elanous 0.2.38 → 0.2.41

package/graphs/demo/persona-marketer/recipes.yaml

@@ -0,0 +1,19 @@
+# 마케터 장면 데모 레시피 — inert 데모 명령만(실제 게시·외부 호출 없음). brand-tone 방문 상태는 런 statePath 로 격리된다.
+event-photos:
+  command: >-
+    bun -e 'console.log(JSON.stringify({ outcome: "ok" }))' # event-photos
+  timeout_ms: 30000
+reel:
+  command: >-
+    bun -e 'console.log(JSON.stringify({ outcome: "ok" }))' # reel
+  timeout_ms: 30000
+feed-text:
+  command: >-
+    bun -e 'console.log(JSON.stringify({ outcome: "ok" }))' # feed-text
+  timeout_ms: 30000
+brand-tone:
+  command: >-
+    bun -e 'console.log(JSON.stringify({ outcome: "ok" }))' # brand-tone
+  timeout_ms: 30000
+pre-post-check:
+  approval: '{"kind":"게시 대기","auto_post":0}'

package/graphs/demo/persona-teacher/lesson-pack.yaml

@@ -0,0 +1,16 @@
+# SW-PERSONA-TEACHER-WEEKLY-FU · GoalId d68f0e7e17725cef — weekly-lesson 이 넘긴 단원을 수업 팩으로 묶는 유닛.
+# 입력은 앞 노드(select-next)의 구조 산출 그대로이고, 낸 산출은 lesson 하나다.
+graph_id: lesson-pack
+version: 1
+unit:
+  inputs: [select-next]
+  outputs: [lesson]
+  exits: [ok, fail]
+entry_node: pack
+terminal_nodes: [ok, fail]
+nodes:
+  - { node_id: pack, kind: agent, recipe: 'cmd:pack', max_visits: 1 }
+  - { node_id: ok, kind: gate, recipe: none, max_visits: 1 }
+  - { node_id: fail, kind: gate, recipe: none, max_visits: 1 }
+edges:
+  - { from: pack, on: outcome, map: { ok: ok, fail: fail } }

package/graphs/demo/persona-teacher/recipes.yaml

@@ -0,0 +1,17 @@
+# SW-PERSONA-TEACHER-WEEKLY-FU · GoalId d68f0e7e17725cef — weekly-lesson 과 lesson-pack 이 함께 쓰는 명령 카탈로그.
+# 이 demo 는 repo 내 그래프 배치에 고정한다: 러너가 ELANOUS_GRAPH_DIR=graphs/demo/persona-teacher 를 심고,
+# ../../../ 는 repo root 의 scripts/persona-teacher/weekly-lesson-node.ts 로 간다. 외부 게시 없음.
+read-progress:
+  command: 'bun "$ELANOUS_GRAPH_DIR/../../../scripts/persona-teacher/weekly-lesson-node.ts" read-progress'
+  timeout_ms: 60000
+select-next:
+  command: 'bun "$ELANOUS_GRAPH_DIR/../../../scripts/persona-teacher/weekly-lesson-node.ts" select-next'
+  timeout_ms: 60000
+pack:
+  command: 'bun "$ELANOUS_GRAPH_DIR/../../../scripts/persona-teacher/weekly-lesson-node.ts" pack'
+  timeout_ms: 60000
+record-progress:
+  command: 'bun "$ELANOUS_GRAPH_DIR/../../../scripts/persona-teacher/weekly-lesson-node.ts" record-progress'
+  timeout_ms: 60000
+teacher:
+  approval: '다음 주 수업 팩이 준비됐다 — 교사가 확인해야 진도에 기록한다. 이 단원을 그대로 진행할까?'

