@byh3071/vhk 1.7.1 → 1.8.1

package/README.md

@@ -21,7 +21,7 @@ AI 코딩 도구는 저마다 규칙 파일이 다르고(`.cursorrules`·`CLAUDE
 
 | 문제 | VHK 해결 | 명령 |
 |------|----------|------|
-| 도구마다 규칙 파일이 따로 논다 | `RULES.md` 한 벌 → Cursor·Claude·Windsurf·Copilot·Antigravity 규칙 동시 생성 | `vhk sync` |
+| 도구마다 규칙 파일이 따로 논다 | `RULES.md` 한 벌 → Cursor·Claude·Windsurf·Copilot·Antigravity·Gemini·Cline 규칙 동시 생성 | `vhk sync` |
 | 컴퓨터·환경 바뀌면 맥락 유실 | `.vhk/` 맥락을 GitHub gist로 백업·복원 | `vhk cloud push` / `pull` |
 | 새 프로젝트 세팅 반복 | 유형별 문서·규칙·맥락 뼈대를 한 번에 | `vhk init` |
 
@@ -145,7 +145,7 @@ vhk 기획 끝났고 바로 시작
 | `vhk gate` | `검증`, `아이디어` | 아이디어 검증 (퀵 5문항 / 풀 13문항 / 스킵) |
 | `vhk init` | `시작`, `만들기` | 프로젝트 초기화 + 하네스 생성 |
 | `vhk recap` | `정리`, `오늘` | Git 변경 → `docs/log/` 세션 로그 |
-| `vhk sync` | `규칙`, `맞추기` | RULES.md → `.cursorrules` + CLAUDE.md + `.windsurfrules` + `.github/copilot-instructions.md` + `.agents/rules/vhk-rules.md` (5개) |
+| `vhk sync` | `규칙`, `맞추기` | RULES.md → `.cursorrules` + CLAUDE.md + `.windsurfrules` + `.github/copilot-instructions.md` + `.agents/rules/vhk-rules.md` + `AGENTS.md` + `GEMINI.md` + `.clinerules/vhk-rules.md` |
 | `vhk check` | `점검`, `린트` | RULES.md 규칙 위반 검사 |
 | `vhk secure` | `보안` | 시크릿·키 유출 스캔 (`scan` / `스캔` 동일). **CRITICAL/HIGH 발견 시 exit code 1** (CI용) |
 | `vhk ship` | `출하` | 배포 체크리스트 + 회고 + 빌드 로그 |

package/dist/{chunk-GXFZ7JXX.js → chunk-RXDOM4QT.js}

@@ -750,6 +750,8 @@ var ko = {
     copilotDone: "\u2705 .github/copilot-instructions.md \uB9DE\uCDA4 \uC644\uB8CC",
     antigravityDone: "\u2705 .agents/rules/vhk-rules.md \uB9DE\uCDA4 \uC644\uB8CC",
     agentsDone: "\u2705 AGENTS.md \uB9DE\uCDA4 \uC644\uB8CC",
+    geminiDone: "\u2705 GEMINI.md \uB9DE\uCDA4 \uC644\uB8CC",
+    clineDone: "\u2705 .clinerules/vhk-rules.md \uB9DE\uCDA4 \uC644\uB8CC",
     antigravityTruncated: "Antigravity 12,000\uC790 \uC81C\uD55C\uC73C\uB85C \uC77C\uBD80 \uC808\uC0AD\uB428 \u2014 \uC804\uCCB4\uB294 RULES.md \uCC38\uC870",
     done: "\u{1F504} \uB9DE\uCD94\uAE30 \uC644\uB8CC!",
     // 안전 가드 (배치 0) — 덮어쓰기 전 백업·드리프트 확인·미리보기
@@ -1318,6 +1320,12 @@ function toWindsurfrules(sections, projectName) {
 function toCopilotInstructions(sections, projectName) {
   return buildCodingDoc("GitHub Copilot Instructions", sections, projectName);
 }
+function toGeminiMd(sections, projectName) {
+  return buildCodingDoc("Gemini CLI Rules", sections, projectName);
+}
+function toClineRules(sections, projectName) {
+  return buildCodingDoc("Cline Rules", sections, projectName);
+}
 var ANTIGRAVITY_CHAR_LIMIT = 12e3;
 var ANTIGRAVITY_TRUNCATE_MARKER = "\n\n<!-- \u26A0\uFE0F Antigravity 12,000\uC790 \uC81C\uD55C\uC73C\uB85C \uC808\uC0AD\uB428 \u2014 \uC804\uCCB4 \uADDC\uCE59\uC740 RULES.md \uCC38\uC870 -->\n";
 function truncateForAntigravity(content, limit = ANTIGRAVITY_CHAR_LIMIT) {
@@ -1404,7 +1412,10 @@ var SYNC_TARGETS = [
   { path: ".github/copilot-instructions.md", generate: toCopilotInstructions, doneMessage: ko.sync.copilotDone },
   { path: ".agents/rules/vhk-rules.md", generate: toAntigravityRules, doneMessage: ko.sync.antigravityDone },
   // AGENTS.md — 6번째 타겟. 항목 1개 추가로 sync·드리프트·백업 가드가 자동 반영된다.
-  { path: "AGENTS.md", generate: toAgentsMd, doneMessage: ko.sync.agentsDone }
+  { path: "AGENTS.md", generate: toAgentsMd, doneMessage: ko.sync.agentsDone },
+  // Goal 16 — Gemini CLI / Cline (공식 경로 검증). 레지스트리 추가만으로 drift·백업 자동 반영.
+  { path: "GEMINI.md", generate: toGeminiMd, doneMessage: ko.sync.geminiDone },
+  { path: ".clinerules/vhk-rules.md", generate: toClineRules, doneMessage: ko.sync.clineDone }
 ];
 var BACKUP_KEEP = 10;
 var SYNCED_MARKER_REL = path4.join(".vhk", ".synced");

package/dist/index.js

@@ -43,12 +43,12 @@ import {
   stripBom,
   sync,
   t
-} from "./chunk-GXFZ7JXX.js";
+} from "./chunk-RXDOM4QT.js";
 
