elanous 0.2.9 → 0.2.10

package/scripts/ci-pwa-build-gate.ts

@@ -0,0 +1,160 @@
+#!/usr/bin/env bun
+// PWA build gate (GATE-PWA · 10-02 MAT1b near-miss: a PWA-bundled src module gained a TUI import and every gate passed).
+// The PWA is a static export outside `bun test`/tsc, so a change that reaches its bundle graph is built here.
+// Reach is decided by the TypeScript program of apps/pwa/tsconfig.json (aliases, extends, type imports included);
+// anything the program cannot decide is treated as reaching the PWA — «unsure» builds, it never skips.
+import { spawnSync } from 'node:child_process';
+import { existsSync, readdirSync } from 'node:fs';
+import { basename, dirname, extname, join, relative, resolve, sep } from 'node:path';
+import ts from 'typescript';
+import { debug } from '../src/debug/log.js';
+import { checkPwaBuildDeps } from '../src/cli/pwa-build.js';
+import { prepareDeterministicChildEnvironment } from './lib/deterministic-env.js';
+import { parseChangedFiles } from './ci-ios-unit-tests.js';
+
+const ROOT = join(import.meta.dir, '..');
+const PWA_PREFIX = 'apps/pwa/';
+const PWA_IGNORED = /^apps\/pwa\/(?:node_modules|\.next|out)\//;
+const TS_SOURCE = /\.(?:tsx?|mts|cts)$/;
+const CODE_OR_ASSET = /\.(?:[cm]?[jt]sx?|json|css|scss|svg|png|jpe?g|webp|woff2?)$/;
+
+export type BuildResult = { status: number | null; output: string; error?: Error };
+export type PwaGraph = { files: Set<string>; uncertain: string | null };
+export type PwaGateIo = {
+  args?: readonly string[];
+  cwd?: string;
+  log?: (line: string) => void;
+  error?: (line: string) => void;
+  /** Repo-relative changed files when `--changed-files` is absent (test seam · default git diff vs origin/main). */
+  changedFiles?: (root: string) => string[] | null;
+  graph?: (root: string) => PwaGraph;
+  runBuild?: (root: string) => BuildResult;
+};
+
+function defaultBuild(root: string): BuildResult {
+  const pwa = join(root, 'apps/pwa');
+  let deps = checkPwaBuildDeps(pwa);
+  if (!deps.ok) {
+    // Pod worktrees and fresh harvest trees often have no apps/pwa/node_modules — install once from the lockfile, then re-check.
+    const install = spawnSync('bun', ['install', '--frozen-lockfile'], { cwd: pwa, encoding: 'utf8', timeout: 300_000, maxBuffer: 16 * 1024 * 1024 });
+    try { debug.log('gate.pwa', 'deps-install', { status: install.status }); } catch { /* fail-soft */ }
+    deps = checkPwaBuildDeps(pwa);
+    if (!deps.ok) return { status: null, output: `apps/pwa/node_modules incomplete after install (rc=${install.status}): ${deps.missing.slice(0, 3).join(', ')}` };
+  }
+  const isolated = prepareDeterministicChildEnvironment('elanous-pwa-build-gate-');
+  try {
+    // Same build `nexus build` runs (runPwaBuild → bun run build), with HOME/state/config confined to a temp child env.
+    const result = spawnSync('bun', ['run', 'build'], { cwd: pwa, env: isolated.env, encoding: 'utf8', timeout: 300_000, maxBuffer: 32 * 1024 * 1024 });
+    return { status: result.status, output: `${result.stdout ?? ''}\n${result.stderr ?? ''}`, error: result.error };
+  } finally {
+    isolated.cleanup();
+  }
+}
+
+function defaultChangedFiles(root: string): string[] | null {
+  const r = spawnSync('git', ['diff', '--name-only', 'origin/main...HEAD'], { cwd: root, encoding: 'utf8' });
+  if (r.status !== 0) return null;
+  return r.stdout.split('\n').map((l) => l.trim()).filter(Boolean);
+}
+
+/** Dynamic import()/require() whose argument is not a string literal — the program cannot follow it. */
+function opaqueLoad(sf: ts.SourceFile): boolean {
+  let found = false;
+  const visit = (node: ts.Node): void => {
+    if (found) return;
+    if (ts.isCallExpression(node) && (node.expression.kind === ts.SyntaxKind.ImportKeyword
+      || (ts.isIdentifier(node.expression) && node.expression.text === 'require'))) {
+      const arg = node.arguments[0];
+      if (!arg || !(ts.isStringLiteral(arg) || ts.isNoSubstitutionTemplateLiteral(arg))) { found = true; return; }
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sf);
+  return found;
+}
+
+/** Every repo file the PWA program loads, plus same-stem siblings (a `.d.ts` may stand in for the `.js` the bundler reads). */
+export function pwaGraph(root: string): PwaGraph {
+  const configPath = join(root, 'apps/pwa/tsconfig.json');
+  const read = ts.readConfigFile(configPath, ts.sys.readFile);
+  if (read.error) return { files: new Set(), uncertain: `tsconfig unreadable: ${ts.flattenDiagnosticMessageText(read.error.messageText, ' ')}` };
+  const parsed = ts.parseJsonConfigFileContent(read.config, ts.sys, dirname(configPath));
