elanous 0.2.41 → 0.2.43

package/src/harness/skill-select.ts

@@ -63,7 +63,7 @@ export async function selectHarnessSkill(
   try { index = (deps.index ?? getSkillIndex()) as SkillIndexEntry[]; } catch { return null; }
   if (!index.length) return null;
   const invoke: InvokeFn = deps.invoke ?? ((obj, skill) => invokeResearch(obj, { skill }).then((r) => ({ ok: r.ok, output: r.output })));
-  const allowlist = deps.allowlist ?? HARNESS_EXEC_ALLOWLIST;   // S2 — config 확장 주입(기본 3개·무회귀)
+  const allowlist = deps.allowlist ?? HARNESS_EXEC_ALLOWLIST;   // S2 — config 확장 주입(기본 승인 목록·무회귀)
 
   // 1) luna 의미매칭(주경로) — allowlist ∩ luna픽 을 격리 실행. null=luna 실패(→fallback)·[]=관련없음(fallback 도 시도).
   let picked: string[] = [];

package/src/hooks/error-report-cloud.ts

@@ -0,0 +1,101 @@
+import { Compute } from 'google-auth-library';
+import type { ReceivedReport } from './error-report.js';
+
+const GCS_SCOPE = 'https://www.googleapis.com/auth/devstorage.read_write';
+const PUBSUB_SCOPE = 'https://www.googleapis.com/auth/pubsub';
+const DEFAULT_PROJECT_ID = 'pearlplaygroud';
+const DEFAULT_BUCKET = 'elanous-error-reports-pearl';
+const DEFAULT_TOPIC = 'error-reports';
+
+export type ErrorReportCloudStage = 'store' | 'publish';
+
+export class ErrorReportCloudError extends Error {
+  constructor(readonly stage: ErrorReportCloudStage, cause?: unknown) {
+    super(`error report cloud ${stage} failed`, { cause });
+    this.name = 'ErrorReportCloudError';
+  }
+}
+
+export interface GoogleRequestOptions {
+  url: string;
+  method: 'POST';
+  params?: Record<string, string | number>;
+  data: string | Record<string, unknown>;
+  headers?: Record<string, string>;
+  timeout?: number;
+}
+
+export interface CloudErrorReportPublisherOptions {
+  projectId?: string;
+  bucket?: string;
+  topic?: string;
+  request?: (options: GoogleRequestOptions) => Promise<unknown>;
+}
+
+function reportObjectName(item: ReceivedReport): string {
+  const date = new Date(item.receivedAt);
+  if (!Number.isFinite(date.getTime())) throw new Error('receivedAt must be a valid date');
+  const year = String(date.getUTCFullYear());
+  const month = String(date.getUTCMonth() + 1).padStart(2, '0');
+  const day = String(date.getUTCDate()).padStart(2, '0');
+  return `${year}/${month}/${day}/${item.reportId}.json`;
+}
+
+function statusCode(error: unknown): number | undefined {
+  if (!error || typeof error !== 'object') return undefined;
+  const response = 'response' in error ? error.response : undefined;
+  return response && typeof response === 'object' && 'status' in response && typeof response.status === 'number'
+    ? response.status : undefined;
+}
+
+/** Writes the validated original to private GCS, then publishes the same receipt for independent consumers. */
+export function createCloudErrorReportPublisher(options: CloudErrorReportPublisherOptions = {}): (item: ReceivedReport) => Promise<void> {
+  const projectId = options.projectId ?? process.env.ELANOUS_ERROR_REPORT_GCP_PROJECT ?? DEFAULT_PROJECT_ID;
+  const bucket = options.bucket ?? process.env.ELANOUS_ERROR_REPORT_GCS_BUCKET ?? DEFAULT_BUCKET;
+  const topic = options.topic ?? process.env.ELANOUS_ERROR_REPORT_PUBSUB_TOPIC ?? DEFAULT_TOPIC;
+  let authRequest: ((request: GoogleRequestOptions) => Promise<unknown>) | undefined;
+  const request = options.request ?? (async (requestOptions: GoogleRequestOptions) => {
+    if (!authRequest) {
+      // Compute obtains short-lived credentials from the VM metadata server;
+      // it never falls back to a GOOGLE_APPLICATION_CREDENTIALS key file.
+      const client = new Compute({ scopes: [GCS_SCOPE, PUBSUB_SCOPE] });
+      authRequest = (value) => client.request(value);
+    }
+    return authRequest(requestOptions);
+  });
+
+  return async (item) => {
+    const name = reportObjectName(item);
+    const body = JSON.stringify(item);
+    try {
+      await request({
+        url: `https://storage.googleapis.com/upload/storage/v1/b/${encodeURIComponent(bucket)}/o`,
+        method: 'POST',
+        params: { uploadType: 'media', name, ifGenerationMatch: 0 },
+        data: body,
+        headers: { 'content-type': 'application/json' },
+        timeout: 10_000,
+      });
+    } catch (error) {
+      // A retry after a successful upload but lost response sees 412; keep the
+      // immutable original and proceed to publish the receipt.
+      if (statusCode(error) !== 412) throw new ErrorReportCloudError('store', error);
+    }
+
+    try {
+      await request({
+        url: `https://pubsub.googleapis.com/v1/projects/${encodeURIComponent(projectId)}/topics/${encodeURIComponent(topic)}:publish`,
+        method: 'POST',
+        data: {
+          messages: [{
+            data: Buffer.from(body, 'utf8').toString('base64'),
+            attributes: { reportId: item.reportId, dedupe: item.dedupe, schemaVersion: '1' },
+          }],
+        },
+        timeout: 10_000,
+      });
+    } catch (error) {
+      throw new ErrorReportCloudError('publish', error);
+    }
+  };
+}

