elanous 0.2.27 → 0.2.29

package/src/skills/tools/persistent-grounding.ts

@@ -1,8 +1,9 @@
 import { randomUUID } from 'node:crypto';
 import { realpath } from 'node:fs/promises';
 import { isAbsolute, relative, resolve, sep } from 'node:path';
-import { runGoalLoop, type CoreTurnContext, type CoreTurnDispatchTool, type GoalLoopOptions } from '../../core-turn/index.js';
+import { runGoalLoop, type CoreTurnContext, type CoreTurnDispatchTool, type GoalLoopOptions, type GoalLoopResult } from '../../core-turn/index.js';
 import { debug } from '../../debug/log.js';
+import { selectPlanningLlm } from '../../prompt-enhance/enhance.js';
 import type { LLMMessage, LLMToolSpec } from '../../llm.js';
 import { buildAstGrepTool, dispatchAstGrep, hasAstGrep } from './ast-grep.js';
 import { buildGlobTool, dispatchGlob } from './glob.js';
@@ -22,6 +23,8 @@ export interface PersistentGroundingDeps {
   relativePath?: (from: string, to: string) => string;
   /** Terms generated by an upstream grounding consumer; the loop must prioritize them for code discovery. */
   terms?: string[];
+  /** Authoring model selection seam; production follows the planning role, including the Pod relay. */
+  planningLlm?: () => Pick<ReturnType<typeof selectPlanningLlm>, 'model' | 'modelSource' | 'fallbackReason' | 'requestedModel' | 'requestedSource'>;
 }
 
 export interface PersistentGroundingResult {
@@ -212,6 +215,27 @@ function groundingMessages(goal: string, terms: readonly string[]): LLMMessage[]
   }];
 }
 
