elanous 0.2.11 → 0.2.13

package/src/telegram.ts

@@ -73,7 +73,11 @@ import { effectiveInstanceRoot } from './instance/resolve.js';
 import { getElanousConfigDir } from './elanous-config-dir.js';
 import { defaultFieldEvent, FieldUploadError, parseFieldCaption, resolveFieldMime, saveFieldMedia } from './field/field-media.js';
 import { scheduleFieldReel, type FieldReelOptions } from './field/field-reel.js';
+import { handleTelegramFieldNote } from './field-note/telegram.js';
+import type { TranscriptionEngine, FieldAudio } from './field-note/transcribe.js';
 import { maybeHandleCardPhoto, type CardPhotoDeps } from './telegram-card-followup.js';
+import { attachTelegramProjectButtons } from './telegram-project-command.js';
+import { attachTelegramFabricPlan } from './telegram-fabric-plan.js';
 
 export type TgAttachmentKind = 'photo' | 'voice' | 'audio' | 'document';
 
@@ -101,6 +105,8 @@ export interface TgIncoming {
   text: string;
   messageId: number;
   threadId?: number;
+  /** Telegram message timestamp, not poll time. */
+  receivedAt?: string;
   isDm: boolean;
   isGroup: boolean;
   /** Zero or more attached media — populated by parseUpdate from
@@ -219,8 +225,12 @@ export interface TelegramBotOpts {
   fieldRootDir?: () => string;
   /** 시험에서는 실제 렌더 대신 가짜 실행기를 주입한다. */
   fieldReel?: FieldReelOptions;
+  /** NOTE3a engine and audio decoder are injected; no transcription provider is assumed. */
+  fieldNoteEngine?: TranscriptionEngine;
+  fieldNoteDecodeAudio?: (file: string, recordedAt: string) => FieldAudio;
   /** Test seam for the business-card graph and its private run root. */
   cardFollowupDeps?: Pick<CardPhotoDeps, 'runGraph' | 'rootDir' | 'ocrText'>;
+  fabricPlanDeps?: import('./telegram-fabric-plan.js').TelegramFabricPlanDeps;
 }
 
 /** Surface-unification v2 (FU-2) — Telegram trigger event passed to
@@ -278,7 +288,7 @@ export function classifyTelegramText(
 
