elanous 0.2.36 → 0.2.38

package/src/nexus/api/telegram-trigger-bot.ts

@@ -37,6 +37,12 @@ import { createTelegramStreamSink } from '../../session/streaming/telegram-strea
 import { splitMarkdownForTelegram } from '../../telegram-format.js';
 import { formatTablesAndRules } from '../../discord-markdown.js';
 import { receiveChannelEvent } from '../outbound/router.js';
+import { openMsgStore } from '../../msg/msg-store.js';
+import { createAskOpTelegramSlashCommand } from './channel-ask-op.js';
+import { createTelegramChannelOpReplyTransport, startChannelOpReplyRoute } from '../../session/channel-op-reply-route.js';
+import { resolveInstanceName } from '../../instance-identity.js';
+import { elanousStateRoot } from '../../autopilot/state-paths.js';
+import { join } from 'node:path';
 
 export interface NexusTelegramTriggerBotOpts {
   /** Bot token (without `Bot ` prefix). Production reads
@@ -167,6 +173,14 @@ export function createNexusTelegramTriggerBot(
   const onTriggerTap = buildTelegramTriggerTap(opts.dispatch, log);
 
   const botWasInjected = opts.bot !== undefined;
+  const askOpCommand = createAskOpTelegramSlashCommand({
+    allowedUserIds: opts.allowedUsers,
+    append: (message, provenanceKey) => {
+      const store = openMsgStore();
+      try { return store.appendWithProvenance(message, provenanceKey); }
+      finally { store.close(); }
+    },
+  });
   const bot = opts.bot ?? (opts.userConfig
     // Unified inbound: botFromConfig gives the full Q&A handler
     // (onMessage → runTurn, sessions, attachments, slash) and we graft
@@ -174,6 +188,7 @@ export function createNexusTelegramTriggerBot(
     ? botFromConfig({
         userConfig: opts.userConfig,
         log,
+        extraSlashCommands: [askOpCommand],
         ...(opts.runTurnImpl ? { runTurnImpl: opts.runTurnImpl } : {}),
         telegramBotOpts: {
           token: opts.token,
@@ -286,6 +301,14 @@ export function createNexusTelegramTriggerBot(
     });
   }
 
+  const opReplyInstance = resolveInstanceName();
+  const opReplyRoute = !botWasInjected ? startChannelOpReplyRoute({
+    transport: createTelegramChannelOpReplyTransport({ bot, botId: thisBotId, instance: opReplyInstance }),
+    botId: thisBotId,
+    instance: opReplyInstance,
+    cursorPath: join(elanousStateRoot(), 'msg', 'sse-cursor', `TELEGRAM-channel-op-replies-${thisBotId}.json`),
+  }) : undefined;
+
   // One drain promise for every caller. A second stop (SIGINT then
   // SIGTERM, or a duplicate SIGTERM) must wait for the same bound —
   // returning immediately would let the process exit before the turn
@@ -297,6 +320,7 @@ export function createNexusTelegramTriggerBot(
       if (drainPromise) return drainPromise;
       const timeoutMs = stopOpts?.timeoutMs ?? TELEGRAM_TRIGGER_DRAIN_TIMEOUT_MS;
       drainPromise = (async (): Promise<void> => {
+        try { await opReplyRoute?.stop(); } catch { /* swallow */ }
         try { offTelegramSink?.(); } catch { /* swallow */ }
         try { offTelegramStream?.(); } catch { /* swallow */ }
         try { bot.stop(); } catch { /* swallow */ }

package/src/nexus/api/terminals.ts

@@ -102,6 +102,11 @@ export interface TerminalSummary {
   startedAt: number;
   /** Total bytes currently held in the head/tail buffer (after trim). */
   outputBytes: number;
+  /** Seat copied from the joined lifecycle row for this PTY id; omitted when unknown. */
+  seat?: string;
+  /** Cumulative output from the joined lifecycle row; omitted when unknown (NULL/missing/0 legacy row).
+   *  Only a recorded positive total is a fact — same rule as the lineage endpoint. Distinct from outputBytes (buffer length). */
+  outputBytesTotal?: number;
   /** The owner-process access mode, or null when this row is manifest-only. */
   accessMode: 'read' | 'write' | 'auto' | null;
   /** Why accessMode is unavailable; null when an access mode is present. */
@@ -266,6 +271,18 @@ function terminalOriginFields(row: Pick<PtyManifestRow, 'terminalOriginCategory'
   return { terminalOriginCategory: 'unknown', terminalOriginReason: 'legacy-or-malformed-origin-decision' };
 }
 
