agentlas 1.0.64 → 1.0.65

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 1.0.65 — 2026-08-29
+
+- Browser, document, and Telegram CDP flows now create and track an Agentlas-owned
+  tab instead of attaching to the first page exposed by the debugging port. Existing
+  pages require explicit target selection, owned temporary pages are cleaned up, and
+  WebSocket attachment has a bounded open timeout.
+- First-run SQLite bootstrap now starts at schema `user_version=106`, generated from
+  the Desktop migration ladder, including the multimodal model-role constraint.
+
 ## 1.0.64 — 2026-08-29
 
 - First-run database bootstrap now refuses symbolic links and non-file entries

package/README.md

@@ -104,7 +104,7 @@ agentlas hep-local "<prompt>"    # Same staffing, registered Local agents only
 agentlas hep-cloud "<prompt>"    # Same staffing, owner Agent Cloud only
 agentlas hep-hub "<prompt>"      # Same staffing, public Hub only
 agentlas call "a,b" "<context>"  # Call explicitly named Hub or Cloud agents
-agentlas browser [...]           # Real browser hardpoint launcher
+agentlas browser [...]           # Real browser hardpoint launcher (opens an owned tab)
 agentlas route "<prompt>" [--json] # Preview routing decisions without execution
 agentlas research <sub>          # Research loadout (status|gather|search|read|plan)
 ```
@@ -230,7 +230,7 @@ The launcher (`bin/agentlas.cjs`) runs system Node against `engine/`. The defaul
 | Windows | `%APPDATA%\Agentlas` |
 | Linux | `$XDG_CONFIG_HOME/Agentlas` (default `~/.config/Agentlas`) |
 
-The SQLite database file is `agentlas.sqlite` (`user_version=97`). When launched for the first time without an existing database, it bootstraps schemas using `engine/bootstrap-schema.sql`. Consequently, **projects, installed agents, task history, automation sessions, and MCP registrations are shared across Desktop and Terminal**. The first ordered project agent remains the controller; additional agents are task-scoped and are stored only as execution ledgers, never as global conversations or durable owners.
+The SQLite database file is `agentlas.sqlite` (`user_version=106`). When launched for the first time without an existing database, it bootstraps schemas using `engine/bootstrap-schema.sql`. Consequently, **projects, installed agents, task history, automation sessions, and MCP registrations are shared across Desktop and Terminal**. The first ordered project agent remains the controller; additional agents are task-scoped and are stored only as execution ledgers, never as global conversations or durable owners.
 
 **Single migration authority.** The Desktop app owns the schema migration ladder; the CLI never migrates the shared database. `engine/bootstrap-schema.sql` is generated by running that ladder to completion against an empty database, so a CLI-created store already sits at the ladder head and has nothing left for Desktop to upgrade. If the CLI opens a store older than the version it knows, it refuses with an actionable message instead of migrating or silently proceeding — a second migrator on this lock-free file is what corrupted the store once before. On a machine with no Desktop app, an operator can set `AGENTLAS_STORE_MIGRATION_ROLE=owner` for a single deliberate upgrade run with every other Agentlas process closed.
 

package/engine/bootstrap-schema.sql

@@ -1,4 +1,4 @@
--- Agentlas 첫 실행 부트스트랩 스키마 (생성: 2026-08-29T07:55:23Z)
+-- Agentlas 첫 실행 부트스트랩 스키마 (생성: 2026-08-29T13:29:10Z)
 --
 -- ★생성물이다. 손으로 고치지 말고 재생성하라:
 --     node scripts/gen-bootstrap-schema.cjs
@@ -6,7 +6,7 @@
 -- 정본은 Desktop 의 마이그레이션 사다리(agentlas_desktop/electron/store/db.ts, SCHEMA_VERSION).
 -- 이 파일은 그 사다리를 **빈 DB** 에 끝까지 돌린 결과의 덤프이므로, 터미널이 만든 DB 는
 -- 처음부터 사다리 머리에 있다 — 데스크탑이 나중에 승급할 것이 남지 않는다.
