elanous 0.2.43 → 0.2.44

package/src/sidetab-core/visible-agent-mission.ts

@@ -4,7 +4,8 @@ import { sanitizeForPtyInput } from '../agent-mission/provision.js';
 
 export interface VisibleMissionPty {
   snapshot(): string;
-  write(bytes: string): void;
+  /** A false result means the PTY input handle rejected the write. */
+  write(bytes: string): boolean | number | void;
   isAlive(): boolean;
 }
 
@@ -15,11 +16,17 @@ export interface VisibleMissionResult {
   firstLine?: string;
   promptReady: boolean;
   missionVisible: boolean;
+  /** Every UTF-8 byte in the mission prompt was accepted by the PTY input handle. */
+  missionTyped?: boolean;
+  /** Enter was accepted only after the complete mission became visible. */
+  missionSubmitted?: boolean;
   promptReturned: boolean;
   completionMarker: boolean;
   /** Bounded first PTY frame, retained to diagnose startup screens that intercepted input. */
   initialScreen?: string;
   startupScreen?: AgentStartupScreen;
+  failureStage?: 'prompt-readiness' | 'mission-write' | 'mission-visibility' | 'mission-submit' | 'mission-completion' | 'result-read' | 'marker-write' | 'marker-visibility' | 'marker-submit' | 'marker-completion' | 'pty-error';
+  failureScreen?: string;
   error?: string;
 }
 
@@ -42,6 +49,30 @@ export interface VisibleMissionDeps {
 }
 
 const sleepDefault = (ms: number): Promise<void> => new Promise(resolve => setTimeout(resolve, ms));
+const INPUT_CHUNK_BYTES = 256;
+const INPUT_CHUNK_DELAY_MS = 10;
+
+async function writeMissionInput(text: string, pty: VisibleMissionPty, sleep: (ms: number) => Promise<void>): Promise<{ complete: boolean; acceptedBytes: number; totalBytes: number }> {
+  let chunk = '';
+  let chunkBytes = 0;
+  let acceptedBytes = 0;
+  const totalBytes = Buffer.byteLength(text, 'utf8');
+  for (const char of text) {
+    const charBytes = Buffer.byteLength(char, 'utf8');
+    if (chunk && chunkBytes + charBytes > INPUT_CHUNK_BYTES) {
+      if (pty.write(chunk) === false) return { complete: false, acceptedBytes, totalBytes };
+      acceptedBytes += chunkBytes;
+      await sleep(INPUT_CHUNK_DELAY_MS);
+      chunk = '';
+      chunkBytes = 0;
+    }
+    chunk += char;
+    chunkBytes += charBytes;
+  }
+  if (chunk && pty.write(chunk) === false) return { complete: false, acceptedBytes, totalBytes };
+  acceptedBytes += chunkBytes;
+  return { complete: true, acceptedBytes, totalBytes };
+}
 
 export function isAgentInputPrompt(screen: string): boolean {
   const plain = stripAnsi(screen);
@@ -66,12 +97,22 @@ export async function runVisibleAgentMission(deps: VisibleMissionDeps): Promise<
   const readFile = deps.readFile ?? ((path: string) => readFileSync(path, 'utf8'));
   let promptReady = false;
   let missionVisible = false;
+  let missionTyped = false;
+  let missionSubmitted = false;
   let promptReturned = false;
   let completionMarker = false;
   let initialScreen: string | undefined;
   let startupScreen: AgentStartupScreen | undefined;
   let codexUpdateSkipSent = false;
   let startupScreenReported = false;
+  let lastObservedScreen = '';
+  const completionDeadline = Date.now() + (deps.completionTimeoutMs ?? 300_000);
+  const stageDeadline = (timeoutMs: number): number => Math.min(completionDeadline, Date.now() + timeoutMs);
+  const snapshot = (): string => { lastObservedScreen = deps.pty.snapshot(); return lastObservedScreen; };
+  const safeSnapshot = (): string => { try { return snapshot(); } catch { return lastObservedScreen; } };
+  const failure = (result: Omit<VisibleMissionResult, 'ok' | 'failureStage' | 'failureScreen'>, stage: NonNullable<VisibleMissionResult['failureStage']>, screen = safeSnapshot()): VisibleMissionResult => ({
+    ...result, missionTyped, missionSubmitted, ok: false, failureStage: stage, failureScreen: screenTail(screen),
+  });
   const observeStartupScreen = (screen: string): AgentStartupScreen | undefined => {
     const detected = classifyAgentStartupScreen(deps.agent, screen);
     // This field describes the blocker present in the current/final frame,
@@ -86,7 +127,10 @@ export async function runVisibleAgentMission(deps: VisibleMissionDeps): Promise<
     return detected;
   };
   try {
-  const readyDeadline = Date.now() + (deps.readyTimeoutMs ?? 60_000);
+  // Readiness is settled by the observed prompt/input echo; this is only one
+  // shared safety cap, not a per-stage 60s/5s guess.
+  const safetyCapMs = deps.completionTimeoutMs ?? 300_000;
+  const readyDeadline = stageDeadline(deps.readyTimeoutMs ?? safetyCapMs);
   let lastScreen = '';
 
