agentlas 0.7.0 → 0.9.2

package/engine/agentlas-i18n.cjs

@@ -60,7 +60,7 @@ const STRINGS = {
     "modelDefault": "(default)",
     "effortSet": "effort → %s",
     "effortCurrent": "current effort: %s",
-    "effortUsage": "usage: /effort low|medium|high|max|auto",
+    "effortUsage": "usage: /effort low|medium|high|max|off|auto",
     "permSet": "permission → %s",
     "permUsage": "usage: /permission read|write|full",
     "permCurrent": "current permission: %s",
@@ -114,11 +114,11 @@ const STRINGS = {
     "usageBar": "tokens",
     "config.title": "Engine auto engagement — explicit on/off (default: off)",
     "config.storm": "Stormbreaker auto-engage on direct-routed real work",
-    "config.network": "hep-network auto-borrow on direct-routed real work",
+    "config.network": "Workforce Ontology auto-staffing on direct-routed real work",
     "config.usage": "usage: /config storm|network on|off   ·   explicit /storm and /network always work",
     "config.set": "%s → %s",
     "config.autoEngage": "auto-engaging %s (opted in via /config — turn off with /config %s off)",
-    "help.config": "explicit on/off for Stormbreaker/hep-network auto engagement",
+    "help.config": "explicit on/off for Stormbreaker/Workforce Ontology auto engagement",
     "guard.imageWarn": "this agent works with images, but %s can't generate them — try /runtime gemini (or codex), or /team to pin one",
     "multimodal.title": "Multimodal fallback",
     "multimodal.set": "multimodal %s → %s",
@@ -139,7 +139,7 @@ const STRINGS = {
     "help.firms": "list companies / switch to one",
     "help.runtime": "switch runtime (claude-code|codex|gemini|anthropic|openai|google|ollama|upstage)",
     "help.model": "set the model (claude/codex/gemini alias or BYOK/Ollama id)",
-    "help.effort": "set reasoning effort (low|medium|high|max|auto)",
+    "help.effort": "set reasoning effort (low|medium|high|max|off|auto)",
     "help.permission": "what it may do (read|write|full)",
     "help.permissions": "show permission choices and current level",
     "help.setup": "run language, runtime, and permission setup again",
@@ -159,7 +159,7 @@ const STRINGS = {
     "help.research": "run the Research Engine (search/gather/read)",
     "help.search": "discover agents in the Hub",
     "help.install": "install an agent from the Hub by slug",
-    "help.network": "decompose a request into an A2A task force",
+    "help.network": "let the host LLM staff and execute an ontology-grounded exact-release task force",
     "help.browser": "real browser execution hardpoint",
     "help.connect": "wire Telegram / platforms to an agent team",
     "help.swarm": "fan out an emergent agent swarm on a goal",
@@ -274,7 +274,7 @@ const STRINGS = {
     "modelDefault": "(기본값)",
     "effortSet": "추론 강도 → %s",
     "effortCurrent": "현재 추론 강도: %s",
-    "effortUsage": "사용법: /effort low|medium|high|max|auto",
+    "effortUsage": "사용법: /effort low|medium|high|max|off|auto",
     "permSet": "권한 → %s",
     "permUsage": "사용법: /permission read|write|full",
     "permCurrent": "현재 권한: %s",
@@ -328,11 +328,11 @@ const STRINGS = {
     "usageBar": "토큰",
     "config.title": "엔진 자동 개입 — 명시적 on/off (기본: off)",
     "config.storm": "직답 라우팅된 실작업에 Stormbreaker 자동 개입",
-    "config.network": "직답 라우팅된 실작업에 hep-network 자동 빌림",
+    "config.network": "직답 라우팅된 실작업에 Workforce Ontology 자동 선발",
     "config.usage": "사용법: /config storm|network on|off   ·   /storm·/network 명시 실행은 항상 가능",
     "config.set": "%s → %s",
     "config.autoEngage": "%s 자동 개입 (/config로 켜져 있음 — 해제: /config %s off)",
-    "help.config": "Stormbreaker/hep-network 자동 개입 명시적 on/off",
+    "help.config": "Stormbreaker/Workforce Ontology 자동 개입 명시적 on/off",
