (!fs9.existsSync(rulesPath)) return { checked: false, results: [] };
-  const rulesContent = fs9.readFileSync(rulesPath, "utf-8");
-  const sections = parseRulesMd(rulesContent);
-  const projectName = deriveProjectName(rulesContent);
-  const results = [];
-  for (const target of SYNC_TARGETS) {
-    const fullPath = path10.join(rootDir, target.path);
-    if (!fs9.existsSync(fullPath)) {
-      results.push({ path: target.path, status: "missing" });
-      continue;
-    }
-    const expected = normalizeForCompare(target.generate(sections, projectName));
-    const actual = normalizeForCompare(fs9.readFileSync(fullPath, "utf-8"));
-    results.push({ path: target.path, status: expected === actual ? "ok" : "drifted" });
-  }
-  return { checked: true, results };
-}
-var CONTEXT_GIT_MARKER = "vhk-context-git";
-var CONTEXT_PATH = ".vhk/context.md";
-function extractContextSha(content) {
-  const m = content.match(new RegExp(`${CONTEXT_GIT_MARKER}:\\s*([0-9a-f]{7,40})`));
-  return m ? m[1] : null;
-}
-var CONTEXT_SOURCE_PATHS = ["package.json", "goals", "docs/state/learnings.md"];
-function contextSourcesChanged(generatedSha, rootDir) {
-  const content = gitOut(
-    ["diff", "--name-only", generatedSha, "HEAD", "--", ...CONTEXT_SOURCE_PATHS],
-    rootDir
-  ).trim();
-  if (content) return true;
-  const structural = gitOut(
-    ["diff", "--name-only", "--diff-filter=ADR", generatedSha, "HEAD"],
-    rootDir
-  ).trim();
-  return structural.length > 0;
-}
-function checkContextDrift(rootDir) {
-  const ctxPath = path10.join(rootDir, CONTEXT_PATH);
-  if (!fs9.existsSync(ctxPath)) return { checked: false, stale: false };
-  const generatedSha = extractContextSha(fs9.readFileSync(ctxPath, "utf-8"));
-  if (!generatedSha) return { checked: false, stale: false };
-  let currentSha;
-  try {
-    currentSha = gitOut(["rev-parse", "HEAD"], rootDir).trim();
-  } catch {
-    return { checked: false, stale: false };
-  }
-  if (!currentSha) return { checked: false, stale: false };
-  if (currentSha.startsWith(generatedSha) || generatedSha.startsWith(currentSha)) {
-    return { checked: true, stale: false, generatedSha, currentSha };
-  }
-  let stale;
-  try {
-    stale = contextSourcesChanged(generatedSha, rootDir);
-  } catch {
-    return { checked: false, stale: false };
-  }
-  return { checked: true, stale, generatedSha, currentSha };
-}
-
-// src/commands/doctor.ts
 function checkCommand(name, command, hint) {
   const result = safeExecFile(command, ["--version"]);
   if (!result.ok) return { name, command, ok: false, hint };
@@ -2622,14 +2901,14 @@ function checkCommand(name, command, hint) {
   return { name, command, version, ok: true, hint };
 }
 function getVhkVersion2() {
-  const dir = path11.dirname(fileURLToPath(import.meta.url));
+  const dir = path9.dirname(fileURLToPath(import.meta.url));
   const candidates = [
-    path11.join(dir, "../package.json"),
-    path11.join(dir, "../../package.json")
+    path9.join(dir, "../package.json"),
+    path9.join(dir, "../../package.json")
   ];
   for (const pkgPath of candidates) {
     try {
-      if (fs10.existsSync(pkgPath)) {
+      if (fs8.existsSync(pkgPath)) {
         const pkg = readJsonFile(pkgPath);
         return pkg.version;
       }
@@ -2657,7 +2936,7 @@ function compareSemver(a, b) {
   return a3 - b3;
 }
 async function doctor() {
-  console.log(chalk9.bold(`
+  console.log(chalk10.bold(`
 ${ko.doctor.title}
 `));
   const checks = [
@@ -2669,30 +2948,30 @@ ${ko.doctor.title}
   let allOk = true;
   for (const check2 of checks) {
     if (check2.ok) {
-      console.log(chalk9.green(`  \u2705 ${check2.name}`) + chalk9.dim(` \u2014 ${check2.version}`));
+      console.log(chalk10.green(`  \u2705 ${check2.name}`) + chalk10.dim(` \u2014 ${check2.version}`));
     } else {
-      console.log(chalk9.red(`  \u274C ${check2.name} \uC5C6\uC74C`));
-      console.log(chalk9.dim(`     \u2192 ${check2.hint}`));
+      console.log(chalk10.red(`  \u274C ${check2.name} \uC5C6\uC74C`));
+      console.log(chalk10.dim(`     \u2192 ${check2.hint}`));
       allOk = false;
     }
   }
   console.log("");
   const vhkVersion = getVhkVersion2();
   if (vhkVersion) {
-    console.log(chalk9.green("  \u2705 VHK") + chalk9.dim(` \u2014 v${vhkVersion}`));
+    console.log(chalk10.green("  \u2705 VHK") + chalk10.dim(` \u2014 v${vhkVersion}`));
   } else {
-    console.log(chalk9.green("  \u2705 VHK") + chalk9.dim(" \u2014 \uC124\uCE58\uB428"));
+    console.log(chalk10.green("  \u2705 VHK") + chalk10.dim(" \u2014 \uC124\uCE58\uB428"));
   }
   if (vhkVersion) {
     const latest = fetchLatestNpmVersion("@byh3071/vhk");
     if (latest && compareSemver(latest, vhkVersion) > 0) {
-      console.log(chalk9.yellow(`  ${ko.doctor.updateAvailable(latest)}`));
+      console.log(chalk10.yellow(`  ${ko.doctor.updateAvailable(latest)}`));
     } else if (latest) {
-      console.log(chalk9.dim(`     ${ko.doctor.updateCurrent}`));
+      console.log(chalk10.dim(`     ${ko.doctor.updateCurrent}`));
     }
   }
   console.log("");
-  console.log(chalk9.bold(`  ${ko.doctor.projectFiles}`));
+  console.log(chalk10.bold(`  ${ko.doctor.projectFiles}`));
   const cwd = process.cwd();
   const projectFiles = [
     { name: "RULES.md", hint: "vhk init\uC73C\uB85C \uC0DD\uC131 \uAC00\uB2A5" },
@@ -2702,49 +2981,51 @@ ${ko.doctor.title}
     { name: ".env", hint: ".gitignore\uC5D0 \uD3EC\uD568\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778" }
   ];
   for (const file of projectFiles) {
-    const exists = fs10.existsSync(path11.join(cwd, file.name));
+    const exists = fs8.existsSync(path9.join(cwd, file.name));
     if (exists) {
-      console.log(chalk9.green(`    \u2705 ${file.name}`));
+      console.log(chalk10.green(`    \u2705 ${file.name}`));
       if (file.name === ".env") {
-        const gitignorePath = path11.join(cwd, ".gitignore");
-        if (fs10.existsSync(gitignorePath)) {
-          const gitignore = fs10.readFileSync(gitignorePath, "utf-8");
+        const gitignorePath = path9.join(cwd, ".gitignore");
+        if (fs8.existsSync(gitignorePath)) {
+          const gitignore = fs8.readFileSync(gitignorePath, "utf-8");
           if (!gitignore.includes(".env")) {
-            console.log(chalk9.yellow(`    ${ko.doctor.envNotIgnored}`));
+            console.log(chalk10.yellow(`    ${ko.doctor.envNotIgnored}`));
           }
         }
       }
+    } else if (file.name === ".env" && fs8.existsSync(path9.join(cwd, ".env.local"))) {
+      console.log(chalk10.green("    \u2705 .env.local") + chalk10.dim(" \u2014 \uB85C\uCEEC env \uC0AC\uC6A9 \uC911 (.env \uC5C6\uC5B4\uB3C4 \uC815\uC0C1)"));
     } else {
-      console.log(chalk9.dim(`    \u2B1A ${file.name}`) + chalk9.dim(` \u2014 ${file.hint}`));
+      console.log(chalk10.dim(`    \u2B1A ${file.name}`) + chalk10.dim(` \u2014 ${file.hint}`));
     }
   }
   console.log("");
-  console.log(chalk9.bold(`  ${ko.doctor.driftTitle}`));
+  console.log(chalk10.bold(`  ${ko.doctor.driftTitle}`));
   const ruleDrift = checkRuleDrift(cwd);
   if (!ruleDrift.checked) {
-    console.log(chalk9.dim(`    ${ko.doctor.driftNoRules}`));
+    console.log(chalk10.dim(`    ${ko.doctor.driftNoRules}`));
   } else {
     const drifted = ruleDrift.results.filter((r) => r.status === "drifted");
     if (drifted.length === 0) {
-      console.log(chalk9.green(`    ${ko.doctor.driftRuleClean}`));
+      console.log(chalk10.green(`    ${ko.doctor.driftRuleClean}`));
     } else {
-      console.log(chalk9.yellow(`    ${ko.doctor.driftRuleWarn(drifted.map((d) => d.path).join(", "))}`));
+      console.log(chalk10.yellow(`    ${ko.doctor.driftRuleWarn(drifted.map((d) => d.path).join(", "))}`));
     }
   }
   const ctxDrift = checkContextDrift(cwd);
   if (ctxDrift.checked && ctxDrift.stale) {
-    console.log(chalk9.yellow(`    ${ko.doctor.driftContextWarn}`));
+    console.log(chalk10.yellow(`    ${ko.doctor.driftContextWarn}`));
   }
   console.log("");
   if (allOk) {
-    console.log(chalk9.green.bold(`  ${ko.doctor.allOk}`));
+    console.log(chalk10.green.bold(`  ${ko.doctor.allOk}`));
     printNextStep({
       message: ko.doctor.nextOkMessage,
       command: "vhk \uC2DC\uC791",
       cursorHint: "\uD504\uB85C\uC81D\uD2B8 \uB9CC\uB4E4\uC5B4\uC918"
     });
   } else {
-    console.log(chalk9.yellow.bold(`  ${ko.doctor.missing} ${ko.doctor.missingHint}`));
+    console.log(chalk10.yellow.bold(`  ${ko.doctor.missing} ${ko.doctor.missingHint}`));
     printNextStep({
       message: ko.doctor.nextRetryMessage,
       command: "vhk doctor",
@@ -2755,10 +3036,10 @@ ${ko.doctor.title}
 }
 
 // src/commands/ship.ts
-import chalk10 from "chalk";
+import chalk11 from "chalk";
 import inquirer4 from "inquirer";
-import fs11 from "fs";
-import path12 from "path";
+import fs9 from "fs";
+import path10 from "path";
 var CHECKLIST = [
   { id: "build", questionKey: "checkBuild", hintKey: "hintBuild" },
   { id: "test", questionKey: "checkTest", hintKey: "hintTest" },
@@ -2771,9 +3052,9 @@ function sanitizeVersion(version) {
   return version.trim().replace(/^v/i, "").replace(/[^a-zA-Z0-9._-]/g, "-") || "0.0.0";
 }
 function updateChangelogUnreleased(cwd, version, date) {
-  const changelogPath = path12.join(cwd, "CHANGELOG.md");
-  if (!fs11.existsSync(changelogPath)) return { status: "missing" };
-  const content = fs11.readFileSync(changelogPath, "utf-8");
+  const changelogPath = path10.join(cwd, "CHANGELOG.md");
+  if (!fs9.existsSync(changelogPath)) return { status: "missing" };
+  const content = fs9.readFileSync(changelogPath, "utf-8");
   const unreleasedHeading = /^## \[Unreleased\][^\n]*$/m;
   if (!unreleasedHeading.test(content)) return { status: "no-unreleased" };
   const blankUnreleased = [
@@ -2790,33 +3071,34 @@ function updateChangelogUnreleased(cwd, version, date) {
     `## [${version}] \u2014 ${date}`
   ].join("\n");
   const updated = content.replace(unreleasedHeading, blankUnreleased);
-  fs11.writeFileSync(changelogPath, updated, "utf-8");
+  fs9.writeFileSync(changelogPath, updated, "utf-8");
   return { status: "updated", version };
 }
 async function ship() {
-  console.log(chalk10.bold(`
+  if (!ensureNotHardStopped("ship")) return;
+  console.log(chalk11.bold(`
 ${ko.ship.title}
 `));
   const cwd = process.cwd();
-  console.log(chalk10.cyan.bold(`  ${ko.ship.checklist}
+  console.log(chalk11.cyan.bold(`  ${ko.ship.checklist}
 `));
   const { passed } = await inquirer4.prompt([{
     type: "checkbox",
     name: "passed",
     message: ko.ship.checkboxPrompt,
     choices: CHECKLIST.map((c) => ({
-      name: `${ko.ship[c.questionKey]} ${chalk10.dim(`(${ko.ship[c.hintKey]})`)}`,
+      name: `${ko.ship[c.questionKey]} ${chalk11.dim(`(${ko.ship[c.hintKey]})`)}`,
       value: c.id
     }))
   }]);
   const allPassed = passed.length === CHECKLIST.length;
   const skipped = CHECKLIST.filter((c) => !passed.includes(c.id));
   if (!allPassed) {
-    console.log(chalk10.yellow(`
+    console.log(chalk11.yellow(`
   ${ko.ship.incompleteHeader}`));
     skipped.forEach((s) => {
-      console.log(chalk10.yellow(`    \u2022 ${ko.ship[s.questionKey]}`));
-      console.log(chalk10.dim(`      \u2192 ${ko.ship[s.hintKey]}`));
+      console.log(chalk11.yellow(`    \u2022 ${ko.ship[s.questionKey]}`));
+      console.log(chalk11.dim(`      \u2192 ${ko.ship[s.hintKey]}`));
     });
     const { proceed } = await inquirer4.prompt([{
       type: "confirm",
@@ -2833,13 +3115,13 @@ ${ko.ship.title}
       return;
     }
   } else {
-    console.log(chalk10.green(`
+    console.log(chalk11.green(`
   ${ko.ship.allPassed}
 `));
   }
-  console.log(chalk10.cyan.bold(`  ${ko.ship.retro}
+  console.log(chalk11.cyan.bold(`  ${ko.ship.retro}
 `));
-  console.log(chalk10.dim(`  ${ko.ship.versionHint}`));
+  console.log(chalk11.dim(`  ${ko.ship.versionHint}`));
   const retro = await inquirer4.prompt([
     { type: "input", name: "version", message: ko.ship.versionPrompt },
     { type: "input", name: "whatWentWell", message: ko.ship.questionWell },
@@ -2847,12 +3129,12 @@ ${ko.ship.title}
     { type: "input", name: "learned", message: ko.ship.questionLearned },
     { type: "input", name: "nextVersion", message: ko.ship.questionNext }
   ]);
-  const buildLogDir = path12.join(cwd, "docs", "build-log");
-  if (!fs11.existsSync(buildLogDir)) fs11.mkdirSync(buildLogDir, { recursive: true });
-  const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const buildLogDir = path10.join(cwd, "docs", "build-log");
+  if (!fs9.existsSync(buildLogDir)) fs9.mkdirSync(buildLogDir, { recursive: true });
+  const today = localDate();
   const versionSlug = sanitizeVersion(retro.version);
   const fileName = `${today}-v${versionSlug}.md`;
-  const filePath = path12.join(buildLogDir, fileName);
+  const filePath = path10.join(buildLogDir, fileName);
   const content = [
     `# \uBE4C\uB4DC \uB85C\uADF8: v${versionSlug}`,
     "",
@@ -2881,9 +3163,9 @@ ${ko.ship.title}
     "---",
     `*Generated by \`vhk ship\` at ${(/* @__PURE__ */ new Date()).toISOString()}*`
   ].join("\n");
-  fs11.writeFileSync(filePath, content, "utf-8");
-  console.log(chalk10.green(`
-  ${ko.ship.buildLogDone(path12.relative(cwd, filePath))}`));
+  fs9.writeFileSync(filePath, content, "utf-8");
+  console.log(chalk11.green(`
+  ${ko.ship.buildLogDone(path10.relative(cwd, filePath))}`));
   const changelogResult = updateChangelogUnreleased(cwd, versionSlug, today);
   if (changelogResult.status === "updated") {
     log.success(ko.ship.changelogUpdated(changelogResult.version));
@@ -2901,8 +3183,8 @@ ${ko.ship.title}
 }
 
 // src/commands/save.ts
-import { execFileSync as execFileSync2 } from "child_process";
-import chalk11 from "chalk";
+import { execFileSync } from "child_process";
+import chalk12 from "chalk";
 import ora from "ora";
 import inquirer5 from "inquirer";
 
@@ -2930,29 +3212,29 @@ function statusIcon(code) {
   return "\u{1F4C4}";
 }
 async function save() {
-  console.log(chalk11.bold(`
+  console.log(chalk12.bold(`
 \u{1F4BE} ${t("save.title")}`));
-  console.log(chalk11.gray("\u2500".repeat(40)));
+  console.log(chalk12.gray("\u2500".repeat(40)));
   let gitRoot;
   try {
-    execFileSync2("git", ["rev-parse", "--is-inside-work-tree"], { stdio: "pipe" });
+    execFileSync("git", ["rev-parse", "--is-inside-work-tree"], { stdio: "pipe" });
     gitRoot = getGitRoot();
   } catch {
-    console.log(chalk11.red(`\u274C ${t("save.notGitRepo")}`));
+    console.log(chalk12.red(`\u274C ${t("save.notGitRepo")}`));
     return;
   }
-  console.log(chalk11.cyan(`
+  console.log(chalk12.cyan(`
 \u{1F512} ${t("save.securityWarnHeader")}`));
   printSecurityWarnings(gitRoot);
   const severe = filterSevereFindings(scanProjectForSecrets(gitRoot).findings);
   if (severe.length > 0) {
-    console.log(chalk11.red(`
+    console.log(chalk12.red(`
 \u26A0\uFE0F  ${t("save.secretsFound", severe.length)}`));
     severe.slice(0, 5).forEach((f) => {
-      console.log(chalk11.dim(`   ${f.file}:${f.line} \u2014 ${f.patternName}`));
+      console.log(chalk12.dim(`   ${f.file}:${f.line} \u2014 ${f.patternName}`));
     });
     if (severe.length > 5) {
-      console.log(chalk11.dim(`   ... \uC678 ${severe.length - 5}\uAC74 (vhk \uBCF4\uC548 scan)`));
+      console.log(chalk12.dim(`   ... \uC678 ${severe.length - 5}\uAC74 (vhk \uBCF4\uC548 scan)`));
     }
     const { proceed } = await inquirer5.prompt([{
       type: "confirm",
@@ -2961,16 +3243,16 @@ async function save() {
       default: false
     }]);
     if (!proceed) {
-      console.log(chalk11.gray(t("save.cancelled")));
+      console.log(chalk12.gray(t("save.cancelled")));
       return;
     }
   }
   const lines = parsePorcelainLines(gitOut(["status", "--porcelain"], gitRoot));
   if (lines.length === 0) {
-    console.log(chalk11.yellow(`\u{1F4ED} ${t("save.noChanges")}`));
+    console.log(chalk12.yellow(`\u{1F4ED} ${t("save.noChanges")}`));
     return;
   }
-  console.log(chalk11.cyan(`
+  console.log(chalk12.cyan(`
 \u{1F4CB} ${t("save.filesHeader", lines.length)}`));
   lines.forEach((line) => {
     const code = line.substring(0, 2);
@@ -2992,21 +3274,21 @@ async function save() {
     spinner.text = t("save.pushing");
     if (!hasGitRemote(gitRoot)) {
       spinner.succeed(t("save.successLocal"));
-      console.log(chalk11.yellow(`   \u{1F4A1} ${t("save.noRemote")}`));
+      console.log(chalk12.yellow(`   \u{1F4A1} ${t("save.noRemote")}`));
     } else {
       try {
         gitRun(["push"], gitRoot);
         spinner.succeed(t("save.successWithPush"));
       } catch (pushErr) {
         spinner.fail(t("save.pushFailed"));
-        console.log(chalk11.red(getExecErrorMessage(pushErr)));
-        console.log(chalk11.yellow(`
+        console.log(chalk12.red(getExecErrorMessage(pushErr)));
+        console.log(chalk12.yellow(`
 \u{1F4A1} ${t("save.commitOkPushFailed")}`));
         process.exitCode = 1;
       }
     }
     if (process.exitCode !== 1) {
-      console.log(chalk11.green(`
+      console.log(chalk12.green(`
 \u2705 ${t("save.done", lines.length)}`));
       printNextStep({
         message: t("save.nextOkMessage"),
@@ -3014,7 +3296,7 @@ async function save() {
         cursorHint: t("save.nextOkCursor")
       });
     } else {
-      console.log(chalk11.green(`
+      console.log(chalk12.green(`
 \u2705 ${t("save.doneLocalOnly", lines.length)}`));
       printNextStep({
         message: t("save.nextPushFailMessage"),
@@ -3024,12 +3306,12 @@ async function save() {
     }
   } catch (err) {
     spinner.fail(t("save.failed"));
-    console.log(chalk11.red(getExecErrorMessage(err)));
+    console.log(chalk12.red(getExecErrorMessage(err)));
     if (didAdd) {
       try {
         const staged = gitOut(["diff", "--cached", "--stat"], gitRoot).trim();
         if (staged) {
-          console.log(chalk11.yellow(`
+          console.log(chalk12.yellow(`
 \u{1F4A1} ${t("save.stagedAfterFail")}`));
         }
       } catch {
@@ -3040,8 +3322,8 @@ async function save() {
 }
 