+function unreadEvidencePaths(evidence: string, readFiles: ReadonlySet<string>): string[] {
+  return Array.from(new Set(evidence.split(/\r?\n/)
+    .flatMap(repositoryRelativeCodePaths)
+    .filter((path) => isCodeRootPath(path) && !readFiles.has(path))));
+}
+
+function rejectedEvidenceFeedback(evidence: string, readFiles: ReadonlySet<string>): LLMMessage {
+  const unread = unreadEvidencePaths(evidence, readFiles);
+  const read = Array.from(readFiles).slice(0, 8);
+  return {
+    role: 'user',
+    content: [
+      'Your completion evidence was rejected: Glob, Grep, and ListDir prove discovery, but they do not verify a file for completion evidence.',
+      `Unverified paths: ${unread.length ? unread.join(', ') : '(none in allowed code roots)'}`,
+      `Paths actually Read: ${read.length ? read.join(', ') : '(none)'}`,
+      ...(unread.length ? [`Next tool calls: ${unread.map((path) => `Read({"file_path":"${path}"})`).join(' ; ')}`] : []),
+      'Before calling update_goal(status="complete"), Read at least one relevant path above and wait for its successful result. Cite only paths that this grounding run actually Read, each with a concrete reason. If a Read fails, omit that path. Finish by calling update_goal; ending with prose alone does not complete this task.',
+    ].join('\n'),
+  };
+}
+
 /** Bounded, shared, read-only grounding loop. Failure or no candidates returns null. */
 export async function groundPersistently(goal: string, cwd: string, deps: PersistentGroundingDeps = {}): Promise<PersistentGroundingResult | null> {
   const startedAt = performance.now();
@@ -228,7 +252,10 @@ export async function groundPersistently(goal: string, cwd: string, deps: Persis
   if (!astGrepAvailable) debug.log('grounding.persistent', 'tool-unavailable', { sessionId, tool: 'AstGrep' }, { level: 'warn' });
   const toolCalls: Record<string, number> = {};
   let completedIterations: number | undefined;
+  let resolvedProvider: string | undefined;
+  let resolvedModel: string | undefined;
   try {
+    const planningLlm = (deps.planningLlm ?? selectPlanningLlm)();
     const loop = deps.runGoalLoop ?? runGoalLoop;
     let completionEvidence = '';
     const readFiles = new Set<string>();
@@ -239,7 +266,12 @@ export async function groundPersistently(goal: string, cwd: string, deps: Persis
       dispatchTool: guardedDispatchTool(cwd, deps.dispatchTool, readFiles, deps.relativePath),
       signal: new AbortController().signal,
       maxToolTurns: 4,
+      ...(planningLlm.model ? { modelOverride: planningLlm.model } : {}),
       callbacks: {
+        onResolvedProvider: (provider, model) => {
+          resolvedProvider = provider;
+          resolvedModel = model;
+        },
         onToolCall: (call) => {
           toolCalls[call.name] = (toolCalls[call.name] ?? 0) + 1;
           if (call.name === 'update_goal' && call.args.status === 'complete' && typeof call.args.evidence === 'string') completionEvidence = call.args.evidence;
@@ -250,29 +282,92 @@ export async function groundPersistently(goal: string, cwd: string, deps: Persis
       },
     };
     const options: GoalLoopOptions = { maxIterations, objective: `Persistent repository grounding: ${goal.slice(0, 200)}` };
-    const result = await loop(ctx, options);
-    const verified = result.goalComplete && result.stopReason === 'goal_complete'
+    const first = await loop(ctx, options);
+    const firstVerified = first.goalComplete && first.stopReason === 'goal_complete'
       ? verifiedEvidenceFromCompletion(completionEvidence, readFiles)
       : {
         files: [],
         evidence: [],
         rejection: { noPath: 0, outsideRoot: 0, notRead: 0, noMeaningfulText: 0, samples: [] },
       };
+    let result = first;
+    let verified = firstVerified;
+    let feedbackRetry = false;
+    let retryIterations = 0;
+    let retryStopReason: GoalLoopResult['stopReason'] | undefined;
+    let retryOutcome: 'not-needed' | 'verified' | 'incomplete' | 'evidence-rejected' | 'failed' | 'aborted' | 'auth-rejected' = 'not-needed';
+    if (firstVerified.rejection.notRead > 0) {
+      feedbackRetry = true;
+      const feedback = rejectedEvidenceFeedback(completionEvidence, readFiles);
+      completionEvidence = '';
