elanous 0.2.4 → 0.2.6

package/src/index.ts

@@ -26,6 +26,7 @@ import { CLI_HARNESS_DOGFOOD_ENTRANCE, CLI_HARNESS_ORCHESTRATE_ENTRANCE, describ
 import { collectCommandEntrances, renderCommandEntrances } from './self-dev/entrance-inventory.js';
 import { isGoalAuthorFileName } from './self-implement/goal-document.js';
 import { DEV_PIPELINE_SINK_SURFACE } from './self-implement/self-cli-sink-surface.js';
+import { registerPrivateLedgerCommands } from './cli/private-ledger-commands.js';
 import { applyTestStateDirFlagFromArgv } from './cli/test-state-dir-flag.js';
 import { applyTestFlagFromArgv, observeTestFlagOwnership, uncoveredTestFlagPaths, staleTestFlagPaths } from './cli/test-flag.js';
 import { registerPtyTakeoverCommands } from './cli/pty-takeover-cli.js';
@@ -115,7 +116,7 @@ import { DEFAULT_REVIEW_BACKEND } from './agent-substrate/acp-reviewer.js';
 import type { ReviewResult } from './agent-substrate/pr-reviewer.js';
 import type { ReviewVerdict } from './agent-mission/review-loop.js';
 import type { SyncMode } from './types.js';
-import { runOnboarding, runOnboardingStep, runOnboardingNonInteractive, needsOnboarding, type OnboardingStepId } from './onboarding.js';
+import { runOnboarding, runOnboardingStep, runOnboardingNonInteractive, needsOnboarding, handleOnboardingRefusal, type OnboardingStepId } from './onboarding.js';
 import {
   getUserConfig, reloadUserConfig, userConfigPath, saveUserConfig,
   backupUserConfig, backupConfigPath, addRotationEntry, type RotationEntry,
@@ -2088,13 +2089,14 @@ harnessCmd
   });
 harnessCmd
   .command('stop <runId>')
-  .description('런 하나를 멈춘다 — 오케스트레이터 프로세스(pid.json 의 시작 시각이 맞을 때만) ⊕ 라벨 elanous.run=<runId> Pod Job')
+  .description('런 하나를 멈춘다 — pid.json 시작 시각 대조 ⊕ 런 발사 프로세스 표 조회 ⊕ 라벨 elanous.run=<runId> Pod Job')
   .option('--context <ctx...>', 'kube 문맥(여러 번 · 기본 = 알려진 문맥 전부)')
   .option('--json', 'JSON 출력')
-  .action(async (runId: string, opts: { context?: string[]; json?: boolean }) => {
+  .option('--dry-run', '프로세스 후보만 보고 신호·Pod Job 삭제는 하지 않는다')
+  .action(async (runId: string, opts: { context?: string[]; json?: boolean; dryRun?: boolean }) => {
     const { stopHarnessRun, defaultHarnessStopDeps, formatHarnessStop } = await import('./harness/harness-stop.js');
     try {
-      const result = await stopHarnessRun(runId, defaultHarnessStopDeps(), opts.context);
+      const result = await stopHarnessRun(runId, defaultHarnessStopDeps(), opts.context, opts.dryRun === true);
       process.stdout.write(`${opts.json ? JSON.stringify(result) : formatHarnessStop(result)}\n`);
     } catch (error) {
       process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
@@ -4238,8 +4240,9 @@ const selfOrchestrateCmd = selfCmd
             if (!opts.json) ui.info(`[pod] 이미지 다시 굽기 — ${image.reason} (~1분)`);
             const { spawnSync } = await import('node:child_process');
             const top = spawnSync('git', ['rev-parse', '--show-toplevel'], { encoding: 'utf8' }).stdout.trim() || process.cwd();
-            const b = spawnSync('bash', [`${top}/docker/harness/build.sh`], { encoding: 'utf8', timeout: 900_000 });
-            if (b.status !== 0) { ui.error(`--substrate pod: 이미지 굽기 실패 rc=${b.status}: ${(b.stdout + b.stderr).slice(-400)}`); process.exit(2); }
+            // bun 1.4 applies the 1 MiB default maxBuffer: a docker build log past it kills the child (ENOBUFS · status null).
+            const b = spawnSync('bash', [`${top}/docker/harness/build.sh`], { encoding: 'utf8', timeout: 900_000, maxBuffer: 64 * 1024 * 1024 });
+            if (b.status !== 0) { ui.error(`--substrate pod: 이미지 굽기 실패 rc=${b.status}${b.error ? ` (${(b.error as NodeJS.ErrnoException).code ?? b.error.message})` : ''}: ${(b.stdout + b.stderr).slice(-400)}`); process.exit(2); }
             image = podImageFreshness();
           }
         }
@@ -4410,7 +4413,7 @@ const selfOrchestrateCmd = selfCmd
         ...results.map((r) => {
           const icon = r.status === 'done' ? '✅' : r.status === 'cancelled' ? '⛔' : '❌';
           const disp = r.merged ? ` → merged ${r.prUrl}` : r.prUrl ? ` → PR ${r.prUrl}` : r.stage ? ` [${r.stage}]` : '';
-          return `  ${icon} ${r.status} · ${r.feature.slice(0, 56)}${disp}${r.error ? ` — ${r.error.code}` : ''}`;
+          return `  ${icon} ${r.status} · ${r.feature.slice(0, 56)}${disp}${r.error ? ` — ${r.error.code}${r.error.code === 'pod-job-failed' ? `: ${r.error.message}` : ''}` : ''}`;
         }),
       ].join('\n'));
       await reportRun(results);
@@ -4608,7 +4611,7 @@ selfCmd
   .action(async (space: string | undefined, opts: { stop?: boolean; memo?: string; run?: string; includeStale?: boolean; readWait?: string }) => {
     const { classifyRunScreenMissing, queryRunScreenKey, listRunLedgers } = await import('./self-implement/run-ledger.js');
     const { getPtyManifest, listPtyManifestRows } = await import('./pty-shell/pty-manifest.js');
-    const { readPodFragment, podFragmentFinished, dispatchPodSelfSend } = await import('./harness/self-send-target.js');
+    const { readPodFragment, podFragmentFinished, listPodFragmentsForRun, dispatchPodSelfSend } = await import('./harness/self-send-target.js');
     const { listHarnessScreens, readHarnessHeartbeat } = await import('./harness/harness-screen.js');
     const decision = decideSelfSend({ space, opts, now: Date.now() }, {
       resolveRunScreen: (runId) => {
@@ -4616,6 +4619,7 @@ selfCmd
         return { ...resolved, missingStatus: resolved.screenKey ? undefined : classifyRunScreenMissing(resolved.lastEvent) };
       },
       resolveTarget: (target) => resolveSelfSendTarget(target, { getPtyManifest, listPtyManifestRows }),
+      podFragmentsForRun: (runId) => listPodFragmentsForRun(runId),
       isPodFragment: (spaceId) => Boolean(readPodFragment(spaceId) || podFragmentFinished(spaceId)),
       screens: () => listHarnessScreens().map((screen): SelfSendCandidate => {
         const heartbeat = readHarnessHeartbeat(screen.spaceId);
@@ -5426,6 +5430,7 @@ program.command('ad [input...]')
   });
 
