feat(control): add live workboard v0

자기야 피드백: "픽셀 아트 안 예쁘다, profile photo 로 바꿀 수 없나?
픽셀 아트 고집 안 해도 됨." → 16x28 픽셀로는 anime 일러스트 정체성 못
살리는 게 사실. Phaser 자체도 큰 의존성이라 깔끔하게 빼고 React+CSS+SVG
로 재작성.

## 변경

### 제거
- phaser 4.0.0 의존성 (~3MB)
- frontend/components/office-rpg/ 전체 (Phaser 통합 layer + procedural
  pixel sprite factory + Office scene)

### 신설
- frontend/components/office-room/OfficeRoom.tsx
  - 2x2 grid layout: 하랑/나랑 (위), 다랑/이랑 (아래)
  - 가운데 회의실 (시각 표시만, 향후 인터랙션용)
  - 각 자매 = 책상 SVG 위에 원형 portrait card
    - 72px portrait (실제 /api/sisters/{name}/avatar)
    - 자매 시그니처 색 border (harang=blue, narang=teal, darang=red, erang=violet)
    - hover 시 위로 살짝 떠오름
    - 활성 stage 일 때 PulseRing + StatusDot 펄스
  - 자매 사이 SVG flow arrow (plan → impl → review → deploy 방향)
    활성 stage 시 화살표 hi-lighted
  - 클릭 → 우측 SisterDetailPanel slide-in
- frontend/components/office-room/SisterDetailPanel.tsx
  - 기존 office-rpg 의 detail panel 을 재사용 (PortraitLg + 자매 시그니처
    accent + 역할 설명 + 백엔드 sister info)

### app/page.tsx
- OfficeRpg → OfficeRoom 으로 교체
- 4초 polling 으로 활성 파이프라인의 currentState 추적 →
  STATE_TO_STAGE 매핑 → 해당 자매 카드 자동 펄스

.claude/sessions/.last_inbox_check

@@ -0,0 +1 @@
+1775818515

.gitignore

@@ -44,3 +44,4 @@ coverage/
 
 # TypeScript
 *.tsbuildinfo
+.claude/state/

.plans/OVERVIEW.md

@@ -4,6 +4,19 @@
 - 4자매 운영 상태를 실시간으로 보여준다
 - 프로젝트/Sprint/Hotfix/QA/Deploy 흐름을 시각화한다
 - `main`이 항상 배포 가능 상태라는 원칙을 UI와 운영에 함께 반영한다
+- 오피스 화면과 운영 패널이 분리되지 않고 하나의 관제 경험으로 이어지게 만든다
+
+## 저장소 / Git 기준
+- Repo: `hanarang-dashboard`
+- Git URL: `https://git.nabomhalang.co.kr/hanarang/hanarang-dashboard`
+- 기본 브랜치: `main`
+- 현재 오피스 구현 기준 경로:
+  - `frontend/app/office/page.tsx`
+  - `frontend/components/office/OfficeScene.tsx`
+  - `frontend/components/office/ContextPanel.tsx`
+  - `frontend/components/office/ChatWorkspace.tsx`
+  - `frontend/components/office/PipelinePanel.tsx`
+  - `frontend/components/office/ServerHealthPanel.tsx`
 
 ## 현재 표준 구조
 - 루트: `README.md`, `ARCHITECTURE.md`
@@ -15,25 +28,70 @@
   - `deploy/`
 - 장기 문서: `docs/`
 
-## 활성 작업
-- **SPRINT-016**: 4자매 Isometric Office Dashboard 재기획
+## 현재 상태
+- **SPRINT-016**: `/office` 기본 화면과 핵심 컴포넌트가 `main`에 반영됨
+- **다음 활성 작업**: **SPRINT-017** `/office` 모바일 화면 전면 개편
 
-## 이번 Sprint 핵심 요구사항
-1. 4자매와 17개 서브에이전트, 총 21개 에이전트를 오피스 은유로 재설계
-2. 4자매 독립 Gateway WebSocket 기준 실시간 상태 모델 정리
-3. 고정 좌석 4자매 + 동적 이동 서브에이전트 + 회의실/연결선 구조 정의
-4. direct chat / workflow panel / server health를 오피스 화면과 통합
-5. PRD와 `.plans/` 구조를 새 제품 방향 기준으로 정리
+## SPRINT-017 active scope
+이번 Sprint는 안정화 전반이 아니라 **`/office` 모바일 정보 구조 재설계**에만 집중해.
+
+### 이번에 반드시 해결할 것
+1. `360px`, `390px` 첫 viewport에서 아래 4가지를 한 번에 읽히게 만든다.
+   - 4자매 상태
+   - current focus
+   - health summary
+   - quick actions
+2. `mobile(<768)`에서는 데스크톱 씬 축소판을 금지하고, 모바일 전용 세로 흐름 IA로 바꾼다.
+3. `PipelinePanel`과 `ServerHealthPanel`을 가로 스크롤 없이 읽히는 카드 흐름으로 바꾼다.
+4. `ChatWorkspace`를 모바일 direct chat 기준으로 다시 정리하고, `JWT 없음 / empty / error / runtime 확인 중` 상태를 즉시 읽히게 만든다.
+5. `live / snapshot / fallback` 의미는 유지하되, 모바일에서 더 짧고 일관된 라벨로 통일한다.
+
+### 이번에 하지 않을 것
+- 새로운 백엔드 API 추가
+- WebSocket 프로토콜 재설계
+- 별도 모바일 앱 설계
+- 3D/고해상도 오피스 씬 확장
+- 데스크톱 전체 IA 재작성
+
+## 현재 main 구현에서 확인된 모바일 문제
+- `frontend/components/office/OfficeScene.tsx`
+  - `aspect-ratio: 800 / 460` 고정 씬이라 모바일에서 데스크톱 축소판처럼 보임
+- `frontend/app/office/page.tsx`
+  - 모바일 전용 summary hero가 없고, `ChatArea`가 `460px` 고정 높이에 의존함
+  - 선택 전에는 `ContextPanel`과 chat이 핵심 정보 대신 빈 상태에 가까움
+- `frontend/components/office/ContextPanel.tsx`
+  - 선택 의존 구조라 첫 진입 시 상세 정보가 비어 있음
+- `frontend/components/office/PipelinePanel.tsx`
+  - `overflow-x: auto` 기반이라 모바일에서 가로 스크롤 전제가 생김
+- `frontend/components/office/ChatWorkspace.tsx`
+  - 모바일에서 direct chat 맥락이 탭, 타임라인, composer, 상태 패널로 분산되고 보조 정보가 숨겨짐
+
+## breakpoint 기준
+- **Mobile compact:** `360px`
+- **Mobile default:** `390px`
+- **Tablet:** `768px`
+- **Desktop:** `1280px+`
 
 ## 이행 전략
-- 코드에서는 구 구조와 신 구조를 일정 기간 동시 지원
-- 문서는 신 구조를 기준으로 선반영
-- 신규 QA 문서는 `.plans/qa/` 기준
-- 신규 Hotfix 문서는 `.plans/hotfix/` 기준
+- 문서는 실제 `main` 구현 경로를 근거로만 갱신한다
+- SPRINT-017은 `mobile-first IA`와 `상태 라벨 통일`까지만 잠근다
+- 구현 작업은 `frontend/app/office/page.tsx`와 `frontend/components/office/*` 범위 안에서 끝내는 걸 기본으로 한다
+- QA는 `360 / 390 / 768 / 1280+` 실브라우저 확인을 기준으로 남긴다
 
 ## 문서 맵
 - 구조 기준: `../ARCHITECTURE.md`
+- 제품 PRD: `../docs/product-specs/openclaw-office-dashboard-prd.md`
 - 디자인 인덱스: `./design/index.md`
-- Sprint 계획: `./sprints/SPRINT-016.md`
-- PRD: `../docs/product-specs/openclaw-office-dashboard-prd.md`
+- Sprint 016 비전: `./sprints/SPRINT-016.md`
+- Sprint 017 실행 계획: `./sprints/SPRINT-017.md`
+- 오피스 모바일 IA: `./design/ui/office-dashboard-design.md`
+- 오피스 direct chat 모바일 기준: `./design/ui/office-chat-design.md`
+- API / 실시간 모델 참고: `./design/api-design.md`
 - 배포 플로우: `./deploy/main-release-flow.md`
+
+## 교차 참조 규칙
+- Sprint 문서는 관련 design 문서를 반드시 링크한다
+- design 문서는 실제 Git 구현 경로와 breakpoint를 같이 적는다
+- QA 문서는 `360 / 390 / 768 / 1280+` 결과를 나눠 기록한다
+- `live / snapshot / fallback` 용어는 Sprint 문서와 UI 문서에서 동일하게 쓴다
+- 여기까지가 SPRINT-017 기준 scope야.

.plans/design/api-design.md

@@ -3,36 +3,137 @@
 ## 공통 규칙
 - Base URL: `https://hanarang-api.nabomhalang.co.kr`
 - 응답 형식: JSON
-- 인증: MVP에서는 인증 없음 (내부망 전용). 추후 JWT 추가 가능.
-- 에러 형식: `{ "statusCode": 400, "message": "...", "error": "Bad Request" }`
+- WS Namespace: `/ws`
+- 기본 에러 형식: `{ "statusCode": 400, "message": "...", "error": "Bad Request" }`
+- SPRINT-017 기준으로 오피스 화면은 `REST snapshot + WebSocket push` 혼합 모델을 사용한다.
 
-## Sisters (자매 상태)
+## 인증 규칙
+- 읽기 전용 상태 조회 API는 현재 공개 조회가 가능한 엔드포인트가 섞여 있어.
+- direct chat (`POST /api/sisters/:name/chat`) 은 JWT 필수야.
+- WebSocket 연결도 JWT 필수야. 토큰이 없거나 잘못되면 서버가 연결을 끊어.
+- 그래서 `/office`는 **읽기와 쓰기의 권한 상태를 분리해서** 다뤄야 해.
 
-| Method | Endpoint | 설명 |
-|--------|----------|------|
-| GET | `/api/sisters` | 4자매 상태 목록 (SSH로 실시간 조회) |
-| GET | `/api/sisters/:name` | 자매 상세 (설정 + 상태) |
-| GET | `/api/sisters/:name/config` | openclaw.json 내용 |
-| GET | `/api/sisters/:name/sessions` | 최근 세션 목록 |
-| GET | `/api/sisters/:name/subagents` | 서브에이전트 사용 현황 |
-| POST | `/api/sisters/:name/restart` | Gateway 재시작 (관리자) |
-| POST | `/api/sisters/:name/reset` | 세션 리셋 (관리자) |
+## 오피스 대시보드 핵심 소스
+- Git 구현 기준:
+  - `frontend/app/office/page.tsx`
+  - `backend/src/sisters/sisters.controller.ts`
+  - `backend/src/events/events.gateway.ts`
+  - `backend/src/events/events.scheduler.ts`
+- 관련 Sprint: `../sprints/SPRINT-017.md`
+- 관련 UI 문서:
+  - `./ui/office-dashboard-design.md`
+  - `./ui/office-chat-design.md`
 
-### GET `/api/sisters`
+## 상태 모델
+### Data Mode
+| mode | 의미 | UI 원칙 |
+|---|---|---|
+| `live` | WebSocket 또는 최신 runtime 기준으로 실시간성이 유지되는 상태 | 가장 신뢰도 높은 상태로 표시 |
+| `snapshot` | REST polling 기준 최신 스냅샷 | live보다 약한 상태로 표시 |
+| `fallback` | runtime 또는 status 조회 실패 시 보여주는 보정 데이터 | 추정치임을 숨기지 않음 |
+
+### Agent State
+| state | 의미 |
+|---|---|
+| `idle` | 대기 중 |
+| `thinking` | 작업 준비 / 추론 중 |
+| `tool_calling` | 외부 작업/도구 호출 중 |
+| `speaking` | 응답 생성 또는 대화 중 |
+| `error` | 연결 또는 런타임 이상 |
+
+## Sisters (오피스 화면 기준)
+
+| Method | Endpoint | 인증 | 설명 |
+|--------|----------|------|------|
+| GET | `/api/sisters` | 없음 | 4자매 상태 목록 |
+| GET | `/api/sisters/runtime` | 없음 | 4자매 runtime 스냅샷 |
+| GET | `/api/sisters/:name/runtime` | 없음 | 개별 자매 runtime |
+| GET | `/api/sisters/:name/system` | 없음 | 개별 자매 시스템 정보 |
+| GET | `/api/sisters/:name/avatar` | 없음 | 자매 아바타 이미지 |
+| GET | `/api/sisters/:name/config` | 없음 | openclaw 설정 조회 |
+| GET | `/api/sisters/:name/sessions` | 없음 | 최근 세션 목록 |
+| GET | `/api/sisters/:name/subagents` | 없음 | 서브에이전트 목록/현황 |
+| GET | `/api/sisters/:name/activity` | 없음 | 최근 활동 로그 |
+| POST | `/api/sisters/:name/chat` | JWT 필요 | direct chat 전송 |
+
+### GET `/api/sisters/runtime`
+오피스 메인 화면의 상단 상태와 최근 메시지, 서브에이전트 상태를 구성하는 runtime source야.
+
+예시 필드:
 ```json
-// Response 200
 [
   {
     "name": "harang",
-    "displayName": "하랑이",
-    "ip": "10.10.10.112",
-    "status": "online",
-    "lastSeen": "2026-04-04T01:45:00Z",
-    "role": "Orchestrator"
+    "gatewayConnected": true,
+    "mainState": "thinking",
+    "currentTask": "SPRINT-017 scope 잠금",
+    "activeSessionLabel": "main",
+    "activeSessionUpdatedAt": 1775640000000,
+    "controlSessionKey": "agent:harang:main",
+    "recentMessages": [
+      {
+        "id": "msg_1",
+        "role": "assistant",
+        "content": "scope 정리 중",
+        "ts": "2026-04-08T09:20:00Z"
+      }
+    ],
+    "subagents": [
+      {
+        "name": "prd-writer",
+        "state": "tool_calling",
+        "updatedAt": 1775640000000,
+        "currentTask": "SPRINT-017 작성",
+        "sessionLabel": "main"
+      }
+    ]
   }
 ]
 ```
 
+### POST `/api/sisters/:name/chat`
+```json
+// Request
+{ "message": "SPRINT-017 scope 확인해" }
+```
+
+```json
+// Response 200 example
+{
+  "ok": true,
+  "queued": true,
+  "sessionKey": "agent:harang:main"
+}
+```
+
+### Chat 실패 처리 원칙
+- JWT 없음 → 입력창 비활성화 또는 전송 실패 이유 명시
+- timeout → 전송은 재시도 가능 상태로 남김
+- 최근 메시지 없음 → empty state 문구 사용
+- tool 메시지와 assistant 메시지는 같은 bubble로 합치지 않음
+
+## WebSocket
+
+### 연결
+- Namespace: `/ws`
+- 인증 방식:
+  - `handshake.auth.token`
+  - 또는 `Authorization: Bearer <token>`
+- 토큰 없음/검증 실패 시 disconnect
+
+### 서버 이벤트
+| Event | Payload | 설명 |
+|---|---|---|
+| `pong` | `{ ts }` | ping 응답 |
+| `sisters:update` | `{ sisters, ts }` | 4자매 상태 push |
+| `activity:new` | `{ item, ts }` | 새 활동 로그 push |
+
+### 운영 규칙
+- WS는 가장 강한 source야.
+- WS가 끊겨도 마지막 성공 시각을 보존해 stale 여부를 판단해야 해.
+- scheduler polling 값이 더 오래된 경우 live 값을 덮어쓰면 안 돼.
+- SPRINT-017에서는 reconnect / stale / snapshot downgrade 규칙을 문서와 QA 기준으로 잠근다.
+
 ## Projects (프로젝트)
 
 | Method | Endpoint | 설명 |
@@ -69,3 +170,9 @@
 | Method | Endpoint | 설명 |
 |--------|----------|------|
 | GET | `/health` | 서버 상태 확인 |
+
+## SPRINT-017 문서 기준 정리
+- 오피스 화면은 읽기 API와 쓰기 API 권한을 분리해서 다룬다
+- `live / snapshot / fallback`은 API 문서, UI 문서, QA 문서에서 같은 의미로 쓴다
+- direct chat, WS disconnect, stale 상태는 정상 흐름만큼 중요하게 검증한다
+- 여기까지가 API 기준 scope야.

.plans/design/index.md

@@ -21,8 +21,20 @@
 ## 레퍼런스
 - `references/07-master-dashboard-v3-reference.md`
 
-## Sprint 016에서 반드시 반영할 화면
-- 오피스 메인: 4자매 고정 좌석 + 서브에이전트 동적 이동
-- 오피스 채팅: 자매 선택 direct chat + 현재 상태 결합
-- 운영 패널: active workflow / sprint / review loop / deploy gate / server health
-- 모바일: 오피스 씬 단순화 + 세로 흐름 재배치
+## 현재 우선 문서
+- Sprint 실행 기준: `../sprints/SPRINT-017.md`
+- 제품 비전: `../../docs/product-specs/openclaw-office-dashboard-prd.md`
+- 실행 개요: `../OVERVIEW.md`
+
+## SPRINT-017에서 반드시 잠글 것
+- 오피스 메인: Desktop / Tablet / Mobile 정보 우선순위
+- 오피스 채팅: JWT 필요, 전송 실패, empty state 처리
+- 운영 패널: active workflow / sprint / review loop / deploy gate / server health 상태 톤 통일
+- 실시간 모델: `live / snapshot / fallback` 판정 규칙
+- WS + polling reconciliation: stale / reconnect / downgrade 기준
+
+## Git 기준 확인 경로
+- `/office` entry: `frontend/app/office/page.tsx`
+- scene: `frontend/components/office/OfficeScene.tsx`
+- chat: `frontend/components/office/ChatWorkspace.tsx`
+- ws gateway: `backend/src/events/events.gateway.ts`

.plans/design/ui/office-chat-design.md

@@ -1,30 +1,150 @@
-# 오피스 채팅 워크스페이스 — Sprint 016
+# 오피스 direct chat UI 기준 — SPRINT-017 모바일 개편
 
-## 목적
-자기야가 4자매 중 한 명을 선택해 직접 대화하고, 현재 작업 맥락과 tool 상태를 함께 보는 운영 채팅 인터페이스.
+## 문서 목적
+`ChatWorkspace.tsx`를 모바일 direct chat 기준으로 다시 정리하기 위한 문서야. 기준 Sprint는 `.plans/sprints/SPRINT-017.md`이고, 메인 IA와 first viewport 원칙은 `.plans/design/ui/office-dashboard-design.md`를 따른다.
 
-## 구조
-### 좌측
-- 자매 선택 탭
-- 최근 대화 상대
-- unread / active 상태
+## 기준 구현 파일
+- `frontend/components/office/ChatWorkspace.tsx`
+- `frontend/app/office/page.tsx`
+- 연관 문서: `.plans/design/ui/office-dashboard-design.md`
 
-### 중앙
-- 메시지 타임라인
-- streaming 응답
-- tool call 상태 삽입
-- retry / stop / resend 액션
+## breakpoint 기준
+- `360px`: minimum mobile compact
+- `390px`: primary mobile baseline
+- `768px`: tablet transition
+- `1280px+`: desktop baseline
 
-### 우측
-- 선택 자매 상태
-- current workflow
-- 최근 handoff
-- 관련 서브에이전트
+## 현재 main 구현에서 확인된 문제
+- `page.tsx`에서 chat은 `ChatArea` 고정 높이(`520px`, 모바일 `460px`) 안에 들어가 세로 흐름을 끊는다.
+- `ChatWorkspace.tsx`는 모바일에서도 데스크톱 구조의 흔적이 강하다.
+  - 자매 탭, 메시지, 보조 컨텍스트가 분리되어 있다.
+  - `SisterContext`는 `1199px` 미만에서 숨겨져 모바일 보조 정보가 사라진다.
+  - `SendBtn`은 토큰이 없으면 disabled라서, `JWT 없음` 이유를 화면에서 놓치기 쉽다.
+- empty 상태 문구는 있지만, `JWT 없음 / error / runtime 확인 중`이 같은 강도로 정리되어 있지 않다.
 
-## UX 규칙
-- 채팅은 메신저가 아니라 운영 명령 패널처럼 보여야 함
-- 현재 자매 상태와 대화가 분리되지 않아야 함
-- tool calling / speaking 상태는 대화 흐름 안에서 보여야 함
+## 모바일 direct chat 원칙
+1. **한 컬럼 흐름**
+   - mobile(` <768`)에서는 탭 → 상태 → 타임라인 → composer → 보조 정보 순서로 한 컬럼으로 간다.
+2. **전송 가능 여부를 숨기지 않기**
+   - `JWT 없음`이면 입력 근처에서 바로 이유를 보여준다.
+3. **상태는 상단에 짧게**
+   - runtime/source 상태는 header 또는 composer 상단에서 한 번에 읽히게 한다.
+4. **메시지가 우선**
+   - 보조 컨텍스트보다 타임라인과 입력창이 우선이다.
+5. **고정 높이 최소화**
+   - 460px 박스 안에 억지로 채우지 않는다.
 
-## 모바일
-- 자매 탭 → 메시지 → 상태 패널 순으로 세로 전환
+## mobile layout
+모바일 기본 순서는 아래야.
+
+### 1. sister switcher
+- 4자매 전환을 상단 compact tab 또는 segmented control로 둔다
+- 이름과 active 상태만 짧게 보여준다
+- role 전체 문구는 모바일에서 숨기거나 축약한다
+
+### 2. runtime / source badge row
+상단 배지 영역에서 아래를 보여준다.
+- runtime 상태: `연결됨`, `확인 중`, `stale`, `error`
+- source badge: `live`, `snapshot`, `fallback`
+- 필요 시 현재 자매 상태(`thinking`, `tool_calling`, `speaking`, `idle`)
+
+### 3. timeline
+- 메시지 타임라인은 화면에서 가장 큰 비중을 차지한다
+- `user / assistant / tool` 구분은 유지한다
+- tool 메시지는 mono 또는 강조 배경 유지
+- 버블 최대 폭은 모바일에서 너무 좁아지지 않게 조정한다
+
+### 4. composer
+- 입력창과 전송 버튼은 타임라인 바로 아래
+- `Enter = 전송`, `Shift+Enter = 줄바꿈` 힌트는 짧게 유지
+- 전송 불가 상태면 버튼만 막지 말고 이유를 붙인다
+
+### 5. support state block
+모바일에서는 숨기지 말고 composer 아래 또는 접이식 블록으로 둔다.
+- current task
+- active session label
+- data source 설명 한 줄
+
+## 상태 배지 규칙
+### source badge
+- `live`: runtime 연결 또는 최신 상태 반영 중
+- `snapshot`: 마지막 조회 스냅샷 표시 중
+- `fallback`: 기본값 또는 보조 데이터 기준
+
+### runtime badge
+- `연결됨`: gatewayConnected = true
+- `확인 중`: 아직 runtime snapshot 수신 전
+- `stale`: 최근 업데이트가 늦음
+- `오류`: 전송 또는 조회 실패
+
+### 배지 위치
+- header 오른쪽 또는 바로 아래 1줄
+- 모바일에서는 긴 설명 대신 짧은 라벨 + 보조 문구 1개만 둔다
+
+## empty / error / JWT 없음 UX
+### empty
+조건:
+- 메시지 없음
+- 최근 runtime 메시지도 없음
+
+표현:
+- "아직 대화가 없어"
+- 바로 보낼 수 있는 예시 액션 1개 또는 placeholder
+- runtime 상태 보조 문구
+
+### JWT 없음
+조건:
+- `localStorage` 토큰 없음
+- 또는 인증이 풀려 전송 불가
+
+표현:
+- 입력 근처에 즉시 보이는 경고 문구
+- 예: `로그인이 풀려서 지금은 전송할 수 없어. 다시 로그인해.`
+- 전송 버튼 disabled만 두고 끝내지 않는다
+
+### 전송 실패
+조건:
+- `/api/sisters/:name/chat` 실패
+
+표현:
+- 타임라인 내 실패 메시지 유지
+- composer 근처에 `다시 시도` 또는 실패 이유 보조 문구
+- 실패와 empty를 같은 문구로 합치지 않는다
+
+### runtime 확인 중
+조건:
+- runtime snapshot 미수신 또는 gateway 미연결
+
+표현:
+- header 배지 또는 상태 줄에 표시
+- 메시지 전송 가능 여부와 별개인지 함께 설명
+
+## 메시지 규칙
+- `user`: 우측 또는 구분되는 배경
+- `assistant`: 기본 응답 버블
+- `tool`: mono 스타일과 별도 톤 유지
+- timestamp는 보조 정보로만 노출
+- 모바일에서 버블 폭이 지나치게 좁아 읽기 어렵지 않게 한다
+
+## mobile에서 숨기면 안 되는 정보
+- active sister
+- runtime/source 상태
+- current task 또는 active session 중 하나
+- JWT 없음 / 전송 실패 이유
+
+## desktop / tablet 유지 규칙
+### desktop (`1280px+`)
+- 현재 3열 느낌을 유지해도 돼
+- 다만 source/runtime 라벨과 상태 문구는 모바일 기준과 통일해
+
+### tablet (`768px`)
+- 좌측 자매 전환 + 중앙 타임라인 구조 유지 가능
+- 우측 보조 패널이 사라져도 핵심 상태는 상단에서 읽혀야 해
+
+## QA 체크 포인트
+- `360px`, `390px`에서 탭, 타임라인, 입력창이 겹치지 않는지
+- 입력창이 키보드 노출 시 잘리지 않는지
+- `JWT 없음` 상태가 버튼 disabled 외에 문구로도 보이는지
+- `empty`, `runtime 확인 중`, `전송 실패`가 서로 다른 문구로 보이는지
+- `user / assistant / tool` 구분이 모바일에서도 유지되는지
+- source badge와 runtime badge가 다른 의미로 명확히 읽히는지

.plans/design/ui/office-dashboard-design.md

@@ -1,63 +1,207 @@
-# 오피스 대시보드 메인 (`/office` 또는 `/`) — Sprint 016
+# 오피스 대시보드 UI 기준 — SPRINT-017 모바일 개편
 
-## 목적
-4자매와 서브에이전트 협업을 `고정 좌석 + 동적 이동 + 운영 패널` 구조로 보여주는 대표 화면.
+## 문서 목적
+`/office` 메인 화면의 모바일 IA와 우선순위를 잠그는 문서야. 기준 Sprint는 `.plans/sprints/SPRINT-017.md`이고, active scope는 `.plans/OVERVIEW.md`를 따른다.
 
-## 핵심 은유
-- 메인 자매 = 고정 좌석
-- 서브에이전트 = 이동 가능한 팀원
-- 회의실 = 협업/리뷰/핸드오프 문맥
-- 인프라 존 = 배포/서버/헬스
-- 연결선 = handoff / workflow transition
+## 기준 구현 파일
+- `frontend/app/office/page.tsx`
+- `frontend/components/office/OfficeScene.tsx`
+- `frontend/components/office/ContextPanel.tsx`
+- `frontend/components/office/PipelinePanel.tsx`
+- `frontend/components/office/ServerHealthPanel.tsx`
+- 관련 chat 문서: `.plans/design/ui/office-chat-design.md`
 
-## 전체 레이아웃
-### 1. Office Scene
-화면 중심. 가장 큰 영역.
+## breakpoint 기준
+- `360px`: minimum mobile compact
+- `390px`: primary mobile baseline
+- `768px`: tablet transition
+- `1280px+`: desktop baseline
 
-#### 고정 좌석
-- 하랑이: 좌상단 또는 상단 중앙
-- 나랑이: 좌하단 또는 좌측 작업 구역
-- 다랑이: 우상단 또는 리뷰 구역
-- 이랑이: 우하단 또는 인프라 구역
+## 현재 main 구현에서 바꿔야 하는 점
+- `OfficeScene.tsx`는 `800 / 460` 비율 SVG 씬을 전제로 해서 모바일에서 정보보다 축소 그림이 먼저 보인다.
+- `page.tsx`는 모바일 전용 상단 summary가 없어서 첫 화면에서 핵심 운영 정보가 바로 안 잡힌다.
+- `ContextPanel.tsx`는 선택 전 빈 상태라 모바일 첫 진입에 불리하다.
+- `PipelinePanel.tsx`는 `overflow-x: auto`가 들어가 있어 모바일에서 읽기보다 옆으로 밀게 된다.
+- `ServerHealthPanel.tsx`는 카드 그리드는 있지만 상단 health summary 우선순위가 없다.
 
-#### 서브에이전트 배치
-- 기본은 자기 자매 주변 대기
-- active workflow 시 작업석/회의실/인프라 존으로 이동
-- 상태에 따라 아이콘/색/테두리/말풍선 변화
+## 모바일 핵심 원칙
+1. **데스크톱 축소판 금지**
+   - 모바일은 desktop scene을 줄이는 방식이 아니라 모바일 전용 정보 구조를 쓴다.
+2. **첫 viewport 우선**
+   - `360px`, `390px` 첫 화면에서 운영자가 바로 판단할 정보만 먼저 보여준다.
+3. **선택 전에도 정보가 보이게**
+   - 자매를 누르기 전에도 상태, focus, health, action이 읽혀야 한다.
+4. **가로 스크롤 금지**
+   - mobile에서는 모든 핵심 블록이 세로 흐름 안에서 끝나야 한다.
+5. **상태 의미 유지**
+   - `live / snapshot / fallback`은 유지하되, 짧고 일관된 라벨로 통일한다.
 
-### 2. Right Context Panel
-- 선택 에이전트 detail
-- 현재 세션/상태
-- 최근 이벤트
+## mobile IA
+모바일(` <768`) 기본 순서는 아래로 고정해.
+
+### 1. summary hero
+가장 위. 첫 진입 핵심 문장 1개와 source badge 1개를 보여준다.
+
+**포함 정보**
+- 현재 focus project 또는 active task
+- data source badge (`live`, `snapshot`, `fallback`)
+- 보조 문구 한 줄
+
+**하지 않을 것**
+- 긴 설명문
+- 데스크톱용 메타 정보 여러 줄
+
+### 2. compact sister status
+4자매 상태를 2x2 또는 1열 compact card로 보여준다.
+
+**각 카드 최소 정보**
+- 자매 이름
+- 상태색과 상태 라벨
+- current task 또는 active session 한 줄
+- runtime/source 힌트 한 줄
+
+**행동**
+- 탭 또는 카드 선택 가능
+- 선택 시 인라인 상세가 펼쳐져도 첫 카드 밀도를 깨지 않게 유지
+
+### 3. focus / health / quick action block
+첫 viewport 안에 반드시 들어와야 하는 운영 블록이야.
+
+**focus block**
+- current focus
+- sprint / deploy state 중 하나의 핵심 값
+
+**health block**
+- online count
+- 문제 있는 sister/server 요약
+- source badge
+
+**quick action block**
 - direct chat 진입
+- 상세 보기 또는 관련 패널 점프
 
-### 3. Bottom Ops Panel
-- current sprint
-- active workflow
-- review loop
-- deploy gate
-- server health summary
+### 4. panel sections
+첫 viewport 이후 순차 노출.
 
-## 상태 표현
-- `idle`: 조용한 점등
-- `thinking`: 약한 pulse
-- `tool_calling`: 도구 아이콘/점멸
-- `speaking`: 말풍선 또는 stream 표시
-- `error`: 적색 경고
+모바일 추천 순서:
+1. direct chat
+2. pipeline
+3. health detail
+4. context detail
 
-## 연결 규칙
-- 자매 간 핸드오프는 굵은 주 연결선
-- 서브에이전트 내부 협업은 얇은 보조선
-- review loop는 다랑이 회의실 중심으로 표시
-- deploy path는 이랑이 인프라 존으로 흐름 표시
+이 순서는 "지금 말 걸기 → 지금 뭐가 막혔는지 보기 → 상세 맥락 보기" 흐름을 따른다.
 
-## UX 규칙
-- 중심은 언제나 4자매
-- 21개 에이전트를 다 보여도 난잡하면 안 됨
-- 선택 전에도 전체 상태는 읽혀야 함
-- 선택 후에만 상세 정보 밀도 증가
+## first viewport priority
+`360px`, `390px`에서 아래 4개가 모두 한 번에 보여야 해.
+1. 4자매 상태
+2. current focus
+3. health summary
+4. quick actions
 
-## 모바일
-- 오피스 씬 단순화
-- 자매별 클러스터 카드 + 축소 맵 우선
-- 상세는 하단 시트 또는 탭으로 분리
+### 우선순위 이유
+- 자매 상태가 먼저 안 보이면 운영 화면이 아니라 decorative scene이 된다.
+- focus가 없으면 무엇을 관제 중인지 설명이 안 된다.
+- health summary가 없으면 online/offline 판단이 늦어진다.
+- quick actions가 없으면 direct chat 진입이 숨는다.
+
+## compact sister status 설계
+### desktop와 다르게 볼 것
+- desktop(`1280px+`)은 scene 중심
+- tablet(`768px`)은 scene 축소 유지 가능하되 summary 보강 필요
+- mobile(` <768`)은 scene 대신 status card 중심
+
+### 카드 규칙
+- 카드 높이는 task 한 줄, 상태 한 줄 기준으로 짧게 유지
+- 자매 4명을 한 화면 안에서 비교 가능해야 함
+- 선택된 자매는 인라인 확장이나 하단 sheet로 상세를 보여줄 수 있음
+- subagent 수나 role은 보조 정보로만 노출
+
+## scene 대체 전략
+### mobile에서 scene을 이렇게 바꿔
+`OfficeScene.tsx` 모바일 분기는 아래 둘 중 하나를 기준으로 구현해.
+
+#### 옵션 A. compact sister stack
+- 세로 카드 4개
+- 각 카드에서 상태, current task, quick action 제공
+- 선택 시 아래에 context summary 노출
+
+#### 옵션 B. selectable status cards
+- 2x2 grid 또는 가로 2열 카드
+- 선택 카드만 확장
+- 확장 영역에서 subagent / recent context / chat action 제공
+
+### 반드시 지킬 것
+- `800x460` SVG를 그대로 줄여서 넣지 않는다
+- 회의실/존 은유는 모바일에서 필수 요소가 아니다
+- mobile에서 중요한 건 공간 은유보다 운영 정보의 순서다
+
+## context 흡수 전략
+`ContextPanel.tsx` 내용은 mobile에서 별도 우측 패널이 아니라 아래 중 하나로 흡수해.
+- selected sister 카드 안 인라인 상세
+- accordion section
+- bottom sheet
+
+### mobile 기본 상태
+- 아무 것도 선택되지 않아도 default context summary가 있어야 한다
+- 예: "현재 focus", "현재 제일 바쁜 자매", "바로 채팅할 자매"
+
+## health block 기준
+`ServerHealthPanel.tsx` 전체를 첫 화면에 다 넣지 말고, 상단에는 summary만 먼저 둬.
+
+**상단 summary 최소 정보**
+- `online x/y`
+- 문제 상태 1건 요약 또는 `all clear`
+- source badge (`live`, `snapshot`, `fallback`)
+
+**상세 패널에서 보여줄 것**
+- 자매/서버 카드 리스트
+- detail 문구
+- refreshed/generated 시각
+
+## pipeline block 기준
+`PipelinePanel.tsx` 전체를 모바일 첫 viewport에 다 넣지 않는다.
+
+**상단 summary 최소 정보**
+- active task
+- focus
+- review loop count 또는 deploy state
+
+**상세 패널에서 보여줄 것**
+- 세로 단계 카드
+- node role / state / detail
+- snapshot freshness
+
+## source badge 규칙
+모바일에서는 source 표현을 아래처럼 통일해.
+- `live`: 현재 runtime 또는 ws 기반 최신 상태
+- `snapshot`: polling 또는 마지막 스냅샷 기준 상태
+- `fallback`: 문서/기본값/보조 데이터 기준 상태
+
+### 라벨 톤
+- 라벨은 짧게
+- 설명은 보조 문구 한 줄
+- 첫 화면과 하위 패널에서 같은 단어 사용
+
+## 상태 문구 규칙
+- `loading`: 불러오는 중
+- `empty`: 아직 표시할 데이터 없음
+- `error`: 가져오지 못함 또는 전송 실패
+- `stale`: 최신 연결이 약해 마지막 확인값 표시 중
+
+`empty`와 `error`는 절대 같은 문구로 처리하지 않아.
+
+## desktop / tablet 유지 규칙
+### desktop (`1280px+`)
+- 기존 scene + context panel + bottom panels 구조 유지
+- 단, source badge와 상태 라벨은 새 기준으로 통일
+
+### tablet (`768px`)
+- 데스크톱 구조를 유지해도 되지만 summary 우선순위를 보강해야 함
+- 첫 화면에서 핵심 정보가 씬 아래로 밀리면 안 됨
+
+## QA 체크 포인트
+- `360px`, `390px`에서 첫 viewport에 핵심 정보 4종이 모두 보이는지
+- horizontal scroll이 없는지
+- 선택 전에도 default context가 읽히는지
+- sister 선택 후 상세 확인이 같은 세로 흐름 안에서 끝나는지
+- `live / snapshot / fallback` 라벨이 첫 화면과 패널에서 같은지

