@walwal-harness/cli 7.1.39 → 7.1.41

package/scripts/harness-agenda.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+# harness-agenda.sh — shared executive agenda (안건) for the perpetual operating loop.
+#
+# The agenda is the meetup file every CXX co-writes. The Stop hook forces the
+# CEO to adjudicate it: while items are open/decided the loop keeps running; when
+# it is empty the CEO must run a status-briefing round (each CXX confirms its
+# live deliverables still operate toward the goal and raises new items) before
+# the loop may yield to the next hourly wake.
+#
+# Store: .harness/documents/<goal-rel>/agenda.json
+#   { items:[{id,raised_by,kind,title,evidence,status:open|decided|done,
+#             decision,decided_by,created_at,updated_at}],
+#     cycles:int, last_cycle_at, last_briefing_at }
+#
+# Usage:
+#   harness-agenda.sh <project-root> <goal-rel> raise  <cxx> <kind> "<title>" ["<evidence>"]
+#   harness-agenda.sh <project-root> <goal-rel> decide <id> "<decision>" [<owner-cxx>]
+#   harness-agenda.sh <project-root> <goal-rel> close  <id>
+#   harness-agenda.sh <project-root> <goal-rel> brief                 # stamp a briefing round
+#   harness-agenda.sh <project-root> <goal-rel> active-count          # items not done
+#   harness-agenda.sh <project-root> <goal-rel> open-count            # items needing CEO decision
+#   harness-agenda.sh <project-root> <goal-rel> list
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_ROOT="${1:-.}"
+GOAL_REL="${2:-}"
+CMD="${3:-}"
+command -v jq >/dev/null 2>&1 || { echo "[agenda] jq required" >&2; exit 1; }
+[ -n "$GOAL_REL" ] && [ -n "$CMD" ] || { echo "[agenda] usage: $0 <project-root> <goal-rel> <cmd> ..." >&2; exit 2; }
+
+AGENDA_DIR="$PROJECT_ROOT/.harness/documents/$GOAL_REL"
+AGENDA="$AGENDA_DIR/agenda.json"
+mkdir -p "$AGENDA_DIR"
+[ -f "$AGENDA" ] || echo '{"items":[],"cycles":0,"last_cycle_at":null,"last_briefing_at":null}' > "$AGENDA"
+
+STRUCTURED_LIB="$SCRIPT_DIR/lib/harness-structured-log.sh"
+[ -f "$STRUCTURED_LIB" ] && source "$STRUCTURED_LIB"
+
+NOW="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+
+apply() { # jq-program ; reads from extra --arg pairs already in "$@"
+  local prog="$1"; shift
+  local tmp="$AGENDA.tmp.$$"
+  if jq "$@" "$prog" "$AGENDA" > "$tmp" 2>/dev/null; then
+    mv "$tmp" "$AGENDA"
+  else
+    rm -f "$tmp"; echo "[agenda] write failed" >&2; exit 1
+  fi
+}
+
+upsert_todo() { # owner kind title status id priority
+  declare -f harness_todo_upsert >/dev/null 2>&1 || return 0
+  local todo
+  todo=$(jq -nc \
+    --arg id "$5" --arg owner "$1" --arg kind "$2" --arg title "$3" \
+    --arg status "$4" --arg now "$NOW" --argjson priority "${6:-60}" '
+    {id:$id,owner:$owner,kind:$kind,title:$title,status:$status,priority:$priority,
+     command:"agenda",mission_path:null,required_artifacts:[],
+     created_at:$now,updated_at:$now,last_heartbeat_at:$now,blocked_reason:null}')
+  harness_todo_upsert "$PROJECT_ROOT" "$todo"
+}
+
+case "$CMD" in
+  raise)
+    CXX="${4:-ceo}"; KIND="${5:-other}"; TITLE="${6:-untitled}"; EVID="${7:-}"
+    N=$(jq '.items | length' "$AGENDA")
+    ID="A-$(date -u +%Y%m%dT%H%M%SZ)-$N"
+    apply '.items += [{id:$id,raised_by:$cxx,kind:$kind,title:$title,evidence:$evid,status:"open",decision:null,decided_by:null,created_at:$now,updated_at:$now}]' \
+      --arg id "$ID" --arg cxx "$CXX" --arg kind "$KIND" --arg title "$TITLE" --arg evid "$EVID" --arg now "$NOW"
+    upsert_todo "$CXX" "agenda" "[안건] $TITLE" "pending" "$ID" 70
+    echo "$ID"
+    ;;
+  decide)
+    ID="${4:-}"; DECISION="${5:-}"; OWNER="${6:-}"
+    [ -n "$ID" ] || { echo "[agenda] decide needs <id>" >&2; exit 2; }
+    apply '.items |= map(if .id==$id then .status="decided" | .decision=$decision | .decided_by="ceo" | .updated_at=$now else . end)' \
+      --arg id "$ID" --arg decision "$DECISION" --arg now "$NOW"
+    [ -n "$OWNER" ] && upsert_todo "$OWNER" "agenda" "[결정] $DECISION" "active" "$ID-do" 70
+    echo "decided $ID"
+    ;;
+  close)
+    ID="${4:-}"
+    [ -n "$ID" ] || { echo "[agenda] close needs <id>" >&2; exit 2; }
+    apply '.items |= map(if .id==$id then .status="done" | .updated_at=$now else . end)' \
+      --arg id "$ID" --arg now "$NOW"
+    echo "closed $ID"
+    ;;
+  brief)
+    apply '.last_briefing_at=$now' --arg now "$NOW"
+    echo "briefing stamped"
+    ;;
+  active-count)
+    jq '[.items[] | select(.status != "done")] | length' "$AGENDA"
+    ;;
+  open-count)
+    jq '[.items[] | select(.status == "open")] | length' "$AGENDA"
+    ;;
+  list)
+    jq -c '[.items[] | select(.status != "done")]' "$AGENDA"
+    ;;
+  *)
+    echo "[agenda] unknown command: $CMD" >&2; exit 2 ;;
+esac

