agentlas 1.0.65 → 1.0.67

package/engine/oberon/common.cjs

@@ -21,22 +21,47 @@ function fail(msg, code) {
   throw new OberonFail(String(msg ?? ""), code);
 }
 
-// v1 oberonParseFlags 그대로: `--key value` / `--key`(불리언) / 나머지는 위치 인자.
-// 다음 토큰이 `--`로 시작하면 값이 아니라 다른 플래그로 본다.
-function parseFlags(args) {
+// 타입 스키마가 있으면 알 수 없는/중복/값 누락 플래그를 fail-closed 한다.
+// `--key=value`와 위치 인자용 `--` sentinel도 지원한다.
+function parseFlags(args, schema = null) {
   const flags = {};
   const rest = [];
   for (let i = 0; i < args.length; i++) {
-    const a = args[i];
-    if (a.startsWith("--")) {
-      const key = a.slice(2);
+    const a = String(args[i]);
+    if (a === "--") {
+      rest.push(...args.slice(i + 1).map(String));
+      break;
+    }
+    if (!a.startsWith("--")) { rest.push(a); continue; }
+    const equals = a.indexOf("=");
+    const key = a.slice(2, equals >= 0 ? equals : undefined);
+    const inlineValue = equals >= 0 ? a.slice(equals + 1) : null;
+    if (!key) fail("Oberon option name is empty");
+    if (Object.prototype.hasOwnProperty.call(flags, key)) fail(`Duplicate Oberon option: --${key}`);
+    const type = schema && schema[key];
+    if (schema && !type) fail(`Unknown Oberon option: --${key}`);
+    if (!schema) {
       const next = args[i + 1];
-      if (next === undefined || next.startsWith("--")) flags[key] = true;
-      else {
-        flags[key] = next;
-        i++;
-      }
-    } else rest.push(a);
+      if (inlineValue != null) flags[key] = inlineValue;
+      else if (next === undefined || String(next).startsWith("--")) flags[key] = true;
+      else { flags[key] = String(next); i += 1; }
+      continue;
+    }
+    if (type === "boolean") {
+      if (inlineValue != null) fail(`Boolean Oberon option does not take a value: --${key}`);
+      flags[key] = true;
+      continue;
+    }
+    if (type !== "value") fail(`Invalid Oberon option schema: --${key}`);
+    if (inlineValue != null) {
+      if (!inlineValue) fail(`Oberon option requires a value: --${key}`);
+      flags[key] = inlineValue;
+      continue;
+    }
+    const next = args[i + 1];
+    if (next === undefined || String(next).startsWith("--")) fail(`Oberon option requires a value: --${key}`);
+    flags[key] = String(next);
+    i += 1;
   }
   return { flags, rest };
 }

package/engine/oberon/manifest.cjs

@@ -130,12 +130,35 @@ function buildScaffoldManifest({ title, aspect, shotCount, provider, model, reso
 
 // `oberon scaffold [out.json] [--title T] [--aspect 16:9] [--shots N] [--titles] [--overwrite]`
 function scaffold(io, args) {
-  const { flags, rest } = parseFlags(args);
+  const { flags, rest } = parseFlags(args, {
+    title: "value",
+    aspect: "value",
+    shots: "value",
+    provider: "value",
+    model: "value",
+    resolution: "value",
+    titles: "boolean",
+    overwrite: "boolean",
+  });
+  if (rest.length > 1) fail("Oberon scaffold accepts at most one output path");
   const outPath = path.resolve(rest[0] || "oberon-manifest.json");
   const title = flags.title || "My Oberon Film";
   const aspect = flags.aspect || "16:9";
+  for (const [label, value, max] of [
+    ["title", title, 300],
+    ["aspect", aspect, 32],
+    ["provider", flags.provider || "google-gemini-veo", 128],
+    ["model", flags.model || "veo-3.1-lite-generate-001", 128],
+    ["resolution", flags.resolution || "720p", 32],
+  ]) {
+    if (typeof value !== "string" || !value.trim() || value.length > max || /[\u0000\r\n]/.test(value)) {
+      fail(`Oberon ${label} is invalid`);
+    }
+  }
   // v1 계약: 샷 수는 1..12로 클램프, 기본 2 (Veo 폴링 비용 상한).
-  const shotCount = Math.max(1, Math.min(Number(flags.shots) || 2, 12));
+  const requestedShots = flags.shots === undefined ? 2 : Number(flags.shots);
+  if (!Number.isInteger(requestedShots)) fail("Oberon --shots must be an integer");
+  const shotCount = Math.max(1, Math.min(requestedShots, 12));
   const manifest = buildScaffoldManifest({
     title,
     aspect,

package/engine/oberon/outputs.cjs

@@ -10,6 +10,28 @@ const { spawnSync } = require("node:child_process");
 const { userDataDir } = require("../core/paths.cjs");
 const { fail } = require("./common.cjs");
 