+/** `> 0` 만 사실이다 — legacy 행의 NULL/누락(그리고 매니페스트가 0을 «기록값»으로 구분 못 하는 한 0 전부)은
+ *  미상으로 칸을 비운다. 계보 쪽 `lineageRowFromManifest`(`src/cli/pty-takeover-cli.ts`)와 같은 규칙이라
+ *  두 엔드포인트가 같은 행을 같게 판정한다. */
+function lifecycleFieldsFromJoinedRow(row: { seat?: string; outputBytesTotal?: number } | undefined): Pick<TerminalSummary, 'seat' | 'outputBytesTotal'> {
+  return {
+    ...(row?.seat ? { seat: row.seat } : {}),
+    ...(typeof row?.outputBytesTotal === 'number' && Number.isFinite(row.outputBytesTotal) && row.outputBytesTotal > 0
+      ? { outputBytesTotal: row.outputBytesTotal }
+      : {}),
+  };
+}
+
 function summarize(
   handle: PtyHandle,
   manifest: PtyManifestRow | null,
@@ -300,6 +317,7 @@ function summarize(
     exitCode: handle.exitCode,
     startedAt: handle.startedAt,
     outputBytes: snapshot.length,
+    ...lifecycleFieldsFromJoinedRow(manifest ? { seat: manifest.seat, outputBytesTotal: manifest.outputBytesTotal } : undefined),
     accessMode: handle.accessMode,
     accessModeUnavailableReason: accessModeUnavailableReason('process', handle.accessMode),
     ownerRunUsage: ownerRunUsage(manifest?.ownerPid !== undefined ? isOwnerProcessAlive(manifest.ownerPid) : undefined, manifest?.runId ?? '', resolveRunTerminationForRow),
@@ -337,6 +355,7 @@ function summarizeManifest(
     producer: 'process',
     alive: row.alive, exitCode: row.exitCode, startedAt: row.startedAt,
     outputBytes: Buffer.byteLength(row.snapshot, 'utf8'),
+    ...lifecycleFieldsFromJoinedRow({ seat: row.seat, outputBytesTotal: row.outputBytesTotal }),
     // Access mode lives in the owner process, so manifest-only rows cannot know it without IPC.
     accessMode: null,
     accessModeUnavailableReason: accessModeUnavailableReason('process', null),
@@ -1102,12 +1121,15 @@ export function handleTerminalsList(req: Request, opts: MetaApiOpts, deps: Termi
   try { cleanupStale(Date.now()); } catch { /* fail-soft */ }
   const manifestAfterInitialCleanup = readLocalManifest();
   const manifestById = new Map(manifestAfterInitialCleanup.map((row) => [row.id, row]));
-  const local = (deps.listPty ?? listPty)().map((handle) => summarize(
-    handle,
-    manifestById.get(handle.id) ?? null,
-    resolveRunTerminationForRow,
-    deps.isProcessAlive,
-  ));
+  const local = (deps.listPty ?? listPty)().map((handle) => {
+    const manifest = manifestById.get(handle.id) ?? null;
+    return summarize(
+      handle,
+      manifest,
+      resolveRunTerminationForRow,
+      deps.isProcessAlive,
+    );
+  });
   const localIds = new Set(local.map((t) => t.id));
   try { cleanupOrphans(localIds); } catch { /* fail-soft */ }
   const isVisible = (row: PtyManifestRow): boolean => isVisibleManifestRow(row, deps.isProcessAlive);

package/src/nexus/state/state.ts

@@ -113,7 +113,13 @@ export interface NexusEvent {
     // · tone? · glyph?). PWA's M4 `subscribeHudSegmentEvents`
     // synthesizes a FeedbackEnvelope { kind: 'hud.segment' } and routes
     // it through the M1 `applyHudSegmentEnvelope` accumulator.
-    | 'hud.segment';
+    | 'hud.segment'
+    // GRAPH-WIZARD variant 관측 (ARG-L2-DESIGNER-FU1 · 2026-10-23) — POST /v1/graphs/wizard 의
+    // variant 한 턴이 끝날 때 호출 경계(handleGraphWizardPost)가 한 건 발행한다. `detail` =
+    // { mode: 'variant', status: 'composed'|'fallback-standard', reason, goal, templateId,
+    //   growth?: { from, outcome, nodeId, returnTo? }, overlayId?, patches? }.
+    // SSE 구독자는 `?topics=graph.compose` 로 받는다.
+    | 'graph.compose';
   tabId?: string;
   detail?: Record<string, unknown>;
 }

package/src/oauth/codex-account-store.ts

@@ -32,6 +32,8 @@ import {
   decideFallback, normalizeFallbackChain, grokQuotaFromUsageSnapshot,
   type FallbackDecision, type FallbackInput, type FallbackStep, type RotationOutcome,
 } from './fallback-chain.js';
+import { collectClaudePtyMaturitySample, judgeClaudePtyMaturity, type ClaudePtyMaturity } from './claude-pty-maturity.js';
+import type { UsageOutcomesDeps } from '../budget/usage-outcomes.js';
 import { resolveGrokCredential } from '../grok/credential.js';
 import { getOpenRouterApiKey } from '../config.js';
 import { lookupOpenRouterModelSpec } from '../model-tier/llm-tier-map.js';
@@ -1087,6 +1089,29 @@ function richestCreditCandidate(candidates: readonly RotationCandidate[], reserv
   return creditCandidatesByBalance(candidates, reserve)[0];
 }
 
