elanous 0.2.34 → 0.2.36

package/src/self-implement/goal-refine.ts

@@ -0,0 +1,273 @@
+/**
+ * GOAL-REFINE-FROM-FIRST-IMPL — E3 첫 구현 → 골 저작 역피드백(골 v2).
+ *
+ * 설계 = 내부 문서 `RFC-progressive-goal-elaboration-2026-10-21` §7 간선 ②③④ — ta-journey 의 author-dialogue 단위에서
+ * judge «findings» → author → «deliver vN+1» → implement 되돌이를 «한 번»(max_visits) 실행한다.
+ * 첫 라운드(구현 → gate → 리뷰) 뒤 «재그라운딩 노트»(지나간 생산 경로 · 건드린 파일 · 운영이 골 가정과 다른 점 ·
+ * 불가능/모호한 수용선과 바꿀 문면 · 남은 일)를 받아 골 v2 를 만든다.
+ *
+ * ⛔ 방향·KPI 줄은 바뀌지 않는다(사람 몫) — 바꾸려 들면 v2 를 «버리고» v1 을 유지한다 ⊕ 사유를 남긴다.
+ * ⭐ 바뀌어도 되는 칸은 셋뿐: 예상 구역(`대상 경로:`·`신설:`) · 수용선 문구(`완료 경계 코드:`·`완료 경계 실물:`·`수용선:`·`- Checkable requested criterion:`) ·
+ *    검증 무대(`검증 무대:`·`무대:`). 줄 머리 꼴은 저작 문법(goal-author.ts GOAL_DONE_BOUNDARY_LABELS ⊕ 칸 문면)을 따른다.
+ *    `완료 경계 증거 명령`은 «재는 명령»이라 KPI 로 본다(E1 extractGoalFixedLayer 의 KPI 줄에서 수용선 문구만 뺀 것).
+ * ⭐ 순수 함수 ⊕ 주입한 LLM — 시험은 대본 응답(fake-llm)으로 돈다(주입 사다리 L2).
+ */
+import { createHash } from 'node:crypto';
+
+export type RefineCallLLM = (args: { prompt: string; systemPrompt?: string }) => Promise<string>;
+
+/** 골 한 줄의 칸. fixed = 방향·KPI(불변) · zone/acceptance/stage = 바뀌어도 되는 칸 · other = 이 칸이 안 건드린다. */
+export type GoalLineZone = 'direction' | 'kpi' | 'zone' | 'acceptance' | 'stage' | 'other';
+const EDITABLE: ReadonlySet<GoalLineZone> = new Set(['zone', 'acceptance', 'stage']);
+
+/**
+ * 편집 가능 칸의 줄 머리 — 분류기(classifyGoalLine)와 노트 프롬프트(buildRegroundingPrompt)가 «이 상수 하나»에서 만든다.
+ * `Checkable requested criterion` = 저작기가 쓰는 «요구된 수용 기준» 줄(REFUTE 인용 자격 줄 — reflect-mustfix.ts) · preservation 은 고정(other).
+ */
+export const EDITABLE_GOAL_LABELS = {
+  zone: ['대상 경로', '신설', '예상 구역'],
+  acceptance: ['완료 경계 코드', '완료 경계 실물', '수용선', 'acceptance', 'Checkable requested criterion'],
+  stage: ['검증 무대', '무대', 'stage'],
+} as const satisfies Record<'zone' | 'acceptance' | 'stage', readonly string[]>;
+const EDITABLE_ZONE_NAMES: Record<keyof typeof EDITABLE_GOAL_LABELS, string> = { zone: '예상 구역', acceptance: '수용선 문구', stage: '검증 무대' };
+
+const escapeRegExp = (text: string) => text.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+const LABEL = (labels: string) => new RegExp(`^\\s*(?:[-*]\\s*)?(?:${labels})\\s*[:：]`, 'i');
+const LABELS = (labels: readonly string[]) => LABEL(labels.map(escapeRegExp).join('|'));
+const KPI_LABEL = LABEL('완료 경계 증거 명령|증거 명령|판정 신호(?:\\([^)]*\\))?|KPI|verify|반증');
+const ACCEPTANCE_LABEL = LABELS(EDITABLE_GOAL_LABELS.acceptance);
+const ZONE_LABEL = LABELS(EDITABLE_GOAL_LABELS.zone);
+const STAGE_LABEL = LABELS(EDITABLE_GOAL_LABELS.stage);
+const DIRECTION_LABEL = LABEL('바꿀 것|목표|무엇|왜|현재 계약|Goal|Why|What');
+/** 라벨 없는 줄도 KPI 낱말을 품으면 고정으로 본다(보수 쪽). */
+const KPI_WORD = /판정 신호|KPI/i;
+
+export function classifyGoalLine(line: string): GoalLineZone {
+  if (KPI_LABEL.test(line)) return 'kpi';
+  if (ACCEPTANCE_LABEL.test(line)) return 'acceptance';
+  if (ZONE_LABEL.test(line)) return 'zone';
+  if (STAGE_LABEL.test(line)) return 'stage';
+  if (DIRECTION_LABEL.test(line)) return 'direction';
+  if (KPI_WORD.test(line)) return 'kpi';
+  return 'other';
+}
+
+function labelOf(line: string): string {
+  return /^\s*(?:[-*]\s*)?([^:：]+)[:：]/.exec(line)?.[1]?.trim() ?? '';
+}
+
+/** 방향·KPI 줄(원문 그대로 · 순서 보존) — v1·v2 대조의 정본. */
+export function fixedGoalLines(goal: string): string[] {
+  return goal.split(/\r?\n/).filter((line) => {
+    const zone = classifyGoalLine(line);
+    return zone === 'direction' || zone === 'kpi';
+  });
+}
+
+export interface RegroundEdit { from: string; to: string; reason: string }
+export interface RegroundingNote {
+  productionPath: string[];
+  touchedFiles: string[];
+  divergences: string[];
+  edits: RegroundEdit[];
+  remaining: string[];
+}
+
+export interface GoalChangedLine { index: number; zone: GoalLineZone; before: string; after: string; reason: string }
