elanous 0.2.23 → 0.2.25

package/src/task-orchestrator/surfaces/self-implement.ts

@@ -19,6 +19,7 @@
  * Cf. PLAN-parallel-self-dev-orchestrator-2026-07-21.
  */
 import { lstatSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import type { ReviewRework } from '../../self-dev/run-types.js';
 import { oldDoorInternalEnv } from '../../self-dev/old-door.js';
 import { selfDevRunsDir } from '../../self-dev/run-store.js';
 import { debug } from '../../debug/log.js';
@@ -89,6 +90,7 @@ export interface SelfImplementDisposition {
   reviewVerdict?: 'pass' | 'warn' | 'fail';
   /** 마지막 리뷰의 must-fix 수(`review.mustFix.length`). 같은 조건. */
   reviewMustFixCount?: number;
+  rework?: ReviewRework;
   mustFix?: string[];
 }
 
@@ -463,6 +465,16 @@ export function parseSelfImplementJson(stdout: string): SelfImplementDisposition
       const o = JSON.parse(line) as Record<string, unknown>;
       if (typeof o.stage !== 'string' && typeof o.ok !== 'boolean') continue;
       const failureClassification = failureClassificationFromJson(o);
+      const rawRework = o.rework && typeof o.rework === 'object' && !Array.isArray(o.rework)
+        ? o.rework as Record<string, unknown> : undefined;
+      const rework = rawRework
+        && typeof rawRework.trend === 'string'
+        && ['unmeasured', 'improving', 'stable', 'worsening', 'oscillating'].includes(rawRework.trend)
+        && typeof rawRework.signature === 'string'
+        && typeof rawRework.rounds === 'number' && Number.isSafeInteger(rawRework.rounds) && rawRework.rounds >= 1
+        // A measured trend needs two reviews, a direction change three — a contradictory pair is not an observation.
+        && (rawRework.trend === 'unmeasured' ? rawRework.rounds === 1 : rawRework.rounds >= (rawRework.trend === 'oscillating' ? 3 : 2))
+        ? { trend: rawRework.trend as ReviewRework['trend'], signature: rawRework.signature, rounds: rawRework.rounds } : undefined;
       const mapped: SelfImplementDisposition = {
         ...(typeof o.stage === 'string' ? { stage: o.stage } : {}),
         ...(typeof o.ok === 'boolean' ? { ok: o.ok } : {}),
@@ -499,7 +511,13 @@ export function parseSelfImplementJson(stdout: string): SelfImplementDisposition
           ? { providerErrors: o.providerErrors as SelfImplementDisposition['providerErrors'] } : {}),
         ...(typeof o.runId === 'string' && o.runId.trim() ? { runId: o.runId, childRunId: o.runId } : {}),
         ...reviewGateFields(o),
-        ...(Array.isArray(o.mustFix) && o.mustFix.every((item) => typeof item === 'string') ? { mustFix: o.mustFix as string[] } : {}),
+        ...(rework ? { rework } : {}),
+        ...(Array.isArray(o.mustFix) && o.mustFix.every((item) => typeof item === 'string') ? { mustFix: o.mustFix as string[] }
+          : o.review && typeof o.review === 'object' && !Array.isArray(o.review)
+            && (o.review as { reviewed?: unknown }).reviewed === true
+            && Array.isArray((o.review as { mustFix?: unknown }).mustFix)
+            && ((o.review as { mustFix: unknown[] }).mustFix).every((item) => typeof item === 'string')
+            ? { mustFix: (o.review as { mustFix: string[] }).mustFix } : {}),
       };
       reportUnmappedDispositionFields(o, mapped);
       return mapped;

package/src/typecheck-ratchet.ts

@@ -12,6 +12,7 @@ export const TYPECHECK_GATE_CONFIG = 'tsconfig.gate.json';
  * ⚠️ 호출자가 이미 `--max-old-space-size` 를 줬으면 «그것을» 존중한다(덮지 않는다).
  */
 export const TSC_HEAP_MB = 20480;
+export const TSC_OOM_RETRY_HEAP_MB = 32768;
 export function tscEnv(base: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
   const cur = base.NODE_OPTIONS ?? '';
   if (/--max-old-space-size[= ]/.test(cur)) return base;

