elanous 0.2.9 → 0.2.11

package/scripts/coord-digest.ts

@@ -0,0 +1,199 @@
+#!/usr/bin/env bun
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { debug } from '../src/debug/log.js';
+import { devVersion, listChecklist, statusChangesSince } from '../src/release-loop/checklist.js';
+
+interface Report { id: number | string; created_at: string; login: string; body: string }
+interface Change { version: string; at: string; from: unknown; to: unknown }
+interface Cell { id: string; reports: number; bySender: Record<string, number>; last: string | null; statusChanges: Change[] }
+interface Digest { track: string; since: string; versions: string[]; cells: Cell[]; totals: { reports: number; cells: number; statusChanges: number } }
+
+const NO_CELL = '칸 없음';
+const registry = JSON.parse(readFileSync(join(import.meta.dir, 'coord-tracks.json'), 'utf8')) as { tracks: Array<{ id: string; alias?: string }> };
+const recipients = new Set(['전원', ...registry.tracks.flatMap(({ id, alias }) => alias ? [id, alias] : [id])]);
+const STATUS_ICON: Record<string, string> = { yellow: '🟡', green: '🟢', red: '🔴', done: '✅' };
+
+function options(args: string[]): { track: string; hours: number; versions: string[]; json: boolean; explicitSince: boolean } {
+  let track = '';
+  let hours = 2;
+  let json = false;
+  let explicitSince = false;
+  const versions: string[] = [];
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--track' && args[i + 1]) track = args[++i]!;
+    else if (arg === '--since' && args[i + 1]) {
+      const match = /^(\d+(?:\.\d+)?)h$/.exec(args[++i]!);
+      if (!match || Number(match[1]) <= 0) throw new Error('--since 는 양수 시간(예: 2h)이어야 한다');
+      hours = Number(match[1]);
+      explicitSince = true;
+    } else if (arg === '--version' && args[i + 1]) versions.push(args[++i]!);
+    else if (arg === '--json') json = true;
+    else throw new Error(`모르는 인자: ${arg}`);
+  }
+  if (!/^[A-Za-z][A-Za-z0-9]*$/.test(track)) throw new Error('--track <ID> 가 필요하다');
+  return { track, hours, versions: versions.length ? [...new Set(versions)] : [devVersion().replace(/-dev\.\d+$/, '')], json, explicitSince };
+}
+
+function reportCell(body: string): { id: string; sender: string } | null {
+  const line = body.split(/\r?\n/, 1)[0] ?? '';
+  const envelope = /^\s*(?:#+\s*)?\*\*\[([^\]]+)\]\*\*[^\n]*?→\s*(.+)$/.exec(line);
+  if (!envelope) return null;
+  const fields = envelope[2]!.split('·').map((part) => part.trim());
+  if (!recipients.has(fields[0] ?? '') || fields[1] !== '보고') return null;
+  const cell = fields[2];
+  return { id: !cell || cell === '-' ? NO_CELL : cell, sender: envelope[1]! };
+}
+
+function readCursor(path: string): Set<string> {
+  let raw: string;
+  try {
+    raw = readFileSync(path, 'utf8');
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return new Set();
+    throw error;
+  }
+  try {
+    const parsed: unknown = JSON.parse(raw);
+    if (!Array.isArray(parsed) || !parsed.every((id) => typeof id === 'string' || typeof id === 'number')) {
+      throw new Error('invalid cursor ids');
+    }
+    return new Set(parsed.map(String));
+  } catch (error) {
+    const backup = `${path}.corrupt-${randomUUID()}`;
+    writeFileSync(backup, raw, { mode: 0o600, flag: 'wx' });
+    console.error(`${path}: 손상된 커서를 ${backup} 에 보존하고 빈 커서로 복구: ${error instanceof Error ? error.message : String(error)}`);
+    return new Set();
+  }
+}
+
+function saveCursor(path: string, seen: Set<string>): void {
+  const temporary = `${path}.tmp-${randomUUID()}`;
+  try {
+    writeFileSync(temporary, `${JSON.stringify([...seen])}\n`, { mode: 0o600, flag: 'wx' });
+    renameSync(temporary, path);
+  } finally {
+    if (existsSync(temporary)) unlinkSync(temporary);
+  }
+}
+
+/** Serialize digest runs per track: cursor read → count → cursor save happens under one lock (review round 2).
+ *  A lock whose owner pid is gone, or older than 60 s, is taken over; otherwise wait up to 10 s, then fail. */
+function withDigestLock<T>(root: string, track: string, fn: () => T): T {
+  mkdirSync(root, { recursive: true });
+  const path = join(root, `${track}-digest.lock`);
+  const deadline = Date.now() + 10_000;
+  for (;;) {
+    try {
+      const fd = openSync(path, 'wx', 0o600);
+      writeFileSync(fd, String(process.pid));
+      closeSync(fd);
+      break;
+    } catch (error) {
+      if ((error as NodeJS.ErrnoException).code !== 'EEXIST') throw error;
+      let stale = false;
+      try {
+        const owner = Number(readFileSync(path, 'utf8').trim());
+        const age = Date.now() - statSync(path).mtimeMs;
+        if (age > 60_000) stale = true;
+        else if (Number.isInteger(owner) && owner > 0) {
+          try { process.kill(owner, 0); } catch (e) { if ((e as NodeJS.ErrnoException).code === 'ESRCH') stale = true; }
+        }
