agentlas 1.0.21 → 1.0.23

package/engine/agentlas-ui.cjs

@@ -594,7 +594,19 @@ class Ui {
   }
   error(msg) {
     this.stopSpinner();
-    this._message("✗ ", this.c.paw, this.c.text, msg);
+    // Last-resort presentation boundary for legacy/direct commands. Raw
+    // provider text, stack messages, paths and codes must never become UI.
+    // REPL/session paths route the private evidence to the controller before
+    // reaching this boundary; direct commands get a neutral recovery state.
+    void msg;
+    this._message(
+      "◆ ",
+      this.c.amber,
+      this.c.text,
+      this.lang === "ko"
+        ? "One이 상태를 확인하고 복구하고 있습니다."
+        : "One is checking and recovering this operation.",
+    );
   }
 
   // 최종 텍스트(비스트리밍 경로)에 가벼운 마크다운 강조 적용 후 출력.

package/engine/agentlas-workload-routing.cjs

@@ -308,7 +308,7 @@ function resolveAllocation(options = {}) {
       model: modelPin,
       effort: pinnedEffort,
       provider,
-      source: modelPin || effortPinPresent ? "user-pin" : "fallback",
+      source: modelPin ? "user-pin" : "unresolved",
       fallbackReason: pinReasons.join(","),
       aiReason: null,
     };
@@ -355,24 +355,14 @@ function resolveAllocation(options = {}) {
 
   let model = selected && selected.id;
   let effectiveModelEntry = selected;
-  let source = decision.exactModelId ? "parent-ai-exact" : "fallback";
+  let source = decision.exactModelId ? "parent-ai-exact" : "unresolved";
   if (modelPin) {
     model = modelPin;
     effectiveModelEntry = available.find((item) => item.id === modelPin) || null;
     source = "user-pin";
     reasons.push("explicit_model_pin");
   } else if (!model) {
-    source = "fallback";
-    const activeId = cleanText(runtime && runtime.model, 160) || null;
-    const active = activeId ? available.find((item) => item.id === activeId) || null : null;
-    const issue = activeId ? candidateIssue(active, "active_model") : "active_model_unavailable";
-    if (issue) {
-      if (!reasons.includes(issue)) reasons.push(issue);
-    } else {
-      model = active.id;
-      effectiveModelEntry = active;
-      reasons.push("compliant_active_model_fallback");
-    }
+    source = "unresolved";
   }
 
   let effort;
@@ -406,21 +396,20 @@ function resolveAllocation(options = {}) {
 function resolveAllocationAcrossRuntimes(options = {}) {
   const runtimes = Array.isArray(options.runtimes) ? options.runtimes : [];
   const decision = normalizeAllocation(options.decision);
-  const fallbackRuntime = options.fallbackRuntime || options.runtime || runtimes[0] || null;
-  const fallbackId = cleanText(fallbackRuntime && (fallbackRuntime.runtimeId || fallbackRuntime.id), 255) || null;
+  const explicitRuntime = options.runtime || null;
   const requestedId = decision && decision.runtimeId;
   const chosen = requestedId
     ? runtimes.find((runtime, index) => (cleanText(runtime && (runtime.runtimeId || runtime.id), 255) || `runtime-${index + 1}`) === requestedId) || null
-    : fallbackRuntime;
-  const runtime = chosen || fallbackRuntime;
+    : explicitRuntime;
+  const runtime = chosen || null;
   const resolution = resolveAllocation({ ...options, runtime, decision, availableModels: runtime && runtime.availableModels });
   const requestedExact = Boolean(decision && decision.runtimeId && decision.exactModelId);
-  const runtimeId = cleanText(runtime && (runtime.runtimeId || runtime.id), 255) || fallbackId;
+  const runtimeId = cleanText(runtime && (runtime.runtimeId || runtime.id), 255) || null;
   if (requestedExact && chosen && resolution.model === decision.exactModelId) {
     resolution.source = "parent-selected-live-runtime-model";
   } else if (requestedExact) {
     resolution.fallbackReason = [resolution.fallbackReason, chosen ? "parent_model_not_in_live_inventory" : "parent_runtime_not_in_live_inventory"].filter(Boolean).join(",");
-    if (resolution.source !== "user-pin") resolution.source = "fallback";
+    if (resolution.source !== "user-pin") resolution.source = "unresolved";
   }
   return { ...resolution, runtime, runtimeId, requestedRuntimeId: requestedId || null };
 }
@@ -478,9 +467,7 @@ function createDecisionReceipt({ taskId, stage, decision, resolution, role, usag
   );
   const status = source === "user-pin" && hasResolvedCurrent
     ? "user-pin"
-    : source === "fallback" && hasResolvedCurrent
-      ? "fallback-current"
-      : normalized && resolution && resolution.ok
+    : normalized && resolution && resolution.ok
         ? "resolved"
         : "unresolved";
   const riskCodes = new Set(normalized ? normalized.reasonCodes : []);
@@ -509,7 +496,7 @@ function createDecisionReceipt({ taskId, stage, decision, resolution, role, usag
     },
     reasonCodes,
     inputFeatureHash: normalized && normalized.inputFeatureHash ? normalized.inputFeatureHash : featureHash,
-    selectorVersion: normalized ? normalized.selectorVersion : "deterministic-host-fallback",
+    selectorVersion: normalized ? normalized.selectorVersion : "unresolved-no-model-judgment",
     independentVerificationRequired:
       riskCodes.has("high-risk") || riskCodes.has("critical-risk") || riskCodes.has("independent-verification"),
     usage: normalizeObservedUsage(usage),
@@ -548,7 +535,7 @@ function plannerSystemPrompt({ language = "English", maxTasks = 12, mode = "swar
   return [
     `You are the higher-level workload allocator for an Agentlas ${mode}.`,
     "Judge each child task using the full goal and planned dependency graph. Do not use a keyword lookup or fixed role-to-model table.",
-    "LIVE_RUNTIME_INVENTORY below is authoritative. For every child and synthesis, choose an exact runtimeId and exactModelId only from it. Do not infer, rename, or invent a model from a tier. If an exact choice cannot be justified, select the current-runtime fallback from the inventory.",
+    "LIVE_RUNTIME_INVENTORY below is authoritative. For every child and synthesis, choose an exact runtimeId and exactModelId only from it. Do not infer, rename, invent, or substitute a model. If an exact choice cannot be justified, return an unresolved decision.",
     `LIVE_RUNTIME_INVENTORY=${JSON.stringify(liveRuntimeInventory)}`,
     "Choose effort none|minimal|low|medium|high|xhigh|max. Spend frontier/high effort only when the task's complexity, risk, context, or synthesis burden justifies it.",
     `Return strict JSON only with at most ${Math.max(1, Math.min(24, maxTasks))} tasks:`,

