@walwal-harness/cli 7.1.34 → 7.1.37

package/apps/harness-dashboard/package-lock.json

@@ -985,15 +985,15 @@
       }
     },
     "node_modules/@next/env": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-15.5.16.tgz",
-      "integrity": "sha512-9QMKolCl+JnJtaRAQSXy4RQrhgfe8W7/G1+Hl3QSB/HZY7zQMzTwPDdTRwwio8BS96ps1MHpHhbS8qxoNV3JIQ==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-15.5.18.tgz",
+      "integrity": "sha512-hAV85Ckd9QR6RvH04MEKwsfLTksvFpO47j9xwtoIuvuPnlwecpSi+uZTtm8HirVbtlI2Fnz//xpcSTjFdyJk+g==",
       "license": "MIT"
     },
     "node_modules/@next/swc-darwin-arm64": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-15.5.16.tgz",
-      "integrity": "sha512-wzdER4JZj+31vNkhaZ1Ght3IsNI8DMwj7VqadfIOqJB5sh8FiOqNSopYADQn6mgEPomzDd/DHqBcfo2fmVMYtg==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-15.5.18.tgz",
+      "integrity": "sha512-w0WvQf1n+txiwns/9pwIQteCJpZTbxzO2SE0FLcwuD4v0WEh1JPOjdyxWL21XwJsdpx8cFRjyzxzCS/siP7HcQ==",
       "cpu": [
         "arm64"
       ],
@@ -1007,9 +1007,9 @@
       }
     },
     "node_modules/@next/swc-darwin-x64": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-15.5.16.tgz",
-      "integrity": "sha512-PPTo+cvcanxkuDEuDyZGk28ntmu0WjfkxqlG7hw9Mhsiribs4x1C6h2Culn0cJKqsne1gFjjZRK3ax7WYlSxgg==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-15.5.18.tgz",
+      "integrity": "sha512-znn71QmDuxm+BOaglihMZfvyySMnNljkVIY5Z2TCssBmm+WqL6c19VhtH5ktFkHa8EZ2bnTUpcNcmNSQsg67og==",
       "cpu": [
         "x64"
       ],
@@ -1023,9 +1023,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-15.5.16.tgz",
-      "integrity": "sha512-Jl0IL9P7S8uNl5oI1TqrQmfmLp7OqjWM58000pVnUVIsHrvPP6m9QDW/uNWYUbmd+8IYvc6MTeZKICstBMBpew==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-15.5.18.tgz",
+      "integrity": "sha512-yPPe5MNL+igZUa+OsqQJisqSfh6oarIuA1Q0BDxljGJhRQyZeP+WRHh7rs/jZUGMh5aY0YdIjXZG0VohkKkUdw==",
       "cpu": [
         "arm64"
       ],
@@ -1039,9 +1039,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-15.5.16.tgz",
-      "integrity": "sha512-Zf0BIqv/o5uOWfyRkzgGhyV2Tky7HLt0bG+w7XWdaU1JpyX0tltM3TrSfa/Y9c597SJG4CzN47+u2InhgZZ4vg==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-15.5.18.tgz",
+      "integrity": "sha512-glaCczEWIrHsokFZ3pP08U4BpKxwIdnT+txdOM32OBgpL9Yw4aqx8NejmgtZQZOdstQ5f0L3CasIZudzCuD+nw==",
       "cpu": [
         "arm64"
       ],
@@ -1055,9 +1055,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-15.5.16.tgz",
-      "integrity": "sha512-HCDDU1TRLeUDV180QQTWrs5Oa4lIcI7XH9nF0UVUVmYLN/boZ6LqyFtm3814gc1fv+lOVyKaw5B6bVC9BpXTSQ==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-15.5.18.tgz",
+      "integrity": "sha512-oUfg2EgJmU3R0OCOWiokGFUTvZiPfXtriXiuF3YNxRoROCdgvTedHIzYoeKH34gsZxS/V7mHbfq2hpAHwhH1/A==",
       "cpu": [
         "x64"
       ],
@@ -1071,9 +1071,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-musl": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-15.5.16.tgz",
-      "integrity": "sha512-kvXUY1dn5wxKuMkXxQRUbPjEnKxW1PR9uKOm0zpIpj3574+cFfaePhYFmBVtrOuwt+w34OdDzNaJr5Iixf+HBQ==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-15.5.18.tgz",
+      "integrity": "sha512-JLxSP3KTd9iu/bvUMQxH7RJo9xKSHf55/6RPE4a6FTSZygGn7uvZbCej0AHXydwkggQGSD9UddSjwv6Xz5ESfA==",
       "cpu": [
         "x64"
       ],
@@ -1087,9 +1087,9 @@
       }
     },
     "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-15.5.16.tgz",
-      "integrity": "sha512-zpOQuF+eyENMXRjglp2hZCIrUjTdO37suEBnDn1mX4PXSuetXZDMLpjKOh4dYSw3SiDTnOoOUwBl5i5Elr6nnQ==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-15.5.18.tgz",
+      "integrity": "sha512-ir1v7enP52K2HNz3tQQvwF+x7VNxBk1ciiZ18WBPvxf4C59IqdfmHPJYK3vH7rSxpuCVw/8C712wTXNAtEp+NA==",
       "cpu": [
         "arm64"
       ],
@@ -1103,9 +1103,9 @@
       }
     },
     "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-15.5.16.tgz",
-      "integrity": "sha512-LnwKYpiSmIzXlTq76hMeeIzZoDcFwu848p6H+QBkGFJIbZphgzNUPdHruJcHM/bFnaFeco0l1Frie5I27VKglA==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-15.5.18.tgz",
+      "integrity": "sha512-LIu5me6QTANCd25E7I5uIEfvgQ06RK7tvHAbYo3zCb3VpxQEPvMcSpd87NwUABDT6MbGPdEGR5VRiK4PPTJhQg==",
       "cpu": [
         "x64"
       ],
@@ -1687,9 +1687,9 @@
       "license": "MIT"
     },
     "node_modules/@types/node": {
-      "version": "22.19.17",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.19.17.tgz",
-      "integrity": "sha512-wGdMcf+vPYM6jikpS/qhg6WiqSV/OhG+jeeHT/KlVqxYfD40iYJf9/AE1uQxVWFvU7MipKRkRv8NSHiCGgPr8Q==",
+      "version": "22.19.18",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.19.18.tgz",
+      "integrity": "sha512-9v00a+dn2yWVsYDEunWC4g/TcRKVq3r8N5FuZp7u0SGrPvdN9c2yXI9bBuf5Fl0hNCb+QTIePTn5pJs2pwBOQQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2660,7 +2660,6 @@
       "version": "2.3.2",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
       "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
-      "dev": true,
       "hasInstallScript": true,
       "license": "MIT",
       "optional": true,
@@ -3948,12 +3947,12 @@
       }
     },
     "node_modules/next": {
-      "version": "15.5.16",
-      "resolved": "https://registry.npmjs.org/next/-/next-15.5.16.tgz",
-      "integrity": "sha512-aZExBk/V6JCu3NCFc90twdj9L/M3y0+ukeQwUAZbOiqRhAX+h2oMEa0NZFhcpj6HYRYjVS3V2/3xvyOpNnmw7A==",
+      "version": "15.5.18",
+      "resolved": "https://registry.npmjs.org/next/-/next-15.5.18.tgz",
+      "integrity": "sha512-eKL8zUJkX9Y5lE+RX/2YJoItVdGlIscyVyboeD9wSpp0PaGqjoA4tTpT2qPqz9ax+5IzGESyLSeZ/RCwbSZ2uQ==",
       "license": "MIT",
       "dependencies": {
-        "@next/env": "15.5.16",
+        "@next/env": "15.5.18",
         "@swc/helpers": "0.5.15",
         "caniuse-lite": "^1.0.30001579",
         "postcss": "8.4.31",
@@ -3966,14 +3965,14 @@
         "node": "^18.18.0 || ^19.8.0 || >= 20.0.0"
       },
       "optionalDependencies": {
-        "@next/swc-darwin-arm64": "15.5.16",
-        "@next/swc-darwin-x64": "15.5.16",
-        "@next/swc-linux-arm64-gnu": "15.5.16",
-        "@next/swc-linux-arm64-musl": "15.5.16",
-        "@next/swc-linux-x64-gnu": "15.5.16",
-        "@next/swc-linux-x64-musl": "15.5.16",
-        "@next/swc-win32-arm64-msvc": "15.5.16",
-        "@next/swc-win32-x64-msvc": "15.5.16",
+        "@next/swc-darwin-arm64": "15.5.18",
+        "@next/swc-darwin-x64": "15.5.18",
+        "@next/swc-linux-arm64-gnu": "15.5.18",
+        "@next/swc-linux-arm64-musl": "15.5.18",
+        "@next/swc-linux-x64-gnu": "15.5.18",
+        "@next/swc-linux-x64-musl": "15.5.18",
+        "@next/swc-win32-arm64-msvc": "15.5.18",
+        "@next/swc-win32-x64-msvc": "15.5.18",
         "sharp": "^0.34.3"
       },
       "peerDependencies": {

