@byh3071/vhk 0.8.1 → 1.0.0

package/dist/index.js

@@ -10,7 +10,7 @@ import {
   safeExecFileStream,
   startMcpServer,
   t
-} from "./chunk-X3CIIDO2.js";
+} from "./chunk-7NGBIIA3.js";
 
 // node_modules/.pnpm/ignore@7.0.5/node_modules/ignore/index.js
 var require_ignore = __commonJS({
@@ -472,10 +472,10 @@ var require_ignore = __commonJS({
 
 // src/index.ts
 import { Command, Help } from "commander";
-import inquirer12 from "inquirer";
-import fs16 from "fs";
+import inquirer14 from "inquirer";
+import fs15 from "fs";
 import path15 from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { fileURLToPath as fileURLToPath4 } from "url";
 
 // src/lib/nlp-router.ts
 function normalize(input) {
@@ -511,7 +511,7 @@ var RULES = [
     command: "init",
     explanation: "\uD504\uB85C\uC81D\uD2B8 \uC2DC\uC791 (vhk \uC2DC\uC791)",
     confidence: "high",
-    test: (t2) => (/프로젝트.*(만들|시작)|폴더.*만들|만들고\s*싶|하네스|초기화/.test(t2) || /^시작$/.test(t2)) && !/디자인|design|팔레트|palette|테마|theme|레퍼런스|reference|다크\s*모드|라이트\s*모드|색상\s*모드/.test(t2)
+    test: (t2) => (/프로젝트.*(만들|시작)|폴더.*만들|만들고\s*싶|하네스|초기화/.test(t2) || /^시작$/.test(t2)) && !/디자인|design|팔레트|palette|테마|theme|레퍼런스|reference|다크\s*모드|라이트\s*모드|색상\s*모드|브리핑|brief|컨텍스트|context|맥락|기억|memory/.test(t2)
   },
   {
     command: "mcp-init",
@@ -543,6 +543,54 @@ var RULES = [
     confidence: "high",
     test: (t2) => /^레퍼런스$|^ref$|레퍼런스.*(보|목록|확인|있|뭐)|참고\s*(사이트|목록|링크)|reference.*list/.test(t2) && !/(add|추가|open|열|https?:\/\/)/.test(t2)
   },
+  {
+    command: "harness",
+    explanation: "\uD1B5\uD569 \uD488\uC9C8 \uC810\uAC80 (vhk harness)",
+    confidence: "high",
+    test: (t2) => /하네스|harness|통합\s*점검|품질\s*점검|빌드\s*테스트|lint.*(test|build)|전체\s*점검|품질\s*확인/.test(t2)
+  },
+  {
+    command: "audit",
+    explanation: "\uBCF4\uC548 \uCDE8\uC57D\uC810 \uAC10\uC0AC (vhk audit)",
+    confidence: "high",
+    test: (t2) => /감사|취약점|audit|vulnerability|보안\s*감사|보안\s*취약|의존성\s*취약/.test(t2)
+  },
+  {
+    command: "migrate",
+    explanation: "\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658 (vhk migrate)",
+    confidence: "high",
+    test: (t2) => /전환|마이그레이트|migrate|패키지\s*매니저|npm.*pnpm|pnpm.*npm|yarn.*전환|npm.*전환|pnpm.*전환/.test(t2)
+  },
+  {
+    command: "update",
+    explanation: "VHK CLI \uCD5C\uC2E0 \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8 (vhk update)",
+    confidence: "high",
+    test: (t2) => /업데이트|update|버전\s*업|최신\s*버전|셀프\s*업데이트|vhk.*최신|vhk.*업데이트/.test(t2)
+  },
+  {
+    command: "context-show",
+    explanation: "\uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C \uBCF4\uAE30 (vhk context-show)",
+    confidence: "high",
+    test: (t2) => /맥락\s*(보|확인|보여)|컨텍스트\s*(보|확인|보여)|context\s*show/.test(t2)
+  },
+  {
+    command: "context",
+    explanation: "\uD504\uB85C\uC81D\uD2B8 \uB9E5\uB77D \uC0DD\uC131 (vhk context)",
+    confidence: "high",
+    test: (t2) => /(^맥락$|^컨텍스트$|^context$|맥락\s*(만들|생성|갱신|업데이트)|컨텍스트\s*(만들|생성|갱신|업데이트)|프로젝트\s*맥락|프로젝트\s*정보\s*생성)/.test(t2) && !/보|확인|보여|show/.test(t2)
+  },
+  {
+    command: "memory",
+    explanation: "\uAE30\uC5B5 \uBAA9\uB85D \uC870\uD68C (vhk memory list)",
+    confidence: "high",
+    test: (t2) => /^기억$|기억\s*(목록|보|확인|뭐)|memory.*list|결정사항\s*(목록|확인|보여)/.test(t2) && !/(추가|add|삭제|remove|저장|기록해)/.test(t2)
+  },
+  {
+    command: "brief",
+    explanation: "\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uC694\uC57D (vhk brief)",
+    confidence: "high",
+    test: (t2) => /브리핑|brief|상태\s*요약|프로젝트\s*요약|요약\s*(보고|리포트|보여|만들)|보고서\s*(만들|생성|보여)/.test(t2)
+  },
   {
     command: "secure",
     explanation: "\uBCF4\uC548 \uC2A4\uCE94 (vhk \uBCF4\uC548)",
@@ -709,6 +757,22 @@ var KNOWN_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "\uD14C\uB9C8",
   "ref",
   "\uB808\uD37C\uB7F0\uC2A4",
+  "harness",
+  "\uD558\uB124\uC2A4",
+  "audit",
+  "\uAC10\uC0AC",
+  "migrate",
+  "\uC804\uD658",
+  "update",
+  "\uC5C5\uB370\uC774\uD2B8",
+  "context",
+  "\uB9E5\uB77D",
+  "context-show",
+  "\uB9E5\uB77D\uBCF4\uAE30",
+  "memory",
+  "\uAE30\uC5B5",
+  "brief",
+  "\uBE0C\uB9AC\uD551",
   "help"
 ]);
 function isOptionToken(token) {
@@ -732,8 +796,8 @@ function detectNaturalLanguageInput(argv) {
 }
 
 // src/lib/nlp-run.ts
-import chalk21 from "chalk";
-import inquirer11 from "inquirer";
+import chalk28 from "chalk";
+import inquirer13 from "inquirer";
 
 // src/commands/gate.ts
 import inquirer from "inquirer";
@@ -1658,7 +1722,7 @@ function nextAdrNumber(adrDir) {
 function slugify(title) {
   return title.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9가-힣-]/g, "").slice(0, 40) || "decision";
 }
-function createAdrFile(cwd, title, context, decision, consequences) {
+function createAdrFile(cwd, title, context2, decision, consequences) {
   const adrDir = path5.join(cwd, "docs", "adr");
   if (!fs4.existsSync(adrDir)) fs4.mkdirSync(adrDir, { recursive: true });
   const num = nextAdrNumber(adrDir);
@@ -1676,7 +1740,7 @@ function createAdrFile(cwd, title, context, decision, consequences) {
     `# ADR-${String(num).padStart(3, "0")}: ${title}`,
     "",
     "## \uB9E5\uB77D (Context)",
-    context,
+    context2,
     "",
     "## \uACB0\uC815 (Decision)",
     decision,
@@ -3104,17 +3168,17 @@ ${t("undo.recentHeader")}`));
 
