elanous 0.2.0 → 0.2.4

package/src/nexus/api/http-server.ts

@@ -18,6 +18,8 @@
 import type { TelegramEvent } from '../../workflow-runtime/triggers/telegram-source.js';
 import { spawnSync } from 'node:child_process';
 import type { NexusState } from '../state/state.js';
+import { DEFAULT_NEXUS_HTTP_PORT } from '../default-port.js';
+export { DEFAULT_NEXUS_HTTP_PORT } from '../default-port.js';
 import type { TabRegistry } from '../state/tab-registry.js';
 import type { FeedbackEnvelope } from '../../feedback/envelope.js';
 import type { Supervisor } from '../supervisor/index.js';
@@ -31,7 +33,7 @@ import {
 } from './admin-dev-proxy.js';
 import { handleDevProxyHttpRequest, pathMatchesDevProxy } from './dev-proxy.js';
 import { OPENAI_RELAY_PATH, tryHandleOpenAiRelay } from './openai-relay.js';
-import { handleHealth } from './health.js';
+import { handleHealth, type HealthSetupContext } from './health.js';
 import { handleTabsList, handleTabDetail, handleNexusSnapshot } from './tabs.js';
 import { handleSseEvents } from './events.js';
 import { dispatchIntentPredictionRoute } from './intent-prediction.js';
@@ -142,11 +144,12 @@ import {
 } from './autopilot-api.js';
 import {
   handleVaultGet,
+  handleVaultFilePut,
   handleTemplateExpand,
   parseVaultPath,
 } from './vault-api.js';
 import { handleBuildsGet, parseBuildsPath } from './builds-api.js';
-import { handleHarnessAskPost, handleHarnessAskStatusGet, handleHarnessRunEventsGet, handleHarnessRunsGet, handleHarnessStopPost } from './harness-api.js';
+import { handleHarnessAskPost, handleHarnessAskStatusGet, handleHarnessRunEventsGet, handleHarnessRunScreenGet, handleHarnessRunsGet, handleHarnessStopPost } from './harness-api.js';
 import { dispatchPersonaRoute } from './personas.js';
 import { handleRoleJudge } from './role-judge.js';
 import { handleAudioStt } from './audio-stt.js';
@@ -157,6 +160,10 @@ import {
   handleLlmProvidersList,
   handleLlmProviderSet,
 } from './setup-llm-provider.js';
+import { handleObsidianSkillsGet, handleObsidianSet, handleSkillsSet } from './setup-obsidian-skills.js';
+import { handleChildLlmGet, handleChildLlmSet } from './setup-child-llm.js';
+import { handleAnswerPriorityGet, handleAnswerPrioritySet } from './setup-answer-priority.js';
+import { handleChannelBotsGet, handleChannelBotSet } from './setup-channel-bot.js';
 import { handleLlmRoutePredict } from './llm-route-predict.js';
 import type { MissionRouter } from '../../llm/mission-router.js';
 import { handleContextFetchUrl } from './context-url.js';
@@ -175,7 +182,9 @@ import {
 } from './registry-discovery.js';
 import { handleWorktrees, handleWorktreeDispose } from './worktrees.js';
 import { handleBotCommands } from './bot-commands.js';
-import { handleDesignCheck } from './design-check.js';
+import { handleDesignCheck, handleDesignDirectionPost } from './design-check.js';
+import { handleDesignPreviews } from './design-previews-route.js';
+import { handleDesignSystemCreate } from './design-system-create-route.js';
 import { handleHitlAuditRecent, handleHitlTestPushcut } from './hitl-pushcut-settings.js';
 import { handleWorkflowRoute } from './workflow-router.js';
 import { handleSkillRoute } from './skill-router.js';
@@ -184,9 +193,13 @@ import { handleTemplatesList, handleTemplateGet, handleTemplateSave } from './te
 import { handleMcpHttpPost } from './mcp-http.js';
 import { handleMcpResourceGet, MCP_RESOURCE_ROUTE_PATH } from './mcp-resource-route.js';
 // ⛔ 라우트 상수를 «디스패처»가 안 쓰고 문자열로 베끼고 있었다(16차 실측) — 잎에서 읽는다.
