@walwal-harness/cli 7.1.36 → 7.1.37

package/CHANGELOG.md

@@ -31,6 +31,13 @@ docmeta:
 
 ## Unreleased
 
+## 7.1.37 — Project-local dashboard runtime + wake reliability (2026-05-31)
+
+- Dashboard runtime now lives under each project’s `.harness/dashboard/` instead of the shared `~/.walwal-harness/dashboard/` cache, with generated dependencies/build output ignored via `.gitignore`.
+- Dashboard heatmap is no longer filtered by the selected goal/submission/hot-fix; it shows all recorded activity while still preserving mission IDs on active cells.
+- Dashboard worker parsing now accepts `name`, `progress`, `eta`, and `report_path` telemetry and no longer treats docmeta-only report drafts as proof of live worker activity.
+- Init/migrate now best-effort registers the project with the hourly wake scheduler, and wake status now uses the macOS `launchctl print gui/$UID/...` state to avoid false `NOT loaded` reports.
+
 ## 7.1.36 — Stop hook active-loop guard + visible heatmap (2026-05-29)
 
 - Stop hook no longer runs worker evidence validation before deciding whether the company loop should chain.

package/HR-Resource/ceo/SKILL.md

@@ -9,6 +9,17 @@ disable-model-invocation: false
 
 You are the only direct conversation channel with the Owner.
 
+## Autonomous Operating Charter
+
+The Owner gives direction and final acceptance, not routine operating answers.
+
+- Do not ask the Owner whether to continue, which option to choose, which worker to hire, or whether to start the next planned step.
+- When a decision is needed, decide from mission evidence, conventions, gotchas, CXX recommendations, and the smallest reversible path. Record the decision and rationale in `ceo.md`.
+- If CEO cannot decide alone, convene the relevant CXX agents and use their written recommendations to decide. Do not turn the uncertainty into an Owner question.
+- Treat Owner messages as direction changes, new requirements, hot-fixes, final acceptance feedback, or explicit constraints. They are not required to keep the company loop moving.
+- Only stop for Owner input when the next action requires external authority the harness cannot infer or obtain: credentials/secrets, payment approval, legal/business acceptance, production access not already granted, destructive data action, or a goal conflict that would knowingly violate the Owner's stated direction.
+- When stopped for external authority, mark the mission `blocked` with the exact missing authority and the internally recommended default. Do not ask an open-ended question.
+
 ## Lazy Rule Loading
 
 Before routing or accepting CXX work, enforce lazy loading:
@@ -29,7 +40,7 @@ Before routing or accepting CXX work, enforce lazy loading:
    - CQO: quality gates, e2e/backtest strategy, regression and archive criteria.
    - OPS: build/service environment monitoring, CQO verification watch, port map checks, launch observation, production watch, and exception monitoring.
 4. Route completed outputs to the next responsible CXX.
-5. Report outcomes and escalations to the Owner.
+5. Report outcomes, final acceptance requests, and true external-authority blocks to the Owner.
 
 ## Hard Rules
 
@@ -41,9 +52,9 @@ Before routing or accepting CXX work, enforce lazy loading:
 - Every CXX starts from fresh context and records decisions in `.harness/documents/{goal-or-child-mission}/{cxx}.md`.
 - Hiring or resource-manager output is never a stopping point. After missing workers are registered, immediately continue routing to the responsible CXX fresh sessions and require those CXX agents to brief/run the hired workers. Do not end the turn with only a hiring summary while the Owner goal remains unfinished.
 - Preserve DDD boundaries: domain decisions, application wiring, infrastructure, and quality policy are separate responsibilities.
-- Before CTO/CDO/OPS allocate runnable services, agree with the Owner on a `{xx}000` base port and write it to project `.env` as `HARNESS_BASE_PORT={xx}000`. Mentioning the value in `ceo.md` is not sufficient.
+- Before CTO/CDO/OPS allocate runnable services, choose a `{xx}000` base port from available local evidence unless the Owner already specified one, then write it to project `.env` as `HARNESS_BASE_PORT={xx}000`. Mentioning the value in `ceo.md` is not sufficient.
 - After writing `.env`, verify with `grep '^HARNESS_BASE_PORT=' .env` before routing service work.
-- For service monitoring, collect the Owner's server mapping first: local PC, Docker, VM, AWS/cloud, host, port, health path, log path, and contact/source.
+- For service monitoring, derive the server mapping from repository config, running processes, Docker, scripts, logs, and CXX reports first: local PC, Docker, VM, AWS/cloud, host, port, health path, log path, and contact/source. If a production target or credential is unavailable, record a BLOCKED external-authority item instead of asking a broad Owner question.
 - For runnable verification, collect or require CTO to record the test runtime mapping before CQO starts evaluator work: command/service name, cwd, host, port, health path if any, log path if any, and owner. OPS must watch that runtime during CQO Playwright/E2E/API/visual/performance/regression checks.
 - CEO must not accept CQO PASS for a runnable product unless OPS has supplied clean verification-watch evidence or an explicit not-applicable reason. Open OPS incidents, missing runtime mapping, missing required logs, service down, or health mismatch block Owner acceptance.
 - After launch, CEO treats OPS production incidents as company events. CEO convenes CTO/CQO/OPS when user-impacting production signals appear; CTO owns recovery, CQO owns regression confirmation, and OPS owns evidence and close criteria.
@@ -94,7 +105,7 @@ If CEO needs implementation done, CEO routes to CTO. CTO then hires dev workers.
 If CEO needs QA done, CEO routes to CQO. CQO then hires evaluator/tester workers.
 CEO does not contact workers. CXX contact workers.
 
-**When a CXX is unavailable or unresponsive:** escalate to the Owner. Do not act on their behalf.
+**When a CXX is unavailable or unresponsive:** retry with a fresh role-scoped context, route to another relevant CXX for recovery planning, or record an internal blocker with evidence. Escalate to the Owner only when the blocker requires external authority listed in the Autonomous Operating Charter.
 
 ## Worktree Isolation Failure — No git Repo
 

package/HR-Resource/ops/SKILL.md

@@ -17,7 +17,7 @@ OPS owns three environment classes:
 
 - Build environment: command-based local execution such as `flutter run`, `npm run dev`, test watchers, local build scripts, and other foreground/background commands used by CXX workers.
 - Verification environment: the runnable local, preview, Docker, or cloud target used while CQO evaluator workers run Playwright, E2E, API, visual, accessibility, performance, or regression checks.
-- Service environment: an actual server endpoint that can be monitored. The server may be the Owner's local PC, Docker, a VM, AWS, or another cloud/server target. OPS does not invent this mapping; CEO must collect it from the Owner and record it before OPS treats it as live.
+- Service environment: an actual server endpoint that can be monitored. The server may be the Owner's local PC, Docker, a VM, AWS, or another cloud/server target. OPS does not invent this mapping; CEO/CTO/OPS must derive it from repo config, scripts, running processes, Docker, logs, and CXX reports before OPS treats it as live. Escalate to Owner only when external authority is missing, such as credentials or unavailable production access.
 
