elanous 0.2.7 → 0.2.8

package/scripts/field-feed/lib.ts

@@ -18,6 +18,8 @@ export type FeedDraft = {
   hashtags: string[];
   location: string | null;
   reel: string | null;
+  /** deliver 가 남긴다 — 알림 경로(daemon·direct·failed·off)와 시각. 도착의 근거는 아니고 «어디로 보냈나»다. */
+  delivered?: { at: string; path: 'daemon' | 'direct' | 'failed' | 'off'; revision: number };
 };
 
 export const ENGINE = resolve(import.meta.dir, '../../skills/explainer-video/engine');

package/scripts/install.sh

@@ -177,7 +177,7 @@ for command in "${REQUIRED_COMMANDS[@]}"; do
   fi
 done
 for command in "${HARNESS_COMMANDS[@]}"; do
-  command -v "$command" >/dev/null 2>&1 || echo "⚠️ harness command missing: $command" >&2
+  command -v "$command" >/dev/null 2>&1 || echo "$(t "⚠️ harness command missing: $command (see Next below)" "⚠️ 하니스가 쓰는 명령이 없습니다: $command (아래 «다음» 참고)")" >&2
 done
 
 # bun 의 «실제 실행 파일» — PATH 의 이름이 아니라 bun 이 스스로 말하는 경로(링크를 끝까지 푼 것).
@@ -444,7 +444,7 @@ STEP=1
 # INST1 order: new shell → elanous (first-time setup, which also signs in) → missing tools → harness say.
 case ":$PATH:" in
   *":$PREFIX/bin:"*) ;;
-  *) if [ "$MODIFY_PATH" -eq 1 ]; then echo "  $STEP) $(t "open a new shell (or: source $STARTUP)" "새 셸을 여세요(또는: source $STARTUP)")"; else echo "  $STEP) $(t "add $PREFIX/bin to PATH" "$PREFIX/bin 을 PATH 에 넣으세요")"; fi; STEP=$((STEP + 1)) ;;
+  *) if [ "$START_SETUP" -eq 1 ]; then :; elif [ "$MODIFY_PATH" -eq 1 ]; then echo "  $STEP) $(t "open a new shell (or: source $STARTUP)" "새 셸을 여세요(또는: source $STARTUP)")"; STEP=$((STEP + 1)); else echo "  $STEP) $(t "add $PREFIX/bin to PATH" "$PREFIX/bin 을 PATH 에 넣으세요")"; STEP=$((STEP + 1)); fi ;;
 esac
 if [ "$START_SETUP" -eq 0 ]; then
   echo "  $STEP) $(t "Run: $PREFIX/bin/elanous   # first-time setup (in a new shell: elanous)" "실행: $PREFIX/bin/elanous   # 첫 설정(새 셸에서는: elanous)")"; STEP=$((STEP + 1))
@@ -473,7 +473,7 @@ if ! command -v make >/dev/null 2>&1 || ! command -v c++ >/dev/null 2>&1; then
   if [ -n "$BUILD_HINT" ]; then
     echo "  $STEP) $BUILD_HINT"; STEP=$((STEP + 1))
   fi
-  echo "  $STEP) elanous doctor --fix --yes       # rebuild node-pty after installing build tools"; STEP=$((STEP + 1))
+  echo "  $STEP) elanous doctor --fix --yes       # $(t 'rebuild node-pty after installing build tools' '빌드 도구를 깐 뒤 node-pty 다시 빌드')"; STEP=$((STEP + 1))
 fi
 if ! command -v rg >/dev/null 2>&1; then
   if [ -z "${OS_ID:-}" ] && [ -r "${ELANOUS_INSTALL_OS_RELEASE_FILE:-/etc/os-release}" ]; then
@@ -487,22 +487,22 @@ if ! command -v rg >/dev/null 2>&1; then
     Linux) case " ${OS_ID:-} ${OS_LIKE:-} " in
       *' debian '*|*' ubuntu '*) RG_HINT='sudo apt-get install -y ripgrep' ;;
       *' fedora '*) RG_HINT='sudo dnf install -y ripgrep' ;;
-      *) RG_HINT='install ripgrep (rg) with your package manager' ;;
+      *) RG_HINT="$(t 'install ripgrep (rg) with your package manager' '패키지 관리자로 ripgrep(rg)을 설치하세요')" ;;
     esac ;;
-    *) RG_HINT='install ripgrep (rg) with your package manager' ;;
+    *) RG_HINT="$(t 'install ripgrep (rg) with your package manager' '패키지 관리자로 ripgrep(rg)을 설치하세요')" ;;
   esac
   echo "  $STEP) $RG_HINT"; STEP=$((STEP + 1))
 fi
 if ! command -v codex >/dev/null 2>&1; then
   if ! command -v node >/dev/null 2>&1; then
-    echo "  $STEP) install Node.js 20+ (the Codex CLI runs on node)   # e.g. your package manager or https://nodejs.org"; STEP=$((STEP + 1))
+    echo "  $STEP) $(t 'install Node.js 20+ (the Codex CLI runs on node)   # e.g. your package manager or https://nodejs.org' 'Node.js 20 이상을 설치하세요(Codex CLI 가 node 로 돕니다)   # 예: 패키지 관리자 또는 https://nodejs.org')"; STEP=$((STEP + 1))
   fi
-  echo "  $STEP) npm install -g @openai/codex      # the harness drives the Codex CLI (not yet measured on a fresh machine)"; STEP=$((STEP + 1))
+  echo "  $STEP) npm install -g @openai/codex      # $(t 'the harness drives the Codex CLI' '하니스가 Codex CLI 를 씁니다')"; STEP=$((STEP + 1))
 fi
 if ! command -v gh >/dev/null 2>&1; then
-  echo "  $STEP) install gh, then: gh auth login   # the harness opens pull requests with it"; STEP=$((STEP + 1))
+  echo "  $STEP) $(t 'install gh, then: gh auth login   # the harness opens pull requests with it' 'gh 를 설치한 뒤: gh auth login   # 하니스가 PR 을 열 때 씁니다')"; STEP=$((STEP + 1))
 elif ! gh auth status >/dev/null 2>&1; then
-  echo "  $STEP) gh auth login                     # the harness opens pull requests with it"; STEP=$((STEP + 1))
+  echo "  $STEP) gh auth login                     # $(t 'the harness opens pull requests with it' '하니스가 PR 을 열 때 씁니다')"; STEP=$((STEP + 1))
 fi
 if [ "$ELN_AVAILABLE" -eq 1 ]; then
   echo "  $STEP) $(t 'eln harness say "<one line of what you want>" (or: elanous harness say)' 'eln harness say "<하고 싶은 일 한 줄>" (또는: elanous harness say)')"
@@ -519,8 +519,17 @@ if [ "$START_SETUP" -eq 1 ]; then
     *":$PREFIX/bin:"*) ;;
     *) echo "  $(t "(new shells will find elanous on PATH; this window uses $PREFIX/bin/elanous)" "(새 셸에서는 PATH 로 elanous 를 찾습니다 · 이 창은 $PREFIX/bin/elanous 를 씁니다)")" ;;
   esac
+  # INST3 (10-01 · node-c tmux): a wizard whose stdin is a fresh open of /dev/tty never saw a key on macOS — its event
+  # loop cannot watch that fd (the same binary started from a shell, which hands over the real tty, worked). So give it
+  # the real terminal device; fall back to /dev/tty only when there is none.
+  SETUP_TTY=/dev/tty
+  REAL_TTY="$(ps -o tty= -p $$ 2>/dev/null | tr -d ' ')"
+  case "$REAL_TTY" in
+    ''|'?'|'??') ;;
+    *) if [ -r "/dev/$REAL_TTY" ] && [ -w "/dev/$REAL_TTY" ]; then SETUP_TTY="/dev/$REAL_TTY"; fi ;;
+  esac
   if [ -n "${ELANOUS_INSTALL_SETUP_EXEC:-}" ]; then
-    exec "$ELANOUS_INSTALL_SETUP_EXEC" "$PREFIX/bin/elanous"
+    ELANOUS_INSTALL_SETUP_TTY="$SETUP_TTY" exec "$ELANOUS_INSTALL_SETUP_EXEC" "$PREFIX/bin/elanous"
   fi
-  exec "$PREFIX/bin/elanous" </dev/tty
+  exec "$PREFIX/bin/elanous" <"$SETUP_TTY"
 fi

package/scripts/persona-presets/lint.ts

@@ -0,0 +1,79 @@
+#!/usr/bin/env bun
+// 페르소나 프리셋 문면 검사(PS1 · 2026-10-02) — persona-presets/<id>.yaml
+//   bun scripts/persona-presets/lint.ts   오류가 있으면 rc 1 · 경고만이면 rc 0
+// 지키는 것: 도구는 «지금 설치할 수 있는 것»만(공개 묶음 표 · 저장소 플러그인 · core) · 용어(«캐릭터» 금지) ·
+//           자리(OP·MK·TC·UX)와 이름이 겹치지 않음 · 직함은 선택 속성 · 과장 금지어.
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { parse } from 'yaml';
+
+const ROOT = resolve(import.meta.dir, '../..');
+const DIR = join(ROOT, 'persona-presets');
+
+export type Preset = {
+  personaId: string; displayName: string; names: string[]; role: string; title?: string | null; oneLine: string;
+  voice: { rule: string; examples: string[] }; tasks: Array<{ when: string; what: string }>;
+  tools: Array<{ name: string; from: string; optional?: boolean }>; firstQuestions: string[]; askBefore?: string[]; doesNot: string[]; forWhom: string;
+};
+
+const CORE = new Set(['harness']);
+const TITLES = new Set(['COO', 'CMO', 'CTO', 'CXO']);
+const SEATS = /^(OP|MK|TC|UX)$/i;
+const BANNED = ['캐릭터', '완전 자율', '무엇이든', '유일', '알아서 다'];
+
+/** Official packs and the skills each one lists, read from the public plugin table (the same page users read). */
+export function officialPacks(root = ROOT): Map<string, string> {
+  const table = readFileSync(join(root, 'release/public/docs/plugins.md'), 'utf8');
+  const packs = new Map<string, string>();
+  for (const row of table.split('\n')) {
+    const m = row.match(/^\| `([a-z0-9-]+)` \| (.*) \| (.*) \|$/);
+    if (m && !/not published/i.test(m[3]!)) packs.set(m[1]!, m[2]!);
+  }
+  return packs;
+}
+
+export function lintPreset(p: Preset, file: string, packs: Map<string, string>, root = ROOT): { errors: string[]; warnings: string[] } {
+  const errors: string[] = []; const warnings: string[] = [];
+  const need = (ok: unknown, msg: string) => { if (!ok) errors.push(msg); };
+  need(/^[a-z][a-z0-9-]{1,30}$/.test(p.personaId ?? '') && file.endsWith(`/${p.personaId}.yaml`), 'personaId = 파일 이름(소문자)');
+  need(p.displayName && p.role && p.oneLine && p.forWhom, 'displayName · role · oneLine · forWhom 필요');
+  need(Array.isArray(p.names) && p.names.length >= 2, 'names 후보 둘 이상');
+  need(p.voice?.rule && p.voice.examples?.length === 2, 'voice = rule ⊕ 예시 두 줄');
+  need(p.tasks?.length === 3 && p.tasks.every((t) => t.when && t.what), 'tasks = 할 일 셋(when · what)');
+  need(p.firstQuestions?.length >= 2 && p.firstQuestions.length <= 3, 'firstQuestions = 처음 묻는 칸 둘~셋');
+  need(p.doesNot?.length >= 2, 'doesNot = 하지 않는 것 둘 이상');
+  if (p.title != null && !TITLES.has(p.title)) errors.push(`title 은 없음 또는 ${[...TITLES].join('·')}`);
+  for (const name of p.names ?? []) if (SEATS.test(name)) errors.push(`이름 «${name}» 이 자리(OP·MK·TC·UX)와 겹친다`);
+  const text = JSON.stringify(p);
+  for (const word of BANNED) if (text.includes(word)) errors.push(`금지어 «${word}»`);
+  for (const tool of p.tools ?? []) {
+    if (tool.from === 'core') { if (!CORE.has(tool.name)) errors.push(`core 도구 «${tool.name}» 는 없다`); continue; }
+    const row = packs.get(tool.from);
+    if (row !== undefined) {
+      if (tool.from !== tool.name && !row.includes(`\`${tool.name}\``)) errors.push(`«${tool.name}» 이 묶음 «${tool.from}» 의 목록에 없다`);
+      continue;
+    }
+    // 공식 묶음에 없는 도구 = 저장소 플러그인일 때만 · 반드시 optional(공개 판 사용자는 따로 설치해야 쓴다)
+    if (tool.from !== tool.name || !existsSync(join(root, 'plugins', tool.name, 'plugin.json'))) errors.push(`«${tool.name}» 은 공식 묶음에도 plugins/${tool.name}/plugin.json 에도 없다`);
+    else if (tool.optional !== true) errors.push(`«${tool.name}» 은 공식 묶음에 없다 — optional: true 로 둔다`);
+    else warnings.push(`«${tool.name}» 은 선택 도구(공식 묶음 게재 전)`);
+  }
+  return { errors, warnings };
+}
+
+if (import.meta.main) {
+  const packs = officialPacks();
+  const index = parse(readFileSync(join(DIR, '_index.yaml'), 'utf8')) as { presets: string[] };
+  const files = readdirSync(DIR).filter((f) => f.endsWith('.yaml') && !f.startsWith('_'));
+  let bad = 0; const names = new Map<string, string>();
+  for (const f of files) {
+    const p = parse(readFileSync(join(DIR, f), 'utf8')) as Preset;
+    const { errors, warnings } = lintPreset(p, `persona-presets/${f}`, packs);
+    if (!index.presets.includes(p.personaId)) errors.push('_index.yaml presets 에 없다');
+    for (const n of p.names ?? []) { if (names.has(n)) errors.push(`이름 «${n}» 이 ${names.get(n)} 와 겹친다`); names.set(n, p.personaId); }
+    for (const e of errors) console.log(`✗ ${f}: ${e}`);
+    for (const w of warnings) console.log(`⚠ ${f}: ${w}`);
+    if (errors.length) bad++; else console.log(`✓ ${f} · ${p.displayName} · 도구 ${p.tools.length}`);
+  }
+  process.exit(bad ? 1 : 0);
+}

package/scripts/release-loop/checklist-gate-node.ts

@@ -7,14 +7,14 @@ export function runChecklistGate(context: GraphContext = readGraphContext()) {
   const data = listChecklist(version);
   const gate = checklistGate(version);
   const counts = summarizeChecklist(data);
-  const summary = `확인표 🟢${counts.green} 🟡${counts.yellow}(이동 ${gate.moved.length} · 알려진 문제 ${gate.knownIssues.length} · 막음 ${gate.blocked.length} · 판정 없음 ${gate.undecided.length}) 🔴${counts.red}${gate.red.length ? ` (${gate.red.join(', ')})` : ''}`;
+  const summary = `확인표 🟢${counts.green} 🟡${counts.yellow}(이동 ${gate.moved.length} · 알려진 문제 ${gate.knownIssues.length} · 막음 ${gate.blocked.length} · 판정 없음 ${gate.undecided.length}) 🔴${counts.red}${gate.red.length ? ` (${gate.red.join(', ')})` : ''}${gate.parity?.length ? ` · ⚠ 짝 경고 ${gate.parity.length}(${gate.parity.map((p) => p.id).join(', ')})` : ''}`;
   if (gate.ok && gate.moved.length) {
     const [major, minor, patch] = version.split('.').map(Number);
     const next = `${major}.${minor}.${patch! + 1}`;
     for (const id of gate.moved) {
       const item = data.items.find((candidate) => candidate.id === id)!;
       if (listChecklist(next).items.some((candidate) => candidate.id === id)) continue;
-      try { addItem(next, { id, title: item.title, ...(item.owner !== undefined ? { owner: item.owner } : {}) }); }
+      try { addItem(next, { id, title: item.title, ...(item.owner !== undefined ? { owner: item.owner } : {}), ...(item.kind !== undefined ? { kind: item.kind } : {}) }); }
       catch (error) {
         if (!listChecklist(next).items.some((candidate) => candidate.id === id)) throw error;
       }

package/scripts/release-loop/gate-node.ts

@@ -10,7 +10,7 @@ import { getElanousConfigDirOverride } from '../../src/elanous-config-dir.js';
 import { diffFailures, junitFailures, parseFailures } from './gate-diff';
 import { loadEnvKnownFailures, splitKnownEnv } from './env-known-failures';
 import { baselineFromCutLogs } from './baseline-from-logs';
-import { planShards, readFileDurations } from './shard-plan';
+import { planShards, readFileDurations, readFileMemory } from './shard-plan';
 import { deriveCdpTestPatterns } from '../test-deterministic';
 import { emitNodeResult, readGraphContext } from './node-verdict.js';
 import { runPodCommand, type RunPodCommandOptions, type PodCommandResult } from '../../src/task-orchestrator/surfaces/pod-command-job.js';
@@ -112,10 +112,18 @@ const summaryCount = (output: string, label: string) => Number(lastMatch(output,
 /** bun reads a bare positional as a substring filter (`test` matches every *.test.ts); `./` makes it a path. */
 const asPath = (path: string) => path.startsWith('./') || path.startsWith('/') ? path : `./${path}`;
 export const POD_ISOLATION_MEMORY_LIMIT = '32Gi';
+/** GT1b — a file whose measured peak is at least this runs alone at the isolation limit from the start: one such file
+ *  sank a whole 203-file root shard at 16Gi (0.2.6 shard 12 · `unwired-exports` 9.9 GB) and cost two halving rounds. */
+export const POD_HEAVY_FILE_MB = 4096;
+/** Per-file peak memory, read from the cut tree (absent → no heavy files; the halving path still catches OOM). */
+export const POD_MEMORY_SOURCE = 'docs/measurements/td1-whole-gate-mechanical-2026-10-01.tsv';
 /** Integration tests that the Pod sweep does not run — each is judged by a real run elsewhere at the cut.
  *  0.2.7 run 5 (10-01): `scripts/install.test.ts` (real `bun pm pack` → `bun add` installs, 301 s alone on node-b)
  *  sat in a shard of its own past the 1200 s deadline with no output and stopped the whole gate. Judged on the
  *  mbp at the cut instead (TD1 moves it to the integration line). Keep this list short and explained. */
+/** GT1 — files per retry chunk when a root shard fails (0.2.7: bundles of 54+ files OOMed at 16Gi, smaller passed). */
+export const POD_SHARD_FILE_CAP = 27;
+
 export const POD_SWEEP_INTEGRATION_ONLY: readonly string[] = ['scripts/install.test.ts'];
 const tail40 = (output: string) => output.trimEnd().split(/\r?\n/).slice(-40).join('\n');
 const lastStartedTestFile = (output: string, paths: string[]): string | undefined => {
@@ -208,7 +216,14 @@ export function createGateRunner(repo: string, remote?: string, commandOverride?
     if (integrationOnly.length) debug.log('release-loop.gate', 'pod-sweep-integration-only', { files: integrationOnly });
     if (!assignable.length) throw new Error('sweep incomplete: no tests ran');
     const durations = pod.durationSource ? readFileDurations(pod.durationSource) : new Map<string, number>();
-    const shards = planShards(assignable, durations, shardCount);
+    const memory = readFileMemory(join(tree, POD_MEMORY_SOURCE));
+    const heavy = new Set(assignable.filter((file) => (memory.get(file) ?? 0) >= POD_HEAVY_FILE_MB));
+    const light = assignable.filter((file) => !heavy.has(file));
+    const shards = [
+      ...(light.length ? planShards(light, durations, shardCount) : []),
+      ...[...heavy].map((file) => ({ files: [file], plannedSeconds: durations.get(file) ?? 0 })),
+    ];
+    if (heavy.size) debug.log('release-loop.gate', 'pod-heavy-alone', { files: [...heavy], thresholdMb: POD_HEAVY_FILE_MB, memoryLimit: POD_ISOLATION_MEMORY_LIMIT });
     const known = assignable.filter((file) => durations.has(file)).length;
     debug.log('release-loop.gate', 'pod-shard-plan', {
       shards: shards.length, known, unknown: assignable.length - known,
@@ -259,7 +274,7 @@ export function createGateRunner(repo: string, remote?: string, commandOverride?
           pool: pod.pool, poolScheduler, clone: true, source: { kind: 'commit', sha: commit }, deadlineSeconds,
           ...(bunCache ? { bunCache } : {}),
           // 실패 뒤 다시 도는 파일 하나짜리 Job 은 메모리 한도를 올린다 — 16Gi 에선 무거운 한 파일이 혼자서도 OOM 이었다(09-30 `unwired-exports`).
-          ...(paths.length === 1 && depth >= 1 ? { memoryLimit: POD_ISOLATION_MEMORY_LIMIT } : {}),
+          ...(paths.length === 1 && (depth >= 1 || heavy.has(paths[0]!)) ? { memoryLimit: POD_ISOLATION_MEMORY_LIMIT } : {}),
           name: `gate-${randomUUID()}`,
           command: ['bash', '-lc', `mkdir -p "$HOME/outbox"; ${cachePrefix}(cd .. && cd repo && bun install && (cd apps/pwa && bun install) && ${args}) 2>&1 | tee "$HOME/outbox/shard.log"; echo \${PIPESTATUS[0]} > "$HOME/outbox/shard.rc"`],
         });
@@ -350,6 +365,15 @@ export function createGateRunner(repo: string, remote?: string, commandOverride?
           ...(lastFile ? { lastFile } : {}),
           ...(reason === 'unattributed' ? { summaryFailures: fails, namedFailures, ...(unattributedDetail ? { detail: unattributedDetail } : {}) } : {}),
         }] };
+        // GT1 — a big shard that failed at the root goes straight to cap-sized chunks instead of halving twice: memory
+        // piles up when one bun process runs many files (0.2.7: only bundles of 54+ OOMed), and each halving round costs
+        // a Pod start, an install and a rerun. A failing chunk then isolates its files (depth 2), as before.
+        if (depth === 0 && paths.length > POD_SHARD_FILE_CAP) {
+          const chunks = Array.from({ length: Math.ceil(paths.length / POD_SHARD_FILE_CAP) }, (_, i) => paths.slice(i * POD_SHARD_FILE_CAP, (i + 1) * POD_SHARD_FILE_CAP));
+          debug.log('release-loop.gate', 'pod-shard-cap-split', { shard, files: paths.length, chunks: chunks.length, cap: POD_SHARD_FILE_CAP, reason });
+          const children = await Promise.all(chunks.map((chunk, i) => runShard(chunk, shard, 2, `${branch}-c${i}`)));
+          return { runs: children.flatMap((child) => child.runs), stalled: children.flatMap((child) => child.stalled) };
+        }
         debug.log('release-loop.gate', 'pod-shard-split', { shard, depth, files: paths, reason });
         const middle = Math.ceil(paths.length / 2);
         const children = await Promise.all([

package/scripts/release-loop/npm-publish-node.ts

@@ -1,11 +1,11 @@
 #!/usr/bin/env bun
 import { spawnSync } from 'node:child_process';
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { debug } from '../../src/debug/log.js';
 import { sendOutbound } from '../../src/domains/outbound-alert.js';
-import { effectiveInstanceRoot } from '../../src/instance/resolve.js';
+import { effectiveInstanceRoot, prodInstanceRoot } from '../../src/instance/resolve.js';
 import { emitNodeResult, readGraphContext, type GraphContext } from './node-verdict.js';
 
 type Result = { outcome: 'ok' | 'fail'; verdict: 'pass' | 'fail'; summary: string; npm?: 'published' | 'already-published' | 'staged-not-visible'; humanAction?: 'npm-support' };
@@ -16,6 +16,8 @@ export interface NpmPublishDeps {
   registry?: Registry;
   sleep?: (ms: number) => Promise<void>;
   stateDir?: string;
+  /** Test seam — the production root whose secrets/npm-token is the last fallback. */
+  productionRoot?: string;
   alert?: (text: string, kind: string) => boolean;
   log?: (version: string, waitedMinutes: number) => void;
 }
@@ -48,7 +50,10 @@ export async function runNpmPublish(context: GraphContext = readGraphContext(),
   try {
     if (context.outputs.publish?.outcome !== 'ok') throw new Error('publish must succeed before npm publish');
     const stateDir = deps.stateDir ?? effectiveInstanceRoot();
-    const candidate = join(stateDir, 'release', version, 'prepared', 'dist', 'elanous.tgz');
+    // REL3 — the archive prepare actually built (its output) wins over this process's universe: a resumed run can
+    // resolve another universe (10-01 0.2.7: prepared in the pilot test universe, resumed in production).
+    const prepared = context.outputs.prepare?.candidate;
+    const candidate = typeof prepared === 'string' && prepared.endsWith('.tgz') ? prepared : join(stateDir, 'release', version, 'prepared', 'dist', 'elanous.tgz');
     const run = deps.exec ?? exec;
     const readRegistry = deps.registry ?? registry;
     const wait = deps.sleep ?? sleep;
@@ -71,7 +76,8 @@ export async function runNpmPublish(context: GraphContext = readGraphContext(),
     const before = await inspect();
     if (before.tagged) return { outcome: 'ok', verdict: 'pass', npm: 'already-published', summary: `npm ${version} already published with latest tag` };
     if (!before.visible) {
-      const tokenFile = context.input.npmTokenFile ?? join(stateDir, 'secrets', 'npm-token');
+      // The npm token is a machine secret (like the GitHub App key): input → this universe → the production root.
+      const tokenFile = context.input.npmTokenFile ?? [join(stateDir, 'secrets', 'npm-token'), join(deps.productionRoot ?? prodInstanceRoot(), 'secrets', 'npm-token')].find((p) => existsSync(p)) ?? join(stateDir, 'secrets', 'npm-token');
       if (typeof tokenFile !== 'string' || !tokenFile.trim()) throw new Error('input.npmTokenFile must be a path');
       token = readFileSync(tokenFile, 'utf8').trim();
       if (!token) throw new Error('npm token file empty');

package/scripts/release-loop/ops-upgrade-node.ts

@@ -2,7 +2,7 @@
 import { homedir } from 'node:os';
 import { errorResult, finishNode, lastResult, nodeOutput, readGraphContext, runCommand, type CommandResult, type CommandRunner } from './node-verdict.js';
 
-interface HostResult { host: string; ok: boolean; before: string; after: string; error?: string; skipped?: string }
+interface HostResult { host: string; ok: boolean; before: string; after: string; error?: string; skipped?: string; hooks?: string }
 
 function firstLine(text: string): string { return text.trim().split(/\r?\n/)[0]?.trim() ?? ''; }
 
@@ -44,7 +44,8 @@ export function runOpsUpgrade(run: CommandRunner = runCommand) {
     }
     const command = (args: string[]): CommandResult => host === 'local'
       ? run('elanous', args)
-      : run('ssh', [host, `PATH="$HOME/.local/bin:$HOME/.bun/bin:$PATH"; export PATH; elanous ${args.map(quote).join(' ')}`]);
+      // The installer's own bin dir comes first — a --no-modify-path install (the bot VM) has elanous only there.
+      : run('ssh', [host, `PATH="$HOME/.local/share/elanous/bin:$HOME/.local/bin:$HOME/.bun/bin:$PATH"; export PATH; elanous ${args.map(quote).join(' ')}`]);
     let before = '';
     let after = '';
     try {
@@ -68,7 +69,14 @@ export function runOpsUpgrade(run: CommandRunner = runCommand) {
         results.push({ host, ok: false, before, after, error: `올렸는데 판이 그대로 (기대 ${version}, 실제 ${after || '없음'})` });
         continue;
       }
-      results.push({ host, ok: true, before, after });
+      // The webhook receiver (`elanous hooks serve`, a user systemd unit on the bot VM) keeps the old code until it
+      // restarts. try-restart touches it only where it runs; elsewhere the unit is absent and nothing happens.
+      let hooks: string | undefined;
+      if (host !== 'local' && context.input.opsRestart === true) {
+        const restarted = run('ssh', [host, 'systemctl --user try-restart elanous-hooks.service 2>/dev/null && systemctl --user is-active elanous-hooks.service 2>/dev/null || echo absent']);
+        hooks = firstLine(restarted.stdout) || 'absent';
+      }
+      results.push({ host, ok: true, before, after, ...(hooks ? { hooks } : {}) });
     } catch (error) {
       results.push({ host, ok: false, before, after, error: firstLine(String(error)) });
     }

package/scripts/release-loop/publish-node.ts

@@ -17,6 +17,22 @@ export function publicNotes(markdown: string, pages: { pages: Array<{ id: string
   });
 }
 
+/** Polls each release asset until it answers 200 (following redirects). Returns the names still missing. */
+export function waitForAssets(run: CommandRunner, repo: string, tag: string, names: readonly string[], waitSeconds: unknown = 600,
+  sleep: (ms: number) => void = (ms) => Bun.sleepSync(ms)): string[] {
+  if (!repo || names.length === 0) return [];
+  const limit = typeof waitSeconds === 'number' && Number.isFinite(waitSeconds) && waitSeconds >= 0 ? Math.min(waitSeconds, 1800) : 600;
+  let pending = [...names];
+  for (let waited = 0; ; waited += 15) {
+    pending = pending.filter((name) => {
+      const probe = run('curl', ['-sIL', '-o', '/dev/null', '-w', '%{http_code}', '-m', '20', `https://github.com/${repo}/releases/download/${tag}/${name}`]);
+      return probe.stdout.trim() !== '200';
+    });
+    if (pending.length === 0 || waited >= limit) return pending;
+    sleep(15_000);
+  }
+}
+
 export function runPublish(run: CommandRunner = runCommand) {
   const context = readGraphContext();
   const version = context.input.version;
@@ -50,7 +66,13 @@ export function runPublish(run: CommandRunner = runCommand) {
     const result = lastResult(published);
     if (published.status === 1) return { outcome: 'fail' as const, verdict: 'fail' as const, summary: `release publish failed: ${result?.error ?? published.stderr.trim()}` };
     if (published.status !== 0 || result?.ok !== true || result.published !== true || result.tag !== `v${version}`) throw new Error(`release publish incomplete or tag mismatch: ${result?.error ?? published.stderr.trim()}`);
-    return { outcome: 'ok' as const, verdict: 'pass' as const, summary: `published v${version}`, tag: `v${version}` };
+    // REL3 — «published» only once every asset downloads. 10-01: the run went on to verify before GitHub served the
+    // assets (release created 13:16Z, assets 13:20Z, run ended 13:15Z) and verify failed on a missing installer.
+    const repo = typeof result.publicRepo === 'string' ? result.publicRepo : '';
+    const names = Array.isArray(result.assets) ? (result.assets as unknown[]).filter((a): a is string => typeof a === 'string').map((a) => a.split('/').at(-1)!) : [];
+    const pending = waitForAssets(run, repo, `v${version}`, names, context.input.assetWaitSeconds);
+    if (pending.length) return { outcome: 'fail' as const, verdict: 'fail' as const, summary: `published v${version} but assets not downloadable yet: ${pending.join(', ')}`, tag: `v${version}` };
+    return { outcome: 'ok' as const, verdict: 'pass' as const, summary: `published v${version} · ${names.length} assets downloadable`, tag: `v${version}` };
   } finally { rmSync(dir, { recursive: true, force: true }); }
 }
 

package/scripts/release-loop/shard-plan.ts

@@ -26,6 +26,23 @@ export function readFileDurations(dir: string): Map<string, number> {
   return durations;
 }
 
+/** Per-file peak memory (MB) from a TSV with `file` and `rss_mb` columns (TD1 whole-gate measurement); missing → empty. */
+export function readFileMemory(path: string): Map<string, number> {
+  const memory = new Map<string, number>();
+  let lines: string[];
+  try { lines = readFileSync(path, 'utf8').split(/\r?\n/); } catch { return memory; }
+  const header = lines[0]?.split('\t') ?? [];
+  const fileAt = header.indexOf('file');
+  const rssAt = header.indexOf('rss_mb');
+  if (fileAt < 0 || rssAt < 0) return memory;
+  for (const line of lines.slice(1)) {
+    const cells = line.split('\t');
+    const mb = Number(cells[rssAt]);
+    if (cells[fileAt] && cells[rssAt] !== '' && Number.isFinite(mb) && mb >= 0) memory.set(cells[fileAt]!, mb);
+  }
+  return memory;
+}
+
 /** Longest processing time first; tie-breaks use lexical paths, then the least populated lightest shard. */
 export function planShards(files: string[], durations: Map<string, number>, count: number): Array<{ files: string[]; plannedSeconds: number }> {
   if (!Number.isSafeInteger(count) || count < 1) throw new Error('invalid shard count');

package/scripts/storyboard/storyboard.ts

@@ -0,0 +1,167 @@
+#!/usr/bin/env bun
+// 스토리보드 정본(storyboards/<kind>/<id>.yaml) — 검사 ⊕ MD 뽑기 (대표 10-01 23:0x · OP 형식 결정 = YAML 정본 ⊕ 스키마 ⊕ 생성 MD).
+//   bun scripts/storyboard/storyboard.ts lint [파일…]     스키마 필수 칸 · 시간 겹침 · 화면 문구 출처 · 승인본 규칙
+//   bun scripts/storyboard/storyboard.ts render [파일…]   내부 문서 `STORYBOARD-<id>-v<version>` 를 다시 쓴다(손으로 안 고친다)
+// 인자가 없으면 storyboards/ 아래 전부. lint 는 오류가 있으면 rc 1, 경고만이면 rc 0.
+import { readFileSync, readdirSync, statSync, writeFileSync } from 'node:fs';
+import { join, relative, resolve } from 'node:path';
+import { parse } from 'yaml';
+
+const ROOT = resolve(import.meta.dir, '../..');
+const DIR = join(ROOT, 'storyboards');
+
+type Text = { text: string; source: string; ref?: string };
+type Shot = {
+  id: string; t: [number, number]; stage: string; layer?: string; persona?: string; purpose: string; subject?: string; action?: string;
+  camera?: { move?: string; lens_mm?: number; angle?: string; framing?: string }; lighting?: string; color?: string;
+  transition_in?: { type: string; intent: string }; on_screen_text?: Text[]; audio?: { vo?: string; sfx?: string; bgm?: string };
+  generation?: { tool: string; model?: string; prompt?: string; asset?: string }; real_or_staged: string; state: string; notes?: string;
+};
+/** kind: site — a site's page structure, menu and copy draft, planned like a storyboard (SITE2 · 10-02). */
+type Section = { id: string; title: string; purpose: string; change: string; copy?: Text[]; notes?: string };
+type Site = { domain: string; role: string; preview?: string; branch?: string; nav: Array<{ label: string; href: string }>; pages: Array<{ path: string; sections: Section[] }> };
+export type Storyboard = {
+  id: string; kind: string; title: string; version: number; status: string; approved?: { by: string; at: string; note?: string } | null;
+  supersedes?: string; owner: string; directive?: string; format: { aspects: string[]; duration_s: number; fps?: number; loop?: boolean; surface?: string };
+  scqa?: { s?: string; c?: string; q?: string; a?: string }; principles?: string[]; layers?: Record<string, string>; shots: Shot[]; sites?: Site[];
+  references?: string[]; open_questions?: string[];
+};
+
+const KINDS = ['teaser', 'site-hero', 'event-demo', 'persona-scene', 'explainer', 'ad', 'site'];
+const CHANGES = ['keep', 'move', 'new', 'replace', 'remove'];
+const STAGES = ['hook', 'buildup', 'climax', 'transition', 'end', 'loop'];
+const SOURCES = ['real-ui', 'real-cli', 'real-output', 'copy', 'example'];
+
+export function lint(sb: Storyboard, file = ''): { errors: string[]; warnings: string[] } {
+  const errors: string[] = [], warnings: string[] = [];
+  const need = (cond: unknown, msg: string) => { if (!cond) errors.push(msg); };
+  need(/^[a-z0-9][a-z0-9-]{2,80}$/.test(sb.id ?? ''), 'id: 소문자·숫자·하이픈 3~80자');
+  need(KINDS.includes(sb.kind), `kind: ${KINDS.join('|')}`);
+  need(Number.isInteger(sb.version) && sb.version >= 1, 'version: 1 이상 정수');
+  need(['draft', 'approved', 'superseded'].includes(sb.status), 'status: draft|approved|superseded');
+  need(sb.owner, 'owner 필요');
+  if (sb.status === 'approved') need(sb.approved?.by && sb.approved?.at, '승인본은 approved.by·at 필요');
+  if (file && sb.kind && !file.includes(`/${sb.kind}/`)) errors.push(`파일 위치가 kind(${sb.kind}) 폴더가 아니다`);
+  if (sb.kind === 'site') return lintSite(sb, errors, warnings);
+  need(sb.format?.aspects?.length && sb.format.duration_s > 0, 'format.aspects ⊕ duration_s 필요');
+  if (!Array.isArray(sb.shots) || !sb.shots.length) { errors.push('shots 가 비었다'); return { errors, warnings }; }
+  const ids = new Set<string>();
+  sb.shots.forEach((s, i) => {
+    const at = `shots[${i}](${s.id ?? '?'})`;
+    need(s.id && !ids.has(s.id), `${at}: id 없음·중복`); ids.add(s.id);
+    need(Array.isArray(s.t) && s.t.length === 2 && s.t[0] < s.t[1], `${at}: t = [시작, 끝] 이고 시작 < 끝`);
+    need(STAGES.includes(s.stage), `${at}: stage ${STAGES.join('|')}`);
+    need(s.purpose, `${at}: purpose(이 비트의 한 가지) 필요`);
+    need(['real', 'staged', 'composite'].includes(s.real_or_staged), `${at}: real_or_staged 필요`);
+    need(['planned', 'shot', 'approved'].includes(s.state), `${at}: state planned|shot|approved`);
+    if (s.transition_in && !s.transition_in.intent) errors.push(`${at}: 전환에는 의도 한 줄(«그냥 컷»은 설계가 아니다)`);
+    for (const txt of s.on_screen_text ?? []) {
+      need(SOURCES.includes(txt.source), `${at}: 화면 문구 «${txt.text}» 의 source 가 ${SOURCES.join('|')} 가 아니다`);
+      if (txt.source?.startsWith('real-') && !txt.ref) warnings.push(`${at}: 실제 문면 «${txt.text}» 에 ref(출처) 가 없다`);
+      if (/\d/.test(txt.text) && txt.source === 'copy') warnings.push(`${at}: 마케팅 문구에 숫자 «${txt.text}» — 실측 근거나 «example» 로`);
+    }
+    if (s.generation?.tool === 'higgsfield' && !s.generation.prompt) warnings.push(`${at}: 힉스필드 샷에 prompt 가 없다`);
+    if (s.real_or_staged !== 'real' && !/연출/.test(JSON.stringify(sb))) warnings.push(`${at}: 연출 샷이 있는데 문서 어디에도 «연출 장면» 표기가 없다`);
+  });
+  const end = Math.max(...sb.shots.map((s) => s.t?.[1] ?? 0));
+  if (sb.format?.duration_s && Math.abs(end - sb.format.duration_s) > 0.5) warnings.push(`마지막 샷 끝(${end}s) ≠ format.duration_s(${sb.format.duration_s}s)`);
+  return { errors, warnings };
+}
+
+/** A site plan has pages instead of shots: every section says why it is there and what changes; copy names its source. */
+function lintSite(sb: Storyboard, errors: string[], warnings: string[]): { errors: string[]; warnings: string[] } {
+  if (!Array.isArray(sb.sites) || !sb.sites.length) { errors.push('site 종류는 sites 가 필요하다'); return { errors, warnings }; }
+  for (const site of sb.sites) {
+    const at = `sites(${site.domain ?? '?'})`;
+    if (!site.domain || !site.role) errors.push(`${at}: domain ⊕ role(이 사이트가 맡는 것) 필요`);
+    if (!site.nav?.length) errors.push(`${at}: nav(메뉴) 필요`);
+    if (!site.pages?.length) errors.push(`${at}: pages 필요`);
+    if (!site.preview) warnings.push(`${at}: preview(미리보기 주소) 없음`);
+    const ids = new Set<string>();
+    for (const page of site.pages ?? []) for (const sec of page.sections ?? []) {
+      const where = `${at}${page.path} #${sec.id ?? '?'}`;
+      if (!sec.id || ids.has(`${page.path}#${sec.id}`)) errors.push(`${where}: id 없음·중복`);
+      ids.add(`${page.path}#${sec.id}`);
+      if (!sec.purpose) errors.push(`${where}: purpose(이 칸이 하는 한 가지) 필요`);
+      if (!CHANGES.includes(sec.change)) errors.push(`${where}: change ${CHANGES.join('|')}`);
+      for (const txt of sec.copy ?? []) {
+        if (!SOURCES.includes(txt.source)) errors.push(`${where}: 문구 «${txt.text}» 의 source 가 ${SOURCES.join('|')} 가 아니다`);
+        if (/\d/.test(txt.text) && txt.source === 'copy' && !txt.ref) warnings.push(`${where}: 마케팅 문구에 숫자 «${txt.text}» — ref(실측 근거) 를 단다`);
+      }
+    }
+  }
+  return { errors, warnings };
+}
+
+function renderSites(sb: Storyboard): string[] {
+  return (sb.sites ?? []).flatMap((site) => [
+    `## ${site.domain} — ${site.role}`, '',
+    ...(site.preview ? [`- 미리보기: ${site.preview}${site.branch ? ` (가지 \`${site.branch}\`)` : ''}`] : []),
+    `- 메뉴: ${site.nav.map((n) => `${n.label}(${n.href})`).join(' · ')}`, '',
+    ...site.pages.flatMap((page) => [
+      `### ${page.path}`, '', '| # | 칸 | 제목 | 목적 | 바뀜 | 문구(출처) | 메모 |', '|---|---|---|---|---|---|---|',
+      ...page.sections.map((sec, i) => `| ${i + 1} | ${md(sec.id)} | ${md(sec.title)} | ${md(sec.purpose)} | ${sec.change} | ${md((sec.copy ?? []).map((x) => `«${x.text}»(${x.source}${x.ref ? ` · ${x.ref}` : ''})`).join(' / '))} | ${md(sec.notes)} |`),
+      '',
+    ]),
+  ]);
+}
+
+const md = (v: unknown) => String(v ?? '').replace(/\|/g, '\\|').replace(/\n+/g, ' ');
+export function render(sb: Storyboard, file: string): string {
+  const head = [
+    `# STORYBOARD — ${sb.title} (v${sb.version} · ${sb.status}${sb.approved ? ` · 승인 ${sb.approved.by} ${sb.approved.at}` : ''})`,
+    '',
+    `> ⛔ 자동 생성 — 손으로 고치지 않는다. 정본 = \`${file}\` · 다시 뽑기 = \`bun scripts/storyboard/storyboard.ts render ${file}\`.`,
+    `> 종류 ${sb.kind} · 소유 ${sb.owner}${sb.format ? ` · ${sb.format.aspects.join(' · ')} · ${sb.format.duration_s}초${sb.format.loop ? ' · 반복' : ''}${sb.format.surface ? ` · ${sb.format.surface}` : ''}` : ''}${sb.supersedes ? ` · 앞 판 ${sb.supersedes}` : ''}`,
+    ...(sb.directive ? [`> 지시: ${sb.directive}`] : []),
+    '',
+  ];
+  const scqa = sb.scqa ? ['## SCQA', ...(['s', 'c', 'q', 'a'] as const).filter((k) => sb.scqa?.[k]).map((k) => `- **${k.toUpperCase()}** — ${sb.scqa![k]}`), ''] : [];
+  const pr = sb.principles?.length ? ['## 원칙', ...sb.principles.map((p, i) => `${i + 1}. ${p}`), ''] : [];
+  const layers = sb.layers ? ['## 층', ...Object.entries(sb.layers).map(([k, v]) => `- **${k}** — ${v}`), ''] : [];
+  const table = sb.kind === 'site' ? renderSites(sb) : [
+    '## 샷 구조표',
+    '| # | 초 | 단계 | 층·인물 | 목적 | 화면(피사체·행동) | 카메라 | 빛·색 | 전환(의도) | 화면 문구(출처) | 소리 | 만들기 | 실물/연출 · 상태 |',
+    '|---|---|---|---|---|---|---|---|---|---|---|---|---|',
+    ...sb.shots.map((s) => `| ${md(s.id)} | ${s.t[0]}–${s.t[1]} | ${s.stage} | ${md([s.layer, s.persona].filter(Boolean).join(' · '))} | ${md(s.purpose)} | ${md([s.subject, s.action].filter(Boolean).join(' — '))} | ${md(s.camera ? [s.camera.move, s.camera.lens_mm ? `${s.camera.lens_mm}mm` : '', s.camera.angle, s.camera.framing].filter(Boolean).join(' · ') : '')} | ${md([s.lighting, s.color].filter(Boolean).join(' · '))} | ${md(s.transition_in ? `${s.transition_in.type} — ${s.transition_in.intent}` : '')} | ${md((s.on_screen_text ?? []).map((x) => `«${x.text}»(${x.source}${x.ref ? ` · ${x.ref}` : ''})`).join(' / '))} | ${md(s.audio ? [s.audio.vo && `VO ${s.audio.vo}`, s.audio.sfx && `SFX ${s.audio.sfx}`, s.audio.bgm && `BGM ${s.audio.bgm}`].filter(Boolean).join(' · ') : '')} | ${md(s.generation ? [s.generation.tool, s.generation.model].filter(Boolean).join(' · ') : '')} | ${s.real_or_staged} · ${s.state} |`),
+    '',
+  ];
+  const shots = sb.shots ?? [];
+  const prompts = shots.filter((s) => s.generation?.prompt);
+  const pblock = prompts.length ? ['## 생성 프롬프트', ...prompts.flatMap((s) => [`### ${s.id} · ${s.generation!.tool}${s.generation!.model ? ` · ${s.generation!.model}` : ''}`, '```', s.generation!.prompt!.trim(), '```', ...(s.generation!.asset ? [`결과: \`${s.generation!.asset}\``] : []), ''])] : [];
+  const notes = shots.filter((s) => s.notes).map((s) => `- ${s.id}: ${s.notes}`);
+  const tail = [
+    ...(notes.length ? ['## 샷 메모', ...notes, ''] : []),
+    ...(sb.open_questions?.length ? ['## 열린 물음', ...sb.open_questions.map((q) => `- ${q}`), ''] : []),
+    ...(sb.references?.length ? ['## 참고', ...sb.references.map((r) => `- ${r}`), ''] : []),
+  ];
+  return [...head, ...scqa, ...pr, ...layers, ...table, ...pblock, ...tail].join('\n');
+}
+
+function files(args: string[]): string[] {
+  if (args.length) return args.map((a) => resolve(a));
+  const out: string[] = [];
+  const walk = (d: string) => { for (const f of readdirSync(d)) { const p = join(d, f); if (statSync(p).isDirectory()) walk(p); else if (/\.ya?ml$/.test(f) && !f.startsWith('_')) out.push(p); } };
+  walk(DIR);
+  return out.sort();
+}
+
+if (import.meta.main) {
+  const [cmd, ...rest] = process.argv.slice(2);
+  if (cmd !== 'lint' && cmd !== 'render') { console.error('usage: storyboard.ts lint|render [files…]'); process.exit(2); }
+  let bad = 0;
+  for (const f of files(rest)) {
+    const rel = relative(ROOT, f);
+    const sb = parse(readFileSync(f, 'utf8')) as Storyboard;
+    const { errors, warnings } = lint(sb, rel);
+    for (const e of errors) console.log(`✗ ${rel}: ${e}`);
+    for (const w of warnings) console.log(`⚠ ${rel}: ${w}`);
+    if (errors.length) { bad++; continue; }
+    if (cmd === 'render') {
+      const out = join(ROOT, 'docs', 'marketing', `STORYBOARD-${sb.id}-v${sb.version}.md`);
+      writeFileSync(out, render(sb, rel) + '\n');
+      console.log(`✓ ${rel} → ${relative(ROOT, out)}`);
+    } else console.log(`✓ ${rel} · v${sb.version} · ${sb.status} · ${sb.kind === 'site' ? `사이트 ${sb.sites?.length ?? 0}` : `샷 ${sb.shots.length}`}`);
+  }
+  process.exit(bad ? 1 : 0);
+}