+      try {
+        const retry = await loop({ ...ctx, sessionId: `${sessionId}-evidence-retry`, messages: [...ctx.messages, feedback] },
+          { ...options, maxIterations: 2 });
+        retryIterations = retry.iterations;
+        retryStopReason = retry.stopReason;
+        retryOutcome = retry.goalComplete && retry.stopReason === 'goal_complete' ? 'evidence-rejected'
+          : retry.stopReason === 'auth_rejected' ? 'auth-rejected'
+            : retry.stopReason === 'aborted' || retry.stopReason === 'soft_stop' ? 'aborted'
+              : retry.stopReason === 'error' ? 'failed' : 'incomplete';
+        const retryVerified = retry.goalComplete && retry.stopReason === 'goal_complete'
+          ? verifiedEvidenceFromCompletion(completionEvidence, readFiles)
+          : null;
+        if (retryVerified) {
+          verified = {
+            files: Array.from(new Set([...firstVerified.files, ...retryVerified.files])),
+            evidence: Array.from(new Set([...firstVerified.evidence, ...retryVerified.evidence])),
+            rejection: retryVerified.rejection,
+          };
+          result = retry;
+          if (retryVerified.evidence.length > 0) retryOutcome = 'verified';
+        }
+      } catch (error) {
+        retryOutcome = 'failed';
+        try {
+          debug.log('grounding.persistent', 'evidence-retry-failed', { sessionId,
+            reason: error instanceof Error ? error.message.slice(0, 200) : String(error).slice(0, 200) }, { level: 'warn' });
+        } catch {
+          // A failed retry and its telemetry cannot erase evidence already verified by Read.
+        }
+      }
+    }
+    const totalIterations = first.iterations + retryIterations;
+    let stopReason: string = result.stopReason;
+    // A verified line remains useful evidence, but it cannot turn an unsuccessful
+    // feedback retry into a successful completion of the whole grounding task.
+    switch (retryOutcome) {
+      case 'incomplete': stopReason = 'evidence_retry_incomplete'; break;
+      case 'evidence-rejected': stopReason = 'evidence_retry_rejected'; break;
+      case 'failed': stopReason = retryStopReason === 'error' ? 'error' : 'evidence_retry_failed'; break;
+      case 'auth-rejected': stopReason = 'auth_rejected'; break;
+      case 'aborted': stopReason = retryStopReason === 'soft_stop' ? 'soft_stop' : 'aborted'; break;
+    }
     try {
       debug.log('grounding.persistent', 'finished', {
         sessionId,
         maxIterations,
         durationMs: durationMs(),
-      iterations: result.iterations,
-      stopReason: result.stopReason,
+      iterations: totalIterations,
+      stopReason,
       // ⛔ 「끝났다」가 두 뜻이다 — ⓐ 스스로 목표를 끝냈다 ⓑ 턴이 «그냥» 끝났다.
       //   📏 2026-08-11 72차 전수(400건): 후보 0인 finished 가 5건이고 ***다섯 다 end_turn*** 이었다.
       //   그 둘을 한 이름에 두면 「접지는 성공인데 코드가 0」이라는 «없는 수수께끼»가 생긴다.
-      outcome: result.goalComplete && result.stopReason === 'goal_complete' ? 'goal-complete' : 'stopped-without-goal',
+      outcome: result.goalComplete && stopReason === 'goal_complete' ? 'goal-complete' : 'stopped-without-goal',
       candidates: verified.files,
       candidateCount: verified.files.length,
       evidenceCount: verified.evidence.length,
       evidenceRejection: verified.rejection,
+      feedbackRetry,
+        retryOutcome,
+        retryStopReason: retryStopReason ?? null,
+        provider: resolvedProvider ?? null,
+        model: resolvedModel ?? null,
+        planningModel: planningLlm.model ?? null,
+        planningModelSource: planningLlm.modelSource,
+        planningFallbackReason: planningLlm.fallbackReason ?? null,
+        planningRequestedModel: planningLlm.requestedModel ?? null,
+        planningRequestedSource: planningLlm.requestedSource ?? null,
+      ...(feedbackRetry ? { firstEvidenceRejection: firstVerified.rejection } : {}),
         toolCalls,
       });
     } catch {
@@ -281,8 +376,8 @@ export async function groundPersistently(goal: string, cwd: string, deps: Persis
     return {
       files: verified.files,
       evidence: verified.evidence,
-      iterations: result.iterations,
-      stopReason: result.stopReason,
+      iterations: totalIterations,
+      stopReason,
     };
   } catch (error) {
     try {