-import { IPA_PATH_PREFIX, MANIFEST_PATH } from './rest-route-paths.js';
+import { APPROVALS_MERGES_PATH, DESIGN_DIRECTION_PATH, DESIGN_PREVIEW_PATH_PREFIX, DESIGN_PREVIEWS_PATH, DESIGN_SYSTEM_PATH, IPA_PATH_PREFIX, MANIFEST_PATH } from './rest-route-paths.js';
+import { handleMergeApprovals } from './merge-approvals.js';
+import { handleLiveDetail, LIVE_DETAIL_PATH } from './live-detail.js';
+import { handleLiveShipped, LIVE_SHIPPED_PATH } from './live-shipped.js';
 import { handleMcpWidgetCall, MCP_WIDGET_CALL_ROUTE_PATH, persistWidgetTurnToSessionStore } from './mcp-widget-call-route.js';
 import type { McpClientsHandle } from '../boot/register-mcp-clients.js';
+import { mcpUnauthorizedResponse, oauthRegistrationRejected } from './mcp-oauth-hint.js';
 import { handleTabLogs } from './logs.js';
 import {
   handleConfigGet,
@@ -219,7 +232,7 @@ import {
   parseErrorsPath,
 } from './errors.js';
 import { handleChatBackendDetection } from './chat-backend-detection.js';
-import { handleConnectInfoGet, handleConnectTokenMint, type ConnectInfoCtx } from './connect-info.js';
+import { connectInfoTokenAllowed, handleConnectInfoGet, handleConnectTokenMint, type ConnectInfoCtx } from './connect-info.js';
 import { handleStaticAppRequest, pathMatchesStaticPrefix } from './static-app.js';
 import {
   createWsBridge,
@@ -244,11 +257,16 @@ import {
 } from './meta-api.js';
 import { handleIntakePipelinePreviewPost } from './intake-pipeline-preview.js';
 import { handleIntakePipelineCommitPost } from './intake-pipeline-commit.js';
+import { handleIntakeRoutePost } from './intake-route.js';
+import { corsPreflight, jsonResponse } from './json-response.js';
+import { isPublicRoute } from './public-routes.js';
 import { handleSchedulesActionPost } from './schedules-action.js';
+import { handleSchedulesList, handleScheduleDetail, handleScheduleRuns } from './schedules-read.js';
 import { handleIntakeRunsList } from './intake-runs.js';
 import { handleMissionsList, handleMissionDetail } from './missions.js';
 import { handleSessionsStoreList, handleSessionsStoreGet, handleSessionsStoreFork, handleSessionsStoreDelete } from './sessions-store.js';
 import { handleLogsQuery, handleLogsStream, handleLogsLevelGet, handleLogsLevelPost, handleLogsFacets, handleLogsHistogram, handleLogsInstances } from './log-fabric.js';
+import { handleTrace, handleTraceEvidence } from './trace.js';
 import { handleDispatchRunsList } from './dispatch-runs.js';
 import {
   handleWorkflowLifecycleGet,
@@ -293,6 +311,9 @@ import {
   handleTasksList,
   handleTaskDetail,
 } from './tasks-scheduler.js';
+import { handleTaskCardsGet } from './task-cards-api.js';
+import { handleTaskCreatePost, handleTaskApprovePost } from './tasks-create.js';
+import { matchIngestAuthorization } from './ingest-token.js';
 import {
   handleWorkflowApprovalApprove,
   handleWorkflowApprovalReject,
@@ -309,6 +330,9 @@ import {
 } from './workflows.js';
 import { handleTriggersSnapshot } from './triggers.js';
 import { handleWorkflowTemplatesList } from './workflow-templates.js';
+import { handleGraphsGet, handleGraphsMutation } from './graphs-api.js';
+import { handleGraphKindsGet, handleGraphsValidatePost } from './graph-kinds.js';
+import { handlePluginsIndexGet, handlePluginsGet } from './plugins-market.js';
 import {
   handleWorkflowsList,
 } from './workflows.js';
@@ -333,7 +357,7 @@ import {
   parseTerminalRenamePath,
   parseTerminalsPrunePath,
   parseTerminalTerminatePath,
-  parseScrollbackPath,
+  parseScrollbackPath, parseTerminalStreamPath, handleTerminalStream,
   parseFramePath,
   parsePngPath,
 } from './terminals.js';
@@ -345,6 +369,7 @@ import {
   parseAgentCliSessionPath,
 } from './agent-cli.js';
 import { handleSessionTurnControl, SESSION_TURN_CONTROL_PATH } from '../../session/session-turn-control.js';
+import { authenticatePodCredential, handlePodGrokCredential, POD_CREDENTIAL_GROK_PATH } from './pod-credential-api.js';
 import { handleOutboundReport } from './outbound-report.js';
 import { handleSelfEvent } from './self-event.js';
 /** 매매 «실행»은 애드온이다(대표 09-20 결정 ③ · 별도 상용 저장소 · release/trading-export.yaml) — 공개 코어엔 없다.