 registerDocsCommands(program);
+registerPrivateLedgerCommands(program);
 registerFleetCommands(program);
 
 // ── ops (운영 관측 — 지금 뭐 도나·이상 없나·상태 전이) ──
@@ -5592,6 +5597,7 @@ agentCmd
   .option('--backend <id>', `외부 에이전트 backend (${agentBackendHelpList}). 각 CLI auto-approve 모드로 PTY 구동. 미등록 지정 시 명시 에러(조용한 codex 폴백 없음·애그노스틱)`)
   .option('--chain <backends>', '한 미션의 backend 사슬 (예: codex,claude,elanous)')
   .option('--plugin <name@market>', '에이전트 화면 안에서 플러그인을 설치하고 그 스킬로 미션 실행 (codex/claude)')
+  .addOption(new Option('--resources <mode>', '미션 전 자원 판단 사다리 (on|off, 기본 on)').choices(['on', 'off']).default('on'))
   .option('--headless', 'Claude 구독 CLI를 비대화형 stream-json 모드로 실행 (claude backend 전용)')
   .action(async (textParts: string[], opts: Record<string, any>) => {
     // 구독 모드 보장 — 브레인(streamLLM)·codex 둘 다 ChatGPT 구독으로 (API 과금 회피).
@@ -7815,6 +7821,16 @@ sessionCmd
     console.log(res.formatted ?? '(no context)');
   });
 
