elanous 0.2.10 → 0.2.12

package/src/maturity/feature-maturity.ts

@@ -22,6 +22,7 @@ export const FEATURE_MATURITY = {
     '/editor': { pwa: 'beta' },
     '/intake': { pwa: 'beta' },
     '/trace': { pwa: 'beta' },
+    '/inside': { pwa: 'beta' },
     '/board': { pwa: 'beta' },
     '/autopilot': { pwa: 'beta' },
     '/missions/[id]': { pwa: 'beta' },
@@ -31,6 +32,7 @@ export const FEATURE_MATURITY = {
     '/vault': { pwa: 'beta' },
     '/observatory': { pwa: 'beta' },
     '/exec': { pwa: 'beta' },
+    '/outputs': { pwa: 'beta' },
     '/field': { pwa: 'beta' },
     '/showroom': { pwa: 'beta' },
     '/workflows': { pwa: 'beta' },
@@ -55,11 +57,11 @@ export const FEATURE_MATURITY = {
     pty: 'beta', pr: 'beta', repo: 'beta', role: 'beta', machine: 'beta',
     where: 'stable', shadow: 'beta', llm: 'beta', storage: 'beta', leader: 'beta',
     pod: 'beta', browser: 'beta', questions: 'beta', usage: 'stable', live: 'beta',
-    research: 'beta', release: 'beta', seat: 'beta', coord: 'beta', 'model-watch': 'beta', doctor: 'stable',
+    research: 'beta', release: 'beta', seat: 'beta', coord: 'beta', context: 'beta', 'model-watch': 'beta', doctor: 'stable',
     control: 'beta', resources: 'beta', hooks: 'beta', setup: 'stable', start: 'stable',
     grounding: 'beta', graph: 'beta', loop: 'stable', card: 'stable', 'launch-head': 'beta',
-    a2a: 'beta', plugin: 'stable', skills: 'beta', connect: 'beta', import: 'beta',
-    persona: 'beta', market: 'beta', directive: 'stable', connector: 'beta', storyboard: 'beta',
+    a2a: 'beta', plugin: 'stable', make: 'beta', skills: 'beta', connect: 'beta', import: 'beta',
+    persona: 'beta', 'team-set': 'beta', market: 'beta', directive: 'stable', connector: 'beta', storyboard: 'beta',
     python: 'beta', 'self-update': 'stable', 'measure-fabric-arc-ab': 'beta', mcp: 'beta',
     relay: 'beta', 'telegram-test': 'beta', telegram: 'beta', 'discord-test': 'beta',
     sync: 'beta', status: 'beta', git: 'beta', gh: 'beta', repro: 'system',
@@ -86,6 +88,8 @@ export const FEATURE_MATURITY = {
     model: 'stable',
     clear: 'stable',
     status: 'stable',
+    now: 'beta', // CTX2 «지금 무엇이 돌고 있나» (#23379)
+    wish: 'beta',
     remaining: 'stable',
     setup: 'stable',
     quit: 'stable',
@@ -144,7 +148,26 @@ export const FEATURE_MATURITY = {
     'auto-tts': 'beta',
     directive: 'ops',
   },
-} as const satisfies { pwaRoute: Record<string, SurfaceMaturity>; cliRoot: Record<string, Maturity>; tuiSlash: Record<string, Maturity> };
+  telegramCommand: {
+    help: 'stable', status: 'stable', new: 'stable', clear: 'stable', reset: 'stable',
+    ping: 'stable', provider: 'stable', sessions: 'stable', fork: 'stable', resume: 'stable',
+    decisions: 'stable', work: 'stable', cancel: 'stable',
+    skills: 'beta', skill: 'beta', digest: 'beta', intake: 'beta', ad: 'beta',
+    taste: 'beta', missions: 'beta', attach: 'beta', detach: 'beta', now: 'beta', project: 'beta', wish: 'beta',
+    brain: 'tool', cc: 'tool', cdx: 'tool', gem: 'tool', local: 'tool',
+    harness: 'ops',
+    // Existing commands outside the CXO four-grade menu list are owner-only.
+    cc_clear: 'system', coo: 'system', cto: 'system', cmo: 'system', cxo: 'system', mission_del: 'system',
+    bots: 'system', bot: 'system', screen: 'system', chart: 'system', routines: 'system', botsay: 'system',
+  },
+  discordCommand: {
+    status: 'stable', sessions: 'stable', new: 'stable', fork: 'stable',
+    persona: 'beta', poll: 'beta', attach: 'beta',
+    brain: 'tool', cc: 'tool', cdx: 'tool', gem: 'tool',
+    relay: 'ops', showroom: 'ops', bots: 'ops', bot: 'ops', screen: 'ops', chart: 'ops',
+    routines: 'ops', botsay: 'ops', 'voice-join': 'ops', 'voice-leave': 'ops', 'voice-status': 'ops',
+  },
+} as const satisfies { pwaRoute: Record<string, SurfaceMaturity>; cliRoot: Record<string, Maturity>; tuiSlash: Record<string, Maturity>; telegramCommand: Record<string, Maturity>; discordCommand: Record<string, Maturity> };
 
