agentlas 1.0.37 → 1.0.39

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## 1.0.39 — 2026-08-11
+
+pi-tui shell increment 2 + architecture mirror sync.
+
+- Experimental pi shell (`AGENTLAS_TUI=pi`): persisted history (cli-history.json
+  v2 contract), Shift-Tab permission cycling (same two-step FULL arming state
+  machine as the classic REPL), `!` shell passthrough (full-permission gate,
+  secret masking), and `/s` `/switch` `/kill` `/rm` `/sessions` `/tree` session
+  observation wired to the same orchestrator/renderer pair.
+- Streaming display masks the Memory Events envelope (runtime contract, not
+  user-facing text); the harvest pipeline is unchanged.
+- ARCHITECTURE_VERSION mirror synced 1.7.0 → 1.7.1 (vendor regenerated from
+  the desktop dist, value-level parity gate green).
+
+## 1.0.38 — 2026-08-11
+
+Silence was the worst failure mode — this release makes failures speak.
+
+- The presentation boundary (`Ui.error`) now has conditions. Machine-coded
+  messages (usage guidance, honest stops, server relays) pass through; only
+  uncoded raw provider text is still replaced by the neutral recovery line.
+  Previously every failure — including usage help for eight argless slash
+  commands — collapsed into the same "One is recovering" sentence.
+- `/s` `/switch` `/kill` `/rm` `/runtime` `/model` `/effort` `/permission`
+  without arguments now print their usage line instead of a recovery notice.
+- Workforce sign-in expiry is relayed honestly: the server's `auth_required`
+  guidance reaches the user (run `agentlas login`), instead of being
+  misreported as an invalid continuity receipt and then swallowed.
+- `doctor` verifies the cloud session against the server instead of only
+  checking that a session file exists. Expired sessions are reported as a
+  warning with the login hint; offline is reported as "unverified", never as
+  a false all-clear. `--json` output remains observation-only.
+- Authored guidance in storm/swarm/workforce flows (planner refusals, unknown
+  options, persisted receipt issues) is no longer swallowed by the boundary.
+- `npm run sync:architecture` works again — the script was restored to
+  `scripts/` where its relative paths are correct.
+
 ## 1.0.37 — 2026-08-10
 
 Agentlas One can now carry its owner-bound identity and curated memory tickets

package/engine/agentlas-banner.cjs

@@ -5,7 +5,7 @@
 const path = require("node:path");
 const os = require("node:os");
 const permissions = require("./agentlas-permissions.cjs");
-const { truncateWidth, visWidth } = require("./agentlas-composer.cjs");
+const { truncateWidth, visWidth } = require("./ui/width.cjs");
 
 // AGENTLAS wordmark (block letters). Rendered with a brand gradient across columns.
 const WORDMARK = [

package/engine/agentlas-onboard.cjs

@@ -5,7 +5,7 @@
  */
 const i18n = require("./agentlas-i18n.cjs");
 const banner = require("./agentlas-banner.cjs");
-const { visWidth, wrapWidth } = require("./agentlas-composer.cjs");
+const { visWidth, wrapWidth } = require("./ui/width.cjs");
 
 /*
  * req = { ui, rl, helpers, persist } → Promise<{ onboarded, saved, saveError, lang, runtime, permission }>
@@ -184,7 +184,7 @@ async function runOnboard({ ui, rl, helpers, persist }) {
     }
     ui.line("");
     if (saveError) {
-      ui.error(ui.t("wiz.saveFailed", String((saveError && saveError.message) || saveError)));
+      ui.error(ui.t("wiz.saveFailed", String((saveError && saveError.message) || saveError)), { reveal: true });
     } else {
       printSaved(ui.t("wiz.saved"));
       printIndented(ui.t("wiz.changeLang"), c.faint);

