elanous 0.2.42 → 0.2.44

package/src/autopilot/pr-manager.ts

@@ -548,10 +548,37 @@ function reuseSameCellPr(run: CmdRunner, input: UpsertPrInput, target: NonNullab
       return fail('PR changed before superseding draft');
     const newRef = `refs/heads/${input.branch}`;
     if (!run('git', ['-C', cwd, 'check-ref-format', '--branch', input.branch]).ok) return fail('new run branch name invalid');
-    const newRemote = run('git', ['-C', cwd, 'ls-remote', '--heads', 'origin', newRef]);
-    if (!newRemote.ok || newRemote.out.trim()) return fail('new run branch already exists or remote unreadable');
     const localHead = run('git', ['-C', cwd, 'rev-parse', 'HEAD']);
-    if (!localHead.ok || !/^[0-9a-f]{40}$/i.test(localHead.out.trim())) return fail('new run head unreadable');
+    const localHeadSha = localHead.out.trim();
+    if (!localHead.ok || !/^[0-9a-f]{40}$/i.test(localHeadSha)) return fail('new run head unreadable');
+    const newRemote = run('git', ['-C', cwd, 'ls-remote', '--heads', 'origin', newRef]);
+    if (!newRemote.ok) return fail('new run branch already exists or remote unreadable');
+    let retryBranchAlreadyExists = false;
+    if (newRemote.out.trim()) {
+      if (newRemote.out.trim() !== `${localHeadSha}\t${newRef}`) return fail('new run branch already exists or remote unreadable');
+      const existingDrafts = run('gh', ['pr', 'list', '--head', input.branch, '--state', 'open', '--json', 'url'], { cwd });
+      let existingRows: Array<{ url?: unknown }>;
+      try { existingRows = JSON.parse(existingDrafts.out) as Array<{ url?: unknown }>; }
+      catch { return fail('existing retry draft listing malformed'); }
+      if (!existingDrafts.ok) return fail('existing retry draft lookup failed');
+      if (!existingRows.length) retryBranchAlreadyExists = true;
+      else {
+        if (existingRows.length !== 1 || typeof existingRows[0]?.url !== 'string') return fail('existing retry draft lookup ambiguous');
+        const existingUrl = existingRows[0].url;
+        const existingView = run('gh', ['pr', 'view', existingUrl, '--json', 'state,isDraft,headRefOid,headRefName,body,url'], { cwd });
+        let existingFields: Record<string, unknown>;
+        try { existingFields = JSON.parse(existingView.out) as Record<string, unknown>; }
+        catch { return fail('existing retry draft identity malformed'); }
+        if (!existingView.ok || existingFields.state !== 'OPEN' || existingFields.isDraft !== true
+          || existingFields.headRefOid !== localHeadSha || existingFields.headRefName !== input.branch
+          || existingFields.url !== existingUrl || typeof existingFields.body !== 'string'
+          || cellIdFromBody(existingFields.body) !== cellIdFromBody(input.body)
+          || cardIdFromBody(existingFields.body) !== cardIdFromBody(input.body))
+          return fail('existing retry draft identity mismatch');
+        return { ok: true, url: existingUrl, reused: true };
+      }
+    }
+    if (!retryBranchAlreadyExists) {
     // Upload the commit through a unique scratch ref. GitHub's create-ref API then
     // atomically refuses a concurrent writer of the intended branch name.
     const runKey = input.runId ? runSuffixKey(input.runId) : null;
@@ -590,6 +617,7 @@ function reuseSameCellPr(run: CmdRunner, input: UpsertPrInput, target: NonNullab
       : { ok: false, out: '', err: 'repository identity unavailable' };
     reapScratchRef(createdRef.ok ? 'branch-created' : 'create-refused');
     if (!createdRef.ok) return fail(`new run branch create refused: ${(createdRef.err || createdRef.out).slice(0, 220)}`);
+    }
     const stateLabels = new Set(labelsForAxis('state').map(label => label.name));
     const labels = [...new Set([...(input.labels ?? []).filter(label => !stateLabels.has(label as typeof PR_LABEL_NAMES.running)),
       PR_LABEL_NAMES.running, ...(input.seat ? [`seat:${input.seat}`] : [])])];

package/src/boot/daemon-tools/self-implement.ts

@@ -30,7 +30,7 @@ import { debug } from '../../debug/log.js';
 import { globalAgentRegistry, type AgentRegistry } from '../../agent/registry.js';
 import type { TaskNotificationQueue } from '../../agent/task-notification.js';
 import { effectiveInstanceRoot } from '../../instance/resolve.js';
-import { writeAuthoredGoal } from '../../self-implement/goal-author.js';
+import { resolveGoalAuthorReviewerPrecheckEnabled, writeAuthoredGoal } from '../../self-implement/goal-author.js';
 import { selfAnswerOrAssumeGoalDocumentClarifications, type GoalClarificationSelfResolver } from '../../self-implement/goal-author-clarification.js';
 import { writeGoalDocumentAtomic } from '../../self-implement/goal-document-write.js';
 import { DecisionLedger } from '../../decisions/decision-ledger.js';
@@ -220,6 +220,7 @@ type SelfImplementGoalAuthor = (ask: string, cwd: string, deps?: {
   goalTitle?: string;
   decomposeSteps?: (objective: string, opts?: { context?: string }) => Promise<readonly string[]>;
   onProgress?: (phase: import('../../self-implement/goal-author.js').GoalAuthorPhase, event: 'start' | 'end') => void;
+  reviewerPrecheckEnabled?: boolean;
 }) => Promise<{ path: string }>;
 