 // src/commands/undo.ts
-import { execFileSync as execFileSync3 } from "child_process";
-import chalk12 from "chalk";
+import { execFileSync as execFileSync2 } from "child_process";
+import chalk13 from "chalk";
 import inquirer6 from "inquirer";
 function parseRecentCommits(logOutput) {
   return logOutput.split("\n").map((l) => l.trim()).filter(Boolean);
@@ -3065,30 +3347,30 @@ function isUndoRisky(undoCount, unpushedCount, hasRemote) {
   return false;
 }
 async function undo() {
-  console.log(chalk12.bold(`
+  console.log(chalk13.bold(`
 \u23EA ${t("undo.title")}`));
-  console.log(chalk12.gray("\u2500".repeat(40)));
+  console.log(chalk13.gray("\u2500".repeat(40)));
   let gitRoot;
   try {
-    execFileSync3("git", ["rev-parse", "--is-inside-work-tree"], { stdio: "pipe" });
+    execFileSync2("git", ["rev-parse", "--is-inside-work-tree"], { stdio: "pipe" });
     gitRoot = getGitRoot();
   } catch {
-    console.log(chalk12.red(`\u274C ${t("undo.notGitRepo")}`));
+    console.log(chalk13.red(`\u274C ${t("undo.notGitRepo")}`));
     return;
   }
   let logOutput;
   try {
     logOutput = gitOut(["log", "--oneline", "-5"], gitRoot).trim();
   } catch {
-    console.log(chalk12.yellow(`\u{1F4ED} ${t("undo.noCommits")}`));
+    console.log(chalk13.yellow(`\u{1F4ED} ${t("undo.noCommits")}`));
     return;
   }
   const commits = parseRecentCommits(logOutput);
   if (commits.length === 0) {
-    console.log(chalk12.yellow(`\u{1F4ED} ${t("undo.noCommits")}`));
+    console.log(chalk13.yellow(`\u{1F4ED} ${t("undo.noCommits")}`));
     return;
   }
-  console.log(chalk12.cyan(`
+  console.log(chalk13.cyan(`
 ${t("undo.recentHeader")}`));
   commits.forEach((c, i) => {
     console.log(`   ${i === 0 ? "\u{1F449}" : "  "} ${c}`);
@@ -3105,7 +3387,7 @@ ${t("undo.recentHeader")}`));
   const undoCount = Math.min(Math.max(1, count || 1), maxUndo);
   const headCount = countLocalCommits(gitRoot);
   if (undoCount >= headCount) {
-    console.log(chalk12.yellow(`
+    console.log(chalk13.yellow(`
 \u{1F4ED} ${t("undo.rootCommit")}`));
     return;
   }
@@ -3114,10 +3396,10 @@ ${t("undo.recentHeader")}`));
   const risky = isUndoRisky(undoCount, unpushed, remote);
   if (risky) {
     if (unpushed < 0) {
-      console.log(chalk12.red(`
+      console.log(chalk13.red(`
 \u26A0\uFE0F  ${t("undo.noUpstreamWarning")}`));
     } else {
-      console.log(chalk12.red(`
+      console.log(chalk13.red(`
 \u26A0\uFE0F  ${t("undo.alreadyPushed")}`));
     }
   }
@@ -3128,16 +3410,16 @@ ${t("undo.recentHeader")}`));
     default: false
   }]);
   if (!confirm) {
-    console.log(chalk12.gray(t("undo.cancelled")));
+    console.log(chalk13.gray(t("undo.cancelled")));
     return;
   }
   try {
     gitRun(["reset", "--soft", `HEAD~${undoCount}`], gitRoot);
-    console.log(chalk12.green(`
+    console.log(chalk13.green(`
 \u2705 ${t("undo.success")}`));
-    console.log(chalk12.gray(`   \u{1F4A1} ${t("undo.stagedHint")}`));
+    console.log(chalk13.gray(`   \u{1F4A1} ${t("undo.stagedHint")}`));
     if (risky) {
-      console.log(chalk12.yellow(`
+      console.log(chalk13.yellow(`
 \u{1F4A1} ${t("undo.forcePushHint")}`));
     }
     printNextStep({
@@ -3146,18 +3428,73 @@ ${t("undo.recentHeader")}`));
       cursorHint: t("undo.nextCursor")
     });
   } catch (err) {
-    console.log(chalk12.red(`\u274C ${t("undo.failed")}`));
+    console.log(chalk13.red(`\u274C ${t("undo.failed")}`));
     const msg = err instanceof Error ? err.message : String(err);
-    console.log(chalk12.red(msg));
+    console.log(chalk13.red(msg));
+    process.exitCode = 1;
+  }
+}
+
+// src/commands/restore.ts
+import chalk14 from "chalk";
+import inquirer7 from "inquirer";
+async function restore(id) {
+  console.log(chalk14.bold(`
+${ko.restore.title}`));
+  console.log(chalk14.gray("\u2500".repeat(40)));
+  console.log(chalk14.dim(`  ${ko.restore.notGitNote}`));
+  const cwd = process.cwd();
+  const backups = listBackups(cwd);
+  if (backups.length === 0) {
+    console.log(chalk14.yellow(`
+${ko.restore.noBackups}`));
+    return;
+  }
+  let targetId = id;
+  if (!targetId) {
+    if (!process.stdout.isTTY) {
+      console.log(chalk14.cyan(`
+${ko.restore.listHeader}`));
+      for (const b of backups) console.log(`  ${b.id} (${b.files.length}\uAC1C \uD30C\uC77C)`);
+      console.log(chalk14.yellow(`
+${ko.restore.nonTtyHint}`));
+      return;
+    }
+    const { picked } = await inquirer7.prompt([
+      {
+        type: "list",
+        name: "picked",
+        message: ko.restore.selectPrompt,
+        choices: backups.map((b) => ({
+          name: `${b.id} (${b.files.length}\uAC1C \uD30C\uC77C)`,
+          value: b.id
+        }))
+      }
+    ]);
+    targetId = picked;
+  }
+  try {
+    const restored = restoreBackup(targetId, cwd);
+    console.log(chalk14.green(`
+${ko.restore.restored(restored.length, targetId)}`));
+    for (const r of restored) console.log(chalk14.gray(`   ${r}`));
+    printNextStep({
+      message: "\uBC31\uC5C5 \uBCF5\uC6D0 \uC644\uB8CC! \uBCC0\uACBD \uB0B4\uC6A9\uC744 \uD655\uC778\uD558\uC138\uC694.",
+      command: "vhk diff",
+      cursorHint: "\uBCC0\uACBD\uC0AC\uD56D \uBCF4\uC5EC\uC918"
+    });
+  } catch {
+    console.log(chalk14.red(`
+${ko.restore.notFound(targetId)}`));
     process.exitCode = 1;
   }
 }
 
 // src/commands/status.ts
-import { execFileSync as execFileSync4 } from "child_process";
-import fs12 from "fs";
-import path13 from "path";
-import chalk13 from "chalk";
+import { execFileSync as execFileSync3 } from "child_process";
+import fs10 from "fs";
+import path11 from "path";
+import chalk15 from "chalk";
 function countFileChanges(porcelain) {
   const lines = porcelain.split("\n").filter(Boolean);
   let staged = 0;
@@ -3195,8 +3532,8 @@ function parseRecentCommitLines(logOutput) {
   return logOutput.split("\n").map((l) => l.trim()).filter(Boolean);
 }
 function readProjectPackage(cwd = process.cwd()) {
-  const pkgPath = path13.join(cwd, "package.json");
-  if (!fs12.existsSync(pkgPath)) return null;
+  const pkgPath = path11.join(cwd, "package.json");
+  if (!fs10.existsSync(pkgPath)) return null;
   try {
     const pkg = readJsonFile(pkgPath);
     if (!pkg.name && !pkg.version) return null;
@@ -3208,6 +3545,21 @@ function readProjectPackage(cwd = process.cwd()) {
     return null;
   }
 }
+function selectStatusNextStep(hasChanges) {
+  if (hasChanges) {
+    return {
+      message: t("status.nextWithChangesMessage"),
+      command: "vhk diff",
+      cursorHint: t("status.nextWithChangesCursor"),
+      alternative: t("status.nextWithChangesAlt")
+    };
+  }
+  return {
+    message: t("status.nextCleanMessage"),
+    command: "vhk goal next",
+    cursorHint: t("status.nextCleanCursor")
+  };
+}
 function getSyncCounts(gitRoot) {
   try {
     const out = gitOut(["rev-list", "--left-right", "--count", "HEAD...@{u}"], gitRoot);
@@ -3217,15 +3569,15 @@ function getSyncCounts(gitRoot) {
   }
 }
 async function status() {
-  console.log(chalk13.bold(`
+  console.log(chalk15.bold(`
 \u{1F4CA} ${t("status.title")}`));
-  console.log(chalk13.gray("\u2500".repeat(40)));
+  console.log(chalk15.gray("\u2500".repeat(40)));
   let gitRoot;
   try {
-    execFileSync4("git", ["rev-parse", "--is-inside-work-tree"], { stdio: "pipe" });
+    execFileSync3("git", ["rev-parse", "--is-inside-work-tree"], { stdio: "pipe" });
     gitRoot = getGitRoot();
   } catch {
-    console.log(chalk13.red(`\u274C ${t("status.notGitRepo")}`));
+    console.log(chalk15.red(`\u274C ${t("status.notGitRepo")}`));
     return;
   }
   let branch;
@@ -3244,48 +3596,37 @@ async function status() {
     commits = [];
   }
   const pkg = readProjectPackage();
-  console.log(chalk13.cyan(`
-\u{1F33F} ${t("status.branch")}`) + chalk13.white(` ${branch}`));
+  console.log(chalk15.cyan(`
+\u{1F33F} ${t("status.branch")}`) + chalk15.white(` ${branch}`));
   console.log(
-    chalk13.cyan(`\u{1F4C1} ${t("status.changes")}`) + chalk13.white(
+    chalk15.cyan(`\u{1F4C1} ${t("status.changes")}`) + chalk15.white(
       ` staged ${counts.staged} \xB7 unstaged ${counts.unstaged} \xB7 untracked ${counts.untracked}`
     )
   );
-  console.log(chalk13.cyan(`
-\u{1F4CB} ${t("status.recentCommits")}`));
+  console.log(chalk15.cyan(`
+\u{1F4CB} ${t("status.recentCommits", commits.length)}`));
   if (commits.length === 0) {
-    console.log(chalk13.dim(`   ${t("status.noCommits")}`));
+    console.log(chalk15.dim(`   ${t("status.noCommits")}`));
   } else {
-    commits.forEach((c) => console.log(`   ${chalk13.dim("\u2022")} ${c}`));
+    commits.forEach((c) => console.log(`   ${chalk15.dim("\u2022")} ${c}`));
   }
   console.log(
-    chalk13.cyan(`
-\u{1F504} ${t("status.remote")}`) + chalk13.white(` ${formatSyncLabel(sync2)}`)
+    chalk15.cyan(`
+\u{1F504} ${t("status.remote")}`) + chalk15.white(` ${formatSyncLabel(sync2)}`)
   );
-  console.log(chalk13.gray("\n" + "\u2500".repeat(40)));
+  console.log(chalk15.gray("\n" + "\u2500".repeat(40)));
   if (pkg) {
-    console.log(chalk13.cyan(`\u{1F4E6} ${t("status.package")}`) + chalk13.white(` ${pkg.name} v${pkg.version}`));
+    console.log(chalk15.cyan(`\u{1F4E6} ${t("status.package")}`) + chalk15.white(` ${pkg.name} v${pkg.version}`));
   } else {
-    console.log(chalk13.dim(`\u{1F4E6} ${t("status.noPackage")}`));
+    console.log(chalk15.dim(`\u{1F4E6} ${t("status.noPackage")}`));
   }
   const hasChanges = counts.staged + counts.unstaged + counts.untracked > 0;
-  if (hasChanges) {
-    printNextStep({
-      message: t("status.nextWithChangesMessage"),
-      command: "vhk save",
-      cursorHint: t("status.nextWithChangesCursor")
-    });
-  } else {
-    printNextStep({
-      message: t("status.nextCleanMessage"),
-      command: "vhk goal next",
-      cursorHint: t("status.nextCleanCursor")
-    });
-  }
+  printNextStep(selectStatusNextStep(hasChanges));
+  printContextResumeHint();
 }
 
 // src/commands/diff.ts
-import chalk14 from "chalk";
+import chalk16 from "chalk";
 function gitOut2(args) {
   const r = safeExecFile("git", args);
   return r.ok ? r.out : "";
@@ -3322,67 +3663,67 @@ function summarizeNumstat(numstat) {
   return { fileCount, totalAdd, totalDel };
 }
 function printFile(f) {
-  const adds = f.additions > 0 ? chalk14.green(`+${f.additions}`) : "";
-  const dels = f.deletions > 0 ? chalk14.red(`-${f.deletions}`) : "";
+  const adds = f.additions > 0 ? chalk16.green(`+${f.additions}`) : "";
+  const dels = f.deletions > 0 ? chalk16.red(`-${f.deletions}`) : "";
   const change = [adds, dels].filter(Boolean).join(" ");
   console.log(`   ${f.name} ${change}`);
 }
 async function diff() {
-  console.log(chalk14.bold(`
+  console.log(chalk16.bold(`
 \u{1F50D} ${t("diff.title")}`));
-  console.log(chalk14.gray("\u2500".repeat(40)));
+  console.log(chalk16.gray("\u2500".repeat(40)));
   if (!safeExecFile("git", ["rev-parse", "--is-inside-work-tree"]).ok) {
-    console.log(chalk14.red(`\u274C ${t("diff.notGitRepo")}`));
+    console.log(chalk16.red(`\u274C ${t("diff.notGitRepo")}`));
     return;
   }
   const unstaged = gitOut2(["diff", "--stat"]);
   const staged = gitOut2(["diff", "--cached", "--stat"]);
   const untracked = gitOut2(["ls-files", "--others", "--exclude-standard"]);
   if (!unstaged && !staged && !untracked) {
-    console.log(chalk14.green(`
+    console.log(chalk16.green(`
 \u2705 ${t("diff.noChanges")}`));
     return;
   }
   if (staged) {
-    console.log(chalk14.cyan(`
+    console.log(chalk16.cyan(`
 ${t("diff.stagedHeader")}`));
     parseDiffStat(staged).forEach((f) => printFile(f));
   }
   if (unstaged) {
-    console.log(chalk14.cyan(`
+    console.log(chalk16.cyan(`
 ${t("diff.unstagedHeader")}`));
     parseDiffStat(unstaged).forEach((f) => printFile(f));
   }
   if (untracked) {
     const files = untracked.split("\n").filter(Boolean);
-    console.log(chalk14.cyan(`
+    console.log(chalk16.cyan(`
 ${t("diff.untrackedHeader", files.length)}`));
-    files.forEach((f) => console.log(`   ${chalk14.green("+")} ${f}`));
+    files.forEach((f) => console.log(`   ${chalk16.green("+")} ${f}`));
   }
   const numstat = gitOut2(["diff", "--numstat", "HEAD"]);
   if (numstat) {
     const { fileCount, totalAdd, totalDel } = summarizeNumstat(numstat);
-    console.log(chalk14.cyan(`
+    console.log(chalk16.cyan(`
 ${t("diff.summaryHeader")}`));
     console.log(`   ${t("diff.filesLine", fileCount)}`);
-    console.log(`   \uCD94\uAC00: ${chalk14.green(`+${totalAdd}`)}\uC904`);
-    console.log(`   \uC0AD\uC81C: ${chalk14.red(`-${totalDel}`)}\uC904`);
+    console.log(`   \uCD94\uAC00: ${chalk16.green(`+${totalAdd}`)}\uC904`);
+    console.log(`   \uC0AD\uC81C: ${chalk16.red(`-${totalDel}`)}\uC904`);
   }
   console.log("");
 }
 
 // src/commands/mcp-init.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
-import { join as join3, dirname } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join5, dirname } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import chalk15 from "chalk";
+import chalk17 from "chalk";
 function resolveMcpEntryPoint() {
   try {
     const here = fileURLToPath2(import.meta.url);
     const dir = dirname(here);
     for (const rel of [["mcp", "index.js"], ["..", "mcp", "index.js"]]) {
-      const candidate = join3(dir, ...rel);
-      if (existsSync3(candidate)) return candidate;
+      const candidate = join5(dir, ...rel);
+      if (existsSync4(candidate)) return candidate;
     }
   } catch {
   }
@@ -3390,17 +3731,17 @@ function resolveMcpEntryPoint() {
     const url = import.meta.resolve?.("@byh3071/vhk/dist/mcp/index.js");
     if (typeof url === "string") {
       const p = fileURLToPath2(url);
-      if (existsSync3(p)) return p;
+      if (existsSync4(p)) return p;
     }
   } catch {
   }
   try {
-    const pkgPath = join3(process.cwd(), "package.json");
-    if (existsSync3(pkgPath)) {
+    const pkgPath = join5(process.cwd(), "package.json");
+    if (existsSync4(pkgPath)) {
       const pkg = readJsonFile(pkgPath);
       if (pkg.name === "@byh3071/vhk") {
-        const local = join3(process.cwd(), "dist", "mcp", "index.js");
-        if (existsSync3(local)) return local;
+        const local = join5(process.cwd(), "dist", "mcp", "index.js");
+        if (existsSync4(local)) return local;
       }
     }
   } catch {
@@ -3415,31 +3756,31 @@ function resolveVhkMcpEntry() {
   return { command: "vhk-mcp", args: [] };
 }
 async function mcpInit() {
-  console.log(chalk15.bold("\n\u{1F50C} " + t("mcp.initTitle")));
-  console.log(chalk15.gray("\u2500".repeat(40)));
-  const cursorDir = join3(process.cwd(), ".cursor");
-  if (!existsSync3(cursorDir)) {
-    mkdirSync2(cursorDir, { recursive: true });
+  console.log(chalk17.bold("\n\u{1F50C} " + t("mcp.initTitle")));
+  console.log(chalk17.gray("\u2500".repeat(40)));
+  const cursorDir = join5(process.cwd(), ".cursor");
+  if (!existsSync4(cursorDir)) {
+    mkdirSync3(cursorDir, { recursive: true });
   }
-  const configPath = join3(cursorDir, "mcp.json");
+  const configPath = join5(cursorDir, "mcp.json");
   const vhkEntry = resolveVhkMcpEntry();
   let config;
-  if (existsSync3(configPath)) {
+  if (existsSync4(configPath)) {
     try {
       const parsed = readJsonFile(configPath);
       config = {
         mcpServers: { ...parsed.mcpServers ?? {}, vhk: vhkEntry }
       };
     } catch {
-      console.log(chalk15.yellow("\u26A0\uFE0F  \uAE30\uC874 .cursor/mcp.json \uD30C\uC2F1 \uC2E4\uD328 \u2014 \uC0C8 \uD30C\uC77C\uB85C \uB36E\uC5B4\uC501\uB2C8\uB2E4."));
+      console.log(chalk17.yellow("\u26A0\uFE0F  \uAE30\uC874 .cursor/mcp.json \uD30C\uC2F1 \uC2E4\uD328 \u2014 \uC0C8 \uD30C\uC77C\uB85C \uB36E\uC5B4\uC501\uB2C8\uB2E4."));
       config = { mcpServers: { vhk: vhkEntry } };
     }
   } else {
     config = { mcpServers: { vhk: vhkEntry } };
   }
-  writeFileSync2(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
-  console.log(chalk15.green("\n\u2705 Cursor MCP \uC124\uC815 \uC644\uB8CC!"));
-  console.log(chalk15.cyan("\u{1F4C1} \uC0DD\uC131\uB41C \uD30C\uC77C:"));
+  writeFileSync3(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  console.log(chalk17.green("\n\u2705 Cursor MCP \uC124\uC815 \uC644\uB8CC!"));
+  console.log(chalk17.cyan("\u{1F4C1} \uC0DD\uC131\uB41C \uD30C\uC77C:"));
   console.log(`   ${configPath}`);
   printNextStep({
     message: t("mcp.nextMessage"),
@@ -3449,9 +3790,9 @@ async function mcpInit() {
 }
 
