elanous 0.2.0 → 0.2.5

package/scripts/test-deterministic.ts

@@ -38,6 +38,7 @@ import { join } from 'node:path';
 // behind `import.meta.main` / `runDeterministicTests()`, but the filter stays
 // in the helper so an untested credential check cannot rot silently.
 import { isCredentialKey } from './lib/deterministic-env.js';
+import { envLiteral } from '../src/platform/env-literal.js';
 
 export const TEMP_ROOT_PREFIX = 'elanous-deterministic-test-';
 export const CHILD_EXIT_GRACE_MS = 2_000;
@@ -50,7 +51,24 @@ const HARNESS_TEST_ENV_KEYS = [
   'ELANOUS_HARNESS_BOUNDARY',
   'ELANOUS_HARNESS_ROLE',
   'ELANOUS_HARNESS_DETACHED',
+] as const;
+
+// Discovery: rg -n "process\.env\.ELANOUS_(HOST|RUN|ORIGIN|SUPERVISOR|PARENT)" src
+// These are ambient execution identities, not inputs to a deterministic test.
+// debug.log also attributes SUBSTRATE and ARM_ID to every plain-object record.
+const EXECUTION_ORIGIN_ENV_KEYS = [
+  'ELANOUS_HOST_ID',
   'ELANOUS_RUN_ID',
+  'ELANOUS_RUN_CONTEXT',
+  'ELANOUS_PARENT_RUN_ID',
+  'ELANOUS_PARENT_PTY_ID',
+  'ELANOUS_PARENT_SELF_DEV_RUNS_DIR',
+  'ELANOUS_SUBSTRATE',
+  'ELANOUS_ARM_ID',
+  // Parent account selection changes CLI rotation assertions in the child.
+  'ELANOUS_CODEX_ACCOUNT',
+  // A parent's derived-root label must not reclassify a test's explicit state dir.
+  'ELANOUS_STATE_DIR_SOURCE',
 ] as const;
 
 export type ShutdownSignal = 'SIGINT' | 'SIGTERM';
@@ -253,10 +271,16 @@ export async function terminateDirectChild(
 
 export function prepareIsolatedTestEnv(sourceEnv: NodeJS.ProcessEnv, testRoot: string): NodeJS.ProcessEnv {
   const env = Object.fromEntries(
-    Object.entries(sourceEnv).filter(([key]) => !isCredentialKey(key) && !HARNESS_TEST_ENV_KEYS.includes(key as typeof HARNESS_TEST_ENV_KEYS[number])),
+    Object.entries(sourceEnv).filter(([key]) => !isCredentialKey(key)
+      && !HARNESS_TEST_ENV_KEYS.includes(key as typeof HARNESS_TEST_ENV_KEYS[number])
+      && !EXECUTION_ORIGIN_ENV_KEYS.includes(key as typeof EXECUTION_ORIGIN_ENV_KEYS[number])),
   );
   env.HOME = testRoot;
-  env.XDG_CONFIG_HOME = join(testRoot, '.config');
+  // userConfigPath() warns whenever XDG_CONFIG_HOME is set, including when
+  // config.json is absent. Use its non-XDG path; migrateLegacyXdgUserConfig()
+  // resolves the old path through ELANOUS_TEST_HOME rather than the real home.
+  delete env.XDG_CONFIG_HOME;
+  env.ELANOUS_TEST_HOME = testRoot;
   // ⚠️ Redirect elanous's OWN roots explicitly — do not merely inherit them.
   // `ELANOUS_STATE_DIR` / `ELANOUS_CONFIG_DIR` are absolute paths that win over
   // HOME, so a developer who exports either one keeps pointing the "isolated"
@@ -266,15 +290,14 @@ export function prepareIsolatedTestEnv(sourceEnv: NodeJS.ProcessEnv, testRoot: s
   // isolation legible in the child's own environment rather than implied.
   env.ELANOUS_STATE_DIR = join(testRoot, 'state');
   env.ELANOUS_CONFIG_DIR = join(testRoot, 'config');
-  // A deterministic test child must not inherit the harness run identity:
-  // logger API-shape tests use its absence to validate legacy records.
-  delete env.ELANOUS_RUN_ID;
+  // All ambient execution identities are removed by EXECUTION_ORIGIN_ENV_KEYS
+  // above, before the child is spawned; logger API-shape tests need their absence.
   // ⚠️ No `ELANOUS_TEST_DETERMINISTIC` marker is exported. Nothing reads it yet,
   // and an env var with no consumer is a surface that looks like a contract
   // while guaranteeing nothing — a later test could branch on it believing it
   // means something. The tier work in PLAN-test-suite-diet introduces the
   // signal together with the code that honours it.
-  return env;
+  return envLiteral(env);
 }
 
 const defaultSpawn: SpawnDirectChild = (opts) => Bun.spawn({

package/scripts/tui-sim.ts

@@ -45,6 +45,10 @@ import {
   writeFileSync, appendFileSync, readFileSync, mkdirSync, readdirSync, existsSync, unlinkSync, rmSync, renameSync,
 } from 'node:fs';
 import { execFileSync } from 'node:child_process';
+import { resolve } from 'node:path';
+import { getCapturedEnv } from '../src/shell-env-bootstrap.js';
+import { identityEnvKeys } from '../src/agent/identity-env.js';
+import { resolveKeyBytes, resolveKeyInput, writeKeyInput } from './lib/tui-sim-keys.js';
 
 const sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));
 
@@ -91,14 +95,18 @@ function writeMeta(id: string, m: Meta): void {
   renameSync(tmp, metaPath(id));
 }
 