 const GOAL_ORIGINAL_TEXT_LIMIT = null;
@@ -328,6 +329,7 @@ export async function dispatchSelfImplement(
     const recentStepCounts = readRecentStepCountsFailOpen(recentStepCountReader);
     goalFile = (await authorGoal(goalSourceText, ctx.cwd, {
       goalTitle: feature,
+      reviewerPrecheckEnabled: resolveGoalAuthorReviewerPrecheckEnabled(),
       decomposeSteps: createDecomposeSteps(ctx.signal, {
         repositoryRoot: ctx.cwd,
         ...(adversarialReview !== undefined ? { adversarialReview } : {}),

package/src/boot/daemon-tools/web-search.ts

@@ -40,8 +40,7 @@ export function buildWebSearchTool(): LLMToolSpec {
   return {
     name: 'WebSearch',
     description:
-      'Search the public web via the daemon\'s configured provider (Grok / ' +
-      'Firecrawl / etc.). When no key is available, falls back to keyless DuckDuckGo. ' +
+      'Search the public web via Exa then Firecrawl; X/Twitter intent may use Grok. ' +
       'Returns a ranked list of URLs + titles + snippets. ' +
       'For fact questions, answer directly from the snippets and URLs; read the full body only when insufficient. ' +
       'Pair with a follow-up Read or external WebFetch when the model needs ' +

package/src/briefing/brief-items.ts

@@ -32,6 +32,10 @@ export interface BriefItem {
   deadline: string | null;
   evidence: string | null;
   source: string;
+  /** Existing Linear issue identifier; this is the secretary contract key. */
+  issue_ref?: string | null;
+  /** Parent Linear issue UUID used by the Linear comment projector. */
+  linearIssueId?: string | null;
   created_at: string;
   sent_at: string | null;
 }
@@ -43,6 +47,9 @@ export interface AddBriefItem {
   deadline?: string | null;
   evidence?: string | null;
   source: string;
+  /** Reuses the Linear secretary issue identifier; no intake-specific key is created. */
+  issueRef?: string | null;
+  linearIssueId?: string;
   createdAt?: string;
   /** Optional normalized claim identity and time window for repeat observations. */
   dedupeKey?: string;
@@ -185,6 +192,7 @@ function itemLine(item: BriefItem): string {
   const extra = [
     item.deadline ? `마감: ${item.deadline}` : '',
     item.evidence ? `근거: ${item.evidence}` : '',
+    item.issue_ref ? `관련 이슈: ${item.issue_ref}` : '',
     `출처: ${item.source}`,
   ].filter(Boolean).join(' · ');
   return `- [${item.priority}] ${item.text} (${extra})`;
@@ -207,6 +215,7 @@ function migrateLegacyItems(db: Database, log: (category: string, event: string,
       deadline TEXT,
       evidence TEXT,
       source TEXT NOT NULL,
+      linear_issue_id TEXT,
       created_at TEXT NOT NULL,
       sent_at TEXT
     )`);
@@ -222,6 +231,12 @@ function migrateLegacyItems(db: Database, log: (category: string, event: string,
   log('briefing.items', 'migrated-legacy', { rows: (db.query('SELECT COUNT(*) AS n FROM items_v1').get() as { n: number }).n });
 }
 