+export type GoalKeptReason = 'no-provider' | 'provider-failed' | 'note-unparseable' | 'empty-note' | 'no-applicable-edits' | 'fixed-layer-edit' | 'max-visits';
+export type GoalRefinement =
+  | { outcome: 'refined'; v1Hash: string; v2Hash: string; v2: string; changedLines: GoalChangedLine[]; reasons: string[]; rejectedEdits: string[]; note: RegroundingNote }
+  | { outcome: 'kept'; v1Hash: string; v2Hash: string; kept: GoalKeptReason; detail?: string; rejectedEdits: string[] };
+
+export function goalHash(text: string): string {
+  return createHash('sha256').update(text).digest('hex');
+}
+
+function strings(value: unknown, max = 20): string[] {
+  if (!Array.isArray(value)) return [];
+  return value.filter((item): item is string => typeof item === 'string').map((item) => item.trim()).filter(Boolean).slice(0, max).map((item) => item.slice(0, 400));
+}
+
+function lastJsonObject(text: string): unknown {
+  const fenced = [...text.matchAll(/```(?:json)?\s*([\s\S]*?)```/g)].map((match) => match[1]!);
+  for (const candidate of [...fenced.reverse(), text]) {
+    const start = candidate.indexOf('{');
+    const end = candidate.lastIndexOf('}');
+    if (start === -1 || end <= start) continue;
+    try { return JSON.parse(candidate.slice(start, end + 1)); } catch { /* next */ }
+  }
+  return undefined;
+}
+
+export function parseRegroundingNote(text: string): { ok: true; note: RegroundingNote } | { ok: false; error: string } {
+  const raw = lastJsonObject(text);
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return { ok: false, error: 'no JSON object' };
+  const record = raw as Record<string, unknown>;
+  const edits: RegroundEdit[] = Array.isArray(record.edits)
+    ? record.edits.flatMap((edit) => {
+      const e = edit as Record<string, unknown> | null;
+      return e && typeof e.from === 'string' && typeof e.to === 'string'
+        ? [{ from: e.from, to: e.to, reason: typeof e.reason === 'string' && e.reason.trim() ? e.reason.trim().slice(0, 400) : '(이유 없음)' }]
+        : [];
+    }).slice(0, 20)
+    : [];
+  return { ok: true, note: { productionPath: strings(record.productionPath), touchedFiles: strings(record.touchedFiles, 40), divergences: strings(record.divergences), edits, remaining: strings(record.remaining) } };
+}
+
+function noteIsEmpty(note: RegroundingNote): boolean {
+  return !note.edits.length && !note.productionPath.length && !note.touchedFiles.length && !note.divergences.length && !note.remaining.length;
+}
+
+const REGROUND_NOTE_HEADER = '## 재그라운딩 노트 (골 v2 · 첫 라운드 실전 — 참고, 고정 층 아님)';
+
+/**
+ * (v1 골 문면, 재그라운딩 노트) → v2 ⊕ 바뀐 줄·이유 ⊕ 해시.
+ * ⛔ 방향·KPI 줄을 겨눈 편집이 «하나라도» 있으면 v2 전체를 버린다(kept: fixed-layer-edit).
+ * 바뀌어도 되는 칸 밖(other)·없는 줄·칸 머리를 바꾼 편집은 그 편집만 버리고 이유를 rejectedEdits 에 남긴다.
+ */
+export function applyRegroundingNote(v1: string, note: RegroundingNote): GoalRefinement {
+  const v1Hash = goalHash(v1);
+  const kept = (reason: GoalKeptReason, rejectedEdits: string[] = [], detail?: string): GoalRefinement =>
+    ({ outcome: 'kept', v1Hash, v2Hash: v1Hash, kept: reason, rejectedEdits, ...(detail ? { detail } : {}) });
+  if (noteIsEmpty(note)) return kept('empty-note');
+  const lines = v1.split('\n');
+  const rejected: string[] = [];
+  const changed: GoalChangedLine[] = [];
+  for (const edit of note.edits) {
+    const from = edit.from.trim();
+    const index = lines.findIndex((line, i) => line.trim() === from && !changed.some((c) => c.index === i));
+    if (index === -1) { rejected.push(`not-in-goal: ${from.slice(0, 120)}`); continue; }
+    const before = lines[index]!;
+    const zone = classifyGoalLine(before);
+    if (zone === 'direction' || zone === 'kpi') {
+      return kept('fixed-layer-edit', [...rejected, `${zone}: ${before.trim().slice(0, 160)}`], edit.reason);
+    }
