elanous 0.2.19 → 0.2.21

package/src/nexus/api/http-server.ts

@@ -23,13 +23,16 @@ import { isAbsolute } from 'node:path';
 import { createProject, listProjects } from '../../project/project-store.js';
 import { handleOutputsGet, type OutputsDeps } from './outputs-route.js';
 import { buildGridData, type GridDeps } from './grid.js';
+import { createDraftMetricsSource, type DraftMetricsSource } from './draft-metrics.js';
 import { DECISIONS_PATH, handleDecisions, type DecisionsRouteDeps } from './decisions-route.js';
+import { OPS_BOARD_PATH, handleOpsBoard, type OpsBoardDeps } from './ops-board-route.js';
 import { CARD_FOLLOWUP_PATH, createCardFollowupJobs, type CardFollowupJobs } from './card-followup-route.js';
 import { SKILL_EXEC_PATH, createSkillExecJobs, type SkillExecJobs } from './skill-exec-route.js';
 import { compareTokenConstTime } from '../../acp/transport/auth.js';
 import { ensureAuthToken } from '../../auth/acp-token.js';
 import type { NexusState } from '../state/state.js';
 import { DEFAULT_NEXUS_HTTP_PORT } from '../default-port.js';
+
 export { DEFAULT_NEXUS_HTTP_PORT } from '../default-port.js';
 import type { TabRegistry } from '../state/tab-registry.js';
 import type { FeedbackEnvelope } from '../../feedback/envelope.js';
@@ -163,10 +166,12 @@ import {
 } from './vault-api.js';
 import { handleBuildsGet, parseBuildsPath } from './builds-api.js';
 import { handleHarnessAskPost, handleHarnessAskStatusGet, handleHarnessRunEventsGet, handleHarnessRunScreenGet, handleHarnessRunsGet, handleHarnessStopPost } from './harness-api.js';
+import { handleHarnessRunTraversalGet } from './harness-traversal.js';
 import { handleLoopEdgesGet } from './loop-edges.js';
 import { handleFabricPlans, type FabricPlansRouteOpts } from './fabric-plans.js';
 import { dispatchPersonaRoute } from './personas.js';
-import { handleMe } from './operator.js';
+import { handleMe, operatorSignal } from './operator.js';
+import { handleGraphRunRoute } from '../../graph-runner/graph-run-api.js';
 import { handleOpsApi } from './ops-api.js';
 import { handleRoleJudge } from './role-judge.js';
 import { handleAudioStt } from './audio-stt.js';
@@ -363,8 +368,9 @@ import {
 } from './workflows.js';
 import { handleTriggersSnapshot } from './triggers.js';
 import { handleWorkflowTemplatesList } from './workflow-templates.js';
-import { handleGraphsGet, handleGraphsMutation } from './graphs-api.js';
+import { handleGraphVersionsGet, handleGraphsGet, handleGraphsMutation } from './graphs-api.js';
 import { handleGraphKindsGet, handleGraphsValidatePost } from './graph-kinds.js';
+import { handleGraphWizardPost } from './graph-wizard-api.js';
 import { syncInstalledPluginNodes } from '../../graph-kinds/installed-plugin-nodes.js';
 import { elanousStateRoot } from '../../autopilot/state-paths.js';
 import { handlePluginsIndexGet, handlePluginsGet, handlePluginsMarketRefresh, handlePluginsInstall, handlePluginsRemove } from './plugins-market.js';
@@ -424,6 +430,9 @@ import {
   parseShowroomLayoutPath,
 } from './showroom-layouts.js';
 