package/graphs/demo/persona-teacher/weekly-lesson.yaml

@@ -0,0 +1,36 @@
+# SW-PERSONA-TEACHER-WEEKLY-FU · GoalId d68f0e7e17725cef · 0.2.41 칸
+#
+# 교사 페르소나의 주간 반복: 일요일 20:00 Asia/Seoul 스케줄이 저장된 진도(앞선 런 원장의 record-progress 산출)를 읽고
+# 다음 단원을 lesson-pack 유닛으로 넘긴다. 진도를 아직 아무것도 못 읽은 첫 실행은 «기준선»만 기록하고 끝나며,
+# 그 기록이 다음 실행의 단원 선택을 바꾼다. lesson-pack 을 넘긴 실행은 교사 승인(hitl)에서 멈춘다 —
+# 승인은 사람 결정만 claim 하는 graph-approval-card 경로를 그대로 쓴다.
+graph_id: weekly-lesson
+version: 1
+loop:
+  title: 주간 수업 준비 (교사 페르소나)
+  description: 일요일 20:00 KST 에 저장된 진도를 읽어 다음 단원을 lesson-pack 그래프로 넘기고 교사 승인에서 멈춘다
+  trigger:
+    cron: '0 20 * * 0'
+    timezone: Asia/Seoul
+entry_node: read-progress
+terminal_nodes: [done, failed]
+nodes:
+  - { node_id: read-progress, kind: agent, recipe: 'cmd:read-progress', max_visits: 1 }
+  - { node_id: select-next, kind: agent, recipe: 'cmd:select-next', max_visits: 1 }
+  - node_id: lesson-pack
+    kind: subgraph
+    recipe: none
+    max_visits: 1
+    call: lesson-pack@1
+    budget: { inner_steps: 3 }
+    contract: { inputs: [select-next], tools: state-write, outputs: [lesson] }
+  - { node_id: teacher-approval, kind: hitl, recipe: 'approval:teacher', max_visits: 1 }
+  - { node_id: record-progress, kind: agent, recipe: 'cmd:record-progress', max_visits: 1 }
+  - { node_id: done, kind: gate, recipe: none, max_visits: 1 }
+  - { node_id: failed, kind: gate, recipe: none, max_visits: 1 }
+edges:
+  - { from: read-progress, on: outcome, map: { ok: select-next, fail: failed, error: failed } }
+  - { from: select-next, on: outcome, map: { baseline: record-progress, next: lesson-pack, fail: failed } }
+  - { from: lesson-pack, on: outcome, map: { ok: teacher-approval, fail: failed } }
+  - { from: teacher-approval, on: outcome, map: { ok: record-progress, fail: failed } }
+  - { from: record-progress, on: outcome, map: { ok: done, fail: failed } }

package/graphs/overlays/stop-heal-ladder.yaml

@@ -5,8 +5,8 @@
 #   stop_class == main-sync          → rebase-regate
 #   stop_class == pod-died           → resume-from-salvage
 #   stop_class == evidence-uncovered → derive-evidence-rejudge
-# ⛔ 이 넷 밖의 갈래(review-repeat · review-out-of-scope · scope-escape · fabric · launch-failed · unclassified)는 선언이 «없다» —
-#   처방은 `needs-owner` 이고 그것은 코드 기본(`AUTOHEAL_ACTION_BY_CLASS`)이 말한다.
+#   stop_class == review-budget-exhausted → review-round-reauthor
+# ⛔ 일반 반복·범위 밖·scope-escape·fabric·launch-failed·gate-failed·unclassified는 `needs-owner`로 남긴다.
 #
 # 🔑 노드 id 가 곧 처방 이름이다. `src/self-implement/stop-autoheal.ts` 는 그 갈래에 얹힌 오버레이가 «더한 노드 id» 로
 #   처방을 고르고, 선언이 없거나 못 읽으면 코드 표로 간다(원장·관측의 `source` = graph | code-default).
@@ -103,3 +103,24 @@ patch:
   - op: add
     path: /edges/-
     value: { from: derive-evidence-rejudge, on: outcome, map: { healed: dispatch, needs-owner: stopped } }
+---
+overlay_id: stop-heal-ladder-review-budget-exhausted
+target: self-implement
+stage: heal
+applies_when: stop_class == review-budget-exhausted
+patch:
+  - op: add
+    path: /nodes/-
+    value:
+      nodeId: review-round-reauthor
+      kind: judge
+      recipe: review-round-reauthor
+      maxVisits: 1
+      journeyStage: recover
+      contract: { inputs: [goal, review-history], tools: read-only, outputs: [partial-landing, follow-up-goal] }
+  - op: add
+    path: /edges/-
+    value: { from: heal, on: stop_class, map: { review-budget-exhausted: review-round-reauthor } }
+  - op: add
+    path: /edges/-
+    value: { from: review-round-reauthor, on: outcome, map: { healed: dispatch, follow-up: stopped, needs-owner: stopped } }

package/graphs/release/release-loop.yaml

@@ -5,7 +5,9 @@ loop:
   title: 릴리스
   description: 승인된 판을 빌드·검증·게시한다
   trigger:
-    events: [manual]
+    events: [manual, release.cut.due]
+triggers:
+  schedule: { type: cron, cron: '* * * * *' }
 version: 1
 entry_node: version-release
 dry_run_await_approval: true