   while (Date.now() < readyDeadline) {
@@ -94,14 +138,14 @@ export async function runVisibleAgentMission(deps: VisibleMissionDeps): Promise<
       // The process may exit before the first poll; its final frame can still
       // identify the startup screen that prevented the prompt from appearing.
       try {
-        lastScreen = deps.pty.snapshot();
-        initialScreen ??= lastScreen.slice(-1_200);
+        lastScreen = snapshot();
+        initialScreen ??= redactSensitive(stripAnsi(lastScreen)).slice(-1_200);
         observeStartupScreen(lastScreen);
       } catch { /* an exited remote PTY may no longer expose its final frame */ }
-      return { ok: false, path: deps.outputPath, promptReady: false, missionVisible: false, promptReturned: false, completionMarker: false, ...(initialScreen ? { initialScreen } : {}), ...(startupScreen ? { startupScreen } : {}), error: 'Agent PTY exited before its prompt appeared' };
+      return failure({ path: deps.outputPath, promptReady: false, missionVisible: false, promptReturned: false, completionMarker: false, ...(initialScreen ? { initialScreen } : {}), ...(startupScreen ? { startupScreen } : {}), error: 'Agent PTY exited before its prompt appeared' }, 'prompt-readiness', lastScreen);
     }
-    lastScreen = deps.pty.snapshot();
-    initialScreen ??= lastScreen.slice(-1_200);
+    lastScreen = snapshot();
+    initialScreen ??= redactSensitive(stripAnsi(lastScreen)).slice(-1_200);
     const detectedScreen = observeStartupScreen(lastScreen);
     if (detectedScreen) {
       if (detectedScreen === 'codex-update-choice') {
@@ -128,43 +172,49 @@ export async function runVisibleAgentMission(deps: VisibleMissionDeps): Promise<
     await sleep(pollMs);
   }
   if (!promptReady) {
-    return {
-      ok: false, path: deps.outputPath, promptReady: false, missionVisible: false, promptReturned: false, completionMarker: false,
+    return failure({
+      path: deps.outputPath, promptReady: false, missionVisible: false, promptReturned: false, completionMarker: false,
       initialScreen,
       ...(startupScreen ? { startupScreen } : {}),
-      error: 'Agent input prompt was not observed before the startup timeout',
-    };
+      error: 'Agent input prompt was not observed before the startup safety cap',
+    }, 'prompt-readiness', lastScreen);
   }
 
   const mission = sanitizeForPtyInput(deps.mission, 4_000);
-  if (!mission) return { ok: false, path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Mission text is empty after input sanitization' };
+  if (!mission) return failure({ path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Mission text is empty after input sanitization' }, 'mission-write');
   try {
     readFile(deps.outputPath);
-    return { ok: false, path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Result path already exists; refusing to reuse a previous mission file' };
+    return failure({ path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Result path already exists; refusing to reuse a previous mission file' }, 'result-read');
   } catch (error) {
     if (!isFileNotFound(error)) {
-      return { ok: false, path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: `Could not verify a fresh result path: ${error instanceof Error ? error.message : String(error)}` };
+      return failure({ path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: `Could not verify a fresh result path: ${error instanceof Error ? error.message : String(error)}` }, 'result-read');
     }
   }
   const missionPrompt = `Write the result to the exact file path ${deps.outputPath} (create parent directories if needed). ${mission}`;
-  deps.pty.write(missionPrompt);
-  const visibleMissionTail = mission.slice(-Math.min(24, mission.length));
-  const visibilityDeadline = Date.now() + (deps.visibilityTimeoutMs ?? 5_000);
+  const missionWrite = await writeMissionInput(missionPrompt, deps.pty, sleep);
+  missionTyped = missionWrite.complete;
+  if (!missionTyped) {
+    return failure({ path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, initialScreen, ...(startupScreen ? { startupScreen } : {}), error: `Mission input write was rejected after ${missionWrite.acceptedBytes}/${missionWrite.totalBytes} UTF-8 bytes` }, 'mission-write');
+  }
+  const visibleMissionTail = Array.from(mission).slice(-24).join('');
+  const visibilityDeadline = stageDeadline(deps.visibilityTimeoutMs ?? safetyCapMs);
   while (Date.now() < visibilityDeadline) {
-    const visibleText = normalizeVisibleText(deps.pty.snapshot());
+    const visibleText = normalizeVisibleText(snapshot());
     if (visibleText.includes(normalizeVisibleText(visibleMissionTail))) { missionVisible = true; break; }
     await sleep(Math.min(pollMs || 25, Math.max(1, visibilityDeadline - Date.now())));
   }
   if (!missionVisible) {
-    return { ok: false, path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, initialScreen, ...(startupScreen ? { startupScreen } : {}), error: 'Mission text was not visible in the agent PTY before submission' };
+    return failure({ path: deps.outputPath, promptReady, missionVisible: false, promptReturned: false, completionMarker: false, initialScreen, ...(startupScreen ? { startupScreen } : {}), error: 'Mission text was not visible in the agent PTY before submission' }, 'mission-visibility');
   }
-  deps.pty.write('\r');
+  if (deps.pty.write('\r') === false) {
+    return failure({ path: deps.outputPath, promptReady, missionVisible, promptReturned: false, completionMarker: false, initialScreen, ...(startupScreen ? { startupScreen } : {}), error: 'Mission submit key was rejected by the agent PTY' }, 'mission-submit');
+  }
+  missionSubmitted = true;
 
