elanous 0.2.17 → 0.2.19

package/src/user-config.ts

@@ -981,6 +981,8 @@ export interface DiscordConfig {
   /** Standalone `elanous discord-test` scope — same token, dedicated
    *  channel, isolated state. See DiscordTestChannel. */
   testChannel?: DiscordTestChannel;
+  /** 첫 말·6시간 쉼 뒤 일반 답 앞에 맥락 요약을 보낸다. 기본 켬, false 만 끈다. */
+  contextFirst?: boolean;
 }
 
 const DISCORD_DEFAULTS: DiscordConfig = { enabled: false, allowedUsers: [] };
@@ -3489,12 +3491,22 @@ export interface OrchestratorLoopConfig {
   mode: 'off' | 'shadow' | 'live';
   seatTrees: Partial<Record<OrchestratorSeat, string[]>>;
   seatCaps: Record<OrchestratorSeat, number>;
+  /** Max new delegations per tick; absent means no limit. */
+  maxDelegatePerTick?: number;
   /** Per-seat release gate; absent seats retain the spawn-budget default. */
   releaseGate?: Partial<Record<OrchestratorSeat, number>>;
   trafficMode: 'shadow' | 'live';
   idleRequest?: 'off' | 'shadow' | 'live';
   /** FINISH-RATE — the queue tick reads finish metrics before launching; shadow logs the hold only, on holds (default shadow). */
   finishGate?: 'off' | 'shadow' | 'on';
+  /** ORCH-TA-HAND — the delegate node hands its picked cell to TASK-AGENT (`handTask`). Absent = off · shadow = card only ·
+   *  live = launch (only when the tick mode is live too; a live hand skips the seat journal so the cell launches once). */
+  handToTaskAgent?: 'off' | 'shadow' | 'live';
+  /** Demo: hand only this cell id (others keep the seat path). Absent = every delegatable cell. */
+  handToTaskAgentCell?: string;
+  /** COORD-HA — the tick CLI probes LLM ⊕ task board for the degradation ladder. Absent = shadow (probe and log only) ·
+   *  live = the tick acts on it (L1 rules only · L2 no new assignment) · off = no probe. */
+  degradationSignal?: 'off' | 'shadow' | 'live';
 }
 
 export const ORCHESTRATOR_DEFAULTS: OrchestratorLoopConfig = {
@@ -3520,10 +3532,16 @@ export function parseOrchestratorLoopConfig(raw: unknown): OrchestratorLoopConfi
     if (typeof gate === 'number' && Number.isSafeInteger(gate) && gate >= 0) releaseGate[seat] = gate;
   }
   const mode = value.mode === 'off' || value.mode === 'live' ? value.mode : 'shadow';
-  return { mode, seatTrees, seatCaps, ...(Object.keys(releaseGate).length ? { releaseGate } : {}),
+  const maxDelegatePerTick = value.maxDelegatePerTick;
+  return { mode, seatTrees, seatCaps,
+    ...(typeof maxDelegatePerTick === 'number' && Number.isSafeInteger(maxDelegatePerTick) && maxDelegatePerTick >= 0 ? { maxDelegatePerTick } : {}),
+    ...(Object.keys(releaseGate).length ? { releaseGate } : {}),
     trafficMode: value.trafficMode === 'live' ? 'live' : 'shadow',
     idleRequest: value.idleRequest === 'off' || value.idleRequest === 'live' ? value.idleRequest : 'shadow',
-    finishGate: value.finishGate === 'off' || value.finishGate === 'on' ? value.finishGate : 'shadow' };
+    finishGate: value.finishGate === 'off' || value.finishGate === 'on' ? value.finishGate : 'shadow',
+    ...(value.handToTaskAgent === 'shadow' || value.handToTaskAgent === 'live' ? { handToTaskAgent: value.handToTaskAgent } : {}),
+    ...(typeof value.handToTaskAgentCell === 'string' && value.handToTaskAgentCell.trim() ? { handToTaskAgentCell: value.handToTaskAgentCell.trim() } : {}),
+    ...(value.degradationSignal === 'off' || value.degradationSignal === 'shadow' || value.degradationSignal === 'live' ? { degradationSignal: value.degradationSignal } : {}) };
 }
 
 export type StewardLoopMode = 'off' | 'shadow' | 'live' | 'rescue';
@@ -3593,12 +3611,103 @@ export interface HqConfig {
   tailscaleBin?: string;
