elanous 0.2.29 → 0.2.32

package/src/cli/import-cli.ts

@@ -21,8 +21,20 @@ export async function buildImportPlan(home = homedir()): Promise<ImportPlan> {
 }
 
 export function registerImportCommand(program: Command): void {
+  const publicContributionHelp = `
+Public contribution (EC1 · 10-28 update; moved from 0.2.8 in the 10-01 release split):
+  Show HN / community: share a working import example and feedback; posting and replies remain with the human author.
+  CB1 contribution entry: open an issue or pull request at https://github.com/ElanvitalAI/elanous
+  Marketplace plugins: propose a plugin in plugins/ via pull request; inclusion in the signed marketplace is reviewed, not automatic.
+  Remaining drafts (not published): Show HN · 긱뉴스 · 3-minute install-to-first-result video
+    docs/marketing/DRAFT-ec1-show-hn-geeknews-and-3min-video-2026-10-01.md
+  Measure adoption separately: GitHub stars · installs · npm downloads (downloads are not unique users).
+  Historical positioning (§4, 2026-10-01; not current counts): elanous ★0 · OpenClaw ~390k · Hermes ~250k · Codex ~127k.
+  10-03 baseline (not current results): stars 0 · npm 7-day downloads 790 (includes our own installs).
+`;
   program.command('import')
     .description('Show what elanous can bring over from Claude Code, Codex, ~/.agents, OpenClaw and Hermes — a plan first; `--apply` registers skills in place and adds MCP switched off, `--undo` puts everything back')
+    .addHelpText('after', publicContributionHelp)
     .option('--json', 'Print the plan (or the apply result) as JSON')
     .option('--apply', 'Apply the plan: skills in place (ref) or as link/copy · MCP switched off · secrets and hooks only listed')
     .option('--mode <mode>', `How skills come over: ${IMPORT_MODES.join('|')} (default ref — nothing copied)`)

package/src/cli/log-event-names.ts

@@ -131,6 +131,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "base.stale-local",
   "baseline-invalidate",
   "baseline-reuse",
+  "batch-remaining-skipped",
   "begin",
   "bind",
   "blocked-accepted",
@@ -315,6 +316,10 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "daily-reflection.error",
   "dashboard-acp",
   "dashboard-boot",
+  "dashboard-executed",
+  "dashboard-executed-fallback",
+  "dashboard-executed-remote-skipped",
+  "dashboard-executed-session-unknown",
   "dashboard-optional-specs.return",
   "dashboard-optional-specs.short-circuited",
   "debug-logs.ingest",
@@ -429,6 +434,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "doom-loop-ask-timeout",
   "doom-loop-auto-undo-applied",
   "doom-loop-detected",
+  "doom-loop-self-heal",
   "downgrade",
   "downstream-dep-deescalate",
   "downstream.emit",
@@ -546,6 +552,8 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "focused-widget-key",
   "fold-applied",
   "fold-broken",
+  "fold-click-anchor",
+  "fold-click-follow-tail",
   "force-flush",
   "forced",
   "forked",
@@ -705,6 +713,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "initialize",
   "initialized",
   "inject-blocked",
+  "injected-key-stream-delivered",
   "input-loop-enter",
   "input-outcome",
   "input.miss",
@@ -817,6 +826,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "merge-safety-tsc",
   "merge.gh",
   "merged",
+  "mirror-seed-skipped",
   "missing-ctrl",
   "missing-shift",
   "missing-widget-definition",
@@ -1233,6 +1243,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "select",
   "selected",
   "selection",
+  "selection-timed",
   "self-orchestrate-exposure",
   "self-turn",
   "send",
@@ -1339,6 +1350,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "split-check",
   "stage-enter",
   "stage.route",
+  "stages",
   "start",
   "start.controller.refused",
   "start.enter",
@@ -1407,6 +1419,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "sweep",
   "swept",
   "switch",
+  "switch-decision",
   "switch-off",
   "sync",
   "syncLogWidgetState",
@@ -1499,6 +1512,7 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "tool-loop.repair-phase.codex-grace-burned",
   "tool-loop.repair-phase.codex-immediate-stop",
   "tool-loop.search-only-streak-blocked",
+  "tool-loop.steered-rejection-not-failure",
   "tool-loop.synthesis-ignored.hard-stop",
   "tool-loop.tool-name.invalid",
   "tool-loop.tool-name.repaired",
@@ -1512,7 +1526,10 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "tool-unavailable",
   "tool.call",
   "tools-tier",
+  "trace-persist-deferred",
+  "trace-persist-dropped",
   "trace-persist-failed",
+  "trace-persist-flushed",
   "transcribe.begin",
   "transcribe.error",
   "transcribe.ok",