+  if (parsed.errors.some((d) => d.category === ts.DiagnosticCategory.Error)) {
+    return { files: new Set(), uncertain: `tsconfig invalid: ${ts.flattenDiagnosticMessageText(parsed.errors[0]!.messageText, ' ')}` };
+  }
+  const program = ts.createProgram({ rootNames: parsed.fileNames, options: { ...parsed.options, noEmit: true } });
+  const files = new Set<string>();
+  const absRoot = resolve(root) + sep;
+  for (const sf of program.getSourceFiles()) {
+    const abs = resolve(sf.fileName);
+    if (!abs.startsWith(absRoot) || abs.includes(`${sep}node_modules${sep}`)) continue;
+    const rel = relative(root, abs).split(sep).join('/');
+    files.add(rel);
+    // A non-literal import()/require() is a bundler «context»: anything beside it may be loaded — take the whole directory.
+    if (opaqueLoad(sf)) {
+      const dir = dirname(abs);
+      try {
+        for (const name of readdirSync(dir)) if (/\.(?:[cm]?[jt]sx?|json)$/.test(name)) files.add(relative(root, join(dir, name)).split(sep).join('/'));
+      } catch { return { files, uncertain: `cannot list ${relative(root, dir)} beside a non-literal import` }; }
+    }
+    const stem = basename(rel).replace(/\.d\.ts$|\.[^.]+$/, '');
+    for (const ext of ['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.d.ts', '.json', '.css']) {
+      const sibling = join(dirname(rel), stem + ext).split(sep).join('/');
+      if (existsSync(join(root, sibling))) files.add(sibling);
+    }
+  }
+  return { files, uncertain: null };
+}
+
+export type PwaReach = { reaches: boolean; reason: string; hits: string[] };
+
+/** Decide whether a change set reaches the PWA build. Unknowns reach. */
+export function pwaReach(changed: readonly string[], graph: () => PwaGraph): PwaReach {
+  const pwaHits = changed.filter((f) => f.startsWith(PWA_PREFIX) && !PWA_IGNORED.test(f));
+  if (pwaHits.length) return { reaches: true, reason: `apps/pwa 변경 ${pwaHits.length}개`, hits: pwaHits };
+  // Any repo file the PWA program loads counts (src/, scripts/, shared roots); non-code files under src/ build conservatively.
+  const candidates = changed.filter((f) => CODE_OR_ASSET.test(f));
+  if (!candidates.length) return { reaches: false, reason: `변경 ${changed.length}개 중 코드·자산 파일 0개`, hits: [] };
+  let g: PwaGraph;
+  try { g = graph(); } catch (err) { return { reaches: true, reason: `PWA 그래프를 못 읽었다(${err instanceof Error ? err.message : String(err)}) — 닿는 것으로 본다`, hits: candidates }; }
+  if (g.uncertain) return { reaches: true, reason: `PWA 그래프 판정 불가(${g.uncertain}) — 닿는 것으로 본다`, hits: candidates };
+  const hits = candidates.filter((f) => g.files.has(f) || (f.startsWith('src/') && !TS_SOURCE.test(f)));
+  if (hits.length) return { reaches: true, reason: `PWA 가 닿는 파일 ${hits.length}개`, hits };
+  return { reaches: false, reason: `코드 변경 ${candidates.length}개 — PWA 그래프(${g.files.size}개) 밖`, hits: [] };
+}
+
+export function runPwaBuildGate(io: PwaGateIo = {}): number {
+  const log = io.log ?? console.log;
+  const error = io.error ?? console.error;
+  const root = io.cwd ?? ROOT;
+  if (!io.graph && !existsSync(join(root, 'apps/pwa/package.json'))) {
+    log('[pwa-gate] 해당 없음 — 이 트리에 apps/pwa 가 없다.');
+    return 0;
+  }
+  const changed = parseChangedFiles(io.args ?? process.argv.slice(2)) ?? (io.changedFiles ?? defaultChangedFiles)(root);
+  if (changed === null) {
+    error('[pwa-gate] 측정 불가 — 변경 파일 목록을 못 얻었다(git diff 실패).');
+    return 1;
+  }
+  const reach = pwaReach(changed, () => (io.graph ?? pwaGraph)(root));
+  try { debug.log('gate.pwa', reach.reaches ? 'reach' : 'skip', { changed: changed.length, hits: reach.hits.slice(0, 20), reason: reach.reason }); } catch { /* fail-soft */ }
+  if (!reach.reaches) {
+    log(`[pwa-gate] 해당 없음 — ${reach.reason}.`);
+    return 0;
+  }
+  log(`[pwa-gate] 대상 — ${reach.reason}${reach.hits.length ? ` (${reach.hits.slice(0, 5).join(', ')}${reach.hits.length > 5 ? ' …' : ''})` : ''} — PWA 빌드를 돌린다.`);
+  const started = Date.now();
+  const result = (io.runBuild ?? defaultBuild)(root);
+  const seconds = Math.round((Date.now() - started) / 1000);
+  try { debug.log('gate.pwa', 'build', { status: result.status, seconds }); } catch { /* fail-soft */ }
+  if (result.status === 0) {
+    log(`[pwa-gate] PASS — PWA 빌드 성공(${seconds}s).`);
+    return 0;
+  }
+  const tail = result.output.trim().split('\n').slice(-15).join('\n');
+  if (result.status === null) error(`[pwa-gate] 측정 불가 — 빌드를 못 돌렸다: ${result.error?.message ?? tail.split('\n').pop() ?? 'unknown'}`);
+  else error(`[pwa-gate] FAIL — PWA 빌드 실패(rc=${result.status} · ${seconds}s):\n${tail}`);
+  return 1;
+}
+
+if (import.meta.main) process.exit(runPwaBuildGate());

