pai-zero 0.9.2 → 0.10.1

package/dist/bin/pai.js

@@ -501,6 +501,51 @@ async function interactiveInterview(analysis, _cwd, projectName) {
     if (database === "supabase") extraTools.push("supabase");
     extraTools.push("gstack", "harness");
   }
+  let mcp;
+  console.log("");
+  const { mcpDev } = await inquirer.prompt([{
+    type: "confirm",
+    name: "mcpDev",
+    message: "MCP(Model Context Protocol) \uC11C\uBC84\uB97C \uAC1C\uBC1C\uD558\uC2DC\uB098\uC694?",
+    default: false
+  }]);
+  if (mcpDev) {
+    console.log("");
+    const hasSupabase = extraTools.includes("supabase");
+    const typeChoices = [
+      { name: `Tools \uC11C\uBC84 (\uAC1C\uC778\uC6A9)    ${colors.dim("\u2500  AI\uAC00 \uD638\uCD9C\uD560 \uAE30\uB2A5 \uC81C\uACF5")}`, value: "tools" }
+    ];
+    if (hasSupabase) {
+      typeChoices.push({
+        name: `Tools \uC11C\uBC84 (\uACF5\uAC1C \uBC30\uD3EC) ${colors.dim("\u2500  API \uD0A4 + \uAD00\uB9AC\uD654\uBA74 + \uC0AC\uC6A9\uB7C9 \uCD94\uC801")}`,
+        value: "tools-public"
+      });
+    }
+    typeChoices.push(
+      { name: `Resources \uC11C\uBC84         ${colors.dim("\u2500  AI\uAC00 \uC77D\uC744 \uCEE8\uD14D\uC2A4\uD2B8 \uC81C\uACF5")}`, value: "resources" },
+      { name: `Prompts \uC11C\uBC84           ${colors.dim("\u2500  \uC7AC\uC0AC\uC6A9 \uD504\uB86C\uD504\uD2B8 \uD15C\uD50C\uB9BF")}`, value: "prompts" },
+      { name: `All-in-one             ${colors.dim("\u2500  \uBAA8\uB450 \uD3EC\uD568")}`, value: "all" }
+    );
+    const { mcpType } = await inquirer.prompt([{
+      type: "list",
+      name: "mcpType",
+      message: "MCP \uC11C\uBC84 \uC720\uD615:",
+      choices: typeChoices
+    }]);
+    const { mcpName } = await inquirer.prompt([{
+      type: "input",
+      name: "mcpName",
+      message: "MCP \uC11C\uBC84 \uC774\uB984:",
+      default: `${projectName}-mcp`,
+      validate: (v) => /^[a-z0-9][a-z0-9-]*$/.test(v.trim()) ? true : "\uC601\uBB38 \uC18C\uBB38\uC790, \uC22B\uC790, \uD558\uC774\uD508(-)\uB9CC \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4."
+    }]);
+    mcp = {
+      enabled: true,
+      type: mcpType,
+      name: mcpName.trim()
+    };
+    extraTools.push("mcp");
+  }
   step(3, 3, "\uC124\uCE58 \uD655\uC778");
   console.log("");
   console.log(colors.dim("  \uC124\uCE58\uB420 \uD56D\uBAA9"));
@@ -516,6 +561,9 @@ async function interactiveInterview(analysis, _cwd, projectName) {
     if (extraTools.includes("supabase")) console.log(`  ${colors.accent("+")} Supabase \uB370\uC774\uD130\uBCA0\uC774\uC2A4`);
     if (extraTools.includes("gstack")) console.log(`  ${colors.accent("+")} gstack \uD14C\uC2A4\uD2B8 \uC790\uB3D9\uD654`);
     if (extraTools.includes("harness")) console.log(`  ${colors.accent("+")} Harness \uD488\uC9C8 \uAC80\uC99D`);
+    if (extraTools.includes("mcp") && mcp) {
+      console.log(`  ${colors.accent("+")} MCP \uC11C\uBC84 (${mcp.name}, ${mcp.type})`);
+    }
   }
   if (authMethods.length > 0) {
     console.log("");
@@ -541,6 +589,7 @@ async function interactiveInterview(analysis, _cwd, projectName) {
     authMethods,
     customAuth,
     extraTools,
+    mcp,
     setupDomains: {
       claudeEnv: true,
       processDocs: true,
@@ -915,18 +964,778 @@ var init_platform = __esm({
   }
 });
 
+// src/stages/environment/provisioners/mcp.ts
+var mcp_exports = {};
+__export(mcp_exports, {
+  provisionMcp: () => provisionMcp
+});
+import { join as join3 } from "path";
+import fs4 from "fs-extra";
+async function provisionMcp(ctx) {
+  const mcp = ctx.mcp;
+  if (!mcp?.enabled) return;
+  const mcpDir = join3(ctx.cwd, "mcp-server");
+  await fs4.ensureDir(mcpDir);
+  await fs4.ensureDir(join3(mcpDir, "src"));
+  await fs4.ensureDir(join3(mcpDir, "tests"));
+  const isPublicDeps = mcp.type === "tools-public";
+  const pkgJson = {
+    name: mcp.name,
+    version: "0.1.0",
+    description: `MCP server for ${ctx.projectName}`,
+    type: "module",
+    main: "dist/index.js",
+    bin: { [mcp.name]: "./dist/index.js" },
+    scripts: {
+      build: "tsc",
+      dev: "tsc --watch",
+      test: "vitest run",
+      start: "node dist/index.js"
+    },
+    dependencies: {
+      "@modelcontextprotocol/sdk": "^1.0.0",
+      ...isPublicDeps ? { "@supabase/supabase-js": "^2.48.0" } : {}
+    },
+    devDependencies: {
+      typescript: "^5.7.0",
+      "@types/node": "^20.17.0",
+      vitest: "^3.0.0"
+    }
+  };
+  const pkgPath = join3(mcpDir, "package.json");
+  if (!await fs4.pathExists(pkgPath)) {
+    await fs4.writeJson(pkgPath, pkgJson, { spaces: 2 });
+  }
+  const tsconfig = {
+    compilerOptions: {
+      target: "ES2022",
+      module: "ESNext",
+      moduleResolution: "bundler",
+      outDir: "./dist",
+      rootDir: "./src",
+      strict: true,
+      esModuleInterop: true,
+      skipLibCheck: true,
+      resolveJsonModule: true,
+      declaration: true
+    },
+    include: ["src/**/*"],
+    exclude: ["node_modules", "dist", "tests"]
+  };
+  const tsPath = join3(mcpDir, "tsconfig.json");
+  if (!await fs4.pathExists(tsPath)) {
+    await fs4.writeJson(tsPath, tsconfig, { spaces: 2 });
+  }
+  const indexPath = join3(mcpDir, "src", "index.ts");
+  if (!await fs4.pathExists(indexPath)) {
+    await fs4.writeFile(indexPath, buildIndexTs(mcp), "utf8");
+  }
+  const isTools = mcp.type === "tools" || mcp.type === "tools-public" || mcp.type === "all";
+  const isPublic = mcp.type === "tools-public";
+  if (isTools) {
+    const toolsPath = join3(mcpDir, "src", "tools.ts");
+    if (!await fs4.pathExists(toolsPath)) {
+      await fs4.writeFile(toolsPath, isPublic ? TOOLS_PUBLIC_TEMPLATE : TOOLS_TEMPLATE, "utf8");
+    }
+  }
+  if (isPublic) {
+    const authPath = join3(mcpDir, "src", "auth.ts");
+    if (!await fs4.pathExists(authPath)) {
+      await fs4.writeFile(authPath, AUTH_MIDDLEWARE_TEMPLATE, "utf8");
+    }
+    const rateLimitPath = join3(mcpDir, "src", "rate-limit.ts");
+    if (!await fs4.pathExists(rateLimitPath)) {
+      await fs4.writeFile(rateLimitPath, RATE_LIMIT_TEMPLATE, "utf8");
+    }
+    const migDir = join3(ctx.cwd, "supabase", "migrations");
+    await fs4.ensureDir(migDir);
+    const migPath = join3(migDir, "20260101_mcp_keys_and_usage.sql");
+    if (!await fs4.pathExists(migPath)) {
+      await fs4.writeFile(migPath, SUPABASE_MIGRATION, "utf8");
+    }
+    const dashDir = join3(ctx.cwd, "src", "app", "dashboard");
+    await fs4.ensureDir(join3(dashDir, "keys"));
+    await fs4.ensureDir(join3(dashDir, "usage"));
+    const dashLayoutPath = join3(dashDir, "layout.tsx");
+    if (!await fs4.pathExists(dashLayoutPath)) {
+      await fs4.writeFile(dashLayoutPath, DASHBOARD_LAYOUT, "utf8");
+    }
+    const dashPagePath = join3(dashDir, "page.tsx");
+    if (!await fs4.pathExists(dashPagePath)) {
+      await fs4.writeFile(dashPagePath, DASHBOARD_PAGE, "utf8");
+    }
+    const keysPagePath = join3(dashDir, "keys", "page.tsx");
+    if (!await fs4.pathExists(keysPagePath)) {
+      await fs4.writeFile(keysPagePath, KEYS_PAGE, "utf8");
+    }
+    const usagePagePath = join3(dashDir, "usage", "page.tsx");
+    if (!await fs4.pathExists(usagePagePath)) {
+      await fs4.writeFile(usagePagePath, USAGE_PAGE, "utf8");
+    }
+    const apiKeysDir = join3(ctx.cwd, "src", "app", "api", "keys");
+    await fs4.ensureDir(apiKeysDir);
+    const keysRoutePath = join3(apiKeysDir, "route.ts");
+    if (!await fs4.pathExists(keysRoutePath)) {
+      await fs4.writeFile(keysRoutePath, KEYS_API_ROUTE, "utf8");
+    }
+  }
+  if (mcp.type === "resources" || mcp.type === "all") {
+    const resPath = join3(mcpDir, "src", "resources.ts");
+    if (!await fs4.pathExists(resPath)) {
+      await fs4.writeFile(resPath, RESOURCES_TEMPLATE, "utf8");
+    }
+  }
+  if (mcp.type === "prompts" || mcp.type === "all") {
+    const promptsPath = join3(mcpDir, "src", "prompts.ts");
+    if (!await fs4.pathExists(promptsPath)) {
+      await fs4.writeFile(promptsPath, PROMPTS_TEMPLATE, "utf8");
+    }
+  }
+  const testPath = join3(mcpDir, "tests", "server.test.ts");
+  if (!await fs4.pathExists(testPath)) {
+    await fs4.writeFile(testPath, TEST_TEMPLATE, "utf8");
+  }
+  const readmePath = join3(mcpDir, "README.md");
+  if (!await fs4.pathExists(readmePath)) {
+    await fs4.writeFile(readmePath, buildReadme(mcp), "utf8");
+  }
+  const mcpJsonPath = join3(ctx.cwd, ".mcp.json");
+  const mcpJson = await fs4.pathExists(mcpJsonPath) ? await fs4.readJson(mcpJsonPath) : { mcpServers: {} };
+  mcpJson.mcpServers[mcp.name] = {
+    command: "node",
+    args: ["./mcp-server/dist/index.js"]
+  };
+  await fs4.writeJson(mcpJsonPath, mcpJson, { spaces: 2 });
+  const gitignorePath = join3(mcpDir, ".gitignore");
+  if (!await fs4.pathExists(gitignorePath)) {
+    await fs4.writeFile(gitignorePath, "node_modules/\ndist/\n*.log\n", "utf8");
+  }
+}
+function buildIndexTs(mcp) {
+  const imports = [];
+  const registrations = [];
+  if (mcp.type === "tools" || mcp.type === "all") {
+    imports.push("import { registerTools } from './tools.js';");
+    registrations.push("  registerTools(server);");
+  }
+  if (mcp.type === "resources" || mcp.type === "all") {
+    imports.push("import { registerResources } from './resources.js';");
+    registrations.push("  registerResources(server);");
+  }
+  if (mcp.type === "prompts" || mcp.type === "all") {
+    imports.push("import { registerPrompts } from './prompts.js';");
+    registrations.push("  registerPrompts(server);");
+  }
+  return `#!/usr/bin/env node
+/**
+ * ${mcp.name} \u2014 MCP Server
+ * Generated by PAI
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+${imports.join("\n")}
+
+async function main() {
+  const server = new Server(
+    {
+      name: '${mcp.name}',
+      version: '0.1.0',
+    },
+    {
+      capabilities: {
+${mcp.type === "tools" || mcp.type === "all" ? "        tools: {}," : ""}
+${mcp.type === "resources" || mcp.type === "all" ? "        resources: {}," : ""}
+${mcp.type === "prompts" || mcp.type === "all" ? "        prompts: {}," : ""}
+      },
+    },
+  );
+
+${registrations.join("\n")}
+
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error('${mcp.name} MCP server running on stdio');
+}
+
+main().catch((err) => {
+  console.error('Fatal error:', err);
+  process.exit(1);
+});
+`;
+}
+function buildReadme(mcp) {
+  const isPublic = mcp.type === "tools-public";
+  return `# ${mcp.name} \u2014 MCP Server
+
+PAI\uAC00 \uC0DD\uC131\uD55C MCP(Model Context Protocol) \uC11C\uBC84\uC785\uB2C8\uB2E4.