 // src/commands/status.ts
 import { execFileSync as execFileSync4 } from "child_process";
-import fs15 from "fs";
+import fs14 from "fs";
 import path14 from "path";
 import chalk13 from "chalk";
 
 // src/lib/read-json.ts
-import fs14 from "fs";
+import { readFileSync } from "fs";
 function stripBom(text) {
   return text.charCodeAt(0) === 65279 ? text.slice(1) : text;
 }
 function readJsonFile(filePath) {
-  const raw = stripBom(fs14.readFileSync(filePath, "utf-8"));
+  const raw = stripBom(readFileSync(filePath, "utf-8"));
   return JSON.parse(raw);
 }
 
@@ -3157,7 +3221,7 @@ function parseRecentCommitLines(logOutput) {
 }
 function readProjectPackage(cwd = process.cwd()) {
   const pkgPath = path14.join(cwd, "package.json");
-  if (!fs15.existsSync(pkgPath)) return null;
+  if (!fs14.existsSync(pkgPath)) return null;
   try {
     const pkg = readJsonFile(pkgPath);
     if (!pkg.name && !pkg.version) return null;
@@ -3326,7 +3390,7 @@ ${t("diff.summaryHeader")}`));
 }
 
 // src/commands/mcp-init.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { existsSync, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
 import { join } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import chalk15 from "chalk";
@@ -3334,7 +3398,7 @@ function resolveVhkMcpPath() {
   try {
     const pkgPath = join(process.cwd(), "package.json");
     if (existsSync(pkgPath)) {
-      const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+      const pkg = JSON.parse(readFileSync2(pkgPath, "utf-8"));
       if (pkg.name === "@byh3071/vhk") {
         return join(process.cwd(), "dist", "mcp", "index.js");
       }
@@ -3363,7 +3427,7 @@ async function mcpInit() {
   let config;
   if (existsSync(configPath)) {
     try {
-      const parsed = JSON.parse(readFileSync(configPath, "utf-8"));
+      const parsed = JSON.parse(readFileSync2(configPath, "utf-8"));
       config = {
         mcpServers: { ...parsed.mcpServers ?? {}, vhk: vhkEntry }
       };
@@ -3486,7 +3550,7 @@ ${t("deploy.deploying")}
 }
 
 // src/commands/publish.ts
-import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import chalk17 from "chalk";
 import inquirer8 from "inquirer";
 import ora2 from "ora";
@@ -3510,7 +3574,7 @@ async function publish() {
   }
   let pkg;
   try {
-    pkg = JSON.parse(readFileSync2("package.json", "utf-8"));
+    pkg = JSON.parse(readFileSync3("package.json", "utf-8"));
   } catch {
     console.log(chalk17.red("\u274C package.json \uD30C\uC2F1 \uC2E4\uD328"));
     return;
@@ -3835,13 +3899,13 @@ async function theme() {
 }
 
 // src/commands/ref.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "fs";
 import chalk20 from "chalk";
 var REFS_PATH = ".vhk/refs.json";
 function loadRefs() {
   if (!existsSync6(REFS_PATH)) return [];
   try {
-    const raw = readFileSync3(REFS_PATH, "utf-8");
+    const raw = readFileSync4(REFS_PATH, "utf-8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -3933,6 +3997,730 @@ async function refOpen(indexStr) {
   }
 }
 
