agentlas 1.0.65 → 1.0.67

package/engine/commands/acp.cjs

@@ -28,14 +28,25 @@ function descriptor() {
 }
 
 async function run(ctx, args) {
-  if (args.includes("--info") || args.includes("--json")) {
+  const descriptorMode = ctx.output?.format === "json" || (args.length === 1 && ["--info", "--json"].includes(args[0]));
+  if (descriptorMode) {
+    if (args.some((arg) => !["--info", "--json"].includes(arg)) || new Set(args).size !== args.length) {
+      const error = new Error("Usage: agentlas acp [--info]");
+      error.code = "INVALID_ARGUMENT";
+      throw error;
+    }
     ctx.out(JSON.stringify(descriptor(), null, 2));
     return 0;
   }
-  if (args.includes("--help") || args.includes("help")) {
+  if (args.length === 1 && ["--help", "-h", "help"].includes(args[0])) {
     ctx.out("Usage: agentlas acp [--info]\n  Speak the Agent Client Protocol (v1) on stdio so an editor can run Agentlas as its agent.");
     return 0;
   }
+  if (args.length) {
+    const error = new Error("Usage: agentlas acp [--info]");
+    error.code = "INVALID_ARGUMENT";
+    throw error;
+  }
   // stdout is the protocol wire from here on: route everything human to stderr.
   const server = new AcpAgentServer({ ctx, input: process.stdin, output: process.stdout });
   await server.start();

package/engine/commands/automation.cjs

@@ -15,6 +15,39 @@ const schedule = require("../automation/schedule.cjs");
 const store = require("../automation/store.cjs");
 const daemon = require("../automation/daemon.cjs");
 
+function parseOptions(args, schema) {
+  const values = new Set(schema.values || []);
+  const booleans = new Set(schema.booleans || []);
+  const out = {};
+  for (let i = 0; i < args.length; i += 1) {
+    const token = String(args[i]);
+    if (!token.startsWith("--") || token === "--") throw new Error(`unexpected argument: ${token}`);
+    const at = token.indexOf("=");
+    const key = token.slice(2, at >= 0 ? at : undefined);
+    if (!values.has(key) && !booleans.has(key)) throw new Error(`unknown option: --${key}`);
+    if (Object.prototype.hasOwnProperty.call(out, key)) throw new Error(`duplicate option: --${key}`);
+    if (booleans.has(key)) {
+      if (at >= 0) throw new Error(`--${key} does not take a value`);
+      out[key] = true;
+      continue;
+    }
+    const value = at >= 0 ? token.slice(at + 1) : args[++i];
+    if (value === undefined || value === "" || (at < 0 && String(value).startsWith("--"))) {
+      throw new Error(`--${key} requires a value`);
+    }
+    out[key] = String(value);
+  }
+  return out;
+}
+
+function intervalOption(raw, minimum, label = "--interval") {
+  const parsed = Number(raw);
+  if (!Number.isInteger(parsed) || parsed < minimum) {
+    throw new Error(`${label} requires an integer of at least ${minimum} seconds`);
+  }
+  return parsed;
+}
+
 function resolveFirm(db, token) {
   const q = String(token || "").trim();
   if (!q) return null;
@@ -34,6 +67,7 @@ async function run(ctx, args) {
   const fail = (msg) => { ctx.err(msg); return 1; };
 
   if (sub === "list") {
+    if (args.length !== 1 && args.length !== 0) return fail(`unexpected argument: ${String(args[1])}`);
     const rows = store.listAutomations(db);
     if (!rows.length) {
       ctx.out(ko
@@ -62,17 +96,14 @@ async function run(ctx, args) {
 
