agentlas 1.0.2 → 1.0.3

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 1.0.3 — 2026-07-27
+
+Live `workforce` runs surfaced four defects that no unit gate could reach.
+
+- **A slash after Korean/Japanese/Chinese text no longer reads as a file
+  path.** The hub-boundary guard's absolute-path lookbehind excluded only
+  ASCII, so ordinary phrases ("진단/멱등키", "한국어/영어") were rejected as
+  private paths — and the phrase being the task itself meant no repair was
+  possible. Shared fixtures now pin this in both this engine and the server
+  (`scripts/sync-privacy-guard.sh`).
+- **Bundle preparation is no longer killed by the connect timeout.** The
+  15s "connect" budget actually measured time-to-response-headers, and the
+  server computes a multi-slot roster before its first byte, so preparation
+  died as a transport error. Workforce calls now use their own budget.
+- **Selection cycle rules match the Hub exactly.** Local validation only
+  checked handsOffTo/reportsTo, so a `reviews` cycle passed locally and came
+  back as a Hub rejection. All relations and self-edges now count.
+- **A worker that exits non-zero reports its stdout tail too**, so a failure
+  whose stderr holds only unrelated warnings is no longer a dead end.
+
+Also in this release:
+
+- **Live narration**: a `workforce` run now prints the slot count and hub
+  menu size, the picked agent per slot by name, hub acceptance, each worker
+  as it starts, and the synthesis→verification transition.
+- **One name per feature across platforms**: `hep-network`, `hep-cloud`,
+  `hep-build`, `hep-call`, `hep-search`, `hep-upload`, `hep-storm`,
+  `hep-browser`, `hep-connect` now work as terminal commands, matching the
+  skill names used from Claude Code and Codex. The typo guard suggests them.
+
 ## 1.0.2 — 2026-07-27
 