   /** Highest lease generation this host ever saw (default ~/.elanous-hq/seen-generation · 600). */
   seenGenerationFile?: string;
+  /** Board writes only reject stale generations when explicitly enforced (default shadow). */
+  boardFencing?: 'shadow' | 'enforce';
   /** Per-probe timeout in seconds (default 5). */
   probeTimeoutSeconds?: number;
 }
 
+/** GATE-REMOTE (10-06): heavy pre-landing checks (self gate · changed-file tsc · public-export test run) on a remote host at the same commit. */
+export interface GateRemoteConfig {
+  /** Auto-dispatch when the local 1-min load exceeds the threshold (default true). `--remote`/`--local` flags always win. */
+  enabled?: boolean;
+  /** ssh host (default node-b). */
+  host?: string;
+  /** Local 1-min load average above which checks go remote (default 20). */
+  loadThreshold?: number;
+  /** Concurrent heavy checks per remote host (default and ceiling 2 — config may only lower it). */
+  hostCap?: number;
+  /** Bare mirror on the host (default ~/mirror/elanous-agent.git — shared with the release gate). */
+  mirror?: string;
+  /** Seconds to wait for a free host slot before running locally (default 600). */
+  slotWaitSeconds?: number;
+}
+
+export function parseGateRemoteConfig(raw: unknown): GateRemoteConfig | undefined {
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return undefined;
+  const r = raw as Record<string, unknown>;
+  const out: GateRemoteConfig = {};
+  if (typeof r.enabled === 'boolean') out.enabled = r.enabled;
+  for (const key of ['host', 'mirror'] as const) if (typeof r[key] === 'string' && (r[key] as string).trim()) out[key] = (r[key] as string).trim();
+  for (const key of ['loadThreshold', 'slotWaitSeconds'] as const) {
+    const v = r[key];
+    if (typeof v === 'number' && Number.isFinite(v) && v >= 0) out[key] = v;
+  }
+  if (typeof r.hostCap === 'number' && Number.isSafeInteger(r.hostCap) && r.hostCap > 0 && r.hostCap <= 2) out.hostCap = r.hostCap;
+  return Object.keys(out).length ? out : undefined;
+}
+
+export interface ProjectConfig {
+  /** `axes` is absent when the configured axes are invalid; `error` then carries the config error text. */
+  rubric?: { axes?: import('./release-loop/rubric.js').RubricAxis[]; error?: string };
+}
+
+/** Validate one project's `rubric.axes` — throws the config error text (key duplicate · non-numeric weight). */
+export function parseProjectRubricAxes(id: string, axes: unknown): Array<{ key: string; weight: number }> {
+  if (!Array.isArray(axes)) throw new Error(`[user-config] projects.${id}.rubric.axes 는 배열이어야 합니다`);
+  const seen = new Set<string>();
+  const parsed: Array<{ key: string; weight: number }> = [];
+  for (const [index, axis] of axes.entries()) {
+    const field = `projects.${id}.rubric.axes[${index}]`;
+    if (!axis || typeof axis !== 'object' || Array.isArray(axis)) throw new Error(`[user-config] ${field} 는 {key,weight} 객체여야 합니다`);
+    const { key, weight } = axis as Record<string, unknown>;
+    if (typeof key !== 'string' || !key.trim()) throw new Error(`[user-config] ${field}.key 는 빈 문자열일 수 없습니다`);
+    if (seen.has(key)) throw new Error(`[user-config] projects.${id}.rubric.axes 키 중복: ${key}`);
+    if (typeof weight !== 'number' || !Number.isFinite(weight)) throw new Error(`[user-config] ${field}.weight 는 유한한 숫자여야 합니다: ${String(weight)}`);
+    seen.add(key);
+    parsed.push({ key, weight });
+  }
+  return parsed;
+}
+
+/**
+ * Project rubric axes (P3b CORE-GENERIC). Loading never throws — one bad project entry must not
+ * stop every command — so an invalid entry keeps its error text and `resolveRubricAxes` raises it.