package/engine/agentlas.cjs

@@ -136,11 +136,8 @@ function main() {
   }
 
   if (code === undefined) {
-    // 알 수 없는 토큰: 에이전트 이름이면 그 에이전트와의 REPL로 점프,
-    // 아니면 전체를 하나의 작업으로 보고 원샷 실행(run) — v1과 동일한 UX.
-    const { findAgent } = require("./agents/registry.cjs");
-    let agent = null;
-    try { agent = findAgent(ctx.db(), normalized[0]); } catch { /* db unavailable → run이 진단 */ }
+    // 알 수 없는 토큰은 프로젝트 작업으로 실행한다. 에이전트 이름 하나가
+    // 전역 대화 소유권으로 바뀌는 암묵 경로는 없다.
     /*
      * 오타 가드: 인자가 "공백 없는 한 단어" 하나뿐이고 명령도 에이전트도 아니면
      * 그건 작업 지시가 아니라 명령 오타일 가능성이 압도적이다. 그대로 프롬프트로
@@ -148,7 +145,7 @@ function main() {
      * 에서 ls -la 실행 실증). 가장 가까운 명령을 제안하고 정직하게 멈춘다.
      * 진짜 한 단어 작업은 따옴표+run -p 로 그대로 실행된다.
      */
-    if (!agent && normalized.length === 1 && /^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(normalized[0])) {
+    if (normalized.length === 1 && /^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(normalized[0])) {
       const token = normalized[0];
       const names = Object.keys(commands.COMMANDS)
         .concat(Object.keys(commands.COMMAND_ALIASES || {}))
@@ -163,13 +160,6 @@ function main() {
         : `See: agentlas help  ·  to run it as a task: agentlas run -p "${token}"`);
       process.exit(1);
     }
-    if (agent && normalized.length === 1) {
-      const { startRepl } = require("./ui/repl.cjs");
-      return startRepl(ctx, { agent: agent.slug }).then(
-        (replCode) => process.exit(replCode || 0),
-        (e) => { ctx.err(String((e && e.message) || e)); process.exit(1); },
-      );
-    }
     code = commands.COMMANDS.run().run(ctx, normalized);
   }
 

package/engine/agents/router.cjs

@@ -144,7 +144,6 @@ async function resolveAutoRoute(db, task, opts = {}) {
       ...roster,
     ].join("\n"),
     multi: false,
-    fallback: [],
     signal: opts.signal,
     timeoutMs: opts.timeoutMs || 40000,
   });

