@vibecodetown/mcp-server 1.3.1 → 1.4.0

package/build/bin/vibe-ci.js

@@ -1,1558 +1,12 @@
 #!/usr/bin/env node
 /**
- * Vibe CI CLI Wrapper v1.0
+ * Vibe CI CLI Wrapper
  *
- * 단일 검증 엔트리포인트 - vpm-back run을 호출하여 GO/FIX/BLOCK 판정
- *
- * Usage: vibe ci [options]
- *
- * Exit Codes:
- *   0 = GO (머지 가능)
- *   2 = FIX (수정 필요)
- *   3 = BLOCK (차단)
- *   1 = ERROR (인프라/엔진 오류)
+ * NOTE: The implementation lives under `src/ci/*`.
  */
-import { spawn, spawnSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as path from "node:path";
-import * as crypto from "node:crypto";
-import { fileURLToPath } from "node:url";
-// ESM 모듈에서 __filename/__dirname 대체
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-import { LicenseManager } from "../license-manager.js";
-import { SyncManager } from "../sync-manager.js";
-import { renderViolationLinks, renderSummaryWithLink } from "../deep-link.js";
-import { saveEvidenceReportFromRunDir, savePrCommentFromRunDir } from "../evidence-report.js";
-import { writeHtmlReportFromCiSummarySafe } from "../report-generator.js";
-import { TokenCache } from "../mcp/auth/token_cache.js";
-import { loadSpecMapSafe, matchSpecMap } from "../spec-map.js";
-import { minimatch } from "minimatch";
-import { pathViolationMessage, readOnlyViolationMessage, iterationLimitMessage, scopeDriftMessage, missingWorkOrderMessage, missingDecisionMessage, } from "../correction-messages.js";
-import { readDecisionLog } from "../decision-log-reader.js";
-import { recordReviewHistory, getHotspotFiles, getRepeatCount } from "../review-history.js";
-import { runDepsUpdate, formatDepsUpdate, checkDrift, formatDriftCheck, checkEnvironment, formatEnvCheck, buildEnvCheckStatus, buildDriftCheckStatus, buildVerificationStatus, renderToolStatus, renderPipelineStatus, } from "../deps/index.js";
-import { bitnetCheck } from "../mcp/tools/bitnet/index.js";
-import { runMappingPipeline, hasSpecMap, } from "../mcp/tools/vibe_pm/mapping/index.js";
-import { ensureDirSync, getPmRunDir, getVibeDir, resolvePmRunDirForRead } from "../mcp/paths.js";
-import { syncLocalRun, generateWorkspaceId, isDbSyncEnabled } from "../db_sync/index.js";
-// ============================================================
-// Exit Codes (SSOT)
-// ============================================================
-const EXIT_CODES = {
-    GO: 0,
-    FIX: 2,
-    BLOCK: 3,
-    ERROR: 1,
-};
-// ============================================================
-// Argument Parser
-// ============================================================
-function parseArgs(args) {
-    const options = {
-        workspace: ".",
-        runId: null,
-        mode: "ci",
-        strict: false,
-        json: false,
-        noKce: false,
-        timeout: 300,
-        ciProvider: null,
-        prNumber: null,
-        commitSha: null,
-        branch: null,
-    };
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        const next = args[i + 1];
-        switch (arg) {
-            case "--workspace":
-                options.workspace = next || ".";
-                i++;
-                break;
-            case "--run-id":
-                options.runId = next || null;
-                i++;
-                break;
-            case "--mode":
-                options.mode = (next === "local" ? "local" : "ci");
-                i++;
-                break;
-            case "--strict":
-                options.strict = true;
-                break;
-            case "--json":
-                options.json = true;
-                break;
-            case "--no-kce":
-                options.noKce = true;
-                break;
-            case "--timeout":
-                options.timeout = parseInt(next || "300", 10);
-                i++;
-                break;
-            case "--ci-provider":
-                options.ciProvider = next || null;
-                i++;
-                break;
-            case "--pr-number":
-                options.prNumber = next || null;
-                i++;
-                break;
-            case "--commit-sha":
-                options.commitSha = next || null;
-                i++;
-                break;
-            case "--branch":
-                options.branch = next || null;
-                i++;
-                break;
-            case "--help":
-            case "-h":
-                printHelp();
-                process.exit(0);
-        }
-    }
-    return options;
-}
-function printHelp() {
-    console.log(`
-Vibe CI - Single verification entry point for AI coding
-
-Usage: vibe ci [options]
-
-Options:
-  --workspace <path>     Project root path (default: .)
-  --run-id <id>          Run ID (auto-generated if not specified)
-  --mode <ci|local>      Execution mode (default: ci)
-  --strict               Return exit 2 even for FIX verdict
-  --json                 JSON output only
-  --no-kce               Disable KCE
-  --timeout <seconds>    Timeout (default: 300)
-
-CI Metadata (Evidence only):
-  --ci-provider <name>   CI provider (github|gitlab|bitbucket|generic)
-  --pr-number <num>      PR number
-  --commit-sha <sha>     Commit SHA
-  --branch <name>        Branch name
-
-Exit Codes:
-  0 = GO (ready to merge)
-  2 = FIX (needs revision)
-  3 = BLOCK (rejected)
-  1 = ERROR (infrastructure/engine error)
-`);
-}
-// ============================================================
-// Run ID Generator
-// ============================================================
-function generateRunId() {
-    const now = new Date();
-    const date = now.toISOString().slice(0, 10).replace(/-/g, "");
-    const time = now.toISOString().slice(11, 19).replace(/:/g, "");
-    const shortHash = crypto.randomBytes(3).toString("hex");
-    return `r_${date}_${time}_${shortHash}`;
-}
-// ============================================================
-// Engine Locator
-// ============================================================
-function findEngine(name) {
-    const platform = process.platform === "win32" ? "win_x64" : "linux_x64";
-    const ext = process.platform === "win32" ? ".exe" : "";
-    const binaryName = name + ext;
-    // 1. 환경변수
-    const envPath = process.env[`VIBE_${name.toUpperCase().replace("-", "_")}_PATH`];
-    if (envPath && fs.existsSync(envPath))
-        return envPath;
-    // 2. 같은 디렉토리
-    const scriptDir = path.dirname(process.argv[1] || __filename);
-    const sameDirPath = path.join(scriptDir, binaryName);
-    if (fs.existsSync(sameDirPath))
-        return sameDirPath;
-    // 3. 패키지 루트의 bin 폴더 (build/bin/ → build/ → root/)
-    const packageRoot = path.join(scriptDir, "..", "..");
-    const binPath = path.join(packageRoot, "bin", `${name}_${platform}`, binaryName);
-    if (fs.existsSync(binPath))
-        return binPath;
-    // 4. cwd 기준 bin 폴더
-    const cwdBinPath = path.join(process.cwd(), "bin", `${name}_${platform}`, binaryName);
-    if (fs.existsSync(cwdBinPath))
-        return cwdBinPath;
-    // 5. PATH
-    const pathDirs = (process.env.PATH || "").split(path.delimiter);
-    for (const dir of pathDirs) {
-        const fullPath = path.join(dir, binaryName);
-        if (fs.existsSync(fullPath))
-            return fullPath;
-    }
-    return null;
-}
-// ============================================================
-// Engine Runner
-// ============================================================
-async function runEngine(enginePath, args, options) {
-    return new Promise((resolve) => {
-        const proc = spawn(enginePath, args, {
-            cwd: options.cwd,
-            env: options.env ?? process.env,
-            stdio: ["ignore", "pipe", "pipe"],
-            timeout: options.timeout * 1000,
-        });
-        let stdout = "";
-        let stderr = "";
-        proc.stdout.on("data", (data) => { stdout += data.toString(); });
-        proc.stderr.on("data", (data) => { stderr += data.toString(); });
-        proc.on("close", (code) => {
-            resolve({ code: code ?? 1, stdout, stderr });
