@byh3071/vhk 0.3.1 → 0.4.0

package/dist/index.js

@@ -1,12 +1,580 @@
 #!/usr/bin/env node
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// node_modules/.pnpm/ignore@7.0.5/node_modules/ignore/index.js
+var require_ignore = __commonJS({
+  "node_modules/.pnpm/ignore@7.0.5/node_modules/ignore/index.js"(exports, module) {
+    "use strict";
+    function makeArray(subject) {
+      return Array.isArray(subject) ? subject : [subject];
+    }
+    var UNDEFINED = void 0;
+    var EMPTY = "";
+    var SPACE = " ";
+    var ESCAPE = "\\";
+    var REGEX_TEST_BLANK_LINE = /^\s+$/;
+    var REGEX_INVALID_TRAILING_BACKSLASH = /(?:[^\\]|^)\\$/;
+    var REGEX_REPLACE_LEADING_EXCAPED_EXCLAMATION = /^\\!/;
+    var REGEX_REPLACE_LEADING_EXCAPED_HASH = /^\\#/;
+    var REGEX_SPLITALL_CRLF = /\r?\n/g;
+    var REGEX_TEST_INVALID_PATH = /^\.{0,2}\/|^\.{1,2}$/;
+    var REGEX_TEST_TRAILING_SLASH = /\/$/;
+    var SLASH = "/";
+    var TMP_KEY_IGNORE = "node-ignore";
+    if (typeof Symbol !== "undefined") {
+      TMP_KEY_IGNORE = /* @__PURE__ */ Symbol.for("node-ignore");
+    }
+    var KEY_IGNORE = TMP_KEY_IGNORE;
+    var define = (object, key, value) => {
+      Object.defineProperty(object, key, { value });
+      return value;
+    };
+    var REGEX_REGEXP_RANGE = /([0-z])-([0-z])/g;
+    var RETURN_FALSE = () => false;
+    var sanitizeRange = (range) => range.replace(
+      REGEX_REGEXP_RANGE,
+      (match, from, to) => from.charCodeAt(0) <= to.charCodeAt(0) ? match : EMPTY
+    );
+    var cleanRangeBackSlash = (slashes) => {
+      const { length } = slashes;
+      return slashes.slice(0, length - length % 2);
+    };
+    var REPLACERS = [
+      [
+        // Remove BOM
+        // TODO:
+        // Other similar zero-width characters?
+        /^\uFEFF/,
+        () => EMPTY
+      ],
+      // > Trailing spaces are ignored unless they are quoted with backslash ("\")
+      [
+        // (a\ ) -> (a )
+        // (a  ) -> (a)
+        // (a ) -> (a)
+        // (a \ ) -> (a  )
+        /((?:\\\\)*?)(\\?\s+)$/,
+        (_, m1, m2) => m1 + (m2.indexOf("\\") === 0 ? SPACE : EMPTY)
+      ],
+      // Replace (\ ) with ' '
+      // (\ ) -> ' '
+      // (\\ ) -> '\\ '
+      // (\\\ ) -> '\\ '
+      [
+        /(\\+?)\s/g,
+        (_, m1) => {
+          const { length } = m1;
+          return m1.slice(0, length - length % 2) + SPACE;
+        }
+      ],
+      // Escape metacharacters
+      // which is written down by users but means special for regular expressions.
+      // > There are 12 characters with special meanings:
+      // > - the backslash \,
+      // > - the caret ^,
+      // > - the dollar sign $,
+      // > - the period or dot .,
+      // > - the vertical bar or pipe symbol |,
+      // > - the question mark ?,
+      // > - the asterisk or star *,
+      // > - the plus sign +,
+      // > - the opening parenthesis (,
+      // > - the closing parenthesis ),
+      // > - and the opening square bracket [,
+      // > - the opening curly brace {,
+      // > These special characters are often called "metacharacters".
+      [
+        /[\\$.|*+(){^]/g,
+        (match) => `\\${match}`
+      ],
+      [
+        // > a question mark (?) matches a single character
+        /(?!\\)\?/g,
+        () => "[^/]"
+      ],
+      // leading slash
+      [
+        // > A leading slash matches the beginning of the pathname.
+        // > For example, "/*.c" matches "cat-file.c" but not "mozilla-sha1/sha1.c".
+        // A leading slash matches the beginning of the pathname
+        /^\//,
+        () => "^"
+      ],
+      // replace special metacharacter slash after the leading slash
+      [
+        /\//g,
+        () => "\\/"
+      ],
+      [
+        // > A leading "**" followed by a slash means match in all directories.
+        // > For example, "**/foo" matches file or directory "foo" anywhere,
+        // > the same as pattern "foo".
+        // > "**/foo/bar" matches file or directory "bar" anywhere that is directly
+        // >   under directory "foo".
+        // Notice that the '*'s have been replaced as '\\*'
+        /^\^*\\\*\\\*\\\//,
+        // '**/foo' <-> 'foo'
+        () => "^(?:.*\\/)?"
+      ],
+      // starting
+      [
+        // there will be no leading '/'
+        //   (which has been replaced by section "leading slash")
+        // If starts with '**', adding a '^' to the regular expression also works
+        /^(?=[^^])/,
+        function startingReplacer() {
+          return !/\/(?!$)/.test(this) ? "(?:^|\\/)" : "^";
+        }
+      ],
+      // two globstars
+      [
+        // Use lookahead assertions so that we could match more than one `'/**'`
+        /\\\/\\\*\\\*(?=\\\/|$)/g,
+        // Zero, one or several directories
+        // should not use '*', or it will be replaced by the next replacer
+        // Check if it is not the last `'/**'`
+        (_, index, str) => index + 6 < str.length ? "(?:\\/[^\\/]+)*" : "\\/.+"
+      ],
+      // normal intermediate wildcards
+      [
+        // Never replace escaped '*'
+        // ignore rule '\*' will match the path '*'
+        // 'abc.*/' -> go
+        // 'abc.*'  -> skip this rule,
+        //    coz trailing single wildcard will be handed by [trailing wildcard]
+        /(^|[^\\]+)(\\\*)+(?=.+)/g,
+        // '*.js' matches '.js'
+        // '*.js' doesn't match 'abc'
+        (_, p1, p2) => {
+          const unescaped = p2.replace(/\\\*/g, "[^\\/]*");
+          return p1 + unescaped;
+        }
+      ],
+      [
+        // unescape, revert step 3 except for back slash
+        // For example, if a user escape a '\\*',
+        // after step 3, the result will be '\\\\\\*'
+        /\\\\\\(?=[$.|*+(){^])/g,
+        () => ESCAPE
+      ],
+      [
+        // '\\\\' -> '\\'
+        /\\\\/g,
+        () => ESCAPE
+      ],
+      [
+        // > The range notation, e.g. [a-zA-Z],
+        // > can be used to match one of the characters in a range.
+        // `\` is escaped by step 3
+        /(\\)?\[([^\]/]*?)(\\*)($|\])/g,
+        (match, leadEscape, range, endEscape, close) => leadEscape === ESCAPE ? `\\[${range}${cleanRangeBackSlash(endEscape)}${close}` : close === "]" ? endEscape.length % 2 === 0 ? `[${sanitizeRange(range)}${endEscape}]` : "[]" : "[]"
+      ],
+      // ending
+      [
+        // 'js' will not match 'js.'
+        // 'ab' will not match 'abc'
+        /(?:[^*])$/,
+        // WTF!
+        // https://git-scm.com/docs/gitignore
+        // changes in [2.22.1](https://git-scm.com/docs/gitignore/2.22.1)
+        // which re-fixes #24, #38
+        // > If there is a separator at the end of the pattern then the pattern
+        // > will only match directories, otherwise the pattern can match both
+        // > files and directories.
+        // 'js*' will not match 'a.js'
+        // 'js/' will not match 'a.js'
+        // 'js' will match 'a.js' and 'a.js/'
+        (match) => /\/$/.test(match) ? `${match}$` : `${match}(?=$|\\/$)`
+      ]
+    ];
+    var REGEX_REPLACE_TRAILING_WILDCARD = /(^|\\\/)?\\\*$/;
+    var MODE_IGNORE = "regex";
+    var MODE_CHECK_IGNORE = "checkRegex";
+    var UNDERSCORE = "_";
+    var TRAILING_WILD_CARD_REPLACERS = {
+      [MODE_IGNORE](_, p1) {
+        const prefix = p1 ? `${p1}[^/]+` : "[^/]*";
+        return `${prefix}(?=$|\\/$)`;
+      },
+      [MODE_CHECK_IGNORE](_, p1) {
+        const prefix = p1 ? `${p1}[^/]*` : "[^/]*";
+        return `${prefix}(?=$|\\/$)`;
+      }
+    };
+    var makeRegexPrefix = (pattern) => REPLACERS.reduce(
+      (prev, [matcher, replacer]) => prev.replace(matcher, replacer.bind(pattern)),
+      pattern
+    );
+    var isString = (subject) => typeof subject === "string";
+    var checkPattern = (pattern) => pattern && isString(pattern) && !REGEX_TEST_BLANK_LINE.test(pattern) && !REGEX_INVALID_TRAILING_BACKSLASH.test(pattern) && pattern.indexOf("#") !== 0;
+    var splitPattern = (pattern) => pattern.split(REGEX_SPLITALL_CRLF).filter(Boolean);
+    var IgnoreRule = class {
+      constructor(pattern, mark, body, ignoreCase, negative, prefix) {
+        this.pattern = pattern;
+        this.mark = mark;
+        this.negative = negative;
+        define(this, "body", body);
+        define(this, "ignoreCase", ignoreCase);
+        define(this, "regexPrefix", prefix);
+      }
+      get regex() {
+        const key = UNDERSCORE + MODE_IGNORE;
+        if (this[key]) {
+          return this[key];
+        }
+        return this._make(MODE_IGNORE, key);
+      }
+      get checkRegex() {
+        const key = UNDERSCORE + MODE_CHECK_IGNORE;
+        if (this[key]) {
+          return this[key];
+        }
+        return this._make(MODE_CHECK_IGNORE, key);
+      }
+      _make(mode, key) {
+        const str = this.regexPrefix.replace(
+          REGEX_REPLACE_TRAILING_WILDCARD,
+          // It does not need to bind pattern
+          TRAILING_WILD_CARD_REPLACERS[mode]
+        );
+        const regex = this.ignoreCase ? new RegExp(str, "i") : new RegExp(str);
+        return define(this, key, regex);
+      }
+    };
+    var createRule = ({
+      pattern,
+      mark
+    }, ignoreCase) => {
+      let negative = false;
+      let body = pattern;
+      if (body.indexOf("!") === 0) {
+        negative = true;
+        body = body.substr(1);
+      }
+      body = body.replace(REGEX_REPLACE_LEADING_EXCAPED_EXCLAMATION, "!").replace(REGEX_REPLACE_LEADING_EXCAPED_HASH, "#");
+      const regexPrefix = makeRegexPrefix(body);
+      return new IgnoreRule(
+        pattern,
+        mark,
+        body,
+        ignoreCase,
+        negative,
+        regexPrefix
+      );
+    };
+    var RuleManager = class {
+      constructor(ignoreCase) {
+        this._ignoreCase = ignoreCase;
+        this._rules = [];
+      }
+      _add(pattern) {
+        if (pattern && pattern[KEY_IGNORE]) {
+          this._rules = this._rules.concat(pattern._rules._rules);
+          this._added = true;
+          return;
+        }
+        if (isString(pattern)) {
+          pattern = {
+            pattern
+          };
+        }
+        if (checkPattern(pattern.pattern)) {
+          const rule = createRule(pattern, this._ignoreCase);
+          this._added = true;
+          this._rules.push(rule);
+        }
+      }
+      // @param {Array<string> | string | Ignore} pattern
+      add(pattern) {
+        this._added = false;
+        makeArray(
+          isString(pattern) ? splitPattern(pattern) : pattern
+        ).forEach(this._add, this);
+        return this._added;
+      }
+      // Test one single path without recursively checking parent directories
+      //
+      // - checkUnignored `boolean` whether should check if the path is unignored,
+      //   setting `checkUnignored` to `false` could reduce additional
+      //   path matching.
+      // - check `string` either `MODE_IGNORE` or `MODE_CHECK_IGNORE`
+      // @returns {TestResult} true if a file is ignored
+      test(path14, checkUnignored, mode) {
+        let ignored = false;
+        let unignored = false;
+        let matchedRule;
+        this._rules.forEach((rule) => {
+          const { negative } = rule;
+          if (unignored === negative && ignored !== unignored || negative && !ignored && !unignored && !checkUnignored) {
+            return;
+          }
+          const matched = rule[mode].test(path14);
+          if (!matched) {
+            return;
+          }
+          ignored = !negative;
+          unignored = negative;
+          matchedRule = negative ? UNDEFINED : rule;
+        });
+        const ret = {
+          ignored,
+          unignored
+        };
+        if (matchedRule) {
+          ret.rule = matchedRule;
+        }
+        return ret;
+      }
+    };
+    var throwError = (message, Ctor) => {
+      throw new Ctor(message);
+    };
+    var checkPath = (path14, originalPath, doThrow) => {
+      if (!isString(path14)) {
+        return doThrow(
+          `path must be a string, but got \`${originalPath}\``,
+          TypeError
+        );
+      }
+      if (!path14) {
+        return doThrow(`path must not be empty`, TypeError);
+      }
+      if (checkPath.isNotRelative(path14)) {
+        const r = "`path.relative()`d";
+        return doThrow(
+          `path should be a ${r} string, but got "${originalPath}"`,
+          RangeError
+        );
+      }
+      return true;
+    };
+    var isNotRelative = (path14) => REGEX_TEST_INVALID_PATH.test(path14);
+    checkPath.isNotRelative = isNotRelative;
+    checkPath.convert = (p) => p;
+    var Ignore = class {
+      constructor({
+        ignorecase = true,
+        ignoreCase = ignorecase,
+        allowRelativePaths = false
+      } = {}) {
+        define(this, KEY_IGNORE, true);
+        this._rules = new RuleManager(ignoreCase);
+        this._strictPathCheck = !allowRelativePaths;
+        this._initCache();
+      }
+      _initCache() {
+        this._ignoreCache = /* @__PURE__ */ Object.create(null);
+        this._testCache = /* @__PURE__ */ Object.create(null);
+      }
+      add(pattern) {
+        if (this._rules.add(pattern)) {
+          this._initCache();
+        }
+        return this;
+      }
+      // legacy
+      addPattern(pattern) {
+        return this.add(pattern);
+      }
+      // @returns {TestResult}
+      _test(originalPath, cache, checkUnignored, slices) {
+        const path14 = originalPath && checkPath.convert(originalPath);
+        checkPath(
+          path14,
+          originalPath,
+          this._strictPathCheck ? throwError : RETURN_FALSE
+        );
+        return this._t(path14, cache, checkUnignored, slices);
+      }
+      checkIgnore(path14) {
+        if (!REGEX_TEST_TRAILING_SLASH.test(path14)) {
+          return this.test(path14);
+        }
+        const slices = path14.split(SLASH).filter(Boolean);
+        slices.pop();
+        if (slices.length) {
+          const parent = this._t(
+            slices.join(SLASH) + SLASH,
+            this._testCache,
+            true,
+            slices
+          );
+          if (parent.ignored) {
+            return parent;
+          }
+        }
+        return this._rules.test(path14, false, MODE_CHECK_IGNORE);
+      }
+      _t(path14, cache, checkUnignored, slices) {
+        if (path14 in cache) {
+          return cache[path14];
+        }
+        if (!slices) {
+          slices = path14.split(SLASH).filter(Boolean);
+        }
+        slices.pop();
+        if (!slices.length) {
+          return cache[path14] = this._rules.test(path14, checkUnignored, MODE_IGNORE);
+        }
+        const parent = this._t(
+          slices.join(SLASH) + SLASH,
+          cache,
+          checkUnignored,
+          slices
+        );
+        return cache[path14] = parent.ignored ? parent : this._rules.test(path14, checkUnignored, MODE_IGNORE);
+      }
+      ignores(path14) {
+        return this._test(path14, this._ignoreCache, false).ignored;
+      }
+      createFilter() {
+        return (path14) => !this.ignores(path14);
+      }
+      filter(paths) {
+        return makeArray(paths).filter(this.createFilter());
+      }
+      // @returns {TestResult}
+      test(path14) {
+        return this._test(path14, this._testCache, true);
+      }
+    };
+    var factory = (options) => new Ignore(options);
+    var isPathValid = (path14) => checkPath(path14 && checkPath.convert(path14), path14, RETURN_FALSE);
+    var setupWindows = () => {
+      const makePosix = (str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/");
+      checkPath.convert = makePosix;
+      const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
+      checkPath.isNotRelative = (path14) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path14) || isNotRelative(path14);
+    };
+    if (
+      // Detect `process` so that it can run in browsers.
+      typeof process !== "undefined" && process.platform === "win32"
+    ) {
+      setupWindows();
+    }
+    module.exports = factory;
+    factory.default = factory;
+    module.exports.isPathValid = isPathValid;
+    define(module.exports, /* @__PURE__ */ Symbol.for("setupWindows"), setupWindows);
+  }
+});
 