 // src/index.ts
 import { Command, Help } from "commander";
 import { pathToFileURL } from "url";
-import chalk33 from "chalk";
+import chalk34 from "chalk";
 import inquirer13 from "inquirer";
 
 // src/lib/nlp-router.ts
@@ -123,6 +123,12 @@ var RULES = [
     confidence: "high",
     test: (t2) => /검증\s*묶음|사전\s*검증|저장\s*전\s*(검증|확인)|^verify$/.test(t2)
   },
+  {
+    command: "review",
+    explanation: "\uC801\uB300\uC801 \uC790\uAE30\uAC80\uC99D \u2014 \uC99D\uAC70\uB85C \uAC70\uC9D3\uC644\uB8CC \uC758\uC2EC (vhk review)",
+    confidence: "high",
+    test: (t2) => /적대\s*검증|자기\s*검증|거짓\s*완료|완료\s*심문|^review$|^검토$/.test(t2)
+  },
   {
     command: "init",
     explanation: "\uBB38\uC11C/\uD558\uB124\uC2A4 \uD30C\uC77C\uB9CC \uC0DD\uC131 (vhk init) \u2014 git/MCP/context\uB294 \uC81C\uC678",
@@ -468,6 +474,8 @@ var KNOWN_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "\uBAA8\uB4DC",
   "verify",
   "\uC0AC\uC804\uC810\uAC80",
+  "review",
+  "\uAC80\uD1A0",
   "help"
 ]);
 function isOptionToken(token) {
@@ -505,7 +513,7 @@ function detectNaturalLanguageInput(argv) {
 }
 
 // src/lib/nlp-run.ts
-import chalk31 from "chalk";
+import chalk32 from "chalk";
 import inquirer12 from "inquirer";
 
 // src/commands/gate.ts
@@ -5731,6 +5739,276 @@ async function verify(opts = {}) {
   }
 }
 