.plans/rebuild-from-scratch/PLAN.md

@@ -0,0 +1,547 @@
+# 하나랑 대시보드 Rebuild From Scratch Implementation Plan
+
+> **For Hermes:** 이 문서는 하랑이 planner role 산출물이다. 승인 전 구현/배포 금지. 승인 후 나랑이 builder 또는 Codex가 task 단위로 실행하고, 다랑이 reviewer가 spec/code quality를 검증한다.
+
+**Goal:** 기존 하나랑 대시보드를 “자기야가 4자매가 작업하는 과정을 실시간으로 보는 서비스”로 처음부터 다시 설계하고 구현한다. 메인 화면의 핵심은 이랑이/하랑이/나랑이/다랑이가 PLAN → BUILD → REVIEW → DEPLOY 흐름에서 무엇을 하고 있는지 live timeline/board/scene으로 보여주는 것이다.
+
+**Architecture:** 기존 `hanarang-dashboard` repo는 유지하되, 제품/정보구조/UI를 새로 잡는다. Frontend는 Next.js 16 + styled-components를 유지하고, Backend는 NestJS + Prisma/MariaDB + Socket.IO를 유지한다. 메인 서비스는 `4 Sisters Live Workboard`이며, v0는 mock event stream으로 “작업 과정이 보이는 화면”을 먼저 완성한다. v1에서 NestJS Socket.IO event stream과 workflow state API를 붙인다. 기존 코드는 삭제보다 `legacy` 보존/점진 교체를 우선한다.
+
+**Tech Stack:** Next.js 16, React 19, styled-components, NestJS 11, Prisma 7, MariaDB, Socket.IO, Hermes role skills, Proxmox read-only API.
+
+---
+
+## 0. 배경
+
+기존 대시보드는 다음 전제를 갖고 있었다.
+
+- 하랑/나랑/다랑/이랑이 각각 독립 gateway로 상시 동작
+- 4자매 서버 상태를 곧 agent 상태로 봄
+- OpenClaw/Lobster workflow 흔적이 UI에 남아 있음
+- 실시간 office/metaphor와 운영 패널이 섞여 있음
+
+현재 운영 방향은 바뀌었다.
+
+- 자기야의 기본 진입점은 이랑이 하나
+- 하랑=planner, 나랑=builder, 다랑=reviewer는 role skill로 호출
+- 하랑/나랑/다랑 gateway는 나중에 standby 전환 가능
+- Proxmox 서버 상태와 role runnable 상태를 분리해서 봐야 함
+- 하네스 엔지니어링 원칙: PLAN → 승인 → 구현 → QA → 배포 게이트
+
+그래서 단순 리팩토링보다 “처음부터 다시 만드는” 수준의 IA/UI 재설계가 맞다.
+
+---
+
+## 1. 제품 방향
+
+### 한 줄 정의
+
+하나랑 대시보드는 자기야가 **4자매가 작업하는 과정을 실시간으로 보는 서비스**다. 단순 관제센터가 아니라, 하랑이의 기획, 나랑이의 구현, 다랑이의 리뷰, 이랑이의 인프라/배포 판단이 어떤 순서로 흘러가는지 메인 화면에서 바로 보여준다.
+
+### 핵심 사용자
+
+- 자기야: 최종 사용자/승인자
+- 이랑이: 메인 비서, 오케스트레이터, 인프라 책임자
+- 하랑이 role: planner
+- 나랑이 role: builder
+- 다랑이 role: reviewer
+
+### 새 핵심 은유
+
+기존 “정적인 관제 카드 모음”이 아니라 **4자매 작업실을 실시간으로 보는 화면**이 메인이다.
+
+```text
+4 Sisters Live Workboard
+  ├─ Live Work Scene: 지금 누가 어떤 작업 중인지
+  ├─ Workflow Timeline: PLAN → BUILD → REVIEW → DEPLOY 이벤트 흐름
+  ├─ Active Task Focus: 현재 선택된 작업의 상세 상태
+  ├─ Sister Activity Lanes: 하랑/나랑/다랑/이랑 역할별 lane
+  └─ Infra/Approval Side Panel: 막힌 이유, 승인 필요, 인프라 위험
+```
+
+이랑이는 여전히 단일 진입점이지만, 화면의 주인공은 “이랑이 혼자”가 아니라 **4자매가 함께 일하는 과정**이다. 하랑/나랑/다랑이 gateway로 상시 떠 있지 않아도, role execution/event log를 통해 작업 과정이 보여야 한다.
+
+---
+
+## 2. Scope
+
+### 포함 — v0
+
+- 메인 화면을 `4 Sisters Live Workboard`로 설계
+- 하랑/나랑/다랑/이랑 activity lane
+- PLAN → BUILD → REVIEW → DEPLOY live timeline
+- 현재 작업 focus panel
+- approval/blocker side panel
+- mock event stream으로 실시간처럼 흐르는 UI
+- 새 AppShell/Navigation
+- 4자매 role status 카드
+- Proxmox monitoring link/panel placeholder
+- 프로젝트 list placeholder
+- mobile-first layout
+- mock/static data로 UI 완성
+- 기존 route와 충돌하지 않는 방식으로 새 route 구성
+
+### 포함 — v1
+
+- Backend API 계약 연결
+- role agent health endpoint 연결
+- Proxmox v0 live inventory 연결
+- project/workflow API 연결
+- Socket.IO live update 일부 적용
+
+### 포함 — v2
+
+- 기존 legacy 화면 정리
+- 인증/권한 흐름 재검토
+- 실제 action gate UI
+- deployment/QA report UI
+
+### 제외 — 당장 하지 않음
+
+- 기존 DB schema 삭제
+- 기존 production deploy
+- 하랑/나랑/다랑 gateway 중지
+- Proxmox write action
+- DB migration
+- 도메인/Nginx 변경
+
+---
+
+## 3. Product IA
+
+### Primary Navigation
+
+1. **Live** — 4자매 작업 과정 실시간 메인 화면
+2. **Harness** — PLAN/Build/Review/Deploy 흐름 상세
+3. **Projects** — repo/project/sprint/task
+4. **Infra** — Proxmox/server/service health
+5. **Agents** — 이랑이 + 하랑/나랑/다랑 role health
+6. **Settings** — 토큰/환경/연동 상태. secret 값 표시 금지
+
+### Live 메인 화면
+
+메인 화면은 대시보드의 핵심 서비스다.
+
+상단:
+- 현재 active workflow 이름
+- live/snapshot/mock/fallback source badge
+- 전체 phase: Planning / Building / Reviewing / Waiting Approval / Deploying
+- pending approvals / blockers
+
+중앙:
+- **4 Sisters Live Workboard**
+  - 하랑 lane: 요구사항 정리, PLAN 작성, handoff
+  - 나랑 lane: 구현 task, test/build, diff 생성
+  - 다랑 lane: spec review, code review, QA 결과
+  - 이랑 lane: 인프라 확인, 배포 게이트, 위험 차단
+- 각 lane에는 현재 상태, 마지막 이벤트, 진행 중 작업, 다음 handoff를 표시한다.
+
+우측:
+- Active Task Focus
+  - 지금 선택한 이벤트/작업 상세
+  - 관련 파일/plan/QA report 링크
+  - tool call 또는 verification command 상태
+
+하단:
+- Workflow Timeline
+  - event stream 형태
+  - PLAN_CREATED, BUILD_STARTED, TEST_PASSED, REVIEW_REQUESTED, QA_FAILED, APPROVAL_NEEDED 같은 이벤트
+- Infra/Approval compact panel
+
+### Harness 화면
+
+Live 화면보다 상세한 작업 단위 board다.
+
+- workflow list
+- stage별 task cards
+- approval gates
+- QA report links
+- build/test logs
+
+### Agents 화면
+
+agent 상태를 4축으로 표시한다.
+
+| 항목 | 의미 |
+|---|---|
+| role | erang-main, harang-planner, narang-builder, darang-reviewer |
+| mode | main, role-skill, profile, gateway |
+| runnable | 현재 호출 가능한지 |
+| gateway | active, standby, failed, unknown |
+| server | LXC running 여부 |
+
+### Infra 화면
+
+처음엔 Proxmox monitoring PLAN과 연결한다.
+
+- `/infra/proxmox`
+- live-only v0
+- DB 없음
+- write action 없음
+
+---
+
+## 4. Design Principles
+
+1. **운영 판단이 먼저**
+   - 예쁜 오피스보다 “지금 위험한가?”를 먼저 보여준다.
+2. **상태의 출처를 숨기지 않음**
+   - live / snapshot / mock / fallback 구분.
+3. **상시 gateway와 role runnable을 분리**
+   - gateway standby는 장애가 아니다.
+4. **모바일 우선**
+   - 자기야 iPhone에서 빠르게 봐야 함.
+5. **과한 애니메이션 금지**
+   - 상태 파악 방해 금지.
+6. **하네스 원칙 내장**
+   - PLAN 승인 없이는 Build가 시작되지 않는 UI.
+
+---
+
+## 5. Repo Strategy
+
+### 기본 전략
+
+기존 repo 유지:
+
+```text
+/home/erang/hanarang-dashboard
+```
+
+새 구현은 기존 route를 바로 갈아엎지 않고, feature branch에서 새 구조를 만든다.
+
+추천 branch:
+
+```bash
+git checkout -b feature/rebuild-control-center
+```
+
+### 파일 구조 제안
+
+Frontend:
+
+```text
+frontend/app/(control)/page.tsx
+frontend/app/(control)/harness/page.tsx
+frontend/app/(control)/projects/page.tsx
+frontend/app/(control)/infra/page.tsx
+frontend/app/(control)/infra/proxmox/page.tsx
+frontend/app/(control)/agents/page.tsx
+frontend/app/(control)/settings/page.tsx
+
+frontend/components/control/AppFrame.tsx
+frontend/components/control/TopStatusBar.tsx
+frontend/components/control/NavigationRail.tsx
+frontend/components/control/StatusCard.tsx
+frontend/components/control/SourceBadge.tsx
+
+frontend/components/harness/HarnessBoard.tsx
+frontend/components/harness/PipelineStageCard.tsx
+frontend/components/harness/ApprovalQueue.tsx
+
+frontend/components/agents/AgentRoleCard.tsx
+frontend/components/agents/AgentRoleMap.tsx
+
+frontend/components/infra/InfraSummaryPanel.tsx
+frontend/components/infra/ProxmoxSummaryCard.tsx
+
+frontend/lib/control/mock-data.ts
+frontend/lib/control/types.ts
+frontend/lib/control/api.ts
+```
+
+Backend v0/v1:
+
+```text
+backend/src/infra/agents/agent-role-health.controller.ts
+backend/src/infra/agents/agent-role-health.service.ts
+backend/src/infra/proxmox/*
+backend/src/control/control.controller.ts
+backend/src/control/control.service.ts
+```
+
+---
+
+## 6. Tasks
+
+### Task 1: 현재 구조 조사
+
+**Objective:** 새 대시보드를 얹을 수 있는 실제 route/component/API 구조를 확인한다.
+
+**Files:**
+- Read: `frontend/app/**`
+- Read: `frontend/components/**`
+- Read: `frontend/AGENTS.md`
+- Read: `backend/src/app.module.ts`
+- Read: `backend/src/dashboard/**`
+- Read: `backend/src/events/**`
+
+**Commands:**
+
+```bash
+cd /home/erang/hanarang-dashboard
+find frontend/app -maxdepth 4 -type f | sort
+find frontend/components -maxdepth 3 -type f | sort
+find backend/src -maxdepth 3 -type f | sort
+```
+
+**Verification:**
+- Next.js route 구조 확인
+- styled-components 사용 패턴 확인
+- 기존 API/gateway 패턴 확인
+
+---
+
+### Task 2: 새 제품 스펙 작성
+
+**Objective:** 기존 PRD를 새 운영 구조에 맞게 대체한다.
+
+**Files:**
+- Create: `.plans/rebuild-from-scratch/product-spec.md`
+- Modify: `docs/product-specs/openclaw-office-dashboard-prd.md` 또는 새 파일 생성
+
+**Acceptance criteria:**
+- 이랑이 단일 진입점 명시
+- 하랑/나랑/다랑 role agent 모델 명시
+- gateway standby != down 명시
+- Proxmox monitoring 연결 명시
+
+**Verification:**
+- 다랑이 review에서 scope ambiguity 없음
+
+---
+
+### Task 3: Design system 초안
+
+**Objective:** 새 dashboard의 UI 토큰과 컴포넌트 원칙을 정한다.
+
+**Files:**
+- Create: `.plans/rebuild-from-scratch/design-system.md`
+- Create: `frontend/components/control/README.md`
+
+**Design tokens:**
+- background: dark infra control center
+- status colors: ok/warning/critical/standby/unknown
+- density: desktop 3-column, mobile 1-column
+- source badges: live/snapshot/mock/fallback
+
+**Verification:**
+- 모든 상태가 색상만이 아니라 text label도 가짐
+
+---
+
+### Task 4: Frontend live workboard skeleton
+
+**Objective:** mock event stream만으로 4자매가 작업하는 과정이 메인 화면에서 실시간처럼 보이게 만든다.
+
+**Files:**
+- Create: `frontend/app/(control)/page.tsx`
+- Create: `frontend/components/control/AppFrame.tsx`
+- Create: `frontend/components/control/TopStatusBar.tsx`
+- Create: `frontend/components/control/NavigationRail.tsx`
+- Create: `frontend/components/live/LiveWorkboard.tsx`
+- Create: `frontend/components/live/SisterActivityLane.tsx`
+- Create: `frontend/components/live/WorkflowTimeline.tsx`
+- Create: `frontend/components/live/ActiveTaskFocus.tsx`
+- Create: `frontend/lib/control/types.ts`
+- Create: `frontend/lib/control/mock-events.ts`
+
+**Rules:**
+- 기존 `frontend/app/page.tsx`를 바로 삭제하지 않는다.
+- 새 route가 충돌하면 `/control` 아래에 먼저 만든다.
+- mock data는 `source: 'mock'`을 반드시 표시한다.
+- 메인 화면의 첫 impression은 “4자매가 일하고 있다”여야 한다. 인프라/프로젝트 카드는 보조 패널로 둔다.
+
+**Verification:**
+
+```bash
+cd frontend
+npm run lint
+npm run build
+```
+
+---
+
+### Task 5: Harness detail board UI
+
+**Objective:** 메인 Live Workboard에서 선택한 workflow를 더 자세히 보는 상세 board를 만든다.
+
+**Files:**
+- Create: `frontend/components/harness/HarnessBoard.tsx`
+- Create: `frontend/components/harness/PipelineStageCard.tsx`
+- Create: `frontend/components/harness/ApprovalQueue.tsx`
+
+**Acceptance criteria:**
+- PLAN_REQUIRED, BUILDING, REVIEWING, WAITING_APPROVAL, DEPLOY_READY 상태 표시
+- 각 단계에 responsible role 표시
+- 승인 대기 항목이 명확함
+- Live 화면의 event와 같은 workflow id로 연결됨
+
+**Verification:**
+- mock pipeline 3개 렌더링
+- 모바일 1열 전환
+
+---
+
+### Task 6: Agent role map UI
+
+**Objective:** 이랑이 중심 role agent 상태를 표시한다.
+
+**Files:**
+- Create: `frontend/components/agents/AgentRoleMap.tsx`
+- Create: `frontend/components/agents/AgentRoleCard.tsx`
+
+**Acceptance criteria:**
+- erang-main = active main
+- harang-planner/narang-builder/darang-reviewer = role-skill runnable
+- gateway active/standby/failed와 runnable 분리
+
+---
+
+### Task 7: Infra summary placeholder
+
+**Objective:** Proxmox monitoring v0와 연결될 홈 요약 영역을 만든다.
+
+**Files:**
+- Create: `frontend/components/infra/InfraSummaryPanel.tsx`
+- Create: `frontend/components/infra/ProxmoxSummaryCard.tsx`
+
+**Acceptance criteria:**
+- live/snapshot/mock source badge
+- critical 우선 정렬
+- `/infra/proxmox`로 이동 link
+
+---
+
+### Task 8: Backend live workflow summary API
+
+**Objective:** frontend mock event stream을 backend live/snapshot API 계약으로 전환할 수 있게 한다.
+
+**Files:**
+- Create: `backend/src/control/control.module.ts`
+- Create: `backend/src/control/control.controller.ts`
+- Create: `backend/src/control/control.service.ts`
+- Create: `backend/src/control/workflow-events.gateway.ts`
+- Modify: `backend/src/app.module.ts`
+
+**Endpoints:**
+
+```text
+GET /control/summary
+GET /control/workflows/active
+WS  /control/events
+```
+
+**Response:**
+
+```ts
+type ControlSummary = {
+  activeWorkflow: WorkflowSummary | null;
+  sisters: SisterActivityLaneState[];
+  events: WorkflowEvent[];
+  infra: InfraSummary;
+  approvals: ApprovalItem[];
+  source: 'live' | 'snapshot' | 'mock' | 'fallback';
+  updatedAt: string;
+};
+```
+
+**Verification:**
+
+```bash
+cd backend
+npm test -- control
+npm run build
+```
+
+---
+
+### Task 9: API client 연결
+
+**Objective:** frontend가 `/control/summary`를 읽고 실패 시 fallback mock을 쓴다.
+
+**Files:**
+- Create: `frontend/lib/control/api.ts`
+- Modify: `frontend/app/(control)/page.tsx`
+
+**Acceptance criteria:**
+- API 실패 시 fallback 표시
+- fallback임을 UI에 명확히 표시
+- loading/error/empty 상태 있음
+
+---
+
+### Task 10: QA 문서 작성
+
+**Objective:** 다랑이가 검증할 QA checklist를 만든다.
+
+**Files:**
+- Create: `.plans/rebuild-from-scratch/qa-checklist.md`
+
+**Checks:**
+- iPhone viewport
+- source badge 정확성
+- gateway standby != down
+- mock/fallback 구분
+- PLAN approval gate 표시
+- build/lint pass
+
+---
+
+## 7. Approval Gates
+
+### Gate A — Rebuild plan approval
+
+지금 단계. 자기야가 이 PLAN을 승인해야 구현 시작 가능.
+
+### Gate B — Frontend v0 implementation
+
+허용:
+- frontend route/component 추가
+- mock/static data
+- no DB migration
+- no deploy
+
+### Gate C — Backend API v0
+
+허용:
+- read-only summary endpoint
+- mock/fallback service
+- no DB migration
+
+### Gate D — Proxmox integration
+
+별도 Proxmox monitoring PLAN과 연결.
+
+### Gate E — Deploy
+
+L3. 별도 승인 필요.
+
+---
+
+## 8. Rollback Plan
+
+- feature branch에서 작업한다.
+- 기존 `main`과 production route는 건드리지 않는다.
+- 새 route가 문제면 branch 폐기 또는 route 제거.
+- 배포 전까지 기존 사이트 영향 없음.
+
+---
+
+## 9. Open Questions
+
+1. 이름을 계속 `하나랑 대시보드`로 둘지, `하나랑 Control Center`로 바꿀지
+2. 첫 화면을 `/`로 교체할지, `/control`에서 먼저 검증할지
+3. 기존 오피스/등축 UI를 완전히 버릴지, 나중에 `Agents` 화면의 보조 시각화로 남길지
+4. 로그인/권한을 유지할지, 자기야 개인망 전용으로 단순화할지
+
+## 10. 이랑이 추천
+
+- 이름: `하나랑 Live Workboard` 또는 `하나랑 Control Center`
+- 메인 서비스: 4자매 작업 과정 실시간 화면
+- 구현 시작 route: `/control` 또는 `/live`
+- 기존 `/`는 당장 유지
+- v0는 mock event stream으로 “작업 과정이 보이는 화면”부터 완성
+- 이후 backend `/control/summary`, `/control/events` 연결
+- 마지막에 `/`를 새 live 화면으로 교체
+
+이 방식이면 자기야가 원하는 “4자매가 일하는 걸 실시간으로 보는 메인 서비스”를 먼저 만들고, 인프라/프로젝트 관제는 그 옆에 붙일 수 있어.

.plans/rebuild-from-scratch/builder-report-v0.md

@@ -0,0 +1,57 @@
+# Narang Builder Report — Live Workboard v0
+
+## Scope Executed
+
+- Plan: `.plans/rebuild-from-scratch/PLAN.md`
+- Task: Frontend live workboard skeleton
+- Scope: mock event stream 기반 4자매 작업 과정 메인 화면 구현
+
+## Files Changed
+
+- `frontend/app/page.tsx`
+  - 기존 사무실 메인 화면을 Live Workboard 메인 화면으로 교체
+- `frontend/app/control/page.tsx`
+  - `/control` route에서도 같은 Live Workboard 확인 가능
+- `frontend/components/common/Sidebar.tsx`
+  - nav에 `Live`, `Control` 항목 추가
+- `frontend/components/live/LiveWorkboard.tsx`
+  - 메인 Live Workboard container
+  - phase strip, 4자매 lane, active focus, timeline, v0 scope note 구성
+- `frontend/components/live/SisterActivityLane.tsx`
+  - 하랑/나랑/다랑/이랑 activity lane card
+- `frontend/components/live/WorkflowTimeline.tsx`
+  - mock event stream timeline
+- `frontend/components/live/ActiveTaskFocus.tsx`
+  - 선택 이벤트 상세와 approval/risk panel
+- `frontend/lib/control/types.ts`
+  - Live Workboard 타입 정의
+- `frontend/lib/control/mock-events.ts`
+  - v0 mock workflow/sister/event/approval data
+
+## Verification
+
+- `npm run lint -- components/live app/control app/page.tsx lib/control components/common/Sidebar.tsx`: PASS
+- `npm run build`: PASS
+- `curl -I http://localhost:3004/`: HTTP 200 during dev server smoke test
+- Browser accessibility snapshot: `/`에 Live Workboard, 4자매 lane, Workflow Timeline, Active Task Focus 확인
+
+## Known Existing Issues
+
+- `npm run lint` 전체 실행은 기존 파일들의 React 19 lint rule 위반 때문에 FAIL.
+- 새로 추가/수정한 Live Workboard 관련 파일만 대상으로 한 lint는 PASS.
+- 기존 오류 위치 예시:
+  - `components/office-room/SisterDetailPanel.tsx`
+  - `components/rails/FileViewerModal.tsx`
+  - `components/rails/SubTaskDetailDrawer.tsx`
+  - `components/rails/TransitionsTimeline.tsx`
+
+## Risks / Notes
+
+- 현재 데이터는 `source: mock`으로 명확히 표시됨.
+- 아직 real Socket.IO event stream은 연결하지 않음.
+- production deploy는 수행하지 않음.
+- DB/Prisma/Nginx/systemd 변경 없음.
+
+## Ready for Darang Review
+
+yes

.plans/rebuild-from-scratch/darang-review-v0.md

@@ -0,0 +1,59 @@
+# Darang Review Report — Live Workboard v0
+
+## Verdict
+
+PASS WITH IMPORTANT NOTES
+
+## Spec Compliance
+
+- [x] 메인 화면의 핵심을 4자매 작업 과정 실시간 시각화로 변경했다.
+- [x] 하랑/나랑/다랑/이랑 activity lane을 구현했다.
+- [x] Workflow Timeline을 구현했다.
+- [x] Active Task Focus를 구현했다.
+- [x] Approval / Risk side panel을 구현했다.
+- [x] `source: mock · v0`를 UI에 명확히 표시했다.
+- [x] `/` 메인 화면과 `/control` route에서 Live Workboard를 볼 수 있다.
+- [x] DB migration, 배포, 인프라 변경 없이 frontend v0 범위만 수행했다.
+
+## Critical Issues
+
+없음.
+
+## Important Issues
+
+1. 전체 `npm run lint`는 기존 legacy 파일 오류 때문에 실패한다.
+   - 새 파일/수정 파일 대상 lint는 PASS.
+   - build는 PASS.
+2. 브라우저 vision 검증은 인증 상태 차이 때문에 로그인 화면을 보기도 했다.
+   - accessibility snapshot과 curl smoke에서는 `/` route가 정상 응답하고 Live Workboard 구조가 확인됐다.
+   - 실제 운영 계정 로그인 후 시각 QA가 한 번 더 필요하다.
+
+## Minor Issues
+
+- `/control`과 `/`가 같은 화면을 보여준다. v1에서 `/control`을 상세 관제 route로 분리할지 결정 필요.
+- mock event 자동 회전은 데모용이다. 실제 event stream 연결 시 선택 이벤트 유지 정책을 다시 정해야 한다.
+
+## Verification Checked
+
+- `npm run lint -- components/live app/control app/page.tsx lib/control components/common/Sidebar.tsx`: PASS
+- `npm run build`: PASS
+- `curl -I http://localhost:3004/`: PASS, HTTP 200
+- browser snapshot: PASS, Live Workboard 주요 섹션 확인
+
+## Deployment Risk
+
+Low for local/frontend code.
+
+이유:
+- frontend-only 변경
+- DB/인프라/배포 없음
+- 기존 office 컴포넌트 삭제 없음
+- production 반영은 아직 별도 승인 필요
+
+## Required Fixes Before Proceeding
+
+없음.
+
+## Recommended Next Step
+
+v1 전에 먼저 자기야가 화면 방향을 확인한다. 방향이 맞으면 다음 task는 backend event contract (`GET /control/summary`, `WS /control/events`) 설계/구현이다.

.plans/sprints/SPRINT-017.md

@@ -0,0 +1,212 @@
+# SPRINT-017: `/office` 모바일 화면 전면 개편
+
+## 목표
+`/office`를 데스크톱 축소판이 아니라 **모바일 전용 운영 화면**으로 다시 정리해. 이번 Sprint의 성공 기준은 단순 반응형이 아니야. `360px`, `390px` 첫 화면에서 운영자가 바로 읽어야 할 정보가 세로 흐름으로 보이고, direct chat, pipeline, health, context가 모바일 기준으로 다시 배치되어야 해.
+
+## 이번 Sprint의 한 줄 정의
+`main`에 이미 있는 `/office` 구현을 기준으로, **새 API 없이** `frontend/app/office/page.tsx`와 `frontend/components/office/*`의 모바일 IA와 상태 표현을 다시 잠근다.
+
+## 배경
+현재 `main` 구현은 데스크톱 기준 구조가 먼저 잡혀 있어.
+
+### 현재 구현에서 확인된 문제
+1. `frontend/components/office/OfficeScene.tsx`
+   - `aspect-ratio: 800 / 460` 고정 씬이라 `mobile(<768)`에서 데스크톱 축소판처럼 보인다.
+2. `frontend/app/office/page.tsx`
+   - 헤더 아래에 모바일 전용 summary hero가 없다.
+   - `ChatArea`가 `520px`, 모바일에서 `460px` 고정 높이라 세로 흐름을 끊는다.
+   - 핵심 정보가 `OfficeScene`, `ContextPanel`, 하단 패널로 흩어져 첫 viewport 우선순위가 없다.
+3. `frontend/components/office/ContextPanel.tsx`
+   - 선택 전에는 "에이전트를 선택하면 상세 정보가 표시됩니다"만 보여서 첫 진입 정보가 비어 있다.
+4. `frontend/components/office/PipelinePanel.tsx`
+   - `overflow-x: auto`와 `min-width` 카드에 기대고 있어 모바일에서 가로 스크롤이 전제된다.
+5. `frontend/components/office/ChatWorkspace.tsx`
+   - direct chat이 모바일 세로 흐름보다 데스크톱 3열 구조에 가깝다.
+   - `JWT 없음`, `runtime 확인 중`, `empty`, `전송 실패`가 모바일에서 즉시 읽히는 구조가 아니다.
+
+## 참고 문서
+- 실행 개요: `.plans/OVERVIEW.md`
+- 이전 Sprint: `.plans/sprints/SPRINT-016.md`
+- 오피스 모바일 IA: `.plans/design/ui/office-dashboard-design.md`
+- 오피스 direct chat 모바일 기준: `.plans/design/ui/office-chat-design.md`
+- API 참고: `.plans/design/api-design.md`
+- 제품 PRD: `docs/product-specs/openclaw-office-dashboard-prd.md`
+
+## 기준 구현 경로
+- `frontend/app/office/page.tsx`
+- `frontend/components/office/OfficeScene.tsx`
+- `frontend/components/office/ContextPanel.tsx`
+- `frontend/components/office/ChatWorkspace.tsx`
+- `frontend/components/office/PipelinePanel.tsx`
+- `frontend/components/office/ServerHealthPanel.tsx`
+
+## breakpoint 기준
+- **360px:** 최소 지원 모바일 폭, 첫 viewport 가독성 기준
+- **390px:** 기본 모바일 기준 폭
+- **768px:** tablet 전환 시작점
+- **1280px+:** desktop 기존 구조 유지 기준
+
+## Sprint 범위
+### 포함
+- `mobile(<768)` 전용 상단 summary view-model 정의
+- 첫 viewport 정보 우선순위 재설계
+- compact sister status 블록 도입
+- focus / health / quick action 블록 도입
+- 모바일에서 office scene을 compact sister stack 또는 selectable status cards로 대체
+- direct chat 모바일 1열 레이아웃 재정의
+- pipeline / health 패널의 모바일 카드 흐름 재정의
+- `live / snapshot / fallback` 및 `loading / empty / error / stale` 표현 통일
+- `360 / 390 / 768 / 1280+` QA 기준 작성
+
+### 제외
+- 신규 백엔드 API
+- WebSocket reconnect 정책 재설계
+- 새 도메인 데이터 모델 추가
+- 별도 모바일 앱
+- 데스크톱 오피스 씬 컨셉 리뉴얼
+
+## mobile first success criteria
+### 첫 viewport 필수 정보 (`360px`, `390px`)
+첫 화면 안에서 아래가 모두 보여야 해.
+1. 4자매 상태 요약
+2. current focus
+3. health summary
+4. quick actions
+
+### 금지 사항
+- 가로 스크롤
+- 데스크톱 씬 축소판 유지
+- 선택 전 빈 상태로 시작하는 context 구조
+- 채팅 타임라인/입력창 잘림
+
+### 유지 사항
+- `live / snapshot / fallback` 의미 자체는 바꾸지 않는다
+- desktop(`1280px+`)에서는 기존 scene + side panel 구조를 기능적으로 유지한다
+- 기존 fetch 결과만 재조합하고 새 API는 추가하지 않는다
+
+## 실행 계획
+
+### T1. scope와 mobile IA 잠금
+**대상 문서**
+- `.plans/OVERVIEW.md`
+- `.plans/sprints/SPRINT-017.md`
+- `.plans/design/ui/office-dashboard-design.md`
+- `.plans/design/ui/office-chat-design.md`
+
+**done when**
+- 첫 viewport 필수 정보가 문서에 명시된다
+- 금지 사항과 유지 사항이 문서에 명시된다
+- 실제 구현 파일 경로가 교차 참조된다
+
+### T2. 모바일 상단 summary view-model 정의
+**대상 파일**
+- `frontend/app/office/page.tsx`
+
+**작업**
+- 기존 sisters / ops / server 데이터를 재조합해 모바일 summary에 필요한 값을 만든다
+- 선택 전에도 빈 화면이 아니라 기본 summary 콘텐츠가 먼저 보이게 한다
+
+**done when**
+- sister status 집계가 계산된다
+- current focus가 상단에서 바로 보인다
+- health summary와 quick action 대상이 함께 계산된다
+
+### T3. `/office` 레이아웃을 mobile-first 세로 스택으로 재배치
+**대상 파일**
+- `frontend/app/office/page.tsx`
+
+**작업**
+- 모바일에서는 `summary hero → compact sister status → focus/health/action block → panel sections` 순서로 재구성한다
+- desktop(`1280px+`)에서만 기존 scene + context + bottom panels 구조를 유지한다
+
+**done when**
+- `360px`, `390px` 첫 viewport에서 핵심 정보 4종이 읽힌다
+- 페이지 전체에 가로 스크롤이 없다
+- desktop 구조가 기능적으로 유지된다
+
+### T4. scene / context 모바일 대체
+**대상 파일**
+- `frontend/components/office/OfficeScene.tsx`
+- `frontend/components/office/ContextPanel.tsx`
+
+**작업**
+- 모바일에서는 `800x460` 씬을 그대로 축소하지 않는다
+- compact sister stack 또는 selectable status cards로 바꾼다
+- context는 별도 우측 패널이 아니라 인라인 상세, accordion, sheet 중 하나로 흡수한다
+
+**done when**
+- 선택 없이도 기본 context가 보인다
+- sister 선택과 상세 확인이 세로 흐름 안에서 끝난다
+- 모바일에서 scene은 상징이 아니라 정보 전달 수단이 된다
+
+### T5. direct chat 모바일 1열 재정렬
+**대상 파일**
+- `frontend/components/office/ChatWorkspace.tsx`
+
+**작업**
+- 자매 전환, runtime badge, 타임라인, composer, 보조 상태를 한 컬럼 흐름으로 재배치한다
+- 고정 높이 의존을 줄인다
+- `JWT 없음`, `empty`, `전송 실패`, `runtime 확인 중` 상태를 상단 또는 입력 근처에서 즉시 읽히게 한다
+
+**done when**
+- `360px`, `390px`에서 메시지, 입력창, 상태 라벨이 겹치지 않는다
+- send disabled 이유가 숨겨지지 않는다
+- `user / assistant / tool` 메시지 구분이 유지된다
+
+### T6. pipeline / health 모바일 카드화
+**대상 파일**
+- `frontend/components/office/PipelinePanel.tsx`
+- `frontend/components/office/ServerHealthPanel.tsx`
+
+**작업**
+- pipeline은 가로 노드열 대신 세로 단계 카드로 재배치한다
+- health는 summary 우선, 상세는 확장 또는 후순위 카드로 정리한다
+
+**done when**
+- 모바일에서 가로 스크롤이 없다
+- active task, focus, review loop, deploy state가 1~2스크린 안에 파악된다
+- online count와 source badge가 유지된다
+
+### T7. 상태 라벨 통일
+**대상 파일**
+- `frontend/app/office/page.tsx`
+- `frontend/components/office/OfficeScene.tsx`
+- `frontend/components/office/ChatWorkspace.tsx`
+- `frontend/components/office/PipelinePanel.tsx`
+- `frontend/components/office/ServerHealthPanel.tsx`
+
+**작업**
+- `live / snapshot / fallback` 라벨을 모바일 기준으로 짧게 통일한다
+- `loading / empty / error / stale` 표현을 패널 간 같은 톤으로 맞춘다
+
+**done when**
+- source 의미가 첫 화면과 각 패널에서 같은 단어로 보인다
+- `empty`와 `error`가 다른 문구로 표현된다
+- `fallback` 의미가 사라지지 않는다
+
+### T8. breakpoint QA
+**산출물**
+- `.plans/qa/SPRINT-017-review-1.md` 이상
+
+**작업**
+- `360 / 390 / 768 / 1280+` 실브라우저 체크
+- 첫 viewport 정보 충족 여부와 horizontal scroll 부재 확인
+
+**done when**
+- breakpoint별 결과가 분리 기록된다
+- blocker / warning / follow-up이 분리된다
+- direct chat, pipeline, health, context 재배치 검증이 남는다
+
+## 완료 기준
+- `360px`, `390px` 첫 화면에서 4자매 상태, current focus, health summary, quick actions를 모두 읽을 수 있다
+- `mobile(<768)`에서 데스크톱 축소판이 사라진다
+- `ContextPanel` 선택 의존 구조가 모바일 기본 흐름 안으로 흡수된다
+- `PipelinePanel`과 `ServerHealthPanel`이 가로 스크롤 없이 읽힌다
+- `ChatWorkspace`가 모바일 direct chat로 동작하고, `JWT 없음 / empty / error / runtime 확인 중` 상태가 즉시 읽힌다
+- `live / snapshot / fallback` 의미가 유지된 채 문구가 통일된다
+
+## 핸드오프 메모
+- 하랑이는 scope와 우선순위를 잠근다
+- 나랑이는 `page.tsx`와 `office/*` 모바일 IA를 구현한다
+- 다랑이는 `360 / 390 / 768 / 1280+` 기준으로 실브라우저 QA를 남긴다
+- 이번 Sprint는 "안정화 전체"가 아니라 **모바일 운영 화면 재구성**까지로 좁게 끝낸다

backend/.claude/state/tool-failure-counter.txt

@@ -0,0 +1 @@
+1 1775809467

backend/src/app.module.ts

@@ -19,6 +19,7 @@ import { CostsModule } from './costs/costs.module';
 import { GiteaSyncModule } from './gitea-sync/gitea-sync.module';
 import { SettingsModule } from './settings/settings.module';
 import { DashboardModule } from './dashboard/dashboard.module';
+import { RailsModule } from './rails/rails.module';
 
 @Module({
   imports: [
@@ -40,6 +41,7 @@ import { DashboardModule } from './dashboard/dashboard.module';
     GiteaSyncModule,
     SettingsModule,
     DashboardModule,
+    RailsModule,
   ],
   controllers: [AppController],
   providers: [AppService],

backend/src/auth/auth-cookies.ts

@@ -0,0 +1,128 @@
+import { randomBytes, timingSafeEqual } from 'crypto';
+import type { CookieOptions, Request, Response } from 'express';
+
+export const ACCESS_TOKEN_COOKIE = 'hanarang_access_token';
+export const REFRESH_TOKEN_COOKIE = 'hanarang_refresh_token';
+export const CSRF_TOKEN_COOKIE = 'hanarang_csrf_token';
+
+const ACCESS_TOKEN_MAX_AGE_MS = 15 * 60 * 1000;
+const REFRESH_TOKEN_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
+
+function isHttpsRequest(req?: Request): boolean {
+  const forwardedProto = req?.headers['x-forwarded-proto'];
+  const protocol = Array.isArray(forwardedProto)
+    ? forwardedProto[0]
+    : forwardedProto;
+
+  return (
+    process.env.NODE_ENV === 'production' ||
+    req?.secure === true ||
+    protocol === 'https'
+  );
+}
+
+function baseCookieOptions(req?: Request): CookieOptions {
+  return {
+    path: '/',
+    secure: isHttpsRequest(req),
+  };
+}
+
+export function parseCookieHeader(
+  header?: string | string[],
+): Record<string, string> {
+  const raw = Array.isArray(header) ? header.join(';') : header;
+  if (!raw) return {};
+
+  return raw
+    .split(';')
+    .map((part) => part.trim())
+    .filter((part) => part.length > 0)
+    .reduce<Record<string, string>>((cookies, part) => {
+      const eqIndex = part.indexOf('=');
+      if (eqIndex === -1) return cookies;
+
+      const key = decodeURIComponent(part.slice(0, eqIndex).trim());
+      const value = decodeURIComponent(part.slice(eqIndex + 1).trim());
+      cookies[key] = value;
+      return cookies;
+    }, {});
+}
+
+export function getCookieValue(
+  req: Pick<Request, 'headers'>,
+  name: string,
+): string | undefined {
+  return parseCookieHeader(req.headers.cookie)[name];
+}
+
+export function generateCsrfToken(): string {
+  return randomBytes(32).toString('hex');
+}
+
+export function hasValidCsrfToken(req: Request): boolean {
+  const cookieToken = getCookieValue(req, CSRF_TOKEN_COOKIE);
+  const headerToken = req.headers['x-csrf-token'];
+  const requestToken = Array.isArray(headerToken) ? headerToken[0] : headerToken;
+
+  if (!cookieToken || !requestToken) return false;
+
+  const cookieBuffer = Buffer.from(cookieToken);
+  const requestBuffer = Buffer.from(requestToken);
+
+  if (cookieBuffer.length !== requestBuffer.length) return false;
+
+  try {
+    return timingSafeEqual(cookieBuffer, requestBuffer);
+  } catch {
+    return false;
+  }
+}
+
+export function setAuthCookies(
+  res: Response,
+  req: Request,
+  tokens: { accessToken: string; refreshToken: string },
+  csrfToken = generateCsrfToken(),
+) {
+  res.cookie(ACCESS_TOKEN_COOKIE, tokens.accessToken, {
+    ...baseCookieOptions(req),
+    httpOnly: true,
+    sameSite: 'lax',
+    maxAge: ACCESS_TOKEN_MAX_AGE_MS,
+  });
+
+  res.cookie(REFRESH_TOKEN_COOKIE, tokens.refreshToken, {
+    ...baseCookieOptions(req),
+    httpOnly: true,
+    sameSite: 'strict',
+    maxAge: REFRESH_TOKEN_MAX_AGE_MS,
+  });
+
+  res.cookie(CSRF_TOKEN_COOKIE, csrfToken, {
+    ...baseCookieOptions(req),
+    httpOnly: false,
+    sameSite: 'strict',
+    maxAge: REFRESH_TOKEN_MAX_AGE_MS,
+  });
+
+  return csrfToken;
+}
+
+export function clearAuthCookies(res: Response, req?: Request) {
+  res.clearCookie(ACCESS_TOKEN_COOKIE, {
+    ...baseCookieOptions(req),
+    httpOnly: true,
+    sameSite: 'lax',
+  });
+  res.clearCookie(REFRESH_TOKEN_COOKIE, {
+    ...baseCookieOptions(req),
+    httpOnly: true,
+    sameSite: 'strict',
+  });
+  res.clearCookie(CSRF_TOKEN_COOKIE, {
+    ...baseCookieOptions(req),
+    httpOnly: false,
+    sameSite: 'strict',
+  });
+}

backend/src/auth/auth.controller.ts

@@ -1,17 +1,30 @@
 import {
-  Controller,
-  Post,
-  Get,
+  BadRequestException,
   Body,
-  Headers,
+  Controller,
+  Get,
+  HttpCode,
+  Post,
+  Req,
+  Res,
+  UnauthorizedException,
   UseGuards,
   Request,
-  BadRequestException,
 } from '@nestjs/common';
-import type { Request as ExpressRequest } from 'express';
-import { AuthService, LoginDto } from './auth.service';
-import { JwtGuard } from './jwt.guard';
+import type {
+  Request as ExpressRequest,
+  Response as ExpressResponse,
+} from 'express';
 import { Throttle, ThrottlerGuard } from '@nestjs/throttler';
+import { AuthService, LoginDto } from './auth.service';
+import {
+  getCookieValue,
+  hasValidCsrfToken,
+  setAuthCookies,
+  clearAuthCookies,
+  REFRESH_TOKEN_COOKIE,
+} from './auth-cookies';
+import { JwtGuard } from './jwt.guard';
 
 interface AuthenticatedRequest extends ExpressRequest {
   user: { userId: number };
@@ -21,17 +34,58 @@ interface AuthenticatedRequest extends ExpressRequest {
 export class AuthController {
   constructor(private readonly authService: AuthService) {}
 
+  @HttpCode(200)
   @UseGuards(ThrottlerGuard)
   @Throttle({ default: { limit: 5, ttl: 60000 } })
   @Post('login')
-  login(@Body() dto: LoginDto) {
-    return this.authService.login(dto);
+  async login(
+    @Body() dto: LoginDto,
+    @Req() req: ExpressRequest,
+    @Res({ passthrough: true }) res: ExpressResponse,
+  ) {
+    const tokens = await this.authService.login(dto);
+    setAuthCookies(res, req, tokens);
+
+    return {
+      username: tokens.username,
+      role: tokens.role,
+    };
   }
 
+  @HttpCode(200)
+  @UseGuards(ThrottlerGuard)
+  @Throttle({ default: { limit: 3, ttl: 60000 } })
   @Post('refresh')
-  refresh(@Headers('x-refresh-token') token: string) {
+  async refresh(
+    @Req() req: ExpressRequest,
+    @Res({ passthrough: true }) res: ExpressResponse,
+  ) {
+    const cookieToken = getCookieValue(req, REFRESH_TOKEN_COOKIE);
+    const headerToken = req.headers['x-refresh-token'];
+    const token = cookieToken ?? (Array.isArray(headerToken) ? headerToken[0] : headerToken);
+
     if (!token) throw new BadRequestException('Refresh token required');
-    return this.authService.refresh(token);
+    if (cookieToken && !hasValidCsrfToken(req)) {
+      throw new UnauthorizedException('Invalid CSRF token');
+    }
+
+    const tokens = await this.authService.refresh(token);
+    setAuthCookies(res, req, tokens);
+
+    return {
+      username: tokens.username,
+      role: tokens.role,
+    };
+  }
+
+  @HttpCode(200)
+  @Post('logout')
+  logout(
+    @Req() req: ExpressRequest,
+    @Res({ passthrough: true }) res: ExpressResponse,
+  ) {
+    clearAuthCookies(res, req);
+    return { ok: true };
   }
 
   @UseGuards(JwtGuard)

backend/src/auth/jwt.strategy.ts

@@ -1,7 +1,9 @@
 import { Injectable, UnauthorizedException } from '@nestjs/common';
-import { PassportStrategy } from '@nestjs/passport';
-import { ExtractJwt, Strategy } from 'passport-jwt';
 import { ConfigService } from '@nestjs/config';
+import { PassportStrategy } from '@nestjs/passport';
+import type { Request } from 'express';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+import { ACCESS_TOKEN_COOKIE, getCookieValue } from './auth-cookies';
 
 export interface JwtPayload {
   sub: number;
@@ -9,13 +11,21 @@ export interface JwtPayload {
   role: string;
 }
 
+function cookieTokenExtractor(req?: Request): string | null {
+  if (!req) return null;
+  return getCookieValue(req, ACCESS_TOKEN_COOKIE) ?? null;
+}
+
 @Injectable()
 export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   constructor(config: ConfigService) {
     const secret = config.get<string>('JWT_SECRET');
     if (!secret) throw new Error('JWT_SECRET not set');
     super({
-      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      jwtFromRequest: ExtractJwt.fromExtractors([
+        cookieTokenExtractor,
+        ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ]),
       ignoreExpiration: false,
       secretOrKey: secret,
     });

backend/src/events/events.gateway.ts

@@ -11,6 +11,7 @@ import { Logger } from '@nestjs/common';
 import { JwtService } from '@nestjs/jwt';
 import { ConfigService } from '@nestjs/config';
 import { OnEvent } from '@nestjs/event-emitter';
+import { ACCESS_TOKEN_COOKIE, parseCookieHeader } from '../auth/auth-cookies';
 
 interface SocketUserPayload {
   username?: string;
@@ -50,12 +51,17 @@ export class EventsGateway
 
   handleConnection(client: SocketWithUser) {
     // JWT 인증 필수 — 토큰 없거나 유효하지 않으면 disconnect
+    const authHeader = client.handshake.headers.authorization;
+    const tokenFromHeader = Array.isArray(authHeader)
+      ? authHeader[0]?.replace('Bearer ', '')
+      : authHeader?.replace('Bearer ', '');
+    const tokenFromCookie = parseCookieHeader(client.handshake.headers.cookie)[
+      ACCESS_TOKEN_COOKIE
+    ];
     const token =
-      (client.handshake.auth?.token as string) ??
-      (client.handshake.headers.authorization as string)?.replace(
-        'Bearer ',
-        '',
-      );
+      (client.handshake.auth?.token as string | undefined) ??
+      tokenFromHeader ??
+      tokenFromCookie;
 
     if (!token) {
       this.logger.debug(`WS rejected (no token): ${client.id}`);
@@ -108,6 +114,33 @@ export class EventsGateway
     this.broadcastActivity(record);
   }
 
+  // ── Rails orchestrator events ──────────────────────────────────────
+
+  @OnEvent('rails.pipelines.snapshot')
+  handleRailsPipelinesSnapshot(payload: { pipelines: unknown[] }) {
+    this.server.emit('rails:pipelines', {
+      pipelines: payload.pipelines,
+      ts: Date.now(),
+    });
+  }
+
+  @OnEvent('rails.pipeline.updated')
+  handleRailsPipelineUpdated(payload: { pipeline: unknown }) {
+    this.server.emit('rails:pipeline:updated', {
+      pipeline: payload.pipeline,
+      ts: Date.now(),
+    });
+  }
+
+  @OnEvent('rails.subtasks.updated')
+  handleRailsSubTasksUpdated(payload: { pipelineId: string; tree: unknown }) {
+    this.server.emit('rails:subtasks', {
+      pipelineId: payload.pipelineId,
+      tree: payload.tree,
+      ts: Date.now(),
+    });
+  }
+
   /** 연결된 클라이언트 수 */
   getClientCount(): number {
     return this.server?.sockets?.sockets?.size ?? 0;

backend/src/main.ts

@@ -1,7 +1,14 @@
 import { NestFactory } from '@nestjs/core';
 import { Logger, ValidationPipe } from '@nestjs/common';
-import { AppModule } from './app.module';
+import type { NextFunction, Request, Response } from 'express';
 import helmet from 'helmet';
+import { AppModule } from './app.module';
+import {
+  ACCESS_TOKEN_COOKIE,
+  REFRESH_TOKEN_COOKIE,
+  getCookieValue,
+  hasValidCsrfToken,
+} from './auth/auth-cookies';
 
 function getAllowedOrigins() {
   return (process.env.CORS_ORIGINS ?? 'http://localhost:3004')
@@ -10,10 +17,40 @@ function getAllowedOrigins() {
     .filter((origin): origin is string => origin.length > 0);
 }
 
+function shouldBypassCsrf(req: Request): boolean {
+  if (['GET', 'HEAD', 'OPTIONS'].includes(req.method.toUpperCase())) {
+    return true;
+  }
+
+  if (req.path === '/api/auth/login') {
+    return true;
+  }
+
+  const hasAuthorizationHeader = Boolean(req.headers.authorization);
+  if (hasAuthorizationHeader) {
+    return true;
+  }
+
+  const hasAuthCookie = Boolean(
+    getCookieValue(req, ACCESS_TOKEN_COOKIE) ||
+      getCookieValue(req, REFRESH_TOKEN_COOKIE),
+  );
+
+  return !hasAuthCookie;
+}
+
 async function bootstrap() {
   const app = await NestFactory.create(AppModule);
 
   app.use(helmet());
+  app.use((req: Request, res: Response, next: NextFunction) => {
+    if (shouldBypassCsrf(req) || hasValidCsrfToken(req)) {
+      next();
+      return;
+    }
+
+    res.status(403).json({ message: 'Invalid CSRF token' });
+  });
 
   const allowedOrigins = getAllowedOrigins();
 