+function briefItem(row: BriefItem): BriefItem {
+  if (row.issue_ref != null) return row;
+  const { issue_ref: _issueRef, ...legacy } = row;
+  return legacy;
+}
+
 /** Append-only briefing item ledger at `<state>/briefing/items.sqlite`. */
 export class BriefItemsLedger {
   readonly path: string;
@@ -251,6 +266,8 @@ export class BriefItemsLedger {
         deadline TEXT,
         evidence TEXT,
         source TEXT NOT NULL,
+        issue_ref TEXT,
+        linear_issue_id TEXT,
         created_at TEXT NOT NULL,
         sent_at TEXT
       );
@@ -284,8 +301,11 @@ export class BriefItemsLedger {
         update_id TEXT NOT NULL,
         PRIMARY KEY (bot_id, chat_id, update_id)
       );`);
-      if (!(db.query("SELECT name FROM pragma_table_info('items')").all() as { name: string }[]).some(column => column.name === 'dedupe_key')) {
-        db.exec('ALTER TABLE items ADD COLUMN dedupe_key TEXT');
+      const columns = db.query("SELECT name FROM pragma_table_info('items')").all() as { name: string }[];
+      if (!columns.some(column => column.name === 'dedupe_key')) db.exec('ALTER TABLE items ADD COLUMN dedupe_key TEXT');
+      if (!columns.some(column => column.name === 'issue_ref')) db.exec('ALTER TABLE items ADD COLUMN issue_ref TEXT');
+      if (!columns.some(column => column.name === 'linear_issue_id')) {
+        db.exec('ALTER TABLE items ADD COLUMN linear_issue_id TEXT');
       }
       db.exec('CREATE INDEX IF NOT EXISTS items_dedupe ON items(source, dedupe_key, created_at)');
       return work(db);
@@ -301,6 +321,9 @@ export class BriefItemsLedger {
     if (!(BRIEF_DOMAINS as readonly string[]).includes(input.domain)) throw new BriefItemsInputError('invalid domain');
     if (!(BRIEF_PRIORITIES as readonly string[]).includes(input.priority)) throw new BriefItemsInputError('invalid priority');
     const source = required(input.source, 'source');
+    if (input.linearIssueId !== undefined && !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(input.linearIssueId)) {
+      throw new BriefItemsInputError('invalid Linear issue UUID');
+    }
     const deadline = optional(input.deadline, 'deadline');
     // Every field that reaches the composed Markdown is one line, so no stored item can forge a heading or entry (ACP must-fix).
     for (const [field, value] of [['source', source], ['evidence', input.evidence ?? null], ['deadline', deadline]] as const) {
@@ -311,6 +334,8 @@ export class BriefItemsLedger {
       if (!format.test(deadline) || !Number.isFinite(Date.parse(deadline))) throw new BriefItemsInputError('invalid deadline');
     }
     const evidence = optional(input.evidence, 'evidence');
+    const issueRef = optional(input.issueRef, 'issueRef');
+    if (issueRef !== null && /[\r\n]/.test(issueRef)) throw new BriefItemsInputError('issueRef must be a single line');
     const createdAt = input.createdAt ?? this.now().toISOString();
     if (!Number.isFinite(Date.parse(createdAt))) throw new BriefItemsInputError('invalid createdAt');
     const dedupeKey = input.dedupeKey === undefined ? null : normalizeClaim(required(input.dedupeKey, 'dedupeKey'));
@@ -319,7 +344,7 @@ export class BriefItemsLedger {
       throw new BriefItemsInputError('invalid dedupe window');
     }
     const selected = this.using(db => {
-      const select = 'SELECT id, text, domain, priority, deadline, evidence, source, created_at, (SELECT MIN(sent_at) FROM sends WHERE sends.item_id = items.id) AS sent_at FROM items WHERE id = ?';
+      const select = 'SELECT id, text, domain, priority, deadline, evidence, source, issue_ref, linear_issue_id AS linearIssueId, created_at, (SELECT MIN(sent_at) FROM sends WHERE sends.item_id = items.id) AS sent_at FROM items WHERE id = ?';
       db.exec('BEGIN IMMEDIATE');
       try {
         if (dedupeKey !== null && windowMs !== undefined) {
@@ -329,15 +354,15 @@ export class BriefItemsLedger {
             AND julianday(created_at) <= julianday(?) ORDER BY id DESC LIMIT 1`)
             .get(source, dedupeKey, createdAt, windowMs, createdAt) as { id: number } | null;
           if (existing) {
-            const item = db.query(select).get(existing.id) as BriefItem;
+            const item = briefItem(db.query(select).get(existing.id) as BriefItem);
             db.exec('COMMIT');
             return { item, added: false };
           }
         }
         const result = db.query(
-          'INSERT INTO items (text, domain, priority, deadline, evidence, source, created_at, sent_at, dedupe_key) VALUES (?, ?, ?, ?, ?, ?, ?, NULL, ?)',
-        ).run(text, input.domain, input.priority, deadline, evidence, source, createdAt, dedupeKey);
-        const item = db.query(select).get(result.lastInsertRowid) as BriefItem;
+          'INSERT INTO items (text, domain, priority, deadline, evidence, source, issue_ref, linear_issue_id, created_at, sent_at, dedupe_key) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?)',
+        ).run(text, input.domain, input.priority, deadline, evidence, source, issueRef, input.linearIssueId ?? null, createdAt, dedupeKey);
+        const item = briefItem(db.query(select).get(result.lastInsertRowid) as BriefItem);
         db.exec('COMMIT');
         return { item, added: true };
       } catch (cause) {
@@ -434,9 +459,13 @@ export class BriefItemsLedger {
 
   /** Insertion order. Optional domain filter. Item text is the stored original. */
   list(filters: { domain?: BriefDomain } = {}): BriefItem[] {
-    return this.using(db => (filters.domain === undefined
-      ? db.query('SELECT id, text, domain, priority, deadline, evidence, source, created_at, (SELECT MIN(sent_at) FROM sends WHERE sends.item_id = items.id) AS sent_at FROM items ORDER BY id').all()
-      : db.query('SELECT id, text, domain, priority, deadline, evidence, source, created_at, (SELECT MIN(sent_at) FROM sends WHERE sends.item_id = items.id) AS sent_at FROM items WHERE domain = ? ORDER BY id').all(filters.domain)) as BriefItem[]);
+    const rows = this.using(db => {
+      const select = 'SELECT id, text, domain, priority, deadline, evidence, source, issue_ref, linear_issue_id AS linearIssueId, created_at, (SELECT MIN(sent_at) FROM sends WHERE sends.item_id = items.id) AS sent_at FROM items';
+      return filters.domain === undefined
+        ? db.query(`${select} ORDER BY id`).all()
+        : db.query(`${select} WHERE domain = ? ORDER BY id`).all(filters.domain);
+    }) as BriefItem[];
+    return rows.map(briefItem);
   }
 
   /**
@@ -450,7 +479,7 @@ export class BriefItemsLedger {
   }
 
   private itemsFromDb(db: Database): BriefItem[] {
-    return db.query('SELECT id, text, domain, priority, deadline, evidence, source, created_at, (SELECT MIN(sent_at) FROM sends WHERE sends.item_id = items.id) AS sent_at FROM items ORDER BY id').all() as BriefItem[];
+    return (db.query('SELECT id, text, domain, priority, deadline, evidence, source, issue_ref, linear_issue_id AS linearIssueId, created_at, (SELECT MIN(sent_at) FROM sends WHERE sends.item_id = items.id) AS sent_at FROM items ORDER BY id').all() as BriefItem[]).map(briefItem);
   }
 
   private pageFromDb(db: Database, slot: BriefSendSlot): { markdown: string; ids: number[] } {
@@ -562,3 +591,18 @@ export class BriefItemsLedger {
     return this.using(db => db.transaction(() => this.markSentInDb(db, ids, slot))());
   }
 }
+
+export interface IntakeDailyBrief {
+  orchestrationId: string;
+  markdown: string;
+}
+
+function orchestrationId(): string {
+  return globalThis.crypto?.randomUUID?.() ?? `intake-brief-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
+}
+
+/** Graph entrypoint for the daily 08:30 briefing; requirement-funnel items stay ephemeral. */
+export function composeIntakeDailyBrief(options: BriefItemsOptions = {}): IntakeDailyBrief {
+  const ledger = new BriefItemsLedger(options);
+  return { orchestrationId: orchestrationId(), markdown: ledger.compose('08:30') };
+}

