agentlas 0.4.0 → 0.5.5

package/engine/agentlas-composer.cjs

@@ -2,10 +2,10 @@
 /*
  * agentlas-composer: a raw-mode bottom input box (Claude Code / Hermes style).
  *
- *   ╭────────────────────────────────────────────╮
- *   │ › your message                              │
- *   ╰────────────────────────────────────────────╯
- *     claude-code · full · 12.3k tok · / for commands
+ *   ───────────────────────────────────────────────
+ *   › your message
+ *   ───────────────────────────────────────────────
+ *   ◆ read + write · codex · Agent · / for commands
  *     (slash suggestions render here while typing /…)
  *
  * Single-line field with horizontal scroll (fixed 3-line box → flicker-free clear/redraw).
@@ -13,6 +13,8 @@
  * Zero external deps. Caller falls back to readline when stdin/stdout is not a TTY.
  */
 const readline = require("node:readline");
+const i18n = require("./agentlas-i18n.cjs");
+const permissions = require("./agentlas-permissions.cjs");
 
 // East-Asian width: CJK / Hangul / Kana / fullwidth glyphs occupy 2 terminal cells.
 function isWide(cp) {
@@ -43,6 +45,91 @@ function visWidth(s) {
   return n;
 }
 
+function truncateWidth(value, max) {
+  const text = String(value || "");
+  if (visWidth(text) <= max) return text;
+  let out = "";
+  let width = 0;
+  const room = Math.max(0, max - 1);
+  for (const ch of text) {
+    const cells = charWidth(ch);
+    if (width + cells > room) break;
+    out += ch;
+    width += cells;
+  }
+  return out + "…";
+}
+
+function identityPalette() {
+  const id = (value) => String(value);
+  return { faint: id, emerald: id, text: id, paw: id, amber: id, blue: id, dim: id, inverse: id };
+}
+
+function permissionPresentation(ctx, c) {
+  const permission = permissions.normalize(ctx.permission, "write");
+  const fallback = permissions.copy(permission, ctx.lang || "en").label;
+  const label = ctx.permissionLabel || fallback;
+  if (permission === "full") return c.paw("▶▶ " + label);
+  if (permission === "read") return c.blue("◇ " + label);
+  return c.amber("◆ " + label);
+}
+
+// Pure frame builder so layout can be regression-tested without taking over a real TTY.
+function buildComposerFrame(state, ctx = {}, palette, width = 80) {
+  const c = palette || identityPalette();
+  const w = Math.max(29, width);
+  const fieldW = Math.max(8, w - 2);
+
+  // horizontal scroll by visual width — keep the cursor visible (CJK-safe)
+  let start = Math.min(state.scroll, state.cur);
+  while (start < state.cur && visWidth(state.buf.slice(start, state.cur)) > fieldW - 2) start++;
+  state.scroll = start;
+
+  let shown = "";
+  let shownWidth = 0;
+  for (let i = start; i < state.buf.length; ) {
+    const ch = state.buf.codePointAt(i) > 0xffff ? state.buf.slice(i, i + 2) : state.buf[i];
+    const cw = charWidth(ch);
+    if (shownWidth + cw > fieldW - 2) break;
+    shown += ch;
+    shownWidth += cw;
+    i += ch.length;
+  }
+
+  const prefix = (ctx.glyph || "›") + " ";
+  const top = c.faint("─".repeat(w));
+  const mid = c.text(prefix) + c.text(shown);
+  const bot = c.faint("─".repeat(w));
+  const lines = [top, mid, bot];
+  if (ctx.status || ctx.permission) {
+    const permission = permissions.normalize(ctx.permission, "write");
+    const fallback = permissions.copy(permission, ctx.lang || "en").label;
+    const permissionLabel = ctx.permissionLabel || fallback;
+    const permissionText = (permission === "full" ? "▶▶ " : permission === "read" ? "◇ " : "◆ ") + permissionLabel;
+    const available = Math.max(0, w - visWidth(permissionText) - 5);
+    const rest = ctx.status && available > 0 ? c.faint("  ·  " + truncateWidth(ctx.status, available)) : "";
+    lines.push(permissionPresentation(ctx, c) + rest);
+  }
+  if (ctx.confirmation) {
+    const prefix = ctx.confirmationTone === "danger" ? "! " : "✓ ";
+    const paint = ctx.confirmationTone === "danger" && c.paw ? c.paw : c.green || c.emerald || ((value) => value);
+    lines.push(paint(truncateWidth(prefix + ctx.confirmation, w)));
+  }
+
+  const rows = state.suggest || [];
+  rows.slice(0, 8).forEach((row, index) => {
+    const cmd = String(row.command || "").padEnd(16);
+    const desc = String(row.description || "");
+    const descRoom = Math.max(0, w - visWidth(" " + cmd + " "));
+    const clippedDesc = truncateWidth(desc, descRoom);
+    const label = " " + cmd + " " + clippedDesc;
+    lines.push(index === state.suggestSel ? c.inverse(label) : " " + c.blue(cmd) + " " + c.dim(clippedDesc));
+  });
+  if (rows.length) lines.push(c.faint("  " + i18n.t(ctx.lang || "en", "palette.controls")));
+
+  return { lines, curCol: visWidth(prefix) + visWidth(state.buf.slice(start, state.cur)) };
+}
+
 function createComposer(opts) {
   const out = opts.stream || process.stdout;
   const inp = opts.input || process.stdin;
@@ -61,45 +148,7 @@ function createComposer(opts) {
 
