elanous 0.2.0 → 0.2.5

package/scripts/install-role-watch.sh

@@ -0,0 +1,95 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+mode=dry-run
+for arg in "$@"; do
+  case "$arg" in
+    --dry-run) mode=dry-run ;;
+    --apply) mode=apply ;;
+    *) echo "unknown option: $arg" >&2; exit 2 ;;
+  esac
+done
+
+os="${ROLE_WATCH_OS:-$(uname -s)}"
+case "$os" in
+  Darwin|macOS) os=Darwin; target="$HOME/Library/LaunchAgents/com.elanous.role-watch.plist" ;;
+  Linux) target="${XDG_CONFIG_HOME:-$HOME/.config}/systemd/user/elanous-role-watch.service" ;;
+  *) echo "unsupported OS: $os" >&2; exit 2 ;;
+esac
+
+# Pin the installed CLI path, not the caller's checkout. PATH is unreliable in launchd/systemd.
+cli="${ROLE_WATCH_CLI:-${ELANOUS_INSTALL_PREFIX:-${XDG_DATA_HOME:-$HOME/.local/share}/elanous}/bin/elanous}"
+case "$cli" in /*) ;; *) echo "role watch CLI must be an absolute path" >&2; exit 2 ;; esac
+case "$cli$target" in *$'\n'*|*$'\r'*) echo "newline in service path" >&2; exit 2 ;; esac
+xml_escape() {
+  local s="$1"
+  s="${s//&/\&amp;}"; s="${s//</\&lt;}"; s="${s//>/\&gt;}"; s="${s//\"/\&quot;}"
+  printf '%s' "$s"
+}
+render() {
+  if [ "$os" = Darwin ]; then
+    cat <<EOF
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>com.elanous.role-watch</string>
+  <key>ProgramArguments</key><array><string>$(xml_escape "$cli")</string><string>role</string><string>watch</string></array>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>ThrottleInterval</key><integer>10</integer>
+</dict></plist>
+EOF
+  else
+    # systemd ExecStart accepts a quoted absolute executable path.
+    local escaped="$cli"
+    escaped="${escaped//\\/\\\\}"; escaped="${escaped//\"/\\\"}"; escaped="${escaped//%/%%}"
+    cat <<EOF
+[Unit]
+Description=elanous role watch
+[Service]
+Type=simple
+ExecStart="$escaped" role watch
+Restart=always
+RestartSec=10
+[Install]
+WantedBy=default.target
+EOF
+  fi
+}
+
+echo "role watch unit: $target"
+echo "command: $cli role watch"
+if [ "$mode" = dry-run ]; then
+  render
+  if [ "$os" = Linux ]; then echo 'apply: verify or enable systemd user lingering (loginctl enable-linger) for boot-before-login'; fi
+  echo 'dry-run: no files written'
+  exit 0
+fi
+if [ ! -x "$cli" ]; then echo "installed elanous CLI not executable: $cli" >&2; exit 1; fi
+if [ "$os" = Linux ]; then
+  user="$(id -un)"
+  linger="$(loginctl show-user "$user" --property=Linger --value)" || {
+    echo "cannot verify systemd user lingering; boot watch not configured" >&2; exit 1;
+  }
+  if [ "$linger" != yes ]; then
+    if ! loginctl enable-linger "$user"; then
+      echo "cannot enable systemd user lingering; boot watch not configured" >&2; exit 1
+    fi
+    linger="$(loginctl show-user "$user" --property=Linger --value)" || {
+      echo "cannot verify systemd user lingering; boot watch not configured" >&2; exit 1;
+    }
+  fi
+  if [ "$linger" != yes ]; then
+    echo "systemd user lingering is not enabled; boot watch not configured" >&2; exit 1
+  fi
+fi
+mkdir -p "$(dirname "$target")"
+render > "$target"
+if [ "$os" = Darwin ]; then
+  launchctl bootout "gui/$(id -u)/com.elanous.role-watch" 2>/dev/null || true
+  launchctl bootstrap "gui/$(id -u)" "$target"
+else
+  systemctl --user daemon-reload
+  systemctl --user enable --now elanous-role-watch.service
+fi
+"$cli" role watch --once

package/scripts/install.ps1

@@ -221,7 +221,17 @@ try {
   New-Item -ItemType Directory -Force -Path $binDirectory | Out-Null
   $shimPath = Join-Path $binDirectory 'elanous.cmd'