@@ -359,7 +384,6 @@ import {
   parseShowroomLayoutPath,
 } from './showroom-layouts.js';
 
-export const DEFAULT_NEXUS_HTTP_PORT = 31415;
 export const NEXUS_HTTP_PORT_RANGE = 16;     // try 31415..31430
 /** Short timeout for the pre-bind localhost occupancy probe. */
 export const NEXUS_PORT_PROBE_TIMEOUT_MS = 400;
@@ -456,6 +480,8 @@ export interface NexusHttpServerOpts {
   portRange?: number;
   /** Hostname to bind. Defaults to '127.0.0.1' (loopback). */
   hostname?: string;
+  /** 넥서스 기동 때 한 번 정한 셋업 상태. `/v1/health` 가 요청마다 다시 읽지 않고 이 값을 싣는다. */
+  setup?: HealthSetupContext;
   /** Optional occupancy probe asked before each bind. Default is a short
    *  localhost GET of `/v1/health`. Occupied ports are skipped; probe
    *  failures and timeouts fail open as available. */
@@ -748,7 +774,7 @@ function isPortBusy(err: unknown): boolean {
   return /EADDRINUSE|address already in use/i.test(msg);
 }
 
-async function routeRequest(
+export async function routeRequest(
   req: Request,
   opts: NexusHttpServerOpts,
   server: BunServerLike,
@@ -790,6 +816,36 @@ async function routeRequest(
   const { pathname } = url;
   const method = req.method;
 
+  // Default-deny for every `/v1/` path that is not on PUBLIC_ROUTES.
+  // Reuses checkAuth (same-origin exemption + constant-time bearer).
+  // setupMode is not implemented on this server (P24b) — pass false.
+  // Per-route checkAuth calls below stay in place.
+  // OPTIONS is a CORS preflight and cannot carry Authorization; existing
+  // handlers answer it themselves, so the gate does not swallow it.
+  if (
+    method !== 'OPTIONS'
+    && pathname.startsWith('/v1/')
+    && !isPublicRoute(method, pathname, { setupMode: false })
+  ) {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) {
+      const name = method === 'POST' && pathname === '/v1/tasks' && opts.metaApi
+        ? matchIngestAuthorization(req)?.name
+        : undefined;
+      if (name === undefined) {
+        debug.log('nexus.auth', 'default-deny', { method, pathname });
+        // MCP 클라이언트(Claude Code)에게는 «할 일»을 말한다 — 안 그러면 OAuth 로 가서 /register 405 를 만난다.
+        if (pathname === '/v1/mcp') return mcpUnauthorizedResponse();
+        return jsonResponse({ error: 'unauthorized' }, 401);
+      }
+      debug.log('nexus.auth', 'ingest-token', { name, pathname });
+    }
+  }
+  // OAuth 동적 클라이언트 등록(RFC 7591) — Elanous 는 OAuth 를 쓰지 않는다. 405 대신 «이렇게 등록하라»를 돌려준다.
+  if (method === 'POST' && pathname === '/register') {
+    debug.log('nexus.auth', 'oauth-register-rejected', { pathname });
+    return oauthRegistrationRejected();
+  }
+
   // FU2 (2026-05-12) — root-level browser conveniences. The PWA serves
   // its assets under `/app/*`, but browsers still probe the origin root
   // for `/favicon.ico` and bookmark `/`. Without these two handlers the
@@ -834,6 +890,21 @@ async function routeRequest(
     }
   }
 
+  if (pathname === LIVE_SHIPPED_PATH) {
+    return handleLiveShipped(req, { authorize: (request) => !!opts.metaApi && checkAuth(request, opts.metaApi) });
+  }
+  if (pathname === LIVE_DETAIL_PATH) {
+    return handleLiveDetail(req, {
+      authorize: (request) => !!opts.metaApi && checkAuth(request, opts.metaApi),
+    });
+  }
+
+  if (pathname === APPROVALS_MERGES_PATH || pathname.startsWith(`${APPROVALS_MERGES_PATH}/`)) {
+    return handleMergeApprovals(req, {
+      authorize: (request) => !!opts.metaApi && checkAuth(request, opts.metaApi),
+    });
+  }
+
   if (pathname === MCP_RESOURCE_ROUTE_PATH && method === 'GET') {
     if (!opts.metaApi) return jsonResponse({ error: 'mcp-resource-route-not-wired' }, 503);
     return handleMcpResourceGet(req, {
@@ -1073,16 +1144,77 @@ async function routeRequest(
     return handleHarnessAskStatusGet(req, opts.metaApi);
   }
 
+  if (pathname === '/v1/harness/run-screen' && method === 'GET') {
+    if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
+    if (!checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleHarnessRunScreenGet(req, opts.metaApi);
+  }
+
   if (pathname === '/v1/harness/run-events' && method === 'GET') {
     if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
     if (!checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
     return handleHarnessRunEventsGet(req, opts.metaApi);
   }
 
+  // Design direction is a write: check owner auth before the handler reads the body.