package/src/hooks/receiver.ts

@@ -7,6 +7,7 @@ import { HookQueue, type QueuedHook } from './queue.js';
 import { recordGithubShadow, type ShadowReviewResult } from './github-shadow.js';
 import { toExternalTask, verifyWebhook, type HookProvider } from './providers.js';
 import { drainReports, handleReportPost, ReportLimiter, ReportQueue, type ReceivedReport } from './error-report.js';
+import { createCloudErrorReportPublisher } from './error-report-cloud.js';
 import { ConsultLimiter, ConsultQueue, drainConsults, handleConsultPost, type QueuedConsult } from './consult-intake.js';
 import { effectiveInstanceRoot } from '../instance/resolve.js';
 
@@ -28,6 +29,9 @@ export interface HookReceiverOptions {
   wakeSeat?: HookWake;
   /** ER2 — forward one queued error report to the Primary; default = POST /v1/reports/ingest over the tailnet. */
   forwardReport?: (item: ReceivedReport) => Promise<boolean>;
+  /** ER3 — persist and fan out through GCS + Pub/Sub before using the legacy Primary path. */
+  publishCloudReport?: (item: ReceivedReport) => Promise<void>;
+  cloudReportsEnabled?: boolean;
   /** CS1 — forward a queued consultation to the Primary's consult ledger. */
   forwardConsult?: (item: QueuedConsult) => Promise<boolean>;
   /** CS1 — the public consult route is a write path from the open internet, so it stays closed (404) until
@@ -99,6 +103,9 @@ export function startHookReceiver(options: HookReceiverOptions): { url: string;
   const reportQueue = new ReportQueue(options.root ?? effectiveInstanceRoot(), (event, data) => debug.log('hooks.reports', event, data));
   const reportLimiter = new ReportLimiter(options.now ?? Date.now);
   const forwardReport = options.forwardReport ?? forwardReportToPrimary;
+  const publishCloudReport = options.publishCloudReport ?? createCloudErrorReportPublisher();
+  const cloudReportsEnabled = options.cloudReportsEnabled ?? process.env.ELANOUS_ERROR_REPORT_CLOUD_ENABLED === 'true';
+  debug.log('error-collect', cloudReportsEnabled ? 'cloud-enabled' : 'cloud-disabled', {});
   const consultEnabled = options.consultEnabled ?? consultRouteEnabled();
   debug.log('hooks.consult', consultEnabled ? 'route-open' : 'route-closed', {});
   const consultQueue = new ConsultQueue(options.root ?? effectiveInstanceRoot(), (_event, data) =>
@@ -128,8 +135,28 @@ export function startHookReceiver(options: HookReceiverOptions): { url: string;
     if (stopped || reportsDraining || Date.now() < reportNextAt) return;
     reportsDraining = true;
     try {
-      const result = await drainReports(reportQueue, forwardReport, (options.now ?? Date.now)());
-      if (result.delivered) debug.log('hooks.reports', 'forwarded', { delivered: result.delivered });
+      let cloudDelivered = 0;
+      let primaryFallbackDelivered = 0;
+      const deliver = async (item: ReceivedReport): Promise<boolean> => {
+        if (cloudReportsEnabled) {
+          try {
+            await publishCloudReport(item);
+            cloudDelivered++;
+            debug.log('error-collect', 'published', { reportId: item.reportId });
+            return true;
+          } catch (error) {
+            const stage = error && typeof error === 'object' && 'stage' in error
+              && (error.stage === 'store' || error.stage === 'publish') ? error.stage : 'unknown';
+            debug.log('error-collect', 'publish-failed', { reportId: item.reportId, stage });
+          }
+        }
+        const delivered = await forwardReport(item);
+        if (delivered) primaryFallbackDelivered++;
+        return delivered;
+      };
+      const result = await drainReports(reportQueue, deliver, (options.now ?? Date.now)());
+      if (primaryFallbackDelivered) debug.log('hooks.reports', 'forwarded', { delivered: primaryFallbackDelivered });
+      if (cloudDelivered) debug.log('error-collect', 'drained', { delivered: cloudDelivered });
       if (result.failed) {
         reportFailures++;
         reportNextAt = Date.now() + Math.min(300_000, Math.max(1, options.retryBaseMs ?? 1000) * 2 ** Math.min(reportFailures - 1, 20));

