elanous 0.2.10 → 0.2.12

package/src/cli/persona-cli.ts

@@ -1,4 +1,4 @@
-// PS1 — `elanous persona list|add|show`: 프리셋(persona-presets/)을 보고, 골라서 «내 페르소나»를 만들고, 만든 것을 본다.
+// `elanous persona list|add|edit|show`: 프리셋을 보고, 내 페르소나를 만들고 꾸민다.
 // 만든 페르소나는 기존 페르소나 저장소(resolveStatePersonaDir · Discord·PWA 가 읽는 곳)의 `<id>.yaml` 한 파일이다.
 import type { Command } from 'commander';
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
@@ -7,7 +7,8 @@ import { parse as parseYaml } from 'yaml';
 import { debug } from '../debug/log.js';
 import { parsePersonaYaml } from '../persona/loader.js';
 import { resolveRepositoryPersonaDir, resolveStatePersonaDir } from '../persona/global-registry.js';
-import { choosePersonaId, describePreset, findPreset, loadPresetIndex, loadPresets, presetToProfileYaml } from '../persona/presets.js';
+import { UnknownPersonaSchemaKeyError, choosePersonaId, clonePreset, describePreset, editPersona, findPreset, loadPresetIndex, loadPresets, presetToProfileYaml } from '../persona/presets.js';
+import { addTeamSet, listTeamSets, removeTeamSet } from '../persona/team-set.js';
 
 interface StoredPersona { personaId: string; displayName: string; description?: string; preset?: string; title?: string; path: string }
 
@@ -36,8 +37,52 @@ function takenIds(stateDir: string): Set<string> {
   return ids;
 }
 
+function mapping(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function setEdit(edits: Record<string, unknown>, assignment: string): void {
+  const equals = assignment.indexOf('=');
+  if (equals < 0) throw new Error(`--set requires key=value: ${assignment}`);
+  const key = assignment.slice(0, equals);
+  const parts = key.split('.');
+  if (parts.some((part) => !part || ['__proto__', 'prototype', 'constructor'].includes(part))) {
+    throw new UnknownPersonaSchemaKeyError(key);
+  }
+  const value: unknown = parseYaml(assignment.slice(equals + 1));
+  let target = edits;
+  for (const part of parts.slice(0, -1)) {
+    if (!Object.hasOwn(target, part)) target[part] = {};
+    if (!mapping(target[part])) throw new Error(`--set key conflicts with a scalar: ${key}`);
+    target = target[part];
+  }
+  target[parts.at(-1)!] = value;
+}
+
+function editOptions(fromFile: string | undefined, assignments: readonly string[]): Record<string, unknown> {
+  const parsed: unknown = fromFile ? parseYaml(readFileSync(fromFile, 'utf8')) : {};
+  if (!mapping(parsed)) throw new Error('--from-file must contain a YAML mapping');
+  const edits = { ...parsed };
+  for (const assignment of assignments) setEdit(edits, assignment);
+  return edits;
+}
+
 export function registerPersonaCommands(program: Command): void {
-  const persona = program.command('persona').description('Persona presets — AI coworkers you pick and customise (list · add · show)');
+  const team = program.command('team-set').description('Install, remove and list persona team sets');
+  team.command('add <file>').description('Install a YAML team set').action((file: string) => {
+    try { const result = addTeamSet(file); console.log(`Installed team-set ${result['team-set']}`); }
+    catch (error) { console.error(error instanceof Error ? error.message : String(error)); process.exitCode = 1; }
+  });
+  team.command('remove <name>').description('Remove an installed team set').action((name: string) => {
+    try { removeTeamSet(name); console.log(`Removed team-set ${name}`); }
+    catch (error) { console.error(error instanceof Error ? error.message : String(error)); process.exitCode = 1; }
+  });
+  team.command('list').description('List installed team sets').action(() => {
+    try { for (const item of listTeamSets()) console.log(`${item['team-set']}  ${item.members.map((member) => `${member.persona} (${member.title})`).join(', ')}`); }
+    catch (error) { console.error(error instanceof Error ? error.message : String(error)); process.exitCode = 1; }
+  });
+
+  const persona = program.command('persona').description('Persona presets — AI coworkers you pick and customise (list · add · edit · show)');
 
   persona.command('list')
     .description('List the persona presets, then the personas you have made')
@@ -49,7 +94,7 @@ export function registerPersonaCommands(program: Command): void {
       if (opts.json) { console.log(JSON.stringify({ presets: presets.map((p) => ({ id: p.personaId, displayName: p.displayName, role: p.role, oneLine: p.oneLine })), mine }, null, 2)); return; }
       if (!presets.length) console.log('페르소나 프리셋을 찾지 못했습니다(persona-presets/ 가 이 설치본에 없습니다).');
       else {
-        console.log('프리셋 — 골라서 내 페르소나로 만들기: elanous persona add <프리셋> [--name <이름>]');
+        console.log('프리셋 — 골라서 내 페르소나로 만들기: elanous persona add <이름> [--from <프리셋>]');
         const width = Math.max(...presets.map((p) => p.personaId.length));
         for (const p of presets) console.log(`  ${p.personaId.padEnd(width)}  ${p.displayName} — ${p.role} · ${p.oneLine}`);
       }
@@ -60,19 +105,40 @@ export function registerPersonaCommands(program: Command): void {
       }
     });
 