+  // Keep this POST ahead of the mutation fallback, and never make it a public route.
+  if (method === 'POST' && pathname === DESIGN_DIRECTION_PATH) {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleDesignDirectionPost(req);
+  }
+  // Custom system create is a write that launches an extract. Auth before the body.
+  // The default-deny gate above already refuses anonymous /v1 writes; this check
+  // stays so a future gate change cannot reach the extractor without an owner.
+  if (method === 'POST' && pathname === DESIGN_SYSTEM_PATH) {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    // Same-origin exemption is enough for a direction pick. An extract writes a
+    // library and launches Chrome, so it also requires the owner bearer.
+    const owner = opts.metaApi.bearerToken;
+    const offered = (req.headers.get('authorization') ?? '').startsWith('Bearer ')
+      ? (req.headers.get('authorization') ?? '').slice('Bearer '.length).trim()
+      : '';
+    if (!owner || offered.length !== owner.length) return jsonResponse({ error: 'unauthorized' }, 401);
+    let bearerDiff = 0;
+    for (let i = 0; i < offered.length; i += 1) bearerDiff |= offered.charCodeAt(i) ^ owner.charCodeAt(i);
+    if (bearerDiff !== 0) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleDesignSystemCreate(req);
+  }
+
+  if (method === 'POST' && pathname === '/v1/graphs/validate') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleGraphsValidatePost(req, opts.metaApi);
+  }
+
   // Mutation routes (PR ι) — POST/PATCH/DELETE on /v1/nexus/tabs[/:id[/action]].
   // Templates POST handled here too (PR κ).
   // Config / secrets PUT/POST/DELETE here too (PR μ).
   if (method !== 'GET') {
+    if ((method === 'PUT' || method === 'POST') && pathname.startsWith('/v1/graphs/')) {
+      if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
+      if (!checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      const mutated = await handleGraphsMutation(pathname, req);
+      if (mutated) return mutated;
+    }
+    if (method === 'POST' && pathname === '/v1/tasks') {
+      if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
+      return handleTaskCreatePost(req, opts.metaApi);
+    }
+    if (method === 'POST' && pathname.startsWith('/v1/tasks/') && pathname.endsWith('/approve')) {
+      if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
+      let taskId: string;
+      try { taskId = decodeURIComponent(pathname.slice('/v1/tasks/'.length, -'/approve'.length)); }
+      catch { return jsonResponse({ error: 'bad_request', reason: 'invalid taskId' }, 400); }
+      if (!taskId || taskId.includes('/') || taskId.includes('\\') || taskId.includes('..')) {
+        return jsonResponse({ error: 'bad_request', reason: 'invalid taskId' }, 400);
+      }
+      return handleTaskApprovePost(req, taskId, opts.metaApi);
+    }
+    // Pod grok access 재발급. 넥서스 bearer 가 아니라 llm-credential 토큰을 본문 파싱 전에 검증한다.
+    if (pathname === POD_CREDENTIAL_GROK_PATH && method === 'POST') {
+      const gate = await authenticatePodCredential(req);
+      if (!gate.ok) return gate.response;
+      return handlePodGrokCredential(req);
+    }
     if (pathname === '/v1/harness/ask' && method === 'POST') {
       if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
       if (!checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
@@ -1171,7 +1303,8 @@ async function routeRequest(
     }
     // B 트랙 closure piece (RFC #2474) — MCP Streamable HTTP transport.