-        });
-        proc.on("error", (err) => {
-            stderr += err.message;
-            resolve({ code: 1, stdout, stderr });
-        });
-    });
-}
-// ============================================================
-// Result Reader
-// ============================================================
-function readJsonFile(filePath) {
-    try {
-        if (!fs.existsSync(filePath))
-            return null;
-        const content = fs.readFileSync(filePath, "utf-8");
-        return JSON.parse(content);
-    }
-    catch {
-        return null;
-    }
-}
-function getPreprocessSummary(workspace, runId) {
-    try {
-        const runDir = resolvePmRunDirForRead(workspace, runId);
-        if (!fs.existsSync(runDir))
-            return undefined;
-        const airlockDir = path.join(runDir, "airlock");
-        const chunksDir = path.join(runDir, "chunks");
-        const report = readJsonFile(path.join(airlockDir, "redaction_report.json"));
-        const decision = readJsonFile(path.join(airlockDir, "router_decision.json"));
-        const manifest = readJsonFile(path.join(chunksDir, "chunk_manifest.v1.json"));
-        const parts = [];
-        if ((report?.redacted_count ?? 0) > 0) {
-            parts.push(`마스킹 ${report?.redacted_count}건`);
-        }
-        if (decision?.route) {
-            const routeLabel = decision.route === "local_only"
-                ? "로컬"
-                : decision.route === "local_then_cloud"
-                    ? "로컬→클라우드"
-                    : "클라우드";
-            parts.push(`라우팅 ${routeLabel}`);
-        }
-        if (typeof manifest?.chunks?.length === "number") {
-            parts.push(`청크 ${manifest.chunks.length}개`);
-        }
-        return parts.length > 0 ? parts.join(" · ") : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-// ============================================================
-// Skeleton Map Reader (FAIL-SAFE)
-// ============================================================
-function readSkeletonMapSummary(runsDir) {
-    const skeletonPath = path.join(runsDir, "ci", "skeleton_map_summary.json");
-    if (!fs.existsSync(skeletonPath)) {
-        return { status: "MISSING", data: null };
-    }
-    try {
-        const content = fs.readFileSync(skeletonPath, "utf-8");
-        const data = JSON.parse(content);
-        return { status: "PRESENT", data };
-    }
-    catch (err) {
-        return {
-            status: "ERROR",
-            data: null,
-            errorMessage: err instanceof Error ? err.message : "Unknown error",
-        };
-    }
-}
-function buildSkeletonField(result, runsDir) {
-    const artifactPath = result.status === "PRESENT"
-        ? path.join(runsDir, "ci", "skeleton_map_summary.json")
-        : null;
-    return {
-        status: result.status,
-        artifact_path: artifactPath,
-        error_message: result.errorMessage,
-        saved_by_skeleton: result.data?.saved_by_skeleton,
-        focus: result.data?.focus ?? null,
-    };
-}
-// ============================================================
-// Verdict Synthesizer
-// ============================================================
-function synthesizeVerdict(gate, clinic) {
-    // 필수 산출물 없음 → BLOCK
-    if (!gate || !clinic)
-        return "BLOCK";
-    // BLOCK > FIX > GO
-    if (gate.verdict === "BLOCK" || clinic.verdict === "BLOCK")
-        return "BLOCK";
-    if (gate.verdict === "FIX" || clinic.verdict === "FIX")
-        return "FIX";
-    return "GO";
-}
-function maxVerdict(a, b) {
-    if (a === "BLOCK" || b === "BLOCK")
-        return "BLOCK";
-    if (a === "FIX" || b === "FIX")
-        return "FIX";
-    return "GO";
-}
-function verdictFromCiViolations(vs) {
-    if (vs.some((v) => v.severity === "BLOCK"))
-        return "BLOCK";
-    if (vs.some((v) => v.severity === "FIX"))
-        return "FIX";
-    return "GO";
-}
-function toPosixPath(p) {
-    return p.replaceAll("\\", "/");
-}
-function uniqStrings(xs) {
-    const seen = new Set();
-    const out = [];
-    for (const x of xs) {
-        const k = x.trim();
-        if (!k)
-            continue;
-        if (seen.has(k))
-            continue;
-        seen.add(k);
-        out.push(k);
-    }
-    return out;
-}
-function getModifiedFiles(workspaceRoot) {
-    const env = (process.env.VIBE_MODIFIED_FILES || "").trim();
-    if (env) {
-        return uniqStrings(env.split(/[,\\n\\r]+/g).map((s) => toPosixPath(s.trim())));
-    }
-    const isGit = spawnSync("git", ["rev-parse", "--is-inside-work-tree"], {
-        cwd: workspaceRoot,
-        encoding: "utf8",
-    });
-    if (isGit.status !== 0)
-        return [];
-    const out = [];
-    const add = (args) => {
-        const r = spawnSync("git", args, { cwd: workspaceRoot, encoding: "utf8" });
-        if (r.status !== 0)
-            return;
-        const lines = String(r.stdout || "").split(/\r?\n/g).map((s) => s.trim()).filter(Boolean);
-        out.push(...lines.map(toPosixPath));
-    };
-    const base = (process.env.VIBE_DIFF_BASE || "").trim();
-    if (base) {
-        add(["diff", "--name-only", "--diff-filter=ACMRT", `${base}...HEAD`]);
-    }
-    else {
-        const baseRef = (process.env.GITHUB_BASE_REF || process.env.CI_MERGE_REQUEST_TARGET_BRANCH_NAME || "").trim();
-        if (baseRef) {
-            // best-effort fetch (FAIL-SAFE)
-            spawnSync("git", ["fetch", "--no-tags", "--depth", "200", "origin", baseRef], { cwd: workspaceRoot, encoding: "utf8" });
-            add(["diff", "--name-only", "--diff-filter=ACMRT", `origin/${baseRef}...HEAD`]);
-        }
-    }
-    // local unstaged/staged changes (local mode)
-    add(["diff", "--name-only", "--diff-filter=ACMRT", "--cached"]);
-    add(["diff", "--name-only", "--diff-filter=ACMRT"]);
-    // fallback: last commit
-    if (out.length === 0) {
-        add(["diff", "--name-only", "--diff-filter=ACMRT", "HEAD~1...HEAD"]);
-    }
-    return uniqStrings(out);
-}
-function parseNumstat(out) {
-    let files = 0;
-    let insertions = 0;
-    let deletions = 0;
-    for (const line of out.split(/\r?\n/g)) {
-        const t = line.trim();
-        if (!t)
-            continue;
-        const [a, d] = t.split(/\s+/g);
-        const ins = Number.parseInt(a ?? "", 10);
-        const del = Number.parseInt(d ?? "", 10);
-        if (!Number.isFinite(ins) || !Number.isFinite(del))
-            continue;
-        files += 1;
-        insertions += ins;
-        deletions += del;
-    }
-    return { files, insertions, deletions };
-}
-function getDiffStats(workspaceRoot) {
-    const isGit = spawnSync("git", ["rev-parse", "--is-inside-work-tree"], {
-        cwd: workspaceRoot,
-        encoding: "utf8",
-    });
-    if (isGit.status !== 0)
-        return { files: 0, insertions: 0, deletions: 0 };
-    const run = (args) => {
-        const r = spawnSync("git", args, { cwd: workspaceRoot, encoding: "utf8" });
-        if (r.status !== 0)
-            return "";
-        return String(r.stdout || "");
-    };
-    const base = (process.env.VIBE_DIFF_BASE || "").trim();
-    if (base) {
-        return parseNumstat(run(["diff", "--numstat", `${base}...HEAD`]));
-    }
-    const baseRef = (process.env.GITHUB_BASE_REF || process.env.CI_MERGE_REQUEST_TARGET_BRANCH_NAME || "").trim();
-    if (baseRef) {
-        spawnSync("git", ["fetch", "--no-tags", "--depth", "200", "origin", baseRef], { cwd: workspaceRoot, encoding: "utf8" });
-        return parseNumstat(run(["diff", "--numstat", `origin/${baseRef}...HEAD`]));
-    }
-    const staged = parseNumstat(run(["diff", "--numstat", "--cached"]));
-    const unstaged = parseNumstat(run(["diff", "--numstat"]));
-    const combined = {
-        files: Math.max(staged.files, unstaged.files),
-        insertions: staged.insertions + unstaged.insertions,
-        deletions: staged.deletions + unstaged.deletions,
-    };
-    if (combined.files > 0)
-        return combined;
