project-auto-wizard 0.16.0 → 0.16.2

package/README.ja.md

@@ -49,7 +49,7 @@ npx project-auto-wizard --mode full --force --type node --dry-run   # preview on
 
 生成されたファイルをコミットして push してください。`npx project-auto-wizard --mode doctor` は、ワークフローが依存するリポジトリ設定を確認します。
 
-メッセージの言語は英語または韓国語（`en` | `ko`）です。`--lang`、環境変数 `PROJECT_AUTO_WIZARD_LANG`、`version.yml` の `language` の順に優先されます。
+メッセージの言語は英語または韓国語（`en` | `ko`）です。`--lang`、環境変数 `PROJECT_AUTO_WIZARD_LANG`、`version.yml` の `language` の順に優先されます。環境変数はその実行にのみ適用され、有効な保存済み `language` は上書きしません（有効な値がない場合のみ保存）。上書きするには `--lang` を使います。
 
 ## インストールされるもの
 

package/README.ko.md

@@ -49,7 +49,7 @@ npx project-auto-wizard --mode full --force --type node --dry-run   # preview on
 
 생성된 파일을 커밋하고 push하세요. `npx project-auto-wizard --mode doctor`는 워크플로우가 의존하는 레포 설정을 점검합니다.
 
-메시지 언어는 영어 또는 한국어(`en` | `ko`)입니다. `--lang`, 환경변수 `PROJECT_AUTO_WIZARD_LANG`, `version.yml`의 `language` 순서로 우선 적용됩니다.
+메시지 언어는 영어 또는 한국어(`en` | `ko`)입니다. `--lang`, 환경변수 `PROJECT_AUTO_WIZARD_LANG`, `version.yml`의 `language` 순서로 우선 적용됩니다. 환경변수는 그 실행에만 적용되며 저장된 유효한 `language`를 덮어쓰지 않습니다(유효한 값이 없을 때만 저장). 덮어쓰려면 `--lang`을 쓰세요.
 
 ## 설치되는 것
 

package/README.md

@@ -21,7 +21,7 @@ Everything it installs is plain GitHub Actions in your own repository. No API ke
 </div>
 
 <!-- AUTO-VERSION-SECTION: DO NOT EDIT MANUALLY -->
-## Latest Version : v0.16.0 (2026-10-01)
+## Latest Version : v0.16.2 (2026-10-01)
 
 [Full release history](CHANGELOG.md)
 
@@ -50,7 +50,7 @@ npx project-auto-wizard --mode full --force --type node --dry-run   # preview on
 
 Commit the generated files and push. `npx project-auto-wizard --mode doctor` checks the repository settings the workflows depend on.
 
-Messages are in English or Korean (`en` | `ko`). Pick one with `--lang`, the `PROJECT_AUTO_WIZARD_LANG` environment variable, or `language` in `version.yml`, in that order of precedence.
+Messages are in English or Korean (`en` | `ko`). Pick one with `--lang`, the `PROJECT_AUTO_WIZARD_LANG` environment variable, or `language` in `version.yml`, in that order of precedence. The environment variable applies to that run only and does not overwrite a valid saved `language` (it is saved only when there is none); `--lang` does.
 
 ## What you get
 

package/README.zh-CN.md

@@ -49,7 +49,7 @@ npx project-auto-wizard --mode full --force --type node --dry-run   # preview on
 
 提交生成的文件并 push。`npx project-auto-wizard --mode doctor` 会检查工作流所依赖的仓库设置。
 
-消息语言为英语或韩语（`en` | `ko`）。可通过 `--lang`、环境变量 `PROJECT_AUTO_WIZARD_LANG` 或 `version.yml` 中的 `language` 指定，优先级依次降低。
+消息语言为英语或韩语（`en` | `ko`）。可通过 `--lang`、环境变量 `PROJECT_AUTO_WIZARD_LANG` 或 `version.yml` 中的 `language` 指定，优先级依次降低。环境变量仅对该次运行生效，不会覆盖已保存的有效 `language`（仅在没有有效值时才保存）；如需覆盖请使用 `--lang`。
 
 ## 安装内容
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "project-auto-wizard",
-  "version": "0.16.0",
+  "version": "0.16.2",
   "description": "One command DevOps: npx wizard that installs GitHub-native Release Automation (optional GitHub Copilot AI summaries) into any project",
   "license": "MIT",
   "type": "module",