     // External MCP clients (Claude Code · Cursor · Codex) register elanous
-    // via `claude mcp add --transport http elanous http://localhost:31415/v1/mcp`
+    // via `claude mcp add --transport http elanous http://localhost:31415/v1/mcp --header "Authorization: Bearer <acp-token>"`
+    // (토큰 없이 붙이면 401 → Claude Code 가 OAuth 를 시도한다 — mcp-oauth-hint.ts)
     // and reach the NEXUS daemon's ToolRuntime registry directly — no
     // child process spawn (cf. `elanous mcp serve` stdio · #2485), every
     // call flows through the PFC capture seam. Placed inside the
@@ -1200,7 +1333,10 @@ async function routeRequest(
         return handleRuntimeToolCall(req, opts.metaApi, restToolId);
       }
     }
+    // ⛔ 설정 쓰기 여섯(스위치·모델 티어·LLM provider·LLM 호스트·회전·미션 제어)은 인증 없이 핸들러에 닿았다
+    //   (2026-09-26 🅢 비파괴 탐침: 무인증 PUT → 404/400 · 같은 조건 /v1/config/secrets → 401). PWA 는 same-origin 으로 통과.
     if (pathname.startsWith('/v1/config/switches/') && method === 'PUT') {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       const switchId = pathname.slice('/v1/config/switches/'.length);
       return handleSwitchPut(req, makeConfigCtx(opts), switchId);
     }
@@ -1213,6 +1349,7 @@ async function routeRequest(
     // sub-trees into UserConfig (Path A). Validation lives in the
     // handler so invalid tier strings can't pollute the file.
     if (pathname === '/v1/config/model-tier' && method === 'PUT') {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       const { handleModelTierPut } = await import('./config-model-tier.js');
       return handleModelTierPut(req);
     }
@@ -1252,12 +1389,14 @@ async function routeRequest(
     // PUT + DELETE in the mutation block; GET sits in the GET-only
     // block alongside /v1/llm/models.
     if (pathname === '/v1/llm/hosts' && (method === 'OPTIONS' || method === 'PUT' || method === 'DELETE')) {
+      if (method !== 'OPTIONS') { if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401); }
       return handleLlmHostsConfig(req);
     }
     // iOS Phase 1.5 (2026-05-13) — provider rotation advance. POST
     // here in the mutation block (memory `feedback_post_route_must_be_in_method_block`),
     // GET sibling in the GET block below.
     if (pathname === '/v1/llm/rotation/next' && (method === 'POST' || method === 'OPTIONS')) {
+      if (method === 'POST') { if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401); }
       return handleLlmRotationNext(req);
     }
     if (pathname === '/v1/llm/rotation' && method === 'OPTIONS') {
@@ -1267,11 +1406,35 @@ async function routeRequest(
     // POST 는 mutation 블록 안에서 등록 (memory `feedback_post_route_must_be_in_method_block`).
     // GET sibling 은 아래 GET-only 블록에 등록.
     if (pathname === '/v1/setup/llm-provider' && (method === 'POST' || method === 'OPTIONS')) {
+      if (method === 'POST') { if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401); }
       return handleLlmProviderSet(req);
     }
     if (pathname === '/v1/setup/llm-providers' && method === 'OPTIONS') {
       return handleLlmProvidersList(req);
     }
+    if (pathname === '/v1/setup/obsidian' && (method === 'POST' || method === 'OPTIONS')) {
+      if (method === 'OPTIONS') return corsPreflight('POST, OPTIONS');
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      return handleObsidianSet(req);
+    }
+    if (pathname === '/v1/setup/skills' && (method === 'POST' || method === 'OPTIONS')) {
+      if (method === 'OPTIONS') return corsPreflight('POST, OPTIONS');
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      return handleSkillsSet(req);
+    }
+    if (pathname === '/v1/setup/obsidian-skills' && method === 'OPTIONS') return corsPreflight('GET, OPTIONS');
+    if (pathname === '/v1/setup/channel-bot' && (method === 'POST' || method === 'OPTIONS')) {
+      if (method === 'OPTIONS') return corsPreflight('POST, OPTIONS');
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      return handleChannelBotSet(req);
+    }
+    if (pathname === '/v1/setup/channel-bots' && method === 'OPTIONS') return corsPreflight('GET, OPTIONS');
+    if ((pathname === '/v1/setup/child-llm' || pathname === '/v1/setup/answer-priority')
+      && (method === 'POST' || method === 'OPTIONS')) {
+      if (method === 'OPTIONS') return corsPreflight('GET, POST, OPTIONS');
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      return pathname === '/v1/setup/child-llm' ? handleChildLlmSet(req) : handleAnswerPrioritySet(req);
+    }
     // PWA `/settings` Phase 3 (2026-05-19) — persona description PATCH.