-  persona.command('add <preset>')
-    .description('Make your own persona from a preset (id, name or role) — the preset file is not changed')
+  persona.command('add <name>')
+    .description('Make your own persona from a preset — the preset file is not changed')
+    .option('--from <preset>', 'Preset to clone (defaults to the named preset)')
     .option('--name <name>', 'What to call it (default: the preset’s first name)')
+    .option('--as <name>', 'Clone this preset under a new, unique name')
     .option('--title <title>', 'Optional title, e.g. CMO')
     .option('--json', 'JSON output')
-    .action((query: string, opts: { name?: string; title?: string; json?: boolean }) => {
+    .action((query: string, opts: { from?: string; name?: string; as?: string; title?: string; json?: boolean }) => {
       const presets = loadPresets();
-      const preset = findPreset(presets, query);
+      const presetQuery = opts.from ?? query;
+      const preset = findPreset(presets, presetQuery);
       if (!preset) {
-        console.error(`프리셋 «${query}» 을 찾지 못했습니다. 있는 것: ${presets.map((p) => p.personaId).join(', ')}`);
+        console.error(`프리셋 «${presetQuery}» 을 찾지 못했습니다. 있는 것: ${presets.map((p) => p.personaId).join(', ')}`);
         process.exitCode = 1;
         return;
       }
+      if (opts.as !== undefined || opts.from !== undefined) {
+        try {
+          if (opts.from !== undefined && (opts.as !== undefined || opts.name !== undefined || opts.title !== undefined)) throw new Error('--from cannot be combined with --as, --name or --title');
+          if (opts.as !== undefined && (opts.name !== undefined || opts.title !== undefined)) throw new Error('--as cannot be combined with --name or --title');
+          const result = clonePreset(preset, opts.from !== undefined ? query : opts.as!);
+          debug.log('persona.cli', 'cloned', { preset: preset.personaId, personaId: result.personaId });
+          if (opts.json) console.log(JSON.stringify({ personaId: result.personaId, displayName: result.displayName, preset: preset.personaId, path: result.path }, null, 2));
+          else {
+            console.log(`만들었습니다 — ${result.displayName} (id ${result.personaId} · 프리셋 ${preset.personaId})`);
+            console.log(`  처음 묻는 것: ${preset.firstQuestions.join(' / ')}`);
+            console.log(`  보기: elanous persona show ${result.personaId}`);
+          }
+        } catch (err) {
+          console.error(err instanceof Error ? err.message : String(err));
+          process.exitCode = 1;
+        }
+        return;
+      }
       const dir = resolveStatePersonaDir();
       const personaId = choosePersonaId(preset, opts.name, takenIds(dir));
       const yaml = presetToProfileYaml(preset, loadPresetIndex().common, { personaId, ...(opts.name ? { name: opts.name } : {}), ...(opts.title ? { title: opts.title } : {}) });
@@ -89,6 +155,29 @@ export function registerPersonaCommands(program: Command): void {
       console.log(`  보기: elanous persona show ${personaId}`);
     });
 
+  persona.command('edit <name>')
+    .description('Edit a saved persona (schema fields only; the preset source is not changed)')
+    .option('--set <key=value>', 'Set a field (repeatable; YAML values)', (value: string, values: string[]) => [...values, value], [] as string[])
+    .option('--from-file <path>', 'Load edits from a YAML mapping')
+    .option('--dry-run', 'Validate and preview without writing')
+    .option('--json', 'JSON output')
+    .action((name: string, opts: { set: string[]; fromFile?: string; dryRun?: boolean; json?: boolean }) => {
+      try {
+        if (!opts.fromFile && !opts.set.length) throw new Error('persona edit requires --set or --from-file');
+        const result = editPersona(name, editOptions(opts.fromFile, opts.set), { dryRun: opts.dryRun });
+        debug.log('persona.cli', opts.dryRun ? 'edit-dry-run' : 'edited', { personaId: result.personaId });
+        if (opts.json) console.log(JSON.stringify(result, null, 2));
+        else {
+          console.log(`${opts.dryRun ? '미리 보기' : '수정했습니다'} — ${result.displayName} (id ${result.personaId})`);
+          console.log(result.yaml);
+          console.log(`  파일: ${result.path}`);
+        }
+      } catch (err) {
+        console.error(err instanceof Error ? err.message.replace(/\s+/g, ' ').trim() : String(err));
+        process.exitCode = err instanceof UnknownPersonaSchemaKeyError ? 2 : 1;
+      }
+    });
+
   persona.command('show <name>')
     .description('Show one of your personas (id or name), or a preset')
     .option('--json', 'JSON output')