+// src/commands/harness.ts
+import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
+import chalk21 from "chalk";
+import ora3 from "ora";
+function detectPM() {
+  if (existsSync7("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync7("yarn.lock")) return "yarn";
+  return "npm";
+}
+function pmRun(pm, script) {
+  return pm === "npm" ? ["run", script] : [script];
+}
+function detectChecks() {
+  const checks = [];
+  let pkg = {};
+  try {
+    pkg = JSON.parse(readFileSync5("package.json", "utf-8"));
+  } catch {
+    return checks;
+  }
+  const s = pkg.scripts ?? {};
+  const pm = detectPM();
+  if (s.lint) {
+    checks.push({ name: "lint", bin: pm, args: pmRun(pm, "lint") });
+  } else if (existsSync7(".eslintrc.js") || existsSync7(".eslintrc.json") || existsSync7("eslint.config.js")) {
+    checks.push({ name: "lint", bin: "npx", args: ["eslint", ".", "--ext", ".ts,.tsx"] });
+  }
+  if (s["type-check"]) {
+    checks.push({ name: "type-check", bin: pm, args: pmRun(pm, "type-check") });
+  } else if (s.typecheck) {
+    checks.push({ name: "type-check", bin: pm, args: pmRun(pm, "typecheck") });
+  } else if (existsSync7("tsconfig.json")) {
+    checks.push({ name: "type-check", bin: "npx", args: ["tsc", "--noEmit"] });
+  }
+  if (s.test) {
+    checks.push({ name: "test", bin: pm, args: pmRun(pm, "test") });
+  }
+  if (s.build) {
+    checks.push({ name: "build", bin: pm, args: pmRun(pm, "build") });
+  }
+  return checks;
+}
+async function harness() {
+  console.log(chalk21.bold("\n\u{1F527} " + t("harness.title")));
+  console.log(chalk21.gray("\u2500".repeat(40)));
+  const checks = detectChecks();
+  if (checks.length === 0) {
+    console.log(chalk21.yellow("\n\u26A0\uFE0F  \uC2E4\uD589\uD560 \uC218 \uC788\uB294 \uC2A4\uD06C\uB9BD\uD2B8\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk21.gray("   package.json\uC5D0 lint, test, build \uC2A4\uD06C\uB9BD\uD2B8\uB97C \uCD94\uAC00\uD574\uC8FC\uC138\uC694."));
+    return;
+  }
+  console.log(chalk21.cyan(`
+\u{1F3C3} ${checks.length}\uAC1C \uC810\uAC80 \uC2DC\uC791:
+`));
+  const results = [];
+  for (const check2 of checks) {
+    const display = `${check2.bin} ${check2.args.join(" ")}`;
+    const spinner = ora3(`${check2.name} \uC2E4\uD589 \uC911...`).start();
+    const start = Date.now();
+    const result = safeExecFile(check2.bin, check2.args);
+    const duration = Date.now() - start;
+    const sec = (duration / 1e3).toFixed(1);
+    if (result.ok) {
+      spinner.succeed(`${check2.name} ${chalk21.gray(`(${sec}s)`)}`);
+      results.push({ name: check2.name, command: display, passed: true, duration });
+    } else {
+      spinner.fail(`${check2.name} ${chalk21.gray(`(${sec}s)`)}`);
+      results.push({
+        name: check2.name,
+        command: display,
+        passed: false,
+        duration,
+        error: result.err.slice(0, 200)
+      });
+    }
+  }
+  console.log(chalk21.bold("\n\u{1F4CA} \uD1B5\uD569 \uB9AC\uD3EC\uD2B8:"));
+  console.log(chalk21.gray("\u2500".repeat(40)));
+  for (const r of results) {
+    const icon = r.passed ? chalk21.green("\u2705") : chalk21.red("\u274C");
+    const sec = (r.duration / 1e3).toFixed(1);
+    console.log(`  ${icon} ${r.name.padEnd(15)} ${chalk21.gray(`${sec}s`)}`);
+  }
+  const passed = results.filter((r) => r.passed).length;
+  const all = passed === results.length;
+  console.log(chalk21.gray("\u2500".repeat(40)));
+  if (all) {
+    console.log(chalk21.green.bold(`
+\u{1F389} \uC804\uCCB4 \uD1B5\uACFC! (${passed}/${results.length})`));
+  } else {
+    console.log(
+      chalk21.red.bold(`
+\u26A0\uFE0F  ${results.length - passed}\uAC1C \uC2E4\uD328 (${passed}/${results.length} \uD1B5\uACFC)`)
+    );
+  }
+  printNextStep({
+    message: all ? "\uD488\uC9C8 \uC810\uAC80 \uD1B5\uACFC!" : "\uC2E4\uD328 \uD56D\uBAA9\uC744 \uC218\uC815\uD558\uC138\uC694.",
+    command: all ? "vhk ship" : "vhk doctor",
+    cursorHint: all ? "\uBC30\uD3EC\uD574\uC918" : "\uBB38\uC81C \uC9C4\uB2E8\uD574\uC918"
+  });
+}
+
+// src/commands/audit.ts
+import { existsSync as existsSync8 } from "fs";
+import chalk22 from "chalk";
+import inquirer11 from "inquirer";
+import ora4 from "ora";
+function detectCurrentPM() {
+  if (existsSync8("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync8("yarn.lock")) return "yarn";
+  return "npm";
+}
+function parseAuditOutput(output, pm) {
+  const empty = { critical: 0, high: 0, moderate: 0, low: 0, total: 0 };
+  if (!output) return empty;
+  try {
+    const json = JSON.parse(output);
+    const meta = json.metadata?.vulnerabilities;
+    if (meta) {
+      const summary = {
+        critical: meta.critical ?? 0,
+        high: meta.high ?? 0,
+        moderate: meta.moderate ?? 0,
+        low: meta.low ?? 0,
+        total: meta.total ?? 0
+      };
+      if (!summary.total) {
+        summary.total = summary.critical + summary.high + summary.moderate + summary.low;
+      }
+      return summary;
+    }
+    void pm;
+    return empty;
+  } catch {
+    return empty;
+  }
+}
+function runAuditJson(pm) {
+  const result = safeExecFile(pm, ["audit", "--json"]);
+  return result.out;
+}
+function runAuditFix(pm) {
+  if (pm !== "npm") {
+    return { ok: false, err: `${pm}\uC740 \uC790\uB3D9 fix\uB97C \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. npm \uD658\uACBD\uC5D0\uC11C\uB9CC \uB3D9\uC791\uD569\uB2C8\uB2E4.` };
+  }
+  const result = safeExecFile("npm", ["audit", "fix"]);
+  return result.ok ? { ok: true } : { ok: false, err: result.err };
+}
+async function audit(autoFix = false) {
+  console.log(chalk22.bold("\n\u{1F6E1}\uFE0F  " + t("audit.title")));
+  console.log(chalk22.gray("\u2500".repeat(40)));
+  const pm = detectCurrentPM();
+  console.log(chalk22.cyan(`\u{1F4E6} \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800: ${pm}`));
+  const spinner = ora4("\uBCF4\uC548 \uAC10\uC0AC \uC2E4\uD589 \uC911...").start();
+  const output = runAuditJson(pm);
+  spinner.stop();
+  const summary = parseAuditOutput(output, pm);
+  if (summary.total === 0) {
+    console.log(chalk22.green.bold("\n\u{1F389} \uCDE8\uC57D\uC810\uC774 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4!"));
+    return;
+  }
+  console.log(chalk22.bold("\n\u{1F4CA} \uCDE8\uC57D\uC810 \uC694\uC57D:"));
