elanous 0.2.19 → 0.2.21

package/src/hq/fence-outcomes.ts

@@ -0,0 +1,63 @@
+// LOOPCHECK-FENCE (0.2.20): an hq-fence cron execution is one process, not a loop.
+// Each wrapped run leaves its rc in a per-role streak file; the wrapper's owner alert
+// raises a seat request only when the same role failed in consecutive runs, keyed per
+// role so the seat request journal holds at most one `loopcheck:hq-fence:<role>` per day.
+// No loops/ import here: hq.ts records through this module and loops/registry imports hq.ts.
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { Database } from 'bun:sqlite';
+import { debug } from '../debug/log.js';
+
+/** The role is the file name; `lastAt` is shown in the owner alert so TC sees when the streak last grew. */
+export interface FenceOutcome { consecutiveFailures: number; lastRc: number; lastAt: string }
+
+/** Two failures in a row: one rc=1 from a job that recovers on the next fire is not a fence fault. */
+export const FENCE_FAILURE_STREAK = 2;
+
+const safeRole = (role: string): string => role.replace(/[^\w.-]/g, '_') || 'unknown';
+
+export function fenceOutcomePath(dir: string, role: string): string {
+  return join(dir, `${safeRole(role)}.json`);
+}
+
+/** Default directory next to the host-local lease view (`<config>/hq/fence-outcomes`). */
+export function fenceOutcomeDir(localPath: string): string {
+  return join(dirname(localPath), 'fence-outcomes');
+}
+
+export function readFenceOutcome(dir: string, role: string): FenceOutcome | null {
+  try {
+    const parsed = JSON.parse(readFileSync(fenceOutcomePath(dir, role), 'utf8')) as Partial<FenceOutcome>;
+    return typeof parsed.consecutiveFailures === 'number' ? parsed as FenceOutcome : null;
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return null;
+    debug.log('hq.fence-outcome', 'read-failed', { role, error: String(error) });
+    return null;
+  }
+}
+
+/** rc 0 resets the streak; any other rc extends it. A skipped (not-holder) run is not recorded.
+ * Overlapping runs of one role serialize the read-modify-write on an SQLite lock (released even on SIGKILL). */
+export function recordFenceOutcome(dir: string, role: string, rc: number, now: Date = new Date()): FenceOutcome {
+  const path = fenceOutcomePath(dir, role);
+  mkdirSync(dirname(path), { recursive: true });
+  const lock = new Database(`${path}.lock.sqlite`);
+  try {
+    lock.exec('PRAGMA busy_timeout = 10000');
+    lock.exec('BEGIN EXCLUSIVE');
+    try {
+      const previous = readFenceOutcome(dir, role);
+      const outcome: FenceOutcome = { consecutiveFailures: rc === 0 ? 0 : (previous?.consecutiveFailures ?? 0) + 1, lastRc: rc, lastAt: now.toISOString() };
+      const tmp = `${path}.${process.pid}.tmp`;
+      writeFileSync(tmp, JSON.stringify(outcome));
+      renameSync(tmp, path);
+      lock.exec('COMMIT');
+      return outcome;
+    } catch (error) { lock.exec('ROLLBACK'); throw error; }
+  } finally { lock.close(); }
+}
+
+/** `hq-fence: fence failed (rc=1, role=seat-loop)` → `seat-loop`; other wrapper reasons have no role. */
+export function fenceAlertRole(reason: string): string | null {
+  return /\brole=([\w.-]+)/.exec(reason)?.[1] ?? null;
+}

package/src/hq/fence-wrapper.ts

@@ -3,6 +3,9 @@ import { chmodSync, constants, copyFileSync, lstatSync, mkdirSync, mkdtempSync,
 import { dirname, isAbsolute, join } from 'node:path';
 import { homedir } from 'node:os';
 import { createPatch } from 'diff';
+import { debug } from '../debug/log.js';
+import { notifyOwners } from '../loops/checker.js';
+import { FENCE_FAILURE_STREAK, fenceAlertRole, readFenceOutcome } from './fence-outcomes.js';
 
 const quote = (value: string): string => `'${value.replaceAll("'", "'\"'\"'")}'`;
 