package/src/cli/plugin-cli.ts

@@ -12,6 +12,7 @@ import { OFFICIAL_INDEX_KEYS } from '../market/official-keys.js';
 import { installPlugin, listInstalledPlugins, PluginInstallError, removePlugin, type InstallEvent } from '../plugins/install/plugin-install.js';
 import { credentialStatus, setPluginCredentials } from '../plugins/install/plugin-credentials.js';
 import { makePlugin } from '../plugins/maker/plugin-maker.js';
+import { registerStandaloneLogSink } from '../domains/standalone-log-sink.js';
 import { addAndInstallNode } from '../plugins/maker/node-install.js';
 
 function keys(): ReadonlyArray<{ keyId: string; publicKey: string }> {
@@ -56,34 +57,42 @@ function safeCause(error: unknown): string {
   return redactSecretText(error.message.replace(/https?:\/\/[^\s"'<>]+/gi, '[redacted URL]'));
 }
 
+export async function runPluginMake(request: string, opts: { name?: string; dir?: string; draftFile?: string; run?: boolean; marketBundleDir?: string; input?: string; json?: boolean } = {}): Promise<void> {
+  try {
+    await registerStandaloneLogSink('cli');
+    const result = await makePlugin({ request, name: opts.name, parentDir: opts.dir, draftFile: opts.draftFile, run: opts.run, marketBundleDir: opts.marketBundleDir,
+      ...(opts.input === undefined ? {} : { input: JSON.parse(opts.input) as unknown }) });
+    debug.flush();
+    if (opts.json) stdout.write(JSON.stringify(result) + '\n');
+    else {
+      console.log(`뼈대 ${result.timings.scaffold}ms · 작성 ${result.timings.write}ms`);
+      console.log(`검증 오류 ${result.errors.length} · ${result.timings.validate}ms${result.timings.repair === undefined ? '' : ` · 수리 ${result.timings.repair}ms`}`);
+      console.log(`설치 ${result.status === 'draft' || result.timings.install === 0 ? '미실행' : result.status === 'failed' && result.timings.run === undefined ? '실패' : '완료'} · ${result.timings.install}ms (${result.dir})`);
+      if (result.status === 'draft') console.log('연구 초안만 생성됨 — 요청 처리 단계 구현 후 별도로 검증·설치 필요');
+      if (result.marketBundle) console.log(`마켓 꾸러미 ${result.marketBundle.path} · ${result.marketBundle.signature} · 게시 안 함`);
+      if (opts.run) console.log(`실행 ${result.runStatus ?? '미실행'} · ${result.timings.run ?? 0}ms`);
+      for (const error of result.errors) console.error(error);
+    }
+    if (result.status === 'failed') process.exitCode = 1;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (opts.json) stdout.write(JSON.stringify({ status: 'failed', errors: [message] }) + '\n');
+    else console.error(`plugin make failed: ${message}`);
+    process.exitCode = 1;
+  }
+}
+
 export function registerPluginCommands(program: Command): void {
   const plugin = program.command('plugin').description('Install and manage Elanous plugins');
-  plugin.command('make <request>').description('Write, validate and install a local graph plugin from one request')
+  plugin.command('make <request>').description('Write, validate and install a local graph plugin, or generate an uninstalled research draft')
     .option('--name <slug>', 'Local plugin name')
     .option('--dir <parent>', 'Parent directory (default: instance plugins-local)')
-    .option('--run', 'Run the installed graph')
+    .option('--draft-file <path>', 'Generate an uninstalled research draft with connector and skill definitions')
+    .option('--run', 'Run the installed graph (not available for research drafts)')
+    .option('--market-bundle-dir <path>', 'Bundle installed plugin for human review; never publish')
     .option('--input <json>', 'JSON input for --run')
     .option('--json', 'Print the result as JSON')
-    .action(async (request: string, opts: { name?: string; dir?: string; run?: boolean; input?: string; json?: boolean }) => {
-      try {
-        const result = await makePlugin({ request, name: opts.name, parentDir: opts.dir, run: opts.run,
-          ...(opts.input === undefined ? {} : { input: JSON.parse(opts.input) as unknown }) });
-        if (opts.json) stdout.write(JSON.stringify(result) + '\n');
-        else {
-          console.log(`뼈대 ${result.timings.scaffold}ms · 작성 ${result.timings.write}ms`);
-          console.log(`검증 오류 ${result.errors.length} · ${result.timings.validate}ms${result.timings.repair === undefined ? '' : ` · 수리 ${result.timings.repair}ms`}`);
-          console.log(`설치 ${result.timings.install === 0 && result.status === 'failed' ? '미실행' : result.status === 'failed' && result.timings.run === undefined ? '실패' : '완료'} · ${result.timings.install}ms (${result.dir})`);
-          if (opts.run) console.log(`실행 ${result.runStatus ?? '미실행'} · ${result.timings.run ?? 0}ms`);
-          for (const error of result.errors) console.error(error);
-        }
-        if (result.status === 'failed') process.exitCode = 1;
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        if (opts.json) stdout.write(JSON.stringify({ status: 'failed', errors: [message] }) + '\n');
-        else console.error(`plugin make failed: ${message}`);
-        process.exitCode = 1;
-      }
-    });
+    .action(runPluginMake);
   plugin.command('node').description('Manage plugin workflow nodes')
     .command('add <dir> <request>').description('Write, validate and install a workflow node in a plugin')
     .option('--kind <slug>', 'Workflow node kind')

