mancode 0.3.1 → 0.3.2

package/dist/cli.js

@@ -295,14 +295,15 @@ var HEAD_COACH_AGENT = {
 - \u5E94\u7528 YAGNI \u539F\u5219\uFF1A\u5DF2\u5B58\u5728 \u2192 \u590D\u7528 \u2192 \u6807\u51C6\u5E93 \u2192 \u5DF2\u88C5\u4F9D\u8D56 \u2192 \u4E00\u884C \u2192 \u6700\u5C0F\u5B9E\u73B0
 
 **\u4FEE\u590D\u9636\u6BB5**\uFF08Film Analyst \u53CD\u9988\u540E\uFF09\uFF1A
-- \u53EA\u4FEE\u590D\u53CD\u9988\u6307\u51FA\u7684\u95EE\u9898
+- \u6C47\u603B\u6240\u9700\u5BA1\u67E5\u9886\u57DF\u7684 blocker\uFF0C\u53EA\u505A\u4E00\u8F6E\u4FEE\u590D\u5E76\u901A\u8FC7 review ledger \u8BB0\u5F55
+- \u53EA\u4FEE\u590D\u53CD\u9988\u6307\u51FA\u7684 blocker\uFF1B\u{1F7E1}/\u{1F7E2} \u53EA\u8BB0\u5F55\u6743\u8861\uFF0C\u4E0D\u81EA\u52A8\u6269\u5927 diff
 - **\u4E0D\u5728\u539F\u4EE3\u7801\u4E0A\u8FC7\u5EA6\u4FEE\u590D**
 - \u4F18\u5148\u7EA7\uFF1A\u{1F534} \u5FC5\u4FEE > \u{1F7E1} \u5EFA\u8BAE > \u{1F7E2} \u53EF\u9009
 
 **\u6536\u5C3E\u9636\u6BB5**\uFF1A
-- \u4FEE\u590D Film #2 \u7684\u5168\u90E8 \u{1F534} \u95EE\u9898\uFF0C\u518D\u91CD\u8DD1 build/lint/typecheck/test \u548C\u5FC5\u8981 smoke test\u3002
-- \u751F\u6210 summary\uFF1A\u6539\u52A8/\u65B0\u5EFA\u6587\u4EF6\u3001\u590D\u7528\u8D44\u6E90\u3001\u9A8C\u8BC1\u7ED3\u679C\u3001\u53CC\u5BA1\u95EE\u9898\u5904\u7F6E\u3001\u8DF3\u8FC7\u6B65\u9AA4\u548C\u6B8B\u4F59\u98CE\u9669\u3002
-- \u53EA\u6709\u9A8C\u8BC1\u901A\u8FC7\u4E14 \u{1F534} \u6E05\u96F6\u624D\u5EFA\u8BAE \`completed\`\uFF1B\u5426\u5219\u5199 \`blocked\` \u4E0E\u660E\u786E blockingReason\u3002
+- \u4E00\u8F6E\u4FEE\u590D\u540E\u91CD\u8DD1\u53D7\u5F71\u54CD\u7684 build/lint/typecheck/test \u548C\u5FC5\u8981 smoke test\uFF0C\u4E0D\u91CD\u590D\u8FD0\u884C\u5DF2\u5B8C\u6210 reviewer\u3002
+- \u751F\u6210 summary\uFF1A\u6539\u52A8/\u65B0\u5EFA\u6587\u4EF6\u3001\u590D\u7528\u8D44\u6E90\u3001\u9A8C\u8BC1\u7ED3\u679C\u3001\u5BA1\u67E5\u6DF1\u5EA6\u3001\u95EE\u9898\u5904\u7F6E\u3001\u8DF3\u8FC7\u6B65\u9AA4\u548C\u6B8B\u4F59\u98CE\u9669\u3002
+- \u53EA\u6709\u9A8C\u8BC1\u901A\u8FC7\u3001\u6240\u9700\u5BA1\u67E5\u9886\u57DF\u5B8C\u6210\u4E14 blocker \u6E05\u96F6\u624D\u5EFA\u8BAE \`completed\`\uFF1B\u5426\u5219\u5199 \`blocked\` \u4E0E\u660E\u786E blockingReason\u3002
 - \u5C06\u5173\u952E\u51B3\u7B56\u4EA4\u7ED9\u8C03\u7528\u65B9 appendTeamDecision\uFF0C\u5E76\u66F4\u65B0 Active Plans\u3002
 - \u5408\u5E76 worktree \u524D\u53D6\u5F97\u7528\u6237\u786E\u8BA4\uFF1B\u6E05\u7406\u4E34\u65F6\u6587\u4EF6\u3002
 
@@ -331,6 +332,8 @@ var FILM_ANALYST_OFFENSE_AGENT = {
   - \u{1F7E1} \u5EFA\u8BAE\uFF08\u5E94\u8BE5\u4FEE\uFF09
   - \u{1F7E2} \u53EF\u9009\uFF08\u53EF\u4EE5\u4E0D\u4FEE\uFF09
 - \u6700\u540E\u7ED9\u8BC4\u5206\uFF081-10\uFF09+ \u901A\u8FC7 / \u4E0D\u901A\u8FC7
+- \u53EA\u5BA1\u67E5\u672C\u6B21 diff\u3001\u7528\u6237\u9700\u6C42\u548C\u76F4\u63A5\u53D7\u5F71\u54CD\u8DEF\u5F84\uFF1B\u6700\u591A 3 \u4E2A\u65B0\u95EE\u9898
+- \u6BCF\u4E2A\u95EE\u9898\u5FC5\u987B\u5305\u542B\u6539\u52A8\u884C\u3001\u53EF\u6838\u67E5\u8BC1\u636E\u548C\u7528\u6237\u5F71\u54CD\u3002\u6CA1\u6709\u8BC1\u636E\u7684 checklist \u9879\u4E0D\u8F93\u51FA
 
 ## \u4F60\u4E0D\u5199\u4EE3\u7801
 
@@ -388,6 +391,8 @@ var FILM_ANALYST_OFFENSE_AGENT = {
 - \u4E0D\u8981\u5EFA\u8BAE**\u4E0E\u9879\u76EE\u98CE\u683C\u4E0D\u7B26**\u7684\u6539\u52A8
 - \u4E0D\u8981\u5EFA\u8BAE**\u63A8\u6D4B\u6027\u529F\u80FD**\u6216**\u8FC7\u5EA6\u62BD\u8C61**
 - \u4E0D\u8981"\u987A\u4FBF\u5EFA\u8BAE"\u548C\u5F53\u524D\u4EFB\u52A1\u65E0\u5173\u7684\u4E8B
+- \u4E0D\u8981\u56E0\u4E3A\u7F3A\u5C11\u901A\u7528 loading\u3001\u9519\u8BEF\u683C\u5F0F\u6216\u56DE\u5F52\u6D4B\u8BD5\u800C\u673A\u68B0\u8BC4\u8BBA\uFF1B\u53EA\u6709\u672C\u6B21\u884C\u4E3A\u786E\u5B9E\u5F15\u5165\u76F8\u5E94\u8DEF\u5F84\u4E14\u6709\u8BC1\u636E\u65F6\u624D\u62A5\u544A
+- \u540C\u4E00\u6839\u56E0\u53EA\u62A5\u4E00\u6B21\uFF1B\u{1F534} \u4F7F\u7528\u7A33\u5B9A ID\uFF08Q1\u3001Q2\u2026\u2026\uFF09\uFF0C\u4F9B review ledger \u53BB\u91CD\u548C\u6536\u5C3E
 
 \u6536\u5230\u4EE3\u7801\u540E\u7ACB\u5373\u5F00\u59CB\u5BA1\u67E5\u3002\u62A5\u544A\u5B8C\u6574\u5373\u53EF\u3002`
 };
@@ -411,6 +416,8 @@ var FILM_ANALYST_DEFENSE_AGENT = {
   - \u{1F7E2} \u53EF\u9009\uFF08\u52A0\u56FA\u5EFA\u8BAE\uFF09
 - **\u5B89\u5168\u95EE\u9898\u4E00\u5F8B \u{1F534}**
 - \u6700\u540E\u7ED9\u8BC4\u5206\uFF081-10\uFF09+ \u901A\u8FC7 / \u4E0D\u901A\u8FC7
+- \u53EA\u5BA1\u67E5\u672C\u6B21 diff\u3001\u7528\u6237\u9700\u6C42\u548C\u76F4\u63A5\u53D7\u5F71\u54CD\u8DEF\u5F84\uFF1B\u6700\u591A 3 \u4E2A\u65B0\u95EE\u9898
+- \u6BCF\u4E2A\u95EE\u9898\u5FC5\u987B\u5305\u542B\u6539\u52A8\u884C\u3001\u53EF\u6838\u67E5\u8BC1\u636E\u548C\u7528\u6237\u5F71\u54CD
 
 ## \u4F60\u4E0D\u5199\u4EE3\u7801
 
@@ -462,8 +469,7 @@ var FILM_ANALYST_DEFENSE_AGENT = {
 
 ## \u4E0D\u8981\u91CD\u590D Film Analyst #1 \u7684\u53CD\u9988
 
-\u5982\u679C #1 \u5DF2\u7ECF\u6307\u51FA\u7684\u53EF\u8BFB\u6027 / DRY / \u590D\u6742\u5EA6\u95EE\u9898\uFF0C**\u4E0D\u8981\u518D\u8BF4**\u3002
-\u4F60\u4E13\u6CE8\u8FB9\u754C\u3001\u5B89\u5168\u3001\u6027\u80FD\u3001\u8D44\u6E90\u3002
+\u5F00\u59CB\u524D\u5FC5\u987B\u8BFB\u53D6 \`review-scope.md\` \u548C \`film-report-1.md\`\u3002\u5982\u679C #1 \u5DF2\u7ECF\u6307\u51FA\u76F8\u540C\u6839\u56E0\uFF0C\u6807\u8BB0\u4E3A \`duplicate\` \u5E76\u4E14\u4E0D\u8981\u91CD\u65B0\u8F93\u51FA\u4E3A finding\u3002\u4F60\u53EA\u4E13\u6CE8\u8FB9\u754C\u3001\u5B89\u5168\u3001\u6027\u80FD\u3001\u8D44\u6E90\uFF1B\u{1F534} \u4F7F\u7528\u7A33\u5B9A ID\uFF08D1\u3001D2\u2026\u2026\uFF09\u3002
 
