elanous 0.2.25 → 0.2.28

package/scripts/browser-observe-cycle.ts

@@ -4,7 +4,15 @@
 // 기본 MCP 전송은 기존 McpClient 의 initialize + Mcp-Session-Id 수명주기를 탄다.
 // 스케줄러 진입점 배선은 다음 조각의 몫이다. 이 파일은 호출 가능한 함수만 내보낸다.
 
-import { McpClient, McpServerError, type McpHttpFetch } from '../src/mcp/client.js';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import {
+  McpClient,
+  McpConnectionError,
+  McpServerError,
+  type McpHttpFetch,
+} from '../src/mcp/client.js';
+import { getElanousConfigDir } from '../src/elanous-config-dir.js';
 import { debug } from '../src/debug/log.js';
 
 export const ELANOUS_PWA_URL = 'http://127.0.0.1:31415/app';
@@ -21,6 +29,10 @@ export const BROWSER_OBSERVE_OK = 'ok';
 export const BROWSER_OBSERVE_WRONG_SCREEN = 'wrong-screen';
 /** 관측하지 못했다 */
 export const BROWSER_OBSERVE_UNOBSERVED = 'unobserved';
+/** `unobserved` 사유 — 루프백 owner 토큰을 못 읽어 Authorization 헤더를 못 붙였다 */
+export const BROWSER_OBSERVE_REASON_AUTH_MISSING = 'auth-missing';
+/** `unobserved` 사유 — 루프백 owner 토큰을 붙였는데 서버가 401 로 거부했다 */
+export const BROWSER_OBSERVE_REASON_AUTH_REJECTED = 'auth-rejected';
 
 export type BrowserObserveStatus =
   | typeof BROWSER_OBSERVE_OK
@@ -50,6 +62,39 @@ export interface BrowserObserveResult extends BrowserObserveClassification {
   request: BrowserObserveMcpRequest;
 }
 
+/** 루프백 owner 토큰을 어디서 읽는지 — `src/cli/mcp-reload.ts` 의 기존 꼴과 같은 자리다. */
+export function browserObserveTokenPath(): string {
+  return join(getElanousConfigDir(), 'acp-token');
+}
+
+/**
+ * 루프백 ACP 토큰을 **읽기 전용**으로 얻는다(실패는 null).
+ * ⛔ `ensureAuthToken`(src/auth/acp-token.ts) 을 쓰지 않는다 — 그것은 «없으면 만든다».
+ * 이 조각은 새 토큰 생성 0: 파일이 없거나 비면 그대로 auth-missing 이다.
+ */
+export function readBrowserObserveToken(): string | null {
+  const tokenPath = browserObserveTokenPath();
+  try {
+    if (!existsSync(tokenPath)) return null;
+    const token = readFileSync(tokenPath, 'utf8').trim();
+    return token.length > 0 ? token : null;
+  } catch {
+    return null;
+  }
+}
+
+/** MCP POST 전부에 `Authorization: Bearer <token>` 을 얹는 전송 래퍼. */
+export function withBrowserObserveAuthorization(
+  fetchImpl: BrowserObserveHttpFetch,
+  token: string,
+): BrowserObserveHttpFetch {
+  return (url, init) =>
+    fetchImpl(url, {
+      ...init,
+      headers: { ...init.headers, authorization: `Bearer ${token}` },
+    });
+}
+
 export type BrowserObserveMcpCall = (request: BrowserObserveMcpRequest) => Promise<unknown>;
 export type BrowserObserveLog = (category: string, event: string, data?: unknown) => void;
 export type BrowserObserveHttpFetch = McpHttpFetch;
@@ -58,6 +103,8 @@ export interface BrowserObserveDeps {
   mcpCall?: BrowserObserveMcpCall;
   fetch?: BrowserObserveHttpFetch;
   log?: BrowserObserveLog;
+  /** 토큰 획득 주입 자리 — 시험이 파일 시스템 없이 결정성을 얻는다. 생략하면 `readBrowserObserveToken` */
+  readToken?: () => string | null;
 }
 
 /**
@@ -328,6 +375,15 @@ function emit(
 }
 
 function unobservedFromCaught(caught: unknown): BrowserObserveClassification {
+  // 루프백 토큰을 붙였는데 서버가 401 로 거부한 경우 — McpClient 가
+  // McpConnectionError('auth-required') 로 던진다. 긴 오류 문자열 대신 이유 한 칸으로 가른다.
+  if (caught instanceof McpConnectionError && caught.reason === 'auth-required') {
+    return {
+      status: BROWSER_OBSERVE_UNOBSERVED,
+      observedUrl: null,
+      reason: BROWSER_OBSERVE_REASON_AUTH_REJECTED,
+    };
+  }
   if (caught instanceof McpServerError) {
     return {
       status: BROWSER_OBSERVE_UNOBSERVED,
@@ -342,14 +398,32 @@ function unobservedFromCaught(caught: unknown): BrowserObserveClassification {
   };
 }
 