   if (sub === "add") {
     // agentlas automation add --name "..." --agent <slug>|--firm <slug> --cron "0 9 * * *" --prompt "..."
-    const flags = {};
-    for (let i = 1; i < args.length; i++) {
-      const a = args[i];
-      if (a === "--name") flags.name = args[++i];
-      else if (a === "--agent") flags.agent = args[++i];
-      else if (a === "--firm") flags.firm = args[++i];
-      else if (a === "--cron") flags.cron = args[++i];
-      else if (a === "--prompt") flags.prompt = args[++i];
-      else if (a === "--tz") flags.tz = args[++i];
-      else if (a === "--disabled") flags.disabled = true;
-    }
+    let flags;
+    try {
+      flags = parseOptions(args.slice(1), {
+        values: ["name", "agent", "firm", "cron", "prompt", "tz"],
+        booleans: ["disabled"],
+      });
+    } catch (error) { return fail(String((error && error.message) || error)); }
+    if (flags.agent && flags.firm) return fail("use only one of --agent or --firm");
     if (!flags.cron || !flags.prompt || (!flags.agent && !flags.firm)) {
       ctx.err(ko
         ? '사용법: agentlas automation add --name "이름" --agent <슬러그>|--firm <슬러그> --cron "0 9 * * *" --prompt "지시" [--tz Asia/Seoul] [--disabled]'
@@ -128,9 +159,15 @@ async function run(ctx, args) {
   if (sub === "on" || sub === "off") {
     const idPrefix = args[1];
     if (!idPrefix) return fail(usage(`${sub} <id>`));
+    if (args.length !== 2) return fail(`unexpected argument: ${String(args[2])}`);
     const row = store.getAutomationByPrefix(db, idPrefix);
     if (!row) return fail(missingAutomation(idPrefix));
-    store.setEnabled(db, row, sub === "on");
+    const outcome = store.setEnabledChecked(db, row, sub === "on");
+    if (!outcome.changed) {
+      return fail(ko
+        ? `자동화가 변경되는 동안 사라졌습니다: ${row.id}`
+        : `Automation changed before it could be updated: ${row.id}`);
+    }
     ctx.out(`${sub === "on" ? (ko ? "활성화됨" : "Enabled") : (ko ? "비활성화됨" : "Disabled")}: ${row.id.slice(0, 8)}  ${row.name}`);
     return 0;
   }
@@ -138,14 +175,20 @@ async function run(ctx, args) {
   if (sub === "remove" || sub === "rm") {
     const idPrefix = args[1];
     if (!idPrefix) return fail(usage("remove <id>"));
+    if (args.length !== 2) return fail(`unexpected argument: ${String(args[2])}`);
     const row = store.getAutomationByPrefix(db, idPrefix);
     if (!row) return fail(missingAutomation(idPrefix));
-    store.removeAutomation(db, row.id);
+    if (!store.removeAutomation(db, row.id)) {
+      return fail(ko
+        ? `자동화가 삭제되는 동안 사라졌습니다: ${row.id}`
+        : `Automation changed before it could be deleted: ${row.id}`);
+    }
     ctx.out(`${ko ? "삭제됨" : "Deleted"}: ${row.id.slice(0, 8)}  ${row.name}`);
     return 0;
   }
 
   if (sub === "runs") {
+    if (args.length !== 1) return fail(`unexpected argument: ${String(args[1])}`);
     const rows = store.listRuns(db, 15);
     if (!rows.length) {
       ctx.out(ko ? "실행 기록이 없습니다." : "No run history.");
@@ -165,11 +208,11 @@ async function run(ctx, args) {
 
   if (sub === "run") {
     const idPrefix = args[1];
-    let runtimeOverride = null;
-    for (let i = 2; i < args.length; i++) {
-      if (args[i] === "--runtime") runtimeOverride = args[++i];
-    }
     if (!idPrefix) return fail(usage("run <id>"));
+    let runFlags;
+    try { runFlags = parseOptions(args.slice(2), { values: ["runtime"], booleans: [] }); }
+    catch (error) { return fail(String((error && error.message) || error)); }
+    const runtimeOverride = runFlags.runtime || null;
     const row = store.getAutomationByPrefix(db, idPrefix);
     if (!row) return fail(missingAutomation(idPrefix));
     // run-now는 스케줄을 건드리지 않는다 (앱의 advanceSchedule=false와 동일).
@@ -190,17 +233,19 @@ async function run(ctx, args) {
   }
 
