elanous 0.2.35 → 0.2.37

package/src/ux-sim/fault-nextmove-dispatch.ts

@@ -29,6 +29,10 @@ import { createTempGitRemote, type TempGitRemote } from './temp-git-remote.js';
 import { runRepairCycle, type RepairCycleInput, type RepairLaunchRequest } from '../task-agent/repair-cycle.js';
 import { applyRepairBundle, REPAIR_BUNDLE_REF, type RepairCasDeps } from '../task-agent/repair-branch-cas.js';
 import { readTaskCard, writeTaskCards, type TaskCard } from '../task-agent/task-hand.js';
+import { recordTaskAgentShadowMove, RELAUNCH_LAUNCHED_EVENT } from '../task-agent/shadow.js';
+import { installHarnessCliCommand } from '../harness/harness-cli-command.js';
+import type { SupervisorJobResult } from '../self-dev/run-supervisor.js';
+import { Command } from 'commander';
 
 /** 이 심을 재는 증거 명령 — 매뉴얼 §3 과 영수증의 «명령» 칸이 같은 문자열이다. */
 export const FAULT_NEXTMOVE_DISPATCH_COMMAND = 'bun test src/ux-sim/fault-nextmove-dispatch.test.ts';
@@ -166,6 +170,10 @@ export interface FaultNextmoveDispatchObservation {
   readonly ghCalls: number;
   /** 생산 확인 루프가 요청한 지연(ms) — 확인 지연이 «생산 루프를 다 돈 뒤» unconfirmed 가 됐다는 증거. */
   readonly confirmSleeps: readonly number[];
+  /** HARNESS-FULL-GRAPH-NEXTMOVE — 한 수의 id 를 세 원문에서 읽은 값(결정 = next-move 노드 출구 · 간선 · 실제 발사 요청). */
+  readonly moveId: { readonly decision: string | undefined; readonly edge: string | undefined; readonly dispatch: string | undefined;
+    /** NEXTMOVE-GENERAL-RELAUNCH-MOVEID — 회수 틱이 결과 파일과 짝지어 카드 `repair-result` 줄에 실은 값. */
+    readonly consumed: string | undefined };
   /** 두 틱이 낸 알림(심이 받아 적음 · 운영 우편함 0). */
   readonly notified: readonly { seat: string; body: string }[];
   /** 영수증 = 명령 ⊕ injectionId ⊕ 결과. */
@@ -179,10 +187,13 @@ export async function simFaultNextmoveDispatch(): Promise<FaultNextmoveDispatchO
   const firstTick = new Date('2026-10-21T08:00:00.000Z');
   const secondTick = new Date('2026-10-21T08:01:00.000Z');
   const edges: Record<string, unknown>[] = [];
+  const decisions: Record<string, unknown>[] = [];
   const off = debug.registerSink({
     name: `ux-sim-fault-nextmove-dispatch-${injectionId}`,
     emit: (record) => {
       if (record.category === 'self-implement' && record.event === 'graph-edge-taken') edges.push(record.data as Record<string, unknown>);
+      if (record.category === 'self-implement' && record.event === 'pipeline-node-exit'
+        && (record.data as Record<string, unknown> | undefined)?.node === 'next-move') decisions.push(record.data as Record<string, unknown>);
     },
   });
   // ⛔ 생산 기본 notify(`msg post`)·request(detached elanous spawn)에 «절대» 닿지 않게 두 틱 모두 기록용 심을 준다.
@@ -208,9 +219,10 @@ export async function simFaultNextmoveDispatch(): Promise<FaultNextmoveDispatchO
     // 수리 worker 가 끝 JSON ⊕ artifact 를 남겼다(생산 회수 경로가 읽는 꼴 그대로).
     const result = { pr: PR, baseHead: fixture.head, runId: launch.runId, commit: fixture.commit, bundleSha256: fixture.bundleSha256 };
     writeFileSync(join(fixture.artifactDir, 'result.json'), JSON.stringify(result));
+    // 생산 runRepairWorker 는 받은 --move-id 를 결과 파일에 그대로 싣는다(RepairWorkerResult.moveId).
     writeFileSync(launch.resultPath, JSON.stringify({
       pr: PR, head: fixture.head, runId: launch.runId, ok: true, job: JOB,
-      artifactDir: fixture.artifactDir, result,
+      artifactDir: fixture.artifactDir, result, moveId: launch.moveId,
     }));
     // 틱 ② — 결과 회수. 생산 applyRepairBundle 이 exact-head CAS push 에 성공하고
     // PR 머리 확인이 늙은 가짜 gh 머리를 못 따라잡아 unconfirmed 로 돌아온다.
@@ -228,6 +240,14 @@ export async function simFaultNextmoveDispatch(): Promise<FaultNextmoveDispatchO
       reason: second.reason,
     };
     const edgeCount = edges.filter((edge) => edge.from === 'next-move' && edge.to === 'dispatch').length;
+    const asId = (value: unknown): string | undefined => (typeof value === 'string' ? value : undefined);
+    const moveId = {
+      // 발사 요청과 같은 runId 의 결정만 짝짓는다(결정이 여럿이어도 남의 결정과 대조하지 않게).