package/scripts/coord-channel-watch.sh

@@ -48,8 +48,8 @@
 
 set -u
 
-PR_NUM="${CH_PR:-20798}"  # ⛔ 2026-09-27: #16815 가 2,500 상한에 닿아 채널 «5» 로 옮김(🅞 · 벽에 «닿은 뒤» — 미리 못 옮겼다)
-#   📏 이력: #5730(07-28~08-12) → #8328(08-11~08-25) → #12577(08-25~09-10) → #16815(09-10~09-27) → #20798.
+PR_NUM="${CH_PR:-23032}"  # ⛔ 2026-10-03: #20798 가 2,500 상한 → 채널 «6»(OP)  # ⛔ 2026-09-27: #16815 가 2,500 상한에 닿아 채널 «5» 로 옮김(🅞 · 벽에 «닿은 뒤» — 미리 못 옮겼다)
+#   📏 이력: #5730(07-28~08-12) → #8328(08-11~08-25) → #12577(08-25~09-10) → #16815(09-10~09-27) → #20798(09-27~10-03) → #23032.
 #   ***수명이 «2주 안팎»이다 — 세 판이 전부 그랬다.*** 다음 벽은 09-24 언저리.
 #   🩹 발신이 rc=1 이면 먼저 세라: gh api repos/ElanvitalAI/elanous/issues/<n> --jq .comments
 REPO="${CH_REPO:-ElanvitalAI/elanous}"
@@ -418,6 +418,23 @@ FALLBACK_USES=0
 #     「파이프를 통과하면 성패가 사라진다」와 같은 뿌리다.
 FALLBACK_FLAG="${TMPDIR:-/tmp}/ch-watch-fallback-$PR_NUM-$TRACK.$$"
 
+emit_comments() {  # $1=JSONL (line, archive, comment)
+  local out="$1" deferred
+  [ -n "$out" ] || return 0
+  if [ "${COORD_WATCH_SKIP_OTHERS_REPORTS:-}" = "1" ]; then
+    deferred=$(printf '%s\n' "$out" | jq -c 'select(.archive) | .comment') || return 1
+    if [ -n "$deferred" ]; then
+      mkdir -p "$HOME/.elanous/coord" || return 1
+      printf '%s\n' "$deferred" >> "$HOME/.elanous/coord/$SELF_ID-reports.jsonl" || return 1
+    fi
+  fi
+  if [ "${COORD_WATCH_SKIP_OTHERS_REPORTS:-}" = "1" ]; then
+    printf '%s\n' "$out" | jq -r 'select(.archive | not) | .line' || return 1
+  else
+    printf '%s\n' "$out" | jq -r '.line' || return 1
+  fi
+}
+
 fetch_comments() {   # $1=since(ISO8601) → stdout=포맷된 신규 행 · rc=0 성공 / rc=1 두 경로 다 실패
   local since="$1" out fmt
   # 두 경로가 «같은 형태»를 내도록 정규화된 객체 하나만 본다: {id, created_at, login, body}
@@ -426,13 +443,30 @@ fetch_comments() {   # $1=since(ISO8601) → stdout=포맷된 신규 행 · rc=0
   #     그 글은 필터를 «통과»했고 창에도 떴다 — 그런데 다른 글 사이에 섞여 «요청»으로 안 보였다.
   #   🔑 그러므로 결손은 「고르기」가 아니라 ***「고른 뒤 «구분»하지 않은 것」***이다.
   #   ⛔ 표지를 «본문 앞»에 둔다 — 뒤에 두면 BODY_CHARS 절단에 잘려 사라진다.
-  fmt="select(((.body | sub(\"^[[:space:]#]+\"; \"\")) | (startswith(\"**[$SELF_ID]\") or startswith(\"[$SELF_ID]\") or startswith(\"**[$SELF_ALIAS]\") or startswith(\"[$SELF_ALIAS]\"))) | not)
-       | \"[#$PR_NUM 신규 id=\" + (.id|tostring) + \" \" + .created_at + \" @\" + .login + \"]\"
-         + (if ((.body | test(\"$REQ_ADDR\")) or ((.body | test(\"$REQ_MARK\")) and (.body | test(\"부탁드립니다|부탁합니다\")))) then \" 🙋‼️ 나에게 온 «요청»\" else \"\" end)
-         + \" \" + (.body[:$BODY_CHARS] | gsub(\"\n\"; \" ⏎ \"))"
+  fmt=$(cat <<JQ
+select(((.body | sub("^[[:space:]#]+"; "")) | (startswith("**[$SELF_ID]") or startswith("[$SELF_ID]") or startswith("**[$SELF_ALIAS]") or startswith("[$SELF_ALIAS]"))) | not)
+| . as \$comment
+| ((.body | split("\n")[0] | capture("^[[:space:]#]*[*][*][[][^]]+[]][*][*][^\n]*→[[:space:]]*(?<to>[^\n]+?)[[:space:]]*·[[:space:]]*(?<kind>요청|결정|사고|보고|정정)[[:space:]]*·")) // null) as \$envelope
+| (if \$envelope == null then false else
+     (\$envelope.to | split("·") | map(gsub("^[[:space:]]+|[[:space:]]+$"; "")))
+     | any(.[]; . == "$SELF_ID" or . == "$SELF_ALIAS" or . == "전원")
+   end) as \$mine
+| ((.body | test("$REQ_ADDR")) or ((.body | test("$REQ_MARK")) and (.body | test("부탁드립니다|부탁합니다")))) as \$legacy_request
+| (\$envelope != null and \$envelope.kind == "보고" and (\$mine | not)) as \$archive
+| {comment: \$comment, archive: \$archive,
+   line: ("[#$PR_NUM 신규 id=" + (.id|tostring) + " " + .created_at + " @" + .login + "]"
+     + (if \$mine and \$envelope.kind == "결정" then " 🙋 나에게 «결정»"
+        elif \$mine and \$envelope.kind == "요청" then " 🙋 나에게 «요청»"
+        else "" end)
+     + (if \$legacy_request then " 🙋‼️ 나에게 온 «요청»" else "" end)
+     + (if \$envelope != null and (\$envelope.kind == "사고" or \$envelope.kind == "정정") then " 🚨"
+        elif \$archive then " 📄 보고" else "" end)
+     + " " + (.body[:$BODY_CHARS] | gsub("\n"; " ⏎ ")))}
+JQ
+)
   if out=$(gh api --paginate "repos/$REPO/issues/$PR_NUM/comments?since=$since" \
              --jq ".[] | {id, created_at, login: .user.login, body} | $fmt" 2>/dev/null); then
-    printf '%s' "$out"; return 0
+    emit_comments "$out"; return $?
   fi
   local owner="${REPO%%/*}" name="${REPO##*/}"
   if out=$(gh api graphql -f query="query{repository(owner:\"$owner\",name:\"$name\"){pullRequest(number:$PR_NUM){comments(last:$COMMENT_FALLBACK_LAST){nodes{databaseId createdAt author{login} body}}}}}" \
@@ -443,7 +477,7 @@ fetch_comments() {   # $1=since(ISO8601) → stdout=포맷된 신규 행 · rc=0
     # ⭐ 폴백이 «쓰였다»는 사실만 남긴다 — 세는 것도 알릴지 정하는 것도 «부모 셸»이 한다.
     #   ⛔ 여기서 세면 서브셸과 함께 사라진다(위 머리말).
     : > "$FALLBACK_FLAG" 2>/dev/null || true
-    printf '%s' "$out"; return 0
+    emit_comments "$out"; return $?
   fi
   return 1
 }