+      } catch { stale = false; }
+      if (stale) { try { unlinkSync(path); } catch { /* another run took it */ } continue; }
+      if (Date.now() > deadline) throw new Error('다른 요약이 같은 자리에서 도는 중이다 — 잠시 뒤 다시');
+      Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 100);
+    }
+  }
+  try { return fn(); } finally { try { unlinkSync(path); } catch { /* already gone */ } }
+}
+
+function build(track: string, since: string, versions: string[], root: string, explicitSince: boolean): Digest {
+  const cells = new Map<string, Cell>();
+  const latest = new Map<string, number>();
+  const cellFor = (id: string): Cell => {
+    let cell = cells.get(id);
+    if (!cell) {
+      cell = { id, reports: 0, bySender: Object.create(null) as Record<string, number>, last: null, statusChanges: [] };
+      cells.set(id, cell);
+    }
+    return cell;
+  };
+  const reportsPath = join(root, `${track}-reports.jsonl`);
+  const cursorPath = join(root, `${track}-digest-cursor`);
+  const seen = readCursor(cursorPath);
+  const cutoff = Date.parse(since);
+  const now = Date.now();
+  let count = 0;
+  const counted = new Set<string>();
+  if (existsSync(reportsPath)) for (const [index, line] of readFileSync(reportsPath, 'utf8').split('\n').entries()) {
+    if (!line.trim()) continue;
+    let report: Report;
+    try {
+      const parsed: unknown = JSON.parse(line);
+      if (typeof parsed !== 'object' || parsed === null ||
+          !('id' in parsed) || (typeof parsed.id !== 'string' && typeof parsed.id !== 'number') ||
+          !('created_at' in parsed) || typeof parsed.created_at !== 'string' ||
+          !('login' in parsed) || typeof parsed.login !== 'string' ||
+          !('body' in parsed) || typeof parsed.body !== 'string') throw new Error('invalid report fields');
+      report = parsed as Report;
+    } catch (error) {
+      console.error(`${reportsPath}:${index + 1}: 잘못된 보고 줄 건너뜀: ${error instanceof Error ? error.message : String(error)}`);
+      continue;
+    }
+    const id = String(report.id);
+    const at = Date.parse(report.created_at);
+    if (!id || !Number.isFinite(at) || at < cutoff || at > now || counted.has(id) || (!explicitSince && seen.has(id))) continue;
+    const envelope = reportCell(report.body);
+    if (envelope === null) continue;
+    const { id: cellId, sender } = envelope;
+    seen.add(id);
+    counted.add(id);
+    const cell = cellFor(cellId);
+    cell.reports++;
+    cell.bySender[sender] = (cell.bySender[sender] ?? 0) + 1;
+    const first = report.body.split(/\r?\n/, 1)[0] ?? '';
+    if (at >= (latest.get(cellId) ?? -Infinity)) {
+      cell.last = Array.from(first).slice(0, 80).join('');
+      latest.set(cellId, at);
+    }
+    count++;
+  }
+  for (const version of versions) for (const entry of statusChangesSince(listChecklist(version).history, since)) {
+    if (Date.parse(entry.at) > now) continue;
+    cellFor(entry.id).statusChanges.push({ version, at: entry.at, from: entry.from, to: entry.to });
+  }
+  const output = [...cells.values()].map(({ id, reports, bySender, last, statusChanges }) => ({
+    id, reports, bySender, last, statusChanges: statusChanges.sort((a, b) => a.at.localeCompare(b.at)),
+  })).sort((a, b) => a.id.localeCompare(b.id, 'ko'));
+  const totals = { reports: count, cells: output.length, statusChanges: output.filter((cell) => cell.statusChanges.length > 0).length };
+  debug.log('coord.digest', 'built', { track, reports: count, cells: totals.cells, statusChanges: totals.statusChanges });
+  mkdirSync(root, { recursive: true });
+  saveCursor(cursorPath, seen);
+  return { track, since, versions, cells: output, totals };
+}
+
+function text(digest: Digest): string {
+  const lines = digest.cells.map((cell) => {
+    const status = cell.statusChanges.map(({ from, to }) => `${STATUS_ICON[String(from)] ?? String(from)}→${STATUS_ICON[String(to)] ?? String(to)}`).join(', ') || '-';
+    const senders = Object.entries(cell.bySender).sort(([a], [b]) => a.localeCompare(b)).map(([name, count]) => `${name} ${count}`).join(' · ');
+    return `${cell.id} · ${status} · 보고 ${cell.reports}${senders ? `(${senders})` : ''} · 마지막: ${cell.last ?? '-'}`;
+  });
+  lines.push(`합계 · 글 ${digest.totals.reports} · 칸 ${digest.totals.cells} · 상태 바뀐 칸 ${digest.totals.statusChanges}`);
+  return lines.join('\n');
+}
+
+if (import.meta.main) {
+  try {
+    const { track, hours, versions, json, explicitSince } = options(process.argv.slice(2));
+    const root = join(process.env.HOME ?? homedir(), '.elanous', 'coord');
+    const digest = withDigestLock(root, track, () => build(track, new Date(Date.now() - hours * 3_600_000).toISOString(), versions, root, explicitSince));
+    console.log(json ? JSON.stringify(digest) : text(digest));
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+  }
+}