 export class TelegramBot {
   private readonly token: string;
-  private readonly botId: string;
+  readonly botId: string;
   private readonly allowedUsers: Set<number>;
   private readonly onMessage: TelegramBotOpts['onMessage'];
   private readonly fetchImpl: typeof fetch;
@@ -338,8 +348,11 @@ export class TelegramBot {
   private readonly fieldDefaultEventOpt?: string;
   private readonly fieldRootDir: () => string;
   private readonly fieldReel?: FieldReelOptions;
+  private readonly fieldNoteEngine?: TranscriptionEngine;
+  private readonly fieldNoteDecodeAudio?: (file: string, recordedAt: string) => FieldAudio;
   private readonly cardFollowupDeps: Pick<CardPhotoDeps, 'runGraph' | 'rootDir' | 'ocrText'>;
   private readonly seatWorkDeps: TelegramSeatWorkDeps;
+  private readonly handleFabricPlan: (ctx: TgIncoming) => Promise<boolean>;
   private seatAskTimer: ReturnType<typeof setInterval> | null = null;
   /** 앨범 id → `#현장` 행사 · 답장 디바운스. 태그된 앨범만 들어온다. */
   private readonly fieldGroups = new Map<string, {
@@ -375,7 +388,10 @@ export class TelegramBot {
     this.fieldDefaultEventOpt = opts.fieldDefaultEvent;
     this.fieldRootDir = opts.fieldRootDir ?? getElanousConfigDir;
     this.fieldReel = opts.fieldReel;
+    this.fieldNoteEngine = opts.fieldNoteEngine;
+    this.fieldNoteDecodeAudio = opts.fieldNoteDecodeAudio;
     this.cardFollowupDeps = opts.cardFollowupDeps ?? {};
+    this.handleFabricPlan = attachTelegramFabricPlan(this, opts.fabricPlanDeps);
     this.seatWorkDeps = { ...opts.seatWorkDeps, askDeps: { ...opts.seatWorkDeps?.askDeps,
       channel: 'telegram', botId: this.botId,
       send: opts.seatWorkDeps?.askDeps?.send ?? (async (origin, text) => {
@@ -1214,6 +1230,7 @@ export class TelegramBot {
               userId: cq.from.id,
               userName: cq.from.username ?? cq.from.first_name,
               chatId: cq.message?.chat.id,
+              threadId: cq.message?.message_thread_id,
               messageId: cq.message?.message_id,
               data: cq.data ?? '',
             };
@@ -1526,8 +1543,16 @@ export class TelegramBot {
       await this.refuseMessage(ctx);
       return;
     }
+    if (await this.handleFabricPlan(ctx)) return;
     // 현장 업로드 — `#현장` 캡션(또는 태그된 앨범의 나머지)의 사진·영상은 LLM 대신 현장 폴더로.
     if (await this.tryHandleFieldUpload(ctx)) return;
+    if (await handleTelegramFieldNote(ctx, {
+      rootDir: this.fieldRootDir(),
+      download: (fileId) => this.downloadFile(fileId),
+      reply: async (incoming, text) => { await this.sendMessage(incoming.chatId, text, { replyTo: incoming.messageId, threadId: incoming.threadId }); },
+      engine: this.fieldNoteEngine, decodeAudio: this.fieldNoteDecodeAudio,
+      now: () => new Date(this.nowImpl()),
+    })) return;
     if (await maybeHandleCardPhoto(ctx, {
       isOwner: (userId) => this.isOwnerAllowed(userId),
       isFieldAlbum: (id) => this.fieldGroups.has(id),
@@ -1827,6 +1852,7 @@ export class TelegramBot {
             const reply = await slashParse.cmd.handler(slashParse.args, ctx, {
               userConfig: this.slashContext.userConfig,
               allCommands: this.slashCommands,
+              sendButtons: async (text, buttons) => { await this.sendInlineKeyboard(ctx.chatId, text, buttons, { replyTo: ctx.messageId, threadId: ctx.threadId }); },
               downloadAttachments: () => this.downloadCtxAttachments(ctx),
               daemonBridge: this.slashContext.daemonBridge,
               hitlConfirmChannel: this.hitlConfirmChannelForChat(ctx.chatId, ctx.threadId),
@@ -2011,6 +2037,7 @@ export class TelegramBot {
               return await slashParse.cmd.handler(slashParse.args, ctx, {
                 userConfig: this.slashContext!.userConfig,
                 allCommands: this.slashCommands,
+                sendButtons: async (text, buttons) => { await this.sendInlineKeyboard(ctx.chatId, text, buttons, { replyTo: ctx.messageId, threadId: ctx.threadId }); },
                 streamer,
                 downloadAttachments: () => this.downloadCtxAttachments(ctx),
                 daemonBridge: this.slashContext!.daemonBridge,
@@ -2030,6 +2057,7 @@ export class TelegramBot {
               return await runAcpViaSlash(activeBackend, [ctx.text], ctx, {
                 userConfig: this.slashContext!.userConfig,
                 allCommands: this.slashCommands,
+                sendButtons: async (text, buttons) => { await this.sendInlineKeyboard(ctx.chatId, text, buttons, { replyTo: ctx.messageId, threadId: ctx.threadId }); },
                 streamer,
                 downloadAttachments: () => this.downloadCtxAttachments(ctx),
                 daemonBridge: this.slashContext!.daemonBridge,
@@ -2270,6 +2298,7 @@ interface RawUpdate {
   update_id: number;
   message?: {
     message_id: number;
+    date?: number;
     from?: { id: number; first_name?: string; username?: string };
     chat: { id: number; type: 'private' | 'group' | 'supergroup' | 'channel' };
     text?: string;
@@ -2286,7 +2315,7 @@ interface RawUpdate {
   callback_query?: {
     id: string;
     from: { id: number; first_name?: string; username?: string };
-    message?: { message_id: number; chat: { id: number } };
+    message?: { message_id: number; message_thread_id?: number; chat: { id: number } };
     data?: string;
     chat_instance?: string;
   };
@@ -2305,6 +2334,7 @@ export interface TgCallbackQuery {
   userId: number;
   userName?: string;
   chatId?: number;
+  threadId?: number;
   messageId?: number;
   data: string;
 }
@@ -2397,6 +2427,7 @@ export function parseUpdate(u: RawUpdate): TgIncoming | null {
     text: (typeof m.text === 'string' ? m.text : (m.caption ?? '')),
     messageId: m.message_id,
     threadId: m.message_thread_id,
+    ...(typeof m.date === 'number' ? { receivedAt: new Date(m.date * 1000).toISOString() } : {}),
     isDm,
     isGroup: !isDm,
     attachments,
@@ -2912,9 +2943,10 @@ export function botFromConfig(opts: BotFromConfigOpts): TelegramBot {
   botRef.ensureSurfaceHitl();
   // DEC-TG(대표 10-02) — decision cards on the MAIN bot only (other channel pollers carry other tokens). The ticker
   // itself sends only while this bot polls, so a send-only nexus bot never duplicates the standalone poller's cards.
-  if (opts.userConfig.raw?.decisions === undefined || (opts.userConfig.raw.decisions as { cards?: unknown }).cards !== false) {
-    const mainToken = resolveChannelBotToken('telegram', opts.userConfig)?.token;
-    if (mainToken && botToken === mainToken) {
+  const mainToken = resolveChannelBotToken('telegram', opts.userConfig)?.token;
+  if (mainToken && botToken === mainToken) {
+    attachTelegramProjectButtons(botRef, opts.userConfig);
+    if (opts.userConfig.raw?.decisions === undefined || (opts.userConfig.raw.decisions as { cards?: unknown }).cards !== false) {
       const bot = botRef;
       void import('./decisions/telegram-decision-cards.js')
         .then(({ attachTelegramDecisionCards }) => { attachTelegramDecisionCards(bot, opts.userConfig); })

