elanous 0.2.25 → 0.2.28

package/src/cli/release-cli.ts

@@ -28,7 +28,7 @@ import { effectiveInstanceRoot, releaseLedgerRoot } from '../instance/resolve.js
 import { getElanousConfigDirOverride } from '../elanous-config-dir.js';
 import { envLiteral } from '../platform/env-literal.js';
 import { getUserConfig, userConfigPath } from '../user-config.js';
-import { addItem, cellsReferencingDoc, claimItem, decodeClaimHistoryEntry, devVersion, lintDocRefs, listChecklist, normalizeRefs, ownerMatches, parseOwner, parityGap, refRoots, removeItem, renderRefsStatus, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus, type ChecklistDisposition, type ChecklistKind } from '../release-loop/checklist.js';
+import { addItem, cellsReferencingDoc, claimItem, decodeClaimHistoryEntry, devVersion, inspectChecklistTargetPaths, lintDocRefs, listChecklist, normalizeRefs, ownerMatches, parseOwner, parityGap, refRoots, removeItem, renderRefsStatus, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus, type ChecklistDisposition, type ChecklistKind, type ChecklistDispatchKind } from '../release-loop/checklist.js';
 import * as features from '../release-loop/feature-store.js';
 import { evidencePlan, landedButYellow, type MergedChecklistPr } from '../release-loop/landed-but-yellow.js';
 import { formatSchedule, getSchedule, listSchedules, setSchedule } from '../release-loop/release-schedule.js';
@@ -53,6 +53,7 @@ import { autoStartScheduledRelease, type AutoStartDeferral } from '../release-lo
 import { runRehearsalTick, type RehearsalDeps } from '../release-loop/rehearsal.js';
 import { landingFreezeMessage, LandingFrozenError, readLandingFreeze } from '../release-loop/landing-freeze.js';
 import { formatLightRc, runLightRc, type LightRcDeps } from '../release-loop/light-rc.js';
+import { registerRfcCommands } from './rfc-cli.js';
 
 export const DEFAULT_PUBLIC_REPO = 'ElanvitalAI/elanous';
 const SEMVER = /^\d+\.\d+\.\d+(?:-(?:rc|alpha|beta)\.\d+)?$/;
@@ -488,6 +489,28 @@ async function jsonAction<T>(json: boolean | undefined, body: (log: (l: string)
   }
 }
 
+function warnChecklistTargetPaths(input: { title: string; evidence?: string; refs?: readonly string[]; dispatchKind?: ChecklistDispatchKind }): void {
+  const cwd = process.cwd();
+  const existsAtMain = (path: string): boolean => {
+    if (path.startsWith('/') || path.split('/').includes('..')) return false;
+    const result = spawnSync('git', ['cat-file', '-e', `origin/main:${path}`], { cwd, timeout: 5_000, stdio: 'ignore' });
+    return result.status === 0;
+  };
+  const mergedPrFiles = (number: number): string[] => {
+    const result = spawnSync('gh', ['pr', 'view', String(number), '--json', 'state,files'], { cwd, encoding: 'utf8', timeout: 10_000 });
+    if (result.status !== 0) return [];
+    try {
+      const pr = JSON.parse(result.stdout) as { state?: string; files?: Array<{ path?: string }> };
+      return pr.state === 'MERGED' ? (pr.files ?? []).map((file) => file.path).filter((path): path is string => typeof path === 'string') : [];
+    } catch { return []; }
+  };
+  const report = inspectChecklistTargetPaths(input, { existsAtMain, mergedPrFiles });
+  for (const warning of report.warnings) {
+    console.error(`⚠ 대상 경로: ${warning}${report.candidates.length ? ` · 후보: ${report.candidates.join(' · ')}` : ''}`);
+    debug.log('release.checklist', 'target-path-warning', { warning, candidates: report.candidates });
+  }
+}
+
 function checklistCodenames(): Record<string, string> {
   const path = getElanousConfigDirOverride() ? join(effectiveInstanceRoot(), 'config.json') : userConfigPath();
   if (!existsSync(path)) return {};
@@ -601,6 +624,7 @@ function compareReleaseVersions(a: string, b: string): number {
 }
 
 export function registerReleaseCommands(program: Command, releaseRunDeps: UnattendedReleaseDeps = {}, landedDeps: LandedButYellowDeps = {}, hqDeps: HqDeps = {}, lightRcDeps: LightRcDeps = {}, rehearsalDeps: RehearsalDeps = {}): void {
+  registerRfcCommands(program);