-  const completionDeadline = Date.now() + (deps.completionTimeoutMs ?? 300_000);
   let resultFileObserved = false;
   while (Date.now() < completionDeadline) {
     if (!deps.pty.isAlive()) break;
-    lastScreen = deps.pty.snapshot();
+    lastScreen = snapshot();
     if (deps.handleTrust(lastScreen, bytes => deps.pty.write(bytes))) {
       await sleep(500);
       continue;
@@ -179,40 +229,44 @@ export async function runVisibleAgentMission(deps: VisibleMissionDeps): Promise<
     await sleep(pollMs);
   }
   if (!resultFileObserved) {
-    return { ok: false, path: deps.outputPath, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Agent did not create a non-empty result file before the timeout' };
+    return failure({ path: deps.outputPath, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Agent did not create a non-empty result file before the timeout' }, 'mission-completion', lastScreen);
   }
   if (!promptReturned) {
-    return { ok: false, path: deps.outputPath, promptReady, missionVisible, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Agent did not return to its input prompt after writing the result file' };
+    return failure({ path: deps.outputPath, promptReady, missionVisible, promptReturned: false, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Agent did not return to its input prompt after writing the result file' }, 'mission-completion', lastScreen);
   }
 
   let content: string;
   try { content = readFile(deps.outputPath); }
   catch (error) {
-    return { ok: false, path: deps.outputPath, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: `Result file disappeared after the agent returned: ${error instanceof Error ? error.message : String(error)}` };
+    return failure({ path: deps.outputPath, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: `Result file disappeared after the agent returned: ${error instanceof Error ? error.message : String(error)}` }, 'result-read', safeSnapshot());
   }
   const firstLine = content.split(/\r?\n/).map(line => line.trim()).find(Boolean);
-  if (!firstLine) return { ok: false, path: deps.outputPath, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Result file is empty' };
+  if (!firstLine) return failure({ path: deps.outputPath, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Result file is empty' }, 'result-read');
 
   // Keep the marker request separate and short: the marker itself never occurs
   // in the mission prompt, so only the agent's final output can satisfy it.
   const completionMarkerText = `M-${randomUUID().replaceAll('-', '').slice(0, 12)}`;
   const completionMarkerPath = `${deps.outputPath}.completion-${completionMarkerText}`;
   const markerPrompt = `Say ${completionMarkerText} alone and write it to the exact file path ${completionMarkerPath}.`;
-  deps.pty.write(markerPrompt);
-  const markerVisibleDeadline = Date.now() + (deps.visibilityTimeoutMs ?? 5_000);
+  if (deps.pty.write(markerPrompt) === false) {
+    return failure({ path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Completion marker input write was rejected by the agent PTY' }, 'marker-write');
+  }
+  const markerVisibleDeadline = stageDeadline(deps.visibilityTimeoutMs ?? safetyCapMs);
   let markerRequestVisible = false;
   while (Date.now() < markerVisibleDeadline) {
-    const markerInputScreen = stripAnsi(deps.pty.snapshot()).replace(/\s+/g, ' ');
+    const markerInputScreen = stripAnsi(snapshot()).replace(/\s+/g, ' ');
     if (markerInputScreen.includes(completionMarkerText)) { markerRequestVisible = true; break; }
     await sleep(Math.min(pollMs || 25, Math.max(1, markerVisibleDeadline - Date.now())));
   }
   if (!markerRequestVisible) {
-    return { ok: false, path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Completion marker request was not visible in the agent PTY' };
+    return failure({ path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Completion marker request was not visible in the agent PTY' }, 'marker-visibility');
+  }
+  if (screenShowsCompletionMarker(snapshot(), completionMarkerText)) {
+    return failure({ path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Completion marker appeared in the PTY input before submission' }, 'marker-submit');
   }
-  if (screenShowsCompletionMarker(deps.pty.snapshot(), completionMarkerText)) {
-    return { ok: false, path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Completion marker appeared in the PTY input before submission' };
+  if (deps.pty.write('\r') === false) {
+    return failure({ path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Completion marker submit key was rejected by the agent PTY' }, 'marker-submit');
   }
-  deps.pty.write('\r');
 
   while (Date.now() < completionDeadline) {
     try {
@@ -220,26 +274,16 @@ export async function runVisibleAgentMission(deps: VisibleMissionDeps): Promise<
     } catch { /* the agent has not written the completion marker file yet */ }
     if (!deps.pty.isAlive()) break;
     try {
-      if (screenShowsCompletionMarker(deps.pty.snapshot(), completionMarkerText)) { completionMarker = true; break; }
+      if (screenShowsCompletionMarker(snapshot(), completionMarkerText)) { completionMarker = true; break; }
     } catch { /* detached PTYs may no longer expose a screen snapshot */ }
     await sleep(pollMs);
   }
   if (!completionMarker) {
-    return { ok: false, path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Agent did not show its completion marker before the timeout' };
+    return failure({ path: deps.outputPath, firstLine, promptReady, missionVisible, promptReturned, completionMarker: false, ...(startupScreen ? { startupScreen } : {}), error: 'Agent did not show its completion marker before the timeout' }, 'marker-completion');
   }
-  return { ok: true, path: deps.outputPath, content, firstLine, promptReady, missionVisible, promptReturned, completionMarker, initialScreen, ...(startupScreen ? { startupScreen } : {}) };
+  return { ok: true, path: deps.outputPath, content, firstLine, promptReady, missionVisible, missionTyped, missionSubmitted, promptReturned, completionMarker, initialScreen, ...(startupScreen ? { startupScreen } : {}) };
   } catch (error) {
-    return {
-      ok: false,
-      path: deps.outputPath,
-      promptReady,
-      missionVisible,
-      promptReturned,
-      completionMarker,
-      ...(initialScreen ? { initialScreen } : {}),
-      ...(startupScreen ? { startupScreen } : {}),
-      error: error instanceof Error ? error.message : String(error),
-    };
+    return failure({ path: deps.outputPath, promptReady, missionVisible, promptReturned, completionMarker, ...(initialScreen ? { initialScreen } : {}), ...(startupScreen ? { startupScreen } : {}), error: error instanceof Error ? error.message : String(error) }, 'pty-error');
   }
 }
 
