elanous 0.2.36 → 0.2.38

package/src/capture/tui-self-report.ts

@@ -39,16 +39,35 @@ import { createTuiScreenMirror } from './tui-screen-mirror.js';
 import { getChannelBus } from '../terminal-matrix/index.js';
 import { publishSelfReportFrame } from './self-report-frame.js';
 import {
-  upsertPtyManifest, updatePtyManifestFrame, touchLivePtyManifest, markPtyManifestClosed, removePtyManifest, getPtyManifest,
+  upsertPtyManifest, updatePtyManifestFrame, updatePtyManifestSession, touchLivePtyManifest, markPtyManifestClosed, removePtyManifest, getPtyManifest,
   updatePtyManifestBuild,
 } from '../pty-shell/pty-manifest.js';
 import { writeHarnessScreen } from '../harness/harness-screen.js';
 import { runningBuild, startTuiRunStateRecorder } from '../pty-shell/tui-run-state.js';
+import type { TuiSelfRestartDeps } from '../pty-shell/tui-run-state.js';
+import { lastHumanKeyAt } from '../tui.js';
 import { debug } from '../debug/log.js';
 import { setTuiLogName, setTuiLogSession } from '../debug/tui-log-tag.js';
 import { getActiveSessionId } from '../session/index.js';
 import { routeExternalInput, type ExternalInputRoute } from '../input/external-input-queue.js';
 
+/**
+ * 사람 손이 «아직 떠난 것으로 안 본» 조용창 — 마지막 사람 키가 이 창 안이면 입력 중으로 친다.
+ * 유휴 임계(H9 기본 90초)보다 길게 잡아 «방금 만지던 사람» 을 절대 끊지 않는다.
+ */
+const SELF_RESTART_HUMAN_QUIET_MS = 10 * 60_000;
+
+/** 실제 TUI 가 쓰는 H9 신호: 낡음=기동 판⊕설치본⊕HEAD · 사람 입력=마지막 사람 키 · 세션=지금 대화. */
+export function productionTuiSelfRestart(readSessionId: () => string | null): TuiSelfRestartDeps {
+  return {
+    humanInputPending: () => {
+      const last = lastHumanKeyAt();
+      return last > 0 && Date.now() - last < SELF_RESTART_HUMAN_QUIET_MS;
+    },
+    readSessionId,
+  };
+}
+
 export interface TuiFrameObserverCfg {
   surfaceId: string;
   instance: string;
@@ -279,6 +298,9 @@ export interface TuiSelfReportDeps {
   reportControlCleanupFailure?: (stage: TuiControlCleanupStage, error: unknown) => void;
   /** 행 등록 직후 실행 판 ⊕ 턴(idle) 기록을 연다 — `elanous pty state` 가 읽는다. 반환 = 정리. */
   startRunState?: (surfaceId: string) => (() => void);
+  /** 자기 재기동 신호(TUI-H9)를 갈아 끼운다 — 기본 = 실 신호(`lastHumanKeyAt` ⊕ `getActiveSessionId`).
+   *  시험은 가짜 시계·가짜 restart 로 판정선을 증명한다. */
+  selfRestart?: TuiSelfRestartDeps | null;
   /** 미룬 우편 깨움 폴러(TUI-H4)를 연다 — 반환 = 정리. 기본은 실 행 등록과 짝일 때만 늦게 불러온 `startPendingWakePoller`. */
   startWakePoller?: (surfaceId: string) => (() => void);
   /** 박동마다 자기 행을 본다 — 없으면 null · ⛔ 조회 실패는 «던진다»(없다로 읽지 않는다). 기본 = `getPtyManifest(id, { strict })`. */
@@ -399,9 +421,18 @@ export function startTuiSelfReport(deps: TuiSelfReportDeps = {}): () => void {
     return () => {};
   }
   const activeControlTarget = controlTarget;
+  const readActiveSessionId: () => string | null = deps.readActiveSessionId
+    ?? (() => { try { return getActiveSessionId(); } catch { return null; } });
   let stopRunState: () => void = () => {};
   // 행 등록을 갈아 끼운 호출자(시험)는 실 manifest 를 안 건드린다 — 기본 녹음기는 기본 행 등록과 짝일 때만.
-  const startRunState = deps.startRunState ?? (deps.registerRow ? () => () => {} : startTuiRunStateRecorder);
+  // TUI-H9: 그 기본 녹음기에 «사람 입력 없음»(마지막 사람 키 입력) ⊕ «지금 대화» 를 실 신호로 주입한다 —
+  //   judged-stale ∧ idle ∧ 사람 없음 이면 스스로 재기동(새 세션 ⊕ 자리 맥락)한다(자세한 판정선은 startTuiRunStateRecorder).
+  const startRunState = deps.startRunState
+    ?? (deps.registerRow
+      ? () => () => {}
+      : (id: string) => startTuiRunStateRecorder(id, {
+        selfRestart: deps.selfRestart === null ? undefined : (deps.selfRestart ?? productionTuiSelfRestart(readActiveSessionId)),
+      }));
   try { stopRunState = startRunState(surfaceId); } catch { /* fail-soft — recorder logs its own write failures */ }
   // 미룬 우편 깨움(TUI-H4) — 이 TUI 가 턴 중·5분 창이라 못 받은 깨움을 idle 로 «기록»된 뒤 한 번 다시 두드린다.
   // 실 행 등록과 짝일 때만(시험이 행 등록을 갈아 끼우면 0) · 무거운 모듈은 늦게 불러온다.
@@ -437,7 +468,15 @@ export function startTuiSelfReport(deps: TuiSelfReportDeps = {}): () => void {
     lastEmittedText = text;
     // TUI-H9 — 이 프레임이 «지금 이 TUI 가 보여 주는 대화» 의 소유 기록이다. 재기동은 이 id 로만 잇는다
     // (읽기 실패 → 소유 없음 → 재기동 막힘 · 다른 세션으로 대체하지 않는다).
-    try { claimTuiOwnedSession(readActiveSessionId(), at); } catch { claimTuiOwnedSession(null, at); }
+    let sessionId: string | null = null;
+    try {
+      sessionId = readActiveSessionId();
+      claimTuiOwnedSession(sessionId, at);
+    } catch {
+      sessionId = null;
+      claimTuiOwnedSession(null, at);
+    }
+    try { updatePtyManifestSession(surfaceId, sessionId ?? '', at); } catch { /* fail-soft */ }
     const frame: SelfReportFrame = { surfaceId, instance, kind: 'tui', mode: 'self-report', text, cols, rows, at, ...(runId ? { runId } : {}) };
     try { publishFrame(frame); } catch { /* fail-soft */ }
     // `at` is shared with the manifest write → its internal throttle keys
@@ -491,8 +530,6 @@ export function startTuiSelfReport(deps: TuiSelfReportDeps = {}): () => void {
     ?? (deps.registerRow ? () => ({ alive: true }) : (id: string) => getPtyManifest(id, { strict: true }));
   const restoreBuild = deps.restoreBuild ?? (deps.registerRow ? () => {} : (id: string) => { updatePtyManifestBuild(id, runningBuild()); });
   const logRowMissing = deps.logRowMissing ?? ((data: TuiRowMissingEvent) => debug.log('tui.self-report', 'row-missing', data));
-  const readActiveSessionId: () => string | null = deps.readActiveSessionId
-    ?? (() => { try { return getActiveSessionId(); } catch { return null; } });
   const rowNickname = deps.nickname?.trim() || undefined;
   let lastSeenAt = now();
   let lastBeatAt = lastSeenAt;

