agentlas 1.0.63 → 1.0.65

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 1.0.65 — 2026-08-29
+
+- Browser, document, and Telegram CDP flows now create and track an Agentlas-owned
+  tab instead of attaching to the first page exposed by the debugging port. Existing
+  pages require explicit target selection, owned temporary pages are cleaned up, and
+  WebSocket attachment has a bounded open timeout.
+- First-run SQLite bootstrap now starts at schema `user_version=106`, generated from
+  the Desktop migration ladder, including the multimodal model-role constraint.
+
+## 1.0.64 — 2026-08-29
+
+- First-run database bootstrap now refuses symbolic links and non-file entries
+  at `agentlas.sqlite` instead of following them for permission changes and
+  runtime access.
+- A competing bootstrap is accepted only after its winning database path is a
+  real, non-empty file; undeletable empty placeholders now fail with the exact
+  cause instead of being reported as a successful concurrent initialization.
+- The public runtime guidance now reflects that Kimi, Grok, and Cursor execute
+  through the shared ACP driver instead of describing their retired refusal.
+
 ## 1.0.63 — 2026-08-29
 
 - `agentlas update --json` now reads the centralized output-mode context after

package/README.md

@@ -27,7 +27,9 @@ Agent Trust is our product principle: agent packages are treated as portable, ow
 | **Agent CLI** | Requires at least one supported runtime CLI: `agy` (Antigravity, preferred), `claude`, `codex`, or legacy `gemini` in your `PATH`. Halts honestly with `no_runtime` if none are found (no fake model responses). |
 | **OS** | macOS is verified by the current local release gate. Linux is covered by the public adapter/CI contract. A Windows launcher is provided, but this release does not claim independent end-to-end Windows verification. |
 
-*Note: `kimi`, `grok`, and `cursor-agent` are detected by diagnostics (`doctor`) but not yet executable (`has no v2 streaming driver yet`). Supported active runtimes are `claude-code`, `codex`, `agy` (Antigravity), and legacy `gemini`.*
+*Note: active runtimes include `claude-code`, `codex`, `agy` (Antigravity),
+legacy `gemini`, and the shared ACP-backed `kimi`, `grok`, and `cursor-agent`
+adapters. `doctor` reports the exact locally executable set.*
 
 ## Installation
 
@@ -102,7 +104,7 @@ agentlas hep-local "<prompt>"    # Same staffing, registered Local agents only
 agentlas hep-cloud "<prompt>"    # Same staffing, owner Agent Cloud only
 agentlas hep-hub "<prompt>"      # Same staffing, public Hub only
 agentlas call "a,b" "<context>"  # Call explicitly named Hub or Cloud agents
-agentlas browser [...]           # Real browser hardpoint launcher
+agentlas browser [...]           # Real browser hardpoint launcher (opens an owned tab)
 agentlas route "<prompt>" [--json] # Preview routing decisions without execution
 agentlas research <sub>          # Research loadout (status|gather|search|read|plan)
 ```
@@ -228,7 +230,7 @@ The launcher (`bin/agentlas.cjs`) runs system Node against `engine/`. The defaul
 | Windows | `%APPDATA%\Agentlas` |
 | Linux | `$XDG_CONFIG_HOME/Agentlas` (default `~/.config/Agentlas`) |
 
-The SQLite database file is `agentlas.sqlite` (`user_version=97`). When launched for the first time without an existing database, it bootstraps schemas using `engine/bootstrap-schema.sql`. Consequently, **projects, installed agents, task history, automation sessions, and MCP registrations are shared across Desktop and Terminal**. The first ordered project agent remains the controller; additional agents are task-scoped and are stored only as execution ledgers, never as global conversations or durable owners.
+The SQLite database file is `agentlas.sqlite` (`user_version=106`). When launched for the first time without an existing database, it bootstraps schemas using `engine/bootstrap-schema.sql`. Consequently, **projects, installed agents, task history, automation sessions, and MCP registrations are shared across Desktop and Terminal**. The first ordered project agent remains the controller; additional agents are task-scoped and are stored only as execution ledgers, never as global conversations or durable owners.
 
 **Single migration authority.** The Desktop app owns the schema migration ladder; the CLI never migrates the shared database. `engine/bootstrap-schema.sql` is generated by running that ladder to completion against an empty database, so a CLI-created store already sits at the ladder head and has nothing left for Desktop to upgrade. If the CLI opens a store older than the version it knows, it refuses with an actionable message instead of migrating or silently proceeding — a second migrator on this lock-free file is what corrupted the store once before. On a machine with no Desktop app, an operator can set `AGENTLAS_STORE_MIGRATION_ROLE=owner` for a single deliberate upgrade run with every other Agentlas process closed.
 
@@ -278,7 +280,7 @@ agentlas doctor      # Checks database, PATH runtimes, active CLI drivers, and c
 agentlas --where     # Outputs JSON diagnostic of launcher, engine, DB paths, driver, and Node version
 ```
 