+      decision: asId(decisions.find((row) => row.runId === launch.runId)?.moveId),
+      edge: asId(edges.find((edge) => edge.from === 'next-move' && edge.to === 'dispatch')?.moveId),
+      dispatch: launch.moveId,
+      consumed: asId(stored?.history.find((entry) => entry.event === 'repair-result' && entry.runId === launch.runId)?.moveId),
+    };
     const remoteHead = fixture.remote.git(fixture.remote.checkout, ['ls-remote', 'origin', `refs/heads/${BRANCH}`]).split('\t')[0] ?? '';
     const ghCalls = fixture.fakeBins.calls().filter((call) => call.name === 'gh').length;
     const receipt = {
@@ -240,6 +260,7 @@ export async function simFaultNextmoveDispatch(): Promise<FaultNextmoveDispatchO
       edge: { count: edgeCount, record: edges.find((edge) => edge.from === 'next-move' && edge.to === 'dispatch'), decision: first.decision },
       unconfirmed,
       remoteHead,
+      moveId,
       repairCommit: fixture.commit,
       ghCalls,
       confirmSleeps: [...fixture.confirmSleeps],
@@ -258,9 +279,89 @@ export function renderFaultNextmoveDispatch(observation: FaultNextmoveDispatchOb
     'fault-nextmove-dispatch · 층 L2 · 생산 runRepairCycle/repairNextMove/applyRepairBundle 직접 호출(GitHub API·네트워크 0)',
     `  receipt: command=${observation.receipt.command} ⊕ injectionId=${observation.receipt.injectionId} ⊕ result=${observation.receipt.result}`,
     `  ① graph-edge-taken: ${JSON.stringify(observation.edge.record ?? {})}`,
+    `  ⓜ moveId: ${renderMoveIds(observation.moveId)}`,
     `  ② unconfirmed: decision=${observation.unconfirmed.decision} · status=${observation.unconfirmed.status ?? '-'} · reason=${observation.unconfirmed.reason}`,
     `  원격 PR 가지 머리: ${observation.remoteHead.slice(0, 12)} · 수리 commit ${observation.repairCommit.slice(0, 12)} · push ${observation.remoteHead === observation.repairCommit ? '됨' : '안 됨'}`,
     `  확인 지연 루프 요청(ms): ${observation.confirmSleeps.join(',') || '-'} · 알림 ${observation.notified.length}건(심이 받음)`,
     `  가짜 gh 심 호출: ${observation.ghCalls}회 · 발사 틱 판정: ${observation.edge.decision}`,
   ];
 }
+
+/** 수 id 네 원문 한 줄 — 넷이 다 같아야 «일치». */
+function renderMoveIds(ids: { decision: string | undefined; edge: string | undefined; dispatch: string | undefined; consumed: string | undefined }): string {
+  const same = ids.decision !== undefined && [ids.edge, ids.dispatch, ids.consumed].every((id) => id === ids.decision);
+  return `decision=${ids.decision ?? '-'} · graph-edge-taken=${ids.edge ?? '-'} · dispatch=${ids.dispatch ?? '-'} · consumed=${ids.consumed ?? '-'} · ${same ? '일치' : '불일치'}`;
+}
+
+// ── NEXTMOVE-GENERAL-RELAUNCH-MOVEID — 일반 재발사(TA terminal → `harness say` 문자열 경로) 한 건 ─────────
+//   생산 recordTaskAgentShadowMove(shadow.ts) → executeNextAction(actions.ts) 를 그대로 돌리고, 실행부가 낸 argv 를
+//   생산 `harness say` CLI 파서(installHarnessCliCommand)에 그대로 먹인다. ⛔ 실제 발사·spawn 0 — command 는 argv 를 적기만 하고,
+//   say 처리기는 문장만 받아 적는다. 카드 상태는 임시 디렉터리 하나에만 쓰고 끝에 지운다.
+
+export const FAULT_NEXTMOVE_GENERAL_COMMAND = 'bun test src/self-dev/graph-nextmove-moveid.test.ts -t "general relaunch device"';
+
+export interface FaultNextmoveGeneralObservation {
+  readonly injectionId: string;
+  readonly executorResult: string | null;
+  /** 실행부가 낸 발사 argv(하나). */
+  readonly argv: readonly string[];
+  /** 결정(next-move 노드 출구) · graph-edge-taken · 발사(harness say 가 받은 값) · 카드 history(relaunch-launched). */
+  readonly moveId: { readonly decision: string | undefined; readonly edge: string | undefined; readonly dispatch: string | undefined; readonly consumed: string | undefined };
+  readonly receipt: { readonly command: string; readonly injectionId: string; readonly result: string };
+}
+
+export async function simFaultNextmoveGeneralRelaunch(): Promise<FaultNextmoveGeneralObservation> {
+  const injectionId = `fng-${randomBytes(6).toString('hex')}`;
+  const root = mkdtempSync(join(tmpdir(), 'ux-sim-nextmove-general-'));
+  const runId = `run-sim-general-${injectionId.slice(4)}`;
+  const statePath = join(root, 'task-agent-actions.json');
+  const card: TaskCard = { id: 'ta-sim-general', text: 'feature ask', seat: 'TC', createdAt: '2026-10-22T08:00:00.000Z',
+    status: 'launched', history: [], runId };
+  writeTaskCards(statePath, [card]);
+  const rows: { category: string; event: string; data: Record<string, unknown> }[] = [];
+  const off = debug.registerSink({ name: `ux-sim-fault-nextmove-general-${injectionId}`, emit: (record) => {
+    if (record.category === 'self-implement' || record.category === 'harness') rows.push({ category: record.category, event: record.event, data: record.data as Record<string, unknown> });
+  } });
+  try {
+    const argvs: string[][] = [];
+    const job = { taskId: 't', feature: 'feature ask', status: 'done' } as SupervisorJobResult;
+    const move = await recordTaskAgentShadowMove({ runId, stopReason: 'no-progress', results: [job] }, {
+      // 빈 env — Pod·카드 힌트 없이 HQ 로컬 런으로 판단한다(운영 env 를 읽지 않는다).