 ## \u7EA2\u7EBF
 
@@ -757,23 +763,19 @@ var SOLO_SKILL = `# mancode \xB7 solo mode
 4. \u4EE5\u9879\u76EE\u65E2\u6709\u7684\u65E0\u969C\u788D\u3001\u54CD\u5E94\u5F0F\u4E0E\u53CD\u9988\u65B9\u5F0F\u4E3A\u51C6
 
 ### \u754C\u9762\u8D28\u91CF\u68C0\u67E5\uFF08\u6761\u4EF6\u6267\u884C\uFF09
-UI \u8F93\u51FA\u524D\u81EA\u68C0\uFF1A
-- \u662F\u5426\u590D\u7528\u4E86\u9879\u76EE\u5B9E\u9645\u7684\u5C42\u7EA7\u3001\u95F4\u8DDD\u3001\u989C\u8272\u3001\u5B57\u4F53\u4E0E\u4EA4\u4E92\u53CD\u9988\uFF1F
-- \u4FE1\u606F\u5C42\u7EA7\u3001\u7A7A/\u52A0\u8F7D/\u9519\u8BEF\u72B6\u6001\u548C\u952E\u76D8/\u8BFB\u5C4F\u53EF\u8FBE\u6027\u662F\u5426\u6E05\u695A\uFF1F
-- \u662F\u5426\u4E3A\u4E86\u201C\u597D\u770B\u201D\u5F15\u5165\u4E0E\u73B0\u6709\u4EA7\u54C1\u65E0\u5173\u7684\u88C5\u9970\u3001\u52A8\u753B\u6216\u7EC4\u4EF6\uFF1F
+\u53EA\u68C0\u67E5\u672C\u6B21 diff \u65B0\u589E\u6216\u6539\u53D8\u7684\u754C\u9762\u884C\u4E3A\uFF1A\u590D\u7528\u5DF2\u6709\u5C42\u7EA7\u3001token \u548C\u7EC4\u4EF6\uFF1B\u65B0\u589E\u5F02\u6B65\u6216\u4EA4\u4E92\u8DEF\u5F84\u65F6\u624D\u68C0\u67E5\u5BF9\u5E94\u7684\u52A0\u8F7D\u3001\u5931\u8D25\u548C\u53EF\u8FBE\u6027\u72B6\u6001\u3002\u4E0D\u8981\u501F UI \u81EA\u68C0\u5DE1\u67E5\u672A\u6539\u52A8\u9875\u9762\u6216\u8865\u9F50\u63A8\u6D4B\u6027\u72B6\u6001\u3002
 
 ### \u9A8C\u8BC1
 \u4EE3\u7801\u5B8C\u6210\u540E\uFF1A
-1. \u8FD0\u884C build\uFF08\u5982\u6709\uFF09
-2. \u8FD0\u884C lint\uFF08\u5982\u6709\uFF09
-3. \u8FD0\u884C test\uFF08\u5982\u6709\uFF09
-4. \u786E\u8BA4\u901A\u8FC7\u540E\u624D\u58F0\u79F0\u5B8C\u6210
+1. \u9009\u62E9\u4E0E\u672C\u6B21\u6539\u52A8\u76F4\u63A5\u76F8\u5173\u7684\u6700\u7A84 test\u3001lint\u3001typecheck\u3001build \u6216 smoke check
+2. \u6587\u6848\u3001\u6CE8\u91CA\u6216\u7EAF\u9759\u6001\u8D44\u6E90\u6539\u52A8\u4E0D\u5F3A\u5236\u8FD0\u884C\u5B8C\u6574\u6D4B\u8BD5\u77E9\u9635
+3. \u786E\u8BA4\u5B9E\u9645\u6267\u884C\u7ED3\u679C\u540E\u624D\u58F0\u79F0\u5B8C\u6210
 
-### \u5B8C\u6210\u540E\u81EA\u5BA1\u4E0E\u6A21\u5F0F\u63A8\u8350
-- \u9A8C\u8BC1\u7C7B\u95EE\u9898\uFF08build/lint/test \u5931\u8D25\u3001\u9057\u7559 debug\uFF09\u76F4\u63A5\u4FEE\u590D\u5E76\u590D\u9A8C\u3002
-- \u98CE\u683C\u7C7B\u95EE\u9898\uFF08\u547D\u540D\u3001\u53EF\u8BFB\u6027\u3001DRY\uFF09\u53EA\u63D0\u793A\uFF0C\u4E0D\u4E3A\u6B64\u6269\u5927\u65E0\u5173\u6539\u52A8\u3002
-- \u52A8\u624B\u524D\u82E5\u6D89\u53CA 3 \u4E2A\u4EE5\u4E0A\u6587\u4EF6\u3001\u65B0\u6A21\u5757\u6216\u67B6\u6784\u53D8\u52A8\uFF0C\u7528\u4E00\u53E5\u8BDD\u5EFA\u8BAE\u7528\u6237\u5148\u7528 \`/man\`\uFF1B\u7528\u6237\u8BF4\u201C\u7EE7\u7EED solo\u201D\u5373\u53EF\u8DF3\u8FC7\u3002
-- \u81EA\u5BA1\u53D1\u73B0 3 \u4E2A\u4EE5\u4E0A\u95EE\u9898\u65F6\uFF0C\u5EFA\u8BAE \`/manps\` \u6216 \`/man\`\u3002
+### \u5B8C\u6210\u540E\u7684\u4E00\u6B21\u53D7\u9650\u81EA\u68C0
+- \u53EA\u505A\u4E00\u6B21\uFF0C\u53EA\u770B\u672C\u6B21 diff\u3001\u9700\u6C42\u548C\u76F4\u63A5\u53D7\u5F71\u54CD\u8DEF\u5F84\uFF1B\u4E0D\u8C03\u7528\u989D\u5916 reviewer\uFF0C\u4E0D\u751F\u6210\u5BA1\u67E5\u62A5\u544A\uFF0C\u4E0D\u91CD\u590D\u5DE1\u68C0\u3002
+- \u9A8C\u8BC1\u5931\u8D25\u3001\u884C\u4E3A\u56DE\u5F52\u6216\u9057\u7559 debug \u53EF\u76F4\u63A5\u4FEE\u590D\u5E76\u590D\u9A8C\uFF1B\u590D\u9A8C\u4E0D\u662F\u65B0\u4E00\u8F6E review\u3002
+- \u547D\u540D\u3001\u53EF\u8BFB\u6027\u3001DRY\u3001loading/error \u5F62\u5F0F\u7B49\u5EFA\u8BAE\u4E0D\u81EA\u52A8\u6269\u5927\u6539\u52A8\uFF1B\u4E0E\u9700\u6C42\u65E0\u5173\u65F6\u4E0D\u8F93\u51FA\u3002
+- \u53EA\u6709\u9274\u6743\u3001\u652F\u4ED8\u3001\u654F\u611F\u6570\u636E\u3001\u8FC1\u79FB/\u5220\u9664\u3001\u516C\u5F00 API\u3001\u672A\u53EF\u4FE1\u8F93\u5165\u3001\u5E76\u53D1\u6216\u57FA\u7840\u8BBE\u65BD\u7B49\u786C\u98CE\u9669\u51FA\u73B0\u65F6\uFF0C\u624D\u7528\u4E00\u53E5\u8BDD\u5EFA\u8BAE \`/man\`\uFF1B\u7528\u6237\u8BF4\u201C\u7EE7\u7EED solo\u201D\u5373\u53EF\u7EE7\u7EED\u3002
 
 ## \u4F60\u7684\u98CE\u683C
 
@@ -833,21 +835,24 @@ var MAN_SKILL = {
 
 \u8FD0\u884C\u5B9E\u9645 build/lint/typecheck/test \u548C smoke test\u3002\u76F8\u540C\u4EE3\u7801\u3001\u73AF\u5883\u3001\u547D\u4EE4\u4E0B\u76F8\u540C\u9519\u8BEF\u7B7E\u540D\u5931\u8D25\u4E24\u6B21\uFF0C\u505C\u6B62\u76F2\u8BD5\u5E76\u8BCA\u65AD\u6839\u56E0\u3002\u9700\u8981\u771F\u5B9E\u6D4F\u89C8\u5668\u3001\u590D\u6742\u590D\u73B0\u6216\u56DE\u5F52\u65F6\uFF0C\u7528 \`mancode workflow create mamba "<\u95EE\u9898>" --parent-task <taskId> --json\` \u521B\u5EFA\u5B50 workflow\uFF1B\u7236\u4EFB\u52A1\u4FDD\u6301 Step 6\u3002\u5B50\u4EFB\u52A1 fixed/verified/no_repro \u540E\u6062\u590D\u672C\u4EFB\u52A1\uFF1B\u82E5\u7236\u66FE\u56E0\u8BE5\u5B50\u4EFB\u52A1 blocked\uFF0C\u5148\u901A\u8FC7 \`workflow update --status in_progress\` \u6062\u590D\uFF0C\u518D\u66F4\u65B0\u81F3 Step 7\u3002blocked \u6216 manual_test_required \u4F1A\u7531 CLI \u81EA\u52A8\u963B\u585E\u7236\u4EFB\u52A1\uFF0C\u4E0D\u5F97\u624B\u6539\u7236 metadata\uFF0C\u4E5F\u4E0D\u5F97\u81EA\u52A8\u8D8A\u8FC7\u4EBA\u5DE5\u9A8C\u8BC1\u8981\u6C42\u3002
 