+
+## \uD0C0\uC785: ${mcp.type}
+
+${mcp.type === "tools" || mcp.type === "all" ? "- **Tools**: AI\uAC00 \uD638\uCD9C\uD560 \uAE30\uB2A5 \uC81C\uACF5 (src/tools.ts)" : ""}
+${isPublic ? "- **Tools (\uACF5\uAC1C \uBC30\uD3EC)**: API \uD0A4 \uAC80\uC99D + \uB808\uC774\uD2B8 \uB9AC\uBC0B + \uC0AC\uC6A9\uB7C9 \uCD94\uC801 (src/tools.ts, auth.ts, rate-limit.ts)" : ""}
+${mcp.type === "resources" || mcp.type === "all" ? "- **Resources**: AI\uAC00 \uC77D\uC744 \uCEE8\uD14D\uC2A4\uD2B8 \uC81C\uACF5 (src/resources.ts)" : ""}
+${mcp.type === "prompts" || mcp.type === "all" ? "- **Prompts**: \uC7AC\uC0AC\uC6A9 \uD504\uB86C\uD504\uD2B8 \uD15C\uD50C\uB9BF (src/prompts.ts)" : ""}
+
+${isPublic ? `
+## \uACF5\uAC1C \uBC30\uD3EC \uC124\uC815
+
+1. **Supabase \uB9C8\uC774\uADF8\uB808\uC774\uC158 \uC2E4\uD589**
+   \\\`\\\`\\\`bash
+   supabase db push
+   \\\`\\\`\\\`
+   (\\\`supabase/migrations/\\\` \uCC38\uACE0)
+
+2. **\uD658\uACBD \uBCC0\uC218 \uC124\uC815 (.env.local)**
+   \\\`\\\`\\\`
+   NEXT_PUBLIC_SUPABASE_URL=...
+   NEXT_PUBLIC_SUPABASE_ANON_KEY=...
+   SUPABASE_SERVICE_ROLE_KEY=...
+   \\\`\\\`\\\`
+
+3. **\uB300\uC2DC\uBCF4\uB4DC \uC811\uC18D**
+   \\\`\\\`\\\`bash
+   npm run dev
+   # \u2192 http://localhost:3000/dashboard
+   \\\`\\\`\\\`
+   - API \uD0A4 \uBC1C\uAE09 \uBC0F \uAD00\uB9AC
+   - \uC0AC\uC6A9\uB7C9 \uD655\uC778
+` : ""}
+
+## \uAC1C\uBC1C
+
+\`\`\`bash
+cd mcp-server
+npm install
+npm run build
+npm test
+\`\`\`
+
+## Claude Code \uC5F0\uACB0
+
+\uD504\uB85C\uC81D\uD2B8 \uB8E8\uD2B8\uC758 \`.mcp.json\` \uD30C\uC77C\uC5D0 \uC774\uBBF8 \uB4F1\uB85D\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.
+Claude Code\uB97C \uC7AC\uC2DC\uC791\uD558\uBA74 \uC790\uB3D9\uC73C\uB85C MCP \uC11C\uBC84\uAC00 \uB85C\uB4DC\uB429\uB2C8\uB2E4.
+
+\uC218\uB3D9 \uB4F1\uB85D:
+\`\`\`bash
+claude mcp add ${mcp.name} -- node ./mcp-server/dist/index.js
+\`\`\`
+
+## \uB2E4\uC74C \uB2E8\uACC4
+
+1. \`npm install\` \u2014 \uC758\uC874\uC131 \uC124\uCE58
+2. \`npm run build\` \u2014 TypeScript \uCEF4\uD30C\uC77C
+3. \`src/\` \uB514\uB809\uD1A0\uB9AC\uC758 \uD15C\uD50C\uB9BF\uC744 \uC2E4\uC81C \uB85C\uC9C1\uC73C\uB85C \uC218\uC815
+4. Claude Code \uC7AC\uC2DC\uC791 \u2192 MCP \uC11C\uBC84 \uC0AC\uC6A9
+
+## \uCC38\uACE0 \uBB38\uC11C
+
+- [MCP \uACF5\uC2DD \uBB38\uC11C](https://modelcontextprotocol.io/)
+- [SDK \uBB38\uC11C](https://github.com/modelcontextprotocol/sdk)
+`;
+}
+var TOOLS_PUBLIC_TEMPLATE, AUTH_MIDDLEWARE_TEMPLATE, RATE_LIMIT_TEMPLATE, SUPABASE_MIGRATION, DASHBOARD_LAYOUT, DASHBOARD_PAGE, KEYS_PAGE, USAGE_PAGE, KEYS_API_ROUTE, TOOLS_TEMPLATE, RESOURCES_TEMPLATE, PROMPTS_TEMPLATE, TEST_TEMPLATE;
+var init_mcp = __esm({
+  "src/stages/environment/provisioners/mcp.ts"() {
+    "use strict";
+    TOOLS_PUBLIC_TEMPLATE = `import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+import { verifyApiKey } from './auth.js';
+import { checkRateLimit, logUsage } from './rate-limit.js';
+
+export function registerTools(server: Server): void {
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: [
+      {
+        name: 'hello',
+        description: '\uC778\uC99D\uB41C \uB3C4\uAD6C \uD638\uCD9C \u2014 API \uD0A4 \uD544\uC694',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            apiKey: { type: 'string', description: 'API \uD0A4' },
+            name: { type: 'string', description: '\uC778\uC0AC\uD560 \uB300\uC0C1' },
+          },
+          required: ['apiKey', 'name'],
+        },
+      },
+    ],
+  }));
+
+  server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    const { apiKey, ...params } = (args as { apiKey?: string; [k: string]: unknown }) ?? {};
+
+    if (!apiKey) throw new Error('API key required');
+    const user = await verifyApiKey(apiKey);
+    if (!user) throw new Error('Invalid API key');
+
+    const allowed = await checkRateLimit(user.id);
+    if (!allowed) throw new Error('Rate limit exceeded');
+
+    if (name === 'hello') {
+      const target = (params as { name?: string })?.name ?? 'world';
+      const result = { content: [{ type: 'text' as const, text: \`Hello, \${target}!\` }] };
+      await logUsage(user.id, name);
+      return result;
+    }
+
+    throw new Error(\`Unknown tool: \${name}\`);
+  });
+}
+`;
+    AUTH_MIDDLEWARE_TEMPLATE = `import { createClient } from '@supabase/supabase-js';
+
+const supabase = createClient(
+  process.env.NEXT_PUBLIC_SUPABASE_URL ?? '',
+  process.env.SUPABASE_SERVICE_ROLE_KEY ?? '',
+);
+
+export interface AuthUser {
+  id: string;
+  email: string;
+}
+
+/**
+ * API \uD0A4 \uAC80\uC99D \u2014 Supabase api_keys \uD14C\uC774\uBE14\uC5D0\uC11C \uC870\uD68C
+ */
+export async function verifyApiKey(apiKey: string): Promise<AuthUser | null> {
+  const { data, error } = await supabase
+    .from('api_keys')
+    .select('user_id, revoked_at, users(id, email)')
+    .eq('key_hash', await hashKey(apiKey))
+    .single();
+
+  if (error || !data || data.revoked_at) return null;
+
+  // \uB9C8\uC9C0\uB9C9 \uC0AC\uC6A9 \uC2DC\uAC04 \uC5C5\uB370\uC774\uD2B8
+  await supabase
+    .from('api_keys')
+    .update({ last_used_at: new Date().toISOString() })
+    .eq('key_hash', await hashKey(apiKey));
+
+  const users = (data as unknown as { users: { id: string; email: string } }).users;
+  return { id: users.id, email: users.email };
+}
+
+async function hashKey(key: string): Promise<string> {
+  const crypto = await import('node:crypto');
+  return crypto.createHash('sha256').update(key).digest('hex');
+}
+
+export async function generateApiKey(): Promise<{ key: string; hash: string }> {
+  const crypto = await import('node:crypto');
+  const key = \`mcp_\${crypto.randomBytes(32).toString('hex')}\`;
+  const hash = crypto.createHash('sha256').update(key).digest('hex');
+  return { key, hash };
+}
+`;
+    RATE_LIMIT_TEMPLATE = `import { createClient } from '@supabase/supabase-js';
+
+const supabase = createClient(
+  process.env.NEXT_PUBLIC_SUPABASE_URL ?? '',
+  process.env.SUPABASE_SERVICE_ROLE_KEY ?? '',
+);
+
+const RATE_LIMIT_PER_HOUR = 100;
+
+/**
+ * Rate limit \uCCB4\uD06C \u2014 \uCD5C\uADFC 1\uC2DC\uAC04 \uB0B4 \uD638\uCD9C \uC218 \uD655\uC778
+ */
+export async function checkRateLimit(userId: string): Promise<boolean> {
+  const oneHourAgo = new Date(Date.now() - 60 * 60 * 1000).toISOString();
+  const { count } = await supabase
+    .from('usage_logs')
+    .select('*', { count: 'exact', head: true })
+    .eq('user_id', userId)
+    .gte('created_at', oneHourAgo);
+
+  return (count ?? 0) < RATE_LIMIT_PER_HOUR;
+}
+
+/**
+ * \uC0AC\uC6A9\uB7C9 \uAE30\uB85D \u2014 usage_logs \uD14C\uC774\uBE14\uC5D0 \uC800\uC7A5
+ */
+export async function logUsage(userId: string, toolName: string): Promise<void> {
+  await supabase.from('usage_logs').insert({
+    user_id: userId,
+    tool_name: toolName,
+    created_at: new Date().toISOString(),
+  });
+}
+`;
+    SUPABASE_MIGRATION = `-- MCP Tools \uACF5\uAC1C \uBC30\uD3EC \u2014 API \uD0A4 \uAD00\uB9AC + \uC0AC\uC6A9\uB7C9 \uCD94\uC801
+-- Generated by PAI
+
+-- \uC0AC\uC6A9\uC790 \uD14C\uC774\uBE14 (Supabase Auth\uC640 \uC5F0\uB3D9)
+create table if not exists public.users (
+  id uuid primary key references auth.users(id) on delete cascade,
+  email text not null unique,
+  created_at timestamptz default now()
+);
+
+-- API \uD0A4 \uD14C\uC774\uBE14
+create table if not exists public.api_keys (
+  id uuid primary key default gen_random_uuid(),
+  user_id uuid not null references public.users(id) on delete cascade,
+  key_hash text not null unique,
+  name text not null,
+  created_at timestamptz default now(),
+  last_used_at timestamptz,
+  revoked_at timestamptz
+);
+
+create index if not exists api_keys_user_id_idx on public.api_keys(user_id);
+create index if not exists api_keys_key_hash_idx on public.api_keys(key_hash);
+
+-- \uC0AC\uC6A9\uB7C9 \uB85C\uADF8 \uD14C\uC774\uBE14
+create table if not exists public.usage_logs (
+  id bigserial primary key,
+  user_id uuid not null references public.users(id) on delete cascade,
+  tool_name text not null,
+  created_at timestamptz default now()
+);
+
+create index if not exists usage_logs_user_id_idx on public.usage_logs(user_id);
+create index if not exists usage_logs_created_at_idx on public.usage_logs(created_at);
+
+-- RLS (Row Level Security)
+alter table public.users enable row level security;
+alter table public.api_keys enable row level security;
+alter table public.usage_logs enable row level security;
+
+create policy "Users can view own data" on public.users
+  for select using (auth.uid() = id);
+
+create policy "Users can manage own api keys" on public.api_keys
+  for all using (auth.uid() = user_id);
+
+create policy "Users can view own usage" on public.usage_logs
+  for select using (auth.uid() = user_id);
+`;
+    DASHBOARD_LAYOUT = `import Link from 'next/link';
+import type { ReactNode } from 'react';
+
+export default function DashboardLayout({ children }: { children: ReactNode }) {
+  return (
+    <div style={{ display: 'flex', minHeight: '100vh' }}>
+      <aside style={{ width: 240, borderRight: '1px solid #eee', padding: 24 }}>
+        <h2 style={{ fontSize: 18, marginBottom: 16 }}>MCP \uB300\uC2DC\uBCF4\uB4DC</h2>
+        <nav>
+          <Link href="/dashboard" style={{ display: 'block', padding: '8px 0' }}>\uAC1C\uC694</Link>