+/**
+ * CLAUDE-FAILOVER-FU — 체인에 `claude-pty` 칸이 «있을 때만» 런 원장의 최근 표본을 읽어 성숙도를 낸다.
+ *
+ * ⛔ 다른 체인에서는 원장을 «안 읽는다» — 비용도 0 이고, claude 를 안 쓰는 구성의 판정 입력도 안 바뀐다.
+ * ⛔ 읽기 실패·표본 결손을 «전환 가능»으로 접지 않는다 — `judgeClaudePtyMaturity(null)` 이
+ *   `sample-unreadable`(미성숙)을 내고, 판정은 `claude-pty-immature` 로 닫힌다.
+ * ⛔ 예외도 삼켜 미성숙으로 닫는다 — 원장 I/O 때문에 폴백 판정 자체가 죽으면 안 된다.
+ */
+function claudePtyMaturityForChain(
+  chain: readonly FallbackStep[],
+  ledger: UsageOutcomesDeps | undefined,
+): ClaudePtyMaturity | undefined {
+  if (!chain.includes('claude-pty')) return undefined;
+  try {
+    return judgeClaudePtyMaturity(collectClaudePtyMaturitySample(ledger ?? {}));
+  } catch (error) {
+    debug.log('oauth.claude-pty', 'maturity-read-failed', {
+      reason: error instanceof Error ? error.message.slice(0, 120) : String(error).slice(0, 120),
+    }, { level: 'warn' });
+    return judgeClaudePtyMaturity(null);
+  }
+}
+
 export function resolveRunFallback(
   env: NodeJS.ProcessEnv = process.env,
   deps: {
@@ -1098,6 +1123,8 @@ export function resolveRunFallback(
     readonly openrouterAvailable?: boolean;
     /** codex 크레딧 잔액 «확인» seam — 안 주면 회전 후보의 크레딧 신호(잔액 > 0 · 보유 ≠ false)로 잰다. */
     readonly codexCreditsAvailable?: boolean;
+    /** ⛔ 런 원장 «읽기» seam — 체인에 `claude-pty` 가 있을 때만 쓴다. 안 주면 실제 런 원장을 읽는다. */
+    readonly claudePtyLedger?: UsageOutcomesDeps;
   } & Pick<FallbackInput, 'currentStep' | 'currentCredentialRateLimited'> = {},
 ): FallbackDecision {
   try {
@@ -1160,7 +1187,13 @@ export function resolveRunFallback(
       : explicitAccount ? (explicitAccountHasCredits(snapshot, creditReserve) ? [snapshot.current.name] : [])
       : codexCreditAccountNames(snapshot.candidates, creditReserve);
     const codexCreditsAvailable = effectiveChain.includes('codex-credits') && (deps.codexCreditsAvailable ?? creditAccounts.length > 0);
-    const fallbackBase = { rotation, chain: effectiveChain, grokAvailable, grokQuota, openrouterFallbackModel, openrouterAvailable, codexCreditsAvailable };
+    // CLAUDE-FAILOVER-FU — 체인에 `claude-pty` 가 «있을 때만» 원장 성숙도를 재서 판정 입력에 싣는다.
+    //   ⛔ 없으면 `undefined` 이고 판정은 종전 그대로다(수집 0회 · 판정식 무변경).
+    const claudePtyMaturity = claudePtyMaturityForChain(effectiveChain, deps.claudePtyLedger);
+    const fallbackBase = {
+      rotation, chain: effectiveChain, grokAvailable, grokQuota, openrouterFallbackModel, openrouterAvailable, codexCreditsAvailable,
+      ...(claudePtyMaturity ? { claudePtyMaturity } : {}),
+    };
     const fallbackInput: FallbackInput = deps.currentCredentialRateLimited === true && deps.currentStep
       ? { ...fallbackBase, currentStep: deps.currentStep, currentCredentialRateLimited: true }
       : { ...fallbackBase, ...(deps.currentStep ? { currentStep: deps.currentStep } : {}) };

package/src/ops/loops-map.ts

@@ -0,0 +1,46 @@
+import type { LoopRow, OverviewSnapshot } from './overview.js';
+
+/** 루프 지도의 한 칸 — 캐시 스냅숏의 루프 행을 그대로 옮긴다(합성 없음). */
+export interface LoopsMapRow {
+  name: string;
+  era: LoopRow['era'];
+  /** 이 주기 이상 박동이 없으면 정지로 본다. null = 주기 미상(판정에서 뺀다) — 캐시 값 그대로. */
+  staleAfterSeconds: number | null;
+  /** 박동 칸: 못 잼이면 value·observedAt 이 null 이고 reason 이 남는다(캐시 그대로). */
+  beat: LoopRow['beat'];
+}
+
+/**
+ * LOOP-MAP-API 응답 — overviewCache 의 loops 스냅숏만 투영한 것.
+ * edges(loop-edges 결합)는 후속 조각이라 여기에 넣지 않는다.
+ */
+export interface LoopsMap {
+  /** 캐시 스냅숏이 만든 시각. 캐시가 비면 null. */
+  generatedAt: string | null;
+  /** 요청 시각(캐시 시계)과 generatedAt 의 차이. 캐시가 비면 null. */
+  cacheAgeMs: number | null;
+  loops: LoopsMapRow[];
+}
+
+/** 캐시 미스 응답 — 원격 조회를 유발하지 않고 «아직 캐시 없음»을 그대로 말한다. */
+const EMPTY_LOOPS_MAP: LoopsMap = { generatedAt: null, cacheAgeMs: null, loops: [] };
+
+/**
+ * overviewCache.peek() 결과 하나를 루프 지도 응답으로 투영한다.
+ * `at` 은 캐시의 시계로 잰 «읽은 시각»이라 가짜 시계를 주입하면 cacheAgeMs 가 결정적이다.
+ * 여기서 원천을 더 읽지 않는다 — 순수 투영이다.
+ */
+export function loopsMapFromCache(peeked: { snapshot: OverviewSnapshot; at: number } | null): LoopsMap {
+  if (!peeked) return EMPTY_LOOPS_MAP;
+  const generatedAtMs = Date.parse(peeked.snapshot.generatedAt);
+  return {
+    generatedAt: peeked.snapshot.generatedAt,
+    cacheAgeMs: Number.isFinite(generatedAtMs) ? Math.max(0, peeked.at - generatedAtMs) : null,
+    loops: peeked.snapshot.loops.map((loop) => ({
+      name: loop.name,
+      era: loop.era,
+      staleAfterSeconds: loop.staleAfterSeconds,
+      beat: loop.beat,
+    })),
+  };
+}