@@ -248,6 +292,20 @@ function screenShowsCompletionMarker(screen: string, marker: string): boolean {
   return new RegExp(`^\\s*(?:(?:[•⏺└│╰⎿])\\s*)?${escaped}\\s*$`, 'm').test(stripAnsi(screen));
 }
 
+function screenTail(screen: string): string {
+  return redactSensitive(stripAnsi(screen)).slice(-1_200);
+}
+
+function redactSensitive(screen: string): string {
+  return screen
+    .replace(/(authorization\s*:\s*(?:basic|bearer|token|apikey|api[- ]key)\s+)(?:"[^"\r\n]*"|'[^'\r\n]*'|\S+)/gi, '$1[redacted]')
+    .replace(/((?:[A-Z0-9_]*(?:api[_-]?key|api[_-]?token|access[_-]?key|secret|password|credential|auth[_-]?token|refresh[_-]?token)))\s*[:=]\s*(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\r\n]*)/gi, '$1=[redacted credential]')
+    .replace(/Bearer\s+\S+/gi, 'Bearer [redacted]')
+    .replace(/(?:sk|xai|gsk|gh[pousr])-[A-Za-z0-9_-]{8,}/g, '[redacted credential]')
+    .replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi, '[redacted email]')
+    .replace(/(account[-_ ]+token)\s*[:=]?\s*(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s,;]+)/gi, '$1=[redacted credential]');
+}
+
 function stripAnsi(screen: string): string {
   return screen.replace(/\u001b\][^\u0007]*(?:\u0007|\u001b\\)/g, '')
     .replace(/\u001b\[[0-?]*[ -/]*[@-~]/g, '');

package/src/skills/tools/omni-search.ts

@@ -40,6 +40,7 @@ export type OmniSearchEngineEvent =
   | { engine: string; phase: 'complete'; hits: number; durationMs: number; error?: string };
 
 export interface OmniSearchDispatchOpts {
+  signal?: AbortSignal;
   /** Observational only: callback failures must not interrupt a provider search. */
   onEngine?: (event: OmniSearchEngineEvent) => void;
   onSource?: (source: WebSearchHit & { engine: string }) => void;
@@ -239,10 +240,11 @@ async function dispatchWithProviders(
           : remainingMs;
         if (timeoutMs <= 0) throw new DOMException('Research search budget exhausted', 'TimeoutError');
         const controller = new AbortController();
+        const signal = opts.signal ? AbortSignal.any([controller.signal, opts.signal]) : controller.signal;
         let timer: ReturnType<typeof setTimeout> | undefined;
         try {
           result = await Promise.race([
-            p.search(query, controller.signal),
+            p.search(query, signal),
             new Promise<never>((_, reject) => {
               timer = setTimeout(() => {
                 controller.abort();
@@ -254,7 +256,7 @@ async function dispatchWithProviders(
           if (timer !== undefined) clearTimeout(timer);
         }
       } else {
-        result = await p.search(query);
+        result = await p.search(query, opts.signal);
       }
       perEngine[p.id] = { hits: result.hits, durationMs: Date.now() - start };
       for (const hit of result.hits) {