package/src/user-config.ts

@@ -180,8 +180,11 @@ export interface LLMConfig {
   baseUrl?: string;
   /** OpenRouter 설정 한 곳(두 골이 같은 키를 쓴다):
    *  - `providerPreferences` — 상류 라우팅 선호; 도구 가능 기본값(require_parameters·allow_fallbacks)을 얕게 덮는다(OR-LLM-ROUTING-1).
-   *  - `fallbackModel` — 유료 OpenRouter 폴백 모델; 체인에 openrouter 를 명시하고 모델·키를 모두 줄 때만 선택된다(OR-FALLBACK-TIER-1). */
-  openrouter?: { providerPreferences?: Record<string, unknown>; fallbackModel?: string };
+   *  - `fallbackModel` — 유료 OpenRouter 폴백 모델; 체인에 openrouter 를 명시하고 모델·키를 모두 줄 때만 선택된다(OR-FALLBACK-TIER-1).
+   *  - `upstreamPins` — 모델별 상류 고정 `{ "<wire id>": ["<상류 slug>", …] }`(OR-DEEPSEEK-TUNE · 지금은 deepseek/* 만 읽는다).
+   *    기본값 = `src/llm/openrouter-upstream-pins.config.ts` · 모델별로 덮는다 · `[]` = 그 모델 고정 안 함.
+   *    `providerPreferences` 에 order·only·allow_fallbacks 가 있으면 그쪽이 이긴다. */
+  openrouter?: { providerPreferences?: Record<string, unknown>; fallbackModel?: string; upstreamPins?: Record<string, string[]> };
   /** Ordered rotation of providers the user can cycle through with
    *  `elanous provider:rotate` / `/provider next`. Each entry is a
    *  full (provider, model, apiKey, baseUrl) tuple that gets
@@ -197,6 +200,9 @@ export interface LLMConfig {
    *    이 축은 «같은 provider 안에서 어느 계정의 토큰을 쓸지»를 바꾼다.
    *  리셋 크레딧 자동 소비는 별도 일일 상한으로 제한한다. */
   codexAccountRotation?: boolean;
+  /** REVIEW-ACP-POD — Pod merge-ready PR 을 병합 전에 호스트 Claude ACP(구독)로 리뷰한다. `true` 일 때만 켜진다(기본 꺼짐 = 종전).
+   *  env `ELANOUS_POD_HOST_ACP_REVIEW` 가 이 값보다 앞선다. ACP 를 못 쓰면 종전 길(Pod 리뷰 → 재게이트). */
+  podHostAcpReview?: boolean;
   /** ⭐⭐ codex 계정 «알림» — 회전·리셋크레딧 소비를 텔레그램 등 outbound 로 보낼지.
    *  ⛔ **기본 ON** — `false` 일 때만 조용해진다.
    *  ⛔⭐ 위 `codexAccountRotation` 과 «다른 축»이다(대표 지시 2026-08-17 *"회전을 끄라는 게
@@ -225,8 +231,16 @@ export interface LLMConfig {
    *  `within-quota`(한도 안에서만 · 전부 차면 멈춤) · `fallback`(한도 안 ⊕ 폴백 체인 · 기본) · `credits`(크레딧까지).
    *  회전·Pod 배분·폴백·매시 한도 알림이 «이 한 값»을 같이 읽는다. 없으면 옛 `codexCreditsAllowed` 를 읽는다. */
   codexQuotaPolicy?: 'within-quota' | 'fallback' | 'credits';
+  /** SUBSCRIPTION-EXHAUST-REROUTE (0.2.24) — codex 선불 크레딧 «예비분». 잔액이 이 값 이하로 «알려지면» 크레딧을 쓰지 않고
+   *  회전이 `no-candidate` 를 내 폴백(우선 openrouter)으로 넘긴다. 잔액을 모르면 종전. 없으면 2000(`DEFAULT_CODEX_CREDIT_RESERVE`). */
+  codexCreditReserve?: number;
   /** Grok weekly launch usage ceiling (percent); defaults to 80. */
   grokWeeklyCapPct?: number;
+  /** 대표 2026-10-11 ZAI-CODING-PLAN-PROVIDER — `glm` 직결(Z.ai 코딩 엔드포인트 · `ZAI_API_KEY` 가 있을 때만 선다).
+   *  `overage` = 플랜 창이 차면 무엇을 하나(codex `codexQuotaPolicy` 와 같은 축 · `src/llm/zai-coding-plan.ts` 가 canonical):
+   *  `stop`(멈춤 · 기본) · `balance`(계정 잔액 «extra usage» 로 계속 · 잔액/월 상한이면 OpenRouter) · `openrouter`(바로 OpenRouter).
+   *  `maxConcurrent` = 프로세스당 동시 호출 상한(기본 3). */
+  zaiCodingPlan?: { overage?: 'stop' | 'balance' | 'openrouter'; maxConcurrent?: number };
   /** ⭐⭐ codex 가 «소진된 뒤» 갈 곳을 «순서»로 정한다 (대표 2026-08-13).
    *
    *  값: `['codex-rotate', 'grok']` 등 — 아는 칸은 `FALLBACK_STEPS`, 모르는 이름은 버린다(관측에 남는다).
@@ -1173,6 +1187,9 @@ export interface SelfImplementToolConfig {
    *  Overload failover (OVERLOAD-FAILOVER) may move an unpinned codex child to
    *  grok. A pinned codex provider is never moved. */
   childLlm?: ChildLlmPreferenceConfig;
+  /** SUBSCRIPTION-EXHAUST-REROUTE (0.2.24) — `--child-llm-*` 없이 뜬 Pod 구현 자식의 기본 모델.
+   *  `{ provider, model? }` · `'off'`(종전 codex 기본). 없으면 `openrouter/z-ai/glm-5.3`. 원값 — `resolvePodChildDefault` 가 검사한다. */
+  podChildDefault?: unknown;
   /** ⭐ PR-open 사전 승인 (2026-07-26 · 대표 결정 "오토 선호 · 기본 ON").
    *
    *  self-build 가 gate 를 통과하면 **PR 을 자동 개설**한다(기본 `true`).
@@ -1497,8 +1514,10 @@ export interface ChatCompactConfig {
 
 /** ER1 — 액티브 덤퍼(오류 자동 보고). 기본 켬(첫 실행 안내 한 번 · 대표 10-01) · 신원(email/telegramUser)은 따로 «예»일 때만. */
 export interface ErrorReportsConfig {
-  /** false = never send. Absent = on (the first-run notice says how to turn it off). */
+  /** false = never send. Absent retains the feature but sending waits for the first-run notice. */
   enabled?: boolean;
+  /** Persisted only after the first-run notice was shown to a person. */
+  noticeShown?: boolean;
   /** true = also send email / telegramUser below with each report. Default false. */
   identity?: boolean;
   email?: string;
@@ -1511,6 +1530,7 @@ export function parseErrorReportsConfig(raw: unknown): ErrorReportsConfig | unde
   const out: ErrorReportsConfig = {};
   if (r.enabled === false || r.enabled === 'false') out.enabled = false;
   else if (r.enabled === true || r.enabled === 'true') out.enabled = true;
+  if (r.noticeShown === true) out.noticeShown = true;
   if (r.identity === true || r.identity === 'true') out.identity = true;
   if (typeof r.email === 'string' && r.email.trim()) out.email = r.email.trim();
   if (typeof r.telegramUser === 'string' && r.telegramUser.trim()) out.telegramUser = r.telegramUser.trim();
@@ -2749,7 +2769,7 @@ function parseToolsConfig(raw: unknown): ToolsConfig {
     runDevHarness,
     selfOrchestrate,
     nativeStructure,
-    selfImplement: { worktreeRoot, childInstanceMode, prApprovalDelivery, observeOnly, goalRecordInDoc, goalAuthorPersistentGrounding, fabricDecompose, fabricDecomposeAutoPathThreshold, autoOpenPr, draftOnStop, salvageRetention, autoStop, autoAssist, screenStallTermination, reworkBudget, decompositionShadow, clarificationEscalation, ...(childLlm ? { childLlm } : {}), ...(runTtlHours !== undefined ? { runTtlHours } : {}), ...(draftSweepCloseCap !== undefined ? { draftSweepCloseCap } : {}), ...(runTtl ? { runTtl } : {}), ...(autoheal ? { autoheal } : {}) },
+    selfImplement: { worktreeRoot, childInstanceMode, prApprovalDelivery, observeOnly, goalRecordInDoc, goalAuthorPersistentGrounding, fabricDecompose, fabricDecomposeAutoPathThreshold, autoOpenPr, draftOnStop, salvageRetention, autoStop, autoAssist, screenStallTermination, reworkBudget, decompositionShadow, clarificationEscalation, ...(childLlm ? { childLlm } : {}), ...(selfImplRaw.podChildDefault !== undefined ? { podChildDefault: selfImplRaw.podChildDefault } : {}), ...(runTtlHours !== undefined ? { runTtlHours } : {}), ...(draftSweepCloseCap !== undefined ? { draftSweepCloseCap } : {}), ...(runTtl ? { runTtl } : {}), ...(autoheal ? { autoheal } : {}) },
   };
 }
 