   if (sub === "daemon") {
+    let daemonFlags;
+    try { daemonFlags = parseOptions(args.slice(1), { values: ["interval", "runtime"], booleans: [] }); }
+    catch (error) { return fail(String((error && error.message) || error)); }
     let interval = 30;
-    let runtimeOverride = null;
-    for (let i = 1; i < args.length; i++) {
-      if (args[i] === "--interval") interval = Math.max(10, Number(args[++i]) || 30);
-      else if (args[i] === "--runtime") runtimeOverride = args[++i];
-    }
+    try { if (daemonFlags.interval !== undefined) interval = intervalOption(daemonFlags.interval, 10); }
+    catch (error) { return fail(String((error && error.message) || error)); }
+    const runtimeOverride = daemonFlags.runtime || null;
     return daemon.automationDaemon(ctx, db, { intervalSec: interval, runtimeOverride });
   }
 
   // 1회 due 스윕 후 종료 — launchd/cron 이 poke 하는 진입점(상주 루프 아님).
   if (sub === "tick") {
+    if (args.length !== 1) return fail(`unexpected argument: ${String(args[1])}`);
     await daemon.daemonTick(ctx, db, {});
     return 0;
   }
@@ -209,6 +254,7 @@ async function run(ctx, args) {
   if (sub === "install" || sub === "uninstall" || sub === "status") {
     const launchd = require("../automation/launchd.cjs");
     if (sub === "status") {
+      if (args.length !== 1) return fail(`unexpected argument: ${String(args[1])}`);
       const st = launchd.launchdStatus();
       if (!st.supported) { ctx.out(ko ? "launchd 상주는 macOS 전용입니다. 다른 OS 는 `agentlas automation daemon` 을 켜 두세요." : "launchd persistence is macOS-only. On other systems keep `agentlas automation daemon` running."); return 0; }
       ctx.out(`${st.loaded ? ctx.ui.green("✓") : ctx.ui.dim("○")} ${ko ? "상주(launchd)" : "persistence (launchd)"}: ${st.loaded ? (ko ? "실행 중" : "loaded") : st.installed ? (ko ? "설치됨(미로드)" : "installed (not loaded)") : (ko ? "미설치" : "not installed")}`);
@@ -217,8 +263,12 @@ async function run(ctx, args) {
       return 0;
     }
     if (sub === "install") {
+      let installFlags;
+      try { installFlags = parseOptions(args.slice(1), { values: ["interval"], booleans: [] }); }
+      catch (error) { return fail(String((error && error.message) || error)); }
       let interval = 300;
-      for (let i = 1; i < args.length; i++) if (args[i] === "--interval") interval = Math.max(30, Number(args[++i]) || 300);
+      try { if (installFlags.interval !== undefined) interval = intervalOption(installFlags.interval, 30); }
+      catch (error) { return fail(String((error && error.message) || error)); }
       const st = launchd.enableLaunchd({ intervalSec: interval });
       if (st.error) { ctx.err(`${ctx.ui.red("✖")} ${st.error}`); return 1; }
       ctx.out(`${ctx.ui.green("✓")} ${ko ? "상주를 켰습니다 — 앱/창이 꺼져 있어도 자동화가 발동합니다" : "persistence on — automations fire even with the app/window closed"} (${interval}s)`);
@@ -226,6 +276,7 @@ async function run(ctx, args) {
       return 0;
     }
     // uninstall
+    if (args.length !== 1) return fail(`unexpected argument: ${String(args[1])}`);
     const st = launchd.disableLaunchd();
     if (st.error) { ctx.err(`${ctx.ui.red("✖")} ${st.error}`); return 1; }
     ctx.out(`${ctx.ui.green("✓")} ${ko ? "상주를 껐습니다. 자동화는 포그라운드 daemon 을 켜 둘 때만 발동합니다." : "persistence off. Automations fire only while a foreground daemon runs."}`);
@@ -236,4 +287,4 @@ async function run(ctx, args) {
   return 1;
 }
 