+async function runOnboardingForCli(): Promise<boolean> {
+  try {
+    await runOnboarding();
+    return true;
+  } catch (error) {
+    if (handleOnboardingRefusal(error, 'other')) return false;
+    throw error;
+  }
+}
+
 function announceChatToolsCompatibility(): void {
   process.stderr.write('`chat --tools` is a compatibility entrypoint; use `elanous agent` for tool-loop calls.\n');
   debug.log('chat.tools-compatibility', 'invoked', { toolLoopEnabled: true });
@@ -7841,7 +7857,7 @@ program
     const cfg = getUserConfig();
     if (needsOnboarding(cfg)) {
       ui.info('No config yet — launching setup wizard first.');
-      await runOnboarding();
+      if (!await runOnboardingForCli()) return;
     }
     const refreshed = reloadUserConfig();
     // ★ 관측갭 수리(2026-07-21·제1원칙·트랙A) — self-implement 자식 goal-loop(`chat --goal-loop`)은 데몬과
@@ -7885,7 +7901,7 @@ program
   .option('--new', 'Force a new session at boot instead of resuming the active one')
   .option('--session <id>', 'Resume an explicit session (id or unique prefix)')
   .option('--scenario <path>', 'Run a YAML multi-turn scenario before handing back to interactive (or exit)')
-  .option('--replay <session-id>', 'Re-execute the user prompts from a previous session in a fresh REPL run (BACKLOG #5). User prompts are extracted in order and fed through the same dispatcher as --scenario; assistant/tool messages and attachments are dropped. Mutually exclusive with --scenario.')
+  .option('--replay <session-id>', 'Re-execute the user prompts from a previous session in a fresh REPL run. User prompts are extracted in order and fed through the same dispatcher as --scenario; assistant/tool messages and attachments are dropped. Mutually exclusive with --scenario.')
   .option('--exit-after-scenario', 'Exit after the scenario / replay completes (default true when stdin is not a TTY)')
   .option('--no-exit-after-scenario', 'Stay in the interactive prompt after the scenario / replay completes (TTY default)')
   .option('--json', 'Emit one JSON line per turn (sessionId/provider/model/reply/...) instead of streaming text')
@@ -7908,7 +7924,7 @@ program
     const cfg = getUserConfig();
     if (needsOnboarding(cfg)) {
       ui.info('No config yet — launching setup wizard first.');
-      await runOnboarding();
+      if (!await runOnboardingForCli()) return;
     }
     const refreshed = reloadUserConfig();
     const { runRepl } = await import('./repl/index.js');
@@ -8471,7 +8487,7 @@ program
     'ACP client for the running elanous daemon. Three modes: handshake-only (default), one-shot (--message), interactive REPL (--interactive). Local (unix socket) or remote (--host / --url) over Tailscale.',
   )
   .option('--socket <path>', 'Override the unix socket path (default: ~/.elanous/elanous.sock)')
-  .option('--host <hostport>', 'Remote daemon host:port (e.g. mbp.tailnet:31415). Coerced to ws://<hostport>/v1/acp.')
+  .option('--host <hostport>', 'Remote daemon host:port (e.g. laptop.tailnet:31415). Coerced to ws://<hostport>/v1/acp.')
   .option('--url <wsurl>', 'Remote daemon WS URL (e.g. ws://host:31415/v1/acp). Overrides --host.')
   .option('-r, --remote [name]', 'Bookmark name (`-r` alone = default). Fills host/token-file; explicit --url/--host/--token/--token-file win.')
   .option('--token <token>', 'Bearer token for remote auth. Overrides --token-file and ELANOUS_TOKEN.')
@@ -8945,6 +8961,7 @@ const nexusRunCmd = nexusCmd
   .option('--watch', 'Static-mode: fs.watch loop inside daemon — source edits auto-rebuild apps/pwa. Default on for `nexus run` (no args), off for `--test`.')
   .option('--no-watch', 'Disable the static-mode fs.watch loop (canonical entry default-on).')
   .option('--no-mcp', 'Skip the entire MCP-client boot wire (every `mcp.servers[]` in user-config). Use when a misbehaving server (e.g. xcrun mcpbridge tools/list hang) drags every startup through its 8s timeout.')
+  .option('--no-auth', 'Explicitly disable Nexus HTTP and ACP websocket bearer authentication (unsafe).')
   .option('--dispatch', '§5-③ — enable the autonomous idle-continuation scheduler for this run (drives an active auto-mode goal on idle). Same as user-config `dispatch.enabled`. Default off — ignites self-firing turns, so opt-in.')
   .option('--force', 'Take the lock even if another nexus instance is recorded as running.')
   .option('--status', 'Alias for `elanous nexus status` (or test-mode status when combined with --test).')
@@ -8980,6 +8997,7 @@ const nexusRunCmd = nexusCmd
     autoRestart?: boolean;
     watch?: boolean;
     mcp?: boolean;
+    auth?: boolean;
     fresh?: boolean;
     force?: boolean;
     dispatch?: boolean;
@@ -9129,6 +9147,7 @@ const nexusRunCmd = nexusCmd
           preflightStaleServe: true,
           verifyListen: true,
           ...(opts.mcp === false ? { mcpEnabled: false } : {}),
+          ...(opts.auth === false ? { noAuth: true } : {}),
           ...(opts.https ? { https: true } : {}),
           ...(resolvedPort !== undefined ? { httpPort: resolvedPort } : {}),
           ...(opts.force ? { force: true } : {}),
@@ -9156,6 +9175,7 @@ const nexusRunCmd = nexusCmd
         // it — service-manager production posture stays watch-off.
         ...((bgChild ? opts.watch === true : watchOn) ? { pwaWatch: true } : {}),
         ...(opts.mcp === false ? { mcpEnabled: false } : {}),
+        ...(opts.auth === false ? { noAuth: true } : {}),
         ...(opts.force ? { force: true } : {}),
         ...(opts.dispatch ? { dispatch: true } : {}),
         ...(opts.toolCwd ? { toolCwd: opts.toolCwd } : {}),
@@ -9187,6 +9207,7 @@ const nexusRunCmd = nexusCmd
       ...(opts.rebuild ? { rebuild: true } : {}),
       ...(watchOnTty ? { watch: true } : {}),
       ...(opts.mcp === false ? { mcpEnabled: false } : {}),
+      ...(opts.auth === false ? { noAuth: true } : {}),
     });
     process.exit(result.exitCode);
   });
@@ -9892,6 +9913,22 @@ nexusCmd
     }
   });
 
