cuelo 0.10.2 → 0.10.4

package/Tools/OMP_Global_Config/agent/tools/windows-build/index.ts

@@ -0,0 +1,330 @@
+import type { CustomToolFactory } from "@oh-my-pi/pi-coding-agent";
+import { access, mkdir, readFile } from "node:fs/promises";
+import { posix, win32 } from "node:path";
+
+/**
+ * WSL(또는 Windows)에서 Windows 전용 프로젝트(VB.NET/.NET Framework WinForms, C# 솔루션)를 MSBuild로 빌드한다.
+ * 빌드만 한다: 산출물 실행·복사·배포를 하지 않고 프로젝트 파일은 읽기만 한다.
+ * 콘솔 출력은 PowerShell 5.1/콘솔 코드페이지(CP949)에 따라 깨질 수 있어 쓰지 않고(-noconlog),
+ * MSBuild 파일 로거가 UTF-8로 쓴 로그에서 오류·경고를 읽는다.
+ */
+
+export interface WindowsBuildParams {
+  project: string;
+  configuration?: string;
+  platform?: string;
+  target?: string;
+  msbuildProperties?: Record<string, string>;
+  restore?: boolean;
+  maxErrors?: number;
+  timeoutSeconds?: number;
+}
+
+export interface ExecResult { code: number; stdout: string; stderr?: string; killed?: boolean }
+export type Exec = (command: string, args: string[], options: { cwd: string; timeout?: number }) => Promise<ExecResult>;
+
+export interface BuildDeps {
+  exec: Exec;
+  cwd: string;
+  /** WSL이면 경로를 wslpath로 바꾼다. Windows 네이티브면 변환 없이 그대로 쓴다. */
+  wsl: boolean;
+  exists: (path: string) => Promise<boolean>;
+  mkdirp: (path: string) => Promise<void>;
+  readText: (path: string) => Promise<string | undefined>;
+  env: (name: string) => string | undefined;
+  now: () => number;
+}
+
+export interface BuildDiagnostics {
+  errorCount: number;
+  warningCount: number;
+  errors: string[];
+  warnings: string[];
+}
+
+export interface BuildResult extends BuildDiagnostics {
+  ok: boolean;
+  exitCode: number;
+  killed: boolean;
+  project: string;
+  msbuildPath: string;
+  msbuildVersion: string;
+  logPath: string;
+  logPathPosix: string;
+  logMissing: boolean;
+  consoleTail?: string[];
+  durationMs: number;
+}
+
+const DEFAULT_MAX_ERRORS = 20;
+const MAX_WARNING_LINES = 5;
+const DEFAULT_TIMEOUT_SECONDS = 600;
+const MAX_TIMEOUT_SECONDS = 3600;
+const PROJECT_EXTENSION = /\.(sln|slnx|\w*proj)$/i;
+const DRIVE_PATH = /^[A-Za-z]:[\\/]/;
+const WSL_DRIVE_PATH = /^\/mnt\/[a-z]\//i;
+const VSWHERE_RELATIVE = "Microsoft Visual Studio\\Installer\\vswhere.exe";
+const DEFAULT_PROGRAM_FILES_X86 = "C:\\Program Files (x86)";
+// 빌드만 한다: 실행·배포 계열 target과 빌드 전후 명령·시작 프로그램 속성은 거부한다.
+const DENIED_TARGETS: Record<string, true> = { run: true, deploy: true, publish: true, install: true };
+const DENIED_PROPERTIES: Record<string, true> = {
+  postbuildevent: true, prebuildevent: true, startprogram: true, startaction: true, deployonbuild: true, deploytarget: true,
+};
+const DIAGNOSTIC_LINE = /^\s*(?:(?<origin>.*?):\s+)?(?<severity>error|warning)(?:\s+(?<code>[A-Za-z]+\d+))?\s*:\s*(?<message>.*?)\s*$/i;
+
+export interface ProjectInput { windows?: string; posix?: string }
+
+/**
+ * 프로젝트 경로를 받아 드라이브 위 Windows 경로 또는 `/mnt/<드라이브>/` POSIX 경로로 정규화한다.
+ * WSL 안(ext4)·UNC 경로는 MSBuild가 안정적으로 열지 못하므로 거부한다. 파일 존재는 여기서 보지 않는다.