package/src/cli/pod-cli.ts

@@ -3,10 +3,11 @@
 
 import type { Command } from 'commander';
 import { debug } from '../debug/log.js';
+import { readPodMemoryAdvice } from './pod-memory-advice.js';
 import { getUserConfig } from '../user-config.js';
 import { listCodexAccountsInStore } from '../oauth/codex-account-store.js';
 import { parsePodPool, resolvePodPoolSpec, type PoolKubectl } from '../task-orchestrator/surfaces/pod-pool.js';
-import { leaseKubectl, measurePoolLease, recommendConcurrency, type PoolLeaseMeasure } from '../task-orchestrator/surfaces/pod-lease.js';
+import { leaseKubectl, measurePoolLease, probePoolDns, recommendConcurrency, type PoolLeaseMeasure, type PoolDnsProbe } from '../task-orchestrator/surfaces/pod-lease.js';
 import { POD_COMMAND_DEADLINE_SECONDS, runPodCommand, type PodCommandResult, type RunPodCommandOptions } from '../task-orchestrator/surfaces/pod-command-job.js';
 
 export interface PodCliIo {
@@ -19,9 +20,12 @@ export interface PodCliDeps {
   io?: PodCliIo;
   run?: (options: RunPodCommandOptions) => Promise<PodCommandResult>;
   kubectl?: PoolKubectl;
+  dns?: (context: string, kubectl: PoolKubectl) => PoolDnsProbe;
   accounts?: () => number;
   perAccount?: () => number;
   poolSpec?: (explicit?: string) => string | null;
+  harnessPool?: () => string | undefined;
+  memoryAdvice?: (logsDb?: string) => ReturnType<typeof readPodMemoryAdvice>;
 }
 
