elanous 0.2.10 → 0.2.12

package/src/cli/pty-drive-cli.ts

@@ -8,6 +8,7 @@ import type { StreamLLMFn } from '../autopilot/llm-control-brain.js';
 import { establishElanousTuiIsolation, elanousTuiSpawnOptions, type ElanousTuiIsolation } from '../self-implement/elanous-tui-spawn.js';
 import { resolveObserveOnlyDecision } from '../self-implement/observe-only.js';
 import { getUserConfig } from '../user-config.js';
+import { verdictForFinalPtyScreen } from './pty-drive-verdict.js';
 import { debug } from '../debug/log.js';
 import { writeHarnessScreen } from '../harness/harness-screen.js';
 import { resolveControlInboxDir } from '../harness/control-inbox.js';
@@ -19,6 +20,7 @@ import { resolvePtyRef } from '../pty-shell/pty-ref.js';
 import { parsePtyWriteActor } from '../pty-shell/pty-write-arbiter.js';
 import { controlDepsForHandle, controlDepsForRemoteRef, runPtyControlLoop } from '../autopilot/pty-control-loop.js';
 import { createLlmControlBrain } from '../autopilot/llm-control-brain.js';
+import { withDriveJail } from './drive-input-jail.js';
 
 /** `pty list` 한 줄의 상태 컬럼 위치 — `<id>\t<kind>\t<nickname>\t<scope>\t<state>\t<extra…>`.
  *  ⚠️⛔ **회귀 테스트의 fixture 는 실측 형식의 *스냅샷*이지 형식 변경 감지기가 아니다**(리뷰 지적 · 과장 정정) —
@@ -166,6 +168,8 @@ export interface PtyDriveOpts {
   readonly maxSteps?: number;
   readonly pollMs?: number;
   readonly model?: string;
+  /** DRIVE-JAIL: brain inputs naming paths outside this directory are not sent to the PTY. */
+  readonly jailHome?: string;
   /** Enable the child SelfImplement observation-only override at boot. */
   readonly observeOnly?: boolean;
   readonly cwd?: string;
@@ -213,6 +217,8 @@ const liveAttachDriveDeps: PtyAttachDriveDeps = {
 
 export interface PtyAttachDriveOpts {
   readonly goal: string;
+  /** DRIVE-JAIL: brain inputs naming paths outside this directory are not sent to the PTY. */
+  readonly jailHome?: string;
   readonly maxSteps?: number;
   readonly pollMs?: number;
   readonly model?: string;
@@ -250,8 +256,11 @@ export async function runPtyAttachDrive(ref: string, opts: PtyAttachDriveOpts, d
     ...(opts.stream ? { stream: opts.stream } : {}),
     onDecision: (decision) => out(decision.action === 'input' ? `  → input (${decision.text.length} chars)\n` : decision.action === 'done' ? `  → done (${decision.reason})\n` : '  · wait\n'),
   });
+  const controlDeps = withDriveJail(handle ? deps.controlDepsForHandle(handle) : deps.controlDepsForRemoteRef?.(id, { actor }) ?? (() => { throw new Error('pty auto: remote control dependencies unavailable'); })(), opts.jailHome, (event, data) => deps.log(event, data));
+  const inputHistory: string[] = [];
   const result = await deps.runControlLoop(brain, {
-    ...(handle ? deps.controlDepsForHandle(handle) : deps.controlDepsForRemoteRef?.(id, { actor }) ?? (() => { throw new Error('pty auto: remote control dependencies unavailable'); })()),
+    ...controlDeps,
+    inject: (text: string) => { inputHistory.push(text); return controlDeps.inject(text); },
     subjectPtyId: id,
     canReceiveInput: true,
   }, {
@@ -260,7 +269,14 @@ export async function runPtyAttachDrive(ref: string, opts: PtyAttachDriveOpts, d
   });
   deps.log('attach-finish', { id, termination: result.termination.kind, steps: result.steps });
   out(`\n▸ ${result.termination.kind} (${result.steps} steps)\n`);
-  return { exitCode: result.termination.kind === 'success' ? 0 : 1, message: `pty auto: ${id} ${result.termination.kind}` };
+  if (result.termination.kind !== 'success') return { exitCode: 1, message: `pty auto: ${id} ${result.termination.kind}` };
+  // DRIVE-OK: «done» from the brain still has to show on the final screen.
+  let screen = '';
+  try { screen = String(await controlDeps.observe()); } catch { /* unreadable → unverified */ }
+  const verdict = verdictForFinalPtyScreen({ screen, inputHistory, exitCode: null });
+  out(`▸ verdict: ${verdict.kind} — ${verdict.reason}\n`);
+  deps.log('attach-verdict', { id, kind: verdict.kind, reason: verdict.reason.slice(0, 200) });
+  return { exitCode: verdict.kind === 'success' ? 0 : 1, message: `pty auto: ${id} ${verdict.kind}` };
 }
 