package/src/skills/tools/shell.ts

@@ -31,9 +31,13 @@ import {
   runShell as runnerDispatch,
   getShellRunnerDeps,
 } from '../../shell-runner/dispatch.js';
-import type { ShellResult as RunnerResult } from '../../shell-runner/types.js';
+import type { ShellHandle, ShellResult as RunnerResult } from '../../shell-runner/types.js';
 import { debug } from '../../debug/log.js';
 import { getSessionCwd } from '../../session/working-dir.js';
+import {
+  globalTaskNotificationQueue,
+  type TaskNotificationQueue,
+} from '../../agent/task-notification.js';
 
 /** LLMToolSpec — the shape surfaced to the model. Kept narrow so
  *  accidental misuse is hard: no env override, no cwd outside the
@@ -174,13 +178,179 @@ function rejectedCdResult(): RunShellDispatchResult {
   };
 }
 
+// ── ops-ledger CLI steering (RunShell-0 convergence) ────────────────────────
+// The durable mailbox and release-checklist ledgers have in-process native
+// tools (MsgList/MsgPost/MsgAck · ChecklistList/Add/Set/Move —
+// src/skills/tools/ops-ledger.ts, registered for the same skill+tui hosts as
+// RunShell). Shelling out to the `elanous` CLI for exactly those covered ops
+// pays 1.3–2s of process startup for work the host process does in <300ms,
+// and the CLI's human-oriented stdout amplifies TUI screen defects — so the
+// call is steered to the native tool with a structured refusal naming it.
+//
+// Deliberately NOT a blanket elanous-CLI ban: only the seven covered ops are
+// refused, and argv that explicitly scopes another universe (--test /
+// --config-dir / --state-dir) is allowed through because the native tools
+// always serve THIS process's instance.
+const LEDGER_CLI_BIN = /(?:^|[/\\])(?:elanous|elanous\.mjs|elanous\.cjs|eln)$/;
+const LEDGER_ENV_BIN = /(?:^|[/\\])env$/;
+const LEDGER_CLI_NATIVE_TOOL: Readonly<Record<string, string>> = {
+  'msg list': 'MsgList',
+  'msg post': 'MsgPost',
+  'msg ack': 'MsgAck',
+  'release checklist list': 'ChecklistList',
+  'release checklist add': 'ChecklistAdd',
+  'release checklist set': 'ChecklistSet',
+  'release checklist move': 'ChecklistMove',
+};
+
+/** The covered ops-ledger CLI op in this argv and its exposed native tool,
+ *  or null when the command should run normally. */
+export function matchLedgerCli(
+  command: readonly string[], availableToolNames: readonly string[] = [],
+): { covered: string; tool: string } | null {
+  let binIndex = 0;
+  // RunShell receives argv, so recognize only argv-preserving env wrappers.
+  // An alternate instance must still run its own CLI, never this process's native tool;
+  // so must a changed or unset ELANOUS_TRACK — the native tools record THIS process's
+  // seat as the actor and route ChecklistMove permissions by it.
+  if (LEDGER_ENV_BIN.test(command[0] ?? '')) {
+    binIndex = 1;
+    while (binIndex < command.length) {
+      const arg = command[binIndex]!;
+      if (arg === '-i' || arg === '--ignore-environment') return null;
+      if (arg === '--') { binIndex += 1; continue; }
+      if (arg === '-u' || arg === '--unset') {
+        const name = command[binIndex + 1];
+        if (!name || /^ELANOUS_(?:STATE_DIR|CONFIG_DIR|TEST_STATE_DIR|TRACK)$/.test(name)) return null;
+        binIndex += 2;
+        continue;
+      }
+      if (arg.startsWith('--unset=')) {
+        if (/^--unset=ELANOUS_(?:STATE_DIR|CONFIG_DIR|TEST_STATE_DIR|TRACK)$/.test(arg)) return null;
+        binIndex += 1;
+        continue;
+      }
+      if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(arg)) {
+        if (/^ELANOUS_(?:STATE_DIR|CONFIG_DIR|TEST_STATE_DIR|TRACK)=/.test(arg)) return null;
+        binIndex += 1;
+        continue;
+      }
+      break;
+    }
+  }
+  if (command[binIndex] === 'bun' || command[binIndex] === 'bunx' || command[binIndex] === 'node' || command[binIndex] === 'npx') {
+    binIndex += 1;
+    if (command[binIndex] === '--bun') binIndex += 1;
+  }
+  if (!LEDGER_CLI_BIN.test(command[binIndex] ?? '')) return null;
+  const args = command.slice(binIndex + 1);
+  if (args.some((arg) => arg === '--test' || arg === '--config-dir' || arg.startsWith('--config-dir=')
+    || arg === '--state-dir' || arg.startsWith('--state-dir=')
+    || arg === '--test-state-dir' || arg.startsWith('--test-state-dir='))) return null;
+  let i = 0;
+  while (i < args.length && args[i]!.startsWith('-')) i += 1;
+  const sub = args[i];
+  const covered = sub === 'msg'
+    ? `msg ${args[i + 1]}`
+    : sub === 'release' && args[i + 1] === 'checklist'
+      ? `release checklist ${args[i + 2]}`
+      : '';
+  const tool = covered ? LEDGER_CLI_NATIVE_TOOL[covered] : undefined;
+  if (!tool || !availableToolNames.includes(tool)) return null;
+  return { covered, tool };
+}
+
+function ledgerCliSteerOutput(shellTool: string, covered: string, tool: string): string {
+  const metadata = covered === 'release checklist set' ? ' — for owner/priority/disposition/kind/… use ChecklistEdit, one field per call' : '';
+  return `${shellTool} rejected \`${covered}\`: call the native ${tool} tool instead (same ledger, same permissions and audit, no CLI startup)${metadata}.`;
+}
+
+/** Structured refusal steering a covered ops-ledger CLI argv to its native
+ *  tool, or null when the command should run normally. Exported so tests
+ *  can exercise the matcher without spawning anything. */
+export function rejectedLedgerCliResult(
+  command: readonly string[], availableToolNames: readonly string[] = [],
+): RunShellDispatchResult | null {
+  const match = matchLedgerCli(command, availableToolNames);
+  if (!match) return null;
+  const { covered, tool } = match;
+  return {
+    output: ledgerCliSteerOutput('RunShell', covered, tool),
+    exitCode: null,
+    outcome: 'spawn-error',
+    elapsedMs: 0,
+    stdout: '',
+    stderr: `use the native ${tool} tool instead of the ${covered} CLI`,
+    truncated: false,
+    approvalKey: 'rejected:ops-ledger-cli',
+    sandboxed: false,
+    sandboxTool: 'none',
+  };
+}
+
 function logShellDispatch(event: string, data: Record<string, unknown>): void {
   debug.log('shell.dispatch', event, data);
 }
 