@@ -3809,10 +3829,10 @@ export interface UserConfig {
   starter?: { topics?: string[] };
   /** GUARD-ONE-a: omitted means shadow. `live` is parsed for the later cutover, but `elanous guardian tick`
    *  refuses it until a human-confirmed operational change (GUARD-ONE-a ships shadow only). */
-  guardian?: { mode?: 'shadow' | 'live' };
+  guardian?: { mode?: 'shadow' | 'live'; /** Orphan CLI GC on the guardian tick: off = no ps collection, shadow (default) = evidence only, on = evidence then SIGTERM. */ orphanGc?: 'off' | 'shadow' | 'on' };
   /** TA-JUDGE-LIVE-SAFE: task-agent judge moves executed for real. Only `review` · `propose-green` are honoured
    *  (`src/task-agent/live-moves.ts` drops anything else with a warning). Absent = env ELANOUS_TASK_AGENT_LIVE_MOVES, else none (pure shadow). */
-  taskAgent?: { liveMoves?: string[]; parentHost?: { host?: string; cwd?: string; elanous?: string; configDir?: string; podPool?: string; approvalCapacity?: number } | Array<{ host?: string; cwd?: string; elanous?: string; configDir?: string; podPool?: string; approvalCapacity?: number }> };
+  taskAgent?: { liveMoves?: string[]; /** TA-REJUDGE-PERIODIC — steward tick runs `tasks rejudge --all` every N minutes (absent/0 = off). */ rejudgeEveryMinutes?: number; /** 1-minute load average above which that tick is skipped (default 60). */ rejudgeMaxLoad?: number; parentHost?: { host?: string; cwd?: string; elanous?: string; configDir?: string; podPool?: string; approvalCapacity?: number } | Array<{ host?: string; cwd?: string; elanous?: string; configDir?: string; podPool?: string; approvalCapacity?: number }> };
   events?: EventsConfig;
   /** GATE-REMOTE — see GateRemoteConfig. Absent = defaults (auto on · node-b · load 20 · cap 2). */
   gateRemote?: GateRemoteConfig;
@@ -3837,7 +3857,7 @@ export interface UserConfig {
   loops?: { owners?: Record<string, EventSeat>; defaultOwner?: EventSeat; orchestrator?: OrchestratorLoopConfig; steward?: { mode?: StewardLoopMode; linearTeam?: string; roles?: Record<string, { maxConcurrent?: number }>; budget?: number; tracks?: Record<string, string>; alertAfterFailures?: number; launch?: 'off' | 'shadow' | 'live'; maxParallel?: number; podPool?: string }; seat?: SeatLoopConfig; persona?: PersonaLoopConfig };
   /** 🔐 Pod 의 Grok API 키 과금은 명시 opt-in 만. 생략·잘못된 값은 false.
    *  budgetGate 와 같은 `harness` 객체다 — 중복 선언이면 뒤 타입이 앞을 지운다. */
-  harness?: { edgeRail?: { canaryOkRuns?: number; failureMultiplier?: number; minSamples?: number }; /** Goal authoring grade; absent or invalid config resolves to full. */ authorGrade?: 'full' | 'lite'; revertGuard?: { depth: number }; pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; exposeGate?: 'warn' | 'strict'; difficultyPlacement?: boolean; defaultRepo?: string; /** Optional GitHub repository name (owner/repo), distinct from the local defaultRepo path. */ repo?: string; substrate?: 'local' | 'pod'; podPool?: string; /** IMAGE-ONE-SOURCE: Pod 발사가 당길 기준 이미지 커밋(hex 12~40 · 레지스트리 태그 = 앞 12자리). 없으면 종전대로 HEAD 비교·굽기. */ imageCommit?: string; worktreeAddTimeoutSec?: number; queue?: { seatCap?: Partial<Record<'OP' | 'TC' | 'MK' | 'UX', number>>; /** Direct `harness say|ask` goes through the seat queue first (ONEDOOR-2). Absent = env ELANOUS_HARNESS_QUEUE_DIRECT_SAY, else off. */ directSay?: boolean; /** SEAT-CAP-STALE: a run whose last ledger progress is older than this stops holding its seat. Absent = env ELANOUS_HARNESS_QUEUE_STALE_RUN_MINUTES, else 30. */ staleRunMinutes?: number; /** Seat-less runs count in one bucket with this cap instead of every seat. Absent = env ELANOUS_HARNESS_QUEUE_UNKNOWN_SEAT_CAP, else 2. */ unknownSeatCap?: number; /** QUEUE-BURST: most launches one scheduled tick may make (30 s apart, each within seat cap and Pod pool headroom). Absent or invalid = 5; 1 = one launch per tick. */ burstMax?: number }; /** `harness say` 문장을 Pod 안에서 저작부터 돌릴지. 생략·false = 끔(호스트가 저작). */ authorOnPod?: boolean; /** SIBLING-RESYNC-ON-MERGE: most open sibling PR file inventories fetched per merge. Absent or invalid = 40. */ siblingResync?: { maxFetch?: number }; /** Stopped-PR repair goals: shadow records only (default); live enqueues them. */ helper?: { repair?: 'shadow' | 'live'; /** Live launches allowed per UTC day. Absent or invalid means 3. */ repairPerDay?: number };
+  harness?: { edgeRail?: { canaryOkRuns?: number; failureMultiplier?: number; minSamples?: number }; /** Goal authoring grade; absent or invalid config resolves to full. */ authorGrade?: 'full' | 'lite'; revertGuard?: { depth: number }; pod?: { grokApiKeyOptIn: boolean }; budgetGate?: HarnessBudgetGateConfig; exposeGate?: 'warn' | 'strict'; difficultyPlacement?: boolean; defaultRepo?: string; /** Optional GitHub repository name (owner/repo), distinct from the local defaultRepo path. */ repo?: string; /** `auto` = SUBSTRATE-ROUTE: routeAutoSubstrate 가 pod/local 을 고른다(신호가 없으면 pod). */ substrate?: 'local' | 'pod' | 'auto'; podPool?: string; /** IMAGE-ONE-SOURCE: Pod 발사가 당길 기준 이미지 커밋(hex 12~40 · 레지스트리 태그 = 앞 12자리). 없으면 종전대로 HEAD 비교·굽기. */ imageCommit?: string; worktreeAddTimeoutSec?: number; queue?: { seatCap?: Partial<Record<'OP' | 'TC' | 'MK' | 'UX', number>>; /** Direct `harness say|ask` goes through the seat queue first (ONEDOOR-2). Absent = env ELANOUS_HARNESS_QUEUE_DIRECT_SAY, else off. */ directSay?: boolean; /** SEAT-CAP-STALE: a run whose last ledger progress is older than this stops holding its seat. Absent = env ELANOUS_HARNESS_QUEUE_STALE_RUN_MINUTES, else 30. */ staleRunMinutes?: number; /** Seat-less runs count in one bucket with this cap instead of every seat. Absent = env ELANOUS_HARNESS_QUEUE_UNKNOWN_SEAT_CAP, else 2. */ unknownSeatCap?: number; /** QUEUE-BURST: most launches one scheduled tick may make (30 s apart, each within seat cap and Pod pool headroom). Absent or invalid = 5; 1 = one launch per tick. */ burstMax?: number }; /** `harness say` 문장을 Pod 안에서 저작부터 돌릴지. 생략·false = 끔(호스트가 저작). */ authorOnPod?: boolean; /** SIBLING-RESYNC-ON-MERGE: most open sibling PR file inventories fetched per merge. Absent or invalid = 40. */ siblingResync?: { maxFetch?: number }; /** Stopped-PR repair goals: shadow records only (default); live enqueues them. */ helper?: { repair?: 'shadow' | 'live'; /** Live launches allowed per UTC day. Absent or invalid means 3. */ repairPerDay?: number };
   /** Nested elanous launches. Only depth 0 may set `allow`. Absent or any other value refuses. A depth >= 1 `--nested-elanous allow` is ignored. */
   nestedElanous?: 'allow' | 'refuse';
   /** Maximum nested elanous depth; safe positive integer, default 2. */
@@ -4123,15 +4143,24 @@ function parseTaskAgentConfig(raw: unknown): UserConfig['taskAgent'] {
     return undefined;
   }
   const parentHost = parseTaskAgentParentHost((raw as Record<string, unknown>).parentHost);
+  // TA-REJUDGE-PERIODIC — 음이 아닌 유한수만 산다(0 = 끔). 그 밖은 경고하고 버린다(= 끔 · 기본 부하 상한).
+  const rejudge: { rejudgeEveryMinutes?: number; rejudgeMaxLoad?: number } = {};
+  for (const key of ['rejudgeEveryMinutes', 'rejudgeMaxLoad'] as const) {
+    const value = (raw as Record<string, unknown>)[key];
+    if (value === undefined) continue;
+    if (typeof value === 'number' && Number.isFinite(value) && value >= 0) rejudge[key] = value;
+    else warnUserConfigDrop(`taskAgent.${key}`, `음이 아닌 수가 아니다(${JSON.stringify(value)}) — 버림`);
+  }
+  const extras = { ...rejudge, ...(parentHost ? { parentHost } : {}) };
   const liveMoves = (raw as Record<string, unknown>).liveMoves;
-  if (liveMoves === undefined) return parentHost ? { parentHost } : undefined;
+  if (liveMoves === undefined) return Object.keys(extras).length ? extras : undefined;
   // 설정이 «있으면» 환경 변수로 내려가지 않는다 — 배열이 아니면 빈 목록(fail-closed), 문자열 밖 항목은 글자로 바꿔 넘겨
   // 실행부가 «모르는 항목»으로 경고하고 버리게 한다(유효한 항목은 산다).
   if (!Array.isArray(liveMoves)) {
     warnUserConfigDrop('taskAgent.liveMoves', '배열이 아니다 — 빈 목록(실행 0)');
-    return { liveMoves: [], ...(parentHost ? { parentHost } : {}) };
+    return { liveMoves: [], ...extras };
   }
-  return { liveMoves: liveMoves.map((entry) => typeof entry === 'string' ? entry : JSON.stringify(entry) ?? String(entry)), ...(parentHost ? { parentHost } : {}) };
+  return { liveMoves: liveMoves.map((entry) => typeof entry === 'string' ? entry : JSON.stringify(entry) ?? String(entry)), ...extras };
 }
 