   # The shim names bun by its absolute path so `elanous` works in a shell whose PATH lacks ~\.bun\bin.
-  Set-Content -LiteralPath $shimPath -Value "@echo off`r`n`"$bunPath`" `"%~dp0..\current\node_modules\elanous\bin\elanous.mjs`" %*`r`n" -NoNewline -Encoding ascii
+  $shimContent = "@echo off`r`nrem elanous-wrapper`r`n`"$bunPath`" `"%~dp0..\current\node_modules\elanous\bin\elanous.mjs`" %*`r`n"
+  Set-Content -LiteralPath $shimPath -Value $shimContent -NoNewline -Encoding ascii
+  $elnShim = Join-Path $binDirectory 'eln.cmd'
+  $pathEln = Get-Command eln -ErrorAction SilentlyContinue
+  if (($pathEln -and $pathEln.Source -ne $elnShim) -or
+      ((Test-Path -LiteralPath $elnShim) -and ((Get-Item -LiteralPath $elnShim -Force).Attributes -band [IO.FileAttributes]::ReparsePoint -or
+        (Read-Text $elnShim) -notmatch '(?m)^rem elanous-wrapper\r?$'))) {
+    Write-Output 'WARNING eln: another command already exists; use elanous instead'
+  } else {
+    Set-Content -LiteralPath $elnShim -Value $shimContent -NoNewline -Encoding ascii
+  }
 
   $installedPackage = Join-Path $Prefix 'current\node_modules\elanous\package.json'
   if (-not (Test-Path -LiteralPath $installedPackage)) { Fail "package version missing: $installedPackage" 1 }

package/scripts/install.sh

@@ -4,7 +4,7 @@
 # 🆕 2026-09-24 (결정 「sh 를 실행하면 알아서 설치되는 구조」) — claude·grok 의 네이티브 설치기와 같은 모양:
 #   $PREFIX/versions/<version>[-<커밋12>]/ 판별 본체(각자 node_modules) ← 옛 판은 남는다(롤백 · 체크아웃 설치는 커밋이 이름)
 #   $PREFIX/current  → versions/<version>                                ← 전환은 심링크 하나
-#   $PREFIX/bin/elanous → ../current/node_modules/.bin/elanous               ← PATH 에 넣는 «고정» 경로
+#   $PREFIX/bin/elanous → current 판을 절대 경로 bun 으로 실행하는 sh 래퍼     ← PATH 에 넣는 «고정» 경로
 #   ⛔ 기본 PREFIX 는 상태 폴더(~/.elanous)가 «아니다» — 설치물과 상태(auth·logs·worktrees)를 가른다.
 #   bun 이 없으면 공식 설치기로 먼저 깐다(--no-bootstrap-bun 으로 끈다).
 set -euo pipefail
@@ -159,8 +159,13 @@ done
 #    $PREFIX/bin/bun 링크 «자신»을 가리켰고, `ln -sfn` 이 그것을 자기 자신으로 덮어 고리를 만들었다
 #    (`bun: Too many levels of symbolic links` · 설치 rc 127 · 이후 `elanous` 가 전부 죽음). 업데이트·재설치 경로 전부가 여기를 지난다.
 BUN_EXEC="$(bun -e 'process.stdout.write(process.execPath)' 2>/dev/null || true)"
-# bun 이 경로를 못 대면(비정상 bun) 예전처럼 PATH 의 이름으로 물러선다 — 그 이름이 우리 링크 자신이면 아래에서 다시 잇지 않는다.
-{ [ -n "$BUN_EXEC" ] && [ -x "$BUN_EXEC" ]; } || BUN_EXEC="$(command -v bun)"
+# 래퍼에는 PATH 에 의존하지 않는 절대 실행 경로만 박는다. bun 이 경로를 못 대면(비정상 bun) PATH 에서 찾은 절대 경로로 물러서고,
+# 그래도 절대 경로가 없으면 설치를 중단한다.
+{ [ -n "$BUN_EXEC" ] && [ -x "$BUN_EXEC" ]; } || BUN_EXEC="$(command -v bun 2>/dev/null || true)"
+case "$BUN_EXEC" in
+  /*) [ -x "$BUN_EXEC" ] || { echo "⛔ bun executable is not available: $BUN_EXEC" >&2; exit 127; } ;;
+  *) echo '⛔ bun executable absolute path is unavailable' >&2; exit 127 ;;
+esac
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" && pwd -P)"
 REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
@@ -189,9 +194,16 @@ if [ "$MODIFY_PATH" -eq 1 ]; then
   fi
   # bash 는 로그인 셸이 ~/.profile 을 읽고, ~/.bashrc 는 «비대화형이면 맨 앞에서 return» 한다(Debian 기본).
   # 🩸 2026-09-25 빈 debian:12 컨테이너: `bash -lc elanous`(= ssh 원격 명령·스크립트) → command not found. 그래서 ~/.profile 에도 쓴다.
+  # zsh 도 같다: ~/.zshrc 는 «대화형» 만 읽고 `ssh host cmd`(비대화형)는 ~/.zshenv 만 읽는다.
