kenaz 0.3.7 → 0.3.9

package/core/.specialist/tools/autonomy.js

@@ -0,0 +1,88 @@
+#!/usr/bin/env node
+'use strict';
+/**
+ * Ansuz autonomy grant (user 2026-10-11: "once granted, work the project on your own; do not ask or
+ * stop to wait unless it is necessary"). The grant lives in a file so it survives context compaction,
+ * and the Stop hook (.claude/hooks/autonomy-stop.js) keeps the session working while it is on.
+ *
+ *   node autonomy.js grant  --session <id> [--scope "<what the user granted>"]
+ *   node autonomy.js pause  --session <id> --reason "<what the user must do or decide>"
+ *   node autonomy.js done   --session <id> --reason "<why the state is sufficient>"
+ *   node autonomy.js revoke --session <id>
+ *   node autonomy.js status --session <id>
+ *
+ * States: on (Stop is blocked) | paused (one hard stop is waiting on the user; the next user prompt
+ * turns it back on) | done (work judged sufficient; the next user prompt does NOT resume it) | off.
+ */
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+// Consecutive blocked Stops without the agent recording anything: a runaway guard, not a budget.
+const MAX_BLOCKS = 25;
+// Absolute, quoted: on an npm install the core is ~/.kenaz/core and the model cannot guess `<core>`.
+const CMD = `node "${__filename}"`;
+
+const dir = (env = process.env) => env.KENAZ_AUTONOMY_DIR || path.join(os.homedir(), '.kenaz', 'autonomy');
+const safeId = (sid) => String(sid || '').replace(/[^A-Za-z0-9_.-]/g, '');
+const file = (sid, env) => path.join(dir(env), safeId(sid) + '.json');
+
+function read(sid, env) {
+  if (!safeId(sid)) return null;
+  try { return JSON.parse(fs.readFileSync(file(sid, env), 'utf8')); } catch (_) { return null; }
+}
+function write(sid, st, env) {
+  fs.mkdirSync(dir(env), { recursive: true });
+  const f = file(sid, env);
+  fs.writeFileSync(f + '.tmp', JSON.stringify({ ...st, updated_at: new Date().toISOString() }, null, 2));
+  fs.renameSync(f + '.tmp', f);
+  return st;
+}
+
+function setState(sid, state, extra = {}, env) {
+  if (!safeId(sid)) throw new Error('--session <id> is required (the [session] session_id from Turn Context)');
+  const prev = read(sid, env) || {};
+  return write(sid, { ...prev, ...extra, state, blocks: 0, ...(state === 'on' && !prev.granted_at ? { granted_at: new Date().toISOString() } : {}) }, env);
+}
+
+/** UserPromptSubmit: a reply to a paused question resumes the grant. Returns the Turn Context line or ''. */
+function onUserPrompt(sid, env) {
+  const st = read(sid, env);
+  if (!st) return '';
+  if (st.state === 'paused') write(sid, { ...st, state: 'on', blocks: 0, reason: '' }, env);
+  else if (st.state === 'on' && st.blocks) write(sid, { ...st, blocks: 0 }, env);
+  const now = read(sid, env).state;
+  return now === 'on'
+    ? '[autonomy] ON (user grant' + (st.scope ? ': ' + st.scope : '') + '): decide and keep going, no check-in questions; stop only via ' + CMD + ' pause|done --session ' + safeId(sid) + ' --reason "..." (RULES.md Autonomy)'
+    : '';
+}
+
+/** Stop hook decision: null = allow the stop, else the reason to keep going. */
+function onStop(sid, env) {
+  const st = read(sid, env);
+  if (!st || st.state !== 'on') return null;
+  if ((st.blocks || 0) >= MAX_BLOCKS) { write(sid, { ...st, state: 'paused', reason: `runaway guard: ${MAX_BLOCKS} stops in a row with no pause/done` }, env); return null; }
+  write(sid, { ...st, blocks: (st.blocks || 0) + 1 }, env);
+  return 'Autonomy grant is ON: do not end the turn to wait for the user. Take the next item yourself '
+    + '(decide forks, dispatch, verify, merge, next). If the work is genuinely sufficient, run '
+    + '`' + CMD + ' done --session ' + safeId(sid) + ' --reason "..."` and give the final report; '
+    + 'if a necessary stop needs the user (RULES.md Autonomy), run `' + CMD + ' pause --session ' + safeId(sid) + ' --reason "..."` and ask once.';
+}
+
+if (require.main === module) {
+  const [cmd, ...rest] = process.argv.slice(2);
+  const arg = (k) => { const i = rest.indexOf('--' + k); return i >= 0 ? rest[i + 1] : undefined; };
+  // Codex shells carry CODEX_SESSION_ID; Claude passes the Turn Context session_id explicitly.
+  const sid = arg('session') || process.env.CODEX_SESSION_ID;
+  try {
+    if (cmd === 'grant') setState(sid, 'on', { scope: arg('scope') || '', reason: '' });
+    else if (cmd === 'pause' || cmd === 'done') {
+      if (!arg('reason')) throw new Error(`${cmd} needs --reason`);
+      setState(sid, cmd === 'pause' ? 'paused' : 'done', { reason: arg('reason') });
+    } else if (cmd === 'revoke') setState(sid, 'off', { reason: 'revoked by the user' });
+    else if (cmd !== 'status') throw new Error('usage: autonomy.js grant|pause|done|revoke|status --session <id> [--scope s] [--reason r]');
+    console.log(JSON.stringify(read(sid) || { state: 'off' }));
+  } catch (e) { console.error('[autonomy] ' + e.message); process.exit(1); }
+}
+
+module.exports = { setState, read, onUserPrompt, onStop, MAX_BLOCKS };

