elanous 0.2.0 → 0.2.5

package/src/autopilot/gh-rest-fallback.ts

@@ -0,0 +1,177 @@
+import { debug } from '../debug/log.js';
+import type { CmdResult, CmdRunner } from './pr-manager.js';
+
+type Pull = Record<string, unknown>;
+
+function flag(args: readonly string[], name: string): string | undefined {
+  const index = args.indexOf(name);
+  return index >= 0 ? args[index + 1] : undefined;
+}
+
+function hasOnlyFlags(args: readonly string[], start: number, valued: readonly string[], bare: readonly string[] = []): boolean {
+  for (let i = start; i < args.length; i++) {
+    if (bare.includes(args[i]!)) continue;
+    if (!valued.includes(args[i]!) || args[++i] === undefined) return false;
+  }
+  return true;
+}
+
+function repoFromOrigin(run: CmdRunner, opts?: { cwd?: string }): { owner: string; repo: string } | null {
+  const remote = run('git', ['remote', 'get-url', 'origin'], opts);
+  if (!remote.ok) return null;
+  const value = remote.out.trim();
+  let path: string;
+  try {
+    const url = new URL(value);
+    if (!['https:', 'ssh:'].includes(url.protocol) || url.hostname.toLowerCase() !== 'github.com') return null;
+    path = url.pathname;
+  } catch {
+    const scp = /^(?:[^@/]+@)?github\.com:([^\s]+)$/.exec(value);
+    if (!scp) return null;
+    path = scp[1]!;
+  }
+  const match = /^\/?([\w.-]+)\/([\w.-]+?)(?:\.git)?\/?$/.exec(path);
+  return match ? { owner: match[1]!, repo: match[2]! } : null;
+}
+
+function prNumber(value: string, owner: string, repo: string): string | null {
+  if (/^[1-9]\d*$/.test(value)) return value;
+  const match = /^https:\/\/github\.com\/([^/]+)\/([^/]+)\/pull\/([1-9]\d*)\/?$/.exec(value);
+  return match && match[1] === owner && match[2] === repo ? match[3]! : null;
+}
+
+function readPull(result: CmdResult): Pull | null {
+  if (!result.ok) return null;
+  try {
+    const value: unknown = JSON.parse(result.out);
+    return value && typeof value === 'object' && !Array.isArray(value) ? value as Pull : null;
+  } catch { return null; }
+}
+
+function pullField(pull: Pull, field: string): unknown {
+  switch (field) {
+    case 'state': return pull.merged_at ? 'MERGED' : pull.state === 'open' ? 'OPEN' : pull.state === 'closed' && pull.merged_at === null ? 'CLOSED' : undefined;
+    case 'isDraft': return pull.draft;
+    case 'baseRefName': return (pull.base as Pull | undefined)?.ref;
+    case 'headRefName': return (pull.head as Pull | undefined)?.ref;
+    case 'headRepository': {
+      const nameWithOwner = ((pull.head as Pull | undefined)?.repo as Pull | undefined)?.full_name;
+      return typeof nameWithOwner === 'string' ? { nameWithOwner } : undefined;
+    }
+    case 'mergeable': return pull.mergeable === true ? 'MERGEABLE' : pull.mergeable === false ? 'CONFLICTING' : pull.mergeable === null ? 'UNKNOWN' : undefined;
+    case 'mergeStateStatus': {
+      const state = pull.mergeable_state;
+      return typeof state === 'string' && ['behind', 'blocked', 'clean', 'dirty', 'draft', 'has_hooks', 'unknown', 'unstable'].includes(state)
+        ? state.toUpperCase() : undefined;
+    }
+    default: return undefined;
+  }
+}
+
+function restCall(run: CmdRunner, args: string[], opts?: { cwd?: string }): CmdResult {
+  return run('gh', ['api', ...args], opts);
+}
+
+/** Retry exactly once via REST after the secondary GraphQL limit; unsupported shapes fail closed. */
+export function withGhRestFallback(run: CmdRunner): CmdRunner {
+  return (cmd, args, opts) => {
+    const original = run(cmd, args, opts);
+    if (cmd !== 'gh' || args[0] !== 'pr' || original.ok ||
+        !/GraphQL/i.test(`${original.out}\n${original.err ?? ''}`) ||
+        !/API rate limit/i.test(`${original.out}\n${original.err ?? ''}`)) return original;
+    const sub = args[1];
+    if (!['list', 'view', 'create', 'edit', 'merge', 'comment'].includes(sub ?? '')) return original;
+    if (sub === 'list' && !args.includes('--json')) return original;
+    const location = repoFromOrigin(run, opts);
+    if (!location) return original;
+    const { owner, repo } = location;
+    const path = `repos/${owner}/${repo}`;
+    let result: CmdResult | null = null;
+
+    if (sub === 'list' && args[2] === '--head' && args[3] && args[4] === '--state' && args[5] === 'open' &&
+        args[6] === '--json' && args[7] === 'url' &&
+        (args.length === 8 || (args.length === 10 && args[8] === '--jq' && args[9] === '.[0].url // ""'))) {
+      const listed = restCall(run, [`${path}/pulls?head=${encodeURIComponent(`${owner}:${args[3]}`)}&state=open`], opts);
+      if (listed.ok) {
+        try {
+          const items: unknown = JSON.parse(listed.out);
+          if (Array.isArray(items) && items.every((item) => item && typeof item.html_url === 'string')) {