package/graphs/units/gate/gate.yaml

@@ -0,0 +1,20 @@
+graph_id: gate
+version: 1
+unit:
+  inputs: [goal, context, feedback, budget, checkpoint]
+  outputs: [gate-verdict, evidence]
+  exits: [pass, fail, sync, open]
+entry_node: gate
+terminal_nodes: [pass, fail, sync, open]
+nodes:
+  - node_id: gate
+    kind: gate
+    recipe: gate-stage
+    max_visits: 8
+    contract: { inputs: [goal, context, feedback, budget, checkpoint], tools: read-only, outputs: [gate-verdict, evidence] }
+  - { node_id: pass, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: fail, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: sync, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: open, kind: observe, recipe: none, max_visits: 1 }
+edges:
+  - { from: gate, on: outcome, map: { pass: pass, fail: fail, sync: sync, open: open } }

package/graphs/units/git/git.yaml

@@ -0,0 +1,26 @@
+graph_id: git
+version: 1
+unit:
+  inputs: [goal, context, feedback, budget, checkpoint]
+  outputs: [commit, pr-number, evidence]
+  exits: [to-regate, to-open-pr, to-merge]
+  entries: [main-sync, open-pr]
+entry_node: main-sync
+terminal_nodes: [to-regate, to-open-pr, to-merge]
+nodes:
+  - node_id: main-sync
+    kind: git
+    recipe: git-main-sync
+    max_visits: 2
+    contract: { inputs: [goal, context, feedback, budget, checkpoint], tools: external-write, outputs: [commit, evidence] }
+  - node_id: open-pr
+    kind: git
+    recipe: git-open-pr
+    max_visits: 1
+    contract: { inputs: [goal, context, feedback, budget, checkpoint], tools: external-write, outputs: [pr-number, evidence] }
+  - { node_id: to-regate, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: to-open-pr, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: to-merge, kind: observe, recipe: none, max_visits: 1 }
+edges:
+  - { from: main-sync, on: outcome, map: { to-regate: to-regate, to-open-pr: to-open-pr } }
+  - { from: open-pr, on: outcome, map: { to-merge: to-merge } }

package/graphs/units/implement/implement.yaml

@@ -0,0 +1,19 @@
+graph_id: implement
+version: 1
+unit:
+  inputs: [goal, context, feedback, budget, checkpoint]
+  outputs: [diff, evidence, result]
+  exits: [done, rework, failed]
+entry_node: implement
+terminal_nodes: [done, rework, failed]
+nodes:
+  - node_id: implement
+    kind: agent
+    recipe: implement-stage
+    max_visits: 6
+    contract: { inputs: [goal, context, feedback, budget, checkpoint], tools: external-write, outputs: [diff, evidence, result] }
+  - { node_id: done, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: rework, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: failed, kind: observe, recipe: none, max_visits: 1 }
+edges:
+  - { from: implement, on: outcome, map: { done: done, rework: rework, failed: failed } }

package/graphs/units/landing/landing.yaml

@@ -0,0 +1,18 @@
+graph_id: landing
+version: 1
+unit:
+  inputs: [goal, context, feedback, budget, checkpoint]
+  outputs: [merge-sha, evidence]
+  exits: [merged, refused]
+entry_node: merge
+terminal_nodes: [merged, refused]
+nodes:
+  - node_id: merge
+    kind: git
+    recipe: git-merge
+    max_visits: 1
+    contract: { inputs: [goal, context, feedback, budget, checkpoint], tools: external-write, outputs: [merge-sha, evidence] }
+  - { node_id: merged, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: refused, kind: observe, recipe: none, max_visits: 1 }
+edges:
+  - { from: merge, on: outcome, map: { merged: merged, refused: refused } }

package/graphs/units/review/review.yaml

@@ -0,0 +1,20 @@
+graph_id: review
+version: 1
+unit:
+  inputs: [goal, context, feedback, budget, checkpoint]
+  outputs: [verdict, must-fix, evidence]
+  exits: [pass, fail, sync, open]
+entry_node: review
+terminal_nodes: [pass, fail, sync, open]
+nodes:
+  - node_id: review
+    kind: judge
+    recipe: review-stage
+    max_visits: 8
+    contract: { inputs: [goal, context, feedback, budget, checkpoint], tools: read-only, outputs: [verdict, must-fix, evidence] }
+  - { node_id: pass, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: fail, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: sync, kind: observe, recipe: none, max_visits: 1 }
+  - { node_id: open, kind: observe, recipe: none, max_visits: 1 }
+edges:
+  - { from: review, on: outcome, map: { pass: pass, fail: fail, sync: sync, open: open } }

