elanous 0.2.5 → 0.2.6

package/src/autopilot/mission-origin.ts

@@ -13,20 +13,36 @@ import { getUserConfig } from '../user-config.js';
 import { resolveChannelBotToken } from '../channel-bot-token.js';
 import { join } from 'node:path';
 
-export interface MissionOrigin {
-  channel: 'telegram' | 'pwa' | 'voice' | 'cli' | 'api' | 'tui';
+interface MissionOriginBase {
   /** 텔레그램: 답장할 chat id. */
   chatId?: number;
   /** 텔레그램: 수신 봇 식별(botId=토큰 prefix). 발송 시 config 에서 토큰 해석. */
   botId?: string;
-  /** 텔레그램 스레드(포럼) — 있으면 답장에 붙임. */
-  threadId?: number;
   /** HITL 승인/거절 버튼을 단 알림 메시지의 message_id. 크로스서피스 싱크용 —
    *  PWA/텔레그램 어느 쪽에서 해소돼도 이 좌표(chatId+botId+이 id)로 텔레그램 메시지를
    *  edit("승인됨/거절됨")하고 버튼을 제거한다. 버튼 발송 성공 시에만 기록. */
   hitlMessageId?: number;
 }
 
+export type MissionOrigin = MissionOriginBase & (
+  | {
+      channel: 'telegram' | 'pwa' | 'voice' | 'cli' | 'api' | 'tui';
+      /** 텔레그램 스레드(포럼) — 있으면 답장에 붙임. */
+      threadId?: number;
+      channelId?: never;
+    }
+  | {
+      channel: 'discord';
+      /** Discord origin channel (snowflake). */
+      channelId: string;
+      /** Discord thread (snowflake), if the request came from a thread.
+       *  ⛔ `threadId` 가 아니다 — 텔레그램 `threadId?: number` 와 같은 이름이면 유니온에서 `string|number` 로 넓어져
+       *  텔레그램 발송부 20여 곳의 타입이 깨진다(2026-10-01 PWA 빌드 실패 · #22246). */
+      discordThreadId?: string;
+      threadId?: never;
+    }
+);
+
 function originDir(): string {
   // core 미션 fabric = autopilot/ (conatus/ 는 투자 customer 네임스페이스·대표 정정 2026-07-11).
   // [ISO-3] ELANOUS_STATE_DIR 존중 — 격리 테스트 데몬은 운영 origin 을 못 본다.

package/src/autopilot/mission-phase-track.ts

@@ -1,7 +1,17 @@
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 
-type TrackEntry = { id: string; mark: string; owns: string[] };
+type TrackEntry = { id: string; mark: string; owns: string[]; alias?: string };
+
+// Seat ids became two letters on 09-30 (#22085) with the old one-letter id kept as `alias`.
+// A track named either way is the same seat — posts and inputs still carry the old letter during the switch.
+export function findTrack(idOrAlias: string, registry: TrackEntry[] = loadTrackRegistry()): TrackEntry | undefined {
+  return registry.find((track) => track.id === idOrAlias || track.alias === idOrAlias);
+}
+export function trackPostIds(idOrAlias: string, registry: TrackEntry[] = loadTrackRegistry()): string[] {
+  const track = findTrack(idOrAlias, registry);
+  return [...new Set([idOrAlias, ...(track ? [track.id, ...(track.alias ? [track.alias] : [])] : [])])];
+}
 
 export function loadTrackRegistry(path = resolve(import.meta.dir, '../../scripts/coord-tracks.json')): TrackEntry[] {
   try {

package/src/autopilot/track-agent.ts

@@ -6,7 +6,7 @@ import { debug, redactSecretText } from '../debug/log.js';
 import { getOrCreatePersonaSession } from '../session/index.js';
 import { getUserConfig } from '../user-config.js';
 import { decideBudget, readBudgetInputsLive } from '../self-implement/budget-gate.js';
-import { loadTrackRegistry } from './mission-phase-track.js';
+import { findTrack } from './mission-phase-track.js';
 import { effectiveInstanceRoot } from '../instance/resolve.js';
 
 export type TrackAgentInput = { missionId: string; taskId: string; title: string; prompt: string; track: string };
@@ -45,7 +45,7 @@ const forbidden = /\b(?:delete|remove|deploy|publish|release|restart|reboot|merg
 let running = 0;
 