+            const urls = items.map((item) => ({ url: item.html_url as string }));
+            result = { ok: true, out: args[8] === '--jq' ? (urls[0]?.url ?? '') : JSON.stringify(urls) };
+          }
+        } catch { /* malformed REST response */ }
+      } else result = listed;
+    } else if (sub === 'view' && args[2] && args[3] === '--json' && args[4] &&
+        hasOnlyFlags(args, 5, ['--jq', '-q'])) {
+      const number = prNumber(args[2], owner, repo);
+      const fields = args[4].split(',');
+      const jq = flag(args, '--jq') ?? flag(args, '-q');
+      if (number && fields.every((field) => ['state', 'isDraft', 'mergeable', 'baseRefName', 'mergeStateStatus', 'headRefName', 'headRepository'].includes(field)) &&
+          (!jq || (fields.length === 1 && jq === `.${fields[0]}`))) {
+        const response = restCall(run, [`${path}/pulls/${number}`], opts);
+        const pull = readPull(response);
+        if (pull) {
+          const mapped = Object.fromEntries(fields.map((field) => [field, pullField(pull, field)]));
+          if (Object.values(mapped).every((value) => value !== undefined)) {
+            const selected = mapped[fields[0]!];
+            result = { ok: true, out: jq
+              ? typeof selected === 'string' ? selected : JSON.stringify(selected)
+              : JSON.stringify(mapped) };
+          }
+        } else if (!response.ok) result = response;
+      }
+    } else if (sub === 'create' && hasOnlyFlags(args, 2, ['--head', '--title', '--body', '--base'], ['--draft']) &&
+        flag(args, '--head') && flag(args, '--title') !== undefined && flag(args, '--body') !== undefined) {
+      let base = flag(args, '--base');
+      if (!base) {
+        const repository = restCall(run, [path], opts);
+        if (!repository.ok) result = repository;
+        else {
+          const defaultBranch = readPull(repository)?.default_branch;
+          if (typeof defaultBranch === 'string' && defaultBranch) base = defaultBranch;
+        }
+      }
+      if (base) {
+        const parameters = ['-f', `head=${flag(args, '--head')}`, '-f', `title=${flag(args, '--title')}`, '-f', `body=${flag(args, '--body')}`, '-f', `base=${base}`];
+        if (args.includes('--draft')) parameters.push('-F', 'draft=true');
+        const response = restCall(run, ['--method', 'POST', `${path}/pulls`, ...parameters], opts);
+        const pull = readPull(response);
+        if (pull && typeof pull.html_url === 'string') result = { ok: true, out: pull.html_url };
+        else if (!response.ok) result = response;
+      }
+    } else if (sub === 'edit' && args[2] && hasOnlyFlags(args, 3, ['--title', '--body', '--base']) &&
+        flag(args, '--title') !== undefined && flag(args, '--body') !== undefined) {
+      const number = prNumber(args[2], owner, repo);
+      if (number) {
+        const parameters = ['-f', `title=${flag(args, '--title')}`, '-f', `body=${flag(args, '--body')}`];
+        if (flag(args, '--base')) parameters.push('-f', `base=${flag(args, '--base')}`);
+        const response = restCall(run, ['--method', 'PATCH', `${path}/pulls/${number}`, ...parameters], opts);
+        if (readPull(response)) result = { ok: true, out: '' };
+        else if (!response.ok) result = response;
+      }
+    } else if (sub === 'merge' && args[2] && args[3] === '--squash' && args.length === 4) {
+      const number = prNumber(args[2], owner, repo);
+      if (number) {
+        const head = restCall(run, [`${path}/pulls/${number}`], opts);
+        const sha = (readPull(head)?.head as Pull | undefined)?.sha;
+        if (typeof sha === 'string' && /^[a-f0-9]{40}$/.test(sha)) {
+          const response = restCall(run, ['--method', 'PUT', `${path}/pulls/${number}/merge`, '-f', 'merge_method=squash', '-f', `sha=${sha}`], opts);
+          const body = readPull(response);
+          if (body?.merged === true) result = { ok: true, out: '' };
+          else if (!response.ok) result = response;
+        } else if (!head.ok) result = head;
+      }
+    } else if (sub === 'comment' && args[2] && args[3] === '--body' && args[4] !== undefined && args.length === 5) {
+      const number = prNumber(args[2], owner, repo);
+      if (number) {
+        const response = restCall(run, ['--method', 'POST', `${path}/issues/${number}/comments`, '-f', `body=${args[4]}`], opts);
+        if (readPull(response)) result = { ok: true, out: '' };
+        else if (!response.ok) result = response;
+      }
+    }
+    if (!result) return original;
+    debug.log('autopilot.pr', 'rest-fallback', { sub, ok: result.ok });
+    process.stderr.write(`[gh] REST 폴백: pr ${sub}\n`);
+    return result;
+  };
+}

