elanous 0.2.22 → 0.2.24

package/src/task-orchestrator/surfaces/self-implement.ts

@@ -19,6 +19,7 @@
  * Cf. PLAN-parallel-self-dev-orchestrator-2026-07-21.
  */
 import { lstatSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import type { ReviewRework } from '../../self-dev/run-types.js';
 import { oldDoorInternalEnv } from '../../self-dev/old-door.js';
 import { selfDevRunsDir } from '../../self-dev/run-store.js';
 import { debug } from '../../debug/log.js';
@@ -56,7 +57,8 @@ export interface SelfImplementDisposition {
   /** Head SHA checked by the Pod before host regate. */
   checkedHeadCommit?: string;
   /** Review verdict only when the child bound a real pass to a clean, unchanged worktree head. */
-  selfReview?: { verdict: 'pass'; head: string };
+  /** `mustFixCount` = the child's review must-fix list length; omitted when the child JSON carried no list (unknown). */
+  selfReview?: { verdict: 'pass'; head: string; mustFixCount?: number };
   hostRegate?: { passed: boolean; failures: Array<{ step: string; detail: string }>; os: string };
   merged?: boolean;
   detail?: string;
@@ -88,6 +90,7 @@ export interface SelfImplementDisposition {
   reviewVerdict?: 'pass' | 'warn' | 'fail';
   /** 마지막 리뷰의 must-fix 수(`review.mustFix.length`). 같은 조건. */
   reviewMustFixCount?: number;
+  rework?: ReviewRework;
   mustFix?: string[];
 }
 
@@ -462,6 +465,16 @@ export function parseSelfImplementJson(stdout: string): SelfImplementDisposition
       const o = JSON.parse(line) as Record<string, unknown>;
       if (typeof o.stage !== 'string' && typeof o.ok !== 'boolean') continue;
       const failureClassification = failureClassificationFromJson(o);
+      const rawRework = o.rework && typeof o.rework === 'object' && !Array.isArray(o.rework)
+        ? o.rework as Record<string, unknown> : undefined;
+      const rework = rawRework
+        && typeof rawRework.trend === 'string'
+        && ['unmeasured', 'improving', 'stable', 'worsening', 'oscillating'].includes(rawRework.trend)
+        && typeof rawRework.signature === 'string'
+        && typeof rawRework.rounds === 'number' && Number.isSafeInteger(rawRework.rounds) && rawRework.rounds >= 1
+        // A measured trend needs two reviews, a direction change three — a contradictory pair is not an observation.
+        && (rawRework.trend === 'unmeasured' ? rawRework.rounds === 1 : rawRework.rounds >= (rawRework.trend === 'oscillating' ? 3 : 2))
+        ? { trend: rawRework.trend as ReviewRework['trend'], signature: rawRework.signature, rounds: rawRework.rounds } : undefined;
       const mapped: SelfImplementDisposition = {
         ...(typeof o.stage === 'string' ? { stage: o.stage } : {}),
         ...(typeof o.ok === 'boolean' ? { ok: o.ok } : {}),
@@ -475,7 +488,10 @@ export function parseSelfImplementJson(stdout: string): SelfImplementDisposition
           && o.review && typeof o.review === 'object' && !Array.isArray(o.review)
           && (o.review as { reviewed?: unknown; verdict?: unknown }).reviewed === true
           && (o.review as { verdict?: unknown }).verdict === 'pass'
-          ? { selfReview: { verdict: 'pass' as const, head: o.reviewedHeadCommit } } : {}),
+          ? { selfReview: { verdict: 'pass' as const, head: o.reviewedHeadCommit,
+            // TA-LAND-MUSTFIX-ZERO — must-fix 수를 같이 나른다(목록이 없으면 «모름» = 안 싣는다 · land 관문이 막는다).
+            ...(Array.isArray((o.review as { mustFix?: unknown }).mustFix) && ((o.review as { mustFix: unknown[] }).mustFix).every((fix) => typeof fix === 'string')
+              ? { mustFixCount: ((o.review as { mustFix: unknown[] }).mustFix).length } : {}) } } : {}),
         ...(typeof o.hostRegate === 'object' && o.hostRegate !== null ? { hostRegate: o.hostRegate as SelfImplementDisposition['hostRegate'] } : {}),
         ...(typeof o.merged === 'boolean' ? { merged: o.merged } : {}),
         ...(typeof o.detail === 'string' ? { detail: o.detail } : {}),
@@ -495,7 +511,13 @@ export function parseSelfImplementJson(stdout: string): SelfImplementDisposition
           ? { providerErrors: o.providerErrors as SelfImplementDisposition['providerErrors'] } : {}),
         ...(typeof o.runId === 'string' && o.runId.trim() ? { runId: o.runId, childRunId: o.runId } : {}),
         ...reviewGateFields(o),
-        ...(Array.isArray(o.mustFix) && o.mustFix.every((item) => typeof item === 'string') ? { mustFix: o.mustFix as string[] } : {}),
+        ...(rework ? { rework } : {}),
+        ...(Array.isArray(o.mustFix) && o.mustFix.every((item) => typeof item === 'string') ? { mustFix: o.mustFix as string[] }
+          : o.review && typeof o.review === 'object' && !Array.isArray(o.review)
+            && (o.review as { reviewed?: unknown }).reviewed === true
+            && Array.isArray((o.review as { mustFix?: unknown }).mustFix)
+            && ((o.review as { mustFix: unknown[] }).mustFix).every((item) => typeof item === 'string')
+            ? { mustFix: (o.review as { mustFix: string[] }).mustFix } : {}),
       };
       reportUnmappedDispositionFields(o, mapped);
       return mapped;