 // src/commands/design.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
-import chalk16 from "chalk";
-import inquirer7 from "inquirer";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "fs";
+import chalk18 from "chalk";
+import inquirer8 from "inquirer";
 var PALETTES = [
   {
     name: "Minimal",
@@ -3503,7 +3844,36 @@ var PALETTES = [
   }
 ];
 function hasTailwind() {
-  return existsSync4("tailwind.config.js") || existsSync4("tailwind.config.ts") || existsSync4("tailwind.config.mjs") || existsSync4("tailwind.config.cjs");
+  return existsSync5("tailwind.config.js") || existsSync5("tailwind.config.ts") || existsSync5("tailwind.config.mjs") || existsSync5("tailwind.config.cjs");
+}
+function isTailwindV4Deps(deps) {
+  if (deps["@tailwindcss/vite"] || deps["@tailwindcss/postcss"]) return true;
+  const tw = deps.tailwindcss;
+  return typeof tw === "string" && /^\D*4(\.|$)/.test(tw);
+}
+function hasTailwindV4() {
+  try {
+    const pkg = readJsonFile(
+      "package.json"
+    );
+    return isTailwindV4Deps({ ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} });
+  } catch {
+    return false;
+  }
+}
+function generateTailwindV4Theme(palette) {
+  return [
+    "/* vhk design \u2014 Tailwind v4 @theme \uD1A0\uD070 (CSS-first). \uC9C4\uC785 CSS \uC5D0 @import \uD558\uC138\uC694. */",
+    '@import "tailwindcss";',
+    "",
+    "@theme {",
+    ...Object.entries(palette.colors).map(([k, v]) => `  --color-${k}: ${v};`),
+    "}",
+    "",
+    "/* \uB2E4\uD06C \uBAA8\uB4DC \u2014 .dark \uD074\uB798\uC2A4 \uAE30\uBC18 variant (bg-background \uB4F1\uC774 .dark \uC5D0\uC11C \uC804\uD658) */",
+    "@custom-variant dark (&:where(.dark, .dark *));",
+    ""
+  ].join("\n");
 }
 function generateCSSTokens(palette) {
   const lines = Object.entries(palette.colors).map(([key, value]) => `  --color-${key}: ${value};`).join("\n");
@@ -3524,9 +3894,10 @@ export default vhkColors
 `;
 }
 async function design() {
-  console.log(chalk16.bold("\n\u{1F3A8} " + t("design.title")));
-  console.log(chalk16.gray("\u2500".repeat(40)));
-  const { paletteIndex } = await inquirer7.prompt([
+  console.log(chalk18.bold("\n\u{1F3A8} " + t("design.title")));
+  console.log(chalk18.gray("\u2500".repeat(40)));
+  if (!ensureInteractive("\uCEEC\uB7EC \uD314\uB808\uD2B8 \uC120\uD0DD\uC740 \uB300\uD654\uD615\uC73C\uB85C\uB9CC \uAC00\uB2A5\uD569\uB2C8\uB2E4.")) return;
+  const { paletteIndex } = await inquirer8.prompt([
     {
       type: "list",
       name: "paletteIndex",
@@ -3538,32 +3909,37 @@ async function design() {
     }
   ]);
   const palette = PALETTES[paletteIndex];
-  console.log(chalk16.cyan(`
+  console.log(chalk18.cyan(`
 \u{1F3A8} \uC120\uD0DD\uB41C \uD314\uB808\uD2B8: ${palette.name}`));
-  const targetPath = hasTailwind() ? "src/styles/vhk-colors.ts" : "src/styles/tokens.css";
-  const content = hasTailwind() ? generateTailwindExtend(palette) : generateCSSTokens(palette);
-  if (existsSync4(targetPath)) {
-    const { overwrite } = await inquirer7.prompt([{
+  const v4 = hasTailwindV4();
+  const targetPath = v4 ? "src/styles/theme.css" : hasTailwind() ? "src/styles/vhk-colors.ts" : "src/styles/tokens.css";
+  const content = v4 ? generateTailwindV4Theme(palette) : hasTailwind() ? generateTailwindExtend(palette) : generateCSSTokens(palette);
+  if (existsSync5(targetPath)) {
+    const { overwrite } = await inquirer8.prompt([{
       type: "confirm",
       name: "overwrite",
       message: `${targetPath} \uC774\uBBF8 \uC788\uC5B4\uC694. \uB36E\uC5B4\uC4F8\uAE4C\uC694?`,
       default: false
     }]);
     if (!overwrite) {
-      console.log(chalk16.yellow("\n\u23ED\uFE0F  \uC0DD\uC131 \uCDE8\uC18C \u2014 \uAE30\uC874 \uD30C\uC77C \uC720\uC9C0."));
+      console.log(chalk18.yellow("\n\u23ED\uFE0F  \uC0DD\uC131 \uCDE8\uC18C \u2014 \uAE30\uC874 \uD30C\uC77C \uC720\uC9C0."));
       return;
     }
   }
-  mkdirSync3("src/styles", { recursive: true });
-  writeFileSync3(targetPath, content, "utf-8");
-  if (hasTailwind()) {
-    console.log(chalk16.green("\n\u2705 src/styles/vhk-colors.ts \uC0DD\uC131"));
-    console.log(chalk16.gray("   tailwind.config\uC758 extend.colors\uC5D0 import \uD574\uC11C \uC0AC\uC6A9\uD558\uC138\uC694."));
+  mkdirSync4("src/styles", { recursive: true });
+  writeFileSync4(targetPath, content, "utf-8");
+  if (v4) {
+    console.log(chalk18.green("\n\u2705 src/styles/theme.css \uC0DD\uC131 (Tailwind v4 @theme)"));
+    console.log(chalk18.gray('   \uC9C4\uC785 CSS(\uC608: src/index.css)\uC5D0 `@import "./styles/theme.css";` \uCD94\uAC00 \u2192 bg-primary \uB4F1 \uC720\uD2F8 \uC0AC\uC6A9.'));
+    console.log(chalk18.gray("   \uB2E4\uD06C \uD1A0\uAE00: \uB8E8\uD2B8 <html>/<body> \uC5D0 `.dark` \uD074\uB798\uC2A4 on/off."));
+  } else if (hasTailwind()) {
+    console.log(chalk18.green("\n\u2705 src/styles/vhk-colors.ts \uC0DD\uC131"));
+    console.log(chalk18.gray("   tailwind.config\uC758 extend.colors\uC5D0 import \uD574\uC11C \uC0AC\uC6A9\uD558\uC138\uC694."));
   } else {
-    console.log(chalk16.green("\n\u2705 src/styles/tokens.css \uC0DD\uC131"));
-    console.log(chalk16.gray("   HTML\uC5D0 <link>\uB85C \uCD94\uAC00\uD558\uAC70\uB098 CSS\uC5D0\uC11C @import \uD558\uC138\uC694."));
+    console.log(chalk18.green("\n\u2705 src/styles/tokens.css \uC0DD\uC131"));
+    console.log(chalk18.gray("   HTML\uC5D0 <link>\uB85C \uCD94\uAC00\uD558\uAC70\uB098 CSS\uC5D0\uC11C @import \uD558\uC138\uC694."));
   }
-  console.log(chalk16.bold("\n\u{1F308} \uCEEC\uB7EC \uBBF8\uB9AC\uBCF4\uAE30:"));
+  console.log(chalk18.bold("\n\u{1F308} \uCEEC\uB7EC \uBBF8\uB9AC\uBCF4\uAE30:"));
   for (const [key, value] of Object.entries(palette.colors)) {
     console.log(`   ${key.padEnd(12)} ${value}`);
   }
@@ -3578,9 +3954,9 @@ async function designPalette() {
 }
 
 // src/commands/theme.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "fs";
-import chalk17 from "chalk";
-import inquirer8 from "inquirer";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "fs";
+import chalk19 from "chalk";
+import inquirer9 from "inquirer";
 function generateDarkCSS() {
   return `/* vhk theme \u2014 \uB2E4\uD06C/\uB77C\uC774\uD2B8 \uBAA8\uB4DC CSS \uBCC0\uC218 */
 
@@ -3636,13 +4012,13 @@ export function initTheme(): void {
 `;
 }
 async function theme() {
-  console.log(chalk17.bold("\n\u{1F319} " + t("theme.title")));
-  console.log(chalk17.gray("\u2500".repeat(40)));
+  console.log(chalk19.bold("\n\u{1F319} " + t("theme.title")));
+  console.log(chalk19.gray("\u2500".repeat(40)));
   const cssPath = "src/styles/theme.css";
   const togglePath = "src/lib/theme-toggle.ts";
-  const conflicts = [cssPath, togglePath].filter((p) => existsSync5(p));
+  const conflicts = [cssPath, togglePath].filter((p) => existsSync6(p));
   if (conflicts.length > 0) {
-    const { overwrite } = await inquirer8.prompt([{
+    const { overwrite } = await inquirer9.prompt([{
       type: "confirm",
       name: "overwrite",
       message: `\uB2E4\uC74C \uD30C\uC77C\uC774 \uC774\uBBF8 \uC788\uC5B4\uC694. \uB36E\uC5B4\uC4F8\uAE4C\uC694?
@@ -3650,21 +4026,21 @@ async function theme() {
       default: false
     }]);
     if (!overwrite) {
-      console.log(chalk17.yellow("\n\u23ED\uFE0F  \uC0DD\uC131 \uCDE8\uC18C \u2014 \uAE30\uC874 \uD30C\uC77C \uC720\uC9C0."));
+      console.log(chalk19.yellow("\n\u23ED\uFE0F  \uC0DD\uC131 \uCDE8\uC18C \u2014 \uAE30\uC874 \uD30C\uC77C \uC720\uC9C0."));
       return;
     }
   }
-  mkdirSync4("src/styles", { recursive: true });
-  mkdirSync4("src/lib", { recursive: true });
-  writeFileSync4(cssPath, generateDarkCSS(), "utf-8");
-  console.log(chalk17.green("\n\u2705 src/styles/theme.css \uC0DD\uC131 (\uB2E4\uD06C/\uB77C\uC774\uD2B8 \uBAA8\uB4DC)"));
-  writeFileSync4(togglePath, generateToggleUtil(), "utf-8");
-  console.log(chalk17.green("\u2705 src/lib/theme-toggle.ts \uC0DD\uC131 (\uD1A0\uAE00 \uC720\uD2F8\uB9AC\uD2F0)"));
-  console.log(chalk17.bold("\n\u{1F4D6} \uC0AC\uC6A9\uBC95:"));
-  console.log(chalk17.gray("   1. theme.css\uB97C \uAE00\uB85C\uBC8C \uC2A4\uD0C0\uC77C\uC5D0 \uCD94\uAC00"));
-  console.log(chalk17.gray('   2. import { initTheme, toggleTheme } from "./lib/theme-toggle"'));
-  console.log(chalk17.gray("   3. \uC571 \uC9C4\uC785\uC810\uC5D0\uC11C initTheme() \uD638\uCD9C"));
-  console.log(chalk17.gray("   4. \uD1A0\uAE00 \uBC84\uD2BC\uC5D0\uC11C toggleTheme() \uD638\uCD9C"));
+  mkdirSync5("src/styles", { recursive: true });
+  mkdirSync5("src/lib", { recursive: true });
+  writeFileSync5(cssPath, generateDarkCSS(), "utf-8");
+  console.log(chalk19.green("\n\u2705 src/styles/theme.css \uC0DD\uC131 (\uB2E4\uD06C/\uB77C\uC774\uD2B8 \uBAA8\uB4DC)"));
+  writeFileSync5(togglePath, generateToggleUtil(), "utf-8");
+  console.log(chalk19.green("\u2705 src/lib/theme-toggle.ts \uC0DD\uC131 (\uD1A0\uAE00 \uC720\uD2F8\uB9AC\uD2F0)"));
+  console.log(chalk19.bold("\n\u{1F4D6} \uC0AC\uC6A9\uBC95:"));
+  console.log(chalk19.gray("   1. theme.css\uB97C \uAE00\uB85C\uBC8C \uC2A4\uD0C0\uC77C\uC5D0 \uCD94\uAC00"));
+  console.log(chalk19.gray('   2. import { initTheme, toggleTheme } from "./lib/theme-toggle"'));
+  console.log(chalk19.gray("   3. \uC571 \uC9C4\uC785\uC810\uC5D0\uC11C initTheme() \uD638\uCD9C"));
+  console.log(chalk19.gray("   4. \uD1A0\uAE00 \uBC84\uD2BC\uC5D0\uC11C toggleTheme() \uD638\uCD9C"));
   printNextStep({
     message: "\uD14C\uB9C8 \uC124\uC815 \uC644\uB8CC!",
     command: "vhk ref list",
@@ -3673,11 +4049,11 @@ async function theme() {
 }
 
 // src/commands/ref.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "fs";
-import chalk18 from "chalk";
+import { existsSync as existsSync7, mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "fs";
+import chalk20 from "chalk";
 var REFS_PATH = ".vhk/refs.json";
 function loadRefs() {
-  if (!existsSync6(REFS_PATH)) return [];
+  if (!existsSync7(REFS_PATH)) return [];
   try {
     const parsed = readJsonFile(REFS_PATH);
     return Array.isArray(parsed) ? parsed : [];
@@ -3686,28 +4062,28 @@ function loadRefs() {
   }
 }
 function saveRefs(refs) {
-  mkdirSync5(".vhk", { recursive: true });
-  writeFileSync5(REFS_PATH, JSON.stringify(refs, null, 2) + "\n", "utf-8");
+  mkdirSync6(".vhk", { recursive: true });
+  writeFileSync6(REFS_PATH, JSON.stringify(refs, null, 2) + "\n", "utf-8");
 }
 async function refAdd(url, memo = "") {
-  console.log(chalk18.bold("\n\u{1F517} " + t("ref.addTitle")));
-  console.log(chalk18.gray("\u2500".repeat(40)));
+  console.log(chalk20.bold("\n\u{1F517} " + t("ref.addTitle")));
+  console.log(chalk20.gray("\u2500".repeat(40)));
   if (!url) {
-    console.log(chalk18.red("\u274C URL\uC744 \uC785\uB825\uD574\uC8FC\uC138\uC694."));
-    console.log(chalk18.gray('   \uC608: vhk ref add https://example.com --memo "\uCC38\uACE0 \uC0AC\uC774\uD2B8"'));
+    console.log(chalk20.red("\u274C URL\uC744 \uC785\uB825\uD574\uC8FC\uC138\uC694."));
+    console.log(chalk20.gray('   \uC608: vhk ref add https://example.com --memo "\uCC38\uACE0 \uC0AC\uC774\uD2B8"'));
     return;
   }
   const refs = loadRefs();
   if (refs.some((r) => r.url === url)) {
-    console.log(chalk18.yellow("\u26A0\uFE0F  \uC774\uBBF8 \uC800\uC7A5\uB41C URL\uC785\uB2C8\uB2E4."));
+    console.log(chalk20.yellow("\u26A0\uFE0F  \uC774\uBBF8 \uC800\uC7A5\uB41C URL\uC785\uB2C8\uB2E4."));
     return;
   }
   refs.push({ url, memo, addedAt: (/* @__PURE__ */ new Date()).toISOString() });
   saveRefs(refs);
-  console.log(chalk18.green(`
+  console.log(chalk20.green(`
 \u2705 \uB808\uD37C\uB7F0\uC2A4 \uCD94\uAC00\uB428 (#${refs.length})`));
-  console.log(chalk18.cyan(`   ${url}`));
-  if (memo) console.log(chalk18.gray(`   \u{1F4DD} ${memo}`));
+  console.log(chalk20.cyan(`   ${url}`));
+  if (memo) console.log(chalk20.gray(`   \u{1F4DD} ${memo}`));
   printNextStep({
     message: "\uB808\uD37C\uB7F0\uC2A4 \uC800\uC7A5 \uC644\uB8CC!",
     command: "vhk ref list",
@@ -3715,22 +4091,22 @@ async function refAdd(url, memo = "") {
   });
 }
 async function refList() {
-  console.log(chalk18.bold("\n\u{1F4DA} " + t("ref.listTitle")));
-  console.log(chalk18.gray("\u2500".repeat(40)));
+  console.log(chalk20.bold("\n\u{1F4DA} " + t("ref.listTitle")));
+  console.log(chalk20.gray("\u2500".repeat(40)));
   const refs = loadRefs();
   if (refs.length === 0) {
-    console.log(chalk18.yellow("\n\u{1F4ED} \uC800\uC7A5\uB41C \uB808\uD37C\uB7F0\uC2A4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
-    console.log(chalk18.gray('   vhk ref add <url> --memo "\uBA54\uBAA8"\uB85C \uCD94\uAC00\uD558\uC138\uC694.'));
+    console.log(chalk20.yellow("\n\u{1F4ED} \uC800\uC7A5\uB41C \uB808\uD37C\uB7F0\uC2A4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk20.gray('   vhk ref add <url> --memo "\uBA54\uBAA8"\uB85C \uCD94\uAC00\uD558\uC138\uC694.'));
     return;
   }
-  console.log(chalk18.cyan(`
+  console.log(chalk20.cyan(`
 \uCD1D ${refs.length}\uAC1C\uC758 \uB808\uD37C\uB7F0\uC2A4:
 `));
   refs.forEach((ref, index) => {
     const date = new Date(ref.addedAt).toLocaleDateString("ko-KR");
-    console.log(chalk18.white(`  [${index + 1}] ${ref.url}`));
-    if (ref.memo) console.log(chalk18.gray(`      \u{1F4DD} ${ref.memo}`));
-    console.log(chalk18.gray(`      \u{1F4C5} ${date}`));
+    console.log(chalk20.white(`  [${index + 1}] ${ref.url}`));
+    if (ref.memo) console.log(chalk20.gray(`      \u{1F4DD} ${ref.memo}`));
+    console.log(chalk20.gray(`      \u{1F4C5} ${date}`));
     console.log("");
   });
 }
@@ -3738,7 +4114,7 @@ async function refOpen(indexStr) {
   const refs = loadRefs();
   const idx = parseInt(indexStr, 10) - 1;
   if (Number.isNaN(idx) || idx < 0 || idx >= refs.length) {
-    console.log(chalk18.red(`\u274C \uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uBC88\uD638\uC785\uB2C8\uB2E4. (1~${refs.length || 0})`));
+    console.log(chalk20.red(`\u274C \uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uBC88\uD638\uC785\uB2C8\uB2E4. (1~${refs.length || 0})`));
     return;
   }
   const ref = refs[idx];
@@ -3746,14 +4122,14 @@ async function refOpen(indexStr) {
   try {
     parsed = new URL(ref.url);
   } catch {
-    console.log(chalk18.red(`\u274C \uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 URL: ${ref.url}`));
+    console.log(chalk20.red(`\u274C \uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 URL: ${ref.url}`));
     return;
   }
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-    console.log(chalk18.red(`\u274C http(s) URL\uB9CC \uC5F4 \uC218 \uC788\uC2B5\uB2C8\uB2E4 (${parsed.protocol})`));
+    console.log(chalk20.red(`\u274C http(s) URL\uB9CC \uC5F4 \uC218 \uC788\uC2B5\uB2C8\uB2E4 (${parsed.protocol})`));
     return;
   }
-  console.log(chalk18.cyan(`
+  console.log(chalk20.cyan(`
 \u{1F310} \uC5F4\uAE30: ${ref.url}`));
   let result;
   if (process.platform === "darwin") {
@@ -3764,19 +4140,19 @@ async function refOpen(indexStr) {
     result = safeExecFile("xdg-open", [ref.url]);
   }
   if (result.ok) {
-    console.log(chalk18.green("\u2705 \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uC5F4\uC5C8\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk20.green("\u2705 \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uC5F4\uC5C8\uC2B5\uB2C8\uB2E4."));
   } else {
-    console.log(chalk18.yellow("\u26A0\uFE0F  \uBE0C\uB77C\uC6B0\uC800\uB97C \uC5F4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. URL\uC744 \uC9C1\uC811 \uBC29\uBB38\uD574\uC8FC\uC138\uC694."));
+    console.log(chalk20.yellow("\u26A0\uFE0F  \uBE0C\uB77C\uC6B0\uC800\uB97C \uC5F4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. URL\uC744 \uC9C1\uC811 \uBC29\uBB38\uD574\uC8FC\uC138\uC694."));
   }
 }
 