-module.exports = { run };
+module.exports = { run, parseOptions, intervalOption };

package/engine/commands/billing.cjs

@@ -36,10 +36,15 @@ function usage(ko) {
 
 async function run(ctx, args) {
   const ko = ctx.lang === "ko";
-  if (args.some((a) => a === "--help" || a === "-h" || a === "help")) {
+  if (args.length === 1 && ["--help", "-h", "help"].includes(args[0])) {
     ctx.out(usage(ko));
     return 0;
   }
+  if (args.length) {
+    const error = new Error(usage(ko).split("\n")[0]);
+    error.code = "INVALID_ARGUMENT";
+    throw error;
+  }
 
   const cookie = await cloudSessionCookie();
   if (!cookie) {

package/engine/commands/browser.cjs

@@ -26,11 +26,40 @@ const cdp = require("../browser/cdp.cjs");
 
 const SUBS = new Set(["status", "sites", "add", "login", "mark", "go", "rm", "remove"]);
 
-function flag(rest, name) {
-  const i = rest.findIndex((a) => a === `--${name}`);
-  return i >= 0 && rest[i + 1] ? rest[i + 1] : null;
+function browserArgumentError(message) {
+  const error = new Error(message);
+  error.code = "INVALID_ARGUMENT";
+  return error;
+}
+
+function parseBrowserRest(rest, { values = [], positionals, usage }) {
+  const allowedValues = new Set(values);
+  const seen = new Set();
+  const parsed = { _: [] };
+  for (let index = 0; index < rest.length; index += 1) {
+    const token = String(rest[index]);
+    if (!token.startsWith("-")) {
+      parsed._.push(token);
+      continue;
+    }
+    if (!token.startsWith("--")) throw browserArgumentError(usage);
+    const equal = token.indexOf("=");
+    const key = token.slice(2, equal === -1 ? undefined : equal);
+    if (!allowedValues.has(key) || seen.has(key)) throw browserArgumentError(usage);
+    let value;
+    if (equal !== -1) value = token.slice(equal + 1);
+    else {
+      value = rest[index + 1];
+      if (value === undefined || String(value).startsWith("-")) throw browserArgumentError(usage);
+      index += 1;
+    }
+    if (!String(value)) throw browserArgumentError(usage);
+    seen.add(key);
+    parsed[key] = String(value);
+  }
+  if (parsed._.length !== positionals) throw browserArgumentError(usage);
+  return parsed;
 }
-function positional(rest) { return rest.find((a) => a && !String(a).startsWith("-")) || null; }
 
 function siteUrl(site) { return /^[a-z][a-z0-9+.-]*:\/\//i.test(site) ? site : `https://${site}`; }
 
@@ -70,12 +99,11 @@ function browserSites(ctx) {
   return 0;
 }
 
-function browserAdd(ctx, rest) {
+function browserAdd(ctx, parsed) {
   const ko = ctx.lang === "ko";
-  const site = positional(rest);
-  if (!site) { ctx.err(ko ? "사용법: agentlas browser add <site> [--label 이름] [--user 아이디]" : "Usage: agentlas browser add <site> [--label name] [--user handle]"); return 1; }
+  const site = parsed._[0];
   try {
-    const row = vault.upsertBrowserSite(ctx.db(), { site, label: flag(rest, "label"), username: flag(rest, "user") });
+    const row = vault.upsertBrowserSite(ctx.db(), { site, label: parsed.label || null, username: parsed.user || null });
     vault.logBrowserAction(ctx.db(), { site: row.site, action: "vault.save", result: "ok" });
     ctx.out(`${ctx.ui.green("✓")} ${ko ? "사이트를 저장했습니다" : "site saved"}: ${row.site}`);
     ctx.out(ctx.ui.dim(ko ? `로그인: agentlas browser login ${row.site}` : `Log in: agentlas browser login ${row.site}`));
@@ -83,10 +111,8 @@ function browserAdd(ctx, rest) {
   } catch (e) { ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`); return 1; }
 }
 
-async function browserLogin(ctx, rest) {
+async function browserLogin(ctx, site) {
   const ko = ctx.lang === "ko";
-  const site = positional(rest);
-  if (!site) { ctx.err(ko ? "사용법: agentlas browser login <site>" : "Usage: agentlas browser login <site>"); return 1; }
   const db = ctx.db();
   let row;
   try { row = vault.upsertBrowserSite(db, { site }); } catch (e) { ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`); return 1; }
@@ -117,11 +143,8 @@ async function browserLogin(ctx, rest) {
   return 0;
 }
 