 export type PtyAttachDriveRunner = (start: () => Promise<{ readonly exitCode: number; readonly message: string }>) => Promise<void>;
@@ -273,14 +289,15 @@ export function registerPtyAttachDriveCommand(pty: Command, run: PtyAttachDriveR
     .option('--poll-ms <ms>', 'screen polling interval in milliseconds', '800')
     .option('--model <model>', 'LLM model override')
     .option('--actor <who>', 'remote input actor (human or agent)', 'human')
+    .option('--jail-home <dir>', 'DRIVE-JAIL: do not send inputs naming paths outside this directory')
     .description('Drive an existing agent-owned PTY without spawning a terminal')
-    .action((ref: string, opts: { goal: string; maxSteps: string; pollMs: string; model?: string; actor?: string }) => run(async () => {
+    .action((ref: string, opts: { goal: string; maxSteps: string; pollMs: string; model?: string; actor?: string; jailHome?: string }) => run(async () => {
       const maxSteps = Number(opts.maxSteps);
       const pollMs = Number(opts.pollMs);
       const actor = parsePtyWriteActor(opts.actor);
       if (!actor) return { exitCode: 2, message: 'pty auto: --actor must be human or agent' };
       return Number.isInteger(maxSteps) && maxSteps >= 1 && Number.isInteger(pollMs) && pollMs >= 0
-        ? runPtyAttachDrive(ref, { goal: opts.goal, maxSteps, pollMs, actor, ...(opts.model ? { model: opts.model } : {}) }, deps)
+        ? runPtyAttachDrive(ref, { goal: opts.goal, maxSteps, pollMs, actor, ...(opts.model ? { model: opts.model } : {}), ...(opts.jailHome ? { jailHome: opts.jailHome } : {}) }, deps)
         : { exitCode: 2, message: 'pty auto: --max-steps must be an integer >= 1 and --poll-ms must be an integer >= 0' };
     }));
 }
@@ -299,6 +316,8 @@ export interface DriveCliOpts {
   json?: boolean;
   /** Existing PTY ref. Absent = spawn a new shell PTY (the default). */
   attach?: string;
+  /** DRIVE-JAIL boundary directory. */
+  jailHome?: string;
 }
 
 export interface DriveCliDeps {
@@ -357,6 +376,7 @@ export async function runDriveCliCommand(command: string | undefined, opts: Driv
       attached = await runAttach(attach, {
         goal: opts.goal, maxSteps, pollMs,
         ...(opts.model ? { model: opts.model } : {}),
+        ...(opts.jailHome ? { jailHome: opts.jailHome } : {}),
       });
     } catch (err) {
       writeError(`drive: ${err instanceof Error ? err.message : String(err)}\n`);
@@ -379,6 +399,7 @@ export async function runDriveCliCommand(command: string | undefined, opts: Driv
       command, goal: opts.goal, maxSteps, pollMs,
       ...(opts.model ? { model: opts.model } : {}),
       ...(opts.cwd ? { cwd: opts.cwd } : {}),
+      ...(opts.jailHome ? { jailHome: opts.jailHome } : {}),
     }));
   } catch (err) {
     writeError(`drive: ${err instanceof Error ? err.message : String(err)}\n`);
@@ -827,7 +848,10 @@ async function runPtyDriveInner(opts: PtyDriveOpts): Promise<{ exitCode: number
       writeScreen(screenKey, await h!.renderScreen(), process.env);
       delivered = true;
     } : undefined;
-    const deps = controlDepsForHandle(h);
+    const rawDeps = withDriveJail(controlDepsForHandle(h), opts.jailHome, (event, data) => debug.log('pty.drive', event, data));
+    // DRIVE-OK: keep what we typed so the final verdict can tell child output from echoed input.
+    const inputHistory: string[] = [];
+    const deps = { ...rawDeps, inject: (text: string) => { inputHistory.push(text); return rawDeps.inject(text); } };
     const autoAssist = opts.elanous ? getUserConfig().tools.selfImplement.autoAssist : undefined;
     const observe = opts.elanous ? async () => {
       const frame = await deps.observe();
@@ -851,12 +875,22 @@ async function runPtyDriveInner(opts: PtyDriveOpts): Promise<{ exitCode: number
     if (screen.trim()) out(`▸ 최종 화면:\n${screen}\n`);
     const childExit = h.exitCode;
     const alive = h.isAlive();
-    const exitCode = childExit !== null
+    // DRIVE-OK (10-03 X1: every step failed yet drive said ok): the brain's «done» is not proof —
+    // judge the final screen. Plain drives take the verdict as the exit; elanous-TUI drives only observe it.
+    const verdict = result.termination.kind === 'success' ? verdictForFinalPtyScreen({ screen, inputHistory, exitCode: childExit }) : null;
+    if (verdict) {
+      out(`▸ verdict: ${verdict.kind} — ${verdict.reason}\n`);
+      debug.log('pty.drive', 'verdict', { kind: verdict.kind, reason: verdict.reason.slice(0, 200), enforced: !opts.elanous });
+    }
+    const verdictFails = !!verdict && !opts.elanous && verdict.kind !== 'success';
+    const baseExit = childExit !== null
       ? childExit
       : alive
         ? result.termination.kind === 'success' ? 0 : 1
         : null;
-    debug.log('pty.drive', 'exit-resolve', { alive, childExit, exitCode, termination: result.termination.kind });
+    // The verdict only withholds a success: nonzero and unknown (null) exits keep their meaning.
+    const exitCode = baseExit === 0 && verdictFails ? 1 : baseExit;
+    debug.log('pty.drive', 'exit-resolve', { alive, childExit, exitCode, termination: result.termination.kind, ...(verdict ? { verdict: verdict.kind } : {}) });
     if (exitCode === null) out('▸ child exited without an exit code; reporting failure at the process boundary (exit 1)\n');
     return { exitCode };
   } finally {