package/payload/scripts/messages.py

@@ -674,6 +674,7 @@ EN = {
     "flutter_a.ci_apk_start": "📦 Starting the Flutter APK build (debug)...",
     "flutter_a.ci_apk_done": "✅ APK build complete",
     "flutter_a.ci_podfile_missing": "ℹ️ ios/Podfile not found, skipping pod install (no CocoaPods plugins)",
+    "flutter_a.ci_pods_installed": "✅ CocoaPods installed",
     "flutter_a.ci_ios_start": "📦 Starting the Flutter iOS build...",
     "flutter_a.ci_ios_done": "✅ iOS build complete",
     "flutter_a.ci_gate_results": "needs results: {results}",
@@ -751,7 +752,8 @@ EN = {
     "ios_test_tf.st_waiting": "⏸️ Waiting",
     "ios_test_tf.st_done": "✅ Done",
     "ios_test_tf.st_failed": "❌ Failed",
-    "ios_test_tf.st_canceled": "⏸️ Canceled",
+    "ios_test_tf.st_not_run": "⏸️ Not run (an earlier step failed)",
+    "ios_test_tf.st_precheck_blocked": "⏸️ Not run (pre-check failed: {missing})",
     "ios_test_tf.row_build_number": "| **Build number** | `{build}` |",
     "ios_test_tf.row_app_version": "| **App version** | `{version}({build})` |",
     "ios_test_tf.row_branch": "| **Branch** | `{branch}` |",
@@ -789,6 +791,7 @@ EN = {
     "ios_test_tf.notes_generated": "📋 Generated release notes:",
     "ios_test_tf.title_prepare_failed": "## 🍎 ❌ iOS TestFlight build failed",
     "ios_test_tf.prepare_error": "❌ **An error occurred while preparing the environment.**",
+    "ios_test_tf.prepare_precheck_error": "❌ **The pre-check failed, so the build did not start.** Missing or invalid: {missing}",
     "ios_test_tf.run_log_check_link": "🔗 [Check the workflow run log]({url})",
     "ios_test_tf.log_prepare_failed": "❌ Progress update complete: prepare failed",
     "ios_test_tf.log_prepare_done": "✅ Progress update complete: prepare done ({elapsed})",
@@ -882,6 +885,7 @@ EN = {
     "truncate.limit_positive": "ERROR: limit must be a positive integer: {limit}",
     # --- version ---
     "version.bump_help": "bump level (default patch — same as before when not given)",
+    "version.option_default_help": "value to print when the key is not in version.yml (default false)",
     # --- wf_aisum ---
     "wf_aisum.no_issue_in_branch": "No issue number found in the branch name — skipping: {ref}",
     # --- wf_changelog ---
@@ -1047,7 +1051,8 @@ EN = {
     "wf_preview.status_done": "✅ Done",
     "wf_preview.status_failed": "❌ Failed",
     "wf_preview.status_init_failed": "⚠️ Initialization failed",
-    "wf_preview.status_waiting": "⏸️ Waiting",
+    "wf_preview.status_not_run": "⏸️ Not run (an earlier step failed)",
+    "wf_preview.status_precheck_blocked": "⏸️ Not run (pre-check failed: {missing})",
     "wf_preview.tbl_commands": "| Command | Description |",
     "wf_preview.tbl_items": "| Item | Value |",
     "wf_preview.tbl_steps": "| Step | Status | Duration |",
@@ -1265,6 +1270,7 @@ EN = {
     "version_manager.err_invalid_version": "ERROR: invalid version format: {version}",
     "version_manager.err_invalid_version_xyz": "ERROR: invalid version format: {version} (must be x.y.z)",
     "version_manager.err_generic": "ERROR: {error}",
+    "version_manager.option_invalid": "::warning::version.yml option {option} has an unrecognized value \"{value}\"; using false. Use true or false.",
     "version_manager.err_no_types_sync": "ERROR: version.yml has no readable project_types — cannot sync project files",
     "version_manager.err_no_types_check": "ERROR: version.yml has no readable project_types — cannot sync versions",
     "version_manager.err_write_failed": "failed to write version {version} to version.yml",
@@ -1290,11 +1296,15 @@ EN = {
     "wf_common.rebase_ok": "rebase ok, retrying push...",
     "wf_common.rebase_failed": "rebase failed, manual conflict resolution required",
     "wf_common.push_gave_up": "push failed after {max_retries} attempts",
+    "wf_common.push_protected": "Push to {branch} was rejected by a branch protection rule, not by a race, so retrying cannot help. The bot commit has to be pushed to {branch} directly: allow the pushing account (the WORKFLOW_PAT owner, or the GitHub Actions bot when no PAT is set) to bypass the rule.",
+    "wf_release.push_protected_trunk": "trunk-based mode commits every release (version bump and CHANGELOG) straight to {branch}, so its protection rule must allow that push. If it cannot, switch to the develop -> main release flow, where the bot only commits to the release PR branch.",
     "wf_common.readme_conflict_resolved": "README.md conflicted with a concurrent update - kept the remote copy and reapplied the version line",
     # --- wf_aisum ---
     "wf_aisum.expected_version": "expected next version: {version} (current: {current_version}, mode: {mode}, bump: {bump})",
     "wf_aisum.comment_update_failed": "comment update failed — continuing (this workflow never blocks the PR)",
     "wf_aisum.comment_post_failed": "comment post failed — continuing (this workflow never blocks the PR)",
+    "wf_aisum.summary_heading": "📋 **PR Summary (project-auto-wizard)**",
+    "wf_aisum.engine_label": "engine: {engine}",
     # --- wf_changelog ---
     "wf_changelog.pr_not_open": "PR #{pr_number} is already {state} — skipping the release pipeline",
     "wf_changelog.pr_state": "PR #{pr_number} state: {state}",
@@ -1314,10 +1324,20 @@ EN = {
