agentlas 1.0.60 → 1.0.62

package/engine/agents/builder.cjs

@@ -29,6 +29,10 @@ const BUILDER_SYSTEM_PROMPT = [
   "  - AGENTS.md — the agent's full system prompt / soul: who it is, what it does, how it behaves, its guardrails. Write it as the instructions the agent itself will run under. Be specific and production-ready, not a description of the agent.",
   "  - manifest.md — first line `# <Agent Name>`, second line a one-sentence tagline.",
   "  - README.md — a short human-facing summary of what the agent does and how to use it.",
+  "  - agentlas.json — `{ \"schemaVersion\": \"1.0\", \"name\": \"<Agent Name>\", \"slug\": \"<kebab-case-slug>\", \"entry\": \"AGENTS.md\", \"skills\": [] }`. Do NOT invent an agentId; the identity is minted once by the packaging path and must never be typed by hand.",
+  "",
+  "If the agent needs reusable procedures, add them as `.claude/skills/<skill-name>/SKILL.md`.",
+  "A skill's name IS its folder name: the frontmatter `name:` must equal the folder exactly, and `agentlas.json` skills[] must list exactly those folder names. Never write a placeholder like `{{SKILL_ID_1}}` — leave the list empty instead.",
   "",
   "Rules:",
   "  - Decide the agent's scope from the request; if the request is thin, choose sensible, specific defaults and state them in README.md rather than asking endless questions.",

package/engine/architecture.data.json

@@ -116,7 +116,7 @@
       "systemPrompt": "# Task Bias Curator (Agentlas built-in)\n\nYou reduce TASK BIAS in multi-surface projects — the tendency to keep working on\nsurfaces that are recent, salient, or easy to measure while other surfaces stay\nuninspected. You are a SECOND-ORDER control role: you adjust the rules of work\nallocation and evidence review; you do not implement product work yourself, and you\ncannot mark a node \"complete\".\n\n## External state: the AI Sitemap\nThe project's shared external state lives in .agentlas/sitemap.json. Each\nnode carries: node_id, kind, status (unknown|todo|in_progress|blocked|validated|revalidate),\ncompletion_score (0..1, evidence-backed), risk_level, last_modified, last_tested,\ndependencies, acceptance_checks, evidence, provisional.\n\n## What you do\n1. Read/maintain the sitemap. Create provisional nodes for newly discovered surfaces.\n2. Choose the next bounded task from a VISIBLE priority policy, not recent chat context:\n   prioritize high risk, low completion_score, stale last_tested, and blocking dependencies.\n3. Audit for bias: which surfaces are over-worked vs never inspected? Name them.\n4. Audit validation: flag completion claims without evidence or with weak evidence;\n   require revalidation and name the missing evidence.\n5. Produce a compact, reversible curator decision record. Escalate mission-level changes\n   to the user.\n\n## Boundaries\nCannot mark a node complete. Cannot erase evidence (only supersede it with a logged\ndecision). Cannot expand the project mission without explicit user approval.\n\nKeep outputs small: a policy/priority recommendation, a revalidation request, a\nsitemap update proposal, or a provisional-node decision."
     },
     {
-      "id": "builtin-agentlas-orchestrator",
+      "id": "builtin-agentlas-one",
       "slug": "agentlas-one",
       "name": "Agentlas One",
       "nameEn": "Agentlas One",

package/engine/automation/daemon.cjs

@@ -185,9 +185,30 @@ async function runAutomationOnce(ctx, db, row, opts = {}) {
   // 데스크탑 스케줄러는 60초마다 리스를 갱신한다. 여기는 한 번 잡고 끝이라
   // TTL(15분)을 넘긴 실행은 프로세스가 살아 있어도 회수 대상이 됐다 — 같은
   // 자동화가 두 실행기에서 겹쳐 도는 경로. 같은 주기로 심장박동을 보낸다.
+  let activeSession = null;
+  let leaseOwnershipLost = false;
+  let leaseRenewWarningEmitted = false;
   const leaseHeartbeat = setInterval(() => {
-    try { store.renewAutomationLease(db, row.id); } catch { /* best-effort */ }
-  }, 60_000);
+    try {
+      const renewed = store.renewAutomationLease(db, row.id);
+      if (!renewed) {
+        leaseOwnershipLost = true;
+        if (activeSession && typeof activeSession.kill === "function") activeSession.kill();
+      } else {
+        leaseRenewWarningEmitted = false;
+      }
+    } catch (error) {
+      // One SQLITE_BUSY/I/O miss is not ownership loss. Keep the run alive and
+      // retry on the next heartbeat, while surfacing the first deferred renewal.
+      if (!leaseRenewWarningEmitted) {
+        leaseRenewWarningEmitted = true;
+        const code = error && typeof error === "object" && "code" in error
+          ? String(error.code || "transient")
+          : "transient";
+        ctx.err(`automation lease heartbeat deferred (${code.slice(0, 80)})`);
+      }
+    }
+  }, Math.max(10, Number(opts.leaseHeartbeatMs) || 60_000));
   if (typeof leaseHeartbeat.unref === "function") leaseHeartbeat.unref();
 
