elanous 0.2.10 → 0.2.11

package/src/cli/pr-cli.ts

@@ -18,7 +18,7 @@ import { runMockModuleRestoreGate } from '../../scripts/ci-mock-module-restore-g
 import { runModelHardcodeGate } from '../../scripts/ci-model-hardcode-gate.js';
 import { runDaemonPortGate } from '../../scripts/ci-daemon-port-gate.js';
 import { runPublicLeakGate } from '../../scripts/ci-public-leak-gate.js';
-import { exportLeakCheck, type ExportLeakCheck } from '../../scripts/ci-public-export-leak-gate.js';
+import { exportLeakCheck, publicExportChangedFiles, type ExportLeakCheck } from '../../scripts/ci-public-export-leak-gate.js';
 import { checkCommands, extractElanousCommands, type Finding as DocsCliFinding } from '../../scripts/docs-cli-check.js';
 import { runTestInterferenceGate } from '../../scripts/ci-test-interference-gate.js';
 import { isGoalDocumentFileName } from '../self-implement/goal-document.js';
@@ -104,7 +104,7 @@ export interface PrLandDeps {
   runMockModuleRestoreGate?: (out: { log: (message: string) => void; error: (message: string) => void }) => boolean;
   runModelHardcodeGate?: (out: { log: (message: string) => void; error: (message: string) => void }) => boolean;
   runDaemonPortGate?: (out: { log: (message: string) => void; error: (message: string) => void }) => boolean;
-  /** 공개 유출 래칫(경고 전용) — 반환 0 통과 · 1 늘었다 · 2 못 쟀다. */
+  /** 공개 유출 래칫(경고 전용) — 반환 0 동일 · 1 늘었다 · 2 못 쟀다 · 3 줄었다. */
   runPublicLeakGate?: (changedFiles: readonly string[], out: { log: (message: string) => void; error: (message: string) => void }) => number;
   /** Test seam — the post-transform export leak check on changed files. */
   runExportLeakCheck?: (changedFiles: readonly string[], cwd: string) => ExportLeakCheck;
@@ -275,8 +275,10 @@ export function runPrLandIsolationGate(
 
 /** ⭐ 2026-09-24 — 공개 유출 래칫은 «경고만» 낸다(착지를 막지 않는다 · 막는 것은 공개 결정 뒤 · 채널 합의).
  *  계기: 기준선 뒤 3시간 만에 🅢 착지분에서 유출 증가 다섯을 이 게이트가 잡았다 — 착지 순간에 보여야 그 자리에서 고친다. */
-function runPrLandPublicLeakGate(changedFiles: readonly string[], out: { log: (message: string) => void; error: (message: string) => void }): number {
-  return runPublicLeakGate({ args: ['--changed-files', ...changedFiles], log: out.log, error: out.log });
+function runPrLandPublicLeakGate(changedFiles: readonly string[], out: { log: (message: string) => void; error: (message: string) => void }, cwd: string, baselineRef: string): number {
+  const top = runGitCommand(cwd, ['rev-parse', '--show-toplevel'], { encoding: 'utf-8' });
+  if (top.status !== 0 || !String(top.stdout ?? '').trim()) return 2;
+  return runPublicLeakGate({ args: ['--changed-files', ...changedFiles], root: String(top.stdout).trim(), baselineRef, log: out.log, error: out.log });
 }
 
 /** The prepare check on this landing's changed files — scripts/ci-public-export-leak-gate.ts. */
@@ -285,23 +287,49 @@ export function runPrLandExportLeakCheck(changedFiles: readonly string[], cwd: s
   return exportLeakCheck(changedFiles, top.status === 0 && String(top.stdout ?? '').trim() ? String(top.stdout).trim() : cwd);
 }
 
