elanous 0.2.8 → 0.2.10

package/src/cli/pr-cli.ts

@@ -13,6 +13,7 @@ import { runGate as runChangedTypecheckGate } from '../../scripts/ci-typecheck-c
 import { runIsolationHardcodeGate } from '../../scripts/ci-isolation-hardcode-gate.js';
 import { androidFilesIn, runAndroidUnitTestGate } from '../../scripts/ci-android-unit-tests.js';
 import { iosFilesIn, runIosUnitTestGate } from '../../scripts/ci-ios-unit-tests.js';
+import { runPwaBuildGate } from '../../scripts/ci-pwa-build-gate.js';
 import { runMockModuleRestoreGate } from '../../scripts/ci-mock-module-restore-gate.js';
 import { runModelHardcodeGate } from '../../scripts/ci-model-hardcode-gate.js';
 import { runDaemonPortGate } from '../../scripts/ci-daemon-port-gate.js';
@@ -51,6 +52,7 @@ import {
   unionPaths,
 } from './pr-granularity.js';
 import { branchLineageSlug, findSiblingPrs } from './pr-lineage.js';
+import { parseReleaseNoteSection } from '../release-loop/release-note.js';
 
 export { branchLineageSlug, findSiblingPrs };
 
@@ -114,7 +116,10 @@ export interface PrLandDeps {
   runAndroidGate?: (out: { log: (message: string) => void; error: (message: string) => void }, changedFiles: readonly string[]) => boolean;
   /** iOS 시험 게이트 심(시험 주입용). */
   runIosGate?: (out: { log: (message: string) => void; error: (message: string) => void }, changedFiles: readonly string[]) => boolean;
+  runPwaGate?: (out: { log: (message: string) => void; error: (message: string) => void }, changedFiles: readonly string[]) => boolean;
   isInteractive?: () => boolean;
+  /** Clock for the recent-landings window (test seam · default Date.now). */
+  now?: () => number;
   requestConfirmation?: (opts: ConfirmOpts) => Promise<ConfirmResult>;
   overlapConfirmChannels?: ConfirmChannel[];
   overlapConfirmTimeoutMs?: number;
@@ -404,13 +409,14 @@ function gateVerdict(
   label: string,
   gate: (out: { log: (message: string) => void; error: (message: string) => void }) => boolean,
   out: { log: (message: string) => void; error: (message: string) => void },
+  failClosed = false,
 ): { ok: boolean; measured: boolean } {
   try {
     return { ok: gate(out), measured: true };
   } catch (error) {
     out.error(`⚠ ${label}: 게이트가 «못 쟀다» — ${error instanceof Error ? error.message : String(error)}`);
-    out.error(`⚠ ${label}: 「위반 없음」이 아니라 「검사 못 함」이다. 이 착지는 통과시키되 게이트를 고쳐라.`);
-    return { ok: true, measured: false };
+    out.error(`⚠ ${label}: 「위반 없음」이 아니라 「검사 못 함」이다. ${failClosed ? '착지를 막는다.' : '이 착지는 통과시키되 게이트를 고쳐라.'}`);
+    return { ok: !failClosed, measured: false };
   }
 }
 
@@ -424,6 +430,21 @@ function record(step: string, ok: boolean, extra: Record<string, unknown> = {}):
   debug.log('pr.land', 'step', { step, ok, ...extra });
 }
 
+export function nextMdWarning(body: string, changedFiles: readonly string[], out: { log: (message: string) => void }): void {
+  const section = body.split(/^## 릴리스 노트[ \t]*\r?$/m).at(-1)!;
+  const parsed = parseReleaseNoteSection(body);
+  const hasNote = parsed.fragment !== undefined || parsed.problems.length > 0;
+  const kind = parsed.fragment?.kind ?? (hasNote
+    ? /^[ \t]*- 종류:[ \t]*(feat|fix|security|internal)[ \t]*\r?$/m.exec(section.split(/^#{1,6}[ \t]+/m)[0]!)?.[1]
+    : undefined);
+  const reason = hasNote
+    ? (kind === 'feat' || kind === 'fix' || kind === 'security' ? `release-note:${kind}` : undefined)
+    : (changedFiles.some((file) => /^(?:apps\/pwa\/src\/|src\/cli\/|src\/dashboard\/)/.test(file)) ? 'user-facing-path' : undefined);
+  const warn = !!reason && !changedFiles.includes('release/next.md');
+  record('next-md', true, { warnOnly: true, reason: reason ?? (hasNote ? 'non-user-facing-note' : 'no-user-facing-path') });
+  if (warn) out.log('⚠ next-md: 사용자에게 보이는 변경인데 release/next.md 에 줄이 없습니다 — 공개 노트에서 빠집니다. 「- <kind> — <영어 한 문장>. Documentation: … Target: next.」 한 줄을 더하십시오.');
+}
+
 type PrRemoteCapability = 'github' | 'local-path' | 'no-remote' | 'other';
 
 function isLocalRemote(raw: string): boolean {
@@ -822,11 +843,12 @@ function emitRecentLandingRateAdvisory(
   cwd: string,
   commits: readonly { subject: string; authorEmail: string; committedAtMs: number }[] | null,
   out: { log: (message: string) => void },
+  now: () => number = Date.now,
 ): boolean {
   const windowMinutes = RECENT_LANDING_WINDOW_MINUTES;
   const authorEmail = currentAuthorEmail(run, cwd);
   if (!authorEmail || commits === null) {
-    const previous = commits === null ? undefined : previousLandingSummary(commits, Date.now());
+    const previous = commits === null ? undefined : previousLandingSummary(commits, now());
     record('recent-landing-rate', true, {
       recentCount: 0,
       windowMinutes,
@@ -836,7 +858,7 @@ function emitRecentLandingRateAdvisory(
     });
     return false;
   }
-  const nowMs = Date.now();
+  const nowMs = now();
   const recentCount = countRecentLandings(commits, {
     authorEmail,
     nowMs,
@@ -1077,6 +1099,7 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
     cwd,
     collectResolvedBaseLandings(run, cwd, DEFAULT_GRANULARITY_SINCE, base),
     out,
+    deps.now,
   );
 