   try {
@@ -244,9 +265,18 @@ async function runAutomationOnce(ctx, db, row, opts = {}) {
       timeoutConfig: opts.timeoutConfig,
       ...(markerChatId ? { chatId: markerChatId } : {}),
     });
+    activeSession = session;
+    if (leaseOwnershipLost) {
+      session.kill();
+      return { ok: false, skipped: true, reason: "lease-lost", error: "Automation execution lease ownership lost" };
+    }
     if (typeof opts.onSession === "function") opts.onSession(session);
 
     const res = await session.send(row.prompt_template);
+    if (leaseOwnershipLost) {
+      ctx.err("Automation execution lease ownership lost");
+      return { ok: false, skipped: true, reason: "lease-lost", error: "Automation execution lease ownership lost" };
+    }
     const finalText = (res && (res.finalText || res.text)) || "";
     const failed = session.status === "failed";
     const errMsg = failed ? String(session.lastError || "runtime turn failed").slice(0, 500) : null;
@@ -265,12 +295,15 @@ async function runAutomationOnce(ctx, db, row, opts = {}) {
   } catch (e) {
     const msg = String((e && e.message) || e).slice(0, 500);
     ctx.err(msg);
+    if (leaseOwnershipLost) {
+      return { ok: false, skipped: true, reason: "lease-lost", error: "Automation execution lease ownership lost" };
+    }
     store.recordRun(db, row.id, "error", msg, opts.scheduledFor);
     store.advanceAfterRun(db, row, { ok: false, advanceSchedule: !!opts.advanceSchedule });
     return { ok: false, error: msg };
   } finally {
     clearInterval(leaseHeartbeat);
-    store.releaseAutomation(db, row.id);
+    store.releaseAutomation(db, row.id, store.LEASE_OWNER);
   }
 }
 

package/engine/automation/store.cjs

@@ -116,20 +116,22 @@ function claimAutomation(db, id, now = new Date(), owner = LEASE_OWNER) {
  */
 function renewAutomationLease(db, id, now = new Date(), owner = LEASE_OWNER) {
   if (!leaseSupported(db)) return false;
-  try {
-    const result = db
-      .prepare("UPDATE automations SET claimed_at = ? WHERE id = ? AND lease_owner = ?")
-      .run(now.toISOString(), id, owner);
-    return (result.changes ?? result.rowsAffected ?? 0) > 0;
-  } catch {
-    return false;
-  }
+  // false means definitive ownership loss. SQLite busy/I/O errors must throw
+  // so the caller can retry instead of killing a valid run as if a peer had
+  // taken the lease (Desktop renewAutomationRunLease contract).
+  const result = db
+    .prepare("UPDATE automations SET claimed_at = ? WHERE id = ? AND lease_owner = ? AND claimed_at IS NOT NULL")
+    .run(now.toISOString(), id, owner);
+  return (result.changes ?? result.rowsAffected ?? 0) > 0;
 }
 
-function releaseAutomation(db, id) {
+function releaseAutomation(db, id, owner = LEASE_OWNER) {
   try {
-    db.prepare("UPDATE automations SET claimed_at = NULL, lease_owner = NULL WHERE id = ?").run(id);
-  } catch { /* best-effort */ }
+    const result = db
+      .prepare("UPDATE automations SET claimed_at = NULL, lease_owner = NULL WHERE id = ? AND lease_owner = ?")
+      .run(id, owner);
+    return (result.changes ?? result.rowsAffected ?? 0) > 0;
+  } catch { return false; }
 }
 
