elanous 0.2.12 → 0.2.13

package/src/cli/decisions-cli.ts

@@ -1,4 +1,10 @@
-import type { Command } from 'commander';
+import { Option, type Command } from 'commander';
+import { hqCliWriteAllowed, type HqDeps } from '../hq/hq.js';
+import { fileLeaseStore } from '../hq/lease.js';
+import { join } from 'node:path';
+import { getElanousConfigDirOverride } from '../elanous-config-dir.js';
+import { effectiveInstanceRoot } from '../instance/resolve.js';
+import { getUserConfig } from '../user-config.js';
 import { projectDecisionsToLinear } from '../decisions/decision-linear-projection.js';
 import { DecisionLedger, importDecisionMarkdown, type DecisionCategory, type DecisionLedgerOptions, type DecisionOption, type DecisionTrack, type DecisionEntry } from '../decisions/decision-ledger.js';
 
@@ -46,13 +52,19 @@ export function formatDecisionDetail(e: DecisionEntry): string {
     ...(e.refs?.length ? [`참조: ${e.refs.join(' · ')}`] : [])].join('\n');
 }
 
-export function registerDecisionsCommands(program: Command, config: DecisionLedgerOptions = {}, out: Pick<Console, 'log'> = console): void {
-  const root = program.command('decisions').description('대표 결정 원장 · 로컬 전용');
+export function registerDecisionsCommands(program: Command, config: DecisionLedgerOptions = {}, out: Pick<Console, 'log'> = console, hqDeps: HqDeps = {}): void {
+  const noXcheck = new Option('--no-xcheck <이유>', '교차 확인 생략 이유');
+  // This flag takes a reason, not Commander's negated boolean default.
+  noXcheck.negate = false;
+  const root = program.command('decisions').description('대표 결정 원장 · 로컬 전용').option('--hq-override', '본부 임대 거부를 관측하며 수동 우회');
+  const mayWrite = (command: string, override?: boolean) => hqCliWriteAllowed(`decisions ${command}`, Boolean(override || root.opts().hqOverride),
+    (getElanousConfigDirOverride() || config.stateDir) && !hqDeps.store && !getUserConfig().hq?.arbiter ? { ...hqDeps, store: fileLeaseStore(join(config.stateDir ?? effectiveInstanceRoot(), 'hq', 'lease.json')), seenPath: join(config.stateDir ?? effectiveInstanceRoot(), 'hq', 'seen-generation'), localPath: join(config.stateDir ?? effectiveInstanceRoot(), 'hq', 'local.json') } : hqDeps);
   const emit = (value: unknown, json?: boolean, text?: string) => out.log(json ? JSON.stringify(value) : text ?? JSON.stringify(value));
   const fail = (action: () => void) => { try { action(); } catch (e) { throw new Error(`decisions: ${e instanceof Error ? e.message : String(e)}`); } };
   root.command('linear-sync').description('열린 결정을 COO Linear 프로젝트에 투영하고 닫힌 결정을 동기화한다')
-    .option('--dry-run').option('--json')
-    .action(async (o: { dryRun?: boolean; json?: boolean }) => {
+    .option('--dry-run').option('--json').option('--hq-override')
+    .action(async (o: { dryRun?: boolean; json?: boolean; hqOverride?: boolean }) => {
+      if (!o.dryRun && !mayWrite('linear-sync', o.hqOverride)) return;
       const result = await projectDecisionsToLinear({ stateDir: config.stateDir, dryRun: o.dryRun });
       emit(result, o.json, result.reason ?? `생성 ${result.created} · 닫음 ${result.closed} · 건너뜀 ${result.skipped} · 실패 ${result.failed}${result.plan?.length ? `\n${result.plan.map(p => `${p.action} ${p.decisionId}${p.issue ? ` ${p.issue}` : ''}`).join('\n')}` : ''}`);
     });
@@ -61,21 +73,36 @@ export function registerDecisionsCommands(program: Command, config: DecisionLedg
     .requiredOption('--s <text>').requiredOption('--c <text>').option('--q <text>').option('--a <text>')
     .requiredOption('--option <key=label:consequence>', '선택지 (두 번 이상)', repeat, [] as string[])
     .option('--recommend <key>').option('--why <text>').option('--skip-recommend <reason>')
+    .option('--xcheck <SEAT:메모>', '교차 확인 (반복)', repeat, [] as string[])
+    .addOption(noXcheck)
+    .option('--alternative <key>').option('--dissent <text>')
     .option('--track <track>').option('--agent <agent>').option('--session <id>')
     .option('--resume-question <qid>').option('--run <runId>')
     .option('--ref <url>', '참조 (반복)', repeat, [] as string[])
     .option('--due <when>', '기한 — UTC ISO(2026-10-04T09:00:00Z) 또는 +Nh(지금부터 N시간) · 기한 2시간 전 텔레그램·디스코드로 다시 알린다')
-    .option('--json')
-    .action((o: { due?: string; title: string; category: DecisionCategory; s: string; c: string; q?: string; a?: string; option: string[]; recommend?: string; why?: string; skipRecommend?: string; track?: DecisionTrack; agent?: string; session?: string; resumeQuestion?: string; run?: string; ref: string[]; json?: boolean }) => fail(() => {
+    .option('--json').option('--hq-override')
+    .action((o: { due?: string; title: string; category: DecisionCategory; s: string; c: string; q?: string; a?: string; option: string[]; recommend?: string; why?: string; skipRecommend?: string; xcheck: string[]; noXcheck?: string; alternative?: string; dissent?: string; track?: DecisionTrack; agent?: string; session?: string; resumeQuestion?: string; run?: string; ref: string[]; json?: boolean; hqOverride?: boolean }) => fail(() => {
       if (o.run !== undefined && o.resumeQuestion === undefined) throw new Error('--run requires --resume-question');
       if (o.skipRecommend !== undefined && (o.recommend !== undefined || o.why !== undefined)) throw new Error('choose recommendation or skip, not both');
       if (o.skipRecommend === undefined && (!o.recommend || !o.why)) throw new Error('--recommend and --why required, or --skip-recommend <reason>');
       const options: DecisionOption[] = o.option.map(parseOption);
+      if (o.xcheck.length && o.noXcheck !== undefined) throw new Error('choose --xcheck or --no-xcheck, not both');
+      const crossCheck = o.xcheck.map(raw => {
+        const match = /^([^:\s]+):(.+)$/.exec(raw);
+        if (!match || !match[2]!.trim()) throw new Error(`invalid --xcheck: ${raw} (expected SEAT:메모)`);
+        return { seat: match[1]!, at: new Date().toISOString(), note: match[2]!.trim() };
+      });
+      if (!crossCheck.length && o.noXcheck === undefined && getUserConfig().decisions?.requireCrossCheck) throw new Error('교차 확인 없음 — --xcheck SEAT:메모 또는 --no-xcheck 이유');
+      const who = agent(o.agent);
+      if (!mayWrite('raise', o.hqOverride)) return;
       const entry = new DecisionLedger(config).raise({ title: o.title, category: o.category, scqa: { s: o.s, c: o.c, ...(o.q ? { q: o.q } : {}), ...(o.a ? { a: o.a } : {}) }, options,