-- **`no_runtime: no agent CLI found`**: Connect Antigravity and put `agy` on `PATH` first, or install `claude`/`codex`; `gemini` remains available as a legacy CLI. Note that `kimi`/`grok`/`cursor-agent` are detected by `doctor` but do not yet have streaming execution drivers.
+- **`no_runtime: no agent CLI found`**: Connect Antigravity and put `agy` on `PATH` first, or install `claude`/`codex`; `gemini` remains available as a legacy CLI. Kimi, Grok, and Cursor use the shared ACP driver when their local CLIs are available.
 - **`runtime '<kind>' has no v2 streaming driver yet`**: Specified `--runtime` is not supported for active execution. Supported values: `claude-code`, `codex`, `agy` (Antigravity), `gemini` (legacy).
 - **`Node vX — Node 22+ (node:sqlite) is required when better-sqlite3 is unavailable`**: `better-sqlite3` native build failed on Node 20/21. Upgrade to Node 22+ or install build tools for native compilation.
 - **`storm`/`context`/`hep` halting due to missing runtime**: Agentlas OS core runtime is missing. Install Agentlas OS or set `HEPHAESTUS_BIN=<path>`.

package/bin/agentlas.cjs

@@ -68,6 +68,20 @@ function securePrivateMode(target, mode) {
   fs.chmodSync(target, mode);
 }
 
+function databaseFileStat(target) {
+  let stat;
+  try {
+    stat = fs.lstatSync(target);
+  } catch (error) {
+    if (error && error.code === "ENOENT") return null;
+    throw error;
+  }
+  if (stat.isSymbolicLink() || !stat.isFile()) {
+    throw new Error(`Agentlas database path must be a regular file: ${target}`);
+  }
+  return stat;
+}
+
 // ── SQLite 로더 (부트스트랩용): better-sqlite3 → node:sqlite ──
 // require.resolve가 아니라 실제 로드로 판별한다 — ABI가 깨진 better-sqlite3나
 // node:sqlite가 아직 없는/플래그가 필요한 Node(≤22.4 등)를 정확히 걸러낸다.
@@ -141,14 +155,17 @@ function bootstrapDbIfMissing() {
   // 잡힌 파일이므로 없는 것으로 취급해 정상 부트스트랩 경로를 태운다. 내용이 있는데
   // 손상된 경우는 여기서 판단하지 않는다 — 그건 복구지 부트스트랩이 아니고, 멀쩡한
   // DB 를 빈 것으로 오판해 덮어쓰는 위험이 훨씬 크다.
-  if (exists(p)) {
-    let empty = false;
-    try { empty = fs.statSync(p).size === 0; } catch { empty = false; }
-    if (!empty) {
+  const existing = databaseFileStat(p);
+  if (existing) {
+    if (existing.size > 0) {
       securePrivateMode(p, 0o600);
       return { created: false, path: p };
     }
-    try { fs.rmSync(p, { force: true }); } catch { /* 지울 수 없으면 아래 link 가 EEXIST 로 알려준다 */ }
+    try {
+      fs.rmSync(p);
+    } catch (error) {
+      throw new Error(`Empty Agentlas database could not be replaced: ${error && error.message ? error.message : error}`);
+    }
   }
   const schemaFile = path.join(PKG_ROOT, "engine", "bootstrap-schema.sql");
   if (!exists(schemaFile)) {
@@ -189,12 +206,23 @@ function bootstrapDbIfMissing() {
     if (!e || e.code !== "EEXIST") {
       throw new Error(`Atomic database bootstrap failed: ${e && e.message ? e.message : e}`);
     }
+    // EEXIST only means another path entry won the name. It is a successful
+    // concurrent bootstrap only if that winner is already a real, non-empty
+    // database file; a symlink/directory/empty placeholder must fail closed.
+    const winner = databaseFileStat(p);
+    if (!winner || winner.size === 0) {
+      throw new Error(`Concurrent Agentlas database bootstrap produced an invalid file: ${p}`);
+    }
   } finally {
     try { fs.rmSync(temp, { force: true }); } catch { /* noop */ }
     try { fs.rmSync(temp + "-journal", { force: true }); } catch { /* noop */ }
     try { fs.rmSync(temp + "-wal", { force: true }); } catch { /* noop */ }
     try { fs.rmSync(temp + "-shm", { force: true }); } catch { /* noop */ }
   }
+  const finalStat = databaseFileStat(p);
+  if (!finalStat || finalStat.size === 0) {
+    throw new Error(`Agentlas database bootstrap did not produce a valid file: ${p}`);
+  }
   securePrivateMode(p, 0o600);
   return { created, path: p };
 }