+    const after = edit.to.replace(/\r?\n/g, ' ').trim();
+    if (!EDITABLE.has(zone)) { rejected.push(`out-of-zone(${zone}): ${before.trim().slice(0, 120)}`); continue; }
+    if (classifyGoalLine(after) !== zone || labelOf(after) !== labelOf(before.trim())) { rejected.push(`label-changed: ${before.trim().slice(0, 120)}`); continue; }
+    if (after === before.trim()) { rejected.push(`no-op: ${before.trim().slice(0, 120)}`); continue; }
+    const indent = /^\s*/.exec(before)![0];
+    lines[index] = `${indent}${after}`;
+    changed.push({ index, zone, before: before.trim(), after, reason: edit.reason });
+  }
+  if (!changed.length) return kept('no-applicable-edits', rejected);
+  const body = lines.join('\n');
+  // 방어 이중화 — 적용 뒤에도 방향·KPI 줄이 원문 그대로인가(줄 분류가 편집으로 바뀌는 경우까지 막는다).
+  if (JSON.stringify(fixedGoalLines(body)) !== JSON.stringify(fixedGoalLines(v1))) return kept('fixed-layer-edit', rejected, 'fixed lines differ after applying edits');
+  const section = (title: string, items: string[]) => (items.length ? [`### ${title}`, ...items.map((item) => `- ${item.replace(/\r?\n/g, ' ')}`)] : []);
+  const v2 = [
+    body.trimEnd(),
+    '',
+    REGROUND_NOTE_HEADER,
+    ...section('지나간 생산 경로', note.productionPath),
+    ...section('건드린 파일', note.touchedFiles),
+    ...section('운영이 골 가정과 다른 점', note.divergences),
+    ...section('바뀐 문면(v1 → v2)', changed.map((c) => `${c.before} → ${c.after} — ${c.reason}`)),
+    ...section('남은 일', note.remaining),
+  ].join('\n');
+  return { outcome: 'refined', v1Hash, v2Hash: goalHash(v2), v2, changedLines: changed, reasons: changed.map((c) => c.reason), rejectedEdits: rejected, note };
+}
+
+const NOTE_SYSTEM = 'You re-ground a software goal after its first implementation round. Reply with one JSON object only.';
+
+export interface FirstRoundEvidence {
+  /** 첫 라운드 자식 요약(무엇을 해 봤나). */
+  implSummary?: string;
+  /** 첫 라운드 gate·리뷰가 돌려준 지적(must-fix 등). */
+  findings?: string;
+  /** 첫 라운드가 실제로 건드린 파일. */
+  changedFiles?: readonly string[];
+  /** SCOPE-ESCAPE-AS-REFINE — 대상 경로 밖에서 바뀌었고 수용된 파일(«구현이 알려준 새 범위» · 실패 아님). */
+  newScope?: readonly string[];
+}
+
+/** 내부 — 시험은 refineGoalFromFirstRound 가 LLM 에 넘긴 프롬프트로 본다. */
+function buildRegroundingPrompt(v1: string, evidence: FirstRoundEvidence): string {
+  const fixed = fixedGoalLines(v1);
+  return [
+    '## 할 일 — 재그라운딩 노트(E3 · 첫 라운드 → 골 v2)',
+    '첫 라운드(구현 → gate → 리뷰) 실전에서 알게 된 것으로 골을 다시 접지한다. 방향·KPI 줄은 바꾸지 않는다(사람 몫).',
+    `바꿀 수 있는 줄은 셋뿐이다: ${(Object.keys(EDITABLE_GOAL_LABELS) as Array<keyof typeof EDITABLE_GOAL_LABELS>)
+      .map((zone) => `${EDITABLE_ZONE_NAMES[zone]}(${EDITABLE_GOAL_LABELS[zone].map((label) => `\`${label}:\``).join('·')})`).join(' · ')}. 줄 머리(라벨)는 그대로 두고 값만 고친다.`,
+    'JSON 형식: {"productionPath": [실제로 지나간 생산 경로], "touchedFiles": [건드린 파일], "divergences": [운영이 골 가정과 다른 점], "edits": [{"from": "골 원문 한 줄 그대로", "to": "고친 한 줄", "reason": "왜(불가능·모호·경로 틀림)"}], "remaining": [남은 일]}',
+    '',
+    '## 고정 층(바꾸지 않는다 — 방향·KPI)',
+    ...(fixed.length ? fixed.map((line) => `- ${line.trim()}`) : ['- (없음)']),
+    '',
+    '## 첫 라운드 실전',
+    `- 자식 요약: ${(evidence.implSummary ?? '').replace(/\s+/g, ' ').trim().slice(0, 600) || '(없음)'}`,
+    `- 건드린 파일: ${evidence.changedFiles?.length ? evidence.changedFiles.slice(0, 40).join(', ') : '(관측 없음)'}`,
+    ...(evidence.newScope?.length ? [`- 구현이 알려준 새 범위(대상 경로 밖 편집 · 실패 아님 · 예상 구역에 넣을지 판단): ${evidence.newScope.slice(0, 40).join(', ')}`] : []),
+    '### gate·리뷰 지적',
+    (evidence.findings ?? '').trim().slice(0, 4000) || '(없음)',
+    '',
+    '## 골 v1 원문',
+    v1,
+  ].join('\n');
+}
+
+/** 노트 생성(LLM) → v2. 실패·빈 노트·상한 초과는 v1 유지(보수 쪽) ⊕ 사유 — 조용한 폴백은 없다(호출부가 사건으로 남긴다). */
+export async function refineGoalFromFirstRound(
+  input: { v1: string; evidence: FirstRoundEvidence; visit: number; maxVisits?: number },