 function context(input: TrackAgentInput, repo: string): string {
-  const track = loadTrackRegistry().find(({ id }) => id === input.track);
+  const track = findTrack(input.track);
   if (!track) throw new Error('unknown track');
   const docs = resolve(repo, 'docs');
   let handoff = '';
@@ -94,7 +94,7 @@ export async function decideTrackAction(input: TrackAgentInput, deps: RunnerDeps
 export async function executeTrackAction(decision: TrackAgentDecision, input: TrackAgentInput, deps: RunnerDeps = {}): Promise<TrackAgentResult> {
   if (decision.action !== 'say') return { status: 'held', detail: decision.reason ?? '사람 확인' };
   if (forbidden.test(`${input.title}\n${input.prompt}`)) return { status: 'held', detail: '금지 작업 — 사람 확인' };
-  if (!loadTrackRegistry().some(({ id }) => id === input.track)) return { status: 'held', detail: '트랙 미정 — 사람 확인' };
+  if (!findTrack(input.track)) return { status: 'held', detail: '트랙 미정 — 사람 확인' };
   try {
     const checkBudget = deps.checkBudget ?? (async () => {
       const action = decideBudget(await readBudgetInputsLive()).action;

package/src/autopilot/track-courier.ts

@@ -6,7 +6,7 @@ import { join, resolve } from 'node:path';
 import { debug, redactSecretText } from '../debug/log.js';
 import { TaskStore } from '../task-orchestrator/store.js';
 import { getUserConfig, type UserConfig } from '../user-config.js';
-import { inferPhaseTrack, loadTrackRegistry } from './mission-phase-track.js';
+import { inferPhaseTrack, loadTrackRegistry, trackPostIds } from './mission-phase-track.js';
 import type { TrackAgentInput, TrackAgentRunner } from './track-agent.js';
 
 type CourierConfig = NonNullable<NonNullable<UserConfig['autopilot']>['trackCourier']>;
@@ -66,7 +66,7 @@ export async function trackAlive(track: string, deps: CourierDeps = {}): Promise
     const comments = await (deps.listComments ?? (() => defaultComments(config.channelPr!, now, minutesFor(config))))();
     if (!Array.isArray(comments)) throw new Error('comments response is not an array');
     const timestamps = comments
-      .filter((c) => c && typeof c.body === 'string' && c.body.startsWith(`**[${track}]**`))
+      .filter((c) => c && typeof c.body === 'string' && trackPostIds(track).some((id) => c.body.startsWith(`**[${id}]**`)))
       .map((c) => Date.parse(c.created_at))
       .filter((at) => Number.isFinite(at) && at <= now);
     if (!timestamps.length) return { alive: false, lastPostAt: null, reason: 'no-post' };

package/src/cli/nexus-ios-bind.ts

@@ -59,6 +59,9 @@ export interface IosBindOpts {
   readTokenFn?: () => string | null;
   /** Test seam — host fallback (production daily driver 의 default). */
   hostFallback?: string;
+  /** Test seam — `defaults write` 가 쓸 도메인. 기본은 설치된 앱 «컨테이너»의 plist 경로다.
+   *  `spawnSyncFn` 만 주입된 시험은 bundle id 그대로(실 `xcrun` 을 부르지 않는다). */
+  resolveDomainFn?: (bundleId: string) => string;
 }
 
 export interface IosBindResult {
@@ -90,6 +93,16 @@ function defaultReadToken(): string | null {
   }
 }
 
+/** 앱이 실제로 읽는 도메인 — 설치된 앱의 데이터 컨테이너 plist(확장자 없이).
+ *  ⚠️ `defaults write <bundleId>` 는 시뮬레이터 «전역» 도메인에 쓴다. 앱은 자기 컨테이너 plist 를 읽으므로,
+ *  앱이 한 번이라도 설정을 저장한 뒤로는 그 값이 이긴다(2026-09-30 실측: 연결 링크로 받은 만료 임시 토큰이
+ *  컨테이너에 남아 ios-bind 가 «✓» 를 찍고도 앱은 401 을 받았다). 컨테이너를 못 찾으면 bundle id 로 폴백한다. */
+function defaultResolveDomain(bundleId: string): string {
+  const r = defaultSpawnSync('xcrun', ['simctl', 'get_app_container', 'booted', bundleId, 'data'], { stdio: 'pipe' });
+  const dir = r.status === 0 ? String(r.stdout ?? '').trim() : '';
+  return dir ? join(dir, 'Library', 'Preferences', bundleId) : bundleId;
+}
+
 /** UserDefaults write 1 회. spawnSync exit code 0 = 성공. */
 function defaultsWrite(
   spawnFn: typeof defaultSpawnSync,
@@ -119,6 +132,8 @@ export function runNexusIosBind(opts: IosBindOpts = {}): IosBindResult {
   const readToken = opts.readTokenFn ?? defaultReadToken;
   const hostFallback = opts.hostFallback ?? DEFAULT_HOST_FALLBACK;
   const dryRun = opts.dryRun ?? false;
+  const resolveDomain = opts.resolveDomainFn
+    ?? (opts.spawnSyncFn || dryRun ? (id: string) => id : defaultResolveDomain);
 
