elanous 0.2.14 → 0.2.15

package/src/domains/core-tools.ts

@@ -30,7 +30,7 @@ import { LOGS_QUERY_SPEC, dispatchLogsQuery } from './logs-tool.js';
 import { MISSION_DECIDE_SPEC, dispatchMissionDecide } from '../autopilot/mission-decide-tool.js';
 import { COO_ADMIN_SPEC, dispatchCooAdmin } from './coo-admin-tool.js';
 import { RELEASE_STATUS_SPEC, RELEASE_CHANGE_SPEC, dispatchReleaseStatus, dispatchReleaseChange } from './release-tool.js';
-import { OPS_SEATS_SPEC, DECISIONS_PENDING_SPEC, dispatchOpsSeats, dispatchDecisionsPending } from './ops-facts-tool.js';
+import { OPS_SEATS_SPEC, DECISIONS_PENDING_SPEC, PROACT_METER_SPEC, dispatchOpsSeats, dispatchDecisionsPending, dispatchProactMeter } from './ops-facts-tool.js';
 
 /** memory_recall — 크로스서피스 기억(자기 발송 원장 회상). 도메인 무관(domain 필터는 옵션).
  *  finance-tools 에서 L2 로 이관(2026-07-08). */
@@ -142,7 +142,7 @@ const SELF_RECALL_BUDGET_SPEC: LLMToolSpec = {
     },
   },
 };
-export const CORE_TOOL_SPECS: LLMToolSpec[] = [SCHEDULE_MANAGE_SPEC, SESSION_MANAGE_SPEC, MEMORY_RECALL_SPEC, FACT_CHECK_SPEC, SELF_RECALL_BUDGET_SPEC, CONTEXT_NOW_SPEC, AUTOPILOT_MISSION_SPEC, OPS_STATUS_SPEC, SE_BUILD_SPEC, LOGS_QUERY_SPEC, MISSION_DECIDE_SPEC, COO_ADMIN_SPEC, RELEASE_STATUS_SPEC, RELEASE_CHANGE_SPEC, OPS_SEATS_SPEC, DECISIONS_PENDING_SPEC];
+export const CORE_TOOL_SPECS: LLMToolSpec[] = [SCHEDULE_MANAGE_SPEC, SESSION_MANAGE_SPEC, MEMORY_RECALL_SPEC, FACT_CHECK_SPEC, SELF_RECALL_BUDGET_SPEC, CONTEXT_NOW_SPEC, AUTOPILOT_MISSION_SPEC, OPS_STATUS_SPEC, SE_BUILD_SPEC, LOGS_QUERY_SPEC, MISSION_DECIDE_SPEC, COO_ADMIN_SPEC, RELEASE_STATUS_SPEC, RELEASE_CHANGE_SPEC, OPS_SEATS_SPEC, DECISIONS_PENDING_SPEC, PROACT_METER_SPEC];
 
 export interface CoreTools {
   specs: LLMToolSpec[];
@@ -159,10 +159,11 @@ export function buildCoreTools(recallSearch?: RecallSearch): CoreTools {
     names,
     dispatch: async (name, args, onPartial, context) => {
       const h = CORE_TOOL_HANDLERS[name];
-      if (!h && name !== 'release_change' && name !== 'ops_seats' && name !== 'decisions_pending') return { error: `unknown core tool: ${name}` };
+      if (!h && name !== 'release_change' && name !== 'ops_seats' && name !== 'decisions_pending' && name !== 'proact_meter') return { error: `unknown core tool: ${name}` };
       if (name === 'release_change') return dispatchReleaseChange(args, context);
       if (name === 'ops_seats') return dispatchOpsSeats(args, context);
       if (name === 'decisions_pending') return dispatchDecisionsPending(context);
+      if (name === 'proact_meter') return dispatchProactMeter(args, context);
       if (name === 'memory_recall' || name === 'self_recall') {
         return runRecall(name, args, context ?? { surface: 'skill' }, recallSearch, onPartial);
       }

package/src/domains/ops-facts-tool.ts

@@ -2,6 +2,7 @@ import type { LLMToolSpec } from '../llm.js';
 import type { ToolRuntimeContext } from '../tool-runtime/types.js';
 import { debug } from '../debug/log.js';
 import { DecisionLedger, type DecisionEntry } from '../decisions/decision-ledger.js';
+import { readProactMeter, type ProactMeter } from '../decisions/proact-meter.js';
 import { buildSeatsBoard, todayKst, type SeatsSources } from '../nexus/api/ops-seats.js';
 import { liveSeatsSources } from '../nexus/api/ops-seats-sources.js';
 
@@ -11,6 +12,12 @@ export const OPS_SEATS_SPEC: LLMToolSpec = {
   parameters: { type: 'object', properties: { date: { type: 'string', description: '조회할 KST 날짜 YYYY-MM-DD. 생략하면 KST 오늘.' } }, required: [] },
 };
 