+  deps: { callLLM?: RefineCallLLM },
+): Promise<GoalRefinement> {
+  const v1Hash = goalHash(input.v1);
+  const kept = (reason: GoalKeptReason, detail?: string): GoalRefinement => ({ outcome: 'kept', v1Hash, v2Hash: v1Hash, kept: reason, rejectedEdits: [], ...(detail ? { detail } : {}) });
+  if (input.visit > (input.maxVisits ?? GOAL_REFINE_MAX_VISITS)) return kept('max-visits', `visit ${input.visit} > ${input.maxVisits ?? GOAL_REFINE_MAX_VISITS}`);
+  if (!deps.callLLM) return kept('no-provider');
+  let text: string;
+  try {
+    text = await deps.callLLM({ prompt: buildRegroundingPrompt(input.v1, input.evidence), systemPrompt: NOTE_SYSTEM });
+  } catch (error) {
+    return kept('provider-failed', (error instanceof Error ? error.message : String(error)).slice(0, 200));
+  }
+  const parsed = parseRegroundingNote(text);
+  if (!parsed.ok) return kept('note-unparseable', parsed.error);
+  return applyRegroundingNote(input.v1, parsed.note);
+}
+
+/** 되돌이 상한 — ta-journey author-dialogue 의 refine 왕복은 런당 한 번(첫 라운드 뒤). */
+export const GOAL_REFINE_MAX_VISITS = 1;
+
+/** 원장 `goal-refined` 사건 값 — v1·v2 해시 ⊕ 바뀐 줄 ⊕ 이유 ⊕ (유지면) kept 사유. */
+export function goalRefinedEvent(refinement: GoalRefinement, round: number): Record<string, unknown> {
+  const base = { outcome: refinement.outcome, round, v1Hash: refinement.v1Hash, v2Hash: refinement.v2Hash,
+    ...(refinement.rejectedEdits.length ? { rejectedEdits: refinement.rejectedEdits } : {}) };
+  if (refinement.outcome === 'kept') return { ...base, changedLines: [], reasons: [], kept: refinement.kept, ...(refinement.detail ? { detail: refinement.detail } : {}) };
+  return { ...base, changedLines: refinement.changedLines, reasons: refinement.reasons };
+}
+
+/** PR 본문 «골 변경» 절 — v1→v2 바뀐 줄과 이유(유지면 그 사유). */
+export function renderGoalChangeSection(refinement: GoalRefinement): string {
+  const head = ['## 골 변경', `- v1 ${refinement.v1Hash.slice(0, 12)} → v2 ${refinement.v2Hash.slice(0, 12)} (방향·KPI 줄 불변)`];
+  if (refinement.outcome === 'kept') return [...head, `- 시도 · v1 유지 · 사유 ${refinement.kept}${refinement.detail ? ` (${refinement.detail})` : ''}`,
+    ...refinement.rejectedEdits.map((edit) => `- 버린 편집: ${edit}`)].join('\n');
+  return [...head,
+    ...refinement.changedLines.flatMap((c) => [`- [${c.zone}] \`${c.before}\``, `  → \`${c.after}\``, `  이유: ${c.reason}`]),
+    ...refinement.rejectedEdits.map((edit) => `- 버린 편집: ${edit}`)].join('\n');
+}
+
+/**
+ * orchestrator 호출점 한 곳 — 첫 라운드 뒤 · 둘째 라운드 프롬프트 직전.
+ * 관측 = 원장 `goal-refined`(observe → 런 원장 ⊕ debug.log 범주 `self-implement.goal-refine`).
+ * 돌려준 goal 이 다음 라운드 프롬프트의 골이다(유지면 v1).
+ */
+export async function runFirstRoundRefine(input: {
+  goal: string;
+  evidence: FirstRoundEvidence;
+  round: number;
+  visit: number;
+  callLLM?: RefineCallLLM;
+  observe: (event: string, data: Record<string, unknown>, opt?: { category?: string; level?: 'warn' }) => void;
+}): Promise<{ goal: string; refinement: GoalRefinement }> {
+  let refinement: GoalRefinement;
+  try {
+    refinement = await refineGoalFromFirstRound({ v1: input.goal, evidence: input.evidence, visit: input.visit }, { callLLM: input.callLLM });
+  } catch (error) {
+    const v1Hash = goalHash(input.goal);
+    refinement = { outcome: 'kept', v1Hash, v2Hash: v1Hash, kept: 'provider-failed', rejectedEdits: [], detail: (error instanceof Error ? error.message : String(error)).slice(0, 200) };
+  }
+  // ⚠️ 유지(kept)는 전부 warn — seam(callLLM) 부재로 늘 no-provider 인 런도 «조용히 꺼지지» 않는다(리뷰 r1 should-fix 4).
+  input.observe('goal-refined', goalRefinedEvent(refinement, input.round), { category: 'self-implement.goal-refine', ...(refinement.outcome === 'refined' ? {} : { level: 'warn' as const }) });
+  return { goal: refinement.outcome === 'refined' ? refinement.v2 : input.goal, refinement };
+}

