elanous 0.2.5 → 0.2.7

package/graphs/release/release-loop.yaml

@@ -1,4 +1,5 @@
 # Inputs gateRemote (SSH host, e.g. node-b) and gateRemoteMirror (bare mirror path, default ~/mirror/elanous-agent.git): run gate sweeps in temporary remote clones without a matching caller checkout; omit gateRemote for local execution.
+# Optional opsHosts: ['local', '<ssh-host>']; omit for no operational upgrades. Optional internalDist publishes the release checkout to the internal feed first; opsRestart: true explicitly allows daemon restarts.
 graph_id: release-loop
 loop:
   title: 릴리스
@@ -12,34 +13,42 @@ terminal_nodes: [done, failed]
 nodes:
   - { node_id: version-release, kind: git, recipe: 'cmd:version-release', max_visits: 1 }
   - { node_id: cutoff, kind: judge, recipe: 'cmd:cutoff', max_visits: 1 }
+  - { node_id: checklist-gate, kind: gate, recipe: 'cmd:checklist-gate', max_visits: 1 }
   - { node_id: gate, kind: gate, recipe: 'cmd:gate', max_visits: 1, notify: start }
   - { node_id: pwa, kind: gate, recipe: 'cmd:pwa', max_visits: 1, notify: start }
   - { node_id: prepare, kind: agent, recipe: 'cmd:prepare', max_visits: 1, notify: start }
   - { node_id: upgrade, kind: gate, recipe: 'cmd:upgrade', max_visits: 1 }
   - { node_id: tui, kind: gate, recipe: 'cmd:tui', max_visits: 1 }
   - { node_id: docs, kind: agent, recipe: 'cmd:docs', max_visits: 1 }
+  - { node_id: known-issues, kind: agent, recipe: 'cmd:known-issues', max_visits: 1 }
   - { node_id: notes-check, kind: gate, recipe: 'cmd:notes-check', max_visits: 1 }
   - { node_id: auto-approve, kind: gate, recipe: 'cmd:auto-approve', max_visits: 1 }
   - { node_id: approve-publish, kind: hitl, recipe: 'approval:publish', max_visits: 1 }
   - { node_id: publish, kind: git, recipe: 'cmd:publish-command', max_visits: 1 }
+  - { node_id: npm-publish, kind: git, recipe: 'cmd:npm-publish', max_visits: 1 }
   - { node_id: docs-land, kind: git, recipe: 'cmd:docs-land', max_visits: 1 }
   - { node_id: verify, kind: gate, recipe: 'cmd:verify', max_visits: 1 }
+  - { node_id: ops-upgrade, kind: agent, recipe: 'cmd:ops-upgrade', max_visits: 1 }
   - { node_id: version-dev-bump, kind: git, recipe: 'cmd:version-dev-bump', max_visits: 1 }
   - { node_id: done, kind: gate, max_visits: 1 }
   - { node_id: failed, kind: gate, max_visits: 1 }
 edges:
   - { from: version-release, on: outcome, map: { ok: cutoff, fail: failed, error: failed } }
-  - { from: cutoff, on: outcome, map: { ok: gate, fail: failed, error: failed } }
+  - { from: cutoff, on: outcome, map: { ok: checklist-gate, fail: failed, error: failed } }
+  - { from: checklist-gate, on: outcome, map: { ok: gate, fail: failed, error: failed } }
   - { from: gate, on: outcome, map: { ok: pwa, fail: failed, error: failed } }
   - { from: pwa, on: outcome, map: { ok: prepare, fail: failed, error: failed } }
   - { from: prepare, on: outcome, map: { ok: upgrade, fail: failed, error: failed } }
   - { from: upgrade, on: outcome, map: { ok: tui, fail: failed, error: failed } }
   - { from: tui, on: outcome, map: { ok: docs, fail: failed, error: failed } }
-  - { from: docs, on: outcome, map: { ok: notes-check, fail: failed, error: failed } }
+  - { from: docs, on: outcome, map: { ok: known-issues, fail: failed, error: failed } }
+  - { from: known-issues, on: outcome, map: { ok: notes-check, fail: failed, error: failed } }