package/engine/agentlas-ui.cjs

@@ -574,7 +574,7 @@ class Ui {
     this.updateSpinner(msg);
   }
   _message(prefix, prefixPaint, messagePaint, msg) {
-    const { wrapWidth } = require("./agentlas-composer.cjs");
+    const { wrapWidth } = require("./ui/width.cjs");
     const columns = Math.max(8, Number(this.out.columns) || 80);
     const prefixWidth = visibleWidth(prefix);
     const lines = wrapWidth(stripAnsi(String(msg ?? "")), Math.max(2, columns - prefixWidth));
@@ -594,13 +594,28 @@ class Ui {
     this.stopSpinner();
     this._message("! ", this.c.amber, this.c.text, msg);
   }
-  error(msg) {
+  error(msg, opts = {}) {
     this.stopSpinner();
-    // Last-resort presentation boundary for legacy/direct commands. Raw
-    // provider text, stack messages, paths and codes must never become UI.
-    // REPL/session paths route the private evidence to the controller before
-    // reaching this boundary; direct commands get a neutral recovery state.
-    void msg;
+    /*
+     * 표시 경계 — 조건이 있어야 경계다 (2026-08-11, 존폐 판단 규칙 2).
+     * 무조건 삼키면 기계 코드·사용법·안내문까지 전부 같은 복구 한 줄이 되어
+     * 진단 자체가 불가능해진다(실사고: 죽은 명령 0인데 "안 돌아간다"로 보임).
+     * 통과 조건 — 저자가 의도한 메시지라는 기계 신호가 있을 때만:
+     *   · Error 이고 code 또는 honestStop 이 있다 (usage/정직정지/서버 중계)
+     *   · 호출자가 opts.reveal === true 로 명시했다 (storm/swarm 안내문 등)
+     * 신호 없는 문자열/Error 는 provider 날것으로 간주해 기존 계약대로 삼킨다
+     * (recovery-presentation-contract 가 이 삼킴을 계속 잠근다).
+     */
+    const isErrorLike = msg instanceof Error || (msg !== null && typeof msg === "object" && "message" in msg);
+    const machineSignal = isErrorLike && Boolean(msg.code || msg.honestStop);
+    if (opts.reveal === true || machineSignal) {
+      const raw = String((isErrorLike ? msg.message : msg) ?? "").trim();
+      const text = redactCommandSecrets(stripAnsi(raw)).slice(0, 800);
+      if (text) {
+        this._message("✖ ", this.c.amber, this.c.text, text);
+        return;
+      }
+    }
     this._message(
       "◆ ",
       this.c.amber,

package/engine/agentlas-workforce.cjs

@@ -1978,7 +1978,13 @@ function buildPrompts(task, identity) {
 function create(deps = {}) {
   const D = deps;
 
+  /*
+   * pi-tui 이행 정지작업 (D3 Phase 1-2, 2026-08-11): ctx가 준 Ui가 있으면 그것을
+   * 쓴다. 자체 생성 Ui는 렌더러 교체 시 구 코드가 stdout에 직접 써 프레임을
+   * 찢는 병렬 경로였다. 생성은 주입이 없을 때의 폴백으로만 남긴다.
+   */
   function newUi(lang) {
+    if (D.uiInstance) return D.uiInstance;
     return new Ui({ lang: lang || (typeof D.prefsLang === "function" ? D.prefsLang() : "en") });
   }
 
@@ -4549,10 +4555,10 @@ const TRANSIENT_MODEL_ERROR_RE = /Connection closed mid-response|"terminal_reaso
         const detailText = otherDetails && (typeof otherDetails !== "object" || Object.keys(otherDetails).length)
           ? ` — ${JSON.stringify(otherDetails).slice(0, 1_200)}`
           : "";
-        ui.error(`${receipt.failure.code}: ${receipt.failure.message}${detailText}`);
+        ui.error(`${receipt.failure.code}: ${receipt.failure.message}${detailText}`, { reveal: true });
         if (issues) {
-          for (const issue of issues.slice(0, 16)) ui.error(`  - ${String(issue).slice(0, 400)}`);
-          if (issues.length > 16) ui.error(`  … ${issues.length - 16} more issues in the persisted receipt`);
+          for (const issue of issues.slice(0, 16)) ui.error(`  - ${String(issue).slice(0, 400)}`, { reveal: true });
+          if (issues.length > 16) ui.error(`  … ${issues.length - 16} more issues in the persisted receipt`, { reveal: true });
         }
         // 실패한 실행이야말로 토큰이 어디로 갔는지 알아야 하는 순간이다. issues 유무와
         // 무관하게 낸다 — 첫 배선이 이 블록 안에 들어가는 바람에 issues 없는 실패에서는