@@ -121,3 +124,33 @@ export function installHqFenceWrapper(configDir: string, body: string, yes: bool
   } finally { rmSync(tempDir, { recursive: true, force: true }); }
   return { path, preview, ...(backup ? { backup } : {}) };
 }
+
+export interface FenceAlertDeps { root: string; outcomeDir: string; now?: Date }
+
+/**
+ * The wrapper's owner alert. Returns the number of seat requests queued (0 or 1).
+ * - `fence failed (rc, role)`: queued only when that role's streak reached FENCE_FAILURE_STREAK
+ *   (an unknown streak is not read as «first failure» — it is queued, still capped per role/day).
+ * - Any other wrapper failure (entry missing, bun missing, role missing): queued under `hq-fence:wrapper`.
+ */
+export function hqFenceAlert(reason: string, deps: FenceAlertDeps): number {
+  const now = deps.now ?? new Date();
+  const fenceFailure = /fence failed \(rc=/.test(reason);
+  const role = fenceAlertRole(reason);
+  let streak: number | null = null;
+  let lastAt: string | undefined;
+  if (fenceFailure && role) {
+    const outcome = readFenceOutcome(deps.outcomeDir, role);
+    streak = outcome?.consecutiveFailures ?? null;
+    lastAt = outcome?.lastAt;
+    if (streak !== null && streak < FENCE_FAILURE_STREAK) {
+      debug.log('hq.fence-wrapper', 'alert-suppressed', { role, streak, threshold: FENCE_FAILURE_STREAK, reason });
+      return 0;
+    }
+  }
+  const id = `hq-fence:${fenceFailure && role ? role : 'wrapper'}`;
+  const text = streak !== null ? `${reason} · ${streak} consecutive runs (last ${lastAt ?? 'unknown'})` : reason;
+  const added = notifyOwners([{ id, owner: 'TC', enabled: true, registered: true, state: 'failing', reason: text }], { root: deps.root, now });
+  debug.log('hq.fence-wrapper', added ? 'alert-queued' : 'alert-deduplicated', { id, role, streak, reason });
+  return added;
+}

package/src/hq/hq.ts

@@ -10,6 +10,7 @@ import { debug } from '../debug/log.js';
 import { DEFAULT_NEXUS_HTTP_PORT } from '../nexus/default-port.js';
 import { getElanousConfigDir } from '../elanous-config-dir.js';
 import { getUserConfig, type HqConfig, type HqFenceRole } from '../user-config.js';
+import { fenceOutcomeDir, recordFenceOutcome } from './fence-outcomes.js';
 import { promoteHq, proposeHqPromotion, writeOpSeatRequest } from './promote.js';
 import type { HqOpRequestWriter, PromoteResult } from './promote.js';
 import {
@@ -42,6 +43,8 @@ export interface HqDeps {
   /** Holder/standby views and the arbiter's check use this tailnet probe — never ssh (OP 10-04 09:04). */
   probe?: HostProbe;
   localPath?: string;
+  /** Per-role streak files of wrapped-run rc (LOOPCHECK-FENCE · default next to localPath). */
+  outcomeDir?: string;
   /** Host-local identity, deliberately outside the replicated config/state directory. */
   hostPath?: string;
   /** Seen-generation marker (default hq.seenGenerationFile · ~/.elanous-hq/seen-generation). */
@@ -391,5 +394,12 @@ export function hqFenceRun(role: HqFenceRole, command: string[], deps: HqDeps =
   const [cmd, ...args] = command;
   if (!cmd) throw new Error('hq fence: command required after --');
   const r = spawnSync(cmd, args, { stdio: 'inherit', env: { ...process.env, ELANOUS_HQ_GENERATION: String(decided.generation ?? '') } });
-  return r.status ?? 1;
+  const rc = r.status ?? 1;
+  // LOOPCHECK-FENCE: the wrapper's alert reads this streak, so a lone failure is not a seat request.
+  try {
+    const dir = deps.outcomeDir ?? fenceOutcomeDir(deps.localPath ?? join(getElanousConfigDir(), 'hq', 'local.json'));
+    const outcome = recordFenceOutcome(dir, role, rc, new Date(deps.now?.() ?? Date.now()));
+    if (rc !== 0) debug.log('hq.fence', 'run-failed', { role, rc, consecutiveFailures: outcome.consecutiveFailures });
+  } catch (error) { try { debug.log('hq.fence', 'outcome-record-failed', { role, rc, error: String(error) }); } catch { /* fail-soft */ } }
+  return rc;
 }

package/src/index.ts

@@ -7,6 +7,7 @@ import type { SelfDevRunParticipant, SelfDevRunState } from './self-dev/run-stor
 import { applyConfigDirFlagFromArgv } from './cli/config-dir-flag.js';
 import { LOGS_SINCE_OPTION, registerLogsCommands } from './cli/logs-cli.js';
 import { registerDocsCommands } from './cli/docs-cli.js';
+import { registerRetroCommands } from './cli/retro-cli.js';
 import { registerA2ACommands } from './cli/a2a-cli.js';
 import { registerPluginCommands } from './cli/plugin-cli.js';
 import { registerMakeCommand } from './cli/make-cli.js';
@@ -219,13 +220,14 @@ program.enablePositionalOptions();
 