 OPS is not the implementation owner. CTO/DevOps workers start or change systems; OPS observes whether the declared build/service environments are healthy and raises evidence-backed events.
 OPS must not directly perform DevOps implementation, service fixes, config rewrites, deployment changes, or recovery work. OPS may only monitor, classify, brief hired Ops/DevOps workers, review their reports, and escalate evidence-backed events.
@@ -46,8 +46,8 @@ After service launch, OPS continues the same monitoring duty against `runtime.pr
 
 ## Port Policy
 
-- CEO must agree on a `{xx}000` base port with the Owner before CXX services are allocated.
-- The agreed base port is recorded in project `.env` as `HARNESS_BASE_PORT`.
+- CEO/CTO/OPS must choose an available `{xx}000` base port before CXX services are allocated, unless the Owner already specified one.
+- The selected base port is recorded in project `.env` as `HARNESS_BASE_PORT`.
 - Service-specific ports must be derived above that base port, for example `HARNESS_FRONTEND_PORT`, `HARNESS_API_PORT`, and `HARNESS_DASHBOARD_PORT`.
 - CXX agents must read `.env` or `.harness/config.json runtime.ports.base` before assigning ports.
 - OPS reports any service using an unmapped or off-range port as an ops drift.

package/README.md

@@ -164,7 +164,7 @@ Run on a different port:
 bash scripts/harness-dashboard-up.sh --port 3002
 ```
 
-Force-refresh the isolated dashboard cache when an older dashboard is still shown:
+Force-refresh the project-local dashboard runtime when an older dashboard is still shown:
 
 ```bash
 bash scripts/harness-dashboard-up.sh --port 3002 --reinstall
@@ -175,7 +175,9 @@ Dashboard options:
 | Option | Role |
 |---|---|
 | `--port <port>` | Run Brick Office on a custom port, e.g. `3002` |
-| `--reinstall` | Delete and rebuild the isolated dashboard cache under `~/.walwal-harness/dashboard/` |
+| `--reinstall` | Delete and rebuild the project-local dashboard runtime under `.harness/dashboard/` |
+
+The dashboard app copy lives under `.harness/dashboard/` for the current project. Generated dependencies and build output are ignored via `.gitignore`; the runtime files the dashboard reads remain the normal `.harness/` files.
 
 ### Company Auto-Chain State
 
@@ -283,6 +285,7 @@ harness-hiring           → register and onboard worker
 
 | Version | Summary |
 |---|---|
+| 7.1.37 | Project-local dashboard runtime under `.harness/dashboard/`, unfiltered all-mission heatmap, worker telemetry parsing, and more reliable hourly wake registration/status |
 | 7.1.36 | Stop hook only validates worker evidence while chaining the active loop, scopes validation to the newest active mission, and makes the 24h heatmap visible at 10-minute resolution |
 | 7.1.35 | Fix dashboard heatmap mission scoping, choose the newest active mission for activity recording, and normalize duplicate active child mission states during init/migrate |
 | 7.1.34 | Fix dashboard 500 when `company_state.workers` is recorded as a keyed worker map instead of an array |

package/apps/harness-dashboard/components/Scene.tsx

@@ -116,7 +116,7 @@ export function Scene({ snapshot: initial, lang = "ko" }: SceneProps) {
     );
   }, [snapshot.missions, selectedGoal]);
 
-  const lanes = useMemo(() => buildLanes(snapshot, selectedMission), [selectedMission, snapshot]);
+  const lanes = useMemo(() => buildLanes(snapshot), [snapshot]);
   const heatmapStartedAt = useMemo(() => Date.now() - VISIBLE_BUCKETS * BUCKET_MS, [snapshot.ts]);
   const persistedHeatSamples = useMemo<HeatSample[]>(
     () =>
@@ -130,13 +130,13 @@ export function Scene({ snapshot: initial, lang = "ko" }: SceneProps) {
     [snapshot.activitySamples]
   );
   const [heatSamples, setHeatSamples] = useState<HeatSample[]>([]);
-  const sampleSourceRef = useRef({ lanes, snapshot, selectedMission });
+  const sampleSourceRef = useRef({ lanes, snapshot });
   useEffect(() => {
-    sampleSourceRef.current = { lanes, snapshot, selectedMission };
-  });
+    sampleSourceRef.current = { lanes, snapshot };
+  }, [lanes, snapshot]);
   useEffect(() => {
     const tick = () => {
-      const { lanes, snapshot, selectedMission } = sampleSourceRef.current;
+      const { lanes, snapshot } = sampleSourceRef.current;
       // Gate live samples on the harness runtime — once the session reports
       // completion (or there's no current/next agent), every "active" signal
       // is stale (todos stay status="active", worker mtimes stay recent), so
@@ -156,7 +156,7 @@ export function Scene({ snapshot: initial, lang = "ko" }: SceneProps) {
       }
       setHeatSamples((prev) => {
         const now = Date.now();
-        const activeMission = selectedMission ?? snapshot.missions[0] ?? null;
+        const activeMission = snapshot.missions.find((mission) => mission.active) ?? snapshot.missions[0] ?? null;
         const next: HeatSample[] = [];
         for (const lane of lanes) {
           // Live overlay records active work only. Historical participation is
@@ -204,10 +204,10 @@ export function Scene({ snapshot: initial, lang = "ko" }: SceneProps) {
     () => buildHeatmap(
       snapshot,
       lanes,
-      filterHeatSamplesForMission([...persistedHeatSamples, ...heatSamples], selectedMission),
+      [...persistedHeatSamples, ...heatSamples],
       heatmapStartedAt
     ),
-    [heatSamples, heatmapStartedAt, lanes, persistedHeatSamples, selectedMission, snapshot]
+    [heatSamples, heatmapStartedAt, lanes, persistedHeatSamples, snapshot]
   );
   const [selectedLaneId, setSelectedLaneId] = useState(lanes[0]?.id ?? "ceo");
   const [dragStart, setDragStart] = useState<{ x: number; y: number } | null>(null);
@@ -1806,14 +1806,39 @@ function heatColor(count: number) {
 
 // ===== Lane / Heatmap builders =====
 
-function buildLanes(snapshot: HarnessSnapshot, selectedMission: MissionDoc | null): AgentLane[] {
-  const activeMission = selectedMission ?? snapshot.missions[0] ?? null;
+function buildLanes(snapshot: HarnessSnapshot): AgentLane[] {
+  const activeMission = snapshot.missions.find((mission) => mission.active) ?? snapshot.missions[0] ?? null;
+  const workersByRole = new Map<CxxRole, Array<{ worker: WorkerDocEntry; mission: MissionDoc }>>();
+  for (const role of CXX_ROLES) workersByRole.set(role, []);
+
+  const workerIndex = new Map<string, { worker: WorkerDocEntry; mission: MissionDoc }>();
+  for (const mission of snapshot.missions) {
+    for (const worker of mission.workers) {
+      if (!CXX_ROLES.includes(worker.owner as CxxRole)) continue;
+      const role = worker.owner as CxxRole;
+      const key = `${role}:${worker.name}`;
+      const existing = workerIndex.get(key);
+      if (
+        !existing ||
+        (!existing.worker.active && worker.active) ||
+        (existing.worker.status === "COMPLETE" && worker.status !== "COMPLETE")
+      ) {
+        workerIndex.set(key, { worker, mission });
+      }
+    }
+  }
+
+  for (const entry of workerIndex.values()) {
+    workersByRole.get(entry.worker.owner as CxxRole)?.push(entry);
+  }
+
   // CXX → its workers, then next CXX → its workers (proper hierarchy).
   // No cap: heatmap container scrolls vertically so OPS at the bottom is always
   // reachable even when upstream CXX bring many workers.
   const lanes: AgentLane[] = [];
   for (const role of CXX_ROLES) {
-    const workers = activeMission?.workers.filter((w) => w.owner === role) ?? [];
+    const workerEntries = workersByRole.get(role) ?? [];
+    const workers = workerEntries.map((entry) => entry.worker);
     const todos = snapshot.todos.filter((t) => t.owner === role);
     const hasError =
       (role === "ops" && snapshot.incidents.length > 0) ||
@@ -1832,7 +1857,7 @@ function buildLanes(snapshot: HarnessSnapshot, selectedMission: MissionDoc | nul
       workers,
       mission: activeMission,
     });
-    for (const worker of workers) {
+    for (const { worker, mission } of workerEntries) {
       lanes.push({
         id: `${role}:${worker.name}`,
         label: `└ ${worker.displayName.slice(0, 16)}`,
@@ -1843,24 +1868,13 @@ function buildLanes(snapshot: HarnessSnapshot, selectedMission: MissionDoc | nul
         todos: 0,
         workers: [],
         worker,
-        mission: activeMission,
+        mission,
       });
     }
   }
   return lanes;
 }
 