package/scripts/coord-digest.ts

@@ -0,0 +1,199 @@
+#!/usr/bin/env bun
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { debug } from '../src/debug/log.js';
+import { devVersion, listChecklist, statusChangesSince } from '../src/release-loop/checklist.js';
+
+interface Report { id: number | string; created_at: string; login: string; body: string }
+interface Change { version: string; at: string; from: unknown; to: unknown }
+interface Cell { id: string; reports: number; bySender: Record<string, number>; last: string | null; statusChanges: Change[] }
+interface Digest { track: string; since: string; versions: string[]; cells: Cell[]; totals: { reports: number; cells: number; statusChanges: number } }
+
+const NO_CELL = '칸 없음';
+const registry = JSON.parse(readFileSync(join(import.meta.dir, 'coord-tracks.json'), 'utf8')) as { tracks: Array<{ id: string; alias?: string }> };
+const recipients = new Set(['전원', ...registry.tracks.flatMap(({ id, alias }) => alias ? [id, alias] : [id])]);
+const STATUS_ICON: Record<string, string> = { yellow: '🟡', green: '🟢', red: '🔴', done: '✅' };
+
+function options(args: string[]): { track: string; hours: number; versions: string[]; json: boolean; explicitSince: boolean } {
+  let track = '';
+  let hours = 2;
+  let json = false;
+  let explicitSince = false;
+  const versions: string[] = [];
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--track' && args[i + 1]) track = args[++i]!;
+    else if (arg === '--since' && args[i + 1]) {
+      const match = /^(\d+(?:\.\d+)?)h$/.exec(args[++i]!);
+      if (!match || Number(match[1]) <= 0) throw new Error('--since 는 양수 시간(예: 2h)이어야 한다');
+      hours = Number(match[1]);
+      explicitSince = true;
+    } else if (arg === '--version' && args[i + 1]) versions.push(args[++i]!);
+    else if (arg === '--json') json = true;
+    else throw new Error(`모르는 인자: ${arg}`);
+  }
+  if (!/^[A-Za-z][A-Za-z0-9]*$/.test(track)) throw new Error('--track <ID> 가 필요하다');
+  return { track, hours, versions: versions.length ? [...new Set(versions)] : [devVersion().replace(/-dev\.\d+$/, '')], json, explicitSince };
+}
+
+function reportCell(body: string): { id: string; sender: string } | null {
+  const line = body.split(/\r?\n/, 1)[0] ?? '';
+  const envelope = /^\s*(?:#+\s*)?\*\*\[([^\]]+)\]\*\*[^\n]*?→\s*(.+)$/.exec(line);
+  if (!envelope) return null;
+  const fields = envelope[2]!.split('·').map((part) => part.trim());
+  if (!recipients.has(fields[0] ?? '') || fields[1] !== '보고') return null;
+  const cell = fields[2];
+  return { id: !cell || cell === '-' ? NO_CELL : cell, sender: envelope[1]! };
+}
+
+function readCursor(path: string): Set<string> {
+  let raw: string;
+  try {
+    raw = readFileSync(path, 'utf8');
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return new Set();
+    throw error;
+  }
+  try {
+    const parsed: unknown = JSON.parse(raw);
+    if (!Array.isArray(parsed) || !parsed.every((id) => typeof id === 'string' || typeof id === 'number')) {
+      throw new Error('invalid cursor ids');
+    }
+    return new Set(parsed.map(String));
+  } catch (error) {
+    const backup = `${path}.corrupt-${randomUUID()}`;
+    writeFileSync(backup, raw, { mode: 0o600, flag: 'wx' });
+    console.error(`${path}: 손상된 커서를 ${backup} 에 보존하고 빈 커서로 복구: ${error instanceof Error ? error.message : String(error)}`);
+    return new Set();
+  }
+}
+
+function saveCursor(path: string, seen: Set<string>): void {
+  const temporary = `${path}.tmp-${randomUUID()}`;
+  try {
+    writeFileSync(temporary, `${JSON.stringify([...seen])}\n`, { mode: 0o600, flag: 'wx' });
+    renameSync(temporary, path);
+  } finally {
+    if (existsSync(temporary)) unlinkSync(temporary);
+  }
+}
+
+/** Serialize digest runs per track: cursor read → count → cursor save happens under one lock (review round 2).
+ *  A lock whose owner pid is gone, or older than 60 s, is taken over; otherwise wait up to 10 s, then fail. */
+function withDigestLock<T>(root: string, track: string, fn: () => T): T {
+  mkdirSync(root, { recursive: true });
+  const path = join(root, `${track}-digest.lock`);
+  const deadline = Date.now() + 10_000;
+  for (;;) {
+    try {
+      const fd = openSync(path, 'wx', 0o600);
+      writeFileSync(fd, String(process.pid));
+      closeSync(fd);
+      break;
+    } catch (error) {
+      if ((error as NodeJS.ErrnoException).code !== 'EEXIST') throw error;
+      let stale = false;
+      try {
+        const owner = Number(readFileSync(path, 'utf8').trim());
+        const age = Date.now() - statSync(path).mtimeMs;
+        if (age > 60_000) stale = true;
+        else if (Number.isInteger(owner) && owner > 0) {
+          try { process.kill(owner, 0); } catch (e) { if ((e as NodeJS.ErrnoException).code === 'ESRCH') stale = true; }
+        }
