agentlas 1.0.28 → 1.0.35

package/CHANGELOG.md

@@ -1,5 +1,107 @@
 # Changelog
 
+## 1.0.34 — 2026-08-06
+
+Telegram, standalone. The terminal can now connect a Telegram bot with no desktop app.
+
+- `connect telegram <agent|firm>` reads a bot token from stdin (never argv), verifies it
+  against api.telegram.org, stores it 0600, polls getUpdates and pairs the first private
+  chat, then sends a confirmation.
+- `connect test <id>` / `connect remove <id>` / `connect status`. The connection core is
+  plain HTTPS ported from the desktop; no Electron, no plugin, no raw JSON dump.
+
+Not yet standalone: auto-creating the bot by piloting BotFather in a browser (the CDP
+browser hardpoint makes this a tractable next layer; it needs a live Telegram web session).
+
+## 1.0.33 — 2026-08-06
+
+Defect sweep: ran every command with a real prompt and fixed what dumped or stalled.
+
+- `connect telegram` / `connect status` no longer dump the raw Hephaestus router JSON —
+  they show the local Telegram binding table and honestly note that bot issuance/pairing
+  still live in Desktop Connect.
+- `route "<request>"` shows a progress spinner during its ~13s Hub round-trip instead of
+  sitting silent.
+
+## 1.0.32 — 2026-08-06
+
+Standalone: the terminal no longer requires Desktop or the plugin for its core flows.
+(They share artifacts and settings; they are not a prerequisite.)
+
+- `project use <agent>` / `project team <agent>…` connect the current folder as a
+  project and set an ordered team, entirely from the terminal — so `run "<task>"` and
+  plain REPL input work without ever opening Desktop. `project status` shows the team.
+- `build "<request>"` now builds locally: the terminal runtime produces an installable
+  agent package (AGENTS.md + manifest.md + README.md) and auto-installs it, instead of
+  printing "open the Claude Code / Codex plugin and run /hep-build".
+- Honest-stops in a project-less folder point at `project use`, not "open Desktop".
+
+Verified standalone end-to-end: project use → run answered correctly; build produced and
+installed an agent that then ran correctly.
+
+## 1.0.31 — 2026-08-06
+
+Interactive UX, measured against first-class REPLs with a real PTY.
+
+- The empty prompt now guides: a dim ghost hint ("type a task · / commands · @ files
+  · ? shortcuts"), `?` prints a shortcuts card, a second empty Enter points the way.
+- Tab-completing a command that takes arguments appends the space, so you can type the
+  argument immediately; no-arg commands are unchanged.
+- A plain-language task in a folder with no connected project now says exactly why and how
+  to run anyway (localized), instead of a single "recovering…" line that hid the reason.
+  Every controller honest-stop carries a machine code so this can never be swallowed again.
+- New PTY-driven gates (repl-guidance, honest-stop-not-swallowed) — these paths live inside
+  the readline session and are invisible to spawnSync tests.
+
+## 1.0.30 — 2026-08-06
+
+CLI-conventions hardening, measured against clig.dev and first-class CLIs.
+
+- A closed pipe is a reader saying stop: `agentlas … | head` no longer crashes with EPIPE.
+- Unexpected crashes now print a one-line summary and a pre-filled GitHub issue URL, not just a raw stack.
+- `TERM=dumb` disables ANSI colors (editor shells, some CI).
+- Secrets stop landing in shell history: `creds save --value -` reads the secret from stdin;
+  passing it via argv now prints an exposure notice.
+- `list --json`, `doctor --json`, `roles --json` — machine contracts for scripts.
+- Workforce staffing survives transient API failures: a typed transient error
+  (connection closed mid-response, timeouts, overload) on a no-authority/read-only stage
+  is retried exactly once; write-capable stages are never retried. A 40-minute, 2.1M-token
+  live run previously died on the final re-verification call for exactly this.
+- New gate: clig-conventions-contract; retry contract added to the workforce runtime gate.
+
+## 1.0.29 — 2026-08-05
+
+Terminal-wide audit release. Every command was executed for real; what follows fixes what that audit found.
