elanous 0.2.25 → 0.2.27

package/src/dashboard/index.ts

@@ -965,6 +965,7 @@ import {
   enterSessionControlMode,
   exitSessionControlMode,
   isSessionControlActive,
+  routeDevHarnessSubmitIntent,
   parseSessionControlSlash,
   parseSessionSurfaceSlash,
   resolveSessionInputModeFromChatMode,
@@ -1023,7 +1024,7 @@ import { expandPromptReferences } from '../prompt/references.js';
 import { spawnCodingAgent, CodingAgentBinaryMissing } from '../terminal/coding-agent.js';
 import type { TerminalSession } from '../terminal/session-registry.js';
 import { createSessionPickerModal } from '../session/picker-modal.js';
-import { listSessions as listChatSessionsForResume } from '../session/index.js';
+import { listSessions as listChatSessionsForResume, adoptSession as adoptChatSession, setActiveSessionId as markActiveChatSession } from '../session/index.js';
 // TUI 부활 S-b — 타임트래블 포크 엔진 (codex ForkSnapshot 동형 · 2026-07-09
 // 이식 후 호출처 0 이던 방치 자산 회수). 순수 히스토리 절단 로직만 소비;
 // 영속은 세션 스토어(forkSessionFromHistory)가 담당한다.
@@ -1179,6 +1180,20 @@ import { buildDebugCallStack } from '../debug/call-stack.js';
 import { buildAstGrepHostTool } from '../skills/tools/ast-grep.js';
 import { buildLspHostTool } from '../skills/tools/lsp/index.js';
 import { PluginHost } from '../plugins/core/host.js';
+
+/** Register the same L2 host tools used by the live TUI before each turn's catalog is assembled. */
+export function registerDashboardCoreHostTools(host: Pick<PluginHost, 'registerHostTool'>): void {
+  const coreMod = require('../domains/core-tools.js') as typeof import('../domains/core-tools.js');
+  const core = coreMod.buildCoreTools();
+  for (const spec of core.specs) {
+    host.registerHostTool({
+      name: spec.name,
+      description: spec.description,
+      parameters: spec.parameters,
+      handler: async (args) => core.dispatch(spec.name, args as Record<string, unknown>),
+    });
+  }
+}
 import { registerDashboardPaneHostTools } from './panes/host-tools.js';
 import { DEFAULT_THEME_TOKENS, mergeThemeTokens, resolveThemeTokens, type ThemeTokenInput, type ThemeTokens } from '../theme/tokens.js';
 import { resolveActiveTheme, setActivePresetInConfig } from './render/theme-resolver.js';
@@ -1407,6 +1422,8 @@ const isPluginBusy = (host: { active(): { plugin: { isBusy?: (s: any) => boolean
 // ── Main dashboard ──
 
 export interface ShowDashboardOptions {
+  /** Internal startup timing signal for the first successfully flushed dashboard frame. */
+  onFirstFrameRendered?: () => void;
   /** Force debug sinks on at launch (file + mirror). Equivalent to
    *  typing `/debug on` immediately after startup. Paired with
    *  chatOnly=true by the `elanous --debug` CLI flag so every traced
@@ -1501,6 +1518,16 @@ export function buildDashboardTurnTypeaheadPromptZone(input: TurnTypeaheadPrompt
   };
 }
 
+/** The chat-main submit branch calls this before any model dispatch. Keeping
+ * the decision here lets the dashboard test execute the same entry point. */
+export function resolveDashboardHarnessSubmitIntent(
+  text: string,
+  options: Parameters<typeof resolveDashboardChatMainSubmitIntent>[1],
+  resolveIntent: typeof resolveDashboardChatMainSubmitIntent = resolveDashboardChatMainSubmitIntent,
+) {
+  return routeDevHarnessSubmitIntent(resolveIntent(text, options));
+}
+
 /** 프롬프트 zone 에 관측만 덧입힌다 — 렌더 산출은 `inner` 가 소유한다.
  *
  *  ⭐ **왜 뽑았나**(무인 리뷰 must-fix · 2026-08-01): 종전엔 이 래퍼가 `zones.push({...})` 안에
@@ -1567,6 +1594,7 @@ export interface DashboardFrameInput {
   promptCaret: CursorState | null;
   suppressPromptArea: boolean;
   onEssentialFrameCursorDecision?: (observation: EssentialFrameCursorObservation) => void;
+  onFrameWriteComplete?: (error?: Error | null) => void;
 }
 
 export interface EssentialFrameCursorObservation {
@@ -1612,6 +1640,7 @@ export function renderDashboardFrame(
     overlay: input.overlay,
     force: input.force,
     cursor: paintCursor(essentialDecision.cursor ?? input.coordinatorCursor ?? null),
+    onWriteComplete: input.onFrameWriteComplete,
   });
   input.onEssentialFrameCursorDecision?.({
     caret: essentialDecision.cursor,
@@ -1901,6 +1930,7 @@ export function renderDashboardFirstScreenBand(input: {
 }
 