+      } catch { stale = false; }
+      if (stale) { try { unlinkSync(path); } catch { /* another run took it */ } continue; }
+      if (Date.now() > deadline) throw new Error('다른 요약이 같은 자리에서 도는 중이다 — 잠시 뒤 다시');
+      Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 100);
+    }
+  }
+  try { return fn(); } finally { try { unlinkSync(path); } catch { /* already gone */ } }
+}
+
+function build(track: string, since: string, versions: string[], root: string, explicitSince: boolean): Digest {
+  const cells = new Map<string, Cell>();
+  const latest = new Map<string, number>();
+  const cellFor = (id: string): Cell => {
+    let cell = cells.get(id);
+    if (!cell) {
+      cell = { id, reports: 0, bySender: Object.create(null) as Record<string, number>, last: null, statusChanges: [] };
+      cells.set(id, cell);
+    }
+    return cell;
+  };
+  const reportsPath = join(root, `${track}-reports.jsonl`);
+  const cursorPath = join(root, `${track}-digest-cursor`);
+  const seen = readCursor(cursorPath);
+  const cutoff = Date.parse(since);
+  const now = Date.now();
+  let count = 0;
+  const counted = new Set<string>();
+  if (existsSync(reportsPath)) for (const [index, line] of readFileSync(reportsPath, 'utf8').split('\n').entries()) {
+    if (!line.trim()) continue;
+    let report: Report;
+    try {
+      const parsed: unknown = JSON.parse(line);
+      if (typeof parsed !== 'object' || parsed === null ||
+          !('id' in parsed) || (typeof parsed.id !== 'string' && typeof parsed.id !== 'number') ||
+          !('created_at' in parsed) || typeof parsed.created_at !== 'string' ||
+          !('login' in parsed) || typeof parsed.login !== 'string' ||
+          !('body' in parsed) || typeof parsed.body !== 'string') throw new Error('invalid report fields');
+      report = parsed as Report;
+    } catch (error) {
+      console.error(`${reportsPath}:${index + 1}: 잘못된 보고 줄 건너뜀: ${error instanceof Error ? error.message : String(error)}`);
+      continue;
+    }
+    const id = String(report.id);
+    const at = Date.parse(report.created_at);
+    if (!id || !Number.isFinite(at) || at < cutoff || at > now || counted.has(id) || (!explicitSince && seen.has(id))) continue;
+    const envelope = reportCell(report.body);
+    if (envelope === null) continue;
+    const { id: cellId, sender } = envelope;
+    seen.add(id);
+    counted.add(id);
+    const cell = cellFor(cellId);
+    cell.reports++;
+    cell.bySender[sender] = (cell.bySender[sender] ?? 0) + 1;
+    const first = report.body.split(/\r?\n/, 1)[0] ?? '';
+    if (at >= (latest.get(cellId) ?? -Infinity)) {
+      cell.last = Array.from(first).slice(0, 80).join('');
+      latest.set(cellId, at);
+    }
+    count++;
+  }
+  for (const version of versions) for (const entry of statusChangesSince(listChecklist(version).history, since)) {
+    if (Date.parse(entry.at) > now) continue;
+    cellFor(entry.id).statusChanges.push({ version, at: entry.at, from: entry.from, to: entry.to });
+  }
+  const output = [...cells.values()].map(({ id, reports, bySender, last, statusChanges }) => ({
+    id, reports, bySender, last, statusChanges: statusChanges.sort((a, b) => a.at.localeCompare(b.at)),
+  })).sort((a, b) => a.id.localeCompare(b.id, 'ko'));
+  const totals = { reports: count, cells: output.length, statusChanges: output.filter((cell) => cell.statusChanges.length > 0).length };
+  debug.log('coord.digest', 'built', { track, reports: count, cells: totals.cells, statusChanges: totals.statusChanges });
+  mkdirSync(root, { recursive: true });
+  saveCursor(cursorPath, seen);
+  return { track, since, versions, cells: output, totals };
+}
+
+function text(digest: Digest): string {
+  const lines = digest.cells.map((cell) => {
+    const status = cell.statusChanges.map(({ from, to }) => `${STATUS_ICON[String(from)] ?? String(from)}→${STATUS_ICON[String(to)] ?? String(to)}`).join(', ') || '-';
+    const senders = Object.entries(cell.bySender).sort(([a], [b]) => a.localeCompare(b)).map(([name, count]) => `${name} ${count}`).join(' · ');
+    return `${cell.id} · ${status} · 보고 ${cell.reports}${senders ? `(${senders})` : ''} · 마지막: ${cell.last ?? '-'}`;
+  });
+  lines.push(`합계 · 글 ${digest.totals.reports} · 칸 ${digest.totals.cells} · 상태 바뀐 칸 ${digest.totals.statusChanges}`);
+  return lines.join('\n');
+}
+
+if (import.meta.main) {
+  try {
+    const { track, hours, versions, json, explicitSince } = options(process.argv.slice(2));
+    const root = join(process.env.HOME ?? homedir(), '.elanous', 'coord');
+    const digest = withDigestLock(root, track, () => build(track, new Date(Date.now() - hours * 3_600_000).toISOString(), versions, root, explicitSince));
+    console.log(json ? JSON.stringify(digest) : text(digest));
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+  }
+}