package/graphs/units/verbs/recipes.yaml

@@ -1,6 +1,9 @@
 make-doc-input:
   command: 'bun scripts/graph-units/verbs-envelope.ts make-doc-input'
   timeout_ms: 10000
+research:
+  command: 'bun scripts/graph-units/verbs/research.ts'
+  timeout_ms: 300000
 make-doc-output:
   command: 'bun scripts/graph-units/verbs-envelope.ts make-doc-output'
   timeout_ms: 10000

package/graphs/units/verbs/research.yaml

@@ -0,0 +1,20 @@
+graph_id: verb-research
+version: 1
+entry_node: research
+terminal_nodes: [done, failed]
+unit:
+  inputs: [ask]
+  outputs: [result, evidence]
+  exits: [done, failed]
+nodes:
+  - node_id: research
+    kind: agent
+    recipe: 'cmd:research'
+    max_visits: 1
+    contract: { inputs: [ask], tools: omni-crawl-research-write-edit-denied, outputs: [outcome, result, evidence] }
+  - { node_id: done, kind: gate, recipe: none, max_visits: 1, contract: { inputs: [], tools: none, outputs: [result, evidence] } }
+  - { node_id: failed, kind: observe, recipe: none, max_visits: 1, contract: { inputs: [], tools: none, outputs: [result, evidence] } }
+edges:
+  - from: research
+    on: outcome
+    map: { done: done, failed: failed }

package/graphs/video/explainer-line.yaml

@@ -6,6 +6,8 @@ graph_id: explainer-line
 version: 1
 entry_node: script
 terminal_nodes: [delivered, needs-human, blocked, unobserved]
+# ⭐ 요청 동작 — 3분 영상: 이 라인이 만드는 영상 계획의 목표 총 길이는 180초다(지속 필드 target_seconds · 단위 초).
+target_seconds: 180
 nodes:
   - node_id: script
     kind: agent
@@ -55,4 +57,5 @@ edges:
   # check/snapshot failures are layout faults → rebuild; a wrong-length render is a timing fault → rebuild too.
   - { from: render, on: outcome, map: { ok: qc, check-fail: build, render-mismatch: build, unmeasurable: unobserved } }
   # speech ≠ script → re-voice that line; loudness off → rebuild (mix lives in the composition); public release is a human call.
-  - { from: qc, on: outcome, map: { pass: delivered, vo-mismatch: vo, loudness: build, public: needs-human, unmeasurable: unobserved } }
+  # narration past the target_seconds(180) plan is a timing fault → rebuild too.
+  - { from: qc, on: outcome, map: { pass: delivered, vo-mismatch: vo, loudness: build, too-long: build, public: needs-human, unmeasurable: unobserved } }

package/graphs/work/research-report.yaml

@@ -2,9 +2,16 @@ graph_id: work-research-report-rehearsal
 version: 1
 # TASK-HAND-GRAPH-RUN — `tasks hand --completion research-report` 가 이 조합을 실제 graph run(runGraph)으로 발사한다.
 launcher: graph-run
-entry_node: make-doc
+entry_node: research
 terminal_nodes: [done, failed]
 nodes:
+  - node_id: research
+    kind: subgraph
+    recipe: none
+    max_visits: 1
+    call: verb-research@1
+    budget: { inner_steps: 4 }
+    contract: { inputs: [ask], tools: omni-crawl-research-write-edit-denied, outputs: [result, evidence] }
   - node_id: make-doc
     kind: subgraph
     recipe: none
@@ -22,6 +29,9 @@ nodes:
   - { node_id: done, kind: gate, recipe: none, max_visits: 1 }
   - { node_id: failed, kind: gate, recipe: none, max_visits: 1 }
 edges:
+  - from: research
+    on: outcome
+    map: { done: make-doc, failed: failed }
   - from: make-doc
     on: outcome
     map: { done: verify, rework: make-doc, needs-human: failed, failed: failed }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "elanous",
   "mcpName": "io.github.ElanvitalAI/elanous",
-  "version": "0.2.38",
+  "version": "0.2.41",
   "description": "Self-healing coding harness where eyes, hands, and memory all turn on one sentence — it authors its own goals, implements them in isolated worktrees, and reviews its own work.",
   "license": "Apache-2.0",
   "author": "Elanvital AI",