package/engine/bootstrap-schema.sql

@@ -1,4 +1,4 @@
--- Agentlas 첫 실행 부트스트랩 스키마 (생성: 2026-08-29T07:55:23Z)
+-- Agentlas 첫 실행 부트스트랩 스키마 (생성: 2026-08-29T13:29:10Z)
 --
 -- ★생성물이다. 손으로 고치지 말고 재생성하라:
 --     node scripts/gen-bootstrap-schema.cjs
@@ -6,7 +6,7 @@
 -- 정본은 Desktop 의 마이그레이션 사다리(agentlas_desktop/electron/store/db.ts, SCHEMA_VERSION).
 -- 이 파일은 그 사다리를 **빈 DB** 에 끝까지 돌린 결과의 덤프이므로, 터미널이 만든 DB 는
 -- 처음부터 사다리 머리에 있다 — 데스크탑이 나중에 승급할 것이 남지 않는다.
-PRAGMA user_version=105;
+PRAGMA user_version=106;
 CREATE TABLE active_runtime (
         id INTEGER PRIMARY KEY CHECK(id = 1),
         kind TEXT NOT NULL
@@ -1015,7 +1015,7 @@ CREATE TABLE meta (
         value TEXT NOT NULL
       );
 CREATE TABLE model_role_members (
-        role TEXT NOT NULL CHECK(role IN ('orchestrator','worker')),
+        role TEXT NOT NULL CHECK(role IN ('orchestrator','worker','multimodal')),
         position INTEGER NOT NULL CHECK(position >= 1),
         kind TEXT NOT NULL,
         backend TEXT,
@@ -1027,7 +1027,7 @@ CREATE TABLE model_role_members (
         PRIMARY KEY(role, position)
       );
 CREATE TABLE model_roles (
-        role TEXT PRIMARY KEY CHECK(role IN ('orchestrator','worker')),
+        role TEXT PRIMARY KEY CHECK(role IN ('orchestrator','worker','multimodal')),
         kind TEXT NOT NULL,
         backend TEXT,
         source TEXT,

package/engine/browser/cdp.cjs

@@ -20,6 +20,8 @@
 const http = require("node:http");
 
 const DEFAULT_PORT = Number(process.env.AGENTLAS_CDP_PORT || 9222);
+const DEFAULT_WS_OPEN_TIMEOUT_MS = 5_000;
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1", "[::1]"]);
 
 function httpJson(port, path, { timeout = 3000, method = "GET" } = {}) {
   return new Promise((resolve, reject) => {
@@ -46,16 +48,90 @@ async function cdpReady(port = DEFAULT_PORT) {
   } catch { return false; }
 }
 
