agentlas 1.0.65 → 1.0.67

package/engine/agentlas-desktop-loadout.cjs

@@ -305,7 +305,7 @@ function readPrivateFeed(file, now) {
     if (error && error.code === "ENOENT") return { mode: "skip", reason: "desktop-loadout-feed-absent" };
     return { mode: "skip", reason: "desktop-loadout-feed-unreadable" };
   }
-  if (!stat.isFile() || stat.isSymbolicLink()) {
+  if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1) {
     return { mode: "skip", reason: "desktop-loadout-feed-not-private-regular-file" };
   }
   if (process.platform !== "win32") {
@@ -340,6 +340,7 @@ function readPrivateFeed(file, now) {
       const opened = fs.fstatSync(descriptor);
       if (
         !opened.isFile() ||
+        opened.nlink !== 1 ||
         opened.dev !== stat.dev ||
         opened.ino !== stat.ino ||
         opened.size !== stat.size ||
@@ -348,7 +349,19 @@ function readPrivateFeed(file, now) {
         return { mode: "skip", reason: "desktop-loadout-feed-changed-during-read" };
       }
       raw = fs.readFileSync(descriptor, "utf8");
-      if (Buffer.byteLength(raw, "utf8") > MAX_FILE_BYTES) {
+      const after = fs.fstatSync(descriptor);
+      if (
+        after.nlink !== 1 ||
+        after.dev !== opened.dev ||
+        after.ino !== opened.ino ||
+        after.size !== opened.size ||
+        after.mtimeMs !== opened.mtimeMs ||
+        after.ctimeMs !== opened.ctimeMs
+      ) {
+        return { mode: "skip", reason: "desktop-loadout-feed-changed-during-read" };
+      }
+      const rawBytes = Buffer.byteLength(raw, "utf8");
+      if (rawBytes !== after.size || rawBytes > MAX_FILE_BYTES) {
         return { mode: "skip", reason: "desktop-loadout-feed-size-invalid" };
       }
     } finally { fs.closeSync(descriptor); }
@@ -407,7 +420,8 @@ function exactLocalAuthority(db) {
 function sameExactList(value, expected) {
   if (value === undefined || value === null || (Array.isArray(value) && value.length === 0)) return true;
   if (!Array.isArray(value)) return false;
-  const normalized = [...new Set(value.map(String).filter(Boolean))];
+  const normalized = value.map(String);
+  if (normalized.some((item) => !item) || new Set(normalized).size !== normalized.length) return false;
   return normalized.length === expected.length && normalized.every((item, index) => item === expected[index]);
 }
 

package/engine/agentlas-evolution.cjs

@@ -22,6 +22,8 @@ function sha256(content) {
 }
 
 const ABSENT_TARGET_HASH = sha256("agentlas:absent-agent-asset:v1");
+const MAX_EVOLUTION_CONTENT_BYTES = 512 * 1024;
+const SHA256_RE = /^[a-f0-9]{64}$/;
 const RULE_TARGETS = new Set([
   "system-prompt.md",
   "soul.md",
@@ -42,6 +44,15 @@ function parseSource(json) {
   }
 }
 
+function terminalSafe(value, maxLength = 300) {
+  return String(value ?? "").replace(/[\u0000-\u001f\u007f]/g, " ").replace(/\s+/g, " ").trim().slice(0, maxLength);
+}
+
+function normalizedListLimit(value) {
+  const parsed = Number(value);
+  return Number.isInteger(parsed) ? Math.max(1, Math.min(parsed, 200)) : 50;
+}
+
 /** 대기 중(사람 결정 필요) 고위험 성장 제안 개수 — 터미널 홈 배너용. */
 function countPendingGrowthProposals(db) {
   try {
@@ -68,19 +79,23 @@ function listGrowthProposals(db, limit = 50) {
           ORDER BY datetime(updated_at) DESC, datetime(created_at) DESC
           LIMIT ?`,
       )
-      .all(limit);
+      .all(normalizedListLimit(limit));
   } catch {
     rows = [];
   }
   const pending = [];
+  const applied = [];
   const autoApplied = [];
   for (const row of rows) {
     const source = parseSource(row.source_json);
     const entry = { row, source };
     if (row.status === "candidate") pending.push(entry);
-    else if (source._autoApplied === true) autoApplied.push(entry);
+    else {
+      applied.push(entry);
+      if (source._autoApplied === true) autoApplied.push(entry);
+    }
   }
-  return { pending, autoApplied };
+  return { pending, applied, autoApplied };
 }
 