+
+- Native federated staffing: `hep-network` / `hep-local` / `hep-cloud` / `hep-hub` now run this
+  terminal's own workforce loop with the local Agentlas-OS core federating the declared source scope.
+  (They previously passed through to an external CLI stub that always answered exit 3.)
+  Honest stop with install guidance when the local core is missing — no silent fallback to the public Hub.
+- `workforce` now declares its sourceScope ("hub") explicitly instead of relying on the server default.
+- `doctor` distinguishes installed from signed-in: local sign-in evidence per runtime, a warning
+  (not "all clear") when the active runtime has none.
+- New `roles` command: view and set orchestrator/worker model roles from the terminal
+  (`roles set <role> <runtime> [--model id] [--effort lv]`, `roles set worker --inherit`).
+  REPL `/model`·`/runtime` now say they are session-scoped and point to `agentlas roles`.
+- Setup wizard prints install/sign-in guidance when the chosen runtime is missing or unauthenticated.
+- `creds list` (names and stores only — values never printed), `mcp list`, Korean `help` body.
+- The graph command group ships in the npm package for the first time (it landed after 1.0.28 was published).
+- New gates: user-scenarios (93 real CLI invocations), local-core transport wire contract,
+  doctor auth-evidence, roles round-trip, onboarding guidance, EN/KO help sync.
+- `agentlas <command> --help` reaches the command's own help. It printed a two-line stub
+  scraped from the help table, so `graph --help` never showed the eight lines `graph help` has —
+  and that is the spelling people try first. (The gate had pinned the stub as correct; its
+  contract now asks whether real help was shown.)
+- `graph install --name "<new name>"` works. The documented flag had never worked: its value was
+  appended to the file path, so the install died with "no such file".
+- `graph show` stops indenting a straight chain deeper at every step — fourteen steps meant
+  twenty-eight columns. Depth now marks real branches (a fork, a failure exit).
+- Building a graph follows your language setting. One Korean character anywhere in the request
+  forced the interview to Korean while `graph show`, the list, and errors stayed English.
+- Graph steps written as code declare the pip packages they import, and a verification step is
+  now required whenever a step that changes something outside sends out a value an earlier step
+  computed — an unattended run must not ship an empty or invented result.
+
 ## 1.0.26 — 2026-08-03
 
 - **`agentlas list` stops letting the terminal cut its own output.** Slugs were

package/README.md

@@ -94,10 +94,13 @@ agentlas variant resolve --base-release <id> # Preview local variant compatibili
 ```sh
 agentlas storm "<goal>"          # Goal + UltraCode harness: plan -> assign -> execute -> verify [--research]
 agentlas swarm "<goal>"          # Emergent multi-agent swarm [--parallel N]
-agentlas workforce "<prompt>"    # Route through Agent Workforce Ontology
+agentlas workforce "<prompt>"    # Route through Agent Workforce Ontology (public Hub menu)
 agentlas network "<prompt>"      # Alias for workforce
 agentlas taskforce "<prompt>"    # Alias for workforce
-agentlas legacy-network "<prompt>" # Legacy Hephaestus solver (explicit invocation only)
+agentlas hep-network "<prompt>"  # Staff across Local + owner Cloud + public Hub (local Core federation)
+agentlas hep-local "<prompt>"    # Same staffing, registered Local agents only
+agentlas hep-cloud "<prompt>"    # Same staffing, owner Agent Cloud only
+agentlas hep-hub "<prompt>"      # Same staffing, public Hub only
 agentlas call "a,b" "<context>"  # Call explicitly named Hub or Cloud agents
 agentlas browser [...]           # Real browser hardpoint launcher
 agentlas route "<prompt>" [--json] # Preview routing decisions without execution

package/bin/agentlas.cjs

@@ -18,6 +18,21 @@
  */
 "use strict";
 
+/*
+ * EPIPE 방어 — 발행본 실설치 검증에서 발견(2026-08-06): `agentlas version | head -1`
+ * 처럼 파이프 소비자가 먼저 닫히면 stdout write가 EPIPE를 던져 스택트레이스로
+ * 크래시했다. `| head` `| less` `| grep -m1`은 CLI의 일상 사용 패턴이다.
