@byh3071/vhk 2.4.0 → 2.4.2

package/dist/{chunk-MN6LSPN6.js → chunk-WZH5CA4H.js}

@@ -716,6 +716,7 @@ var ko = {
     allOk: "\u{1F389} \uAC1C\uBC1C \uD658\uACBD \uC900\uBE44 \uC644\uB8CC!",
     missing: "\u26A0\uFE0F \uC77C\uBD80 \uB3C4\uAD6C\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
     missingHint: "\uC704 \uC548\uB0B4\uB97C \uB530\uB77C \uC124\uCE58\uD558\uC138\uC694.",
+    warnSummary: (n) => `\u26A0\uFE0F \uACBD\uACE0 ${n}\uAC1C \u2014 \uC704 \uAD8C\uC7A5 \uC870\uCE58\uB97C \uD655\uC778\uD558\uC138\uC694 (\uD544\uC218\uB294 \uC544\uB2D8)`,
     projectFiles: "\u{1F4C1} \uD504\uB85C\uC81D\uD2B8 \uD30C\uC77C \uD655\uC778:",
     envNotIgnored: "\u26A0\uFE0F .env\uAC00 .gitignore\uC5D0 \uC5C6\uC74C! \uCD94\uAC00\uD558\uC138\uC694",
     nextOkMessage: "\uD658\uACBD \uC810\uAC80 \uD1B5\uACFC! \uC774\uC81C \uD504\uB85C\uC81D\uD2B8\uB97C \uC2DC\uC791\uD558\uC138\uC694.",
@@ -728,6 +729,21 @@ var ko = {
     driftRuleWarn: (files) => `\u26A0\uFE0F RULES.md\uC640 \uC5B4\uAE0B\uB09C \uADDC\uCE59 \uD30C\uC77C: ${files} \u2014 vhk sync \uB97C \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694`,
     driftContextWarn: "\u26A0\uFE0F .vhk/context.md \uAC00 \uD604\uC7AC \uCF54\uB4DC\uBCF4\uB2E4 \uB0A1\uC558\uC5B4\uC694 \u2014 vhk context \uB85C \uAC31\uC2E0\uD558\uC138\uC694"
   },
+  preflight: {
+    title: "\u{1F6EB} Preflight \u2014 \uCD9C\uACE0 \uC804 \uC548\uC804\uC810\uAC80",
+    resultBlocked: (n) => `\uACB0\uACFC: \uCC28\uB2E8 \u2014 \uCE58\uBA85 \uC2E4\uD328 ${n}\uAC1C. \uACE0\uCE5C \uB4A4 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.`,
+    resultPass: (warn) => warn > 0 ? `\uACB0\uACFC: \uD1B5\uACFC (\uACBD\uACE0 ${warn})` : "\uACB0\uACFC: \uD1B5\uACFC",
+    nextBlocked: "\uCE58\uBA85(\u{1F534}) \uD56D\uBAA9\uC744 \uC218\uC815\uD55C \uB4A4 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.",
+    nextPass: "publish/PR \uC9C4\uD589 \uAC00\uB2A5"
+  },
+  standup: {
+    title: (d) => `\u{1F305} Standup \u2014 ${d}`,
+    yesterday: "\u{1F4CC} \uC5B4\uC81C \uD55C \uC77C",
+    noHistory: "\uC774\uC804 \uAE30\uB85D \uC5C6\uC74C \u2014 \uCCAB \uC138\uC158\uC774\uAC70\uB098 \uC2E0\uADDC repo",
+    todayRecommend: "\u{1F3AF} \uC624\uB298 \uCD94\uCC9C",
+    unresolved: "\u26A0\uFE0F \uBBF8\uD574\uACB0",
+    commitsLine: (n) => `\uCEE4\uBC0B ${n}\uAC1C`
+  },
   nlp: {
     matched: "\uC774\uAC8C \uB9DE\uB098\uC694?",
     notMatched: "\uBB34\uC2A8 \uB73B\uC778\uC9C0 \uBAA8\uB974\uACA0\uC5B4\uC694. vhk\uB97C \uC785\uB825\uD558\uBA74 \uBA54\uB274\uC5D0\uC11C \uC120\uD0DD\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
@@ -1219,9 +1235,27 @@ function pruneBackups(keepN, rootDir) {
   return toDelete.map((b) => b.id);
 }
 
+// src/lib/atomic-write.ts
+import { writeFileSync, renameSync, rmSync } from "fs";
+import { join, dirname, basename } from "path";
+var writeCounter = 0;
+function atomicWriteFile(filePath, data) {
+  const tmp = join(dirname(filePath), `.${basename(filePath)}.tmp-${process.pid}-${writeCounter++}`);
+  try {
+    writeFileSync(tmp, data, "utf-8");
+    renameSync(tmp, filePath);
+  } catch (err) {
+    try {
+      rmSync(tmp, { force: true });
+    } catch {
+    }
+    throw err;
+  }
+}
+
 // src/lib/rules-import.ts
 import { existsSync, readFileSync } from "fs";
-import { join } from "path";
+import { join as join2 } from "path";
 var ADOPT_SOURCES = [
   ".cursorrules",
   "CLAUDE.md",
@@ -1233,7 +1267,7 @@ var PREAMBLE_TITLE = "\uC11C\uBB38";
 function detectExistingRuleFiles(cwd) {
   const found = [];
   for (const rel of ADOPT_SOURCES) {
-    const full = join(cwd, rel);
+    const full = join2(cwd, rel);
     if (existsSync(full)) {
       try {
         found.push({ path: rel, content: readFileSync(full, "utf-8") });
@@ -1591,7 +1625,7 @@ async function syncCore(rootDir, opts, confirmOverwrite) {
     }
   }
   fs4.mkdirSync(path4.join(rootDir, ".vhk"), { recursive: true });
-  fs4.writeFileSync(path4.join(rootDir, SYNCED_MARKER_REL), (/* @__PURE__ */ new Date()).toISOString() + "\n", "utf-8");
+  atomicWriteFile(path4.join(rootDir, SYNCED_MARKER_REL), (/* @__PURE__ */ new Date()).toISOString() + "\n");
   ensureVhkIgnored(rootDir, ".synced");
   return { dryRun: false, firstSync, backupId, backedUp, written, skipped, truncated, plan, unmapped, claudeMigration };
 }
@@ -1692,9 +1726,141 @@ ${ko.sync.done}`));
   });
 }
 
-// src/commands/deploy.ts
-import { existsSync as existsSync2 } from "fs";
+// src/lib/hard-stop-guard.ts
 import chalk4 from "chalk";
+
+// src/lib/state-files.ts
+import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, appendFileSync, rmSync as rmSync2 } from "fs";
+import { join as join3 } from "path";
+var STATE_DIR = "docs/state";
+var BLOCKERS_PATH = join3(STATE_DIR, "blockers.md");
+var LEARNINGS_PATH = join3(STATE_DIR, "learnings.md");
+var VHK_DIR = ".vhk";
+var HARD_STOP_PATH = join3(VHK_DIR, "HARD_STOP");
+var HARD_STOP_BLOCKER_THRESHOLD = 3;
+function ensureStateDir() {