 const HELP = `elanous pod run [--pool <스펙>] [--skill <이름,…>] [--llm grok] [--clone] [--deadline <초>] -- <명령…>
@@ -36,19 +40,37 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
   };
   const run = deps.run ?? ((options: RunPodCommandOptions) => runPodCommand(options));
   const pod = program.command('pod').description('Pod 명령 Job — 하니스 없이 명령 하나를 돌리고 산출을 돌려받는다');
-  pod.command('lease').description('Pod 풀의 읽기 전용 동시 실행 권장')
+  pod.command('memory').description('실측 기반 Pod 메모리 권고 (읽기 전용)')
+    .command('advise').description('골 종류별 standard 16Gi / high 32Gi 권고와 근거')
+    .option('--json', '권고와 측정 근거를 JSON 으로')
+    .option('--logs-db <path>', '기존 logs.db 경로')
+    .action((opts: { json?: boolean; logsDb?: string }) => {
+      try {
+        const advice = (deps.memoryAdvice ?? readPodMemoryAdvice)(opts.logsDb);
+        if (opts.json) io.log(JSON.stringify(advice));
+        else for (const row of advice.byGoalType) io.log(`${row.goalType}: ${row.recommended} ${row.limit} · ${row.reason}`);
+        io.exit(0);
+      } catch (err) {
+        io.error(err instanceof Error ? err.message : String(err));
+        io.exit(1);
+      }
+    });
+  pod.command('lease').description('Pod 풀 동시 실행 권장 (DNS 점검용 Pod 를 잠깐 만들었다 지움)')
     .command('status').description('지금 추가로 쏠 수 있는 Pod 골과 제한 근거')
-    .option('--pool <spec>', '풀 스펙 — 컨텍스트[@ssh호스트][:상한] 쉼표')
+    .option('--pool <spec>', '풀 스펙 — 컨텍스트[@ssh호스트][:상한][#레지스트리:포트] 쉼표')
     .option('--json', '표 대신 동일 측정값을 JSON 으로')
     .action((opts: { pool?: string; json?: boolean }) => {
       try {
         const kubectl = deps.kubectl ?? leaseKubectl;
-        const spec = (deps.poolSpec ?? ((explicit?: string) => resolvePodPoolSpec(explicit)))(opts.pool);
+        const spec = (deps.poolSpec ?? ((explicit?: string) => resolvePodPoolSpec(explicit, process.env, () => {
+          const config = deps.harnessPool ? null : getUserConfig();
+          return (deps.harnessPool?.() ?? config?.harness?.podPool) || config?.pod?.pool;
+        })))(opts.pool);
         // No pool configured: mirror the Pod launch fallback to kubectl's current context.
         const current = spec ? null : kubectl(['config', 'current-context']);
         const context = spec ?? (current?.status === 0 ? current.stdout.trim() : '');
         const members = context ? parsePodPool(context) : [];
-        const measure: PoolLeaseMeasure = members.length ? measurePoolLease(members, { kubectl }) : { members: [] };
+        const measure: PoolLeaseMeasure = members.length ? measurePoolLease(members, { kubectl, dns: (context) => (deps.dns ?? probePoolDns)(context, kubectl) }) : { members: [] };
         let accounts: number | null = null;
         let accountReason: string | null = null;
         try { accounts = (deps.accounts ?? (() => listCodexAccountsInStore().length))(); }
@@ -57,17 +79,20 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
         const decision = recommendConcurrency(measure, { capacity: members.reduce((sum, m) => sum + m.capacity, 0), accounts: accounts ?? -1, perAccount });
         if (!context) { decision.recommended = null; decision.limitedBy = null; decision.reason = '측정 불가: cluster (current context)'; }
         const result = { pool: spec, ...measure, accounts, perAccount, ...decision };
-        debug.log('pod.lease', 'status', { pool: spec ? members.map((m) => ({ capacity: m.capacity })) : null, running: decision.running, pending: decision.pending, recommended: decision.recommended, limitedBy: decision.limitedBy });
+        debug.log('pod.lease', 'status', { pool: spec ? members.map((m) => ({ capacity: m.capacity })) : null, running: decision.running, pending: decision.pending, unleasedRunning: decision.unleasedRunning, recommended: decision.recommended, limitedBy: decision.limitedBy });
         if (opts.json) io.log(JSON.stringify(result));
         else {
+          io.log(`풀: ${(spec ?? context) || '?'}`);
           io.log('컨텍스트 | 상한 | Running | Pending | 메모리(상한 합/할당 가능) | CPU(할당 가능)');
           for (const m of measure.members) {
             const mem = (v: number | null) => v === null ? '?' : `${(v / 1024 ** 3).toFixed(1)}Gi`;
             io.log(`${m.context} | ${m.capacity} | ${m.running ?? '?'} | ${m.pending ?? '?'} | ${mem(m.memoryLimitBytes)}/${mem(m.allocatableMemoryBytes)} | ${m.allocatableCpuMillicores === null ? '?' : m.allocatableCpuMillicores / 1000}${m.reason ? ` (${m.reason})` : ''}`);
           }
           io.log(`권장 지금 ${decision.recommended ?? '?'} 개 더 (limitedBy=${decision.limitedBy ?? 'unknown'})${decision.reason ? ` · ${decision.reason}` : ''}`);
-          io.log(`capacity: ${decision.capacitySlots ?? '?'} 칸 (상한 ${members.reduce((sum, m) => sum + m.capacity, 0)} − Running ${decision.running ?? '?'} − Pending ${decision.pending ?? '?'})`);
+          io.log(`임대 없는 실행 ${decision.unleasedRunning ?? '?'}`);
+          io.log(`capacity: ${decision.capacitySlots ?? '?'} 칸 (상한 ${members.reduce((sum, m) => sum + m.capacity, 0)} − Running ${decision.running ?? '?'} − Pending ${decision.pending ?? '?'}; 권장 수에서 건강한 멤버의 임대 없는 실행 차감)`);
           io.log(`memory: ${decision.memorySlots ?? '?'} 칸 (할당 가능 − Running 하니스 상한 합; 골당 16Gi · 모든 네임스페이스의 노드별 기존 예약을 반영해 배치 가능 ${decision.placeableSlots ?? '?'} 칸)`);
+          io.log(`lite: ${decision.liteMemorySlots ?? '?'} 칸 (같은 여유를 lite 골 2Gi 로 센 값 · 관측만 — 권장 수는 위 standard 기준)`);
           io.log(`accounts (관측만 · 상한 아님): ${decision.accountSlots ?? '?'} 칸 (${accounts ?? '?'} × ${perAccount} − Running ${decision.running ?? '?'})${accountReason ? ` · ${accountReason}` : ''}`);
         }
         io.exit(0);
@@ -78,14 +103,15 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
     });
   pod.command('run')
     .description(HELP)
-    .option('--pool <spec>', '풀 스펙 — 컨텍스트[@ssh호스트][:상한] 쉼표')
+    .option('--pool <spec>', '풀 스펙 — 컨텍스트[@ssh호스트][:상한][#레지스트리:포트] 쉼표')
     .option('--skill <names>', '스킬 이름(쉼표). 그 스킬 .env 만 Secret 으로 싣는다')
     .option('--llm <provider>', 'grok 만 허용 — access 사본(refresh 없음)')
     .option('--clone', '저장소를 clone 한다(비공개 · GitHub 토큰이 런 Secret 으로 간다 · 명시할 때만). 기본은 clone 없이 ~/work 에서 이미지의 elanous 로')
     .option('--deadline <seconds>', `Job 수명 상한(초). 생략 시 ${POD_COMMAND_DEADLINE_SECONDS}`)
     .allowUnknownOption(true)
     .allowExcessArguments(true)
-    .action(async (opts: { pool?: string; skill?: string; llm?: string; clone?: boolean; deadline?: string }, command: Command) => {
+    .option('--lite', '네트워크 스킬(omni-crawl·omni-digest)만 쓰는 명령 — 작은 이미지 ⊕ 2Gi 한도(POD7 · clone 불가)')
+    .action(async (opts: { pool?: string; skill?: string; llm?: string; clone?: boolean; deadline?: string; lite?: boolean }, command: Command) => {
       const argv = process.argv.slice(2);
       const sep = argv.indexOf('--');
       const fromArgv = sep >= 0 ? argv.slice(sep + 1) : [];
@@ -117,6 +143,7 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
           ...(skills.length ? { skills } : {}),
           ...(opts.llm === 'grok' ? { llm: 'grok' as const } : {}),
           ...(opts.clone ? { clone: true } : {}),
+          ...(opts.lite ? { lite: true } : {}),
           ...(deadlineSeconds !== undefined ? { deadlineSeconds } : {}),
         });
         if (result.image) io.error(`[pod] image ${result.image} · job ${result.job}`);