   - { from: notes-check, on: outcome, map: { ok: auto-approve, fail: failed, error: failed } }
   - { from: auto-approve, on: outcome, map: { ok: publish, fail: approve-publish, error: approve-publish } }
   - { from: approve-publish, on: outcome, map: { ok: publish, fail: failed } }
-  - { from: publish, on: outcome, map: { ok: docs-land, fail: failed, error: failed } }
+  - { from: publish, on: outcome, map: { ok: npm-publish, fail: failed, error: failed } }
+  - { from: npm-publish, on: outcome, map: { ok: docs-land, fail: docs-land, error: docs-land } }
   - { from: docs-land, on: outcome, map: { ok: verify, fail: failed, error: failed } }
-  - { from: verify, on: outcome, map: { ok: version-dev-bump, fail: failed, error: failed } }
+  - { from: verify, on: outcome, map: { ok: ops-upgrade, fail: failed, error: failed } }
+  - { from: ops-upgrade, on: outcome, map: { ok: version-dev-bump, fail: version-dev-bump, error: version-dev-bump } }
   - { from: version-dev-bump, on: outcome, map: { ok: done, fail: failed, error: failed } }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "elanous",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "Self-healing coding harness where eyes, hands, and memory all turn on one sentence — it authors its own goals, implements them in isolated worktrees, and reviews its own work.",
   "license": "Apache-2.0",
   "author": "Elanvital AI",
@@ -11,8 +11,8 @@
   },
   "type": "module",
   "bin": {
-    "elanous": "./bin/elanous.mjs",
-    "eln": "./bin/elanous.mjs"
+    "elanous": "./bin/elanous.cjs",
+    "eln": "./bin/elanous.cjs"
   },
   "engines": {
     "bun": ">=1.3.5"
@@ -111,7 +111,6 @@
     "remark-rehype": "^11.1.2",
     "sharp": "^0.34.5",
     "shiki": "^4.0.2",
-    "telegram": "^2.26.22",
     "typescript": "^5.7.0",
     "unified": "^11.0.5",
     "web-push": "^3.6.7",
@@ -119,7 +118,8 @@
     "yaml": "^2.8.3"
   },
   "optionalDependencies": {
-    "node-pty": "^1.1.0"
+    "node-pty": "^1.1.0",
+    "telegram": "^2.26.22"
   },
   "devDependencies": {
     "@types/bun": "^1.2.0",

package/plugins/card-followup/README.md

@@ -0,0 +1,42 @@
+# card-followup
+
+명함 사진 한 장으로 사람·회사 조사, 타겟 판정, 접근 전략, 로컬 CRM 한 줄과 이에 맞는 팔로업 초안을 만듭니다. 메일과 LinkedIn 메시지는 보내지 않습니다.
+
+## 실행 명령
+
+```bash
+elanous graph run plugins/card-followup/graphs/card-followup.yaml --input '<json>' --json
+```
+
+## 입력
+
+- `image` (필수): 명함 사진의 절대 경로. `png`, `jpg`, `jpeg`, `heic`만 허용합니다. `~/`는 홈 경로로 펼칩니다.
+- `context` (선택): 어디서 만났고 무슨 이야기를 했는지 한두 줄.
+- `sender` (선택): 보내는 사람 이름·회사. 기본값은 비움입니다.
+- `language` (선택): `ko` 또는 `en`. 생략하면 명함에서 읽은 언어를 사용합니다.
+- `outDir` (선택): 보고서 출력 절대 경로. 생략하면 그래프 런 디렉터리를 사용합니다.
+- `offer` (선택): 우리 제품과 대상 고객을 설명하는 한두 줄. 없으면 적합도 점수는 `null`, 라벨은 `unknown`이며 접근 전략과 초안은 계속 작성합니다.
+- `crm` (선택): 로컬 CRM CSV의 절대 경로. 기본값은 `<outDir>/crm.csv`입니다.
+
+## 산출
+
+- `followup.md`: 맨 위에 사람·회사 분석, CRM 한 줄, 타겟 판정(점수·라벨·근거), 접근 전략(대상·문제·제안·채널·시점), 메일·LinkedIn 초안을 순서대로 보여줍니다. 그 아래에 출처와 경고가 있습니다.
+- `followup.json`: `fit`, `approach`, `nextAction`, `crm` 경로 및 초안의 구조화 데이터. `sent`는 항상 `false`입니다. 타겟 판정의 `S#` 이유는 번호뿐 아니라 해당 출처의 제목·본문 조각과 주장 내용도 재검증합니다. `assumption`은 적합성 근거로 세지 않고, 실제 명함·만남 맥락·제안·조사 출처에 뒷받침되는 이유만 남깁니다. 재작성 후에도 유효한 이유가 두 개 미만이면 점수는 `null`, 라벨은 `unknown`입니다. 접근 전략은 주장별 근거와 전체 출처 원문을 대조하고, 다음 행동의 확인되지 않은 고객 약속·확정 일정은 재작성 후에도 남으면 산출을 중단합니다. 다음 행동·기한은 제안 또는 내부 목표이지 고객 확약이 아닙니다.