-function filterHeatSamplesForMission(samples: HeatSample[], selectedMission: MissionDoc | null) {
-  if (!selectedMission) return samples;
-  return samples.filter((sample) => {
-    if (sample.missionId) return sample.missionId === selectedMission.missionId;
-    // Legacy CXX samples from progress.log did not carry a mission id. Keep
-    // role-level history, but do not project legacy worker rows onto unrelated
-    // mission-specific worker lanes.
-    return !sample.laneId.includes(":");
-  });
-}
-
 function buildHeatmap(
   snapshot: HarnessSnapshot,
   lanes: AgentLane[],

package/apps/harness-dashboard/lib/__tests__/harness-state.test.ts

@@ -382,7 +382,7 @@ describe("readHarnessState", () => {
     });
   });
 
-  it("keeps recently written docmeta worker reports active without an explicit COMPLETE marker", () => {
+  it("does not treat a recently written docmeta draft as live worker activity without runtime state", () => {
     const harnessDir = path.join(dir, ".harness");
     const missionDir = path.join(harnessDir, "documents", "goal-1-dashboard");
     mkdirSync(path.join(missionDir, "cto", "workers"), { recursive: true });
@@ -403,9 +403,42 @@ describe("readHarnessState", () => {
     const workers = readHarnessState(dir).missions[0].workers;
     expect(workers[0]).toMatchObject({
       name: "frontend-worker",
-      status: "IN_PROGRESS",
-      active: true,
+      status: "COMPLETE",
+      active: false,
+    });
+  });
+
+  it("reads manual worker telemetry with name, progress, eta, and report_path", () => {
+    const harnessDir = path.join(dir, ".harness");
+    mkdirSync(harnessDir, { recursive: true });
+    writeFileSync(
+      path.join(harnessDir, "progress.json"),
+      JSON.stringify({
+        agent_status: "running",
+        company_state: {
+          active_workers: 2,
+          workers: [
+            {
+              name: "frontend-engineer-multi-strategy",
+              status: "running",
+              progress: "70%",
+              eta: "2026-05-31 17:00",
+              report_path: ".harness/documents/goal-1/cto/workers/frontend-engineer-multi-strategy.md",
+            },
+          ],
+        },
+      })
+    );
+
+    const worker = readHarnessState(dir).dashboard.workers[0];
+    expect(worker).toMatchObject({
+      agent: "frontend-engineer-multi-strategy",
+      feature: "frontend-engineer-multi-strategy",
+      status: "running",
+      log: ".harness/documents/goal-1/cto/workers/frontend-engineer-multi-strategy.md",
+      progress: 0.7,
     });
+    expect(worker.summary).toContain("2026-05-31 17:00");
   });
 
   it("accepts keyed company_state.workers maps from manual CXX telemetry", () => {

package/apps/harness-dashboard/lib/harness-state.ts

@@ -45,7 +45,6 @@ import type {
 
 const SNAPSHOT_VERSION = "1.2.0";
 const GOAL_DESC_TRUNCATE = 200;
-const RECENT_WORKER_ACTIVE_MS = 10 * 60 * 1000;
 const ACTIVITY_RETENTION_MS = 7 * 24 * 60 * 60 * 1000;
 
 interface RawProgress {
@@ -148,22 +147,31 @@ interface RawProgress {
   company_state?: {
     active_workers?: number;
     workers?: Array<{
+      name?: string;
       team?: number | string;
       feature?: string;
       agent?: string;
       phase?: string;
       prompt?: string | null;
       log?: string | null;
+      report?: string | null;
+      report_path?: string | null;
+      progress?: string | number | null;
+      eta?: string | null;
       spawn_status?: string;
       status?: string;
       pid?: number | null;
     }> | Record<string, {
+      name?: string;
       team?: number | string;
       feature?: string;
       agent?: string;
       phase?: string;
       prompt?: string | null;
       log?: string | null;
+      report_path?: string | null;
+      progress?: string | number | null;
+      eta?: string | null;
       spawn_status?: string;
       status?: string;
       pid?: number | null;
@@ -797,6 +805,7 @@ function readFeatureTitles(rootDir: string): Map<string, string> {
 }
 
 interface RawWorker {
+  name?: string;
   team?: number | string;
   feature?: string;
   agent?: string;
@@ -808,6 +817,9 @@ interface RawWorker {
   pid?: number | null;
   owner?: string;
   report?: string | null;
+  report_path?: string | null;
+  progress?: string | number | null;
+  eta?: string | null;
 }
 type WorkerOwner = WorkerDocEntry["owner"];
 
@@ -859,6 +871,14 @@ function readMissionState(missionPath: string): {
 }
 
 function deriveWorkerProgress(worker: RawWorker): number | null {
+  const explicit = worker?.progress;
+  if (typeof explicit === "number" && Number.isFinite(explicit)) {
+    return explicit > 1 ? Math.max(0, Math.min(1, explicit / 100)) : Math.max(0, Math.min(1, explicit));
+  }
+  if (typeof explicit === "string") {
+    const match = explicit.match(/(\d+(?:\.\d+)?)/);
+    if (match) return Math.max(0, Math.min(1, Number(match[1]) / 100));
+  }
   const status = (worker?.status ?? worker?.spawn_status ?? "").toLowerCase();
   if (status === "blocked" || status === "failed") return 0.35;
   if (status === "recorded") return 0.15;
@@ -868,17 +888,24 @@ function deriveWorkerProgress(worker: RawWorker): number | null {
 }
 
 function normalizeRawWorkers(value: RawWorker[] | Record<string, RawWorker> | null | undefined): RawWorker[] {
-  if (Array.isArray(value)) return value;
+  const normalizeOne = (worker: RawWorker, fallbackName: string | null = null, idx = 0): RawWorker => {
+    const name = worker.name ?? worker.agent ?? worker.feature ?? fallbackName ?? `worker-${idx + 1}`;
+    const report = worker.report ?? worker.report_path ?? null;
+    return {
+      ...worker,
+      name,
+      team: worker.team ?? idx + 1,
+      agent: worker.agent ?? name,
+      feature: worker.feature ?? name,
+      log: worker.log ?? report,
+      report,
+    };
+  };
+  if (Array.isArray(value)) return value.map((worker, idx) => normalizeOne(worker, null, idx));
   if (!value || typeof value !== "object") return [];
   return Object.entries(value).map(([name, worker], idx) => {
     const w = worker && typeof worker === "object" ? worker : {};
-    return {
-      ...w,
-      team: (w as RawWorker).team ?? idx + 1,
-      agent: (w as RawWorker).agent ?? name,
-      feature: (w as RawWorker).feature ?? name,
-      log: (w as RawWorker).log ?? (w as RawWorker & { report?: string | null }).report ?? null,
-    };
+    return normalizeOne(w as RawWorker, name, idx);
   });
 }
 