 export async function showDashboard(opts: ShowDashboardOptions = {}): Promise<DashboardAction> {
+  let firstDashboardFrameRendered = false;
   await awaitGlobalPersonaLoad().catch(() => {});
   const dashboardQuitConfirmationState = createQuitConfirmationState();
   const signalQuitConfirmationState = createQuitConfirmationState();
@@ -1910,7 +1940,11 @@ export async function showDashboard(opts: ShowDashboardOptions = {}): Promise<Da
     closeTui();
   };
   const exitDashboardTui = (): void => {
-    closeDashboardForExit({ closeTui: closeDashboardTui, confirmationState: dashboardQuitConfirmationState });
+    closeDashboardForExit({
+      closeTui: closeDashboardTui,
+      confirmationState: dashboardQuitConfirmationState,
+      getSessionId: (): string | undefined => acpSessionIdRef.current ?? undefined,
+    });
   };
   // ⭐⭐⭐ `N1` — 신호 경로(`SIGINT`/`SIGTERM`)와 저수준 `Ctrl+C` 도 같은 종료를 타게 «등록»한다.
   //   ⛔ 종전엔 그 둘만 세션 안내를 «못 받았다»(일곱 경로 중 다섯만 받았다).
@@ -1920,6 +1954,7 @@ export async function showDashboard(opts: ShowDashboardOptions = {}): Promise<Da
       closeTui: () => { /* 신호 경로: cleanup() 이 이미 복원했다 */ },
       confirmationState: signalQuitConfirmationState,
       forceQuit: true,
+      getSessionId: (): string | undefined => acpSessionIdRef.current ?? undefined,
     });
   });
   // E3 (§7.4 TS baseline reduction · 2026-05-17) — forward declarations
@@ -3342,6 +3377,8 @@ Mode- and sync-specific instructions are injected per-turn when relevant — do
   //   ⛔ `attachedSessionId`(대화 세션)와 «다른 축»이다 — 루프는 ACP 세션으로 스코프를 연다.
   //   ⚠️ 세션은 이 함수 «뒤»에서 만들어지므로 참조로 둔다(호출 시점엔 채워져 있다).
   const acpSessionIdRef: { current: string | null } = { current: null };
+  const adoptedAcpSessionIds = new Set<string>();
+  let activeAcpSessionId: string | null = null;
   const activeSessionIdForTypeahead = (): string | null => acpSessionIdRef.current;
   const paintTurnTypeaheadEcho = (): void => {
     const { rows: tr, cols: tc } = termSize();
@@ -10014,16 +10051,7 @@ Mode- and sync-specific instructions are injected per-turn when relevant — do
   //   family(전 surface 기본) — 이로써 TUI 에서도 "P2 왜 실패?" 를 엘라누스가 툴로 상황판단한다.
   //   fail-soft: 코어 도구 로드 실패가 대시보드 부팅을 막지 않는다.
   try {
-    const coreMod = require('../domains/core-tools.js') as typeof import('../domains/core-tools.js');
-    const core = coreMod.buildCoreTools();
-    for (const spec of core.specs) {
-      pluginHost.registerHostTool({
-        name: spec.name,
-        description: spec.description,
-        parameters: spec.parameters,
-        handler: async (args) => core.dispatch(spec.name, args as Record<string, unknown>),
-      });
-    }
+    registerDashboardCoreHostTools(pluginHost);
   } catch { /* fail-soft */ }
   // LSP (Phase L3 of 내부 문서 `ROADMAP-lsp-integration`) — structural /
   // symbol-level source queries via typescript-language-server. Pool
@@ -11530,6 +11558,11 @@ Mode- and sync-specific instructions are injected per-turn when relevant — do
     // ⭐ Single flush: resolve the prompt caret after overlays.
     const frameCursorDecision = display.cursorDecision();
     renderDashboardFrame(baseLines, composeDashboardFrameWithCoordinatorModal(display, {
+      onFrameWriteComplete: firstDashboardFrameRendered ? undefined : (error) => {
+        if (error || firstDashboardFrameRendered) return;
+        firstDashboardFrameRendered = true;
+        try { opts.onFirstFrameRendered?.(); } catch { /* timing must not break dashboard */ }
+      },
       overlay: modalFrame,
       force: forceFromCoordinator || modalKey !== lastModalKey,
       cursorOwner: frameCursorDecision.owner,
@@ -17422,7 +17455,7 @@ Mode- and sync-specific instructions are injected per-turn when relevant — do
           // resource_link blocks so dropped screenshots and PDFs flow
           // naturally to the agent. debug.log gates the snapshot so
           // off-state stays zero-cost.
-          const submitIntent = resolveDashboardChatMainSubmitIntent(input.text, {
+          const submitIntent = resolveDashboardHarnessSubmitIntent(input.text, {
             stickyBackend: dashboardAcpChat.getSticky(),
             source: input.externalSubmitSource,
           });
@@ -17443,7 +17476,10 @@ Mode- and sync-specific instructions are injected per-turn when relevant — do
           }
           if (submitIntent.kind === 'submit-turn' && submitIntent.route === 'sticky-acp') {
             await runDashboardChatMainSubmitIntent({
-              submit: createDashboardChatMainTurnSubmit(submitIntent),
+              submit: createDashboardChatMainTurnSubmit({
+                ...submitIntent,
+                sessionId: submitIntent.sessionId ?? dashboardAcpSession.currentSessionId,
+              }),
               beforeExecute: (submit) => {
                 maybeEmitDashboardSubmitQuickPass({
                   submit,
@@ -19186,16 +19222,19 @@ Mode- and sync-specific instructions are injected per-turn when relevant — do
           do {
             const turnText = goalLoopUserText ?? tok.text;
             await runDashboardChatMainSubmitIntent({
-              submit: createDashboardChatMainTurnSubmit(
-                submitIntent.kind === 'submit-turn' && submitIntent.route === 'plain' && goalLoopUserText === null
-                ? submitIntent
-                : {
-                  kind: 'submit-turn',
-                  source: { kind: 'keyboard', surface: 'dashboard-chat-main' },
-                  text: turnText,
-                  route: goalLoopUserText === null ? 'plain' : 'plain',
-                },
-              ),
+              submit: createDashboardChatMainTurnSubmit({
+                ...(submitIntent.kind === 'submit-turn' && submitIntent.route === 'plain' && goalLoopUserText === null
+                  ? submitIntent
+                  : {
+                    kind: 'submit-turn' as const,
+                    source: { kind: 'keyboard' as const, surface: 'dashboard-chat-main' },
+                    text: turnText,
+                    route: 'plain' as const,
+                  }),
+                sessionId: submitIntent.kind === 'submit-turn'
+                  ? submitIntent.sessionId ?? dashboardAcpSession.currentSessionId
+                  : dashboardAcpSession.currentSessionId,
+              }),
               beforeExecute: (submit) => {
                 maybeEmitDashboardSubmitQuickPass({
                   submit,
@@ -19246,6 +19285,29 @@ Mode- and sync-specific instructions are injected per-turn when relevant — do
             }
           } while (goalLoopUserText !== null);
 