+\u9A8C\u8BC1\u540E\u57FA\u4E8E**\u5B9E\u9645 diff**\u5199 \`review-scope.md\`\uFF1Abase\u3001\u6539\u52A8\u6587\u4EF6\u3001\u9700\u6C42\u3001\u5DF2\u8DD1\u9A8C\u8BC1\u3001\u786C\u98CE\u9669\u548C\u5BA1\u67E5\u6DF1\u5EA6\u3002\u9274\u6743\u3001\u652F\u4ED8\u3001\u654F\u611F\u6570\u636E\u3001\u8FC1\u79FB/\u5220\u9664\u3001\u516C\u5F00 API\u3001\u672A\u53EF\u4FE1\u8F93\u5165\u3001\u5E76\u53D1\u3001\u8DE8\u670D\u52A1\u6216\u57FA\u7840\u8BBE\u65BD\u547D\u4E2D\u4EFB\u4E00\u9879\u65F6\u7528\u5B8C\u6574\u5BA1\u67E5 \`full\`\uFF1B\u5426\u5219\u7528\u5B9A\u5411\u5BA1\u67E5 \`targeted\`\u3002\u8FD0\u884C \`mancode workflow review <taskId> init --review-depth targeted --review-domain quality\` \u6216 \`--review-depth full\`\u3002\u7528\u6237\u660E\u786E\u8DF3\u8FC7\u5BA1\u67E5\u65F6\u624D\u628A \`review\` \u5199\u5165\u7D2F\u8BA1 skippedSteps\uFF0C\u5E76\u8BB0\u5F55\u6B8B\u4F59\u98CE\u9669\u3002
+
 ### Step 7: Film #1 \u4EE3\u7801\u8D28\u91CF\u5BA1\u67E5\u4E0E\u4FEE\u590D
 
-\u8C03\u7528 \`film-analyst-offense\` \u5BA1\u67E5\u8D28\u91CF\u3001\u590D\u7528\u3001\u590D\u6742\u5EA6\u548C\u6D4B\u8BD5\uFF0C\u5199 \`film-report-1.md\`\uFF1BHead Coach \u4FEE\u590D \u{1F534}\uFF0C\u5BF9 \u{1F7E1} \u5199\u4FEE\u590D\u6216\u6743\u8861\u3002\u5B8C\u6210\u540E\u66F4\u65B0\u81F3 Step 8\u3002
+\u672A\u8DF3\u8FC7 review \u65F6\u8C03\u7528 \`film-analyst-offense\`\uFF0C\u53EA\u5BA1\u67E5\u672C\u6B21 diff \u7684\u884C\u4E3A\u6B63\u786E\u6027\u3001\u590D\u7528\u3001\u590D\u6742\u5EA6\u548C\u6D4B\u8BD5\uFF0C\u5199 \`film-report-1.md\`\u3002\u6BCF\u6761 finding \u5FC5\u987B\u5F15\u7528\u6539\u52A8\u884C\u3001\u7ED9\u51FA\u8BC1\u636E\u548C\u7528\u6237\u5F71\u54CD\uFF1B\u6700\u591A 3 \u4E2A\u65B0 finding\u3002\u7528\u7A33\u5B9A ID\uFF08\u5982 Q1\uFF09\u6807\u8BB0 \u{1F534} blocker\uFF0C\u5E76\u8FD0\u884C \`mancode workflow review <taskId> complete --review-domain quality --report film-report-1.md --blockers Q1,Q2\`\uFF1B\u6CA1\u6709 blocker \u65F6\u4F20\u7A7A\u5B57\u7B26\u4E32\u3002\u6B64\u65F6\u4E0D\u4FEE\u590D\uFF0C\u5148\u5B8C\u6210\u6240\u9700\u5BA1\u67E5\u9886\u57DF\uFF0C\u518D\u66F4\u65B0\u81F3 Step 8\u3002
 
 ### Step 8: Film #2 \u5B89\u5168\u4E0E\u8FB9\u754C\u5BA1\u67E5
 
-\u8C03\u7528 \`film-analyst-defense\` \u5BA1\u67E5\u5B89\u5168\u3001\u6743\u9650\u3001\u9519\u8BEF\u8DEF\u5F84\u3001\u517C\u5BB9\u6027\u548C\u8FB9\u754C\uFF0C\u5199 \`film-report-2.md\`\u3002\u53CC\u5BA1\u9ED8\u8BA4\u6267\u884C\uFF1B\u7528\u6237\u660E\u786E\u8981\u6C42\u624D\u53EF\u8DF3\u8FC7\uFF0C\u901A\u8FC7 CLI \u5199\u5165\u7D2F\u8BA1 skippedSteps \u548C\u6B8B\u4F59\u98CE\u9669\u3002\u5B8C\u6210\u540E\u66F4\u65B0\u81F3 Step 9\u3002
+\`full\` \u624D\u8C03\u7528 \`film-analyst-defense\`\uFF1B\u5B83\u5FC5\u987B\u5148\u8BFB \`review-scope.md\` \u548C \`film-report-1.md\`\uFF0C\u53EA\u5BA1\u67E5\u5B89\u5168\u3001\u6743\u9650\u3001\u9519\u8BEF\u8DEF\u5F84\u3001\u517C\u5BB9\u6027\u3001\u8D44\u6E90\u548C\u8FB9\u754C\u3002\u76F8\u540C\u6839\u56E0\u6807\u8BB0 \`duplicate\`\uFF0C\u4E0D\u5F97\u91CD\u65B0\u62A5\u544A\u3002\u5199 \`film-report-2.md\` \u540E\u4EE5 D1 \u7B49\u7A33\u5B9A blocker ID \u8FD0\u884C \`mancode workflow review <taskId> complete --review-domain security --report film-report-2.md --blockers D1\`\u3002\`targeted\` \u4E0D\u6267\u884C\u7B2C\u4E8C\u5BA1\uFF0C\u4E5F\u4E0D\u628A\u5B83\u63CF\u8FF0\u6210\u201C\u8DF3\u8FC7\u201D\uFF1B\u5B8C\u6210\u540E\u66F4\u65B0\u81F3 Step 9\u3002
 
 ### Step 9: \u589E\u5F3A\u6536\u5C3E
 
-1. \u4FEE\u590D Film #2 \u7684 \u{1F534} \u5E76\u91CD\u8DD1\u9A8C\u8BC1\u3002
-2. \u5199 \`summary.md\`\uFF1A\u6539\u52A8\u3001\u65B0\u5EFA\u3001\u590D\u7528\u3001\u9A8C\u8BC1\u3001\u53CC\u5BA1\u548C\u8DF3\u8FC7\u6B65\u9AA4\u3002
-3. \u9A8C\u8BC1\u901A\u8FC7\u4E14 \u{1F534} \u6E05\u96F6\u624D\u7528 CLI \u5199 \`completed\`\uFF1B\u5426\u5219\u7528 \`--status blocked --blocking-reason "<\u539F\u56E0>"\`\u3002
-4. \u5173\u952E\u51B3\u7B56 appendTeamDecision \u5230 \`decisions.md\`\uFF0C\u66F4\u65B0 Active Plans\u3002
-5. worktree \u5408\u5E76\u524D\u53D6\u5F97\u7528\u6237\u786E\u8BA4\uFF1B\u7EC8\u6001\u5199\u5165\u6210\u529F\u540E state \u56DE solo \u5E76\u6E05\u7A7A workflow \u6307\u9488\u3002
+1. \u5B58\u5728 open blocker \u65F6\uFF0CHead Coach \u4E00\u6B21\u6027\u4FEE\u590D\u5168\u90E8 blocker\uFF0C\u5E76\u7528 \`mancode workflow review <taskId> remediate --resolved Q1,D1\` \u8BB0\u5F55\u552F\u4E00\u4E00\u8F6E\u4FEE\u590D\uFF1B\u6CA1\u6709 blocker \u65F6\u4E0D\u8FD0\u884C remediate\u3002\u4E0D\u8981\u4E3A \u{1F7E1}/\u{1F7E2} \u6269\u5927\u6539\u52A8\u3002
+2. \u91CD\u8DD1\u53D7\u5F71\u54CD\u9A8C\u8BC1\uFF0C\u4E0D\u91CD\u65B0\u8FD0\u884C\u5DF2\u5B8C\u6210\u7684 reviewer\u3002\u4FEE\u590D\u82E5\u5F15\u5165\u65B0\u7684\u9AD8\u98CE\u9669\u9762\u5219\u6807\u8BB0 blocked\uFF0C\u4E0D\u80FD\u5F00\u542F\u65E0\u754C review \u5FAA\u73AF\u3002
+3. \u5199 \`summary.md\`\uFF1A\u6539\u52A8\u3001\u65B0\u5EFA\u3001\u590D\u7528\u3001\u9A8C\u8BC1\u3001\u5BA1\u67E5\u6DF1\u5EA6\u3001findings \u5904\u7F6E\u3001\u8DF3\u8FC7\u6B65\u9AA4\u548C\u6B8B\u4F59\u98CE\u9669\u3002
+4. CLI \u786E\u8BA4\u6240\u9700\u5BA1\u67E5\u9886\u57DF\u5B8C\u6210\u4E14 blocker \u6E05\u96F6\u540E\u624D\u5199 \`completed\`\uFF1B\u5426\u5219\u7528 \`--status blocked --blocking-reason "<\u539F\u56E0>"\`\u3002
+5. \u5173\u952E\u51B3\u7B56 appendTeamDecision \u5230 \`decisions.md\`\uFF0C\u66F4\u65B0 Active Plans\u3002
+6. worktree \u5408\u5E76\u524D\u53D6\u5F97\u7528\u6237\u786E\u8BA4\uFF1B\u7EC8\u6001\u5199\u5165\u6210\u529F\u540E state \u56DE solo \u5E76\u6E05\u7A7A workflow \u6307\u9488\u3002
 