+ * 파이프 단절은 오류가 아니라 "그만 읽겠다"는 신호 — 조용히 성공 종료한다.
+ * (시나리오 게이트가 못 잡았던 이유: spawnSync는 파이프를 끝까지 읽는다.
+ *  test/user-scenarios-contract.cjs 의 파이프 시나리오가 이 계약을 잠근다.)
+ */
+for (const stream of [process.stdout, process.stderr]) {
+  stream.on("error", (error) => {
+    if (error && error.code === "EPIPE") process.exit(0);
+    throw error;
+  });
+}
+
 const fs = require("node:fs");
 const os = require("node:os");
 const path = require("node:path");

package/engine/agentlas-cloud-runtime.cjs

@@ -38,11 +38,56 @@ function collectFiles(root) {
   return files.sort((a, b) => a.path.localeCompare(b.path));
 }
 
+// Local sourcePackage identity — the wizard manifest's `packageHash`.
+//
+// This is NOT the delivered Agent Cloud artifact hash. That one is
+// `path-sha256-executable-v2` and lives in engine/cloud-assets/package.cjs,
+// byte-identical with Desktop's hashPackage and Agentlas-OS upload.py. The two
+// are separate contracts on purpose (upload.py: "distinct from agentlas.json's
+// local sourcePackage hash contract").
+//
+// The canonical definition of THIS hash is the kernel's
+// `canonical_package_hash_hex` in Agentlas-OS/agentlas_cloud/runtime.py. This
+// file mirrors it and must produce the same digest for the same folder; the
+// two used to disagree on every input because this copy had no version prefix
+// and skipped only agentlas.json. Keep the three constants below in step with
+// the kernel: PACKAGE_HASH_VERSION, PACKAGE_HASH_EXCLUDED_PATHS, and the
+// experience-lineage rule.
+const PACKAGE_HASH_VERSION = "agentlas-package-hash/v2";
+const LOCAL_EXPERIENCE_LINEAGE_PATH = ".agentlas/experience-relations.jsonl";
+const PACKAGE_HASH_EXCLUDED_PATHS = new Set([
+  "agentlas.json",
+  ".agentlas/brief.json",
+  ".agentlas/security-scan.json",
+  ".agentlas/security-llm-judgment.json",
+  ".agentlas/field-test-report.json",
+  LOCAL_EXPERIENCE_LINEAGE_PATH,
+]);
+
+function isLocalExperienceLineagePath(filePath) {
+  const normalized = String(filePath || "").replaceAll("\\", "/");
+  return (
+    normalized === LOCAL_EXPERIENCE_LINEAGE_PATH ||
+    normalized.startsWith(`${LOCAL_EXPERIENCE_LINEAGE_PATH}.`) ||
+    normalized.startsWith(".agentlas/.experience-relations.jsonl.")
+  );
+}
+
+function packageHashIncludes(filePath) {
+  const normalized = String(filePath || "").replaceAll("\\", "/");
+  return !PACKAGE_HASH_EXCLUDED_PATHS.has(normalized) && !isLocalExperienceLineagePath(normalized);
+}
+
 function hashPackage(files) {
   const h = crypto.createHash("sha256");
-  for (const file of files) {
-    if (file.path === "agentlas.json") continue;
-    h.update(file.path);
+  h.update(PACKAGE_HASH_VERSION);
+  h.update("\0");
+  // Codepoint order, not localeCompare: the kernel sorts by raw string order.
+  const ordered = [...files].sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+  for (const file of ordered) {
+    const normalized = String(file.path || "").replaceAll("\\", "/");
+    if (!packageHashIncludes(normalized)) continue;
+    h.update(normalized);
     h.update("\0");
     h.update(file.content);
     h.update("\0");
@@ -55,9 +100,14 @@ function inferEntry(files) {
   return ["AGENTS.md", "agent.md", "CLAUDE.md", "README.md"].find((candidate) => paths.has(candidate)) || files[0]?.path || "AGENTS.md";
 }
 
+// Skills actually present in the package. An empty result stays empty.