-/** Blocks the landing when changed files would leak into the public export, unless allowPublicLeak. Returns false to stop. */
+/** Blocks changed public files that leak or cannot be measured. */
 export function exportLeakBlock(
   changedFiles: readonly string[] | undefined,
   check: () => ExportLeakCheck,
   allow: boolean,
   out: { log: (message: string) => void; error: (message: string) => void },
+  cwd: string = process.cwd(),
 ): boolean {
   if (!changedFiles || changedFiles.length === 0) return true;
   let result: ExportLeakCheck;
-  try { result = check(); } catch (error) { result = { measured: false, hits: [], detail: error instanceof Error ? error.message : String(error) }; }
-  record('public-export-leak', result.measured ? result.hits.length === 0 || allow : true, { measured: result.measured, hits: result.hits.length, allowed: allow && result.hits.length > 0 });
-  if (!result.measured) { out.log(`⚠ public-export-leak: 못 쟀다(${result.detail ?? '?'}) — 착지는 막지 않는다. 확인: bun scripts/public-export.ts --leak-check --files <파일…>`); return true; }
-  if (result.hits.length === 0) { out.log('✓ public-export-leak: 바뀐 파일이 공개본에 사적 흔적을 싣지 않는다(prepare 와 같은 변환 뒤).'); return true; }
+  try { result = check(); } catch { result = { measured: false, hits: [], detail: '검사 실행 실패' }; }
+  let publicFiles: string[] = [];
+  if (!result.measured) {
+    try { publicFiles = publicExportChangedFiles(changedFiles, cwd); }
+    catch { publicFiles = [...changedFiles]; } // A missing/invalid manifest cannot prove these files are private.
+  }
+  const applicable = result.hits.filter((hit) => hit.marker !== 'skill-boundary' || changedFiles.includes(hit.file));
+  const missingReason: ExportLeakCheck['hits'][number][] = [];
+  const blockedHits: ExportLeakCheck['hits'][number][] = [];
+  let allowed = 0;
+  for (const hit of applicable) {
+    let lines: string[];
+    try { lines = readFileSync(join(cwd, hit.file), 'utf8').split(/\r?\n/); }
+    catch { blockedHits.push(hit); continue; }
+    const notes = [lines[hit.line - 1], lines[hit.line - 2]].filter((line): line is string => line !== undefined)
+      .map((line) => /(?:\/\/|\/\*|\*|#|<!--)\s*public-export-allow:\s*(.*)/u.exec(line));
+    if (notes.some((note) => note?.[1]?.replace(/(?:\*\/|-->)\s*$/u, '').trim())) { allowed++; continue; }
+    blockedHits.push(hit);
+    if (notes.some(Boolean)) missingReason.push(hit);
+  }
+  const blocked = (!result.measured && publicFiles.length > 0) || (blockedHits.length > 0 && !allow);
+  record('public-export-leak', !blocked, { measured: result.measured, hits: applicable.length, allowed });
+  debug.log('pr.land', 'leak-gate', { blocked, hits: applicable.map(({ file, marker }) => ({ file, marker })), measured: result.measured, allowed });
+  if (!result.measured) {
+    const write = blocked ? out.error : out.log;
+    write(`${blocked ? '✗' : '⚠'} public-export-leak: 못 쟀다${blocked ? ' — 막는다' : ' — 공개 대상 변경 없음'}(${result.detail ?? '?'}) · 확인: bun scripts/public-export.ts --leak-check --json --all --files <파일…>`);
+    return !blocked;
+  }
+  if (blockedHits.length === 0) { out.log('✓ public-export-leak: 바뀐 파일이 공개본에 사적 흔적을 싣지 않는다(prepare 와 같은 변환 뒤).'); return true; }
   const write = allow ? out.log : out.error;
-  write(`${allow ? '⚠' : '✗'} public-export-leak: 바뀐 파일 ${result.hits.length}곳이 공개본에 사적 흔적을 싣는다 — 다음 release prepare 가 여기서 실패한다:`);
-  for (const h of result.hits.slice(0, 20)) write(`   ${h.file}:${h.line}  ${h.marker}`);
-  if (result.hits.length > 20) write(`   … 외 ${result.hits.length - 20}곳`);
+  write(`${allow ? '⚠' : '✗'} public-export-leak: 바뀐 파일 ${blockedHits.length}곳이 공개본에 사적 흔적을 싣는다 — 다음 release prepare 가 여기서 실패한다:`);
+  for (const hit of blockedHits.slice(0, 20)) write(`   ${hit.file}:${hit.line} · ${hit.marker}${missingReason.includes(hit) ? ' · 사유 없음' : ''}`);
+  if (blockedHits.length > 20) write(`   … 외 ${blockedHits.length - 20}곳`);
   write('   확인: bun scripts/public-export.ts --leak-check --all --files <파일…>');
   if (allow) { out.log('   --allow-public-leak 로 넘긴다(이유는 --land-reason).'); return true; }
   out.error('   고치거나, 공개본과 무관한 것이 확실하면 --allow-public-leak --land-reason "<이유>" 로 넘긴다.');
@@ -322,8 +350,12 @@ export function publicLeakWarning(
     record('public-leak-gate', true, { warnOnly: true, measured: false });
     return;
   }
-  record('public-leak-gate', true, { warnOnly: true, measured: rc !== 2, grew: rc === 1 });
+  record('public-leak-gate', true, { warnOnly: true, measured: rc !== 2, grew: rc === 1, shrank: rc === 3 });
   if (rc === 0) { out.log('✓ public-leak-gate(경고 전용): 공개 유출이 늘지 않았다.'); return; }
+  if (rc === 3) {
+    for (const line of captured.filter((l) => /→/.test(l))) out.log(`✓ public-leak-gate(경고 전용): 공개 유출이 줄었다 · 기준선 --update 권장 — ${line.trim()}`);
+    return;
+  }
   if (rc === 1) {
     out.log('⚠ public-leak-gate(경고 전용 · 착지는 막지 않는다): 공개 유출이 늘었다 —');
     for (const line of captured.filter((l) => /→/.test(l))) out.log(`   ${line.trim()}`);
@@ -1031,6 +1063,10 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
     out.error('✗ body: --body와 --body-file은 함께 사용할 수 없습니다.');
     return 1;
   }
+  if (opts.allowPublicLeak && !opts.landReason?.trim()) {
+    out.error('✗ public-export-leak: --allow-public-leak 에는 --land-reason "<이유>" 가 필요합니다.');
+    return 1;
+  }
   if (opts.includeActiveRunFiles && opts.excludeActiveRunFiles) {
     out.error('✗ active-run-files: --include-active-run-files와 --exclude-active-run-files는 함께 사용할 수 없습니다.');
     return 1;
@@ -1343,8 +1379,8 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
 