 \u4EFB\u4F55 step/status/outcome/planVersion \u53D8\u5316\u90FD\u5FC5\u987B\u7ECF\u8FC7 workflow CLI\uFF1BCLI \u62D2\u7EDD\u65F6\u4FDD\u7559\u5F53\u524D state \u5E76\u62A5\u544A\u539F\u56E0\uFF0C\u4E0D\u53EF\u7ED5\u8FC7\u6821\u9A8C\u76F4\u63A5\u6539 metadata.json\u3002
 
@@ -1174,9 +1179,9 @@ var MANTEAM_SKILL = {
 4. \u8BA1\u5212\u5173\u5361\uFF1A\u7528\u6237\u53EF\u53EA\u4FDD\u7559\u8BA1\u5212\u3001\u7EE7\u7EED\u6267\u884C\u6216\u91CD\u5199\u8BA1\u5212\uFF1BActive Plans \u6309 taskId \u66F4\u65B0\u3002
 5. \u5B9E\u65BD\uFF1A\u6539\u52A8\u524D\u518D\u6B21\u68C0\u67E5 \`git status --short\`\uFF0C\u907F\u514D\u8E29\u7528\u6237\u6216\u961F\u53CB\u6539\u52A8\u3002
 6. Self-test\uFF1A\u4F18\u5148\u8DD1\u9879\u76EE\u5DF2\u6709\u9A8C\u8BC1\u547D\u4EE4\uFF1B\u5931\u8D25\u4E24\u6B21\u505C\u4E0B\u8BCA\u65AD\u6839\u56E0\u3002\u9700\u8981\u771F\u5B9E\u9A8C\u8BC1\u65F6\u521B\u5EFA\u5E26 parentTaskId \u7684 /mamba \u5B50\u4EFB\u52A1\u3002\u5B50\u4EFB\u52A1\u4FEE\u590D\u540E\u82E5\u7236\u4EFB\u52A1\u66FE\u56E0\u6B64 blocked\uFF0C\u5148\u7528 workflow CLI \u6062\u590D\u7236\u4EFB\u52A1\u4E3A in_progress\uFF1Bmanual_test_required \u4E0D\u5F97\u81EA\u52A8\u6062\u590D\u3002
-7. Film #1\uFF1A\u91CD\u70B9\u5BA1\u67E5\u53EF\u7EF4\u62A4\u6027\u3001\u547D\u540D\u4E00\u81F4\u6027\u3001\u56E2\u961F\u98CE\u683C\u4E00\u81F4\u6027\uFF0C\u5E76\u4FEE\u590D \u{1F534}\u3002
-8. Film #2\uFF1A\u91CD\u70B9\u5BA1\u67E5\u8FB9\u754C\u6761\u4EF6\u3001\u5B89\u5168\u3001\u6027\u80FD\u3001\u5E76\u53D1\u3001\u517C\u5BB9\u6027\u3002\u53CC\u5BA1\u9ED8\u8BA4\u6267\u884C\uFF1B\u7528\u6237\u660E\u786E\u8981\u6C42\u624D\u53EF\u8DF3\u8FC7\uFF0C\u5199\u5165 \`skippedSteps\` \u548C\u6B8B\u4F59\u98CE\u9669\uFF1B\u8DF3\u8FC7\u4E0D\u963B\u6B62 completed\uFF0C\u4F46\u4E0D\u5F97\u58F0\u79F0"\u5DF2\u5B8C\u6210\u53CC\u5BA1"\u3002
-9. Post-game\uFF1A\u590D\u9A8C\uFF0C\u5199 summary \u4E0E hand-off\uFF1B\u9A8C\u8BC1\u5931\u8D25\u6216\u672A\u4FEE\u590D \u{1F534} \u65F6\u6807\u8BB0 blocked\uFF0C\u4E0D\u5F97\u6807 completed\u3002
+7. Review scope + Film #1\uFF1A\u57FA\u4E8E\u5B9E\u9645 diff \u5199 \`review-scope.md\`\uFF0C\u7528 \`workflow review ... init\` \u9009\u62E9 targeted \u6216 full\uFF1B\u91CD\u70B9\u5BA1\u67E5\u884C\u4E3A\u3001\u53EF\u7EF4\u62A4\u6027\u3001\u56E2\u961F\u98CE\u683C\u4E0E\u6D4B\u8BD5\uFF0Cfinding \u5FC5\u987B\u6709\u8BC1\u636E\u548C\u7A33\u5B9A ID\u3002
+8. Film #2\uFF1A\u4EC5 full \u6267\u884C\uFF0C\u5148\u8BFB Film #1 \u62A5\u544A\u5E76\u53BB\u91CD\uFF0C\u53EA\u5BA1\u67E5\u8FB9\u754C\u3001\u5B89\u5168\u3001\u6027\u80FD\u3001\u5E76\u53D1\u548C\u517C\u5BB9\u6027\u3002\u7528\u6237\u660E\u786E\u8981\u6C42\u624D\u53EF\u8DF3\u8FC7\u5168\u90E8 review\uFF0C\u5E76\u5199\u5165 \`skippedSteps\` \u548C\u6B8B\u4F59\u98CE\u9669\u3002
+9. Post-game\uFF1A\u6C47\u603B blocker\uFF0C\u53EA\u505A\u4E00\u8F6E\u4FEE\u590D\u5E76\u7528 \`workflow review ... remediate\` \u8BB0\u5F55\uFF1B\u590D\u9A8C\u540E\u5199 summary \u4E0E hand-off\u3002\u9A8C\u8BC1\u5931\u8D25\u3001\u5BA1\u67E5\u4E0D\u5B8C\u6574\u6216\u4ECD\u6709 blocker \u65F6\u6807\u8BB0 blocked\uFF0C\u4E0D\u5F97\u6807 completed\u3002
 
 \u5982\u679C\u7528\u6237\u5728\u786E\u8BA4\u9636\u6BB5\u9009\u62E9"\u9000\u51FA"\u6216\u653E\u5F03\u56E2\u961F workflow\uFF1A\u7528 \`mancode workflow update <taskId> --status abandoned\` \u66F4\u65B0\u5E76\u6E05\u7406 Active Plans\uFF1B\u82E5\u6709\u6D3B\u8DC3 mamba \u5B50\u4EFB\u52A1\uFF0C\u5148\u53D6\u5F97\u786E\u8BA4\u5E76\u9010\u4E2A abandoned\u3002\u6210\u529F\u540E\u518D\u7528 Edit \u66F4\u65B0 state \u56DE solo\u3002\u4E0D\u8981\u76F4\u63A5\u6539 metadata\uFF0C\u4E5F\u4E0D\u8981\u628A abandoned workflow \u7559\u5728 active state\u3002
 