package/src/autopilot/llm-control-brain.ts

@@ -1,10 +1,10 @@
 // ── LLM 제어 brain (PLAN §7 P3b · 제어 루프를 자율화) ──
 //
 // runPtyControlLoop(§P3a)의 "판단"을 실제 LLM 으로 채운다: 화면(#1 분류 상태 포함)을 보고 다음 행동
-// (input/wait/done)을 결정. 이게 substrate(관측·판단·대기·안전한 행동)를 **실제 자율 에이전트**로 만든다.
+// (input/key/mouse/resize/wait/done)을 결정. 이게 substrate(관측·판단·대기·안전한 행동)를 **실제 자율 에이전트**로 만든다.
 //   runPtyControlLoop(createLlmControlBrain({goal}), controlDepsForHandle(h), opts)
 //
-// 범용 3-액션(input/wait/done) — agent-mission 의 codex-특정 5-액션(send/verify/search…)의 일반형.
+// 범용 제어 액션(input/key/mouse/resize/wait/done) — agent-mission 의 codex-특정 액션과 별개.
 // streamLLM 은 lazy-inject(테스트=스텁·프로덕션=실제 · 테스트가 llm.js 무겁게 로드 안 함).
 //
 // ⭐제1원칙: 판단은 관측 관문(debug.log('autopilot.control','brain'))에 남긴다. LLM 오류/무JSON 은
@@ -14,6 +14,8 @@ import type { RunSupervisor, ControlDecision, ControlObservation } from './pty-c
 import { formatStallContext } from './stall-context.js';
 import type { LLMMessage } from '../llm.js';
 import { debug } from '../debug/log.js';
+import { emitDecision } from '../live/detail-switch.js';
+import { MAX_PTY_KEY_REPEAT } from '../pty-shell/pty-mouse.js';
 
 /** 주입 가능한 LLM 스트림 함수(streamLLM 시그니처 부분집합). */
 export type StreamLLMFn = (
@@ -41,7 +43,7 @@ export interface LlmControlBrainOpts {
   readonly historyLimit?: number;
   /** 결정 관측 훅(전사·디버그). */
   readonly onDecision?: (decision: ControlDecision, raw: string) => void;
-  /** 도메인별 프롬프트가 기본 3-action 프롬프트를 대체할 때 사용한다. */
+  /** 도메인별 프롬프트가 기본 제어 프롬프트를 대체할 때 사용한다. */
   readonly messageBuilder?: (obs: ControlObservation, history: readonly string[]) => LLMMessage[];
   /** 도메인별 원문→결정 어댑터. 비동기 부작용(search context 기록 등)도 허용한다. */
   readonly decisionFromRaw?: (raw: string, obs: ControlObservation) => ControlDecision | Promise<ControlDecision>;
@@ -66,17 +68,25 @@ export function extractFirstJsonObject(raw: string): string | null {
   return null;
 }
 