package/scripts/harness-company-block.sh

@@ -0,0 +1,89 @@
+#!/bin/bash
+# harness-company-block.sh — mark the current v7 company mission BLOCKED on
+# external authority (the second legitimate stop condition; the first is
+# harness-company-complete.sh).
+#
+# Usage:
+#   bash scripts/harness-company-block.sh <project-root> "<missing authority>"
+#
+# This is the explicit running -> blocked transition. The CEO runs it when the
+# next action genuinely requires external authority the harness cannot infer or
+# obtain (new credentials/secrets, payment approval, legal/business acceptance,
+# unavailable production access, destructive data action, or a direct conflict
+# with the Owner's stated direction). It records the named blocker, flips the
+# runtime out of "running" so the Stop hook releases the turn, and marks the
+# active mission-state lifecycle "blocked". It does NOT archive documents.
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_ROOT="${1:-.}"
+REASON="${2:-awaiting external authority}"
+
+PROGRESS="$PROJECT_ROOT/.harness/progress.json"
+TODOS="$PROJECT_ROOT/.harness/todos/state.json"
+[ -f "$PROGRESS" ] || {
+  echo "[company-block] not found: $PROGRESS" >&2
+  exit 1
+}
+command -v jq >/dev/null 2>&1 || {
+  echo "[company-block] jq is required" >&2
+  exit 1
+}
+
+if ! bash "$SCRIPT_DIR/harness-progress-set.sh" "$PROJECT_ROOT" \
+  '.company_state.state = "idle" |
+   .conductor.state = "blocked" |
+   .conductor.current_action = ("blocked:" + $reason) |
+   .conductor.blocked_at = (now | todate) |
+   .conductor.tracks = [] |
+   .conductor.rendezvous = null |
+   .conductor.fork_meeting_id = null |
+   .current_agent = null |
+   .next_agent = "none" |
+   .agent_status = "blocked" |
+   .owner_prompt.status = "awaiting-authority" |
+   .owner_prompt.blocked_reason = $reason |
+   .owner_prompt.blocked_at = (now | todate) |
+   del(.conductor.completed_at) |
+   del(.owner_prompt.completed_at) |
+   del(.company_state.completed_at)' \
+  --arg reason "$REASON"; then
+  echo "[company-block] FAILED: progress.json transition did not apply (reason=$REASON). Runtime is NOT marked blocked." >&2
+  exit 1
+fi
+
+if [ -f "$TODOS" ]; then
+  tmp="$(mktemp)"
+  if jq --arg reason "$REASON" '
+    .owners |= with_entries(
+      .value |= map(
+        if (.status == "active" or .status == "pending")
+        then .status = "blocked" | .blocked_reason = $reason | .updated_at = (now | todate)
+        else .
+        end
+      )
+    )
+  ' "$TODOS" > "$tmp" 2>/dev/null; then mv "$tmp" "$TODOS"; else rm -f "$tmp"; fi
+fi
+
+DOCS="$PROJECT_ROOT/.harness/documents"
+if [ -d "$DOCS" ]; then
+  find "$DOCS" -name mission-state.json -type f -print0 | while IFS= read -r -d '' state; do
+    active="$(jq -r '.active // false' "$state" 2>/dev/null || echo false)"
+    lifecycle="$(jq -r '.lifecycle // .status // "unknown"' "$state" 2>/dev/null || echo unknown)"
+    case "$lifecycle" in
+      closed|cancelled|superseded|complete|completed|blocked) continue ;;
+    esac
+    if [ "$active" = "true" ]; then
+      tmp="$(mktemp)"
+      jq --arg r "$REASON" '.lifecycle = "blocked" | .active = false | .blocked_reason = $r | .blocked_at = (now | todate)' "$state" > "$tmp" && mv "$tmp" "$state"
+    fi
+  done
+fi
+
+if command -v node >/dev/null 2>&1 && [ -f "$SCRIPT_DIR/harness-activity-record.js" ]; then
+  node "$SCRIPT_DIR/harness-activity-record.js" "$PROJECT_ROOT" >/dev/null 2>&1 || true
+fi
+
+echo "[company-block] marked blocked: $REASON"