+  mkdirSync(STATE_DIR, { recursive: true });
+}
+function ensureVhkDir() {
+  mkdirSync(VHK_DIR, { recursive: true });
+}
+function isoDate() {
+  return localDate();
+}
+var ACTIVE_BLOCKER_RE = /^- (?!~~)\[/;
+function countActiveBlockers(content) {
+  let count = 0;
+  for (const line of content.split(/\r?\n/)) {
+    if (ACTIVE_BLOCKER_RE.test(line)) count++;
+  }
+  return count;
+}
+function appendBlocker(description, goalId) {
+  ensureStateDir();
+  const tag = goalId !== void 0 ? `goal-${goalId}` : "no-goal";
+  const line = `- [${isoDate()} ${tag}] ${description.trim()}`;
+  if (!existsSync2(BLOCKERS_PATH)) {
+    atomicWriteFile(
+      BLOCKERS_PATH,
+      `# Blockers
+
+_Append-only. \uD574\uACB0 \uD56D\uBAA9\uC740 ~~\uCDE8\uC18C\uC120~~\uC73C\uB85C \uD45C\uAE30._
+
+${line}
+`
+    );
+  } else {
+    appendFileSync(BLOCKERS_PATH, `${line}
+`, "utf-8");
+  }
+  const current = readFileSync2(BLOCKERS_PATH, "utf-8");
+  const count = countActiveBlockers(current);
+  let hardStopTripped = false;
+  if (count >= HARD_STOP_BLOCKER_THRESHOLD && !existsSync2(HARD_STOP_PATH)) {
+    writeHardStop(`auto: ${count} active blockers (threshold ${HARD_STOP_BLOCKER_THRESHOLD})`);
+    hardStopTripped = true;
+  }
+  return { count, hardStopTripped };
+}
+function getActiveBlockers(limit = 3) {
+  if (!existsSync2(BLOCKERS_PATH)) return [];
+  const lines = readFileSync2(BLOCKERS_PATH, "utf-8").split(/\r?\n/);
+  const entries = lines.filter((l) => ACTIVE_BLOCKER_RE.test(l));
+  return entries.slice(-limit);
+}
+function writeHardStop(reason) {
+  ensureVhkDir();
+  const ts = (/* @__PURE__ */ new Date()).toISOString();
+  atomicWriteFile(HARD_STOP_PATH, `${ts}
+${reason}
+`);
+}
+function isHardStopActive() {
+  return existsSync2(HARD_STOP_PATH);
+}
+function readHardStopReason() {
+  if (!existsSync2(HARD_STOP_PATH)) return null;
+  try {
+    return readFileSync2(HARD_STOP_PATH, "utf-8").trim();
+  } catch {
+    return null;
+  }
+}
+function clearHardStop() {
+  if (!existsSync2(HARD_STOP_PATH)) return false;
+  rmSync2(HARD_STOP_PATH, { force: true });
+  return true;
+}
+
+// src/lib/hard-stop-guard.ts
+function ensureNotHardStopped(action) {
+  if (!isHardStopActive()) return true;
+  console.error(chalk4.red.bold(`
+\u{1F6D1} HARD STOP \uD65C\uC131 \u2014 '${action}' \uC744(\uB97C) \uC2E4\uD589\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.`));
+  const reason = readHardStopReason();
+  if (reason) console.error(chalk4.dim(`   \uC0AC\uC720: ${reason.replace(/\s*\n\s*/g, " ")}`));
+  console.error(chalk4.dim("   \uD574\uC81C: vhk resume --confirm (\uC0AC\uB78C\uC774 \uC9C1\uC811 \uC2E4\uD589)"));
+  process.exitCode = 1;
+  return false;
+}
+
+// src/lib/version.ts
+import { existsSync as existsSync3 } from "fs";
+import { dirname as dirname2, join as join4 } from "path";
+import { fileURLToPath } from "url";
+
+// src/lib/read-json.ts
+import { readFileSync as readFileSync3 } from "fs";
+function stripBom(text) {
+  return text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+}
+function readJsonFile(filePath) {
+  const raw = stripBom(readFileSync3(filePath, "utf-8"));
+  return JSON.parse(raw);
+}
+
+// src/lib/version.ts
+function getVhkVersion() {
+  const dir = dirname2(fileURLToPath(import.meta.url));
+  for (const pkgPath of [
+    join4(dir, "../../package.json"),
+    join4(dir, "../package.json")
+  ]) {
+    try {
+      if (existsSync3(pkgPath)) {
+        const pkg = readJsonFile(pkgPath);
+        if (pkg.version) return pkg.version;
+      }
+    } catch {
+      continue;
+    }
+  }
+  return "0.0.0";
+}
+
+// src/commands/deploy.ts
+import { existsSync as existsSync4 } from "fs";
+import chalk5 from "chalk";
 import inquirer2 from "inquirer";
 
 // src/lib/exec.ts
@@ -1794,7 +1960,7 @@ var PLATFORMS = {
 function detectPlatform() {
   for (const [key, config] of Object.entries(PLATFORMS)) {
     for (const file of config.detectFiles) {
-      if (existsSync2(file)) return key;
+      if (existsSync4(file)) return key;
     }
   }
   return null;
@@ -1803,11 +1969,11 @@ function isCLIAvailable(cmd, checkArgs) {
   return safeExecFile(cmd, checkArgs).ok;
 }
 async function deploy() {
-  console.log(chalk4.bold("\n\u{1F680} " + t("deploy.title")));
-  console.log(chalk4.gray("\u2500".repeat(40)));
+  console.log(chalk5.bold("\n\u{1F680} " + t("deploy.title")));
+  console.log(chalk5.gray("\u2500".repeat(40)));
   let platform = detectPlatform();
   if (platform) {
-    console.log(chalk4.cyan(`
+    console.log(chalk5.cyan(`
 \u{1F50D} \uAC10\uC9C0\uB41C \uD50C\uB7AB\uD3FC: ${PLATFORMS[platform].name}`));
   } else {
     const { selected } = await inquirer2.prompt([
@@ -1826,9 +1992,9 @@ async function deploy() {
   }
   const config = PLATFORMS[platform];
   if (!isCLIAvailable(config.command, config.checkArgs)) {
-    console.log(chalk4.red(`
+    console.log(chalk5.red(`
 \u274C ${config.name} CLI\uAC00 \uC124\uCE58\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`));