package/src/cli/mcp-login.ts

@@ -91,9 +91,8 @@ export async function runMcpLogin(opts: McpLoginOpts): Promise<McpLoginResult> {
     const discovered = await discoverMcpOAuth(challenge.resourceMetadata, {
       resourceUrl: spec.url, ...oauthOpts,
     });
-    if ((why || !discovered.metadata.authorizationEndpoint) && discovered.metadata.deviceAuthorizationEndpoint) {
-      if (early?.server.listening) await closeServer(early.server);
-      if (why) out.log(why);
+    const loginWithDevice = async (): Promise<McpLoginResult> => {
+      if (server?.listening) await closeServer(server);
       const stored = loadStoredRegistration(discovered.metadata.issuer, oauthOpts);
       const deviceRegistration = await ensureClientRegistration(discovered.metadata, { ...oauthOpts, deviceCode: true });
       const authorizeDevice = (registration: typeof deviceRegistration) => authorizeMcpDevice(discovered.metadata, registration, {
@@ -119,6 +118,10 @@ export async function runMcpLogin(opts: McpLoginOpts): Promise<McpLoginResult> {
       out.log(`✓ credentials saved for '${opts.serverId}' (${discovered.metadata.issuer})`);
       persistLoginDiscovery(opts, discovered.metadata, out);
       return { exitCode: 0 };
+    };
+    if ((why || !discovered.metadata.authorizationEndpoint) && discovered.metadata.deviceAuthorizationEndpoint) {
+      if (why) out.log(why);
+      return await loginWithDevice();
     }
     const callbackListener = early ?? await listenForCallback(opts.createListener, 0);
     server = callbackListener.server;
@@ -170,7 +173,17 @@ export async function runMcpLogin(opts: McpLoginOpts): Promise<McpLoginResult> {
         }
       }
     }
-    const callback = await callbackPromise;
+    let callback: Callback;
+    try {
+      callback = await callbackPromise;
+    } catch (error) {
+      // A missing browser callback can use the advertised device flow. An explicit
+      // denial, mismatched state, or malformed callback must never silently fall back.
+      if (!discovered.metadata.deviceAuthorizationEndpoint ||
+          !/^authorization callback timed out after \d+ms$/.test(error instanceof Error ? error.message : '')) throw error;
+      out.log(`Browser approval did not complete for '${opts.serverId}'; trying device code.`);
+      return await loginWithDevice();
+    }
     await exchangeAuthorizationCode(authorization.metadata, authorization.request, callback, oauthOpts);
     out.log(`✓ credentials saved for '${opts.serverId}' (${authorization.metadata.issuer})`);
     persistLoginDiscovery(opts, authorization.metadata, out);
@@ -424,7 +437,10 @@ async function listenForCallback(
       }
       settle = resolve;
       reject = rejectWait;
-      const timer = setTimeout(() => rejectWait(new Error(`authorization callback timed out after ${timeoutMs}ms`)), timeoutMs);
+      const timer = setTimeout(() => {
+        completed = true;
+        settleCallback(new Error(`authorization callback timed out after ${timeoutMs}ms`));
+      }, timeoutMs);
       (timer as unknown as { unref?: () => void }).unref?.();
       // ⛔ 성공·실패 어느 쪽으로 끝나든 타이머를 «반드시» 거둔다.
       clearWaitTimer = () => clearTimeout(timer as unknown as ReturnType<typeof setTimeout>);

package/src/cli/msg-cli.ts

@@ -21,6 +21,14 @@ export interface MsgCliDeps {
   registerLogSink?: () => Promise<unknown>;
   /** Wake the recipient after a durable post; never changes the post outcome. */
   wake?: (address: string, msgId: number, message: { from: string; kind?: string }, deps: WakeDeps) => Promise<WakeOutcome>;
+  /** Test seams for the existing self-send transport and the selected task-card ledger. */
+  readCard?: typeof import('../task-agent/task-hand.js').readTaskCard;
+  podFragmentsForRun?: typeof import('../harness/self-send-target.js').listPodFragmentsForRun;
+  sendPod?: typeof import('../harness/self-send-target.js').dispatchPodSelfSend;
+  runScreen?: typeof import('../self-implement/run-ledger.js').queryRunScreenKey;
+  sendMemo?: typeof import('../harness/control-inbox.js').enqueueControlMemo;
+  sendStop?: typeof import('../harness/control-inbox.js').enqueueSoftStop;
+  screenAlive?: (spaceId: string) => boolean;
 }
 