 /** Unregistered routes and surfaces are not implicitly mature. Desktop shares the PWA implementation. */
 export function maturityOn(route: string, surface: Surface): Maturity | undefined {

package/src/model-tier/index.ts

@@ -7,12 +7,12 @@ export {
   MODEL_TIER_LABELS,
   TTS_VOICE_CONTEXTS,
   isModelTier,
-  isModelTierPersona,
+  isModelTierProfile,
   isTtsVoiceContext,
   modelTierRank,
   type BudgetUserConfig,
   type ModelTier,
-  type ModelTierPersona,
+  type ModelTierProfile,
   type ModelTierSurface,
   type ModelTierUserConfig,
   type ModelTierVoiceConfig,

package/src/model-tier/tier-resolver.ts

@@ -4,7 +4,7 @@
 // Precedence (high → low):
 //   1. `modelTier.voice.stt` (per-surface override · §3.4a.1)
 //   2. `modelTier.preset` (Phase 2 preset catalog · undefined today)
-//   3. `modelTier.persona`-based default (casual & power both ↦ Balanced
+//   3. `modelTier.profile`-based default (casual & power both ↦ Balanced
 //      today; Phase 3 can broaden)
 //   4. DEFAULT_MODEL_TIER ('balanced')
 //
@@ -40,7 +40,7 @@ export type SttTierSource =
   | 'session-override'
   | 'user-config-surface'
   | 'preset'
-  | 'persona'
+  | 'profile'
   | 'default';
 
 export interface ResolvedSttTier extends SttTierSpec {
@@ -83,14 +83,14 @@ export function resolveSttTier(
     };
   }
 
-  // 3. Persona-driven default — casual and power both land on
+  // 3. Profile-driven default — casual and power both land on
   //    Balanced today (PLAN §3.0.3). `custom` keeps the same default
   //    until an override or preset is set.
-  if (modelTier?.persona) {
+  if (modelTier?.profile) {
     return {
       ...STT_TIER_MAP[DEFAULT_MODEL_TIER],
       tier: DEFAULT_MODEL_TIER,
-      source: 'persona',
+      source: 'profile',
     };
   }
 
@@ -108,7 +108,7 @@ export type LlmTierSource =
   | 'session-override'
   | 'user-config-surface'
   | 'preset'
-  | 'persona'
+  | 'profile'
   | 'default';
 
 export interface ResolvedLlmTier extends LlmTierSpec {
@@ -126,7 +126,7 @@ export type TtsTierSource =
   | 'session-override'
   | 'user-config-surface'
   | 'preset'
-  | 'persona'
+  | 'profile'
   | 'default';
 