   const release = program.command('release').description('공개 배포 한 판 — prepare(로컬) → publish(--yes) → verify (docs/manual/MANUAL-versioning-and-release-2026-09-25.md)');
   const schedule = release.command('schedule').description('판별 컷·착지 마감 조회·갱신');
   const scheduleLedgerRoot = () => releaseRunDeps.ledgerRoot ?? releaseLedgerRoot();
@@ -815,7 +839,7 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
         process.exitCode = 1;
       }
     });
-  withContext(checklist.command('add <id> <title>').description('칸 추가')).option('--owner <owner>', '담당').option('--kind <kind>', 'screen = 다섯 화면 짝 칸 · 근거에 짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 … 한 줄 · postpub = 발행 뒤 실측 칸 — 판 관문이 발행 전 판정에서 빼고 따로 센다')
+  withContext(checklist.command('add <id> <title>').description('칸 추가')).option('--owner <owner>', '담당').option('--kind <kind>', 'screen = 다섯 화면 짝 칸 · 근거에 짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 … 한 줄 · postpub = 발행 뒤 실측 칸 — 판 관문이 발행 전 판정에서 빼고 따로 센다 · code|ops|measure|decision|umbrella = 발사 분류')
     .option('--priority <priority>', 'P0|P1|P2').option('--deadline-version <v>', '마감 판').option('--predecessor <id...>', '선행 칸 id')
     .option('--ceo-minutes <minutes>', '대표 손 분량(분)').option('--ceo-date <date>', '대표 손 날짜 YYYY-MM-DD (없으면 판 착지일 KST)')
     .option('--accelerator', '가속 등급 — 다른 칸의 처리량을 올리는 칸(자율성·효율성·동시성). 생략하면 등급 없음')
@@ -824,12 +848,14 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
     .action((id: string, title: string, opts: { ref?: string[]; owner?: string; kind?: string; priority?: string; deadlineVersion?: string; predecessor?: string[]; ceoMinutes?: string; ceoDate?: string; accelerator?: boolean; allowDuplicateId?: boolean }, cmd: Command) => {
     const { version, json } = context(cmd);
     if (!mayWrite(cmd)) return;
-    const data = addItem(version, { id, title, ...(opts.ref !== undefined ? { refs: opts.ref } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}), ...(opts.priority !== undefined ? { priority: opts.priority as PlacementPriority } : {}), ...(opts.deadlineVersion !== undefined ? { deadlineVersion: opts.deadlineVersion } : {}), ...(opts.predecessor !== undefined ? { predecessors: opts.predecessor } : {}), ...(opts.ceoMinutes !== undefined ? { ceoMinutes: ceoMinutes(opts.ceoMinutes) } : {}), ...(opts.ceoDate !== undefined ? { ceoDate: opts.ceoDate } : {}), ...(opts.accelerator ? { accelerator: true } : {}) }, { allowDuplicateId: opts.allowDuplicateId });
+    const dispatchKind = opts.kind && !['screen', 'postpub'].includes(opts.kind) ? opts.kind as ChecklistDispatchKind : undefined;
+    const data = addItem(version, { id, title, ...(opts.ref !== undefined ? { refs: opts.ref } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.kind !== undefined && !dispatchKind ? { kind: opts.kind as ChecklistKind } : {}), ...(dispatchKind ? { dispatchKind } : {}), ...(opts.priority !== undefined ? { priority: opts.priority as PlacementPriority } : {}), ...(opts.deadlineVersion !== undefined ? { deadlineVersion: opts.deadlineVersion } : {}), ...(opts.predecessor !== undefined ? { predecessors: opts.predecessor } : {}), ...(opts.ceoMinutes !== undefined ? { ceoMinutes: ceoMinutes(opts.ceoMinutes) } : {}), ...(opts.ceoDate !== undefined ? { ceoDate: opts.ceoDate } : {}), ...(opts.accelerator ? { accelerator: true } : {}) }, { allowDuplicateId: opts.allowDuplicateId });
+    warnChecklistTargetPaths({ title, refs: opts.ref, dispatchKind });
     if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 추가`);
   });
   withContext(checklist.command('set <id>').description('칸 상태·근거·담당·처분 갱신'))
     .option('--status <status>', 'green|yellow|red|done').option('--evidence <evidence>', '근거').option('--owner <owner>', '담당')
-    .option('--disposition <disposition>', 'move|known-issue|block').option('--kind <kind>', 'screen = 다섯 화면 짝 칸 · 근거에 짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 … 한 줄 · postpub = 발행 뒤 실측 칸 — 판 관문이 발행 전 판정에서 빼고 따로 센다')