 type CommonOptions = { json?: boolean };
@@ -59,6 +67,83 @@ export function registerMsgCommands(program: Command, deps: MsgCliDeps = {}): vo
   const setExitCode = deps.setExitCode ?? ((code: number) => { process.exitCode = code; });
   const msg = program.command('msg').description('Durable seat-addressed messages');
 
+  // Called by both msg post and msg ask after their durable TA request is written.
+  const handleTaMessage = async (request: Message): Promise<void> => {
+    if (request.to !== 'TA' || request.from === 'TA' || request.replyTo !== undefined) return;
+    const command = /\b(stop|memo|status)\b/i.exec(request.body);
+    const cardId = /\bta-[a-zA-Z0-9][a-zA-Z0-9._-]*\b/.exec(request.body)?.[0]?.replace(/[.,!?]+$/, '');
+    if (!command || !cardId) return;
+    const { readTaskCard } = await import('../task-agent/task-hand.js');
+    const { queryRunScreenKey } = await import('../self-implement/run-ledger.js');
+    const { listHarnessScreens } = await import('../harness/harness-screen.js');
+    const { normalizeRunId } = await import('../harness/harness-space.js');
+    const { dispatchPodSelfSend, listPodFragmentsForRun } = await import('../harness/self-send-target.js');
+    const { enqueueControlMemo, enqueueSoftStop } = await import('../harness/control-inbox.js');
+    withStore(store => {
+      // Reserve one linked reply and pending delivery before touching another store or Pod.
+      const pending = store.db.transaction(() => {
+        // A concurrent sender may have claimed after an earlier read. Keep this
+        // check in the same write transaction as any pending reply change.
+        if (store.taDeliveryClaimState(request.id) === 'held') return null;
+        const reply = store.listReplies(request.id, 1)[0];
+        if (reply && store.taDeliveryStatus(request.id) !== 'pending') return null;
+        let delivery: (() => void) | undefined;
+        let deliveryReply: string | undefined;
+        let answer: string;
+        try {
+          const card = (deps.readCard ?? readTaskCard)(cardId);
+          if (!card) throw new Error(`카드 없음: ${cardId}`);
+          if (command[1]!.toLowerCase() === 'status') {
+            answer = `${card.id}: ${card.status}${card.runId ? ` · run ${card.runId}` : ''}`;
+          } else {
+            const runId = card.runId;
+            if (!runId || normalizeRunId(runId) !== runId) throw new Error(`${cardId}: 연결된 런 없음`);
+            const fragments = (deps.podFragmentsForRun ?? listPodFragmentsForRun)(runId);
+            const resolved = fragments.length === 0 ? (deps.runScreen ?? queryRunScreenKey)(runId) : null;
+            const screen = resolved?.logStoreStatus === 'read' ? resolved.screenKey : null;
+            if (fragments.length > 1 || (fragments.length === 0 && (!screen || !(deps.screenAlive ?? ((id: string) => listHarnessScreens().some(row => row.spaceId === id)))(screen)))) {
+              throw new Error(`${cardId}: 실행 중인 단일 런 공간을 찾을 수 없음`);
+            }
+            const space = fragments[0]?.spaceId ?? screen!;
+            const stop = command[1]!.toLowerCase() === 'stop';
+            const body = stop ? '' : request.body.replace(command[0], '').replace(cardId, '').trim().replace(/^[,.:;\s-]+/, '');