     "wf_changelog.automerge_enabled": "automerge enabled: {subject}",
     "wf_changelog.automerge_unavailable": "automerge unavailable — merged directly: {subject}",
     "wf_changelog.automerge_off": "release_automerge is off — PR renamed to \"{subject}\"; merge it yourself",
+    "wf_changelog.automerge_off_list_failed": "Could not read the comments of PR #{pr_number}; skipped the merge guidance comment to avoid a duplicate",
+    "wf_changelog.automerge_off_rename_hint": "The PR title could not be updated automatically. Before merging, set the merge commit message (or the PR title) to `{subject}` so the release is published.",
     "wf_changelog.automerge_rename_failed": "Could not update PR #{pr_number} (title or guidance comment); the release still needs \"chore(release):\" in the merge commit message",
-    "wf_changelog.automerge_off_comment": "**Automatic merge is off** (`release_automerge: false` in `version.yml`). Merge this PR yourself when you are ready to release, using **Create a merge commit**. Do not use *Squash and merge* or *Rebase and merge*: the release gate reads `chore(release):` from the resulting commit message, and squashing or rebasing also rewrites the history that the next release notes are built from.",
+    "wf_changelog.automerge_off_comment": "**Automatic merge is off** (`release_automerge: false` in `version.yml`). Wait until this workflow run has finished (it confirms the version and renames this PR to `chore(release): ...`), then merge it yourself with **Create a merge commit** (recommended).\n\nOther merge methods may not publish the release by themselves. *Rebase and merge* leaves the version-confirm commit (`[skip ci]`) as the last commit, and *Squash and merge* with the default message (commit list included) puts that `[skip ci]` into the merge commit body; in both cases GitHub skips the push workflows and no tag or Release is created. If the repository's squash message default is the PR title only, a squash merge is published. If a release was skipped, run **PROJECT-RELEASE-PUBLISH** manually on the release branch (Actions > Run workflow) to publish. Both methods also rewrite the commit history the next release notes are built from, so earlier changes can be listed again (after a rebase merge only once develop has merged the release branch back). Merging before this run finishes has a similar effect: the safety-net workflow (PROJECT-VERSION-CONTROL) then publishes an extra patch version.",
     "wf_changelog.merge_retry": "merge attempt {attempt}/{max_attempts} failed — retrying in {wait}s",
+    "wf_changelog.head_updated": "head branch updated from base",
     "wf_changelog.merge_gave_up": "PR merge failed after {max_attempts} attempts (allow_merge_commit={allow_merge_commit}) — check branch protection rules, required checks, and token permissions",
+    "wf_changelog.merge_blocked_review": "The release PR cannot be merged automatically: branch protection on {prod} requires an approving review. Approve it and merge it yourself with a merge commit, or change the rule so the merging account can merge without the review. To stop this attempt, set release_automerge: false in version.yml.",
+    "wf_changelog.merge_blocked_policy": "The release PR cannot be merged automatically: branch protection on {prod} blocks the merge (required checks, reviews or another rule). Merge it yourself with a merge commit once the requirements are met, or change the rule so the merging account is allowed. To stop this attempt, set release_automerge: false in version.yml.",
+    "wf_changelog.automerge_blocked_renamed": "automerge was blocked — PR renamed to \"{subject}\"; merge it yourself once the requirements are met",
+    "wf_changelog.merge_blocked_reason_review": "the release branch requires an approving review.",
+    "wf_changelog.merge_blocked_reason_policy": "branch protection on the release branch blocks the merge (required checks, reviews or another rule).",
+    "wf_changelog.merge_blocked_reason_other": "GitHub rejected the merge.",
+    "wf_changelog.merge_blocked_comment": "**The release PR was not merged automatically** — {reason}\n\nThis PR was renamed to `chore(release): ...`, so a merge you make yourself still publishes the release. Once the requirements are met, merge it with **Create a merge commit** (recommended).\n\n- To let the workflow merge it next time, change the protection rule on the release branch so the account that merges (the `WORKFLOW_PAT` owner, or the GitHub Actions bot when no PAT is set) is allowed to merge.\n- To always merge by hand without this run failing, set `release_automerge: false` in `version.yml`.\n\nSquash or rebase merges may not publish the release by themselves. If a release was skipped, run **PROJECT-RELEASE-PUBLISH** manually on the release branch (Actions > Run workflow).",
     # --- wf_readme ---
     "wf_readme.not_found": "README.md not found — nothing to update, skipping",
     "wf_readme.read_version_failed": "failed to read the current version",
@@ -1438,6 +1458,7 @@ EN = {
     "wf_flutter.release_notes_heading": "📝 Release Notes:",
     "wf_flutter.working_dir": "🔧 Working directory: {dir}",
     "wf_flutter.run_number": "🔍 GitHub Run Number: {number}",
+    "wf_flutter.github_sha": "🔍 GitHub SHA: {sha}",
     "wf_flutter.ci_analyze_only": "  Analyze Only: {value}",
 }
 