     // dispatchPersonaRoute 가 PATCH 분기를 자체 처리. GET sibling 은
     // 아래 GET-only 블록의 기존 /v1/personas 핸들러.
@@ -1580,6 +1743,12 @@ async function routeRequest(
       if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
       return handleIntakePipelineCommitPost(req, opts.metaApi);
     }
+    // I1 — 판정만. `/v1/intake/` 세션 id 캐치올보다 앞에 둔다(pipeline-preview 와 같은 자리).
+    if (pathname === '/v1/intake/route' && (method === 'POST' || method === 'OPTIONS')) {
+      if (method === 'OPTIONS') return corsPreflight('POST, OPTIONS');
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      return handleIntakeRoutePost(req);
+    }
     if (pathname.startsWith('/v1/intake/')) {
       if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
       const suffix = pathname.slice('/v1/intake/'.length);
@@ -1765,10 +1934,27 @@ async function routeRequest(
       return handleTriagePreview(req);
     }
     if (pathname === '/v1/autopilot/mission-action' && method === 'POST') {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       return handleMissionAction(req);
     }
+    // 흡수 원장 입구(RFC-pwa-intake-front-door A3 absorb) — 넣기·추적 둘 다 인증(PWA 칸은 user-private).
+    if (pathname === '/v1/intake-ledger/items' && method === 'POST') {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      const { handleIntakeLedgerPost } = await import('./intake-ledger-api.js');
+      return handleIntakeLedgerPost(req);
+    }
+    if (pathname === '/v1/vault/file' && (method === 'PUT' || method === 'OPTIONS')) {
+      if (method === 'OPTIONS') return corsPreflight('PUT, OPTIONS');
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      return handleVaultFilePut(req);
+    }
+    {
+      const vaultSeg = parseVaultPath(pathname);
+      if (vaultSeg !== null && method === 'OPTIONS') return corsPreflight('GET, OPTIONS');
+    }
     // Obsidian Vault PWA 이식 OP0 (2026-07-09) — 템플릿 전개(POST). GET reads 는 아래.
     if (pathname === '/v1/vault/template-expand' && method === 'POST') {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       return handleTemplateExpand(req);
     }
     // B outbound — unified send: openclaw reports + Conatus alerts POST here
@@ -1838,7 +2024,10 @@ async function routeRequest(
     return jsonResponse({ error: 'static-not-wired' }, 404);
   }
   if (pathname === '/v1/health') {
-    return handleHealth(opts.state, opts.registry, { bindHost: bind.hostname });
+    return handleHealth(opts.state, opts.registry, {
+      bindHost: bind.hostname,
+      ...(opts.setup ? { setup: opts.setup } : {}),
+    });
   }
   if (pathname === '/v1/nexus') return handleNexusSnapshot(opts.state, opts.registry);
   if (pathname === '/v1/nexus/tabs') return handleTabsList(opts.registry, url);
@@ -1923,6 +2112,13 @@ async function routeRequest(
       return handleTerminalRunParticipants(req, opts.metaApi, runId);
     }
   }
+  {
+    const streamId = parseTerminalStreamPath(pathname);
+    if (streamId !== null) {
+      if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
+      return handleTerminalStream(req, opts.metaApi, streamId);
+    }
+  }
   {
     const scrollbackId = parseScrollbackPath(pathname);
     if (scrollbackId !== null) {
@@ -1979,6 +2175,15 @@ async function routeRequest(
     if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
     return handleLogsQuery(req, opts.metaApi);
   }
+  // Trace (v6 T1 · 2026-09-28) — 판단 사슬 L0–L3 ⊕ 증거 한 줄. 읽기만 한다.
+  if (pathname === '/v1/trace' && method === 'GET') {
+    if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
+    return handleTrace(req, opts.metaApi);
+  }
+  if (pathname.startsWith('/v1/trace/evidence/') && method === 'GET') {
+    if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
+    return handleTraceEvidence(req, opts.metaApi, pathname.slice('/v1/trace/evidence/'.length));
+  }
   if (pathname === '/v1/logs/stream' && method === 'GET') {
     if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
     return handleLogsStream(req, opts.metaApi);
@@ -2044,6 +2249,7 @@ async function routeRequest(
   {
     const seg = parseVaultPath(pathname);
     if (seg !== null) {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       return handleVaultGet(req, seg);
     }
   }
@@ -2072,6 +2278,18 @@ async function routeRequest(
   if (pathname === '/v1/setup/llm-providers') {
     return handleLlmProvidersList(req);
   }
+  if (pathname === '/v1/setup/obsidian-skills') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleObsidianSkillsGet();
+  }
+  if (pathname === '/v1/setup/channel-bots') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleChannelBotsGet();
+  }
+  if (pathname === '/v1/setup/child-llm' || pathname === '/v1/setup/answer-priority') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return pathname === '/v1/setup/child-llm' ? handleChildLlmGet() : handleAnswerPriorityGet();
+  }
   // P1-FU1 (2026-05-14) — mission router prediction is POST-only.