   // 1) daemon 현재 host/port — override 가 우선 · 없으면 runtime sidecar ·
   //    port 가 없으면 현재 우주의 daemon endpoint 를 조회한다.
@@ -150,20 +165,22 @@ export function runNexusIosBind(opts: IosBindOpts = {}): IosBindResult {
   const tokenRaw = opts.noToken ? null : readToken();
   const token = tokenRaw ?? '';
 
-  // 3) UserDefaults write 3 회 (host · port · token)
+  // 3) UserDefaults write 3 회 (host · port · token) — 앱 컨테이너 도메인에
+  const domain = resolveDomain(bundleId);
   const lines: string[] = [];
-  const hostResult = defaultsWrite(spawnFn, bundleId, 'nexusHost', 'string', host, dryRun);
+  if (domain !== bundleId) lines.push(`  domain  앱 컨테이너 (${bundleId}) — 앱이 실행 중이면 끄고 다시 켜야 읽는다`);
+  const hostResult = defaultsWrite(spawnFn, domain, 'nexusHost', 'string', host, dryRun);
   lines.push(`  host  ${hostResult.ok ? '✓' : '✗'}  ${hostResult.cmd}`);
-  const portResult = defaultsWrite(spawnFn, bundleId, 'nexusPort', 'int', String(port), dryRun);
+  const portResult = defaultsWrite(spawnFn, domain, 'nexusPort', 'int', String(port), dryRun);
   lines.push(`  port  ${portResult.ok ? '✓' : '✗'}  ${portResult.cmd}`);
 
   let tokenInjected = false;
   let tokenLength = 0;
   if (!opts.noToken && token.length > 0) {
-    const tokenResult = defaultsWrite(spawnFn, bundleId, 'bearerToken', 'string', token, dryRun);
+    const tokenResult = defaultsWrite(spawnFn, domain, 'bearerToken', 'string', token, dryRun);
     tokenInjected = tokenResult.ok;
     tokenLength = token.length;
-    lines.push(`  token ${tokenResult.ok ? '✓' : '✗'}  xcrun simctl spawn booted defaults write ${bundleId} bearerToken <${tokenLength}-char redacted>`);
+    lines.push(`  token ${tokenResult.ok ? '✓' : '✗'}  xcrun simctl spawn booted defaults write ${domain} bearerToken <${tokenLength}-char redacted>`);
   } else if (opts.noToken) {
     lines.push(`  token —   (skipped · --no-token)`);
   } else {
@@ -173,19 +190,19 @@ export function runNexusIosBind(opts: IosBindOpts = {}): IosBindResult {
   let asciiKeyboardOk = true;
   if (opts.asciiKeyboard !== undefined) {
     const value = opts.asciiKeyboard ? 'true' : 'false';
-    const r = defaultsWrite(spawnFn, bundleId, 'asciiKeyboard', 'bool', value, dryRun);
+    const r = defaultsWrite(spawnFn, domain, 'asciiKeyboard', 'bool', value, dryRun);
     asciiKeyboardOk = r.ok;
     lines.push(`  ascii ${r.ok ? '✓' : '✗'}  ${r.cmd}`);
   }
 
   let seedPromptOk = true;
   if (opts.seedPrompt !== undefined) {
-    const r = defaultsWrite(spawnFn, bundleId, 'seedPrompt', 'string', opts.seedPrompt, dryRun);
+    const r = defaultsWrite(spawnFn, domain, 'seedPrompt', 'string', opts.seedPrompt, dryRun);
     seedPromptOk = r.ok;
     const preview = opts.seedPrompt.length > 24
       ? opts.seedPrompt.slice(0, 24) + '…'
       : opts.seedPrompt;
-    lines.push(`  seed  ${r.ok ? '✓' : '✗'}  xcrun simctl spawn booted defaults write ${bundleId} seedPrompt "${preview}" (${opts.seedPrompt.length} chars)`);
+    lines.push(`  seed  ${r.ok ? '✓' : '✗'}  xcrun simctl spawn booted defaults write ${domain} seedPrompt "${preview}" (${opts.seedPrompt.length} chars)`);
   }
 