   // ⛔ local-path / no-remote 는 gh 가 원리상 못 한다. 이미 아는 자리에서 멈춘다.
@@ -1319,6 +1342,7 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
   }
 
   const changedPaths = currentChangePaths(run, cwd, staged, base, out);
+  nextMdWarning(body ?? '', changedPaths, out);
   publicLeakWarning(changedPaths, deps.runPublicLeakGate ?? runPrLandPublicLeakGate, out);
   if (!exportLeakBlock(changedPaths, () => (deps.runExportLeakCheck ?? runPrLandExportLeakCheck)(changedPaths ?? [], cwd), opts.allowPublicLeak === true, out)) return 1;
   if (publicDocPaths(changedPaths, () => true).length > 0) {
@@ -1367,6 +1391,15 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
     out.log('✓ ios-gate: scripts/ci-ios-unit-tests.ts PASS — iOS 순수-로직 시험이 «실제로 돌았고» 실패 0.');
   }
 
+  // PWA 는 bun test/tsc 밖의 정적 번들이다. 측정 불가도 착지 불가로 판정한다.
+  const pwaGate = gateVerdict('pwa-gate', deps.runPwaGate
+    ? (o) => deps.runPwaGate!(o, changedPaths)
+    : (o) => runPwaBuildGate({ args: ['--changed-files', ...changedPaths], cwd, log: o.log, error: o.error }) === 0, out, true);
+  record('pwa-gate', pwaGate.ok && pwaGate.measured, { measured: pwaGate.measured });
+  if (!pwaGate.ok || !pwaGate.measured) {
+    out.error('✗ pwa-gate: scripts/ci-pwa-build-gate.ts blocked pr land — PWA 빌드 실패 또는 측정 불가.');
+    return 1;
+  }
 
   const overlapFound = emitLandingOverlapAdvisory(run, cwd, base, changedPaths, out);
   const siblingFound = emitSiblingPrAdvisory(

package/src/cli/pwa-stop.ts

@@ -23,6 +23,12 @@ import { probeTailscale, type TailscaleProbe } from '../nexus/onboarding/tailsca
 import { unregisterPwaInstance } from './pwa-registry.js';
 import { readNexusLock } from '../nexus/supervisor/lock.js';
 import { resolveNexusPwa, type NexusPwaResolution } from './nexus-show.js';
+import { debug } from '../debug/log.js';
+import { isPidAlive } from '../process/pid-liveness.js';
+import { execFileSync } from 'node:child_process';
+import { join as joinPath, resolve as resolvePath } from 'node:path';
+import { hostname } from 'node:os';
+import { safeReadLock } from '../telegram-lock.js';
 
 export interface PwaStopOpts {
   out?: { log: (s: string) => void; error: (s: string) => void };
@@ -45,7 +51,19 @@ export interface PwaStopOpts {
    *  from `~/.elanous/pwa-registry.json`. */
   unregisterFn?: (pid: number) => void;
   /** P4 — read the nexus lock to recover daemon pid. Test seam. */
-  readLockFn?: () => { pid: number } | null;
+  readLockFn?: () => { pid: number; host?: string; startedAt?: string } | null;
+  /** Isolated test daemon stop only: the project-local root to inspect for orphans. */
+  isolatedRoot?: string;
+  /** Test seams for signals, liveness and bounded polling. */
+  signalFn?: (pid: number, signal: 'SIGINT' | 'SIGTERM') => void;
+  pidAliveFn?: (pid: number) => boolean;
+  sleepFn?: (ms: number) => Promise<void>;
+  stopTimeoutMs?: number;
+  nowFn?: () => number;
+  /** Process table for isolated daemon identity checks and orphan discovery (pid, start time, argv). */
+  processTableFn?: () => Array<{ pid: number; startedAt: string; args: string }>;
+  /** Test seam for the raw `ps -eo pid=,lstart=,args=` response. */
+  psOutputFn?: () => string;
 }
 
 export type PwaStopShareUnmount =
@@ -57,7 +75,7 @@ export interface PwaStopResult {
   exitCode: number;
   /** True when the dev BG was actually killed (vs no-lock no-op). */
   devKilled: boolean;
-  /** True when the nexus stop signal was sent. */
+  /** True when the daemon stop completed (or the ordinary stop trigger succeeded). */
   nexusStopped: boolean;
   /** True when `tailscale serve reset` was issued (not skipped). */
   shareReset: boolean;
@@ -73,6 +91,126 @@ async function defaultNexusStop(): Promise<{ exitCode: number }> {
   return { exitCode: 0 };
 }
 