package/src/self-implement/graph-overlay-yaml.ts

@@ -199,10 +199,21 @@ export function applyGraphOverlays(
     applied.push(overlay.overlayId);
   }
 
-  // ⑵ 계약 없는 실행 노드를 거부한다. 원본부터 계약이 없는 종결 gate 는
-  // 실행 권한을 갖지 않으므로 원본·결과 모두 recipe=none·출구 없음이고 선언이 그대로일 때만 허용한다.
+  // ⑵ 계약 없는 실행 노드를 거부한다. 기존 종결 gate 와 여정 선언은
+  // 원본 그대로일 때만 예외로 보존한다. 오버레이가 바꾼 노드에는 계약이 필요하다.
   for (const node of next.nodes) {
     const original = template.nodes.find((candidate) => candidate.nodeId === node.nodeId);
+    // 기존 무계약 여정 선언은 노드와 그 출입 간선·종결 지위가 모두 그대로일 때만 보존한다.
+    // 새 경로가 실행 권한 없는 노드를 노출하면 계약 검사를 다시 건다.
+    const touchesNode = (edge: GraphTemplateSpec['edges'][number]) => edge.from === node.nodeId
+      || edge.to === node.nodeId
+      || Object.values(edge.map ?? {}).includes(node.nodeId)
+      || (edge.fallback ?? []).some((fallback) => fallback.node === node.nodeId);
+    const untouchedJourneyDeclaration = original?.journeyStage !== undefined
+      && original.contract === undefined
+      && JSON.stringify(node) === JSON.stringify(original)
+      && JSON.stringify(next.edges.filter(touchesNode)) === JSON.stringify(template.edges.filter(touchesNode))
+      && next.terminalNodes.includes(node.nodeId) === template.terminalNodes.includes(node.nodeId);
     const existingTerminalGate = original?.kind === 'gate' && original.recipe === 'none'
       && original.contract === undefined
       && JSON.stringify(node) === JSON.stringify(original)
@@ -216,7 +227,7 @@ export function applyGraphOverlays(
       && typeof contract.tools === 'string' && contract.tools.trim() !== ''
       && Array.isArray(contract.outputs)
       && contract.outputs.every((output) => typeof output === 'string');
-    if (!existingTerminalGate && !validContract) {
+    if (!untouchedJourneyDeclaration && !existingTerminalGate && !validContract) {
       rejections.push({ kind: 'node-without-contract', overlayId: applied.join(',') || '<none>', nodeId: node.nodeId });
     }
   }

package/src/self-implement/graph-variant.ts

@@ -3,6 +3,7 @@ import { applyGraphOverlays, type GraphOverlaySpec, type OverlayPatchOp, type Ov
 import { edgeMapOf, graphVersionHash, type GraphEdgeSpec, type GraphNodeSpec, type GraphTemplateSpec } from './graph-yaml.js';
 import { inspectPipelineGraph } from './pipeline-shape.js';
 import { hasNodeKind } from '../graph-kinds/registry.js';
+import { GOAL_TYPES, type GoalType } from './goal-author.js';
 
 /** A proposed change to one existing outcome of a conditional route. Unconditional and fallback edges are protected. */
 export interface GraphVariantRoute {
@@ -24,6 +25,18 @@ export interface GraphVariantPlan {
   readonly growth?: GraphVariantGrowth;
 }
 
+/** 골 분석 중 최초 변형 선택이 보는 «두» 입력 — 문서 전용·저작 등급 같은 원 칸의 다른 축은 이 조각에 없다. */
+export interface GraphVariantGoalAnalysis {
+  readonly goalType: GoalType;
+  readonly targetPathCount: number;
+}
+
+/** 최초 graph variant 선택 — id·선택 이유가 런 원장 옆 .graph.yaml 에 함께 저장되고 재조회된다. */
+export interface GraphVariantSelection {
+  readonly variantId: string;
+  readonly reason: string;
+}
+
 export type GraphVariantRejection =
   | { readonly kind: 'invalid-goal' }
   | { readonly kind: 'unknown-node'; readonly node: string }
@@ -35,25 +48,46 @@ export type GraphVariantRejection =
   | { readonly kind: 'unreachable-terminal'; readonly node: string }
   | { readonly kind: 'invalid-graph'; readonly defects: ReturnType<typeof inspectPipelineGraph> }
   | { readonly kind: 'overlay-rejected'; readonly rejections: readonly OverlayRejection[] }
-  | { readonly kind: 'invalid-growth'; readonly reason: string };
+  | { readonly kind: 'invalid-growth'; readonly reason: string }
+  | { readonly kind: 'invalid-goal-analysis' };
 
 export type GraphVariantResult =
-  | { readonly ok: true; readonly overlay: GraphOverlaySpec; readonly template: GraphTemplateSpec; readonly patches: readonly OverlayPatchOp[] }
+  | { readonly ok: true; readonly overlay: GraphOverlaySpec; readonly template: GraphTemplateSpec; readonly patches: readonly OverlayPatchOp[]; readonly selection?: GraphVariantSelection }
   | { readonly ok: false; readonly rejections: readonly GraphVariantRejection[] };
 