+ */
+export function normalizeProjectInput(input: string, cwd: string, platform: NodeJS.Platform = process.platform): ProjectInput {
+  const value = input.trim().replace(/^"(.*)"$/, "$1");
+  if (!value) throw new Error("windows_build: project 경로가 비어 있다.");
+  let result: ProjectInput;
+  if (DRIVE_PATH.test(value)) {
+    result = { windows: win32.normalize(value.replace(/\//g, "\\")) };
+  } else if (/^\\\\/.test(value)) {
+    throw new Error(`windows_build: UNC 경로는 지원하지 않는다: ${value}`);
+  } else if (platform === "win32") {
+    result = { windows: win32.resolve(cwd, value) };
+  } else {
+    const resolved = posix.resolve(cwd, value);
+    if (!WSL_DRIVE_PATH.test(resolved)) {
+      throw new Error(`windows_build: /mnt/<드라이브>/ 아래 Windows 드라이브 프로젝트만 빌드한다(받은 경로: ${resolved}).`);
+    }
+    result = { posix: resolved };
+  }
+  const name = result.windows ?? result.posix!;
+  if (!PROJECT_EXTENSION.test(name)) {
+    throw new Error(`windows_build: project는 .sln/.slnx 또는 *proj 파일이어야 한다: ${name}`);
+  }
+  return result;
+}
+
+function validateToken(label: string, value: string, pattern: RegExp): string {
+  const trimmed = value.trim();
+  if (!trimmed || !pattern.test(trimmed)) throw new Error(`windows_build: ${label} 값이 올바르지 않다: ${JSON.stringify(value)}`);
+  return trimmed;
+}
+
+/** MSBuild 명령줄 인자를 만든다. project·logFile은 이미 Windows 경로여야 한다. */
+export function buildMsbuildArgs(params: Omit<WindowsBuildParams, "project">, project: string, logFile: string): string[] {
+  if (logFile.includes(";")) throw new Error(`windows_build: 로그 경로에 ';'가 있어 MSBuild 파일 로거에 넘길 수 없다: ${logFile}`);
+  const args = ["-nologo", "-m", "-nodeReuse:false", "-noconlog", `-flp:logfile=${logFile};encoding=UTF-8;verbosity=minimal`];
+  if (params.restore) args.push("-restore");
+  const properties: Array<[string, string]> = [];
+  if (params.configuration !== undefined) properties.push(["Configuration", validateToken("configuration", params.configuration, /^[\w .+-]+$/)]);
+  if (params.platform !== undefined) properties.push(["Platform", validateToken("platform", params.platform, /^[\w .+-]+$/)]);
+  for (const [name, value] of Object.entries(params.msbuildProperties ?? {})) {
+    if (!/^[A-Za-z_][\w.]*$/.test(name)) throw new Error(`windows_build: 속성 이름이 올바르지 않다: ${JSON.stringify(name)}`);
+    if (DENIED_PROPERTIES[name.toLowerCase()]) throw new Error(`windows_build: 빌드만 허용하므로 속성 ${name}은 쓸 수 없다.`);
+    if (/[\r\n\0]/.test(value)) throw new Error(`windows_build: 속성 ${name} 값에 줄바꿈이 있다.`);
+    properties.push([name, value]);
+  }
+  for (const [name, value] of properties) args.push(`-p:${name}=${value}`);
+  if (params.target !== undefined) {
+    const targets = params.target.split(/[;,]/).map((item) => item.trim()).filter(Boolean);
+    if (targets.length === 0) throw new Error("windows_build: target이 비어 있다.");
+    for (const item of targets) {
+      if (!/^[A-Za-z_][\w.-]*$/.test(item)) throw new Error(`windows_build: target 이름이 올바르지 않다: ${JSON.stringify(item)}`);
+      if (DENIED_TARGETS[item.toLowerCase()]) throw new Error(`windows_build: 빌드만 허용하므로 target ${item}은 쓸 수 없다.`);
+    }
+    args.push(`-t:${targets.join(";")}`);
+  }
+  args.push(project);
+  return args;
+}
+
+/**
+ * MSBuild 로그·콘솔 텍스트에서 `origin: error CODE: message` / `warning` 줄을 모은다.