+function runningProcesses(output: string): Array<{ pid: number; startedAt: string; args: string }> {
+  const lines = output.split('\n');
+  return lines.flatMap(line => {
+    const match = line.match(/^\s*(\d+)\s+((?:\S+\s+){4}\d{4})\s+(.+)$/);
+    return match ? [{ pid: Number(match[1]), startedAt: match[2]!, args: match[3]! }] : [];
+  });
+}
+
+type ProcessRow = ReturnType<typeof runningProcesses>[number];
+
+function isolatedDaemons(root: string, table: ProcessRow[]): ProcessRow[] {
+  return table.filter(row => {
+    if (!/^(?:(?:\S*\/)?(?:bun|node)\s+)?(?:\S*\/)?elanous(?:\.(?:mjs|cjs))?\s/.test(row.args)
+        || !/(?:^|\s)nexus\s+run(?:\s|$)/.test(row.args)) return false;
+    const roots = ['--config-dir', '--test-state-dir'].flatMap(flag => {
+      const value = row.args.match(new RegExp(`(?:^|\\s)${flag}(?:=|\\s+)(?:"([^"]+)"|'([^']+)'|(\\S+))`));
+      const arg = value?.[1] ?? value?.[2] ?? value?.[3];
+      return arg === undefined ? [] : [resolvePath(arg)];
+    });
+    return roots.length > 0 && roots.every(value => value === resolvePath(root));
+  });
+}
+
+async function stopIsolatedNexus(
+  opts: PwaStopOpts,
+  out: NonNullable<PwaStopOpts['out']>,
+  lock: ReturnType<NonNullable<PwaStopOpts['readLockFn']>>,
+): Promise<{ exitCode: number }> {
+  const root = opts.isolatedRoot!;
+  const inspect = (): ProcessRow[] => isolatedDaemons(root, opts.processTableFn
+    ? opts.processTableFn()
+    : runningProcesses((opts.psOutputFn ?? (() => execFileSync('ps', ['-eo', 'pid=,lstart=,args='], { encoding: 'utf8' })))()));
+  const reportOrphans = (): { exitCode: number } => {
+    const orphans = inspect();
+    debug.log('nexus.stop', 'orphans', { pid: 0, waitedMs: 0, count: orphans.length });
+    if (orphans.length === 0) {
+      out.log('  nothing to stop (no lock)');
+      return { exitCode: 0 };
+    }
+    for (const row of orphans) out.error(`  orphan pid ${row.pid} · started ${row.startedAt} · root ${root}`);
+    out.error(`  cleanup: ${orphans.map(row => `kill ${row.pid}`).join(' ; ')}`);
+    return { exitCode: 1 };
+  };
+  if (!lock) {
+    try { return reportOrphans(); }
+    catch (error) {
+      out.error(`  cannot inspect nexus processes: ${error instanceof Error ? error.message : String(error)}`);
+      return { exitCode: 1 };
+    }
+  }
+  const pid = lock.pid;
+  if (lock.host && lock.host !== hostname()) {
+    out.error(`  nexus lock held by remote host ${lock.host}; cannot stop from here`);
+    return { exitCode: 1 };
+  }
+  if (!Number.isSafeInteger(pid) || pid <= 0) {
+    out.error(`  invalid nexus lock pid ${pid}`);
+    return { exitCode: 1 };
+  }
+  const signal = opts.signalFn ?? ((target: number, name: 'SIGINT' | 'SIGTERM') => process.kill(target, name));
+  const alive = opts.pidAliveFn ?? isPidAlive;
+  const sleep = opts.sleepFn ?? ((ms: number) => new Promise<void>(resolve => setTimeout(resolve, ms)));
+  const timeout = opts.stopTimeoutMs ?? 10_000;
+  const now = opts.nowFn ?? Date.now;
+  let waitedMs = 0;
+  const wait = async (): Promise<boolean> => {
+    const start = now();
+    let elapsed = 0;
+    while (alive(pid) && elapsed < timeout) {
+      const interval = Math.min(100, timeout - elapsed);
+      await sleep(interval);
+      elapsed = Math.max(elapsed + interval, now() - start);
+    }
+    waitedMs += elapsed;
+    debug.log('nexus.stop', 'wait', { pid, waitedMs, count: 1 });
+    return !alive(pid);
+  };
+  try {
+    if (!alive(pid)) return reportOrphans();
+    const identity = inspect().find(row => row.pid === pid);
+    if (!identity) {
+      out.error(`  pid ${pid} does not match this tree's isolated nexus daemon; no signal sent`);
+      return { exitCode: 1 };
+    }
+    if (lock.startedAt) {
+      const processStart = Date.parse(identity.startedAt);
+      const lockStart = Date.parse(lock.startedAt);
+      if (!Number.isFinite(processStart) || !Number.isFinite(lockStart) || processStart > lockStart + 1_000) {
+        out.error(`  pid ${pid} start time cannot match the nexus lock; no signal sent`);
+        return { exitCode: 1 };
+      }
+    }
+    // Recheck the argv and start time immediately before each signal: a stale
+    // lock or a PID recycled during the wait must never target another process.
+    const stillOwned = (): boolean => inspect().some(row => row.pid === pid && row.startedAt === identity.startedAt && row.args === identity.args);
+    if (!stillOwned()) {
+      out.error(`  pid ${pid} no longer matches the locked daemon; no signal sent`);
+      return { exitCode: 1 };
+    }
+    signal(pid, 'SIGINT');
+    out.log(`  SIGINT sent to pid ${pid}`);
+    if (await wait()) return { exitCode: 0 };
+    if (!alive(pid)) return { exitCode: 0 };
+    if (!stillOwned()) {
+      out.error(`  pid ${pid} no longer matches the locked daemon; SIGTERM not sent`);
+      return { exitCode: 1 };
+    }
+    signal(pid, 'SIGTERM');
+    debug.log('nexus.stop', 'escalated', { pid, waitedMs, count: 1 });
+    if (await wait()) return { exitCode: 0 };
+  } catch (error) {
+    out.error(`  pid ${pid} 이 멈추지 않았다: ${error instanceof Error ? error.message : String(error)}`);
+    debug.log('nexus.stop', 'stuck', { pid, waitedMs, count: 1 });
+    return { exitCode: 1 };
+  }
+  out.error(`  pid ${pid} 이 멈추지 않았다`);
+  debug.log('nexus.stop', 'stuck', { pid, waitedMs, count: 1 });
+  return { exitCode: 1 };
+}
+
 async function defaultShareReset(binary: string, port: number): Promise<{ exitCode: number }> {
   const r = await unmountTailscaleServe({
     mode: { kind: 'tls-tcp', port },
@@ -111,11 +249,12 @@ export async function runPwaStop(opts: PwaStopOpts = {}): Promise<PwaStopResult>
   const out = opts.out ?? console;
   const portResolution = resolveShareUnmountPort(opts);
   const devStopFn = opts.devStopFn ?? (() => runPwaDevStop({ out }));
-  const nexusStopFn = opts.nexusStopFn ?? defaultNexusStop;
   const shareProbeFn = opts.shareProbeFn ?? (() => probeTailscale());
   const shareResetFn = opts.shareResetFn ?? defaultShareReset;
-  const unregisterFn = opts.unregisterFn ?? unregisterPwaInstance;
-  const readLockFn = opts.readLockFn ?? (() => readNexusLock());
+  const unregisterFn = opts.unregisterFn ?? (opts.isolatedRoot ? undefined : unregisterPwaInstance);
+  const readLockFn = opts.readLockFn ?? (opts.isolatedRoot
+    ? () => safeReadLock(joinPath(opts.isolatedRoot!, 'nexus', '.lock'))
+    : () => readNexusLock());
 