   const allOk = hostResult.ok && portResult.ok

package/src/cli/phone-link.ts

@@ -0,0 +1,117 @@
+// `elanous phone link` — 휴대폰 앱을 이 Mac 의 넥서스에 «한 번에» 붙이는 연결 링크(⊕ 터미널 QR).
+// 대표 2026-09-30: 아이폰 첫 화면이 개발용 연결 카드라 복잡하다 → 앱은 링크 하나로 온보딩한다.
+// 링크 = `elanous://connect?host=…&port=…&tls=1|0&token=…` — 앱이 `.onOpenURL` 로 받아 저장하고 바로 연결한다.
+import { spawnSync } from 'node:child_process';
+import { debug } from '../debug/log.js';
+
+export interface PhoneEndpoint { host: string; port: number; tls: boolean }
+
+/** REST/PWA 기준 URL(예 `https://mbp.x.ts.net:31415/v1/`) → 앱이 쓰는 host·port·tls. 못 읽으면 null. */
+export function endpointFromBaseUrl(base: string): PhoneEndpoint | null {
+  let u: URL;
+  try { u = new URL(base); } catch { return null; }
+  if (u.protocol !== 'http:' && u.protocol !== 'https:') return null;
+  const tls = u.protocol === 'https:';
+  const port = u.port ? Number(u.port) : tls ? 443 : 80;
+  if (!u.hostname || !Number.isInteger(port) || port < 1 || port > 65_535) return null;
+  return { host: u.hostname, port, tls };
+}
+
+/** 앱이 여는 연결 링크. 토큰은 URL 인코딩한다. */
+export function buildPhoneConnectLink(ep: PhoneEndpoint, token: string): string {
+  const q = new URLSearchParams({ host: ep.host, port: String(ep.port), tls: ep.tls ? '1' : '0', token });
+  return `elanous://connect?${q.toString()}`;
+}
+
+/** 어느 주소를 휴대폰에 줄까 — 기본은 tailnet(휴대폰이 닿는다) · `local` 이면 루프백(같은 Mac 의 시뮬레이터). */
+export function pickPhoneBase(urls: { loopback: string; tailnet?: string }, opts: { local?: boolean } = {}): { base: string; kind: 'tailnet' | 'loopback' } {
+  if (!opts.local && urls.tailnet) return { base: urls.tailnet, kind: 'tailnet' };
+  return { base: urls.loopback, kind: 'loopback' };
+}
+
+/** USB 로 꽂힌 안드로이드에 링크를 «직접» 건넨다 — `adb reverse` 로 폰의 127.0.0.1:<port> 를 이 Mac 으로 잇고
+ *  `am start` 로 elanous://connect 를 연다. 토큰은 화면·로그에 찍지 않는다(adb 인자로만 간다). */
+export function androidDeliverySteps(link: string, port: number, serial?: string): string[][] {
+  const dev = serial ? ['-s', serial] : [];
+  return [
+    [...dev, 'reverse', `tcp:${port}`, `tcp:${port}`],
+    [...dev, 'shell', 'am', 'start', '-a', 'android.intent.action.VIEW', '-d', `'${link}'`, 'com.elanvitalai.elanous.android'],
+  ];
+}
+
+export interface RunPhoneLinkOpts {
+  local?: boolean;
+  /** USB 안드로이드에 adb 로 바로 건넨다(루프백 ⊕ adb reverse). 문자열이면 기기 serial. */
+  android?: boolean | string;
+  temp?: boolean;
+  ttl?: string;
+  qr?: boolean;
+  out?: { log: (s: string) => void; error: (s: string) => void };
+}
+
+export async function runPhoneLink(opts: RunPhoneLinkOpts = {}): Promise<number> {
+  const out = opts.out ?? { log: (s: string) => console.log(s), error: (s: string) => console.error(s) };
+  const { runNexusShow } = await import('./nexus-show.js');
+  const silent = { log: () => {}, error: () => {} };
+  const shown = await runNexusShow({ format: 'json', out: silent });
+  if (!shown.urls) {
+    out.error('✗ 넥서스가 떠 있지 않다 — 먼저 `elanous nexus run` (또는 `elanous nexus status` 로 확인).');
+    return 1;
+  }