 program.command('preview <target>')
   .description('Isolated PR/branch-head TUI + PWA preview; publish the TUI-COMFORT friction table to a PR')
-  .option('--scenario <id>', 'TUI-COMFORT scenario (default S2)', 'S2')
+  .option('--scenario <id>', 'TUI-COMFORT scenario IDs (comma-separated; default S2)', 'S2')
   .option('--flag <path>', 'Enable an existing config feature flag in main-based preview (repeatable)', (value: string, all: string[]) => [...all, value], [] as string[])
+  .option('--bundle-pr <number>', 'Merge PR head into isolated main preview (repeatable; no flags)', (value: string, all: number[]) => [...all, Number(value)], [] as number[])
   .option('--comment-pr <number>', 'PR to receive a branch/main preview report', (value: string) => Number(value))
-  .action(async (target: string, opts: { scenario: string; flag: string[]; commentPr?: number }) => {
+  .action(async (target: string, opts: { scenario: string; flag: string[]; bundlePr: number[]; commentPr?: number }) => {
     try {
       const { runPrPreview } = await import('./self-dev/pr-preview.js');
-      const result = await runPrPreview({ target, repoRoot: process.cwd(), scenario: opts.scenario, flags: opts.flag, ...(opts.commentPr === undefined ? {} : { commentPr: opts.commentPr }) });
+      const result = await runPrPreview({ target, repoRoot: process.cwd(), scenario: opts.scenario, flags: opts.flag, bundlePrs: opts.bundlePr, ...(opts.commentPr === undefined ? {} : { commentPr: opts.commentPr }) });
       console.log(`preview ${result.status} · ${result.head} · PR #${result.prNumber} · comment posted`);
       if (result.status !== 'passed') process.exitCode = 1;
     } catch (error) {
@@ -1059,10 +1061,12 @@ fenceWrapperCmd.command('install').description('래퍼 제안 또는 백업 후
 fenceWrapperCmd.command('alert <reason>').description('HQ 울타리 실패를 기존 루프 소유자 요청 원장에 적재')
   .action(async (reason: string) => {
     try {
-      const { notifyOwners } = await import('./loops/checker.js');
+      // LOOPCHECK-FENCE: keyed per role (not per pid) and only after consecutive failures of that role.
+      const { fenceOutcomeDir } = await import('./hq/fence-outcomes.js');
+      const { hqFenceAlert } = await import('./hq/fence-wrapper.js');
       const { getElanousConfigDir } = await import('./elanous-config-dir.js');
-      notifyOwners([{ id: `hq-fence:${Date.now()}:${process.pid}`, owner: 'TC', enabled: true, registered: true,
-        state: 'failing', reason }], { root: getElanousConfigDir() });
+      const root = getElanousConfigDir();
+      hqFenceAlert(reason, { root, outcomeDir: fenceOutcomeDir(_joinPath(root, 'hq', 'local.json')) });
     } catch (error) { console.error(`hq fence-wrapper alert: ${error instanceof Error ? error.message : String(error)}`); process.exitCode = 1; }
   });
 hqCmd.command('fence-audit').description('운영 crontab 의 HQ 울타리 밖 쓰기 잡 목록과 감싼 줄 제안(읽기 전용)')
@@ -1905,6 +1909,7 @@ program
   });
 
 registerAutopilotCommands(program);
+registerRetroCommands(program);
 
 // ── memory ──
 const memCmd = program.command('memory').description('Persistent memories injected into every chat turn (user / feedback / project / reference)');
@@ -4460,8 +4465,10 @@ selfCmd
     };
     try {
       const { dispatchHeavyCheck } = await import('./self-implement/gate-remote.js');
-      const { execFileSync } = await import('node:child_process');
-      const repo = execFileSync('git', ['rev-parse', '--show-toplevel'], { encoding: 'utf8' }).trim();
+      const { runGitCommand } = await import('./git-fs/runner.js');
+      const topLevel = runGitCommand(process.cwd(), ['rev-parse', '--show-toplevel'], { encoding: 'utf8' });
+      if (topLevel.status !== 0) throw new Error(`git rev-parse --show-toplevel failed: ${topLevel.stderr.trim() || `rc=${topLevel.status}`}`);
+      const repo = topLevel.stdout.trim();
       // Only a committed --base range is reproducible on another host: the default mode measures uncommitted files, --pr
       // reads files through gh on this host, and the remote checkout runs from the repository root — those stay local.
       const { realpathSync } = await import('node:fs');
@@ -4886,7 +4893,7 @@ const selfOrchestrateCmd = selfCmd
         // ☸️ 풀이 «원격 노드뿐»이면 이 기계의 이미지는 아무도 안 쓴다 — 로컬 판정·굽기를 건너뛰고 기준 판 = HEAD 로 노드 동기화만 한다.
         //   🩸 2026-09-26 실측: 원격 전용 풀인데 로컬 이미지가 없다고 로컬에서 굽다가 로컬 클러스터(elanous-h1)가 없어 런이 시작도 전에 죽었다.
         const remoteOnlyPool = poolMembers.length > 0 && poolMembers.every((m) => Boolean(m.sshHost));
-        const headCommit = remoteOnlyPool ? ((await import('node:child_process')).spawnSync('git', ['rev-parse', 'HEAD'], { encoding: 'utf8' }).stdout?.trim() || null) : null;
+        const headCommit = remoteOnlyPool ? ((await import('./git-fs/runner.js')).runGitCommand(process.cwd(), ['rev-parse', 'HEAD'], { encoding: 'utf8' }).stdout.trim() || null) : null;
         let image = remoteOnlyPool
           ? { imageCommit: headCommit, headCommit, fresh: true, reason: 'remote-only pool — 노드 쪽에서 맞춘다' }
           : podImageFreshness();
@@ -4896,7 +4903,8 @@ const selfOrchestrateCmd = selfCmd
           } else {
             if (!opts.json) ui.info(`[pod] 이미지 다시 굽기 — ${image.reason} (~1분)`);
             const { spawnSync } = await import('node:child_process');
-            const top = spawnSync('git', ['rev-parse', '--show-toplevel'], { encoding: 'utf8' }).stdout.trim() || process.cwd();
+            const { runGitCommand } = await import('./git-fs/runner.js');
+            const top = runGitCommand(process.cwd(), ['rev-parse', '--show-toplevel'], { encoding: 'utf8' }).stdout.trim() || process.cwd();
             // bun 1.4 applies the 1 MiB default maxBuffer: a docker build log past it kills the child (ENOBUFS · status null).
             const b = spawnSync('bash', [`${top}/docker/harness/build.sh`], { encoding: 'utf8', timeout: 900_000, maxBuffer: 64 * 1024 * 1024 });
             if (b.status !== 0) { ui.error(`--substrate pod: 이미지 굽기 실패 rc=${b.status}${b.error ? ` (${(b.error as NodeJS.ErrnoException).code ?? b.error.message})` : ''}: ${(b.stdout + b.stderr).slice(-400)}`); process.exit(2); }
@@ -7679,6 +7687,11 @@ configCmd
   .description('Print all config or one dotted path, e.g. llm.provider (secrets redacted by default)')
   .option('--reveal', 'Print unredacted output and record the reveal')
   .action(async (path: string | undefined, opts: { reveal?: boolean }) => {
+    const { resolveCurrentInstance } = await import('./instance/current.js');
+    const instance = resolveCurrentInstance();
+    if (instance.kind === 'test' && instance.layer === 'tree-derived') {
+      console.error('⚠️ test 우주의 config를 읽습니다 — 운영 값은 --config-dir ~/.elanous');
+    }
     const cfg = getUserConfig() as unknown as Record<string, unknown>;
     const value = path ? getConfigPath(cfg, path) : cfg;
     if (value === undefined) {
@@ -7773,6 +7786,59 @@ configCmd
     ui.info(`unset ${path}`);
   });
 