 // src/index.ts
 import { Command, Help } from "commander";
-import inquirer4 from "inquirer";
+import chalk11 from "chalk";
+import inquirer5 from "inquirer";
 
-// src/commands/gate.ts
-import inquirer from "inquirer";
-import chalk2 from "chalk";
+// src/lib/nlp-router.ts
+function normalize(input) {
+  return input.trim().toLowerCase().replace(/\s+/g, " ");
+}
+var RULES = [
+  {
+    command: "init",
+    explanation: "\uAC80\uC99D \uC2A4\uD0B5\uD558\uACE0 \uBC14\uB85C \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791 (vhk \uC2DC\uC791 --skip-gate)",
+    confidence: "high",
+    args: ["--skip-gate"],
+    test: (t) => /기획.*(끝|완료)|노션.*(기획|완료)|검증.*(스킵|건너)|gate.*(스킵|건너)|바로.*시작/.test(t)
+  },
+  {
+    command: "init",
+    explanation: "Notion\uC5D0\uC11C \uAC00\uC838\uC640 \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791 (vhk \uC2DC\uC791 --from-notion)",
+    confidence: "low",
+    args: ["--from-notion"],
+    test: (t) => /노션|notion/.test(t) && /(시작|만들|import|가져)/.test(t)
+  },
+  {
+    command: "init",
+    explanation: "\uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791 (vhk \uC2DC\uC791)",
+    confidence: "high",
+    test: (t) => /프로젝트.*(만들|시작)|폴더.*만들|만들고\s*싶|하네스|초기화/.test(t) || /^시작$/.test(t)
+  },
+  {
+    command: "recap",
+    explanation: "\uC624\uB298 \uD55C \uC77C \uC815\uB9AC (vhk \uC815\uB9AC)",
+    confidence: "high",
+    test: (t) => /오늘.*(정리|기록)|한\s*일|세션|회고|recap|정리해/.test(t)
+  },
+  {
+    command: "doctor",
+    explanation: "\uD658\uACBD \uC810\uAC80 (vhk doctor)",
+    confidence: "high",
+    test: (t) => /뭔가\s*안|안\s*돼|안돼|환경\s*(점검|진단)|진단|doctor|설치.*확인|왜\s*안/.test(t)
+  },
+  {
+    command: "gate",
+    explanation: "\uC544\uC774\uB514\uC5B4 \uAC80\uC99D (vhk \uAC80\uC99D)",
+    confidence: "high",
+    test: (t) => /아이디어|검증|gate|go\/refine|pain\s*point/.test(t)
+  },
+  {
+    command: "secure",
+    explanation: "\uBCF4\uC548 \uC2A4\uCE94 (vhk \uBCF4\uC548 scan)",
+    confidence: "high",
+    test: (t) => /보안|시크릿|비밀|키\s*유출|secure|scan/.test(t)
+  },
+  {
+    command: "check",
+    explanation: "\uADDC\uCE59 \uC810\uAC80 (vhk \uC810\uAC80)",
+    confidence: "high",
+    test: (t) => /규칙.*(점검|위반)|린트|check|위반/.test(t)
+  },
+  {
+    command: "sync",
+    explanation: "\uADDC\uCE59 \uD30C\uC77C \uB3D9\uAE30\uD654 (vhk \uADDC\uCE59)",
+    confidence: "high",
+    test: (t) => /규칙.*(맞|동기)|sync|cursorrules|claude\.md.*맞/.test(t)
+  },
+  {
+    command: "ship",
+    explanation: "\uBC30\uD3EC \uCCB4\uD06C + \uD68C\uACE0 (vhk ship)",
+    confidence: "high",
+    test: (t) => /배포|출시|릴리스|ship|빌드\s*전/.test(t)
+  }
+];
+function routeNaturalLanguage(input) {
+  const normalized = normalize(input);
+  if (!normalized) return null;
+  for (const rule of RULES) {
+    if (rule.test(normalized)) {
+      return {
+        command: rule.command,
+        explanation: rule.explanation,
+        confidence: rule.confidence,
+        args: rule.args
+      };
+    }
+  }
+  return null;
+}
+function extractNotionUrl(input) {
+  const m = input.match(/https?:\/\/[^\s]+/i);
+  return m?.[0];
+}
 