+          <Link href="/dashboard/keys" style={{ display: 'block', padding: '8px 0' }}>API \uD0A4</Link>
+          <Link href="/dashboard/usage" style={{ display: 'block', padding: '8px 0' }}>\uC0AC\uC6A9\uB7C9</Link>
+        </nav>
+      </aside>
+      <main style={{ flex: 1, padding: 24 }}>{children}</main>
+    </div>
+  );
+}
+`;
+    DASHBOARD_PAGE = `export default function DashboardPage() {
+  return (
+    <div>
+      <h1>MCP \uB300\uC2DC\uBCF4\uB4DC</h1>
+      <p>API \uD0A4\uB97C \uBC1C\uAE09\uD558\uACE0 \uC0AC\uC6A9\uB7C9\uC744 \uAD00\uB9AC\uD558\uC138\uC694.</p>
+      <ul>
+        <li><a href="/dashboard/keys">API \uD0A4 \uBC1C\uAE09</a></li>
+        <li><a href="/dashboard/usage">\uC0AC\uC6A9\uB7C9 \uD655\uC778</a></li>
+      </ul>
+    </div>
+  );
+}
+`;
+    KEYS_PAGE = `'use client';
+import { useEffect, useState } from 'react';
+
+interface ApiKey {
+  id: string;
+  name: string;
+  created_at: string;
+  last_used_at?: string;
+}
+
+export default function KeysPage() {
+  const [keys, setKeys] = useState<ApiKey[]>([]);
+  const [newKeyName, setNewKeyName] = useState('');
+  const [newKey, setNewKey] = useState<string | null>(null);
+
+  useEffect(() => {
+    fetch('/api/keys').then(r => r.json()).then(setKeys);
+  }, []);
+
+  async function create() {
+    const res = await fetch('/api/keys', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ name: newKeyName }),
+    });
+    const data = await res.json();
+    setNewKey(data.key);
+    setKeys([...keys, data.apiKey]);
+    setNewKeyName('');
+  }
+
+  async function revoke(id: string) {
+    await fetch(\`/api/keys/\${id}\`, { method: 'DELETE' });
+    setKeys(keys.filter(k => k.id !== id));
+  }
+
+  return (
+    <div>
+      <h1>API \uD0A4 \uAD00\uB9AC</h1>
+      <div style={{ marginBottom: 24 }}>
+        <input
+          placeholder="\uD0A4 \uC774\uB984"
+          value={newKeyName}
+          onChange={e => setNewKeyName(e.target.value)}
+        />
+        <button onClick={create}>\uC0C8 \uD0A4 \uBC1C\uAE09</button>
+      </div>
+      {newKey && (
+        <div style={{ padding: 16, background: '#fffbe6', marginBottom: 24 }}>
+          <strong>\uC0C8 API \uD0A4 (\uD55C \uBC88\uB9CC \uD45C\uC2DC):</strong>
+          <pre>{newKey}</pre>
+        </div>
+      )}
+      <table style={{ width: '100%' }}>
+        <thead>
+          <tr><th>\uC774\uB984</th><th>\uC0DD\uC131\uC77C</th><th>\uB9C8\uC9C0\uB9C9 \uC0AC\uC6A9</th><th></th></tr>
+        </thead>
+        <tbody>
+          {keys.map(k => (
+            <tr key={k.id}>
+              <td>{k.name}</td>
+              <td>{new Date(k.created_at).toLocaleDateString()}</td>
+              <td>{k.last_used_at ? new Date(k.last_used_at).toLocaleString() : '\u2014'}</td>
+              <td><button onClick={() => revoke(k.id)}>\uC0AD\uC81C</button></td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  );
+}
+`;
+    USAGE_PAGE = `'use client';
+import { useEffect, useState } from 'react';
+
+interface UsageLog {
+  tool_name: string;
+  count: number;
+}
+
+export default function UsagePage() {
+  const [usage, setUsage] = useState<UsageLog[]>([]);
+  const [total, setTotal] = useState(0);
+
+  useEffect(() => {
+    fetch('/api/usage').then(r => r.json()).then(data => {
+      setUsage(data.byTool ?? []);
+      setTotal(data.total ?? 0);
+    });
+  }, []);
+
+  return (
+    <div>
+      <h1>\uC0AC\uC6A9\uB7C9</h1>
+      <p>\uCD5C\uADFC 30\uC77C \uCD1D \uD638\uCD9C: <strong>{total}</strong></p>
+      <table style={{ width: '100%' }}>
+        <thead>
+          <tr><th>\uB3C4\uAD6C</th><th>\uD638\uCD9C \uC218</th></tr>
+        </thead>
+        <tbody>
+          {usage.map(u => (
+            <tr key={u.tool_name}>
+              <td>{u.tool_name}</td>
+              <td>{u.count}</td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  );
+}
+`;
+    KEYS_API_ROUTE = `import { NextResponse } from 'next/server';
+import { createClient } from '@supabase/supabase-js';
+import crypto from 'node:crypto';
+
+const supabase = createClient(
+  process.env.NEXT_PUBLIC_SUPABASE_URL ?? '',
+  process.env.SUPABASE_SERVICE_ROLE_KEY ?? '',
+);
+
+export async function GET() {
+  // TODO: \uD604\uC7AC \uB85C\uADF8\uC778 \uC0AC\uC6A9\uC790\uC758 \uD0A4\uB9CC \uC870\uD68C (auth \uBBF8\uB4E4\uC6E8\uC5B4 \uC5F0\uB3D9 \uD544\uC694)
+  const { data, error } = await supabase
+    .from('api_keys')
+    .select('id, name, created_at, last_used_at')
+    .is('revoked_at', null);
+  if (error) return NextResponse.json({ error: error.message }, { status: 500 });
+  return NextResponse.json(data);
+}
+
+export async function POST(request: Request) {
+  const { name } = await request.json();
+  const key = \`mcp_\${crypto.randomBytes(32).toString('hex')}\`;
+  const key_hash = crypto.createHash('sha256').update(key).digest('hex');
+
+  // TODO: \uD604\uC7AC \uB85C\uADF8\uC778 \uC0AC\uC6A9\uC790 ID \uC5F0\uB3D9
+  const user_id = 'TODO-REPLACE-WITH-AUTH-USER-ID';
+
+  const { data, error } = await supabase
+    .from('api_keys')
+    .insert({ user_id, name, key_hash })
+    .select('id, name, created_at')
+    .single();
+  if (error) return NextResponse.json({ error: error.message }, { status: 500 });
+
+  return NextResponse.json({ apiKey: data, key });
+}
+`;
+    TOOLS_TEMPLATE = `import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+
+export function registerTools(server: Server): void {
+  // Tool \uBAA9\uB85D \uC815\uC758
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: [
+      {
+        name: 'hello',
+        description: '\uD14C\uC2A4\uD2B8\uC6A9 \uC778\uC0AC \uB3C4\uAD6C \u2014 \uC774 \uD15C\uD50C\uB9BF\uC744 \uC218\uC815\uD574\uC11C \uC2E4\uC81C \uB3C4\uAD6C\uB97C \uAD6C\uD604\uD558\uC138\uC694',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            name: { type: 'string', description: '\uC778\uC0AC\uD560 \uB300\uC0C1' },
+          },
+          required: ['name'],
+        },
+      },
+    ],
+  }));
+
+  // Tool \uD638\uCD9C \uCC98\uB9AC
+  server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+
+    if (name === 'hello') {
+      const target = (args as { name?: string })?.name ?? 'world';
+      return {
+        content: [{ type: 'text', text: \`Hello, \${target}!\` }],
+      };
+    }
+
+    throw new Error(\`Unknown tool: \${name}\`);
+  });
+}
+`;
+    RESOURCES_TEMPLATE = `import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import {
+  ListResourcesRequestSchema,
+  ReadResourceRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+
+export function registerResources(server: Server): void {
+  // Resource \uBAA9\uB85D \uC815\uC758
+  server.setRequestHandler(ListResourcesRequestSchema, async () => ({
+    resources: [
+      {
+        uri: 'example://sample',
+        name: 'Sample Resource',
+        description: '\uC608\uC81C \uB9AC\uC18C\uC2A4 \u2014 AI\uAC00 \uC77D\uC744 \uCEE8\uD14D\uC2A4\uD2B8',
+        mimeType: 'text/plain',
+      },
+    ],
+  }));
+
+  // Resource \uC77D\uAE30
+  server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
+    const { uri } = request.params;
+
+    if (uri === 'example://sample') {
+      return {
+        contents: [{
+          uri,
+          mimeType: 'text/plain',
+          text: 'This is a sample resource content.',
+        }],
+      };
+    }
+
+    throw new Error(\`Unknown resource: \${uri}\`);
+  });
+}
+`;
+    PROMPTS_TEMPLATE = `import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import {
+  GetPromptRequestSchema,
+  ListPromptsRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+
+export function registerPrompts(server: Server): void {
+  // Prompt \uBAA9\uB85D \uC815\uC758
+  server.setRequestHandler(ListPromptsRequestSchema, async () => ({
+    prompts: [
+      {
+        name: 'review-code',
+        description: '\uCF54\uB4DC \uB9AC\uBDF0 \uC694\uCCAD \uD504\uB86C\uD504\uD2B8',
+        arguments: [
+          { name: 'code', description: '\uB9AC\uBDF0\uD560 \uCF54\uB4DC', required: true },
+        ],
+      },
+    ],
+  }));
+
+  // Prompt \uAC00\uC838\uC624\uAE30
+  server.setRequestHandler(GetPromptRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+
+    if (name === 'review-code') {
+      const code = (args as { code?: string })?.code ?? '';
+      return {
+        messages: [{
+          role: 'user',
+          content: {
+            type: 'text',
+            text: \`\uB2E4\uC74C \uCF54\uB4DC\uB97C \uB9AC\uBDF0\uD574\uC8FC\uC138\uC694:\\n\\n\${code}\`,
+          },
+        }],
+      };
+    }
+
+    throw new Error(\`Unknown prompt: \${name}\`);
+  });
+}
+`;
+    TEST_TEMPLATE = `import { describe, it, expect } from 'vitest';
+
+describe('MCP Server', () => {
+  it('should be tested', () => {
+    // TODO: MCP \uC11C\uBC84 \uD14C\uC2A4\uD2B8 \uC791\uC131
+    expect(true).toBe(true);
+  });
+});
+`;
+  }
+});
+
 // src/stages/environment/provisioners/registry.ts
 var registry_exports = {};
 __export(registry_exports, {
   PROVISIONERS: () => PROVISIONERS,
   runProvisioners: () => runProvisioners
 });
-import { join as join3 } from "path";
-import fs4 from "fs-extra";
+import { join as join4 } from "path";
+import fs5 from "fs-extra";
 async function provisionGitHub(ctx) {
-  const gitDir = join3(ctx.cwd, ".git");
-  if (!await fs4.pathExists(gitDir)) {