+  if (summary.critical > 0) console.log(chalk22.red(`  \u{1F534} Critical: ${summary.critical}`));
+  if (summary.high > 0) console.log(chalk22.red(`  \u{1F7E0} High: ${summary.high}`));
+  if (summary.moderate > 0) console.log(chalk22.yellow(`  \u{1F7E1} Moderate: ${summary.moderate}`));
+  if (summary.low > 0) console.log(chalk22.gray(`  \u26AA Low: ${summary.low}`));
+  console.log(chalk22.bold(`
+  \uCD1D ${summary.total}\uAC1C\uC758 \uCDE8\uC57D\uC810`));
+  const shouldRunFix = autoFix ? true : summary.critical > 0 || summary.high > 0 ? (await inquirer11.prompt([
+    {
+      type: "confirm",
+      name: "shouldFix",
+      message: "\uC790\uB3D9 \uC218\uC815\uC744 \uC2DC\uB3C4\uD560\uAE4C\uC694? (npm audit fix)",
+      default: true
+    }
+  ])).shouldFix : false;
+  if (shouldRunFix) {
+    const fixSpinner = ora4("\uC790\uB3D9 \uC218\uC815 \uC911...").start();
+    const result = runAuditFix(pm);
+    if (result.ok) {
+      fixSpinner.succeed("\uC790\uB3D9 \uC218\uC815 \uC644\uB8CC!");
+    } else {
+      fixSpinner.warn(result.err ?? "\uC77C\uBD80 \uCDE8\uC57D\uC810\uC740 \uC218\uB3D9 \uC218\uC815\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.");
+    }
+  }
+  printNextStep({
+    message: "\uBCF4\uC548 \uAC10\uC0AC \uC644\uB8CC.",
+    command: "vhk harness",
+    cursorHint: "\uD488\uC9C8 \uC810\uAC80\uD574\uC918"
+  });
+}
+
+// src/commands/migrate.ts
+import { existsSync as existsSync9, unlinkSync, rmSync } from "fs";
+import chalk23 from "chalk";
+import inquirer12 from "inquirer";
+import ora5 from "ora";
+var LOCK_FILES = {
+  npm: "package-lock.json",
+  yarn: "yarn.lock",
+  pnpm: "pnpm-lock.yaml"
+};
+function detectCurrentPM2() {
+  if (existsSync9("pnpm-lock.yaml")) return "pnpm";
+  if (existsSync9("yarn.lock")) return "yarn";
+  if (existsSync9("package-lock.json")) return "npm";
+  return null;
+}
+function isCLIAvailable2(pm) {
+  return safeExecFile(pm, ["--version"]).ok;
+}
+async function migrate(target) {
+  console.log(chalk23.bold("\n\u{1F504} " + t("migrate.title")));
+  console.log(chalk23.gray("\u2500".repeat(40)));
+  const current = detectCurrentPM2();
+  console.log(chalk23.cyan(`
+\uD604\uC7AC \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800: ${current ?? "\uAC10\uC9C0 \uBD88\uAC00"}`));
+  let targetPM;
+  if (target && ["npm", "yarn", "pnpm"].includes(target)) {
+    targetPM = target;
+  } else {
+    const choices = ["npm", "yarn", "pnpm"].filter((pm) => pm !== current).map((pm) => ({ name: pm, value: pm }));
+    const { selected } = await inquirer12.prompt([
+      {
+        type: "list",
+        name: "selected",
+        message: t("migrate.selectTarget"),
+        choices
+      }
+    ]);
+    targetPM = selected;
+  }
+  if (targetPM === current) {
+    console.log(chalk23.yellow(`
+\u26A0\uFE0F  \uC774\uBBF8 ${targetPM}\uC744 \uC0AC\uC6A9 \uC911\uC785\uB2C8\uB2E4.`));
+    return;
+  }
+  if (!isCLIAvailable2(targetPM)) {
+    console.log(chalk23.red(`
+\u274C ${targetPM}\uC774 \uC124\uCE58\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`));
+    console.log(chalk23.yellow(`   npm i -g ${targetPM}`));
+    return;
+  }
+  const { confirm } = await inquirer12.prompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `${current ?? "\uD604\uC7AC"} \u2192 ${targetPM}\uC73C\uB85C \uC804\uD658\uD560\uAE4C\uC694? (node_modules \uC7AC\uC124\uCE58)`,
+      default: true
+    }
+  ]);
+  if (!confirm) {
+    console.log(chalk23.gray("\uCDE8\uC18C\uB428"));
+    return;
+  }
+  const cleanup = ora5("\uAE30\uC874 lock \uD30C\uC77C \uC815\uB9AC \uC911...").start();
+  for (const lockFile of Object.values(LOCK_FILES)) {
+    if (existsSync9(lockFile)) {
+      unlinkSync(lockFile);
+    }
+  }
+  if (existsSync9("node_modules")) {
+    cleanup.text = "node_modules \uC0AD\uC81C \uC911...";
+    rmSync("node_modules", { recursive: true, force: true });
+  }
+  cleanup.succeed("\uAE30\uC874 \uD30C\uC77C \uC815\uB9AC \uC644\uB8CC");
+  const install = ora5(`${targetPM} install \uC2E4\uD589 \uC911...`).start();
+  const installResult = safeExecFile(targetPM, ["install"]);
+  if (installResult.ok) {
+    install.succeed(`${targetPM} install \uC644\uB8CC!`);
+  } else {
+    install.fail(`${targetPM} install \uC2E4\uD328`);
+    console.log(chalk23.red(installResult.err.slice(0, 300)));
+    return;
+  }
+  console.log(chalk23.green.bold(`
+\u{1F389} ${current ?? "\uC774\uC804"} \u2192 ${targetPM} \uC804\uD658 \uC644\uB8CC!`));
+  printNextStep({
+    message: "\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658 \uC644\uB8CC!",
+    command: "vhk harness",
+    cursorHint: "\uD488\uC9C8 \uC810\uAC80\uD574\uC918"
+  });
+}
+
+// src/commands/update.ts
+import { execSync as execSync3 } from "child_process";
+import { existsSync as existsSync10, readFileSync as readFileSync6 } from "fs";
+import { dirname, join as join2 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
+import chalk24 from "chalk";
+import ora6 from "ora";
+var PACKAGE = "@byh3071/vhk";
+function getCurrentVersion() {
+  const dir = dirname(fileURLToPath3(import.meta.url));
+  for (const pkgPath of [join2(dir, "../package.json"), join2(dir, "../../package.json")]) {
+    try {
+      if (existsSync10(pkgPath)) {
+        const pkg = JSON.parse(readFileSync6(pkgPath, "utf-8"));
+        if (pkg.version) return pkg.version;
+      }
+    } catch {
+      continue;
+    }
+  }
+  return "0.0.0";
+}
+function getLatestVersion() {
+  try {
+    const out = execSync3(`npm view ${PACKAGE} version`, {
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).toString();
+    return out.trim();
+  } catch {
+    return null;
+  }
+}
+function isUpToDate(current, latest) {
+  const parse = (v) => v.split(".").map((n) => parseInt(n, 10) || 0);
+  const [ca, cb, cc] = parse(current);
+  const [la, lb, lc] = parse(latest);
+  if (ca !== la) return ca > la;
+  if (cb !== lb) return cb > lb;
+  return cc >= lc;
+}
+async function update() {
+  console.log(chalk24.bold("\n\u2B06\uFE0F  " + t("update.title")));
+  console.log(chalk24.gray("\u2500".repeat(40)));
+  const current = getCurrentVersion();
+  console.log(chalk24.cyan(`
+\u{1F4CC} \uD604\uC7AC \uBC84\uC804: v${current}`));