+/** 기본 전송(McpClient) 에 루프백 토큰을 얹는다. 토큰이 없으면 null — 401 이 보장된 호출은 아예 안 한다. */
+function defaultAuthorizedMcpCall(deps: BrowserObserveDeps): BrowserObserveMcpCall | null {
+  const token = deps.readToken ? deps.readToken() : readBrowserObserveToken();
+  if (token === null) return null;
+  const base: BrowserObserveHttpFetch = deps.fetch ?? ((url, init) => fetch(url, init));
+  const authorized = withBrowserObserveAuthorization(base, token);
+  return (request) => callAsideReplViaMcpClient(request, authorized);
+}
+
 /** MCP 로 브라우저에서 값을 가져와 공개 분류 함수에 넘긴다. 의존성 주입으로 실 데몬 없이 검증한다. */
 export async function observeBrowserCycle(
   deps: BrowserObserveDeps = {},
 ): Promise<BrowserObserveResult> {
   if (!deps.log) await ensureBrowserObserveLogSink();
   const log = deps.log ?? defaultLog;
-  const mcpCall = deps.mcpCall ?? ((request) => callAsideReplViaMcpClient(request, deps.fetch));
   const request = buildBrowserObserveMcpRequest();
+  const mcpCall = deps.mcpCall ?? defaultAuthorizedMcpCall(deps);
+  if (mcpCall === null) {
+    const classified: BrowserObserveClassification = {
+      status: BROWSER_OBSERVE_UNOBSERVED,
+      observedUrl: null,
+      reason: BROWSER_OBSERVE_REASON_AUTH_MISSING,
+    };
+    emit(log, classified);
+    return { ...classified, request };
+  }
   try {
     const response = await mcpCall(request);
     const rpcError = jsonRpcErrorMessage(response);

package/scripts/ci-typecheck-changed.ts

@@ -1,6 +1,6 @@
 /** Changed-file tsc gate with a visible ratchet for pre-existing test-only debt. */
 import { execFileSync, execSync } from 'node:child_process';
-import { existsSync, mkdtempSync, readFileSync, realpathSync, rmSync, symlinkSync } from 'node:fs';
+import { existsSync, mkdtempSync, readFileSync, realpathSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import ts from 'typescript';
@@ -13,6 +13,7 @@ import {
   type TypecheckError,
 } from '../src/typecheck-ratchet.js';
 import { debug } from '../src/debug/log.js';
+import { reverseImportAffectedRoots, type AffectedRoots } from '../src/self-implement/pwa-import-graph.js';
 import {
   ROOT_PLACEHOLDER,
   baselineCacheEnabled,
@@ -758,7 +759,7 @@ export function exportedLiteralUnionMembersInChanges(
   pathsResult: ChangedPathResult = changedPathPairs(base),
   readBase: GitFileReader = readGitFile,
   readHead = (file: string) => readFileSync(file, 'utf8'),
-  sources?: RepositorySources,
+  sources?: RepositorySources | (() => RepositorySources),
 ): LiteralUnionMemberCheck {
   if (pathsResult.failure) return { additions: [], failure: pathsResult.failure };
   const additions: LiteralUnionAddition[] = [];
@@ -779,7 +780,7 @@ export function exportedLiteralUnionMembersInChanges(
   }
   if (removals.length === 0) return { additions };
   try {
-    return { additions, removals: literalUnionReferencesInSource(removals, changed, sources ?? repositoryTypeScriptSources()) };
+    return { additions, removals: literalUnionReferencesInSource(removals, changed, typeof sources === 'function' ? sources() : sources ?? repositoryTypeScriptSources()) };
   } catch (error: unknown) {
     return { additions, failure: `저장소 리터럴 참조 탐색 실패: ${error instanceof Error ? error.message : String(error)}` };
   }
@@ -872,10 +873,15 @@ export type GateIo = {
   literalUnionMembers?: (changed: ReadonlySet<string>, base: string) => LiteralUnionMember[] | LiteralUnionMemberCheck;
   readBaselineDiagnostics?: (base: string, command: string) => BaselineDiagnostics;
   runTscCmd: (cmd: string) => TscRun;
+  resolveTscScript?: (cwd: string) => string | undefined;
   /** Landing tree. Git, existsSync, tsc, and the test baseline are measured here — not in process.cwd(). */
   cwd?: string;
   /** Explicit base revision. Same rule as TSC_BASE_REF, without reading the process environment. */
   baseRef?: string;
+  /** Source of TSC_GATE_ROOTS / ELANOUS_TSC_AFFECTED_ROOTS. Defaults to process.env. */
+  env?: NodeJS.ProcessEnv;
+  /** Changed gate sources → themselves plus their direct importers. Defaults to the repository import-graph reader. */
+  affectedRoots?: (cwd: string, changed: ReadonlySet<string>) => AffectedRoots;
   log: (message: string) => void;
   warn: (message: string) => void;
   error: (message: string) => void;
@@ -944,8 +950,63 @@ function inspectTscResult(tsc: TscRun, changed: ReadonlySet<string>, baseline: R
   return false;
 }
 