+ * 같은 줄이 요약부에 다시 나오므로 줄 전체가 같으면 한 번만 센다. 진단 접두어(error/warning)는 현지화되지 않아
+ * 한국어 MSBuild 로그에서도 같다. 요약의 "N 오류" 문구는 현지화되므로 쓰지 않는다.
+ */
+export function parseBuildLog(text: string, maxErrors = DEFAULT_MAX_ERRORS): BuildDiagnostics {
+  const errors = new Set<string>();
+  const warnings = new Set<string>();
+  for (const raw of text.replace(/^\uFEFF/, "").split(/\r?\n/)) {
+    const match = DIAGNOSTIC_LINE.exec(raw);
+    if (!match?.groups) continue;
+    (match.groups.severity.toLowerCase() === "error" ? errors : warnings).add(raw.trim());
+  }
+  return {
+    errorCount: errors.size,
+    warningCount: warnings.size,
+    errors: [...errors].slice(0, maxErrors),
+    warnings: [...warnings].slice(0, Math.min(maxErrors, MAX_WARNING_LINES)),
+  };
+}
+
+/** vswhere 출력에서 첫 MSBuild.exe 경로를 고른다. 없으면 undefined. */
+export function parseVswhereOutput(stdout: string): string | undefined {
+  return stdout.split(/\r?\n/).map((line) => line.trim()).find((line) => /msbuild\.exe$/i.test(line));
+}
+
+function nonEmptyLines(text: string): string[] {
+  return text.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+}
+
+function describeFailure(label: string, result: ExecResult): string {
+  return `${label} (exit ${result.code}): ${(result.stderr || result.stdout || "").trim() || "출력 없음"}`;
+}
+
+export async function runWindowsBuild(params: WindowsBuildParams, deps: BuildDeps): Promise<BuildResult> {
+  const { exec, cwd } = deps;
+  const maxErrors = Math.max(1, Math.min(200, Math.trunc(params.maxErrors ?? DEFAULT_MAX_ERRORS)));
+  const timeoutSeconds = Math.max(10, Math.min(MAX_TIMEOUT_SECONDS, Math.trunc(params.timeoutSeconds ?? DEFAULT_TIMEOUT_SECONDS)));
+  const input = normalizeProjectInput(params.project, cwd, deps.wsl ? "linux" : "win32");
+
+  const convert = async (flag: "-w" | "-u", path: string): Promise<string> => {
+    if (!deps.wsl) return path;
+    const result = await exec("wslpath", [flag, path], { cwd });
+    const converted = result.stdout.trim();
+    if (result.code !== 0 || !converted) throw new Error(describeFailure(`windows_build: wslpath ${flag} ${path} 변환 실패`, result));
+    return converted;
+  };
+  const toWindows = (path: string) => convert("-w", path);
+  const toPosix = (path: string) => convert("-u", path);
+
+  const projectWindows = input.windows ?? await toWindows(input.posix!);
+  const projectPosix = input.posix ?? await toPosix(input.windows!);
+  if (!(await deps.exists(projectPosix))) throw new Error(`windows_build: 프로젝트 파일이 없다: ${projectPosix}`);
+  const projectDir = deps.wsl ? posix.dirname(projectPosix) : win32.dirname(projectWindows);
+
+  // Windows 쪽 TEMP와 Program Files (x86). cmd를 UTF-8 코드페이지로 바꿔 한국어 사용자 이름 경로도 깨지지 않게 읽는다.
