elanous 0.2.18 → 0.2.20

package/src/testing/real-cli-spawn.ts

@@ -0,0 +1,106 @@
+/**
+ * ⏱️ GATE-SPEED ③ — 실물 엔트리 spawn 을 «비동기 ⊕ 상한 있는 동시성»으로 돌리는 테스트 전용 도구.
+ *
+ * Situation: 배선 시험(`bin/elanous.mjs` 실물 spawn)은 1회 ~3–4초(전 모듈 그래프 콜드 스타트)이고,
+ *   `spawnSync` 로 줄 세우면 파일 하나가 게이트 임계 경로(수백 초)를 잡는다.
+ * Answer: 시험이 문는 값(실물 프로세스의 stdout·stderr·종료 코드·시그널)은 그대로 두고,
+ *   «기다리는 방식»만 바꾼다 — `describe.concurrent` 안에서 이 함수를 `await` 하면 서로 독립인
+ *   spawn 들이 `REAL_CLI_SPAWN_CONCURRENCY` 개까지 겹쳐 돈다.
+ *
+ * ⛔ 반환 모양은 `spawnSync(..., { encoding: 'utf8' })` 와 같다 — 시그널로 죽으면 `status` 는 null 이고
+ *   `signal` 이 찬다. spawn 자체가 실패하면 `error` 가 찬다(타임아웃 = 0바이트 산출과 구분하려고).
+ * ⛔ spawn 의 `timeoutMs` 는 «슬롯을 얻은 뒤»부터 잰다 — 대기열에서 기다린 시간은 실패로 세지 않는다.
+ *   그래서 이 도구를 쓰는 시험의 «테스트» 타임아웃은 대기열 몫까지 넉넉히 둔다.
+ */
+import { availableParallelism } from 'node:os';
+
+export interface RealCliSpawnResult {
+  stdout: string;
+  stderr: string;
+  status: number | null;
+  signal: string | null;
+  error?: Error;
+}
+
+export interface RealCliSpawnOptions {
+  cwd?: string;
+  env?: Record<string, string | undefined>;
+  timeoutMs: number;
+}
+
+function resolveConcurrency(): number {
+  const fromEnv = Number(process.env.ELANOUS_TEST_REAL_CLI_CONCURRENCY);
+  if (Number.isInteger(fromEnv) && fromEnv > 0) return fromEnv;
+  return Math.max(2, Math.min(6, Math.floor(availableParallelism() / 3)));
+}
+
+export const REAL_CLI_SPAWN_CONCURRENCY = resolveConcurrency();
+
+let active = 0;
+const waiters: Array<() => void> = [];
+
+async function withSlot<T>(run: () => Promise<T>): Promise<T> {
+  while (active >= REAL_CLI_SPAWN_CONCURRENCY) await new Promise<void>((resolve) => waiters.push(resolve));
+  active += 1;
+  try {
+    return await run();
+  } finally {
+    active -= 1;
+    waiters.shift()?.();
+  }
+}
+
+function definedEnv(env: Record<string, string | undefined>): Record<string, string> {
+  const out: Record<string, string> = {};
+  for (const [key, value] of Object.entries(env)) if (value !== undefined) out[key] = value;
+  return out;
+}
+
+/** `spawnSync(cmd[0], cmd.slice(1), { encoding: 'utf8' })` 의 비동기 대응 — 동시성 상한 안에서 돈다. */
+export async function spawnRealCli(cmd: string[], options: RealCliSpawnOptions): Promise<RealCliSpawnResult> {
+  const r = await spawnRealCliBytes(cmd, options);
+  const decoder = new TextDecoder();
+  return {
+    stdout: decoder.decode(r.stdout),
+    stderr: decoder.decode(r.stderr),
+    status: r.exitCode,
+    signal: r.signal,
+    ...(r.error ? { error: r.error } : {}),
+  };
+}
+
+export interface RealCliSpawnBytesResult {
+  /** `Bun.spawnSync` 와 같은 이름 — 시그널로 죽으면 null. */
+  exitCode: number | null;
+  stdout: Uint8Array;
+  stderr: Uint8Array;
+  signal: string | null;
+  error?: Error;
+}
+
+/** `Bun.spawnSync({ cmd, stdout: 'pipe', stderr: 'pipe' })` 의 비동기 대응 — 바이트 그대로 돌려준다. */
+export function spawnRealCliBytes(cmd: string[], options: RealCliSpawnOptions): Promise<RealCliSpawnBytesResult> {
+  return withSlot(async () => {
+    let proc: ReturnType<typeof Bun.spawn>;
+    try {
+      proc = Bun.spawn(cmd, {
+        cwd: options.cwd,
+        env: definedEnv(options.env ?? { ...process.env }),
+        stdin: 'ignore',
+        stdout: 'pipe',
+        stderr: 'pipe',
+        timeout: options.timeoutMs,
+        killSignal: 'SIGKILL',
+      });
+    } catch (error) {
+      return { stdout: new Uint8Array(), stderr: new Uint8Array(), exitCode: null, signal: null, error: error instanceof Error ? error : new Error(String(error)) };
+    }
+    const [stdout, stderr] = await Promise.all([
+      new Response(proc.stdout as ReadableStream).arrayBuffer(),
+      new Response(proc.stderr as ReadableStream).arrayBuffer(),
+    ]);
+    await proc.exited;
+    const signal = proc.signalCode ?? null;
+    return { stdout: new Uint8Array(stdout), stderr: new Uint8Array(stderr), exitCode: signal ? null : proc.exitCode, signal };
+  });
+}

package/src/tui-client/dashboard-session.ts

@@ -195,6 +195,7 @@ export class DashboardSession {
     const pair = createInProcessTransportPair();
     const shutdownCtrl = new AbortController();
     const runTurn = bridgeCoreTurnToAcp({
+      tuiRouting: true,
       getMessages: opts.getMessages,
       getTools: opts.getTools,
       dispatchTool: opts.dispatchTool,

package/src/user-config.ts

@@ -27,6 +27,7 @@
 // crashed wizard cannot corrupt an existing file. Mode 0600 when the
 // telegram bot token is present.
 
