agentlas 1.0.45 → 1.0.47

package/engine/runtimes/resolve.cjs

@@ -6,6 +6,7 @@
  * 아무것도 없으면 no_runtime "정직 정지" — 키워드/저품질 폴백 금지(오너 결정).
  */
 const { RUNTIME_BIN, whichSync, listAvailableCliRuntimes, activeRuntimeRow } = require("./detect.cjs");
+const path = require("node:path");
 
 // Session이 실제 드라이버를 갖춘 런타임만 실행 대상으로 삼는다.
 // CLI는 native-host, Ollama는 로컬 API loop를 쓴다. 다른 드라이버가 포팅되면
@@ -27,6 +28,16 @@ function apiRuntime(kind, model, source) {
   };
 }
 
+function sharedRuntimeKind(row) {
+  if (!row) return null;
+  // Desktop historically stored Antigravity as kind=gemini with the actual
+  // selected executable in source. Preserve the selected product surface;
+  // never discard `agy` and silently fall through to Gemini or another CLI.
+  const selectedBin = path.posix.basename(path.win32.basename(String(row.source || ""))).toLowerCase();
+  if (row.kind === "gemini" && /^agy(?:\.exe|\.cmd)?$/i.test(selectedBin)) return "agy";
+  return row.kind;
+}
+
 class NoRuntimeError extends Error {
   constructor(message) {
     super(message);
@@ -61,12 +72,19 @@ function resolveRuntime({ db, prefs, explicit }) {
   }
   if (db) {
     const active = activeRuntimeRow(db);
-    if (active && API_EXECUTABLE_KINDS.has(active.kind)) {
-      return apiRuntime(active.kind, active.model || undefined, "active");
+    const activeKind = sharedRuntimeKind(active);
+    if (active && API_EXECUTABLE_KINDS.has(activeKind)) {
+      return apiRuntime(activeKind, active.model || undefined, "active");
     }
-    if (active && CLI_EXECUTABLE_KINDS.has(active.kind)) {
-      const p = whichSync(RUNTIME_BIN[active.kind]);
-      if (p) return { kind: active.kind, bin: p, model: active.model || undefined, source: "active" };
+    if (active && CLI_EXECUTABLE_KINDS.has(activeKind)) {
+      const p = whichSync(RUNTIME_BIN[activeKind]);
+      if (p) return {
+        kind: activeKind,
+        bin: p,
+        model: active.model || undefined,
+        source: "active",
+        runtimeSource: active.source || undefined,
+      };
     }
   }
   const found = listAvailableCliRuntimes().filter((r) => CLI_EXECUTABLE_KINDS.has(r.kind));
@@ -76,10 +94,11 @@ function resolveRuntime({ db, prefs, explicit }) {
   throw new NoRuntimeError([
     "no_runtime: no agent CLI is connected — Agentlas runs your agents on a CLI you already subscribe to.",
     "",
-    "Install one, then rerun:",
+    "Connect or install one, then rerun:",
+    "  agy                                      # Antigravity CLI (preferred)",
     "  npm i -g @anthropic-ai/claude-code    # Claude Code",
     "  npm i -g @openai/codex                # Codex CLI",
-    "  npm i -g @google/gemini-cli           # Gemini CLI",
+    "  npm i -g @google/gemini-cli           # Gemini CLI (legacy)",
     "",
     "Already installed? Make sure its binary is on PATH (agentlas doctor shows what was detected).",
   ].join("\n"));
@@ -91,4 +110,5 @@ module.exports = {
   EXECUTABLE_KINDS,
   CLI_EXECUTABLE_KINDS,
   API_EXECUTABLE_KINDS,
+  sharedRuntimeKind,
 };

