agentlas 1.0.2 → 1.0.4

package/CHANGELOG.md

@@ -1,5 +1,59 @@
 # Changelog
 
+## 1.0.4 — 2026-07-27
+
+**The hub boundary stops guessing.** Owner decision after live runs: rules
+that infer private data from shape were removed rather than tuned, because
+each one refused work orders whose flagged phrase *was* the task — a slash
+between Korean words read as a file path, "멱등키 설계" read as a credential
+assignment, "고객 ID를 조회하는 API" read as a labeled identifier. No repair
+was possible, so the request simply died.
+
+- Gone: path inference from a slash, labeled-identifier inference, UUID/IP/
+  phone shape matching, keyword-adjacency credential matching.
+- Kept: forms that can only be one thing — issuer-prefixed provider tokens,
+  PEM headers, JWTs, credentials embedded in a URL, email addresses.
+- Those are now **redacted from the outgoing text instead of refusing the
+  run**, and the redaction is printed, so a pasted secret never leaves the
+  machine and the task still proceeds. `AGENTLAS_HUB_BOUNDARY=off` sends
+  text verbatim.
+- Upload and packaging are unchanged: they already block by file identity
+  (`.env*`, `*.pem/key/p12`, `credentials*`, `id_rsa`), which is fact rather
+  than inference.
+
+Shared fixtures (`privacy-guard-fixtures/`) and `scripts/sync-privacy-guard.sh`
+now pin this contract across the terminal engine and the server.
+
+## 1.0.3 — 2026-07-27
+
+Live `workforce` runs surfaced four defects that no unit gate could reach.
+
+- **A slash after Korean/Japanese/Chinese text no longer reads as a file
+  path.** The hub-boundary guard's absolute-path lookbehind excluded only
+  ASCII, so ordinary phrases ("진단/멱등키", "한국어/영어") were rejected as
+  private paths — and the phrase being the task itself meant no repair was
+  possible. Shared fixtures now pin this in both this engine and the server
+  (`scripts/sync-privacy-guard.sh`).
+- **Bundle preparation is no longer killed by the connect timeout.** The
+  15s "connect" budget actually measured time-to-response-headers, and the
+  server computes a multi-slot roster before its first byte, so preparation
+  died as a transport error. Workforce calls now use their own budget.
+- **Selection cycle rules match the Hub exactly.** Local validation only
+  checked handsOffTo/reportsTo, so a `reviews` cycle passed locally and came
+  back as a Hub rejection. All relations and self-edges now count.
+- **A worker that exits non-zero reports its stdout tail too**, so a failure
+  whose stderr holds only unrelated warnings is no longer a dead end.
+
+Also in this release:
+
+- **Live narration**: a `workforce` run now prints the slot count and hub
+  menu size, the picked agent per slot by name, hub acceptance, each worker
+  as it starts, and the synthesis→verification transition.
+- **One name per feature across platforms**: `hep-network`, `hep-cloud`,
+  `hep-build`, `hep-call`, `hep-search`, `hep-upload`, `hep-storm`,
+  `hep-browser`, `hep-connect` now work as terminal commands, matching the
+  skill names used from Claude Code and Codex. The typo guard suggests them.
+
 ## 1.0.2 — 2026-07-27
 
 Workforce execution-contract fixes. Every worker in a `workforce` run now

package/engine/agentlas-workforce.cjs

@@ -100,7 +100,11 @@ const HUB_PATH_PATTERNS = [
   /(?:^|[\s"'`()\[\]{}=:,;])~[/\\](?=\S)/,
   /(?<![A-Za-z0-9])[A-Za-z]:[/\\](?=\S)/,
   /(?:^|[\s"'`()\[\]{}=:,;])\\\\[^\\/\s]+[\\/][^\\/\s]+/,
-  /(?<![A-Za-z0-9$])\/(?!\/|\s)(?:[^/\s"'`<>]+\/)*[^/\s"'`<>]+/,
+  // lookbehind가 ASCII만 제외하면 한글 단어 뒤 슬래시("진단/멱등키", "한국어/영어")가
+  // 절대경로로 오탐된다(2026-07-27 실측 — 한국어 워크오더 전멸 원인). 문자·숫자
+  // 전반(\p{L}\p{N})을 제외해 "A/B" 표기는 통과시키고, 공백·행머리 뒤 실제 경로는
+  // 그대로 잡는다.
+  /(?<![\p{L}\p{N}$])\/(?!\/|\s)(?:[^/\s"'`<>]+\/)*[^/\s"'`<>]+/u,
 ];
 const HUB_SECRET_PATTERNS = [
   ["provider_token", /\b(?:sk-[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]{20,}|AKIA[0-9A-Z]{16}|xox[baprs]-[A-Za-z0-9-]{10,})\b/],
@@ -802,49 +806,79 @@ function decodedHubText(value) {
   return text;
 }
 