 // src/i18n/ko.ts
 var ko = {
@@ -87,7 +655,9 @@ var ko = {
     notionReviewHint: "docs/PRD.md\uB97C \uC77D\uACE0 \u{1F449} \uC5EC\uAE30\uB97C \uCC44\uC6CC\uC8FC\uC138\uC694 \uD56D\uBAA9\uC744 \uCC44\uC6B0\uC138\uC694",
     gitHintLabel: "\uD130\uBBF8\uB110\uC5D0 \uBCF5\uC0AC\uD560 \uBA85\uB839 (\uC544\uB798 \uBC15\uC2A4 \uBCF5\uBD99):",
     gitHintCommand: 'git init && git add . && git commit -m "feat: \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791"',
-    startDev: "\uC774\uC81C \uAC1C\uBC1C\uD574 \uBCF4\uC138\uC694! \u{1F680}"
+    startDev: "\uC774\uC81C \uAC1C\uBC1C\uD574 \uBCF4\uC138\uC694! \u{1F680}",
+    commandsMdDone: "\u{1F4CB} COMMANDS.md \uC0DD\uC131",
+    scriptsDone: "\u{1F4E6} package.json scripts \uCD94\uAC00"
   },
   recap: {
     title: "\u{1F4DD} \uC624\uB298 \uD55C \uC77C \uC815\uB9AC",
@@ -113,6 +683,21 @@ var ko = {
     allPassed: "\u{1F389} \uADDC\uCE59\uC744 \uBAA8\uB450 \uC9C0\uCF30\uC5B4\uC694!",
     summary: "\u{1F4CA} \uC810\uAC80 \uACB0\uACFC:"
   },
+  doctor: {
+    title: "\u{1FA7A} \uAC1C\uBC1C \uD658\uACBD \uC810\uAC80",
+    allOk: "\u{1F389} \uAC1C\uBC1C \uD658\uACBD \uC900\uBE44 \uC644\uB8CC!",
+    missing: "\u26A0\uFE0F \uC77C\uBD80 \uB3C4\uAD6C\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    missingHint: "\uC704 \uC548\uB0B4\uB97C \uB530\uB77C \uC124\uCE58\uD558\uC138\uC694.",
+    projectFiles: "\u{1F4C1} \uD504\uB85C\uC81D\uD2B8 \uD30C\uC77C \uD655\uC778:",
+    envNotIgnored: "\u26A0\uFE0F .env\uAC00 .gitignore\uC5D0 \uC5C6\uC74C! \uCD94\uAC00\uD558\uC138\uC694",
+    nextOkMessage: "\uD658\uACBD \uC810\uAC80 \uD1B5\uACFC! \uC774\uC81C \uD504\uB85C\uC81D\uD2B8\uB97C \uC2DC\uC791\uD558\uC138\uC694.",
+    nextRetryMessage: "\uC704 \uB3C4\uAD6C\uB97C \uC124\uCE58\uD55C \uD6C4 \uB2E4\uC2DC \uC810\uAC80\uD558\uC138\uC694."
+  },
+  nlp: {
+    matched: "\uC774\uAC8C \uB9DE\uB098\uC694?",
+    notMatched: "\uBB34\uC2A8 \uB73B\uC778\uC9C0 \uBAA8\uB974\uACA0\uC5B4\uC694. vhk\uB97C \uC785\uB825\uD558\uBA74 \uBA54\uB274\uC5D0\uC11C \uC120\uD0DD\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+    menuHint: "vhk\uB97C \uC785\uB825\uD558\uBA74 \uBA54\uB274\uC5D0\uC11C \uC120\uD0DD\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4."
+  },
   secure: {
     title: "\u{1F512} \uBE44\uBC00\uBC88\uD638\xB7\uD0A4 \uC720\uCD9C \uAC80\uC0AC",
     noGitignore: "\u26A0\uFE0F .gitignore \uD30C\uC77C\uC774 \uC5C6\uC5B4\uC694!",
@@ -127,9 +712,48 @@ var ko = {
     cursorrulesDone: "\u2705 .cursorrules \uB9DE\uCDA4 \uC644\uB8CC",
     claudeDone: "\u2705 CLAUDE.md \uB9DE\uCDA4 \uC644\uB8CC",
     done: "\u{1F504} \uB9DE\uCD94\uAE30 \uC644\uB8CC!"
+  },
+  ship: {
+    title: "\u{1F680} \uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8",
+    checklist: "\u{1F4CB} \uBC30\uD3EC \uC804 \uCCB4\uD06C\uB9AC\uC2A4\uD2B8",
+    retro: "\u{1F50D} \uBC30\uD3EC \uD68C\uACE0",
+    buildLogCreated: "\u2705 \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131 \uC644\uB8CC",
+    buildLogDone: (rel) => `\u2705 \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131 \uC644\uB8CC: ${rel}`,
+    questionWell: "\uC798\uB41C \uC810\uC740?",
+    questionWrong: "\uC5B4\uB824\uC6E0\uB358 \uC810\uC740?",
+    questionLearned: "\uBC30\uC6B4 \uC810\uC740?",
+    questionNext: "\uB2E4\uC74C \uBC84\uC804\uC5D0\uC11C \uD560 \uAC83\uC740?",
+    checkboxPrompt: "\uC644\uB8CC\uD55C \uD56D\uBAA9\uC744 \uC120\uD0DD\uD558\uC138\uC694:",
+    incompleteHeader: "\u26A0\uFE0F \uC544\uC9C1 \uC644\uB8CC\uD558\uC9C0 \uC54A\uC740 \uD56D\uBAA9:",
+    proceedConfirm: "\uADF8\uB798\uB3C4 \uACC4\uC18D \uC9C4\uD589\uD560\uAE4C\uC694?",
+    allPassed: "\u2705 \uBAA8\uB4E0 \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 \uD1B5\uACFC!",
+    retryMessage: "\uCCB4\uD06C\uB9AC\uC2A4\uD2B8\uB97C \uB9C8\uCE5C \uB4A4 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uBCF4\uC138\uC694.",
+    retryCursorHint: "\uBE4C\uB4DC\uD558\uACE0 \uD14C\uC2A4\uD2B8 \uB3CC\uB824\uC918",
+    versionPrompt: "\uBC30\uD3EC \uBC84\uC804\uC740?",
+    versionHint: "\uC608: 0.4.0",
+    emptySection: "(\uBBF8\uC791\uC131)",
+    emptyNext: "(\uBBF8\uC815)",
+    deployMessage: "\uBE4C\uB4DC \uB85C\uADF8\uB97C \uC800\uC7A5\uD588\uC5B4\uC694! \uC774\uC81C \uC2E4\uC81C \uBC30\uD3EC\uB97C \uC9C4\uD589\uD558\uC138\uC694.",
+    deployCursorHint: "\uBC30\uD3EC\uD574\uC918",
+    checkBuild: "\uBE4C\uB4DC\uAC00 \uC131\uACF5\uD588\uB098\uC694?",
+    hintBuild: "pnpm build",
+    checkTest: "\uBAA8\uB4E0 \uD14C\uC2A4\uD2B8\uAC00 \uD1B5\uACFC\uD588\uB098\uC694?",
+    hintTest: "pnpm test --run",
+    checkVersion: "package.json \uBC84\uC804\uC744 \uC62C\uB838\uB098\uC694?",
+    hintVersion: "version \uD544\uB4DC \uD655\uC778",
+    checkChangelog: "\uBCC0\uACBD \uB0B4\uC6A9\uC744 \uAE30\uB85D\uD588\uB098\uC694?",
+    hintChangelog: "README \uB610\uB294 CHANGELOG",
+    checkSecurity: "\uBCF4\uC548 \uC2A4\uCE94\uC744 \uB3CC\uB838\uB098\uC694?",
+    hintSecurity: "vhk \uBCF4\uC548 scan",
+    checkCommit: "\uBAA8\uB4E0 \uBCC0\uACBD\uC774 \uCEE4\uBC0B\uB418\uC5C8\uB098\uC694?",
+    hintCommit: "git status \uD655\uC778"
   }
 };
 
+// src/commands/gate.ts
+import inquirer from "inquirer";
+import chalk2 from "chalk";
+
 // src/lib/next-step.ts
 import chalk from "chalk";
 function printNextStep(step) {
@@ -287,6 +911,7 @@ ${ko.gate.verdictTitle}
 // src/commands/init.ts
 import inquirer2 from "inquirer";
 import chalk4 from "chalk";
+import fs2 from "fs";
 import path2 from "path";
 
 // src/templates/claude-md.ts
@@ -467,6 +1092,36 @@ function ADR_TEMPLATE() {
   ].join("\n");
 }
 