package/src/chat/index.ts

@@ -514,6 +514,7 @@ export const SLASH_COMMANDS: SlashCommand[] = [
   { name: 'tablet',    aliases: [],        description: 'Tablet mode — collapse layout to log + input', subcommands: ['on', 'off', 'toggle', 'auto', 'status', 'browser-preview', 'bp'] },
   { name: 'surface',   aliases: [], description: 'Surface control — open a pane/catalog launcher (/surface catalog · browser · preview · log · scratch · obsidian · skill) OR set a preferred LLM surface (/surface coding-agent · research-agent · control-agent · ops-agent · … · clear · status)', subcommands: ['catalog', 'browser', 'preview', 'browser-preview', 'log', 'scratch', 'obsidian', 'skill', 'skill-file', 'agents', 'coding-agent', 'coding-chat', 'research-agent', 'research-chat', 'control-agent', 'ops-ui-agent', 'ops-fleet-agent', 'ops-agent', 'clear', 'status'] },
   { name: 'term',  aliases: ['terminal'], description: 'Interactive terminal modal — new / list / attach / detach / switch / kill / snapshot / resume', subcommands: ['new', 'list', 'attach', 'detach', 'switch', 'kill', 'snapshot', 'resume'] },
+  { name: 'side', aliases: [], description: '사이드탭 기초 — 목록 · 셸 생성 · 번호로 PTY 보기/attach', subcommands: ['list', 'new', 'attach'] },
   { name: 'claude', aliases: [], description: 'Spawn claude-code CLI in a terminal modal' },
   { name: 'codex',  aliases: [], description: 'Spawn codex CLI in a terminal modal' },
   { name: 'gemini', aliases: [], description: 'Spawn gemini CLI in a terminal modal' },

package/src/chat/tool-render/dispatch.ts

@@ -89,7 +89,7 @@ export function renderToolResultVariants(
   // Only successful MsgPost results enter the compact renderer. Returning
   // null for errors lets the dashboard formatter use its existing generic
   // result path, including its expanded argument/result view.
-  if (kind === 'MsgPost' && extractErrorText(call.result)) return null;
+  if (kind === 'MsgPost' && isMsgPostErrorResult(call.result)) return null;
   const model = buildToolRenderModel(kind, call, config);
   const collapsed = renderToolBlock(model, config.blockMaxLines, config.foldMode, config.expandHint);
   // ⭐ MsgPost 는 접힌 행에서 본문을 빼고 펼친 행에서만 싣는다 ⇒ 같은 model 로는 두 변형을
@@ -113,6 +113,13 @@ interface ToolRenderModelOptions {
   includeMsgPostBody?: boolean;
 }
 