-// ── named keys → escape sequences ──
-const KEYS: Record<string, string> = {
-  enter: '\r', return: '\r', tab: '\t', 'shift-tab': '\x1b[Z', esc: '\x1b', escape: '\x1b',
-  space: ' ', backspace: '\x7f', delete: '\x1b[3~',
-  up: '\x1b[A', down: '\x1b[B', right: '\x1b[C', left: '\x1b[D',
-  pageup: '\x1b[5~', pagedown: '\x1b[6~', home: '\x1b[H', end: '\x1b[F',
-  'ctrl-c': '\x03', 'ctrl-d': '\x04', 'ctrl-u': '\x15', 'ctrl-a': '\x01', 'ctrl-e': '\x05',
-};
+// ── optional child credential isolation ──
+const CLEAN_ENV_KEYS = new Set([
+  'PATH', 'HOME', 'USER', 'LOGNAME', 'SHELL', 'LANG', 'TERM', 'COLORTERM', 'TZ', 'TMPDIR',
+  'LC_ALL', 'LC_CTYPE', 'LC_MESSAGES', 'LC_COLLATE', 'LC_NUMERIC', 'LC_TIME', 'LC_MONETARY',
+  'LC_PAPER', 'LC_NAME', 'LC_ADDRESS', 'LC_TELEPHONE', 'LC_MEASUREMENT', 'LC_IDENTIFICATION',
+]);
+
+/** Block everything except basic execution/locale variables after PTY env synthesis. */
+export function cleanPtyUnsetEnv(captured: Record<string, string>, parent: NodeJS.ProcessEnv): string[] {
+  return [...new Set([...Object.keys(captured), ...Object.keys(parent), ...identityEnvKeys()])]
+    .filter((key) => !CLEAN_ENV_KEYS.has(key));
+}
 
 // ── client: drop a command into inbox, optionally await result ──
 function argVal(args: string[], flag: string): string | null {
@@ -136,6 +144,10 @@ async function runDaemon(args: string[]): Promise<void> {
   const testMode = args.includes('--test');
   const autoWorktree = args.includes('--worktree');
   const explicitWorkdir = argVal(args, '--workdir');
+  const home = argVal(args, '--home');
+  const cleanEnv = args.includes('--clean-env');
+  if (args.includes('--home') && (!home || home.startsWith('--'))) { console.error('[tui-sim] --home requires a directory'); process.exit(1); }
+  const childHome = home ? resolve(home) : null;
   const cols = Number(argVal(args, '--cols')) || 220;
   const rows = Number(argVal(args, '--rows')) || 60;
   const bootSec = Number(argVal(args, '--boot')) || 8;
@@ -176,9 +188,12 @@ async function runDaemon(args: string[]): Promise<void> {
     + `# follow live:  tail -f ${forwardPath}\n\n`);
   console.error(`[tui-sim] start id=${id} workdir=${workdir} test=${testMode}`);
   console.error(`[tui-sim] 📡 live timeline → ${forwardPath}   (follow:  tail -f ${forwardPath})`);
+  if (childHome) mkdirSync(childHome, { recursive: true });
+  const unsetEnv = cleanEnv ? cleanPtyUnsetEnv(getCapturedEnv(), process.env) : undefined;
   const h: PtyHandle = startPty({
     cmd: 'bun', args: [binPath, ...isoArgs], cols, rows, workdir,
-    env: { ELANOUS_DRIVE_TUI: '1', ...(testMode ? { ELANOUS_STATE_DIR: testDir } : {}) },
+    env: { ELANOUS_DRIVE_TUI: '1', ...(testMode ? { ELANOUS_STATE_DIR: testDir } : {}), ...(childHome ? { HOME: childHome } : {}) },
+    ...(unsetEnv ? { unsetEnv } : {}),
   });
 
   const meta: Meta = {
@@ -296,9 +311,9 @@ async function runDaemon(args: string[]): Promise<void> {
           feed(text, verb === 'send');
           res = { ok: true, sent: text.length };
         } else if (verb === 'key') {
-          const seq = KEYS[String(cmd.name).toLowerCase()];
-          if (!seq) { res = { ok: false, error: `unknown key '${cmd.name}'` }; }
-          else { const n = Number(cmd.repeat) || 1; for (let i = 0; i < n; i++) h.write(seq); res = { ok: true }; }
+          const seq = resolveKeyInput(String(cmd.name));
+          if (seq === null) { res = { ok: false, error: `unknown key '${cmd.name}'` }; }
+          else { const n = Number(cmd.repeat) || 1; for (let i = 0; i < n; i++) writeKeyInput(h, seq); res = { ok: true }; }
         } else if (verb === 'mouse') {
           const x = Number(cmd.x), y = Number(cmd.y);
           const btn = cmd.button === 'right' ? 2 : cmd.button === 'middle' ? 1 : 0;
@@ -369,6 +384,23 @@ async function main(): Promise<void> {
   const verb = argv[0];
   const rest = argv.slice(1);
 