 function parseGuardianConfig(raw: unknown): UserConfig['guardian'] {
@@ -4140,10 +4169,13 @@ function parseGuardianConfig(raw: unknown): UserConfig['guardian'] {
     warnUserConfigDrop('guardian', '섹션이 객체가 아니다 — 버림');
     return undefined;
   }
-  const mode = (raw as Record<string, unknown>).mode;
-  if (mode === 'shadow' || mode === 'live') return { mode };
-  if (mode !== undefined) warnUserConfigDrop('guardian.mode', 'shadow 또는 live 가 아니다 — 버림');
-  return undefined;
+  const { mode, orphanGc } = raw as Record<string, unknown>;
+  const out: NonNullable<UserConfig['guardian']> = {};
+  if (mode === 'shadow' || mode === 'live') out.mode = mode;
+  else if (mode !== undefined) warnUserConfigDrop('guardian.mode', 'shadow 또는 live 가 아니다 — 버림');
+  if (orphanGc === 'off' || orphanGc === 'shadow' || orphanGc === 'on') out.orphanGc = orphanGc;
+  else if (orphanGc !== undefined) warnUserConfigDrop('guardian.orphanGc', `off|shadow|on 이 아니다(${JSON.stringify(orphanGc)}) — 버리고 shadow 로 진행`);
+  return Object.keys(out).length > 0 ? out : undefined;
 }
 