+// src/commands/review.ts
+import { existsSync as existsSync17, writeFileSync as writeFileSync12 } from "fs";
+import { join as join11 } from "path";
+import chalk31 from "chalk";
+var GOALS_DIR2 = "goals";
+var COVERAGE_MIN = 0.5;
+var STALE_AGE_MS = 6 * 60 * 60 * 1e3;
+var REVIEW_DISCLAIMER = [
+  "\u26A0\uFE0F  \uC774 \uD310\uC815\uC740 \uBCF4\uC7A5\uC774 \uC544\uB2C8\uB77C \uC2E0\uB8B0\uB3C4 \uC2E0\uD638\uC785\uB2C8\uB2E4 \u2014 \uD1B5\uACFC\uD574\uB3C4 \uAC70\uC9D3\uC644\uB8CC \uAC00\uB2A5\uC131\uC740 \uB0A8\uC2B5\uB2C8\uB2E4.",
+  '   \xB7 \uAE30\uB2A5 \uACE0\uC720 \uC644\uB8CC\uC870\uAC74\uC740 \uAC8C\uC774\uD2B8 \uD0A4\uC6CC\uB4DC(tsc/test/build/secure)\uC5D0 \uB9E4\uD551\uB418\uC9C0 \uC54A\uC73C\uBA74 "\uBBF8\uAC80\uC99D"\uC73C\uB85C \uB0A8\uC2B5\uB2C8\uB2E4.',
+  "   \xB7 \uC99D\uAC70(latest.json)\uB294 commit/goal \uBC14\uC778\uB529\uC774 \uC5C6\uC5B4 \uC2E0\uC120\uB3C4\uB294 \uC0DD\uC131\uC2DC\uAC01\uC73C\uB85C\uB9CC \uCD94\uC815\uD569\uB2C8\uB2E4 \u2014 \uCF54\uB4DC \uBCC0\uACBD \uD6C4\uC5D4 vhk verify \uC7AC\uC2E4\uD589 \uD544\uC694.",
+  "   \xB7 git diff \uBBF8\uC0AC\uC6A9(v0) \u2014 \uAE30\uC874 \uD14C\uC2A4\uD2B8\uAC00 green \uC774\uC5B4\uB3C4 \uC774\uBC88 \uBCC0\uACBD\uC744 \uCEE4\uBC84\uD558\uC9C0 \uBABB\uD588\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4."
+].join("\n");
+function parseCompletionChecks(body) {
+  const lines = body.split(/\r?\n/);
+  const out = [];
+  let inSection = false;
+  for (const raw of lines) {
+    const line = raw.trimEnd();
+    const heading = line.match(/^#{1,6}\s+(.*)$/);
+    if (heading) {
+      inSection = /completion\s*check/i.test(heading[1]);
+      continue;
+    }
+    if (!inSection) continue;
+    const box = line.match(/^\s*-\s*\[([ xX])\]\s*(.+)$/);
+    if (box) out.push({ text: box[2].trim(), checked: box[1].toLowerCase() === "x" });
+  }
+  return out;
+}
+function impliedGates(text) {
+  if (/게이트|공통\s*게이트|goal\s*check/i.test(text)) {
+    return ["typecheck", "test", "build", "secure"];
+  }
+  const gates = [];
+  if (/tsc|typecheck|타입\s*체크/i.test(text)) gates.push("typecheck");
+  if (/테스트|test|회귀|vitest/i.test(text)) gates.push("test");
+  if (/빌드|build/i.test(text)) gates.push("build");
+  if (/시크릿|secret|secure|누출|보안\s*스캔/i.test(text)) gates.push("secure");
+  return gates;
+}
+function assessFreshness(report, nowMs) {
+  const generatedAt = report?.generatedAt ?? null;
+  const parsed = generatedAt ? Date.parse(generatedAt) : NaN;
+  if (!Number.isFinite(parsed)) {
+    return { generatedAt, ageMs: null, stale: true, confirmed: false, note: "\uC0DD\uC131\uC2DC\uAC01 \uBD88\uBA85 \u2014 \uC2E0\uC120\uB3C4 \uBBF8\uD655\uC778" };
+  }
+  const ageMs = nowMs - parsed;
+  const stale = ageMs > STALE_AGE_MS || ageMs < 0;
+  const mins = Math.round(ageMs / 6e4);
+  const human = mins >= 120 ? `${Math.round(mins / 60)}\uC2DC\uAC04` : `${mins}\uBD84`;
+  return {
+    generatedAt,
+    ageMs,
+    stale,
+    confirmed: true,
+    note: stale ? `\uC99D\uAC70\uAC00 ${human} \uC804 \uC0DD\uC131(\uB610\uB294 \uBBF8\uB798\uC2DC\uAC01) \u2014 \uCF54\uB4DC \uBCC0\uACBD \uC2DC \uBB34\uD6A8, vhk verify \uC7AC\uC2E4\uD589 \uAD8C\uC7A5` : `\uC99D\uAC70 ${human} \uC804 \uC0DD\uC131`
+  };
+}
+function crossCheck(checks, goalStatus, report, nowMs) {
+  const suspicions = [];
+  const gaps = [];
+  const gateById = /* @__PURE__ */ new Map();
+  if (report) for (const g of report.gates) gateById.set(g.id, g);
+  const freshness = assessFreshness(report, nowMs);
+  if (goalStatus === "DONE" && report && report.status === "FAIL") {
+    suspicions.push({
+      check: "goal status = DONE",
+      reason: "verify \uC804\uCCB4 \uACB0\uACFC\uAC00 FAIL \u2014 \uC644\uB8CC \uC120\uC5B8\uACFC \uC99D\uAC70\uAC00 \uBAA8\uC21C(\uAC70\uC9D3\uC644\uB8CC \uAC15\uD55C \uC758\uC2EC)."
+    });
+  }
+  const checked = checks.filter((c) => c.checked);
+  let mappedCount = 0;
+  for (const c of checked) {
+    const gates = impliedGates(c.text);
+    if (gates.length === 0) {
+      gaps.push({ check: c.text, note: "\uBBF8\uAC80\uC99D \u2014 \uAC8C\uC774\uD2B8 \uD0A4\uC6CC\uB4DC \uB9E4\uD551 \uBD88\uAC00(\uAE30\uB2A5 \uC644\uB8CC\uC870\uAC74, \uC218\uB3D9 \uD655\uC778 \uD544\uC694)." });