   // Build the rendered block (array of lines) + the cursor target column on the input line.
   function frame(state, ctx) {
-    const w = boxWidth();
-    const inner = w - 2; // chars between │ … │
-    const glyph = " " + (ctx.glyph || "›") + " "; // " › "
-    const glyphW = visWidth(glyph);
-    const fieldW = Math.max(8, inner - glyphW);
-
-    // horizontal scroll by visual width — keep the cursor visible (CJK-safe)
-    let start = Math.min(state.scroll, state.cur);
-    while (start < state.cur && visWidth(state.buf.slice(start, state.cur)) > fieldW - 1) start++;
-    state.scroll = start;
-
-    let shown = "";
-    let ww = 0;
-    for (let i = start; i < state.buf.length; ) {
-      const ch = state.buf.codePointAt(i) > 0xffff ? state.buf.slice(i, i + 2) : state.buf[i];
-      const cw = charWidth(ch);
-      if (ww + cw > fieldW) break;
-      shown += ch;
-      ww += cw;
-      i += ch.length;
-    }
-    const pad = " ".repeat(Math.max(0, fieldW - ww));
-    const top = c.faint("╭" + "─".repeat(inner) + "╮");
-    const mid = c.faint("│") + c.emerald(glyph) + c.text(shown) + pad + c.faint("│");
-    const bot = c.faint("╰" + "─".repeat(inner) + "╯");
-    const lines = [top, mid, bot];
-    if (ctx.status) lines.push("  " + c.faint(ctx.status));
-
-    const rows = state.suggest || [];
-    rows.slice(0, 8).forEach((r, i) => {
-      const cmd = String(r.command || "").padEnd(16);
-      const desc = String(r.description || "");
-      const label = (" " + cmd + " " + desc).slice(0, w);
-      lines.push(i === state.suggestSel ? c.inverse(label) : " " + c.blue(cmd) + c.dim(desc.slice(0, w - 20)));
-    });
-    if (rows.length) lines.push(c.faint("  ↑↓ move · Tab complete · Enter run · Esc close"));
-
-    const curCol = 1 + glyphW + visWidth(state.buf.slice(start, state.cur)); // 0-based visual column
-    return { lines, curCol };
+    return buildComposerFrame(state, ctx, c, boxWidth());
   }
 
   function render(state, ctx) {
@@ -172,6 +221,14 @@ function createComposer(opts) {
       function onKey(str, key) {
         key = key || {};
         const name = key.name;
+        const shiftTab = name === "tab" && key.shift;
+
+        if (!shiftTab && ctx.onPermissionCycleCancel) {
+          const hadConfirmation = Boolean(ctx.confirmation);
+          const next = ctx.onPermissionCycleCancel();
+          if (next && typeof next === "object") Object.assign(ctx, next);
+          if (hadConfirmation && !ctx.confirmation) draw();
+        }
 