+import { DRAFT_ON_STOP_MODES, parseDraftOnStopMode, type DraftOnStopMode } from './self-implement/blocked-draft-policy.js';
 import { isCodexQuotaPolicy } from './oauth/codex-quota-policy.js';
 import { defaultObsidianVault } from './obsidian/default-vault.js';
 import {
@@ -1146,6 +1147,12 @@ export interface SelfImplementToolConfig {
   decompositionShadow: SelfImplementDecompositionShadowConfig;
   /** Opt-in delivery of authored goal clarifications from unattended dev runs. */
   clarificationEscalation: SelfImplementClarificationEscalationConfig;
+  /** RUN-TTL: hours an open self-impl PR may go without a commit before the draft sweep asks for a rebase. Absent or invalid = 24. */
+  runTtlHours?: number;
+  /** RUN-TTL sweep step: `shadow` (default) only logs; `live` sends the resync memo / adds `elanous:needs-rebase`. Cap absent or invalid = 30. */
+  runTtl?: { mode: 'shadow' | 'live'; cap?: number };
+  /** STOP-AUTOHEAL: `shadow` (default) only records what the stop dispatcher would do (`event='autoheal'`); `live` runs the injected heal seams once per run per stop class. */
+  autoheal?: { mode: 'shadow' | 'live' };
   /** 사용자 자식 모델 선호. 없으면 해석기가 auto + fallbackChain 으로 만든다.
    *  Overload failover (OVERLOAD-FAILOVER) may move an unpinned codex child to
    *  grok. A pinned codex provider is never moved. */
@@ -1165,6 +1172,11 @@ export interface SelfImplementToolConfig {
    *  clean)로 남는다 — draft PR 은 닫고 브랜치를 지우면 되돌릴 수 있지만 병합은 아니다.
    *  `false` 로 두면 종전대로 `ux.confirm`(채널 없으면 fail-closed). */
   autoOpenPr: boolean;
+  /** DRAFT-NOT-ARCHIVE — 멈춘 런의 산출을 어디에 남기나. `'always'`(기본 · 종전) = draft PR ·
+   *  `'needs-owner-only'` = 사람 판단이 필요한 멈춤만 draft PR(⊕ 주인 자리 라벨), 나머지는 수확 가지 `salvage/run-<6hex>/…` ⊕ 런 원장. */
+  draftOnStop?: DraftOnStopMode;
+  /** SALVAGE-RETENTION — 원격 `salvage/*` 보존 규칙(14일 초과 ⊕ 열린 PR·카드 참조 0). `'shadow'`(기본) = 수만 보고 · `'live'` = 다음 조각에서 삭제. */
+  salvageRetention?: { mode: 'shadow' | 'live' };
 }
 
 export interface RunDevHarnessToolConfig {
@@ -2670,6 +2682,18 @@ function parseToolsConfig(raw: unknown): ToolsConfig {
     ...(clarificationTimeoutMs === undefined ? {} : { timeoutMs: clarificationTimeoutMs }),
   };
   const childLlm = parseChildLlmPreference(selfImplRaw.childLlm);
+  const runTtlHoursRaw = selfImplRaw.runTtlHours;
+  const runTtlHours = typeof runTtlHoursRaw === 'number' && Number.isFinite(runTtlHoursRaw) && runTtlHoursRaw > 0 ? runTtlHoursRaw : undefined;
+  const runTtlRaw = selfImplRaw.runTtl && typeof selfImplRaw.runTtl === 'object' && !Array.isArray(selfImplRaw.runTtl)
+    ? selfImplRaw.runTtl as Record<string, unknown> : undefined;
+  const runTtl = runTtlRaw ? {
+    mode: runTtlRaw.mode === 'live' ? 'live' as const : 'shadow' as const,
+    ...(typeof runTtlRaw.cap === 'number' && Number.isSafeInteger(runTtlRaw.cap) && runTtlRaw.cap >= 0 ? { cap: runTtlRaw.cap } : {}),
+  } : undefined;
+  const autohealRaw = selfImplRaw.autoheal && typeof selfImplRaw.autoheal === 'object' && !Array.isArray(selfImplRaw.autoheal)
+    ? selfImplRaw.autoheal as Record<string, unknown> : undefined;
+  // ⛔ 모르는 값은 좁은 쪽(shadow) — 오타가 live 를 켜면 안 된다.
+  const autoheal = autohealRaw ? { mode: autohealRaw.mode === 'live' ? 'live' as const : 'shadow' as const } : undefined;
   // ⭐ 관측(리뷰 should-fix) — 오타/비-boolean 은 기본값(ON)으로 수렴하는데, 그게 조용하면
   //   "껐다고 믿었는데 자동 개설되는" 운영 사고가 된다. 값이 **있는데 boolean 이 아닐 때만**
   //   경고한다(부재는 정상). 로거 대신 stderr — 이 파일의 기존 경고와 동형(부트 시점·의존 0).
@@ -2686,13 +2710,26 @@ function parseToolsConfig(raw: unknown): ToolsConfig {
   const autoOpenPr = autoOpenPrRaw === false
     ? false
     : TOOLS_DEFAULTS.selfImplement.autoOpenPr;
+  const draftOnStopParsed = parseDraftOnStopMode((selfImplRaw as { draftOnStop?: unknown }).draftOnStop);
+  if (draftOnStopParsed.invalid) {
+    try {
+      process.stderr.write(`[user-config] tools.selfImplement.draftOnStop 값이 알 수 없습니다(${JSON.stringify((selfImplRaw as { draftOnStop?: unknown }).draftOnStop)}) — 'always' 로 진행합니다. 허용값: ${DRAFT_ON_STOP_MODES.join(' | ')}\n`);
+    } catch { /* swallow */ }
+  }
+  const draftOnStop = draftOnStopParsed.mode;
+  const salvageRetentionRaw = (selfImplRaw as { salvageRetention?: unknown }).salvageRetention;
+  const salvageRetentionModeRaw = salvageRetentionRaw && typeof salvageRetentionRaw === 'object' ? (salvageRetentionRaw as { mode?: unknown }).mode : undefined;
+  if (salvageRetentionModeRaw !== undefined && salvageRetentionModeRaw !== 'shadow' && salvageRetentionModeRaw !== 'live') {
+    try { process.stderr.write(`[user-config] tools.selfImplement.salvageRetention.mode 값이 알 수 없습니다(${JSON.stringify(salvageRetentionModeRaw)}) — 'shadow' 로 진행합니다. 허용값: shadow | live\n`); } catch { /* swallow */ }
+  }
+  const salvageRetention = { mode: salvageRetentionModeRaw === 'live' ? 'live' as const : 'shadow' as const };
   return {
     deferred: { mode },
     agentSpawn: { hopCap },
     runDevHarness,
     selfOrchestrate,
     nativeStructure,
-    selfImplement: { worktreeRoot, childInstanceMode, prApprovalDelivery, observeOnly, goalRecordInDoc, goalAuthorPersistentGrounding, fabricDecompose, fabricDecomposeAutoPathThreshold, autoOpenPr, autoStop, autoAssist, screenStallTermination, reworkBudget, decompositionShadow, clarificationEscalation, ...(childLlm ? { childLlm } : {}) },
+    selfImplement: { worktreeRoot, childInstanceMode, prApprovalDelivery, observeOnly, goalRecordInDoc, goalAuthorPersistentGrounding, fabricDecompose, fabricDecomposeAutoPathThreshold, autoOpenPr, draftOnStop, salvageRetention, autoStop, autoAssist, screenStallTermination, reworkBudget, decompositionShadow, clarificationEscalation, ...(childLlm ? { childLlm } : {}), ...(runTtlHours !== undefined ? { runTtlHours } : {}), ...(runTtl ? { runTtl } : {}), ...(autoheal ? { autoheal } : {}) },
   };
 }
 