 /**

package/engine/bootstrap-schema.sql

@@ -1,4 +1,4 @@
--- Agentlas 첫 실행 부트스트랩 스키마 (생성: 2026-08-18T11:06:30Z)
+-- Agentlas 첫 실행 부트스트랩 스키마 (생성: 2026-08-29T07:55:23Z)
 --
 -- ★생성물이다. 손으로 고치지 말고 재생성하라:
 --     node scripts/gen-bootstrap-schema.cjs
@@ -6,7 +6,7 @@
 -- 정본은 Desktop 의 마이그레이션 사다리(agentlas_desktop/electron/store/db.ts, SCHEMA_VERSION).
 -- 이 파일은 그 사다리를 **빈 DB** 에 끝까지 돌린 결과의 덤프이므로, 터미널이 만든 DB 는
 -- 처음부터 사다리 머리에 있다 — 데스크탑이 나중에 승급할 것이 남지 않는다.
-PRAGMA user_version=97;
+PRAGMA user_version=105;
 CREATE TABLE active_runtime (
         id INTEGER PRIMARY KEY CHECK(id = 1),
         kind TEXT NOT NULL
@@ -98,6 +98,22 @@ CREATE TABLE agent_evolution_receipts (
         FOREIGN KEY(agent_id) REFERENCES installed_agents(id) ON DELETE CASCADE,
         UNIQUE(proposal_id, action)
       );
+CREATE TABLE agent_identity_map (
+        -- CASCADE 다. 대응표는 **파생 데이터**이고 정본은 패키지의 agentId 다.
+        -- RESTRICT 로 두면 에이전트 삭제가 6곳에서 막힌다 — 사용자 삭제, 중복정리 2곳,
+        -- 설치 실패 롤백, One 멤버 생성 실패 롤백, 터미널 삭제. 롤백이 막히면
+        -- "설치 실패"가 "설치 실패 + 복구 실패 + 유령 행"이 된다.
+        local_id            TEXT PRIMARY KEY REFERENCES installed_agents(id) ON DELETE CASCADE,
+        -- 이름을 agent_id 로 두면 agent-dedupe 의 컬럼명 스윕에 걸린다. 값이 달라
+        -- 지금은 매칭이 0건이지만, 이름 우연에 기대는 구조 자체가 지뢰다.
+        immutable_agent_id  TEXT NOT NULL,
+        agent_version       INTEGER NOT NULL DEFAULT 1,
+        -- package: 패키지 agentlas.json 에서 읽음 (정본)
+        -- builtin-reserved: 앱에 구워진 에이전트 — 패키지가 없어 예약 네임스페이스를 쓴다
+        -- minted-local: 출처가 없어 이 기기에서 발급 (다음에 패키지를 받으면 package 가 이긴다)
+        mapping_source      TEXT NOT NULL,
+        bound_at            TEXT NOT NULL
+      );
 CREATE TABLE agent_mcp_servers (
         agent_id TEXT NOT NULL,
         server_id TEXT NOT NULL,
@@ -470,6 +486,16 @@ CREATE TABLE browser_sites (
         created_at TEXT NOT NULL,
         updated_at TEXT NOT NULL
       );
+CREATE TABLE capability_grants (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      capability TEXT NOT NULL,
+      pattern TEXT,
+      decision TEXT NOT NULL CHECK(decision IN ('allow','deny')),
+      scope TEXT NOT NULL DEFAULT 'global',
+      source TEXT NOT NULL DEFAULT 'chip',
+      created_at TEXT NOT NULL,
+      UNIQUE(capability, pattern, scope)
+    );
 CREATE TABLE chat_goal_contracts (
       goal_id TEXT PRIMARY KEY,
       chat_id TEXT NOT NULL,
@@ -503,25 +529,44 @@ CREATE TABLE chat_messages (
         created_at TEXT NOT NULL,
         FOREIGN KEY(chat_id) REFERENCES chats(id) ON DELETE CASCADE
       );
-CREATE TABLE chat_runtime_sessions (
-        chat_id TEXT NOT NULL,
-        kind TEXT NOT NULL,
-        session_id TEXT NOT NULL,
-        fingerprint TEXT NOT NULL,
-        updated_at TEXT NOT NULL, reported_output_tokens INTEGER, reported_input_tokens INTEGER, reported_cached_input_tokens INTEGER,
-        PRIMARY KEY (chat_id, kind),
-        FOREIGN KEY(chat_id) REFERENCES chats(id) ON DELETE CASCADE
-      );
-CREATE TABLE chats (
-        id TEXT PRIMARY KEY,
-        project_id TEXT,
-        agent_id TEXT NOT NULL,
-        title TEXT NOT NULL DEFAULT 'New chat',
-        created_at TEXT NOT NULL,
-        updated_at TEXT NOT NULL, firm_id TEXT REFERENCES firms(id) ON DELETE SET NULL, archived_at TEXT, working_folder TEXT, kind TEXT NOT NULL DEFAULT 'user', parent_chat_id TEXT, used_at TEXT, continuous_mode INTEGER NOT NULL DEFAULT 0, swarm_mode INTEGER NOT NULL DEFAULT 0, last_viewed_at TEXT, hired_agents TEXT, origin_surface TEXT NOT NULL DEFAULT 'work', runtime_selection_json TEXT, goal_id TEXT,
-        FOREIGN KEY(project_id) REFERENCES projects(id) ON DELETE SET NULL,
-        FOREIGN KEY(agent_id) REFERENCES installed_agents(id) ON DELETE CASCADE
-      );
+CREATE TABLE "chat_runtime_sessions" (
+                chat_id TEXT NOT NULL,
+                kind TEXT NOT NULL,
+                agent_id TEXT NOT NULL DEFAULT '',
+                session_id TEXT NOT NULL,
+                fingerprint TEXT NOT NULL,
+                updated_at TEXT NOT NULL,
+                reported_output_tokens INTEGER,
+                reported_input_tokens INTEGER,
+                reported_cached_input_tokens INTEGER,