     "guard.imageWarn": "이 에이전트는 이미지 작업인데 %s는 이미지 생성 불가 — /runtime gemini(또는 codex), 또는 /team으로 고정",
     "multimodal.title": "멀티모달 fallback",
     "multimodal.set": "멀티모달 %s → %s",
@@ -352,7 +352,7 @@ const STRINGS = {
     "help.firms": "회사 목록 / 전환",
     "help.runtime": "런타임 전환 (claude-code|codex|gemini|anthropic|openai|google|ollama|upstage)",
     "help.model": "모델 지정 (claude/codex/gemini 별칭 또는 BYOK/Ollama id)",
-    "help.effort": "추론 강도 지정 (low|medium|high|max|auto)",
+    "help.effort": "추론 강도 지정 (low|medium|high|max|off|auto)",
     "help.permission": "허용 범위 (read|write|full)",
     "help.permissions": "권한 선택지와 현재 단계 보기",
     "help.setup": "언어·런타임·권한 설정 다시 실행",
@@ -372,7 +372,7 @@ const STRINGS = {
     "help.research": "Research Engine 실행 (search/gather/read)",
     "help.search": "Hub에서 에이전트 발견",
     "help.install": "slug로 Hub 에이전트 설치",
-    "help.network": "요청을 A2A 태스크포스로 분해",
+    "help.network": "상위 LLM이 온톨로지에서 정확한 릴리스 TF를 선발·실행",
     "help.browser": "실제 브라우저 실행 하드포인트",
     "help.connect": "Telegram/플랫폼을 에이전트 팀에 연결",
     "help.swarm": "목표에 emergent 에이전트 스웜 전개",

package/engine/agentlas-input.cjs

@@ -84,12 +84,12 @@ const SLASH_COMMAND_META = [
   { command: "/firms", description: "List installed companies", category: "Routing", usage: "/firms", detail: "Show company CEOs available in this terminal." },
   { command: "/firm", description: "Switch to a company CEO", category: "Routing", usage: "/firm <name>", detail: "Switch the current conversation to a company CEO agent." },
   { command: "/runtime", description: "Switch runtime: claude-code, codex, gemini, BYOK, or Ollama", category: "Settings", usage: "/runtime codex", detail: "Change the engine Agentlas uses for subsequent turns." },
-  { command: "/model", description: "Set the model for the current runtime", category: "Settings", usage: "/model <id>", detail: "Works for claude/codex/gemini (alias like sonnet/opus, or full id) and BYOK/Ollama." },
-  { command: "/effort", description: "Set reasoning effort (low/medium/high/max)", category: "Settings", usage: "/effort high", detail: "Higher effort = deeper reasoning. Maps to codex model_reasoning_effort and claude think-depth." },
+  { command: "/model", description: "Pin a model or return to auto allocation", category: "Settings", usage: "/model <id|auto>", detail: "An id is an explicit session pin; auto lets the higher-level allocator choose a provider-compatible tier." },
+  { command: "/effort", description: "Pin reasoning effort or return to auto", category: "Settings", usage: "/effort low|medium|high|max|off|auto", detail: "A level is an explicit pin; auto lets the higher-level allocator choose per task; off is an explicit no-effort pin." },
   { command: "/permission", description: "Set read/write/full permission", category: "Settings", usage: "/permission full", detail: "No argument shows what read, write, and full mean.", aliases: ["/perm"] },
   { command: "/permissions", description: "Show or set current permission", category: "Settings", usage: "/permissions", detail: "Codex-style permission screen for Agentlas read/write/full." },
   { command: "/setup", description: "Run first-time setup again", category: "Settings", usage: "/setup", detail: "Re-run language, runtime, and default permission setup in-place." },
-  { command: "/config", description: "Explicit on/off for Stormbreaker and hep-network auto engagement", category: "Settings", usage: "/config [storm|network] [on|off]", detail: "Both engines default to off — no automatic activation. Turn one on to let direct-routed real-work prompts engage it; /storm and /network stay available explicitly either way.", examples: ["/config", "/config storm on", "/config network off"], aliases: ["/toggles"] },