 function agentById(db, id) {
@@ -145,27 +160,28 @@ function printCard(out, entry, index) {
   const { row, source } = entry;
   const card = source.humanCard && typeof source.humanCard === "object" ? source.humanCard : null;
   const tier = source.riskTier === "high" ? "high" : "low";
-  out(`  [${index}] ${row.id}  (${tier} · ${row.status} · ${row.agent_id})`);
+  const application = row.status === "candidate" ? "승인 전" : source._autoApplied === true ? "자동 반영" : "승인 후 반영";
+  out(`  [${index}] ${terminalSafe(row.id)}  (${tier} · ${terminalSafe(row.status)} · ${application} · ${terminalSafe(row.agent_id)})`);
   if (card) {
-    out(`      배운 것 : ${card.learned}`);
-    out(`      바뀌는 것: ${card.change}`);
-    out(`      되돌리기 : ${card.reversible}`);
+    out(`      배운 것 : ${terminalSafe(card.learned)}`);
+    out(`      바뀐 것 : ${terminalSafe(card.change)}`);
+    out(`      안전장치: ${terminalSafe(card.reversible)}`);
   } else {
-    out(`      ${row.summary}`);
+    out(`      ${terminalSafe(row.summary)}`);
   }
 }
 
 function cmdList(db, out) {
-  const { pending, autoApplied } = listGrowthProposals(db);
+  const { pending, applied } = listGrowthProposals(db);
   out("== agent growth proposals ==");
   out("");
   out(`대기(승인 필요) ${pending.length}건:`);
   if (!pending.length) out("  (없음)");
   pending.forEach((entry, i) => printCard(out, entry, i + 1));
   out("");
-  out(`자동 적용됨(저위험) ${autoApplied.length}건:`);
-  if (!autoApplied.length) out("  (없음)");
-  autoApplied.forEach((entry, i) => printCard(out, entry, i + 1));
+  out(`성장 반영 완료 ${applied.length}건 (필요할 때 되돌릴 수 있는 안전장치):`);
+  if (!applied.length) out("  (없음)");
+  applied.forEach((entry, i) => printCard(out, entry, i + 1));
   out("");
   out("적용:  agentlas evolve apply <id>   ·   되돌리기: agentlas evolve revert <id>");
 }
@@ -182,6 +198,36 @@ function loadProposal(db, id, fail) {
   return row;
 }
 
+function validateProposalPayload(row, fail) {
+  if (!SHA256_RE.test(String(row.before_hash)) || !SHA256_RE.test(String(row.after_hash))) {
+    fail("Evolution proposal contains an invalid content hash");
+    return false;
+  }
+  if (typeof row.before_content !== "string" || typeof row.after_content !== "string") {
+    fail("Evolution proposal content is invalid");
+    return false;
+  }
+  if (
+    Buffer.byteLength(row.before_content, "utf8") > MAX_EVOLUTION_CONTENT_BYTES ||
+    Buffer.byteLength(row.after_content, "utf8") > MAX_EVOLUTION_CONTENT_BYTES
+  ) {
+    fail("Evolution proposal exceeds the portable 512 KiB content limit");
+    return false;
+  }
+  if (sha256(row.after_content) !== row.after_hash) {
+    fail("Evolution proposal after-content does not match its approved hash");
+    return false;
+  }
+  if (
+    (row.before_hash === ABSENT_TARGET_HASH && row.before_content !== "") ||
+    (row.before_hash !== ABSENT_TARGET_HASH && sha256(row.before_content) !== row.before_hash)
+  ) {
+    fail("Evolution proposal before-content does not match its approved baseline hash");
+    return false;
+  }
+  return true;
+}
+
 // 터미널이 부트스트랩한 DB는 v45라 진화 영수증 테이블이 없을 수 있다(데스크탑 v51+ 마이그레이션이
 // 추가). 앱과 동일한 스키마로 idempotent 생성 — 앱이 이미 만들었으면 no-op.
 function ensureReceiptTable(db) {
@@ -206,7 +252,7 @@ function ensureReceiptTable(db) {
 