package/src/tool-runtime/elanous-control-runtimes.ts

@@ -3,6 +3,7 @@ import { StringDecoder } from 'node:string_decoder';
 import { fileURLToPath } from 'node:url';
 import { dirname, resolve } from 'node:path';
 import type { LLMToolSpec } from '../llm.js';
+import { stateDirSourceForChild } from '../agent/identity-env.js';
 import { debug } from '../debug/log.js';
 import { canonicalizeForBoundary, isWithinBoundary, resolveHarnessBoundary } from '../harness/harness-write-boundary.js';
 import { getHarnessSpace } from '../harness/harness-space.js';
@@ -133,7 +134,7 @@ async function spawnHeldElanous(command: string[], cwd: string, instanceRoot: st
     try {
       child = deps.spawn(command[0]!, command.slice(1), {
         cwd,
-        env: { ...process.env, ELANOUS_STATE_DIR: instanceRoot },
+        env: { ...process.env, ELANOUS_STATE_DIR: instanceRoot, ELANOUS_STATE_DIR_SOURCE: stateDirSourceForChild(instanceRoot) },
         detached: true,
         stdio: ['ignore', 'pipe', 'pipe'],
       });

package/src/user-config.ts

@@ -3240,7 +3240,7 @@ export interface AutoReviewConfig {
   };
 }
 
-export type ModelRole = 'implement' | 'review' | 'research' | 'planning' | 'audit' | 'classify';
+export type ModelRole = 'implement' | 'review' | 'research' | 'planning' | 'audit' | 'classify' | 'graph-grow';
 
 export interface RoleModelConfig {
   implement?: string;
@@ -3249,6 +3249,7 @@ export interface RoleModelConfig {
   planning?: string;
   audit?: string;
   classify?: string;
+  'graph-grow'?: string;
 }
 
 /** Sparse provider-agnostic model tier preferences by execution role. */
@@ -3315,6 +3316,7 @@ export const ROLE_MODEL_DEFAULTS: Record<ModelRole, { environment: string; tier:
   planning: { environment: 'ELANOUS_SKILL_PLAN_MODEL', tier: 'best' },
   audit: { environment: 'ELANOUS_MEMORY_JUDGE_MODEL', tier: 'better' },
   classify: { environment: 'ELANOUS_ACTION_CLASSIFIER_MODEL', tier: 'budget' },
+  'graph-grow': { environment: 'ELANOUS_GRAPH_GROW_MODEL', tier: 'better' },
 };
 
 /** Resolve `auto` through the same runtime provider selector that dispatches LLM calls.
@@ -3473,7 +3475,34 @@ export function resolveRoleModel(role: ModelRole, config: UserConfig = getUserCo
 }
 
 
-export type StewardLoopMode = 'off' | 'shadow' | 'live';
+export type OrchestratorSeat = 'OP' | 'TC' | 'MK' | 'UX';
+export interface OrchestratorLoopConfig {
+  seatTrees: Partial<Record<OrchestratorSeat, string[]>>;
+  seatCaps: Record<OrchestratorSeat, number>;
+  trafficMode: 'shadow' | 'live';
+}
+
+export const ORCHESTRATOR_DEFAULTS: OrchestratorLoopConfig = {
+  seatTrees: {}, seatCaps: { TC: 8, UX: 6, MK: 6, OP: 4 }, trafficMode: 'shadow',
+};
+
+export function parseOrchestratorLoopConfig(raw: unknown): OrchestratorLoopConfig {
+  const value = raw && typeof raw === 'object' && !Array.isArray(raw) ? raw as Record<string, unknown> : {};
+  const rawTrees = value.seatTrees && typeof value.seatTrees === 'object' && !Array.isArray(value.seatTrees)
+    ? value.seatTrees as Record<string, unknown> : {};
+  const rawCaps = value.seatCaps && typeof value.seatCaps === 'object' && !Array.isArray(value.seatCaps)
+    ? value.seatCaps as Record<string, unknown> : {};
+  const seatTrees: OrchestratorLoopConfig['seatTrees'] = {};
+  const seatCaps = { ...ORCHESTRATOR_DEFAULTS.seatCaps };
+  for (const seat of ['OP', 'TC', 'MK', 'UX'] as const) {
+    if (Array.isArray(rawTrees[seat])) seatTrees[seat] = rawTrees[seat].filter((path): path is string => typeof path === 'string' && isAbsolute(path));
+    const cap = rawCaps[seat];
+    if (typeof cap === 'number' && Number.isSafeInteger(cap) && cap >= 0) seatCaps[seat] = cap;
+  }
+  return { seatTrees, seatCaps, trafficMode: value.trafficMode === 'live' ? 'live' : 'shadow' };
+}
+
+export type StewardLoopMode = 'off' | 'shadow' | 'live' | 'rescue';
 
 export type SeatLoopMode = 'off' | 'shadow' | 'on';
 
@@ -3514,25 +3543,51 @@ export function parseEventsConfig(input: unknown): EventsConfig {
   return { mode: events.mode === 'on' ? 'on' : 'shadow', routes, linearAssignees };
 }
 