package/src/task-agent/parent-host.ts

@@ -281,6 +281,7 @@ export interface ParentHostPreflight { ok: boolean; gaps: string[]; warnings: st
 export function preflightScript(target: ParentHostConfig): string {
   const elanous = remotePath(target.elanous ?? DEFAULT_REMOTE_ELANOUS);
   const configDir = remotePath(target.configDir ?? DEFAULT_REMOTE_CONFIG_DIR);
+  const codexCliMirrorDir = remotePath(REMOTE_CODEX_CLI_MIRROR_DIR);
   const grokCredentialFloorSeconds = Math.ceil(PARENT_CHILD_CREDENTIAL_MIN_REMAINING_MS / 1_000);
   return [
     `echo "version=$(${elanous} --version 2>/dev/null | tail -1 | cut -d' ' -f1)"`,
@@ -290,7 +291,10 @@ export function preflightScript(target: ParentHostConfig): string {
     `command -v kubectl >/dev/null 2>&1 && echo kubectl=1`,
     `{ command -v grok >/dev/null 2>&1 || [ -x "$HOME/.grok/bin/grok" ]; } && echo grokCli=1`,
     `{ command -v codex >/dev/null 2>&1 || [ -x "$HOME/.local/bin/codex" ]; } && echo codexCli=1`,
-    `n=$(grep -Ec '^[[:space:]]*"openai-codex(:[^"]*)?"[[:space:]]*:[[:space:]]*\\{' ${configDir}/auth.json 2>/dev/null); echo "codexAccounts=\${n:-0}"`,
+    // Default auth retains its historical provider-profile count, including expired entries.
+    // The CLI mirror is access-only; unusable/expired profiles do not count and duplicates do not count twice.
+    // A missing remote Bun is reported as unknown rather than a misleading zero.
+    `codexCount=$(grep -Ec '^[[:space:]]*"openai-codex(:[^"]*)?"[[:space:]]*:[[:space:]]*\\{' ${configDir}/auth.json 2>/dev/null); codexAccountsDefault=\${codexCount:-0}; if command -v bun >/dev/null 2>&1; then codexProbe=$(bun -e 'const fs=require("node:fs");const read=(p)=>{try{return JSON.parse(fs.readFileSync(p,"utf8"))}catch{return {}}};const isCodex=(key)=>/^openai-codex(?::[^\"]+)?$/.test(key);const parent=read(process.argv[1]).providers||{};const mirror=read(process.argv[2]).providers||{};const activeMirror=Object.entries(mirror).filter(([key,p])=>isCodex(key)&&typeof p?.tokens?.accessToken==="string"&&p.tokens.accessToken.length>0&&!p.tokens.refreshToken&&!p.tokens.refresh_token&&typeof p.tokens.expiresAt==="number"&&Number.isFinite(p.tokens.expiresAt)&&p.tokens.expiresAt>Date.now());const additional=activeMirror.filter(([key])=>!Object.prototype.hasOwnProperty.call(parent,key)).length;process.stdout.write([activeMirror.length,additional].join("|"))' ${configDir}/auth.json ${codexCliMirrorDir}/auth.json 2>/dev/null); codexProbeStatus=measured; else codexProbe=''; codexProbeStatus=unknown; fi; case "$codexProbe" in *'|'*) codexAccountsMirror=\${codexProbe%%|*}; codexAccountsMirrorAdditional=\${codexProbe#*|};; *) codexProbeStatus=unknown; codexAccountsMirror=unknown; codexAccountsMirrorAdditional=0;; esac; codexAccounts=$((codexAccountsDefault + codexAccountsMirrorAdditional)); echo "codexAccountsDefault=\${codexAccountsDefault}"; echo "codexAccountsMirror=\${codexAccountsMirror}"; echo "codexAccountsMirrorAdditional=\${codexAccountsMirrorAdditional}"; echo "codexAccountsMirrorStatus=\${codexProbeStatus}"; echo "codexAccounts=\${codexAccounts}"`,
     `{ grep -Eq '"key"[[:space:]]*:[[:space:]]*"[^"]+"' "$HOME/.grok/auth.json" 2>/dev/null || [ -n "\${XAI_API_KEY:-}\${GROK_API_KEY:-}\${GROK_CODE_XAI_API_KEY:-}" ]; } && echo grok=1`,
     // The remote host owns its device-auth session. Ignore the legacy HQ mirror entry; it can outlive and mask the host credential.
     // Read only expiry metadata, never credential values, and compare against the shared minimum lifetime.
@@ -366,6 +370,7 @@ export function judgeParentHostCredentials(facts: Record<string, string>): strin
   if (facts.unreachable) return [];
   const warnings: string[] = [];
   if (!(Number(facts.codexAccounts) > 1)) warnings.push('codex-accounts-low');
+  if (facts.codexAccountsMirrorStatus === 'unknown') warnings.push('codex-account-mirror-unmeasured');
   if (facts.grok !== '1') warnings.push('grok-credential-missing');
   if (facts.openrouter !== '1') warnings.push('openrouter-key-missing');
   return warnings;
@@ -391,6 +396,19 @@ export function preflightParentHost(input: PreflightInput): ParentHostPreflight
     } catch { /* fail-soft */ }
   }
   const warnings = judgeParentHostCredentials(facts);
+  try {
+    debug.log('task-agent.parent-host', 'codex-account-candidates', {
+      host: input.target.host,
+      sources: [
+        { path: `${input.target.configDir ?? '~/.elanous'}/auth.json`, count: Number(facts.codexAccountsDefault) || 0 },
+        { path: `${REMOTE_CODEX_CLI_MIRROR_DIR.replace(/^\$HOME/, '~')}/auth.json`,
+          count: facts.codexAccountsMirrorStatus === 'unknown' ? null : Number(facts.codexAccountsMirror) || 0,
+          additional: facts.codexAccountsMirrorStatus === 'unknown' ? null : Number(facts.codexAccountsMirrorAdditional) || 0 },
+      ],
+      mirrorStatus: facts.codexAccountsMirrorStatus ?? 'unknown',
+      totalCandidates: Number(facts.codexAccounts) || 0,
+    });
+  } catch { /* fail-soft */ }
   if (warnings.length) {
     try {
       debug.log('task-agent.parent-host', 'credential-warning', {