+  let tempDir: string | undefined;
+  let programFilesX86: string | undefined;
+  if (deps.wsl) {
+    const result = await exec("cmd.exe", ["/c", "chcp 65001>nul&echo %TEMP%&echo %ProgramFiles(x86)%"], { cwd: projectDir });
+    const lines = nonEmptyLines(result.stdout);
+    if (result.code === 0 && DRIVE_PATH.test(lines[0] ?? "")) tempDir = lines[0];
+    if (result.code === 0 && DRIVE_PATH.test(lines[1] ?? "")) programFilesX86 = lines[1];
+  } else {
+    tempDir = deps.env("TEMP");
+    programFilesX86 = deps.env("ProgramFiles(x86)");
+  }
+  if (!tempDir) throw new Error("windows_build: Windows TEMP 폴더를 알아내지 못했다.");
+  programFilesX86 ??= DEFAULT_PROGRAM_FILES_X86;
+
+  const vswhereWindows = win32.join(programFilesX86, VSWHERE_RELATIVE);
+  const vswherePosix = await toPosix(vswhereWindows);
+  if (!(await deps.exists(vswherePosix))) {
+    throw new Error(`windows_build: MSBuild를 찾지 못했다. vswhere.exe가 없다(${vswhereWindows}). Visual Studio 또는 Build Tools(MSBuild 구성 요소)를 설치해야 한다.`);
+  }
+  const found = await exec(
+    vswherePosix,
+    ["-latest", "-products", "*", "-requires", "Microsoft.Component.MSBuild", "-find", "MSBuild\\**\\Bin\\MSBuild.exe", "-utf8"],
+    { cwd: projectDir },
+  );
+  const msbuildWindows = found.code === 0 ? parseVswhereOutput(found.stdout) : undefined;
+  if (!msbuildWindows) {
+    throw new Error(`windows_build: MSBuild를 찾지 못했다. vswhere가 MSBuild 구성 요소가 있는 설치를 찾지 못했다${found.code === 0 ? "" : ` (exit ${found.code})`}. Visual Studio 또는 Build Tools(MSBuild 구성 요소)를 설치해야 한다.`);
+  }
+  const msbuildPosix = await toPosix(msbuildWindows);
+  if (!(await deps.exists(msbuildPosix))) throw new Error(`windows_build: vswhere가 알려준 MSBuild가 없다: ${msbuildWindows}`);
+  const versionResult = await exec(msbuildPosix, ["-version", "-nologo"], { cwd: projectDir });
+  const msbuildVersion = nonEmptyLines(versionResult.stdout).at(-1) ?? "unknown";
+
+  const logDirWindows = win32.join(tempDir, "omp-windows-build");
+  const logDirPosix = await toPosix(logDirWindows);
+  await deps.mkdirp(logDirPosix);
+  const stamp = new Date(deps.now()).toISOString().replace(/\D/g, "").slice(0, 14);
+  const logName = `build-${stamp}-${Math.random().toString(36).slice(2, 8)}.log`;
+  const logPath = win32.join(logDirWindows, logName);
+  const logPathPosix = deps.wsl ? posix.join(logDirPosix, logName) : logPath;
+
+  const args = buildMsbuildArgs(params, projectWindows, logPath);
+  const started = deps.now();
+  const run = await exec(msbuildPosix, args, { cwd: projectDir, timeout: timeoutSeconds * 1000 });
+  const durationMs = deps.now() - started;
+
+  const logText = await deps.readText(logPathPosix);
+  const consoleText = `${run.stdout}\n${run.stderr ?? ""}`;
+  // 로그가 없으면 MSBuild가 빌드 전에 멈춘 것(MSB1009 프로젝트 없음 등)이라 콘솔 출력에서 읽는다.
+  const diagnostics = parseBuildLog(logText ?? consoleText, maxErrors);
+  const failed = run.code !== 0;
+  return {
+    ok: !failed,
+    exitCode: run.code,
+    killed: Boolean(run.killed),
+    project: projectWindows,
+    msbuildPath: msbuildWindows,
+    msbuildVersion,
+    logPath,
+    logPathPosix,
+    logMissing: logText === undefined,
+    ...diagnostics,
+    ...(failed && diagnostics.errorCount === 0 ? { consoleTail: nonEmptyLines(consoleText).slice(-15) } : {}),
+    durationMs,
+  };
+}
+
+export function formatBuildResult(result: BuildResult, maxErrors = DEFAULT_MAX_ERRORS): string {
+  const lines: string[] = [];
+  const seconds = (result.durationMs / 1000).toFixed(1);
+  const status = result.ok ? "빌드 성공" : result.killed ? "빌드 중단(시간 초과 또는 취소)" : "빌드 실패";
+  lines.push(`${status} — exit ${result.exitCode}, ${seconds}s`);
+  lines.push(`프로젝트: ${result.project}`);
+  lines.push(`MSBuild: ${result.msbuildPath} (${result.msbuildVersion})`);
+  lines.push(`오류 ${result.errorCount}개 · 경고 ${result.warningCount}개`);
+  if (result.errors.length > 0) {
+    lines.push("오류:", ...result.errors.map((line) => `  ${line}`));
+    if (result.errorCount > result.errors.length) lines.push(`  … 외 ${result.errorCount - result.errors.length}개(전체는 로그 참고, 최대 ${maxErrors}줄 표시)`);
+  }
+  if (result.warnings.length > 0) {
+    lines.push("경고(앞 일부):", ...result.warnings.map((line) => `  ${line}`));
+  }
+  if (result.consoleTail?.length) lines.push("MSBuild 콘솔 끝부분:", ...result.consoleTail.map((line) => `  ${line}`));