package/src/cli/pty-drive-verdict.ts

@@ -0,0 +1,40 @@
+// Final-screen evidence is independent of the controller's "done" declaration.
+export type PtyDriveVerdict =
+  | { readonly kind: 'done-but-failed'; readonly reason: string; readonly evidence: null }
+  | { readonly kind: 'success'; readonly reason: string; readonly evidence: string }
+  | { readonly kind: 'success-unverified'; readonly reason: string; readonly evidence: null };
+
+export interface FinalPtyEvidence {
+  readonly screen: string;
+  readonly inputHistory: readonly string[];
+  readonly exitCode: number | null;
+}
+
+// eslint-disable-next-line no-control-regex
+const ANSI = /\x1b(?:\][^\x07\x1b]*(?:\x07|\x1b\\)|\[[0-?]*[ -/]*[@-~]|[@-Z\\-_])/g;
+const FAILURE = /(?:\bcommand not found\b|\bnot recognized as (?:an internal or external )?command\b|\bno such file or directory\b|\b(?:error|fatal|exception)\s*:|\berror TS\d+\b|\b(?:build failed|tests? failed|test suite failed|failed to|compilation failed|permission denied)\b|(?:^|\s)[1-9]\d*\s+fail(?:ed|ing|ures?)?\b|\b(?:exit(?:ed)? (?:with )?(?:code |status )?)[1-9]\d*\b|\bnpm ERR!\b|^\s*(?:FAIL\b|✗|❌))/i;
+const SUCCESS = /(?:\b[1-9]\d*\s+(?:pass|passed)\b|\btests?:\s*[1-9]\d*\s+passed\b|\bbuild successful\b|\b(?:successfully|succeeded)\b|\bGOAL-COMPLETE\b)/i;
+
+/** Failure wins over success; an exit code of zero is not itself proof of the goal. */
+export function verdictForFinalPtyScreen({ screen, inputHistory, exitCode }: FinalPtyEvidence): PtyDriveVerdict {
+  if (exitCode !== null && exitCode !== 0) {
+    return { kind: 'done-but-failed', reason: `child exit code ${exitCode}`, evidence: null };
+  }
+  // The PTY may echo commands (including fabricated success markers). Only child output is evidence.
+  const inputs = new Set(inputHistory.flatMap((input) => input.replace(/\r/g, '\n').split('\n').map((line) => line.trim()).filter(Boolean)));
+  // An echo/printf command prints its operand; that output is not independent proof of anything
+  // (`echo "7 pass"` must not count as passing tests — review round 2).
+  const echoedLiterals = new Set([...inputs].flatMap((input) => {
+    const match = /^(?:echo(?:\s+-[neE]+)?|printf)\s+(.+)$/i.exec(input);
+    if (!match) return [];
+    const operand = match[1]!.trim().replace(/^(['"])(.*)\1$/s, '$2').replace(/\\n$/, '').trim();
+    return operand ? [operand] : [];
+  }));
+  const lines = screen.replace(ANSI, '').replace(/\r/g, '\n').split('\n')
+    .map((line) => line.trim()).filter((line) => line && !inputs.has(line) && !echoedLiterals.has(line) && ![...inputs].some((input) => line.endsWith(`$ ${input}`) || line.endsWith(`> ${input}`)));
+  const failure = lines.find((line) => FAILURE.test(line));
+  if (failure) return { kind: 'done-but-failed', reason: failure, evidence: null };
+  const evidence = lines.find((line) => SUCCESS.test(line) && !/\b0\s+(?:pass|passed)\b/i.test(line));
+  if (evidence) return { kind: 'success', reason: 'final PTY screen has success evidence', evidence };
+  return { kind: 'success-unverified', reason: 'final PTY screen has no success evidence', evidence: null };
+}

package/src/cli/release-cli.ts

@@ -5,7 +5,8 @@
 //   elanous release tag --version <x.y.z> --source <commit> [--yes]
 //   elanous release verify  [--version <x.y.z>]
 //   elanous release notes   --from <ref> [--to <ref>]
-//   elanous release run     --version <x.y.z> [--dry-run] [--json] [--if-ready]
+//   elanous release run     --version <x.y.z> [--cut-commit <sha>] [--dry-run] [--json] [--if-ready]
+//   elanous release cut-branch --version <x.y.z> --base <sha> --pick <sha>... [--dry-run]
 //
 // 🩸 계기(2026-09-25 v0.1.0 첫 공개): 손으로 밟은 절차에서 둘을 빠뜨릴 뻔했다 — 공개본 git 커밋(판 커밋이 공개본 커밋이 된다) ·
 //    PWA 빌드(빌드 산출은 공개본에 안 실린다 → 빠뜨리면 «웹 화면 없는 판»). 절차를 명령으로 굳힌다.
@@ -25,10 +26,12 @@ import { envLiteral } from '../platform/env-literal.js';
 import { userConfigPath } from '../user-config.js';
 import { addItem, claimItem, decodeClaimHistoryEntry, devVersion, listChecklist, ownerMatches, parseOwner, parityGap, removeItem, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus, type ChecklistDisposition, type ChecklistKind } from '../release-loop/checklist.js';
 import * as features from '../release-loop/feature-store.js';
+import { landedButYellow, type MergedChecklistPr } from '../release-loop/landed-but-yellow.js';
 import { formatSchedule, getSchedule, listSchedules, setSchedule } from '../release-loop/release-schedule.js';
 import { writeStdoutJson } from './stdout-json.js';
 import { CliUserError } from './cli-user-error.js';
 import { runUnattendedRelease, type UnattendedReleaseDeps } from '../../scripts/release-loop/unattended-release.js';
+import { cutReleaseBranch } from '../../scripts/release-loop/cut-branch.js';
 import { releaseReadiness } from '../../scripts/release-loop/release-readiness.js';
 import { runReleaseIfReady } from './release-run-if-ready.js';
 