package/engine/architecture.data.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.5.36",
-  "emitterBlock": "## Memory (Agentlas curated memory)\n\nIf — and only if — this turn produced something durable (a decision, a stable fact,\na user preference, a risk, a reusable procedure), end your reply with a Memory Events\nblock. Emit nothing when nothing durable was learned.\n\nRules:\n- Never include secrets, credentials, API keys, raw logs, or full transcripts.\n- Real credential values may live only in local project .env/.env.local,\n  ignored signing/ or credentials/ files, or a local keychain/vault. Memory\n  Events may mention env names and local relative paths only.\n- For deploy, release, store, billing, auth, API, or cloud work, first read the\n  project's .agentlas/local-credentials.map.json and the top\n  \"Local Credential Index\" section of .agentlas/project-soul-memory.md\n  before saying a credential is missing.\n- One event per durable item. Keep \"content\" to one or two sentences.\n- \"memory_kind\": fact | decision | preference | risk | procedure | hypothesis | evidence | deprecation | conflict\n- \"suggested_scope\": user_identity | team_memory | project (this folder) | agent_repo | session (temporary) | discard\n- \"agent_team\" is accepted only as a legacy alias for team_memory.\n- Add \"request_context\" when it improves future recall: user_intent, trigger_terms,\n  cwd_at_request, target_project, target_path, cross_context, outcome.\n- Never put the raw user prompt or transcript in request_context.\n- Suggest a scope; the Memory Curator decides the final destination.\n\nFormat (omit entirely if empty):\n\n## Memory Events\n```json\n[\n  {\n    \"memory_kind\": \"decision\",\n    \"content\": \"...\",\n    \"suggested_scope\": \"project\",\n    \"confidence\": \"high\",\n    \"evidence_refs\": [],\n    \"request_context\": {\n      \"user_intent\": \"...\",\n      \"trigger_terms\": [\"...\"],\n      \"cwd_at_request\": null,\n      \"target_project\": null,\n      \"target_path\": null,\n      \"cross_context\": false,\n      \"outcome\": \"...\"\n    }\n  }\n]\n```",
+  "version": "1.6.0",
+  "emitterBlock": "## Memory (Agentlas curated memory)\n\nAt the end of EVERY completed normal reply, emit exactly one hidden Memory Events\nenvelope. The runtime removes it before display. This envelope is the per-turn receipt:\nalways include a compact safe turn_summary, and use an empty candidates array when\nnothing durable was learned. Do not skip the envelope.\n\nRules:\n- Never include secrets, credentials, API keys, raw logs, or full transcripts.\n- Real credential values may live only in local project .env/.env.local,\n  ignored signing/ or credentials/ files, or a local keychain/vault. Memory\n  Events may mention env names and local relative paths only.\n- For deploy, release, store, billing, auth, API, or cloud work, first read the\n  project's .agentlas/local-credentials.map.json and the top\n  \"Local Credential Index\" section of .agentlas/project-soul-memory.md\n  before saying a credential is missing.\n- One candidate per durable item. Keep \"content\" to one or two sentences.\n- \"memory_kind\": fact | decision | preference | risk | procedure | hypothesis | evidence | deprecation | conflict\n- \"suggested_scope\": user_identity | team_memory | project (this folder) | agent_repo | session (temporary) | discard\n- Use user_identity for a stable operator preference or personal fact (their name, role, language, tone,\n  how they want you to behave) — these must outlive any one project. The curator only files user_identity\n  when you label it so with \"confidence\": \"high\"; it never promotes into that scope, so a preference emitted\n  at lower confidence is demoted to a throwaway session note.\n- \"agent_team\" is accepted only as a legacy alias for team_memory.\n- Add \"request_context\" when it improves future recall: user_intent, trigger_terms,\n  cwd_at_request, target_project, target_path, cross_context, outcome.\n- Never put the raw user prompt or transcript in request_context.\n- Suggest a scope; the separate Memory Curator decides the final destination.\n- turn_summary is one value-free sentence about the completed outcome. It is not the\n  user prompt, a transcript, raw log, secret, or absolute local path.\n\nFormat (always emit, including an empty candidates array):\n\n## Memory Events\n```json\n{\n  \"schema_version\": \"agentlas.memory-ticket.v1\",\n  \"turn_summary\": \"Completed outcome in one safe sentence.\",\n  \"candidates\": [\n    {\n      \"memory_kind\": \"decision\",\n      \"content\": \"...\",\n      \"suggested_scope\": \"project\",\n      \"confidence\": \"high\",\n      \"sensitivity\": \"internal\",\n      \"evidence_refs\": [],\n      \"request_context\": {\n        \"user_intent\": \"...\",\n        \"trigger_terms\": [\"...\"],\n        \"cwd_at_request\": null,\n        \"target_project\": null,\n        \"target_path\": null,\n        \"cross_context\": false,\n        \"outcome\": \"...\"\n      }\n    }\n  ]\n}\n```",
   "eventsHeading": "## Memory Events",
   "memoryDir": ".agentlas",
   "soulFile": "project-soul-memory.md",
@@ -72,12 +72,12 @@
       "slug": "agentlas-orchestrator",
       "name": "Agentlas 오케스트레이터",
       "nameEn": "Agentlas Orchestrator",
-      "tagline": "에이전트를 지정하지 않아도 요청을 읽고 알맞은 역할로 라우팅",
-      "taglineEn": "Routes plain-language requests when no agent is specified",
+      "tagline": "프로젝트 컨트롤러를 지원하는 작업 단위 오케스트레이션",
+      "taglineEn": "Task-scoped orchestration under a project controller",
       "role": "orchestrator",
       "visibility": "background",
       "tone": "blue",
-      "systemPrompt": "# Agentlas Orchestrator (built-in)\n\nYou are the default front door for Agentlas Desktop and the Agentlas terminal. Your\njob is NOT to be the best specialist. Your job is to route the user's plain-language\nrequest to the right installed agent, company, or skill when the user did not name one.\n\nThe Agentlas host will usually inject a roster and may pre-select a concrete agent\nbefore your turn starts. Follow that host routing. If you receive the task directly,\napply the same policy yourself.\n\n## Global routing policy\n- Before substantial work, inspect the user's request and the available roster.\n- If the user explicitly names an agent, company, runtime, or skill, honor that.\n- If no agent is named, choose the smallest capable route by capability, trigger\n  terms, required tools, project context, and safety risk.\n- Announce the route before doing the work:\n  \"사용 에이전트: <name>. 이유: <short reason>.\"\n  Use English instead when the interface/user language is English.\n- Then proceed immediately. Do not ask the user to choose an agent unless the choice\n  changes money movement, destructive actions, public publishing, legal/medical risk,\n  access to private data, or whether Agentlas should create a dedicated App.\n- For multi-step work, route top-down only. Do not create a loop where a worker calls\n  back into you.\n\n## Canonical routes\n- App creation, Apps Generate, \"generate app\", \"make an app\", \"앱 만들어줘\",\n  \"내부 앱\", \"앱 빌더\", or generated app factory work -> Agentlas App Builder.\n  Use this route only for explicit app requests or app-worthy workflows with durable\n  state, editing, export, automation, scheduling, approvals, or repeated runs.\n  Do not ask about making an App for greetings, one-off answers, simple chat,\n  or lightweight content requests. If Apps Generate mode was not explicitly selected,\n  ask the user whether they want a dedicated Agentlas App before emitting manifests\n  or creating files.\n- Agent creation, team design, skill generation, AGENTS.md/CLAUDE.md/GEMINI.md\n  packaging, Codex compatibility, or \"make me an agent\" -> Agentlas Core Engine\n  Meta-Agent (built-in). If the full public core package is also installed, use it\n  as the file-rich contract source; otherwise use the embedded contract. Route by mode:\n  single-agent-creator for one worker, team-builder for multi-role teams, and\n  agentlas-packager for existing agents/teams/repos/ZIPs that need Agentlas\n  architecture, public/private cleanup, runtime adapters, and verification.\n  Do not require Web-only SaaS billing/account/session code for local packaging.\n- Durable project continuity, decision logs, project memory, and workstream ownership\n  -> Project PM Soul.\n- Memory write quality, request_context, scope conflicts, or \"why can't it remember?\"\n  -> Memory Curator.\n- Sitemap, task-selection bias, stale surfaces, completion evidence, or validation\n  gaps -> Task Bias Curator.\n- If an imported local team/company matches the request, prefer its CEO route over a\n  generic built-in.\n\n## Codex-style skill behavior\nWhen the selected route has skills, read their descriptions/triggers and auto-select\nthe relevant skills even if the user did not name them. State the selected skill(s)\nand reason before acting, then continue."
+      "systemPrompt": "# Agentlas Orchestrator (built-in)\n\nYou are a project-bound orchestration capability, never a global chat owner.\n\nThe host supplies one connected Work project, its system prompt, ordered agent pool,\nmemory and the current WorkOrder. The first agent in that ordered pool owns the task.\nYou may act only when you are that first agent or when the owning controller delegates\nthis bounded WorkOrder to you.\n\n## Ownership and staffing\n- Preserve the project's ordered Orch/Worker model priorities.\n- Select task-scoped sub-agents from the project's explicit pool by full semantic\n  judgment. Do not route by regex, keyword lists, trigger-term dictionaries or glossaries.\n- Every sub-agent remains subordinate to the project controller and exists only for\n  its assignment. Never transfer session or project ownership.\n- Pin and validate exact releases before execution. Never silently substitute a\n  missing, expired or incompatible agent.\n- An explicit named-agent call affects only that turn.\n\n## Recovery\n- Observe failures as private evidence, decide the safest available recovery with the\n  connected model, execute reversible recovery automatically, and verify the outcome.\n- Do not expose raw errors, codes, stack traces, paths or internal component language.\n- Code provides state, evidence and finite capabilities only. You author the concise\n  summary, question and action labels for the actual situation.\n- If model judgment is unavailable, remain unresolved. Never fabricate a semantic\n  fallback or present a guessed diagnosis as success.\n\n## Completion\nReturn the verified project result and compact evidence. Record durable project memory\nwithout binding that memory to one replaceable agent release."
     },
     {
       "id": "builtin-agentlas-app-builder",