@@ -911,7 +938,8 @@ function buildWorkers(rootDir: string, progress: RawProgress | null): WorkerSnap
     const feature = w.feature ?? `worker-${idx + 1}`;
     const promptText = w.prompt ? readTextSafe(path.join(rootDir, w.prompt)) : null;
     const logText = w.log ? readTextSafe(path.join(rootDir, w.log)) : null;
-    const summarySource = firstLine(logText) || firstLine(promptText) || `${w.agent ?? "worker"} assigned`;
+    const eta = w.eta ? ` ETA ${w.eta}` : "";
+    const summarySource = firstLine(logText) || firstLine(promptText) || `${w.agent ?? w.name ?? "worker"} ${w.status ?? "assigned"}${eta}`;
     const material = w.prompt ?? w.log ?? null;
     const rawStatus = (w.status ?? w.spawn_status ?? "unknown").toLowerCase();
     const status = ["spawned", "recorded", "running", "idle", "blocked"].includes(rawStatus)
@@ -1036,13 +1064,13 @@ function activeWorkerNames(progress: RawProgress | null): Set<string> {
   if (isHarnessRuntimeIdle(progress)) return active;
   const workers = [
     ...normalizeRawWorkers(progress?.company_state?.workers),
-    ...(progress?.company_state?.last_dispatch ?? []),
+    ...normalizeRawWorkers(progress?.company_state?.last_dispatch),
   ];
   for (const worker of workers) {
     const rawStatus = (worker.status ?? worker.spawn_status ?? "").toLowerCase();
     if (["complete", "completed", "done", "idle"].includes(rawStatus)) continue;
-    for (const value of [worker.agent, worker.feature]) {
-      const normalized = normalizeWorkerName(value);
+    for (const value of [worker.name, worker.agent, worker.feature, worker.report, worker.report_path, worker.log]) {
+      const normalized = normalizeWorkerName(value && /[\\/]/.test(value) ? path.basename(value) : value);
       if (normalized) active.add(normalized);
     }
   }
@@ -1262,21 +1290,17 @@ function readMissions(rootDir: string, progress: RawProgress | null = null, limi
             const name = normalizeWorkerName(f);
             const hired = hiredForMission(hiredWorkers, name, owner, rel);
             let updatedAt: string | null = null;
-            let recentlyTouched = false;
             try {
               const mtime = statSync(reportAbs).mtime;
               updatedAt = mtime.toISOString();
-              recentlyTouched = Date.now() - mtime.getTime() < RECENT_WORKER_ACTIVE_MS;
             } catch { /* ignore */ }
             const statusMatch = content.match(/##\s*Status\s*\n+([A-Z_]+)/);
             const hasDocmeta = /^---[\s\S]*?docmeta:[\s\S]*?---/.test(content);
-            // Worker docs often write docmeta before appending final evidence.
-            // Without an explicit COMPLETE marker, keep recent writes visible as
-            // active; after the activity window they become historical reports.
+            // Runtime state is the source of truth for live activity. A
+            // recently touched docmeta-only draft is not enough to prove that a
+            // detached worker session is still running.
             const status: WorkerDocEntry["status"] = statusMatch
               ? (statusMatch[1] as WorkerDocEntry["status"])
-              : hasDocmeta && recentlyTouched && !runtimeIdle
-              ? "IN_PROGRESS"
               : hasDocmeta
               ? "COMPLETE"
               : "unknown";

package/assets/templates/AGENTS-ko.md.template

@@ -110,6 +110,10 @@ CEO는 worker 기록 없이 완료된 산출물을 포함한 CXX 보고서를
 
 Owner는 최종 검수자다. Tester, QA worker, debugger, 배포 확인 담당자가 아니다.
 
+- Owner는 방향 제시, 추가 요구, hot-fix, 최종 acceptance feedback을 제공한다. 회사 루프를 계속 돌리기 위한 진행 신호가 아니다.
+- CEO는 Owner에게 계속 진행 여부, worker 고용 여부, 내부 옵션 선택, 다음 단계 시작 여부를 묻지 않는다.
+- CEO가 혼자 판단하기 어려우면 관련 CXX 회의를 열고 written recommendation을 받아 결정한 뒤 계속 진행한다.
+- Owner 입력 대기는 harness가 추론하거나 확보할 수 없는 외부 권한이 필요할 때만 허용한다: credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, 또는 명시된 Owner 방향과의 직접 충돌.
 - 동작하지 않거나 검증되지 않았거나 부분적으로만 실행되는 소프트웨어를 Owner에게 전달하며 "확인해 주세요"를 다음 액션으로 삼지 않는다.
 - Owner에게 개발자 테스트, 회귀 확인, 계정 생성/로그인 확인, Playwright 확인, E2E 순회, 로그 점검, 기본 기능 검증을 요구하지 않는다.
 - CEO와 CXX는 worker를 통해 자체 검증을 계획하고 실행한다: unit test, E2E test, Playwright/browser check, test account, seed data, build/run check, log evidence.

package/assets/templates/AGENTS.md.template

@@ -35,10 +35,11 @@ Codex does not need `.codex/agents/` to run this harness. The installed Codex co
 
 Don't assume. Don't hide confusion.
 
-- State assumptions before implementing. If uncertain, ask.
-- If multiple approaches exist, name them — don't pick silently.
+- State assumptions before implementing.
+- If multiple approaches exist, name them and choose the smallest reversible path from evidence.
 - Minimum change that solves the problem. No speculative scope.
-- If something is unclear, stop. Name what is unclear. Ask.
+- Do not ask the Owner routine operating questions. CEO/CXX resolve uncertainty internally through written CXX recommendations.
+- Stop for Owner input only when the next action requires external authority the harness cannot infer: credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or a direct conflict with stated Owner direction. Record the recommended default when blocked.
 
 For hot-fix: smallest correct patch only. Do not "improve" adjacent code.
 For goal: define verifiable success criteria before CEO routes to CXX.
@@ -70,6 +71,9 @@ CEO rejects any CXX report that contains completed deliverables without matching
 
 The Owner is the final acceptance reviewer, not a tester, QA worker, debugger, or deployment verifier.
 