package/src/cli/agent-cli.ts

@@ -540,7 +540,7 @@ export async function runChatTurnCli(opts: {
     tools = built;
     dispatchTool = (name, args) => built.dispatch(name, args, { signal: toolAbort.signal });
     enabledToolNames = built.specs.map(s => s.name);
-    process.once('SIGINT', abortToolsOnSigint);
+    process.on('SIGINT', abortToolsOnSigint);
   }
   // Wire the universal preamble (project anchor + project tree +
   // family addendum + session-specific guidance) into every CLI system
@@ -600,6 +600,7 @@ export async function runChatTurnCli(opts: {
       userConfig: opts.cfg,
       sessionId: session.id,
       userText: opts.userText,
+      ...(opts.surface === 'ask' ? { utteranceSurface: 'ask' as const } : {}),
       systemPrompt: agentSystemPrompt,
       onDelta: (d) => {
         replyChunks.push(d);

package/src/cli/catalog-cli.ts

@@ -0,0 +1,31 @@
+import type { Command } from 'commander';
+import { refreshServerCatalog } from '../registry/catalog-server.js';
+import { reloadCatalog } from '../registry/loader.js';
+
+export interface CatalogCliDeps {
+  refresh?: typeof refreshServerCatalog;
+  reload?: typeof reloadCatalog;
+  write?: (line: string) => void;
+  setExitCode?: (code: number) => void;
+}
+
+export function registerCatalogCommands(program: Command, deps: CatalogCliDeps = {}): void {
+  const catalog = program.command('catalog').description('서명된 LLM 모델 카탈로그 관리');
+  catalog.command('refresh')
+    .description('서버 카탈로그를 서명·판 검증 후 로컬 캐시에 갱신')
+    .option('--json', '구조화 결과')
+    .option('--url <url>', '카탈로그 서버 주소 재정의(검증된 서명만 수용)')
+    .action(async (opts: { json?: boolean; url?: string }) => {
+      const result = await (deps.refresh ?? refreshServerCatalog)(opts.url ? { url: opts.url } : {});
+      const write = deps.write ?? ((line: string) => console.log(line));
+      if (result.ok) {
+        (deps.reload ?? reloadCatalog)();
+        const output = { outcome: 'updated', catalogVersion: result.payload.catalogVersion };
+        write(opts.json ? JSON.stringify(output) : `카탈로그 갱신 완료 · v${output.catalogVersion}`);
+        return;
+      }
+      const output = { outcome: 'failed', reason: result.reason };
+      write(opts.json ? JSON.stringify(output) : `카탈로그 갱신 실패 · ${output.reason}`);
+      (deps.setExitCode ?? ((code: number) => { process.exitCode = code; }))(1);
+    });
+}

package/src/cli/connector-cli.ts

@@ -28,6 +28,7 @@ export interface ConnectorCliDeps {
   log?: typeof debug.log;
   bearerToken?: string;
   readKey?: () => Promise<string>;
+  stateDir?: string;
 }
 
 async function setLinearSecret(id: string, deps: ConnectorCliDeps): Promise<number> {
@@ -202,3 +203,18 @@ export async function runLinearSync(opts: ConnectorSyncOptions, deps: ConnectorC
   const events = await fetchLinearIssues({ apiKey: key, teamKey: opts.team, labelOrPrefix: opts.prefix, fetch: deps.fetch ?? fetch, ledger: deps.ledger });
   return applyLinearEvents(events, opts, deps);
 }
+
+export async function runLinearDailyProgress(opts: { send?: boolean; json?: boolean; version?: string }, deps: ConnectorCliDeps = {}): Promise<number> {
+  const { syncLinearDailyProgress } = await import('../connectors/linear-daily-progress.js');
+  const result = await syncLinearDailyProgress({
+    dryRun: !opts.send,
+    ...(opts.version ? { version: opts.version } : {}),
+    ...(deps.stateDir ? { stateDir: deps.stateDir } : {}),
+    ...(deps.getSecret ? { getSecret: deps.getSecret } : {}),
+    ...(deps.fetch ? { fetch: deps.fetch } : {}),
+    ...(deps.log ? { log: deps.log } : {}),
+  });
+  (deps.output ?? console.log)(opts.json ? JSON.stringify(result) :
+    `connector linear daily-summary: ${result.dryRun ? 'dry-run' : 'send'} · planned ${result.plan.length} · posted ${result.posted} · duplicate ${result.skipped} · failed ${result.failed}`);
+  return result.failed ? 1 : 0;
+}

package/src/cli/control-cli.ts

@@ -12,8 +12,9 @@ import { runLightMember, type LightResource } from '../control-plane/light-membe
 import { RESOURCE_KINDS, type ResourceKind } from '../control-plane/ledger.js';
 import { runControlJoin, type ControlJoinOptions } from './control-join-cli.js';
 import type { ResourceView } from '../control-plane/ledger.js';
-import { issueMemberToken, revokeMemberToken, listMemberTokens } from '../control-plane/member-tokens.js';
+import { issueMemberToken, issueMemberTokenToFile, revokeMemberToken, listMemberTokens } from '../control-plane/member-tokens.js';
 import { collectControlStatus, readControlHqLease } from '../control/control-status.js';
+import { debug } from '../debug/log.js';
 import { getUserConfig } from '../user-config.js';
 
 function controlPort(flag?: string): number {
@@ -98,7 +99,7 @@ export async function runResourcesQuery(options: { where?: string; kind?: string
   }
 }
 