package/core/.specialist/tools/rea-detect.js

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+'use strict';
+/**
+ * REA (https://github.com/morluto/rea, MCP server `rea`) detection for the Ansuz boot banner and
+ * `kenaz doctor`. REA is optional and installed by the user (`npx rea-agents setup`); Kenaz never
+ * installs it. Read-only except `decline`, which records a per-project "do not suggest again".
+ *
+ *   node rea-detect.js [--project-path <dir>]          print the banner line (nothing when declined)
+ *   node rea-detect.js decline [--project-path <dir>]  stop suggesting REA in this project
+ */
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+const SETUP_CMD = 'npx rea-agents setup';
+const DECLINE_FILE = path.join('.kenaz', 'rea.json');
+
+const readJson = (f) => { try { return JSON.parse(fs.readFileSync(f, 'utf8')); } catch (_) { return null; } };
+const readText = (f) => { try { return fs.readFileSync(f, 'utf8'); } catch (_) { return ''; } };
+const hasRea = (servers) => !!(servers && typeof servers === 'object' && servers.rea);
+const norm = (p) => path.resolve(p).replace(/\\/g, '/').toLowerCase();
+
+/** REA's own floor: Node 22.x >= 22.19, 24.x >= 24.11, or 26+ (23 and 25 are not supported). */
+function reaNodeOk(version = process.versions.node) {
+  const [maj, min] = version.split('.').map(Number);
+  return maj >= 26 || (maj === 24 && min >= 11) || (maj === 22 && min >= 19);
+}
+
+/** Where `rea` is registered: Claude Code (user ~/.claude.json, its per-project entry, project .mcp.json) and Codex config.toml. */
+function detectRea({ home = os.homedir(), projectPath = process.cwd(), env = process.env } = {}) {
+  const cj = readJson(path.join(home, '.claude.json')) || {};
+  const projEntry = Object.entries(cj.projects || {}).find(([k]) => norm(k) === norm(projectPath));
+  const claude = hasRea(cj.mcpServers) || hasRea(projEntry && projEntry[1].mcpServers)
+    || hasRea((readJson(path.join(projectPath, '.mcp.json')) || {}).mcpServers);
+  const codexHome = env.CODEX_HOME || path.join(home, '.codex');
+  const codex = /^\s*\[mcp_servers\.rea\]\s*$/m.test(readText(path.join(codexHome, 'config.toml')));
+  const declined = !!(readJson(path.join(projectPath, DECLINE_FILE)) || {}).declined;
+  return { claude, codex, installed: claude || codex, declined, nodeOk: reaNodeOk(env.KENAZ_REA_NODE_VERSION || process.versions.node) };