+  const spinner = ora6("\uCD5C\uC2E0 \uBC84\uC804 \uD655\uC778 \uC911...").start();
+  const latest = getLatestVersion();
+  if (!latest) {
+    spinner.fail("\uCD5C\uC2E0 \uBC84\uC804\uC744 \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+    console.log(chalk24.yellow("   \uB124\uD2B8\uC6CC\uD06C\uB97C \uD655\uC778\uD558\uAC70\uB098 \uC218\uB3D9\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8\uD558\uC138\uC694:"));
+    console.log(chalk24.gray(`   npm update -g ${PACKAGE}`));
+    return;
+  }
+  spinner.stop();
+  console.log(chalk24.cyan(`\u{1F195} \uCD5C\uC2E0 \uBC84\uC804: v${latest}`));
+  if (isUpToDate(current, latest)) {
+    console.log(chalk24.green("\n\u2705 \uC774\uBBF8 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4!"));
+    return;
+  }
+  const updateSpinner = ora6(`v${latest}\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8 \uC911...`).start();
+  try {
+    execSync3(`npm update -g ${PACKAGE}`, { stdio: ["pipe", "pipe", "pipe"] });
+    updateSpinner.succeed(`v${latest}\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC!`);
+    console.log(chalk24.green.bold(`
+\u{1F389} VHK CLI v${latest} \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC!`));
+    console.log(chalk24.gray("   \uBCC0\uACBD \uC0AC\uD56D\uC740 GitHub Releases\uB97C \uD655\uC778\uD558\uC138\uC694."));
+  } catch (err) {
+    updateSpinner.fail("\uC5C5\uB370\uC774\uD2B8 \uC2E4\uD328");
+    const msg = err instanceof Error ? err.message.slice(0, 300) : String(err);
+    console.log(chalk24.red(msg));
+    console.log(chalk24.yellow("\n\uC218\uB3D9\uC73C\uB85C \uC5C5\uB370\uC774\uD2B8\uD558\uC138\uC694:"));
+    console.log(chalk24.gray(`   npm update -g ${PACKAGE}`));
+  }
+}
+
+// src/commands/context.ts
+import {
+  existsSync as existsSync11,
+  mkdirSync as mkdirSync5,
+  readFileSync as readFileSync7,
+  readdirSync,
+  statSync,
+  writeFileSync as writeFileSync6
+} from "fs";
+import { join as join3 } from "path";
+import chalk25 from "chalk";
+var CONTEXT_PATH = ".vhk/context.md";
+var IGNORE_DIRS2 = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  ".next",
+  ".nuxt",
+  ".output",
+  "coverage",
+  ".cache",
+  ".turbo",
+  ".vhk"
+]);
+function buildTree(dir, prefix = "", maxDepth = 3, depth = 0) {
+  if (depth >= maxDepth) return [];
+  const lines = [];
+  try {
+    const entries = readdirSync(dir);
+    const filtered = entries.filter(
+      (e) => (!e.startsWith(".") || e === ".env.example") && !IGNORE_DIRS2.has(e)
+    );
+    filtered.forEach((entry, index) => {
+      const isLast = index === filtered.length - 1;
+      const connector = isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 ";
+      const fullPath = join3(dir, entry);
+      const stat = statSync(fullPath);
+      const isDir = stat.isDirectory();
+      lines.push(`${prefix}${connector}${entry}${isDir ? "/" : ""}`);
+      if (isDir) {
+        const nextPrefix = prefix + (isLast ? "    " : "\u2502   ");
+        lines.push(...buildTree(fullPath, nextPrefix, maxDepth, depth + 1));
+      }
+    });
+  } catch {
+  }
+  return lines;
+}
+function extractTechStack() {
+  const stack = {};
+  try {
+    const pkg = readJsonFile("package.json");
+    const all = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
+    if (all.next) stack["\uD504\uB808\uC784\uC6CC\uD06C"] = `Next.js ${all.next}`;
+    else if (all.nuxt) stack["\uD504\uB808\uC784\uC6CC\uD06C"] = `Nuxt ${all.nuxt}`;
+    else if (all.react) stack["\uD504\uB808\uC784\uC6CC\uD06C"] = `React ${all.react}`;
+    else if (all.vue) stack["\uD504\uB808\uC784\uC6CC\uD06C"] = `Vue ${all.vue}`;
+    else if (all.svelte) stack["\uD504\uB808\uC784\uC6CC\uD06C"] = `Svelte ${all.svelte}`;
+    if (all.typescript) stack["\uC5B8\uC5B4"] = `TypeScript ${all.typescript}`;
+    if (all.tailwindcss) stack["\uC2A4\uD0C0\uC77C"] = `Tailwind CSS ${all.tailwindcss}`;
+    if (all.tsup) stack["\uBE4C\uB4DC"] = "tsup";
+    else if (all.vite) stack["\uBE4C\uB4DC"] = `Vite ${all.vite}`;
+    else if (all.webpack) stack["\uBE4C\uB4DC"] = "webpack";
+    if (all.vitest) stack["\uD14C\uC2A4\uD2B8"] = "vitest";
+    else if (all.jest) stack["\uD14C\uC2A4\uD2B8"] = "jest";
+    if (all.commander) stack["CLI"] = "commander";
+    if (all.inquirer) stack["\uC778\uD130\uB799\uD2F0\uBE0C"] = "inquirer";
+    if (existsSync11("pnpm-lock.yaml")) stack["\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800"] = "pnpm";
+    else if (existsSync11("yarn.lock")) stack["\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800"] = "yarn";
+    else stack["\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800"] = "npm";
+    if (pkg.name) stack["\uD328\uD0A4\uC9C0 \uC774\uB984"] = pkg.name;
+    if (pkg.version) stack["\uBC84\uC804"] = pkg.version;
+  } catch {
+  }
+  return stack;
+}
+function getVhkCommands() {
+  return [
+    "gate \u2014 \uC544\uC774\uB514\uC5B4 \uAC80\uC99D",
+    "init \u2014 \uD504\uB85C\uC81D\uD2B8 \uCD08\uAE30\uD654",
+    "recap \u2014 \uC138\uC158 \uC694\uC57D \uC800\uC7A5",
+    "sync \u2014 \uADDC\uCE59 \uD30C\uC77C \uB3D9\uAE30\uD654",
+    "check \u2014 \uADDC\uCE59 \uC810\uAC80",
+    "secure \u2014 \uBCF4\uC548 \uC2A4\uCE94",
+    "ship \u2014 \uBC30\uD3EC \uCCB4\uD06C + \uD68C\uACE0",
+    "doctor \u2014 \uD658\uACBD \uC9C4\uB2E8",
+    "save \u2014 git \uC800\uC7A5 (add+commit+push)",
+    "undo \u2014 \uCD5C\uADFC \uCEE4\uBC0B \uB418\uB3CC\uB9AC\uAE30",
+    "status \u2014 git \uC0C1\uD0DC \uD655\uC778",
+    "diff \u2014 git \uBCC0\uACBD \uC0AC\uD56D \uC694\uC57D",
+    "deploy \u2014 \uD504\uB85C\uB355\uC158 \uBC30\uD3EC",
+    "env \u2014 \uD658\uACBD\uBCC0\uC218 \uAD00\uB9AC",
+    "publish \u2014 npm \uBC30\uD3EC \uC790\uB3D9\uD654",
+    "design \u2014 \uB514\uC790\uC778 \uD1A0\uD070 \uC0DD\uC131",
+    "design-palette \u2014 \uCEEC\uB7EC \uD314\uB808\uD2B8 \uC120\uD0DD",
+    "theme \u2014 \uB2E4\uD06C/\uB77C\uC774\uD2B8 \uBAA8\uB4DC",
+    "ref add|list|open \u2014 \uB808\uD37C\uB7F0\uC2A4 URL \uAD00\uB9AC",
+    "harness \u2014 \uD1B5\uD569 \uD488\uC9C8 \uC810\uAC80",
+    "audit \u2014 \uBCF4\uC548 \uCDE8\uC57D\uC810 \uAC10\uC0AC",
+    "migrate \u2014 \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658",
+    "update \u2014 VHK CLI \uC140\uD504 \uC5C5\uB370\uC774\uD2B8",