+      env: {} as NodeJS.ProcessEnv, statePath, log: () => {}, liveMoves: new Set(['narrow-relaunch']),
+      loadGate: { loadMax: 2, load1: () => 0.5 },
+      command: async (args) => { argvs.push(args); return { status: 0, stdout: '' }; },
+    });
+    if (argvs.length !== 1) throw new Error(`fault-nextmove-general: 발사 argv ${argvs.length}건(기대 1) · executorResult=${move.executorResult}`);
+    // 발사 받는 쪽 — 생산 harness say 파서에 그 argv 를 그대로(처리기는 문장만 적는다 · 발사 0).
+    const program = new Command().exitOverride();
+    const said: string[][] = [];
+    installHarnessCliCommand(program, { registerSink: async () => {}, resolveSurface: async () => 'harness',
+      say: async (words: string[]) => { said.push(words); } } as never);
+    await program.parseAsync(['node', 'elanous', ...argvs[0]!]);
+    if (said.length !== 1) throw new Error(`fault-nextmove-general: harness say 처리기 호출 ${said.length}건(기대 1)`);
+    const asId = (value: unknown): string | undefined => (typeof value === 'string' ? value : undefined);
+    const stored = readTaskCard(card.id, statePath);
+    const moveId = {
+      decision: asId(rows.find((row) => row.event === 'pipeline-node-exit' && row.data.node === 'next-move' && row.data.runId === runId)?.data.moveId),
+      edge: asId(rows.find((row) => row.event === 'graph-edge-taken' && row.data.from === 'next-move' && row.data.to === 'dispatch')?.data.moveId),
+      dispatch: asId(rows.find((row) => row.category === 'harness' && row.event === 'move-id-received')?.data.moveId),
+      consumed: asId(stored?.history.find((entry) => entry.event === RELAUNCH_LAUNCHED_EVENT && entry.runId === runId)?.moveId),
+    };
+    return {
+      injectionId, executorResult: move.executorResult, argv: argvs[0]!, moveId,
+      receipt: { command: FAULT_NEXTMOVE_GENERAL_COMMAND, injectionId, result: renderMoveIds(moveId) },
+    };
+  } finally {
+    off();
+    rmSync(root, { recursive: true, force: true });
+  }
+}
+
+export function renderFaultNextmoveGeneralRelaunch(observation: FaultNextmoveGeneralObservation): string[] {
+  return [
+    'fault-nextmove-dispatch · 일반 재발사 · 층 L2 · 생산 recordTaskAgentShadowMove/executeNextAction/harness say 파서 직접 호출(발사·spawn 0)',
+    `  receipt: command=${observation.receipt.command} ⊕ injectionId=${observation.receipt.injectionId} ⊕ result=${observation.receipt.result}`,
+    `  실행부 결과: ${observation.executorResult ?? '-'} · argv 꼬리: ${JSON.stringify(observation.argv.slice(-2))}`,
+    `  ⓜ moveId: ${renderMoveIds(observation.moveId)}`,
+  ];
+}

package/src/ux-sim/fault-scope-escape-lift.ts

@@ -10,6 +10,11 @@
 //    ② 원장 줄 pod-child-run ⊕ pod-child-evidence — self-implement-pod.ts 가 쓰는 꼴 그대로 appendRunLedgerEntry
 //    ③ classifyHarnessPodExit → recordHarnessPodStop(부모 stop) → recordClassifiedHarnessPodExit(incident) · harness-cli-command.ts
 //    부모 출력 줄은 formatOrchestrateResultLine(운영 요약 줄) ⊕ extractPodFailureReason(운영 Pod 사유)로 만든다.
+//    ④ 처방 = AUTOHEAL_ACTION_BY_CLASS[stop.class](stop-autoheal.ts 표) — «런 계속(resume-from-salvage)» vs «정지(needs-owner)».
+//
+// 🔀 SCOPE-ESCAPE-AS-REFINE (2026-10-22 · 대표 «범위 밖 허용도 로직으로») — 정지 사유(삭제·보호 경로·상한) 없는 held 편집은
+//    scope-escape 가 아니라 newScope(«구현이 알려준 새 범위»)로 기록된다. 사례 셋:
+//    'scope-escape' = 사유 없는 held(옛 정지 → 이제 계속) · 'scope-stop' = 삭제 사유 held(여전히 정지) · 'implementation-deficit' = held 없음.
 //    kubectl·Pod·네트워크는 없다. 쓰기는 임시 ELANOUS_STATE_DIR 하나에만 가고 끝에 지운다.