         if (key.ctrl && name === "c") {
           if (state.buf.length) { ctrlc = 0; return setBuf("", 0); }
@@ -212,6 +269,14 @@ function createComposer(opts) {
           if (state.suggest.length) { state.suggestSel = (state.suggestSel + 1) % state.suggest.length; state.buf = state.suggest[state.suggestSel].command; state.cur = state.buf.length; return render(state, ctx); }
           return histNav(-1);
         }
+        if (shiftTab) {
+          if (ctx.onCyclePermission) {
+            const next = ctx.onCyclePermission(ctx.permission);
+            if (next && typeof next === "object") Object.assign(ctx, next);
+            draw();
+          }
+          return;
+        }
         if (name === "tab") {
           if (state.suggest.length) { const cmd = state.suggest[state.suggestSel].command; state.dismissed = cmd; return setBuf(cmd, cmd.length); }
           if (ctx.complete) {
@@ -253,4 +318,4 @@ function createComposer(opts) {
   return { read, setHistory: (h) => { history = (h || []).filter((x) => typeof x === "string"); } };
 }
 
-module.exports = { createComposer, visWidth };
+module.exports = { createComposer, visWidth, buildComposerFrame, truncateWidth };

package/engine/agentlas-doctor.cjs

@@ -20,23 +20,50 @@ function codexHome() {
   return process.env.CODEX_HOME || path.join(os.homedir(), ".codex");
 }
 
-/** 에러 텍스트에서 실패 원인으로 지목된 원격 호스트들을 추출한다. */
+/**
+ * 에러 텍스트에서 OAuth 자원 메타데이터로 명시된 호스트만 추출한다.
+ * stderr의 모든 URL을 수집하면 도움말·문서 링크와 관련된 정상 플러그인까지
+ * 수리 대상이 될 수 있다. 자동 수리는 구조화된 증거가 있을 때만 실행한다.
+ */
 function extractHosts(error) {
   const hosts = new Set();
-  const re = /https?:\/\/([a-z0-9][a-z0-9.-]*[a-z0-9])/gi;
-  let m;
-  while ((m = re.exec(error)) !== null) hosts.add(m[1].toLowerCase());
+  const addUrlHost = (rawUrl) => {
+    try {
+      hosts.add(new URL(rawUrl.replace(/[\]}>),.;]+$/g, "")).hostname.toLowerCase());
+    } catch {
+      /* 잘못된 메타데이터 URL은 자동 수리 증거로 쓰지 않음 */
+    }
+  };
+  const patterns = [
+    /resource_metadata(?:_url)?\s*[:=]\s*\\?["']?(https?:\/\/[^\s"'\\)>,]+)/gi,
+    /(https?:\/\/[^\s"'\\)>,]+\/\.well-known\/oauth-protected-resource(?:[/?#][^\s"'\\)>,]*)?)/gi,
+  ];
+  for (const re of patterns) {
+    let m;
+    while ((m = re.exec(error || "")) !== null) addUrlHost(m[1]);
+  }
   return [...hosts];
 }
 
-/** kind: mcp-oauth-unauthenticated | timeout | cli-exit | unknown (데스크탑 TS와 동일 규칙) */
+/** 에러 텍스트에서 config.toml 스키마 위반이 지목한 mcp_servers 이름을 뽑는다. */
+function extractBadMcpServer(error) {
+  // 예: Error loading config.toml: url is not supported for stdio in "mcp_servers.agentlas"
+  const m = /mcp_servers\.([a-z0-9_.-]+)/i.exec(error || "");
+  return m ? m[1] : null;
+}
+
+/** kind: mcp-oauth-unauthenticated | codex-config-invalid | timeout | cli-exit | unknown (데스크탑 TS와 동일 규칙) */
 function classifyFailure(error) {
   const text = error || "";
   if (/authrequired|invalid_token|oauth-protected-resource|www_authenticate/i.test(text)) {
     return { kind: "mcp-oauth-unauthenticated", hosts: extractHosts(text) };
   }
+  // codex config.toml 파싱 실패(예: stdio 서버에 url 키) → CLI가 아예 기동 못 함.
+  if (/error loading config\.toml|url is not supported for stdio|invalid config/i.test(text)) {
+    return { kind: "codex-config-invalid", hosts: [], badServer: extractBadMcpServer(text) };
+  }
   if (/no response for \d+s|auto-aborted/i.test(text)) return { kind: "timeout", hosts: [] };
-  if (/CLI exit \d+|exited with code [1-9]/i.test(text)) return { kind: "cli-exit", hosts: extractHosts(text) };
+  if (/(?:CLI exit|exited with code)\s+[1-9]\d*/i.test(text)) return { kind: "cli-exit", hosts: extractHosts(text) };
   return { kind: "unknown", hosts: [] };
 }
 