+    .option('--disposition <disposition>', 'move|known-issue|block').option('--kind <kind>', 'screen = 다섯 화면 짝 칸 · 근거에 짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 … 한 줄 · postpub = 발행 뒤 실측 칸 — 판 관문이 발행 전 판정에서 빼고 따로 센다 · code|ops|measure|decision|umbrella = 발사 분류')
     .option('--priority <priority>', 'P0|P1|P2').option('--deadline-version <v>', '마감 판').option('--predecessor <id...>', '선행 칸 id').option('--no-predecessor', '선행 칸 비우기(진짜 의존이 아니면 · CHECKLIST-PRED-CLEAR)')
     .option('--ceo-minutes <minutes>', '대표 손 분량(분)').option('--ceo-date <date>', '대표 손 날짜 YYYY-MM-DD')
     .option('--accelerator', '가속 등급 부여').option('--no-accelerator', '가속 등급 해제(기본은 없음)')
@@ -840,7 +866,8 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
       if (opts.disposition !== undefined && !['move', 'known-issue', 'block'].includes(opts.disposition)) throw new CliUserError(`잘못된 처분: ${opts.disposition}`, 'move|known-issue|block');
       if (opts.status === undefined && opts.evidence === undefined && opts.owner === undefined && opts.disposition === undefined && opts.kind === undefined && opts.priority === undefined && opts.deadlineVersion === undefined && opts.predecessor === undefined && opts.ceoMinutes === undefined && opts.ceoDate === undefined && opts.accelerator === undefined && opts.ref === undefined) throw new CliUserError('갱신할 칸을 지정하라', '--ref · --status · --evidence · --owner · --disposition · --kind · --priority · --deadline-version · --predecessor · --ceo-minutes · --ceo-date · --accelerator · --no-accelerator 중 하나');
       if (!mayWrite(cmd)) return;
-      const data = setItem(version, id, { ...(opts.ref !== undefined ? { refs: opts.ref } : {}), ...(opts.status !== undefined ? { status: opts.status as ChecklistStatus } : {}), ...(opts.evidence !== undefined ? { evidence: opts.evidence } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.disposition !== undefined ? { disposition: opts.disposition as ChecklistDisposition } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}), ...(opts.priority !== undefined ? { priority: opts.priority as PlacementPriority } : {}), ...(opts.deadlineVersion !== undefined ? { deadlineVersion: opts.deadlineVersion } : {}), ...(opts.predecessor !== undefined ? { predecessors: opts.predecessor === false ? [] : opts.predecessor } : {}), ...(opts.ceoMinutes !== undefined ? { ceoMinutes: ceoMinutes(opts.ceoMinutes) } : {}), ...(opts.ceoDate !== undefined ? { ceoDate: opts.ceoDate } : {}), ...(opts.accelerator !== undefined ? { accelerator: opts.accelerator ? true : null } : {}) }, process.env.ELANOUS_TRACK || 'cli');
+      const dispatchKind = opts.kind && !['screen', 'postpub'].includes(opts.kind) ? opts.kind as ChecklistDispatchKind : undefined;
+      const data = setItem(version, id, { ...(opts.ref !== undefined ? { refs: opts.ref } : {}), ...(opts.status !== undefined ? { status: opts.status as ChecklistStatus } : {}), ...(opts.evidence !== undefined ? { evidence: opts.evidence } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.disposition !== undefined ? { disposition: opts.disposition as ChecklistDisposition } : {}), ...(opts.kind !== undefined && !dispatchKind ? { kind: opts.kind as ChecklistKind } : {}), ...(dispatchKind ? { dispatchKind } : {}), ...(opts.priority !== undefined ? { priority: opts.priority as PlacementPriority } : {}), ...(opts.deadlineVersion !== undefined ? { deadlineVersion: opts.deadlineVersion } : {}), ...(opts.predecessor !== undefined ? { predecessors: opts.predecessor === false ? [] : opts.predecessor } : {}), ...(opts.ceoMinutes !== undefined ? { ceoMinutes: ceoMinutes(opts.ceoMinutes) } : {}), ...(opts.ceoDate !== undefined ? { ceoDate: opts.ceoDate } : {}), ...(opts.accelerator !== undefined ? { accelerator: opts.accelerator ? true : null } : {}) }, process.env.ELANOUS_TRACK || 'cli');
       const item = data.items.find((entry) => entry.id === id);
       const why = item?.kind === 'screen' && item.status === 'green' ? parityGap(item.evidence) : null;
       if (why) {
@@ -891,6 +918,8 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
     if (!mayWrite(cmd)) return;