+// A package with no skills used to be given a literal placeholder skill id.
+// Once skills live outside the core that placeholder fires on every modular
+// agent and fills the Workforce index with a skill nobody has.
+// An absent value is an empty list, never a stand-in.
 function inferSkills(files) {
   const skills = files.map((file) => file.path.match(/(?:^|\/)skills\/([^/]+)\/SKILL\.md$/)?.[1]).filter(Boolean);
-  return [...new Set(skills)].sort().length ? [...new Set(skills)].sort() : ["agentlas-package"];
+  return [...new Set(skills)].sort();
 }
 
 function buildManifest(root, options = {}) {

package/engine/agentlas-i18n.cjs

@@ -74,7 +74,6 @@ const STRINGS = {
     "effortUsage": "usage: /effort low|medium|high|max|off|auto",
     "permSet": "permission → %s",
     "permUsage": "usage: /permission read|write|full",
-    "legacyNetworkUsage": "usage: /legacy-network <request>",
     "stormUsage": "usage: /storm <goal> [--research]",
     "buildUsage": "usage: /build <agent-or-team request>",
     "routeUsage": "usage: /route <request> [--json]",
@@ -190,7 +189,6 @@ const STRINGS = {
     "help.search": "discover agents in the Hub",
     "help.install": "install an agent from the Hub by slug",
     "help.network": "let the host LLM staff and execute an ontology-grounded exact-release task force",
-    "help.legacyNetwork": "run the explicit compatibility-only Hephaestus network route",
     "help.browser": "real browser execution hardpoint",
     "help.connect": "wire Telegram / platforms to an agent team",
     "help.swarm": "fan out an emergent agent swarm on a goal",
@@ -251,6 +249,8 @@ const STRINGS = {
     "wiz.runtimeAuto": "Use the app's active runtime",
     "wiz.runtimeInstalled": "installed",
     "wiz.runtimeMissing": "not installed",
+    "wiz.runtimeInstallHint": "This runtime is not installed yet. Install it first: %s",
+    "wiz.runtimeLoginHint": "No local sign-in evidence for this runtime. Sign in before your first run (run: %s, then follow its login flow).",
     "wiz.permQ": "How much should agents be allowed to do by default?",
     "wiz.permRead": "read — inspect only; workspace writes blocked",
     "wiz.permWrite": "write — workspace + runtime temp writes; external MCP off (recommended)",
@@ -323,7 +323,6 @@ const STRINGS = {
     "effortUsage": "사용법: /effort low|medium|high|max|off|auto",
     "permSet": "권한 → %s",
     "permUsage": "사용법: /permission read|write|full",
-    "legacyNetworkUsage": "사용법: /legacy-network <요청>",
     "stormUsage": "사용법: /storm <목표> [--research]",
     "buildUsage": "사용법: /build <만들 에이전트·팀 설명>",
     "routeUsage": "사용법: /route <요청> [--json]",
@@ -438,7 +437,6 @@ const STRINGS = {
     "help.search": "Hub에서 에이전트 발견",
     "help.install": "식별자로 Hub 에이전트 설치",
     "help.network": "상위 LLM이 온톨로지에서 정확한 릴리스 TF를 선발·실행",
-    "help.legacyNetwork": "호환성 전용 Hephaestus 네트워크 경로를 명시적으로 실행",
     "help.browser": "실제 브라우저 실행 하드포인트",
     "help.connect": "Telegram/플랫폼을 에이전트 팀에 연결",
     "help.swarm": "목표에 창발형 에이전트 스웜 전개",
@@ -497,6 +495,8 @@ const STRINGS = {
     "wiz.runtimeAuto": "앱의 활성 런타임 사용",
     "wiz.runtimeInstalled": "설치됨",
     "wiz.runtimeMissing": "미설치",
+    "wiz.runtimeInstallHint": "이 런타임은 아직 설치되어 있지 않습니다. 먼저 설치하세요: %s",
+    "wiz.runtimeLoginHint": "이 런타임의 로그인 흔적이 없습니다. 첫 실행 전에 로그인하세요 (%s 실행 후 로그인 절차 진행).",
     "wiz.permQ": "에이전트가 기본적으로 어디까지 할 수 있게 할까요?",
     "wiz.permRead": "read — 조회만; 작업 공간 쓰기 차단",
     "wiz.permWrite": "write — 작업 공간·런타임 임시 경로 쓰기; 외부 MCP 꺼짐 (권장)",