package/src/telegram-service.ts

@@ -74,6 +74,8 @@ export interface TelegramServiceInstallDeps {
   writeFile: (path: string, text: string) => void;
   mkdir: (path: string) => void;
   rename: (from: string, to: string) => void;
+  /** SEC2: a replaced plist may carry an emergency EnvironmentVariables token — its backup is kept owner-only. */
+  chmod: (path: string, mode: number) => void;
   run: (command: string, args: string[]) => { status: number | null; stderr: string };
 }
 
@@ -106,8 +108,10 @@ export function installTelegramService(
   if (deps.exists(file.path)) {
     if (deps.readFile(file.path) !== file.content) {
       backup = `${file.path}.bak-${Date.now()}`;
+      // Restrict before moving: if chmod fails nothing has moved and the live plist stays in place.
+      deps.chmod(file.path, 0o600);
       deps.rename(file.path, backup);
-      steps.push(`backup ${backup}`);
+      steps.push(`backup ${backup} (0600)`);
     } else {
       steps.push('service file unchanged');
     }

package/src/telegram.ts

@@ -81,8 +81,8 @@ import { maybeHandleCardPhoto, type CardPhotoDeps } from './telegram-card-follow
 import { attachTelegramProjectButtons } from './telegram-project-command.js';
 import { attachTelegramFabricPlan } from './telegram-fabric-plan.js';
 import { contextNow as readContextNow, type ContextNowDeps } from './context-bus/context-now.js';
-import { renderContextFirstNow } from './context-bus/context-now-surfaces.js';
-import { createContextFirstGate, renderContextFirst } from './context-bus/context-first.js';
+import { renderContextFirstOpening } from './context-bus/context-now-surfaces.js';
+import { createContextFirstFileStore, createContextFirstGate, isOperationalQuery, renderContextFirst, type ContextFirstStore } from './context-bus/context-first.js';
 
 export type TgAttachmentKind = 'photo' | 'voice' | 'audio' | 'document';
 
@@ -239,6 +239,8 @@ export interface TelegramBotOpts {
   /** 시험 seam — `/v1/context/now` 와 같은 `contextNow` 읽기. 던지면 «맥락 못 읽음». */
   readContextNow?: typeof readContextNow;
   contextNowDeps?: ContextNowDeps;
+  /** Keeps last-utterance times across a daemon restart so a restart does not re-send the context-first opening. */
+  contextFirstStore?: ContextFirstStore;
 }
 
