@byh3071/vhk 2.3.2 → 2.4.1

package/dist/{chunk-OHGVVAKT.js → chunk-Y7SJVHGS.js}

@@ -874,7 +874,10 @@ var ko = {
     testFailed: "\uD14C\uC2A4\uD2B8 \uC2E4\uD328",
     publishing: "npm \uBC30\uD3EC \uC911...",
     publishSuccess: "npm \uBC30\uD3EC \uC131\uACF5!",
-    publishFailed: "npm \uBC30\uD3EC \uC2E4\uD328"
+    publishFailed: "npm \uBC30\uD3EC \uC2E4\uD328",
+    // 발행 전 안전 가드 — feature 브랜치/미커밋 발행로 픽스 누락본이 latest 로 나가는 사고 방지(v2.3.1 사례)
+    preflightWrongBranch: (branch, def) => `\uBC1C\uD589 \uC911\uB2E8 \u2014 \uD604\uC7AC '${branch}' \uBE0C\uB79C\uCE58\uC785\uB2C8\uB2E4. \uBC1C\uD589\uC740 '${def}' \uC5D0\uC11C\uB9CC \uD558\uC138\uC694 (feature \uBE0C\uB79C\uCE58 \uBC1C\uD589 \u2192 \uD53D\uC2A4 \uB204\uB77D\uBCF8\uC774 npm latest \uB85C \uB098\uAC00\uB294 \uC0AC\uACE0 \uBC29\uC9C0). git checkout ${def} && git pull \uD6C4 \uC7AC\uC2DC\uB3C4.`,
+    preflightDirty: "\uBC1C\uD589 \uC911\uB2E8 \u2014 \uCEE4\uBC0B \uC548 \uB41C \uBCC0\uACBD\uC774 \uC788\uC2B5\uB2C8\uB2E4. \uBC1C\uD589 \uC804 \uCEE4\uBC0B/\uC815\uB9AC\uD558\uC138\uC694 (untracked \uD30C\uC77C\uC740 \uBB34\uC2DC)."
   },
   harness: {
     title: "\uD1B5\uD569 \uD488\uC9C8 \uC810\uAC80"
@@ -919,6 +922,10 @@ var ko = {
     learnTitle: "\u{1F9E0} Learning \uAE30\uB85D",
     resumeTitle: "\u25B6\uFE0F  HARD_STOP \uD574\uC81C"
   },
+  work: {
+    workTitle: "\u{1F680} vhk work \u2014 \uC791\uC5C5 \uC2DC\uC791/\uC774\uC5B4\uD558\uAE30",
+    handoffTitle: "\u23F8\uFE0F  vhk work handoff \u2014 \uC911\uB2E8 \uC815\uB9AC"
+  },
   pattern: {
     detectTitle: "\uD328\uD134 \uAC10\uC9C0",
     listTitle: "\uD328\uD134 \uBAA9\uB85D",
@@ -1685,8 +1692,42 @@ ${ko.sync.done}`));
   });
 }
 
-// src/commands/deploy.ts
+// src/lib/version.ts
 import { existsSync as existsSync2 } from "fs";
+import { dirname, join as join2 } from "path";
+import { fileURLToPath } from "url";
+
+// src/lib/read-json.ts
+import { readFileSync as readFileSync2 } from "fs";
+function stripBom(text) {
+  return text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+}
+function readJsonFile(filePath) {
+  const raw = stripBom(readFileSync2(filePath, "utf-8"));
+  return JSON.parse(raw);
+}
+
+// src/lib/version.ts
+function getVhkVersion() {
+  const dir = dirname(fileURLToPath(import.meta.url));
+  for (const pkgPath of [
+    join2(dir, "../../package.json"),
+    join2(dir, "../package.json")
+  ]) {
+    try {
+      if (existsSync2(pkgPath)) {
+        const pkg = readJsonFile(pkgPath);
+        if (pkg.version) return pkg.version;
+      }
+    } catch {
+      continue;
+    }
+  }
+  return "0.0.0";
+}
+
+// src/commands/deploy.ts
+import { existsSync as existsSync3 } from "fs";
 import chalk4 from "chalk";
 import inquirer2 from "inquirer";
 