+export const PROACT_METER_SPEC: LLMToolSpec = {
+  name: 'proact_meter',
+  description: '오너 전용 읽기 — 선제성 기준선. 지난 7 KST일마다 대표가 시키지 않고 시스템이 먼저 낸 수(offered), 그중 채택된 수(adopted), 대표가 먼저 물어서야 드러난 수(asked). 표본은 결정·지시·조율·루프 원문 링크를 가진다. 못 읽은 원천은 sources.read=false 이며 0이 아니다.',
+  parameters: { type: 'object', properties: { days: { type: 'number', description: 'KST 일수. 생략하면 7.' } }, required: [] },
+};
+
 export const DECISIONS_PENDING_SPEC: LLMToolSpec = {
   name: 'decisions_pending',
   description: '오너 전용 읽기 — 결정 원장의 열린 결정을 기한 순으로 조회한다. 결정 선택·기록은 하지 않는다.',
@@ -21,13 +28,14 @@ export interface OpsFactsDeps {
   seatsSources?: () => SeatsSources;
   listDecisions?: (filters: { status: 'open' }) => DecisionEntry[];
   today?: () => string;
+  readProact?: (days: number) => ProactMeter;
 }
 
 function ownerVerified(context?: ToolRuntimeContext): boolean {
   return context?.requestOrigin !== 'external-agent' && !!context?.sessionId && !!context?.verifiedOwner?.id.trim();
 }
 
-function logCall(tool: 'ops_seats' | 'decisions_pending', ok: boolean, nulls: number): void {
+function logCall(tool: 'ops_seats' | 'decisions_pending' | 'proact_meter', ok: boolean, nulls: number): void {
   debug.log('ops.facts', 'call', { tool, ok, nulls });
 }
 
@@ -56,6 +64,28 @@ export async function dispatchOpsSeats(args: Record<string, unknown>, context?:
   }
 }
 
+/** Seven KST days. An unreadable ledger stays sources.read=false; it is not a zero day. */
+export function dispatchProactMeter(args: Record<string, unknown>, context?: ToolRuntimeContext, deps: OpsFactsDeps = {}) {
+  if (!ownerVerified(context)) {
+    logCall('proact_meter', false, 0);
+    return { error: '오너 확인이 필요한 조회다' };
+  }
+  const days = args.days === undefined ? 7 : args.days;
+  if (typeof days !== 'number' || !Number.isInteger(days) || days < 1 || days > 31) {
+    logCall('proact_meter', false, 0);
+    return { error: 'days 는 1 이상 31 이하의 정수여야 한다' };
+  }
+  try {
+    const meter = (deps.readProact ?? ((n: number) => readProactMeter({ days: n })))(days);
+    const unread = Object.values(meter.sources).filter(source => !source.read).length;
+    logCall('proact_meter', true, unread);
+    return meter;
+  } catch {
+    logCall('proact_meter', false, 1);
+    return { error: '선제성 원장을 읽지 못했다', days: null };
+  }
+}
+
 /** Only the five requested fields leave the decision ledger. Undated entries follow dated entries. */
 export function dispatchDecisionsPending(context?: ToolRuntimeContext, deps: OpsFactsDeps = {}) {
   if (!ownerVerified(context)) {

package/src/harness/harness-cli-command.ts

@@ -21,7 +21,7 @@ import { resolveChildLlmEffort, resolveImplementationChildModel } from '../self-
 import { resolveHarnessTarget } from '../self-implement/harness-target-options.js';
 import { queryRunningRuns } from '../self-implement/running-runs.js';
 import { DevPipelineError } from '../self-dev/dev-pipeline.js';
-import { runDraftSweep, type DraftSweepAdapters, type DraftSweepResult, type SweepDraft, type SweepMergedPr } from '../self-dev/draft-sweep.js';
+import { runDraftSweep, sweepFailureReason, type DraftSweepAdapters, type DraftSweepResult, type SweepDraft, type SweepMergedPr, type SweepReviewGate } from '../self-dev/draft-sweep.js';
 import { debug } from '../debug/log.js';
 import { dispatchTask, type DispatchTaskInput, type DispatchTaskDeps } from '../execution-loop/dispatch-task.js';
 import { launchRequestId, preLaunchGate, type PreLaunchGateDeps } from '../execution-loop/launch-gate.js';
@@ -30,8 +30,10 @@ import { CODEX_PROVIDER, GROK_PROVIDER, decideBudget, decideLaunchBudget, readBu
 import { DEFAULT_FALLBACK_CHAIN } from '../oauth/fallback-chain.js';
 import { installDeliverableVerifyCliCommand, type InstallDeliverableVerifyCliDeps } from './deliverable-verify-cli.js';
 import { getUserConfig } from '../user-config.js';
+import { resolveRepositoryName } from './repository-name.js';
 import { installHarnessCliSinkHook } from './harness-cli-sink.js';
 import { addHarnessQueue, listHarnessQueue, queueSeatForCwd, reconcileHarnessQueue, removeHarnessQueue, tickHarnessQueue, type HarnessQueueDeps, type QueueSeat } from './harness-queue.js';
+import { parseDoorSince, queryLaunchDoors, renderLaunchDoors, type DoorTable } from './launch-stamp.js';
 import { resolveHarnessSubstrate, type ResolvedHarnessSubstrate } from './harness-substrate-default.js';
 import { runHarnessPlanRfc } from './harness-plan-rfc.js';
 import { classifyGarbage, isGarbageProcessTarget, type GarbageProcess } from './process-garbage.js';
@@ -333,7 +335,7 @@ function assertHarnessChildLlmModel(opts: HarnessAskSayChildLlmOptions): void {
 }
 