+ */
+function parseProjectsConfig(raw: unknown): Record<string, ProjectConfig> | undefined {
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return undefined;
+  const projects: Record<string, ProjectConfig> = {};
+  for (const [id, entry] of Object.entries(raw)) {
+    if (id === '__proto__' || !entry || typeof entry !== 'object' || Array.isArray(entry)) continue;
+    const rubric = (entry as Record<string, unknown>).rubric;
+    if (!rubric || typeof rubric !== 'object' || Array.isArray(rubric)) continue;
+    const axes = (rubric as Record<string, unknown>).axes;
+    if (axes === undefined) continue;
+    try {
+      projects[id] = { rubric: { axes: parseProjectRubricAxes(id, axes) } };
+    } catch (err) {
+      const error = err instanceof Error ? err.message : String(err);
+      console.warn(`${error} — 이 프로젝트의 루브릭 축 해석은 오류로 멈춘다`);
+      projects[id] = { rubric: { error } };
+    }
+  }
+  return Object.keys(projects).length ? projects : undefined;
+}
+
 export interface UserConfig {
+  projects?: Record<string, ProjectConfig>;
+  /** Default personal topic watch; absent = enabled when user sources exist. */
+  watch?: { enabled?: boolean };
+  starter?: { topics?: string[] };
+  /** GUARD-ONE-a: omitted means shadow. `live` is parsed for the later cutover, but `elanous guardian tick`
+   *  refuses it until a human-confirmed operational change (GUARD-ONE-a ships shadow only). */
+  guardian?: { mode?: 'shadow' | 'live' };
+  /** TA-JUDGE-LIVE-SAFE: task-agent judge moves executed for real. Only `review` · `propose-green` are honoured
+   *  (`src/task-agent/live-moves.ts` drops anything else with a warning). Absent = env ELANOUS_TASK_AGENT_LIVE_MOVES, else none (pure shadow). */
+  taskAgent?: { liveMoves?: string[] };
   events?: EventsConfig;
+  /** GATE-REMOTE — see GateRemoteConfig. Absent = defaults (auto on · node-b · load 20 · cap 2). */
+  gateRemote?: GateRemoteConfig;
   /** Explicit HTTPS destination for doctor diagnostics; absent means no upload. */
   diagnostics?: { uploadUrl?: string };
   /** HQ lease (본부 임대 · 10-04 HQ-HB/HQ-FENCE): arbiter host over ssh, this host's name, per-role fail-open when the arbiter is unreachable (default: fail closed). */
@@ -3609,6 +3718,8 @@ export interface UserConfig {
   nexus?: { demoMode?: boolean };
   /** Execution-phase HITL answer deadline; absent means 30 minutes. */
   hitl?: { executionDeadlineMinutes?: number };
+  /** Deferred (quiet-hours) outbound queue. `deferredMaxAttempts`: failed flushes before an item is quarantined; absent = env ELANOUS_OUTBOUND_DEFERRED_MAX_ATTEMPTS, else 5. */
+  outbound?: { deferredMaxAttempts?: number };
   coo?: { linearProject?: string };
   decisions?: { linearProjection: { enabled: boolean }; requireCrossCheck: boolean;
     crossCheckNeighbor: Record<EventSeat, EventSeat>; crossCheckWaitMinutes: number };
@@ -3618,7 +3729,7 @@ export interface UserConfig {
   loops?: { owners?: Record<string, EventSeat>; defaultOwner?: EventSeat; orchestrator?: OrchestratorLoopConfig; steward?: { mode?: StewardLoopMode; linearTeam?: string; roles?: Record<string, { maxConcurrent?: number }>; budget?: number; tracks?: Record<string, string>; alertAfterFailures?: number; launch?: 'off' | 'shadow' | 'live'; maxParallel?: number; podPool?: string }; seat?: SeatLoopConfig; persona?: PersonaLoopConfig };
   /** 🔐 Pod 의 Grok API 키 과금은 명시 opt-in 만. 생략·잘못된 값은 false.