@@ -2194,10 +2199,10 @@ var MODE_META = {
       "Step 3 \u2014 Plan: write `plan.md` with scope, reuse, exclusions, risks, completion criteria, and real validation. First plan is v1; revisions use `--plan-version <current+1>` and Active Plans is updated by the CLI.",
       "Step 4 \u2014 Plan gate: the user chooses plan-only (`status planned`), continue to execution, or revise the plan. Do not implement before this choice.",
       "Step 5 \u2014 Implement the confirmed minimum change.",
-      "Step 6 \u2014 Run detected build/lint/typecheck/test and smoke checks. A real or complex diagnosis creates a linked mamba child while the parent remains at Step 6. After a resolved child, restore a parent blocked by that child with `workflow update --status in_progress` before Step 7; never auto-resume manual_test_required.",
-      "Step 7 \u2014 Film #1 code-quality review; fix all required findings and explain suggested-item tradeoffs.",
-      "Step 8 \u2014 Film #2 security/boundary review; keep it independent from Film #1. The two review passes are skipped only on explicit user instruction and the residual risk is recorded.",
-      "Step 9 \u2014 Fix, re-verify, write `summary.md`, archive decisions, and set completed only when verification passes and required findings are zero; otherwise set blocked+blockingReason.",
+      "Step 6 \u2014 Run detected build/lint/typecheck/test and smoke checks. A real or complex diagnosis creates a linked mamba child while the parent remains at Step 6. After a resolved child, restore a parent blocked by that child with `workflow update --status in_progress` before Step 7; never auto-resume manual_test_required. Then write `review-scope.md` from the actual diff, verification evidence, and hard-risk triggers. Initialize a targeted review for routine governed changes or a full review for auth, payment, sensitive data, migrations/deletion, public APIs, untrusted input, concurrency, cross-service, or infrastructure changes using `mancode workflow review <taskId> init ...`.",
+      "Step 7 \u2014 Run one quality review limited to the changed diff and direct impact. Findings require changed-line evidence and user impact, with at most three new findings. Record stable blocker IDs through `workflow review ... complete`; do not fix yet.",
+      "Step 8 \u2014 Only full review runs the security/boundary reviewer. It must read Film #1, mark the same root cause duplicate, and stay within security, permissions, recovery, resources, and boundaries. A targeted review ends after Film #1.",
+      "Step 9 \u2014 If open blockers exist, fix them in one remediation round and record resolved IDs through `workflow review ... remediate`; with no blockers, do not create a remediation round. Re-run affected verification without re-running completed reviewers. Write `summary.md` and set completed only when required domains are complete and blockers are zero; otherwise set blocked+blockingReason.",
       "",
       "After planned/completed/abandoned, return state to solo. On blocked, preserve enough state to resume. A CLI rejection is a hard stop, never a reason to bypass metadata validation."
     ].join("\n")
@@ -2214,7 +2219,7 @@ var MODE_META = {
       "shared-module, and handoff risks in `team-context.md`.",
       "",
       "Then execute every /man Step 1 through Step 9, including clarification,",
-      "plan gate, validation, two review passes, conditional completion, planVersion,",
+      "plan gate, validation, bounded risk-based review, conditional completion, planVersion,",
       "Active Plans, and linked mamba child behavior. Add compatibility, rollback,",
       "ownership, conflict, and handoff notes at each relevant step.",
       "When a resolved mamba child had blocked the parent, restore the parent through",
@@ -2317,7 +2322,9 @@ function renderPracticeRules() {
     "5. Prefer a one-line fix when it is enough.",
     "6. Only then write the smallest new implementation.",
     "",
-    "For every task, consider: why this change, what already exists, and what is the smallest useful diff?"
+    "For every task, consider: why this change, what already exists, and what is the smallest useful diff?",
+    "",
+    "In solo mode, use the narrowest meaningful validation and one bounded self-check limited to the current diff. Do not start another reviewer or repeat the review. Only recommend man for auth, payment, sensitive data, migrations/deletion, public APIs, untrusted input, concurrency, or infrastructure risk."
   ].join("\n");
 }
 function renderAesthetics(tokens) {
@@ -2499,7 +2506,7 @@ function renderCopilotPromptConventions() {
     "",
     "GitHub Copilot does not provide native mancode slash commands, hooks, or isolated subagents. Treat these names as user prompt conventions:",
     "",
-    "- man: use progressive research, planning, implementation, verification, and review.",
+    "- man: use progressive research, planning, implementation, verification, and bounded risk-based review.",
     "- mamba: diagnose bugs and validate real user flows or regressions.",
     "- manteam: read team memory and write handoff-friendly summaries.",
     "- manps: prefer `mancode manps [area]` before cleanup.",
@@ -2717,7 +2724,9 @@ function renderSoloRule() {
     "- Keep the diff narrow.",
     "- Reuse existing functions, components, styles, and dependencies.",
     "- Read `.mancode/project-profile.json` before choosing tools or validation. For detected UI assets and UI work, read `.mancode/aesthetics/style-tokens.json` and inspect existing components before inventing new styles.",
-    "- Verify with the narrowest meaningful test, lint, build, or smoke check."
+    "- Verify with the narrowest meaningful test, lint, build, or smoke check.",
+    "- Perform one bounded self-check limited to the current diff. Do not start another reviewer, create a review artifact, or repeat the review.",
+    "- Recommend /man only for auth, payment, sensitive data, migrations/deletion, public APIs, untrusted input, concurrency, or infrastructure risk."
   ].join("\n");
 }
 function renderMambaRule() {
@@ -5718,24 +5727,220 @@ async function pathExists8(p) {
 // src/commands/status.ts
 import { spawn } from "child_process";
 import { promises as fs7 } from "fs";
-import path21 from "path";
+import path22 from "path";
 import process7 from "process";
 