package/assets/templates/AGENTS-ko.md.template

@@ -110,6 +110,10 @@ CEO는 worker 기록 없이 완료된 산출물을 포함한 CXX 보고서를
 
 Owner는 최종 검수자다. Tester, QA worker, debugger, 배포 확인 담당자가 아니다.
 
+- Owner는 방향 제시, 추가 요구, hot-fix, 최종 acceptance feedback을 제공한다. 회사 루프를 계속 돌리기 위한 진행 신호가 아니다.
+- CEO는 Owner에게 계속 진행 여부, worker 고용 여부, 내부 옵션 선택, 다음 단계 시작 여부를 묻지 않는다.
+- CEO가 혼자 판단하기 어려우면 관련 CXX 회의를 열고 written recommendation을 받아 결정한 뒤 계속 진행한다.
+- Owner 입력 대기는 harness가 추론하거나 확보할 수 없는 외부 권한이 필요할 때만 허용한다: credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, 또는 명시된 Owner 방향과의 직접 충돌.
 - 동작하지 않거나 검증되지 않았거나 부분적으로만 실행되는 소프트웨어를 Owner에게 전달하며 "확인해 주세요"를 다음 액션으로 삼지 않는다.
 - Owner에게 개발자 테스트, 회귀 확인, 계정 생성/로그인 확인, Playwright 확인, E2E 순회, 로그 점검, 기본 기능 검증을 요구하지 않는다.
 - CEO와 CXX는 worker를 통해 자체 검증을 계획하고 실행한다: unit test, E2E test, Playwright/browser check, test account, seed data, build/run check, log evidence.

package/assets/templates/AGENTS.md.template

@@ -35,10 +35,11 @@ Codex does not need `.codex/agents/` to run this harness. The installed Codex co
 
 Don't assume. Don't hide confusion.
 