 /** Shared post-parse gate: validate child model before any ask/say early return (including `--dry-run`). */
-type HarnessSubstrateOpts = { substrate?: 'local' | 'pod'; podPool?: string; podMemory?: string; after?: string; autoMerge?: boolean; base?: string; json?: boolean; target?: string; source?: string; seat?: QueueSeat };
+type HarnessSubstrateOpts = { substrate?: 'local' | 'pod'; podPool?: string; podMemory?: 'lite' | 'standard' | 'high'; after?: string; autoMerge?: boolean; base?: string; json?: boolean; target?: string; source?: string; seat?: QueueSeat };
 function resolveLaunchSubstrate(opts: HarnessSubstrateOpts): ResolvedHarnessSubstrate {
   const resolved = resolveHarnessSubstrate({ flag: opts, config: getUserConfig(), env: process.env });
   debug.log('harness.substrate', 'resolved', resolved);
@@ -552,9 +554,23 @@ function hasHarnessPodJobApplied(runId: string | undefined, output: string): boo
   } finally { store.close(); }
 }
 
+/** 10-05 PODPROVIDER — say which child provider a local run will use (an unnamed choice follows config). */
+function announceLocalChildProvider(opts: unknown): void {
+  const child = opts as HarnessAskSayChildLlmOptions;
+  if (!child.childLlmProvider?.trim()) return;
+  console.error(`child provider 요청 = ${child.childLlmProvider.trim()}${child.childLlmModel?.trim() ? `/${child.childLlmModel.trim()}` : ''} (local)`);
+}
+
+/** `harness.authorOnPod` — 명시 true 만 켠다. 읽기 실패는 끔(호스트 저작)으로 둔다. */
+function harnessAuthorOnPod(): boolean {
+  try { return getUserConfig().harness?.authorOnPod === true; }
+  catch { return false; }
+}
+
 /** ⭐ 런 계약의 실행 칸 = pod — 호스트는 그래프를 안 돌리고 Pod 로 보낸다(harness-pod-dispatch.ts). */
 async function onPod(opts: unknown, entrance: 'cli-harness-ask' | 'cli-harness-say', input: string, pool: string,
-  recordDispatch: (input: DispatchTaskInput, deps?: DispatchTaskDeps) => ReturnType<typeof dispatchTask> = dispatchTask): Promise<void> {
+  recordDispatch: (input: DispatchTaskInput, deps?: DispatchTaskDeps) => ReturnType<typeof dispatchTask> = dispatchTask,
+  authorOnPod = false): Promise<void> {
   const o = opts as HarnessSubstrateOpts;
   if (o.target !== undefined) {
     debug.log('harness.pod', 'target-refused', { target: o.target });
@@ -588,7 +604,13 @@ async function onPod(opts: unknown, entrance: 'cli-harness-ask' | 'cli-harness-s
   const { dispatchHarnessOnPod } = await import('./harness-pod-dispatch.js');
   let output = '';
   let runId: string | undefined;
-  const status = await dispatchHarnessOnPod({ entrance, input, podPool: pool, ...(dispatchRecorded ? { dispatchRecorded: true } : {}), ...(o.podMemory ? { podMemory: o.podMemory } : {}), ...(o.after ? { after: o.after } : {}), ...(o.autoMerge === false ? { autoMerge: false } : {}), ...(o.base ? { base: o.base } : {}), ...(o.json ? { json: true } : {}), ...(o.source ? { source: o.source } : {}), ...(o.seat ? { seat: o.seat } : {}) },
+  const child = opts as HarnessAskSayChildLlmOptions;
+  // 10-05 PODPROVIDER: say which child provider the Pod will use when the launch named one.
+  if (child.childLlmProvider?.trim()) console.error(`child provider 요청 = ${child.childLlmProvider.trim()}${child.childLlmModel?.trim() ? `/${child.childLlmModel.trim()}` : ''} (pod · 자격 없으면 발사 전 거부)`);
+  const status = await dispatchHarnessOnPod({ entrance, input, podPool: pool, ...(authorOnPod && entrance === 'cli-harness-say' ? { authorOnPod: true } : {}),
+    ...(child.childLlmProvider?.trim() ? { childLlmProvider: child.childLlmProvider.trim() } : {}),
+    ...(child.childLlmModel?.trim() ? { childLlmModel: child.childLlmModel.trim() } : {}),
+    ...(child.childLlmEffort?.trim() ? { childLlmEffort: child.childLlmEffort.trim() } : {}), ...(dispatchRecorded ? { dispatchRecorded: true } : {}), ...(o.podMemory ? { podMemory: o.podMemory } : {}), ...((opts as HarnessAskSayChildLlmOptions).goalType ? { goalType: (opts as HarnessAskSayChildLlmOptions).goalType } : {}), ...(o.after ? { after: o.after } : {}), ...(o.autoMerge === false ? { autoMerge: false } : {}), ...(o.base ? { base: o.base } : {}), ...(o.json ? { json: true } : {}), ...(o.source ? { source: o.source } : {}), ...(o.seat ? { seat: o.seat } : {}) },
     { onOutput: (text) => {
       runId ??= harnessPodRunId(output + text);
       output = (output + text).slice(-16_000);
@@ -1631,6 +1653,12 @@ export async function runHarnessBudget(opts: { json?: boolean } = {}, io: {
 
 const DRAFT_SWEEP_REPOSITORY = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
 