@@ -29,6 +66,12 @@ async function bootstrap() {
       }
     },
     methods: ['GET', 'POST', 'PATCH', 'PUT', 'DELETE', 'OPTIONS'],
+    allowedHeaders: [
+      'Content-Type',
+      'Authorization',
+      'X-CSRF-Token',
+      'X-Refresh-Token',
+    ],
     credentials: true,
   });
 

backend/src/rails/rails.controller.ts

@@ -0,0 +1,117 @@
+import {
+  Body,
+  Controller,
+  Get,
+  HttpException,
+  HttpStatus,
+  Param,
+  Post,
+  Query,
+  UseGuards,
+} from '@nestjs/common';
+import { RailsService } from './rails.service';
+import { JwtGuard } from '../auth/jwt.guard';
+
+@Controller('api/rails')
+@UseGuards(JwtGuard)
+export class RailsController {
+  constructor(private readonly rails: RailsService) {}
+
+  @Get('health')
+  health() {
+    return this.rails.health();
+  }
+
+  @Get('pipelines')
+  async listPipelines(@Query('limit') limit?: string) {
+    const n = limit ? parseInt(limit, 10) : 20;
+    const pipelines = await this.rails.listPipelines(Number.isFinite(n) ? n : 20);
+    return { pipelines };
+  }
+
+  @Get('pipelines/:id')
+  async pipelineDetail(@Param('id') id: string) {
+    const detail = await this.rails.getPipeline(id);
+    if (!detail) {
+      throw new HttpException('pipeline not found', HttpStatus.NOT_FOUND);
+    }
+    return detail;
+  }
+
+  @Get('pipelines/:id/sub-tasks')
+  async subTaskTree(@Param('id') id: string) {
+    const tree = await this.rails.getSubTaskTree(id);
+    return { pipelineId: id, tree };
+  }
+
+  @Get('sub-tasks/:id')
+  async subTaskDetail(@Param('id') id: string) {
+    const detail = await this.rails.getSubTaskDetail(id);
+    if (!detail) {
+      throw new HttpException('sub-task not found', HttpStatus.NOT_FOUND);
+    }
+    return detail;
+  }
+
+  @Get('file-content')
+  async fileContent(@Query('url') url?: string) {
+    if (!url) {
+      throw new HttpException('url required', HttpStatus.BAD_REQUEST);
+    }
+    const content = await this.rails.fetchFileContent(url);
+    if (content === null) {
+      throw new HttpException('file not found or not allowed', HttpStatus.NOT_FOUND);
+    }
+    return { url, content };
+  }
+
+  @Get('transitions')
+  async transitions(
+    @Query('pipelineId') pipelineId?: string,
+    @Query('eventType') eventType?: string,
+    @Query('limit') limit?: string,
+  ) {
+    const opts: { pipelineId?: string; eventType?: string; limit?: number } = {};
+    if (pipelineId) opts.pipelineId = pipelineId;
+    if (eventType) opts.eventType = eventType;
+    if (limit) opts.limit = parseInt(limit, 10);
+    const transitions = await this.rails.listTransitions(opts);
+    return { transitions };
+  }
+
+  @Get('escalations')
+  async escalations(
+    @Query('pipelineId') pipelineId?: string,
+    @Query('resolved') resolved?: string,
+    @Query('limit') limit?: string,
+  ) {
+    const opts: { pipelineId?: string; resolved?: boolean; limit?: number } = {};
+    if (pipelineId) opts.pipelineId = pipelineId;
+    if (resolved === 'true') opts.resolved = true;
+    else if (resolved === 'false') opts.resolved = false;
+    if (limit) opts.limit = parseInt(limit, 10);
+    const escalations = await this.rails.listEscalations(opts);
+    return { escalations };
+  }
+
+  @Post('pipelines/start')
+  async start(
+    @Body() body: { project: string; requirements: string },
+  ) {
+    if (!body?.project || typeof body.project !== 'string') {
+      throw new HttpException('project required', HttpStatus.BAD_REQUEST);
+    }
+    return this.rails.startPipeline({
+      project: body.project,
+      requirements: body.requirements ?? '',
+    });
+  }
+
+  @Post('pipelines/:id/abort')
+  async abort(
+    @Param('id') id: string,
+    @Body() body: { reason?: string },
+  ) {
+    return this.rails.abortPipeline(id, body?.reason ?? 'aborted via dashboard');
+  }
+}

backend/src/rails/rails.module.ts

@@ -0,0 +1,14 @@
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { RailsService } from './rails.service';
+import { RailsController } from './rails.controller';
+import { RailsScheduler } from './rails.scheduler';
+import { AuthModule } from '../auth/auth.module';
+
+@Module({
+  imports: [ConfigModule, AuthModule],
+  controllers: [RailsController],
+  providers: [RailsService, RailsScheduler],
+  exports: [RailsService],
+})
+export class RailsModule {}

backend/src/rails/rails.scheduler.ts

@@ -0,0 +1,84 @@
+import { Injectable, Logger, OnModuleInit, OnModuleDestroy } from '@nestjs/common';
+import { EventEmitter2 } from '@nestjs/event-emitter';
+import { RailsService, type RailsPipelineSummary } from './rails.service';
+
+/**
+ * Polls rails every N seconds for active pipelines and emits events
+ * that the EventsGateway broadcasts over Socket.IO.
+ *
+ * Events emitted (via EventEmitter2):
+ *   rails.pipeline.updated  — single pipeline changed state
+ *   rails.pipelines.snapshot — full list snapshot
+ *   rails.subtasks.updated  — sub-task tree for an active pipeline
+ */
+@Injectable()
+export class RailsScheduler implements OnModuleInit, OnModuleDestroy {
+  private readonly logger = new Logger(RailsScheduler.name);
+  private readonly intervalMs = 2000;
+  private timer: NodeJS.Timeout | null = null;
+  private lastSnapshot = new Map<string, string>(); // id → state
+  private activePipelines = new Set<string>();
+
+  constructor(
+    private readonly rails: RailsService,
+    private readonly emitter: EventEmitter2,
+  ) {}
+
+  onModuleInit(): void {
+    this.logger.log(`Rails poller starting (interval ${this.intervalMs}ms)`);
+    this.start();
+  }
+
+  onModuleDestroy(): void {
+    if (this.timer) clearInterval(this.timer);
+  }
+
+  private start(): void {
+    this.timer = setInterval(() => {
+      this.tick().catch((err) => {
+        this.logger.warn(`poll error: ${(err as Error).message}`);
+      });
+    }, this.intervalMs);
+  }
+
+  private async tick(): Promise<void> {
+    const pipelines = await this.rails.listPipelines(50);
+
+    // Detect changes
+    const changed: RailsPipelineSummary[] = [];
+    for (const p of pipelines) {
+      const last = this.lastSnapshot.get(p.id);
+      if (last !== p.currentState) {
+        changed.push(p);
+        this.lastSnapshot.set(p.id, p.currentState);
+      }
+      // Track active (non-terminal)
+      if (!['done', 'aborted'].includes(p.currentState)) {
+        this.activePipelines.add(p.id);
+      } else {
+        this.activePipelines.delete(p.id);
+      }
+    }
+
+    // Emit full snapshot every tick (cheap, dashboards love fresh data)
+    this.emitter.emit('rails.pipelines.snapshot', { pipelines });
+
+    // Emit per-pipeline updates for changed ones
+    for (const p of changed) {
+      this.emitter.emit('rails.pipeline.updated', { pipeline: p });
+    }
+
+    // Fetch sub-task trees for active pipelines (throttled)
+    for (const id of this.activePipelines) {
+      try {
+        const tree = await this.rails.getSubTaskTree(id);
+        this.emitter.emit('rails.subtasks.updated', {
+          pipelineId: id,
+          tree,
+        });
+      } catch {
+        // ignore transient errors
+      }
+    }
+  }
+}

backend/src/rails/rails.service.ts

@@ -0,0 +1,208 @@
+import { Injectable, Logger } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+
+export interface RailsPipelineSummary {
+  id: string;
+  projectName: string;
+  currentState: string;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface RailsSubTaskNode {
+  id: string;
+  parentId: string | null;
+  role: string;
+  agentName: string;
+  title: string;
+  state: string;
+  complexityScore: number | null;
+  complexityTier: string | null;
+  model: string;
+  startedAt: string | null;
+  completedAt: string | null;
+  createdAt: string;
+  children: RailsSubTaskNode[];
+}
+
+export interface RailsPipelineDetail {
+  state: string;
+  context: Record<string, unknown>;
+  transitions: Array<{
+    fromState: string;
+    toState: string;
+    eventType: string;
+    timestamp: string;
+  }>;
+}
+
+/**
+ * Thin HTTP client that reads from hanarang-rails orchestrator API.
+ * The dashboard is a read-only consumer — it never writes to rails DB directly.
+ */
+@Injectable()
+export class RailsService {
+  private readonly logger = new Logger(RailsService.name);
+  private readonly baseUrl: string;
+
+  constructor(private readonly config: ConfigService) {
+    this.baseUrl = this.config.get<string>('RAILS_API_URL') ?? 'http://127.0.0.1:18800';
+  }
+
+  async listPipelines(limit = 20): Promise<RailsPipelineSummary[]> {
+    const data = await this.fetchJson<{ pipelines: RailsPipelineSummary[] }>(
+      `/pipelines?limit=${limit}`,
+    );
+    return data.pipelines ?? [];
+  }
+
+  async getPipeline(id: string): Promise<RailsPipelineDetail | null> {
+    try {
+      return await this.fetchJson<RailsPipelineDetail>(`/pipelines/${id}`);
+    } catch (err) {
+      this.logger.warn(`pipeline ${id} fetch failed: ${(err as Error).message}`);
+      return null;
+    }
+  }
+
+  async getSubTaskTree(pipelineId: string): Promise<RailsSubTaskNode[]> {
+    const data = await this.fetchJson<{ tree: RailsSubTaskNode[] }>(
+      `/api/pipelines/${pipelineId}/sub-tasks`,
+    );
+    return data.tree ?? [];
+  }
+
+  async getSubTaskDetail(id: string): Promise<unknown | null> {
+    try {
+      return await this.fetchJson(`/api/sub-tasks/${id}`);
+    } catch {
+      return null;
+    }
+  }
+
+  async listTransitions(opts: {
+    pipelineId?: string;
+    eventType?: string;
+    limit?: number;
+  }): Promise<unknown[]> {
+    const params = new URLSearchParams();
+    if (opts.pipelineId) params.set('pipelineId', opts.pipelineId);
+    if (opts.eventType) params.set('eventType', opts.eventType);
+    params.set('limit', String(opts.limit ?? 100));
+    const data = await this.fetchJson<{ transitions: unknown[] }>(
+      `/api/transitions?${params.toString()}`,
+    );
+    return data.transitions ?? [];
+  }
+
+  /**
+   * Fetch raw file content from a Git host. Restricted to an allowlist
+   * of hosts for SSRF safety.
+   *
+   * Allowlist is configured via env var GIT_RAW_ALLOWED_HOSTS — comma
+   * separated. Defaults to the hanarang-internal Gitea instance.
+   */
+  async fetchFileContent(rawUrl: string): Promise<string | null> {
+    const allowedHosts = (
+      this.config.get<string>('GIT_RAW_ALLOWED_HOSTS') ??
+      'git.nabomhalang.co.kr'
+    )
+      .split(',')
+      .map((h) => h.trim())
+      .filter(Boolean);
+
+    let parsed: URL;
+    try {
+      parsed = new URL(rawUrl);
+    } catch {
+      return null;
+    }
+    if (!allowedHosts.includes(parsed.host)) return null;
+
+    try {
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), 8000);
+      const res = await fetch(rawUrl, { signal: controller.signal });
+      clearTimeout(timer);
+      if (!res.ok) return null;
+      return await res.text();
+    } catch {
+      return null;
+    }
+  }
+
+  async listEscalations(opts: {
+    pipelineId?: string;
+    resolved?: boolean;
+    limit?: number;
+  }): Promise<unknown[]> {
+    const params = new URLSearchParams();
+    if (opts.pipelineId) params.set('pipelineId', opts.pipelineId);
+    if (opts.resolved !== undefined) params.set('resolved', String(opts.resolved));
+    params.set('limit', String(opts.limit ?? 50));
+    const data = await this.fetchJson<{ escalations: unknown[] }>(
+      `/api/escalations?${params.toString()}`,
+    );
+    return data.escalations ?? [];
+  }
+
+  async startPipeline(input: {
+    project: string;
+    requirements: string;
+  }): Promise<{ pipelineId: string; finalState: string; transitions: number }> {
+    return this.postJson('/pipelines/start', input);
+  }
+
+  async abortPipeline(id: string, reason: string): Promise<{ id: string; state: string }> {
+    return this.postJson(`/pipelines/${id}/abort`, { reason });
+  }
+
+  async health(): Promise<{ ok: boolean; service?: string }> {
+    try {
+      return await this.fetchJson('/health');
+    } catch {
+      return { ok: false };
+    }
+  }
+
+  private async fetchJson<T>(path: string): Promise<T> {
+    const url = `${this.baseUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 8000);
+    try {
+      const res = await fetch(url, { signal: controller.signal });
+      clearTimeout(timer);
+      if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`rails GET ${path} → ${res.status}: ${text.slice(0, 200)}`);
+      }
+      return (await res.json()) as T;
+    } catch (err) {
+      clearTimeout(timer);
+      throw err;
+    }
+  }
+
+  private async postJson<T>(path: string, body: unknown): Promise<T> {
+    const url = `${this.baseUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 600_000);
+    try {
+      const res = await fetch(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(body),
+        signal: controller.signal,
+      });
+      clearTimeout(timer);
+      if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`rails POST ${path} → ${res.status}: ${text.slice(0, 200)}`);
+      }
+      return (await res.json()) as T;
+    } catch (err) {
+      clearTimeout(timer);
+      throw err;
+    }
+  }
+}

backend/src/sisters/sister-detail.service.ts

@@ -1,7 +1,7 @@
 import { Injectable, Logger, NotFoundException } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
 import { PrismaService } from '../prisma/prisma.service';
 import { SshService } from './ssh.service';
-import { ConfigService } from '@nestjs/config';
 
 type SisterName = 'harang' | 'narang' | 'darang' | 'erang';
 
@@ -20,6 +20,15 @@ const SISTER_DESCRIPTIONS: Record<SisterName, string> = {
   erang: '인프라와 배포. 서버 관리, merge, 프로덕션 배포를 담당한다.',
 };
 
+function summarizeText(value?: string | null, maxLength = 120): string | null {
+  if (!value) return null;
+
+  const compact = value.replace(/\s+/g, ' ').trim();
+  if (!compact) return null;
+  if (compact.length <= maxLength) return compact;
+  return `${compact.slice(0, maxLength - 1)}…`;
+}
+
 @Injectable()
 export class SisterDetailService {
   private readonly logger = new Logger(SisterDetailService.name);
@@ -39,21 +48,36 @@ export class SisterDetailService {
         sister.ip,
         sister.user,
         sshKeyPath,
-        'WORKSPACE=~/.hermes/workspace; [ -d "$WORKSPACE" ] || WORKSPACE=~/.openclaw/workspace; cat "$WORKSPACE"/SOUL.md 2>/dev/null | head -60; echo "---AGENTS---"; cat "$WORKSPACE"/AGENTS.md 2>/dev/null | head -40',
+        'WORKSPACE=~/.hermes/workspace; [ -d "$WORKSPACE" ] || WORKSPACE=~/.openclaw/workspace; for FILE in SOUL.md AGENTS.md; do if [ -f "$WORKSPACE/$FILE" ]; then printf "%s|present|%s\n" "$FILE" "$(wc -l < "$WORKSPACE/$FILE" 2>/dev/null || echo 0)"; else printf "%s|missing|0\n" "$FILE"; fi; done',
       );
 
+      const files = result.stdout
+        .split('\n')
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0)
+        .map((line) => {
+          const [file, status, lineCount] = line.split('|');
+          return {
+            file,
+            status,
+            lineCount: Number.parseInt(lineCount ?? '0', 10) || 0,
+          };
+        });
+
       return {
         name,
         role: SISTER_ROLES[name],
         description: SISTER_DESCRIPTIONS[name],
-        raw: result.stdout || '(설정 파일 없음)',
+        files,
+        summary: `${files.filter((file) => file.status === 'present').length}/${files.length} protected config files detected`,
       };
     } catch {
       return {
         name,
         role: SISTER_ROLES[name],
         description: SISTER_DESCRIPTIONS[name],
-        raw: '(SSH 연결 불가)',
+        files: [],
+        summary: '(SSH 연결 불가)',
       };
     }
   }
@@ -70,21 +94,34 @@ export class SisterDetailService {
         'SESSION_DIR=~/.hermes/agents/main/sessions; [ -d "$SESSION_DIR" ] || SESSION_DIR=~/.openclaw/agents/main/sessions; ls -lt "$SESSION_DIR"/ 2>/dev/null | head -20 || echo ""',
       );
 
-      const lines = result.stdout
+      const sessions = result.stdout
         .split('\n')
-        .filter((l) => l && !l.startsWith('total'));
-      return lines
+        .filter((line) => line && !line.startsWith('total'))
         .map((line) => {
           const parts = line.trim().split(/\s+/);
+          const label = parts[parts.length - 1] ?? '';
+          const modified = parts.slice(5, 8).join(' ');
+          const size = parts[4] ?? '0';
+
           return {
-            name: parts[parts.length - 1] ?? '',
-            modified: parts.slice(5, 8).join(' '),
-            size: parts[4] ?? '0',
+            id: label,
+            label,
+            status: [modified, size !== '0' ? `${size}B` : null]
+              .filter((part): part is string => Boolean(part))
+              .join(' · '),
           };
         })
-        .filter((s) => s.name && s.name !== '');
+        .filter((session) => session.label.length > 0);
+
+      return {
+        sessions,
+        total: sessions.length,
+      };
     } catch {
-      return [];
+      return {
+        sessions: [],
+        total: 0,
+      };
     }
   }
 
@@ -100,15 +137,25 @@ export class SisterDetailService {
         'AGENT_DIR=~/.hermes/workspace/agents; [ -d "$AGENT_DIR" ] || AGENT_DIR=~/.openclaw/workspace/agents; ls "$AGENT_DIR"/ 2>/dev/null || echo ""',
       );
 
-      const agents = result.stdout
+      const items = result.stdout
         .split('\n')
-        .filter((l) => l.trim().endsWith('.md'));
-      return agents.map((a) => ({
-        name: a.trim().replace('.md', ''),
-        file: a.trim(),
-      }));
+        .map((line) => line.trim())
+        .filter((line) => line.endsWith('.md'))
+        .map((file) => ({
+          id: file.replace('.md', ''),
+          label: file.replace('.md', ''),
+          file,
+        }));
+
+      return {
+        items,
+        total: items.length,
+      };
     } catch {
-      return [];
+      return {
+        items: [],
+        total: 0,
+      };
     }
   }
 
@@ -122,7 +169,16 @@ export class SisterDetailService {
       }),
       this.prisma.activityLog.count({ where: { sisterId: sister.id } }),
     ]);
-    return { items: logs, total };
+
+    return {
+      items: logs.map((log) => ({
+        id: log.id,
+        action: log.action,
+        detail: summarizeText(log.detail),
+        createdAt: log.createdAt,
+      })),
+      total,
+    };
   }
 
   async getOrgData() {
@@ -157,8 +213,8 @@ export class SisterDetailService {
   }
 
   private getKeyPath(): string {
-    const p = this.config.get<string>('SSH_KEY_PATH');
-    if (!p) throw new Error('SSH_KEY_PATH is not set');
-    return p;
+    const path = this.config.get<string>('SSH_KEY_PATH');
+    if (!path) throw new Error('SSH_KEY_PATH is not set');
+    return path;
   }
 }

backend/src/sisters/sisters.controller.ts

@@ -8,14 +8,17 @@ import {
   UseGuards,
 } from '@nestjs/common';
 import type { Response } from 'express';
-import { SistersService } from './sisters.service';
-import { SisterDetailService } from './sister-detail.service';
+import { JwtGuard } from '../auth/jwt.guard';
+import { RoleGuard, Roles } from '../auth/role.guard';
 import { SisterNamePipe } from '../common/sister-name.pipe';
 import type { SisterName } from '../common/sister-name.pipe';
 import { AvatarService } from './avatar.service';
-import { JwtGuard } from '../auth/jwt.guard';
+import { SisterDetailService } from './sister-detail.service';
+import { SistersService } from './sisters.service';
 
 @Controller('api/sisters')
+@UseGuards(JwtGuard, RoleGuard)
+@Roles('admin', 'viewer')
 export class SistersController {
   constructor(
     private readonly sistersService: SistersService,
@@ -30,7 +33,17 @@ export class SistersController {
 
   @Get()
   async getSistersStatus() {
-    return this.sistersService.getAllSistersStatus();
+    const sisters = await this.sistersService.getAllSistersStatus();
+
+    return sisters.map(({ id, name, lxcId, role, status, lastSeen, currentTask }) => ({
+      id,
+      name,
+      lxcId,
+      role,
+      status,
+      lastSeen,
+      currentTask,
+    }));
   }
 
   @Get(':name/runtime')
@@ -49,7 +62,15 @@ export class SistersController {
 
   @Get(':name/system')
   async getSystemInfo(@Param('name', SisterNamePipe) name: SisterName) {
-    return this.sistersService.getSystemInfo(name);
+    const system = await this.sistersService.getSystemInfo(name);
+    if (!system) return null;
+
+    return {
+      uptime: system.uptime,
+      cpu: system.cpu,
+      memory: system.memory,
+      disk: system.disk,
+    };
   }
 
   @Get(':name/avatar')
@@ -64,25 +85,29 @@ export class SistersController {
 
     const avatar = await this.avatarService.getAvatar(sister);
     res.setHeader('Content-Type', avatar.contentType);
-    res.setHeader('Cache-Control', 'public, max-age=300');
+    res.setHeader('Cache-Control', 'private, max-age=300');
     return res.send(avatar.data);
   }
 
+  @Roles('admin')
   @Get(':name/config')
   async getSisterConfig(@Param('name', SisterNamePipe) name: SisterName) {
     return this.sisterDetail.getSisterConfig(name);
   }
 
+  @Roles('admin')
   @Get(':name/sessions')
   async getSisterSessions(@Param('name', SisterNamePipe) name: SisterName) {
     return this.sisterDetail.getSisterSessions(name);
   }
 
+  @Roles('admin')
   @Get(':name/subagents')
   async getSisterSubagents(@Param('name', SisterNamePipe) name: SisterName) {
     return this.sisterDetail.getSisterSubagents(name);
   }
 
+  @Roles('admin')
   @Get(':name/activity')
   async getSisterActivity(@Param('name', SisterNamePipe) name: SisterName) {
     return this.sisterDetail.getSisterActivityLog(name);

frontend/.claude/sessions/.last_inbox_check

@@ -0,0 +1 @@
+1775809622

frontend/.claude/state/tool-failure-counter.txt

@@ -0,0 +1 @@
+1 1775809627

frontend/app/activities/page.tsx

@@ -1,311 +0,0 @@
-'use client';
-
-import React, { useEffect, useState } from 'react';
-import styled from 'styled-components';
-import { PageTitle, BtnToggle } from '@/components/ui/base';
-import { API_URL } from '@/lib/config';
-
-// ─── Styled ───
-const Header = styled.div`
-  display: flex;
-  justify-content: space-between;
-  align-items: flex-end;
-  border-bottom: 1px solid var(--border-color);
-  padding-bottom: var(--space-md);
-  margin-bottom: var(--space-md);
-`;
-
-const HeaderMeta = styled.div`
-  font-family: var(--font-mono);
-  font-size: 11px;
-  color: var(--text-secondary);
-`;
-
-const LogControls = styled.div`
-  display: flex;
-  justify-content: space-between;
-  align-items: center;
-  gap: var(--space-lg);
-  margin-bottom: var(--space-md);
-  flex-wrap: wrap;
-`;
-
-const FilterGroup = styled.div`
-  display: flex;
-  gap: var(--space-md);
-  flex-wrap: wrap;
-`;
-
-const SearchBox = styled.div`
-  position: relative;
-  flex-grow: 1;
-  max-width: 300px;
-`;
-
-const SearchInput = styled.input`
-  width: 100%;
-  background: #1a1a1a;
-  border: 1px solid var(--border-color);
-  color: var(--text-primary);
-  padding: 8px 12px;
-  font-family: var(--font-mono);
-  font-size: 12px;
-  outline: none;
-
-  &:focus { border-color: var(--border-hover); }
-  &::placeholder { color: var(--text-secondary); }
-`;
-
-const LogContainer = styled.div`
-  border: 1px solid var(--border-color);
-  background: #0d0d0d;
-  font-family: var(--font-mono);
-  overflow-x: auto;
-`;
-
-const LogTable = styled.table`
-  width: 100%;
-  border-collapse: collapse;
-`;
-
-const Th = styled.th`
-  text-align: left;
-  padding: 10px 12px;
-  font-size: 11px;
-  font-weight: 700;
-  text-transform: uppercase;
-  letter-spacing: 0.05em;
-  color: var(--text-secondary);
-  border-bottom: 1px solid var(--border-color);
-  white-space: nowrap;
-`;
-
-const Tr = styled.tr`
-  &:hover td { background: #1a1a1a; }
-  border-bottom: 1px solid #1a1a1a;
-`;
-
-const Td = styled.td`
-  padding: 10px 12px;
-  font-size: 12px;
-  color: var(--text-secondary);
-  vertical-align: top;
-`;
-
-const TdTime = styled(Td)`
-  white-space: nowrap;
-  font-size: 11px;
-`;
-
-const TdEvent = styled(Td)`
-  color: var(--text-primary);
-`;
-
-const Tag = styled.span<{ $type: string }>`
-  display: inline-block;
-  padding: 2px 6px;
-  font-size: 9px;
-  font-weight: 700;
-  text-transform: uppercase;
-  letter-spacing: 0.04em;
-  background: #1a1a1a;
-  border: 1px solid;
-  white-space: nowrap;
-
-  ${({ $type }) => {
-    switch ($type) {
-      case 'SECURITY': return 'color: #ff5f5f; border-color: #ff5f5f44;';
-      case 'ORG': return 'color: #5fafff; border-color: #5fafff44;';
-      case 'BACKUP': return 'color: #5fff8a; border-color: #5fff8a44;';
-      default: return 'color: #888; border-color: #44444444;';
-    }
-  }}
-`;
-
-const BracketLabel = styled.span`
-  color: var(--text-primary);
-  font-weight: 600;
-`;
-
-const Pagination = styled.div`
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  padding: var(--space-md);
-  border-top: 1px solid var(--border-color);
-  font-family: var(--font-mono);
-  font-size: 11px;
-  color: var(--text-secondary);
-`;
-
-const PaginationBtns = styled.div`
-  display: flex;
-  gap: var(--space-sm);
-`;
-
-const PageBtn = styled.button<{ $active?: boolean }>`
-  background: ${({ $active }) => $active ? 'var(--text-primary)' : 'transparent'};
-  border: 1px solid var(--border-color);
-  color: ${({ $active }) => $active ? '#000' : 'var(--text-secondary)'};
-  padding: 4px 10px;
-  font-size: 11px;
-  cursor: pointer;
-  font-family: var(--font-mono);
-  transition: all 0.15s;
-
-  &:hover {
-    border-color: var(--border-hover);
-    color: ${({ $active }) => $active ? '#000' : 'var(--text-primary)'};
-  }
-`;
-
-// ─── Tag helpers ───
-function getTagType(action: string): string {
-  if (/security|auth|key|guard|block/i.test(action)) return 'SECURITY';
-  if (/org|sister|node|role/i.test(action)) return 'ORG';
-  if (/backup|snapshot|save/i.test(action)) return 'BACKUP';
-  return 'SYSTEM';
-}
-
-function formatDetail(detail: string | null, action: string): React.ReactNode {
-  if (!detail) return action;
-  // bracket [텍스트] 하이라이트
-  const parts = detail.split(/(\[.*?\])/g);
-  return parts.map((part, i) =>
-    part.startsWith('[') ? <BracketLabel key={i}>{part}</BracketLabel> : part,
-  );
-}
-
-const PAGE_SIZE = 20;
-const ALL_TYPES = ['ALL', 'SYSTEM', 'SECURITY', 'ORG', 'BACKUP'];
-
-interface ActivityItem {
-  id: number;
-  action: string;
-  detail: string | null;
-  createdAt: string;
-  sister?: { name: string } | null;
-  project?: { name: string } | null;
-}
-
-export default function ActivitiesPage() {
-  const [items, setItems] = useState<ActivityItem[]>([]);
-  const [total, setTotal] = useState(0);
-  const [page, setPage] = useState(0);
-  const [filter, setFilter] = useState('ALL');
-  const [search, setSearch] = useState('');
-
-  useEffect(() => {
-    const load = async () => {
-      try {
-        const res = await fetch(`${API_URL}/api/activity?limit=200&offset=0`);
-        if (res.ok) {
-          const d = await res.json();
-          setItems(d.items ?? []);
-          setTotal(d.total ?? 0);
-        }
-      } catch { /* silent */ }
-    };
-    load();
-    const iv = setInterval(load, 30000);
-    return () => clearInterval(iv);
-  }, []);
-
-  const filtered = items.filter((item) => {
-    const tagType = getTagType(item.action);
-    if (filter !== 'ALL' && tagType !== filter) return false;
-    if (search) {
-      const q = search.toLowerCase();
-      const text = `${item.action} ${item.detail ?? ''} ${item.sister?.name ?? ''}`.toLowerCase();
-      if (!text.includes(q)) return false;
-    }
-    return true;
-  });
-
-  const totalPages = Math.ceil(filtered.length / PAGE_SIZE);
-  const paged = filtered.slice(page * PAGE_SIZE, (page + 1) * PAGE_SIZE);
-
-  const runtimeStr = (() => {
-    return `SYS_LOG_V.4.2 // ENTRIES: ${total}`;
-  })();
-
-  return (
-    <>
-      <Header>
-        <PageTitle>
-          활동 로그 <span style={{ color: 'var(--text-secondary)', fontSize: '18px' }}>/ ACTIVITY LOG</span>
-        </PageTitle>
-        <HeaderMeta>{runtimeStr}</HeaderMeta>
-      </Header>
-
-      <LogControls>
-        <FilterGroup>
-          {ALL_TYPES.map((t) => (
-            <BtnToggle key={t} $active={filter === t} onClick={() => { setFilter(t); setPage(0); }}>
-              {t}
-            </BtnToggle>
-          ))}
-        </FilterGroup>
-        <SearchBox>
-          <SearchInput
-            placeholder="SEARCH LOGS..."
-            value={search}
-            onChange={(e) => { setSearch(e.target.value); setPage(0); }}
-          />
-        </SearchBox>
-      </LogControls>
-
-      <LogContainer>
-        <LogTable>
-          <thead>
-            <tr>
-              <Th>TIME</Th>
-              <Th>TYPE</Th>
-              <Th>EVENT</Th>
-              <Th>CODE</Th>
-            </tr>
-          </thead>
-          <tbody>
-            {paged.length === 0 ? (
-              <Tr>
-                <Td colSpan={4} style={{ textAlign: 'center', padding: 'var(--space-xl)', color: 'var(--text-secondary)' }}>
-                  로그 없음
-                </Td>
-              </Tr>
-            ) : (
-              paged.map((item) => {
-                const tagType = getTagType(item.action);
-                const code = `0x${item.id.toString(16).toUpperCase().padStart(3, '0')}`;
-                return (
-                  <Tr key={item.id}>
-                    <TdTime>
-                      {new Date(item.createdAt).toLocaleString('ko-KR', {
-                        year: 'numeric', month: '2-digit', day: '2-digit',
-                        hour: '2-digit', minute: '2-digit', second: '2-digit',
-                        hour12: false,
-                      })}
-                    </TdTime>
-                    <Td><Tag $type={tagType}>{tagType}</Tag></Td>
-                    <TdEvent>{formatDetail(item.detail, item.action)}</TdEvent>
-                    <Td style={{ fontFamily: 'var(--font-mono)', fontSize: '11px' }}>{code}</Td>
-                  </Tr>
-                );
-              })
-            )}
-          </tbody>
-        </LogTable>
-        <Pagination>
-          <span>SHOWING {paged.length} / {filtered.length} ENTRIES</span>
-          <PaginationBtns>
-            <PageBtn onClick={() => setPage((p) => Math.max(0, p - 1))} disabled={page === 0}>PREV</PageBtn>
-            {Array.from({ length: Math.min(totalPages, 5) }, (_, i) => (
-              <PageBtn key={i} $active={page === i} onClick={() => setPage(i)}>{i + 1}</PageBtn>
-            ))}
-            {totalPages > 5 && <span>...</span>}
-            <PageBtn onClick={() => setPage((p) => Math.min(totalPages - 1, p + 1))} disabled={page >= totalPages - 1}>NEXT</PageBtn>
-          </PaginationBtns>
-        </Pagination>
-      </LogContainer>
-    </>
-  );
-}

frontend/app/admin/costs/page.tsx

@@ -1,230 +0,0 @@
-'use client';
-
-import React, { useEffect, useState } from 'react';
-import styled from 'styled-components';
-import BarChart from '@/components/admin/BarChart';
-import { adminFetch } from '@/lib/adminFetch';
-
-type Period = 'day' | 'week' | 'month';
-
-interface CostData {
-  period: string;
-  since: string;
-  summary: {
-    totalTokens: number;
-    inputTokens: number;
-    outputTokens: number;
-    estimatedUsd: number;
-    recordCount: number;
-  };
-  bySister: Array<{ name: string; totalTokens: number; estimatedUsd: number }>;
-  byModel: Array<{ model: string; totalTokens: number; estimatedUsd: number; count: number }>;
-  timeline: Array<{ date: string; totalTokens: number; estimatedUsd: number }>;
-}
-
-const Controls = styled.div`
-  display: flex;
-  gap: 8px;
-  margin-bottom: 24px;
-`;
-
-const PeriodBtn = styled.button<{ $active: boolean }>`
-  padding: 6px 16px;
-  border-radius: 7px;
-  font-size: 13px;
-  font-weight: ${({ $active }) => $active ? '600' : '400'};
-  background: ${({ $active }) => $active ? 'rgba(88,166,255,0.15)' : 'transparent'};
-  border: 1px solid ${({ $active }) => $active ? 'rgba(88,166,255,0.4)' : 'var(--border-color)'};
-  color: ${({ $active }) => $active ? '#58A6FF' : 'var(--text-secondary)'};
-  cursor: pointer;
-  transition: all 0.15s;
-  &:hover { color: #58A6FF; border-color: rgba(88,166,255,0.3); }
-`;
-
-const SummaryGrid = styled.div`
-  display: grid;
-  grid-template-columns: repeat(auto-fill, minmax(160px, 1fr));
-  gap: 14px;
-  margin-bottom: 28px;
-`;
-
-const SummaryCard = styled.div`
-  background: var(--bg-surface);
-  border: 1px solid var(--border-color);
-  border-radius: 10px;
-  padding: 16px 18px;
-`;
-
-const SummaryLabel = styled.div`
-  font-size: 11px;
-  color: var(--text-secondary);
-  text-transform: uppercase;
-  letter-spacing: 0.06em;
-  margin-bottom: 6px;
-`;
-
-const SummaryValue = styled.div`
-  font-size: 20px;
-  font-weight: 700;
-  color: var(--text-primary);
-`;
-
-const SummaryUnit = styled.span`
-  font-size: 12px;
-  color: var(--text-secondary);
-  margin-left: 4px;
-`;
-
-const ChartsGrid = styled.div`
-  display: grid;
-  grid-template-columns: 1fr 1fr;
-  gap: 20px;
-  margin-bottom: 28px;
-
-  @media (max-width: 900px) {
-    grid-template-columns: 1fr;
-  }
-`;
-
-const Card = styled.div`
-  background: var(--bg-surface);
-  border: 1px solid var(--border-color);
-  border-radius: 12px;
-  padding: 20px 22px;
-`;
-
-const RecordBtn = styled.button`
-  padding: 8px 16px;
-  border-radius: 7px;
-  font-size: 12px;
-  font-weight: 600;
-  background: rgba(88,166,255,0.08);
-  border: 1px solid rgba(88,166,255,0.25);
-  color: #58A6FF;
-  cursor: pointer;
-  transition: background 0.15s;
-  &:hover { background: rgba(88,166,255,0.18); }
-  &:disabled { opacity: 0.5; cursor: not-allowed; }
-`;
-
-const EmptyNote = styled.div`
-  padding: 32px;
-  text-align: center;
-  color: var(--text-secondary);
-  font-size: 13px;
-  line-height: 1.6;
-`;
-
-function formatTokens(n: number): string {
-  if (n >= 1_000_000) return `${(n / 1_000_000).toFixed(1)}M`;
-  if (n >= 1_000) return `${(n / 1_000).toFixed(1)}K`;
-  return String(n);
-}
-
-export default function CostsPage() {
-  const [period, setPeriod] = useState<Period>('week');
-  const [data, setData] = useState<CostData | null>(null);
-  const [loading, setLoading] = useState(true);
-  const [recording, setRecording] = useState(false);
-
-  const load = async (p: Period) => {
-    setLoading(true);
-    try {
-      const res = await adminFetch(`/api/admin/costs?period=${p}`);
-      if (res.ok) setData(await res.json());
-    } catch {
-      // silent
-    } finally {
-      setLoading(false);
-    }
-  };
-
-  useEffect(() => { load(period); }, [period]);
-
-  const recordAll = async () => {
-    setRecording(true);
-    try {
-      await Promise.all(['harang', 'narang', 'darang', 'erang'].map((name) =>
-        adminFetch(`/api/admin/costs/record/${name}`, { method: 'POST' }),
-      ));
-      await load(period);
-    } finally {
-      setRecording(false);
-    }
-  };
-
-  const sisterChartData = data?.bySister.map((s) => ({
-    label: { harang: '하랑이', narang: '나랑이', darang: '다랑이', erang: '이랑이' }[s.name] ?? s.name,
-    value: s.estimatedUsd,
-  })) ?? [];
-
-  const modelChartData = data?.byModel.map((m) => ({
-    label: m.model.split('/').pop() ?? m.model,
-    value: m.totalTokens,
-  })) ?? [];
-
-  const timelineChartData = data?.timeline.map((t) => ({
-    label: t.date.slice(5),
-    value: t.estimatedUsd,
-  })) ?? [];
-
-  return (
-    <>
-      <Controls>
-        {(['day', 'week', 'month'] as Period[]).map((p) => (
-          <PeriodBtn key={p} $active={period === p} onClick={() => setPeriod(p)}>
-            {p === 'day' ? '오늘' : p === 'week' ? '7일' : '30일'}
-          </PeriodBtn>
-        ))}
-        <RecordBtn onClick={recordAll} disabled={recording} style={{ marginLeft: 'auto' }}>
-          {recording ? '수집 중...' : '📊 토큰 수집'}
-        </RecordBtn>
-      </Controls>
-
-      {loading ? (
-        <div style={{ color: 'var(--text-secondary)', fontSize: '14px' }}>로딩 중...</div>
-      ) : !data || data.summary.recordCount === 0 ? (
-        <EmptyNote>
-          아직 비용 데이터가 없어.<br />
-          위 &quot;토큰 수집&quot; 버튼으로 자매들의 세션 토큰을 수집해.
-        </EmptyNote>
-      ) : (
-        <>
-          <SummaryGrid>
-            <SummaryCard>
-              <SummaryLabel>총 토큰</SummaryLabel>
-              <SummaryValue>{formatTokens(data.summary.totalTokens)}<SummaryUnit>tokens</SummaryUnit></SummaryValue>
-            </SummaryCard>
-            <SummaryCard>
-              <SummaryLabel>예상 비용</SummaryLabel>
-              <SummaryValue>${data.summary.estimatedUsd.toFixed(4)}<SummaryUnit>USD</SummaryUnit></SummaryValue>
-            </SummaryCard>
-            <SummaryCard>
-              <SummaryLabel>입력 토큰</SummaryLabel>
-              <SummaryValue>{formatTokens(data.summary.inputTokens)}</SummaryValue>
-            </SummaryCard>
-            <SummaryCard>
-              <SummaryLabel>출력 토큰</SummaryLabel>
-              <SummaryValue>{formatTokens(data.summary.outputTokens)}</SummaryValue>
-            </SummaryCard>
-          </SummaryGrid>
-
-          <ChartsGrid>
-            <Card>
-              <BarChart data={sisterChartData} unit="$" title="자매별 비용 (USD)" />
-            </Card>
-            <Card>
-              <BarChart data={modelChartData} unit=" tok" title="모델별 토큰 사용량" />
-            </Card>
-          </ChartsGrid>
-
-          {timelineChartData.length > 0 && (
-            <Card>
-              <BarChart data={timelineChartData} unit="$" title="일별 비용 추이" />
-            </Card>
-          )}
-        </>
-      )}
-    </>
-  );
-}

frontend/app/admin/harness/page.tsx

@@ -1,209 +0,0 @@
-'use client';
-
-import React, { useState, useEffect } from 'react';
-import styled from 'styled-components';
-import CodeEditor from '@/components/admin/CodeEditor';
-import { adminFetch } from '@/lib/adminFetch';
-
-const SISTERS = ['harang', 'narang', 'darang', 'erang'];
-const FILES = ['SOUL.md', 'AGENTS.md', 'TOOLS.md', 'PROTOCOL.md', 'HEARTBEAT.md'];
-
-const DISPLAY_NAMES: Record<string, string> = {
-  harang: '하랑이', narang: '나랑이', darang: '다랑이', erang: '이랑이',
-};
-
-const Layout = styled.div`
-  display: grid;
-  grid-template-columns: 180px 1fr;
-  gap: 20px;
-`;
-
-const FileTree = styled.div`
-  background: var(--bg-surface);
-  border: 1px solid var(--border-color);
-  border-radius: 10px;
-  overflow: hidden;
-`;
-
-const TreeSection = styled.div`
-  border-bottom: 1px solid var(--border-color);
-  padding: 6px;
-  &:last-child { border-bottom: none; }
-`;
-
-const TreeLabel = styled.div`
-  font-size: 11px;
-  font-weight: 700;
-  color: var(--text-secondary);
-  text-transform: uppercase;
-  letter-spacing: 0.06em;
-  padding: 6px 8px 4px;
-`;
-
-const TreeItem = styled.button<{ $active: boolean }>`
-  width: 100%;
-  text-align: left;
-  padding: 6px 10px;
-  font-size: 12px;
-  border: none;
-  border-radius: 5px;
-  cursor: pointer;
-  background: ${({ $active }) => $active ? 'rgba(88,166,255,0.12)' : 'transparent'};
-  color: ${({ $active }) => $active ? '#58A6FF' : 'var(--text-secondary)'};
-  transition: background 0.15s;
-
-  &:hover { background: rgba(240,246,252,0.06); color: var(--text-primary); }
-`;
-
-const EditorPane = styled.div`
-  display: flex;
-  flex-direction: column;
-  gap: 12px;
-`;
-
-const Toolbar = styled.div`
-  display: flex;
-  align-items: center;
-  gap: 10px;
-`;
-
-const PathLabel = styled.span`
-  font-size: 13px;
-  color: var(--text-secondary);
-  font-family: monospace;
-  flex: 1;
-`;
-
-const Btn = styled.button<{ $primary?: boolean; $danger?: boolean }>`
-  padding: 7px 16px;
-  border-radius: 7px;
-  font-size: 13px;
-  font-weight: 600;
-  cursor: pointer;
-  border: 1px solid;
-  transition: all 0.15s;
-  disabled: ${({ disabled }) => disabled ? 'not-allowed' : 'pointer'};
-
-  ${({ $primary }) =>
-    $primary &&
-    `background: rgba(88,166,255,0.12); border-color: rgba(88,166,255,0.4); color: #58A6FF;
-     &:hover { background: rgba(88,166,255,0.22); }`}
-  ${({ $danger }) =>
-    $danger &&
-    `background: transparent; border-color: rgba(240,246,252,0.15); color: #8B949E;
-     &:hover { color: #E6EDF3; }`}
-  ${({ $primary, $danger }) =>
-    !$primary && !$danger &&
-    `background: transparent; border-color: rgba(240,246,252,0.15); color: #8B949E;
-     &:hover { color: #E6EDF3; }`}
-`;
-
-const ResultMsg = styled.div<{ $success: boolean }>`
-  padding: 8px 12px;
-  border-radius: 6px;
-  font-size: 12px;
-  font-family: monospace;
-  background: ${({ $success }) => $success ? 'rgba(0,230,118,0.08)' : 'rgba(255,23,68,0.08)'};
-  color: ${({ $success }) => $success ? '#00FF00' : '#FF1744'};
-  border: 1px solid ${({ $success }) => $success ? 'rgba(0,230,118,0.3)' : 'rgba(255,23,68,0.3)'};
-`;
-
-export default function HarnessPage() {
-  const [selected, setSelected] = useState({ sister: 'narang', file: 'SOUL.md' });
-  const [content, setContent] = useState('');
-  const [saved, setSaved] = useState('');
-  const [loading, setLoading] = useState(false);
-  const [saving, setSaving] = useState(false);
-  const [result, setResult] = useState<{ success: boolean; msg: string } | null>(null);
-
-  useEffect(() => {
-    setContent('');
-    setSaved('');
-    setResult(null);
-    setLoading(true);
-    adminFetch(`/api/admin/harness/${selected.sister}/${selected.file}`)
-      .then((r) => r.json())
-      .then((d) => { setContent(d.content ?? ''); setSaved(d.content ?? ''); })
-      .catch(() => setContent('(로드 실패)'))
-      .finally(() => setLoading(false));
-  }, [selected.sister, selected.file]);
-
-  const handleSave = async () => {
-    setSaving(true);
-    setResult(null);
-    try {
-      const res = await adminFetch(`/api/admin/harness/${selected.sister}/${selected.file}`, {
-        method: 'PUT',
-        body: JSON.stringify({ content }),
-      });
-      if (res.status === 401) {
-        setResult({ success: false, msg: '인증 실패 — API Key 또는 JWT 토큰을 확인해' });
-        return;
-      }
-      if (!res.ok) {
-        const text = await res.text();
-        setResult({ success: false, msg: `서버 오류 ${res.status}: ${text.slice(0, 100)}` });
-        return;
-      }
-      const d = await res.json();
-      if (d.success) {
-        setSaved(content);
-        setResult({ success: true, msg: '저장 완료' });
-      } else {
-        setResult({ success: false, msg: d.error ?? '저장 실패' });
-      }
-    } catch (e) {
-      setResult({ success: false, msg: (e as Error).message });
-    } finally {
-      setSaving(false);
-    }
-  };
-
-  const isDirty = content !== saved;
-
-  return (
-    <Layout>
-      <FileTree>
-        {SISTERS.map((s) => (
-          <TreeSection key={s}>
-            <TreeLabel>{DISPLAY_NAMES[s] ?? s}</TreeLabel>
-            {FILES.map((f) => (
-              <TreeItem
-                key={f}
-                $active={selected.sister === s && selected.file === f}
-                onClick={() => setSelected({ sister: s, file: f })}
-              >
-                {f}
-              </TreeItem>
-            ))}
-          </TreeSection>
-        ))}
-      </FileTree>
-
-      <EditorPane>
-        <Toolbar>
-          <PathLabel>
-            ~/.openclaw/workspace/{selected.file} ({DISPLAY_NAMES[selected.sister]})
-          </PathLabel>
-          {isDirty && (
-            <span style={{ fontSize: '11px', color: '#FF9800' }}>● 변경됨</span>
-          )}
-          <Btn onClick={() => { setContent(saved); setResult(null); }} $danger>되돌리기</Btn>
-          <Btn $primary onClick={handleSave} disabled={!isDirty || saving}>
-            {saving ? '저장 중...' : '💾 저장'}
-          </Btn>
-        </Toolbar>
-
-        {result && <ResultMsg $success={result.success}>{result.msg}</ResultMsg>}
-
-        {loading ? (
-          <div style={{ padding: '32px', textAlign: 'center', color: 'var(--text-secondary)', fontSize: '13px' }}>
-            로딩 중...
-          </div>
-        ) : (
-          <CodeEditor value={content} onChange={setContent} />
-        )}
-      </EditorPane>
-    </Layout>
-  );
-}

frontend/app/admin/layout.tsx

@@ -1,63 +0,0 @@
-'use client';
-
-import React from 'react';
-import styled from 'styled-components';
-import Link from 'next/link';
-import { usePathname } from 'next/navigation';
-
-const ADMIN_TABS = [
-  { href: '/admin', label: '자매 관리' },
-  { href: '/admin/logs', label: '로그 뷰어' },
-  { href: '/admin/costs', label: '비용 모니터' },
-  { href: '/admin/repos', label: '저장소' },
-];
-
-const Wrapper = styled.div`
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-lg);
-`;
-
-const AdminHeader = styled.div`
-  border-bottom: 1px solid var(--border-color);
-  padding-bottom: var(--space-md);
-`;
-
-const TabNav = styled.div`
-  display: flex;
-  gap: var(--space-lg);
-  flex-wrap: wrap;
-`;
-
-const TabLink = styled(Link)<{ $active: boolean }>`
-  font-size: 13px;
-  font-weight: 500;
-  color: ${({ $active }) => $active ? 'var(--text-primary)' : 'var(--text-secondary)'};
-  text-decoration: none;
-  padding: var(--space-sm) 0;
-  border-bottom: 1px solid ${({ $active }) => $active ? 'var(--text-primary)' : 'transparent'};
-  transition: color 0.15s, border-color 0.15s;
-  &:hover { color: var(--text-primary); }
-`;
-
-export default function AdminLayout({ children }: { children: React.ReactNode }) {
-  const pathname = usePathname();
-
-  return (
-    <Wrapper>
-      <AdminHeader>
-        <div style={{ fontSize: '28px', fontWeight: 600, letterSpacing: '-0.02em', marginBottom: 'var(--space-md)' }}>
-          관리자
-        </div>
-        <TabNav>
-          {ADMIN_TABS.map((tab) => (
-            <TabLink key={tab.href} href={tab.href} $active={pathname === tab.href}>
-              {tab.label}
-            </TabLink>
-          ))}
-        </TabNav>
-      </AdminHeader>
-      {children}
-    </Wrapper>
-  );
-}

frontend/app/admin/logs/page.tsx

@@ -1,115 +0,0 @@
-'use client';
-
-import React, { useState, useCallback, useEffect } from 'react';
-import styled from 'styled-components';
-import LogTerminal from '@/components/admin/LogTerminal';
-import { adminFetch } from '@/lib/adminFetch';
-
-const SISTERS = [
-  { value: 'harang', label: '하랑이' },
-  { value: 'narang', label: '나랑이' },
-  { value: 'darang', label: '다랑이' },
-  { value: 'erang', label: '이랑이' },
-];
-
-const Controls = styled.div`
-  display: flex;
-  gap: 10px;
-  align-items: center;
-  margin-bottom: 16px;
-`;
-
-const Select = styled.select`
-  background: var(--bg-surface);
-  border: 1px solid var(--border-color);
-  border-radius: 7px;
-  color: var(--text-primary);
-  padding: 8px 12px;
-  font-size: 13px;
-  cursor: pointer;
-  outline: none;
-  &:focus { border-color: #58A6FF; }
-  option { background: #1a1f2a; }
-`;
-
-const LinesInput = styled.input`
-  background: var(--bg-surface);
-  border: 1px solid var(--border-color);
-  border-radius: 7px;
-  color: var(--text-primary);
-  padding: 8px 12px;
-  font-size: 13px;
-  width: 80px;
-  outline: none;
-  &:focus { border-color: #58A6FF; }
-`;
-
-const FetchBtn = styled.button`
-  padding: 8px 18px;
-  border-radius: 7px;
-  font-size: 13px;
-  font-weight: 600;
-  background: rgba(88,166,255,0.1);
-  border: 1px solid rgba(88,166,255,0.35);
-  color: #58A6FF;
-  cursor: pointer;
-  transition: background 0.15s;
-  &:hover { background: rgba(88,166,255,0.2); }
-  &:disabled { opacity: 0.5; cursor: not-allowed; }
-`;
-
-const Label = styled.span`
-  font-size: 12px;
-  color: var(--text-secondary);
-`;
-
-export default function LogsPage() {
-  const [sister, setSister] = useState('narang');
-  const [lines, setLines] = useState(100);
-  const [logLines, setLogLines] = useState<string[]>([]);
-  const [loading, setLoading] = useState(false);
-
-  const fetchLogs = useCallback(async () => {
-    setLoading(true);
-    try {
-      const res = await adminFetch(`/api/admin/logs/${sister}?lines=${lines}`);
-      const d = await res.json();
-      setLogLines(d.lines ?? []);
-    } catch {
-      setLogLines(['(로그 로드 실패)']);
-    } finally {
-      setLoading(false);
-    }
-  }, [sister, lines]);
-
-  // 마운트 시 자동 로드
-  useEffect(() => {
-    fetchLogs();
-  }, [fetchLogs]);
-
-  return (
-    <>
-      <Controls>
-        <Select value={sister} onChange={(e) => setSister(e.target.value)}>
-          {SISTERS.map((s) => (
-            <option key={s.value} value={s.value}>{s.label}</option>
-          ))}
-        </Select>
-        <Label>최근</Label>
-        <LinesInput
-          type="number"
-          value={lines}
-          onChange={(e) => setLines(parseInt(e.target.value, 10) || 100)}
-          min={10}
-          max={500}
-        />
-        <Label>줄</Label>
-        <FetchBtn onClick={fetchLogs} disabled={loading}>
-          {loading ? '로딩 중...' : '📋 로그 가져오기'}
-        </FetchBtn>
-      </Controls>
-
-      <LogTerminal lines={logLines} />
-    </>
-  );
-}