 export interface ResolvedTtsTier extends TtsTierSpec {
@@ -153,13 +153,13 @@ export function resolveTtsTier(
   if (modelTier?.preset) {
     return { ...TTS_TIER_MAP[DEFAULT_MODEL_TIER], tier: DEFAULT_MODEL_TIER, source: 'preset' };
   }
-  if (modelTier?.persona) {
-    return { ...TTS_TIER_MAP[DEFAULT_MODEL_TIER], tier: DEFAULT_MODEL_TIER, source: 'persona' };
+  if (modelTier?.profile) {
+    return { ...TTS_TIER_MAP[DEFAULT_MODEL_TIER], tier: DEFAULT_MODEL_TIER, source: 'profile' };
   }
   return { ...TTS_TIER_MAP[DEFAULT_MODEL_TIER], tier: DEFAULT_MODEL_TIER, source: 'default' };
 }
 
-/** Resolve LLM tier. Precedence mirrors STT (surface → preset → persona
+/** Resolve LLM tier. Precedence mirrors STT (surface → preset → profile
  *  → default) — diverges only in that the resolver needs the active
  *  `llm.provider` to expand the tier ladder. */
 export function resolveLlmTier(
@@ -196,12 +196,12 @@ export function resolveLlmTier(
       provider,
     };
   }
-  // 3. Persona-driven default.
-  if (modelTier?.persona) {
+  // 3. Profile-driven default.
+  if (modelTier?.profile) {
     return {
       ...lookupLlmTierSpec(provider, DEFAULT_MODEL_TIER),
       tier: DEFAULT_MODEL_TIER,
-      source: 'persona',
+      source: 'profile',
       provider,
     };
   }
@@ -220,7 +220,7 @@ export type EmbeddingTierSource =
   | 'session-override'
   | 'user-config-surface'
   | 'preset'
-  | 'persona'
+  | 'profile'
   | 'default';
 
 export interface ResolvedEmbeddingTier extends EmbeddingTierSpec {
@@ -230,7 +230,7 @@ export interface ResolvedEmbeddingTier extends EmbeddingTierSpec {
 }
 
 /** Resolve the embedding tier. Same precedence chain as LLM: session
- *  override → per-surface (modelTier.embedding) → preset → persona →
+ *  override → per-surface (modelTier.embedding) → preset → profile →
  *  default. The provider is supplied by the caller — typical wiring
  *  reads `cfg.embedding?.provider` (future field) and falls back to
  *  'openai'. */
@@ -273,11 +273,11 @@ export function resolveEmbeddingTier(
       provider,
     };
   }
-  if (modelTier?.persona) {
+  if (modelTier?.profile) {
     return {
       ...lookupEmbeddingTierSpec(provider, DEFAULT_MODEL_TIER),
       tier: DEFAULT_MODEL_TIER,
-      source: 'persona',
+      source: 'profile',
       provider,
     };
   }
@@ -295,7 +295,7 @@ export type VisionTierSource =
   | 'session-override'
   | 'user-config-surface'
   | 'preset'
-  | 'persona'
+  | 'profile'
   | 'default';
 
 export interface ResolvedVisionTier extends VisionTierSpec {
@@ -337,11 +337,11 @@ export function resolveVisionTier(
       provider,
     };
   }
-  if (modelTier?.persona) {
+  if (modelTier?.profile) {
     return {
       ...lookupVisionTierSpec(provider, DEFAULT_MODEL_TIER),
       tier: DEFAULT_MODEL_TIER,
-      source: 'persona',
+      source: 'profile',
       provider,
     };
   }

package/src/model-tier/types.ts

@@ -61,15 +61,15 @@ export function modelTierRank(t: ModelTier): number {
  *  adds `llm` and `tts`. Embedding / vision land in Phase 3. */
 export type ModelTierSurface = 'stt' | 'llm' | 'tts';
 
-// ── Persona ────────────────────────────────────────────────────────
+// ── Model tier profile ─────────────────────────────────────────────
 
-/** Zero-config baseline (§3.0 of the PLAN) — two-persona framework.
+/** Zero-config baseline (§3.0 of the PLAN) — model tier profiles.
  *  - `casual`: never touches settings; surfaces minimal UI.
  *  - `power`: opens slider / picker / preset etc.
  *  - `custom`: preset or per-surface overrides decide. */
-export type ModelTierPersona = 'casual' | 'power' | 'custom';
+export type ModelTierProfile = 'casual' | 'power' | 'custom';
 