 function insertReceipt(db, row, action, hashBefore, hashAfter, now) {
   ensureReceiptTable(db);
-  db.prepare(
+  const inserted = db.prepare(
     `INSERT INTO agent_evolution_receipts (
        id, proposal_id, agent_id, action, target_path,
        version_before, version_after, target_hash_before, target_hash_after,
@@ -225,11 +271,13 @@ function insertReceipt(db, row, action, hashBefore, hashAfter, now) {
     hashAfter,
     now,
   );
+  if (inserted.changes !== 1) throw new Error(`Evolution ${action} receipt already exists; proposal state is inconsistent`);
 }
 
 function cmdApply(db, id, out, fail, agentFolder) {
   const row = loadProposal(db, id, fail);
   if (!row) return;
+  if (!validateProposalPayload(row, fail)) return;
   if (row.status !== "candidate") {
     return fail(`Only a pending candidate can be applied; ${id} is '${row.status}'.`);
   }
@@ -273,6 +321,7 @@ function cmdApply(db, id, out, fail, agentFolder) {
 function cmdRevert(db, id, out, fail, agentFolder) {
   const row = loadProposal(db, id, fail);
   if (!row) return;
+  if (!validateProposalPayload(row, fail)) return;
   if (row.status !== "applied" && row.status !== "measured") {
     return fail(`Only an applied proposal can be reverted; ${id} is '${row.status}'.`);
   }
@@ -294,7 +343,11 @@ function cmdRevert(db, id, out, fail, agentFolder) {
       const locked = db.prepare("SELECT status FROM agent_evolution_proposals WHERE id=?").get(row.id);
       if (!locked || !["applied", "measured"].includes(locked.status)) throw new Error("Evolution proposal changed before revert; reload it first");
       if (currentTargetHash(file).hash !== row.after_hash) throw new Error("Agent prompt changed before revert; reload it first");
-      writeTargetAtomic(file, row.before_content);
+      // A proposal may have created the prompt asset from an absent baseline.
+      // Restoring that baseline means removing the created file, not writing an
+      // empty file (whose sha256 can never equal ABSENT_TARGET_HASH).
+      if (row.before_hash === ABSENT_TARGET_HASH) fs.rmSync(file, { force: true });
+      else writeTargetAtomic(file, row.before_content);
       wroteTarget = true;
       if (currentTargetHash(file).hash !== row.before_hash) throw new Error("Reverted content did not match the original hash");
       db.prepare("UPDATE installed_agents SET system_prompt = ? WHERE id = ?").run(row.before_content, row.agent_id);
@@ -309,7 +362,7 @@ function cmdRevert(db, id, out, fail, agentFolder) {
     });
   } catch (error) {
     if (wroteTarget) {
-      try { restoreTargetAfterFailure(file, before, sha256(row.before_content)); }
+      try { restoreTargetAfterFailure(file, before, row.before_hash); }
       catch (rollbackError) { return fail(`${error.message}. ${rollbackError.message}`); }
     }
     return fail(`${error.message}; the applied target was restored.`);
@@ -326,19 +379,23 @@ function cmdEvolve(ctx) {
   const args = Array.isArray(ctx.args) ? ctx.args : [];
   const sub = args[0] || "list";
   if (sub === "help" || sub === "--help" || sub === "-h") {
+    if (args.length !== 1) return fail("usage: agentlas evolve [list | apply <id> | revert <id>]");
     out("usage: agentlas evolve [list | apply <id> | revert <id>]");
     out("  list          — review pending (approval-needed) and auto-applied agent growth proposals");
     out("  apply <id>    — approve and apply a pending proposal to the agent prompt");
     out("  revert <id>   — roll back an applied proposal");
     return;
   }
-  if (sub === "list" || sub === "ls") return cmdList(db, out);
+  if (sub === "list" || sub === "ls") {
+    if (args.length > 1) return fail("usage: agentlas evolve list");
+    return cmdList(db, out);
+  }
   if (sub === "apply") {
-    if (!args[1]) return fail("usage: agentlas evolve apply <id>");
+    if (args.length !== 2 || !args[1]) return fail("usage: agentlas evolve apply <id>");
     return cmdApply(db, args[1], out, fail, agentFolder);
   }
   if (sub === "revert" || sub === "rollback") {
-    if (!args[1]) return fail("usage: agentlas evolve revert <id>");
+    if (args.length !== 2 || !args[1]) return fail("usage: agentlas evolve revert <id>");
     return cmdRevert(db, args[1], out, fail, agentFolder);
   }
   return fail(`Unknown evolve subcommand: ${sub} (list|apply|revert)`);