    *  budgetGate 와 같은 `harness` 객체다 — 중복 선언이면 뒤 타입이 앞을 지운다. */
-  harness?: { edgeRail?: { canaryOkRuns?: number; failureMultiplier?: number; minSamples?: number }; /** Goal authoring grade; absent or invalid config resolves to full. */ authorGrade?: 'full' | 'lite'; revertGuard?: { depth: number }; pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; exposeGate?: 'warn' | 'strict'; difficultyPlacement?: boolean; defaultRepo?: string; /** Optional GitHub repository name (owner/repo), distinct from the local defaultRepo path. */ repo?: string; substrate?: 'local' | 'pod'; podPool?: string; worktreeAddTimeoutSec?: number; queue?: { seatCap?: Partial<Record<'OP' | 'TC' | 'MK' | 'UX', number>>; /** Direct `harness say|ask` goes through the seat queue first (ONEDOOR-2). Absent = env ELANOUS_HARNESS_QUEUE_DIRECT_SAY, else off. */ directSay?: boolean }; /** `harness say` 문장을 Pod 안에서 저작부터 돌릴지. 생략·false = 끔(호스트가 저작). */ authorOnPod?: boolean; /** Stopped-PR repair goals: shadow records only (default); live enqueues them. */ helper?: { repair?: 'shadow' | 'live'; /** Live launches allowed per UTC day. Absent or invalid means 3. */ repairPerDay?: number };
+  harness?: { edgeRail?: { canaryOkRuns?: number; failureMultiplier?: number; minSamples?: number }; /** Goal authoring grade; absent or invalid config resolves to full. */ authorGrade?: 'full' | 'lite'; revertGuard?: { depth: number }; pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; exposeGate?: 'warn' | 'strict'; difficultyPlacement?: boolean; defaultRepo?: string; /** Optional GitHub repository name (owner/repo), distinct from the local defaultRepo path. */ repo?: string; substrate?: 'local' | 'pod'; podPool?: string; worktreeAddTimeoutSec?: number; queue?: { seatCap?: Partial<Record<'OP' | 'TC' | 'MK' | 'UX', number>>; /** Direct `harness say|ask` goes through the seat queue first (ONEDOOR-2). Absent = env ELANOUS_HARNESS_QUEUE_DIRECT_SAY, else off. */ directSay?: boolean; /** SEAT-CAP-STALE: a run whose last ledger progress is older than this stops holding its seat. Absent = env ELANOUS_HARNESS_QUEUE_STALE_RUN_MINUTES, else 30. */ staleRunMinutes?: number; /** Seat-less runs count in one bucket with this cap instead of every seat. Absent = env ELANOUS_HARNESS_QUEUE_UNKNOWN_SEAT_CAP, else 2. */ unknownSeatCap?: number }; /** `harness say` 문장을 Pod 안에서 저작부터 돌릴지. 생략·false = 끔(호스트가 저작). */ authorOnPod?: boolean; /** Stopped-PR repair goals: shadow records only (default); live enqueues them. */ helper?: { repair?: 'shadow' | 'live'; /** Live launches allowed per UTC day. Absent or invalid means 3. */ repairPerDay?: number };
   /** Nested elanous launches. Only depth 0 may set `allow`. Absent or any other value refuses. A depth >= 1 `--nested-elanous allow` is ignored. */
   nestedElanous?: 'allow' | 'refuse';
   /** Maximum nested elanous depth; safe positive integer, default 2. */
@@ -3871,6 +3982,36 @@ function parseAutoReviewConfig(raw: unknown): AutoReviewConfig | undefined {
   return Object.keys(out).length > 0 ? out : undefined;
 }
 
+/** Keeps `taskAgent.liveMoves` as raw strings — the allow-list (and the unknown-entry warning) lives in the task agent. */
+function parseTaskAgentConfig(raw: unknown): UserConfig['taskAgent'] {
+  if (raw === undefined) return undefined;
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+    warnUserConfigDrop('taskAgent', '섹션이 객체가 아니다 — 버림');
+    return undefined;
+  }
+  const liveMoves = (raw as Record<string, unknown>).liveMoves;
+  if (liveMoves === undefined) return undefined;
+  // 설정이 «있으면» 환경 변수로 내려가지 않는다 — 배열이 아니면 빈 목록(fail-closed), 문자열 밖 항목은 글자로 바꿔 넘겨
+  // 실행부가 «모르는 항목»으로 경고하고 버리게 한다(유효한 항목은 산다).