+/** A review body still names a must-fix. «must-fix 0» and «must-fix: 0» are a cleared list, not a remaining one. */
+function mustFixRemains(text: string): boolean {
+  if (!/(?:^|\n)\s*(?:[-*]\s*)?(?:must-fix|must fix)\b/i.test(text)) return false;
+  return !/(?:^|\n)\s*(?:[-*]\s*)?(?:must-fix|must fix)\s*[:=]?\s*0\b/i.test(text);
+}
+
 type GithubPull = {
   number: number;
   title: string;
@@ -1814,6 +1842,36 @@ export function githubDraftSweepAdapters(execute: GhExecute = executeGh, git: Dr
     }
     return undefined;
   };
+  const reviewGateForDraft = (draft: SweepDraft, repository: string): SweepReviewGate | undefined => {
+    const head = ghJson<{ head?: { sha?: string } }>(['api', `repos/${repository}/pulls/${draft.number}`], execute);
+    const sha = head?.head?.sha;
+    if (!sha) return undefined;
+    const comments: string[] = [];
+    for (let page = 1; page <= 100; page++) {
+      const batch = ghJson<Array<{ body?: string }>>(['api', `repos/${repository}/issues/${draft.number}/comments?per_page=100&page=${page}`], execute);
+      if (!Array.isArray(batch) || batch.length > 100) throw new Error('Incomplete review comment inventory');
+      comments.push(...batch.map((comment) => comment.body ?? ''));
+      if (batch.length < 100) break;
+      if (page === 100) throw new Error('Review comment inventory exceeded pagination limit');
+    }
+    const reviews = ghJson<Array<{ state?: string; body?: string }>>(['api', `repos/${repository}/pulls/${draft.number}/reviews?per_page=100`], execute);
+    if (!Array.isArray(reviews) || reviews.length > 100) throw new Error('Incomplete review inventory');
+    const text = [...comments, ...reviews.map((review) => review.body ?? '')].join('\n');
+    const status = ghJson<{ state?: string }>(['api', `repos/${repository}/commits/${sha}/status`], execute);
+    const checkRuns = ghJson<{ check_runs?: Array<{ conclusion?: string | null }> }>(
+      ['api', `repos/${repository}/commits/${sha}/check-runs?per_page=100`], execute);
+    if (!checkRuns || !Array.isArray(checkRuns.check_runs)) throw new Error('Incomplete check-run inventory');
+    const conclusions = checkRuns.check_runs.map((run) => run.conclusion ?? null);
+    const gatePass = (status?.state === 'success' || status?.state === undefined)
+      && conclusions.length > 0 && conclusions.every((conclusion) => conclusion === 'success' || conclusion === 'skipped' || conclusion === 'neutral');
+    const gateFail = status?.state === 'failure' || status?.state === 'error'
+      || conclusions.some((conclusion) => conclusion === 'failure' || conclusion === 'cancelled' || conclusion === 'timed_out' || conclusion === 'action_required');
+    return {
+      ...(reviews.some((review) => review.state === 'APPROVED') || /(?:^|\n)\s*VERDICT:\s*PASS\b/i.test(text) ? { review: 'pass' as const } : {}),
+      ...(mustFixRemains(text) ? { mustFix: true } : {}),
+      ...(gatePass && !gateFail ? { gate: 'pass' as const } : gateFail ? { gate: 'fail' as const } : {}),
+    };
+  };
   const landingCommentsFor = (repository: string, number: number): string[] => {
     const comments: string[] = [];
     for (let page = 1; page <= 100; page++) {
@@ -1902,6 +1960,7 @@ export function githubDraftSweepAdapters(execute: GhExecute = executeGh, git: Dr
       execute(['pr', 'close', String(number), '--repo', repository, '--comment', comment]);
     },
     getClaimOwner: async (repository, number) => claimCommentOwner(repository, number, execute),
+    getReviewGate: async (draft, repository) => reviewGateForDraft(draft, repository),
   };
 }
 