package/engine/sessions/prompt.cjs

@@ -18,7 +18,7 @@ const { loadArch, tableExists, columnExists } = require("../core/db.cjs");
 const { userDataDir } = require("../core/paths.cjs");
 const { responseDirective } = require("../agentlas-style.cjs");
 const memoryGovernance = require("../agentlas-memory-governance.cjs");
-const { resolveCoreRuntimeRoot, captureCoreJsonSync } = require("../agentlas-core-harness.cjs");
+const { resolveContextMapCoreRoot, captureCoreJsonSync } = require("../agentlas-core-harness.cjs");
 
 const TERMINAL_MEMORY_CORE_MAX_TOKENS = 150;
 const TERMINAL_MEMORY_CORE = [
@@ -99,7 +99,7 @@ const { ensureMemoryContextColumn } = require("../core/schema-ensure.cjs");
 function cliProjectContextSlice(projectPath, task) {
   if (!projectPath || !String(task || "").trim()) return "";
   try {
-    const coreRoot = resolveCoreRuntimeRoot();
+    const coreRoot = resolveContextMapCoreRoot();
     if (!coreRoot) return "";
     const result = captureCoreJsonSync(
       "agentlas_cloud",

package/engine/ui/palette.cjs

@@ -28,7 +28,7 @@ const SLASH_COMMANDS = catalog.forSurface("repl").map((entry) => ({
 }));
 
 const SLASH_NAMES = SLASH_COMMANDS.map((c) => c.command);
-const RUNTIME_KINDS = ["claude-code", "codex", "gemini"];
+const RUNTIME_KINDS = ["claude-code", "codex", "agy", "gemini"];
 const EFFORT_LEVELS = ["none", "minimal", "low", "medium", "high", "xhigh", "max"];
 const PERM_LEVELS = ["read", "write", "full"];
 // 세션 인자를 받는 명령 — 완성 후보를 살아있는 세션 키(s1, s2…)로 채운다.

package/engine/ui/repl.cjs

@@ -741,7 +741,7 @@ function handleSlash(ctx, cmdline, api) {
     }
 
     case "runtime": {
-      if (!rest[0]) throw usageError("Usage: /runtime claude-code|codex|gemini");
+      if (!rest[0]) throw usageError("Usage: /runtime claude-code|codex|agy|gemini");
       // 세션 오버라이드는 저장되지 않는다 — 고지 없이는 사용자가 영구 설정으로
       // 믿는다(2026-08-05 감사 결함 C). 영구 경로를 같은 줄에서 알려준다.
       api.setRuntime(rest[0]);
@@ -774,7 +774,7 @@ function handleSlash(ctx, cmdline, api) {
       return;
     }
     case "permission": {
-      if (!["read", "write", "full"].includes(String(rest[0] || ""))) {
+      if (!permissions.isLevel(rest[0])) {
         throw usageError("Usage: /permission read|write|full");
       }
       const level = permissions.normalize(rest[0]);

package/engine/ui/shell.cjs

@@ -202,6 +202,8 @@ async function startShell(ctx, opts = {}) {
   // ctx 초크포인트 재지정 — 55파일의 ctx.out 직출력이 전부 프레임 안으로 들어온다.
   const shellCtx = {
     ...ctx,
+    // 명령이 "지금 사용자가 어디에 서 있는지"를 알아야 안내를 옳게 쓴다.
+    surface: "shell",
     uiInstance: ui,
     out: (s = "") => ui.line(String(s)),
     err: (s = "") => ui.line(ui.c.amber(String(s))),
@@ -295,6 +297,38 @@ async function startShell(ctx, opts = {}) {
     onMessage: (msg) => { ui.ensureNl(); ui.line(ui.c.dim(msg.text)); },
   });
 