+/** Above this many roots a narrowed program stops being much smaller than the whole one. */
+export const TSC_GATE_ROOT_LIMIT = 400;
+/** Files tsconfig.gate.json compiles as roots (its `include`); other changed .ts files are never part of that program. */
+const GATE_ROOT_SOURCE = /^(?:src|scripts|test)\/.*\.ts$/;
+
+export type RootPlan =
+  | { mode: 'affected'; roots: string[]; changedCount: number }
+  | { mode: 'full'; fallbackReason: string; roots?: number };
+
+/** Narrow the root-config check to changed files ∪ direct importers, or say why the whole program must run. */
+export function planRootCheck(input: {
+  wholeRepository: boolean;
+  rootChanged: ReadonlySet<string>;
+  env: NodeJS.ProcessEnv;
+  cwd: string;
+  affectedRoots: (cwd: string, changed: ReadonlySet<string>) => AffectedRoots;
+}): RootPlan {
+  if (input.wholeRepository) return { mode: 'full', fallbackReason: '승격(저장소 전체 검사)' };
+  if (input.env.ELANOUS_TSC_AFFECTED_ROOTS === '0') return { mode: 'full', fallbackReason: 'ELANOUS_TSC_AFFECTED_ROOTS=0' };
+  if (input.env.TSC_GATE_ROOTS === 'full') return { mode: 'full', fallbackReason: 'TSC_GATE_ROOTS=full' };
+  const gateChanged = new Set([...input.rootChanged].filter((file) => GATE_ROOT_SOURCE.test(file)));
+  if (gateChanged.size === 0) return { mode: 'full', fallbackReason: 'tsconfig.gate.json 루트에 드는 변경 파일 없음' };
+  let computed: AffectedRoots;
+  try { computed = input.affectedRoots(input.cwd, gateChanged); }
+  catch (cause) { return { mode: 'full', fallbackReason: `루트 계산 실패: ${cause instanceof Error ? cause.message : String(cause)}` }; }
+  if (computed.failure !== undefined) return { mode: 'full', fallbackReason: `루트 계산 실패: ${computed.failure}` };
+  if (!computed.roots || [...gateChanged].some((file) => !computed.roots?.has(file))) {
+    return { mode: 'full', fallbackReason: '루트 계산 실패: 변경 파일 누락' };
+  }
+  const roots = [...computed.roots].filter((file) => GATE_ROOT_SOURCE.test(file)).sort();
+  if (roots.length > TSC_GATE_ROOT_LIMIT) return { mode: 'full', fallbackReason: `루트 ${roots.length}개 > 상한 ${TSC_GATE_ROOT_LIMIT}`, roots: roots.length };
+  return { mode: 'affected', roots, changedCount: gateChanged.size };
+}
+/** Target checkout first, then the installed CLI's top-level and nested dependencies. */
+export function resolveTscScript(cwd: string, scriptsDir = import.meta.dir, present: (path: string) => boolean = existsSync): string | undefined {
+  return [
+    join(cwd, 'node_modules/typescript/bin/tsc'),
+    join(scriptsDir, '../../typescript/bin/tsc'),
+    join(scriptsDir, '../node_modules/typescript/bin/tsc'),
+  ].find(present);
+}
+
+/** The installed compiler cannot resolve declarations from a checkout without its own dependencies. */
+export function missingCheckoutTypeDependencies(cwd: string, needsPwa = false, present: (path: string) => boolean = existsSync): string[] {
+  const missing: string[] = [];
+  if (!present(join(cwd, 'node_modules'))) missing.push('node_modules');
+  if (!present(join(cwd, 'node_modules/bun-types'))) missing.push('bun-types');
+  if (needsPwa && !present(join(cwd, 'apps/pwa/node_modules'))) missing.push('apps/pwa/node_modules');
+  return missing;
+}
+
 export function runGate(io: Partial<GateIo> = {}): void {
   const cwd = io.cwd ?? process.cwd();
+  const targetGit: GitRunner = (command, args, options) => execFileSync(command, args, { ...options, cwd, env: gitEnv() });
+  const targetPaths = (base: string) => changedPathPairs(base, targetGit);
+  const targetFile = (ref: string, path: string) => readGitFile(ref, path, targetGit);
+  const targetSource = (file: string) => readFileSync(join(cwd, file), 'utf8');
   const defaultChanged = () => changedTsFiles((cmd) => sh(cmd, cwd), process.env, cwd, io.baseRef);
   const defaultRunTsc = (cmd: string) => runTsc(cmd, ((command, options) => execSync(command, { ...options, cwd, env: tscExecEnv(options?.env) })) as typeof execSync);
   const { changedTsFiles: getChanged = defaultChanged, runTscCmd = defaultRunTsc, log = (message: string) => console.log(message), warn = (message: string) => console.warn(message), error = (message: string) => console.error(message), exit = ((code: number) => process.exit(code)) as GateIo['exit'] } = io;
@@ -953,10 +1014,10 @@ export function runGate(io: Partial<GateIo> = {}): void {
   // Set 주입은 기존 테스트 심이며 기준 revision이 없다. 실제 ChangedTsFiles 경로만 Git 관측을 요구한다.
   const requiredExportFields = io.requiredExportFields ?? ((changed: ReadonlySet<string>, base: string) => base === 'injected test seam'
     ? { fields: [], removedSymbols: [], parameterIncreases: [] }
-    : requiredExportFieldsInChanges(changed, base));
+    : requiredExportFieldsInChanges(changed, base, targetPaths(base), targetFile, targetSource));
   const literalUnionMembers = io.literalUnionMembers ?? ((changed: ReadonlySet<string>, base: string) => base === 'injected test seam'
     ? { additions: [] }
-    : exportedLiteralUnionMembersInChanges(changed, base));
+    : exportedLiteralUnionMembersInChanges(changed, base, targetPaths(base), targetFile, targetSource, () => repositoryTypeScriptSources(cwd)));
   const changedResult = getChanged();