@@ -1947,6 +1968,7 @@ KO = {
     "flutter_a.ci_apk_start": "📦 Flutter APK 빌드 시작 (debug)...",
     "flutter_a.ci_apk_done": "✅ APK 빌드 완료",
     "flutter_a.ci_podfile_missing": "ℹ️ ios/Podfile이 없어 pod install을 건너뜁니다 (CocoaPods 플러그인 없음)",
+    "flutter_a.ci_pods_installed": "✅ CocoaPods 설치 완료",
     "flutter_a.ci_ios_start": "📦 Flutter iOS 빌드 시작...",
     "flutter_a.ci_ios_done": "✅ iOS 빌드 완료",
     "flutter_a.ci_gate_results": "needs 결과: {results}",
@@ -2024,7 +2046,8 @@ KO = {
     "ios_test_tf.st_waiting": "⏸️ 대기",
     "ios_test_tf.st_done": "✅ 완료",
     "ios_test_tf.st_failed": "❌ 실패",
-    "ios_test_tf.st_canceled": "⏸️ 취소됨",
+    "ios_test_tf.st_not_run": "⏸️ 실행 안 됨 (이전 단계 실패)",
+    "ios_test_tf.st_precheck_blocked": "⏸️ 실행 안 됨 (사전 점검 실패: {missing})",
     "ios_test_tf.row_build_number": "| **빌드 번호** | `{build}` |",
     "ios_test_tf.row_app_version": "| **앱 버전** | `{version}({build})` |",
     "ios_test_tf.row_branch": "| **브랜치** | `{branch}` |",
@@ -2062,6 +2085,7 @@ KO = {
     "ios_test_tf.notes_generated": "📋 생성된 릴리즈 노트:",
     "ios_test_tf.title_prepare_failed": "## 🍎 ❌ iOS TestFlight 빌드 실패",
     "ios_test_tf.prepare_error": "❌ **환경 준비 중 오류가 발생했습니다.**",
+    "ios_test_tf.prepare_precheck_error": "❌ **사전 점검에 실패해 빌드를 시작하지 않았습니다.** 누락되었거나 올바르지 않은 항목: {missing}",
     "ios_test_tf.run_log_check_link": "🔗 [워크플로우 실행 로그 확인]({url})",
     "ios_test_tf.log_prepare_failed": "❌ 진행 상황 업데이트 완료: 준비 실패",
     "ios_test_tf.log_prepare_done": "✅ 진행 상황 업데이트 완료: 준비 완료 ({elapsed})",
@@ -2155,6 +2179,7 @@ KO = {
     "truncate.limit_positive": "ERROR: limit은 양수여야 함: {limit}",
     # --- version ---
     "version.bump_help": "승격 폭 (기본 patch — 지정 안 하면 기존 동작과 동일)",
+    "version.option_default_help": "version.yml에 키가 없을 때 출력할 값 (기본 false)",
     # --- wf_aisum ---
     "wf_aisum.no_issue_in_branch": "브랜치명에서 이슈 번호를 찾지 못함 — 건너뜀: {ref}",
     # --- wf_changelog ---
@@ -2320,7 +2345,8 @@ KO = {
     "wf_preview.status_done": "✅ 완료",
     "wf_preview.status_failed": "❌ 실패",
     "wf_preview.status_init_failed": "⚠️ 초기화 실패",
-    "wf_preview.status_waiting": "⏸️ 대기",
+    "wf_preview.status_not_run": "⏸️ 실행 안 됨 (이전 단계 실패)",
+    "wf_preview.status_precheck_blocked": "⏸️ 실행 안 됨 (사전 점검 실패: {missing})",
     "wf_preview.tbl_commands": "| 명령어 | 설명 |",
     "wf_preview.tbl_items": "| 항목 | 값 |",
     "wf_preview.tbl_steps": "| 단계 | 상태 | 소요 시간 |",
@@ -2538,6 +2564,7 @@ KO = {
     "version_manager.err_invalid_version": "오류: 올바르지 않은 버전 형식: {version}",
     "version_manager.err_invalid_version_xyz": "오류: 올바르지 않은 버전 형식: {version} (x.y.z 형식이어야 합니다)",
     "version_manager.err_generic": "오류: {error}",
+    "version_manager.option_invalid": "::warning::version.yml의 {option} 값 \"{value}\"을(를) 인식하지 못해 false로 처리합니다. true 또는 false를 쓰세요.",