 // src/system/workflow.ts
 import {
-  mkdir as mkdir8,
-  readFile as readFile9,
+  mkdir as mkdir9,
+  readFile as readFile10,
   readdir as readdir5,
   rm as rm4,
-  stat as stat3,
-  writeFile as writeFile10
+  stat as stat4,
+  writeFile as writeFile11
 } from "fs/promises";
+import path21 from "path";
+
+// src/system/review-ledger.ts
+import { mkdir as mkdir8, readFile as readFile9, stat as stat3, writeFile as writeFile10 } from "fs/promises";
 import path20 from "path";
+var REVIEW_FILE = "review-ledger.json";
+var TASK_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9-]*$/;
+var BLOCKER_ID_PATTERN = /^[A-Z][A-Z0-9-]{0,31}$/;
+function isReviewDepth(value) {
+  return value === "targeted" || value === "full";
+}
+function isReviewDomain(value) {
+  return value === "quality" || value === "security";
+}
+async function initializeReview(projectRoot, taskId, depth, targetDomain) {
+  assertValidTaskId(taskId);
+  const existing = await readReviewLedger(projectRoot, taskId);
+  if (existing) throw new Error(`review already initialized: ${taskId}`);
+  if (depth === "targeted" && !targetDomain) {
+    throw new Error("targeted review requires a review domain");
+  }
+  const ledger = {
+    version: "1.0",
+    depth,
+    requiredDomains: depth === "full" ? ["quality", "security"] : [targetDomain],
+    completedDomains: [],
+    reports: {},
+    blockers: [],
+    remediationRounds: 0
+  };
+  await writeReviewLedger(projectRoot, taskId, ledger);
+  return ledger;
+}
+async function completeReviewDomain(projectRoot, taskId, domain, report, blockerIds) {
+  const ledger = await requireReviewLedger(projectRoot, taskId);
+  if (!ledger.requiredDomains.includes(domain)) {
+    throw new Error(`review domain is not required: ${domain}`);
+  }
+  if (ledger.completedDomains.includes(domain)) {
+    throw new Error(`review domain already completed: ${domain}`);
+  }
+  if (domain === "security" && !ledger.completedDomains.includes("quality")) {
+    throw new Error("quality review must complete first");
+  }
+  assertSafeReportPath(report);
+  await assertReportExists(projectRoot, taskId, report);
+  const uniqueIds = new Set(blockerIds);
+  if (uniqueIds.size !== blockerIds.length) {
+    throw new Error("review blocker ids must be unique");
+  }
+  for (const id of blockerIds) {
+    if (!BLOCKER_ID_PATTERN.test(id)) {
+      throw new Error(`invalid review blocker id: ${id}`);
+    }
+    if (ledger.blockers.some((blocker) => blocker.id === id)) {
+      throw new Error(`duplicate review blocker id: ${id}`);
+    }
+  }
+  const updated = {
+    ...ledger,
+    completedDomains: [...ledger.completedDomains, domain],
+    reports: { ...ledger.reports, [domain]: report },
+    blockers: [
+      ...ledger.blockers,
+      ...blockerIds.map((id) => ({
+        id,
+        domain,
+        status: "open"
+      }))
+    ]
+  };
+  await writeReviewLedger(projectRoot, taskId, updated);
+  return updated;
+}
+async function remediateReviewBlockers(projectRoot, taskId, resolvedIds) {
+  const ledger = await requireReviewLedger(projectRoot, taskId);
+  if (ledger.remediationRounds >= 1) {
+    throw new Error("review allows only one remediation round");
+  }
+  if (resolvedIds.length === 0) {
+    throw new Error("review remediation requires resolved blocker ids");
+  }
+  const uniqueIds = new Set(resolvedIds);
+  if (uniqueIds.size !== resolvedIds.length) {
+    throw new Error("resolved review blocker ids must be unique");
+  }
+  for (const id of resolvedIds) {
+    const blocker = ledger.blockers.find((item) => item.id === id);
+    if (!blocker || blocker.status !== "open") {
+      throw new Error(`review blocker is not open: ${id}`);
+    }
+  }
+  const updated = {
+    ...ledger,
+    remediationRounds: ledger.remediationRounds + 1,
+    blockers: ledger.blockers.map(
+      (blocker) => uniqueIds.has(blocker.id) ? { ...blocker, status: "resolved" } : blocker
+    )
+  };
+  await writeReviewLedger(projectRoot, taskId, updated);
+  return updated;
+}
+async function reviewCanComplete(projectRoot, taskId) {
+  const ledger = await readReviewLedger(projectRoot, taskId);
+  if (!ledger) return false;
+  return ledger.requiredDomains.every(
+    (domain) => ledger.completedDomains.includes(domain)
+  ) && ledger.blockers.every((blocker) => blocker.status === "resolved");
+}
+async function readReviewLedger(projectRoot, taskId) {
+  if (!TASK_ID_PATTERN.test(taskId)) return null;
+  try {
+    const raw = await readFile9(reviewPath(projectRoot, taskId), "utf-8");
+    const value = JSON.parse(raw);
+    return isReviewLedger(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+function isReviewLedger(value) {
+  if (!isRecord7(value)) return false;
+  if (value.version !== "1.0" || !isReviewDepth(value.depth) || !isDomainArray(value.requiredDomains) || !isDomainArray(value.completedDomains) || !isRecord7(value.reports) || !Array.isArray(value.blockers) || value.remediationRounds !== 0 && value.remediationRounds !== 1) {
+    return false;
+  }
+  const requiredDomains = value.requiredDomains;
+  const completedDomains = value.completedDomains;
+  const reports = value.reports;
+  const blockers = value.blockers;
+  const expectedDomains = value.depth === "full" ? ["quality", "security"] : requiredDomains;
+  if (value.depth === "targeted" && requiredDomains.length !== 1 || requiredDomains.length !== expectedDomains.length || !expectedDomains.every((domain) => requiredDomains.includes(domain)) || new Set(completedDomains).size !== completedDomains.length || completedDomains.some((domain) => !requiredDomains.includes(domain)) || completedDomains.some((domain) => {
+    const report = reports[domain];
+    return typeof report !== "string" || !isSafeReportPath(report);
+  })) {
+    return false;
+  }
+  const blockerIds = /* @__PURE__ */ new Set();
+  return blockers.every(
+    (blocker) => isRecord7(blocker) && typeof blocker.id === "string" && BLOCKER_ID_PATTERN.test(blocker.id) && !blockerIds.has(blocker.id) && blockerIds.add(blocker.id) && isReviewDomain(blocker.domain) && completedDomains.includes(blocker.domain) && (blocker.status === "open" || blocker.status === "resolved")
+  );
+}
+function isDomainArray(value) {
+  return Array.isArray(value) && value.every(isReviewDomain);
+}
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function requireReviewLedger(projectRoot, taskId) {
+  assertValidTaskId(taskId);
+  const ledger = await readReviewLedger(projectRoot, taskId);
+  if (!ledger) throw new Error(`review not initialized: ${taskId}`);
+  return ledger;
+}
+async function writeReviewLedger(projectRoot, taskId, ledger) {
+  const dir = path20.join(projectRoot, ".mancode", "workflows", taskId);
+  await mkdir8(dir, { recursive: true });
+  await writeFile10(
+    path20.join(dir, REVIEW_FILE),
+    `${JSON.stringify(ledger, null, 2)}
+`,
+    "utf-8"
+  );
+}
+function reviewPath(projectRoot, taskId) {
+  return path20.join(projectRoot, ".mancode", "workflows", taskId, REVIEW_FILE);
+}
+function assertValidTaskId(taskId) {
+  if (!TASK_ID_PATTERN.test(taskId)) {
+    throw new Error(`invalid workflow taskId: ${taskId}`);
+  }
+}
+function assertSafeReportPath(report) {
+  if (!isSafeReportPath(report)) {
+    throw new Error(`invalid review report path: ${report}`);
+  }
+}
+async function assertReportExists(projectRoot, taskId, report) {
+  const reportPath = path20.join(
+    projectRoot,
+    ".mancode",
+    "workflows",
+    taskId,
+    report
+  );
+  try {
+    if ((await stat3(reportPath)).isFile()) return;
+  } catch {
+  }
+  throw new Error(`review report not found: ${report}`);
+}
+function isSafeReportPath(report) {
+  const normalized = path20.posix.normalize(report.replaceAll("\\", "/"));
+  return Boolean(
+    report.trim() && !path20.isAbsolute(report) && normalized !== ".." && !normalized.startsWith("../") && normalized.endsWith(".md")
+  );
+}
+
+// src/system/workflow.ts
 var METADATA_FILE = "metadata.json";
 var SLUG_MAX = 30;
-var TASK_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9-]*$/;
+var TASK_ID_PATTERN2 = /^[A-Za-z0-9][A-Za-z0-9-]*$/;
 function isValidWorkflowTaskId(taskId) {
-  return TASK_ID_PATTERN.test(taskId);
+  return TASK_ID_PATTERN2.test(taskId);
 }
 function generateTaskId(task, now = /* @__PURE__ */ new Date()) {
   const slug = slugify(task).slice(0, SLUG_MAX) || "task";
@@ -5748,7 +5953,7 @@ function slugify(text) {
 }
 async function createWorkflow(projectRoot, task, mode, options = {}) {
   await validateParentTask(projectRoot, mode, options.parentTaskId, true);
-  await mkdir8(workflowsRoot(projectRoot), { recursive: true });
+  await mkdir9(workflowsRoot(projectRoot), { recursive: true });
   const taskId = await allocateTaskId(projectRoot, generateTaskId(task));
   const dir = workflowDir(projectRoot, taskId);
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -5762,7 +5967,7 @@ async function createWorkflow(projectRoot, task, mode, options = {}) {
     updatedAt: now,
     status: "in_progress",
     ...options.parentTaskId ? { parentTaskId: options.parentTaskId } : {},
-    ...mode === "man" || mode === "manteam" ? { planVersion: 1 } : {}
+    ...mode === "man" || mode === "manteam" ? { planVersion: 1, reviewPolicyVersion: 1 } : {}
   };
   await writeMetadata(dir, meta);
   return meta;
@@ -5771,7 +5976,7 @@ async function allocateTaskId(projectRoot, baseTaskId) {
   for (let attempt = 0; attempt < 1e3; attempt++) {
     const taskId = attempt === 0 ? baseTaskId : `${baseTaskId}-${attempt + 1}`;
     try {
-      await mkdir8(workflowDir(projectRoot, taskId));
+      await mkdir9(workflowDir(projectRoot, taskId));
       return taskId;
     } catch (err) {
       if (isNodeError6(err) && err.code === "EEXIST") {
@@ -5786,14 +5991,14 @@ async function readWorkflow(projectRoot, taskId) {
   if (!isValidWorkflowTaskId(taskId)) return null;
   const file = metadataPath(projectRoot, taskId);
   try {
-    const raw = await readFile9(file, "utf-8");
+    const raw = await readFile10(file, "utf-8");
     return parseWorkflowMeta(raw, taskId);
   } catch {
     return null;
   }
 }
 async function updateWorkflow(projectRoot, taskId, patch) {
-  assertValidTaskId(taskId);
+  assertValidTaskId2(taskId);
   const existing = await readWorkflow(projectRoot, taskId);
   if (!existing) {
     throw new Error(`workflow not found: ${taskId}`);
@@ -5838,7 +6043,7 @@ async function deleteWorkflow(projectRoot, taskId) {
   if (!isValidWorkflowTaskId(taskId)) return false;
   const dir = workflowDir(projectRoot, taskId);
   try {
-    await stat3(dir);
+    await stat4(dir);
   } catch {
     return false;
   }
@@ -5850,19 +6055,19 @@ async function deleteWorkflow(projectRoot, taskId) {
   return true;
 }
 function workflowsRoot(projectRoot) {
-  return path20.join(projectRoot, ".mancode", "workflows");
+  return path21.join(projectRoot, ".mancode", "workflows");
 }
 function workflowDir(projectRoot, taskId) {
-  assertValidTaskId(taskId);
-  return path20.join(workflowsRoot(projectRoot), taskId);
+  assertValidTaskId2(taskId);
+  return path21.join(workflowsRoot(projectRoot), taskId);
 }
 function metadataPath(projectRoot, taskId) {
-  return path20.join(workflowDir(projectRoot, taskId), METADATA_FILE);
+  return path21.join(workflowDir(projectRoot, taskId), METADATA_FILE);
 }
 async function writeMetadata(dir, meta) {
   const content = `${JSON.stringify(meta, null, 2)}
 `;
-  await writeFile10(path20.join(dir, METADATA_FILE), content, "utf-8");
+  await writeFile11(path21.join(dir, METADATA_FILE), content, "utf-8");
 }
 function parseWorkflowMeta(raw, taskId) {
   try {
@@ -5912,6 +6117,9 @@ async function validateWorkflowMeta(projectRoot, updated, existing) {
   if (updated.parentTaskId !== existing.parentTaskId) {
     throw new Error("workflow parent task cannot be changed");
   }
+  if (updated.reviewPolicyVersion !== existing.reviewPolicyVersion) {
+    throw new Error("workflow review policy version cannot be changed");
+  }
   if (!Number.isInteger(updated.currentStep) || updated.currentStep < 1 || updated.currentStep > maxWorkflowStep(updated.mode)) {
     throw new Error(`invalid workflow step: ${updated.currentStep}`);
   }
@@ -5962,6 +6170,12 @@ async function validateWorkflowMeta(projectRoot, updated, existing) {
   if (updated.mode === "mamba" && updated.planVersion !== void 0) {
     throw new Error("mamba workflows cannot have a plan version");
   }
+  if (updated.reviewPolicyVersion !== void 0 && updated.reviewPolicyVersion !== 1) {
+    throw new Error("invalid workflow review policy version");
+  }
+  if (updated.mode === "mamba" && updated.reviewPolicyVersion !== void 0) {
+    throw new Error("mamba workflows cannot have a review policy version");
+  }
   if (updated.planVersion !== void 0 && (!Number.isInteger(updated.planVersion) || updated.planVersion < 1)) {
     throw new Error("workflow plan version must be a positive integer");
   }
@@ -5975,6 +6189,9 @@ async function validateWorkflowMeta(projectRoot, updated, existing) {
   if ((isTerminalWorkflowStatus(updated.status) || updated.status === "planned") && (await listActiveMambaChildren(projectRoot, updated.taskId)).length > 0) {
     throw new Error("cannot finish workflow with an active mamba child");
   }
+  if (updated.status === "completed" && updated.reviewPolicyVersion === 1 && !reviewWasExplicitlySkipped(updated) && !await reviewCanComplete(projectRoot, updated.taskId)) {
+    throw new Error("workflow review is incomplete or still has open blockers");
+  }
 }
 function canTransition(from, to) {
   if (from === to) return true;
@@ -6002,13 +6219,16 @@ function isWorkflowShape(obj) {
     return false;
   if (obj.planVersion !== void 0 && (!Number.isInteger(obj.planVersion) || obj.planVersion < 1))
     return false;
+  if (obj.reviewPolicyVersion !== void 0 && obj.reviewPolicyVersion !== 1)
+    return false;
   if (status2 === "blocked") {
     if (!obj.blockingReason?.trim()) return false;
   } else if (obj.blockingReason !== void 0) {
     return false;
   }
   if (mode === "mamba") {
-    if (status2 === "planned" || obj.planVersion !== void 0) return false;
+    if (status2 === "planned" || obj.planVersion !== void 0 || obj.reviewPolicyVersion !== void 0)
+      return false;
     if (obj.parentTaskId !== void 0 && !isValidWorkflowTaskId(obj.parentTaskId))
       return false;
     if (obj.outcome !== void 0 && status2 !== "completed") return false;
@@ -6018,6 +6238,9 @@ function isWorkflowShape(obj) {
   }
   return true;
 }
+function reviewWasExplicitlySkipped(meta) {
+  return meta.skippedSteps.includes("review") || meta.skippedSteps.includes("film-1") && meta.skippedSteps.includes("film-2");
+}
 async function listActiveMambaChildren(projectRoot, parentTaskId) {
   return (await listMambaChildren(projectRoot, parentTaskId)).filter(
     (workflow2) => workflow2.status === "in_progress" || workflow2.status === "blocked"
@@ -6053,7 +6276,7 @@ async function propagateChildStatus(projectRoot, child) {
 function isNodeError6(err) {
   return err instanceof Error && "code" in err;
 }
-function assertValidTaskId(taskId) {
+function assertValidTaskId2(taskId) {
   if (!isValidWorkflowTaskId(taskId)) {
     throw new Error(`invalid workflow taskId: ${taskId}`);
   }
@@ -6065,7 +6288,7 @@ var EXIT_OK6 = 0;
 var EXIT_NOT_INITIALIZED4 = 1;
 var EXIT_CORRUPT_STATE = 2;
 async function status(rootDir = process7.cwd(), options = {}) {
-  const stateFile = path21.join(rootDir, ".mancode", "state.json");
+  const stateFile = path22.join(rootDir, ".mancode", "state.json");
   if (!await pathExists9(stateFile)) {
     console.error("\u2717  mancode not initialized.");
     console.error("   Run `mancode init` to get started.");
@@ -6164,19 +6387,19 @@ async function getCurrentWorkflow(rootDir, taskId) {
 }
 async function getProjectName(rootDir) {
   try {
-    const raw = await fs7.readFile(path21.join(rootDir, "package.json"), "utf-8");
+    const raw = await fs7.readFile(path22.join(rootDir, "package.json"), "utf-8");
     const pkg = JSON.parse(raw);
     if (pkg.name && typeof pkg.name === "string") {
       return pkg.name;
     }
   } catch {
   }
-  return path21.basename(rootDir);
+  return path22.basename(rootDir);
 }
 async function readConfig2(rootDir) {
   try {
     const raw = await fs7.readFile(
-      path21.join(rootDir, ".mancode", "config.json"),
+      path22.join(rootDir, ".mancode", "config.json"),
       "utf-8"
     );
     return JSON.parse(raw);
@@ -6203,9 +6426,9 @@ function getEffectiveTeamStatus(state, config, detected) {
 }
 async function checkHooks(rootDir) {
   const [sessionStart, userPromptSubmit, registered] = await Promise.all([
-    pathExists9(path21.join(rootDir, ".mancode", "hooks", "session-start.sh")),
+    pathExists9(path22.join(rootDir, ".mancode", "hooks", "session-start.sh")),
     pathExists9(
-      path21.join(rootDir, ".mancode", "hooks", "user-prompt-submit.sh")
+      path22.join(rootDir, ".mancode", "hooks", "user-prompt-submit.sh")
     ),
     isRegistered(rootDir)
   ]);
@@ -6214,7 +6437,7 @@ async function checkHooks(rootDir) {
 async function isRegistered(rootDir) {
   try {
     const raw = await fs7.readFile(
-      path21.join(rootDir, ".claude", "settings.json"),
+      path22.join(rootDir, ".claude", "settings.json"),
       "utf-8"
     );
     const settings = JSON.parse(raw);
@@ -6224,9 +6447,9 @@ async function isRegistered(rootDir) {
   }
 }
 function hooksRegistered2(settings) {
-  if (!isRecord7(settings)) return false;
+  if (!isRecord8(settings)) return false;
   const hooks = settings.hooks;
-  if (!isRecord7(hooks)) return false;
+  if (!isRecord8(hooks)) return false;
   return hasHookCommand2(hooks.SessionStart, ".mancode/hooks/session-start.sh") && hasHookCommand2(
     hooks.UserPromptSubmit,
     ".mancode/hooks/user-prompt-submit.sh"
@@ -6235,15 +6458,15 @@ function hooksRegistered2(settings) {
 function hasHookCommand2(value, needle) {
   if (!Array.isArray(value)) return false;
   return value.some((group) => {
-    if (!isRecord7(group) || !Array.isArray(group.hooks)) return false;
+    if (!isRecord8(group) || !Array.isArray(group.hooks)) return false;
     return group.hooks.some((hook) => {
-      if (!isRecord7(hook) || typeof hook.command !== "string") return false;
+      if (!isRecord8(hook) || typeof hook.command !== "string") return false;
       return hook.command.includes(needle);
     });
   });
 }
 async function estimateHookInjection(rootDir) {
-  const hookPath = path21.join(
+  const hookPath = path22.join(
     rootDir,
     ".mancode",
     "hooks",
@@ -6369,7 +6592,7 @@ function formatTeamStatus(team) {
 function workflowStepMax(mode) {
   return maxWorkflowStep(mode);
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null;
 }
 async function pathExists9(p) {
@@ -6382,14 +6605,14 @@ async function pathExists9(p) {
 }
 