   const { files: changed, base, baseSource, head, diffFiles, warnings = [], failures = [] } = changedResult instanceof Set
     ? { files: changedResult, base: 'injected test seam', baseSource: 'injected test seam', head: 'injected test seam', diffFiles: new Set<string>(), warnings: [], failures: [] }
@@ -1053,7 +1114,33 @@ export function runGate(io: Partial<GateIo> = {}): void {
   }, { level: 'info' });
   log(`[tsc-gate] root 설정 범위 ${rootScope.size}개 관측 (apps/pwa/** 제외).`);
   if (runsPwa) log(`[tsc-gate] PWA 설정 범위 ${pwaScope.size}개 관측.`);
-  const tscBin = existsSync(join(cwd, 'node_modules/.bin/tsc')) ? 'node_modules/.bin/tsc' : 'npx tsc';
+  // K-OP-039: PWA checks without app dependencies produce fake type errors.
+  // The target checkout's declarations are required even when a compiler is
+  // supplied by the installed CLI or injected by another gate caller.
+  const missing = missingCheckoutTypeDependencies(cwd, runsPwa || wholeRepository);
+  if (missing.length > 0) {
+    const quotedCwd = `'${cwd.replaceAll("'", "'\\''")}'`;
+    const install = `cd ${quotedCwd} && bun install --frozen-lockfile${missing.includes('apps/pwa/node_modules') ? ' && (cd apps/pwa && bun install --frozen-lockfile)' : ''}`;
+    error(`[tsc-gate] ⛔ 대상 트리 타입 의존성 없음: ${missing.join(', ')} — ${install}`);
+    error('[tsc-gate] FAIL — 대상 의존성을 확인하지 못했다(설치본 tsc 존재 ≠ 대상 타입 검사 가능).');
+    exit(1);
+    return;
+  }
+  // The .bin shim uses `#!/usr/bin/env node`. A LaunchAgent can have Bun but no
+  // node on PATH, so invoke the installed compiler with this process's absolute
+  // runtime instead. A missing dependency must fail the gate, never fetch via npx.
+  // Preserve the target checkout's compiler version when available. The
+  // installed CLI may resolve TypeScript from a sibling top-level node_modules
+  // or its own nested node_modules; verify each path before starting a child.
+  const tscScript = (io.resolveTscScript ?? resolveTscScript)(cwd);
+  if (!tscScript) {
+    error('[tsc-gate] ⛔ TypeScript 실행 파일 없음 — 대상 트리 또는 설치본에 bun install --frozen-lockfile 뒤 재실행하십시오.');
+    error('[tsc-gate] FAIL — tsc 를 실행하지 못했다(의존성 없음 ≠ 진단 0건).');
+    exit(1);
+    return;
+  }
+  const shellArg = (value: string) => `'${value.replaceAll("'", "'\\''")}'`;
+  const tscBin = `${shellArg(process.execPath)} ${shellArg(tscScript)}`;
   const baseline = readTestTypecheckBaseline(cwd);
   const rootCommand = `${tscBin} --noEmit -p ${TYPECHECK_GATE_CONFIG}`;
   const pwaCommand = `${tscBin} --noEmit -p apps/pwa/tsconfig.json`;
@@ -1061,7 +1148,32 @@ export function runGate(io: Partial<GateIo> = {}): void {
   const rootPromotionBaseline = wholeRepository ? readBaselineDiagnostics(base, rootCommand) : undefined;
   const pwaPromotionBaseline = wholeRepository && runsPwa ? readBaselineDiagnostics(base, pwaCommand) : undefined;
   const pwaEnvPromotionBaseline = wholeRepository && runsPwaEnv ? readBaselineDiagnostics(base, pwaEnvCommand) : undefined;
-  const rootTsc = runTscCmd(rootCommand);
+  let rootPlan = planRootCheck({ wholeRepository, rootChanged, env: io.env ?? process.env, cwd, affectedRoots: io.affectedRoots ?? reverseImportAffectedRoots });
+  let rootsConfig: string | undefined;
+  if (rootPlan.mode === 'affected') {
+    rootsConfig = `tsconfig.gate-roots.${process.pid}.${Date.now()}.json`;
+    try {
+      // `include` is replaced (not merged) so only the listed roots plus ambient declarations enter the program.
+      writeFileSync(join(cwd, rootsConfig), JSON.stringify({ extends: `./${TYPECHECK_GATE_CONFIG}`, include: ['src/**/*.d.ts', 'scripts/**/*.d.ts', 'test/**/*.d.ts'], files: rootPlan.roots }, null, 2), { flag: 'wx' });
+    } catch (cause) {
+      if (rootsConfig && (cause as NodeJS.ErrnoException).code !== 'EEXIST') {
+        try { rmSync(join(cwd, rootsConfig), { force: true }); }
+        catch { /* The full-program fallback still runs if cleanup is unavailable. */ }
+      }
+      rootsConfig = undefined;
+      rootPlan = { mode: 'full', fallbackReason: `임시 tsconfig 쓰기 실패: ${cause instanceof Error ? cause.message : String(cause)}`, roots: rootPlan.roots.length };
+    }
+  }
+  if (rootPlan.mode === 'affected') {
+    log(`[tsc-gate] 영향 루트 ${rootPlan.roots.length}개 (변경 ${rootPlan.changedCount} + importer·전역 선언 ${rootPlan.roots.length - rootPlan.changedCount}) — 임시 tsconfig 로 root 검사.`);
+    debug.log('typecheck.gate', 'roots', { mode: 'affected', roots: rootPlan.roots.length, fallbackReason: null }, { level: 'info' });
+  } else {
+    log(`[tsc-gate] 영향 루트 ${rootPlan.roots ?? '?'}개(전체로 폴백: ${rootPlan.fallbackReason})`);
+    debug.log('typecheck.gate', 'roots', { mode: 'full', roots: rootPlan.roots ?? null, fallbackReason: rootPlan.fallbackReason }, { level: 'info' });
+  }
+  let rootTsc: TscRun;
+  try { rootTsc = runTscCmd(rootsConfig ? `${tscBin} --noEmit -p ${rootsConfig}` : rootCommand); }
+  finally { if (rootsConfig) rmSync(join(cwd, rootsConfig), { force: true }); }
   let unmeasured = !rootTsc.ran;
   let passed = inspectTscResult(rootTsc, rootScope, baseline, error, warn, wholeRepository, ['apps/pwa/'], [], rootPromotionBaseline);
   if (runsPwa) {