package/src/index.ts

@@ -27,6 +27,7 @@ import { isOldDoorInternalCall, refuseOldDoor } from './self-dev/old-door.js';
 import { collectCommandEntrances, renderCommandEntrances } from './self-dev/entrance-inventory.js';
 import { isGoalAuthorFileName } from './self-implement/goal-document.js';
 import { DEV_PIPELINE_SINK_SURFACE } from './self-implement/self-cli-sink-surface.js';
+import { DEFAULT_TUI_TEST_READY_TIMEOUT_MS } from './self-implement/elanous-tui-spawn.js';
 
 import { applyTestStateDirFlagFromArgv } from './cli/test-state-dir-flag.js';
 import { applyTestFlagFromArgv, observeTestFlagOwnership, uncoveredTestFlagPaths, staleTestFlagPaths } from './cli/test-flag.js';
@@ -97,6 +98,7 @@ function selectedIndexNextTuiRoot(args: readonly string[]): '__tui_next__' | und
 const isCliEntry = import.meta.main || /[\\/]bin[\\/]elanous\.mjs$/.test(process.argv[1] ?? '');
 const INDEX_FAST_ROOT = selectedIndexFastRoot(process.argv.slice(2))
   ?? (isCliEntry ? selectedIndexNextTuiRoot(process.argv.slice(2)) : undefined);
+const shouldRegisterSetupCommand = !INDEX_FAST_ROOT || INDEX_FAST_ROOT === 'setup';
 // Keep the historical index exports without forcing the agent engine into
 // unrelated CLI commands at module load time.
 export const runChatTurnCli: typeof import('./cli/agent-cli.js').runChatTurnCli =
@@ -153,6 +155,10 @@ const registerPrivateLedgerCommands = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== '_
 const registerKnowCommand = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== 'know'
   ? (() => undefined)
   : (require('./cli/know-cli.js') as typeof import('./cli/know-cli.js')).registerKnowCommand) as typeof import('./cli/know-cli.js').registerKnowCommand;
+// LIFE-KINDS(0.2.43) — 생애 종류·끝의 증거·반복 실행 시리즈의 생산 진입점(`eln life …`).
+const registerLifeCommands = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== '__full__'
+  ? (() => undefined)
+  : (require('./life/life-cli.js') as typeof import('./life/life-cli.js')).registerLifeCommands) as typeof import('./life/life-cli.js').registerLifeCommands;
 const registerSeatRequestsCommands = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== 'seat'
   ? (() => undefined)
   : (require('./cli/seat-requests-cli.js') as typeof import('./cli/seat-requests-cli.js')).registerSeatRequestsCommands) as typeof import('./cli/seat-requests-cli.js').registerSeatRequestsCommands;
@@ -278,6 +284,9 @@ const registerDoctorCommand = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== 'doctor'
 const registerProviderCommands = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== 'provider'
   ? (() => undefined)
   : (require('./cli/provider-cli.js') as typeof import('./cli/provider-cli.js')).registerProviderCommands) as typeof import('./cli/provider-cli.js').registerProviderCommands;
+const registerCatalogCommands = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== 'catalog'
+  ? (() => undefined)
+  : (require('./cli/catalog-cli.js') as typeof import('./cli/catalog-cli.js')).registerCatalogCommands) as typeof import('./cli/catalog-cli.js').registerCatalogCommands;
 const registerAgentCommands = (INDEX_FAST_ROOT
   ? (() => undefined)
   : (require('./cli/agent-cli.js') as typeof import('./cli/agent-cli.js')).registerAgentCommands) as typeof import('./cli/agent-cli.js').registerAgentCommands;
@@ -287,9 +296,9 @@ const registerControlCommands = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== 'control
 const registerHooksCommands = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== '__full__'
   ? (() => undefined)
   : (require('./cli/hooks-cli.js') as typeof import('./cli/hooks-cli.js')).registerHooksCommands) as typeof import('./cli/hooks-cli.js').registerHooksCommands;
-const registerSetupCommand = (INDEX_FAST_ROOT === '__tui_next__'
-  ? (() => undefined)
-  : (require('./cli/setup-cli.js') as typeof import('./cli/setup-cli.js')).registerSetupCommand) as typeof import('./cli/setup-cli.js').registerSetupCommand;
+const registerSetupCommand = (shouldRegisterSetupCommand
+  ? (require('./cli/setup-cli.js') as typeof import('./cli/setup-cli.js')).registerSetupCommand
+  : (() => undefined)) as typeof import('./cli/setup-cli.js').registerSetupCommand;
 const registerStartCommand = (INDEX_FAST_ROOT && INDEX_FAST_ROOT !== 'start'
   ? (() => undefined)
   : (require('./cli/start-cli.js') as typeof import('./cli/start-cli.js')).registerStartCommand) as typeof import('./cli/start-cli.js').registerStartCommand;
@@ -330,6 +339,7 @@ import { filterCliRootHelp } from './maturity/cli-maturity.js';
 import type { AdPipelinePlan, AdPipelineResult } from './ad-pipeline/run.js';
 import type { AcpPermissionApprover } from './acp/client.js';
 import { runGitCommand } from './git-fs/runner.js';
+import { loadWarmReuseEvidenceByConsumer } from './task-orchestrator/surfaces/warm-reuse-evidence.js';
 import { debug, redactSecretText, redactSecrets } from './debug/log.js';
 import type { HarnessAskSayChildLlmOptions, HarnessAskSayOptions, HarnessPlanOptions } from './harness/harness-cli-command.js';
 import { CliUserError, formatCliUserError, isCliUserError } from './cli/cli-user-error.js';
@@ -1121,6 +1131,22 @@ async function runDevSayFromWords(
 