+                PRIMARY KEY (chat_id, kind, agent_id),
+                FOREIGN KEY(chat_id) REFERENCES chats(id) ON DELETE CASCADE
+              );
+CREATE TABLE "chats" (
+            id TEXT PRIMARY KEY,
+            project_id TEXT,
+            title TEXT NOT NULL DEFAULT 'New chat',
+            created_at TEXT NOT NULL,
+            updated_at TEXT NOT NULL,
+            firm_id TEXT,
+            archived_at TEXT,
+            working_folder TEXT,
+            kind TEXT NOT NULL DEFAULT 'user',
+            parent_chat_id TEXT,
+            used_at TEXT,
+            continuous_mode INTEGER NOT NULL DEFAULT 0,
+            swarm_mode INTEGER NOT NULL DEFAULT 0,
+            last_viewed_at TEXT,
+            hired_agents TEXT,
+            origin_surface TEXT NOT NULL DEFAULT 'work',
+            runtime_selection_json TEXT,
+            goal_id TEXT,
+            seat_id TEXT,
+            agent_id TEXT, seat_label TEXT, seat_kind TEXT, participants_json TEXT,
+            FOREIGN KEY(project_id) REFERENCES projects(id) ON DELETE SET NULL,
+            FOREIGN KEY(seat_id) REFERENCES one_seats(id) ON DELETE CASCADE,
+            FOREIGN KEY(agent_id) REFERENCES installed_agents(id) ON DELETE SET NULL
+          );
 CREATE TABLE experience_auto_intake_receipts (
         id TEXT PRIMARY KEY,
         agent_id TEXT NOT NULL,
@@ -822,6 +867,20 @@ CREATE TABLE installed_agents (
         installed_at TEXT NOT NULL,
         tone TEXT NOT NULL
       , env_requirements_json TEXT NOT NULL DEFAULT '[]', name_en TEXT NOT NULL DEFAULT '', tagline_en TEXT NOT NULL DEFAULT '', builtin INTEGER NOT NULL DEFAULT 0, role TEXT, visibility TEXT NOT NULL DEFAULT 'visible' CHECK(visibility IN ('visible','background','private')), entity_kind TEXT, local_display_name TEXT, bookmarked_at TEXT NULL, parent_team_id TEXT NULL);
+CREATE TABLE invocation_steers (
+      id TEXT PRIMARY KEY,
+      chat_id TEXT NOT NULL,
+      original_run_id TEXT NOT NULL,
+      prompt_text TEXT NOT NULL,
+      prompt_hash TEXT NOT NULL,
+      request_json TEXT NOT NULL,
+      workspace_binding_json TEXT,
+      execution_context_json TEXT,
+      status TEXT NOT NULL CHECK(status IN ('queued','draining','started','cancelled','failed')),
+      drained_run_id TEXT,
+      queued_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
 CREATE TABLE judgment_verdicts (
       kind          TEXT NOT NULL,
       signature     TEXT NOT NULL,
@@ -979,6 +1038,101 @@ CREATE TABLE model_roles (
         updated_at TEXT NOT NULL,
         CHECK(role = 'worker' OR inherit = 0)
       );
+CREATE TABLE one_artifact_bindings (
+      id TEXT PRIMARY KEY,
+      task_id TEXT NOT NULL,
+      task_version INTEGER NOT NULL,
+      bound_task_version INTEGER NOT NULL,
+      chat_id TEXT NOT NULL,
+      run_id TEXT NOT NULL,
+      manifest_id TEXT NOT NULL,
+      artifact_ref TEXT NOT NULL,
+      source_path TEXT NOT NULL,
+      kind TEXT NOT NULL,
+      mime_type TEXT NOT NULL,
+      size_bytes INTEGER NOT NULL,
+      file_dev TEXT NOT NULL,
+      file_ino TEXT NOT NULL,
+      file_mtime_ns TEXT NOT NULL,
+      file_ctime_ns TEXT NOT NULL,
+      sha256 TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      UNIQUE(task_id, chat_id, run_id, manifest_id, artifact_ref)
+    );
+CREATE TABLE one_org_completion_cache (
+      installed_agent_id TEXT PRIMARY KEY,
+      run_id TEXT,
+      summary_json TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+CREATE TABLE one_org_members (
+      id TEXT PRIMARY KEY,
+      agent_slug TEXT NOT NULL,
+      installed_agent_id TEXT NOT NULL,
+      display_name TEXT,
+      icon TEXT NOT NULL DEFAULT 'one-puppy',
+      sort_order INTEGER NOT NULL DEFAULT 0,
+      source TEXT NOT NULL CHECK(source IN ('local','cloud','hub')),
+      lease_expires_at TEXT,
+      added_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      archived_at TEXT,
+      status_kind TEXT NOT NULL DEFAULT 'new',
+      -- PRD §4.33 — 스키마에 사람이 읽는 문구(그것도 한 언어)를 박지 않는다.
+      -- 빈 값이면 투영이 로케일 표에서 "아직 맡은 일 없음 / No work assigned yet"을 만든다.
+      status_line TEXT NOT NULL DEFAULT '',