-    console.log(chalk4.yellow(`   \u2192 ${config.installHint}`));
+    console.log(chalk5.yellow(`   \u2192 ${config.installHint}`));
     return;
   }
   const { confirm } = await inquirer2.prompt([
@@ -1840,15 +2006,15 @@ async function deploy() {
     }
   ]);
   if (!confirm) {
-    console.log(chalk4.gray("\uCDE8\uC18C\uB428"));
+    console.log(chalk5.gray("\uCDE8\uC18C\uB428"));
     return;
   }
-  console.log(chalk4.cyan(`
+  console.log(chalk5.cyan(`
 ${t("deploy.deploying")}
 `));
   const result = safeExecFileStream(config.command, config.commandArgs);
   if (result.ok) {
-    console.log(chalk4.green(`
+    console.log(chalk5.green(`
 \u2705 ${t("deploy.success")}`));
     printNextStep({
       message: "\uBC30\uD3EC \uC644\uB8CC! \uC0AC\uC774\uD2B8\uB97C \uD655\uC778\uD558\uC138\uC694.",
@@ -1856,16 +2022,16 @@ ${t("deploy.deploying")}
       cursorHint: "\uC0C1\uD0DC \uD655\uC778\uD574\uC918"
     });
   } else {
-    console.log(chalk4.red(`
+    console.log(chalk5.red(`
 \u274C ${t("deploy.failed")}`));
-    console.log(chalk4.red(result.err));
+    console.log(chalk5.red(result.err));
   }
 }
 
 // src/commands/env.ts
-import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync, appendFileSync, readdirSync } from "fs";
-import { join as join2 } from "path";
-import chalk5 from "chalk";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync2, appendFileSync as appendFileSync2, readdirSync } from "fs";
+import { join as join5 } from "path";
+import chalk6 from "chalk";
 function parseEnvKeys(content) {
   return content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#")).map((line) => line.split("=")[0].trim()).filter(Boolean);
 }
@@ -1881,7 +2047,7 @@ function loadDefinedEnvKeys(dir = ".") {
     if (!name.startsWith(".env")) continue;
     if (name.endsWith(".example") || name.endsWith(".sample")) continue;
     try {
-      for (const k of parseEnvKeys(readFileSync2(join2(dir, name), "utf-8"))) keys.add(k);
+      for (const k of parseEnvKeys(readFileSync4(join5(dir, name), "utf-8"))) keys.add(k);
     } catch {
     }
   }
@@ -1889,36 +2055,37 @@ function loadDefinedEnvKeys(dir = ".") {
 }
 function ensureGitignore() {
   const gitignorePath = ".gitignore";
-  if (existsSync3(gitignorePath)) {
-    const content = readFileSync2(gitignorePath, "utf-8");
+  if (existsSync5(gitignorePath)) {
+    const content = readFileSync4(gitignorePath, "utf-8");
     if (!content.split("\n").some((l) => l.trim() === ".env")) {
-      appendFileSync(gitignorePath, "\n.env\n");
-      console.log(chalk5.green("\n\u{1F512} .gitignore\uC5D0 .env \uCD94\uAC00\uB428"));
+      appendFileSync2(gitignorePath, "\n.env\n");
+      console.log(chalk6.green("\n\u{1F512} .gitignore\uC5D0 .env \uCD94\uAC00\uB428"));
     }
   } else {
-    writeFileSync(gitignorePath, ".env\nnode_modules/\ndist/\n");
-    console.log(chalk5.green("\n\u{1F512} .gitignore \uC0DD\uC131 (.env \uD3EC\uD568)"));
+    writeFileSync2(gitignorePath, ".env\nnode_modules/\ndist/\n");
+    console.log(chalk6.green("\n\u{1F512} .gitignore \uC0DD\uC131 (.env \uD3EC\uD568)"));
   }
 }
 async function env() {
-  console.log(chalk5.bold("\n\u{1F510} " + t("env.title")));
-  console.log(chalk5.gray("\u2500".repeat(40)));
-  if (!existsSync3(".env")) {
-    console.log(chalk5.yellow("\n\u26A0\uFE0F  .env \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
-    console.log(chalk5.gray("   .env \uD30C\uC77C\uC744 \uBA3C\uC800 \uB9CC\uB4E4\uC5B4\uC8FC\uC138\uC694."));
+  if (!ensureNotHardStopped("env")) return;
+  console.log(chalk6.bold("\n\u{1F510} " + t("env.title")));
+  console.log(chalk6.gray("\u2500".repeat(40)));
+  if (!existsSync5(".env")) {
+    console.log(chalk6.yellow("\n\u26A0\uFE0F  .env \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk6.gray("   .env \uD30C\uC77C\uC744 \uBA3C\uC800 \uB9CC\uB4E4\uC5B4\uC8FC\uC138\uC694."));
     return;
   }
-  const envContent = readFileSync2(".env", "utf-8");
+  const envContent = readFileSync4(".env", "utf-8");
   const keys = parseEnvKeys(envContent);
   if (keys.length === 0) {
-    console.log(chalk5.yellow("\n\u{1F4ED} .env\uC5D0 \uD658\uACBD\uBCC0\uC218\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk6.yellow("\n\u{1F4ED} .env\uC5D0 \uD658\uACBD\uBCC0\uC218\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
     return;
   }
   const exampleContent = keys.map((k) => `${k}=`).join("\n") + "\n";
-  writeFileSync(".env.example", exampleContent, "utf-8");
-  console.log(chalk5.green(`
+  writeFileSync2(".env.example", exampleContent, "utf-8");
+  console.log(chalk6.green(`
 \u2705 .env.example \uC0DD\uC131 (${keys.length}\uAC1C \uD0A4)`));
-  keys.forEach((k) => console.log(chalk5.gray(`   ${k}`)));
+  keys.forEach((k) => console.log(chalk6.gray(`   ${k}`)));
   ensureGitignore();
   printNextStep({
     message: ".env.example \uC0DD\uC131 \uC644\uB8CC!",
@@ -1927,51 +2094,39 @@ async function env() {