package/engine/agentlas-experience-exchange.cjs

@@ -12,6 +12,7 @@
 const crypto = require("node:crypto");
 const fs = require("node:fs");
 const path = require("node:path");
+const { TextDecoder } = require("node:util");
 
 const BUNDLE_SCHEMA = "agentlas.experience-bundle.v1";
 const RECEIPT_SCHEMA = "agentlas.experience-upload-receipt.v1";
@@ -604,13 +605,94 @@ function validateExperienceBundle(payload) {
   return { bundle: value, canonicalJson: canonicalJson(value), canonicalBytes, expectedPackHash, expectedBundleHash, expectedBundleId: experienceBundleId(value) };
 }
 
+function isBoundedSingleLinkRegular(stat, maxBytes, minBytes = 0) {
+  return Boolean(
+    stat && stat.isFile() && !stat.isSymbolicLink() && stat.nlink === 1 &&
+    Number.isSafeInteger(stat.size) && stat.size >= minBytes && stat.size <= maxBytes,
+  );
+}
+
+function sameBoundedFileSnapshot(left, right) {
+  return Boolean(
+    left && right && left.dev === right.dev && left.ino === right.ino && left.nlink === right.nlink &&
+    left.size === right.size && left.mtimeMs === right.mtimeMs && left.ctimeMs === right.ctimeMs,
+  );
+}
+
+function readBoundedTextFile(filePath, maxBytes, options = {}) {
+  const {
+    label = "private file",
+    minBytes = 0,
+    allowMissing = false,
+    unsafeMessage = `${label} is unsafe`,
+    sizeMessage = `${label} exceeds ${maxBytes} bytes`,
+    symlinkMessage = unsafeMessage,
+  } = options;
+  let before;
+  try {
+    before = fs.lstatSync(filePath);
+  } catch (error) {
+    if (allowMissing && error?.code === "ENOENT") return null;
+    throw error;
+  }
+  if (before.isSymbolicLink()) throw new Error(symlinkMessage);
+  if (!before.isFile() || before.nlink !== 1) throw new Error(unsafeMessage);
+  if (!Number.isSafeInteger(before.size) || before.size < minBytes || before.size > maxBytes) throw new Error(sizeMessage);
+
+  const noFollow = fs.constants.O_NOFOLLOW;
+  if (!Number.isInteger(noFollow)) throw new Error(`${label} cannot enforce symlink-safe open`);
+  const nonBlock = Number.isInteger(fs.constants.O_NONBLOCK) ? fs.constants.O_NONBLOCK : 0;
+  const descriptor = fs.openSync(filePath, fs.constants.O_RDONLY | noFollow | nonBlock);
+  try {
+    const opened = fs.fstatSync(descriptor);
+    if (!isBoundedSingleLinkRegular(opened, maxBytes, minBytes) || !sameBoundedFileSnapshot(before, opened)) {
+      throw new Error(`${label} changed while opening`);
+    }
+
+    const chunks = [];
+    let total = 0;
+    while (total <= maxBytes) {
+      const buffer = Buffer.allocUnsafe(Math.min(64 * 1024, maxBytes + 1 - total));
+      const count = fs.readSync(descriptor, buffer, 0, buffer.length, null);
+      if (count === 0) break;
+      chunks.push(buffer.subarray(0, count));
+      total += count;
+    }
+    if (total > maxBytes) throw new Error(sizeMessage);
+
+    const after = fs.fstatSync(descriptor);
+    const pathAfter = fs.lstatSync(filePath);
+    if (
+      !isBoundedSingleLinkRegular(after, maxBytes, minBytes) ||
+      !isBoundedSingleLinkRegular(pathAfter, maxBytes, minBytes) ||
+      !sameBoundedFileSnapshot(opened, after) ||
+      !sameBoundedFileSnapshot(before, pathAfter) ||
+      !sameBoundedFileSnapshot(opened, pathAfter) ||
+      total !== after.size
+    ) {
+      throw new Error(`${label} changed while reading`);
+    }
+
+    try {
+      return new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks, total));
+    } catch (error) {
+      throw new Error(`${label} is invalid UTF-8: ${error.message}`);
+    }
+  } finally {
+    fs.closeSync(descriptor);
+  }
+}
+
 function readBundleFile(filePath, cwd = process.cwd()) {
   const absolute = path.resolve(cwd, filePath);
-  const stat = fs.lstatSync(absolute);
-  if (!stat.isFile() || stat.isSymbolicLink()) throw new Error("Experience bundle must be a regular file; symlinks are forbidden");
-  if (stat.size < 1 || stat.size > MAX_BUNDLE_FILE_BYTES) throw new Error(`Experience bundle file must be 1..${MAX_BUNDLE_FILE_BYTES} bytes`);
+  const text = readBoundedTextFile(absolute, MAX_BUNDLE_FILE_BYTES, {
+    label: "Experience bundle",
+    minBytes: 1,
+    unsafeMessage: "Experience bundle must be a regular file; symlinks are forbidden",
+    sizeMessage: `Experience bundle file must be 1..${MAX_BUNDLE_FILE_BYTES} bytes`,
+  });
   let payload;
-  try { payload = JSON.parse(fs.readFileSync(absolute, "utf8")); } catch (error) { throw new Error(`Experience bundle is invalid JSON: ${error.message}`); }
+  try { payload = JSON.parse(text); } catch (error) { throw new Error(`Experience bundle is invalid JSON: ${error.message}`); }
   return { absolute, ...validateExperienceBundle(payload) };
 }
 