@@ -497,7 +500,13 @@ async function checklistOutput(v: string, codenames: Record<string, string>, mod
   }
 }
 
-export function registerReleaseCommands(program: Command, releaseRunDeps: UnattendedReleaseDeps = {}): void {
+export interface LandedButYellowDeps {
+  run?: Runner;
+  checklist?: typeof listChecklist;
+  now?: () => Date;
+}
+
+export function registerReleaseCommands(program: Command, releaseRunDeps: UnattendedReleaseDeps = {}, landedDeps: LandedButYellowDeps = {}): void {
   const release = program.command('release').description('공개 배포 한 판 — prepare(로컬) → publish(--yes) → verify (docs/manual/MANUAL-versioning-and-release-2026-09-25.md)');
   const schedule = release.command('schedule').description('판별 컷·착지 마감 조회·갱신');
   const scheduleLedgerRoot = () => releaseRunDeps.ledgerRoot ?? releaseLedgerRoot();
@@ -536,10 +545,43 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
     const { version, codenames, json } = context(cmd);
     await checklistOutput(version, codenames, 'status', json, opts.owner);
   });
+  withContext(checklist.command('landed-but-yellow').description('병합 PR 이 있지만 노랑·빨강인 칸(읽기 전용)'))
+    .option('--owner <owner>', '자리 또는 하위 자리로 거르기')
+    .action(async (opts: { owner?: string }, cmd: Command) => {
+      const { version, json } = context(cmd);
+      try {
+        if (opts.owner !== undefined) parseOwner(opts.owner);
+        const since = new Date((landedDeps.now ?? (() => new Date()))().getTime() - 7 * 86_400_000).toISOString().slice(0, 10);
+        const raw = must((landedDeps.run ?? defaultRunner)('gh', ['pr', 'list', '--state', 'merged', '--search', `merged:>=${since}`, '--limit', '400', '--json', 'number,title,body,mergedAt'], process.cwd()), '병합 PR 조회(gh)');
+        const prs = JSON.parse(raw) as MergedChecklistPr[];
+        if (!Array.isArray(prs)) throw new Error('병합 PR 조회(gh): 배열이 아니다');
+        const items = (landedDeps.checklist ?? listChecklist)(version).items;
+        const rows = landedButYellow(items, prs, { owner: opts.owner });
+        if (json) await writeStdoutJson(`${JSON.stringify(rows)}\n`);
+        else {
+          const updatedAtById = new Map(items.map((item) => [item.id, item.updatedAt]));
+          const date = (iso: string) => {
+            const parts = new Intl.DateTimeFormat('en-US', { timeZone: 'Asia/Seoul', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', hourCycle: 'h23' }).formatToParts(new Date(iso));
+            const part = (name: string) => parts.find((entry) => entry.type === name)?.value;
+            return `${part('month')}-${part('day')} ${part('hour')}:${part('minute')}`;
+          };
+          for (const row of rows) {
+            const icon = row.status === 'yellow' ? '🟡' : '🔴';
+            console.log(`${row.id} ${row.owner ?? '-'} ${icon} ← ${row.prs.map((pr, i) => `#${pr.number} «${pr.title}» (${date(pr.mergedAt)} · 근거에 ${row.alreadyInEvidence[i] ? '있음' : '없음'}${pr.mergedAt > (updatedAtById.get(row.id) ?? '') ? ' · 칸보다 새것' : ''})`).join(' · ')}`);
+          }
+          console.log(`${rows.length}칸 · 그중 근거에 없는 PR 이 있는 칸 ${rows.filter((row) => row.alreadyInEvidence.includes(false)).length}`);
+        }
+        if (prs.length >= 400) console.error('⚠ 병합 PR 400개 상한: 목록이 잘렸을 수 있다');
+      } catch (error) {
+        console.error(`⛔ ${error instanceof Error ? error.message : String(error)}`);
+        process.exitCode = 1;
+      }
+    });
   withContext(checklist.command('add <id> <title>').description('칸 추가')).option('--owner <owner>', '담당').option('--kind <kind>', 'screen = 다섯 화면 짝 칸 · 근거에 짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 … 한 줄')
-    .action((id: string, title: string, opts: { owner?: string; kind?: string }, cmd: Command) => {
+    .option('--allow-duplicate-id', '다른 판에 같은 id 가 있어도 경고 후 추가')
+    .action((id: string, title: string, opts: { owner?: string; kind?: string; allowDuplicateId?: boolean }, cmd: Command) => {
     const { version, json } = context(cmd);
-    const data = addItem(version, { id, title, ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}) });
+    const data = addItem(version, { id, title, ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}) }, { allowDuplicateId: opts.allowDuplicateId });