   out.log('elanous nexus pwa stop: cascade');
 
@@ -157,19 +296,30 @@ export async function runPwaStop(opts: PwaStopOpts = {}): Promise<PwaStopResult>
   }
 
   // P4 registry unregister — read the lock for the daemon pid before
-  // we send SIGINT (the lock is removed during stop). Best-effort: if
-  // the lock is already gone or pid missing, just skip.
+  // we send SIGINT (the lock is removed during stop). The isolated stop
+  // never writes to the production registry. Missing lock/pid is best-effort.
   let unregisteredPid: number | undefined;
+  let lock: ReturnType<typeof readLockFn> = null;
+  try { lock = readLockFn(); }
+  catch (error) {
+    if (opts.isolatedRoot) {
+      out.error(`  cannot read nexus lock: ${error instanceof Error ? error.message : String(error)}`);
+      return { exitCode: 1, devKilled: false, nexusStopped: false, shareReset, shareUnmount };
+    }
+  }
   try {
-    const lock = readLockFn();
-    if (lock && typeof lock.pid === 'number') {
-      unregisteredPid = lock.pid;
-      unregisterFn(lock.pid);
+    if (lock && typeof lock.pid === 'number' && (!opts.isolatedRoot || !lock.host || lock.host === hostname())) {
+      if (unregisterFn) {
+        unregisterFn(lock.pid);
+        unregisteredPid = lock.pid;
+      }
     }
-  } catch { /* lock read or unregister failure — non-fatal */ }
+  } catch { /* registry unregister failure — non-fatal */ }
 
   const devR = await devStopFn();
-  const nexusR = await nexusStopFn();
+  const nexusR = await (opts.nexusStopFn ?? (opts.isolatedRoot
+    ? () => stopIsolatedNexus(opts, out, lock)
+    : defaultNexusStop))();
   const exitCode = devR.exitCode === 0 && nexusR.exitCode === 0 ? 0 : 1;
   return {
     exitCode,

package/src/cli/pwa-test.ts

@@ -720,8 +720,11 @@ async function runStop(
     out,
     shareProbeFn: async () => ({ installed: false, alive: false }),
     shareResetFn: async () => ({ exitCode: 0 }),
+    isolatedRoot: layout.stateDir,
   });
 
+  // Keep the record when the daemon did not stop; status must not imply a clean shutdown.
+  if (stopRes.exitCode !== 0) return { exitCode: stopRes.exitCode };
   // Cleanup state files — leave logs/ for post-mortem.
   const stateFile = joinPath(layout.stateDir, 'test-state.json');
   if (existsSync(stateFile)) {

package/src/cli/release-cli.ts

@@ -23,8 +23,11 @@ import { effectiveInstanceRoot, releaseLedgerRoot } from '../instance/resolve.js
 import { getElanousConfigDirOverride } from '../elanous-config-dir.js';
 import { envLiteral } from '../platform/env-literal.js';
 import { userConfigPath } from '../user-config.js';
-import { addItem, devVersion, listChecklist, removeItem, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus, type ChecklistDisposition, type ChecklistKind } from '../release-loop/checklist.js';
+import { addItem, claimItem, decodeClaimHistoryEntry, devVersion, listChecklist, ownerMatches, parseOwner, parityGap, removeItem, seedFromRoadmap, setItem, summarizeChecklist, type ChecklistStatus, type ChecklistDisposition, type ChecklistKind } from '../release-loop/checklist.js';
+import * as features from '../release-loop/feature-store.js';
+import { formatSchedule, getSchedule, listSchedules, setSchedule } from '../release-loop/release-schedule.js';
 import { writeStdoutJson } from './stdout-json.js';
+import { CliUserError } from './cli-user-error.js';
 import { runUnattendedRelease, type UnattendedReleaseDeps } from '../../scripts/release-loop/unattended-release.js';
 import { releaseReadiness } from '../../scripts/release-loop/release-readiness.js';
 import { runReleaseIfReady } from './release-run-if-ready.js';
@@ -467,15 +470,23 @@ function checklistCodenames(): Record<string, string> {
 function checklistVersion(input: string | undefined, codenames: Record<string, string>): string {
   const v = input ?? devVersion().replace(/-dev\.\d+$/, '');
   const resolved = isReleaseVersion(v) ? v : Object.entries(codenames).find(([, name]) => name === v)?.[0] ?? v;
-  if (!isReleaseVersion(resolved)) throw new Error(`체크리스트 판 또는 별칭이 아니다: ${v}`);
+  if (!isReleaseVersion(resolved)) throw new CliUserError(`체크리스트 판 또는 별칭이 아니다: ${v}`);
   return resolved;
 }
 