@@ -3491,6 +3528,8 @@ export interface OrchestratorLoopConfig {
   mode: 'off' | 'shadow' | 'live';
   seatTrees: Partial<Record<OrchestratorSeat, string[]>>;
   seatCaps: Record<OrchestratorSeat, number>;
+  /** Max new delegations per tick; absent means no limit. */
+  maxDelegatePerTick?: number;
   /** Per-seat release gate; absent seats retain the spawn-budget default. */
   releaseGate?: Partial<Record<OrchestratorSeat, number>>;
   trafficMode: 'shadow' | 'live';
@@ -3502,6 +3541,9 @@ export interface OrchestratorLoopConfig {
   handToTaskAgent?: 'off' | 'shadow' | 'live';
   /** Demo: hand only this cell id (others keep the seat path). Absent = every delegatable cell. */
   handToTaskAgentCell?: string;
+  /** COORD-HA — the tick CLI probes LLM ⊕ task board for the degradation ladder. Absent = shadow (probe and log only) ·
+   *  live = the tick acts on it (L1 rules only · L2 no new assignment) · off = no probe. */
+  degradationSignal?: 'off' | 'shadow' | 'live';
 }
 
 export const ORCHESTRATOR_DEFAULTS: OrchestratorLoopConfig = {
@@ -3527,12 +3569,16 @@ export function parseOrchestratorLoopConfig(raw: unknown): OrchestratorLoopConfi
     if (typeof gate === 'number' && Number.isSafeInteger(gate) && gate >= 0) releaseGate[seat] = gate;
   }
   const mode = value.mode === 'off' || value.mode === 'live' ? value.mode : 'shadow';
-  return { mode, seatTrees, seatCaps, ...(Object.keys(releaseGate).length ? { releaseGate } : {}),
+  const maxDelegatePerTick = value.maxDelegatePerTick;
+  return { mode, seatTrees, seatCaps,
+    ...(typeof maxDelegatePerTick === 'number' && Number.isSafeInteger(maxDelegatePerTick) && maxDelegatePerTick >= 0 ? { maxDelegatePerTick } : {}),
+    ...(Object.keys(releaseGate).length ? { releaseGate } : {}),
     trafficMode: value.trafficMode === 'live' ? 'live' : 'shadow',
     idleRequest: value.idleRequest === 'off' || value.idleRequest === 'live' ? value.idleRequest : 'shadow',
     finishGate: value.finishGate === 'off' || value.finishGate === 'on' ? value.finishGate : 'shadow',
     ...(value.handToTaskAgent === 'shadow' || value.handToTaskAgent === 'live' ? { handToTaskAgent: value.handToTaskAgent } : {}),
-    ...(typeof value.handToTaskAgentCell === 'string' && value.handToTaskAgentCell.trim() ? { handToTaskAgentCell: value.handToTaskAgentCell.trim() } : {}) };
+    ...(typeof value.handToTaskAgentCell === 'string' && value.handToTaskAgentCell.trim() ? { handToTaskAgentCell: value.handToTaskAgentCell.trim() } : {}),
+    ...(value.degradationSignal === 'off' || value.degradationSignal === 'shadow' || value.degradationSignal === 'live' ? { degradationSignal: value.degradationSignal } : {}) };
 }
 
 export type StewardLoopMode = 'off' | 'shadow' | 'live' | 'rescue';
@@ -3555,6 +3601,8 @@ export interface SeatLoopConfig {
   stall?: { parents?: Record<string, string>; redMinutes?: number; blockedMinutes?: number };
   /** Unlanded attempts of the same seat cell before the loop stops relaunching and asks a person. Absent or invalid means 3. */
   repeatStop?: number;
+  /** OP-LOOP-DECIDE: OP seat filters open decision cards (repeat-stop → b · harness scope → b unless money/security/secret/public paths). shadow records only; live decides/routes. Absent = shadow. */
+  opDecide?: { mode: 'shadow' | 'live' };
 }
 
 export type EventSeat = 'OP' | 'TC' | 'MK' | 'UX';
@@ -3602,6 +3650,8 @@ export interface HqConfig {
   tailscaleBin?: string;
   /** Highest lease generation this host ever saw (default ~/.elanous-hq/seen-generation · 600). */
   seenGenerationFile?: string;
+  /** Board writes only reject stale generations when explicitly enforced (default shadow). */
+  boardFencing?: 'shadow' | 'enforce';
   /** Per-probe timeout in seconds (default 5). */
   probeTimeoutSeconds?: number;
 }
@@ -3636,7 +3686,64 @@ export function parseGateRemoteConfig(raw: unknown): GateRemoteConfig | undefine
   return Object.keys(out).length ? out : undefined;
 }
 