+// 휴대폰 앱 온보딩 — 링크 하나(⊕ QR)로 이 Mac 의 넥서스에 붙인다(대표 2026-09-30 · 아이폰 첫 화면 단순화).
+program
+  .command('phone')
+  .description('Connect the phone app to this Mac')
+  .command('link')
+  .description('Print a one-tap connect link (and a QR code) for the Elanous phone app')
+  .option('--simulator', 'Use the loopback address (the simulator on this Mac) instead of the tailnet address — `--local` is taken by the global remote flag')
+  .option('--android [serial]', 'Hand the link straight to a USB-connected Android phone (adb reverse + am start · the token is never printed)')
+  .option('--temp', 'Use a short-lived token instead of the owner token')
+  .option('--ttl <duration>', 'Lifetime for --temp (max 24h)', '24h')
+  .option('--no-qr', 'Do not print a QR code')
+  .action(async (opts: { simulator?: boolean; android?: boolean | string; temp?: boolean; ttl: string; qr: boolean }) => {
+    const { runPhoneLink } = await import('./cli/phone-link.js');
+    process.exitCode = await runPhoneLink({ local: opts.simulator, android: opts.android, temp: opts.temp, ttl: opts.ttl, qr: opts.qr });
+  });
+
 // ── ACP — Agent Client Protocol (claude-code, codex, ...) ──
 const tokenCmd = program
   .command('token')
@@ -10560,7 +10597,7 @@ async function main(): Promise<void> {
   // gates on config completeness — no entry-mode branch.)
   const cfg = getUserConfig();
   if (needsOnboarding(cfg)) {
-    await runOnboarding();
+    if (!await runOnboardingForCli()) return;
   }
 
   // Active-provider banner so users know WHICH model/auth is about to

package/src/instance/resolve.ts

@@ -32,6 +32,12 @@ export function prodInstanceRoot(): string {
   return normRoot(join(homedir(), '.elanous'));
 }
 
+/** Release records are machine-wide except in an explicitly selected config universe. */
+export function releaseLedgerRoot(): string {
+  const { getElanousConfigDirOverride } = require('../elanous-config-dir.js') as typeof import('../elanous-config-dir.js');
+  return getElanousConfigDirOverride() ? effectiveInstanceRoot() : prodInstanceRoot();
+}
+
 export function resolveInstance(deps: ResolveDeps = {}): InstanceResolution {
   const prodRoot = normRoot(deps.prodRoot ?? prodInstanceRoot());
   if (deps.explicitFlagRoot?.trim()) {

package/src/intake-plane/collect-telegram-saved.ts

@@ -27,6 +27,11 @@ export function readSavedCursor(root: string): number {
   try { return Number(JSON.parse(readFileSync(cursorFile(root), 'utf8')).lastId) || 0; } catch { return 0; }
 }
 
+/** When the cursor last moved (= a run last found a new saved message). Undefined before the first message. */
+export function readSavedCursorAt(root: string): string | undefined {
+  try { const at = JSON.parse(readFileSync(cursorFile(root), 'utf8')).at; return typeof at === 'string' ? at : undefined; } catch { return undefined; }
+}
+
 function writeSavedCursor(root: string, lastId: number): void {
   mkdirSync(intakeLedgerDir(root), { recursive: true });
   writeFileSync(cursorFile(root), JSON.stringify({ lastId, at: new Date().toISOString() }) + '\n');

package/src/intake-plane/digest.ts

@@ -3,10 +3,11 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { basename, join, relative } from 'node:path';
 import { loadIntakeLedger, type IntakeItem } from './items.js';
+import { readSavedCursorAt } from './collect-telegram-saved.js';
 import { intakeOutboxDir, kstDay } from './route.js';
 
 export interface DigestEntry { id: string; sources: string[]; url?: string; note?: string; noteName?: string; oneLiner?: string; axis: string }
-export interface IntakeDigest { day: string; absorbed: DigestEntry[]; goals: { fact: string; url?: string }[]; review?: { fact: string; note?: string }[]; grounding: number; release: number; manual: number }
+export interface IntakeDigest { day: string; absorbed: DigestEntry[]; goals: { fact: string; url?: string }[]; review?: { fact: string; note?: string }[]; grounding: number; release: number; manual: number; savedSilence?: { days: number; lastNewAt: string } }
 
 const AXIS_LABEL: Record<string, string> = {
   video_automation: '영상 자동화', agent_basics: '에이전트 기본', agent_applied: '에이전트 응용', unrelated: '그 밖',
@@ -36,7 +37,10 @@ function readJsonl(file: string): Record<string, unknown>[] {
 }
 