@@ -78,7 +105,9 @@ function findOauthPluginsByHost(hosts) {
             } catch {
               continue;
             }
-            if (hosts.some((h) => h === host || h.endsWith("." + host) || host.endsWith("." + h))) {
+            // 호스트가 정확히 같을 때만 자동 수리한다. 부모/자식 도메인 관계만으로는
+            // 어느 플러그인이 실패했는지 증명할 수 없다.
+            if (hosts.includes(host)) {
               // cache 디렉토리 "openai-curated-remote"는 config 키에선 "openai-curated".
               hits.push({ pluginKey: `${plugin}@${marketplace.replace(/-remote$/, "")}`, host });
             }
@@ -100,12 +129,22 @@ function disableCodexPlugin(pluginKey) {
   const original = fs.readFileSync(configPath, "utf8");
   const header = `[plugins."${pluginKey}"]`;
   let next;
-  if (original.includes(header)) {
-    const idx = original.indexOf(header);
-    const after = original.slice(idx);
-    const replacedAfter = after.replace(/(\[plugins\."[^"]+"\]\s*\n)enabled\s*=\s*true/, "$1enabled = false");
-    if (replacedAfter === after) return false; // 이미 false거나 형태가 다름
-    next = original.slice(0, idx) + replacedAfter;
+  const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const headerMatch = new RegExp(`^[ \\t]*${escapeRegExp(header)}[ \\t]*(?:#.*)?\\r?$`, "m").exec(original);
+  if (headerMatch) {
+    const headerLineEnd = headerMatch.index + headerMatch[0].length;
+    const newlineIndex = original.indexOf("\n", headerLineEnd);
+    const bodyStart = newlineIndex === -1 ? original.length : newlineIndex + 1;
+    const remaining = original.slice(bodyStart);
+    const nextSection = /^[ \t]*\[[^\r\n]+\][ \t]*(?:#.*)?\r?$/m.exec(remaining);
+    const sectionEnd = nextSection ? bodyStart + nextSection.index : original.length;
+    const section = original.slice(headerMatch.index, sectionEnd);
+    const replacedSection = section.replace(
+      /^([ \t]*enabled[ \t]*=[ \t]*)true([ \t]*(?:#.*)?)(?=\r?$)/m,
+      "$1false$2",
+    );
+    if (replacedSection === section) return false; // 이미 false거나 해당 섹션에 enabled=true가 없음
+    next = original.slice(0, headerMatch.index) + replacedSection + original.slice(sectionEnd);
   } else {
     next = `${original.trimEnd()}\n\n${header}\nenabled = false\n`;
   }
@@ -120,9 +159,21 @@ function disableCodexPlugin(pluginKey) {
  * 데스크탑 runtime-doctor.ts 의 runRuntimeDoctor 와 동일 계약.
  */
 function runRuntimeDoctor(errorMessage) {
-  const { kind, hosts } = classifyFailure(errorMessage);
+  const { kind, hosts, badServer } = classifyFailure(errorMessage);
   const actions = [];
 
+  if (kind === "codex-config-invalid") {
+    // 진단만 한다(자동 수리 안 함): 원격 MCP 항목이라 안전한 무손실 수리가 없고,
+    // 사용자가 어느 항목을 어떻게 고칠지 알아야 한다. 명확한 조치를 안내한다.
+    const where = badServer ? `[mcp_servers.${badServer}]` : "일부 [mcp_servers.*] 항목";
+    return {
+      kind,
+      summary: `codex의 ~/.codex/config.toml ${where} 이(가) 잘못돼 codex가 기동하지 못합니다(예: stdio 서버에 url 키). 다른 런타임(--runtime claude-code)으로 우회하거나 그 항목을 고치세요.`,
+      repaired: false,
+      actions,
+    };
+  }
+
   if (kind === "mcp-oauth-unauthenticated") {
     const hitList = findOauthPluginsByHost(hosts);
     let repairedAny = false;