frontend/app/admin/page.tsx

@@ -1,89 +0,0 @@
-'use client';
-
-import React, { useEffect, useState } from 'react';
-import styled from 'styled-components';
-import StatusBadge from '@/components/common/StatusBadge';
-import ConfirmModal from '@/components/admin/ConfirmModal';
-import { API_URL } from '@/lib/config';
-import { adminFetch } from '@/lib/adminFetch';
-import { SISTER_DISPLAY_NAMES } from '@/lib/sisters';
-import SisterAvatar from '@/components/common/SisterAvatar';
-
-type Status = 'online' | 'offline' | 'working' | 'unknown';
-
-interface ActionResult {
-  success: boolean;
-  output: string;
-  error: string | null;
-}
-
-interface SisterAdminItem {
-  id?: number;
-  name: string;
-  status: Status;
-}
-
-const Table = styled.div`display:flex;flex-direction:column;gap:8px;user-select:none;`;
-const Row = styled.div`background:var(--bg-surface);border:1px solid var(--border-color);border-radius:10px;padding:16px 20px;display:flex;align-items:center;gap:16px;`;
-const SisterInfo = styled.div`display:flex;align-items:center;gap:10px;flex:1;`;
-const Name = styled.span`font-size:15px;font-weight:600;color:var(--text-primary);min-width:70px;`;
-const Actions = styled.div`display:flex;gap:8px;`;
-const ActionBtn = styled.button<{ $danger?: boolean }>`padding:6px 14px;border-radius:7px;font-size:13px;font-weight:600;cursor:pointer;border:1px solid;transition:all .15s;user-select:none;${({ $danger }) => $danger ? `background: rgba(255,23,68,0.08); border-color: rgba(255,23,68,0.3); color: #FF1744; &:hover { background: rgba(255,23,68,0.18); }` : `background: rgba(88,166,255,0.08); border-color: rgba(88,166,255,0.3); color: #58A6FF; &:hover { background: rgba(88,166,255,0.18); }`}`;
-const ResultBanner = styled.div<{ $success: boolean }>`margin-top:8px;padding:8px 12px;background:${({ $success }) => $success ? 'rgba(0,230,118,0.08)' : 'rgba(255,23,68,0.08)'};border:1px solid ${({ $success }) => $success ? 'rgba(0,230,118,0.3)' : 'rgba(255,23,68,0.3)'};border-radius:6px;font-size:12px;color:${({ $success }) => $success ? '#00FF00' : '#FF1744'};font-family:monospace;white-space:pre-wrap;`;
-
-export default function AdminSistersPage() {
-  const [sisters, setSisters] = useState<SisterAdminItem[]>([]);
-  const [modal, setModal] = useState<{ action: 'restart' | 'reset'; name: string } | null>(null);
-  const [results, setResults] = useState<Record<string, ActionResult>>({});
-  const [loading, setLoading] = useState<Record<string, boolean>>({});
-
-  useEffect(() => {
-    fetch(`${API_URL}/api/sisters`).then((r) => r.json()).then(setSisters).catch(() => {});
-    const iv = setInterval(() => { fetch(`${API_URL}/api/sisters`).then((r) => r.json()).then(setSisters).catch(() => {}); }, 15000);
-    return () => clearInterval(iv);
-  }, []);
-
-  const doAction = async (action: 'restart' | 'reset', name: string) => {
-    setModal(null);
-    setLoading((p) => ({ ...p, [`${action}:${name}`]: true }));
-    try {
-      const res = await adminFetch(`/api/admin/sisters/${name}/${action}`, { method: 'POST' });
-      const data: ActionResult = await res.json();
-      setResults((p) => ({ ...p, [`${action}:${name}`]: data }));
-    } catch (e) {
-      setResults((p) => ({ ...p, [`${action}:${name}`]: { success: false, output: '', error: (e as Error).message } }));
-    } finally {
-      setLoading((p) => ({ ...p, [`${action}:${name}`]: false }));
-    }
-  };
-
-  return (
-    <>
-      <Table>
-        {sisters.map((s) => {
-          const restartResult = results[`restart:${s.name}`];
-          const resetResult = results[`reset:${s.name}`];
-          return (
-            <div key={s.id}>
-              <Row>
-                <SisterInfo>
-                  <SisterAvatar name={s.name} size={28} />
-                  <Name>{SISTER_DISPLAY_NAMES[s.name] ?? s.name}</Name>
-                  <StatusBadge status={s.status as Status} />
-                </SisterInfo>
-                <Actions>
-                  <ActionBtn onClick={() => setModal({ action: 'restart', name: s.name })} disabled={loading[`restart:${s.name}`]}>{loading[`restart:${s.name}`] ? '...' : '재시작'}</ActionBtn>
-                  <ActionBtn $danger onClick={() => setModal({ action: 'reset', name: s.name })} disabled={loading[`reset:${s.name}`]}>{loading[`reset:${s.name}`] ? '...' : '리셋'}</ActionBtn>
-                </Actions>
-              </Row>
-              {restartResult && <ResultBanner $success={restartResult.success}>재시작: {restartResult.success ? '✅ 성공' : `❌ ${restartResult.error}`}{restartResult.output && `\n${restartResult.output}`}</ResultBanner>}
-              {resetResult && <ResultBanner $success={resetResult.success}>리셋: {resetResult.success ? '✅ 성공' : `❌ ${resetResult.error}`}</ResultBanner>}
-            </div>
-          );
-        })}
-      </Table>
-
-      {modal && <ConfirmModal title={modal.action === 'restart' ? '게이트웨이 재시작' : '세션 리셋'} message={`${SISTER_DISPLAY_NAMES[modal.name] ?? modal.name}의 ${modal.action === 'restart' ? 'OpenClaw Gateway를 재시작' : '메인 세션을 초기화'}하시겠어요?`} confirmLabel={modal.action === 'restart' ? '재시작' : '리셋'} danger={modal.action === 'reset'} onConfirm={() => doAction(modal.action, modal.name)} onCancel={() => setModal(null)} />}
-    </>
-  );
-}

frontend/app/admin/repos/page.tsx

@@ -1,111 +0,0 @@
-'use client';
-
-import React, { useEffect, useState } from 'react';
-import styled from 'styled-components';
-import { API_URL } from '@/lib/config';
-
-const Grid = styled.div`
-  display: grid;
-  grid-template-columns: repeat(auto-fill, minmax(300px, 1fr));
-  gap: 16px;
-`;
-
-const Card = styled.a`
-  display: block;
-  background: var(--bg-surface);
-  border: 1px solid var(--border-color);
-  border-radius: 10px;
-  padding: 18px 20px;
-  text-decoration: none;
-  transition: transform 0.15s, border-color 0.15s;
-
-  &:hover {
-    transform: translateY(-2px);
-    border-color: rgba(88,166,255,0.3);
-  }
-`;
-
-const RepoName = styled.div`
-  font-size: 14px;
-  font-weight: 700;
-  color: #58A6FF;
-  margin-bottom: 6px;
-`;
-
-const RepoDesc = styled.div`
-  font-size: 12px;
-  color: var(--text-secondary);
-  margin-bottom: 12px;
-  white-space: nowrap;
-  overflow: hidden;
-  text-overflow: ellipsis;
-`;
-
-const Stats = styled.div`
-  display: flex;
-  gap: 14px;
-`;
-
-const Stat = styled.span`
-  font-size: 12px;
-  color: var(--text-secondary);
-`;
-
-const PRBadge = styled.span<{ $count: number }>`
-  font-size: 11px;
-  padding: 2px 8px;
-  border-radius: 4px;
-  font-weight: 600;
-  background: ${({ $count }) => $count > 0 ? 'rgba(88,166,255,0.12)' : 'rgba(139,148,158,0.08)'};
-  color: ${({ $count }) => $count > 0 ? '#58A6FF' : 'var(--text-secondary)'};
-`;
-
-const NoProjects = styled.div`
-  padding: 32px;
-  text-align: center;
-  color: var(--text-secondary);
-  font-size: 13px;
-`;
-
-interface RepoProjectItem {
-  id: number;
-  name: string;
-  description: string | null;
-  repoUrl: string;
-  openPRs: number;
-  sprintCount: number;
-  progress: number;
-}
-
-export default function ReposPage() {
-  const [projects, setProjects] = useState<RepoProjectItem[]>([]);
-  const [loading, setLoading] = useState(true);
-
-  useEffect(() => {
-    fetch(`${API_URL}/api/projects`)
-      .then((r) => r.json())
-      .then(setProjects)
-      .catch(() => {})
-      .finally(() => setLoading(false));
-  }, []);
-
-  if (loading) return <div style={{ color: 'var(--text-secondary)', fontSize: '14px' }}>로딩 중...</div>;
-
-  if (!projects.length) return <NoProjects>등록된 프로젝트 없음</NoProjects>;
-
-  return (
-    <Grid>
-      {projects.map((p) => (
-        <Card key={p.id} href={p.repoUrl} target="_blank" rel="noopener">
-          <RepoName>📁 {p.name}</RepoName>
-          {p.description && <RepoDesc>{p.description}</RepoDesc>}
-          <Stats>
-            <PRBadge $count={p.openPRs}>PR {p.openPRs}</PRBadge>
-            <Stat>Sprint {p.sprintCount}개</Stat>
-            <Stat>진행률 {p.progress}%</Stat>
-          </Stats>
-        </Card>
-      ))}
-    </Grid>
-  );
-}

frontend/app/control/page.tsx

@@ -0,0 +1,7 @@
+'use client';
+
+import LiveWorkboard from '@/components/live/LiveWorkboard';
+
+export default function ControlPage() {
+  return <LiveWorkboard />;
+}

frontend/app/office/page.tsx

@@ -1,495 +0,0 @@
-'use client';
-
-import React, { useCallback, useEffect, useMemo, useState } from 'react';
-import styled from 'styled-components';
-import { API_URL, POLL_INTERVAL_MS } from '@/lib/config';
-import { useSocket } from '@/lib/useSocket';
-import OfficeScene, {
-  type AgentState,
-  type SisterName,
-  type SisterNode,
-  type SubAgent,
-  type SelectedAgent,
-} from '@/components/office/OfficeScene';
-import ContextPanel from '@/components/office/ContextPanel';
-import ChatWorkspace from '@/components/office/ChatWorkspace';
-import PipelinePanel from '@/components/office/PipelinePanel';
-import ServerHealthPanel, { type ServerEntry } from '@/components/office/ServerHealthPanel';
-import type { PipelineNode } from '@/components/dashboard/ActivePipeline';
-
-interface RuntimeSubagentItem {
-  name: string;
-  state: AgentState;
-  updatedAt: number | null;
-  currentTask: string | null;
-  sessionLabel: string | null;
-}
-
-interface SisterRuntimeItem {
-  name: SisterName;
-  gatewayConnected: boolean;
-  mainState: AgentState;
-  currentTask: string | null;
-  activeSessionLabel: string | null;
-  activeSessionUpdatedAt: number | null;
-  controlSessionKey: string | null;
-  recentMessages: Array<{
-    id: string;
-    role: 'user' | 'assistant' | 'tool';
-    content: string;
-    ts: string | null;
-  }>;
-  subagents: RuntimeSubagentItem[];
-}
-
-interface SisterApiItem {
-  id?: number;
-  name: SisterName;
-  status: 'online' | 'offline' | 'working' | 'unknown';
-  role?: string;
-  currentTask?: string | null;
-  lastSeen?: string | null;
-  cpu?: number;
-  memory?: { used?: number; total?: number };
-  liveState?: AgentState;
-  activeSessionLabel?: string | null;
-  gatewayConnected?: boolean;
-  subagents?: RuntimeSubagentItem[];
-}
-
-interface DashboardOpsData {
-  focusProject: {
-    name: string;
-    phase: string;
-    progress: number;
-    deployStatus: string;
-    currentSprint?: string | null;
-    ownerSister?: string | null;
-  } | null;
-  pipeline: {
-    activeTask: string;
-    focus: string;
-    reviewLoopCount: number;
-    escalationCount: number;
-    deployState: string;
-    nodes: PipelineNode[];
-  };
-  freshness: {
-    generatedAt: string;
-    activityLatestAt: string | null;
-    sistersLatestAt: string | null;
-    qaDocLatestAt: string | null;
-  };
-}
-
-const SUBAGENT_DEFS: Record<SisterName, { id: string; name: string; label: string }[]> = {
-  harang: [
-    { id: 'harang-planner', name: 'planner', label: 'planner' },
-    { id: 'harang-task-tracker', name: 'task-tracker', label: 'task-tracker' },
-    { id: 'harang-prd-writer', name: 'prd-writer', label: 'prd-writer' },
-  ],
-  narang: [
-    { id: 'narang-worker', name: 'worker', label: 'worker' },
-    { id: 'narang-db-designer', name: 'db-designer', label: 'db-designer' },
-    { id: 'narang-test-writer', name: 'test-writer', label: 'test-writer' },
-    { id: 'narang-refactorer', name: 'refactorer', label: 'refactorer' },
-  ],
-  darang: [
-    { id: 'darang-reviewer', name: 'reviewer', label: 'reviewer' },
-    { id: 'darang-code-reviewer', name: 'code-reviewer', label: 'code-reviewer' },
-    { id: 'darang-qa-tester', name: 'qa-tester', label: 'qa-tester' },
-    { id: 'darang-security-auditor', name: 'security-auditor', label: 'security-auditor' },
-    { id: 'darang-ux-reviewer', name: 'ux-reviewer', label: 'ux-reviewer' },
-  ],
-  erang: [
-    { id: 'erang-deploy-manager', name: 'deploy-manager', label: 'deploy-manager' },
-    { id: 'erang-db-manager', name: 'db-manager', label: 'db-manager' },
-    { id: 'erang-nginx-manager', name: 'nginx-manager', label: 'nginx-manager' },
-    { id: 'erang-monitoring', name: 'monitoring', label: 'monitoring' },
-    { id: 'erang-dns-manager', name: 'dns-manager', label: 'dns-manager' },
-  ],
-};
-
-const SISTER_DISPLAY: Record<SisterName, string> = {
-  harang: '하랑이',
-  narang: '나랑이',
-  darang: '다랑이',
-  erang: '이랑이',
-};
-
-const SISTER_ROLES: Record<SisterName, string> = {
-  harang: 'Planning & Orchestration',
-  narang: 'Development',
-  darang: 'QA & Review',
-  erang: 'Infra & Deploy',
-};
-
-const SISTER_ORDER: SisterName[] = ['harang', 'narang', 'darang', 'erang'];
-const SUBAGENT_COUNT = Object.values(SUBAGENT_DEFS).reduce((total, defs) => total + defs.length, 0);
-
-const FALLBACK_SISTERS: SisterApiItem[] = [
-  { name: 'harang', status: 'working', role: SISTER_ROLES.harang, currentTask: 'runtime snapshot 확인 중' },
-  { name: 'narang', status: 'working', role: SISTER_ROLES.narang, currentTask: '개발 세션 상태 동기화 중' },
-  { name: 'darang', status: 'online', role: SISTER_ROLES.darang, currentTask: '검증 상태 확인 중' },
-  { name: 'erang', status: 'online', role: SISTER_ROLES.erang, currentTask: '배포 런타임 확인 중' },
-];
-
-function statusToAgentState(status: SisterApiItem['status'], hasTask: boolean): AgentState {
-  if (status === 'offline') return 'error';
-  if (status === 'working') return hasTask ? 'tool_calling' : 'thinking';
-  if (status === 'online') return hasTask ? 'speaking' : 'idle';
-  return 'idle';
-}
-
-function derivedSubagentState(parentState: AgentState, index: number): AgentState {
-  if (parentState === 'error') return 'idle';
-  if (parentState === 'tool_calling' && index === 0) return 'thinking';
-  if (parentState === 'speaking' && index <= 1) return 'thinking';
-  return 'idle';
-}
-
-function normalizeSubagentState(state?: AgentState): AgentState {
-  if (state === 'thinking' || state === 'tool_calling' || state === 'speaking' || state === 'error') {
-    return state;
-  }
-  return 'idle';
-}
-
-function mergeSisterData(
-  statuses: SisterApiItem[],
-  runtime: SisterRuntimeItem[],
-  previous: SisterApiItem[] = [],
-): SisterApiItem[] {
-  const previousMap = new Map(previous.map((item) => [item.name, item]));
-  const statusMap = new Map(statuses.map((item) => [item.name, item]));
-  const runtimeMap = new Map(runtime.map((item) => [item.name, item]));
-
-  return SISTER_ORDER.map((name) => {
-    const prev = previousMap.get(name);
-    const status = statusMap.get(name) ?? prev ?? FALLBACK_SISTERS.find((item) => item.name === name)!;
-    const live = runtimeMap.get(name);
-
-    return {
-      ...prev,
-      ...status,
-      name,
-      role: status.role ?? prev?.role ?? SISTER_ROLES[name],
-      currentTask: live?.currentTask ?? status.currentTask ?? prev?.currentTask ?? null,
-      liveState: live?.mainState ?? prev?.liveState,
-      activeSessionLabel: live?.activeSessionLabel ?? prev?.activeSessionLabel ?? null,
-      gatewayConnected: live?.gatewayConnected ?? prev?.gatewayConnected ?? false,
-      subagents: live?.subagents ?? prev?.subagents ?? [],
-    };
-  });
-}
-
-function buildSisterNodes(sisters: SisterApiItem[]): SisterNode[] {
-  return SISTER_ORDER.map((name) => {
-    const item = sisters.find((s) => s.name === name);
-    const fallbackState = statusToAgentState(item?.status ?? 'unknown', Boolean(item?.currentTask));
-    const state = item?.gatewayConnected ? item.liveState ?? fallbackState : fallbackState;
-
-    const runtimeSubagents = item?.subagents ?? [];
-    const runtimeMap = new Map(runtimeSubagents.map((sub) => [sub.name, sub]));
-
-    const subagents: SubAgent[] = SUBAGENT_DEFS[name].map((def, index) => {
-      const runtime = runtimeMap.get(def.name);
-      return {
-        id: def.id,
-        name: def.name,
-        label: def.label,
-        sister: name,
-        state: runtime ? normalizeSubagentState(runtime.state) : derivedSubagentState(state, index),
-        currentTask: runtime?.currentTask ?? null,
-        updatedAt: runtime?.updatedAt ?? null,
-        sessionLabel: runtime?.sessionLabel ?? null,
-      };
-    });
-
-    return {
-      name,
-      displayName: SISTER_DISPLAY[name],
-      role: item?.role ?? SISTER_ROLES[name],
-      state,
-      currentTask: item?.currentTask ?? null,
-      activeSessionLabel: item?.activeSessionLabel ?? null,
-      subagents,
-    };
-  });
-}
-
-function buildServerEntries(sisters: SisterApiItem[], sisterSource: 'live' | 'snapshot' | 'fallback'): ServerEntry[] {
-  const sisterEntries: ServerEntry[] = SISTER_ORDER.map((name) => {
-    const sister = sisters.find((item) => item.name === name);
-    return {
-      id: `server-${name}`,
-      label: SISTER_DISPLAY[name],
-      type: 'sister' as const,
-      status: sister?.status ?? 'unknown',
-      detail: sister?.currentTask ?? sister?.activeSessionLabel ?? null,
-      source: sister ? sisterSource : 'fallback',
-    };
-  });
-
-  const extraEntries: ServerEntry[] = [
-    { id: 'server-dev', label: 'Dev Server', type: 'dev', status: 'unknown', detail: null, source: 'fallback' },
-    { id: 'server-docker', label: 'Docker / Infra', type: 'docker', status: 'unknown', detail: null, source: 'fallback' },
-  ];
-
-  return [...sisterEntries, ...extraEntries];
-}
-
-function formatGeneratedAt(ts: string): string {
-  try {
-    return new Date(ts).toLocaleTimeString('ko-KR', { hour: '2-digit', minute: '2-digit', second: '2-digit' });
-  } catch {
-    return ts;
-  }
-}
-
-const Shell = styled.div`
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-lg);
-  min-height: 0;
-`;
-
-const PageHeader = styled.div`
-  display: flex;
-  align-items: baseline;
-  gap: var(--space-lg);
-  flex-wrap: wrap;
-`;
-
-const PageTitle = styled.h1`
-  font-size: 20px;
-  font-weight: 600;
-  color: var(--text-primary);
-  letter-spacing: -0.01em;
-`;
-
-const PageMeta = styled.div`
-  font-family: var(--font-mono);
-  font-size: 11px;
-  color: var(--text-secondary);
-  text-transform: uppercase;
-  letter-spacing: 0.06em;
-`;
-
-const FreshnessBar = styled.div`
-  display: flex;
-  gap: var(--space-md);
-  flex-wrap: wrap;
-  margin-left: auto;
-`;
-
-const FreshnessBadge = styled.span<{ $type: 'live' | 'snapshot' | 'fallback' }>`
-  font-family: var(--font-mono);
-  font-size: 10px;
-  text-transform: uppercase;
-  letter-spacing: 0.06em;
-  color: ${({ $type }) => ($type === 'live' ? '#00BFA5' : $type === 'snapshot' ? '#FF9800' : '#777')};
-  border: 1px solid currentColor;
-  padding: 2px 6px;
-  opacity: 0.8;
-`;
-
-const MainArea = styled.div`
-  display: flex;
-  gap: 0;
-  min-height: 0;
-  flex: 1;
-
-  @media (max-width: 767px) {
-    flex-direction: column;
-  }
-`;
-
-const SceneColumn = styled.div`
-  flex: 1;
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-lg);
-  min-width: 0;
-`;
-
-const ChatArea = styled.div`
-  height: 520px;
-  flex-shrink: 0;
-
-  @media (max-width: 767px) {
-    height: 460px;
-  }
-`;
-
-const BottomPanels = styled.div`
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-lg);
-`;
-
-const LoadingOverlay = styled.div`
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  min-height: 400px;
-  font-family: var(--font-mono);
-  font-size: 12px;
-  color: var(--text-secondary);
-  text-transform: uppercase;
-  letter-spacing: 0.08em;
-`;
-
-export default function OfficePage() {
-  const [sisters, setSisters] = useState<SisterApiItem[]>([]);
-  const [opsData, setOpsData] = useState<DashboardOpsData | null>(null);
-  const [loading, setLoading] = useState(true);
-  const [selected, setSelected] = useState<SelectedAgent | null>(null);
-  const [chatSister, setChatSister] = useState<SisterName | null>(null);
-
-  const { connected } = useSocket<SisterApiItem>({
-    onSistersUpdate: (updated) => {
-      setSisters((prev) => mergeSisterData(updated, [], prev));
-    },
-  });
-
-  const fetchAll = useCallback(async () => {
-    const [sistersRes, opsRes, runtimeRes] = await Promise.allSettled([
-      fetch(`${API_URL}/api/sisters`).then((r) => r.json()),
-      fetch(`${API_URL}/api/dashboard/ops`).then((r) => r.json()),
-      fetch(`${API_URL}/api/sisters/runtime`).then((r) => r.json()),
-    ]);
-
-    setSisters((prev) => {
-      const base = sistersRes.status === 'fulfilled' && Array.isArray(sistersRes.value) ? sistersRes.value as SisterApiItem[] : prev;
-      const runtime = runtimeRes.status === 'fulfilled' && Array.isArray(runtimeRes.value) ? runtimeRes.value as SisterRuntimeItem[] : [];
-      return mergeSisterData(base, runtime, prev);
-    });
-
-    if (opsRes.status === 'fulfilled') {
-      setOpsData(opsRes.value as DashboardOpsData);
-    }
-  }, []);
-
-  useEffect(() => {
-    const boot = async () => {
-      try {
-        await fetchAll();
-      } finally {
-        setLoading(false);
-      }
-    };
-
-    void boot();
-    const interval = setInterval(() => {
-      void fetchAll();
-    }, POLL_INTERVAL_MS);
-
-    return () => clearInterval(interval);
-  }, [fetchAll]);
-
-  const hasSisterSnapshot = sisters.length > 0;
-  const sisterDataMode: 'live' | 'snapshot' | 'fallback' = connected ? 'live' : hasSisterSnapshot ? 'snapshot' : 'fallback';
-  const effectiveSisters = hasSisterSnapshot ? sisters : FALLBACK_SISTERS;
-  const sisterNodes = useMemo(() => buildSisterNodes(effectiveSisters), [effectiveSisters]);
-  const serverEntries = useMemo(() => buildServerEntries(effectiveSisters, sisterDataMode), [effectiveSisters, sisterDataMode]);
-
-  const subagentMode: 'live' | 'fallback' = useMemo(() => {
-    return effectiveSisters.some((item) => (item.subagents?.length ?? 0) > 0) ? 'live' : 'fallback';
-  }, [effectiveSisters]);
-
-  const handleSelectSister = useCallback((name: SisterName) => {
-    setSelected({ type: 'sister', name });
-    setChatSister(null);
-  }, []);
-
-  const handleSelectSubagent = useCallback((id: string, sister: SisterName) => {
-    setSelected({ type: 'subagent', id, sister });
-    setChatSister(null);
-  }, []);
-
-  const handleOpenChat = useCallback((sisterName: SisterName) => {
-    setChatSister(sisterName);
-  }, []);
-
-  const pipeline = opsData?.pipeline ?? {
-    activeTask: 'SPRINT-016',
-    focus: 'Office runtime sync',
-    reviewLoopCount: 0,
-    escalationCount: 0,
-    deployState: '—',
-    nodes: [],
-  };
-
-  const freshness = opsData?.freshness ?? {
-    generatedAt: new Date().toISOString(),
-    activityLatestAt: null,
-    sistersLatestAt: null,
-    qaDocLatestAt: null,
-  };
-
-  if (loading) {
-    return <LoadingOverlay>오피스 데이터 로딩 중...</LoadingOverlay>;
-  }
-
-  return (
-    <Shell>
-      <PageHeader>
-        <PageTitle>🏢 오피스 대시보드</PageTitle>
-        <PageMeta>4자매 · {SUBAGENT_COUNT} 서브에이전트 · 협업 관제</PageMeta>
-        <FreshnessBar>
-          <FreshnessBadge $type={sisterDataMode}>
-            자매: {sisterDataMode === 'live' ? 'live · ws' : sisterDataMode === 'snapshot' ? 'snapshot · poll' : 'fallback · doc'}
-          </FreshnessBadge>
-          <FreshnessBadge $type={subagentMode === 'live' ? 'live' : 'fallback'}>
-            서브에이전트: {subagentMode === 'live' ? 'live · runtime' : 'fallback'}
-          </FreshnessBadge>
-          <FreshnessBadge $type="snapshot">pipeline: snapshot</FreshnessBadge>
-        </FreshnessBar>
-      </PageHeader>
-
-      <MainArea>
-        <SceneColumn>
-          <OfficeScene
-            sisters={sisterNodes}
-            selected={selected}
-            onSelectSister={handleSelectSister}
-            onSelectSubagent={handleSelectSubagent}
-            dataMode={sisterDataMode}
-            subagentMode={subagentMode}
-          />
-
-          {chatSister && (
-            <ChatArea>
-              <ChatWorkspace initialSister={chatSister} onClose={() => setChatSister(null)} />
-            </ChatArea>
-          )}
-        </SceneColumn>
-
-        <ContextPanel
-          selected={selected}
-          sisters={sisterNodes}
-          onOpenChat={handleOpenChat}
-          onClear={() => setSelected(null)}
-        />
-      </MainArea>
-
-      <BottomPanels>
-        <PipelinePanel
-          activeTask={pipeline.activeTask}
-          focus={pipeline.focus}
-          reviewLoopCount={pipeline.reviewLoopCount}
-          escalationCount={pipeline.escalationCount}
-          deployState={pipeline.deployState}
-          nodes={pipeline.nodes}
-          freshness={`generated ${formatGeneratedAt(freshness.generatedAt)}`}
-        />
-        <ServerHealthPanel
-          servers={serverEntries}
-          dataMode={sisterDataMode}
-          generatedAt={freshness.generatedAt}
-        />
-      </BottomPanels>
-    </Shell>
-  );
-}

frontend/app/org/page.tsx

@@ -1,280 +0,0 @@
-'use client';
-
-import React, { useEffect, useState } from 'react';
-import styled from 'styled-components';
-import { API_URL } from '@/lib/config';
-
-// ─── Styled ───
-const MainViewport = styled.div`
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-xl);
-  min-height: 80vh;
-`;
-
-const HeaderInfo = styled.div`
-  display: flex;
-  gap: var(--space-xl);
-  font-family: var(--font-mono);
-  font-size: 11px;
-  color: var(--text-secondary);
-  border-bottom: 1px solid var(--border-color);
-  padding-bottom: var(--space-md);
-
-  span { color: var(--text-primary); }
-`;
-
-const TreeContainer = styled.div`
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-  overflow-x: auto;
-  padding: var(--space-xl) 0;
-
-  @media (max-width: 767px) {
-    align-items: flex-start;
-  }
-`;
-
-const NodeGroup = styled.div`
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-  position: relative;
-`;
-
-const TerminalCard = styled.div<{ $level: 'high' | 'mid' | 'low' | 'none' }>`
-  border: 1px solid ${({ $level }) => ({
-    high: '#f43f5e',
-    mid: '#3b82f6',
-    low: '#10b981',
-    none: '#525252',
-  })[$level]};
-  border-left-width: 3px;
-  padding: var(--space-md) var(--space-lg);
-  background: var(--bg-main);
-  min-width: 200px;
-  max-width: 260px;
-  box-shadow: 0 10px 30px rgba(0,0,0,0.5);
-  transition: border-color 0.2s, box-shadow 0.2s;
-  position: relative;
-  cursor: default;
-
-  &:hover {
-    box-shadow: 0 12px 36px rgba(0,0,0,0.7);
-  }
-`;
-
-const NodeLabel = styled.div`
-  font-size: 14px;
-  font-weight: 600;
-  color: var(--text-primary);
-  margin-bottom: var(--space-sm);
-
-  span {
-    color: var(--text-secondary);
-    margin-right: var(--space-xs);
-    font-family: var(--font-mono);
-    font-size: 11px;
-  }
-`;
-
-const BadgeRow = styled.div`
-  display: flex;
-  gap: var(--space-xs);
-  flex-wrap: wrap;
-`;
-
-const Badge = styled.div`
-  background: #1a1a1a;
-  border: 1px solid var(--border-color);
-  padding: 2px 6px;
-  font-size: 9px;
-  font-family: var(--font-mono);
-  font-weight: 700;
-  text-transform: uppercase;
-  letter-spacing: 0.04em;
-  color: var(--text-secondary);
-
-  b { color: var(--text-primary); font-weight: normal; }
-`;
-
-const TreeConnector = styled.div`
-  width: 1px;
-  height: 24px;
-  background: var(--border-color);
-  margin: 0 auto;
-`;
-
-const TreeBranch = styled.div`
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-`;
-
-const TreeChildren = styled.div`
-  display: flex;
-  gap: var(--space-xl);
-  align-items: flex-start;
-  position: relative;
-
-  &::before {
-    content: '';
-    position: absolute;
-    top: 0;
-    left: calc(var(--space-xl) / 2 + 100px);
-    right: calc(var(--space-xl) / 2 + 100px);
-    height: 1px;
-    background: var(--border-color);
-  }
-
-  @media (max-width: 767px) {
-    flex-direction: column;
-    gap: var(--space-lg);
-
-    &::before { display: none; }
-  }
-`;
-
-const PageFooter = styled.footer`
-  margin-top: auto;
-  width: 100%;
-  padding: var(--space-lg) 0;
-  display: flex;
-  justify-content: space-between;
-  border-top: 1px solid var(--border-color);
-  font-family: var(--font-mono);
-  color: var(--text-secondary);
-  font-size: 10px;
-`;
-
-type Level = 'high' | 'mid' | 'low' | 'none';
-
-interface OrgData {
-  owner: { name: string; role: string };
-  sisters: Array<{
-    name: string;
-    role: string;
-    description?: string;
-    status?: string;
-    lxcId?: number;
-  }>;
-  pipeline: Array<{ from: string; to: string; label: string }>;
-}
-
-const LEVEL_MAP: Record<string, Level> = {
-  Orchestrator: 'high',
-  Generator: 'mid',
-  Evaluator: 'mid',
-  'Infra Manager': 'low',
-};
-
-const ROLE_TAG: Record<string, string> = {
-  Orchestrator: 'ORCH',
-  Generator: 'GEN',
-  Evaluator: 'EVAL',
-  'Infra Manager': 'INFRA',
-};
-
-const LXC_ID: Record<string, number> = {
-  harang: 104,
-  narang: 105,
-  darang: 106,
-  erang: 107,
-};
-
-export default function OrgPage() {
-  const [orgData, setOrgData] = useState<OrgData | null>(null);
-  const ts = new Date().toLocaleDateString('ko-KR').replace(/\. /g, '.').replace('.', '') + '_' +
-    new Date().toLocaleTimeString('ko-KR', { hour12: false, hour: '2-digit', minute: '2-digit' });
-
-  useEffect(() => {
-    fetch(`${API_URL}/api/org`)
-      .then((r) => r.json())
-      .then(setOrgData)
-      .catch(() => {});
-  }, []);
-
-  const sisters = orgData?.sisters ?? [];
-
-  return (
-    <MainViewport>
-      <HeaderInfo>
-        <div>SYS_TYPE: <span>CORE_ROOT_01</span></div>
-        <div>TIMESTAMP: <span style={{ color: 'var(--text-secondary)' }}>{ts}</span></div>
-      </HeaderInfo>
-
-      <TreeContainer>
-        <NodeGroup>
-          {/* HQ */}
-          <TerminalCard $level="high">
-            <NodeLabel><span>[HQ]</span> 하나랑 글로벌</NodeLabel>
-            <BadgeRow>
-              <Badge>MEM: <b>{sisters.length + 1}</b></Badge>
-              <Badge>S_ADMIN</Badge>
-              <Badge>LV_09</Badge>
-            </BadgeRow>
-          </TerminalCard>
-          <TreeConnector />
-
-          {/* 자매 레벨 */}
-          <TreeBranch>
-            <TreeChildren>
-              {/* 하랑이 (Orchestrator) */}
-              {sisters.filter((s) => s.role === 'Orchestrator').map((s) => (
-                <NodeGroup key={s.name}>
-                  <TerminalCard $level={LEVEL_MAP[s.role] ?? 'none'}>
-                    <NodeLabel>
-                      <span>[{ROLE_TAG[s.role] ?? s.role}]</span>
-                      {s.name === 'harang' ? '하랑이' : s.name}
-                    </NodeLabel>
-                    <BadgeRow>
-                      <Badge>LXC: <b>{LXC_ID[s.name] ?? '---'}</b></Badge>
-                      <Badge>{ROLE_TAG[s.role] ?? s.role}</Badge>
-                      <Badge>{s.status === 'online' ? 'ACTIVE' : s.status === 'offline' ? 'STBY' : 'RUN'}</Badge>
-                    </BadgeRow>
-                  </TerminalCard>
-                  <TreeConnector />
-                  <TreeBranch>
-                    <TreeChildren>
-                      {/* 나랑/다랑/이랑 */}
-                      {sisters.filter((s2) => s2.role !== 'Orchestrator').map((s2) => (
-                        <NodeGroup key={s2.name}>
-                          <TerminalCard $level={LEVEL_MAP[s2.role] ?? 'none'}>
-                            <NodeLabel>
-                              {s2.name === 'narang' ? '나랑이' : s2.name === 'darang' ? '다랑이' : '이랑이'}
-                            </NodeLabel>
-                            <BadgeRow>
-                              <Badge>LXC: <b>{LXC_ID[s2.name] ?? '---'}</b></Badge>
-                              <Badge>{ROLE_TAG[s2.role] ?? s2.role}</Badge>
-                              <Badge>{s2.status === 'online' ? 'ON' : s2.status === 'offline' ? '--' : 'RUN'}</Badge>
-                            </BadgeRow>
-                          </TerminalCard>
-                        </NodeGroup>
-                      ))}
-                    </TreeChildren>
-                  </TreeBranch>
-                </NodeGroup>
-              ))}
-
-              {/* Orchestrator 없을 때 fallback */}
-              {sisters.filter((s) => s.role === 'Orchestrator').length === 0 && (
-                <NodeGroup>
-                  <TerminalCard $level="none">
-                    <NodeLabel>데이터 없음</NodeLabel>
-                    <BadgeRow><Badge>N/A</Badge></BadgeRow>
-                  </TerminalCard>
-                </NodeGroup>
-              )}
-            </TreeChildren>
-          </TreeBranch>
-        </NodeGroup>
-      </TreeContainer>
-
-      <PageFooter>
-        <div>TOTAL_NODES: {String(sisters.length + 1).padStart(2, '0')}</div>
-        <div>STATUS: SYNC_COMPLETE</div>
-      </PageFooter>
-    </MainViewport>
-  );
-}