   // GET reaches here AFTER the mutation block (which only fires when
   // `method !== 'GET'`); routing the path here lets the handler
@@ -2106,6 +2324,12 @@ async function routeRequest(
     if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
     return handleIntakeListGet(req, url, opts.metaApi);
   }
+  // 흡수 원장 추적 — 인증 필수(PWA 칸은 user-private · 넣기는 위 method!=='GET' 블록).
+  if (pathname.startsWith('/v1/intake-ledger/items/')) {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    const { handleIntakeLedgerGet } = await import('./intake-ledger-api.js');
+    return handleIntakeLedgerGet(decodeURIComponent(pathname.slice('/v1/intake-ledger/items/'.length)));
+  }
   // I10 (2026-05-12) — dogfood retrospective. Reads recent rows from
   // ~/.elanous/intake/pipeline-runs.jsonl + aggregates across the full
   // file. Sibling to the POST emitters (pipeline-preview / commit ·
@@ -2168,6 +2392,28 @@ async function routeRequest(
   // 접근. 둘 다 process-singleton store (TaskStore · getSchedulerStore)
   // 라 zero-migration. metaApi 미wired 환경에서는 503 — daemon-public
   // grace-window 가 닫힌 후에도 PWA 가 stable error 만 보도록.
+  if (pathname === '/v1/schedules' && method === 'GET') {
+    if (!opts.metaApi) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleSchedulesList(req, opts.metaApi);
+  }
+  const scheduleRunsMatch = /^\/v1\/schedules\/([^/]+)\/runs$/.exec(pathname);
+  if (scheduleRunsMatch && method === 'GET') {
+    if (!opts.metaApi) return jsonResponse({ error: 'unauthorized' }, 401);
+    let id: string;
+    try { id = decodeURIComponent(scheduleRunsMatch[1]!); }
+    catch { return jsonResponse({ error: 'bad_request' }, 400); }
+    return handleScheduleRuns(req, id, opts.metaApi);
+  }
+  if (pathname.startsWith('/v1/schedules/') && method === 'GET') {
+    if (!opts.metaApi) return jsonResponse({ error: 'unauthorized' }, 401);
+    let id: string;
+    try { id = decodeURIComponent(pathname.slice('/v1/schedules/'.length)); }
+    catch { return jsonResponse({ error: 'bad_request' }, 400); }
+    return handleScheduleDetail(req, id, opts.metaApi);
+  }
+  if (pathname === '/v1/task-cards' || /^\/v1\/task-cards\/[^/]+$/.test(pathname)) {
+    return handleTaskCardsGet(pathname);
+  }
   if (pathname === '/v1/tasks') {
     if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
     return handleTasksList(req, opts.metaApi);
@@ -2185,6 +2431,18 @@ async function routeRequest(
   // surface (`/v1/workflows` · `~/.elanous/workflows-runs/`) covers the same
   // user need.
 
+  if (method === 'GET' && (pathname === '/v1/plugins/index' || pathname === '/v1/plugins')) {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return pathname === '/v1/plugins/index' ? handlePluginsIndexGet(req, opts.metaApi) : handlePluginsGet(req, opts.metaApi);
+  }
+  if (method === 'GET' && pathname === '/v1/graph/kinds') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleGraphKindsGet(req, opts.metaApi);
+  }
+  // F-M1 read + P-F1 raw YAML. Writes live in the mutation block and never touch core graphs/.
+  if (method === 'GET' && (pathname === '/v1/graphs' || /^\/v1\/graphs\/[^/]+$/.test(pathname) || /^\/v1\/graphs\/[^/]+\/yaml$/.test(pathname))) {
+    return handleGraphsGet(pathname);
+  }
   // Archon-port T2.3 (2026-05-08) — workflow GET surface.
   // (POST /validate · POST /:name/run · PUT/DELETE /:name landed
   // inside the mutation block above.)