+/*
+ * Hub-bound text hygiene — SELF-PROVING FORMS ONLY, and it masks instead of killing.
+ *
+ * Owner decision 2026-07-27, after live runs: every GUESSING rule (a slash after
+ * a word = a path, "key"/"secret" near a value = a credential, digit runs =
+ * a phone, hex groups = a UUID/IP) produced false positives that killed real
+ * requests with no repair available — the flagged phrase WAS the task
+ * ("진단/멱등키", "멱등키 설계"). Guessing is removed, not tuned.
+ *
+ * What remains is a narrow certainty: strings whose form can only be one thing
+ * (provider token with its issuer prefix, PEM header, JWT, credentials in a
+ * URL, an email address). Those are redacted from the outgoing text rather than
+ * refused, so a paste accident never leaves the machine and the run continues.
+ * Set AGENTLAS_HUB_BOUNDARY=off to send text verbatim.
+ */
+const HUB_REDACTION_PATTERNS = [
+  ["secret_provider_token", /\b(?:sk-[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]{20,}|AKIA[0-9A-Z]{16}|xox[baprs]-[A-Za-z0-9-]{10,})\b/g],
+  ["secret_private_key", /-----BEGIN (?:RSA |EC |OPENSSH |DSA )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |DSA )?PRIVATE KEY-----/gi],
+  ["secret_bearer_token", /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/gi],
+  ["secret_jwt", /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g],
+  ["secret_credential_url", /\b[A-Za-z][A-Za-z0-9+.-]*:\/\/[^\s/:@]+:[^\s/@]+@[^\s/]+/gi],
+  ["email", /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi],
+];
+
+function hubBoundaryEnabled(env = process.env) {
+  return String(env.AGENTLAS_HUB_BOUNDARY || "").trim().toLowerCase() !== "off";
+}
+
+/** Redact self-proving secrets/identifiers. Returns { text, redacted: [kinds] }. */
+function redactHubText(value) {
+  if (!hubBoundaryEnabled()) return { text: value, redacted: [] };
+  let text = String(value);
+  const redacted = [];
+  for (const [kind, pattern] of HUB_REDACTION_PATTERNS) {
+    pattern.lastIndex = 0;
+    if (pattern.test(text)) {
+      pattern.lastIndex = 0;
+      text = text.replace(pattern, "<redacted>");
+      redacted.push(kind);
+    }
+  }
+  return { text, redacted };
+}
+
 function hubTextFindingKinds(value) {
-  const text = decodedHubText(value);
-  const findings = [];
-  if (HUB_EMAIL_RE.test(text)) findings.push("email");
-  HUB_UUID_RE.lastIndex = 0;
-  const hasUuid = HUB_UUID_RE.test(text);
-  HUB_UUID_RE.lastIndex = 0;
-  const phoneText = text.replace(HUB_UUID_RE, " ");
-  HUB_PHONE_RE.lastIndex = 0;
-  for (const match of phoneText.matchAll(HUB_PHONE_RE)) {
-    const digits = (match[0].match(/\d/g) || []).length;
-    if (digits >= 10 && digits <= 15) { findings.push("phone"); break; }
-  }
-  if (HUB_LABELED_ID_RE.test(text)) findings.push("labeled_identifier");
-  if (hasUuid) findings.push("uuid");
-  HUB_IP_RE.lastIndex = 0;
-  for (const match of text.matchAll(HUB_IP_RE)) {
-    if (net.isIP(match[0].replace(/^\[|\]$/g, ""))) { findings.push("ip_address"); break; }
-  }
-  const masked = text.replace(HUB_HTTPS_RE, " ").replace(HUB_PLACEHOLDER_RE, " ");
-  if (HUB_PATH_PATTERNS.some((pattern) => pattern.test(masked))) findings.push("local_path");
-  for (const [kind, pattern] of HUB_SECRET_PATTERNS) if (pattern.test(text)) findings.push(`secret_${kind}`);
-  return [...new Set(findings)];
-}
-
-function assertHubWorkOrderBoundary(order) {
-  const issues = [];
-  const fields = [["taskBrief", order.taskBrief]];
+  // 인코딩 우회로 숨긴 자격증명도 같은 기준으로 본다(판정만, 치환은 원문 기준).
+  return redactHubText(decodedHubText(value)).redacted;
+}
+
+/**
+ * Redact self-proving secrets from the Hub-bound WorkOrder in place.
+ *
+ * This replaced a reject-and-ask-the-model-to-rewrite gate. Refusing was the
+ * wrong shape twice over: the model cannot remove a phrase that IS the task, and
+ * a real pasted credential should never depend on a model choosing to drop it.
+ * Redaction is deterministic, keeps the run alive, and the caller reports what
+ * was masked so nothing is hidden from the user.
+ */
+function redactHubWorkOrder(order) {
+  const redactions = [];
+  const applyField = (fieldPath, value, assign) => {
+    if (typeof value !== "string" || !value) return;
+    const { text, redacted } = redactHubText(value);
+    if (!redacted.length) return;
+    assign(text);
+    for (const kind of redacted) redactions.push({ path: fieldPath, kind });
+  };
+  applyField("taskBrief", order.taskBrief, (next) => { order.taskBrief = next; });
   order.roleSlots.forEach((slot, index) => {
-    fields.push([`roleSlots[${index}].title`, slot.title], [`roleSlots[${index}].task`, slot.task]);
+    applyField(`roleSlots[${index}].title`, slot.title, (next) => { slot.title = next; });
+    applyField(`roleSlots[${index}].task`, slot.task, (next) => { slot.task = next; });
   });
-  for (const [fieldPath, value] of fields) {
-    for (const kind of hubTextFindingKinds(value)) {
-      issues.push({ path: fieldPath, code: kind.startsWith("secret_") ? `hub_${kind}` : `hub_private_${kind}` });
-    }
-  }
-  if (issues.length) {
-    fail(
-      "work_order_hub_boundary_rejected",
-      "Hub-bound WorkOrder free text failed the deterministic privacy boundary",
-      { issues },
-    );
-  }
+  return redactions;
 }
 