package/scripts/harness-company-complete.sh

@@ -25,12 +25,12 @@ command -v jq >/dev/null 2>&1 || {
   exit 1
 }
 
-bash "$SCRIPT_DIR/harness-progress-set.sh" "$PROJECT_ROOT" \
+if ! bash "$SCRIPT_DIR/harness-progress-set.sh" "$PROJECT_ROOT" \
   '.company_state.state = "idle" |
    .company_state.active_workers = 0 |
    .company_state.completed_at = (now | todate) |
    .conductor.state = "completed" |
-   .conductor.current_action = "complete:'"$REASON"'" |
+   .conductor.current_action = ("complete:" + $reason) |
    .conductor.completed_at = (now | todate) |
    .conductor.tracks = [] |
    .conductor.rendezvous = null |
@@ -39,15 +39,22 @@ bash "$SCRIPT_DIR/harness-progress-set.sh" "$PROJECT_ROOT" \
    .next_agent = "none" |
    .agent_status = "completed" |
    .owner_prompt.status = "completed" |
-   .owner_prompt.completed_at = (now | todate)'
+   .owner_prompt.completed_at = (now | todate) |
+   del(.owner_prompt.blocked_reason) |
+   del(.owner_prompt.blocked_at) |
+   del(.conductor.blocked_at)' \
+  --arg reason "$REASON"; then
+  echo "[company-complete] FAILED: progress.json transition did not apply (reason=$REASON). Runtime is NOT marked complete." >&2
+  exit 1
+fi
 
 if [ -f "$TODOS" ]; then
   tmp="$(mktemp)"
   jq '
     .owners |= with_entries(
       .value |= map(
-        if (.status == "active" or .status == "pending" or .status == "paused")
-        then .status = "done" | .updated_at = (now | todate)
+        if (.status == "active" or .status == "pending" or .status == "paused" or .status == "blocked")
+        then .status = "done" | del(.blocked_reason) | .updated_at = (now | todate)
         else .
         end
       )
@@ -61,11 +68,13 @@ if [ -d "$DOCS" ]; then
     active="$(jq -r '.active // false' "$state" 2>/dev/null || echo false)"
     lifecycle="$(jq -r '.lifecycle // .status // "unknown"' "$state" 2>/dev/null || echo unknown)"
     case "$lifecycle" in
-      closed|cancelled|superseded|complete|blocked) continue ;;
+      closed|cancelled|superseded|complete|completed) continue ;;
     esac
-    if [ "$active" = "true" ]; then
+    # A mission left "blocked" (active=false) is resumed and completed here, so
+    # clear its blocker fields too — block -> complete must leave no stale state.
+    if [ "$active" = "true" ] || [ "$lifecycle" = "blocked" ]; then
       tmp="$(mktemp)"
-      jq '.lifecycle = "complete" | .active = false | .completed_at = (now | todate)' "$state" > "$tmp" && mv "$tmp" "$state"
+      jq '.lifecycle = "complete" | .active = false | .completed_at = (now | todate) | del(.blocked_reason) | del(.blocked_at)' "$state" > "$tmp" && mv "$tmp" "$state"
     fi
   done
 fi