frontend/app/projects/[id]/page.tsx

@@ -1,266 +0,0 @@
-'use client';
-
-import React, { useEffect, useMemo, useState } from 'react';
-import { useParams } from 'next/navigation';
-import styled from 'styled-components';
-import Link from 'next/link';
-import { LabelMeta, PageTitle, SectionTitle, TechBar, TechBarFill, BtnToggle } from '@/components/ui/base';
-import { API_URL } from '@/lib/config';
-import SisterAvatar from '@/components/common/SisterAvatar';
-
-interface TaskItem { id: number; taskId: string; title: string; assignee: string; status: string; }
-interface SprintItem { id: number; number: number; name: string; status: string; progress: number; tasks: TaskItem[]; }
-interface HistoryItem { label: string; kind: 'sprint' | 'hotfix'; summary?: string | null; description?: string | null; }
-interface SisterState { name: string; status: string; }
-interface CommitItem { sha?: string; html_url?: string; commit?: { message?: string; author?: { date?: string; name?: string } }; author?: { login?: string } | null; }
-interface BranchItem { name?: string; protected?: boolean; commit?: { id?: string } }
-interface PullItem { id?: number; number?: number; title?: string; html_url?: string; state?: string; merged?: boolean; user?: { login?: string }; created_at?: string; }
-interface ProjectDetail {
-  id: number;
-  name: string;
-  repoUrl: string;
-  status: string;
-  phase: string;
-  currentSprint?: string | null;
-  latestQa: { label: string | null; status: 'passed' | 'failed' | 'unknown'; blockerCount: number; summary: string | null } | null;
-  deploy: { branch: string; status: string; latestDeployAt: string | null; redeployRequired: boolean; note: string };
-}
-
-const Breadcrumb = styled.div`font-family:var(--font-mono);font-size:11px;color:var(--text-secondary);margin-bottom:var(--space-md);a{color:var(--text-secondary);text-decoration:none;&:hover{color:var(--text-primary);}}`;
-const PageTitleRow = styled.div`display:flex;justify-content:space-between;align-items:flex-start;gap:var(--space-lg);margin-bottom:var(--space-xl);flex-wrap:wrap;`;
-const ProjectGrid = styled.div`display:grid;grid-template-columns:minmax(0,1fr) 320px;gap:var(--space-xl);align-items:start;@media (max-width:1199px){display:flex;flex-direction:column;}`;
-const Panel = styled.section<{ $column?: 'main' | 'side'; $mobileOrder?: number }>`border:1px solid var(--border-color);padding:var(--space-lg);background:var(--bg-surface);${({$column})=>$column==='side'?'grid-column:2;':'grid-column:1;'}@media (max-width:1199px){order:${({$mobileOrder=0})=>$mobileOrder};}`;
-const FlowList = styled.div`display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:var(--space-sm);@media (max-width:767px){grid-template-columns:1fr;}`;
-const FlowItem = styled.div<{ $active:boolean }>`border:1px solid ${({$active})=>$active?'var(--text-primary)':'var(--border-color)'};padding:var(--space-md);background:${({$active})=>$active?'#111':'transparent'};display:flex;flex-direction:column;gap:4px;`;
-const LedgerList = styled.div`display:flex;flex-direction:column;gap:var(--space-md);`;
-const LedgerItem = styled.div`display:flex;flex-direction:column;gap:8px;border-top:1px solid #1a1a1a;padding-top:var(--space-md);&:first-child{border-top:none;padding-top:0;}`;
-const Meta = styled.div`font-size:11px;color:var(--text-secondary);font-family:var(--font-mono);`;
-const NodeStack = styled.div`display:flex;flex-direction:column;gap:var(--space-sm);`;
-const NodeMiniCard = styled.div`border:1px solid var(--border-color);padding:var(--space-sm) var(--space-md);display:flex;justify-content:space-between;align-items:center;gap:var(--space-md);`;
-const NodeInfo = styled.div`display:flex;align-items:center;gap:var(--space-sm);`;
-const NodeDot = styled.div<{ $status:string }>`width:8px;height:8px;border-radius:50%;background:${({$status})=>$status==='online'?'#00ff88':$status==='working'?'#5fafff':'#555'};`;
-const Empty = styled.div`padding:var(--space-xl) 0;color:var(--text-secondary);font-size:13px;font-family:var(--font-mono);`;
-const TabBar = styled.div`display:flex;gap:var(--space-sm);margin-bottom:var(--space-xl);flex-wrap:wrap;`;
-const GitList = styled.div`display:flex;flex-direction:column;gap:var(--space-sm);`;
-const GitItem = styled.a`border:1px solid var(--border-color);padding:12px var(--space-lg);text-decoration:none;color:var(--text-primary);display:flex;justify-content:space-between;gap:var(--space-md);align-items:center;`;
-const GitPrimary = styled.div`display:flex;flex-direction:column;gap:4px;min-width:0;`;
-const GitTitle = styled.div`font-size:13px;color:var(--text-primary);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;`;
-
-const ROLE_LABEL: Record<string, string> = { harang: 'ORCHESTRATOR', narang: 'GENERATOR', darang: 'EVALUATOR', erang: 'INFRA' };
-const ROLE_NAME: Record<string, string> = { harang: '하랑', narang: '나랑', darang: '다랑', erang: '이랑' };
-
-function formatDate(value?: string | null): string {
-  if (!value) return '-';
-  return new Date(value).toLocaleString('ko-KR');
-}
-
-export default function ProjectDetailPage() {
-  const { id } = useParams<{ id: string }>();
-  const [project, setProject] = useState<ProjectDetail | null>(null);
-  const [tasks, setTasks] = useState<SprintItem[]>([]);
-  const [history, setHistory] = useState<HistoryItem[]>([]);
-  const [sisters, setSisters] = useState<SisterState[]>([]);
-  const [commits, setCommits] = useState<CommitItem[]>([]);
-  const [branches, setBranches] = useState<BranchItem[]>([]);
-  const [pulls, setPulls] = useState<PullItem[]>([]);
-  const [tab, setTab] = useState<'overview'|'commits'|'branches'|'prs'>('overview');
-  const [loading, setLoading] = useState(true);
-
-  useEffect(() => {
-    Promise.allSettled([
-      fetch(`${API_URL}/api/projects/${id}`),
-      fetch(`${API_URL}/api/projects/${id}/tasks`),
-      fetch(`${API_URL}/api/projects/${id}/history`),
-      fetch(`${API_URL}/api/sisters`),
-    ]).then(async ([projectRes, tasksRes, historyRes, sistersRes]) => {
-      if (projectRes.status === 'fulfilled' && projectRes.value.ok) setProject(await projectRes.value.json());
-      if (tasksRes.status === 'fulfilled' && tasksRes.value.ok) setTasks(await tasksRes.value.json());
-      if (historyRes.status === 'fulfilled' && historyRes.value.ok) setHistory(await historyRes.value.json());
-      if (sistersRes.status === 'fulfilled' && sistersRes.value.ok) setSisters(await sistersRes.value.json());
-    }).finally(() => setLoading(false));
-  }, [id]);
-
-  useEffect(() => {
-    if (tab === 'commits' && commits.length === 0) fetch(`${API_URL}/api/projects/${id}/commits?limit=20`).then((r) => r.ok ? r.json() : []).then(setCommits).catch(() => {});
-    if (tab === 'branches' && branches.length === 0) fetch(`${API_URL}/api/projects/${id}/branches`).then((r) => r.ok ? r.json() : []).then(setBranches).catch(() => {});
-    if (tab === 'prs' && pulls.length === 0) fetch(`${API_URL}/api/projects/${id}/pulls?state=all`).then((r) => r.ok ? r.json() : []).then(setPulls).catch(() => {});
-  }, [tab, id, commits.length, branches.length, pulls.length]);
-
-  const allTasks = useMemo(() => tasks.flatMap((sprint) => sprint.tasks ?? []), [tasks]);
-  const assignedNodes = useMemo(() => {
-    const names = Array.from(new Set(allTasks.map((task) => task.assignee).filter(Boolean)));
-    return (names.length > 0 ? names : ['harang', 'narang', 'darang', 'erang']).map((name) => ({
-      name,
-      status: sisters.find((sister) => sister.name === name)?.status ?? 'offline',
-    }));
-  }, [allTasks, sisters]);
-  const hotfixes = history.filter((entry) => entry.kind === 'hotfix');
-  const currentSprintMeta = useMemo(() => {
-    if (project?.currentSprint) return project.currentSprint;
-
-    const activeSprint = tasks.find((sprint) => sprint.status === 'in_progress');
-    if (activeSprint) return activeSprint.name || String(activeSprint.number).padStart(2, '0');
-
-    const latestSprint = tasks.at(-1);
-    if (latestSprint?.status === 'done') return 'COMPLETED';
-    if (latestSprint) return latestSprint.name || String(latestSprint.number).padStart(2, '0');
-
-    return 'BACKLOG';
-  }, [project, tasks]);
-
-  if (loading) return <Empty>LOADING...</Empty>;
-  if (!project) return <Empty>PROJECT NOT FOUND</Empty>;
-
-  const flowStates = [
-    { key: 'PLANNING', title: 'Planning', active: project.phase === 'PLANNING' },
-    { key: 'IMPLEMENT', title: 'Implement', active: project.phase === 'IMPLEMENT' },
-    { key: 'QA', title: 'QA', active: project.phase === 'QA' },
-    { key: 'READY FOR DEPLOY', title: 'Merge to Main', active: project.phase === 'READY FOR DEPLOY' },
-    { key: 'DEPLOYED', title: 'Redeploy', active: project.phase === 'DEPLOYED' },
-  ];
-
-  return (
-    <>
-      <Breadcrumb><Link href="/projects">PROJECTS</Link> / P-{String(project.id).padStart(3, '0')} / {project.name}</Breadcrumb>
-      <PageTitleRow>
-        <PageTitle>
-          {project.name}
-          {project.repoUrl && <a href={project.repoUrl} target="_blank" rel="noopener" style={{ fontSize: '12px', color: '#5fafff', marginLeft: 'var(--space-md)', fontWeight: 400 }}>↗ GITEA</a>}
-        </PageTitle>
-        <LabelMeta><span>STATUS:</span>{project.status?.toUpperCase()} / <span>SPRINT:</span>{currentSprintMeta} / <span>DEPLOY:</span>{project.deploy.status}</LabelMeta>
-      </PageTitleRow>
-
-      <TabBar>
-        <BtnToggle $active={tab === 'overview'} onClick={() => setTab('overview')}>Overview</BtnToggle>
-        <BtnToggle $active={tab === 'commits'} onClick={() => setTab('commits')}>Commits</BtnToggle>
-        <BtnToggle $active={tab === 'branches'} onClick={() => setTab('branches')}>Branches</BtnToggle>
-        <BtnToggle $active={tab === 'prs'} onClick={() => setTab('prs')}>Pull Requests</BtnToggle>
-      </TabBar>
-
-      {tab === 'overview' && (
-        <ProjectGrid>
-          <Panel $column="main" $mobileOrder={1}>
-            <SectionTitle><span>DELIVERY FLOW</span><LabelMeta>{project.phase}</LabelMeta></SectionTitle>
-            <FlowList>
-              {flowStates.map((item) => (
-                <FlowItem key={item.key} $active={item.active}>
-                  <LabelMeta>{item.title}</LabelMeta>
-                  <Meta>{item.key}</Meta>
-                </FlowItem>
-              ))}
-            </FlowList>
-          </Panel>
-
-          <Panel $column="side" $mobileOrder={2}>
-            <SectionTitle><span>QA STATUS</span><LabelMeta>{project.latestQa?.status ?? 'unknown'}</LabelMeta></SectionTitle>
-            <Meta>{project.latestQa?.label ?? 'QA 문서 없음'}</Meta>
-            <div style={{ marginTop: 'var(--space-md)', fontSize: '13px', color: 'var(--text-primary)' }}>{project.latestQa?.summary ?? 'latest QA 없음'}</div>
-            <Meta style={{ marginTop: 'var(--space-md)' }}>{project.latestQa?.status === 'passed' ? 'QA PASSED' : project.latestQa?.status === 'failed' ? `QA FAILED · ${project.latestQa.blockerCount} BLOCKERS` : 'QA PENDING'}</Meta>
-          </Panel>
-
-          <Panel $column="side" $mobileOrder={3}>
-            <SectionTitle><span>DEPLOY STATUS</span><LabelMeta>{project.deploy.branch}</LabelMeta></SectionTitle>
-            <Meta>{project.deploy.status}</Meta>
-            <Meta style={{ marginTop: 'var(--space-sm)' }}>{project.deploy.note}</Meta>
-            <Meta style={{ marginTop: 'var(--space-sm)' }}>{project.deploy.latestDeployAt ? formatDate(project.deploy.latestDeployAt) : 'LAST DEPLOY UNKNOWN'}</Meta>
-          </Panel>
-
-          <Panel $column="main" $mobileOrder={4}>
-            <SectionTitle><span>SPRINT LEDGER</span><LabelMeta>{tasks.length} SPRINTS</LabelMeta></SectionTitle>
-            <LedgerList>
-              {tasks.map((sprint) => (
-                <LedgerItem key={sprint.id}>
-                  <div style={{ display: 'flex', justifyContent: 'space-between', gap: 'var(--space-md)', flexWrap: 'wrap' }}>
-                    <div>
-                      <div style={{ fontSize: '14px', fontWeight: 600, color: 'var(--text-primary)' }}>SPRINT {String(sprint.number).padStart(2, '0')} · {sprint.name}</div>
-                      <Meta>{sprint.tasks?.length ?? 0} TASKS · {sprint.tasks?.filter((task) => task.status === 'done').length ?? 0} DONE</Meta>
-                    </div>
-                    <LabelMeta>{sprint.status}</LabelMeta>
-                  </div>
-                  <TechBar><TechBarFill $width={sprint.progress ?? 0} /></TechBar>
-                </LedgerItem>
-              ))}
-              {tasks.length === 0 && <Empty>NO SPRINTS</Empty>}
-            </LedgerList>
-          </Panel>
-
-          <Panel $column="main" $mobileOrder={5}>
-            <SectionTitle><span>HOTFIX HISTORY</span><LabelMeta>{hotfixes.length} ITEMS</LabelMeta></SectionTitle>
-            <LedgerList>
-              {hotfixes.map((entry) => (
-                <LedgerItem key={entry.label}>
-                  <div style={{ fontSize: '14px', fontWeight: 600, color: 'var(--text-primary)' }}>{entry.label}</div>
-                  <Meta>{entry.summary ?? entry.description ?? 'hotfix summary 없음'}</Meta>
-                </LedgerItem>
-              ))}
-              {hotfixes.length === 0 && <Empty>NO HOTFIX HISTORY</Empty>}
-            </LedgerList>
-          </Panel>
-
-          <Panel $column="side" $mobileOrder={6}>
-            <SectionTitle><span>ASSIGNED NODES</span><LabelMeta>LIVE STATUS</LabelMeta></SectionTitle>
-            <NodeStack>
-              {assignedNodes.map((node) => (
-                <NodeMiniCard key={node.name}>
-                  <NodeInfo>
-                    <SisterAvatar name={node.name} size={28} />
-                    <div>
-                      <div style={{ fontSize: '13px', color: 'var(--text-primary)', fontWeight: 600 }}>{ROLE_NAME[node.name] ?? node.name}</div>
-                      <Meta>{ROLE_LABEL[node.name] ?? 'NODE'}</Meta>
-                    </div>
-                  </NodeInfo>
-                  <NodeDot $status={node.status} />
-                </NodeMiniCard>
-              ))}
-            </NodeStack>
-          </Panel>
-        </ProjectGrid>
-      )}
-
-      {tab === 'commits' && (
-        <GitList>
-          {commits.map((commit) => (
-            <GitItem key={commit.sha} href={commit.html_url ?? '#'} target="_blank" rel="noopener">
-              <GitPrimary>
-                <GitTitle>{commit.commit?.message?.split('\n')[0] ?? commit.sha ?? 'UNKNOWN COMMIT'}</GitTitle>
-                <Meta>{commit.commit?.author?.name ?? commit.author?.login ?? '-'}</Meta>
-              </GitPrimary>
-              <Meta>{commit.sha?.slice(0, 7) ?? '-'} · {formatDate(commit.commit?.author?.date)}</Meta>
-            </GitItem>
-          ))}
-          {commits.length === 0 && <Empty>NO COMMITS</Empty>}
-        </GitList>
-      )}
-
-      {tab === 'branches' && (
-        <GitList>
-          {branches.map((branch) => (
-            <GitItem key={branch.name} href={project.repoUrl} target="_blank" rel="noopener">
-              <GitPrimary>
-                <GitTitle>{branch.name ?? 'UNKNOWN BRANCH'}</GitTitle>
-                <Meta>{branch.protected ? 'PROTECTED' : 'ACTIVE BRANCH'}</Meta>
-              </GitPrimary>
-              <Meta>{branch.commit?.id?.slice(0, 7) ?? '-'}</Meta>
-            </GitItem>
-          ))}
-          {branches.length === 0 && <Empty>NO BRANCHES</Empty>}
-        </GitList>
-      )}
-
-      {tab === 'prs' && (
-        <GitList>
-          {pulls.map((pull) => (
-            <GitItem key={pull.id} href={pull.html_url ?? '#'} target="_blank" rel="noopener">
-              <GitPrimary>
-                <GitTitle>#{pull.number ?? '-'} {pull.title ?? 'UNKNOWN PR'}</GitTitle>
-                <Meta>{pull.user?.login ?? '-'} · {pull.merged ? 'MERGED' : pull.state?.toUpperCase() ?? 'UNKNOWN'}</Meta>
-              </GitPrimary>
-              <Meta>{formatDate(pull.created_at)}</Meta>
-            </GitItem>
-          ))}
-          {pulls.length === 0 && <Empty>NO PULL REQUESTS</Empty>}
-        </GitList>
-      )}
-    </>
-  );
-}

frontend/app/projects/page.tsx

@@ -1,113 +0,0 @@
-'use client';
-
-import React, { useEffect, useState } from 'react';
-import styled from 'styled-components';
-import Link from 'next/link';
-import { PageTitle, LabelMeta, TechBar, TechBarFill, Btn } from '@/components/ui/base';
-import { API_URL } from '@/lib/config';
-import { adminFetch } from '@/lib/adminFetch';
-
-interface ProjectListItem {
-  id: number;
-  name: string;
-  description: string | null;
-  progress: number;
-  phase: string;
-  currentSprint: string | null;
-  latestHotfix: string | null;
-  latestQaLabel: string | null;
-  latestQaStatus: 'passed' | 'failed' | 'unknown';
-  blockerCount: number;
-  deployStatus: string;
-  updatedAt: string;
-}
-
-const ProjectList = styled.div`display:flex;flex-direction:column;gap:var(--space-md);`;
-const ProjectRow = styled(Link)`display:grid;grid-template-columns:1.2fr 1fr 220px;gap:var(--space-lg);padding:var(--space-lg);border:1px solid var(--border-color);align-items:center;text-decoration:none;transition:border-color .15s, background .15s;&:hover{border-color:var(--border-hover);background:#111}@media (max-width:1199px){grid-template-columns:1fr;}`;
-const Left = styled.div`display:flex;flex-direction:column;gap:6px;min-width:0;`;
-const ProjectName = styled.div`font-size:15px;font-weight:600;color:var(--text-primary);`;
-const ProjectDesc = styled.div`font-size:12px;color:var(--text-secondary);line-height:1.5;`;
-const Middle = styled.div`display:flex;flex-direction:column;gap:10px;`;
-const Right = styled.div`display:flex;flex-direction:column;gap:8px;align-items:flex-end;@media (max-width:1199px){align-items:flex-start;}`;
-const Meta = styled.div`font-size:11px;color:var(--text-secondary);font-family:var(--font-mono);`;
-const PhaseBadge = styled.div<{ $phase:string }>`font-size:11px;font-family:var(--font-mono);padding:4px 8px;border:1px solid ${({$phase})=>$phase==='DEPLOYED'?'#5fafff44':$phase==='READY FOR DEPLOY'?'#5fff8a44':$phase==='QA'?'#ffcc6644':'var(--border-color)'};color:${({$phase})=>$phase==='DEPLOYED'?'#5fafff':$phase==='READY FOR DEPLOY'?'#5fff8a':$phase==='QA'?'#ffcc66':'var(--text-primary)'};white-space:nowrap;`;
-const EmptyState = styled.div`padding:var(--space-xl) 0;color:var(--text-secondary);font-size:13px;font-family:var(--font-mono);`;
-
-function qaLabel(project: ProjectListItem): string {
-  if (project.latestQaStatus === 'passed') return 'QA PASSED';
-  if (project.latestQaStatus === 'failed') return `QA FAILED${project.blockerCount > 0 ? ` · ${project.blockerCount} BLOCKERS` : ''}`;
-  return 'QA PENDING';
-}
-
-export default function ProjectsPage() {
-  const [projects, setProjects] = useState<ProjectListItem[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [syncing, setSyncing] = useState(false);
-  const [syncResult, setSyncResult] = useState<string | null>(null);
-
-  const loadProjects = () => {
-    setLoading(true);
-    fetch(`${API_URL}/api/projects`).then((r) => r.json()).then(setProjects).catch(() => {}).finally(() => setLoading(false));
-  };
-
-  const runSync = async (path: string, label: string) => {
-    setSyncing(true);
-    setSyncResult(null);
-    try {
-      const res = await adminFetch(path, { method: 'POST' });
-      const data = await res.json();
-      setSyncResult(`${label}: ${JSON.stringify(data)}`);
-      loadProjects();
-    } catch {
-      setSyncResult(`${label}: failed`);
-    } finally {
-      setSyncing(false);
-    }
-  };
-
-  useEffect(() => { loadProjects(); }, []);
-
-  return (
-    <>
-      <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 'var(--space-md)', flexWrap: 'wrap', marginBottom: 'var(--space-lg)' }}>
-        <PageTitle>프로젝트</PageTitle>
-        <div style={{ display: 'flex', alignItems: 'center', gap: 'var(--space-md)', flexWrap: 'wrap' }}>
-          {syncResult && <span style={{ fontFamily: 'var(--font-mono)', fontSize: '11px', color: 'var(--text-secondary)' }}>{syncResult}</span>}
-          <LabelMeta>VOL: {String(projects.length).padStart(2, '0')}</LabelMeta>
-          <Btn onClick={() => runSync('/api/admin/gitea/sync', 'gitea sync')} disabled={syncing}>{syncing ? 'SYNCING...' : '↻ GITEA SYNC'}</Btn>
-          <Btn onClick={() => runSync('/api/projects/sync-all-sprints', 'sprint sync')} disabled={syncing}>{syncing ? '...' : '↻ SPRINT SYNC'}</Btn>
-        </div>
-      </div>
-
-      {loading ? <EmptyState>LOADING...</EmptyState> : projects.length === 0 ? <EmptyState>NO PROJECTS REGISTERED</EmptyState> : (
-        <ProjectList>
-          {projects.map((project) => (
-            <ProjectRow key={project.id} href={`/projects/${project.id}`}>
-              <Left>
-                <Meta>P-{String(project.id).padStart(3, '0')}</Meta>
-                <ProjectName>{project.name}</ProjectName>
-                <ProjectDesc>{project.description ?? '설명 없음'}</ProjectDesc>
-              </Left>
-              <Middle>
-                <div style={{ display: 'flex', alignItems: 'center', gap: 'var(--space-sm)', flexWrap: 'wrap' }}>
-                  <PhaseBadge $phase={project.phase}>{project.phase}</PhaseBadge>
-                  <Meta>{project.currentSprint ? `SPRINT ${project.currentSprint}` : 'PLANNING BACKLOG'}</Meta>
-                  {project.latestHotfix && <Meta>HOTFIX {project.latestHotfix}</Meta>}
-                </div>
-                <div style={{ display: 'flex', alignItems: 'center', gap: 'var(--space-sm)' }}>
-                  <TechBar style={{ flex: 1 }}><TechBarFill $width={project.progress ?? 0} /></TechBar>
-                  <LabelMeta style={{ minWidth: 44, textAlign: 'right' }}>{project.progress ?? 0}%</LabelMeta>
-                </div>
-              </Middle>
-              <Right>
-                <Meta>{qaLabel(project)}</Meta>
-                <Meta>{project.deployStatus}</Meta>
-                <Meta>{new Date(project.updatedAt).toLocaleDateString('ko-KR')} UPDATED</Meta>
-              </Right>
-            </ProjectRow>
-          ))}
-        </ProjectList>
-      )}
-    </>
-  );
-}

frontend/app/rails/page.tsx

@@ -0,0 +1,478 @@
+'use client';
+
+import React, { useCallback, useEffect, useMemo, useState } from 'react';
+import styled from 'styled-components';
+import { API_URL } from '@/lib/config';
+import {
+  useRailsSocket,
+  type RailsPipelineSummary,
+  type RailsSubTaskNode,
+} from '@/lib/useRailsSocket';
+import SubTaskTree from '@/components/rails/SubTaskTree';
+import SubTaskDetailDrawer from '@/components/rails/SubTaskDetailDrawer';
+import TransitionsTimeline from '@/components/rails/TransitionsTimeline';
+
+const Page = styled.main`
+  display: flex;
+  flex-direction: column;
+  gap: 28px;
+  padding: 32px 36px;
+  max-width: 1600px;
+  margin: 0 auto;
+  width: 100%;
+`;
+
+const Header = styled.header`
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-end;
+  gap: 24px;
+  flex-wrap: wrap;
+`;
+
+const TitleBlock = styled.div``;
+
+const Title = styled.h1`
+  font-size: 28px;
+  font-weight: 700;
+  margin: 0 0 4px;
+  letter-spacing: -0.01em;
+`;
+
+const Subtitle = styled.p`
+  font-size: 13px;
+  color: var(--text-secondary);
+  margin: 0;
+`;
+
+const Live = styled.span<{ $on: boolean }>`
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: ${({ $on }) => ($on ? '#22c55e' : 'var(--text-secondary)')};
+
+  &::before {
+    content: '';
+    width: 8px;
+    height: 8px;
+    border-radius: 50%;
+    background: ${({ $on }) => ($on ? '#22c55e' : '#525252')};
+    box-shadow: ${({ $on }) =>
+      $on ? '0 0 0 4px rgba(34, 197, 94, 0.15)' : 'none'};
+  }
+`;
+
+const StartCard = styled.section`
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 16px;
+  padding: 24px 28px;
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+`;
+
+const StartLabel = styled.div`
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--text-secondary);
+`;
+
+const StartRow = styled.div`
+  display: grid;
+  grid-template-columns: minmax(180px, 240px) 1fr auto;
+  gap: 12px;
+
+  @media (max-width: 700px) {
+    grid-template-columns: 1fr;
+  }
+`;
+
+const Input = styled.input`
+  padding: 12px 16px;
+  background: var(--bg-surface);
+  border: 1px solid var(--border-color);
+  color: var(--text-primary);
+  border-radius: 10px;
+  font-size: 14px;
+  font-family: var(--font-sans);
+
+  &::placeholder {
+    color: var(--text-secondary);
+  }
+
+  &:focus {
+    outline: none;
+    border-color: #5fafff;
+    box-shadow: 0 0 0 3px rgba(95, 175, 255, 0.15);
+  }
+`;
+
+const StartButton = styled.button`
+  padding: 12px 28px;
+  background: #5fafff;
+  color: #0a0a0a;
+  border: none;
+  border-radius: 10px;
+  font-weight: 700;
+  font-size: 14px;
+  cursor: pointer;
+  transition: opacity 0.15s;
+
+  &:hover {
+    opacity: 0.85;
+  }
+
+  &:disabled {
+    opacity: 0.4;
+    cursor: not-allowed;
+  }
+`;
+
+const Layout = styled.div`
+  display: grid;
+  grid-template-columns: minmax(360px, 440px) 1fr;
+  gap: 24px;
+
+  @media (max-width: 1100px) {
+    grid-template-columns: 1fr;
+  }
+`;
+
+const Pane = styled.section`
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 16px;
+  padding: 24px 28px;
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+  min-height: 420px;
+`;
+
+const PaneHeader = styled.div`
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding-bottom: 14px;
+  border-bottom: 1px solid var(--border-color);
+`;
+
+const PaneTitle = styled.h2`
+  font-size: 12px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--text-secondary);
+  margin: 0;
+`;
+
+const Counter = styled.span`
+  font-family: var(--font-mono);
+  font-size: 11px;
+  color: var(--text-secondary);
+`;
+
+const PipelineList = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+`;
+
+const PipelineCard = styled.button<{ $selected: boolean; $state: string }>`
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  padding: 18px 20px;
+  background: ${({ $selected }) =>
+    $selected ? 'var(--bg-surface)' : 'transparent'};
+  border: 1px solid ${({ $selected }) =>
+    $selected ? '#5fafff' : 'var(--border-color)'};
+  border-radius: 12px;
+  cursor: pointer;
+  text-align: left;
+  color: var(--text-primary);
+  transition: all 0.15s;
+
+  &:hover {
+    border-color: #5fafff;
+    background: var(--bg-surface);
+  }
+`;
+
+const CardTop = styled.div`
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+`;
+
+const ProjectName = styled.span`
+  font-size: 15px;
+  font-weight: 700;
+  letter-spacing: -0.01em;
+`;
+
+const StateBadge = styled.span<{ $state: string }>`
+  padding: 4px 12px;
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  border-radius: 20px;
+  color: #fff;
+  background: ${({ $state }) => stateBg($state)};
+  letter-spacing: 0.04em;
+  flex-shrink: 0;
+`;
+
+const CardMeta = styled.div`
+  display: flex;
+  gap: 12px;
+  font-size: 11px;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+`;
+
+const Empty = styled.div`
+  padding: 60px 20px;
+  text-align: center;
+  color: var(--text-secondary);
+  font-size: 13px;
+`;
+
+const DetailHeader = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  padding-bottom: 18px;
+  border-bottom: 1px solid var(--border-color);
+`;
+
+const DetailTitle = styled.h3`
+  font-size: 22px;
+  font-weight: 700;
+  margin: 0;
+  letter-spacing: -0.01em;
+`;
+
+const DetailMeta = styled.div`
+  display: flex;
+  gap: 18px;
+  font-size: 12px;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+`;
+
+function stateBg(state: string): string {
+  switch (state) {
+    case 'done':
+      return '#22c55e';
+    case 'escalated':
+      return '#ef4444';
+    case 'aborted':
+      return '#525252';
+    case 'planning':
+    case 'implementing':
+    case 'reviewing':
+    case 'deploying':
+      return '#f97316';
+    default:
+      return '#525252';
+  }
+}
+
+function relTime(iso: string): string {
+  try {
+    const ms = Date.now() - new Date(iso).getTime();
+    const sec = Math.floor(ms / 1000);
+    if (sec < 60) return `${sec}s 전`;
+    if (sec < 3600) return `${Math.floor(sec / 60)}m 전`;
+    if (sec < 86400) return `${Math.floor(sec / 3600)}h 전`;
+    return `${Math.floor(sec / 86400)}d 전`;
+  } catch {
+    return iso;
+  }
+}
+
+export default function RailsPage() {
+  const [pipelines, setPipelines] = useState<RailsPipelineSummary[]>([]);
+  const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [tree, setTree] = useState<RailsSubTaskNode[]>([]);
+  const [projectInput, setProjectInput] = useState('');
+  const [reqInput, setReqInput] = useState('');
+  const [starting, setStarting] = useState(false);
+  const [detailNodeId, setDetailNodeId] = useState<string | null>(null);
+
+  const { connected } = useRailsSocket({
+    onPipelinesSnapshot: (next) => {
+      setPipelines(next);
+      setSelectedId((prev) => prev ?? (next[0]?.id ?? null));
+    },
+    onSubTasksUpdated: (pipelineId, nextTree) => {
+      setSelectedId((prev) => {
+        if (pipelineId === prev) setTree(nextTree);
+        return prev;
+      });
+    },
+  });
+
+  useEffect(() => {
+    fetch(`${API_URL}/api/rails/pipelines`, { credentials: 'include' })
+      .then((r) => r.json())
+      .then((data: { pipelines: RailsPipelineSummary[] }) => {
+        setPipelines(data.pipelines);
+        if (data.pipelines.length > 0) setSelectedId(data.pipelines[0]!.id);
+      })
+      .catch(() => undefined);
+  }, []);
+
+  useEffect(() => {
+    if (!selectedId) return;
+    fetch(`${API_URL}/api/rails/pipelines/${selectedId}/sub-tasks`, {
+      credentials: 'include',
+    })
+      .then((r) => r.json())
+      .then((data: { tree: RailsSubTaskNode[] }) => setTree(data.tree))
+      .catch(() => setTree([]));
+  }, [selectedId]);
+
+  const handleStart = useCallback(async () => {
+    if (!projectInput.trim()) return;
+    setStarting(true);
+    try {
+      const res = await fetch(`${API_URL}/api/rails/pipelines/start`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        credentials: 'include',
+        body: JSON.stringify({
+          project: projectInput.trim(),
+          requirements: reqInput.trim(),
+        }),
+      });
+      if (res.ok) {
+        const data = (await res.json()) as { pipelineId: string };
+        setSelectedId(data.pipelineId);
+        setProjectInput('');
+        setReqInput('');
+      }
+    } finally {
+      setStarting(false);
+    }
+  }, [projectInput, reqInput]);
+
+  const selected = useMemo(
+    () => pipelines.find((p) => p.id === selectedId) ?? null,
+    [pipelines, selectedId],
+  );
+
+  return (
+    <Page>
+      <Header>
+        <TitleBlock>
+          <Title>Rails Orchestrator</Title>
+          <Subtitle>결정론적 4자매 파이프라인 관제</Subtitle>
+        </TitleBlock>
+        <Live $on={connected}>{connected ? 'LIVE' : 'OFFLINE'}</Live>
+      </Header>
+
+      <StartCard>
+        <StartLabel>새 파이프라인 시작</StartLabel>
+        <StartRow>
+          <Input
+            placeholder="프로젝트 이름"
+            value={projectInput}
+            onChange={(e) => setProjectInput(e.target.value)}
+          />
+          <Input
+            placeholder="요구사항 (예: TODO 앱 MVP, 로그인 추가)"
+            value={reqInput}
+            onChange={(e) => setReqInput(e.target.value)}
+            onKeyDown={(e) => {
+              if (e.key === 'Enter') void handleStart();
+            }}
+          />
+          <StartButton
+            disabled={starting || !projectInput.trim()}
+            onClick={handleStart}
+          >
+            {starting ? '시작 중...' : 'Start'}
+          </StartButton>
+        </StartRow>
+      </StartCard>
+
+      <Layout>
+        <Pane>
+          <PaneHeader>
+            <PaneTitle>Pipelines</PaneTitle>
+            <Counter>{pipelines.length}건</Counter>
+          </PaneHeader>
+
+          {pipelines.length === 0 ? (
+            <Empty>파이프라인이 없어. 위에서 시작해봐.</Empty>
+          ) : (
+            <PipelineList>
+              {pipelines.map((p) => (
+                <PipelineCard
+                  key={p.id}
+                  $selected={p.id === selectedId}
+                  $state={p.currentState}
+                  onClick={() => setSelectedId(p.id)}
+                >
+                  <CardTop>
+                    <ProjectName>{p.projectName}</ProjectName>
+                    <StateBadge $state={p.currentState}>
+                      {p.currentState}
+                    </StateBadge>
+                  </CardTop>
+                  <CardMeta>
+                    <span>{p.id.slice(0, 12)}</span>
+                    <span>·</span>
+                    <span>{relTime(p.updatedAt)}</span>
+                  </CardMeta>
+                </PipelineCard>
+              ))}
+            </PipelineList>
+          )}
+        </Pane>
+
+        <Pane>
+          {selected ? (
+            <>
+              <DetailHeader>
+                <PaneTitle>Pipeline Detail</PaneTitle>
+                <DetailTitle>{selected.projectName}</DetailTitle>
+                <DetailMeta>
+                  <span>{selected.id}</span>
+                  <span>state: {selected.currentState}</span>
+                  <span>{new Date(selected.createdAt).toLocaleString('ko-KR')}</span>
+                </DetailMeta>
+              </DetailHeader>
+
+              {tree.length > 0 ? (
+                <SubTaskTree tree={tree} onSelectNode={setDetailNodeId} />
+              ) : (
+                <Empty>아직 sub-task 가 생성 안 됐어.</Empty>
+              )}
+
+              <TransitionsTimeline pipelineId={selected.id} />
+            </>
+          ) : (
+            <Empty>왼쪽에서 파이프라인을 선택해.</Empty>
+          )}
+        </Pane>
+      </Layout>
+
+      {detailNodeId && (
+        <SubTaskDetailDrawer
+          subTaskId={detailNodeId}
+          onClose={() => setDetailNodeId(null)}
+        />
+      )}
+    </Page>
+  );
+}

frontend/app/sisters/[name]/page.tsx

@@ -1,218 +0,0 @@
-'use client';
-
-import React, { useEffect, useState, useCallback } from 'react';
-import { useParams } from 'next/navigation';
-import styled from 'styled-components';
-import Link from 'next/link';
-import { LabelMeta, TechBar, TechBarFill, Timeline, TimelineItem, TimeStamp, TimelineContent, Btn } from '@/components/ui/base';
-import { API_URL } from '@/lib/config';
-import SisterAvatar from '@/components/common/SisterAvatar';
-import { SISTER_ROLES } from '@/lib/sisters';
-import { adminFetch } from '@/lib/adminFetch';
-import CodeEditor from '@/components/admin/CodeEditor';
-import LogTerminal from '@/components/admin/LogTerminal';
-
-const Breadcrumb = styled.div`font-family: var(--font-mono);font-size: 11px;color: var(--text-secondary);margin-bottom: var(--space-md);a { color: var(--text-secondary); text-decoration: none; &:hover { color: var(--text-primary); } }`;
-const Hero = styled.section`display:grid;grid-template-columns:128px 1fr;gap:var(--space-xl);align-items:center;padding:var(--space-xl);border:1px solid var(--border-color);margin-bottom:var(--space-xl);@media (max-width:767px){grid-template-columns:1fr;justify-items:start;}`;
-const HeroMeta = styled.div`display:flex;flex-direction:column;gap:var(--space-sm);`;
-const HeroName = styled.div`font-size:36px;font-weight:700;letter-spacing:-0.03em;color:var(--text-primary);`;
-const HeroRole = styled.div`font-size:14px;color:var(--text-secondary);font-family:var(--font-mono);`;
-const HeroStatus = styled.div`display:flex;align-items:center;gap:var(--space-sm);margin-top:var(--space-sm);flex-wrap:wrap;`;
-const StatusDot = styled.div<{ $on: boolean }>`width:10px;height:10px;border-radius:50%;background:${({$on})=>$on?'#FFF':'#555'};${({$on})=>$on&&`box-shadow:0 0 8px rgba(255,255,255,0.3);`}`;
-const HeroStats = styled.div`display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:var(--space-md);margin-top:var(--space-lg);@media (max-width:767px){grid-template-columns:repeat(2,minmax(0,1fr));}`;
-const StatCard = styled.div`border:1px solid var(--border-color);padding:var(--space-md);`;
-const StatLabel = styled.div`font-size:10px;color:var(--text-secondary);font-family:var(--font-mono);margin-bottom:6px;`;
-const StatValue = styled.div`font-size:18px;color:var(--text-primary);font-family:var(--font-mono);`;
-const DetailGrid = styled.div`display:grid;grid-template-columns:320px 1fr;gap:var(--space-xxl);align-items:start;@media (max-width:1199px){grid-template-columns:1fr;gap:var(--space-xl);}`;
-const MetaPanel = styled.div`display:flex;flex-direction:column;gap:var(--space-lg);`;
-const MetaCard = styled.div`border:1px solid var(--border-color);padding:var(--space-lg);`;
-const TabBar = styled.div`display:flex;gap:var(--space-lg);border-bottom:1px solid var(--border-color);margin-bottom:var(--space-lg);overflow:auto;`;
-const TabBtn = styled.button<{ $active: boolean }>`font-size:13px;font-weight:500;color:${({$active})=>$active?'var(--text-primary)':'var(--text-secondary)'};background:transparent;border:none;border-bottom:1px solid ${({$active})=>$active?'var(--text-primary)':'transparent'};padding:var(--space-sm) 0;cursor:pointer;transition:color .15s,border-color .15s;white-space:nowrap;&:hover{color:var(--text-primary);}`;
-const Toolbar = styled.div`display:flex;align-items:center;gap:10px;margin-bottom:12px;flex-wrap:wrap;`;
-const Select = styled.select`background:var(--bg-surface);border:1px solid var(--border-color);border-radius:7px;color:var(--text-primary);padding:8px 12px;font-size:13px;cursor:pointer;outline:none;option{background:#1a1f2a;}`;
-const LinesInput = styled.input`background:var(--bg-surface);border:1px solid var(--border-color);border-radius:7px;color:var(--text-primary);padding:8px 12px;font-size:13px;width:80px;outline:none;`;
-const ResultMsg = styled.div<{ $success: boolean }>`padding:8px 12px;border-radius:6px;font-size:12px;font-family:monospace;background:${({$success})=>$success?'rgba(0,230,118,0.08)':'rgba(255,23,68,0.08)'};color:${({$success})=>$success?'#00FF00':'#FF1744'};border:1px solid ${({$success})=>$success?'rgba(0,230,118,0.3)':'rgba(255,23,68,0.3)'};margin-bottom:12px;`;
-const SessionCard = styled.div`border:1px solid var(--border-color);padding:var(--space-md);margin-bottom:var(--space-sm);`;
-const SISTER_DISPLAY: Record<string, string> = { harang: '하랑이', narang: '나랑이', darang: '다랑이', erang: '이랑이' };
-const FILES = ['SOUL.md', 'AGENTS.md', 'TOOLS.md', 'PROTOCOL.md', 'HEARTBEAT.md'];
-
-interface SisterInfo {
-  id?: number;
-  name: string;
-  status?: string;
-  lxcId?: string | number | null;
-  lastSeen?: string | null;
-  user?: string | null;
-}
-
-interface SystemInfo {
-  uptime?: string;
-  cpu?: number;
-  memory?: { used?: number; total?: number };
-  disk?: { used?: string; total?: string };
-}
-
-interface ConfigData {
-  description?: string | null;
-}
-
-interface ActivityItem {
-  id: number;
-  createdAt: string;
-  action?: string;
-  detail?: string | null;
-}
-
-interface ActivityResponse {
-  items?: ActivityItem[];
-}
-
-interface SessionItem {
-  id?: string | number;
-  title?: string;
-  label?: string;
-  status?: string;
-}
-
-interface SessionsResponse {
-  sessions?: SessionItem[];
-  items?: SessionItem[];
-}
-
-interface HarnessResponse {
-  content?: string;
-}
-
-interface SaveHarnessResponse {
-  success?: boolean;
-  error?: string;
-}
-
-interface LogResponse {
-  lines?: string[];
-}
-
-export default function SisterDetailPage() {
-  const { name } = useParams<{ name: string }>();
-  const [sisterInfo, setSisterInfo] = useState<SisterInfo | null>(null);
-  const [systemInfo, setSystemInfo] = useState<SystemInfo | null>(null);
-  const [configData, setConfigData] = useState<ConfigData | null>(null);
-  const [activity, setActivity] = useState<ActivityItem[]>([]);
-  const [sessions, setSessions] = useState<SessionItem[]>([]);
-  const [tab, setTab] = useState('overview');
-  const [loading, setLoading] = useState(true);
-  const [logLines, setLogLines] = useState<string[]>([]);
-  const [logLoading, setLogLoading] = useState(false);
-  const [lines, setLines] = useState(100);
-  const [selectedFile, setSelectedFile] = useState('SOUL.md');
-  const [content, setContent] = useState('');
-  const [saved, setSaved] = useState('');
-  const [saveResult, setSaveResult] = useState<{ success: boolean; msg: string } | null>(null);
-
-  useEffect(() => {
-    Promise.allSettled([
-      fetch(`${API_URL}/api/sisters`),
-      fetch(`${API_URL}/api/sisters/${name}/config`),
-      fetch(`${API_URL}/api/sisters/${name}/activity`),
-      fetch(`${API_URL}/api/sisters/${name}/system`),
-      fetch(`${API_URL}/api/sisters/${name}/sessions`),
-    ]).then(([sRes, cRes, aRes, syRes, ssRes]) => {
-      if (sRes.status === 'fulfilled' && sRes.value.ok) sRes.value.json().then((d: SisterInfo[]) => setSisterInfo(d.find((s) => s.name === name) ?? null));
-      if (cRes.status === 'fulfilled' && cRes.value.ok) cRes.value.json().then((data: ConfigData) => setConfigData(data));
-      if (aRes.status === 'fulfilled' && aRes.value.ok) aRes.value.json().then((d: ActivityResponse) => setActivity(d.items ?? []));
-      if (syRes.status === 'fulfilled' && syRes.value.ok) syRes.value.json().then((data: SystemInfo) => setSystemInfo(data));
-      if (ssRes.status === 'fulfilled' && ssRes.value.ok) ssRes.value.json().then((d: SessionsResponse) => setSessions(d.sessions ?? d.items ?? []));
-    }).finally(() => setLoading(false));
-  }, [name]);
-
-  const fetchLogs = useCallback(async () => {
-    setLogLoading(true);
-    try {
-      const res = await adminFetch(`/api/admin/logs/${name}?lines=${lines}`);
-      const d: LogResponse = await res.json();
-      setLogLines(d.lines ?? []);
-    } catch {
-      setLogLines(['(로그 로드 실패)']);
-    } finally {
-      setLogLoading(false);
-    }
-  }, [name, lines]);
-
-  useEffect(() => { if (tab === 'logs') fetchLogs(); }, [tab, fetchLogs]);
-
-  useEffect(() => {
-    if (tab !== 'harness') return;
-    setSaveResult(null);
-    adminFetch(`/api/admin/harness/${name}/${selectedFile}`)
-      .then((r) => r.json())
-      .then((d: HarnessResponse) => { setContent(d.content ?? ''); setSaved(d.content ?? ''); })
-      .catch(() => setContent('(로드 실패)'));
-  }, [tab, name, selectedFile]);
-
-  const handleSave = async () => {
-    setSaveResult(null);
-    try {
-      const res = await adminFetch(`/api/admin/harness/${name}/${selectedFile}`, { method: 'PUT', body: JSON.stringify({ content }) });
-      const d: SaveHarnessResponse = await res.json();
-      if (d.success) { setSaved(content); setSaveResult({ success: true, msg: '저장 완료' }); }
-      else setSaveResult({ success: false, msg: d.error ?? '저장 실패' });
-    } catch (e) {
-      setSaveResult({ success: false, msg: (e as Error).message });
-    }
-  };
-
-  const isActive = sisterInfo?.status === 'online' || sisterInfo?.status === 'working';
-
-  return (
-    <>
-      <Breadcrumb><Link href="/sisters">자매 노드 관리</Link> / {SISTER_DISPLAY[name] ?? name}</Breadcrumb>
-      {loading ? <div style={{ color: 'var(--text-secondary)', fontSize: '13px', fontFamily: 'var(--font-mono)' }}>LOADING...</div> : <>
-        <Hero>
-          <SisterAvatar name={name} size={120} />
-          <HeroMeta>
-            <HeroName>{SISTER_DISPLAY[name] ?? name}</HeroName>
-            <HeroRole>{SISTER_ROLES[name] ?? 'UNKNOWN'}</HeroRole>
-            <HeroStatus>
-              <StatusDot $on={isActive} />
-              <LabelMeta>{isActive ? 'ACTIVE' : 'STANDBY'}</LabelMeta>
-              <LabelMeta><span>LXC:</span>{sisterInfo?.lxcId ?? '--'}</LabelMeta>
-            </HeroStatus>
-            <HeroStats>
-              <StatCard><StatLabel>UPTIME</StatLabel><StatValue>{systemInfo?.uptime ?? '--:--:--'}</StatValue></StatCard>
-              <StatCard><StatLabel>CPU</StatLabel><StatValue>{systemInfo?.cpu?.toFixed?.(1) ?? '0.0'}%</StatValue></StatCard>
-              <StatCard><StatLabel>MEM</StatLabel><StatValue>{systemInfo?.memory?.used ?? 0}/{systemInfo?.memory?.total ?? 0}MB</StatValue></StatCard>
-              <StatCard><StatLabel>DISK</StatLabel><StatValue>{systemInfo?.disk?.used ?? '0G'}/{systemInfo?.disk?.total ?? '0G'}</StatValue></StatCard>
-            </HeroStats>
-          </HeroMeta>
-        </Hero>
-
-        <DetailGrid>
-          <MetaPanel>
-            <MetaCard>
-              <LabelMeta style={{ marginBottom: 'var(--space-sm)', display: 'block' }}>SYSTEM SUMMARY</LabelMeta>
-              <div style={{ margin: 'var(--space-md) 0', fontFamily: 'var(--font-mono)', fontSize: '11px', color: 'var(--text-secondary)', lineHeight: 1.8 }}>
-                LAST_SEEN: {sisterInfo?.lastSeen ? new Date(sisterInfo.lastSeen).toLocaleString() : '--'}<br />
-                ROLE: {SISTER_ROLES[name] ?? '--'}<br />
-                STATUS: {String(sisterInfo?.status ?? 'unknown').toUpperCase()}<br />
-                HOST_USER: {sisterInfo?.user ?? '--'}
-              </div>
-              <TechBar><TechBarFill $width={isActive ? 100 : 0} /></TechBar>
-            </MetaCard>
-            {configData?.description && <MetaCard><LabelMeta style={{ marginBottom: 'var(--space-sm)', display: 'block' }}>DESC</LabelMeta><div style={{ fontSize: '12px', color: 'var(--text-secondary)', lineHeight: 1.6 }}>{configData.description}</div></MetaCard>}
-          </MetaPanel>
-          <div>
-            <TabBar>
-              {[{ id: 'overview', label: '개요' }, { id: 'sessions', label: '세션' }, { id: 'activity', label: '활동' }, { id: 'harness', label: '하네스' }, { id: 'logs', label: '로그' }].map((t) => <TabBtn key={t.id} $active={tab === t.id} onClick={() => setTab(t.id)}>{t.label}</TabBtn>)}
-            </TabBar>
-
-            {tab === 'overview' && <Timeline>{activity.slice(0, 8).map((item) => <TimelineItem key={item.id}><TimeStamp>{new Date(item.createdAt).toLocaleString('ko-KR', { hour12: false })}</TimeStamp><TimelineContent>{item.detail ?? item.action}</TimelineContent></TimelineItem>)}</Timeline>}
-            {tab === 'sessions' && <>{sessions.length === 0 ? <div style={{ color: 'var(--text-secondary)' }}>세션 없음</div> : sessions.map((session, i: number) => <SessionCard key={session.id ?? i}><div style={{ color: 'var(--text-primary)', fontSize: '13px' }}>{session.title ?? session.label ?? session.id ?? 'session'}</div><div style={{ color: 'var(--text-secondary)', fontSize: '11px', fontFamily: 'var(--font-mono)' }}>{session.status ?? ''}</div></SessionCard>)}</>}
-            {tab === 'activity' && <Timeline>{activity.map((item) => <TimelineItem key={item.id}><TimeStamp>{new Date(item.createdAt).toLocaleString('ko-KR', { hour12: false })}</TimeStamp><TimelineContent>{item.detail ?? item.action}</TimelineContent></TimelineItem>)}</Timeline>}
-            {tab === 'harness' && <><Toolbar><Select value={selectedFile} onChange={(e) => setSelectedFile(e.target.value)}>{FILES.map((f) => <option key={f} value={f}>{f}</option>)}</Select><Btn onClick={() => { setContent(saved); setSaveResult(null); }}>되돌리기</Btn><Btn onClick={handleSave}>저장</Btn></Toolbar>{saveResult && <ResultMsg $success={saveResult.success}>{saveResult.msg}</ResultMsg>}<CodeEditor value={content} onChange={setContent} /></>}
-            {tab === 'logs' && <><Toolbar><span style={{ color: 'var(--text-secondary)', fontSize: '12px' }}>최근</span><LinesInput type="number" value={lines} onChange={(e) => setLines(parseInt(e.target.value, 10) || 100)} min={10} max={500} /><span style={{ color: 'var(--text-secondary)', fontSize: '12px' }}>줄</span><Btn onClick={fetchLogs}>{logLoading ? '로딩 중...' : '로그 가져오기'}</Btn></Toolbar><LogTerminal lines={logLines} /></>}
-          </div>
-        </DetailGrid>
-      </>}
-    </>
-  );
-}