 function validateWorkOrder(value) {
@@ -919,7 +953,12 @@ function validateWorkOrder(value) {
   if (!Number.isInteger(policy.minimumCandidatesPerSlot) || policy.minimumCandidatesPerSlot < 2 || policy.minimumCandidatesPerSlot > 30) fail("work_order_invalid", "selectionPolicy.minimumCandidatesPerSlot is invalid");
   if (!Number.isInteger(policy.maximumCandidatesPerSlot) || policy.maximumCandidatesPerSlot < 2 || policy.maximumCandidatesPerSlot > 100) fail("work_order_invalid", "selectionPolicy.maximumCandidatesPerSlot is invalid");
   if (policy.minimumCandidatesPerSlot > policy.maximumCandidatesPerSlot) fail("work_order_invalid", "candidate window minimum exceeds maximum");
-  assertHubWorkOrderBoundary(order);
+  // 자기증명 자격증명만 결정적으로 마스킹한다(거절 아님) — 마스킹 내역은
+  // 비파괴 필드로 달아 호출자가 화면에 정직히 표시한다.
+  const hubRedactions = redactHubWorkOrder(order);
+  if (hubRedactions.length) {
+    Object.defineProperty(order, "__hubRedactions", { value: hubRedactions, enumerable: false });
+  }
   return order;
 }
 