     "version_manager.err_no_types_sync": "오류: version.yml에서 project_types를 읽을 수 없어 프로젝트 파일을 동기화할 수 없습니다",
     "version_manager.err_no_types_check": "오류: version.yml에서 project_types를 읽을 수 없어 버전을 동기화할 수 없습니다",
     "version_manager.err_write_failed": "version.yml에 버전 {version}을(를) 기록하지 못했습니다",
@@ -2563,11 +2590,15 @@ KO = {
     "wf_common.rebase_ok": "rebase 성공, push를 다시 시도합니다...",
     "wf_common.rebase_failed": "rebase 실패, 충돌을 직접 해결해야 합니다",
     "wf_common.push_gave_up": "push가 {max_retries}회 시도 후에도 실패했습니다",
+    "wf_common.push_protected": "{branch} 브랜치 보호 규칙이 push를 거부했습니다. 경합이 아니므로 재시도해도 소용없습니다. 봇 커밋은 {branch}에 직접 push되어야 합니다: push하는 계정(WORKFLOW_PAT 소유자, PAT가 없으면 GitHub Actions 봇)이 규칙을 우회할 수 있게 허용하세요.",
+    "wf_release.push_protected_trunk": "trunk-based 모드는 모든 릴리스(버전 증가와 CHANGELOG)를 {branch}에 직접 커밋하므로 보호 규칙이 그 push를 허용해야 합니다. 허용할 수 없다면 봇이 릴리스 PR 브랜치에만 커밋하는 develop -> main 흐름으로 바꾸세요.",
     "wf_common.readme_conflict_resolved": "동시에 수정된 README.md 충돌을 원격 내용을 유지하고 버전 줄을 다시 반영해 해결했습니다",
     # --- wf_aisum ---
     "wf_aisum.expected_version": "예상 다음 버전: {version} (현재: {current_version}, 모드: {mode}, 승격: {bump})",
     "wf_aisum.comment_update_failed": "댓글 수정 실패 — 계속 진행합니다 (이 워크플로우는 PR을 막지 않습니다)",
     "wf_aisum.comment_post_failed": "댓글 등록 실패 — 계속 진행합니다 (이 워크플로우는 PR을 막지 않습니다)",
+    "wf_aisum.summary_heading": "📋 **PR 요약 (project-auto-wizard)**",
+    "wf_aisum.engine_label": "엔진: {engine}",
     # --- wf_changelog ---
     "wf_changelog.pr_not_open": "PR #{pr_number}은(는) 이미 {state} 상태입니다 — 릴리스 파이프라인을 건너뜁니다",
     "wf_changelog.pr_state": "PR #{pr_number} 상태: {state}",
@@ -2587,10 +2618,20 @@ KO = {
     "wf_changelog.automerge_enabled": "automerge 활성화: {subject}",
     "wf_changelog.automerge_unavailable": "automerge를 쓸 수 없어 직접 병합했습니다: {subject}",
     "wf_changelog.automerge_off": "release_automerge가 꺼져 있어 PR 제목을 \"{subject}\"로 바꿨습니다. 직접 머지하세요",
+    "wf_changelog.automerge_off_list_failed": "PR #{pr_number}의 댓글을 읽지 못해 중복을 피하려고 머지 안내 댓글을 건너뛰었습니다",
+    "wf_changelog.automerge_off_rename_hint": "PR 제목을 자동으로 바꾸지 못했습니다. 릴리스가 발행되도록 머지하기 전에 머지 커밋 메시지(또는 PR 제목)를 `{subject}`로 지정하세요.",
     "wf_changelog.automerge_rename_failed": "PR #{pr_number}의 제목 또는 안내 댓글을 갱신하지 못했습니다. 릴리스가 되려면 머지 커밋 메시지에 \"chore(release):\"가 있어야 합니다",
-    "wf_changelog.automerge_off_comment": "**자동 머지가 꺼져 있습니다** (`version.yml`의 `release_automerge: false`). 릴리스할 준비가 되면 **Create a merge commit**으로 직접 머지하세요. *Squash and merge*와 *Rebase and merge*는 쓰지 마세요. 릴리스 게이트가 결과 커밋 메시지의 `chore(release):`를 읽고, squash나 rebase는 다음 릴리스 노트가 기대는 커밋 이력까지 바꿉니다.",