+}
+
+/** One banner line, or null when the user declined in this project. */
+function reaBannerLine(d) {
+  if (d.installed) {
+    const where = [d.claude && 'claude', d.codex && 'codex'].filter(Boolean).join('/');
+    return `[rea] REA MCP on (${where}): a reference product/feature in the request -> offer to analyse it with REA (RULES.md "REA")`;
+  }
+  if (d.declined) return null;
+  const node = d.nodeOk ? '' : `; needs Node >=22.19/24.11 (found ${process.versions.node}), upgrade Node first`;
+  return `[rea] not installed: when the user names a reference product, suggest once \`${SETUP_CMD}\`${node}; on "no" run node "${__filename}" decline (RULES.md "REA")`;
+}
+
+function decline(projectPath) {
+  const f = path.join(projectPath, DECLINE_FILE);
+  fs.mkdirSync(path.dirname(f), { recursive: true });
+  fs.writeFileSync(f, JSON.stringify({ declined: true, at: new Date().toISOString() }, null, 2) + '\n');
+  return f;
+}
+
+if (require.main === module) {
+  const argv = process.argv.slice(2);
+  const i = argv.indexOf('--project-path');
+  const projectPath = i >= 0 && argv[i + 1] ? path.resolve(argv[i + 1]) : process.cwd();
+  if (argv[0] === 'decline') console.log(`[rea] will not suggest REA again in this project (${decline(projectPath)})`);
+  else { const l = reaBannerLine(detectRea({ projectPath })); if (l) console.log(l); }
+}
+
+module.exports = { detectRea, reaBannerLine, reaNodeOk, decline, SETUP_CMD };

package/core/KENAZ_CORE_VERSION

@@ -1 +1 @@
-0.3.7
+0.3.9

package/core/plugins/kenaz/commands/Ansuz.md

@@ -37,4 +37,10 @@ Kenaz 的工具、hook、安裝、peer 訊息、派工擋住或拖慢工作時
 - 一個問題只報一次；報完照常用替代做法把工作完成，並在回報裡告訴用戶已送出 wish。
 - 用戶直接說「回報這個問題」時也用同一個工具（`source`=`user`）。
 
-需要更多規則時（用戶授權自主、派工前、合併前）讀 `${CLAUDE_PLUGIN_ROOT}/../../.specialist/Ansuz/RULES.md`。
+## 自主模式
+用戶明確授權自主（「自主」「不用問我」「自己判斷著做」）時：立刻執行 `node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .specialist/tools/autonomy.js grant --session <id> --scope "<授權範圍>"`，再讀 RULES.md 的 Autonomy 一節。之後 Turn Context 會顯示 `[autonomy] ON`，結束回合會被 Stop hook 擋回：自己決定、一路做完，不在回合結尾問「要我…嗎？」；只有 RULES.md 列的必要停點才 `pause`，做完才 `done`。
+
+## 參考產品（REA）
+banner 的 `[rea]` 行說明 REA 是否可用：用戶提到想參考某產品的功能時，可用就提議用 REA 分析；沒裝就提示一次 `npx rea-agents setup`，用戶說不要就照 `[rea]` 行的 decline 指令記下來。範圍見 RULES.md 的 REA 一節。
+
+需要更多規則時（用戶授權自主、派工前、合併前、提到參考產品時）讀 `${CLAUDE_PLUGIN_ROOT}/../../.specialist/Ansuz/RULES.md`。