 registerPtyTakeoverCommands(program);
 registerPtyRecordCommand(program.commands.find((command) => command.name() === 'pty')!);
+program.command('tui')
+  .description('test-universe TUI helpers')
+  .command('test')
+  .description('Prepare latest-main isolated test universe and return a held TUI PTY, runId, and snapshot')
+  .option('--ready-timeout-ms <ms>', 'single held-PTY readiness deadline', String(DEFAULT_TUI_TEST_READY_TIMEOUT_MS))
+  .option('--with-pwa-build', 'install/build PWA when its static export is missing')
+  .action(async (opts: { readyTimeoutMs?: string; withPwaBuild?: boolean }) => {
+    try {
+      const { runTuiTestUniverse } = await import('./cli/tui-test-cli.js');
+      const result = await runTuiTestUniverse({ readyTimeoutMs: Number(opts.readyTimeoutMs), withPwaBuild: opts.withPwaBuild });
+      process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+    } catch (error) {
+      process.stderr.write(`tui test: ${error instanceof Error ? error.message : String(error)}\n`);
+      process.exitCode = 1;
+    }
+  });
 // Keep the public PR help slot but defer its large CI/landing import graph
 // until the PR command is actually selected (including direct Commander use).
 const prCommandOrder = program.commands.length;
@@ -1130,6 +1156,9 @@ const prShell = program.command('pr').description('PR landing commands');
 prShell.command('supersede-drafts').description('확인된 병합 PR의 명시 Supersedes 같은 칸 draft만 정리')
   .requiredOption('--pr <number>', '병합 PR 번호')
   .option('--cwd <path>', '저장소 경로');
+prShell.command('lineage <pr>').description('PR 계보의 관측 사실만 JSON으로 읽기 (첫 조각 · 닫기 판정 없음)')
+  .requiredOption('--json', 'JSON 관측 결과 출력')
+  .option('--cwd <path>', '저장소 경로');
 prShell.command('census').description('열린 PR 전체·골 문서만·2일 무커밋 draft·미닫힌 superseded 집계').option('--cwd <path>', '저장소 경로');
 prShell.command('open-guard').description('새 PR 전에 같은 파일 OPEN PR·골 문서만·자리별 상한 검사')
   .option('--cwd <path>', '작업 트리 경로').option('--base <ref>', '비교 base ref', 'origin/main')
@@ -1252,6 +1281,7 @@ registerLiveCommands(program);
 registerResearchCommand(program);
 registerReleaseCommands(program);
 registerKnowCommand(program);
+registerLifeCommands(program);
 registerNotifyCommand(program);
 registerAwayCommand(program);
 registerFreezeCommands(program);
@@ -1590,7 +1620,7 @@ registerDoctorCommand(program);
 registerControlCommands(program);
 registerHooksCommands(program);
 registerSetupCommand(program);
-if (INDEX_FAST_ROOT !== '__tui_next__') {
+if (shouldRegisterSetupCommand) {
   program.commands.find(command => command.name() === 'setup')!
     .option('--terminal', 'Run the terminal onboarding wizard')
     .hook('preAction', async (_command, action) => {
@@ -1701,6 +1731,27 @@ linearCmd.command('sync').requiredOption('--team <key>', 'Linear team key')
     try { process.exitCode = await runLinearSync(opts); }
     catch (error) { console.error(`connector linear sync: ${(error as Error).message}`); process.exitCode = 1; }
   });
+linearCmd.command('daily-summary').description('Post one public-safe daily progress summary per referenced Linear issue')
+  .option('--version <version>', 'Release checklist version (defaults to the current development version)')
+  .option('--send', 'Post comments; without this flag only print the planned summaries')
+  .option('--json', 'JSON output')
+  .action(async (opts: { send?: boolean; json?: boolean; version?: string }) => {
+    const { runLinearDailyProgress } = await import('./cli/connector-cli.js');
+    try { process.exitCode = await runLinearDailyProgress(opts); }
+    catch (error) { console.error(`connector linear daily-summary: ${(error as Error).message}`); process.exitCode = 1; }
+  });
+linearCmd.command('secretary').description('Ground a request and create a Linear parent with 3–5 assigned subtasks')
+  .argument('<request>', 'Request to break down; quote multi-word text, e.g. "11-04 demo preparation"')
+  .action(async (request: string) => {
+    const { runLinearSecretaryRequest } = await import('./intake-plane/linear-secretary-runtime.js');