 
 import { mkdtempSync, rmSync } from 'node:fs';
@@ -23,8 +28,9 @@ import { classifyHarnessPodExit, recordClassifiedHarnessPodExit, recordHarnessPo
 import { readRunExits } from '../harness/harness-incidents.js';
 import { appendRunLedgerEntry, loadRunLedger, runLedgerDir } from '../self-implement/run-ledger.js';
 import { readRunStopRecord, type RunStopRecord } from '../self-implement/run-stop.js';
+import { AUTOHEAL_ACTION_BY_CLASS, type AutohealAction } from '../self-implement/stop-autoheal.js';
 
-export type ScopeEscapeLiftCase = 'scope-escape' | 'implementation-deficit';
+export type ScopeEscapeLiftCase = 'scope-escape' | 'scope-stop' | 'implementation-deficit';
 
 /** 두 입력이 공유하는 자식 끝 JSON 몸통 — `attachAbandonedClassification` 이 붙이는 분류 꼴 그대로. */
 function childBase(): Record<string, unknown> {
@@ -55,6 +61,11 @@ export function scopeEscapeChildResult(): Record<string, unknown> {
   return { ...childBase(), ...held };
 }
 
+/** 정지 사유가 있는 범위 이탈 — orchestrator decideScopeExpansion 이 삭제를 보고 held 한 끝 JSON(scopeStopReasons 한 칸 더). */
+export function scopeStopChildResult(): Record<string, unknown> {
+  return { ...scopeEscapeChildResult(), scopeStopReasons: ['deletion'] };
+}
+
 /** 구현 결손 — held 편집 없이 같은 분류(implementation-deficit)로 멈춘 끝 JSON. */
 export function implementationDeficitChildResult(): Record<string, unknown> {
   return childBase();
@@ -74,6 +85,10 @@ export interface ScopeEscapeLiftObservation {
   readonly stop: RunStopRecord | undefined;
   /** recordClassifiedHarnessPodExit 가 incidents 에 쓴 한 줄. */
   readonly incident: { reason: string; childEvidence?: PodChildEvidence } | undefined;
+  /** stop class 의 기본 처방(AUTOHEAL_ACTION_BY_CLASS) — needs-owner 면 정지, 아니면 런이 이어진다. */
+  readonly autohealAction: AutohealAction | undefined;
+  /** childEvidence.newScope — «구현이 알려준 새 범위»(정지 사유 없는 범위 밖 편집). */
+  readonly newScope: readonly string[] | undefined;
 }
 
 function withTempState<T>(fn: (root: string) => T): T {
@@ -91,7 +106,8 @@ function withTempState<T>(fn: (root: string) => T): T {
 /** 한 자식 실패를 부모 기록 경로 전체에 흘리고 각 층의 필드를 돌려준다. */
 export function simScopeEscapeLift(
   which: ScopeEscapeLiftCase,
-  childResult: Record<string, unknown> = which === 'scope-escape' ? scopeEscapeChildResult() : implementationDeficitChildResult(),
+  childResult: Record<string, unknown> = which === 'scope-escape' ? scopeEscapeChildResult()
+    : which === 'scope-stop' ? scopeStopChildResult() : implementationDeficitChildResult(),
 ): ScopeEscapeLiftObservation {
   const suffix = randomBytes(4).toString('hex');
   const runId = `run-sim-scope-lift-${suffix}`;
@@ -121,6 +137,7 @@ export function simScopeEscapeLift(
     const ledger = loadRunLedger(runId, dir) ?? [];
     const stopEntry = ledger.find((entry) => entry.event === 'stop');
     const incidentRow = readRunExits(root).find((row) => row.runId === runId);
+    const stop = stopEntry ? readRunStopRecord(stopEntry) : undefined;
     return {
       case: which,
       disposition: {
@@ -130,9 +147,11 @@ export function simScopeEscapeLift(
       childEvidence,
       ledgerChildEvidence: ledger.find((entry) => entry.event === 'pod-child-evidence')?.data.childEvidence,
       parentExitReason: classified.reason,
-      stop: stopEntry ? readRunStopRecord(stopEntry) : undefined,
+      stop,
       incident: incidentRow ? { reason: incidentRow.reason,
         ...(incidentRow.childEvidence ? { childEvidence: incidentRow.childEvidence } : {}) } : undefined,
+      autohealAction: stop ? AUTOHEAL_ACTION_BY_CLASS[stop.class] : undefined,
+      newScope: childEvidence?.newScope,
     };
   });
 }
@@ -140,6 +159,8 @@ export function simScopeEscapeLift(
 export interface ScopeEscapeLiftPair {
   readonly scopeEscape: ScopeEscapeLiftObservation;
   readonly implementationDeficit: ScopeEscapeLiftObservation;
+  /** 정지 사유(삭제) 있는 범위 이탈 — 비교 밖 · 정지가 남아 있음을 같은 화면에 보인다. */
+  readonly scopeStop: ScopeEscapeLiftObservation;
   /** 두 결과가 갈린 칸(고정 순서). */
   readonly differingFields: readonly string[];
   /** 두 결과가 같은 칸(고정 순서). */
@@ -152,23 +173,27 @@ const COMPARED: ReadonlyArray<readonly [string, (o: ScopeEscapeLiftObservation)
   ['childEvidence.classification', (o) => o.childEvidence?.classification],
   ['childEvidence.scopeEscape', (o) => o.childEvidence?.scopeEscape],
   ['childEvidence.outOfScopeEdits', (o) => o.childEvidence?.outOfScopeEdits],
+  ['childEvidence.newScope', (o) => o.childEvidence?.newScope],
   ['childEvidence.detail', (o) => o.childEvidence?.detail],
   ['parentExitReason', (o) => o.parentExitReason],
   ['stop.class', (o) => o.stop?.class],
-  ['stop.cause', (o) => o.stop?.cause],
+  // 무작위 Job 이름 접미는 비교에서 뺀다 — 같은 사유가 Job 이름 때문에 «갈렸다» 고 읽히지 않게.