+    "context \u2014 \uD504\uB85C\uC81D\uD2B8 \uB9E5\uB77D \uC0DD\uC131",
+    "context-show \u2014 \uB9E5\uB77D \uD30C\uC77C \uBCF4\uAE30",
+    "memory add|list|remove \u2014 \uACB0\uC815\uC0AC\uD56D \uAE30\uC5B5",
+    "brief \u2014 \uD504\uB85C\uC81D\uD2B8 \uC694\uC57D \uBCF4\uACE0\uC11C",
+    "mcp \u2014 MCP \uC11C\uBC84 \uC2DC\uC791",
+    "mcp-init \u2014 Cursor MCP \uC124\uC815"
+  ];
+}
+async function context() {
+  console.log(chalk25.bold("\n\u{1F9E0} " + t("context.title")));
+  console.log(chalk25.gray("\u2500".repeat(40)));
+  const stack = extractTechStack();
+  const tree = buildTree(".").join("\n");
+  const commands = getVhkCommands();
+  const lines = [];
+  lines.push("# \uD504\uB85C\uC81D\uD2B8 \uCEE8\uD14D\uC2A4\uD2B8");
+  lines.push("");
+  lines.push("> \uC774 \uD30C\uC77C\uC740 `vhk context`\uB85C \uC790\uB3D9 \uC0DD\uC131\uB418\uC5C8\uC2B5\uB2C8\uB2E4.");
+  lines.push("> AI \uC5B4\uC2DC\uC2A4\uD134\uD2B8\uC5D0\uAC8C \uD504\uB85C\uC81D\uD2B8 \uB9E5\uB77D\uC744 \uC81C\uACF5\uD569\uB2C8\uB2E4.");
+  lines.push("");
+  lines.push("## \uAE30\uC220 \uC2A4\uD0DD");
+  lines.push("");
+  for (const [key, value] of Object.entries(stack)) {
+    lines.push(`- **${key}**: ${value}`);
+  }
+  lines.push("");
+  lines.push("## \uB514\uB809\uD1A0\uB9AC \uAD6C\uC870");
+  lines.push("");
+  lines.push("```");
+  lines.push(tree);
+  lines.push("```");
+  lines.push("");
+  lines.push("## VHK CLI \uBA85\uB839\uC5B4");
+  lines.push("");
+  for (const cmd of commands) {
+    lines.push(`- \`vhk ${cmd}\``);
+  }
+  lines.push("");
+  if (existsSync11(".vhk/memory.json")) {
+    try {
+      const memories = readJsonFile(
+        ".vhk/memory.json"
+      );
+      if (Array.isArray(memories) && memories.length > 0) {
+        lines.push("## \uC800\uC7A5\uB41C \uACB0\uC815\uC0AC\uD56D");
+        lines.push("");
+        for (const m of memories) {
+          const date = new Date(m.addedAt).toLocaleDateString("ko-KR");
+          lines.push(`- ${m.content} _(${date})_`);
+        }
+        lines.push("");
+      }
+    } catch {
+    }
+  }
+  lines.push("---");
+  lines.push("");
+  lines.push(`_\uC0DD\uC131: ${(/* @__PURE__ */ new Date()).toLocaleString("ko-KR")}_`);
+  lines.push("");
+  mkdirSync5(".vhk", { recursive: true });
+  writeFileSync6(CONTEXT_PATH, lines.join("\n"), "utf-8");
+  console.log(chalk25.green(`
+\u2705 ${CONTEXT_PATH} \uC0DD\uC131 \uC644\uB8CC!`));
+  console.log(chalk25.gray(`   \uAE30\uC220 \uC2A4\uD0DD ${Object.keys(stack).length}\uAC1C \uAC10\uC9C0`));
+  console.log(chalk25.gray("   AI \uC5B4\uC2DC\uC2A4\uD134\uD2B8\uC5D0\uAC8C \uC774 \uD30C\uC77C\uC744 \uCC38\uC870\uD558\uAC8C \uD558\uC138\uC694."));
+  printNextStep({
+    message: "\uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C \uC0DD\uC131 \uC644\uB8CC!",
+    command: "vhk context-show",
+    cursorHint: "\uCEE8\uD14D\uC2A4\uD2B8 \uBCF4\uC5EC\uC918"
+  });
+}
+async function contextShow() {
+  console.log(chalk25.bold("\n\u{1F4C4} " + t("context.showTitle")));
+  console.log(chalk25.gray("\u2500".repeat(40)));
+  if (!existsSync11(CONTEXT_PATH)) {
+    console.log(chalk25.yellow("\n\u26A0\uFE0F  \uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk25.gray("   vhk context\uB97C \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694."));
+    return;
+  }
+  const content = readFileSync7(CONTEXT_PATH, "utf-8");
+  console.log("\n" + content);
+}
+
+// src/commands/memory.ts
+import { existsSync as existsSync12, mkdirSync as mkdirSync6, writeFileSync as writeFileSync7 } from "fs";
+import chalk26 from "chalk";
+var MEMORY_PATH = ".vhk/memory.json";
+function loadMemories() {
+  if (!existsSync12(MEMORY_PATH)) return [];
+  try {
+    const parsed = readJsonFile(MEMORY_PATH);
+    return Array.isArray(parsed) ? parsed : [];
+  } catch {
+    return [];
+  }
+}
+function saveMemories(memories) {
+  mkdirSync6(".vhk", { recursive: true });
+  writeFileSync7(MEMORY_PATH, JSON.stringify(memories, null, 2) + "\n", "utf-8");
+}
+async function memoryAdd(content, tags) {
+  console.log(chalk26.bold("\n\u{1F9E0} " + t("memory.addTitle")));
+  console.log(chalk26.gray("\u2500".repeat(40)));
+  if (!content) {
+    console.log(chalk26.red("\u274C \uAE30\uC5B5\uD560 \uB0B4\uC6A9\uC744 \uC785\uB825\uD574\uC8FC\uC138\uC694."));
+    console.log(chalk26.gray('   \uC608: vhk memory add "API\uB294 tRPC \uC0AC\uC6A9\uD558\uAE30\uB85C \uACB0\uC815"'));
+    return;
+  }
+  const memories = loadMemories();
+  memories.push({
+    content,
+    addedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    tags: tags && tags.length > 0 ? tags : []
+  });
+  saveMemories(memories);
+  console.log(chalk26.green(`
+\u2705 \uAE30\uC5B5 \uC800\uC7A5\uB428 (#${memories.length})`));
+  console.log(chalk26.cyan(`   \u{1F4DD} ${content}`));
+  printNextStep({
+    message: "\uAE30\uC5B5 \uC800\uC7A5 \uC644\uB8CC!",
+    command: "vhk memory list",
+    cursorHint: "\uAE30\uC5B5 \uBAA9\uB85D \uBCF4\uC5EC\uC918"
+  });
+}
+async function memoryList() {
+  console.log(chalk26.bold("\n\u{1F9E0} " + t("memory.listTitle")));
+  console.log(chalk26.gray("\u2500".repeat(40)));
+  const memories = loadMemories();
+  if (memories.length === 0) {
+    console.log(chalk26.yellow("\n\u{1F4ED} \uC800\uC7A5\uB41C \uAE30\uC5B5\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(chalk26.gray('   vhk memory add "\uB0B4\uC6A9"\uC73C\uB85C \uCD94\uAC00\uD558\uC138\uC694.'));
+    return;
+  }
+  console.log(chalk26.cyan(`
+\uCD1D ${memories.length}\uAC1C\uC758 \uAE30\uC5B5:
+`));
+  memories.forEach((m, index) => {
+    const date = new Date(m.addedAt).toLocaleDateString("ko-KR");
+    console.log(chalk26.white(`  [${index + 1}] ${m.content}`));
+    if (m.tags && m.tags.length > 0) {
+      console.log(chalk26.blue(`      \u{1F3F7}\uFE0F  ${m.tags.join(", ")}`));
+    }
+    console.log(chalk26.gray(`      \u{1F4C5} ${date}`));
+    console.log("");
+  });
+}
+async function memoryRemove(indexStr) {
+  const memories = loadMemories();
+  const idx = parseInt(indexStr, 10) - 1;
+  if (Number.isNaN(idx) || idx < 0 || idx >= memories.length) {
+    console.log(chalk26.red(`\u274C \uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uBC88\uD638\uC785\uB2C8\uB2E4. (1~${memories.length || 0})`));