+  const picked = pickPhoneBase(shown.urls.rest, { local: opts.local || !!opts.android });
+  const ep = endpointFromBaseUrl(picked.base);
+  if (!ep) { out.error(`✗ 넥서스 주소를 읽지 못했다: ${picked.base}`); return 1; }
+
+  let token: string;
+  let tokenNote: string;
+  if (opts.temp) {
+    const { issueTempToken, parseTtl } = await import('../auth/temp-tokens.js');
+    const issued = issueTempToken({ ttlMs: parseTtl(opts.ttl ?? '24h'), label: 'phone' });
+    token = issued.token;
+    tokenNote = `단기 토큰 · ${issued.expiresAt} 까지 · 폐기: elanous token revoke ${issued.id}`;
+  } else {
+    const { loadEnvelope } = await import('../auth/token-store.js');
+    const env = loadEnvelope();
+    if (!env?.active) { out.error('✗ 소유자 토큰이 없다 — `elanous token rotate` 로 한 번 만든 뒤 다시.'); return 1; }
+    token = env.active;
+    tokenNote = '소유자 토큰(설정의 Bearer 와 같다) · 바꾸려면 elanous token rotate';
+  }
+
+  const link = buildPhoneConnectLink(ep, token);
+  try { debug.log('phone.link', 'issued', { kind: picked.kind, tls: ep.tls, temp: !!opts.temp }); } catch { /* 관측 실패가 발급을 막지 않는다 */ }
+
+  if (opts.android) {
+    const serial = typeof opts.android === 'string' ? opts.android : undefined;
+    const lanEp = { ...ep, host: '127.0.0.1', tls: false };
+    const androidLink = buildPhoneConnectLink(lanEp, token);
+    for (const args of androidDeliverySteps(androidLink, lanEp.port, serial)) {
+      const r = spawnSync('adb', args, { encoding: 'utf8' });
+      if (r.status !== 0) {
+        // ⛔ 인자에 토큰이 있으므로 명령을 그대로 찍지 않는다 — 단계 이름과 adb 의 말만.
+        const why = (r.error?.message ?? r.stderr ?? '').trim().split('\n')[0] ?? '';
+        out.error(`✗ adb ${args.includes('reverse') ? 'reverse' : 'am start'} 실패 — ${why || `exit ${r.status}`}`);
+        out.error('  USB 디버깅 허용 · `adb devices` 에 기기가 «device» 로 보이는지 · 기기가 여럿이면 --android <serial>.');
+        return 1;
+      }
+    }
+    try { debug.log('phone.link', 'android-delivered', { port: lanEp.port, serial: !!serial, temp: !!opts.temp }); } catch { /* 관측 실패가 연결을 막지 않는다 */ }
+    out.log(`✓ 안드로이드 앱에 연결 링크를 건넸다 — 폰에서 앱이 열리고 바로 붙는다 (127.0.0.1:${lanEp.port} ⇄ 이 Mac · adb reverse).`);
+    out.error('⚠ USB 를 뽑으면 끊긴다. 계속 쓰려면 폰의 Tailscale 을 켜고 `elanous phone link` 의 QR 을 찍는다.');
+    out.error(`토큰: ${tokenNote}`);
+    return 0;
+  }
+
+  out.log('휴대폰에서 이 링크를 열면 앱이 바로 연결된다 (카메라로 QR · AirDrop · 메모 붙여넣기):');
+  out.log('');
+  out.log(link);
+  out.log('');
+  if (opts.qr !== false) {
+    const qr = spawnSync('qrencode', ['-t', 'ANSIUTF8', link], { encoding: 'utf8' });
+    if (qr.status === 0 && qr.stdout) out.log(qr.stdout);
+  }
+  out.error(`주소: ${ep.tls ? 'https' : 'http'}://${ep.host}:${ep.port} (${picked.kind === 'tailnet' ? 'tailnet — 휴대폰이 같은 tailnet 에 있어야 한다' : '루프백 — 이 Mac 의 시뮬레이터 전용'})`);
+  if (picked.kind === 'loopback' && !opts.local) out.error('⚠ tailnet 주소가 없다 — 실제 휴대폰에서는 닿지 않는다. `elanous nexus show` 로 tailnet 을 확인하라.');
+  out.error(`토큰: ${tokenNote}`);
+  out.error('⚠ 이 링크는 이 Mac 을 조작할 수 있는 토큰을 담는다 — 남에게 보내거나 공개 캡처에 싣지 않는다.');
+  return 0;
+}