-export function isModelTierPersona(v: unknown): v is ModelTierPersona {
+export function isModelTierProfile(v: unknown): v is ModelTierProfile {
   return v === 'casual' || v === 'power' || v === 'custom';
 }
 
@@ -112,9 +112,9 @@ export function isTtsVoiceContext(v: unknown): v is TtsVoiceContext {
 
 /** Root `modelTier` sub-tree of UserConfig. Sparse — every field is
  *  optional so the resolver can fall through (surface override → preset
- *  → persona → default). */
+ *  → profile → default). */
 export interface ModelTierUserConfig {
-  persona?: ModelTierPersona;
+  profile?: ModelTierProfile;
   preset?: string;
   voice?: ModelTierVoiceConfig;
   llm?: ModelTier;

package/src/mss/logging/log-store.ts

@@ -125,6 +125,9 @@ export interface LogQuery {
   /** event/data/category LIKE 부분 일치. */
   grep?: string;
   sessionId?: string;
+  /** Trace ownership: explicit row projectId takes precedence over session ownership. */
+  projectId?: string;
+  projectSessionIds?: readonly string[];
   sinceMs?: number;
   untilMs?: number;
   /** 증분 커서 — id > afterId 를 오름차순으로(SSE 드레인). */
@@ -397,6 +400,18 @@ export class LogStore {
       params.push(needle, needle, needle);
     }
     if (q.sessionId) { where.push('session_id = ?'); params.push(q.sessionId); }
+    if (q.projectId !== undefined) {
+      const sessionIds = [...new Set(q.projectSessionIds ?? [])];
+      // An explicit project tag wins, even if the row's session belongs to another project.
+      // Guard JSON extraction so malformed and absent payloads cannot match by accident.
+      const tagged = "CASE WHEN json_valid(data) THEN json_extract(data, '$.projectId') ELSE NULL END";
+      const session = "CASE WHEN json_valid(data) THEN json_extract(data, '$.sessionId') ELSE NULL END";
+      const untagged = "CASE WHEN json_valid(data) THEN json_type(data, '$.projectId') IS NULL ELSE 1 END";
+      where.push(`(${tagged} = ? OR (${untagged} AND (${sessionIds.length
+        ? `session_id IN (${sessionIds.map(() => '?').join(',')}) OR ${session} IN (${sessionIds.map(() => '?').join(',')})`
+        : '0'})))`);
+      params.push(q.projectId, ...sessionIds, ...sessionIds);
+    }
     if (q.sinceMs !== undefined) { where.push('ts_ms >= ?'); params.push(q.sinceMs); }
     if (q.untilMs !== undefined) { where.push('ts_ms <= ?'); params.push(q.untilMs); }
     if (q.afterId !== undefined) { where.push('id > ?'); params.push(q.afterId); }

package/src/nexus/api/config-model-tier.ts

@@ -39,7 +39,7 @@ function jsonResponse(body: unknown, status = 200): Response {
 
 import {
   isModelTier,
-  isModelTierPersona,
+  isModelTierProfile,
   type BudgetUserConfig,
   type ModelTier,
   type ModelTierUserConfig,
@@ -74,9 +74,10 @@ function normalizeModelTier(v: unknown): ModelTierUserConfig | undefined | 'inva
   if (!v || typeof v !== 'object' || Array.isArray(v)) return 'invalid';
   const r = v as Record<string, unknown>;
   const out: ModelTierUserConfig = {};
-  if (r.persona !== undefined) {
-    if (!isModelTierPersona(r.persona)) return 'invalid';
-    out.persona = r.persona;
+  const profile = r.profile === undefined ? r.persona : r.profile;
+  if (profile !== undefined) {
+    if (!isModelTierProfile(profile)) return 'invalid';
+    out.profile = profile;
   }
   if (r.preset !== undefined) {
     if (typeof r.preset !== 'string' || r.preset.trim().length === 0) return 'invalid';