-- State assumptions before implementing. If uncertain, ask.
-- If multiple approaches exist, name them — don't pick silently.
+- State assumptions before implementing.
+- If multiple approaches exist, name them and choose the smallest reversible path from evidence.
 - Minimum change that solves the problem. No speculative scope.
-- If something is unclear, stop. Name what is unclear. Ask.
+- Do not ask the Owner routine operating questions. CEO/CXX resolve uncertainty internally through written CXX recommendations.
+- Stop for Owner input only when the next action requires external authority the harness cannot infer: credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or a direct conflict with stated Owner direction. Record the recommended default when blocked.
 
 For hot-fix: smallest correct patch only. Do not "improve" adjacent code.
 For goal: define verifiable success criteria before CEO routes to CXX.
@@ -70,6 +71,9 @@ CEO rejects any CXX report that contains completed deliverables without matching
 
 The Owner is the final acceptance reviewer, not a tester, QA worker, debugger, or deployment verifier.
 
+- The Owner sets direction, adds requirements, issues hot-fixes, and gives final acceptance feedback. The Owner is not the progress pump for the company loop.
+- CEO must not ask the Owner whether to continue, which worker to hire, which internal option to choose, or whether to start the next planned step.
+- If CEO cannot answer an operating question alone, CEO convenes the relevant CXX agents, records their recommendations, chooses a path, and continues.
 - Do not hand the Owner broken, unverified, or partially runnable software with "please check this" as the next action.
 - Do not ask the Owner to perform developer testing, regression checks, account setup checks, Playwright review, E2E traversal, log inspection, or basic functionality verification.
 - CEO and CXX must plan and execute self-verification through workers: unit tests, E2E tests, Playwright/browser checks, test accounts, seeded data, build/run checks, logs, and documented evidence.

package/assets/templates/config.json

@@ -240,7 +240,7 @@
       "command": ""
     },
     "production": {
-      "comment": "Owner+CEO+CTO 합의로만 services[] 를 수정한다. local/docker/vm/aws/cloud 등 운영 서버 매핑을 Owner에게 받아 기록한다. live=true 이고 services[] 가 있으면 OPS 는 매 hourly review 마다 port/health/log 상태를 운영보고서에 남긴다.",
+      "comment": "CEO+CTO+OPS가 repo config, scripts, running process, Docker, logs, CXX report에서 services[]와 운영 서버 매핑을 우선 도출한다. Owner 입력 대기는 credentials/secrets, unavailable production access, legal/business acceptance 같은 외부 권한이 필요할 때만 허용한다. live=true 이고 services[] 가 있으면 OPS 는 매 hourly review 마다 port/health/log 상태를 운영보고서에 남긴다.",
       "live": false,
       "services": [
         {

package/assets/templates/gitignore-append.txt

@@ -1 +1,6 @@
-# For consumer projects, add .worktrees/ to .gitignore
+# walwal-harness dashboard runtime
+.harness/dashboard/apps/harness-dashboard/node_modules/
+.harness/dashboard/apps/harness-dashboard/.next/
+.harness/dashboard/apps/harness-dashboard/.turbo/
+.harness/dashboard/apps/harness-dashboard/tsconfig.tsbuildinfo
+.harness/dashboard/.download/

package/assets/templates/memory.md

@@ -73,7 +73,7 @@ docmeta:
 - **TTL**: 영구
 - **Lesson**: walwal-harness 는 NEXUS 회사 메타포다. 다음 두 룰을 **절대로** 어기지 않는다.
   1. **정체성**: 사용자 = **Owner** (회사 외부 주주), Dispatcher = **CEO** (Owner 와의 유일한 대화 창구). 응답·GOAL·로그 어디서도 사용자를 "CEO" 로 호칭하지 않는다. 회사 내부 결정 (sprint 분할, mode 선택, agent 호출, 평가 점수) 을 Owner 에게 떠넘기지 않는다.
-  2. **자율 실행 (NEXUS P3)**: GOAL 확정 직후 회사는 **사용자 펌프 없이** 자율 진행. "다음 단계로 진행할까요?", "/harness-next 실행하시겠습니까?" 같은 진행 여부 질문은 자율성 위반. Owner 가 돌아오는 시점은 (a) GOAL 모호성 명료화 (1~2 개 객관식 질문, 한 번만), (b) 결과 보고, (c) escalation 셋 뿐.
+  2. **자율 실행 (NEXUS P3)**: GOAL 확정 직후 회사는 **사용자 펌프 없이** 자율 진행. "다음 단계로 진행할까요?", "/harness-next 실행하시겠습니까?" 같은 진행 여부 질문은 자율성 위반. CEO가 혼자 결정하기 어려우면 Owner에게 묻지 말고 관련 CXX 회의를 열어 written recommendation을 받은 뒤 결정한다. Owner 가 돌아오는 시점은 (a) 목표 변경/추가 요구/hot-fix, (b) 결과 보고와 최종 acceptance feedback, (c) credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, stated direction conflict 같은 외부 권한 block 뿐.
 - **Context**: v6.0.0 publish 직후 dispatcher 응답이 사용자를 "CEO 직접 리뷰…" 로 호명하고 "/harness-next 자동 진행하시겠습니까?" 로 사용자 펌프를 요구함. Owner 의 명시적 교정.
 - **Applies to**:
   - **Dispatcher**: 사용자 호칭/응답 문구, GOAL 정립, 모든 inbound/outbound owner 통신. → anti-pattern: `.harness/gotchas/dispatcher.md` [G-001]~[G-004].