+  # 🩸 2026-09-28 node-b: ssh 원격 명령이 설치본을 못 찾아 🅣 의 원격 실행 태스크가 not-done 이 됐다. 그래서 ~/.zshenv 에도 쓴다.
   LOGIN_STARTUP=""
+  if [ -z "${ELANOUS_SHELL_STARTUP:-}" ] && [ "$STARTUP" = "$HOME/.zshrc" ]; then
+    LOGIN_STARTUP="$HOME/.zshenv"
+  fi
   if [ -z "${ELANOUS_SHELL_STARTUP:-}" ] && [ "$STARTUP" = "$HOME/.bashrc" ]; then
     LOGIN_STARTUP="$HOME/.profile"
+  fi
+  if [ -n "$LOGIN_STARTUP" ]; then
     touch "$LOGIN_STARTUP"
     if grep -Fqx "$MARKER_START" "$LOGIN_STARTUP" && ! grep -Fqx "$PATH_LINE" "$LOGIN_STARTUP"; then
       echo "⛔ PATH block in $LOGIN_STARTUP already points to a different installation prefix" >&2
@@ -305,11 +317,25 @@ fi
 rm -rf "$NATIVE_SHIM"
 ln -sfn "versions/$VERSION_NAME" "$PREFIX/current"
 mkdir -p "$PREFIX/bin"
-ln -sfn ../current/node_modules/.bin/elanous "$PREFIX/bin/elanous"
-chmod +x "$PREFIX/bin/elanous"
-# elanous 엔트리는 `#!/usr/bin/env bun` 이다 — bun 도 같은 bin 에 둬서 PATH 한 줄로 둘 다 잡히게 한다.
-# 🩸 2026-09-25 빈 debian:12 컨테이너: bun 설치기는 ~/.bun/bin 을 ~/.bashrc 에만 써서(비대화형이면 안 읽힌다)
-#    로그인 셸에서 elanous 는 찾았는데 `/usr/bin/env: 'bun': No such file or directory` 로 죽었다.
+# 절대 bun 경로를 설치 때 박고 엔트리는 current 를 거친다 — cron/systemd 의 짧은 PATH 와 판 전환 모두 지원.
+WRAPPER="$PREFIX/bin/.elanous-$$"
+printf '#!/bin/sh\n# elanous-wrapper\nif [ ! -x %s ]; then\n  printf '\''bun 을 찾을 수 없습니다: %%s — 설치기를 다시 실행하세요\\n'\'' %s >&2\n  exit 127\nfi\nexec %s %s "$@"\n' \
+  "$(shell_quote "$BUN_EXEC")" "$(shell_quote "$BUN_EXEC")" "$(shell_quote "$BUN_EXEC")" \
+  "$(shell_quote "$PREFIX/current/node_modules/elanous/bin/elanous.mjs")" > "$WRAPPER"
+chmod +x "$WRAPPER"
+mv -f "$WRAPPER" "$PREFIX/bin/elanous"
+ELN="$PREFIX/bin/eln"
+ELN_ON_PATH="$(command -v eln 2>/dev/null || true)"
+if { [ -n "$ELN_ON_PATH" ] && [ "$ELN_ON_PATH" != "$ELN" ]; } ||
+   { { [ -e "$ELN" ] || [ -L "$ELN" ]; } &&
+     { [ -L "$ELN" ] || [ ! -f "$ELN" ] || [ "$(sed -n '2p' "$ELN")" != '# elanous-wrapper' ]; }; }; then
+  echo '⚠ eln: 이미 다른 명령이 있어 만들지 않았다 — elanous 로 쓰십시오'
+  ELN_AVAILABLE=0
+else
+  cp "$PREFIX/bin/elanous" "$ELN"
+  ELN_AVAILABLE=1
+fi
+# 대화형 셸은 bun 도 같은 bin 에서 찾는다(래퍼 자체는 이 링크나 PATH 에 의존하지 않는다).
 case "$BUN_EXEC" in
   "$PREFIX/bin/bun"|"$PREFIX/bin/bun/") ;;   # 자기 자신에게 잇지 않는다(고리)
   *) ln -sfn "$BUN_EXEC" "$PREFIX/bin/bun" ;;
@@ -360,6 +386,48 @@ if ! grep -q '"openai-codex"' "$HOME/.elanous/auth.json" 2>/dev/null; then
 fi
 # 🆕 2026-09-24 빈 VM 실측: 하니스(codex 백엔드)는 Codex CLI 를 자식으로 띄우는데 빈 기계엔 codex·node 가 «둘 다» 없었다.
 #    ⚠️ 아래 설치 줄은 빈 기계에서 아직 «안 쟀다» — `elanous doctor` 의 codex 줄이 판정한다.
+# C++20 toolchain must precede node-pty's rebuild; only suggest missing prerequisites.