 /** `day`(KST YYYY-MM-DD)에 흡수·갈래가 끝난 항목과 그날의 산출 큐를 모은다. */
-export function buildIntakeDigest(root: string, day: string, readFile: (p: string) => string | undefined = (p) => (existsSync(p) ? readFileSync(p, 'utf8') : undefined)): IntakeDigest {
+/** Saved Messages silent for more than two days → the digest says so (a quiet 0 must not look like «nothing to do»). */
+const SAVED_SILENCE_MS = 48 * 3600_000;
+
+export function buildIntakeDigest(root: string, day: string, readFile: (p: string) => string | undefined = (p) => (existsSync(p) ? readFileSync(p, 'utf8') : undefined), now: Date = new Date()): IntakeDigest {
   const items = [...loadIntakeLedger(root).items.values()]
     .filter((i) => (i.status === 'absorbed' || i.status === 'routed') && kstDay(i.lastSeenAt) === day && i.outputs.some((o) => o.kind === 'note'));
   const absorbed = items.map((i: IntakeItem): DigestEntry => {
@@ -53,16 +57,20 @@ export function buildIntakeDigest(root: string, day: string, readFile: (p: strin
   const goals = readJsonl(join(out, 'goals', `${day}.jsonl`)).map((g) => ({ fact: String(g.fact ?? ''), ...(g.url ? { url: String(g.url) } : {}) }));
   const review = readJsonl(join(out, 'review', `${day}.jsonl`)).map((r) => ({ fact: String(r.fact ?? ''), ...(r.note ? { note: String(r.note) } : {}) }));
   const grounding = readJsonl(join(out, 'grounding.jsonl')).filter((g) => typeof g.at === 'string' && kstDay(g.at) === day).length;
+  const lastNewAt = readSavedCursorAt(root);
+  const silentMs = lastNewAt ? now.getTime() - Date.parse(lastNewAt) : NaN;
   return {
     day, absorbed, goals, review, grounding,
     release: readJsonl(join(out, 'release', `${day}.jsonl`)).length,
     manual: readJsonl(join(out, 'manual', `${day}.jsonl`)).length,
+    ...(lastNewAt && silentMs > SAVED_SILENCE_MS ? { savedSilence: { days: Math.floor(silentMs / 86_400_000), lastNewAt } } : {}),
   };
 }
 
 /** 노트 절 — 축별 묶음 · 노트 링크 · 한 줄 요약 · 골 후보. */
 export function renderDigestMarkdown(d: IntakeDigest): string {
   const L: string[] = [`## 📰 오늘의 흡수 요약 (${d.absorbed.length})`, ''];
+  if (d.savedSilence) L.push(`> ⚠️ 텔레그램 «저장된 메시지»에서 새 글을 ${d.savedSilence.days}일째 못 받았다(마지막 새 글 수집 ${kstDay(d.savedSilence.lastNewAt)}) — 저장했는데 안 들어왔다면 저장한 곳(본인 «저장된 메시지»인지)을 확인한다.`, '');
   if (!d.absorbed.length) { L.push('오늘 흡수한 것이 없다.', ''); return L.join('\n'); }
   const byAxis = new Map<string, DigestEntry[]>();
   for (const e of d.absorbed) (byAxis.get(e.axis) ?? byAxis.set(e.axis, []).get(e.axis)!).push(e);
@@ -89,6 +97,7 @@ export function renderDigestMarkdown(d: IntakeDigest): string {
 /** 텔레그램 짧은 판 — 수 · 한 줄 요약 다섯 · 골 후보 · 노트 자리. */
 export function renderDigestTelegram(d: IntakeDigest, opts: { vaultRoot?: string; notePath?: string } = {}): string {
   const L = [`📰 *${d.day} 흡수 ${d.absorbed.length}편*`];
+  if (d.savedSilence) L.push(`⚠️ 저장된 메시지 새 글 ${d.savedSilence.days}일째 0 — 저장한 곳 확인`);
   for (const e of d.absorbed.slice(0, 5)) L.push(`• ${e.oneLiner ?? e.noteName ?? e.url ?? e.id}`);
   if (d.absorbed.length > 5) L.push(`… 외 ${d.absorbed.length - 5}편`);
   if (d.goals.length) L.push('', `🔴 엘라누스에 없는 것 ${d.goals.length}건 — 골 후보`);

package/src/live/detail-switch.ts

@@ -7,7 +7,7 @@
 // 상태 = `<state>/live/detail.json` `{ scope: 'all' | '<runId>', until: <epoch ms>, by?, since }`.
 //   - 넥서스(`/v1/live/detail`)가 쓰고, 하니스·런(다른 프로세스)은 파일을 읽는다 — 프로세스 경계를 넘는 가장 단순한 관.
 //   - `until` 이 지나면 꺼진 것이다(자동 꺼짐 · 파일을 지우는 사람이 없어도 된다).
-// ⛔ 읽기 실패·깨진 파일은 «꺼짐» — 상세 관측은 비용이라 fail-closed.
+// ⛔ 읽기 실패·깨진 파일은 기본 «꺼짐» — 단 유효한 미래 ELANOUS_LIVE_DETAIL_UNTIL 은 전체 범위를 켠다.
 