+export interface ProjectConfig {
+  /** `axes` is absent when the configured axes are invalid; `error` then carries the config error text. */
+  rubric?: { axes?: import('./release-loop/rubric.js').RubricAxis[]; error?: string };
+}
+
+/** Validate one project's `rubric.axes` — throws the config error text (key duplicate · non-numeric weight). */
+export function parseProjectRubricAxes(id: string, axes: unknown): Array<{ key: string; weight: number }> {
+  if (!Array.isArray(axes)) throw new Error(`[user-config] projects.${id}.rubric.axes 는 배열이어야 합니다`);
+  const seen = new Set<string>();
+  const parsed: Array<{ key: string; weight: number }> = [];
+  for (const [index, axis] of axes.entries()) {
+    const field = `projects.${id}.rubric.axes[${index}]`;
+    if (!axis || typeof axis !== 'object' || Array.isArray(axis)) throw new Error(`[user-config] ${field} 는 {key,weight} 객체여야 합니다`);
+    const { key, weight } = axis as Record<string, unknown>;
+    if (typeof key !== 'string' || !key.trim()) throw new Error(`[user-config] ${field}.key 는 빈 문자열일 수 없습니다`);
+    if (seen.has(key)) throw new Error(`[user-config] projects.${id}.rubric.axes 키 중복: ${key}`);
+    if (typeof weight !== 'number' || !Number.isFinite(weight)) throw new Error(`[user-config] ${field}.weight 는 유한한 숫자여야 합니다: ${String(weight)}`);
+    seen.add(key);
+    parsed.push({ key, weight });
+  }
+  return parsed;
+}
+
+/**
+ * Project rubric axes (P3b CORE-GENERIC). Loading never throws — one bad project entry must not
+ * stop every command — so an invalid entry keeps its error text and `resolveRubricAxes` raises it.
+ */
+function parseProjectsConfig(raw: unknown): Record<string, ProjectConfig> | undefined {
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return undefined;
+  const projects: Record<string, ProjectConfig> = {};
+  for (const [id, entry] of Object.entries(raw)) {
+    if (id === '__proto__' || !entry || typeof entry !== 'object' || Array.isArray(entry)) continue;
+    const rubric = (entry as Record<string, unknown>).rubric;
+    if (!rubric || typeof rubric !== 'object' || Array.isArray(rubric)) continue;
+    const axes = (rubric as Record<string, unknown>).axes;
+    if (axes === undefined) continue;
+    try {
+      projects[id] = { rubric: { axes: parseProjectRubricAxes(id, axes) } };
+    } catch (err) {
+      const error = err instanceof Error ? err.message : String(err);
+      console.warn(`${error} — 이 프로젝트의 루브릭 축 해석은 오류로 멈춘다`);
+      projects[id] = { rubric: { error } };
+    }
+  }
+  return Object.keys(projects).length ? projects : undefined;
+}
+
 export interface UserConfig {
+  projects?: Record<string, ProjectConfig>;
+  /** Default personal topic watch; absent = enabled when user sources exist. */
+  watch?: { enabled?: boolean };
+  starter?: { topics?: string[] };
+  /** GUARD-ONE-a: omitted means shadow. `live` is parsed for the later cutover, but `elanous guardian tick`
+   *  refuses it until a human-confirmed operational change (GUARD-ONE-a ships shadow only). */
+  guardian?: { mode?: 'shadow' | 'live' };
+  /** TA-JUDGE-LIVE-SAFE: task-agent judge moves executed for real. Only `review` · `propose-green` are honoured
+   *  (`src/task-agent/live-moves.ts` drops anything else with a warning). Absent = env ELANOUS_TASK_AGENT_LIVE_MOVES, else none (pure shadow). */
+  taskAgent?: { liveMoves?: string[] };
   events?: EventsConfig;
   /** GATE-REMOTE — see GateRemoteConfig. Absent = defaults (auto on · node-b · load 20 · cap 2). */
   gateRemote?: GateRemoteConfig;
@@ -3661,7 +3768,7 @@ export interface UserConfig {
   loops?: { owners?: Record<string, EventSeat>; defaultOwner?: EventSeat; orchestrator?: OrchestratorLoopConfig; steward?: { mode?: StewardLoopMode; linearTeam?: string; roles?: Record<string, { maxConcurrent?: number }>; budget?: number; tracks?: Record<string, string>; alertAfterFailures?: number; launch?: 'off' | 'shadow' | 'live'; maxParallel?: number; podPool?: string }; seat?: SeatLoopConfig; persona?: PersonaLoopConfig };
   /** 🔐 Pod 의 Grok API 키 과금은 명시 opt-in 만. 생략·잘못된 값은 false.
    *  budgetGate 와 같은 `harness` 객체다 — 중복 선언이면 뒤 타입이 앞을 지운다. */
-  harness?: { edgeRail?: { canaryOkRuns?: number; failureMultiplier?: number; minSamples?: number }; /** Goal authoring grade; absent or invalid config resolves to full. */ authorGrade?: 'full' | 'lite'; revertGuard?: { depth: number }; pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; exposeGate?: 'warn' | 'strict'; difficultyPlacement?: boolean; defaultRepo?: string; /** Optional GitHub repository name (owner/repo), distinct from the local defaultRepo path. */ repo?: string; substrate?: 'local' | 'pod'; podPool?: string; worktreeAddTimeoutSec?: number; queue?: { seatCap?: Partial<Record<'OP' | 'TC' | 'MK' | 'UX', number>>; /** Direct `harness say|ask` goes through the seat queue first (ONEDOOR-2). Absent = env ELANOUS_HARNESS_QUEUE_DIRECT_SAY, else off. */ directSay?: boolean; /** SEAT-CAP-STALE: a run whose last ledger progress is older than this stops holding its seat. Absent = env ELANOUS_HARNESS_QUEUE_STALE_RUN_MINUTES, else 30. */ staleRunMinutes?: number; /** Seat-less runs count in one bucket with this cap instead of every seat. Absent = env ELANOUS_HARNESS_QUEUE_UNKNOWN_SEAT_CAP, else 2. */ unknownSeatCap?: number }; /** `harness say` 문장을 Pod 안에서 저작부터 돌릴지. 생략·false = 끔(호스트가 저작). */ authorOnPod?: boolean; /** Stopped-PR repair goals: shadow records only (default); live enqueues them. */ helper?: { repair?: 'shadow' | 'live'; /** Live launches allowed per UTC day. Absent or invalid means 3. */ repairPerDay?: number };
+  harness?: { edgeRail?: { canaryOkRuns?: number; failureMultiplier?: number; minSamples?: number }; /** Goal authoring grade; absent or invalid config resolves to full. */ authorGrade?: 'full' | 'lite'; revertGuard?: { depth: number }; pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; exposeGate?: 'warn' | 'strict'; difficultyPlacement?: boolean; defaultRepo?: string; /** Optional GitHub repository name (owner/repo), distinct from the local defaultRepo path. */ repo?: string; substrate?: 'local' | 'pod'; podPool?: string; worktreeAddTimeoutSec?: number; queue?: { seatCap?: Partial<Record<'OP' | 'TC' | 'MK' | 'UX', number>>; /** Direct `harness say|ask` goes through the seat queue first (ONEDOOR-2). Absent = env ELANOUS_HARNESS_QUEUE_DIRECT_SAY, else off. */ directSay?: boolean; /** SEAT-CAP-STALE: a run whose last ledger progress is older than this stops holding its seat. Absent = env ELANOUS_HARNESS_QUEUE_STALE_RUN_MINUTES, else 30. */ staleRunMinutes?: number; /** Seat-less runs count in one bucket with this cap instead of every seat. Absent = env ELANOUS_HARNESS_QUEUE_UNKNOWN_SEAT_CAP, else 2. */ unknownSeatCap?: number; /** QUEUE-BURST: most launches one scheduled tick may make (30 s apart, each within seat cap and Pod pool headroom). Absent or invalid = 5; 1 = one launch per tick. */ burstMax?: number }; /** `harness say` 문장을 Pod 안에서 저작부터 돌릴지. 생략·false = 끔(호스트가 저작). */ authorOnPod?: boolean; /** SIBLING-RESYNC-ON-MERGE: most open sibling PR file inventories fetched per merge. Absent or invalid = 40. */ siblingResync?: { maxFetch?: number }; /** Stopped-PR repair goals: shadow records only (default); live enqueues them. */ helper?: { repair?: 'shadow' | 'live'; /** Live launches allowed per UTC day. Absent or invalid means 3. */ repairPerDay?: number };
   /** Nested elanous launches. Only depth 0 may set `allow`. Absent or any other value refuses. A depth >= 1 `--nested-elanous allow` is ignored. */
   nestedElanous?: 'allow' | 'refuse';
   /** Maximum nested elanous depth; safe positive integer, default 2. */
@@ -3914,6 +4021,36 @@ function parseAutoReviewConfig(raw: unknown): AutoReviewConfig | undefined {
   return Object.keys(out).length > 0 ? out : undefined;
 }
 