+        ...(crossCheck.length ? { crossCheck } : { crossCheckSkipped: o.noXcheck ?? 'missing' }),
+        ...(o.alternative !== undefined ? { alternative: o.alternative } : {}), ...(o.dissent !== undefined ? { dissent: o.dissent } : {}),
         recommendation: o.skipRecommend !== undefined ? { skipped: true, reason: o.skipRecommend } : { option: o.recommend!, why: o.why! },
-        raisedBy: { agent: agent(o.agent), ...(o.track ? { track: o.track } : {}), ...(o.session ? { session: o.session } : {}) }, ...(o.ref.length ? { refs: o.ref } : {}),
+        raisedBy: { agent: who, ...(o.track ? { track: o.track } : {}), ...(o.session ? { session: o.session } : {}) }, ...(o.ref.length ? { refs: o.ref } : {}),
         ...(o.resumeQuestion !== undefined ? { resume: { questionId: o.resumeQuestion, ...(o.run !== undefined ? { runId: o.run } : {}) } } : {}),
         ...(o.due ? { dueAt: dueAt(o.due) } : {}) });
+      if (entry.crossCheckSkipped === 'missing') console.error('교차 확인 없음 — --xcheck SEAT:메모 또는 --no-xcheck 이유');
       emit(entry, o.json, `올림: ${formatDecisionRow(entry)}`);
     }));
   root.command('list').description('결정 목록 (기본 열린 것)')
@@ -88,11 +115,12 @@ export function registerDecisionsCommands(program: Command, config: DecisionLedg
   root.command('show <id>').description('SCQA · 선택지 · 권고 · 이력 · 판').option('--json')
     .action((id: string, o: { json?: boolean }) => fail(() => { const entry = new DecisionLedger(config).show(id); emit(entry, o.json, formatDecisionDetail(entry)); }));
   root.command('decide <id> <option>').description('사람 또는 AUTO 위임 결정 기록')
-    .option('--note <text>').option('--auto').option('--delegation <reason>').option('--track <track>').option('--agent <agent>').option('--json')
-    .action((id: string, choice: string, o: { note?: string; auto?: boolean; delegation?: string; track?: DecisionTrack; agent?: string; json?: boolean }) => fail(() => {
+    .option('--note <text>').option('--auto').option('--delegation <reason>').option('--track <track>').option('--agent <agent>').option('--json').option('--hq-override')
+    .action((id: string, choice: string, o: { note?: string; auto?: boolean; delegation?: string; track?: DecisionTrack; agent?: string; json?: boolean; hqOverride?: boolean }) => fail(() => {
       if (o.auto && !o.delegation?.trim()) throw new Error('--auto requires --delegation');
       if (!o.auto && (o.delegation || o.track || o.agent)) throw new Error('delegation/track/agent require --auto');
       const by = o.auto ? { kind: 'auto' as const, agent: agent(o.agent), delegation: o.delegation!, ...(o.track ? { track: o.track } : {}) } : { kind: 'human' as const };
+      if (!mayWrite('decide', o.hqOverride)) return;
       const { entry, delivery } = new DecisionLedger(config).decideWithDelivery(id, choice, by, o.note);
       if (delivery && !delivery.ok) {
         // The decision is recorded; only the answer to the waiting run failed — say so and how to retry, never «success».
@@ -103,22 +131,26 @@ export function registerDecisionsCommands(program: Command, config: DecisionLedg
       }
       emit(delivery ? { ...entry, delivery } : entry, o.json, `결정: ${formatDecisionDetail(entry)}`);
     }));
-  root.command('retry-answer <id>').description('기록된 결정의 대기 질문 답 전달만 재시도한다').option('--json')
-    .action((id: string, o: { json?: boolean }) => fail(() => {
+  root.command('retry-answer <id>').description('기록된 결정의 대기 질문 답 전달만 재시도한다').option('--json').option('--hq-override')
+    .action((id: string, o: { json?: boolean; hqOverride?: boolean }) => fail(() => {
+      if (!mayWrite('retry-answer', o.hqOverride)) return;
       const entry = new DecisionLedger(config).retryAnswer(id);
       emit(entry, o.json, `답 전달: ${entry.id} → ${entry.resume?.questionId}`);
     }));
   root.command('add-options <id>').description('선택지가 미기재된 과거 항목에 확인된 선택지를 추가')
     .requiredOption('--option <key=label:consequence>', '선택지 (두 번 이상)', repeat, [] as string[])
-    .option('--agent <agent>').option('--json')
-    .action((id: string, o: { option: string[]; agent?: string; json?: boolean }) => fail(() => {
-      const entry = new DecisionLedger(config).addOptions(id, o.option.map(parseOption), agent(o.agent));
+    .option('--agent <agent>').option('--json').option('--hq-override')
+    .action((id: string, o: { option: string[]; agent?: string; json?: boolean; hqOverride?: boolean }) => fail(() => {
+      const who = agent(o.agent);
+      if (!mayWrite('add-options', o.hqOverride)) return;
+      const entry = new DecisionLedger(config).addOptions(id, o.option.map(parseOption), who);
       emit(entry, o.json, formatDecisionDetail(entry));
     }));
-  root.command('withdraw <id>').description('결정 철회도 원장에 남긴다').requiredOption('--reason <reason>').option('--json')
-    .action((id: string, o: { reason: string; json?: boolean }) => fail(() => { const entry = new DecisionLedger(config).withdraw(id, o.reason); emit(entry, o.json, `철회: ${formatDecisionDetail(entry)}`); }));
-  root.command('import-markdown <file>').description('기존 대표 결정 문서 씨앗을 가져온다 (재실행 안전)').option('--json')
-    .action((file: string, o: { json?: boolean }) => fail(() => {
+  root.command('withdraw <id>').description('결정 철회도 원장에 남긴다').requiredOption('--reason <reason>').option('--json').option('--hq-override')
+    .action((id: string, o: { reason: string; json?: boolean; hqOverride?: boolean }) => fail(() => { if (!mayWrite('withdraw', o.hqOverride)) return; const entry = new DecisionLedger(config).withdraw(id, o.reason); emit(entry, o.json, `철회: ${formatDecisionDetail(entry)}`); }));
+  root.command('import-markdown <file>').description('기존 대표 결정 문서 씨앗을 가져온다 (재실행 안전)').option('--json').option('--hq-override')
+    .action((file: string, o: { json?: boolean; hqOverride?: boolean }) => fail(() => {
+      if (!mayWrite('import-markdown', o.hqOverride)) return;
       const result = importDecisionMarkdown(new DecisionLedger(config), file);
       emit(result, o.json, `가져옴 ${result.imported.length} · 기존 ${result.existing.length} · 불완전 ${result.incomplete.length} · 못 읽음 ${result.unread.length}${result.incomplete.length ? `\n${result.incomplete.join('\n')}` : ''}${result.unread.length ? `\n${result.unread.join('\n')}` : ''}`);
       if (result.unread.length) process.exitCode = 1;