-    await fs4.ensureDir(join3(ctx.cwd, ".github", "workflows"));
+  const gitDir = join4(ctx.cwd, ".git");
+  if (!await fs5.pathExists(gitDir)) {
+    await fs5.ensureDir(join4(ctx.cwd, ".github", "workflows"));
     try {
       const { execa } = await import("execa");
       await execa("git", ["init"], { cwd: ctx.cwd });
@@ -935,11 +1744,11 @@ async function provisionGitHub(ctx) {
     }
   }
   const dirs = ["src", "docs", "tests", "public", ".pai"];
-  await Promise.all(dirs.map((d) => fs4.ensureDir(join3(ctx.cwd, d))));
-  const handoffPath = join3(ctx.cwd, "handoff.md");
-  if (!await fs4.pathExists(handoffPath)) {
+  await Promise.all(dirs.map((d) => fs5.ensureDir(join4(ctx.cwd, d))));
+  const handoffPath = join4(ctx.cwd, "handoff.md");
+  if (!await fs5.pathExists(handoffPath)) {
     const now = (/* @__PURE__ */ new Date()).toLocaleString("ko-KR");
-    await fs4.writeFile(handoffPath, [
+    await fs5.writeFile(handoffPath, [
       `# Handoff \u2014 ${ctx.projectName}`,
       "",
       `> \uB9C8\uC9C0\uB9C9 \uC5C5\uB370\uC774\uD2B8: ${now}`,
@@ -968,9 +1777,9 @@ async function provisionGitHub(ctx) {
       "- \uCEE8\uD14D\uC2A4\uD2B8\uAC00 \uBD80\uC871\uD558\uBA74 AI\uAC00 \uC790\uB3D9\uC73C\uB85C \uC2EC\uCE35 \uC778\uD130\uBDF0\uB97C \uC9C4\uD589\uD569\uB2C8\uB2E4"
     ].join("\n") + "\n");
   }
-  const contribPath = join3(ctx.cwd, "CONTRIBUTING.md");
-  if (!await fs4.pathExists(contribPath)) {
-    await fs4.writeFile(contribPath, [
+  const contribPath = join4(ctx.cwd, "CONTRIBUTING.md");
+  if (!await fs5.pathExists(contribPath)) {
+    await fs5.writeFile(contribPath, [
       `# Contributing to ${ctx.projectName}`,
       "",
       "\uC774 \uD504\uB85C\uC81D\uD2B8\uC5D0 \uAE30\uC5EC\uD574 \uC8FC\uC154\uC11C \uAC10\uC0AC\uD569\uB2C8\uB2E4.",
@@ -1014,11 +1823,11 @@ async function provisionGitHub(ctx) {
       ""
     ].join("\n") + "\n");
   }
-  const contribSkillDir = join3(ctx.cwd, ".claude", "skills");
-  await fs4.ensureDir(contribSkillDir);
-  const contribSkillPath = join3(contribSkillDir, "contributing.md");
-  if (!await fs4.pathExists(contribSkillPath)) {
-    await fs4.writeFile(contribSkillPath, [
+  const contribSkillDir = join4(ctx.cwd, ".claude", "skills");
+  await fs5.ensureDir(contribSkillDir);
+  const contribSkillPath = join4(contribSkillDir, "contributing.md");
+  if (!await fs5.pathExists(contribSkillPath)) {
+    await fs5.writeFile(contribSkillPath, [
       "---",
       "name: contributing",
       'description: "\uAE30\uC5EC\uC790 \uAC00\uC774\uB4DC \u2014 \uBE0C\uB79C\uCE58 \uADDC\uCE59, \uCEE4\uBC0B \uBA54\uC2DC\uC9C0, PR \uD504\uB85C\uC138\uC2A4 \uC790\uB3D9 \uC801\uC6A9"',
@@ -1043,9 +1852,9 @@ async function provisionGitHub(ctx) {
       ""
     ].join("\n") + "\n");
   }
-  const gitignorePath = join3(ctx.cwd, ".gitignore");
-  if (!await fs4.pathExists(gitignorePath)) {
-    await fs4.writeFile(gitignorePath, [
+  const gitignorePath = join4(ctx.cwd, ".gitignore");
+  if (!await fs5.pathExists(gitignorePath)) {
+    await fs5.writeFile(gitignorePath, [
       "# Dependencies",
       "node_modules/",
       "",
@@ -1090,9 +1899,9 @@ async function provisionGitHub(ctx) {
   }
 }
 async function provisionVercel(ctx) {
-  const vercelJson = join3(ctx.cwd, "vercel.json");
-  if (!await fs4.pathExists(vercelJson)) {
-    await fs4.writeJson(vercelJson, {
+  const vercelJson = join4(ctx.cwd, "vercel.json");
+  if (!await fs5.pathExists(vercelJson)) {
+    await fs5.writeJson(vercelJson, {
       version: 2,
       name: ctx.projectName,
       builds: [{ src: "src/**", use: "@vercel/static" }]
@@ -1100,20 +1909,20 @@ async function provisionVercel(ctx) {
   }
 }
 async function provisionSupabase(ctx) {
-  const supabaseDir = join3(ctx.cwd, "supabase");
-  await fs4.ensureDir(supabaseDir);
-  const configToml = join3(supabaseDir, "config.toml");
-  if (!await fs4.pathExists(configToml)) {
-    await fs4.writeFile(configToml, '[api]\nschemas = ["public"]\n[auth]\nsite_url = "http://localhost:3000"\n');
+  const supabaseDir = join4(ctx.cwd, "supabase");
+  await fs5.ensureDir(supabaseDir);
+  const configToml = join4(supabaseDir, "config.toml");
+  if (!await fs5.pathExists(configToml)) {
+    await fs5.writeFile(configToml, '[api]\nschemas = ["public"]\n[auth]\nsite_url = "http://localhost:3000"\n');
   }
   ctx.envEntries["NEXT_PUBLIC_SUPABASE_URL"] = "YOUR_SUPABASE_URL";
   ctx.envEntries["NEXT_PUBLIC_SUPABASE_ANON_KEY"] = "YOUR_SUPABASE_ANON_KEY";
 }
 async function provisionOpenSpec(ctx) {
-  await fs4.ensureDir(join3(ctx.cwd, "docs"));
-  const openspecPath = join3(ctx.cwd, "docs", "openspec.md");
-  if (!await fs4.pathExists(openspecPath)) {
-    await fs4.writeFile(openspecPath, [
+  await fs5.ensureDir(join4(ctx.cwd, "docs"));
+  const openspecPath = join4(ctx.cwd, "docs", "openspec.md");
+  if (!await fs5.pathExists(openspecPath)) {
+    await fs5.writeFile(openspecPath, [
       `# OpenSpec \u2014 ${ctx.projectName}`,
       "",
       "## 1. \uBAA9\uC801 (Purpose)",
@@ -1140,10 +1949,10 @@ async function provisionOpenSpec(ctx) {
   }
 }
 async function provisionOMC(ctx) {
-  await fs4.ensureDir(join3(ctx.cwd, ".pai"));
-  const omcPath = join3(ctx.cwd, ".pai", "omc.md");
-  if (!await fs4.pathExists(omcPath)) {
-    await fs4.writeFile(omcPath, [
+  await fs5.ensureDir(join4(ctx.cwd, ".pai"));
+  const omcPath = join4(ctx.cwd, ".pai", "omc.md");
+  if (!await fs5.pathExists(omcPath)) {
+    await fs5.writeFile(omcPath, [
       `# OMC \u2014 Object Model Context (${ctx.projectName})`,
       "",
       "> AI\uAC00 \uC774 \uD504\uB85C\uC81D\uD2B8\uC758 \uB3C4\uBA54\uC778\uC744 \uC774\uD574\uD558\uAE30 \uC704\uD55C \uD575\uC2EC \uAC1D\uCCB4 \uBAA8\uB378",
@@ -1163,8 +1972,8 @@ async function provisionOMC(ctx) {
   }
 }
 async function provisionGstack(ctx) {
-  await fs4.ensureDir(join3(ctx.cwd, ".pai"));
-  await fs4.writeJson(join3(ctx.cwd, ".pai", "gstack.json"), {
+  await fs5.ensureDir(join4(ctx.cwd, ".pai"));
+  await fs5.writeJson(join4(ctx.cwd, ".pai", "gstack.json"), {
     version: "1.0",
     testRunner: "jest",
     coverageThreshold: { global: { lines: 80 } },
@@ -1172,10 +1981,10 @@ async function provisionGstack(ctx) {
   }, { spaces: 2 });
 }
 async function provisionRoboco(ctx) {
-  await fs4.ensureDir(join3(ctx.cwd, ".pai"));
-  const robocoPath = join3(ctx.cwd, ".pai", "roboco.json");
-  if (await fs4.pathExists(robocoPath)) return;
-  await fs4.writeJson(robocoPath, {
+  await fs5.ensureDir(join4(ctx.cwd, ".pai"));
+  const robocoPath = join4(ctx.cwd, ".pai", "roboco.json");
+  if (await fs5.pathExists(robocoPath)) return;
+  await fs5.writeJson(robocoPath, {
     version: "1.0",
     checks: ["github", "vercel", "supabase", "openspec", "omc"],
     reportOutput: "AI_READINESS_REPORT.md",
@@ -1183,14 +1992,18 @@ async function provisionRoboco(ctx) {
   }, { spaces: 2 });
 }
 async function provisionHarness(ctx) {
-  await fs4.ensureDir(join3(ctx.cwd, ".pai"));
-  await fs4.writeJson(join3(ctx.cwd, ".pai", "harness.json"), {
+  await fs5.ensureDir(join4(ctx.cwd, ".pai"));
+  await fs5.writeJson(join4(ctx.cwd, ".pai", "harness.json"), {
     version: "1.0",
     specFile: "docs/openspec.md",
     checkOn: ["pre-commit", "ci"],
     rules: ["spec-implementation-match", "api-contract-test"]
   }, { spaces: 2 });
 }
+async function provisionMcpWrapper(ctx) {
+  const { provisionMcp: provisionMcp2 } = await Promise.resolve().then(() => (init_mcp(), mcp_exports));
+  await provisionMcp2(ctx);
+}
 async function runProvisioners(keys, ctx) {
   const results = [];
   for (const key of keys) {
@@ -1208,7 +2021,7 @@ async function runProvisioners(keys, ctx) {
     }
   }
   if (Object.keys(ctx.envEntries).length > 0) {
-    writeEnvFile(join3(ctx.cwd, ".env.local"), ctx.envEntries);
+    writeEnvFile(join4(ctx.cwd, ".env.local"), ctx.envEntries);
   }
   return results;
 }
@@ -1225,7 +2038,8 @@ var init_registry = __esm({
       omc: provisionOMC,
       gstack: provisionGstack,
       roboco: provisionRoboco,
-      harness: provisionHarness
+      harness: provisionHarness,
+      mcp: provisionMcpWrapper
     };
   }
 });
@@ -1236,21 +2050,21 @@ __export(claude_commands_exports, {
   provisionClaudeCommands: () => provisionClaudeCommands,
   upgradeClaudeCommands: () => upgradeClaudeCommands
 });
-import { join as join4 } from "path";
-import fs5 from "fs-extra";
+import { join as join5 } from "path";
+import fs6 from "fs-extra";
 async function writeCommandFiles(cmdDir, entries, options) {
-  await fs5.ensureDir(cmdDir);
+  await fs6.ensureDir(cmdDir);
   const written = [];
   const skipped = [];
   const errors = [];
   for (const [filename, content] of Object.entries(entries)) {
-    const filePath = join4(cmdDir, filename);
+    const filePath = join5(cmdDir, filename);
     try {
-      if (options.skipIfExists && await fs5.pathExists(filePath)) {
+      if (options.skipIfExists && await fs6.pathExists(filePath)) {
         skipped.push(filename);
         continue;
       }
-      await fs5.writeFile(filePath, content);
+      await fs6.writeFile(filePath, content);
       written.push(filename);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
@@ -1260,13 +2074,13 @@ async function writeCommandFiles(cmdDir, entries, options) {
   return { written, skipped, errors };
 }