package/engine/agentlas-input.cjs

@@ -300,7 +300,6 @@ const SLASH_COMMAND_META = [
   { command: "/search", description: "Discover agents in the Hub", category: "Hub", usage: "/search <what you need>", detail: "Search the Agentlas Hub + local for an agent that fits the task (hep-search)." },
   { command: "/install", description: "Install an agent from the Hub by slug", category: "Hub", usage: "/install <slug>", detail: "Install a marketplace agent into this terminal." },
   { command: "/network", description: "Staff and execute an ontology-grounded task force", category: "Engine", usage: "/network <request> [--benchmark]", detail: "The active top host LLM creates the work order, searches the Hub workforce ontology, selects exact releases, and executes a receipt-backed task force.", aliases: ["/taskforce", "/workforce"] },
-  { command: "/legacy-network", description: "Run the compatibility Hephaestus network route", category: "Engine", usage: "/legacy-network <request>", detail: "Explicit compatibility escape hatch; never used as a fallback by /network." },
   { command: "/browser", description: "Real browser execution hardpoint", category: "Engine", usage: "/browser [sub]", detail: "Runs the Agentlas browser hardpoint (hep-browser)." },
   { command: "/connect", description: "Wire Telegram / platforms to an agent team", category: "Hub", usage: "/connect", detail: "Runs Hephaestus hep-connect for platform integration." },
   { command: "/doctor", description: "Check runtimes and local data", category: "Health", usage: "/doctor", detail: "Run local checks for runtimes, data, credentials, and setup." },
@@ -351,7 +350,6 @@ const HELP_KEY_BY_COMMAND = {
   "/research": "help.research",
   "/search": "help.search",
   "/network": "help.network",
-  "/legacy-network": "help.legacyNetwork",
   "/browser": "help.browser",
   "/connect": "help.connect",
   "/doctor": "help.doctor",
@@ -706,7 +704,16 @@ function attachSlashPalette(rl, opts = {}) {
     const list = rows();
     if (!list.length) return false;
     if (state.selected < 0 || state.selected >= list.length) state.selected = 0;
-    state.selectedCommand = list[state.selected].command;
+    const row = list[state.selected];
+    /*
+     * 인자를 받는 명령은 확정 즉시 스페이스까지 넣는다 (2026-08-06, 레퍼런스
+     * 대조): Tab 후 바로 인자를 타이핑하게 — 스페이스를 손으로 넣는 한 박자가
+     * 모든 인자형 명령에서 반복되는 마찰이었다. 인자 없는 명령(/help 등)은
+     * 그대로 — Enter 로 즉시 실행하는 흐름을 깨지 않는다.
+     */
+    const takesArgs = Boolean(String(row.usage || row.args || "").trim())
+      && String(row.usage || `${row.command} ${row.args || ""}`).trim() !== row.command;
+    state.selectedCommand = row.command + (takesArgs ? " " : "");
     replaceLine(state.selectedCommand);
     clear();
     return true;

package/engine/agentlas-native-host.cjs

@@ -13,6 +13,7 @@
  * 스키마는 실측으로 확인됨 (cli/agentlas.cjs 상단 주석 참고).
  */
 const { execFileSync, spawn } = require("node:child_process");
+const { detectRuntimeRefusal } = require("./runtime-refusal.cjs");
 const crypto = require("node:crypto");
 const fs = require("node:fs");
 const os = require("node:os");
@@ -421,11 +422,26 @@ function handleClaudeLine(line, st, ui) {
         cost_usd: obj.total_cost_usd,
         duration_ms: obj.duration_ms,
       };
-      if (obj.is_error) st.error = obj.result || "claude error";
+      if (obj.is_error) {
+        st.error = obj.result || "claude error";
+        // api_error_status:429·error:"rate_limit"이 실려 오는 실측 형태 — 한도는 quota.