+          // SESSION-RESUME-ISOLATED: 완료된 턴의 ACP 세션을 원장에 등록하고 active 로 지정한다.
+          // 서버의 완료-채택(persistCompletedTuiAcpTurn)은 origin_session 메타가 실렸을 때만
+          // 도는데, 격리 우주 첫 턴에는 origin 세션이 없어 메타가 안 실린다 — 여기가 그 갭을 닫는다.
+          const completedAcpSessionId = dashboardAcpSession.currentSessionId;
+          if (completedAcpSessionId) {
+            acpSessionIdRef.current = completedAcpSessionId;
+            // 원격 데몬 세션의 원장은 데몬이 소유한다. 로컬 등록은 세션마다 한 번만 한다.
+            if (!daemonAttached && activeAcpSessionId !== completedAcpSessionId) {
+              try {
+                if (!adoptedAcpSessionIds.has(completedAcpSessionId)) {
+                  adoptChatSession(completedAcpSessionId, { source: 'tui', transport: 'acp' });
+                  adoptedAcpSessionIds.add(completedAcpSessionId);
+                }
+                markActiveChatSession(completedAcpSessionId);
+                activeAcpSessionId = completedAcpSessionId;
+              } catch (error) {
+                // 등록 실패가 대화 흐름을 끊지 않되, 다음 턴 재시도 전 원인을 남긴다.
+                debug.log('session.adopt', 'failed', { sessionId: completedAcpSessionId, error: String(error) });
+                pushDebugLine(C.warning(`session adopt failed: ${String(error)}`));
+              }
+            }
+          }
+
           continue; // stay in input mode after chat
           } // end while (input mode loop)
           // Disarm the prompt-repaint hook: textInput's drawAll

package/src/dashboard/input/chat-main-plain-turn-runtime.ts

@@ -191,10 +191,15 @@ export async function runDashboardChatMainPlainTurn(
     //     「사다리가 안 걸린 것」과 「걸렸는데 키가 딴 데로 간 것」을 ***원리상 못 갈랐다***.
     // ⭐ 이 한 줄이 그 둘을 가른다 — 이 이벤트가 «있는데» typeahead 가 0이면 후자다.
     // ⛔ 행동을 바꾸지 않는다(관측만). 처방은 `RFC-tui-mid-turn-input-queue-2026-08-19` §2 Q1.
+    const startedAtDate = new Date(deps.turnStartedAt);
+    const turnStartedAtIso = Number.isFinite(startedAtDate.getTime())
+      ? startedAtDate.toISOString()
+      : undefined;
     try {
       deps.debugLog?.('chat-main.plain-turn', 'streaming-keys-attached', {
         userTextBytes: Buffer.byteLength(userText ?? '', 'utf8'),
         turnStartedAt: deps.turnStartedAt,
+        turnStartedAtIso,
       });
     } catch { /* fail-soft — 관측이 턴을 막지 않는다 */ }
     let stage = 'streaming-keys-attached';
@@ -291,11 +296,32 @@ export async function runDashboardChatMainPlainTurn(
     });
 