+  if (verb === '--help' || verb === 'help') {
+    console.log(`usage: tui-sim <verb> [args]
+  start [--id id] [--test] [--worktree] [--workdir dir] [--cols n] [--rows n]
+  start --home <dir>       Set the child TUI HOME (default: inherited).
+  start --clean-env        Allow only basic execution/locale env into the child (default: off).
+  send|type <id> <text>    Send text with|without Enter.
+  key <id> <name> [--repeat n]  Send a named key; unknown keys exit 1.
+  key names: enter/return/tab/shift-tab/esc/escape/space/backspace/delete/up/down/right/left/pageup/pagedown/home/end.
+  key ctrl-<a..z>         Send control byte (ctrl-j sends newline).
+  key ctrl-\\ | ctrl-]    Send 0x1c | 0x1d.
+  key alt-<key>           Send ESC followed by the named key or one character.
+  key shift-enter         Send ESC [ 13 ; 2 u.
+  key hex:<bytes>         Send raw hex bytes (e.g. hex:1b5b41).
+  resize <id> <cols> <rows>  Resize the running PTY.
+  mouse|dump|text|transcript|status|list|stop|promote|clean`);
+    return;
+  }
   if (verb === 'start') { await runDaemon(rest); return; }
 
   if (verb === 'list') {
@@ -394,9 +426,22 @@ async function main(): Promise<void> {
     }
     case 'key': {
       const name = rest[1];
+      if (!name || resolveKeyBytes(name) === null) { console.error(`알 수 없는 키 '${name}'`); process.exit(1); }
       const repeat = argVal(rest, '--repeat');
       const res = await sendCommand(id, 'key', { name, ...(repeat ? { repeat: Number(repeat) } : {}) }, true);
       console.log(res?.ok ? `✓ key ${name}` : `✗ ${res?.error}`);
+      if (!res?.ok) process.exitCode = 1;
+      break;
+    }
+    case 'resize': {
+      const cols = Number(rest[1]), rows = Number(rest[2]);
+      if (!Number.isSafeInteger(cols) || cols < 2 || !Number.isSafeInteger(rows) || rows < 2) {
+        console.error('usage: tui-sim resize <id> <cols> <rows> (positive integers >= 2)');
+        process.exit(1);
+      }
+      const res = await sendCommand(id, 'resize', { cols, rows }, true);
+      console.log(res?.ok ? `✓ resize ${cols}x${rows}` : `✗ ${res?.error ?? 'failed'}`);
+      if (!res?.ok) process.exitCode = 1;
       break;
     }
     case 'mouse': {
@@ -508,9 +553,9 @@ async function main(): Promise<void> {
       break;
     }
     default:
-      console.error(`unknown verb '${verb}'. verbs: start|send|type|key|mouse|dump|text|transcript|status|list|promote|clean|stop`);
+      console.error(`unknown verb '${verb}'. verbs: start|send|type|key|resize|mouse|dump|text|transcript|status|list|promote|clean|stop`);
       process.exit(1);
   }
 }
 
-main().catch((e) => { console.error(e); process.exit(1); });
+if (import.meta.main) main().catch((e) => { console.error(e); process.exit(1); });

package/scripts/uninstall.sh

@@ -3,7 +3,7 @@
 #   bash scripts/uninstall.sh [--prefix PATH] [--keep-path] [--dry-run]
 #   curl -fsSL https://github.com/ElanvitalAI/elanous/releases/latest/download/uninstall.sh | bash
 #
-# 지우는 것: 설치 폴더($PREFIX — versions/·current·bin/·install.json) ⊕ 설치기가 쓴 PATH 블록(마커 사이 · ~/.zshrc·~/.bashrc·~/.profile).
+# 지우는 것: 설치 폴더($PREFIX — versions/·current·bin/·install.json) ⊕ 설치기가 쓴 PATH 블록(마커 사이 · ~/.zshrc·~/.zshenv·~/.bashrc·~/.profile).
 # ⛔ 설치 폴더를 «통째로» 지우지 않는다 — 설치물 넷만 지우고, 그 밖의 것이 남으면 폴더를 지킨다.
 #    🩸 09-25: 기억 저장소 기본 위치가 ${XDG_DATA_HOME:-~/.local/share}/elanous/memory — 설치 폴더 «안»이라 `rm -rf $PREFIX` 가 사용자 기억을 지웠다.
 # ⛔ 지우지 «않는» 것: 상태 폴더 ~/.elanous(로그인·로그·원장·설정) — 되돌릴 수 없으니 사람이 직접 지운다(경로만 알려 준다).
@@ -47,7 +47,7 @@ fi
 MARKER_START='# >>> elanous installer PATH >>>'
 MARKER_END='# <<< elanous installer PATH <<<'
 STARTUPS=()
-for f in "${ELANOUS_SHELL_STARTUP:-}" "$HOME/.zshrc" "$HOME/.bashrc" "$HOME/.profile"; do
+for f in "${ELANOUS_SHELL_STARTUP:-}" "$HOME/.zshrc" "$HOME/.zshenv" "$HOME/.bashrc" "$HOME/.profile"; do
   [ -n "$f" ] && [ -f "$f" ] && grep -Fqx "$MARKER_START" "$f" && STARTUPS+=("$f")
 done
 
@@ -55,7 +55,14 @@ echo "remove: $PREFIX/{versions,current,bin,install.json}"
 if [ "$KEEP_PATH" -eq 0 ]; then for f in "${STARTUPS[@]+"${STARTUPS[@]}"}"; do echo "remove PATH block: $f"; done; fi
 if [ "$DRY" -eq 1 ]; then echo "(dry run — nothing changed)"; exit 0; fi
 