+  /*
+   * 목록 피커 — 슬러그를 손으로 받아치게 하지 않는다(오너 지적).
+   * SelectList 는 Focusable 이 아니라 포커스로는 키가 안 온다(Loader 와 같은 함정) —
+   * 전역 리스너에서 직접 forward 하고, 뜨는 동안 에디터 입력을 막는다.
+   */
+  let activePicker = null;
+  function pick(items, opts = {}) {
+    return new Promise((resolve) => {
+      if (!items.length) { resolve(null); return; }
+      ui.ensureNl();
+      if (opts.title) ui.line(ui.c.bold(opts.title));
+      ui.line(ui.c.dim(en
+        ? "↑/↓ choose · Enter confirm · Esc cancel"
+        : "↑/↓ 이동 · Enter 선택 · Esc 취소"));
+      const list = new pi.SelectList(items, Math.min(10, items.length), editorTheme.selectList, {});
+      const finish = (value) => {
+        if (activePicker !== list) return;
+        activePicker = null;
+        bottom.removeChild(list);
+        tui.setFocus(editor);
+        tui.requestRender();
+        resolve(value);
+      };
+      list.onSelect = (item) => finish(item);
+      list.onCancel = () => finish(null);
+      activePicker = list;
+      bottom.addChild(list);
+      tui.setFocus(null);
+      tui.requestRender();
+    });
+  }
+
   const commands = require("../commands/index.cjs");
   const handleSlash = async (cmdline) => {
     const raw = cmdline.split(/\s+/)[0] || "";
@@ -339,6 +373,69 @@ async function startShell(ctx, opts = {}) {
         } catch { /* 렌더 실패 → 아래 클래식 폴스루가 텍스트로 보여준다 */ }
       }
     }
+    /*
+     * /search — 결과를 목록으로 띄우고 방향키로 고른다. 슬러그를 손으로 받아치게
+     * 하지 않는다(오너 지적). 고르면 바로 설치까지 간다.
+     *
+     * kind 는 서버 열거값을 그대로 보여주지 않는다. "cloud-callable" 은 사용자에게
+     * "설치 안 해도 바로 부를 수 있음"이라는 뜻이지, 설치가 안 된다는 뜻이 아니다.
+     */
+    if (cmd === "search" && rest.length) {
+      const query = rest.join(" ");
+      const { callHubTool, HubError } = require("../cloud/hub-client.cjs");
+      let result;
+      ui.updateSpinner(en ? "Searching the Hub…" : "Hub 검색 중…");
+      try {
+        result = await callHubTool("marketplace.search_agents", { q: query, limit: 12 });
+      } catch (e) {
+        ui.stopSpinner();
+        ui.error(Object.assign(new Error(e instanceof HubError ? e.message : String((e && e.message) || e)),
+          { code: "hub_search_failed", honestStop: true }));
+        return;
+      }
+      ui.stopSpinner();
+      const raw = (result && (result.results || result.agents || result.items)) || (Array.isArray(result) ? result : []);
+      const hidden = (slug) => /^researcher-\d+/.test(String(slug || "").toLowerCase())
+        || String(slug || "").toLowerCase().startsWith("hephaestus-");
+      const rows = (Array.isArray(raw) ? raw : []).filter((it) => !hidden(it && (it.slug || it.id)));
+      if (!rows.length) { ui.line(ui.c.dim(en ? `No results for "${query}"` : `"${query}" 결과 없음`)); return; }
+      const callable = (k) => (String(k || "").includes("cloud")
+        ? (en ? "callable without installing" : "설치 없이 호출 가능")
+        : (en ? "install to use" : "설치해야 사용"));
+      const chosen = await pick(rows.map((it) => ({
+        value: it.slug || it.id || "?",
+        label: `${it.slug || it.id}`,
+        description: `${it.name || it.title || ""} — ${callable(it.kind || it.entity_kind)}`,
+      })), { title: en ? `Hub results for "${query}"` : `"${query}" Hub 결과` });
+      if (!chosen) { ui.line(ui.c.dim(en ? "cancelled" : "취소됨")); return; }
+      ui.line(ui.c.dim(en ? `installing ${chosen.value}…` : `${chosen.value} 설치 중…`));
+      await commands.COMMANDS.install().run(shellCtx, [chosen.value]);
+      return;
+    }
+
+    /*
+     * /graph — 저장된 그래프를 목록으로 띄우고 고른 것을 실행한다.
+     * (저장 테이블 이름은 automations 이지만 이 화면이 다루는 건 그래프다.)
+     */
+    if (cmd === "graph" && (!rest.length || rest[0] === "list")) {
+      const rowsOf = db.prepare("SELECT name, enabled, schedule, graph_json FROM automations ORDER BY name").all();
+      const graphs = rowsOf.filter((r) => r.graph_json);
+      if (!graphs.length) { ui.line(ui.c.dim(en ? "No saved graphs yet." : "저장된 그래프가 없습니다.")); return; }
+      const chosen = await pick(graphs.map((g) => {
+        let steps = 0;
+        try { steps = (JSON.parse(g.graph_json).nodes || []).length; } catch { steps = 0; }
+        return {
+          value: g.name,
+          label: g.name,
+          description: `${steps} ${en ? "steps" : "단계"} · ${g.enabled ? (en ? "on" : "켜짐") : (en ? "off" : "꺼짐")}`
+            + (g.schedule ? ` · ${g.schedule}` : ""),
+        };
+      }), { title: en ? "Saved graphs" : "저장된 그래프" });
+      if (!chosen) { ui.line(ui.c.dim(en ? "cancelled" : "취소됨")); return; }
+      await commands.COMMANDS.graph().run(shellCtx, ["run", chosen.value]);
+      return;
+    }
+
     /*
      * 세션 설정 4종. 자동완성은 되는데 처리 case 가 없어 "여기서는 아직 안 됩니다"만
      * 답하던 죽은 광고였다(신설 게이트가 잡았다). 기본 REPL 과 같은 의미로 배선하고,
@@ -352,8 +449,11 @@ async function startShell(ctx, opts = {}) {
         return;
       }
       if (cmd === "permission") {
+        if (!permissions.isLevel(value)) {
+          ui.line(ui.c.dim("Usage: /permission read|write|full"));
+          return;
+        }
         const next = permissions.normalize(value);
-        if (!next) { ui.line(ui.c.dim("Usage: /permission read|write|full")); return; }
         permission = next;
         ui.line(ui.c.dim(`permission: ${next}  ·  ${en ? "persist: agentlas setup" : "영구 저장: agentlas setup"}`));
         return;
@@ -474,6 +574,13 @@ async function startShell(ctx, opts = {}) {
   };
 