+if ! command -v make >/dev/null 2>&1 || ! command -v c++ >/dev/null 2>&1; then
+  case "$(uname -s)" in
+    Darwin) BUILD_HINT='xcode-select --install' ;;
+    Linux)
+      OS_ID='' OS_LIKE=''
+      if [ -r "${ELANOUS_INSTALL_OS_RELEASE_FILE:-/etc/os-release}" ]; then
+        while IFS='=' read -r key value; do
+          value="${value#\"}"; value="${value%\"}"
+          case "$key" in ID) OS_ID="$value" ;; ID_LIKE) OS_LIKE="$value" ;; esac
+        done < "${ELANOUS_INSTALL_OS_RELEASE_FILE:-/etc/os-release}"
+      fi
+      BUILD_HINT=''
+      case " $OS_ID $OS_LIKE " in
+        *' debian '*|*' ubuntu '*) BUILD_HINT='sudo apt-get install -y build-essential' ;;
+        *' fedora '*) BUILD_HINT='sudo dnf groupinstall -y "Development Tools"' ;;
+      esac ;;
+    *) BUILD_HINT='' ;;
+  esac
+  if [ -n "$BUILD_HINT" ]; then
+    echo "  $STEP) $BUILD_HINT"; STEP=$((STEP + 1))
+  fi
+  echo "  $STEP) elanous doctor --fix --yes       # rebuild node-pty after installing build tools"; STEP=$((STEP + 1))
+fi
+if ! command -v rg >/dev/null 2>&1; then
+  if [ -z "${OS_ID:-}" ] && [ -r "${ELANOUS_INSTALL_OS_RELEASE_FILE:-/etc/os-release}" ]; then
+    while IFS='=' read -r key value; do
+      value="${value#\"}"; value="${value%\"}"
+      case "$key" in ID) OS_ID="$value" ;; ID_LIKE) OS_LIKE="$value" ;; esac
+    done < "${ELANOUS_INSTALL_OS_RELEASE_FILE:-/etc/os-release}"
+  fi
+  case "$(uname -s)" in
+    Darwin) RG_HINT='brew install ripgrep' ;;
+    Linux) case " ${OS_ID:-} ${OS_LIKE:-} " in
+      *' debian '*|*' ubuntu '*) RG_HINT='sudo apt-get install -y ripgrep' ;;
+      *' fedora '*) RG_HINT='sudo dnf install -y ripgrep' ;;
+      *) RG_HINT='install ripgrep (rg) with your package manager' ;;
+    esac ;;
+    *) RG_HINT='install ripgrep (rg) with your package manager' ;;
+  esac
+  echo "  $STEP) $RG_HINT"; STEP=$((STEP + 1))
+fi
 if ! command -v codex >/dev/null 2>&1; then
   if ! command -v node >/dev/null 2>&1; then
     echo "  $STEP) install Node.js 20+ (the Codex CLI runs on node)   # e.g. your package manager or https://nodejs.org"; STEP=$((STEP + 1))
@@ -371,5 +439,9 @@ if ! command -v gh >/dev/null 2>&1; then
 elif ! gh auth status >/dev/null 2>&1; then
   echo "  $STEP) gh auth login                     # the harness opens pull requests with it"; STEP=$((STEP + 1))
 fi
-echo "  $STEP) elanous harness say \"<one line of what you want>\""
+if [ "$ELN_AVAILABLE" -eq 1 ]; then
+  echo "  $STEP) eln harness say \"<one line of what you want>\" (or: elanous harness say)"
+else
+  echo "  $STEP) elanous harness say \"<one line of what you want>\""
+fi
 echo "  check anytime: elanous setup --non-interactive"

package/scripts/isolation-hardcode-baseline.txt

@@ -12,6 +12,7 @@
 1	src/background-reasoning/patcher-config.ts
 1	src/budget/codex-reset-credit-state.ts
 1	src/cli/config-test-sync.ts
+1	src/cli/fleet-cli.ts
 2	src/cli/logs-cli.ts
 1	src/cli/nexus-dist.ts
 1	src/cli/nexus-ios-bind.ts
@@ -31,7 +32,6 @@
 1	src/domains/signal-dedup.ts
 1	src/expression/config/answer-file.ts
 1	src/hitl/audit-log.ts
-1	src/index.ts
 1	src/input-core/user-config-loader.ts
 2	src/instance/leader.ts
 1	src/instance/nexus-run-refusal.ts

package/scripts/landing-heal/must-fix-match.ts

@@ -0,0 +1,63 @@
+import { parse } from '../../src/agent-substrate/pr-comment-meta.js';
+
+export type MustFixVerdict = 'resolved' | 'unresolved' | 'unknown';
+export interface ReviewRoundMatch {
+  text: string;
+  verdict: 'rereviewed' | 'open';
+  run: string;
+  round: number;
+}
+
+/** A later reviewer round in the same run is evidence of rereview, not proof of repair. */
+const MUST_FIX_ROUND = /^Round \d+: reviewer requested \d+ must-fix change\(s\)\.$/m;
+
+export function classifyReviewRounds(comments: Array<{ body?: string }>): ReviewRoundMatch[] {
+  const reviews = comments.flatMap(({ body }) => {
+    if (!body) return [];