-PRAGMA user_version=105;
+PRAGMA user_version=106;
 CREATE TABLE active_runtime (
         id INTEGER PRIMARY KEY CHECK(id = 1),
         kind TEXT NOT NULL
@@ -1015,7 +1015,7 @@ CREATE TABLE meta (
         value TEXT NOT NULL
       );
 CREATE TABLE model_role_members (
-        role TEXT NOT NULL CHECK(role IN ('orchestrator','worker')),
+        role TEXT NOT NULL CHECK(role IN ('orchestrator','worker','multimodal')),
         position INTEGER NOT NULL CHECK(position >= 1),
         kind TEXT NOT NULL,
         backend TEXT,
@@ -1027,7 +1027,7 @@ CREATE TABLE model_role_members (
         PRIMARY KEY(role, position)
       );
 CREATE TABLE model_roles (
-        role TEXT PRIMARY KEY CHECK(role IN ('orchestrator','worker')),
+        role TEXT PRIMARY KEY CHECK(role IN ('orchestrator','worker','multimodal')),
         kind TEXT NOT NULL,
         backend TEXT,
         source TEXT,

package/engine/browser/cdp.cjs

@@ -20,6 +20,8 @@
 const http = require("node:http");
 
 const DEFAULT_PORT = Number(process.env.AGENTLAS_CDP_PORT || 9222);
+const DEFAULT_WS_OPEN_TIMEOUT_MS = 5_000;
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1", "[::1]"]);
 
 function httpJson(port, path, { timeout = 3000, method = "GET" } = {}) {
   return new Promise((resolve, reject) => {
@@ -46,16 +48,90 @@ async function cdpReady(port = DEFAULT_PORT) {
   } catch { return false; }
 }
 
-/** 조종할 page 타겟 하나를 고른다(없으면 새로 연다). 반환: webSocketDebuggerUrl. */
-async function pickPageTarget(port = DEFAULT_PORT) {
-  const targets = await httpJson(port, "/json");
-  let page = (Array.isArray(targets) ? targets : []).find((t) => t.type === "page" && t.webSocketDebuggerUrl);
-  if (!page) {
-    // 새 탭을 연다(DevTools HTTP: PUT /json/new).
-    page = await httpJson(port, "/json/new?about:blank", { method: "PUT" });
+function verifiedPageTarget(target, port, ownsTarget = false) {
+  if (!target || target.type !== "page" || typeof target.id !== "string" || typeof target.webSocketDebuggerUrl !== "string") return null;
+  try {
+    const socket = new URL(target.webSocketDebuggerUrl);
+    if (socket.protocol !== "ws:" || !LOOPBACK_HOSTS.has(socket.hostname.toLowerCase()) || Number(socket.port) !== port) return null;
+  } catch {
+    return null;
+  }
+  return { id: target.id, webSocketDebuggerUrl: target.webSocketDebuggerUrl, ownsTarget };
+}
+
+async function resolvePageTarget(port, { selection = "new", targetId = null } = {}) {
+  if (selection !== "new" && selection !== "existing") {
+    throw new Error(`unsupported CDP target selection: ${selection}`);
   }
-  if (!page || !page.webSocketDebuggerUrl) throw new Error("no CDP page target available");
-  return page.webSocketDebuggerUrl;
+  const rawTargets = await httpJson(port, "/json");
+  const pages = (Array.isArray(rawTargets) ? rawTargets : [])
+    .map((target) => verifiedPageTarget(target, port))
+    .filter(Boolean);
+
+  if (selection === "existing") {
+    if (!targetId) throw new Error("existing CDP target selection requires an explicit targetId");
+    const exact = pages.find((target) => target.id === String(targetId));
+    if (!exact) throw new Error(`no CDP page target matches targetId ${targetId}`);
+    return exact;
+  }
+
+  // Never reuse an arbitrary first page. It may be a user's active tab, and
+  // browser/document/Telegram flows must not navigate it behind their back.
+  // Create a target we own, then return its socket identity to the caller.
+  const created = await httpJson(port, `/json/new?${encodeURIComponent("about:blank")}`, { method: "PUT" });
+  const exact = verifiedPageTarget(created, port, true);
+  if (!exact) throw new Error("CDP did not return a verified page target for the new tab");
+  return exact;
+}
+
+/**
+ * Pick a page target without guessing ownership.
+ *
+ * The safe default is a fresh target. Reusing a page requires selection:
+ * `pickPageTarget(port, { selection: "existing", targetId })`.