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
@@ -107,10 +107,15 @@ export function selectLiveDetail(opts: DetailReadOptions = {}): LiveDetailSelect
   return { ...selection, state: parsed && parsed.until > now ? parsed : null };
 }
 
-/** 이 런에 상세 관측이 켜져 있나 — 두 뿌리에 공통인 5초 캐시. */
+/** 이 런에 상세 관측이 켜져 있나 — 파일은 5초 캐시, env 만료는 매번 확인한다. */
 export function isLiveDetailOn(runId?: string, opts: DetailReadOptions = {}): boolean {
   const now = opts.now ?? Date.now();
-  return matches(selectLiveDetail({ ...opts, now }).state, runId, now);
+  const state = selectLiveDetail({ ...opts, now }).state;
+  if (state) return matches(state, runId, now);
+  const rawUntil = process.env.ELANOUS_LIVE_DETAIL_UNTIL;
+  if (!rawUntil || !/^\d+$/.test(rawUntil)) return false;
+  const until = Number(rawUntil);
+  return Number.isSafeInteger(until) && until > now;
 }
 
 function matches(state: LiveDetailState | null, runId: string | undefined, now: number): boolean {

package/src/llm/usable-llm.ts

@@ -0,0 +1,32 @@
+import { decideProviderForConfig, type ProviderDecision } from '../llm.js';
+import { getUserConfig, type UserConfig } from '../user-config.js';
+
+export interface UsableLlm {
+  usable: boolean;
+  provider?: string;
+  via: 'login' | 'key' | 'local-server' | 'none';
+  why: string;
+}
+
+export interface UsableLlmDeps {
+  config?: UserConfig;
+  /** The same selector used to construct a runtime LLM; injectable for isolated tests. */
+  decide?: (config: UserConfig) => ProviderDecision;
+}
+
+/** Evaluate the selected route, not the union of discovered credentials or servers. */
+export function resolveUsableLlm(deps: UsableLlmDeps = {}): UsableLlm {
+  const decision = (deps.decide ?? decideProviderForConfig)(deps.config ?? getUserConfig());
+  const provider = decision.provider.replace(/^auto:/, '');
+  // Never echo an untrusted configured provider or a model/URL/credential into output.
+  const known = ['openai-codex', 'openai', 'anthropic', 'grok', 'gemini', 'openrouter', 'local'];
+  if (provider === 'auto' || decision.auth === 'none') {
+    // An explicitly selected provider stays named so callers can offer that provider's fix,
+    // not the Codex login (the auto route's default remedy).
+    const explicit = !decision.provider.startsWith('auto') && known.includes(provider);
+    return { usable: false, ...(explicit ? { provider } : {}), via: 'none', why: 'no usable LLM route selected' };
+  }
+  if (!known.includes(provider)) return { usable: false, via: 'none', why: 'no usable LLM route selected' };
+  const via = decision.auth === 'oauth' ? 'login' : decision.auth === 'apikey' ? 'key' : 'local-server';
+  return { usable: true, provider, via, why: `LLM via ${via} (${provider})` };
+}

package/src/loops/registry.ts

@@ -48,9 +48,13 @@ function graphFiles(dir: string): string[] {
   return entries.flatMap(e => e.isDirectory() ? graphFiles(join(dir, e.name)) : e.isFile() && /\.ya?ml$/.test(e.name) ? [join(dir, e.name)] : []).sort();
 }
 
+/** A wrapper cron that runs the graph itself declares its loop with a trailing `# elanous-loop=<graph_id>` comment. */
+const LOOP_MARKER = /#\s*elanous-loop=([A-Za-z0-9][\w.-]*)\s*$/;
+
 /** Match only the actual graph CLI invocation, not a filename mentioned in a shell argument. */
-export function graphJobMatches(command: string | null, file: string, root: string): boolean {
+export function graphJobMatches(command: string | null, file: string, root: string, graphId?: string): boolean {
   if (!command) return false;
+  if (graphId && command.match(LOOP_MARKER)?.[1] === graphId) return true;
   const invocation = /(?:^|&&\s*|;\s*)(?:(?:\S*\/)?(?:bun|node)\s+(?:\S*\/)?bin\/elanous\.mjs|(?:\S*\/)?elanous)\s+(?:--test(?:=\S+|\s+\S+)\s+)?graph\s+run\s+(['"]?)([^\s'";&|]+)\1(?=\s|$|[;&|])/g;
   for (const match of command.matchAll(invocation)) {
     const arg = match[2]!;
@@ -100,8 +104,17 @@ function schedules(opts: LoopRegistryOptions): ScheduleRow[] {
   } finally { db.close(); }
 }
 
+/** Where loop graphs live and where their cron line `cd`s — the same rule as the other elanous crons:
+ *  the installed package when there is one, else this checkout. Never the caller's cwd: a loop started
+ *  from a disposable worktree would schedule a cron into a directory that is about to disappear (🅣 09-29). */
+export function defaultLoopRoot(): string {
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
+  const { installedCronRoot, repoRoot } = require('../domains/schedule-registry.js') as typeof import('../domains/schedule-registry.js');
+  return installedCronRoot() ?? repoRoot();
+}
+
 export function listLoops(opts: LoopRegistryOptions = {}): LoopEntry[] {
-  const root = resolve(opts.root ?? process.cwd());
+  const root = resolve(opts.root ?? defaultLoopRoot());
   const stateRoot = opts.stateRoot ?? effectiveInstanceRoot();
   const rows = schedules(opts);
   const loops: LoopEntry[] = [];
@@ -117,7 +130,7 @@ export function listLoops(opts: LoopRegistryOptions = {}): LoopEntry[] {
     const trigger = header?.trigger && typeof header.trigger === 'object' && !Array.isArray(header.trigger) ? header.trigger as Record<string, unknown> : null;
     const declaredCron = typeof trigger?.cron === 'string' ? trigger.cron : null;
     const events = Array.isArray(trigger?.events) ? trigger.events.filter((e): e is string => typeof e === 'string') : [];
-    const matched = rows.filter(row => graphJobMatches(row.command, file, root) && row.source === 'crontab' && row.run_via === 'crontab' && row.disabled_reason !== 'vanished');
+    const matched = rows.filter(row => graphJobMatches(row.command, file, root, doc.graph_id as string) && row.source === 'crontab' && row.run_via === 'crontab' && row.disabled_reason !== 'vanished');
     if (!declaredCron && !events.length && !matched.length) continue;
     if (!/^[a-zA-Z0-9][\w.-]*$/.test(doc.graph_id)) throw new Error(`unsafe loop graph_id: ${doc.graph_id}`);
     if (loops.some(loop => loop.id === doc.graph_id)) throw new Error(`duplicate loop graph_id: ${doc.graph_id}`);
@@ -142,6 +155,15 @@ export function loopStatus(id: string, opts: LoopRegistryOptions = {}): LoopEntr
   return { ...loop, recentRuns: recent };
 }
 