+    const meta = parse(body);
+    return meta?.role === 'reviewer' && meta.run && meta.round !== undefined
+      ? [{ body, run: meta.run, round: meta.round }] : [];
+  });
+  // 항목은 «must-fix 요청» 라운드에서만 센다 — «review completed (warn)» 의 요약 본문에도 «- » 글머리가 들어 있다(#21983 실물).
+  return reviews.flatMap(({ body, run, round }) => !MUST_FIX_ROUND.test(body) ? [] :
+    [...body.matchAll(/^- (.+)$/gm)].map((item) => ({
+      text: item[1]!, run, round,
+      verdict: reviews.some((review) => review.run === run && review.round > round) ? 'rereviewed' as const : 'open' as const,
+    })));
+}
+
+/** Match only named evidence in a PR's final patch, never an earlier review round. */
+export function matchMustFix(mustFix: string, finalDiff: string): MustFixVerdict {
+  const names = [...mustFix.matchAll(/`([^`\n]+)`/g)].map((match) => match[1]!.trim()).filter(Boolean);
+  if (!names.length) return 'unknown';
+  const files = [...finalDiff.matchAll(/^diff --git a\/(.+) b\/(.+)$/gm)].map((match) => ({
+    path: match[2]!, start: match.index!,
+  }));
+  if (!files.length) return 'unresolved';
+  const fileNames = names.filter((name) => /\.(?:[a-z][a-z0-9]*)$/i.test(name) && !name.includes('('));
+  const target = names.find((name) => !fileNames.includes(name) && name.endsWith('()'))
+    ?? names.find((name) => !fileNames.includes(name));
+  if (!fileNames.length && !target) return 'unknown';
+  const symbol = target?.replace(/\(\)$/, '');
+  const boundary = symbol ? new RegExp(`(^|[^\\w$])${symbol.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?![\\w$])`) : null;
+  // Review transport adds a must-fix label; it does not change the request.
+  const request = mustFix.replace(/^\s*must[-\s]?fix\s*:\s*/i, '').trim();
+  const touchOnly = /^`[^`\n]+`\s*(?:을|를)\s*확인해\s*주세요\.?$/.test(request);
+  for (const [index, file] of files.entries()) {
+    if (fileNames.length && !fileNames.some((name) => file.path === name || file.path.endsWith(`/${name}`))) continue;
+    const patch = finalDiff.slice(file.start, files[index + 1]?.start ?? finalDiff.length);
+    for (const hunk of patch.split(/(?=^@@ )/m).slice(1)) {
+      const changes = hunk.split('\n').filter((line) => /^[+-](?![+-])/.test(line));
+      if (!changes.length) continue;
+      const changedSymbol = !boundary || changes.some((line) => boundary.test(line));
+      if (!changedSymbol && boundary && !boundary.test(hunk.split('\n', 1)[0] ?? '')) continue;
+      if (touchOnly) {
+        if (changedSymbol) return 'resolved';
+        continue;
+      }
+      if (!changedSymbol && !changes.some((line) => /\b(?:markStopped|unlinkSync|rmSync)\b/.test(line))) continue;
+      return 'unknown';
+    }
+  }
+  return 'unresolved';
+}

package/scripts/landing-heal/run-mission.ts

@@ -0,0 +1,195 @@
+#!/usr/bin/env bun
+import { spawnSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { githubAutomationToken } from '../../src/auth/github-app-token.js';
+import { debug } from '../../src/debug/log.js';
+import { emitDecision } from '../../src/live/detail-switch.js';
+import { parse } from '../../src/agent-substrate/pr-comment-meta.js';
+import { classifyReviewRounds, matchMustFix, type MustFixVerdict } from './must-fix-match.js';
+
+interface PullRequest {
+  number: number;
+  title: string;
+  state: string;
+  mergedAt: string | null;
+  headRefName: string;
+  files: Array<{ path: string }>;
+}
+interface Match { pr: number; text: string; verdict: MustFixVerdict | 'rereviewed' | 'open'; run?: string; round?: number; resolvedIn?: number[] }
+interface GraphContext { runId?: string; input?: { windowMinutes?: number; mustFixByPr?: Record<string, string[]> }; outputs?: Record<string, unknown>; decision?: typeof emitDecision }
+export type RunCommand = (args: string[]) => string;
+// 상주 루프(30분마다)는 사람 계정 한도를 쓰지 않는다 — 부른 쪽이 GH_TOKEN 을 주지 않았으면 GitHub App 설치 토큰으로(09-29 한도 소진).