+export type HqFenceRole = 'telegram-poller' | 'cron' | 'seat-loop' | 'release-run' | 'conatus' | 'git-push' | 'ledger-cli';
+export interface HqConfig {
+  /** ssh host that keeps the lease record — homes push to it; it never sshes back (default cloud-vm). */
+  arbiter?: string;
+  /** This host's identity in the lease (default os.hostname()). */
+  hostName?: string;
+  /** Standby host (default node-b) — the quorum's third member; promoted only by the arbiter. */
+  standby?: string;
+  /** Lease TTL in seconds (default 1500 = 25 min). */
+  ttlSeconds?: number;
+  /** Roles that may still run when this host is fenced only for lack of quorum (never when a newer generation exists). Absent = none. */
+  failOpenRoles?: HqFenceRole[];
+  /** Per-host nexus health URL over the tailnet (default https://<host>.<tailnetDomain>:31415/v1/health). */
+  healthUrls?: Record<string, string>;
+  /** MagicDNS suffix (default: read from `tailscale status --json`). */
+  tailnetDomain?: string;
+  /** `tailscale` binary (default tailscale). */
+  tailscaleBin?: string;
+  /** Highest lease generation this host ever saw (default ~/.elanous-hq/seen-generation · 600). */
+  seenGenerationFile?: string;
+  /** Per-probe timeout in seconds (default 5). */
+  probeTimeoutSeconds?: number;
+}
+
 export interface UserConfig {
   events?: EventsConfig;
   /** Explicit HTTPS destination for doctor diagnostics; absent means no upload. */
   diagnostics?: { uploadUrl?: string };
+  /** HQ lease (본부 임대 · 10-04 HQ-HB/HQ-FENCE): arbiter host over ssh, this host's name, per-role fail-open when the arbiter is unreachable (default: fail closed). */
+  hq?: HqConfig;
   /** Root CLI help audience; absent or invalid means owner. */
   cli?: { helpRole?: 'owner' | 'contributor' | 'general' };
   /** Execution-phase HITL answer deadline; absent means 30 minutes. */
   hitl?: { executionDeadlineMinutes?: number };
   coo?: { linearProject?: string };
-  decisions?: { linearProjection: { enabled: boolean } };
+  decisions?: { linearProjection: { enabled: boolean }; requireCrossCheck: boolean };
   /** Per-seat goal and Pod limits; missing or invalid limits use seat-budget defaults. */
   org?: { budget?: Record<string, { dailyGoals?: number; concurrentPods?: number }> };
   /** Steward and seat loops are parsed independently. An absent seat remains off. */
-  loops?: { steward?: { mode?: StewardLoopMode; linearTeam?: string; roles?: Record<string, { maxConcurrent?: number }>; budget?: number; tracks?: Record<string, string>; alertAfterFailures?: number; launch?: 'off' | 'shadow' | 'live'; maxParallel?: number; podPool?: string }; seat?: SeatLoopConfig; persona?: PersonaLoopConfig };
+  loops?: { orchestrator?: OrchestratorLoopConfig; steward?: { mode?: StewardLoopMode; linearTeam?: string; roles?: Record<string, { maxConcurrent?: number }>; budget?: number; tracks?: Record<string, string>; alertAfterFailures?: number; launch?: 'off' | 'shadow' | 'live'; maxParallel?: number; podPool?: string }; seat?: SeatLoopConfig; persona?: PersonaLoopConfig };
   /** 🔐 Pod 의 Grok API 키 과금은 명시 opt-in 만. 생략·잘못된 값은 false.
    *  budgetGate 와 같은 `harness` 객체다 — 중복 선언이면 뒤 타입이 앞을 지운다. */
-  harness?: { pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; defaultRepo?: string; substrate?: 'local' | 'pod'; podPool?: string; worktreeAddTimeoutSec?: number };
+  harness?: { pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; difficultyPlacement?: boolean; defaultRepo?: string; substrate?: 'local' | 'pod'; podPool?: string; worktreeAddTimeoutSec?: number; queue?: { seatCap?: Partial<Record<'OP' | 'TC' | 'MK' | 'UX', number>> } };
   /** ☸️ Pod 실행 칸 — `pool` = 기존 기본 풀(`컨텍스트[@ssh호스트][:상한][#k3d-레지스트리:포트]` 쉼표 · 앞이 우선). harness 실행은 인자·ELANOUS_POD_POOL·harness.podPool 다음으로 읽는다. */
-  pod?: { pool?: string; /** 호스트 Git 미러 디렉터리 — Pod Job 에 읽기 전용으로 마운트한다. */ hostMirror?: string; /** 원격 그라운딩 엔드포인트(호스트 nexus · tailnet 주소) — Pod 가 토큰으로 «질의→인용»만 묻는다(P13). */ groundingUrl?: string; /** 읽기 전용 Pod lease 권장에 쓰는 계정별 동시 수. */ lease?: { perAccount?: number } };
+  pod?: { pool?: string; /** 호스트 Git 미러 디렉터리 — Pod Job 에 읽기 전용으로 마운트한다. */ hostMirror?: string; /** 원격 그라운딩 엔드포인트(호스트 nexus · tailnet 주소) — Pod 가 토큰으로 «질의→인용»만 묻는다(P13). */ groundingUrl?: string; /** 읽기 전용 Pod lease 권장에 쓰는 계정별 동시 수. */ lease?: { perAccount?: number }; /** 실측 권고를 Pod 발사 기본값으로 쓸지 (기본 off). */ memory?: { adviseDefaults?: boolean } };
   skillRouter: SkillRouterConfig;
   llm: LLMConfig;
   skills: SkillsConfig;
@@ -3700,7 +3755,7 @@ export function parseRoleLlmEntry(raw: unknown): { ok: true; spec: RoleLlmSpec }
   return { ok: true, spec };
 }
 