+        st.errorKind = obj.api_error_status === 429 || obj.terminal_reason === "api_error"
+          ? "quota" : "exit";
+        st.errorSource = "marker";
+      }
       return;
     case "rate_limit_event":
+      /*
+       * ★한도 거절은 **표식이다** — 경고만 찍고 버리면 안 된다.
+       * 실측(2026-08-06): 이 이벤트가 왔는데도 error가 비어 있어, 뒤따르는 거절문
+       * ("You've hit your weekly limit")이 정상 답으로 세어졌다. 살아 있는 다른
+       * 런타임으로 폴백이 안 걸린 진범. status:rejected면 그 자체로 실패다.
+       */
       if (obj.rate_limit_info && obj.rate_limit_info.status === "rejected") {
         ui.warn(uiText(ui, "runtime.rateLimit", "Claude"));
+        if (!st.error) st.error = "claude rate limit rejected";
+        st.errorKind = "quota";
+        st.errorSource = "marker";
       }
       return;
     default:
@@ -501,6 +517,8 @@ function handleCodexLine(line, st, ui) {
     case "turn.failed":
     case "error":
       st.error = (obj.error && (obj.error.message || obj.error)) || "codex error";
+      st.errorKind = "exit";
+      st.errorSource = "marker";
       ui.error(String(st.error));
       st.errorShown = true;
       return;
@@ -756,9 +774,24 @@ function handleGeminiLine(line, st, ui) {
         duration_ms: s.duration_ms,
       };
       st.finalText = st.text;
-      if (obj.status && obj.status !== "success") st.error = `gemini ${obj.status}`;
+      // error 이벤트가 이미 구체 사유를 남겼으면 뭉뚱그린 상태 문자열로 덮지 않는다.
+      if (obj.status && obj.status !== "success" && !st.error) {
+        st.error = `gemini ${obj.status}`;
+        st.errorKind = "exit";
+        st.errorSource = "marker";
+      }
       return;
     }
+    case "error":
+      /*
+       * ★프로토콜이 선언하는 이벤트인데 핸들러가 없어 조용히 버려졌다
+       * (capture.cjs는 목록에 적어 두고도 안 읽었다). 인증 실패("IneligibleTierError")
+       * 같은 것이 여기로 온다 — 버리면 빈 성공이 된다.
+       */
+      st.error = (obj.error && (obj.error.message || obj.error)) || "gemini error";
+      st.errorKind = /auth|login|credential|tier|eligib/i.test(String(st.error)) ? "auth" : "exit";
+      st.errorSource = "marker";
+      return;
     default:
       return;
   }
@@ -806,8 +839,20 @@ function runNativeTurn(req) {
     } else if (kind === "gemini") {
       args = geminiArgs(launchReq);
       lineHandler = (l) => handleGeminiLine(l, st, ui);
+    } else if (kind === "agy") {
+      /*
+       * Antigravity CLI — stream-json이 없다(실측 1.1.10). 평문 stdout을 그대로 텍스트로.
+       * ★--prompt는 값 플래그가 아니라 --print의 별칭이다(실측: 프롬프트가 조용히 유실됐던
+       * 사고) — 프롬프트는 반드시 위치 인자로 넘긴다. 시스템 프롬프트는 본문에 앞세운다.
+       */
+      const agyPrompt = launchReq.systemPrompt
+        ? `${launchReq.systemPrompt}\n\n---\n\n${launchReq.prompt}`
+        : launchReq.prompt;
+      args = ["--print", agyPrompt, ...(launchReq.model ? ["--model", launchReq.model] : [])];
+      plainStream = true;
+      lineHandler = null;
     } else {
-      return Promise.resolve({ text: "", session: st.session, error: `unknown runtime: ${kind}` });
+      return Promise.resolve({ text: "", session: st.session, error: `unknown runtime: ${kind}`, errorKind: "unsupported", errorSource: "marker" });
     }
   } catch (error) {
     const message = error && error.message ? error.message : String(error);
@@ -883,6 +928,8 @@ function runNativeTurn(req) {
         session: st.session,
         usage: st.usage,
         error: termination ? termination.message : "native runtime stopped",
+        errorKind: "timeout",
+        errorSource: "marker",
         terminationVerified: Boolean(termination?.verified),
       });
     };
@@ -976,13 +1023,31 @@ function runNativeTurn(req) {
       ui.stopSpinner();
       const text = (st.finalText || st.text || "").trim();
       if (st.usage) ui.cost(st.usage);
+      /*
+       * ★표식 없이 완주했는데 산출물이 거절 고지문인 경우 — 실측: codex 한도는
+       * 거절문이 agent_message로 오고 turn.completed로 끝난다(표식 0, exit 0).