+      last_activity_at TEXT,
+      pending_count INTEGER NOT NULL DEFAULT 0,
+      pending_kind TEXT NOT NULL DEFAULT 'approval' CHECK(pending_kind IN ('approval','review','input')),
+      unread_count INTEGER NOT NULL DEFAULT 0,
+      unread_generation INTEGER NOT NULL DEFAULT 0,
+      credit_state TEXT NOT NULL DEFAULT 'unknown' CHECK(credit_state IN ('ok','insufficient','unknown')),
+      auto_select_tools INTEGER NOT NULL DEFAULT 1 CHECK(auto_select_tools IN (0,1)),
+      collaboration_style TEXT NOT NULL DEFAULT 'default' CHECK(collaboration_style IN ('default','concise','warm','direct')),
+      handover_note TEXT,
+      revision INTEGER NOT NULL DEFAULT 1
+    );
+CREATE TABLE one_seat_occupants (
+        seat_id      TEXT NOT NULL REFERENCES one_seats(id) ON DELETE CASCADE,
+        slot         INTEGER NOT NULL DEFAULT 0,
+        agent_id     TEXT,
+        display_name TEXT NOT NULL DEFAULT '',
+        since        TEXT NOT NULL,
+        until        TEXT,
+        PRIMARY KEY (seat_id, slot, since)
+      );
+CREATE TABLE one_seats (
+        id          TEXT PRIMARY KEY,
+        kind        TEXT NOT NULL CHECK(kind IN ('solo','group')),
+        title       TEXT NOT NULL DEFAULT '',
+        project_id  TEXT REFERENCES projects(id) ON DELETE SET NULL,
+        created_at  TEXT NOT NULL,
+        updated_at  TEXT NOT NULL,
+        archived_at TEXT
+      , dissolved_at TEXT);
+CREATE TABLE one_taskforces (
+      id TEXT PRIMARY KEY,
+      chat_id TEXT NOT NULL UNIQUE,
+      title TEXT NOT NULL,
+      description TEXT NOT NULL DEFAULT '',
+      member_agent_ids_json TEXT NOT NULL DEFAULT '[]',
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      revision INTEGER NOT NULL DEFAULT 1,
+      FOREIGN KEY(chat_id) REFERENCES chats(id) ON DELETE CASCADE
+    );
+CREATE TABLE plugin_builder_sessions (
+        id TEXT PRIMARY KEY,
+        chat_id TEXT NOT NULL,
+        slug TEXT,
+        phase TEXT NOT NULL CHECK(phase IN ('interview','draft','verify','install','prove','discarded')),
+        staging_dir TEXT,
+        answers_json TEXT,
+        gate_report_json TEXT,
+        seed_json TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      );
 CREATE TABLE project_agent_rent_allow (
       project_id TEXT NOT NULL,
       slug TEXT NOT NULL,
@@ -996,6 +1150,13 @@ CREATE TABLE projects (
         updated_at TEXT NOT NULL, folder_path TEXT, system_prompt TEXT, agent_pool_json TEXT NOT NULL DEFAULT '[]', source_type TEXT NOT NULL DEFAULT 'local', source_ref TEXT,
         FOREIGN KEY(default_agent_id) REFERENCES installed_agents(id) ON DELETE SET NULL
       );
+CREATE TABLE prompt_chat_start_intents (
+      intent_id TEXT PRIMARY KEY,
+      chat_id TEXT NOT NULL UNIQUE,
+      prompt_digest TEXT NOT NULL,
+      seed_only INTEGER NOT NULL CHECK(seed_only IN (0,1)),
+      created_at TEXT NOT NULL
+    );
 CREATE TABLE run_events (
         id TEXT PRIMARY KEY,
         run_id TEXT NOT NULL,
@@ -1123,7 +1284,7 @@ CREATE TABLE "telegram_bindings" (
         designated_project_id TEXT REFERENCES projects(id) ON DELETE SET NULL,
         designated_graph_id TEXT,
         legacy_notice_at TEXT
-      );
+      , seat_id TEXT);
 CREATE INDEX idx_agent_app_ops_app_created
         ON agent_app_operations(app_id, created_at DESC);
 CREATE INDEX idx_agent_apps_chat_updated
@@ -1142,6 +1303,8 @@ CREATE INDEX idx_agent_evolution_receipts_agent
         ON agent_evolution_receipts(agent_id, created_at DESC);
 CREATE INDEX idx_agent_evolution_receipts_proposal
         ON agent_evolution_receipts(proposal_id, created_at ASC);
+CREATE INDEX idx_agent_identity_map_agent ON agent_identity_map(immutable_agent_id);
+CREATE INDEX idx_agent_identity_map_source ON agent_identity_map(mapping_source);
 CREATE INDEX idx_agent_mcp_agent ON agent_mcp_servers(agent_id);
 CREATE INDEX idx_agent_runtime_overrides_updated
         ON agent_runtime_overrides(updated_at DESC);
@@ -1205,6 +1368,7 @@ CREATE INDEX idx_browser_logs_ts ON browser_action_logs(ts DESC);
 CREATE UNIQUE INDEX idx_browser_perm_site_action
         ON browser_permissions(site, action_type);