@@ -1936,7 +1995,10 @@ function installHarnessDraftSweepCommand(harnessCmd: Command, deps: HarnessDraft
     .action(async (number: string, opts: { owner?: string; note?: string; release?: boolean; repo?: string }) => {
       try {
         const execute = deps.execute ?? executeGh;
-        const repository = opts.repo ?? deps.repository?.() ?? execute(['repo', 'view', '--json', 'nameWithOwner', '--jq', '.nameWithOwner']).trim();
+        const repository = resolveRepositoryName({
+          repo: opts.repo ?? deps.repository?.(),
+          executeGh: (args) => execute(args),
+        });
         if (!DRAFT_SWEEP_REPOSITORY.test(repository) || repository.includes('..')) throw new HarnessCliInputError(`invalid --repo (expected owner/name): ${repository}`);
         if (!/^[1-9]\d*$/.test(number) || !Number.isSafeInteger(Number(number))) throw new HarnessCliInputError(`invalid PR number: ${number}`);
         const owner = opts.owner?.trim();
@@ -1973,21 +2035,32 @@ function installHarnessDraftSweepCommand(harnessCmd: Command, deps: HarnessDraft
     .action(async (opts: { apply?: boolean; json?: boolean; repo?: string }) => {
       try {
         const write = deps.write ?? console.log;
-        const repository = opts.repo ?? deps.repository?.() ?? execFileSync('gh', ['repo', 'view', '--json', 'nameWithOwner', '--jq', '.nameWithOwner'],
-          { encoding: 'utf8', timeout: 30_000, stdio: ['ignore', 'pipe', 'pipe'], env: process.env }).trim();
+        const execute = deps.execute ?? executeGh;
+        const repository = resolveRepositoryName({
+          repo: opts.repo ?? deps.repository?.(),
+          executeGh: (args) => execute(args),
+        });
         if (!DRAFT_SWEEP_REPOSITORY.test(repository) || repository.includes('..')) {
           throw new HarnessCliInputError(`invalid --repo (expected owner/name): ${repository}`);
         }
         const result: DraftSweepResult = await runDraftSweep({ repository, apply: opts.apply === true, adapters: deps.adapters ?? githubDraftSweepAdapters(deps.execute) });
-        if (opts.json) write(JSON.stringify(result));
+        const reason = result.error ? sweepFailureReason(result.error) : undefined;
+        if (opts.json) write(JSON.stringify(reason ? { ...result, error: reason } : result));
         else {
-          write(`draft sweep ${result.repository}: ${result.complete ? 'complete' : `incomplete (${result.error})`} · ${result.apply ? 'apply' : 'dry-run'}`);
-          for (const entry of result.entries) write(`#${entry.number} ${entry.action}: ${entry.reason}${entry.statusLabel ? ` → ${entry.statusLabel}` : ''}${entry.error ? ` ERROR: ${entry.error}` : ''}`);
-          if (result.complete) write(`못 본 초안 ${result.unobserved ?? 0} · 이번에 닫음 ${result.closed ?? 0}${result.apply ? '' : '(dry-run)'} · 처리 중 ${result.claimed ?? 0} · 표식 만료 ${result.claimExpired ?? 0}`);
+          write(`draft sweep ${result.repository}: ${result.complete ? 'complete' : `incomplete (${reason})`} · ${result.apply ? 'apply' : 'dry-run'}`);
+          for (const entry of result.entries) write(`#${entry.number} ${entry.action}: ${entry.reason}${entry.statusLabel ? ` → ${entry.statusLabel}` : ''}${entry.error ? ` ERROR: ${sweepFailureReason(entry.error)}` : ''}`);
+          if (result.complete) {
+            const daily = result.daily
+              ? ` · 24h 넘음 ${result.daily.over24h} · 정리 대상 ${result.daily.closable} · 수확 대기 ${result.daily.harvestable} · 막힘 ${result.daily.blocked}`
+              : '';
+            write(`못 본 초안 ${result.unobserved ?? 0} · 이번에 닫음 ${result.closed ?? 0}${result.apply ? '' : '(dry-run)'} · 처리 중 ${result.claimed ?? 0} · 표식 만료 ${result.claimExpired ?? 0}${daily}`);
+          }
+          if (reason) write(reason);
         }
         if (!result.complete || result.entries.some((entry) => entry.error)) process.exitCode = 1;
       } catch (error) {
         console.error(humanErrorLine(error));
+        try { debug.log('drafts.cleanup', 'failed', { reason: sweepFailureReason(error) }); } catch { /* observation is fail-soft */ }
         process.exitCode = 1;
       }
     });
@@ -2248,6 +2321,27 @@ export function installHarnessCliCommand(program: Command, deps: HarnessCliComma
     .command('harness')
     .description('dev-harness worktree 수명 — 워크트리 생성(worktree add)·조회(worktrees)·정리(clean)·프로세스 관찰(processes)');
   installHarnessCliSinkHook(harnessCmd, deps.registerSink, deps.resolveSurface);
+  harnessCmd.command('doors').description('기간 안 런을 입구×대기열 경유 표로 읽는다')
+    .option('--since <window>', '조회 창 (30m · 12h · 1d, 기본 1d)', '1d')
+    .option('--json', '구조화 출력')
+    .action((opts: { since?: string; json?: boolean }) => {
+      const parsed = parseDoorSince(opts.since);
+      if ('error' in parsed) {
+        console.error(`❌ ${parsed.error}`);
+        process.exitCode = 2;
+        return;
+      }
+      let table: DoorTable;
+      try {
+        table = queryLaunchDoors({ sinceMs: parsed.sinceMs });
+      } catch (error) {
+        console.error(`❌ doors: ${error instanceof Error ? error.message : String(error)}`);
+        process.exitCode = 1;
+        return;
+      }
+      if (opts.json) console.log(JSON.stringify(table));
+      else console.log(renderLaunchDoors(table));
+    });
   harnessCmd.command('incidents').description('최근 하니스 Pod 종료 사고 원장을 읽는다')
     .option('--since <minutes>', '최근 몇 분의 종료를 볼지 (기본 15분)', '15')
     .option('--json', '구조화 출력')
@@ -2294,7 +2388,7 @@ export function installHarnessCliCommand(program: Command, deps: HarnessCliComma
       console.log(`${row.id} ${row.seat} ${row.kind} queued`);
     }));
   queue.command('list').description('대기·발사 원장 조회').action(() => queueAction(async () => {
-    for (const row of listHarnessQueue(queueDeps)) console.log(`${row.id} ${row.seat} ${row.status} ${row.kind} ${row.input}`);
+    for (const row of listHarnessQueue(queueDeps)) console.log(`${row.id} ${row.seat} ${row.status} ${row.kind} ${row.input}${row.waitingReason ? ` · ${row.waitingReason}` : ''}`);
   }));
   queue.command('remove <id>').description('대기 중 또는 종료 확인된 항목 제거').action((id: string) => queueAction(async () => {
     if (!await removeHarnessQueue(id, queueDeps)) throw new Error(`queue item active or not found: ${id}`);
@@ -2303,7 +2397,7 @@ export function installHarnessCliCommand(program: Command, deps: HarnessCliComma
   queue.command('reconcile <id>').description('불확정 발사를 확인하고 종료 또는 미발사 증거가 있으면 예약 해소').action((id: string) => queueAction(async () => {
     console.log(`${id} ${await reconcileHarnessQueue(id, queueDeps)}`);
   }));
-  queue.command('tick').description('맨 앞 한 건의 자리 몫과 Pod 풀 여유를 확인하고 발사').action(() => queueAction(async () => {
+  queue.command('tick').description('자리별 맨 앞 한 건을 라운드로빈으로 돌며 자리 몫·Pod 풀 여유·마무리 관문을 확인하고 한 건 발사').action(() => queueAction(async () => {
     const result = await tickHarnessQueue(queueDeps);
     console.log(`${result.outcome}${result.item ? ` ${result.item.id}` : ''}: ${result.reason}`);
   }));
@@ -2328,7 +2422,7 @@ export function installHarnessCliCommand(program: Command, deps: HarnessCliComma
               process.exitCode = 2;
               return Promise.resolve();
             }
-            return resolved.substrate === 'pod' ? onPod(stampedOpts, 'cli-harness-ask', goalPath, resolved.pool!, deps.podDispatchTask) : ask(goalPath, normalizeHarnessAskSayOptions(stampedOpts));
+            return resolved.substrate === 'pod' ? onPod(stampedOpts, 'cli-harness-ask', goalPath, resolved.pool!, deps.podDispatchTask) : (announceLocalChildProvider(stampedOpts), ask(goalPath, normalizeHarnessAskSayOptions(stampedOpts)));
           },
           deps.launchGate,
         );
@@ -2353,7 +2447,9 @@ export function installHarnessCliCommand(program: Command, deps: HarnessCliComma
               process.exitCode = 2;
               return Promise.resolve();
             }
-            return resolved.substrate === 'pod' ? onPod(stampedOpts, 'cli-harness-say', sentence.join(' '), resolved.pool!, deps.podDispatchTask) : say(sentence, normalizeHarnessAskSayOptions(stampedOpts));
+            return resolved.substrate === 'pod'
+              ? onPod(stampedOpts, 'cli-harness-say', sentence.join(' '), resolved.pool!, deps.podDispatchTask, harnessAuthorOnPod())
+              : (announceLocalChildProvider(stampedOpts), say(sentence, normalizeHarnessAskSayOptions(stampedOpts)));
           },
           deps.launchGate,
         );