+       * 이 한 자리에서만 텍스트 판별을 허용하고, 출처를 heuristic으로 남긴다
+       * (판별 규칙은 runtime-refusal.cjs 한 곳 — 여기서 정규식을 다시 쓰지 않는다).
+       */
+      if (code === 0 && !st.error) {
+        const refusal = detectRuntimeRefusal(text);
+        if (refusal) {
+          st.error = refusal.message;
+          st.errorKind = refusal.kind;
+          st.errorSource = "heuristic";
+        }
+      }
       const exitError = code === 0
         ? st.error
         : st.error || [
             `${kind} exited with code ${code == null ? "unknown" : code}`,
             stripAnsi(stderrBuf).slice(-4000),
           ].filter(Boolean).join("\n");
-      finish({ text, session: st.session, usage: st.usage, error: exitError });
+      if (exitError && !st.errorKind) { st.errorKind = "exit"; st.errorSource = st.errorSource || "exit"; }
+      finish({
+        text, session: st.session, usage: st.usage, error: exitError,
+        ...(exitError ? { errorKind: st.errorKind, errorSource: st.errorSource } : {}),
+      });
     });
 
     armIdle();

package/engine/agentlas-onboard.cjs

@@ -142,6 +142,26 @@ async function runOnboard({ ui, rl, helpers, persist }) {
   rtOpts.forEach((o, i) => optionLine(i + 1, o.label, i === 0));
   const ri = await pickNum(rtOpts.length);
   const runtime = rtOpts[ri - 1].value;
+  // missing인 런타임을 골라도 저장은 한다(미리 설정) — 하지만 조용히 저장하면
+  // 첫 실행 실패가 배신이 된다(2026-08-05 감사 결함 A). 설치 명령을 그 자리에서
+  // 알려주고, 로그인 흔적이 없으면 로그인 절차까지 말한다.
+  if (runtime !== "auto") {
+    const installHint = {
+      "claude-code": "npm i -g @anthropic-ai/claude-code",
+      codex: "npm i -g @openai/codex",
+      gemini: "npm i -g @google/gemini-cli",
+    }[runtime];
+    if (!H.which(H.RUNTIME_BIN[runtime])) {
+      if (installHint) printIndented(ui.t("wiz.runtimeInstallHint", installHint), c.dim);
+    } else {
+      try {
+        const { runtimeAuthEvidence } = require("./runtimes/auth-evidence.cjs");
+        if (runtimeAuthEvidence(runtime).status === "none") {
+          printIndented(ui.t("wiz.runtimeLoginHint", H.RUNTIME_BIN[runtime]), c.dim);
+        }
+      } catch { /* evidence unavailable — say nothing rather than guess */ }
+    }
+  }
 
   // Step 3 — default permission
   ui.line("");

package/engine/agentlas-ui.cjs

@@ -15,6 +15,8 @@ const RESET = "\x1b[0m";
 
 function colorEnabled() {
   if (process.env.NO_COLOR != null && process.env.NO_COLOR !== "") return false;
+  // clig.dev: TERM=dumb 인 터미널(에디터 내장 셸, 일부 CI)은 ANSI를 렌더하지 못한다.
+  if (process.env.TERM === "dumb") return false;
   if (process.env.FORCE_COLOR === "1" || process.env.FORCE_COLOR === "true") return true;
   if (process.env.AGENTLAS_NO_COLOR === "1") return false;
   return !!process.stdout.isTTY;