-for item in versions current bin install.json; do rm -rf -- "${PREFIX:?}/$item"; done
+rm -rf -- "${PREFIX:?}/versions" "$PREFIX/current" "$PREFIX/install.json"
+# bin may contain a different eln (or other user commands); remove only our marked alias.
+ELN="$PREFIX/bin/eln"
+if [ -f "$ELN" ] && [ ! -L "$ELN" ] && [ "$(sed -n '2p' "$ELN")" = '# elanous-wrapper' ]; then
+  rm -f -- "$ELN"
+fi
+rm -f -- "$PREFIX/bin/elanous" "$PREFIX/bin/bun"
+rmdir -- "$PREFIX/bin" 2>/dev/null || true
 KEPT=""
 if ! rmdir -- "$PREFIX" 2>/dev/null; then KEPT="$(ls -A -- "$PREFIX" 2>/dev/null | tr '\n' ' ')"; fi
 if [ "$KEEP_PATH" -eq 0 ]; then

package/scripts/ux/bump-installed.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env zsh
+# 판올림(설치본 갱신) — UX 자리 · 내부 문서 `UX` §3a.
+# origin/main 을 깨끗한 체크아웃(D)에 떼어 놓고, 설치본을 그 체크아웃으로 갱신하고 넥서스를 재시작한 뒤, 서빙 화면이 새 판인지 잰다.
+# 사용: zsh scripts/ux/bump-installed.sh [<ref>=origin/main]
+# ⛔ zsh 에서 set -e 는 아무것도 안 한다 — 단계는 전부 && 로 잇는다. ⛔ 채널 공지(전·후)는 이 스크립트 밖에서 사람이/자리가 한다.
+REF=${1:-origin/main}
+D=${UX_DEPLOY_DIR:-$TMPDIR/deploy-main}
+[[ -d $D/.git || -f $D/.git ]] || { echo "deploy checkout missing: $D (git worktree add --detach $D origin/main 로 한 번 만든다)"; exit 64; }
+cd "$D" && git fetch -q origin && git checkout -q --detach "$REF" && bun install --silent && (cd apps/pwa && bun install --silent) \
+  && echo "[bump] checkout $(git rev-parse --short HEAD) — $(git log -1 --format=%s | cut -c1-80)" \
+  && cd ~ && elanous update --from "$D" --restart \
+  || { echo "[bump] FAILED — PWA 빌드가 깨졌으면 도구의 처방(cd $D/apps/pwa && bun install --force)을 먼저 본다"; exit 1; }
+# 재는 칸 셋: 데몬 pid · 설치본 판 · 서빙 화면 = 설치본 out/index.html
+sleep 15
+launchctl list | rg com.elanous.nexus
+elanous --version
+CUR=~/.local/share/elanous/current
+WANT=$(rg -o 'page-[a-f0-9]+\.js' -m1 "$CUR/node_modules/elanous/apps/pwa/out/index.html" | head -1)
+GOT=$(curl -s --max-time 15 http://127.0.0.1:31415/app/ | rg -o 'page-[a-f0-9]+\.js' -m1 | head -1)
+[[ -n $WANT && $WANT == $GOT ]] && echo "[bump] ok — serving $GOT" || { echo "[bump] MISMATCH installed=$WANT serving=$GOT"; exit 1; }