package/core/plugins/kenaz/hooks/hooks.json

@@ -21,7 +21,8 @@
     "SessionEnd": [{ "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" flow-post" }] }],
     "Stop": [{ "hooks": [
       { "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" flow-post" },
-      { "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" session-stop" }
+      { "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" session-stop" },
+      { "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" autonomy-stop" }
     ] }]
   }
 }

package/core/plugins/kenaz/hooks/kenaz-hook.js

@@ -28,6 +28,7 @@ const HOOKS = {
   'guidance':       { kind: 'guidance', minMode: 'full' },
   'prompt-runner':  { kind: 'script', file: '_run-user-prompt.js', minMode: 'full' },
   'session-stop':   { kind: 'core-script', rel: '.specialist/tools/session.js', args: ['stop'], minMode: 'full' },
+  'autonomy-stop':  { kind: 'script', file: 'autonomy-stop.js', call: 'main', minMode: 'full' },
   'synapse-first':  { kind: 'script', file: 'synapse-first-investigation.js', minMode: 'full' },
   'memory-guard':   { kind: 'script', file: 'memory-guard.js', call: 'main', minMode: 'full' },
   'task-bridge':    { kind: 'script', file: 'task-bridge.js', minMode: 'assist' },

package/core/plugins/kenaz/scripts/kenaz.test.js

@@ -58,7 +58,7 @@ test('ygg status fixture: masked key, room, peers, mail (TASK_2366)', () => {
   const key = 'ygk_SECRETSECRETSECRET1234';
   const s = buildStatus(
     { enabled: true, effective_project_key: 'acme/app', node_name: 'laptop', publishable_key: key, key_source: 'project', collaboration_projects: ['acme/app'] },
-    { connected: true, nodes: [{ node_name: 'laptop', is_online: true }, { node_name: 'desk', is_online: true }, { node_name: 'old', is_online: false }] },
+    { connected: true, nodes: [{ node_name: 'laptop', is_online: true, updated_at: new Date().toISOString() }, { node_name: 'desk', is_online: true, updated_at: new Date().toISOString() }, { node_name: 'old', is_online: false }, { node_name: 'BA-Cheng', is_online: true, updated_at: '2026-06-30T00:00:00Z' }] },
     { pending_count: 2, undeliverable_count: 1 });
   const out = renderStatus(s);
   assert.ok(!out.includes('SECRETSECRET') && !JSON.stringify(s).includes('SECRETSECRET'));

package/core/plugins/kenaz/scripts/ygg.js

@@ -47,9 +47,17 @@ async function relayNodes(cfg) {
   }
 }
 
+// TASK_2383: same online rule as kenaz_peer_send (is_online AND updated_at fresh, NODE_STALE_SECS):
+// the relay row can stay is_online forever after a node drops.
+const NODE_STALE_MS = 300 * 1000;
+function nodeIsOnline(n, now) {
+  const t = Date.parse(n && n.updated_at);
+  return !!(n && n.is_online) && Number.isFinite(t) && (now || Date.now()) - t < NODE_STALE_MS;
+}
+
 function buildStatus(cfg, relay, peer) {
   const self = cfg.node_name;
-  const online = relay.nodes.filter((n) => n.is_online && n.node_name !== self).map((n) => n.node_name);
+  const online = relay.nodes.filter((n) => nodeIsOnline(n) && n.node_name !== self).map((n) => n.node_name);
   return {
     room: cfg.effective_project_key || '(none)',
     node_name: self || '(none)',
@@ -165,5 +173,5 @@ async function main(argv) {
   console.log(json ? JSON.stringify(s, null, 2) : renderStatus(s));
 }
 
-module.exports = { maskKey, buildStatus, renderStatus, join };
+module.exports = { nodeIsOnline, maskKey, buildStatus, renderStatus, join };
 if (require.main === module) main(process.argv.slice(2));

package/core/plugins/kenaz-peer/hooks/register.test.ts

@@ -51,6 +51,58 @@ test('heartbeat precedes submit, ack carries the submitted id, second cycle is e
   expect(calls.filter(c => c.includes('/ack')).length).toBe(1)
 })
 