-    return parseNumstat(run(["diff", "--numstat", "HEAD~1...HEAD"]));
-}
-function writeJsonAtomic(filePath, value) {
-    fs.mkdirSync(path.dirname(filePath), { recursive: true });
-    const tmp = `${filePath}.tmp`;
-    fs.writeFileSync(tmp, JSON.stringify(value, null, 2), "utf-8");
-    fs.renameSync(tmp, filePath);
-}
-function readWorkOrder(workspaceRoot) {
-    const p = path.join(workspaceRoot, ".vibe", "state", "current_work_order.json");
-    try {
-        if (!fs.existsSync(p))
-            return null;
-        const raw = JSON.parse(fs.readFileSync(p, "utf-8"));
-        if (!raw || typeof raw !== "object")
-            return null;
-        const o = raw;
-        const run_id = String(o.run_id ?? "").trim();
-        const created_at = String(o.created_at ?? "").trim();
-        if (!run_id || !created_at)
-            return null;
-        const scopeRaw = (o.scope && typeof o.scope === "object") ? o.scope : null;
-        const include = Array.isArray(scopeRaw?.include) ? scopeRaw.include.map(String).map((s) => s.trim()).filter(Boolean) : [];
-        const exclude = Array.isArray(scopeRaw?.exclude) ? scopeRaw.exclude.map(String).map((s) => s.trim()).filter(Boolean) : [];
-        const doNotTouch = Array.isArray(o.do_not_touch) ? o.do_not_touch.map(String).map((s) => s.trim()).filter(Boolean) : [];
-        const verifyCriteria = Array.isArray(o.verify_criteria) ? o.verify_criteria.map(String).map((s) => s.trim()).filter(Boolean) : [];
-        return {
-            run_id,
-            created_at,
-            topic: typeof o.topic === "string" ? o.topic : undefined,
-            scope: (include.length > 0 || exclude.length > 0) ? { include, exclude } : undefined,
-            do_not_touch: doNotTouch,
-            verify_criteria: verifyCriteria,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-function matchesAnyGlobs(filePath, patterns) {
-    const p = toPosixPath(filePath);
-    return patterns.some((pat) => minimatch(p, toPosixPath(pat), { dot: true, matchBase: true }));
-}
-function buildSpecGateResult(params) {
-    const violations = [];
-    if (!params.hasDecisionEvidence) {
-        const msg = missingDecisionMessage();
-        violations.push({ id: msg.type, path: "project", msg: msg.userMessage });
-    }
-    if (!params.workOrder) {
-        const msg = missingWorkOrderMessage();
-        violations.push({ id: msg.type, path: "project", msg: msg.userMessage });
-    }
-    if (params.workOrder) {
-        const deny = uniqStrings([
-            ...(params.workOrder.do_not_touch ?? []),
-            ...(params.workOrder.scope?.exclude ?? []),
-        ]);
-        const allow = uniqStrings(params.workOrder.scope?.include ?? []);
-        for (const f of params.modifiedFiles) {
-            if (deny.length > 0 && matchesAnyGlobs(f, deny)) {
-                const msg = pathViolationMessage(f, "RED", allow);
-                violations.push({ id: msg.type, path: f, msg: msg.userMessage });
-            }
-        }
-        if (allow.length > 0) {
-            const drifted = params.modifiedFiles.filter((f) => !matchesAnyGlobs(f, allow));
-            if (drifted.length > 0) {
-                const msg = scopeDriftMessage(drifted.slice(0, 20), allow);
-                violations.push({ id: msg.type, path: drifted[0] ?? "project", msg: msg.userMessage });
-            }
-        }
-    }
-    if (params.modifiedFiles.length > 50) {
-        violations.push({
-            id: "FILES_TOO_MANY",
-            path: "project",
-            msg: `Too many files changed: ${params.modifiedFiles.length} (> 50)`,
-        });
-    }
-    const lines = params.diff.insertions + params.diff.deletions;
-    if (lines > 2000) {
-        violations.push({
-            id: "LINES_TOO_MANY",
-            path: "project",
-            msg: `Large diff: ${lines} lines changed (> 2000)`,
-        });
-    }
-    let verdict = "GO";
-    if (violations.some((v) => v.id === "MISSING_DECISION" || v.id === "MISSING_WORK_ORDER" || v.id === "PATH_VIOLATION" || v.id === "FILES_TOO_MANY")) {
-        verdict = "BLOCK";
-    }
-    else if (violations.length > 0) {
-        verdict = "FIX";
-    }
-    const issue_counts = {
-        total: violations.length,
-        critical: violations.filter((v) => v.id === "MISSING_DECISION" || v.id === "MISSING_WORK_ORDER" || v.id === "PATH_VIOLATION" || v.id === "FILES_TOO_MANY").length,
-        high: violations.filter((v) => v.id === "SCOPE_DRIFT" || v.id === "LINES_TOO_MANY").length,
-        medium: 0,
-        low: 0,
-    };
-    const summary = verdict === "GO"
-        ? "No spec gate issues detected"
-        : verdict === "BLOCK"
-            ? "Spec gate blocked by policy violations"
-            : "Spec gate requires fixes";
-    return {
-        verdict,
-        summary,
-        exit_code: verdict === "GO" ? 0 : verdict === "FIX" ? 2 : 3,
-        evaluated_at: new Date().toISOString(),
-        issue_counts,
-        violations,
-    };
-}
-function detectNodeScripts(workspaceRoot) {
-    try {
-        const pkgPath = path.join(workspaceRoot, "package.json");
-        if (!fs.existsSync(pkgPath))
-            return { hasPackageJson: false, build: false, test: false };
-        const raw = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
-        if (!raw || typeof raw !== "object")
-            return { hasPackageJson: true, build: false, test: false };
-        const scripts = raw.scripts;
-        const build = !!(scripts && typeof scripts === "object" && typeof scripts.build === "string" && scripts.build.trim());
-        const test = !!(scripts && typeof scripts === "object" && typeof scripts.test === "string" && scripts.test.trim());
-        return { hasPackageJson: true, build, test };
-    }
-    catch {
-        return { hasPackageJson: true, build: false, test: false };
-    }
-}
-function getNpmCommand() {
-    return process.platform === "win32" ? "npm.cmd" : "npm";
-}
-function runVerificationCommand(workspaceRoot, cmd, args, timeoutSeconds) {
-    const r = spawnSync(cmd, args, {
-        cwd: workspaceRoot,
-        encoding: "utf8",
-        timeout: Math.max(1, timeoutSeconds) * 1000,
-    });
-    return {
-        ok: r.status === 0,
-        stdout: String(r.stdout || ""),
-        stderr: String(r.stderr || ""),
-        code: typeof r.status === "number" ? r.status : 1,
-    };
-}
-function buildClinicResult(params) {
-    const created_at = new Date().toISOString();
-    const lines_changed = params.diff.insertions + params.diff.deletions;
-    const evidenceRel = path.join("artifacts", "clinic_verification.log").replaceAll("\\", "/");
-    const evidenceAbs = path.join(getPmRunDir(params.workspaceRoot, params.runId), evidenceRel);
-    const scripts = detectNodeScripts(params.workspaceRoot);
-    const npmCmd = getNpmCommand();
-    const logs = [];
-    const reasons = [];
-    let buildStatus = "skipped";
-    let testsPassed = 0;
-    let testsFailed = 0;
-    if (!scripts.hasPackageJson) {
-        reasons.push({ id: "NO_COMMANDS", msg: "No package.json found; cannot auto-detect build/test commands", evidence_ref: evidenceRel });
-        fs.mkdirSync(path.dirname(evidenceAbs), { recursive: true });
-        fs.writeFileSync(evidenceAbs, "No package.json found.\n", "utf-8");
-        return {
-            schema_version: "clinic_result.v1.2",
-            tool: "clinic",
-            run_id: params.runId,
-            verdict: "FIX",
-            status: "FAILED",
-            iterations: 0,
-            lines_changed,
-            reason: "NO_COMMANDS",
-            evidence_path: evidenceRel,
-            summary: "No verification commands detected (package.json missing)",
-            reasons,
-            metrics: { tests: { passed: testsPassed, failed: testsFailed }, build: { status: buildStatus } },
-            policy: { max_iterations: 0, dry_run: true },
-            created_at,
-        };
-    }
-    if (!scripts.build && !scripts.test) {