+- `crm.csv` (또는 지정한 `crm` 경로): `name,company,title,email,interest,met_context,fit_score,fit_label,next_action,due,updated_at` 헤더의 로컬 CSV. 같은 이메일(없으면 이름+회사)은 갱신하고 다른 연락처는 추가합니다. 적합도 점수 내림차순으로 저장하며 미판정 점수는 맨 뒤입니다. 쉼표·따옴표·줄바꿈이 포함된 값은 CSV 인용 규칙으로 저장합니다. 외부 CRM과 동기화하지 않습니다.
+
+## 개인정보 주의
+
+명함 사진과 연락처는 그래프 런 상태에 남습니다. 비공개 경로만 사용하고 공유하지 마세요.
+
+어디로 나가나:
+- **명함 이미지** → `codex`(설치된 codex CLI 의 모델)가 읽는다.
+- **이름·회사·사이트** → `elanous research` 가 웹 검색어로 쓴다.
+- **명함 필드·만남 맥락·offer·조사 결과** → `elanous ask` 로 설정된 LLM 에 보내 판정·전략·초안을 만든다.
+- **CRM(`crm.csv`)·보고서** → 이 기계의 파일에만 쓴다. 외부 CRM 과 동기화하지 않고, 메일·LinkedIn 을 보내지 않는다.
+
+## 릴리스 노트
+
+- 한 줄: feat — card-followup turns one business card into a sales plan: a local CRM row sorted by fit, a target-fit score with three sourced reasons, an approach strategy and matching drafts, all on one report
+- 종류: feat
+- 문서: plugins/card-followup/README.md
+- 대상: next

package/plugins/card-followup/examples/card-sample.json

@@ -0,0 +1,7 @@
+{
+  "image": "/absolute/path/to/fictional-card.png",
+  "context": "가상 행사에서 가상 제품 데모를 짧게 이야기했습니다.",
+  "sender": "가상 발신자 · 가상 발신 회사",
+  "language": "ko",
+  "outDir": "/absolute/path/to/private-output"
+}

package/plugins/card-followup/graphs/card-followup.yaml

@@ -0,0 +1,18 @@
+graph_id: card-followup
+version: 1
+entry_node: read-card
+terminal_nodes: [done, failed]
+nodes:
+  - { node_id: read-card, kind: agent, recipe: 'cmd:read-card', max_visits: 1 }
+  - { node_id: research, kind: agent, recipe: 'cmd:research', max_visits: 1 }
+  - { node_id: strategy, kind: agent, recipe: 'cmd:strategy', max_visits: 1 }
+  - { node_id: draft, kind: agent, recipe: 'cmd:draft', max_visits: 1 }
+  - { node_id: report, kind: agent, recipe: 'cmd:report', max_visits: 1 }
+  - { node_id: done, kind: gate, max_visits: 1 }
+  - { node_id: failed, kind: gate, max_visits: 1 }
+edges:
+  - { from: read-card, on: outcome, map: { ok: research, fail: failed } }
+  - { from: research, on: outcome, map: { ok: strategy, fail: failed } }
+  - { from: strategy, on: outcome, map: { ok: draft, fail: failed } }
+  - { from: draft, on: outcome, map: { ok: report, fail: failed } }
+  - { from: report, on: outcome, map: { ok: done, fail: failed } }

package/plugins/card-followup/graphs/recipes.yaml

@@ -0,0 +1,16 @@
+read-card:
+  command: 'bun "$ELANOUS_GRAPH_DIR/run-step.ts" read-card'
+  timeout_ms: 120000
+research:
+  command: 'bun "$ELANOUS_GRAPH_DIR/run-step.ts" research'
+  timeout_ms: 120000
+# strategy·draft make up to four LLM calls (write ⊕ verify, one retry) — 61–80 s clean, a retry doubles it (10-01 live: 120 s timeout hit).
+strategy:
+  command: 'bun "$ELANOUS_GRAPH_DIR/run-step.ts" strategy'
+  timeout_ms: 300000
+draft:
+  command: 'bun "$ELANOUS_GRAPH_DIR/run-step.ts" draft'
+  timeout_ms: 300000
+report:
+  command: 'bun "$ELANOUS_GRAPH_DIR/run-step.ts" report'
+  timeout_ms: 30000

package/plugins/card-followup/graphs/run-step.ts

@@ -0,0 +1,276 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, extname, isAbsolute, join, basename } from 'node:path';
+import { buildStrategy, crmRow, upsertCrm } from './sales-strategy.js';
+
+type Data = Record<string, unknown>;
+const object = (v: unknown): Data => v && typeof v === 'object' && !Array.isArray(v) ? v as Data : {};
+const text = (v: unknown): string => typeof v === 'string' ? v.trim() : '';
+const fields = ['name', 'title', 'company', 'email', 'phone', 'url', 'linkedin', 'language'] as const;
+const clean = (v: unknown) => text(v) || null;
+const line = (v: unknown) => text(v).replace(/[\r\n|]/g, ' ');
+
+// Find the first balanced object, respecting JSON string escapes and braces in quoted text.