-export async function runControlServe(options: { port?: string; host?: string; followLease?: boolean; followHqLease?: boolean; bucket?: string;
+export async function runControlServe(options: { port?: string; host?: string; allowClusterBind?: boolean; followLease?: boolean; followHqLease?: boolean; bucket?: string;
   read?: (bucket: string) => RoleLeaseRead | Promise<RoleLeaseRead>; machine?: string;
   readHq?: typeof readControlHqLease; hqHostName?: string;
   /** 시험 seam — 이 신호로 멈춘다. ⛔ 시험이 `process.emit('SIGTERM')` 로 멈추면 같은 프로세스의 다른 SIGTERM 처리기
@@ -131,7 +132,10 @@ export async function runControlServe(options: { port?: string; host?: string; f
     },
   }) : undefined;
   let server: ReturnType<typeof startControlServer>;
-  try { server = startControlServer({ port, hostname: options.host, ...(leaseView ? { leaseView, requireKnownLeaseForWrites: true } : {}) }); }
+  if (options.allowClusterBind && options.host === '0.0.0.0') {
+    debug.log('control-plane', 'cluster-bind-enabled', { hostname: options.host, port, exposure: 'operator-restricted-cluster-service' });
+  }
+  try { server = startControlServer({ port, hostname: options.host, allowClusterBind: options.allowClusterBind, ...(leaseView ? { leaseView, requireKnownLeaseForWrites: true } : {}) }); }
   catch (error) { console.error(`관제부 시작 실패: ${reasonFor(error)}`); process.exitCode = 2; return; }
   await new Promise<void>(resolve => {
     const stop = () => {
@@ -214,10 +218,11 @@ export function registerControlCommands(program: Command): void {
   control.command('serve').description('관제부를 포그라운드에서 실행')
     .option('--port <n>', '리스닝 포트(0=임시 포트)')
     .option('--host <addr>', '루프백 또는 tailnet 바인드 주소')
+    .option('--allow-cluster-bind', '클러스터 내부 Service용 0.0.0.0 바인드를 명시 허용')
     .option('--follow-lease', '임대 보유자일 때만 쓰기')
     .option('--follow-hq-lease', 'HQ 임대 보유자일 때만 쓰기')
     .option('--bucket <bucket>', 'GCS 임대 버킷')
-    .action((options: { port?: string; host?: string; followLease?: boolean; followHqLease?: boolean; bucket?: string }) => runControlServe(options));
+    .action((options: { port?: string; host?: string; allowClusterBind?: boolean; followLease?: boolean; followHqLease?: boolean; bucket?: string }) => runControlServe(options));
   control.command('member').description('합류 기계의 자원을 포그라운드에서 등록·심박')
     .option('--resource <kind:name=url>', '등록할 자원', (value: string, previous: string[]) => [...previous, value], [] as string[])
     .option('--interval <seconds>', '심박 간격(초)')
@@ -244,8 +249,12 @@ export function registerControlCommands(program: Command): void {
     });
   const token = control.command('token').description('기계별 범위 토큰 관리');
   token.command('issue <machine>').description('기계 토큰 발급 또는 교체')
-    .action((machine: string) => {
-      try { console.log(issueMemberToken(machine)); }
+    .option('--token-file <path>', '토큰을 새 0600 파일로만 쓰고 stdout에 출력하지 않음')
+    .action((machine: string, options: { tokenFile?: string }) => {
+      try {
+        if (options.tokenFile) issueMemberTokenToFile(machine, options.tokenFile);
+        else console.log(issueMemberToken(machine));
+      }
       catch (error) { console.error(reasonFor(error)); process.exitCode = 2; }
     });
   token.command('revoke <machine>').description('기계 토큰 폐기')

package/src/cli/doctor-fix.ts

@@ -442,8 +442,8 @@ export function nodePtyRebuildPlan(deps: DoctorFixDeps): { versionDir: string; p
   try {
     const versionDir = (deps.realpath ?? realpathSync)(join(readiness.installPrefix, 'current'));
     const packageDir = join(versionDir, 'node_modules', 'elanous');
-    const pkg = JSON.parse((deps.readFile ?? ((path: string) => readFileSync(path, 'utf8')))(join(packageDir, 'package.json'))) as { dependencies?: Record<string, string>; optionalDependencies?: Record<string, string> };
-    const version = pkg.optionalDependencies?.['node-pty'] ?? pkg.dependencies?.['node-pty'];
+    const pkg = JSON.parse((deps.readFile ?? ((path: string) => readFileSync(path, 'utf8')))(join(packageDir, 'package.json'))) as { dependencies?: Record<string, string>; optionalDependencies?: Record<string, string>; peerDependencies?: Record<string, string>; elanousOptionalIntegrations?: Record<string, string> };
+    const version = pkg.elanousOptionalIntegrations?.['node-pty'] ?? pkg.optionalDependencies?.['node-pty'] ?? pkg.dependencies?.['node-pty'] ?? pkg.peerDependencies?.['node-pty'];
     if (!version) return undefined;
     // RFC #20265 A2 amzn2: node-pty 는 C++20(gcc10) · node-gyp 는 Python 3.8+ 를 요구한다.
     const env: Record<string, string> = readiness.distro === 'amzn2' ? { CC: 'gcc10-gcc', CXX: 'gcc10-g++', PYTHON: 'python3.8' } : {};

package/src/cli/intake-source-cli.ts

@@ -1,23 +1,44 @@
 import type { Command } from 'commander';
 import { randomUUID } from 'node:crypto';
+import { resolve } from 'node:path';
 import { effectiveInstanceRoot } from '../instance/resolve.js';
-import { addSource, canonicalSeat, dueSources, expiredSource, listSources, removeSource, runDue, type SourceKind } from '../intake-plane/intake-sources.js';
+import { addSource, canonicalSeat, dueSources, expiredSource, listSources, removeSource, runDue, type RunDueDeps, type SourceKind } from '../intake-plane/intake-sources.js';
+import { projectTopicBriefing, subscribeTopicSearch, type SubscribeTopicSearchInput } from '../intake-plane/actions.js';
+import { runIntakeIssueBriefing } from '../intake-plane/actions.js';
 