+// 발급 함수마다 한 번(프로세스 전역 한 칸이면 앞선 호출의 진짜 토큰이 주입한 가짜를 이긴다 — 09-29 시험 실패 출력에 토큰이 찍혔다).
+const minted = new WeakMap<() => string | null, string | null>();
+export function ghEnv(env: NodeJS.ProcessEnv = process.env, mint: () => string | null = githubAutomationToken): NodeJS.ProcessEnv {
+  if (Object.hasOwn(env, 'GH_TOKEN')) return env;
+  if (!minted.has(mint)) minted.set(mint, mint());
+  const appToken = minted.get(mint);
+  debug.log('landing-heal', 'gh-token', { source: appToken ? 'github-app' : 'caller' });
+  return appToken ? { ...env, GH_TOKEN: appToken } : env;
+}
+// 상주 루프는 설치본 폴더(git 저장소 아님)에서 돈다 — `gh` 가 저장소를 추론 못 해 첫 cron 바퀴가 collect 에서 죽었다(09-29 21:00).
+// 부른 쪽이 GH_REPO 를 주지 않았고 cwd 가 git 저장소가 아니면, App 설치의 저장소가 «정확히 하나»일 때 그것을 쓴다(모르면 멈춘다).
+export async function ghRepoEnv(env: NodeJS.ProcessEnv, cwd: string, list: (token: string) => Promise<string[]> = installationRepos): Promise<NodeJS.ProcessEnv> {
+  if (Object.hasOwn(env, 'GH_REPO') || insideGitCheckout(cwd)) return env;
+  const token = env.GH_TOKEN;
+  if (!token) throw new Error('GitHub repository unknown outside a git checkout — set GH_REPO');
+  const repos = await list(token);
+  if (repos.length !== 1) throw new Error(`GitHub repository unknown outside a git checkout — App installation has ${repos.length} repositories; set GH_REPO`);
+  debug.log('landing-heal', 'gh-repo', { source: 'github-app-installation', repo: repos[0] });
+  return { ...env, GH_REPO: repos[0] };
+}
+function insideGitCheckout(cwd: string): boolean {
+  for (let dir = resolve(cwd); ; dir = dirname(dir)) {
+    if (existsSync(join(dir, '.git'))) return true;
+    if (dirname(dir) === dir) return false;
+  }
+}
+async function installationRepos(token: string): Promise<string[]> {
+  const response = await fetch('https://api.github.com/installation/repositories?per_page=2', { headers: { Authorization: `Bearer ${token}`, Accept: 'application/vnd.github+json' } });
+  if (!response.ok) throw new Error(`GitHub App installation repositories: HTTP ${response.status}`);
+  const body = await response.json() as { repositories?: Array<{ full_name?: string }> };
+  return (body.repositories ?? []).flatMap((repo) => repo.full_name ? [repo.full_name] : []);
+}
+let resolvedEnv: NodeJS.ProcessEnv | undefined;
+const gh: RunCommand = (args) => {
+  const result = spawnSync('gh', args, { encoding: 'utf8', maxBuffer: 32 * 1024 * 1024, env: resolvedEnv ?? ghEnv() });
+  if (result.error || result.status !== 0) throw new Error(`gh ${args.slice(0, 2).join(' ')} failed: ${result.stderr || String(result.error)}`);
+  return result.stdout;
+};
+
+function context(): GraphContext {
+  const path = process.env.ELANOUS_GRAPH_CONTEXT;
+  if (!path) throw new Error('ELANOUS_GRAPH_CONTEXT required');
+  return JSON.parse(readFileSync(path, 'utf8')) as GraphContext;
+}
+
+function output(ctx: GraphContext, node: string): Record<string, unknown> {
+  const value = ctx.outputs?.[node];
+  if (value && typeof value === 'object' && !Array.isArray(value)) return value as Record<string, unknown>;
+  if (typeof value === 'string') {
+    const line = value.trim().split('\n').at(-1);