-function browserMark(ctx, rest) {
+function browserMark(ctx, site, status) {
   const ko = ctx.lang === "ko";
-  const site = positional(rest);
-  const status = rest.filter((a) => a && !String(a).startsWith("-") && a !== site)[0];
-  if (!site || !status) { ctx.err(ko ? "사용법: agentlas browser mark <site> <valid|expired|none>" : "Usage: agentlas browser mark <site> <valid|expired|none>"); return 1; }
   try {
     const row = vault.setBrowserSession(ctx.db(), site, status);
     vault.logBrowserAction(ctx.db(), { site: row.site, action: "session.mark", result: status });
@@ -130,10 +153,8 @@ function browserMark(ctx, rest) {
   } catch (e) { ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`); return 1; }
 }
 
-async function browserGo(ctx, rest) {
+async function browserGo(ctx, url) {
   const ko = ctx.lang === "ko";
-  const url = positional(rest);
-  if (!url) { ctx.err(ko ? "사용법: agentlas browser go <url>" : "Usage: agentlas browser go <url>"); return 1; }
   if (!(await cdp.cdpReady())) {
     ctx.err(ko
       ? `Agentlas 브라우저가 실행 중이 아닙니다. 먼저 열어 주세요: agentlas browser ${siteUrl(url)}`
@@ -149,10 +170,8 @@ async function browserGo(ctx, rest) {
   } catch (e) { ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`); return 1; }
 }
 
-function browserRemove(ctx, rest) {
+function browserRemove(ctx, site) {
   const ko = ctx.lang === "ko";
-  const site = positional(rest);
-  if (!site) { ctx.err(ko ? "사용법: agentlas browser rm <site>" : "Usage: agentlas browser rm <site>"); return 1; }
   vault.deleteBrowserSite(ctx.db(), site);
   vault.logBrowserAction(ctx.db(), { site: vault.normalizeSite(site), action: "vault.delete", result: "ok" });
   ctx.out(`${ctx.ui.green("✓")} ${ko ? "사이트를 삭제했습니다" : "site removed"}: ${vault.normalizeSite(site) || site}`);
@@ -160,17 +179,30 @@ function browserRemove(ctx, rest) {
 }
 
 async function run(ctx, args) {
-  if (args.some(isHelpToken)) { ctx.out(usageFor("browser", ctx.lang)); return 0; }
+  if (args.length === 1 && isHelpToken(args[0])) { ctx.out(usageFor("browser", ctx.lang)); return 0; }
   const sub = String(args[0] || "").toLowerCase();
   const rest = args.slice(1);
   if (SUBS.has(sub)) {
-    if (sub === "status") return browserStatus(ctx);
-    if (sub === "sites") return browserSites(ctx);
-    if (sub === "add") return browserAdd(ctx, rest);
-    if (sub === "login") return browserLogin(ctx, rest);
-    if (sub === "mark") return browserMark(ctx, rest);
-    if (sub === "go") return browserGo(ctx, rest);
-    if (sub === "rm" || sub === "remove") return browserRemove(ctx, rest);
+    if (sub === "status" || sub === "sites") {
+      parseBrowserRest(rest, { positionals: 0, usage: `Usage: agentlas browser ${sub}` });
+      return sub === "status" ? browserStatus(ctx) : browserSites(ctx);
+    }
+    if (sub === "add") {
+      const parsed = parseBrowserRest(rest, {
+        values: ["label", "user"], positionals: 1,
+        usage: "Usage: agentlas browser add <site> [--label name] [--user handle]",
+      });
+      return browserAdd(ctx, parsed);
+    }
+    if (sub === "mark") {
+      const parsed = parseBrowserRest(rest, { positionals: 2, usage: "Usage: agentlas browser mark <site> <valid|expired|none>" });
+      return browserMark(ctx, parsed._[0], parsed._[1]);
+    }
+    const usage = `Usage: agentlas browser ${sub} <${sub === "go" ? "url" : "site"}>`;
+    const parsed = parseBrowserRest(rest, { positionals: 1, usage });
+    if (sub === "login") return browserLogin(ctx, parsed._[0]);
+    if (sub === "go") return browserGo(ctx, parsed._[0]);
+    return browserRemove(ctx, parsed._[0]);
   }
   // 그 외(무인자·URL·검색어)는 v1 그대로 hep-browser 하드포인트로 — Chrome 을 실제로 띄운다.
   return create(ctx).cmdHep(["hep-browser", ...args]);