+  lines.push(`로그: ${result.logPath}${result.logMissing ? " (생성되지 않음)" : ""}`);
+  if (result.logPathPosix !== result.logPath) lines.push(`로그(POSIX): ${result.logPathPosix}`);
+  return lines.join("\n");
+}
+
+const defaultDeps = (cwd: string, exec: Exec): BuildDeps => ({
+  exec,
+  cwd,
+  wsl: process.platform === "linux" && Boolean(process.env.WSL_DISTRO_NAME),
+  exists: (path) => access(path).then(() => true, () => false),
+  mkdirp: async (path) => { await mkdir(path, { recursive: true }); },
+  readText: (path) => readFile(path, "utf8").then((text) => text, () => undefined),
+  env: (name) => process.env[name],
+  now: () => Date.now(),
+});
+
+const factory: CustomToolFactory = (pi) => ({
+  name: "windows_build",
+  label: "Windows Build",
+  loadMode: "essential",
+  description:
+    "Build a Windows-only project (.sln/.slnx/*proj, e.g. VB.NET or C# WinForms on a /mnt/<drive> or X:\\ path) with Windows MSBuild from WSL. "
+    + "Locates MSBuild through vswhere.exe, converts paths with wslpath, runs `MSBuild -nologo -m` with a UTF-8 file logger, and returns exit code, MSBuild path/version, error/warning counts, the first error lines and the log path. "
+    + "Build only: never runs the built program, never touches devices, never deploys or copies outputs; Run/Deploy/Publish/Install targets and Pre/PostBuildEvent properties are rejected. "
+    + "`restore: true` adds -restore (NuGet network access); default is off. Build writes bin/obj inside the project folder as a normal build does.",
+  parameters: pi.zod.object({
+    project: pi.zod.string().describe("Solution or project file: /mnt/<drive>/... or X:\\... (relative paths resolve from the session cwd)"),
+    configuration: pi.zod.string().optional().describe("Configuration property, e.g. Debug or Release"),
+    platform: pi.zod.string().optional().describe("Platform property, e.g. x86, x64, Any CPU"),
+    target: pi.zod.string().optional().describe("MSBuild target(s), e.g. Rebuild or Clean;Build. Run/Deploy/Publish/Install are rejected"),
+    // Not named `properties`: the core wire-schema pass turns the empty `properties` map of a
+    // parameter with that name into `true`, and Anthropic/OpenAI then reject the whole request.
+    msbuildProperties: pi.zod.record(pi.zod.string()).optional().describe("Extra -p:Name=Value properties"),
+    restore: pi.zod.boolean().optional().describe("Add -restore before building (default false)"),
+    maxErrors: pi.zod.number().optional().describe("Number of error lines to return (default 20, max 200)"),
+    timeoutSeconds: pi.zod.number().optional().describe("Build time limit in seconds (default 600, max 3600)"),
+  }),
+
+  async execute(_toolCallId, params, onUpdate, _ctx, signal) {
+    const exec: Exec = (command, args, options) => pi.exec(command, args, { ...options, signal });
+    onUpdate?.({
+      content: [{ type: "text", text: "MSBuild를 찾아 빌드하는 중입니다." }],
+      details: { phase: "build", project: params.project },
+    });
+    const result = await runWindowsBuild(params as WindowsBuildParams, defaultDeps(pi.cwd, exec));
+    return {
+      content: [{ type: "text", text: formatBuildResult(result, Math.max(1, Math.min(200, Math.trunc(params.maxErrors ?? DEFAULT_MAX_ERRORS)))) }],
+      details: result,
+    };
+  },
+});
+
+export default factory;

package/Tools/OMP_Global_Config/patches/apply-core-patch.mjs

@@ -1262,6 +1262,21 @@ Project-wide validation is the main agent's job, run once after all subagents la
 		anchor: `- \`app.relay: true\`: drive the user's Chrome through the omp relay. \`app.target\` selects a tab by URL/title substring; without it, the visible tab is adopted. Opening with \`url\` navigates that adopted tab.`,
 		patched: `- \`app.relay: true\`: drive the user's Chrome through the omp relay. \`app.target\` selects a tab by URL/title substring; without it, the relay opens a new tab for this \`name\` and leaves the user's tabs alone. Reopening the same \`name\` reuses that tab; closing it releases the tab without closing the page.`,
 	},
+	{
+		// 2026-10-09 사용자 결정: computer 승인 창은 control.acquire에서만 뜬다. 모델이
+		// BackgroundUnavailable을 우회하려고 acquire를 불러 매번 승인을 묻게 됐다(Windows 시절
+		// 세션은 동작별 takeover만 썼다). 승인 게이트는 그대로 두고, 동작별 takeover를 먼저 쓰게 안내한다.