+/** The crontab line a loop runs — same shape as the other elanous crons: cron starts in $HOME with a thin PATH,
+ *  so a bare `elanous graph run <relative file>` fails silently every tick (09-29 steward). */
+export function loopCronCommand(id: string, file: string, root: string, bun = process.execPath): string {
+  // Quote only when needed: the other crons (and `graphJobMatches`) use bare absolute paths.
+  const q = (value: string) => /^[\w./@+-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
+  const log = `/tmp/elanous-loop-${id.replace(/[^\w.-]/g, '_')}.log`;
+  return `cd ${q(root)} && ${q(bun)} bin/elanous.mjs graph run ${q(file)} >> ${log} 2>&1`;
+}
+
 export async function setLoopEnabled(id: string, enabled: boolean, yes = false, opts: LoopRegistryOptions = {}): Promise<unknown> {
   const loop = loopStatus(id, opts);
   const action = enabled ? 'start' : 'stop';
@@ -149,7 +171,7 @@ export async function setLoopEnabled(id: string, enabled: boolean, yes = false,
   const pending = loop.jobs.filter(job => job.enabled !== enabled);
   if (!pending.length && loop.jobs.length) return { action, id, changed: false, enabled: loop.enabled };
   const changes = loop.jobs.length ? pending.map(job => ({ action: enabled ? 'enable' : 'disable', id: job.id })) :
-    [{ action: 'create', cron: loop.trigger.cron, command: `elanous graph run ${loop.file}` }];
+    [{ action: 'create', cron: loop.trigger.cron, command: loopCronCommand(id, loop.file, resolve(opts.root ?? defaultLoopRoot())) }];
   if (!yes) return { action, id, dryRun: true, changes, note: 'Apply with --yes (crontab backup).' };
   const dispatch = opts.scheduleAction ?? (async (kind: 'create' | 'enable' | 'disable', args: Record<string, unknown>) => {
     const { dispatchScheduleManage } = await import('../domains/schedule-manage-tool.js');
@@ -170,5 +192,5 @@ export async function setLoopEnabled(id: string, enabled: boolean, yes = false,
 export async function runLoop(id: string, dryRun = false, opts: LoopRegistryOptions = {}): Promise<GraphRunState> {
   const loop = loopStatus(id, opts);
   debug.log('loops.registry', 'run', { id, dryRun });
-  return runGraph(join(resolve(opts.root ?? process.cwd()), loop.file), { dryRun, deps: { root: opts.stateRoot ?? effectiveInstanceRoot() } });
+  return runGraph(join(resolve(opts.root ?? defaultLoopRoot()), loop.file), { dryRun, deps: { root: opts.stateRoot ?? effectiveInstanceRoot() } });
 }

package/src/market/publish.ts

@@ -7,6 +7,41 @@ import { debug } from '../debug/log.js';
 import { packDirDeterministic } from './tgz.js';
 import { signIndex, verifyIndex, type MarketplaceIndex } from './signed-index.js';
 