package/engine/commands/build.cjs

@@ -23,24 +23,72 @@ const fs = require("node:fs");
 
 function usage(ko) {
   return ko
-    ? "사용법: agentlas build \"<만들고 싶은 에이전트>\"  [--runtime <kind>] [--print]"
-    : "Usage: agentlas build \"<the agent you want>\"  [--runtime <kind>] [--print]";
+    ? "사용법: agentlas build \"<만들고 싶은 에이전트>\"  [--runtime <kind>] [--print] [-- <옵션처럼 시작하는 요청>]"
+    : "Usage: agentlas build \"<the agent you want>\"  [--runtime <kind>] [--print] [-- <request starting like an option>]";
 }
 
-async function run(ctx, args) {
-  const ko = ctx.lang === "ko";
-  if (args.some((a) => a === "--help" || a === "-h" || a === "help")) { ctx.out(usage(ko)); return 0; }
+function buildError(message, code = "INVALID_ARGUMENT") {
+  const error = new Error(message);
+  error.code = code;
+  return error;
+}
 
-  // --runtime/--print 만 벗겨내고 나머지는 요청 문장.
-  const flags = {};
+function parseArgs(args) {
+  const flags = { runtime: null, print: false };
   const rest = [];
+  const seen = new Set();
+  let passthrough = false;
   for (let i = 0; i < args.length; i += 1) {
-    if (args[i] === "--runtime" && args[i + 1]) { flags.runtime = args[++i]; continue; }
-    if (args[i] === "--print" || args[i] === "-p") { flags.print = true; continue; }
-    rest.push(args[i]);
+    const token = String(args[i]);
+    if (passthrough) { rest.push(token); continue; }
+    if (token === "--") { passthrough = true; continue; }
+    if (token === "--print" || token === "-p") {
+      if (seen.has("print")) throw new Error("duplicate option: --print");
+      seen.add("print");
+      flags.print = true;
+      continue;
+    }
+    if (token === "--runtime" || token.startsWith("--runtime=")) {
+      if (seen.has("runtime")) throw new Error("duplicate option: --runtime");
+      seen.add("runtime");
+      const inline = token.startsWith("--runtime=");
+      const value = inline ? token.slice(10) : args[++i];
+      if (value === undefined || value === "" || (!inline && String(value).startsWith("--"))) {
+        throw new Error("--runtime requires a value");
+      }
+      flags.runtime = String(value);
+      continue;
+    }
+    if (token.startsWith("-")) {
+      throw new Error(`unknown option: ${token} (use -- before a request that starts with '-')`);
+    }
+    rest.push(token);
+  }
+  return { flags, rest };
+}
+
+async function run(ctx, args) {
+  const ko = ctx.lang === "ko";
+  if (args.length === 1 && ["--help", "-h", "help"].includes(args[0])) { ctx.out(usage(ko)); return 0; }
+
+  let parsed;
+  try { parsed = parseArgs(args); }
+  catch (error) {
+    const typed = error && typeof error === "object" && typeof error.code === "string"
+      ? error
+      : buildError(String((error && error.message) || error));
+    if (typeof ctx.fail === "function") ctx.fail(typed);
+    else ctx.err(String(typed.message || typed));
+    return 1;
   }
+  const { flags, rest } = parsed;
   const request = rest.join(" ").trim();
-  if (!request) { ctx.err("✖ " + usage(ko)); return 1; }
+  if (!request) {
+    const error = buildError("✖ " + usage(ko));
+    if (typeof ctx.fail === "function") ctx.fail(error);
+    else ctx.err(error.message);
+    return 1;
+  }
 
   const db = ctx.db();
   const cwd = projectCwd();
@@ -53,7 +101,12 @@ async function run(ctx, args) {
     });
   } catch (e) {
     // no_runtime 등 정직 정지 그대로.
-    ctx.err(String((e && e.message) || e));
+    const error = e && typeof e === "object" && typeof e.message === "string"
+      ? e
+      : buildError(String(e), "RUNTIME_RESOLUTION_FAILED");
+    if (typeof error.code !== "string") error.code = "RUNTIME_RESOLUTION_FAILED";
+    if (typeof ctx.fail === "function") ctx.fail(error);
+    else ctx.err(error.message);
     return 1;
   }
 