package/scripts/coord-post.sh

@@ -73,11 +73,62 @@ case "$FIRST" in
     exit 5 ;;
 esac
 
-# 봉투 v2(RFC-coordination-cost §2 · C1 · 09-30): 첫 줄에 종류 다섯 중 하나 — 막지 않고 «알린다».
-case "$FIRST" in
-  *요청*|*결정*|*사고*|*보고*|*정정*) ;;
+# 봉투 v2(RFC-coordination-cost §2 · C1): 신원 · (📌안내) · 시각 → 받는 이 · 종류 · 칸 · (기한).
+# 필드를 «순서대로» 읽는다 — 받는 이(정본 id 또는 전원)가 끝난 «바로 다음» 필드만 종류다(칸의 «결정 D1» 같은 글로 종류를 고르지 않는다).
+# 전부 경고만 — 발신은 막지 않는다(옛 형식 하위 호환).
+trim() { local v="$1"; v="${v#"${v%%[![:space:]]*}"}"; printf '%s' "${v%"${v##*[![:space:]]}"}"; }
+HEADER=${FIRST#"**[$ID]**"}
+ENVELOPE=""
+case "$HEADER" in *'→'*) case "${HEADER%%→*}" in *' · '*) ;; *) ENVELOPE=$(trim "${HEADER#*→}") ;; esac ;; esac   # → 는 시각 바로 뒤일 때만 봉투
+SEP=$'\x1f'
+FIELDS=()
+[ -n "$ENVELOPE" ] && IFS="$SEP" read -r -a FIELDS <<< "${ENVELOPE// · /$SEP}"
+N=${#FIELDS[@]}
+i=0; RECIPIENT_COUNT=0; RECIPIENT_ALL=0
+while [ "$i" -lt "$N" ]; do
+  F=$(trim "${FIELDS[$i]}")
+  F=${F%% — *}                       # 옛 머리 «→ OP — 무엇» 의 받는 이 부분만
+  TOKS=${F//,/ }
+  OK=1; C=0
+  for T in $TOKS; do
+    if [ "$T" = "전원" ]; then C=$((C + 1)); RECIPIENT_ALL=1
+    else case " $IDS " in *" $T "*) C=$((C + 1)) ;; *) OK=0; break ;; esac
+    fi
+  done
+  [ "$OK" -eq 1 ] && [ "$C" -gt 0 ] || break
+  RECIPIENT_COUNT=$((RECIPIENT_COUNT + C)); i=$((i + 1))
+  case "${FIELDS[$((i - 1))]}" in *' — '*) break ;; esac
+done
+KIND_FIELD=""; SLOT=""; DEADLINE_FIELD=""
+if [ "$i" -lt "$N" ]; then KIND_FIELD=$(trim "${FIELDS[$i]}"); fi
+if [ $((i + 1)) -lt "$N" ]; then SLOT=$(trim "${FIELDS[$((i + 1))]}"); fi
+j=$((i + 1))
+while [ "$j" -lt "$N" ]; do
+  F=$(trim "${FIELDS[$j]}")
+  case "$F" in '기한 '[![:space:]]*) DEADLINE_FIELD=$F ;; esac
+  j=$((j + 1))
+done
+case "$KIND_FIELD" in
+  요청|결정|사고|보고|정정) ;;
   *) echo "⚠️ 첫 줄에 글 종류(요청·결정·사고·보고·정정)가 없다 — 받는 쪽 감시자가 즉시/모아 읽기를 못 가른다(발신은 한다)" >&2 ;;
 esac
+if [ "$RECIPIENT_COUNT" -eq 0 ]; then
+  echo "⚠️ 받는 이가 없다(→ TC · UX 꼴)" >&2
+fi
+case "$KIND_FIELD" in
+  요청|결정|사고|보고|정정)
+    case "$SLOT" in ''|기한|'기한 '*) echo "⚠️ 첫 줄에 칸(확인표·결정 id 또는 -)이 없다" >&2 ;; esac ;;
+esac
+case "$KIND_FIELD" in
+  요청|결정) [ -n "$DEADLINE_FIELD" ] || echo "⚠️ 요청·결정에는 기한을 적는다" >&2 ;;
+esac
+if [ "$RECIPIENT_ALL" -eq 1 ]; then
+  case "$KIND_FIELD" in
+    사고|정정) ;;
+    *) CEO_MARK=$(printf '\360\237\221\221')  # the CEO mark, built from bytes so the public export carries no literal
+       case "$FIRST" in *"$CEO_MARK"*) ;; *) echo "⚠️ «전원»은 사고·정정·대표 지시에만" >&2 ;; esac ;;
+  esac
+fi
 