+  ['stop.cause', (o) => o.stop?.cause.replace(/si-sim-scope-lift-[0-9a-f]+/g, 'si-sim-scope-lift-*')],
   ['incident.reason', (o) => o.incident?.reason],
+  ['autohealAction', (o) => o.autohealAction],
 ];
 
 /** 두 입력을 나란히 흘리고 갈린 칸을 센다. */
 export function simScopeEscapeLiftPair(): ScopeEscapeLiftPair {
   const scopeEscape = simScopeEscapeLift('scope-escape');
   const implementationDeficit = simScopeEscapeLift('implementation-deficit');
+  const scopeStop = simScopeEscapeLift('scope-stop');
   const differingFields: string[] = [];
   const sameFields: string[] = [];
   for (const [name, read] of COMPARED) {
     (JSON.stringify(read(scopeEscape)) === JSON.stringify(read(implementationDeficit)) ? sameFields : differingFields).push(name);
   }
-  return { scopeEscape, implementationDeficit, differingFields, sameFields };
+  return { scopeEscape, implementationDeficit, scopeStop, differingFields, sameFields };
 }
 
 /** CLI·시험 출력 한 화면 — 두 분류 원문을 나란히. */
@@ -176,10 +201,12 @@ export function renderScopeEscapeLift(pair: ScopeEscapeLiftPair): string[] {
   const row = (o: ScopeEscapeLiftObservation): string =>
     `  ${o.case} · classification=${o.childEvidence?.classification ?? '-'} · scopeEscape=${String(o.childEvidence?.scopeEscape ?? '-')}`
     + ` · exit=${o.parentExitReason} · stop=${o.stop?.class ?? '-'} · incident=${o.incident?.reason ?? '-'}`
-    + ` · failureClassification=${o.disposition.failureClassification ?? '-'}`;
+    + ` · failureClassification=${o.disposition.failureClassification ?? '-'}`
+    + ` · newScope=${o.newScope ? JSON.stringify(o.newScope) : '-'} · autoheal=${o.autohealAction ?? '-'}`;
   return [
     'scope-escape-lift · 층 L1 · 운영 함수 직접 호출(kubectl·네트워크 0)',
     row(pair.scopeEscape),
+    row(pair.scopeStop),
     row(pair.implementationDeficit),
     `  다른 칸: ${pair.differingFields.join(', ') || '없음'}`,
     `  같은 칸: ${pair.sameFields.join(', ') || '없음'}`,

package/src/ux-sim/fault-tui-400-autoheal.ts

@@ -0,0 +1,297 @@
+// 결함 주입 심 «TUI 턴 400 자동 회복» ── classic TUI 턴이 모델 API 400(대화 기록 어긋남)을 받으면
+// ① 새 백엔드 세션 ⊕ 직전 요약으로 1회 재시도 → ② 또 400 이면 llm.fallbackChain 다음 공급자로 그 턴 재시도
+// → 둘 다 실패면 턴당 2회 상한에서 사람에게 이유 한 줄 — 를 프로세스 안(S1)에서 재현한다.
+//
+// 🚨 왜 이것이 있나 (TUI-400-AUTOHEAL-FALLBACK · 대표 10-22)
+// 10-22 07:1x OPT TUI 턴이 «Codex API 400(대화 기록 어긋남 의심)» 로 끝나고 멈췄다. 지문 `codex-400-bad-request` 는
+// «/session new 뒤 다시» 를 사람에게 보여줄 뿐이었고 OP 가 손으로 쳐서 회복했다. 이 심이 그 멈춤(RED)과 회복(GREEN)을 가른다.
+//
+// ⛔ 흉내 내지 않는다 — 생산 턴 경로를 그대로 부른다:
+//   `runDashboardChatMainPlainTurn`(classic TUI plain 턴) → `bootDashboardAcpSession`(in-process ACP · 대시보드와 같은 부트)
+//   → `bridgeCoreTurnToAcp` → `runCoreTurn` → `streamLLMWithTools` → 생산 `PROVIDERS['openai-codex']`(Responses API HTTP)
+//   ⊕ 폴백 대상 생산 `PROVIDERS.glm`(zai 코딩 플랜 · 자격 env 하나만 가짜). 자동 회복 배선도 대시보드와 같은
+//   `createDashboardTurnAutoheal` 이고, 요약은 생산 `compactConversation`(같은 codex 경로로 요약 요청)이다.
+// 주입은 HTTP 경계 하나뿐: codex 쪽은 스크립트된 400(실제 «No tool call found for function call output» 꼴) 또는
+// 정상 SSE · zai 코딩 엔드포인트는 정상 SSE 또는 400. 화면 쪽은 줄 배열(렌더 없음 — 렌더는 headless-tui 심의 몫).
+// 관측 = 화면 줄 · self-health.autoheal 이벤트 · 공급자별 HTTP 호출 수 · 영수증(명령 ⊕ injectionId ⊕ 결과) · 층 L1.
+
+import { randomUUID } from 'node:crypto';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { _resetKeyCacheForTests } from '../config.js';
+import { debug } from '../debug/log.js';
+import { PROVIDERS } from '../llm.js';
+import { ZAI_CODING_PLAN_URL } from '../llm/zai-coding-plan.js';
+import { ZAI_POD_SECRET_KEY } from '../task-orchestrator/surfaces/pod-zai-child.js';
+import { setUserConfigOverlay } from '../user-config.js';
+import { getCompactSystemPrompt } from '../compact/index.js';
+import { bootDashboardAcpSession } from '../dashboard/acp-boot.js';
+import {
+  runDashboardChatMainPlainTurn,
+  type DashboardChatMainPlainTurnRuntimeDeps,
+} from '../dashboard/input/chat-main-plain-turn-runtime.js';
+import { createDashboardTurnAutoheal } from '../dashboard/input/turn-autoheal.js';
+import type { ChatMessage } from '../chat/index.js';
+
+export const TUI_400_AUTOHEAL_LEVEL = 'L1' as const;
+export const TUI_400_AUTOHEAL_EVIDENCE_COMMAND = 'bun test src/ux-sim/fault-tui-400-autoheal.test.ts';
+
+/** 실제 codex 400 «대화 기록 어긋남» 본문 꼴(seat-autowake 가 잡는 `No tool call found for function call output with call_id`). */
+export const TUI_400_HISTORY_MISMATCH_BODY = JSON.stringify({
+  error: {
+    message: 'No tool call found for function call output with call_id call_autoheal_sim.',
+    type: 'invalid_request_error', param: 'input', code: null,
+  },
+});
+export const TUI_400_CODEX_ANSWER = '[tui-400-autoheal] codex OK';
+export const TUI_400_ZAI_ANSWER = '[tui-400-autoheal] zai OK';
+export const TUI_400_SUMMARY = '[tui-400-autoheal] 요약: 앞 질문은 src/a.ts 읽기';
+
+/** 시나리오 — codex «HTTP 호출»별 응답 스크립트(요약 요청은 따로 정상 응답) ⊕ zai 응답.