 Workforce execution-contract fixes. Every worker in a `workforce` run now

package/engine/agentlas-workforce.cjs

@@ -100,7 +100,11 @@ const HUB_PATH_PATTERNS = [
   /(?:^|[\s"'`()\[\]{}=:,;])~[/\\](?=\S)/,
   /(?<![A-Za-z0-9])[A-Za-z]:[/\\](?=\S)/,
   /(?:^|[\s"'`()\[\]{}=:,;])\\\\[^\\/\s]+[\\/][^\\/\s]+/,
-  /(?<![A-Za-z0-9$])\/(?!\/|\s)(?:[^/\s"'`<>]+\/)*[^/\s"'`<>]+/,
+  // lookbehind가 ASCII만 제외하면 한글 단어 뒤 슬래시("진단/멱등키", "한국어/영어")가
+  // 절대경로로 오탐된다(2026-07-27 실측 — 한국어 워크오더 전멸 원인). 문자·숫자
+  // 전반(\p{L}\p{N})을 제외해 "A/B" 표기는 통과시키고, 공백·행머리 뒤 실제 경로는
+  // 그대로 잡는다.
+  /(?<![\p{L}\p{N}$])\/(?!\/|\s)(?:[^/\s"'`<>]+\/)*[^/\s"'`<>]+/u,
 ];
 const HUB_SECRET_PATTERNS = [
   ["provider_token", /\b(?:sk-[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]{20,}|AKIA[0-9A-Z]{16}|xox[baprs]-[A-Za-z0-9-]{10,})\b/],
@@ -1133,12 +1137,16 @@ function validateSelection(value, candidateSet, workOrder, identity, options = {
     if (!["reportsTo", "handsOffTo", "reviews", "coordinatesWith"].includes(edge.relation)) fail("selection_invalid", "selection edge relation is invalid");
     assertIds(edge.artifactKinds, "selection edge artifactKinds");
   }
-  // handsOffTo/reportsTo 사이클은 Hub validate가 task_force_cycle로 거절한다. 로컬에서
-  // 먼저 걸어야 구조화 재시도 루프가 서버 왕복 없이 교정한다.
+  // 엣지 사이클은 Hub validate가 task_force_cycle로 거절한다. 서버 규칙과 동일하게:
+  // 관계 종류 불문 모든 엣지 + 자기참조가 사이클이다(reviews 맞교환도 거절 —
+  // 2026-07-27 실측: handsOffTo만 검사하던 로컬 검증이 reviews 사이클을 통과시켜
+  // 서버 거절로 되돌아왔다). 로컬에서 먼저 걸어야 재시도 루프가 왕복 없이 교정한다.
   {
-    const directed = selection.edges.filter((edge) => edge.relation === "handsOffTo" || edge.relation === "reportsTo");
     const adjacency = new Map();
-    for (const edge of directed) {
+    for (const edge of selection.edges) {
+      if (edge.fromSlot === edge.toSlot) {
+        fail("selection_invalid", `edges form a circular task force: ${edge.fromSlot} points at itself`);
+      }
       if (!adjacency.has(edge.fromSlot)) adjacency.set(edge.fromSlot, []);
       adjacency.get(edge.fromSlot).push(edge.toSlot);
     }
@@ -1147,7 +1155,7 @@ function validateSelection(value, candidateSet, workOrder, identity, options = {
       const state = states.get(slot);
       if (state === "done") return;
       if (state === "visiting") {
-        fail("selection_invalid", `handsOffTo/reportsTo edges form a circular task force: ${[...trail, slot].join(" -> ")}`);
+        fail("selection_invalid", `edges form a circular task force: ${[...trail, slot].join(" -> ")}`);
       }
       states.set(slot, "visiting");
       for (const next of adjacency.get(slot) || []) walk(next, [...trail, slot]);
@@ -1628,7 +1636,7 @@ function buildPrompts(task, identity) {
     `Exact direct Selection example: ${stableJson(selectionShape)}`,
     "decisionAuthor must contain exactly kind, modelId, and runtimeId. Every required slot must have exactly its cardinality in assignments. Every assignment must contain exactly slotId, an exact candidate agentReleaseId, and a non-empty reasonCodes array.",
     "edges, alternativesConsidered, and requestExpansionForSlots must be explicitly authored arrays. Every edge must contain exactly fromSlot, toSlot, relation (one of reportsTo|handsOffTo|reviews|coordinatesWith), and artifactKinds. The host will not add or normalize fields.",
-    "handsOffTo and reportsTo edges must form an acyclic directed graph. Never author a circular chain (for example A handsOffTo B while B handsOffTo A); the Hub rejects circular task forces.",
+    "edges must form an acyclic directed graph regardless of relation — reviews and coordinatesWith count too, and a slot may never point at itself. Never author a circular chain (for example A reviews B while B reviews A); the Hub rejects circular task forces.",
   ].join("\n");
   const plannerSchemaRequirements = [
     `Return exactly one object: ${stableJson(plannerShape)}`,
@@ -2701,10 +2709,28 @@ function create(deps = {}) {
         workOrderInvocationId,
       };
 
+      // 실황 내레이션: 사용자는 "누가 소집됐고 지금 뭘 하는지"를 보면서 신뢰를
+      // 형성한다(2026-07-27 오너 요구). 결과에 영향 없는 표시 전용 — silent 존중.
+      if (!ctx.silent) {
+        const nameByRelease = new Map();
+        for (const slotRow of candidateSet.slots) {
+          for (const cand of slotRow.candidates) nameByRelease.set(cand.agentReleaseId, cand.name || cand.agentReleaseId);
+        }
+        const menuCount = candidateSet.slots.reduce((sum, slotRow) => sum + slotRow.candidates.length, 0);
+        ui.info(ui.lang === "ko"
+          ? `워크오더 ${workOrder.roleSlots.length}슬롯 · 허브 후보 ${menuCount}명 메뉴 수신`
+          : `work order: ${workOrder.roleSlots.length} slot(s) · hub menu of ${menuCount} candidates`);
+        for (const row of selection.assignments) {
+          ui.info(ui.lang === "ko"
+            ? `  선발 ${row.slotId} ← ${nameByRelease.get(row.agentReleaseId) || row.agentReleaseId}`
+            : `  picked ${row.slotId} ← ${nameByRelease.get(row.agentReleaseId) || row.agentReleaseId}`);
+        }
+      }
       const validationRaw = await hubStage("workforce.validate_selection", { workOrder, candidateSet, selection });
       validationReceipt = validateSelectionReceipt(validationRaw, selection, candidateSet, workOrder);
       benchmarkState.selectionValidation = validationReceipt;
       receipt.selectionReceiptId = validationReceipt.selectionReceiptId;
+      if (!ctx.silent) ui.info(ui.lang === "ko" ? "허브 검증 수락 — 번들 준비 중" : "hub validation accepted — preparing bundles");
 