package/src/cli/pod-memory-advice.ts

@@ -0,0 +1,35 @@
+import { readPodMemoryMeasurement, type MemoryMeasurement } from '../../scripts/measure-pod-memory-by-goal.js';
+
+export type PodMemoryAdvice = {
+  window: MemoryMeasurement['window'];
+  sources: MemoryMeasurement['sources'];
+  byGoalType: Array<{
+    goalType: MemoryMeasurement['byGoalType'][number]['goalType'];
+    recommended: 'standard' | 'high';
+    limit: '16Gi' | '32Gi';
+    reason: string;
+    evidence: MemoryMeasurement['byGoalType'][number];
+  }>;
+};
+
+/** Advice only: the launch selector and its configuration remain independent. */
+export function advisePodMemory(measurement: MemoryMeasurement): PodMemoryAdvice {
+  return {
+    window: measurement.window,
+    sources: measurement.sources,
+    byGoalType: measurement.byGoalType.map((evidence) => {
+      const high = evidence.oomKilled > 0 || (evidence.peakMiB.p95 !== null && evidence.peakMiB.p95 >= 16 * 1024);
+      const reason = evidence.oomKilled > 0
+        ? `${evidence.oomKilled}/${evidence.runs} OOMKilled; measured peak p50=${evidence.peakMiB.p50 ?? 'n/a'} MiB, p95=${evidence.peakMiB.p95 ?? 'n/a'} MiB (${evidence.measured}/${evidence.runs} measured)`
+        : evidence.measured === 0
+          ? `No measured peaks (${evidence.missingPeak}/${evidence.runs} missing); standard is provisional, not evidence of safety`
+          : `Measured peak p50=${evidence.peakMiB.p50} MiB, p95=${evidence.peakMiB.p95} MiB (${evidence.measured}/${evidence.runs} measured, ${evidence.missingPeak} missing); ${high ? 'at or above' : 'below'} 16Gi`;
+      return { goalType: evidence.goalType, recommended: high ? 'high' as const : 'standard' as const,
+        limit: high ? '32Gi' as const : '16Gi' as const, reason, evidence };
+    }),
+  };
+}
+
+export function readPodMemoryAdvice(path?: string): PodMemoryAdvice {
+  return advisePodMemory(readPodMemoryMeasurement(path));
+}

package/src/cli/pr-cli.ts

@@ -18,7 +18,7 @@ import { runMockModuleRestoreGate } from '../../scripts/ci-mock-module-restore-g
 import { runModelHardcodeGate } from '../../scripts/ci-model-hardcode-gate.js';
 import { runDaemonPortGate } from '../../scripts/ci-daemon-port-gate.js';
 import { runPublicLeakGate } from '../../scripts/ci-public-leak-gate.js';
-import { exportLeakCheck, type ExportLeakCheck } from '../../scripts/ci-public-export-leak-gate.js';
+import { exportLeakCheck, publicExportChangedFiles, type ExportLeakCheck } from '../../scripts/ci-public-export-leak-gate.js';
 import { checkCommands, extractElanousCommands, type Finding as DocsCliFinding } from '../../scripts/docs-cli-check.js';
 import { runTestInterferenceGate } from '../../scripts/ci-test-interference-gate.js';
 import { isGoalDocumentFileName } from '../self-implement/goal-document.js';
@@ -104,7 +104,7 @@ export interface PrLandDeps {
   runMockModuleRestoreGate?: (out: { log: (message: string) => void; error: (message: string) => void }) => boolean;
   runModelHardcodeGate?: (out: { log: (message: string) => void; error: (message: string) => void }) => boolean;
   runDaemonPortGate?: (out: { log: (message: string) => void; error: (message: string) => void }) => boolean;
-  /** 공개 유출 래칫(경고 전용) — 반환 0 통과 · 1 늘었다 · 2 못 쟀다. */
+  /** 공개 유출 래칫(경고 전용) — 반환 0 동일 · 1 늘었다 · 2 못 쟀다 · 3 줄었다. */
   runPublicLeakGate?: (changedFiles: readonly string[], out: { log: (message: string) => void; error: (message: string) => void }) => number;
   /** Test seam — the post-transform export leak check on changed files. */
   runExportLeakCheck?: (changedFiles: readonly string[], cwd: string) => ExportLeakCheck;
@@ -275,8 +275,10 @@ export function runPrLandIsolationGate(
 