-async function checklistOutput(v: string, codenames: Record<string, string>, mode: 'list' | 'status', json?: boolean): Promise<void> {
-  const data = listChecklist(v);
+async function checklistOutput(v: string, codenames: Record<string, string>, mode: 'list' | 'status', json?: boolean, owner?: string): Promise<void> {
+  if (owner !== undefined) parseOwner(owner);
+  const snapshot = listChecklist(v);
+  const data = owner === undefined ? snapshot : { ...snapshot, items: snapshot.items.filter((item) => ownerMatches(item.owner, owner)) };
   const summary = summarizeChecklist(data);
-  const result = { ...data, codename: codenames[v] ?? '', ...summary };
+  const parity = data.items.flatMap((item) => {
+    const why = item.kind === 'screen' ? parityGap(item.evidence) : null;
+    return why ? [{ id: item.id, why }] : [];
+  });
+  const result = { ...data, codename: codenames[v] ?? '', ...summary, parity };
+  for (const { id, why } of parity) debug.log('release.checklist', 'parity-warning', { version: v, id, why });
   if (json) { await writeStdoutJson(`${JSON.stringify(result)}\n`); return; }
+  console.log(`⚠ 짝 경고 ${parity.length}: ${parity.map(({ id }) => id).join(', ') || '없음'}`);
   console.log(`${v}${result.codename ? ` (${result.codename})` : ''} · 공개 ${data.released || '없음'} · 개발 ${data.dev}`);
   if (mode === 'list') {
     for (const item of data.items) console.log(`${({ green: '🟢', yellow: '🟡', red: '🔴', done: '✅' } as const)[item.status]} ${item.id} ${item.title}${item.owner ? ` · ${item.owner}` : ''}`);
@@ -488,24 +499,44 @@ async function checklistOutput(v: string, codenames: Record<string, string>, mod
 