+// ── bg completion → turn notification queue (TUI-BG-SHELL) ───────────
+// When a bg-mode shell handle settles, its result is no longer awaited
+// by anyone — the spawn already returned the `outcome=started` stub.
+// To surface the eventual result we enqueue one task-notification into
+// the existing turn notification queue (injected at turn-start by
+// chat/skill-runner). One notice per handle; opening an idle turn from
+// the wake signal is deliberately NOT wired here (TUI-EVENT-TURN-QUEUE).
+
+export interface ShellCompletionNoticeInput {
+  handle: ShellHandle;
+  ok: boolean;
+  exitCode: number | null;
+  durationMs: number;
+  /** Set when ok === false — the runner's failure reason. */
+  errorMessage?: string;
+  /** Caller-supplied free-form label (RunShell's `description` arg). */
+  label?: string;
+}
+
+/** Per-handle dedup guard — module-local, keyed by the handle OBJECT.
+ *  A registry replacement may mint a NEW handle that reuses an id; the
+ *  shell layer must not swallow that fresh completion as a duplicate
+ *  settle (an id-keyed record here would). */
+const notifiedHandles = new WeakSet<ShellHandle>();
+let nextShellCompletionNoticeId = 0;
+
+/** Enqueue one bg shell-handle completion notice. Returns true when this
+ *  handle had not notified before (the notice was handed to `queue`),
+ *  false on a duplicate settle of the same handle. The queue's own
+ *  The shared queue deduplicates by taskId even after drain, so each
+ *  completed handle gets its own notification id. The original handle id
+ *  remains in the output for ShellPoll and human follow-up.
+ *  `queue` defaults to the global turn notification queue; injectable
+ *  so tests can isolate. */
+export function enqueueShellCompletionNotice(
+  input: ShellCompletionNoticeInput,
+  queue: TaskNotificationQueue = globalTaskNotificationQueue,
+): boolean {
+  if (notifiedHandles.has(input.handle)) return false;
+  notifiedHandles.add(input.handle);
+  const header = `RunShell bg handle=${input.handle.id} ${input.ok ? 'completed' : 'failed'}`;
+  const output = `${header}${input.ok || input.exitCode !== null ? ` exitCode=${input.exitCode ?? 'null'}` : ''} elapsed=${input.durationMs}ms${input.errorMessage ? ` error=${input.errorMessage}` : ''}`;
+  queue.enqueue({
+    taskId: `shell:${input.handle.id}:${++nextShellCompletionNoticeId}`,
+    agentName: 'RunShell',
+    ...(input.label ? { label: input.label } : {}),
+    state: input.ok ? 'done' : 'error',
+    output,
+    truncated: false,
+    ...(input.errorMessage ? { errorMessage: input.errorMessage } : {}),
+    durationMs: input.durationMs,
+    finishedAt: Date.now(),
+  });
+  return true;
+}
+
 export async function dispatchRunShell(
   rawArgs: Record<string, unknown>,
-  opts: { signal?: AbortSignal } = {},
+  opts: { signal?: AbortSignal; availableToolNames?: readonly string[] } = {},
 ): Promise<RunShellDispatchResult> {
   const command = asCommand(rawArgs.command);
   const cwd = typeof rawArgs.cwd === 'string' ? rawArgs.cwd : undefined;
@@ -195,6 +365,12 @@ export async function dispatchRunShell(
     logShellDispatch('cd.rejected', { reason: 'argv-state-does-not-persist' });
     return rejectedCdResult();
   }
+  const ledgerCliMatch = matchLedgerCli(command, opts.availableToolNames);
+  if (ledgerCliMatch) {
+    // covered op ⊕ tool only — the argv can carry a message body.
+    logShellDispatch('ledger-cli.steered', { shell: 'run-shell', ...ledgerCliMatch });
+    return rejectedLedgerCliResult(command, opts.availableToolNames)!;
+  }
   const effectiveCwd = cwd ?? getSessionCwd();
   const cwdSource = cwd === undefined ? 'session' : 'argument';
   const boundaryReject = harnessCommandWriteReject(command, effectiveCwd, 'run-shell');
@@ -269,6 +445,16 @@ async function dispatchViaRunner(args: {
           exitCode: result.exitCode ?? null,
           durationMs: result.durationMs,
         });
+        const ok = result.outcome === 'exit' && result.exitCode === 0;
+        enqueueShellCompletionNotice({
+          handle,
+          ok,
+          exitCode: result.exitCode ?? null,
+          durationMs: result.durationMs,
+          ...(!ok ? { errorMessage: result.exitCode !== undefined
+            ? `exitCode=${result.exitCode}` : `outcome=${result.outcome}` } : {}),
+          ...(args.description !== undefined ? { label: args.description } : {}),
+        });
       },
       (err: unknown) => {
         debug.log('skill-tool.shell', 'bg-finished', {
@@ -277,6 +463,14 @@ async function dispatchViaRunner(args: {
           durationMs: Date.now() - bgStartedAt,
           error: err instanceof Error ? err.message : String(err),
         });
+        enqueueShellCompletionNotice({
+          handle,
+          ok: false,
+          exitCode: null,
+          durationMs: Date.now() - bgStartedAt,
+          errorMessage: err instanceof Error ? err.message : String(err),
+          ...(args.description !== undefined ? { label: args.description } : {}),
+        });
       },
     );
     return {