+// ── config drift / explain (CFG-STORE1 · 0.2.20 · 2026-10-08) — 읽기 전용 «유효 config ⊕ 출처» ──
+// 집(~/.elanous)과 파생 시험 우주(<트리>/.elanous-test) config 사본의 드리프트를 한 명령으로.
+// ⛔ 쓰기 0 · 못 읽음 ≠ 같음 · 비밀 값 가림. 계산 = src/cli/config-drift.ts.
+async function configDriftDiscover(o: { registry?: string | boolean; scanRoot?: string[]; treeScan?: boolean }) {
+  const { discoverUniverses } = await import('./cli/config-drift.js');
+  return discoverUniverses({
+    ...(o.registry === false ? { registryPath: null } : typeof o.registry === 'string' ? { registryPath: o.registry } : {}),
+    ...(o.treeScan === false ? { treeScanRoots: [] } : o.scanRoot?.length ? { treeScanRoots: o.scanRoot } : {}),
+  });
+}
+
+configCmd
+  .command('drift')
+  .description('읽기 전용 — 운영 config 와 파생 시험 우주(.elanous-test) config 사본이 다른 키 표 (CFG-STORE1)')
+  .option('--key <key>', '이 키(또는 그 아래)만')
+  .option('--json', 'JSON 출력')
+  .option('--limit <n>', '표시할 키 수 (0=전부 · 기본 50)', '50')
+  .option('--registry <path>', '인스턴스 레지스트리 경로 (기본 ~/.elanous/logs/instances.json)')
+  .option('--scan-root <dir...>', '명시 트리 뿌리 (기본 = config-drift.ts defaultTreeScanRoots)')
+  .option('--no-tree-scan', '트리 뿌리 훑기 끔 — 레지스트리만')
+  .option('--no-registry', '레지스트리 끔 — 명시 트리 뿌리(자리·작업 트리)만')
+  .option('--include-expected', 'sync-test 의 test-safe 변환(비밀 제거·발송 끔)과 _test 메타 키 차이도 드리프트로 센다')
+  .action(async (o: { key?: string; json?: boolean; limit: string; includeExpected?: boolean; registry?: string | boolean; scanRoot?: string[]; treeScan?: boolean }) => {
+    const { computeDrift, renderDrift } = await import('./cli/config-drift.js');
+    const report = computeDrift(await configDriftDiscover(o), { key: o.key, includeExpected: o.includeExpected });
+    debug.log('config.drift', 'computed', {
+      key: o.key ?? null, rows: report.rows.length, prodStatus: report.prodStatus, ...report.universes,
+    });
+    debug.flush();
+    console.log(o.json ? JSON.stringify(report, null, 2) : renderDrift(report, { limit: Number(o.limit) || 0 }));
+    if (report.prodStatus !== 'ok') process.exit(1);
+  });
+
+configCmd
+  .command('explain <key>')
+  .description('읽기 전용 — 운영 값 ⊕ 출처 층 ⊕ 파생 시험 우주별 값 (CFG-STORE1)')
+  .option('--json', 'JSON 출력')
+  .option('--registry <path>', '인스턴스 레지스트리 경로')
+  .option('--scan-root <dir...>', '명시 트리 뿌리')
+  .option('--no-tree-scan', '트리 뿌리 훑기 끔 — 레지스트리만')
+  .option('--no-registry', '레지스트리 끔 — 명시 트리 뿌리만')
+  .action(async (key: string, o: { json?: boolean; registry?: string | boolean; scanRoot?: string[]; treeScan?: boolean }) => {
+    const { computeExplain, renderExplain } = await import('./cli/config-drift.js');
+    const { buildUserConfig } = await import('./user-config.js');
+    const report = computeExplain(await configDriftDiscover(o), key, {
+      codeDefaults: () => buildUserConfig('/nonexistent/elanous-config-drift/config.json'),
+    });
+    debug.log('config.explain', 'computed', { key, layer: report.prod.layer, ...report.universes });
+    debug.flush();
+    console.log(o.json ? JSON.stringify(report, null, 2) : renderExplain(report));
+    if (report.prod.layer === 'prod-unreadable') process.exit(1);
+  });
+
 // ── config 격리 sync (ISO-1 · 2026-07-13) — 운영→테스트 물질화 동기화 ──
 // 격리 테스트 인스턴스는 운영 config 를 공유하지 않는다(overlay 은퇴 방향).
 configCmd