     if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 추가`);
   });
   withContext(checklist.command('set <id>').description('칸 상태·근거·담당·처분 갱신'))
@@ -579,11 +621,11 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
     });
   const actor = () => process.env.ELANOUS_TRACK || 'cli';
   withContext(checklist.command('move <id>').description('칸을 한 트랜잭션으로 다른 판에 옮긴다'))
-    .requiredOption('--from <v>', '현재 판').requiredOption('--to <v>', '새 판')
-    .action((id: string, opts: { from: string; to: string }, cmd: Command) => {
+    .requiredOption('--from <v>', '현재 판').requiredOption('--to <v>', '새 판').option('--reason <reason>', '이동 사유')
+    .action((id: string, opts: { from: string; to: string; reason?: string }, cmd: Command) => {
       const { codenames, json } = context(cmd);
       const from = checklistVersion(opts.from, codenames), to = checklistVersion(opts.to, codenames);
-      features.move(id, from, to, actor());
+      features.move(id, from, to, actor(), undefined, undefined, opts.reason);
       if (json) console.log(JSON.stringify(listChecklist(to))); else console.log(`✅ ${id} ${from} → ${to}`);
     });
   withContext(checklist.command('retitle <id> <title>').description('칸 제목 수정')).action((id: string, title: string, _opts: unknown, cmd: Command) => {
@@ -675,19 +717,30 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
       const { draftReleaseNotes, readLandedCommits, renderReleaseNotes } = await import('../../scripts/release-notes.js');
       console.log(renderReleaseNotes(draftReleaseNotes(readLandedCommits(o.from, o.to), o.from, o.to)));
     });
+  release.command('cut-branch')
+    .description('원래 컷에 main 의 수리 커밋만 얹은 release/<v> 가지를 만들고 push')
+    .requiredOption('--version <v>', '릴리스 판(x.y.z)')
+    .requiredOption('--base <sha>', '원래 컷 SHA')
+    .requiredOption('--pick <sha...>', '차례로 얹을 main 커밋 SHA')
+    .option('--dry-run', '가지·worktree·push 없이 계획만 출력')
+    .option('--json', '결과 한 줄 JSON(stdout)')
+    .action(async (o: { version: string; base: string; pick: string[]; dryRun?: boolean; json?: boolean }) => {
+      await jsonAction(o.json, async (log) => cutReleaseBranch({ ...o, log }), () => true);
+    });
   release.command('run')
     .description('릴리스 루프 실행 — 원장 직전 판과 release.loop 설정으로 그래프 입력 구성 · --dry-run 은 입력만 출력')
     .requiredOption('--version <v>', '공개할 판(x.y.z)')
+    .option('--cut-commit <sha>', 'origin/main HEAD 대신 컷으로 쓸 커밋')
     .option('--dry-run', '체크리스트·그래프 실행 없이 전체 입력 보기')
     .option('--if-ready', '준비되지 않았으면 사유를 출력하고 성공으로 건너뛴다')
     .option('--json', '결과 한 줄 JSON(stdout) · 사람 줄은 stderr')
-    .action(async (o: { version: string; dryRun?: boolean; ifReady?: boolean; json?: boolean }) => {
+    .action(async (o: { version: string; cutCommit?: string; dryRun?: boolean; ifReady?: boolean; json?: boolean }) => {
       if (o.ifReady && !o.dryRun) {
         try {
           const outcome = await runReleaseIfReady(o.version, {
             ledgerRoot: releaseRunDeps.ledgerRoot,
             readiness: (version, options) => releaseReadiness(version, { ledgerRoot: releaseRunDeps.ledgerRoot, checklist: releaseRunDeps.checklist, ...options }),
-            run: () => runUnattendedRelease({ version: o.version }, releaseRunDeps),
+            run: () => runUnattendedRelease({ version: o.version, cutCommit: o.cutCommit }, releaseRunDeps),
           });
           if (outcome.skipped) {
             if (o.json) await writeStdoutJson(`${JSON.stringify(outcome)}\n`);
@@ -707,7 +760,7 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
         return;
       }
       await jsonAction(o.json, async (log) => {
-        const result = await runUnattendedRelease({ version: o.version, dryRun: o.dryRun }, releaseRunDeps);
+        const result = await runUnattendedRelease({ version: o.version, dryRun: o.dryRun, cutCommit: o.cutCommit }, releaseRunDeps);
         log(`${result.dryRun ? '· 드라이런' : '▶ 릴리스 루프'} ${result.input.version} · 입력 ${JSON.stringify(result.input)}`);
         return result;
       }, (r) => r.dryRun || r.state?.status === 'done' || r.state?.status === 'awaiting-approval');