@@ -776,10 +858,14 @@ function withExchangeStateLock(userDataDir, action) {
 function loadExchangeState(userDataDir) {
   const file = exchangeStatePath(userDataDir);
   recoverPrivateAtomicTarget(file);
-  if (!fs.existsSync(file)) return emptyState();
-  const stat = fs.lstatSync(file);
-  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_STATE_BYTES) throw new Error("Terminal Experience exchange state is unsafe or too large");
-  const state = JSON.parse(fs.readFileSync(file, "utf8"));
+  const text = readBoundedTextFile(file, MAX_STATE_BYTES, {
+    label: "Terminal Experience exchange state",
+    allowMissing: true,
+    unsafeMessage: "Terminal Experience exchange state is unsafe or too large",
+    sizeMessage: "Terminal Experience exchange state is unsafe or too large",
+  });
+  if (text === null) return emptyState();
+  const state = JSON.parse(text);
   const allowed = new Set(["schemaVersion", "updatedAt", "bundles"]);
   const issues = [];
   strictObject(state, allowed, allowed, "exchange state", issues);
@@ -896,20 +982,51 @@ function resolveBundleInput(userDataDir, sourceOrRef, cwd) {
   return readBundleFile(sourceOrRef, cwd);
 }
 
-function parseFlags(args) {
+function parseFlags(args, schema = {}) {
   const flags = { _: [] };
+  const values = new Set(schema.values || []);
+  const booleans = new Set(schema.booleans || []);
+  let passthrough = false;
   for (let index = 0; index < args.length; index += 1) {
     const token = String(args[index]);
+    if (passthrough) { flags._.push(token); continue; }
+    if (token === "--") { passthrough = true; continue; }
     if (!token.startsWith("--")) { flags._.push(token); continue; }
     const equal = token.indexOf("=");
-    if (equal > 2) { flags[token.slice(2, equal)] = token.slice(equal + 1); continue; }
-    const key = token.slice(2);
-    if (index + 1 < args.length && !String(args[index + 1]).startsWith("--")) flags[key] = String(args[++index]);
-    else flags[key] = true;
+    const key = token.slice(2, equal > 2 ? equal : undefined);
+    if (!values.has(key) && !booleans.has(key)) throw new Error(`unknown option: --${key}`);
+    if (Object.prototype.hasOwnProperty.call(flags, key)) throw new Error(`duplicate option: --${key}`);
+    if (booleans.has(key)) {
+      if (equal > 2) throw new Error(`--${key} does not take a value`);
+      flags[key] = true;
+      continue;
+    }
+    const value = equal > 2 ? token.slice(equal + 1) : args[++index];
+    if (value === undefined || value === "" || (equal <= 2 && String(value).startsWith("--"))) {
+      throw new Error(`--${key} requires a value`);
+    }
+    flags[key] = String(value);
   }
   return flags;
 }
 
+const EXPERIENCE_COMMAND_FLAG_SCHEMA = Object.freeze({
+  list: { booleans: ["json"] },
+  inspect: { booleans: ["json"] },
+  validate: { booleans: ["json"] },
+  save: {
+    booleans: ["json", "dry-run", "local-only"],
+    values: ["idempotency-key", "base-slug", "base-cloud-id", "base-package-hash", "base-package-hash-version"],
+  },
+  publish: {
+    booleans: ["json", "dry-run"],
+    values: ["visibility", "idempotency-key", "base-slug", "base-cloud-id", "base-package-hash", "base-package-hash-version"],
+  },
+  status: { booleans: ["json"] },
+  export: { booleans: ["json", "overwrite"], values: ["out"] },
+  unpublish: { booleans: ["json", "dry-run"] },
+});
+
 function idempotencyKeyForBundle(bundle, explicit, operation = "save") {
   const defaultDigest = crypto.createHash("sha256")
     .update(canonicalJson({ bundleHash: bundle.bundleHash, operation, requestedVisibility: bundle.requestedVisibility }), "utf8")
@@ -1935,7 +2052,6 @@ function baseDescriptorFromFlags(flags) {
 async function cmdExperienceExchange(options = {}) {
   const args = options.args || [];
   const sub = args[0] || "list";
-  const flags = parseFlags(args.slice(1));
   const emit = options.out || console.log;
   if (!options.userDataDir) throw new Error("Terminal userData path is required");
 