+/** MsgPost 오류 — `llm.ts` 가 throw 를 `{ error }` 로 감싼 형태와, `ok: false` 결과. */
+function isMsgPostErrorResult(result: unknown): boolean {
+  if (extractErrorText(result)) return true;
+  const rec = asRecord(result);
+  return rec?.ok === false;
+}
+
 function normalizeToolRenderName(name: string): ToolRenderKind | null {
   if (name === 'update_plan' || name === 'UpdatePlan') return 'UpdatePlan';
   if (name === 'update_goal' || name === 'UpdateGoal') return 'UpdateGoal';

package/src/cli/autopilot-cli.ts

@@ -9,6 +9,8 @@ import { writeStdoutJson } from './stdout-json.js';
 export interface AutopilotCliDeps {
   /** logs.db 싱크 등록(시험 주입). 기본 = `registerStandaloneLogSink`. `task-agent-action` 이 부른다. */
   registerSink?: (surface: string) => Promise<unknown>;
+  /** Deterministic action execution ports for isolated dispatcher tests. */
+  actionDeps?: Pick<import('../task-agent/actions.js').ActionDeps, 'mode' | 'command' | 'observe'>;
 }
 
 export function registerAutopilotCommands(program: Command, cliDeps: AutopilotCliDeps = {}): void {
@@ -22,7 +24,7 @@ export function registerAutopilotCommands(program: Command, cliDeps: AutopilotCl
       // 독립 프로세스 — 싱크를 붙이지 않으면 `task-agent`/`action` 관측이 logs.db 에 안 닿는다(fail-open).
       const { registerTaskAgentSink } = await import('./tasks-cli.js');
       await registerTaskAgentSink(cliDeps.registerSink);
-      const { executeNextAction } = await import('../task-agent/actions.js');
+      const { executeEntranceTick, executeNextAction } = await import('../task-agent/actions.js');
       const { getUserConfig } = await import('../user-config.js');
       const { spawnSync } = await import('node:child_process');
       const { writeFileSync, mkdirSync } = await import('node:fs');
@@ -41,15 +43,23 @@ export function registerAutopilotCommands(program: Command, cliDeps: AutopilotCl
         process.exitCode = 1;
         return;
       }
-      const action = JSON.parse(actionJson) as import('../task-agent/actions.js').NextAction;
+      const parsedInput = JSON.parse(actionJson) as import('../task-agent/actions.js').NextAction | import('../task-agent/actions.js').EntranceTickCandidate[];
+      const isEntranceTick = Array.isArray(parsedInput);
+      const action = isEntranceTick ? parsedInput[0]?.action : parsedInput;
+      if (!action) {
+        process.stderr.write('task-agent-action: action or non-empty entrance tick is required\n');
+        process.exitCode = 1;
+        return;
+      }
       const deps: import('../task-agent/actions.js').ActionDeps = {
         ...state,
+        ...cliDeps.actionDeps,
         failureCounts: state.failureCounts ?? {},
         saveState: () => {
           mkdirSync(dirname(statePath), { recursive: true });
           // 실패 횟수는 incrementFailure 가 잠금 안에서 키별로 더한다 — 여기선 덮어쓰지 않는다.
         },
-        mode: config.taskAgent?.mode,
+        mode: cliDeps.actionDeps?.mode ?? config.taskAgent?.mode,
         // 하루 착지 칸은 상태 파일 잠금 안에서 확보·반환한다 — 두 CLI 프로세스가 같은 잔여 칸을 쓰지 않게.
         reserveLanding: (day, limit) => withFileLockSync(`${statePath}.lock`, () => {
           const disk = readTaskAgentState<ActionState>(statePath);
@@ -74,18 +84,23 @@ export function registerAutopilotCommands(program: Command, cliDeps: AutopilotCl
           writeFileSync(statePath, JSON.stringify({ ...disk, landingsToday: disk.landingsToday - 1 }));
           deps.landingsToday = disk.landingsToday - 1;
         }),
-        observe: (_event, data) => debug.log('task-agent', 'action', data),
-        command: async args => {
+        observe: cliDeps.actionDeps?.observe ?? ((_event, data) => debug.log('task-agent', 'action', data)),
+        command: cliDeps.actionDeps?.command ?? (async (args, cwd) => {
           const p = args[0] === 'gh'
-            // PR 조회는 착지할 작업 트리에서 — 다른 저장소에서 불러도 엉뚱한 PR 을 읽지 않게.
-            ? spawnSync('gh', args.slice(1), { encoding: 'utf8', ...(action.cwd ? { cwd: action.cwd } : {}) })
+            // PR 조회는 해당 후보의 작업 트리에서 — 배열 후보 간 저장소가 섞이지 않게.
+            ? spawnSync('gh', args.slice(1), { encoding: 'utf8', ...(cwd ? { cwd } : {}) })
             // 지금 돌고 있는 진입점으로 부른다 — 저장소 밖(설치본)에서 불러도 같은 elanous 를 쓴다.
             : spawnSync(process.execPath, [process.argv[1]!, ...(process.argv.includes('--test') ? ['--test'] : []), ...args], { encoding: 'utf8' });
           return { status: p.status ?? 1, stdout: p.stdout ?? '', stderr: p.stderr ?? '' };
-        },
+        }),
       };
       let result: string;
-      try { result = await executeNextAction(action, deps); } catch (error) {
+      try {
+        if (isEntranceTick) {
+          const results = await executeEntranceTick(parsedInput, deps);
+          result = results.join('\n');
+        } else result = await executeNextAction(action, deps);
+      } catch (error) {
         // 잠금 안 읽기가 손상을 만나면 쓰지 않고 여기로 온다 — 실패로 끝낸다. 그 밖의 오류는 종전대로 올린다.
         if (!(error instanceof TaskAgentStateError)) throw error;
         process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);