   const changedPaths = currentChangePaths(run, cwd, staged, base, out);
   nextMdWarning(body ?? '', changedPaths, out);
-  publicLeakWarning(changedPaths, deps.runPublicLeakGate ?? runPrLandPublicLeakGate, out);
-  if (!exportLeakBlock(changedPaths, () => (deps.runExportLeakCheck ?? runPrLandExportLeakCheck)(changedPaths ?? [], cwd), opts.allowPublicLeak === true, out)) return 1;
+  publicLeakWarning(changedPaths, deps.runPublicLeakGate ?? ((files, sink) => runPrLandPublicLeakGate(files, sink, cwd, base)), out);
+  if (!exportLeakBlock(changedPaths, () => (deps.runExportLeakCheck ?? runPrLandExportLeakCheck)(changedPaths ?? [], cwd), opts.allowPublicLeak === true, out, cwd)) return 1;
   if (publicDocPaths(changedPaths, () => true).length > 0) {
     const top = run('git', ['rev-parse', '--show-toplevel'], { cwd });
     const docsRoot = top.ok && top.out.trim() ? top.out.trim() : cwd;

package/src/cli/pty-drive-cli.ts

@@ -8,6 +8,7 @@ import type { StreamLLMFn } from '../autopilot/llm-control-brain.js';
 import { establishElanousTuiIsolation, elanousTuiSpawnOptions, type ElanousTuiIsolation } from '../self-implement/elanous-tui-spawn.js';
 import { resolveObserveOnlyDecision } from '../self-implement/observe-only.js';
 import { getUserConfig } from '../user-config.js';
+import { verdictForFinalPtyScreen } from './pty-drive-verdict.js';
 import { debug } from '../debug/log.js';
 import { writeHarnessScreen } from '../harness/harness-screen.js';
 import { resolveControlInboxDir } from '../harness/control-inbox.js';
@@ -19,6 +20,7 @@ import { resolvePtyRef } from '../pty-shell/pty-ref.js';
 import { parsePtyWriteActor } from '../pty-shell/pty-write-arbiter.js';
 import { controlDepsForHandle, controlDepsForRemoteRef, runPtyControlLoop } from '../autopilot/pty-control-loop.js';
 import { createLlmControlBrain } from '../autopilot/llm-control-brain.js';
+import { withDriveJail } from './drive-input-jail.js';
 
 /** `pty list` 한 줄의 상태 컬럼 위치 — `<id>\t<kind>\t<nickname>\t<scope>\t<state>\t<extra…>`.
  *  ⚠️⛔ **회귀 테스트의 fixture 는 실측 형식의 *스냅샷*이지 형식 변경 감지기가 아니다**(리뷰 지적 · 과장 정정) —
@@ -166,6 +168,8 @@ export interface PtyDriveOpts {
   readonly maxSteps?: number;
   readonly pollMs?: number;
   readonly model?: string;
+  /** DRIVE-JAIL: brain inputs naming paths outside this directory are not sent to the PTY. */
+  readonly jailHome?: string;
   /** Enable the child SelfImplement observation-only override at boot. */
   readonly observeOnly?: boolean;
   readonly cwd?: string;
@@ -213,6 +217,8 @@ const liveAttachDriveDeps: PtyAttachDriveDeps = {
 
 export interface PtyAttachDriveOpts {
   readonly goal: string;
+  /** DRIVE-JAIL: brain inputs naming paths outside this directory are not sent to the PTY. */
+  readonly jailHome?: string;
   readonly maxSteps?: number;
   readonly pollMs?: number;
   readonly model?: string;
@@ -250,8 +256,11 @@ export async function runPtyAttachDrive(ref: string, opts: PtyAttachDriveOpts, d
     ...(opts.stream ? { stream: opts.stream } : {}),
     onDecision: (decision) => out(decision.action === 'input' ? `  → input (${decision.text.length} chars)\n` : decision.action === 'done' ? `  → done (${decision.reason})\n` : '  · wait\n'),
   });
+  const controlDeps = withDriveJail(handle ? deps.controlDepsForHandle(handle) : deps.controlDepsForRemoteRef?.(id, { actor }) ?? (() => { throw new Error('pty auto: remote control dependencies unavailable'); })(), opts.jailHome, (event, data) => deps.log(event, data));
+  const inputHistory: string[] = [];
   const result = await deps.runControlLoop(brain, {
-    ...(handle ? deps.controlDepsForHandle(handle) : deps.controlDepsForRemoteRef?.(id, { actor }) ?? (() => { throw new Error('pty auto: remote control dependencies unavailable'); })()),
+    ...controlDeps,
+    inject: (text: string) => { inputHistory.push(text); return controlDeps.inject(text); },
     subjectPtyId: id,
     canReceiveInput: true,
   }, {
@@ -260,7 +269,14 @@ export async function runPtyAttachDrive(ref: string, opts: PtyAttachDriveOpts, d
   });
   deps.log('attach-finish', { id, termination: result.termination.kind, steps: result.steps });
   out(`\n▸ ${result.termination.kind} (${result.steps} steps)\n`);
-  return { exitCode: result.termination.kind === 'success' ? 0 : 1, message: `pty auto: ${id} ${result.termination.kind}` };
+  if (result.termination.kind !== 'success') return { exitCode: 1, message: `pty auto: ${id} ${result.termination.kind}` };
+  // DRIVE-OK: «done» from the brain still has to show on the final screen.
+  let screen = '';
+  try { screen = String(await controlDeps.observe()); } catch { /* unreadable → unverified */ }
+  const verdict = verdictForFinalPtyScreen({ screen, inputHistory, exitCode: null });
+  out(`▸ verdict: ${verdict.kind} — ${verdict.reason}\n`);
+  deps.log('attach-verdict', { id, kind: verdict.kind, reason: verdict.reason.slice(0, 200) });
+  return { exitCode: verdict.kind === 'success' ? 0 : 1, message: `pty auto: ${id} ${verdict.kind}` };
 }
 