@@ -1787,7 +1828,7 @@ var PLATFORMS = {
 function detectPlatform() {
   for (const [key, config] of Object.entries(PLATFORMS)) {
     for (const file of config.detectFiles) {
-      if (existsSync2(file)) return key;
+      if (existsSync3(file)) return key;
     }
   }
   return null;
@@ -1856,8 +1897,8 @@ ${t("deploy.deploying")}
 }
 
 // src/commands/env.ts
-import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync, appendFileSync, readdirSync } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync, appendFileSync, readdirSync } from "fs";
+import { join as join3 } from "path";
 import chalk5 from "chalk";
 function parseEnvKeys(content) {
   return content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#")).map((line) => line.split("=")[0].trim()).filter(Boolean);
@@ -1874,7 +1915,7 @@ function loadDefinedEnvKeys(dir = ".") {
     if (!name.startsWith(".env")) continue;
     if (name.endsWith(".example") || name.endsWith(".sample")) continue;
     try {
-      for (const k of parseEnvKeys(readFileSync2(join2(dir, name), "utf-8"))) keys.add(k);
+      for (const k of parseEnvKeys(readFileSync3(join3(dir, name), "utf-8"))) keys.add(k);
     } catch {
     }
   }
@@ -1882,8 +1923,8 @@ function loadDefinedEnvKeys(dir = ".") {
 }
 function ensureGitignore() {
   const gitignorePath = ".gitignore";
-  if (existsSync3(gitignorePath)) {
-    const content = readFileSync2(gitignorePath, "utf-8");
+  if (existsSync4(gitignorePath)) {
+    const content = readFileSync3(gitignorePath, "utf-8");
     if (!content.split("\n").some((l) => l.trim() === ".env")) {
       appendFileSync(gitignorePath, "\n.env\n");
       console.log(chalk5.green("\n\u{1F512} .gitignore\uC5D0 .env \uCD94\uAC00\uB428"));
@@ -1896,12 +1937,12 @@ function ensureGitignore() {
 async function env() {
   console.log(chalk5.bold("\n\u{1F510} " + t("env.title")));
   console.log(chalk5.gray("\u2500".repeat(40)));
-  if (!existsSync3(".env")) {
+  if (!existsSync4(".env")) {
     console.log(chalk5.yellow("\n\u26A0\uFE0F  .env \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
     console.log(chalk5.gray("   .env \uD30C\uC77C\uC744 \uBA3C\uC800 \uB9CC\uB4E4\uC5B4\uC8FC\uC138\uC694."));
     return;
   }
-  const envContent = readFileSync2(".env", "utf-8");
+  const envContent = readFileSync3(".env", "utf-8");
   const keys = parseEnvKeys(envContent);
   if (keys.length === 0) {
     console.log(chalk5.yellow("\n\u{1F4ED} .env\uC5D0 \uD658\uACBD\uBCC0\uC218\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
@@ -1922,11 +1963,11 @@ async function env() {
 async function envCheck() {
   console.log(chalk5.bold("\n\u{1F50D} " + t("env.checkTitle")));
   console.log(chalk5.gray("\u2500".repeat(40)));
-  if (!existsSync3(".env.example")) {
+  if (!existsSync4(".env.example")) {
     console.log(chalk5.yellow("\n\u26A0\uFE0F  .env.example\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 vhk env\uB97C \uC2E4\uD589\uD558\uC138\uC694."));
     return;
   }
-  const requiredKeys = parseEnvKeys(readFileSync2(".env.example", "utf-8"));
+  const requiredKeys = parseEnvKeys(readFileSync3(".env.example", "utf-8"));
   const currentKeys = loadDefinedEnvKeys();
   const missing = requiredKeys.filter((k) => !currentKeys.includes(k));
   const extra = currentKeys.filter((k) => !requiredKeys.includes(k));
@@ -1949,22 +1990,10 @@ async function envCheck() {
 }
 