@@ -2286,6 +2544,7 @@ async function routeRequest(
       ...(ci?.acpTokenPath !== undefined ? { acpTokenPath: ci.acpTokenPath } : {}),
       ...(ci?.acpTokenOverride !== undefined ? { acpTokenOverride: ci.acpTokenOverride } : {}),
       ...(requestHost ? { requestHost } : {}),
+      allowAutoToken: connectInfoTokenAllowed(req.headers.get('origin'), requestHost || null),
     };
     return handleConnectInfoGet(ctx);
   }
@@ -2369,6 +2628,10 @@ async function routeRequest(
   // B4 — the `elanous repo design-check` verdict over the wire, so the PWA
   // renders the SAME resolution the CLI prints instead of re-deriving it.
   if (pathname === '/v1/design-check') return handleDesignCheck();
+  // RFC design loop §A2 — HTML previews under the same repository as design-check.
+  if (pathname === DESIGN_PREVIEWS_PATH || pathname.startsWith(DESIGN_PREVIEW_PATH_PREFIX)) {
+    return handleDesignPreviews(pathname);
+  }
   // RFC #2161 Phase 3 — Layer A static catalog snapshot. Read-only ·
   // refreshed on demand by the PWA Showroom dropdown + future
   // LlmCatalogCard. Phase 5 adds /v1/registry/resolved for live
@@ -2442,36 +2705,4 @@ export function parseTelegramDispatchEvent(body: unknown): TelegramEvent | null
   };
 }
 
-export function jsonResponse(body: unknown, status = 200): Response {
-  return new Response(JSON.stringify(body), {
-    status,
-    headers: {
-      'content-type': 'application/json; charset=utf-8',
-      // micro.1 (2026-05-09 · FU.4 envelope audit recommendation #2
-      // enforce-by-default) — every JSON envelope now carries the
-      // CORS allow-origin wildcard so PWA dev (cross-port) + future
-      // remote dogfood (Tailscale URL) reach the daemon without
-      // per-endpoint patching. Production same-origin is unaffected
-      // (browsers ignore the header on same-origin requests). elanous
-      // daemon uses bearer-token auth only (no cookies), so the
-      // wildcard does not conflict with `credentials: include`.
-      'access-control-allow-origin': '*',
-    },
-  });
-}
-
-/** OPTIONS preflight response for JSON-body POST/PUT/DELETE routes
- *  in the mutation block. Mirrors the audio-stt + role-judge pattern
- *  so any new POST endpoint gets cross-origin support with one line:
- *  `if (... && method === 'OPTIONS') return corsPreflight();`. */
-export function corsPreflight(allowedMethods = 'POST, PUT, DELETE, OPTIONS'): Response {
-  return new Response(null, {
-    status: 204,
-    headers: {
-      'access-control-allow-origin': '*',
-      'access-control-allow-methods': allowedMethods,
-      'access-control-allow-headers': 'content-type, authorization',
-      'access-control-max-age': '600',
-    },
-  });
-}
+export { corsPreflight, jsonResponse } from './json-response.js';

package/src/nexus/api/image-generate.ts

@@ -52,6 +52,7 @@
 //   - sha256(prompt+ts) for deterministic uniqueness without random
 //   - .png because gpt-image-2 default; future variants pick by mime
 
+import { assertVaultWriteAllowed } from '../../obsidian/vault-write-guard.js';
 import { mkdirSync, writeFileSync, existsSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { createHash } from 'node:crypto';
@@ -251,6 +252,7 @@ export async function handleImageGenerate(
   const relPath = buildRelPath({ ts, prompt });
   const absPath = join(opts.vault.root, relPath);
   try {
+    assertVaultWriteAllowed(absPath);   // ⛔ 격리 우주는 운영 볼트에 쓰지 않는다(아래 catch 가 500 과 사유로 돌려준다)
     mkdirSync(dirname(absPath), { recursive: true });
     const bytes = Buffer.from(b64, 'base64');
     writeFileSync(absPath, bytes);
@@ -441,6 +443,7 @@ export async function handleImageEdit(
   const relPath = buildRelPath({ ts, prompt: `edit:${prompt}` });
   const absPath = join(opts.vault.root, relPath);
   try {
+    assertVaultWriteAllowed(absPath);   // ⛔ 격리 우주는 운영 볼트에 쓰지 않는다(아래 catch 가 500 과 사유로 돌려준다)
     mkdirSync(dirname(absPath), { recursive: true });
     const bytes = Buffer.from(b64, 'base64');
     writeFileSync(absPath, bytes);