   });
 }
 async function envCheck() {
-  console.log(chalk5.bold("\n\u{1F50D} " + t("env.checkTitle")));
-  console.log(chalk5.gray("\u2500".repeat(40)));
-  if (!existsSync3(".env.example")) {
-    console.log(chalk5.yellow("\n\u26A0\uFE0F  .env.example\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 vhk env\uB97C \uC2E4\uD589\uD558\uC138\uC694."));
+  console.log(chalk6.bold("\n\u{1F50D} " + t("env.checkTitle")));
+  console.log(chalk6.gray("\u2500".repeat(40)));
+  if (!existsSync5(".env.example")) {
+    console.log(chalk6.yellow("\n\u26A0\uFE0F  .env.example\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 vhk env\uB97C \uC2E4\uD589\uD558\uC138\uC694."));
     return;
   }
-  const requiredKeys = parseEnvKeys(readFileSync2(".env.example", "utf-8"));
+  const requiredKeys = parseEnvKeys(readFileSync4(".env.example", "utf-8"));
   const currentKeys = loadDefinedEnvKeys();
   const missing = requiredKeys.filter((k) => !currentKeys.includes(k));
   const extra = currentKeys.filter((k) => !requiredKeys.includes(k));
-  console.log(chalk5.cyan(`
+  console.log(chalk6.cyan(`
 \u{1F4CB} \uD544\uC218 \uD658\uACBD\uBCC0\uC218: ${requiredKeys.length}\uAC1C`));
   if (missing.length === 0) {
-    console.log(chalk5.green("\n\u2705 \uBAA8\uB4E0 \uD544\uC218 \uD658\uACBD\uBCC0\uC218\uAC00 \uC124\uC815\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4!"));
+    console.log(chalk6.green("\n\u2705 \uBAA8\uB4E0 \uD544\uC218 \uD658\uACBD\uBCC0\uC218\uAC00 \uC124\uC815\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4!"));
   } else {
-    console.log(chalk5.red(`
+    console.log(chalk6.red(`
 \u274C \uB204\uB77D\uB41C \uD658\uACBD\uBCC0\uC218 (${missing.length}\uAC1C):`));
-    missing.forEach((k) => console.log(chalk5.red(`   \u2022 ${k}`)));
+    missing.forEach((k) => console.log(chalk6.red(`   \u2022 ${k}`)));
     process.exitCode = 1;
   }
   if (extra.length > 0) {
-    console.log(chalk5.yellow(`
+    console.log(chalk6.yellow(`
 \u{1F4A1} .env.example\uC5D0 \uC5C6\uB294 \uCD94\uAC00 \uBCC0\uC218 (${extra.length}\uAC1C):`));
-    extra.forEach((k) => console.log(chalk5.yellow(`   \u2022 ${k}`)));
+    extra.forEach((k) => console.log(chalk6.yellow(`   \u2022 ${k}`)));
   }
   ensureGitignore();
 }
 
 // src/commands/publish.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
-import chalk6 from "chalk";
+import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
+import chalk7 from "chalk";
 import inquirer3 from "inquirer";
 import ora from "ora";
-
-// src/lib/read-json.ts
-import { readFileSync as readFileSync3 } from "fs";
-function stripBom(text) {
-  return text.charCodeAt(0) === 65279 ? text.slice(1) : text;
-}
-function readJsonFile(filePath) {
-  const raw = stripBom(readFileSync3(filePath, "utf-8"));
-  return JSON.parse(raw);
-}
-
-// src/commands/publish.ts
 function bumpVersion(current, type) {
   const [major, minor, patch] = current.split(".").map((n) => parseInt(n, 10) || 0);
   switch (type) {
@@ -2001,7 +2156,9 @@ function bumpClaudeMdVersion(content, newVersion) {
   return content.replace(/(\*\*버전:\*\*\s*v)\d+\.\d+\.\d+/, `$1${newVersion}`);
 }
 function gitPostRelease(newVersion) {
-  const filesToAdd = existsSync4("CHANGELOG.md") ? ["package.json", "CHANGELOG.md"] : ["package.json"];
+  const filesToAdd = ["package.json"];
+  if (existsSync6("CHANGELOG.md")) filesToAdd.push("CHANGELOG.md");
+  if (existsSync6("CLAUDE.md")) filesToAdd.push("CLAUDE.md");
   const add = safeExecFile("git", ["add", ...filesToAdd]);
   if (!add.ok) {
     return {
@@ -2058,28 +2215,28 @@ function publishPreflight() {
   return { ...evaluatePublishPreflight(branch, trackedStatus, defaultBranch), branch, defaultBranch };
 }
 async function publish() {
-  console.log(chalk6.bold("\n\u{1F4E6} " + t("publish.title")));
-  console.log(chalk6.gray("\u2500".repeat(40)));
+  console.log(chalk7.bold("\n\u{1F4E6} " + t("publish.title")));
+  console.log(chalk7.gray("\u2500".repeat(40)));
   const pre = publishPreflight();
   if (!pre.ok) {
     const msg = pre.code === "wrong-branch" ? t("publish.preflightWrongBranch", pre.branch || "(detached)", pre.defaultBranch) : t("publish.preflightDirty");
-    console.log(chalk6.red(`
+    console.log(chalk7.red(`
 \u274C ${msg}`));
     return;
   }
-  if (!existsSync4("package.json")) {
-    console.log(chalk6.red("\u274C package.json\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4."));
+  if (!existsSync6("package.json")) {
+    console.log(chalk7.red("\u274C package.json\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4."));
     return;
   }
   let pkg;
   try {
     pkg = readJsonFile("package.json");
   } catch {
-    console.log(chalk6.red("\u274C package.json \uD30C\uC2F1 \uC2E4\uD328"));
+    console.log(chalk7.red("\u274C package.json \uD30C\uC2F1 \uC2E4\uD328"));
     return;
   }
   const currentVersion = pkg.version || "0.0.0";
-  console.log(chalk6.cyan(`
+  console.log(chalk7.cyan(`