+/** Process-wide DRAFT-METRIC cache (one background collection per TTL, shared by every page load). */
+let sharedDraftMetrics: DraftMetricsSource | undefined;
+
 export const NEXUS_HTTP_PORT_RANGE = 16;     // try 31415..31430
 /** Short timeout for the pre-bind localhost occupancy probe. */
 export const NEXUS_PORT_PROBE_TIMEOUT_MS = 400;
@@ -478,12 +487,17 @@ export type NexusWsBridgeInit = Omit<WsBridgeOpts, 'hostname' | 'port'>;
 export interface NexusHttpServerOpts {
   /** Optional fabric-plan ledger and decomposition seam; production uses the instance root and existing fabric decomposer. */
   fabricPlans?: FabricPlansRouteOpts;
+  /** GRAPH-WIZARD 시험 주입(LLM·템플릿 뿌리). 운영은 비워 둔다. */
+  graphWizard?: import('../../graph-wizard/generate.js').GraphWizardDeps;
   /** Optional installer state root for isolated API consumers and tests. */
   pluginStateRoot?: string;
   outputs?: OutputsDeps;
   /** Read-only grid measurement seam; omitted in production for live HQ and Pod pool reads. */
   grid?: GridDeps;
+  /** DRAFT-METRIC cached source seam; omitted in production for the process-wide TTL cache. */
+  draftMetrics?: DraftMetricsSource;
   decisions?: Pick<DecisionsRouteDeps, 'ledger'>;
+  opsBoard?: Pick<OpsBoardDeps, 'openStore'>;
   cardFollowup?: CardFollowupJobs;
   skillExec?: SkillExecJobs;
   execRequests?: ExecRequestRunner;
@@ -938,6 +952,20 @@ export async function routeRequest(
     }
     return pitch.handlePitchApi(req, opts.metaApi);
   }
+  // CGE-RUN — 편집기 «실행»은 운영자 전용이다: 사용자 그래프가 셸 노드를 부를 수 있으므로 같은 출처 무토큰 통과는 받지 않는다
+  // (운영자 프록시 헤더 · owner bearer 일치 · owner 가 발급한 짧은 임시 토큰만 — 명시 토큰은 언제나 필요).
+  if (/^\/v1\/graphs\/[^/]+\/(?:run|runs\/[^/]+)$/.test(pathname)) {
+    if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
+    const signal = operatorSignal(req, opts.metaApi);
+    const credential = bearerCredential(req, opts.metaApi);
+    if (!signal.operator || (signal.operatorSource !== 'op-proxy' && credential !== 'bearer-match' && credential !== 'temp-token')) {
+      debug.log('graphs.run', 'refused', { path: pathname, source: signal.operatorSource });
+      return jsonResponse({ error: 'forbidden' }, 403);
+    }
+    const routed = handleGraphRunRoute(method, pathname);
+    if (routed) return routed;
+    return jsonResponse({ error: 'method-not-allowed' }, 405);
+  }
 
   // Default-deny for every `/v1/` path that is not on PUBLIC_ROUTES.
   // Reuses checkAuth (same-origin exemption + constant-time bearer).
@@ -1343,6 +1371,13 @@ export async function routeRequest(
     return handleHarnessRunEventsGet(req, opts.metaApi);
   }
 
+  // HARNESS-RUN-LIVE-GRAPH — one run's ordered node steps ⊕ journey band (PWA /live-run).
+  if (pathname === '/v1/harness/run-traversal' && method === 'GET') {
+    if (!opts.metaApi) return jsonResponse({ error: 'meta-api-runtime-not-wired' }, 503);
+    if (!checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleHarnessRunTraversalGet(req);
+  }
+
   // Design direction is a write: check owner auth before the handler reads the body.
   // Keep this POST ahead of the mutation fallback, and never make it a public route.
   if (method === 'POST' && pathname === DESIGN_DIRECTION_PATH) {
@@ -1372,6 +1407,13 @@ export async function routeRequest(
     return handleGraphsValidatePost(req, opts.metaApi);
   }
 
+  // GRAPH-WIZARD — 말 → 그래프 YAML(저장 안 함). 다른 /v1/graphs 쓰기와 같은 인증.
+  if (method === 'POST' && pathname === '/v1/graphs/wizard') {
+    if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
+    if (!checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    return handleGraphWizardPost(req, opts.graphWizard);
+  }
+
   if (pathname === '/v1/fabric/decompose' || pathname.startsWith('/v1/fabric/plans/')) {
     if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
     return handleFabricPlans(req, opts.fabricPlans);
@@ -1392,6 +1434,21 @@ export async function routeRequest(
     return (opts.cardFollowup ?? defaultCardFollowupJobs()).get(pathname.slice(CARD_FOLLOWUP_PATH.length + 1));
   }
 