package/src/harness/harness-incidents.ts

@@ -2,6 +2,7 @@ import { Database } from 'bun:sqlite';
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { redactSecretText } from '../debug/log.js';
+import { refuseProductionLedgerWriteInTest } from './ledger-write-guard.js';
 
 export interface RunExit {
   runId: string;
@@ -83,6 +84,7 @@ export function readRunExits(root: string): RunExit[] {
 
 /** SQLite's process-owned write lock serializes ledger checks and appends across processes. */
 export function recordRunExit(row: RunExit, root: string): void {
+  if (refuseProductionLedgerWriteInTest(root, 'incidents')) return;
   if (!row.runId?.trim()) return;
   const at = Date.parse(row.at);
   if (!Number.isFinite(at)) throw new Error('invalid incident exit time');

package/src/harness/harness-pod-dispatch.ts

@@ -14,6 +14,11 @@ import { findGitDir } from '../git-fs/locate.js';
 import { debug } from '../debug/log.js';
 import { ELANOUS_ENTRY_SCRIPT } from '../self-implement/seams.js';
 import { parsePodSourceSpec } from '../task-orchestrator/surfaces/pod-source-spec.js';
+import { declaredGoalType, type GoalType } from '../self-implement/goal-author.js';
+import { appendRunLedgerEntry } from '../self-implement/run-ledger.js';
+import { HARNESS_RUN_ID_ENV } from './harness-space.js';
+import { podMemoryLimitFor, type PodMemoryTier } from '../task-orchestrator/surfaces/self-implement-pod.js';
+import { selectPodMemoryTier } from './pod-memory-policy.js';
 