package/scripts/dead-code/report.ts

@@ -0,0 +1,169 @@
+#!/usr/bin/env bun
+/** Conservative multi-entrypoint reachability inventory. This command NEVER deletes files. */
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, relative, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import ts from 'typescript';
+
+export interface RootGroup { name: string; roots: string[]; configuration?: string }
+export interface ModuleGap { importer: string; specifier: string; kind: 'unresolved' | 'dynamic' }
+export interface GroupResult { name: string; roots: string[]; reachable: string[]; gaps: ModuleGap[] }
+export interface ReachabilityReport {
+  schemaVersion: 1;
+  trackedFiles: number;
+  groups: GroupResult[];
+  unionReachable: string[];
+  unknownKeep: string[];
+  unresolved: ModuleGap[];
+  dynamic: ModuleGap[];
+  /** Never interpreted as safe-to-delete: configuration/runtime loaders cannot be exhaustively statically enumerated. */
+  unclassifiedKeep: string[];
+  overlaps: Record<string, string[]>;
+  deletions: 0;
+}
+
+const moduleFile = (p: string) => /\.[cm]?[jt]sx?$/.test(p);
+const testFile = (p: string) => /(?:^|\/)(?:__tests__|__fixtures__|test|tests|fixtures)\//.test(p) || /\.(?:test|spec)\.[cm]?[jt]sx?$/.test(p);
+const normalized = (p: string) => p.replaceAll('\\', '/');
+const sorted = (items: Iterable<string>) => [...new Set(items)].sort();
+
+export function trackedModules(root: string): string[] {
+  return execFileSync('git', ['ls-files', '-z', '--cached'], { cwd: root, maxBuffer: 16 * 1024 * 1024 })
+    .toString().split('\0').filter(moduleFile).filter(Boolean).map(normalized).sort();
+}
+
+function loadOptions(config: string | undefined, root: string): ts.CompilerOptions {
+  if (!config || !existsSync(join(root, config))) return { moduleResolution: ts.ModuleResolutionKind.Bundler, module: ts.ModuleKind.ESNext, allowJs: true };
+  const filename = join(root, config);
+  const source = ts.readConfigFile(filename, ts.sys.readFile);
+  if (source.error) throw new Error(ts.flattenDiagnosticMessageText(source.error.messageText, '\n'));
+  const parsed = ts.parseJsonConfigFileContent(source.config, ts.sys, dirname(filename), undefined, filename);
+  if (parsed.errors.length) throw new Error(parsed.errors.map(e => ts.flattenDiagnosticMessageText(e.messageText, '\n')).join('\n'));
+  return parsed.options;
+}
+
+export function inventoryRoots(root: string, files: readonly string[]): RootGroup[] {
+  const groups: RootGroup[] = [
+    { name: 'cli', roots: ['bin/elanous.mjs', 'src/index.ts', 'src/light-cli.ts'], configuration: 'tsconfig.json' },
+    { name: 'scripts', roots: files.filter(p => p.startsWith('scripts/') && !testFile(p)), configuration: 'tsconfig.json' },
+    { name: 'pwa', roots: files.filter(p => /^apps\/pwa\/src\/(app\/(?:.*\/)?(?:page|layout|route|loading|error|not-found|template|default)|middleware|instrumentation)\.[jt]sx?$/.test(p)), configuration: 'apps/pwa/tsconfig.json' },
+    { name: 'desktop', roots: ['apps/desktop/src/main.ts'], configuration: 'apps/desktop/tsconfig.json' },
+  ];
+  for (const app of sorted(files.filter(p => /^apps\/[^/]+\/src\/(?:main|index)\.[jt]sx?$/.test(p)))) {
+    if (app.startsWith('apps/desktop/') || app.startsWith('apps/pwa/')) continue;
+    groups.push({ name: `app:${app.split('/')[1]}`, roots: [app], configuration: `apps/${app.split('/')[1]}/tsconfig.json` });
+  }
+  // Manifest-declared paths are roots even when no TS import refers to them.
+  const manifests = execFileSync('git', ['ls-files', '-z', '--', 'plugins/*/plugin.json', 'plugins/*/manifest.json'], { cwd: root }).toString().split('\0').filter(Boolean);
+  const plugins: string[] = [];
+  for (const path of manifests) {
+    const manifest = JSON.parse(readFileSync(join(root, path), 'utf8')) as { entry?: string; main?: string };
+    const declared = manifest.entry ?? manifest.main;
+    if (!declared) continue;
+    const entry = normalized(join(dirname(path), declared));
+    // Missing manifest entries remain roots and become explicit unresolved/unknown gaps.
+    plugins.push(entry);
+  }
+  groups.push({ name: 'plugins', roots: sorted(plugins), configuration: 'tsconfig.json' });
+  // Runtime loaders and independently launched ACP boot are not necessarily in the CLI's import graph.
+  groups.push({ name: 'runtime', roots: ['src/boot/acp-server.ts', 'src/plugin-declarative/discovery.ts', 'src/self-implement/graph-catalog.ts', 'src/graph-runner/runner.ts'], configuration: 'tsconfig.json' });
+  return groups;
+}
+
+export function analyzeReachability(root: string, files: readonly string[], groups: readonly RootGroup[]): ReachabilityReport {
+  const tracked = new Set(files.map(normalized));
+  const cache = new Map<string, ts.SourceFile>();
+  const results: GroupResult[] = [];
+  const unknown = new Set<string>();
+  for (const group of groups) {
+    const options = loadOptions(group.configuration, root);
+    const reachable = new Set<string>();
+    const gaps: ModuleGap[] = [];
+    const queue = [...group.roots];
+    const host = ts.createCompilerHost(options, true);
+    const moduleCache = ts.createModuleResolutionCache(root, s => s, options);
+    while (queue.length) {