package/src/intake-plane/digest.ts

@@ -125,6 +125,19 @@ export function buildIntakeDigest(root: string, day: string, readFile: (p: strin
   };
 }
 
+function digestNoteRef(e: DigestEntry): string {
+  return e.noteName ? `[[${e.noteName}]]` : e.note?.trim() || e.url?.trim() || e.id;
+}
+
+/** 참고 줄에 이름을 다는 상한 — 많은 날에도 화면 한 장을 지킨다(M 은 그대로 센다). */
+const DIGEST_REFERENCE_NAMED = 10;
+
+function digestReferenceLine(entries: DigestEntry[]): string {
+  const named = entries.slice(0, DIGEST_REFERENCE_NAMED).map(digestNoteRef).join(', ');
+  const rest = entries.length - DIGEST_REFERENCE_NAMED;
+  return `참고 ${entries.length}편 — 노트: ${named}${rest > 0 ? ` 외 ${rest}편 · 원장 \`elanous intake items\`` : ''}`;
+}
+
 /** 노트 절 — 축별 묶음 · 노트 링크 · 한 줄 요약 · 골 후보. */
 export function renderDigestMarkdown(d: IntakeDigest): string {
   const L: string[] = [`## 📰 오늘의 흡수 요약 (${d.absorbed.length})`, ''];
@@ -165,14 +178,9 @@ export function renderDigestMarkdown(d: IntakeDigest): string {
 
 /** 텔레그램 — 흡수 렌즈가 대조한 항목만 SCQA 짧은 판으로 낸다. */
 export function renderDigestTelegram(d: IntakeDigest, _opts: { vaultRoot?: string; notePath?: string } = {}): string {
-  if (d.seat && !d.absorbed.length) return '오늘 새 소식 없음';
-  if (d.seat) return [
-    `흡수 ${d.absorbed.length}`,
-    ...d.absorbed.map((item) => `- ${item.oneLiner ?? item.noteName ?? item.id}${item.url ? ` · ${item.url}` : ''}`),
-  ].join('\n');
   // «Touching» is decided by the lens verdict alone; a missing note summary only changes how S reads (ACP must-fix).
   const touching = d.absorbed.filter((e) => e.impact);
-  const L = [`흡수 ${d.absorbed.length} → 우리에게 닿는 것 ${touching.length}`];
+  const L = [`흡수 ${d.absorbed.length}편 → 우리에게 닿는 것 ${touching.length}`];
   // 관심 뉴스는 최대 셋 — 기사마다 S(요약 첫 줄) · A(엘라누스 함의 첫 줄) · 링크를 한 덩어리로(NEWS-INTAKE).
   for (const article of (d.news ?? []).slice(0, 3)) {
     L.push(`📰 ${article.title}`);
@@ -181,9 +189,7 @@ export function renderDigestTelegram(d: IntakeDigest, _opts: { vaultRoot?: strin
     L.push(article.url);
   }
   if (d.shadowSuggestions?.length) L.push(`뉴스 칸 제안 ${d.shadowSuggestions.length}건 (그림자·판 미등록): ${d.shadowSuggestions.slice(0, 3).map((s) => `[${s.verdict}] ${s.fact}${s.url ? ` ${s.url}` : ''}`).join(' · ')}`);
-  if (!touching.length) return L.join('\n');
-  // At most three items are shown, each as its own S·C·A·link block so context and source stay paired;
-  // a later item sharing (verdict, target) says «위와 같은 행동» instead of repeating the A sentence (ACP must-fix).
+  // At most three items are shown, each as its own S·C·A·note block so context and source stay paired.
   // S must be the note's own summary: items without one still count as touching but are not shown (ACP must-fix).
   const shownItems = touching.filter((e) => e.oneLiner?.trim()).slice(0, 3);
   const actionSeen = new Set<string>();
@@ -205,10 +211,11 @@ export function renderDigestTelegram(d: IntakeDigest, _opts: { vaultRoot?: strin
       `S 무엇: ${e.oneLiner?.trim() || '노트 한 줄 요약 없음'}`,
       `C 우리에게 왜: ${impact.why}`,
       `A 그래서 무엇을 하나: ${action}`,
-      `🔗 원문 링크: ${e.url?.trim() || '링크 없음'}`,
+      `🔗 노트: ${digestNoteRef(e)}`,
     );
   }
   if (touching.length > shownItems.length) L.push('', `닿는 것 ${touching.length - shownItems.length}건 더(요약 없는 것 포함) · 원장 \`elanous intake items\``);
-  if (d.absorbed.length > touching.length) L.push('', `그 밖 ${d.absorbed.length - touching.length}건 · 참고`);
+  const reference = d.absorbed.filter((e) => !e.impact);
+  if (reference.length) L.push('', digestReferenceLine(reference));
   return L.join('\n');
 }