     const snapshot = listChecklist(version);
     features.retitle(id, title, actor(), snapshot.released, snapshot.dev);
+    const item = snapshot.items.find((entry) => entry.id === id);
+    warnChecklistTargetPaths({ title, evidence: item?.evidence, refs: item?.refs, dispatchKind: item?.dispatchKind });
     if (json) console.log(JSON.stringify(listChecklist(version))); else console.log(`✅ ${id} 제목 수정`);
   });
   const evidence = checklist.command('evidence').description('칸의 PR·커밋 근거');

package/src/cli/rfc-cli.ts

@@ -0,0 +1,24 @@
+import type { Command } from 'commander';
+import { CliUserError } from './cli-user-error.js';
+import { listRfcs, showRfc } from '../rfc-registry/registry.js';
+
+/** RFC-REGISTRY first slice: list/show initialize an empty registry if needed, then only read rows. */
+export function registerRfcCommands(program: Command): void {
+  const rfc = program.command('rfc').description('RFC registry (list/show initialize the database when absent)');
+  rfc.command('list').description('registered RFCs').option('--json', 'JSON rows')
+    .action((opts: { json?: boolean }) => {
+      const rows = listRfcs();
+      if (opts.json) console.log(JSON.stringify(rows));
+      else for (const row of rows) console.log(`${row.id} · ${row.status} · ${row.title}`);
+    });
+  rfc.command('show <id>').description('RFC and its items').option('--json', 'JSON record')
+    .action((id: string, opts: { json?: boolean }) => {
+      const row = showRfc(id);
+      if (!row) throw new CliUserError(`없는 RFC: ${id}`);
+      if (opts.json) console.log(JSON.stringify(row));
+      else {
+        console.log(`${row.id} · ${row.status} · ${row.title}`);
+        for (const item of row.items) console.log(`  ${item.id} · ${item.status} · ${item.title}${item.links.length ? ` → ${item.links.map((link) => link.target_item_id).join(', ')}` : ''}`);
+      }
+    });
+}

package/src/cli/seat-cli.ts

@@ -0,0 +1,121 @@
+import type { Command } from 'commander';
+import { existsSync, lstatSync, readFileSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, relative, sep } from 'node:path';
+import { redactSecretText } from '../debug/log.js';
+import { defaultMsgStorePath, readUnreadCount } from '../msg/msg-store.js';
+
+export const SEAT_ROLES = ['OP', 'TC', 'MK', 'UX'] as const;
+export type SeatRole = typeof SEAT_ROLES[number];
+
+const MAX_FIELD = 160;
+const MAX_ROWS = 12;
+const clean = (value: unknown): string => redactSecretText(String(value ?? '').replace(/[\r\n\t]+/g, ' ').trim()).slice(0, MAX_FIELD);
+const safeObject = (value: unknown, keys: readonly string[]): Record<string, string> => {
+  const source = value !== null && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {};
+  return Object.fromEntries(keys.filter(key => source[key] !== undefined && source[key] !== null).map(key => [key, clean(source[key])]));
+};
+
+function isRegularSeatPath(home: string, root: string, path: string): boolean {
+  const suffix = relative(root, path);
+  if (!suffix || suffix === '..' || suffix.startsWith(`..${sep}`) || suffix.startsWith(sep)) return false;
+  if (!lstatSync(home).isDirectory()) return false;
+  let parent = home;
+  for (const part of relative(home, dirname(path)).split(sep).filter(Boolean)) {
+    parent = join(parent, part);
+    if (!lstatSync(parent).isDirectory()) return false;
+  }
+  return lstatSync(path).isFile();
+}
+
+function metadata(home: string, root: string, path: string, kind: 'markdown' | 'tsv' | 'memory'): { source: string; updated: string; rows: string[]; reason?: string } {
+  if (!existsSync(path)) return { source: path, updated: '미상', rows: [], reason: '미관측: 파일 없음' };
+  try {
+    if (!isRegularSeatPath(home, root, path)) return { source: path, updated: '미상', rows: [], reason: '미관측: 일반 경로가 아님' };
+    const updated = statSync(path).mtime.toISOString();
+    const text = readFileSync(path, 'utf8').slice(0, 256_000);
+    let rows: string[] = [];
+    if (kind === 'tsv') {
+      const headers = (text.split(/\r?\n/, 1)[0] ?? '').split('\t');