 // src/commands/uninstall.ts
-import { access as access4, readFile as readFile10, rm as rm5, writeFile as writeFile11 } from "fs/promises";
-import path22 from "path";
+import { access as access4, readFile as readFile11, rm as rm5, writeFile as writeFile12 } from "fs/promises";
+import path23 from "path";
 import process8 from "process";
 var EXIT_OK7 = 0;
 var EXIT_NOT_INITIALIZED5 = 1;
 var EXIT_UNSUPPORTED_PLATFORM2 = 2;
 async function uninstall(rootDir = process8.cwd(), platform, options = {}) {
-  const stateFile = path22.join(rootDir, ".mancode", "state.json");
+  const stateFile = path23.join(rootDir, ".mancode", "state.json");
   if (!await pathExists10(stateFile)) {
     console.error("\u2717  mancode not initialized.");
     console.error("   Run `mancode init` first.");
@@ -6441,7 +6664,7 @@ async function uninstallAll(rootDir) {
     await uninstallPlatform(rootDir, p);
   }
   console.log("\u2713  Removing .mancode/ directory...");
-  await rm5(path22.join(rootDir, ".mancode"), {
+  await rm5(path23.join(rootDir, ".mancode"), {
     recursive: true,
     force: true
   });
@@ -6451,10 +6674,10 @@ async function uninstallClaudeCode(rootDir) {
   await cleanClaudeSettings(rootDir);
 }
 async function cleanClaudeSettings(rootDir) {
-  const settingsPath = path22.join(rootDir, ".claude", "settings.json");
+  const settingsPath = path23.join(rootDir, ".claude", "settings.json");
   let content;
   try {
-    content = await readFile10(settingsPath, "utf-8");
+    content = await readFile11(settingsPath, "utf-8");
   } catch {
     return;
   }
@@ -6465,14 +6688,14 @@ async function cleanClaudeSettings(rootDir) {
     return;
   }
   const cleanedHooks = {};
-  if (isRecord8(settings.hooks)) {
+  if (isRecord9(settings.hooks)) {
     for (const [event, value] of Object.entries(settings.hooks)) {
       const cleaned = cleanClaudeHookValue(value);
       if (cleaned !== void 0) cleanedHooks[event] = cleaned;
     }
     settings.hooks = Object.keys(cleanedHooks).length > 0 ? cleanedHooks : void 0;
   }
-  if (isRecord8(settings.skills)) {
+  if (isRecord9(settings.skills)) {
     const retainedSkills = Object.fromEntries(
       Object.entries(settings.skills).filter(
         ([name, value]) => LEGACY_CLAUDE_SKILL_SETTINGS[name] !== value
@@ -6480,7 +6703,7 @@ async function cleanClaudeSettings(rootDir) {
     );
     settings.skills = Object.keys(retainedSkills).length > 0 ? retainedSkills : void 0;
   }
-  await writeFile11(
+  await writeFile12(
     settingsPath,
     `${JSON.stringify(settings, null, 2)}
 `,
@@ -6492,7 +6715,7 @@ function cleanClaudeHookValue(value) {
     const entries2 = value.flatMap(cleanClaudeHookEntry);
     return entries2.length > 0 ? entries2 : void 0;
   }
-  if (!isRecord8(value)) return value;
+  if (!isRecord9(value)) return value;
   if (Array.isArray(value.hooks) || typeof value.command === "string") {
     const entries2 = cleanClaudeHookEntry(value);
     return entries2.length > 0 ? entries2 : void 0;
@@ -6506,7 +6729,7 @@ function cleanClaudeHookValue(value) {
 }
 function cleanClaudeHookEntry(entry) {
   if (Array.isArray(entry)) return entry.flatMap(cleanClaudeHookEntry);
-  if (!isRecord8(entry)) return [entry];
+  if (!isRecord9(entry)) return [entry];
   if (Array.isArray(entry.hooks)) {
     const hooks = entry.hooks.filter((hook) => !isMancodeHookEntry(hook));
     return hooks.length > 0 ? [{ ...entry, hooks }] : [];
@@ -6514,11 +6737,11 @@ function cleanClaudeHookEntry(entry) {
   return isMancodeHookEntry(entry) ? [] : [entry];
 }
 function isMancodeHookEntry(value) {
-  return isRecord8(value) && typeof value.command === "string" && isGeneratedMancodeHookCommand(value.command);
+  return isRecord9(value) && typeof value.command === "string" && isGeneratedMancodeHookCommand(value.command);
 }
 function containsLegacyMancodeHookPath2(value) {
   if (Array.isArray(value)) return value.some(containsLegacyMancodeHookPath2);
-  if (!isRecord8(value)) return false;
+  if (!isRecord9(value)) return false;
   if (typeof value.command === "string" && value.command.includes(".mancode/hooks/")) {
     return true;
   }
@@ -6529,12 +6752,12 @@ async function uninstallCursor(rootDir) {
   await removeCursorCommands(rootDir);
 }
 async function uninstallCodex(rootDir) {
-  const agentsPath = path22.join(rootDir, "AGENTS.md");
+  const agentsPath = path23.join(rootDir, "AGENTS.md");
   try {
-    const content = await readFile10(agentsPath, "utf-8");
+    const content = await readFile11(agentsPath, "utf-8");
     const cleaned = removeManagedBlock(content);
     if (cleaned.trim()) {
-      await writeFile11(agentsPath, `${cleaned}
+      await writeFile12(agentsPath, `${cleaned}
 `, "utf-8");
     } else {
       await rm5(agentsPath, { force: true });
@@ -6544,16 +6767,16 @@ async function uninstallCodex(rootDir) {
   await removeCodexSkills(rootDir);
 }
 async function uninstallCopilot(rootDir) {
-  const instructionsPath = path22.join(
+  const instructionsPath = path23.join(
     rootDir,
     ".github",
     "copilot-instructions.md"
   );
   try {
-    const content = await readFile10(instructionsPath, "utf-8");
+    const content = await readFile11(instructionsPath, "utf-8");
     const cleaned = removeManagedBlock(content);
     if (cleaned.trim()) {
-      await writeFile11(instructionsPath, `${cleaned}
+      await writeFile12(instructionsPath, `${cleaned}
 `, "utf-8");
     } else {
       await rm5(instructionsPath, { force: true });
@@ -6563,16 +6786,16 @@ async function uninstallCopilot(rootDir) {
   await removeCopilotPrompts(rootDir);
 }
 async function uninstallZcode(rootDir) {
-  const agentsPath = path22.join(rootDir, "AGENTS.md");
+  const agentsPath = path23.join(rootDir, "AGENTS.md");
   try {
-    const content = await readFile10(agentsPath, "utf-8");
+    const content = await readFile11(agentsPath, "utf-8");
     const cleaned = removeManagedBlock(
       content,
       ZCODE_MANCODE_START_MARKER,
       ZCODE_MANCODE_END_MARKER
     );
     if (cleaned.trim()) {
-      await writeFile11(agentsPath, `${cleaned}
+      await writeFile12(agentsPath, `${cleaned}
 `, "utf-8");
     } else {
       await rm5(agentsPath, { force: true });
@@ -6582,13 +6805,13 @@ async function uninstallZcode(rootDir) {
   await removeZcodeSkills(rootDir);
 }
 async function removeFromConfig(rootDir, platform) {
-  const configPath = path22.join(rootDir, ".mancode", "config.json");
+  const configPath = path23.join(rootDir, ".mancode", "config.json");
   try {
-    const raw = await readFile10(configPath, "utf-8");
+    const raw = await readFile11(configPath, "utf-8");
     const config = JSON.parse(raw);
     if (Array.isArray(config.platforms)) {
       config.platforms = config.platforms.filter((p) => p !== platform);
-      if (isRecord8(config.platformOptions)) {
+      if (isRecord9(config.platformOptions)) {
         const platformOptions = Object.fromEntries(
           Object.entries(config.platformOptions).filter(
             ([name]) => name !== platform
@@ -6596,7 +6819,7 @@ async function removeFromConfig(rootDir, platform) {
         );
         config.platformOptions = Object.keys(platformOptions).length > 0 ? platformOptions : void 0;
       }
-      await writeFile11(
+      await writeFile12(
         configPath,
         `${JSON.stringify(config, null, 2)}
 `,
@@ -6606,7 +6829,7 @@ async function removeFromConfig(rootDir, platform) {
   } catch {
   }
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function pathExists10(p) {
@@ -6630,12 +6853,12 @@ function version() {
 