@@ -77,7 +130,12 @@ async function run(ctx, args) {
   if (flags.print && finalText) process.stdout.write(finalText.trimEnd() + "\n");
 
   if (session.status === "failed") {
-    if (session.lastError) ctx.err(session.lastError);
+    const error = session.lastError && typeof session.lastError === "object" && typeof session.lastError.message === "string"
+      ? session.lastError
+      : buildError(String(session.lastError || (ko ? "빌드 실행에 실패했습니다." : "The build session failed.")), "BUILD_FAILED");
+    if (typeof error.code !== "string") error.code = "BUILD_FAILED";
+    if (typeof ctx.fail === "function") ctx.fail(error);
+    else ctx.err(error.message);
     return 1;
   }
 
@@ -111,4 +169,4 @@ async function run(ctx, args) {
   }
 }
 
-module.exports = { run };
+module.exports = { run, parseArgs };

package/engine/commands/call.cjs

@@ -10,7 +10,7 @@
 const { create, usageFor, isHelpToken } = require("../hephaestus/runtime.cjs");
 
 async function run(ctx, args) {
-  if (args.some(isHelpToken)) {
+  if (args.length === 1 && isHelpToken(args[0])) {
     ctx.out(usageFor("call", ctx.lang));
     return 0;
   }

package/engine/commands/cd.cjs

@@ -5,7 +5,7 @@ const { agentFolder } = require("../agents/files.cjs");
 
 function run(ctx, args) {
   const ko = ctx.lang === "ko";
-  if (!args[0]) {
+  if (!args[0] || args.length !== 1) {
     ctx.err(ko ? "사용법: agentlas cd <agent>" : "Usage: agentlas cd <agent>");
     return 1;
   }

package/engine/commands/cloud.cjs

@@ -12,7 +12,8 @@ async function run(ctx, args) {
       : args;
     return await runCloud(ctx, commandArgs);
   } catch (e) {
-    ctx.err(String((e && e.message) || e));
+    if (typeof ctx.fail === "function") ctx.fail(e);
+    else ctx.err(String((e && e.message) || e));
     return 1;
   }
 }

package/engine/commands/connect.cjs

@@ -43,10 +43,21 @@ function resolveTarget(db, token) {
 /** 봇 토큰을 stdin 에서 읽는다(비밀은 argv 금지). 파이프면 첫 줄, TTY면 숨김 안내. */
 async function readTokenFromStdin(ctx, ko) {
   if (!process.stdin.isTTY) {
-    return new Promise((resolve) => {
+    return new Promise((resolve, reject) => {
       let buf = "";
-      process.stdin.on("data", (d) => { buf += d; });
-      process.stdin.on("end", () => resolve(buf.split(/\r?\n/)[0].trim()));
+      let tooLarge = false;
+      process.stdin.on("data", (d) => {
+        if (tooLarge) return;
+        buf += d;
+        if (Buffer.byteLength(buf, "utf8") > 2048) tooLarge = true;
+      });
+      process.stdin.on("end", () => {
+        if (tooLarge) return reject(new Error("Telegram bot token input is too large"));
+        const value = buf.replace(/\r?\n$/, "");
+        if (/[\r\n]/.test(value)) return reject(new Error("Telegram bot token input must contain exactly one line"));
+        resolve(value.trim());
+      });
+      process.stdin.on("error", reject);
     });
   }
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
@@ -95,7 +106,11 @@ async function connectTelegram(ctx, targetToken, { auto = false } = {}) {
     }
     ctx.out(ctx.ui.dim(ko ? "토큰을 읽었습니다." : "Captured the token."));
   } else {
-    token = await readTokenFromStdin(ctx, ko);
+    try { token = await readTokenFromStdin(ctx, ko); }
+    catch (error) {
+      ctx.err(`${ctx.ui.red("✖")} ${String((error && error.message) || error)}`);
+      return 1;
+    }
     if (!token) { ctx.err(ko ? "토큰이 필요합니다." : "a bot token is required."); return 1; }
   }
 