package/engine/architecture.data.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.7.0",
+  "version": "1.7.1",
   "emitterBlock": "## Memory (Agentlas curated memory)\n\nAt the end of EVERY completed normal reply, emit exactly one hidden Memory Events\nenvelope. The runtime removes it before display. This envelope is the per-turn receipt:\nalways include a compact safe turn_summary, and use an empty candidates array when\nnothing durable was learned. Do not skip the envelope.\n\nRules:\n- Never include secrets, credentials, API keys, raw logs, or full transcripts.\n- Real credential values may live only in local project .env/.env.local,\n  ignored signing/ or credentials/ files, or a local keychain/vault. Memory\n  Events may mention env names and local relative paths only.\n- For deploy, release, store, billing, auth, API, or cloud work, first read the\n  project's .agentlas/local-credentials.map.json and the top\n  \"Local Credential Index\" section of .agentlas/project-soul-memory.md\n  before saying a credential is missing.\n- One candidate per durable item. Keep \"content\" to one or two sentences.\n- \"memory_kind\": fact | decision | preference | risk | procedure | hypothesis | evidence | deprecation | conflict\n- \"suggested_scope\": user_identity | team_memory | project (this folder) | agent_repo | session (temporary) | discard\n- Use user_identity for a stable operator preference or personal fact (their name, role, language, tone,\n  how they want you to behave) — these must outlive any one project. The curator only files user_identity\n  when you label it so with \"confidence\": \"high\"; it never promotes into that scope, so a preference emitted\n  at lower confidence is demoted to a throwaway session note.\n- \"agent_team\" is accepted only as a legacy alias for team_memory.\n- Add \"request_context\" when it improves future recall: user_intent, trigger_terms,\n  cwd_at_request, target_project, target_path, cross_context, outcome.\n- Never put the raw user prompt or transcript in request_context.\n- Suggest a scope; the separate Memory Curator decides the final destination.\n- turn_summary is one value-free sentence about the completed outcome. It is not the\n  user prompt, a transcript, raw log, secret, or absolute local path.\n\nFormat (always emit, including an empty candidates array):\n\n## Memory Events\n```json\n{\n  \"schema_version\": \"agentlas.memory-ticket.v1\",\n  \"turn_summary\": \"Completed outcome in one safe sentence.\",\n  \"candidates\": [\n    {\n      \"memory_kind\": \"decision\",\n      \"content\": \"...\",\n      \"suggested_scope\": \"project\",\n      \"confidence\": \"high\",\n      \"sensitivity\": \"internal\",\n      \"evidence_refs\": [],\n      \"request_context\": {\n        \"user_intent\": \"...\",\n        \"trigger_terms\": [\"...\"],\n        \"cwd_at_request\": null,\n        \"target_project\": null,\n        \"target_path\": null,\n        \"cross_context\": false,\n        \"outcome\": \"...\"\n      }\n    }\n  ]\n}\n```",
   "eventsHeading": "## Memory Events",
   "memoryDir": ".agentlas",

package/engine/commands/doctor.cjs

@@ -24,7 +24,7 @@ function roleDetail(selection, role, en) {
   ].filter(Boolean).join(" · ");
 }
 
-function run(ctx, args = []) {
+async function run(ctx, args = []) {
   const en = ctx.lang === "en";
   // clig.dev: 스크립트 소비자를 위한 기계 계약. 사람용 줄과 같은 사실만 담는다.
   if (ctx.output?.format === "json" || args.includes("--json")) {
@@ -124,14 +124,43 @@ function run(ctx, args = []) {
     }
   } catch { /* db issue already reported */ }
 