package/src/cli/setup-cli.ts

@@ -5,6 +5,7 @@ import { Command } from 'commander';
 import { formatDoctorReport, registerDoctorCommand, runDoctor, type DoctorOptions, type DoctorReport } from './doctor-cli.js';
 import { applyClaudePluginSetup, planClaudePluginSetup } from './claude-plugin-setup.js';
 import { recommendedSetup } from './setup-recommend.js';
+import { detectSkillCliAuth, type CliAuthStatus } from '../onboarding/cli-auth-status.js';
 import { debug } from '../debug/log.js';
 import { getUserConfig, saveUserConfig, type UserConfig } from '../user-config.js';
 
@@ -22,6 +23,7 @@ type SetupStep = {
 export interface SetupCliDeps extends DoctorOptions {
   runDoctor?: (options: DoctorOptions) => DoctorReport;
   runDoctorFix?: (args: readonly string[]) => Promise<number>;
+  detectSkillCliAuth?: typeof detectSkillCliAuth;
   readFile?: (path: string) => string;
   exists?: (path: string) => boolean;
   homeDir?: () => string;
@@ -142,10 +144,46 @@ export function formatSetupReport(doctor: DoctorReport, steps: SetupStep[], nonI
   ].join('\n');
 }
 
+const CLI_SKILLS = {
+  gh: 'github', gws: 'google-workspace', op: '1password', himalaya: 'himalaya',
+} as const;
+
+function formatCliSkillStatus(status: CliAuthStatus, enabled: boolean, reason?: string): string {
+  return `${status.cli}: found=${status.found ? 'yes' : 'no'} / enabled=${enabled ? 'yes' : 'no'} / ${enabled ? 'enabled' : `skipped (${reason ?? status.skippedReason ?? 'not authenticated'})`}`;
+}
+
+function reportCliSkills(deps: SetupCliDeps, apply: boolean): string[] {
+  const statuses = (deps.detectSkillCliAuth ?? detectSkillCliAuth)();
+  const config = (deps.getUserConfig ?? getUserConfig)();
+  const deny = new Set(config.skills.deny ?? []);
+  const allow = config.skills.allow ?? [];
+  let changed = false;
+  const lines = statuses.map((status) => {
+    const skill = CLI_SKILLS[status.cli];
+    const allowed = allow.length === 0 || allow.some((name) => name.toLowerCase() === skill);
+    if (apply) {
+      if (status.authenticated && allowed && deny.has(skill)) { deny.delete(skill); changed = true; }
+      if (!status.authenticated && !deny.has(skill)) { deny.add(skill); changed = true; }
+    }
+    const enabled = status.authenticated && allowed && !deny.has(skill);
+    return formatCliSkillStatus(status, enabled,
+      status.authenticated && !allowed ? 'excluded by skills.allow' :
+        status.authenticated && !apply && deny.has(skill) ? 'not enabled; run setup to apply' : undefined);
+  });
+  if (apply && changed) (deps.saveUserConfig ?? saveUserConfig)({
+    ...config, skills: { ...config.skills, deny: [...deny] },
+  });
+  return lines;
+}
+
 export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}): void {
   const out = deps.out ?? { log: (value: string) => console.log(value), error: (value: string) => console.error(value) };
   const setExitCode = deps.setExitCode ?? ((code: number) => { process.exitCode = code; });
   const doctorRunner = deps.runDoctor ?? runDoctor;
+  const showCliSkills = (apply: boolean) => {
+    out.log('Setup: CLI skills (public GitHub repository reads remain available without login)');
+    for (const line of reportCliSkills(deps, apply)) out.log(line);
+  };
   const isStdinTty = deps.isStdinTty ?? (() => process.stdin.isTTY === true);
   const prompt = deps.prompt ?? (async (message: string) => {
     const { createInterface } = await import('node:readline/promises');
@@ -161,6 +199,7 @@ export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}):
       const doctor = doctorRunner(deps);
       if (opts.nonInteractive) {
         out.log(formatSetupReport(doctor, setupSteps(deps), true));
+        showCliSkills(false);
         for (const line of recommendedSetup((deps.getUserConfig ?? getUserConfig)())) out.log(line);
         setExitCode(0);
         return;
@@ -183,6 +222,7 @@ export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}):
         }
       }
       out.log(formatSetupReport(doctor, steps, false));
+      showCliSkills(false);
       for (const line of recommendedSetup((deps.getUserConfig ?? getUserConfig)())) out.log(line);
       const accepted = opts.yes || (isStdinTty() && /^(?:y|yes)?$/i.test((await prompt('추천대로 켤까요? [Y/n] '))?.trim() ?? 'n'));
       if (accepted) {
@@ -197,7 +237,9 @@ export function registerSetupCommand(program: Command, deps: SetupCliDeps = {}):
           await doctorProgram.parseAsync([...args], { from: 'user' });
           return exitCode;
         });
-        setExitCode(await runDoctorFix(['doctor', '--fix', '--yes']));
+        const fixCode = await runDoctorFix(['doctor', '--fix', '--yes']);
+        showCliSkills(true);
+        setExitCode(fixCode);
         return;
       }
       setExitCode(0);

package/src/cli/skills-cli.ts

@@ -73,7 +73,23 @@ export function registerConnectCommand(program: Command): void {
 }
 
 export function registerSkillsCommands(program: Command): void {
-  const skills = program.command('skills').description('Check and repair installed skills');
+  const skills = program.command('skills').description('Check, install and repair skills');
+  skills.command('install <pack>')
+    .description('Install a gift skill pack from a code')
+    .option('--code <code>', 'Gift code')
+    .option('--email <address>', 'Email for gift delivery')
+    .option('--agree', 'Agree to email collection and retention')
+    .option('--endpoint <url>', 'Gift API origin (overrides skills.giftEndpoint)')
+    .option('--json', 'Print the install result as JSON')
+    .action(async (pack: string, opts: { code?: string; email?: string; agree?: boolean; endpoint?: string; json?: boolean }) => {
+      const { getUserConfig } = await import('../user-config.js');
+      const { installGiftPack } = await import('../skills/gift-install.js');
+      const result = await installGiftPack({ pack, code: opts.code, email: opts.email, agree: opts.agree,
+        endpoint: opts.endpoint ?? getUserConfig().skills.giftEndpoint });
+      if (opts.json) console.log(JSON.stringify(result));
+      else console.log(result.message);
+      if (!result.ok) process.exitCode = 1;
+    });
   skills.command('sources')
     .description('List every skill folder elanous reads, in order (preset · shared · connected · package)')
     .option('--json', 'JSON output')

package/src/context-bus/claude-hooks-install.ts

@@ -0,0 +1,10 @@
+import { resolve } from 'node:path';
+
+/** Render a Claude Code settings fragment; never touch the user's settings file. */
+export function claudeHooksSettings(repoRoot: string): string {
+  const command = (file: string) => `bash '${resolve(repoRoot, 'scripts/context-hooks', file).replaceAll("'", "'\\''")}'`;
+  return JSON.stringify({ hooks: {
+    Stop: [{ hooks: [{ type: 'command', command: command('claude-stop.sh') }] }],
+    PostToolUse: [{ hooks: [{ type: 'command', command: command('post-tool-use.sh') }] }],
+  } }, null, 2);
+}