+		file: "src/prompts/tools/computer.md",
+		marker: "NEVER acquire control to work around",
+		anchor: "- `computer.control.acquire({reason})` requires live human confirmation for task-scoped foreground control;",
+		patched: "- NEVER acquire control to work around `BackgroundUnavailable` or a background no-op: retry that one call with `{ takeover: true }`, which needs no confirmation. Acquire only when the user asks for sustained foreground control.\n- `computer.control.acquire({reason})` requires live human confirmation for task-scoped foreground control;",
+	},
+	{
+		file: "src/prompts/system/computer-use.md",
+		marker: "Per-call `takeover: true`",
+		anchor: "- Task-scoped control requires live human confirmation; release it when finished.",
+		patched: "- Per-call `takeover: true` after `BackgroundUnavailable` needs no confirmation; use it instead of `computer.control.acquire`. Acquired control requires live human confirmation; acquire only on user request and release it when finished.",
+	},
 	{
 		// 빚의 정체(어느 steer 메시지인가)를 표현하는 최소 타입.
 		file: "src/session/irc-bridge.ts",
@@ -4737,6 +4752,95 @@ class LocalTextBackend implements TextBackend {`,
 		patched: `import type { Settings } from "../config/settings";
 import { cfgJudgmentProvider } from "../config/model-settings";`,
 	},
+	{
+		// 2026-10-09 WSL 회귀 감사 3.5: JEV `find` 판정이 typesafe 경로에서 23.8% 400("Invalid decision request.
+		// Send only model, state, and bounded typed questions; ...")으로 실패하고 openrouter 로 넘어갔다. typesafe
+		// provider 는 Experiential Labs gateway(models.yml)로 가고, 그 decoder 는 요청당 질문을 32개까지만 받는다
+		// (experientiallabs/experiential exp/runtime/gateway/decisions_contracts.py MAX_DECISION_QUESTIONS = 32).
+		// find 는 한 요청에 최대 64(NAME_BATCH·DIR_BATCH)·48(SKETCH_CARDS_MAX)개를 보낸다. 세션 기록에서 400 62건은
+		// 전부 35문항 이상, 성공 184건은 전부 30문항 이하였다. 질문은 같은 state 에 대해 서로 독립으로 판정되므로
+		// 32개씩 나눠 같은 state 로 병렬 전송하고 응답을 합친다. jfind 배치 상수와 벤치마크한 state 배치는 그대로다.
+		// 32개 이하 요청은 본문 바이트가 그대로이고, openrouter-decisions 경로(61문항도 받았다)는 나누지 않는다.
+		// 검증: core-typesafe-split-test.ts.