package/src/maturity/feature-maturity.ts

@@ -16,10 +16,11 @@ export const FEATURE_MATURITY = {
     '/today': { pwa: 'stable' },
     '/term': { pwa: 'stable' },
     '/live': { pwa: 'stable' },
+    '/live-run': { pwa: 'beta' },        // HARNESS-RUN-LIVE-GRAPH (0.2.21) — 하니스 런 하나가 도는 장면
     '/market': { pwa: 'stable' },
     '/sessions': { pwa: 'stable' },
     '/settings': { pwa: 'beta' },
-    '/editor': { pwa: 'beta' },
+    '/editor': { pwa: 'stable' },        // EDITOR-NAV-PUBLIC (0.2.21) — 데모·0순위 피처: 역할을 안 고른 기기에도 «만들기 › 편집기»
     '/intake': { pwa: 'beta' },
     '/trace': { pwa: 'beta' },
     '/inside': { pwa: 'beta' },
@@ -74,7 +75,7 @@ export const FEATURE_MATURITY = {
     loops: 'beta', buzz: 'beta', harness: 'stable', self: 'beta', factcheck: 'beta',
     provider: 'stable', 'provider:set': 'beta', 'provider:restore': 'beta',
     'provider:rotate': 'beta', 'provider:use': 'beta', 'status-bar': 'beta',
-    schedule: 'beta', guardian: 'beta', intake: 'beta', logs: 'stable', ad: 'beta', docs: 'beta',
+    schedule: 'beta', guardian: 'beta', intake: 'beta', logs: 'stable', retro: 'beta', ad: 'beta', docs: 'beta',
     decisions: 'beta', directives: 'beta', claims: 'beta', lesson: 'beta', fleet: 'beta', ops: 'stable', outputs: 'beta', publish: 'beta',
     env: 'beta', 'agent-mission': 'beta', dev: 'beta', keys: 'beta', finance: 'beta',
     config: 'stable', tasks: 'stable', brief: 'beta', notify: 'beta', away: 'beta', labels: 'beta', msg: 'beta', ask: 'stable',
@@ -160,7 +161,7 @@ export const FEATURE_MATURITY = {
     ping: 'stable', provider: 'stable', sessions: 'stable', fork: 'stable', resume: 'stable',
     decisions: 'stable', work: 'stable', cancel: 'stable',
     skills: 'beta', skill: 'beta', digest: 'beta', intake: 'beta', ad: 'beta',
-    taste: 'beta', missions: 'beta', attach: 'beta', detach: 'beta', now: 'beta', loops: 'beta', release: 'beta', away: 'beta', project: 'beta', wish: 'beta',
+    taste: 'beta', missions: 'beta', attach: 'beta', detach: 'beta', now: 'beta', loops: 'beta', runs: 'beta', release: 'beta', away: 'beta', project: 'beta', wish: 'beta',
     brain: 'tool', cc: 'tool', cdx: 'tool', gem: 'tool', local: 'tool',
     harness: 'ops',
     // Existing commands outside the CXO four-grade menu list are owner-only.