package/bin/init.js

@@ -530,7 +530,29 @@ function ensureMissionLifecycleStates(opts = {}) {
 
     for (const mission of group) {
       const statePath = path.join(mission.abs, 'mission-state.json');
-      if (fs.existsSync(statePath)) continue;
+      if (fs.existsSync(statePath)) {
+        const state = readJsonFileSafe(statePath) || {};
+        const lifecycle = state.lifecycle || state.status;
+        const active = state.active === true;
+        const shouldDeactivate =
+          active &&
+          (isTerminalMissionLifecycle(lifecycle) ||
+            (mission.rel.includes('/') &&
+              (mission.type === 'submission' || mission.type === 'hotfix') &&
+              activeChild &&
+              activeChild.rel !== mission.rel));
+        if (shouldDeactivate) {
+          writes.push({
+            path: statePath,
+            state: {
+              ...state,
+              lifecycle: isTerminalMissionLifecycle(lifecycle) ? lifecycle : 'superseded',
+              active: false,
+            },
+          });
+        }
+        continue;
+      }
       const isChild = mission.rel.includes('/');
       const isActive = isChild
         ? activeChild?.rel === mission.rel
@@ -555,7 +577,7 @@ function ensureMissionLifecycleStates(opts = {}) {
     fs.writeFileSync(item.path, JSON.stringify(item.state, null, 2) + '\n');
   }
   if (writes.length) {
-    log(`mission-state.json: ${writes.length}개 기존 mission에 lifecycle 보강`);
+    log(`mission-state.json: ${writes.length}개 기존 mission lifecycle/active 보강`);
   }
   return { missing: writes.length, written: writes.length };
 }
@@ -826,9 +848,9 @@ function ensureHarnessEnv() {
   if (re.test(content)) return;
 
   const prefix = content && !content.endsWith('\n') ? '\n' : '';
-  const block = `${prefix}${content ? '\n' : ''}# Walwal Harness — CEO must agree on a {xx}000 base port with the Owner.\n# Set HARNESS_BASE_PORT before CXX agents allocate any service ports.\n# HARNESS_BASE_PORT=\n`;
+  const block = `${prefix}${content ? '\n' : ''}# Walwal Harness — CEO chooses an available {xx}000 base port unless Owner already specified one.\n# Set HARNESS_BASE_PORT before CXX agents allocate any service ports.\n# HARNESS_BASE_PORT=\n`;
   fs.writeFileSync(envPath, content + block);
-  log('.env: HARNESS_BASE_PORT placeholder added — set value with Owner approval before starting services');
+  log('.env: HARNESS_BASE_PORT placeholder added — CEO/CXX must choose an available value before starting services');
 }
 
 function ensureStructuredRuntimeFiles({ dryRun = false } = {}) {
@@ -941,6 +963,27 @@ function refreshScriptsForMigrate({ dryRun = false, backupDir = null } = {}) {
   chmodShellScripts(scriptsDest);
 }
 
+function ensureWakeScheduler({ dryRun = false } = {}) {
+  const wakeInstall = path.join(PROJECT_ROOT, 'scripts', 'harness-wake-install.sh');
+  if (!fs.existsSync(wakeInstall)) return;
+
+  log('  wake scheduler: project registration + launchd load check');
+  if (dryRun) return;
+
+  try {
+    execSync(`bash ${shellQuote(wakeInstall)} install ${shellQuote(PROJECT_ROOT)}`, {
+      cwd: PROJECT_ROOT,
+      stdio: 'pipe',
+      timeout: 15000,
+    });
+    log('  wake scheduler: registered');
+  } catch (e) {
+    const detail = String(e?.stderr || e?.message || '').trim().split('\n').slice(-1)[0];
+    log(`  wake scheduler: registration skipped (${detail || 'install command failed'})`);
+    log('  wake scheduler: run manually if needed: bash scripts/harness-wake-install.sh install .');
+  }
+}
+
 function migrateActivityHistory({ dryRun = false } = {}) {
   const recorder = path.join(PROJECT_ROOT, 'scripts', 'harness-activity-record.js');
   if (!fs.existsSync(recorder)) return;
@@ -2010,6 +2053,7 @@ function runMigrate(opts = {}) {
   // Runtime scripts are package-owned. Migrate must refresh them so existing
   // projects receive wake/meeting/OPS fixes without requiring a full init.
   refreshScriptsForMigrate({ dryRun, backupDir });
+  ensureWakeScheduler({ dryRun });
   migrateActivityHistory({ dryRun });
   updateRuleRegistryLinks(flags.ruleRegistryLinks || [], { dryRun, backupDir });
 