package/src/task-agent/recall-inject.ts

@@ -0,0 +1,98 @@
+import { readFileSync } from 'node:fs';
+import { readPriorMustFix, PRIOR_RESULT_NOT_RECOVERED } from './review-prior-fix.js';
+import type { TaskCard } from './task-hand.js';
+
+export const RECALL_MAX_ITEMS = 8;
+export const RECALL_MAX_CHARS = 2000;
+
+export interface PriorLessons {
+  block?: string;
+  priorCards: number;
+  items: number;
+  chars: number;
+  truncated: boolean;
+}
+
+type ReviewResultReader = (path: string) => string;
+
+function compact(value: string): string {
+  return value.replace(/\s+/gu, ' ').trim();
+}
+
+/** Same-cell failure and review lessons for the next hand; no broad memory query. */
+export function priorLessonsFor(
+  checklistId: string,
+  cards: readonly TaskCard[],
+  readReviewResult: ReviewResultReader = (path) => readFileSync(path, 'utf8'),
+): PriorLessons {
+  const prior = cards
+    .filter((card) => card.checklistId === checklistId)
+    .slice()
+    .sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+  const candidates: Array<{ cardId: string; text: string }> = [];
+
+  for (const card of prior) {
+    if (card.status === 'failed' || card.status === 'launch-failed') {
+      const failure = [...card.history].reverse().find((event) => ['failed', 'run-failed', 'launch-failed',
+        'graph-run-failed', 'tier-split-failed', 'device-first-launch-failed'].includes(event.event));
+      const reason = compact(failure?.detail ?? failure?.reason ?? '');
+      candidates.push({ cardId: card.id, text: `${card.status} 사유: ${reason || '실패 사유 미기록'}` });
+    }
+    for (const request of card.reviewRequests ?? []) {
+      const result = readPriorMustFix(request.resultPath, request.pr, request.head, readReviewResult);
+      if (result.status === 'recovered') {
+        for (const finding of result.items) {
+          const normalized = compact(finding);
+          if (normalized) candidates.push({ cardId: card.id, text: `PR #${request.pr} must-fix: ${normalized}` });
+        }
+      } else {
+        candidates.push({ cardId: card.id, text: `PR #${request.pr} · ${PRIOR_RESULT_NOT_RECOVERED} (${result.reason})` });
+      }
+    }
+  }
+
+  if (candidates.length === 0) return { priorCards: prior.length, items: 0, chars: 0, truncated: false };
+
+  const itemLimited = candidates.length > RECALL_MAX_ITEMS;
+  const itemMarker = `… 항목 상한 ${RECALL_MAX_ITEMS}건 초과분 생략`;
+  const charMarker = `… 글자 상한 ${RECALL_MAX_CHARS}자에서 나머지 생략`;
+  const selected: typeof candidates = [];
+  const pool = candidates.slice(0, RECALL_MAX_ITEMS);
+  const headingFor = (items: typeof candidates) => items.length
+    ? `## 앞선 교훈(같은 칸 · 카드 ${[...new Set(items.map((item) => item.cardId))].join(', ')})`
+    : '## 앞선 교훈(같은 칸)';
+  let charLimited = false;
+  for (const candidate of pool) {
+    const next = [...selected, candidate];
+    const heading = headingFor(next);
+    const lines = [heading, ...next.map((item) => `- ${item.cardId}: ${item.text}`)];
+    const reserve = [...(itemLimited ? [itemMarker] : []), charMarker];
+    if ([...lines, ...reserve].join('\n').length > RECALL_MAX_CHARS) {
+      charLimited = true;
+      break;
+    }
+    selected.push(candidate);
+  }
+  const heading = headingFor(selected);
+  const lines = [heading, ...selected.map((item) => `- ${item.cardId}: ${item.text}`)];
+  const markers = [
+    ...(itemLimited ? [itemMarker] : []),
+    ...(charLimited || selected.length < pool.length ? [charMarker] : []),
+  ];
+  // A single oversized card is omitted as a whole, never sliced through its id or lesson text.
+  if (!selected.length) markers.unshift(`… 첫 항목이 ${RECALL_MAX_CHARS}자 상한을 넘어 생략`);
+  let block = [...lines, ...markers].join('\n');
+  while (block.length > RECALL_MAX_CHARS && selected.length) {
+    selected.pop();
+    charLimited = true;
+    const shortenedHeading = headingFor(selected);
+    const shortenedLines = [shortenedHeading, ...selected.map((item) => `- ${item.cardId}: ${item.text}`)];
+    const shortenedMarkers = [
+      ...(itemLimited ? [itemMarker] : []), charMarker,
+      ...(!selected.length ? [`… 첫 항목이 ${RECALL_MAX_CHARS}자 상한을 넘어 생략`] : []),
+    ];
+    block = [...shortenedLines, ...shortenedMarkers].join('\n');
+  }
+  return { block, priorCards: prior.length, items: selected.length,
+    chars: block.length, truncated: itemLimited || charLimited };
+}