package/scripts/harness-company-cycle.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# harness-company-cycle.sh — record an OPERATING heartbeat for a perpetual goal.
+#
+# This is the steady-state transition for a never-completing (Mode 1) goal: the
+# CEO runs it at the end of an operating tick AFTER a status-briefing round
+# surfaced no new agenda. It flips the runtime to "operating" (a non-terminal
+# state the Stop hook treats as a clean yield to the next hourly wake), bumps the
+# cycle counter, and records activity — it does NOT terminate the mission or the
+# company loop. Finite goals use harness-company-complete.sh instead.
+#
+# Usage:
+#   bash scripts/harness-company-cycle.sh <project-root> <goal-rel> [reason]
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_ROOT="${1:-.}"
+GOAL_REL="${2:-}"
+REASON="${3:-operating-heartbeat}"
+
+PROGRESS="$PROJECT_ROOT/.harness/progress.json"
+[ -f "$PROGRESS" ] || { echo "[company-cycle] not found: $PROGRESS" >&2; exit 1; }
+command -v jq >/dev/null 2>&1 || { echo "[company-cycle] jq required" >&2; exit 1; }
+
+if ! bash "$SCRIPT_DIR/harness-progress-set.sh" "$PROJECT_ROOT" \
+  '.company_state.state = "operating" |
+   .conductor.state = "operating" |
+   .conductor.current_action = ("operating:" + $reason) |
+   .conductor.tracks = [] |
+   .current_agent = null |
+   .next_agent = "none" |
+   .agent_status = "operating" |
+   .owner_prompt.status = "operating" |
+   .conductor.stop_chain_count = 0 |
+   .operating.cycles = ((.operating.cycles // 0) + 1) |
+   .operating.last_cycle_at = (now | todate) |
+   .operating.goal = $goal' \
+  --arg reason "$REASON" --arg goal "$GOAL_REL"; then
+  echo "[company-cycle] FAILED: progress.json operating heartbeat did not apply (goal=$GOAL_REL). Runtime is NOT marked operating." >&2
+  exit 1
+fi
+
+# bump the per-goal agenda cycle counter too (best-effort)
+AGENDA="$PROJECT_ROOT/.harness/documents/$GOAL_REL/agenda.json"
+if [ -n "$GOAL_REL" ] && [ -f "$AGENDA" ]; then
+  tmp="$AGENDA.tmp.$$"
+  jq '.cycles = ((.cycles // 0) + 1) | .last_cycle_at = (now | todate)' "$AGENDA" > "$tmp" && mv "$tmp" "$AGENDA" || rm -f "$tmp"
+fi
+
+if command -v node >/dev/null 2>&1 && [ -f "$SCRIPT_DIR/harness-activity-record.js" ]; then
+  node "$SCRIPT_DIR/harness-activity-record.js" "$PROJECT_ROOT" >/dev/null 2>&1 || true
+fi
+
+echo "[company-cycle] operating heartbeat recorded: $REASON"

package/scripts/harness-progress-set.sh

@@ -17,10 +17,16 @@ PROJECT_ROOT="${1:-.}"
 FILTER="${2:-}"
 
 if [ -z "$FILTER" ]; then
-  echo "[progress-set] usage: $0 <project-root> <jq_filter>" >&2
+  echo "[progress-set] usage: $0 <project-root> <jq_filter> [jq-args...]" >&2
   exit 2
 fi
 
+# Any args after the filter are passed straight through to jq (e.g.
+# `--arg reason "$REASON"`). Callers MUST inject untrusted/free-text values this
+# way and reference them as jq $variables — never string-interpolate into the
+# filter, which breaks on quotes and can silently fail.
+shift 2 2>/dev/null || true
+
 PROGRESS="$PROJECT_ROOT/.harness/progress.json"
 
 if [ ! -f "$PROGRESS" ]; then
@@ -32,7 +38,7 @@ fi
 FINAL_FILTER="$FILTER | .updated_at = (now | todate)"
 
 TMP="${PROGRESS}.tmp.$$"
-if jq "$FINAL_FILTER" "$PROGRESS" > "$TMP" 2>/dev/null; then
+if jq "$@" "$FINAL_FILTER" "$PROGRESS" > "$TMP" 2>/dev/null; then
   mv "$TMP" "$PROGRESS"
 else
   rm -f "$TMP"

package/scripts/harness-stop.sh

@@ -51,6 +51,76 @@ if [ "$HOOK_EVENT" = "Stop" ]; then
   if [ "$STOP_HOOK_ACTIVE" = "true" ]; then exit 0; fi
 fi
 