-        reasons.push({ id: "NO_COMMANDS", msg: "No build/test scripts found in package.json", evidence_ref: evidenceRel });
-        fs.mkdirSync(path.dirname(evidenceAbs), { recursive: true });
-        fs.writeFileSync(evidenceAbs, "No build/test scripts found in package.json.\n", "utf-8");
-        return {
-            schema_version: "clinic_result.v1.2",
-            tool: "clinic",
-            run_id: params.runId,
-            verdict: "FIX",
-            status: "FAILED",
-            iterations: 0,
-            lines_changed,
-            reason: "NO_COMMANDS",
-            evidence_path: evidenceRel,
-            summary: "No verification commands detected (build/test scripts missing)",
-            reasons,
-            metrics: { tests: { passed: testsPassed, failed: testsFailed }, build: { status: buildStatus } },
-            policy: { max_iterations: 0, dry_run: true },
-            created_at,
-        };
-    }
-    if (scripts.build) {
-        const r = runVerificationCommand(params.workspaceRoot, npmCmd, ["run", "build", "--silent"], params.timeoutSeconds);
-        logs.push(`=== build ===\nexit=${r.code}\n${r.stdout}\n${r.stderr}\n`);
-        if (!r.ok) {
-            buildStatus = "fail";
-            reasons.push({ id: "BUILD_FAIL", msg: "Build command failed", evidence_ref: evidenceRel });
-            fs.mkdirSync(path.dirname(evidenceAbs), { recursive: true });
-            fs.writeFileSync(evidenceAbs, logs.join("\n"), "utf-8");
-            return {
-                schema_version: "clinic_result.v1.2",
-                tool: "clinic",
-                run_id: params.runId,
-                verdict: "BLOCK",
-                status: "FAILED",
-                iterations: 0,
-                lines_changed,
-                reason: "BUILD_FAIL",
-                evidence_path: evidenceRel,
-                summary: "Build failed",
-                reasons,
-                metrics: { tests: { passed: testsPassed, failed: testsFailed }, build: { status: buildStatus } },
-                policy: { max_iterations: 0, dry_run: true },
-                created_at,
-            };
-        }
-        buildStatus = "pass";
-    }
-    if (scripts.test) {
-        const r = runVerificationCommand(params.workspaceRoot, npmCmd, ["test", "--silent"], params.timeoutSeconds);
-        logs.push(`=== test ===\nexit=${r.code}\n${r.stdout}\n${r.stderr}\n`);
-        if (!r.ok) {
-            testsFailed = 1;
-            reasons.push({ id: "TEST_FAIL", msg: "Test command failed", evidence_ref: evidenceRel });
-            fs.mkdirSync(path.dirname(evidenceAbs), { recursive: true });
-            fs.writeFileSync(evidenceAbs, logs.join("\n"), "utf-8");
-            return {
-                schema_version: "clinic_result.v1.2",
-                tool: "clinic",
-                run_id: params.runId,
-                verdict: "FIX",
-                status: "FAILED",
-                iterations: 0,
-                lines_changed,
-                reason: "TEST_FAIL",
-                evidence_path: evidenceRel,
-                summary: "Tests failed",
-                reasons,
-                metrics: { tests: { passed: testsPassed, failed: testsFailed }, build: { status: buildStatus } },
-                policy: { max_iterations: 0, dry_run: true },
-                created_at,
-            };
-        }
-        testsPassed = 1;
-    }
-    fs.mkdirSync(path.dirname(evidenceAbs), { recursive: true });
-    fs.writeFileSync(evidenceAbs, logs.join("\n"), "utf-8");
-    return {
-        schema_version: "clinic_result.v1.2",
-        tool: "clinic",
-        run_id: params.runId,
-        verdict: "GO",
-        status: "SUCCESS",
-        iterations: 0,
-        lines_changed,
-        reason: null,
-        evidence_path: evidenceRel,
-        summary: "Build/tests passed",
-        reasons,
-        metrics: { tests: { passed: testsPassed, failed: testsFailed }, build: { status: buildStatus } },
-        policy: { max_iterations: 0, dry_run: true },
-        created_at,
-    };
-}
-function ensureGateAndClinicFiles(params) {
-    const runDir = getPmRunDir(params.workspaceRoot, params.runId);
-    fs.mkdirSync(runDir, { recursive: true });
-    const gatePath = path.join(runDir, "gate", "spec_gate_result.json");
-    const clinicPath = path.join(runDir, "clinic", "clinic_result.json");
-    const wantGate = params.targets?.gate ?? true;
-    const wantClinic = params.targets?.clinic ?? true;
-    const modifiedFiles = getModifiedFiles(params.workspaceRoot);
-    const diff = getDiffStats(params.workspaceRoot);
-    if (wantGate && !fs.existsSync(gatePath)) {
-        const decisionLog = readDecisionLog(params.workspaceRoot, params.runId);
-        const workOrder = readWorkOrder(params.workspaceRoot);
-        const gate = buildSpecGateResult({
-            workspaceRoot: params.workspaceRoot,
-            runId: params.runId,
-            modifiedFiles,
-            diff,
-            hasDecisionEvidence: decisionLog.length > 0,
-            workOrder,
-        });
-        const specMapInfo = loadSpecMapSafe(params.workspaceRoot);
-        if (specMapInfo && modifiedFiles.length > 0) {
-            const match = matchSpecMap(specMapInfo.specMap, modifiedFiles);
-            if (match.unmappedFiles.length > 0 && specMapInfo.specMap.unmapped_policy !== "GO") {
-                gate.violations = gate.violations ?? [];
-                gate.violations.push({
-                    id: "SPEC_MAP_UNMAPPED",
-                    path: "project",
-                    msg: `spec_map unmapped files: ${match.unmappedFiles.slice(0, 5).join(", ")}${match.unmappedFiles.length > 5 ? "..." : ""}`,
-                });
-                gate.verdict = maxVerdict(gate.verdict, specMapInfo.specMap.unmapped_policy === "BLOCK" ? "BLOCK" : "FIX");
-                gate.exit_code = gate.verdict === "GO" ? 0 : gate.verdict === "FIX" ? 2 : 3;
-            }
-        }
-        writeJsonAtomic(gatePath, gate);
-    }
-    if (wantClinic && !fs.existsSync(clinicPath)) {
-        const clinic = buildClinicResult({
-            workspaceRoot: params.workspaceRoot,
-            runId: params.runId,
-            diff,
-            timeoutSeconds: params.timeoutSeconds,
-        });
-        writeJsonAtomic(clinicPath, clinic);
-    }
-}
-// ============================================================
-// Output Renderer
-// ============================================================
-function renderOutput(summary, jsonMode, extras) {
-    if (jsonMode) {
-        console.log(JSON.stringify(summary, null, 2));
-        return;
-    }
-    const finalVerdict = summary.verdict.final;
-    const emoji = finalVerdict === "GO" ? "✅" : finalVerdict === "FIX" ? "⚠️" : "❌";
-    console.log(`\n${emoji} Vibe CI: ${finalVerdict}\n`);
-    console.log(`Run ID: ${summary.run_id}`);
-    console.log(`Timestamp: ${summary.timestamp}`);
-    console.log(`\nSpec Gate: ${summary.verdict.gate}`);
-    console.log(`\nCode Clinic: ${summary.verdict.clinic}`);
-    if (extras?.licenseMessage) {
-        const planIcon = extras.plan === "PRO" ? "💎" : "🆓";
-        console.log(`\n${planIcon} ${extras.licenseMessage}`);
-    }
-    // BitNet Advisory 출력
-    if (extras?.bitnet) {
-        const adv = extras.bitnet;
-        console.log(`\nBitNet Advisory:`);
-        console.log(`  Trace ID: ${adv.trace_id}`);
-        if (adv.pre_check) {
-            const preEmoji = adv.pre_check.verdict === "GO" ? "✅" : adv.pre_check.verdict === "WARNING" ? "⚠️" : "❌";
-            console.log(`  Pre-check: ${preEmoji} ${adv.pre_check.verdict}`);
-        }
-        if (adv.post_check) {
-            const postEmoji = adv.post_check.verdict === "GO" ? "✅" : adv.post_check.verdict === "WARNING" ? "⚠️" : "❌";
-            console.log(`  Post-check: ${postEmoji} ${adv.post_check.verdict}`);
-        }
-        if (adv.next_actions.length > 0) {
-            console.log(`  Recommended actions:`);