-export const MODEL_ROLES: readonly ModelRole[] = ['implement', 'review', 'research', 'planning', 'audit', 'classify'];
+export const MODEL_ROLES: readonly ModelRole[] = ['implement', 'review', 'research', 'planning', 'audit', 'classify', 'graph-grow'];
 
 export function isModelRole(v: unknown): v is ModelRole {
   return typeof v === 'string' && (MODEL_ROLES as readonly string[]).includes(v);
@@ -3858,8 +3913,8 @@ function defaultConfig(): UserConfig {
   return {
     cli: { helpRole: 'owner' },
     coo: { linearProject: '외부 행정·큰 일 (COO)' },
-    decisions: { linearProjection: { enabled: false } },
-    loops: { steward: { mode: 'shadow' }, seat: { mode: 'off', questions: 'shadow', seats: ['MK'], podPool: 'pool-node-b@node-b:8' }, persona: { enabled: false } },
+    decisions: { linearProjection: { enabled: false }, requireCrossCheck: false },
+    loops: { orchestrator: parseOrchestratorLoopConfig(undefined), steward: { mode: 'shadow' }, seat: { mode: 'off', questions: 'shadow', seats: ['MK'], podPool: 'pool-node-b@node-b:8' }, persona: { enabled: false } },
     skillRouter: { ...SR_DEFAULTS },
     llm: { ...LLM_DEFAULTS },
     skills: skillsDefaults(),
@@ -3928,7 +3983,7 @@ function defaultConfig(): UserConfig {
       nativeStructure: { ...TOOLS_DEFAULTS.nativeStructure },
       selfImplement: { ...TOOLS_DEFAULTS.selfImplement },
     },
-    harness: { budgetGate: { ...DEFAULT_BUDGET_GATE } },
+    harness: { budgetGate: { ...DEFAULT_BUDGET_GATE }, difficultyPlacement: false },
     grounding: { sources: [] },
     raw: {},
   };
@@ -4386,7 +4441,7 @@ function parseStewardLoopsConfig(input: unknown): UserConfig['loops'] {
     }
   }
   return { steward: {
-    mode: s.mode === 'off' || s.mode === 'shadow' || s.mode === 'live' ? s.mode :
+    mode: s.mode === 'off' || s.mode === 'shadow' || s.mode === 'live' || s.mode === 'rescue' ? s.mode :
       s.launch === 'off' || s.launch === 'shadow' || s.launch === 'live' ? s.launch : 'shadow',
     // A valid legacy launch setting remains effective when mode is absent; explicit mode always wins.
     ...(s.launch === 'off' || s.launch === 'shadow' || s.launch === 'live' ? { launch: s.launch } : {}),
@@ -4405,6 +4460,25 @@ export function parseCliHelpRole(raw: unknown): NonNullable<UserConfig['cli']>['
   return cli.helpRole === 'general' || cli.helpRole === 'contributor' ? cli.helpRole : 'owner';
 }
 