+# ── v7 깨끗한 정지 short-circuit ──────────────────────────────
+# 회사 루프의 정당한 정지 조건은 둘뿐이다: COMPLETE, 그리고 외부권한 BLOCKED.
+# harness-company-complete.sh / harness-company-block.sh 가 이 terminal 런타임
+# 상태를 기록한다. 그 상태를 여기서 존중해, 끝났는데도 "계속하라"고 채근하지 않고
+# 턴을 깨끗이 종료한다. (/goal 직후 routing/running 상태에서는 발동하지 않는다.)
+case "$CONDUCTOR_STATE" in
+  completed|idle|blocked) exit 0 ;;
+esac
+if [ "$AGENT_STATUS" = "blocked" ] || [ "$OWNER_PROMPT_STATUS" = "completed" ] || [ "$OWNER_PROMPT_STATUS" = "awaiting-authority" ]; then
+  exit 0
+fi
+
+# ── v7 영구 운영(operating) + 완료 backstop ──────────────────
+# .harness/documents 의 mission-state 를 스캔해 루프 종류를 분류한다:
+#   - operating mission 이 active  → 영구 모드: 안건을 강제 구동하거나 wake 로 양보
+#   - 모든 mission 이 terminal      → 유한 루프 종료: 완료 처리 + 깨끗한 정지
+# (mission 문서가 없으면 순수 v6 프로젝트 → 미발동)
+DOCS_DIR="$CWD/.harness/documents"
+if [ "$TASK_STOP_ACTIVE" != "true" ] && [ -d "$DOCS_DIR" ] && \
+   { [ "$CONDUCTOR_STATE" = "running" ] || [ "$CONDUCTOR_STATE" = "operating" ]; }; then
+  any_mission="false"; active_mission="false"; operating_active="false"; operating_rel=""
+  while IFS= read -r state; do
+    [ -n "$state" ] || continue
+    any_mission="true"
+    a=$(jq -r '.active // false' "$state" 2>/dev/null || echo false)
+    lc=$(jq -r '.lifecycle // .status // "unknown"' "$state" 2>/dev/null || echo unknown)
+    case "$lc" in
+      closed|cancelled|superseded|complete|completed|blocked) ;;
+      operating|monitoring)
+        if [ "$a" = "true" ]; then
+          active_mission="true"; operating_active="true"
+          rel="${state#"$DOCS_DIR"/}"; operating_rel="${rel%/mission-state.json}"
+        fi ;;
+      *) [ "$a" = "true" ] && active_mission="true" ;;
+    esac
+  done < <(find "$DOCS_DIR" -name mission-state.json -type f 2>/dev/null)
+
+  if [ "$operating_active" = "true" ]; then
+    active_agenda=0
+    if [ -x "$SCRIPT_DIR/harness-agenda.sh" ]; then
+      active_agenda=$(bash "$SCRIPT_DIR/harness-agenda.sh" "$CWD" "$operating_rel" active-count 2>/dev/null || echo 0)
+    fi
+    # operating tick 도 활동 샘플 1회 + stop_chain_count 증가
+    NEW_COUNT=$((STOP_CHAIN_COUNT + 1))
+    jq --argjson n "$NEW_COUNT" '.conductor.stop_chain_count=$n | .conductor.last_stop_chain_at=(now|todate)' "$PROGRESS" > "$PROGRESS.tmp.$$" 2>/dev/null && mv "$PROGRESS.tmp.$$" "$PROGRESS" || rm -f "$PROGRESS.tmp.$$"
+    if command -v node >/dev/null 2>&1 && [ -f "$SCRIPT_DIR/harness-activity-record.js" ]; then node "$SCRIPT_DIR/harness-activity-record.js" "$CWD" >/dev/null 2>&1 || true; fi
+    if [ "${active_agenda:-0}" -gt 0 ] 2>/dev/null; then
+      bash "$SCRIPT_DIR/harness-progress-set.sh" "$CWD" '.conductor.state="running"' >/dev/null 2>&1 || true
+      jq -nc --arg n "$active_agenda" --arg g "$operating_rel" '{decision:"block", reason:("영구 운영 루프: 활성 안건 \($n)건. CEO는 .harness/documents/\($g)/agenda.json 의 모든 open 안건을 `scripts/harness-agenda.sh . \($g) decide` 로 판단·라우팅하고, decided 안건은 담당 CXX가 hired worker로 실행·검증한 뒤 `... close` 할 때까지 진행하라. 안건이 남았는데 턴을 끝내지 말 것.")}'
+      exit 0
+    elif [ "$CONDUCTOR_STATE" = "operating" ]; then
+      exit 0   # 안건 0 + heartbeat 기록됨 → 다음 hourly wake 로 양보(깨끗한 정지)
+    else
+      jq -nc --arg g "$operating_rel" '{decision:"block", reason:("영구 운영 루프: 안건 없음. CEO는 각 CXX(COO/CDO/CTO/CQO/OPS)에게 현황 보고를 지시하라 — 각 CXX는 자기 산하 worker 산출물이 goal 기준으로 여전히 올바르게 동작하는지 브리핑하고, 손실·드리프트·기회·리스크가 보이면 `scripts/harness-agenda.sh . \($g) raise <cxx> <kind> \"<title>\"` 로 새 안건을 등록한다. 한 바퀴 브리핑이 정말 무안건이면 `scripts/harness-company-cycle.sh . \($g)` 로 operating heartbeat 를 남기고 다음 hourly wake 로 양보하라.")}'
+      exit 0
+    fi
+  fi
+
+  if [ "$any_mission" = "true" ] && [ "$active_mission" = "false" ] && [ "$CONDUCTOR_STATE" = "running" ]; then
+    # Never silently complete: record why the backstop fired so an operator can
+    # audit a misclassification, and only treat the loop as finished if the
+    # transition actually applied (otherwise fall through and keep chaining).
+    echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) | stop-hook | auto-complete | backstop fired (conductor=running but no active mission under .harness/documents)" >> "$CWD/.harness/progress.log" 2>/dev/null || true
+    if bash "$SCRIPT_DIR/harness-company-complete.sh" "$CWD" "loop-idle-no-active-mission" >/dev/null 2>&1; then
+      exit 0
+    fi
+    echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) | stop-hook | auto-complete | WARN: harness-company-complete.sh failed during backstop; continuing loop" >> "$CWD/.harness/progress.log" 2>/dev/null || true
+  fi
+fi
+
 # 자동 연쇄 조건:
 #   conductor/company loop 가 running
 #   AND task_stop 비활성
@@ -104,6 +174,12 @@ jq --argjson n "$NEW_COUNT" '.conductor.stop_chain_count = $n |
   .conductor.last_stop_chain_at = (now | todate)' "$PROGRESS" > "$TMP" 2>/dev/null \
   && mv "$TMP" "$PROGRESS" || rm -f "$TMP"
 
