agentlas 1.0.65 → 1.0.67

package/engine/ui/repl.cjs

@@ -267,6 +267,7 @@ async function startRepl(ctx, opts = {}) {
     });
     // 진행 중인 비동기 슬래시 명령 — 종료가 이걸 잘라먹지 않도록 close 핸들러가 기다린다.
     const pendingCommands = new Set();
+    const pendingShells = new Set();
     const trackCommand = (promise) => {
       pendingCommands.add(promise);
       promise.then(() => pendingCommands.delete(promise), () => pendingCommands.delete(promise));
@@ -394,6 +395,15 @@ async function startRepl(ctx, opts = {}) {
         prompt();
         return;
       }
+      if (pendingShells.size) {
+        const controller = [...pendingShells].at(-1);
+        controller.abort();
+        ui.ensureNl();
+        ui.line(ui.c.dim(en ? "(shell command interrupted)" : "(셸 명령 중단됨)"));
+        sigints = 0;
+        prompt();
+        return;
+      }
       sigints += 1;
       if (sigints >= 2) { rl.close(); return; }
       ui.line(ui.c.dim(en ? "(ctrl-c again to quit)" : "(한 번 더 ctrl-c 하면 종료)"));
@@ -487,7 +497,12 @@ async function startRepl(ctx, opts = {}) {
       }
 
       if (input.startsWith("!")) {
-        runShell(ctx, input.slice(1).trim(), permission).then(prompt, (e) => { recoverPresentation("shell action", e); prompt(); });
+        const controller = new AbortController();
+        pendingShells.add(controller);
+        const command = runShell(ctx, input.slice(1).trim(), permission, { signal: controller.signal })
+          .then(prompt, (e) => { recoverPresentation("shell action", e); prompt(); })
+          .finally(() => pendingShells.delete(controller));
+        trackCommand(command);
         return;
       }
 
@@ -519,6 +534,7 @@ async function startRepl(ctx, opts = {}) {
       process.stdin.removeListener("keypress", onShortcutKey);
       slashPalette.detach();
       renderer.detach();
+      for (const controller of pendingShells) controller.abort();
       /*
        * 슬래시 명령은 비동기다. 예전에는 close 가 곧바로 resolve 해서 프로세스가 끝나 버렸고,
        * `/search …` 직후 `/quit` 을 치면 그 명령이 출력 한 줄 없이 사라졌다(실측: 같은 입력을
@@ -554,7 +570,7 @@ async function startRepl(ctx, opts = {}) {
  *    env 객체는 절대 변형하지 않는다 (credential-env-regression 계약).
  *  - 출력 8MB 캡, 표시 전 시크릿 마스킹, 프로세스 그룹 종료.
  */
-async function runShell(ctx, cmd, permission) {
+async function runShell(ctx, cmd, permission, options = {}) {
   const ui = ctx.uiInstance;
   const en = ctx.lang === "en";
   if (!cmd) return;
@@ -588,13 +604,49 @@ async function runShell(ctx, cmd, permission) {
     });
     let bytes = 0;
     let capped = false;
+    let settled = false;
+    let forceKillTimer = null;
+    const terminate = (signal) => {
+      const pid = Number(child.pid);
+      if (grouped && Number.isInteger(pid) && pid > 1) {
+        try { process.kill(-pid, signal); return; } catch { /* fall through */ }
+      }
+      try { child.kill(signal); } catch { /* already gone */ }
+    };
+    const forceKillSoon = () => {
+      if (forceKillTimer) return;
+      forceKillTimer = setTimeout(() => terminate("SIGKILL"), 250);
+      forceKillTimer.unref?.();
+    };
+    const reapOnExit = () => terminate("SIGKILL");
+    process.once("exit", reapOnExit);
+    const abortHandler = () => {
+      terminate("SIGTERM");
+      forceKillSoon();
+    };
+    if (options.signal) {
+      if (options.signal.aborted) abortHandler();
+      else options.signal.addEventListener?.("abort", abortHandler, { once: true });
+    }
+    const finish = (code, failed = false) => {
+      if (settled) return;
+      settled = true;
+      if (forceKillTimer) clearTimeout(forceKillTimer);
+      process.removeListener("exit", reapOnExit);
+      if (options.signal) options.signal.removeEventListener?.("abort", abortHandler);
+      ui.streamEnd();
+      if (failed) ui.error();
+      else if (code !== 0 && !capped && !options.signal?.aborted) ui.line(ui.c.dim(`exit ${code}`));
+      resolve();
+    };
     const onData = (d) => {
       bytes += d.length;
       if (bytes > maxBytes) {
         if (!capped) {
           capped = true;
           ui.warn(en ? "(output capped at 8MB — command stopped)" : "(출력 8MB 초과 — 명령 중단)");
-          try { grouped ? process.kill(-child.pid, "SIGTERM") : child.kill("SIGTERM"); } catch { /* dead */ }
+          terminate("SIGTERM");
+          forceKillSoon();
         }
         return;
       }
@@ -603,12 +655,8 @@ async function runShell(ctx, cmd, permission) {
     ui.streamStart(true);
     child.stdout.on("data", onData);
     child.stderr.on("data", onData);
-    child.on("error", () => { ui.streamEnd(); ui.error(); resolve(); });
-    child.on("close", (code) => {
-      ui.streamEnd();
-      if (code !== 0 && !capped) ui.line(ui.c.dim(`exit ${code}`));
-      resolve();
-    });
+    child.on("error", () => finish(1, true));
+    child.on("close", (code) => finish(code));
   });
 }
 