     if (finishIfAborted()) return;
+    // TUI-FIRST-TURN-STALL — 09:48 표본에서 llm.stream consume-start 뒤
+    // first-token 이벤트가 0건이어서 「첫 토큰까지의 구간」을 잴 표면이 없었다.
+    // turnStartedAt 를 재사용해 첫 비어 있지 않은 text chunk 에 정확히 한 번
+    // chat.turn/first-token 을 남긴다. 도구 호출이 먼저 흘러도 text 가 도착해야
+    // 기록되므로 request→first-token 구간은 그대로 측정된다. ISO 시각 좌표는
+    // pty record 및 TUI-BOOT-TIME(src/index.ts) 부팅 계측과의 대응용이다.
+    let firstTokenLogged = false;
+    const logFirstToken = (chunk: string): void => {
+      if (firstTokenLogged || !chunk || abortCtrl.signal.aborted) return;
+      firstTokenLogged = true;
+      const firstTokenAt = Date.now();
+      try {
+        deps.debugLog?.('chat.turn', 'first-token', {
+          ms: firstTokenAt - deps.turnStartedAt,
+          turnStartedAt: deps.turnStartedAt,
+          turnStartedAtIso,
+          firstTokenAtIso: new Date(firstTokenAt).toISOString(),
+        });
+      } catch { /* fail-soft — 관측이 턴을 막지 않는다 */ }
+    };
     const streamResult = await runDashboardPlainTurnStream({
       userText,
       abortCtrl,
       acpSession: deps.acpSession,
       onText: (chunk, accumulated) => {
+        logFirstToken(chunk);
         turnStreamRuntime.onText(chunk, accumulated);
       },
       onToolCall: (call) => {

package/src/dashboard/slash-runtime/dashboard-handlers.ts

@@ -2490,6 +2490,12 @@ export function buildDashboardSlashRegistry(nowDeps?: ContextNowDeps, decideLedg
       });
       if (result.kind === 'launch') {
         ctx.chatLines.push(ctx.accent(`  ✅ 전제 검사 통과 — 골: ${result.goalFile}`));
+        const { resolveObserveOnlyDecision } = await import('../../self-implement/observe-only.js');
+        if (resolveObserveOnlyDecision().enabled) {
+          ctx.chatLines.push(ctx.muted('  관측 전용이라 런을 발사하지 않았습니다 · 코드도 안 바꿨습니다'));
+          ctx.chatLines.push(ctx.muted('     조회: elanous logs --category self-implement --since 10m'));
+          return;
+        }
         // ⭐ 런을 «띄운다» — detached 라 이 TUI 를 닫아도 런은 산다.
         //   ⛔ spawn 을 여기서 새로 쓰지 않는다 — `launchDevGoalFileDetached` «한 자리»가 인자·env 를 갖는다.
         //   ⛔ 그리고 「띄웠다」와 「끝났다」는 다른 값이다 — 이 표면은 «띄운 것»까지만 말한다.

package/src/debug/log.ts

@@ -949,7 +949,7 @@ const SECRET_TEXT_RULES: readonly { readonly id: string; readonly re: RegExp; re
   { id: 'gcp-api-key', re: /\b(AIza)[0-9A-Za-z_-]{35}\b/g, to: '$1***' },
   { id: 'jwt', re: /\b(ey)[A-Za-z0-9_-]{10,}\.ey[A-Za-z0-9._\\/-]{10,}/g, to: '$1***' },
   // gitleaks: generic-api-key 축소판 — `key = value` 형태.
-  { id: 'generic-api-key', re: /\b(api[_-]?key|secret|password|passwd|token|credential)\b(\s*[:=]\s*)["']?[^\s"',;)]{4,}/gi, to: '$1$2***' },
+  { id: 'generic-api-key', re: /\b(access[_-]?token|refresh[_-]?token|api[_-]?key|secret|password|passwd|token|credential)\b(\s*[:=]\s*)["']?[^\s"',;)]{4,}/gi, to: '$1$2***' },
   // 환경변수 형태 `OPENROUTER_API_KEY=…` — 위 규칙은 `_API_KEY` 앞에 단어 경계가 없어 못 잡는다. 값에 글자가 있어야 한다(`MAX_TOKEN=4096` 은 그대로).
   { id: 'env-secret', re: /\b([A-Z][A-Z0-9]*_(?:[A-Z0-9]+_)*(?:API_KEY|TOKEN|SECRET|PASSWORD|ACCESS_KEY))(\s*[:=]\s*)["']?(?=[^\s"',;)]*[A-Za-z])[^\s"',;)]{8,}/g, to: '$1$2***' },
   // BEDROCK-PROVIDER — `AWS_BEARER_TOKEN_BEDROCK=…` 은 이름이 TOKEN 으로 «끝나지» 않아 위 규칙이 못 잡는다.