-/** 조종할 page 타겟 하나를 고른다(없으면 새로 연다). 반환: webSocketDebuggerUrl. */
-async function pickPageTarget(port = DEFAULT_PORT) {
-  const targets = await httpJson(port, "/json");
-  let page = (Array.isArray(targets) ? targets : []).find((t) => t.type === "page" && t.webSocketDebuggerUrl);
-  if (!page) {
-    // 새 탭을 연다(DevTools HTTP: PUT /json/new).
-    page = await httpJson(port, "/json/new?about:blank", { method: "PUT" });
+function verifiedPageTarget(target, port, ownsTarget = false) {
+  if (!target || target.type !== "page" || typeof target.id !== "string" || typeof target.webSocketDebuggerUrl !== "string") return null;
+  try {
+    const socket = new URL(target.webSocketDebuggerUrl);
+    if (socket.protocol !== "ws:" || !LOOPBACK_HOSTS.has(socket.hostname.toLowerCase()) || Number(socket.port) !== port) return null;
+  } catch {
+    return null;
+  }
+  return { id: target.id, webSocketDebuggerUrl: target.webSocketDebuggerUrl, ownsTarget };
+}
+
+async function resolvePageTarget(port, { selection = "new", targetId = null } = {}) {
+  if (selection !== "new" && selection !== "existing") {
+    throw new Error(`unsupported CDP target selection: ${selection}`);
   }
-  if (!page || !page.webSocketDebuggerUrl) throw new Error("no CDP page target available");
-  return page.webSocketDebuggerUrl;
+  const rawTargets = await httpJson(port, "/json");
+  const pages = (Array.isArray(rawTargets) ? rawTargets : [])
+    .map((target) => verifiedPageTarget(target, port))
+    .filter(Boolean);
+
+  if (selection === "existing") {
+    if (!targetId) throw new Error("existing CDP target selection requires an explicit targetId");
+    const exact = pages.find((target) => target.id === String(targetId));
+    if (!exact) throw new Error(`no CDP page target matches targetId ${targetId}`);
+    return exact;
+  }
+
+  // Never reuse an arbitrary first page. It may be a user's active tab, and
+  // browser/document/Telegram flows must not navigate it behind their back.
+  // Create a target we own, then return its socket identity to the caller.
+  const created = await httpJson(port, `/json/new?${encodeURIComponent("about:blank")}`, { method: "PUT" });
+  const exact = verifiedPageTarget(created, port, true);
+  if (!exact) throw new Error("CDP did not return a verified page target for the new tab");
+  return exact;
+}
+
+/**
+ * Pick a page target without guessing ownership.
+ *
+ * The safe default is a fresh target. Reusing a page requires selection:
+ * `pickPageTarget(port, { selection: "existing", targetId })`.
+ */
+async function pickPageTarget(port = DEFAULT_PORT, options = {}) {
+  return (await resolvePageTarget(port, options)).webSocketDebuggerUrl;
+}
+
+function closePageTarget(port, targetId) {
+  return new Promise((resolve) => {
+    const req = http.request({
+      host: "127.0.0.1",
+      port,
+      path: `/json/close/${encodeURIComponent(String(targetId))}`,
+      timeout: 3_000,
+    }, (res) => {
+      res.resume();
+      res.once("end", resolve);
+    });
+    req.once("error", resolve);
+    req.once("timeout", () => { req.destroy(); resolve(); });
+    req.end();
+  });
+}
+
+function waitForWebSocketOpen(ws, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    let timer;
+    const finish = (error) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (error) reject(error);
+      else resolve();
+    };
+    timer = setTimeout(() => {
+      const error = new Error(`CDP websocket open timed out after ${timeoutMs}ms`);
+      error.code = "CDP_WEBSOCKET_OPEN_TIMEOUT";
+      try { ws.close(); } catch { /* already closed */ }
+      finish(error);
+    }, timeoutMs);
+    ws.addEventListener("open", () => finish(), { once: true });
+    ws.addEventListener("error", () => finish(new Error("CDP websocket failed to open")), { once: true });
+    ws.addEventListener("close", () => finish(new Error("CDP websocket closed before opening")), { once: true });
+  });
 }
 