+# 자율 tick 마다 활동 샘플 1회 기록 → 대시보드 히트맵이 라이브 운영 중에도 채워진다.
+# (recorder 의 runtimeIdle 게이트가 완료 후에는 count>0 샘플을 알아서 억제한다.)
+if command -v node >/dev/null 2>&1 && [ -f "$SCRIPT_DIR/harness-activity-record.js" ]; then
+  node "$SCRIPT_DIR/harness-activity-record.js" "$CWD" >/dev/null 2>&1 || true
+fi
+
 # Claude 에게 다음 행동 지시
 if [ "$ESCALATION" != "null" ]; then
   REASON="자율 회사 루프 진행 중. escalation=${ESCALATION} 는 정지 사유가 아니라 meeting-manager/service-ops 공유 대상이다. current_agent=${CURRENT_AGENT}, next_agent=${NEXT_AGENT}, agent_status=${AGENT_STATUS}, conductor=${CONDUCTOR_STATE}, company=${COMPANY_STATE}. SKILL 에 따라 CEO/CXX/worker 흐름을 계속하거나 conductor-tick 을 굴려 meeting-manager 회의로 라우팅하라. progress.log 에는 절대 미래 시각을 쓰지 말 것. 진짜로 끝났을 때만 turn 을 종료하라."