package/src/status/bar.ts

@@ -213,6 +213,9 @@ export interface GitSegmentState {
   ahead?: number;
   /** Commits behind upstream. Non-zero → peach tone with "-N". */
   behind?: number;
+  /** Optional axis label after the glyph (e.g. `트리`) — set when a
+   *  running-build pill sits next to it so the two SHAs are not confused. */
+  label?: string;
 }
 
 /** Git state — flat colored text. No pill background.
@@ -241,7 +244,7 @@ export function gitSegment(
   const head = state.branch
     ? truncateGitHead(state.branch, 20)
     : `HEAD@${(state.detachedSha ?? '').slice(0, 7)}`;
-  const parts: string[] = [`⌥ ${head}`];
+  const parts: string[] = [state.label ? `⌥ ${state.label} ${head}` : `⌥ ${head}`];
   const dirty = Math.max(0, state.dirtyTotal ?? 0);
   if (dirty > 0) parts.push(`*${dirty}`);
   if ((state.ahead ?? 0) > 0) parts.push(`+${state.ahead}`);
@@ -260,6 +263,33 @@ export function gitSegment(
     : strongText(parts.join(' '), tone, opts);
 }
 
+/** The code this TUI process loaded at boot (not the session tree HEAD). */
+export interface RunningBuildState {
+  /** Boot commit (full or short); '' = unknown (rendered as `?`). */
+  sha: string;
+  /** True when the installed/checkout code moved after boot — a relaunch runs the new build.
+   *  null = could not compare (not the same as «not stale»). */
+  stale: boolean | null;
+  /** The commit a relaunch would run, when known. */
+  currentSha?: string;
+}
+
+/** Running-build pill.
+ *
+ *     ▶ 실행 5c0f98f                         — boot build matches current code (overlay)
+ *     ▶ 실행 5c0f98f ⟳ 재기동 필요 → 1a2b3c4  — code moved after boot (yellow, bold)
+ *     ▶ 실행 5c0f98f ?                        — could not compare (overlay)
+ *     ▶ 실행 ?                                — boot build unknown (overlay) */
+export function runningBuildSegment(state: RunningBuildState | null | undefined, opts: StatusBarRenderOptions = {}): string {
+  if (!state) return '';
+  if (!state.sha) return text('▶ 실행 ?', 'overlay', opts);
+  const label = `▶ 실행 ${state.sha.slice(0, 7)}`;
+  if (state.stale === null) return text(`${label} ?`, 'overlay', opts);
+  if (!state.stale) return text(label, 'overlay', opts);
+  const target = state.currentSha ? ` → ${state.currentSha.slice(0, 7)}` : '';
+  return strongText(`${label} ⟳ 재기동 필요${target}`, 'yellow', opts);
+}
+
 /** Truncate a model id at the first parameter-size marker (e.g.
  *  `qwen3.6-35b-a3b-ud-mlx` → `qwen3.6-35b`). The marker pattern
  *  matches one or more digits followed by `b`/`B` (e.g. `7b`, `35b`,
@@ -289,7 +319,7 @@ function truncateAtParamSize(model: string): string {
  *   - `local:qwen3.6-35b-a3b-ud-mlx` → `local:qwen3.6-35b`
  *   - `node-b:qwen2.5-72b-instruct`    → `node-b:qwen2.5-72b`
  *   - `claude-opus-4-6`              → unchanged (no `\d+b` marker) */
-export function modelSegment(info: ActiveProviderInfo, opts: StatusBarRenderOptions = {}): string {