+		file: "../pi-ai/src/judgment/typesafe.ts",
+		marker: "const TYPESAFE_MAX_QUESTIONS = 32;",
+		anchor: "\treturn Math.min(BACKOFF_BASE_MS * 2 ** attempt, BACKOFF_MAX_MS);\n}\n\nexport class TypeSafeJudge implements Judge {\n",
+		patched: [
+			"\treturn Math.min(BACKOFF_BASE_MS * 2 ** attempt, BACKOFF_MAX_MS);",
+			"}",
+			"",
+			"/**",
+			" * CUELO: questions per request on the `typesafe` route. CUELO points that route at the Experiential Labs",
+			" * gateway, whose decoder admits at most 32 questions (`MAX_DECISION_QUESTIONS`) and answers a larger set",
+			" * with 400 \"Invalid decision request\". Questions are judged independently against the shared state, so a",
+			" * larger set goes out as parts that each repeat the state.",
+			" */",
+			"const TYPESAFE_MAX_QUESTIONS = 32;",
+			"",
+			"/** `questions` itself when it has at most `max` entries, else parts of at most `max` in insertion order. */",
+			"function questionParts(questions: Questions, max: number): Questions[] {",
+			"\tconst ids = Object.keys(questions);",
+			"\tif (ids.length <= max) return [questions];",
+			"\tconst parts: Questions[] = [];",
+			"\tfor (let start = 0; start < ids.length; start += max) {",
+			"\t\tconst part: Questions = {};",
+			"\t\tfor (const id of ids.slice(start, start + max)) part[id] = questions[id]!;",
+			"\t\tparts.push(part);",
+			"\t}",
+			"\treturn parts;",
+			"}",
+			"",
+			"/** The parts' responses as one: answers merged, token counts and billed cost summed where reported. */",
+			"function mergeResponses(responses: SystemOneResponse[]): SystemOneResponse {",
+			"\tif (responses.length === 1) return responses[0]!;",
+			"\tconst total = (pick: (usage: SystemOneResponse[\"usage\"]) => number | undefined): number | undefined => {",
+			"\t\tlet sum: number | undefined;",
+			"\t\tfor (const response of responses) {",
+			"\t\t\tconst value = pick(response.usage);",
+			"\t\t\tif (value !== undefined) sum = (sum ?? 0) + value;",
+			"\t\t}",
+			"\t\treturn sum;",
+			"\t};",
+			"\treturn {",
+			"\t\tmodel: responses[0]!.model,",
+			"\t\tanswers: Object.assign({}, ...responses.map(response => response.answers)),",
+			"\t\tusage: {",
+			"\t\t\tinput_tokens: total(usage => usage.input_tokens),",
+			"\t\t\toutput_tokens: total(usage => usage.output_tokens),",
+			"\t\t\tcost: total(usage => usage.cost),",
+			"\t\t},",
+			"\t};",
+			"}",
+			"",
+			"export class TypeSafeJudge implements Judge {",
+			"",
+		].join("\n"),
+	},
+	{
+		// 위 항목과 짝: judge 가 질문 묶음을 나눠 보내고 응답을 합친다. 나누지 않으면 parts 는 request.questions
+		// 그 객체 하나라 본문이 원래 식 `{ state, model, questions }` 과 바이트까지 같다.
+		file: "../pi-ai/src/judgment/typesafe.ts",
+		marker: "// CUELO: past the typesafe question bound",
+		anchor: "\t\tconst body = JSON.stringify({ state: request.state, model: this.model, questions: request.questions });\n\t\tconst signal = options?.signal;\n\t\tconst response = await withAuth(\n\t\t\tthis.#apiKey,\n\t\t\tkey => this.#attempt<SystemOneResponse>(JUDGMENT_ROUTES[this.api], body, key, signal),\n\t\t\t{ signal },\n\t\t);\n",
+		patched: [
+			"\t\tconst signal = options?.signal;",
+			"\t\t// CUELO: past the typesafe question bound the parts run in parallel and merge into one response.",
+			"\t\tconst parts = questionParts(request.questions, this.api === TYPESAFE_PROVIDER ? TYPESAFE_MAX_QUESTIONS : Infinity);",
+			"\t\tconst response = mergeResponses(",
+			"\t\t\tawait Promise.all(",
+			"\t\t\t\tparts.map(questions => {",
+			"\t\t\t\t\tconst body = JSON.stringify({ state: request.state, model: this.model, questions });",
+			"\t\t\t\t\treturn withAuth(",
+			"\t\t\t\t\t\tthis.#apiKey,",
+			"\t\t\t\t\t\tkey => this.#attempt<SystemOneResponse>(JUDGMENT_ROUTES[this.api], body, key, signal),",
+			"\t\t\t\t\t\t{ signal },",
+			"\t\t\t\t\t);",
+			"\t\t\t\t}),",
+			"\t\t\t),",
+			"\t\t);",
+			"",
+		].join("\n"),
+	},
 	{
 		// 18.2.7 에는 `providers.judgmentProvider` schema 항목 자체가 없다(legacy key 목록에만
 		// 남아 migration 이 소비한다). 이 빌드의 로컬 선택 설정으로 최소 enum 만 되살린다:
@@ -6070,6 +6174,35 @@ export function hostNextServerEnvUnsets(
 				pty: ptyRequest,
 `,
 	},
+	{
+		// 2026-10-09 WSL 회귀 감사 3.3: WSL bash 도구에서 wsl.exe 자체 메시지가 UTF-16LE 로 나와 NUL·U+FFFD 로 깨졌다.