 TS=$(TZ=Asia/Seoul date '+%Y-%m-%d %H:%M KST')
 TMP=$(mktemp "${TMPDIR:-/tmp}/coord-post.XXXXXX") || { echo "⛔ mktemp 실패 — 발신하지 않는다" >&2; exit 7; }
@@ -167,3 +218,9 @@ if [ "$RC" -ne 0 ]; then
   exit "$RC"
 fi
 echo "[coord-post] 발신 성공$VIA · 채널 #$PR · 신원 [$ID] · 시각 $TS" >&2
+# Only a successfully sent post is recorded; never pass the body or later lines to the ledger.
+POST_URL=$(printf '%s\n' "$POST_OUTPUT" | grep -oE 'https://github\.com/[^[:space:]]+/issues/[0-9]+#issuecomment-[0-9]+|https://github\.com/[^[:space:]]+/pull/[0-9]+#issuecomment-[0-9]+' | head -1 || true)
+if ! bun bin/elanous.mjs coord event record --seat "$ID" --header "$(head -1 "$TMP")" --url "$POST_URL" >/dev/null 2>&1; then
+  echo '⚠️ 맥락 원장 기록 실패(발신은 됐다)' >&2
+fi
+exit 0

package/scripts/install.ps1

@@ -3,6 +3,7 @@ param(
   [string] $Prefix,
   [string] $Source,
   [switch] $NoModifyPath,
+  [switch] $NoBootstrapBun,
   [switch] $Help,
   [Parameter(ValueFromRemainingArguments = $true)]
   [string[]] $RemainingArgs
@@ -20,8 +21,8 @@ $ErrorActionPreference = 'Stop'
 
 function Show-Usage {
   @'
-Usage: powershell -File scripts/install.ps1 [-Prefix PATH] [-Source PATH.tgz|URL] [-NoModifyPath] [-Help]
-       powershell -File scripts/install.ps1 [--prefix PATH] [--source PATH.tgz|URL] [--no-modify-path] [--help]
+Usage: powershell -File scripts/install.ps1 [-Prefix PATH] [-Source PATH.tgz|URL] [-NoModifyPath] [-NoBootstrapBun] [-Help]
+       powershell -File scripts/install.ps1 [--prefix PATH] [--source PATH.tgz|URL] [--no-modify-path] [--no-bootstrap-bun] [--help]
 
 Install elanous into a versioned layout.
   Prefix / --prefix               installation root (default: $ELANOUS_INSTALL_PREFIX or %LOCALAPPDATA%\elanous)
@@ -29,6 +30,7 @@ Install elanous into a versioned layout.
   Source / --source               install a package tarball (local path or http(s) URL; default: $ELANOUS_INSTALL_SOURCE,
                                   else pack the checkout or fetch the verified release when standalone)
   NoModifyPath / --no-modify-path do not append the elanous PATH block to the PowerShell profile
+  NoBootstrapBun / --no-bootstrap-bun fail instead of installing bun when missing
   Help / --help                   show this help
 '@ | Write-Output
 }
@@ -38,11 +40,15 @@ function Fail([string] $Message, [int] $Code) {
   exit $Code
 }
 
+# PowerShell 5.1 parses BOM-less scripts as ANSI. Keep translated messages ASCII in source and decode at runtime.
+function Say([string] $English, [string] $Korean) {
+  if ($installLang -eq 'ko') { return [regex]::Unescape($Korean) }
+  return $English
+}
+
 function Get-RequiredCommands([string] $InstallerPath) {
-  # install.sh is the single source of the required-command list; a non-checkout run (e.g. `irm ... | iex`) has no
-  # install.sh beside it and falls back to the same two names.
-  $fallbackCommands = 'git', 'bun'
-  if (-not $InstallerPath -or -not (Test-Path -LiteralPath $InstallerPath)) { return $fallbackCommands }
+  # A checkout follows install.sh; standalone release installs need bun but not git.
+  if (-not $InstallerPath -or -not (Test-Path -LiteralPath $InstallerPath)) { return @('bun') }
   $content = Get-Content -LiteralPath $InstallerPath -Raw
   $match = [regex]::Match($content, 'REQUIRED_COMMANDS=\(([^)]*)\)')
   if (-not $match.Success) { Fail "could not read REQUIRED_COMMANDS from $InstallerPath" 1 }
@@ -87,11 +93,14 @@ for ($index = 0; $index -lt $RemainingArgs.Count; $index++) {
       $Source = $RemainingArgs[++$index]
     }
     '--no-modify-path' { $NoModifyPath = $true }
+    '--no-bootstrap-bun' { $NoBootstrapBun = $true }
     default { Fail "unknown argument: $($RemainingArgs[$index])" 2 }
   }
 }
 
 if ($Help) { Show-Usage; exit 0 }
+$installLang = if ($env:ELANOUS_INSTALL_LANG) { $env:ELANOUS_INSTALL_LANG } else { [Globalization.CultureInfo]::CurrentUICulture.Name }
+$installLang = if ($installLang -match '^ko(?:-|$)') { 'ko' } else { 'en' }
 if (-not $Prefix) {
   $dataHome = if ($env:LOCALAPPDATA) { $env:LOCALAPPDATA } else { Join-Path $HOME 'AppData\Local' }
   $Prefix = if ($env:ELANOUS_INSTALL_PREFIX) { $env:ELANOUS_INSTALL_PREFIX } else { Join-Path $dataHome 'elanous' }
@@ -100,15 +109,46 @@ if (-not $Source -and $env:ELANOUS_INSTALL_SOURCE) { $Source = $env:ELANOUS_INST
 