package/src/nexus/api/draft-metrics.ts

@@ -0,0 +1,114 @@
+import { join } from 'node:path';
+import { debug } from '../../debug/log.js';
+import type { DraftMetrics } from '../../self-dev/draft-sweep.js';
+
+/**
+ * DRAFT-METRIC — CEO view source. Opening the page must never trigger a GitHub read:
+ * `read()` answers from memory and at most one background collection runs at a time,
+ * no more often than the TTL (or the failure back-off). The collection itself is
+ * `elanous harness drafts metrics --json` in a child process, which reads PR evidence
+ * through the batched GraphQL path (#24918) — one call per 40 drafts, no per-draft comments call.
+ */
+export type DraftMetricsState = 'measuring' | 'ready' | 'unavailable';
+
+export interface DraftMetricsSnapshot {
+  /** measuring = no value yet and a collection is running · unavailable = no value and the last collection failed. */
+  readonly state: DraftMetricsState;
+  readonly metrics: DraftMetrics | null;
+  /** When the served value was collected (ISO). null without a value. */
+  readonly measuredAt: string | null;
+  /** A background collection is in flight. */
+  readonly refreshing: boolean;
+  /** Last collection failure; with a value it means the value is older than intended. */
+  readonly reason: string | null;
+}
+
+export interface DraftMetricsSourceOptions {
+  readonly collect?: () => Promise<DraftMetrics>;
+  readonly ttlMs?: number;
+  readonly failureRetryMs?: number;
+  readonly now?: () => number;
+}
+
+export const DRAFT_METRICS_TTL_MS = 10 * 60_000;
+export const DRAFT_METRICS_FAILURE_RETRY_MS = 2 * 60_000;
+const COLLECT_TIMEOUT_MS = 5 * 60_000;
+
+function isMetrics(value: unknown): value is DraftMetrics {
+  if (!value || typeof value !== 'object') return false;
+  const row = value as Record<string, unknown>;
+  const count = (key: string) => Number.isInteger(row[key]) && (row[key] as number) >= 0;
+  const nullableNumber = (key: string) => row[key] === null || (typeof row[key] === 'number' && Number.isFinite(row[key]));
+  return count('inventory') && count('needsOwner') && count('converted48h') && count('cohort48h')
+    && nullableNumber('oldestAgeHours') && nullableNumber('conversion48h');
+}
+
+/** Parses the CLI's single JSON line; anything else is a failed collection, never a zero. */
+export function parseDraftMetricsOutput(stdout: string): DraftMetrics {
+  const line = stdout.trim().split('\n').reverse().find((text) => text.trim().startsWith('{'));
+  if (!line) throw new Error('draft metrics: no JSON output');
+  const parsed: unknown = JSON.parse(line);
+  if (!isMetrics(parsed)) throw new Error('draft metrics: malformed output');
+  const { inventory, oldestAgeHours, needsOwner, converted48h, cohort48h, conversion48h } = parsed;
+  return { inventory, oldestAgeHours, needsOwner, converted48h, cohort48h, conversion48h };
+}
+
+async function collectViaCli(): Promise<DraftMetrics> {
+  const root = join(import.meta.dir, '../../..');
+  const proc = Bun.spawn(['bun', join(root, 'bin/elanous.mjs'), 'harness', 'drafts', 'metrics', '--json'], {
+    cwd: root, stdout: 'pipe', stderr: 'pipe',
+  });
+  const timer = setTimeout(() => proc.kill(), COLLECT_TIMEOUT_MS);
+  try {
+    const [stdout, stderr, exitCode] = await Promise.all([new Response(proc.stdout).text(), new Response(proc.stderr).text(), proc.exited]);
+    if (exitCode !== 0) throw new Error(stderr.trim().split('\n').at(-1) || `draft metrics exited ${exitCode}`);
+    return parseDraftMetricsOutput(stdout);
+  } finally { clearTimeout(timer); }
+}
+
+export interface DraftMetricsSource {
+  read(): DraftMetricsSnapshot;
+}
+
+export function createDraftMetricsSource(options: DraftMetricsSourceOptions = {}): DraftMetricsSource {
+  const collect = options.collect ?? collectViaCli;
+  const ttl = options.ttlMs ?? DRAFT_METRICS_TTL_MS;
+  const retry = options.failureRetryMs ?? DRAFT_METRICS_FAILURE_RETRY_MS;
+  const now = options.now ?? Date.now;
+  let value: { metrics: DraftMetrics; at: number } | null = null;
+  let failure: { reason: string; at: number } | null = null;
+  let inFlight: Promise<void> | null = null;
+
+  const refresh = (): void => {
+    if (inFlight) return;
+    const started = now();
+    inFlight = (async () => {
+      try {
+        const metrics = await collect();
+        value = { metrics, at: now() };
+        failure = null;
+        try { debug.log('nexus.draft-metrics', 'collected', { ms: now() - started, inventory: metrics.inventory }); } catch { /* fail-soft */ }
+      } catch (error) {
+        failure = { reason: error instanceof Error ? error.message : String(error), at: now() };
+        try { debug.log('nexus.draft-metrics', 'failed', { ms: now() - started, reason: failure.reason }); } catch { /* fail-soft */ }
+      } finally { inFlight = null; }
+    })();
+  };
+
+  return {
+    read() {
+      const clock = now();
+      const due = failure && (!value || failure.at >= value.at)
+        ? clock - failure.at >= retry
+        : !value || clock - value.at >= ttl;
+      if (due) refresh();
+      return {
+        state: value ? 'ready' : failure && !inFlight ? 'unavailable' : 'measuring',
+        metrics: value?.metrics ?? null,
+        measuredAt: value ? new Date(value.at).toISOString() : null,
+        refreshing: inFlight !== null,
+        reason: failure?.reason ?? null,
+      };
+    },
+  };
+}