+      const path = queue.pop()!;
+      if (reachable.has(path)) continue;
+      if (!tracked.has(path)) {
+        gaps.push({ importer: `(root:${group.name})`, specifier: path, kind: 'unresolved' });
+        unknown.add(path);
+        continue;
+      }
+      reachable.add(path);
+      const absolute = join(root, path);
+      let source = cache.get(path);
+      if (!source) {
+        source = ts.createSourceFile(absolute, readFileSync(absolute, 'utf8'), ts.ScriptTarget.Latest, true, path.endsWith('x') ? ts.ScriptKind.TSX : ts.ScriptKind.TS);
+        cache.set(path, source);
+      }
+      const inspect = (specifier: ts.Expression) => {
+        if (!ts.isStringLiteralLike(specifier)) {
+          gaps.push({ importer: path, specifier: specifier.getText(source), kind: 'dynamic' }); unknown.add(path); return;
+        }
+        const text = specifier.text;
+        const resolved = ts.resolveModuleName(text, absolute, options, host, moduleCache).resolvedModule?.resolvedFileName;
+        const name = resolved ? normalized(relative(root, resolved)) : '';
+        if (name && tracked.has(name)) queue.push(name);
+        else if (text.startsWith('.') || text.startsWith('/') || text.startsWith('@/')) {
+          gaps.push({ importer: path, specifier: text, kind: 'unresolved' }); unknown.add(path);
+        }
+        // External packages are outside the tracked-source deletion domain.
+      };
+      const walk = (node: ts.Node) => {
+        if ((ts.isImportDeclaration(node) || ts.isExportDeclaration(node)) && node.moduleSpecifier) inspect(node.moduleSpecifier);
+        else if (ts.isImportEqualsDeclaration(node) && ts.isExternalModuleReference(node.moduleReference) && node.moduleReference.expression) inspect(node.moduleReference.expression);
+        else if (ts.isCallExpression(node) && (node.expression.kind === ts.SyntaxKind.ImportKeyword || (ts.isIdentifier(node.expression) && node.expression.text === 'require'))) {
+          if (node.arguments[0]) inspect(node.arguments[0]);
+          else { gaps.push({ importer: path, specifier: '(missing argument)', kind: 'dynamic' }); unknown.add(path); }
+        }
+        ts.forEachChild(node, walk);
+      };
+      walk(source);
+    }
+    results.push({ name: group.name, roots: sorted(group.roots), reachable: sorted(reachable), gaps });
+  }
+  const uses = new Map<string, string[]>();
+  for (const group of results) for (const p of group.reachable) uses.set(p, [...(uses.get(p) ?? []), group.name]);
+  const gaps = results.flatMap(r => r.gaps);
+  const uniqueGaps = (kind: ModuleGap['kind']) => [...new Map(gaps.filter(g => g.kind === kind).map(g => [`${g.importer}\0${g.specifier}`, g])).values()]
+    .sort((a, b) => a.importer.localeCompare(b.importer) || a.specifier.localeCompare(b.specifier));
+  // The rest are *not* dead code: lazy/config/graph/plugin discovery and non-TS launchers are open-world inputs.
+  const unclassified = files.filter(p => !uses.has(p));
+  return {
+    schemaVersion: 1, trackedFiles: files.length, groups: results,
+    unionReachable: sorted(uses.keys()), unknownKeep: sorted([...unknown, ...unclassified]),
+    unresolved: uniqueGaps('unresolved'), dynamic: uniqueGaps('dynamic'),
+    unclassifiedKeep: sorted(unclassified),
+    overlaps: Object.fromEntries([...uses].filter(([, v]) => v.length > 1).sort(([a], [b]) => a.localeCompare(b))),
+    deletions: 0,
+  };
+}
+
+export function renderMarkdown(report: ReachabilityReport): string {
+  const lines = ['# Multi-entrypoint reachability inventory', '', 'This is an observation, not a safe-to-delete list. Deletions: 0.', '',
+    `Tracked source: ${report.trackedFiles}; union reachable: ${report.unionReachable.length}; unknown/keep: ${report.unknownKeep.length}; unresolved: ${report.unresolved.length}; dynamic: ${report.dynamic.length}.`, '',
+    '| Root family | roots | reachable | unknown edges |', '|---|---:|---:|---:|'];
+  for (const g of report.groups) lines.push(`| ${g.name} | ${g.roots.length} | ${g.reachable.length} | ${g.gaps.length} |`);
+  lines.push('', 'Unclassified source, dynamic imports, configuration/graph loaders and resolution gaps remain unknown/keep; no deletion candidate is asserted.', '');
+  return lines.join('\n');
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  const root = resolve(process.argv[2] ?? '.');
+  const files = trackedModules(root);
+  const report = analyzeReachability(root, files, inventoryRoots(root, files));
+  const json = JSON.stringify(report, null, 2);
+  if (process.argv.includes('--json')) process.stdout.write(json + '\n');
+  else if (process.argv.includes('--md')) process.stdout.write(renderMarkdown(report));
+  else if (process.argv.includes('--output')) {
+    const index = process.argv.indexOf('--output');
+    const target = process.argv[index + 1];
+    if (!target || target.startsWith('--')) throw new Error('--output requires a path');
+    const output = resolve(target);
+    writeFileSync(output + '.json', json + '\n');
+    writeFileSync(output + '.md', renderMarkdown(report));
+    console.log(`report: ${output}.json / ${output}.md`);
+  } else process.stdout.write(renderMarkdown(report));
+}