 async function provisionClaudeCommands(cwd) {
-  const skillDir = join4(cwd, ".claude", "skills", "pai");
-  await fs5.ensureDir(skillDir);
-  const skillPath = join4(skillDir, "SKILL.md");
-  if (!await fs5.pathExists(skillPath)) {
-    await fs5.writeFile(skillPath, SKILL_CONTENT);
+  const skillDir = join5(cwd, ".claude", "skills", "pai");
+  await fs6.ensureDir(skillDir);
+  const skillPath = join5(skillDir, "SKILL.md");
+  if (!await fs6.pathExists(skillPath)) {
+    await fs6.writeFile(skillPath, SKILL_CONTENT);
   }
-  const cmdDir = join4(cwd, ".claude", "commands", "pai");
+  const cmdDir = join5(cwd, ".claude", "commands", "pai");
   await writeCommandFiles(cmdDir, COMMANDS, { skipIfExists: true });
 }
 async function upgradeClaudeCommands(cwd) {
@@ -1275,16 +2089,16 @@ async function upgradeClaudeCommands(cwd) {
     commandsWritten: [],
     commandErrors: []
   };
-  const skillDir = join4(cwd, ".claude", "skills", "pai");
-  await fs5.ensureDir(skillDir);
+  const skillDir = join5(cwd, ".claude", "skills", "pai");
+  await fs6.ensureDir(skillDir);
   try {
-    await fs5.writeFile(join4(skillDir, "SKILL.md"), SKILL_CONTENT);
+    await fs6.writeFile(join5(skillDir, "SKILL.md"), SKILL_CONTENT);
     result.skillUpdated = true;
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     result.commandErrors.push({ file: "SKILL.md", error: msg });
   }
-  const cmdDir = join4(cwd, ".claude", "commands", "pai");
+  const cmdDir = join5(cwd, ".claude", "commands", "pai");
   const { written, errors } = await writeCommandFiles(cmdDir, COMMANDS, { skipIfExists: false });
   result.commandsWritten = written;
   result.commandErrors.push(...errors);
@@ -1906,18 +2720,18 @@ npx pai-zero wakeup                 # \uC9C0\uAE08 \uB79C\uB364 \uBA54\uC2DC\uC9
 // src/core/config.ts
 import path from "path";
 import { createRequire } from "module";
-import fs6 from "fs-extra";
+import fs7 from "fs-extra";
 async function loadConfig(cwd) {
   const configPath = path.join(cwd, CONFIG_DIR, CONFIG_FILE);
-  if (await fs6.pathExists(configPath)) {
-    return fs6.readJson(configPath);
+  if (await fs7.pathExists(configPath)) {
+    return fs7.readJson(configPath);
   }
   return null;
 }
 async function saveConfig(cwd, config) {
   const configDir = path.join(cwd, CONFIG_DIR);
-  await fs6.ensureDir(configDir);
-  await fs6.writeJson(path.join(configDir, CONFIG_FILE), config, { spaces: 2 });
+  await fs7.ensureDir(configDir);
+  await fs7.writeJson(path.join(configDir, CONFIG_FILE), config, { spaces: 2 });
 }
 function createDefaultConfig(projectName, mode) {
   return {
@@ -1944,9 +2758,9 @@ var doctor_exports = {};
 __export(doctor_exports, {
   runDoctor: () => runDoctor
 });
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import { homedir } from "os";
-import fs7 from "fs-extra";
+import fs8 from "fs-extra";
 async function runDoctor() {
   section("PAI Doctor \u2014 \uD658\uACBD \uC9C4\uB2E8");
   const checks = [];
@@ -1965,8 +2779,8 @@ async function runDoctor() {
     detail: claudeCheck.detail,
     fix: claudeCheck.ok ? void 0 : "npm install -g @anthropic-ai/claude-code"
   });
-  const globalConfigPath = join5(homedir(), ".pai", "config.json");
-  const hasGlobalConfig = await fs7.pathExists(globalConfigPath);
+  const globalConfigPath = join6(homedir(), ".pai", "config.json");
+  const hasGlobalConfig = await fs8.pathExists(globalConfigPath);
   checks.push({
     label: "\uAE00\uB85C\uBC8C \uC124\uC815",
     ok: true,
@@ -2088,7 +2902,8 @@ var init_environment = __esm({
             envEntries: {
               PAI_PROJECT_NAME: interview.projectName,
               PAI_MODE: interview.mode
-            }
+            },
+            mcp: interview.mcp
           };
           if (interview.authMethods.includes("custom")) {
             provCtx.envEntries["OAUTH_CLIENT_ID"] = interview.customAuth?.clientId || "YOUR_CLIENT_ID_HERE";
@@ -2108,6 +2923,7 @@ var init_environment = __esm({
             ...interview.extraTools.includes("supabase") ? ["supabase/config.toml"] : [],
             ...interview.extraTools.includes("gstack") ? [".pai/gstack.json"] : [],
             ...interview.extraTools.includes("harness") ? [".pai/harness.json"] : [],
+            ...interview.extraTools.includes("mcp") ? ["mcp-server/", ".mcp.json"] : [],
             ".env.local"
           ];
           console.log("");
@@ -2175,7 +2991,7 @@ __export(detector_exports, {
   scanProjectState: () => scanProjectState
 });
 import path2 from "path";
-import fs8 from "fs-extra";
+import fs9 from "fs-extra";
 async function scanProjectState(cwd) {
   const result = {
     isNewProject: true,
@@ -2186,10 +3002,10 @@ async function scanProjectState(cwd) {
     details: {}
   };
   const paiConfigPath = path2.join(cwd, ".pai", "config.json");
-  if (await fs8.pathExists(paiConfigPath)) {
+  if (await fs9.pathExists(paiConfigPath)) {
     result.hasPaiConfig = true;
     try {
-      const config = await fs8.readJson(paiConfigPath);
+      const config = await fs9.readJson(paiConfigPath);
       result.projectMode = config.mode ?? null;
     } catch {
     }
@@ -2197,7 +3013,7 @@ async function scanProjectState(cwd) {
   for (const [key, signatures] of Object.entries(PLUGIN_SIGNATURES)) {
     const installed = await Promise.any(
       signatures.map(async (sig) => {
-        if (await fs8.pathExists(path2.join(cwd, sig))) return true;
+        if (await fs9.pathExists(path2.join(cwd, sig))) return true;
         throw new Error("not found");
       })
     ).catch(() => false);
@@ -2208,7 +3024,7 @@ async function scanProjectState(cwd) {
       result.missingPlugins.push(key);
     }
   }
-  const hasAnyContent = result.installedPlugins.length > 0 || await fs8.pathExists(path2.join(cwd, "package.json")) || await fs8.pathExists(path2.join(cwd, "src")) || await fs8.pathExists(path2.join(cwd, "README.md"));
+  const hasAnyContent = result.installedPlugins.length > 0 || await fs9.pathExists(path2.join(cwd, "package.json")) || await fs9.pathExists(path2.join(cwd, "src")) || await fs9.pathExists(path2.join(cwd, "README.md"));
   result.isNewProject = !hasAnyContent;
   return result;
 }
@@ -2338,8 +3154,8 @@ var analyzer_exports2 = {};
 __export(analyzer_exports2, {
   analyzeRepository: () => analyzeRepository
 });
-import { join as join6 } from "path";
-import fs9 from "fs-extra";
+import { join as join7 } from "path";
+import fs10 from "fs-extra";
 async function analyzeRepository(repoPath) {
   try {
     return await aiAnalysis(repoPath);
@@ -2400,14 +3216,14 @@ async function checkTestCoverage(repoPath) {
     ".nycrc"
   ];
   for (const f of testConfigs) {
-    const found = await fs9.pathExists(join6(repoPath, f));
+    const found = await fs10.pathExists(join7(repoPath, f));
     findings.push({ item: f, found, details: found ? "\uC874\uC7AC" : "\uC5C6\uC74C" });
     if (found) score += 20;
   }
   const testDirs = ["tests", "test", "__tests__", "spec"];
   let hasTestDir = false;
   for (const d of testDirs) {
-    if (await fs9.pathExists(join6(repoPath, d))) {
+    if (await fs10.pathExists(join7(repoPath, d))) {
       findings.push({ item: d, found: true, details: "\uD14C\uC2A4\uD2B8 \uB514\uB809\uD1A0\uB9AC \uC874\uC7AC" });
       hasTestDir = true;
       score += 30;
@@ -2431,7 +3247,7 @@ async function checkCiCd(repoPath) {
     { path: ".circleci", label: "CircleCI" }
   ];
   for (const { path: path3, label } of ciConfigs) {
-    const found = await fs9.pathExists(join6(repoPath, path3));
+    const found = await fs10.pathExists(join7(repoPath, path3));
     findings.push({ item: label, found, details: found ? "\uC874\uC7AC" : "\uC5C6\uC74C" });
     if (found) score += 40;
   }
@@ -2450,7 +3266,7 @@ async function checkHooks(repoPath) {
     { path: ".claude/settings.json", label: "Claude Code settings" }
   ];
   for (const { path: path3, label } of hookConfigs) {
-    const found = await fs9.pathExists(join6(repoPath, path3));
+    const found = await fs10.pathExists(join7(repoPath, path3));
     findings.push({ item: label, found, details: found ? "\uC874\uC7AC" : "\uC5C6\uC74C" });
     if (found) score += 20;
   }
@@ -2468,7 +3284,7 @@ async function checkRepoStructure(repoPath) {
     { path: ".gitignore", label: ".gitignore" }
   ];
   for (const { path: path3, label } of structureChecks) {
-    const found = await fs9.pathExists(join6(repoPath, path3));
+    const found = await fs10.pathExists(join7(repoPath, path3));
     findings.push({ item: label, found, details: found ? "\uC874\uC7AC" : "\uC5C6\uC74C" });
     if (found) score += 25;
   }
@@ -2485,7 +3301,7 @@ async function checkDocumentation(repoPath) {
     { path: "docs/openspec.md", label: "OpenSpec PRD", points: 25 }
   ];
   for (const { path: path3, label, points } of docChecks) {
-    const found = await fs9.pathExists(join6(repoPath, path3));
+    const found = await fs10.pathExists(join7(repoPath, path3));
     findings.push({ item: label, found, details: found ? "\uC874\uC7AC" : "\uC5C6\uC74C" });
     if (found) score += points;
   }
@@ -2504,7 +3320,7 @@ async function checkHarnessEngineering(repoPath) {
     { path: ".pai/config.json", label: "PAI config", points: 10 }
   ];
   for (const { path: path3, label, points } of harnessChecks) {