+export function modelSegment(info: Pick<ActiveProviderInfo, 'provider' | 'model'>, opts: StatusBarRenderOptions = {}): string {
   if (!info.model || info.model === '(none)') {
     return strongText(info.provider, 'pink', opts);
   }

package/src/status/status-provider-info.ts

@@ -0,0 +1,58 @@
+// ── Status-line provider/model reader ──
+//
+// 하단 상태줄은 키 입력마다 다시 그린다. 종전엔 그때마다 `inspectActiveProvider()` 를 불러
+//   ① `getUserConfig()` 의 stat ② `decideProviderForConfig()` 의 자격 확인 ③ 상태줄이 «안 쓰는»
+//   `authDetail`(codex 면 auth 스토어 readFileSync + JSON.parse) 을 매 렌더 동기로 했다.
+//   📏 실측(10-14 mbp · 운영 HOME · 500회 평균): 렌더 1회 98µs.
+// ⇒ 상태줄이 쓰는 것은 provider·model 둘뿐이라, 그 둘만 짧게 기억한다.
+//   ⛔ 기억이 «낡은 값»으로 굳지 않게: runtimeModel 이 바뀌면 즉시, 설정 파일이 바뀌면 TTL(2s) 안에 다시 읽고,
+//   그렇지 않아도 `maxAgeMs` 마다 다시 판정한다(auto 공급자는 자격 유무로 갈리므로). 표시 전용이라 2s 지연은 허용.
+
+import { inspectActiveProvider, type ActiveProviderInfo } from '../provider-summary.js';
+import { getUserConfig, type UserConfig } from '../user-config.js';
+
+export type StatusProviderInfo = Pick<ActiveProviderInfo, 'provider' | 'model'>;
+
+export interface StatusProviderInfoReaderDeps {
+  readConfig?: () => UserConfig;
+  inspect?: (cfg: UserConfig, runtimeModel?: string) => StatusProviderInfo;
+  now?: () => number;
+  /** 이 안에서는 설정도 다시 안 읽는다(렌더 경로 0 I/O). */
+  ttlMs?: number;
+  /** 설정이 그대로여도 이만큼 지나면 다시 판정한다. */
+  maxAgeMs?: number;
+}
+
+export function createStatusProviderInfoReader(
+  deps: StatusProviderInfoReaderDeps = {},
+): (runtimeModel?: string) => StatusProviderInfo {
+  const readConfig = deps.readConfig ?? (() => getUserConfig());
+  const inspect = deps.inspect ?? ((cfg, runtimeModel) => inspectActiveProvider(cfg, runtimeModel));
+  const now = deps.now ?? Date.now;
+  const ttlMs = deps.ttlMs ?? 2_000;
+  const maxAgeMs = deps.maxAgeMs ?? 30_000;
+  let memo: {
+    info: StatusProviderInfo;
+    cfg: UserConfig;
+    runtimeModel: string | undefined;
+    checkedAt: number;
+    inspectedAt: number;
+  } | null = null;
+
+  return (runtimeModel?: string): StatusProviderInfo => {
+    const t = now();
+    // ⛔ 조기 반환에도 최대 수명을 건다 — TTL 만 보면 «29초에 설정 확인 → 30.001초 렌더»가 재판정 없이 지나간다.
+    const fresh = memo !== null && t - memo.inspectedAt < maxAgeMs;
+    if (memo && fresh && memo.runtimeModel === runtimeModel && t - memo.checkedAt < ttlMs) return memo.info;
+    // getUserConfig() 는 파일 mtime 이 같으면 «같은 객체»를, 바뀌면 새 객체를 돌려준다(user-config.ts getUserConfig).
+    const cfg = readConfig();
+    if (memo && fresh && memo.cfg === cfg && memo.runtimeModel === runtimeModel) {
+      memo.checkedAt = t;
+      return memo.info;
+    }
+    const full = inspect(cfg, runtimeModel);
+    const info: StatusProviderInfo = { provider: full.provider, model: full.model };
+    memo = { info, cfg, runtimeModel, checkedAt: t, inspectedAt: t };
+    return info;
+  };
+}