-/** ⭐LLM 원문 → ControlDecision. JSON {action,text,reason} 관대 파싱. 무JSON/실패 → wait(fail-soft). */
+/** ⭐LLM 원문 → ControlDecision. 무JSON/잘못된 JSON 은 wait; 알 수 없는 행동은 오류. */
 export function parseControlDecision(raw: string): ControlDecision {
   const json = extractFirstJsonObject(raw);
   if (!json) return { action: 'wait' };
   try {
     const d = JSON.parse(json) as Record<string, unknown>;
     if (d.action === 'input' && typeof d.text === 'string' && d.text.length > 0) return { action: 'input', text: d.text };
+    if (d.action === 'key' && typeof d.name === 'string' && d.name.trim() && (d.repeat === undefined || (Number.isSafeInteger(d.repeat) && (d.repeat as number) > 0 && (d.repeat as number) <= MAX_PTY_KEY_REPEAT))) return { action: 'key', name: d.name, ...(d.repeat === undefined ? {} : { repeat: d.repeat as number }) };
+    if (d.action === 'mouse' && Number.isSafeInteger(d.x) && (d.x as number) > 0 && Number.isSafeInteger(d.y) && (d.y as number) > 0 && ['click', 'scroll-up', 'scroll-down'].includes(d.kind as string) && (d.button === undefined || ['left', 'middle', 'right'].includes(d.button as string))) return { action: 'mouse', x: d.x as number, y: d.y as number, kind: d.kind as 'click' | 'scroll-up' | 'scroll-down', ...(d.button === undefined ? {} : { button: d.button as 'left' | 'middle' | 'right' }) };
+    if (d.action === 'resize' && Number.isSafeInteger(d.cols) && (d.cols as number) > 0 && Number.isSafeInteger(d.rows) && (d.rows as number) > 0) return { action: 'resize', cols: d.cols as number, rows: d.rows as number };
+    if (d.action === 'handoff' && ['codex', 'claude', 'elanous'].includes(d.to as string) && typeof d.mission === 'string' && d.mission.trim() && (d.carry === undefined || d.carry === 'diff' || d.carry === 'summary')) return { action: 'handoff', to: d.to as 'codex' | 'claude' | 'elanous', mission: d.mission, ...(d.carry ? { carry: d.carry as 'diff' | 'summary' } : {}) };
+    if (d.action === 'ask-human' && typeof d.reason === 'string' && d.reason.trim() && (d.url === undefined || typeof d.url === 'string') && (d.code === undefined || typeof d.code === 'string')) return { action: 'ask-human', reason: d.reason, ...(typeof d.url === 'string' ? { url: d.url } : {}), ...(typeof d.code === 'string' ? { code: d.code } : {}) };
+    if (d.action === 'wait') return { action: 'wait' };
     if (d.action === 'done') return { action: 'done', reason: typeof d.reason === 'string' ? d.reason : 'done' };
     if (d.action === 'no-progress' && typeof d.reason === 'string' && d.reason.length > 0) return { action: 'no-progress', reason: d.reason };
-    return { action: 'wait' };
-  } catch {
+    if (d.action === 'input' || d.action === 'no-progress') return { action: 'wait' };
+    throw new Error(`unknown or invalid PTY control action: ${String(d.action)}`);
+  } catch (error) {
+    if (error instanceof Error && error.message.startsWith('unknown or invalid PTY')) throw error;
     return { action: 'wait' };
   }
 }
@@ -89,10 +99,15 @@ function buildSystem(opts: LlmControlBrainOpts, state: string, stallKnown: boole
 목표: ${opts.goal.slice(0, 600)}
 ${opts.systemHint ? opts.systemHint.slice(0, 400) + '\n' : ''}${hasRoundContext ? '화면은 현재 신호 하나다. 제공된 라운드 맥락과 직전 실패를 함께 고려하되, 화면만으로 이전 라운드의 진행을 추정하지 마라.\n' : ''}화면을 보고 **다음 행동 하나**를 JSON 으로 결정하라:
 - "input": 자식이 입력을 기다리면(프롬프트/선택/blocked) 다음 입력 text(개행 필요 시 \\r 포함).
+- "key": 특수키 name(enter/esc/tab/up/down/left/right 등), 선택 repeat(1~${MAX_PTY_KEY_REPEAT}).
+- "mouse": 마우스가 켜진 TUI 에 1부터 세는 x,y 와 kind(click/scroll-up/scroll-down), 선택 button(left/middle/right). 모드가 꺼져 있으면 거절되며 다음 관측의 직전 행동 불가 이유를 보고 다른 행동을 택하라.
+- "resize": 양의 정수 cols, rows 로 화면 크기 변경.
 - "wait": 자식이 아직 작업 중(working)이면 대기.
 - "done": 목표를 달성했으면 reason.
+- "handoff": 같은 미션의 다른 담당자에게 넘길 때 to(codex/claude/elanous), mission(다음 작업), carry(diff/summary 선택). elanous 는 증거 게이트와 PR.
+- "ask-human": 화면에 로그인 URL/장치 코드가 보일 때 reason, url/code(화면에 보이는 것만). 자격 파일/토큰은 읽지 마라.
 ${stallKnown ? '- "no-progress": 화면이 오래 얼어붙고 진행 표지가 없지만 완료를 주장할 수 없으면 reason.\n' : ''}${stallKnown ? '화면이 오래 얼어붙고 진행 표지가 없으면 done 또는 no-progress 를 화면 근거로만 판단하라.\n' : ''}화면 분류(참고 신호): ${state}.
-JSON 만 출력: {"action":"input|wait|done${stallKnown ? '|no-progress' : ''}","text":"...","reason":"..."}`;
+JSON 만 출력. 행동을 고른 화면 근거 한 줄을 reason 으로 반드시 담아라. 예: {"action":"key","name":"enter","reason":"메뉴 선택"} / {"action":"mouse","x":10,"y":5,"kind":"click","button":"left","reason":"버튼 누름"} / {"action":"resize","cols":80,"rows":24,"reason":"화면 맞춤"}. input 은 text, done${stallKnown ? '/no-progress' : ''} 는 reason 을 싣는다.`;
 }
 
 function buildUser(obs: ControlObservation, history: readonly string[], limit: number): string {
@@ -101,12 +116,12 @@ function buildUser(obs: ControlObservation, history: readonly string[], limit: n
   const roundContext = obs.roundContext
     ? `\n\n=== 라운드 맥락 ===\n현재 라운드: ${obs.roundContext.round}/${obs.roundContext.effectiveMax}\n직전 라운드 실패: ${obs.roundContext.previousRoundFailure}${obs.roundContext.landedSiblings ? `\n착지한 형제: ${obs.roundContext.landedSiblings.items.map((sibling) => `#${sibling.prNumber} (${sibling.shardId ?? sibling.runId})`).join(', ')} · 표시 ${obs.roundContext.landedSiblings.shownItems}/${obs.roundContext.landedSiblings.totalItems} · 생략 ${obs.roundContext.landedSiblings.omittedItems} · 잘림 ${obs.roundContext.landedSiblings.truncated}` : ''}`
     : '';
-  return `스텝 ${obs.step}. 최근 결정: ${recent}. 화면 변화: ${obs.changed}${stallContext ? ` · ${stallContext}` : ''}${roundContext}\n\n=== 자식 화면 ===\n${obs.screen.slice(-3500)}`;
+  return `스텝 ${obs.step}. 최근 결정: ${recent}. 화면 변화: ${obs.changed}${stallContext ? ` · ${stallContext}` : ''}${roundContext}${obs.unavailableAction ? `\n직전 행동 불가: ${obs.unavailableAction}` : ''}\n\n=== 자식 화면 ===\n${obs.screen.slice(-3500)}`;
 }
 