+      const allowed = kind === 'tsv' && path.endsWith('harvest-claims.tsv') ? ['pr', 'claimer', 'at', 'status'] : ['at', 'what', 'then'];
+      const indexes = allowed.map(key => headers.indexOf(key));
+      rows = text.split(/\r?\n/).slice(1).filter(Boolean).slice(0, MAX_ROWS).map(line => {
+        const cells = line.split('\t');
+        return allowed.map((key, i) => indexes[i] < 0 ? '' : `${key}=${clean(cells[indexes[i]])}`).filter(Boolean).join(' · ');
+      }).filter(Boolean);
+    } else if (kind === 'memory') {
+      rows = text.split(/\r?\n/).filter(line => /^#{1,6}\s/.test(line)).slice(0, MAX_ROWS).map(line => clean(line.replace(/^#+\s*/, '')));
+    } else {
+      rows = text.split(/\r?\n/).filter(line => (/^#{1,6}\s/.test(line) || /^(?:[-*]\s*)?(?:from|발신|시각|at)\s*[:：]/i.test(line)) && !/[`$;|<>]/.test(line)).slice(0, MAX_ROWS).map(line => {
+        const from = line.match(/^(?:[-*]\s*)?(?:from|발신)\s*[:：]\s*(OP|TC|MK|UX)\b/i);
+        if (/^(?:[-*]\s*)?(?:from|발신)\s*[:：]/i.test(line)) return from ? `From: ${from[1]!.toUpperCase()}` : '';
+        return clean(line.replace(/^#{1,6}\s*/, ''));
+      }).filter(Boolean);
+    }
+    return { source: path, updated, rows, ...(rows.length ? {} : { reason: '미관측: 허용된 메타데이터 없음' }) };
+  } catch {
+    return { source: path, updated: '미상', rows: [], reason: '미관측: 읽기 실패' };
+  }
+}
+
+function contextFacts(snapshot: unknown): string[] {
+  const root = snapshot !== null && typeof snapshot === 'object' && !Array.isArray(snapshot) ? snapshot as Record<string, unknown> : {};
+  const facts: string[] = [];
+  const sourceFacts = Array.isArray(root.facts) ? root.facts as unknown[] : [];
+  for (const item of sourceFacts.slice(0, MAX_ROWS)) {
+    const value = item !== null && typeof item === 'object' && !Array.isArray(item) ? item as Record<string, unknown> : {};
+    const keys = value.kind === 'cell' ? ['id', 'status', 'owner', 'version', 'source']
+      : value.kind === 'seat' ? ['seat', 'at', 'status', 'id', 'source']
+      : value.kind === 'run' ? ['phase', 'elapsed', 'source'] : [];
+    const values = safeObject(value, keys);
+    if (Object.keys(values).length) facts.push(`${clean(value.kind)}: ${Object.entries(values).map(([k, v]) => `${k}=${v}`).join(' · ')}`);
+  }
+  const sourceEvents = Array.isArray(root.events) ? root.events as unknown[] : [];
+  for (const item of sourceEvents.slice(0, MAX_ROWS)) {
+    const values = safeObject(item, ['at', 'kind', 'source', 'summary']);
+    if (Object.keys(values).length) facts.push(`event: ${Object.entries(values).map(([k, v]) => `${k}=${v}`).join(' · ')}`);
+  }
+  return facts.slice(0, MAX_ROWS);
+}
+
+export function renderSeatBootCard(seat: SeatRole, sections: ReadonlyArray<{ title: string; source: string; updated: string; rows: readonly string[]; reason?: string }>, facts: readonly string[], contextUpdated = '미상'): string {
+  const out = [`# ${seat} 자리 부팅 카드`, '', '## 현재 구조화 관측', '출처: elanous://context-now', `갱신: ${clean(contextUpdated)}`, ...(facts.length ? facts.map(row => `- ${clean(row)}`) : ['- 미관측: contextNow 구조화 facts/events 없음'])];
+  for (const section of sections) out.push('', `## ${section.title}`, `출처: ${clean(section.source)}`, `갱신: ${clean(section.updated)}`, ...(section.rows.length ? section.rows.map(row => `- ${clean(row)}`) : [`- ${clean(section.reason ?? '미관측')}`]));
+  return out.join('\n');
+}
+
+export function registerSeatBootCommands(command: Command, options: { home?: () => string; contextNow?: () => unknown; msgPath?: () => string } = {}): void {
+  command.command('boot <seat>').description('현재 자리 카드 — 허용된 메타데이터만 읽기 전용 표시')
+    .action(async (rawSeat: string) => {
+      const seat = rawSeat.toUpperCase();
+      if (!(SEAT_ROLES as readonly string[]).includes(seat)) { console.error(`seat boot: unknown seat ${rawSeat} (OP|TC|MK|UX)`); process.exitCode = 2; return; }
+      const home = options.home?.() ?? homedir();
+      const root = join(home, 'elanous-hq', 'seat-state');
+      let facts: string[] = [];