   tui.addInputListener((data) => {
+    // 피커가 떠 있으면 그 키는 피커 것이다 — 에디터로 새면 목록 위에서 글이 써진다.
+    if (activePicker) {
+      if (pi.matchesKey(data, "escape")) { activePicker.onCancel && activePicker.onCancel(); return { handled: true }; }
+      activePicker.handleInput(data);
+      tui.requestRender();
+      return { handled: true };
+    }
     // Shift-Tab 권한 순환 — 렌더러가 raw mode 를 단독 소유하므로 readline 의
     // swallowCompletion 우회 없이 여기서 직접 소비한다 (D2 위험 2의 해소 형태).
     if (pi.matchesKey(data, "shift+tab")) {

package/engine/workforce/capture.cjs

@@ -29,6 +29,7 @@ const { dbPath, userDataDir } = require("../core/paths.cjs");
 const RUNTIME_BIN = {
   "claude-code": "claude",
   codex: "codex",
+  agy: "agy",
   gemini: "gemini",
 };
 
@@ -198,6 +199,14 @@ function buildArgs(kind, systemPrompt, prompt, permission, runtimeOptions = {})
     const mcp = native.geminiMcpIsolationArgs();
     return ["--prompt", `[SYSTEM]\n${systemPrompt}\n\n${prompt}`, ...(model ? ["-m", model] : []), ...perm, ...noAuthorityArgs, ...mcp];
   }
+  if (kind === "agy") {
+    return native.agyArgs({
+      prompt,
+      systemPrompt,
+      permission: noAuthority ? "read" : level,
+      model,
+    });
+  }
   return [prompt];
 }
 