+/** Keeps `taskAgent.liveMoves` as raw strings — the allow-list (and the unknown-entry warning) lives in the task agent. */
+function parseTaskAgentConfig(raw: unknown): UserConfig['taskAgent'] {
+  if (raw === undefined) return undefined;
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+    warnUserConfigDrop('taskAgent', '섹션이 객체가 아니다 — 버림');
+    return undefined;
+  }
+  const liveMoves = (raw as Record<string, unknown>).liveMoves;
+  if (liveMoves === undefined) return undefined;
+  // 설정이 «있으면» 환경 변수로 내려가지 않는다 — 배열이 아니면 빈 목록(fail-closed), 문자열 밖 항목은 글자로 바꿔 넘겨
+  // 실행부가 «모르는 항목»으로 경고하고 버리게 한다(유효한 항목은 산다).
+  if (!Array.isArray(liveMoves)) {
+    warnUserConfigDrop('taskAgent.liveMoves', '배열이 아니다 — 빈 목록(실행 0)');
+    return { liveMoves: [] };
+  }
+  return { liveMoves: liveMoves.map((entry) => typeof entry === 'string' ? entry : JSON.stringify(entry) ?? String(entry)) };
+}
+
+function parseGuardianConfig(raw: unknown): UserConfig['guardian'] {
+  if (raw === undefined) return undefined;
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+    warnUserConfigDrop('guardian', '섹션이 객체가 아니다 — 버림');
+    return undefined;
+  }
+  const mode = (raw as Record<string, unknown>).mode;
+  if (mode === 'shadow' || mode === 'live') return { mode };
+  if (mode !== undefined) warnUserConfigDrop('guardian.mode', 'shadow 또는 live 가 아니다 — 버림');
+  return undefined;
+}
+
 /** Parse optional ops fields independently; invalid settings cannot silently select a cron cwd. */
 function parseOpsConfig(raw: unknown): UserConfig['ops'] | undefined {
   if (raw === undefined) return undefined;
@@ -4588,6 +4725,12 @@ function parseSeatLoopsConfig(input: unknown): SeatLoopConfig {
     })(),
     ...(typeof values.repeatStop === 'number' && Number.isSafeInteger(values.repeatStop) && values.repeatStop > 0
       ? { repeatStop: values.repeatStop } : {}),
+    ...(() => {
+      const raw = values.opDecide;
+      if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return {};
+      const mode = (raw as Record<string, unknown>).mode;
+      return mode === 'shadow' || mode === 'live' ? { opDecide: { mode } } : {};
+    })(),
   };
 }
 