+- The Owner sets direction, adds requirements, issues hot-fixes, and gives final acceptance feedback. The Owner is not the progress pump for the company loop.
+- CEO must not ask the Owner whether to continue, which worker to hire, which internal option to choose, or whether to start the next planned step.
+- If CEO cannot answer an operating question alone, CEO convenes the relevant CXX agents, records their recommendations, chooses a path, and continues.
 - Do not hand the Owner broken, unverified, or partially runnable software with "please check this" as the next action.
 - Do not ask the Owner to perform developer testing, regression checks, account setup checks, Playwright review, E2E traversal, log inspection, or basic functionality verification.
 - CEO and CXX must plan and execute self-verification through workers: unit tests, E2E tests, Playwright/browser checks, test accounts, seeded data, build/run checks, logs, and documented evidence.

package/assets/templates/config.json

@@ -240,7 +240,7 @@
       "command": ""
     },
     "production": {
-      "comment": "Owner+CEO+CTO 합의로만 services[] 를 수정한다. local/docker/vm/aws/cloud 등 운영 서버 매핑을 Owner에게 받아 기록한다. live=true 이고 services[] 가 있으면 OPS 는 매 hourly review 마다 port/health/log 상태를 운영보고서에 남긴다.",
+      "comment": "CEO+CTO+OPS가 repo config, scripts, running process, Docker, logs, CXX report에서 services[]와 운영 서버 매핑을 우선 도출한다. Owner 입력 대기는 credentials/secrets, unavailable production access, legal/business acceptance 같은 외부 권한이 필요할 때만 허용한다. live=true 이고 services[] 가 있으면 OPS 는 매 hourly review 마다 port/health/log 상태를 운영보고서에 남긴다.",
       "live": false,
       "services": [
         {

package/assets/templates/gitignore-append.txt

@@ -1 +1,6 @@
-# For consumer projects, add .worktrees/ to .gitignore
+# walwal-harness dashboard runtime
+.harness/dashboard/apps/harness-dashboard/node_modules/
+.harness/dashboard/apps/harness-dashboard/.next/
+.harness/dashboard/apps/harness-dashboard/.turbo/
+.harness/dashboard/apps/harness-dashboard/tsconfig.tsbuildinfo
+.harness/dashboard/.download/

package/assets/templates/memory.md

@@ -73,7 +73,7 @@ docmeta:
 - **TTL**: 영구
 - **Lesson**: walwal-harness 는 NEXUS 회사 메타포다. 다음 두 룰을 **절대로** 어기지 않는다.
   1. **정체성**: 사용자 = **Owner** (회사 외부 주주), Dispatcher = **CEO** (Owner 와의 유일한 대화 창구). 응답·GOAL·로그 어디서도 사용자를 "CEO" 로 호칭하지 않는다. 회사 내부 결정 (sprint 분할, mode 선택, agent 호출, 평가 점수) 을 Owner 에게 떠넘기지 않는다.
-  2. **자율 실행 (NEXUS P3)**: GOAL 확정 직후 회사는 **사용자 펌프 없이** 자율 진행. "다음 단계로 진행할까요?", "/harness-next 실행하시겠습니까?" 같은 진행 여부 질문은 자율성 위반. Owner 가 돌아오는 시점은 (a) GOAL 모호성 명료화 (1~2 개 객관식 질문, 한 번만), (b) 결과 보고, (c) escalation 셋 뿐.
+  2. **자율 실행 (NEXUS P3)**: GOAL 확정 직후 회사는 **사용자 펌프 없이** 자율 진행. "다음 단계로 진행할까요?", "/harness-next 실행하시겠습니까?" 같은 진행 여부 질문은 자율성 위반. CEO가 혼자 결정하기 어려우면 Owner에게 묻지 말고 관련 CXX 회의를 열어 written recommendation을 받은 뒤 결정한다. Owner 가 돌아오는 시점은 (a) 목표 변경/추가 요구/hot-fix, (b) 결과 보고와 최종 acceptance feedback, (c) credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, stated direction conflict 같은 외부 권한 block 뿐.
 - **Context**: v6.0.0 publish 직후 dispatcher 응답이 사용자를 "CEO 직접 리뷰…" 로 호명하고 "/harness-next 자동 진행하시겠습니까?" 로 사용자 펌프를 요구함. Owner 의 명시적 교정.
 - **Applies to**:
   - **Dispatcher**: 사용자 호칭/응답 문구, GOAL 정립, 모든 inbound/outbound owner 통신. → anti-pattern: `.harness/gotchas/dispatcher.md` [G-001]~[G-004].

package/bin/init.js

@@ -848,9 +848,9 @@ function ensureHarnessEnv() {
   if (re.test(content)) return;
 
   const prefix = content && !content.endsWith('\n') ? '\n' : '';
-  const block = `${prefix}${content ? '\n' : ''}# Walwal Harness — CEO must agree on a {xx}000 base port with the Owner.\n# Set HARNESS_BASE_PORT before CXX agents allocate any service ports.\n# HARNESS_BASE_PORT=\n`;
+  const block = `${prefix}${content ? '\n' : ''}# Walwal Harness — CEO chooses an available {xx}000 base port unless Owner already specified one.\n# Set HARNESS_BASE_PORT before CXX agents allocate any service ports.\n# HARNESS_BASE_PORT=\n`;
   fs.writeFileSync(envPath, content + block);
-  log('.env: HARNESS_BASE_PORT placeholder added — set value with Owner approval before starting services');
+  log('.env: HARNESS_BASE_PORT placeholder added — CEO/CXX must choose an available value before starting services');
 }
 
 function ensureStructuredRuntimeFiles({ dryRun = false } = {}) {
@@ -963,6 +963,27 @@ function refreshScriptsForMigrate({ dryRun = false, backupDir = null } = {}) {
   chmodShellScripts(scriptsDest);
 }
 
+function ensureWakeScheduler({ dryRun = false } = {}) {
+  const wakeInstall = path.join(PROJECT_ROOT, 'scripts', 'harness-wake-install.sh');
+  if (!fs.existsSync(wakeInstall)) return;
+
+  log('  wake scheduler: project registration + launchd load check');
+  if (dryRun) return;
+
+  try {
+    execSync(`bash ${shellQuote(wakeInstall)} install ${shellQuote(PROJECT_ROOT)}`, {
+      cwd: PROJECT_ROOT,
+      stdio: 'pipe',
+      timeout: 15000,
+    });
+    log('  wake scheduler: registered');
+  } catch (e) {
+    const detail = String(e?.stderr || e?.message || '').trim().split('\n').slice(-1)[0];
+    log(`  wake scheduler: registration skipped (${detail || 'install command failed'})`);
+    log('  wake scheduler: run manually if needed: bash scripts/harness-wake-install.sh install .');
+  }
+}
+
 function migrateActivityHistory({ dryRun = false } = {}) {
   const recorder = path.join(PROJECT_ROOT, 'scripts', 'harness-activity-record.js');
   if (!fs.existsSync(recorder)) return;
@@ -2032,6 +2053,7 @@ function runMigrate(opts = {}) {
   // Runtime scripts are package-owned. Migrate must refresh them so existing
   // projects receive wake/meeting/OPS fixes without requiring a full init.
   refreshScriptsForMigrate({ dryRun, backupDir });
+  ensureWakeScheduler({ dryRun });
   migrateActivityHistory({ dryRun });
   updateRuleRegistryLinks(flags.ruleRegistryLinks || [], { dryRun, backupDir });
 