+ *  ⚠️ 생산 재시도 정책(`fetchApiWithRetry` → `decideRetry`)이 400 을 같은 공급자로 한 번 더 보낸다 —
+ *  그래서 «턴 한 번 실패» = codex 400 두 번이다(llm.retry 관측으로 센다). 스크립트는 그 실측 꼴을 따른다. */
+export type Tui400Scenario = 'heal-new-session' | 'heal-provider' | 'exhausted';
+
+const SCRIPTS: Readonly<Record<Tui400Scenario, { codex: ReadonlyArray<'400' | 'ok'>; zai: '400' | 'ok' }>> = {
+  'heal-new-session': { codex: ['400', '400', 'ok'], zai: 'ok' },
+  'heal-provider': { codex: ['400', '400', '400', '400'], zai: 'ok' },
+  exhausted: { codex: ['400', '400', '400', '400'], zai: '400' },
+};
+
+const ISOLATED_LLM_ENV_KEYS = [
+  'OPENAI_API_KEY', 'XAI_API_KEY', 'GROK_API_KEY', 'GROK_CODE_XAI_API_KEY', 'ANTHROPIC_API_KEY',
+  'GEMINI_API_KEY', 'GOOGLE_API_KEY', 'LOCAL_LLM_URL', 'OPENROUTER_API_KEY', 'OPENGATEWAY_API_KEY', 'ZAI_API_KEY',
+  'ELANOUS_TEST_FAKE_LLM', 'ELANOUS_TEST_FAKE_LLM_AS_PROVIDER',
+] as const;
+
+export interface Tui400Observation {
+  readonly level: typeof TUI_400_AUTOHEAL_LEVEL;
+  readonly injectionId: string;
+  readonly scenario: Tui400Scenario;
+  /** 턴 마감 상태(finalizeTurn). */
+  readonly status: string;
+  /** 'recovered-new-session' | 'recovered-provider' | 'stopped' */
+  readonly result: 'recovered-new-session' | 'recovered-provider' | 'stopped';
+  /** 사람이 본 줄(빈 줄 제외). */
+  readonly screen: readonly string[];
+  /** 화면에 흐른 답(스트림 텍스트). */
+  readonly answer: string;
+  readonly codexTurnCalls: number;
+  readonly codexSummaryCalls: number;
+  readonly zaiCalls: number;
+  /** llm.retry «retry» 줄 수 — 생산 재시도 정책이 같은 공급자로 다시 보낸 횟수. */
+  readonly sameProviderRetries: number;
+  /** 새 백엔드 세션으로 바뀌었나(ACP 세션 id 비교). */
+  readonly sessionRenewed: boolean;
+  /** 재시도 직전 TUI 기록의 역할 줄 — [system?, 요약 assistant, 현재 user]. */
+  readonly historyRoles: readonly string[];
+  readonly autoheal: ReadonlyArray<{ event: string; data: Record<string, unknown> }>;
+}
+
+export function tui400Receipt(o: Pick<Tui400Observation, 'injectionId' | 'result'>): string {
+  return `영수증: ${TUI_400_AUTOHEAL_EVIDENCE_COMMAND} ⊕ ${o.injectionId} ⊕ ${o.result}`;
+}
+
+export function renderTui400(o: Tui400Observation): string[] {
+  return [
+    `tui-400-autoheal · 층 ${o.level} · 주입 ${o.injectionId} · 시나리오 ${o.scenario} · 결과 ${o.result} · 턴 ${o.status}`,
+    `  HTTP: codex 턴 ${o.codexTurnCalls} · codex 요약 ${o.codexSummaryCalls} · zai ${o.zaiCalls} · 같은 공급자 재시도 ${o.sameProviderRetries} · 새 세션 ${o.sessionRenewed ? '예' : '아니오'}`,
+    ...o.screen.map((line) => `  화면│ ${line}`),
+    `  답: ${o.answer || '(없음)'}`,
+    ...o.autoheal.map((row) => `  self-health.autoheal ${row.event} ${JSON.stringify(row.data)}`),
+    tui400Receipt(o),
+  ];
+}
+
+/** 정상 SSE 한 토막 — 엔드포인트 모양을 따른다(Chat Completions `choices[].delta` · Responses `output_text.delta`). */
+function okStream(url: string, text: string): Response {
+  const events: unknown[] = url.includes('/chat/completions') || url === ZAI_CODING_PLAN_URL
+    ? [{ choices: [{ delta: { content: text } }] }, { choices: [], usage: { prompt_tokens: 3, completion_tokens: 1 } }]
+    : [{ type: 'response.output_text.delta', delta: text }, { type: 'response.completed', response: { id: 'ok' } }];
+  const body = events.map((e) => `data: ${JSON.stringify(e)}\n\n`).join('') + 'data: [DONE]\n\n';
+  return new Response(body, { status: 200, headers: { 'content-type': 'text/event-stream' } });
+}
+
+/** 결함 주입 본체 — 생산 classic TUI plain 턴을 그대로 한 번 돈다. */
+export async function simTui400Autoheal(
+  scenario: Tui400Scenario,
+  opts: {
+    injectionId?: string;
+    /** false = 자동 회복 배선 없이(수리 전 동작 · 10-22 실측 멈춤 재현). 기본 true. */