-            for (const action of adv.next_actions.slice(0, 3)) {
-                console.log(`    - ${action}`);
-            }
-        }
-        if (adv.review_focus.length > 0) {
-            console.log(`  Review focus:`);
-            for (const file of adv.review_focus.slice(0, 3)) {
-                console.log(`    - ${file}`);
-            }
-        }
-    }
-    console.log("");
-}
-// ============================================================
-// Deps Command Handler
-// ============================================================
-async function handleDepsCommand(args) {
-    const subcommand = args[0];
-    const workspace = path.resolve(".");
-    const jsonMode = args.includes("--json");
-    const uxMode = args.includes("--ux");
-    const lang = args.includes("--ko") ? "ko" : "en";
-    if (subcommand === "update") {
-        const skipVerify = args.includes("--skip-verify");
-        const dryRun = args.includes("--dry-run");
-        const result = await runDepsUpdate(workspace, { skipVerify, dryRun });
-        if (jsonMode) {
-            if (uxMode && result.verification) {
-                // Include ToolStatus format for verification
-                const verifyStatus = buildVerificationStatus(result.verification.steps, result.verification.verdict, result.verification.warning);
-                console.log(JSON.stringify({ ...result, verification_status: verifyStatus }, null, 2));
-            }
-            else {
-                console.log(JSON.stringify(result, null, 2));
-            }
-        }
-        else if (uxMode && result.verification) {
-            // UX-optimized output
-            const verifyStatus = buildVerificationStatus(result.verification.steps, result.verification.verdict, result.verification.warning);
-            console.log(renderToolStatus(verifyStatus, lang).join("\n"));
-        }
-        else {
-            // Legacy output
-            const output = formatDepsUpdate(result);
-            console.log(output.lines.join("\n"));
-        }
-        const exitCode = result.verdict === "GO" ? 0 : result.verdict === "FIX" ? 2 : 3;
-        process.exit(exitCode);
-    }
-    if (subcommand === "check") {
-        const result = checkDrift(workspace);
-        if (jsonMode) {
-            if (uxMode) {
-                const toolStatus = buildDriftCheckStatus(result);
-                console.log(JSON.stringify(toolStatus, null, 2));
-            }
-            else {
-                console.log(JSON.stringify(result, null, 2));
-            }
-        }
-        else if (uxMode) {
-            const toolStatus = buildDriftCheckStatus(result);
-            console.log(renderToolStatus(toolStatus, lang).join("\n"));
-        }
-        else {
-            const output = formatDriftCheck(result);
-            console.log(output.lines.join("\n"));
-        }
-        const exitCode = result.verdict === "GO" ? 0 : result.verdict === "FIX" ? 2 : 3;
-        process.exit(exitCode);
-    }
-    // Help
-    console.log(`
-vibe deps - Dependency Management
-
-Commands:
-  vibe deps update    Update dependencies with verification
-  vibe deps check     Check for dependency drift
-
-Options:
-  --skip-verify       Skip verification after update
-  --dry-run           Show what would be updated
-  --json              JSON output
-  --ux                UX-optimized output (Template ID system)
-  --ko                Korean labels (with --ux)
-`);
-    process.exit(0);
-}
-// ============================================================
-// Doctor Command Handler
-// ============================================================
-async function handleDoctorCommand(args) {
-    const subcommand = args[0];
-    const workspace = path.resolve(".");
-    const jsonMode = args.includes("--json");
-    const uxMode = args.includes("--ux");
-    const lang = args.includes("--ko") ? "ko" : "en";
-    if (subcommand === "env") {
-        const result = checkEnvironment(workspace);
-        if (jsonMode) {
-            // JSON with ToolStatus format
-            const toolStatus = buildEnvCheckStatus(result);
-            console.log(JSON.stringify(uxMode ? toolStatus : result, null, 2));
-        }
-        else if (uxMode) {
-            // UX-optimized output with Template ID system
-            const toolStatus = buildEnvCheckStatus(result);
-            console.log(renderToolStatus(toolStatus, lang).join("\n"));
-        }
-        else {
-            // Legacy output
-            const output = formatEnvCheck(result);
-            console.log(output.lines.join("\n"));
-        }
-        const exitCode = result.verdict === "GO" ? 0 : result.verdict === "FIX" ? 2 : 3;
-        process.exit(exitCode);
-    }
-    if (subcommand === "deps") {
-        // Combined deps check
-        const envResult = checkEnvironment(workspace);
-        const driftResult = checkDrift(workspace);
-        if (jsonMode) {
-            if (uxMode) {
-                // ToolStatus format for both
-                const envStatus = buildEnvCheckStatus(envResult);
-                const driftStatus = buildDriftCheckStatus(driftResult);
-                // Add dependency relationship
-                driftStatus.depends_on = ["env-check"];
-                console.log(JSON.stringify({ env: envStatus, drift: driftStatus }, null, 2));
-            }
-            else {
-                console.log(JSON.stringify({ env: envResult, drift: driftResult }, null, 2));
-            }
-        }
-        else if (uxMode) {
-            // Pipeline view with UX renderer
-            const envStatus = buildEnvCheckStatus(envResult);
-            const driftStatus = buildDriftCheckStatus(driftResult);
-            driftStatus.depends_on = ["env-check"];
-            console.log(renderPipelineStatus([envStatus, driftStatus], lang).join("\n"));
-            console.log("");
-            console.log("--- Details ---");
-            console.log("");
-            console.log(renderToolStatus(envStatus, lang).join("\n"));
-            console.log("");
-            console.log(renderToolStatus(driftStatus, lang).join("\n"));
-        }
-        else {
-            // Legacy output
-            const envOutput = formatEnvCheck(envResult);
-            const driftOutput = formatDriftCheck(driftResult);
-            console.log("=== Environment Check ===");
-            console.log(envOutput.lines.join("\n"));
-            console.log("\n=== Drift Check ===");
-            console.log(driftOutput.lines.join("\n"));
-        }
-        // Exit with worst verdict
-        const envCode = envResult.verdict === "GO" ? 0 : envResult.verdict === "FIX" ? 2 : 3;
-        const driftCode = driftResult.verdict === "GO" ? 0 : driftResult.verdict === "FIX" ? 2 : 3;
-        process.exit(Math.max(envCode, driftCode));
-    }
-    // Help
-    console.log(`
-vibe doctor - Diagnostics
-
-Commands:
-  vibe doctor env     Check Node.js and package manager versions
-  vibe doctor deps    Check dependencies (env + drift)
-
-Options:
-  --json              JSON output
-  --ux                UX-optimized output (Template ID system)
-  --ko                Korean labels (with --ux)
-`);
-    process.exit(0);
-}
-// ============================================================
-// Main
-// ============================================================
-async function main() {
-    const args = process.argv.slice(2);
-    // Fire-and-Forget: 이전 큐 플러시 (백그라운드)
-    void flushCloudSyncQueueInBackground();
-    // auth 서브커맨드 → vibe-auth 호출
-    if (args[0] === "auth") {
-        const authModule = await import("./vibe-auth.js");
-        return;
-    }
-    // deps 서브커맨드 처리
-    if (args[0] === "deps") {
-        await handleDepsCommand(args.slice(1));
-        return;
-    }
-    // doctor 서브커맨드 처리
-    if (args[0] === "doctor") {
-        await handleDoctorCommand(args.slice(1));
-        return;
-    }
-    // "ci" 서브커맨드 제거 (vibe ci → vibe)
-    // Subcommand (default: ci). `inspect` is an alias for `clinic`.