       const preparedRaw = await hubStage("workforce.prepare_execution", { workOrder, candidateSet, selection, validationReceipt });
       ({ prepared, rosterByPair } = validatePreparedExecution(preparedRaw, workOrder, selection, candidateSet, validationReceipt));
@@ -2996,6 +3022,7 @@ function create(deps = {}) {
           const packet = delegationPlan.packets[index];
           const pair = `${packet.slotId}\0${packet.agentReleaseId}`;
           const pinned = rosterByPair.get(pair);
+          if (!ctx.silent) ui.info(ui.lang === "ko" ? `  워커 실행 중: ${packet.slotId}` : `  worker running: ${packet.slotId}`);
           const capabilityBindings = bindingsByPair.get(pair) || [];
           const grantedToolIds = [...new Set(capabilityBindings.map((row) => row.toolId))].sort();
           const startedAt = nowIso(D.now);
@@ -3152,6 +3179,7 @@ function create(deps = {}) {
       let verifierInvocationId = null;
       let priorAttempt = null;
       receipt.correctiveHistory = [];
+      if (!ctx.silent) ui.info(ui.lang === "ko" ? "합성 → 검증 단계" : "synthesis → verification");
       for (let verifyAttempt = 1; verifyAttempt <= 2; verifyAttempt += 1) {
         const synthesisStarted = nowIso(D.now);
         synthesisInvocationId = `workforce-invocation:${crypto.randomUUID()}`;

package/engine/agentlas.cjs

@@ -127,7 +127,9 @@ function main() {
      */
     if (!agent && normalized.length === 1 && /^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(normalized[0])) {
       const token = normalized[0];
-      const names = Object.keys(commands.COMMANDS).concat(commands.NOT_YET_PORTED || []);
+      const names = Object.keys(commands.COMMANDS)
+        .concat(Object.keys(commands.COMMAND_ALIASES || {}))
+        .concat(commands.NOT_YET_PORTED || []);
       const near = nearestCommands(token, names);
       const ko = ctx.lang === "ko";
       ctx.err(ko

package/engine/commands/index.cjs

@@ -103,9 +103,32 @@ const DESKTOP_ONLY_SURFACES = {
 // 무인자 호출이 프롬프트로 오라우팅되면 안 되는 명령 (smoke 가드 대상)
 const GUARDED_NO_ARG = new Set(["search", "install", "upload"]);
 
+// 플랫폼 간 이름 통일(오너 결정 2026-07-27): 클로드코드/코덱스에서 부르는 hep-*
+// 스킬명과 터미널 명령이 서로 다르면 사용자가 어느 표면에 있는지에 따라 이름을
+// 바꿔 써야 한다. 같은 기능은 어디서든 같은 이름으로 부른다.
+const COMMAND_ALIASES = {
+  "hep-network": "workforce",
+  network: "workforce",
+  "hep-cloud": "cloud",
+  "hep-build": "build",
+  "hep-call": "call",
+  "hep-search": "search",
+  "hep-upload": "upload",
+  "hep-storm": "storm",
+  "hep-browser": "browser",
+  "hep-connect": "connect",
+  "hep-local": "workforce",
+  "hep-hub": "search",
+};
+
+function resolveCommandName(cmd) {
+  return COMMAND_ALIASES[cmd] || cmd;
+}
+
 function dispatch(ctx, argv) {
-  const [cmd, ...rest] = argv;
-  if (!cmd) return null; // 엔진이 REPL로 진입
+  const [rawCmd, ...rest] = argv;
+  if (!rawCmd) return null; // 엔진이 REPL로 진입
+  const cmd = resolveCommandName(rawCmd);
 