-  // 3) 로그인 상태 (세션 파일 관측만 — 네트워크 호출 없음)
+  /*
+   * 3) 로그인 상태 — 자격 존재 + 실제 세션 검증.
+   * 파일 존재만 보고 all clear를 내면 만료 세션에서 편성이 죽는데 doctor는
+   * 초록불이었다(2026-08-11 존폐 판단 결함 5 — 사용자가 가장 먼저 칠 진단이
+   * 거짓말을 했다). 검증 실패는 종류를 가른다: 만료=경고(로그인 안내),
+   * 네트워크 불가=검증불가 표기(오프라인이 doctor를 적색으로 만들면 안 된다).
+   * --json 경로는 기존대로 관측만 한다(스크립트 소비자를 네트워크에 묶지 않는다).
+   */
   const sessionFile = path.join(userDataDir(), "auth", "cli-session.v1.json");
-  if (process.env.AGENTLAS_SESSION) {
-    ok(en ? "cloud session" : "클라우드 세션", "AGENTLAS_SESSION env");
-  } else if (fs.existsSync(sessionFile)) {
-    ok(en ? "cloud session" : "클라우드 세션", sessionFile);
-  } else {
+  const auth = require("../cloud/auth.cjs");
+  const sessionCookie = auth.cloudSessionCookie();
+  const credentialLabel = process.env.AGENTLAS_SESSION
+    ? "AGENTLAS_SESSION env"
+    : (fs.existsSync(sessionFile) ? sessionFile : null);
+  if (!sessionCookie || !credentialLabel) {
     ctx.out(`  ${ctx.ui.dim("·")} ${en ? "cloud session" : "클라우드 세션"}${ctx.ui.dim(en ? " — not signed in (agentlas login)" : " — 로그인 안 됨 (agentlas login)")}`);
+  } else {
+    try {
+      const meta = await auth.fetchSessionMeta(sessionCookie);
+      const who = meta && (meta.email || meta?.user?.email || meta?.account?.email || null);
+      ok(
+        en ? "cloud session" : "클라우드 세션",
+        `${credentialLabel}${who ? ` · ${who}` : ""} · ${en ? "verified" : "검증됨"}`,
+      );
+    } catch (sessionError) {
+      const status = /returned (\d{3})/.exec(String(sessionError?.message || ""))?.[1];
+      if (status === "401" || status === "403") {
+        warn(
+          en ? "cloud session" : "클라우드 세션",
+          en ? "expired — run `agentlas login`" : "만료됨 — `agentlas login`으로 다시 로그인",
+        );
+      } else {
+        ctx.out(`  ${ctx.ui.dim("·")} ${en ? "cloud session" : "클라우드 세션"}${ctx.ui.dim(en
+          ? ` — ${credentialLabel} · unverified (network unreachable)`
+          : ` — ${credentialLabel} · 검증 불가 (네트워크 연결 안 됨)`)}`);
+      }
+    }
   }
 
   ctx.out("");

package/engine/commands/workforce.cjs

@@ -75,7 +75,7 @@ async function dispatch(ctx, command, args) {
         permission,
         `terminal-${command}`,
       ) || cwd;
-      const runtime = workforceRuntime({ lang: ctx.lang, out: ctx.out });
+      const runtime = workforceRuntime({ lang: ctx.lang, out: ctx.out, uiInstance: ctx.uiInstance });
       const result = await runtime.cmdWorkforce(db, rest, runtimeOverride, {
         cwd,
         projectPath,

package/engine/graph/interview.cjs

@@ -110,7 +110,7 @@ const RULES = [
   "",
   "Return ONLY compact JSON, one of these two shapes:",
   '  {"ask":[{"id":"<stable-id>","question":"...","why":"...","choices":["...","..."]}]}',
-  `  {"blueprint":{"schema":"${BLUEPRINT_SCHEMA}","name":"...","goal":"...","trigger":{...},"steps":[...],"branches":[...]}}`,
+  `  {"blueprint":{"schema":"${BLUEPRINT_SCHEMA}","name":"...","goal":"...","trigger":{...},"steps":[...],"branches":[...],"checks":[...]}}`,
   "",
   'trigger is either {"kind":"cron","schedule":"daily-08:00"} (24h, or a 5-field cron string)',
   'or {"kind":"input","label":"<what to ask the person>","varName":"<one word, a-z>"}.',
@@ -226,8 +226,13 @@ function buildInterviewPrompt(state, locale = "ko") {
     lines.push(
       "",
       "Your previous blueprint could NOT be built. Fix exactly these problems and return a",
-      "corrected blueprint. Do not repeat the same mistake, and do not ask the person about it —",
-      "these are format problems on your side, not missing information:",
+      "corrected blueprint. EVERY fix below is ADDITIVE: add the missing top-level checks[] entry",
+      "(each problem message gives you the exact entry to add). Keep EVERY step, the trigger, and",
+      "every produces/consumes exactly as they are — never delete, merge, or shrink a step to make",
+      "a problem disappear: that removes what the person asked for and just triggers a different",
+      "error. More steps and more checks is the right direction, never fewer. Do not repeat the",
+      "same mistake, and do not ask the person — these are format problems on your side,",
+      "not missing information:",
     );
     for (const a of attempts) for (const problem of a.problems) lines.push(`  · ${problem}`);
   }
@@ -250,6 +255,39 @@ function triggerQuestion() {
   };
 }
 