 /** Surface-unification v2 (FU-2) — Telegram trigger event passed to
@@ -363,7 +365,7 @@ export class TelegramBot {
   private readonly handleFabricPlan: (ctx: TgIncoming) => Promise<boolean>;
   private readonly readContextNow: typeof readContextNow;
   private readonly contextNowDeps?: ContextNowDeps;
-  private readonly contextFirstGate = createContextFirstGate({ now: () => this.nowImpl() });
+  private readonly contextFirstGate: ReturnType<typeof createContextFirstGate>;
   private seatAskTimer: ReturnType<typeof setInterval> | null = null;
   /** 앨범 id → `#현장` 행사 · 답장 디바운스. 태그된 앨범만 들어온다. */
   private readonly fieldGroups = new Map<string, {
@@ -390,6 +392,10 @@ export class TelegramBot {
     this.log = opts.log ?? ((m: string) => debug.log('telegram.core', m));
     this.sleepImpl = opts.sleepImpl ?? sleep;
     this.nowImpl = opts.nowImpl ?? (() => Date.now());
+    this.contextFirstGate = createContextFirstGate({
+      now: () => this.nowImpl(),
+      ...(opts.contextFirstStore ? { store: opts.contextFirstStore } : {}),
+    });
     this.perChatGapMs = opts.perChatGapMs ?? DEFAULT_PER_CHAT_GAP_MS;
     this.globalMaxPerSec = opts.globalMaxPerSec ?? DEFAULT_GLOBAL_MAX_PER_SEC;
     this.streamEditGapMs = opts.streamEditGapMs ?? DEFAULT_STREAM_EDIT_GAP_MS;
@@ -436,8 +442,11 @@ export class TelegramBot {
     if (!this.contextFirstGate.take(key)) return;
     const cfg = this.slashContext?.userConfig.telegram;
     if (cfg?.contextFirst === false) return;
+    if (isOperationalQuery(ctx.text)) return;
     try {
-      await this.sendMessage(ctx.chatId, renderContextFirst(this.readContextNow, this.contextNowDeps, renderContextFirstNow), { replyTo: ctx.messageId, threadId: ctx.threadId });
+      const opening = renderContextFirst(this.readContextNow, this.contextNowDeps, renderContextFirstOpening);
+      if (!opening) return;
+      await this.sendMessage(ctx.chatId, opening, { replyTo: ctx.messageId, threadId: ctx.threadId });
     } catch (err) {
       this.log(`telegram context-first failed: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -2988,6 +2997,10 @@ export function botFromConfig(opts: BotFromConfigOpts): TelegramBot {
       ...(opts.daemonBridge !== undefined ? { daemonBridge: opts.daemonBridge } : {}),
     },
     ...(voiceAdapter ? { voiceAdapter } : {}),
+    // An injected clock marks a test/replay harness: it must not read or write the live daemon's state file.
+    ...(opts.telegramBotOpts?.nowImpl === undefined
+      ? { contextFirstStore: createContextFirstFileStore(joinPath(getElanousConfigDir(), 'telegram-context-first.json')) }
+      : {}),
     ...opts.telegramBotOpts,
   });
   // Register the surface-HITL callback subscription up front so the

package/src/time/format.ts

@@ -47,7 +47,7 @@ function isValidTimeZone(tz: string): boolean {
  *  뒤이어 도는 모든 테스트 파일이 오염된다(실제로 이 세션에서 catch-up 테스트 4건이
  *  그렇게 깨졌고, 파일 순서를 뒤집으면 통과했다). 그래서 env/OS 를 주입으로 뺀다. */
 export interface ResolveTimeZoneDeps {
-  /** config 의 timezone 값. 생략 시 user-config 에서 lazy 로드. */
+  /** config 의 timezone 값. 생략 시 등록된 config 소스에서 읽는다. */
   configTimeZone?: string | undefined;
   /** env 의 TZ 값. 생략 시 `process.env.TZ`. */
   envTimeZone?: string | undefined;
@@ -60,12 +60,21 @@ export interface ResolveTimeZoneDeps {
  *  `process.env.TZ` 를 단독으로 믿지 않는 이유: launchd 로 뜬 데몬은 TZ 를 물려받지
  *  못한다(실측 확인). 반면 `Intl` 은 OS 설정을 직접 읽어 그 경우에도 올바른 지역을
  *  돌려준다. 그래서 env 보다 OS 를 **뒤**에 두되 fallback 으로 반드시 둔다. */
+let configTimeZoneSource: (() => string | undefined) | undefined;
+
+/** Config 소유자가 로드될 때 등록한다. 이 바닥 모듈은 config 를 로드하지 않는다.
+ * 반환된 함수는 이전 소스를 복원한다(격리 테스트에서만 사용). */
+export function setConfigTimeZoneSource(fn: () => string | undefined): () => void {
+  const previous = configTimeZoneSource;
+  configTimeZoneSource = fn;
+  return () => { configTimeZoneSource = previous; };
+}
+
 export function resolveTimeZone(deps: ResolveTimeZoneDeps = {}): ResolvedTimeZone {
   let cfg = deps.configTimeZone;
-  if (cfg === undefined && !('configTimeZone' in deps)) {
+  if (!('configTimeZone' in deps)) {
     try {
-      const mod = require('../user-config.js') as typeof import('../user-config.js');
-      cfg = (mod.getUserConfig() as { timezone?: string }).timezone;
+      cfg = configTimeZoneSource?.();
     } catch { /* config 미가용(부팅 초기·격리 테스트) — 아래로 */ }
   }
   if (typeof cfg === 'string' && isValidTimeZone(cfg.trim())) {