package/engine/agentlas-i18n.cjs

@@ -16,6 +16,14 @@ const STRINGS = {
     "banner.help": "for commands",
     "banner.quit": "to quit",
     "banner.interrupt": "to interrupt",
+    "banner.product": "Agent OS terminal",
+    "banner.session": "%s · %s · %s",
+    "banner.location": "%s · / commands · Shift-Tab permissions",
+    "status.title": "Session",
+    "status.runtime": "runtime",
+    "status.agent": "agent",
+    "status.directory": "directory",
+    "status.permission": "permission",
     // picker
     "picker.agents": "Agents",
     "picker.companies": "Companies",
@@ -34,6 +42,15 @@ const STRINGS = {
     "stalled": "stream stalled — interrupted (idle timeout)",
     "thinkingWith": "thinking with %s",
     "spinnerStop": "ctrl-c to stop",
+    "runtime.thinking": "thinking…",
+    "runtime.reasoning": "reasoning…",
+    "runtime.starting": "starting %s…",
+    "runtime.failed": "failed to run %s: %s",
+    "runtime.exited": "%s exited with code %s",
+    "runtime.noOutput": "%s returned no output",
+    "runtime.rateLimit": "%s rate limit reached",
+    "runtime.doctor": "Runtime Doctor: %s",
+    "runtime.doctorRetry": "Repair complete — retrying the same request once.",
     "noKey": "No %s API key. Add one in the app (Settings → BYOK), or switch with /runtime.",
     "runtimeSet": "runtime → %s",
     "runtimeNotInstalled": "%s CLI is not installed.",
@@ -47,6 +64,10 @@ const STRINGS = {
     "permSet": "permission → %s",
     "permUsage": "usage: /permission read|write|full",
     "permCurrent": "current permission: %s",
+    "permCycleHint": "Shift-Tab to cycle",
+    "permCycleConfirm": "permission → %s",
+    "permFullArm": "FULL ACCESS IS UNRESTRICTED — press Shift-Tab again within 5 seconds to confirm",
+    "permFullConfirm": "FULL ACCESS ON FOR THIS SESSION — approvals and sandboxing are bypassed",
     "sideUsage": "usage: /side <question>",
     "sideNeedsSubject": "pick an agent first, or type the task normally so Agentlas can auto-route it",
     "sideStart": "side question; this answer will not be saved to chat context",
@@ -66,8 +87,10 @@ const STRINGS = {
     "market.loggedIn": "cloud session: signed in",
     "market.loggedOut": "cloud session: signed out — sign in via the app (or set AGENTLAS_SESSION) to install cloud agents",
     "mcp.none": "(no MCP servers configured — add them in the app)",
-    "mcp.wired": "%s server(s) wired into write/full turns (incl. playwright)",
-    "mcp.usage": "add/remove MCP servers in the app; the terminal wires enabled stdio servers",
+    "mcp.playwright": "Playwright browser",
+    "mcp.fullOnly": "full only",
+    "mcp.wired": "%s server(s) available only in full-access turns (incl. playwright)",
+    "mcp.usage": "add/remove MCP servers in the app; read/write never inject external MCP tools",
     "help.mcp": "list configured MCP servers and which are wired",
     "resume.title": "Resume — recent sessions",
     "resume.none": "(no saved sessions yet — they're saved after each turn)",
@@ -94,6 +117,13 @@ const STRINGS = {
     "multimodal.usage": "set with /multimodal set <image|video|audio> <provider-id>",
     // help rows
     "help.talk": "talk to the current agent/company — streaming + tools",
+    "help.help": "show commands, shortcuts, and common flows",
+    "help.title": "Help",
+    "help.intro": "Run local agents with explicit runtime, permission, files, shell, and history controls.",