 export type PtyAttachDriveRunner = (start: () => Promise<{ readonly exitCode: number; readonly message: string }>) => Promise<void>;
@@ -273,14 +289,15 @@ export function registerPtyAttachDriveCommand(pty: Command, run: PtyAttachDriveR
     .option('--poll-ms <ms>', 'screen polling interval in milliseconds', '800')
     .option('--model <model>', 'LLM model override')
     .option('--actor <who>', 'remote input actor (human or agent)', 'human')
+    .option('--jail-home <dir>', 'DRIVE-JAIL: do not send inputs naming paths outside this directory')
     .description('Drive an existing agent-owned PTY without spawning a terminal')
-    .action((ref: string, opts: { goal: string; maxSteps: string; pollMs: string; model?: string; actor?: string }) => run(async () => {
+    .action((ref: string, opts: { goal: string; maxSteps: string; pollMs: string; model?: string; actor?: string; jailHome?: string }) => run(async () => {
       const maxSteps = Number(opts.maxSteps);
       const pollMs = Number(opts.pollMs);
       const actor = parsePtyWriteActor(opts.actor);
       if (!actor) return { exitCode: 2, message: 'pty auto: --actor must be human or agent' };
       return Number.isInteger(maxSteps) && maxSteps >= 1 && Number.isInteger(pollMs) && pollMs >= 0
-        ? runPtyAttachDrive(ref, { goal: opts.goal, maxSteps, pollMs, actor, ...(opts.model ? { model: opts.model } : {}) }, deps)
+        ? runPtyAttachDrive(ref, { goal: opts.goal, maxSteps, pollMs, actor, ...(opts.model ? { model: opts.model } : {}), ...(opts.jailHome ? { jailHome: opts.jailHome } : {}) }, deps)
         : { exitCode: 2, message: 'pty auto: --max-steps must be an integer >= 1 and --poll-ms must be an integer >= 0' };
     }));
 }
@@ -299,6 +316,8 @@ export interface DriveCliOpts {
   json?: boolean;
   /** Existing PTY ref. Absent = spawn a new shell PTY (the default). */
   attach?: string;
+  /** DRIVE-JAIL boundary directory. */
+  jailHome?: string;
 }
 
 export interface DriveCliDeps {
@@ -357,6 +376,7 @@ export async function runDriveCliCommand(command: string | undefined, opts: Driv
       attached = await runAttach(attach, {
         goal: opts.goal, maxSteps, pollMs,
         ...(opts.model ? { model: opts.model } : {}),
+        ...(opts.jailHome ? { jailHome: opts.jailHome } : {}),
       });
     } catch (err) {
       writeError(`drive: ${err instanceof Error ? err.message : String(err)}\n`);
@@ -379,6 +399,7 @@ export async function runDriveCliCommand(command: string | undefined, opts: Driv
       command, goal: opts.goal, maxSteps, pollMs,
       ...(opts.model ? { model: opts.model } : {}),
       ...(opts.cwd ? { cwd: opts.cwd } : {}),
+      ...(opts.jailHome ? { jailHome: opts.jailHome } : {}),
     }));
   } catch (err) {
     writeError(`drive: ${err instanceof Error ? err.message : String(err)}\n`);
@@ -827,7 +848,10 @@ async function runPtyDriveInner(opts: PtyDriveOpts): Promise<{ exitCode: number
       writeScreen(screenKey, await h!.renderScreen(), process.env);
       delivered = true;
     } : undefined;
-    const deps = controlDepsForHandle(h);
+    const rawDeps = withDriveJail(controlDepsForHandle(h), opts.jailHome, (event, data) => debug.log('pty.drive', event, data));
+    // DRIVE-OK: keep what we typed so the final verdict can tell child output from echoed input.
+    const inputHistory: string[] = [];
+    const deps = { ...rawDeps, inject: (text: string) => { inputHistory.push(text); return rawDeps.inject(text); } };
     const autoAssist = opts.elanous ? getUserConfig().tools.selfImplement.autoAssist : undefined;
     const observe = opts.elanous ? async () => {
       const frame = await deps.observe();
@@ -851,12 +875,22 @@ async function runPtyDriveInner(opts: PtyDriveOpts): Promise<{ exitCode: number
     if (screen.trim()) out(`▸ 최종 화면:\n${screen}\n`);
     const childExit = h.exitCode;
     const alive = h.isAlive();
-    const exitCode = childExit !== null
+    // DRIVE-OK (10-03 X1: every step failed yet drive said ok): the brain's «done» is not proof —
+    // judge the final screen. Plain drives take the verdict as the exit; elanous-TUI drives only observe it.
+    const verdict = result.termination.kind === 'success' ? verdictForFinalPtyScreen({ screen, inputHistory, exitCode: childExit }) : null;
+    if (verdict) {
+      out(`▸ verdict: ${verdict.kind} — ${verdict.reason}\n`);
+      debug.log('pty.drive', 'verdict', { kind: verdict.kind, reason: verdict.reason.slice(0, 200), enforced: !opts.elanous });
+    }
+    const verdictFails = !!verdict && !opts.elanous && verdict.kind !== 'success';
+    const baseExit = childExit !== null
       ? childExit
       : alive
         ? result.termination.kind === 'success' ? 0 : 1
         : null;
-    debug.log('pty.drive', 'exit-resolve', { alive, childExit, exitCode, termination: result.termination.kind });
+    // The verdict only withholds a success: nonzero and unknown (null) exits keep their meaning.
+    const exitCode = baseExit === 0 && verdictFails ? 1 : baseExit;
+    debug.log('pty.drive', 'exit-resolve', { alive, childExit, exitCode, termination: result.termination.kind, ...(verdict ? { verdict: verdict.kind } : {}) });
     if (exitCode === null) out('▸ child exited without an exit code; reporting failure at the process boundary (exit 1)\n');
     return { exitCode };
   } finally {