package/src/cli/outputs-cli.ts

@@ -0,0 +1,92 @@
+import { accessSync, constants, readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import type { Command } from 'commander';
+import { debug } from '../debug/log.js';
+import { effectiveInstanceRoot } from '../instance/resolve.js';
+import type { OutputEntry } from '../outputs/ledger.js';
+import { writeStdoutJson } from './stdout-json.js';
+
+type ListOptions = { since?: string; source?: string; limit?: string; json?: boolean };
+
+function sinceIso(value: string): string {
+  if (value === '24h' || value === '7d') {
+    return new Date(Date.now() - (value === '24h' ? 24 : 7 * 24) * 60 * 60 * 1000).toISOString();
+  }
+  if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/.test(value)
+    || !Number.isFinite(Date.parse(value))
+    || new Date(`${value.slice(0, 10)}T00:00:00Z`).toISOString().slice(0, 10) !== value.slice(0, 10)) {
+    throw new Error(`invalid --since: ${value} (ISO|24h|7d)`);
+  }
+  return new Date(value).toISOString();
+}
+
+// listOutputs intentionally tolerates unreadable months. Detect inaccessible ledger files here so the CLI
+// does not report an incomplete read as a genuine zero (including when run as root under chmod 000).
+function assertReadableLedger(root: string): void {
+  const dir = join(root, 'outputs');
+  let names: string[];
+  try {
+    const info = statSync(dir);
+    if (!info.isDirectory() || (info.mode & 0o444) === 0 || (info.mode & 0o111) === 0) {
+      throw new Error(`outputs ledger directory unreadable: ${dir}`);
+    }
+    accessSync(dir, constants.R_OK | constants.X_OK);
+    names = readdirSync(dir);
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return;
+    throw error;
+  }
+  for (const name of names.filter(name => /^outputs-\d{4}-(0[1-9]|1[0-2])\.jsonl$/.test(name) || name === 'outputs.jsonl')) {
+    const file = join(dir, name);
+    const info = statSync(file);
+    if (!info.isFile() || (info.mode & 0o444) === 0) throw new Error(`outputs ledger file unreadable: ${file}`);
+    accessSync(file, constants.R_OK);
+  }
+}
+
+export function registerOutputsCommands(program: Command): void {
+  program.command('outputs').description('산출물 원장 조회 (읽기 전용)')
+    .command('list').description('산출물 최신순 목록과 종류별 수')
+    .option('--since <ISO|24h|7d>', '이 시각 이후')
+    .option('--source <source>', 'exec|field-reel|field-feed')
+    .option('--limit <N>', '최대 건수 (기본 50)', '50')
+    .option('--json', 'JSON 출력')
+    .action(async (options: ListOptions) => {
+      try {
+        if (options.source !== undefined && !['exec', 'field-reel', 'field-feed'].includes(options.source)) {
+          throw new Error(`invalid --source: ${options.source} (exec|field-reel|field-feed)`);
+        }
+        if (!options.limit || !/^[1-9]\d*$/.test(options.limit) || !Number.isSafeInteger(Number(options.limit))) {
+          throw new Error(`invalid --limit: ${options.limit}`);
+        }
+        const scope = {
+          since: options.since === undefined ? undefined : sinceIso(options.since),
+          source: options.source as OutputEntry['source'] | undefined,
+          limit: Number(options.limit),
+        };
+        const displayedScope = { since: scope.since ?? null, source: scope.source ?? null, limit: scope.limit };
+        const root = effectiveInstanceRoot();
+        assertReadableLedger(root);
+        const { listOutputs } = await import('../outputs/ledger.js');
+        const items = listOutputs(scope, root);
+        const byKind: Record<string, number> = {};
+        for (const item of items) byKind[item.kind] = (byKind[item.kind] ?? 0) + 1;
+        debug.log('outputs.cli', 'list', { count: items.length, source: scope.source, since: scope.since });
+        if (options.json) {
+          await writeStdoutJson(`${JSON.stringify({ items, count: items.length, byKind, scope: displayedScope })}\n`);
+          return;
+        }
+        for (const item of items) {
+          const at = Number.isFinite(Date.parse(item.at))
+            ? new Intl.DateTimeFormat('sv-SE', { timeZone: 'Asia/Seoul', dateStyle: 'short', timeStyle: 'medium', hourCycle: 'h23' }).format(new Date(item.at))
+            : item.at;
+          console.log(`${at} KST · ${item.kind} · ${item.title} · ${item.source}/${item.sourceId} · ${item.seat ?? '—'} · ${item.path ?? item.url ?? '—'}`);
+        }
+        if (!items.length) console.log(`scope: ${JSON.stringify(displayedScope)}`);
+        console.log(`${items.length}개 · 종류별 수 ${JSON.stringify(byKind)}`);
+      } catch (error) {
+        console.error(`outputs list: ${error instanceof Error ? error.message : String(error)}`);
+        process.exitCode = 1;
+      }
+    });
+}