+function uiSetup(on: any, rows: unknown[], statusOk = true) {
+  const status: unknown[] = []
+  const toasts: string[] = []
+  on('session.start', async (_$: any, e: any) => ({ cwd: e.cwd }))
+  on('session.id', async () => ({ value: 'sess-1' }))
+  on('session.cwd', async () => ({ value: '/tmp/proj' }))
+  on('session.messages', async () => ({ value: rows }))
+  on('fs.read', async () => ({ deny: 'no pin' }))
+  let delivered = false
+  on('http.fetch', async (_$: any, e: any) => {
+    const url = String(e.url)
+    const reply = (o: unknown) => ({ value: { status: 200, ok: true, headers: {}, text: JSON.stringify(o) } })
+    if (url.includes('/pending')) return reply({ messages: delivered ? [] : [{ id: 'm1', framed: 'hi', from_node: 'node-b' }] })
+    if (url.includes('/ack')) { delivered = true; return reply({ acked: ['m1'] }) }
+    if (url.includes('/status')) return statusOk ? reply({ pending_count: 2, sessions: [{ delivery_mode: 'push' }, { delivery_mode: 'none' }] }) : { value: { status: 500, ok: false, headers: {}, text: '' } }
+    return reply({ ok: true })
+  })
+  on('prompt.submit', async (_$: any, e: any) => e)
+  on('ui.status', async (_$: any, e: any) => { status.push(e.text); return {} })
+  on('ui.toast', async (_$: any, e: any) => { toasts.push(e.text); return {} })
+  return { status, toasts }
+}
+
+test('Ansuz session: status line from /api/peer/status and a toast naming the sender node', async ($, on) => {
+  const clock = mock.clock(on)
+  const { status, toasts } = uiSetup(on, [{ role: 'user', content: '# Ansuz -- Specialist Prompt' }])
+  await $.session.start(START)
+  await clock.advance(5_000)
+  await clock.advance(5_000)
+  expect(status.some(s => String(s).includes('proj') && String(s).includes('sessions 1') && String(s).includes('mail 2') && String(s).includes('server ok'))).toBe(true)
+  expect(toasts.length).toBe(1)
+  expect(toasts[0]).toContain('node-b')
+})
+
+test('Ansuz session with the server down shows kenaz-server down', async ($, on) => {
+  const clock = mock.clock(on)
+  const { status } = uiSetup(on, [{ role: 'user', content: '# Ansuz -- Specialist Prompt' }], false)
+  await $.session.start(START)
+  await clock.advance(5_000)
+  await clock.advance(5_000)
+  expect(status.some(s => String(s).includes('kenaz-server down'))).toBe(true)
+})
+
+test('control: non-Ansuz session gets no status and no toast', async ($, on) => {
+  const clock = mock.clock(on)
+  const { status, toasts } = uiSetup(on, [{ role: 'user', content: 'hello' }])
+  await $.session.start(START)
+  await clock.advance(15_000)
+  expect(status.length).toBe(0)
+  expect(toasts.length).toBe(0)
+})
+
 test('plugin-namespaced /kenaz:Ansuz also activates delivery', async ($, on) => {
   const clock = mock.clock(on)
   const { calls, submits } = setup(on, () => [{ role: 'user', content: [{ type: 'text', text: '<command-name>/kenaz:Ansuz</command-name>' }] }])

package/core/plugins/kenaz-peer/hooks/register.ts

@@ -98,6 +98,33 @@ async function ack($: any): Promise<void> {
   if (res && !res.error) for (const id of ids) unacked.delete(id)
 }
 