package/src/cli/pty-drive-verdict.ts

@@ -0,0 +1,40 @@
+// Final-screen evidence is independent of the controller's "done" declaration.
+export type PtyDriveVerdict =
+  | { readonly kind: 'done-but-failed'; readonly reason: string; readonly evidence: null }
+  | { readonly kind: 'success'; readonly reason: string; readonly evidence: string }
+  | { readonly kind: 'success-unverified'; readonly reason: string; readonly evidence: null };
+
+export interface FinalPtyEvidence {
+  readonly screen: string;
+  readonly inputHistory: readonly string[];
+  readonly exitCode: number | null;
+}
+
+// eslint-disable-next-line no-control-regex
+const ANSI = /\x1b(?:\][^\x07\x1b]*(?:\x07|\x1b\\)|\[[0-?]*[ -/]*[@-~]|[@-Z\\-_])/g;
+const FAILURE = /(?:\bcommand not found\b|\bnot recognized as (?:an internal or external )?command\b|\bno such file or directory\b|\b(?:error|fatal|exception)\s*:|\berror TS\d+\b|\b(?:build failed|tests? failed|test suite failed|failed to|compilation failed|permission denied)\b|(?:^|\s)[1-9]\d*\s+fail(?:ed|ing|ures?)?\b|\b(?:exit(?:ed)? (?:with )?(?:code |status )?)[1-9]\d*\b|\bnpm ERR!\b|^\s*(?:FAIL\b|✗|❌))/i;
+const SUCCESS = /(?:\b[1-9]\d*\s+(?:pass|passed)\b|\btests?:\s*[1-9]\d*\s+passed\b|\bbuild successful\b|\b(?:successfully|succeeded)\b|\bGOAL-COMPLETE\b)/i;
+
+/** Failure wins over success; an exit code of zero is not itself proof of the goal. */
+export function verdictForFinalPtyScreen({ screen, inputHistory, exitCode }: FinalPtyEvidence): PtyDriveVerdict {
+  if (exitCode !== null && exitCode !== 0) {
+    return { kind: 'done-but-failed', reason: `child exit code ${exitCode}`, evidence: null };
+  }
+  // The PTY may echo commands (including fabricated success markers). Only child output is evidence.
+  const inputs = new Set(inputHistory.flatMap((input) => input.replace(/\r/g, '\n').split('\n').map((line) => line.trim()).filter(Boolean)));
+  // An echo/printf command prints its operand; that output is not independent proof of anything
+  // (`echo "7 pass"` must not count as passing tests — review round 2).
+  const echoedLiterals = new Set([...inputs].flatMap((input) => {
+    const match = /^(?:echo(?:\s+-[neE]+)?|printf)\s+(.+)$/i.exec(input);
+    if (!match) return [];
+    const operand = match[1]!.trim().replace(/^(['"])(.*)\1$/s, '$2').replace(/\\n$/, '').trim();
+    return operand ? [operand] : [];
+  }));
+  const lines = screen.replace(ANSI, '').replace(/\r/g, '\n').split('\n')
+    .map((line) => line.trim()).filter((line) => line && !inputs.has(line) && !echoedLiterals.has(line) && ![...inputs].some((input) => line.endsWith(`$ ${input}`) || line.endsWith(`> ${input}`)));
+  const failure = lines.find((line) => FAILURE.test(line));
+  if (failure) return { kind: 'done-but-failed', reason: failure, evidence: null };
+  const evidence = lines.find((line) => SUCCESS.test(line) && !/\b0\s+(?:pass|passed)\b/i.test(line));
+  if (evidence) return { kind: 'success', reason: 'final PTY screen has success evidence', evidence };
+  return { kind: 'success-unverified', reason: 'final PTY screen has no success evidence', evidence: null };
+}