package/src/tool-runtime/goal-author-runtime.ts

@@ -1,3 +1,4 @@
+import '../autopilot/mission-codebase-gate.js';
 import { readFileSync } from 'node:fs';
 import { resolve, relative, isAbsolute } from 'node:path';
 import type { LLMToolSpec } from '../llm.js';

package/src/tool-runtime/self-cognition-catalog.ts

@@ -0,0 +1,23 @@
+/** Canonical names for the read-only self-cognition surface. */
+export const SELF_COGNITION_TOOL_NAMES = [
+  'self_recall',
+  'logs_query',
+  'ops_status',
+  'memory_recall',
+  'context_now',
+] as const;
+
+/** MCP catalog metadata derived from the same name ledger as the runtimes. */
+export const SELF_COGNITION_MCP_CATALOG_ENTRIES = SELF_COGNITION_TOOL_NAMES.map(name => ({
+  id: name,
+  kind: 'other',
+  aliases: [name] as [typeof name],
+  displayName: name,
+  description: 'Read-only self-cognition query over elanous history, memory, operations, or logs.',
+  promptSummary: `\`${name}\` (read-only self-cognition query)`,
+  host: ['mcp'] as ['mcp'],
+  safety: ['read-only'] as ['read-only'],
+  supportsParallel: true,
+  defaultEnabled: true,
+  intentScope: 'ops-ui',
+} as const));

package/src/tool-runtime/self-cognition-runtimes.ts

@@ -2,17 +2,10 @@ import { createRequire } from 'node:module';
 import { isMainThread, parentPort, Worker } from 'node:worker_threads';
 import { debug } from '../debug/log.js';
 import type { LLMToolSpec } from '../llm.js';
-import type { NativeToolCatalogEntry } from '../native-tool-catalog.js';
 import type { ToolRunResult, ToolRuntime, ToolRuntimeContext } from './types.js';
+import { SELF_COGNITION_TOOL_NAMES } from './self-cognition-catalog.js';
 
-/** Canonical names for the read-only self-cognition surface. */
-export const SELF_COGNITION_TOOL_NAMES = [
-  'self_recall',
-  'logs_query',
-  'ops_status',
-  'memory_recall',
-  'context_now',
-] as const;
+export { SELF_COGNITION_TOOL_NAMES, SELF_COGNITION_MCP_CATALOG_ENTRIES } from './self-cognition-catalog.js';
 
 type SelfCognitionToolName = (typeof SELF_COGNITION_TOOL_NAMES)[number];
 type RecallToolName = 'memory_recall' | 'self_recall';
@@ -207,18 +200,3 @@ export const SELF_COGNITION_RUNTIMES: readonly ToolRuntime[] = SELF_COGNITION_TO
       ? runRecall(name, args, ctx)
       : toToolRunResult(await coreTools().buildCoreTools().dispatch(name, args)),
 }));
-
-/** MCP catalog metadata derived from the same name ledger as the runtimes. */
-export const SELF_COGNITION_MCP_CATALOG_ENTRIES: readonly NativeToolCatalogEntry[] = SELF_COGNITION_TOOL_NAMES.map(name => ({
-  id: name,
-  kind: 'other',
-  aliases: [name],
-  displayName: name,
-  description: 'Read-only self-cognition query over elanous history, memory, operations, or logs.',
-  promptSummary: `\`${name}\` (read-only self-cognition query)`,
-  host: ['mcp'],
-  safety: ['read-only'],
-  supportsParallel: true,
-  defaultEnabled: true,
-  intentScope: 'ops-ui',
-}));

package/src/typecheck-ratchet.ts

@@ -12,6 +12,7 @@ export const TYPECHECK_GATE_CONFIG = 'tsconfig.gate.json';
  * ⚠️ 호출자가 이미 `--max-old-space-size` 를 줬으면 «그것을» 존중한다(덮지 않는다).
  */
 export const TSC_HEAP_MB = 20480;
+export const TSC_OOM_RETRY_HEAP_MB = 32768;
 export function tscEnv(base: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
   const cur = base.NODE_OPTIONS ?? '';
   if (/--max-old-space-size[= ]/.test(cur)) return base;