+      continue;
+    }
+    mappedCount++;
+    for (const gid of gates) {
+      const g = gateById.get(gid);
+      if (!report || !g) {
+        suspicions.push({ check: c.text, reason: `${gid} \uAC8C\uC774\uD2B8 \uC99D\uAC70 \uC5C6\uC74C(latest.json \uBD80\uC7AC/\uBBF8\uC2E4\uD589) \u2014 \uCCB4\uD06C\uB428\uC774\uB098 \uB4B7\uBC1B\uCE68 \uBABB \uD568.` });
+      } else if (g.status === "fail") {
+        suspicions.push({ check: c.text, reason: `${gid} \uAC8C\uC774\uD2B8 FAIL(\uC885\uB8CC\uCF54\uB4DC ${g.exitCode ?? "?"}) \u2014 \uCCB4\uD06C\uB428\uACFC \uBAA8\uC21C.` });
+      } else if (g.status === "skip") {
+        suspicions.push({ check: c.text, reason: `${gid} \uAC8C\uC774\uD2B8 skip \u2014 \uAC80\uC99D\uC774 \uBCC0\uACBD\uC744 \uC548 \uAC74\uB4DC\uB838\uC744 \uC218 \uC788\uC74C(\uAC70\uC9D3\uC644\uB8CC \uC758\uC2EC).` });
+      }
+    }
+  }
+  const coverage = checked.length === 0 ? 0 : mappedCount / checked.length;
+  let confidence;
+  if (checked.length === 0 || suspicions.length > 0) {
+    confidence = "low";
+  } else if (gaps.length > 0 || coverage < COVERAGE_MIN || !freshness.confirmed || freshness.stale) {
+    confidence = "medium";
+  } else {
+    confidence = "high";
+  }
+  let reprompt;
+  if (checked.length === 0) {
+    reprompt = "\uCCB4\uD06C\uB41C \uC644\uB8CC\uC870\uAC74\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uC644\uB8CC \uC8FC\uC7A5\uC774 \uC5C6\uC5B4 \uC2EC\uBB38\uD560 \uB300\uC0C1\uC774 \uC5C6\uC2B5\uB2C8\uB2E4(vacuous).";
+  } else if (suspicions.length > 0) {
+    reprompt = "\uB2E4\uC74C \uC644\uB8CC\uC870\uAC74\uC774 \uC99D\uAC70\uC640 \uBAA8\uC21C\uB418\uAC70\uB098 \uC99D\uAC70\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4:\n" + suspicions.map((s) => `  - ${s.check} \u2192 ${s.reason}`).join("\n") + "\n\uAC01 \uD56D\uBAA9\uC758 \uC2E4\uC81C \uC99D\uAC70(\uAC8C\uC774\uD2B8 \uD1B5\uACFC/\uCD94\uAC00\uB41C \uD14C\uC2A4\uD2B8/\uBCC0\uACBD \uD30C\uC77C)\uB97C \uC81C\uC2DC\uD558\uAC70\uB098, \uCDA9\uC871 \uBABB \uD558\uBA74 done \uC744 \uCCA0\uD68C\uD558\uC138\uC694.";
+  } else if (gaps.length > 0) {
+    reprompt = "\uB2E4\uC74C \uC644\uB8CC\uC870\uAC74\uC740 \uAC8C\uC774\uD2B8 \uC99D\uAC70\uB85C \uC790\uB3D9 \uD655\uC778\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4(\uBBF8\uAC80\uC99D \u2014 \uC218\uB3D9 \uD655\uC778 \uD544\uC694):\n" + gaps.map((g) => `  - ${g.check}`).join("\n");
+  } else {
+    reprompt = "\uCCB4\uD06C\uB41C \uBAA8\uB4E0 \uC644\uB8CC\uC870\uAC74\uC774 \uAC8C\uC774\uD2B8 \uC99D\uAC70\uB85C \uB4B7\uBC1B\uCE68\uB429\uB2C8\uB2E4(\uB2E8, \uBCF4\uC7A5\uC740 \uC544\uB2D8).";
+  }
+  return {
+    confidence,
+    coverage,
+    checkedCount: checked.length,
+    mappedCount,
+    unmappedCount: gaps.length,
+    freshness,
+    suspicions,
+    gaps,
+    disclaimer: REVIEW_DISCLAIMER,
+    reprompt
+  };
+}
+function resolveGoal(optId, goals) {
+  let id;
+  if (optId !== void 0) {
+    const n = Number(optId);
+    id = Number.isFinite(n) ? n : null;
+  } else {
+    id = selectActiveId(goals);
+  }
+  if (id === null) return null;
+  return goals.find((g) => g.frontmatter.id === id) ?? null;
+}
+var CONFIDENCE_LABEL = {
+  low: chalk31.red.bold("\uB0AE\uC74C (\uAC70\uC9D3\uC644\uB8CC \uC758\uC2EC \uB610\uB294 \uC644\uB8CC \uC8FC\uC7A5 \uC5C6\uC74C)"),
+  medium: chalk31.yellow.bold("\uC911\uAC04 (\uCEE4\uBC84\uB9AC\uC9C0/\uC2E0\uC120\uB3C4 \uBD80\uC871 \u2014 \uC99D\uAC70 \uC5C6\uC74C \u2260 \uD1B5\uACFC)"),
+  high: chalk31.green.bold("\uB192\uC74C (\uC758\uC2EC 0 + \uCEE4\uBC84\uB9AC\uC9C0\xB7\uC2E0\uC120\uB3C4 \uCDA9\uBD84 \u2014 \uB2E8 \uBCF4\uC7A5 \uC544\uB2D8)")
+};
+async function review(opts = {}) {
+  if (!ensureNotHardStopped("review")) return;
+  const cwd = process.cwd();
+  const goals = listGoals(GOALS_DIR2);
+  if (goals.length === 0) {
+    console.error(chalk31.yellow("  \u26A0\uFE0F  goals/ \uC5D0 goal \uC774 \uC5C6\uC2B5\uB2C8\uB2E4. vhk goal init \uC73C\uB85C \uC2DC\uC791\uD558\uC138\uC694."));
+    process.exitCode = 1;
+    return;
+  }
+  const goal = resolveGoal(opts.id, goals);