package/scripts/ux/lib/cdp.ts

@@ -0,0 +1,72 @@
+// UX 녹화·캡처 공용 — 헤드리스 Chrome 하나를 띄워 CDP 로 몰고, 어떤 경로로 끝나도 Chrome 과 프로필을 치운다.
+// 대표 상시지시: 측정·녹화 스크립트는 Chrome 을 반드시 죽인다(exit · SIGINT · SIGTERM · 전역 타임아웃 넷 다).
+import { spawn, execFileSync } from 'node:child_process';
+import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+export const CHROME = process.env.UX_CHROME ?? '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome';
+export const sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));
+
+export type Cdp = {
+  send: (method: string, params?: object) => Promise<any>;
+  ev: <T = unknown>(expression: string) => Promise<T>;
+  click: (label: string, exact?: boolean) => Promise<string>;
+  png: (file: string) => Promise<void>;
+  close: () => void;
+};
+
+export async function launch(opts: { port: number; timeoutMs: number; width: number; height: number; dpr?: number; mobile?: boolean }): Promise<Cdp> {
+  const profile = mkdtempSync(join(tmpdir(), 'ux-cdp-'));
+  const chrome = spawn(CHROME, ['--headless=new', '--use-mock-keychain', '--password-store=basic', `--remote-debugging-port=${opts.port}`, `--user-data-dir=${profile}`, 'about:blank'], { stdio: 'ignore' });
+  const kill = () => { try { chrome.kill('SIGKILL'); } catch {} try { rmSync(profile, { recursive: true, force: true }); } catch {} };
+  process.on('exit', kill);
+  for (const s of ['SIGINT', 'SIGTERM'] as const) process.on(s, () => { kill(); process.exit(130); });
+  setTimeout(() => { console.error('global timeout'); kill(); process.exit(2); }, opts.timeoutMs).unref();
+
+  let ws = '';
+  for (let i = 0; i < 50 && !ws; i++) {
+    try { const l = (await (await fetch(`http://127.0.0.1:${opts.port}/json/list`)).json()) as Array<{ type: string; webSocketDebuggerUrl?: string }>; ws = l.find((t) => t.type === 'page')?.webSocketDebuggerUrl ?? ''; } catch {}
+    if (!ws) await sleep(200);
+  }
+  if (!ws) { kill(); throw new Error(`chrome did not expose a page on port ${opts.port}`); }
+  const sock = new WebSocket(ws);
+  await new Promise((r) => sock.addEventListener('open', r, { once: true }));
+  let id = 0;
+  const pend = new Map<number, (v: any) => void>();
+  sock.addEventListener('message', (m) => {
+    const x = JSON.parse(String(m.data));
+    if (x.id && pend.has(x.id)) { pend.get(x.id)!(x.result); pend.delete(x.id); }
+    if (x.method === 'Page.javascriptDialogOpening') sock.send(JSON.stringify({ id: ++id, method: 'Page.handleJavaScriptDialog', params: { accept: true } }));
+  });
+  const send = (method: string, params: object = {}) => new Promise<any>((res) => { const n = ++id; pend.set(n, res); sock.send(JSON.stringify({ id: n, method, params })); });
+  const ev = async <T,>(expression: string) => (await send('Runtime.evaluate', { returnByValue: true, awaitPromise: true, expression })).result?.value as T;
+  await send('Page.enable'); await send('Runtime.enable');
+  await send('Emulation.setDeviceMetricsOverride', { width: opts.width, height: opts.height, deviceScaleFactor: opts.dpr ?? 1, mobile: !!opts.mobile });
+  if (opts.mobile) await send('Emulation.setTouchEmulationEnabled', { enabled: true });
+  return {
+    send,
+    ev,
+    click: (label, exact = true) => ev<string>(`(()=>{const L=${JSON.stringify(label)}; const b=[...document.querySelectorAll('button,a,[role=button],summary')].find(e=>${exact ? 'e.textContent.trim()===L' : 'e.textContent.trim().includes(L)'}); if(!b) return 'missing'; b.scrollIntoView({block:'center'}); b.click(); return 'ok'})()`),
+    png: async (file) => { const r = await send('Page.captureScreenshot', { format: 'png' }); writeFileSync(file, Buffer.from(r.data, 'base64')); },
+    close: () => { try { sock.close(); } catch {} kill(); },
+  };
+}
+
+/** 공개 캡처 누설 점검 — `?capture=public` 화면에 남으면 안 되는 모양을 센다(값은 출력하지 않는다). */
+export const PUBLIC_LEAK_CHECK = `(()=>{const t=document.body.innerText; const bad=[]; if(/\\/Users\\//.test(t)) bad.push('/Users/'); if(/\\$\\s?\\d/.test(t)) bad.push('USD'); if(/\\bmsb\\d+\\b/.test(t)) bad.push('msbN'); if(/\\.ts\\.net\\b/.test(t)) bad.push('ts.net'); if(/elt_[A-Za-z0-9_-]{16,}/.test(t)) bad.push('token'); return JSON.stringify({publicOn: t.includes('공개 캡처 켜짐'), bad, len: t.length})})()`;
+
+/** 프레임(실제 촬영 시각)을 간격 그대로 mp4 로 — 상수 fps 가정 없이. */
+export class Frames {
+  readonly dir: string;
+  readonly list: { f: string; t: number }[] = [];
+  constructor(outDir: string) { this.dir = join(outDir, 'frames'); mkdirSync(this.dir, { recursive: true }); }
+  add(base64Jpeg: string, t = Date.now() / 1000) { const f = join(this.dir, `f${String(this.list.length).padStart(5, '0')}.jpg`); writeFileSync(f, Buffer.from(base64Jpeg, 'base64')); this.list.push({ f, t }); }
+  toMp4(mp4: string, w: number, h: number) {
+    const lines: string[] = [];
+    for (let i = 0; i < this.list.length; i++) { const d = i + 1 < this.list.length ? Math.max(0.001, this.list[i + 1].t - this.list[i].t) : 0.04; lines.push(`file '${this.list[i].f}'`, `duration ${d.toFixed(4)}`); }
+    if (this.list.length) lines.push(`file '${this.list[this.list.length - 1].f}'`);
+    const txt = join(this.dir, '..', 'frames.txt'); writeFileSync(txt, lines.join('\n'));
+    execFileSync('ffmpeg', ['-y', '-loglevel', 'error', '-f', 'concat', '-safe', '0', '-i', txt, '-vf', `fps=30,scale=${w}:${h}:force_original_aspect_ratio=decrease,pad=${w}:${h}:(ow-iw)/2:(oh-ih)/2`, '-c:v', 'libx264', '-pix_fmt', 'yuv420p', '-crf', '16', mp4]);
+  }
+}