@@ -4635,6 +4778,7 @@ export function parseHqConfig(raw: unknown): HqConfig | undefined {
   }
   if (typeof r.ttlSeconds === 'number' && Number.isFinite(r.ttlSeconds) && r.ttlSeconds > 0) out.ttlSeconds = r.ttlSeconds;
   if (typeof r.probeTimeoutSeconds === 'number' && Number.isFinite(r.probeTimeoutSeconds) && r.probeTimeoutSeconds > 0) out.probeTimeoutSeconds = r.probeTimeoutSeconds;
+  if (r.boardFencing === 'shadow' || r.boardFencing === 'enforce') out.boardFencing = r.boardFencing;
   if (r.autoPromote && typeof r.autoPromote === 'object' && !Array.isArray(r.autoPromote)) {
     const auto = r.autoPromote as Record<string, unknown>;
     const setting: NonNullable<HqConfig['autoPromote']> = {};
@@ -4771,7 +4915,15 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
   const nexus = rawObj.nexus && typeof rawObj.nexus === 'object' && !Array.isArray(rawObj.nexus)
     ? rawObj.nexus as Record<string, unknown> : {};
   const gateRemoteConfig = parseGateRemoteConfig(rawObj.gateRemote);
+  const projects = parseProjectsConfig(rawObj.projects);
   return {
+    ...(projects ? { projects } : {}),
+    ...(rawObj.starter && typeof rawObj.starter === 'object' && !Array.isArray(rawObj.starter)
+      && Array.isArray((rawObj.starter as Record<string, unknown>).topics)
+      ? { starter: { topics: ((rawObj.starter as { topics: unknown[] }).topics).filter((topic): topic is string => typeof topic === 'string' && !!topic.trim()) } } : {}),
+    ...(rawObj.watch && typeof rawObj.watch === 'object' && !Array.isArray(rawObj.watch)
+      && typeof (rawObj.watch as Record<string, unknown>).enabled === 'boolean'
+      ? { watch: { enabled: (rawObj.watch as { enabled: boolean }).enabled } } : {}),
     nexus: { demoMode: nexus.demoMode === true },
     ...(Object.keys(seatBudgets).length ? { org: { budget: seatBudgets } } : {}),
     pod: {
@@ -4818,8 +4970,9 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       ...(() => {
         const queue = harness.queue && typeof harness.queue === 'object' && !Array.isArray(harness.queue)
           ? harness.queue as Record<string, unknown> : {};
-        const stale = queue.staleRunMinutes, unknownCap = queue.unknownSeatCap;
+        const stale = queue.staleRunMinutes, unknownCap = queue.unknownSeatCap, burstMax = queue.burstMax;
         return {
+          ...(typeof burstMax === 'number' && Number.isSafeInteger(burstMax) && burstMax > 0 ? { burstMax } : {}),
           ...(typeof stale === 'number' && Number.isSafeInteger(stale) && stale > 0 ? { staleRunMinutes: stale } : {}),
           ...(typeof unknownCap === 'number' && Number.isSafeInteger(unknownCap) && unknownCap >= 0 ? { unknownSeatCap: unknownCap } : {}),
         };
@@ -4845,6 +4998,12 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       })(),
       ...(harness.authorGrade === 'lite' || harness.authorGrade === 'full' ? { authorGrade: harness.authorGrade } : {}),
       ...(harness.authorOnPod === true ? { authorOnPod: true } : {}),
+      ...(() => {
+        const sibling = harness.siblingResync && typeof harness.siblingResync === 'object' && !Array.isArray(harness.siblingResync)
+          ? harness.siblingResync as Record<string, unknown> : undefined;
+        const maxFetch = sibling?.maxFetch;
+        return typeof maxFetch === 'number' && Number.isSafeInteger(maxFetch) && maxFetch >= 0 ? { siblingResync: { maxFetch } } : {};
+      })(),
       ...(harness.nestedElanous === 'allow' || harness.nestedElanous === 'refuse'
         ? { nestedElanous: harness.nestedElanous } : {}),
       nestedElanousMaxDepth: typeof harness.nestedElanousMaxDepth === 'number'
@@ -5507,6 +5666,8 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
     loops: { ...(stewardLoops ?? {}), ...parseLoopOwners(rawObj.loops), orchestrator: parseOrchestratorLoopConfig((rawObj.loops as { orchestrator?: unknown } | undefined)?.orchestrator), seat: parseSeatLoopsConfig(rawObj.loops),
       persona: { enabled: (rawObj.loops as { persona?: { enabled?: unknown } } | undefined)?.persona?.enabled === true } },
     events: parseEventsConfig(rawObj.events),
+    guardian: parseGuardianConfig(rawObj.guardian),
+    taskAgent: parseTaskAgentConfig(rawObj.taskAgent),
     // M1-1: sparse — undefined when the user hasn't set anything, so
     // resolvers fall through to zero-config defaults.
     ...spreadIfDefined('modelTier', parseModelTierConfig(rawObj.modelTier)),
@@ -6045,6 +6206,21 @@ export function saveUserConfig(
     },
   };
   const rawRest = { ...(cfg.raw ?? {}) };
+  // projects: raw entries are kept verbatim — an invalid entry loaded from disk is preserved, not blocked (its error
+  // surfaces in resolveRubricAxes) — and typed axes handed to save are validated (invalid ones refuse the save).
+  const rawProjectsValue = rawRest.projects;
+  const rawProjects = rawRest.projects && typeof rawRest.projects === 'object' && !Array.isArray(rawRest.projects)
+    ? rawRest.projects as Record<string, unknown> : undefined;
+  const savedProjects: Record<string, unknown> | undefined = rawProjects || cfg.projects ? { ...(rawProjects ?? {}) } : undefined;
+  for (const [id, project] of Object.entries(cfg.projects ?? {})) {
+    if (project?.rubric?.axes === undefined) continue;
+    const axes = parseProjectRubricAxes(id, project.rubric.axes);
+    const rawProject = rawProjects?.[id] && typeof rawProjects[id] === 'object' && !Array.isArray(rawProjects[id])
+      ? rawProjects[id] as Record<string, unknown> : {};
+    const rawRubric = rawProject.rubric && typeof rawProject.rubric === 'object' && !Array.isArray(rawProject.rubric)
+      ? rawProject.rubric as Record<string, unknown> : {};
+    savedProjects![id] = { ...rawProject, rubric: { ...rawRubric, axes } };
+  }
   // Strip typed sections from raw so we don't double-write stale copies.
   delete rawRest.skillRouter;
   delete rawRest.llm;
@@ -6079,6 +6255,10 @@ export function saveUserConfig(
   delete rawRest.smartDefaults;
   delete rawRest.grounding;
   delete rawRest.diagnostics;
+  delete rawRest.projects;
+  delete rawRest.starter;
+  delete rawRest.watch;
+  delete rawRest.guardian;
   const rawHarness = rawRest.harness && typeof rawRest.harness === 'object' && !Array.isArray(rawRest.harness)
     ? rawRest.harness as Record<string, unknown> : {};
   delete rawRest.harness;
@@ -6113,6 +6293,10 @@ export function saveUserConfig(
       helper: cfg.harness?.helper ?? rawHarness.helper,
     }),
     ...rawRest,
+    ...(savedProjects ? { projects: savedProjects } : rawProjectsValue !== undefined ? { projects: rawProjectsValue } : {}),
+    ...(cfg.starter ? { starter: cfg.starter } : {}),
+    ...(cfg.watch ? { watch: cfg.watch } : {}),
+    ...(cfg.guardian ? { guardian: cfg.guardian } : {}),
     ...(cfg.loops ? { loops: {
       ...rawLoops,
       owners: cfg.loops.owners ?? {}, defaultOwner: cfg.loops.defaultOwner ?? 'OP',
@@ -6127,6 +6311,7 @@ export function saveUserConfig(
         ...(cfg.loops.seat.reportPr === undefined ? {} : { reportPr: cfg.loops.seat.reportPr }),
         ...(cfg.loops.seat.stall ? { stall: cfg.loops.seat.stall } : {}),
         ...(cfg.loops.seat.repeatStop === undefined ? {} : { repeatStop: cfg.loops.seat.repeatStop }),
+        ...(cfg.loops.seat.opDecide ? { opDecide: cfg.loops.seat.opDecide } : {}),
       } } : {}),
     } } : {}),
     ...(cfg.autopilot ? { autopilot: {