 /** ⭐ 2026-09-24 — 공개 유출 래칫은 «경고만» 낸다(착지를 막지 않는다 · 막는 것은 공개 결정 뒤 · 채널 합의).
  *  계기: 기준선 뒤 3시간 만에 🅢 착지분에서 유출 증가 다섯을 이 게이트가 잡았다 — 착지 순간에 보여야 그 자리에서 고친다. */
-function runPrLandPublicLeakGate(changedFiles: readonly string[], out: { log: (message: string) => void; error: (message: string) => void }): number {
-  return runPublicLeakGate({ args: ['--changed-files', ...changedFiles], log: out.log, error: out.log });
+function runPrLandPublicLeakGate(changedFiles: readonly string[], out: { log: (message: string) => void; error: (message: string) => void }, cwd: string, baselineRef: string): number {
+  const top = runGitCommand(cwd, ['rev-parse', '--show-toplevel'], { encoding: 'utf-8' });
+  if (top.status !== 0 || !String(top.stdout ?? '').trim()) return 2;
+  return runPublicLeakGate({ args: ['--changed-files', ...changedFiles], root: String(top.stdout).trim(), baselineRef, log: out.log, error: out.log });
 }
 
 /** The prepare check on this landing's changed files — scripts/ci-public-export-leak-gate.ts. */
@@ -285,23 +287,49 @@ export function runPrLandExportLeakCheck(changedFiles: readonly string[], cwd: s
   return exportLeakCheck(changedFiles, top.status === 0 && String(top.stdout ?? '').trim() ? String(top.stdout).trim() : cwd);
 }
 