+    "wf_changelog.automerge_off_comment": "**자동 머지가 꺼져 있습니다** (`version.yml`의 `release_automerge: false`). 이 워크플로우 실행이 끝난 뒤(버전 확정과 PR 제목이 `chore(release): ...`로 바뀐 뒤) 릴리스할 준비가 되면 **Create a merge commit**으로 직접 머지하는 것을 권장합니다.\n\n다른 머지 방식은 릴리스가 저절로 발행되지 않을 수 있습니다. *Rebase and merge*는 버전 확정 커밋(`[skip ci]`)이 마지막 커밋으로 남고, 기본 메시지(커밋 목록 포함)의 *Squash and merge*는 그 `[skip ci]`가 머지 커밋 본문에 들어가므로, 두 경우 모두 GitHub가 push 워크플로우를 건너뛰어 태그와 Release가 만들어지지 않습니다. 레포의 squash 메시지 기본값을 PR 제목으로 바꿨다면 squash는 발행됩니다. 건너뛰었다면 릴리스 브랜치에서 **PROJECT-RELEASE-PUBLISH**를 수동으로 실행(Actions > Run workflow)하면 발행됩니다. 두 방식은 다음 릴리스 노트가 기대는 커밋 이력도 바꾸어 이전 변경이 다시 기재될 수 있습니다(rebase는 develop이 릴리스 브랜치를 역머지하기 전까지는 제외됩니다). 이 실행이 끝나기 전에 머지해도 비슷한 문제가 생깁니다. 안전망 워크플로우(PROJECT-VERSION-CONTROL)가 패치 버전을 하나 더 발행합니다.",
     "wf_changelog.merge_retry": "병합 시도 {attempt}/{max_attempts} 실패 — {wait}초 후 다시 시도합니다",
+    "wf_changelog.head_updated": "기준 브랜치의 변경을 head 브랜치에 반영했습니다",
     "wf_changelog.merge_gave_up": "PR 병합이 {max_attempts}회 시도 후에도 실패했습니다 (allow_merge_commit={allow_merge_commit}) — 브랜치 보호 규칙, 필수 체크, 토큰 권한을 확인하세요",
+    "wf_changelog.merge_blocked_review": "릴리스 PR을 자동으로 머지할 수 없습니다: {prod}의 브랜치 보호 규칙이 승인(approving review)을 요구합니다. 승인한 뒤 merge commit으로 직접 머지하거나, 머지하는 계정이 승인 없이 머지할 수 있도록 규칙을 바꾸세요. 이 시도를 끄려면 version.yml에 release_automerge: false를 설정하세요.",
+    "wf_changelog.merge_blocked_policy": "릴리스 PR을 자동으로 머지할 수 없습니다: {prod}의 브랜치 보호 규칙이 머지를 막고 있습니다 (필수 체크, 리뷰 또는 다른 규칙). 조건이 충족되면 merge commit으로 직접 머지하거나, 머지하는 계정이 허용되도록 규칙을 바꾸세요. 이 시도를 끄려면 version.yml에 release_automerge: false를 설정하세요.",
+    "wf_changelog.automerge_blocked_renamed": "automerge가 막혀 PR 제목을 \"{subject}\"로 바꿨습니다. 조건이 충족되면 직접 머지하세요",
+    "wf_changelog.merge_blocked_reason_review": "릴리스 브랜치가 승인(approving review)을 요구합니다.",
+    "wf_changelog.merge_blocked_reason_policy": "릴리스 브랜치의 보호 규칙이 머지를 막고 있습니다 (필수 체크, 리뷰 또는 다른 규칙).",
+    "wf_changelog.merge_blocked_reason_other": "GitHub이 머지를 거부했습니다.",
+    "wf_changelog.merge_blocked_comment": "**릴리스 PR이 자동으로 머지되지 않았습니다** — {reason}\n\n이 PR의 제목을 `chore(release): ...`로 바꿔 두었으므로, 직접 머지해도 릴리스가 발행됩니다. 조건이 충족되면 **Create a merge commit**(권장)으로 머지하세요.\n\n- 다음부터 워크플로우가 머지하게 하려면, 릴리스 브랜치의 보호 규칙에서 머지하는 계정(`WORKFLOW_PAT` 소유자, PAT가 없으면 GitHub Actions 봇)이 머지할 수 있도록 바꾸세요.\n- 항상 직접 머지하고 이 실행이 실패로 끝나지 않게 하려면 `version.yml`에 `release_automerge: false`를 설정하세요.\n\nSquash나 rebase 머지는 릴리스가 자동으로 발행되지 않을 수 있습니다. 릴리스가 건너뛰어졌다면 릴리스 브랜치에서 **PROJECT-RELEASE-PUBLISH**를 수동 실행하세요 (Actions > Run workflow).",
     # --- wf_readme ---
     "wf_readme.not_found": "README.md가 없습니다 — 수정할 것이 없어 건너뜁니다",
     "wf_readme.read_version_failed": "현재 버전을 읽지 못했습니다",
@@ -2711,6 +2752,7 @@ KO = {
     "wf_flutter.release_notes_heading": "📝 릴리스 노트:",
     "wf_flutter.working_dir": "🔧 작업 디렉터리: {dir}",
     "wf_flutter.run_number": "🔍 GitHub 실행 번호: {number}",
+    "wf_flutter.github_sha": "🔍 커밋 SHA: {sha}",
     "wf_flutter.ci_analyze_only": "  분석 전용: {value}",
 }
 