@@ -1963,6 +2079,15 @@ async function cmdExperienceExchange(options = {}) {
     const mapped = sub.slice("legacy-".length);
     return options.legacyCommand({ ...options, args: [mapped, ...args.slice(1)] });
   }
+  const canonicalSub = sub === "ls" ? "list"
+    : sub === "show" ? "inspect"
+      : sub === "withdraw" ? "unpublish"
+        : sub;
+  const schema = EXPERIENCE_COMMAND_FLAG_SCHEMA[canonicalSub];
+  if (!schema) {
+    throw new Error("unknown experience subcommand (list|inspect|validate|save|publish|status|export|unpublish|withdraw; legacy: legacy-list|legacy-inspect|legacy-publish|legacy-unpublish)");
+  }
+  const flags = parseFlags(args.slice(1), schema);
   if (sub === "list" || sub === "ls") {
     if (flags._.length) throw new Error("usage: agentlas experience list [--json]");
     const bundles = listStoredExperienceBundles(options.userDataDir, options.cwd);
@@ -1998,12 +2123,14 @@ async function cmdExperienceExchange(options = {}) {
     return result;
   }
   if (sub === "validate") {
+    if (flags._.length !== 1) throw new Error("usage: agentlas experience validate <bundle.agentlas-experience.json> [--json]");
     const validation = readBundleFile(flags._[0], options.cwd);
     const result = { valid: true, bundleId: validation.bundle.bundleId, bundleHash: validation.bundle.bundleHash, packContentHash: validation.bundle.pack.contentHash, items: validation.bundle.items.length, canonicalBytes: validation.canonicalBytes, networkUsed: false, authority: "local-validation" };
     emit(flags.json ? JSON.stringify(result, null, 2) : renderValidation(validation));
     return result;
   }
   if (sub === "save") {
+    if (flags._.length !== 1) throw new Error("usage: agentlas experience save <bundle> [options]");
     const validation = readBundleFile(flags._[0], options.cwd);
     if (flags["local-only"] === true) {
       if (flags["dry-run"] === true) {
@@ -2027,6 +2154,7 @@ async function cmdExperienceExchange(options = {}) {
     return result;
   }
   if (sub === "publish") {
+    if (flags._.length !== 1) throw new Error("usage: agentlas experience publish <bundle> [options]");
     const source = flags._[0];
     const validation = resolveBundleInput(options.userDataDir, source, options.cwd);
     const result = await publishBundle(validation, {
@@ -2041,11 +2169,13 @@ async function cmdExperienceExchange(options = {}) {
     return result;
   }
   if (sub === "status") {
+    if (flags._.length !== 1) throw new Error("usage: agentlas experience status <bundle-id|upload-id> [--json]");
     const result = await fetchUploadStatus(flags._[0], options);