-    let subcommand = "ci";
-    if (args[0] === "ci" || args[0] === "gate" || args[0] === "clinic" || args[0] === "inspect") {
-        const raw = String(args.shift() ?? "").trim();
-        subcommand = raw === "inspect" ? "clinic" : raw;
-    }
-    const options = parseArgs(args);
-    // 1. Preflight
-    const workspace = path.resolve(options.workspace);
-    if (!fs.existsSync(workspace)) {
-        console.error(`ERROR: Workspace not found: ${workspace}`);
-        process.exit(EXIT_CODES.ERROR);
-    }
-    // 2. Run ID 결정
-    const runId = options.runId || generateRunId();
-    const pmRunDir = getPmRunDir(workspace, runId);
-    // 2.1. current_run_id.txt 갱신 (SSOT: `.vibe/runs/<run_id>` 증거 기반 워크플로우)
-    try {
-        const stateDir = path.join(getVibeDir(workspace), "state");
-        ensureDirSync(stateDir);
-        fs.writeFileSync(path.join(stateDir, "current_run_id.txt"), `${runId}\n`, "utf-8");
-    }
-    catch {
-        // ignore
-    }
-    // 3. 라이선스 로드 (FAIL-SAFE: 실패 시 FREE로 강등)
-    // gate/clinic only mode (no engine, no reporting)
-    if (subcommand === "gate") {
-        ensureGateAndClinicFiles({
-            workspaceRoot: workspace,
-            runId,
-            timeoutSeconds: options.timeout,
-            targets: { gate: true, clinic: false },
-        });
-        const runDir = resolvePmRunDirForRead(workspace, runId);
-        const gateOnly = readJsonFile(path.join(runDir, "gate", "spec_gate_result.json"));
-        if (options.json) {
-            console.log(JSON.stringify(gateOnly ?? { verdict: "BLOCK" }, null, 2));
-        }
-        else {
-            console.log(gateOnly?.summary ?? `Spec Gate: ${gateOnly?.verdict ?? "BLOCK"}`);
-        }
-        process.exit(gateOnly?.verdict === "GO" ? 0 : gateOnly?.verdict === "FIX" ? 2 : 3);
-    }
-    if (subcommand === "clinic") {
-        ensureGateAndClinicFiles({
-            workspaceRoot: workspace,
-            runId,
-            timeoutSeconds: options.timeout,
-            targets: { gate: false, clinic: true },
-        });
-        const runDir = resolvePmRunDirForRead(workspace, runId);
-        const clinicOnly = readJsonFile(path.join(runDir, "clinic", "clinic_result.json"));
-        if (options.json) {
-            console.log(JSON.stringify(clinicOnly ?? { verdict: "BLOCK" }, null, 2));
-        }
-        else {
-            console.log(clinicOnly?.summary ?? `Code Clinic: ${clinicOnly?.verdict ?? "BLOCK"}`);
-        }
-        process.exit(clinicOnly?.verdict === "GO" ? 0 : clinicOnly?.verdict === "FIX" ? 2 : 3);
-    }
-    const licenseManager = new LicenseManager();
-    const entitlements = licenseManager.loadEntitlements();
-    const engineEnvConfig = licenseManager.getEngineEnvConfig(entitlements);
-    const licenseMessage = licenseManager.getStatusMessage(entitlements);
-    // 4. Engine 찾기
-    const vpmBackPath = findEngine("vpm-back");
-    // NOTE: vpm-back is best-effort. If missing/incompatible, fall back to local evaluators.
-    // 5. Engine 환경 변수 설정
-    // 우선순위: CLI --no-kce > 라이선스 > 기본값
-    const engineEnv = {
-        ...process.env,
-        VIBE_NO_KCE: options.noKce ? "1" : engineEnvConfig.VIBE_NO_KCE,
-        VIBE_CLINIC_MODE: engineEnvConfig.VIBE_CLINIC_MODE,
-        VIBE_AUTO_FIX_ALLOWED: engineEnvConfig.VIBE_AUTO_FIX_ALLOWED,
-    };
-    // 6. Engine 호출
-    const engineArgs = ["run", "--workspace", workspace, "--run-id", runId, "--out-dir", pmRunDir];
-    if (options.mode === "ci")
-        engineArgs.push("--ci");
-    if (!options.json) {
-        // 라이선스 상태 출력 (human mode)
-        const planIcon = entitlements.planEffective === "PRO" ? "🔑" : "🆓";
-        console.log(`${planIcon} ${licenseMessage}`);
-        console.log("");
-    }
-    // ============================================================
-    // BitNet Pre-check (AI Auditor Agent)
-    // ============================================================
-    let bitnetPreCheck = null;
-    try {
-        bitnetPreCheck = await bitnetCheck({ files: [], context: "" });
-        if (!options.json && bitnetPreCheck.verdict !== "GO") {
-            const emoji = bitnetPreCheck.verdict === "WARNING" ? "⚠️" : "❌";
-            console.log(`${emoji} BitNet Pre-check: ${bitnetPreCheck.verdict}`);
-            console.log(`  ${bitnetPreCheck.reason}`);
-            if (bitnetPreCheck.next_actions.length > 0) {
-                console.log(`  Recommended: ${bitnetPreCheck.next_actions[0]}`);
-            }
-            console.log("");
-        }
-    }
-    catch {
-        // BitNet 실패는 무시 (FAIL-SAFE)
-    }
-    if (vpmBackPath) {
-        try {
-            const result = await runEngine(vpmBackPath, engineArgs, {
-                timeout: options.timeout,
-                cwd: workspace,
-                env: engineEnv,
-            });
-            if (result.code !== 0) {
-                try {
-                    const runDir = getPmRunDir(workspace, runId);
-                    const logPath = path.join(runDir, "artifacts", "engine_stderr.log");
-                    fs.mkdirSync(path.dirname(logPath), { recursive: true });
-                    fs.writeFileSync(logPath, String(result.stderr || result.stdout || ""), "utf-8");
-                }
-                catch {
-                    // ignore
-                }
-            }
-        }
-        catch {
-            // ignore (fallback below)
-        }
-    }
-    // Ensure mandatory artifacts exist (FAIL-SAFE: generate locally if engine didn't produce them).