package/scripts/coord-post.sh

@@ -73,11 +73,62 @@ case "$FIRST" in
     exit 5 ;;
 esac
 
-# 봉투 v2(RFC-coordination-cost §2 · C1 · 09-30): 첫 줄에 종류 다섯 중 하나 — 막지 않고 «알린다».
-case "$FIRST" in
-  *요청*|*결정*|*사고*|*보고*|*정정*) ;;
+# 봉투 v2(RFC-coordination-cost §2 · C1): 신원 · (📌안내) · 시각 → 받는 이 · 종류 · 칸 · (기한).
+# 필드를 «순서대로» 읽는다 — 받는 이(정본 id 또는 전원)가 끝난 «바로 다음» 필드만 종류다(칸의 «결정 D1» 같은 글로 종류를 고르지 않는다).
+# 전부 경고만 — 발신은 막지 않는다(옛 형식 하위 호환).
+trim() { local v="$1"; v="${v#"${v%%[![:space:]]*}"}"; printf '%s' "${v%"${v##*[![:space:]]}"}"; }
+HEADER=${FIRST#"**[$ID]**"}
+ENVELOPE=""
+case "$HEADER" in *'→'*) case "${HEADER%%→*}" in *' · '*) ;; *) ENVELOPE=$(trim "${HEADER#*→}") ;; esac ;; esac   # → 는 시각 바로 뒤일 때만 봉투
+SEP=$'\x1f'
+FIELDS=()
+[ -n "$ENVELOPE" ] && IFS="$SEP" read -r -a FIELDS <<< "${ENVELOPE// · /$SEP}"
+N=${#FIELDS[@]}
+i=0; RECIPIENT_COUNT=0; RECIPIENT_ALL=0
+while [ "$i" -lt "$N" ]; do
+  F=$(trim "${FIELDS[$i]}")
+  F=${F%% — *}                       # 옛 머리 «→ OP — 무엇» 의 받는 이 부분만
+  TOKS=${F//,/ }
+  OK=1; C=0
+  for T in $TOKS; do
+    if [ "$T" = "전원" ]; then C=$((C + 1)); RECIPIENT_ALL=1
+    else case " $IDS " in *" $T "*) C=$((C + 1)) ;; *) OK=0; break ;; esac
+    fi
+  done
+  [ "$OK" -eq 1 ] && [ "$C" -gt 0 ] || break
+  RECIPIENT_COUNT=$((RECIPIENT_COUNT + C)); i=$((i + 1))
+  case "${FIELDS[$((i - 1))]}" in *' — '*) break ;; esac
+done
+KIND_FIELD=""; SLOT=""; DEADLINE_FIELD=""
+if [ "$i" -lt "$N" ]; then KIND_FIELD=$(trim "${FIELDS[$i]}"); fi
+if [ $((i + 1)) -lt "$N" ]; then SLOT=$(trim "${FIELDS[$((i + 1))]}"); fi
+j=$((i + 1))
+while [ "$j" -lt "$N" ]; do
+  F=$(trim "${FIELDS[$j]}")
+  case "$F" in '기한 '[![:space:]]*) DEADLINE_FIELD=$F ;; esac
+  j=$((j + 1))
+done
+case "$KIND_FIELD" in
+  요청|결정|사고|보고|정정) ;;
   *) echo "⚠️ 첫 줄에 글 종류(요청·결정·사고·보고·정정)가 없다 — 받는 쪽 감시자가 즉시/모아 읽기를 못 가른다(발신은 한다)" >&2 ;;
 esac
+if [ "$RECIPIENT_COUNT" -eq 0 ]; then
+  echo "⚠️ 받는 이가 없다(→ TC · UX 꼴)" >&2
+fi
+case "$KIND_FIELD" in
+  요청|결정|사고|보고|정정)
+    case "$SLOT" in ''|기한|'기한 '*) echo "⚠️ 첫 줄에 칸(확인표·결정 id 또는 -)이 없다" >&2 ;; esac ;;
+esac
+case "$KIND_FIELD" in
+  요청|결정) [ -n "$DEADLINE_FIELD" ] || echo "⚠️ 요청·결정에는 기한을 적는다" >&2 ;;
+esac
+if [ "$RECIPIENT_ALL" -eq 1 ]; then
+  case "$KIND_FIELD" in
+    사고|정정) ;;
+    *) CEO_MARK=$(printf '\360\237\221\221')  # the CEO mark, built from bytes so the public export carries no literal
+       case "$FIRST" in *"$CEO_MARK"*) ;; *) echo "⚠️ «전원»은 사고·정정·대표 지시에만" >&2 ;; esac ;;
+  esac
+fi
 