package/payload/scripts/version_manager.py

@@ -22,6 +22,7 @@ Usage:
     version_manager.py increment-code   # version_code+1 only
     version_manager.py set X.Y.Z        # set version explicitly, sync
     version_manager.py sync             # sync version.yml <-> project files
+    version_manager.py option KEY [--default true|false]   # boolean option from metadata.template.options
 
 Contract:
     - The LAST line printed to stdout is always the value (callers do `| tail -n 1`).
@@ -189,6 +190,58 @@ def key_exists(key):
     return re.search(r'^' + re.escape(key) + r':', text, re.MULTILINE) is not None
 
 
+def parse_option_value(raw):
+    """One boolean option value -> True / False / None (None = not recognized).
+
+    Same rule as parseOptionValue() in src/core/options.js (tests/fixtures/option-value-cases.json runs both):
+    an inline comment (whitespace + #) is dropped, then one pair of matching quotes, then case is ignored.
+    Only true / false are recognized; yes, off, 0, maybe and an empty value are not."""
+    v = re.sub(r'(^|\s)#.*$', '', str(raw if raw is not None else '')).strip()
+    q = re.match(r'^(["\'])(.*)\1$', v)
+    if q:
+        v = q.group(2).strip()
+    v = v.lower()
+    if v == 'true':
+        return True
+    if v == 'false':
+        return False
+    return None
+
+
+def read_option(key, default, text=None):
+    """(value, raw) for a boolean under metadata.template.options in version.yml.
+
+    - key missing: (default, None)
+    - key written with a recognized value: (that value, None)
+    - key written with an unrecognized value: (False, raw) - the conservative side, reported by the caller;
+      a present-but-unreadable value is not a missing key, so the default must not be guessed for it
+    Mirrors the section walk of parseTemplateOptions() in src/core/version-yml.js; the first occurrence wins."""
+    if text is None:
+        text = read_text()
+    line_re = re.compile(r'^\s+' + re.escape(key) + r':\s*(.*)$')
+    in_template = in_options = False
+    for line in text.split("\n"):
+        if re.match(r'^\s*template:', line):
+            in_template = True
+            continue
+        if in_template and re.match(r'^\s+options:', line):
+            in_options = True
+            continue
+        if in_template and in_options:
+            m = line_re.match(line)
+            if m:
+                raw = m.group(1).strip()
+                parsed = parse_option_value(raw)
+                return (False, raw) if parsed is None else (parsed, None)
+            # another key indented 0-4 spaces ends the options section
+            if re.match(r'^\s{0,4}[a-z_]+:', line):
+                in_options = in_template = False
+        # a top-level key ends the template section
+        if in_template and re.match(r'^[a-z_]+:', line):
+            in_template = in_options = False
+    return default, None
+
+
 def get_current_version():
     return read_scalar_key("version", "0.0.0")
 
@@ -278,13 +331,13 @@ def get_version_code():
         if re.search(r'^version:', text, re.MULTILINE):
             new_text = re.sub(
                 r'^(version:[^\n]*\n)',
-                r'\1version_code: 1  # app build number\n',
+                r'\1version_code: 1 # app build number\n',
                 text,
                 count=1,
                 flags=re.MULTILINE,
             )
         else:
-            new_text = text.rstrip("\n") + '\nversion_code: 1  # app build number\n'
+            new_text = text.rstrip("\n") + '\nversion_code: 1 # app build number\n'
         write_text(new_text)
         return "1"
     return code.strip()
@@ -300,7 +353,7 @@ def set_version_code(new_code):
             pass
     text = read_text()
     pattern = re.compile(r'^version_code:[ \t]*.*$', re.MULTILINE)
-    replacement = f'version_code: {new_code}  # app build number'
+    replacement = f'version_code: {new_code} # app build number'
     if pattern.search(text):
         new_text = pattern.sub(replacement, text, count=1)
     else:
@@ -1011,6 +1064,20 @@ def cmd_sync(args):
     return 0
 
 
+def cmd_option(args):
+    """Print `true` / `false` for one boolean option; a missing version.yml or key prints the default.
+    An unrecognized value prints false and a warning on stderr (stdout stays the value contract)."""
+    default = args.default == "true"
+    if not _version_yml_path().is_file():
+        print("true" if default else "false")
+        return 0
+    value, raw = read_option(args.key, default)
+    if raw is not None:
+        log(t("version_manager.option_invalid", option=args.key, value=raw))
+    print("true" if value else "false")
+    return 0
+
+
 def build_parser():
     parser = argparse.ArgumentParser(prog="version_manager.py")
     sub = parser.add_subparsers(dest="command", required=True)
@@ -1023,6 +1090,11 @@ def build_parser():
     sub.add_parser("increment-code")
     sub.add_parser("sync")
 
+    p_option = sub.add_parser("option")
+    p_option.add_argument("key")
+    p_option.add_argument("--default", choices=["true", "false"], default="false",
+                          help=t("version.option_default_help"))
+
     p_set = sub.add_parser("set")
     p_set.add_argument("version")
 
@@ -1041,6 +1113,7 @@ def main(argv=None):
         "increment-code": cmd_increment_code,
         "set": cmd_set,
         "sync": cmd_sync,
+        "option": cmd_option,
     }
     handler = handlers[args.command]
     try:

package/payload/version.yml.template

@@ -11,7 +11,8 @@
 #   Falls back to rule-based summaries whenever Copilot is off or unavailable.
 # - release_automerge: default true — false stops the release PR (develop -> main)
 #   from being merged automatically. Merge it yourself with a merge commit
-#   (not squash or rebase); the workflow renames the PR so the release still publishes.
+#   (recommended); squash and rebase merges skip the release workflow, so run
+#   PROJECT-RELEASE-PUBLISH manually if you used one.
 # ===
 # Supported project types: spring, flutter, react, react-native,
 #                          react-native-expo, node, python, basic, go
@@ -41,7 +42,7 @@ language: "{{LANGUAGE}}" # message language: en | ko
 {{PROJECT_PATHS}}
 metadata:
   last_updated: "{{NOW}}"
-  last_updated_by: "project-auto-wizard"
+  last_updated_by: "{{LAST_UPDATED_BY}}"
   default_branch: "{{DEFAULT_BRANCH}}"
   integration_date: "{{TODAY}}"
   template:

package/payload/workflows/common/PROJECT-COMMON-AI-PR-SUMMARY.yaml

@@ -57,7 +57,7 @@ jobs:
           m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           # scoped to the metadata: -> template: -> options: chain so an
           # unrelated "copilot_ai:" key can never hijack the value
-          COPILOT_AI=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?options:.*?copilot_ai:\s*\"?(true|false)", t, re.S); print(m.group(1) if m else "false")' 2>/dev/null || echo "false")
+          COPILOT_AI=$(python3 "$GITHUB_WORKSPACE/.github/scripts/version_manager.py" option copilot_ai --default false || echo "false")
           echo "copilot_ai=$COPILOT_AI" >> $GITHUB_OUTPUT
           echo "$(m wf_common.copilot_ai_option copilot_ai="$COPILOT_AI")"
 
@@ -81,11 +81,11 @@ jobs:
           PR_NUMBER=${{ github.event.pull_request.number }}
 
           git fetch origin {{MAIN_BRANCH}}
-          git log --pretty=%s "origin/{{MAIN_BRANCH}}..HEAD" > commits.txt
+          git log --cherry-pick --right-only --pretty=%s "origin/{{MAIN_BRANCH}}...HEAD" > commits.txt
           # Body-footer BREAKING CHANGE: lines are appended after the subject list, one per
           # line. The script reads each line as one entry, so passing the whole body (%B)
           # would turn description lines into change entries.
-          git log --pretty=%b "origin/{{MAIN_BRANCH}}..HEAD" | grep -E '^BREAKING[ -]CHANGE[[:space:]]*:' >> commits.txt || true
+          git log --cherry-pick --right-only --pretty=%b "origin/{{MAIN_BRANCH}}...HEAD" | grep -E '^BREAKING[ -]CHANGE[[:space:]]*:' >> commits.txt || true
           git diff --stat "origin/{{MAIN_BRANCH}}...HEAD" > _full_diff_stat.txt
           if [ "$(wc -l < _full_diff_stat.txt)" -gt 49 ]; then
             { head -49 _full_diff_stat.txt; tail -1 _full_diff_stat.txt; } > diff_stat.txt
@@ -102,7 +102,7 @@ jobs:
           # so rules alone are used, without any AI-assisted classification.
           CURRENT_VERSION=$(python3 .github/scripts/version_manager.py get 2>/dev/null | tail -n 1)
           MODE=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?branches:.*?mode:\s*\"?([A-Za-z-]+)", t, re.S); print(m.group(1) if m else "pr-flow")' 2>/dev/null || echo "pr-flow")
-          SEMVER_AUTO=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?options:.*?semver_auto:\s*\"?(true|false)", t, re.S); print(m.group(1) if m else "false")' 2>/dev/null || echo "false")
+          SEMVER_AUTO=$(python3 .github/scripts/version_manager.py option semver_auto --default false || echo "false")
           BUMP="patch"
           if [ "$MODE" = "trunk-based" ] && [ "$SEMVER_AUTO" = "true" ]; then
             BUMP=$(AI_API_KEY="" COPILOT_AI="false" python3 .github/scripts/changelog_manager.py classify-bump --commits-file commits.txt 2>/dev/null | tail -n 1)
@@ -121,17 +121,17 @@ jobs:
           # On fallback, append the reason (the script also emits it as ::warning::) to the engine line so the cause is visible without opening the job log
           FALLBACK_REASON=$(python3 -c 'import html,json,sys; print(html.escape((json.loads(sys.argv[1]).get("fallback_reason") or "")[:200]))' "$SUMMARY_RESULT" 2>/dev/null || echo "")
           ENGINE_LINE="$ENGINE${FALLBACK_REASON:+ ($FALLBACK_REASON)}"
-          echo "engine: $ENGINE_LINE" >> "$GITHUB_STEP_SUMMARY"
+          m wf_aisum.engine_label engine="$ENGINE_LINE" >> "$GITHUB_STEP_SUMMARY"
 
           # Find this bot's earlier summary comment by its marker and replace it with the latest content so pushes do not pile up comments
           MARKER="<!-- project-auto-wizard:pr-summary -->"
           {
             echo "$MARKER"
-            echo "📋 **PR Summary (project-auto-wizard)**"
+            m wf_aisum.summary_heading
             echo ""
             cat summary.md
             echo ""
-            echo "<sub>engine: ${ENGINE_LINE}</sub>"
+            echo "<sub>$(m wf_aisum.engine_label engine="$ENGINE_LINE")</sub>"
           } > comment_body.md
 
           python3 -c 'import json; print(json.dumps({"body": open("comment_body.md", encoding="utf-8").read()}))' > comment_payload.json