+    autoheal?: boolean;
+  } = {},
+): Promise<Tui400Observation> {
+  const injectionId = opts.injectionId ?? `inj-${randomUUID()}`;
+  const script = SCRIPTS[scenario];
+  const savedEnv = { ...process.env };
+  const savedGrok = PROVIDERS.grok;
+  const savedFetch = globalThis.fetch;
+  const savedLog = debug.log;
+  const home = mkdtempSync(join(tmpdir(), 'fault-tui-400-'));
+  const rows: Array<{ category: string; event: string; data: Record<string, unknown> }> = [];
+  let codexTurnCalls = 0;
+  let codexSummaryCalls = 0;
+  let zaiCalls = 0;
+  let session: Awaited<ReturnType<typeof bootDashboardAcpSession>>['session'] | null = null;
+  try {
+    process.env.HOME = home;
+    process.env.XDG_CONFIG_HOME = join(home, '.config');
+    process.env.CODEX_HOME = join(home, '.codex');
+    process.env.ELANOUS_STATE_DIR = join(home, 'state');
+    for (const key of ISOLATED_LLM_ENV_KEYS) delete process.env[key];
+    process.env.ELANOUS_KEEP_ENV_KEYS = '1';
+    _resetKeyCacheForTests();
+    // ② 의 «다음 공급자» = 생산 glm(zai 코딩 플랜). 자격 env 하나만 가짜 값 — 공급자 코드는 그대로.
+    process.env[ZAI_POD_SECRET_KEY] = 'fake-zai-test-only';
+    // grok 자격은 os.homedir() 의 auth.json 이라 HOME 격리로 못 지운다 — 체인 밖으로 새지 않게 이 한 칸만 막는다.
+    PROVIDERS.grok = { ...savedGrok!, available: () => false };
+    setUserConfigOverlay((config) => ({
+      ...config,
+      llm: {
+        ...config.llm, provider: 'openai-codex', apiKey: 'fake-codex-test-only',
+        fallbackChain: ['codex-rotate', 'zai'], goalLoop: { ...(config.llm.goalLoop ?? {}), enabled: false },
+      },
+    }));
+    globalThis.fetch = Object.assign(
+      async (input: string | URL | Request, init?: RequestInit): Promise<Response> => {
+        const url = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;
+        const body = typeof init?.body === 'string' ? init.body : '';
+        if (url === ZAI_CODING_PLAN_URL) {
+          zaiCalls += 1;
+          if (script.zai === '400') return new Response(TUI_400_HISTORY_MISMATCH_BODY, { status: 400 });
+          return okStream(url, TUI_400_ZAI_ANSWER);
+        }
+        // 요약(생산 compactConversation)도 같은 codex 경로로 간다 — 요약 요청은 정상 응답(스크립트 밖).
+        // 판별은 생산 요약 프롬프트(`getCompactSystemPrompt`) 그대로 — 문구가 바뀌어도 같이 따라간다.
+        if (body.includes(JSON.stringify(getCompactSystemPrompt()).slice(1, 61))) {
+          codexSummaryCalls += 1;
+          return okStream(url, TUI_400_SUMMARY);
+        }
+        const step = script.codex[codexTurnCalls] ?? '400';
+        codexTurnCalls += 1;
+        if (step === '400') return new Response(TUI_400_HISTORY_MISMATCH_BODY, { status: 400 });
+        return okStream(url, TUI_400_CODEX_ANSWER);
+      },
+      { preconnect: (savedFetch as unknown as { preconnect?: unknown }).preconnect },
+    ) as typeof fetch;
+    debug.log = ((category: string, event: string, data: Record<string, unknown>): void => {
+      rows.push({ category, event, data: data ?? {} });
+    }) as typeof debug.log;
+
+    // 대화 기록 — 짝 없는 도구 호출이 남은 «어긋난» 기록(실측 400 의 모양).
+    const history: ChatMessage[] = [
+      { role: 'system', content: 'tui-400-autoheal system' },
+      { role: 'user', content: '앞 질문: src/a.ts 읽어줘' },
+      { role: 'assistant', content: [{ type: 'tool_use', id: 'call_autoheal_sim', name: 'Read', input: { path: 'src/a.ts' } }] },
+    ] as unknown as ChatMessage[];
+    const cwd = home;
+    const boot = await bootDashboardAcpSession({
+      getCwd: () => cwd,
+      getChatHistory: () => history,
+      getPreamble: () => [],
+      // 실제 TUI 턴처럼 도구가 실린 턴(streamLLMWithTools 도구 경로) — 모델이 안 부르면 실행은 0.