package/src/ops/overview-cache.ts

@@ -1,7 +1,7 @@
 import { debug } from '../debug/log.js';
 import { parentPort, Worker } from 'node:worker_threads';
 import { collectOverview, type CollectOptions } from './overview-collect.js';
-import { computeVerdict, unmeasured, okCell, type OverviewSnapshot, type PodMemberRow } from './overview.js';
+import { computeVerdict, unmeasured, okCell, type Cell, type GateReservation, type OverviewSnapshot, type PodMemberRow } from './overview.js';
 import { effectiveInstanceRoot } from '../instance/resolve.js';
 import { getElanousConfigDirOverride, setElanousConfigDir } from '../elanous-config-dir.js';
 
@@ -12,7 +12,7 @@ const POD_STALE_MS = 2 * POD_MS;
 const MAX_MEMO = 32;
 const MAX_PENDING = 2;
 
-type PodReading = { context: string; occupied: number | null; reason: string | null; observedAt: number };
+type PodReading = { context: string; occupied: number | null; reason: string | null; observedAt: number; gate?: GateReservation };
 type OverviewData = OverviewSnapshot & ReturnType<typeof computeVerdict> & { cacheAgeMs: number; durationMs: number; sources: string[]; refreshFailed: string | null };
 type WorkerMessage = ({ kind: 'pods' } | { kind: 'snapshot'; options: CollectOptions }) & { configDir?: string };
 
@@ -25,7 +25,7 @@ if (port) {
       if (message.configDir) setElanousConfigDir(message.configDir);
       if (message.kind === 'pods') {
         const { buildGridData } = await import('../nexus/api/grid.js');
-        const rows = buildGridData().members.map((m) => ({ context: m.context, occupied: m.occupied, reason: m.reason, observedAt: Date.now() }));
+        const rows = buildGridData().members.map((m) => ({ context: m.context, occupied: m.occupied, reason: m.reason, observedAt: Date.now(), ...(m.gate ? { gate: m.gate } : {}) }));
         port.postMessage({ rows });
       } else port.postMessage({ snapshot: await collectOverview(message.options) });
     } catch (error) {
@@ -106,6 +106,24 @@ export function createOverviewCache(deps: {
     podTimer = schedule(() => { void refreshPods(); }, POD_MS);
     podTimer.unref();
   };
+  /**
+   * 게이트 예약 축(RES-FLOOR-BINDING 다섯째 축) — 「게이트 안 돎」은 측정된 값('none'), 못 잼은 사유를 남긴다.
+   * 둘 다 구속 조건 후보에서 빠지지만 뜻은 다르다: 하나는 «게이트가 안 돈다», 다른 하나는 «모른다».
+   */
+  const overlayGate = (row: PodReading | undefined, at: number): Cell<GateReservation | 'none'> => {
+    const observedAt = row ? new Date(row.observedAt).toISOString() : null;
+    const stale = row !== undefined && at - row.observedAt >= POD_STALE_MS;
+    if (podFailure || !row || stale) {
+      return unmeasured('pod pool background measure', podFailure ?? (stale ? '낡음(120초)' : '측정 대기'), observedAt);
+    }
+    if (!row.gate) return unmeasured('pod pool background measure', row.reason ?? '게이트 예약 못 잼', observedAt);
+    if (row.gate.jobs === 0) return okCell<GateReservation | 'none'>('none', 'pod pool background measure', observedAt);
+    const gate = row.gate;
+    if (!Number.isFinite(gate.unbound) || !Number.isFinite(gate.reservedMillicores) || !Number.isFinite(gate.schedulableMillicores)) {
+      return unmeasured('pod pool background measure', '게이트 CPU 못 잼', observedAt);
+    }
+    return okCell<GateReservation | 'none'>(gate, 'pod pool background measure', observedAt);
+  };
   /** Response-time Pod occupancy overlay — shared by /v1/ops/overview and /v1/ops/resources. */
   const overlayPods = (snapshot: OverviewSnapshot, at: number): PodMemberRow[] => {
     const byContext = new Map(podRows.map((row) => [row.context, row]));
@@ -115,7 +133,7 @@ export function createOverviewCache(deps: {
       const occupied = !podFailure && row && !stale && row.occupied !== null
         ? okCell(row.occupied, 'pod pool background measure', new Date(row.observedAt).toISOString())
         : unmeasured<number>('pod pool background measure', podFailure ?? (stale ? '낡음(120초)' : row?.reason ?? '측정 대기'), row ? new Date(row.observedAt).toISOString() : null);
-      return { ...pod, occupied };
+      return { ...pod, occupied, gate: overlayGate(row, at) };
     });
   };
   const present = (entry: Entry): OverviewData => {