+// src/templates/commands-md.ts
+function COMMANDS_MD_TEMPLATE() {
+  return [
+    "# \u{1F4CB} \uD55C\uAD6D\uC5B4 \uBA85\uB839\uC5B4 \uAC00\uC774\uB4DC",
+    "",
+    "\uC774 \uD504\uB85C\uC81D\uD2B8\uC5D0\uC11C \uC790\uC8FC \uC4F0\uB294 \uBA85\uB839\uC5B4\uC785\uB2C8\uB2E4.",
+    "Cursor\uC5D0\uAC8C \uD55C\uAD6D\uC5B4\uB85C \uB9D0\uD574\uB3C4 \uB429\uB2C8\uB2E4.",
+    "",
+    "## \uB9E4\uC77C \uC4F0\uB294 \uBA85\uB839\uC5B4",
+    "",
+    "| \uD558\uACE0 \uC2F6\uC740 \uAC83 | \uD130\uBBF8\uB110 \uBA85\uB839 | Cursor\uC5D0\uAC8C \uB9D0\uD558\uAE30 |",
+    "|-------------|-----------|------------------|",
+    '| \uC800\uC7A5 | `git add . && git commit -m "\uBA54\uC2DC\uC9C0"` | "\uC800\uC7A5\uD574" |',
+    '| \uC624\uB298 \uC815\uB9AC | `vhk \uC815\uB9AC` | "\uC624\uB298 \uD55C \uC77C \uC815\uB9AC\uD574" |',
+    '| \uADDC\uCE59 \uC810\uAC80 | `vhk \uC810\uAC80` | "\uADDC\uCE59 \uC810\uAC80\uD574" |',
+    '| \uBCF4\uC548 \uC2A4\uCE94 | `vhk \uBCF4\uC548 scan` | "\uBCF4\uC548 \uC2A4\uCE94 \uB3CC\uB824" |',
+    '| \uBE4C\uB4DC+\uD14C\uC2A4\uD2B8 | `pnpm build; pnpm test --run` | "\uBE4C\uB4DC\uD558\uACE0 \uD14C\uC2A4\uD2B8 \uB3CC\uB824" |',
+    '| \uBC30\uD3EC | `vhk \uBC30\uD3EC` | "\uBC30\uD3EC\uD574" |',
+    "",
+    "## \uD658\uACBD \uC810\uAC80",
+    "",
+    "```bash",
+    "vhk doctor",
+    "```",
+    "",
+    "---",
+    "*Generated by `vhk init` \u2014 \uC218\uC815\uD574\uB3C4 \uB429\uB2C8\uB2E4*"
+  ].join("\n");
+}
+
 // src/utils/logger.ts
 import chalk3 from "chalk";
 var log = {
@@ -742,6 +1397,7 @@ ${ko.init.recommendedStack} ${stack.join(" + ")}
     writeFile(fullPath, content);
     log.success(filePath);
   }
+  await writeInitExtras(cwd);
   console.log(chalk4.bold.green(`
 ${ko.init.done}`));
   console.log(chalk4.dim(`
@@ -795,16 +1451,95 @@ function generateFiles(name, description, stack, prdContent = {}) {
 `
   };
 }
+var VHK_PACKAGE_SCRIPTS = {
+  save: "git add . && git commit -m",
+  check: "vhk check",
+  scan: "vhk secure scan",
+  recap: "vhk recap",
+  ship: "vhk ship",
+  doctor: "vhk doctor"
+};
+function enhancePackageScripts(projectDir) {
+  const pkgPath = path2.join(projectDir, "package.json");
+  if (!fs2.existsSync(pkgPath)) return false;
+  const pkg = JSON.parse(fs2.readFileSync(pkgPath, "utf-8"));
+  pkg.scripts = { ...pkg.scripts, ...VHK_PACKAGE_SCRIPTS };
+  fs2.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+  return true;
+}
+async function writeInitExtras(projectDir) {
+  const commandsPath = path2.join(projectDir, "COMMANDS.md");
+  if (fileExists(commandsPath)) {
+    const { overwrite } = await inquirer2.prompt([{
+      type: "confirm",
+      name: "overwrite",
+      message: ko.init.overwrite("COMMANDS.md"),
+      default: false
+    }]);
+    if (!overwrite) {
+      log.warn(ko.init.skipped("COMMANDS.md"));
+    } else {
+      writeFile(commandsPath, COMMANDS_MD_TEMPLATE());
+      log.success(ko.init.commandsMdDone);
+    }
+  } else {
+    writeFile(commandsPath, COMMANDS_MD_TEMPLATE());
+    log.success(ko.init.commandsMdDone);
+  }
+  if (enhancePackageScripts(projectDir)) {
+    log.success(ko.init.scriptsDone);
+  }
+}
 
 // src/commands/recap.ts
 import inquirer3 from "inquirer";
 import chalk5 from "chalk";
-import fs3 from "fs";
-import path4 from "path";
+import fs5 from "fs";
+import path6 from "path";
 
 // src/lib/git.ts
+import path4 from "path";
 import simpleGit from "simple-git";
+
+// src/lib/check-secure.ts
+var import_ignore = __toESM(require_ignore(), 1);
+import fs3 from "fs";
+import path3 from "path";
+function loadGitignore(rootDir) {
+  const ig = (0, import_ignore.default)();
+  const gitignorePath = path3.join(rootDir, ".gitignore");
+  if (fs3.existsSync(gitignorePath)) {
+    const content = fs3.readFileSync(gitignorePath, "utf-8");
+    ig.add(content);
+  }
+  return ig;
+}
+function isPathIgnored(ig, relativePath) {
+  const normalized = relativePath.replace(/\\/g, "/");
+  return ig.ignores(normalized);
+}
+function filterTrackedPaths(paths, rootDir = process.cwd()) {
+  const ig = loadGitignore(rootDir);
+  return paths.filter((p) => !isPathIgnored(ig, p.replace(/\\/g, "/")));
+}
+
+// src/lib/git.ts
 var git = simpleGit();
+function isNoiseRecapPath(filePath) {
+  const base = path4.basename(filePath);
+  if (base.includes("${") || base.includes("`")) return true;
+  if (/^\d+(\.\d+)?$/.test(base)) return true;
+  if (/^(pnpm|vhk|npm|node|yarn)$/i.test(base)) return true;
+  if (!filePath.includes("/") && !filePath.includes("\\") && !base.includes(".")) {
+    if (!/^(README|LICENSE|Makefile|Dockerfile|CHANGELOG)$/i.test(base)) return true;
+  }
+  return false;
+}
+function filterRecapFiles(files) {
+  const paths = files.map((f) => f.file);
+  const tracked = new Set(filterTrackedPaths(paths));
+  return files.filter((f) => tracked.has(f.file) && !isNoiseRecapPath(f.file));
+}
 function fileStatus(workingDir) {
   if (workingDir === "?") return "new";
   if (workingDir === "D") return "deleted";
@@ -818,17 +1553,19 @@ async function getSessionDiff(since) {
   const statByFile = new Map(
     diffSummary.files.map((f) => [f.file, f])
   );
-  const files = statusResult.files.map((f) => {
-    const stat = statByFile.get(f.path);
-    return {
-      file: f.path,
-      insertions: stat?.insertions ?? 0,
-      deletions: stat?.deletions ?? 0,
-      status: fileStatus(f.working_dir)
-    };
-  });
+  const files = filterRecapFiles(
+    statusResult.files.map((f) => {
+      const stat = statByFile.get(f.path);
+      return {
+        file: f.path,
+        insertions: stat?.insertions ?? 0,
+        deletions: stat?.deletions ?? 0,
+        status: fileStatus(f.working_dir)
+      };
+    })
+  );
   return {
-    filesChanged: statusResult.files.length,
+    filesChanged: files.length,
     insertions: diffSummary.insertions,
     deletions: diffSummary.deletions,
     files
@@ -855,8 +1592,8 @@ async function isGitRepo() {
 }
 
 // src/lib/adr.ts
-import fs2 from "fs";
-import path3 from "path";
+import fs4 from "fs";
+import path5 from "path";
 var ADR_RULES = [
   {
     title: "\uC758\uC874\uC131 \uBCC0\uACBD",
@@ -899,20 +1636,20 @@ function detectAdrCandidates(diff) {
   return candidates;
 }
 function nextAdrNumber(adrDir) {
-  if (!fs2.existsSync(adrDir)) return 1;
-  const nums = fs2.readdirSync(adrDir).map((name) => name.match(/^ADR-(\d+)/i)?.[1]).filter((n) => Boolean(n)).map((n) => parseInt(n, 10));
+  if (!fs4.existsSync(adrDir)) return 1;
+  const nums = fs4.readdirSync(adrDir).map((name) => name.match(/^ADR-(\d+)/i)?.[1]).filter((n) => Boolean(n)).map((n) => parseInt(n, 10));
   return nums.length ? Math.max(...nums) + 1 : 1;
 }
 function slugify(title) {
   return title.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9가-힣-]/g, "").slice(0, 40) || "decision";
 }
 function createAdrFile(cwd, title, context, decision, consequences) {
-  const adrDir = path3.join(cwd, "docs", "adr");
-  if (!fs2.existsSync(adrDir)) fs2.mkdirSync(adrDir, { recursive: true });
+  const adrDir = path5.join(cwd, "docs", "adr");
+  if (!fs4.existsSync(adrDir)) fs4.mkdirSync(adrDir, { recursive: true });
   const num = nextAdrNumber(adrDir);
   const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
   const fileName = `ADR-${String(num).padStart(3, "0")}-${slugify(title)}.md`;
-  const filePath = path3.join(adrDir, fileName);
+  const filePath = path5.join(adrDir, fileName);
   const content = [
     "---",
     `id: ADR-${String(num).padStart(3, "0")}`,
@@ -938,7 +1675,7 @@ function createAdrFile(cwd, title, context, decision, consequences) {
     "---",
     `*Generated by \`vhk recap\` at ${(/* @__PURE__ */ new Date()).toISOString()}*`
   ].join("\n");
-  fs2.writeFileSync(filePath, content, "utf-8");
+  fs4.writeFileSync(filePath, content, "utf-8");
   return filePath;
 }
 