@@ -1133,12 +1172,16 @@ function validateSelection(value, candidateSet, workOrder, identity, options = {
     if (!["reportsTo", "handsOffTo", "reviews", "coordinatesWith"].includes(edge.relation)) fail("selection_invalid", "selection edge relation is invalid");
     assertIds(edge.artifactKinds, "selection edge artifactKinds");
   }
-  // handsOffTo/reportsTo 사이클은 Hub validate가 task_force_cycle로 거절한다. 로컬에서
-  // 먼저 걸어야 구조화 재시도 루프가 서버 왕복 없이 교정한다.
+  // 엣지 사이클은 Hub validate가 task_force_cycle로 거절한다. 서버 규칙과 동일하게:
+  // 관계 종류 불문 모든 엣지 + 자기참조가 사이클이다(reviews 맞교환도 거절 —
+  // 2026-07-27 실측: handsOffTo만 검사하던 로컬 검증이 reviews 사이클을 통과시켜
+  // 서버 거절로 되돌아왔다). 로컬에서 먼저 걸어야 재시도 루프가 왕복 없이 교정한다.
   {
-    const directed = selection.edges.filter((edge) => edge.relation === "handsOffTo" || edge.relation === "reportsTo");
     const adjacency = new Map();
-    for (const edge of directed) {
+    for (const edge of selection.edges) {
+      if (edge.fromSlot === edge.toSlot) {
+        fail("selection_invalid", `edges form a circular task force: ${edge.fromSlot} points at itself`);
+      }
       if (!adjacency.has(edge.fromSlot)) adjacency.set(edge.fromSlot, []);
       adjacency.get(edge.fromSlot).push(edge.toSlot);
     }
@@ -1147,7 +1190,7 @@ function validateSelection(value, candidateSet, workOrder, identity, options = {
       const state = states.get(slot);
       if (state === "done") return;
       if (state === "visiting") {
-        fail("selection_invalid", `handsOffTo/reportsTo edges form a circular task force: ${[...trail, slot].join(" -> ")}`);
+        fail("selection_invalid", `edges form a circular task force: ${[...trail, slot].join(" -> ")}`);
       }
       states.set(slot, "visiting");
       for (const next of adjacency.get(slot) || []) walk(next, [...trail, slot]);
@@ -1628,7 +1671,7 @@ function buildPrompts(task, identity) {
     `Exact direct Selection example: ${stableJson(selectionShape)}`,
     "decisionAuthor must contain exactly kind, modelId, and runtimeId. Every required slot must have exactly its cardinality in assignments. Every assignment must contain exactly slotId, an exact candidate agentReleaseId, and a non-empty reasonCodes array.",
     "edges, alternativesConsidered, and requestExpansionForSlots must be explicitly authored arrays. Every edge must contain exactly fromSlot, toSlot, relation (one of reportsTo|handsOffTo|reviews|coordinatesWith), and artifactKinds. The host will not add or normalize fields.",
-    "handsOffTo and reportsTo edges must form an acyclic directed graph. Never author a circular chain (for example A handsOffTo B while B handsOffTo A); the Hub rejects circular task forces.",
+    "edges must form an acyclic directed graph regardless of relation — reviews and coordinatesWith count too, and a slot may never point at itself. Never author a circular chain (for example A reviews B while B reviews A); the Hub rejects circular task forces.",
   ].join("\n");
   const plannerSchemaRequirements = [
     `Return exactly one object: ${stableJson(plannerShape)}`,
@@ -2701,10 +2744,34 @@ function create(deps = {}) {
         workOrderInvocationId,
       };
 