+  if (!goal || typeof goal.frontmatter.id !== "number") {
+    console.error(chalk31.red(`  \u274C \uB300\uC0C1 goal \uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4${opts.id ? ` (--id ${opts.id})` : " (active goal \uC5C6\uC74C)"}.`));
+    process.exitCode = 1;
+    return;
+  }
+  const goalId = goal.frontmatter.id;
+  const goalStatus = goal.frontmatter.status ?? "NOT_STARTED";
+  const checks = parseCompletionChecks(goal.body);
+  if (opts.id === void 0 && goalStatus === "NOT_STARTED") {
+    console.error(chalk31.yellow(`  \u26A0\uFE0F  active goal ${goalId} \uAC00 NOT_STARTED \u2014 \uC644\uB8CC \uC8FC\uC7A5\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uAC80\uC99D \uB300\uC0C1\uC740 --id \uB85C \uC9C0\uC815\uD558\uC138\uC694.`));
+  }
+  const jsonPath = join11(cwd, REPORT_PATH_REL);
+  if (!existsSync17(jsonPath)) {
+    console.error(chalk31.yellow(`  \u26A0\uFE0F  \uC99D\uAC70 \uBD80\uC7AC \u2014 ${REPORT_PATH_REL} \uC5C6\uC74C. review \uB97C \uC911\uB2E8\uD569\uB2C8\uB2E4(\uC0C8 \uC99D\uAC70 \uC548 \uB9CC\uB4E6).`));
+    printNextStep({
+      message: "\uC99D\uAC70(latest.json)\uAC00 \uC788\uC5B4\uC57C review \uAC00 \uAD50\uCC28\uAC80\uC99D\uD569\uB2C8\uB2E4:",
+      command: "vhk verify",
+      cursorHint: "\uBA3C\uC800 \uAC80\uC99D \uB3CC\uB824\uC918"
+    });
+    process.exitCode = 1;
+    return;
+  }
+  let report;
+  try {
+    report = readJsonFile(jsonPath);
+  } catch {
+    console.error(chalk31.red(`  \u274C ${REPORT_PATH_REL} \uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4(\uC190\uC0C1). vhk verify \uB85C \uC7AC\uC0DD\uC131\uD558\uC138\uC694.`));
+    process.exitCode = 1;
+    return;
+  }
+  const analysis = crossCheck(checks, goalStatus, report, Date.now());
+  const result = {
+    ...analysis,
+    reviewedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    goalId,
+    goalStatus,
+    reportStatus: report.status
+  };
+  console.log(chalk31.bold(`
+\u{1F52C} \uC801\uB300\uC801 \uC790\uAE30\uAC80\uC99D (review) \u2014 Goal ${goalId}`));
+  console.log(chalk31.gray("\u2500".repeat(44)));
+  console.log(
+    chalk31.dim(
+      `  goal status: ${goalStatus}  \xB7  verify: ${report.status}  \xB7  \uCCB4\uD06C\uB41C \uC644\uB8CC\uC870\uAC74 ${result.checkedCount}\uAC1C (\uB9E4\uD551 ${result.mappedCount} / \uBBF8\uAC80\uC99D ${result.unmappedCount}, coverage ${result.coverage * 100 | 0}%)`
+    )
+  );
+  console.log(chalk31.dim(`  \uC99D\uAC70 \uC2E0\uC120\uB3C4: ${result.freshness.note}`));
+  if (result.checkedCount === 0) {
+    console.log(chalk31.yellow("\n  \u26AA \uC644\uB8CC \uC8FC\uC7A5 \uC5C6\uC74C(\uCCB4\uD06C\uB41C \uC644\uB8CC\uC870\uAC74 0\uAC1C) \u2014 \uC2EC\uBB38\uD560 \uB300\uC0C1\uC774 \uC5C6\uC2B5\uB2C8\uB2E4(vacuous)."));
+  }
+  if (result.suspicions.length > 0) {
+    console.log(chalk31.red.bold(`
+  \u{1F6A9} \uAC70\uC9D3\uC644\uB8CC \uC758\uC2EC ${result.suspicions.length}\uAC74`));
+    for (const s of result.suspicions) console.log(chalk31.red(`   \u2717 ${s.check}
+     \u21B3 ${s.reason}`));
+  }
+  if (result.gaps.length > 0) {
+    console.log(chalk31.yellow.bold(`
+  \u26A0\uFE0F  \uBBF8\uAC80\uC99D(unmapped) ${result.gaps.length}\uAC74 \u2014 \uAC8C\uC774\uD2B8\uB85C \uC790\uB3D9 \uD655\uC778 \uBD88\uAC00`));
+    for (const g of result.gaps) console.log(chalk31.yellow(`   ? ${g.check}`));
+  }
+  if (result.checkedCount > 0 && result.suspicions.length === 0 && result.gaps.length === 0) {
+    console.log(chalk31.green("\n  \u2713 \uCCB4\uD06C\uB41C \uC644\uB8CC\uC870\uAC74\uC774 \uBAA8\uB450 \uAC8C\uC774\uD2B8 \uC99D\uAC70\uB85C \uB4B7\uBC1B\uCE68\uB428."));
+  }
+  console.log(`
+  \uC2E0\uB8B0\uB3C4: ${CONFIDENCE_LABEL[result.confidence]}`);
+  console.log(chalk31.yellow(`
+${result.disclaimer}`));
+  let mergeOk = false;
+  try {
+    const merged = { ...report, review: result };
+    writeFileSync12(jsonPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+    mergeOk = true;
+    console.log(chalk31.dim(`  \u{1F4C4} \uD310\uC815 \uBCD1\uD569: ${REPORT_PATH_REL} (review \uC139\uC158)`));
+  } catch (e) {
+    console.error(chalk31.red(`  \u274C review \uD310\uC815 \uAE30\uB85D \uC2E4\uD328: ${e instanceof Error ? e.message : String(e)}`));