 /** Parse optional ops fields independently; invalid settings cannot silently select a cron cwd. */
@@ -5095,7 +5127,7 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
           ...(typeof unknownCap === 'number' && Number.isSafeInteger(unknownCap) && unknownCap >= 0 ? { unknownSeatCap: unknownCap } : {}),
         };
       })() },
-      ...(harness.substrate === 'local' || harness.substrate === 'pod' ? { substrate: harness.substrate } : {}),
+      ...(harness.substrate === 'local' || harness.substrate === 'pod' || harness.substrate === 'auto' ? { substrate: harness.substrate } : {}),
       ...(typeof harness.podPool === 'string' && harness.podPool.trim() ? { podPool: harness.podPool.trim() } : {}),
       ...(() => {
         if (harness.imageCommit === undefined) return {};
@@ -5198,10 +5230,14 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
         if (!router || typeof router !== 'object' || Array.isArray(router)) return undefined;
         const preferences = (router as Record<string, unknown>).providerPreferences;
         const fallbackModel = (router as Record<string, unknown>).fallbackModel;
+        const upstreamPins = (router as Record<string, unknown>).upstreamPins;
         const out = {
           ...(preferences && typeof preferences === 'object' && !Array.isArray(preferences)
             ? { providerPreferences: { ...preferences } as Record<string, unknown> } : {}),
           ...(typeof fallbackModel === 'string' ? { fallbackModel } : {}),
+          ...(upstreamPins && typeof upstreamPins === 'object' && !Array.isArray(upstreamPins)
+            ? { upstreamPins: Object.fromEntries(Object.entries(upstreamPins as Record<string, unknown>)
+              .filter((e): e is [string, string[]] => Array.isArray(e[1]) && e[1].every((x) => typeof x === 'string'))) } : {}),
         };
         return Object.keys(out).length > 0 ? out : undefined;
       })(),
@@ -5216,6 +5252,7 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       goalLoop: parseGoalLoop(llm.goalLoop),
       memoryJudge: parseMemoryJudge(llm.memoryJudge),
       codexInspectExempt: llm.codexInspectExempt === true ? true : undefined,
+      podHostAcpReview: llm.podHostAcpReview === true ? true : undefined,
       // ⛔⭐ 「false 만 끈다」 — 미설정·true 는 undefined 로 두어 기본 ON 을 유지한다(대표 결정 ②).
       //   ⚠️ 이 줄이 «없으면» 타입만 있고 파서가 안 읽어 ***노브가 no-op 이 된다***(실측으로 잡았다).
       codexAccountRotation: llm.codexAccountRotation === false ? false : undefined,
@@ -5235,8 +5272,22 @@ export function buildUserConfig(path: string = defaultPath()): UserConfig {
       // ⛔ 같은 모양(문자열 배열)이라 아래 fallbackChain 과 «같은 자»를 쓴다.
       codexCreditsAllowed: llm.codexCreditsAllowed === true ? true : undefined,
       codexQuotaPolicy: isCodexQuotaPolicy(llm.codexQuotaPolicy) ? llm.codexQuotaPolicy : undefined,
+      codexCreditReserve: typeof llm.codexCreditReserve === 'number' && Number.isFinite(llm.codexCreditReserve) && llm.codexCreditReserve >= 0
+        ? llm.codexCreditReserve : undefined,
       grokWeeklyCapPct: typeof llm.grokWeeklyCapPct === 'number' && Number.isFinite(llm.grokWeeklyCapPct)
         && llm.grokWeeklyCapPct >= 0 && llm.grokWeeklyCapPct <= 100 ? llm.grokWeeklyCapPct : LLM_DEFAULTS.grokWeeklyCapPct,
+      // ⛔ 타입·파서·재노출 «셋»이 다 있어야 노브가 산다(형제 주석의 실측) — 재노출은 saveUserConfig 의 llm 블록.
+      zaiCodingPlan: (() => {
+        const z = llm.zaiCodingPlan;
+        if (!z || typeof z !== 'object' || Array.isArray(z)) return undefined;
+        const overage = (z as Record<string, unknown>).overage;
+        const maxConcurrent = (z as Record<string, unknown>).maxConcurrent;
+        const out = {
+          ...(overage === 'stop' || overage === 'balance' || overage === 'openrouter' ? { overage: overage as 'stop' | 'balance' | 'openrouter' } : {}),
+          ...(typeof maxConcurrent === 'number' && Number.isSafeInteger(maxConcurrent) && maxConcurrent >= 1 ? { maxConcurrent } : {}),
+        };
+        return Object.keys(out).length > 0 ? out : undefined;
+      })(),
       codexAccountOrder: Array.isArray(llm.codexAccountOrder)
         ? llm.codexAccountOrder.filter((v: unknown): v is string => typeof v === 'string' && v.length > 0)
         : undefined,
@@ -6512,6 +6563,7 @@ export function saveUserConfig(
       goalLoop: cfg.llm.goalLoop,
       memoryJudge: cfg.llm.memoryJudge,
       codexInspectExempt: cfg.llm.codexInspectExempt,
+      podHostAcpReview: cfg.llm.podHostAcpReview,
       codexAccountRotation: cfg.llm.codexAccountRotation,
       codexAccountAlerts: cfg.llm.codexAccountAlerts,
       codexAccountRotationThresholdPercent: cfg.llm.codexAccountRotationThresholdPercent,
@@ -6520,7 +6572,9 @@ export function saveUserConfig(
       // ★ 2026-09-28: 타입·파서에만 넣고 이 whitelist 를 빠뜨려 `config set llm.codexCreditsAllowed true` 가 «직렬화 드롭» 됐다(#21375 직후 운영 실측).
       codexCreditsAllowed: cfg.llm.codexCreditsAllowed,
       codexQuotaPolicy: cfg.llm.codexQuotaPolicy,
+      codexCreditReserve: cfg.llm.codexCreditReserve,
       grokWeeklyCapPct: cfg.llm.grokWeeklyCapPct,
+      zaiCodingPlan: cfg.llm.zaiCodingPlan,
       fallbackChain: cfg.llm.fallbackChain,
       openrouter: cfg.llm.openrouter,
       reviewFallbackModels: cfg.llm.reviewFallbackModels,