package/scripts/ux/record-page.ts

@@ -0,0 +1,50 @@
+// PWA 한 화면 실녹화 · 캡처 (UX 자리 · 내부 문서 `UX` §3).
+// 사용:
+//   bun scripts/ux/record-page.ts --url http://127.0.0.1:<port>/app/board/ --out <dir> [--secs 20] [--size 1920x1080]
+//        [--mobile] (390x844 @3x 터치) [--type "<한 줄>"] (textarea 에 쳐서 Enter) [--shot] (PNG 한 장만)
+//        [--token-stdin] (단기 소유자 토큰을 표준 입력으로만 받는다 — 값은 출력하지 않는다)
+// ⭐ URL 에 `capture=public` 을 자동으로 붙이고 15초마다 누설 점검 줄을 찍는다(bad 가 비어 있어야 공개 후보).
+// ⛔ 공개는 이 산출이 아니라 1fps 전수 OCR(TC) 통과 뒤다.
+import { mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { Frames, launch, PUBLIC_LEAK_CHECK, sleep } from './lib/cdp.js';
+
+const arg = (k: string) => { const i = process.argv.indexOf(`--${k}`); return i > 0 ? process.argv[i + 1] : undefined; };
+const flag = (k: string) => process.argv.includes(`--${k}`);
+const rawUrl = arg('url'); const out = arg('out');
+if (!rawUrl || !out) { console.error('usage: --url <url> --out <dir> [--secs N] [--size WxH] [--mobile] [--type text] [--shot] [--token-stdin]'); process.exit(64); }
+const mobile = flag('mobile');
+const [W, H] = mobile ? [390, 844] : (arg('size') ?? '1920x1080').split('x').map(Number);
+const DPR = mobile ? 3 : 1; const SECS = Number(arg('secs') ?? 20);
+const u = new URL(rawUrl); u.searchParams.set('capture', 'public');
+mkdirSync(out, { recursive: true });
+
+const cdp = await launch({ port: 9480 + Math.floor(Math.random() * 15), timeoutMs: (SECS + 180) * 1000, width: W, height: H, dpr: DPR, mobile });
+if (flag('token-stdin')) {
+  const temp = /elt_[A-Za-z0-9_-]{16,}/.exec(await Bun.stdin.text())?.[0] ?? '';
+  console.log('token', temp ? 'received' : 'none');
+  if (temp) { await cdp.send('Page.navigate', { url: `${u.origin}/app/` }); await sleep(3000); await cdp.ev(`localStorage.setItem('elanous.daemon.token', ${JSON.stringify(temp)})`); }
+}
+await cdp.send('Page.navigate', { url: u.toString() }); await sleep(8000);
+const check = async (tag: string) => console.log(tag, await cdp.ev<string>(PUBLIC_LEAK_CHECK));
+await check('before');
+if (flag('shot')) { const f = join(out, `shot-${W}x${H}.png`); await cdp.png(f); console.log('png', f); cdp.close(); process.exit(0); }
+
+const frames = new Frames(out); let recording = true;
+const loop = (async () => { let last = Date.now(); while (recording) { const s = await cdp.send('Page.captureScreenshot', { format: 'jpeg', quality: 92 }); frames.add(s.data); if (Date.now() - last > 15_000) { last = Date.now(); await check('mid'); } } })();
+const text = arg('type');
+if (text) {
+  await sleep(800);
+  await cdp.ev(`document.querySelector('textarea')?.focus()`);
+  for (const ch of [...text]) { await cdp.send('Input.insertText', { text: ch }); await sleep(55); }
+  await sleep(500);
+  for (const type of ['keyDown', 'keyUp']) await cdp.send('Input.dispatchKeyEvent', { type, key: 'Enter', code: 'Enter', windowsVirtualKeyCode: 13 });
+  await sleep(3500);
+} else await sleep(SECS * 1000);
+recording = false; await loop;
+await check('after');
+cdp.close();
+const mp4 = join(out, `rec-${W * DPR}x${H * DPR}.mp4`);
+frames.toMp4(mp4, W * DPR, H * DPR);
+console.log('frames', frames.list.length, 'mp4', mp4);
+process.exit(0);

package/scripts/video-broll-line.ts

@@ -0,0 +1,89 @@
+#!/usr/bin/env bun
+/** Walk the B-roll declaration with a per-slot authoring agent and a measured render. */
+import { existsSync, mkdirSync, readFileSync, realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, parse, resolve } from 'node:path';
+import { registerStandaloneLogSink } from '../src/domains/standalone-log-sink.js';
+import { writeStdoutJson } from '../src/cli/stdout-json.js';
+import { createBrollAgent } from '../src/video-pipeline/broll-agent.js';
+import type { BrollAgent, BrollRun } from '../src/video-pipeline/recipes/broll.js';
+import { exitCodeOf, formatStep, loadWalker, walkLine } from '../src/video-pipeline/walk-line.js';
+import { parseArgv, type FlagKind } from './lib/argv.js';
+