 export function registerReleaseCommands(program: Command, releaseRunDeps: UnattendedReleaseDeps = {}): void {
   const release = program.command('release').description('공개 배포 한 판 — prepare(로컬) → publish(--yes) → verify (docs/manual/MANUAL-versioning-and-release-2026-09-25.md)');
+  const schedule = release.command('schedule').description('판별 컷·착지 마감 조회·갱신');
+  const scheduleLedgerRoot = () => releaseRunDeps.ledgerRoot ?? releaseLedgerRoot();
+  schedule.command('list').option('--json', '결과 JSON').action((o: { json?: boolean }) => {
+    const rows = listSchedules(scheduleLedgerRoot());
+    if (o.json) console.log(JSON.stringify(rows));
+    else for (const row of rows) console.log(formatSchedule(row));
+  });
+  schedule.command('show').requiredOption('--version <v>', '조회할 판').option('--json', '결과 JSON')
+    .action((o: { version: string; json?: boolean }) => {
+      const row = getSchedule(o.version, scheduleLedgerRoot());
+      if (!row) throw new CliUserError(`없는 판 일정: ${o.version}`, '판 일정 등록: elanous release schedule set --version <v> --cut-at <iso> --land-by <iso>');
+      if (o.json) console.log(JSON.stringify(row)); else console.log(formatSchedule(row));
+    });
+  schedule.command('set').requiredOption('--version <v>', '갱신할 판')
+    .option('--cut-at <iso>', '오프셋 포함 컷 시각').option('--land-by <iso>', '오프셋 포함 착지 마감').option('--json', '결과 JSON')
+    .action((o: { version: string; cutAt?: string; landBy?: string; json?: boolean }) => {
+      if (o.cutAt === undefined && o.landBy === undefined) throw new CliUserError('갱신할 시각을 지정하라', '--cut-at <iso> 또는 --land-by <iso>');
+      const row = setSchedule(o.version, { cutAt: o.cutAt, landBy: o.landBy }, process.env.ELANOUS_TRACK || 'cli', scheduleLedgerRoot());
+      if (o.json) console.log(JSON.stringify(row)); else console.log(formatSchedule(row));
+    });
   const checklist = release.command('checklist').description('판별 확인표 조회·갱신')
     .option('--version <v>', '판 또는 별칭(기본: package.json 의 개발판에서 -dev.N 제거)')
     .option('--json', '결과 JSON');
   const context = (cmd: Command) => {
-    const opts = { ...(cmd.parent?.opts() as { version?: string; json?: boolean }), ...(cmd.opts() as { version?: string; json?: boolean }) };
+    const opts = { ...(cmd.parent?.parent?.opts() as { version?: string; json?: boolean }), ...(cmd.parent?.opts() as { version?: string; json?: boolean }), ...(cmd.opts() as { version?: string; json?: boolean }) };
     const codenames = checklistCodenames();
     return { version: checklistVersion(opts.version, codenames), codenames, json: opts.json };
   };
   const withContext = (cmd: Command) => cmd.option('--version <v>', '판 또는 별칭').option('--json', '결과 JSON');
-  withContext(checklist.command('list').description('모든 칸')).action(async (_opts: unknown, cmd: Command) => {
+  withContext(checklist.command('list').description('모든 칸')).option('--owner <owner>', '자리 또는 하위 자리로 거르기').action(async (opts: { owner?: string }, cmd: Command) => {
     const { version, codenames, json } = context(cmd);
-    await checklistOutput(version, codenames, 'list', json);
+    await checklistOutput(version, codenames, 'list', json, opts.owner);
   });
-  withContext(checklist.command('status').description('상태 요약')).action(async (_opts: unknown, cmd: Command) => {
+  withContext(checklist.command('status').description('상태 요약')).option('--owner <owner>', '자리 또는 하위 자리로 거르기').action(async (opts: { owner?: string }, cmd: Command) => {
     const { version, codenames, json } = context(cmd);
-    await checklistOutput(version, codenames, 'status', json);
+    await checklistOutput(version, codenames, 'status', json, opts.owner);
   });
-  withContext(checklist.command('add <id> <title>').description('칸 추가')).option('--owner <owner>', '담당').option('--kind <kind>', 'screen = 다섯 화면 짝 칸')
+  withContext(checklist.command('add <id> <title>').description('칸 추가')).option('--owner <owner>', '담당').option('--kind <kind>', 'screen = 다섯 화면 짝 칸 · 근거에 짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 … 한 줄')
     .action((id: string, title: string, opts: { owner?: string; kind?: string }, cmd: Command) => {
     const { version, json } = context(cmd);
     const data = addItem(version, { id, title, ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}) });
@@ -513,15 +544,28 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
   });
   withContext(checklist.command('set <id>').description('칸 상태·근거·담당·처분 갱신'))
     .option('--status <status>', 'green|yellow|red|done').option('--evidence <evidence>', '근거').option('--owner <owner>', '담당')
-    .option('--disposition <disposition>', 'move|known-issue|block').option('--kind <kind>', 'screen = 다섯 화면 짝 칸')
+    .option('--disposition <disposition>', 'move|known-issue|block').option('--kind <kind>', 'screen = 다섯 화면 짝 칸 · 근거에 짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 … 한 줄')
     .action((id: string, opts: { status?: string; evidence?: string; owner?: string; disposition?: string; kind?: string }, cmd: Command) => {
       const { version, json } = context(cmd);
-      if (opts.status !== undefined && !['green', 'yellow', 'red', 'done'].includes(opts.status)) throw new Error(`잘못된 상태: ${opts.status}`);
-      if (opts.disposition !== undefined && !['move', 'known-issue', 'block'].includes(opts.disposition)) throw new Error(`잘못된 처분: ${opts.disposition}`);
-      if (opts.status === undefined && opts.evidence === undefined && opts.owner === undefined && opts.disposition === undefined && opts.kind === undefined) throw new Error('갱신할 칸을 지정하라');
+      if (opts.status !== undefined && !['green', 'yellow', 'red', 'done'].includes(opts.status)) throw new CliUserError(`잘못된 상태: ${opts.status}`, 'green|yellow|red|done');
+      if (opts.disposition !== undefined && !['move', 'known-issue', 'block'].includes(opts.disposition)) throw new CliUserError(`잘못된 처분: ${opts.disposition}`, 'move|known-issue|block');
+      if (opts.status === undefined && opts.evidence === undefined && opts.owner === undefined && opts.disposition === undefined && opts.kind === undefined) throw new CliUserError('갱신할 칸을 지정하라', '--status · --evidence · --owner · --disposition · --kind 중 하나');
       const data = setItem(version, id, { ...(opts.status !== undefined ? { status: opts.status as ChecklistStatus } : {}), ...(opts.evidence !== undefined ? { evidence: opts.evidence } : {}), ...(opts.owner !== undefined ? { owner: opts.owner } : {}), ...(opts.disposition !== undefined ? { disposition: opts.disposition as ChecklistDisposition } : {}), ...(opts.kind !== undefined ? { kind: opts.kind as ChecklistKind } : {}) }, process.env.ELANOUS_TRACK || 'cli');
+      const item = data.items.find((entry) => entry.id === id);
+      const why = item?.kind === 'screen' && item.status === 'green' ? parityGap(item.evidence) : null;
+      if (why) {
+        console.error(`⚠ 짝: ${why} — 근거에 «짝: PWA … · 데스크톱 … · 폴드 … · 아이폰 … · 아이패드 …» 한 줄`);
+        debug.log('release.checklist', 'parity-warning', { version, id, why });
+      }
       if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 갱신`);
     });
+  withContext(checklist.command('claim <id>').description('칸의 단일 주인을 잡는다'))
+    .requiredOption('--by <owner>', '잡을 자리 또는 하위 자리').option('--force', '기존 주인에서 강제로 바꾼다')
+    .action((id: string, opts: { by: string; force?: boolean }, cmd: Command) => {
+      const { version, json } = context(cmd);
+      const data = claimItem(version, id, opts.by, { force: opts.force });
+      if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${id} 주인 ${opts.by}`);
+    });
   withContext(checklist.command('rm <id>').description('칸 삭제')).action((id: string, _opts: unknown, cmd: Command) => {
     const { version, json } = context(cmd);
     const data = removeItem(version, id, process.env.ELANOUS_TRACK || 'cli');
@@ -533,6 +577,45 @@ export function registerReleaseCommands(program: Command, releaseRunDeps: Unatte
       const data = seedFromRoadmap(version, readFileSync(opts.from, 'utf8'));
       if (json) console.log(JSON.stringify(data)); else console.log(`✅ ${version} ${data.items.length}칸`);
     });
+  const actor = () => process.env.ELANOUS_TRACK || 'cli';
+  withContext(checklist.command('move <id>').description('칸을 한 트랜잭션으로 다른 판에 옮긴다'))
+    .requiredOption('--from <v>', '현재 판').requiredOption('--to <v>', '새 판')
+    .action((id: string, opts: { from: string; to: string }, cmd: Command) => {
+      const { codenames, json } = context(cmd);
+      const from = checklistVersion(opts.from, codenames), to = checklistVersion(opts.to, codenames);
+      features.move(id, from, to, actor());
+      if (json) console.log(JSON.stringify(listChecklist(to))); else console.log(`✅ ${id} ${from} → ${to}`);
+    });
+  withContext(checklist.command('retitle <id> <title>').description('칸 제목 수정')).action((id: string, title: string, _opts: unknown, cmd: Command) => {
+    const { version, json } = context(cmd);
+    const snapshot = listChecklist(version);
+    features.retitle(id, title, actor(), snapshot.released, snapshot.dev);
+    if (json) console.log(JSON.stringify(listChecklist(version))); else console.log(`✅ ${id} 제목 수정`);
+  });
+  const evidence = checklist.command('evidence').description('칸의 PR·커밋 근거');
+  withContext(evidence.command('add <id> <ref>').description('근거 참조 추가')).action((id: string, ref: string, _opts: unknown, cmd: Command) => {
+    const { version, json } = context(cmd);
+    const snapshot = listChecklist(version);
+    features.evidenceAdd(id, version, ref, actor(), snapshot.released, snapshot.dev);
+    if (json) console.log(JSON.stringify(features.history(id).map(decodeClaimHistoryEntry))); else console.log(`✅ ${id} 근거 ${ref}`);
+  });
+  withContext(checklist.command('history <id>').description('칸의 판 이동·변경 이력')).action((id: string, _opts: unknown, cmd: Command) => {
+    const { json } = context(cmd);
+    const rows = features.history(id).map(decodeClaimHistoryEntry);
+    if (json) { console.log(JSON.stringify(rows)); return; }
+    const info = features.details(id);
+    if (info) {
+      console.log(`${info.id} · ${info.title} · 담당 ${info.owner ?? '-'} · 종류 ${info.kind ?? '-'} · 처음 ${info.createdAt}`);
+      for (const ev of info.evidence) console.log(`  근거 ${ev.version} ${ev.ref} (${ev.at} ${ev.by})`);
+    }
+    for (const row of rows) console.log(`${row.at} ${row.version} ${row.by} ${row.field}: ${JSON.stringify(row.from)} → ${JSON.stringify(row.to)}`);
+  });
+  withContext(checklist.command('export').description('SQLite 에서 checklist.json 스냅샷 생성')).action((_opts: unknown, cmd: Command) => {
+    const { version, json } = context(cmd);
+    const snapshot = listChecklist(version);
+    features.exportJson(version, snapshot.released, snapshot.dev);
+    if (json) console.log(JSON.stringify(listChecklist(version))); else console.log(`✅ ${version} checklist.json 내보냄`);
+  });
   release.command('prepare')
     .description('깨끗한 원본 → 공개본 → 공개 저장소 이력 위 커밋 → PWA → 묶음·체크섬 → 로컬 끝까지 (네트워크 쓰기 없음)')
     .requiredOption('--version <x.y.z>', 'package.json 과 같은 버전(먼저 버전 PR 을 착지)')