@@ -2600,6 +2622,7 @@ function main() {
   scaffoldHarness();
   installSkills();
   installScripts();
+  ensureWakeScheduler();
   installCommands();
   installSessionHook();
   installStatusline();

package/commands/goal.md

@@ -16,7 +16,7 @@ Required flow:
 1. Create or update a goal under `.harness/documents/goal-{goal_index}-{goal_name}/`.
 2. Write `.harness/documents/goal-{goal_index}-{goal_name}/mission-state.json` with `{"lifecycle":"active","active":true}` before routing CXX.
 3. Record CEO decisions in `.harness/documents/goal-{goal_index}-{goal_name}/ceo.md`.
-4. CEO decides whether brainstorming is needed or whether CXX questions can be issued immediately.
+4. CEO decides whether brainstorming is needed or whether CXX questions can be issued immediately. CEO must not ask the Owner which path to take.
 5. CEO asks COO, CDO, CTO, and CQO only the questions needed for this goal.
 6. CXX roles must start in a fresh session context. Do not let the default model impersonate a missing worker.
 7. CXX roles must not directly execute specialist deliverables. They must use hired workers for research, planning, design, implementation, QA, ops checks, and documentation.
@@ -24,6 +24,7 @@ Required flow:
 9. CEO must require a Worker Evidence Manifest and worker report paths under `.harness/documents/goal-{goal_index}-{goal_name}/{owning-cxx}/workers/` before accepting CXX completion.
 10. When the goal is accepted, cancelled, superseded, blocked, or closed, update `mission-state.json` to `complete`, `cancelled`, `superseded`, `blocked`, or `closed` and set `active:false`.
 11. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+12. Do not ask the Owner whether to continue, hire workers, choose internal options, or start the next step. If CEO cannot decide alone, convene the relevant CXX agents and decide from their written recommendations. Stop only for external authority such as credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 
 Note: A goal is the company's objective. Submissions and hot-fixes that happen while pursuing it should be recorded under that goal directory.
 

package/commands/hot-fix.md

@@ -17,7 +17,7 @@ Required flow:
 2. If another child mission under the goal is active, update its `mission-state.json` to `closed`, `cancelled`, or `superseded` with `active:false` before starting the hot-fix.
 3. Create `.harness/documents/{goal_name}/hotfix-{hotfix_index}-{hotfix_name}/ceo.md`.
 4. Write `.harness/documents/{goal_name}/hotfix-{hotfix_index}-{hotfix_name}/mission-state.json` with `{"lifecycle":"active","active":true}`.
-5. CEO summons CTO and CQO first; summon COO/CDO only when planning or UX decisions are involved.
+5. CEO summons CTO and CQO first; summon COO/CDO only when planning or UX decisions are involved. CEO must not ask the Owner whether to start the fix or which internal path to choose.
 6. CTO applies the smallest correct patch path through hired implementation skills.
 7. CXX roles must start in a fresh session context. Do not let the default model impersonate a missing CXX or worker.
 8. CXX roles must not directly execute specialist deliverables. They must use hired workers for implementation, QA, ops checks, and documentation even when the fix is small.
@@ -26,6 +26,7 @@ Required flow:
 11. CQO must register durable lessons in `.harness/gotchas/`, `.harness/conventions/`, or `.harness/memories/`. This step is mandatory, not optional, even for small fixes.
 12. Archive only after CQO has accepted the fix, then update `mission-state.json` to `complete` with `active:false`.
 13. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+14. Do not ask the Owner whether to continue, hire workers, choose internal options, or start the next step. If CEO cannot decide alone, convene the relevant CXX agents and decide from their written recommendations. Stop only for external authority such as credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 
 Note: `/hot-fix` is a problem-fix flow while pursuing the active goal. It belongs under that goal in history.
 

package/commands/submission.md

@@ -13,12 +13,12 @@ Codex adapter:
 - For CXX "fresh session context", use role-scoped context: read the CXX skill, active mission files, and required conventions/gotchas before writing that role's `{cxx}.md`.
 
 Required flow:
-1. Locate the active goal document root under `.harness/documents/{goal_name}/`. If no active goal exists, CEO must ask the Owner to create or select one with `/goal` before proceeding.
+1. Locate the active goal document root under `.harness/documents/{goal_name}/`. If no active goal exists, CEO must create/select the best matching goal record from available mission context or mark the submission blocked with the recommended default; do not ask the Owner an open-ended setup question.
 2. If another child mission under the goal is active, update its `mission-state.json` to `closed`, `cancelled`, or `superseded` with `active:false` before starting this submission.
 3. Create a submission record under `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/`.
 4. Write `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/mission-state.json` with `{"lifecycle":"active","active":true}`.
 5. Record CEO decisions in `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/ceo.md`.
-6. CEO routes only to the CXX agents needed for this additional requirement.
+6. CEO routes only to the CXX agents needed for this additional requirement. CEO must not ask the Owner which CXX or worker path to choose.
 7. CXX roles must start in a fresh session context. Do not let the default model impersonate a missing CXX or worker.
 8. CXX roles must not directly execute specialist deliverables. They must use hired workers for research, planning, design, implementation, QA, ops checks, and documentation.
 9. If a required worker is missing, the responsible CXX must invoke the installed `harness-hiring` skill before assigning the work.
@@ -26,6 +26,7 @@ Required flow:
 11. CEO must require a Worker Evidence Manifest and worker report paths under `.harness/documents/{goal_name}/submission-{submission_index}-{submission_name}/{owning-cxx}/workers/` before accepting CXX completion.
 12. When the submission is accepted, cancelled, superseded, blocked, or closed, update `mission-state.json` to `complete`, `cancelled`, `superseded`, `blocked`, or `closed` and set `active:false`.
 13. Do not invoke internal roles through slash commands; commands are Owner entrypoints only.
+14. Do not ask the Owner whether to continue, hire workers, choose internal options, or start the next step. If CEO cannot decide alone, convene the relevant CXX agents and decide from their written recommendations. Stop only for external authority such as credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 
 Note: `/submission` is not a new company goal and not an emergency fix. It is an additional requirement while pursuing the active goal. It belongs under that goal in history.
 

package/conventions/ceo.md

@@ -5,5 +5,7 @@
 - CEO routes work to CXX agents through agent/skill invocation, not slash commands.
 - CEO records mission framing and routing decisions in `.harness/documents/{goal-or-child-mission}/ceo.md`.
 - CEO asks only mission-relevant questions to COO, CDO, CTO, CQO, and OPS.
+- CEO does not ask the Owner routine operating questions. CEO decides from evidence, or convenes CXX agents and then decides.
+- CEO stops for Owner input only for external authority: credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, or direct conflict with stated Owner direction.
 - CEO does not accept CXX completion unless specialist deliverables were produced by hired workers.
 - CEO requires worker names and `.harness/documents/{goal-or-child-mission}/{owning-cxx}/workers/{worker-name}.md` paths in CXX completion reports.

package/gotchas/ceo.md

@@ -7,3 +7,7 @@ CEO must not call `/coo`, `/cto`, or similar slash commands. CXX routing is agen
 ## Over-broad Meeting
 