package/src/ux-sim/fault-cred-expiry.ts

@@ -0,0 +1,100 @@
+// ── 결함 주입 심 — «자격 만료» (grok 구독) ──────────────────────────────────
+//
+// 🚨 왜 이것이 있나 (SIM-VERIFY-KIT 둘째 심 · 2026-10-12)
+//   «만료가 가까운 grok 구독으로 Pod 를 띄움» 은 운영에서 그 시각이 오기를 기다려야 났다
+//   (10-12 node-b · 만료 32분 전 발사 → 헛발사 · AUT-GROK-CRED-EXPIRY-NO-LAUNCH #26465).
+//   이 심은 임시 HOME 에 만료 시각만 정한 자격 파일을 두고 «시계»와 «호스트 갱신 결과»만 바꿔 그 순간을 일으킨다.
+//
+// ⛔ 흉내 내지 않는다: 디스패처가 보는 grokLaunchReadiness 와 Pod 발사 계획이 보는 podGrokSubscriptionUsable 을
+//    그대로 부른다. 바꾸는 것은 자격 파일 위치(임시 HOME) · 시계(now) · 갱신 결과(refresh) 뿐이다 — CLI·네트워크 없음.
+
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import type { GrokRefreshOutcome } from '../grok/credential.js';
+import { POD_GROK_MIN_VALIDITY_MS, grokLaunchReadiness, podGrokSubscriptionUsable, podGrokSkippedLine } from '../task-orchestrator/surfaces/self-implement-pod.js';
+
+export interface CredExpiryScenario {
+  /** 발사 시각 기준 만료까지 남은 시간(ms) — 음수면 이미 만료. */
+  readonly expiresInMs: number;
+  /** 호스트 갱신(`grok models`) 결과 — 'refreshed' 면 만료를 extendToMs 만큼 늘린다. */
+  readonly refresh: GrokRefreshOutcome | 'threw';
+  /** 'refreshed' 일 때 새 만료까지 남은 시간(ms). */
+  readonly extendToMs?: number;
+}
+
+export interface CredExpiryObservation {
+  readonly scenario: CredExpiryScenario;
+  /** 디스패처 읽기 전용 판정(갱신 없음). */
+  readonly readiness: ReturnType<typeof grokLaunchReadiness>;
+  /** 발사 계획 판정(갱신 한 번 시도 뒤). */
+  readonly usable: ReturnType<typeof podGrokSubscriptionUsable>;
+  /** 발사 화면에 나갈 한 줄(빠졌을 때만). */
+  readonly launchLine: string | null;
+  /** 판정이 남긴 관측 줄. */
+  readonly logs: ReadonlyArray<{ category: string; event: string; data: Record<string, unknown> }>;
+}
+
+/** 'refreshed' 에서 extendToMs 를 안 주면 쓰는 새 만료까지의 시간(가정값 · 표에 «→12h00m» 으로 보인다). */
+export const DEFAULT_EXTEND_MS = 12 * 3600_000;
+
+function writeAuth(home: string, expiresAtMs: number): void {
+  mkdirSync(join(home, '.grok'), { recursive: true });
+  writeFileSync(join(home, '.grok', 'auth.json'), JSON.stringify({
+    'https://auth.x.ai::client': { key: 'sim-access', expires_at: new Date(expiresAtMs).toISOString(), refresh_token: 'sim-refresh' },
+  }));
+}
+
+/** 한 시나리오를 임시 HOME 에서 돌리고 지운다. */
+export function simCredExpiry(scenario: CredExpiryScenario): CredExpiryObservation {
+  const home = mkdtempSync(join(tmpdir(), 'ux-sim-cred-expiry-'));
+  try {
+    const now = Date.now();
+    writeAuth(home, now + scenario.expiresInMs);
+    const readiness = grokLaunchReadiness({ home, env: {} as NodeJS.ProcessEnv });
+    const logs: Array<{ category: string; event: string; data: Record<string, unknown> }> = [];
+    const usable = podGrokSubscriptionUsable({
+      home, env: {} as NodeJS.ProcessEnv,
+      refresh: () => {
+        if (scenario.refresh === 'threw') throw new Error('sim: grok CLI threw');
+        if (scenario.refresh === 'refreshed') writeAuth(home, Date.now() + (scenario.extendToMs ?? DEFAULT_EXTEND_MS));
+        return scenario.refresh;
+      },
+      log: (category, event, data) => { logs.push({ category, event, data }); },
+    });
+    return { scenario, readiness, usable, launchLine: usable.usable ? null : podGrokSkippedLine(usable), logs };
+  } finally {
+    rmSync(home, { recursive: true, force: true });
+  }
+}
+
+/** 기본 훑기 — 10-12 node-b 사건(만료 32분 전)을 갱신 결과 넷으로, 그리고 경계(최소 유효 시간 앞뒤)를. */
+export function credExpirySweep(): CredExpiryObservation[] {
+  const min = 60_000;
+  return [
+    simCredExpiry({ expiresInMs: 12 * 3600_000, refresh: 'unchanged' }),
+    simCredExpiry({ expiresInMs: POD_GROK_MIN_VALIDITY_MS + 5 * min, refresh: 'unchanged' }),
+    simCredExpiry({ expiresInMs: POD_GROK_MIN_VALIDITY_MS - 5 * min, refresh: 'unchanged' }),
+    simCredExpiry({ expiresInMs: 32 * min, refresh: 'unchanged' }),
+    simCredExpiry({ expiresInMs: 32 * min, refresh: 'refreshed' }),
+    simCredExpiry({ expiresInMs: 32 * min, refresh: 'refreshed', extendToMs: 60 * min }),
+    simCredExpiry({ expiresInMs: 32 * min, refresh: 'failed' }),
+    simCredExpiry({ expiresInMs: 32 * min, refresh: 'threw' }),
+    simCredExpiry({ expiresInMs: -10 * min, refresh: 'no-credential' }),
+  ];
+}
+
+/** CLI 한 화면 — 시나리오마다 한 줄. */
+export function renderCredExpiry(rows: readonly CredExpiryObservation[]): string[] {
+  const hm = (ms: number) => `${Math.floor(ms / 3600_000)}h${String(Math.floor((ms % 3600_000) / 60_000)).padStart(2, '0')}m`;
+  const fmt = (ms: number) => (ms < 0 ? `만료+${hm(-ms)}` : hm(ms));
+  return [
+    `cred-expiry · grok 구독 · 최소 유효 ${fmt(POD_GROK_MIN_VALIDITY_MS)}`,
+    ...rows.map((r) => {
+      const ready = r.readiness.ready ? 'ready' : `not-ready(${r.readiness.reason})`;
+      const use = r.usable.usable ? 'usable' : `dropped(${r.usable.reason})`;
+      const ext = r.scenario.refresh === 'refreshed' ? `(→${fmt(r.scenario.extendToMs ?? DEFAULT_EXTEND_MS)})` : '';
+      return `  만료까지 ${fmt(r.scenario.expiresInMs).padStart(9)} · 갱신 ${(r.scenario.refresh + ext).padEnd(18)} → 디스패처 ${ready.padEnd(20)} · 발사 ${use}`;
+    }),
+  ];
+}