package/src/domains/release-tool.ts

@@ -21,12 +21,15 @@ export const RELEASE_STATUS_SPEC: LLMToolSpec = {
     + 'topic=cell: id 칸 하나의 상태·근거와 살핀 판.\n'
     + 'topic=schedule: 발행 이후 판의 컷·착지·발행·동결 일정.\n'
     + 'topic=ops: 도는 런·발행·늦은 스케줄·자리·열린 결정의 출처 있는 개관.\n'
-    + 'topic 과 action 을 동시에 쓰지 않는다 — 둘 중 하나만: topic 은 읽을 대상, action 은 짧은 요약.\n'
+    + 'topic 과 action 을 동시에 쓰면 topic 을 우선하고 action 은 무시한다. topic 은 읽을 대상, action 은 단독 조회의 짧은 요약.\n'
+    + 'topic=features 에서는 owner·status 로 칸을 필터링할 수 있다.\n'
     + '발행·버전·피처·체크리스트·칸·컷·일정·운영 상태 질문은 Grep·ListDir·파일 검색보다 이 도구를 먼저 부른다 — 그 답은 파일이 아니라 원장에 있다.',
   parameters: { type: 'object', properties: {
     version: { type: 'string', description: '조회할 판. 생략하면 개발 판과 다음 판.' },
     topic: { type: 'string', enum: ['status', 'features', 'cell', 'schedule', 'ops'], description: '읽을 대상(기본 status).' },
     action: { type: 'string', enum: ['schedule', 'blocked', 'landed'], description: '짧은 읽기 요약: 다음 컷 일정·막힌 칸·최근 24시간 병합 PR.' },
+    owner: { type: 'string', description: 'topic=features 때 담당 읽기 필터.' },
+    status: { type: 'string', description: 'topic=features 때 상태 읽기 필터.' },
     id: { type: 'string', description: 'topic=cell 때 찾을 칸 id(필수).' },
   }, required: [] },
 };
@@ -122,10 +125,23 @@ function cellView(item: ChecklistItem) {
 export function dispatchReleaseStatus(args: Record<string, unknown>, deps: ReleaseToolDeps = {}): { text: string; structured: Record<string, unknown> } {
   const topic = args.topic === undefined ? 'status' : args.topic;
   if (typeof topic !== 'string' || !['status', 'features', 'cell', 'schedule', 'ops'].includes(topic)) throw new Error('topic 은 status, features, cell, schedule, ops 중 하나');
-  if (args.topic !== undefined && args.action !== undefined) {
-    throw new Error(`topic 과 action 을 동시에 보낼 수 없습니다 — 둘 중 하나만: topic=${topic} 는 읽을 대상, action 은 짧은 요약(schedule·blocked·landed)`);
-  }
+  const ignoredAction = args.topic !== undefined && args.action !== undefined ? args.action : undefined;
+  const withIgnoredAction = (result: { text: string; structured: Record<string, unknown> }) => ignoredAction === undefined
+    ? result
+    : { ...result, text: `action=${String(ignoredAction)} 은 무시됨 — topic 과 같이 못 쓴다\n${result.text}` };
   const requested = args.version;
+  if (topic === 'features') {
+    for (const key of ['owner', 'status'] as const) {
+      if (args[key] !== undefined && (typeof args[key] !== 'string' || !args[key].trim())) throw new Error(`${key} 값이 필요합니다`);
+    }
+  }
+  const filters = topic === 'features' ? {
+    ...(typeof args.owner === 'string' ? { owner: args.owner } : {}),
+    ...(typeof args.status === 'string' ? { status: args.status } : {}),
+  } : {};
+  const hasFeatureFilters = Object.keys(filters).length > 0;
+  const featureItemMatches = (item: ChecklistItem) =>
+    (!('owner' in filters) || item.owner === filters.owner) && (!('status' in filters) || item.status === filters.status);
   if (requested !== undefined && (typeof requested !== 'string' || !requested.trim())) throw new Error('판 이름이 필요합니다');
   const checklist = deps.checklist ?? listChecklist;
   if (topic === 'ops') {
@@ -133,10 +149,10 @@ export function dispatchReleaseStatus(args: Record<string, unknown>, deps: Relea
     const kinds: ContextFact['kind'][] = ['run', 'release', 'schedule-late', 'seat', 'decision'];
     const facts = answer.facts.filter(fact => kinds.includes(fact.kind));
     debug.log('release.tool', 'status', { action: 'status', topic, version: requested ?? null });
-    return { text: facts.length ? facts.map(fact => JSON.stringify(fact)).join('\n') : '운영 개관: 관측된 사실 없음', structured: { facts } };
+    return withIgnoredAction({ text: facts.length ? facts.map(fact => JSON.stringify(fact)).join('\n') : '운영 개관: 관측된 사실 없음', structured: { facts } });
   }
   const dev = checklistDevVersion(deps.devVersion?.() ?? devVersion());
-  if (args.action !== undefined) {
+  if (ignoredAction === undefined && args.action !== undefined) {
     const action = args.action;
     if (typeof action !== 'string' || !['schedule', 'blocked', 'landed'].includes(action)) {
       throw new Error('action 은 schedule, blocked, landed 중 하나여야 합니다');
@@ -178,12 +194,13 @@ export function dispatchReleaseStatus(args: Record<string, unknown>, deps: Relea
       const target = (requested as string | undefined) ?? dev;
       validateVersion(target);
       const data = checklist(target);
-      const counts = summarizeChecklist(data);
-      const items = data.items.slice(0, 60).map(({ id, title, status, owner, priority }) =>
+      const matchingItems = data.items.filter(featureItemMatches);
+      const counts = hasFeatureFilters ? summarizeChecklist({ ...data, items: matchingItems }) : summarizeChecklist(data);
+      const items = matchingItems.slice(0, 60).map(({ id, title, status, owner, priority }) =>
         ({ id, title: firstLine(title), status, owner: owner ?? null, priority: priority ?? null }));
-      const total = data.items.length;
+      const total = matchingItems.length;
       result = { text: `${target} 판 피처 ${total}칸 · 초록 ${counts.green} · 노랑 ${counts.yellow} · 빨강 ${counts.red} · 끝 ${counts.done}\n${items.map(item => `${item.id} ${item.title} · ${item.status} · ${item.owner ?? '미배정'}`).join('\n')}${total > 60 ? `\n앞 60칸만 표시(전체 ${total}칸)` : ''}`,
-        structured: { version: target, items, counts: { green: counts.green, yellow: counts.yellow, red: counts.red, done: counts.done }, total, truncated: total > 60 } };
+        structured: { version: target, items, counts: { green: counts.green, yellow: counts.yellow, red: counts.red, done: counts.done }, total, truncated: total > 60, ...(hasFeatureFilters ? { filters } : {}) } };
     } else if (topic === 'cell') {
       const id = requiredString(args, 'id');
       const searched = requested ? [requested as string] : [...new Set([dev, nextVersion(dev), checklist(dev).released].filter(Boolean))];
@@ -208,7 +225,7 @@ export function dispatchReleaseStatus(args: Record<string, unknown>, deps: Relea
           publishAt: row.publishAt ?? null, freezeFrom: row.freezeFrom ?? null, freezeUntil: row.freezeUntil ?? null })) } };
     }
     debug.log('release.tool', 'status', { action: 'status', topic, version: requested ?? dev });
-    return result;
+    return withIgnoredAction(result);
   }
   const version = requested ? null : dev;
   const versions = requested ? [requested as string] : [version!, nextVersion(version!)];
@@ -253,7 +270,7 @@ export function dispatchReleaseStatus(args: Record<string, unknown>, deps: Relea
     : published.state === 'unreadable' ? `발행 판 ${published.version} · 발행 기록 못 읽음` : '발행 판 모름';
   const structured = { releases: entries, latestRun: latest, published };
   debug.log('release.tool', 'status', { action: 'status', topic, version: versions.join(',') });
-  return { text: `${lines.join('\n\n')}\n${cards.map(formatElanousCard).join('\n')}\n${publishedLine}`, structured };
+  return withIgnoredAction({ text: `${lines.join('\n\n')}\n${cards.map(formatElanousCard).join('\n')}\n${publishedLine}`, structured });
 }
 