 Do not summon every CXX for every mission by default. Ask only the roles needed for the decision.
+
+## Owner As Progress Pump
+
+Do not ask the Owner whether to continue, start the next step, hire a worker, choose between internal options, or verify routine technical behavior. Decide internally, record the rationale, and keep routing. If a decision is too ambiguous for CEO alone, convene the relevant CXX agents and decide from their recommendations.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@walwal-harness/cli",
-  "version": "7.1.36",
+  "version": "7.1.37",
   "description": "Company-style AI agent harness for Claude and Codex. Installs commands, CXX agents, skills, HR-Resource hiring pool, and project-local .harness runtime state.",
   "bin": {
     "walwal-harness": "bin/init.js"

package/scripts/harness-dashboard-up.sh

@@ -2,8 +2,8 @@
 # walwal-harness — Brick Office dashboard launcher
 #
 # 처음 쓰는 사용자도 한 줄로 대시보드를 띄워볼 수 있게 만든 helper.
-# npm 패키지에 포함된 apps/harness-dashboard 를 사용자 프로젝트 외부
-# (~/.walwal-harness/dashboard/<project-key>) 에 격리 복사 후 dev 실행한다.
+# npm 패키지에 포함된 apps/harness-dashboard 를 프로젝트별 runtime 영역
+# (.harness/dashboard/) 에 복사 후 dev 실행한다.
 # 구버전 호환을 위해 패키지에 dashboard 가 없으면 git sparse-checkout 으로 fallback 한다.
 #
 # Usage:
@@ -38,9 +38,7 @@ if [[ ! -d "${HARNESS_ROOT}/.harness" ]]; then
   exit 3
 fi
 
-PROJECT_KEY="$(printf '%s' "${HARNESS_ROOT}" | shasum -a 1 | awk '{print substr($1,1,12)}')"
-PROJECT_NAME="$(basename "${HARNESS_ROOT}")"
-LOCAL_DIR="${HOME}/.walwal-harness/dashboard/${PROJECT_NAME}-${PROJECT_KEY}"
+LOCAL_DIR="${HARNESS_ROOT}/.harness/dashboard"
 VERSION_FILE="${LOCAL_DIR}/.walwal-dashboard-version"
 
 PACKAGE_ROOT="${HARNESS_ROOT}/node_modules/@walwal-harness/cli"
@@ -53,8 +51,33 @@ if [[ "$REINSTALL" == "true" ]]; then
   rm -rf "$LOCAL_DIR"
 fi
 
+ensure_gitignore() {
+  local gitignore="${HARNESS_ROOT}/.gitignore"
+  local marker="# walwal-harness dashboard runtime"
+  local block
+  block="$(cat <<'EOF'
+# walwal-harness dashboard runtime
+.harness/dashboard/apps/harness-dashboard/node_modules/
+.harness/dashboard/apps/harness-dashboard/.next/
+.harness/dashboard/apps/harness-dashboard/.turbo/
+.harness/dashboard/apps/harness-dashboard/tsconfig.tsbuildinfo
+.harness/dashboard/.download/
+EOF
+)"
+  if [[ -f "$gitignore" ]] && grep -Fq "$marker" "$gitignore"; then
+    return
+  fi
+  mkdir -p "$(dirname "$gitignore")"
+  if [[ -s "$gitignore" ]] && [[ "$(tail -c 1 "$gitignore" 2>/dev/null || true)" != "" ]]; then
+    printf '\n' >> "$gitignore"
+  fi
+  printf '%s\n' "$block" >> "$gitignore"
+}
+
+ensure_gitignore
+
 echo "[brick-office] HARNESS_ROOT = ${HARNESS_ROOT}"
-echo "[brick-office] dashboard 격리 경로 = ${LOCAL_DIR}"
+echo "[brick-office] dashboard runtime path = ${LOCAL_DIR}"
 
 if [[ -d "${PACKAGED_DASHBOARD}" ]]; then
   INSTALLED_VERSION=""
@@ -70,14 +93,19 @@ if [[ -d "${PACKAGED_DASHBOARD}" ]]; then
   fi
 elif [[ ! -d "${LOCAL_DIR}/${DASHBOARD_PATH}" ]]; then
   echo "[brick-office] 첫 실행 — git sparse-checkout 으로 dashboard 만 가져옵니다 (~5MB)."
-  mkdir -p "${LOCAL_DIR}"
-  cd "${LOCAL_DIR}"
+  rm -rf "${LOCAL_DIR}/.download"
+  mkdir -p "${LOCAL_DIR}/.download"
+  cd "${LOCAL_DIR}/.download"
   git init -q
   git remote add origin "${REPO_URL}" 2>/dev/null || true
   git config core.sparseCheckout true
   echo "${DASHBOARD_PATH}/" > .git/info/sparse-checkout
   git fetch --depth=1 origin main -q
   git checkout main -q
+  mkdir -p "${LOCAL_DIR}/apps"
+  rm -rf "${LOCAL_DIR:?}/${DASHBOARD_PATH}"
+  cp -R "${DASHBOARD_PATH}" "${LOCAL_DIR}/apps/"
+  rm -rf "${LOCAL_DIR}/.download"
   echo "[brick-office] 다운로드 완료."
 fi
 

package/scripts/harness-hourly-review.sh

@@ -397,7 +397,7 @@ meeting_json="$(jq -n \
   echo "### Dispatcher/CEO"
   case "$verdict" in
     owner_needed)
-      echo "- 판단: escalation 상태이므로 Owner에게 외부 결정이 필요한지 확인한다."
+      echo "- 판단: escalation 상태다. 먼저 CEO/CXX가 내부 권장안을 확정하고, 외부 권한(credentials/secrets, payment approval, legal/business acceptance, production access, destructive data action)이 필요할 때만 Owner-facing BLOCKED로 보고한다."
       ;;
     *)
       echo "- 판단: 최초 GOAL 이후 Owner 입력은 interrupt다. 회사는 Owner를 기다리지 않고 GOAL 달성 루프를 계속한다."

package/scripts/harness-service-ops-monitor.sh

@@ -38,7 +38,7 @@ base_port="${env_base_port:-$config_base_port}"
 if [ -z "$base_port" ]; then
   echo "ERROR: HARNESS_BASE_PORT is not set." >&2
   echo "" >&2
-  echo "  CEO must agree on a {xx}000 base port with the Owner and add it to .env:" >&2
+  echo "  CEO/CXX must choose an available {xx}000 base port and add it to .env:" >&2
   echo "    HARNESS_BASE_PORT=3000" >&2
   echo "" >&2
   echo "  OPS cannot monitor ports without a declared base. Set the value and re-run." >&2
@@ -208,7 +208,7 @@ if [ "$live" != "true" ] || [ "${service_count:-0}" -eq 0 ]; then
       (if (.log.configured|not) then "not configured" elif (.log.exists|not) then "missing" else ((.log.recent_errors|tostring) + " recent errors") end) +
       " | \(.status) |"' <<<"$build_results_json"
     echo ""
-    echo "No production service endpoints are configured. Owner+CEO+CTO must define runtime.production.services[] before OPS can monitor live servers."
+    echo "No production service endpoints are configured. CEO+CTO+OPS must derive runtime.production.services[] from repo config, scripts, running processes, Docker, logs, or CXX reports before OPS can monitor live servers. Escalate to Owner only for external authority such as missing credentials or unavailable production access."
   } > "$report_path"
   echo "$report_rel"
   exit 0