+  { command: "/config", description: "Explicit on/off for Stormbreaker and Workforce Ontology auto engagement", category: "Settings", usage: "/config [storm|network] [on|off]", detail: "Both engines default to off — no automatic activation. Turn one on to let direct-routed real-work prompts engage it; /storm and /network stay available explicitly either way.", examples: ["/config", "/config storm on", "/config network off"], aliases: ["/toggles"] },
   { command: "/cwd", description: "Show or change the working folder", category: "Files", usage: "/cwd <path>", detail: "Change the folder used for tools, file mentions, and local commands." },
   { command: "/memory", description: "Show the memory injected into this run", category: "Context", usage: "/memory", detail: "Print the project memory that Agentlas adds to agent turns." },
   { command: "/side", description: "Ask a side question without saving it to chat context", category: "Context", usage: "/side <question>", detail: "Runs a one-off answer using current context, then returns without appending to chat history.", aliases: ["/btw"] },
@@ -111,7 +111,8 @@ const SLASH_COMMAND_META = [
   { command: "/research", description: "Run the Hephaestus Research Engine", category: "Engine", usage: "/research search \"query\"", detail: "status|gather|search|read|plan — evidence-grade web research from the terminal." },
   { command: "/search", description: "Discover agents in the Hub", category: "Hub", usage: "/search <what you need>", detail: "Search the Agentlas Hub + local for an agent that fits the task (hep-search)." },
   { command: "/install", description: "Install an agent from the Hub by slug", category: "Hub", usage: "/install <slug>", detail: "Install a marketplace agent into this terminal (hep-cloud)." },
-  { command: "/network", description: "Decompose a request into an A2A task force", category: "Engine", usage: "/network <request>", detail: "Runs Hephaestus hep-network — splits a composite request across agents.", aliases: ["/taskforce"] },
+  { command: "/network", description: "Staff and execute an ontology-grounded task force", category: "Engine", usage: "/network <request> [--benchmark]", detail: "The active top host LLM creates the work order, searches the Hub workforce ontology, selects exact releases, and executes a receipt-backed task force.", aliases: ["/taskforce", "/workforce"] },
+  { command: "/legacy-network", description: "Run the compatibility Hephaestus network route", category: "Engine", usage: "/legacy-network <request>", detail: "Explicit compatibility escape hatch; never used as a fallback by /network." },
   { command: "/browser", description: "Real browser execution hardpoint", category: "Engine", usage: "/browser [sub]", detail: "Runs the Agentlas browser hardpoint (hep-browser)." },
   { command: "/connect", description: "Wire Telegram / platforms to an agent team", category: "Hub", usage: "/connect", detail: "Runs Hephaestus hep-connect for platform integration." },
   { command: "/doctor", description: "Check runtimes and local data", category: "Health", usage: "/doctor", detail: "Run local checks for runtimes, data, credentials, and setup." },

package/engine/agentlas-mcp-env.cjs

@@ -0,0 +1,219 @@
+"use strict";
+
+/**
+ * Environment boundary for stdio MCP children owned by Agentlas Terminal.
+ *
+ * The native LLM provider keeps its normal environment so its own login can
+ * work. The MCP server does not inherit that environment: it receives a small
+ * launch environment plus only the credential names declared by the trusted,
+ * private system registry row selected after consent.