package/scripts/coord-msg-bridge.ts

@@ -0,0 +1,209 @@
+#!/usr/bin/env bun
+/** One channel fetch, one recipient's durable cursor, and idempotent msg insertion. */
+import { Database } from 'bun:sqlite';
+import { appendFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { createHash } from 'node:crypto';
+import { effectiveInstanceRoot } from '../src/instance/resolve.js';
+import { SEAT_ALIASES, canonicalSeatId, defaultMsgStorePath, openMsgStore } from '../src/msg/msg-store.js';
+import trackData from './coord-tracks.json';
+import { fetchCoordChannelComments, type CoordChannelComment } from './coord-requests-bridge.js';
+
+const seats = new Set(trackData.tracks.map((track) => track.id));
+const allSeats = [...seats];
+type Options = { seat: string; channel: string; since?: string; dryRun: boolean };
+type Cursor = { lastId: number; createdAt: string; sinceFloor?: string; parserHash?: string };
+type Routed = { sender: string; recipients: string[] };
+
+function parseOptions(args: string[]): Options {
+  let seat = '', channel = '26146', since: string | undefined;
+  let dryRun = false;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--seat' && args[i + 1]) seat = canonicalSeatId(args[++i]!);
+    else if (arg === '--channel' && args[i + 1]) channel = args[++i]!;
+    else if (arg === '--since' && args[i + 1]) since = args[++i]!;
+    else if (arg === '--dry-run') dryRun = true;
+    else if (arg === '--json') continue; // output formatting belongs to the CLI entry point
+    else throw new Error(`unknown option or missing value: ${arg}`);
+  }
+  if (!seats.has(seat)) throw new Error('--seat must name a channel seat');
+  if (!/^[1-9]\d*$/.test(channel)) throw new Error('--channel must be a positive integer');
+  if (since && (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/.test(since)
+    || !Number.isFinite(Date.parse(since)))) throw new Error('--since must be an ISO timestamp');
+  return { seat, channel, ...(since ? { since } : {}), dryRun };
+}
+
+/** Only the address part of the first line and explicit body mentions route messages. */
+export function routeCoordComment(body: string): Routed | null {
+  const [header = '', ...bodyLines] = body.split(/\r?\n/);
+  const match = /^\s*(?:#+\s*)?\*\*\[([^\]]+)\]\*\*[^\n]*?→\s*(.+)$/.exec(header);
+  if (!match) return null;
+  let sender: string;
+  try { sender = canonicalSeatId(match[1]!); } catch { return null; }
+  const recipients = new Set<string>();
+  // The channel also uses `MK(⊕ UX·TC)` for a primary addressee plus copied seats.
+  const address = match[2]!.replace(/\(⊕\s*([^)]*)\)/g, ' · cc $1');
+  const fields = address.split('·').map((part) => part.trim());
+  let inAddress = true;
+  for (const field of fields) {
+    const cc = /^cc\s+(.+)$/i.exec(field);
+    if (!inAddress && !cc) continue;
+    const tokens = (cc?.[1] ?? field).split(/[\s,]+/).filter(Boolean);
+    // A title may follow the addressee without a middle dot, for example
+    // `→ OP 🎓 확인:`. Only the leading seat tokens belong to the address.
+    const firstNonSeat = tokens.findIndex((name) => !seats.has(name)
+      && name !== '전체' && name !== '전원');
+    const names = tokens.slice(0, firstNonSeat < 0 ? tokens.length : firstNonSeat);
+    if (!names.length) {
+      if (!cc) inAddress = false;
+      continue;
+    }
+    if (names.includes('전체') || names.includes('전원')) {
+      for (const seat of allSeats) recipients.add(seat);
+    } else for (const name of names) recipients.add(name);
+    if (!cc && names.length < tokens.length) inAddress = false;
+  }
+  for (const match of bodyLines.join('\n').matchAll(/🙋\s*([A-Z][A-Z0-9_-]*)/g)) {
+    if (seats.has(match[1]!)) recipients.add(match[1]!);
+  }
+  recipients.delete(sender);
+  return { sender, recipients: [...recipients] };
+}
+
+// Include the sender canonicalizer and its aliases: either can change which
+// comments route. A harmless build-only hash change causes one safe replay.
+const parserHash = createHash('sha256').update(routeCoordComment.toString())
+  .update(canonicalSeatId.toString()).update(JSON.stringify(SEAT_ALIASES))
+  .update(JSON.stringify(allSeats)).digest('hex');
+const REPLAY_WINDOW_MS = 6 * 60 * 60 * 1000;
+
+function validComment(value: CoordChannelComment): void {
+  if (!value || !Number.isSafeInteger(value.id) || value.id <= 0 || typeof value.body !== 'string'
+    || typeof value.created_at !== 'string' || !Number.isFinite(Date.parse(value.created_at))
+    || typeof value.html_url !== 'string') throw new Error('invalid channel comment');
+}
+
+function readCursor(path: string): Cursor | null {
+  if (!existsSync(path)) return null;
+  // Each run appends one small record. Concurrent runs cannot replace a newer cursor
+  // with an older snapshot; the highest comment ID remains the effective cursor.
+  let latest: Cursor | null = null;
+  // A process can stop mid-append. The next complete record begins with the
+  // stable key prefix and remains readable even when joined to a torn suffix.
+  const records = readFileSync(path, 'utf8').replaceAll('{"lastId":', '\n{"lastId":').split('\n').filter(Boolean);
+  for (const line of records) {
+    let value: Partial<Cursor>;
+    try { value = JSON.parse(line) as Partial<Cursor>; }
+    catch (error) {
+      if (error instanceof SyntaxError) continue;
+      throw error;
+    }
+    if (!Number.isSafeInteger(value.lastId) || value.lastId! < 0 || typeof value.createdAt !== 'string'
+      || !Number.isFinite(Date.parse(value.createdAt)) || (value.sinceFloor !== undefined