 \u{1F4CC} \uD604\uC7AC \uBC84\uC804: v${currentVersion}`));
   const { bumpType } = await inquirer3.prompt([
     {
@@ -2094,29 +2251,29 @@ async function publish() {
     }
   ]);
   const newVersion = bumpVersion(currentVersion, bumpType);
-  console.log(chalk6.cyan(`
+  console.log(chalk7.cyan(`
 \u{1F195} \uC0C8 \uBC84\uC804: v${newVersion}`));
   pkg.version = newVersion;
-  writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
-  console.log(chalk6.green("\u2705 package.json \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8"));
-  const claudeMdOriginal = existsSync4("CLAUDE.md") ? readFileSync4("CLAUDE.md", "utf-8") : null;
+  writeFileSync3("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+  console.log(chalk7.green("\u2705 package.json \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8"));
+  const claudeMdOriginal = existsSync6("CLAUDE.md") ? readFileSync5("CLAUDE.md", "utf-8") : null;
   if (claudeMdOriginal !== null) {
     const bumped = bumpClaudeMdVersion(claudeMdOriginal, newVersion);
     if (bumped !== claudeMdOriginal) {
-      writeFileSync2("CLAUDE.md", bumped, "utf-8");
-      console.log(chalk6.green("\u2705 CLAUDE.md \uBC84\uC804\uC904 \uB3D9\uAE30\uD654"));
+      writeFileSync3("CLAUDE.md", bumped, "utf-8");
+      console.log(chalk7.green("\u2705 CLAUDE.md \uBC84\uC804\uC904 \uB3D9\uAE30\uD654"));
     }
   }
   const rollbackVersion = () => {
     pkg.version = currentVersion;
-    writeFileSync2("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
-    if (claudeMdOriginal !== null) writeFileSync2("CLAUDE.md", claudeMdOriginal, "utf-8");
+    writeFileSync3("package.json", JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+    if (claudeMdOriginal !== null) writeFileSync3("CLAUDE.md", claudeMdOriginal, "utf-8");
   };
   const buildSpinner = ora(t("publish.building")).start();
   const buildResult = safeExecFile("pnpm", ["build"]);
   if (!buildResult.ok) {
     buildSpinner.fail(t("publish.buildFailed"));
-    console.log(chalk6.red(buildResult.err.slice(0, 500)));
+    console.log(chalk7.red(buildResult.err.slice(0, 500)));
     rollbackVersion();
     return;
   }
@@ -2125,7 +2282,7 @@ async function publish() {
   const testResult = safeExecFile("pnpm", ["test", "--run"]);
   if (!testResult.ok) {
     testSpinner.fail(t("publish.testFailed"));
-    console.log(chalk6.red(testResult.err.slice(0, 500)));
+    console.log(chalk7.red(testResult.err.slice(0, 500)));
     rollbackVersion();
     return;
   }
@@ -2140,45 +2297,45 @@ async function publish() {
   ]);
   if (!confirm) {
     rollbackVersion();
-    console.log(chalk6.gray("\uCDE8\uC18C\uB428. \uBC84\uC804\uC774 \uC6D0\uB798\uB300\uB85C \uBCF5\uAD6C\uB429\uB2C8\uB2E4."));
+    console.log(chalk7.gray("\uCDE8\uC18C\uB428. \uBC84\uC804\uC774 \uC6D0\uB798\uB300\uB85C \uBCF5\uAD6C\uB429\uB2C8\uB2E4."));
     return;
   }
-  console.log(chalk6.cyan(`
+  console.log(chalk7.cyan(`
 \u{1F4E4} ${t("publish.publishing")}`));
-  console.log(chalk6.gray("   2FA \uD65C\uC131\uD654 \uC2DC: OTP 6\uC790\uB9AC \uC785\uB825 \uB610\uB294 \uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D URL \uD074\uB9AD (Windows Hello / PIN \uC9C0\uC6D0)"));
+  console.log(chalk7.gray("   2FA \uD65C\uC131\uD654 \uC2DC: OTP 6\uC790\uB9AC \uC785\uB825 \uB610\uB294 \uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D URL \uD074\uB9AD (Windows Hello / PIN \uC9C0\uC6D0)"));
   const pubResult = safeExecFileStream("npm", ["publish", "--access", "public"]);
   if (!pubResult.ok) {
-    console.log(chalk6.red(`
+    console.log(chalk7.red(`
 \u2716 ${t("publish.publishFailed")}`));
-    console.log(chalk6.red(pubResult.err.slice(0, 500)));
+    console.log(chalk7.red(pubResult.err.slice(0, 500)));
     rollbackVersion();
-    console.log(chalk6.gray(`\u{1F4E6} package.json \uBC84\uC804\uC744 v${currentVersion}\uB85C \uBCF5\uAD6C\uD588\uC2B5\uB2C8\uB2E4.`));
+    console.log(chalk7.gray(`\u{1F4E6} package.json \uBC84\uC804\uC744 v${currentVersion}\uB85C \uBCF5\uAD6C\uD588\uC2B5\uB2C8\uB2E4.`));
     return;
   }
-  console.log(chalk6.green(`
+  console.log(chalk7.green(`
 \u2714 ${t("publish.publishSuccess")}`));
-  if (existsSync4("CHANGELOG.md")) {
-    const cl = readFileSync4("CHANGELOG.md", "utf-8");
-    const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  if (existsSync6("CHANGELOG.md")) {
+    const cl = readFileSync5("CHANGELOG.md", "utf-8");
+    const date = localDate();
     const updated = insertChangelogStub(cl, newVersion, date);
     if (updated !== cl) {
-      writeFileSync2("CHANGELOG.md", updated, "utf-8");
-      console.log(chalk6.green(`\u2705 CHANGELOG.md \uC5D0 [${newVersion}] \uC2A4\uD141 \uCD94\uAC00 \u2014 \uBCF8\uBB38 \uBCF4\uAC15 \uD544\uC694`));
+      writeFileSync3("CHANGELOG.md", updated, "utf-8");
+      console.log(chalk7.green(`\u2705 CHANGELOG.md \uC5D0 [${newVersion}] \uC2A4\uD141 \uCD94\uAC00 \u2014 \uBCF8\uBB38 \uBCF4\uAC15 \uD544\uC694`));
     }
   }