+const MAX_RENDER_DIRECTORIES = 4096;
+const MAX_FILES_PER_RENDER = 4096;
+
+function terminalSafe(value, maxLength = 240) {
+  return String(value ?? "").replace(/[\u0000-\u001f\u007f]/g, "�").slice(0, maxLength);
+}
+
+function readDirectoryBounded(dir, maxEntries, label) {
+  const handle = fs.opendirSync(dir);
+  const entries = [];
+  try {
+    while (entries.length <= maxEntries) {
+      const entry = handle.readSync();
+      if (!entry) return entries;
+      entries.push(entry);
+    }
+  } finally {
+    handle.closeSync();
+  }
+  fail(`${label} contains more than ${maxEntries} entries; narrow or clean the output directory first`);
+}
+
 function oberonHome() {
   return path.join(userDataDir(), "oberon");
 }
@@ -17,41 +39,48 @@ function oberonHome() {
 // `oberon list` — 최근 렌더 산출물 15개 (mtime 내림차순).
 function list(io) {
   const dir = oberonHome();
-  if (!fs.existsSync(dir)) {
+  let homeStat;
+  try { homeStat = fs.lstatSync(dir); } catch (error) {
+    if (!error || error.code !== "ENOENT") throw error;
     io.out("No render outputs yet. Start with agentlas oberon scaffold my.json.");
     return 0;
   }
-  const entries = fs
-    .readdirSync(dir, { withFileTypes: true })
+  if (!homeStat.isDirectory() || homeStat.isSymbolicLink()) fail(`Oberon output home must be a regular directory, not a symbolic link: ${terminalSafe(dir)}`);
+  const entries = readDirectoryBounded(dir, MAX_RENDER_DIRECTORIES, "Oberon output home")
     .filter((d) => d.isDirectory())
     .map((d) => {
       const full = path.join(dir, d.name);
       let mtime = 0;
       try {
-        mtime = fs.statSync(full).mtimeMs;
+        const stat = fs.lstatSync(full);
+        if (!stat.isDirectory() || stat.isSymbolicLink()) return null;
+        mtime = stat.mtimeMs;
       } catch {}
-      const files = (() => {
-        try {
-          return fs.readdirSync(full);
-        } catch {
-          return [];
-        }
-      })();
-      return { name: d.name, full, mtime, files };
+      return { name: d.name, full, mtime };
     })
+    .filter(Boolean)
     .sort((a, b) => b.mtime - a.mtime)
-    .slice(0, 15);
+    .slice(0, 15)
+    .map((entry) => {
+      let files = [];
+      try {
+        files = readDirectoryBounded(entry.full, MAX_FILES_PER_RENDER, `Oberon render ${terminalSafe(entry.name)}`).map((file) => file.name);
+      } catch (error) {
+        if (error && error.oberonFail) throw error;
+      }
+      return { ...entry, files };
+    });
   if (!entries.length) {
     io.out("No render outputs yet.");
     return 0;
   }
-  io.out(`Recent Oberon renders (${dir}):\n`);
+  io.out(`Recent Oberon renders (${terminalSafe(dir, 4096)}):\n`);
   for (const e of entries) {
     // master/titled 최종본만 요약에 노출 (중간 클립·로그 숨김) — v1 필터 그대로.
     const masters = e.files.filter((f) => /master|titled/.test(f) && /\.(mp4|mov)$/.test(f));
     const when = e.mtime ? new Date(e.mtime).toISOString().slice(0, 16).replace("T", " ") : "";
-    io.out(`  ${when}  ${e.name}`);
-    if (masters.length) io.out(`            ${masters.join(", ")}`);
+    io.out(`  ${when}  ${terminalSafe(e.name)}`);
+    if (masters.length) io.out(`            ${masters.map((name) => terminalSafe(name)).join(", ")}`);
   }
   io.out(`\nOpen the folder with: agentlas oberon open`);
   return 0;
@@ -59,6 +88,7 @@ function list(io) {
 
 // `oberon open [path]` — 산출물 폴더를 OS 파일 매니저로 연다.
 function open(io, args, options = {}) {
+  if (args.length > 1) fail("Oberon open accepts at most one path");
   const target = args[0] ? path.resolve(args[0]) : oberonHome();
   if (!fs.existsSync(target)) fail(`Path not found: ${target}`);
   const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "explorer" : "xdg-open";
@@ -68,9 +98,9 @@ function open(io, args, options = {}) {
   // launch result and only claim success on exit 0.
   const launch = options.spawnSyncImpl || spawnSync;
   const result = launch(opener, [target], { stdio: "ignore", windowsHide: true });
-  if (result && result.error) fail(`Could not open ${target}: ${result.error.message}`);
-  if (!result || result.status !== 0) fail(`Could not open ${target} (opener exit ${result && result.status != null ? result.status : "unknown"})`);
-  io.out(`Opening folder: ${target}`);
+  if (result && result.error) fail(`Could not open ${terminalSafe(target, 4096)}: ${terminalSafe(result.error.message)}`);
+  if (!result || result.status !== 0) fail(`Could not open ${terminalSafe(target, 4096)} (opener exit ${result && result.status != null ? result.status : "unknown"})`);
+  io.out(`Opening folder: ${terminalSafe(target, 4096)}`);
   return 0;
 }