+    "help.commands": "Commands",
+    "skills.title": "Skills",
+    "permissions.title": "Permissions",
+    "permissions.current": "Current",
     "help.skills": "list slash-command skills",
     "help.agents": "list installed agents",
     "help.team": "view/assign each agent's LLM (auto-routed by capability)",
@@ -107,18 +137,23 @@ const STRINGS = {
     "help.setup": "run language, runtime, and permission setup again",
     "help.cwd": "show or change the working folder",
     "help.memory": "show the memory being injected",
+    "help.careerGraph": "show/add source refs for the Career Graph routing index",
     "help.ontology": "turn on/list/add project ontology sources with short natural commands",
     "help.side": "ask a side question without saving it to chat context",
     "help.status": "show model/runtime, agent, permission, and directory",
     "help.multimodal": "show/set image, video, and audio fallback providers",
     "help.import": "import a local folder (agent or team)",
     "help.market": "browse/install marketplace agents",
-    "help.install": "install a cloud agent by slug",
     "help.clear": "clear the chat and redraw",
     "help.storm": "run a force-robust Stormbreaker pipeline on a goal",
     "help.build": "build/repair/package an agent or team (Hephaestus)",
     "help.route": "preview which agent/pipeline would take a request",
     "help.research": "run the Research Engine (search/gather/read)",
+    "help.search": "discover agents in the Hub",
+    "help.install": "install an agent from the Hub by slug",
+    "help.network": "decompose a request into an A2A task force",
+    "help.browser": "real browser execution hardpoint",
+    "help.connect": "wire Telegram / platforms to an agent team",
     "help.swarm": "fan out an emergent agent swarm on a goal",
     "help.doctor": "check runtimes and data",
     "help.compact": "drop older transcript turns and keep the latest context",
@@ -143,6 +178,31 @@ const STRINGS = {
     "help.tab": "autocomplete commands, agents, runtimes, paths",
     "help.arrows": "browse persisted input history",
     "help.ctrlc": "interrupt a running turn, or press twice when idle to quit",
+    "help.shiftTab": "cycle read → write → full permission",
+    "help.ctrlT": "show or hide the real runtime task/todo list during a turn",
+    "palette.title": "Slash commands",
+    "palette.search": "type to search",
+    "palette.category": "category: %s",
+    "palette.examples": "examples: %s",
+    "palette.controls": "↑↓ move · Enter run · Tab complete · Esc close",
+    "tasks.title": "Tasks",
+    "tasks.show": "Ctrl-T show",
+    "tasks.hide": "Ctrl-T hide",
+    "tasks.pending": "pending",
+    "tasks.progress": "in progress",
+    "tasks.done": "done",
+    "tasks.failed": "failed",
+    "category.Help": "Help",
+    "category.Session": "Session",
+    "category.Discovery": "Discovery",
+    "category.Knowledge": "Knowledge",
+    "category.Routing": "Routing",
+    "category.Settings": "Settings",
+    "category.Files": "Files",
+    "category.Context": "Context",
+    "category.Engine": "Engine",
+    "category.Hub": "Hub",
+    "category.Health": "Health",
     "compact.noop": "context is already compact (%s message(s))",
     "compact.done": "compacted context: %s → %s message(s)",
     // onboarding wizard