+// TASK_2399: one status line + a toast per message batch. Reads only
+// GET /api/peer/status (pending_count, sessions) and the already-peeked pending rows.
+const STATUS_MS = 10_000
+let lastStatus = 0
+
+async function refreshStatus($: any): Promise<void> {
+  const now = Date.now()
+  if (now - lastStatus < STATUS_MS) return
+  lastStatus = now
+  try {
+    const root = await project($)
+    const st = await jget($, `${BACKEND}/api/peer/status?projectPath=${encodeURIComponent(root)}&limit=1`)
+    if (!st || typeof st !== 'object') { await $.ui.status('Kenaz: kenaz-server down'); return }
+    const name = root.replace(/[\\/]+$/, '').split(/[\\/]/).pop() || root
+    const sessions = Array.isArray(st.sessions) ? st.sessions.filter((s: any) => s?.delivery_mode !== 'none') : []
+    const pending = Number(st.pending_count) || 0
+    await $.ui.status(`Kenaz ${name} | sessions ${sessions.length} | mail ${pending} | server ok`)
+  } catch { /* UI is best-effort */ }
+}
+
+async function notify($: any, msgs: any[]): Promise<void> {
+  try {
+    const from = [...new Set(msgs.map(m => String(m.from_node ?? 'unknown')))].join(', ')
+    await $.ui.toast(`Kenaz: ${msgs.length} peer message${msgs.length > 1 ? 's' : ''} from ${from}`)
+  } catch { /* best-effort */ }
+}
+
 function frame(msgs: any[]): string {
   return msgs.map(m => String(m.framed ?? m.body ?? '')).filter(Boolean).join('\n')
 }
@@ -108,10 +135,12 @@ async function cycle($: any): Promise<void> {
   try {
     if (!(await isAnsuz($))) return // non-Ansuz: no heartbeat, no peek, no submit
     await ack($) // retry an ack that failed earlier
-    if (!beaten && !(await beat($))) return // never submit before a heartbeat has landed
+    if (!beaten && !(await beat($))) { await refreshStatus($); return } // never submit before a heartbeat has landed
+    void refreshStatus($)
     const msgs = await peek($)
     if (msgs.length === 0) return
     for (const m of msgs) unacked.add(m.id)
+    void notify($, msgs)
     try {
       await $.prompt.submit({ text: frame(msgs) })
     } catch {
@@ -141,6 +170,7 @@ export const register: Register = on => {
     if (msgs.length === 0) return next(e)
     for (const m of msgs) unacked.add(m.id)
     await ack($)
+    void notify($, msgs)
     return next({ ...e, context: [...(e.context ?? []), frame(msgs)] })
   })
 }

package/lib/cli.js

@@ -14,7 +14,7 @@ const dash = require('./dashboard');
 const PKG_ROOT = path.resolve(__dirname, '..');
 const PKG = require('../package.json');
 const MIN_NODE = 18;
-const USAGE = 'usage: kenaz <install|uninstall|status|doctor|init|ygg join <key>|ygg status|ygg leave> [--dry-run] [--home <dir>] [--no-service] [--no-claude] [--no-codex] [--keep-dashboard] [--server-bin <path>]';
+const USAGE = 'usage: kenaz <install|uninstall|status|doctor|init|ygg join <key>|ygg status|ygg leave|alaya status|alaya register|model [set <id>|unset] [--rigor r]> [--dry-run] [--home <dir>] [--no-service] [--no-claude] [--no-codex] [--keep-dashboard] [--server-bin <path>]';
 
 function parseArgs(argv) {
   const o = { cmd: argv[0], flags: {} };
@@ -33,6 +33,16 @@ function installer() {
   throw new Error('install-kenaz-cli.js not found (run `npm run stage` in packages/kenaz)');
 }
 