package/src/task-agent/task-hand.ts

@@ -23,6 +23,7 @@ import { readBudgetInputsLive, type BudgetInputs } from '../self-implement/budge
 import { HARNESS_RUN_ID_ENV, mintRunId, normalizeRunId } from '../harness/harness-space.js';
 import { newLaunchUtteranceId, recordLaunchUtterance } from '../harness/launch-utterance-ledger.js';
 import { debug } from '../debug/log.js';
+import { priorLessonsFor } from './recall-inject.js';
 import { effectiveInstanceRoot } from '../instance/resolve.js';
 import { LAUNCH_DOOR_RECEIPT_ENV, openLaunchRequestDoor, type LaunchRequestDoor } from '../execution-loop/launch-gate.js';
 import { withFileLockSync } from '../storage/file-lock.js';
@@ -1280,6 +1281,7 @@ export async function handTask(opts: HandTaskOptions): Promise<HandTaskResult> {
   const { normalizeEvidenceCommandLines } = await import('./evidence-command-normalize.js');
   const normalized = normalizeEvidenceCommandLines(opts.text.trim());
   let text = normalized.text;
+  let metadataText = text;
   if (!text) throw new Error('과제 한 줄이 비어 있다');
   for (const warning of normalized.warnings) {
     console.error(`⚠ ${warning}`);
@@ -1319,6 +1321,18 @@ export async function handTask(opts: HandTaskOptions): Promise<HandTaskResult> {
   const completion = opts.completion ?? 'code-pr';
   const now = (opts.now ?? (() => new Date()))();
   const id = opts.id ?? `${TASK_CARD_PREFIX}${now.toISOString().slice(0, 10).replaceAll('-', '')}-${randomBytes(3).toString('hex')}`;
+  if (opts.checklistId) {
+    const priorCards = withFileLockSync(`${path}.lock`, () =>
+      Object.values(readState(path).tasks ?? {}).filter((card) => card.id !== id));
+    const recall = priorLessonsFor(opts.checklistId, priorCards);
+    if (recall.block) {
+      text = `${text}\n\n${recall.block}`;
+    }
+    try {
+      debug.log('task-agent', 'recall-inject-filled', { card: id, checklistId: opts.checklistId,
+        priorCards: recall.priorCards, items: recall.items, chars: recall.chars, truncated: recall.truncated });
+    } catch { /* fail-soft observation */ }
+  }
   let project: TaskCard['project'];
   let targetIsGit: boolean | null = null;
   if (opts.project) {
@@ -1449,17 +1463,19 @@ export async function handTask(opts: HandTaskOptions): Promise<HandTaskResult> {
   // Injected launchers are test seams and opt in explicitly at the contract test.
   if (opts.live && opts.preflightGoalDoneBoundary && !selectionFailure && tierSplitBlocked === undefined && move?.kind === 'launch') {
     readTaskAgentState(path);
-    const drafted = draftMissingGoalDoneBoundary(text, targetPaths);
+    const metadataBeforeDraft = metadataText;
+    const drafted = draftMissingGoalDoneBoundary(metadataText, targetPaths);
     if (drafted.added.length > 0) {
-      text = drafted.document;
+      metadataText = drafted.document;
+      text = `${text}${drafted.document.slice(metadataBeforeDraft.length)}`;
       card = { ...card, text };
       move = graphRun && graphRunPath ? { kind: 'launch' as const, command: ['graph', 'run', graphRunPath], reason: `조합 launcher graph-run — ${graphRun.file}` } : nextMoveFor(card, opts.landed);
       try { debug.log('task-agent.hand', 'boundary-autodrafted', { taskId: id, labels: drafted.added, targetPathCount: targetPaths.length }); } catch { /* fail-soft */ }
     }
-    const { missing } = inspectGoalDoneBoundary(text);
+    const { missing } = inspectGoalDoneBoundary(metadataText);
     if (missing.length > 0) throw new Error(`goal-revision-required: 완료 경계 누락 ${missing.join(' · ')}`);
     // ENTRANCE-EVIDENCE-COMMAND-ONLY — 존재 검사와 구분된 형태 판정: 증거 명령 줄은 명령 원문만 받는다.
-    const formViolations = goalEvidenceCommandFormViolations(text);
+    const formViolations = goalEvidenceCommandFormViolations(metadataText);
     if (formViolations.length > 0) {
       throw new Error(`goal-revision-required: 완료 경계 증거 명령은 명령 원문이어야 한다 ${formViolations.join(' · ')} — 증거 명령 줄에 설명 접미(예: → 0 fail)나 백틱 장식을 붙이지 말고 명령만 적은 뒤 다시 넘기세요`);
     }
@@ -1520,6 +1536,7 @@ export async function handTask(opts: HandTaskOptions): Promise<HandTaskResult> {
         runId,
         input: { ask: text, context: project ? { worktree: project.target } : {}, prior: {} },
         quiet: true,
+        deps: { growthScope: 'task-agent' },
       });
     } catch (error) {
       // 조합 파일·대상 node가 없으면 runGraph 가 구체 사유로 던진다 — 임의 성공 처리하지 않는다.
@@ -1705,13 +1722,15 @@ export async function handTask(opts: HandTaskOptions): Promise<HandTaskResult> {
   writeCard(path, launched);
   // INFLIGHT-REGISTRY — 출발 때 맥락을 남긴다(머지 때 같은 파일 줄의 의도를 스마트 머지가 읽는다 · 착지하면 지운다).
   try {
-    const [head = '', ...rest] = text.split(/\r?\n/);
+    // Preserve any completion-boundary draft while keeping the recall-only suffix out of intent/path metadata.
+    const inflightText = metadataText;
+    const [head = '', ...rest] = inflightText.split(/\r?\n/);
     const intentLines = (/^\s*(?:대상\s*경로|target\s*paths?)\s*[:：]/i.test(head) ? rest : [head, ...rest])
       .filter((line) => !/^\s*(?:[-*]\s*)?완료 경계 (?:코드|실물|증거 명령)\s*:/.test(line));
     registerInflight({
       runId: boundRunId ?? runId, cell: card.checklistId ?? card.id, cardId: card.id,
-      intent: intentLines.join(' ').trim() || text,
-      files: parseAskTargetPathHints(text),
+      intent: intentLines.join(' ').trim() || inflightText,
+      files: parseAskTargetPathHints(inflightText),
     }, { path: join(dirname(path), INFLIGHT_REGISTRY_FILE), ...(opts.now ? { now: opts.now } : {}) });
   } catch (error) {
     try { debug.log('pr-tool.inflight', 'register-failed', { taskId: id, error: String((error as Error)?.message ?? error).slice(0, 200) }, { level: 'warn' }); } catch { /* fail-soft */ }