 // src/commands/publish.ts
-import { existsSync as existsSync4, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
 import chalk6 from "chalk";
 import inquirer3 from "inquirer";
 import ora from "ora";
-
-// src/lib/read-json.ts
-import { readFileSync as readFileSync3 } from "fs";
-function stripBom(text) {
-  return text.charCodeAt(0) === 65279 ? text.slice(1) : text;
-}
-function readJsonFile(filePath) {
-  const raw = stripBom(readFileSync3(filePath, "utf-8"));
-  return JSON.parse(raw);
-}
-
-// src/commands/publish.ts
 function bumpVersion(current, type) {
   const [major, minor, patch] = current.split(".").map((n) => parseInt(n, 10) || 0);
   switch (type) {
@@ -1976,8 +2005,28 @@ function bumpVersion(current, type) {
       return `${major}.${minor}.${patch + 1}`;
   }
 }
+function insertChangelogStub(content, version, date) {
+  const escaped = version.replace(/\./g, "\\.");
+  if (new RegExp(`^## \\[${escaped}\\]`, "m").test(content)) return content;
+  const stub = `## [${version}] - ${date}
+
+_\uBCC0\uACBD \uB0B4\uC5ED \uC791\uC131 \uD544\uC694._
+
+`;
+  const firstEntry = content.match(/^## \[\d+\.\d+\.\d+\]/m);
+  if (firstEntry && firstEntry.index !== void 0) {
+    return content.slice(0, firstEntry.index) + stub + content.slice(firstEntry.index);
+  }
+  return content.trimEnd() + "\n\n" + stub;
+}
+function bumpClaudeMdVersion(content, newVersion) {
+  return content.replace(/(\*\*버전:\*\*\s*v)\d+\.\d+\.\d+/, `$1${newVersion}`);
+}
 function gitPostRelease(newVersion) {
-  const add = safeExecFile("git", ["add", "package.json"]);
+  const filesToAdd = ["package.json"];
+  if (existsSync5("CHANGELOG.md")) filesToAdd.push("CHANGELOG.md");
+  if (existsSync5("CLAUDE.md")) filesToAdd.push("CLAUDE.md");
+  const add = safeExecFile("git", ["add", ...filesToAdd]);
   if (!add.ok) {
     return {
       added: false,
@@ -2018,10 +2067,31 @@ function gitPostRelease(newVersion) {
     pushed: push.ok && pushTags.ok
   };
 }
+function evaluatePublishPreflight(branch, trackedStatus, defaultBranch) {
+  if (branch !== defaultBranch) return { ok: false, code: "wrong-branch" };
+  if (trackedStatus.trim()) return { ok: false, code: "dirty" };
+  return { ok: true };
+}
+function publishPreflight() {
+  const br = safeExecFile("git", ["branch", "--show-current"]);
+  const branch = br.ok ? br.out.trim() : "";
+  const head = safeExecFile("git", ["symbolic-ref", "--short", "refs/remotes/origin/HEAD"]);
+  const defaultBranch = head.ok ? head.out.trim().split("/").pop() || "main" : "main";
+  const st = safeExecFile("git", ["status", "--porcelain", "--untracked-files=no"]);
+  const trackedStatus = st.ok ? st.out : "";
+  return { ...evaluatePublishPreflight(branch, trackedStatus, defaultBranch), branch, defaultBranch };
+}
 async function publish() {
   console.log(chalk6.bold("\n\u{1F4E6} " + t("publish.title")));
   console.log(chalk6.gray("\u2500".repeat(40)));
-  if (!existsSync4("package.json")) {
+  const pre = publishPreflight();
+  if (!pre.ok) {
+    const msg = pre.code === "wrong-branch" ? t("publish.preflightWrongBranch", pre.branch || "(detached)", pre.defaultBranch) : t("publish.preflightDirty");
+    console.log(chalk6.red(`
+\u274C ${msg}`));
+    return;
+  }
+  if (!existsSync5("package.json")) {
     console.log(chalk6.red("\u274C package.json\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4."));
     return;
   }
@@ -2053,13 +2123,25 @@ async function publish() {
   pkg.version = newVersion;
   writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
   console.log(chalk6.green("\u2705 package.json \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8"));
+  const claudeMdOriginal = existsSync5("CLAUDE.md") ? readFileSync4("CLAUDE.md", "utf-8") : null;
+  if (claudeMdOriginal !== null) {
+    const bumped = bumpClaudeMdVersion(claudeMdOriginal, newVersion);
+    if (bumped !== claudeMdOriginal) {
+      writeFileSync2("CLAUDE.md", bumped, "utf-8");
+      console.log(chalk6.green("\u2705 CLAUDE.md \uBC84\uC804\uC904 \uB3D9\uAE30\uD654"));
+    }
+  }
+  const rollbackVersion = () => {
+    pkg.version = currentVersion;
+    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    if (claudeMdOriginal !== null) writeFileSync2("CLAUDE.md", claudeMdOriginal, "utf-8");
+  };
   const buildSpinner = ora(t("publish.building")).start();
   const buildResult = safeExecFile("pnpm", ["build"]);
   if (!buildResult.ok) {
     buildSpinner.fail(t("publish.buildFailed"));
     console.log(chalk6.red(buildResult.err.slice(0, 500)));
-    pkg.version = currentVersion;
-    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    rollbackVersion();
     return;
   }
   buildSpinner.succeed(t("publish.buildSuccess"));
@@ -2068,8 +2150,7 @@ async function publish() {
   if (!testResult.ok) {
     testSpinner.fail(t("publish.testFailed"));
     console.log(chalk6.red(testResult.err.slice(0, 500)));
-    pkg.version = currentVersion;
-    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    rollbackVersion();
     return;
   }
   testSpinner.succeed(t("publish.testSuccess"));
@@ -2082,8 +2163,7 @@ async function publish() {
     }
   ]);
   if (!confirm) {
-    pkg.version = currentVersion;
-    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    rollbackVersion();
     console.log(chalk6.gray("\uCDE8\uC18C\uB428. \uBC84\uC804\uC774 \uC6D0\uB798\uB300\uB85C \uBCF5\uAD6C\uB429\uB2C8\uB2E4."));
     return;
   }
@@ -2095,13 +2175,21 @@ async function publish() {
     console.log(chalk6.red(`
 \u2716 ${t("publish.publishFailed")}`));
     console.log(chalk6.red(pubResult.err.slice(0, 500)));
-    pkg.version = currentVersion;
-    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    rollbackVersion();
     console.log(chalk6.gray(`\u{1F4E6} package.json \uBC84\uC804\uC744 v${currentVersion}\uB85C \uBCF5\uAD6C\uD588\uC2B5\uB2C8\uB2E4.`));
     return;
   }
   console.log(chalk6.green(`
 \u2714 ${t("publish.publishSuccess")}`));
+  if (existsSync5("CHANGELOG.md")) {
+    const cl = readFileSync4("CHANGELOG.md", "utf-8");
+    const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+    const updated = insertChangelogStub(cl, newVersion, date);
+    if (updated !== cl) {
+      writeFileSync2("CHANGELOG.md", updated, "utf-8");
+      console.log(chalk6.green(`\u2705 CHANGELOG.md \uC5D0 [${newVersion}] \uC2A4\uD141 \uCD94\uAC00 \u2014 \uBCF8\uBB38 \uBCF4\uAC15 \uD544\uC694`));
+    }
+  }
   const git = gitPostRelease(newVersion);
   if (git.warning) {
     console.log(chalk6.yellow(`
@@ -2124,13 +2212,13 @@ async function publish() {
 }
 