 /**
  * ⭐제어 루프용 LLM brain. `runPtyControlLoop(createLlmControlBrain({goal}), deps, opts)` 로
- * 자율 미션 실행. 화면⊕#1상태 → LLM → input/wait/done. 오류·무JSON 은 wait(fail-soft).
+ * 자율 미션 실행. 화면⊕#1상태 → LLM → 구조화된 PTY 행동. 오류·무JSON 은 wait(fail-soft).
  */
 export function createLlmControlBrain(opts: LlmControlBrainOpts): RunSupervisor {
   const history: string[] = [];
@@ -155,16 +170,43 @@ export function createLlmControlBrain(opts: LlmControlBrainOpts): RunSupervisor
             ])
           : await call;
       } catch (e) {
-        // fail-soft: 루프의 stuck 감지가 지속 실패를 종료로 수렴(헛돌지 않음).
-        debug.log('autopilot.control', 'brain-error', { step: obs.step, error: (e as Error).message });
+        // Provider failures remain fail-soft; malformed/unknown actions are reported separately below.
+        debug.log('autopilot.control', 'brain-error', { step: obs.step, error: e instanceof Error ? e.message : String(e) });
         record(`${obs.step}:error`);
         return { action: 'wait' };
       } finally {
         if (timer) clearTimeout(timer); // 정상 호출마다 타이머 잔존 방지(review·누수)
         externalSignal?.removeEventListener('abort', onExternalAbort);
       }
-      const decision = await (opts.decisionFromRaw?.(raw, obs) ?? parseControlDecision(raw));
+      let decision: ControlDecision;
+      try {
+        decision = await (opts.decisionFromRaw?.(raw, obs) ?? parseControlDecision(raw));
+      } catch (error) {
+        debug.log('autopilot.control', 'brain-error', { step: obs.step, error: error instanceof Error ? error.message : String(error) });
+        record(`${obs.step}:error`);
+        throw error;
+      }
+      let reason = '';
+      try {
+        const object = extractFirstJsonObject(raw);
+        const parsed = object ? JSON.parse(object) as { reason?: unknown } : null;
+        reason = typeof parsed?.reason === 'string' ? parsed.reason.slice(0, 160) : '';
+      } catch { /* raw response need not be JSON for a domain adapter */ }
+      const rationale = reason.replace(/\s+/g, ' ').trim().slice(0, 160);
+      // Preserve the legacy input/done and handoff contracts (which need no reason field),
+      // but never execute a structured key/mouse/resize operation without a rationale.
+      if (!rationale && (decision.action === 'key' || decision.action === 'mouse' || decision.action === 'resize')) {
+        const error = new Error(`PTY control action ${decision.action} missing brain reason`);
+        debug.log('autopilot.control', 'brain-error', { step: obs.step, error: error.message });
+        record(`${obs.step}:error`);
+        throw error;
+      }
       record(`${obs.step}:${decision.action}`);
+      // wait 외 판단은 ROUTE, ask-human 은 ESCALATE 로 남긴다. 로그인/전환 이벤트에는 화면과 원문 reason 을 싣지 않는다.
+      //   구형 계약(input·done·no-progress 는 reason 없이 와도 된다)은 깨지 않는다 · 구조 행동은 위에서 이미 거절됐다.
+      if (rationale || decision.action !== 'wait') {
+        emitDecision({ kind: decision.action === 'ask-human' ? 'ESCALATE' : 'ROUTE', what: decision.action === 'ask-human' ? '로그인 필요 → 사람' : decision.action === 'handoff' ? `handoff → ${decision.to}` : decision.action === 'key' ? `key ${decision.name}` : decision.action === 'mouse' ? `mouse ${decision.kind} (${decision.x},${decision.y})` : decision.action === 'resize' ? `resize ${decision.cols}x${decision.rows}` : decision.action === 'input' ? `input (${decision.text.length} chars)` : decision.action, reason: decision.action === 'ask-human' ? 'login screen requires human authentication' : decision.action === 'handoff' ? decision.to === 'claude' ? '리뷰 = claude · 왜: 다른 눈' : 'continue mission with next backend' : rationale || '—', purpose: decision.action === 'ask-human' || decision.action === 'handoff' ? 'mission continuation' : opts.goal.replace(/\s+/g, ' ').slice(0, 160), target: decision.action === 'ask-human' ? 'human' : decision.action === 'handoff' ? decision.to : obs.subjectPtyId ?? 'unknown-pty', phase: 'implement' });
+      }
       // ⭐제1원칙 관측 — 판단을 남긴다.
       debug.log('autopilot.control', 'brain', {
         step: obs.step, action: decision.action, state: obs.state,

package/src/autopilot/mission-engine.ts

@@ -27,6 +27,8 @@ import {
   type DecompBaseline, type BaselineArcView, type BaselinePhaseView,
 } from './mission-decompose-baseline.js';
 import { executeApprovedMission } from './mission-executor.js';
+import { deliverMissionPhases, type CourierDeps } from './track-courier.js';
+import { getUserConfig } from '../user-config.js';
 import type { DecomposeCallable } from '../task-orchestrator/generator.js';
 import type { ProposedTask } from '../task-orchestrator/generator-schema.js';
 import { spawn } from 'node:child_process';
@@ -863,11 +865,21 @@ export type SpawnRunFn = (missionId: string) => void;
 