package/src/cli/persona-cli.ts

@@ -9,6 +9,8 @@ import { parsePersonaYaml } from '../persona/loader.js';
 import { resolveRepositoryPersonaDir, resolveStatePersonaDir } from '../persona/global-registry.js';
 import { UnknownPersonaSchemaKeyError, choosePersonaId, clonePreset, describePreset, editPersona, findPreset, loadPresetIndex, loadPresets, presetToProfileYaml } from '../persona/presets.js';
 import { addTeamSet, listTeamSets, removeTeamSet } from '../persona/team-set.js';
+import { validateTeamFile } from '../persona/team.js';
+import { runPersonaLoopOnce } from '../seat-loop/seat-loop.js';
 
 interface StoredPersona { personaId: string; displayName: string; description?: string; preset?: string; title?: string; path: string }
 
@@ -68,6 +70,18 @@ function editOptions(fromFile: string | undefined, assignments: readonly string[
 }
 
 export function registerPersonaCommands(program: Command): void {
+  program.command('team').description('Validate a YAML team definition')
+    .command('validate <file>').description('Check team schema, persona references and handoff order')
+    .action((file: string) => {
+      try {
+        const definition = validateTeamFile(file);
+        console.log(`Valid team ${definition.name}`);
+      } catch (error) {
+        console.error(error instanceof Error ? error.message.replace(/\s+/g, ' ').trim() : String(error));
+        process.exitCode = 2;
+      }
+    });
+
   const team = program.command('team-set').description('Install, remove and list persona team sets');
   team.command('add <file>').description('Install a YAML team set').action((file: string) => {
     try { const result = addTeamSet(file); console.log(`Installed team-set ${result['team-set']}`); }
@@ -178,6 +192,21 @@ export function registerPersonaCommands(program: Command): void {
       }
     });
 
+  persona.command('loop <name>')
+    .description('Shadow-pick one todo for a saved persona without executing it')
+    .requiredOption('--once', 'Pick exactly one todo')
+    .option('--json', 'JSON output')
+    .action(async (name: string, opts: { json?: boolean }) => {
+      try {
+        const entry = await runPersonaLoopOnce(name);
+        if (opts.json) console.log(JSON.stringify(entry));
+        else console.log(entry.todo ? `그림자 선택 — ${entry.todo.title} (${entry.todo.id})` : '할 일 없음');
+      } catch (error) {
+        console.error(error instanceof Error ? error.message : String(error));
+        process.exitCode = 1;
+      }
+    });
+
   persona.command('show <name>')
     .description('Show one of your personas (id or name), or a preset')
     .option('--json', 'JSON output')

package/src/cli/pod-cli.ts

@@ -6,9 +6,10 @@ import { debug } from '../debug/log.js';
 import { readPodMemoryAdvice } from './pod-memory-advice.js';
 import { getUserConfig } from '../user-config.js';
 import { listCodexAccountsInStore } from '../oauth/codex-account-store.js';
-import { parsePodPool, resolvePodPoolSpec, type PoolKubectl } from '../task-orchestrator/surfaces/pod-pool.js';
+import { parsePodPool, resolvePodPoolSpec, podPoolHostLease, type PoolKubectl } from '../task-orchestrator/surfaces/pod-pool.js';
 import { leaseKubectl, measurePoolLease, probePoolDns, recommendConcurrency, type PoolLeaseMeasure, type PoolDnsProbe } from '../task-orchestrator/surfaces/pod-lease.js';
 import { POD_COMMAND_DEADLINE_SECONDS, runPodCommand, type PodCommandResult, type RunPodCommandOptions } from '../task-orchestrator/surfaces/pod-command-job.js';
+import { hostLeaseCounts, leaseHasPendingPod } from '../pod-lease/host-lease.js';
 
 export interface PodCliIo {
   log: (line: string) => void;
@@ -78,8 +79,13 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
         const perAccount = (deps.perAccount ?? (() => getUserConfig().pod?.lease?.perAccount ?? 4))();
         const decision = recommendConcurrency(measure, { capacity: members.reduce((sum, m) => sum + m.capacity, 0), accounts: accounts ?? -1, perAccount });
         if (!context) { decision.recommended = null; decision.limitedBy = null; decision.reason = '측정 불가: cluster (current context)'; }
-        const result = { pool: spec, ...measure, accounts, perAccount, ...decision };
-        debug.log('pod.lease', 'status', { pool: spec ? members.map((m) => ({ capacity: m.capacity })) : null, running: decision.running, pending: decision.pending, unleasedRunning: decision.unleasedRunning, recommended: decision.recommended, limitedBy: decision.limitedBy });
+        const records = members.length ? podPoolHostLease(members).live() : [];
+        const host = hostLeaseCounts(records);
+        // Pending Pods and Job-only reservations are disjoint; a lease for an already Pending Job is the same Job.
+        const waitingJobs = decision.pending === null ? null : decision.pending +
+          records.filter((r) => r.stage === 'job' && !leaseHasPendingPod(r, decision.pendingJobs ?? [])).length;
+        const result = { pool: spec, ...measure, accounts, perAccount, ...decision, reserved: host.reserved, waitingJobs };
+        debug.log('pod.lease', 'status', { pool: spec ? members.map((m) => ({ capacity: m.capacity })) : null, running: decision.running, pending: decision.pending, reserved: host.reserved, waitingJobs, unleasedRunning: decision.unleasedRunning, recommended: decision.recommended, limitedBy: decision.limitedBy });
         if (opts.json) io.log(JSON.stringify(result));
         else {
           io.log(`풀: ${(spec ?? context) || '?'}`);
@@ -89,6 +95,7 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
             io.log(`${m.context} | ${m.capacity} | ${m.running ?? '?'} | ${m.pending ?? '?'} | ${mem(m.memoryLimitBytes)}/${mem(m.allocatableMemoryBytes)} | ${m.allocatableCpuMillicores === null ? '?' : m.allocatableCpuMillicores / 1000}${m.reason ? ` (${m.reason})` : ''}`);
           }
           io.log(`권장 지금 ${decision.recommended ?? '?'} 개 더 (limitedBy=${decision.limitedBy ?? 'unknown'})${decision.reason ? ` · ${decision.reason}` : ''}`);
+          io.log(`예약(저작 중) ${host.reserved} · 대기 Job ${waitingJobs ?? '?'} · 실행 ${decision.running ?? '?'}`);
           io.log(`임대 없는 실행 ${decision.unleasedRunning ?? '?'}`);
           io.log(`capacity: ${decision.capacitySlots ?? '?'} 칸 (상한 ${members.reduce((sum, m) => sum + m.capacity, 0)} − Running ${decision.running ?? '?'} − Pending ${decision.pending ?? '?'}; 권장 수에서 건강한 멤버의 임대 없는 실행 차감)`);
           io.log(`memory: ${decision.memorySlots ?? '?'} 칸 (할당 가능 − Running 하니스 상한 합; 골당 16Gi · 모든 네임스페이스의 노드별 기존 예약을 반영해 배치 가능 ${decision.placeableSlots ?? '?'} 칸)`);