+  if (!Array.isArray(liveMoves)) {
+    warnUserConfigDrop('taskAgent.liveMoves', '배열이 아니다 — 빈 목록(실행 0)');
+    return { liveMoves: [] };
+  }
+  return { liveMoves: liveMoves.map((entry) => typeof entry === 'string' ? entry : JSON.stringify(entry) ?? String(entry)) };
+}
+
+function parseGuardianConfig(raw: unknown): UserConfig['guardian'] {
+  if (raw === undefined) return undefined;
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+    warnUserConfigDrop('guardian', '섹션이 객체가 아니다 — 버림');
+    return undefined;
+  }
+  const mode = (raw as Record<string, unknown>).mode;
+  if (mode === 'shadow' || mode === 'live') return { mode };
+  if (mode !== undefined) warnUserConfigDrop('guardian.mode', 'shadow 또는 live 가 아니다 — 버림');
+  return undefined;
+}
+
 /** Parse optional ops fields independently; invalid settings cannot silently select a cron cwd. */
 function parseOpsConfig(raw: unknown): UserConfig['ops'] | undefined {
   if (raw === undefined) return undefined;
@@ -4592,6 +4733,7 @@ export function parseHqConfig(raw: unknown): HqConfig | undefined {
   }
   if (typeof r.ttlSeconds === 'number' && Number.isFinite(r.ttlSeconds) && r.ttlSeconds > 0) out.ttlSeconds = r.ttlSeconds;
   if (typeof r.probeTimeoutSeconds === 'number' && Number.isFinite(r.probeTimeoutSeconds) && r.probeTimeoutSeconds > 0) out.probeTimeoutSeconds = r.probeTimeoutSeconds;
+  if (r.boardFencing === 'shadow' || r.boardFencing === 'enforce') out.boardFencing = r.boardFencing;
   if (r.autoPromote && typeof r.autoPromote === 'object' && !Array.isArray(r.autoPromote)) {
     const auto = r.autoPromote as Record<string, unknown>;
     const setting: NonNullable<HqConfig['autoPromote']> = {};
@@ -4727,7 +4869,16 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
 
   const nexus = rawObj.nexus && typeof rawObj.nexus === 'object' && !Array.isArray(rawObj.nexus)
     ? rawObj.nexus as Record<string, unknown> : {};
+  const gateRemoteConfig = parseGateRemoteConfig(rawObj.gateRemote);
+  const projects = parseProjectsConfig(rawObj.projects);
   return {
+    ...(projects ? { projects } : {}),
+    ...(rawObj.starter && typeof rawObj.starter === 'object' && !Array.isArray(rawObj.starter)
+      && Array.isArray((rawObj.starter as Record<string, unknown>).topics)
+      ? { starter: { topics: ((rawObj.starter as { topics: unknown[] }).topics).filter((topic): topic is string => typeof topic === 'string' && !!topic.trim()) } } : {}),
+    ...(rawObj.watch && typeof rawObj.watch === 'object' && !Array.isArray(rawObj.watch)
+      && typeof (rawObj.watch as Record<string, unknown>).enabled === 'boolean'
+      ? { watch: { enabled: (rawObj.watch as { enabled: boolean }).enabled } } : {}),
     nexus: { demoMode: nexus.demoMode === true },
     ...(Object.keys(seatBudgets).length ? { org: { budget: seatBudgets } } : {}),
     pod: {
@@ -4770,7 +4921,16 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       ).filter(([seat, cap]) => /^(OP|TC|MK|UX)$/.test(seat) && typeof cap === 'number' && Number.isSafeInteger(cap) && cap > 0)),
       ...(harness.queue && typeof harness.queue === 'object' && !Array.isArray(harness.queue)
         && typeof (harness.queue as Record<string, unknown>).directSay === 'boolean'
-        ? { directSay: (harness.queue as { directSay: boolean }).directSay } : {}) },
+        ? { directSay: (harness.queue as { directSay: boolean }).directSay } : {}),