 TS=$(TZ=Asia/Seoul date '+%Y-%m-%d %H:%M KST')
 TMP=$(mktemp "${TMPDIR:-/tmp}/coord-post.XXXXXX") || { echo "⛔ mktemp 실패 — 발신하지 않는다" >&2; exit 7; }
@@ -167,3 +218,9 @@ if [ "$RC" -ne 0 ]; then
   exit "$RC"
 fi
 echo "[coord-post] 발신 성공$VIA · 채널 #$PR · 신원 [$ID] · 시각 $TS" >&2
+# Only a successfully sent post is recorded; never pass the body or later lines to the ledger.
+POST_URL=$(printf '%s\n' "$POST_OUTPUT" | grep -oE 'https://github\.com/[^[:space:]]+/issues/[0-9]+#issuecomment-[0-9]+|https://github\.com/[^[:space:]]+/pull/[0-9]+#issuecomment-[0-9]+' | head -1 || true)
+if ! bun bin/elanous.mjs coord event record --seat "$ID" --header "$(head -1 "$TMP")" --url "$POST_URL" >/dev/null 2>&1; then
+  echo '⚠️ 맥락 원장 기록 실패(발신은 됐다)' >&2
+fi
+exit 0

package/scripts/coord-requests-bridge.ts

@@ -0,0 +1,143 @@
+#!/usr/bin/env bun
+import { execFileSync } from 'node:child_process';
+import { appendFileSync, mkdirSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { debug } from '../src/debug/log.js';
+import { registerStandaloneLogSink } from '../src/domains/standalone-log-sink.js';
+import { effectiveInstanceRoot } from '../src/instance/resolve.js';
+import trackData from './coord-tracks.json';
+
+type Comment = { id: number; body: string; created_at: string; html_url: string };
+type Options = { seat: string; channel: string; since?: string; dryRun: boolean; json: boolean };
+const seatIds = new Set(trackData.tracks.map((track) => track.id));
+
+function options(args: string[]): Options {
+  let seat = '';
+  let channel = '23032';
+  let since: string | undefined;
+  let dryRun = false;
+  let json = false;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--seat' && args[i + 1]) seat = args[++i]!;
+    else if (arg === '--channel' && args[i + 1]) channel = args[++i]!;
+    else if (arg === '--since' && args[i + 1]) since = args[++i]!;
+    else if (arg === '--dry-run') dryRun = true;
+    else if (arg === '--json') json = true;
+    else throw new Error(`모르는 인자 또는 값 없음: ${arg}`);
+  }
+  if (!seatIds.has(seat)) throw new Error('--seat <ID> 는 자리 정본의 ID 여야 한다');
+  if (!/^[1-9]\d*$/.test(channel)) throw new Error('--channel 은 양의 정수여야 한다');
+  if (since && (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/.test(since) || !Number.isFinite(Date.parse(since)))) {
+    throw new Error('--since 는 ISO 시각이어야 한다');
+  }
+  return { seat, channel, ...(since ? { since } : {}), dryRun, json };
+}
+
+function envelope(body: string, seat: string): { cell?: string; dueAt?: string; text: string } | null {
+  const [header = '', ...lines] = body.split(/\r?\n/);
+  const match = /^\s*(?:#+\s*)?\*\*\[([^\]]+)\]\*\*[^\n]*?→\s*(.+)$/.exec(header);
+  if (!match || match[1] === seat) return null;
+  const fields = match[2]!.split('·').map((part) => part.trim());
+  const recipients: string[] = [];
+  let i = 0;
+  while (i < fields.length) {
+    const names = fields[i]!.split(/[\s,]+/).filter(Boolean);
+    if (!names.length || names.some((name) => !seatIds.has(name) && name !== '전원')) break;
+    recipients.push(...names);
+    i++;
+  }
+  if (!recipients.includes(seat) || recipients.includes('전원') || (fields[i] !== '요청' && fields[i] !== '결정')) return null;
+  const tail = fields.slice(i + 1);
+  const inline: string[] = [];
+  let cell: string | undefined;
+  let dueAt: string | undefined;
+  for (let j = 0; j < tail.length; j++) {
+    const field = tail[j]!;
+    const suffix = /(?:\s+—\s*|\s+-\s+|:\s+)(\S.*)$/.exec(field);
+    const bare = /^(?:—|-|:)\s*(\S.*)$/.exec(field);
+    const value = suffix ? field.slice(0, suffix.index).trim() : bare ? '' : field;
+    if (/^기한\s+\S/.test(value)) dueAt = value.replace(/^기한\s+/, '');
+    else if (j === 0) cell = value;
+    else if (value && value !== '-') inline.push(value);