+/**
+ * ★출력값 검증 check를 **코드가 채운다**(데스크탑 graph-blueprint.ts autofillOutputChecks와 동일).
+ * 바깥으로 나가는 단계가 소비하는 '앞에서 만든 값'에 check가 없으면, 검증기가 아는 그대로
+ * 표준 check를 넣어 **완전한 그래프를 완성**한다. 모델에 되물어 진동시키지 않고, 단계를 깎거나
+ * 캔버스로 떠넘기지도 않는다. 사람은 저장 확인 화면에서 항목을 보고 고칠 수 있다.
+ */
+function autofillOutputChecks(bp) {
+  if (!bp || !Array.isArray(bp.steps)) return bp;
+  const checks = Array.isArray(bp.checks) ? [...bp.checks] : [];
+  const checked = new Set(checks.map((c) => (c.subject || "").trim()).filter(Boolean));
+  bp.steps.forEach((step, index) => {
+    if (step.effect !== "mutation") return;
+    for (const value of Array.isArray(step.consumes) ? step.consumes : []) {
+      const name = String(value == null ? "" : value).trim();
+      if (!name || checked.has(name)) continue;
+      const madeAt = bp.steps.findIndex((s, i) => i < index && (s.produces || "").trim() === name);
+      if (madeAt < 0) continue;
+      checks.push({
+        afterStep: madeAt,
+        subject: name,
+        criteria: `${name}이(가) 비어있지 않고 요청대로 채워졌다`,
+        produces: `${name}_ok`,
+        items: [
+          { text: `${name}이(가) 실제 내용으로 채워졌다`, kind: "must" },
+          { text: "빈 값·자리표시자·지어낸 값이 아니다", kind: "mustNot" },
+        ],
+      });
+      checked.add(name);
+    }
+  });
+  return { ...bp, checks };
+}
+
 /** 청사진이 그래프로 지어질 수 있는지. 모자란 곳은 기본값이 아니라 질문으로 돌려준다. */
 function validateBlueprint(bp, ctx = {}) {
   const problems = [];
@@ -431,12 +469,15 @@ function validateBlueprint(bp, ctx = {}) {
       for (const value of consumes) {
         const name = String(value == null ? "" : value).trim();
         if (!name || checkedSubjects.has(name)) continue;
-        const madeByAStep = steps.some((s, i) => i < index && (s.produces || "").trim() === name);
-        if (!madeByAStep) continue;
+        const madeAt = steps.findIndex((s, i) => i < index && (s.produces || "").trim() === name);
+        if (madeAt < 0) continue;
         push(
           `"${step.title || `${index + 1}번째 단계`}"는 바깥으로 나가는데, 그 앞에서 만든 `
-          + `"${name}" 값이 쓸 만한지 확인하는 단계가 없습니다. `
-          + `checks[]에 {"afterStep":<그 값을 만든 단계>,"subject":"${name}",…}를 넣어 주세요.`,
+          + `"${name}" 값이 쓸 만한지 확인하는 단계가 없습니다. 단계는 하나도 지우지 말고, `
+          + `top-level checks[]에 이 항목을 그대로 추가하세요: `
+          + `{"afterStep":${madeAt},"subject":"${name}","criteria":"${name}이(가) 비어있지 않고 요청대로 채워졌다",`
+          + `"produces":"${name}_ok","items":[{"text":"${name}이(가) 실제 내용으로 채워졌다","kind":"must"},`
+          + `{"text":"빈 값·자리표시자·지어낸 값이 아니다","kind":"mustNot"}]}`,
         );
       }
     });
@@ -924,7 +965,8 @@ function parseInterviewTurn(text, state) {
 
   const blueprint = parsed.blueprint;
   if (!blueprint || typeof blueprint !== "object") return unreadable(text);
-  const normalized = { ...blueprint, schema: BLUEPRINT_SCHEMA };
+  // ★출력값 검증 check는 코드가 채운다 — 부탁받은 완전한 그래프를 완성한다(깎지도 떠넘기지도 않음).
+  const normalized = autofillOutputChecks({ ...blueprint, schema: BLUEPRINT_SCHEMA });
   const problems = validateBlueprint(normalized);
   if (problems.length === 0) {
     // 검증은 통과했다. 그런데 **앞 시도보다 작아졌으면** 문제를 지워서 고친 것이다 —
@@ -949,12 +991,14 @@ function parseInterviewTurn(text, state) {
   };
 }
 