+      ...(() => {
+        const queue = harness.queue && typeof harness.queue === 'object' && !Array.isArray(harness.queue)
+          ? harness.queue as Record<string, unknown> : {};
+        const stale = queue.staleRunMinutes, unknownCap = queue.unknownSeatCap;
+        return {
+          ...(typeof stale === 'number' && Number.isSafeInteger(stale) && stale > 0 ? { staleRunMinutes: stale } : {}),
+          ...(typeof unknownCap === 'number' && Number.isSafeInteger(unknownCap) && unknownCap >= 0 ? { unknownSeatCap: unknownCap } : {}),
+        };
+      })() },
       ...(harness.substrate === 'local' || harness.substrate === 'pod' ? { substrate: harness.substrate } : {}),
       ...(typeof harness.podPool === 'string' && harness.podPool.trim() ? { podPool: harness.podPool.trim() } : {}),
       ...(typeof harness.worktreeAddTimeoutSec === 'number' && Number.isSafeInteger(harness.worktreeAddTimeoutSec)
@@ -4951,6 +5111,7 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       homeChannel: typeof dc.homeChannel === 'string' ? dc.homeChannel
         : typeof dc.homeChannel === 'number' ? String(dc.homeChannel) : undefined,
       testChannel: normalizeDiscordTestChannel((dc as Record<string, unknown>).testChannel),
+      ...(dc.contextFirst === false ? { contextFirst: false } : {}),
       ...(Array.isArray(dc.chatChannels)
         ? { chatChannels: (dc.chatChannels as unknown[]).map(v => String(v).trim()).filter(Boolean) }
         : {}),
@@ -5439,7 +5600,13 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       && typeof (rawObj.hitl as Record<string, unknown>).executionDeadlineMinutes === 'number'
       ? { hitl: { executionDeadlineMinutes: (rawObj.hitl as { executionDeadlineMinutes: number }).executionDeadlineMinutes } }
       : {}),
+    ...(rawObj.outbound && typeof rawObj.outbound === 'object' && !Array.isArray(rawObj.outbound)
+      && Number.isSafeInteger((rawObj.outbound as Record<string, unknown>).deferredMaxAttempts)
+      && ((rawObj.outbound as { deferredMaxAttempts: number }).deferredMaxAttempts) > 0
+      ? { outbound: { deferredMaxAttempts: (rawObj.outbound as { deferredMaxAttempts: number }).deferredMaxAttempts } }
+      : {}),
     ...(parseHqConfig(rawObj.hq) ? { hq: parseHqConfig(rawObj.hq)! } : {}),
+    ...(gateRemoteConfig ? { gateRemote: gateRemoteConfig } : {}),
     cli: { helpRole: parseCliHelpRole(rawObj.cli) },
     coo: { linearProject: typeof (rawObj.coo as { linearProject?: unknown } | undefined)?.linearProject === 'string' && (rawObj.coo as { linearProject: string }).linearProject.trim()
       ? (rawObj.coo as { linearProject: string }).linearProject.trim() : '외부 행정·큰 일 (COO)' },
@@ -5447,6 +5614,8 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
     loops: { ...(stewardLoops ?? {}), ...parseLoopOwners(rawObj.loops), orchestrator: parseOrchestratorLoopConfig((rawObj.loops as { orchestrator?: unknown } | undefined)?.orchestrator), seat: parseSeatLoopsConfig(rawObj.loops),
       persona: { enabled: (rawObj.loops as { persona?: { enabled?: unknown } } | undefined)?.persona?.enabled === true } },
     events: parseEventsConfig(rawObj.events),
+    guardian: parseGuardianConfig(rawObj.guardian),
+    taskAgent: parseTaskAgentConfig(rawObj.taskAgent),
     // M1-1: sparse — undefined when the user hasn't set anything, so
     // resolvers fall through to zero-config defaults.