-export function registerIntakeSourceCommands(intake: Command, root: () => string = effectiveInstanceRoot): void {
+export function registerIntakeSourceCommands(intake: Command, root: () => string = effectiveInstanceRoot,
+  deps: { subscribeTopicSearch?: (input: SubscribeTopicSearchInput, options?: { stateDir?: string; runDeps?: RunDueDeps }) => ReturnType<typeof subscribeTopicSearch> } = {}): void {
   const source = intake.command('source').description('자리별 흡수 원천과 주기 등록·조회·실행');
   const fail = (error: unknown) => { console.error(error instanceof Error ? error.message : String(error)); process.exitCode = 2; };
   source.command('add')
     .requiredOption('--seat <id>', '자리 id 또는 별칭')
-    .requiredOption('--kind <kind>', 'github-query | rss | command')
+    .requiredOption('--kind <kind>', 'github-query | rss | command | topic-search')
     .requiredOption('--spec <spec>', 'GitHub 질의 · 피드 URL · 명령')
     .requiredOption('--every <cadence>', 'Nh | Nd | Nw')
     .option('--until <date>', '만료 시작 날짜 YYYY-MM-DD (UTC)')
     .option('--why <reason>', '등록 이유')
     .option('--id <id>', '원천 id')
-    .action((opts: { seat: string; kind: string; spec: string; every: string; until?: string; why?: string; id?: string }) => {
+    .option('--linear-issue-id <uuid>', 'topic-search parent Linear issue UUID')
+    .option('--schedule-cron <expression>', 'topic-search schedule registry cron (e.g. 0 8 * * 1)')
+    .option('--telegram-dry-run-file <path>', 'Telegram 브리핑 본문을 이 파일에 기록하고 실제 발송은 하지 않음 (topic-search)')
+    .action(async (opts: { seat: string; kind: string; spec: string; every: string; until?: string; why?: string; id?: string; linearIssueId?: string; scheduleCron?: string; telegramDryRunFile?: string }) => {
       try {
+        if (opts.kind === 'topic-search') {
+          if (!opts.linearIssueId || !opts.scheduleCron) throw new Error('topic-search 는 --linear-issue-id 와 --schedule-cron 이 필요하다');
+          const telegramDryRunFile = opts.telegramDryRunFile ? resolve(opts.telegramDryRunFile) : undefined;
+          const result = await (deps.subscribeTopicSearch ?? subscribeTopicSearch)({ seat: opts.seat, topic: opts.spec,
+            linearIssueId: opts.linearIssueId, every: opts.every, scheduleCron: opts.scheduleCron,
+            ...(telegramDryRunFile ? { telegramDryRunFile } : {}) },
+          { stateDir: root(), runDeps: { projectTopicBriefing: telegramDryRunFile
+            ? (registered, items, stateDir) => projectTopicBriefing(registered, items, stateDir, { telegramDryRunFile })
+            : projectTopicBriefing } });
+          console.log(`${result.source.id}  ${result.source.seat}  topic-search  ${result.source.every}  schedule=${result.scheduleId}  immediate=${result.immediate.ran.map(row => row.items).join(',')}`);
+          return;
+        }
         const added = addSource({ id: opts.id ?? `src-${randomUUID().slice(0, 8)}`, seat: opts.seat, kind: opts.kind as SourceKind,
-          spec: opts.spec, every: opts.every, ...(opts.until ? { until: opts.until } : {}), ...(opts.why ? { why: opts.why } : {}) }, root());
+          spec: opts.spec, every: opts.every, ...(opts.until ? { until: opts.until } : {}), ...(opts.why ? { why: opts.why } : {}),
+          ...(opts.linearIssueId ? { linearIssueId: opts.linearIssueId } : {}),
+          ...(opts.scheduleCron ? { scheduleCron: opts.scheduleCron } : {}) }, root());
         console.log(`${added.id}  ${added.seat}  ${added.kind}  ${added.every}`);
       } catch (error) { fail(error); }
     });
@@ -38,18 +59,33 @@ export function registerIntakeSourceCommands(intake: Command, root: () => string
   });
   source.command('run-due')
     .option('--seat <id>', '자리 id 또는 별칭')
+    .option('--source-id <id>', '단일 입력원만 실행 (스케줄 레지스트리 호출용)')
+    .option('--project-issue-briefing', 'topic-search 결과를 관련 Linear 이슈의 Telegram·코멘트에 투영')
+    .option('--telegram-dry-run-file <path>', 'Telegram 브리핑 본문을 이 파일에 기록하고 실제 발송은 하지 않음')
     .option('--dry-run', '기한 원천 목록만 · 수집·원장·마지막 실행 시각 무변')
     .option('--json', 'JSON 출력')
-    .action(async (opts: { seat?: string; dryRun?: boolean; json?: boolean }) => {
+    .action(async (opts: { seat?: string; sourceId?: string; projectIssueBriefing?: boolean; telegramDryRunFile?: string; dryRun?: boolean; json?: boolean }) => {
       try {
         const seat = opts.seat === undefined ? undefined : canonicalSeat(opts.seat);
         if (opts.dryRun) {
-          const sources = dueSources(new Date(), root()).filter((entry) => seat === undefined || entry.seat === seat);
+          const sources = dueSources(new Date(), root(), opts.sourceId).filter((entry) => seat === undefined || entry.seat === seat);
           if (opts.json) console.log(JSON.stringify(sources));
           else for (const entry of sources) console.log(`${entry.id}  ${entry.seat}  ${entry.kind}  ${entry.every}`);
           return;
         }
-        const result = await runDue({ seat, deps: { stateDir: root() } });
+        const telegramDryRunFile = opts.telegramDryRunFile ? resolve(opts.telegramDryRunFile) : undefined;
+        const result = await runDue({ seat, sourceId: opts.sourceId, deps: { stateDir: root(),
+          ...(opts.projectIssueBriefing || telegramDryRunFile ? { projectTopicBriefing: telegramDryRunFile
+            ? (registered, items, stateDir) => projectTopicBriefing(registered, items, stateDir, { telegramDryRunFile })
+            : projectTopicBriefing } : {}),
+          onCollected: async (source, raws) => {
+          if (!source.issueRef) return;
+          await runIntakeIssueBriefing({
+            issueRef: source.issueRef, topic: source.spec, state: 'open', collected: true,
+            evidence: raws.filter(raw => typeof raw.url === 'string' && raw.url.trim().length > 0)
+              .map(raw => ({ title: raw.title || source.spec, url: raw.url!, summary: raw.text || raw.title || source.spec })),
+          }, { stateDir: root() });
+        } } });
         if (opts.json) console.log(JSON.stringify(result));
         else for (const row of result.ran) console.log(`${row.id}  ${row.items}${row.error ? `  실패: ${row.error}` : ''}`);
         if (result.ran.some((row) => row.error)) process.exitCode = 1;