package/scripts/harness-user-prompt-submit.sh

@@ -195,6 +195,8 @@ ${CONTEXT_WARNING}
 - CXX는 직접 전문 산출물을 만들지 않고 worker report를 \`.harness/documents/{goal-or-child-mission}/{owning-cxx}/workers/\`에 남겨야 한다
 - Owner에게 "계속 진행", "진행할까요?", "다음 명령을 입력하세요"를 요구하지 않는다. GOAL이 있고 escalation이 아니면 즉시 next_agent/current_agent 업무를 수행한다
 - Owner 입력은 목표 변경·사고·결과 확인용이지 회사 진행을 펌프하는 신호가 아니다
+- CEO가 혼자 결정하기 어려우면 Owner에게 묻지 말고 관련 CXX 회의를 열어 written recommendation 을 받고 결정한다
+- Owner 입력 대기는 credentials/secrets, payment approval, legal/business acceptance, unavailable production access, destructive data action, stated direction conflict 같은 외부 권한이 필요할 때만 허용한다
 - CEO는 필요한 CXX만 호출하고, CXX는 resource-manager/hiring 없이 worker 업무를 수행하지 않는다
 - 목표 설정/변경 → goal flow | 추가 요구사항 → submission flow | 긴급 수정 → hot-fix flow | 메타 질문 → 짧게 응답 (skip)
 - 활성 pipeline → next_agent/current_agent 컨텍스트로 계속

package/scripts/harness-wake-install.sh

@@ -26,6 +26,28 @@ LAUNCH_AGENTS_DIR="$HOME/Library/LaunchAgents"
 PLIST_NAME="com.walwal.harness-wake"
 PLIST_PATH="$LAUNCH_AGENTS_DIR/$PLIST_NAME.plist"
 
+launch_domain() {
+  echo "gui/$(id -u)"
+}
+
+launch_is_loaded() {
+  local domain
+  domain="$(launch_domain)"
+  launchctl print "$domain/$PLIST_NAME" >/dev/null 2>&1
+}
+
+launch_unload() {
+  local domain
+  domain="$(launch_domain)"
+  launchctl bootout "$domain" "$PLIST_PATH" >/dev/null 2>&1 || launchctl unload "$PLIST_PATH" 2>/dev/null || true
+}
+
+launch_load() {
+  local domain
+  domain="$(launch_domain)"
+  launchctl bootstrap "$domain" "$PLIST_PATH" >/dev/null 2>&1 || launchctl load "$PLIST_PATH" 2>/dev/null
+}
+
 # 템플릿 위치 후보 — walwal-harness 패키지 안일 수도, 프로젝트 안일 수도.
 detect_template() {
   local candidates=(
@@ -39,8 +61,8 @@ detect_template() {
 }
 
 ensure_dirs() {
-  mkdir -p "$HARNESS_DIR" "$LOG_DIR" "$LAUNCH_AGENTS_DIR"
-  touch "$PROJECTS_LIST"
+  mkdir -p "$HARNESS_DIR" "$LOG_DIR" "$LAUNCH_AGENTS_DIR" || return 1
+  touch "$PROJECTS_LIST" || return 1
 }
 
 abs_path() {
@@ -53,19 +75,32 @@ abs_path() {
 }
 
 cmd_add() {
-  ensure_dirs
+  ensure_dirs || {
+    echo "[wake] ERROR: cannot prepare $HARNESS_DIR" >&2
+    return 1
+  }
   local project
   project=$(abs_path "$1")
   if grep -Fxq "$project" "$PROJECTS_LIST" 2>/dev/null; then
     echo "[wake] already registered: $project"
     return 0
   fi
-  echo "$project" >> "$PROJECTS_LIST"
+  echo "$project" >> "$PROJECTS_LIST" || {
+    echo "[wake] ERROR: cannot write $PROJECTS_LIST" >&2
+    return 1
+  }
+  if ! grep -Fxq "$project" "$PROJECTS_LIST" 2>/dev/null; then
+    echo "[wake] ERROR: registration did not persist: $project" >&2
+    return 1
+  fi
   echo "[wake] added: $project"
 }
 
 cmd_remove() {
-  ensure_dirs
+  ensure_dirs || {
+    echo "[wake] ERROR: cannot prepare $HARNESS_DIR" >&2
+    return 1
+  }
   local project
   project=$(abs_path "$1")
   if ! grep -Fxq "$project" "$PROJECTS_LIST" 2>/dev/null; then
@@ -80,7 +115,10 @@ cmd_remove() {
 }
 
 cmd_list() {
-  ensure_dirs
+  ensure_dirs || {
+    echo "[wake] ERROR: cannot prepare $HARNESS_DIR" >&2
+    return 1
+  }
   if [ ! -s "$PROJECTS_LIST" ]; then
     echo "(empty)"
     return 0
@@ -89,28 +127,41 @@ cmd_list() {
 }
 
 cmd_status() {
+  ensure_dirs || {
+    echo "[wake] ERROR: cannot prepare $HARNESS_DIR" >&2
+    return 1
+  }
+  local loaded=1
   if [ -f "$PLIST_PATH" ]; then
     echo "[wake] plist: $PLIST_PATH (exists)"
   else
     echo "[wake] plist: $PLIST_PATH (NOT installed)"
   fi
-  if launchctl list 2>/dev/null | grep -q "$PLIST_NAME"; then
+  if launch_is_loaded; then
+    loaded=0
     echo "[wake] launchd: loaded"
-    launchctl list | awk -v n="$PLIST_NAME" '$3==n {print "        pid="$1" exit="$2" label="$3}'
+    launchctl print "$(launch_domain)/$PLIST_NAME" 2>/dev/null | awk '
+      /state =/ {print "        " $0}
+      /run interval =/ {print "        " $0}
+      /runs =/ {print "        " $0}
+    '
   else
     echo "[wake] launchd: NOT loaded"
   fi
   echo "[wake] projects:"
   cmd_list | sed 's/^/        /'
+  return "$loaded"
 }
 
 cmd_install() {
-  ensure_dirs
+  ensure_dirs || {
+    echo "[wake] ERROR: cannot prepare $HARNESS_DIR" >&2
+    return 1
+  }
 
   # 추가 인자가 있으면 add
-  shift_count=0
   for p in "$@"; do
-    cmd_add "$p"
+    cmd_add "$p" || return 1
   done
 
   local template
@@ -127,22 +178,24 @@ cmd_install() {
     "$template" > "$PLIST_PATH"
 
   # 기존 jobs 언로드 (idempotent)
-  launchctl unload "$PLIST_PATH" 2>/dev/null || true
+  launch_unload
 
   # 로드
-  if launchctl load "$PLIST_PATH" 2>/dev/null; then
+  local loaded=1
+  if launch_load; then
+    loaded=0
     echo "[wake] launchd loaded: $PLIST_PATH"
   else
     echo "[wake] WARN: launchctl load 실패. 다음 명령으로 직접 시도해 보세요:" >&2
     echo "         launchctl load $PLIST_PATH" >&2
   fi
 
-  cmd_status
+  cmd_status || return "$loaded"
 }
 
 cmd_uninstall() {
   if [ -f "$PLIST_PATH" ]; then
-    launchctl unload "$PLIST_PATH" 2>/dev/null || true
+    launch_unload
     rm -f "$PLIST_PATH"
     echo "[wake] uninstalled: $PLIST_PATH"
   else