frontend/app/sisters/page.tsx

@@ -1,135 +0,0 @@
-'use client';
-
-import React, { useEffect, useState } from 'react';
-import styled, { keyframes } from 'styled-components';
-import Link from 'next/link';
-import { PageTitle, LabelMeta, BtnToggle } from '@/components/ui/base';
-import { API_URL } from '@/lib/config';
-import SisterAvatar from '@/components/common/SisterAvatar';
-
-const pulse = keyframes`0%{opacity:.35}50%{opacity:.7}100%{opacity:.35}`;
-const SISTER_ROLES: Record<string, string> = { harang: 'Primary', narang: 'Secondary', darang: 'Standby', erang: 'Sync' };
-
-interface SisterListItem {
-  id?: number;
-  name: string;
-  status: string;
-  uptime?: string;
-  lastSeen?: string | null;
-  cpu?: number;
-  lxcId?: string | number | null;
-  currentTask?: string | null;
-  memory?: { used?: number; total?: number };
-  disk?: { used?: string; total?: string };
-}
-
-const NodeGrid = styled.section`display:flex;flex-direction:column;gap:var(--space-lg);`;
-const NodeEntry = styled(Link)`display:grid;grid-template-columns:220px 1fr 180px;gap:0;border:1px solid var(--border-color);transition:border-color .2s, background .15s;text-decoration:none;&:hover{border-color:var(--border-hover);background:#111}@media (max-width:1199px){grid-template-columns:200px 1fr}@media (max-width:767px){grid-template-columns:1fr}`;
-const NodeInfo = styled.div`border-right:1px solid var(--border-color);padding:var(--space-lg);display:flex;flex-direction:column;gap:var(--space-md);@media (max-width:767px){border-right:none;border-bottom:1px solid var(--border-color)}`;
-const NodeName = styled.div`display:flex;align-items:center;gap:var(--space-sm);font-size:16px;font-weight:600;color:var(--text-primary);`;
-const StatusIndicator = styled.div<{ $active: boolean }>`width:8px;height:8px;border-radius:50%;background:${({$active})=>$active?'#FFF':'#555'};flex-shrink:0;${({$active})=>$active&&`box-shadow:0 0 8px rgba(255,255,255,.3);`}`;
-const MetaPair = styled.div`display:flex;flex-direction:column;gap:2px;`;
-const MetaVal = styled.div`font-size:13px;color:var(--text-primary);font-family:var(--font-mono);`;
-const NodeControls = styled.div`display:flex;gap:var(--space-sm);flex-wrap:wrap;`;
-const CapacitySection = styled.div`border-right:1px solid var(--border-color);padding:var(--space-lg);display:flex;flex-direction:column;gap:var(--space-md);@media (max-width:1199px){border-right:none}@media (max-width:767px){border-bottom:1px solid var(--border-color)}`;
-const BarWrap = styled.div`display:flex;flex-direction:column;gap:8px;`;
-const BarRow = styled.div`display:flex;align-items:center;gap:8px;font-family:var(--font-mono);font-size:11px;color:var(--text-secondary);`;
-const Bar = styled.div`flex:1;height:8px;background:#151515;border:1px solid #222;overflow:hidden;`;
-const Fill = styled.div<{ $width:number }>`height:100%;width:${({$width})=>$width}%;background:var(--text-primary);min-width:${({$width})=>$width > 0 ? '2px' : '0'};`;
-const OpsMeta = styled.div`padding:var(--space-lg);display:flex;flex-direction:column;gap:var(--space-sm);@media (max-width:1199px){display:none}`;
-const MetaRow = styled.div`display:flex;justify-content:space-between;font-family:var(--font-mono);font-size:11px;color:var(--text-secondary);padding:2px 0;gap:var(--space-md);`;
-const Skeleton = styled.div`height:120px;border:1px solid var(--border-color);background:#111;animation:${pulse} 1.4s ease-in-out infinite;`;
-const ErrorBox = styled.div`padding:var(--space-lg);border:1px solid #5a2a2a;color:#ff9b9b;`;
-
-function getNodeStatus(s: SisterListItem): boolean { return s.status === 'online' || s.status === 'working'; }
-function getStatusBtns(s: SisterListItem): [string, string] { if (s.status === 'offline') return ['STANDBY', 'ACTIVATE']; return ['ACTIVE', 'REBOOT']; }
-function diskPercent(disk?: SisterListItem['disk']): number {
-  if (!disk?.used || !disk?.total) return 0;
-  const parse = (v: string) => {
-    const m = String(v).match(/([0-9.]+)\s*([KMGTP]?)/i);
-    if (!m) return 0;
-    const n = parseFloat(m[1]);
-    const unit = (m[2] || 'G').toUpperCase();
-    const scale: Record<string, number> = { K: 1/1024/1024, M: 1/1024, G: 1, T: 1024, P: 1024*1024, '': 1 };
-    return n * (scale[unit] ?? 1);
-  };
-  const used = parse(disk.used);
-  const total = parse(disk.total);
-  if (!isFinite(used) || !isFinite(total) || total <= 0) return 0;
-  return Math.max(0, Math.min(100, (used / total) * 100));
-}
-
-export default function SistersPage() {
-  const [sisters, setSisters] = useState<SisterListItem[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [error, setError] = useState<string | null>(null);
-
-  useEffect(() => {
-    let active = true;
-    const load = async () => {
-      try {
-        const base: SisterListItem[] = await fetch(`${API_URL}/api/sisters`).then((r) => r.ok ? r.json() : Promise.reject());
-        const withSystem = await Promise.all(base.map(async (s: SisterListItem) => {
-          try {
-            const system = await fetch(`${API_URL}/api/sisters/${s.name}/system`).then((r) => r.ok ? r.json() : null);
-            return { ...s, ...(system ?? {}) };
-          } catch {
-            return { ...s, uptime: '00:00:00', cpu: 0, memory: { used: 0, total: 0 }, disk: { used: '0G', total: '0G' } };
-          }
-        }));
-        if (active) { setSisters(withSystem); setError(null); }
-      } catch {
-        if (active) setError('데이터를 불러올 수 없습니다');
-      } finally {
-        if (active) setLoading(false);
-      }
-    };
-    load();
-    const iv = setInterval(load, 15000);
-    return () => { active = false; clearInterval(iv); };
-  }, []);
-
-  return (
-    <>
-      <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 'var(--space-lg)' }}>
-        <PageTitle>자매 노드 관리</PageTitle>
-        <LabelMeta><span>TOTAL NODES:</span> {String(sisters.length).padStart(2, '0')}</LabelMeta>
-      </div>
-      {error && <ErrorBox>{error}</ErrorBox>}
-      <NodeGrid>
-        {loading ? Array.from({ length: 4 }).map((_, i) => <Skeleton key={i} />) : sisters.map((s) => {
-          const isActive = getNodeStatus(s);
-          const [btn1, btn2] = getStatusBtns(s);
-          return (
-            <NodeEntry key={s.id ?? s.name} href={`/sisters/${s.name}`}>
-              <NodeInfo>
-                <NodeName>
-                  <StatusIndicator $active={isActive} />
-                  <SisterAvatar name={s.name} size={28} />
-                  {s.name === 'harang' ? '하랑' : s.name === 'narang' ? '나랑' : s.name === 'darang' ? '다랑' : '이랑'} ({SISTER_ROLES[s.name] ?? s.name})
-                </NodeName>
-                <MetaPair><LabelMeta>Uptime</LabelMeta><MetaVal>{s.uptime ?? '00:00:00'}</MetaVal></MetaPair>
-                <MetaPair><LabelMeta>Last Seen</LabelMeta><MetaVal>{s.lastSeen ? new Date(s.lastSeen).toLocaleString('ko-KR') : '—'}</MetaVal></MetaPair>
-                <NodeControls><BtnToggle>{btn1}</BtnToggle><BtnToggle>{btn2}</BtnToggle></NodeControls>
-              </NodeInfo>
-              <CapacitySection>
-                <BarWrap>
-                  <BarRow><span>CPU</span><span>{s.cpu?.toFixed?.(1) ?? '0.0'}%</span><Bar><Fill $width={Math.max(0, Math.min(100, Number(s.cpu ?? 0)))} /></Bar></BarRow>
-                  <BarRow><span>MEM</span><span>{s.memory?.used ?? 0}/{s.memory?.total ?? 0}MB</span><Bar><Fill $width={s.memory?.total ? Math.max(0, Math.min(100, (((s.memory.used ?? 0) / s.memory.total) * 100))) : 0} /></Bar></BarRow>
-                  <BarRow><span>DSK</span><span>{s.disk?.used ?? '0G'}/{s.disk?.total ?? '0G'}</span><Bar><Fill $width={diskPercent(s.disk)} /></Bar></BarRow>
-                </BarWrap>
-              </CapacitySection>
-              <OpsMeta>
-                <MetaRow><span>STATUS</span><span>{String(s.status).toUpperCase()}</span></MetaRow>
-                <MetaRow><span>ROLE</span><span>{String(SISTER_ROLES[s.name] ?? s.name).toUpperCase()}</span></MetaRow>
-                <MetaRow><span>LXC ID</span><span>{s.lxcId ?? '--'}</span></MetaRow>
-                <MetaRow><span>LAST CHECK</span><span>{s.lastSeen ? 'just synced' : '--'}</span></MetaRow>
-                <MetaRow><span>CURRENT TASK</span><span>{s.currentTask ?? '-'}</span></MetaRow>
-              </OpsMeta>
-            </NodeEntry>
-          );
-        })}
-      </NodeGrid>
-    </>
-  );
-}

frontend/components/common/Sidebar.tsx

@@ -7,14 +7,10 @@ import { usePathname } from 'next/navigation';
 import { useAuth } from '@/lib/AuthContext';
 
 const NAV_ITEMS = [
-  { href: '/', label: '대시' },
-  { href: '/office', label: '오피스' },
-  { href: '/projects', label: '프로' },
-  { href: '/activities', label: '활동' },
-  { href: '/sisters', label: '자매' },
-  { href: '/org', label: '조직' },
-  { href: '/settings', label: '설정' },
-  { href: '/admin', label: '관리' },
+  { href: '/', label: '🟠 Live' },
+  { href: '/control', label: '🧭 Control' },
+  { href: '/rails', label: '🚦 레일' },
+  { href: '/settings', label: '⚙️ 설정' },
 ];
 
 const SidebarWrapper = styled.aside`

frontend/components/dashboard/ActivePipelineStrip.tsx

@@ -0,0 +1,188 @@
+'use client';
+
+import React, { useEffect, useState } from 'react';
+import styled from 'styled-components';
+import Link from 'next/link';
+import { API_URL } from '@/lib/config';
+
+interface Pipeline {
+  id: string;
+  projectName: string;
+  currentState: string;
+  createdAt: string;
+}
+
+const Wrapper = styled.section`
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+`;
+
+const Header = styled.div`
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+`;
+
+const Title = styled.h2`
+  font-size: 14px;
+  font-weight: 700;
+  margin: 0;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--text-secondary);
+`;
+
+const ViewAll = styled(Link)`
+  font-size: 11px;
+  font-family: var(--font-mono);
+  color: var(--text-secondary);
+  text-decoration: none;
+
+  &:hover {
+    color: #5fafff;
+  }
+`;
+
+const Strip = styled.div`
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(220px, 1fr));
+  gap: 10px;
+`;
+
+const Card = styled(Link)`
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  padding: 12px 14px;
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  text-decoration: none;
+  color: inherit;
+  transition: border-color 0.15s;
+
+  &:hover {
+    border-color: #5fafff;
+  }
+`;
+
+const CardTop = styled.div`
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+`;
+
+const ProjectName = styled.span`
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--text-primary);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+`;
+
+const StateBadge = styled.span<{ $state: string }>`
+  font-size: 9px;
+  font-weight: 700;
+  text-transform: uppercase;
+  padding: 2px 8px;
+  border-radius: 10px;
+  color: #fff;
+  background: ${({ $state }) => {
+    switch ($state) {
+      case 'done':
+        return '#22c55e';
+      case 'planning':
+        return '#8b5cf6';
+      case 'implementing':
+        return '#3b82f6';
+      case 'reviewing':
+        return '#f59e0b';
+      case 'deploying':
+        return '#0ea5e9';
+      case 'escalated':
+      case 'failed':
+        return '#ef4444';
+      default:
+        return '#6b7280';
+    }
+  }};
+`;
+
+const PipelineId = styled.span`
+  font-family: var(--font-mono);
+  font-size: 10px;
+  color: var(--text-secondary);
+`;
+
+const Empty = styled.div`
+  padding: 24px;
+  text-align: center;
+  font-size: 12px;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+  background: var(--bg-input);
+  border: 1px dashed var(--border-color);
+  border-radius: 10px;
+`;
+
+export default function ActivePipelineStrip() {
+  const [pipelines, setPipelines] = useState<Pipeline[]>([]);
+  const [loading, setLoading] = useState(true);
+
+  useEffect(() => {
+    let cancelled = false;
+    const load = async () => {
+      try {
+        const res = await fetch(`${API_URL}/api/rails/pipelines?limit=8`, {
+          credentials: 'include',
+        });
+        if (!res.ok) {
+          if (!cancelled) setLoading(false);
+          return;
+        }
+        const data = (await res.json()) as { pipelines?: Pipeline[] };
+        if (!cancelled) {
+          setPipelines(data.pipelines ?? []);
+          setLoading(false);
+        }
+      } catch {
+        if (!cancelled) setLoading(false);
+      }
+    };
+    void load();
+    const t = setInterval(load, 5000);
+    return () => {
+      cancelled = true;
+      clearInterval(t);
+    };
+  }, []);
+
+  return (
+    <Wrapper>
+      <Header>
+        <Title>최근 파이프라인</Title>
+        <ViewAll href="/rails">전체 보기 →</ViewAll>
+      </Header>
+      {loading && pipelines.length === 0 ? (
+        <Empty>로딩 중...</Empty>
+      ) : pipelines.length === 0 ? (
+        <Empty>아직 실행된 파이프라인이 없어</Empty>
+      ) : (
+        <Strip>
+          {pipelines.map((p) => (
+            <Card key={p.id} href={`/rails?pipelineId=${p.id}`}>
+              <CardTop>
+                <ProjectName>{p.projectName}</ProjectName>
+                <StateBadge $state={p.currentState}>{p.currentState}</StateBadge>
+              </CardTop>
+              <PipelineId>{p.id.slice(0, 12)}…</PipelineId>
+            </Card>
+          ))}
+        </Strip>
+      )}
+    </Wrapper>
+  );
+}

frontend/components/live/ActiveTaskFocus.tsx

@@ -0,0 +1,136 @@
+'use client';
+
+import styled from 'styled-components';
+import type { ApprovalItem, WorkflowEvent } from '@/lib/control/types';
+
+const Panel = styled.aside`
+  display: grid;
+  gap: 14px;
+`;
+
+const Card = styled.section`
+  border: 1px solid var(--border-color);
+  border-radius: 22px;
+  padding: 18px;
+  background: linear-gradient(180deg, rgba(255,255,255,0.045), rgba(255,255,255,0.018));
+`;
+
+const Title = styled.h2`
+  margin: 0 0 12px;
+  font-size: 15px;
+`;
+
+const Eyebrow = styled.div`
+  font-family: var(--font-mono);
+  font-size: 10px;
+  color: var(--text-secondary);
+  text-transform: uppercase;
+  margin-bottom: 6px;
+`;
+
+const EventTitle = styled.h3`
+  margin: 0;
+  font-size: 20px;
+  line-height: 1.2;
+`;
+
+const Detail = styled.p`
+  margin: 12px 0 0;
+  color: var(--text-secondary);
+  font-size: 13px;
+`;
+
+const MetaGrid = styled.div`
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 8px;
+  margin-top: 16px;
+`;
+
+const Meta = styled.div`
+  border: 1px solid rgba(255,255,255,0.08);
+  border-radius: 14px;
+  padding: 10px;
+  background: rgba(0,0,0,0.18);
+`;
+
+const MetaValue = styled.div`
+  font-family: var(--font-mono);
+  font-size: 11px;
+  color: var(--text-primary);
+  overflow-wrap: anywhere;
+`;
+
+const ApprovalList = styled.div`
+  display: grid;
+  gap: 8px;
+`;
+
+const ApprovalRow = styled.div<{ $status: ApprovalItem['status'] }>`
+  display: grid;
+  grid-template-columns: 42px 1fr auto;
+  gap: 8px;
+  align-items: center;
+  border: 1px solid ${({ $status }) => {
+    if ($status === 'blocked') return 'rgba(255, 112, 112, 0.42)';
+    if ($status === 'waiting') return 'rgba(255, 204, 102, 0.38)';
+    return 'rgba(139, 211, 255, 0.28)';
+  }};
+  border-radius: 14px;
+  padding: 10px;
+  background: rgba(0,0,0,0.14);
+  font-size: 12px;
+`;
+
+const Risk = styled.span`
+  font-family: var(--font-mono);
+  color: var(--text-secondary);
+`;
+
+const Status = styled.span`
+  font-family: var(--font-mono);
+  font-size: 10px;
+  color: var(--text-secondary);
+`;
+
+export default function ActiveTaskFocus({
+  selectedEvent,
+  approvals,
+}: {
+  selectedEvent: WorkflowEvent;
+  approvals: ApprovalItem[];
+}) {
+  return (
+    <Panel>
+      <Card>
+        <Title>Active Task Focus</Title>
+        <Eyebrow>{selectedEvent.sister} · {selectedEvent.type}</Eyebrow>
+        <EventTitle>{selectedEvent.title}</EventTitle>
+        <Detail>{selectedEvent.detail}</Detail>
+        <MetaGrid>
+          <Meta>
+            <Eyebrow>workflow</Eyebrow>
+            <MetaValue>{selectedEvent.workflowId}</MetaValue>
+          </Meta>
+          <Meta>
+            <Eyebrow>source</Eyebrow>
+            <MetaValue>{selectedEvent.source}</MetaValue>
+          </Meta>
+        </MetaGrid>
+      </Card>
+
+      <Card>
+        <Title>Approval / Risk</Title>
+        <ApprovalList>
+          {approvals.map((item) => (
+            <ApprovalRow key={item.id} $status={item.status}>
+              <Risk>{item.risk}</Risk>
+              <span>{item.title}</span>
+              <Status>{item.status}</Status>
+            </ApprovalRow>
+          ))}
+        </ApprovalList>
+      </Card>
+    </Panel>
+  );
+}

frontend/components/live/LiveWorkboard.tsx

@@ -0,0 +1,223 @@
+'use client';
+
+import { useEffect, useMemo, useState } from 'react';
+import styled from 'styled-components';
+import SisterActivityLane from './SisterActivityLane';
+import WorkflowTimeline from './WorkflowTimeline';
+import ActiveTaskFocus from './ActiveTaskFocus';
+import { mockLiveWorkboard, rotateEvents } from '@/lib/control/mock-events';
+
+const Root = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-lg);
+`;
+
+const Hero = styled.header`
+  border: 1px solid rgba(255,255,255,0.12);
+  border-radius: 28px;
+  padding: 24px;
+  background:
+    radial-gradient(circle at 16% 18%, rgba(255,143,112,0.18), transparent 34%),
+    radial-gradient(circle at 82% 12%, rgba(139,211,255,0.16), transparent 28%),
+    linear-gradient(135deg, rgba(255,255,255,0.075), rgba(255,255,255,0.02));
+`;
+
+const HeroTop = styled.div`
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-start;
+  gap: 16px;
+
+  @media (max-width: 767px) {
+    flex-direction: column;
+  }
+`;
+
+const TitleBlock = styled.div`
+  display: grid;
+  gap: 8px;
+`;
+
+const Label = styled.div`
+  font-family: var(--font-mono);
+  color: var(--text-secondary);
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+`;
+
+const Title = styled.h1`
+  margin: 0;
+  font-size: clamp(30px, 5vw, 58px);
+  line-height: 0.95;
+  letter-spacing: -0.055em;
+`;
+
+const Summary = styled.p`
+  margin: 0;
+  max-width: 760px;
+  color: var(--text-secondary);
+  font-size: 14px;
+`;
+
+const SourceBadge = styled.div`
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  border: 1px solid rgba(255, 204, 102, 0.35);
+  border-radius: 999px;
+  padding: 8px 12px;
+  color: #ffcc66;
+  font-family: var(--font-mono);
+  font-size: 11px;
+  white-space: nowrap;
+`;
+
+const Dot = styled.span`
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  background: #ffcc66;
+  box-shadow: 0 0 18px rgba(255, 204, 102, 0.95);
+`;
+
+const PhaseGrid = styled.div`
+  display: grid;
+  grid-template-columns: repeat(5, minmax(0, 1fr));
+  gap: 8px;
+  margin-top: 22px;
+
+  @media (max-width: 767px) {
+    grid-template-columns: 1fr;
+  }
+`;
+
+const PhaseCell = styled.div<{ $active: boolean }>`
+  border: 1px solid ${({ $active }) => ($active ? 'rgba(255,255,255,0.36)' : 'rgba(255,255,255,0.09)')};
+  border-radius: 14px;
+  padding: 10px;
+  color: ${({ $active }) => ($active ? 'var(--text-primary)' : 'var(--text-secondary)')};
+  background: ${({ $active }) => ($active ? 'rgba(255,255,255,0.08)' : 'rgba(0,0,0,0.16)')};
+  font-family: var(--font-mono);
+  font-size: 11px;
+`;
+
+const MainGrid = styled.div`
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) 360px;
+  gap: var(--space-lg);
+
+  @media (max-width: 1100px) {
+    grid-template-columns: 1fr;
+  }
+`;
+
+const LanesGrid = styled.section`
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: var(--space-md);
+
+  @media (max-width: 900px) {
+    grid-template-columns: 1fr;
+  }
+`;
+
+const BottomGrid = styled.div`
+  display: grid;
+  grid-template-columns: minmax(0, 1.35fr) minmax(280px, 0.65fr);
+  gap: var(--space-lg);
+
+  @media (max-width: 1100px) {
+    grid-template-columns: 1fr;
+  }
+`;
+
+const NoteCard = styled.section`
+  border: 1px solid var(--border-color);
+  border-radius: 22px;
+  padding: 18px;
+  background: rgba(255,255,255,0.025);
+`;
+
+const NoteTitle = styled.h2`
+  margin: 0 0 8px;
+  font-size: 15px;
+`;
+
+const NoteText = styled.p`
+  margin: 0;
+  color: var(--text-secondary);
+  font-size: 13px;
+`;
+
+const phases = [
+  ['planning', 'PLAN'],
+  ['building', 'BUILD'],
+  ['reviewing', 'REVIEW'],
+  ['waiting_approval', 'APPROVAL'],
+  ['deploying', 'DEPLOY'],
+] as const;
+
+export default function LiveWorkboard() {
+  const [tick, setTick] = useState(0);
+  const [selectedId, setSelectedId] = useState(mockLiveWorkboard.events[0]?.id ?? '');
+
+  const events = useMemo(() => rotateEvents(mockLiveWorkboard.events, tick), [tick]);
+  const selected = events.find((event) => event.id === selectedId) ?? events[0];
+
+  useEffect(() => {
+    const timer = window.setInterval(() => {
+      setTick((value) => value + 1);
+    }, 4200);
+    return () => window.clearInterval(timer);
+  }, []);
+
+  return (
+    <Root>
+      <Hero>
+        <HeroTop>
+          <TitleBlock>
+            <Label>4 Sisters Live Workboard</Label>
+            <Title>지금 4자매가 어떻게 일하는지</Title>
+            <Summary>{mockLiveWorkboard.workflow.summary}</Summary>
+          </TitleBlock>
+          <SourceBadge aria-label="data source mock">
+            <Dot /> source: {mockLiveWorkboard.source} · v0
+          </SourceBadge>
+        </HeroTop>
+
+        <PhaseGrid>
+          {phases.map(([phase, label]) => (
+            <PhaseCell key={phase} $active={mockLiveWorkboard.workflow.phase === phase}>
+              {label}
+            </PhaseCell>
+          ))}
+        </PhaseGrid>
+      </Hero>
+
+      <MainGrid>
+        <LanesGrid>
+          {mockLiveWorkboard.sisters.map((lane) => (
+            <SisterActivityLane key={lane.id} lane={lane} />
+          ))}
+        </LanesGrid>
+        <ActiveTaskFocus selectedEvent={selected} approvals={mockLiveWorkboard.approvals} />
+      </MainGrid>
+
+      <BottomGrid>
+        <WorkflowTimeline
+          events={events}
+          selectedId={selected.id}
+          onSelect={(event) => setSelectedId(event.id)}
+        />
+        <NoteCard>
+          <NoteTitle>v0 범위</NoteTitle>
+          <NoteText>
+            이 화면은 아직 mock event stream이야. 목적은 먼저 “4자매가 작업하는 과정이 보이는 경험”을 검증하는 것. 다음 단계에서 Socket.IO live event와 `/control/summary`를 붙이면 돼.
+          </NoteText>
+        </NoteCard>
+      </BottomGrid>
+    </Root>
+  );
+}

frontend/components/live/SisterActivityLane.tsx

@@ -0,0 +1,149 @@
+'use client';
+
+import styled, { keyframes } from 'styled-components';
+import type { SisterLaneState } from '@/lib/control/types';
+
+const pulse = keyframes`
+  0%, 100% { box-shadow: 0 0 0 rgba(255, 255, 255, 0); }
+  50% { box-shadow: 0 0 24px rgba(255, 255, 255, 0.08); }
+`;
+
+const LaneCard = styled.article<{ $color: string; $active: boolean }>`
+  position: relative;
+  min-height: 258px;
+  border: 1px solid color-mix(in srgb, ${({ $color }) => $color} 42%, var(--border-color));
+  border-radius: 22px;
+  padding: 18px;
+  overflow: hidden;
+  background:
+    radial-gradient(circle at top right, color-mix(in srgb, ${({ $color }) => $color} 18%, transparent), transparent 34%),
+    linear-gradient(180deg, rgba(255,255,255,0.045), rgba(255,255,255,0.015));
+  animation: ${({ $active }) => ($active ? pulse : 'none')} 2.8s ease-in-out infinite;
+`;
+
+const TopRow = styled.div`
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 18px;
+`;
+
+const Identity = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+`;
+
+const Name = styled.h3`
+  margin: 0;
+  font-size: 18px;
+  letter-spacing: -0.02em;
+`;
+
+const Role = styled.span`
+  font-family: var(--font-mono);
+  font-size: 11px;
+  color: var(--text-secondary);
+  text-transform: uppercase;
+`;
+
+const StatusPill = styled.span<{ $color: string }>`
+  border: 1px solid color-mix(in srgb, ${({ $color }) => $color} 56%, var(--border-color));
+  color: ${({ $color }) => $color};
+  border-radius: 999px;
+  padding: 5px 9px;
+  font-family: var(--font-mono);
+  font-size: 10px;
+  background: rgba(0, 0, 0, 0.22);
+`;
+
+const TaskBlock = styled.div`
+  display: grid;
+  gap: 12px;
+`;
+
+const Label = styled.div`
+  font-size: 10px;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+  margin-bottom: 4px;
+`;
+
+const Body = styled.p`
+  margin: 0;
+  font-size: 14px;
+  color: var(--text-primary);
+`;
+
+const Muted = styled.p`
+  margin: 0;
+  font-size: 12px;
+  color: var(--text-secondary);
+`;
+
+const ProgressTrack = styled.div`
+  height: 7px;
+  border-radius: 999px;
+  background: rgba(255, 255, 255, 0.08);
+  overflow: hidden;
+  margin-top: 16px;
+`;
+
+const ProgressFill = styled.div<{ $progress: number; $color: string }>`
+  width: ${({ $progress }) => $progress}%;
+  height: 100%;
+  border-radius: inherit;
+  background: linear-gradient(90deg, ${({ $color }) => $color}, color-mix(in srgb, ${({ $color }) => $color} 54%, white));
+`;
+
+const MetaRow = styled.div`
+  display: flex;
+  justify-content: space-between;
+  gap: 8px;
+  margin-top: 10px;
+  font-family: var(--font-mono);
+  font-size: 10px;
+  color: var(--text-secondary);
+`;
+
+export default function SisterActivityLane({ lane }: { lane: SisterLaneState }) {
+  const active = lane.status === 'working' || lane.status === 'thinking' || lane.status === 'reviewing';
+
+  return (
+    <LaneCard $color={lane.color} $active={active}>
+      <TopRow>
+        <Identity>
+          <Name>{lane.name}</Name>
+          <Role>{lane.role} · {lane.mode}</Role>
+        </Identity>
+        <StatusPill $color={lane.color}>{lane.status}</StatusPill>
+      </TopRow>
+
+      <TaskBlock>
+        <div>
+          <Label>Current task</Label>
+          <Body>{lane.currentTask}</Body>
+        </div>
+        <div>
+          <Label>Last event</Label>
+          <Muted>{lane.lastEvent}</Muted>
+        </div>
+        <div>
+          <Label>Next handoff</Label>
+          <Muted>{lane.nextHandoff}</Muted>
+        </div>
+      </TaskBlock>
+
+      <ProgressTrack aria-label={`${lane.name} progress`}>
+        <ProgressFill $progress={lane.progress} $color={lane.color} />
+      </ProgressTrack>
+      <MetaRow>
+        <span>{lane.phase}</span>
+        <span>{lane.progress}%</span>
+      </MetaRow>
+    </LaneCard>
+  );
+}

frontend/components/live/WorkflowTimeline.tsx

@@ -0,0 +1,123 @@
+'use client';
+
+import styled from 'styled-components';
+import type { WorkflowEvent } from '@/lib/control/types';
+
+const TimelineRoot = styled.section`
+  border: 1px solid var(--border-color);
+  border-radius: 22px;
+  background: rgba(255, 255, 255, 0.025);
+  padding: 18px;
+`;
+
+const Header = styled.div`
+  display: flex;
+  justify-content: space-between;
+  gap: 12px;
+  align-items: center;
+  margin-bottom: 14px;
+`;
+
+const Title = styled.h2`
+  font-size: 15px;
+  margin: 0;
+`;
+
+const LiveBadge = styled.span`
+  font-family: var(--font-mono);
+  font-size: 10px;
+  color: #ffcc66;
+  border: 1px solid rgba(255, 204, 102, 0.35);
+  border-radius: 999px;
+  padding: 4px 8px;
+`;
+
+const EventList = styled.ol`
+  list-style: none;
+  display: grid;
+  gap: 10px;
+`;
+
+const EventItem = styled.li<{ $selected: boolean }>`
+  display: grid;
+  grid-template-columns: 54px 1fr;
+  gap: 12px;
+  padding: 12px;
+  border-radius: 16px;
+  border: 1px solid ${({ $selected }) => ($selected ? 'rgba(255,255,255,0.34)' : 'rgba(255,255,255,0.08)')};
+  background: ${({ $selected }) => ($selected ? 'rgba(255,255,255,0.07)' : 'rgba(0,0,0,0.16)')};
+  cursor: pointer;
+  transition: border-color .15s ease, background .15s ease;
+
+  &:hover {
+    border-color: rgba(255,255,255,0.26);
+  }
+`;
+
+const EventTime = styled.div`
+  font-family: var(--font-mono);
+  font-size: 11px;
+  color: var(--text-secondary);
+`;
+
+const EventBody = styled.div`
+  min-width: 0;
+`;
+
+const EventTitle = styled.div`
+  display: flex;
+  justify-content: space-between;
+  gap: 8px;
+  font-size: 13px;
+  font-weight: 700;
+`;
+
+const EventDetail = styled.p`
+  margin: 5px 0 0;
+  color: var(--text-secondary);
+  font-size: 12px;
+`;
+
+const TypeBadge = styled.span`
+  flex-shrink: 0;
+  font-family: var(--font-mono);
+  font-size: 9px;
+  color: var(--text-secondary);
+`;
+
+export default function WorkflowTimeline({
+  events,
+  selectedId,
+  onSelect,
+}: {
+  events: WorkflowEvent[];
+  selectedId: string;
+  onSelect: (event: WorkflowEvent) => void;
+}) {
+  return (
+    <TimelineRoot>
+      <Header>
+        <Title>Workflow Timeline</Title>
+        <LiveBadge>mock stream</LiveBadge>
+      </Header>
+      <EventList>
+        {events.map((event) => (
+          <EventItem
+            key={event.id}
+            $selected={event.id === selectedId}
+            onClick={() => onSelect(event)}
+          >
+            <EventTime>{event.at}</EventTime>
+            <EventBody>
+              <EventTitle>
+                <span>{event.title}</span>
+                <TypeBadge>{event.type}</TypeBadge>
+              </EventTitle>
+              <EventDetail>{event.detail}</EventDetail>
+            </EventBody>
+          </EventItem>
+        ))}
+      </EventList>
+    </TimelineRoot>
+  );
+}

frontend/components/office-room/OfficeRoom.tsx

@@ -0,0 +1,452 @@
+'use client';
+
+import React, { useState, useMemo } from 'react';
+import styled, { keyframes } from 'styled-components';
+import { API_URL } from '@/lib/config';
+import SisterDetailPanel from './SisterDetailPanel';
+
+/**
+ * Photo-first virtual office.
+ *
+ * Pixel art proved too low-resolution to capture the actual sister
+ * illustrations. Instead the office is a stylized CSS/SVG room and each
+ * sister is a circular portrait of her real avatar (served by the
+ * backend at /api/sisters/{name}/avatar) sitting at her desk.
+ *
+ * The layout is a simple 2x2 grid:
+ *
+ *   하랑 (plan)        나랑 (implement)
+ *           ┌────────┐
+ *           │ 회의실 │
+ *           └────────┘
+ *   다랑 (review)      이랑 (deploy)
+ *
+ * Each sister card has:
+ *   - circular portrait
+ *   - korean name + role
+ *   - status dot
+ *   - active stage = glowing pulse ring
+ *   - clickable → opens detail panel
+ */
+
+interface Sister {
+  key: string;
+  nameKR: string;
+  role: string;
+  stage: 'plan' | 'implement' | 'review' | 'deploy';
+  accent: string; // sister-specific accent color (matches the actual illustration)
+}
+
+const SISTERS: Sister[] = [
+  { key: 'harang', nameKR: '하랑이', role: '기획', stage: 'plan',      accent: '#5fafff' },
+  { key: 'narang', nameKR: '나랑이', role: '구현', stage: 'implement', accent: '#37c4d4' },
+  { key: 'darang', nameKR: '다랑이', role: '검토', stage: 'review',    accent: '#e84848' },
+  { key: 'erang',  nameKR: '이랑이', role: '배포', stage: 'deploy',    accent: '#9b8df0' },
+];
+
+interface OfficeRoomProps {
+  /** Currently active stage from any running pipeline (highlights one sister). */
+  activeStage?: 'plan' | 'implement' | 'review' | 'deploy' | null;
+}
+
+export default function OfficeRoom({ activeStage }: OfficeRoomProps) {
+  const [selected, setSelected] = useState<string | null>(null);
+
+  const handleClick = (key: string) => {
+    setSelected((prev) => (prev === key ? null : key));
+  };
+
+  return (
+    <Layout>
+      <RoomCard>
+        <RoomHeader>
+          <RoomTitle>🏢 하나랑 사무실</RoomTitle>
+          <RoomSub>4 SISTERS · LIVE</RoomSub>
+        </RoomHeader>
+
+        <Floor>
+          <RoomDecor />
+
+          {SISTERS.map((s, idx) => (
+            <DeskWrap key={s.key} $position={idx}>
+              <DeskBack />
+              <SisterCard
+                $accent={s.accent}
+                $active={activeStage === s.stage}
+                $selected={selected === s.key}
+                onClick={() => handleClick(s.key)}
+              >
+                {activeStage === s.stage && <PulseRing $accent={s.accent} />}
+                <Portrait
+                  src={`${API_URL}/api/sisters/${s.key}/avatar`}
+                  alt={s.nameKR}
+                  $accent={s.accent}
+                />
+                <NameRow>
+                  <SisterName>{s.nameKR}</SisterName>
+                  <RoleTag $accent={s.accent}>{s.role}</RoleTag>
+                </NameRow>
+                <StatusDot $active={activeStage === s.stage} $accent={s.accent} />
+              </SisterCard>
+            </DeskWrap>
+          ))}
+
+          <MeetingRoom>
+            <MeetingLabel>회의실</MeetingLabel>
+          </MeetingRoom>
+
+          {/* Stage flow arrows (top→right→bottom→left, plan→impl→review→deploy) */}
+          <FlowSvg viewBox="0 0 100 100" preserveAspectRatio="none">
+            <defs>
+              <marker
+                id="arrow"
+                viewBox="0 0 10 10"
+                refX="6"
+                refY="5"
+                markerWidth="6"
+                markerHeight="6"
+                orient="auto"
+              >
+                <path d="M0,0 L10,5 L0,10 z" fill="#5fafff" opacity="0.55" />
+              </marker>
+            </defs>
+            {/* harang → narang (top horizontal) */}
+            <line
+              x1="35" y1="22" x2="65" y2="22"
+              stroke="#5fafff" strokeWidth="0.4" strokeDasharray="1.5 1.5"
+              markerEnd="url(#arrow)" opacity={activeStage === 'plan' || activeStage === 'implement' ? 0.85 : 0.25}
+            />
+            {/* narang → darang (right vertical → cross to bottom-right? we draw a curve) */}
+            <line
+              x1="78" y1="35" x2="78" y2="65"
+              stroke="#5fafff" strokeWidth="0.4" strokeDasharray="1.5 1.5"
+              markerEnd="url(#arrow)" opacity={activeStage === 'implement' || activeStage === 'review' ? 0.85 : 0.25}
+            />
+            {/* darang → erang? Actually deploy is below right; review→deploy is bottom horizontal reversed. Use bottom row left direction */}
+            <line
+              x1="65" y1="78" x2="35" y2="78"
+              stroke="#5fafff" strokeWidth="0.4" strokeDasharray="1.5 1.5"
+              markerEnd="url(#arrow)" opacity={activeStage === 'review' || activeStage === 'deploy' ? 0.85 : 0.25}
+            />
+            {/* erang → harang? Pipeline ends at deploy. Skip return arrow. */}
+          </FlowSvg>
+        </Floor>
+
+        <Hint>책상 클릭 → 자매 상세 정보 · {activeStage ? `현재 ${activeStage} 단계 진행 중` : 'idle'}</Hint>
+      </RoomCard>
+
+      <PanelCol>
+        {selected ? (
+          <SisterDetailPanel
+            name={selected}
+            onClose={() => setSelected(null)}
+          />
+        ) : (
+          <PanelEmpty>
+            👀 자매를 클릭해서<br />
+            상세 정보를 봐
+          </PanelEmpty>
+        )}
+      </PanelCol>
+    </Layout>
+  );
+}
+
+// ───────────────────────── styled ─────────────────────────
+
+const pulse = keyframes`
+  0%, 100% { transform: scale(1); opacity: 0.6; }
+  50%      { transform: scale(1.15); opacity: 0.0; }
+`;
+
+const dotPulse = keyframes`
+  0%, 100% { opacity: 1; }
+  50%      { opacity: 0.4; }
+`;
+
+const Layout = styled.div`
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) 320px;
+  gap: 16px;
+  width: 100%;
+
+  @media (max-width: 1024px) {
+    grid-template-columns: 1fr;
+  }
+`;
+
+const RoomCard = styled.section`
+  position: relative;
+  background: linear-gradient(160deg, #1a1f2e 0%, #0e1118 100%);
+  border: 1px solid var(--border-color);
+  border-radius: 18px;
+  overflow: hidden;
+  display: flex;
+  flex-direction: column;
+  min-height: 620px;
+`;
+
+const RoomHeader = styled.div`
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  padding: 18px 24px;
+  border-bottom: 1px solid rgba(255, 255, 255, 0.06);
+`;
+
+const RoomTitle = styled.h2`
+  margin: 0;
+  font-size: 16px;
+  font-weight: 700;
+  color: var(--text-primary);
+`;
+
+const RoomSub = styled.span`
+  font-family: var(--font-mono);
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.1em;
+  color: var(--text-secondary);
+`;
+
+const Floor = styled.div`
+  position: relative;
+  flex: 1;
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  grid-template-rows: 1fr 1fr;
+  gap: 0;
+  padding: 36px;
+  min-height: 520px;
+`;
+
+/**
+ * Background decoration: subtle isometric grid lines + carpet circle.
+ * Pure CSS — no images.
+ */
+const RoomDecor = styled.div`
+  position: absolute;
+  inset: 16px;
+  pointer-events: none;
+  background-image:
+    linear-gradient(rgba(255, 255, 255, 0.04) 1px, transparent 1px),
+    linear-gradient(90deg, rgba(255, 255, 255, 0.04) 1px, transparent 1px);
+  background-size: 32px 32px;
+  border: 1px dashed rgba(255, 255, 255, 0.06);
+  border-radius: 12px;
+  &::after {
+    content: '';
+    position: absolute;
+    top: 50%;
+    left: 50%;
+    width: 200px;
+    height: 200px;
+    transform: translate(-50%, -50%);
+    background: radial-gradient(circle, rgba(95, 175, 255, 0.05) 0%, transparent 70%);
+    border-radius: 50%;
+  }
+`;
+
+const FlowSvg = styled.svg`
+  position: absolute;
+  inset: 0;
+  width: 100%;
+  height: 100%;
+  pointer-events: none;
+`;
+
+const DeskWrap = styled.div<{ $position: number }>`
+  position: relative;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  z-index: 2;
+  gap: 8px;
+  ${({ $position }) => {
+    switch ($position) {
+      case 0: return 'justify-self: start; align-self: start; padding-top: 12px;';
+      case 1: return 'justify-self: end; align-self: start; padding-top: 12px;';
+      case 2: return 'justify-self: start; align-self: end; padding-bottom: 12px;';
+      case 3: return 'justify-self: end; align-self: end; padding-bottom: 12px;';
+      default: return '';
+    }
+  }}
+`;
+
+/** Simple "desk" silhouette under the sister card. */
+const DeskBack = styled.div`
+  position: absolute;
+  bottom: -2px;
+  left: 50%;
+  transform: translateX(-50%);
+  width: 130px;
+  height: 24px;
+  background: linear-gradient(180deg, #4a3520 0%, #2a1d10 100%);
+  border-radius: 4px;
+  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.4);
+  z-index: -1;
+  &::before {
+    content: '';
+    position: absolute;
+    top: -8px;
+    left: 50%;
+    transform: translateX(-50%);
+    width: 40px;
+    height: 8px;
+    background: #1a3654;
+    border: 1px solid #0a1a2c;
+    border-radius: 2px 2px 0 0;
+  }
+`;
+
+interface SisterCardProps {
+  $accent: string;
+  $active: boolean;
+  $selected: boolean;
+}
+
+const SisterCard = styled.button<SisterCardProps>`
+  position: relative;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 6px;
+  padding: 10px 14px 12px;
+  background: ${({ $selected }) =>
+    $selected ? 'rgba(255, 255, 255, 0.08)' : 'rgba(255, 255, 255, 0.04)'};
+  border: 1px solid
+    ${({ $accent, $selected }) => ($selected ? $accent : 'rgba(255, 255, 255, 0.1)')};
+  border-radius: 12px;
+  cursor: pointer;
+  font-family: inherit;
+  transition: transform 0.15s ease, border-color 0.15s ease, background 0.15s ease;
+
+  &:hover {
+    transform: translateY(-2px);
+    border-color: ${({ $accent }) => $accent};
+    background: rgba(255, 255, 255, 0.08);
+  }
+`;
+
+const PulseRing = styled.span<{ $accent: string }>`
+  position: absolute;
+  top: 6px;
+  left: 50%;
+  transform: translateX(-50%);
+  width: 80px;
+  height: 80px;
+  border-radius: 50%;
+  border: 2px solid ${({ $accent }) => $accent};
+  animation: ${pulse} 1.6s ease-out infinite;
+  pointer-events: none;
+`;
+
+const Portrait = styled.img<{ $accent: string }>`
+  width: 72px;
+  height: 72px;
+  border-radius: 50%;
+  border: 3px solid ${({ $accent }) => $accent};
+  background: #111;
+  object-fit: cover;
+  box-shadow: 0 0 0 3px rgba(0, 0, 0, 0.4),
+    0 4px 16px rgba(0, 0, 0, 0.5);
+`;
+
+const NameRow = styled.div`
+  display: flex;
+  align-items: center;
+  gap: 8px;
+`;
+
+const SisterName = styled.span`
+  font-size: 13px;
+  font-weight: 700;
+  color: var(--text-primary);
+`;
+
+const RoleTag = styled.span<{ $accent: string }>`
+  font-family: var(--font-mono);
+  font-size: 9px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  padding: 2px 7px;
+  border-radius: 8px;
+  color: ${({ $accent }) => $accent};
+  border: 1px solid ${({ $accent }) => $accent};
+  background: rgba(0, 0, 0, 0.3);
+`;
+
+const StatusDot = styled.span<{ $active: boolean; $accent: string }>`
+  position: absolute;
+  top: 8px;
+  right: 8px;
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: ${({ $active, $accent }) => ($active ? $accent : '#3a3a44')};
+  box-shadow: ${({ $active, $accent }) =>
+    $active ? `0 0 8px ${$accent}` : 'none'};
+  animation: ${({ $active }) => ($active ? dotPulse : 'none')} 1.6s ease-in-out
+    infinite;
+`;
+
+const MeetingRoom = styled.div`
+  position: absolute;
+  top: 50%;
+  left: 50%;
+  transform: translate(-50%, -50%);
+  width: 110px;
+  height: 70px;
+  background: linear-gradient(180deg, rgba(95, 175, 255, 0.08) 0%, rgba(95, 175, 255, 0.02) 100%);
+  border: 1px solid rgba(95, 175, 255, 0.25);
+  border-radius: 8px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 1;
+  pointer-events: none;
+`;
+
+const MeetingLabel = styled.span`
+  font-family: var(--font-mono);
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: rgba(95, 175, 255, 0.7);
+`;
+
+const Hint = styled.div`
+  text-align: center;
+  font-family: var(--font-mono);
+  font-size: 11px;
+  color: var(--text-secondary);
+  padding: 12px 20px;
+  border-top: 1px solid rgba(255, 255, 255, 0.06);
+`;
+
+const PanelCol = styled.aside`
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 18px;
+  padding: 20px;
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+  min-height: 620px;
+`;
+
+const PanelEmpty = styled.div`
+  flex: 1;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  text-align: center;
+  font-size: 12px;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+  line-height: 1.7;
+`;

frontend/components/office-room/SisterDetailPanel.tsx

@@ -0,0 +1,231 @@
+'use client';
+
+import React, { useEffect, useState } from 'react';
+import styled from 'styled-components';
+import { API_URL } from '@/lib/config';
+
+interface SisterDetailPanelProps {
+  name: string;
+  onClose: () => void;
+}
+
+interface SisterInfo {
+  name: string;
+  status?: 'online' | 'offline' | 'working' | 'unknown';
+  role?: string;
+  currentTask?: string | null;
+  lastSeen?: string | null;
+  uptime?: string;
+  cpu?: number;
+  memory?: { used?: number; total?: number };
+}
+
+const SISTER_KOREAN: Record<string, string> = {
+  harang: '하랑이',
+  narang: '나랑이',
+  darang: '다랑이',
+  erang: '이랑이',
+};
+
+const SISTER_ROLE: Record<string, string> = {
+  harang: '기획 (Planner)',
+  narang: '구현 (Developer)',
+  darang: '검토 (QA)',
+  erang: '배포 (Infra)',
+};
+
+const SISTER_DESC: Record<string, string> = {
+  harang:
+    '프로젝트 요구사항에서 MVP 범위와 통과 기준을 결정한다. rails 파이프라인의 첫 단계.',
+  narang:
+    '하랑이의 기획을 받아 코드/파일을 직접 생성하고 git push 까지 진행한다.',
+  darang:
+    'narang 의 구현물을 review. APPROVE / REQUEST_CHANGES / ABORT 중 하나를 결정.',
+  erang:
+    'darang 통과 후 산출물을 배포 검증한다. 마지막 단계, DEPLOY_DONE / DEPLOY_FAILED.',
+};
+
+const SISTER_ACCENT: Record<string, string> = {
+  harang: '#5fafff',
+  narang: '#37c4d4',
+  darang: '#e84848',
+  erang: '#9b8df0',
+};
+
+const Header = styled.div`
+  display: flex;
+  align-items: center;
+  gap: 14px;
+`;
+
+const PortraitLg = styled.img<{ $accent: string }>`
+  width: 64px;
+  height: 64px;
+  border-radius: 50%;
+  border: 3px solid ${({ $accent }) => $accent};
+  background: #111;
+  object-fit: cover;
+  flex-shrink: 0;
+`;
+
+const NameRow = styled.div`
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  min-width: 0;
+`;
+
+const NameKR = styled.h2`
+  font-size: 18px;
+  font-weight: 700;
+  margin: 0;
+  color: var(--text-primary);
+`;
+
+const RoleLabel = styled.span`
+  font-size: 11px;
+  font-family: var(--font-mono);
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--text-secondary);
+`;
+
+const CloseBtn = styled.button`
+  background: transparent;
+  border: 1px solid var(--border-color);
+  color: var(--text-secondary);
+  font-size: 11px;
+  padding: 4px 10px;
+  border-radius: 8px;
+  cursor: pointer;
+  flex-shrink: 0;
+
+  &:hover {
+    color: var(--text-primary);
+    border-color: var(--text-primary);
+  }
+`;
+
+const Section = styled.section`
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+`;
+
+const SectionLabel = styled.div`
+  font-size: 10px;
+  font-family: var(--font-mono);
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--text-secondary);
+`;
+
+const SectionBody = styled.div`
+  font-size: 13px;
+  line-height: 1.55;
+  color: var(--text-primary);
+`;
+
+const StatusDot = styled.span<{ $status: string }>`
+  display: inline-block;
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  margin-right: 8px;
+  background: ${({ $status }) => {
+    switch ($status) {
+      case 'online':
+      case 'working':
+        return '#22c55e';
+      case 'offline':
+        return '#6b7280';
+      default:
+        return '#f59e0b';
+    }
+  }};
+`;
+
+export default function SisterDetailPanel({
+  name,
+  onClose,
+}: SisterDetailPanelProps) {
+  const [info, setInfo] = useState<SisterInfo | null>(null);
+  const [loading, setLoading] = useState(true);
+
+  useEffect(() => {
+    let cancelled = false;
+    setLoading(true);
+    setInfo(null);
+    fetch(`${API_URL}/api/sisters/${name}`, { credentials: 'include' })
+      .then((r) => (r.ok ? r.json() : null))
+      .then((data: SisterInfo | null) => {
+        if (cancelled) return;
+        setInfo(data);
+        setLoading(false);
+      })
+      .catch(() => {
+        if (!cancelled) setLoading(false);
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [name]);
+
+  const accent = SISTER_ACCENT[name] ?? '#5fafff';
+
+  return (
+    <>
+      <Header>
+        <PortraitLg
+          src={`${API_URL}/api/sisters/${name}/avatar`}
+          alt={name}
+          $accent={accent}
+        />
+        <NameRow>
+          <NameKR>{SISTER_KOREAN[name] ?? name}</NameKR>
+          <RoleLabel>{SISTER_ROLE[name] ?? 'unknown'}</RoleLabel>
+        </NameRow>
+        <CloseBtn onClick={onClose}>닫기</CloseBtn>
+      </Header>
+
+      <Section>
+        <SectionLabel>역할</SectionLabel>
+        <SectionBody>{SISTER_DESC[name] ?? '—'}</SectionBody>
+      </Section>
+
+      <Section>
+        <SectionLabel>상태</SectionLabel>
+        <SectionBody>
+          <StatusDot $status={info?.status ?? 'unknown'} />
+          {loading ? '확인 중...' : info?.status ?? '상태 정보 없음'}
+        </SectionBody>
+      </Section>
+
+      {info?.currentTask && (
+        <Section>
+          <SectionLabel>현재 작업</SectionLabel>
+          <SectionBody>{info.currentTask}</SectionBody>
+        </Section>
+      )}
+
+      {info?.uptime && (
+        <Section>
+          <SectionLabel>업타임</SectionLabel>
+          <SectionBody style={{ fontFamily: 'var(--font-mono)' }}>
+            {info.uptime}
+          </SectionBody>
+        </Section>
+      )}
+
+      {typeof info?.cpu === 'number' && (
+        <Section>
+          <SectionLabel>CPU</SectionLabel>
+          <SectionBody style={{ fontFamily: 'var(--font-mono)' }}>
+            {info.cpu.toFixed(1)}%
+          </SectionBody>
+        </Section>
+      )}
+    </>
+  );
+}

frontend/components/office/ChatWorkspace.tsx

@@ -4,6 +4,7 @@ import React, { useState, useRef, useEffect, useCallback, useMemo } from 'react'
 import styled, { keyframes } from 'styled-components';
 import SisterAvatar from '@/components/common/SisterAvatar';
 import { API_URL } from '@/lib/config';
+import { withSessionRequest } from '@/lib/csrf';
 import type { SisterName, AgentState } from './OfficeScene';
 
 interface RuntimeMessage {
@@ -124,6 +125,8 @@ const SisterTab = styled.button<{ $active: boolean }>`
     border-bottom: 2px solid ${({ $active }) => ($active ? 'var(--text-primary)' : 'transparent')};
     white-space: nowrap;
     flex-shrink: 0;
+    padding: var(--space-xs) var(--space-sm);
+    gap: 4px;
   }
 `;
 