+    try {
+      const result = await runLinearSecretaryRequest(request);
+      console.log(result.replyCard);
+    } catch (error) {
+      console.error(`connector linear secretary: ${(error as Error).message}`);
+      process.exitCode = 1;
+    }
+  });
 linearCmd.command('receive').description('Internal signed webhook receiver; read raw payload from stdin')
   .requiredOption('--signature <hex>', 'Linear-Signature header')
   .requiredOption('--delivery <id>', 'Linear-Delivery header')
@@ -5630,7 +5681,7 @@ const selfOrchestrateCmd = selfCmd
           catch (e) { ui.error(`--pod-source: ${e instanceof Error ? e.message : String(e)}`); process.exit(2); }
           const outDir = join(elanousStateRoot(), 'pod-sources', runId);
           const baseRef = opts.base ?? 'origin/HEAD';
-          try { podSource = resolvePodSource(parsed, { base: baseRef, outDir }); }
+          try { podSource = resolvePodSource(parsed, { base: baseRef, outDir, mirrorHead: image.imageCommit }); }
           catch (e) { ui.error(`--pod-source: ${e instanceof Error ? e.message : String(e)}`); process.exit(2); }
           debug.log('self-implement.pod', 'source', {
             kind: podSource.kind,
@@ -5642,7 +5693,17 @@ const selfOrchestrateCmd = selfCmd
         if (childFlags.childLlmProvider?.trim()) debug.log('self-implement.pod', 'child-provider-named', { provider: childFlags.childLlmProvider.trim(), model: childFlags.childLlmModel ?? null, podProvider });
         // BEDROCK-POD-PROVIDER-DROP — provider·account 는 한 곳(podLaunchProviderOptions)에서 — 손 나열이 bedrock 을 떨궈 codex(team)로 돌았다(10-11).
         const podProviderOptions = (await import('./task-orchestrator/surfaces/pod-child-providers.js')).podLaunchProviderOptions(podProvider, { explicitPodAccount, grokApiKeyOptIn });
-        const podBase = { hostSupervised: opts.supervise === true, ...podChildLlm, ...(remoteOnlyPool ? { imageCommit: image.imageCommit } : {}), ...podProviderOptions, ...(accountBroker ? { accountBroker, rotationAccounts } : {}), passEnv, ...(pool ? { pool } : {}), ...((opts as { podSkillEnv?: boolean }).podSkillEnv ? { skillEnv: true } : {}), ...(podSource ? { source: podSource } : {}), ...(repairBaseHead && podSource?.kind === 'pr' ? { repairCommitOnly: { pr: podSource.number, baseHead: repairBaseHead } } : {}) };
+        const warmReuseEvidence = () => {
+          const sourceRef = opts.base ?? 'origin/HEAD';
+          const source = runGitCommand(process.cwd(), ['rev-parse', '--verify', '--quiet', '--end-of-options', `${sourceRef}^{commit}`], { encoding: 'utf8', timeout: 5_000 });
+          const main = runGitCommand(process.cwd(), ['rev-parse', '--verify', '--quiet', '--end-of-options', 'refs/remotes/origin/main^{commit}'], { encoding: 'utf8', timeout: 5_000 });
+          const headSha = source.status === 0 ? source.stdout.trim() : '';
+          const mainSha = main.status === 0 ? main.stdout.trim() : '';
+          const identity = /^[a-f0-9]{40}$/i.test(headSha) && /^[a-f0-9]{40}$/i.test(mainSha)
+            ? { head: headSha, main: mainSha } : undefined;
+          return loadWarmReuseEvidenceByConsumer(identity);
+        };
+        const podBase = { hostSupervised: opts.supervise === true, ...podChildLlm, ...(remoteOnlyPool ? { imageCommit: image.imageCommit } : {}), ...podProviderOptions, ...(accountBroker ? { accountBroker, rotationAccounts } : {}), passEnv, warmReuseConfig: () => getUserConfig().pod?.warmReuse, warmReuseEvidence, ...(pool ? { pool } : {}), ...((opts as { podSkillEnv?: boolean }).podSkillEnv ? { skillEnv: true } : {}), ...(podSource ? { source: podSource } : {}), ...(repairBaseHead && podSource?.kind === 'pr' ? { repairCommitOnly: { pr: podSource.number, baseHead: repairBaseHead } } : {}) };
         if (benchArms) {
           const { benchPodSpawn } = await import('./task-orchestrator/surfaces/self-implement-pod.js');
           podSpawn = benchPodSpawn(benchArms, podBase);
@@ -6904,6 +6965,7 @@ registerFleetCommands(program);
 