+    return;
+  }
+  const removed = memories.splice(idx, 1)[0];
+  saveMemories(memories);
+  console.log(chalk26.green("\n\u2705 \uAE30\uC5B5 \uC0AD\uC81C\uB428:"));
+  console.log(chalk26.gray(`   ${removed.content}`));
+}
+
+// src/commands/brief.ts
+import { existsSync as existsSync13, mkdirSync as mkdirSync7, writeFileSync as writeFileSync8 } from "fs";
+import chalk27 from "chalk";
+var BRIEF_PATH = ".vhk/brief.md";
+function git2(args) {
+  const result = safeExecFile("git", args);
+  return result.ok ? result.out : "";
+}
+async function brief() {
+  console.log(chalk27.bold("\n\u{1F4CB} " + t("brief.title")));
+  console.log(chalk27.gray("\u2500".repeat(40)));
+  const lines = [];
+  lines.push("# \uD504\uB85C\uC81D\uD2B8 \uBE0C\uB9AC\uD551");
+  lines.push("");
+  lines.push(`> \uC0DD\uC131: ${(/* @__PURE__ */ new Date()).toLocaleString("ko-KR")}`);
+  lines.push("");
+  try {
+    const pkg = readJsonFile("package.json");
+    lines.push("## \uD504\uB85C\uC81D\uD2B8 \uC815\uBCF4");
+    lines.push("");
+    lines.push(`- **\uC774\uB984**: ${pkg.name ?? "\uBBF8\uC815"}`);
+    lines.push(`- **\uBC84\uC804**: ${pkg.version ?? "\uBBF8\uC815"}`);
+    lines.push(`- **\uC124\uBA85**: ${pkg.description ?? "\uC5C6\uC74C"}`);
+    const deps = Object.keys(pkg.dependencies ?? {}).length;
+    const devDeps = Object.keys(pkg.devDependencies ?? {}).length;
+    lines.push(`- **\uC758\uC874\uC131**: ${deps}\uAC1C (dev: ${devDeps}\uAC1C)`);
+    lines.push("");
+  } catch {
+    lines.push("## \uD504\uB85C\uC81D\uD2B8 \uC815\uBCF4");
+    lines.push("");
+    lines.push("\u26A0\uFE0F package.json\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+    lines.push("");
+  }
+  const branch = git2(["branch", "--show-current"]);
+  const lastCommit = git2(["log", "-1", "--pretty=format:%h %s (%cr)"]);
+  const uncommitted = git2(["status", "--porcelain"]);
+  const totalCommits = git2(["rev-list", "--count", "HEAD"]);
+  lines.push("## Git \uC0C1\uD0DC");
+  lines.push("");
+  lines.push(`- **\uD604\uC7AC \uBE0C\uB79C\uCE58**: ${branch || "\uC54C \uC218 \uC5C6\uC74C"}`);
+  lines.push(`- **\uB9C8\uC9C0\uB9C9 \uCEE4\uBC0B**: ${lastCommit || "\uC5C6\uC74C"}`);
+  lines.push(`- **\uCD1D \uCEE4\uBC0B \uC218**: ${totalCommits || "\uC54C \uC218 \uC5C6\uC74C"}`);
+  lines.push(
+    `- **\uBBF8\uCEE4\uBC0B \uBCC0\uACBD**: ${uncommitted ? `${uncommitted.split("\n").length}\uAC1C \uD30C\uC77C` : "\uC5C6\uC74C \u2705"}`
+  );
+  lines.push("");
+  if (existsSync13(".vhk/memory.json")) {
+    try {
+      const memories = readJsonFile(".vhk/memory.json");
+      if (Array.isArray(memories) && memories.length > 0) {
+        lines.push(`## \uC800\uC7A5\uB41C \uACB0\uC815\uC0AC\uD56D (${memories.length}\uAC1C)`);
+        lines.push("");
+        for (const m of memories.slice(-5)) {
+          lines.push(`- ${m.content}`);
+        }
+        if (memories.length > 5) {
+          lines.push(`- ... \uC678 ${memories.length - 5}\uAC1C`);
+        }
+        lines.push("");
+      }
+    } catch {
+    }
+  }
+  if (existsSync13(".vhk/refs.json")) {
+    try {
+      const refs = readJsonFile(".vhk/refs.json");
+      if (Array.isArray(refs) && refs.length > 0) {
+        lines.push(`## \uB808\uD37C\uB7F0\uC2A4 (${refs.length}\uAC1C)`);
+        lines.push("");
+        for (const r of refs.slice(-3)) {
+          const label = r.memo && r.memo.length > 0 ? r.memo : r.url;
+          lines.push(`- [${label}](${r.url})`);
+        }
+        lines.push("");
+      }
+    } catch {
+    }
+  }
+  lines.push("## \uB2E4\uC74C \uB2E8\uACC4 \uC81C\uC548");
+  lines.push("");
+  const steps = [];
+  if (uncommitted) steps.push("\uBBF8\uCEE4\uBC0B \uBCC0\uACBD \uC0AC\uD56D\uC744 \uCEE4\uBC0B\uD558\uC138\uC694: `vhk save`");
+  steps.push("\uD488\uC9C8 \uC810\uAC80 \uC2E4\uD589: `vhk harness`");
+  steps.push("\uBCF4\uC548 \uAC10\uC0AC: `vhk audit`");
+  steps.push("\uCEE8\uD14D\uC2A4\uD2B8 \uAC31\uC2E0: `vhk context`");
+  steps.forEach((s, i) => lines.push(`${i + 1}. ${s}`));
+  lines.push("");
+  lines.push("---");
+  lines.push("");
+  lines.push("_VHK CLI \uBE0C\uB9AC\uD551_");
+  lines.push("");
+  mkdirSync7(".vhk", { recursive: true });
+  writeFileSync8(BRIEF_PATH, lines.join("\n"), "utf-8");
+  console.log("\n" + lines.join("\n"));
+  console.log(chalk27.green(`
+\u2705 ${BRIEF_PATH} \uC800\uC7A5 \uC644\uB8CC`));
+  printNextStep({
+    message: "\uBE0C\uB9AC\uD551 \uC0DD\uC131 \uC644\uB8CC!",
+    command: "vhk context",
+    cursorHint: "\uCEE8\uD14D\uC2A4\uD2B8 \uC5C5\uB370\uC774\uD2B8\uD574\uC918"
+  });
+}
+
 // src/lib/nlp-run.ts
 async function dispatchNlpRoute(route, input) {
   switch (route.command) {
@@ -3981,28 +4769,44 @@ async function dispatchNlpRoute(route, input) {
       return theme();
     case "ref":
       return refList();
+    case "harness":
+      return harness();
+    case "audit":
+      return audit();
+    case "migrate":
+      return migrate();
+    case "update":
+      return update();
+    case "context":
+      return context();
+    case "context-show":
+      return contextShow();
+    case "memory":
+      return memoryList();
+    case "brief":
+      return brief();
   }
 }
 async function runNaturalLanguageRoute(input) {
   const route = routeNaturalLanguage(input);
   if (!route) {
-    console.log(chalk21.yellow(`
+    console.log(chalk28.yellow(`
   \u2753 "${input}" \u2014 ${ko.nlp.notMatched}
 `));
     return;
   }
   console.log("");
-  console.log(chalk21.cyan(`  \u{1F4AC} "${input}"`));
-  console.log(chalk21.cyan(`  \u2192 ${route.explanation}`));
+  console.log(chalk28.cyan(`  \u{1F4AC} "${input}"`));
+  console.log(chalk28.cyan(`  \u2192 ${route.explanation}`));
   if (route.confidence === "low") {
-    const { confirm } = await inquirer11.prompt([{
+    const { confirm } = await inquirer13.prompt([{
       type: "confirm",
       name: "confirm",
       message: `${route.explanation} \u2014 ${ko.nlp.matched}`,
       default: true
     }]);
     if (!confirm) {
-      console.log(chalk21.dim(`  ${ko.nlp.menuHint}`));
+      console.log(chalk28.dim(`  ${ko.nlp.menuHint}`));
       return;
     }
   }
@@ -4012,11 +4816,11 @@ async function runNaturalLanguageRoute(input) {
 