+ */
+
+const crypto = require("node:crypto");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+
+const MCP_LAUNCH_SCHEMA = "agentlas.mcp-child-launch.v1";
+const ENV_NAME_RE = /^[A-Z][A-Z0-9_]*$/;
+const MAX_DESCRIPTOR_BYTES = 64 * 1024;
+
+const SAFE_BASE_ENV_KEYS = Object.freeze([
+  "PATH",
+  "PATHEXT",
+  "SystemRoot",
+  "WINDIR",
+  "ComSpec",
+  "LANG",
+  "LC_ALL",
+  "LC_CTYPE",
+  "TZ",
+  "TERM",
+  "COLORTERM",
+]);
+
+const FORBIDDEN_CREDENTIAL_ENV_KEYS = new Set([
+  "HOME", "PATH", "PATHEXT", "USERPROFILE", "HOMEDRIVE", "HOMEPATH",
+  "SYSTEMROOT", "WINDIR", "COMSPEC", "TMPDIR", "TMP", "TEMP",
+  "NODE_OPTIONS", "NODE_PATH", "PYTHONHOME", "PYTHONPATH", "RUBYOPT",
+  "LD_PRELOAD", "LD_LIBRARY_PATH", "DYLD_INSERT_LIBRARIES", "DYLD_LIBRARY_PATH",
+  "BASH_ENV", "ENV", "ZDOTDIR", "SHELLOPTS", "ELECTRON_RUN_AS_NODE",
+  "SSLKEYLOGFILE", "NODE_TLS_REJECT_UNAUTHORIZED", "NODE_EXTRA_CA_CERTS",
+  "SSL_CERT_FILE", "SSL_CERT_DIR", "OPENSSL_CONF", "REQUESTS_CA_BUNDLE", "CURL_CA_BUNDLE",
+  "HTTP_PROXY", "HTTPS_PROXY", "ALL_PROXY", "NO_PROXY", "GRPC_PROXY", "NPM_CONFIG_PROXY",
+  "AGENTLAS_SESSION", "AGENTLAS_USER_DATA_DIR", "AGENTLAS_MCP_BASE_URL",
+  "AGENTLAS_WEB_BASE_URL", "AGENTLAS_API_BASE_URL", "AGENTLAS_HUB_BASE_URL",
+  "AGENTLAS_CLOUD_BASE_URL",
+]);
+
+function normalizeCredentialKeyNames(value) {
+  if (!Array.isArray(value) || value.length > 64) throw new Error("MCP credential key metadata must be a bounded array");
+  const names = [];
+  const seen = new Set();
+  for (const raw of value) {
+    const key = String(raw || "");
+    if (!ENV_NAME_RE.test(key)) throw new Error("MCP credential key metadata contains an invalid name");
+    if (FORBIDDEN_CREDENTIAL_ENV_KEYS.has(key) || key.startsWith("AGENTLAS_")) {
+      throw new Error("MCP credential key metadata requests a protected host variable");
+    }
+    if (!seen.has(key)) names.push(key), seen.add(key);
+  }
+  return names;
+}
+
+function findEnvValue(source, key) {
+  if (Object.prototype.hasOwnProperty.call(source || {}, key)) return source[key];
+  if (process.platform !== "win32") return undefined;
+  const match = Object.keys(source || {}).find((candidate) => candidate.toUpperCase() === key.toUpperCase());
+  return match ? source[match] : undefined;
+}
+
+function ensurePrivateDirectory(directory) {
+  fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+  const stat = fs.lstatSync(directory);
+  if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("MCP runtime home must be a real directory");
+  try { fs.chmodSync(directory, 0o700); } catch { /* Windows/best-effort */ }
+  return directory;
+}
+
+function mcpRuntimeHome(dataDir, serverIdentity) {
+  const root = path.resolve(dataDir || path.join(os.tmpdir(), "agentlas-mcp-runtime"));
+  ensurePrivateDirectory(root);
+  const parent = path.join(root, "mcp-runtime-homes");
+  ensurePrivateDirectory(parent);
+  const digest = crypto.createHash("sha256").update(String(serverIdentity || "mcp"), "utf8").digest("hex").slice(0, 32);
+  const target = path.join(parent, digest);
+  ensurePrivateDirectory(target);
+  const relative = path.relative(fs.realpathSync(parent), fs.realpathSync(target));
+  if (!relative || path.isAbsolute(relative) || relative === ".." || relative.startsWith(`..${path.sep}`)) {
+    throw new Error("MCP runtime home escaped its private root");
+  }
+  return target;
+}
+
+function safeBaseEnvironment(source, options = {}) {
+  const runtimeHome = ensurePrivateDirectory(path.resolve(options.runtimeHome || mcpRuntimeHome(null, options.serverIdentity)));
+  const result = {};
+  for (const key of SAFE_BASE_ENV_KEYS) {
+    const value = findEnvValue(source, key);
+    if (typeof value === "string" && value && !value.includes("\0")) result[key] = value;
+  }
+  // Never expose the user's real home through the environment. MCPs that need
+  // credentials must use their declared registry key, not ambient dotfiles.