@@ -2578,6 +2622,7 @@ function main() {
   scaffoldHarness();
   installSkills();
   installScripts();
+  ensureWakeScheduler();
   installCommands();
   installSessionHook();
   installStatusline();

package/commands/goal.md

@@ -16,7 +16,7 @@ Required flow:
 1. Create or update a goal under `.harness/documents/goal-{goal_index}-{goal_name}/`.
 2. Write `.harness/documents/goal-{goal_index}-{goal_name}/mission-state.json` with `{"lifecycle":"active","active":true}` before routing CXX.
 3. Record CEO decisions in `.harness/documents/goal-{goal_index}-{goal_name}/ceo.md`.
-4. CEO decides whether brainstorming is needed or whether CXX questions can be issued immediately.
+4. CEO decides whether brainstorming is needed or whether CXX questions can be issued immediately. CEO must not ask the Owner which path to take.
 5. CEO asks COO, CDO, CTO, and CQO only the questions needed for this goal.
 6. CXX roles must start in a fresh session context. Do not let the default model impersonate a missing worker.
 7. CXX roles must not directly execute specialist deliverables. They must use hired workers for research, planning, design, implementation, QA, ops checks, and documentation.
@@ -24,6 +24,7 @@ Required flow:
 9. CEO must require a Worker Evidence Manifest and worker report paths under `.harness/documents/goal-{goal_index}-{goal_name}/{owning-cxx}/workers/` before accepting CXX completion.
 10. When the goal is accepted, cancelled, superseded, blocked, or closed, update `mission-state.json` to `complete`, `cancelled`, `superseded`, `blocked`, or `closed` and set `active:false`.
 11. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+12. Do not ask the Owner whether to continue, hire workers, choose internal options, or start the next step. If CEO cannot decide alone, convene the relevant CXX agents and decide from their written recommendations. Stop only for external authority such as credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 
 Note: A goal is the company's objective. Submissions and hot-fixes that happen while pursuing it should be recorded under that goal directory.
 

package/commands/hot-fix.md

@@ -17,7 +17,7 @@ Required flow:
 2. If another child mission under the goal is active, update its `mission-state.json` to `closed`, `cancelled`, or `superseded` with `active:false` before starting the hot-fix.
 3. Create `.harness/documents/{goal_name}/hotfix-{hotfix_index}-{hotfix_name}/ceo.md`.
 4. Write `.harness/documents/{goal_name}/hotfix-{hotfix_index}-{hotfix_name}/mission-state.json` with `{"lifecycle":"active","active":true}`.
-5. CEO summons CTO and CQO first; summon COO/CDO only when planning or UX decisions are involved.
+5. CEO summons CTO and CQO first; summon COO/CDO only when planning or UX decisions are involved. CEO must not ask the Owner whether to start the fix or which internal path to choose.
 6. CTO applies the smallest correct patch path through hired implementation skills.
 7. CXX roles must start in a fresh session context. Do not let the default model impersonate a missing CXX or worker.
 8. CXX roles must not directly execute specialist deliverables. They must use hired workers for implementation, QA, ops checks, and documentation even when the fix is small.
@@ -26,6 +26,7 @@ Required flow:
 11. CQO must register durable lessons in `.harness/gotchas/`, `.harness/conventions/`, or `.harness/memories/`. This step is mandatory, not optional, even for small fixes.
 12. Archive only after CQO has accepted the fix, then update `mission-state.json` to `complete` with `active:false`.
 13. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+14. Do not ask the Owner whether to continue, hire workers, choose internal options, or start the next step. If CEO cannot decide alone, convene the relevant CXX agents and decide from their written recommendations. Stop only for external authority such as credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 
 Note: `/hot-fix` is a problem-fix flow while pursuing the active goal. It belongs under that goal in history.
 

package/commands/submission.md

@@ -13,12 +13,12 @@ Codex adapter:
 - For CXX "fresh session context", use role-scoped context: read the CXX skill, active mission files, and required conventions/gotchas before writing that role's `{cxx}.md`.
 