+  if (pathname === OPS_BOARD_PATH && (method === 'GET' || method === 'POST')) {
+    const peerAddress = (server as BunServerLike & { requestIP?: (request: Request) => { address: string } | null }).requestIP?.(req)?.address;
+    const host = req.headers.get('host') ?? new URL(req.url).host;
+    const tailnetPeer = peerAddress !== undefined && (/^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\./.test(peerAddress)
+      || /^fd7a:115c:a1e0:/i.test(peerAddress));
+    const localPeer = peerAddress === '127.0.0.1' || peerAddress === '::1';
+    const tailnetHost = /^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.\d{1,3}\.\d{1,3}(?::\d+)?$/.test(host)
+      || /^\[fd7a:115c:a1e0:[0-9a-f:]+\](?::\d+)?$/i.test(host) || /^[a-z0-9-]+(?:\.[a-z0-9-]+)*\.ts\.net(?::\d+)?$/i.test(host);
+    const localHost = /^(?:localhost|127\.0\.0\.1)(?::\d+)?$/.test(host) || /^\[::1\](?::\d+)?$/.test(host);
+    if ((!tailnetPeer && !localPeer) || (!tailnetHost && !localHost)) return jsonResponse({ error: 'forbidden' }, 403);
+    return handleOpsBoard(req, {
+      authorize: request => !!opts.metaApi && opts.metaApi.noAuth !== true && checkAuth(request, opts.metaApi),
+      ...opts.opsBoard,
+    });
+  }
   if (method === 'GET' && pathname === DECISIONS_PATH) {
     return handleDecisions(req, {
       authorize: request => !!opts.metaApi && checkAuth(request, opts.metaApi),
@@ -1405,6 +1462,12 @@ export async function routeRequest(
     if (method !== 'GET') return jsonResponse({ error: 'method-not-allowed', method }, 405);
     return jsonResponse(buildGridData(opts.grid));
   }
+  // DRAFT-METRIC: answers from memory; a stale/cold cache starts one background collection (never per request).
+  if (pathname === '/v1/drafts/metrics') {
+    if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
+    if (method !== 'GET') return jsonResponse({ error: 'method-not-allowed', method }, 405);
+    return jsonResponse((opts.draftMetrics ?? (sharedDraftMetrics ??= createDraftMetricsSource())).read());
+  }
   if (method === 'GET' && pathname === '/v1/outputs') {
     if (!opts.metaApi || !checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
     return handleOutputsGet(req, opts.outputs);
@@ -1471,7 +1534,7 @@ export async function routeRequest(
       if (!opts.metaApi) return jsonResponse({ error: 'unauthorized' }, 401);
       return handlePluginsRemove(req, pluginRemove[1]!, opts.metaApi, opts.pluginStateRoot);
     }
-    if ((method === 'PUT' || method === 'POST') && pathname.startsWith('/v1/graphs/')) {
+    if ((method === 'PUT' || method === 'POST') && (pathname.startsWith('/v1/graphs/') || pathname === '/v1/graphs')) {
       if (!opts.metaApi) return jsonResponse({ error: 'meta-api-not-wired' }, 503);
       if (!checkAuth(req, opts.metaApi)) return jsonResponse({ error: 'unauthorized' }, 401);
       const mutated = await handleGraphsMutation(pathname, req);
@@ -2785,6 +2848,9 @@ export async function routeRequest(
   if (method === 'GET' && (pathname === '/v1/graphs' || /^\/v1\/graphs\/[^/]+$/.test(pathname) || /^\/v1\/graphs\/[^/]+\/yaml$/.test(pathname))) {
     return handleGraphsGet(pathname);
   }
+  if (method === 'GET' && /^\/v1\/graphs\/[^/]+\/versions$/.test(pathname)) {
+    return handleGraphVersionsGet(pathname);
+  }
   // Archon-port T2.3 (2026-05-08) — workflow GET surface.
   // (POST /validate · POST /:name/run · PUT/DELETE /:name landed
   // inside the mutation block above.)

package/src/nexus/api/loop-edges.ts

@@ -31,6 +31,8 @@ export interface LoopEdge {
   tick?: string;
   /** live claimed 뒤 handed·released 없이 N분 지남 = 발사 실패(끊긴 넘김). ref = 오케스트레이터 카드 id. */
   broken?: true;
+  /** launch 간선만 — 그 카드에 묶인 런 원장 runId(ID 정규식). 못 묶으면 생략(PWA 가 10분 뒤 «유령»으로 본다). */
+  run?: string;
 }
 