package/src/cli/decisions-cli.ts

@@ -64,7 +64,7 @@ export function formatSeatDecisionRow(e: SeatDecisionRecord): string {
 }
 
 export function formatProposalRow(p: ProposalCard): string {
-  return `${p.id} · ${categoryLabel(p.category)} · ${p.title} · 사실 ${p.factId} · 비용 ${p.cost} · 되돌리기 ${p.undo}${p.thresholds.length ? ` · ${CROWN_MARK} 몫 ${p.thresholds.join('|')}` : ''} · 제안 ${representativeLabel(p.proposedBy)} · ${kst(p.proposedAt)} · 왕복 ${p.roundTrips}/${MAX_REVIEW_ROUND_TRIPS} · ${p.status === 'open' ? '검토 중' : p.status === 'agreed' ? '합의·실행·기록' : '불합의'}`;
+  return `${p.id} · ${categoryLabel(p.category)} · ${p.title} · 사실 ${p.factId} · 비용 ${p.cost} · 되돌리기 ${p.undo}${p.thresholds.length ? ` · ${CROWN_MARK} 몫 ${p.thresholds.join('|')}` : ''} · 제안 ${representativeLabel(p.proposedBy)} · ${kst(p.proposedAt)} · 왕복 ${p.roundTrips}/${MAX_REVIEW_ROUND_TRIPS} · ${p.status === 'open' ? '검토 중' : p.status === 'agreed' ? (p.thresholds.length ? '합의·승인 대기' : '합의·실행·기록') : '불합의'}`;
 }
 
 export function formatCrownCardRow(c: CrownCard): string {
@@ -235,14 +235,15 @@ export function registerDecisionsCommands(program: Command, config: DecisionLedg
     .requiredOption('--category <category>', `합의 범주 (${CONSENSUS_CATEGORIES.join('|')})`)
     .requiredOption('--title <text>').requiredOption('--fact-id <id>', '사실 id')
     .requiredOption('--cost <text>', '비용').requiredOption('--undo <text>', '되돌리기')
+    .option('--work-key <orch:card:cell>', 'splitter 교차 영향 작업 키')
     .option('--threshold <category>', `${CROWN_MARK} 몫 임계 범주 (반복: ${CROWN_THRESHOLD_CATEGORIES.join('|')})`, repeat, [])
     .option('--provider <name>', 'LLM 제공자 표식 — 가능하면 상대와 다른 제공자 (메아리 방지)')
     .option('--json').option('--hq-override')
-    .action((o: { by: string; category: string; title: string; factId: string; cost: string; undo: string; threshold: string[]; provider?: string; json?: boolean; hqOverride?: boolean }) => fail(() => {
+    .action((o: { by: string; category: string; title: string; factId: string; cost: string; undo: string; workKey?: string; threshold: string[]; provider?: string; json?: boolean; hqOverride?: boolean }) => fail(() => {
       if (!mayWrite('consensus propose', o.hqOverride)) return;
       const proposal = consensusEngine().propose({
         by: o.by as ConsensusRepresentative, category: o.category as ConsensusCategory, title: o.title, factId: o.factId, cost: o.cost, undo: o.undo,
-        thresholds: o.threshold.map(threshold => threshold as DecisionCategory), provider: o.provider,
+        workKey: o.workKey, thresholds: o.threshold.map(threshold => threshold as DecisionCategory), provider: o.provider,
       });
       return emit(proposal, o.json, `제안: ${formatProposalRow(proposal)}`);
     }));
@@ -263,7 +264,9 @@ export function registerDecisionsCommands(program: Command, config: DecisionLedg
     .option('--json').option('--hq-override')
     .action((id: string, o: { by: string; claim?: string; provider?: string; json?: boolean; hqOverride?: boolean }) => fail(() => {
       if (!mayWrite('consensus agree', o.hqOverride)) return;
-      const { proposal, crownCard } = consensusEngine().agree(id, { by: o.by as ConsensusRepresentative, claim: o.claim, provider: o.provider });
+      const consensus = consensusEngine();
+      const { proposal, crownCard } = consensus.agree(id, { by: o.by as ConsensusRepresentative, claim: o.claim, provider: o.provider });
+      if (!crownCard && !consensus.canExecute(proposal.id)) throw new Error(`합의 실행 관문 거부: ${proposal.id}`);
       return emit({ proposal, ...(crownCard ? { crownCard } : {}) }, o.json,
         `합의: ${formatProposalRow(proposal)}${crownCard ? `\n${CROWN_MARK} 카드: ${formatCrownCardRow(crownCard)}` : ''}`);
     }));