+const HQ_FENCE_ROLES: readonly HqFenceRole[] = ['telegram-poller', 'cron', 'seat-loop', 'release-run', 'conatus', 'git-push'];
+/** `hq` block (HQ-HB · HQ-FENCE): keep only well-typed fields — absent/invalid fields fall back to the hq module defaults. */
+export function parseHqConfig(raw: unknown): HqConfig | undefined {
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return undefined;
+  const r = raw as Record<string, unknown>;
+  const str = (v: unknown) => typeof v === 'string' && v.trim() ? v.trim() : undefined;
+  const out: HqConfig = {};
+  for (const key of ['arbiter', 'hostName', 'standby', 'tailnetDomain', 'tailscaleBin', 'seenGenerationFile'] as const) {
+    const v = str(r[key]); if (v) out[key] = v;
+  }
+  if (typeof r.ttlSeconds === 'number' && Number.isFinite(r.ttlSeconds) && r.ttlSeconds > 0) out.ttlSeconds = r.ttlSeconds;
+  if (typeof r.probeTimeoutSeconds === 'number' && Number.isFinite(r.probeTimeoutSeconds) && r.probeTimeoutSeconds > 0) out.probeTimeoutSeconds = r.probeTimeoutSeconds;
+  if (Array.isArray(r.failOpenRoles)) out.failOpenRoles = r.failOpenRoles.filter((v): v is HqFenceRole => HQ_FENCE_ROLES.includes(v as HqFenceRole));
+  if (r.healthUrls && typeof r.healthUrls === 'object' && !Array.isArray(r.healthUrls)) {
+    out.healthUrls = Object.fromEntries(Object.entries(r.healthUrls as Record<string, unknown>).filter((e): e is [string, string] => typeof e[1] === 'string'));
+  }
+  return Object.keys(out).length ? out : undefined;
+}
+
 export function buildUserConfig(path: string = defaultPath()): UserConfig {
   if (!existsSync(path)) return defaultConfigWithRuntimeProvider();
   let raw: unknown;
@@ -4530,6 +4604,8 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       ...(typeof legacyPod.pool === 'string' && legacyPod.pool.trim() ? { pool: legacyPod.pool.trim() } : {}),
       ...(typeof legacyPod.hostMirror === 'string' && legacyPod.hostMirror.trim() ? { hostMirror: legacyPod.hostMirror.trim() } : {}),
       ...(typeof legacyPod.groundingUrl === 'string' ? { groundingUrl: legacyPod.groundingUrl } : {}),
+      memory: { adviseDefaults: Boolean(legacyPod.memory && typeof legacyPod.memory === 'object' && !Array.isArray(legacyPod.memory)
+        && (legacyPod.memory as Record<string, unknown>).adviseDefaults === true) },
       lease: { perAccount: (() => {
         const lease = legacyPod.lease && typeof legacyPod.lease === 'object' && !Array.isArray(legacyPod.lease)
           ? (legacyPod.lease as Record<string, unknown>) : {};
@@ -4539,6 +4615,13 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
     },
     harness: {
       pod: { grokApiKeyOptIn: harnessPod.grokApiKeyOptIn === true },
+      difficultyPlacement: harness.difficultyPlacement === true,
+      queue: { seatCap: Object.fromEntries(Object.entries(
+        harness.queue && typeof harness.queue === 'object' && !Array.isArray(harness.queue)
+          && (harness.queue as Record<string, unknown>).seatCap && typeof (harness.queue as Record<string, unknown>).seatCap === 'object'
+          && !Array.isArray((harness.queue as Record<string, unknown>).seatCap)
+          ? (harness.queue as { seatCap: Record<string, unknown> }).seatCap : {},
+      ).filter(([seat, cap]) => /^(OP|TC|MK|UX)$/.test(seat) && typeof cap === 'number' && Number.isSafeInteger(cap) && cap > 0)) },
       ...(harness.substrate === 'local' || harness.substrate === 'pod' ? { substrate: harness.substrate } : {}),
       ...(typeof harness.podPool === 'string' && harness.podPool.trim() ? { podPool: harness.podPool.trim() } : {}),
       ...(typeof harness.worktreeAddTimeoutSec === 'number' && Number.isSafeInteger(harness.worktreeAddTimeoutSec)
@@ -5183,11 +5266,13 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       && typeof (rawObj.hitl as Record<string, unknown>).executionDeadlineMinutes === 'number'
       ? { hitl: { executionDeadlineMinutes: (rawObj.hitl as { executionDeadlineMinutes: number }).executionDeadlineMinutes } }
       : {}),
+    ...(parseHqConfig(rawObj.hq) ? { hq: parseHqConfig(rawObj.hq)! } : {}),
     cli: { helpRole: parseCliHelpRole(rawObj.cli) },
     coo: { linearProject: typeof (rawObj.coo as { linearProject?: unknown } | undefined)?.linearProject === 'string' && (rawObj.coo as { linearProject: string }).linearProject.trim()
       ? (rawObj.coo as { linearProject: string }).linearProject.trim() : '외부 행정·큰 일 (COO)' },
-    decisions: { linearProjection: { enabled: ((rawObj.decisions as { linearProjection?: { enabled?: unknown } } | undefined)?.linearProjection?.enabled === true) } },
-    loops: { ...(stewardLoops ?? {}), seat: parseSeatLoopsConfig(rawObj.loops),
+    decisions: { linearProjection: { enabled: ((rawObj.decisions as { linearProjection?: { enabled?: unknown } } | undefined)?.linearProjection?.enabled === true) },
+      requireCrossCheck: (rawObj.decisions as { requireCrossCheck?: unknown } | undefined)?.requireCrossCheck === true },
+    loops: { ...(stewardLoops ?? {}), orchestrator: parseOrchestratorLoopConfig((rawObj.loops as { orchestrator?: unknown } | undefined)?.orchestrator), seat: parseSeatLoopsConfig(rawObj.loops),
       persona: { enabled: (rawObj.loops as { persona?: { enabled?: unknown } } | undefined)?.persona?.enabled === true } },
     events: parseEventsConfig(rawObj.events),
     // M1-1: sparse — undefined when the user hasn't set anything, so
@@ -5783,14 +5868,17 @@ export function saveUserConfig(
       ...rawHarness,
       pod: cfg.harness?.pod ?? rawHarness.pod,
       budgetGate: cfg.harness?.budgetGate ?? rawHarness.budgetGate,
+      difficultyPlacement: cfg.harness?.difficultyPlacement ?? rawHarness.difficultyPlacement,
       defaultRepo: cfg.harness?.defaultRepo ?? rawHarness.defaultRepo,
       substrate: cfg.harness?.substrate,
       podPool: cfg.harness?.podPool,
+      queue: cfg.harness?.queue ?? rawHarness.queue,
     }),
     ...rawRest,
     ...(cfg.loops ? { loops: {
       ...rawLoops,
       ...(cfg.loops.steward ? { steward: { ...rawSteward, mode: cfg.loops.steward.mode ?? cfg.loops.steward.launch ?? 'shadow' } } : {}),
+      ...(cfg.loops.orchestrator ? { orchestrator: cfg.loops.orchestrator } : {}),
       ...(cfg.loops.seat ? { seat: {
         mode: cfg.loops.seat.mode,
         questions: cfg.loops.seat.questions ?? 'shadow',