 CREATE UNIQUE INDEX idx_browser_sessions_site ON browser_sessions(site);
+CREATE INDEX idx_capability_grants_scope ON capability_grants(scope);
 CREATE UNIQUE INDEX idx_chat_goal_contracts_active_chat
       ON chat_goal_contracts(chat_id)
       WHERE status = 'active';
@@ -1217,6 +1381,7 @@ CREATE INDEX idx_chats_firm_updated ON chats(firm_id, updated_at DESC);
 CREATE INDEX idx_chats_parent ON chats(parent_chat_id);
 CREATE INDEX idx_chats_project_updated
         ON chats(project_id, updated_at DESC);
+CREATE INDEX idx_chats_seat_updated ON chats(seat_id, updated_at DESC);
 CREATE INDEX idx_chats_updated ON chats(updated_at DESC);
 CREATE INDEX idx_chats_used_updated ON chats(used_at, updated_at DESC);
 CREATE INDEX idx_experience_auto_intake_agent_status
@@ -1283,6 +1448,10 @@ CREATE INDEX idx_installed_agent_hub_binding_exact
         ON installed_agent_hub_bindings(agent_definition_id, agent_release_id);
 CREATE INDEX idx_installed_agents_parent_team ON installed_agents(parent_team_id) WHERE parent_team_id IS NOT NULL;
 CREATE INDEX idx_installed_agents_visibility ON installed_agents(visibility, installed_at DESC);
+CREATE INDEX idx_invocation_steers_chat
+      ON invocation_steers(chat_id, queued_at, id);
+CREATE INDEX idx_invocation_steers_queue
+      ON invocation_steers(status, queued_at, id);
 CREATE INDEX idx_judgment_verdicts_recency ON judgment_verdicts(last_hit_at);
 CREATE INDEX idx_memory_agent ON memory_entries(agent_id, superseded_at);
 CREATE INDEX idx_memory_chat ON memory_entries(chat_id);
@@ -1308,6 +1477,24 @@ CREATE INDEX idx_memory_tickets_project_created
         ON memory_tickets(project_id, created_at DESC);
 CREATE INDEX idx_memory_tickets_status_created
         ON memory_tickets(emitter_status, state, created_at DESC);
+CREATE INDEX idx_occupants_seat_time ON one_seat_occupants(seat_id, since);
+CREATE INDEX idx_one_artifact_binding_chat
+      ON one_artifact_bindings(chat_id, created_at);
+CREATE INDEX idx_one_artifact_binding_exact
+      ON one_artifact_bindings(task_id, chat_id, run_id, manifest_id, artifact_ref);
+CREATE INDEX idx_one_org_members_agent
+      ON one_org_members(installed_agent_id);
+CREATE INDEX idx_one_org_members_order
+      ON one_org_members(archived_at, sort_order, added_at);
+CREATE INDEX idx_one_seats_updated ON one_seats(updated_at DESC);
+CREATE INDEX idx_one_taskforces_updated
+      ON one_taskforces(updated_at DESC);
+CREATE INDEX idx_plugin_builder_sessions_chat_updated
+        ON plugin_builder_sessions(chat_id, updated_at DESC);
+CREATE INDEX idx_plugin_builder_sessions_slug_phase
+        ON plugin_builder_sessions(slug, phase);
+CREATE INDEX idx_prompt_chat_start_chat
+      ON prompt_chat_start_intents(chat_id);
 CREATE INDEX idx_run_events_agent_kind_ts
           ON run_events(agent_id, kind, ts DESC);
 CREATE INDEX idx_run_events_agent_ts ON run_events(agent_id, ts DESC);
@@ -1320,6 +1507,10 @@ CREATE INDEX idx_run_events_run_seq
 CREATE INDEX idx_run_events_ts
         ON run_events(ts DESC);
 CREATE INDEX idx_run_history_automation ON run_history(automation_id);
+CREATE INDEX idx_seat_occupants_agent
+        ON one_seat_occupants(agent_id) WHERE agent_id IS NOT NULL;
+CREATE UNIQUE INDEX idx_seat_occupants_current
+        ON one_seat_occupants(seat_id, slot) WHERE until IS NULL;
 CREATE INDEX idx_task_participants_agent ON task_agent_participants(agent_id);
 CREATE INDEX idx_tasks_firm_updated ON tasks(firm_id, updated_at DESC);
 CREATE INDEX idx_tasks_origin_chat ON tasks(origin_chat_id);
@@ -1337,7 +1528,8 @@ CREATE INDEX idx_telegram_bindings_chat
         ON telegram_bindings(telegram_chat_id);
 CREATE INDEX idx_telegram_bindings_enabled
         ON telegram_bindings(enabled, status);
-CREATE UNIQUE INDEX idx_telegram_bindings_one_singleton
-        ON telegram_bindings(target_kind) WHERE target_kind = 'one';
+CREATE UNIQUE INDEX idx_telegram_bindings_one_room
+        ON telegram_bindings(telegram_chat_id)
+        WHERE target_kind = 'one' AND telegram_chat_id IS NOT NULL;
 CREATE INDEX idx_telegram_bindings_target
         ON telegram_bindings(target_kind, target_id);