+  const runtimeTmp = ensurePrivateDirectory(path.join(runtimeHome, "tmp"));
+  result.HOME = runtimeHome;
+  result.TMPDIR = runtimeTmp;
+  result.TMP = runtimeTmp;
+  result.TEMP = runtimeTmp;
+  if (process.platform === "win32") {
+    result.USERPROFILE = runtimeHome;
+    result.HOMEDRIVE = path.parse(runtimeHome).root.replace(/[\\/]$/, "") || "C:";
+    result.HOMEPATH = runtimeHome.slice(result.HOMEDRIVE.length) || "\\";
+  }
+  return result;
+}
+
+function buildMcpChildEnv(source, credentialKeyNames, options = {}) {
+  const names = normalizeCredentialKeyNames(credentialKeyNames || []);
+  const result = safeBaseEnvironment(source || {}, options);
+  for (const key of names) {
+    const value = findEnvValue(source || {}, key);
+    if (typeof value === "string" && value && !value.includes("\0")) result[key] = value;
+  }
+  return result;
+}
+
+function hasSensitiveRuntimeArgument(command, args) {
+  const values = [command, ...(args || [])].map((value) => String(value || ""));
+  const joined = values.join("\n");
+  if (/\b(?:sk-(?:proj-)?|gh[pousr]_|xox[baprs]-)[A-Za-z0-9_-]{16,}\b/i.test(joined)) return true;
+  if (/-----BEGIN (?:RSA |EC |OPENSSH |DSA )?PRIVATE KEY-----/i.test(joined)) return true;
+  if (/https?:\/\/[^\s/@:]+:[^\s/@]+@/i.test(joined)) return true;
+  if (/[?&](?:api[-_]?key|token|secret|password|auth|authorization|cookie)=[^&\s]+/i.test(joined)) return true;
+  if (/\bbearer\s+[A-Za-z0-9._~+/=-]{8,}/i.test(joined)) return true;
+  for (let index = 0; index < values.length; index += 1) {
+    const value = values[index];
+    const credentialFlag = /^(?:--?)?(?:api[-_]?key|access[-_]?token|refresh[-_]?token|auth[-_]?token|client[-_]?secret|secret|password|passwd|private[-_]?key|authorization|cookie|credential)(?:=|:).+/i;
+    const credentialFlagName = /^(?:--?)?(?:api[-_]?key|access[-_]?token|refresh[-_]?token|auth[-_]?token|client[-_]?secret|secret|password|passwd|private[-_]?key|authorization|cookie|credential)$/i;
+    if (credentialFlag.test(value)) return true;
+    if (credentialFlagName.test(value) && values[index + 1]) return true;
+  }
+  return false;
+}
+
+function validateLaunchDescriptor(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("invalid MCP launch descriptor");
+  const expected = ["schema", "command", "args", "credentialKeyNames", "runtimeHome"];
+  if (Object.keys(value).sort().join("\0") !== [...expected].sort().join("\0")) throw new Error("invalid MCP launch descriptor fields");
+  if (value.schema !== MCP_LAUNCH_SCHEMA) throw new Error("unsupported MCP launch descriptor");
+  if (typeof value.command !== "string" || !value.command.trim() || value.command.length > 4096 || /[\u0000\r\n]/.test(value.command)) {
+    throw new Error("invalid MCP command");
+  }
+  if (!Array.isArray(value.args) || value.args.length > 128 || value.args.some((item) => typeof item !== "string" || item.length > 4096 || /[\u0000\r\n]/.test(item))) {
+    throw new Error("invalid MCP arguments");
+  }
+  const credentialKeyNames = normalizeCredentialKeyNames(value.credentialKeyNames);
+  if (hasSensitiveRuntimeArgument(value.command, value.args)) throw new Error("MCP executable metadata contains a credential-like value");
+  if (typeof value.runtimeHome !== "string" || !path.isAbsolute(value.runtimeHome) || value.runtimeHome.length > 4096 || /[\u0000\r\n]/.test(value.runtimeHome)) {
+    throw new Error("invalid MCP runtime home");
+  }
+  return {
+    schema: MCP_LAUNCH_SCHEMA,
+    command: value.command,
+    args: [...value.args],
+    credentialKeyNames,
+    runtimeHome: value.runtimeHome,
+  };
+}
+
+function encodeLaunchDescriptor(value) {