package/src/version/packed-revision.json

@@ -1 +1 @@
-{"commit":"e61a9846510a7f6ac0a0f223d8e4c8b384685df8"}
+{"commit":"5116219907580581e7bb40b93018d155deafa5c2"}

package/src/workflow-runtime/executor.ts

@@ -18,6 +18,7 @@ import {
   isClassifyNode,
   isExtractNode,
   isFilterNode,
+  isKnowledgeNode,
   isHttpRequestNode,
   isIfNode,
   isIterationNode,
@@ -57,6 +58,7 @@ import { executeExtractNode } from './nodes/extract.js';
 import { executeSetNode } from './nodes/set.js';
 import { executeTaskNode } from './nodes/task.js';
 import { executeFilterNode } from './nodes/filter.js';
+import { executeKnowledgeNode } from './nodes/knowledge.js';
 import { executeTemplateNode } from './nodes/template.js';
 import { executeHttpRequestNode } from './nodes/http.js';
 import { executeShowroomNode } from './nodes/showroom.js';
@@ -706,6 +708,7 @@ async function dispatchNode(
   if (isExtractNode(node)) return executeExtractNode(node, ctx, deps);
   if (isSetNode(node)) return executeSetNode(node, ctx, deps);
   if (isFilterNode(node)) return executeFilterNode(node, ctx, deps);
+  if (isKnowledgeNode(node)) return executeKnowledgeNode(node, ctx, deps);
   if (isTemplateNode(node)) return executeTemplateNode(node, ctx, deps);
   if (isHttpRequestNode(node)) return executeHttpRequestNode(node, ctx, deps);
   if (isShowroomNode(node)) return executeShowroomNode(node, ctx, deps);
@@ -748,6 +751,7 @@ function isTriggerVariant(node: DagNode): boolean {
 
 function variantOf(node: DagNode): string {
   if (isPluginKindNode(node)) return node.kind;
+  if (isKnowledgeNode(node)) return 'knowledge';
   const guards: ReadonlyArray<(node: DagNode) => boolean> = [
     isPromptNode, isBashNode, isSkillNode, isCftNode, isApprovalNode, isIfNode,
     isSwitchNode, isIterationNode, isClassifyNode, isExtractNode, isSetNode,

package/src/workflow-runtime/node-catalog.ts

@@ -207,6 +207,19 @@ export const NODE_CATALOG: readonly NodeSpec[] = [
     condition: $item != 'skip'`,
     related: ['iteration'],
   },
+  {
+    kind: 'knowledge',
+    category: 'transform',
+    summary: '볼트 검색 · 찾은 조각을 다음 노드에',
+    yamlKey: 'knowledge',
+    required: ['query'],
+    optional: ['limit'],
+    example: `- id: notes
+  knowledge:
+    query: $ARGUMENTS
+    limit: 3`,
+    related: ['prompt'],
+  },
   {
     kind: 'template',
     category: 'transform',

package/src/workflow-runtime/nodes/knowledge.ts

@@ -0,0 +1,38 @@
+import { dispatchElanousObsidianSearch } from '../../tool-runtime/elanous-obsidian-search-runtime.js';
+import type { KnowledgeNode, NodeExecContext, NodeOutput, WorkflowDeps } from '../types.js';
+import { interpolate } from '../variables.js';
+
+export async function executeKnowledgeNode(
+  node: KnowledgeNode,
+  ctx: NodeExecContext,
+  deps: WorkflowDeps,
+): Promise<NodeOutput> {
+  const startedAt = Date.now();
+  try {
+    const query = interpolate(node.knowledge.query, {
+      arguments: ctx.arguments,
+      artifactsDir: ctx.artifactsDir,
+      outputs: ctx.outputs,
+    }).text;
+    const limit = node.knowledge.limit ?? 5;
+    const result = await (deps.searchObsidian ?? dispatchElanousObsidianSearch)({ query, limit });
+    const matches = result.matches;
+    return {
+      ok: true,
+      output: result.error ? '' : matches.slice(0, limit)
+        .map(match => `— ${match.path}:${match.lineNumber}\n${match.snippet.slice(0, 400)}`)
+        .join('\n\n'),
+      matches,
+      ...(result.error ? { error: result.error } : matches.length === 0 ? { error: 'no matches' } : {}),
+      durationMs: Date.now() - startedAt,
+    };
+  } catch (err) {
+    return {
+      ok: true,
+      output: '',
+      matches: [],
+      error: err instanceof Error ? err.message : String(err),
+      durationMs: Date.now() - startedAt,
+    };
+  }
+}

package/src/workflow-runtime/schema.ts

@@ -16,6 +16,7 @@ import type {
   DiscordTriggerNode,
   ExtractNode,
   FilterNode,
+  KnowledgeNode,
   HttpRequestNode,
   IfNode,
   IterationNode,
@@ -47,7 +48,7 @@ let resolvingSubworkflowReferences = false;
 /** ⛔ 노드 변종의 SSOT — 도움말·문서가 이 배열에서 «파생»한다.
  *  손으로 목록을 옮겨 적으면 늙는다(2026-09-22 실측: `elanous wf --help` 가 13종만 말했고
  *  이 배열은 21종을 받고 있었다 — 여덟이 «안내 없이» 살아 있었다). */
-export const WORKFLOW_NODE_VARIANT_KEYS = WORKFLOW_CORE_KINDS;
+export const WORKFLOW_NODE_VARIANT_KEYS = [...WORKFLOW_CORE_KINDS] as const;
 