+      getTools: () => [{ name: 'tui_400_probe', description: 'tui-400-autoheal probe', parameters: { type: 'object' } }],
+      getActiveModel: () => null,
+      dispatchTool: async () => ({ error: 'no tools in tui-400-autoheal' }),
+      pushTurnToolHistory: (msgs) => { for (const m of msgs) history.push(m as ChatMessage); },
+    });
+    session = boot.session;
+    session.setOriginSessionIdReader(() => null);
+    const firstSessionId = session.currentSessionId;
+    const screen: string[] = [];
+    let answer = '';
+    let status = 'unknown';
+    let historyRoles: string[] = [];
+    const userText = `tui-400-autoheal ${injectionId}: 다시 해줘`;
+    const userMsg = { role: 'user', content: userText };
+    const liveSession = session;
+    const deps = {
+      debugLog: (category: string, event: string, payload: Record<string, unknown>) => { debug.log(category, event, payload); },
+      userText, contextText: '', turnStartedAt: Date.now(),
+      thinking: { update() {}, updateAnimated() {}, updateMetrics() {}, reflow() {}, stop() {} },
+      benchmarkMode: false, attachedSessionId: null,
+      chat: { history }, chatLines: screen, contextRegistry: {}, sessionRegistry: {}, sync: {},
+      chatFooterLine: { current: null }, acpTurnRef: {},
+      blockAttach: (line: string) => line,
+      pushChatLine: (line: string) => { screen.push(line); },
+      pushDebugLine: () => {}, setChatScrollBottom: () => {}, draw: () => {}, pinChatTail: () => {},
+      termCols: () => 140, getSessionCwd: () => cwd,
+      getUserConfig: () => ({ voice: { tts: { drainCooldownMs: 0 } } }),
+      inspectActiveProvider: () => ({ model: 'gpt-6-sol' }), getActivePluginName: () => undefined,
+      buildTurnPromptRuntime: () => ({ promptBankContext: '', turnProfile: {} }),
+      loadAttachments: async () => {},
+      buildTurnMessage: () => ({ userMsg }),
+      beginCodeEditTurn: async () => {},
+      buildTurnPreamble: () => [],
+      runAutoCompact: async () => {},
+      readToolDispatchCount: () => 0,
+      attachChatStreamingKeys: () => () => {},
+      createOptionalSpecs: async () => [],
+      createTurnStreamRuntime: () => ({
+        onText(chunk: string) { answer += chunk; }, onToolCall() {}, onToolResult() {}, getAssistantStart: () => 0,
+      }),
+      runTurnUsageRuntime: () => {},
+      runTurnPrelude: () => ({ searchPlannerState: {} }),
+      armAcpTurnRef: () => {}, resetAcpTurnRef: () => {},
+      acpSession: {
+        send: (o: Parameters<typeof liveSession.send>[0]) => {
+          historyRoles = history.map((m) => `${m.role}${typeof m.content === 'string' && m.content.startsWith('Compacted conversation summary') ? ':summary' : ''}`);
+          return liveSession.send(o);
+        },
+      },
+      ...(opts.autoheal === false ? {} : {
+        autoheal: createDashboardTurnAutoheal({
+          session: liveSession, getCwd: () => cwd, remote: false, activeModel: () => undefined, summaryTimeoutMs: 10_000,
+        }),
+      }),
+      autoTts: { pushChunk() {}, commit() {}, cancel() {} },
+      voiceChat: { getPhase: () => 'idle', transitionToSpeaking() {}, notifyResponseDone() {} },
+      finalizeStreamLifecycle: (_c: () => void, _a: boolean, s: 'completed' | 'interrupted' | 'failed') => s,
+      recordTurnMetrics: async () => {},
+      commitAssistantRenderState: () => ({ lastAssistantRaw: null, lastAssistantRange: null, lastAssistantMode: 'rendered' }),
+      applyAssistantRenderState: () => {},
+      runTailAutoCopy: async () => {}, runCodeEditPostTurn: async () => {}, runHandoffMirror: async () => {},
+      parseActionBlock: () => null, isBrowseMode: () => false, enterSyncMode: () => {},
+      applyActionBlock: () => ({}), runActionEffects: async () => {},
+      warningLine: (message: string) => message,
+      pushErrorLine: (message: string) => { screen.push(message); },
+      pushFailureNotice: (notice: string) => { screen.push(notice); },
+      finalizeTurn: (s: string) => { status = s; },
+    } as unknown as DashboardChatMainPlainTurnRuntimeDeps;
+    await runDashboardChatMainPlainTurn(deps);
+    const autoheal = rows.filter((row) => row.category === 'self-health.autoheal')
+      .map(({ event, data }) => ({ event, data }));
+    const recovered = autoheal.find((row) => row.event === 'recovered');
+    const result = status !== 'completed' || !recovered ? 'stopped'
+      : recovered.data.step === 'provider-fallback' ? 'recovered-provider' : 'recovered-new-session';
+    return {
+      level: TUI_400_AUTOHEAL_LEVEL,
+      injectionId,
+      scenario,
+      status,
+      result,
+      screen: screen.filter((line) => line !== ''),
+      answer,
+      codexTurnCalls,
+      codexSummaryCalls,
+      zaiCalls,
+      sameProviderRetries: rows.filter((row) => row.category === 'llm.retry' && row.event === 'retry').length,
+      sessionRenewed: liveSession.currentSessionId !== firstSessionId,
+      historyRoles,
+      autoheal,
+    };
+  } finally {
+    try { await session?.close(); } catch { /* best-effort teardown */ }
+    debug.log = savedLog;
+    globalThis.fetch = savedFetch;
+    PROVIDERS.grok = savedGrok!;
+    setUserConfigOverlay(null);
+    for (const key of Object.keys(process.env)) {
+      if (!(key in savedEnv)) delete process.env[key];
+    }
+    Object.assign(process.env, savedEnv);
+    _resetKeyCacheForTests();
+    rmSync(home, { recursive: true, force: true });
+  }
+}