 Required flow:
-1. Locate the active goal document root under `.harness/documents/{goal_name}/`. If no active goal exists, CEO must ask the Owner to create or select one with `/goal` before proceeding.
+1. Locate the active goal document root under `.harness/documents/{goal_name}/`. If no active goal exists, CEO must create/select the best matching goal record from available mission context or mark the submission blocked with the recommended default; do not ask the Owner an open-ended setup question.
 2. If another child mission under the goal is active, update its `mission-state.json` to `closed`, `cancelled`, or `superseded` with `active:false` before starting this submission.
 3. Create a submission record under `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/`.
 4. Write `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/mission-state.json` with `{"lifecycle":"active","active":true}`.
 5. Record CEO decisions in `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/ceo.md`.
-6. CEO routes only to the CXX agents needed for this additional requirement.
+6. CEO routes only to the CXX agents needed for this additional requirement. CEO must not ask the Owner which CXX or worker path to choose.
 7. CXX roles must start in a fresh session context. Do not let the default model impersonate a missing CXX or worker.
 8. CXX roles must not directly execute specialist deliverables. They must use hired workers for research, planning, design, implementation, QA, ops checks, and documentation.
 9. If a required worker is missing, the responsible CXX must invoke the installed `harness-hiring` skill before assigning the work.
@@ -26,6 +26,7 @@ Required flow:
 11. CEO must require a Worker Evidence Manifest and worker report paths under `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/{owning-cxx}/workers/` before accepting CXX completion.
 12. When the submission is accepted, cancelled, superseded, blocked, or closed, update `mission-state.json` to `complete`, `cancelled`, `superseded`, `blocked`, or `closed` and set `active:false`.
 13. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+14. Do not ask the Owner whether to continue, hire workers, choose internal options, or start the next step. If CEO cannot decide alone, convene the relevant CXX agents and decide from their written recommendations. Stop only for external authority such as credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 
 Note: `/submission` is not a new company goal and not an emergency fix. It is an additional requirement while pursuing the active goal. It belongs under that goal in history.
 

package/conventions/ceo.md

@@ -5,5 +5,7 @@
 - CEO routes work to CXX agents through agent/skill invocation, not slash commands.
 - CEO records mission framing and routing decisions in `.harness/documents/{goal-or-child-mission}/ceo.md`.
 - CEO asks only mission-relevant questions to COO, CDO, CTO, CQO, and OPS.
+- CEO does not ask the Owner routine operating questions. CEO decides from evidence, or convenes CXX agents and then decides.
+- CEO stops for Owner input only for external authority: credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 - CEO does not accept CXX completion unless specialist deliverables were produced by hired workers.
 - CEO requires worker names and `.harness/documents/{goal-or-child-mission}/{owning-cxx}/workers/{worker-name}.md` paths in CXX completion reports.

package/gotchas/ceo.md

@@ -7,3 +7,7 @@ CEO must not call `/coo`, `/cto`, or similar slash commands. CXX routing is agen
 ## Over-broad Meeting
 
 Do not summon every CXX for every mission by default. Ask only the roles needed for the decision.
+
+## Owner As Progress Pump
+
+Do not ask the Owner whether to continue, start the next step, hire a worker, choose between internal options, or verify routine technical behavior. Decide internally, record the rationale, and keep routing. If a decision is too ambiguous for CEO alone, convene the relevant CXX agents and decide from their recommendations.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@walwal-harness/cli",
-  "version": "7.1.34",
+  "version": "7.1.37",
   "description": "Company-style AI agent harness for Claude and Codex. Installs commands, CXX agents, skills, HR-Resource hiring pool, and project-local .harness runtime state.",
   "bin": {
     "walwal-harness": "bin/init.js"

package/scripts/harness-activity-record.js

@@ -130,7 +130,12 @@ function runtimeIdle(root) {
 
 function currentSamples(root, now = Date.now()) {
   const missions = collectMissions(root);
-  const active = missions.find((m) => m.active) ?? missions.sort((a, b) => b.mtimeMs - a.mtimeMs)[0] ?? null;
+  const active =
+    missions
+      .filter((m) => m.active)
+      .sort((a, b) => b.mtimeMs - a.mtimeMs)[0] ??
+    missions.sort((a, b) => b.mtimeMs - a.mtimeMs)[0] ??
+    null;
   if (!active) return [];
   const todos = readTodos(root);
   const idle = runtimeIdle(root);

package/scripts/harness-dashboard-up.sh

@@ -2,8 +2,8 @@
 # walwal-harness — Brick Office dashboard launcher
 #
 # 처음 쓰는 사용자도 한 줄로 대시보드를 띄워볼 수 있게 만든 helper.
-# npm 패키지에 포함된 apps/harness-dashboard 를 사용자 프로젝트 외부
-# (~/.walwal-harness/dashboard/<project-key>) 에 격리 복사 후 dev 실행한다.
+# npm 패키지에 포함된 apps/harness-dashboard 를 프로젝트별 runtime 영역
+# (.harness/dashboard/) 에 복사 후 dev 실행한다.
 # 구버전 호환을 위해 패키지에 dashboard 가 없으면 git sparse-checkout 으로 fallback 한다.
 #
 # Usage:
@@ -38,9 +38,7 @@ if [[ ! -d "${HARNESS_ROOT}/.harness" ]]; then
   exit 3
 fi
 
-PROJECT_KEY="$(printf '%s' "${HARNESS_ROOT}" | shasum -a 1 | awk '{print substr($1,1,12)}')"
-PROJECT_NAME="$(basename "${HARNESS_ROOT}")"
-LOCAL_DIR="${HOME}/.walwal-harness/dashboard/${PROJECT_NAME}-${PROJECT_KEY}"
+LOCAL_DIR="${HARNESS_ROOT}/.harness/dashboard"
 VERSION_FILE="${LOCAL_DIR}/.walwal-dashboard-version"
 
 PACKAGE_ROOT="${HARNESS_ROOT}/node_modules/@walwal-harness/cli"
@@ -53,8 +51,33 @@ if [[ "$REINSTALL" == "true" ]]; then
   rm -rf "$LOCAL_DIR"
 fi
 