@@ -287,6 +296,7 @@ function capturedRuntimeUsage(kind, raw) {
     }
     const direct =
       genericUsage(event?.usage) ||
+      genericUsage(event?.step_update?.usage) ||
       genericUsage(event?.usageMetadata) ||
       genericUsage(event?.stats);
     if (direct) return direct;
@@ -346,6 +356,12 @@ function capturedRuntimeFailure(kind, raw, text) {
         return { message: `gemini ${event.status}`, source: "marker" };
       }
     }
+    if (kind === "agy" && event.event === "result") {
+      const status = String(event.result?.status || "").toLowerCase();
+      if (status && !["success", "completed", "done"].includes(status)) {
+        return { message: `agy ${status}`, source: "marker" };
+      }
+    }
   }
   // 표식이 전혀 없는 케이스(codex 한도) — 휴리스틱 최후 그물, 출처 표기.
   const refusal = detectRuntimeRefusal(text);
@@ -399,6 +415,21 @@ function capturedRuntimeAgentText(kind, raw) {
     return final ? String(final.result ?? final.response) : "";
   }
 
+  if (kind === "agy") {
+    const isProtocol = events.some((event) =>
+      event?.event === "step_update" || event?.event === "result",
+    );
+    if (!isProtocol) return text.trim();
+    const final = [...events].reverse().find((event) =>
+      event?.event === "result" && typeof event.result?.response === "string",
+    );
+    if (final) return final.result.response;
+    return events
+      .filter((event) => event?.event === "step_update" && event.step_update?.step_type === "agent_response")
+      .map((event) => typeof event.step_update?.text_delta === "string" ? event.step_update.text_delta : "")
+      .join("");
+  }
+
   return text.trim();
 }
 
@@ -423,6 +454,7 @@ function captureRuntime(kind, systemPrompt, prompt, opts) {
     // 계약 테스트용 실행 파일 주입(가짜 CLI가 픽스처를 cat) — 프로덕션 경로에선 없음.
     const bin = opts.binOverride || which(RUNTIME_BIN[kind]) || RUNTIME_BIN[kind];
     let child;
+    let launchCleanup = () => {};
     try {
       const spawnImpl = opts.spawn || spawn;
       const env = nativeHost.runtimeEnvForKind(kind, opts.env || process.env, {
@@ -431,13 +463,28 @@ function captureRuntime(kind, systemPrompt, prompt, opts) {
         mcpAllowlistMode: kind === "gemini" ? "exact" : undefined,
       });
       const groupedChild = process.platform !== "win32" && spawnImpl === spawn;
-      child = spawnImpl(bin, buildArgs(kind, systemPrompt, prompt, opts.permission, {
+      const runtimeOptions = {
         model: opts.model,
         effort: opts.effort,
         authorityMode: opts.authorityMode,
         noToolsPolicyPath: opts.noToolsPolicyPath,
         allowedNativeTools: opts.allowedNativeTools,
-      }), {
+      };
+      let childArgs = buildArgs(kind, systemPrompt, prompt, opts.permission, runtimeOptions);
+      if (kind === "agy") {
+        const prepared = nativeHost.prepareAgyLaunch({
+          prompt,
+          systemPrompt,
+          permission: opts.authorityMode === "no-authority" ? "read" : opts.permission,
+          model: opts.model,
+        }, {
+          platform: opts.platform,
+          promptLimit: opts.agyPromptLimit,
+        });
+        childArgs = prepared.args;
+        launchCleanup = prepared.cleanup;
+      }
+      child = spawnImpl(bin, childArgs, {
         cwd,
         stdio: ["ignore", "pipe", "pipe"],
         env,
@@ -446,6 +493,7 @@ function captureRuntime(kind, systemPrompt, prompt, opts) {
       });
       child.__agentlasGroupedChild = groupedChild;
     } catch (error) {
+      launchCleanup();
       reject(error);
       return;
     }
@@ -479,6 +527,7 @@ function captureRuntime(kind, systemPrompt, prompt, opts) {
       child.removeListener("error", onError);
       child.removeListener("close", onClose);
       if (opts.signal) opts.signal.removeEventListener?.("abort", onAbort);
+      launchCleanup();
     };
     const finishReject = (error) => {
       if (settled) return;
@@ -562,7 +611,7 @@ function captureRuntime(kind, systemPrompt, prompt, opts) {
       let text;
       if (kind === "codex" && opts.authorityMode === "no-authority") {
         text = codexCaptureAgentText(raw);
-      } else if (kind === "claude-code" || kind === "gemini") {
+      } else if (kind === "claude-code" || kind === "gemini" || kind === "agy") {
         text = capturedRuntimeAgentText(kind, raw);
       } else {
         text = raw;