+        && (typeof value.sinceFloor !== 'string' || !Number.isFinite(Date.parse(value.sinceFloor))))
+      || (value.parserHash !== undefined && !/^[a-f0-9]{64}$/.test(value.parserHash))) {
+      throw new Error('invalid channel cursor');
+    }
+    // On equal IDs, keep the current parser marker even if an older overlapping
+    // process appends its stale cursor afterward. A current marker also replaces
+    // an older marker at the same ID after a replay with no newly fetched comment.
+    if (!latest || value.lastId! > latest.lastId || (value.lastId === latest.lastId
+      && (value.parserHash === parserHash || latest.parserHash !== parserHash))) latest = {
+      lastId: value.lastId!, createdAt: value.createdAt,
+      ...(value.sinceFloor ? { sinceFloor: value.sinceFloor } : {}),
+      ...(value.parserHash ? { parserHash: value.parserHash } : {}),
+    };
+  }
+  return latest;
+}
+
+function saveCursor(path: string, cursor: Cursor): void {
+  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+  appendFileSync(path, `${JSON.stringify(cursor)}\n`, { mode: 0o600 });
+}
+
+function hasProvenance(db: Database, key: string): boolean {
+  return db.query('SELECT 1 FROM msg_provenance WHERE provenance_key = ?').get(key) !== null;
+}
+
+export function runBridge(args: string[], fetch = fetchCoordChannelComments): {
+  seat: string; read: number; picked: number; added: number; existing: number; cursor: number;
+} {
+  return runBridgeWithClock(args, fetch, Date.now);
+}
+
+export function runBridgeWithClock(args: string[], fetch: typeof fetchCoordChannelComments, now: () => number): {
+  seat: string; read: number; picked: number; added: number; existing: number; cursor: number;
+} {
+  const options = parseOptions(args);
+  const cursorPath = join(effectiveInstanceRoot(), 'msg', `coord-bridge-${options.channel}-${options.seat}.json`);
+  const cursor = readCursor(cursorPath);
+  const replayFloor = cursor && cursor.parserHash !== parserHash ? now() - REPLAY_WINDOW_MS : undefined;
+  // GitHub filters `since` by updated_at; the creation-time check below limits
+  // parser replay to comments created in the last six hours, even if older
+  // comments were edited recently. Numeric IDs decide normal progress.
+  // GitHub's `since` is exclusive. Fetch one second before the replay floor
+  // so a comment created exactly on the six-hour boundary remains visible.
+  const since = cursor ? new Date(Math.min(Date.parse(cursor.createdAt) - 1000,
+    replayFloor === undefined ? Infinity : replayFloor - 1000)).toISOString() : options.since;
+  const comments = fetch(options.channel, since);
+  for (const comment of comments) validComment(comment); // no writes if fetching/parsing fails mid-page
+  // GitHub's `since` filters updated_at, so a caller's creation-time floor persists across runs.
+  const unseen = comments.filter((comment) => comment.id > (cursor?.lastId ?? 0));
+  const sinceFloor = cursor?.sinceFloor ?? (cursor ? undefined : options.since);
+  const pending = comments.filter((comment) =>
+    (comment.id > (cursor?.lastId ?? 0) || (replayFloor !== undefined
+      && Date.parse(comment.created_at) >= replayFloor))
+    && (!sinceFloor || Date.parse(comment.created_at) >= Date.parse(sinceFloor)));
+  const candidate = unseen.reduce<CoordChannelComment | null>((last, comment) =>
+    !last || comment.id > last.id ? comment : last, null);
+  let picked = 0, added = 0, existing = 0;
+  const dbPath = defaultMsgStorePath();
+  if (options.dryRun) {
+    const db = existsSync(dbPath) ? new Database(dbPath, { readonly: true }) : null;
+    try {
+      for (const comment of pending) {
+        const route = routeCoordComment(comment.body);
+        if (!route?.recipients.includes(options.seat)) continue;
+        picked++;
+        if (db && hasProvenance(db, `coord:${comment.id}:${options.seat}`)) existing++;
+        else added++;
+      }
+    } finally { db?.close(); }
+  } else {
+    const store = openMsgStore();
+    try {
+      store.db.transaction(() => {
+        for (const comment of pending) {
+          const route = routeCoordComment(comment.body);
+          if (!route?.recipients.includes(options.seat)) continue;
+          picked++;
+          const key = `coord:${comment.id}:${options.seat}`;
+          if (hasProvenance(store.db, key)) existing++;
+          else added++;
+          store.appendWithProvenance({ from: route.sender, to: options.seat, body: comment.body, kind: 'coord' }, key);
+        }
+      }).immediate();
+    } finally { store.close(); }
+    if (candidate || (!cursor && sinceFloor) || replayFloor !== undefined) {
+      const createdAt = candidate?.created_at ?? cursor?.createdAt ?? sinceFloor!;
+      saveCursor(cursorPath, { lastId: candidate?.id ?? cursor?.lastId ?? 0,
+        createdAt: sinceFloor && Date.parse(createdAt) < Date.parse(sinceFloor) ? sinceFloor : createdAt,
+        ...(sinceFloor ? { sinceFloor } : {}), parserHash });
+    }
+  }
+  return { seat: options.seat, read: comments.length, picked, added, existing,
+    cursor: options.dryRun ? cursor?.lastId ?? 0 : readCursor(cursorPath)?.lastId ?? 0 };
+}
+
+if (import.meta.main) {
+  try {
+    const result = runBridge(process.argv.slice(2));
+    console.log(process.argv.includes('--json') ? JSON.stringify(result)
+      : `${result.seat}: read ${result.read}, picked ${result.picked}, added ${result.added}, existing ${result.existing}, cursor ${result.cursor}`);
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+  }
+}