   const git = gitPostRelease(newVersion);
   if (git.warning) {
-    console.log(chalk6.yellow(`
+    console.log(chalk7.yellow(`
 \u26A0\uFE0F  ${git.warning}`));
-    console.log(chalk6.dim(`    npm \uBC30\uD3EC\uB294 \uC774\uBBF8 \uC131\uACF5\uD588\uC2B5\uB2C8\uB2E4 (v${newVersion}).`));
+    console.log(chalk7.dim(`    npm \uBC30\uD3EC\uB294 \uC774\uBBF8 \uC131\uACF5\uD588\uC2B5\uB2C8\uB2E4 (v${newVersion}).`));
   } else if (git.tagged && git.pushed) {
-    console.log(chalk6.green(`
+    console.log(chalk7.green(`
 \u{1F3F7}\uFE0F  git tag v${newVersion} \uC0DD\uC131 + push \uC644\uB8CC`));
   } else if (git.tagged) {
-    console.log(chalk6.yellow(`
+    console.log(chalk7.yellow(`
 \u{1F3F7}\uFE0F  git tag v${newVersion} \uC0DD\uC131\uB428 (push\uB294 \uC218\uB3D9\uC73C\uB85C)`));
   }
-  console.log(chalk6.green.bold(`
+  console.log(chalk7.green.bold(`
 \u{1F389} v${newVersion} \uBC30\uD3EC \uC644\uB8CC!`));
   printNextStep({
     message: "npm \uBC30\uD3EC \uC644\uB8CC!",
@@ -2188,13 +2345,13 @@ async function publish() {
 }
 
 // src/commands/audit.ts
-import { existsSync as existsSync5 } from "fs";
-import chalk7 from "chalk";
+import { existsSync as existsSync7 } from "fs";
+import chalk8 from "chalk";
 import inquirer4 from "inquirer";
 import ora2 from "ora";
 function detectCurrentPM() {
-  if (existsSync5("pnpm-lock.yaml")) return "pnpm";
-  if (existsSync5("yarn.lock")) return "yarn";
+  if (existsSync7("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync7("yarn.lock")) return "yarn";
   return "npm";
 }
 function parseAuditOutput(output, pm) {
@@ -2234,24 +2391,24 @@ function runAuditFix(pm) {
   return result.ok ? { ok: true } : { ok: false, err: result.err };
 }
 async function audit(autoFix = false) {
-  console.log(chalk7.bold("\n\u{1F6E1}\uFE0F  " + t("audit.title")));
-  console.log(chalk7.gray("\u2500".repeat(40)));
+  console.log(chalk8.bold("\n\u{1F6E1}\uFE0F  " + t("audit.title")));
+  console.log(chalk8.gray("\u2500".repeat(40)));
   const pm = detectCurrentPM();
-  console.log(chalk7.cyan(`\u{1F4E6} \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800: ${pm}`));
+  console.log(chalk8.cyan(`\u{1F4E6} \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800: ${pm}`));
   const spinner = ora2("\uBCF4\uC548 \uAC10\uC0AC \uC2E4\uD589 \uC911...").start();
   const output = runAuditJson(pm);
   spinner.stop();
   const summary = parseAuditOutput(output, pm);
   if (summary.total === 0) {
-    console.log(chalk7.green.bold("\n\u{1F389} \uCDE8\uC57D\uC810\uC774 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4!"));
+    console.log(chalk8.green.bold("\n\u{1F389} \uCDE8\uC57D\uC810\uC774 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4!"));
     return;
   }
-  console.log(chalk7.bold("\n\u{1F4CA} \uCDE8\uC57D\uC810 \uC694\uC57D:"));
-  if (summary.critical > 0) console.log(chalk7.red(`  \u{1F534} Critical: ${summary.critical}`));
-  if (summary.high > 0) console.log(chalk7.red(`  \u{1F7E0} High: ${summary.high}`));
-  if (summary.moderate > 0) console.log(chalk7.yellow(`  \u{1F7E1} Moderate: ${summary.moderate}`));
-  if (summary.low > 0) console.log(chalk7.gray(`  \u26AA Low: ${summary.low}`));
-  console.log(chalk7.bold(`
+  console.log(chalk8.bold("\n\u{1F4CA} \uCDE8\uC57D\uC810 \uC694\uC57D:"));
+  if (summary.critical > 0) console.log(chalk8.red(`  \u{1F534} Critical: ${summary.critical}`));
+  if (summary.high > 0) console.log(chalk8.red(`  \u{1F7E0} High: ${summary.high}`));
+  if (summary.moderate > 0) console.log(chalk8.yellow(`  \u{1F7E1} Moderate: ${summary.moderate}`));
+  if (summary.low > 0) console.log(chalk8.gray(`  \u26AA Low: ${summary.low}`));
+  console.log(chalk8.bold(`
   \uCD1D ${summary.total}\uAC1C\uC758 \uCDE8\uC57D\uC810`));
   const shouldRunFix = autoFix ? true : summary.critical > 0 || summary.high > 0 ? (await inquirer4.prompt([
     {
@@ -2277,32 +2434,10 @@ async function audit(autoFix = false) {
   });
 }
 
-// src/lib/version.ts
-import { existsSync as existsSync6 } from "fs";
-import { dirname, join as join3 } from "path";
-import { fileURLToPath } from "url";
-function getVhkVersion() {
-  const dir = dirname(fileURLToPath(import.meta.url));
-  for (const pkgPath of [
-    join3(dir, "../../package.json"),
-    join3(dir, "../package.json")
-  ]) {
-    try {
-      if (existsSync6(pkgPath)) {
-        const pkg = readJsonFile(pkgPath);
-        if (pkg.version) return pkg.version;
-      }
-    } catch {
-      continue;
-    }
-  }
-  return "0.0.0";
-}
-
 // src/mcp/cli-path.ts
-import { existsSync as existsSync7 } from "fs";
+import { existsSync as existsSync8 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { dirname as dirname2, resolve } from "path";
+import { dirname as dirname3, resolve } from "path";
 function pickCliInvocation(globalAvailable, localCli, localExists) {
   if (globalAvailable) return { bin: "vhk", prefixArgs: [], fallback: false };