-    const found = await fs9.pathExists(join6(repoPath, path3));
+    const found = await fs10.pathExists(join7(repoPath, path3));
     findings.push({ item: label, found, details: found ? "\uC874\uC7AC" : "\uC5C6\uC74C" });
     if (found) score += points;
   }
@@ -2887,56 +3703,56 @@ __export(shell_cd_exports, {
   installShellHelper: () => installShellHelper,
   requestCdAfter: () => requestCdAfter
 });
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { homedir as homedir2 } from "os";
-import fs10 from "fs-extra";
+import fs11 from "fs-extra";
 async function requestCdAfter(targetDir) {
-  await fs10.ensureDir(PAI_DIR);
-  await fs10.writeFile(CD_FILE, targetDir);
+  await fs11.ensureDir(PAI_DIR);
+  await fs11.writeFile(CD_FILE, targetDir);
 }
 async function installShellHelper() {
-  await fs10.ensureDir(PAI_DIR);
+  await fs11.ensureDir(PAI_DIR);
   if (isWindows) {
     return installPowerShellHelper();
   }
   return installBashHelper();
 }
 async function installBashHelper() {
-  await fs10.writeFile(HELPER_FILE_SH, BASH_HELPER);
+  await fs11.writeFile(HELPER_FILE_SH, BASH_HELPER);
   const rcFile = getShellRcPath();
   const sourceLine = 'source "$HOME/.pai/shell-helper.sh"';
-  if (await fs10.pathExists(rcFile)) {
-    const content = await fs10.readFile(rcFile, "utf8");
+  if (await fs11.pathExists(rcFile)) {
+    const content = await fs11.readFile(rcFile, "utf8");
     if (content.includes("shell-helper.sh")) {
       return true;
     }
-    await fs10.appendFile(rcFile, `
+    await fs11.appendFile(rcFile, `
 # PAI \u2014 \uC790\uB3D9 \uB514\uB809\uD1A0\uB9AC \uC774\uB3D9
 ${sourceLine}
 `);
     return false;
   }
-  await fs10.writeFile(rcFile, `${sourceLine}
+  await fs11.writeFile(rcFile, `${sourceLine}
 `);
   return false;
 }
 async function installPowerShellHelper() {
-  await fs10.writeFile(HELPER_FILE_PS1, POWERSHELL_HELPER);
+  await fs11.writeFile(HELPER_FILE_PS1, POWERSHELL_HELPER);
   const rcFile = getShellRcPath();
   const sourceLine = '. "$env:USERPROFILE\\.pai\\shell-helper.ps1"';
-  await fs10.ensureDir(join7(rcFile, ".."));
-  if (await fs10.pathExists(rcFile)) {
-    const content = await fs10.readFile(rcFile, "utf8");
+  await fs11.ensureDir(join8(rcFile, ".."));
+  if (await fs11.pathExists(rcFile)) {
+    const content = await fs11.readFile(rcFile, "utf8");
     if (content.includes("shell-helper.ps1")) {
       return true;
     }
-    await fs10.appendFile(rcFile, `
+    await fs11.appendFile(rcFile, `
 # PAI \u2014 \uC790\uB3D9 \uB514\uB809\uD1A0\uB9AC \uC774\uB3D9
 ${sourceLine}
 `);
     return false;
   }
-  await fs10.writeFile(rcFile, `${sourceLine}
+  await fs11.writeFile(rcFile, `${sourceLine}
 `);
   return false;
 }
@@ -2945,10 +3761,10 @@ var init_shell_cd = __esm({
   "src/utils/shell-cd.ts"() {
     "use strict";
     init_platform();
-    PAI_DIR = join7(homedir2(), ".pai");
-    CD_FILE = join7(PAI_DIR, ".cd-after");
-    HELPER_FILE_SH = join7(PAI_DIR, "shell-helper.sh");
-    HELPER_FILE_PS1 = join7(PAI_DIR, "shell-helper.ps1");
+    PAI_DIR = join8(homedir2(), ".pai");
+    CD_FILE = join8(PAI_DIR, ".cd-after");
+    HELPER_FILE_SH = join8(PAI_DIR, "shell-helper.sh");
+    HELPER_FILE_PS1 = join8(PAI_DIR, "shell-helper.ps1");
     BASH_HELPER = `# PAI shell helper \u2014 \uC790\uB3D9 \uB514\uB809\uD1A0\uB9AC \uC774\uB3D9 \uC9C0\uC6D0
 pai() {
   local cd_target="$HOME/.pai/.cd-after"
@@ -2990,12 +3806,12 @@ function pai {
 
 // src/stages/evaluation/cache.ts
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import { createHash } from "crypto";
 function computeRepoHash(repoPath) {
   const hash = createHash("sha256");
   for (const file of FILES_TO_HASH) {
-    const fullPath = join8(repoPath, file);
+    const fullPath = join9(repoPath, file);
     try {
       const content = readFileSync(fullPath);
       hash.update(`${file}:${content.length}`);
@@ -3006,7 +3822,7 @@ function computeRepoHash(repoPath) {
   return hash.digest("hex").slice(0, 16);
 }
 function getCachePath(repoPath) {
-  return join8(repoPath, CACHE_DIR, CACHE_FILE);
+  return join9(repoPath, CACHE_DIR, CACHE_FILE);
 }
 function loadCache(repoPath) {
   try {
@@ -3017,7 +3833,7 @@ function loadCache(repoPath) {
   }
 }
 function saveCache(repoPath, store) {
-  const cacheDir = join8(repoPath, CACHE_DIR, "cache");
+  const cacheDir = join9(repoPath, CACHE_DIR, "cache");
   if (!existsSync(cacheDir)) {
     mkdirSync(cacheDir, { recursive: true });
   }
@@ -3076,8 +3892,8 @@ var evaluate_cmd_exports = {};
 __export(evaluate_cmd_exports, {
   evaluateCommand: () => evaluateCommand
 });
-import { join as join9, basename } from "path";
-import fs11 from "fs-extra";
+import { join as join10, basename } from "path";
+import fs12 from "fs-extra";
 async function evaluateCommand(cwd, options) {
   const useCache = options.cache !== false;
   let llmOutput = useCache ? getCachedResult(cwd) : null;
@@ -3097,17 +3913,17 @@ async function evaluateCommand(cwd, options) {
   const config = await loadConfig(cwd);
   const projectName = config?.projectName ?? basename(cwd);
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  const reportDir = join9(cwd, "docs", "p-reports");
-  const reportPath = join9(reportDir, `${today}.md`);
-  await fs11.ensureDir(reportDir);
+  const reportDir = join10(cwd, "docs", "p-reports");
+  const reportPath = join10(reportDir, `${today}.md`);
+  await fs12.ensureDir(reportDir);
   const detailedReport = buildDetailedReport(result, projectName);
-  await fs11.writeFile(reportPath, detailedReport, "utf8");
+  await fs12.writeFile(reportPath, detailedReport, "utf8");
   console.log("");
   success(`\uB9AC\uD3EC\uD2B8 \uC800\uC7A5: docs/p-reports/${today}.md`);
   console.log("");
   console.log(detailedReport);
   if (options.output) {
-    await fs11.writeFile(options.output, detailedReport, "utf8");
+    await fs12.writeFile(options.output, detailedReport, "utf8");
     success(`\uCD94\uAC00 \uC800\uC7A5: ${options.output}`);
   }
   if (options.failUnder && result.totalScore < options.failUnder) {
@@ -3235,8 +4051,8 @@ var init_cmd_exports = {};
 __export(init_cmd_exports, {
   initCommand: () => initCommand
 });
-import { join as join10, basename as basename2 } from "path";
-import fs12 from "fs-extra";
+import { join as join11, basename as basename2 } from "path";
+import fs13 from "fs-extra";
 async function initCommand(cwd, nameArg) {
   printBanner();
   const { isWindows: isWindows2, diagnoseWindowsEnv: diagnoseWindowsEnv2 } = await Promise.resolve().then(() => (init_platform(), platform_exports));
@@ -3294,11 +4110,11 @@ async function initCommand(cwd, nameArg) {
           const evalResult = computeResult2(llmOutput);
           printReport2(evalResult);
           const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-          const reportDir = join10(cwd, "docs", "p-reports");
-          await fs12.ensureDir(reportDir);
+          const reportDir = join11(cwd, "docs", "p-reports");
+          await fs13.ensureDir(reportDir);
           const legacyName = basename2(cwd);
           const detailedReport = buildDetailedReport3(evalResult, legacyName);
-          await fs12.writeFile(join10(reportDir, `${today}.md`), detailedReport, "utf8");
+          await fs13.writeFile(join11(reportDir, `${today}.md`), detailedReport, "utf8");
           console.log("");
           success(`\uB9AC\uD3EC\uD2B8 \uC800\uC7A5: docs/p-reports/${today}.md`);
         } catch {
@@ -3343,8 +4159,8 @@ async function initCommand(cwd, nameArg) {
     }]);
     projectName = answer.name.trim();
   }
-  const projectDir = join10(cwd, projectName);
-  if (await fs12.pathExists(projectDir)) {
+  const projectDir = join11(cwd, projectName);
+  if (await fs13.pathExists(projectDir)) {
     const existingConfig = await loadConfig(projectDir);
     if (existingConfig) {
       console.log("");
@@ -3366,7 +4182,7 @@ async function initCommand(cwd, nameArg) {
       return;
     }
   } else {
-    await fs12.ensureDir(projectDir);
+    await fs13.ensureDir(projectDir);
     success(`${projectName}/ \uD3F4\uB354 \uC0DD\uC131`);
   }
   await setupInDirectory(projectDir, projectName);
@@ -3433,6 +4249,9 @@ async function showCompletion(projectName, projectDir, extraTools, isCurrentDir)
   if (extraTools.includes("supabase")) {
     console.log(`  ${chalk8.cyan("Supabase")}        DB + \uC778\uC99D + \uC2A4\uD1A0\uB9AC\uC9C0 (PostgreSQL \uAE30\uBC18)`);
   }
+  if (extraTools.includes("mcp")) {
+    console.log(`  ${chalk8.cyan("MCP \uC11C\uBC84")}       AI \uB3C4\uAD6C \u2014 Claude\uAC00 \uD638\uCD9C\uD560 \uCEE4\uC2A4\uD140 \uAE30\uB2A5/\uB370\uC774\uD130`);
+  }
   console.log("");
   console.log(colors.accent("  \uC124\uCE58 \uD655\uC778"));
   console.log(colors.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
@@ -3444,7 +4263,7 @@ async function showCompletion(projectName, projectDir, extraTools, isCurrentDir)
     { label: "\uC2AC\uB798\uC2DC \uCEE4\uB9E8\uB4DC", path: ".claude/skills/pai/SKILL.md" }
   ];
   for (const check of checks) {
-    const exists = await fs12.pathExists(join10(projectDir, check.path));
+    const exists = await fs13.pathExists(join11(projectDir, check.path));
     console.log(`  ${exists ? colors.success("\u2713") : colors.err("\u2717")} ${check.label.padEnd(16)} ${colors.dim(check.path)}`);
   }