 export async function approveMission(
   missionId: string,
-  deps: { store?: TaskStore; now?: number; createSchedule?: CreateScheduleFn; spawnRun?: SpawnRunFn } = {},
+  deps: { store?: TaskStore; now?: number; createSchedule?: CreateScheduleFn; spawnRun?: SpawnRunFn; courier?: Omit<CourierDeps, 'store' | 'now'> } = {},
 ): Promise<ApproveMissionResult> {
   const store = deps.store ?? new TaskStore();
   const owns = !deps.store;
   const now = deps.now ?? Date.now();
+  const notifyCourier = () => {
+    try {
+      const config = deps.courier?.config ?? getUserConfig().autopilot?.trackCourier;
+      if (config?.enabled === true) {
+        void deliverMissionPhases(missionId, { ...deps.courier, config, store, now });
+      }
+    } catch (e) {
+      try { debug.log('autopilot.track-courier', 'post-failed', { missionId, error: e instanceof Error ? e.message : String(e) }); } catch { /* fail-soft */ }
+    }
+  };
   try {
     const m = getMission(store, missionId);
     if (!m) return { ok: false, activated: 0, error: `미션 없음: ${missionId}` };
@@ -916,6 +928,7 @@ export async function approveMission(
       //   승인 후 막히던 문제. 이제 모든 도메인 승인=실행. 실제 매매 집행은 하위 trade-mandate
       //   (armed/live)가 게이트하므로 미션 실행해도 실매매 오집행 불가(도메인 통째 dry 는 과잉 이중).
       try { (deps.spawnRun ?? defaultSpawnRunMission)(m.id); } catch { /* fail-soft — 스테이징 유지 */ }
+      if (r.ok) notifyCourier();
       return { ok: r.ok, activated: r.activated, ...(r.note ? { note: r.note } : {}) };
     }
     // ── 단일 페이즈 → 기존 동작 유지(ready + run-mission one-shot) ──
@@ -928,6 +941,7 @@ export async function approveMission(
     // ★ 실집행 — ready 만으론 안 돎(활성 디스패처 부재·대표 지적 2026-07-10). run-mission.ts 를
     //   detached one-shot 실행해 골을 에이전트 턴으로 즉시 수행·발송(scheduler 의 1회판).
     try { (deps.spawnRun ?? defaultSpawnRunMission)(m.id); } catch { /* fail-soft — ready 로 남음 */ }
+    notifyCourier();
     return { ok: true, activated };
   } catch (e) {
     return { ok: false, activated: 0, error: e instanceof Error ? e.message.slice(0, 150) : String(e) };

package/src/autopilot/mission-notify.ts

@@ -6,6 +6,7 @@
 // (caller 가 sendOutbound 폴백). 봇 토큰은 저장 안 하고 config 에서만 읽는다.
 
 import { getUserConfig } from '../user-config.js';
+import { resolveChannelBotToken } from '../channel-bot-token.js';
 import { canUseUxAgent } from '../ux/ux-config.js';
 import { notifyMissionHitlViaUx } from './mission-ux-live.js';
 import { spawnSync } from 'node:child_process';
@@ -41,12 +42,13 @@ export function resolveTelegramBotToken(botId?: string): string | null {
       testChannel?: { botToken?: string };
     } | undefined;
     if (!tg) return null;
-    const candidates = [tg.botToken, tg.reportChannel?.botToken, tg.testChannel?.botToken]
+    const mainToken = resolveChannelBotToken('telegram', getUserConfig())?.token;
+    const candidates = [mainToken, tg.reportChannel?.botToken, tg.testChannel?.botToken]
       .filter((t): t is string => typeof t === 'string' && t.length > 0);
     if (botId) {
       return candidates.find((t) => t.split(':')[0] === botId) ?? null;
     }
-    return tg.botToken ?? null;
+    return mainToken ?? null;
   } catch { return null; }
 }
 

package/src/autopilot/mission-origin.ts

@@ -10,6 +10,7 @@
 import { mkdirSync, writeFileSync, readFileSync, existsSync } from 'node:fs';
 import { elanousStateRoot } from './state-paths.js';
 import { getUserConfig } from '../user-config.js';
+import { resolveChannelBotToken } from '../channel-bot-token.js';
 import { join } from 'node:path';
 
 export interface MissionOrigin {
@@ -59,14 +60,13 @@ export function loadMissionOrigin(missionId: string): MissionOrigin | null {
  */
 export function defaultTelegramOrigin(): MissionOrigin | null {
   try {
-    const tg = getUserConfig().telegram as {
-      homeChannel?: number | { chatId?: number };
-      botToken?: string;
-    } | undefined;
+    const cfg = getUserConfig();
+    const tg = cfg.telegram as { homeChannel?: number | { chatId?: number } } | undefined;
     if (!tg) return null;
     const chatId = typeof tg.homeChannel === 'number' ? tg.homeChannel : tg.homeChannel?.chatId;
     if (typeof chatId !== 'number') return null;
-    const botId = typeof tg.botToken === 'string' && tg.botToken.length > 0 ? tg.botToken.split(':')[0] : undefined;
+    const token = resolveChannelBotToken('telegram', cfg)?.token;
+    const botId = token ? token.split(':')[0] : undefined;
     return { channel: 'telegram', chatId, ...(botId ? { botId } : {}) };
   } catch { return null; }
 }