 /** 노드 접두 — 조율 루프는 레지스트리 행 `loop:orchestrator` 그대로 쓴다. `queue:` 는 대기열 대체 간선 자리(조각 A 밖). */
@@ -369,10 +371,10 @@ function taskAgentEdges(deps: LoopEdgesDeps, facts: readonly RunFact[], seats: R
     if (typeof card.mission === 'string' && ID.test(card.mission)) journey.links.push({ from: card.id, to: card.mission, both: false });
     if (Array.isArray(card.pieces)) journey.pieces.set(card.id, card.pieces.filter(piece => typeof piece === 'string' && ID.test(piece)));
     const launches = launchesOf(card);
+    const runId = linkedRun(card, launches[0]?.at, launchedTexts, facts, childIds);
     for (const launch of launches) {
-      if (seat(card.seat, seats) && inWindow(launch.at, since, now)) edges.push({ at: launch.at, kind: 'launch', from: TASK_AGENT_NODE, to: card.seat, ref: card.id });
+      if (seat(card.seat, seats) && inWindow(launch.at, since, now)) edges.push({ at: launch.at, kind: 'launch', from: TASK_AGENT_NODE, to: card.seat, ref: card.id, ...(runId ? { run: runId } : {}) });
     }
-    const runId = linkedRun(card, launches[0]?.at, launchedTexts, facts, childIds);
     if (runId) journey.links.push({ from: card.id, to: runId, both: true });
     const green = object(card.greenProposal);
     if (green && typeof green.at === 'string' && typeof green.checklistId === 'string' && ID.test(green.checklistId) && inWindow(green.at, since, now)) {

package/src/nexus/api/ops-api.ts

@@ -1,7 +1,8 @@
 import { lstatSync, readFileSync, readdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { debug, redactSecretText } from '../../debug/log.js';
-import { effectiveInstanceRoot } from '../../instance/resolve.js';
+import { effectiveInstanceRoot, releaseLedgerRoot } from '../../instance/resolve.js';
+import { gateShardsPath, readGateShards, summarizeShards, type GateShardsFile, type GateShardsSummary } from '../../release-loop/gate-shards.js';
 import { listChecklist } from '../../release-loop/checklist.js';
 import { getSchedule } from '../../release-loop/release-schedule.js';
 import { jsonResponse } from './json-response.js';
@@ -123,13 +124,25 @@ export function releaseNodeFacts(output: unknown): ReleaseNodeFacts {
 }
 export interface ReleaseRunView {
   runId: string; status: string; startedAt: string; version: string | null; path: string[]; nodes: ReleaseRunNodeView[];
+  /** GATE-LIVE-OBS — 지금 gate 노드에 있는 런에만 싣는다(발행 원장 `gate-logs/cut/shards.json`). 파일이 없으면 생략. */
+  gateShards?: GateShardsFile & { summary: GateShardsSummary };
+}
+
+/** 도는 gate 노드의 조각 표 — 다른 판의 파일을 붙이지 않게 version 이 같을 때만. */
+function gateShardsFor(version: string | null, status: string, nodes: ReleaseRunNodeView[], ledgerRoot: string, now: number):
+  ReleaseRunView['gateShards'] | undefined {
+  if (!version || status !== 'running' || !nodes.some((node) => node.nodeId === 'gate' && node.ok === null)) return undefined;
+  const file = readGateShards(gateShardsPath(version, ledgerRoot));
+  if (!file || file.version !== version) return undefined;
+  return { ...file, shards: file.shards.map((shard) => shard.waitReason ? { ...shard, waitReason: redactSecretText(shard.waitReason) } : shard),
+    summary: summarizeShards(file, now) };
 }
 