+    if (suffix || bare) inline.push((suffix ?? bare)![1]!);
+  }
+  const text = [...inline, lines.join('\n').trim()].filter(Boolean).join('\n') || '(본문 없음 — 채널 글 링크 참조)';
+  return { text: Array.from(text).slice(0, 200).join(''),
+    ...(cell && cell !== '-' && !cell.startsWith('기한 ') ? { cell } : {}), ...(dueAt ? { dueAt } : {}) };
+}
+
+/** 이미 넣은 요청 — `<seat>|<commentId>` 로 센다. 새 꼴 키 `coord:<id>:<SEAT>` 와 옛 꼴 키 `coord:<id>`(그 줄의 `seat` 로 자리를 판별)를 둘 다 읽어,
+ *  한 글이 여러 자리에게 왔을 때 한 자리의 줄이 다른 자리의 요청을 막지 않게 한다. */
+function existingSeatComments(path: string): Set<string> {
+  let contents: string;
+  try { contents = readFileSync(path, 'utf8'); }
+  catch (error) {
+    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return new Set();
+    throw error;
+  }
+  const seen = new Set<string>();
+  for (const line of contents.split('\n')) {
+    if (!line) continue;
+    const row = JSON.parse(line) as { key?: unknown; seat?: unknown };
+    if (typeof row.key !== 'string') continue;
+    const current = /^coord:(\d+):([^:]+)$/.exec(row.key);
+    if (current) { seen.add(`${current[2]}|${current[1]}`); continue; }
+    const legacy = /^coord:(\d+)$/.exec(row.key);
+    if (legacy && typeof row.seat === 'string') seen.add(`${row.seat}|${legacy[1]}`);
+  }
+  return seen;
+}
+
+async function run(args: string[]): Promise<void> {
+  await registerStandaloneLogSink('coord-requests-bridge');
+  let seat = '';
+  let reason = 'input';
+  try {
+    const selected = options(args);
+    seat = selected.seat;
+    const { channel, since, dryRun, json } = selected;
+    reason = 'gh';
+    const endpoint = `repos/{owner}/{repo}/issues/${channel}/comments${since ? `?since=${encodeURIComponent(since)}` : ''}`;
+    const output = execFileSync('gh', ['api', endpoint, '--paginate', '--jq', '.[]'], { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
+    const comments = output.split('\n').filter(Boolean).map((line) => JSON.parse(line) as unknown);
+    reason = 'ledger';
+    const path = join(effectiveInstanceRoot(), 'seat-requests', 'requests.jsonl');
+    const seen = existingSeatComments(path);
+    let picked = 0, added = 0, existing = 0;
+    for (const item of comments) {
+      const comment = item as Partial<Comment>;
+      if (typeof comment.id !== 'number' || !Number.isSafeInteger(comment.id) || typeof comment.body !== 'string'
+        || typeof comment.created_at !== 'string' || typeof comment.html_url !== 'string') throw new Error('gh api 댓글 필드가 잘못됐다');
+      if (since && Date.parse(comment.created_at) < Date.parse(since)) continue;
+      const request = envelope(comment.body, seat);
+      if (!request) continue;
+      picked++;
+      const key = `coord:${comment.id}:${seat}`;
+      const marker = `${seat}|${comment.id}`;
+      if (seen.has(marker)) { existing++; continue; }
+      if (!dryRun) {
+        mkdirSync(dirname(path), { recursive: true });
+        appendFileSync(path, `${JSON.stringify({ key, seat, text: request.text, status: 'queued', queuedAt: comment.created_at,
+          source: 'coord', ...('cell' in request ? { cell: request.cell } : {}),
+          ...('dueAt' in request ? { dueAt: request.dueAt } : {}), url: comment.html_url })}\n`, { mode: 0o600 });
+      }
+      seen.add(marker);
+      added++;
+    }
+    const counts = { seat, read: comments.length, picked, added, existing };
+    debug.log('coord.requests-bridge', 'run', counts);
+    console.log(json ? JSON.stringify(counts) : `읽은 글 ${counts.read} · 고른 수 ${picked} · 새로 넣은 수 ${added} · 이미 있던 수 ${existing}`);
+  } catch (error) {
+    debug.log('coord.requests-bridge', 'failed', { seat, reason });
+    throw error;
+  }
+}
+
+if (import.meta.main) {
+  try { await run(process.argv.slice(2)); }
+  catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+  }
+}