package/src/cli/release-cli.ts

@@ -5,7 +5,8 @@
 //   elanous release tag --version <x.y.z> --source <commit> [--yes]
 //   elanous release verify  [--version <x.y.z>]
 //   elanous release notes   --from <ref> [--to <ref>]
-//   elanous release run     --version <x.y.z> [--dry-run] [--json] [--if-ready]
+//   elanous release run     --version <x.y.z> [--cut-commit <sha>] [--dry-run] [--json] [--if-ready]
+//   elanous release cut-branch --version <x.y.z> --base <sha> --pick <sha>... [--dry-run]
 //
 // 🩸 계기(2026-09-25 v0.1.0 첫 공개): 손으로 밟은 절차에서 둘을 빠뜨릴 뻔했다 — 공개본 git 커밋(판 커밋이 공개본 커밋이 된다) ·
 //    PWA 빌드(빌드 산출은 공개본에 안 실린다 → 빠뜨리면 «웹 화면 없는 판»). 절차를 명령으로 굳힌다.
@@ -29,6 +30,7 @@ import { formatSchedule, getSchedule, listSchedules, setSchedule } from '../rele
 import { writeStdoutJson } from './stdout-json.js';
 import { CliUserError } from './cli-user-error.js';
 import { runUnattendedRelease, type UnattendedReleaseDeps } from '../../scripts/release-loop/unattended-release.js';
+import { cutReleaseBranch } from '../../scripts/release-loop/cut-branch.js';
 import { releaseReadiness } from '../../scripts/release-loop/release-readiness.js';
 import { runReleaseIfReady } from './release-run-if-ready.js';
 
@@ -675,19 +677,30 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
       const { draftReleaseNotes, readLandedCommits, renderReleaseNotes } = await import('../../scripts/release-notes.js');
       console.log(renderReleaseNotes(draftReleaseNotes(readLandedCommits(o.from, o.to), o.from, o.to)));
     });
+  release.command('cut-branch')
+    .description('원래 컷에 main 의 수리 커밋만 얹은 release/<v> 가지를 만들고 push')
+    .requiredOption('--version <v>', '릴리스 판(x.y.z)')
+    .requiredOption('--base <sha>', '원래 컷 SHA')
+    .requiredOption('--pick <sha...>', '차례로 얹을 main 커밋 SHA')
+    .option('--dry-run', '가지·worktree·push 없이 계획만 출력')
+    .option('--json', '결과 한 줄 JSON(stdout)')
+    .action(async (o: { version: string; base: string; pick: string[]; dryRun?: boolean; json?: boolean }) => {
+      await jsonAction(o.json, async (log) => cutReleaseBranch({ ...o, log }), () => true);
+    });
   release.command('run')
     .description('릴리스 루프 실행 — 원장 직전 판과 release.loop 설정으로 그래프 입력 구성 · --dry-run 은 입력만 출력')
     .requiredOption('--version <v>', '공개할 판(x.y.z)')
+    .option('--cut-commit <sha>', 'origin/main HEAD 대신 컷으로 쓸 커밋')
     .option('--dry-run', '체크리스트·그래프 실행 없이 전체 입력 보기')
     .option('--if-ready', '준비되지 않았으면 사유를 출력하고 성공으로 건너뛴다')
     .option('--json', '결과 한 줄 JSON(stdout) · 사람 줄은 stderr')
-    .action(async (o: { version: string; dryRun?: boolean; ifReady?: boolean; json?: boolean }) => {
+    .action(async (o: { version: string; cutCommit?: string; dryRun?: boolean; ifReady?: boolean; json?: boolean }) => {
       if (o.ifReady && !o.dryRun) {
         try {
           const outcome = await runReleaseIfReady(o.version, {
             ledgerRoot: releaseRunDeps.ledgerRoot,
             readiness: (version, options) => releaseReadiness(version, { ledgerRoot: releaseRunDeps.ledgerRoot, checklist: releaseRunDeps.checklist, ...options }),
-            run: () => runUnattendedRelease({ version: o.version }, releaseRunDeps),
+            run: () => runUnattendedRelease({ version: o.version, cutCommit: o.cutCommit }, releaseRunDeps),
           });
           if (outcome.skipped) {
             if (o.json) await writeStdoutJson(`${JSON.stringify(outcome)}\n`);
@@ -707,7 +720,7 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
         return;
       }
       await jsonAction(o.json, async (log) => {
-        const result = await runUnattendedRelease({ version: o.version, dryRun: o.dryRun }, releaseRunDeps);
+        const result = await runUnattendedRelease({ version: o.version, dryRun: o.dryRun, cutCommit: o.cutCommit }, releaseRunDeps);
         log(`${result.dryRun ? '· 드라이런' : '▶ 릴리스 루프'} ${result.input.version} · 입력 ${JSON.stringify(result.input)}`);
         return result;
       }, (r) => r.dryRun || r.state?.status === 'done' || r.state?.status === 'awaiting-approval');