-/** Blocks the landing when changed files would leak into the public export, unless allowPublicLeak. Returns false to stop. */
+/** Blocks changed public files that leak or cannot be measured. */
 export function exportLeakBlock(
   changedFiles: readonly string[] | undefined,
   check: () => ExportLeakCheck,
   allow: boolean,
   out: { log: (message: string) => void; error: (message: string) => void },
+  cwd: string = process.cwd(),
 ): boolean {
   if (!changedFiles || changedFiles.length === 0) return true;
   let result: ExportLeakCheck;
-  try { result = check(); } catch (error) { result = { measured: false, hits: [], detail: error instanceof Error ? error.message : String(error) }; }
-  record('public-export-leak', result.measured ? result.hits.length === 0 || allow : true, { measured: result.measured, hits: result.hits.length, allowed: allow && result.hits.length > 0 });
-  if (!result.measured) { out.log(`⚠ public-export-leak: 못 쟀다(${result.detail ?? '?'}) — 착지는 막지 않는다. 확인: bun scripts/public-export.ts --leak-check --files <파일…>`); return true; }
-  if (result.hits.length === 0) { out.log('✓ public-export-leak: 바뀐 파일이 공개본에 사적 흔적을 싣지 않는다(prepare 와 같은 변환 뒤).'); return true; }
+  try { result = check(); } catch { result = { measured: false, hits: [], detail: '검사 실행 실패' }; }
+  let publicFiles: string[] = [];
+  if (!result.measured) {
+    try { publicFiles = publicExportChangedFiles(changedFiles, cwd); }
+    catch { publicFiles = [...changedFiles]; } // A missing/invalid manifest cannot prove these files are private.
+  }
+  const applicable = result.hits.filter((hit) => hit.marker !== 'skill-boundary' || changedFiles.includes(hit.file));
+  const missingReason: ExportLeakCheck['hits'][number][] = [];
+  const blockedHits: ExportLeakCheck['hits'][number][] = [];
+  let allowed = 0;
+  for (const hit of applicable) {
+    let lines: string[];
+    try { lines = readFileSync(join(cwd, hit.file), 'utf8').split(/\r?\n/); }
+    catch { blockedHits.push(hit); continue; }
+    const notes = [lines[hit.line - 1], lines[hit.line - 2]].filter((line): line is string => line !== undefined)
+      .map((line) => /(?:\/\/|\/\*|\*|#|<!--)\s*public-export-allow:\s*(.*)/u.exec(line));
+    if (notes.some((note) => note?.[1]?.replace(/(?:\*\/|-->)\s*$/u, '').trim())) { allowed++; continue; }
+    blockedHits.push(hit);
+    if (notes.some(Boolean)) missingReason.push(hit);
+  }
+  const blocked = (!result.measured && publicFiles.length > 0) || (blockedHits.length > 0 && !allow);
+  record('public-export-leak', !blocked, { measured: result.measured, hits: applicable.length, allowed });
+  debug.log('pr.land', 'leak-gate', { blocked, hits: applicable.map(({ file, marker }) => ({ file, marker })), measured: result.measured, allowed });
+  if (!result.measured) {
+    const write = blocked ? out.error : out.log;
+    write(`${blocked ? '✗' : '⚠'} public-export-leak: 못 쟀다${blocked ? ' — 막는다' : ' — 공개 대상 변경 없음'}(${result.detail ?? '?'}) · 확인: bun scripts/public-export.ts --leak-check --json --all --files <파일…>`);
+    return !blocked;
+  }
+  if (blockedHits.length === 0) { out.log('✓ public-export-leak: 바뀐 파일이 공개본에 사적 흔적을 싣지 않는다(prepare 와 같은 변환 뒤).'); return true; }
   const write = allow ? out.log : out.error;
-  write(`${allow ? '⚠' : '✗'} public-export-leak: 바뀐 파일 ${result.hits.length}곳이 공개본에 사적 흔적을 싣는다 — 다음 release prepare 가 여기서 실패한다:`);
-  for (const h of result.hits.slice(0, 20)) write(`   ${h.file}:${h.line}  ${h.marker}`);
-  if (result.hits.length > 20) write(`   … 외 ${result.hits.length - 20}곳`);
+  write(`${allow ? '⚠' : '✗'} public-export-leak: 바뀐 파일 ${blockedHits.length}곳이 공개본에 사적 흔적을 싣는다 — 다음 release prepare 가 여기서 실패한다:`);
+  for (const hit of blockedHits.slice(0, 20)) write(`   ${hit.file}:${hit.line} · ${hit.marker}${missingReason.includes(hit) ? ' · 사유 없음' : ''}`);
+  if (blockedHits.length > 20) write(`   … 외 ${blockedHits.length - 20}곳`);
   write('   확인: bun scripts/public-export.ts --leak-check --all --files <파일…>');
   if (allow) { out.log('   --allow-public-leak 로 넘긴다(이유는 --land-reason).'); return true; }
   out.error('   고치거나, 공개본과 무관한 것이 확실하면 --allow-public-leak --land-reason "<이유>" 로 넘긴다.');
@@ -322,8 +350,12 @@ export function publicLeakWarning(
     record('public-leak-gate', true, { warnOnly: true, measured: false });
     return;
   }
-  record('public-leak-gate', true, { warnOnly: true, measured: rc !== 2, grew: rc === 1 });
+  record('public-leak-gate', true, { warnOnly: true, measured: rc !== 2, grew: rc === 1, shrank: rc === 3 });
   if (rc === 0) { out.log('✓ public-leak-gate(경고 전용): 공개 유출이 늘지 않았다.'); return; }
+  if (rc === 3) {
+    for (const line of captured.filter((l) => /→/.test(l))) out.log(`✓ public-leak-gate(경고 전용): 공개 유출이 줄었다 · 기준선 --update 권장 — ${line.trim()}`);
+    return;
+  }
   if (rc === 1) {
     out.log('⚠ public-leak-gate(경고 전용 · 착지는 막지 않는다): 공개 유출이 늘었다 —');
     for (const line of captured.filter((l) => /→/.test(l))) out.log(`   ${line.trim()}`);
@@ -1031,6 +1063,10 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
     out.error('✗ body: --body와 --body-file은 함께 사용할 수 없습니다.');
     return 1;
   }
+  if (opts.allowPublicLeak && !opts.landReason?.trim()) {
+    out.error('✗ public-export-leak: --allow-public-leak 에는 --land-reason "<이유>" 가 필요합니다.');
+    return 1;
+  }
   if (opts.includeActiveRunFiles && opts.excludeActiveRunFiles) {
     out.error('✗ active-run-files: --include-active-run-files와 --exclude-active-run-files는 함께 사용할 수 없습니다.');
     return 1;
@@ -1343,8 +1379,8 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
 
   const changedPaths = currentChangePaths(run, cwd, staged, base, out);
   nextMdWarning(body ?? '', changedPaths, out);
-  publicLeakWarning(changedPaths, deps.runPublicLeakGate ?? runPrLandPublicLeakGate, out);
-  if (!exportLeakBlock(changedPaths, () => (deps.runExportLeakCheck ?? runPrLandExportLeakCheck)(changedPaths ?? [], cwd), opts.allowPublicLeak === true, out)) return 1;
+  publicLeakWarning(changedPaths, deps.runPublicLeakGate ?? ((files, sink) => runPrLandPublicLeakGate(files, sink, cwd, base)), out);
+  if (!exportLeakBlock(changedPaths, () => (deps.runExportLeakCheck ?? runPrLandExportLeakCheck)(changedPaths ?? [], cwd), opts.allowPublicLeak === true, out, cwd)) return 1;
   if (publicDocPaths(changedPaths, () => true).length > 0) {
     const top = run('git', ['rev-parse', '--show-toplevel'], { cwd });
     const docsRoot = top.ok && top.out.trim() ? top.out.trim() : cwd;