 function requiredString(args: Record<string, unknown>, key: string): string {

package/src/domains/surface-events.ts

@@ -169,6 +169,22 @@ export function recordInboundTurn(
   finally { if (ownDb) db.close(); }
 }
 
+export interface SurfaceUtteranceQuery {
+  from: string;
+  to: string;
+  surface?: string;
+}
+
+/** Read every event in a half-open UTC interval without touching recall state. */
+export function querySurfaceUtterances(db: Database, opts: SurfaceUtteranceQuery): SurfaceEventRow[] {
+  const where = ["julianday(e.ts) >= julianday(?)", "julianday(e.ts) < julianday(?)", "e.direction = 'inbound'", "e.kind IN ('utterance', 'qna')"];
+  const params: string[] = [opts.from, opts.to];
+  if (opts.surface) { where.push('e.surface = ?'); params.push(opts.surface); }
+  return db.prepare(
+    `SELECT e.* FROM events e WHERE ${where.join(' AND ')} ORDER BY julianday(e.ts) ASC, e.id ASC`,
+  ).all(...params) as SurfaceEventRow[];
+}
+
 export interface QueryEventsOpts {
   query?: string;             // FTS MATCH (없으면 최근순 전체)
   surface?: string;

package/src/elanous-config-dir.ts

@@ -15,8 +15,8 @@
 // Resolution order:
 //   1. Programmatic override set via `setElanousConfigDir(dir)` (incl.
 //      from the `--config-dir` CLI flag).
-//   2. State-dir via `effectiveInstanceRoot()` (including isolated source trees).
-//   3. `~/.elanous` for the installed daily-driver root.
+//   2. State-dir via `effectiveInstanceRoot()` (explicit --test or parent stamp).
+//   3. `~/.elanous` for both installed and source CLIs without an explicit test root.
 
 import { homedir } from 'node:os';
 import { resolve } from 'node:path';

package/src/fleet/host-doctor.ts

@@ -1,5 +1,7 @@
 import { spawnSync } from 'node:child_process';
 import { debug } from '../debug/log.js';
+import type { ResourceView } from '../control-plane/ledger.js';
+import type { MachineLedger, MachineFleetIntent } from '../machines/machine-ledger.js';
 