   console.log("");
@@ -3469,10 +4288,10 @@ async function showCompletion(projectName, projectDir, extraTools, isCurrentDir)
       printReport2(evalResult);
       await sleep2(500);
       const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-      const reportDir = join10(projectDir, "docs", "p-reports");
-      await fs12.ensureDir(reportDir);
+      const reportDir = join11(projectDir, "docs", "p-reports");
+      await fs13.ensureDir(reportDir);
       const detailedReport = buildDetailedReport3(evalResult, projectName);
-      await fs12.writeFile(join10(reportDir, `${today}.md`), detailedReport, "utf8");
+      await fs13.writeFile(join11(reportDir, `${today}.md`), detailedReport, "utf8");
       await sleep2(500);
       console.log("");
       success(`\uB9AC\uD3EC\uD2B8 \uC800\uC7A5: docs/p-reports/${today}.md`);
@@ -3500,7 +4319,7 @@ async function showCompletion(projectName, projectDir, extraTools, isCurrentDir)
   const shellRc = getShellRcPath2();
   let hasYoloAliasSet = false;
   try {
-    const rcContent = await fs12.readFile(shellRc, "utf8");
+    const rcContent = await fs13.readFile(shellRc, "utf8");
     hasYoloAliasSet = checkYolo(rcContent);
   } catch {
   }
@@ -3521,10 +4340,10 @@ async function showCompletion(projectName, projectDir, extraTools, isCurrentDir)
       const { getYoloAliasLine: getYoloAliasLine2 } = await Promise.resolve().then(() => (init_platform(), platform_exports));
       const aliasLine = getYoloAliasLine2();
       try {
-        const rcContent = await fs12.readFile(shellRc, "utf8").catch(() => "");
+        const rcContent = await fs13.readFile(shellRc, "utf8").catch(() => "");
         if (!rcContent.includes("claude-yolo")) {
-          await fs12.ensureDir(join10(shellRc, ".."));
-          await fs12.appendFile(shellRc, `
+          await fs13.ensureDir(join11(shellRc, ".."));
+          await fs13.appendFile(shellRc, `
 # PAI \u2014 claude-YOLO mode
 ${aliasLine}
 `);
@@ -3755,9 +4574,9 @@ async function installOrchestratorOnly(projectDir, projectName) {
     const evalResult = computeResult2(llmOutput);
     printReport2(evalResult);
     const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    const reportDir = join10(projectDir, "docs", "p-reports");
-    await fs12.ensureDir(reportDir);
-    await fs12.writeFile(join10(reportDir, `${today}.md`), buildDetailedReport3(evalResult, projectName), "utf8");
+    const reportDir = join11(projectDir, "docs", "p-reports");
+    await fs13.ensureDir(reportDir);
+    await fs13.writeFile(join11(reportDir, `${today}.md`), buildDetailedReport3(evalResult, projectName), "utf8");
     console.log("");
     hint(`\uC0C1\uC138 \uB9AC\uD3EC\uD2B8: docs/p-reports/${today}.md`);
   } catch {
@@ -3807,7 +4626,7 @@ async function detectLegacyProject(cwd) {
     ".gitignore"
   ];
   for (const signal of signals) {
-    if (await fs12.pathExists(join10(cwd, signal))) return true;
+    if (await fs13.pathExists(join11(cwd, signal))) return true;
   }
   return false;
 }
@@ -3824,17 +4643,17 @@ var init_init_cmd = __esm({
 });
 
 // src/stages/design/openspec.ts
-import { join as join11 } from "path";
-import fs13 from "fs-extra";
+import { join as join12 } from "path";
+import fs14 from "fs-extra";
 async function initOpenSpec(cwd, projectName) {
-  const docsDir = join11(cwd, "docs");
-  await fs13.ensureDir(docsDir);
-  const openspecPath = join11(docsDir, "openspec.md");
-  if (await fs13.pathExists(openspecPath)) {
+  const docsDir = join12(cwd, "docs");
+  await fs14.ensureDir(docsDir);
+  const openspecPath = join12(docsDir, "openspec.md");
+  if (await fs14.pathExists(openspecPath)) {
     info("docs/openspec.md \uC774\uBBF8 \uC874\uC7AC \u2014 \uAC74\uB108\uB700");
     return;
   }
-  await fs13.writeFile(openspecPath, [
+  await fs14.writeFile(openspecPath, [
     `# OpenSpec \u2014 ${projectName}`,
     "",
     "## 1. \uBAA9\uC801 (Purpose)",
@@ -3862,13 +4681,13 @@ async function initOpenSpec(cwd, projectName) {
 }
 async function validateOpenSpec(cwd) {
   const candidates = [
-    join11(cwd, "docs", "openspec.md"),
-    join11(cwd, "openspec.md"),
-    join11(cwd, ".pai", "openspec.md")
+    join12(cwd, "docs", "openspec.md"),
+    join12(cwd, "openspec.md"),
+    join12(cwd, ".pai", "openspec.md")
   ];
   let specPath = null;
   for (const p of candidates) {
-    if (await fs13.pathExists(p)) {
+    if (await fs14.pathExists(p)) {
       specPath = p;
       break;
     }
@@ -3882,7 +4701,7 @@ async function validateOpenSpec(cwd) {
       warnings: ["openspec.md \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. `pai design init` \uC744 \uC2E4\uD589\uD558\uC138\uC694."]
     };
   }
-  const content = await fs13.readFile(specPath, "utf8");
+  const content = await fs14.readFile(specPath, "utf8");
   const missing = [];
   let filled = 0;
   for (const section2 of REQUIRED_SECTIONS) {
@@ -3930,17 +4749,17 @@ var init_openspec = __esm({
 });
 
 // src/stages/design/omc.ts
-import { join as join12 } from "path";
-import fs14 from "fs-extra";
+import { join as join13 } from "path";
+import fs15 from "fs-extra";
 async function initOMC(cwd, projectName) {
-  const paiDir = join12(cwd, ".pai");
-  await fs14.ensureDir(paiDir);
-  const omcPath = join12(paiDir, "omc.md");
-  if (await fs14.pathExists(omcPath)) {
+  const paiDir = join13(cwd, ".pai");
+  await fs15.ensureDir(paiDir);
+  const omcPath = join13(paiDir, "omc.md");
+  if (await fs15.pathExists(omcPath)) {
     info(".pai/omc.md \uC774\uBBF8 \uC874\uC7AC \u2014 \uAC74\uB108\uB700");
     return;
   }
-  await fs14.writeFile(omcPath, [
+  await fs15.writeFile(omcPath, [
     `# OMC \u2014 Object Model Context (${projectName})`,
     "",
     "> AI\uAC00 \uC774 \uD504\uB85C\uC81D\uD2B8\uC758 \uB3C4\uBA54\uC778\uC744 \uC774\uD574\uD558\uAE30 \uC704\uD55C \uD575\uC2EC \uAC1D\uCCB4 \uBAA8\uB378",
@@ -4022,25 +4841,25 @@ var init_design_cmd = __esm({
 });
 
 // src/stages/validation/runner.ts
-import { join as join13 } from "path";
-import fs15 from "fs-extra";
+import { join as join14 } from "path";
+import fs16 from "fs-extra";
 async function runTests(cwd) {
   const start = Date.now();
-  const gstackPath = join13(cwd, ".pai", "gstack.json");
+  const gstackPath = join14(cwd, ".pai", "gstack.json");
   let runner = "npm test";
-  if (await fs15.pathExists(gstackPath)) {
+  if (await fs16.pathExists(gstackPath)) {
     try {
-      const config = await fs15.readJson(gstackPath);
+      const config = await fs16.readJson(gstackPath);
       if (config.testRunner === "vitest") runner = "npx vitest run";
       else if (config.testRunner === "jest") runner = "npx jest";
       else if (config.testRunner === "mocha") runner = "npx mocha";
     } catch {
     }
   }
-  const pkgPath = join13(cwd, "package.json");
-  if (await fs15.pathExists(pkgPath)) {
+  const pkgPath = join14(cwd, "package.json");
+  if (await fs16.pathExists(pkgPath)) {
     try {
-      const pkg4 = await fs15.readJson(pkgPath);
+      const pkg4 = await fs16.readJson(pkgPath);
       if (!pkg4.scripts?.test || pkg4.scripts.test.includes("no test specified")) {
         return {
           runner,
@@ -4082,16 +4901,16 @@ var init_runner = __esm({
 });
 
 // src/stages/validation/harness.ts
-import { join as join14 } from "path";
-import fs16 from "fs-extra";
+import { join as join15 } from "path";
+import fs17 from "fs-extra";
 async function runHarnessCheck(cwd) {
-  const harnessPath = join14(cwd, ".pai", "harness.json");
-  if (!await fs16.pathExists(harnessPath)) {
+  const harnessPath = join15(cwd, ".pai", "harness.json");
+  if (!await fs17.pathExists(harnessPath)) {
     return { enabled: false, specFile: null, rules: [], checks: [] };
   }
   let config;
   try {
-    config = await fs16.readJson(harnessPath);
+    config = await fs17.readJson(harnessPath);
   } catch {
     return { enabled: false, specFile: null, rules: [], checks: [] };
   }
@@ -4099,8 +4918,8 @@ async function runHarnessCheck(cwd) {
   const rules = config.rules ?? [];
   const checks = [];
   if (rules.includes("spec-implementation-match")) {
-    const specExists = await fs16.pathExists(join14(cwd, specFile));
-    const srcExists = await fs16.pathExists(join14(cwd, "src"));
+    const specExists = await fs17.pathExists(join15(cwd, specFile));
+    const srcExists = await fs17.pathExists(join15(cwd, "src"));
     checks.push({
       rule: "spec-implementation-match",
       passed: specExists && srcExists,
@@ -4108,8 +4927,8 @@ async function runHarnessCheck(cwd) {
     });
   }
   if (rules.includes("api-contract-test")) {
-    const testDir = await fs16.pathExists(join14(cwd, "tests"));
-    const testDir2 = await fs16.pathExists(join14(cwd, "test"));
+    const testDir = await fs17.pathExists(join15(cwd, "tests"));
+    const testDir2 = await fs17.pathExists(join15(cwd, "test"));
     checks.push({
       rule: "api-contract-test",
       passed: testDir || testDir2,
@@ -4199,14 +5018,14 @@ var init_context = __esm({
 });
 
 // src/stages/design/index.ts
-import { join as join15 } from "path";
-import fs17 from "fs-extra";
+import { join as join16 } from "path";
+import fs18 from "fs-extra";
 async function autoInstallHarness(cwd) {
-  const harnessPath = join15(cwd, ".pai", "harness.json");
-  if (await fs17.pathExists(harnessPath)) return;