package/src/cli/log-event-names.ts

@@ -108,6 +108,12 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "auto-merge-head-guard",
   "auto-merged",
   "auto-review-labeled",
+  "author.dialog.closed",
+  "author.reviewer-precheck.skipped",
+  "author.reviewer-precheck.completed",
+  "author.reviewer-precheck.revision-rejected",
+  "author.reviewer-precheck.failed-soft",
+  "author.reviewer.round",
   "auto-worktree-prepared",
   "autoproceed",
   "autoroute.decision",
@@ -1417,6 +1423,8 @@ export const KNOWN_LOG_EVENT_NAMES: ReadonlySet<string> = new Set([
   "superseded-goal-file-bypassed",
   "superseded-goal-file-rejected",
   "supervisor-plan-revision-recorded",
+  "supervisor.reauthor-request",
+  "supervisor.reauthor-unjoined",
   "suppressed",
   "suppressed.frustration",
   "surface-capped",

package/src/cli/msg-cli.ts

@@ -3,7 +3,7 @@ import { mkdirSync } from 'node:fs';
 import { dirname } from 'node:path';
 import { ensureAuthToken } from '../auth/acp-token.js';
 import { elanousStateRoot } from '../autopilot/state-paths.js';
-import { canonicalSeatId, openMsgStore, openMsgStoreReadOnly, type Message, type MsgStore } from '../msg/msg-store.js';
+import { canonicalMessageAddress, canonicalSeatId, openMsgStore, openMsgStoreReadOnly, type Message, type MsgStore } from '../msg/msg-store.js';
 import { clearPostOffice, ensurePostOffice, writePostOffice } from '../msg/msg-post-office.js';
 import { acquireLockSync } from '../storage/file-lock.js';
 import { GitHubMsgMirrorTransport } from '../msg/msg-mirror-github.js';
@@ -325,7 +325,8 @@ export function registerMsgCommands(program: Command, deps: MsgCliDeps = {}): vo
       const from = seat(opts.from, '--from');
       const unsupported = opts.to === undefined ? null : unsupportedLoopAddressNotice(opts.to);
       if (unsupported) out.error(unsupported);
-      const to = seat(opts.to, '--to');
+      if (opts.to === undefined) throw new Error('--to is required');
+      const to = canonicalMessageAddress(opts.to);
       // Validate the auto-reply target before saving — a mismatched flag must not leave a stored message behind.
       const agentAddress = agentReplyAddress(opts.agentReply);
       if (agentAddress !== null) requireAgentTarget(agentAddress, to);
@@ -364,7 +365,7 @@ export function registerMsgCommands(program: Command, deps: MsgCliDeps = {}): vo
   msg.command('route <address>').description('Show how a post to this address is read (replyBody) and woken (wake)')
     .option('--json')
     .action((address: string, opts: CommonOptions) => run(() => {
-      const to = canonicalSeatId(address);
+      const to = canonicalMessageAddress(address);
       const wake = resolveWake(to, deps.wakeDeps);
       const row = { msgAddress: to, replyBody: messageRouteFor(to)?.replyBody ?? null, ...wake };
       emit(row, opts.json, () => out.log(`${to}\treplyBody=${row.replyBody ?? '모름'}\twake=${wake.wake}`
@@ -372,6 +373,34 @@ export function registerMsgCommands(program: Command, deps: MsgCliDeps = {}): vo
         + `\t(${wake.source}${wake.reason ? `: ${wake.reason}` : ''})`));
     })());
 