 /**
  * 호스트 닥터 — 첫 조각(FLEET-DOCTOR-1 · 읽기 전용).
@@ -295,6 +297,66 @@ export interface HostDoctorOptions {
   remote?: HostDoctorRemote;
   expected?: HostDoctorExpected;
   now?: () => Date;
+  /** HQ observations: null means the source could not be read; [] means a successful empty reading. */
+  membership?: {
+    intent: MachineLedger | null;
+    machines: readonly ResourceView[] | null;
+    parentHosts: readonly { host?: string; podPool?: string; approvalCapacity?: number }[] | null;
+    intentError?: string;
+    machinesError?: string;
+    parentHostsError?: string;
+  };
+}
+
+function membershipCheck(id: string, status: HostDoctorCheckStatus, observed: string, expected: string): HostDoctorCheckResult {
+  return { id, status, observed, expected, fixKind: 'human', fix: 'compare Nexus machine registration, machines.yaml intent, and taskAgent.parentHost' };
+}
+
+/** Pure HQ comparison. A failed query is null (unmeasured); a successful empty result is a real missing host. */
+export function checkHostMembership(host: string, platform: HostDoctorPlatform | null, membership: NonNullable<HostDoctorOptions['membership']>): HostDoctorCheckResult[] {
+  const intent: MachineFleetIntent | undefined = membership.intent?.machines.find((row) => row.fleet?.sshName === host)?.fleet;
+  const registryExpected = intent ? `live machine ${host} · role ${intent.role}` : `machines.yaml fleet intent for ${host}`;
+  let registry: HostDoctorCheckResult;
+  if (membership.intent === null || membership.machines === null) {
+    registry = membershipCheck('registry.member', 'unmeasured', membership.intent === null
+      ? `intent ledger unavailable (repository checkout required)${membership.intentError ? `: ${membership.intentError}` : ''}`
+      : `Nexus machine query unavailable${membership.machinesError ? `: ${membership.machinesError}` : ''}`, registryExpected);
+  } else if (!intent) {
+    registry = membershipCheck('registry.member', 'fail', 'host absent from fleet intent', registryExpected);
+  } else {
+    // `machine` is the Nexus identity; `name` is a display label. A missing/expired record
+    // is a measured failure even when the remote platform probe did not run.
+    const rows = membership.machines.filter((row) => row.kind === 'machine' && row.machine === host && !row.expired);
+    const row = rows[0];
+    const role = row?.attrs.role;
+    if (!row) registry = membershipCheck('registry.member', 'fail', 'no live Nexus machine record', registryExpected);
+    else if (rows.length !== 1) registry = membershipCheck('registry.member', 'fail', `${rows.length} live machine records`, registryExpected);
+    else if (typeof role !== 'string') registry = membershipCheck('registry.member', 'unmeasured', 'machine attrs.role unavailable', registryExpected);
+    else if (role !== intent.role) registry = membershipCheck('registry.member', 'fail', `machine role ${role}`, registryExpected);
+    // Existence and role have been measured above; a pass still needs the platform probe.
+    else if (platform === null) registry = membershipCheck('registry.member', 'unmeasured', 'host platform unavailable', `intent platform ${intent.platform}`);
+    else if (platform !== intent.platform) registry = membershipCheck('registry.member', 'fail', `host platform ${platform}`, `intent platform ${intent.platform}`);
+    else registry = membershipCheck('registry.member', 'pass', `live machine ${host} · role ${role}`, registryExpected);
+  }
+
+  const parentExpected = intent ? `taskAgent.parentHost ${host} · ${intent.podPool} · cap ${intent.cap}` : `machines.yaml fleet intent for ${host}`;
+  let parent: HostDoctorCheckResult;
+  if (membership.intent === null || membership.parentHosts === null) {
+    parent = membershipCheck('parentHost.member', 'unmeasured', membership.intent === null
+      ? `intent ledger unavailable (repository checkout required)${membership.intentError ? `: ${membership.intentError}` : ''}`
+      : `taskAgent.parentHost unavailable${membership.parentHostsError ? `: ${membership.parentHostsError}` : ''}`, parentExpected);
+  } else if (!intent) {
+    parent = membershipCheck('parentHost.member', 'fail', 'host absent from fleet intent', parentExpected);
+  } else {
+    const rows = membership.parentHosts.filter((row) => row.host === host);
+    const row = rows[0];
+    if (intent.cap === 0) parent = membershipCheck('parentHost.member', rows.length === 0 ? 'pass' : 'fail', rows.length === 0 ? 'disabled in both intent and parent config' : 'disabled host still in parent config', 'host absent from taskAgent.parentHost (cap 0)');
+    else if (!row) parent = membershipCheck('parentHost.member', 'fail', 'host absent from taskAgent.parentHost', parentExpected);
+    else if (rows.length !== 1 || row.podPool !== intent.podPool || row.approvalCapacity !== intent.cap) {
+      parent = membershipCheck('parentHost.member', 'fail', `host entries ${rows.length} · pool ${row.podPool ?? '(missing)'} · cap ${row.approvalCapacity ?? '(missing)'}`, parentExpected);
+    } else parent = membershipCheck('parentHost.member', 'pass', `host ${host} · pool ${row.podPool} · cap ${row.approvalCapacity}`, parentExpected);
+  }
+  return [registry, parent];
 }
 