package/scripts/disk-steward.ts

@@ -0,0 +1,46 @@
+#!/usr/bin/env bun
+/**
+ * 디스크 관리자 손 실행 입구(DISK-STEWARD-CORE). 정식 CLI·넥서스 틱 배선은 후속 칸(WIRE·HOST-AGENT) 몫이다.
+ *
+ *   bun scripts/disk-steward.ts run [--apply] [--json] [--repo <dir>]
+ *   bun scripts/disk-steward.ts request <path> --kind <worktree|graph-context|pod-dir|tmp> [--owner o] [--reason r]
+ *
+ * ⭐ `run` 은 기본 dry-run 이다 — `--apply` 를 줘야 지운다.
+ */
+import { requestReclaim, RECLAIM_KINDS, type ReclaimKind } from '../src/disk-steward/ledger.js';
+import { defaultListOpenPrs, runDiskSteward } from '../src/disk-steward/steward.js';
+
+const argv = process.argv.slice(2);
+const flag = (name: string): string | undefined => {
+  const i = argv.indexOf(name);
+  return i >= 0 ? argv[i + 1] : undefined;
+};
+
+async function main(): Promise<number> {
+  const [sub, target] = argv;
+  if (sub === 'request') {
+    const kind = flag('--kind') as ReclaimKind | undefined;
+    if (!target || !kind || !(RECLAIM_KINDS as readonly string[]).includes(kind)) {
+      console.error(`usage: request <abs-path> --kind <${RECLAIM_KINDS.join('|')}>`);
+      return 2;
+    }
+    const r = requestReclaim({ path: target, kind, owner: flag('--owner'), reason: flag('--reason'), requester: 'cli:disk-steward' });
+    console.log(JSON.stringify(r));
+    return r.ok ? 0 : 1;
+  }
+  if (sub === 'run') {
+    const repo = flag('--repo') ?? process.cwd();
+    const r = await runDiskSteward({ apply: argv.includes('--apply') }, { listOpenPrs: () => defaultListOpenPrs(repo) });
+    if (argv.includes('--json')) console.log(JSON.stringify(r, null, 1));
+    else {
+      const { entries, ...summary } = r;
+      console.log(JSON.stringify(summary));
+      for (const e of entries) console.log(`${e.action}\t${e.kind}\t${e.path}\t${e.reason}`);
+    }
+    return r.outcome === 'pr-list-unavailable' || r.outcome === 'live-list-unavailable' || r.failed > 0 ? 1 : 0;
+  }
+  console.error('usage: disk-steward.ts run [--apply] [--json] [--repo <dir>] | request <path> --kind <kind>');
+  return 2;
+}
+
+process.exitCode = await main();