-    ensureGateAndClinicFiles({ workspaceRoot: workspace, runId, timeoutSeconds: options.timeout });
-    // 7. 결과 파일 읽기
-    const runsDir = resolvePmRunDirForRead(workspace, runId);
-    const gateResult = readJsonFile(path.join(runsDir, "gate", "spec_gate_result.json"));
-    const clinicResult = readJsonFile(path.join(runsDir, "clinic", "clinic_result.json"));
-    // 7.5. Skeleton Map 읽기 (FAIL-SAFE: 없어도 진행)
-    const skeletonResult = readSkeletonMapSummary(runsDir);
-    const skeletonField = buildSkeletonField(skeletonResult, runsDir);
-    // 8. Verdict 합성
-    const baseVerdict = synthesizeVerdict(gateResult, clinicResult);
-    const violationBundle = extractViolations(gateResult, clinicResult);
-    const ciViolations = violationBundle.ci;
-    const syncViolations = violationBundle.sync;
-    const gateVerdict = gateResult?.verdict ?? "BLOCK";
-    const clinicVerdict = clinicResult?.verdict ?? "BLOCK";
-    // 8.5. Reviewer UX 데이터 수집
-    const decisionLog = readDecisionLog(workspace, runId);
-    const hotspots = getHotspotFiles(workspace);
-    // 8.5.5. Spec Map enforcement (FAIL-SAFE)
-    try {
-        const specMapInfo = loadSpecMapSafe(workspace);
-        const modifiedFiles = getModifiedFiles(workspace);
-        if (specMapInfo && modifiedFiles.length > 0) {
-            const match = matchSpecMap(specMapInfo.specMap, modifiedFiles);
-            const hasSpecRefs = decisionLog.some((e) => Array.isArray(e.spec_refs) && e.spec_refs.length > 0);
-            if (match.matchedSpecIds.size > 0 && !hasSpecRefs) {
-                const msg = missingDecisionMessage();
-                const v = {
-                    type: msg.type,
-                    severity: msg.severity,
-                    title: msg.title,
-                    path: "project",
-                    userMessage: msg.userMessage,
-                    recovery_hint: msg.recovery,
-                };
-                ciViolations.push(v);
-                syncViolations.push({
-                    type: v.type,
-                    severity: v.severity,
-                    title: v.title,
-                    path: v.path,
-                    userMessage: v.userMessage,
-                    recovery_hint: v.recovery_hint,
-                    detected_at: new Date().toISOString(),
-                });
-            }
-            if (match.unmappedFiles.length > 0 && specMapInfo.specMap.unmapped_policy !== "GO") {
-                const sev = specMapInfo.specMap.unmapped_policy === "BLOCK" ? "BLOCK" : "FIX";
-                const v = {
-                    type: "SPEC_MAP_UNMAPPED",
-                    severity: sev,
-                    title: "⚠️ Unmapped Spec Map changes",
-                    path: "project",
-                    userMessage: `Found ${match.unmappedFiles.length} changed file(s) not mapped in spec_map.`,
-                    recovery_hint: `Add the file(s) (glob) to ${specMapInfo.pathRel}.`,
-                };
-                ciViolations.push(v);
-                syncViolations.push({
-                    type: v.type,
-                    severity: v.severity,
-                    title: v.title,
-                    path: v.path,
-                    userMessage: v.userMessage,
-                    recovery_hint: v.recovery_hint,
-                    detected_at: new Date().toISOString(),
-                });
-            }
-        }
-    }
-    catch {
-        // ignore
-    }
-    // 8.5.6. Mapping Guard (소속 없는 변경 방지)
-    let mappingResult = null;
-    try {
-        if (hasSpecMap(workspace)) {
-            mappingResult = runMappingPipeline({
-                workspaceRoot: workspace,
-                run_id: runId,
-            });
-            // Map verdict violations to CI violations
-            if (mappingResult.decision.verdict !== "GO") {
-                for (const violation of mappingResult.changeMap.violations) {
-                    const sev = violation.severity === "BLOCK" ? "BLOCK" : "FIX";
-                    const v = {
-                        type: `MAPPING_${violation.code}`,
-                        severity: sev,
-                        title: violation.severity === "BLOCK" ? "🛑 Boundary violation" : "⚠️ Mapping required",
-                        path: violation.file ?? "project",
-                        userMessage: violation.detail,
-                        recovery_hint: mappingResult.decision.navigation?.[0] ?? "Check spec_map.v1.json or code ownership.",
-                    };
-                    ciViolations.push(v);
-                    syncViolations.push({
-                        type: v.type,
-                        severity: v.severity,
-                        title: v.title,
-                        path: v.path,
-                        userMessage: v.userMessage,
-                        recovery_hint: v.recovery_hint,
-                        detected_at: new Date().toISOString(),
-                    });
-                }
-            }
-        }
-    }
-    catch {
-        // Mapping Guard 실패는 무시 (FAIL-SAFE)
-    }
-    // 8.5.7. Repeat Risk (7일 내 동일 위반 3회+ → BLOCK)
-    try {
-        const seen = new Set();
-        for (const v of ciViolations) {
-            const key = `${v.path}::${v.type}`;
-            if (seen.has(key))
-                continue;
-            seen.add(key);
-            const prev = getRepeatCount(workspace, { path: v.path, type: v.type, runId });
-            // prev >= 2 means this is 3rd+ occurrence including current
-            if (prev >= 2) {
-                const repeatV = {
-                    type: "ITERATION_LIMIT",
-                    severity: "BLOCK",
-                    title: "🛑 Repeated failure 3+ times",
-                    path: v.path,
-                    userMessage: `Same violation (${v.type}) occurred ${prev + 1} times in the last 7 days.`,
-                    recovery_hint: "Return to Decision phase and reconsider the design/approach.",
-                };
-                ciViolations.push(repeatV);
-                syncViolations.push({
-                    type: repeatV.type,
-                    severity: repeatV.severity,
-                    title: repeatV.title,
-                    path: repeatV.path,
-                    userMessage: repeatV.userMessage,
-                    recovery_hint: repeatV.recovery_hint,
-                    detected_at: new Date().toISOString(),
-                });
-            }
-        }
-    }
-    catch {
-        // ignore
-    }
-    const verdict = maxVerdict(baseVerdict, verdictFromCiViolations(ciViolations));
-    // 8.6. BitNet Post-check (AI Auditor Agent)
-    let bitnetPostCheck = null;
-    try {
-        // Post-check with synthesized verdict context
-        const contextInfo = `verdict: ${verdict}, gate: ${gateResult?.verdict}, clinic: ${clinicResult?.verdict}`;
-        bitnetPostCheck = await bitnetCheck({ files: [], context: contextInfo });
-    }
-    catch {
-        // BitNet 실패는 무시 (FAIL-SAFE)
-    }
-    // 8.7. Build BitNet Advisory
-    let bitnetAdvisory;
-    if (bitnetPreCheck || bitnetPostCheck) {
-        const traceId = bitnetPostCheck?.trace_id || bitnetPreCheck?.trace_id || "";
-        bitnetAdvisory = {
-            trace_id: traceId,
-            pre_check: bitnetPreCheck ? {
-                verdict: bitnetPreCheck.verdict,
-                risk_tags: bitnetPreCheck.risk_tags,
-                reason: bitnetPreCheck.reason,
-            } : null,
-            post_check: bitnetPostCheck ? {
-                verdict: bitnetPostCheck.verdict,
-                risk_tags: bitnetPostCheck.risk_tags,
-                reason: bitnetPostCheck.reason,
-            } : null,
-            next_actions: bitnetPostCheck?.next_actions || bitnetPreCheck?.next_actions || [],
-            review_focus: bitnetPostCheck?.review_focus || bitnetPreCheck?.review_focus || [],
-        };
-    }
-    // 9. Summary 생성
-    const summary = {
-        schema_version: "ci_summary.v1",
-        run_id: runId,
-        timestamp: new Date().toISOString(),
-        verdict: {
-            final: verdict,
-            gate: gateVerdict,
-            clinic: clinicVerdict,
-            exit_code: EXIT_CODES[verdict],
-        },
-        violations: ciViolations.length > 0 ? ciViolations : undefined,
-        metrics: {
-            gate_issue_count: gateResult?.violations?.length ?? 0,
-            ralph_iterations: clinicResult?.iterations ?? 0,
-            lines_changed: clinicResult?.lines_changed ?? 0,
-        },
-        preprocess_summary: getPreprocessSummary(workspace, runId),
-        skeleton: skeletonField,
-        token_roi: {
-            saved_by_skeleton: skeletonField.saved_by_skeleton ?? 0,
-        },
-        artifacts: {
-            gate_result: "gate/spec_gate_result.json",
-            clinic_result: "clinic/clinic_result.json",
-            skeleton_map_summary: skeletonField.artifact_path ? "ci/skeleton_map_summary.json" : null,
-            sync_packet: null,
-        },
-    };
-    // 9.5. ci_summary.json 저장
-    const ciSummaryDir = path.join(runsDir, "ci");
-    const ciSummaryPath = path.join(ciSummaryDir, "ci_summary.json");
-    try {
-        fs.mkdirSync(ciSummaryDir, { recursive: true });