+  const harnessPath = join16(cwd, ".pai", "harness.json");
+  if (await fs18.pathExists(harnessPath)) return;
   await withSpinner("Harness Engineering \uC790\uB3D9 \uC124\uC815 \uC911...", async () => {
-    await fs17.ensureDir(join15(cwd, ".pai"));
-    await fs17.writeJson(harnessPath, {
+    await fs18.ensureDir(join16(cwd, ".pai"));
+    await fs18.writeJson(harnessPath, {
       version: "1.0",
       specFile: "docs/openspec.md",
       checkOn: ["pre-commit", "ci"],
@@ -4551,7 +5370,7 @@ __export(remove_cmd_exports, {
   removeCommand: () => removeCommand
 });
 import { basename as basename4, dirname } from "path";
-import fs18 from "fs-extra";
+import fs19 from "fs-extra";
 async function removeCommand(cwd, options) {
   section("\uD504\uB85C\uC81D\uD2B8 \uC0AD\uC81C");
   const config = await loadConfig(cwd);
@@ -4569,7 +5388,7 @@ async function removeCommand(cwd, options) {
   console.log(colors.err(`  ${folderName}/ \uD3F4\uB354 \uC804\uCCB4\uAC00 \uC0AD\uC81C\uB429\uB2C8\uB2E4.`));
   hint("\uC774 \uC791\uC5C5\uC740 \uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
   console.log("");
-  const items = await fs18.readdir(cwd);
+  const items = await fs19.readdir(cwd);
   const fileCount = items.filter((i) => !i.startsWith(".")).length;
   const hiddenCount = items.filter((i) => i.startsWith(".")).length;
   info(`\uD30C\uC77C/\uD3F4\uB354 ${fileCount}\uAC1C, \uC228\uAE40 \uD56D\uBAA9 ${hiddenCount}\uAC1C`);
@@ -4588,7 +5407,7 @@ async function removeCommand(cwd, options) {
   }
   process.chdir(parentDir);
   try {
-    await fs18.remove(cwd);
+    await fs19.remove(cwd);
     console.log("");
     success(`${folderName}/ \uD504\uB85C\uC81D\uD2B8\uAC00 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.`);
     try {
@@ -4741,8 +5560,8 @@ var savetoken_cmd_exports = {};
 __export(savetoken_cmd_exports, {
   savetokenCommand: () => savetokenCommand
 });
-import { join as join16, relative } from "path";
-import fs19 from "fs-extra";
+import { join as join17, relative } from "path";
+import fs20 from "fs-extra";
 import chalk6 from "chalk";
 async function savetokenCommand(cwd) {
   const { createSpinner: createSpinner2 } = await Promise.resolve().then(() => (init_progress(), progress_exports));
@@ -4811,11 +5630,11 @@ async function savetokenCommand(cwd) {
   console.log(`         \u2192 ${colors.dim("\uB8F0 \uAE30\uBC18 \uB85C\uC9C1, \uD0A4\uC6CC\uB4DC \uB9E4\uCE6D\uC73C\uB85C \uAC80\uD1A0 \uD6C4 \uB300\uCCB4")}`);
   console.log(`  ${chalk6.red("\u25CF")} \uB192\uC74C   \uCF54\uB4DC \uC0DD\uC131, \uBCF5\uC7A1\uD55C \uCD94\uB860, \uCC3D\uC758\uC801 \uC0DD\uC131`);
   console.log(`         \u2192 ${colors.dim("AI \uD544\uC218 \u2014 \uD504\uB86C\uD504\uD2B8 \uCD5C\uC801\uD654\uB85C \uD1A0\uD070 \uC808\uAC10")}`);
-  const reportDir = join16(cwd, ".pai");
-  await fs19.ensureDir(reportDir);
+  const reportDir = join17(cwd, ".pai");
+  await fs20.ensureDir(reportDir);
   const report = buildReport(callSites, cwd);
-  const reportPath = join16(reportDir, "savetoken-report.md");
-  await fs19.writeFile(reportPath, report, "utf8");
+  const reportPath = join17(reportDir, "savetoken-report.md");
+  await fs20.writeFile(reportPath, report, "utf8");
   console.log("");
   success("\uC2A4\uCE94 \uB9AC\uD3EC\uD2B8 \uC800\uC7A5: .pai/savetoken-report.md");
   console.log("");
@@ -4971,9 +5790,9 @@ var wakeup_cmd_exports = {};
 __export(wakeup_cmd_exports, {
   wakeupCommand: () => wakeupCommand
 });
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 import { homedir as homedir3, platform as osPlatform } from "os";
-import fs20 from "fs-extra";
+import fs21 from "fs-extra";
 import chalk7 from "chalk";
 async function wakeupCommand(timeOrAction, schedule = "\uD3C9\uC77C") {
   if (timeOrAction === "off") {
@@ -5020,9 +5839,9 @@ async function wakeupCommand(timeOrAction, schedule = "\uD3C9\uC77C") {
     projectDir,
     launchMode
   };
-  await fs20.ensureDir(PAI_DIR2);
-  await fs20.writeJson(CONFIG_FILE2, config, { spaces: 2 });
-  await fs20.writeJson(MESSAGES_FILE, MESSAGES);
+  await fs21.ensureDir(PAI_DIR2);
+  await fs21.writeJson(CONFIG_FILE2, config, { spaces: 2 });
+  await fs21.writeJson(MESSAGES_FILE, MESSAGES);
   await createWakeupScript(config);
   if (osPlatform() === "darwin") {
     await setupMacOS(config);
@@ -5052,8 +5871,8 @@ async function wakeupCommand(timeOrAction, schedule = "\uD3C9\uC77C") {
 async function setupMacOS(config) {
   const { execa } = await import("execa");
   const [hour, minute] = config.time.split(":").map(Number);
-  const plistDir = join17(homedir3(), "Library", "LaunchAgents");
-  await fs20.ensureDir(plistDir);
+  const plistDir = join18(homedir3(), "Library", "LaunchAgents");
+  await fs21.ensureDir(plistDir);
   const weekdays = scheduleToWeekdays(config.schedule);
   let calendarEntries;
   if (weekdays.length === 7) {
@@ -5089,7 +5908,7 @@ ${calendarEntries}
   <string>${PAI_DIR2}/wakeup.log</string>
 </dict>
 </plist>`;
-  await fs20.writeFile(PLIST_PATH, plist);
+  await fs21.writeFile(PLIST_PATH, plist);
   await execa("launchctl", ["unload", PLIST_PATH]).catch(() => {
   });
   await execa("launchctl", ["load", PLIST_PATH]);
@@ -5111,9 +5930,9 @@ ${calendarEntries}
 async function setupWindows(config) {
   const { execa } = await import("execa");
   const [hour, minute] = config.time.split(":").map(Number);
-  const psScriptDir = join17(homedir3(), ".pai");
-  await fs20.ensureDir(psScriptDir);
-  const psScriptPath = join17(psScriptDir, "wakeup.ps1");
+  const psScriptDir = join18(homedir3(), ".pai");
+  await fs21.ensureDir(psScriptDir);
+  const psScriptPath = join18(psScriptDir, "wakeup.ps1");
   const claudeCmd = config.launchMode === "yolo" ? "claude --dangerously-skip-permissions" : "claude";
   const psScript = `# PAI Wakeup \u2014 Claude Code \uC138\uC158 \uC790\uB3D9 \uC2DC\uC791
 $paiDir = "$env:USERPROFILE\\.pai"
@@ -5142,7 +5961,7 @@ $notifier.Show([Windows.UI.Notifications.ToastNotification]::new($xml))
 # Open PowerShell with Claude Code
 Start-Process powershell -ArgumentList "-NoExit", "-Command", "Get-Content '$todayFile'; Write-Host ''; Set-Location '${config.projectDir}'; ${claudeCmd}"
 `;
-  await fs20.writeFile(psScriptPath, psScript, "utf8");
+  await fs21.writeFile(psScriptPath, psScript, "utf8");
   const daysMap = {
     "\uD3C9\uC77C": "MON,TUE,WED,THU,FRI",
     "\uB9E4\uC77C": "MON,TUE,WED,THU,FRI,SAT,SUN",
@@ -5190,7 +6009,7 @@ async function disableWakeup() {
   if (osPlatform() === "darwin") {
     await execa("launchctl", ["unload", PLIST_PATH]).catch(() => {
     });
-    await fs20.remove(PLIST_PATH).catch(() => {
+    await fs21.remove(PLIST_PATH).catch(() => {
     });
     success("launchd \uC2A4\uCF00\uC904 \uC81C\uAC70");
     console.log("");
@@ -5211,14 +6030,14 @@ async function disableWakeup() {
   } else {
     await removeCronEntry();
   }
-  await fs20.remove(CONFIG_FILE2).catch(() => {
+  await fs21.remove(CONFIG_FILE2).catch(() => {
   });
   console.log("");
   success("\u2600\uFE0F \uC6E8\uC774\uD06C\uC5C5 \uD574\uC81C \uC644\uB8CC");
 }
 async function showStatus() {
-  if (await fs20.pathExists(CONFIG_FILE2)) {
-    const config = await fs20.readJson(CONFIG_FILE2);
+  if (await fs21.pathExists(CONFIG_FILE2)) {
+    const config = await fs21.readJson(CONFIG_FILE2);
     console.log("");
     success("\u2600\uFE0F \uC6E8\uC774\uD06C\uC5C5 \uD65C\uC131\uD654");
     console.log(`  \uC2DC\uAC04       ${chalk7.white(config.time)}`);
@@ -5226,7 +6045,7 @@ async function showStatus() {
     console.log(`  \uD504\uB85C\uC81D\uD2B8   ${chalk7.white(config.projectDir)}`);
     console.log(`  \uBAA8\uB4DC       ${chalk7.white(config.launchMode === "yolo" ? "claude-YOLO mode" : "\uC77C\uBC18 \uBAA8\uB4DC")}`);
     if (osPlatform() === "darwin") {
-      const plistExists = await fs20.pathExists(PLIST_PATH);
+      const plistExists = await fs21.pathExists(PLIST_PATH);
       console.log(`  launchd    ${plistExists ? chalk7.green("\uD65C\uC131") : chalk7.red("\uBE44\uD65C\uC131")}`);
     }
     console.log("");
@@ -5379,7 +6198,7 @@ fi
 
 echo "[$(date)] PAI Wakeup completed" >> "$LOG_FILE"
 `;
-  await fs20.writeFile(SCRIPT_FILE, script, { mode: 493 });
+  await fs21.writeFile(SCRIPT_FILE, script, { mode: 493 });
 }
 var PAI_DIR2, CONFIG_FILE2, MESSAGES_FILE, SCRIPT_FILE, PLIST_NAME, PLIST_PATH, CRON_MARKER, MESSAGES;
 var init_wakeup_cmd = __esm({
@@ -5387,12 +6206,12 @@ var init_wakeup_cmd = __esm({
     "use strict";
     init_ui();
     init_logger();
-    PAI_DIR2 = join17(homedir3(), ".pai");
-    CONFIG_FILE2 = join17(PAI_DIR2, "wakeup-config.json");
-    MESSAGES_FILE = join17(PAI_DIR2, "wakeup-messages.json");
-    SCRIPT_FILE = join17(PAI_DIR2, "wakeup.sh");
+    PAI_DIR2 = join18(homedir3(), ".pai");
+    CONFIG_FILE2 = join18(PAI_DIR2, "wakeup-config.json");
+    MESSAGES_FILE = join18(PAI_DIR2, "wakeup-messages.json");
+    SCRIPT_FILE = join18(PAI_DIR2, "wakeup.sh");
     PLIST_NAME = "com.pai.wakeup";
-    PLIST_PATH = join17(homedir3(), "Library", "LaunchAgents", `${PLIST_NAME}.plist`);
+    PLIST_PATH = join18(homedir3(), "Library", "LaunchAgents", `${PLIST_NAME}.plist`);
     CRON_MARKER = "# PAI-WAKEUP";
     MESSAGES = [
       `Here's to the crazy ones. The misfits. The rebels. The troublemakers.