@@ -953,8 +1690,9 @@ ${ko.recap.title}
   }
   console.log(chalk5.dim(`${ko.recap.analyzing}
 `));
-  const diff = await getSessionDiff(options.since);
-  const commits = await getRecentCommits(10, options.since);
+  const since = options.since || (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const diff = await getSessionDiff(since);
+  const commits = await getRecentCommits(10, since);
   if (diff.filesChanged === 0 && commits.length === 0) {
     console.log(chalk5.yellow(ko.recap.noChanges));
     return;
@@ -1004,12 +1742,12 @@ ${ko.recap.title}
     }
   ]);
   const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-  const logDir = path4.join(process.cwd(), "docs", "log");
-  if (!fs3.existsSync(logDir)) fs3.mkdirSync(logDir, { recursive: true });
-  const existing = fs3.readdirSync(logDir).filter((f) => f.startsWith(today));
+  const logDir = path6.join(process.cwd(), "docs", "log");
+  if (!fs5.existsSync(logDir)) fs5.mkdirSync(logDir, { recursive: true });
+  const existing = fs5.readdirSync(logDir).filter((f) => f.startsWith(today));
   const sessionNum = existing.length + 1;
   const fileName = `${today}-session-${sessionNum}.md`;
-  const filePath = path4.join(logDir, fileName);
+  const filePath = path6.join(logDir, fileName);
   const fileList = diff.files.map((f) => `| ${f.file} | ${f.status} |`).join("\n");
   const commitList = commits.slice(0, 10).map((c) => `- \`${c.hash.slice(0, 7)}\` ${c.message}`).join("\n");
   const content = [
@@ -1040,7 +1778,7 @@ ${ko.recap.title}
     "---",
     `*Generated by \`vhk recap\` at ${(/* @__PURE__ */ new Date()).toISOString()}*`
   ].join("\n");
-  fs3.writeFileSync(filePath, content, "utf-8");
+  fs5.writeFileSync(filePath, content, "utf-8");
   const adrCandidates = detectAdrCandidates(diff);
   if (adrCandidates.length > 0) {
     console.log(chalk5.cyan.bold(`
@@ -1077,7 +1815,7 @@ ${ko.recap.adrDetected} (${adrCandidates.length}\uAC74)`));
           adrAnswers.decision,
           adrAnswers.consequences
         );
-        console.log(chalk5.green(`  \u2705 ADR \uC0DD\uC131: ${path4.relative(process.cwd(), adrPath)}`));
+        console.log(chalk5.green(`  \u2705 ADR \uC0DD\uC131: ${path6.relative(process.cwd(), adrPath)}`));
       }
     }
   }
@@ -1096,8 +1834,8 @@ ${ko.recap.troubleDetected} (${troubleCommits.length}\uAC74)`));
       default: true
     }]);
     if (createTroubleshoot) {
-      const tsDir = path4.join(process.cwd(), "docs", "troubleshooting");
-      if (!fs3.existsSync(tsDir)) fs3.mkdirSync(tsDir, { recursive: true });
+      const tsDir = path6.join(process.cwd(), "docs", "troubleshooting");
+      if (!fs5.existsSync(tsDir)) fs5.mkdirSync(tsDir, { recursive: true });
       const tsAnswers = await inquirer3.prompt([
         {
           type: "input",
@@ -1116,7 +1854,7 @@ ${ko.recap.troubleDetected} (${troubleCommits.length}\uAC74)`));
         }
       ]);
       const tsFileName = `${today}-${tsAnswers.problem.slice(0, 30).replace(/[^a-zA-Z0-9가-힣]/g, "-")}.md`;
-      const tsFilePath = path4.join(tsDir, tsFileName);
+      const tsFilePath = path6.join(tsDir, tsFileName);
       const tsContent = [
         `# \uD2B8\uB7EC\uBE14\uC288\uD305: ${tsAnswers.problem}`,
         "",
@@ -1137,15 +1875,15 @@ ${ko.recap.troubleDetected} (${troubleCommits.length}\uAC74)`));
         "---",
         `*Generated by \`vhk recap\` at ${(/* @__PURE__ */ new Date()).toISOString()}*`
       ].join("\n");
-      fs3.writeFileSync(tsFilePath, tsContent, "utf-8");
-      console.log(chalk5.green(`  \u2705 \uD2B8\uB7EC\uBE14\uC288\uD305 \uBB38\uC11C \uC0DD\uC131: ${path4.relative(process.cwd(), tsFilePath)}`));
+      fs5.writeFileSync(tsFilePath, tsContent, "utf-8");
+      console.log(chalk5.green(`  \u2705 \uD2B8\uB7EC\uBE14\uC288\uD305 \uBB38\uC11C \uC0DD\uC131: ${path6.relative(process.cwd(), tsFilePath)}`));
     }
   }
   console.log(chalk5.green.bold(`
 ${ko.recap.done}`));
-  console.log(chalk5.dim(`  \u{1F4C4} ${path4.relative(process.cwd(), filePath)}`));
-  const claudeMdPath = path4.join(process.cwd(), "CLAUDE.md");
-  if (fs3.existsSync(claudeMdPath)) {
+  console.log(chalk5.dim(`  \u{1F4C4} ${path6.relative(process.cwd(), filePath)}`));
+  const claudeMdPath = path6.join(process.cwd(), "CLAUDE.md");
+  if (fs5.existsSync(claudeMdPath)) {
     const { updateClaude } = await inquirer3.prompt([{
       type: "confirm",
       name: "updateClaude",
@@ -1153,7 +1891,7 @@ ${ko.recap.done}`));
       default: true
     }]);
     if (updateClaude) {
-      let claudeContent = fs3.readFileSync(claudeMdPath, "utf-8");
+      let claudeContent = fs5.readFileSync(claudeMdPath, "utf-8");
       claudeContent = claudeContent.replace(
         /- \*\*마지막 업데이트:\*\*.*/,
         `- **\uB9C8\uC9C0\uB9C9 \uC5C5\uB370\uC774\uD2B8:** ${today}`
@@ -1162,21 +1900,22 @@ ${ko.recap.done}`));
         /- \*\*다음 액션:\*\*.*/,
         `- **\uB2E4\uC74C \uC561\uC158:** ${answers.nextTodo}`
       );
-      fs3.writeFileSync(claudeMdPath, claudeContent, "utf-8");
+      fs5.writeFileSync(claudeMdPath, claudeContent, "utf-8");
       console.log(chalk5.green("  \u2705 CLAUDE.md \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC"));
     }
   }
+  const gitSaveCmd = process.platform === "win32" ? 'git add .; git commit -m "recap: \uC138\uC158 \uAE30\uB85D"' : 'git add . && git commit -m "recap: \uC138\uC158 \uAE30\uB85D"';
   printNextStep({
     message: "\uC624\uB298 \uAE30\uB85D \uC644\uB8CC! \uC800\uC7A5\uD558\uACE0 \uC2F6\uC73C\uBA74:",
-    command: 'git add . && git commit -m "recap: \uC138\uC158 \uAE30\uB85D"',
+    command: gitSaveCmd,
     cursorHint: "\uC800\uC7A5\uD574\uC918"
   });
 }
 
 // src/commands/sync.ts
 import chalk6 from "chalk";
-import fs4 from "fs";
-import path5 from "path";
+import fs6 from "fs";
+import path7 from "path";
 var CURSORRULES_KEYS = ["\uCF54\uB529 \uADDC\uCE59", "\uAE30\uC220 \uC2A4\uD0DD", "\uC544\uD0A4\uD14D\uCC98", "\uB514\uC790\uC778", "Anti-patterns", "\uCEE4\uBC0B"];
 var CLAUDE_MD_KEYS = ["\uAE30\uB85D", "\uB85C\uADF8", "ADR", "\uD2B8\uB7EC\uBE14\uC288\uD305", "TIL", "/done", "\uCCB4\uD06C\uB9AC\uC2A4\uD2B8"];
 function parseRulesMd(content) {
@@ -1248,8 +1987,8 @@ async function sync() {
 ${ko.sync.title}
 `));
   const cwd = process.cwd();
-  const rulesPath = path5.join(cwd, "RULES.md");
-  if (!fs4.existsSync(rulesPath)) {
+  const rulesPath = path7.join(cwd, "RULES.md");
+  if (!fs6.existsSync(rulesPath)) {
     console.log(chalk6.yellow(ko.sync.noRules));
     console.log(chalk6.dim("  RULES.md\uB294 \uD504\uB85C\uC81D\uD2B8 \uADDC\uCE59\uC758 Single Source of Truth\uC785\uB2C8\uB2E4."));
     console.log(chalk6.dim("  \uC0DD\uC131\uD558\uB824\uBA74: vhk init \uC2E4\uD589 \uD6C4 RULES.md\uB97C \uC791\uC131\uD558\uC138\uC694."));
@@ -1262,23 +2001,23 @@ ${ko.sync.title}
     console.log(chalk6.dim("  ## \uCEE4\uBC0B \uCEE8\uBCA4\uC158"));
     return;
   }
-  const rulesContent = fs4.readFileSync(rulesPath, "utf-8");
+  const rulesContent = fs6.readFileSync(rulesPath, "utf-8");
   const sections = parseRulesMd(rulesContent);
   console.log(chalk6.dim(`  \u{1F4C4} RULES.md \uD30C\uC2F1 \uC644\uB8CC \u2014 ${sections.length}\uAC1C \uC139\uC158`));
   const firstLine = rulesContent.split("\n")[0];
   const projectName = firstLine.replace(/^#\s*/, "").replace(/\s*—.*/, "").trim() || "Project";
-  const cursorrulesPath = path5.join(cwd, ".cursorrules");
-  fs4.writeFileSync(cursorrulesPath, toCursorrules(sections, projectName), "utf-8");
+  const cursorrulesPath = path7.join(cwd, ".cursorrules");
+  fs6.writeFileSync(cursorrulesPath, toCursorrules(sections, projectName), "utf-8");
   console.log(chalk6.green(`  ${ko.sync.cursorrulesDone}`));
-  const claudePath = path5.join(cwd, "CLAUDE.md");
-  const existingClaude = fs4.existsSync(claudePath) ? fs4.readFileSync(claudePath, "utf-8") : `# \uAE30\uB85D \uADDC\uCE59 (${projectName})
+  const claudePath = path7.join(cwd, "CLAUDE.md");
+  const existingClaude = fs6.existsSync(claudePath) ? fs6.readFileSync(claudePath, "utf-8") : `# \uAE30\uB85D \uADDC\uCE59 (${projectName})
 