@@ -153,9 +213,9 @@ const STRINGS = {
     "wiz.runtimeInstalled": "installed",
     "wiz.runtimeMissing": "not installed",
     "wiz.permQ": "How much should agents be allowed to do by default?",
-    "wiz.permRead": "read — look only (no changes)",
-    "wiz.permWrite": "write — read + create/edit files (recommended)",
-    "wiz.permFull": "full — everything, including shell commands",
+    "wiz.permRead": "read — inspect only; runtime is read-only/plan",
+    "wiz.permWrite": "write — edit this workspace in the runtime sandbox; no external MCP (recommended)",
+    "wiz.permFull": "full — unrestricted; bypass runtime approvals and sandboxing",
     "wiz.pick": "Enter a number › ",
     "wiz.saved": "All set. You can change any of this later with /runtime, /permission.",
     "wiz.changeLang": "Tip: re-run setup anytime with  agentlas setup",
@@ -164,6 +224,14 @@ const STRINGS = {
     "banner.help": "명령 보기",
     "banner.quit": "종료",
     "banner.interrupt": "턴 중단",
+    "banner.product": "Agent OS 터미널",
+    "banner.session": "%s · %s · %s",
+    "banner.location": "%s · / 명령 · Shift-Tab 권한",
+    "status.title": "세션",
+    "status.runtime": "런타임",
+    "status.agent": "에이전트",
+    "status.directory": "작업 폴더",
+    "status.permission": "권한",
     "picker.agents": "에이전트",
     "picker.companies": "회사",
     "picker.none": "(아직 없음 — Agentlas 앱에서 에이전트를 설치하거나 /import <경로>)",
@@ -180,6 +248,15 @@ const STRINGS = {
     "stalled": "응답이 지연되어 중단했습니다 (idle timeout)",
     "thinkingWith": "%s로 생각 중",
     "spinnerStop": "ctrl-c로 중단",
+    "runtime.thinking": "생각 중…",
+    "runtime.reasoning": "추론 중…",
+    "runtime.starting": "%s 시작 중…",
+    "runtime.failed": "%s 실행 실패: %s",
+    "runtime.exited": "%s 종료 코드 %s",
+    "runtime.noOutput": "%s가 출력 없이 종료됨",
+    "runtime.rateLimit": "%s 사용량 한도에 도달함",
+    "runtime.doctor": "런타임 진단: %s",
+    "runtime.doctorRetry": "자동 수리 완료 — 같은 요청을 한 번 다시 시도합니다.",
     "noKey": "%s API 키가 없습니다. 앱 설정 → BYOK에서 등록하거나 /runtime으로 전환하세요.",
     "runtimeSet": "런타임 → %s",
     "runtimeNotInstalled": "%s CLI가 설치돼 있지 않습니다.",
@@ -193,6 +270,10 @@ const STRINGS = {
     "permSet": "권한 → %s",
     "permUsage": "사용법: /permission read|write|full",
     "permCurrent": "현재 권한: %s",
+    "permCycleHint": "Shift-Tab으로 변경",
+    "permCycleConfirm": "권한 → %s",
+    "permFullArm": "무제한 권한은 승인과 샌드박스를 우회합니다 — 5초 안에 Shift-Tab을 다시 눌러 확인",
+    "permFullConfirm": "이 세션에서만 무제한 권한 켜짐 — 승인과 샌드박스를 우회함",
     "sideUsage": "사용법: /side <질문>",
     "sideNeedsSubject": "먼저 에이전트를 고르거나, 그냥 할 일을 입력해서 Agentlas가 자동 라우팅하게 하세요.",
     "sideStart": "사이드 질문입니다. 이 답변은 메인 대화 맥락에 저장하지 않습니다.",
@@ -212,8 +293,10 @@ const STRINGS = {
     "market.loggedIn": "클라우드 세션: 로그인됨",
     "market.loggedOut": "클라우드 세션: 로그아웃 — 클라우드 설치는 앱에서 로그인(또는 AGENTLAS_SESSION) 필요",
     "mcp.none": "(설정된 MCP 서버 없음 — 앱에서 추가)",
-    "mcp.wired": "write/full 턴에 %s개 서버 연결됨 (playwright 포함)",
-    "mcp.usage": "MCP 서버 추가/삭제는 앱에서; 터미널은 enabled stdio 서버를 연결합니다",
+    "mcp.playwright": "Playwright 브라우저",
+    "mcp.fullOnly": "full 전용",
+    "mcp.wired": "무제한 권한 턴에서만 %s개 서버 사용 가능 (playwright 포함)",
+    "mcp.usage": "MCP 서버 추가/삭제는 앱에서; read/write에는 외부 MCP 도구를 주입하지 않음",
     "help.mcp": "설정된 MCP 서버와 연결 상태 보기",
     "resume.title": "이어하기 — 최근 세션",
     "resume.none": "(저장된 세션 없음 — 각 턴 후 저장됩니다)",
@@ -239,6 +322,13 @@ const STRINGS = {
     "multimodal.set": "멀티모달 %s → %s",