+ */
+async function pickPageTarget(port = DEFAULT_PORT, options = {}) {
+  return (await resolvePageTarget(port, options)).webSocketDebuggerUrl;
+}
+
+function closePageTarget(port, targetId) {
+  return new Promise((resolve) => {
+    const req = http.request({
+      host: "127.0.0.1",
+      port,
+      path: `/json/close/${encodeURIComponent(String(targetId))}`,
+      timeout: 3_000,
+    }, (res) => {
+      res.resume();
+      res.once("end", resolve);
+    });
+    req.once("error", resolve);
+    req.once("timeout", () => { req.destroy(); resolve(); });
+    req.end();
+  });
+}
+
+function waitForWebSocketOpen(ws, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    let timer;
+    const finish = (error) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (error) reject(error);
+      else resolve();
+    };
+    timer = setTimeout(() => {
+      const error = new Error(`CDP websocket open timed out after ${timeoutMs}ms`);
+      error.code = "CDP_WEBSOCKET_OPEN_TIMEOUT";
+      try { ws.close(); } catch { /* already closed */ }
+      finish(error);
+    }, timeoutMs);
+    ws.addEventListener("open", () => finish(), { once: true });
+    ws.addEventListener("error", () => finish(new Error("CDP websocket failed to open")), { once: true });
+    ws.addEventListener("close", () => finish(new Error("CDP websocket closed before opening")), { once: true });
+  });
 }
 
 /**
@@ -65,16 +141,31 @@ async function pickPageTarget(port = DEFAULT_PORT) {
  *   evaluate(js, {awaitPromise})  Runtime.evaluate(returnByValue) — 값 반환
  *   waitFor(jsPredicate, {timeoutMs, pollMs})  predicate 가 truthy 될 때까지
  */
-async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
-  const url = wsUrl || (await pickPageTarget(port));
-  const ws = new WebSocket(url);
-  await new Promise((resolve, reject) => {
-    ws.addEventListener("open", resolve, { once: true });
-    ws.addEventListener("error", () => reject(new Error("CDP websocket failed to open")), { once: true });
-  });
+async function attachPage({ port = DEFAULT_PORT, wsUrl, selection = "new", targetId, connectTimeoutMs = DEFAULT_WS_OPEN_TIMEOUT_MS } = {}) {
+  const target = wsUrl
+    ? (() => {
+      try {
+        const socket = new URL(wsUrl);
+        if (socket.protocol !== "ws:" || !LOOPBACK_HOSTS.has(socket.hostname.toLowerCase()) || Number(socket.port) !== port) return null;
+      } catch { return null; }
+      return { id: null, webSocketDebuggerUrl: wsUrl, ownsTarget: false };
+    })()
+    : await resolvePageTarget(port, { selection, targetId });
+  if (!target) throw new Error(`invalid CDP websocket target for port ${port}`);
+
+  const url = target.webSocketDebuggerUrl;
+  let ws;
+  try {
+    ws = new WebSocket(url);
+    await waitForWebSocketOpen(ws, connectTimeoutMs);
+  } catch (error) {
+    if (target.ownsTarget) await closePageTarget(port, target.id);
+    throw error;
+  }
 
   let nextId = 0;
   const pending = new Map();
+  let closed = false;
   ws.addEventListener("message", (event) => {
     let msg;
     try { msg = JSON.parse(typeof event.data === "string" ? event.data : String(event.data)); } catch { return; }
@@ -85,8 +176,16 @@ async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
       else resolve(msg.result);
     }
   });
+  ws.addEventListener("close", () => {
+    for (const { reject, timer } of pending.values()) {
+      clearTimeout(timer);
+      reject(new Error("CDP websocket closed"));
+    }
+    pending.clear();
+  }, { once: true });
 
   function send(method, params = {}, { timeout = 30000 } = {}) {
+    if (closed) return Promise.reject(new Error("CDP page is closed"));
     const id = ++nextId;
     return new Promise((resolve, reject) => {
       const timer = setTimeout(() => { pending.delete(id); reject(new Error(`CDP ${method} timed out`)); }, timeout);
@@ -94,7 +193,8 @@ async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
         resolve: (r) => { clearTimeout(timer); resolve(r); },
         reject: (e) => { clearTimeout(timer); reject(e); },
       });
-      ws.send(JSON.stringify({ id, method, params }));
+      try { ws.send(JSON.stringify({ id, method, params })); }
+      catch (error) { pending.delete(id); clearTimeout(timer); reject(error); }
     });
   }
 
@@ -186,9 +286,19 @@ async function attachPage({ port = DEFAULT_PORT, wsUrl } = {}) {
     return { path: outPath, bytes: buf.length };
   }
 
-  function close() { try { ws.close(); } catch { /* already closed */ } }
+  async function close({ closeTarget = false } = {}) {
+    if (closed) return;
+    closed = true;
+    try { ws.close(); } catch { /* already closed */ }
+    if (closeTarget && target.ownsTarget && target.id) await closePageTarget(port, target.id);
+  }
 
-  return { navigate, evaluate, evalExpr, waitFor, focusSelector, typeInto, pressKey, clickSelector, printPdf, close, send };
+  return {
+    navigate, evaluate, evalExpr, waitFor, focusSelector, typeInto, pressKey,
+    clickSelector, printPdf, close, send,
+    targetId: target.id,
+    ownsTarget: target.ownsTarget,
+  };
 }
 
-module.exports = { cdpReady, pickPageTarget, attachPage, DEFAULT_PORT };
+module.exports = { cdpReady, pickPageTarget, attachPage, DEFAULT_PORT, DEFAULT_WS_OPEN_TIMEOUT_MS };

package/engine/commands/browser.cjs

@@ -93,12 +93,13 @@ async function browserLogin(ctx, rest) {
   const url = siteUrl(row.site);
 
   if (await cdp.cdpReady()) {
-    // 이미 열린 Agentlas 브라우저를 로그인 페이지로 몬다(조종). 로그인은 사용자가 직접.