 /**
@@ -65,16 +141,31 @@ async function pickPageTarget(port = DEFAULT_PORT) {
  *   evaluate(js, {awaitPromise})  Runtime.evaluate(returnByValue) — 값 반환
  *   waitFor(jsPredicate, {timeoutMs, pollMs})  predicate 가 truthy 될 때까지
  */
-async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
-  const url = wsUrl || (await pickPageTarget(port));
-  const ws = new WebSocket(url);
-  await new Promise((resolve, reject) => {
-    ws.addEventListener("open", resolve, { once: true });
-    ws.addEventListener("error", () => reject(new Error("CDP websocket failed to open")), { once: true });
-  });
+async function attachPage({ port = DEFAULT_PORT, wsUrl, selection = "new", targetId, connectTimeoutMs = DEFAULT_WS_OPEN_TIMEOUT_MS } = {}) {
+  const target = wsUrl
+    ? (() => {
+      try {
+        const socket = new URL(wsUrl);
+        if (socket.protocol !== "ws:" || !LOOPBACK_HOSTS.has(socket.hostname.toLowerCase()) || Number(socket.port) !== port) return null;
+      } catch { return null; }
+      return { id: null, webSocketDebuggerUrl: wsUrl, ownsTarget: false };
+    })()
+    : await resolvePageTarget(port, { selection, targetId });
+  if (!target) throw new Error(`invalid CDP websocket target for port ${port}`);
+
+  const url = target.webSocketDebuggerUrl;
+  let ws;
+  try {
+    ws = new WebSocket(url);
+    await waitForWebSocketOpen(ws, connectTimeoutMs);
+  } catch (error) {
+    if (target.ownsTarget) await closePageTarget(port, target.id);
+    throw error;
+  }
 
   let nextId = 0;
   const pending = new Map();
+  let closed = false;
   ws.addEventListener("message", (event) => {
     let msg;
     try { msg = JSON.parse(typeof event.data === "string" ? event.data : String(event.data)); } catch { return; }
@@ -85,8 +176,16 @@ async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
       else resolve(msg.result);
     }
   });
+  ws.addEventListener("close", () => {
+    for (const { reject, timer } of pending.values()) {
+      clearTimeout(timer);
+      reject(new Error("CDP websocket closed"));
+    }
+    pending.clear();
+  }, { once: true });
 
   function send(method, params = {}, { timeout = 30000 } = {}) {
+    if (closed) return Promise.reject(new Error("CDP page is closed"));
     const id = ++nextId;
     return new Promise((resolve, reject) => {
       const timer = setTimeout(() => { pending.delete(id); reject(new Error(`CDP ${method} timed out`)); }, timeout);
@@ -94,7 +193,8 @@ async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
         resolve: (r) => { clearTimeout(timer); resolve(r); },
         reject: (e) => { clearTimeout(timer); reject(e); },
       });
-      ws.send(JSON.stringify({ id, method, params }));
+      try { ws.send(JSON.stringify({ id, method, params })); }
+      catch (error) { pending.delete(id); clearTimeout(timer); reject(error); }
     });
   }
 
@@ -186,9 +286,19 @@ async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
     return { path: outPath, bytes: buf.length };
   }
 
-  function close() { try { ws.close(); } catch { /* already closed */ } }
+  async function close({ closeTarget = false } = {}) {
+    if (closed) return;
+    closed = true;
+    try { ws.close(); } catch { /* already closed */ }
+    if (closeTarget && target.ownsTarget && target.id) await closePageTarget(port, target.id);
+  }
 
-  return { navigate, evaluate, evalExpr, waitFor, focusSelector, typeInto, pressKey, clickSelector, printPdf, close, send };
+  return {
+    navigate, evaluate, evalExpr, waitFor, focusSelector, typeInto, pressKey,
+    clickSelector, printPdf, close, send,
+    targetId: target.id,
+    ownsTarget: target.ownsTarget,
+  };
 }
 