package/src/cli/doctor-cli.ts

@@ -44,9 +44,11 @@ import {
   DOCTOR_SYMPTOMS,
   DOCTOR_VISIT_SOURCES,
   doctorVisitRunExists,
+  doctorReviewVisits,
   isDoctorSymptom,
   isDoctorVisitSource,
   readDoctorVisits,
+  readDoctorReviewBrief,
   recordAutoLongRunVisit,
   recordDoctorVisit,
   type DoctorSymptom,
@@ -55,6 +57,8 @@ import { formatHostDoctorLines, runHostDoctor, type HostDoctorExpected, type Hos
 import { listMachineResources } from './control-cli.js';
 import type { ResourceView } from '../control-plane/ledger.js';
 import { loadMachineLedger } from '../machines/machine-ledger.js';
+import { LogStore, logsDbPath, type LogStoreRow } from '../mss/logging/log-store.js';
+import { reviewBriefEvidence } from '../self-implement/review-round-brief.js';
 
 function defaultCheckPythonEnv(): { status: 'ok' | 'fixable' | 'manual'; evidence: string; remedy?: string } {
   const c = checkPythonEnv(false);
@@ -223,10 +227,49 @@ export interface DoctorCliDeps extends DoctorOptions, Pick<DoctorFixDeps, 'home'
   hostDoctorMachineResources?: () => Promise<ResourceView[]>;
   /** `doctor visit`/`doctor status` 원장 디렉터리(시험 seam) — 기본 = `runLedgerDir()`. */
   doctorVisitLedgerDir?: string;
+  /** Isolated saved-review and PR metadata seams. */
+  reviewResultsDir?: string;
+  readReviewBriefPr?: Parameters<typeof readDoctorReviewBrief>[1];
+  /** Optional isolated observation transport and status reader for CLI tests. */
+  reviewBriefLog?: (event: Record<string, unknown>) => void;
+  readReviewBriefEvents?: (runId?: string) => Array<{ timestamp?: string; sequence?: number; runId?: string; key?: string; evidence?: string }>;
   /** `doctor visit` 사고 선례 연결 루트(시험 seam) — 기본 = `doctorVisitIncidentRoot()` · `null` 이면 건너뛴다. */
   doctorVisitIncidentRoot?: string | null;
   /** Deterministic clock for `doctor auto-long-run` isolated CLI tests. */
   doctorAutoLongRunNow?: () => string;
+  /** Standalone logs.db registration seam for the two run-doctor CLI emitters. */
+  registerDoctorLogSink?: () => Promise<unknown>;
+  /** Flush seam paired with registerDoctorLogSink. */
+  flushDoctorLogs?: () => void;
+}
+
+export function parseReviewBriefLogData(raw: unknown): Record<string, unknown> {
+  let data: unknown;
+  try { data = typeof raw === 'string' ? JSON.parse(raw) : raw; }
+  catch (error) { throw new Error(`malformed doctor.review/brief-issued event: ${error instanceof Error ? error.message : String(error)}`); }
+  if (!data || typeof data !== 'object' || Array.isArray(data)) throw new Error('malformed doctor.review/brief-issued event: expected object data');
+  const value = data as Record<string, unknown>;
+  if (typeof value.pr !== 'number' || typeof value.head !== 'string' || typeof value.round !== 'number') {
+    throw new Error('malformed doctor.review/brief-issued event: required pr/head/round fields are missing');
+  }
+  return value;
+}
+
+function readReviewBriefEventsFromLogs(dbPath = logsDbPath(), runId?: string): Array<{ timestamp?: string; sequence?: number; runId?: string; key?: string; evidence?: string }> {
+  if (!existsSync(dbPath)) return [];
+  let store: LogStore | undefined;
+  try {
+    store = LogStore.openReadOnly(dbPath);
+    return store.queryAll({ exactCategories: ['doctor.review'], events: ['brief-issued'] }).flatMap((row: LogStoreRow) => {
+      const data = parseReviewBriefLogData(row.data);
+      const rowRunId = typeof data.runId === 'string' && data.runId ? data.runId : undefined;
+      if (runId !== undefined && rowRunId !== runId) return [];
+      return [{ timestamp: new Date(row.ts_ms).toISOString(), sequence: row.id, ...(rowRunId ? { runId: rowRunId } : {}), key: String(data.pr), evidence: `PR #${data.pr} head ${data.head.slice(0, 12)} r${data.round} rx=${String(data.rx)}${data.source === 'pr-disposition' ? ' source=pr-disposition' : ''}` }];
+    });
+  } catch (error) {
+    throw new Error(`review event logs could not be read: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  finally { store?.close(); }
 }
 