@@ -145,16 +160,21 @@ async function run(ctx, args) {
   const sub = String(args[0] || "").toLowerCase();
 
   if (!sub || sub === "help" || sub === "--help" || sub === "-h") { ctx.out(usage(ko)); return 0; }
-  if (sub === "status") return renderTelegram(ctx);
+  if (sub === "status") {
+    if (args.length !== 1) { ctx.err(usage(ko)); return 1; }
+    return renderTelegram(ctx);
+  }
   if (sub === "telegram") {
     const rest = args.slice(1);
+    const unknownOptions = rest.filter((item) => String(item).startsWith("-") && item !== "--auto");
+    const positionals = rest.filter((item) => item && !String(item).startsWith("-"));
+    if (unknownOptions.length || positionals.length !== 1) { ctx.err(usage(ko)); return 1; }
     const auto = rest.includes("--auto");
-    const targetToken = rest.find((a) => a && !String(a).startsWith("-"));
-    if (!targetToken) { ctx.err(usage(ko)); return 1; }
+    const targetToken = positionals[0];
     return connectTelegram(ctx, targetToken, { auto });
   }
   if (sub === "pair") {
-    if (!args[1]) { ctx.err(ko ? "사용법: agentlas connect pair <id>" : "Usage: agentlas connect pair <id>"); return 1; }
+    if (!args[1] || args.length !== 2) { ctx.err(ko ? "사용법: agentlas connect pair <id>" : "Usage: agentlas connect pair <id>"); return 1; }
     const row = tg.getBinding(ctx.db(), args[1]);
     if (!row) { ctx.err(ko ? "연결을 찾을 수 없습니다." : "connection not found."); return 1; }
     if (row.telegram_chat_id) {
@@ -181,7 +201,7 @@ async function run(ctx, args) {
     }
   }
   if (sub === "test") {
-    if (!args[1]) { ctx.err(ko ? "사용법: agentlas connect test <id>" : "Usage: agentlas connect test <id>"); return 1; }
+    if (!args[1] || args.length !== 2) { ctx.err(ko ? "사용법: agentlas connect test <id>" : "Usage: agentlas connect test <id>"); return 1; }
     try {
       await tg.sendTest(ctx.db(), args[1], ko ? "Agentlas 테스트 메시지" : "Agentlas test message");
       ctx.out(`${ctx.ui.green("✓")} ${ko ? "메시지를 보냈습니다." : "message sent."}`);
@@ -189,10 +209,15 @@ async function run(ctx, args) {
     } catch (e) { ctx.err(`${ctx.ui.red("✖")} ${String((e && e.message) || e)}`); return 1; }
   }
   if (sub === "remove") {
-    if (!args[1]) { ctx.err(ko ? "사용법: agentlas connect remove <id>" : "Usage: agentlas connect remove <id>"); return 1; }
-    tg.removeBinding(ctx.db(), args[1]);
-    ctx.out(`${ctx.ui.green("✓")} ${ko ? "연결을 제거했습니다." : "connection removed."}`);
-    return 0;
+    if (!args[1] || args.length !== 2) { ctx.err(ko ? "사용법: agentlas connect remove <id>" : "Usage: agentlas connect remove <id>"); return 1; }
+    try {
+      tg.removeBinding(ctx.db(), args[1]);
+      ctx.out(`${ctx.ui.green("✓")} ${ko ? "연결을 제거했습니다." : "connection removed."}`);
+      return 0;
+    } catch (error) {
+      ctx.err(`${ctx.ui.red("✖")} ${String((error && error.message) || error)}`);
+      return 1;
+    }
   }
   ctx.err(usage(ko));
   return 1;