package/src/cli/plugin-cli.ts

@@ -11,6 +11,7 @@ import { emitDecision } from '../live/detail-switch.js';
 import { OFFICIAL_INDEX_KEYS } from '../market/official-keys.js';
 import { installPlugin, listInstalledPlugins, PluginInstallError, removePlugin, type InstallEvent } from '../plugins/install/plugin-install.js';
 import { credentialStatus, setPluginCredentials } from '../plugins/install/plugin-credentials.js';
+import { makePlugin } from '../plugins/maker/plugin-maker.js';
 
 function keys(): ReadonlyArray<{ keyId: string; publicKey: string }> {
   const configPath = userConfigPath();
@@ -56,6 +57,32 @@ function safeCause(error: unknown): string {
 
 export function registerPluginCommands(program: Command): void {
   const plugin = program.command('plugin').description('Install and manage Elanous plugins');
+  plugin.command('make <request>').description('Write, validate and install a local graph plugin from one request')
+    .option('--name <slug>', 'Local plugin name')
+    .option('--dir <parent>', 'Parent directory (default: instance plugins-local)')
+    .option('--run', 'Run the installed graph')
+    .option('--input <json>', 'JSON input for --run')
+    .option('--json', 'Print the result as JSON')
+    .action(async (request: string, opts: { name?: string; dir?: string; run?: boolean; input?: string; json?: boolean }) => {
+      try {
+        const result = await makePlugin({ request, name: opts.name, parentDir: opts.dir, run: opts.run,
+          ...(opts.input === undefined ? {} : { input: JSON.parse(opts.input) as unknown }) });
+        if (opts.json) stdout.write(JSON.stringify(result) + '\n');
+        else {
+          console.log(`뼈대 ${result.timings.scaffold}ms · 작성 ${result.timings.write}ms`);
+          console.log(`검증 오류 ${result.errors.length} · ${result.timings.validate}ms${result.timings.repair === undefined ? '' : ` · 수리 ${result.timings.repair}ms`}`);
+          console.log(`설치 ${result.timings.install === 0 && result.status === 'failed' ? '미실행' : result.status === 'failed' && result.timings.run === undefined ? '실패' : '완료'} · ${result.timings.install}ms (${result.dir})`);
+          if (opts.run) console.log(`실행 ${result.runStatus ?? '미실행'} · ${result.timings.run ?? 0}ms`);
+          for (const error of result.errors) console.error(error);
+        }
+        if (result.status === 'failed') process.exitCode = 1;
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (opts.json) stdout.write(JSON.stringify({ status: 'failed', errors: [message] }) + '\n');
+        else console.error(`plugin make failed: ${message}`);
+        process.exitCode = 1;
+      }
+    });
   plugin.command('add <spec>').description('Install a local path, pinned git plugin or signed market plugin')
     .option('--yes', 'Accept requested capabilities')
     .option('--json', 'NDJSON progress events')

package/src/cli/private-ledger-commands.ts

@@ -0,0 +1,31 @@
+import { existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { Command } from 'commander';
+
+// Private local ledgers (decisions · directives) are absent from the public export;
+// JS-only distributions still register them. Kept out of src/index.ts so the `self`
+// block stays free of direct sink registration (see self-cli-sink-surface.test.ts).
+export function registerPrivateLedgerCommands(program: Command): void {
+  if (existsSync(resolve(import.meta.dir, 'decisions-cli.ts')) || existsSync(resolve(import.meta.dir, 'decisions-cli.js'))) {
+    program.command('decisions').description('대표 결정 로컬 원장').allowUnknownOption().allowExcessArguments(true)
+      .action(async (_opts: unknown, command: Command) => {
+        try { await (await import('../domains/standalone-log-sink.js')).registerStandaloneLogSink('decisions'); }
+        catch { /* Logging must not prevent recording a decision. */ }
+        const privateDecisionsModule: string = './decisions-cli.js';
+        const { registerDecisionsCommands } = await import(privateDecisionsModule) as { registerDecisionsCommands: (program: Command) => void };
+        const privateProgram = new Command();
+        registerDecisionsCommands(privateProgram);
+        await privateProgram.parseAsync(['decisions', ...command.args], { from: 'user' });
+      });
+  }
+  if (existsSync(resolve(import.meta.dir, 'directives-cli.ts')) || existsSync(resolve(import.meta.dir, 'directives-cli.js'))) {
+    program.command('directives').description('대표 지시 로컬 색인·검색').allowUnknownOption().allowExcessArguments(true)
+      .action(async (_opts: unknown, command: Command) => {
+        const privateDirectivesModule: string = './directives-cli.js';
+        const { registerDirectivesCommands } = await import(privateDirectivesModule) as { registerDirectivesCommands: (program: Command) => void };
+        const privateProgram = new Command();
+        registerDirectivesCommands(privateProgram);
+        await privateProgram.parseAsync(['directives', ...command.args], { from: 'user' });
+      });
+  }
+}