package/src/nexus/api/fabric-plans.ts

@@ -0,0 +1,53 @@
+import { effectiveInstanceRoot } from '../../instance/resolve.js';
+import {
+  approveFabricPlan,
+  createFabricPlan,
+  loadFabricPlan,
+  type FabricPlan,
+} from '../../self-dev/fabric-plan-core.js';
+import { jsonResponse } from './json-response.js';
+
+export interface FabricPlansRouteOpts {
+  create?: (root: string, request: string) => Promise<FabricPlan>;
+}
+
+/** This route never launches a plan. Only approval writes the fabric execution-candidate ledger. */
+export async function handleFabricPlans(req: Request, opts: FabricPlansRouteOpts = {}): Promise<Response> {
+  const pathname = new URL(req.url).pathname;
+  const root = effectiveInstanceRoot();
+  if (pathname === '/v1/fabric/decompose') {
+    if (req.method !== 'POST') return jsonResponse({ error: 'method-not-allowed' }, 405);
+    let body: unknown;
+    try { body = await req.json(); }
+    catch { return jsonResponse({ error: 'invalid_json' }, 400); }
+    const request = body && typeof body === 'object' && !Array.isArray(body)
+      ? (body as Record<string, unknown>).request : undefined;
+    if (typeof request !== 'string' || !request.trim()) return jsonResponse({ error: 'invalid_request' }, 400);
+    try {
+      const plan = await (opts.create ?? createFabricPlan)(root, request);
+      return jsonResponse({ plan }, 201);
+    } catch (error) {
+      return jsonResponse({ error: 'decomposition_failed', reason: error instanceof Error ? error.message : String(error) }, 422);
+    }
+  }
+  const match = /^\/v1\/fabric\/plans\/([^/]+)(\/approve)?$/.exec(pathname);
+  if (!match) return jsonResponse({ error: 'not-found' }, 404);
+  let id: string;
+  try { id = decodeURIComponent(match[1]!); }
+  catch { return jsonResponse({ error: 'invalid_plan_id' }, 400); }
+  if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i.test(id)) return jsonResponse({ error: 'invalid_plan_id' }, 400);
+  if (!match[2]) {
+    if (req.method !== 'GET') return jsonResponse({ error: 'method-not-allowed' }, 405);
+    const plan = loadFabricPlan(root, id);
+    return plan ? jsonResponse({ plan }) : jsonResponse({ error: 'not-found' }, 404);
+  }
+  if (req.method !== 'POST') return jsonResponse({ error: 'method-not-allowed' }, 405);
+  // The ledger transition is atomic and rejects a second approval; no draft is executable.
+  try {
+    return jsonResponse({ candidate: approveFabricPlan(root, id) });
+  } catch (error) {
+    if (error instanceof Error && error.message.startsWith('fabric plan not found:')) return jsonResponse({ error: 'not-found' }, 404);
+    if (error instanceof Error && error.message === 'fabric plan already approved') return jsonResponse({ error: 'already-approved' }, 409);
+    throw error;
+  }
+}

package/src/nexus/api/harness-api.ts

@@ -19,6 +19,7 @@ import { resolveHarnessTarget } from '../../self-implement/harness-target-option
 import { queryRunningRuns, type RunningRunsResult } from '../../self-implement/running-runs.js';
 import { getDefaultLogStore, type LogStore } from '../../mss/logging/log-store.js';
 import { createSeqTracker, makeEnvelope, type FeedbackEnvelope } from '../../feedback/envelope.js';
+import { publishInsideEvent } from './inside-events.js';
 
 const JSON_HEADERS = { 'content-type': 'application/json; charset=utf-8' };
 const ASK_USAGE = 'usage: POST /v1/harness/ask with JSON body {"text":"<ask>"} — optional "target":"<path>" (홈 안의 git repo·디렉터리·파일)';
@@ -248,7 +249,10 @@ export async function handleHarnessAskPost(req: Request, _metaApi: HarnessMetaAp
   }
 