 /** The release run ledger as `/v1/ops/release/runs` serves it (newest 20) — shared with Telegram /release and away mode
  *  so every surface reads the same verdicts. `'unavailable'` = the directory exists but cannot be read. */
 export function readReleaseRuns(version: string | null = null,
   dir: string = join(effectiveInstanceRoot(), 'graph-runs', 'release-loop'),
-  opts: { facts?: boolean } = {}): ReleaseRunView[] | 'unavailable' {
+  opts: { facts?: boolean; ledgerRoot?: string; now?: number } = {}): ReleaseRunView[] | 'unavailable' {
   let filenames: string[];
   try {
     filenames = readdirSync(dir, { withFileTypes: true })
@@ -146,15 +159,17 @@ export function readReleaseRuns(version: string | null = null,
     if (!run) return [];
     const v = runVersion(run.input);
     if (version !== null && v !== version) return [];
+    const nodes: ReleaseRunNodeView[] = [...run.nodes.filter((node) => node && typeof node.nodeId === 'string').map((node) => ({
+      nodeId: redactSecretText(node.nodeId), ok: typeof node.ok === 'boolean' ? node.ok : null,
+      summary: nodeSummary(node.output), ...nodeTimes(node),
+      ...(opts.facts ? { facts: releaseNodeFacts(node.output) } : {}),
+    })), ...runningNode(run, run.nodes.length)];
+    const gateShards = gateShardsFor(v, run.status, nodes, opts.ledgerRoot ?? releaseLedgerRoot(), opts.now ?? Date.now());
     return [{
       runId: redactSecretText(filename.slice(0, -5)), status: redactSecretText(run.status),
       startedAt: redactSecretText(run.startedAt), version: v,
       path: run.path.filter((step): step is string => typeof step === 'string').map(redactSecretText),
-      nodes: [...run.nodes.filter((node) => node && typeof node.nodeId === 'string').map((node) => ({
-        nodeId: redactSecretText(node.nodeId), ok: typeof node.ok === 'boolean' ? node.ok : null,
-        summary: nodeSummary(node.output), ...nodeTimes(node),
-        ...(opts.facts ? { facts: releaseNodeFacts(node.output) } : {}),
-      })), ...runningNode(run, run.nodes.length)],
+      nodes, ...(gateShards ? { gateShards } : {}),
     }];
   }).sort((a, b) => b.startedAt.localeCompare(a.startedAt)).slice(0, 20);
 }

package/src/nexus/api/ops-board-route.ts

@@ -0,0 +1,48 @@
+import { canonicalSeatId, openMsgStore, type Message, type MsgStore } from '../../msg/msg-store.js';
+import { jsonResponse } from './json-response.js';
+
+function ownerNotices(store: Pick<MsgStore, 'list'>): Message[] {
+  const notices: Message[] = [];
+  let after = 0;
+  let batch: Message[];
+  do {
+    batch = store.list('CEO', after, 1000);
+    notices.push(...batch.filter(message => message.from !== 'CEO'));
+    if (batch.length) after = batch[batch.length - 1]!.id;
+  } while (batch.length === 1000);
+  return notices;
+}
+
+export const OPS_BOARD_PATH = '/v1/ops-board/notices';
+
+export interface OpsBoardDeps {
+  authorize: (request: Request) => boolean;
+  openStore?: () => Pick<MsgStore, 'list' | 'post' | 'close'>;
+}
+
+/** Owner reads the CEO inbox without acknowledging it; replies are addressed to the original sender. */
+export async function handleOpsBoard(req: Request, deps: OpsBoardDeps): Promise<Response> {
+  if (!deps.authorize(req)) return jsonResponse({ error: 'unauthorized' }, 401);
+  if (req.method !== 'GET' && req.method !== 'POST') return jsonResponse({ error: 'method-not-allowed' }, 405);
+  const store = (deps.openStore ?? openMsgStore)();
+  try {
+    if (req.method === 'GET') {
+      const notices = ownerNotices(store);
+      return jsonResponse({ notices });
+    }
+    let body: unknown;
+    try { body = await req.json(); } catch { return jsonResponse({ error: 'bad_request' }, 400); }
+    if (!body || typeof body !== 'object' || Array.isArray(body)) return jsonResponse({ error: 'bad_request' }, 400);
+    const input = body as Record<string, unknown>;
+    if (!Number.isSafeInteger(input.noticeId) || (input.noticeId as number) < 1
+      || typeof input.body !== 'string' || !input.body.trim() || input.body.length > 3000
+      || Object.keys(input).some(key => key !== 'noticeId' && key !== 'body')) return jsonResponse({ error: 'bad_request' }, 400);
+    const notice: Message | undefined = ownerNotices(store).find(message => message.id === input.noticeId);
+    if (!notice) return jsonResponse({ error: 'not-found' }, 404);
+    const recipient = canonicalSeatId(notice.from);
+    const reply = store.post({ from: 'CEO', to: recipient, body: input.body.trim(), kind: 'reply' });
+    return jsonResponse({ reply }, 201);
+  } finally {
+    store.close();
+  }
+}