package/engine/bootstrap-schema.sql

@@ -1,6 +1,6 @@
 -- Agentlas first-run bootstrap schema (project-first Work contract)
--- Source DB user_version=85. Desktop remains the migration authority.
-PRAGMA user_version=85;
+-- Source DB user_version=86. Desktop remains the migration authority.
+PRAGMA user_version=86;
 CREATE TABLE active_runtime (
         id INTEGER PRIMARY KEY CHECK(id = 1),
         kind TEXT NOT NULL
@@ -35,7 +35,7 @@ CREATE TABLE chats (
         agent_id TEXT NOT NULL,
         title TEXT NOT NULL DEFAULT '새 채팅',
         created_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL, firm_id TEXT REFERENCES firms(id) ON DELETE SET NULL, archived_at TEXT, working_folder TEXT, kind TEXT NOT NULL DEFAULT 'user', parent_chat_id TEXT, used_at TEXT, continuous_mode INTEGER NOT NULL DEFAULT 0, swarm_mode INTEGER NOT NULL DEFAULT 0, last_viewed_at TEXT, hired_agents TEXT, origin_surface TEXT NOT NULL DEFAULT 'work', runtime_selection_json TEXT,
+        updated_at TEXT NOT NULL, firm_id TEXT REFERENCES firms(id) ON DELETE SET NULL, archived_at TEXT, working_folder TEXT, kind TEXT NOT NULL DEFAULT 'user', parent_chat_id TEXT, used_at TEXT, continuous_mode INTEGER NOT NULL DEFAULT 0, swarm_mode INTEGER NOT NULL DEFAULT 0, last_viewed_at TEXT, origin_surface TEXT NOT NULL DEFAULT 'work', runtime_selection_json TEXT,
         FOREIGN KEY(project_id) REFERENCES projects(id) ON DELETE SET NULL,
         FOREIGN KEY(agent_id) REFERENCES installed_agents(id) ON DELETE CASCADE
       );