   const acceptanceId = deps.createAcceptanceId?.() ?? crypto.randomUUID();
-  const log = deps.log ?? ((event, data) => debug.log('harness-http', event, data));
+  const log = (event: string, data: Record<string, unknown>) => {
+    (deps.log ?? ((name: string, payload: Record<string, unknown>) => debug.log('harness-http', name, payload)))(event, data);
+    publishInsideEvent({ ...data, kind: 'harness-run', event });
+  };
   const suppliedOrigin = (body as { origin?: unknown }).origin;
   const origin = suppliedOrigin === undefined ? null
     : readReportOrigin({ [REPORT_ORIGIN_ENV]: JSON.stringify(suppliedOrigin) });

package/src/nexus/api/health.ts

@@ -128,6 +128,8 @@ export function handleHealth(
     universeRoot: safeUniverseRoot(),
     testUniverse: safeTestUniverse(),
     bindHost: safeBindHost(bind),
+    // W4 — POST /v1/workflows/:name/run understands onlyNode · fromNode+fromRunId · mode (PWA enables its run-mode buttons on this).
+    workflowRunModes: true as const,
     ...(setup?.mode === true
       ? { setupMode: true as const, setupMissing: setup.missing }
       : {}),

package/src/nexus/api/http-server.ts

@@ -21,6 +21,7 @@ import type { TelegramEvent } from '../../workflow-runtime/triggers/telegram-sou
 import { spawnSync } from 'node:child_process';
 import { isAbsolute } from 'node:path';
 import { createProject, listProjects } from '../../project/project-store.js';
+import { handleOutputsGet, type OutputsDeps } from './outputs-route.js';
 import { compareTokenConstTime } from '../../acp/transport/auth.js';
 import { ensureAuthToken } from '../../auth/acp-token.js';
 import type { NexusState } from '../state/state.js';
@@ -42,6 +43,7 @@ import { OPENAI_RELAY_PATH, tryHandleOpenAiRelay } from './openai-relay.js';
 import { handleHealth, type HealthSetupContext } from './health.js';
 import { handleTabsList, handleTabDetail, handleNexusSnapshot } from './tabs.js';
 import { handleSseEvents } from './events.js';
+import { handleInsideEvents, INSIDE_EVENTS_PATH, startInsideEventRelay } from './inside-events.js';
 import { dispatchIntentPredictionRoute } from './intent-prediction.js';
 import { handleNotificationAction } from './notification-action.js';
 import { handleUserIntentEmit, handleUserIntentBatch } from './user-intents.js';
@@ -157,6 +159,7 @@ import {
 } from './vault-api.js';
 import { handleBuildsGet, parseBuildsPath } from './builds-api.js';
 import { handleHarnessAskPost, handleHarnessAskStatusGet, handleHarnessRunEventsGet, handleHarnessRunScreenGet, handleHarnessRunsGet, handleHarnessStopPost } from './harness-api.js';
+import { handleFabricPlans, type FabricPlansRouteOpts } from './fabric-plans.js';
 import { dispatchPersonaRoute } from './personas.js';
 import { handleMe } from './operator.js';
 import { handleOpsApi } from './ops-api.js';
@@ -178,6 +181,7 @@ import { handleChannelBotsGet, handleChannelBotSet } from './setup-channel-bot.j
 import { handleLlmRoutePredict } from './llm-route-predict.js';
 import type { MissionRouter } from '../../llm/mission-router.js';
 import { handleContextFetchUrl } from './context-url.js';
+import { contextNow } from '../../context-bus/context-now.js';
 import type { IntentPredictionService } from '../../intent-prediction/index.js';
 import type { NotificationActionLoopback } from '../../web-push/notification-action-loopback.js';
 import { handlePlatforms } from './platforms.js';
@@ -331,7 +335,7 @@ import {
   handleTasksList,
   handleTaskDetail,
 } from './tasks-scheduler.js';
-import { handleTaskCardsGet } from './task-cards-api.js';
+import { handleTaskCardsGet, handleTaskCardsWishPost } from './task-cards-api.js';
 import { handleTaskCreatePost, handleTaskApprovePost } from './tasks-create.js';
 import { matchIngestAuthorization } from './ingest-token.js';
 import {
@@ -340,6 +344,8 @@ import {
   handleWorkflowApprovalsPending,
   handleWorkflowDelete,
   handleWorkflowGet,
+  handleWorkflowHistoryList,
+  handleWorkflowHistoryVersionGet,
   handleWorkflowPut,
   handleWorkflowRunGet,
   handleWorkflowRunsList,
@@ -461,8 +467,11 @@ export function probeNexusHttpPort(
 export type NexusWsBridgeInit = Omit<WsBridgeOpts, 'hostname' | 'port'>;
 