+const FLAGS: Record<string, FlagKind> = {
+  '--video': 'value', '--audio': 'value', '--words': 'value', '--clips-dir': 'value',
+  '--density': 'value', '--agent': 'value', '--clip-timeout-sec': 'value', '--json': 'bool',
+};
+
+export interface BrollLineDeps {
+  loadWalker?: typeof loadWalker;
+  walk?: typeof walkLine;
+  createAgent?: typeof createBrollAgent;
+  run?: BrollRun;
+  registerLogSink?: typeof registerStandaloneLogSink;
+  writeJson?: (line: string) => Promise<void>;
+}
+
+export async function main(argv: readonly string[], deps: BrollLineDeps = {}): Promise<number> {
+  const parsed = parseArgv(argv, { known: FLAGS, label: 'video-broll-line' });
+  const { values, flags } = parsed;
+  const backend = values.agent ?? 'codex';
+  const density = Number(values.density ?? 5);
+  const timeoutSec = Number(values['clip-timeout-sec'] ?? 600);
+  const errors = [...parsed.errors];
+  if (!values.video) errors.push('--video <경로> 가 필요하다');
+  if (Boolean(values.audio) === Boolean(values.words)) errors.push('--audio <경로> 또는 --words <json> 중 하나가 필요하다');
+  if (!['codex', 'claude', 'elanous'].includes(backend)) errors.push('--agent 는 codex|claude|elanous 중 하나다');
+  if (!Number.isFinite(density) || density <= 0) errors.push('--density 는 양수다');
+  if (!Number.isFinite(timeoutSec) || timeoutSec <= 0) errors.push('--clip-timeout-sec 는 양수다');
+  for (const file of [values.video, values.audio, values.words]) {
+    if (file && !existsSync(resolve(file))) errors.push(`입력 파일을 찾을 수 없다: ${file}`);
+  }
+  let words: unknown;
+  if (values.words && existsSync(resolve(values.words))) {
+    try { words = JSON.parse(readFileSync(resolve(values.words), 'utf8')); }
+    catch { errors.push('--words JSON 을 읽을 수 없다'); }
+  }
+  if (errors.length) { for (const error of errors) console.error(`⛔ ${error}`); return 2; }
+
+  await (deps.registerLogSink ?? registerStandaloneLogSink)('video-broll-line');
+  const walker = await (deps.loadWalker ?? loadWalker)();
+  if (!walker) { console.error('➖ 워커를 못 찾았다 — GRAPH_WALKER 를 지정하라'); return 2; }
+  const { spec, error } = walker.readGraphSpec(join(import.meta.dir, '../graphs/video/broll-line.yaml'));
+  if (!spec) { console.error(`⛔ B-roll 선언을 못 읽었다: ${error}`); return 2; }
+
+  const video = realpathSync(resolve(values.video!));
+  const requestedDir = resolve(values['clips-dir'] ?? join(homedir(), 'Movies', 'monad', 'broll',
+    `${parse(video).name}-${new Date().toISOString().replace(/[:.]/g, '-')}`));
+  mkdirSync(requestedDir, { recursive: true });
+  // Recipes compare real paths; on macOS /var is a link to /private/var, so the work folder must be canonical.
+  const clipsDir = realpathSync(requestedDir);
+  const workdir = clipsDir;
+  const agent = (deps.createAgent ?? createBrollAgent)({
+    backend: backend as 'codex' | 'claude' | 'elanous', clipsDir,
+    skillDir: join(import.meta.dir, '../skills/motion-broll'),
+  });
+  const state: Record<string, unknown> = {
+    base_video: video,
+    ...(values.audio ? { audio_path: resolve(values.audio) } : { aligned_words: words }),
+    clips_dir: clipsDir,
+    density_target: density,
+    clip_timeout_ms: timeoutSec * 1000,
+    broll_agent: agent satisfies BrollAgent,
+    ...(deps.run ? { broll_run: deps.run } : {}),
+  };
+  const quiet = flags.has('json');
+  const result = await (deps.walk ?? walkLine)({ spec, walker, state, workdir,
+    onStep: (row) => { if (!quiet) console.log(formatStep(row, 11)); },
+  });
+  const summary = {
+    terminal: result.terminal,
+    clips: Array.isArray(state.broll_clips) ? state.broll_clips.length : 0,
+    skipped: Array.isArray(state.skipped_clips) ? state.skipped_clips.length : 0,
+    rendered_path: typeof state.rendered_path === 'string' ? state.rendered_path : null,
+  };
+  await (deps.writeJson ?? writeStdoutJson)(JSON.stringify(summary) + '\n');
+  return exitCodeOf(result.terminal);
+}
+
+if (import.meta.main) process.exitCode = await main(process.argv.slice(2));