 export interface HarnessPodDispatchInput {
   readonly entrance: 'cli-harness-ask' | 'cli-harness-say';
@@ -23,8 +28,9 @@ export interface HarnessPodDispatchInput {
   readonly seat?: 'OP' | 'TC' | 'MK' | 'UX';
   /** Host already recorded the observe-only dispatch; suppress a second decision in the Pod. */
   readonly dispatchRecorded?: boolean;
-  /** Pod 메모리 등급(standard|high) — 오케스트레이터 환경 `ELANOUS_POD_MEMORY_TIER` 로 Job 까지 간다. */
-  readonly podMemory?: string;
+  /** Pod 메모리 등급(lite|standard|high) — 오케스트레이터 환경 `ELANOUS_POD_MEMORY_TIER` 로 Job 까지 간다. */
+  readonly podMemory?: PodMemoryTier;
+  readonly goalType?: GoalType;
   /** L7c — Pod queue predecessor (goal ID or PR) — `ELANOUS_POD_AFTER` carries it to every Pod Job admission. */
   readonly after?: string;
   readonly autoMerge?: boolean;
@@ -32,6 +38,50 @@ export interface HarnessPodDispatchInput {
   readonly json?: boolean;
   /** 사람이 고른 원천 spec — `commit:` · `pr:` · `worktree:` · `files:`. 검증은 발사 전. */
   readonly source?: string;
+  /** `--child-llm-provider/--child-llm-model/--child-llm-effort` — carried to `self orchestrate` so the Pod child uses them (10-05 PODPROVIDER). */
+  readonly childLlmProvider?: string;
+  readonly childLlmModel?: string;
+  readonly childLlmEffort?: string;
+  /** `harness.authorOnPod` — say 문장을 Pod 안에서 저작부터 돌린다. 호스트는 영수증만 남긴다. */
+  readonly authorOnPod?: boolean;
+}
+
+/** 골 본문에 넣을 문장 — 코드 펜스가 문장을 삼키지 않게 백틱 런을 늘린다. */
+export function fenceVerbatimSentence(sentence: string): { fence: string; body: string } {
+  const body = sentence.replace(/\r\n/g, '\n');
+  const longest = body.match(/`+/g)?.reduce((n, run) => Math.max(n, run.length), 0) ?? 0;
+  return { fence: '`'.repeat(Math.max(3, longest + 1)), body };
+}
+
+/** Pod 가 문장 그대로 `harness say` 를 돌리게 하는 골. 자격·풀은 기존 Pod 주입을 그대로 쓴다. */
+export function authorOnPodGoal(sentence: string): string {
+  const { fence, body } = fenceVerbatimSentence(sentence);
+  return [
+    '# 골: Pod 안에서 harness say 저작',
+    '',
+    '- GoalType: implement',
+    '- 대상 경로: src/harness/harness-pod-dispatch.ts',
+    '',
+    '## 할 일',
+    '',
+    '이 Pod 안에서, 그리고 이 Pod 안에서만, 아래 펜스의 문장을 한 글자도 바꾸지 않고',
+    '`elanous harness say --substrate local` 의 인자로 실행한다.',
+    '그 한 발이 골 저작·리뷰·게이트·구현·PR 까지 이 Pod 안에서 끝낸다.',
+    '호스트에는 발사 영수증과 원장만 남는다. 호스트에서 저작·리뷰·게이트를 지휘하지 않는다.',
+    '저작 자격은 이 Job 에 이미 주입된 Pod 자격 규칙을 그대로 쓴다.',
+    '',
+    '## 문장 (verbatim)',
+    '',
+    fence,
+    body,
+    fence,
+    '',
+    '## 수용 기준',
+    '',
+    '- 위 펜스 문장만으로 `elanous harness say --substrate local` 한 발이 이 Pod 에서 저작부터 PR 까지 간다.',
+    '- 그 명령의 종료 코드가 0 이 아니면 이 골은 실패다.',
+    '',
+  ].join('\n');
 }
 