 export interface NexusHttpServerOpts {
+  /** Optional fabric-plan ledger and decomposition seam; production uses the instance root and existing fabric decomposer. */
+  fabricPlans?: FabricPlansRouteOpts;
   /** Optional installer state root for isolated API consumers and tests. */
   pluginStateRoot?: string;
+  outputs?: OutputsDeps;
   execRequests?: ExecRequestRunner;
   seatRequests?: SeatRequestsDeps;
   consultRequests?: ConsultRequestsDeps;
@@ -790,11 +799,13 @@ export function startNexusHttpServer(opts: NexusHttpServerOpts): NexusHttpServer
   }
 
   const url = `http://${hostname}:${resolvedPort}`;
+  const stopInsideRelay = startInsideEventRelay();
   return {
     port: resolvedPort,
     hostname,
     url,
     stop() {
+      stopInsideRelay();
       try { server!.stop(true); } catch { /* idempotent */ }
       setInProcessOutbound(null);
     },
@@ -984,6 +995,11 @@ export async function routeRequest(
     }
   }
 
+  if (pathname === INSIDE_EVENTS_PATH) {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleInsideEvents(req);
+  }
+
   if (pathname === LIVE_SHIPPED_PATH) {
     return handleLiveShipped(req, { authorize: (request) => !!opts.metaApi && checkAuth(request, opts.metaApi) });
   }
@@ -1312,11 +1328,21 @@ export async function routeRequest(
     return handleGraphsValidatePost(req, opts.metaApi);
   }
 
+  if (pathname === '/v1/fabric/decompose' || pathname.startsWith('/v1/fabric/plans/')) {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleFabricPlans(req, opts.fabricPlans);
+  }
+
   if (pathname === '/v1/projects' && (method === 'GET' || method === 'POST')) {
     if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
     return method === 'GET' ? handleProjectsGet() : handleProjectsPost(req);
   }
 
+  if (method === 'GET' && pathname === '/v1/outputs') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleOutputsGet(req, opts.outputs);
+  }
+
   if (pathname === '/v1/config/chat-fast-path' && (method === 'GET' || method === 'PUT')) {
     if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
     return handleChatFastPathConfig(req);
@@ -1328,6 +1354,19 @@ export async function routeRequest(
     return (opts.usageHandler ?? handleUsageGet)();
   }
 