package/engine/workforce/deps.cjs

@@ -109,7 +109,7 @@ function legacyWorkforceRuntime(db, override) {
     }
   }
   const error = new Error(
-    "no_runtime: no agent CLI or connected API runtime found (claude / codex / gemini / BYOK / Ollama).",
+    "no_runtime: no agent CLI or connected API runtime found (claude / codex / Antigravity agy / legacy gemini / BYOK / Ollama).",
   );
   error.code = "no_runtime";
   throw error;
@@ -513,7 +513,7 @@ function projectContextSlice(projectPath, task) {
   if (!projectPath || !String(task || "").trim()) return "";
   try {
     const core = coreHarness();
-    const coreRoot = core.resolveCoreRuntimeRoot();
+    const coreRoot = core.resolveContextMapCoreRoot();
     if (!coreRoot) return "";
     const result = core.captureCoreJsonSync(
       "agentlas_cloud",

package/engine/workforce/local-core-transport.cjs

@@ -7,16 +7,14 @@
  *   search_candidates  요청 {workOrder, sourceScope}
  *                      응답 agentlas.workforce-federation-result.v1 봉투
  *                      → 루프에는 봉투를 벗긴 candidateSet만 준다.
- *   validate_selection 요청 {workOrder, selection, candidateSet}
- *                      (federationResult를 실으면 invalid_federation_result —
- *                       Core는 자기 선택 세션에서 연합을 이미 안다)
+ *   validate_selection 요청 {workOrder, selection}
+ *                      (Core는 selectionSessionId로 자기 핀 세션을 복원한다)
  *                      응답 안의 selectionValidation이 정확히
  *                      agentlas.workforce-selection-validation.v1 — 루프 검증기와
  *                      동일 계약이라 그대로 돌려준다. 원본 응답은 여기 상태로
  *                      붙잡아 둔다(prepare가 요구).
- *   prepare_execution  요청 {workOrder, selection, candidateSet,
- *                       federatedSelection: <validate 원본 응답>,
- *                       validationReceipt: <동일>, projectDir}
+ *   prepare_execution  요청 {workOrder, selection,
+ *                       federatedSelection: <validate 원본 응답>, projectDir}
  *                      응답 안의 executionPlan이 정확히
  *                      agentlas.workforce-execution-plan.v5 (roster에
  *                      directiveBundle·permissionPolicy 동봉) — 그대로 돌려준다.
@@ -115,7 +113,7 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
   const core = client || createLocalCoreClient({ cwd: cwd || projectDir });
   // 편성 계보 상태 — 전부 "Core 어휘"(opaque id) 원본이다:
   //   maps: 마지막 search 의 id 지도. 재검색(refinement)마다 재구성된다.
-  //   coreCandidateSet: Core 가 준 원본 CandidateSet (validate/prepare 로 무수정 반송).
+  //   coreCandidateSet: Core 가 준 요약 메뉴. 로컬 계보 확인에만 쓰며 반송하지 않는다.
   //   lastValidationEnvelope: validate 원본 응답. prepare 의 federatedSelection 은
   //     이것이어야 한다 — 루프가 들고 있는 것은 벗겨낸 selectionValidation 뿐이다.
   let maps = { forward: new Map(), reverse: new Map() };
@@ -137,12 +135,11 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
       maps = buildIdMaps(args.workOrder);
       coreCandidateSet = null;
       lastValidationEnvelope = null;
-      // fullDossier: 터미널 루프의 후보 검증기는 legacy full-echo 계약이다
-      // (qualificationEvidence·packageHash·contentDigest 필수 — 실측: 기본
-      // reference-first 메뉴는 candidate_set_invalid 로 거절된다).
+      // Current Core keeps the full dossier in its pinned session and returns a
+      // numbered decision menu. Do not request the legacy full-echo form.
       let envelope;
       try {