package/src/task-orchestrator/surfaces/pod-artifact-return.ts

@@ -1,7 +1,7 @@
 import { lstatSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { gunzipSync } from 'node:zlib';
-import { debug } from '../../debug/log.js';
+import { debug, redactSecretText } from '../../debug/log.js';
 import { getDefaultLogStore, type LogStore } from '../../mss/logging/log-store.js';
 import { fromJsonl, type LogRecord } from '../../mss/logging/record.js';
 
@@ -118,6 +118,24 @@ export function podNoResultDiagnostic(ledger: string): string | null {
   return stage ? `child terminal result missing; last ledger stage=${stage}; round=${round ?? 'unknown'}; mustFix=${mustFix ?? 'unknown'}` : null;
 }
 
+/** A failed child can lose its terminal JSON line after recording the actionable PR-open error. */
+export function podNoResultChildError(ledger: string): string | null {
+  let error = '';
+  for (const line of ledger.split(/\r?\n/)) {
+    try {
+      const entry = JSON.parse(line) as { event?: unknown; data?: Record<string, unknown> };
+      if (entry?.event === 'pr-open-failed' && entry.data && typeof entry.data === 'object') {
+        error = typeof entry.data.error === 'string' ? entry.data.error : '';
+      }
+      // A later successful PR open proves the earlier guard failure was recovered.
+      if (entry?.event === 'pr-opened') error = '';
+    } catch { /* malformed lines do not replace a valid failure row */ }
+  }
+  if (!error) return null;
+  const line = redactSecretText(error).replace(/[\r\n\t\x00-\x1f\x7f]+/g, ' ').replace(/\s+/gu, ' ').trim();
+  return line.length > 240 ? `${line.slice(0, 228)}…[truncated]` : line;
+}
+
 /** Import valid JSONL log records into the launching host store, with durable per-job line receipts. */
 export function importPodLogs(bytes: Buffer, job: string, store: LogStore | null = getDefaultLogStore()): { imported: number; skipped: number } {
   if (!store) return { imported: 0, skipped: 0 };

package/src/task-orchestrator/surfaces/pod-failure-reason.ts

@@ -139,6 +139,18 @@ export interface PodProviderFailureFact {
   readonly httpStatusCode?: number;
 }
 
+export interface PodFirstLlmFact {
+  readonly status: 'started' | 'ok' | 'error';
+  readonly provider: string;
+  readonly model: string;
+  readonly accountName: string | null;
+  readonly startedAt: string;
+  readonly respondedAt?: string;
+  readonly httpStatus?: number;
+  readonly errorFirstLine?: string;
+  readonly firstToolCallAt?: string;
+}
+
 export const POD_EXIT_CLASSES = ['oom-killed', 'deadline-exceeded', 'gh-login-failed', 'pod-secret', 'ask-reprompt', 'provider-error', 'child-unconverged', 'child-error', 'no-result-line', 'unknown'] as const;
 
 export type PodExitClass = typeof POD_EXIT_CLASSES[number];
@@ -163,6 +175,8 @@ export function podChildEvidenceLedgerRow(input: {
   podTermination?: PodTermination | null;
   /** OBS-GAP-BATCH-1030 — 실패 행에만 붙는 두 스칼라(provider · HTTP status). 없으면 종전 행 그대로. */
   providerFailure?: PodProviderFailureFact | null;
+  /** POD-CHILD-FIRST-LLM-CALL-OBS — collected child-ledger first-call timeline. */
+  firstLlm?: PodFirstLlmFact | null;
 }): Record<string, unknown> | null {
   const { result } = input;
   const persist = input.state === 'failed' || input.state === 'aborted' || input.noResultLogEvidence != null
@@ -185,6 +199,7 @@ export function podChildEvidenceLedgerRow(input: {
     job: input.job,
     ...(input.providerFailure?.provider ? { provider: input.providerFailure.provider } : {}),
     ...(input.providerFailure?.httpStatusCode !== undefined ? { httpStatusCode: input.providerFailure.httpStatusCode } : {}),
+    ...(input.firstLlm ? { firstLlm: input.firstLlm } : {}),
     ...(input.podTermination ? { podTermination: input.podTermination } : {}),
     ...(childResult && Object.keys(childResult).length > 0 ? { childResult } : {}),
   };