package/src/cli/pr-cli.ts

@@ -53,6 +53,7 @@ import {
 } from './pr-granularity.js';
 import { branchLineageSlug, findSiblingPrs } from './pr-lineage.js';
 import { parseReleaseNoteSection } from '../release-loop/release-note.js';
+import { enqueueL8ShadowQueue, runL8ShadowQueue, shadowPrNumber, statusL8ShadowQueue, type L8ShadowQueueDeps } from '../self-implement/l8-merge-queue.js';
 
 export { branchLineageSlug, findSiblingPrs };
 
@@ -1635,8 +1636,21 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
   return 0;
 }
 
-export function registerPrCommands(program: Command, deps: PrLandDeps = {}): void {
+export function registerPrCommands(program: Command, deps: PrLandDeps = {}, queueDeps: L8ShadowQueueDeps = {}): void {
   const pr = program.command('pr').description('PR landing commands');
+  const queue = pr.command('queue').description('Shadow merge queue (never lands PRs)');
+  const queueAction = async (action: () => Promise<unknown>) => {
+    try {
+      (deps.out ?? liveOut).log(JSON.stringify(await action()));
+    } catch (error) {
+      (deps.out ?? liveOut).error(`✗ merge-queue: ${String(error)}`);
+      (deps.setExitCode ?? ((code: number) => { process.exitCode = code; }))(1);
+    }
+  };
+  queue.command('status').description('Show pending PRs and shadow verdicts').action(() => queueAction(() => statusL8ShadowQueue(process.cwd(), queueDeps)));
+  queue.command('enqueue <pr>').description('Pin a ready PR at the tail of the shadow queue').action((prNumber: string) => queueAction(() => enqueueL8ShadowQueue(process.cwd(), shadowPrNumber(prNumber), queueDeps)));
+  queue.command('run').description('Evaluate the first PR without merging').requiredOption('--shadow', 'Only evaluate; never land').action(() => queueAction(() => runL8ShadowQueue(process.cwd(), queueDeps)));
+
   pr.command('land')
     .description('현재 브랜치 PR을 생성 또는 갱신해 ready 상태로 만들고 squash merge')
     .option('--base <branch>', 'PR base branch')

package/src/cli/release-cli.ts

@@ -23,13 +23,15 @@ import { debug } from '../debug/log.js';
 import { effectiveInstanceRoot, releaseLedgerRoot } from '../instance/resolve.js';
 import { getElanousConfigDirOverride } from '../elanous-config-dir.js';
 import { envLiteral } from '../platform/env-literal.js';
-import { userConfigPath } from '../user-config.js';
+import { getUserConfig, userConfigPath } from '../user-config.js';
 import { addItem, claimItem, decodeClaimHistoryEntry, devVersion, listChecklist, ownerMatches, parseOwner, parityGap, removeItem, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus, type ChecklistDisposition, type ChecklistKind } from '../release-loop/checklist.js';
 import * as features from '../release-loop/feature-store.js';
-import { landedButYellow, type MergedChecklistPr } from '../release-loop/landed-but-yellow.js';
+import { evidencePlan, landedButYellow, type MergedChecklistPr } from '../release-loop/landed-but-yellow.js';
 import { formatSchedule, getSchedule, listSchedules, setSchedule } from '../release-loop/release-schedule.js';
 import { writeStdoutJson } from './stdout-json.js';
 import { CliUserError } from './cli-user-error.js';
+import { hqCliWriteAllowed, type HqDeps } from '../hq/hq.js';
+import { fileLeaseStore } from '../hq/lease.js';
 import { runUnattendedRelease, type UnattendedReleaseDeps } from '../../scripts/release-loop/unattended-release.js';
 import { cutReleaseBranch } from '../../scripts/release-loop/cut-branch.js';
 import { releaseReadiness } from '../../scripts/release-loop/release-readiness.js';
@@ -504,12 +506,44 @@ export interface LandedButYellowDeps {
   run?: Runner;
   checklist?: typeof listChecklist;
   now?: () => Date;
+  evidenceAdd?: typeof features.evidenceAdd;
+  schedules?: typeof features.readSchedules;
+  released?: typeof features.releasedVersion;
 }
 