+/** A core module from the installed core, else this checkout; null when neither is there. */
+function coreModule(p, ...rel) {
+  for (const f of [path.join(p.core, ...rel), path.join(__dirname, '..', '..', '..', ...rel)]) {
+    if (fs.existsSync(f)) return require(f);
+  }
+  return null;
+}
+const reaDetect = (p) => coreModule(p, '.specialist', 'tools', 'rea-detect.js');
+const dispatchModel = (p) => coreModule(p, '.formation', 'tools', 'dispatch-model.js');
+
 function paths(home) {
   const dir = path.join(home, '.kenaz');
   return { home, dir, core: path.join(dir, 'core'), bin: path.join(dir, 'bin'), meta: path.join(dir, 'install.json') };
@@ -263,6 +273,19 @@ async function doctor(p, flags, out, deps = {}) {
     add('codex mcp', url ? 'ok' : 'FAIL', url || 'kenaz-dashboard entry missing in config.toml');
     add('codex hooks', miss.length ? 'FAIL' : 'ok', miss.length ? 'missing: ' + miss.join(', ') : 'registered (trust once via /hooks in codex)');
   }
+  const dm = dispatchModel(p);
+  if (dm) {
+    const d = dm.describe(process.cwd());
+    const uniq = [...new Set(d.rows.map((r) => r.model))];
+    add('dispatch model', 'ok', (uniq.length === 1 ? uniq[0] : d.rows.map((r) => `${r.rigor}=${r.model}`).join(' ')) + (d.file ? '' : ' (built-in default)') + '; change with `kenaz model set <id>`');
+  }
+  // Optional and user-installed: never a failure.
+  const rea = reaDetect(p);
+  if (rea) {
+    const r = rea.detectRea({ home: p.home, projectPath: process.cwd() });
+    add('rea (optional)', r.installed ? 'ok' : 'skip', r.installed ? 'MCP registered in ' + [r.claude && 'claude', r.codex && 'codex'].filter(Boolean).join(', ')
+      : `not installed; \`${rea.SETUP_CMD}\` lets Ansuz analyse reference products` + (r.nodeOk ? '' : ` (needs Node >=22.19, found ${process.versions.node})`));
+  }
   for (const [l, s, d] of rows) out(`${s.padEnd(4)}  ${l.padEnd(20)} ${d}`);
   return rows.some((r) => r[1] === 'FAIL') ? 1 : 0;
 }
@@ -279,7 +302,42 @@ function passthrough(argv, deps) {
   return r.status === null ? 1 : r.status;
 }
 
+// TASK_2406: `kenaz alaya status|register` talks to the local kenaz-server. Register needs no login:
+// the server registers by machine key (empty body).
+function httpJson(method, port, urlPath, body) {
+  return new Promise((resolve) => {
+    const data = body === undefined ? null : JSON.stringify(body);
+    const req = http.request({ host: '127.0.0.1', port, path: urlPath, method, timeout: 30000,
+      headers: data ? { 'content-type': 'application/json', 'content-length': Buffer.byteLength(data) } : {} }, (res) => {
+      let b = ''; res.on('data', (d) => { b += d; });
+      res.on('end', () => { let j = null; try { j = JSON.parse(b); } catch (_) { /* non-JSON */ } resolve({ status: res.statusCode, json: j, text: b }); });
+    });
+    req.on('timeout', () => { req.destroy(); resolve({ status: 0, text: 'timeout' }); });
+    req.on('error', (e) => resolve({ status: 0, text: `${e.code || e.message}` }));
+    if (data) req.write(data);
+    req.end();
+  });
+}
+
+async function alaya(argv, out = console.log) {
+  const sub = argv[1];
+  if (sub !== 'status' && sub !== 'register') { out('usage: kenaz alaya <status|register>'); return 2; }
+  const port = process.env.KENAZ_HTTP_PORT || '18080';
+  const r = sub === 'status' ? await httpJson('GET', port, '/api/rust/alaya/status') : await httpJson('POST', port, '/api/rust/alaya/register', {});
+  if (!r.status) { out(`kenaz-server not reachable on 127.0.0.1:${port} (${r.text}); run \`kenaz doctor\``); return 1; }
+  if (r.status >= 400) { out(`alaya ${sub} failed (HTTP ${r.status}): ${(r.json && r.json.error) || r.text}`); return 1; }
+  const j = r.json || {};
+  out(sub === 'status' ? `alaya: registered=${j.registered} outbox_depth=${j.outbox_depth}` : `alaya: registered (already_registered=${!!j.already_registered}); queued reports will drain`);
+  return 0;
+}
+
 function run(argv, out = console.log, deps = {}) {
+  if (argv[0] === 'alaya') return alaya(argv, out);
+  if (argv[0] === 'model') {
+    const dm = dispatchModel(paths(os.homedir()));
+    if (!dm) { out('kenaz-core not installed: run `kenaz install`'); return 1; }
+    return dm.main(argv.slice(1), out);
+  }
   if (argv[0] === 'ygg' || argv[0] === 'init') return passthrough(argv, deps);
   const { cmd, flags } = parseArgs(argv);
   const fn = { install, uninstall, status, doctor }[cmd];