 const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
@@ -1293,6 +1336,9 @@ export function registerDoctorCommand(program: Command, deps: DoctorCliDeps = {}
   const out = deps.out ?? { log: (value: string) => console.log(value) };
   const err = deps.err ?? { error: (value: string) => console.error(value) };
   const setExitCode = deps.setExitCode ?? ((code: number) => { process.exitCode = code; });
+  const registerDoctorLogSink = deps.registerDoctorLogSink ?? (async () =>
+    (await import('../domains/standalone-log-sink.js')).registerStandaloneLogSink('cli'));
+  const flushDoctorLogs = deps.flushDoctorLogs ?? (() => debug.flush());
   const doctor = program.command('doctor')
     .description('Reports whether credentials resolve and where each resolution comes from')
     .option('--json', 'structured output');
@@ -1358,9 +1404,10 @@ export function registerDoctorCommand(program: Command, deps: DoctorCliDeps = {}
     .argument('<runId>', 'run id whose ledger receives the visit')
     .requiredOption('--started-at <iso>', 'Pod status.startTime as an ISO timestamp')
     .option('--json', 'structured output')
-    .action((runId: string, opts: { startedAt: string; json?: boolean }, command: Command) => {
+    .action(async (runId: string, opts: { startedAt: string; json?: boolean }, command: Command) => {
       const json = opts.json === true || command.parent?.opts().json === true;
       try {
+        await registerDoctorLogSink();
         const result = recordAutoLongRunVisit({ runId, startedAt: opts.startedAt,
           ...(deps.doctorAutoLongRunNow ? { now: deps.doctorAutoLongRunNow() } : {}),
           ...(deps.doctorVisitLedgerDir !== undefined ? { dir: deps.doctorVisitLedgerDir } : {}) });
@@ -1370,6 +1417,8 @@ export function registerDoctorCommand(program: Command, deps: DoctorCliDeps = {}
         if (json) out.log(JSON.stringify({ status: 'rejected', reason }));
         else err.error(reason);
         setExitCode(1);
+      } finally {
+        flushDoctorLogs();
       }
     });
   doctor.command('visit')
@@ -1379,7 +1428,7 @@ export function registerDoctorCommand(program: Command, deps: DoctorCliDeps = {}
     .requiredOption('--from <who>', `closed sender list: ${DOCTOR_VISIT_SOURCES.join(', ')}`)
     .option('--evidence <text>', 'free-text evidence recorded with the visit')
     .option('--json', 'structured output')
-    .action((runId: string, opts: { symptom: string; from: string; evidence?: string; json?: boolean }, command: Command) => {
+    .action(async (runId: string, opts: { symptom: string; from: string; evidence?: string; json?: boolean }, command: Command) => {
       const json = opts.json === true || command.parent?.opts().json === true;
       if (!isDoctorSymptom(opts.symptom)) {
         const reason = `unknown symptom: ${opts.symptom} — closed list: ${DOCTOR_SYMPTOMS.join(', ')}`;
@@ -1396,6 +1445,7 @@ export function registerDoctorCommand(program: Command, deps: DoctorCliDeps = {}
         return;
       }
       try {
+        await registerDoctorLogSink();
         const visit = recordDoctorVisit({
           runId,
           from: opts.from,
@@ -1410,6 +1460,54 @@ export function registerDoctorCommand(program: Command, deps: DoctorCliDeps = {}
         if (json) out.log(JSON.stringify({ status: 'rejected', reason }));
         else err.error(reason);
         setExitCode(1);
+      } finally {
+        flushDoctorLogs();
+      }
+    });
+  doctor.command('review-brief')
+    .description('Build a review-round card from saved reviews for the current PR head')
+    .requiredOption('--pr <number>', 'PR number')
+    .option('--json', 'structured output')
+    .action(async (opts: { pr: string; json?: boolean }, command: Command) => {
+      const json = opts.json === true || command.parent?.opts().json === true;
+      const pr = Number(opts.pr);
+      if (!Number.isSafeInteger(pr) || pr <= 0) {
+        const reason = 'PR number must be a positive integer';
+        if (json) out.log(JSON.stringify({ status: 'rejected', reason })); else err.error(reason);
+        setExitCode(1);
+        return;
+      }
+      try {
+        const brief = readDoctorReviewBrief(pr, deps.readReviewBriefPr, deps.reviewResultsDir);
+        const event = reviewBriefEvidence(brief);
+        const intentBlock = typeof event.intentBlock === 'string' ? event.intentBlock : null;
+        if (deps.reviewBriefLog) deps.reviewBriefLog(event);
+        else {
+          await (await import('../domains/standalone-log-sink.js')).registerStandaloneLogSink('cli');
+          debug.log('doctor.review', 'brief-issued', event);
+          debug.flush();
+        }
+        out.log(json ? JSON.stringify({ ...brief, intentBlock }, null, 2) : [
+          `PR #${pr} · ${brief.status} · rounds=${brief.rounds} · head=${brief.head.slice(0, 12)} · verdict=${brief.reviewedVerdict} · rx=${brief.rx}`,
+          ...(brief.dispositionEvidence ? [`Source: PR author disposition (current head review unmeasured) · ${brief.dispositionEvidence}`] : []),
+          ...(brief.goalQuestion ? [`Original question: ${brief.goalQuestion}`] : []),
+          ...(brief.acceptanceSignal.length ? ['Acceptance signal:', ...brief.acceptanceSignal.map((item) => `  - ${item}`)] : []),
+          `Core items (${brief.coreItems.length}/${brief.totalCoreItems}):`,
+          ...brief.coreItems.map((item) => `  [${item.kind}] ${item.text}`),
+          ...(brief.omittedCoreItems ? [`Core items omitted: ${brief.omittedCoreItems}; source files: ${brief.resultPaths.join(', ')}`] : []),
+          `Prior findings (${brief.priorFindings.length}/${brief.totalPriorFindings}):`, ...brief.priorFindings.map((item) => `  [${item.kind} · ${item.sourceHead.slice(0, 12)}] ${item.text}`),
+          ...(brief.omittedPriorFindings ? [`Prior findings omitted: ${brief.omittedPriorFindings}; source files: ${brief.resultPaths.join(', ')}`] : []),
+          `Scope candidates (${brief.scopeItems.length}/${brief.totalScopeItems}):`, ...brief.scopeItems.map((item) => `  [${item.kind}] ${item.text}`),
+          ...(brief.omittedScopeItems ? [`Scope candidates omitted: ${brief.omittedScopeItems}; source files: ${brief.resultPaths.join(', ')}`] : []),
+          ...(brief.resultPaths.length ? [`Review source files: ${brief.resultPaths.join(', ')}`] : []),
+          `Scope boundary: ${brief.scopeBoundary}`,
+          ...(intentBlock ? ['R3 intent shadow output:', intentBlock] : []),
+          ...(brief.reason ? [`Reason: ${brief.reason}`] : []),
+        ].join('\n'));
+      } catch (error) {
+        const reason = observationError(error);
+        if (json) out.log(JSON.stringify({ status: 'unavailable', pr, reason })); else err.error(reason);
+        setExitCode(1);
       }
     });
   doctor.command('status')
@@ -1427,18 +1525,29 @@ export function registerDoctorCommand(program: Command, deps: DoctorCliDeps = {}
         return;
       }
       const visits = readDoctorVisits(opts.run, ledgerScope);
+      let reviewEvents: Array<{ timestamp?: string; sequence?: number; runId?: string; key?: string; evidence?: string }>;
+      try {
+        reviewEvents = (deps.readReviewBriefEvents ?? ((runId?: string) => readReviewBriefEventsFromLogs(logsDbPath(), runId)))(opts.run);
+      } catch (error) {
+        const reason = observationError(error);
+        if (json) out.log(JSON.stringify({ status: 'unavailable', reason, recordedVisits: visits }, null, 2));
+        else out.log(`Doctor status unavailable: ${reason}\nRecorded doctor visits: ${visits.length}`);
+        setExitCode(1);
+        return;
+      }
+      const statusVisits = [...visits, ...doctorReviewVisits(reviewEvents)];
       const counts = Object.fromEntries(DOCTOR_SYMPTOMS.map((symptom: DoctorSymptom) => [symptom, 0])) as Record<DoctorSymptom, number>;
-      for (const visit of visits) counts[visit.symptom] += 1;
+      for (const visit of statusVisits) counts[visit.symptom] += 1;
       if (json) {
-        out.log(JSON.stringify({ total: visits.length, counts, visits }, null, 2));
+        out.log(JSON.stringify({ total: statusVisits.length, counts, visits: statusVisits }, null, 2));
         return;
       }
       out.log([
-        `Doctor visits: ${visits.length}`,
+        `Doctor visits: ${statusVisits.length}`,
         ...DOCTOR_SYMPTOMS.map((symptom: DoctorSymptom) => `  ${symptom}: ${counts[symptom]}`),
         'Recent visits:',
-        ...visits.map((visit) => `  ${visit.timestamp ?? 'unknown-time'} runId=${visit.runId} from=${visit.from} symptom=${visit.symptom}${visit.evidence !== undefined ? ` evidence=${visit.evidence}` : ''}`),
-        ...(visits.length === 0 ? ['  none'] : []),
+        ...statusVisits.map((visit) => `  ${visit.timestamp ?? 'unknown-time'}${visit.runId ? ` runId=${visit.runId}` : ''} from=${visit.from} symptom=${visit.symptom}${visit.evidence !== undefined ? ` evidence=${visit.evidence}` : ''}`),
+        ...(statusVisits.length === 0 ? ['  none'] : []),
       ].join('\n'));
     });
   doctor