 /** 원격 `uname -s` ⊕ `/proc/version` 의 microsoft 로 darwin|linux|wsl. 못 재면 null. */
@@ -344,9 +406,14 @@ export function runHostDoctor(options: HostDoctorOptions): HostDoctorReport {
   const platform = reached ? detectHostDoctorPlatform(remote, host) : null;
   const arch = reached ? detectHostDoctorArch(remote, host) : null;
   const specs = HOST_DOCTOR_CHECKS.filter((spec) => spec.roles.includes(role));
-  const checks = reached
+  const remoteChecks = reached
     ? specs.map((spec) => runCheck(spec, { host, remote, role, platform, arch, expected }))
     : specs.map((spec) => unmeasuredBecauseUnreached(spec, { platform, arch, expected }));
+  const checks = [...remoteChecks, ...(role === 'worker' && options.membership ? checkHostMembership(host, platform, options.membership) : [])];
+  const mismatch = checks.filter((check) => (check.id === 'registry.member' || check.id === 'parentHost.member') && check.status === 'fail');
+  if (mismatch.length) debug.log('fleet.doctor', 'membership-mismatch', { host, checks: mismatch.map((check) => ({ id: check.id, observed: check.observed, expected: check.expected })) });
+  const membershipUnmeasured = checks.filter((check) => (check.id === 'registry.member' || check.id === 'parentHost.member') && check.status === 'unmeasured');
+  if (membershipUnmeasured.length) debug.log('fleet.doctor', 'membership-unmeasured', { host, checks: membershipUnmeasured.map((check) => ({ id: check.id, observed: check.observed })) });
   const fail = checks.filter((check) => check.status === 'fail').map((check) => check.id);
   const unmeasured = checks.filter((check) => check.status === 'unmeasured').map((check) => check.id);
   const measuredAt = (options.now ?? (() => new Date()))().toISOString();
@@ -365,9 +432,13 @@ export function runHostDoctor(options: HostDoctorOptions): HostDoctorReport {
   };
 }
 
-/** 사람 출력 한 줄씩 — «✓|✗|→ <id> <한 줄>» 문법(node-setup.sh --check 와 같다). */
+/** 사람 출력 한 줄씩 — 기본은 «✓|✗|→ <id> <한 줄>»(node-setup.sh --check),
+ *  membership 미측정은 눈에 보이는 «⚠ <id> unmeasured: <원인>»을 쓴다. */
 export function formatHostDoctorLines(report: HostDoctorReport): string[] {
   return report.checks.map((check) => {
+    if ((check.id === 'registry.member' || check.id === 'parentHost.member') && check.status === 'unmeasured') {
+      return `⚠ ${check.id} unmeasured: ${check.observed}`;
+    }
     const mark = check.status === 'pass' ? '✓' : check.status === 'fail' ? '✗' : '→';
     const detail = check.status === 'fail' ? `${check.observed} (expected: ${check.expected})` : check.observed;
     return `${mark} ${check.id} ${detail}`;

package/src/graph-runner/runner.ts

@@ -26,6 +26,7 @@ import type { BashNode, NodeExecContext, WorkflowDeps } from '../workflow-runtim
 import { releaseResumeAcceptedRegressions, releaseResumeGateExecutor, releaseResumeWaiver, type AcceptedRegression, type GateExecutorOverride } from '../../scripts/release-loop/resume.js';
 
 type BashRun = WorkflowDeps['runBash'];
+const DEFAULT_BASH_TIMEOUT_MS = 5 * 60 * 1_000;
 
 export interface GraphRunState {
   graphId: string;
@@ -878,7 +879,8 @@ export async function runGraph(path: string, options: GraphRunOptions = {}): Pro
       env.ELANOUS_GRAPH_DRY_RUN = state.dryRun ? '1' : '0';
       env.ELANOUS_GRAPH_DIR = dirname(resolve(path));
       const ctx = { arguments: '', artifactsDir: dirname(statePath), outputs: {}, resolvedProvider: undefined, resolvedModel: undefined, toolPolicy: {}, env } as NodeExecContext;
-      const result = await executeBashNode({ id: current, type: 'bash', bash: state.dryRun ? command.dry_run_command! : command.command, ...(command.timeout_ms ? { idle_timeout: command.timeout_ms } : {}) } as BashNode, ctx, { runBash } as WorkflowDeps);
+      const result = await executeBashNode({ id: current, type: 'bash', bash: state.dryRun ? command.dry_run_command! : command.command,
+        idle_timeout: command.timeout_ms ?? DEFAULT_BASH_TIMEOUT_MS } as BashNode, ctx, { runBash } as WorkflowDeps);
       output = result.output;
       ok = result.ok;
       exit = code;