package/scripts/harness-wake-control.sh

@@ -0,0 +1,151 @@
+#!/bin/bash
+# harness-wake-control.sh — per-project hourly-wake launchd control, keyed by HARNESS_BASE_PORT.
+#
+# The perpetual operating loop (Mode 1) relies on the hourly launchd wake to
+# resume cycles across sessions. This gives the dashboard a deterministic,
+# per-project on/off handle: the launchd job Label is anchored to the project's
+# HARNESS_BASE_PORT (e.g. com.walwal.harness-wake.43000), so each project's wake
+# daemon is uniquely addressable and independently toggleable.
+#
+# launchd periodic jobs are StartInterval execs, not listening daemons, so there
+# is no TCP port to bind — the base-port-keyed Label IS the fixed control id.
+#
+# Usage (all print JSON status except `label`):
+#   harness-wake-control.sh status <project-root>
+#   harness-wake-control.sh on     <project-root> [--dry-run]
+#   harness-wake-control.sh off    <project-root>
+#   harness-wake-control.sh label  <project-root>
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+WAKE_SH="$SCRIPT_DIR/harness-wake.sh"
+INSTALL_SH="$SCRIPT_DIR/harness-wake-install.sh"
+CMD="${1:-status}"
+PROJECT_ROOT="${2:-$PWD}"
+PROJECT_ROOT="$(cd "$PROJECT_ROOT" 2>/dev/null && pwd || echo "$PROJECT_ROOT")"
+DRYRUN=0
+[ "${3:-}" = "--dry-run" ] && DRYRUN=1
+
+LAUNCH_AGENTS_DIR="$HOME/Library/LaunchAgents"
+LOG_DIR="$HOME/.walwal-harness/logs"
+PROJECTS_LIST="$HOME/.walwal-harness/projects.list"
+STATE_DIR="$PROJECT_ROOT/.harness/runtime"
+GLOBAL_LABEL="com.walwal.harness-wake"
+DOMAIN="gui/$(id -u 2>/dev/null || echo 0)"
+
+command -v jq >/dev/null 2>&1 || { echo '{"supported":false,"error":"jq required"}'; exit 0; }
+
+resolve_base_port() {
+  local p=""
+  if [ -f "$PROJECT_ROOT/.env" ]; then
+    p=$(grep -E '^[[:space:]]*HARNESS_BASE_PORT=' "$PROJECT_ROOT/.env" 2>/dev/null | tail -1 | cut -d= -f2 | tr -dc '0-9')
+  fi
+  if [ -z "$p" ] && [ -f "$PROJECT_ROOT/.harness/config.json" ]; then
+    p=$(jq -r '.runtime.ports.base // empty' "$PROJECT_ROOT/.harness/config.json" 2>/dev/null | tr -dc '0-9')
+  fi
+  echo "$p"
+}
+
+BASE_PORT="$(resolve_base_port)"
+if [ -n "$BASE_PORT" ]; then KEY="$BASE_PORT"; else KEY="p$(printf '%s' "$PROJECT_ROOT" | cksum | cut -d' ' -f1)"; fi
+LABEL="$GLOBAL_LABEL.$KEY"
+PLIST="$LAUNCH_AGENTS_DIR/$LABEL.plist"
+
+supported() { [ "$(uname 2>/dev/null)" = "Darwin" ] && command -v launchctl >/dev/null 2>&1; }
+is_loaded() { launchctl print "$DOMAIN/$1" >/dev/null 2>&1; }
+in_global_list() { [ -f "$PROJECTS_LIST" ] && grep -Fxq "$PROJECT_ROOT" "$PROJECTS_LIST" 2>/dev/null; }
+
+# XML-escape values interpolated into the plist (paths may contain & < > " ').
+xml_escape() {
+  printf '%s' "$1" | sed -e 's/&/\&amp;/g' -e 's/</\&lt;/g' -e 's/>/\&gt;/g' -e 's/"/\&quot;/g' -e "s/'/\&apos;/g"
+}
+
+write_plist() { # path
+  mkdir -p "$(dirname "$1")"
+  local e_label e_wake e_out e_err e_path e_root
+  e_label="$(xml_escape "$LABEL")"
+  e_wake="$(xml_escape "$WAKE_SH")"
+  e_out="$(xml_escape "$LOG_DIR/wake.$KEY.stdout.log")"
+  e_err="$(xml_escape "$LOG_DIR/wake.$KEY.stderr.log")"
+  e_path="$(xml_escape "$HOME/.local/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin")"
+  e_root="$(xml_escape "$PROJECT_ROOT")"
+  cat > "$1" <<PL
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key><string>$e_label</string>
+    <key>ProgramArguments</key>
+    <array><string>/bin/bash</string><string>$e_wake</string></array>
+    <key>StartInterval</key><integer>3600</integer>
+    <key>RunAtLoad</key><true/>
+    <key>StandardOutPath</key><string>$e_out</string>
+    <key>StandardErrorPath</key><string>$e_err</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>PATH</key><string>$e_path</string>
+        <key>WALWAL_HARNESS_PROJECTS</key><string>$e_root</string>
+    </dict>
+</dict>
+</plist>
+PL
+}
+
+write_state() { # enabled-bool
+  mkdir -p "$STATE_DIR"
+  jq -n --arg label "$LABEL" --arg plist "$PLIST" --arg base "$BASE_PORT" --arg key "$KEY" \
+        --arg root "$PROJECT_ROOT" --argjson enabled "$1" --arg now "$(date -u +%Y-%m-%dT%H:%M:%SZ)" '
+    {label:$label, plist:$plist, key:$key,
+     base_port:($base | if . == "" then null else (tonumber? // .) end),
+     project_root:$root, enabled:$enabled, updated_at:$now}' \
+    > "$STATE_DIR/wake-control.json" 2>/dev/null || true
+}
+
+status_json() {
+  local sup="false" pp="false" gl="false" ing="false" eff="false" plx="false"
+  supported && sup="true"
+  if supported; then
+    is_loaded "$LABEL" && pp="true"
+    is_loaded "$GLOBAL_LABEL" && gl="true"
+  fi
+  in_global_list && ing="true"
+  [ -f "$PLIST" ] && plx="true"
+  if [ "$pp" = "true" ] || { [ "$gl" = "true" ] && [ "$ing" = "true" ]; }; then eff="true"; fi
+  jq -nc \
+    --argjson supported "$sup" --argjson enabled "$eff" \
+    --argjson per_project_loaded "$pp" --argjson global_loaded "$gl" --argjson in_global_list "$ing" \
+    --argjson plist_exists "$plx" \
+    --arg label "$LABEL" --arg key "$KEY" --arg plist "$PLIST" --arg root "$PROJECT_ROOT" \
+    --arg base "$BASE_PORT" '
+    {supported:$supported, enabled:$enabled,
+     per_project_loaded:$per_project_loaded, global_loaded:$global_loaded, in_global_list:$in_global_list,
+     plist_exists:$plist_exists, label:$label, key:$key, plist:$plist, project_root:$root,
+     base_port:($base | if . == "" then null else (tonumber? // .) end),
+     interval_seconds:3600}'
+}
+
+case "$CMD" in
+  label) echo "$LABEL" ;;
+  status) status_json ;;
+  on)
+    if ! supported; then status_json; exit 0; fi
+    if [ "$DRYRUN" = "1" ]; then write_plist "$STATE_DIR/$LABEL.plist.preview"; write_state true; status_json; exit 0; fi
+    write_plist "$PLIST"
+    launchctl bootout "$DOMAIN/$LABEL" >/dev/null 2>&1 || launchctl unload "$PLIST" >/dev/null 2>&1 || true
+    launchctl bootstrap "$DOMAIN" "$PLIST" >/dev/null 2>&1 || launchctl load "$PLIST" >/dev/null 2>&1 || true
+    # per-project job is authoritative; drop from the legacy global list to avoid double-wake.
+    [ -x "$INSTALL_SH" ] && bash "$INSTALL_SH" remove "$PROJECT_ROOT" >/dev/null 2>&1 || true
+    write_state true
+    status_json
+    ;;
+  off)
+    if ! supported; then status_json; exit 0; fi
+    launchctl bootout "$DOMAIN/$LABEL" >/dev/null 2>&1 || launchctl unload "$PLIST" >/dev/null 2>&1 || true
+    rm -f "$PLIST"
+    [ -x "$INSTALL_SH" ] && bash "$INSTALL_SH" remove "$PROJECT_ROOT" >/dev/null 2>&1 || true
+    write_state false
+    status_json
+    ;;
+  *) echo '{"error":"usage: status|on|off|label <project-root> [--dry-run]"}' >&2; exit 2 ;;
+esac