package/src/version/packed-revision.json

@@ -1 +1 @@
-{"commit":"aaa857963df78dc714502746d99e9ba8bddbae54"}
+{"commit":"047da54ef704187c124a2969c6222d61fe01beb0"}

package/apps/pwa/out/_next/static/chunks/224-798346143007ff65.js

@@ -1 +0,0 @@
-"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[224],{1369:(e,r,t)=>{t.d(r,{QL:()=>p,WelcomeHome:()=>w});var n=t(55539),l=t(46124),a=t(3558),s=t.n(a),i=t(58603),o=t(6535),u=t(44373),c=t(97479),d=t(92161);let f=["/term","/chat","/intake","/live","/editor","/market","/setup"];var m=t(65650),h=t(57147),g=t(48087);let x=[...g.Ue.map(e=>({href:function(e){if(!(g.Ue.some(r=>r.href===e)||g.OE.some(r=>r.href===e)))throw Error("Unknown sidebar route: ".concat(e));return e}(e.href),label:e.label,navigable:!0})),...g.OE.map(e=>({href:e.href,label:e.href,navigable:!1,reason:e.reason}))],b=[...x.filter(e=>e.navigable),{href:"/setup",label:"Setup",navigable:!0}],v=[{href:"/morning",label:"아침 브리핑",navigable:!0},{href:"/settings/devices",label:"기기 목록",navigable:!0},{href:"/workflows/chat-ui",label:"워크플로 채팅",navigable:!0}];function p(e){let{ariaLabel:r,items:t=x}=e;return(0,n.jsx)("section",{"aria-label":r,className:"grid grid-cols-1 gap-3 sm:grid-cols-2 lg:grid-cols-3",children:t.map(e=>{var r;return(0,n.jsx)("article",{"data-testid":(r=e.href,"route-guidance-".concat("/"===r?"root":r.slice(1).replaceAll("/","-"))),"data-route-kind":e.navigable?"destination":"reference",className:(0,u.cn)("rounded-2xl border border-border/60 bg-card/60 p-5 shadow-sm",!e.navigable&&"bg-muted/40"),children:e.navigable?(0,n.jsxs)(s(),{href:e.href,className:"font-semibold underline-offset-4 hover:underline focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",children:[e.label," ",(0,n.jsx)("code",{className:"text-xs text-muted-foreground",children:e.href})]}):(0,n.jsxs)("div",{className:"flex flex-col gap-2",children:[(0,n.jsxs)("span",{className:"font-semibold",children:["참고 주소 ",(0,n.jsx)("code",{className:"text-xs text-muted-foreground",children:e.href})]}),(0,n.jsx)("p",{className:"text-sm leading-relaxed text-muted-foreground",children:e.reason})]})},e.href)})})}function w(){let{role:e}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return null==(0,l.useContext)(o.AppRouterContext)?(0,n.jsx)(N,{role:e}):(0,n.jsx)(j,{role:e})}function j(e){let{role:r}=e,t=(0,i.useRouter)(),a=(0,i.usePathname)(),s=(0,m._r)(),o=null==a||s.isError||s.isPending||s.isLoading?null:(0,h.P)(s.data,a);return(0,l.useEffect)(()=>{"/setup"===o&&t.replace("/setup")},[o,t]),(0,n.jsx)(N,{role:r})}function N(e){var r;let{role:t}=e,l=(0,c.In)(),a=null!=t?t:l,{core:s,more:i}=(r=b.filter(e=>(0,d.EX)(a,e.href)),{core:f.flatMap(e=>r.filter(r=>r.href===e)),more:r.filter(e=>!f.some(r=>r===e.href))});return(0,n.jsx)("main",{"data-testid":"welcome-home",className:"min-h-screen bg-gradient-to-b from-background via-background to-muted/40 px-6 py-12 sm:px-10",children:(0,n.jsxs)("div",{className:"mx-auto flex w-full max-w-5xl flex-col gap-10",children:[(0,n.jsxs)("header",{className:"flex flex-col gap-3",children:[(0,n.jsx)("p",{className:"text-xs font-semibold uppercase tracking-[0.18em] text-muted-foreground",children:"elanous PWA"}),(0,n.jsx)("h1",{className:"text-3xl font-bold leading-tight sm:text-4xl",children:"웰컴 — 어디부터 시작할까요?"}),(0,n.jsx)("p",{className:"max-w-2xl text-sm text-muted-foreground sm:text-base",children:"처음이라면 아래 핵심 화면에서 시작하세요. 다른 화면은 필요할 때 펼쳐 볼 수 있습니다."