-module.exports = { cdpReady, pickPageTarget, attachPage, DEFAULT_PORT };
+module.exports = { cdpReady, pickPageTarget, attachPage, DEFAULT_PORT, DEFAULT_WS_OPEN_TIMEOUT_MS };

package/engine/commands/browser.cjs

@@ -93,12 +93,13 @@ async function browserLogin(ctx, rest) {
   const url = siteUrl(row.site);
 
   if (await cdp.cdpReady()) {
-    // 이미 열린 Agentlas 브라우저를 로그인 페이지로 몬다(조종). 로그인은 사용자가 직접.
+    // 사용자의 현재 탭을 건드리지 않고 Agentlas 브라우저의 새 탭을 연다.
+    // 로그인은 사용자가 직접 한다.
     try {
-      const page = await cdp.attachPage();
+      const page = await cdp.attachPage({ selection: "new" });
       try { await page.navigate(url, { waitMs: 1500 }); } finally { page.close(); }
       vault.logBrowserAction(db, { site: row.site, action: "login.open", target: url, result: "navigated" });
-      ctx.out(`${ctx.ui.green("✓")} ${ko ? "브라우저를 로그인 페이지로 옮겼습니다" : "moved the browser to the login page"}: ${url}`);
+      ctx.out(`${ctx.ui.green("✓")} ${ko ? "새 브라우저 탭을 로그인 페이지로 열었습니다" : "opened a new browser tab for login"}: ${url}`);
     } catch (e) {
       ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`);
       return 1;
@@ -140,10 +141,10 @@ async function browserGo(ctx, rest) {
     return 1;
   }
   try {
-    const page = await cdp.attachPage();
+    const page = await cdp.attachPage({ selection: "new" });
     let title;
     try { await page.navigate(siteUrl(url), { waitMs: 1500 }); title = await page.evalExpr("document.title"); } finally { page.close(); }
-    ctx.out(`${ctx.ui.green("✓")} ${ko ? "이동했습니다" : "navigated"}: ${siteUrl(url)}${title ? ctx.ui.dim(` — ${title}`) : ""}`);
+    ctx.out(`${ctx.ui.green("✓")} ${ko ? "새 브라우저 탭에서 열었습니다" : "opened a new browser tab"}: ${siteUrl(url)}${title ? ctx.ui.dim(` — ${title}`) : ""}`);
     return 0;
   } catch (e) { ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`); return 1; }
 }

package/engine/commands/document.cjs

@@ -51,7 +51,7 @@ async function toPdf(ctx, args) {
   let page;
   try {
     if (typeof ctx.ui.startSpinner === "function") ctx.ui.startSpinner(ko ? "PDF 굽는 중…" : "Rendering PDF…");
-    page = await cdp.attachPage();
+    page = await cdp.attachPage({ selection: "new" });
     await page.navigate(url, { waitMs: 1800 });
     await page.waitFor("document.readyState === 'complete'", { timeoutMs: 8000 });
     const r = await page.printPdf(outPath, { landscape: flags.landscape });
@@ -63,7 +63,7 @@ async function toPdf(ctx, args) {
     ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`);
     return 1;
   } finally {
-    if (page) page.close();
+    if (page) await page.close({ closeTarget: true });
   }
 }
 

package/engine/telegram/connect.cjs

@@ -192,7 +192,7 @@ async function captureBotTokenViaBrowser({ timeoutMs = 180_000, onWait } = {}) {
     err.code = "cdp_unavailable";
     throw err;
   }
-  const page = await cdp.attachPage();
+  const page = await cdp.attachPage({ selection: "new" });
   try {
     await page.navigate(BOTFATHER_WEB_URL, { waitMs: 2500 });
     const deadline = Date.now() + timeoutMs;
@@ -210,7 +210,7 @@ async function captureBotTokenViaBrowser({ timeoutMs = 180_000, onWait } = {}) {
     }
     return null;
   } finally {
-    page.close();
+    await page.close({ closeTarget: true });
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlas",
-  "version": "1.0.63",
+  "version": "1.0.65",
   "description": "Agentlas project terminal — run project controllers and task-scoped agent teams from the terminal. Standalone: no desktop app process required.",
   "bin": {
     "agentlas": "bin/agentlas.cjs"