package/src/context-bus/context-now-surfaces.ts

@@ -0,0 +1,65 @@
+import { contextNow, type ContextFact, type ContextNowAnswer, type ContextNowDeps } from './context-now.js';
+
+export function readSlashContextNow(args: string[], deps?: ContextNowDeps): ContextNowAnswer {
+  return contextNow({ topic: args.join(' ').trim() }, deps);
+}
+
+export function seatsNowLine(answer: ContextNowAnswer, now: number): string | null {
+  const seats = [ ['OP', 'COO'], ['MK', 'CMO'], ['TC', 'CTO'], ['UX', 'CXO'] ] as const;
+  const facts = answer.facts.filter(fact => fact.kind === 'seat');
+  const lines = seats.flatMap(([seat, label]) => {
+    const latest = facts.filter(fact => fact.seat === seat)
+      .sort((a, b) => b.at.localeCompare(a.at))[0];
+    if (!latest) return [];
+    const minutes = Math.max(0, Math.floor((now - Date.parse(latest.at)) / 60_000));
+    const age = minutes >= 24 * 60 ? '하루 넘음'
+      : minutes >= 60 ? `${Math.floor(minutes / 60)}시간 전`
+      : minutes > 0 ? `${minutes}분 전` : '방금';
+    const title = latest.title?.split(/\r?\n/, 1)[0]?.trim();
+    return [`${label} ${title ? title.slice(0, 20) : latest.status} · ${age}`];
+  });
+  return lines.length ? `지금 자리들: ${lines.join(' | ')}` : null;
+}
+
+function factText(fact: ContextFact): string {
+  switch (fact.kind) {
+    case 'version': return fact.version;
+    case 'cell': return `${fact.id} ${fact.title} (${fact.status})`;
+    case 'decision': return `${fact.id} ${fact.title} (${fact.status})`;
+    case 'seat': return `${fact.seat} ${fact.id ?? ''} ${fact.title ?? ''} (${fact.status})`.trim();
+  }
+}
+
+export function renderTelegramNow(answer: ContextNowAnswer): string {
+  const rows = [
+    ['판', answer.facts.filter(f => f.kind === 'version')],
+    ['칸', answer.facts.filter(f => f.kind === 'cell')],
+    ['결정', answer.facts.filter(f => f.kind === 'decision')],
+    ['자리', answer.facts.filter(f => f.kind === 'seat')],
+  ] as const;
+  const lines = rows.map(([label, facts]) => `${label}: ${facts.length ? facts.map(f => `${factText(f)} — ${f.source}`).join(' · ') : '없음'}`);
+  lines.push(`최근: ${answer.events.length ? answer.events.map(e => `${e.summary} — ${e.source}`).join(' · ') : '없음'}${answer.guide.length ? ` · 안내 ${answer.guide.join(' · ')}` : ''}`);
+  return lines.map(line => line.replace(/\s+/g, ' ').trim()).join('\n');
+}
+
+export function renderTuiNow(answer: ContextNowAnswer): string[] {
+  const rows = [
+    ...answer.facts.map(f => [f.kind, factText(f), f.source]),
+    ...answer.events.map(e => [e.kind, e.summary, e.source]),
+    ...answer.guide.map(guide => ['안내', guide, '']),
+  ];
+  return [
+    `지금${answer.topic ? ` · ${answer.topic}` : ''} (${answer.at})`,
+    '| 종류 | 사실 | 출처 |',
+    '| --- | --- | --- |',
+    ...rows.map(row => `| ${row.map(cell => cell.replaceAll('|', '\\|').replaceAll(/\r?\n/g, ' ')).join(' | ')} |`),
+  ];
+}
+
+export function telegramNowSlash(args: string[], deps?: ContextNowDeps): string {
+  return renderTelegramNow(readSlashContextNow(args, deps));
+}
+
+export function tuiNowSlash(args: string[], deps?: ContextNowDeps): string[] {
+  return renderTuiNow(readSlashContextNow(args, deps));
+}