 // ── ops (운영 관측 — 지금 뭐 도나·이상 없나·상태 전이) ──
 registerOpsCommands(program);
+registerCatalogCommands(program);
 registerOutputsCommands(program);
 
 registerPublishCommands(program);
@@ -6938,6 +7000,21 @@ const agentCmd = program
   .alias('codex')
   .description(`Agent-mission CLI — 외부 에이전트 backend(${agentBackendHelpList}) 미션·리뷰 워치·셋업. \`codex\` 는 deprecated alias(하위호환).`);
 
+let agentMissionCliDepsForTesting: Partial<import('./agent-mission/mission-cli.js').MissionCliDeps> | undefined;
+let agentMissionLogSinkForTesting: ((surface: string) => Promise<boolean>) | undefined;
+/** 실제 agent-mission mission 진입점의 탐지·실행 순서를 검증한다. */
+export function setAgentMissionCliDepsForTesting(
+  deps: Partial<import('./agent-mission/mission-cli.js').MissionCliDeps> | undefined,
+): void {
+  agentMissionCliDepsForTesting = deps;
+}
+/** 진입점 회귀 테스트에서 logs.db 쓰기를 차단한다. */
+export function setAgentMissionLogSinkForTesting(
+  register: ((surface: string) => Promise<boolean>) | undefined,
+): void {
+  agentMissionLogSinkForTesting = register;
+}
+
 // ★ 제1원칙 관측 — agent-mission 전 서브커맨드에 logs.db 싱크를 중앙 배선(preAction 훅)하고, 레거시
 //   `codex` alias 진입이면 브레드크럼(명명 중립화 이행률 추적 → alias 제거 안전시점 판정 근거).
 //   • 균일 커버리지: 훅은 mission/review-*/setup/models/config-migrate 모든 액션 앞에 1회 실행 →
@@ -6955,8 +7032,11 @@ const AGENT_MISSION_SURFACE_BY_SUB: Record<string, string> = {
 agentCmd.hook('preAction', async (_thisCommand, actionCommand) => {
   const surface = AGENT_MISSION_SURFACE_BY_SUB[actionCommand.name()] ?? 'agent-mission';
   try {
-    const { registerStandaloneLogSink } = await import('./domains/standalone-log-sink.js');
-    await registerStandaloneLogSink(surface);
+    if (agentMissionLogSinkForTesting) await agentMissionLogSinkForTesting(surface);
+    else {
+      const { registerStandaloneLogSink } = await import('./domains/standalone-log-sink.js');
+      await registerStandaloneLogSink(surface);
+    }
   } catch { /* fail-open */ }
   try {
     const { isLegacyCodexInvocation, AGENT_ALIAS_LOG_CATEGORY } = await import('./agent-mission/legacy-alias.js');
@@ -6972,6 +7052,37 @@ agentCmd.hook('preAction', async (_thisCommand, actionCommand) => {
   } catch { /* fail-soft — 관측 실패가 명령 실행을 막지 않음 */ }
 });
 
+agentCmd.command('mirror')
+  .description('Codex 주인 호스트의 refresh 없는 접근 미러')
+  .command('push <host>')
+  .description('현재 주인 호스트의 사용 가능한 Codex 계정들을 원격 CLI 미러로 보낸다')
+  .action(async (host: string) => {
+    try {
+      const [{ getUserConfig }, { hqFenceDecision }, parentHost, pod, auth, accountsStore] = await Promise.all([
+        import('./user-config.js'), import('./hq/hq.js'), import('./task-agent/parent-host.js'),
+        import('./task-orchestrator/surfaces/self-implement-pod.js'), import('./oauth/store.js'), import('./oauth/codex-account-store.js'),
+      ]);
+      const { isCodexTokenOwnerHost } = await import('./oauth/codex-owner-mirror.js');
+      if (!isCodexTokenOwnerHost(getUserConfig())) throw new Error('Codex 토큰 주인 호스트에서만 mirror push 를 실행할 수 있다');
+      if (!hqFenceDecision('ledger-cli').run) throw new Error('HQ 주인 임대가 없어 Codex mirror push 를 거부한다');
+      const target = parentHost.resolveParentHost({ host, cwd: process.cwd() }, { ...process.env, ELANOUS_TA_PARENT_HOST: undefined });
+      if (!target) throw new Error('잘못된 원격 호스트 이름');
+      const accounts = accountsStore.listCodexAccountsInStore();
+      if (!accounts.length) throw new Error('주인 Codex 계정이 없다');
+      if (accounts.length > 16) throw new Error('Codex 계정이 16개를 넘어 미러를 안전하게 교체할 수 없다');
+      const mirrors: Array<{ account: string; elanousAuth: string; codexAuth: string }> = [];
+      for (const account of accounts) {
+        const credential = pod.hostCredentials(account.name, auth.authStorePath(), () => '', { requireExplicitChatgptAuthMode: true });
+        mirrors.push({ account: account.name, elanousAuth: credential.elanousAuth, codexAuth: credential.codexAuth });
+      }
+      parentHost.installRemoteCodexCliMirror(target, mirrors);
+      console.log(`Codex 접근 미러 설치 완료 · host=${target.host} · accounts=${mirrors.length} · refresh=미포함`);
+    } catch (error) {
+      console.error(`codex mirror push 실패: ${error instanceof Error ? error.message : String(error)}`);
+      process.exitCode = 1;
+    }
+  });
+
 registerCapabilitiesCommand(agentCmd);
 registerSupervisorMetricsCommand(agentCmd);
 