package/src/ux-sim/fault-pod-death.ts

@@ -0,0 +1,74 @@
+// ── 결함 주입 심 — «Pod 사망» ────────────────────────────────────────────────
+//
+// 🚨 왜 이것이 있나 (SIM-VERIFY-KIT · 2026-10-12)
+//   «PARTIAL 줄을 남긴 Pod 가 SIGTERM 으로 사라짐» 은 운영에서 카나리를 쏘고 Pod 를 지워야만 났다
+//   (10-12 06:1x TC S3 카나리 run-4c6a70b1 — Pod 안에 PARTIAL 줄이 있었는데 호스트는 결손 줄만 남겼다).
+//   이 심은 그 사건을 «기다리지 않고 일으킨다» — 호스트가 가진 입력(끝 로그 · 도는 동안 본 PARTIAL · 종료 정보)만 준다.
+//
+// ⛔ 흉내 내지 않는다: 호스트 Job 경로가 부르는 «같은» 순수 함수 podUsageReemitPlan 을 그대로 부른다
+//    (METER-POD-ROLLUP-GAP-3 · self-implement-pod.ts). kubectl·Pod·네트워크는 없다.
+
+import { podUsageReemitPlan, type PodUsageReemitInput, type PodUsageReemitPlan } from '../task-orchestrator/surfaces/self-implement-pod.js';
+
+export type PodDeathScenario = PodUsageReemitInput;
+
+export interface PodDeathRow {
+  readonly category: string;
+  readonly event: string;
+  readonly data: Record<string, unknown>;
+}
+
+export interface PodDeathObservation {
+  /** 어느 줄로 재방출했나(final · partial-log · partial-live · missing · unparsable). */
+  readonly source: PodUsageReemitPlan['source'];
+  /** 호스트가 남길 관측 줄 전부(순서 그대로). */
+  readonly rows: readonly PodDeathRow[];
+  /** 사용량 행(llm.usage/llm-usage) 중 PARTIAL 에서 다시 낸 것(partial:true). */
+  readonly partialRows: readonly PodDeathRow[];
+  /** 결손 행(site=pod-rollup:missing). */
+  readonly missingRows: readonly PodDeathRow[];
+}
+
+/** Pod 안 부분 롤업 표본기가 내는 꼴 그대로의 PARTIAL 줄. */
+export function simPartialLine(seq = 1): string {
+  return `ELANOUS_USAGE_ROLLUP_PARTIAL ${JSON.stringify({
+    measured: true, partial: true, seq, at: '2026-10-12T00:00:00.000Z', runId: 'run-sim-pod-death', podName: 'si-sim-pod-death',
+    rows: [{ site: 'self-implement', provider: 'openrouter', model: 'z-ai/glm-5.3', calls: 3, inputTokens: 1200, outputTokens: 300 }],
+  })}`;
+}
+
+/** «PARTIAL 한 줄을 남기고 SIGTERM 으로 지워진 Pod» 기본 시나리오 — 끝 로그는 비었고, 호스트는 도는 동안 PARTIAL 을 봤다. */
+export function podDeathAfterPartialScenario(overrides: Partial<PodDeathScenario> = {}): PodDeathScenario {
+  return {
+    job: 'si-sim-pod-death',
+    runId: 'run-sim-pod-death',
+    logs: '',
+    livePartialLine: simPartialLine(),
+    exit: { state: 'failed', containerReason: 'Error', containerExitCode: 143 },
+    ...overrides,
+  };
+}
+
+/** 시나리오를 호스트 재방출 판정에 넣고 관측을 나눠 돌려준다. */
+export function simPodDeath(scenario: PodDeathScenario = podDeathAfterPartialScenario()): PodDeathObservation {
+  const plan = podUsageReemitPlan(scenario);
+  const usage = plan.rows.filter((r) => r.category === 'llm.usage' && r.event === 'llm-usage');
+  return {
+    source: plan.source,
+    rows: plan.rows,
+    // 결손 행은 partial 꼬리표가 없지만, 꼬리표가 붙어도 «재방출»로 세지 않도록 site 로 한 번 더 뺀다.
+    partialRows: usage.filter((r) => r.data.partial === true && r.data.site !== 'pod-rollup:missing'),
+    missingRows: usage.filter((r) => r.data.site === 'pod-rollup:missing'),
+  };
+}
+
+/** CLI 한 화면 — 사람이 읽는 요약. */
+export function renderPodDeath(obs: PodDeathObservation): string[] {
+  const missing = obs.missingRows[0]?.data;
+  return [
+    `pod-death · source=${obs.source} · 관측 줄 ${obs.rows.length}`,
+    `  PARTIAL 재방출 행: ${obs.partialRows.length}`,
+    `  결손 행: ${obs.missingRows.length}${missing ? ` · reason=${String(missing.reason)} · podExitClass=${String(missing.podExitClass ?? '-')}` : ''}`,
+    ...obs.rows.map((r) => `  ${r.category} ${r.event} ${JSON.stringify(r.data)}`),
+  ];
+}