     "multimodal.usage": "/multimodal set <image|video|audio> <provider-id> 로 변경",
     "help.talk": "현재 에이전트/회사와 대화 — 스트리밍 + 툴",
+    "help.help": "명령·단축키·주요 사용법 보기",
+    "help.title": "도움말",
+    "help.intro": "런타임·권한·파일·셸·기록을 직접 통제하며 로컬 에이전트를 실행합니다.",
+    "help.commands": "명령",
+    "skills.title": "스킬",
+    "permissions.title": "권한",
+    "permissions.current": "현재",
     "help.skills": "slash 명령 스킬 목록",
     "help.agents": "설치된 에이전트 목록",
     "help.team": "에이전트별 LLM 보기/지정 (능력 기반 자동)",
@@ -252,18 +342,23 @@ const STRINGS = {
     "help.setup": "언어·런타임·권한 설정 다시 실행",
     "help.cwd": "작업 폴더 보기/변경",
     "help.memory": "주입되는 메모리 보기",
+    "help.careerGraph": "Career Graph 라우팅 색인의 원본 경로 보기/등록",
     "help.ontology": "짧은 자연어로 프로젝트 온톨로지 켜기/목록/자료 등록",
     "help.side": "메인 대화 맥락에 저장하지 않는 사이드 질문",
     "help.status": "모델/런타임, 에이전트, 권한, 작업 폴더 보기",
     "help.multimodal": "이미지·영상·음성 fallback provider 보기/변경",
     "help.import": "로컬 폴더(에이전트/팀) 임포트",
     "help.market": "마켓플레이스 에이전트 보기/설치",
-    "help.install": "slug로 클라우드 에이전트 설치",
     "help.clear": "대화 비우고 다시 그리기",
     "help.storm": "목표를 Stormbreaker 견고 파이프라인으로 실행",
     "help.build": "에이전트/팀 빌드·수리·패키징 (Hephaestus)",
     "help.route": "요청이 어떤 에이전트로 라우팅되는지 미리보기",
     "help.research": "Research Engine 실행 (search/gather/read)",
+    "help.search": "Hub에서 에이전트 발견",
+    "help.install": "slug로 Hub 에이전트 설치",
+    "help.network": "요청을 A2A 태스크포스로 분해",
+    "help.browser": "실제 브라우저 실행 하드포인트",
+    "help.connect": "Telegram/플랫폼을 에이전트 팀에 연결",
     "help.swarm": "목표에 emergent 에이전트 스웜 전개",
     "help.doctor": "런타임/데이터 점검",
     "help.compact": "오래된 대화 맥락을 줄이고 최근 맥락 유지",
@@ -287,6 +382,31 @@ const STRINGS = {
     "help.tab": "명령·에이전트·런타임·경로 자동완성",
     "help.arrows": "세션 간 저장된 입력 기록 탐색",
     "help.ctrlc": "실행 중인 턴 중단, 유휴 시 두 번 누르면 종료",
+    "help.shiftTab": "read → write → full 권한 순환",
+    "help.ctrlT": "실행 중 실제 런타임 작업 목록 열기/접기",
+    "palette.title": "슬래시 명령",
+    "palette.search": "입력해서 검색",
+    "palette.category": "분류: %s",
+    "palette.examples": "예시: %s",
+    "palette.controls": "↑↓ 이동 · Enter 실행 · Tab 완성 · Esc 닫기",
+    "tasks.title": "작업",
+    "tasks.show": "Ctrl-T 열기",
+    "tasks.hide": "Ctrl-T 접기",
+    "tasks.pending": "대기",
+    "tasks.progress": "진행 중",
+    "tasks.done": "완료",
+    "tasks.failed": "실패",
+    "category.Help": "도움말",
+    "category.Session": "세션",
+    "category.Discovery": "탐색",
+    "category.Knowledge": "지식",
+    "category.Routing": "라우팅",
+    "category.Settings": "설정",
+    "category.Files": "파일",
+    "category.Context": "맥락",
+    "category.Engine": "엔진",
+    "category.Hub": "허브",
+    "category.Health": "점검",
     "compact.noop": "이미 충분히 compact 상태입니다 (%s개 메시지)",
     "compact.done": "맥락 compact 완료: %s → %s개 메시지",
     "wiz.welcome": "Agentlas에 오신 걸 환영합니다 — 먼저 설정할게요.",
@@ -296,9 +416,9 @@ const STRINGS = {
     "wiz.runtimeInstalled": "설치됨",
     "wiz.runtimeMissing": "미설치",
     "wiz.permQ": "에이전트가 기본적으로 어디까지 할 수 있게 할까요?",
-    "wiz.permRead": "read — 보기만 (변경 없음)",
-    "wiz.permWrite": "write — 읽기 + 파일 생성/편집 (권장)",
-    "wiz.permFull": "full — 셸 명령 포함 전부",
+    "wiz.permRead": "read — 조회만; 런타임 read-only/plan",
+    "wiz.permWrite": "write — 런타임 샌드박스 안에서 작업 공간 편집; 외부 MCP 없음 (권장)",
+    "wiz.permFull": "full — 무제한; 런타임 승인과 샌드박스 우회",
     "wiz.pick": "번호 입력 › ",
     "wiz.saved": "완료. 나중에 /runtime, /permission으로 언제든 바꿀 수 있어요.",
     "wiz.changeLang": "팁: 언제든  agentlas setup  으로 다시 설정",