package/src/nexus/outbound/router.ts

@@ -16,7 +16,8 @@
 //       { "type": "discord", "webhookUrl": "https://discord.com/api/webhooks/..." },
 //       { "type": "pushcut", "webhookUrl": "https://api.pushcut.io/.../notifications/..." }
 //     ],
-//     "routes": { "alert": ["telegram", "pushcut"], "report": ["telegram", "discord"] }
+//     "routes": { "alert": ["telegram", "pushcut"], "report": ["telegram", "discord"] },
+//     "awayRoutes": { "alert": ["discord"] }
 //   }
 //
 // Backward compat: when `outbound` is absent/malformed the resolved
@@ -27,6 +28,7 @@
 // that boolean before falling back to direct Telegram).
 
 import { createHash } from 'node:crypto';
+import { readPresence } from '../../away/presence.js';
 import { debug } from '../../debug/log.js';
 import { sendTelegramReport } from '../../telegram-report.js';
 import { getPushcutClient } from '../../pushcut/client.js';
@@ -58,6 +60,8 @@ export interface OutboundFanoutConfig {
    *  `routes.default`, then to ALL configured channels. An explicitly
    *  empty route (`"heartbeat": []`) suppresses that kind. */
   routes?: Record<string, string[]>;
+  /** 외출 중 kind → channel types. 미지정 kind는 awayRoutes.default, 이것도 없으면 기존 routes를 유지한다. */
+  awayRoutes?: Record<string, string[]>;
 }
 
 export interface ChannelResult {
@@ -118,14 +122,17 @@ export function normalizeOutbound(raw: unknown): OutboundFanoutConfig | undefine
     channels.push({ type, ...(webhookUrl ? { webhookUrl } : {}), ...(notification ? { notification } : {}) });
   }
   if (channels.length === 0) return undefined;
-  let routes: Record<string, string[]> | undefined;
-  if (o.routes && typeof o.routes === 'object' && !Array.isArray(o.routes)) {
-    routes = {};
-    for (const [kind, v] of Object.entries(o.routes as Record<string, unknown>)) {
+  const parseRoutes = (value: unknown): Record<string, string[]> | undefined => {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) return undefined;
+    const routes: Record<string, string[]> = {};
+    for (const [kind, v] of Object.entries(value as Record<string, unknown>)) {
       if (Array.isArray(v)) routes[kind] = v.filter((t): t is string => typeof t === 'string');
     }
-  }
-  return { channels, ...(routes ? { routes } : {}) };
+    return routes;
+  };
+  const routes = parseRoutes(o.routes);
+  const awayRoutes = parseRoutes(o.awayRoutes);
+  return { channels, ...(routes ? { routes } : {}), ...(awayRoutes ? { awayRoutes } : {}) };
 }
 
 /** Resolve the channel list for one message kind. No/empty config →
@@ -219,7 +226,20 @@ export async function routeOutbound(cfg: UserConfig, msg: OutboundMsg, deps: Rou
     } catch { /* 원장 조회 실패 — 억제 없이 진행 */ }
   }
 
-  const list = resolveChannels(outbound, msg.kind);
+  // 상태 파일이 없거나 읽기에 실패하면 기존 kind 경로를 그대로 사용한다.
+  let list = resolveChannels(outbound, msg.kind);
+  if (outbound?.awayRoutes) {
+    try {
+      if (readPresence().away) {
+        const awayRoute = outbound.awayRoutes[msg.kind] ?? outbound.awayRoutes.default;
+        // kind 도 default 도 없으면 기존 경로로 · 명시적인 빈 배열은 기존 routes 와 같은 규칙(채널 0)을 따른다.
+        if (awayRoute !== undefined) {
+          list = outbound.channels.filter(ch => awayRoute.includes(ch.type));
+          try { debug.log('outbound.send', 'away-route', { kind: msg.kind, channels: list.map(ch => ch.type) }); } catch { /* 관측 실패는 발송 결과에 영향 없음 */ }
+        }
+      }
+    } catch { /* 상태 조회 실패 — 기존 경로 유지 */ }
+  }
   const channels = await Promise.all(list.map(async (ch): Promise<ChannelResult> => {
     try {
       if (ch.type === 'telegram') return await deliverTelegram(cfg, outMsg, deps);

package/src/onboarding/entry-hints.ts

@@ -5,4 +5,9 @@ export function unattendedSetupHint(): string {
   return `unattended: \`${UNATTENDED_SETUP_COMMAND}\``;
 }
 