package/src/nexus/api/graph-kinds.ts

@@ -58,12 +58,18 @@ export async function handleGraphsValidatePost(req: Request, opts: MetaApiOpts):
     return jsonResponse({ error: 'bad_request', reason: 'graph (harness|workflow) and yaml (string) required' }, 400);
   }
   const { graph, yaml } = body as { graph: GraphKind; yaml: string };
+  const { ok, errors, ignoredKeys } = validateGraphYaml(graph, yaml);
+  debug.log('graph.kinds', 'validate', { graph, ok, errors, ignored: ignoredKeys });
+  return jsonResponse({ ok, errors, ignoredKeys }, ok ? 200 : 422);
+}
+
+/** The one validator behind `POST /v1/graphs/validate` and the graph save path. */
+export function validateGraphYaml(graph: GraphKind, yaml: string): { ok: boolean; errors: readonly unknown[]; ignoredKeys: string[]; graphId?: string } {
   const result = graph === 'harness' ? parseGraphTemplateYaml(yaml) : parseWorkflowYaml(yaml);
-  const errors = graph === 'harness' ? (result as ReturnType<typeof parseGraphTemplateYaml>).errors : (result as ReturnType<typeof parseWorkflowYaml>).issues;
+  const errors: readonly unknown[] = graph === 'harness' ? (result as ReturnType<typeof parseGraphTemplateYaml>).errors : (result as ReturnType<typeof parseWorkflowYaml>).issues;
   let input: unknown;
   try { input = parseYaml(yaml); } catch { /* The parser already reports the YAML error. */ }
   const ignoredKeys = ignoredPaths(input, graph === 'harness' ? harnessShape : workflowShape);
-  const ok = errors.length === 0;
-  debug.log('graph.kinds', 'validate', { graph, ok, errors, ignored: ignoredKeys });
-  return jsonResponse({ ok, errors, ignoredKeys }, ok ? 200 : 422);
+  const graphId = graph === 'harness' ? (result as ReturnType<typeof parseGraphTemplateYaml>).template?.graphId : undefined;
+  return { ok: errors.length === 0, errors, ignoredKeys, ...(graphId === undefined ? {} : { graphId }) };
 }

package/src/nexus/api/graph-wizard-api.ts

@@ -0,0 +1,53 @@
+import { debug } from '../../debug/log.js';
+import { GraphWizardInputError, generateGraphFromPrompt, type GraphWizardDeps, type GraphWizardTurn } from '../../graph-wizard/generate.js';
+import { jsonResponse } from './json-response.js';
+
+const MAX_PROMPT = 4000;
+const MAX_YAML = 200_000;
+
+/**
+ * POST /v1/graphs/wizard {prompt, kind?, currentYaml?, history?}
+ * → 200 {ok:true, id, yaml, base, baseReason, issues:[], attempts, summary, labels, steps, recipes, dryRun} · 422 {ok:false, …} · 400 빈 prompt.
+ * (labels·steps·recipes·dryRun·baseReason 는 v2 추가 필드 — 기존 필드는 그대로.)
+ * currentYaml 이 빈 문자열이면 «빈 캔버스»로 보고 새 그래프를 짓는다(의도) · 내용이 있는데 id 가 없거나 형식 밖이면 400.
+ * 저장하지 않는다 — 저장은 POST /v1/graphs(새 그래프) 또는 PUT /v1/graphs/<id>/yaml(내 그래프).
+ */
+export async function handleGraphWizardPost(req: Request, deps: GraphWizardDeps = {}): Promise<Response> {
+  let body: Record<string, unknown>;
+  try {
+    const parsed: unknown = await req.json();
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error('object');
+    body = parsed as Record<string, unknown>;
+  } catch { return jsonResponse({ error: 'bad_request', reason: 'json body required' }, 400); }
+  const prompt = typeof body.prompt === 'string' ? body.prompt.trim() : '';
+  if (!prompt) return jsonResponse({ error: 'bad_request', reason: 'prompt required' }, 400);
+  if (prompt.length > MAX_PROMPT) return jsonResponse({ error: 'bad_request', reason: `prompt longer than ${MAX_PROMPT}` }, 400);
+  if (body.kind !== undefined && body.kind !== 'harness' && body.kind !== 'workflow') {
+    return jsonResponse({ error: 'bad_request', reason: 'kind must be harness or workflow' }, 400);
+  }
+  if (body.currentYaml !== undefined && (typeof body.currentYaml !== 'string' || body.currentYaml.length > MAX_YAML)) {
+    return jsonResponse({ error: 'bad_request', reason: 'currentYaml must be a string' }, 400);
+  }
+  let history: GraphWizardTurn[] | undefined;
+  if (body.history !== undefined) {
+    if (!Array.isArray(body.history) || !body.history.every((t) => t && typeof t === 'object' &&
+      ((t as GraphWizardTurn).role === 'user' || (t as GraphWizardTurn).role === 'assistant') && typeof (t as GraphWizardTurn).text === 'string')) {
+      return jsonResponse({ error: 'bad_request', reason: 'history must be [{role, text}]' }, 400);
+    }
+    history = body.history as GraphWizardTurn[];
+  }
+  try {
+    const result = await generateGraphFromPrompt({
+      prompt,
+      ...(body.kind ? { kind: body.kind as 'harness' | 'workflow' } : {}),
+      ...(typeof body.currentYaml === 'string' && body.currentYaml.trim() ? { currentYaml: body.currentYaml } : {}),
+      ...(history ? { history } : {}),
+    }, deps);
+    return jsonResponse({ ...result, base: result.base ?? null }, result.ok ? 200 : 422);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (error instanceof GraphWizardInputError) return jsonResponse({ error: 'bad_request', reason: message }, 400);
+    debug.log('graph.wizard', 'error', { message });
+    return jsonResponse({ error: 'wizard-failed', reason: message }, 502);
+  }
+}