+    // 사용자의 현재 탭을 건드리지 않고 Agentlas 브라우저의 새 탭을 연다.
+    // 로그인은 사용자가 직접 한다.
     try {
-      const page = await cdp.attachPage();
+      const page = await cdp.attachPage({ selection: "new" });
       try { await page.navigate(url, { waitMs: 1500 }); } finally { page.close(); }
       vault.logBrowserAction(db, { site: row.site, action: "login.open", target: url, result: "navigated" });
-      ctx.out(`${ctx.ui.green("✓")} ${ko ? "브라우저를 로그인 페이지로 옮겼습니다" : "moved the browser to the login page"}: ${url}`);
+      ctx.out(`${ctx.ui.green("✓")} ${ko ? "새 브라우저 탭을 로그인 페이지로 열었습니다" : "opened a new browser tab for login"}: ${url}`);
     } catch (e) {
       ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`);
       return 1;
@@ -140,10 +141,10 @@ async function browserGo(ctx, rest) {
     return 1;
   }
   try {
-    const page = await cdp.attachPage();
+    const page = await cdp.attachPage({ selection: "new" });
     let title;
     try { await page.navigate(siteUrl(url), { waitMs: 1500 }); title = await page.evalExpr("document.title"); } finally { page.close(); }
-    ctx.out(`${ctx.ui.green("✓")} ${ko ? "이동했습니다" : "navigated"}: ${siteUrl(url)}${title ? ctx.ui.dim(` — ${title}`) : ""}`);
+    ctx.out(`${ctx.ui.green("✓")} ${ko ? "새 브라우저 탭에서 열었습니다" : "opened a new browser tab"}: ${siteUrl(url)}${title ? ctx.ui.dim(` — ${title}`) : ""}`);
     return 0;
   } catch (e) { ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`); return 1; }
 }

package/engine/commands/document.cjs

@@ -51,7 +51,7 @@ async function toPdf(ctx, args) {
   let page;
   try {
     if (typeof ctx.ui.startSpinner === "function") ctx.ui.startSpinner(ko ? "PDF 굽는 중…" : "Rendering PDF…");
-    page = await cdp.attachPage();
+    page = await cdp.attachPage({ selection: "new" });
     await page.navigate(url, { waitMs: 1800 });
     await page.waitFor("document.readyState === 'complete'", { timeoutMs: 8000 });
     const r = await page.printPdf(outPath, { landscape: flags.landscape });
@@ -63,7 +63,7 @@ async function toPdf(ctx, args) {
     ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`);
     return 1;
   } finally {
-    if (page) page.close();
+    if (page) await page.close({ closeTarget: true });
   }
 }
 

package/engine/telegram/connect.cjs

@@ -192,7 +192,7 @@ async function captureBotTokenViaBrowser({ timeoutMs = 180_000, onWait } = {}) {
     err.code = "cdp_unavailable";
     throw err;
   }
-  const page = await cdp.attachPage();
+  const page = await cdp.attachPage({ selection: "new" });
   try {
     await page.navigate(BOTFATHER_WEB_URL, { waitMs: 2500 });
     const deadline = Date.now() + timeoutMs;
@@ -210,7 +210,7 @@ async function captureBotTokenViaBrowser({ timeoutMs = 180_000, onWait } = {}) {
     }
     return null;
   } finally {
-    page.close();
+    await page.close({ closeTarget: true });
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlas",
-  "version": "1.0.64",
+  "version": "1.0.65",
   "description": "Agentlas project terminal — run project controllers and task-scoped agent teams from the terminal. Standalone: no desktop app process required.",
   "bin": {
     "agentlas": "bin/agentlas.cjs"