package/src/ops/overview.ts

@@ -60,7 +60,28 @@ export interface MachineLoad {
   ioPressure?: IoPressure | null;
 }
 export interface MachineRow { name: string; load: Cell<MachineLoad> }
-export interface PodMemberRow { context: string; capacity: number; occupied: Cell<number> }
+/**
+ * GATE-RESERVE-AUTO 가 잰 «게이트 예약 몫» — 발행 게이트 샤드가 쥔 CPU. 자원 지도의 다섯째 축이다.
+ * `harnessCpuSlotsBesideGate` 와 같은 fail-closed 규칙: 샤드가 아직 노드에 안 붙었으면 하니스 Pod 는 들어가지 않는다.
+ */
+export interface GateReservation {
+  /** 종결 전 게이트 샤드 Job 수 — 0 이면 게이트가 안 돈다(축 아님). */
+  jobs: number;
+  /** 그중 아직 노드에 안 붙은 샤드. */
+  unbound: number;
+  /** 샤드가 예약한 CPU(밀리코어). */
+  reservedMillicores: number;
+  /** 스케줄 가능한 노드들의 CPU 합(밀리코어). */
+  schedulableMillicores: number;
+}
+export interface PodMemberRow {
+  context: string; capacity: number; occupied: Cell<number>;
+  /**
+   * 게이트 예약 축 — `'none'` 은 «게이트가 안 돈다»(측정됨), `unmeasured` 는 못 잼(축에서 뺀다), 항목 없음은
+   * 이 칸에 게이트 원천이 없는 스냅숏(로컬 CLI 는 호출 경로 kubectl 0 규율로 늘 여기다).
+   */
+  gate?: Cell<GateReservation | 'none'>;
+}
 export interface ParentsInfo { count: number; staleOver6h: number; oldestHours: number | null }
 export interface SchedulerMetrics {
   scheduleRuns: number | null;
@@ -110,7 +131,7 @@ export interface VerdictResult { verdict: Verdict; reasons: string[]; nextAction
 /** 부하/코어가 이 값을 넘으면 «기계 압박»(흐름 저하의 사유). */
 export const LOAD_PER_CORE_PRESSURE = 3;
 
-/** 자원 지도의 축 어휘(닫힌 집합 · RES-FLOOR-BINDING). 게이트 예약은 이 칸에 원천이 없어 늘 제외다. */
+/** 자원 지도의 축 어휘(닫힌 집합 · RES-FLOOR-BINDING). */
 export type ResourceKind = 'memory' | 'cpu' | 'io' | 'slots' | 'gate';
 
 /** 구속 조건 — 남은 비율이 최소인 축. 남은 비율 = 남은 양/전체 양(CPU 는 압박선 LOAD_PER_CORE_PRESSURE×코어를 전체로 본다). */
@@ -132,9 +153,11 @@ function remainingAmount(n: number): string {
 