 // src/commands/harness.ts
-import { existsSync as existsSync7 } from "fs";
-import chalk19 from "chalk";
+import { existsSync as existsSync8 } from "fs";
+import chalk21 from "chalk";
 import ora2 from "ora";
 function detectPM() {
-  if (existsSync7("pnpm-lock.yaml")) return "pnpm";
-  if (existsSync7("yarn.lock")) return "yarn";
+  if (existsSync8("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync8("yarn.lock")) return "yarn";
   return "npm";
 }
 function pmRun(pm, script) {
@@ -3794,14 +4170,14 @@ function detectChecks() {
   const pm = detectPM();
   if (s.lint) {
     checks.push({ name: "lint", bin: pm, args: pmRun(pm, "lint") });
-  } else if (existsSync7(".eslintrc.js") || existsSync7(".eslintrc.json") || existsSync7("eslint.config.js")) {
+  } else if (existsSync8(".eslintrc.js") || existsSync8(".eslintrc.json") || existsSync8("eslint.config.js")) {
     checks.push({ name: "lint", bin: "npx", args: ["eslint", ".", "--ext", ".ts,.tsx"] });
   }
   if (s["type-check"]) {
     checks.push({ name: "type-check", bin: pm, args: pmRun(pm, "type-check") });
   } else if (s.typecheck) {
     checks.push({ name: "type-check", bin: pm, args: pmRun(pm, "typecheck") });
-  } else if (existsSync7("tsconfig.json")) {
+  } else if (existsSync8("tsconfig.json")) {
     checks.push({ name: "type-check", bin: "npx", args: ["tsc", "--noEmit"] });
   }
   if (s.test) {
@@ -3813,15 +4189,16 @@ function detectChecks() {
   return checks;
 }
 async function harness() {
-  console.log(chalk19.bold("\n\u{1F527} " + t("harness.title")));
-  console.log(chalk19.gray("\u2500".repeat(40)));
+  if (!ensureNotHardStopped("harness")) return;
+  console.log(chalk21.bold("\n\u{1F527} " + t("harness.title")));
+  console.log(chalk21.gray("\u2500".repeat(40)));
   const checks = detectChecks();
   if (checks.length === 0) {
-    console.log(chalk19.yellow("\n\u26A0\uFE0F  \uC2E4\uD589\uD560 \uC218 \uC788\uB294 \uC2A4\uD06C\uB9BD\uD2B8\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
-    console.log(chalk19.gray("   package.json\uC5D0 lint, test, build \uC2A4\uD06C\uB9BD\uD2B8\uB97C \uCD94\uAC00\uD574\uC8FC\uC138\uC694."));
+    console.log(chalk21.yellow("\n\u26A0\uFE0F  \uC2E4\uD589\uD560 \uC218 \uC788\uB294 \uC2A4\uD06C\uB9BD\uD2B8\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk21.gray("   package.json\uC5D0 lint, test, build \uC2A4\uD06C\uB9BD\uD2B8\uB97C \uCD94\uAC00\uD574\uC8FC\uC138\uC694."));
     return;
   }
-  console.log(chalk19.cyan(`
+  console.log(chalk21.cyan(`
 \u{1F3C3} ${checks.length}\uAC1C \uC810\uAC80 \uC2DC\uC791:
 `));
   const results = [];
@@ -3833,10 +4210,10 @@ async function harness() {
     const duration = Date.now() - start2;
     const sec = (duration / 1e3).toFixed(1);
     if (result.ok) {
-      spinner.succeed(`${check2.name} ${chalk19.gray(`(${sec}s)`)}`);
+      spinner.succeed(`${check2.name} ${chalk21.gray(`(${sec}s)`)}`);
       results.push({ name: check2.name, command: display, passed: true, duration });
     } else {
-      spinner.fail(`${check2.name} ${chalk19.gray(`(${sec}s)`)}`);
+      spinner.fail(`${check2.name} ${chalk21.gray(`(${sec}s)`)}`);
       results.push({
         name: check2.name,
         command: display,
@@ -3846,24 +4223,25 @@ async function harness() {
       });
     }
   }
-  console.log(chalk19.bold("\n\u{1F4CA} \uD1B5\uD569 \uB9AC\uD3EC\uD2B8:"));
-  console.log(chalk19.gray("\u2500".repeat(40)));
+  console.log(chalk21.bold("\n\u{1F4CA} \uD1B5\uD569 \uB9AC\uD3EC\uD2B8:"));
+  console.log(chalk21.gray("\u2500".repeat(40)));
   for (const r of results) {
-    const icon = r.passed ? chalk19.green("\u2705") : chalk19.red("\u274C");
+    const icon = r.passed ? chalk21.green("\u2705") : chalk21.red("\u274C");
     const sec = (r.duration / 1e3).toFixed(1);
-    console.log(`  ${icon} ${r.name.padEnd(15)} ${chalk19.gray(`${sec}s`)}`);
+    console.log(`  ${icon} ${r.name.padEnd(15)} ${chalk21.gray(`${sec}s`)}`);
   }
   const passed = results.filter((r) => r.passed).length;
   const all = passed === results.length;
-  console.log(chalk19.gray("\u2500".repeat(40)));
+  console.log(chalk21.gray("\u2500".repeat(40)));
   if (all) {
-    console.log(chalk19.green.bold(`
+    console.log(chalk21.green.bold(`
 \u{1F389} \uC804\uCCB4 \uD1B5\uACFC! (${passed}/${results.length})`));
   } else {
     console.log(
-      chalk19.red.bold(`
+      chalk21.red.bold(`
 \u26A0\uFE0F  ${results.length - passed}\uAC1C \uC2E4\uD328 (${passed}/${results.length} \uD1B5\uACFC)`)
     );
+    process.exitCode = 1;
   }
   printNextStep({
     message: all ? "\uD488\uC9C8 \uC810\uAC80 \uD1B5\uACFC!" : "\uC2E4\uD328 \uD56D\uBAA9\uC744 \uC218\uC815\uD558\uC138\uC694.",
@@ -3873,9 +4251,9 @@ async function harness() {
 }
 
 // src/commands/migrate.ts
-import { existsSync as existsSync8, unlinkSync, rmSync } from "fs";
-import chalk20 from "chalk";
-import inquirer9 from "inquirer";
+import { existsSync as existsSync9, unlinkSync, rmSync as rmSync2 } from "fs";
+import chalk22 from "chalk";
+import inquirer10 from "inquirer";
 import ora3 from "ora";
 var LOCK_FILES = {
   npm: "package-lock.json",
@@ -3883,26 +4261,26 @@ var LOCK_FILES = {
   pnpm: "pnpm-lock.yaml"
 };
 function detectCurrentPM() {
-  if (existsSync8("pnpm-lock.yaml")) return "pnpm";
-  if (existsSync8("yarn.lock")) return "yarn";
-  if (existsSync8("package-lock.json")) return "npm";
+  if (existsSync9("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync9("yarn.lock")) return "yarn";
+  if (existsSync9("package-lock.json")) return "npm";
   return null;
 }
 function isCLIAvailable(pm) {
   return safeExecFile(pm, ["--version"]).ok;
 }
 async function migrate(target) {
-  console.log(chalk20.bold("\n\u{1F504} " + t("migrate.title")));
-  console.log(chalk20.gray("\u2500".repeat(40)));
+  console.log(chalk22.bold("\n\u{1F504} " + t("migrate.title")));
+  console.log(chalk22.gray("\u2500".repeat(40)));
   const current = detectCurrentPM();
-  console.log(chalk20.cyan(`
+  console.log(chalk22.cyan(`
 \uD604\uC7AC \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800: ${current ?? "\uAC10\uC9C0 \uBD88\uAC00"}`));
   let targetPM;
   if (target && ["npm", "yarn", "pnpm"].includes(target)) {
     targetPM = target;
   } else {
     const choices = ["npm", "yarn", "pnpm"].filter((pm) => pm !== current).map((pm) => ({ name: pm, value: pm }));
-    const { selected } = await inquirer9.prompt([
+    const { selected } = await inquirer10.prompt([
       {
         type: "list",
         name: "selected",
@@ -3913,17 +4291,17 @@ async function migrate(target) {
     targetPM = selected;
   }
   if (targetPM === current) {
-    console.log(chalk20.yellow(`
+    console.log(chalk22.yellow(`
 \u26A0\uFE0F  \uC774\uBBF8 ${targetPM}\uC744 \uC0AC\uC6A9 \uC911\uC785\uB2C8\uB2E4.`));
     return;
   }
   if (!isCLIAvailable(targetPM)) {
-    console.log(chalk20.red(`
+    console.log(chalk22.red(`
 \u274C ${targetPM}\uC774 \uC124\uCE58\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`));
-    console.log(chalk20.yellow(`   npm i -g ${targetPM}`));
+    console.log(chalk22.yellow(`   npm i -g ${targetPM}`));
     return;
   }
-  const { confirm } = await inquirer9.prompt([
+  const { confirm } = await inquirer10.prompt([
     {
       type: "confirm",
       name: "confirm",
@@ -3932,18 +4310,18 @@ async function migrate(target) {
     }
   ]);
   if (!confirm) {
-    console.log(chalk20.gray("\uCDE8\uC18C\uB428"));
+    console.log(chalk22.gray("\uCDE8\uC18C\uB428"));
     return;
   }
   const cleanup = ora3("\uAE30\uC874 lock \uD30C\uC77C \uC815\uB9AC \uC911...").start();
   for (const lockFile of Object.values(LOCK_FILES)) {
-    if (existsSync8(lockFile)) {
+    if (existsSync9(lockFile)) {
       unlinkSync(lockFile);
     }
   }
-  if (existsSync8("node_modules")) {
+  if (existsSync9("node_modules")) {
     cleanup.text = "node_modules \uC0AD\uC81C \uC911...";
-    rmSync("node_modules", { recursive: true, force: true });
+    rmSync2("node_modules", { recursive: true, force: true });
   }
   cleanup.succeed("\uAE30\uC874 \uD30C\uC77C \uC815\uB9AC \uC644\uB8CC");
   const install = ora3(`${targetPM} install \uC2E4\uD589 \uC911...`).start();
@@ -3952,10 +4330,10 @@ async function migrate(target) {
     install.succeed(`${targetPM} install \uC644\uB8CC!`);
   } else {
     install.fail(`${targetPM} install \uC2E4\uD328`);
-    console.log(chalk20.red(installResult.err.slice(0, 300)));
+    console.log(chalk22.red(installResult.err.slice(0, 300)));
     return;
   }
-  console.log(chalk20.green.bold(`
+  console.log(chalk22.green.bold(`
 \u{1F389} ${current ?? "\uC774\uC804"} \u2192 ${targetPM} \uC804\uD658 \uC644\uB8CC!`));
   printNextStep({
     message: "\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658 \uC644\uB8CC!",
@@ -3965,17 +4343,17 @@ async function migrate(target) {
 }
 
 // src/commands/update.ts
-import { existsSync as existsSync9 } from "fs";
-import { dirname as dirname2, join as join4 } from "path";
+import { existsSync as existsSync10 } from "fs";
+import { dirname as dirname2, join as join6 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import chalk21 from "chalk";
+import chalk23 from "chalk";
 import ora4 from "ora";
 var PACKAGE = "@byh3071/vhk";
 function getCurrentVersion() {
   const dir = dirname2(fileURLToPath3(import.meta.url));
-  for (const pkgPath of [join4(dir, "../package.json"), join4(dir, "../../package.json")]) {
+  for (const pkgPath of [join6(dir, "../package.json"), join6(dir, "../../package.json")]) {
     try {
-      if (existsSync9(pkgPath)) {
+      if (existsSync10(pkgPath)) {
         const pkg = readJsonFile(pkgPath);
         if (pkg.version) return pkg.version;
       }
@@ -3998,32 +4376,32 @@ function isUpToDate(current, latest) {
   return cc >= lc;
 }
 async function update() {
-  console.log(chalk21.bold("\n\u2B06\uFE0F  " + t("update.title")));
-  console.log(chalk21.gray("\u2500".repeat(40)));
+  console.log(chalk23.bold("\n\u2B06\uFE0F  " + t("update.title")));
+  console.log(chalk23.gray("\u2500".repeat(40)));
   const current = getCurrentVersion();
-  console.log(chalk21.cyan(`
+  console.log(chalk23.cyan(`
 \u{1F4CC} \uD604\uC7AC \uBC84\uC804: v${current}`));
   const spinner = ora4("\uCD5C\uC2E0 \uBC84\uC804 \uD655\uC778 \uC911...").start();
   const latest = getLatestVersion();
   if (!latest) {
     spinner.fail("\uCD5C\uC2E0 \uBC84\uC804\uC744 \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
-    console.log(chalk21.yellow("   \uB124\uD2B8\uC6CC\uD06C\uB97C \uD655\uC778\uD558\uAC70\uB098 \uC218\uB3D9\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8\uD558\uC138\uC694:"));
-    console.log(chalk21.gray(`   npm update -g ${PACKAGE}`));
+    console.log(chalk23.yellow("   \uB124\uD2B8\uC6CC\uD06C\uB97C \uD655\uC778\uD558\uAC70\uB098 \uC218\uB3D9\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8\uD558\uC138\uC694:"));
+    console.log(chalk23.gray(`   npm update -g ${PACKAGE}`));
     return;
   }
   spinner.stop();
-  console.log(chalk21.cyan(`\u{1F195} \uCD5C\uC2E0 \uBC84\uC804: v${latest}`));
+  console.log(chalk23.cyan(`\u{1F195} \uCD5C\uC2E0 \uBC84\uC804: v${latest}`));
   if (isUpToDate(current, latest)) {
-    console.log(chalk21.green("\n\u2705 \uC774\uBBF8 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4!"));
+    console.log(chalk23.green("\n\u2705 \uC774\uBBF8 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4!"));
     return;
   }
   const updateSpinner = ora4(`v${latest}\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8 \uC911...`).start();
   const upd = safeExecFile("npm", ["update", "-g", PACKAGE]);
   if (upd.ok) {
     updateSpinner.succeed(`v${latest}\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC!`);
-    console.log(chalk21.green.bold(`
+    console.log(chalk23.green.bold(`
 \u{1F389} VHK CLI v${latest} \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC!`));
-    console.log(chalk21.gray("   \uBCC0\uACBD \uC0AC\uD56D\uC740 GitHub Releases\uB97C \uD655\uC778\uD558\uC138\uC694."));
+    console.log(chalk23.gray("   \uBCC0\uACBD \uC0AC\uD56D\uC740 GitHub Releases\uB97C \uD655\uC778\uD558\uC138\uC694."));
     printNextStep({
       message: t("update.nextOkMessage"),
       command: "vhk --version",
@@ -4031,9 +4409,9 @@ async function update() {
     });
   } else {
     updateSpinner.fail("\uC5C5\uB370\uC774\uD2B8 \uC2E4\uD328");
-    console.log(chalk21.red(upd.err.slice(0, 300)));
-    console.log(chalk21.yellow("\n\uC218\uB3D9\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8\uD558\uC138\uC694:"));
-    console.log(chalk21.gray(`   npm update -g ${PACKAGE}`));
+    console.log(chalk23.red(upd.err.slice(0, 300)));
+    console.log(chalk23.yellow("\n\uC218\uB3D9\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8\uD558\uC138\uC694:"));
+    console.log(chalk23.gray(`   npm update -g ${PACKAGE}`));
     printNextStep({
       message: t("update.nextFailMessage"),
       command: "vhk doctor",
@@ -4051,115 +4429,9 @@ import {
   statSync as statSync2,
   writeFileSync as writeFileSync7
 } from "fs";
-import { join as join6 } from "path";
-import chalk22 from "chalk";
-
-// src/lib/state-files.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync6, appendFileSync, rmSync as rmSync2 } from "fs";
-import { join as join5 } from "path";
-var STATE_DIR2 = "docs/state";
-var BLOCKERS_PATH = join5(STATE_DIR2, "blockers.md");
-var LEARNINGS_PATH = join5(STATE_DIR2, "learnings.md");
-var VHK_DIR = ".vhk";
-var HARD_STOP_PATH = join5(VHK_DIR, "HARD_STOP");
-var HARD_STOP_BLOCKER_THRESHOLD = 3;
-function ensureStateDir() {
-  mkdirSync6(STATE_DIR2, { recursive: true });
-}
-function ensureVhkDir() {
-  mkdirSync6(VHK_DIR, { recursive: true });
-}
-function isoDate() {
-  return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-}
-var ACTIVE_BLOCKER_RE = /^- (?!~~)\[/;
-function countActiveBlockers(content) {
-  let count = 0;
-  for (const line of content.split(/\r?\n/)) {
-    if (ACTIVE_BLOCKER_RE.test(line)) count++;
-  }
-  return count;
-}
-function appendBlocker(description, goalId) {
-  ensureStateDir();
-  const tag = goalId !== void 0 ? `goal-${goalId}` : "no-goal";
-  const line = `- [${isoDate()} ${tag}] ${description.trim()}`;
-  if (!existsSync10(BLOCKERS_PATH)) {
-    writeFileSync6(
-      BLOCKERS_PATH,
-      `# Blockers
-
-_Append-only. \uD574\uACB0 \uD56D\uBAA9\uC740 ~~\uCDE8\uC18C\uC120~~\uC73C\uB85C \uD45C\uAE30._
-
-${line}
-`,
-      "utf-8"
-    );
-  } else {
-    appendFileSync(BLOCKERS_PATH, `${line}
-`, "utf-8");
-  }
-  const current = readFileSync3(BLOCKERS_PATH, "utf-8");
-  const count = countActiveBlockers(current);
-  let hardStopTripped = false;
-  if (count >= HARD_STOP_BLOCKER_THRESHOLD && !existsSync10(HARD_STOP_PATH)) {
-    writeHardStop(`auto: ${count} active blockers (threshold ${HARD_STOP_BLOCKER_THRESHOLD})`);
-    hardStopTripped = true;
-  }
-  return { count, hardStopTripped };
-}
-function appendLearning(lesson, goalId) {
-  ensureStateDir();
-  const tag = goalId !== void 0 ? `goal-${goalId}` : "no-goal";
-  const line = `- [${isoDate()} ${tag}] ${lesson.trim()}`;
-  if (!existsSync10(LEARNINGS_PATH)) {
-    writeFileSync6(
-      LEARNINGS_PATH,
-      `# Learnings
-
-_Append-only. \uD55C \uC904 = \uD55C \uAD50\uD6C8._
-
-${line}
-`,
-      "utf-8"
-    );
-  } else {
-    appendFileSync(LEARNINGS_PATH, `${line}
-`, "utf-8");
-  }
-}
-function getRecentLearnings(limit = 3) {
-  if (!existsSync10(LEARNINGS_PATH)) return [];
-  const lines = readFileSync3(LEARNINGS_PATH, "utf-8").split(/\r?\n/);
-  const entries = lines.filter((l) => l.startsWith("- ["));
-  return entries.slice(-limit);
-}
-function writeHardStop(reason) {
-  ensureVhkDir();
-  const ts = (/* @__PURE__ */ new Date()).toISOString();
-  writeFileSync6(HARD_STOP_PATH, `${ts}
-${reason}
-`, "utf-8");
-}
-function isHardStopActive() {
-  return existsSync10(HARD_STOP_PATH);
-}
-function readHardStopReason() {
-  if (!existsSync10(HARD_STOP_PATH)) return null;
-  try {
-    return readFileSync3(HARD_STOP_PATH, "utf-8").trim();
-  } catch {
-    return null;
-  }
-}
-function clearHardStop() {
-  if (!existsSync10(HARD_STOP_PATH)) return false;
-  rmSync2(HARD_STOP_PATH, { force: true });
-  return true;
-}
-
-// src/commands/context.ts
-var CONTEXT_PATH2 = ".vhk/context.md";
+import { join as join7 } from "path";
+import chalk24 from "chalk";
+var CONTEXT_PATH = ".vhk/context.md";
 var IGNORE_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -4183,7 +4455,7 @@ function buildTree(dir, prefix = "", maxDepth = 3, depth = 0) {
     filtered.forEach((entry, index) => {
       const isLast = index === filtered.length - 1;
       const connector = isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 ";
-      const fullPath = join6(dir, entry);
+      const fullPath = join7(dir, entry);
       const stat = statSync2(fullPath);
       const isDir = stat.isDirectory();
       lines.push(`${prefix}${connector}${entry}${isDir ? "/" : ""}`);
@@ -4257,11 +4529,12 @@ function getVhkCommands() {
     "mcp-init \u2014 Cursor MCP \uC124\uC815"
   ];
 }
-async function context() {
-  console.log(chalk22.bold("\n\u{1F9E0} " + t("context.title")));
-  console.log(chalk22.gray("\u2500".repeat(40)));
+async function context(opts = {}) {
+  const compact = opts.compact === true;
+  console.log(chalk24.bold("\n\u{1F9E0} " + t("context.title")));
+  console.log(chalk24.gray("\u2500".repeat(40)));
   const stack = extractTechStack();
-  const tree = buildTree(".").join("\n");
+  const tree = buildTree(".", "", compact ? 2 : 3).join("\n");
   const commands = getVhkCommands();
   const lines = [];
   lines.push("# \uD504\uB85C\uC81D\uD2B8 \uCEE8\uD14D\uC2A4\uD2B8");
@@ -4277,25 +4550,37 @@ async function context() {
   lines.push("");
   lines.push("## \uB514\uB809\uD1A0\uB9AC \uAD6C\uC870");
   lines.push("");
-  lines.push("```");
+  lines.push("```text");
   lines.push(tree);
   lines.push("```");
   lines.push("");
-  lines.push("## VHK CLI \uBA85\uB839\uC5B4");
-  lines.push("");
-  for (const cmd of commands) {
-    lines.push(`- \`vhk ${cmd}\``);
+  if (compact) {
+    lines.push("## \uBA85\uB839\uC5B4 (\uC694\uC57D)");
+    lines.push("");
+    lines.push("- \uC804\uCCB4 \uBAA9\uB85D\uC740 `vhk help` \uB610\uB294 `COMMANDS.md` \uCC38\uC870 (compact \uBAA8\uB4DC\uB294 \uC0DD\uB7B5)");
+    lines.push("");
+  } else {
+    lines.push("## VHK CLI \uBA85\uB839\uC5B4");
+    lines.push("");
+    for (const cmd of commands) {
+      lines.push(`- \`vhk ${cmd}\``);
+    }
+    lines.push("");
   }
-  lines.push("");
   if (existsSync11(".vhk/memory.json")) {
     try {
       const memories = readJsonFile(
         ".vhk/memory.json"
       );
       if (Array.isArray(memories) && memories.length > 0) {
+        const recentMemories = memories.slice(-5);
         lines.push("## \uC800\uC7A5\uB41C \uACB0\uC815\uC0AC\uD56D");
         lines.push("");
-        for (const m of memories) {
+        if (memories.length > recentMemories.length) {
+          lines.push(`_\uCD5C\uADFC ${recentMemories.length}\uAC1C\uB9CC \uD45C\uC2DC (\uC804\uCCB4 ${memories.length}\uAC1C)_`);
+          lines.push("");
+        }
+        for (const m of recentMemories) {
           const date = new Date(m.addedAt).toLocaleDateString("ko-KR");
           lines.push(`- ${m.content} _(${date})_`);
         }
@@ -4326,6 +4611,24 @@ async function context() {
     for (const r of recent) lines.push(r);
     lines.push("");
   }
+  const activeBlockers = getActiveBlockers(3);
+  if (activeBlockers.length > 0) {
+    lines.push("## Active Blockers");
+    lines.push("");
+    for (const b of activeBlockers) lines.push(b);
+    lines.push("");
+  }
+  if (compact) {
+    lines.push("## \uCC38\uC870 \uBB38\uC11C (\uD544\uC694\uC2DC \uC5F4\uB78C)");
+    lines.push("");
+    lines.push("- \uC791\uB3D9 \uADDC\uC57D(\uC694\uC57D): `docs/context/agent-compact.md`");
+    lines.push("- \uADDC\uC57D \uC0C1\uC138: `AGENTS.md`");
+    lines.push("- \uAE30\uB85D \uADDC\uCE59: `CLAUDE.md`");
+    lines.push("- \uBA85\uB839 \uC0C1\uC138: `COMMANDS.md`");
+    lines.push("- \uAD6C\uC870 \uC0C1\uC138: `docs/ARCHITECTURE.md`");
+    lines.push("- \uD604\uC7AC \uC0C1\uD0DC: `docs/state/next-task.md`");
+    lines.push("");
+  }
   if (isHardStopActive()) {
     lines.push("## \u26A0\uFE0F HARD_STOP \uD65C\uC131");
     lines.push("");
@@ -4343,11 +4646,11 @@ async function context() {
   }
   lines.push("");
   mkdirSync7(".vhk", { recursive: true });
-  writeFileSync7(CONTEXT_PATH2, lines.join("\n"), "utf-8");
-  console.log(chalk22.green(`
-\u2705 ${CONTEXT_PATH2} \uC0DD\uC131 \uC644\uB8CC!`));
-  console.log(chalk22.gray(`   \uAE30\uC220 \uC2A4\uD0DD ${Object.keys(stack).length}\uAC1C \uAC10\uC9C0`));
-  console.log(chalk22.gray("   AI \uC5B4\uC2DC\uC2A4\uD134\uD2B8\uC5D0\uAC8C \uC774 \uD30C\uC77C\uC744 \uCC38\uC870\uD558\uAC8C \uD558\uC138\uC694."));
+  writeFileSync7(CONTEXT_PATH, lines.join("\n"), "utf-8");
+  console.log(chalk24.green(`
+\u2705 ${CONTEXT_PATH} \uC0DD\uC131 \uC644\uB8CC!`));
+  console.log(chalk24.gray(`   \uAE30\uC220 \uC2A4\uD0DD ${Object.keys(stack).length}\uAC1C \uAC10\uC9C0`));
+  console.log(chalk24.gray("   AI \uC5B4\uC2DC\uC2A4\uD134\uD2B8\uC5D0\uAC8C \uC774 \uD30C\uC77C\uC744 \uCC38\uC870\uD558\uAC8C \uD558\uC138\uC694."));
   printNextStep({
     message: "\uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C \uC0DD\uC131 \uC644\uB8CC!",
     command: "vhk context-show",
@@ -4355,20 +4658,20 @@ async function context() {
   });
 }
 async function contextShow() {
-  console.log(chalk22.bold("\n\u{1F4C4} " + t("context.showTitle")));
-  console.log(chalk22.gray("\u2500".repeat(40)));
-  if (!existsSync11(CONTEXT_PATH2)) {
-    console.log(chalk22.yellow("\n\u26A0\uFE0F  \uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
-    console.log(chalk22.gray("   vhk context\uB97C \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694."));
+  console.log(chalk24.bold("\n\u{1F4C4} " + t("context.showTitle")));
+  console.log(chalk24.gray("\u2500".repeat(40)));
+  if (!existsSync11(CONTEXT_PATH)) {
+    console.log(chalk24.yellow("\n\u26A0\uFE0F  \uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk24.gray("   vhk context\uB97C \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694."));
     return;
   }
-  const content = readFileSync4(CONTEXT_PATH2, "utf-8");
+  const content = readFileSync4(CONTEXT_PATH, "utf-8");
   console.log("\n" + content);
 }
 