+type IndexConnector = MarketplaceIndex['plugins'][number]['ai.elanous']['connectors'][number];
+
+function normalizeConnectors(connectors: unknown): { ok: true; value: IndexConnector[] } | { ok: false } {
+  if (!Array.isArray(connectors)) return { ok: false };
+  const value: IndexConnector[] = [];
+  const record = (item: unknown): item is Record<string, unknown> =>
+    item !== null && typeof item === 'object' && !Array.isArray(item);
+  for (const connector of connectors) {
+    if (!record(connector) || typeof connector.id !== 'string' || !connector.id) return { ok: false };
+    if (Array.isArray(connector.userConfig)) {
+      if (typeof connector.kind !== 'string' || !connector.userConfig.every((field: unknown) =>
+        record(field) && typeof field.key === 'string' && field.key.trim().length > 0 && typeof field.label === 'string' &&
+        typeof field.secret === 'boolean' && (field.env === undefined || typeof field.env === 'string'))) {
+        return { ok: false };
+      }
+      value.push(connector as IndexConnector);
+    } else if (Array.isArray(connector.fields)) {
+      if ((connector.kind !== undefined && typeof connector.kind !== 'string') || !connector.fields.every((field: unknown) =>
+        record(field) && typeof field.name === 'string' && field.name.trim().length > 0 && typeof field.secret === 'boolean' &&
+        (field.label === undefined || typeof field.label === 'string') &&
+        (field.env === undefined || typeof field.env === 'string'))) {
+        return { ok: false };
+      }
+      value.push({ id: connector.id, kind: (connector.kind ?? 'credentials') as string,
+        userConfig: connector.fields.map((field: Record<string, unknown>) => ({
+          key: field.name as string, label: (field.label ?? field.name) as string, secret: field.secret === true,
+          ...(field.env ? { env: field.env as string } : {}),
+        })) });
+    } else {
+      return { ok: false };
+    }
+  }
+  return { ok: true, value };
+}
+
 function unpackLocal(archive: Uint8Array, destination: string): void {
   const tar = gunzipSync(archive);
   const field = (part: Buffer) => part.toString('utf8').replace(/\0.*$/, '');
@@ -113,13 +148,15 @@ export function publishMarket(input: {
         skip('invalid-plugin.json'); continue;
       }
       const { category, bundle, ...metadata } = ai as MarketplaceIndex['plugins'][number]['ai.elanous'] & { category?: string; bundle?: unknown };
-      if (!Array.isArray(metadata.capabilities) || !Array.isArray(metadata.connectors) ||
+      if (!Array.isArray(metadata.capabilities) ||
           (category !== undefined && typeof category !== 'string')) {
         skip('invalid-plugin.json'); continue;
       }
       if (metadata.pricing !== undefined && metadata.pricing?.model !== 'free') {
         skip('paid-not-allowed-in-M0'); continue;
       }
+      const normalized = normalizeConnectors(metadata.connectors);
+      if (!normalized.ok) { skip('invalid-connectors'); continue; }
       const bundleItem = (item: unknown): item is string | { from: string; as: string } => typeof item === 'string' ||
         (!!item && typeof item === 'object' && !Array.isArray(item) && typeof (item as { from?: unknown }).from === 'string' &&
           typeof (item as { as?: unknown }).as === 'string');
@@ -208,7 +245,26 @@ export function publishMarket(input: {
         if (message.startsWith('bundle-conflict')) { skip('bundle-conflict'); continue; }
         throw error;
       }
-      const sha256 = createHash('sha256').update(archive).digest('hex');
+      let sha256 = createHash('sha256').update(archive).digest('hex');
+      const recorded = recordedHashes.get(JSON.stringify([manifest.name, manifest.version]));
+      if (recorded && recorded !== sha256) {
+        const existingPath = join(input.outDir, manifest.name, manifest.version, `${recorded}.tgz`);
+        let sameContent = false;
+        if (existsSync(existingPath)) {
+          try {
+            const existing = readFileSync(existingPath);
+            sameContent = createHash('sha256').update(existing).digest('hex') === recorded &&
+              gunzipSync(existing).equals(gunzipSync(archive));
+            if (sameContent) {
+              archive = existing;
+              sha256 = recorded;
+            }
+          } catch { /* An unreadable archive cannot prove immutability. */ }
+        }
+        if (!sameContent) throw new Error(`version-immutable: ${manifest.name}@${manifest.version}`);
+        debug.log('market.publish', 'reused-artifact', { name: manifest.name, version: manifest.version,
+          reason: 'same-content-different-gzip' });
+      }
       remember(manifest.name, manifest.version, sha256);
       const key = `${manifest.name}/${manifest.version}/${sha256}.tgz`;
       const source: MarketplaceIndex['plugins'][number]['source'] = input.source
@@ -218,7 +274,7 @@ export function publishMarket(input: {
         policy: { installation: 'AVAILABLE', authentication: 'ON_USE' },
         category: category ?? 'Productivity', version: manifest.version,
         description: manifest.description, artifact: { sha256, bytes: archive.length, key },
-        'ai.elanous': { ...metadata, pricing: metadata.pricing ?? { model: 'free' } },
+        'ai.elanous': { ...metadata, connectors: normalized.value, pricing: metadata.pricing ?? { model: 'free' } },
       });
       archives.push({ key, data: archive, name: dir });
       published.push({ name: manifest.name, version: manifest.version, sha256, bundled });

package/src/native-tool-catalog.ts

@@ -1142,8 +1142,8 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     kind: 'web',
     aliases: ['WebSearch', 'web_search'],
     displayName: 'WebSearch',
-    description: 'Search the public web via a configured provider (Grok live-search / Firecrawl / MCP / custom).',
-    promptSummary: '`WebSearch` (provider-backed web search — Grok live-search by default; pair with WebFetch for full bodies)',
+    description: 'Search the public web via a configured provider (Grok live-search / Firecrawl / MCP / custom); when no key is available, fall back to keyless DuckDuckGo.',
+    promptSummary: '`WebSearch` (provider-backed web search — Grok live-search by default; when no key is available, fall back to keyless DuckDuckGo; pair with WebFetch for full bodies)',
     host: ['skill'],
     safety: ['network', 'read-only'],
     supportsParallel: true,