package/scripts/field-feed/lib.ts

@@ -5,6 +5,7 @@ import { existsSync, readFileSync, readdirSync, writeFileSync, renameSync, mkdir
 import { basename, dirname, extname, join, resolve } from 'node:path';
 import { homedir } from 'node:os';
 import { spawn, spawnSync } from 'node:child_process';
+import { recordOutput } from '../../src/outputs/ledger.js';
 
 export type FeedSlide = { image: string; source: string; caption: string; include: boolean; renderedCaption?: string /* `N/M:caption` as last drawn */ };
 export type FeedDraft = {
@@ -55,6 +56,9 @@ export function writeDraft(folder: string, draft: FeedDraft): void {
   const tmp = `${path}.${process.pid}.tmp`;
   writeFileSync(tmp, JSON.stringify(draft, null, 2) + '\n');
   renameSync(tmp, path);
+  if (draft.updatedBy === 'graph' && draft.revision === 1) {
+    recordOutput({ source: 'field-feed', sourceId: basename(folder), kind: 'post', title: draft.event.title, path });
+  }
 }
 
 /** Field uploads are named `20261002T193012Z-<device>-<name>` (capture time, UTC) — same order as the reel. */

package/scripts/fleet/node-setup.sh

@@ -2,7 +2,7 @@
 # 로컬 플릿 노드 셋업 — 원격 맥 한 대를 «Pod 풀 ⊕ 시험 샤딩» 노드로 (MANUAL-local-fleet-node-setup).
 #   bash scripts/fleet/node-setup.sh <호스트> [--check]
 #   <호스트>  ssh 로 닿는 이름(예: node-b · node-c) — 이 맥에서 `ssh -o BatchMode=yes <호스트> true` 가 돼야 한다.
-#   --check  아무것도 바꾸지 않고 상태만 본다(단계마다 ✓ · ✗ · → 할 일).
+#   --check  영구 설정을 바꾸지 않고 상태만 본다(단계마다 ✓ · ✗ · → 할 일). DNS 점검용 Pod 는 잠깐 만들었다 지운다.
 # ⭐ 단계마다 «이미 돼 있으면 건너뛴다» — 몇 번 돌려도 같은 결과(재현 가능한 셋업).
 # ⛔ 원격의 다른 컨테이너·앱은 건드리지 않는다. 이 맥의 ~/.kube/config 는 바꾸기 전에 백업한다.
 set -u
@@ -62,7 +62,7 @@ REGISTRY="${ELANOUS_FLEET_REGISTRY:-elanous-registry}"; REG_PORT="${ELANOUS_FLEE
 # ⛔ 레지스트리는 노드의 «루프백»에만 연다 — 🩸 2026-09-26: `0.0.0.0:5050` 이라 tailnet 의 누구든 인증 없이 목록·푸시가 됐다
 #   (Pod 는 커밋 태그로 pull 하므로 그 태그를 덮으면 곧 공급망 위험). 노드 안 빌드는 localhost 로 푸시하고, 클러스터는 docker 내부 이름으로 받는다.
 REG_BIND="$(R "docker port k3d-$REGISTRY 5000/tcp" 2>/dev/null | head -1)"
-if [ -n "$REG_BIND" ] && [ "${REG_BIND#127.0.0.1:}" != "$REG_BIND" ]; then ok "레지스트리 k3d-$REGISTRY :$REG_PORT (루프백)"
+if [ -n "$REG_BIND" ] && [ "${REG_BIND#127.0.0.1:}" != "$REG_BIND" ]; then REG_PORT="${REG_BIND##*:}"; ok "레지스트리 k3d-$REGISTRY :$REG_PORT (루프백)"
 elif [ -n "$REG_BIND" ] && [ $CHECK = 1 ]; then bad "레지스트리 k3d-$REGISTRY 가 $REG_BIND 에 열려 있다 — 루프백으로 다시 만들어야 한다"
 elif [ -n "$REG_BIND" ]; then R "k3d registry delete $REGISTRY >/dev/null 2>&1; k3d registry create $REGISTRY --port 127.0.0.1:$REG_PORT >/tmp/fleet-registry.log 2>&1 && (docker network connect k3d-$CLUSTER k3d-$REGISTRY 2>/dev/null || true)" && ok "레지스트리 k3d-$REGISTRY 를 루프백으로 다시 만들었다(이미지는 다음 동기화에서 다시 푸시)" || { bad "레지스트리 재생성 실패 — 원격 /tmp/fleet-registry.log"; exit 1; }
 elif [ $CHECK = 1 ]; then todo "레지스트리 k3d-$REGISTRY :$REG_PORT 생성(루프백)"
@@ -157,10 +157,27 @@ apply_base() {
 }
 apply_base
 # 9. 판 대조 — k3s · 노드 준비
+# DNS: coredns Ready 와 격리 네임스페이스 Pod 안에서 서비스 이름 풀이를 각각 확인한다.