 // src/commands/memory.ts
 import { existsSync as existsSync12, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8 } from "fs";
-import chalk23 from "chalk";
+import chalk25 from "chalk";
 var MEMORY_PATH = ".vhk/memory.json";
 function loadMemories() {
   if (!existsSync12(MEMORY_PATH)) return [];
@@ -4384,11 +4687,12 @@ function saveMemories(memories) {
   writeFileSync8(MEMORY_PATH, JSON.stringify(memories, null, 2) + "\n", "utf-8");
 }
 async function memoryAdd(content, tags) {
-  console.log(chalk23.bold("\n\u{1F9E0} " + t("memory.addTitle")));
-  console.log(chalk23.gray("\u2500".repeat(40)));
+  console.log(chalk25.bold("\n\u{1F9E0} " + t("memory.addTitle")));
+  console.log(chalk25.gray("\u2500".repeat(40)));
   if (!content) {
-    console.log(chalk23.red("\u274C \uAE30\uC5B5\uD560 \uB0B4\uC6A9\uC744 \uC785\uB825\uD574\uC8FC\uC138\uC694."));
-    console.log(chalk23.gray('   \uC608: vhk memory add "API\uB294 tRPC \uC0AC\uC6A9\uD558\uAE30\uB85C \uACB0\uC815"'));
+    console.log(chalk25.red("\u274C \uAE30\uC5B5\uD560 \uB0B4\uC6A9\uC744 \uC785\uB825\uD574\uC8FC\uC138\uC694."));
+    console.log(chalk25.gray('   \uC608: vhk memory add "API\uB294 tRPC \uC0AC\uC6A9\uD558\uAE30\uB85C \uACB0\uC815"'));
+    process.exitCode = 1;
     return;
   }
   const memories = loadMemories();
@@ -4398,9 +4702,9 @@ async function memoryAdd(content, tags) {
     tags: tags && tags.length > 0 ? tags : []
   });
   saveMemories(memories);
-  console.log(chalk23.green(`
+  console.log(chalk25.green(`
 \u2705 \uAE30\uC5B5 \uC800\uC7A5\uB428 (#${memories.length})`));
-  console.log(chalk23.cyan(`   \u{1F4DD} ${content}`));
+  console.log(chalk25.cyan(`   \u{1F4DD} ${content}`));
   printNextStep({
     message: "\uAE30\uC5B5 \uC800\uC7A5 \uC644\uB8CC!",
     command: "vhk memory list",
@@ -4408,24 +4712,24 @@ async function memoryAdd(content, tags) {
   });
 }
 async function memoryList() {
-  console.log(chalk23.bold("\n\u{1F9E0} " + t("memory.listTitle")));
-  console.log(chalk23.gray("\u2500".repeat(40)));
+  console.log(chalk25.bold("\n\u{1F9E0} " + t("memory.listTitle")));
+  console.log(chalk25.gray("\u2500".repeat(40)));
   const memories = loadMemories();
   if (memories.length === 0) {
-    console.log(chalk23.yellow("\n\u{1F4ED} \uC800\uC7A5\uB41C \uAE30\uC5B5\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
-    console.log(chalk23.gray('   vhk memory add "\uB0B4\uC6A9"\uC73C\uB85C \uCD94\uAC00\uD558\uC138\uC694.'));
+    console.log(chalk25.yellow("\n\u{1F4ED} \uC800\uC7A5\uB41C \uAE30\uC5B5\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk25.gray('   vhk memory add "\uB0B4\uC6A9"\uC73C\uB85C \uCD94\uAC00\uD558\uC138\uC694.'));
     return;
   }
-  console.log(chalk23.cyan(`
+  console.log(chalk25.cyan(`
 \uCD1D ${memories.length}\uAC1C\uC758 \uAE30\uC5B5:
 `));
   memories.forEach((m, index) => {
     const date = new Date(m.addedAt).toLocaleDateString("ko-KR");
-    console.log(chalk23.white(`  [${index + 1}] ${m.content}`));
+    console.log(chalk25.white(`  [${index + 1}] ${m.content}`));
     if (m.tags && m.tags.length > 0) {
-      console.log(chalk23.blue(`      \u{1F3F7}\uFE0F  ${m.tags.join(", ")}`));
+      console.log(chalk25.blue(`      \u{1F3F7}\uFE0F  ${m.tags.join(", ")}`));
     }
-    console.log(chalk23.gray(`      \u{1F4C5} ${date}`));
+    console.log(chalk25.gray(`      \u{1F4C5} ${date}`));
     console.log("");
   });
 }
@@ -4433,26 +4737,44 @@ async function memoryRemove(indexStr) {
   const memories = loadMemories();
   const idx = parseInt(indexStr, 10) - 1;
   if (Number.isNaN(idx) || idx < 0 || idx >= memories.length) {
-    console.log(chalk23.red(`\u274C \uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uBC88\uD638\uC785\uB2C8\uB2E4. (1~${memories.length || 0})`));
+    console.log(chalk25.red(`\u274C \uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uBC88\uD638\uC785\uB2C8\uB2E4. (1~${memories.length || 0})`));
     return;
   }
   const removed = memories.splice(idx, 1)[0];
   saveMemories(memories);
-  console.log(chalk23.green("\n\u2705 \uAE30\uC5B5 \uC0AD\uC81C\uB428:"));
-  console.log(chalk23.gray(`   ${removed.content}`));
+  console.log(chalk25.green("\n\u2705 \uAE30\uC5B5 \uC0AD\uC81C\uB428:"));
+  console.log(chalk25.gray(`   ${removed.content}`));
 }
 
 // src/commands/brief.ts
-import { existsSync as existsSync13, mkdirSync as mkdirSync9, writeFileSync as writeFileSync9 } from "fs";
-import chalk24 from "chalk";
+import { existsSync as existsSync13, mkdirSync as mkdirSync9, writeFileSync as writeFileSync9, readFileSync as readFileSync5 } from "fs";
+import chalk26 from "chalk";
 var BRIEF_PATH = ".vhk/brief.md";
+function readProjectIdentity() {
+  const out = {};
+  try {
+    if (existsSync13("RULES.md")) {
+      const r = readFileSync5("RULES.md", "utf-8");
+      const m = r.split("\n")[0].match(/^#\s*(.+?)(?:\s*—.*)?$/);
+      if (m) out.name = m[1].trim();
+      const d = r.match(/한 줄 설명:\s*(.+)/);
+      if (d) out.description = d[1].trim();
+    }
+    if (!out.name && existsSync13("CLAUDE.md")) {
+      const m = readFileSync5("CLAUDE.md", "utf-8").match(/#\s*기록 규칙\s*\((.+?)\)/);
+      if (m) out.name = m[1].trim();
+    }
+  } catch {
+  }
+  return out;
+}
 function git2(args) {
   const result = safeExecFile("git", args);
   return result.ok ? result.out : "";
 }
 async function brief() {
-  console.log(chalk24.bold("\n\u{1F4CB} " + t("brief.title")));
-  console.log(chalk24.gray("\u2500".repeat(40)));
+  console.log(chalk26.bold("\n\u{1F4CB} " + t("brief.title")));
+  console.log(chalk26.gray("\u2500".repeat(40)));
   const lines = [];
   lines.push("# \uD504\uB85C\uC81D\uD2B8 \uBE0C\uB9AC\uD551");
   lines.push("");
@@ -4460,11 +4782,12 @@ async function brief() {
   lines.push("");
   try {
     const pkg = readJsonFile("package.json");
+    const id = readProjectIdentity();
     lines.push("## \uD504\uB85C\uC81D\uD2B8 \uC815\uBCF4");
     lines.push("");
-    lines.push(`- **\uC774\uB984**: ${pkg.name ?? "\uBBF8\uC815"}`);
+    lines.push(`- **\uC774\uB984**: ${id.name ?? pkg.name ?? "\uBBF8\uC815"}`);
     lines.push(`- **\uBC84\uC804**: ${pkg.version ?? "\uBBF8\uC815"}`);
-    lines.push(`- **\uC124\uBA85**: ${pkg.description ?? "\uC5C6\uC74C"}`);
+    lines.push(`- **\uC124\uBA85**: ${id.description ?? pkg.description ?? "\uC5C6\uC74C"}`);
     const deps = Object.keys(pkg.dependencies ?? {}).length;
     const devDeps = Object.keys(pkg.devDependencies ?? {}).length;
     lines.push(`- **\uC758\uC874\uC131**: ${deps}\uAC1C (dev: ${devDeps}\uAC1C)`);
@@ -4536,7 +4859,7 @@ async function brief() {
   mkdirSync9(".vhk", { recursive: true });
   writeFileSync9(BRIEF_PATH, lines.join("\n"), "utf-8");
   console.log("\n" + lines.join("\n"));
-  console.log(chalk24.green(`
+  console.log(chalk26.green(`
 \u2705 ${BRIEF_PATH} \uC800\uC7A5 \uC644\uB8CC`));
   printNextStep({
     message: "\uBE0C\uB9AC\uD551 \uC0DD\uC131 \uC644\uB8CC!",
@@ -4546,11 +4869,11 @@ async function brief() {
 }
 
 // src/commands/start.ts
-import chalk25 from "chalk";
-import inquirer10 from "inquirer";
+import chalk27 from "chalk";
+import inquirer11 from "inquirer";
 import { simpleGit as simpleGit2 } from "simple-git";
 import { existsSync as existsSync14 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 var VHK_FOOTPRINT_FILES = [
   "CLAUDE.md",
   ".cursorrules",
@@ -4559,7 +4882,7 @@ var VHK_FOOTPRINT_FILES = [
   "docs/PRD.md"
 ];
 function detectExistingFootprint(cwd) {
-  return VHK_FOOTPRINT_FILES.filter((rel) => existsSync14(join7(cwd, rel)));
+  return VHK_FOOTPRINT_FILES.filter((rel) => existsSync14(join8(cwd, rel)));
 }
 async function runGitInit(cwd) {
   try {
@@ -4588,22 +4911,22 @@ async function runStep(label, fn) {
   }
 }
 async function start(options = {}) {
-  console.log(chalk25.bold(`
+  console.log(chalk27.bold(`
 ${ko.start.title}
 `));
-  console.log(chalk25.dim(ko.start.intro));
-  console.log(chalk25.dim(`  ${ko.start.step1}`));
-  console.log(chalk25.dim(`  ${ko.start.step2}`));
-  console.log(chalk25.dim(`  ${ko.start.step3}`));
-  console.log(chalk25.dim(`  ${ko.start.step4}`));
+  console.log(chalk27.dim(ko.start.intro));
+  console.log(chalk27.dim(`  ${ko.start.step1}`));
+  console.log(chalk27.dim(`  ${ko.start.step2}`));
+  console.log(chalk27.dim(`  ${ko.start.step3}`));
+  console.log(chalk27.dim(`  ${ko.start.step4}`));
   console.log();
   const cwd = process.cwd();
   const footprint = detectExistingFootprint(cwd);
   if (footprint.length > 0 && !options.yes) {
-    console.log(chalk25.yellow("\u26A0\uFE0F  \uC774\uBBF8 VHK \uC124\uCE58 \uD754\uC801\uC774 \uAC10\uC9C0\uB410\uC5B4\uC694:"));
-    for (const f of footprint) console.log(chalk25.dim(`   - ${f}`));
-    console.log(chalk25.dim("   \uACC4\uC18D \uC9C4\uD589\uD558\uBA74 \uC77C\uBD80 \uD30C\uC77C(`.cursor/mcp.json`, `.vhk/context.md`)\uC740 \uAC31\uC2E0\xB7\uB36E\uC5B4\uC4F0\uAE30\uB429\uB2C8\uB2E4."));
-    const { proceedExisting } = await inquirer10.prompt([{
+    console.log(chalk27.yellow("\u26A0\uFE0F  \uC774\uBBF8 VHK \uC124\uCE58 \uD754\uC801\uC774 \uAC10\uC9C0\uB410\uC5B4\uC694:"));
+    for (const f of footprint) console.log(chalk27.dim(`   - ${f}`));
+    console.log(chalk27.dim("   \uACC4\uC18D \uC9C4\uD589\uD558\uBA74 \uC77C\uBD80 \uD30C\uC77C(`.cursor/mcp.json`, `.vhk/context.md`)\uC740 \uAC31\uC2E0\xB7\uB36E\uC5B4\uC4F0\uAE30\uB429\uB2C8\uB2E4."));
+    const { proceedExisting } = await inquirer11.prompt([{
       type: "confirm",
       name: "proceedExisting",
       message: "\uADF8\uB798\uB3C4 \uB2E4\uC2DC \uB9C8\uBC95\uC0AC\uB97C \uC9C4\uD589\uD560\uAE4C\uC694?",
@@ -4614,7 +4937,7 @@ ${ko.start.title}
       return;
     }
   } else if (!options.yes) {
-    const { proceed } = await inquirer10.prompt([{
+    const { proceed } = await inquirer11.prompt([{
       type: "confirm",
       name: "proceed",
       message: ko.start.confirmStart,
@@ -4640,7 +4963,7 @@ ${ko.start.title}
   await runStep("[3/4] vhk mcp-init", () => mcpInit());
   log.step(ko.start.step4Header);
   await runStep("[4/4] vhk context", () => context());
-  console.log(chalk25.bold.green(`
+  console.log(chalk27.bold.green(`
 ${ko.start.allDone}
 `));
   printNextStep({
@@ -4650,15 +4973,15 @@ ${ko.start.allDone}
 }
 