package/src/autopilot/mission-phase-track.ts

@@ -0,0 +1,52 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+type TrackEntry = { id: string; mark: string; owns: string[] };
+
+export function loadTrackRegistry(path = resolve(import.meta.dir, '../../scripts/coord-tracks.json')): TrackEntry[] {
+  try {
+    const data: unknown = JSON.parse(readFileSync(path, 'utf8'));
+    if (!data || typeof data !== 'object' || !('tracks' in data) || !Array.isArray(data.tracks)) return [];
+    return data.tracks.filter((track: unknown): track is TrackEntry =>
+      track !== null && typeof track === 'object' &&
+      'id' in track && typeof track.id === 'string' &&
+      'mark' in track && typeof track.mark === 'string' &&
+      'owns' in track && Array.isArray(track.owns) && track.owns.every((word: unknown) => typeof word === 'string'));
+  } catch {
+    return [];
+  }
+}
+
+export function inferPhaseTrack(text: string, registry: TrackEntry[]): {
+  track: string | null;
+  mark: string | null;
+  hits: Record<string, number>;
+  reason: 'keyword' | 'tie' | 'none';
+} {
+  const lower = text.toLocaleLowerCase();
+  const hits: Record<string, number> = {};
+  let max = 0;
+  for (const entry of registry) {
+    let count = 0;
+    for (const word of entry.owns) {
+      const needle = word.toLocaleLowerCase();
+      if (!needle) continue;
+      let from = 0;
+      const english = /[a-z]/i.test(needle);
+      while (true) {
+        const index = lower.indexOf(needle, from);
+        if (index < 0) break;
+        const before = lower[index - 1] ?? '';
+        const after = lower[index + needle.length] ?? '';
+        if (!english || (!/[\p{L}\p{N}_]/u.test(before) && !/[\p{L}\p{N}_]/u.test(after))) count++;
+        from = index + needle.length;
+      }
+    }
+    hits[entry.id] = count;
+    max = Math.max(max, count);
+  }
+  if (!max) return { track: null, mark: null, hits, reason: 'none' };
+  const winners = registry.filter((entry) => hits[entry.id] === max);
+  if (winners.length !== 1) return { track: null, mark: null, hits, reason: 'tie' };
+  return { track: winners[0]!.id, mark: winners[0]!.mark, hits, reason: 'keyword' };
+}

package/src/autopilot/mission-tool.ts

@@ -727,7 +727,7 @@ export async function dispatchAutopilotMissions(args: Record<string, unknown>):
       if (phaseRef) {
         // 페이즈 지정 시 PR 링크/노트를 항상 phase notes 에 추가(reconcile 이 최신 PR 로 인지) + status 선택 갱신.
         const phaseNotes = [
-          ...(pr ? [`[SE-PR] https://github.com/ElanvitalAI/monad/pull/${pr} (외부 주입)`] : []),
+          ...(pr ? [`[SE-PR] https://github.com/ElanvitalAI/elanous/pull/${pr} (외부 주입)`] : []),
           ...(note ? [`[EXTERNAL] ${note}`] : []),
         ];
         const upd = setPhaseStatusDirect(id, phaseRef, newStatus, phaseNotes);

package/src/autopilot/pr-manager.ts

@@ -9,11 +9,14 @@
 // 구현을 교체(누적 아님). 기존 PR 없으면 새로 생성.
 
 import { spawnSync } from 'node:child_process';
+import { githubAutomationToken } from '../auth/github-app-token.js';
 import { debug } from '../debug/log.js';
+import { POD_GITHUB_CREDENTIAL_TOKEN_ENV, POD_GITHUB_CREDENTIAL_URL_ENV } from '../nexus/api/pod-credential-api.js';
 import { runGitWithRetry } from '../git-fs/retry.js';
 import { DEFAULT_BRANCH_WORKTREE_BASE } from '../git-fs/worktree.js';
 import { isElanousRuntimeArtifactPath } from '../self-implement/gate-scope.js';
 import { isTransientExecutionFailure } from '../self-dev/execution-transient.js';
+import { withGhRestFallback } from './gh-rest-fallback.js';
 
 /** ★ stderr 캡처(대표 2026-07-21·관측 갭) — 종전엔 stdout 만 담아 git/gh 실패 사유가 소실됐다
  *  (705308: makePr 실패가 bare null 로 뭉뚱그려져 triage 가 "인증·네트워크"로 환각 오라우팅).
@@ -22,12 +25,55 @@ export interface CmdResult { ok: boolean; out: string; err?: string }
 /** 명령 실행 추상화(주입형·테스트 스텁) — git/gh 를 실제로 돌리지 않고 로직 검증. */
 export type CmdRunner = (cmd: string, args: readonly string[], opts?: { cwd?: string }) => CmdResult;
 