+      // 실황 내레이션: 사용자는 "누가 소집됐고 지금 뭘 하는지"를 보면서 신뢰를
+      // 형성한다(2026-07-27 오너 요구). 결과에 영향 없는 표시 전용 — silent 존중.
+      if (!ctx.silent) {
+        const redactions = workOrder.__hubRedactions || [];
+        if (redactions.length) {
+          ui.info(ui.lang === "ko"
+            ? `허브 전송 전 ${redactions.length}건 마스킹: ${[...new Set(redactions.map((row) => row.kind))].join(", ")}`
+            : `redacted before leaving this machine (${redactions.length}): ${[...new Set(redactions.map((row) => row.kind))].join(", ")}`);
+        }
+        const nameByRelease = new Map();
+        for (const slotRow of candidateSet.slots) {
+          for (const cand of slotRow.candidates) nameByRelease.set(cand.agentReleaseId, cand.name || cand.agentReleaseId);
+        }
+        const menuCount = candidateSet.slots.reduce((sum, slotRow) => sum + slotRow.candidates.length, 0);
+        ui.info(ui.lang === "ko"
+          ? `워크오더 ${workOrder.roleSlots.length}슬롯 · 허브 후보 ${menuCount}명 메뉴 수신`
+          : `work order: ${workOrder.roleSlots.length} slot(s) · hub menu of ${menuCount} candidates`);
+        for (const row of selection.assignments) {
+          ui.info(ui.lang === "ko"
+            ? `  선발 ${row.slotId} ← ${nameByRelease.get(row.agentReleaseId) || row.agentReleaseId}`
+            : `  picked ${row.slotId} ← ${nameByRelease.get(row.agentReleaseId) || row.agentReleaseId}`);
+        }
+      }
       const validationRaw = await hubStage("workforce.validate_selection", { workOrder, candidateSet, selection });
       validationReceipt = validateSelectionReceipt(validationRaw, selection, candidateSet, workOrder);
       benchmarkState.selectionValidation = validationReceipt;
       receipt.selectionReceiptId = validationReceipt.selectionReceiptId;
+      if (!ctx.silent) ui.info(ui.lang === "ko" ? "허브 검증 수락 — 번들 준비 중" : "hub validation accepted — preparing bundles");
 
       const preparedRaw = await hubStage("workforce.prepare_execution", { workOrder, candidateSet, selection, validationReceipt });
       ({ prepared, rosterByPair } = validatePreparedExecution(preparedRaw, workOrder, selection, candidateSet, validationReceipt));
@@ -2996,6 +3063,7 @@ function create(deps = {}) {
           const packet = delegationPlan.packets[index];
           const pair = `${packet.slotId}\0${packet.agentReleaseId}`;
           const pinned = rosterByPair.get(pair);
+          if (!ctx.silent) ui.info(ui.lang === "ko" ? `  워커 실행 중: ${packet.slotId}` : `  worker running: ${packet.slotId}`);
           const capabilityBindings = bindingsByPair.get(pair) || [];
           const grantedToolIds = [...new Set(capabilityBindings.map((row) => row.toolId))].sort();
           const startedAt = nowIso(D.now);
@@ -3152,6 +3220,7 @@ function create(deps = {}) {
       let verifierInvocationId = null;
       let priorAttempt = null;
       receipt.correctiveHistory = [];
+      if (!ctx.silent) ui.info(ui.lang === "ko" ? "합성 → 검증 단계" : "synthesis → verification");
       for (let verifyAttempt = 1; verifyAttempt <= 2; verifyAttempt += 1) {
         const synthesisStarted = nowIso(D.now);
         synthesisInvocationId = `workforce-invocation:${crypto.randomUUID()}`;

package/engine/agentlas.cjs

@@ -127,7 +127,9 @@ function main() {
      */
     if (!agent && normalized.length === 1 && /^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(normalized[0])) {
       const token = normalized[0];
-      const names = Object.keys(commands.COMMANDS).concat(commands.NOT_YET_PORTED || []);
+      const names = Object.keys(commands.COMMANDS)
+        .concat(Object.keys(commands.COMMAND_ALIASES || {}))
+        .concat(commands.NOT_YET_PORTED || []);
       const near = nearestCommands(token, names);
       const ko = ctx.lang === "ko";
       ctx.err(ko

package/engine/commands/index.cjs

@@ -103,9 +103,32 @@ const DESKTOP_ONLY_SURFACES = {
 // 무인자 호출이 프롬프트로 오라우팅되면 안 되는 명령 (smoke 가드 대상)
 const GUARDED_NO_ARG = new Set(["search", "install", "upload"]);
 