 // src/commands/audit.ts
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import chalk7 from "chalk";
 import inquirer4 from "inquirer";
 import ora2 from "ora";
 function detectCurrentPM() {
-  if (existsSync5("pnpm-lock.yaml")) return "pnpm";
-  if (existsSync5("yarn.lock")) return "yarn";
+  if (existsSync6("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync6("yarn.lock")) return "yarn";
   return "npm";
 }
 function parseAuditOutput(output, pm) {
@@ -2213,28 +2301,6 @@ async function audit(autoFix = false) {
   });
 }
 
-// src/lib/version.ts
-import { existsSync as existsSync6 } from "fs";
-import { dirname, join as join3 } from "path";
-import { fileURLToPath } from "url";
-function getVhkVersion() {
-  const dir = dirname(fileURLToPath(import.meta.url));
-  for (const pkgPath of [
-    join3(dir, "../../package.json"),
-    join3(dir, "../package.json")
-  ]) {
-    try {
-      if (existsSync6(pkgPath)) {
-        const pkg = readJsonFile(pkgPath);
-        if (pkg.version) return pkg.version;
-      }
-    } catch {
-      continue;
-    }
-  }
-  return "0.0.0";
-}
-
 // src/mcp/cli-path.ts
 import { existsSync as existsSync7 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
@@ -3187,12 +3253,12 @@ export {
   MAX_SECRET_FINDINGS,
   scanProjectForSecrets,
   filterSevereFindings,
+  getVhkVersion,
   deploy,
   env,
   envCheck,
   publish,
   audit,
-  getVhkVersion,
   resolveVhkCliInvocation,
   startMcpServer
 };