@@ -7068,9 +7179,11 @@ agentCmd
   .option('--screens <dir>', '스크린 캡처 디렉토리')
   .option('--backend <id>', `외부 에이전트 backend (${agentBackendHelpList}). 각 CLI auto-approve 모드로 PTY 구동. 미등록 지정 시 명시 에러(조용한 codex 폴백 없음·애그노스틱)`)
   .option('--chain <backends>', '한 미션의 backend 사슬 (예: codex,claude,elanous)')
+  .option('--duo', 'Codex와 Claude Code를 같은 과제로 병렬 실행하고 에이전트별 결과와 요약을 출력')
   .option('--plugin <name@market>', '에이전트 화면 안에서 플러그인을 설치하고 그 스킬로 미션 실행 (codex/claude)')
   .addOption(new Option('--resources <mode>', '미션 전 자원 판단 사다리 (on|off, 기본 on)').choices(['on', 'off']).default('on'))
   .option('--headless', 'Claude 구독 CLI를 비대화형 stream-json 모드로 실행 (claude backend 전용)')
+  .option('--follow-up <prompt>', '같은 Claude/Codex CLI 세션을 재개해 두 번째 사용자 턴을 보냄 (비대화형 선택 경로)')
   .action(async (textParts: string[], opts: Record<string, any>) => {
     // 구독 모드 보장 — 브레인(streamLLM)·codex 둘 다 ChatGPT 구독으로 (API 과금 회피).
     delete process.env.OPENAI_API_KEY;
@@ -7078,6 +7191,7 @@ agentCmd
     // ★ U4b — 액션 글루(backend 검증·mission-file/text·evidence·spec 빌드·통일 진입점 실행)는
     //   runAgentMissionCliCommand(테스트 가능 seam)로 추출. 액션은 I/O(print/exit)만 담당.
     const { resolveBackend } = await import('./agent-mission/driver.js');
+    const { detectAgentCli, prepareAgentCli } = await import('./agent-mission/tool-install.js');
     const { runAgentMissionCliCommand } = await import('./agent-mission/mission-cli.js');
     const controller = new AbortController();
     const onSigint = (): void => { controller.abort(); };
@@ -7085,12 +7199,26 @@ agentCmd
     let outcome: Awaited<ReturnType<typeof runAgentMissionCliCommand>>;
     try {
       outcome = await runAgentMissionCliCommand(textParts, opts as import('./agent-mission/mission-cli.js').MissionCliOpts,
-        { resolveBackend, signal: controller.signal });
+        { resolveBackend, detectAgentCli, onStatus: (line) => console.error(`[agent-mission] ${line}`), signal: controller.signal,
+          prepareAgentCli: (agent) => prepareAgentCli(agent, {
+            onStatus: (line) => console.error(`[agent-mission] ${line}`),
+            confirmInstall: async (prompt) => {
+              if (!process.stdin.isTTY || !process.stderr.isTTY) {
+                console.error('[agent-mission] 설치 확인은 대화형 터미널에서만 받을 수 있습니다.');
+                return false;
+              }
+              const { createInterface } = await import('node:readline/promises');
+              const readline = createInterface({ input: process.stdin, output: process.stderr });
+              try { return /^(?:y|yes|예)$/i.test((await readline.question(`${prompt} [y/N] `)).trim()); }
+              finally { readline.close(); }
+            },
+          }),
+          ...agentMissionCliDepsForTesting });
     } finally {
       process.removeListener('SIGINT', onSigint);
     }
     if (!outcome.ok) { console.error(`❌ ${outcome.message}`); process.exit(outcome.exitCode); }
-    await writeStdoutJson(JSON.stringify(outcome.result, null, 2) + '\n');
+    await writeStdoutJson(JSON.stringify(outcome.duo ?? outcome.result, null, 2) + '\n');
     process.exit(outcome.exitCode);
   });
 