package/engine/cloud/auth.cjs

@@ -24,6 +24,12 @@ const LOGIN_CALLBACK_PATH = "/callback";
 const LOGIN_TIMEOUT_MS = 180_000;
 const MAX_LOGIN_SESSION_BYTES = 16 * 1024;
 
+function validLoginSessionValue(value) {
+  return typeof value === "string" && value.length > 0 &&
+    Buffer.byteLength(value, "utf8") <= MAX_LOGIN_SESSION_BYTES &&
+    !/[\u0000-\u0020\u007f;,]/.test(value);
+}
+
 function webBaseUrl() {
   return (process.env.AGENTLAS_WEB_BASE_URL || "https://agentlas.cloud").replace(/\/$/, "");
 }
@@ -97,13 +103,13 @@ function createLoginCallbackGuard(expectedState) {
           message: "The callback did not include a session value.",
         };
       }
-      if (Buffer.byteLength(value, "utf8") > MAX_LOGIN_SESSION_BYTES) {
+      if (!validLoginSessionValue(value)) {
         return {
           handled: true,
           final: true,
           ok: false,
           statusCode: 400,
-          message: "The login session value is too large.",
+          message: "The login session value is invalid.",
         };
       }
       return { handled: true, final: true, ok: true, statusCode: 200, value, message: "Agentlas login complete" };
@@ -120,6 +126,9 @@ function openInBrowser(url) {
     : ["xdg-open", url];
   try {
     const child = spawn(argv[0], argv.slice(1), { stdio: "ignore", detached: true });
+    // spawn failures such as a missing xdg-open arrive asynchronously. Without
+    // a listener Node treats them as an uncaught process error.
+    child.once("error", () => {});
     child.unref();
   } catch { /* ignore */ }
 }
@@ -220,18 +229,35 @@ function cliSessionPath() {
 
 function readCliSessionValue() {
   try {
-    const j = JSON.parse(fs.readFileSync(cliSessionPath(), "utf8"));
-    return (j && typeof j.value === "string" && j.value) || null;
+    const p = cliSessionPath();
+    const stat = fs.lstatSync(p);
+    if (stat.isSymbolicLink() || !stat.isFile() || stat.size > MAX_LOGIN_SESSION_BYTES * 2) return null;
+    const j = JSON.parse(fs.readFileSync(p, "utf8"));
+    return j && validLoginSessionValue(j.value) ? j.value : null;
   } catch {
     return null;
   }
 }
 
 function saveCliSession(value) {
+  if (!validLoginSessionValue(value)) throw new Error("Refusing to save an invalid Agentlas login session value.");
   const p = cliSessionPath();
   // 디렉터리 0700 + 파일 0600 — 기본 umask(0644)로 세션이 world-readable 이 되는 것을 막는다.
-  fs.mkdirSync(path.dirname(p), { recursive: true, mode: 0o700 });
-  fs.writeFileSync(p, JSON.stringify({ version: 1, value, updatedAt: new Date().toISOString() }, null, 2) + "\n", { mode: 0o600 });
+  const dir = path.dirname(p);
+  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+  try { fs.chmodSync(dir, 0o700); } catch { /* win32 */ }
+  const temp = path.join(dir, `.cli-session.${process.pid}.${crypto.randomUUID()}.tmp`);
+  try {
+    fs.writeFileSync(temp, JSON.stringify({ version: 1, value, updatedAt: new Date().toISOString() }, null, 2) + "\n", {
+      encoding: "utf8",
+      mode: 0o600,
+      flag: "wx",
+    });
+    fs.renameSync(temp, p);
+  } catch (error) {
+    try { fs.rmSync(temp, { force: true }); } catch { /* preserve original */ }
+    throw error;
+  }
   try { fs.chmodSync(p, 0o600); } catch { /* win32 */ }
   return p;
 }
@@ -246,7 +272,7 @@ function deleteCliSession() {
 // 쿠키 해석 순서 계약: AGENTLAS_SESSION env → 세션 파일. (v1의 keytar 폴백은
 // 데스크탑이 세션을 keytar에 두지 않아 항상 비어 있었다 — v2에서는 싣지 않는다.)
 function cloudSessionCookie() {
-  if (process.env.AGENTLAS_SESSION) return `agentlas_session=${process.env.AGENTLAS_SESSION}`;
+  if (validLoginSessionValue(process.env.AGENTLAS_SESSION)) return `agentlas_session=${process.env.AGENTLAS_SESSION}`;
   const fileValue = readCliSessionValue();
   if (fileValue) return `agentlas_session=${fileValue}`;
   return null;
@@ -275,5 +301,5 @@ module.exports = {
   deleteCliSession,
   cloudSessionCookie,
   fetchSessionMeta,
-  _test: { createLoginState, createLoginCallbackGuard },
+  _test: { createLoginState, createLoginCallbackGuard, validLoginSessionValue },
 };