package/engine/ui/screens.cjs

@@ -249,8 +249,8 @@ function settings(ui, db, en, ctx) {
     ? "change: /setup (wizard) · /runtime · /model · /effort · /permission · roles set · creds · env"
     : "변경: /setup (마법사) · /runtime · /model · /effort · /permission · roles set · creds · env"));
   ui.line(ui.c.dim(en
-    ? "Desktop-only here: theme, mobile pairing QR, auto-update, multimodal providers"
-    : "여기서 불가(데스크탑 전용): 테마, 모바일 페어링 QR, 자동 업데이트, 멀티모달 프로바이더"));
+    ? "also available: agentlas multimodal  ·  Desktop-only: theme, mobile pairing QR, auto-update"
+    : "추가 설정: agentlas multimodal  ·  데스크탑 전용: 테마, 모바일 페어링 QR, 자동 업데이트"));
 }
 
 /* ── /projects — 데스크탑 workspace + project/detail ── */
@@ -355,8 +355,6 @@ function firms(ui, db, en, ctx, arg) {
     } else if (org) {
       ui.line(ui.c.dim(en ? "  roster is declared in the org chart only" : "  로스터가 조직도 선언에만 있습니다"));
     }
-    const chats = count(db, "SELECT COUNT(*) n FROM chats WHERE firm_id = ? AND archived_at IS NULL", );
-    void chats;
     ui.line("");
     ui.line(ui.c.dim(en ? `run: /firm ${f.slug} "<task>"` : `실행: /firm ${f.slug} "<할 일>"`));
     return;

package/engine/vendor/desktop-core.manifest.json

@@ -1,7 +1,7 @@
 {
-  "version": "15",
-  "url": "https://github.com/agentlas-ai/agentlas-terminal/releases/download/desktop-core-v15/desktop-core.tar.gz",
-  "sha256": "df39404b55ea4e6a3571e416167f64e75bcde92fdb86f19bd26e54746156f87b",
-  "sizeBytes": 18167726,
-  "writtenAt": "2026-08-29T08:38:53.468Z"
+  "version": "16",
+  "url": "https://github.com/agentlas-ai/agentlas-terminal/releases/download/desktop-core-v16/desktop-core.tar.gz",
+  "sha256": "563370a5cb53afd0e6688e7b5fe30e5bc0e9022f70a9239f5e95fb1da6309868",
+  "sizeBytes": 18173415,
+  "writtenAt": "2026-08-30T02:34:26.615Z"
 }

package/engine/workforce/capture.cjs

@@ -23,6 +23,7 @@ const os = require("node:os");
 const path = require("node:path");
 const { spawn } = require("node:child_process");
 const { dbPath, userDataDir } = require("../core/paths.cjs");
+const { runCwd, projectCwd } = require("../project/paths.cjs");
 