-        fs.writeFileSync(ciSummaryPath, JSON.stringify(summary, null, 2));
-    }
-    catch {
-        // ci_summary 저장 실패는 무시 (검증 결과에 영향 없음)
-    }
-    // 10. 출력
-    // Derived artifacts (FAIL-SAFE)
-    writeHtmlReportFromCiSummarySafe(ciSummaryPath, { projectRootAbs: workspace });
-    try {
-        saveEvidenceReportFromRunDir(runsDir, runId, {
-            ci_provider: options.ciProvider ?? undefined,
-            pr_number: options.prNumber ?? undefined,
-            commit_sha: options.commitSha ?? undefined,
-            branch: options.branch ?? undefined,
-        });
-        savePrCommentFromRunDir(runsDir, runId, {
-            ci_provider: options.ciProvider ?? undefined,
-            pr_number: options.prNumber ?? undefined,
-            commit_sha: options.commitSha ?? undefined,
-            branch: options.branch ?? undefined,
-        }, skeletonField, decisionLog, hotspots);
-    }
-    catch {
-        // ignore
-    }
-    renderOutput(summary, options.json, { plan: entitlements.planEffective, licenseMessage, bitnet: bitnetAdvisory });
-    // 11. Deep Link 출력 (위반 사항 있을 경우)
-    const violations = ciViolations;
-    if (!options.json && violations.length > 0) {
-        renderViolationLinks(violations, workspace);
-    }
-    // 12. Evidence Report 링크 표시
-    const reportPath = path.join(runsDir, "ci", "evidence_report.md");
-    if (!options.json && fs.existsSync(reportPath)) {
-        renderSummaryWithLink(verdict, reportPath, violations.length);
-    }
-    // 13. Review History 기록 (FIX/BLOCK 시)
-    if (verdict !== "GO" && violations.length > 0) {
-        const violationPaths = violations
-            .filter((v) => v.path && v.path !== "project")
-            .map((v) => ({ path: v.path, type: v.type }));
-        recordReviewHistory(workspace, runId, verdict, violationPaths);
-    }
-    // 14. Background Sync: SyncPacket 생성 및 큐잉 (PRO Only)
-    if (entitlements.switches.cloudSync) {
-        try {
-            const token = await resolveCloudSyncToken();
-            if (!token)
-                throw new Error("cloud sync token missing");
-            const syncManager = new SyncManager({
-                authToken: token,
-                endpoint: process.env.VIBE_CLOUD_SYNC_ENDPOINT || undefined,
-            });
-            const syncGate = {
-                verdict: gateVerdict,
-                issues: gateResult?.violations?.map((v) => ({
-                    type: v.id,
-                    severity: gateVerdict === "BLOCK" ? "BLOCK" : "FIX",
-                    message: v.msg,
-                    path: v.path,
-                })),
-            };
-            const syncClinic = {
-                verdict: clinicVerdict,
-                status: clinicResult?.status ?? (clinicVerdict === "GO" ? "SUCCESS" : clinicVerdict === "FIX" ? "FAILED" : "ESCALATED"),
-                ralph_iterations: clinicResult?.iterations ?? 0,
-                lines_changed: clinicResult?.lines_changed ?? 0,
-            };
-            await syncManager.queueRun({ runId, gateResult: syncGate, clinicResult: syncClinic, violations: syncViolations }, token);
-            // fire-and-forget flush
-            syncManager.flush().catch(() => { });
-        }
-        catch {
-            // Sync 실패는 무시 (Fire-and-Forget)
-        }
-    }
-    // 15. DB Sync (best-effort, P0-1: rail 고정 = 'local')
-    if (isDbSyncEnabled()) {
-        try {
-            const wsId = generateWorkspaceId(workspace);
-            await syncLocalRun({
-                rail: "local",
-                workspaceId: wsId,
-                runId: runId,
-                runDir: runsDir,
-            });
-        }
-        catch (err) {
-            // sync 실패해도 CI 결과는 유지 (best-effort)
-            if (!options.json) {
-                console.warn(`[db_sync] sync failed: ${err instanceof Error ? err.message : String(err)}`);
-            }
-        }
-    }
-    // 16. Exit
-    process.exit(EXIT_CODES[verdict]);
-}
-// ============================================================
-// CI Provider Detection
-// ============================================================
-function detectCiProvider() {
-    if (process.env.GITHUB_ACTIONS)
-        return "github";
-    if (process.env.GITLAB_CI)
-        return "gitlab";
-    if (process.env.BITBUCKET_BUILD_NUMBER)
-        return "bitbucket";
-    if (process.env.JENKINS_URL)
-        return "jenkins";
-    if (process.env.CI)
-        return "generic";
-    return undefined;
-}
-// ============================================================
-// Cloud Sync (FAIL-SAFE)
-// ============================================================
-async function resolveCloudSyncToken() {
-    const env = (process.env.VIBE_CLOUD_SYNC_TOKEN || "").trim();
-    if (env)
-        return env;
-    try {
-        const cached = await new TokenCache().get();
-        return cached?.token ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-async function flushCloudSyncQueueInBackground() {
-    try {
-        const token = await resolveCloudSyncToken();
-        if (!token)
-            return;
-        const syncManager = new SyncManager({
-            authToken: token,
-            endpoint: process.env.VIBE_CLOUD_SYNC_ENDPOINT || undefined,
-        });
-        await syncManager.flush();
-    }
-    catch {
-        // ignore
-    }
-}
-// ============================================================
-// Violation Extractor
-// ============================================================
-function extractViolations(gate, clinic) {
-    const ciViolations = [];
-    const syncViolations = [];
-    const now = new Date().toISOString();
-    const knownTypes = new Set([
-        "PATH_VIOLATION",
-        "READ_ONLY_VIOLATION",
-        "COMMAND_SAFETY",
-        "LICENSE_RESTRICTION",
-        "ITERATION_LIMIT",
-        "SCOPE_DRIFT",
-        "MISSING_WORK_ORDER",
-        "MISSING_DECISION",
-    ]);
-    function clampTitle(v) {
-        const s = (v || "").trim();
-        if (s.length <= 100)
-            return s || "Violation";
-        return s.slice(0, 97) + "...";
-    }
-    function buildCorrection(type, ctx) {
-        if (!knownTypes.has(type))
-            return null;
-        const t = type;
-        const attemptedPath = ctx.path ?? "project";
-        const allowPaths = ctx.clinic?.policy?.allow_paths ?? [];
-        const maxIterations = ctx.clinic?.policy?.max_iterations ?? 10;
-        const currentIter = ctx.clinic?.iterations ?? maxIterations;
-        switch (t) {
-            case "PATH_VIOLATION":
-                return pathViolationMessage(attemptedPath, "RED", allowPaths);
-            case "READ_ONLY_VIOLATION":
-                return readOnlyViolationMessage(attemptedPath);
-            case "ITERATION_LIMIT":
-                return iterationLimitMessage(currentIter, maxIterations);
-            case "SCOPE_DRIFT":
-                return scopeDriftMessage([attemptedPath], allowPaths);
-            case "MISSING_WORK_ORDER":
-                return missingWorkOrderMessage();
-            case "MISSING_DECISION":
-                return missingDecisionMessage();
-            default:
-                return null;
-        }
-    }
-    function push(base) {
-        ciViolations.push(base);
-        syncViolations.push({
-            type: base.type,
-            severity: base.severity,
-            title: base.title,
-            path: base.path,
-            userMessage: base.userMessage,
-            recovery_hint: base.recovery_hint,
-            detected_at: now,
-            ...(typeof base.line === "number" ? { line: base.line } : {}),
-        });
-    }
-    // Gate 위반 추출
-    for (const v of gate?.violations ?? []) {
-        const type = (v.id || "UNKNOWN").trim();
-        const p = (v.path || "project").trim();
-        const corr = buildCorrection(type, { path: p, clinic: clinic ?? undefined });
-        push({
-            type,
-            severity: corr?.severity ?? (gate?.verdict === "BLOCK" ? "BLOCK" : "FIX"),
-            title: clampTitle(corr?.title ?? v.msg ?? type),
-            path: p,
-            userMessage: corr?.userMessage ?? v.msg,
-            recovery_hint: corr?.recovery ?? undefined,
-        });
-    }
-    // Clinic 위반 추출
-    for (const r of clinic?.reasons ?? []) {
-        const type = (r.id || "UNKNOWN").trim();
-        const p = (r.path || "project").trim();
-        const corr = buildCorrection(type, { path: p, clinic: clinic ?? undefined });
-        push({
-            type,
-            severity: corr?.severity ?? (clinic?.verdict === "BLOCK" ? "BLOCK" : "FIX"),
-            title: clampTitle(corr?.title ?? r.msg ?? type),
-            path: p,
-            line: typeof r.line === "number" ? r.line : undefined,
-            userMessage: corr?.userMessage ?? r.msg,
-            recovery_hint: corr?.recovery ?? undefined,
-        });
-    }
-    return { ci: ciViolations, sync: syncViolations };
-}
-main().catch((err) => {
-    console.error("ERROR:", err.message);
+import { main, EXIT_CODES } from '../ci/pipeline.js';
+main().catch(err => {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error('ERROR:', msg);
     process.exit(EXIT_CODES.ERROR);
 });