package/scripts/waitlist-daily-digest.ts

@@ -0,0 +1,108 @@
+#!/usr/bin/env bun
+// ── elanous.ai 출시 알림 명단 — 하루 한 번 텔레그램 정리 (대표 2026-09-28) ─────────────────
+//
+// 명단 원천 = Resend 오디언스(사이트 `api/confirm.js` 가 «확인 링크를 누른» 주소만 올린다 · 더블 옵트인).
+// 자격 = Elanous 비밀 저장소 `resend-api-key` · `resend-audience-id`(값을 출력·로그하지 않는다).
+// 상태 = `<state>/conatus/waitlist_digest_state.json` — 지난 보고 때 본 연락처 id 목록(«새로 온 사람»을 가른다).
+//
+// 보고: 전체 명단 수 · 어제 보고 뒤 새로 확인된 주소(목록) · 구독 해지 수. 새 사람이 없어도 하루 한 번 수는 보낸다.
+// ⛔ 조회 실패도 알린다(«못 쟀다»를 조용히 넘기지 않는다).
+//
+// cron: 0 9 * * *  (KST 09:00 · `scripts/cron-run.ts` 로 감싼다)
+
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+
+export interface WaitlistContact { id: string; email: string; created_at?: string; unsubscribed?: boolean }
+
+export interface DigestDeps {
+  fetchContacts: () => Promise<WaitlistContact[]>;
+  readState: () => { seen: string[]; lastAt?: string } | null;
+  writeState: (s: { seen: string[]; lastAt: string }) => void;
+  send: (text: string) => boolean;
+  now?: () => Date;
+}
+
+export function formatDigest(contacts: readonly WaitlistContact[], seen: ReadonlySet<string>, firstRun: boolean): string {
+  const active = contacts.filter((c) => !c.unsubscribed);
+  const unsub = contacts.length - active.length;
+  const fresh = firstRun ? [] : active.filter((c) => !seen.has(c.id))
+    .sort((a, b) => (a.created_at ?? '').localeCompare(b.created_at ?? ''));
+  const lines = [
+    `📮 **elanous.ai 출시 알림 명단** — 전체 **${active.length}**명${unsub ? ` · 해지 ${unsub}` : ''}`,
+  ];
+  if (firstRun) lines.push('(첫 보고 — 지금까지의 명단을 기준으로 삼습니다. 내일부터 새로 온 분을 따로 보여 드립니다.)');
+  else if (fresh.length === 0) lines.push('어제 보고 뒤 새로 확인된 분: 없음');
+  else {
+    lines.push(`어제 보고 뒤 새로 확인된 분: **${fresh.length}**명`);
+    for (const c of fresh.slice(0, 30)) lines.push(`  • ${c.email}${c.created_at ? ` · ${kst(c.created_at)}` : ''}`);
+    if (fresh.length > 30) lines.push(`  … 외 ${fresh.length - 30}명`);
+  }
+  return lines.join('\n');
+}
+
+function kst(iso: string): string {
+  const d = new Date(iso.replace(' ', 'T').replace(/(\+00)?$/, iso.includes('+') || iso.endsWith('Z') ? '' : 'Z'));
+  if (Number.isNaN(d.getTime())) return iso.slice(0, 16);
+  return new Date(d.getTime() + 9 * 3_600_000).toISOString().slice(5, 16).replace('T', ' ') + ' KST';
+}
+
+export async function runWaitlistDigest(deps: DigestDeps): Promise<{ sent: boolean; total: number; fresh: number }> {
+  const now = (deps.now ?? (() => new Date()))();
+  let contacts: WaitlistContact[];
+  try {
+    contacts = await deps.fetchContacts();
+  } catch (err) {
+    const reason = err instanceof Error ? err.message.replace(/re_[A-Za-z0-9_]+/g, '***').slice(0, 160) : String(err).slice(0, 160);
+    deps.send(`⚠️ **elanous.ai 출시 알림 명단 조회 실패** — 오늘 정리를 못 보냅니다.\n사유: \`${reason}\``);
+    return { sent: false, total: 0, fresh: 0 };
+  }
+  const prev = deps.readState();
+  const seen = new Set(prev?.seen ?? []);
+  const text = formatDigest(contacts, seen, prev === null);
+  const freshCount = prev === null ? 0 : contacts.filter((c) => !c.unsubscribed && !seen.has(c.id)).length;
+  const sent = deps.send(text);
+  // 발송이 실패하면 상태를 전진시키지 않는다 — 다음 번에 같은 «새로 온 분»을 다시 보낸다.
+  if (sent) deps.writeState({ seen: contacts.map((c) => c.id), lastAt: now.toISOString() });
+  return { sent, total: contacts.filter((c) => !c.unsubscribed).length, fresh: freshCount };
+}
+
+async function resendContacts(apiKey: string, audienceId: string): Promise<WaitlistContact[]> {
+  const res = await fetch(`https://api.resend.com/audiences/${encodeURIComponent(audienceId)}/contacts`, {
+    headers: { Authorization: `Bearer ${apiKey}` },
+    signal: AbortSignal.timeout(20_000),
+  });
+  if (!res.ok) throw new Error(`Resend ${res.status}`);
+  const body = await res.json() as { data?: WaitlistContact[] };
+  return Array.isArray(body.data) ? body.data : [];
+}
+
+export async function main(): Promise<void> {
+  const { ensureCronNodePath } = await import('../src/domains/cron-path.js');
+  ensureCronNodePath();
+  const { registerStandaloneLogSink } = await import('../src/domains/standalone-log-sink.js');
+  try { await registerStandaloneLogSink('waitlist-daily-digest'); } catch { /* 관측 실패가 보고를 막지 않는다 */ }
+  const { getSecret } = await import('../src/nexus/config/secrets/index.js');
+  const { sendOutbound } = await import('../src/domains/outbound-alert.js');
+  const { elanousStateRoot } = await import('../src/autopilot/state-paths.js');
+  const { debug } = await import('../src/debug/log.js');
+  const statePath = join(elanousStateRoot(), 'conatus', 'waitlist_digest_state.json');
+  const apiKey = getSecret('resend-api-key');
+  const audienceId = getSecret('resend-audience-id');
+  const result = await runWaitlistDigest({
+    fetchContacts: () => {
+      if (!apiKey || !audienceId) return Promise.reject(new Error('비밀 저장소에 resend-api-key · resend-audience-id 가 없다'));
+      return resendContacts(apiKey, audienceId);
+    },
+    readState: () => {
+      if (!existsSync(statePath)) return null;
+      try { return JSON.parse(readFileSync(statePath, 'utf8')); } catch { return null; }
+    },
+    writeState: (s) => { mkdirSync(dirname(statePath), { recursive: true }); writeFileSync(statePath, JSON.stringify(s)); },
+    send: (text) => sendOutbound(text, 'report'),
+  });
+  debug.log('waitlist.digest', 'reported', result);
+  console.log(`[waitlist-daily-digest] sent=${result.sent} total=${result.total} fresh=${result.fresh}`);
+}
+
+if (import.meta.main) await main();

package/scripts/window-landings.sh

@@ -32,7 +32,7 @@ echo "📍 시점:  $(date -u '+%Y-%m-%dT%H:%M:%SZ')  (이 값은 «이 순간
 #   search API 가 「그날 이후 병합 총 수」를 «조건»으로 답하므로, 그 수 + 여유로 limit 를 «한 번에» 맞춘다.
 #   ⛔ search 자체는 headRefName 을 «안 준다» — 그래서 조회는 여전히 pr list 로 하고, search 는 «크기만» 답한다.
 DAY="${SINCE%%T*}"
-TOTAL="$(bun "$REPO_BIN" gh api "search/issues?q=repo:ElanvitalAI/monad+is:pr+is:merged+merged:>=$DAY&per_page=1" --jq '.total_count' 2>/dev/null | tail -1)"
+TOTAL="$(bun "$REPO_BIN" gh api "search/issues?q=repo:ElanvitalAI/elanous+is:pr+is:merged+merged:>=$DAY&per_page=1" --jq '.total_count' 2>/dev/null | tail -1)"
 if [ -n "${TOTAL:-}" ] && [ "$TOTAL" -gt 0 ] 2>/dev/null; then
   LIMIT=$(( TOTAL * 2 + 100 ))
   echo "📏 창 크기: search API ⇒ merged:>=$DAY 총 ${TOTAL}건 ⇒ 상한을 ${LIMIT} 로 «맞춘다»"