-export function registerReleaseCommands(program: Command, releaseRunDeps: UnattendedReleaseDeps = {}, landedDeps: LandedButYellowDeps = {}): void {
+function printLandedRows(rows: ReturnType<typeof landedButYellow>, items: ReturnType<typeof listChecklist>['items']): void {
+  const updatedAtById = new Map(items.map((item) => [item.id, item.updatedAt]));
+  const date = (iso: string) => {
+    const parts = new Intl.DateTimeFormat('en-US', { timeZone: 'Asia/Seoul', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', hourCycle: 'h23' }).formatToParts(new Date(iso));
+    const part = (name: string) => parts.find((entry) => entry.type === name)?.value;
+    return `${part('month')}-${part('day')} ${part('hour')}:${part('minute')}`;
+  };
+  for (const row of rows) {
+    const icon = row.status === 'yellow' ? '🟡' : '🔴';
+    console.log(`${row.id} ${row.owner ?? '-'} ${icon} ← ${row.prs.map((pr, i) => `#${pr.number} «${pr.title}» (${date(pr.mergedAt)} · 근거에 ${row.alreadyInEvidence[i] ? '있음' : '없음'}${pr.mergedAt > (updatedAtById.get(row.id) ?? '') ? ' · 칸보다 새것' : ''})`).join(' · ')}`);
+  }
+  console.log(`${rows.length}칸 · 그중 근거에 없는 PR 이 있는 칸 ${rows.filter((row) => row.alreadyInEvidence.includes(false)).length}`);
+}
+
+function compareReleaseVersions(a: string, b: string): number {
+  const parse = (version: string) => {
+    const [core, pre] = version.split('-');
+    const [major, minor, patch] = core!.split('.').map(Number);
+    const [stage, sequence] = pre?.split('.') ?? [];
+    return [major!, minor!, patch!, stage === undefined ? 3 : ({ alpha: 0, beta: 1, rc: 2 } as Record<string, number>)[stage]!, Number(sequence ?? 0)];
+  };
+  const left = parse(a), right = parse(b);
+  for (let i = 0; i < left.length; i++) if (left[i] !== right[i]) return left[i]! - right[i]!;
+  return 0;
+}
+
+export function registerReleaseCommands(program: Command, releaseRunDeps: UnattendedReleaseDeps = {}, landedDeps: LandedButYellowDeps = {}, hqDeps: HqDeps = {}): void {
   const release = program.command('release').description('공개 배포 한 판 — prepare(로컬) → publish(--yes) → verify (docs/manual/MANUAL-versioning-and-release-2026-09-25.md)');
   const schedule = release.command('schedule').description('판별 컷·착지 마감 조회·갱신');
   const scheduleLedgerRoot = () => releaseRunDeps.ledgerRoot ?? releaseLedgerRoot();
+  const ledgerFenceDeps = (): HqDeps => getElanousConfigDirOverride() && !hqDeps.store && !getUserConfig().hq?.arbiter
+    ? { ...hqDeps, store: fileLeaseStore(join(effectiveInstanceRoot(), 'hq', 'lease.json')), seenPath: join(effectiveInstanceRoot(), 'hq', 'seen-generation'), localPath: join(effectiveInstanceRoot(), 'hq', 'local.json') }
+    : hqDeps;
   schedule.command('list').option('--json', '결과 JSON').action((o: { json?: boolean }) => {
     const rows = listSchedules(scheduleLedgerRoot());
     if (o.json) console.log(JSON.stringify(rows));
@@ -522,21 +556,25 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
       if (o.json) console.log(JSON.stringify(row)); else console.log(formatSchedule(row));
     });
   schedule.command('set').requiredOption('--version <v>', '갱신할 판')
-    .option('--cut-at <iso>', '오프셋 포함 컷 시각').option('--land-by <iso>', '오프셋 포함 착지 마감').option('--json', '결과 JSON')
-    .action((o: { version: string; cutAt?: string; landBy?: string; json?: boolean }) => {
+    .option('--cut-at <iso>', '오프셋 포함 컷 시각').option('--land-by <iso>', '오프셋 포함 착지 마감').option('--json', '결과 JSON').option('--hq-override')
+    .action((o: { version: string; cutAt?: string; landBy?: string; json?: boolean; hqOverride?: boolean }) => {
       if (o.cutAt === undefined && o.landBy === undefined) throw new CliUserError('갱신할 시각을 지정하라', '--cut-at <iso> 또는 --land-by <iso>');
+      if (!hqCliWriteAllowed('release schedule set', Boolean(o.hqOverride), ledgerFenceDeps())) return;
       const row = setSchedule(o.version, { cutAt: o.cutAt, landBy: o.landBy }, process.env.ELANOUS_TRACK || 'cli', scheduleLedgerRoot());
       if (o.json) console.log(JSON.stringify(row)); else console.log(formatSchedule(row));
     });
   const checklist = release.command('checklist').description('판별 확인표 조회·갱신')
     .option('--version <v>', '판 또는 별칭(기본: package.json 의 개발판에서 -dev.N 제거)')
-    .option('--json', '결과 JSON');
+    .option('--json', '결과 JSON')
+    .option('--hq-override', '본부 임대 거부를 관측하며 수동 우회');
+  const mayWrite = (cmd: Command) => hqCliWriteAllowed(`release checklist ${cmd.name()}`, Boolean(cmd.optsWithGlobals().hqOverride), ledgerFenceDeps());
   const context = (cmd: Command) => {
     const opts = { ...(cmd.parent?.parent?.opts() as { version?: string; json?: boolean }), ...(cmd.parent?.opts() as { version?: string; json?: boolean }), ...(cmd.opts() as { version?: string; json?: boolean }) };
     const codenames = checklistCodenames();
     return { version: checklistVersion(opts.version, codenames), codenames, json: opts.json };
   };
-  const withContext = (cmd: Command) => cmd.option('--version <v>', '판 또는 별칭').option('--json', '결과 JSON');
+  const withContext = (cmd: Command) => cmd.option('--version <v>', '판 또는 별칭').option('--json', '결과 JSON').option('--hq-override', '본부 임대 거부를 관측하며 수동 우회');
+  const actor = () => process.env.ELANOUS_TRACK || 'cli';
   withContext(checklist.command('list').description('모든 칸')).option('--owner <owner>', '자리 또는 하위 자리로 거르기').action(async (opts: { owner?: string }, cmd: Command) => {
     const { version, codenames, json } = context(cmd);
     await checklistOutput(version, codenames, 'list', json, opts.owner);
@@ -545,32 +583,66 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
     const { version, codenames, json } = context(cmd);
     await checklistOutput(version, codenames, 'status', json, opts.owner);
   });
-  withContext(checklist.command('landed-but-yellow').description('병합 PR 이 있지만 노랑·빨강인 칸(읽기 전용)'))