+  }
+  if (!mergeOk) {
+    process.exitCode = 1;
+    printNextStep({
+      message: "review \uD310\uC815 \uAE30\uB85D \uC2E4\uD328(exit 1) \u2014 .vhk/reports \uC4F0\uAE30 \uAD8C\uD55C \uD655\uC778 \uD6C4 \uC7AC\uC2E4\uD589:",
+      command: "vhk review",
+      cursorHint: "\uAD8C\uD55C \uD655\uC778 \uD6C4 \uB2E4\uC2DC \uAC80\uD1A0\uD574\uC918"
+    });
+    return;
+  }
+  const vacuous = result.checkedCount === 0;
+  const cleanHigh = result.suspicions.length === 0 && result.gaps.length === 0 && result.confidence === "high";
+  process.exitCode = vacuous || cleanHigh ? 0 : 1;
+  if (vacuous) {
+    printNextStep({
+      message: "\uC644\uB8CC \uC8FC\uC7A5\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uC644\uB8CC\uC870\uAC74\uC744 \uCC44\uC6B4 \uB4A4 \uAC80\uC99D\uD558\uC138\uC694:",
+      command: "vhk verify",
+      cursorHint: "\uC644\uB8CC\uC870\uAC74 \uCC44\uC6CC\uC918"
+    });
+  } else if (result.suspicions.length > 0) {
+    console.log(chalk31.dim("\n  AI \uC7AC\uC9C8\uBB38 \uD504\uB86C\uD504\uD2B8:"));
+    console.log(chalk31.cyan(result.reprompt.split("\n").map((l) => `    ${l}`).join("\n")));
+    printNextStep({
+      message: "\uAC70\uC9D3\uC644\uB8CC \uC758\uC2EC\uC73C\uB85C \uC2E4\uD328(exit 1) \u2014 \uC99D\uAC70 \uBCF4\uAC15 \uD6C4 \uB2E4\uC2DC \uAC80\uC99D\uD558\uC138\uC694:",
+      command: "vhk verify",
+      cursorHint: "\uC758\uC2EC \uD56D\uBAA9 \uC99D\uAC70 \uBCF4\uAC15\uD574\uC918",
+      alternative: result.suspicions[0].reason
+    });
+  } else if (cleanHigh) {
+    printNextStep({
+      message: "\uC2EC\uBB38 \uD1B5\uACFC(\uC2E0\uB8B0\uB3C4 \uB192\uC74C, \uBCF4\uC7A5 \uC544\uB2D8). \uC644\uB8CC \uCC98\uB9AC\uD558\uB824\uBA74:",
+      command: `vhk goal done --id ${goalId}`,
+      cursorHint: "goal \uC644\uB8CC \uCC98\uB9AC\uD574\uC918"
+    });
+  } else {
+    console.log(chalk31.dim("\n  AI \uC7AC\uC9C8\uBB38 \uD504\uB86C\uD504\uD2B8:"));
+    console.log(chalk31.cyan(result.reprompt.split("\n").map((l) => `    ${l}`).join("\n")));
+    printNextStep({
+      message: `\uC99D\uAC70 \uBD88\uCDA9\uBD84(\uC2E0\uB8B0\uB3C4 ${result.confidence}) \u2014 goal done \uAE08\uC9C0. \uCEE4\uBC84\uB9AC\uC9C0/\uC2E0\uC120\uB3C4 \uBCF4\uAC15 \uD6C4 \uC7AC\uAC80\uC99D:`,
+      command: "vhk verify",
+      cursorHint: "\uC99D\uAC70 \uBCF4\uAC15 \uD6C4 \uB2E4\uC2DC \uAC80\uC99D\uD574\uC918"
+    });
+  }
+}
+
 // src/lib/risk-policy.ts
 var HIGH_RISK_ACTIONS = [
   "undo",
@@ -5896,6 +6174,8 @@ async function dispatchNlpRoute(route, input) {
       return mode();
     case "verify":
       return verify();
+    case "review":
+      return review();
   }
 }
 var STATE_CHANGING_COMMANDS = /* @__PURE__ */ new Set([
@@ -5909,14 +6189,14 @@ function requiresConfirmation(route) {
 async function runNaturalLanguageRoute(input) {
   const route = routeNaturalLanguage(input);
   if (!route) {
-    console.log(chalk31.yellow(`
+    console.log(chalk32.yellow(`
   \u2753 "${input}" \u2014 ${ko.nlp.notMatched}
 `));
     return;
   }
   console.log("");
-  console.log(chalk31.cyan(`  \u{1F4AC} "${input}"`));
-  console.log(chalk31.cyan(`  \u2192 ${route.explanation}`));
+  console.log(chalk32.cyan(`  \u{1F4AC} "${input}"`));
+  console.log(chalk32.cyan(`  \u2192 ${route.explanation}`));
   if (requiresConfirmation(route)) {
     const { confirm } = await inquirer12.prompt([{
       type: "confirm",
@@ -5925,7 +6205,7 @@ async function runNaturalLanguageRoute(input) {
       default: true
     }]);
     if (!confirm) {
-      console.log(chalk31.dim(`  ${ko.nlp.menuHint}`));
+      console.log(chalk32.dim(`  ${ko.nlp.menuHint}`));
       return;
     }
   }
@@ -5934,7 +6214,7 @@ async function runNaturalLanguageRoute(input) {
   if (riskAction) {
     await runGuarded(
       riskAction,
-      { channel: "nl", approved: false, log: (m) => console.log(chalk31.yellow(`  ${m}`)) },
+      { channel: "nl", approved: false, log: (m) => console.log(chalk32.yellow(`  ${m}`)) },
       () => dispatchNlpRoute(route, input)
     );
     return;
@@ -5943,77 +6223,77 @@ async function runNaturalLanguageRoute(input) {
 }
 