package/scripts/coord-post.sh

@@ -2,7 +2,10 @@
 # coord-post.sh — 조율 채널 발신 «한 자리». 시각과 명시적 값을 본문에 안전하게 넣는다.
 # 사용: scripts/coord-post.sh [--set KEY=VALUE]... <본문파일>
 set -u
-CANON="docs/manual/MANUAL-multi-agent-coordination-channel-2026-07-28.md"
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd) || { echo '⛔ 스크립트 위치를 못 읽었다' >&2; exit 3; }
+REPO_ROOT=$(dirname -- "$SCRIPT_DIR")
+CLI="$REPO_ROOT/bin/elanous.mjs"
+CANON="$REPO_ROOT/docs/manual/MANUAL-multi-agent-coordination-channel-2026-07-28.md"
 
 resolve_pr() {
   [ -f "$CANON" ] || return 0
@@ -40,7 +43,7 @@ BODY="${1:-}"
 grep -q '{{TS}}' "$BODY" || echo "⚠️ 본문에 {{TS}} 자리표시가 «없다» — 시각을 손으로 적지 않았는지 확인하라" >&2
 
 # 트랙 신원은 «정본 한 곳»에서 읽는다 — scripts/coord-tracks.json. 못 읽으면 추측하지 않고 선다.
-TRACKS_FILE="$(dirname "$0")/coord-tracks.json"
+TRACKS_FILE="$SCRIPT_DIR/coord-tracks.json"
 # 신원 = 2글자 id(OP·MK·TC·UX…) ⊕ 옛 한 글자 alias(S·T·O·F — 전환기엔 받되 경고). 목록은 정본에서만.
 IDS=$(grep -o '"id": *"[A-Z][A-Z]*"' "$TRACKS_FILE" 2>/dev/null | sed 's/.*"\([A-Z]*\)"$/\1/' | tr '\n' ' ')
 ALIASES=$(grep -o '"alias": *"[A-Z][A-Z]*"' "$TRACKS_FILE" 2>/dev/null | sed 's/.*"\([A-Z]*\)"$/\1/' | tr '\n' ' ')
@@ -192,7 +195,7 @@ if [ "${COORD_DRY_RUN:-}" = "1" ]; then
   exit 0
 fi
 