package/src/cli/guardian-cli.ts

@@ -72,7 +72,9 @@ export function registerGuardianCommands(program: Command): void {
             debug.log('ops.orphan-cli', 'observation-failed', { error: String(error) });
           } catch { /* guardian shadow still runs */ }
         }
-        const result = await guardianTick(tickAt, plan, { config: cfg });
+        const result = await guardianTick(tickAt, plan, { config: cfg,
+          doctorShadow: async () => { (await import('../self-implement/doctor-visit.js')).recordPendingShadowDoctorReevaluations(); },
+        });
         await writeStdoutJson(JSON.stringify(result, null, 2) + '\n');
       } finally { db.close(); }
     });

package/src/cli/intake-cli.ts

@@ -13,6 +13,7 @@ import { debug } from '../debug/log.js';
 import { getUserConfig } from '../user-config.js';
 import { registerIntakeSourceCommands } from './intake-source-cli.js';
 import type { IntakeItem } from '../intake-plane/items.js';
+import type { CollectSavedResult, FetchSavedMessages } from '../intake-plane/collect-telegram-saved.js';
 import type { TaskCard } from '../task-cards/card-store.js';
 import { collectFunnelCandidates, type FunnelDirectiveRow } from '../intake-plane/requirement-funnel.js';
 
@@ -31,6 +32,13 @@ export interface IntakeCandidatesCliDeps {
   write?: (text: string) => Promise<void>;
 }
 