package/lib/cli.test.js

@@ -58,6 +58,32 @@ test('kenaz ygg / init pass through to the core scripts with the remaining args'
   assert.deepStrictEqual(calls[1].slice(1), ['init']);
 });
 
+test('kenaz alaya register posts an empty body (machine-key path); status reads the registered flag', async () => {
+  const http = require('http');
+  const seen = [];
+  const srv = http.createServer((req, res) => {
+    let b = ''; req.on('data', (d) => { b += d; });
+    req.on('end', () => {
+      seen.push([req.method, req.url, b]);
+      res.setHeader('content-type', 'application/json');
+      res.end(req.url.endsWith('status') ? '{"registered":true,"outbox_depth":0}' : '{"registered":true,"already_registered":false}');
+    });
+  });
+  await new Promise((r) => srv.listen(0, '127.0.0.1', r));
+  const old = process.env.KENAZ_HTTP_PORT; process.env.KENAZ_HTTP_PORT = String(srv.address().port);
+  try {
+    const lines = [];
+    assert.strictEqual(await run(['alaya', 'register'], (l) => lines.push(l)), 0);
+    assert.strictEqual(await run(['alaya', 'status'], (l) => lines.push(l)), 0);
+    assert.deepStrictEqual(seen[0], ['POST', '/api/rust/alaya/register', '{}']);
+    assert.match(lines[1], /registered=true outbox_depth=0/);
+    assert.strictEqual(await run(['alaya', 'bogus'], () => {}), 2);
+  } finally {
+    if (old === undefined) delete process.env.KENAZ_HTTP_PORT; else process.env.KENAZ_HTTP_PORT = old;
+    srv.close();
+  }
+});
+
 test('reinstall stops only the kenaz-server running from the managed path (exact exe match, by PID)', () => {
   const { stopOwnServer } = require('./cli');
   const killed = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kenaz",
-  "version": "0.3.7",
+  "version": "0.3.9",
   "description": "Install Kenaz (plugin, hooks, kenaz-server) for Claude Code and Codex: npx kenaz install",
   "bin": {
     "kenaz": "bin/kenaz.js"
@@ -20,11 +20,11 @@
     "test": "node --test lib/cli.test.js"
   },
   "optionalDependencies": {
-    "@kenazai/server-darwin-arm64": "0.3.7",
-    "@kenazai/server-darwin-x64": "0.3.7",
-    "@kenazai/server-linux-arm64": "0.3.7",
-    "@kenazai/server-linux-x64": "0.3.7",
-    "@kenazai/server-win32-x64": "0.3.7"
+    "@kenazai/server-darwin-arm64": "0.3.9",
+    "@kenazai/server-darwin-x64": "0.3.9",
+    "@kenazai/server-linux-arm64": "0.3.9",
+    "@kenazai/server-linux-x64": "0.3.9",
+    "@kenazai/server-win32-x64": "0.3.9"
   },
   "license": "UNLICENSED",
   "repository": {