package/src/context-bus/context-now.ts

@@ -0,0 +1,104 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { debug, redactSecretText } from '../debug/log.js';
+import { DecisionLedger, type DecisionEntry } from '../decisions/decision-ledger.js';
+import { listChecklist, devVersion, type Checklist } from '../release-loop/checklist.js';
+import { effectiveInstanceRoot } from '../instance/resolve.js';
+import { seatDay, seatLedgerPath, type SeatEntry } from '../seat-loop/seat-loop.js';
+import { listCoordEvents, type CoordEvent } from './coord-events.js';
+
+export type ContextFact =
+  | { kind: 'version'; version: string; source: string }
+  | { kind: 'cell'; version: string; id: string; title: string; status: string; owner: string | null; source: string }
+  | { kind: 'decision'; id: string; title: string; status: string; dueAt: string | null; source: string }
+  | { kind: 'seat'; seat: string; at: string; status: string; id: string | null; title: string | null; source: string };
+export type ContextEvent = { at: string; kind: string; summary: string; source: string };
+export type ContextNowAnswer = { at: string; topic: string | null; facts: ContextFact[]; events: ContextEvent[]; guide: string[] };
+
+export interface ContextNowDeps {
+  now?: () => Date;
+  version?: () => string;
+  checklist?: (version: string) => Checklist;
+  decisions?: () => DecisionEntry[];
+  seatEntries?: (now: Date) => Array<{ entry: SeatEntry; source: string }>;
+  events?: (since: string) => CoordEvent[];
+}
+
+function todaySeatEntries(now: Date): Array<{ entry: SeatEntry; source: string }> {
+  const root = effectiveInstanceRoot();
+  const day = seatDay(now);
+  return ['OP', 'TC', 'MK', 'UX'].flatMap(seat => {
+    const path = seatLedgerPath(seat, root, now);
+    if (!existsSync(path)) return [];
+    return readFileSync(path, 'utf8').split('\n').flatMap((line, index) => line.trim() ? [{
+      entry: JSON.parse(line) as SeatEntry,
+      source: `elanous://seat-loop/${seat}/${day}#${index + 1}`,
+    }] : []);
+  });
+}
+
+/** Read a bounded, source-labelled view of current ledgers, never a transcript or decision body. */
+export function contextNow(options: { topic?: string; limit?: number } = {}, deps: ContextNowDeps = {}): ContextNowAnswer {
+  const now = (deps.now ?? (() => new Date()))();
+  const at = `${now.toISOString().slice(0, 16)}:00.000Z`;
+  const topic = options.topic?.trim() || null;
+  const limit = typeof options.limit === 'number' && Number.isFinite(options.limit)
+    ? Math.max(1, Math.min(100, Math.floor(options.limit))) : 20;
+  const version = (deps.version ?? devVersion)().replace(/-.*$/, '');
+  const next = version.replace(/^(\d+)\.(\d+)\.(\d+)$/, (_, major: string, minor: string, patch: string) => `${major}.${minor}.${Number(patch) + 1}`);
+  const facts: ContextFact[] = [];
+  for (const v of [...new Set([version, next])]) {
+    const checklist = (deps.checklist ?? listChecklist)(v);
+    if (v === version) facts.push({ kind: 'version', version: v, source: `elanous://release/${v}/checklist` });
+    for (const item of checklist.items) {
+      if (item.status === 'done') continue;
+      facts.push({ kind: 'cell', version: v, id: item.id, title: redactSecretText(item.title.split(/\r?\n/, 1)[0] ?? '').slice(0, 120),
+        status: item.status, owner: item.owner ?? null, source: `elanous://release/${v}/checklist#${encodeURIComponent(item.id)}` });
+    }
+  }
+  for (const item of (deps.decisions ?? (() => new DecisionLedger().list({ status: 'open' })))()) {
+    if (item.status !== 'open') continue;
+    facts.push({ kind: 'decision', id: item.id, title: redactSecretText(item.title.split(/\r?\n/, 1)[0] ?? '').slice(0, 120),
+      status: item.status, dueAt: item.dueAt ?? null, source: `elanous://decisions/${encodeURIComponent(item.id)}` });
+  }
+  for (const { entry, source } of (deps.seatEntries ?? todaySeatEntries)(now)) {
+    facts.push({ kind: 'seat', seat: entry.seat, at: entry.at, status: entry.status,
+      id: entry.item?.id ?? null, title: entry.item?.source === 'checklist'
+        ? redactSecretText(entry.item.title.split(/\r?\n/, 1)[0] ?? '').slice(0, 120) : null, source });
+  }
+  const rawEvents = (deps.events ?? (since => listCoordEvents({ since })))(new Date(now.getTime() - 7 * 86_400_000).toISOString());
+  const chronologicalEvents = rawEvents.slice().sort((a, b) => a.at.localeCompare(b.at));
+  const matches = (text: string) => !topic || text.toLocaleLowerCase().includes(topic.toLocaleLowerCase());
+  const selectedFacts = facts.filter(f => !topic || (f.kind === 'cell' && matches(`${f.id} ${f.title}`))
+    || (f.kind === 'seat' && matches(`${f.id ?? ''} ${f.title ?? ''}`)));
+  const groups = (['version', 'cell', 'decision', 'seat'] as const).map(kind => selectedFacts.filter(f => f.kind === kind));
+  groups[3]!.sort((a, b) => (a.kind === 'seat' && b.kind === 'seat' ? b.at.localeCompare(a.at) : 0));
+  const nonEmpty = groups.filter(group => group.length > 0);
+  const perKind = Math.floor(limit / nonEmpty.length);
+  const chosen = groups.map(group => group.splice(0, perKind));
+  let remaining = limit - chosen.reduce((total, group) => total + group.length, 0);
+  for (const index of [2, 3, 0, 1]) {
+    if (remaining <= 0) break;
+    if (chosen[index]!.length === 0 && groups[index]!.length > 0) {
+      chosen[index]!.push(...groups[index]!.splice(0, 1));
+      remaining--;
+    }
+  }
+  for (const index of [1, 2, 3, 0]) {
+    if (remaining <= 0) break;
+    const extra = groups[index]!.splice(0, remaining);
+    chosen[index]!.push(...extra);
+    remaining -= extra.length;
+  }
+  const boundedFacts = chosen.flat();
+  const summaries = chronologicalEvents.map(event => ({
+    at: event.at, kind: event.kind, summary: redactSecretText(event.summary.split(/\r?\n/, 1)[0] ?? '').slice(0, 120),
+    source: event.refs.source ?? event.refs.url ?? `elanous://context/event/${encodeURIComponent(event.id)}`,
+  }));
+  const selectedEvents = summaries.filter(event => matches(event.summary)).reverse().slice(0, limit);
+  const guide = summaries.filter(event => event.kind === 'guide-changed' || event.kind === 'guidance-changed' || event.summary.startsWith('📌안내'))
+    .filter(event => matches(event.summary)).reverse().slice(0, limit)
+    .map(event => `📌 ${event.summary} — ${event.source}`);
+  const answer = { at, topic, facts: boundedFacts, events: selectedEvents, guide };
+  debug.log('context.now', 'answer', { topic, facts: answer.facts, events: answer.events });
+  return answer;
+}