 // src/commands/agent.ts
-import chalk32 from "chalk";
+import chalk33 from "chalk";
 function activeGoalId() {
   const goals = listGoals("goals");
   const id = selectActiveId(goals);
   return id ?? void 0;
 }
 async function blocker(description) {
-  console.log(chalk32.bold(`
+  console.log(chalk33.bold(`
 ${ko.agent.blockerTitle}
 `));
   if (!description || !description.trim()) {
-    console.log(chalk32.red("  \u274C \uBE14\uB85C\uCEE4 \uC124\uBA85\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
-    console.log(chalk32.dim('  \uC608: vhk blocker "tsc \uC5D0\uB7EC \u2014 simple-git \uD0C0\uC785 \uD638\uD658"'));
+    console.log(chalk33.red("  \u274C \uBE14\uB85C\uCEE4 \uC124\uBA85\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
+    console.log(chalk33.dim('  \uC608: vhk blocker "tsc \uC5D0\uB7EC \u2014 simple-git \uD0C0\uC785 \uD638\uD658"'));
     process.exitCode = 1;
     return;
   }
   const goalId = activeGoalId();
   const r = appendBlocker(description, goalId);
-  console.log(chalk32.green(`  \u2705 blocker \uAE30\uB85D (\uD604\uC7AC \uD65C\uC131 ${r.count}\uAC74)`));
+  console.log(chalk33.green(`  \u2705 blocker \uAE30\uB85D (\uD604\uC7AC \uD65C\uC131 ${r.count}\uAC74)`));
   if (r.hardStopTripped) {
-    console.log(chalk32.red.bold("  \u{1F6D1} HARD_STOP \uC790\uB3D9 \uC0DD\uC131 \u2014 \uBAA8\uB4E0 \uC790\uB3D9\uD654 \uC911\uB2E8."));
-    console.log(chalk32.yellow("     \uC0AC\uB78C \uAC80\uD1A0 \uD6C4 `vhk resume --confirm` \uC73C\uB85C\uB9CC \uD574\uC81C."));
+    console.log(chalk33.red.bold("  \u{1F6D1} HARD_STOP \uC790\uB3D9 \uC0DD\uC131 \u2014 \uBAA8\uB4E0 \uC790\uB3D9\uD654 \uC911\uB2E8."));
+    console.log(chalk33.yellow("     \uC0AC\uB78C \uAC80\uD1A0 \uD6C4 `vhk resume --confirm` \uC73C\uB85C\uB9CC \uD574\uC81C."));
     process.exitCode = 2;
   }
 }
 async function learn(lesson) {
-  console.log(chalk32.bold(`
+  console.log(chalk33.bold(`
 ${ko.agent.learnTitle}
 `));
   if (!lesson || !lesson.trim()) {
-    console.log(chalk32.red("  \u274C \uAD50\uD6C8 \uB0B4\uC6A9\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
-    console.log(chalk32.dim('  \uC608: vhk learn "PowerShell \uC5D0\uC11C\uB294 ; \uC0AC\uC6A9 (&& \uBBF8\uC9C0\uC6D0)"'));
+    console.log(chalk33.red("  \u274C \uAD50\uD6C8 \uB0B4\uC6A9\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."));
+    console.log(chalk33.dim('  \uC608: vhk learn "PowerShell \uC5D0\uC11C\uB294 ; \uC0AC\uC6A9 (&& \uBBF8\uC9C0\uC6D0)"'));
     process.exitCode = 1;
     return;
   }
   const goalId = activeGoalId();
   appendLearning(lesson, goalId);
-  console.log(chalk32.green("  \u2705 learnings.md append."));
+  console.log(chalk33.green("  \u2705 learnings.md append."));
   console.log(
-    chalk32.dim("  \uACB0\uC815\uC0AC\uD56D(decision)\uC740 `vhk memory add` \uB85C \uBCC4\uB3C4 \uAE30\uB85D \u2014 SoT \uBD84\uB9AC.")
+    chalk33.dim("  \uACB0\uC815\uC0AC\uD56D(decision)\uC740 `vhk memory add` \uB85C \uBCC4\uB3C4 \uAE30\uB85D \u2014 SoT \uBD84\uB9AC.")
   );
 }
 async function resume(opts = {}) {
-  console.log(chalk32.bold(`
+  console.log(chalk33.bold(`
 ${ko.agent.resumeTitle}
 `));
   if (!isHardStopActive()) {
-    console.log(chalk32.dim("  HARD_STOP \uD65C\uC131 \uC544\uB2D8 \u2014 \uD560 \uC77C \uC5C6\uC74C."));
+    console.log(chalk33.dim("  HARD_STOP \uD65C\uC131 \uC544\uB2D8 \u2014 \uD560 \uC77C \uC5C6\uC74C."));
     return;
   }
   const reason = readHardStopReason();
   if (reason) {
-    console.log(chalk32.yellow("  \u{1F4CB} HARD_STOP \uC0AC\uC720:"));
-    console.log(chalk32.dim(`     ${reason.split("\n").join("\n     ")}`));
+    console.log(chalk33.yellow("  \u{1F4CB} HARD_STOP \uC0AC\uC720:"));
+    console.log(chalk33.dim(`     ${reason.split("\n").join("\n     ")}`));
     console.log("");
   }
   if (!opts.confirm) {
     console.log(
-      chalk32.red(
+      chalk33.red(
         "  \u274C --confirm \uD50C\uB798\uADF8 \uC5C6\uC774\uB294 \uD574\uC81C\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (\uC790\uB3D9 \uD638\uCD9C \uAE08\uC9C0)."
       )
     );
-    console.log(chalk32.yellow("     \uC0AC\uC720\uB97C \uD655\uC778\uD55C \uD6C4 \uB2E4\uC2DC: vhk resume --confirm"));
+    console.log(chalk33.yellow("     \uC0AC\uC720\uB97C \uD655\uC778\uD55C \uD6C4 \uB2E4\uC2DC: vhk resume --confirm"));
     process.exitCode = 1;
     return;
   }
   const removed = clearHardStop();
   if (removed) {
-    console.log(chalk32.green("  \u2705 HARD_STOP \uD574\uC81C. \uC790\uB3D9\uD654 \uC7AC\uAC1C \uAC00\uB2A5."));
+    console.log(chalk33.green("  \u2705 HARD_STOP \uD574\uC81C. \uC790\uB3D9\uD654 \uC7AC\uAC1C \uAC00\uB2A5."));
   } else {
-    console.log(chalk32.dim("  \uD30C\uC77C\uC774 \uC774\uBBF8 \uC5C6\uC74C \u2014 no-op."));
+    console.log(chalk33.dim("  \uD30C\uC77C\uC774 \uC774\uBBF8 \uC5C6\uC74C \u2014 no-op."));
   }
 }
 