+    if (line) return JSON.parse(line) as Record<string, unknown>;
+  }
+  throw new Error(`missing ${node} output`);
+}
+
+function pullRequests(ctx: GraphContext): PullRequest[] {
+  const value = output(ctx, 'collect').prs;
+  if (!Array.isArray(value)) throw new Error('missing collected PRs');
+  return value as PullRequest[];
+}
+
+/** 착지 뒤 검증 표식 — 코멘트 «첫 줄»이 `landing-verified:` 로 시작하고 뒤에 무엇이든 한 글자는 있어야 한다(빈 표식은 표식이 아니다). */
+export function isLandingVerified(body: string | undefined): boolean {
+  return /^landing-verified:\s*\S/.test((body ?? '').trimStart().split('\n')[0] ?? '');
+}
+
+/** 코멘트 «첫 줄»이 `must-fix resolved in #N[, #M]` 이면 그 PR 번호들. */
+export function resolvedInPrs(body: string | undefined): number[] {
+  const first = (body ?? '').trimStart().split('\n')[0] ?? '';
+  const match = /^must[-\s]?fix resolved in (#\d+(?:\s*,\s*#\d+)*)/i.exec(first);
+  return match ? [...match[1]!.matchAll(/#(\d+)/g)].map((m) => Number(m[1])) : [];
+}
+
+export function runMission(mission: string, ctx: GraphContext, run: RunCommand = gh, now = new Date()): Record<string, unknown> {
+  switch (mission) {
+    case 'collect': {
+      const minutes = ctx.input?.windowMinutes ?? 60;
+      if (!Number.isSafeInteger(minutes) || minutes < 1) throw new Error('windowMinutes must be a positive integer');
+      const since = new Date(now.getTime() - minutes * 60_000);
+      const rows = JSON.parse(run(['pr', 'list', '--state', 'all', '--search', `updated:>=${since.toISOString()}`, '--limit', '200', '--json', 'number,title,state,mergedAt,headRefName,files'])) as PullRequest[];
+      if (!Array.isArray(rows)) throw new Error('gh pr list did not return an array');
+      const prs = rows.filter((pr) => /^(?:self-impl\/|self-implement\/)/.test(pr.headRefName ?? '') &&
+        (pr.state === 'OPEN' || (pr.state === 'MERGED' && !!pr.mergedAt && Date.parse(pr.mergedAt) >= since.getTime())));
+      return { outcome: 'ok', prs, since: since.toISOString() };
+    }
+    case 'must-fix-match': {
+      const matches: Match[] = [];
+      for (const pr of pullRequests(ctx)) {
+        const details = JSON.parse(run(['pr', 'view', String(pr.number), '--json', 'reviews,comments'])) as {
+          reviews?: Array<{ body?: string }>;
+          comments?: Array<{ body?: string }>;
+        };
+        const pages = JSON.parse(run(['api', `repos/{owner}/{repo}/pulls/${pr.number}/comments`, '--paginate', '--slurp'])) as Array<Array<{ body?: string }>>;
+        if (!Array.isArray(pages) || !pages.every(Array.isArray)) throw new Error(`invalid review comments for PR #${pr.number}`);
+        const inline = pages.flat();
+        const comments = [...(details.reviews ?? []), ...(details.comments ?? []), ...inline];
+        const reviewRounds = comments.filter(({ body }) => {
+          const meta = body ? parse(body) : null;
+          return meta?.role === 'reviewer' && !!meta.run && meta.round !== undefined;
+        });
+        // 뒤 PR 로 고친 must-fix 는 원래 PR 에 첫 줄 `must-fix resolved in #N` 코멘트를 남긴다(🅞·🅣 09-29 합의) — 그 PR 의 «열린» 항목을 풀고, 그 코멘트 자체는 must-fix 로 세지 않는다.