 ## \uD604\uC7AC \uC0C1\uD0DC
 - **Phase:** __FILL__
 - **\uBE14\uB85C\uCEE4:** \uC5C6\uC74C
 - **\uB2E4\uC74C \uC561\uC158:** __FILL__
 - **\uB9C8\uC9C0\uB9C9 \uC5C5\uB370\uC774\uD2B8:** ${(/* @__PURE__ */ new Date()).toISOString().split("T")[0]}`;
-  fs4.writeFileSync(claudePath, toClaudeMd(sections, existingClaude), "utf-8");
+  fs6.writeFileSync(claudePath, toClaudeMd(sections, existingClaude), "utf-8");
   console.log(chalk6.green(`  ${ko.sync.claudeDone}`));
   console.log(chalk6.bold.green(`
 ${ko.sync.done}`));
@@ -1293,15 +2032,15 @@ ${ko.sync.done}`));
 
 // src/commands/check.ts
 import chalk7 from "chalk";
-import path7 from "path";
-import fs6 from "fs";
+import path9 from "path";
+import fs8 from "fs";
 
 // src/lib/rules-parser.ts
-import fs5 from "fs";
-import path6 from "path";
+import fs7 from "fs";
+import path8 from "path";
 function parseRules(rulesPath) {
-  if (!fs5.existsSync(rulesPath)) return [];
-  const content = fs5.readFileSync(rulesPath, "utf-8");
+  if (!fs7.existsSync(rulesPath)) return [];
+  const content = fs7.readFileSync(rulesPath, "utf-8");
   const lines = content.split("\n");
   const rules = [];
   let currentSection = "";
@@ -1371,17 +2110,17 @@ function createNamingRule(id, section, desc, convention) {
     description: desc,
     check: (cwd) => {
       const violations = [];
-      const srcDir = path6.join(cwd, "src");
-      if (!fs5.existsSync(srcDir)) return violations;
+      const srcDir = path8.join(cwd, "src");
+      if (!fs7.existsSync(srcDir)) return violations;
       walkFiles(srcDir, (filePath) => {
-        const name = path6.basename(filePath, path6.extname(filePath));
+        const name = path8.basename(filePath, path8.extname(filePath));
         if (convention === "kebab-case" && !/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name)) {
           if (!["index", "vite.config", "tsconfig"].includes(name)) {
             violations.push({
               ruleId: id,
               severity: "warning",
               message: `\uD30C\uC77C\uBA85\uC774 kebab-case\uAC00 \uC544\uB2D8: ${name}`,
-              file: path6.relative(cwd, filePath)
+              file: path8.relative(cwd, filePath)
             });
           }
         }
@@ -1397,8 +2136,8 @@ function createStructureRule(id, section, desc, expectedPath) {
     type: "structure",
     description: desc,
     check: (cwd) => {
-      const fullPath = path6.join(cwd, expectedPath);
-      if (!fs5.existsSync(fullPath)) {
+      const fullPath = path8.join(cwd, expectedPath);
+      if (!fs7.existsSync(fullPath)) {
         return [{
           ruleId: id,
           severity: "error",
@@ -1418,11 +2157,11 @@ function createContentRule(id, section, desc, pattern, type) {
     pattern: new RegExp(escapeRegex(pattern), "i"),
     check: (cwd) => {
       const violations = [];
-      const srcDir = path6.join(cwd, "src");
-      if (!fs5.existsSync(srcDir)) return violations;
+      const srcDir = path8.join(cwd, "src");
+      if (!fs7.existsSync(srcDir)) return violations;
       const regex = new RegExp(escapeRegex(pattern), "i");
       walkFiles(srcDir, (filePath) => {
-        const fileContent = fs5.readFileSync(filePath, "utf-8");
+        const fileContent = fs7.readFileSync(filePath, "utf-8");
         const fileLines = fileContent.split("\n");
         fileLines.forEach((line, idx) => {
           if (regex.test(line)) {
@@ -1430,7 +2169,7 @@ function createContentRule(id, section, desc, pattern, type) {
               ruleId: id,
               severity: type === "banned" ? "error" : "warning",
               message: type === "banned" ? `\uAE08\uC9C0 \uD328\uD134 \uBC1C\uACAC: \`${pattern}\`` : `\uD544\uC218 \uD328\uD134 \uB204\uB77D: \`${pattern}\``,
-              file: path6.relative(cwd, filePath),
+              file: path8.relative(cwd, filePath),
               line: idx + 1
             });
           }
@@ -1442,9 +2181,9 @@ function createContentRule(id, section, desc, pattern, type) {
   };
 }
 function walkFiles(dir, callback) {
-  const entries = fs5.readdirSync(dir, { withFileTypes: true });
+  const entries = fs7.readdirSync(dir, { withFileTypes: true });
   for (const entry of entries) {
-    const fullPath = path6.join(dir, entry.name);
+    const fullPath = path8.join(dir, entry.name);
     if (entry.isDirectory()) {
       if (!["node_modules", ".git", "dist", ".next"].includes(entry.name)) {
         walkFiles(fullPath, callback);
@@ -1464,8 +2203,8 @@ async function check() {
 ${ko.check.title}
 `));
   const cwd = process.cwd();
-  const rulesPath = path7.join(cwd, "RULES.md");
-  if (!fs6.existsSync(rulesPath)) {
+  const rulesPath = path9.join(cwd, "RULES.md");
+  if (!fs8.existsSync(rulesPath)) {
     console.log(chalk7.yellow(ko.check.noRules));
     console.log(chalk7.dim("  vhk init\uC73C\uB85C \uC2DC\uC791\uD558\uAC70\uB098 RULES.md\uB97C \uB9CC\uB4E4\uC5B4 \uBCF4\uC138\uC694."));
     return;
@@ -1523,8 +2262,8 @@ ${ko.check.title}
 
 // src/commands/secure.ts
 import chalk8 from "chalk";
-import fs7 from "fs";
-import path8 from "path";
+import fs10 from "fs";
+import path11 from "path";
 
 // src/lib/secret-patterns.ts
 var SECRET_PATTERNS = [
@@ -1589,9 +2328,32 @@ function maskSecret(value) {
   return value.slice(0, visible) + "****";
 }
 