package/engine/commands/doctor.cjs

@@ -1,9 +1,9 @@
 "use strict";
 /*
  * doctor — 런타임·데이터·자격증명 건강 점검.
- * 진단/수리 규칙 자체는 engine/agentlas-doctor.cjs(3제품 패리티 계약)에 있고,
- * 이 명령은 "현재 상태 관측"만 한다. 여기서 관측 항목을 바꿔도 패리티 게이트와
- * 무관하지만, 실패 분류·수리 로직을 건드리려면 반드시 sync-runtime-doctor.sh를 통과시켜라.
+ * 이 명령은 사용자가 명시적으로 요청한 현재 상태 관측만 한다.
+ * 자동 복구는 프로젝트 컨트롤러와 저장된 모델 우선순위가 맡으며, 이 명령은
+ * 오류 문자열을 분류하거나 설정을 자동 변경하지 않는다.
  */
 const fs = require("node:fs");
 const path = require("node:path");

package/engine/commands/help.cjs

@@ -4,14 +4,11 @@
 const HELP = `agentlas — the operating system for agents, in your terminal
 
   agentlas                 open the terminal (REPL)
-  agentlas <agent>         jump into a chat with one agent
-  agentlas "<task>"        auto-route to the best agent and run once
+  agentlas "<task>"        run once with this project's controller
 
-TALK & RUN
-  <agent> · chat <agent>   jump into a chat with one agent
-  run [agent] [prompt]     one-shot (-p · --runtime · --model · --effort · --permission)
+PROJECT WORK
+  run [agent] [prompt]     project-first one-shot; exact agent is an explicit advanced override
   firm <firm> [task]       delegate to a CEO (--runtime · --model · --effort)
-  chats [n] · open <id>    recent conversations · resume one
 
 AGENTS & HUB
   search "<what you need>" discover agents in the Hub
@@ -52,7 +49,7 @@ ACCOUNT & OPS
 
 IN-REPL (agentlas → interactive, Orca multi-session)
   /spawn <agent> [task] · /sessions · /tree · /s <n> · /steer <n> <msg> ·
-  /kill <n> · /rm <n> · /broadcast <msg> · /use · /runtime · /model · /effort · /permission
+  /kill <n> · /rm <n> · /broadcast <msg> · /runtime · /model · /effort · /permission
   typing during a running turn queues steering; ctrl-c interrupts the turn
 
 Options: -p|--print · --runtime claude-code|codex|gemini · --model <exact-id> ·

package/engine/commands/index.cjs

@@ -12,7 +12,6 @@ const path = require("node:path");
 const COMMANDS = {
   version: () => require("./version.cjs"),
   list: () => require("./list.cjs"),
-  chats: () => require("./chats.cjs"),
   doctor: () => require("./doctor.cjs"),
   mcp: () => require("./mcp.cjs"),
   help: () => require("./help.cjs"),
@@ -32,10 +31,8 @@ const COMMANDS = {
   install: () => require("./install.cjs"),
   plugin: () => require("./plugin.cjs"),
   plugins: () => require("./plugin.cjs"),
-  open: () => require("./open.cjs"),
   automation: () => require("./automation.cjs"),
   native: () => require("./native.cjs"),
-  chat: () => require("./chat.cjs"),
   multimodal: () => require("./multimodal.cjs"),
   workforce: () => require("./workforce.cjs"),
   network: () => require("./workforce.cjs"),
@@ -94,11 +91,9 @@ const DESKTOP_ONLY_SURFACES = {
   trex: "T-rex slide studio is Desktop-only.",
   slides: "T-rex slide studio is Desktop-only.",
   prompts: "Prompt Store is Desktop-only.",
-  dashboard: "Dashboard is Desktop-only — use: agentlas doctor · usage · list · chats",
+  dashboard: "Dashboard is Desktop-only — use: agentlas doctor · usage · list",
   marketplace: "Marketplace browsing is Desktop-only — use: agentlas search \"<what you need>\"",
   library: "Library is Desktop-only — use: agentlas list · env · mcp",
-  groups: "Agent groups (조합) are Desktop-only.",
-  "agent-groups": "Agent groups (조합) are Desktop-only.",
   settings: "Settings UI is Desktop-only — use: agentlas setup · env · creds · multimodal · doctor",
   apps: "Apps surface is Desktop-only.",
   quests: "Quests are Desktop-only.",

package/engine/experience/runtime.cjs

@@ -137,6 +137,7 @@ function resolveRuntimeExperienceCli(agent, prompt, requested, cwd, overrides =
     cwd,
     prompt,
     requested: prepared.requested || requested || {},
+    declaredTaskClasses: requested && requested.declaredTaskClasses,
     agent,
     agentRoot: agent ? (overrides.agentRoot || agentFolder(agent)) : null,
     ...(overrides.platform ? { platform: overrides.platform } : {}),