-POST_OUTPUT=$(bun bin/elanous.mjs gh pr comment "$PR" --body-file "$TMP" 2>&1)
+POST_OUTPUT=$(bun "$CLI" gh pr comment "$PR" --body-file "$TMP" 2>&1)
 RC=$?
 printf '%s\n' "$POST_OUTPUT" | tail -2
 VIA=""
@@ -204,11 +207,11 @@ if [ "$RC" -ne 0 ] && printf '%s' "$POST_OUTPUT" | grep -qiE 'rate limit|Somethi
   FIRSTOUT=$(head -1 "$TMP")
   # issues 코멘트 목록은 오래된 순이고 정렬 인자를 안 받는다 ⇒ 최근 10분만 since 로 자른다.
   SINCE10=$(date -u -v-10M +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u -d '-10 min' +%Y-%m-%dT%H:%M:%SZ)
-  if bun bin/elanous.mjs gh api "repos/{owner}/{repo}/issues/$PR/comments?since=$SINCE10&per_page=100" --jq '.[].body | split("\n")[0]' 2>/dev/null | grep -qxF -- "$FIRSTOUT"; then
+  if bun "$CLI" gh api "repos/{owner}/{repo}/issues/$PR/comments?since=$SINCE10&per_page=100" --jq '.[].body | split("\n")[0]' 2>/dev/null | grep -qxF -- "$FIRSTOUT"; then
     echo "[coord-post] 같은 첫 줄이 이미 채널에 있다 — GraphQL 이 실제로는 올렸다(이중 발신 안 함)" >&2
     exit 0
   fi
-  POST_OUTPUT=$(bun bin/elanous.mjs gh api -X POST "repos/{owner}/{repo}/issues/$PR/comments" -F "body=@$TMP" -q .html_url 2>&1)
+  POST_OUTPUT=$(bun "$CLI" gh api -X POST "repos/{owner}/{repo}/issues/$PR/comments" -F "body=@$TMP" -q .html_url 2>&1)
   RC=$?
   printf '%s\n' "$POST_OUTPUT" | tail -2
   VIA=" · REST 폴백"
@@ -224,13 +227,43 @@ POST_URL=$(printf '%s\n' "$POST_OUTPUT" | grep -oE 'https://github\.com/[^[:spac
 # test universe (OP 10-04 18:00). An explicit ELANOUS_STATE_DIR is the caller's chosen universe and wins;
 # otherwise prefer the installed CLI (resolves prod from any tree), else pin the source CLI to prod.
 if [ -n "${ELANOUS_STATE_DIR:-}" ]; then
-  RECORD=(bun bin/elanous.mjs coord event record)
+  RECORD=(bun "$CLI" coord event record)
+  MESSAGE=(bun "$CLI" msg post)
 elif command -v eln >/dev/null 2>&1; then
   RECORD=(eln coord event record)
+  MESSAGE=(eln msg post)
 else
-  RECORD=(env ELANOUS_STATE_DIR="$HOME/.elanous" bun bin/elanous.mjs --config-dir "$HOME/.elanous" coord event record)
+  RECORD=(env ELANOUS_STATE_DIR="$HOME/.elanous" bun "$CLI" --config-dir "$HOME/.elanous" coord event record)
+  MESSAGE=(env ELANOUS_STATE_DIR="$HOME/.elanous" bun "$CLI" --config-dir "$HOME/.elanous" msg post)
 fi
 if ! "${RECORD[@]}" --seat "$ID" --header "$(head -1 "$TMP")" --url "$POST_URL" >/dev/null 2>&1; then
   echo '⚠️ 맥락 원장 기록 실패(발신은 됐다)' >&2
 fi
+# S1's channel reader and this sender must agree on recipients. Keep the complete sent body
+# for msg, while the provenance key makes a later S1 scan (or a partial retry) idempotent.
+COMMENT_ID=${POST_URL##*#issuecomment-}
+if [ "$COMMENT_ID" = "$POST_URL" ] || ! [[ "$COMMENT_ID" =~ ^[0-9]+$ ]]; then
+  echo '⚠️ 채널 댓글 ID를 못 읽어 msg 반영을 건너뛴다(발신은 됐다 · S1 다리가 회수)' >&2
+  exit 0
+fi
+ROUTES=$(bun -e '
+  import { readFileSync } from "node:fs";
+  import { join } from "node:path";
+  import { pathToFileURL } from "node:url";
+  const { routeCoordComment } = await import(pathToFileURL(join(process.argv[3], "coord-msg-bridge.ts")).href);
+  const { canonicalSeatId } = await import(pathToFileURL(join(process.argv[3], "../src/msg/msg-store.ts")).href);
+  const route = routeCoordComment(readFileSync(process.argv[2], "utf8"));
+  if (!route || route.sender !== canonicalSeatId(process.argv[1])) process.exit(2);
+  console.log(route.recipients.join("\n"));
+' "$ID" "$TMP" "$SCRIPT_DIR") || {
+  echo '⚠️ msg 수신자 해석 실패(발신은 됐다 · S1 다리가 회수)' >&2
+  exit 0
+}
+while IFS= read -r RECIPIENT; do
+  [ -n "$RECIPIENT" ] || continue
+  if ! "${MESSAGE[@]}" --from "$ID" --to "$RECIPIENT" --kind coord \
+      --origin-key "coord:$COMMENT_ID:$RECIPIENT" < "$TMP" >/dev/null; then
+    echo "⚠️ msg 원장 기록 실패: $RECIPIENT(발신은 됐다 · S1 다리가 회수)" >&2
+  fi
+done <<< "$ROUTES"
 exit 0