+  const group = msg.command('group').description('Manage local message group subscriptions');
+  group.command('create <name>').description('Create a group and subscribe its owner')
+    .requiredOption('--from <seat>', 'seat creating and owning the group').option('--json')
+    .action((name: string, opts: { from: string; json?: boolean }) => run(() => {
+      const address = withStore(store => store.createGroup(name, opts.from));
+      emit({ address, owner: canonicalSeatId(opts.from) }, opts.json, () => out.log(`${address} created; ${canonicalSeatId(opts.from)} subscribed`));
+    })());
+  group.command('join <name>').description('Subscribe a seat to a group')
+    .requiredOption('--seat <seat>').option('--json')
+    .action((name: string, opts: { seat: string; json?: boolean }) => run(() => {
+      const joined = withStore(store => store.joinGroup(name, opts.seat));
+      const row = { group: canonicalMessageAddress(name.startsWith('group:') ? name : `group:${name}`), seat: canonicalSeatId(opts.seat), joined };
+      emit(row, opts.json, () => out.log(`${row.seat} ${row.joined ? 'joined' : 'already subscribed'} ${row.group}`));
+    })());
+  group.command('leave <name>').description('Unsubscribe a seat from a group')
+    .requiredOption('--seat <seat>').option('--json')
+    .action((name: string, opts: { seat: string; json?: boolean }) => run(() => {
+      const left = withStore(store => store.leaveGroup(name, opts.seat));
+      const row = { group: canonicalMessageAddress(name.startsWith('group:') ? name : `group:${name}`), seat: canonicalSeatId(opts.seat), left };
+      emit(row, opts.json, () => out.log(`${row.seat} ${row.left ? 'left' : 'was not subscribed to'} ${row.group}`));
+    })());
+  group.command('list').description('List a seat’s active group subscriptions')
+    .requiredOption('--seat <seat>').option('--json')
+    .action((opts: { seat: string; json?: boolean }) => run(() => {
+      const groups = withStore(store => store.listGroups(opts.seat));
+      emit(groups, opts.json, () => { if (!groups.length) out.log('No groups.'); else for (const address of groups) out.log(address); });
+    })());
+
   msg.command('list').description('List messages for one recipient or one thread without acknowledging them')
     .option('--to <seat>').option('--thread <id>', 'request ID; list it and its replies, regardless of recipient')
     .option('--after <id>', 'exclusive message ID (default: acknowledged cursor for a recipient, 0 for a thread)')

package/src/cli/pr-cli.ts

@@ -37,6 +37,7 @@ import {
   type CmdRunner,
   type PrManager,
 } from '../autopilot/pr-manager.js';
+import { observePrLineage } from '../pr-tool/census.js';
 import {
   collectBaseLandingCommits,
   computeGranularityStats,
@@ -68,6 +69,7 @@ import { ensurePrLandHeavyRemote, type HeavyRemoteInput, type HeavyRemoteResult
 import { readPrBaseNameWithRetry } from './pr-land-base-read.js';
 import { runHeavyOnPodShadow } from './pr-land-pod-shadow.js';
 import type { LandingPodShadowInput, LandingPodShadowVerdict } from './pr-land-pod-shadow-job.js';
+import { recordWarmReuseEvidence, warmReuseEvidencePath } from '../task-orchestrator/surfaces/warm-reuse-evidence.js';
 import { readTaskAgentState, taskAgentStatePath, type TaskCard } from '../task-agent/task-hand.js';
 import { INFLIGHT_REGISTRY_FILE, removeInflightForPr } from '../pr-tool/inflight-registry.js';
 import { PR_LABEL_NAMES } from '../github/pr-labels.js';
@@ -1899,10 +1901,19 @@ export async function runPrLand(opts: PrLandOpts = {}, deps: PrLandDeps = {}): P
         local: { measured: verdict.rootPlan != null, ok: verdict.ok, rootPlan: verdict.rootPlan ?? null },
         runPod: async () => {
           const runPod = deps.runLandingPodShadow ?? (await import('./pr-land-pod-shadow-job.js')).runLandingPodShadowJob;
-          return runPod({ head: opts.expectedHead!, main });
+          return runPod({ pr: Number(opts.pr), repo: cwd, host: verdict.host ?? '', head: opts.expectedHead!, main });
         },
         log: (category, event, data) => debug.log(category, event, { ...data, main, phase: 'initial' }),
         warn: (message) => out.error(`⚠ heavy-on-pod-shadow: ${message}`),
+        onShadow: ({ pod, agree }) => {
+          const shadow = pod && typeof pod === 'object' ? pod as LandingPodShadowVerdict : undefined;
+          const warm = shadow?.warmEvidence;
+          recordWarmReuseEvidence(warmReuseEvidencePath(), {
+            schema: 1, consumer: 'land', pr: Number(opts.pr), head: opts.expectedHead!, main, recordedAt: new Date().toISOString(),
+            ...(warm ? { ...warm, agree: warm.agree && agree } : {}),
+            ...(!warm ? { reason: shadow?.warmReason ?? 'warm-shadow-unmeasured' } : {}),
+          });
+        },
       });
     }
   }
@@ -2536,6 +2547,15 @@ export function registerPrCommands(program: Command, deps: PrLandDeps = {}, queu
       try { await supersedeMerged(number, opts.cwd ?? process.cwd()); }
       catch (error) { prToolOut.error(`✗ supersede-drafts: ${String(error)}`); prToolExit(1); }
     });
+  pr.command('lineage <pr>')
+    .description('PR 계보의 관측 사실만 JSON으로 읽기 (첫 조각 · 닫기 판정 없음)')
+    .requiredOption('--json', 'JSON 관측 결과 출력')
+    .option('--cwd <path>', '저장소 경로')
+    .action((rawPr: string, opts: { cwd?: string }) => {
+      const result = observePrLineage({ pr: Number(rawPr), run: prToolRun, cwd: opts.cwd });
+      prToolOut.log(JSON.stringify(result));
+      if (result.status === 'unknown') prToolExit(1);
+    });
   pr.command('census')
     .description('열린 PR 전체·골 문서만·2일 무커밋 draft·미닫힌 superseded 집계')
     .option('--cwd <path>', '저장소 경로')