-        envelope = await core.call(name, { workOrder: mapDeep(args.workOrder, maps.forward), sourceScope, fullDossier: true });
+        envelope = await core.call(name, { workOrder: mapDeep(args.workOrder, maps.forward), sourceScope });
       } catch (error) {
         // 반응형 정규화(1회): 경계가 지목한 finite 값만 opaque 로 바꿔 재시도.
         const issues = error.code === "work_order_hub_boundary_rejected" ? boundaryIssues(error) : null;
@@ -161,7 +158,7 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
           repaired += 1;
         }
         if (!repaired) throw error;
-        envelope = await core.call(name, { workOrder: mapDeep(args.workOrder, maps.forward), sourceScope, fullDossier: true });
+        envelope = await core.call(name, { workOrder: mapDeep(args.workOrder, maps.forward), sourceScope });
       }
       const candidateSet = envelope && envelope.candidateSet;
       if (!candidateSet || typeof candidateSet !== "object") throw invalid("local Core federation returned no candidateSet");
@@ -174,9 +171,10 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
         error.code = "local_core_lineage_missing";
         throw error;
       }
-      // 루프의 candidateSet(역치환본)과 보관본의 계보 일치를 다이제스트로 확인한다.
-      if (args.candidateSet?.candidateSetDigest !== coreCandidateSet.candidateSetDigest) {
-        throw invalid("candidateSet lineage mismatch between the loop and the local Core session");
+      // The host-authored selection must point at the exact summary menu just
+      // returned. Core independently reloads and verifies the full pinned set.
+      if (args.selection?.candidateSetDigest !== coreCandidateSet.candidateSetDigest) {
+        throw invalid("selection lineage mismatch between the loop and the local Core session");
       }
       let envelope;
       let coreSelection = mapDeep(args.selection, maps.forward);
@@ -184,7 +182,6 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
         envelope = await core.call(name, {
           workOrder: mapDeep(args.workOrder, maps.forward),
           selection: coreSelection,
-          candidateSet: coreCandidateSet,
         });
       } catch (error) {
         /*
@@ -205,7 +202,6 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
         envelope = await core.call(name, {
           workOrder: mapDeep(args.workOrder, maps.forward),
           selection: repairedSelection,
-          candidateSet: coreCandidateSet,
         });
         coreSelection = repairedSelection;
       }
@@ -224,9 +220,7 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
         workOrder: mapDeep(args.workOrder, maps.forward),
         // validate 가 수락한 정확한 본 — 반응형 reasonCode 수리를 반영한다.
         selection: lastCoreSelection || mapDeep(args.selection, maps.forward),
-        candidateSet: coreCandidateSet,
         federatedSelection: lastValidationEnvelope,
-        validationReceipt: lastValidationEnvelope,
         projectDir,
       });
       if (!envelope || typeof envelope.executionPlan !== "object") throw invalid("local Core preparation returned no executionPlan");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlas",
-  "version": "1.0.45",
+  "version": "1.0.47",
   "description": "Agentlas project terminal — run project controllers and task-scoped agent teams from the terminal. Standalone: no desktop app process required.",
   "bin": {
     "agentlas": "bin/agentlas.cjs"