package/src/cli/self-update.ts

@@ -343,6 +343,14 @@ function pruneReleaseVersions(plan: { current: string; previous: string; keep: n
   return { removed, kept };
 }
 
+/** The build identity of an install.json — version, version folder and commit; empty when it cannot be read. */
+function installedBuild(metadata: unknown): string {
+  if (typeof metadata !== 'object' || metadata === null) return '';
+  const { version, versionDir, commit } = metadata as { version?: unknown; versionDir?: unknown; commit?: unknown };
+  if (typeof version !== 'string' || !version || typeof versionDir !== 'string' || !versionDir) return '';
+  return JSON.stringify([version, versionDir, typeof commit === 'string' ? commit : '']);
+}
+
 /** A release update never packs the checkout: the downloaded installer verifies its own release tarball. */
 export async function runReleaseUpdate(options: ReleaseUpdateOptions = {}, deps: ReleaseUpdateDeps = {}): Promise<SelfUpdateResult> {
   const out = deps.out ?? console;
@@ -390,8 +398,10 @@ export async function runReleaseUpdate(options: ReleaseUpdateOptions = {}, deps:
     return fail(1, `설치기 다운로드 실패 (${url}): ${String(error)}`);
   }
   let previous = '';
+  let previousBuild = '';
   try {
     const metadata: unknown = JSON.parse(readFileSync(join(prefix, 'install.json'), 'utf8'));
+    previousBuild = installedBuild(metadata);
     if (typeof metadata === 'object' && metadata !== null && 'versionDir' in metadata && typeof metadata.versionDir === 'string') {
       const dir = metadata.versionDir;
       if (/^versions\/[a-zA-Z0-9._-]+$/.test(dir) && !dir.includes('..')) previous = basename(dir);
@@ -421,6 +431,10 @@ export async function runReleaseUpdate(options: ReleaseUpdateOptions = {}, deps:
       prune = { removed: [], kept: [], skipped: `정리 실패: ${String(error)}` };
     }
     if (!options.restart) return finish({ exitCode: 0, installedVersion, decision: null, restarted: false, prune, reason: '--restart 없음: 재시작하지 않음' });
+    // REL6: the same build again (version · folder · commit unchanged) leaves the running daemon as it is.
+    if (previousBuild && previousBuild === installedBuild(metadata)) {
+      return finish({ exitCode: 0, installedVersion, decision: null, restarted: false, prune, reason: `already at ${installedVersion} · restart skipped` });
+    }
     const os = deps.os ?? platform();
     const command = os === 'darwin' ? 'launchctl' : os === 'linux' ? 'systemctl' : null;
     if (!command) return finish({ exitCode: 1, installedVersion, decision: null, restarted: false, prune, reason: `지원하지 않는 플랫폼: ${os}` });