 // src/index.ts
 function getVersion() {
-  const dir = path15.dirname(fileURLToPath3(import.meta.url));
+  const dir = path15.dirname(fileURLToPath4(import.meta.url));
   for (const pkgPath of [path15.join(dir, "../package.json"), path15.join(dir, "../../package.json")]) {
     try {
-      if (fs16.existsSync(pkgPath)) {
-        const pkg = JSON.parse(fs16.readFileSync(pkgPath, "utf-8"));
+      if (fs15.existsSync(pkgPath)) {
+        const pkg = JSON.parse(fs15.readFileSync(pkgPath, "utf-8"));
         if (pkg.version) return pkg.version;
       }
     } catch {
@@ -4047,7 +4851,15 @@ var KO_ALIASES = {
   design: "\uB514\uC790\uC778",
   "design-palette": "\uD314\uB808\uD2B8",
   theme: "\uD14C\uB9C8",
-  ref: "\uB808\uD37C\uB7F0\uC2A4"
+  ref: "\uB808\uD37C\uB7F0\uC2A4",
+  harness: "\uD558\uB124\uC2A4",
+  audit: "\uAC10\uC0AC",
+  migrate: "\uC804\uD658",
+  update: "\uC5C5\uB370\uC774\uD2B8",
+  context: "\uB9E5\uB77D",
+  "context-show": "\uB9E5\uB77D\uBCF4\uAE30",
+  memory: "\uAE30\uC5B5",
+  brief: "\uBE0C\uB9AC\uD551"
 };
 program.name("vhk").description("VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58 (\uD55C\uAD6D\uC5B4\uB85C \uC548\uB0B4\uD569\uB2C8\uB2E4)").version(getVersion());
 program.configureHelp({
@@ -4131,6 +4943,40 @@ refCmd.command("list").alias("\uBAA9\uB85D").description("\uC800\uC7A5\uB41C \uB
 refCmd.command("open <index>").alias("\uC5F4\uAE30").description("\uB808\uD37C\uB7F0\uC2A4\uB97C \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uC5F4\uAE30").action(async (index) => {
   await refOpen(index);
 });
+program.command("harness").alias("\uD558\uB124\uC2A4").description("\uD1B5\uD569 \uD488\uC9C8 \uC810\uAC80 (lint + type-check + test + build)").action(async () => {
+  await harness();
+});
+program.command("audit").alias("\uAC10\uC0AC").option("--fix", "\uC790\uB3D9 \uC218\uC815 \uC2DC\uB3C4").description("\uBCF4\uC548 \uCDE8\uC57D\uC810 \uAC10\uC0AC (npm audit \uB798\uD551)").action(async (opts) => {
+  await audit(opts.fix);
+});
+program.command("migrate [target]").alias("\uC804\uD658").description("\uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800 \uC804\uD658 (npm/yarn/pnpm)").action(async (target) => {
+  await migrate(target);
+});
+program.command("update").alias("\uC5C5\uB370\uC774\uD2B8").description("VHK CLI \uCD5C\uC2E0 \uBC84\uC804 \uC5C5\uB370\uC774\uD2B8").action(async () => {
+  await update();
+});
+program.command("context").alias("\uB9E5\uB77D").description("\uD504\uB85C\uC81D\uD2B8 \uB9E5\uB77D \uD30C\uC77C \uC0DD\uC131 (.vhk/context.md)").action(async () => {
+  await context();
+});
+program.command("context-show").alias("\uB9E5\uB77D\uBCF4\uAE30").description("\uD604\uC7AC \uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C \uB0B4\uC6A9 \uCD9C\uB825").action(async () => {
+  await contextShow();
+});
+var memoryCmd = program.command("memory").alias("\uAE30\uC5B5").description("\uACB0\uC815\uC0AC\uD56D \uAE30\uC5B5 \uAD00\uB9AC (add / list / remove)").action(async () => {
+  await memoryList();
+});
+memoryCmd.command("add <content>").option("--tags <tags>", "\uD0DC\uADF8 (\uC27C\uD45C \uAD6C\uBD84)").description("\uACB0\uC815\uC0AC\uD56D \uAE30\uC5B5 \uC800\uC7A5").action(async (content, opts) => {
+  const tags = opts.tags ? opts.tags.split(",").map((s) => s.trim()) : void 0;
+  await memoryAdd(content, tags);
+});
+memoryCmd.command("list").alias("\uBAA9\uB85D").description("\uC800\uC7A5\uB41C \uAE30\uC5B5 \uBAA9\uB85D").action(async () => {
+  await memoryList();
+});
+memoryCmd.command("remove <index>").alias("\uC0AD\uC81C").description("\uAE30\uC5B5 \uC0AD\uC81C (1\uBD80\uD130 \uC2DC\uC791\uD558\uB294 \uBC88\uD638)").action(async (index) => {
+  await memoryRemove(index);
+});
+program.command("brief").alias("\uBE0C\uB9AC\uD551").description("\uD504\uB85C\uC81D\uD2B8 \uC0C1\uD0DC \uC694\uC57D \uBCF4\uACE0\uC11C \uC0DD\uC131 (.vhk/brief.md)").action(async () => {
+  await brief();
+});
 program.on("command:*", async (operands) => {
   const unknown = operands[0] ?? "";
   const rest = operands.slice(1);
@@ -4139,7 +4985,7 @@ program.on("command:*", async (operands) => {
 });
 program.action(async () => {
   console.log("\n\u{1F3AF} VHK \u2014 \uBC14\uC774\uBE0C\uCF54\uB529 \uD504\uB85C\uC81D\uD2B8 \uCF54\uCE58\n");
-  const { choice } = await inquirer12.prompt([{
+  const { choice } = await inquirer14.prompt([{
     type: "list",
     name: "choice",
     message: "\uBB58 \uB3C4\uC640\uB4DC\uB9B4\uAE4C\uC694?",