+DNS_READY="$(kubectl --context "$CTX" --request-timeout=10s -n kube-system get deployment coredns -o jsonpath='{.status.readyReplicas}/{.spec.replicas}' 2>/dev/null)"
+DNS_NAME="elanous-dns-check-$$"
+if [[ "$DNS_READY" =~ ^[1-9][0-9]*/[1-9][0-9]*$ ]] && [ "${DNS_READY%/*}" = "${DNS_READY#*/}" ]; then
+  DNS_MANIFEST="$(printf '{"apiVersion":"v1","kind":"Pod","metadata":{"name":"%s","namespace":"elanous-test"},"spec":{"restartPolicy":"Never","activeDeadlineSeconds":40,"automountServiceAccountToken":false,"containers":[{"name":"dns","image":"busybox:1.36","command":["nslookup","kubernetes.default.svc.cluster.local"],"resources":{"requests":{"cpu":"10m","memory":"16Mi"},"limits":{"cpu":"100m","memory":"64Mi"}}}]}}' "$DNS_NAME")"
+  if ! printf '%s' "$DNS_MANIFEST" | kubectl --context "$CTX" --request-timeout=10s create -f - >/dev/null 2>&1; then bad "dns 점검 Pod 생성 실패 (DNS 미측정)"
+  else
+    kubectl --context "$CTX" --request-timeout=10s -n elanous-test wait --for=jsonpath='{.status.phase}=Succeeded' "pod/$DNS_NAME" --timeout=30s >/dev/null 2>&1
+    DNS_STATE="$(kubectl --context "$CTX" --request-timeout=10s -n elanous-test get "pod/$DNS_NAME" -o jsonpath='{.status.phase}:{.status.containerStatuses[0].state.waiting.reason}' 2>/dev/null)"
+    DNS_LOG="$(kubectl --context "$CTX" --request-timeout=10s -n elanous-test logs "pod/$DNS_NAME" 2>/dev/null)"
+    if [[ "$DNS_STATE" = Succeeded:* ]] && [[ "$DNS_LOG" =~ Name:[[:space:]]*kubernetes\.default\.svc\.cluster\.local ]] && [[ "$DNS_LOG" =~ Address(es)?':'[[:space:]]*[^[:space:]]+ ]]; then ok "dns (coredns Ready ⊕ Pod 이름 풀이)"
+    elif [[ "$DNS_STATE" = *:ImagePullBackOff || "$DNS_STATE" = *:ErrImagePull || "$DNS_STATE" = *:InvalidImageName ]]; then bad "dns 점검 이미지 확보 실패 (DNS 미측정)"
+    elif [[ "$DNS_STATE" = Failed:* ]] && [[ "$DNS_LOG" =~ (can.t.resolve|server.can.t.find|connection.timed.out|no.servers.could.be.reached|NXDOMAIN|SERVFAIL) ]] || [[ "$DNS_STATE" = Succeeded:* ]]; then bad "dns (Pod 이름 풀이 실패)"
+    else bad "dns 점검 Pod 실행 실패 (DNS 미측정: ${DNS_STATE:-응답 없음})"; fi
+  fi
+else bad "dns (coredns Ready 아님: ${DNS_READY:-응답 없음})"; fi
+kubectl --context "$CTX" --request-timeout=10s -n elanous-test delete "pod/$DNS_NAME" --ignore-not-found=true --wait=false >/dev/null 2>&1
 v="$(kubectl --context "$CTX" --request-timeout=10s get nodes -o jsonpath='{.items[0].status.nodeInfo.kubeletVersion}' 2>/dev/null)"
 want="${K3S_IMAGE##*:}"; want="${want/-k3s/+k3s}"
 [ "$v" = "$want" ] && ok "k3s $v" || bad "k3s ${v:-응답 없음} ≠ 기대 $want"
 echo
 if [ $FAIL = 0 ] && [ $TODO -gt 0 ]; then echo "→ $HOST 할 일 $TODO — --check 없이 다시 돌리면 채운다"; exit 2
-elif [ $FAIL = 0 ]; then echo "✓ $HOST 준비됨 — 풀에 넣기: ELANOUS_POD_POOL='…,$CTX@$HOST:<상한>'"; else echo "✗ $HOST 미완 — 위 ✗ 를 먼저"; fi
+elif [ $FAIL = 0 ]; then echo "✓ $HOST 준비됨 — 풀에 넣기: ELANOUS_POD_POOL='…,$CTX@$HOST:<상한>#k3d-$REGISTRY:$REG_PORT'"; else echo "✗ $HOST 미완 — 위 ✗ 를 먼저"; fi
 exit $FAIL