package/engine/sessions/orchestrator.cjs

@@ -1,6 +1,6 @@
 "use strict";
 /*
- * sessions/orchestrator — 오르카 계층: 멀티세션 스폰/전환/스티어/킬/브로드캐스트.
+ * sessions/orchestrator — 프로젝트 Work의 컨트롤러/서브에이전트 실행 트리.
  *
  * 세션 번호는 s1, s2, … 로 붙는다(사람이 한 키로 지목할 수 있는 안정 번호).
  * 활성 세션 하나만 터미널에 스트리밍되고, 나머지는 백그라운드에서 이벤트를
@@ -67,14 +67,12 @@ class Orchestrator extends EventEmitter {
 
     session.on("event", (ev) => {
       this.emit("session-event", { key, session, ev });
-      if (ev.type === "turn-end" && this.activeKey !== key) {
+      if (ev.type === "turn-end" && ev.ok && this.activeKey !== key) {
         this.emit("notice", {
           key,
           session,
-          text: ev.ok
-            ? `${key} ${session.agent.slug}: done`
-            : `${key} ${session.agent.slug}: ${ev.error || "failed"}`,
-          ok: !!ev.ok,
+          text: `${key} ${session.agent.slug}: done`,
+          ok: true,
         });
       }
     });
@@ -157,21 +155,6 @@ class Orchestrator extends EventEmitter {
    * 그래서 실패는 세션 단위로 모으고, 실제 전달된 목록은 무슨 일이 있어도 반환한다.
    * (sendTo/spawn의 "상한 초과는 정직한 거부" 계약 자체는 그대로 둔다.)
    */
-  broadcast(prompt) {
-    const sent = [];
-    const skipped = [];
-    for (const [key, session] of this.sessions) {
-      if (session.status === "killed") continue;
-      try {
-        this.sendTo(key, prompt);
-        sent.push(key);
-      } catch (e) {
-        skipped.push({ key, error: String((e && e.message) || e) });
-      }
-    }
-    return { sent, skipped };
-  }
-
   /** 세션 표: [{key, active, agent, status, elapsed, lastLine, parentKey, depth}] */
   list() {
     const rows = [];

package/engine/sessions/session.cjs

@@ -13,6 +13,9 @@ const crypto = require("node:crypto");
 const { EventEmitter } = require("node:events");
 const nativeHost = require("../agentlas-native-host.cjs");
 const permissions = require("../agentlas-permissions.cjs");
+const { RUNTIME_BIN, whichSync } = require("../runtimes/detect.cjs");
+const { CLI_EXECUTABLE_KINDS } = require("../runtimes/resolve.cjs");
+const { roleMembers } = require("../runtimes/roles.cjs");
 const { EventSink } = require("./sink.cjs");
 const store = require("./store.cjs");
 
@@ -37,6 +40,7 @@ class Session extends EventEmitter {
     this.status = "idle"; // idle | running | done | failed | killed
     this.lastLine = "";
     this.lastError = null;
+    this._privateRecoveryEvidence = [];
     this.startedAt = null;
     this.endedAt = null;
     this.usage = null;
@@ -52,7 +56,7 @@ class Session extends EventEmitter {
 
     this.chatId = opts.chatId || store.createChat(this.db, {
       agentId: this.agent.id,
-      title: opts.title || (opts.parent ? `sub: ${this.agent.slug}` : "New chat"),
+      title: opts.title || (opts.parent ? `sub: ${this.agent.slug}` : "New project task"),
       kind: opts.parent ? "division" : "user",
       parentChatId: opts.parent ? opts.parent.chatId : null,
       workingFolder: this.cwd,
@@ -76,6 +80,11 @@ class Session extends EventEmitter {
     this._sink = new EventSink({
       lang: this.lang,
       onEvent: (ev) => this._record(ev),
+      onPrivateEvidence: (text) => {
+        if (!text) return;
+        this._privateRecoveryEvidence.push(text.slice(0, 4000));
+        if (this._privateRecoveryEvidence.length > 16) this._privateRecoveryEvidence.shift();
+      },
     });
   }
 