   if (localExists) return { bin: process.execPath, prefixArgs: [localCli], fallback: true };
@@ -2312,20 +2447,20 @@ function composeInvocation(cli, args) {
   return { bin: cli.bin, args: [...cli.prefixArgs, ...args] };
 }
 function localCliPath() {
-  const here = dirname2(fileURLToPath2(import.meta.url));
+  const here = dirname3(fileURLToPath2(import.meta.url));
   return resolve(here, "..", "index.js");
 }
 function resolveVhkCliInvocation() {
   const globalAvailable = safeExecFile("vhk", ["--version"]).ok;
   const local = localCliPath();
-  return pickCliInvocation(globalAvailable, local, existsSync7(local));
+  return pickCliInvocation(globalAvailable, local, existsSync8(local));
 }
 
 // src/mcp/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-import { existsSync as existsSync8, readFileSync as readFileSync5, writeFileSync as writeFileSync3, appendFileSync as appendFileSync2 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync6, writeFileSync as writeFileSync4, appendFileSync as appendFileSync3 } from "fs";
 
 // src/lib/scan-secrets.ts
 import fs7 from "fs";
@@ -2401,7 +2536,7 @@ import path6 from "path";
 var import_ignore = __toESM(require_ignore(), 1);
 import fs5 from "fs";
 import path5 from "path";
-import chalk8 from "chalk";
+import chalk9 from "chalk";
 function loadGitignore(rootDir) {
   const ig = (0, import_ignore.default)();
   const gitignorePath = path5.join(rootDir, ".gitignore");
@@ -2475,7 +2610,7 @@ function printSecurityWarnings(rootDir = process.cwd()) {
   const result = checkProjectSecurity(rootDir);
   if (result.ok) return true;
   for (const w of result.warnings) {
-    console.log(chalk8.yellow(`   \u26A0\uFE0F  ${w}`));
+    console.log(chalk9.yellow(`   \u26A0\uFE0F  ${w}`));
   }
   return false;
 }
@@ -2616,6 +2751,14 @@ var SERVER_VERSION = getVhkVersion();
 function isGitRepo() {
   return safeExecFile("git", ["rev-parse", "--is-inside-work-tree"]).ok;
 }
+function hardStopBlocked(action) {
+  if (!isHardStopActive()) return null;
+  const reason = readHardStopReason();
+  const text = `\u{1F6D1} HARD STOP \uD65C\uC131 \u2014 '${action}' \uC744(\uB97C) \uC2E4\uD589\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.` + (reason ? `
+\uC0AC\uC720: ${reason.replace(/\s*\n\s*/g, " ")}` : "") + `
+\uD574\uC81C: vhk resume --confirm (\uC0AC\uB78C\uC774 \uC9C1\uC811 \uC2E4\uD589)`;
+  return { content: [{ type: "text", text }] };
+}
 var ANSI_RE = /\x1B\[[0-9;?]*[ -/]*[@-~]/g;
 function stripAnsi(s) {
   return s.replace(ANSI_RE, "");
@@ -2649,6 +2792,8 @@ function createVhkMcpServer() {
       }
     },
     async ({ message }) => {
+      const blocked = hardStopBlocked("save");
+      if (blocked) return blocked;
       if (!isGitRepo()) {
         return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
       }
@@ -2710,6 +2855,8 @@ ${preview}${more}
       }
     },
     async ({ confirm }) => {
+      const blocked = hardStopBlocked("undo");
+      if (blocked) return blocked;
       if (!isGitRepo()) {
         return { content: [{ type: "text", text: "\u274C git \uC800\uC7A5\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4." }] };
       }
@@ -2750,7 +2897,7 @@ ${last.out}
   );
   server.registerTool("status", { description: "\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uB300\uC2DC\uBCF4\uB4DC (\uBE0C\uB79C\uCE58/\uBCC0\uACBD\uC0AC\uD56D/\uCD5C\uADFC \uCEE4\uBC0B)" }, async () => {
     const lines = [];
-    if (existsSync8("package.json")) {
+    if (existsSync9("package.json")) {
       try {
         const pkg = readJsonFile("package.json");
         lines.push(`\u{1F4E6} \uD504\uB85C\uC81D\uD2B8: ${pkg.name ?? "(\uC774\uB984 \uC5C6\uC74C)"} v${pkg.version ?? "?"}`);
@@ -2835,7 +2982,7 @@ ${last.out}
     checks.push(build.ok ? "\u2705 \uBE4C\uB4DC \uC131\uACF5" : "\u274C \uBE4C\uB4DC \uC2E4\uD328");
     const test = safeExecFile("pnpm", ["test", "--run"]);
     checks.push(test.ok ? "\u2705 \uD14C\uC2A4\uD2B8 \uD1B5\uACFC" : "\u274C \uD14C\uC2A4\uD2B8 \uC2E4\uD328");
-    if (existsSync8("package.json")) {
+    if (existsSync9("package.json")) {
       try {
         const pkg = readJsonFile("package.json");
         checks.push(`\u{1F4E6} \uBC84\uC804: ${pkg.version}`);
@@ -2873,11 +3020,11 @@ ${last.out}
     const recommended = ["CLAUDE.md", ".cursorrules", "docs/PRD.md", "docs/ARCHITECTURE.md"];
     const lines = ["\u{1F50D} \uD504\uB85C\uC81D\uD2B8 \uC810\uAC80", "", "\uD544\uC218:"];
     required.forEach((f) => {
-      lines.push(`  ${existsSync8(f) ? "\u2705" : "\u274C"} ${f}`);
+      lines.push(`  ${existsSync9(f) ? "\u2705" : "\u274C"} ${f}`);
     });
     lines.push("", "\uAD8C\uC7A5 (VHK \uD558\uB124\uC2A4):");
     recommended.forEach((f) => {
-      lines.push(`  ${existsSync8(f) ? "\u2705" : "\u26A0\uFE0F"} ${f}`);
+      lines.push(`  ${existsSync9(f) ? "\u2705" : "\u26A0\uFE0F"} ${f}`);
     });
     return { content: [{ type: "text", text: lines.join("\n") }] };
   });
@@ -2911,24 +3058,26 @@ ${log.out}` }] };