+  withContext(checklist.command('landed-but-yellow').description('병합 PR 이 있지만 노랑·빨강인 칸(기본 읽기 전용)'))
     .option('--owner <owner>', '자리 또는 하위 자리로 거르기')
-    .action(async (opts: { owner?: string }, cmd: Command) => {
-      const { version, json } = context(cmd);
+    .option('--open', '미발행 일정 판 중 칸이 있는 판 전부')
+    .option('--apply-evidence', '확실한 PR 짝의 근거를 붙인다(상태는 그대로)')
+    .option('--dry-run', '근거 추가 없이 계획만 출력')
+    .action(async (opts: { owner?: string; open?: boolean; applyEvidence?: boolean; dryRun?: boolean }, cmd: Command) => {
       try {
+        const inherited = cmd.parent?.opts() as { version?: string; json?: boolean } | undefined;
+        const local = cmd.opts() as { version?: string; json?: boolean };
+        if (opts.open && (local.version !== undefined || inherited?.version !== undefined)) throw new CliUserError('--open 과 --version 을 함께 쓸 수 없다');
+        const json = local.json ?? inherited?.json;
         if (opts.owner !== undefined) parseOwner(opts.owner);
+        const released = opts.open ? (landedDeps.released ?? features.releasedVersion)() : '';
+        const openSnapshots = opts.open
+          ? (landedDeps.schedules ?? features.readSchedules)()
+            .filter(({ version }) => isReleaseVersion(version) && (!released || compareReleaseVersions(version, released) > 0))
+            .sort((a, b) => compareReleaseVersions(a.version, b.version))
+            .map(({ version }) => (landedDeps.checklist ?? listChecklist)(version)).filter((snapshot) => snapshot.items.length > 0)
+          : [];
+        if (opts.open && !openSnapshots.length) {
+          if (json) await writeStdoutJson('[]\n'); else console.log('열린 판 없음');
+          return;
+        }
+        if (opts.applyEvidence && !opts.dryRun && !mayWrite(cmd)) return;
         const since = new Date((landedDeps.now ?? (() => new Date()))().getTime() - 7 * 86_400_000).toISOString().slice(0, 10);
         const raw = must((landedDeps.run ?? defaultRunner)('gh', ['pr', 'list', '--state', 'merged', '--search', `merged:>=${since}`, '--limit', '400', '--json', 'number,title,body,mergedAt'], process.cwd()), '병합 PR 조회(gh)');
         const prs = JSON.parse(raw) as MergedChecklistPr[];
         if (!Array.isArray(prs)) throw new Error('병합 PR 조회(gh): 배열이 아니다');
-        const items = (landedDeps.checklist ?? listChecklist)(version).items;
-        const rows = landedButYellow(items, prs, { owner: opts.owner });
-        if (json) await writeStdoutJson(`${JSON.stringify(rows)}\n`);
-        else {
-          const updatedAtById = new Map(items.map((item) => [item.id, item.updatedAt]));
-          const date = (iso: string) => {
-            const parts = new Intl.DateTimeFormat('en-US', { timeZone: 'Asia/Seoul', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', hourCycle: 'h23' }).formatToParts(new Date(iso));
-            const part = (name: string) => parts.find((entry) => entry.type === name)?.value;
-            return `${part('month')}-${part('day')} ${part('hour')}:${part('minute')}`;
-          };
-          for (const row of rows) {
-            const icon = row.status === 'yellow' ? '🟡' : '🔴';
-            console.log(`${row.id} ${row.owner ?? '-'} ${icon} ← ${row.prs.map((pr, i) => `#${pr.number} «${pr.title}» (${date(pr.mergedAt)} · 근거에 ${row.alreadyInEvidence[i] ? '있음' : '없음'}${pr.mergedAt > (updatedAtById.get(row.id) ?? '') ? ' · 칸보다 새것' : ''})`).join(' · ')}`);
+        const snapshots = opts.open ? openSnapshots : [(landedDeps.checklist ?? listChecklist)(context(cmd).version)];
+        const results: Array<{ version: string; rows?: ReturnType<typeof landedButYellow>; plan?: ReturnType<typeof evidencePlan> }> = [];
+        let totalAdded = 0, totalSkipped = 0;
+        for (const snapshot of snapshots) {
+          const { version, items } = snapshot;
+          const rows = landedButYellow(items, prs, { owner: opts.owner });
+          const skippedMention = new Set(rows.flatMap((row) => row.prs.flatMap((pr) =>
+            pr.basis === 'mention' ? [JSON.stringify([row.id, pr.number])] : []))).size;
+          if (opts.open) totalSkipped += skippedMention;
+          if (opts.open && !json) console.log(`— ${version} —`);
+          if (opts.applyEvidence || opts.dryRun) {
+            const plan = evidencePlan(rows);
+            const log = json ? console.error : console.log;
+            for (const { id, ref } of plan) {
+              if (!opts.dryRun) (landedDeps.evidenceAdd ?? features.evidenceAdd)(id, version, ref, actor(), snapshot.released, snapshot.dev);
+              log(`${opts.dryRun ? '·' : '✅'} ${id} 근거 ${ref}`);
+            }
+            const added = opts.dryRun ? 0 : plan.length;
+            totalAdded += added;
+            log(`붙임 ${added} · 건너뜀(언급만) ${skippedMention}`);
+            if (!opts.open && !opts.dryRun) debug.log('release.checklist', 'evidence-synced', { added, skippedMention });
+            results.push({ version, plan });
+          } else {
+            if (!json) printLandedRows(rows, items);
+            results.push({ version, rows });
           }
-          console.log(`${rows.length}칸 · 그중 근거에 없는 PR 이 있는 칸 ${rows.filter((row) => row.alreadyInEvidence.includes(false)).length}`);
         }
+        if (opts.open) {
+          if (opts.applyEvidence && !opts.dryRun) debug.log('release.checklist', 'evidence-synced', { versions: snapshots.map(({ version }) => version), added: totalAdded, skippedMention: totalSkipped });
+          if (!json) console.log(`판 ${snapshots.length} · 붙임 합 ${totalAdded} · 건너뜀(언급만) 합 ${totalSkipped}`);
+          else await writeStdoutJson(`${JSON.stringify(results)}\n`);
+        } else if (json) await writeStdoutJson(`${JSON.stringify(opts.applyEvidence || opts.dryRun ? results[0]!.plan : results[0]!.rows)}\n`);
         if (prs.length >= 400) console.error('⚠ 병합 PR 400개 상한: 목록이 잘렸을 수 있다');
       } catch (error) {