package/src/cli/release-cli.ts

@@ -22,7 +22,8 @@ import { effectiveInstanceRoot, releaseLedgerRoot } from '../instance/resolve.js
 import { getElanousConfigDirOverride } from '../elanous-config-dir.js';
 import { envLiteral } from '../platform/env-literal.js';
 import { userConfigPath } from '../user-config.js';
-import { addItem, devVersion, listChecklist, removeItem, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus } from '../release-loop/checklist.js';
+import { addItem, devVersion, listChecklist, removeItem, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus, type ChecklistDisposition } from '../release-loop/checklist.js';
+import { writeStdoutJson } from './stdout-json.js';
 
 export const DEFAULT_PUBLIC_REPO = 'ElanvitalAI/elanous';
 const SEMVER = /^\d+\.\d+\.\d+(?:-(?:rc|alpha|beta)\.\d+)?$/;
@@ -466,11 +467,11 @@ function checklistVersion(input: string | undefined, codenames: Record<string, s
   return resolved;
 }
 
-function checklistOutput(v: string, codenames: Record<string, string>, mode: 'list' | 'status', json?: boolean): void {
+async function checklistOutput(v: string, codenames: Record<string, string>, mode: 'list' | 'status', json?: boolean): Promise<void> {
   const data = listChecklist(v);
   const summary = summarizeChecklist(data);
   const result = { ...data, codename: codenames[v] ?? '', ...summary };
-  if (json) { console.log(JSON.stringify(result)); return; }
+  if (json) { await writeStdoutJson(`${JSON.stringify(result)}\n`); return; }
   console.log(`${v}${result.codename ? ` (${result.codename})` : ''} · 공개 ${data.released || '없음'} · 개발 ${data.dev}`);
   if (mode === 'list') {
     for (const item of data.items) console.log(`${({ green: '🟢', yellow: '🟡', red: '🔴', done: '✅' } as const)[item.status]} ${item.id} ${item.title}${item.owner ? ` · ${item.owner}` : ''}`);
@@ -492,26 +493,28 @@ export function registerReleaseCommands(program: Command): void {
     return { version: checklistVersion(opts.version, codenames), codenames, json: opts.json };
   };
   const withContext = (cmd: Command) => cmd.option('--version <v>', '판 또는 별칭').option('--json', '결과 JSON');
-  withContext(checklist.command('list').description('모든 칸')).action((_opts: unknown, cmd: Command) => {
+  withContext(checklist.command('list').description('모든 칸')).action(async (_opts: unknown, cmd: Command) => {
     const { version, codenames, json } = context(cmd);
-    checklistOutput(version, codenames, 'list', json);
+    await checklistOutput(version, codenames, 'list', json);
   });
-  withContext(checklist.command('status').description('상태 요약')).action((_opts: unknown, cmd: Command) => {
+  withContext(checklist.command('status').description('상태 요약')).action(async (_opts: unknown, cmd: Command) => {
     const { version, codenames, json } = context(cmd);
-    checklistOutput(version, codenames, 'status', json);
+    await checklistOutput(version, codenames, 'status', json);
   });
   withContext(checklist.command('add <id> <title>').description('칸 추가')).option('--owner <owner>', '담당').action((id: string, title: string, opts: { owner?: string }, cmd: Command) => {
     const { version, json } = context(cmd);
     const data = addItem(version, { id, title, ...(opts.owner !== undefined ? { owner: opts.owner } : {}) });
     if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 추가`);
   });
-  withContext(checklist.command('set <id>').description('칸 상태·근거·담당 갱신'))
+  withContext(checklist.command('set <id>').description('칸 상태·근거·담당·처분 갱신'))
     .option('--status <status>', 'green|yellow|red|done').option('--evidence <evidence>', '근거').option('--owner <owner>', '담당')
-    .action((id: string, opts: { status?: string; evidence?: string; owner?: string }, cmd: Command) => {
+    .option('--disposition <disposition>', 'move|known-issue|block')
+    .action((id: string, opts: { status?: string; evidence?: string; owner?: string; disposition?: string }, cmd: Command) => {
       const { version, json } = context(cmd);
       if (opts.status !== undefined && !['green', 'yellow', 'red', 'done'].includes(opts.status)) throw new Error(`잘못된 상태: ${opts.status}`);
-      if (opts.status === undefined && opts.evidence === undefined && opts.owner === undefined) throw new Error('갱신할 칸을 지정하라');
-      const data = setItem(version, id, { ...(opts.status !== undefined ? { status: opts.status as ChecklistStatus } : {}), ...(opts.evidence !== undefined ? { evidence: opts.evidence } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}) }, process.env.ELANOUS_TRACK || 'cli');
+      if (opts.disposition !== undefined && !['move', 'known-issue', 'block'].includes(opts.disposition)) throw new Error(`잘못된 처분: ${opts.disposition}`);
+      if (opts.status === undefined && opts.evidence === undefined && opts.owner === undefined && opts.disposition === undefined) throw new Error('갱신할 칸을 지정하라');
+      const data = setItem(version, id, { ...(opts.status !== undefined ? { status: opts.status as ChecklistStatus } : {}), ...(opts.evidence !== undefined ? { evidence: opts.evidence } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.disposition !== undefined ? { disposition: opts.disposition as ChecklistDisposition } : {}) }, process.env.ELANOUS_TRACK || 'cli');
       if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 갱신`);
     });
   withContext(checklist.command('rm <id>').description('칸 삭제')).action((id: string, _opts: unknown, cmd: Command) => {