package/src/ux-sim/fault-pool-cap.ts

@@ -0,0 +1,81 @@
+// ── 결함 주입 심 — «풀 상한 없음» (Pod 풀 스펙에 `:N` 이 빠짐) ────────────────
+//
+// 🚨 왜 이것이 있나 (SIM-VERIFY-KIT 셋째 심 · 2026-10-12)
+//   `--pod-pool pool-x@host` 처럼 `:N` 을 빼면 «상한 없음»이 아니라 기본 상한 2 다. 그 풀은 Pod 두 개가 돌면
+//   승인 0 으로 멈추는데, 운영에선 프로브를 띄워 40분을 기다려야 보였다(10-10 · POD-POOL-UNCAPPED-SPEC).
+//   이 심은 스펙 문자열과 «멤버마다 지금 도는 Pod 수»만 주고 승인 판정을 바로 낸다.
+//
+// ⛔ 흉내 내지 않는다: 스펙은 진짜 parsePodPool 로 읽고, 승인은 진짜 recommendConcurrency 가 정한다.
+//    클러스터 측정(kubectl)만 «메모리·CPU 넉넉한 노드»로 채운다 — 메모리가 아니라 상한이 판정을 정하게 하려는 것이다.
+
+import { recommendConcurrency, type PodLeaseMember, type PoolLeaseRecommendation } from '../task-orchestrator/surfaces/pod-lease.js';
+import { parsePodPool } from '../task-orchestrator/surfaces/pod-pool.js';
+
+const GiB = 1024 ** 3;
+
+export interface PoolCapScenario {
+  /** `--pod-pool` 값 그대로(예: `pool-node-b@node-b` · `pool-node-b@node-b:20,pool-node-c@node-c`). */
+  readonly spec: string;
+  /** 멤버(컨텍스트)마다 지금 Running 인 하니스 Pod 수 — 멤버마다 «반드시» 준다(빠지면 0 으로 꾸미지 않고 던진다). */
+  readonly running: Readonly<Record<string, number>>;
+}
+
+export interface PoolCapObservation {
+  readonly scenario: PoolCapScenario;
+  readonly members: ReadonlyArray<{ context: string; capacity: number; capacityDefaulted: boolean; running: number }>;
+  readonly recommendation: PoolLeaseRecommendation;
+}
+
+/** 메모리·CPU 가 넉넉한 노드 한 대 — 승인이 상한(capacity)으로만 갈리게 한다. */
+function roomyMember(context: string, capacity: number, capacityDefaulted: boolean, running: number): PodLeaseMember {
+  return {
+    context, capacity, ...(capacityDefaulted ? { capacityDefaulted: true } : {}),
+    running, pending: 0, pendingJobs: [], unleasedRunning: 0,
+    memoryLimitBytes: running * 16 * GiB, allocatableMemoryBytes: 1024 * GiB, allocatableCpuMillicores: 256_000,
+    availableMemoryByNodeBytes: [1024 * GiB - running * 16 * GiB], reason: null,
+  };
+}
+
+function runningOf(scenario: PoolCapScenario, context: string): number {
+  const n = scenario.running[context];
+  if (n === undefined || !Number.isSafeInteger(n) || n < 0) {
+    throw new Error(`simPoolCap: 멤버 「${context}」 의 Running 수가 없다 — 모르는 점유를 0 으로 꾸미지 않는다`);
+  }
+  return n;
+}
+
+export function simPoolCap(scenario: PoolCapScenario): PoolCapObservation {
+  const parsed = parsePodPool(scenario.spec);
+  const members = parsed.map((m) => ({
+    context: m.context, capacity: m.capacity, capacityDefaulted: (m as { capacityDefaulted?: boolean }).capacityDefaulted === true,
+    running: runningOf(scenario, m.context),
+  }));
+  const recommendation = recommendConcurrency(
+    { members: members.map((m) => roomyMember(m.context, m.capacity, m.capacityDefaulted, m.running)) },
+    { capacity: members.reduce((sum, m) => sum + m.capacity, 0), accounts: -1, perAccount: -1 },
+  );
+  return { scenario, members, recommendation };
+}
+
+/** 기본 훑기 — 상한 뺀 스펙이 Pod 둘에서 막히는 순간과, 상한을 적은 스펙의 대조. */
+export function poolCapSweep(): PoolCapObservation[] {
+  return [
+    simPoolCap({ spec: 'pool-node-b@node-b', running: { 'pool-node-b': 0 } }),
+    simPoolCap({ spec: 'pool-node-b@node-b', running: { 'pool-node-b': 1 } }),
+    simPoolCap({ spec: 'pool-node-b@node-b', running: { 'pool-node-b': 2 } }),
+    simPoolCap({ spec: 'pool-node-b@node-b:20', running: { 'pool-node-b': 2 } }),
+    simPoolCap({ spec: 'pool-node-b@node-b:20', running: { 'pool-node-b': 20 } }),
+    simPoolCap({ spec: 'pool-node-b@node-b:20,pool-node-c@node-c', running: { 'pool-node-b': 20, 'pool-node-c': 2 } }),
+    simPoolCap({ spec: 'pool-node-b@node-b:20,pool-node-c@node-c', running: { 'pool-node-b': 20, 'pool-node-c': 0 } }),
+  ];
+}
+
+export function renderPoolCap(rows: readonly PoolCapObservation[]): string[] {
+  return [
+    'pool-cap · `:N` 없는 멤버 = 기본 상한 2(capacityDefaulted)',
+    ...rows.map((r) => {
+      const occ = r.members.map((m) => `${m.context} ${m.running}/${m.capacity}${m.capacityDefaulted ? '(기본)' : ''}`).join(' · ');
+      return `  ${r.scenario.spec.padEnd(36)} ${occ.padEnd(40)} → 승인 ${String(r.recommendation.recommended)} · limitedBy=${String(r.recommendation.limitedBy)}`;
+    }),
+  ];
+}

package/src/version/packed-revision.json

@@ -1 +1 @@
-{"commit":"db6e6925421414ee627832a085317f69e8adb91b"}
+{"commit":"8ad1a304501cd81b5c82fb3c934d151bd109f11f"}

package/src/webclone/qa-table.ts

@@ -0,0 +1,22 @@
+import {
+  compareLayoutAcrossViewports,
+  renderResponsiveSection,
+  type ViewportSample,
+} from './responsive-layout.js';
+
+const QA_WIDTHS = [390, 768, 1280] as const;
+
+export function siteQaTable(samples: readonly ViewportSample[]): {
+  widths: number[];
+  lines: string[];
+  realDevice: '미확인';
+} {
+  const qaSamples = samples.filter((sample) => QA_WIDTHS.some((width) => width === sample.width));
+  const report = compareLayoutAcrossViewports(qaSamples);
+  const lines = [`폭 ${QA_WIDTHS.join(' · ')}`];
+  for (const width of QA_WIDTHS) {
+    if (!qaSamples.some((sample) => sample.width === width)) lines.push(`${width} 못 잼`);
+  }
+  lines.push(...renderResponsiveSection(report), '실기기: 미확인');
+  return { widths: [...QA_WIDTHS], lines, realDevice: '미확인' };
+}