@@ -7707,7 +7835,7 @@ const selfDevCmd = program
   .option('--implement', 'self: headless implementation chat turn(--new·--tools·--goal-loop·interactive dispatch)')
   .option('--elanous', 'self: 격리 bare elanous TUI child를 LLM 제어 루프로 목표까지 구동')
   .option('--hold', 'elanous: brain 없이 띄우고 elanous pty 로 밖에서 몬다(--elanous 전용·--goal과 동시 사용 불가)')
-  .option('--ready-timeout-ms <ms>', 'elanous hold: PTY readiness 대기 상한(ms·양의 정수·기본 30000)')
+  .option('--ready-timeout-ms <ms>', `elanous hold: PTY readiness 대기 상한(ms·양의 정수·기본 ${DEFAULT_TUI_TEST_READY_TIMEOUT_MS})`)
   .option('-g, --goal <goal>', 'elanous 또는 셸 drive: child가 달성할 목표(--elanous 또는 <command> 또는 --attach와 함께)')
   .option('-n, --max-steps <n>', 'elanous 또는 셸 drive: 최대 제어 스텝(기본 30)')
   .option('-p, --poll-ms <ms>', 'elanous 또는 셸 drive: 제어 스텝 간 폴 간격(ms·0 허용·기본 800)')
@@ -8780,6 +8908,15 @@ missionCmd
     persistMissionOutcome(setMissionMode(cfg.llm.missionRouting, mode));
   });
 
+// Stateless shell bridge for Codex/Claude agent missions. State is scoped to
+// the active Elanous instance; replies are persisted and mirrored to logs.db.
+if (!INDEX_FAST_ROOT) {
+  const { registerMissionOutCommand } = require('./agent-mission/mission-out.js') as typeof import('./agent-mission/mission-out.js');
+  registerMissionOutCommand(program, {
+    emit: (event) => debug.log('mission.reply', 'reply', event),
+  });
+}
+
 registerTasksCommands(program);
 registerBriefCommands(program);
 registerLabelsCommands(program);
@@ -8815,7 +8952,7 @@ program
       return;
     }
     const cfg = reloadUserConfig();
-    await (await import('./cli/agent-cli.js')).runChatTurnCli({
+    await runChatTurnCli({
       cfg,
       userText: parts.join(' '),
       explicitSessionId: opts.session,
@@ -12678,7 +12815,16 @@ async function main(): Promise<void> {
       if (await runWebFirstSetup({ config: cfg, startedAt: firstRunStartedAt, startIfMissing: false }) === 'link-shown') return;
     }
     const { runFirstRun } = await import('./onboarding/first-run.js');
-    if ((await runFirstRun({ config: cfg })).outcome !== 'ready') return;
+    if (process.stdin.isTTY === true) {
+      const setupIO = (await import('./onboarding.js')).realIO();
+      try {
+        const result = await runFirstRun({ config: cfg, setupWhenNoProvider: async (config) => {
+          const { runFirstRunProviderSetup } = await import('./cli/setup-keys.js');
+          return runFirstRunProviderSetup(setupIO, { config });
+        } });
+        if (result.outcome !== 'ready') return;
+      } finally { setupIO.close(); }
+    } else if ((await runFirstRun({ config: cfg })).outcome !== 'ready') return;
   }
 
   // Active-provider banner so users know WHICH model/auth is about to

package/src/instance/spawn-elanous.ts

@@ -11,6 +11,8 @@ export interface SpawnElanousOptions {
   stateDir?: string;
   /** 실행할 elanous 진입 스크립트. 생략하면 이 트리의 bin/elanous.mjs. */
   bin?: string;
+  /** Installed command entry (for callers that must honor the user's installed CLI). */
+  executable?: string;
   cwd?: string;
   env?: NodeJS.ProcessEnv;
 }
@@ -26,20 +28,20 @@ export function elanousInvocation(args: readonly string[], opts: SpawnElanousOpt
   const root = opts.stateDir?.trim() || effectiveInstanceRoot();
   const base = opts.env ?? process.env;
   return {
-    command: process.execPath,
-    args: [opts.bin ?? DEFAULT_BIN, ...args],
+    command: opts.executable?.trim() || process.execPath,
+    args: opts.executable?.trim() ? [...args] : [opts.bin ?? DEFAULT_BIN, ...args],
     env: { ...base, ELANOUS_STATE_DIR: root, ELANOUS_STATE_DIR_SOURCE: stateDirSourceForChild(root, base) },
   };
 }
 
 export function spawnElanous(args: readonly string[], opts: SpawnElanousOptions & Omit<SpawnOptions, 'env' | 'cwd'> = {}): ChildProcess {
-  const { stateDir: _s, bin: _b, env: _e, ...rest } = opts;
+  const { stateDir: _s, bin: _b, executable: _x, env: _e, ...rest } = opts;
   const inv = elanousInvocation(args, opts);
   return spawn(inv.command, inv.args, { ...rest, cwd: opts.cwd, env: inv.env });
 }
 
 export function spawnElanousSync(args: readonly string[], opts: SpawnElanousOptions & Omit<SpawnSyncOptions, 'env' | 'cwd'> = {}): SpawnSyncReturns<string | Buffer> {
-  const { stateDir: _s, bin: _b, env: _e, ...rest } = opts;
+  const { stateDir: _s, bin: _b, executable: _x, env: _e, ...rest } = opts;
   const inv = elanousInvocation(args, opts);
   return spawnSync(inv.command, inv.args, { ...rest, cwd: opts.cwd, env: inv.env });
 }