})]}),(0,n.jsx)(p,{ariaLabel:"핵심 화면",items:s}),i.length>0&&(0,n.jsxs)("details",{className:"rounded-2xl border border-border/60 bg-card/60 p-5",children:[(0,n.jsxs)("summary",{className:"cursor-pointer font-semibold focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",children:["모든 화면 (",i.length,")"]}),(0,n.jsx)("div",{className:"mt-4",children:(0,n.jsx)(p,{ariaLabel:"나머지 화면",items:i})})]}),v.some(e=>(0,d.EX)(a,e.href))&&(0,n.jsxs)("details",{className:"rounded-2xl border border-border/60 bg-card/60 p-5",children:[(0,n.jsx)("summary",{className:"cursor-pointer font-semibold focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",children:"고치는 중인 화면"}),(0,n.jsx)("div",{className:"mt-4",children:(0,n.jsx)(p,{ariaLabel:"고치는 중인 화면",items:v.filter(e=>(0,d.EX)(a,e.href))})})]})]})})}},3704:(e,r,t)=>{t.d(r,{A:()=>u});var n=t(46124);let l=function(){for(var e=arguments.length,r=Array(e),t=0;t<e;t++)r[t]=arguments[t];return r.filter((e,r,t)=>!!e&&""!==e.trim()&&t.indexOf(e)===r).join(" ").trim()},a=e=>{let r=e.replace(/^([A-Z])|[\s-_]+(\w)/g,(e,r,t)=>t?t.toUpperCase():r.toLowerCase());return r.charAt(0).toUpperCase()+r.slice(1)};var s={xmlns:"http://www.w3.org/2000/svg",width:24,height:24,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round"};let i=(0,n.createContext)({}),o=(0,n.forwardRef)((e,r)=>{var t,a,o;let{color:u,size:c,strokeWidth:d,absoluteStrokeWidth:f,className:m="",children:h,iconNode:g,...x}=e,{size:b=24,strokeWidth:v=2,absoluteStrokeWidth:p=!1,color:w="currentColor",className:j=""}=null!=(t=(0,n.useContext)(i))?t:{},N=(null!=f?f:p)?24*Number(null!=d?d:v)/Number(null!=c?c:b):null!=d?d:v;return(0,n.createElement)("svg",{ref:r,...s,width:null!=(a=null!=c?c:b)?a:s.width,height:null!=(o=null!=c?c:b)?o:s.height,stroke:null!=u?u:w,strokeWidth:N,className:l("lucide",j,m),...!h&&!(e=>{for(let r in e)if(r.startsWith("aria-")||"role"===r||"title"===r)return!0;return!1})(x)&&{"aria-hidden":"true"},...x},[...g.map(e=>{let[r,t]=e;return(0,n.createElement)(r,t)}),...Array.isArray(h)?h:[h]])}),u=(e,r)=>{let t=(0,n.forwardRef)((t,s)=>{let{className:i,...u}=t;return(0,n.createElement)(o,{ref:s,iconNode:r,className:l("lucide-".concat(a(e).replace(/([a-z0-9])([A-Z])/g,"$1-$2").toLowerCase()),"lucide-".concat(e),i),...u})});return t.displayName=a(e),t}},44373:(e,r,t)=>{t.d(r,{cn:()=>a});var n=t(20852),l=t(30984);function a(){for(var e=arguments.length,r=Array(e),t=0;t<e;t++)r[t]=arguments[t];return(0,l.QP)((0,n.$)(r))}},57147:(e,r,t)=>{t.d(r,{C:()=>a,P:()=>l});let n="셋업 모드 — 먼저 LLM 을 정하세요";function l(e,r){return(null==e?void 0:e.setupMode)!==!0||"/"!==r?null:"/setup"}function a(e,r){if((null==e?void 0:e.setupMode)!==!0||"/setup"===r||r.startsWith("/setup/"))return null;let t=e.setupMissing;return t&&t.length>0?"".concat(n," (").concat(t.join(", "),")"):n}},58603:(e,r,t)=>{var n=t(99027);t.o(n,"useParams")&&t.d(r,{useParams:function(){return n.useParams}}),t.o(n,"usePathname")&&t.d(r,{usePathname:function(){return n.usePathname}}),t.o(n,"useRouter")&&t.d(r,{useRouter:function(){return n.useRouter}}),t.o(n,"useSearchParams")&&t.d(r,{useSearchParams:function(){return n.useSearchParams}})},65650:(e,r,t)=>{t.d(r,{_r:()=>a});var n=t(46124),l=t(94306);function a(){let e=(0,l.Qj)(),[r,t]=(0,n.useState)({data:void 0,isError:!1,isPending:!0});return(0,n.useEffect)(()=>{if(!e)return void t({data:void 0,isError:!1,isPending:!0});let r=!0,n=()=>{e.getHealth().then(e=>{r&&t({data:e,isError:!1,isPending:!1})}).catch(()=>{r&&t(e=>({...e,isError:!0,isPending:!1}))})};n();let l=setInterval(n,6e4);return()=>{r=!1,clearInterval(l)}},[e]),{...r,isLoading:r.isPending&&null!==e}}t(65354)},97479:(e,r,t)=>{t.d(r,{GC:()=>l,In:()=>u,OG:()=>i});var n=t(46124);let l="elanous.pwa.role",a="elanous:pwa-role";function s(){try{let e=window.localStorage.getItem(l);if("owner"===e||"contributor"===e||"general"===e)return e}catch(e){}return"general"}function i(e){try{window.localStorage.setItem(l,e)}catch(e){}"function"==typeof window.dispatchEvent&&window.dispatchEvent(new Event(a))}function o(e){if("function"!=typeof window.addEventListener)return()=>{};window.addEventListener(a,e);let r=r=>{(r.key===l||null===r.key)&&e()};return window.addEventListener("storage",r),()=>{window.removeEventListener(a,e),window.removeEventListener("storage",r)}}function u(){return(0,n.useSyncExternalStore)(o,s,()=>"general")}}}]);