 /**
  * 구속 조건 규칙(RES-FLOOR-BINDING) — 메모리·CPU·I/O·슬롯·게이트 예약 중 «남은 비율 최소»인 축이 흐름을 묶는다.
- * 못 잰 축(하트비트 없는 호스트 · 용량 못 잼 · 하트비트에 PSI 가 없는 I/O · 원천이 없는 게이트 예약)은 후보에서 뺀다
+ * 못 잰 축(하트비트 없는 호스트 · 용량 못 잼 · 하트비트에 PSI 가 없는 I/O · 게이트 CPU 못 잼)은 후보에서 뺀다
  * — «넉넉»으로도 «바닥»으로도 읽지 않는다.
- * 측정 축이 하나도 없으면 null. 동율은 정해진 순서(호스트 순 메모리→CPU→I/O, 그 다음 슬롯)의 첫 축이 이긴다.
+ * 게이트 예약의 남은 비율 = (스케줄 가능 CPU − 샤드가 쥔 CPU) / 스케줄 가능 CPU. 샤드가 아직 노드에 안 붙었으면 0
+ * (하니스 Pod 는 들어가지 않는다 · `harnessCpuSlotsBesideGate` 와 같은 규칙).
+ * 측정 축이 하나도 없으면 null. 동율은 정해진 순서(호스트 순 메모리→CPU→I/O, 그 다음 슬롯, 그 다음 게이트 예약)의 첫 축이 이긴다.
  */
 export function bindingResource(s: OverviewSnapshot): ResourceBinding | null {
   const candidates: ResourceBinding[] = [];
@@ -161,6 +184,16 @@ export function bindingResource(s: OverviewSnapshot): ResourceBinding | null {
     const total = capacity.podTarget + capacity.localMax;
     candidates.push({ kind: 'slots', label: '슬롯', remainingRatio: ratio01(capacity.free / total), remainingText: `${capacity.free}/${total}자리` });
   }
+  for (const pod of s.machines.pods) {
+    const gate = pod.gate?.value;
+    if (!gate || gate === 'none') continue;
+    const total = gate.schedulableMillicores;
+    if (!Number.isFinite(total) || total <= 0 || !Number.isFinite(gate.reservedMillicores)) continue;
+    const remaining = gate.unbound > 0 ? 0 : Math.max(0, total - gate.reservedMillicores);
+    const unbound = gate.unbound > 0 ? ` · 미배치 ${gate.unbound}` : '';
+    candidates.push({ kind: 'gate', label: `${pod.context} 게이트 예약`, remainingRatio: ratio01(remaining / total),
+      remainingText: `${remainingAmount(remaining)}/${total.toFixed(0)}밀리코어(게이트 샤드 ${gate.jobs} · 예약 ${remainingAmount(gate.reservedMillicores)}${unbound})` });
+  }
   let binding: ResourceBinding | null = null;
   for (const c of candidates) if (binding === null || c.remainingRatio < binding.remainingRatio) binding = c;
   return binding;
@@ -255,7 +288,10 @@ export function unmeasuredCells(s: OverviewSnapshot): string[] {
   visit('tasks.byOwner', s.tasks.byOwner); visit('tasks.done', s.tasks.done);
   visit('tasks.launchable', s.tasks.launchable); visit('tasks.capacity', s.tasks.capacity);
   for (const h of s.machines.hosts) visit(`machines.${h.name}`, h.load);
-  for (const p of s.machines.pods) visit(`pods.${p.context}`, p.occupied);
+  for (const p of s.machines.pods) {
+    visit(`pods.${p.context}`, p.occupied);
+    if (p.gate) visit(`pods.${p.context}.gate`, p.gate);
+  }
   visit('machines.parents', s.machines.parents); visit('landings', s.landings);
   if (s.throughput) visit('throughput', s.throughput);
   if (s.schedulerMetrics) visit('schedulerMetrics', s.schedulerMetrics);

package/src/patents/ledger.ts

@@ -1,5 +1,5 @@
 import { Database } from 'bun:sqlite';
-import { chmodSync, mkdirSync } from 'node:fs';
+import { chmodSync, existsSync, mkdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { elanousStateRoot } from '../autopilot/state-paths.js';
 import { debug } from '../debug/log.js';
@@ -80,6 +80,12 @@ export class PatentLedger {
     try { return work(db); } finally { db.close(); }
   }
 
+  private usingExisting<T>(work: (db: Database) => T): T {
+    if (!existsSync(this.path)) throw new Error('patent ledger unavailable');
+    const db = new Database(this.path, { readonly: true, create: false, strict: true });
+    try { return work(db); } finally { db.close(); }
+  }
+
   private transaction<T>(db: Database, work: () => T): T {
     db.exec('BEGIN IMMEDIATE');
     try { const result = work(); db.exec('COMMIT'); return result; }
@@ -125,4 +131,15 @@ export class PatentLedger {
     return this.using(db =>
       db.query(`SELECT id, title, track, status, deadline, created_at, updated_at FROM patent_candidates WHERE status = '공개 허용' ORDER BY created_at, id`).all() as PatentCandidate[]);
   }
+
+  /** Return only line numbers; candidate identifiers and titles remain private. */
+  unapprovedCandidateLineNumbers(text: string): number[] {
+    return this.usingExisting(db => {
+      if (!text.trim()) return [];
+      const rows = db.query(`SELECT title FROM patent_candidates WHERE status != '공개 허용'`).all() as Array<{ title: string }>;
+      const titles = rows.map(({ title }) => title.toLocaleLowerCase()).filter((title) => title.length >= 3);
+      return text.split(/\r?\n/).flatMap((line, index) =>
+        titles.some((title) => line.toLocaleLowerCase().includes(title)) ? [index + 1] : []);
+    });
+  }
 }

package/src/policy/llm-policy.ts

@@ -4,7 +4,7 @@ import { isScalar, parseDocument } from 'yaml';
 import { getElanousConfigDir } from '../elanous-config-dir.js';
 import { DEFAULT_FALLBACK_CHAIN, isFallbackStep, type FallbackStep } from '../oauth/fallback-chain.js';
 import { isCodexQuotaPolicy } from '../oauth/codex-quota-policy.js';
-import { DEFAULT_BUDGET_GATE_MAX_USED_PERCENT, MODEL_ROLES, RUNTIME_LLM_PROVIDER_NAMES, parseRoleLlmEntry, parseSubscriptionReviewerSpec, type RoleLlmConfig, type SubscriptionReviewerSpec } from '../user-config.js';
+import { DEFAULT_BUDGET_GATE_MAX_USED_PERCENT, MODEL_ROLES, RUNTIME_LLM_PROVIDER_NAMES, parseReviewerMixSpec, parseRoleLlmEntry, parseSubscriptionReviewerSpec, type RoleLlmConfig, type SubscriptionReviewerSpec } from '../user-config.js';
 