 export function podOrchestrateArgs(input: HarnessPodDispatchInput, goalFile: string): string[] {
@@ -44,6 +94,9 @@ export function podOrchestrateArgs(input: HarnessPodDispatchInput, goalFile: str
     ...(input.base ? ['--base', input.base] : []),
     ...(input.json ? ['--json'] : []),
     ...(input.source ? ['--pod-source', input.source] : []),
+    ...(input.childLlmProvider?.trim() ? ['--child-llm-provider', input.childLlmProvider.trim()] : []),
+    ...(input.childLlmModel?.trim() ? ['--child-llm-model', input.childLlmModel.trim()] : []),
+    ...(input.childLlmEffort?.trim() ? ['--child-llm-effort', input.childLlmEffort.trim()] : []),
     '--concurrency', '1',
   ];
 }
@@ -63,34 +116,69 @@ export function dispatchHarnessOnPod(input: HarnessPodDispatchInput, deps: PodDi
       return 2;
     }
   }
+  const env = { ...process.env };
   let tempDir: string | undefined;
-  let goalFile: string;
-  let goalChars: number;
+  let goalFile = '';
+  let goalText: string;
   if (input.entrance === 'cli-harness-ask') {
     goalFile = resolve(cwd, input.input);
-    goalChars = (deps.readFile ?? ((p) => readFileSync(p, 'utf8')))(goalFile).length;
+    goalText = (deps.readFile ?? ((p) => readFileSync(p, 'utf8')))(goalFile);
+  } else if (input.authorOnPod) {
+    const goal = authorOnPodGoal(input.input);
+    goalText = goal;
+    const root = findGitDir(cwd)?.root ?? cwd;
+    const runsDir = join(root, 'docs', 'goals');
+    mkdirSync(runsDir, { recursive: true });
+    tempDir = mkdtempSync(join(runsDir, '.pod-author-'));
+    goalFile = join(tempDir, 'GOAL-pod-author-2026-10-05.md');
+    writeFileSync(goalFile, goal, { mode: 0o600 });
+    const runId = env[HARNESS_RUN_ID_ENV]?.trim();
+    const receipt = { entrance: input.entrance, host: 'receipt-only', authorOnPod: true, goalFile };
+    debug.log('harness.substrate', 'author-on-pod-receipt', receipt);
+    if (runId) {
+      try { appendRunLedgerEntry({ runId, event: 'author-on-pod-receipt', data: receipt }); }
+      catch (error) { debug.log('harness.substrate', 'author-on-pod-receipt-unwritten', { reason: error instanceof Error ? error.message : String(error) }); }
+    }
   } else {
     const goal = input.input;
+    goalText = goal;
     const runsDir = selfDevRunsDir();
     mkdirSync(runsDir, { recursive: true });
     tempDir = mkdtempSync(join(runsDir, 'pod-goal-'));
     goalFile = join(tempDir, 'goal.txt');
     writeFileSync(goalFile, goal, { mode: 0o600 });
-    goalChars = goal.length;
   }
+  const goalChars = goalText.length;
   const args = podOrchestrateArgs(input, goalFile);
   debug.log('harness.substrate', 'goal-file', { entrance: input.entrance, mode: tempDir ? 'temp' : 'path' });
-  const env = { ...process.env };
+  const goalType = input.goalType ?? declaredGoalType(goalText);
+  // A process-level memory tier is already an explicit selection; do not replace it with a goal-type default.
+  const existing = podMemoryLimitFor(goalText, env);
+  const selection = !input.podMemory && ['option', 'goal-line', 'pwa-auto', 'advise'].includes(existing.source)
+    ? { tier: existing.tier, reason: 'existing-tier' as const }
+    : goalType || input.podMemory ? selectPodMemoryTier(goalType ?? 'implement', input.podMemory, existing.tier) : undefined;
+  if (selection) {
+    env.ELANOUS_POD_MEMORY_TIER = selection.tier;
+    env.ELANOUS_POD_MEMORY_REASON = selection.reason;
+  } else {
+    delete env.ELANOUS_POD_MEMORY_REASON;
+  }
+  if (goalType) env.ELANOUS_POD_GOAL_TYPE = goalType;
+  else delete env.ELANOUS_POD_GOAL_TYPE;
   if (input.seat) env.ELANOUS_HARNESS_SEAT = input.seat;
   delete env.ELANOUS_POD_GOAL_DOC;
   delete env.ELANOUS_DISPATCH_RECORDED;
   if (input.dispatchRecorded) env.ELANOUS_DISPATCH_RECORDED = '1';
-  if (input.podMemory) env.ELANOUS_POD_MEMORY_TIER = input.podMemory;
+  debug.log('harness.substrate', 'memory-selected', { entrance: input.entrance, goalType,
+    tier: selection?.tier ?? existing.tier, reason: selection?.reason ?? existing.source,
+    memoryLimit: podMemoryLimitFor(goalText, env).limit });
   delete env.ELANOUS_POD_AFTER;
   if (input.after) env.ELANOUS_POD_AFTER = input.after;
-  if (input.entrance === 'cli-harness-ask') {
+  if (input.authorOnPod) env.ELANOUS_POD_AUTHOR_ON_POD = '1';
+  else delete env.ELANOUS_POD_AUTHOR_ON_POD;
+  if (input.entrance === 'cli-harness-ask' || input.authorOnPod) {
     const root = findGitDir(cwd)?.root;
-    const path = resolve(cwd, input.input);
+    const path = input.authorOnPod ? goalFile : resolve(cwd, input.input);
     const relativePath = root ? relative(realpathSync(root), realpathSync(path)) : '';
     if (relativePath && relativePath !== '..' && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath)) {
       env.ELANOUS_POD_GOAL_DOC = relativePath;
@@ -100,6 +188,7 @@ export function dispatchHarnessOnPod(input: HarnessPodDispatchInput, deps: PodDi
   }
   debug.log('harness.substrate', 'dispatch-pod', {
     entrance: input.entrance, podPool: input.podPool ?? null, podMemory: input.podMemory ?? null, after: input.after ?? null, autoMerge: input.autoMerge !== false,
+    childLlmProvider: input.childLlmProvider ?? null, childLlmModel: input.childLlmModel ?? null,
     goalChars, ...(input.entrance === 'cli-harness-ask' ? { goalPath: input.input } : {}),
   });
   const run = deps.run ?? ((cmd: string, a: readonly string[], childEnv: NodeJS.ProcessEnv) => new Promise<number>((resolveStatus) => {
@@ -119,7 +208,7 @@ export function dispatchHarnessOnPod(input: HarnessPodDispatchInput, deps: PodDi
     child.once('error', () => { cleanup(); resolveStatus(1); });
     child.once('close', (code, signal) => { cleanup(); resolveStatus(code ?? ((signal ?? forwarded) === 'SIGINT' ? 130 : 143)); });
   }));
-  const cleanup = () => { if (tempDir) rmSync(tempDir, { recursive: true, force: true }); };
+  const cleanup = () => { if (tempDir && !input.authorOnPod) rmSync(tempDir, { recursive: true, force: true }); };
   try {
     const status = run(process.execPath, args, env);
     if (typeof status === 'number' || status === null) {