+export interface IntakeCliDeps extends IntakeCandidatesCliDeps {
+  /** 흡수 원장 우주 (기본 effectiveInstanceRoot()) — 시험은 격리 임시 root 를 넣는다. */
+  root?: string;
+  /** 텔레그램 «저장된 메시지» 연결 (기본 gramjsFetchSaved) — 시험은 가짜 fetch 를 넣는다. */
+  connectSaved?: () => Promise<{ fetch: FetchSavedMessages; close: () => Promise<void> }>;
+}
+
 /** `--limit` 원 문자열 → 0 이상의 정수. 숫자만(`/^\d+$/`) 받고 나머지('' · 공백 · 음수 · 소수)는 거부한다. */
 export function parseCandidatesLimit(raw: string): number {
   const limit = /^\d+$/.test(raw) ? Number(raw) : NaN;
@@ -187,6 +195,40 @@ export async function runIntakeDigestCli(
   return {};
 }
 
+export interface CollectTelegramSavedCliDeps {
+  root?: string;
+  connect?: () => Promise<{ fetch: FetchSavedMessages; close: () => Promise<void> }>;
+  write?: (text: string) => Promise<void>;
+  error?: (message: string) => void;
+}
+
+/**
+ * `intake collect-telegram-saved` — 읽기만 · 커서 이후만.
+ * «메시지 0»(필터로 비었나 · 커서를 다른 주체가 넘겼나)과 «원장 입력 0»(다른 주체가 이미 가져갔나)을 갈라 보여준다.
+ */
+export async function runCollectTelegramSavedCli(
+  opts: { max?: string; dryRun?: boolean; json?: boolean },
+  deps: CollectTelegramSavedCliDeps = {},
+): Promise<CollectSavedResult | undefined> {
+  const { collectTelegramSaved, gramjsFetchSaved, renderCollectTelegramSavedResult } = await import('../intake-plane/collect-telegram-saved.js');
+  const root = deps.root ?? (await import('../instance/resolve.js')).effectiveInstanceRoot();
+  let conn: { fetch: FetchSavedMessages; close: () => Promise<void> };
+  try { conn = await (deps.connect ?? (() => gramjsFetchSaved()))(); }
+  catch (e) { (deps.error ?? ((message: string) => console.error(message)))(String((e as Error).message ?? e)); process.exitCode = 2; return undefined; }
+  try {
+    const res = await collectTelegramSaved(root, conn.fetch, {
+      max: Math.max(1, Number(opts.max ?? 300) || 300),
+      ...(opts.dryRun ? { dryRun: true } : {}),
+    });
+    const write = deps.write ?? writeStdoutFully;
+    if (opts.json) await write(JSON.stringify(res, null, 2));
+    else await write(renderCollectTelegramSavedResult(res));
+    return res;
+  } finally {
+    await conn.close();
+  }
+}
+
 export function resolveIntakeCheckRoot(
   cwd: string,
   git: typeof runGitCommand = runGitCommand,
@@ -200,7 +242,7 @@ export function resolveIntakeCheckRoot(
   }
 }
 
-export function registerIntakeCommands(program: Command, candidateDeps: IntakeCandidatesCliDeps = {}): void {
+export function registerIntakeCommands(program: Command, candidateDeps: IntakeCliDeps = {}): void {
   // ── intake check — 바깥 사실을 elanous 현재와 대조 (태스크 등록 없음) ──
   const intakeCmd = program.command('intake').description('바깥 사실·문서를 elanous 현재와 대조하거나 태스크로 받는다');
   registerIntakeSourceCommands(intakeCmd);
@@ -500,17 +542,11 @@ export function registerIntakeCommands(program: Command, candidateDeps: IntakeCa
     .option('--dry-run', '원장·커서를 바꾸지 않고 건수만')
     .option('--json', '구조화 출력')
     .action(async (opts: { max?: string; dryRun?: boolean; json?: boolean }) => {
-      const { collectTelegramSaved, gramjsFetchSaved } = await import('../intake-plane/collect-telegram-saved.js');
-      const { effectiveInstanceRoot } = await import('../instance/resolve.js');
-      let conn: Awaited<ReturnType<typeof gramjsFetchSaved>>;
-      try { conn = await gramjsFetchSaved(); } catch (e) { console.error(String((e as Error).message ?? e)); process.exitCode = 2; return; }
-      try {
-        const res = await collectTelegramSaved(effectiveInstanceRoot(), conn.fetch, { max: Math.max(1, Number(opts.max ?? 300) || 300), ...(opts.dryRun ? { dryRun: true } : {}) });
-        if (opts.json) await writeStdoutFully(JSON.stringify(res, null, 2));
-        else console.log(`텔레그램 저장된 메시지: 메시지 ${res.messages} · 원장 입력 ${res.raws} · 커서 ${res.cursorBefore} → ${res.cursorAfter}${res.dryRun ? ' (dry-run · 안 씀)' : res.ingest ? ` · 새 ${res.ingest.added} · 합침 ${res.ingest.merged} · 이미 끝난 것 ${res.ingest.seen}` : ''}`);
-      } finally {
-        await conn.close();
-      }
+      await runCollectTelegramSavedCli(opts, {
+        ...(candidateDeps.root ? { root: candidateDeps.root } : {}),
+        ...(candidateDeps.connectSaved ? { connect: candidateDeps.connectSaved } : {}),
+        ...(candidateDeps.write ? { write: candidateDeps.write } : {}),
+      });
     });
 
   intakeCmd