 // src/commands/workflow.ts
 import { access as access5 } from "fs/promises";
-import path23 from "path";
+import path24 from "path";
 var EXIT_OK8 = 0;
 var EXIT_NOT_INITIALIZED6 = 1;
 var EXIT_INVALID_ARG2 = 2;
 async function workflow(rootDir, subcommand, args = [], options = {}) {
-  if (!await pathExists11(path23.join(rootDir, ".mancode", "state.json"))) {
+  if (!await pathExists11(path24.join(rootDir, ".mancode", "state.json"))) {
     if (options.json) {
       console.log(JSON.stringify({ error: "not initialized" }, null, 2));
     } else {
@@ -6653,6 +6876,8 @@ async function workflow(rootDir, subcommand, args = [], options = {}) {
       return workflowList(rootDir, options);
     case "show":
       return workflowShow(rootDir, args[0], options);
+    case "review":
+      return workflowReview(rootDir, args, options);
     case "clean":
       return workflowClean(rootDir, options);
     default:
@@ -6667,12 +6892,109 @@ async function workflow(rootDir, subcommand, args = [], options = {}) {
       } else {
         console.error(`\u2717  Invalid workflow subcommand: ${subcommand}`);
         console.error(
-          "   Use: create <man|mamba|manteam> <task> | update <taskId> | list | show <taskId> | clean"
+          "   Use: create <man|mamba|manteam> <task> | update <taskId> | review <taskId> <init|complete|remediate|show> | list | show <taskId> | clean"
         );
       }
       return EXIT_INVALID_ARG2;
   }
 }
+async function workflowReview(rootDir, args, options) {
+  const taskId = args[0];
+  const action = args[1];
+  if (!taskId || !isValidWorkflowTaskId(taskId)) {
+    return invalidArg(options, `invalid taskId: ${taskId ?? ""}`);
+  }
+  const meta = await readWorkflow(rootDir, taskId);
+  if (!meta) return invalidArg(options, `workflow not found: ${taskId}`);
+  if (meta.mode !== "man" && meta.mode !== "manteam") {
+    return invalidArg(options, "review is only valid for man or manteam");
+  }
+  if (action === "show") {
+    const ledger = await readReviewLedger(rootDir, taskId);
+    if (!ledger)
+      return invalidArg(options, `review not initialized: ${taskId}`);
+    outputReviewLedger(ledger, options);
+    return EXIT_OK8;
+  }
+  if (meta.status !== "in_progress" || meta.currentStep < 6) {
+    return invalidArg(
+      options,
+      "review requires an in_progress workflow at step 6 or later"
+    );
+  }
+  try {
+    let ledger;
+    if (action === "init") {
+      if (!isReviewDepth(options.reviewDepth)) {
+        return invalidArg(
+          options,
+          `invalid --review-depth: ${options.reviewDepth ?? ""}`
+        );
+      }
+      if (options.reviewDomain !== void 0 && !isReviewDomain(options.reviewDomain)) {
+        return invalidArg(
+          options,
+          `invalid --review-domain: ${options.reviewDomain}`
+        );
+      }
+      ledger = await initializeReview(
+        rootDir,
+        taskId,
+        options.reviewDepth,
+        isReviewDomain(options.reviewDomain) ? options.reviewDomain : void 0
+      );
+    } else if (action === "complete") {
+      if (!isReviewDomain(options.reviewDomain) || !options.report) {
+        return invalidArg(
+          options,
+          "review complete requires --review-domain and --report"
+        );
+      }
+      ledger = await completeReviewDomain(
+        rootDir,
+        taskId,
+        options.reviewDomain,
+        options.report,
+        parseCsv(options.blockers)
+      );
+    } else if (action === "remediate") {
+      ledger = await remediateReviewBlockers(
+        rootDir,
+        taskId,
+        parseCsv(options.resolved)
+      );
+    } else {
+      return invalidArg(
+        options,
+        `invalid review action: ${action ?? ""}`,
+        "Use: mancode workflow review <taskId> <init|complete|remediate|show>"
+      );
+    }
+    outputReviewLedger(ledger, options);
+    return EXIT_OK8;
+  } catch (error) {
+    return invalidArg(
+      options,
+      error instanceof Error ? error.message : "unable to update review"
+    );
+  }
+}
+function outputReviewLedger(ledger, options) {
+  if (options.json) {
+    console.log(JSON.stringify(ledger, null, 2));
+    return;
+  }
+  if (!ledger) return;
+  const openBlockers = ledger.blockers.filter(
+    (blocker) => blocker.status === "open"
+  );
+  console.log(
+    `Review: ${ledger.depth}; domains ${ledger.completedDomains.length}/${ledger.requiredDomains.length}; open blockers ${openBlockers.length}; remediation ${ledger.remediationRounds}/1`
+  );
+}
+function parseCsv(value) {
+  return (value ?? "").split(",").map((item) => item.trim()).filter(Boolean);
+}
 async function workflowCreate(rootDir, args, options) {
   const mode = args[0];
   const task = args.slice(1).join(" ").trim();
@@ -7057,7 +7379,13 @@ program.command("uninstall [platform]").description("Remove platform adapter or
 program.command("workflow <subcommand> [args...]").description("Manage mancode workflows").option("--dry-run", "Preview clean without deleting").option("--older-than <duration>", "Clean workflows older than (e.g. 30d)").option("--step <n>", "Update workflow current step").option("--status <status>", "Update workflow status").option(
   "--parent-task <taskId>",
   "Parent /man or /manteam workflow for mamba"
-).option("--blocking-reason <reason>", "Explain why a workflow is blocked").option("--outcome <outcome>", "Set mamba outcome").option("--plan-version <n>", "Set the next man/manteam plan revision").option("--skipped <steps>", "Update skipped steps as comma-separated values").option("--json", "Output as JSON (for scripts)").action(async (subcommand, args, options) => {
+).option("--blocking-reason <reason>", "Explain why a workflow is blocked").option("--outcome <outcome>", "Set mamba outcome").option("--plan-version <n>", "Set the next man/manteam plan revision").option("--skipped <steps>", "Update skipped steps as comma-separated values").option("--review-depth <depth>", "Review depth: targeted or full").option("--review-domain <domain>", "Review domain: quality or security").option(
+  "--report <path>",
+  "Relative Markdown report path for a review domain"
+).option("--blockers <ids>", "Comma-separated blocker ids found by a review").option(
+  "--resolved <ids>",
+  "Comma-separated blocker ids resolved in remediation"
+).option("--json", "Output as JSON (for scripts)").action(async (subcommand, args, options) => {
   const code = await workflow(process.cwd(), subcommand, args ?? [], options);
   process.exitCode = code;
 });