+      let contextUpdated = '미상';
+      try {
+        const snapshot = options.contextNow ? options.contextNow() : await (async () => {
+          const mod = await import('../context-bus/context-now.js');
+          return (mod.contextNow as unknown as (options: { audience: string }) => unknown)({ audience: 'operator' });
+        })();
+        const context = snapshot !== null && typeof snapshot === 'object' ? snapshot as Record<string, unknown> : {};
+        contextUpdated = typeof context.at === 'string' ? clean(context.at) : '시각 미관측';
+        facts = contextFacts(snapshot);
+      } catch { facts = []; contextUpdated = '미관측: contextNow 조회 실패'; }
+      const seatDir = join(root, seat);
+      const msgPath = options.msgPath?.() ?? defaultMsgStorePath();
+      let unread: number | null = null;
+      try { unread = readUnreadCount(seat, msgPath); }
+      catch { /* unavailable is not a measured zero */ }
+      const sections = [
+        { title: 'msg 원장', source: msgPath, updated: unread === null ? '미상' : new Date().toISOString(), rows: [`안 읽은 msg ${unread ?? '미관측'} (${seat})`] },
+        { title: 'HANDOFF', ...metadata(home, root, join(seatDir, 'HANDOFF.md'), 'markdown') },
+        { title: 'inbox', ...metadata(home, root, join(seatDir, 'inbox.md'), 'markdown') },
+        { title: '수확 주장', ...metadata(home, root, join(seatDir, 'harvest-claims.tsv'), 'tsv') },
+        { title: '예약', ...metadata(home, root, join(seatDir, 'scheduled.tsv'), 'tsv') },
+        { title: '공통 메모리 색인', ...metadata(home, root, join(root, 'memory', 'MEMORY.md'), 'memory') },
+      ];
+      console.log(renderSeatBootCard(seat as SeatRole, sections, facts, contextUpdated));
+    });
+}
+

package/src/cli/self-utterances-cli.ts

@@ -0,0 +1,140 @@
+import type { Command } from 'commander';
+import { Database } from 'bun:sqlite';
+import { redactSecretText } from '../debug/log.js';
+import { openSurfaceEventsDb, querySurfaceUtterances, surfaceEventsDbPath, type SurfaceEventRow } from '../domains/surface-events.js';
+import { injectUtterance, type UtteranceInput } from '../domains/self-awareness.js';
+import { writeStdoutJson } from './stdout-json.js';
+
+const PAGE_SIZE = 50;
+type UtteranceOrigin = 'human' | 'agent' | 'unknown';
+
+function refsOf(raw: string | null): Record<string, unknown> {
+  if (!raw) return {};
+  try {
+    const value: unknown = JSON.parse(raw);
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {};
+  } catch { return {}; }
+}
+
+function redact(value: string): string {
+  return redactSecretText(value)
+    .replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi, '[REDACTED_EMAIL]')
+    .replace(/(https?:\/\/[^\s?#]+)\?[^\s#]*/gi, '$1?[REDACTED_QUERY]');
+}
+
+function isAutomatic(row: SurfaceEventRow): boolean {
+  const refs = refsOf(row.refs);
+  if (row.surface === 'coord:channel' || row.surface === 'coord:seat' || refs.origin === 'coord:channel') return true;
+  const seatSource = typeof refs.origin === 'string' && /^(?:seat|seat-notice|notification|wake|coord:seat)$/i.test(refs.origin);
+  if (seatSource) return true;
+  if (refs.origin === 'observer' || refs.origin === 'observer-generated' || /observer-generated/i.test(row.tags ?? '')) return true;
+  if (row.kind === 'qna' && /^(?:telegram|discord)$/i.test(row.surface)) return false;
+  if (refs.origin === 'human' || refs.origin === 'user') return false;
+  return false;
+}
+
+function originOf(row: SurfaceEventRow): UtteranceOrigin {
+  if (row.direction !== 'inbound') return 'unknown';
+  const refs = refsOf(row.refs);
+  if (refs.utteranceOrigin === 'human' || refs.utteranceOrigin === 'agent') return refs.utteranceOrigin;
+  const explicit = refs.origin;
+  if (typeof explicit === 'string') {
+    if (/^(?:human|user|tui|pwa|telegram|discord|cli)$/i.test(explicit)) return 'human';
+    if (/^(?:claude-code|codex|gemini|agent|external:)/i.test(explicit)) return 'agent';
+  }
+  // recordInboundTurn marks its recorder as elanous-self; on chat Q&A the speaker is the human.