 // src/commands/cloud.ts
-import fs14 from "fs";
+import fs12 from "fs";
 import os from "os";
-import path15 from "path";
-import chalk26 from "chalk";
+import path13 from "path";
+import chalk28 from "chalk";
 
 // src/lib/vhk-cloud.ts
 var import_ignore = __toESM(require_ignore(), 1);
-import fs13 from "fs";
-import path14 from "path";
+import fs11 from "fs";
+import path12 from "path";
 var DEFAULT_CLOUD_EXCLUDES = [
   "memory.json",
   // 개인 의사결정 메모
@@ -4676,17 +4999,17 @@ var CLOUD_CONFIG_FILE = "cloud.json";
 function loadVhkignore(rootDir) {
   const ig = (0, import_ignore.default)();
   ig.add(DEFAULT_CLOUD_EXCLUDES);
-  const ignorePath = path14.join(rootDir, ".vhkignore");
-  if (fs13.existsSync(ignorePath)) {
-    ig.add(fs13.readFileSync(ignorePath, "utf-8"));
+  const ignorePath = path12.join(rootDir, ".vhkignore");
+  if (fs11.existsSync(ignorePath)) {
+    ig.add(fs11.readFileSync(ignorePath, "utf-8"));
   }
   return ig;
 }
 function collectVhkFiles(rootDir, ig = loadVhkignore(rootDir)) {
-  const vhkDir = path14.join(rootDir, VHK_DIR2);
+  const vhkDir = path12.join(rootDir, VHK_DIR2);
   let entries;
   try {
-    entries = fs13.readdirSync(vhkDir, { withFileTypes: true });
+    entries = fs11.readdirSync(vhkDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -4702,10 +5025,10 @@ function partitionGistFiles(gistFiles, ig) {
   return { keep, excluded };
 }
 function readCloudConfig(rootDir) {
-  const p = path14.join(rootDir, VHK_DIR2, CLOUD_CONFIG_FILE);
-  if (!fs13.existsSync(p)) return null;
+  const p = path12.join(rootDir, VHK_DIR2, CLOUD_CONFIG_FILE);
+  if (!fs11.existsSync(p)) return null;
   try {
-    const parsed = JSON.parse(fs13.readFileSync(p, "utf-8"));
+    const parsed = JSON.parse(fs11.readFileSync(p, "utf-8"));
     if (parsed && typeof parsed.gistId === "string" && parsed.gistId) {
       return { gistId: parsed.gistId };
     }
@@ -4715,24 +5038,44 @@ function readCloudConfig(rootDir) {
   }
 }
 function writeCloudConfig(rootDir, config) {
-  const vhkDir = path14.join(rootDir, VHK_DIR2);
-  fs13.mkdirSync(vhkDir, { recursive: true });
-  const p = path14.join(vhkDir, CLOUD_CONFIG_FILE);
-  fs13.writeFileSync(p, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  const vhkDir = path12.join(rootDir, VHK_DIR2);
+  fs11.mkdirSync(vhkDir, { recursive: true });
+  const p = path12.join(vhkDir, CLOUD_CONFIG_FILE);
+  fs11.writeFileSync(p, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  ensureCloudConfigIgnored(vhkDir);
+}
+function ensureCloudConfigIgnored(vhkDir) {
+  const giPath = path12.join(vhkDir, ".gitignore");
+  let content = "";
+  try {
+    if (fs11.existsSync(giPath)) content = fs11.readFileSync(giPath, "utf-8");
+  } catch {
+    return;
+  }
+  const already = content.split(/\r?\n/).some((l) => l.trim() === CLOUD_CONFIG_FILE);
+  if (already) return;
+  const block = `# secret gist \uD3EC\uC778\uD130 \u2014 \uCD94\uC801 \uAE08\uC9C0 (VHK-022)
+${CLOUD_CONFIG_FILE}
+`;
+  const base = content.length === 0 ? "" : content.endsWith("\n") ? content : content + "\n";
+  try {
+    fs11.writeFileSync(giPath, base + block, "utf-8");
+  } catch {
+  }
 }
 
 // src/commands/cloud.ts
 function ensureGhReady() {
   const ver = safeExecFile("gh", ["--version"]);
   if (!ver.ok) {
-    console.log(chalk26.red(`  ${ko.cloud.noGh}`));
-    console.log(chalk26.dim("  \uC124\uCE58: https://cli.github.com/  (\uC124\uCE58 \uD6C4 `gh auth login`)"));
+    console.log(chalk28.red(`  ${ko.cloud.noGh}`));
+    console.log(chalk28.dim("  \uC124\uCE58: https://cli.github.com/  (\uC124\uCE58 \uD6C4 `gh auth login`)"));
     return false;
   }
   const auth = safeExecFile("gh", ["auth", "status"]);
   if (!auth.ok) {
-    console.log(chalk26.red(`  ${ko.cloud.noAuth}`));
-    console.log(chalk26.dim("  \uC2E4\uD589: gh auth login  (gist \uAD8C\uD55C \uD544\uC694)"));
+    console.log(chalk28.red(`  ${ko.cloud.noAuth}`));
+    console.log(chalk28.dim("  \uC2E4\uD589: gh auth login  (gist \uAD8C\uD55C \uD544\uC694)"));
     return false;
   }
   return true;
@@ -4745,29 +5088,29 @@ function parseGistId(output) {
   return null;
 }
 async function cloudPush() {
-  console.log(chalk26.bold(`
+  console.log(chalk28.bold(`
 ${ko.cloud.pushTitle}
 `));
   const cwd = process.cwd();
-  if (!fs14.existsSync(path15.join(cwd, VHK_DIR2))) {
-    console.log(chalk26.yellow(`  ${ko.cloud.noVhkDir}`));
+  if (!fs12.existsSync(path13.join(cwd, VHK_DIR2))) {
+    console.log(chalk28.yellow(`  ${ko.cloud.noVhkDir}`));
     return;
   }
   const ig = loadVhkignore(cwd);
   const files = collectVhkFiles(cwd, ig);
   if (files.length === 0) {
-    console.log(chalk26.yellow(`  ${ko.cloud.nothingToSync}`));
+    console.log(chalk28.yellow(`  ${ko.cloud.nothingToSync}`));
     return;
   }
   if (!ensureGhReady()) {
     process.exitCode = 1;
     return;
   }
-  const filePaths = files.map((f) => path15.join(cwd, VHK_DIR2, f));
-  console.log(chalk26.dim(`  \u{1F4E6} \uBC31\uC5C5 \uB300\uC0C1 ${files.length}\uAC1C: ${files.join(", ")}
+  const filePaths = files.map((f) => path13.join(cwd, VHK_DIR2, f));
+  console.log(chalk28.dim(`  \u{1F4E6} \uBC31\uC5C5 \uB300\uC0C1 ${files.length}\uAC1C: ${files.join(", ")}
 `));
   const existing = readCloudConfig(cwd);
-  const desc = `vhk .vhk backup \u2014 ${path15.basename(cwd)}`;
+  const desc = `vhk .vhk backup \u2014 ${path13.basename(cwd)}`;
   if (existing) {
     const gistFiles = listGistFiles(existing.gistId);
     for (let i = 0; i < files.length; i++) {
@@ -4776,8 +5119,8 @@ ${ko.cloud.pushTitle}
       const args = gistFiles.includes(name) ? ["gist", "edit", existing.gistId, "-f", name, src] : ["gist", "edit", existing.gistId, "-a", src];
       const res2 = safeExecFile("gh", args);
       if (!res2.ok) {
-        console.log(chalk26.red(`  ${ko.cloud.pushFail}: ${name}`));
-        console.log(chalk26.dim(`    ${res2.err}`));
+        console.log(chalk28.red(`  ${ko.cloud.pushFail}: ${name}`));
+        console.log(chalk28.dim(`    ${res2.err}`));
         process.exitCode = 1;
         return;
       }
@@ -4792,15 +5135,15 @@ ${ko.cloud.pushTitle}
         if (!purgeFailed.includes(name)) purgeFailed.push(name);
       }
     }
-    console.log(chalk26.green.bold(`  ${ko.cloud.pushDone}`));
-    console.log(chalk26.dim(`  gist: ${existing.gistId} (\uAC31\uC2E0)`));
+    console.log(chalk28.green.bold(`  ${ko.cloud.pushDone}`));
+    console.log(chalk28.dim(`  gist: ${existing.gistId} (\uAC31\uC2E0)`));
     if (excluded.length > 0) {
       const purged = excluded.filter((n) => !purgeFailed.includes(n));
       if (purged.length > 0) {
-        console.log(chalk26.dim(`  \u{1F512} \uC81C\uC678 \uB300\uC0C1 ${purged.length}\uAC1C gist \uC5D0\uC11C \uC81C\uAC70: ${purged.join(", ")}`));
+        console.log(chalk28.dim(`  \u{1F512} \uC81C\uC678 \uB300\uC0C1 ${purged.length}\uAC1C gist \uC5D0\uC11C \uC81C\uAC70: ${purged.join(", ")}`));
       }
       if (purgeFailed.length > 0) {
-        console.log(chalk26.yellow(`  \u26A0\uFE0F  \uC81C\uC678 \uB300\uC0C1 \uC81C\uAC70 \uC2E4\uD328: ${purgeFailed.join(", ")} (\uC218\uB3D9 \uC81C\uAC70 \uAD8C\uC7A5 \u2014 pull \uC2DC\uC5D4 \uBCF5\uC6D0 \uC548 \uB428)`));
+        console.log(chalk28.yellow(`  \u26A0\uFE0F  \uC81C\uC678 \uB300\uC0C1 \uC81C\uAC70 \uC2E4\uD328: ${purgeFailed.join(", ")} (\uC218\uB3D9 \uC81C\uAC70 \uAD8C\uC7A5 \u2014 pull \uC2DC\uC5D4 \uBCF5\uC6D0 \uC548 \uB428)`));
       }
     }
     printPushNext();
@@ -4808,32 +5151,32 @@ ${ko.cloud.pushTitle}
   }
   const res = safeExecFile("gh", ["gist", "create", "--desc", desc, ...filePaths]);
   if (!res.ok) {
-    console.log(chalk26.red(`  ${ko.cloud.pushFail}`));
-    console.log(chalk26.dim(`    ${res.err || res.out}`));
+    console.log(chalk28.red(`  ${ko.cloud.pushFail}`));
+    console.log(chalk28.dim(`    ${res.err || res.out}`));
     process.exitCode = 1;
     return;
   }
   const gistId = parseGistId(res.out);
   if (!gistId) {
-    console.log(chalk26.red(`  ${ko.cloud.pushFail} \u2014 gist id \uD30C\uC2F1 \uC2E4\uD328`));
-    console.log(chalk26.dim(`    \uCD9C\uB825: ${res.out}`));
+    console.log(chalk28.red(`  ${ko.cloud.pushFail} \u2014 gist id \uD30C\uC2F1 \uC2E4\uD328`));
+    console.log(chalk28.dim(`    \uCD9C\uB825: ${res.out}`));
     process.exitCode = 1;
     return;
   }
   writeCloudConfig(cwd, { gistId });
-  console.log(chalk26.green.bold(`  ${ko.cloud.pushDone}`));
-  console.log(chalk26.dim(`  gist: ${gistId} (\uC2E0\uADDC, secret) \u2192 .vhk/cloud.json \uC800\uC7A5`));
+  console.log(chalk28.green.bold(`  ${ko.cloud.pushDone}`));
+  console.log(chalk28.dim(`  gist: ${gistId} (\uC2E0\uADDC, secret) \u2192 .vhk/cloud.json \uC800\uC7A5`));
   printPushNext();
 }
 async function cloudPull(gistIdArg) {
-  console.log(chalk26.bold(`
+  console.log(chalk28.bold(`
 ${ko.cloud.pullTitle}
 `));
   const cwd = process.cwd();
   const gistId = gistIdArg || readCloudConfig(cwd)?.gistId;
   if (!gistId) {
-    console.log(chalk26.yellow(`  ${ko.cloud.noGistId}`));
-    console.log(chalk26.dim("  \uC0AC\uC6A9\uBC95: vhk cloud pull <gistId>  (\uB610\uB294 cloud.json \uC774 \uC788\uB294 \uACF3\uC5D0\uC11C \uC2E4\uD589)"));
+    console.log(chalk28.yellow(`  ${ko.cloud.noGistId}`));
+    console.log(chalk28.dim("  \uC0AC\uC6A9\uBC95: vhk cloud pull <gistId>  (\uB610\uB294 cloud.json \uC774 \uC788\uB294 \uACF3\uC5D0\uC11C \uC2E4\uD589)"));
     return;
   }
   if (!ensureGhReady()) {
@@ -4842,34 +5185,34 @@ ${ko.cloud.pullTitle}
   }
   const allNames = listGistFiles(gistId);
   if (allNames.length === 0) {
-    console.log(chalk26.red(`  ${ko.cloud.pullFail} \u2014 gist \uBE44\uC5C8\uAC70\uB098 \uC811\uADFC \uBD88\uAC00: ${gistId}`));
+    console.log(chalk28.red(`  ${ko.cloud.pullFail} \u2014 gist \uBE44\uC5C8\uAC70\uB098 \uC811\uADFC \uBD88\uAC00: ${gistId}`));
     process.exitCode = 1;
     return;
   }
   const { keep: names, excluded: skipped } = partitionGistFiles(allNames, loadVhkignore(cwd));
   if (skipped.length > 0) {
-    console.log(chalk26.dim(`  \u{1F512} \uC81C\uC678 \uB300\uC0C1 ${skipped.length}\uAC1C \uBCF5\uC6D0 \uC2A4\uD0B5: ${skipped.join(", ")}`));
+    console.log(chalk28.dim(`  \u{1F512} \uC81C\uC678 \uB300\uC0C1 ${skipped.length}\uAC1C \uBCF5\uC6D0 \uC2A4\uD0B5: ${skipped.join(", ")}`));
   }
   if (names.length === 0) {
-    console.log(chalk26.yellow(`  \uBCF5\uC6D0 \uB300\uC0C1\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 (gist \uD30C\uC77C\uC774 \uBAA8\uB450 \uC81C\uC678 \uADDC\uCE59\uC5D0 \uD574\uB2F9).`));
+    console.log(chalk28.yellow(`  \uBCF5\uC6D0 \uB300\uC0C1\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 (gist \uD30C\uC77C\uC774 \uBAA8\uB450 \uC81C\uC678 \uADDC\uCE59\uC5D0 \uD574\uB2F9).`));
     return;
   }
-  const vhkDir = path15.join(cwd, VHK_DIR2);
-  fs14.mkdirSync(vhkDir, { recursive: true });
+  const vhkDir = path13.join(cwd, VHK_DIR2);
+  fs12.mkdirSync(vhkDir, { recursive: true });
   let restored = 0;
   for (const name of names) {
     const res = safeExecFile("gh", ["gist", "view", gistId, "-f", name, "--raw"]);
     if (!res.ok) {
-      console.log(chalk26.red(`  ${ko.cloud.pullFail}: ${name}`));
-      console.log(chalk26.dim(`    ${res.err}`));
+      console.log(chalk28.red(`  ${ko.cloud.pullFail}: ${name}`));
+      console.log(chalk28.dim(`    ${res.err}`));
       continue;
     }
-    fs14.writeFileSync(path15.join(vhkDir, name), ensureTrailingNewline(res.out), "utf-8");
+    fs12.writeFileSync(path13.join(vhkDir, name), ensureTrailingNewline(res.out), "utf-8");
     restored++;
   }
   writeCloudConfig(cwd, { gistId });
-  console.log(chalk26.green.bold(`  ${ko.cloud.pullDone}`));
-  console.log(chalk26.dim(`  ${restored}\uAC1C \uD30C\uC77C \uBCF5\uC6D0 (gist: ${gistId})`));
+  console.log(chalk28.green.bold(`  ${ko.cloud.pullDone}`));
+  console.log(chalk28.dim(`  ${restored}\uAC1C \uD30C\uC77C \uBCF5\uC6D0 (gist: ${gistId})`));
   printNextStep({
     message: "\uD074\uB77C\uC6B0\uB4DC\uC5D0\uC11C .vhk/ \uBCF5\uC6D0 \uC644\uB8CC!",
     command: "vhk \uB9E5\uB77D",
@@ -4881,9 +5224,9 @@ function purgeExcludedFromGist(gistId, names) {
   const body = JSON.stringify({
     files: Object.fromEntries(names.map((n) => [n, null]))
   });
-  const tmp = path15.join(os.tmpdir(), `vhk-gist-purge-${process.pid}.json`);
+  const tmp = path13.join(os.tmpdir(), `vhk-gist-purge-${process.pid}.json`);
   try {
-    fs14.writeFileSync(tmp, body, "utf-8");
+    fs12.writeFileSync(tmp, body, "utf-8");
     for (let attempt = 0; attempt < 2; attempt++) {
       const res = safeExecFile(
         "gh",
@@ -4895,7 +5238,7 @@ function purgeExcludedFromGist(gistId, names) {
     return false;
   } finally {
     try {
-      fs14.unlinkSync(tmp);
+      fs12.unlinkSync(tmp);
     } catch {
     }
   }
@@ -4916,6 +5259,198 @@ function printPushNext() {
   });
 }
 