package/scripts/fleet/node-setup.sh

@@ -54,6 +54,56 @@ R true >/dev/null 2>&1 && ok "ssh" || { bad "ssh 불통 — 이 맥에서 ssh
 # 1b. 원격 OS — Linux(WSL Ubuntu 등)면 리눅스 갈래(scripts/fleet/node-setup-linux.sh · apt·docker-ce·k3d install.sh). 맥은 아래 종전 단계 그대로.
 NODE_OS="$(R 'uname -s' 2>/dev/null)"
 if [ "$NODE_OS" = Linux ]; then . "$ROOT/scripts/fleet/node-setup-linux.sh"; linux_base; else
+# 1c. 전용 서버 macOS 전원·재시작 기본값 — 이 스크립트는 gate·Pod 플릿 호스트 전용이다.
+#     --check 는 조회만 한다. sudo -n 이 안 되면 이 단계만 건너뛰고 경고하며, 나머지 셋업은 계속한다.
+if [ $CHECK = 1 ]; then
+  if R 'sudo -n true' >/dev/null 2>&1; then
+    POWER_SETTINGS="$(R 'sudo -n pmset -g custom' 2>/dev/null)"
+    RESTART_SETTINGS="$(R 'sudo -n systemsetup -getrestartpowerfailure' 2>/dev/null)"
+    UPDATE_INSTALL="$(R 'sudo -n defaults read /Library/Preferences/com.apple.SoftwareUpdate AutomaticInstallMacOSUpdates' 2>/dev/null)"
+    UPDATE_DOWNLOAD="$(R 'sudo -n defaults read /Library/Preferences/com.apple.SoftwareUpdate AutomaticDownload' 2>/dev/null)"
+    POWER_SOURCES_OK=0
+    if awk '
+      function check_source() {
+        if (autorestart != "1" || powernap != "0" || sleep_value != "0" || disksleep != "0") bad = 1
+      }
+      /^[[:space:]]*(Battery|AC) Power:[[:space:]]*$/ {
+        if (found) check_source()
+        found = 1
+        autorestart = powernap = sleep_value = disksleep = ""
+        next
+      }
+      found {
+        if ($1 == "autorestart") autorestart = $2
+        else if ($1 == "powernap") powernap = $2
+        else if ($1 == "sleep") sleep_value = $2
+        else if ($1 == "disksleep") disksleep = $2
+      }
+      END {
+        if (found) check_source()
+        if (!found || bad) exit 1
+      }
+    ' <<< "$POWER_SETTINGS"; then POWER_SOURCES_OK=1; fi
+    if [ "$POWER_SOURCES_OK" = 1 ] \
+      && [ "$RESTART_SETTINGS" = 'Restart After Power Failure: On' ] \
+      && [ "$UPDATE_INSTALL" = '0' ] \
+      && [ "$UPDATE_DOWNLOAD" = '0' ]; then
+      ok "macOS 서버 전원·재시작 기본값"
+    else todo "macOS 서버 전원·재시작 기본값 적용"; fi
+  else
+    printf '  ⚠ macOS 서버 전원 기본값 건너뜀 — sudo -n 사용 불가\n' >&2
+    todo "macOS 서버 전원·재시작 기본값 (sudo 필요)"
+  fi
+else
+  if R 'sudo -n true' >/dev/null 2>&1; then
+    if R 'sudo -n pmset -a autorestart 1 powernap 0 sleep 0 disksleep 0 && sudo -n systemsetup -setrestartpowerfailure on && sudo -n defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticInstallMacOSUpdates -bool false && sudo -n defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticDownload -bool false'; then
+      ok "macOS 서버 전원·재시작 기본값 적용"
+    else bad "macOS 서버 전원·재시작 기본값 적용 실패"; fi
+  else
+    printf '  ⚠ macOS 서버 전원 기본값 건너뜀 — sudo -n 사용 불가\n' >&2
+    todo "macOS 서버 전원·재시작 기본값 (sudo 필요)"
+  fi
+fi
 # 2. brew · docker(OrbStack)
 R 'command -v brew' >/dev/null && ok "brew" || bad "brew 없음 — https://brew.sh 로 먼저 설치(사람이)"
 if R 'docker info --format "{{.ServerVersion}}"' >/dev/null 2>&1; then ok "docker $(R 'docker info --format "{{.ServerVersion}} cpu={{.NCPU}} mem={{.MemTotal}}"')"; else bad "docker 없음·꺼짐 — OrbStack 을 설치·실행(사람이 · ⛔ OrbStack 내장 k8s 는 NetworkPolicy 를 집행 안 한다 · k3d 를 쓴다)"; fi