+		// bash 출력은 pi-natives(Rust)가 손실 UTF-8 로 풀어 문자열로 넘기므로 JS 에서는 원래 바이트를 되살릴 수 없다.
+		// wsl.exe 는 WSL_UTF8=1 이면 UTF-8 로 쓰지만, Linux 변수는 WSLENV 에 이름이 있어야 Windows 프로세스에 닿는다
+		// (실측: `WSL_UTF8=1 wsl.exe --version` 은 그대로 UTF-16LE, `WSLENV=WSL_UTF8` 을 더하면 UTF-8, `WSL_UTF8/u` 는 UTF-16LE).
+		// linux 이고 WSL_DISTRO_NAME 이 있으면 기존 WSLENV 항목은 남긴 채 WSL_UTF8 을 한 번 덧붙인다. 서버 env 나 호출자가
+		// 정한 WSL_UTF8 은 그 값을 그대로 넘기고, 없을 때만 1 로 둔다(서비스 env 가 WSL_UTF8=1 만 정해도 이 경로로 닿는다).
+		// 호출자가 넘긴 WSLENV 는 그대로 이긴다. 비WSL·win32 경로는 그대로다.
+		// PowerShell 등의 CP949 콘솔 출력은 범위 밖이다(Main 결정: iconv 안내 유지). 검증: core-wsl-utf8-env-test.ts.
+		file: "src/exec/non-interactive-env.ts",
+		marker: "// CUELO: on WSL, wsl.exe writes its own messages as UTF-16LE",
+		anchor: "\tif (platform !== \"win32\") {\n\t\treturn overrides ? { ...base, ...overrides } : base;\n\t}\n",
+		patched: [
+			"\tif (platform !== \"win32\") {",
+			"\t\t// CUELO: on WSL, wsl.exe writes its own messages as UTF-16LE, which the bash tool shows as NUL/U+FFFD",
+			"\t\t// mojibake, unless WSL_UTF8=1 reaches it. Windows processes see only the Linux variables WSLENV names, so",
+			"\t\t// WSL_UTF8 is listed there; a value the server env or the caller already set is forwarded as is.",
+			"\t\t// A caller WSLENV still wins.",
+			"\t\tif (platform === \"linux\" && baseEnv.WSL_DISTRO_NAME) {",
+			"\t\t\tconst shared = (baseEnv.WSLENV ?? \"\").split(\":\").filter(name => name.length > 0);",
+			"\t\t\tif (!shared.some(name => name.split(\"/\")[0] === \"WSL_UTF8\")) shared.push(\"WSL_UTF8\");",
+			"\t\t\tconst utf8 = hasEnvValue(baseEnv, \"WSL_UTF8\", platform) ? {} : { WSL_UTF8: \"1\" };",
+			"\t\t\treturn { ...base, ...utf8, WSLENV: shared.join(\":\"), ...overrides };",
+			"\t\t}",
+			"\t\treturn overrides ? { ...base, ...overrides } : base;",
+			"\t}",
+			"",
+		].join("\n"),
+	},
 	{
 		// 2026-09-29: 이름 있는 bash service 는 bash-executor 를 거치지 않는다. daemon broker 가
 		// `workerEnvFromParent(spec.env)` 로 띄우는데, 이 함수는 broker 자신의 env 위에 overlay 를 덧씌우기만

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cuelo",
-  "version": "0.10.2",
+  "version": "0.10.4",
   "description": "CUELO — open-source AI coding agent workspace and harness for omp (oh-my-pi)",
   "homepage": "https://github.com/gim47656-ship-it/CUELO#readme",
   "repository": {
@@ -139,6 +139,7 @@
     "remark-math": "^6.0.0",
     "tailwindcss": "^4.3.3",
     "three": "^0.186.1",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "typescript-language-server": "^6.0.1"
   }
 }