package/scripts/harness-wake.sh

@@ -167,6 +167,11 @@ Project root: $project_root
 Wake reason: idle=${idle}s force=${force}
 Hourly review: ${review_path:-"(not available)"}
 
+Operating (perpetual) goal mode:
+- If the active goal's mission-state.json lifecycle is "operating", this is a never-completing standing company. Do NOT run harness-company-complete.sh for it.
+- Read the shared agenda .harness/documents/<goal>/agenda.json (scripts/harness-agenda.sh . <goal> list). If it has active items, adjudicate every open item (scripts/harness-agenda.sh . <goal> decide <id> "<decision>" <cxx>) and route the owning CXX to execute+verify, then close it. If the agenda is empty, run a status-briefing round: require each CXX (COO/CDO/CTO/CQO/OPS) to confirm its live deliverables still operate toward the goal and to raise any loss/drift/incident/opportunity/risk via scripts/harness-agenda.sh . <goal> raise <cxx> <kind> "<title>".
+- If a full briefing round genuinely surfaces nothing this tick, run scripts/harness-company-cycle.sh . <goal> to record the operating heartbeat and end the tick; the next hourly wake resumes the cycle. A loss/drawdown is an agenda item that triggers the next research→apply→operate cycle, never a reason to stop or to wait on the Owner.
+
 One-line command:
 Convene CXX + OPS, collect current progress and decisions, decide the next action as CEO with the active goal in mind, drive all teams without asking Owner, and use CQO verification until the goal demonstrably works.