package/src/steward/rejudge-tick.ts

@@ -19,6 +19,7 @@ import { debug } from '../debug/log.js';
 import { effectiveInstanceRoot } from '../instance/resolve.js';
 import { spawnElanous } from '../instance/spawn-elanous.js';
 import { getUserConfig } from '../user-config.js';
+import { resyncPendingPath } from './resync-tick.js';
 
 export const REJUDGE_TICK_EVENT = 'rejudge-tick';
 export const REJUDGE_DEFAULT_MAX_LOAD = 60;
@@ -49,6 +50,7 @@ export interface RejudgeTickDeps {
   config?: () => { rejudgeEveryMinutes?: number; rejudgeMaxLoad?: number } | undefined;
   load?: () => number;
   stampPath?: string;
+  pendingPath?: string;
   run?: () => Promise<RejudgeRun>;
   log?: (event: string, data: Record<string, unknown>) => void;
 }
@@ -110,7 +112,9 @@ export async function rejudgeTick(deps: RejudgeTickDeps = {}): Promise<RejudgeTi
     const now = (deps.now ?? (() => new Date()))();
     const stampPath = deps.stampPath ?? defaultStampPath();
     const lastStartedAt = readStamp(stampPath);
-    if (lastStartedAt && now.getTime() - Date.parse(lastStartedAt) < everyMinutes * 60_000 - REJUDGE_JITTER_MS) {
+    const pendingAt = readPending(deps.pendingPath ?? resyncPendingPath());
+    const savedSinceLastRun = pendingAt !== null && (!lastStartedAt || Date.parse(pendingAt) > Date.parse(lastStartedAt));
+    if (!savedSinceLastRun && lastStartedAt && now.getTime() - Date.parse(lastStartedAt) < everyMinutes * 60_000 - REJUDGE_JITTER_MS) {
       return emit({ decision: 'not-due', everyMinutes, lastStartedAt });
     }
     const maxLoad = positive(cfg?.rejudgeMaxLoad) ?? REJUDGE_DEFAULT_MAX_LOAD;
@@ -133,6 +137,13 @@ export async function rejudgeTick(deps: RejudgeTickDeps = {}): Promise<RejudgeTi
   }
 }
 
+function readPending(path: string): string | null {
+  try {
+    const value = (JSON.parse(readFileSync(path, 'utf8')) as { savedAt?: unknown }).savedAt;
+    return typeof value === 'string' && Number.isFinite(Date.parse(value)) ? value : null;
+  } catch { return null; }
+}
+
 if (import.meta.main) {
   try { await (await import('../domains/standalone-log-sink.js')).registerStandaloneLogSink('steward'); }
   catch (error) { console.error(`steward rejudge: log sink registration failed — ${error instanceof Error ? error.message : String(error)}`); }