-/** 모델이 스스로 고쳐 볼 기회의 상한. 데스크탑과 같은 값. */
-const MAX_SELF_CORRECTIONS = 2;
+/** 모델이 스스로 고쳐 볼 기회의 상한. 데스크탑과 같은 값.
+ *  2→4: 출력검증 문제는 사람에게 못 묻고 모델 단독 교정만 가능한데, 이제 메시지가 정확한
+ *  checks[] 항목을 그대로 주므로(추가만 하면 됨) 몇 번 더 주면 대개 수렴한다. */
+const MAX_SELF_CORRECTIONS = 4;
 
 module.exports = {
   BLUEPRINT_SCHEMA, MAX_QUESTIONS_PER_TURN, MAX_INTERVIEW_ROUNDS, MAX_REPEATS,
   startInterview, recordAnswers, buildInterviewPrompt, parseInterviewTurn, humanSchedule,
   MAX_SELF_CORRECTIONS, weakenedAgainstLastAttempt,
-  validateBlueprint, buildGraphFromBlueprint, branchLabel, describeBranches,
+  validateBlueprint, autofillOutputChecks, buildGraphFromBlueprint, branchLabel, describeBranches,
 };

package/engine/hephaestus/runtime.cjs

@@ -27,7 +27,7 @@ const path = require("node:path");
 const fs = require("node:fs");
 const { spawn } = require("node:child_process");
 const { Ui } = require("../agentlas-ui.cjs");
-const { truncateWidth, visWidth, wrapWidth } = require("../agentlas-composer.cjs");
+const { truncateWidth, visWidth, wrapWidth } = require("../ui/width.cjs");
 const coreHarness = require("../agentlas-core-harness.cjs");
 const { userDataDir } = require("../core/paths.cjs");
 
@@ -194,7 +194,13 @@ function create(ctx, deps = {}) {
   const spawnCoreModule = deps.spawnCoreModule || coreHarness.spawnCoreModule;
   const lang = () => (ctx && ctx.lang) || "en";
 
+  /*
+   * pi-tui 이행 정지작업 (D3 Phase 1-2, 2026-08-11): ctx가 준 Ui가 있으면 그것을
+   * 쓴다. 자체 생성 Ui는 렌더러 교체 시 구 코드가 stdout에 직접 써 프레임을
+   * 찢는 병렬 경로였다. 생성은 주입이 없을 때의 폴백으로만 남긴다.
+   */
   function newUi(uiLang) {
+    if (ctx && ctx.uiInstance) return ctx.uiInstance;
     return new Ui({ lang: uiLang || lang() });
   }
 

package/engine/storm/deps.cjs

@@ -73,6 +73,8 @@ function modelRoutingReceiptPath() {
 function buildStormDeps(ctx = {}) {
   return {
     prefsLang: () => ctx.lang || "en",
+    // Phase 1-2: 주입 Ui 관통 (자체 생성 방지)
+    uiInstance: ctx.uiInstance || null,
     out: typeof ctx.out === "function" ? ctx.out : (s) => process.stdout.write(`${s}\n`),
     resolveRuntime: resolveWorkforceRuntime,
     listAvailableRuntimes,

package/engine/storm/storm.cjs

@@ -36,7 +36,13 @@ function create(deps) {
   const D = deps;
   const { swarmRun } = require("./swarm.cjs").create(D);
 
+  /*
+   * pi-tui 이행 정지작업 (D3 Phase 1-2, 2026-08-11): ctx가 준 Ui가 있으면 그것을
+   * 쓴다. 자체 생성 Ui는 렌더러 교체 시 구 코드가 stdout에 직접 써 프레임을
+   * 찢는 병렬 경로였다. 생성은 주입이 없을 때의 폴백으로만 남긴다.
+   */
   function newUi(lang) {
+    if (D.uiInstance) return D.uiInstance;
     return new Ui({ lang: lang || D.prefsLang() });
   }
 