+/** 최초 변형 선택(id·선택 이유)의 결정론적 유도 — 같은 종류·대상 경로 수면 항상 같은 값을 낸다. */
+export function initialGraphVariantSelection(analysis: GraphVariantGoalAnalysis): GraphVariantSelection {
+  const variantId = `variant-${analysis.goalType}-${createHash('sha256')
+    .update(JSON.stringify({ goalType: analysis.goalType, targetPathCount: analysis.targetPathCount }))
+    .digest('hex').slice(0, 12)}`;
+  return {
+    variantId,
+    reason: `initial graph variant selected from goal type ${analysis.goalType} with ${analysis.targetPathCount} target path${analysis.targetPathCount === 1 ? '' : 's'}`,
+  };
+}
+
 /** Pure, deterministic variant authoring. Never mutates the supplied template and never writes an overlay. */
 export function createGraphVariant(input: {
   readonly template: GraphTemplateSpec;
   readonly goal: string;
   readonly plan: GraphVariantPlan;
+  readonly goalAnalysis?: GraphVariantGoalAnalysis;
 }): GraphVariantResult {
-  const { template, goal, plan } = input;
+  const { template, goal, plan, goalAnalysis } = input;
   const known = new Set(template.nodes.map((node) => node.nodeId));
   const rejections: GraphVariantRejection[] = [];
   if (!/^g_[a-z0-9_-]+$/i.test(goal)) rejections.push({ kind: 'invalid-goal' });
+  let selection: GraphVariantSelection | undefined;
+  if (goalAnalysis !== undefined) {
+    if (!GOAL_TYPES.includes(goalAnalysis.goalType) || !Number.isSafeInteger(goalAnalysis.targetPathCount) || goalAnalysis.targetPathCount < 0) {
+      rejections.push({ kind: 'invalid-goal-analysis' });
+    } else {
+      selection = initialGraphVariantSelection(goalAnalysis);
+    }
+  }
   if (plan.growth) {
     const { node, from, outcome, returnTo } = plan.growth;
-    if (!node || typeof node !== 'object') return { ok: false, rejections: [{ kind: 'invalid-growth', reason: 'growth requires one new contracted node' }] };
+    if (!node || typeof node !== 'object') return { ok: false, rejections: [...rejections, { kind: 'invalid-growth', reason: 'growth requires one new contracted node' }] };
     const edgeIndex = template.edges.findIndex((edge) => edge.from === from);
     const edge = template.edges[edgeIndex];
     if (!known.has(from) || known.has(node.nodeId) || template.terminalNodes.includes(from) ||
@@ -94,7 +128,7 @@ export function createGraphVariant(input: {
     }
     const unreachable = projected.terminalNodes.filter((terminal) => !reached.has(terminal) || (edges[terminal]?.length ?? 0) !== 0);
     if (unreachable.length) return { ok: false, rejections: unreachable.map((terminal) => ({ kind: 'unreachable-terminal', node: terminal })) };
-    return { ok: true, overlay, template: projected, patches };
+    return { ok: true, overlay, template: projected, patches, ...(selection === undefined ? {} : { selection }) };
   }
   const patches: OverlayPatchOp[] = [];
 
@@ -167,5 +201,5 @@ export function createGraphVariant(input: {
   })) };
   const applied = applyGraphOverlays(validationTemplate, [overlay]);
   if (!applied.ok) return { ok: false, rejections: [{ kind: 'overlay-rejected', rejections: applied.rejections }] };
-  return { ok: true, overlay, template: projected, patches };
+  return { ok: true, overlay, template: projected, patches, ...(selection === undefined ? {} : { selection }) };
 }

package/src/self-implement/headless-elanous-driver.ts

@@ -72,6 +72,12 @@ import { setEventLoopActivity } from '../debug/event-loop-watchdog.js';
 import { resolveEscalateTarget, resolveExplicitChildEscalateTarget } from './rework-policy.js';
 import { tailWithOmissionMarker } from './off-diff-evidence.js';
 import type { EscalateTier } from './rework-policy.js';
+
+const VERIFIED_PR_SUPERVISOR_INPUT = 'PR source already verified. Implement the requested repair in this worktree now.';
+
+function supervisorInputForSource(input: string, verifiedPrSource: boolean | undefined): string {
+  return verifiedPrSource ? VERIFIED_PR_SUPERVISOR_INPUT : input;
+}
 import { readRunLifecycleFromStateDir } from '../signal/lifecycle-bridge.js';
 import { lifecycleRootReportEnv, lifecycleRootReportPath, readLifecycleRootReport, removeLifecycleRootReport } from '../signal/lifecycle-root-report.js';
 import { compareLifecycleToScreen, type LifecycleScreenComparison } from './lifecycle-screen-scoreboard.js';
@@ -967,6 +973,8 @@ export interface HeadlessGoalLoopPtyOptions {
   sendOutbound?: typeof sendOutbound;
   /** Queues an argv child supervisor input for the orchestrator's next-round prompt; never writes stdin. */
   onSupervisorInput?: (text: string, updateDelivery: (delivery: SupervisorDeliveryState, reason?: string) => void) => void;
+  /** The Pod has already checked out its pinned PR source. Supervisor input must not relaunch it. */
+  verifiedPrSource?: boolean;
   /** ★ 턴 abort 신호(#21) — /cancel 이 이 신호를 abort 하면 호스팅 PTY 를 즉시 kill + 폴 루프 조기 종료
    *  (고아 자식 프로세스 방지). 미주입 시 종전대로 exit/GOAL-COMPLETE/타임아웃까지 폴. */
   signal?: AbortSignal;
@@ -1720,7 +1728,7 @@ export async function runHeadlessGoalLoopPty(opts: HeadlessGoalLoopPtyOptions):
                   // pipeline with a synthetic wait, whose evidence is honestly `action-wait`; calling
                   // the brain would violate the no-consultation boundary, while weakening brainCalls
                   // would hide that boundary instead of preserving it.
-                  const decision: ControlDecision = blockedWrite
+                  const suggestedDecision: ControlDecision = blockedWrite
                     ? { action: 'wait' }
                     : await Promise.race([
                     Promise.resolve(opts.brain.decide(controlObs, controller.signal)),
@@ -1735,6 +1743,13 @@ export async function runHeadlessGoalLoopPty(opts: HeadlessGoalLoopPtyOptions):
                     }),
                     ...(parentAbort ? [parentAbort] : []),
                   ]);
+                  // The supervisor suggestion is untrusted text. In a PR-source Pod the
+                  // source was verified before this process started, so any proposed
+                  // input is reduced to an implementation instruction before it can
+                  // reach either the child queue or the parent progress surface.
+                  const decision: ControlDecision = opts.verifiedPrSource && suggestedDecision.action === 'input'
+                    ? { action: 'input', text: supervisorInputForSource(suggestedDecision.text, opts.verifiedPrSource) }
+                    : suggestedDecision;
                   const actionDetail = decision.action === 'input'
                     ? decision.text.slice(0, 120)
                     : decision.action === 'done' || decision.action === 'no-progress' ? decision.reason.slice(0, 120) : '';
@@ -2015,11 +2030,12 @@ export async function runHeadlessGoalLoopPty(opts: HeadlessGoalLoopPtyOptions):
       });
       if (artifactDecision.kind === 'escalate-terminal-success') {
         reachedCompletion = false;
+        const restartPacket = supervisorInputForSource(artifactDecision.restartPacket, opts.verifiedPrSource);
         debug.log('self-implement', 'headless.output-artifact-intervention', {
           ptyId, runId, kind: artifactDecision.kind, missing: artifactDecision.missing,
-          diagnostic: artifactDecision.diagnostic, restartPacket: artifactDecision.restartPacket,
+          diagnostic: artifactDecision.diagnostic, restartPacket,
         }, { level: 'warn' });
-        opts.onSupervisorInput?.(artifactDecision.restartPacket, () => {});
+        opts.onSupervisorInput?.(restartPacket, () => {});
       }
     }
     if (exitReason === 'loop-exhausted-without-completion' && reachedCompletion) {