+// 플랫폼 간 이름 통일(오너 결정 2026-07-27): 클로드코드/코덱스에서 부르는 hep-*
+// 스킬명과 터미널 명령이 서로 다르면 사용자가 어느 표면에 있는지에 따라 이름을
+// 바꿔 써야 한다. 같은 기능은 어디서든 같은 이름으로 부른다.
+const COMMAND_ALIASES = {
+  "hep-network": "workforce",
+  network: "workforce",
+  "hep-cloud": "cloud",
+  "hep-build": "build",
+  "hep-call": "call",
+  "hep-search": "search",
+  "hep-upload": "upload",
+  "hep-storm": "storm",
+  "hep-browser": "browser",
+  "hep-connect": "connect",
+  "hep-local": "workforce",
+  "hep-hub": "search",
+};
+
+function resolveCommandName(cmd) {
+  return COMMAND_ALIASES[cmd] || cmd;
+}
+
 function dispatch(ctx, argv) {
-  const [cmd, ...rest] = argv;
-  if (!cmd) return null; // 엔진이 REPL로 진입
+  const [rawCmd, ...rest] = argv;
+  if (!rawCmd) return null; // 엔진이 REPL로 진입
+  const cmd = resolveCommandName(rawCmd);
 
   if (COMMANDS[cmd]) {
     return COMMANDS[cmd]().run(ctx, rest);
@@ -133,4 +156,4 @@ function dispatch(ctx, argv) {
   return undefined; // 알 수 없는 토큰 — 엔진이 에이전트 이름/프롬프트로 해석 시도
 }
 
-module.exports = { dispatch, COMMANDS, NOT_YET_PORTED, GUARDED_NO_ARG, DESKTOP_ONLY_SURFACES };
+module.exports = { dispatch, COMMANDS, COMMAND_ALIASES, resolveCommandName, NOT_YET_PORTED, GUARDED_NO_ARG, DESKTOP_ONLY_SURFACES };

package/engine/workforce/capture.cjs

@@ -359,7 +359,13 @@ function captureRuntime(kind, systemPrompt, prompt, opts) {
       const stdout = Buffer.concat(stdoutChunks).toString("utf8");
       const stderr = Buffer.concat(stderrChunks).toString("utf8");
       if (code && code !== 0) {
-        finishReject(new Error(`${kind} exited ${code}: ${stderr.slice(-500)}`));
+        // stderr가 경고문뿐이면 진짜 원인이 stdout(JSON 오류 응답 등)에 있을 수 있다 —
+        // 2026-07-27 실측: 워커 exit 1이 설정 경고 2줄만 남기고 원인 불명이 됐다.
+        // 두 스트림의 꼬리를 모두 싣는다.
+        const stdoutTail = stdout.trim().slice(-400);
+        finishReject(new Error(
+          `${kind} exited ${code}: ${stderr.slice(-500)}${stdoutTail ? `\n--- stdout tail ---\n${stdoutTail}` : ""}`,
+        ));
         return;
       }
       const raw = stdout.trim() || stderr.trim();

package/engine/workforce/deps.cjs

@@ -425,7 +425,13 @@ function buildWorkforceDeps(ctx = {}) {
     // v1과 동일: callHubTool은 주입하지 않는다. 워크포스 모듈 내부의 jsonrpc 경로가
     // 거절 코드 원문 전파·retryClass 계약을 소유하며, fetchHub는 버퍼드
     // {ok,status,headers,text} 어댑터 형태를 만족한다(3중 타임아웃 + 16MB 상한).
-    fetchHub: (url, init) => hubClient.fetchHub(url, init),
+    // 워크포스 전용 타임아웃: prepare_execution은 서버가 로스터 번들을 조립하는 동안
+    // 첫 바이트 없이 계산한다(1슬롯 실측 7.2s, 다슬롯은 그 배수). 기본 connect 15s는
+    // 실제로는 "응답 헤더까지"를 재므로 다슬롯 준비를 처형한다(2026-07-27 전송오류
+    // 2연속의 진범). 준비 상한을 여유 있게 준다 — idle/total 계약은 유지.
+    fetchHub: (url, init) => hubClient.fetchHub(url, init, {
+      timeoutConfig: { connectMs: 120_000, idleMs: 60_000, totalMs: 300_000 },
+    }),
     resolveRuntime: resolveWorkforceRuntime,
     captureRuntime: capture.captureRuntime,
     runApi: capture.runApi,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlas",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Agentlas agent terminal — chat with your installed AI agents and teams from the terminal, Claude Code style. Standalone: no desktop app required.",
   "bin": {
     "agentlas": "bin/agentlas.cjs"