+// src/commands/help.ts
+import chalk29 from "chalk";
+var QUICK_ACTIONS = [
+  { say: "\uC0C1\uD0DC \uC54C\uB824\uC918", does: "vhk status" },
+  { say: "\uBB50 \uBC14\uB00C\uC5C8\uC5B4?", does: "vhk diff" },
+  { say: "\uC800\uC7A5\uD574\uC918", does: "vhk save" },
+  { say: "\uC624\uB298 \uD55C \uC77C \uC815\uB9AC\uD574\uC918", does: "vhk recap" },
+  { say: "\uB2E4\uC74C\uC5D0 \uBB50 \uD558\uBA74 \uB3FC?", does: "vhk goal next" },
+  { say: "\uADDC\uCE59 \uB3D9\uAE30\uD654\uD574\uC918", does: "vhk sync" },
+  { say: "\uBC31\uC5C5 \uBCF5\uC6D0\uD574\uC918", does: "vhk restore" },
+  { say: "\uBCF4\uC548 \uC810\uAC80\uD574\uC918", does: "vhk secure scan" },
+  { say: "\uC0C8 \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791", does: "vhk start" },
+  { say: "\uC804\uCCB4 \uBA85\uB839\uC5B4 \uBCF4\uAE30", does: "vhk --help" }
+];
+function quickActions() {
+  console.log(chalk29.bold("\n\u{1F9ED} VHK \u2014 \uC774\uB807\uAC8C \uB9D0\uD558\uBA74 \uB429\uB2C8\uB2E4 (quick actions)"));
+  console.log(chalk29.gray("\u2500".repeat(40)));
+  for (const a of QUICK_ACTIONS) {
+    console.log(`  "${chalk29.cyan(a.say)}"  \u2192  ${chalk29.dim(a.does)}`);
+  }
+  console.log(chalk29.gray("\n  \uC804\uCCB4 \uBA85\uB839\uC740 `vhk --help` \uB610\uB294 COMMANDS.md \uB97C \uBCF4\uC138\uC694."));
+  console.log("");
+}
+
+// src/commands/mode.ts
+import chalk30 from "chalk";
+
+// src/lib/config.ts
+import { existsSync as existsSync15, mkdirSync as mkdirSync10, writeFileSync as writeFileSync10 } from "fs";
+import { join as join9 } from "path";
+
+// src/lib/safety-mode.ts
+var SAFETY_MODES = ["lite", "standard", "strict"];
+var DEFAULT_SAFETY_MODE = "standard";
+var SAFETY_MODE_DESC = {
+  lite: "\uACBD\uACE0\uB9CC \u2014 \uC704\uD5D8 \uC791\uC5C5\uB3C4 \uB9C9\uC9C0 \uC54A\uACE0 \uACBD\uACE0\uB9CC \uD45C\uC2DC (\uBE60\uB978 \uBC18\uBCF5\uC6A9)",
+  standard: "\uAE30\uBCF8 \u2014 \uC704\uD5D8 \uC791\uC5C5\uC740 CLI \uD655\uC778\xB7MCP/\uC790\uC5F0\uC5B4 \uBBF8\uB9AC\uBCF4\uAE30",
+  strict: "\uC5C4\uACA9 \u2014 \uB354 \uB9CE\uC740 \uC791\uC5C5(\uC800\uC7A5/\uB3D9\uAE30\uD654 \uB4F1)\uC5D0\uB3C4 \uD655\uC778 \uC694\uAD6C"
+};
+function isSafetyMode(value) {
+  return typeof value === "string" && SAFETY_MODES.includes(value);
+}
+
+// src/lib/config.ts
+var CONFIG_DIR = ".vhk";
+var CONFIG_PATH = join9(CONFIG_DIR, "config.json");
+var DEFAULT_CONFIG = { safetyMode: DEFAULT_SAFETY_MODE };
+function readConfig(rootDir = process.cwd()) {
+  const full = join9(rootDir, CONFIG_PATH);
+  if (!existsSync15(full)) return { ...DEFAULT_CONFIG };
+  try {
+    const raw = readJsonFile(full);
+    return {
+      safetyMode: isSafetyMode(raw.safetyMode) ? raw.safetyMode : DEFAULT_CONFIG.safetyMode
+    };
+  } catch {
+    return { ...DEFAULT_CONFIG };
+  }
+}
+function writeConfig(config, rootDir = process.cwd()) {
+  mkdirSync10(join9(rootDir, CONFIG_DIR), { recursive: true });
+  writeFileSync10(join9(rootDir, CONFIG_PATH), JSON.stringify(config, null, 2) + "\n", "utf-8");
+}
+
+// src/commands/mode.ts
+async function mode(target) {
+  console.log(chalk30.bold("\n\u{1F6E1}\uFE0F  Safety Mode"));
+  console.log(chalk30.gray("\u2500".repeat(40)));
+  const current = readConfig().safetyMode;
+  if (!target) {
+    console.log(chalk30.cyan(`
+  \uD604\uC7AC \uBAA8\uB4DC: ${chalk30.bold(current)}`));
+    console.log(chalk30.dim(`  ${SAFETY_MODE_DESC[current]}`));
+    console.log("");
+    for (const m of SAFETY_MODES) {
+      const mark = m === current ? "\u25CF" : "\u25CB";
+      console.log(`  ${mark} ${m.padEnd(9)} ${chalk30.dim(SAFETY_MODE_DESC[m])}`);
+    }
+    printNextStep({
+      message: "\uBAA8\uB4DC\uB97C \uBC14\uAFB8\uB824\uBA74:",
+      command: "vhk mode strict",
+      cursorHint: "\uC548\uC804 \uBAA8\uB4DC strict\uB85C \uBC14\uAFD4\uC918"
+    });
+    return;
+  }
+  if (!isSafetyMode(target)) {
+    console.log(chalk30.red(`
+  \u274C \uC54C \uC218 \uC5C6\uB294 \uBAA8\uB4DC: ${target}`));
+    console.log(chalk30.dim(`     \uAC00\uB2A5: ${SAFETY_MODES.join(" | ")}`));
+    process.exitCode = 1;
+    return;
+  }
+  writeConfig({ ...readConfig(), safetyMode: target });
+  console.log(chalk30.green(`
+  \u2705 Safety Mode \u2192 ${chalk30.bold(target)}`));
+  console.log(chalk30.dim(`  ${SAFETY_MODE_DESC[target]}`));
+}
+
+// src/commands/verify.ts
+import chalk31 from "chalk";
+function verificationChecklist() {
+  return [
+    "\uD0C0\uC785 \uCCB4\uD06C \u2014 pnpm exec tsc --noEmit",
+    "\uD14C\uC2A4\uD2B8 \u2014 pnpm run test:run",
+    "\uBE4C\uB4DC \u2014 pnpm run build",
+    "\uBCF4\uC548 \uC2A4\uCE94 \u2014 vhk secure scan"
+  ];
+}
+async function verify() {
+  console.log(chalk31.bold("\n\u{1F50E} \uAC80\uC99D \uBB36\uC74C (verify \u2014 lite)"));
+  console.log(chalk31.gray("\u2500".repeat(40)));
+  const mode2 = readConfig().safetyMode;
+  console.log(chalk31.dim(`  \uD604\uC7AC Safety Mode: ${mode2} \u2014 ${SAFETY_MODE_DESC[mode2]}`));
+  console.log(chalk31.cyan("\n  \uC704\uD5D8 \uC791\uC5C5/\uC800\uC7A5 \uC804 \uAD8C\uC7A5 \uAC80\uC99D:"));
+  for (const item of verificationChecklist()) {
+    console.log(`   \u2610 ${item}`);
+  }
+  console.log(chalk31.dim("\n  \u203B \uBA54\uD0C0\uB7EC\uB108(\uC790\uB3D9 \uC2E4\uD589) \uC790\uB9AC \u2014 \uD604\uC7AC\uB294 \uBB36\uC74C \uC548\uB0B4\uB9CC(lite)."));
+  printNextStep({
+    message: "\uAC80\uC99D \uD1B5\uACFC \uD6C4 \uC800\uC7A5\uD558\uC138\uC694:",
+    command: "vhk save",
+    cursorHint: "\uC800\uC7A5\uD574\uC918"
+  });
+}
+
+// src/lib/risk-policy.ts
+var HIGH_RISK_ACTIONS = [
+  "undo",
+  "deploy",
+  "publish",
+  "migrate",
+  "cloud-pull",
+  "resume",
+  "env-write",
+  "delete"
+];
+var STRICT_EXTRA_ACTIONS = /* @__PURE__ */ new Set(["save", "sync"]);
+var NL_GUARDED_ACTIONS = {
+  undo: "undo",
+  deploy: "deploy",
+  publish: "publish",
+  migrate: "migrate",
+  "cloud-pull": "cloud-pull",
+  env: "env-write",
+  save: "save",
+  sync: "sync"
+};
+function isHighRisk(action) {
+  return HIGH_RISK_ACTIONS.includes(action);
+}
+function resolveGuard(action, mode2, channel) {
+  const guarded = isHighRisk(action) || mode2 === "strict" && STRICT_EXTRA_ACTIONS.has(action);
+  if (!guarded) return "allow";
+  if (mode2 === "lite") return "warn";
+  return channel === "cli" ? "confirm" : "preview";
+}
+
+// src/lib/safety-guard.ts
+async function runGuarded(action, deps, run) {
+  const mode2 = deps.mode ?? readConfig().safetyMode;
+  const log2 = deps.log ?? (() => {
+  });
+  const guard = resolveGuard(action, mode2, deps.channel);
+  if (guard === "allow") {
+    return { outcome: { ran: true, guard, reason: "low-risk" }, result: await run() };
+  }
+  if (guard === "warn") {
+    log2(`\u26A0\uFE0F \uC704\uD5D8 \uC791\uC5C5(${action}) \u2014 lite \uBAA8\uB4DC: \uACBD\uACE0\uB9CC \uD558\uACE0 \uC9C4\uD589\uD569\uB2C8\uB2E4.`);
+    return { outcome: { ran: true, guard, reason: "lite-warn" }, result: await run() };
+  }
+  if (guard === "confirm") {
+    if (deps.approved === true) {
+      return { outcome: { ran: true, guard, reason: "approved" }, result: await run() };
+    }
+    const tty = deps.isTTY ?? !!process.stdout.isTTY;
+    if (tty && deps.confirm) {
+      const ok = await deps.confirm();
+      if (ok) return { outcome: { ran: true, guard, reason: "confirmed" }, result: await run() };
+      log2(`\uCDE8\uC18C\uB428 \u2014 ${action} \uC744(\uB97C) \uC2E4\uD589\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.`);
+      return { outcome: { ran: false, guard, reason: "declined" } };
+    }
+    log2(`\u26A0\uFE0F \uC704\uD5D8 \uC791\uC5C5(${action}) \u2014 \uD655\uC778 \uBD88\uAC00(\uBE44\uB300\uD654\uD615). \uC2E4\uD589\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. (--yes \uB85C \uBA85\uC2DC \uC2B9\uC778)`);
+    return { outcome: { ran: false, guard, reason: "no-confirm" } };
+  }
+  log2(`\u{1F50E} \uC704\uD5D8 \uC791\uC5C5(${action}) \uBBF8\uB9AC\uBCF4\uAE30 \u2014 \uC2E4\uD589 \uC804 \uD655\uC778\uC774 \uD544\uC694\uD569\uB2C8\uB2E4. (Safety Mode: ${mode2})`);
+  if (deps.approved === true) {
+    return { outcome: { ran: true, guard, reason: "approved" }, result: await run() };
+  }
+  log2(`\uC2E4\uD589\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4 \u2014 \uBA85\uC2DC\uC801 \uD655\uC778(\uC2B9\uC778 \uD50C\uB798\uADF8) \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.`);
+  return { outcome: { ran: false, guard, reason: "preview-no-approve" } };
+}
+
 // src/lib/nlp-run.ts
 async function dispatchNlpRoute(route, input) {
   switch (route.command) {
@@ -4946,6 +5481,8 @@ async function dispatchNlpRoute(route, input) {
       return save();
     case "undo":
       return undo();
+    case "restore":
+      return restore(route.args?.[0]);
     case "status":
       return status();
     case "diff":
@@ -4993,113 +5530,174 @@ async function dispatchNlpRoute(route, input) {
       if (sub === "next") return goalNext();
       if (sub === "check") return goalCheck({});
       if (sub === "done") return goalDone({});
+      if (sub === "sync") {
+        await goalSync();
+        return;
+      }
       return goalList();
     }
+    case "help":
+      return quickActions();
+    case "mode":
+      return mode();
+    case "verify":
+      return verify();
   }
 }
+var STATE_CHANGING_COMMANDS = /* @__PURE__ */ new Set([
+  "start",
+  "init"
+]);
+function requiresConfirmation(route) {
+  const goalSync2 = route.command === "goal" && route.args?.[0] === "sync";
+  return route.confidence === "low" || STATE_CHANGING_COMMANDS.has(route.command) || goalSync2;
+}
 async function runNaturalLanguageRoute(input) {
   const route = routeNaturalLanguage(input);
   if (!route) {
-    console.log(chalk27.yellow(`
+    console.log(chalk32.yellow(`
   \u2753 "${input}" \u2014 ${ko.nlp.notMatched}
 `));
     return;
   }
   console.log("");
-  console.log(chalk27.cyan(`  \u{1F4AC} "${input}"`));
-  console.log(chalk27.cyan(`  \u2192 ${route.explanation}`));
-  if (route.confidence === "low") {
-    const { confirm } = await inquirer11.prompt([{
+  console.log(chalk32.cyan(`  \u{1F4AC} "${input}"`));
+  console.log(chalk32.cyan(`  \u2192 ${route.explanation}`));
+  if (requiresConfirmation(route)) {
+    const { confirm } = await inquirer12.prompt([{
       type: "confirm",
       name: "confirm",
       message: `${route.explanation} \u2014 ${ko.nlp.matched}`,
       default: true
     }]);
     if (!confirm) {
-      console.log(chalk27.dim(`  ${ko.nlp.menuHint}`));
+      console.log(chalk32.dim(`  ${ko.nlp.menuHint}`));
       return;
     }
   }
   console.log("");
+  const riskAction = NL_GUARDED_ACTIONS[route.command];
+  if (riskAction) {
+    await runGuarded(
+      riskAction,
+      { channel: "nl", approved: false, log: (m) => console.log(chalk32.yellow(`  ${m}`)) },
+      () => dispatchNlpRoute(route, input)
+    );
+    return;
+  }
   await dispatchNlpRoute(route, input);
 }
 
 // src/commands/agent.ts
-import chalk28 from "chalk";
+import chalk33 from "chalk";
 function activeGoalId() {
   const goals = listGoals("goals");
   const id = selectActiveId(goals);
   return id ?? void 0;
 }
 async function blocker(description) {
-  console.log(chalk28.bold(`
+  console.log(chalk33.bold(`
 ${ko.agent.blockerTitle}
 `));
   if (!description || !description.trim()) {
-    console.log(chalk28.red("  \u274C \uBE14\uB85C\uCEE4 \uC124\uBA85\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
-    console.log(chalk28.dim('  \uC608: vhk blocker "tsc \uC5D0\uB7EC \u2014 simple-git \uD0C0\uC785 \uD638\uD658"'));
+    console.log(chalk33.red("  \u274C \uBE14\uB85C\uCEE4 \uC124\uBA85\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
+    console.log(chalk33.dim('  \uC608: vhk blocker "tsc \uC5D0\uB7EC \u2014 simple-git \uD0C0\uC785 \uD638\uD658"'));
     process.exitCode = 1;
     return;
   }
   const goalId = activeGoalId();
   const r = appendBlocker(description, goalId);
-  console.log(chalk28.green(`  \u2705 blocker \uAE30\uB85D (\uD604\uC7AC \uD65C\uC131 ${r.count}\uAC74)`));
+  console.log(chalk33.green(`  \u2705 blocker \uAE30\uB85D (\uD604\uC7AC \uD65C\uC131 ${r.count}\uAC74)`));
   if (r.hardStopTripped) {
-    console.log(chalk28.red.bold("  \u{1F6D1} HARD_STOP \uC790\uB3D9 \uC0DD\uC131 \u2014 \uBAA8\uB4E0 \uC790\uB3D9\uD654 \uC911\uB2E8."));
-    console.log(chalk28.yellow("     \uC0AC\uB78C \uAC80\uD1A0 \uD6C4 `vhk resume --confirm` \uC73C\uB85C\uB9CC \uD574\uC81C."));
+    console.log(chalk33.red.bold("  \u{1F6D1} HARD_STOP \uC790\uB3D9 \uC0DD\uC131 \u2014 \uBAA8\uB4E0 \uC790\uB3D9\uD654 \uC911\uB2E8."));
+    console.log(chalk33.yellow("     \uC0AC\uB78C \uAC80\uD1A0 \uD6C4 `vhk resume --confirm` \uC73C\uB85C\uB9CC \uD574\uC81C."));
     process.exitCode = 2;
   }
 }
 async function learn(lesson) {
-  console.log(chalk28.bold(`
+  console.log(chalk33.bold(`
 ${ko.agent.learnTitle}
 `));
   if (!lesson || !lesson.trim()) {
-    console.log(chalk28.red("  \u274C \uAD50\uD6C8 \uB0B4\uC6A9\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
-    console.log(chalk28.dim('  \uC608: vhk learn "PowerShell \uC5D0\uC11C\uB294 ; \uC0AC\uC6A9 (&& \uBBF8\uC9C0\uC6D0)"'));
+    console.log(chalk33.red("  \u274C \uAD50\uD6C8 \uB0B4\uC6A9\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
+    console.log(chalk33.dim('  \uC608: vhk learn "PowerShell \uC5D0\uC11C\uB294 ; \uC0AC\uC6A9 (&& \uBBF8\uC9C0\uC6D0)"'));
     process.exitCode = 1;
     return;
   }
   const goalId = activeGoalId();
   appendLearning(lesson, goalId);
-  console.log(chalk28.green("  \u2705 learnings.md append."));
+  console.log(chalk33.green("  \u2705 learnings.md append."));
   console.log(
-    chalk28.dim("  \uACB0\uC815\uC0AC\uD56D(decision)\uC740 `vhk memory add` \uB85C \uBCC4\uB3C4 \uAE30\uB85D \u2014 SoT \uBD84\uB9AC.")
+    chalk33.dim("  \uACB0\uC815\uC0AC\uD56D(decision)\uC740 `vhk memory add` \uB85C \uBCC4\uB3C4 \uAE30\uB85D \u2014 SoT \uBD84\uB9AC.")
   );
 }
 async function resume(opts = {}) {
-  console.log(chalk28.bold(`
+  console.log(chalk33.bold(`
 ${ko.agent.resumeTitle}
 `));
   if (!isHardStopActive()) {
-    console.log(chalk28.dim("  HARD_STOP \uD65C\uC131 \uC544\uB2D8 \u2014 \uD560 \uC77C \uC5C6\uC74C."));
+    console.log(chalk33.dim("  HARD_STOP \uD65C\uC131 \uC544\uB2D8 \u2014 \uD560 \uC77C \uC5C6\uC74C."));
     return;
   }
   const reason = readHardStopReason();
   if (reason) {
-    console.log(chalk28.yellow("  \u{1F4CB} HARD_STOP \uC0AC\uC720:"));
-    console.log(chalk28.dim(`     ${reason.split("\n").join("\n     ")}`));
+    console.log(chalk33.yellow("  \u{1F4CB} HARD_STOP \uC0AC\uC720:"));
+    console.log(chalk33.dim(`     ${reason.split("\n").join("\n     ")}`));
     console.log("");
   }
   if (!opts.confirm) {
     console.log(
-      chalk28.red(
+      chalk33.red(
         "  \u274C --confirm \uD50C\uB798\uADF8 \uC5C6\uC774\uB294 \uD574\uC81C\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (\uC790\uB3D9 \uD638\uCD9C \uAE08\uC9C0)."
       )
     );
-    console.log(chalk28.yellow("     \uC0AC\uC720\uB97C \uD655\uC778\uD55C \uD6C4 \uB2E4\uC2DC: vhk resume --confirm"));
+    console.log(chalk33.yellow("     \uC0AC\uC720\uB97C \uD655\uC778\uD55C \uD6C4 \uB2E4\uC2DC: vhk resume --confirm"));
     process.exitCode = 1;
     return;
   }
   const removed = clearHardStop();
   if (removed) {
-    console.log(chalk28.green("  \u2705 HARD_STOP \uD574\uC81C. \uC790\uB3D9\uD654 \uC7AC\uAC1C \uAC00\uB2A5."));
+    console.log(chalk33.green("  \u2705 HARD_STOP \uD574\uC81C. \uC790\uB3D9\uD654 \uC7AC\uAC1C \uAC00\uB2A5."));
   } else {
-    console.log(chalk28.dim("  \uD30C\uC77C\uC774 \uC774\uBBF8 \uC5C6\uC74C \u2014 no-op."));
+    console.log(chalk33.dim("  \uD30C\uC77C\uC774 \uC774\uBBF8 \uC5C6\uC74C \u2014 no-op."));
   }
 }
 