@@ -6034,7 +6314,7 @@ async function guardCli(action, approved, run) {
         }]);
         return ok;
       },
-      log: (m) => console.log(chalk33.yellow(`  ${m}`))
+      log: (m) => console.log(chalk34.yellow(`  ${m}`))
     },
     run
   );
@@ -6047,7 +6327,7 @@ async function guardCliDefer(action, approved, run) {
       approved,
       // TTY 면 통과(명령이 자체 확인), 비대화형은 confirm 불가 → 가드가 차단.
       confirm: async () => !!process.stdout.isTTY,
-      log: (m) => console.log(chalk33.yellow(`  ${m}`))
+      log: (m) => console.log(chalk34.yellow(`  ${m}`))
     },
     run
   );
@@ -6086,6 +6366,7 @@ var KO_ALIASES = {
   memory: "\uAE30\uC5B5",
   brief: "\uBE0C\uB9AC\uD551",
   goal: "\uBAA9\uD45C",
+  review: "\uAC80\uD1A0",
   blocker: "\uBE14\uB85C\uCEE4",
   learn: "\uAD50\uD6C8",
   resume: "\uC7AC\uAC1C"
@@ -6210,6 +6491,9 @@ program.command("mode [target]").alias("\uBAA8\uB4DC").description("Safety Mode
 program.command("verify").alias("\uC0AC\uC804\uC810\uAC80").option("--json", "\uB9AC\uD3EC\uD2B8 JSON \uC744 stdout \uC73C\uB85C \uCD9C\uB825 (CI\uC6A9 \u2014 \uACBD\uB85C \uB300\uC2E0)").option("--report", "latest.json \uC744 \uC0AC\uB78C\uC6A9 \uC815\uC801 HTML(.vhk/reports/latest.html) \uB85C \uB80C\uB354 (\uC678\uBD80 \uC758\uC874 0)").option("--open", "\uB9AC\uD3EC\uD2B8 \uC0DD\uC131 \uD6C4 \uAE30\uBCF8 \uBE0C\uB77C\uC6B0\uC800\uB85C \uC5F4\uAE30 (\uBE44\uB300\uD654\uD615/CI/MCP \uC790\uB3D9 \uC2A4\uD0B5)").description("\uAC80\uC99D \uAC8C\uC774\uD2B8(tsc/test/build/secure) \uC2E4\uC81C \uC2E4\uD589 + \uC99D\uAC70 \uAE30\uB85D (.vhk/reports/latest.json)").action(async (opts) => {
   await verify(opts);
 });
+program.command("review").alias("\uAC80\uD1A0").option("--id <id>", "\uB300\uC0C1 goal id (\uC5C6\uC73C\uBA74 active goal)").description("\uC801\uB300\uC801 \uC790\uAE30\uAC80\uC99D \u2014 latest.json \u2194 goal \uC644\uB8CC\uC870\uAC74 \uAD50\uCC28\uAC80\uC99D (\uAC70\uC9D3\uC644\uB8CC \uC758\uC2EC \uD0D0\uC9C0, \uBCF4\uC7A5 \uC544\uB2D8)").action(async (opts) => {
+  await review(opts);
+});
 program.command("context-show").alias("\uB9E5\uB77D\uBCF4\uAE30").description("\uD604\uC7AC \uCEE8\uD14D\uC2A4\uD2B8 \uD30C\uC77C \uB0B4\uC6A9 \uCD9C\uB825").action(async () => {
   await contextShow();
 });
@@ -6324,9 +6608,9 @@ if (isMainModule) {
     }
   } catch (err) {
     if (isPromptAbortError(err)) {
-      console.error(chalk33.yellow("\n  \u26A0\uFE0F  \uB300\uD654\uD615 \uC785\uB825\uC774 \uCDE8\uC18C/\uC885\uB8CC\uB410\uC2B5\uB2C8\uB2E4. (\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0\uC11C\uB294 \uD574\uB2F9 \uBA85\uB839\uC744 \uC4F8 \uC218 \uC5C6\uC5B4\uC694)"));
+      console.error(chalk34.yellow("\n  \u26A0\uFE0F  \uB300\uD654\uD615 \uC785\uB825\uC774 \uCDE8\uC18C/\uC885\uB8CC\uB410\uC2B5\uB2C8\uB2E4. (\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0\uC11C\uB294 \uD574\uB2F9 \uBA85\uB839\uC744 \uC4F8 \uC218 \uC5C6\uC5B4\uC694)"));
     } else {
-      console.error(chalk33.red(`
+      console.error(chalk34.red(`
 \u274C ${err instanceof Error ? err.message : String(err)}`));
     }
     process.exitCode = 1;

package/dist/mcp/index.js

@@ -2,7 +2,7 @@
 import {
   resolveVhkCliInvocation,
   startMcpServer
-} from "../chunk-GXFZ7JXX.js";
+} from "../chunk-RXDOM4QT.js";
 
 // src/mcp/index.ts
 var cli = resolveVhkCliInvocation();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byh3071/vhk",
-  "version": "1.7.1",
+  "version": "1.8.1",
   "description": "Vibe Harness Kit — AI 코딩 도구·기기를 바꿔도 규칙·맥락이 따라가는 포터빌리티 CLI (sync: Cursor·Claude·Windsurf·Copilot·Antigravity / cloud 백업)",
   "bin": {
     "vhk": "dist/index.js",