         console.error(`⛔ ${error instanceof Error ? error.message : String(error)}`);
@@ -581,6 +653,7 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
     .option('--allow-duplicate-id', '다른 판에 같은 id 가 있어도 경고 후 추가')
     .action((id: string, title: string, opts: { owner?: string; kind?: string; allowDuplicateId?: boolean }, cmd: Command) => {
     const { version, json } = context(cmd);
+    if (!mayWrite(cmd)) return;
     const data = addItem(version, { id, title, ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}) }, { allowDuplicateId: opts.allowDuplicateId });
     if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 추가`);
   });
@@ -592,6 +665,7 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
       if (opts.status !== undefined && !['green', 'yellow', 'red', 'done'].includes(opts.status)) throw new CliUserError(`잘못된 상태: ${opts.status}`, 'green|yellow|red|done');
       if (opts.disposition !== undefined && !['move', 'known-issue', 'block'].includes(opts.disposition)) throw new CliUserError(`잘못된 처분: ${opts.disposition}`, 'move|known-issue|block');
       if (opts.status === undefined && opts.evidence === undefined && opts.owner === undefined && opts.disposition === undefined && opts.kind === undefined) throw new CliUserError('갱신할 칸을 지정하라', '--status · --evidence · --owner · --disposition · --kind 중 하나');
+      if (!mayWrite(cmd)) return;
       const data = setItem(version, id, { ...(opts.status !== undefined ? { status: opts.status as ChecklistStatus } : {}), ...(opts.evidence !== undefined ? { evidence: opts.evidence } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.disposition !== undefined ? { disposition: opts.disposition as ChecklistDisposition } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}) }, process.env.ELANOUS_TRACK || 'cli');
       const item = data.items.find((entry) => entry.id === id);
       const why = item?.kind === 'screen' && item.status === 'green' ? parityGap(item.evidence) : null;
@@ -605,40 +679,45 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
     .requiredOption('--by <owner>', '잡을 자리 또는 하위 자리').option('--force', '기존 주인에서 강제로 바꾼다')
     .action((id: string, opts: { by: string; force?: boolean }, cmd: Command) => {
       const { version, json } = context(cmd);
+      if (!mayWrite(cmd)) return;
       const data = claimItem(version, id, opts.by, { force: opts.force });
       if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 주인 ${opts.by}`);
     });
   withContext(checklist.command('rm <id>').description('칸 삭제')).action((id: string, _opts: unknown, cmd: Command) => {
     const { version, json } = context(cmd);
+    if (!mayWrite(cmd)) return;
     const data = removeItem(version, id, process.env.ELANOUS_TRACK || 'cli');
     if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 삭제`);
   });
   withContext(checklist.command('seed').description('마크다운 로드맵에서 빈 칸 들이기')).requiredOption('--from <file>', '로드맵 파일')
     .action((opts: { from: string }, cmd: Command) => {
       const { version, json } = context(cmd);
+      if (!mayWrite(cmd)) return;
       const data = seedFromRoadmap(version, readFileSync(opts.from, 'utf8'));
       if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${version} ${data.items.length}칸`);
     });
-  const actor = () => process.env.ELANOUS_TRACK || 'cli';
   withContext(checklist.command('move <id>').description('칸을 한 트랜잭션으로 다른 판에 옮긴다'))
     .requiredOption('--from <v>', '현재 판').requiredOption('--to <v>', '새 판').option('--reason <reason>', '이동 사유')
     .action((id: string, opts: { from: string; to: string; reason?: string }, cmd: Command) => {
       const { codenames, json } = context(cmd);
       const from = checklistVersion(opts.from, codenames), to = checklistVersion(opts.to, codenames);
+      if (!mayWrite(cmd)) return;
       features.move(id, from, to, actor(), undefined, undefined, opts.reason);
       if (json) console.log(JSON.stringify(listChecklist(to))); else console.log(`✅ ${id} ${from} → ${to}`);
     });
   withContext(checklist.command('retitle <id> <title>').description('칸 제목 수정')).action((id: string, title: string, _opts: unknown, cmd: Command) => {
     const { version, json } = context(cmd);
+    if (!mayWrite(cmd)) return;
     const snapshot = listChecklist(version);
     features.retitle(id, title, actor(), snapshot.released, snapshot.dev);
     if (json) console.log(JSON.stringify(listChecklist(version))); else console.log(`✅ ${id} 제목 수정`);
   });
   const evidence = checklist.command('evidence').description('칸의 PR·커밋 근거');
   withContext(evidence.command('add <id> <ref>').description('근거 참조 추가')).action((id: string, ref: string, _opts: unknown, cmd: Command) => {
-    const { version, json } = context(cmd);
-    const snapshot = listChecklist(version);
-    features.evidenceAdd(id, version, ref, actor(), snapshot.released, snapshot.dev);
+      const { version, json } = context(cmd);
+      if (!mayWrite(cmd)) return;
+      const snapshot = listChecklist(version);
+      features.evidenceAdd(id, version, ref, actor(), snapshot.released, snapshot.dev);
     if (json) console.log(JSON.stringify(features.history(id).map(decodeClaimHistoryEntry))); else console.log(`✅ ${id} 근거 ${ref}`);
   });
   withContext(checklist.command('history <id>').description('칸의 판 이동·변경 이력')).action((id: string, _opts: unknown, cmd: Command) => {
@@ -654,6 +733,7 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
   });
   withContext(checklist.command('export').description('SQLite 에서 checklist.json 스냅샷 생성')).action((_opts: unknown, cmd: Command) => {
     const { version, json } = context(cmd);
+    if (!mayWrite(cmd)) return;
     const snapshot = listChecklist(version);
     features.exportJson(version, snapshot.released, snapshot.dev);
     if (json) console.log(JSON.stringify(listChecklist(version))); else console.log(`✅ ${version} checklist.json 내보냄`);