+            if (!stop && (!body || /[\r\n]/.test(body))) throw new Error('memo는 비어 있지 않은 한 줄이어야 한다');
+            const memo = { version: 1 as const, kind: 'supervisor', urgency: 'normal' as const, body };
+            answer = `${cardId}: run ${runId} 전달 여부 미확인 (${space}) — 자동 재시도 중지; 런 인박스를 확인하세요.`;
+            delivery = () => {
+              if (fragments.length) {
+                if (!(deps.sendPod ?? dispatchPodSelfSend)(space, stop ? { stop: true } : { memo })) throw new Error(`${cardId}: Pod 전달 실패`);
+              } else if (stop) (deps.sendStop ?? enqueueSoftStop)(space);
+              else (deps.sendMemo ?? enqueueControlMemo)(space, memo);
+            };
+            deliveryReply = stop ? `${cardId}: run ${runId} soft stop 요청 기록 (${space})`
+              : `${cardId}: run ${runId} 감독 메모 기록 (${space})`;
+          }
+        } catch (error) {
+          answer = `${cardId}: ${error instanceof Error ? error.message : String(error)}`;
+        }
+        if (delivery) store.setTaDeliveryStatus(request.id, 'pending');
+        if (reply) store.updateTaReply(request.id, answer);
+        else store.post({ from: 'TA', to: request.from, kind: 'reply', body: answer, replyTo: request.id });
+        return delivery && deliveryReply ? { delivery, reply: deliveryReply } : null;
+      }).immediate();
+      if (pending) {
+        const claim = store.claimTaDelivery(request.id);
+        if (!claim) return;
+        try {
+          pending.delivery();
+          store.settleTaDelivery(request.id, claim, pending.reply, true);
+        }
+        catch (error) {
+          // A transport error or failed DB settlement may follow a successful publication.
+          // Keep the claim and require inspection rather than send the same memo again.
+          store.markTaDeliveryUnknown(request.id, claim,
+            `${cardId}: 전달 여부 미확인 — 자동 재시도 중지: ${error instanceof Error ? error.message : String(error)}`);
+        }
+      }
+    });
+  };
+
   const run = (action: () => void | Promise<void>) => async () => {
     try { await action(); }
     catch (error) {
@@ -94,6 +179,7 @@ export function registerMsgCommands(program: Command, deps: MsgCliDeps = {}): vo
         ? store.post(envelope)
         : store.appendWithProvenance(envelope, opts.originKey));
       emit(posted, opts.json, () => out.log(formatMessage(posted)));
+      await handleTaMessage(posted); // msg post: process the durable TA request (including pending retry).
       const noBody = noReplyBodyNotice(to);
       if (noBody) out.error(noBody);
       // 저장 «뒤» 한 번 — 읽는 몸이 없다는 안내가 이미 나갔으면 깨움 경고는 겹쳐 내지 않는다.
@@ -273,6 +359,9 @@ export function registerMsgCommands(program: Command, deps: MsgCliDeps = {}): vo
       let store: MsgStore | undefined;
       try {
         const asked = withStore(ledger => ledger.post({ from, to, body: question }));
+        emit(asked, opts.json, () => out.log(`#${asked.id}`));
+        // msg ask uses the same saved-message handler before waiting for its linked reply.
+        await handleTaMessage(asked);
         const deadline = Date.now() + waitSeconds * 1000;
         let reply: Message | undefined;
         store = open();