+const GH_TOKEN_REFRESH_WINDOW_MS = 10 * 60_000;
+let cachedRelayToken: { url: string; bearer: string; original: string | undefined; token: string; expiresAt: number } | undefined;
+
+/** The runner is synchronous; ask the host relay synchronously before starting gh. */
+function relayGhToken(env: NodeJS.ProcessEnv): string | null {
+  const url = env[POD_GITHUB_CREDENTIAL_URL_ENV];
+  const bearer = env[POD_GITHUB_CREDENTIAL_TOKEN_ENV];
+  if (!url || !bearer) return null;
+  const now = Date.now();
+  const original = env.GH_TOKEN;
+  if (cachedRelayToken?.url === url && cachedRelayToken.bearer === bearer && cachedRelayToken.original === original
+    && now + GH_TOKEN_REFRESH_WINDOW_MS < cachedRelayToken.expiresAt) return cachedRelayToken.token;
+  try {
+    const response = spawnSync('curl', [
+      '--silent', '--show-error', '--fail', '--noproxy', '*', '--max-time', '10',
+      '--request', 'POST', '--header', '@-', url,
+    ], { input: `Authorization: Bearer ${bearer}\n`, encoding: 'utf8', timeout: 12_000, maxBuffer: 64 * 1024, env });
+    if (response.error || response.status !== 0) throw new Error('request-failed');
+    const body: unknown = JSON.parse(response.stdout);
+    const token = body && typeof body === 'object' ? (body as { token?: unknown }).token : undefined;
+    const expiry = body && typeof body === 'object' ? (body as { expires_at?: unknown }).expires_at : undefined;
+    const expiresAt = typeof expiry === 'string' ? Date.parse(expiry) : NaN;
+    if (typeof token !== 'string' || !token || !Number.isFinite(expiresAt) || expiresAt <= now + GH_TOKEN_REFRESH_WINDOW_MS) throw new Error('invalid-response');
+    cachedRelayToken = { url, bearer, original, token, expiresAt };
+    return token;
+  } catch {
+    debug.log('pr-manager', 'gh-token', { reason: 'refresh-failed' }, { level: 'warn' });
+    return cachedRelayToken?.url === url && cachedRelayToken.bearer === bearer && cachedRelayToken.original === original
+      && now < cachedRelayToken.expiresAt ? cachedRelayToken.token : null;
+  }
+}
+
+/** Environment for a `gh` call made by automation: the Pod relay token, else the GitHub App token when the
+ *  caller set no GH_TOKEN — so PRs, merges and PR comments all act as the App, not the person logged into `gh`. */
+export function ghAutomationEnv(env: NodeJS.ProcessEnv = process.env, appToken: () => string | null = githubAutomationToken): NodeJS.ProcessEnv {
+  const token = relayGhToken(env) ?? (!Object.hasOwn(env, 'GH_TOKEN') ? appToken() : null);
+  return token ? { ...env, GH_TOKEN: token } : env;
+}
+
 /** 기본 러너 — spawnSync(dep-free). 실패/예외는 ok=false. stdout·stderr 모두 캡처. */
 export const defaultCmdRunner: CmdRunner = (cmd, args, opts) => {
   try {
-    // env: process.env — 최소 PATH(cron)에서도 ensure-bin-path 보강 PATH 로 gh 를 찾도록 명시 전달.
-    const r = spawnSync(cmd, [...args], { encoding: 'utf-8', timeout: 120_000, env: process.env, ...(opts?.cwd ? { cwd: opts.cwd } : {}) });
-    return { ok: r.status === 0, out: (r.stdout ?? '').trim(), err: (r.stderr ?? '').trim() };
+    // Relay only applies to gh; without it, retain caller GH_TOKEN and the existing App fallback.
+    const env = cmd === 'gh' ? ghAutomationEnv(process.env) : process.env;
+    // bun ≥1.4 applies Node's 1MB default maxBuffer and silently truncates (`gh pr diff`, file lists) — raise it and
+    // never read an overflow as success.
+    const r = spawnSync(cmd, [...args], { encoding: 'utf-8', timeout: 120_000, maxBuffer: 256 * 1024 * 1024, env, ...(opts?.cwd ? { cwd: opts.cwd } : {}) });
+    const overflow = (r.error as NodeJS.ErrnoException | undefined)?.code === 'ENOBUFS';
+    return { ok: r.status === 0 && !overflow, out: (r.stdout ?? '').trim(), err: [(r.stderr ?? '').trim(), overflow ? 'output exceeded 256MiB (ENOBUFS)' : ''].filter(Boolean).join('\n') };
   } catch (e) { return { ok: false, out: '', err: e instanceof Error ? e.message : String(e) }; }
 };
 
@@ -259,7 +305,8 @@ function isTransientPushFailure(detail: string): boolean {
 }
 
 /** ★ PR 매니저 팩토리(대표 2026-07-12) — CmdRunner 주입(테스트 스텁). 실 배선은 기본 러너. */
-export function makePrManager(run: CmdRunner = defaultCmdRunner): PrManager {
+export function makePrManager(runner: CmdRunner = defaultCmdRunner): PrManager {
+  const run = withGhRestFallback(runner);
   const findPrForBranchOutcome = (branch: string, cwd?: string): FindPrForBranchOutcome => {
     // ⛔ 표식은 base 를 「생략했다」는 뜻이지 브랜치 이름이 아니다. 그대로 `gh --head` 로 넘기면
     //    gh 가 `no pull requests found for branch "elanous:default-branch"` 를 stderr 로 뱉는다.