   if (COMMANDS[cmd]) {
     return COMMANDS[cmd]().run(ctx, rest);
@@ -133,4 +156,4 @@ function dispatch(ctx, argv) {
   return undefined; // 알 수 없는 토큰 — 엔진이 에이전트 이름/프롬프트로 해석 시도
 }
 
-module.exports = { dispatch, COMMANDS, NOT_YET_PORTED, GUARDED_NO_ARG, DESKTOP_ONLY_SURFACES };
+module.exports = { dispatch, COMMANDS, COMMAND_ALIASES, resolveCommandName, NOT_YET_PORTED, GUARDED_NO_ARG, DESKTOP_ONLY_SURFACES };

package/engine/workforce/capture.cjs

@@ -359,7 +359,13 @@ function captureRuntime(kind, systemPrompt, prompt, opts) {
       const stdout = Buffer.concat(stdoutChunks).toString("utf8");
       const stderr = Buffer.concat(stderrChunks).toString("utf8");
       if (code && code !== 0) {
-        finishReject(new Error(`${kind} exited ${code}: ${stderr.slice(-500)}`));
+        // stderr가 경고문뿐이면 진짜 원인이 stdout(JSON 오류 응답 등)에 있을 수 있다 —
+        // 2026-07-27 실측: 워커 exit 1이 설정 경고 2줄만 남기고 원인 불명이 됐다.
+        // 두 스트림의 꼬리를 모두 싣는다.
+        const stdoutTail = stdout.trim().slice(-400);
+        finishReject(new Error(
+          `${kind} exited ${code}: ${stderr.slice(-500)}${stdoutTail ? `\n--- stdout tail ---\n${stdoutTail}` : ""}`,
+        ));
         return;
       }
       const raw = stdout.trim() || stderr.trim();

package/engine/workforce/deps.cjs

@@ -425,7 +425,13 @@ function buildWorkforceDeps(ctx = {}) {
     // v1과 동일: callHubTool은 주입하지 않는다. 워크포스 모듈 내부의 jsonrpc 경로가
     // 거절 코드 원문 전파·retryClass 계약을 소유하며, fetchHub는 버퍼드
     // {ok,status,headers,text} 어댑터 형태를 만족한다(3중 타임아웃 + 16MB 상한).
-    fetchHub: (url, init) => hubClient.fetchHub(url, init),
+    // 워크포스 전용 타임아웃: prepare_execution은 서버가 로스터 번들을 조립하는 동안
+    // 첫 바이트 없이 계산한다(1슬롯 실측 7.2s, 다슬롯은 그 배수). 기본 connect 15s는
+    // 실제로는 "응답 헤더까지"를 재므로 다슬롯 준비를 처형한다(2026-07-27 전송오류
+    // 2연속의 진범). 준비 상한을 여유 있게 준다 — idle/total 계약은 유지.
+    fetchHub: (url, init) => hubClient.fetchHub(url, init, {
+      timeoutConfig: { connectMs: 120_000, idleMs: 60_000, totalMs: 300_000 },
+    }),
     resolveRuntime: resolveWorkforceRuntime,
     captureRuntime: capture.captureRuntime,
     runApi: capture.runApi,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlas",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Agentlas agent terminal — chat with your installed AI agents and teams from the terminal, Claude Code style. Standalone: no desktop app required.",
   "bin": {
     "agentlas": "bin/agentlas.cjs"