@@ -407,10 +410,8 @@ function runtimeStateLabel(state: AgentState): string {
   return 'idle';
 }
 
-function getToken(): string {
-  if (typeof window === 'undefined') return '';
-  return localStorage.getItem('hanarang_access_token') ?? '';
-}
+// Fix #4: Remove localStorage token — use cookie-based auth via withSessionRequest
+// Token is handled by HttpOnly cookies + CSRF, no client-side access needed
 
 function mergeMessages(prev: ChatMessage[], incoming: ChatMessage[]) {
   const map = new Map<string, ChatMessage>();
@@ -433,13 +434,15 @@ export default function ChatWorkspace({ initialSister, onClose }: ChatWorkspaceP
   const [activeSister, setActiveSister] = useState<SisterName>(initialSister);
   const [allMessages, setAllMessages] = useState<Partial<Record<SisterName, ChatMessage[]>>>({});
   const [runtimeBySister, setRuntimeBySister] = useState<Partial<Record<SisterName, RuntimeSnapshot>>>({});
-  const [input, setInput] = useState('');
+  // Per-sister draft — prevents input leaking across tabs
+  const [drafts, setDrafts] = useState<Partial<Record<SisterName, string>>>({});
+  const input = drafts[activeSister] ?? '';
   const [sending, setSending] = useState(false);
   const timelineRef = useRef<HTMLDivElement>(null);
 
   const messages = useMemo(() => allMessages[activeSister] ?? [], [allMessages, activeSister]);
   const runtime = runtimeBySister[activeSister] ?? null;
-  const hasToken = Boolean(getToken());
+  // Cookie-based auth always available (no token check needed)
 
   useEffect(() => {
     setActiveSister(initialSister);
@@ -460,7 +463,7 @@ export default function ChatWorkspace({ initialSister, onClose }: ChatWorkspaceP
 
   const loadRuntime = useCallback(async (sister: SisterName) => {
     try {
-      const res = await fetch(`${API_URL}/api/sisters/${sister}/runtime`);
+      const res = await fetch(`${API_URL}/api/sisters/${sister}/runtime`, withSessionRequest());
       if (!res.ok) return;
       const data = (await res.json()) as RuntimeSnapshot;
       setRuntimeBySister((prev) => ({ ...prev, [sister]: data }));
@@ -485,37 +488,25 @@ export default function ChatWorkspace({ initialSister, onClose }: ChatWorkspaceP
     const text = input.trim();
     if (!text || sending) return;
 
-    const token = getToken();
-    if (!token) {
-      setMessages(activeSister, (prev) => mergeMessages(prev, [{
-        id: `sys-${Date.now()}`,
-        role: 'assistant',
-        content: '로그인이 풀린 것 같아. 다시 로그인한 뒤 시도해줘.',
-        ts: new Date().toISOString(),
-      }]));
-      return;
-    }
+    // Cookie-based auth — no token check needed
 
     const userMessage: ChatMessage = {
-      id: `user-${Date.now()}`,
+      id: `user-${crypto.randomUUID()}`,
       role: 'user',
       content: text,
       ts: new Date().toISOString(),
     };
 
     setMessages(activeSister, (prev) => mergeMessages(prev, [userMessage]));
-    setInput('');
+    setDrafts((prev) => ({ ...prev, [activeSister]: '' }));
     setSending(true);
 
     try {
-      const res = await fetch(`${API_URL}/api/sisters/${activeSister}/chat`, {
+    const res = await fetch(`${API_URL}/api/sisters/${activeSister}/chat`, withSessionRequest({
         method: 'POST',
-        headers: {
-          'Content-Type': 'application/json',
-          Authorization: `Bearer ${token}`,
-        },
+        headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify({ message: text }),
-      });
+    }, { csrf: true }));
 
       const data = await res.json();
       if (!res.ok) {
@@ -529,7 +520,7 @@ export default function ChatWorkspace({ initialSister, onClose }: ChatWorkspaceP
       const reply = String(data?.reply || '').trim();
       if (reply) {
         setMessages(activeSister, (prev) => mergeMessages(prev, [{
-          id: `assistant-${Date.now()}`,
+          id: `assistant-${crypto.randomUUID()}`,
           role: 'assistant',
           content: reply,
           ts: new Date().toISOString(),
@@ -540,7 +531,7 @@ export default function ChatWorkspace({ initialSister, onClose }: ChatWorkspaceP
     } catch (error) {
       const message = error instanceof Error ? error.message : '채팅 전송 중 오류가 발생했어.';
       setMessages(activeSister, (prev) => mergeMessages(prev, [{
-        id: `error-${Date.now()}`,
+        id: `error-${crypto.randomUUID()}`,
         role: 'assistant',
         content: `전송 실패: ${message}`,
         ts: new Date().toISOString(),
@@ -614,11 +605,11 @@ export default function ChatWorkspace({ initialSister, onClose }: ChatWorkspaceP
           <MessageInput
             placeholder={`${SISTER_DISPLAY[activeSister]}에게 지시해...`}
             value={input}
-            onChange={(e) => setInput(e.target.value)}
+            onChange={(e) => setDrafts((prev) => ({ ...prev, [activeSister]: e.target.value }))}
             onKeyDown={handleKeyDown}
             rows={1}
           />
-          <SendBtn onClick={() => void handleSend()} disabled={!input.trim() || sending || !hasToken}>
+          <SendBtn onClick={() => void handleSend()} disabled={!input.trim() || sending}>
             {sending ? '전송 중' : '전송'}
           </SendBtn>
         </InputArea>

frontend/components/office/OfficeFloor.tsx

@@ -0,0 +1,427 @@
+'use client';
+
+import React, { useMemo } from 'react';
+import styled, { keyframes, css } from 'styled-components';
+import type { RailsSubTaskNode, RailsPipelineSummary } from '@/lib/useRailsSocket';
+import SisterAvatar from '@/components/common/SisterAvatar';
+
+const SISTERS = [
+  { key: 'harang', label: '하랑', role: 'Planner', color: '#3b82f6', accent: '#60a5fa', x: 0, y: 0 },
+  { key: 'narang', label: '나랑', role: 'Generator', color: '#22c55e', accent: '#4ade80', x: 1, y: 0 },
+  { key: 'darang', label: '다랑', role: 'Evaluator', color: '#f43f5e', accent: '#fb7185', x: 0, y: 1 },
+  { key: 'erang', label: '이랑', role: 'Infra', color: '#f97316', accent: '#fb923c', x: 1, y: 1 },
+] as const;
+
+type SisterKey = (typeof SISTERS)[number]['key'];
+
+interface OfficeFloorProps {
+  pipelines: RailsPipelineSummary[];
+  treesByPipeline: Map<string, RailsSubTaskNode[]>;
+  selectedSister: SisterKey | null;
+  onSelectSister: (key: SisterKey | null) => void;
+}
+
+interface SisterStats {
+  total: number;
+  running: number;
+  done: number;
+  failed: number;
+  models: Set<string>;
+}
+
+const Wrap = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+`;
+
+const Floor = styled.div`
+  display: grid;
+  grid-template-columns: repeat(2, 1fr);
+  grid-template-rows: repeat(2, 1fr);
+  gap: 24px;
+  background: var(--bg-surface);
+  border: 1px solid var(--border-color);
+  border-radius: 16px;
+  padding: 28px;
+  min-height: 540px;
+  position: relative;
+`;
+
+const Overlay = styled.svg`
+  position: absolute;
+  inset: 0;
+  width: 100%;
+  height: 100%;
+  pointer-events: none;
+  z-index: 0;
+`;
+
+const flowDash = keyframes`
+  to { stroke-dashoffset: -8; }
+`;
+
+const FlowLine = styled.line<{ $flowing: boolean }>`
+  stroke: ${({ $flowing }) =>
+    $flowing ? '#5fafff' : 'rgba(95, 175, 255, 0.15)'};
+  stroke-width: 0.4;
+  stroke-dasharray: ${({ $flowing }) => ($flowing ? '1.6 1.2' : '0.6 0.6')};
+  animation: ${({ $flowing }) =>
+    $flowing
+      ? css`
+          ${flowDash} 1.2s linear infinite
+        `
+      : 'none'};
+`;
+
+const pulse = keyframes`
+  0%, 100% { box-shadow: 0 0 0 0 rgba(255, 165, 0, 0.4); }
+  50% { box-shadow: 0 0 0 8px rgba(255, 165, 0, 0); }
+`;
+
+const blink = keyframes`
+  0%, 100% { opacity: 1; }
+  50% { opacity: 0.4; }
+`;
+
+const Desk = styled.button<{ $color: string; $active: boolean; $running: boolean; $selected: boolean }>`
+  position: relative;
+  z-index: 1;
+  background: ${({ $color }) => `${$color}10`};
+  border: 1.5px solid ${({ $color, $selected }) => ($selected ? $color : `${$color}50`)};
+  border-radius: 12px;
+  padding: 24px;
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+  cursor: pointer;
+  transition: all 0.2s ease;
+  min-height: 220px;
+  text-align: left;
+  color: var(--text-primary);
+  animation: ${({ $running }) => ($running ? pulse : 'none')} 1.6s ease-in-out infinite;
+
+  &:hover {
+    transform: translateY(-2px);
+    border-color: ${({ $color }) => $color};
+  }
+`;
+
+const DeskHead = styled.div`
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+`;
+
+const SisterBadge = styled.div<{ $color: string }>`
+  display: flex;
+  align-items: center;
+  gap: 12px;
+`;
+
+const AvatarFrame = styled.div<{ $color: string; $running: boolean }>`
+  width: 60px;
+  height: 60px;
+  border-radius: 50%;
+  padding: 3px;
+  background: linear-gradient(135deg, ${({ $color }) => $color}, ${({ $color }) => `${$color}60`});
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+  box-shadow: ${({ $color, $running }) =>
+    $running ? `0 4px 16px ${$color}60` : `0 2px 8px ${$color}30`};
+`;
+
+const NameBlock = styled.div`
+  display: flex;
+  flex-direction: column;
+`;
+
+const Name = styled.span`
+  font-size: 18px;
+  font-weight: 700;
+`;
+
+const Role = styled.span`
+  font-size: 11px;
+  font-weight: 600;
+  color: var(--text-secondary);
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+`;
+
+const StatusDot = styled.div<{ $running: boolean }>`
+  width: 10px;
+  height: 10px;
+  border-radius: 50%;
+  background: ${({ $running }) => ($running ? '#22c55e' : '#525252')};
+  flex-shrink: 0;
+  ${({ $running }) =>
+    $running &&
+    `
+    box-shadow: 0 0 0 4px rgba(34, 197, 94, 0.2);
+    animation: ${blink} 1.4s ease-in-out infinite;
+  `}
+`;
+
+const Stats = styled.div`
+  display: flex;
+  gap: 18px;
+  padding-top: 12px;
+  border-top: 1px dashed var(--border-color);
+`;
+
+const Stat = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+`;
+
+const StatNum = styled.span`
+  font-family: var(--font-mono);
+  font-size: 20px;
+  font-weight: 700;
+`;
+
+const StatLabel = styled.span`
+  font-size: 10px;
+  color: var(--text-secondary);
+  text-transform: uppercase;
+  letter-spacing: 0.05em;
+`;
+
+const Workers = styled.div`
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  min-height: 28px;
+`;
+
+const Worker = styled.div<{ $role: string; $state: string }>`
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 3px 8px;
+  border-radius: 12px;
+  font-size: 10px;
+  font-weight: 600;
+  background: ${({ $role }) => roleColor($role)}20;
+  border: 1px solid ${({ $role }) => roleColor($role)}60;
+  color: ${({ $role }) => roleColor($role)};
+  ${({ $state }) =>
+    $state === 'running' &&
+    `animation: ${blink} 1.2s ease-in-out infinite;`}
+`;
+
+const Empty = styled.span`
+  font-size: 11px;
+  color: var(--text-secondary);
+  font-style: italic;
+`;
+
+function roleColor(role: string): string {
+  switch (role) {
+    case 'manager':
+      return '#8b5cf6';
+    case 'principal':
+      return '#3b82f6';
+    case 'lead':
+      return '#f97316';
+    case 'junior':
+      return '#22c55e';
+    default:
+      return '#6b7280';
+  }
+}
+
+function flattenWorkers(tree: RailsSubTaskNode[]): RailsSubTaskNode[] {
+  const out: RailsSubTaskNode[] = [];
+  const walk = (nodes: RailsSubTaskNode[]) => {
+    for (const n of nodes) {
+      out.push(n);
+      if (n.children?.length) walk(n.children);
+    }
+  };
+  walk(tree);
+  return out;
+}
+
+function statsFor(workers: RailsSubTaskNode[]): SisterStats {
+  const stats: SisterStats = {
+    total: workers.length,
+    running: 0,
+    done: 0,
+    failed: 0,
+    models: new Set(),
+  };
+  for (const w of workers) {
+    if (w.state === 'running' || w.state === 'queued') stats.running += 1;
+    else if (w.state === 'done') stats.done += 1;
+    else if (w.state === 'failed' || w.state === 'escalated') stats.failed += 1;
+    if (w.model) stats.models.add(w.model);
+  }
+  return stats;
+}
+
+export default function OfficeFloor({
+  pipelines,
+  treesByPipeline,
+  selectedSister,
+  onSelectSister,
+}: OfficeFloorProps) {
+  // Aggregate workers per sister across active pipelines
+  const workersBySister = useMemo(() => {
+    const map = new Map<SisterKey, RailsSubTaskNode[]>();
+    for (const sister of SISTERS) map.set(sister.key, []);
+
+    const activePipelines = pipelines.filter(
+      (p) => !['done', 'aborted'].includes(p.currentState),
+    );
+    const sourcePipelines = activePipelines.length > 0 ? activePipelines : pipelines.slice(0, 4);
+
+    for (const pipeline of sourcePipelines) {
+      const tree = treesByPipeline.get(pipeline.id) ?? [];
+      const flat = flattenWorkers(tree);
+      for (const node of flat) {
+        const sisterKey = node.agentName as SisterKey;
+        const target = map.get(sisterKey);
+        if (target) target.push(node);
+      }
+    }
+    return map;
+  }, [pipelines, treesByPipeline]);
+
+  // Determine which stages are currently running for animation
+  const activeStages = useMemo(() => {
+    const set = new Set<string>();
+    for (const sister of SISTERS) {
+      const stats = statsFor(workersBySister.get(sister.key) ?? []);
+      if (stats.running > 0) set.add(sister.key);
+    }
+    return set;
+  }, [workersBySister]);
+
+  // SVG flow lines: harang→narang→darang→erang following the pipeline order
+  // Coordinates are normalized 0-100 (viewBox 100x100)
+  const POS: Record<string, { x: number; y: number }> = {
+    harang: { x: 25, y: 25 },
+    narang: { x: 75, y: 25 },
+    darang: { x: 25, y: 75 },
+    erang: { x: 75, y: 75 },
+  };
+  // Order: plan→implement→review→deploy
+  const FLOW: Array<[keyof typeof POS, keyof typeof POS]> = [
+    ['harang', 'narang'],
+    ['narang', 'darang'],
+    ['darang', 'erang'],
+  ];
+
+  return (
+    <Wrap>
+      <Floor>
+        <Overlay viewBox="0 0 100 100" preserveAspectRatio="none">
+          <defs>
+            <marker
+              id="arrowhead"
+              markerWidth="10"
+              markerHeight="10"
+              refX="9"
+              refY="5"
+              orient="auto"
+            >
+              <polygon points="0 0, 10 5, 0 10" fill="#5fafff" />
+            </marker>
+          </defs>
+          {FLOW.map(([from, to]) => {
+            const fromActive = activeStages.has(from);
+            const toActive = activeStages.has(to);
+            const flowing = fromActive || toActive;
+            const a = POS[from]!;
+            const b = POS[to]!;
+            return (
+              <FlowLine
+                key={`${from}-${to}`}
+                x1={a.x}
+                y1={a.y}
+                x2={b.x}
+                y2={b.y}
+                $flowing={flowing}
+                markerEnd="url(#arrowhead)"
+              />
+            );
+          })}
+        </Overlay>
+        {SISTERS.map((sister) => {
+          const workers = workersBySister.get(sister.key) ?? [];
+          const stats = statsFor(workers);
+          const running = stats.running > 0;
+          const isSelected = selectedSister === sister.key;
+
+          return (
+            <Desk
+              key={sister.key}
+              $color={sister.color}
+              $active={stats.total > 0}
+              $running={running}
+              $selected={isSelected}
+              onClick={() => onSelectSister(isSelected ? null : sister.key)}
+            >
+              <DeskHead>
+                <SisterBadge $color={sister.color}>
+                  <AvatarFrame $color={sister.color} $running={running}>
+                    <SisterAvatar name={sister.key} size={54} />
+                  </AvatarFrame>
+                  <NameBlock>
+                    <Name>{sister.label}</Name>
+                    <Role>{sister.role}</Role>
+                  </NameBlock>
+                </SisterBadge>
+                <StatusDot $running={running} />
+              </DeskHead>
+
+              <Workers>
+                {workers.length === 0 ? (
+                  <Empty>대기 중</Empty>
+                ) : (
+                  workers.slice(0, 12).map((w) => (
+                    <Worker key={w.id} $role={w.role} $state={w.state}>
+                      {w.role}
+                    </Worker>
+                  ))
+                )}
+                {workers.length > 12 && (
+                  <Worker $role="" $state="">
+                    +{workers.length - 12}
+                  </Worker>
+                )}
+              </Workers>
+
+              <Stats>
+                <Stat>
+                  <StatNum>{stats.total}</StatNum>
+                  <StatLabel>workers</StatLabel>
+                </Stat>
+                <Stat>
+                  <StatNum style={{ color: '#22c55e' }}>{stats.running}</StatNum>
+                  <StatLabel>active</StatLabel>
+                </Stat>
+                <Stat>
+                  <StatNum>{stats.done}</StatNum>
+                  <StatLabel>done</StatLabel>
+                </Stat>
+                {stats.failed > 0 && (
+                  <Stat>
+                    <StatNum style={{ color: '#ef4444' }}>{stats.failed}</StatNum>
+                    <StatLabel>fail</StatLabel>
+                  </Stat>
+                )}
+              </Stats>
+            </Desk>
+          );
+        })}
+      </Floor>
+    </Wrap>
+  );
+}

frontend/components/office/OfficeScene.tsx

@@ -181,7 +181,14 @@ function SisterCircle({
   const clipId = `avatar-clip-${name}`;
 
   return (
-    <g onClick={onClick} style={{ cursor: 'pointer' }}>
+    <g
+      role="button"
+      tabIndex={0}
+      aria-label={`${name} — state: ${state}`}
+      onClick={onClick}
+      onKeyDown={(e) => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); onClick(); } }}
+      style={{ cursor: 'pointer', outline: 'none' }}
+    >
       {selected && (
         <circle
           cx={cx}
@@ -264,7 +271,14 @@ function SubagentCircle({
   const color = STATE_COLORS[state];
 
   return (
-    <g onClick={onClick} style={{ cursor: 'pointer' }}>
+    <g
+      role="button"
+      tabIndex={0}
+      aria-label={`subagent ${label} — state: ${state}`}
+      onClick={onClick}
+      onKeyDown={(e) => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); onClick(); } }}
+      style={{ cursor: 'pointer', outline: 'none' }}
+    >
       {motion && (
         <animateTransform
           attributeName="transform"

frontend/components/office/PipelinePanel.tsx

@@ -74,6 +74,11 @@ const Focus = styled.div`
   overflow: hidden;
   text-overflow: ellipsis;
   white-space: nowrap;
+
+  @media (max-width: 767px) {
+    max-width: 100%;
+    white-space: normal;
+  }
 `;
 
 const Stats = styled.div`
@@ -110,6 +115,11 @@ const NodeRow = styled.div`
   overflow-x: auto;
   scrollbar-width: thin;
   scrollbar-color: var(--border-color) transparent;
+
+  @media (max-width: 767px) {
+    flex-direction: column;
+    overflow-x: visible;
+  }
 `;
 
 const stateColors: Record<PipelineNode['state'], string> = {
@@ -128,6 +138,10 @@ const NodeCard = styled.div<{ $state: PipelineNode['state'] }>`
   display: flex;
   flex-direction: column;
   gap: 4px;
+
+  @media (max-width: 767px) {
+    min-width: 0;
+  }
 `;
 
 const NodeName = styled.div`
@@ -179,6 +193,13 @@ const Connector = styled.div<{ $active: boolean }>`
     background: ${({ $active }) => $active ? 'rgba(245,245,245,0.8)' : 'transparent'};
     animation: ${({ $active }) => $active ? css`${flowAnim} 1.6s linear infinite` : 'none'};
   }
+
+  @media (max-width: 767px) {
+    width: 1px;
+    height: 16px;
+    align-self: flex-start;
+    margin-left: var(--space-lg);
+  }
 `;
 
 const FreshnessNote = styled.div`

frontend/components/office/ServerHealthPanel.tsx

@@ -73,6 +73,10 @@ const Grid = styled.div`
   @media (max-width: 767px) {
     grid-template-columns: repeat(2, 1fr);
   }
+
+  @media (max-width: 359px) {
+    grid-template-columns: 1fr;
+  }
 `;
 
 const statusColors: Record<ServerEntry['status'], string> = {

frontend/components/rails/FileViewerModal.tsx

@@ -0,0 +1,293 @@
+'use client';
+
+import React, { useEffect, useState } from 'react';
+import styled from 'styled-components';
+import ReactMarkdown from 'react-markdown';
+import { API_URL } from '@/lib/config';
+
+const Backdrop = styled.div`
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.7);
+  z-index: 100;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 24px;
+`;
+
+const Modal = styled.div`
+  width: min(920px, 96vw);
+  max-height: 86vh;
+  background: var(--bg-main);
+  border: 1px solid var(--border-color);
+  border-radius: 14px;
+  display: flex;
+  flex-direction: column;
+  overflow: hidden;
+  box-shadow: 0 20px 60px rgba(0, 0, 0, 0.6);
+`;
+
+const Header = styled.header`
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 18px 24px;
+  border-bottom: 1px solid var(--border-color);
+  gap: 16px;
+`;
+
+const TitleArea = styled.div`
+  flex: 1;
+  min-width: 0;
+`;
+
+const Label = styled.span`
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--text-secondary);
+`;
+
+const Path = styled.h2`
+  font-size: 14px;
+  font-family: var(--font-mono);
+  margin: 4px 0 0;
+  word-break: break-all;
+  color: var(--text-primary);
+`;
+
+const Actions = styled.div`
+  display: flex;
+  gap: 8px;
+  flex-shrink: 0;
+`;
+
+const Btn = styled.button`
+  padding: 8px 14px;
+  background: transparent;
+  color: var(--text-primary);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  font-size: 12px;
+  cursor: pointer;
+
+  &:hover {
+    border-color: #5fafff;
+  }
+`;
+
+const Body = styled.div`
+  overflow: auto;
+  padding: 24px 28px;
+  flex: 1;
+`;
+
+const Markdown = styled.div`
+  font-size: 13px;
+  line-height: 1.75;
+  color: var(--text-primary);
+
+  h1, h2, h3, h4, h5, h6 {
+    font-size: 15px;
+    font-weight: 700;
+    margin: 18px 0 8px;
+  }
+  p { margin: 10px 0; }
+  ul, ol { margin: 10px 0; padding-left: 22px; }
+  li { margin: 4px 0; }
+  code {
+    background: var(--bg-input);
+    padding: 1px 6px;
+    border-radius: 4px;
+    font-size: 12px;
+    font-family: var(--font-mono);
+    color: #5fafff;
+  }
+  pre {
+    background: var(--bg-input);
+    border: 1px solid var(--border-color);
+    padding: 14px 16px;
+    border-radius: 8px;
+    overflow-x: auto;
+    margin: 12px 0;
+    code { background: transparent; padding: 0; color: inherit; font-size: 12px; }
+  }
+  blockquote {
+    border-left: 3px solid var(--border-color);
+    padding-left: 12px;
+    margin: 10px 0;
+    color: var(--text-secondary);
+  }
+  hr { border: none; border-top: 1px solid var(--border-color); margin: 16px 0; }
+  a { color: #5fafff; text-decoration: none; &:hover { text-decoration: underline; } }
+  strong { font-weight: 700; }
+  table { width: 100%; border-collapse: collapse; margin: 12px 0; font-size: 12px; }
+  th, td { border: 1px solid var(--border-color); padding: 8px 10px; text-align: left; }
+  th { background: var(--bg-input); }
+`;
+
+const Code = styled.pre`
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  padding: 18px 20px;
+  border-radius: 10px;
+  overflow-x: auto;
+  font-family: var(--font-mono);
+  font-size: 12px;
+  line-height: 1.6;
+  color: var(--text-primary);
+  margin: 0;
+  white-space: pre;
+`;
+
+const Loading = styled.div`
+  padding: 60px 20px;
+  text-align: center;
+  color: var(--text-secondary);
+`;
+
+const ErrorMsg = styled.div`
+  padding: 20px;
+  background: rgba(239, 68, 68, 0.1);
+  border: 1px solid #ef4444;
+  border-radius: 10px;
+  color: #fca5a5;
+  font-size: 13px;
+`;
+
+function isMarkdown(path: string): boolean {
+  return /\.(md|markdown)$/i.test(path);
+}
+
+function stripFrontMatter(text: string): { body: string; meta: string } {
+  // Front matter: --- ... --- at the top
+  const match = text.match(/^---\n([\s\S]*?)\n---\n?/);
+  if (!match) return { body: text, meta: '' };
+  return { body: text.slice(match[0].length), meta: match[1] ?? '' };
+}
+
+interface Props {
+  path: string;        // display path
+  source:
+    | { type: 'llm'; text: string }           // already-loaded text (from sub-task result)
+    | { type: 'url'; url: string };           // fetch via backend proxy
+  onClose: () => void;
+}
+
+export default function FileViewerModal({ path, source, onClose }: Props) {
+  const [content, setContent] = useState<string>('');
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  useEffect(() => {
+    const handler = (e: KeyboardEvent) => {
+      if (e.key === 'Escape') onClose();
+    };
+    window.addEventListener('keydown', handler);
+    return () => window.removeEventListener('keydown', handler);
+  }, [onClose]);
+
+  useEffect(() => {
+    let cancelled = false;
+    setLoading(true);
+    setError(null);
+
+    async function load() {
+      if (source.type === 'llm') {
+        if (!cancelled) {
+          setContent(source.text);
+          setLoading(false);
+        }
+        return;
+      }
+      try {
+        const res = await fetch(
+          `${API_URL}/api/rails/file-content?url=${encodeURIComponent(source.url)}`,
+          { credentials: 'include' },
+        );
+        if (!res.ok) {
+          if (!cancelled) {
+            setError(`HTTP ${res.status}`);
+            setLoading(false);
+          }
+          return;
+        }
+        const data = (await res.json()) as { content: string };
+        if (!cancelled) {
+          setContent(data.content ?? '');
+          setLoading(false);
+        }
+      } catch (err) {
+        if (!cancelled) {
+          setError(err instanceof Error ? err.message : String(err));
+          setLoading(false);
+        }
+      }
+    }
+
+    void load();
+    return () => {
+      cancelled = true;
+    };
+  }, [source]);
+
+  const copyToClipboard = () => {
+    if (!content) return;
+    void navigator.clipboard?.writeText(content);
+  };
+
+  const renderAsMarkdown = isMarkdown(path);
+  const { body, meta } = renderAsMarkdown
+    ? stripFrontMatter(content)
+    : { body: content, meta: '' };
+
+  return (
+    <Backdrop onClick={onClose}>
+      <Modal onClick={(e) => e.stopPropagation()}>
+        <Header>
+          <TitleArea>
+            <Label>FILE</Label>
+            <Path>{path}</Path>
+          </TitleArea>
+          <Actions>
+            <Btn onClick={copyToClipboard}>복사</Btn>
+            <Btn onClick={onClose}>닫기 ESC</Btn>
+          </Actions>
+        </Header>
+        <Body>
+          {loading ? (
+            <Loading>로딩 중...</Loading>
+          ) : error ? (
+            <ErrorMsg>불러오기 실패: {error}</ErrorMsg>
+          ) : renderAsMarkdown ? (
+            <>
+              {meta && (
+                <div
+                  style={{
+                    fontSize: 10,
+                    fontFamily: 'var(--font-mono)',
+                    opacity: 0.5,
+                    marginBottom: 16,
+                    padding: 12,
+                    border: '1px solid var(--border-color)',
+                    borderRadius: 8,
+                    whiteSpace: 'pre-wrap',
+                  }}
+                >
+                  {meta}
+                </div>
+              )}
+              <Markdown>
+                <ReactMarkdown>{body}</ReactMarkdown>
+              </Markdown>
+            </>
+          ) : (
+            <Code>{content}</Code>
+          )}
+        </Body>
+      </Modal>
+    </Backdrop>
+  );
+}

frontend/components/rails/PipelineList.tsx

@@ -0,0 +1,118 @@
+'use client';
+
+import React from 'react';
+import styled from 'styled-components';
+import type { RailsPipelineSummary } from '@/lib/useRailsSocket';
+
+const Wrap = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+`;
+
+const Card = styled.button<{ $active: boolean }>`
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 12px 14px;
+  background: ${({ $active }) =>
+    $active ? 'var(--bg-input)' : 'var(--bg-surface)'};
+  border: 1px solid ${({ $active }) =>
+    $active ? '#5fafff' : 'var(--border-color)'};
+  border-radius: 8px;
+  color: var(--text-primary);
+  cursor: pointer;
+  text-align: left;
+  transition: all 0.15s;
+
+  &:hover {
+    border-color: #5fafff;
+  }
+`;
+
+const StateBadge = styled.span<{ $state: string }>`
+  display: inline-block;
+  padding: 2px 10px;
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+  border-radius: 12px;
+  color: #fff;
+  background: ${({ $state }) => {
+    switch ($state) {
+      case 'done':
+        return '#22c55e';
+      case 'escalated':
+        return '#ef4444';
+      case 'aborted':
+        return '#6b7280';
+      case 'planning':
+      case 'implementing':
+      case 'reviewing':
+      case 'deploying':
+        return '#f97316';
+      default:
+        return '#6b7280';
+    }
+  }};
+`;
+
+const Id = styled.span`
+  font-family: var(--font-mono, monospace);
+  font-size: 11px;
+  opacity: 0.6;
+`;
+
+const Name = styled.span`
+  font-weight: 600;
+  flex: 1;
+`;
+
+const Time = styled.span`
+  font-size: 11px;
+  opacity: 0.6;
+`;
+
+interface Props {
+  pipelines: RailsPipelineSummary[];
+  selectedId: string | null;
+  onSelect: (id: string) => void;
+}
+
+export default function PipelineList({ pipelines, selectedId, onSelect }: Props) {
+  if (pipelines.length === 0) {
+    return <Wrap>No pipelines yet.</Wrap>;
+  }
+
+  return (
+    <Wrap>
+      {pipelines.map((p) => (
+        <Card
+          key={p.id}
+          $active={p.id === selectedId}
+          onClick={() => onSelect(p.id)}
+        >
+          <Id>{p.id.slice(0, 8)}</Id>
+          <Name>{p.projectName}</Name>
+          <StateBadge $state={p.currentState}>{p.currentState}</StateBadge>
+          <Time>{formatTime(p.updatedAt)}</Time>
+        </Card>
+      ))}
+    </Wrap>
+  );
+}
+
+function formatTime(iso: string): string {
+  try {
+    const d = new Date(iso);
+    const now = Date.now();
+    const diffMs = now - d.getTime();
+    const sec = Math.floor(diffMs / 1000);
+    if (sec < 60) return `${sec}s`;
+    if (sec < 3600) return `${Math.floor(sec / 60)}m`;
+    if (sec < 86400) return `${Math.floor(sec / 3600)}h`;
+    return `${Math.floor(sec / 86400)}d`;
+  } catch {
+    return iso;
+  }
+}