+function firstObject(raw: string): Data {
+  for (let start = raw.indexOf('{'); start !== -1; start = raw.indexOf('{', start + 1)) {
+    let depth = 0, quoted = false, escaped = false;
+    for (let i = start; i < raw.length; i++) {
+      const ch = raw[i];
+      if (quoted) {
+        if (escaped) escaped = false;
+        else if (ch === '\\') escaped = true;
+        else if (ch === '"') quoted = false;
+      } else if (ch === '"') quoted = true;
+      else if (ch === '{') depth++;
+      else if (ch === '}' && --depth === 0) {
+        try {
+          const parsed = JSON.parse(raw.slice(start, i + 1));
+          if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) return parsed as Data;
+        } catch { /* try the next object */ }
+        break;
+      }
+    }
+  }
+  throw new Error(`JSON 객체 없음: ${raw.slice(0, 200)}`);
+}
+
+async function cli(bin: string, args: string[]): Promise<string> {
+  const child = Bun.spawn([bin, ...args], { stdout: 'pipe', stderr: 'pipe', env: process.env });
+  const [stdout, stderr, status] = await Promise.all([new Response(child.stdout).text(), new Response(child.stderr).text(), child.exited]);
+  if (status !== 0) throw new Error(`${args[0]} 실패: ${(stderr || stdout).slice(0, 200)}`);
+  return stdout;
+}
+
+function absolute(path: string, label: string): string {
+  const expanded = path.startsWith('~/') ? join(homedir(), path.slice(2)) : path;
+  if (!isAbsolute(expanded)) throw new Error(`${label}: 절대 경로 필요`);
+  return expanded;
+}
+
+// The page's own <title> and meta/og description — the company's words about itself. 5 s cap; null on any failure.
+async function readPage(url: string): Promise<{ title: string; description: string } | null> {
+  try {
+    const res = await fetch(url, { signal: AbortSignal.timeout(5000), redirect: 'follow', headers: { 'user-agent': 'Mozilla/5.0 card-followup' } });
+    if (!res.ok || !(res.headers.get('content-type') ?? '').includes('html')) return null;
+    const html = (await res.text()).slice(0, 200_000);
+    const decode = (v: string) => v.replace(/&amp;/g, '&').replace(/&lt;/g, '<').replace(/&gt;/g, '>').replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/\s+/g, ' ').trim();
+    const meta = (key: string) => {
+      for (const tag of html.match(/<meta\b[^>]*>/gi) ?? []) {
+        if (new RegExp(`(?:name|property)=["']${key}["']`, 'i').test(tag)) {
+          const content = /content=["']([^"']*)["']/i.exec(tag)?.[1];
+          if (content) return decode(content);
+        }
+      }
+      return '';
+    };
+    const title = decode(/<title[^>]*>([\s\S]*?)<\/title>/i.exec(html)?.[1] ?? '') || meta('og:title');
+    const description = meta('description') || meta('og:description');
+    return title && description ? { title, description } : null;
+  } catch { return null; }
+}
+
+function sources(raw: string): { title: string; url: string; snippet: string }[] {
+  const data = object(JSON.parse(raw));
+  // research --json exposes the human-readable result in `output`.
+  const output = text(data.output);
+  return output.split('\n').flatMap(row => {
+    const match = row.match(/\[([^\]]+)\]\((https?:\/\/[^\s)]+)\)/) ?? row.match(/(https?:\/\/[^\s)]+)/);
+    if (!match) return [];
+    // A logo or thumbnail row («[![](…)](…png)») is not a source.
+    if (/^\s*[-*]?\s*\[?!\[/.test(row) || /\.(?:png|jpe?g|gif|svg|webp)(?:[?#]|$)/i.test(match[2] ?? match[1]!)) return [];
+    return [{ title: match[2] ? match[1]! : row.replace(match[0], '').trim(), url: match[2] ?? match[1]!, snippet: row.replace(match[0], '').trim() }];
+  });
+}
+
+const contextFile = process.env.ELANOUS_GRAPH_CONTEXT;
+if (!contextFile) throw new Error('ELANOUS_GRAPH_CONTEXT 필요');
+const context = object(JSON.parse(readFileSync(contextFile, 'utf8')));
+const input = object(context.input);
+const outputs = object(context.outputs);
+const step = process.argv[2];
+const elanous = process.env.CARD_FOLLOWUP_ELANOUS_BIN || 'elanous';
+const codex = process.env.CARD_FOLLOWUP_CODEX_BIN || 'codex';
+const result = (data: Data) => console.log(JSON.stringify(data.outcome ? data : { outcome: 'ok', ...data }));
+
+try {
+  if (step === 'read-card') {
+    const image = absolute(text(input.image), 'image');
+    if (!/\.(png|jpe?g|heic)$/i.test(extname(image))) throw new Error('image: png/jpg/heic 필요');
+    if (!existsSync(image)) throw new Error('image: 파일 없음');
+    // The prompt goes before `-i`: `--image` takes several files, so a prompt after it is read as another image
+    // and codex answers «No prompt provided» (10-01 live run). The graph may run outside a git checkout.
+    const raw = await cli(codex, ['exec', '--skip-git-repo-check', '명함 사진에서 읽을 수 있는 값만 JSON 객체로 출력하라: name, title, company, email, phone, url, linkedin, language(ko 또는 en). 빈 칸은 null. 추측 금지.', '-i', image]);
+    const card = firstObject(raw);
+    const normalized = Object.fromEntries(fields.map(field => [field, clean(card[field])]));
+    result({ card: normalized, image });
+  } else if (step === 'research') {
+    const read = object(outputs['read-card']);
+    const card = object(read.card ?? read);
+    const company = text(card.company), name = text(card.name);
+    if (!company && !name) throw new Error('조사할 이름·회사 없음');
+    // The card's own site is the strongest query: «Elanvital AI» alone ranks vital.ai and elanvital.co above elanvital.ai
+    // (10-01 dry run: 19 hits, none from the company), while «elanvital.ai» returns the site itself.
+    const siteQuery = text(card.url).replace(/^https?:\/\//, '').replace(/^www\./, '').split('/')[0]!.toLowerCase();
+    const queries = [...new Set([...(siteQuery.includes('.') ? [siteQuery] : []), company || name, [name, company].filter(Boolean).join(' ')])];
+    const hits = (await Promise.all(queries.map(query => cli(elanous, ['research', '--json', '--limit', '5', query])))).flatMap(sources);
+    const unique = [...new Map(hits.map(hit => [hit.url, hit])).values()];
+    // Only the exact result text may be reported as a company fact, never a model-invented summary.
+    // Put results that name the card's company (or its site) first; if none does, say nothing as a summary —
+    // the first search hit was another company's page on the 10-01 live run («Vital AI» for Elanvital AI).
+    const site = text(card.url).replace(/^https?:\/\//, '').replace(/^www\./, '').split('/')[0]!.toLowerCase();
+    const companyKey = company.toLowerCase().replace(/[^a-z0-9가-힣]/g, '');
+    const squash = (value: string) => value.toLowerCase().replace(/[^a-z0-9가-힣]/g, '');
+    const nameKey = squash(name);
+    const hostOf = (url: string) => { try { return new URL(url).hostname.toLowerCase().replace(/^www\./, ''); } catch { return ''; } };
+    // The site counts by host («vercel.com», «docs.vercel.com»), never by substring — «someone.vercel.app» is a stranger's page.
+    // The company counts by title only, and a title carrying the contact's name counts only on the company's own site:
+    // a search cannot tell this Alex Rivera from another.
+    const matches = (hit: { title: string; url: string }) => {
+      const host = hostOf(hit.url);
+      const onSite = !!site && (host === site || host.endsWith(`.${site}`));
+      if (onSite) return true;
+      // A bare-link row has the link as its «title» — that is a host, not a name.
+      const title = /^https?:\/\//i.test(hit.title.trim()) ? '' : squash(hit.title);
+      if (nameKey.length >= 3 && title.includes(nameKey)) return false;
+      return companyKey.length >= 3 && title.includes(companyKey);
+    };
+    // Only hits that name the card's company or site are kept: a name search also returns other people with the
+    // same name (10-01 live run: strangers' LinkedIn, Instagram and IMDb pages listed as this contact's sources).
+    // A site hit often comes back as a bare link with no title or snippet («https://elanvital.ai» · «-»): nothing a
+    // strategy can cite, and the verifier rejects claims resting on it (10-01 dry run: strategy failed twice on «who»).
+    // Read the page's own <title> and description once instead, and keep one row per host.
+    const thin = (hit: { title: string }) => /^https?:\/\//i.test(hit.title.trim()) || hostOf(`https://${hit.title.trim()}`) === hit.title.trim().toLowerCase();
+    const seenHost = new Set<string>();
+    const relevant: { title: string; url: string; snippet: string }[] = [];
+    for (const hit of unique.filter(matches)) {
+      const host = hostOf(hit.url);
+      if (!thin(hit)) { relevant.push(hit); continue; }
+      if (seenHost.has(host)) continue;
+      seenHost.add(host);
+      const page = await readPage(hit.url);
+      if (page) relevant.push({ title: page.title, url: hit.url, snippet: page.description });
+    }
+    result({ summary: relevant.length ? relevant[0]!.title : null, news: relevant.slice(1, 3).map(hit => hit.title), sources: relevant, dropped: unique.length - relevant.length });
+  } else if (step === 'strategy') {
+    const read = object(outputs['read-card']);
+    const card = object(read.card ?? read);
+    const research = object(outputs.research);
+    const ask = async (payload: Data): Promise<Data> => {
+      const response = JSON.parse(await cli(elanous, ['ask', '--json', JSON.stringify(payload)])) as Data;
+      return firstObject(typeof response.reply === 'string' ? response.reply : JSON.stringify(response));
+    };
+    const strategy = await buildStrategy({ card, research, context: text(input.context), offer: text(input.offer), ask });
+    const fallback = dirname(contextFile).endsWith('.json.contexts') ? dirname(contextFile).slice(0, -'.json.contexts'.length) : dirname(contextFile);
+    const outDir = input.outDir === undefined ? fallback : absolute(text(input.outDir), 'outDir');
+    const crm = input.crm === undefined ? join(outDir, 'crm.csv') : absolute(text(input.crm), 'crm');
+    const row = crmRow(card, strategy.fit, strategy.approach, strategy.nextAction, text(input.context), new Date());
+    upsertCrm(crm, row);
+    result({ ...strategy, crm, crmRow: row });
+  } else if (step === 'draft') {
+    const read = object(outputs['read-card']);
+    const card = object(read.card ?? read);
+    const research = object(outputs.research);
+    const approach = object(object(outputs.strategy).approach);
+    const evidence = (Array.isArray(research.sources) ? research.sources.map(object) : [])
+      .filter(source => /^https?:\/\//.test(text(source.url)));
+    // A card reader may answer «English»/«Korean»/«한국어» — fold them to the two codes the draft step writes in.
+    const languageCode = (value: string) => ({ english: 'en', en: 'en', korean: 'ko', ko: 'ko', '한국어': 'ko', '영어': 'en' } as Record<string, string>)[value.toLowerCase()] ?? value;
+    const language = languageCode(text(input.language) || text(card.language) || 'ko');
+    if (!['ko', 'en'].includes(language)) throw new Error('language: ko 또는 en 필요');
+    const contextLine = text(input.context);
+    const numbered = evidence.map((source, index) => ({ id: `S${index + 1}`, title: text(source.title), snippet: text(source.snippet) }));
+    const marker = /\s*\[S(\d+)\]/g;
+    const strip = (value: string) => value.replace(marker, '').trim();
+    const sentencesOf = (value: string) => value.split(/(?<=[.!?。！？])\s+|\n+/).map(s => s.trim()).filter(Boolean);
+    const ask = async (payload: Data): Promise<Data> => {
+      const response = JSON.parse(await cli(elanous, ['ask', '--json', JSON.stringify(payload)])) as Data;
+      return firstObject(typeof response.reply === 'string' ? response.reply : JSON.stringify(response));
+    };
+    // A Korean meeting note on an English card used to be pasted verbatim into the English mail
+    // («Hi Joosung, 마케터의 밤에서 인사.» · 10-01 dry run). Across languages the note is translated, not copied.
+    const crossLanguage = language === 'en' && /[가-힣]/.test(contextLine);
+    const contextRule = crossLanguage
+      ? 'context 는 한국어 메모다 — 원문을 그대로 넣지 말고 영어로 옮겨 body 에서 한 번 언급하라. subject·body·linkedin·question 에 한글을 쓰지 말 것. '
+      : 'context가 있으면 body에 그 문구를 그대로 한 번 포함. ';
+    const instruction = 'JSON 객체만 출력: subject, body (120~200자 · [S#] 표시는 글자 수에서 뺀다), linkedin (300자 이하), question. ' + contextRule
+      + '명함 필드(이름·직함·회사)와 context 는 출처 없이 써도 된다. 그 밖의 회사·사람·시장 사실은 evidence 에 있는 것만 쓰고, 그 문장 끝에 근거 번호를 [S1] 처럼 붙인다. '
+      + 'approach.problem·proposal·channel 에 맞춰 메일과 LinkedIn 초안을 작성하되, 전략 문구도 회사·사람·시장 사실이면 위의 문장별 근거 규칙을 반드시 따를 것. '
+      + 'evidence 에 없는 사실(매출·순위·규모·수상·최근 소식 등)은 쓰지 말 것. email이 없으면 메일 주소를 만들지 말 것. 어떤 메시지도 보내지 말 것.';
+    let feedback = '';
+    let accepted: { warnings: string[]; draft: Data; facts: { text: string; url: string }[] } | undefined;
+    let lastProblem = '';
+    for (let attempt = 0; attempt < 3 && !accepted; attempt++) {
+      const draft = await ask({ task: 'draft', instruction: instruction + feedback, card, context: contextLine, sender: text(input.sender), language, evidence: numbered, approach: { problem: text(approach.problem), proposal: text(approach.proposal), channel: text(approach.channel) } });
+      const parts = { subject: text(draft.subject), body: text(draft.body), linkedin: text(draft.linkedin), question: text(draft.question) };
+      if (!parts.subject || !parts.body || !parts.linkedin || !parts.question) { lastProblem = '초안 필수 필드 없음'; feedback = ' 이전 응답에 필드가 빠졌다.'; continue; }
+      const body = strip(parts.body), linkedin = strip(parts.linkedin);
+      const shape: string[] = [];
+      if (body.length < 120 || body.length > 200) shape.push(`메일 본문 120~200자 범위 밖(${body.length}자)`);
+      // LinkedIn 한도는 한 번 다시 부르고, 그래도 넘으면 막지 않고 보고서에 경고로 남긴다(보내기 전 사람이 고친다).
+      const linkedinOver = linkedin.length > 300;
+      if (linkedinOver && attempt === 0) shape.push(`LinkedIn 300자 초과(${linkedin.length}자)`);
+      if (contextLine && !crossLanguage && !body.includes(contextLine)) shape.push('메일 본문에 context 없음');
+      if (crossLanguage && /[가-힣]/.test([parts.subject, body, linkedin, parts.question].join(' '))) shape.push('영어 초안에 한글이 섞였다(context 는 영어로 옮길 것)');
+      const sentences = Object.values(parts).flatMap(sentencesOf).map(sentence => ({
+        raw: sentence, text: strip(sentence), cites: [...sentence.matchAll(marker)].map(match => Number(match[1])),
+      }));
+      const badCite = sentences.find(sentence => sentence.cites.some(n => n < 1 || n > evidence.length));
+      if (badCite) shape.push(`없는 출처 번호: ${badCite.raw}`);
+      if (shape.length) { lastProblem = shape.join(' · '); feedback = ` 이전 초안 문제: ${lastProblem}. 모두 고쳐 다시 작성하라.`; continue; }
+      // Every sentence is judged against the card, the context and only the evidence it cites — a company name alone is identity, not a claim.
+      const verdict = await ask({
+        task: 'verify',
+        instruction: '각 문장에 대해, 받는 사람·그 회사·시장에 관한 사실 주장이 명함 필드, context, 또는 그 문장이 인용한 evidence 로 뒷받침되는지 판정하라. 인사·호칭·명함에 있는 이름/회사/직함 언급·제안·질문·보내는 사람의 의도는 사실 주장이 아니다. JSON 객체만 출력: {"unsupported":[뒷받침 안 되는 문장 번호]}',
+        card, context: contextLine,
+        sentences: sentences.map((sentence, i) => ({ i, text: sentence.text, evidence: sentence.cites.map(n => numbered[n - 1]) })),
+      });
+      if (!Array.isArray(verdict.unsupported)) throw new Error('사실 검증 응답을 읽지 못했다');
+      const unsupported = verdict.unsupported.map(Number).filter(i => Number.isInteger(i) && sentences[i]).map(i => sentences[i]!.text);
+      if (unsupported.length) { lastProblem = `출처 없는 회사 사실: ${unsupported.join(' / ')}`; feedback = ` 이전 초안에서 근거 없는 문장: ${unsupported.join(' / ')}. 그 문장을 빼거나 evidence 로 뒷받침되는 문장으로 바꿔라.`; continue; }
+      const facts = sentences.flatMap(sentence => sentence.cites.map(n => ({ text: sentence.text, url: text(evidence[n - 1]!.url) })));
+      accepted = { warnings: linkedinOver ? ['LinkedIn 문구 300자 초과 — 전송 전 수정 필요'] : [], draft: { subject: strip(parts.subject), body, linkedin, question: strip(parts.question) }, facts: [...new Map(facts.map(f => [`${f.text}\n${f.url}`, f])).values()] };
+    }
+    if (!accepted) throw new Error(lastProblem || '초안 생성 실패');
+    result({ ...accepted.draft, companyFacts: accepted.facts, destination: card.email ? ['email', 'LinkedIn'] : ['LinkedIn'], warnings: accepted.warnings, language });
+  } else if (step === 'report') {
+    const read = object(outputs['read-card']);
+    const card = object(read.card ?? read);
+    const research = object(outputs.research), draft = object(outputs.draft), strategy = object(outputs.strategy);
+    const fit = object(strategy.fit), approach = object(strategy.approach), nextAction = object(strategy.nextAction);
+    if (!text(draft.subject) || !text(draft.linkedin) || !text(draft.question)) throw new Error('초안 없음');
+    const fallback = dirname(contextFile).endsWith('.json.contexts') ? dirname(contextFile).slice(0, -'.json.contexts'.length) : dirname(contextFile);
+    const outDir = input.outDir === undefined ? fallback : absolute(text(input.outDir), 'outDir');
+    const hits = Array.isArray(research.sources) ? research.sources.map(object) : [];
+    const warnings = Array.isArray(draft.warnings) ? draft.warnings.map(text).filter(Boolean) : [];
+    const crm = text(strategy.crm);
+    const row = object(strategy.crmRow);
+    if (!crm || !Array.isArray(fit.reasons) || !text(approach.who) || !text(approach.problem)
+      || !text(approach.proposal) || !text(approach.channel) || !text(approach.timing)
+      || !text(nextAction.what) || !text(nextAction.due) || !('fit_label' in row)) throw new Error('전략 없음');
+    const md = ['# 명함 영업 계획', '', '## ① 사람·회사 분석',
+      `${line(card.name) || '이름 없음'} · ${line(card.title) || '직함 없음'} · ${line(card.company) || '회사 없음'} · ${line(card.email) || '이메일 없음'}`,
+      `조사 요약: ${hits.length ? line(research.summary) : '조사 결과 없음'}`, '',
+      '## ② CRM 한 줄', `파일: ${basename(crm)}`, Object.entries(row).map(([key, value]) => `${key}: ${line(value)}`).join(' · '), '',
+      '## ③ 타겟 판정', `점수: ${fit.score === null ? 'null' : String(fit.score)} · 라벨: ${line(fit.label)}`,
+      ...(fit.reasons as unknown[]).map(v => `- ${line(object(v).text)} (${line(object(v).basis)})`), '',
+      '## ④ 접근 전략', `- 누구에게: ${line(approach.who)}`, `- 어떤 문제: ${line(approach.problem)}`,
+      `- 어떤 제안: ${line(approach.proposal)}`, `- 어느 채널: ${line(approach.channel)}`, `- 언제: ${line(approach.timing)}`,
+      `- 다음 행동: ${line(nextAction.what)} · 기한: ${line(nextAction.due)}`, '',
+      '## ⑤ 메일·LinkedIn 초안', '### 팔로업 메일', `제목: ${line(draft.subject)}`, '', text(draft.body), '',
+      '### LinkedIn 초대 문구', text(draft.linkedin), '', '### 대화 이어 갈 질문', text(draft.question), '',
+      '## 명함 전체 필드', '| 필드 | 값 |', '| --- | --- |', ...fields.map(field => `| ${field} | ${line(card[field]) || 'null'} |`), '',
+      '## 추가 조사 결과', ...((Array.isArray(research.news) ? research.news : []).map(v => `- ${line(v)}`)), '',
+      '## 출처', ...(hits.length ? hits.map(hit => `- ${line(hit.title)} — ${text(hit.url)}`) : ['- 조사 결과 없음']), '',
+      '## 보낼 곳', ...((Array.isArray(draft.destination) ? draft.destination : []).map(v => `- ${line(v)}`)), '',
+      '## 초안의 사실과 출처', ...((Array.isArray(draft.companyFacts) && draft.companyFacts.length ? draft.companyFacts : ['출처를 인용한 문장 없음']).map(v => typeof v === 'string' ? `- ${v}` : `- ${line(object(v).text)} — ${text(object(v).url)}`)),
+      ...(warnings.length ? ['## 경고', ...warnings.map(v => `- ${v}`)] : []), '', '※ 초안만 생성했습니다. 전송은 사람이 결정합니다.', ''].join('\n');
+    mkdirSync(outDir, { recursive: true, mode: 0o700 });
+    const report = { card, research, fit, approach, nextAction, crm, draft, warnings, sent: false };
+    const markdown = join(outDir, 'followup.md'), json = join(outDir, 'followup.json');
+    writeFileSync(markdown, md, { mode: 0o600 });
+    writeFileSync(json, JSON.stringify(report, null, 2) + '\n', { mode: 0o600 });
+    result({ markdown, json });
+  } else throw new Error(`unknown step: ${step}`);
+} catch (error) {
+  result({ outcome: 'fail', reason: error instanceof Error ? error.message : String(error) });
+}