+/** One-line next step printed after a non-TTY onboarding refusal (FIRST-CHAT-NONTTY). */
+export function unattendedNextStepLine(): string {
+  return `next: ${unattendedSetupHint()}`;
+}
+
 export const SKILLS_LIST_DESCRIPTION = 'List elanous skills from configured skill directories (skills.activeSet / skills.dirs and packaged skills): subdirectories and the first non-heading line of each SKILL.md. Read-only.';

package/src/onboarding/first-run.ts

@@ -1,6 +1,7 @@
 import * as readline from 'node:readline/promises';
 import { detectProviders, type DetectedProvider } from '../llm/provider-detect.js';
 import { debug } from '../debug/log.js';
+import { unattendedNextStepLine } from './entry-hints.js';
 import { resolveProviderCredential } from '../llm/provider-credentials.js';
 import {
   getUserConfig, saveUserConfig, userConfigPath,
@@ -57,6 +58,8 @@ export async function runFirstRun(deps: FirstRunDeps = {}): Promise<{
   if (!provider) {
     if ((deps.isTTY ?? process.stdin.isTTY) !== true) {
       print('eln setup llm 으로 고르세요');
+      // FIRST-CHAT-NONTTY — bare `elanous` with no TTY gets the same one-line next step as the other entrances.
+      print(unattendedNextStepLine());
       observe('needs-llm', 0);
       return { outcome: 'needs-llm', inputs: 0 };
     }

package/src/onboarding.ts

@@ -59,7 +59,7 @@ import type {
 import { showStepOr, chooseFrom } from './onboarding/io-extended.js';
 import { askWithHelp } from './onboarding/wire-helpers.js';
 import { stepTransition } from './onboarding/transition.js';
-import { unattendedSetupHint } from './onboarding/entry-hints.js';
+import { unattendedNextStepLine, unattendedSetupHint } from './onboarding/entry-hints.js';
 import { continueHereLines } from './onboarding/continue-here.js';
 import type { NexusShowResult } from './cli/nexus-show.js';
 import type { TailscaleProbe } from './nexus/onboarding/tailscale-probe.js';
@@ -1370,15 +1370,33 @@ export class OnboardingRefusedError extends Error {
   }
 }
 
-/** Handle only typed refusals; the agent setup hint applies to its non-TTY path alone. */
-export function handleOnboardingRefusal(error: unknown, entrance: 'agent' | 'other'): boolean {
+export interface OnboardingRefusalIO {
+  printError: (line: string) => void;
+  setExitCode: (code: number) => void;
+}
+
+const defaultRefusalIO: OnboardingRefusalIO = {
+  printError: (line) => console.error(line),
+  setExitCode: (code) => { process.exitCode = code; },
+};
+
+/** Handle only typed refusals; the agent setup hint applies to its non-TTY path alone.
+ *  FIRST-CHAT-NONTTY: on the non-TTY path of any other entrance the refusal ends with a
+ *  one-line next step (`unattendedNextStepLine()`), so a script or app that called first knows
+ *  what to run. The exit code stays 2. */
+export function handleOnboardingRefusal(
+  error: unknown,
+  entrance: 'agent' | 'other',
+  io: OnboardingRefusalIO = defaultRefusalIO,
+): boolean {
   if (!(error instanceof OnboardingRefusedError) || error.code !== 'onboarding-refused') return false;
   if (entrance === 'agent' && error.reason === 'non-tty') {
-    console.error(`elanous agent needs a configured LLM. Run \`elanous onboarding\` in a terminal, or ${unattendedSetupHint()} for unattended setup.`);
+    io.printError(`elanous agent needs a configured LLM. Run \`elanous onboarding\` in a terminal, or ${unattendedSetupHint()} for unattended setup.`);
   } else {
-    console.error(error.message);
+    io.printError(error.message);
+    if (error.reason === 'non-tty') io.printError(unattendedNextStepLine());
   }
-  process.exitCode = 2;
+  io.setExitCode(2);
   return true;
 }