package/src/cli/setup-cli.ts

@@ -5,6 +5,7 @@ import { Command } from 'commander';
 import { formatDoctorReport, registerDoctorCommand, runDoctor, type DoctorOptions, type DoctorReport } from './doctor-cli.js';
 import { applyClaudePluginSetup, planClaudePluginSetup } from './claude-plugin-setup.js';
 import { recommendedSetup } from './setup-recommend.js';
+import { detectSkillCliAuth, type CliAuthStatus } from '../onboarding/cli-auth-status.js';
 import { debug } from '../debug/log.js';
 import { getUserConfig, saveUserConfig, type UserConfig } from '../user-config.js';
 
@@ -22,6 +23,7 @@ type SetupStep = {
 export interface SetupCliDeps extends DoctorOptions {
   runDoctor?: (options: DoctorOptions) => DoctorReport;
   runDoctorFix?: (args: readonly string[]) => Promise<number>;
+  detectSkillCliAuth?: typeof detectSkillCliAuth;
   readFile?: (path: string) => string;
   exists?: (path: string) => boolean;
   homeDir?: () => string;
@@ -142,10 +144,46 @@ export function formatSetupReport(doctor: DoctorReport, steps: SetupStep[], nonI
   ].join('\n');
 }
 
+const CLI_SKILLS = {
+  gh: 'github', gws: 'google-workspace', op: '1password', himalaya: 'himalaya',
+} as const;
+
+function formatCliSkillStatus(status: CliAuthStatus, enabled: boolean, reason?: string): string {
+  return `${status.cli}: found=${status.found ? 'yes' : 'no'} / enabled=${enabled ? 'yes' : 'no'} / ${enabled ? 'enabled' : `skipped (${reason ?? status.skippedReason ?? 'not authenticated'})`}`;
+}
+
+function reportCliSkills(deps: SetupCliDeps, apply: boolean): string[] {
+  const statuses = (deps.detectSkillCliAuth ?? detectSkillCliAuth)();
+  const config = (deps.getUserConfig ?? getUserConfig)();
+  const deny = new Set(config.skills.deny ?? []);
+  const allow = config.skills.allow ?? [];
+  let changed = false;
+  const lines = statuses.map((status) => {
+    const skill = CLI_SKILLS[status.cli];
+    const allowed = allow.length === 0 || allow.some((name) => name.toLowerCase() === skill);
+    if (apply) {
+      if (status.authenticated && allowed && deny.has(skill)) { deny.delete(skill); changed = true; }
+      if (!status.authenticated && !deny.has(skill)) { deny.add(skill); changed = true; }
+    }
+    const enabled = status.authenticated && allowed && !deny.has(skill);
+    return formatCliSkillStatus(status, enabled,
+      status.authenticated && !allowed ? 'excluded by skills.allow' :
+        status.authenticated && !apply && deny.has(skill) ? 'not enabled; run setup to apply' : undefined);
+  });
+  if (apply && changed) (deps.saveUserConfig ?? saveUserConfig)({
+    ...config, skills: { ...config.skills, deny: [...deny] },
+  });
+  return lines;
+}
+
 export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}): void {
   const out = deps.out ?? { log: (value: string) => console.log(value), error: (value: string) => console.error(value) };
   const setExitCode = deps.setExitCode ?? ((code: number) => { process.exitCode = code; });
   const doctorRunner = deps.runDoctor ?? runDoctor;
+  const showCliSkills = (apply: boolean) => {
+    out.log('Setup: CLI skills (public GitHub repository reads remain available without login)');
+    for (const line of reportCliSkills(deps, apply)) out.log(line);
+  };
   const isStdinTty = deps.isStdinTty ?? (() => process.stdin.isTTY === true);
   const prompt = deps.prompt ?? (async (message: string) => {
     const { createInterface } = await import('node:readline/promises');
@@ -161,6 +199,7 @@ export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}):
       const doctor = doctorRunner(deps);
       if (opts.nonInteractive) {
         out.log(formatSetupReport(doctor, setupSteps(deps), true));
+        showCliSkills(false);
         for (const line of recommendedSetup((deps.getUserConfig ?? getUserConfig)())) out.log(line);
         setExitCode(0);
         return;
@@ -183,6 +222,7 @@ export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}):
         }
       }
       out.log(formatSetupReport(doctor, steps, false));
+      showCliSkills(false);
       for (const line of recommendedSetup((deps.getUserConfig ?? getUserConfig)())) out.log(line);
       const accepted = opts.yes || (isStdinTty() && /^(?:y|yes)?$/i.test((await prompt('추천대로 켤까요? [Y/n] '))?.trim() ?? 'n'));
       if (accepted) {
@@ -197,7 +237,9 @@ export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}):
           await doctorProgram.parseAsync([...args], { from: 'user' });
           return exitCode;
         });
-        setExitCode(await runDoctorFix(['doctor', '--fix', '--yes']));
+        const fixCode = await runDoctorFix(['doctor', '--fix', '--yes']);
+        showCliSkills(true);
+        setExitCode(fixCode);
         return;
       }
       setExitCode(0);