 export interface LlmPolicy {
   version: 1;
@@ -106,6 +106,7 @@ export function validateLlmPolicy(input: unknown): LlmPolicyValidation {
     && nonempty(g.account) && positive(g.amount) && date(g.expires) && nonempty(g.source));
   const roles = (v: unknown) => object(v) && Object.entries(v).every(([role, spec]) => role === 'reviewer'
     ? !!parseSubscriptionReviewerSpec(spec)
+    : role === 'reviewerMix' ? !!parseReviewerMixSpec(spec)
     : MODEL_ROLES.some(r => r === role) && object(spec)
       && Object.keys(spec).every(k => ['provider', 'tier', 'model'].includes(k)) && parseRoleLlmEntry(spec).ok);
   check(input, 'policy', {
@@ -209,6 +210,7 @@ export function loadLlmPolicy(opts: LoadLlmPolicyOptions = {}): LoadedLlmPolicy
     if (Object.keys(base).length) overlay.default = base;
     add('roleLlm', legacy.roleLlm, overlay, 'roles', v => object(v) && Object.entries(v).every(([r, spec]) => r === 'reviewer'
       ? !!parseSubscriptionReviewerSpec(spec)
+      : r === 'reviewerMix' ? !!parseReviewerMixSpec(spec)
       : MODEL_ROLES.some(k => k === r) && parseRoleLlmEntry(spec).ok));
     add('llm.fallbackChain', llm.fallbackChain, overlay, 'fallback', v => Array.isArray(v) && v.length > 0 && v.every(isFallbackStep) && new Set(v).size === v.length);
     const codex: Obj = {};

package/src/preview/terminal.ts

@@ -67,6 +67,8 @@ export interface PreviewTerminalOpts {
    *  splitting honest). */
   shellArgs?: readonly string[];
   env?: Record<string, string>;
+  /** Remove captured environment keys after env composition (for subscription-only child auth). */
+  unsetEnv?: readonly string[];
   /** Defaults to `xterm-256color` (universal). Override with
    *  `xterm-ghostty` to match a ghostty host, or another terminfo
    *  name for testing. The chosen name lands in $TERM of the child
@@ -343,7 +345,7 @@ export class PreviewTerminal {
       //   PreviewTerminal 자체 에뮬레이터가 렌더 담당이라 무관). 출력 구독/exit 배선은 아래 pump 분기에서.
       this.registryHandle = this.registryDeps.startPty({
         // 합성자 = registry(resolveSpawnShape) — 여기서는 overlay 만 넘긴다.
-        cmd: shell, args, workdir: this.opts.cwd, env: childEnv,
+        cmd: shell, args, workdir: this.opts.cwd, env: childEnv, unsetEnv: this.opts.unsetEnv,
         cols: this.term.cols, rows: this.term.rows,
         kind: this.opts.registryKind ?? 'preview',
         nickname: this.opts.registryNickname,
@@ -360,7 +362,7 @@ export class PreviewTerminal {
         cols: this.term.cols,
         rows: this.term.rows,
         cwd: this.opts.cwd,
-        env: buildPtyEnv(childEnv),
+        env: buildPtyEnv(childEnv, process.env, { unset: this.opts.unsetEnv }),
       });
       const masterFd = this.resolveMasterFd(this.pty);
       if (masterFd === null) throw new Error('PreviewTerminal: could not resolve PTY master fd');

package/src/prompt-cache/anthropic.ts

@@ -20,6 +20,7 @@
 // caching went GA without a version bump.
 
 import type { LLMMessage, LLMToolSpec } from '../llm.js';
+import { assertNoTopLevelToolSchemaCombinators } from '../llm-tool-schema.js';
 import {
   cacheControlFor,
   type CacheControl,
@@ -98,6 +99,7 @@ export function toAnthropicToolsCached(
   opts: CacheOpts,
 ): AnthropicToolBlock[] | undefined {
   if (!tools || tools.length === 0) return undefined;
+  assertNoTopLevelToolSchemaCombinators(tools);
   // ⭐ Anthropic 은 tool name UNIQUE 를 강제(400 "Tool names must be unique.")한다.
   //   OpenAI/codex 는 중복을 조용히 관대 처리 → 하니스가 codex 위주로 개발되며 중복 tool spec
   //   (예: goal-loop 이 카탈로그에 이미 있는 spec 을 append)이 claude 에서만 400 으로 터졌다.