@@ -143,16 +152,41 @@ class Session extends EventEmitter {
     }
   }
 
+  _nextRecoveryRuntime() {
+    const role = this.runtime.role === "worker" ? "worker" : "orchestrator";
+    const members = roleMembers(this.db, role);
+    const current = members.findIndex((member) =>
+      member.kind === this.runtime.kind &&
+      (member.model || null) === (this.runtime.model || null),
+    );
+    if (current < 0) return null;
+    for (const member of members.slice(current + 1)) {
+      if (!CLI_EXECUTABLE_KINDS.has(member.kind)) continue;
+      const bin = whichSync(RUNTIME_BIN[member.kind]);
+      if (!bin) continue;
+      return {
+        kind: member.kind,
+        bin,
+        model: member.model || undefined,
+        effort: member.effort || undefined,
+        role,
+        source: "model-role-pool-recovery",
+      };
+    }
+    return null;
+  }
+
   async _runTurn(prompt) {
     this.status = "running";
     this.startedAt = Date.now();
     this.lastError = null;
+    this._privateRecoveryEvidence.length = 0;
     this._record({ type: "turn-start", at: Date.now(), prompt });
     store.appendMessage(this.db, this.chatId, "user", prompt);
     // 데스크탑처럼 첫 프롬프트로 자동 제목 — "New chat"으로 남는 목록 방지(실사용 테스트 발견).
     try {
       const row = this.db.prepare("SELECT title FROM chats WHERE id=?").get(this.chatId);
-      if (row && (row.title === "New chat" || !row.title)) {
+      if (row && (["New chat", "New project task"].includes(row.title) || !row.title)) {
         store.retitleChat(this.db, this.chatId, prompt.slice(0, 60));
       }
     } catch { /* 제목은 장식 — 실패해도 턴 진행 */ }
@@ -234,6 +268,33 @@ class Session extends EventEmitter {
       if (this._timeoutConfig) req.timeoutConfig = this._timeoutConfig;
       try {
         res = await nativeHost.runNativeTurn(req);
+        if (res && res.error && !res.text && !res.finalText) {
+          const nextRuntime = this._nextRecoveryRuntime();
+          if (nextRuntime) {
+            const privateEvidence = [...this._privateRecoveryEvidence, String(res.error)]
+              .filter(Boolean).join("\n").slice(0, 12000);
+            this.runtime = nextRuntime;
+            this.runtimeSession = {};
+            this.fingerprint = crypto.createHash("sha256")
+              .update(`${nextRuntime.kind}\n${this.agent.id}\n${this.agent.systemPrompt || ""}`)
+              .digest("hex");
+            res = await nativeHost.runNativeTurn({
+              ...req,
+              kind: nextRuntime.kind,
+              bin: nextRuntime.bin,
+              model: nextRuntime.model,
+              effort: nextRuntime.effort,
+              session: {},
+              prompt: [
+                prompt,
+                "",
+                "Private recovery evidence follows. Never repeat it to the user.",
+                privateEvidence,
+                "Inspect the complete situation, apply safe reversible recovery within the granted authority, verify it, and finish the original request. Ask one concise question only if user identity or an irreversible choice is required.",
+              ].join("\n"),
+            });
+          }
+        }
       } catch (e) {
         res = { text: "", session: req.session, error: (e && e.message) || String(e) };
       }
@@ -274,8 +335,8 @@ class Session extends EventEmitter {
     }
     if (res && res.error) {
       this.status = "failed";
-      this.lastError = res.error;
-      this._record({ type: "turn-end", at: Date.now(), ok: false, error: res.error });
+      this.lastError = null;
+      this._record({ type: "turn-end", at: Date.now(), ok: false, recoveryRequired: true });
     } else {
       this.status = "done";
       // 링버퍼 표시 이벤트에도 raw 대신 cleanText — 제어 블록이 패널/lastLine 에 새지 않게.
@@ -287,7 +348,7 @@ class Session extends EventEmitter {
       try {
         require("./apply-fences.cjs").applyReplyFences(this, parsedFences, { orch: this.orchestrator });
       } catch (e) {
-        this._record({ type: "error", at: Date.now(), text: `fence apply failed: ${(e && e.message) || String(e)}` });
+        this._privateRecoveryEvidence.push(`fence apply failed: ${(e && e.message) || String(e)}`.slice(0, 4000));
       }
     }
     return res;

package/engine/sessions/sink.cjs

@@ -16,11 +16,12 @@ const i18n = require("../agentlas-i18n.cjs");
 const NOOP_PALETTE = new Proxy({}, { get: () => (s) => String(s) });
 
 class EventSink {
-  constructor({ lang = "en", onEvent } = {}) {
+  constructor({ lang = "en", onEvent, onPrivateEvidence } = {}) {
     this.lang = lang;
     this.t = (key, ...args) => i18n.t(this.lang, key, ...args);
     this.c = NOOP_PALETTE;
     this._onEvent = onEvent || (() => {});
+    this._onPrivateEvidence = onPrivateEvidence || (() => {});
     this._streamOpen = false;
   }
 
@@ -30,10 +31,19 @@ class EventSink {
 
   status(text) { this._emit("status", { text: String(text || "") }); }
   warn(text) { this._emit("warn", { text: String(text || "") }); }
-  error(text) { this._emit("error", { text: String(text || "") }); }
+  // Runtime/provider failures are recovery evidence, never presentation copy.
+  // Session owns the recovery loop and may give this evidence to the controller;
+  // Renderer must never receive it first.
+  error(text) { this._onPrivateEvidence(String(text || "")); }
   line(text) { this._emit("line", { text: String(text || "") }); }
   tool(name, summary) { this._emit("tool", { name: String(name || "tool"), summary: String(summary || "") }); }
-  toolResult(text, ok) { this._emit("tool-result", { text: String(text || ""), ok: ok !== false }); }
+  toolResult(text, ok) {
+    if (ok === false) {
+      this._onPrivateEvidence(String(text || ""));
+      return;
+    }
+    this._emit("tool-result", { text: String(text || ""), ok: true });
+  }
   streamStart() {
     if (!this._streamOpen) { this._streamOpen = true; this._emit("stream-start", {}); }
   }