 $scriptDir = if ($PSCommandPath) { Split-Path -Parent $PSCommandPath } else { $null }
 $repoRoot = if ($scriptDir) { [IO.Path]::GetFullPath((Join-Path $scriptDir '..')) } else { $null }
-$requiredCommands = Get-RequiredCommands $(if ($scriptDir) { Join-Path $scriptDir 'install.sh' } else { $null })
+$installerPath = if ($scriptDir) { Join-Path $scriptDir 'install.sh' } else { $null }
+$requiredCommands = Get-RequiredCommands $installerPath
+$missingGit = -not (Get-Command git -ErrorAction SilentlyContinue)
+$bootstrappedBun = $false
+$bunBin = Join-Path $HOME '.bun\bin'
+if (-not (Get-Command bun -ErrorAction SilentlyContinue) -and (Test-Path -LiteralPath (Join-Path $bunBin 'bun.exe') -PathType Leaf)) {
+  $env:PATH = $bunBin + [IO.Path]::PathSeparator + $env:PATH
+}
+# Preserve checkout required-command enforcement, including git, before changing any installation files.
 foreach ($command in $requiredCommands) {
+  if ($command -eq 'bun') { continue }
   if (-not (Get-Command $command -ErrorAction SilentlyContinue)) { Fail "required command missing: $command" 127 }
 }
+if (-not (Get-Command bun -ErrorAction SilentlyContinue)) {
+  $bunCommand = 'irm https://bun.sh/install.ps1 | iex'
+  if ($NoBootstrapBun) { Fail "$(Say 'bun is missing; run:' 'bun \uc774 \uc5c6\uc2b5\ub2c8\ub2e4. \uba3c\uc800 \uc2e4\ud589\ud558\uc138\uc694:') $bunCommand" 127 }
+  # Bun's official install.ps1 resets the session PATH to the user PATH only (System32 and tar vanish) - keep ours.
+  $pathBeforeBun = $env:PATH
+  try {
+    $bootstrapScript = if ($env:ELANOUS_INSTALL_BUN_SCRIPT) {
+      Read-Text $env:ELANOUS_INSTALL_BUN_SCRIPT
+    } else {
+      (Invoke-WebRequest -UseBasicParsing -Uri 'https://bun.sh/install.ps1').Content
+    }
+    if (-not $bootstrapScript) { throw 'empty installer response' }
+    & ([scriptblock]::Create([string]$bootstrapScript))
+    if (-not $?) { throw 'installer returned failure' }
+    if ($LASTEXITCODE -and $LASTEXITCODE -ne 0) { throw "installer exited with code $LASTEXITCODE" }
+  } catch { Fail "$(Say 'bun bootstrap failed:' 'bun \uc124\uce58 \uc2e4\ud328:') $($_.Exception.Message)" 1 }
+  $env:PATH = $bunBin + [IO.Path]::PathSeparator + $pathBeforeBun
+  if (-not (Get-Command bun -ErrorAction SilentlyContinue)) {
+    Fail (Say 'bun bootstrap failed: bun not found after installation' 'bun \uc124\uce58 \uc2e4\ud328: \uc124\uce58 \ub4a4\uc5d0\ub3c4 bun \uc744 \ucc3e\uc744 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4') 1
+  }
+  $bootstrappedBun = $true
+}
 $bunPath = (Get-Command bun).Source
 
 # A standalone installer fetches a verified release; explicit sources and checkouts keep their existing paths.
 $isCheckout = $false
-if ($repoRoot -and (Test-Path -LiteralPath (Join-Path $repoRoot 'package.json'))) {
+if ($installerPath -and (Test-Path -LiteralPath $installerPath) -and $repoRoot -and (Test-Path -LiteralPath (Join-Path $repoRoot 'package.json'))) {
   $isCheckout = (Read-Text (Join-Path $repoRoot 'package.json')) -match '"name":\s*"elanous"'
 }
 $releaseDirectory = $null
@@ -247,7 +287,26 @@ try {
   if (-not $NoModifyPath -and -not (Read-Text $profilePath).Contains($markerStart)) {
     Add-Content -LiteralPath $profilePath -Value ("`r`n$markerStart`r`n$pathLine`r`n$markerEnd")
   }
-  Write-Output "Installed elanous $version at $shimPath"
+  # The default execution policy (Restricted) skips $PROFILE in a new window - the user PATH is what a fresh shell sees.
+  if (-not $NoModifyPath -and -not $env:ELANOUS_INSTALL_NO_USER_PATH) {
+    $binDirectory = Join-Path $Prefix 'bin'
+    $userPath = [Environment]::GetEnvironmentVariable('Path', 'User')
+    $userEntries = @(($userPath -split ';') | Where-Object { $_ })
+    if ($userEntries -notcontains $binDirectory) {
+      [Environment]::SetEnvironmentVariable('Path', (@($binDirectory) + $userEntries) -join ';', 'User')
+    }
+  }
+  $installedMessage = Say 'Installed elanous {0} at {1}' 'elanous {0} \uc744(\ub97c) \uc124\uce58\ud588\uc2b5\ub2c8\ub2e4: {1}'
+  Write-Output ($installedMessage -f $version, $shimPath)
+  $bootstrapped = if ($bootstrappedBun) { 'bun' } else { 'none' }
+  $missing = if ($missingGit -and -not $isCheckout) { 'git(next step)' } else { 'none' }
+  Write-Output "$(Say 'Install summary' '\uc124\uce58 \uc694\uc57d'): bootstrapped: $bootstrapped; missing: $missing"
+  Write-Output (Say 'Next:' '\ub2e4\uc74c:')
+  if (-not $NoModifyPath) { Write-Output (Say '  Open a new PowerShell window to use elanous on PATH.' '  elanous \uc744 PATH \uc5d0\uc11c \uc4f0\ub824\uba74 \uc0c8 PowerShell \ucc3d\uc744 \uc5ec\uc138\uc694.') }
+  else { Write-Output "$(Say '  Run:' '  \uc2e4\ud589:') $shimPath" }
+  if ($missing -ne 'none') {
+    Write-Output "  winget install --id Git.Git -e  # $(Say 'the harness uses git' '\ud558\ub2c8\uc2a4\uac00 git \uc744 \uc0ac\uc6a9\ud569\ub2c8\ub2e4')"
+  }
 } finally {
   Remove-Item -LiteralPath $tempDirectory -Recurse -Force -ErrorAction SilentlyContinue
 }