+  // SK2 (PWA) list — GET must be routed before the non-GET block below; the original route sat inside it,
+  // so the PWA banner's GET always fell through to «not-found» (found by the DEMO-RUNa rehearsal · 10-03).
+  if (method === 'GET' && pathname === '/v1/skills/problems') {
+    if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
+    const { handleSkillProblems } = await import('./skill-problems.js');
+    return handleSkillProblems(req, opts.metaApi);
+  }
+
+  if (method === 'GET' && pathname === '/v1/persona-presets') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return dispatchPersonaRoute(req, pathname) as Promise<Response>;
+  }
+
   // Mutation routes (PR ι) — POST/PATCH/DELETE on /v1/nexus/tabs[/:id[/action]].
   // Templates POST handled here too (PR κ).
   // Config / secrets PUT/POST/DELETE here too (PR μ).
@@ -1357,6 +1396,10 @@ export async function routeRequest(
       const mutated = await handleGraphsMutation(pathname, req);
       if (mutated) return mutated;
     }
+    if (method === 'POST' && pathname === '/v1/task-cards/wish') {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+      return handleTaskCardsWishPost(req);
+    }
     if (method === 'POST' && pathname === '/v1/tasks') {
       if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
       return handleTaskCreatePost(req, opts.metaApi);
@@ -1613,10 +1656,10 @@ export async function routeRequest(
       if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       return pathname === '/v1/setup/child-llm' ? handleChildLlmSet(req) : handleAnswerPrioritySet(req);
     }
-    // PWA `/settings` Phase 3 (2026-05-19) — persona description PATCH.
-    // dispatchPersonaRoute 가 PATCH 분기를 자체 처리. GET sibling 은
-    // 아래 GET-only 블록의 기존 /v1/personas 핸들러.
-    if (pathname.startsWith('/v1/personas/') && method === 'PATCH') {
+    // Persona creation and editing require owner auth before parsing a write body.
+    if ((method === 'POST' && pathname === '/v1/personas')
+      || (method === 'PATCH' && pathname.startsWith('/v1/personas/'))) {
+      if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       const result = await dispatchPersonaRoute(req, pathname);
       if (result) return result;
     }
@@ -2613,7 +2656,7 @@ export async function routeRequest(
     catch { return jsonResponse({ error: 'bad_request' }, 400); }
     return handleScheduleDetail(req, id, opts.metaApi);
   }
-  if (pathname === '/v1/task-cards' || /^\/v1\/task-cards\/[^/]+$/.test(pathname)) {
+  if (method === 'GET' && (pathname === '/v1/task-cards' || /^\/v1\/task-cards\/[^/]+$/.test(pathname))) {
     return handleTaskCardsGet(pathname);
   }
   if (pathname === '/v1/tasks') {
@@ -2706,11 +2749,23 @@ export async function routeRequest(
   }
   if (pathname.startsWith('/v1/workflows/')) {
     if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
-    const wfName = decodeURIComponent(pathname.slice('/v1/workflows/'.length));
+    const segments = pathname.slice('/v1/workflows/'.length).split('/');
+    let wfName: string;
+    try { wfName = decodeURIComponent(segments[0] ?? ''); }
+    catch { return jsonResponse({ error: 'bad_request', reason: 'invalid workflow name' }, 400); }
     if (!wfName || wfName.includes('/') || wfName.includes('\\') || wfName.includes('..')) {
       return jsonResponse({ error: 'bad_request', reason: 'invalid workflow name' }, 400);
     }
-    return handleWorkflowGet(req, wfName, opts.metaApi);
+    if (segments.length === 2 && segments[1] === 'history') {
+      return handleWorkflowHistoryList(req, wfName, opts.metaApi);
+    }
+    if (segments.length === 3 && segments[1] === 'history') {
+      let id: string;
+      try { id = decodeURIComponent(segments[2] ?? ''); }
+      catch { return jsonResponse({ error: 'bad_request', reason: 'invalid workflow history version id' }, 400); }
+      return handleWorkflowHistoryVersionGet(req, wfName, id, opts.metaApi);
+    }
+    if (segments.length === 1) return handleWorkflowGet(req, wfName, opts.metaApi);
   }
   if (pathname.startsWith('/v1/nexus/templates/')) {
     const name = pathname.slice('/v1/nexus/templates/'.length);
@@ -2775,6 +2830,10 @@ export async function routeRequest(
     const result = await dispatchPersonaRoute(req, pathname);
     if (result) return result;
   }
+  if (pathname === '/v1/context/now') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return jsonResponse(contextNow({ ...(url.searchParams.has('topic') ? { topic: url.searchParams.get('topic') ?? '' } : {}) }));
+  }
   // §6.3 (2026-05-09) — context URL fetch (showroom).
   // POST /v1/context/fetch-url
   if (pathname === '/v1/context/fetch-url') {