+  const validated = validateLaunchDescriptor(value);
+  const json = JSON.stringify(validated);
+  if (Buffer.byteLength(json, "utf8") > MAX_DESCRIPTOR_BYTES) throw new Error("MCP launch descriptor is too large");
+  return Buffer.from(json, "utf8").toString("base64url");
+}
+
+function decodeLaunchDescriptor(value) {
+  if (typeof value !== "string" || !value || value.length > Math.ceil(MAX_DESCRIPTOR_BYTES * 4 / 3) + 16 || !/^[A-Za-z0-9_-]+$/.test(value)) {
+    throw new Error("invalid MCP launch descriptor encoding");
+  }
+  let parsed;
+  try { parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8")); }
+  catch { throw new Error("invalid MCP launch descriptor encoding"); }
+  return validateLaunchDescriptor(parsed);
+}
+
+function wrapStdioServer(server, options = {}) {
+  const args = Array.isArray(server?.args) ? server.args : (() => {
+    try { return JSON.parse(server?.args_json || "[]"); } catch { return null; }
+  })();
+  if (!server || typeof server.command !== "string" || !Array.isArray(args)) throw new Error("invalid MCP stdio server");
+  const identity = String(server.catalog_id || server.id || server.name || "mcp");
+  const runtimeHome = server.mcpRuntimeHome || mcpRuntimeHome(options.dataDir, identity);
+  const credentialKeyNames = normalizeCredentialKeyNames(server.credentialKeyNames || []);
+  const encoded = encodeLaunchDescriptor({
+    schema: MCP_LAUNCH_SCHEMA,
+    command: server.command,
+    args,
+    credentialKeyNames,
+    runtimeHome,
+  });
+  return {
+    command: options.nodePath || process.execPath,
+    args: [path.join(__dirname, "agentlas-mcp-wrapper.cjs"), encoded],
+  };
+}
+
+module.exports = {
+  MCP_LAUNCH_SCHEMA,
+  SAFE_BASE_ENV_KEYS,
+  normalizeCredentialKeyNames,
+  mcpRuntimeHome,
+  safeBaseEnvironment,
+  buildMcpChildEnv,
+  hasSensitiveRuntimeArgument,
+  validateLaunchDescriptor,
+  encodeLaunchDescriptor,
+  decodeLaunchDescriptor,
+  wrapStdioServer,
+};

package/engine/agentlas-mcp-wrapper.cjs

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+"use strict";
+
+// Trusted Agentlas-owned hop between an authenticated provider CLI and an MCP
+// server. Never print the descriptor or inherited environment: either can
+// reveal private local metadata even though credential values are not encoded.
+
+const { spawn } = require("node:child_process");
+const { buildMcpChildEnv, decodeLaunchDescriptor } = require("./agentlas-mcp-env.cjs");
+
+function fail(code) {
+  process.stderr.write(`agentlas MCP wrapper: ${code}\n`);
+  process.exitCode = 1;
+}
+
+let descriptor;
+try { descriptor = decodeLaunchDescriptor(process.argv[2]); }
+catch { fail("invalid_launch_descriptor"); }
+
+if (descriptor) {
+  let child;
+  try {
+    child = spawn(descriptor.command, descriptor.args, {
+      cwd: process.cwd(),
+      env: buildMcpChildEnv(process.env, descriptor.credentialKeyNames, {
+        runtimeHome: descriptor.runtimeHome,
+      }),
+      stdio: ["inherit", "inherit", "inherit"],
+      windowsHide: true,
+    });
+  } catch {
+    fail("child_spawn_failed");
+  }
+
+  if (child) {
+    const relay = (signal) => {
+      try { child.kill(signal); } catch { /* child already stopped */ }
+    };
+    for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) {
+      try { process.on(signal, () => relay(signal)); } catch { /* unavailable on this platform */ }
+    }
+    child.once("error", () => fail("child_spawn_failed"));
+    child.once("close", (code, signal) => {
+      if (signal) {
+        process.exitCode = 1;
+        return;
+      }
+      process.exitCode = Number.isInteger(code) ? code : 1;
+    });
+  }
+}