package/src/cli/skills-cli.ts

@@ -73,7 +73,23 @@ export function registerConnectCommand(program: Command): void {
 }
 
 export function registerSkillsCommands(program: Command): void {
-  const skills = program.command('skills').description('Check and repair installed skills');
+  const skills = program.command('skills').description('Check, install and repair skills');
+  skills.command('install <pack>')
+    .description('Install a gift skill pack from a code')
+    .option('--code <code>', 'Gift code')
+    .option('--email <address>', 'Email for gift delivery')
+    .option('--agree', 'Agree to email collection and retention')
+    .option('--endpoint <url>', 'Gift API origin (overrides skills.giftEndpoint)')
+    .option('--json', 'Print the install result as JSON')
+    .action(async (pack: string, opts: { code?: string; email?: string; agree?: boolean; endpoint?: string; json?: boolean }) => {
+      const { getUserConfig } = await import('../user-config.js');
+      const { installGiftPack } = await import('../skills/gift-install.js');
+      const result = await installGiftPack({ pack, code: opts.code, email: opts.email, agree: opts.agree,
+        endpoint: opts.endpoint ?? getUserConfig().skills.giftEndpoint });
+      if (opts.json) console.log(JSON.stringify(result));
+      else console.log(result.message);
+      if (!result.ok) process.exitCode = 1;
+    });
   skills.command('sources')
     .description('List every skill folder elanous reads, in order (preset · shared · connected · package)')
     .option('--json', 'JSON output')

package/src/context-bus/claude-hooks-install.ts

@@ -0,0 +1,10 @@
+import { resolve } from 'node:path';
+
+/** Render a Claude Code settings fragment; never touch the user's settings file. */
+export function claudeHooksSettings(repoRoot: string): string {
+  const command = (file: string) => `bash '${resolve(repoRoot, 'scripts/context-hooks', file).replaceAll("'", "'\\''")}'`;
+  return JSON.stringify({ hooks: {
+    Stop: [{ hooks: [{ type: 'command', command: command('claude-stop.sh') }] }],
+    PostToolUse: [{ hooks: [{ type: 'command', command: command('post-tool-use.sh') }] }],
+  } }, null, 2);
+}

package/src/context-bus/context-now-surfaces.ts

@@ -0,0 +1,48 @@
+import { contextNow, type ContextFact, type ContextNowAnswer, type ContextNowDeps } from './context-now.js';
+
+export function readSlashContextNow(args: string[], deps?: ContextNowDeps): ContextNowAnswer {
+  return contextNow({ topic: args.join(' ').trim() }, deps);
+}
+
+function factText(fact: ContextFact): string {
+  switch (fact.kind) {
+    case 'version': return fact.version;
+    case 'cell': return `${fact.id} ${fact.title} (${fact.status})`;
+    case 'decision': return `${fact.id} ${fact.title} (${fact.status})`;
+    case 'seat': return `${fact.seat} ${fact.id ?? ''} ${fact.title ?? ''} (${fact.status})`.trim();
+  }
+}
+
+export function renderTelegramNow(answer: ContextNowAnswer): string {
+  const rows = [
+    ['판', answer.facts.filter(f => f.kind === 'version')],
+    ['칸', answer.facts.filter(f => f.kind === 'cell')],
+    ['결정', answer.facts.filter(f => f.kind === 'decision')],
+    ['자리', answer.facts.filter(f => f.kind === 'seat')],
+  ] as const;
+  const lines = rows.map(([label, facts]) => `${label}: ${facts.length ? facts.map(f => `${factText(f)} — ${f.source}`).join(' · ') : '없음'}`);
+  lines.push(`최근: ${answer.events.length ? answer.events.map(e => `${e.summary} — ${e.source}`).join(' · ') : '없음'}${answer.guide.length ? ` · 안내 ${answer.guide.join(' · ')}` : ''}`);
+  return lines.map(line => line.replace(/\s+/g, ' ').trim()).join('\n');
+}
+
+export function renderTuiNow(answer: ContextNowAnswer): string[] {
+  const rows = [
+    ...answer.facts.map(f => [f.kind, factText(f), f.source]),
+    ...answer.events.map(e => [e.kind, e.summary, e.source]),
+    ...answer.guide.map(guide => ['안내', guide, '']),
+  ];
+  return [
+    `지금${answer.topic ? ` · ${answer.topic}` : ''} (${answer.at})`,
+    '| 종류 | 사실 | 출처 |',
+    '| --- | --- | --- |',
+    ...rows.map(row => `| ${row.map(cell => cell.replaceAll('|', '\\|').replaceAll(/\r?\n/g, ' ')).join(' | ')} |`),
+  ];
+}
+
+export function telegramNowSlash(args: string[], deps?: ContextNowDeps): string {
+  return renderTelegramNow(readSlashContextNow(args, deps));
+}
+
+export function tuiNowSlash(args: string[], deps?: ContextNowDeps): string[] {
+  return renderTuiNow(readSlashContextNow(args, deps));
+}