package/src/cli/storyboard-cli.ts

@@ -0,0 +1,37 @@
+import { readFileSync, writeFileSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { parse } from 'yaml';
+import { debug } from '../debug/log.js';
+import { files, lint, render, STORYBOARD_ROOT, type Storyboard } from '../storyboard/storyboard.js';
+
+export function runStoryboard(cmd: 'lint' | 'render', args: string[], json = false): number {
+  const reports: Array<{ file: string; errors: string[]; warnings: string[] }> = [];
+  let errorCount = 0, warningCount = 0;
+  for (const f of files(args)) {
+    const file = relative(STORYBOARD_ROOT, f);
+    let sb: Storyboard | undefined;
+    let errors: string[], warnings: string[];
+    try {
+      sb = parse(readFileSync(f, 'utf8')) as Storyboard;
+      ({ errors, warnings } = lint(sb, file));
+    } catch (cause) {
+      errors = [cause instanceof Error ? cause.message : String(cause)];
+      warnings = [];
+    }
+    reports.push({ file, errors, warnings });
+    errorCount += errors.length;
+    warningCount += warnings.length;
+    if (json) continue;
+    for (const e of errors) console.log(`✗ ${file}: ${e}`);
+    for (const w of warnings) console.log(`⚠ ${file}: ${w}`);
+    if (errors.length || !sb) continue;
+    if (cmd === 'render') {
+      const out = join(STORYBOARD_ROOT, 'docs', 'marketing', `STORYBOARD-${sb.id}-v${sb.version}.md`);
+      writeFileSync(out, render(sb, file) + '\n');
+      console.log(`✓ ${file} → ${relative(STORYBOARD_ROOT, out)}`);
+    } else console.log(`✓ ${file} · v${sb.version} · ${sb.status} · ${sb.kind === 'site' ? `사이트 ${sb.sites?.length ?? 0}` : `샷 ${sb.shots.length}`}`);
+  }
+  if (cmd === 'lint') debug.log('storyboard.lint', 'checked', { files: reports.length, errorCount, warningCount });
+  if (json) console.log(JSON.stringify({ files: reports, errorCount, warningCount }));
+  return errorCount ? 1 : 0;
+}

package/src/cli/test-state-dir-flag.ts

@@ -71,7 +71,8 @@ export function applyTestStateDirFlagFromArgv(): string | undefined {
  *  뒤에만 있어 사람이 부를 입구가 없었고, 그래서 문서 174곳에 수동 주문이 화석으로 남았다.
  *
  *  하는 일: nexus state root ⊕ ELANOUS_STATE_DIR ⊕ config-dir 을 **한 뿌리로** 세우고,
- *  config 사본이 없으면 물질화하며, config 경로가 test 루트 밖이면 **기동을 거부**한다. */
+ *  운영 config 가 있으면 test-safe 사본을 물질화하고, 없으면 격리 기본값을 사용하며,
+ *  config 경로가 test 루트 밖이면 **기동을 거부**한다. */
 export function applyIsolatedRoot(dir: string): void {
   const { setTestStateRoot } = require('../nexus/paths.js') as typeof import('../nexus/paths.js');
   setTestStateRoot(dir);
@@ -98,7 +99,7 @@ export function applyIsolatedRoot(dir: string): void {
       }
       cfgDir.setElanousConfigDir(dir);
     }
-    // config 사본 보장 — 없으면 운영에서 물질화(최초 무마찰), 있으면 drift 경고만
+    // config 사본이 없고 운영 원본이 있으면 물질화하고, 있으면 drift 경고만
     // (자동 덮어쓰기 금지 — 명시적 sync 원칙). 유닛 테스트(NODE_ENV=test)는
     // 실 운영 config/secrets 를 temp 로 복사하지 않도록 sync 스킵.
     if (process.env.NODE_ENV !== 'test') {
@@ -106,8 +107,14 @@ export function applyIsolatedRoot(dir: string): void {
       const { existsSync } = require('node:fs') as typeof import('node:fs');
       const { join } = require('node:path') as typeof import('node:path');
       if (!existsSync(join(dir, 'config.json'))) {
-        const r = sync.syncTestConfig(dir);
-        console.error(`[test-isolation] 운영 config 물질화 → ${r.testConfigPath} (telegram=${r.telegramMode})`);
+        // A fresh build/test environment may have no operating config to copy.
+        // Keep the isolated config root and use the ordinary safe defaults there.
+        if (existsSync(join(sync.prodConfigDir(), 'config.json'))) {
+          const r = sync.syncTestConfig(dir);
+          console.error(`[test-isolation] 운영 config 물질화 → ${r.testConfigPath} (telegram=${r.telegramMode})`);
+        } else {
+          console.error(`[test-isolation] 운영 config 없음 — ${dir} 의 기본 설정 사용`);
+        }
       } else if (sync.isTestConfigStale(dir)) {
         console.error(`[test-isolation] ⚠️ 운영 config 가 테스트 사본보다 최신 — 'elanous config sync-test' 로 갱신 권장`);
       }