+ensure_gitignore() {
+  local gitignore="${HARNESS_ROOT}/.gitignore"
+  local marker="# walwal-harness dashboard runtime"
+  local block
+  block="$(cat <<'EOF'
+# walwal-harness dashboard runtime
+.harness/dashboard/apps/harness-dashboard/node_modules/
+.harness/dashboard/apps/harness-dashboard/.next/
+.harness/dashboard/apps/harness-dashboard/.turbo/
+.harness/dashboard/apps/harness-dashboard/tsconfig.tsbuildinfo
+.harness/dashboard/.download/
+EOF
+)"
+  if [[ -f "$gitignore" ]] && grep -Fq "$marker" "$gitignore"; then
+    return
+  fi
+  mkdir -p "$(dirname "$gitignore")"
+  if [[ -s "$gitignore" ]] && [[ "$(tail -c 1 "$gitignore" 2>/dev/null || true)" != "" ]]; then
+    printf '\n' >> "$gitignore"
+  fi
+  printf '%s\n' "$block" >> "$gitignore"
+}
+
+ensure_gitignore
+
 echo "[brick-office] HARNESS_ROOT = ${HARNESS_ROOT}"
-echo "[brick-office] dashboard 격리 경로 = ${LOCAL_DIR}"
+echo "[brick-office] dashboard runtime path = ${LOCAL_DIR}"
 
 if [[ -d "${PACKAGED_DASHBOARD}" ]]; then
   INSTALLED_VERSION=""
@@ -70,14 +93,19 @@ if [[ -d "${PACKAGED_DASHBOARD}" ]]; then
   fi
 elif [[ ! -d "${LOCAL_DIR}/${DASHBOARD_PATH}" ]]; then
   echo "[brick-office] 첫 실행 — git sparse-checkout 으로 dashboard 만 가져옵니다 (~5MB)."
-  mkdir -p "${LOCAL_DIR}"
-  cd "${LOCAL_DIR}"
+  rm -rf "${LOCAL_DIR}/.download"
+  mkdir -p "${LOCAL_DIR}/.download"
+  cd "${LOCAL_DIR}/.download"
   git init -q
   git remote add origin "${REPO_URL}" 2>/dev/null || true
   git config core.sparseCheckout true
   echo "${DASHBOARD_PATH}/" > .git/info/sparse-checkout
   git fetch --depth=1 origin main -q
   git checkout main -q
+  mkdir -p "${LOCAL_DIR}/apps"
+  rm -rf "${LOCAL_DIR:?}/${DASHBOARD_PATH}"
+  cp -R "${DASHBOARD_PATH}" "${LOCAL_DIR}/apps/"
+  rm -rf "${LOCAL_DIR}/.download"
   echo "[brick-office] 다운로드 완료."
 fi
 

package/scripts/harness-hourly-review.sh

@@ -397,7 +397,7 @@ meeting_json="$(jq -n \
   echo "### Dispatcher/CEO"
   case "$verdict" in
     owner_needed)
-      echo "- 판단: escalation 상태이므로 Owner에게 외부 결정이 필요한지 확인한다."
+      echo "- 판단: escalation 상태다. 먼저 CEO/CXX가 내부 권장안을 확정하고, 외부 권한(credentials/secrets, payment approval, legal/business acceptance, production access, destructive data action)이 필요할 때만 Owner-facing BLOCKED로 보고한다."
       ;;
     *)
       echo "- 판단: 최초 GOAL 이후 Owner 입력은 interrupt다. 회사는 Owner를 기다리지 않고 GOAL 달성 루프를 계속한다."

package/scripts/harness-service-ops-monitor.sh

@@ -38,7 +38,7 @@ base_port="${env_base_port:-$config_base_port}"
 if [ -z "$base_port" ]; then
   echo "ERROR: HARNESS_BASE_PORT is not set." >&2
   echo "" >&2
-  echo "  CEO must agree on a {xx}000 base port with the Owner and add it to .env:" >&2
+  echo "  CEO/CXX must choose an available {xx}000 base port and add it to .env:" >&2
   echo "    HARNESS_BASE_PORT=3000" >&2
   echo "" >&2
   echo "  OPS cannot monitor ports without a declared base. Set the value and re-run." >&2
@@ -208,7 +208,7 @@ if [ "$live" != "true" ] || [ "${service_count:-0}" -eq 0 ]; then
       (if (.log.configured|not) then "not configured" elif (.log.exists|not) then "missing" else ((.log.recent_errors|tostring) + " recent errors") end) +
       " | \(.status) |"' <<<"$build_results_json"
     echo ""
-    echo "No production service endpoints are configured. Owner+CEO+CTO must define runtime.production.services[] before OPS can monitor live servers."
+    echo "No production service endpoints are configured. CEO+CTO+OPS must derive runtime.production.services[] from repo config, scripts, running processes, Docker, logs, or CXX reports before OPS can monitor live servers. Escalate to Owner only for external authority such as missing credentials or unavailable production access."
   } > "$report_path"
   echo "$report_rel"
   exit 0

package/scripts/harness-stop.sh

@@ -28,23 +28,6 @@ SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 AUTO_CHAIN=$(jq -r '.behavior.auto_chain_on_stop // true' "$CONFIG" 2>/dev/null || echo "true")
 if [ "$AUTO_CHAIN" != "true" ]; then exit 0; fi
 