     emit(flags.json ? JSON.stringify(publicCommandExchangeResult(result), null, 2) : `Server-authoritative status: ${result.receipt.status} · ${result.receipt.uploadId}\nrequested visibility: ${result.receipt.requestedVisibility} · Terminal did not assert public activation/evaluator reputation`);
     return result;
   }
   if (sub === "export") {
+    if (flags._.length !== 1) throw new Error("usage: agentlas experience export <bundle-id|upload-id> [--out file] [--overwrite] [--json]");
     const result = await fetchUploadExport(flags._[0], {
       ...options,
       outputPath: typeof flags.out === "string" ? flags.out : null,
@@ -2111,6 +2241,7 @@ module.exports = {
   previewWithdrawUpload,
   publicUploadReceipt,
   publicCommandExchangeResult,
+  parseFlags,
   projectScopeHash,
   idempotencyKeyForBundle,
   idempotencyKeyHash,

package/engine/agentlas-experience-intake.cjs

@@ -75,9 +75,9 @@ function createRunReceipt(input) {
   if (!input.exactBase || !ID_RE.test(String(input.exactBase.agentReleaseId || ""))) {
     throw new Error("RunReceipt requires an exact agent definition release.");
   }
-  const runId = cleanId(input.runId, opaqueId("run", input.exactBase.agentReleaseId, taskSignature, input.createdAt));
-  const idempotencyKey = cleanId(input.idempotencyKey, opaqueId("run-key", runId));
   const createdAt = input.createdAt || new Date().toISOString();
+  const runId = cleanId(input.runId, opaqueId("run", input.exactBase.agentReleaseId, taskSignature, createdAt));
+  const idempotencyKey = cleanId(input.idempotencyKey, opaqueId("run-key", runId));
   const provider = cleanId(input.model?.provider, "terminal-runtime");
   const modelId = cleanId(input.model?.modelId, provider);
   const outcome = ["succeeded", "partial", "failed", "cancelled"].includes(input.outcome?.status)

package/engine/agentlas-i18n.cjs

@@ -174,7 +174,6 @@ const STRINGS = {
     "help.setup": "run language, runtime, and permission setup again",
     "help.cwd": "show or change the working folder",
     "help.memory": "show the memory being injected",
-    "help.careerGraph": "show/add source refs for the Career Graph routing index",
     "help.ontology": "turn on/list/add project ontology sources with short natural commands",
     "help.side": "ask a side question without saving it to project task context",
     "help.status": "show model/runtime, agent, permission, and directory",
@@ -422,7 +421,6 @@ const STRINGS = {
     "help.setup": "언어·런타임·권한 설정 다시 실행",
     "help.cwd": "작업 폴더 보기/변경",
     "help.memory": "주입되는 메모리 보기",
-    "help.careerGraph": "경력 그래프 라우팅 색인의 원본 경로 보기/등록",
     "help.ontology": "짧은 자연어로 프로젝트 온톨로지 켜기/목록/자료 등록",
     "help.side": "프로젝트 작업 맥락에 저장하지 않는 사이드 질문",
     "help.status": "모델/런타임, 에이전트, 권한, 작업 폴더 보기",