+        const resolvedNotes = comments.filter(({ body }) => resolvedInPrs(body).length > 0);
+        const resolvedIn = [...new Set(resolvedNotes.flatMap(({ body }) => resolvedInPrs(body)))].sort((a, b) => a - b);
+        const classified = classifyReviewRounds(reviewRounds).map((item) => item.verdict === 'open' && resolvedIn.length
+          ? { ...item, verdict: 'resolved' as const, resolvedIn } : item);
+        const mustFixes = [...(ctx.input?.mustFixByPr?.[String(pr.number)] ?? []),
+          ...comments.filter((comment) => !reviewRounds.includes(comment) && !resolvedNotes.includes(comment))
+            .flatMap(({ body }) => body && /must[-\s]?fix/i.test(body) ? [body] : [])];
+        const diff = mustFixes.length ? run(['pr', 'diff', String(pr.number), '--patch']) : '';
+        const prMatches: Match[] = [
+          ...classified.map((item) => ({ pr: pr.number, ...item })),
+          ...mustFixes.map((text) => ({ pr: pr.number, text, verdict: matchMustFix(text, diff) })),
+        ];
+        matches.push(...prMatches);
+        debug.log('landing-heal', 'must-fix-classified', {
+          pr: pr.number,
+          rereviewed: prMatches.filter((item) => item.verdict === 'rereviewed').length,
+          open: prMatches.filter((item) => item.verdict === 'open').length,
+          unknown: prMatches.filter((item) => item.verdict === 'unknown').length,
+        });
+      }
+      return { outcome: 'ok', matches };
+    }
+    case 'verify-needed': {
+      const candidates = pullRequests(ctx)
+        .filter((pr) => pr.state === 'MERGED' && pr.files.some((file) => file.path.startsWith('apps/pwa/') || file.path.startsWith('src/')));
+      // 착지 뒤 검증을 끝낸 쪽은 PR 코멘트 첫 줄 `landing-verified: <sha> · <무엇을 쟀나>` 를 남긴다(🅞·🅣 09-29 합의) — 그 PR 은 뺀다.
+      const verified: number[] = [];
+      const verifyNeeded = candidates.filter((pr) => {
+        const { comments } = JSON.parse(run(['pr', 'view', String(pr.number), '--json', 'comments'])) as { comments?: Array<{ body?: string }> };
+        const done = (comments ?? []).some((comment) => isLandingVerified(comment.body));
+        if (done) verified.push(pr.number);
+        return !done;
+      }).map((pr) => pr.number);
+      return { outcome: 'ok', verifyNeeded, verified };
+    }
+    case 'report': {
+      const collected = pullRequests(ctx);
+      const prs = collected.length;
+      const matches = output(ctx, 'must-fix-match').matches as Match[];
+      const mustFixOpen = matches.filter((item) => item.verdict === 'open' || item.verdict === 'unresolved').length;
+      const mustFixUnknown = matches.filter((item) => item.verdict === 'unknown').length;
+      const mustFixRereviewed = matches.filter((item) => item.verdict === 'rereviewed').length;
+      const mustFixUnresolved = mustFixOpen + mustFixUnknown;
+      const verifyNeeded = output(ctx, 'verify-needed').verifyNeeded as number[];
+      const mergedPrs = new Set(collected.filter((pr) => pr.state === 'MERGED').map((pr) => pr.number));
+      const landedOpen = matches.filter((item) => item.verdict === 'open' && mergedPrs.has(item.pr));
+      const unresolved = matches.filter((item) => item.verdict === 'unresolved').length;
+      const openPrs = [...new Set(landedOpen.map((item) => item.pr))].sort((a, b) => a - b);
+      const open = landedOpen.length;
+      debug.log('landing-heal', 'tick', { prs, mustFixUnresolved, mustFixOpen, mustFixUnknown, mustFixRereviewed, verifyNeeded });
+      (ctx.decision ?? emitDecision)({
+        kind: 'VERIFY',
+        what: `착지·치유 관측: PR ${prs}건${open ? ` — 열린 must-fix ${open}건(PR ${openPrs.map((pr) => `#${pr}`).join(', ')})` : ''}`,
+        reason: `열린 채 착지 ${open}건 · 미해결 ${unresolved}건 · 미상 ${mustFixUnknown}건 · 다시 봄 ${mustFixRereviewed}건 · 착지 뒤 검증 필요 ${verifyNeeded.length}건`,
+        purpose: '착지 후속 작업 관측', target: 'landing-heal', ...(ctx.runId ? { runId: ctx.runId } : {}),
+      });
+      return { outcome: 'ok', prs, mustFixUnresolved, mustFixOpen, mustFixUnknown, mustFixRereviewed, verifyNeeded };
+    }
+    default: throw new Error(`unknown landing-heal mission: ${mission}`);
+  }
+}
+
+if (import.meta.main) {
+  try {
+    resolvedEnv = await ghRepoEnv(ghEnv(), process.cwd());
+    process.stdout.write(`${JSON.stringify(runMission(process.argv[2] ?? '', context()))}\n`);
+  }
+  catch (error) {
+    process.stderr.write(`${String(error)}\n`);
+    process.exitCode = 1;
+  }
+}