     ...spreadIfDefined('modelTier', parseModelTierConfig(rawObj.modelTier)),
@@ -5985,6 +6154,21 @@ export function saveUserConfig(
     },
   };
   const rawRest = { ...(cfg.raw ?? {}) };
+  // projects: raw entries are kept verbatim — an invalid entry loaded from disk is preserved, not blocked (its error
+  // surfaces in resolveRubricAxes) — and typed axes handed to save are validated (invalid ones refuse the save).
+  const rawProjectsValue = rawRest.projects;
+  const rawProjects = rawRest.projects && typeof rawRest.projects === 'object' && !Array.isArray(rawRest.projects)
+    ? rawRest.projects as Record<string, unknown> : undefined;
+  const savedProjects: Record<string, unknown> | undefined = rawProjects || cfg.projects ? { ...(rawProjects ?? {}) } : undefined;
+  for (const [id, project] of Object.entries(cfg.projects ?? {})) {
+    if (project?.rubric?.axes === undefined) continue;
+    const axes = parseProjectRubricAxes(id, project.rubric.axes);
+    const rawProject = rawProjects?.[id] && typeof rawProjects[id] === 'object' && !Array.isArray(rawProjects[id])
+      ? rawProjects[id] as Record<string, unknown> : {};
+    const rawRubric = rawProject.rubric && typeof rawProject.rubric === 'object' && !Array.isArray(rawProject.rubric)
+      ? rawProject.rubric as Record<string, unknown> : {};
+    savedProjects![id] = { ...rawProject, rubric: { ...rawRubric, axes } };
+  }
   // Strip typed sections from raw so we don't double-write stale copies.
   delete rawRest.skillRouter;
   delete rawRest.llm;
@@ -6019,6 +6203,10 @@ export function saveUserConfig(
   delete rawRest.smartDefaults;
   delete rawRest.grounding;
   delete rawRest.diagnostics;
+  delete rawRest.projects;
+  delete rawRest.starter;
+  delete rawRest.watch;
+  delete rawRest.guardian;
   const rawHarness = rawRest.harness && typeof rawRest.harness === 'object' && !Array.isArray(rawRest.harness)
     ? rawRest.harness as Record<string, unknown> : {};
   delete rawRest.harness;
@@ -6053,6 +6241,10 @@ export function saveUserConfig(
       helper: cfg.harness?.helper ?? rawHarness.helper,
     }),
     ...rawRest,
+    ...(savedProjects ? { projects: savedProjects } : rawProjectsValue !== undefined ? { projects: rawProjectsValue } : {}),
+    ...(cfg.starter ? { starter: cfg.starter } : {}),
+    ...(cfg.watch ? { watch: cfg.watch } : {}),
+    ...(cfg.guardian ? { guardian: cfg.guardian } : {}),
     ...(cfg.loops ? { loops: {
       ...rawLoops,
       owners: cfg.loops.owners ?? {}, defaultOwner: cfg.loops.defaultOwner ?? 'OP',

package/src/version/packed-revision.json

@@ -1 +1 @@
-{"commit":"214bcf402de4f243b7f348ab7674b06d9cac5465"}
+{"commit":"5212802660563d16cc7268069d1e756574077ac8"}