package/engine/cloud-assets/cas.cjs

@@ -68,6 +68,22 @@ function cloudCasResponseError(response, label) {
 }
 
 /** 등록(생성/갱신). 성공 시 검증된 리비전 디스크립터(+operation/url)를 반환한다. */
+// 서버는 받은 것보다 적게 저장할 수 있고, 그건 증명 실패가 아니다.
+//
+// 등록은 제출 해시를 검증한 뒤, 자체 스캔이 자격증명으로 판정한 파일을 빼고
+// 나머지를 새 해시로 저장한다(uploadReceipt.omissions가 뺀 경로를 전부 적는다).
+// 저장 해시만 대조하면, 이미 허브에 게시가 끝난 뒤에 "잘못된 등록 영수증"으로
+// 실패하게 된다 — 에이전트는 검색·호출되는데 올린 사람은 실패로 듣는다.
+// 증명의 목적은 "서버가 바로 이 패키지를 봤다"이고 submittedPackageHash가 그
+// 증거이므로, 둘 중 하나가 우리 해시와 같으면 통과시킨다. 둘 다 아니면 그대로 실패.
+function registrationSawOurPackage(json, manifest) {
+  const ours = String(manifest.packageHash || "").toLowerCase();
+  if (String(json.packageHash || "").toLowerCase() === ours) return true;
+  const receipt = json && typeof json === "object" ? json.uploadReceipt : null;
+  if (!receipt || typeof receipt !== "object") return false;
+  return String(receipt.submittedPackageHash || "").toLowerCase() === ours;
+}
+
 async function registerCloudAgent(manifest, bundlePath, review, visibility, options = {}) {
   const cookie = await cloudSessionCookie();
   if (!cookie) throw new Error("Agent Cloud sign-in is required. Sign in through Desktop or set AGENTLAS_SESSION.");
@@ -119,7 +135,7 @@ async function registerCloudAgent(manifest, bundlePath, review, visibility, opti
     json.dryRun !== false ||
     typeof json.cloudId !== "string" || !json.cloudId.trim() ||
     json.slug !== manifest.slug ||
-    json.packageHash !== manifest.packageHash ||
+    !registrationSawOurPackage(json, manifest) ||
     json.packageHashVersion !== manifest.packageHashVersion ||
     typeof json.revision !== "string" || etag !== cloudRevisionEtag(json.revision) ||
     typeof json.registeredAt !== "string" || !Number.isFinite(Date.parse(json.registeredAt)) ||
@@ -138,11 +154,21 @@ async function registerCloudAgent(manifest, bundlePath, review, visibility, opti
     etag,
     updatedAt: json.savedAt || json.registeredAt,
   }, "registration receipt");
+  // 서버가 자기 스캔으로 뺀 파일은 사용자에게 보여야 한다. 영수증 안에만 있으면
+  // "내 파일이 안 올라갔다"는 사실을 아무도 읽지 않는다.
+  const serverWithheld = (() => {
+    const receipt = json && typeof json === "object" ? json.uploadReceipt : null;
+    const omissions = receipt && Array.isArray(receipt.omissions) ? receipt.omissions : [];
+    return omissions
+      .map((entry) => (entry && typeof entry.path === "string" ? entry.path : ""))
+      .filter(Boolean);
+  })();
   return {
     ...descriptor,
     operation: json.operation,
     ...(typeof json.url === "string" ? { url: json.url } : {}),
     ...(typeof json.marketplaceUrl === "string" ? { marketplaceUrl: json.marketplaceUrl } : {}),
+    ...(serverWithheld.length ? { serverWithheld } : {}),
     registeredAt: json.registeredAt,
     dryRun: false,
   };