@@ -78,7 +84,7 @@ function create(deps) {
       return { ok: false };
     }
     if (goal.startsWith("-")) {
-      ui.error("goal cannot start with '-'.");
+      ui.error("goal cannot start with '-'.", { reveal: true });
       return { ok: false };
     }
     const cwd = ctx.cwd || (typeof D.projectCwd === "function" ? D.projectCwd() : D.runCwd());
@@ -86,7 +92,7 @@ function create(deps) {
     try {
       executionHarness = await loadCoreStormbreakerHarness(cwd);
     } catch (error) {
-      ui.error(`Stormbreaker Core harness unavailable: ${String((error && error.message) || error).slice(0, 400)}`);
+      ui.error(`Stormbreaker Core harness unavailable: ${String((error && error.message) || error).slice(0, 400)}`, { reveal: true });
       return { ok: false, error: "stormbreaker-core-harness-unavailable" };
     }
     const args = ["route", goal, "--project", cwd, "--runtime", "terminal"];

package/engine/storm/swarm.cjs

@@ -127,7 +127,13 @@ function parseSwarmOutput(text) {
 function create(deps) {
   const D = deps;
 
+  /*
+   * pi-tui 이행 정지작업 (D3 Phase 1-2, 2026-08-11): ctx가 준 Ui가 있으면 그것을
+   * 쓴다. 자체 생성 Ui는 렌더러 교체 시 구 코드가 stdout에 직접 써 프레임을
+   * 찢는 병렬 경로였다. 생성은 주입이 없을 때의 폴백으로만 남긴다.
+   */
   function newUi(lang) {
+    if (D.uiInstance) return D.uiInstance;
     return new Ui({ lang: lang || D.prefsLang() });
   }
 
@@ -146,7 +152,7 @@ function create(deps) {
     // Core 하네스 없이 stormbreaker 모드 진입 금지 — 로컬 모조 프롬프트로 대체하는
     // 것은 계약 위반이다(모델 실행 전에 실패해야 한다).
     if (stormbreaker && (!executionHarness || typeof executionHarness.system_prompt !== "string")) {
-      ui.error("Stormbreaker requires the canonical Goal + UltraCode harness from Agentlas Core.");
+      ui.error("Stormbreaker requires the canonical Goal + UltraCode harness from Agentlas Core.", { reveal: true });
       return { ok: false, error: "stormbreaker-core-harness-unavailable" };
     }
     const coreHarnessPrompt = executionHarness && executionHarness.system_prompt;
@@ -307,7 +313,7 @@ function create(deps) {
     if (!planned) {
       ui.error(ui.lang === "ko"
         ? "플래너가 유효한 실행 계획(JSON)을 내지 못했습니다 — 정지합니다 (조용한 폴백 금지)."
-        : "The planner did not produce a valid plan JSON — stopping (no silent fallback).");
+        : "The planner did not produce a valid plan JSON — stopping (no silent fallback).", { reveal: true });
       return { ok: false, reason: "invalid_plan_json" };
     }
     if (planned) {
@@ -376,7 +382,7 @@ function create(deps) {
     ui.line("");
     ui.info(`tasks: ${tasks.length}  ·  done: ${done.length}  ·  failed: ${failed}`);
     if (!done.length) {
-      ui.error(ui.lang === "ko" ? "스웜이 완료한 작업이 없습니다." : "The swarm completed no work.");
+      ui.error(ui.lang === "ko" ? "스웜이 완료한 작업이 없습니다." : "The swarm completed no work.", { reveal: true });
       return { ok: false };
     }
 
@@ -411,7 +417,7 @@ function create(deps) {
       );
     } catch (e) {
       ui.stopSpinner();
-      ui.error("Synthesis failed: " + String((e && e.message) || e).slice(0, 200));
+      ui.error("Synthesis failed: " + String((e && e.message) || e).slice(0, 200), { reveal: true });
       finalText = pieces;
     }
     ui.stopSpinner();
@@ -435,7 +441,7 @@ function create(deps) {
     const strayFlag = rest.find((token) => String(token).startsWith("-"));
     if (strayFlag) {
       const ui = executionContext.ui || newUi();
-      ui.error(`unknown option ${strayFlag} — swarm accepts: --parallel N | -n N, --runtime <kind>`);
+      ui.error(`unknown option ${strayFlag} — swarm accepts: --parallel N | -n N, --runtime <kind>`, { reveal: true });
       process.exitCode = 1;
       return { ok: false, error: "unknown-option" };
     }