frontend/components/rails/SubTaskDetailDrawer.tsx

@@ -0,0 +1,995 @@
+'use client';
+
+import React, { useEffect, useMemo, useState } from 'react';
+import styled from 'styled-components';
+import ReactMarkdown from 'react-markdown';
+import { API_URL } from '@/lib/config';
+import SisterAvatar from '@/components/common/SisterAvatar';
+import FileViewerModal from './FileViewerModal';
+
+const SISTER_NAMES = new Set(['harang', 'narang', 'darang', 'erang']);
+
+type FileViewerSource =
+  | { type: 'llm'; text: string }
+  | { type: 'url'; url: string };
+
+function parseResult(
+  raw: string | null,
+): { text: string; ok: boolean; extra?: Record<string, unknown> } | null {
+  if (!raw) return null;
+  try {
+    const parsed = JSON.parse(raw) as Record<string, unknown>;
+    if (typeof parsed === 'object' && parsed !== null) {
+      const text = typeof parsed.text === 'string' ? parsed.text : '';
+      const ok = parsed.ok !== false;
+      const { text: _t, ok: _o, ...rest } = parsed as {
+        text?: unknown;
+        ok?: unknown;
+      } & Record<string, unknown>;
+      void _t;
+      void _o;
+      return { text, ok, extra: Object.keys(rest).length > 0 ? rest : undefined };
+    }
+  } catch {
+    return { text: raw, ok: true };
+  }
+  return null;
+}
+
+interface SubTaskEvent {
+  id: number;
+  eventType: string;
+  payload: unknown;
+  timestamp: string;
+}
+
+interface ParentLink {
+  id: string;
+  role: string;
+  title: string;
+}
+
+interface ChildSummary {
+  id: string;
+  role: string;
+  agentName: string;
+  title: string;
+  state: string;
+  model: string;
+  startedAt: string | null;
+  completedAt: string | null;
+}
+
+interface SubTaskDetail {
+  id: string;
+  pipelineId: string;
+  parentId: string | null;
+  role: string;
+  agentName: string;
+  title: string;
+  description: string;
+  state: string;
+  complexityScore: number | null;
+  complexityTier: string | null;
+  model: string;
+  resultJson: string | null;
+  errorReason: string | null;
+  startedAt: string | null;
+  completedAt: string | null;
+  createdAt: string;
+  parents: ParentLink[];
+  childrenList: ChildSummary[];
+  events: SubTaskEvent[];
+}
+
+const Backdrop = styled.div`
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.55);
+  z-index: 50;
+  display: flex;
+  justify-content: flex-end;
+`;
+
+const Drawer = styled.div`
+  width: min(640px, 95vw);
+  height: 100%;
+  background: var(--bg-main);
+  border-left: 1px solid var(--border-color);
+  overflow-y: auto;
+  display: flex;
+  flex-direction: column;
+`;
+
+const Header = styled.div`
+  position: sticky;
+  top: 0;
+  background: var(--bg-main);
+  padding: 24px 28px 18px;
+  border-bottom: 1px solid var(--border-color);
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  z-index: 1;
+`;
+
+const TopRow = styled.div`
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+`;
+
+const RoleBadge = styled.span<{ $role: string }>`
+  padding: 4px 12px;
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  border-radius: 14px;
+  color: #fff;
+  background: ${({ $role }) => roleColor($role)};
+`;
+
+const Close = styled.button`
+  background: transparent;
+  border: 1px solid var(--border-color);
+  color: var(--text-primary);
+  padding: 6px 14px;
+  border-radius: 8px;
+  cursor: pointer;
+  font-size: 12px;
+
+  &:hover {
+    border-color: #5fafff;
+  }
+`;
+
+const Title = styled.h2`
+  font-size: 20px;
+  font-weight: 700;
+  margin: 0;
+  letter-spacing: -0.01em;
+  word-break: break-word;
+`;
+
+const Breadcrumb = styled.div`
+  display: flex;
+  gap: 6px;
+  font-size: 11px;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+  flex-wrap: wrap;
+`;
+
+const Body = styled.div`
+  padding: 24px 28px;
+  display: flex;
+  flex-direction: column;
+  gap: 24px;
+`;
+
+const Section = styled.section`
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+`;
+
+const SectionLabel = styled.h3`
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--text-secondary);
+  margin: 0;
+`;
+
+const CollapsibleHeader = styled.button`
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  background: transparent;
+  border: none;
+  color: var(--text-secondary);
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  padding: 0;
+  margin: 0;
+  cursor: pointer;
+  text-align: left;
+  width: fit-content;
+
+  &:hover {
+    color: #5fafff;
+  }
+`;
+
+const ChevronIcon = styled.span<{ $open: boolean }>`
+  display: inline-block;
+  font-size: 9px;
+  width: 12px;
+  text-align: center;
+  transform: ${({ $open }) => ($open ? 'rotate(90deg)' : 'rotate(0deg)')};
+  transition: transform 0.15s ease;
+`;
+
+const SectionCount = styled.span`
+  font-size: 10px;
+  font-weight: 600;
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  padding: 1px 8px;
+  color: var(--text-primary);
+`;
+
+const ChipRow = styled.div`
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  margin-bottom: 4px;
+`;
+
+const Chip = styled.button<{ $active: boolean }>`
+  font-size: 10px;
+  padding: 3px 10px;
+  border-radius: 10px;
+  background: ${({ $active }) => ($active ? '#5fafff' : 'transparent')};
+  color: ${({ $active }) => ($active ? '#fff' : 'var(--text-secondary)')};
+  border: 1px solid ${({ $active }) => ($active ? '#5fafff' : 'var(--border-color)')};
+  cursor: pointer;
+  font-family: inherit;
+
+  &:hover {
+    border-color: #5fafff;
+    color: ${({ $active }) => ($active ? '#fff' : '#5fafff')};
+  }
+`;
+
+const ShowMoreButton = styled.button`
+  display: block;
+  margin-top: 8px;
+  background: transparent;
+  border: 1px solid var(--border-color);
+  color: var(--text-secondary);
+  font-size: 11px;
+  padding: 6px 14px;
+  border-radius: 8px;
+  cursor: pointer;
+  font-family: inherit;
+
+  &:hover {
+    border-color: #5fafff;
+    color: #5fafff;
+  }
+`;
+
+const Grid = styled.div`
+  display: grid;
+  grid-template-columns: repeat(2, 1fr);
+  gap: 12px;
+`;
+
+const Field = styled.div`
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  padding: 12px 14px;
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+`;
+
+const FieldLabel = styled.span`
+  font-size: 10px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--text-secondary);
+`;
+
+const FieldValue = styled.span`
+  font-size: 13px;
+  font-weight: 500;
+  font-family: var(--font-mono);
+  word-break: break-all;
+`;
+
+const StateBadge = styled.span<{ $state: string }>`
+  display: inline-block;
+  padding: 3px 10px;
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  border-radius: 12px;
+  color: #fff;
+  background: ${({ $state }) => stateColor($state)};
+`;
+
+const Description = styled.p`
+  font-size: 13px;
+  line-height: 1.6;
+  color: var(--text-primary);
+  background: var(--bg-input);
+  padding: 14px 16px;
+  border-radius: 10px;
+  margin: 0;
+  white-space: pre-wrap;
+  word-break: break-word;
+`;
+
+const LlmOutput = styled.div<{ $ok: boolean }>`
+  background: var(--bg-input);
+  border: 1px solid ${({ $ok }) => ($ok ? 'var(--border-color)' : '#ef444460')};
+  border-left: 4px solid ${({ $ok }) => ($ok ? '#5fafff' : '#ef4444')};
+  padding: 18px 22px;
+  border-radius: 10px;
+  font-size: 13px;
+  line-height: 1.75;
+  color: var(--text-primary);
+
+  /* 텍스트 드래그/복사 가능하게 강제 + 가시적 selection 색 */
+  user-select: text;
+  -webkit-user-select: text;
+  -moz-user-select: text;
+  cursor: text;
+
+  *::selection,
+  &::selection {
+    background: rgba(95, 175, 255, 0.35);
+    color: var(--text-primary);
+  }
+
+  /* 내부 button (더보기 토글) 은 다시 not-allowed 가 아니라 pointer 로 */
+  button {
+    cursor: pointer;
+    user-select: none;
+  }
+
+  & > *:first-child { margin-top: 0; }
+  & > *:last-child { margin-bottom: 0; }
+
+  h1, h2, h3, h4, h5, h6 {
+    font-size: 14px;
+    font-weight: 700;
+    margin: 14px 0 6px;
+    color: var(--text-primary);
+  }
+
+  p { margin: 10px 0; }
+
+  ul, ol {
+    margin: 10px 0;
+    padding-left: 22px;
+  }
+
+  li { margin: 4px 0; }
+
+  code {
+    background: var(--bg-surface);
+    padding: 1px 6px;
+    border-radius: 4px;
+    font-size: 12px;
+    font-family: var(--font-mono);
+    color: #5fafff;
+  }
+
+  pre {
+    background: var(--bg-surface);
+    border: 1px solid var(--border-color);
+    padding: 12px 14px;
+    border-radius: 8px;
+    overflow-x: auto;
+    margin: 10px 0;
+
+    code {
+      background: transparent;
+      padding: 0;
+      color: inherit;
+    }
+  }
+
+  blockquote {
+    border-left: 3px solid var(--border-color);
+    padding-left: 12px;
+    margin: 10px 0;
+    color: var(--text-secondary);
+  }
+
+  a {
+    color: #5fafff;
+    text-decoration: none;
+    &:hover { text-decoration: underline; }
+  }
+
+  strong { font-weight: 700; }
+`;
+
+const OutputHeader = styled.div`
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  margin-bottom: 8px;
+`;
+
+const OutputStatusDot = styled.span<{ $ok: boolean }>`
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: ${({ $ok }) => ($ok ? '#22c55e' : '#ef4444')};
+`;
+
+const ChildList = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+`;
+
+const ChildCard = styled.div`
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 10px 14px;
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  font-size: 12px;
+`;
+
+const ChildTitle = styled.span`
+  flex: 1;
+  font-size: 12px;
+`;
+
+const Events = styled.ol`
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  list-style: none;
+  padding: 0;
+  margin: 0;
+`;
+
+const EventRow = styled.li`
+  display: flex;
+  gap: 12px;
+  padding: 10px 14px;
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  font-family: var(--font-mono);
+  font-size: 11px;
+`;
+
+const EventType = styled.span<{ $type: string }>`
+  font-weight: 700;
+  text-transform: uppercase;
+  color: ${({ $type }) => eventColor($type)};
+  flex-shrink: 0;
+  width: 90px;
+`;
+
+const EventTime = styled.span`
+  color: var(--text-secondary);
+  flex-shrink: 0;
+`;
+
+const EventPayload = styled.pre`
+  margin: 0;
+  font-size: 11px;
+  white-space: pre-wrap;
+  word-break: break-all;
+  flex: 1;
+  color: var(--text-primary);
+  opacity: 0.8;
+`;
+
+const FileList = styled.div`
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+`;
+
+const FileRow = styled.div<{ $clickable?: boolean }>`
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 10px 14px;
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  font-family: var(--font-mono);
+  font-size: 12px;
+  cursor: ${({ $clickable }) => ($clickable ? 'pointer' : 'default')};
+  transition: border-color 0.15s ease, background 0.15s ease;
+
+  &:hover {
+    ${({ $clickable }) =>
+      $clickable
+        ? 'border-color: #5fafff; background: rgba(95, 175, 255, 0.06);'
+        : ''}
+  }
+`;
+
+const FileBadge = styled.span<{ $kind: string }>`
+  padding: 2px 8px;
+  font-size: 9px;
+  font-weight: 700;
+  text-transform: uppercase;
+  border-radius: 10px;
+  color: #fff;
+  background: ${({ $kind }) => {
+    switch ($kind) {
+      case 'html':
+      case 'htm':
+        return '#f97316';
+      case 'js':
+      case 'javascript':
+      case 'jsx':
+        return '#eab308';
+      case 'ts':
+      case 'typescript':
+      case 'tsx':
+        return '#3b82f6';
+      case 'css':
+      case 'scss':
+        return '#ec4899';
+      case 'json':
+      case 'yaml':
+        return '#8b5cf6';
+      case 'md':
+      case 'markdown':
+        return '#6b7280';
+      case 'url':
+        return '#22c55e';
+      default:
+        return '#525252';
+    }
+  }};
+`;
+
+const FilePath = styled.code`
+  flex: 1;
+  word-break: break-all;
+  color: var(--text-primary);
+`;
+
+const Loading = styled.div`
+  padding: 60px 20px;
+  text-align: center;
+  color: var(--text-secondary);
+`;
+
+function roleColor(role: string): string {
+  switch (role) {
+    case 'manager':
+      return '#8b5cf6';
+    case 'principal':
+      return '#3b82f6';
+    case 'lead':
+      return '#f97316';
+    case 'junior':
+      return '#22c55e';
+    default:
+      return '#6b7280';
+  }
+}
+
+function stateColor(state: string): string {
+  switch (state) {
+    case 'done':
+      return '#22c55e';
+    case 'running':
+      return '#f97316';
+    case 'failed':
+    case 'escalated':
+      return '#ef4444';
+    case 'queued':
+      return '#6b7280';
+    default:
+      return '#525252';
+  }
+}
+
+function eventColor(type: string): string {
+  switch (type) {
+    case 'spawned':
+      return '#8b5cf6';
+    case 'started':
+      return '#f97316';
+    case 'progress':
+    case 'output':
+      return '#5fafff';
+    case 'completed':
+      return '#22c55e';
+    case 'failed':
+    case 'escalated':
+      return '#ef4444';
+    default:
+      return '#6b7280';
+  }
+}
+
+function duration(start: string | null, end: string | null): string {
+  if (!start) return '—';
+  const s = new Date(start).getTime();
+  const e = end ? new Date(end).getTime() : Date.now();
+  const ms = e - s;
+  if (ms < 1000) return `${ms}ms`;
+  if (ms < 60_000) return `${(ms / 1000).toFixed(2)}s`;
+  return `${Math.floor(ms / 60000)}m ${Math.floor((ms % 60000) / 1000)}s`;
+}
+
+interface Props {
+  subTaskId: string;
+  onClose: () => void;
+}
+
+type EventFilterMode = 'milestones' | 'all';
+
+const MILESTONE_EVENT_TYPES = new Set([
+  'spawned',
+  'completed',
+  'failed',
+  'escalated',
+]);
+
+const LLM_PREVIEW_LIMIT = 280;
+
+export default function SubTaskDetailDrawer({ subTaskId, onClose }: Props) {
+  const [detail, setDetail] = useState<SubTaskDetail | null>(null);
+  const [loading, setLoading] = useState(true);
+  const [fileViewer, setFileViewer] = useState<{
+    path: string;
+    source: FileViewerSource;
+  } | null>(null);
+  const [llmExpanded, setLlmExpanded] = useState(false);
+  const [eventsExpanded, setEventsExpanded] = useState(false);
+  const [childrenExpanded, setChildrenExpanded] = useState(false);
+  const [eventFilter, setEventFilter] = useState<EventFilterMode>('milestones');
+
+  // Reset transient UI state when switching to a different sub-task
+  useEffect(() => {
+    setLlmExpanded(false);
+    setEventsExpanded(false);
+    setChildrenExpanded(false);
+    setEventFilter('milestones');
+  }, [subTaskId]);
+
+  const llmResult = useMemo(
+    () => (detail ? parseResult(detail.resultJson) : null),
+    [detail],
+  );
+
+  const filteredEvents = useMemo(() => {
+    if (!detail) return [];
+    if (eventFilter === 'all') return detail.events;
+    return detail.events.filter((ev) => MILESTONE_EVENT_TYPES.has(ev.eventType));
+  }, [detail, eventFilter]);
+
+  const artifacts = useMemo(() => {
+    if (!detail)
+      return {
+        mainFile: '',
+        codeFiles: [] as Array<{ path: string; lang: string }>,
+        deployUrl: '',
+        rawUrlBase: '',
+      };
+    let mainFile = '';
+    let codeFiles: Array<{ path: string; lang: string }> = [];
+    let deployUrl = '';
+    let rawUrlBase = '';
+    for (const ev of detail.events) {
+      if (ev.eventType === 'completed' && ev.payload && typeof ev.payload === 'object') {
+        const p = ev.payload as Record<string, unknown>;
+        if (typeof p.file === 'string' && p.file) mainFile = p.file;
+        if (Array.isArray(p.extractedFiles)) {
+          codeFiles = (p.extractedFiles as Array<{ path?: string; lang?: string }>)
+            .filter((f): f is { path: string; lang: string } => !!f?.path)
+            .map((f) => ({ path: f.path, lang: f.lang ?? '' }));
+        }
+        if (typeof p.deployUrl === 'string') deployUrl = p.deployUrl;
+        if (typeof p.repoUrl === 'string' && !deployUrl) deployUrl = p.repoUrl;
+        if (typeof p.rawUrlBase === 'string') rawUrlBase = p.rawUrlBase;
+      }
+    }
+    return { mainFile, codeFiles, deployUrl, rawUrlBase };
+  }, [detail]);
+
+  useEffect(() => {
+    setLoading(true);
+    fetch(`${API_URL}/api/rails/sub-tasks/${subTaskId}`, {
+      credentials: 'include',
+    })
+      .then((r) => r.json())
+      .then((data: SubTaskDetail) => {
+        setDetail(data);
+        setLoading(false);
+      })
+      .catch(() => setLoading(false));
+  }, [subTaskId]);
+
+  useEffect(() => {
+    const handler = (e: KeyboardEvent) => {
+      if (e.key === 'Escape') onClose();
+    };
+    window.addEventListener('keydown', handler);
+    return () => window.removeEventListener('keydown', handler);
+  }, [onClose]);
+
+  return (
+    <Backdrop
+      onMouseDown={(e) => {
+        // Only register a backdrop close if the user actually started
+        // their click ON the backdrop (not on the drawer content). This
+        // prevents the drawer from closing when a user drag-selects
+        // text inside and accidentally lifts the mouse on the backdrop.
+        if (e.target === e.currentTarget) {
+          (e.currentTarget as HTMLDivElement).dataset.backdropDown = '1';
+        }
+      }}
+      onClick={(e) => {
+        const el = e.currentTarget as HTMLDivElement;
+        if (e.target === e.currentTarget && el.dataset.backdropDown === '1') {
+          delete el.dataset.backdropDown;
+          onClose();
+        } else {
+          delete el.dataset.backdropDown;
+        }
+      }}
+    >
+      <Drawer onClick={(e) => e.stopPropagation()}>
+        {loading || !detail ? (
+          <Loading>로딩 중...</Loading>
+        ) : (
+          <>
+            <Header>
+              <TopRow>
+                <div style={{ display: 'flex', alignItems: 'center', gap: 12 }}>
+                  {SISTER_NAMES.has(detail.agentName) && (
+                    <SisterAvatar name={detail.agentName} size={40} />
+                  )}
+                  <RoleBadge $role={detail.role}>{detail.role}</RoleBadge>
+                </div>
+                <Close onClick={onClose}>닫기 ESC</Close>
+              </TopRow>
+              <Title>{detail.title}</Title>
+              {detail.parents.length > 0 && (
+                <Breadcrumb>
+                  {detail.parents.map((p, i) => (
+                    <React.Fragment key={p.id}>
+                      <span>{p.role}</span>
+                      <span>›</span>
+                      {i === detail.parents.length - 1 && <span>현재</span>}
+                    </React.Fragment>
+                  ))}
+                </Breadcrumb>
+              )}
+            </Header>
+
+            <Body>
+              <Section>
+                <SectionLabel>상태 / 모델</SectionLabel>
+                <Grid>
+                  <Field>
+                    <FieldLabel>State</FieldLabel>
+                    <FieldValue>
+                      <StateBadge $state={detail.state}>{detail.state}</StateBadge>
+                    </FieldValue>
+                  </Field>
+                  <Field>
+                    <FieldLabel>Agent</FieldLabel>
+                    <FieldValue>{detail.agentName}</FieldValue>
+                  </Field>
+                  <Field>
+                    <FieldLabel>Model</FieldLabel>
+                    <FieldValue>{detail.model || '—'}</FieldValue>
+                  </Field>
+                  <Field>
+                    <FieldLabel>Duration</FieldLabel>
+                    <FieldValue>
+                      {duration(detail.startedAt, detail.completedAt)}
+                    </FieldValue>
+                  </Field>
+                  {detail.complexityTier && (
+                    <Field>
+                      <FieldLabel>Complexity</FieldLabel>
+                      <FieldValue>
+                        {detail.complexityTier} ({detail.complexityScore})
+                      </FieldValue>
+                    </Field>
+                  )}
+                  <Field>
+                    <FieldLabel>ID</FieldLabel>
+                    <FieldValue>{detail.id.slice(0, 16)}...</FieldValue>
+                  </Field>
+                </Grid>
+              </Section>
+
+              {detail.description && (
+                <Section>
+                  <SectionLabel>설명</SectionLabel>
+                  <Description>{detail.description}</Description>
+                </Section>
+              )}
+
+              {detail.errorReason && (
+                <Section>
+                  <SectionLabel>에러</SectionLabel>
+                  <Description>{detail.errorReason}</Description>
+                </Section>
+              )}
+
+              {(artifacts.mainFile || artifacts.codeFiles.length > 0 || artifacts.deployUrl) && (
+                <Section>
+                  <SectionLabel>산출물</SectionLabel>
+                  <FileList>
+                    {artifacts.mainFile && (
+                      <FileRow
+                        $clickable={!!llmResult?.text}
+                        onClick={() => {
+                          if (llmResult?.text) {
+                            setFileViewer({
+                              path: artifacts.mainFile,
+                              source: { type: 'llm', text: llmResult.text },
+                            });
+                          }
+                        }}
+                      >
+                        <FileBadge $kind="md">log</FileBadge>
+                        <FilePath>{artifacts.mainFile}</FilePath>
+                      </FileRow>
+                    )}
+                    {artifacts.codeFiles.map((f) => {
+                      const url = artifacts.rawUrlBase
+                        ? `${artifacts.rawUrlBase}/${detail.agentName}/files/${f.path}`
+                        : '';
+                      return (
+                        <FileRow
+                          key={f.path}
+                          $clickable={!!url}
+                          onClick={() => {
+                            if (url) {
+                              setFileViewer({
+                                path: f.path,
+                                source: { type: 'url', url },
+                              });
+                            }
+                          }}
+                        >
+                          <FileBadge $kind={f.lang || 'code'}>{f.lang || 'code'}</FileBadge>
+                          <FilePath>files/{f.path}</FilePath>
+                        </FileRow>
+                      );
+                    })}
+                    {artifacts.deployUrl && (
+                      <FileRow>
+                        <FileBadge $kind="url">url</FileBadge>
+                        <FilePath>
+                          <a href={artifacts.deployUrl} target="_blank" rel="noopener noreferrer" style={{ color: '#5fafff' }}>
+                            {artifacts.deployUrl}
+                          </a>
+                        </FilePath>
+                      </FileRow>
+                    )}
+                  </FileList>
+                </Section>
+              )}
+
+              {llmResult && llmResult.text && (
+                <Section>
+                  <SectionLabel>
+                    LLM 응답
+                    {llmResult.text.length > LLM_PREVIEW_LIMIT && (
+                      <SectionCount style={{ marginLeft: 8 }}>
+                        {llmResult.text.length.toLocaleString()} chars
+                      </SectionCount>
+                    )}
+                  </SectionLabel>
+                  <LlmOutput $ok={llmResult.ok}>
+                    <OutputHeader>
+                      <OutputStatusDot $ok={llmResult.ok} />
+                      <span style={{ fontSize: 11, color: 'var(--text-secondary)', textTransform: 'uppercase', letterSpacing: '0.06em' }}>
+                        {llmResult.ok ? 'success' : 'failed'} · {detail.model || 'default'}
+                      </span>
+                    </OutputHeader>
+                    <ReactMarkdown>
+                      {llmExpanded || llmResult.text.length <= LLM_PREVIEW_LIMIT
+                        ? llmResult.text
+                        : llmResult.text.slice(0, LLM_PREVIEW_LIMIT) + '…'}
+                    </ReactMarkdown>
+                    {llmResult.text.length > LLM_PREVIEW_LIMIT && (
+                      <ShowMoreButton onClick={() => setLlmExpanded(!llmExpanded)}>
+                        {llmExpanded ? '접기' : `더 보기 (+${(llmResult.text.length - LLM_PREVIEW_LIMIT).toLocaleString()} chars)`}
+                      </ShowMoreButton>
+                    )}
+                  </LlmOutput>
+                </Section>
+              )}
+
+              {llmResult && !llmResult.text && detail.resultJson && (
+                <Section>
+                  <SectionLabel>원본 결과 (텍스트 없음)</SectionLabel>
+                  <Description>{detail.resultJson}</Description>
+                </Section>
+              )}
+
+              {detail.childrenList.length > 0 && (
+                <Section>
+                  <CollapsibleHeader onClick={() => setChildrenExpanded(!childrenExpanded)}>
+                    <ChevronIcon $open={childrenExpanded}>▶</ChevronIcon>
+                    하위 노드
+                    <SectionCount>{detail.childrenList.length}</SectionCount>
+                  </CollapsibleHeader>
+                  {childrenExpanded && (
+                    <ChildList>
+                      {detail.childrenList.map((c) => (
+                        <ChildCard key={c.id}>
+                          <RoleBadge $role={c.role}>{c.role}</RoleBadge>
+                          <ChildTitle>{c.title}</ChildTitle>
+                          <StateBadge $state={c.state}>{c.state}</StateBadge>
+                          <span style={{ fontSize: 10, opacity: 0.6 }}>
+                            {duration(c.startedAt, c.completedAt)}
+                          </span>
+                        </ChildCard>
+                      ))}
+                    </ChildList>
+                  )}
+                </Section>
+              )}
+
+              <Section>
+                <CollapsibleHeader onClick={() => setEventsExpanded(!eventsExpanded)}>
+                  <ChevronIcon $open={eventsExpanded}>▶</ChevronIcon>
+                  이벤트
+                  <SectionCount>{detail.events.length}</SectionCount>
+                </CollapsibleHeader>
+                {eventsExpanded && (
+                  <>
+                    <ChipRow>
+                      <Chip
+                        $active={eventFilter === 'milestones'}
+                        onClick={() => setEventFilter('milestones')}
+                      >
+                        milestones ({detail.events.filter((e) => MILESTONE_EVENT_TYPES.has(e.eventType)).length})
+                      </Chip>
+                      <Chip
+                        $active={eventFilter === 'all'}
+                        onClick={() => setEventFilter('all')}
+                      >
+                        all ({detail.events.length})
+                      </Chip>
+                    </ChipRow>
+                    <Events>
+                      {filteredEvents.map((ev) => (
+                        <EventRow key={ev.id}>
+                          <EventType $type={ev.eventType}>{ev.eventType}</EventType>
+                          <EventTime>
+                            {new Date(ev.timestamp).toLocaleTimeString('ko-KR')}
+                          </EventTime>
+                          <EventPayload>
+                            {typeof ev.payload === 'string'
+                              ? ev.payload
+                              : JSON.stringify(ev.payload)}
+                          </EventPayload>
+                        </EventRow>
+                      ))}
+                    </Events>
+                  </>
+                )}
+              </Section>
+            </Body>
+          </>
+        )}
+      </Drawer>
+      {fileViewer && (
+        <FileViewerModal
+          path={fileViewer.path}
+          source={fileViewer.source}
+          onClose={() => setFileViewer(null)}
+        />
+      )}
+    </Backdrop>
+  );
+}

frontend/components/rails/SubTaskTree.tsx

@@ -0,0 +1,207 @@
+'use client';
+
+import React from 'react';
+import styled from 'styled-components';
+import type { RailsSubTaskNode } from '@/lib/useRailsSocket';
+import SisterAvatar from '@/components/common/SisterAvatar';
+
+const SISTER_NAMES = new Set(['harang', 'narang', 'darang', 'erang']);
+
+const Wrap = styled.div`
+  font-family: var(--font-sans);
+  font-size: 13px;
+  line-height: 1.6;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+`;
+
+const Node = styled.button<{ $state: string }>`
+  padding: 12px 16px;
+  border-left: 3px solid ${({ $state }) => stateColor($state)};
+  background: var(--bg-surface);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  cursor: pointer;
+  text-align: left;
+  color: var(--text-primary);
+  font-family: var(--font-sans);
+  width: 100%;
+  transition: all 0.15s;
+
+  &:hover {
+    background: var(--bg-input);
+    border-color: #5fafff;
+  }
+`;
+
+const RoleBadge = styled.span<{ $role: string }>`
+  display: inline-block;
+  padding: 3px 10px;
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  border-radius: 12px;
+  color: #fff;
+  margin-right: 10px;
+  background: ${({ $role }) => roleColor($role)};
+`;
+
+const StateDot = styled.span<{ $state: string }>`
+  display: inline-block;
+  width: 10px;
+  height: 10px;
+  border-radius: 50%;
+  margin-right: 12px;
+  background: ${({ $state }) => stateColor($state)};
+  flex-shrink: 0;
+  animation: ${({ $state }) => ($state === 'running' ? 'pulse 1.2s infinite' : 'none')};
+
+  @keyframes pulse {
+    0%, 100% { opacity: 1; }
+    50% { opacity: 0.4; }
+  }
+`;
+
+const Model = styled.span`
+  font-size: 11px;
+  opacity: 0.55;
+  margin-left: 12px;
+  font-family: var(--font-mono);
+`;
+
+const Duration = styled.span`
+  font-size: 11px;
+  opacity: 0.55;
+  margin-left: auto;
+  font-family: var(--font-mono);
+`;
+
+const Title = styled.span`
+  font-size: 13px;
+  font-weight: 500;
+`;
+
+const Meta = styled.span`
+  font-size: 11px;
+  opacity: 0.55;
+  margin-left: 22px;
+  font-family: var(--font-mono);
+`;
+
+const Row = styled.div`
+  display: flex;
+  align-items: center;
+  gap: 4px;
+`;
+
+const Children = styled.div`
+  margin-left: 28px;
+  margin-top: 4px;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  border-left: 1px dashed var(--border-color);
+  padding-left: 16px;
+`;
+
+function stateColor(state: string): string {
+  switch (state) {
+    case 'done':
+      return '#22c55e';
+    case 'running':
+      return '#f97316';
+    case 'failed':
+      return '#ef4444';
+    case 'escalated':
+      return '#ef4444';
+    case 'queued':
+      return '#6b7280';
+    default:
+      return '#333333';
+  }
+}
+
+function roleColor(role: string): string {
+  switch (role) {
+    case 'manager':
+      return '#8b5cf6';
+    case 'principal':
+      return '#3b82f6';
+    case 'lead':
+      return '#f97316';
+    case 'junior':
+      return '#6b7280';
+    default:
+      return '#6b7280';
+  }
+}
+
+function duration(startedAt: string | null, completedAt: string | null): string {
+  if (!startedAt) return '—';
+  const start = new Date(startedAt).getTime();
+  const end = completedAt ? new Date(completedAt).getTime() : Date.now();
+  const ms = end - start;
+  if (ms < 1000) return `${ms}ms`;
+  if (ms < 60000) return `${(ms / 1000).toFixed(1)}s`;
+  return `${Math.floor(ms / 60000)}m ${Math.floor((ms % 60000) / 1000)}s`;
+}
+
+function NodeRow({
+  node,
+  onSelect,
+}: {
+  node: RailsSubTaskNode;
+  onSelect?: (id: string) => void;
+}) {
+  return (
+    <>
+      <Node $state={node.state} onClick={() => onSelect?.(node.id)}>
+        <Row>
+          <StateDot $state={node.state} />
+          {SISTER_NAMES.has(node.agentName) && (
+            <SisterAvatar name={node.agentName} size={20} style={{ marginRight: 8 }} />
+          )}
+          <RoleBadge $role={node.role}>{node.role}</RoleBadge>
+          <Title>{node.title.slice(0, 100)}</Title>
+          <Model>{node.model || '—'}</Model>
+          <Duration>{duration(node.startedAt, node.completedAt)}</Duration>
+        </Row>
+        {node.complexityTier && (
+          <Meta>
+            complexity: {node.complexityTier} ({node.complexityScore})
+          </Meta>
+        )}
+      </Node>
+      {node.children.length > 0 && (
+        <Children>
+          {node.children.map((c) => (
+            <NodeRow key={c.id} node={c} onSelect={onSelect} />
+          ))}
+        </Children>
+      )}
+    </>
+  );
+}
+
+interface Props {
+  tree: RailsSubTaskNode[];
+  onSelectNode?: (id: string) => void;
+}
+
+export default function SubTaskTree({ tree, onSelectNode }: Props) {
+  if (tree.length === 0) {
+    return <Wrap>No sub-tasks yet.</Wrap>;
+  }
+  return (
+    <Wrap>
+      {tree.map((node) => (
+        <NodeRow key={node.id} node={node} onSelect={onSelectNode} />
+      ))}
+    </Wrap>
+  );
+}

frontend/components/rails/TransitionsTimeline.tsx

@@ -0,0 +1,360 @@
+'use client';
+
+import React, { useEffect, useMemo, useState } from 'react';
+import styled from 'styled-components';
+import { API_URL } from '@/lib/config';
+
+interface Transition {
+  id: number;
+  pipelineId: string;
+  fromState: string;
+  toState: string;
+  eventType: string;
+  timestamp: string;
+}
+
+interface Props {
+  pipelineId: string | null;
+}
+
+const Wrapper = styled.section`
+  background: var(--bg-input);
+  border: 1px solid var(--border-color);
+  border-radius: 14px;
+  padding: 20px 22px;
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+`;
+
+const Header = styled.div`
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+  gap: 12px;
+  flex-wrap: wrap;
+`;
+
+const Title = styled.h3`
+  font-size: 13px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--text-secondary);
+  margin: 0;
+`;
+
+const Stats = styled.div`
+  display: flex;
+  gap: 8px;
+  flex-wrap: wrap;
+`;
+
+const Stat = styled.span<{ $variant?: 'replan' | 'review' | 'normal' }>`
+  font-size: 10px;
+  font-family: var(--font-mono);
+  font-weight: 700;
+  text-transform: uppercase;
+  padding: 3px 10px;
+  border-radius: 10px;
+  background: ${({ $variant }) => {
+    switch ($variant) {
+      case 'replan':
+        return 'rgba(239, 68, 68, 0.18)';
+      case 'review':
+        return 'rgba(245, 158, 11, 0.18)';
+      default:
+        return 'var(--bg-main)';
+    }
+  }};
+  color: ${({ $variant }) => {
+    switch ($variant) {
+      case 'replan':
+        return '#fca5a5';
+      case 'review':
+        return '#fcd34d';
+      default:
+        return 'var(--text-primary)';
+    }
+  }};
+  border: 1px solid
+    ${({ $variant }) => {
+      switch ($variant) {
+        case 'replan':
+          return 'rgba(239, 68, 68, 0.5)';
+        case 'review':
+          return 'rgba(245, 158, 11, 0.5)';
+        default:
+          return 'var(--border-color)';
+      }
+    }};
+`;
+
+const Track = styled.ol`
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  position: relative;
+
+  &::before {
+    content: '';
+    position: absolute;
+    left: 8px;
+    top: 8px;
+    bottom: 8px;
+    width: 1px;
+    background: var(--border-color);
+  }
+`;
+
+const Row = styled.li<{ $variant?: 'replan' | 'normal' | 'escalation' }>`
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  font-family: var(--font-mono);
+  font-size: 11px;
+  position: relative;
+  padding-left: 24px;
+
+  &::before {
+    content: '';
+    position: absolute;
+    left: 5px;
+    top: 50%;
+    transform: translateY(-50%);
+    width: 7px;
+    height: 7px;
+    border-radius: 50%;
+    background: ${({ $variant }) => {
+      switch ($variant) {
+        case 'replan':
+          return '#ef4444';
+        case 'escalation':
+          return '#f59e0b';
+        default:
+          return '#5fafff';
+      }
+    }};
+    box-shadow: 0 0 0 2px var(--bg-input);
+  }
+`;
+
+const Time = styled.span`
+  color: var(--text-secondary);
+  white-space: nowrap;
+  flex-shrink: 0;
+  width: 64px;
+`;
+
+const Arrow = styled.span<{ $variant?: 'replan' | 'normal' | 'escalation' }>`
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  flex: 1;
+  color: ${({ $variant }) => {
+    switch ($variant) {
+      case 'replan':
+        return '#fca5a5';
+      case 'escalation':
+        return '#fcd34d';
+      default:
+        return 'var(--text-primary)';
+    }
+  }};
+`;
+
+const StateBadge = styled.span<{ $state: string }>`
+  padding: 1px 7px;
+  border-radius: 8px;
+  background: ${({ $state }) => stateColor($state)};
+  color: #fff;
+  font-size: 9px;
+  text-transform: uppercase;
+  font-weight: 700;
+`;
+
+const ReplanMarker = styled.span`
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  margin-left: 8px;
+  padding: 1px 7px;
+  border-radius: 8px;
+  background: rgba(239, 68, 68, 0.18);
+  color: #fca5a5;
+  font-size: 9px;
+  font-weight: 700;
+  text-transform: uppercase;
+  border: 1px solid rgba(239, 68, 68, 0.5);
+`;
+
+const Empty = styled.div`
+  padding: 18px;
+  text-align: center;
+  font-size: 12px;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+`;
+
+function stateColor(state: string): string {
+  switch (state) {
+    case 'idle':
+      return '#6b7280';
+    case 'planning':
+      return '#8b5cf6';
+    case 'implementing':
+      return '#3b82f6';
+    case 'reviewing':
+      return '#f59e0b';
+    case 'deploying':
+      return '#0ea5e9';
+    case 'done':
+      return '#22c55e';
+    case 'escalated':
+    case 'failed':
+    case 'aborted':
+      return '#ef4444';
+    case 'retrying':
+      return '#a855f7';
+    default:
+      return '#525252';
+  }
+}
+
+function shortTime(iso: string): string {
+  try {
+    const d = new Date(iso);
+    return d.toLocaleTimeString('ko-KR', {
+      hour: '2-digit',
+      minute: '2-digit',
+      second: '2-digit',
+      hour12: false,
+    });
+  } catch {
+    return iso;
+  }
+}
+
+function classifyTransition(
+  t: Transition,
+): 'replan' | 'normal' | 'escalation' {
+  if (t.fromState === 'reviewing' && t.toState === 'planning') return 'replan';
+  if (t.toState === 'escalated') return 'escalation';
+  return 'normal';
+}
+
+export default function TransitionsTimeline({ pipelineId }: Props) {
+  const [transitions, setTransitions] = useState<Transition[]>([]);
+  const [loading, setLoading] = useState(false);
+
+  useEffect(() => {
+    if (!pipelineId) {
+      setTransitions([]);
+      return;
+    }
+    let cancelled = false;
+    const load = async () => {
+      setLoading(true);
+      try {
+        const res = await fetch(
+          `${API_URL}/api/rails/transitions?pipelineId=${pipelineId}&limit=200`,
+          { credentials: 'include' },
+        );
+        if (!res.ok) {
+          if (!cancelled) setLoading(false);
+          return;
+        }
+        const data = (await res.json()) as { transitions?: Transition[] };
+        if (!cancelled) {
+          // API returns DESC by timestamp — reverse to chronological
+          const rows = (data.transitions ?? []).slice().reverse();
+          setTransitions(rows);
+          setLoading(false);
+        }
+      } catch {
+        if (!cancelled) setLoading(false);
+      }
+    };
+    void load();
+    const t = setInterval(load, 4000);
+    return () => {
+      cancelled = true;
+      clearInterval(t);
+    };
+  }, [pipelineId]);
+
+  const stats = useMemo(() => {
+    const replans = transitions.filter(
+      (t) => t.fromState === 'reviewing' && t.toState === 'planning',
+    ).length;
+    const reviewLoops = transitions.filter(
+      (t) => t.fromState === 'reviewing' && t.toState === 'implementing',
+    ).length;
+    const escalations = transitions.filter(
+      (t) => t.toState === 'escalated',
+    ).length;
+    return { replans, reviewLoops, escalations, total: transitions.length };
+  }, [transitions]);
+
+  if (!pipelineId) {
+    return (
+      <Wrapper>
+        <Header>
+          <Title>전이 타임라인</Title>
+        </Header>
+        <Empty>파이프라인을 선택해</Empty>
+      </Wrapper>
+    );
+  }
+
+  return (
+    <Wrapper>
+      <Header>
+        <Title>전이 타임라인</Title>
+        <Stats>
+          <Stat>전이 {stats.total}</Stat>
+          {stats.reviewLoops > 0 && (
+            <Stat $variant="review">review loop ×{stats.reviewLoops}</Stat>
+          )}
+          {stats.replans > 0 && (
+            <Stat $variant="replan">↑ 재기획 ×{stats.replans}</Stat>
+          )}
+          {stats.escalations > 0 && (
+            <Stat $variant="replan">🚨 escalated</Stat>
+          )}
+        </Stats>
+      </Header>
+      {loading && transitions.length === 0 ? (
+        <Empty>로딩 중...</Empty>
+      ) : transitions.length === 0 ? (
+        <Empty>아직 전이가 없어</Empty>
+      ) : (
+        <Track>
+          {transitions.map((t) => {
+            const variant = classifyTransition(t);
+            return (
+              <Row key={t.id} $variant={variant}>
+                <Time>{shortTime(t.timestamp)}</Time>
+                <Arrow $variant={variant}>
+                  <StateBadge $state={t.fromState}>{t.fromState}</StateBadge>
+                  →
+                  <StateBadge $state={t.toState}>{t.toState}</StateBadge>
+                  <span style={{ color: 'var(--text-secondary)' }}>
+                    [{t.eventType}]
+                  </span>
+                  {variant === 'replan' && <ReplanMarker>↑ 재기획</ReplanMarker>}
+                  {variant === 'escalation' && (
+                    <ReplanMarker>🚨 escalated</ReplanMarker>
+                  )}
+                </Arrow>
+              </Row>
+            );
+          })}
+        </Track>
+      )}
+    </Wrapper>
+  );
+}

frontend/lib/AuthContext.tsx

@@ -3,6 +3,7 @@
 import React, { createContext, useContext, useState, useEffect, useCallback } from 'react';
 import { useRouter } from 'next/navigation';
 import { API_URL } from './config';
+import { withSessionRequest } from './csrf';
 
 interface AuthUser {
   userId: number;
@@ -31,38 +32,20 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
   const [loading, setLoading] = useState(true);
 
   const loadUser = useCallback(async () => {
-    const token = localStorage.getItem('hanarang_access_token');
-    if (!token) { setLoading(false); return; }
-
     try {
-      const res = await fetch(`${API_URL}/api/auth/me`, {
-        headers: { Authorization: `Bearer ${token}` },
-      });
+      const res = await fetch(`${API_URL}/api/auth/me`, withSessionRequest());
       if (res.ok) {
         const data = await res.json();
         setUser({ userId: data.id, username: data.username, role: data.role });
       } else if (res.status === 401) {
-        // access token 만료 → refresh 시도
-        const refreshToken = localStorage.getItem('hanarang_refresh_token');
-        if (refreshToken) {
-          try {
-            const rRes = await fetch(`${API_URL}/api/auth/refresh`, {
-              method: 'POST',
-              headers: { 'x-refresh-token': refreshToken },
-            });
-            if (rRes.ok) {
-              const d = await rRes.json();
-              localStorage.setItem('hanarang_access_token', d.accessToken);
-              if (d.refreshToken) localStorage.setItem('hanarang_refresh_token', d.refreshToken);
-              setUser({ userId: 0, username: d.username, role: d.role });
-            } else {
-              localStorage.removeItem('hanarang_access_token');
-              localStorage.removeItem('hanarang_refresh_token');
-            }
-          } catch { /* silent */ }
-        } else {
-          localStorage.removeItem('hanarang_access_token');
-        }
+        // access token expired → try refresh via cookie
+        try {
+          const rRes = await fetch(`${API_URL}/api/auth/refresh`, withSessionRequest({ method: 'POST' }, { csrf: true }));
+          if (rRes.ok) {
+            const d = await rRes.json();
+            setUser({ userId: 0, username: d.username, role: d.role });
+          }
+        } catch { /* silent */ }
       }
     } catch {
       // silent
@@ -74,11 +57,11 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
   useEffect(() => { loadUser(); }, [loadUser]);
 
   const login = async (username: string, password: string) => {
-    const res = await fetch(`${API_URL}/api/auth/login`, {
+    const res = await fetch(`${API_URL}/api/auth/login`, withSessionRequest({
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
       body: JSON.stringify({ username, password }),
-    });
+    }, { csrf: true }));
 
     if (!res.ok) {
       const d = await res.json();
@@ -86,27 +69,23 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
     }
 
     const d = await res.json();
-    localStorage.setItem('hanarang_access_token', d.accessToken);
-    if (d.refreshToken) {
-      localStorage.setItem('hanarang_refresh_token', d.refreshToken);
-    }
-    // me API로 실제 userId 가져오기
+    // Tokens are set as HttpOnly cookies by the server
+    setUser({ userId: 0, username: d.username, role: d.role });
+
+    // Fetch actual userId from /me
     try {
-      const meRes = await fetch(`${API_URL}/api/auth/me`, {
-        headers: { Authorization: `Bearer ${d.accessToken}` },
-      });
+      const meRes = await fetch(`${API_URL}/api/auth/me`, withSessionRequest());
       if (meRes.ok) {
         const me = await meRes.json();
         setUser({ userId: me.id, username: me.username, role: me.role });
-        return;
       }
-    } catch { /* fallback */ }
-    setUser({ userId: 0, username: d.username, role: d.role });
+    } catch { /* fallback — already set basic info */ }
   };
 
-  const logout = () => {
-    localStorage.removeItem('hanarang_access_token');
-    localStorage.removeItem('hanarang_refresh_token');
+  const logout = async () => {
+    try {
+      await fetch(`${API_URL}/api/auth/logout`, withSessionRequest({ method: 'POST' }, { csrf: true }));
+    } catch { /* silent */ }
     setUser(null);
   };
 

frontend/lib/control/mock-events.ts

@@ -0,0 +1,146 @@
+import type { LiveWorkboardState, WorkflowEvent } from './types';
+
+export const mockLiveWorkboard: LiveWorkboardState = {
+  source: 'mock',
+  workflow: {
+    id: 'wf-hanarang-live-workboard-v0',
+    title: '하나랑 Live Workboard v0',
+    phase: 'building',
+    summary: '4자매가 작업하는 과정을 메인 화면에서 실시간으로 보여주는 첫 버전',
+    planPath: '.plans/rebuild-from-scratch/PLAN.md',
+    updatedAt: '방금 전',
+    source: 'mock',
+  },
+  sisters: [
+    {
+      id: 'harang',
+      name: '하랑이',
+      role: 'Planner',
+      color: '#8bd3ff',
+      phase: 'planning',
+      status: 'waiting',
+      currentTask: 'PLAN.md 승인 범위 정리 완료',
+      lastEvent: '나랑이에게 v0 구현 handoff 전달',
+      nextHandoff: '구현 중 scope 변경 생기면 플랜 보강',
+      progress: 100,
+      mode: 'role-skill',
+    },
+    {
+      id: 'narang',
+      name: '나랑이',
+      role: 'Builder',
+      color: '#ffcc66',
+      phase: 'building',
+      status: 'working',
+      currentTask: 'Live Workboard mock UI 구현',
+      lastEvent: 'Sister activity lane 컴포넌트 생성',
+      nextHandoff: 'lint/build 결과를 다랑이에게 전달',
+      progress: 58,
+      mode: 'role-skill',
+    },
+    {
+      id: 'darang',
+      name: '다랑이',
+      role: 'Reviewer',
+      color: '#c6a5ff',
+      phase: 'reviewing',
+      status: 'idle',
+      currentTask: '구현 완료 대기',
+      lastEvent: 'QA checklist 준비',
+      nextHandoff: 'spec compliance review 시작',
+      progress: 20,
+      mode: 'role-skill',
+    },
+    {
+      id: 'erang',
+      name: '이랑이',
+      role: 'Infra / Orchestrator',
+      color: '#ff8f70',
+      phase: 'waiting_approval',
+      status: 'thinking',
+      currentTask: '승인 게이트와 배포 위험 분리',
+      lastEvent: 'DB/배포 변경 없음 확인',
+      nextHandoff: '다랑이 PASS 후 자기야에게 배포 승인 요청',
+      progress: 42,
+      mode: 'main',
+    },
+  ],
+  approvals: [
+    {
+      id: 'approval-v0-local',
+      title: 'v0 로컬 UI 구현',
+      risk: 'L2',
+      status: 'not-required',
+    },
+    {
+      id: 'approval-deploy',
+      title: 'production 배포',
+      risk: 'L3',
+      status: 'waiting',
+    },
+    {
+      id: 'approval-proxmox-write',
+      title: 'Proxmox write API / restart action',
+      risk: 'L4',
+      status: 'blocked',
+    },
+  ],
+  events: [
+    {
+      id: 'evt-001',
+      at: '13:04',
+      sister: 'harang',
+      type: 'PLAN_CREATED',
+      title: '재구축 PLAN 작성',
+      detail: '메인 서비스를 4 Sisters Live Workboard로 재정의',
+      workflowId: 'wf-hanarang-live-workboard-v0',
+      source: 'mock',
+    },
+    {
+      id: 'evt-002',
+      at: '13:09',
+      sister: 'erang',
+      type: 'APPROVAL_NEEDED',
+      title: 'Gate A 승인 확인',
+      detail: '자기야가 “그거 먼저 만들어보자”로 v0 구현 승인',
+      workflowId: 'wf-hanarang-live-workboard-v0',
+      source: 'mock',
+    },
+    {
+      id: 'evt-003',
+      at: '13:12',
+      sister: 'narang',
+      type: 'BUILD_STARTED',
+      title: 'Frontend v0 구현 시작',
+      detail: 'mock event stream 기반 lane/timeline/focus UI 생성',
+      workflowId: 'wf-hanarang-live-workboard-v0',
+      source: 'mock',
+    },
+    {
+      id: 'evt-004',
+      at: '13:15',
+      sister: 'narang',
+      type: 'FILES_CHANGED',
+      title: 'Live Workboard 컴포넌트 추가',
+      detail: 'SisterActivityLane, WorkflowTimeline, ActiveTaskFocus',
+      workflowId: 'wf-hanarang-live-workboard-v0',
+      source: 'mock',
+    },
+    {
+      id: 'evt-005',
+      at: 'next',
+      sister: 'darang',
+      type: 'REVIEW_REQUESTED',
+      title: '다랑이 리뷰 예정',
+      detail: 'lint/build 결과 확인 후 spec compliance review',
+      workflowId: 'wf-hanarang-live-workboard-v0',
+      source: 'mock',
+    },
+  ],
+};
+
+export function rotateEvents(events: WorkflowEvent[], tick: number): WorkflowEvent[] {
+  if (events.length === 0) return events;
+  const offset = tick % events.length;
+  return [...events.slice(offset), ...events.slice(0, offset)];
+}

frontend/lib/control/types.ts

@@ -0,0 +1,75 @@
+export type SourceKind = 'live' | 'snapshot' | 'mock' | 'fallback';
+
+export type SisterId = 'harang' | 'narang' | 'darang' | 'erang';
+
+export type WorkflowPhase =
+  | 'planning'
+  | 'building'
+  | 'reviewing'
+  | 'waiting_approval'
+  | 'deploying'
+  | 'blocked'
+  | 'done';
+
+export type WorkflowEventType =
+  | 'PLAN_CREATED'
+  | 'HANDOFF_SENT'
+  | 'BUILD_STARTED'
+  | 'FILES_CHANGED'
+  | 'TEST_RUNNING'
+  | 'TEST_PASSED'
+  | 'REVIEW_REQUESTED'
+  | 'QA_BLOCKED'
+  | 'APPROVAL_NEEDED'
+  | 'INFRA_CHECKED'
+  | 'DEPLOY_READY';
+
+export type SisterLaneState = {
+  id: SisterId;
+  name: string;
+  role: string;
+  color: string;
+  phase: WorkflowPhase;
+  status: 'idle' | 'thinking' | 'working' | 'reviewing' | 'blocked' | 'waiting';
+  currentTask: string;
+  lastEvent: string;
+  nextHandoff: string;
+  progress: number;
+  mode: 'main' | 'role-skill' | 'gateway' | 'standby';
+};
+
+export type WorkflowEvent = {
+  id: string;
+  at: string;
+  sister: SisterId;
+  type: WorkflowEventType;
+  title: string;
+  detail: string;
+  workflowId: string;
+  source: SourceKind;
+};
+
+export type ActiveWorkflow = {
+  id: string;
+  title: string;
+  phase: WorkflowPhase;
+  summary: string;
+  planPath: string;
+  updatedAt: string;
+  source: SourceKind;
+};
+
+export type ApprovalItem = {
+  id: string;
+  title: string;
+  risk: 'L1' | 'L2' | 'L3' | 'L4';
+  status: 'waiting' | 'not-required' | 'blocked';
+};
+
+export type LiveWorkboardState = {
+  workflow: ActiveWorkflow;
+  sisters: SisterLaneState[];
+  events: WorkflowEvent[];
+  approvals: ApprovalItem[];
+  source: SourceKind;
+};

frontend/lib/csrf.ts

@@ -0,0 +1,46 @@
+export const CSRF_COOKIE_NAME = 'hanarang_csrf_token';
+
+export function getCookieValue(name: string): string {
+  if (typeof document === 'undefined') return '';
+
+  const match = document.cookie
+    .split('; ')
+    .find((item) => item.startsWith(`${encodeURIComponent(name)}=`));
+
+  if (!match) return '';
+
+  return decodeURIComponent(match.split('=').slice(1).join('='));
+}
+
+export function getCsrfToken(): string {
+  return getCookieValue(CSRF_COOKIE_NAME);
+}
+
+export function needsCsrf(method?: string): boolean {
+  const normalized = (method ?? 'GET').toUpperCase();
+  return !['GET', 'HEAD', 'OPTIONS'].includes(normalized);
+}
+
+export function withCsrfHeaders(headers?: HeadersInit): Headers {
+  const nextHeaders = new Headers(headers);
+  const csrfToken = getCsrfToken();
+
+  if (csrfToken) {
+    nextHeaders.set('x-csrf-token', csrfToken);
+  }
+
+  return nextHeaders;
+}
+
+export function withSessionRequest(
+  init: RequestInit = {},
+  options: { csrf?: boolean } = {},
+): RequestInit {
+  const useCsrf = options.csrf ?? needsCsrf(init.method);
+
+  return {
+    ...init,
+    credentials: 'include',
+    headers: useCsrf ? withCsrfHeaders(init.headers) : new Headers(init.headers),
+  };
+}

frontend/lib/useRailsSocket.ts

@@ -0,0 +1,93 @@
+'use client';
+
+import { useEffect, useRef, useState } from 'react';
+import { io, Socket } from 'socket.io-client';
+
+export interface RailsPipelineSummary {
+  id: string;
+  projectName: string;
+  currentState: string;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface RailsSubTaskNode {
+  id: string;
+  parentId: string | null;
+  role: string;
+  agentName: string;
+  title: string;
+  state: string;
+  complexityScore: number | null;
+  complexityTier: string | null;
+  model: string;
+  startedAt: string | null;
+  completedAt: string | null;
+  createdAt: string;
+  children: RailsSubTaskNode[];
+}
+
+interface UseRailsSocketOptions {
+  onPipelinesSnapshot?: (pipelines: RailsPipelineSummary[]) => void;
+  onPipelineUpdated?: (pipeline: RailsPipelineSummary) => void;
+  onSubTasksUpdated?: (pipelineId: string, tree: RailsSubTaskNode[]) => void;
+}
+
+/**
+ * Listens to rails.* events emitted by the backend EventsGateway.
+ * Piggybacks on the existing /ws namespace — no new socket connection.
+ */
+export function useRailsSocket(options: UseRailsSocketOptions = {}) {
+  const socketRef = useRef<Socket | null>(null);
+  const [connected, setConnected] = useState(false);
+
+  useEffect(() => {
+    const wsUrl = process.env.NEXT_PUBLIC_WS_URL ?? window.location.origin;
+    const token =
+      typeof window !== 'undefined'
+        ? localStorage.getItem('hanarang_access_token') ?? ''
+        : '';
+
+    const socket = io(`${wsUrl}/ws`, {
+      path: '/socket.io',
+      transports: ['websocket', 'polling'],
+      reconnectionAttempts: 5,
+      reconnectionDelay: 3000,
+      auth: { token },
+    });
+
+    socket.on('connect', () => setConnected(true));
+    socket.on('disconnect', () => setConnected(false));
+
+    if (options.onPipelinesSnapshot) {
+      socket.on('rails:pipelines', (payload: { pipelines: RailsPipelineSummary[] }) => {
+        options.onPipelinesSnapshot?.(payload.pipelines);
+      });
+    }
+
+    if (options.onPipelineUpdated) {
+      socket.on('rails:pipeline:updated', (payload: { pipeline: RailsPipelineSummary }) => {
+        options.onPipelineUpdated?.(payload.pipeline);
+      });
+    }
+
+    if (options.onSubTasksUpdated) {
+      socket.on(
+        'rails:subtasks',
+        (payload: { pipelineId: string; tree: RailsSubTaskNode[] }) => {
+          options.onSubTasksUpdated?.(payload.pipelineId, payload.tree);
+        },
+      );
+    }
+
+    socketRef.current = socket;
+
+    return () => {
+      socket.disconnect();
+      socketRef.current = null;
+    };
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  return { connected, socket: socketRef.current };
+}