package/scripts/homebrew-formula-bump.ts

@@ -0,0 +1,69 @@
+#!/usr/bin/env bun
+import { createHash, randomUUID } from 'node:crypto';
+import { readFile, stat, writeFile, chmod, rename, unlink } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { debug } from '../src/debug/log.js';
+
+const usage = 'usage: bun scripts/homebrew-formula-bump.ts --version <v> [--tarball <local tgz>] [--formula <path>] [--dry-run]';
+const urlLine = /^([ \t]*url "https:\/\/registry\.npmjs\.org\/elanous\/-\/elanous-)(\d+\.\d+\.\d+)(\.tgz"[ \t]*)(?=\r?$)/gm;
+const shaLine = /^([ \t]*sha256 ")[0-9a-f]{64}("[ \t]*)(?=\r?$)/gm;
+let from: string | undefined;
+
+async function main(): Promise<void> {
+  const args = process.argv.slice(2);
+  const options: Record<string, string> = {};
+  for (let i = 0; i < args.length; i++) {
+    const flag = args[i]!;
+    if (flag === '--dry-run' && !Object.hasOwn(options, flag)) { options[flag] = 'true'; continue; }
+    if (!['--version', '--tarball', '--formula'].includes(flag) || Object.hasOwn(options, flag) || !args[i + 1] || args[i + 1]!.startsWith('--')) throw new Error(usage);
+    options[flag] = args[++i]!;
+  }
+  const version = options['--version'];
+  if (!version || !/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.test(version)) throw new Error(usage);
+  const formulaPath = resolve(options['--formula'] ?? join(import.meta.dir, '..', 'integrations', 'homebrew', 'elanous.rb'));
+  const original = await readFile(formulaPath, 'utf8');
+  const urls = [...original.matchAll(urlLine)];
+  const hashes = [...original.matchAll(shaLine)];
+  from = urls.length === 1 ? urls[0]![2] : undefined;
+  if (urls.length !== 1 || hashes.length !== 1) throw new Error('formula must contain exactly one npm url and one sha256 line');
+  const source = options['--tarball'] ? 'tarball' : 'npm';
+  const bytes = options['--tarball']
+    ? await readFile(options['--tarball'])
+    : await (async () => {
+        const response = await fetch(`https://registry.npmjs.org/elanous/-/elanous-${version}.tgz`);
+        if (!response.ok) throw new Error(`npm tarball download failed: HTTP ${response.status}`);
+        return Buffer.from(await response.arrayBuffer());
+      })();
+  const sha = createHash('sha256').update(bytes).digest('hex');
+  const nextUrl = `${urls[0]![1]}${version}${urls[0]![3]}`;
+  const nextSha = `${hashes[0]![1]}${sha}${hashes[0]![2]}`;
+  const updated = original.replace(urlLine, () => nextUrl).replace(shaLine, () => nextSha);
+  if (options['--dry-run']) {
+    console.log(nextUrl);
+    console.log(nextSha);
+  } else {
+    const temporary = join(dirname(formulaPath), `.elanous.rb.${randomUUID()}.tmp`);
+    try {
+      await writeFile(temporary, updated);
+      await chmod(temporary, (await stat(formulaPath)).mode);
+      await rename(temporary, formulaPath);
+    } finally {
+      await unlink(temporary).catch((error: NodeJS.ErrnoException) => { if (error.code !== 'ENOENT') throw error; });
+    }
+  }
+  debug.log('release.homebrew', 'bumped', { from, to: version, source, reason: options['--dry-run'] ? 'dry-run' : 'updated' });
+  console.log(`formula: ${from} → ${version} · sha256 ${sha.slice(0, 12)}`);
+}
+
+main().catch((error: unknown) => {
+  const reason = (error instanceof Error ? error.message : String(error)).replace(/\s+/g, ' ');
+  const args = process.argv.slice(2);
+  debug.log('release.homebrew', 'failed', {
+    from,
+    to: args.includes('--version') ? args[args.indexOf('--version') + 1] : undefined,
+    source: args.includes('--tarball') ? 'tarball' : 'npm',
+    reason,
+  });
+  console.error(reason);
+  process.exitCode = 1;
+});