package/src/cli/pod-cli.ts

@@ -7,7 +7,7 @@ import { readPodMemoryAdvice } from './pod-memory-advice.js';
 import { getUserConfig } from '../user-config.js';
 import { listCodexAccountsInStore } from '../oauth/codex-account-store.js';
 import { parsePodPool, resolvePodPoolSpec, podPoolHostLease, type PoolKubectl } from '../task-orchestrator/surfaces/pod-pool.js';
-import { leaseKubectl, measurePoolLease, probePoolDns, recommendConcurrency, type PoolLeaseMeasure, type PoolDnsProbe } from '../task-orchestrator/surfaces/pod-lease.js';
+import { leaseKubectl, measurePoolLease, probePoolDns, probePoolGitHub, recommendConcurrency, type PoolLeaseMeasure, type PoolDnsProbe, type ExternalGitHubProbe } from '../task-orchestrator/surfaces/pod-lease.js';
 import { POD_COMMAND_DEADLINE_SECONDS, runPodCommand, type PodCommandResult, type RunPodCommandOptions } from '../task-orchestrator/surfaces/pod-command-job.js';
 import { hostLeaseCounts, leaseHasPendingPod } from '../pod-lease/host-lease.js';
 
@@ -22,6 +22,7 @@ export interface PodCliDeps {
   run?: (options: RunPodCommandOptions) => Promise<PodCommandResult>;
   kubectl?: PoolKubectl;
   dns?: (context: string, kubectl: PoolKubectl) => PoolDnsProbe;
+  externalGitHub?: (context: string, kubectl: PoolKubectl) => ExternalGitHubProbe;
   accounts?: () => number;
   perAccount?: () => number;
   poolSpec?: (explicit?: string) => string | null;
@@ -81,7 +82,8 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
     .command('status').description('지금 추가로 쏠 수 있는 Pod 골과 제한 근거')
     .option('--pool <spec>', '풀 스펙 — 컨텍스트[@ssh호스트][:상한][#레지스트리:포트] 쉼표')
     .option('--json', '표 대신 동일 측정값을 JSON 으로')
-    .action((opts: { pool?: string; json?: boolean }) => {
+    .option('--github-egress', '같은 namespace 임시 Pod에서 GitHub DNS/HTTPS를 별도 관측 (admission 불변)')
+    .action((opts: { pool?: string; json?: boolean; githubEgress?: boolean }) => {
       try {
         const kubectl = deps.kubectl ?? leaseKubectl;
         const spec = (deps.poolSpec ?? ((explicit?: string) => resolvePodPoolSpec(explicit, process.env, () => {
@@ -105,7 +107,14 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
         // Pending Pods and Job-only reservations are disjoint; a lease for an already Pending Job is the same Job.
         const waitingJobs = decision.pending === null ? null : decision.pending +
           records.filter((r) => r.stage === 'job' && !leaseHasPendingPod(r, decision.pendingJobs ?? [])).length;
-        const result = { pool: spec, ...measure, accounts, perAccount, ...decision, reserved: host.reserved, waitingJobs };
+        // This explicit observation runs after the admission calculation. A slow or failed external
+        // probe can never change recommended/limitedBy or slow the ordinary lease status path.
+        const externalGitHub = opts.githubEgress ? Object.fromEntries(members.map((member) => {
+          try { return [member.context, (deps.externalGitHub ?? probePoolGitHub)(member.context, kubectl)]; }
+          catch { return [member.context, { externalDns: null, githubHttps: null, measuredAt: null, reason: 'probe failed' }]; }
+        })) : undefined;
+        const result = { pool: spec, ...measure, accounts, perAccount, ...decision, reserved: host.reserved, waitingJobs,
+          ...(externalGitHub ? { externalGitHub } : {}) };
         debug.log('pod.lease', 'status', { pool: spec ? members.map((m) => ({ capacity: m.capacity })) : null, running: decision.running, pending: decision.pending, reserved: host.reserved, waitingJobs, unleasedRunning: decision.unleasedRunning, recommended: decision.recommended, limitedBy: decision.limitedBy });
         if (opts.json) io.log(JSON.stringify(result));
         else {
@@ -123,6 +132,8 @@ export function registerPodCommands(program: Command, deps: PodCliDeps = {}): vo
           }
           io.log(`예약(저작 중) ${host.reserved} · 대기 Job ${waitingJobs ?? '?'} · 실행 ${decision.running ?? '?'}`);
           io.log(`임대 없는 실행 ${decision.unleasedRunning ?? '?'}`);
+          if (externalGitHub) for (const [context, probe] of Object.entries(externalGitHub))
+            io.log(`GitHub 외부망 ${context}: DNS=${probe.externalDns ?? '?'} HTTPS=${probe.githubHttps ?? '?'} 측정=${probe.measuredAt ?? '?'}${probe.reason ? ` · ${probe.reason}` : ''}`);
           io.log(`capacity: ${decision.capacitySlots ?? '?'} 칸 (상한 ${members.reduce((sum, m) => sum + m.capacity, 0)} − Running ${decision.running ?? '?'} − Pending ${decision.pending ?? '?'}; 권장 수에서 건강한 멤버의 임대 없는 실행 차감)`);
           io.log(`memory: ${decision.memorySlots ?? '?'} 칸 (할당 가능 − Running 하니스 상한 합; 골당 16Gi · 모든 네임스페이스의 노드별 기존 예약을 반영해 배치 가능 ${decision.placeableSlots ?? '?'} 칸)`);
           io.log(`lite: ${decision.liteMemorySlots ?? '?'} 칸 (같은 여유를 lite 골 2Gi 로 센 값 · 관측만 — 권장 수는 위 standard 기준)`);