package/src/self-implement/off-diff-evidence.ts

@@ -3,6 +3,7 @@
 import { requirePosixShellCommand } from '../platform/default-shell.js';
 import { spawnSync } from 'node:child_process';
 import { debug } from '../debug/log.js';
+import { narrowerEvidenceCommand } from './evidence-command-budget.js';
 import { resolveRunIdentity } from '../harness/harness-space.js';
 //
 // ⛔ **왜 필요한가** — 리뷰어의 증거 채널은 워크트리 diff 하나다(`seams.ts` 의 `reviewDiff`).
@@ -320,14 +321,21 @@ export function authorLimitationCountFromGoal(goal: string): number {
  *  추론된다. 위 두 타입과 같은 규율이다(죽은 공개 표면은 계약처럼 읽힌다 · 리뷰 must-fix). */
 interface RequiredEvidenceCheckRun {
   readonly tag: string;
+  /** Command required by the authored goal, even if a diagnostic substitute ran. */
   readonly command: string;
+  /** Command actually run; absent when the timeout budget stopped execution. */
+  readonly executedCommand?: string;
   readonly exitCode: number | null;
   readonly stdout: string;
   /** EVIDENCE-WIRING-EXEMPT — `bun test` writes its «N pass / 0 fail» summary to stderr. */
   readonly stderr: string;
   readonly durationMs: number;
+  /** A narrower smoke check diagnoses the timeout but cannot prove the original requirement. */
+  readonly substitutedFor?: string;
 }
 
+type EvidenceCommandRunner = (command: string, cwd: string) => Pick<ReturnType<typeof spawnSync>, 'status' | 'stdout' | 'stderr' | 'error'>;
+
 /**
  * ★ `I-24` / `RUN-T6` — 골에서 **요구된 증거**를 읽는다. **순수**.
  *
@@ -394,7 +402,7 @@ export function goalDeclaresNoWiring(goal: string): boolean {
 
 /** A `bun test` check that ran its tests and failed none: rc 0 ⊕ «N pass» (N ≥ 1) ⊕ «0 fail» in its output. */
 function bunTestCheckPassed(run: RequiredEvidenceCheckRun): boolean {
-  if (run.exitCode !== 0 || !/(?:^|[\s;&|(])bun\s+(?:run\s+)?test\b/.test(run.command)) return false;
+  if (run.substitutedFor || run.exitCode !== 0 || !/(?:^|[\s;&|(])bun\s+(?:run\s+)?test\b/.test(run.executedCommand ?? run.command)) return false;
   const output = `${run.stdout}\n${run.stderr}`;
   return /(?:^|\n)\s*[1-9]\d*\s+pass\b/.test(output) && /(?:^|\n)\s*0\s+fail\b/.test(output);
 }
@@ -418,20 +426,46 @@ export function settleUncoveredEvidence(
 }
 