+  if (row.kind === 'qna' && /^(?:telegram|discord)$/i.test(row.surface)) return 'human';
+  if (explicit === 'elanous-self') return 'agent';
+  if (/^ext:/i.test(row.surface)) return 'agent';
+  if (/^(?:cli|tui|pwa|telegram|discord|ipad|watch)$/i.test(row.surface)) return 'human';
+  return 'unknown';
+}
+
+function utteranceText(row: SurfaceEventRow): { text: string; extract: 'direct' | 'qna' | 'ambiguous' | 'summary'; truncated: boolean; truncationEvidence: 'cap-reached' | 'over-cap' | null; possibleLoss: boolean } {
+  if (row.kind !== 'qna') return { text: row.text, extract: 'direct', truncated: false, truncationEvidence: null, possibleLoss: false };
+  const firstAnswer = row.text.startsWith('Q: ') ? row.text.indexOf('\nA: ', 3) : -1;
+  if (firstAnswer >= 0) {
+    const ambiguous = row.text.indexOf('\nQ: ', 3) >= 0 || row.text.indexOf('\nA: ', firstAnswer + 4) >= 0;
+    return { text: row.text.slice(3, firstAnswer), extract: ambiguous ? 'ambiguous' : 'qna', truncated: false, truncationEvidence: null, possibleLoss: ambiguous };
+  }
+  const summary = row.summary ?? '';
+  return { text: summary.slice(0, 150), extract: 'summary', truncated: summary.length > 150, truncationEvidence: summary.length > 150 ? 'over-cap' : summary.length === 150 ? 'cap-reached' : null, possibleLoss: false };
+}
+
+function validDate(value: string, name: string): string {
+  const date = new Date(value);
+  if (!value || !Number.isFinite(date.getTime()) || !/^\d{4}-\d\d-\d\d(?:T.*)?$/.test(value)) throw new Error(`--${name} must be a valid ISO date/time`);
+  return date.toISOString();
+}
+
+interface SelfUtterancesOptions {
+  from: string; to: string; surface?: string; origin?: UtteranceOrigin; page?: string; json?: boolean;
+}
+
+export function collectSelfUtterances(opts: SelfUtterancesOptions, db: ReturnType<typeof openSurfaceEventsDb>) {
+  const from = validDate(opts.from, 'from');
+  const to = validDate(opts.to, 'to');
+  if (from >= to) throw new Error('--from must be earlier than --to');
+  const page = opts.page === undefined ? 1 : Number(opts.page);
+  if (!Number.isSafeInteger(page) || page < 1) throw new Error('--page must be a positive integer');
+  const rows = querySurfaceUtterances(db, { from, to, ...(opts.surface ? { surface: opts.surface } : {}) });
+  let excludedAutomatic = 0;
+  let excludedByOrigin = 0;
+  let ambiguous = 0;
+  let truncated = 0;
+  let capReached = 0;
+  let possibleLoss = 0;
+  let excludedUnextractable = 0;
+  const utterances = rows.flatMap((row) => {
+    if (isAutomatic(row)) { excludedAutomatic += 1; return []; }
+    const origin = originOf(row);
+    if (opts.origin && origin !== opts.origin) { excludedByOrigin += 1; return []; }
+    const refs = refsOf(row.refs);
+    const cwd = typeof refs.cwd === 'string' && refs.cwd.length > 0 && !/[\u0000-\u001f\u007f]/.test(refs.cwd) ? redact(refs.cwd) : null;
+    const extracted = utteranceText(row);
+    if (row.kind === 'qna' && extracted.text.trim() === '') { excludedUnextractable += 1; return []; }
+    if (extracted.extract === 'ambiguous') ambiguous += 1;
+    if (extracted.truncated) truncated += 1;
+    if (extracted.truncationEvidence === 'cap-reached') capReached += 1;
+    if (extracted.possibleLoss) possibleLoss += 1;
+    return [{ id: redact(row.id), ts: redact(row.ts), surface: redact(row.surface), session: row.session_id ? redact(row.session_id) : null, cwd, origin, source: typeof refs.origin === 'string' ? redact(refs.origin) : 'unrecorded', text: redact(extracted.text), extract: extracted.extract, truncated: extracted.truncated, truncationEvidence: extracted.truncationEvidence, possibleLoss: extracted.possibleLoss }];
+  });
+  const total = utterances.length;
+  const start = (page - 1) * PAGE_SIZE;