package/src/domains/outbound-alert.ts

@@ -116,10 +116,10 @@ function deferOutbound(text: string, kind: string, origin?: MissionOrigin | null
     mkdirSync(dirname(path), { recursive: true });
     const rec = { ts: new Date().toISOString(), kind, text, ...(origin ? { origin } : {}) };
     appendFileSync(path, JSON.stringify(rec) + '\n');
-    console.log(`[outbound] 야간 무음(00:00~06:30 KST) — 보류 적재 (${kind})`);
+    console.error(`[outbound] 야간 무음(00:00~06:30 KST) — 보류 적재 (${kind})`);
     logSend('deferred', kind, { reason: 'quiet-hours' });  // 밀림 적재 관측
   } catch (e) {
-    console.log(`[outbound] 보류 적재 실패 — 콘솔 출력\n${text}`, e instanceof Error ? e.message : '');
+    console.error(`[outbound] 보류 적재 실패 — 콘솔 출력\n${text}`, e instanceof Error ? e.message : '');
   }
 }
 
@@ -238,7 +238,7 @@ export function sendOutbound(text: string, kind = 'alert', origin?: MissionOrigi
     return true; // 보류 = 수락 (호출측 재시도/에러 루프 방지)
   }
   const bypass = inQuietHours();
-  if (bypass) console.log('[outbound] 야간 무음 우회 — 최근 사용자 활동(깨어있음) → 즉시 발송 + 보류분 flush');
+  if (bypass) console.error('[outbound] 야간 무음 우회 — 최근 사용자 활동(깨어있음) → 즉시 발송 + 보류분 flush');
   try { flushDeferred(); } catch { /* fail-soft */ }
   // ★ 발송 관측(대표 지시) — 발송 시각·mode·밀림(burst) 판정을 logs.db 에. burst=최근 2분 5건+
   //   (몰려 나가는 중 = 밀림 의심). `elanous logs --category outbound.send` 로 실시간/밀림 구분.
@@ -275,7 +275,7 @@ export function classifyDaemonResponse(j: unknown): DaemonPathClass {
 function logDaemonPath(classification: DaemonPathClass, kind: string, extra: Record<string, unknown> = {}): void {
   try { debug.log('outbound.send', 'daemon-path', { classification, kind, ...extra }); } catch { /* fail-soft */ }
   if (classification === 'ok') return;
-  try { console.log(`[outbound] daemon-path ${classification}`); } catch { /* fail-soft */ }
+  try { console.error(`[outbound] daemon-path ${classification}`); } catch { /* fail-soft */ }
 }
 
 /** elanous `/v1/outbound` 우선 → 실패 시 텔레그램 직접. 성공 경로 반환(원장 중복방지용). */
@@ -334,6 +334,6 @@ function sendTelegramDirect(text: string, kind?: string): boolean {
     tok = tok || env.TELEGRAM_BOT_TOKEN || '';
     chat = chat || env.TELEGRAM_CHAT_ID || '';
   }
-  if (!tok || !chat) { console.log('[outbound] 토큰/chat 미설정 — 콘솔 출력\n' + text); return false; }
+  if (!tok || !chat) { console.error('[outbound] 토큰/chat 미설정 — 콘솔 출력\n' + text); return false; }
   return sendTelegramRaw(tok, chat, text);
 }