package/engine/sessions/store.cjs

@@ -21,7 +21,7 @@ function createChat(db, { agentId, title, kind = "user", parentChatId = null, wo
   runWriteTransaction(db, () => {
     db.prepare(
       "INSERT INTO chats (id, agent_id, title, created_at, updated_at, kind, parent_chat_id, working_folder) VALUES (?,?,?,?,?,?,?,?)",
-    ).run(id, agentId, title || "New chat", now, now, kind, parentChatId, workingFolder);
+    ).run(id, agentId, title || "New project task", now, now, kind, parentChatId, workingFolder);
   });
   return id;
 }
@@ -40,7 +40,7 @@ function appendMessage(db, chatId, role, text) {
 
 function retitleChat(db, chatId, title) {
   runWriteTransaction(db, () => {
-    db.prepare("UPDATE chats SET title=?, updated_at=? WHERE id=?").run(String(title || "New chat").slice(0, 120), nowIso(), chatId);
+    db.prepare("UPDATE chats SET title=?, updated_at=? WHERE id=?").run(String(title || "New project task").slice(0, 120), nowIso(), chatId);
   });
 }
 

package/engine/ui/palette.cjs

@@ -3,8 +3,8 @@
  * ui/palette — v2 슬래시 명령 정본 + readline 완성기.
  *
  * 왜 v1 input 모듈의 SLASH_COMMANDS를 쓰지 않는가: 그 목록은 v1 REPL 전용이라
- * v2에 없는 명령(/status /team /model /effort …)을 광고하고, v2의 오르카 명령
- * (/spawn /sessions /s /steer /kill /broadcast …)은 빠져 있었다. 팔레트가
+ * v2에 없는 명령(/status /team /model /effort …)을 광고한다. 프로젝트 Work에서는
+ * 컨트롤러만 서브에이전트를 배정하므로 사용자용 임의 spawn/steer/broadcast는 없다.
  * 거짓말하면 사용자는 없는 기능을 부른다(실사용 Tab 테스트에서 실증).
  * 경로 완성만 v1 모듈의 completePath를 재사용한다.
  */
@@ -17,15 +17,10 @@ const SLASH_COMMANDS = [
   { command: "/tree", args: "", ko: "세션 트리", en: "Session tree" },
   { command: "/s", args: "<n>", ko: "활성 세션 전환", en: "Switch active session" },
   { command: "/switch", args: "<n>", ko: "활성 세션 전환", en: "Switch active session" },
-  { command: "/spawn", args: "<agent> [task]", ko: "서브에이전트 세션 생성", en: "Spawn a subagent session" },
-  { command: "/steer", args: "<n> <msg>", ko: "해당 세션에 지시 큐잉", en: "Queue steering for a session" },
   { command: "/kill", args: "<n>", ko: "실행 중 턴 중단", en: "Interrupt a running turn" },
   { command: "/rm", args: "<n>", ko: "세션 제거", en: "Remove a session" },
-  { command: "/broadcast", args: "<msg>", ko: "모든 세션에 지시", en: "Send to every session" },
-  { command: "/use", args: "<agent>", ko: "메인 세션 에이전트 교체", en: "Switch the main agent" },
   { command: "/agents", args: "", ko: "설치 에이전트 목록", en: "List installed agents" },
   { command: "/list", args: "", ko: "설치 에이전트 목록", en: "List installed agents" },
-  { command: "/chats", args: "[n]", ko: "최근 대화", en: "Recent conversations" },
   { command: "/mcp", args: "", ko: "MCP 서버 목록", en: "MCP servers" },
   { command: "/doctor", args: "", ko: "런타임·데이터 점검", en: "Health check" },
   { command: "/runtime", args: "<kind>", ko: "새 세션 런타임 지정", en: "Set runtime for new sessions" },
@@ -99,8 +94,7 @@ const RUNTIME_KINDS = ["claude-code", "codex", "gemini"];
 const EFFORT_LEVELS = ["none", "minimal", "low", "medium", "high", "xhigh", "max"];
 const PERM_LEVELS = ["read", "write", "full"];
 // 세션 인자를 받는 명령 — 완성 후보를 살아있는 세션 키(s1, s2…)로 채운다.
-const SESSION_ARG_COMMANDS = new Set(["/s", "/switch", "/steer", "/kill", "/rm"]);
-const AGENT_ARG_COMMANDS = new Set(["/use", "/spawn"]);
+const SESSION_ARG_COMMANDS = new Set(["/s", "/switch", "/kill", "/rm"]);
 
 function uniqStartsWith(list, prefix) {
   const p = String(prefix || "");
@@ -137,9 +131,6 @@ function makeCompleter(ctx = {}) {
     if (cmd === "/effort") return [uniqStartsWith(EFFORT_LEVELS, last), last];
     if (cmd === "/permission") return [uniqStartsWith(PERM_LEVELS, last), last];
     if (SESSION_ARG_COMMANDS.has(cmd) && tokens.length === 2) return [uniqStartsWith(getSessions(), last), last];
-    if (AGENT_ARG_COMMANDS.has(cmd) && tokens.length === 2) {
-      return [uniqStartsWith(getAgents().concat(getFirms()), last), last];
-    }
     return [[], last];
   };
 }