-// src/commands/secure.ts
-var IGNORE_DIRS = ["node_modules", ".git", "dist", ".next", ".nuxt", "build", "coverage"];
-var SCAN_EXTENSIONS = [
+// src/lib/scan-files.ts
+import fs9 from "fs";
+import path10 from "path";
+var IGNORE_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  ".next",
+  ".nuxt",
+  "build",
+  "coverage",
+  "out",
+  ".turbo",
+  ".vercel",
+  ".cache",
+  ".pnpm",
+  ".idea",
+  ".claude",
+  ".cursor"
+]);
+var SKIP_FILE_NAMES = /* @__PURE__ */ new Set([
+  "pnpm-lock.yaml",
+  "package-lock.json",
+  "yarn.lock"
+]);
+var SCAN_EXTENSIONS = /* @__PURE__ */ new Set([
   ".ts",
   ".tsx",
   ".js",
@@ -1601,12 +2363,49 @@ var SCAN_EXTENSIONS = [
   ".json",
   ".yaml",
   ".yml",
-  ".toml",
-  ".env",
-  ".local",
-  ".production",
-  ".development"
-];
+  ".toml"
+]);
+var MAX_SCAN_FILE_BYTES = 512 * 1024;
+function isScannableFileName(fileName) {
+  if (SKIP_FILE_NAMES.has(fileName)) return false;
+  if (fileName.startsWith(".env")) return true;
+  return SCAN_EXTENSIONS.has(path10.extname(fileName).toLowerCase());
+}
+function walkProjectFiles(rootDir, onFile, ig = loadGitignore(rootDir)) {
+  function walk(dir) {
+    let entries;
+    try {
+      entries = fs9.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const fullPath = path10.join(dir, entry.name);
+      const rel = path10.relative(rootDir, fullPath).replace(/\\/g, "/");
+      if (entry.isDirectory()) {
+        if (IGNORE_DIRS.has(entry.name)) continue;
+        if (isPathIgnored(ig, `${rel}/`)) continue;
+        walk(fullPath);
+        continue;
+      }
+      if (!isScannableFileName(entry.name)) continue;
+      if (isPathIgnored(ig, rel)) continue;
+      let size = 0;
+      try {
+        size = fs9.statSync(fullPath).size;
+      } catch {
+        continue;
+      }
+      if (size > MAX_SCAN_FILE_BYTES) continue;
+      onFile(fullPath, rel);
+    }
+  }
+  walk(rootDir);
+}
+
+// src/commands/secure.ts
+var MAX_FINDINGS = 200;
+var MAX_LINE_CHARS = 4e3;
 async function secure() {
   console.log(chalk8.bold(`
 ${ko.secure.title}
@@ -1614,13 +2413,14 @@ ${ko.secure.title}
   const cwd = process.cwd();
   const findings = [];
   let scannedFiles = 0;
-  const gitignorePath = path8.join(cwd, ".gitignore");
-  const hasGitignore = fs7.existsSync(gitignorePath);
+  let truncated = false;
+  const gitignorePath = path11.join(cwd, ".gitignore");
+  const hasGitignore = fs10.existsSync(gitignorePath);
   if (!hasGitignore) {
     console.log(chalk8.yellow(`  ${ko.secure.noGitignore}`));
     console.log(chalk8.dim("  .env \uD30C\uC77C\uC774 \uCEE4\uBC0B\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"));
   } else {
-    const gitignoreContent = fs7.readFileSync(gitignorePath, "utf-8");
+    const gitignoreContent = fs10.readFileSync(gitignorePath, "utf-8");
     if (!gitignoreContent.includes(".env")) {
       console.log(chalk8.yellow(`  ${ko.secure.noEnvInGitignore}`));
       console.log(chalk8.dim("  \uCD94\uAC00\uB97C \uAD8C\uC7A5\uD569\uB2C8\uB2E4.\n"));
@@ -1628,13 +2428,15 @@ ${ko.secure.title}
   }
   console.log(chalk8.dim(`  ${ko.secure.scanning}
 `));
-  walkFiles2(cwd, (filePath) => {
+  walkProjectFiles(cwd, (filePath, relPath) => {
     scannedFiles++;
-    const content = fs7.readFileSync(filePath, "utf-8");
+    const content = fs10.readFileSync(filePath, "utf-8");
     const lines = content.split("\n");
-    const relPath = path8.relative(cwd, filePath);
     for (const pattern of SECRET_PATTERNS) {
+      if (truncated) break;
       lines.forEach((line, idx) => {
+        if (truncated) return;
+        if (line.length > MAX_LINE_CHARS) return;
         const trimmed = line.trim();
         if (trimmed.startsWith("//") && trimmed.includes("example")) return;
         if (trimmed.startsWith("#") && trimmed.includes("example")) return;
@@ -1649,15 +2451,26 @@ ${ko.secure.title}
             line: idx + 1,
             match: maskSecret(match[0])
           });
+          if (findings.length >= MAX_FINDINGS) {
+            truncated = true;
+            return;
+          }
         }
       });
     }
   });
-  console.log(chalk8.dim(`  \u{1F4C2} ${scannedFiles}\uAC1C \uD30C\uC77C \uC2A4\uCE94 \uC644\uB8CC
-`));
+  console.log(chalk8.dim(`  \u{1F4C2} ${scannedFiles}\uAC1C \uD30C\uC77C \uC2A4\uCE94 \uC644\uB8CC (lock\xB7node_modules\xB7>${MAX_SCAN_FILE_BYTES / 1024}KB \uC81C\uC678)`));
+  if (truncated) {
+    console.log(chalk8.yellow(`  \u26A0\uFE0F  \uACB0\uACFC ${MAX_FINDINGS}\uAC74\uC5D0\uC11C \uCD9C\uB825\uC744 \uC81C\uD55C\uD588\uC2B5\uB2C8\uB2E4. lock \uD30C\uC77C \uB4F1\uC740 \uC790\uB3D9 \uC81C\uC678\uB429\uB2C8\uB2E4.`));
+  }
+  console.log("");
   if (findings.length === 0) {
     console.log(chalk8.green.bold(`  ${ko.secure.clean}`));
-    console.log(chalk8.dim("  \uAC00\uB054 vhk secure scan\uC73C\uB85C \uB2E4\uC2DC \uD655\uC778\uD574 \uBCF4\uC138\uC694.\n"));
+    printNextStep({
+      message: "\uBCF4\uC548 \uC774\uC0C1 \uC5C6\uC74C! \uAE68\uB057\uD569\uB2C8\uB2E4.",
+      command: "vhk \uC815\uB9AC",
+      cursorHint: "\uC624\uB298 \uD55C \uC77C \uC815\uB9AC\uD574\uC918"
+    });
     return;
   }
   const critical = findings.filter((f) => f.severity === "critical");
@@ -1698,21 +2511,225 @@ ${ko.secure.title}
     process.exitCode = 1;
   }
 }
-function walkFiles2(dir, callback) {
-  const entries = fs7.readdirSync(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    const fullPath = path8.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      if (!IGNORE_DIRS.includes(entry.name) && !entry.name.startsWith(".")) {
-        walkFiles2(fullPath, callback);
+
+// src/commands/doctor.ts
+import chalk9 from "chalk";
+import { execSync } from "child_process";
+import fs11 from "fs";
+import path12 from "path";
+import { fileURLToPath } from "url";
+function checkCommand(name, command, hint) {
+  try {
+    const version = execSync(`${command} --version`, { encoding: "utf-8" }).trim().split("\n")[0];
+    return { name, command, version, ok: true, hint };
+  } catch {
+    return { name, command, ok: false, hint };
+  }
+}
+function getVhkVersion() {
+  const dir = path12.dirname(fileURLToPath(import.meta.url));
+  const candidates = [
+    path12.join(dir, "../package.json"),
+    path12.join(dir, "../../package.json")
+  ];
+  for (const pkgPath of candidates) {
+    try {
+      if (fs11.existsSync(pkgPath)) {
+        const pkg = JSON.parse(fs11.readFileSync(pkgPath, "utf-8"));
+        return pkg.version;
       }
+    } catch {
+      continue;
+    }
+  }
+  return void 0;
+}
+async function doctor() {
+  console.log(chalk9.bold(`
+${ko.doctor.title}
+`));
+  const checks = [
+    checkCommand("Node.js", "node", "\uC124\uCE58: https://nodejs.org (LTS \uAD8C\uC7A5)"),
+    checkCommand("npm", "npm", "Node.js \uC124\uCE58 \uC2DC \uD568\uAED8 \uC124\uCE58\uB429\uB2C8\uB2E4"),
+    checkCommand("pnpm", "pnpm", "\uC124\uCE58: npm i -g pnpm"),
+    checkCommand("Git", "git", "\uC124\uCE58: https://git-scm.com")
+  ];
+  let allOk = true;
+  for (const check2 of checks) {
+    if (check2.ok) {
+      console.log(chalk9.green(`  \u2705 ${check2.name}`) + chalk9.dim(` \u2014 ${check2.version}`));
     } else {
-      const ext = path8.extname(entry.name);
-      if (SCAN_EXTENSIONS.includes(ext) || entry.name.startsWith(".env")) {
-        callback(fullPath);
+      console.log(chalk9.red(`  \u274C ${check2.name} \uC5C6\uC74C`));
+      console.log(chalk9.dim(`     \u2192 ${check2.hint}`));
+      allOk = false;
+    }
+  }
+  console.log("");
+  const vhkVersion = getVhkVersion();
+  if (vhkVersion) {
+    console.log(chalk9.green("  \u2705 VHK") + chalk9.dim(` \u2014 v${vhkVersion}`));
+  } else {
+    console.log(chalk9.green("  \u2705 VHK") + chalk9.dim(" \u2014 \uC124\uCE58\uB428"));
+  }
+  console.log("");
+  console.log(chalk9.bold(`  ${ko.doctor.projectFiles}`));
+  const cwd = process.cwd();
+  const projectFiles = [
+    { name: "RULES.md", hint: "vhk init\uC73C\uB85C \uC0DD\uC131 \uAC00\uB2A5" },
+    { name: "COMMANDS.md", hint: "vhk init\uC73C\uB85C \uC0DD\uC131 \uAC00\uB2A5" },
+    { name: "package.json", hint: "\uD504\uB85C\uC81D\uD2B8 \uD3F4\uB354\uC5D0\uC11C \uC2E4\uD589\uD558\uC138\uC694" },
+    { name: ".gitignore", hint: "\uBCF4\uC548\uC744 \uC704\uD574 \uCD94\uAC00 \uAD8C\uC7A5" },
+    { name: ".env", hint: ".gitignore\uC5D0 \uD3EC\uD568\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778" }
+  ];
+  for (const file of projectFiles) {
+    const exists = fs11.existsSync(path12.join(cwd, file.name));
+    if (exists) {
+      console.log(chalk9.green(`    \u2705 ${file.name}`));
+      if (file.name === ".env") {
+        const gitignorePath = path12.join(cwd, ".gitignore");
+        if (fs11.existsSync(gitignorePath)) {
+          const gitignore = fs11.readFileSync(gitignorePath, "utf-8");
+          if (!gitignore.includes(".env")) {
+            console.log(chalk9.yellow(`    ${ko.doctor.envNotIgnored}`));
+          }
+        }
       }
+    } else {
+      console.log(chalk9.dim(`    \u2B1A ${file.name}`) + chalk9.dim(` \u2014 ${file.hint}`));
     }
   }
+  console.log("");
+  if (allOk) {
+    console.log(chalk9.green.bold(`  ${ko.doctor.allOk}`));
+    printNextStep({
+      message: ko.doctor.nextOkMessage,
+      command: "vhk \uC2DC\uC791",
+      cursorHint: "\uD504\uB85C\uC81D\uD2B8 \uB9CC\uB4E4\uC5B4\uC918"
+    });
+  } else {
+    console.log(chalk9.yellow.bold(`  ${ko.doctor.missing} ${ko.doctor.missingHint}`));
+    printNextStep({
+      message: ko.doctor.nextRetryMessage,
+      command: "vhk doctor",
+      cursorHint: "\uD658\uACBD \uB2E4\uC2DC \uC810\uAC80\uD574\uC918"
+    });
+    process.exitCode = 1;
+  }
+}
+
+// src/commands/ship.ts
+import chalk10 from "chalk";
+import inquirer4 from "inquirer";
+import fs12 from "fs";
+import path13 from "path";
+var CHECKLIST = [
+  { id: "build", questionKey: "checkBuild", hintKey: "hintBuild" },
+  { id: "test", questionKey: "checkTest", hintKey: "hintTest" },
+  { id: "version", questionKey: "checkVersion", hintKey: "hintVersion" },
+  { id: "changelog", questionKey: "checkChangelog", hintKey: "hintChangelog" },
+  { id: "security", questionKey: "checkSecurity", hintKey: "hintSecurity" },
+  { id: "commit", questionKey: "checkCommit", hintKey: "hintCommit" }
+];
+function sanitizeVersion(version) {
+  return version.trim().replace(/^v/i, "").replace(/[^a-zA-Z0-9._-]/g, "-") || "0.0.0";
+}
+async function ship() {
+  console.log(chalk10.bold(`
+${ko.ship.title}
+`));
+  const cwd = process.cwd();
+  console.log(chalk10.cyan.bold(`  ${ko.ship.checklist}
+`));
+  const { passed } = await inquirer4.prompt([{
+    type: "checkbox",
+    name: "passed",
+    message: ko.ship.checkboxPrompt,
+    choices: CHECKLIST.map((c) => ({
+      name: `${ko.ship[c.questionKey]} ${chalk10.dim(`(${ko.ship[c.hintKey]})`)}`,
+      value: c.id
+    }))
+  }]);
+  const allPassed = passed.length === CHECKLIST.length;
+  const skipped = CHECKLIST.filter((c) => !passed.includes(c.id));
+  if (!allPassed) {
+    console.log(chalk10.yellow(`
+  ${ko.ship.incompleteHeader}`));
+    skipped.forEach((s) => {
+      console.log(chalk10.yellow(`    \u2022 ${ko.ship[s.questionKey]}`));
+      console.log(chalk10.dim(`      \u2192 ${ko.ship[s.hintKey]}`));
+    });
+    const { proceed } = await inquirer4.prompt([{
+      type: "confirm",
+      name: "proceed",
+      message: ko.ship.proceedConfirm,
+      default: false
+    }]);
+    if (!proceed) {
+      printNextStep({
+        message: ko.ship.retryMessage,
+        command: "vhk \uBC30\uD3EC",
+        cursorHint: ko.ship.retryCursorHint
+      });
+      return;
+    }
+  } else {
+    console.log(chalk10.green(`
+  ${ko.ship.allPassed}
+`));
+  }
+  console.log(chalk10.cyan.bold(`  ${ko.ship.retro}
+`));
+  console.log(chalk10.dim(`  ${ko.ship.versionHint}`));
+  const retro = await inquirer4.prompt([
+    { type: "input", name: "version", message: ko.ship.versionPrompt },
+    { type: "input", name: "whatWentWell", message: ko.ship.questionWell },
+    { type: "input", name: "whatWentWrong", message: ko.ship.questionWrong },
+    { type: "input", name: "learned", message: ko.ship.questionLearned },
+    { type: "input", name: "nextVersion", message: ko.ship.questionNext }
+  ]);
+  const buildLogDir = path13.join(cwd, "docs", "build-log");
+  if (!fs12.existsSync(buildLogDir)) fs12.mkdirSync(buildLogDir, { recursive: true });
+  const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const versionSlug = sanitizeVersion(retro.version);
+  const fileName = `${today}-v${versionSlug}.md`;
+  const filePath = path13.join(buildLogDir, fileName);
+  const content = [
+    `# \uBE4C\uB4DC \uB85C\uADF8: v${versionSlug}`,
+    "",
+    `**\uBC30\uD3EC\uC77C:** ${today}`,
+    `**\uBC84\uC804:** ${versionSlug}`,
+    "",
+    "## \uCCB4\uD06C\uB9AC\uC2A4\uD2B8",
+    ...CHECKLIST.map(
+      (c) => `- [${passed.includes(c.id) ? "x" : " "}] ${ko.ship[c.questionKey]}`
+    ),
+    "",
+    "## \uD68C\uACE0",
+    "",
+    "### \u2705 \uC798\uB41C \uC810",
+    retro.whatWentWell || ko.ship.emptySection,
+    "",
+    "### \u274C \uC5B4\uB824\uC6E0\uB358 \uC810",
+    retro.whatWentWrong || ko.ship.emptySection,
+    "",
+    "### \u{1F4A1} \uBC30\uC6B4 \uC810",
+    retro.learned || ko.ship.emptySection,
+    "",
+    "### \u{1F52E} \uB2E4\uC74C \uBC84\uC804",
+    retro.nextVersion || ko.ship.emptyNext,
+    "",
+    "---",
+    `*Generated by \`vhk ship\` at ${(/* @__PURE__ */ new Date()).toISOString()}*`
+  ].join("\n");
+  fs12.writeFileSync(filePath, content, "utf-8");
+  console.log(chalk10.green(`
+  ${ko.ship.buildLogDone(path13.relative(cwd, filePath))}`));
+  printNextStep({
+    message: ko.ship.deployMessage,
+    command: "npm publish --access=public",
+    cursorHint: ko.ship.deployCursorHint,
+    alternative: `GitHub \uD0DC\uADF8\uB3C4 \uB9CC\uB4E4\uBA74 \uC88B\uC544\uC694: git tag v${versionSlug}`
+  });
 }
 