       description: ".env \u2192 .env.example \uB3D9\uAE30\uD654 + .gitignore\uC5D0 .env \uC790\uB3D9 \uCD94\uAC00"
     },
     async () => {
-      if (!existsSync8(".env")) {
+      const blocked = hardStopBlocked("env");
+      if (blocked) return blocked;
+      if (!existsSync9(".env")) {
         return { content: [{ type: "text", text: "\u26A0\uFE0F  .env \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 .env\uB97C \uB9CC\uB4E4\uC5B4\uC8FC\uC138\uC694." }] };
       }
-      const keys = parseEnvKeys(readFileSync5(".env", "utf-8"));
+      const keys = parseEnvKeys(readFileSync6(".env", "utf-8"));
       if (keys.length === 0) {
         return { content: [{ type: "text", text: "\u{1F4ED} .env\uC5D0 \uD658\uACBD\uBCC0\uC218\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4." }] };
       }
       const exampleContent = keys.map((k) => `${k}=`).join("\n") + "\n";
-      writeFileSync3(".env.example", exampleContent, "utf-8");
+      writeFileSync4(".env.example", exampleContent, "utf-8");
       const gitignoreLines = [];
-      if (existsSync8(".gitignore")) {
-        const content = readFileSync5(".gitignore", "utf-8");
+      if (existsSync9(".gitignore")) {
+        const content = readFileSync6(".gitignore", "utf-8");
         if (!content.split("\n").some((l) => l.trim() === ".env")) {
-          appendFileSync2(".gitignore", "\n.env\n");
+          appendFileSync3(".gitignore", "\n.env\n");
           gitignoreLines.push("\u{1F512} .gitignore\uC5D0 .env \uCD94\uAC00\uB428");
         }
       } else {
-        writeFileSync3(".gitignore", ".env\nnode_modules/\ndist/\n");
+        writeFileSync4(".gitignore", ".env\nnode_modules/\ndist/\n");
         gitignoreLines.push("\u{1F512} .gitignore \uC0DD\uC131 (.env \uD3EC\uD568)");
       }
       const lines = [`\u2705 .env.example \uC0DD\uC131 (${keys.length}\uAC1C \uD0A4)`, ...keys.map((k) => `   ${k}`)];
@@ -2942,11 +3091,11 @@ ${log.out}` }] };
       description: "\uD544\uC218 \uD658\uACBD\uBCC0\uC218 \uB204\uB77D \uAC80\uC0AC (.env.example \uAE30\uC900)"
     },
     async () => {
-      if (!existsSync8(".env.example")) {
+      if (!existsSync9(".env.example")) {
         return { content: [{ type: "text", text: "\u26A0\uFE0F  .env.example\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uBA3C\uC800 env \uB3C4\uAD6C\uB97C \uC2E4\uD589\uD558\uC138\uC694." }] };
       }
-      const requiredKeys = parseEnvKeys(readFileSync5(".env.example", "utf-8"));
-      const currentKeys = existsSync8(".env") ? parseEnvKeys(readFileSync5(".env", "utf-8")) : [];
+      const requiredKeys = parseEnvKeys(readFileSync6(".env.example", "utf-8"));
+      const currentKeys = existsSync9(".env") ? parseEnvKeys(readFileSync6(".env", "utf-8")) : [];
       const missing = requiredKeys.filter((k) => !currentKeys.includes(k));
       const extra = currentKeys.filter((k) => !requiredKeys.includes(k));
       const lines = [`\u{1F4CB} \uD544\uC218 \uD658\uACBD\uBCC0\uC218: ${requiredKeys.length}\uAC1C`];
@@ -3062,7 +3211,7 @@ ${cliStatus}
       description: "\uD604\uC7AC \uBC84\uC804 + bump \uD6C4\uBCF4 \uD45C\uC2DC (MCP \uBAA8\uB4DC: \uC2E4\uC81C npm publish \uBBF8\uC218\uD589 \u2014 `vhk publish` \uC548\uB0B4)"
     },
     async () => {
-      if (!existsSync8("package.json")) {
+      if (!existsSync9("package.json")) {
         return { content: [{ type: "text", text: "\u274C package.json \uC5C6\uC74C." }] };
       }
       try {
@@ -3090,7 +3239,7 @@ ${cliStatus}
       description: "\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uAC10\uC9C0 + \uC804\uD658 \uD6C4\uBCF4 \uAC00\uC6A9\uC131 (MCP \uBAA8\uB4DC: \uC2E4\uC81C \uC804\uD658 \uBBF8\uC218\uD589 \u2014 `vhk migrate <target>` \uC548\uB0B4)"
     },
     async () => {
-      const current = existsSync8("pnpm-lock.yaml") ? "pnpm" : existsSync8("yarn.lock") ? "yarn" : existsSync8("package-lock.json") ? "npm" : null;
+      const current = existsSync9("pnpm-lock.yaml") ? "pnpm" : existsSync9("yarn.lock") ? "yarn" : existsSync9("package-lock.json") ? "npm" : null;
       const candidates = ["npm", "yarn", "pnpm"].filter((pm) => pm !== current);
       const lines = [`\uD604\uC7AC PM: ${current ?? "\uAC10\uC9C0 \uBD88\uAC00 (lock \uD30C\uC77C \uC5C6\uC74C)"}`];
       for (const pm of candidates) {
@@ -3222,6 +3371,7 @@ export {
   ensureVhkIgnored,
   listBackups,
   restoreBackup,
+  atomicWriteFile,
   detectExistingRuleFiles,
   buildAdoptedRules,
   isInteractive,
@@ -3245,18 +3395,24 @@ export {
   filterTrackedPaths,
   stripBom,
   readJsonFile,
+  appendBlocker,
+  getActiveBlockers,
+  isHardStopActive,
+  readHardStopReason,
+  clearHardStop,
+  ensureNotHardStopped,
   NETWORK_EXEC_TIMEOUT_MS,
   safeExecFile,
   MAX_SCAN_FILE_BYTES,
   MAX_SECRET_FINDINGS,
   scanProjectForSecrets,
   filterSevereFindings,
+  getVhkVersion,
   deploy,
   env,
   envCheck,
   publish,
   audit,
-  getVhkVersion,
   resolveVhkCliInvocation,
   startMcpServer
 };