+  return { source: 'surface_events.events (read-only)', filters: { from, to, surface: opts.surface ?? null, origin: opts.origin ?? null, automatic: 'excluded' }, counts: { matched: total, excludedAutomatic, excludedByOrigin, excludedUnextractable, ambiguous, truncated, capReached, possibleLoss }, page: { number: page, size: PAGE_SIZE, total, hasNext: start + PAGE_SIZE < total }, utterances: utterances.slice(start, start + PAGE_SIZE) };
+}
+
+export function recordSelfUtterance(input: UtteranceInput & { utteranceOrigin?: 'human' | 'agent' }, db?: Database): { eventId: string } {
+  const store = db ?? openSurfaceEventsDb();
+  try {
+    const result = injectUtterance(input, store);
+    if (input.utteranceOrigin === 'human') {
+      store.prepare("UPDATE events SET refs = json_set(refs, '$.utteranceOrigin', 'human') WHERE id = ?").run(result.eventId);
+    }
+    return result;
+  } finally { if (!db) store.close(); }
+}
+
+export function registerSelfUtterancesCommand(selfCmd: Command): void {
+  selfCmd.command('utterances').description('Read paginated original utterances from surface_events (read-only)')
+    .requiredOption('--from <ISO>', 'Inclusive ISO date/time')
+    .requiredOption('--to <ISO>', 'Exclusive ISO date/time')
+    .option('--surface <surface>', 'Filter by surface')
+    .option('--origin <origin>', 'Filter by known origin: human|agent')
+    .option('--page <page>', 'One-based page number', '1')
+    .option('--json', 'Emit JSON')
+    .action(async (opts: SelfUtterancesOptions) => {
+      if (opts.origin && opts.origin !== 'human' && opts.origin !== 'agent') throw new Error('--origin must be human or agent');
+      const db = new Database(surfaceEventsDbPath(), { readonly: true });
+      try {
+        const result = collectSelfUtterances(opts, db);
+        if (opts.json) { await writeStdoutJson(JSON.stringify(result, null, 2) + '\n'); return; }
+        console.log(`source=${result.source} matched=${result.counts.matched} excludedAutomatic=${result.counts.excludedAutomatic} excludedByOrigin=${result.counts.excludedByOrigin} excludedUnextractable=${result.counts.excludedUnextractable} page=${result.page.number} size=${result.page.size} hasNext=${result.page.hasNext}`);
+        console.log(`filters=${JSON.stringify(result.filters)}`);
+        for (const item of result.utterances) console.log(JSON.stringify(item));
+        console.log(`ambiguous=${result.counts.ambiguous} truncated=${result.counts.truncated} cap-reached=${result.counts.capReached} possibleLoss=${result.counts.possibleLoss}`);
+      } finally { db.close(); }
+    });
+}
+
+export { PAGE_SIZE };

package/src/cli/tailscale-serve.ts

@@ -1,17 +1,14 @@
 // Unified Tailscale Serve helper — single source of truth for the
 // two transport modes monad-agent uses on macOS:
 //
-//   - `https-443` — share the daemon on the host's standard HTTPS:443
-//                   (one Serve per host · used by `pwa share enable`
-//                   and the legacy `bringShareUp` auto-share path in
-//                   `pwa-start`). HTTP/2 forwarder · NOT WebSocket-
-//                   friendly (Upgrade returns 502).
+//   - `https-443` — explicit legacy mode on the host's standard HTTPS:443.
+//                   HTTP/2 forwarding does not preserve WebSocket Upgrade
+//                   (the daily PWA sharing path no longer selects it).
 //
 //   - `tls-tcp`   — per-port TLS terminator forwarding plaintext TCP
 //                   (HTTP/1.1) to a backend on `localhost:<port>`.
-//                   Used by `pwa test --https` for project-local
-//                   isolated dogfood. WebSocket Upgrade returns 101
-//                   (the iPad-side multi-LLM dispatch needs this).
+//                   Used by `pwa share enable`, `pwa-start` auto-share and
+//                   `pwa test --https`. WebSocket Upgrade returns 101.
 //
 // Why unify? Before this lift, `defaultServe` (https-443) and
 // `mountTailscaleTestServe` (tls-tcp) duplicated: