elanous 0.2.7 → 0.2.8

package/src/nexus/setup-status.ts

@@ -1,7 +1,7 @@
 import { existsSync } from 'node:fs';
 
 import { debug } from '../debug/log.js';
-import { buildUserConfig, type UserConfig as MainUserConfig } from '../user-config.js';
+import { buildUserConfig, resolveSkillSources, type UserConfig as MainUserConfig } from '../user-config.js';
 import { decideProviderForConfig } from '../llm.js';
 import { resolveGrokCredential } from '../grok/credential.js';
 import { loadTokens } from '../oauth/store.js';
@@ -177,7 +177,12 @@ function checkChannelBot(cfg: NexusUserConfig): SetupItem {
 }
 
 function checkSkillDirs(cfg: MainUserConfig, exists: (path: string) => boolean): SetupItem {
-  const dirs = Array.isArray(cfg.skills.dirs) ? cfg.skills.dirs.filter(hasText) : [];
+  // EN5 — the same list the loader reads (resolveSkillSources): the preset and what `elanous connect` registered.
+  // Derived roots (shared ~/.agents/skills, Claude package roots) are optional extras, not «configured» dirs.
+  const dirs = resolveSkillSources(cfg)
+    .filter((source) => source.enabled && (source.kind === 'preset' || source.kind === 'connected'))
+    .map((source) => source.path)
+    .filter(hasText);
   const existingDirs = dirs.filter(exists);
   const missingDirs = dirs.filter((dir) => !exists(dir));
   const detail = `${dirs.length} dir${dirs.length === 1 ? '' : 's'} · ${existingDirs.length} exist`;

package/src/oauth/browser-availability.ts

@@ -0,0 +1,14 @@
+// OB5d — 브라우저를 열 수 없는 세션이면 «왜 못 여는지 ⊕ 대안»을 한 줄로 말한다(대표 10-01 node-c 실측: ssh 에서 아무 말 없이 기기 코드로 갔다).
+// null = 이 세션에서 브라우저 로그인을 먼저 시도해도 된다.
+export function browserUnavailableReason(env: NodeJS.ProcessEnv = process.env, platform: NodeJS.Platform = process.platform): string | null {
+  const ssh = !!(env.SSH_CONNECTION || env.SSH_CLIENT || env.SSH_TTY);
+  if (platform === 'darwin' || platform === 'win32') {
+    if (!ssh) return null;
+    const where = platform === 'darwin' ? '이 Mac' : '이 PC';
+    return `원격(ssh) 접속이라 브라우저 로그인을 마칠 수 없습니다 — ${where} 화면의 터미널에서 같은 명령을 실행하면 브라우저가 바로 열립니다(붙여넣기 없이). 지금은 아래 코드로 로그인합니다.`;
+  }
+  if (env.DISPLAY || env.WAYLAND_DISPLAY) return null;
+  return ssh
+    ? '원격(ssh) 접속이고 화면이 없어 브라우저를 열 수 없습니다 — 아무 기기의 브라우저에서 아래 주소를 열고 코드를 넣으세요.'
+    : '화면(디스플레이)이 없는 세션이라 브라우저를 열 수 없습니다 — 아무 기기의 브라우저에서 아래 주소를 열고 코드를 넣으세요.';
+}

package/src/oauth/codex-quota-policy.ts

@@ -53,3 +53,19 @@ export function codexPolicyAllowsCredits(policy: CodexQuotaPolicy): boolean {
 export function codexPolicyAllowsFallback(policy: CodexQuotaPolicy): boolean {
   return policy !== 'within-quota';
 }
+
+/** POL1 — the one line a harness launch prints about the codex quota policy it will use, and a loud warning when a
+ *  test universe disagrees with production (10-01: work-tree launches resolved «fallback» and leaked to grok). */
+export function describeLaunchQuotaPolicy(input: {
+  current: ResolvedCodexQuotaPolicy;
+  universe: { kind: 'prod' | 'test'; root: string };
+  production?: ResolvedCodexQuotaPolicy;
+}): { line: string; warning?: string } {
+  const { current, universe, production } = input;
+  const line = `[pod] codex 한도 정책 = ${current.policy}(${CODEX_QUOTA_POLICY_LABEL[current.policy]}) · 출처 ${current.source} · 우주 ${universe.kind} ${universe.root}`;
+  if (universe.kind === 'test' && production && production.policy !== current.policy) {
+    return { line, warning: `⚠️ 이 시험 우주의 한도 정책(${current.policy})이 운영(${production.policy})과 다르다 — 운영과 같게 하려면: bun bin/elanous.mjs config sync-test` };
+  }
+  return { line };
+}
+

package/src/onboarding/continue-here.ts

@@ -5,25 +5,30 @@ export interface ContinueHereOptions {
   /** Already-issued short-lived phone connection link; never pass its token separately. */
   phoneLink?: string;
   telegramEnabled: boolean;
+  /** Tailscale signed in. `host` only when MagicDNS gives a name that serves HTTPS; otherwise the command alone. */
+  tailscale?: { host?: string };
   /** Non-interactive output must not include links (or QR payloads). */
   interactive: boolean;
 }
 
 /** Render post-setup directions without inspecting the daemon, issuing credentials, or performing IO. */
 export function continueHereLines(opts: ContinueHereOptions): string[] {
-  const lines = ['  Continue here:'];
-  if (!opts.daemonRunning) lines.push('  Start the daemon: `elanous nexus run`');
+  const lines = ['  여기서 이어가세요:'];
+  if (!opts.daemonRunning) lines.push('  데몬 켜기: `elanous nexus run`');
   if (opts.interactive && opts.daemonRunning && opts.pwaUrl) {
-    lines.push(`  Browser: ${opts.pwaUrl}`);
+    lines.push(`  브라우저: ${opts.pwaUrl}`);
   } else {
-    lines.push('  Browser: `elanous nexus show`');
+    lines.push('  브라우저: `elanous nexus show`');
   }
   if (opts.interactive && opts.daemonRunning && opts.phoneLink) {
-    lines.push(`  Phone: ${opts.phoneLink}`);
-    lines.push('  ⚠ This link contains a connection token — do not share it or include it in a public screenshot.');
+    lines.push(`  폰: ${opts.phoneLink}`);
+    lines.push('  ⚠ 이 링크에는 연결 토큰이 들어 있습니다 — 남에게 보내거나 공개 캡처에 넣지 마세요.');
   } else {
-    lines.push('  Phone: `elanous phone link --temp --ttl 24h`');
+    lines.push('  폰: `elanous phone link --temp --ttl 24h`');
+  }
+  if (opts.telegramEnabled) lines.push('  텔레그램: `elanous telegram`');
+  if (opts.tailscale) {
+    lines.push(`  어디서든(Tailscale): \`elanous nexus pwa share enable\`${opts.interactive && opts.tailscale.host ? ` → https://${opts.tailscale.host}/app/` : ''}`);
   }
-  if (opts.telegramEnabled) lines.push('  Telegram: `elanous telegram`');
   return lines;
 }

package/src/onboarding/web-first.ts

@@ -2,6 +2,7 @@ import { spawnSync } from 'node:child_process';
 import { isHeadlessEnv } from '../acp/codex-auth.js';
 import { runNexusShow, type NexusShowResult } from '../cli/nexus-show.js';
 import { debug } from '../debug/log.js';
+import { browserUnavailableReason } from '../oauth/browser-availability.js';
 import type { UserConfig } from '../user-config.js';
 
 export interface WebFirstSetupDeps {
@@ -13,6 +14,8 @@ export interface WebFirstSetupDeps {
   renderQr?: (link: string) => string | undefined;
   openBrowser?: (link: string) => boolean;
   isHeadless?: () => boolean;
+  browserEnv?: NodeJS.ProcessEnv;
+  browserPlatform?: NodeJS.Platform;
   print?: (line: string) => void;
 }
 
@@ -70,7 +73,11 @@ export async function runWebFirstSetup(deps: WebFirstSetupDeps): Promise<'link-s
   }
   print('터미널에서 하려면: `elanous setup --terminal`');
   let browserOpened = false;
-  if (!(deps.isHeadless ?? (() => isHeadlessEnv(process.env)))()) {
+  const why = browserUnavailableReason(deps.browserEnv ?? process.env, deps.browserPlatform ?? process.platform);
+  if (why) {
+    print(why);
+    debug.log('browser.open', 'skipped', { reason: why.includes('ssh') ? 'ssh' : 'no-display' });
+  } else if (!(deps.isHeadless ?? (() => isHeadlessEnv(deps.browserEnv ?? process.env)))()) {
     try {
       browserOpened = (deps.openBrowser ?? ((url: string) => {
         const command = process.platform === 'darwin' ? 'open' : process.platform === 'linux' || process.platform === 'freebsd' || process.platform === 'openbsd' ? 'xdg-open' : undefined;

package/src/onboarding.ts

@@ -34,7 +34,7 @@ import { stdin as input, stdout as output } from 'node:process';
 import {
   type UserConfig, type LLMProviderName, type SkillSetName,
   saveUserConfig, markOnboardingComplete, buildUserConfig,
-  skillSetDir, SKILL_SET_NAMES, userConfigPath, urlRoutingDefaults, devRequestRoutingDefaults,
+  skillSetDir, SKILL_SET_NAMES, userConfigPath, urlRoutingDefaults, devRequestRoutingDefaults, defaultSkillDirs, resolveSkillSources,
 } from './user-config.js';
 import {
   GROK_MODEL, OPENAI_MODEL, ANTHROPIC_MODEL, LOCAL_LLM_MODEL, GEMINI_MODEL,
@@ -45,6 +45,7 @@ import { suggestSetupModel } from './model-tier/index.js';
 import { loginWithCodex, CODEX_DEVICE_LOGIN_URL } from './oauth/codex.js';
 import { loginWithCodexBrowser } from './oauth/codex-browser-login.js';
 import { loadTokens } from './oauth/store.js';
+import { browserUnavailableReason } from './oauth/browser-availability.js';
 import { TelegramBot } from './telegram.js';
 import { DiscordBot } from './discord.js';
 import { pickCodexAuthMode, pickCodexModel } from './codex/setup.js';
@@ -61,6 +62,7 @@ import { stepTransition } from './onboarding/transition.js';
 import { unattendedSetupHint } from './onboarding/entry-hints.js';
 import { continueHereLines } from './onboarding/continue-here.js';
 import type { NexusShowResult } from './cli/nexus-show.js';
+import type { TailscaleProbe } from './nexus/onboarding/tailscale-probe.js';
 import type { IssuedTempToken } from './auth/temp-tokens.js';
 import {
   askValidated,
@@ -385,7 +387,11 @@ function assistCodexDeviceLogin(
   const platform = deps.authPlatform ?? process.platform;
   const execute = deps.runAuthCommand ?? runAuthCommand;
   const local = !(deps.isHeadless ?? isHeadlessEnv)(env);
-  if (local) {
+  const unavailable = browserUnavailableReason(env, platform);
+  if (unavailable) {
+    io.print(`  ${unavailable}`);
+    debug.log('browser.open', 'skipped', { reason: unavailable.includes('ssh') ? 'ssh' : 'no-display' });
+  } else if (local) {
     try {
       if (platform === 'darwin') execute('open', [url]);
       else if (platform === 'linux' || platform === 'freebsd' || platform === 'openbsd') execute('xdg-open', [url]);
@@ -582,7 +588,12 @@ async function askLLM(
     if (mode === 'oauth') {
       const env = grokDeps.codexEnv ?? process.env;
       let signedIn = false;
-      if (!(grokDeps.isHeadless ?? isHeadlessEnv)(env)) {
+      const why = browserUnavailableReason(env, grokDeps.authPlatform ?? process.platform);
+      if (why) {
+        io.print(`  ${why}`);
+        debug.log('browser.open', 'skipped', { reason: why.includes('ssh') ? 'ssh' : 'no-display' });
+      }
+      if (!why && !(grokDeps.isHeadless ?? isHeadlessEnv)(env)) {
         // Full-screen IO retains print() messages across redraws. Keep this
         // waiting hint transient so it cannot reappear on the device-code screen.
         if (io.showStep) output.write('  브라우저에서 로그인을 마치세요 — 끝나면 자동으로 이어집니다.\n');
@@ -600,23 +611,23 @@ async function askLLM(
             } catch { /* device code remains available */ }
           }
         }
-        if (signedIn) io.print('  → using your ChatGPT/Codex login.');
+        if (signedIn) io.print('  → ChatGPT/Codex 로그인을 씁니다.');
         else io.print('  브라우저 로그인이 안 됐습니다 — 코드로 이어갑니다');
       }
       if (!signedIn) {
-        io.print('  Launching device-code flow…');
+        io.print('  코드로 로그인합니다…');
         try {
           await (grokDeps.loginWithCodex ?? loginWithCodex)({
             onProgress: (p) => {
               if (p.type === 'user_code') {
                 io.print('');
-                io.print(`    1) Open in any browser: ${p.loginUrl}`);
-                io.print(`    2) Enter code:          ${p.userCode}`);
+                io.print(`    1) 아무 브라우저에서 열기: ${p.loginUrl}`);
+                io.print(`    2) 코드 입력:             ${p.userCode}`);
                 io.print('');
                 assistCodexDeviceLogin(io, p.loginUrl ?? CODEX_DEVICE_LOGIN_URL, p.userCode ?? '', grokDeps);
-                io.print('  Waiting for sign-in…');
+                io.print('  로그인을 기다리는 중…');
               }
-              if (p.type === 'saved') io.print('  Signed in. Tokens saved.');
+              if (p.type === 'saved') io.print('  로그인했습니다. 저장했습니다.');
             },
           });
         } catch (err: any) {
@@ -1316,6 +1327,7 @@ export interface RunWizardOpts {
   /** Post-save connections; injection keeps wizard tests off the real daemon/token store. */
   continueHereDeps?: {
     showNexus?: () => Promise<Pick<NexusShowResult, 'urls' | 'status' | 'instance'>>;
+    probeTailscale?: () => Promise<TailscaleProbe>;
     issueToken?: () => Pick<IssuedTempToken, 'token'>;
     renderQr?: (link: string) => string | undefined;
   };
@@ -1531,9 +1543,28 @@ export async function runOnboarding(opts: RunWizardOpts = {}): Promise<UserConfi
     io.print('');
     io.print('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
     io.print(`  ${m.setupComplete}`);
+    // ER1 — first-run consent notice (default on · 대표 10-01): what is sent and how to turn it off.
+    io.print('  오류가 나면 운영팀에 자동으로 알립니다(오류 내용·버전·무작위 설치 ID — 이름·메일 없이). 끄기: elanous config set errorReports.enabled false');
     io.print(`  Provider : ${marked.llm.provider}${marked.llm.model ? ` (${marked.llm.model})` : ''}`);
-    io.print(`  Skills   : ${marked.skills.activeSet} — ${marked.skills.dirs.length} dir(s)`);
-    for (const d of marked.skills.dirs) io.print(`             ${d}`);
+    // EN5 — show what the loader will actually read (resolveSkillSources), not the raw preset fields.
+    const skillSources = resolveSkillSources(marked).filter((source) => source.enabled);
+    io.print(`  Skills   : ${marked.skills.activeSet} — ${skillSources.length} dir(s)`);
+    for (const source of skillSources) io.print(`             ${source.path}${source.kind === 'preset' ? '' : `  (${source.id})`}`);
+    // EN9 — skills the person already has in another agent: one line, one command (registers in place, no copy).
+    try {
+      const { CONNECT_AGENTS, planConnect } = await import('./skills/connect.js');
+      const active = defaultSkillDirs(marked);
+      for (const agent of CONNECT_AGENTS) {
+        const plan = planConnect(agent, active);
+        if (plan.state === 'new') io.print(`  쓰던 스킬 ${plan.skills.length}개 찾음(${agent}) — 가져오려면: elanous connect ${agent}`);
+      }
+    } catch { /* advisory */ }
+    // EN13 — a bot the person already runs elsewhere: one line, one command (values never shown).
+    try {
+      const { channelImportHint } = await import('./channel-import/run.js');
+      const hint = channelImportHint();
+      if (hint) io.print(`  ${hint}`);
+    } catch { /* advisory */ }
     io.print(`  Obsidian : ${marked.obsidian.vault}`);
     io.print(`  Telegram : ${marked.telegram.enabled ? 'enabled' : 'disabled'}`);
     io.print(`  Discord  : ${marked.discord.enabled ? 'enabled' : 'disabled'}`);
@@ -1571,7 +1602,30 @@ export async function runOnboarding(opts: RunWizardOpts = {}): Promise<UserConfi
         }
       } catch { /* No token/link on failure; show the manual command instead. */ }
     }
-    const directions = continueHereLines({ daemonRunning, pwaUrl, phoneLink, telegramEnabled: marked.telegram.enabled, interactive });
+    let tailscale: { host?: string } | undefined;
+    let installed = false;
+    let alive = false;
+    let probeTimer: ReturnType<typeof setTimeout> | undefined;
+    try {
+      const probe = opts.continueHereDeps?.probeTailscale ?? (async () => {
+        const { probeTailscale } = await import('./nexus/onboarding/tailscale-probe.js');
+        return probeTailscale({ timeoutMs: 2000 });
+      });
+      const status = await Promise.race([
+        probe(),
+        new Promise<undefined>(resolve => { probeTimer = setTimeout(() => resolve(undefined), 2000); }),
+      ]);
+      if (status) {
+        installed = status.installed;
+        alive = status.alive;
+        // A bare hostname has no HTTPS certificate — offer the command without an address.
+        if (installed && alive) tailscale = status.magicDnsHost ? { host: status.magicDnsHost } : {};
+      }
+    } catch { /* Tailscale discovery is advisory. */ }
+    finally { if (probeTimer) clearTimeout(probeTimer); }
+    try { debug.log('onboarding.tailscale', 'probed', { installed, alive, offered: !!tailscale }); }
+    catch { /* Logging must not interrupt setup. */ }
+    const directions = continueHereLines({ daemonRunning, pwaUrl, phoneLink, telegramEnabled: marked.telegram.enabled, interactive, tailscale });
     if (io.nonInteractive) {
       for (const line of directions) process.stdout.write(`${line}\n`);
     } else {

package/src/persona/presets.ts

@@ -0,0 +1,105 @@
+// PS1 — 페르소나 프리셋(MK 문면 · persona-presets/<id>.yaml)을 «내 페르소나»로 만든다.
+// 용어: «페르소나»(대표 10-01) — 사용자가 고르고 꾸미는 AI 동료. ⚠️ `SessionSurfaceId`(이름만 Surface 인 캐릭터 축) ·
+// `modelTier.persona`(모델 등급 축)와는 «다른 것»이다 — 여기서 만드는 것은 기존 페르소나 저장소(`resolveStatePersonaDir()`,
+// Discord·PWA 가 이미 읽는 `<id>.yaml`)의 한 파일이다. 프리셋 원본은 고치지 않는다.
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parse, stringify } from 'yaml';
+
+export interface PersonaPreset {
+  personaId: string;
+  displayName: string;
+  names: string[];
+  role: string;
+  title?: string | null;
+  oneLine: string;
+  voice: { rule: string; examples: string[] };
+  tasks: Array<{ when: string; what: string }>;
+  tools: Array<{ name: string; from: string; optional?: boolean }>;
+  firstQuestions: string[];
+  askBefore?: string[];
+  doesNot: string[];
+  forWhom: string;
+}
+
+export interface PresetCommon { loop_start?: string; always_ask?: string[]; memory?: string; title?: string }
+
+/** `persona-presets/` shipped with this package (src/persona → ../../persona-presets). */
+export function presetsDir(): string {
+  return join(import.meta.dir, '..', '..', 'persona-presets');
+}
+
+export function loadPresetIndex(dir = presetsDir()): { order: string[]; common: PresetCommon } {
+  const index = parse(readFileSync(join(dir, '_index.yaml'), 'utf8')) as { presets?: string[]; common?: PresetCommon };
+  return { order: index.presets ?? [], common: index.common ?? {} };
+}
+
+/** Presets in the index order; files not in the index come last (sorted). */
+export function loadPresets(dir = presetsDir()): PersonaPreset[] {
+  if (!existsSync(dir)) return [];
+  const { order } = loadPresetIndex(dir);
+  const files = readdirSync(dir).filter((f) => f.endsWith('.yaml') && !f.startsWith('_')).map((f) => f.slice(0, -5));
+  const ids = [...order.filter((id) => files.includes(id)), ...files.filter((id) => !order.includes(id)).sort()];
+  return ids.map((id) => parse(readFileSync(join(dir, `${id}.yaml`), 'utf8')) as PersonaPreset);
+}
+
+/** Find by id or by any of its names (case-insensitive). */
+export function findPreset(presets: readonly PersonaPreset[], query: string): PersonaPreset | undefined {
+  const q = query.trim().toLowerCase();
+  return presets.find((p) => p.personaId === q) ?? presets.find((p) => p.names.some((n) => n.toLowerCase() === q) || p.role === query.trim());
+}
+
+/** The persona's working instructions, assembled from the preset (and the shared rules). */
+export function presetSystemPrompt(p: PersonaPreset, common: PresetCommon, name: string): string {
+  const lines = [
+    `너는 «${name}», ${p.role}다. ${p.oneLine}`,
+    '',
+    `말투: ${p.voice.rule}`,
+    ...p.voice.examples.map((e) => `  예) ${e}`),
+    '',
+    '맡은 일:',
+    ...p.tasks.map((t) => `- ${t.when}: ${t.what}`),
+    '',
+    `처음 만나면 묻는다: ${p.firstQuestions.join(' / ')}`,
+    `먼저 확인을 받는다: ${[...(p.askBefore ?? []), ...(common.always_ask ?? [])].join(' · ')}`,
+    '하지 않는다:',
+    ...p.doesNot.map((d) => `- ${d}`),
+  ];
+  if (common.loop_start) lines.push('', `시작 방식: ${common.loop_start}`);
+  return lines.join('\n');
+}
+
+/** ASCII id for the profile file: from --name when it is latin, else the preset id; `-2`, `-3`… when taken. */
+export function choosePersonaId(preset: PersonaPreset, name: string | undefined, taken: ReadonlySet<string>): string {
+  const fromName = name?.toLowerCase().normalize('NFKD').replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+  const base = fromName && /^[a-z0-9]/.test(fromName) ? fromName.slice(0, 32) : preset.personaId;
+  if (!taken.has(base)) return base;
+  for (let i = 2; ; i++) if (!taken.has(`${base}-${i}`)) return `${base}-${i}`;
+}
+
+/** The profile YAML written to the persona store (the existing loader reads it; `preset` records where it came from). */
+export function presetToProfileYaml(p: PersonaPreset, common: PresetCommon, opts: { personaId: string; name?: string; title?: string }): string {
+  const name = opts.name?.trim() || p.names[0] || p.displayName;
+  const title = opts.title ?? p.title ?? undefined;
+  const profile = {
+    personaId: opts.personaId,
+    displayName: opts.name?.trim() ? `${opts.name.trim()} · ${p.role}` : p.displayName,
+    description: p.oneLine,
+    systemPrompt: presetSystemPrompt(p, common, name),
+    preset: { id: p.personaId, role: p.role, ...(title ? { title } : {}), tools: p.tools.map((t) => t.name), firstQuestions: p.firstQuestions },
+  };
+  return `# 프리셋 «${p.personaId}» 에서 만든 페르소나 — elanous persona add (원본: persona-presets/${p.personaId}.yaml)\n${stringify(profile, { lineWidth: 0 })}`;
+}
+
+/** Short block for `persona show` and `persona list`. */
+export function describePreset(p: PersonaPreset): string[] {
+  return [
+    `${p.displayName} — ${p.role}${p.title ? ` (${p.title})` : ''}`,
+    `  ${p.oneLine}`,
+    `  누구에게: ${p.forWhom}`,
+    `  맡는 일: ${p.tasks.map((t) => `${t.when} ${t.what}`).join(' / ')}`,
+    `  쓰는 도구: ${p.tools.map((t) => (t.optional ? `${t.name}(선택 · 따로 설치)` : t.name)).join(', ')}`,
+    `  처음 묻는 것: ${p.firstQuestions.join(' / ')}`,
+    `  하지 않는 것: ${p.doesNot.join(' / ')}`,
+  ];
+}

package/src/release-loop/checklist.ts

@@ -8,6 +8,8 @@ import { CliUserError } from '../cli/cli-user-error.js';
 
 export type ChecklistStatus = 'green' | 'yellow' | 'red' | 'done';
 export type ChecklistDisposition = 'move' | 'known-issue' | 'block';
+/** `screen` = a five-surface feature cell — its evidence carries a `짝:` line (MANUAL-five-surface-parity §A). */
+export type ChecklistKind = 'screen';
 export interface ChecklistItem {
   id: string;
   title: string;
@@ -15,6 +17,7 @@ export interface ChecklistItem {
   owner?: string;
   evidence?: string;
   disposition?: ChecklistDisposition;
+  kind?: ChecklistKind;
   updatedAt: string;
   updatedBy: string;
 }
@@ -110,27 +113,29 @@ function change(data: Checklist, id: string, field: string, from: unknown, to: u
 
 function refresh(data: Checklist): void { data.released = releasedVersion(); data.dev = devVersion(); }
 
-export function addItem(v: string, input: { id: string; title: string; owner?: string }): Checklist {
+export function addItem(v: string, input: { id: string; title: string; owner?: string; kind?: ChecklistKind }): Checklist {
   if (!input.id.trim()) throw new CliUserError('칸 id 가 비었다');
   if (!input.title.trim()) throw new CliUserError('칸 제목이 비었다');
+  if (input.kind !== undefined && input.kind !== 'screen') throw new CliUserError(`잘못된 종류: ${input.kind}`, 'screen');
   return mutate(v, (data) => {
     if (data.items.some((item) => item.id === input.id)) throw new CliUserError(`이미 있는 칸: ${input.id}`, 'set <id> 로 고친다');
     const by = process.env.ELANOUS_TRACK || 'cli';
     const at = new Date().toISOString();
-    const item: ChecklistItem = { id: input.id, title: input.title, status: 'yellow', ...(input.owner !== undefined ? { owner: input.owner } : {}), updatedAt: at, updatedBy: by };
+    const item: ChecklistItem = { id: input.id, title: input.title, status: 'yellow', ...(input.owner !== undefined ? { owner: input.owner } : {}), ...(input.kind !== undefined ? { kind: input.kind } : {}), updatedAt: at, updatedBy: by };
     data.items.push(item);
     change(data, item.id, 'add', null, item, by, at);
     return true;
   });
 }
 
-export function setItem(v: string, id: string, patch: { status?: ChecklistStatus; evidence?: string; owner?: string; disposition?: ChecklistDisposition }, by: string): Checklist {
+export function setItem(v: string, id: string, patch: { status?: ChecklistStatus; evidence?: string; owner?: string; disposition?: ChecklistDisposition; kind?: ChecklistKind }, by: string): Checklist {
   return mutate(v, (data) => {
     const item = data.items.find((i) => i.id === id);
     if (!item) throw new CliUserError(`없는 칸: ${id}`, 'list 로 칸 목록을 본다');
     if (patch.status !== undefined && !['green', 'yellow', 'red', 'done'].includes(patch.status)) throw new CliUserError(`잘못된 상태: ${patch.status}`);
     if (patch.disposition !== undefined && !['move', 'known-issue', 'block'].includes(patch.disposition)) throw new CliUserError(`잘못된 처분: ${patch.disposition}`);
-    const fields = (['evidence', 'owner', 'status', 'disposition'] as const).filter((field) => patch[field] !== undefined && patch[field] !== item[field]);
+    if (patch.kind !== undefined && patch.kind !== 'screen') throw new CliUserError(`잘못된 종류: ${patch.kind}`, 'screen');
+    const fields = (['evidence', 'owner', 'status', 'disposition', 'kind'] as const).filter((field) => patch[field] !== undefined && patch[field] !== item[field]);
     if (fields.length === 0) return false;
     const at = new Date().toISOString();
     for (const field of fields) {
@@ -180,11 +185,29 @@ export interface ChecklistGate {
   blocked: string[];
   moved: string[];
   knownIssues: Array<{ id: string; title: string; evidence: string }>;
+  /** Screen cells whose `짝:` line is missing or has an untracked ⏳ — a warning; it never changes `ok`. */
+  parity?: Array<{ id: string; why: string }>;
+}
+
+const PARITY_LINE = /짝:\s*PWA\s*(.+?)\s*·\s*데스크톱\s*(.+?)\s*·\s*폴드\s*(.+?)\s*·\s*아이폰\s*(.+?)\s*·\s*아이패드\s*(.+?)\s*$/m;
+const PARITY_SURFACES = ['PWA', '데스크톱', '폴드', '아이폰', '아이패드'] as const;
+
+/** Why a screen cell's evidence fails the five-surface rule, or null when it passes. */
+export function parityGap(evidence: string | undefined): string | null {
+  if (!evidence || !/짝:/.test(evidence)) return '근거에 짝: 줄이 없다';
+  const match = PARITY_LINE.exec(evidence);
+  if (!match) return '짝: 줄에 다섯 열(PWA · 데스크톱 · 폴드 · 아이폰 · 아이패드)이 다 없다';
+  const untracked = PARITY_SURFACES.filter((_, i) => match[i + 1]!.includes('⏳') && !/\(칸 /.test(match[i + 1]!));
+  return untracked.length ? `⏳ 에 (칸 …) 번호가 없다: ${untracked.join(', ')}` : null;
 }
 
 export function checklistGate(v: string): ChecklistGate {
-  const result: ChecklistGate = { ok: true, red: [], undecided: [], blocked: [], moved: [], knownIssues: [] };
+  const result: ChecklistGate = { ok: true, red: [], undecided: [], blocked: [], moved: [], knownIssues: [], parity: [] };
   for (const item of listChecklist(v).items) {
+    if (item.kind === 'screen') {
+      const why = parityGap(item.evidence);
+      if (why) result.parity!.push({ id: item.id, why });
+    }
     if (item.status === 'red') result.red.push(item.id);
     if (item.status !== 'yellow') continue;
     if (item.disposition === 'block') result.blocked.push(item.id);

package/src/self-dev/orchestrate.ts

@@ -987,6 +987,23 @@ async function deleteLabelledJobs(runId: string, selectedTargets: readonly { con
   return counts.reduce((sum, count) => sum + count, 0);
 }
 
+/** `self-dev-runs/<runId>/pid.json` — what `harness stop <runId>` reads (start time guards PID reuse).
+ *  HS1: written as soon as the run ID exists, not only when the jobs start — pod planning and image sync can
+ *  take minutes before that, and a stop in that window found «no process» (10-01 · three runs). */
+export function writeRunPidRecord(runId: string, runsDir: string = selfDevRunsDir()): string {
+  const pidPath = join(runsDir, runId, 'pid.json');
+  mkdirSync(join(runsDir, runId), { recursive: true });
+  const temporary = `${pidPath}.${process.pid}.${randomUUID()}.tmp`;
+  const fd = openSync(temporary, 'wx', 0o600);
+  try {
+    try {
+      writeFileSync(fd, JSON.stringify({ pid: process.pid, startedAt: Date.now() - Math.floor(process.uptime() * 1000), argv0: process.argv0 }));
+    } finally { closeSync(fd); }
+    renameSync(temporary, pidPath);
+  } catch (error) { unlinkSync(temporary); throw error; }
+  return pidPath;
+}
+
 /**
  * Run N self-dev jobs in parallel under the TOX dispatcher and resolve
  * once every job reaches a terminal status.
@@ -1419,17 +1436,7 @@ export function orchestrateSelfDev(opts: OrchestrateSelfDevOptions): Promise<Sel
     signals.on('SIGTERM', onTerm);
     signals.on('SIGINT', onInt);
     try {
-      if (pidPath) {
-        mkdirSync(join(opts.runsDir ?? selfDevRunsDir(), runId!), { recursive: true });
-        const temporary = `${pidPath}.${process.pid}.${randomUUID()}.tmp`;
-        const fd = openSync(temporary, 'wx', 0o600);
-        try {
-          try {
-            writeFileSync(fd, JSON.stringify({ pid: process.pid, startedAt: Date.now() - Math.floor(process.uptime() * 1000), argv0: process.argv0 }));
-          } finally { closeSync(fd); }
-          renameSync(temporary, pidPath);
-        } catch (error) { unlinkSync(temporary); throw error; }
-      }
+      if (pidPath) writeRunPidRecord(runId!, opts.runsDir ?? selfDevRunsDir());
     } catch (error) { cleanup(); reject(error); return; }
 
     // Current full result set: resumed-done goals + each running task's

package/src/shell-env-bootstrap.ts

@@ -88,7 +88,7 @@ export function parsePrintenv(raw: string): Record<string, string> {
  *    - HOME, USER, LOGNAME, SHELL, TERM
  *    - LANG / LC_* — locale matters for some prompts (starship, powerlevel)
  *  Everything else is left for the login shell itself to define. */
-export function runPrintenvCapture(): Record<string, string> | null {
+function captureSeed(): { shell: string; seedEnv: NodeJS.ProcessEnv } | null {
   const shell = process.env.SHELL;
   if (!shell) return null;
   const base = basename(shell);
@@ -103,6 +103,22 @@ export function runPrintenvCapture(): Record<string, string> | null {
   for (const [k, v] of Object.entries(process.env)) {
     if (k.startsWith('LC_') && typeof v === 'string') seedEnv[k] = v;
   }
+  return { shell, seedEnv };
+}
+
+/** printenv output → env, or null when it does not look like a real login env. */
+function acceptCapture(stdout: string): Record<string, string> | null {
+  if (!stdout) return null;
+  const parsed = parsePrintenv(stdout);
+  // Sanity: require PATH and at least 5 keys, else something is off.
+  if (!parsed.PATH || Object.keys(parsed).length < 5) return null;
+  return parsed;
+}
+
+export function runPrintenvCapture(): Record<string, string> | null {
+  const seed = captureSeed();
+  if (!seed) return null;
+  const { shell, seedEnv } = seed;
 
   let res: ReturnType<typeof spawnSync>;
   try {
@@ -119,12 +135,33 @@ export function runPrintenvCapture(): Record<string, string> | null {
   }
   if (res.status !== 0 && res.status !== null) return null;
   if (res.signal) return null;
-  const stdout = typeof res.stdout === 'string' ? res.stdout : '';
-  if (!stdout) return null;
-  const parsed = parsePrintenv(stdout);
-  // Sanity: require PATH and at least 5 keys, else something is off.
-  if (!parsed.PATH || Object.keys(parsed).length < 5) return null;
-  return parsed;
+  return acceptCapture(typeof res.stdout === 'string' ? res.stdout : '');
+}
+
+/** Fill the login-env cache off the event loop (daemon boot). The first web-terminal spawn otherwise ran the
+ *  `-l -i` printenv with spawnSync and froze the whole daemon for ~3 s (10-02 TERM1). A no-op once captured;
+ *  a failed warm leaves the cache empty so `getCapturedEnv()` still tries (and falls back) as before. */
+export async function warmCapturedEnv(spawn: typeof Bun.spawn = Bun.spawn): Promise<boolean> {
+  if (captured) return cached !== null;
+  if (process.env.ELANOUS_SKIP_LOGIN_ENV === '1' || process.env.TERM_PROGRAM === 'monad-agent-nested') return false;
+  const seed = captureSeed();
+  if (!seed) return false;
+  const start = Date.now();
+  try {
+    const proc = spawn([seed.shell, '-l', '-i', '-c', 'printenv'], { env: seed.seedEnv as Record<string, string>, stdin: 'ignore', stdout: 'pipe', stderr: 'ignore' });
+    const timer = setTimeout(() => proc.kill(), TIMEOUT_MS);
+    const [out, code] = await Promise.all([new Response(proc.stdout as ReadableStream).text(), proc.exited]);
+    clearTimeout(timer);
+    const parsed = code === 0 ? acceptCapture(out) : null;
+    if (captured) return cached !== null; // a synchronous capture won the race
+    if (!parsed) return false;
+    cached = parsed;
+    captured = true;
+    debug.log('shell.envbootstrap.capture', 'warmed', { ok: true, ms: Date.now() - start, keyCount: Object.keys(parsed).length });
+    return true;
+  } catch {
+    return false;
+  }
 }
 
 /** Return the captured login env, running the capture on first call.