 // src/index.ts
+async function guardCli(action, approved, run) {
+  if (!ensureNotHardStopped(action)) return;
+  await runGuarded(
+    action,
+    {
+      channel: "cli",
+      approved,
+      confirm: async () => {
+        const { ok } = await inquirer13.prompt([{
+          type: "confirm",
+          name: "ok",
+          message: `\u26A0\uFE0F \uC704\uD5D8 \uC791\uC5C5(${action})\uC744 \uC2E4\uD589\uD560\uAE4C\uC694?`,
+          default: false
+        }]);
+        return ok;
+      },
+      log: (m) => console.log(chalk34.yellow(`  ${m}`))
+    },
+    run
+  );
+}
+async function guardCliDefer(action, approved, run) {
+  await runGuarded(
+    action,
+    {
+      channel: "cli",
+      approved,
+      // TTY 면 통과(명령이 자체 확인), 비대화형은 confirm 불가 → 가드가 차단.
+      confirm: async () => !!process.stdout.isTTY,
+      log: (m) => console.log(chalk34.yellow(`  ${m}`))
+    },
+    run
+  );
+}
 var program = new Command();
 var defaultHelp = new Help();
 var KO_ALIASES = {
@@ -5114,6 +5712,7 @@ var KO_ALIASES = {
   doctor: "\uD658\uACBD",
   save: "\uC800\uC7A5",
   undo: "\uB418\uB3CC\uB9AC\uAE30",
+  restore: "\uBCF5\uC6D0",
   status: "\uC0C1\uD0DC",
   diff: "\uBCC0\uACBD",
   deploy: "\uBC30\uD3EC",
@@ -5165,7 +5764,9 @@ program.command("gate").alias("\uAC80\uC99D").alias("\uC544\uC774\uB514\uC5B4").
 program.command("start").alias("\uC2DC\uC791").alias("\uC0C8\uD504\uB85C\uC81D\uD2B8").description("\uC0C8 \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791 \uB9C8\uBC95\uC0AC \u2014 git init + \uBB38\uC11C + MCP + \uCEE8\uD14D\uC2A4\uD2B8 \uD55C \uBC88\uC5D0").option("--from-notion <url>", "Notion PRD \uD398\uC774\uC9C0\uC5D0\uC11C import").option("--name <name>", "\uD504\uB85C\uC81D\uD2B8 \uC774\uB984").option("--description <desc>", "\uD55C \uC904 \uC124\uBA85").option("--type <type>", "\uD504\uB85C\uC81D\uD2B8 \uC720\uD615 (webapp|extension|cli|notion|mobile)").option("-y, --yes", "\uBAA8\uB4E0 \uD655\uC778 \uC2A4\uD0B5 (\uC790\uB3D9 yes)").action(start);
 program.command("init").alias("\uCD08\uAE30\uD654").alias("\uB9CC\uB4E4\uAE30").description("\uD558\uB124\uC2A4 \uD30C\uC77C\uB9CC \uC0DD\uC131 (git/MCP/context\uB294 \uC81C\uC678) \u2014 \uBCF4\uD1B5 vhk start \uAD8C\uC7A5").option("--skip-gate", "gate \uAC80\uC99D \uC2A4\uD0B5").option("--from-notion <url>", "Notion PRD \uD398\uC774\uC9C0\uC5D0\uC11C import").option("--name <name>", "\uD504\uB85C\uC81D\uD2B8 \uC774\uB984").option("--description <desc>", "\uD55C \uC904 \uC124\uBA85").option("--type <type>", "\uD504\uB85C\uC81D\uD2B8 \uC720\uD615 (webapp|extension|cli|notion|mobile)").option("-y, --yes", "\uC2A4\uD0DD \uD655\uC778 \uC2A4\uD0B5").action(init);
 program.command("recap").alias("\uC815\uB9AC").alias("\uC624\uB298").description("\uC624\uB298 \uD55C \uC77C \uC815\uB9AC + ADR/\uD2B8\uB7EC\uBE14\uC288\uD305 \uC790\uB3D9 \uBD84\uB9AC").option("--since <date>", "\uBD84\uC11D \uC2DC\uC791\uC77C (YYYY-MM-DD)").action(recap);
-program.command("sync").alias("\uB9DE\uCD94\uAE30").alias("\uADDC\uCE59").description("RULES.md \u2192 .cursorrules + CLAUDE.md \uB3D9\uAE30\uD654").action(sync);
+program.command("sync").alias("\uB9DE\uCD94\uAE30").alias("\uADDC\uCE59").option("--dry-run", "\uBBF8\uB9AC\uBCF4\uAE30\uB9CC \u2014 \uD30C\uC77C \uBCC0\uACBD \uC5C6\uC74C").option("-y, --yes", "drift \uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uC0DD\uB7B5(\uB36E\uC5B4\uC4F0\uAE30 \uB3D9\uC758)").description("RULES.md \u2192 .cursorrules + CLAUDE.md \uB3D9\uAE30\uD654 (\uB36E\uC5B4\uC4F0\uAE30 \uC804 \uC790\uB3D9 \uBC31\uC5C5)").action(async (opts) => {
+  await guardCli("sync", opts?.yes === true, () => sync(opts));
+});
 program.command("check").alias("\uC810\uAC80").alias("\uB9B0\uD2B8").option("--goal <id>", "goal id \uC9C0\uC815 \uC2DC scripts/check-goal-<id>.sh \uAC8C\uC774\uD2B8 \uC2E4\uD589").description("RULES.md \uADDC\uCE59 \uC810\uAC80 \u2014 \uCF54\uB4DC \uC704\uBC18 \uAC80\uC0AC (\uB610\uB294 --goal <id> \uB85C goal \uAC8C\uC774\uD2B8)").action(async (opts) => {
   await check(opts);
 });
@@ -5177,16 +5778,19 @@ var cloudCmd = program.command("cloud").alias("\uD074\uB77C\uC6B0\uB4DC").descri
 cloudCmd.command("push").alias("\uC62C\uB9AC\uAE30").description(".vhk/ \uB97C secret gist \uB85C \uBC31\uC5C5").action(async () => {
   await cloudPush();
 });
-cloudCmd.command("pull").alias("\uB0B4\uB9AC\uAE30").argument("[gistId]", "\uBCF5\uC6D0\uD560 gist id (\uC0DD\uB7B5 \uC2DC .vhk/cloud.json \uC0AC\uC6A9)").description("gist \uC5D0\uC11C .vhk/ \uBCF5\uC6D0").action(async (gistId) => {
-  await cloudPull(gistId);
+cloudCmd.command("pull").alias("\uB0B4\uB9AC\uAE30").argument("[gistId]", "\uBCF5\uC6D0\uD560 gist id (\uC0DD\uB7B5 \uC2DC .vhk/cloud.json \uC0AC\uC6A9)").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC2E4\uD589 (\uC704\uD5D8 \uC791\uC5C5 \uBA85\uC2DC \uC2B9\uC778)").description("gist \uC5D0\uC11C .vhk/ \uBCF5\uC6D0").action(async (gistId, opts) => {
+  await guardCli("cloud-pull", opts?.yes === true, () => cloudPull(gistId));
 });
 program.command("ship").alias("\uCD9C\uD558").description("\uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 + \uD68C\uACE0 + \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131").action(ship);
 program.command("doctor").alias("\uD658\uACBD").alias("\uC9C4\uB2E8").description("\uAC1C\uBC1C \uD658\uACBD \uC810\uAC80 \u2014 Node/Git/npm \uC0C1\uD0DC \uD655\uC778").action(doctor);
-program.command("save").alias("\uC800\uC7A5").description("\uBCC0\uACBD\uC0AC\uD56D \uC800\uC7A5 (git add \u2192 commit \u2192 push)").action(async () => {
-  await save();
+program.command("save").alias("\uC800\uC7A5").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC2E4\uD589 (strict \uBAA8\uB4DC \uAC00\uB4DC \uBA85\uC2DC \uC2B9\uC778)").description("\uBCC0\uACBD\uC0AC\uD56D \uC800\uC7A5 (git add \u2192 commit \u2192 push)").action(async (opts) => {
+  await guardCli("save", opts?.yes === true, () => save());
 });
-program.command("undo").alias("\uB418\uB3CC\uB9AC\uAE30").description("\uCD5C\uADFC \uCEE4\uBC0B \uB418\uB3CC\uB9AC\uAE30").action(async () => {
-  await undo();
+program.command("undo").alias("\uB418\uB3CC\uB9AC\uAE30").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC2E4\uD589 (\uC704\uD5D8 \uC791\uC5C5 \uBA85\uC2DC \uC2B9\uC778)").description("\uCD5C\uADFC \uCEE4\uBC0B \uB418\uB3CC\uB9AC\uAE30").action(async (opts) => {
+  await guardCliDefer("undo", opts?.yes === true, () => undo());
+});
+program.command("restore").alias("\uBCF5\uC6D0").argument("[id]", "\uBCF5\uC6D0\uD560 \uBC31\uC5C5 id (\uC0DD\uB7B5 \uC2DC \uBAA9\uB85D\uC5D0\uC11C \uC120\uD0DD)").description("sync \uBC31\uC5C5 \uBCF5\uC6D0 (.vhk/backups/ \u2014 \uC5B8\uCEE4\uBC0B \uB36E\uC5B4\uC4F0\uAE30 \uBCF5\uAD6C)").action(async (id) => {
+  await restore(id);
 });
 program.command("status").alias("\uC0C1\uD0DC").description("\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uB300\uC2DC\uBCF4\uB4DC").action(async () => {
   await status();
@@ -5198,17 +5802,17 @@ program.command("mcp").description("MCP \uC11C\uBC84 \uC2DC\uC791 (24 tool stdio
 program.command("mcp-init").alias("mcp\uC124\uC815").description("Cursor\xB7Claude Desktop MCP \uC5F0\uB3D9 \uC124\uC815 \uC790\uB3D9 \uC0DD\uC131 (.cursor/mcp.json)").action(async () => {
   await mcpInit();
 });
-program.command("deploy").alias("\uBC30\uD3EC").description("\uD504\uB85C\uB355\uC158 \uBC30\uD3EC (Vercel/Netlify/Cloudflare \uC790\uB3D9 \uAC10\uC9C0)").action(async () => {
-  await deploy();
+program.command("deploy").alias("\uBC30\uD3EC").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC2E4\uD589 (\uC704\uD5D8 \uC791\uC5C5 \uBA85\uC2DC \uC2B9\uC778)").description("\uD504\uB85C\uB355\uC158 \uBC30\uD3EC (Vercel/Netlify/Cloudflare \uC790\uB3D9 \uAC10\uC9C0)").action(async (opts) => {
+  await guardCli("deploy", opts?.yes === true, () => deploy());
 });
-program.command("env").alias("\uD658\uACBD\uBCC0\uC218").description(".env \u2192 .env.example \uB3D9\uAE30\uD654 + .gitignore \uC790\uB3D9 \uCD94\uAC00").action(async () => {
-  await env();
+program.command("env").alias("\uD658\uACBD\uBCC0\uC218").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC2E4\uD589 (\uC704\uD5D8 \uC791\uC5C5 \uBA85\uC2DC \uC2B9\uC778)").description(".env \u2192 .env.example \uB3D9\uAE30\uD654 + .gitignore \uC790\uB3D9 \uCD94\uAC00").action(async (opts) => {
+  await guardCli("env-write", opts?.yes === true, () => env());
 });
 program.command("env-check").alias("\uD658\uACBD\uBCC0\uC218\uC810\uAC80").description("\uD544\uC218 \uD658\uACBD\uBCC0\uC218 \uB204\uB77D \uAC80\uC0AC").action(async () => {
   await envCheck();
 });
-program.command("publish").alias("\uCD9C\uC2DC").description("npm \uBC30\uD3EC (\uBC84\uC804 \uBC94\uD504 \u2192 \uBE4C\uB4DC \u2192 \uD14C\uC2A4\uD2B8 \u2192 publish)").action(async () => {
-  await publish();
+program.command("publish").alias("\uCD9C\uC2DC").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC2E4\uD589 (\uC704\uD5D8 \uC791\uC5C5 \uBA85\uC2DC \uC2B9\uC778)").description("npm \uBC30\uD3EC (\uBC84\uC804 \uBC94\uD504 \u2192 \uBE4C\uB4DC \u2192 \uD14C\uC2A4\uD2B8 \u2192 publish)").action(async (opts) => {
+  await guardCli("publish", opts?.yes === true, () => publish());
 });
 program.command("design").alias("\uB514\uC790\uC778").description("\uB514\uC790\uC778 \uD1A0\uD070 \uC0DD\uC131 (Tailwind config \uB610\uB294 CSS \uBCC0\uC218)").action(async () => {
   await design();
@@ -5237,14 +5841,20 @@ program.command("harness").alias("\uD558\uB124\uC2A4").description("\uD1B5\uD569
 program.command("audit").alias("\uAC10\uC0AC").option("--fix", "\uC790\uB3D9 \uC218\uC815 \uC2DC\uB3C4").description("\uBCF4\uC548 \uCDE8\uC57D\uC810 \uAC10\uC0AC (npm audit \uB798\uD551)").action(async (opts) => {
   await audit(opts.fix);
 });
-program.command("migrate [target]").alias("\uC804\uD658").description("\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658 (npm/yarn/pnpm)").action(async (target) => {
-  await migrate(target);
+program.command("migrate [target]").alias("\uC804\uD658").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC2E4\uD589 (\uC704\uD5D8 \uC791\uC5C5 \uBA85\uC2DC \uC2B9\uC778)").description("\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658 (npm/yarn/pnpm) \u2014 \uD328\uD0A4\uC9C0\uB9E4\uB2C8\uC800\uB9CC \uBC14\uAFC8, \uC124\uC815 \uB9C8\uC774\uADF8\uB808\uC774\uC158 \uC544\uB2D8").action(async (target, opts) => {
+  await guardCli("migrate", opts?.yes === true, () => migrate(target));
 });
 program.command("update").alias("\uC5C5\uB370\uC774\uD2B8").description("VHK CLI \uCD5C\uC2E0 \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8").action(async () => {
   await update();
 });
-program.command("context").alias("\uB9E5\uB77D").description("\uD504\uB85C\uC81D\uD2B8 \uB9E5\uB77D \uD30C\uC77C \uC0DD\uC131 (.vhk/context.md)").action(async () => {
-  await context();
+program.command("context").alias("\uB9E5\uB77D").option("--compact", "\uD1A0\uD070 \uC808\uAC10\uD615 \u2014 \uC804\uCCB4 \uBA85\uB839 \uBAA9\uB85D/\uAE4A\uC740 \uD2B8\uB9AC \uC0DD\uB7B5, \uCC38\uC870 \uB9C1\uD06C \uC911\uC2EC").description("\uD504\uB85C\uC81D\uD2B8 \uB9E5\uB77D \uD30C\uC77C \uC0DD\uC131 (.vhk/context.md)").action(async (opts) => {
+  await context({ compact: opts.compact });
+});
+program.command("mode [target]").alias("\uBAA8\uB4DC").description("Safety Mode \uC870\uD68C/\uBCC0\uACBD (lite|standard|strict) \u2014 \uC704\uD5D8 \uC791\uC5C5 \uAC00\uB4DC \uAC15\uB3C4").action(async (target) => {
+  await mode(target);
+});
+program.command("verify").alias("\uC0AC\uC804\uC810\uAC80").description("\uC800\uC7A5/\uC704\uD5D8 \uC791\uC5C5 \uC804 \uAC80\uC99D \uBB36\uC74C \uC548\uB0B4 (lite)").action(async () => {
+  await verify();
 });
 program.command("context-show").alias("\uB9E5\uB77D\uBCF4\uAE30").description("\uD604\uC7AC \uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C \uB0B4\uC6A9 \uCD9C\uB825").action(async () => {
   await contextShow();
@@ -5265,7 +5875,7 @@ memoryCmd.command("remove <index>").alias("\uC0AD\uC81C").description("\uAE30\uC
 program.command("brief").alias("\uBE0C\uB9AC\uD551").description("\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uC694\uC57D \uBCF4\uACE0\uC11C \uC0DD\uC131 (.vhk/brief.md)").action(async () => {
   await brief();
 });
-var goalCmd = program.command("goal").alias("\uBAA9\uD45C").description("Goal \uB2E8\uACC4\uBCC4 \uBBF8\uC158 \uAD00\uB9AC (init / list / next / check / done)").action(async () => {
+var goalCmd = program.command("goal").alias("\uBAA9\uD45C").description("Goal \uB2E8\uACC4\uBCC4 \uBBF8\uC158 \uAD00\uB9AC (init / list / next / check / done / sync)").action(async () => {
   await goalList();
 });
 goalCmd.command("list").alias("\uBAA9\uB85D").description("goals/*.md \uBAA9\uB85D (id, status, priority, title)").action(async () => {
@@ -5277,12 +5887,15 @@ goalCmd.command("next").alias("\uB2E4\uC74C").description("active goal \uC790\uB
 goalCmd.command("init").alias("\uCD08\uAE30\uD654").description("\uD604\uC7AC \uD504\uB85C\uC81D\uD2B8\uC5D0 goals/ + docs/state/ \uC2A4\uCE90\uD3F4\uB529 (\uAE30\uC874 \uD30C\uC77C \uBCF4\uC874)").action(async () => {
   await goalInit();
 });
-goalCmd.command("check").alias("\uAC80\uC99D").option("--id <id>", "goal id \uC9C0\uC815 (\uC0DD\uB7B5 \uC2DC active goal)").description("scripts/check-goal-<id>.sh \uC2E4\uD589 + exit code \uC804\uB2EC").action(async (opts) => {
+goalCmd.command("check").alias("\uAC80\uC99D").option("--id <id>", "goal id \uC9C0\uC815 (\uC0DD\uB7B5 \uC2DC active goal)").description("scripts/check-goal-<id>.{mjs,sh} \uC2E4\uD589 + exit code \uC804\uB2EC (.mjs \uC6B0\uC120)").action(async (opts) => {
   await goalCheck(opts);
 });
 goalCmd.command("done").alias("\uC644\uB8CC").option("--id <id>", "goal id \uC9C0\uC815 (\uC0DD\uB7B5 \uC2DC active goal)").description("\uAC8C\uC774\uD2B8 \uC7AC\uAC80\uC99D \u2192 \uD1B5\uACFC \uC2DC frontmatter status=DONE \uC73C\uB85C \uC804\uC774").action(async (opts) => {
   await goalDone(opts);
 });
+goalCmd.command("sync").alias("\uB3D9\uAE30\uD654").description("goals/*.md \uC2A4\uCE94 \u2192 \uB204\uB77D\uB41C check-goal-<id>.mjs \uAC8C\uC774\uD2B8 \uC2A4\uD06C\uB9BD\uD2B8 \uBC31\uD544 (idempotent)").action(async () => {
+  await goalSync();
+});
 program.command("blocker <description>").alias("\uBE14\uB85C\uCEE4").description("\uBE14\uB85C\uCEE4 \uAE30\uB85D \u2192 docs/state/blockers.md append (3\uAC74 \uB204\uC801 \uC2DC HARD_STOP \uC790\uB3D9 \uC0DD\uC131)").action(async (description) => {
   await blocker(description);
 });
@@ -5290,7 +5903,7 @@ program.command("learn <lesson>").alias("\uAD50\uD6C8").description("\uAD50\uD6C
   await learn(lesson);
 });
 program.command("resume").alias("\uC7AC\uAC1C").option("--confirm", "\uC0AC\uB78C \uD655\uC778 \u2014 \uC790\uB3D9 \uD638\uCD9C \uAE08\uC9C0 (Forbidden \uC704\uBC18)").description(".vhk/HARD_STOP \uD574\uC81C (\uC0AC\uC6A9\uC790\uAC00 \uC0AC\uC720 \uD655\uC778 \uD6C4 --confirm \uD544\uC694)").action(async (opts) => {
-  await resume(opts);
+  await guardCliDefer("resume", opts?.confirm === true, () => resume(opts));
 });
 program.on("command:*", async (operands) => {
   const unknown = operands[0] ?? "";
@@ -5300,7 +5913,7 @@ program.on("command:*", async (operands) => {
 });
 program.action(async () => {
   console.log("\n\u{1F3AF} VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58\n");
-  const { choice } = await inquirer12.prompt([{
+  const { choice } = await inquirer13.prompt([{
     type: "list",
     name: "choice",
     message: "\uBB58 \uB3C4\uC640\uB4DC\uB9B4\uAE4C\uC694?",
@@ -5331,24 +5944,40 @@ program.action(async () => {
     case "secure":
       return secure();
     case "sync":
-      return sync();
+      return guardCli("sync", false, () => sync());
     case "doctor":
       return doctor();
     case "ship":
       return ship();
     case "save":
-      return save();
+      return guardCli("save", false, () => save());
     case "undo":
-      return undo();
+      return guardCliDefer("undo", false, () => undo());
     case "status":
       return status();
     case "diff":
       return diff();
   }
 });
-var nlInput = detectNaturalLanguageInput(process.argv);
-if (nlInput !== null) {
-  await runNaturalLanguageRoute(nlInput);
-} else {
-  await program.parseAsync(process.argv);
+var isMainModule = !!process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+if (isMainModule) {
+  try {
+    const nlInput = detectNaturalLanguageInput(process.argv);
+    if (nlInput !== null) {
+      await runNaturalLanguageRoute(nlInput);
+    } else {
+      await program.parseAsync(process.argv);
+    }
+  } catch (err) {
+    if (isPromptAbortError(err)) {
+      console.error(chalk34.yellow("\n  \u26A0\uFE0F  \uB300\uD654\uD615 \uC785\uB825\uC774 \uCDE8\uC18C/\uC885\uB8CC\uB410\uC2B5\uB2C8\uB2E4. (\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0\uC11C\uB294 \uD574\uB2F9 \uBA85\uB839\uC744 \uC4F8 \uC218 \uC5C6\uC5B4\uC694)"));
+    } else {
+      console.error(chalk34.red(`
+\u274C ${err instanceof Error ? err.message : String(err)}`));
+    }
+    process.exitCode = 1;
+  }
 }
+export {
+  program
+};