 const KEBAB_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 const TRIGGER_RULES: readonly TriggerRule[] = [
@@ -825,6 +826,18 @@ export function validateWorkflow(raw: unknown): ValidationResult {
           push(`${path}.filter.condition`, "'filter.condition' is required and must be a non-empty string");
         }
       }
+    } else if (variant === 'knowledge') {
+      if (!isObject(variantValue)) {
+        push(`${path}.knowledge`, "'knowledge' must be an object with a 'query' field");
+      } else {
+        if (typeof variantValue['query'] !== 'string') {
+          push(`${path}.knowledge.query`, "'knowledge.query' is required and must be a string expression");
+        }
+        const limit = variantValue['limit'];
+        if (limit !== undefined && (!Number.isInteger(limit) || (limit as number) < 1 || (limit as number) > 200)) {
+          push(`${path}.knowledge.limit`, "'knowledge.limit' must be an integer from 1 to 200");
+        }
+      }
     } else if (variant === 'iteration') {
       // Node-catalog N1.3 (2026-05-11) — sequential loop.
       if (!isObject(variantValue)) {
@@ -1093,6 +1106,9 @@ export const isFilterNode = (n: DagNode): n is FilterNode =>
   typeof (n as FilterNode).filter === 'object' && (n as FilterNode).filter !== null
   && typeof ((n as FilterNode).filter as { items?: unknown }).items === 'string'
   && typeof ((n as FilterNode).filter as { condition?: unknown }).condition === 'string';
+export const isKnowledgeNode = (n: DagNode): n is KnowledgeNode =>
+  typeof (n as KnowledgeNode).knowledge === 'object' && (n as KnowledgeNode).knowledge !== null
+  && typeof ((n as KnowledgeNode).knowledge as { query?: unknown }).query === 'string';
 export const isTemplateNode = (n: DagNode): n is TemplateNode =>
   typeof (n as TemplateNode).template === 'object' && (n as TemplateNode).template !== null
   && typeof ((n as TemplateNode).template as { template?: unknown }).template === 'string';

package/src/workflow-runtime/types.ts

@@ -6,6 +6,7 @@
 // `depends_on` + `when` + `trigger_rule` topology.
 
 import type { ToolPolicy } from '../tool-runtime/tool-policy.js';
+import type { ElanousObsidianSearchArgs, ElanousObsidianSearchResult } from '../tool-runtime/elanous-obsidian-search-runtime.js';
 import type { CapabilityRequirements } from '../registry/resolver.js';
 
 export type { CapabilityRequirements } from '../registry/resolver.js';
@@ -21,8 +22,10 @@ export interface NodeOutput {
    *  (typically an error message string) so downstream `when` clauses
    *  can branch on `$<id>.error`. */
   ok: boolean;
-  /** Error message when ok=false. */
+  /** Error message (knowledge search errors can also occur with ok=true). */
   error?: string;
+  /** Raw Obsidian matches for a knowledge node; output remains prompt-ready text. */
+  matches?: ElanousObsidianSearchResult['matches'];
   /** Wall-clock duration in ms. */
   durationMs: number;
   /** Run id of the workflow called by a subworkflow node, including failures. */
@@ -185,6 +188,12 @@ export interface FilterNode extends DagNodeBase {
     condition: string;
   };
 }
+export interface KnowledgeNode extends DagNodeBase {
+  knowledge: {
+    query: string;
+    limit?: number;
+  };
+}
 /** Node-catalog N4.1 (2026-05-11) — Schedule trigger. v1 = schema +
  *  executor pass-through. Daemon-side cron / interval registration is
  *  deferred to a follow-up that touches `nexus/daemon/scheduler.ts` +
@@ -513,6 +522,7 @@ export type DagNode =
   | (ExtractNode & { kind?: undefined })
   | (SetNode & { kind?: undefined })
   | (FilterNode & { kind?: undefined })
+  | (KnowledgeNode & { kind?: undefined })
   | (TemplateNode & { kind?: undefined })
   | (HttpRequestNode & { kind?: undefined })
   | (ShowroomNode & { kind?: undefined })
@@ -699,6 +709,8 @@ export interface WorkflowDeps {
     body: string,
     opts: { timeoutMs?: number; signal?: AbortSignal; cwd?: string; env?: NodeJS.ProcessEnv }
   ) => Promise<{ stdout: string; stderr: string; exitCode: number }>;
+  /** Obsidian search for knowledge nodes. Omitted = in-process vault search. */
+  searchObsidian?: (args: ElanousObsidianSearchArgs) => Promise<ElanousObsidianSearchResult>;
   /** Create a TOX task (`task` node). Omitted = the in-process TOX
    *  `dispatchTaskCreate`. */
   createTask?: (req: WorkflowTaskRequest) => Promise<WorkflowTaskResult>;