 // src/index.ts
@@ -1724,9 +2741,11 @@ var KO_ALIASES = {
   recap: "\uC815\uB9AC",
   sync: "\uADDC\uCE59",
   check: "\uC810\uAC80",
-  secure: "\uBCF4\uC548"
+  secure: "\uBCF4\uC548",
+  ship: "\uBC30\uD3EC",
+  doctor: "\uD658\uACBD"
 };
-program.name("vhk").description("VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58 (\uD55C\uAD6D\uC5B4\uB85C \uC548\uB0B4\uD569\uB2C8\uB2E4)").version("0.3.1");
+program.name("vhk").description("VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58 (\uD55C\uAD6D\uC5B4\uB85C \uC548\uB0B4\uD569\uB2C8\uB2E4)").version("0.4.0");
 program.configureHelp({
   formatHelp(cmd, helper) {
     if (cmd.parent) {
@@ -1754,19 +2773,69 @@ program.command("sync").alias("\uB9DE\uCD94\uAE30").alias("\uADDC\uCE59").descri
 program.command("check").alias("\uC810\uAC80").alias("\uB9B0\uD2B8").description("RULES.md \uADDC\uCE59 \uC810\uAC80 \u2014 \uCF54\uB4DC \uC704\uBC18 \uAC80\uC0AC").action(check);
 var secureCmd = program.command("secure").alias("\uBCF4\uC548").description("\uBCF4\uC548 \uB3C4\uAD6C \uBAA8\uC74C");
 secureCmd.command("scan").alias("\uC2A4\uCE94").description("\uC2DC\uD06C\uB9BF/\uD0A4 \uC720\uCD9C \uC2A4\uCE94").action(secure);
+program.command("ship").alias("\uBC30\uD3EC").alias("\uB9B4\uB9AC\uC988").description("\uBC30\uD3EC \uCCB4\uD06C\uB9AC\uC2A4\uD2B8 + \uD68C\uACE0 + \uBE4C\uB4DC \uB85C\uADF8 \uC0DD\uC131").action(ship);
+program.command("doctor").alias("\uD658\uACBD").alias("\uC9C4\uB2E8").description("\uAC1C\uBC1C \uD658\uACBD \uC810\uAC80 \u2014 Node/Git/npm \uC0C1\uD0DC \uD655\uC778").action(doctor);
+program.on("command:*", async (operands) => {
+  const input = operands.join(" ");
+  const route = routeNaturalLanguage(input);
+  if (route) {
+    console.log("");
+    console.log(chalk11.cyan(`  \u{1F4AC} "${input}"`));
+    console.log(chalk11.cyan(`  \u2192 ${route.explanation}`));
+    if (route.confidence === "low") {
+      const { confirm } = await inquirer5.prompt([{
+        type: "confirm",
+        name: "confirm",
+        message: `${route.explanation} \u2014 ${ko.nlp.matched}`,
+        default: true
+      }]);
+      if (!confirm) {
+        console.log(chalk11.dim(`  ${ko.nlp.menuHint}`));
+        return;
+      }
+    }
+    console.log("");
+    switch (route.command) {
+      case "gate":
+        return gate();
+      case "init":
+        return init({
+          skipGate: route.args?.includes("--skip-gate"),
+          fromNotion: route.args?.includes("--from-notion") ? extractNotionUrl(input) : void 0
+        });
+      case "recap":
+        return recap({});
+      case "sync":
+        return sync();
+      case "check":
+        return check();
+      case "secure":
+        return secure();
+      case "ship":
+        return ship();
+      case "doctor":
+        return doctor();
+    }
+  }
+  console.log(chalk11.yellow(`
+  \u2753 "${input}" \u2014 ${ko.nlp.notMatched}
+`));
+});
 program.action(async () => {
   console.log("\n\u{1F3AF} VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58\n");
-  const { choice } = await inquirer4.prompt([{
+  const { choice } = await inquirer5.prompt([{
     type: "list",
     name: "choice",
     message: "\uBB58 \uB3C4\uC640\uB4DC\uB9B4\uAE4C\uC694?",
     choices: [
       { name: "\u{1F4A1} \uC0C8 \uC544\uC774\uB514\uC5B4 \uAC80\uC99D\uD558\uAE30", value: "gate" },
-      { name: "\u{1F4E6} \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791\uD558\uAE30 (\uD30C\uC77C \uB9CC\uB4E4\uAE30)", value: "init" },
+      { name: "\u{1F4E6} \uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791\uD558\uAE30", value: "init" },
       { name: "\u{1F4DD} \uC624\uB298 \uD55C \uC77C \uC815\uB9AC\uD558\uAE30", value: "recap" },
       { name: "\u{1F50D} \uADDC\uCE59 \uD30C\uC77C \uC810\uAC80\uD558\uAE30", value: "check" },
       { name: "\u{1F512} \uBCF4\uC548 \uC2A4\uCE94 \uB3CC\uB9AC\uAE30", value: "secure" },
-      { name: "\u{1F504} \uADDC\uCE59 \uD30C\uC77C \uB3D9\uAE30\uD654", value: "sync" }
+      { name: "\u{1F504} \uADDC\uCE59 \uD30C\uC77C \uB3D9\uAE30\uD654", value: "sync" },
+      { name: "\u{1F680} \uBC30\uD3EC\uD558\uAE30", value: "ship" },
+      { name: "\u{1FA7A} \uD658\uACBD \uC810\uAC80\uD558\uAE30", value: "doctor" }
     ]
   }]);
   switch (choice) {
@@ -1782,6 +2851,10 @@ program.action(async () => {
       return secure();
     case "sync":
       return sync();
+    case "doctor":
+      return doctor();
+    case "ship":
+      return ship();
   }
 });
 program.parse();