package/src/prompt-enhance/enhance.ts

@@ -118,6 +118,8 @@ export interface EnhanceOpts {
    * ⭐ 새 LLM 경로를 만들지 않는다 — 이 모듈이 이미 그 자리의 유일한 LLM 단계다.
    */
   groundedFacts?: readonly string[];
+  /** Relevant prior-failure lessons for goal-authoring prompts only; never part of the original ask. */
+  authoringLessons?: string;
   /** Clock seam for the first-token observation (ms epoch); defaults to `Date.now`. */
   now?: () => number;
 }
@@ -134,7 +136,7 @@ function askMarkerCount(ask: string): number {
   return (ask.match(/(?:^|\s)(?:불변식|경계|판정\s*신호|invariant|boundary|decision\s+signal)\s*:/gi) ?? []).length;
 }
 
-type EnhanceSelectionSource = 'opts' | 'env' | 'config-role' | 'fallback-child' | 'default';
+type EnhanceSelectionSource = 'opts' | 'env' | 'config-role' | 'child' | 'fallback-child' | 'default';
 const PLANNING_FALLBACK_REASONS = new Set(['quota-exhausted', 'quota-unmeasured', 'quota-unavailable', 'no-credential-source', 'expiring', 'credential-shape', 'credential-error', 'credential-unavailable', 'unavailable']);
 export function normalizePlanningFallbackReason(value: unknown): string {
   return typeof value === 'string' && PLANNING_FALLBACK_REASONS.has(value) ? value : 'unavailable';
@@ -153,7 +155,7 @@ export function selectEnhanceLlm(
   const forwardedModelSource = env.ELANOUS_PROMPT_ENHANCE_MODEL_RELAY === 'pod' ? env.ELANOUS_PROMPT_ENHANCE_MODEL_SOURCE : undefined;
   const modelSource: EnhanceSelectionSource = opts.model !== undefined ? 'opts'
     : env.ELANOUS_PROMPT_ENHANCE_MODEL
-      ? forwardedModelSource === 'config-role' || forwardedModelSource === 'fallback-child' || forwardedModelSource === 'default' ? forwardedModelSource : 'env'
+      ? forwardedModelSource === 'config-role' || forwardedModelSource === 'child' || forwardedModelSource === 'fallback-child' || forwardedModelSource === 'default' ? forwardedModelSource : 'env'
     : configuredModel !== undefined ? 'config-role' : 'default';
   const model = opts.model ?? (env.ELANOUS_PROMPT_ENHANCE_MODEL || configuredModel || env.ELANOUS_PR_REVIEW_MODEL || tierModel('better'));
   const envEffort = env.ELANOUS_PROMPT_ENHANCE_EFFORT;
@@ -176,7 +178,7 @@ export function selectEnhanceLlm(
 export function selectPlanningLlm(
   env: NodeJS.ProcessEnv = process.env,
   config: UserConfig = getUserConfig(),
-): { model: string | undefined; effort: 'low' | 'medium' | 'high'; modelSource: 'env' | 'config-role' | 'fallback-child' | 'default'; fallbackReason?: string; requestedModel?: string; requestedSource?: string } {
+): { model: string | undefined; effort: 'low' | 'medium' | 'high'; modelSource: 'env' | 'config-role' | 'child' | 'fallback-child' | 'default'; fallbackReason?: string; requestedModel?: string; requestedSource?: string } {
   const planning = config.roleLlm?.planning;
   const envModel = env.ELANOUS_PROMPT_ENHANCE_MODEL;
   const roleModel = !envModel && planning && (planning.model || planning.tier || planning.provider)
@@ -186,7 +188,7 @@ export function selectPlanningLlm(
   const relayed = env.ELANOUS_PROMPT_ENHANCE_MODEL_RELAY === 'pod';
   const forwardedSource = relayed ? env.ELANOUS_PROMPT_ENHANCE_MODEL_SOURCE : undefined;
   const modelSource = envModel
-    ? forwardedSource === 'config-role' || forwardedSource === 'fallback-child' || forwardedSource === 'default' ? forwardedSource : 'env'
+    ? forwardedSource === 'config-role' || forwardedSource === 'child' || forwardedSource === 'fallback-child' || forwardedSource === 'default' ? forwardedSource : 'env'
     : roleModel ? 'config-role' : 'default';
   const envEffort = env.ELANOUS_PROMPT_ENHANCE_EFFORT;
   const validEnvEffort = envEffort === 'low' || envEffort === 'medium' || envEffort === 'high' ? envEffort : undefined;
@@ -434,6 +436,9 @@ export async function enhancePrompt(raw: string, opts: EnhanceOpts = {}): Promis
               '위 사실을 «옮겨 적지 말고», 그것이 보여 주는 상태(situation)와 문제(complication)를 써라.',
             ]
             : []),
+          ...(opts.authoringLessons?.trim()
+            ? ['', '## 지난 실패에서 배운 것', opts.authoringLessons.trim(), '위 교훈은 현재 ask의 대상 경로와 범위에 맞을 때만 적용하고, 맞지 않으면 무시하라.']
+            : []),
         ].join('\n'),
       },
     ];

package/src/pty-shell/availability.ts

@@ -0,0 +1,7 @@
+import { bunNativePtyAvailable } from './bun-native-pty.js';
+
+/** Keep the capability probe independent of PTY runtime initialization. */
+export function ptyAvailable(): boolean {
+  if (bunNativePtyAvailable()) return true;
+  try { require.resolve('node-pty'); return true; } catch { return false; }
+}