-# CXX direct-execution guard:
-# If a mission has CXX documents but no worker reports, block the stop so the
-# company loop must hire/dispatch workers instead of ending with CXX-only work.
-if [ -x "$SCRIPT_DIR/harness-worker-evidence-validate.sh" ]; then
-  WORKER_EVIDENCE_JSON=$("$SCRIPT_DIR/harness-worker-evidence-validate.sh" "$CWD" json 2>/dev/null || true)
-  WORKER_EVIDENCE_OK=$(echo "$WORKER_EVIDENCE_JSON" | jq -r 'if has("ok") then .ok else true end' 2>/dev/null || echo true)
-  if [ "$WORKER_EVIDENCE_OK" != "true" ]; then
-    REASON=$(echo "$WORKER_EVIDENCE_JSON" | jq -r '
-      "CXX 직접 실행 차단: " +
-      ([.violations[] | "\(.mission) has CXX docs without worker reports: \(.docs | join(","))"] | join("; ")) +
-      ". harness-hiring/resource-manager로 전문 worker를 고용 또는 배정하고 .harness/documents/{goal-or-child-mission}/{owning-cxx}/workers/{worker-name}.md 를 남긴 뒤 계속하라."
-    ' 2>/dev/null || echo "CXX 직접 실행 차단: worker report가 없는 mission이 있습니다. hired worker 보고서를 먼저 생성하세요.")
-    jq -nc --arg reason "$REASON" '{decision:"block", reason:$reason}'
-    exit 0
-  fi
-fi
-
 # 무한루프 방지: 한 sprint 안에서 stop_chain_count 가 상한을 넘으면 중단
 STOP_CHAIN_MAX=$(jq -r '.behavior.auto_chain_max_per_sprint // 200' "$CONFIG" 2>/dev/null || echo 200)
 STOP_CHAIN_COUNT=$(jq -r '.conductor.stop_chain_count // 0' "$PROGRESS" 2>/dev/null || echo 0)
@@ -96,6 +79,24 @@ fi
 
 if [ "$should_chain" != "true" ]; then exit 0; fi
 
+# CXX direct-execution guard:
+# Only run this while an active company loop is actually chaining. Scope it to
+# the newest active mission so legacy/archive documents cannot keep Stop
+# blocked forever.
+if [ -x "$SCRIPT_DIR/harness-worker-evidence-validate.sh" ]; then
+  WORKER_EVIDENCE_JSON=$("$SCRIPT_DIR/harness-worker-evidence-validate.sh" "$CWD" json latest-active 2>/dev/null || true)
+  WORKER_EVIDENCE_OK=$(echo "$WORKER_EVIDENCE_JSON" | jq -r 'if has("ok") then .ok else true end' 2>/dev/null || echo true)
+  if [ "$WORKER_EVIDENCE_OK" != "true" ]; then
+    REASON=$(echo "$WORKER_EVIDENCE_JSON" | jq -r '
+      "CXX 직접 실행 차단: " +
+      ([.violations[] | "\(.mission) has CXX docs without worker reports: \(.docs | join(","))"] | join("; ")) +
+      ". harness-hiring/resource-manager로 전문 worker를 고용 또는 배정하고 .harness/documents/{goal-or-child-mission}/{owning-cxx}/workers/{worker-name}.md 를 남긴 뒤 계속하라."
+    ' 2>/dev/null || echo "CXX 직접 실행 차단: worker report가 없는 active mission이 있습니다. hired worker 보고서를 먼저 생성하세요.")
+    jq -nc --arg reason "$REASON" '{decision:"block", reason:$reason}'
+    exit 0
+  fi
+fi
+
 # stop_chain_count 증가 (느슨한 카운터 — race 허용)
 NEW_COUNT=$((STOP_CHAIN_COUNT + 1))
 TMP=$(mktemp)

package/scripts/harness-user-prompt-submit.sh

@@ -195,6 +195,8 @@ ${CONTEXT_WARNING}
 - CXX는 직접 전문 산출물을 만들지 않고 worker report를 \`.harness/documents/{goal-or-child-mission}/{owning-cxx}/workers/\`에 남겨야 한다
 - Owner에게 "계속 진행", "진행할까요?", "다음 명령을 입력하세요"를 요구하지 않는다. GOAL이 있고 escalation이 아니면 즉시 next_agent/current_agent 업무를 수행한다
 - Owner 입력은 목표 변경·사고·결과 확인용이지 회사 진행을 펌프하는 신호가 아니다
+- CEO가 혼자 결정하기 어려우면 Owner에게 묻지 말고 관련 CXX 회의를 열어 written recommendation 을 받고 결정한다
+- Owner 입력 대기는 credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, stated direction conflict 같은 외부 권한이 필요할 때만 허용한다
 - CEO는 필요한 CXX만 호출하고, CXX는 resource-manager/hiring 없이 worker 업무를 수행하지 않는다
 - 목표 설정/변경 → goal flow | 추가 요구사항 → submission flow | 긴급 수정 → hot-fix flow | 메타 질문 → 짧게 응답 (skip)
 - 활성 pipeline → next_agent/current_agent 컨텍스트로 계속