 /** 골 작성자가 요구 줄에 명시한 셸 체크를 하니스 worktree에서 관측한다. `bun test` 체크의 통과는
- *  settleUncoveredEvidence 가 그 요구의 덮임으로 받는다(EVIDENCE-WIRING-EXEMPT). */
-export function runRequiredEvidenceChecks(goal: string, cwd: string, runId?: string): RequiredEvidenceCheckRun[] {
+ *  settleUncoveredEvidence 가 그 요구의 덮임으로 받는다(EVIDENCE-WIRING-EXEMPT).
+ *  단독 호출에 timeoutCounts/headCommit을 주지 않으면 재시도 예산이 없다. 실제 라운드 호출자는
+ *  run 단위 createRequiredEvidenceBudget을 써야 HEAD 미확인 때도 임시 예산이 적용된다. */
+export function runRequiredEvidenceChecks(goal: string, cwd: string, runId?: string, options: {
+  timeoutCounts?: Map<string, number>;
+  headCommit?: string;
+  run?: EvidenceCommandRunner;
+} = {}): RequiredEvidenceCheckRun[] {
   const identity = resolveRunIdentity({ explicit: runId });
   const checks = requiredEvidenceFromGoal(goal).flatMap(({ tag, verifyCommand }) => verifyCommand ? [{ tag, command: verifyCommand }] : []);
+  // Direct callers without a measured HEAD have no stable revision identity;
+  // the run-owned wrapper supplies a temporary identity when appropriate.
+  const timeoutCounts = options.headCommit ? options.timeoutCounts : undefined;
+  const budgetKey = (command: string) => `${options.headCommit ?? ''}\0${command}`;
   const runs = checks.map(({ tag, command }) => {
     const startedAt = Date.now();
-    const result = spawnSync(requirePosixShellCommand('/bin/sh'), ['-c', command], { cwd, encoding: 'utf8', timeout: 180_000, maxBuffer: 32 * 1024 * 1024 });
+    const priorTimeouts = timeoutCounts?.get(budgetKey(command)) ?? 0;
+    const replacement = priorTimeouts >= 2 ? narrowerEvidenceCommand(command, cwd) : null;
+    const executedCommand = replacement ?? command;
+    const replacementTimeouts = replacement ? (timeoutCounts?.get(budgetKey(replacement)) ?? 0) : 0;
+    if (priorTimeouts >= 2 && (!replacement || replacementTimeouts >= 2)) {
+      try { debug.log('self-implement.evidence', 'command-budget-stop', { runId: identity.runId, command, replacement, timeoutCount: priorTimeouts, replacementTimeoutCount: replacementTimeouts }); } catch { /* observation is fail-soft */ }
+      return { tag, command, exitCode: null, stdout: '', stderr: 'Evidence command timed out twice; no further identical test run was attempted.', durationMs: 0 };
+    }
+    if (replacement) {
+      try { debug.log('self-implement.evidence', 'command-budget-switch', { runId: identity.runId, from: command, to: replacement, timeoutCount: priorTimeouts }); } catch { /* observation is fail-soft */ }
+    }
+    const result = options.run?.(executedCommand, cwd)
+      ?? spawnSync(requirePosixShellCommand('/bin/sh'), ['-c', executedCommand], { cwd, encoding: 'utf8', timeout: 180_000, maxBuffer: 32 * 1024 * 1024 });
+    const timedOut = result.error && 'code' in result.error && result.error.code === 'ETIMEDOUT';
+    if (timedOut && timeoutCounts) timeoutCounts.set(budgetKey(executedCommand), (timeoutCounts.get(budgetKey(executedCommand)) ?? 0) + 1);
     return {
       tag,
       command,
+      executedCommand,
       exitCode: result.status,
-      stdout: tailWithOmissionMarker(result.stdout ?? '', MAX_OFF_DIFF_EVIDENCE_RESULT_CHARS),
-      stderr: tailWithOmissionMarker(result.stderr ?? '', MAX_OFF_DIFF_EVIDENCE_RESULT_CHARS),
+      stdout: tailWithOmissionMarker(typeof result.stdout === 'string' ? result.stdout : result.stdout?.toString('utf8') ?? '', MAX_OFF_DIFF_EVIDENCE_RESULT_CHARS),
+      stderr: tailWithOmissionMarker(typeof result.stderr === 'string' ? result.stderr : result.stderr?.toString('utf8') ?? '', MAX_OFF_DIFF_EVIDENCE_RESULT_CHARS),
       durationMs: Date.now() - startedAt,
+      ...(replacement ? { substitutedFor: command } : {}),
     };
   });
   const observation = { count: runs.length, runs };
@@ -443,6 +477,24 @@ export function runRequiredEvidenceChecks(goal: string, cwd: string, runId?: str
   return runs;
 }
 
+/** One self-implement run owns this state; a changed HEAD starts a fresh budget. */
+export function createRequiredEvidenceBudget(options: { run?: EvidenceCommandRunner } = {}): (
+  goal: string, cwd: string, runId: string | undefined, headCommit: string | undefined,
+) => RequiredEvidenceCheckRun[] {
+  let previousHead: string | undefined;
+  const timeoutCounts = new Map<string, number>();
+  // This closure is created once per self-implement run. Its unresolved key
+  // bounds repeats within that run without pooling with another run or SHA.
+  const unresolvedRunHead = 'unresolved-head-within-this-run';
+  return (goal, cwd, runId, headCommit) => {
+    if (previousHead !== headCommit) {
+      timeoutCounts.clear();
+      previousHead = headCommit;
+    }
+    return runRequiredEvidenceChecks(goal, cwd, runId, { timeoutCounts, headCommit: headCommit ?? unresolvedRunHead, run: options.run });
+  };
+}
+
 /** 자식 프롬프트에 실을 요구 목록. 요구가 없으면 **아무 줄도 안 붙인다**(빈 계약을 만들지 않는다). */
 export function renderRequiredEvidencePrompt(items: readonly RequiredEvidenceItem[]): string[] {
   if (!items.length) return [];