 // 캡처 드라이버가 검증된 런타임만. 정본(runtimes/kinds.cjs)의 RUNTIME_BIN에는 kimi/grok/cursor도
 // 있지만 buildArgs/텍스트 추출 계약이 없으므로 캡처 검증 파생본만 쓴다 — 새 kind 를
@@ -726,8 +727,12 @@ async function runApi(backend, model, system, prompt, options) {
   model = model || DEFAULT_API_MODEL[backend];
   const fetchImpl = options.fetch || globalThis.fetch;
   if (typeof fetchImpl !== "function") throw new Error("fetch is unavailable in this runtime (run through the app runtime).");
+  const request = (url, init) => fetchImpl(
+    url,
+    options.signal ? { ...init, signal: options.signal } : init,
+  );
   if (backend === "ollama") {
-    const resp = await fetchImpl("http://127.0.0.1:11434/api/chat", {
+    const resp = await request("http://127.0.0.1:11434/api/chat", {
       method: "POST",
       headers: { "content-type": "application/json" },
       body: JSON.stringify({ model, stream: false, messages: [{ role: "system", content: system }, { role: "user", content: prompt }] }),
@@ -760,7 +765,7 @@ async function runApi(backend, model, system, prompt, options) {
     const systemField = backend === "anthropic"
       ? [{ type: "text", text: system, cache_control: { type: "ephemeral" } }]
       : system;
-    const resp = await fetchImpl(`${base}/v1/messages`, {
+    const resp = await request(`${base}/v1/messages`, {
       method: "POST",
       headers: { "content-type": "application/json", ...authHeaders, "anthropic-version": "2023-06-01" },
       body: JSON.stringify({ model, max_tokens: 4096, system: systemField, messages: [{ role: "user", content: prompt }] }),
@@ -781,7 +786,7 @@ async function runApi(backend, model, system, prompt, options) {
           : readCustomApiBaseUrl())
         : "https://api.openai.com/v1";
     const label = backend === "custom" ? "Custom API" : backend === "upstage" ? "Upstage" : "OpenAI";
-    const resp = await fetchImpl(`${base}/chat/completions`, {
+    const resp = await request(`${base}/chat/completions`, {
       method: "POST",
       headers: { "content-type": "application/json", authorization: "Bearer " + key },
       body: JSON.stringify({ model, messages: [{ role: "system", content: system }, { role: "user", content: prompt }] }),
@@ -795,7 +800,7 @@ async function runApi(backend, model, system, prompt, options) {
   }
   if (backend === "google") {
     const url = `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${encodeURIComponent(key)}`;
-    const resp = await fetchImpl(url, {
+    const resp = await request(url, {
       method: "POST",
       headers: { "content-type": "application/json" },
       body: JSON.stringify({ systemInstruction: { parts: [{ text: system }] }, contents: [{ role: "user", parts: [{ text: prompt }] }] }),
@@ -811,29 +816,6 @@ async function runApi(backend, model, system, prompt, options) {
   throw new Error("Unsupported backend: " + backend);
 }
 
-// ── 작업 폴더 규칙 (v1 runCwd/projectCwd 포팅) ─────────────────────────
-function runCwd() {
-  const dir = path.join(userDataDir(), "agent-cwd");
-  try {
-    fs.mkdirSync(dir, { recursive: true });
-    return dir;
-  } catch {
-    return os.homedir();
-  }
-}
-
-// 에이전트가 실행될 작업 폴더 = 사용자가 명령을 친 현재 디렉터리(= 대상 프로젝트).
-// 단, home/userData/agent-cwd 같은 "프로젝트 아님" 위치면 안전한 전용 폴더로 폴백.
-function projectCwd() {
-  try {
-    const cwd = process.cwd();
-    if (!cwd || cwd === os.homedir() || cwd === userDataDir() || cwd === runCwd()) return runCwd();
-    return cwd;
-  } catch {
-    return runCwd();
-  }
-}
-
 // ── 자식 env 빌더 (v1 buildChildEnvCli 포팅) ───────────────────────────
 function parseDotEnv(text) {
   const out = {};

package/engine/workforce/deps.cjs

@@ -32,7 +32,8 @@ const path = require("node:path");
 const { userDataDir } = require("../core/paths.cjs");
 const hubClient = require("../cloud/hub-client.cjs");
 const detect = require("../runtimes/detect.cjs");
-const { roleMembers } = require("../runtimes/roles.cjs");
+const { canonicalRuntimeKind } = require("../runtimes/kinds.cjs");
+const { pickRoleFromPool } = require("../runtimes/roles.cjs");
 const capture = require("./capture.cjs");
 
 // ── 런타임 해석 (v1 resolveRuntime의 워크포스 어댑터) ─────────────────────
@@ -49,6 +50,8 @@ function runtimeFromSelection(selection) {
     efforts: [],
     source: selection.sourceLayer || selection.source || null,
     role: selection.role || null,
+    inherit: Boolean(selection.inherit),
+    skipped: Array.isArray(selection.skipped) ? selection.skipped : [],
   };
   if (capture.RUNTIME_BIN[selection.kind]) {
     return { mode: "cli", kind: selection.kind, ...common };
@@ -63,10 +66,10 @@ function runtimeFromSelection(selection) {
 }
 
 function legacyWorkforceRuntime(db, override) {
-  let selectedOverride = override;
+  let selectedOverride = canonicalRuntimeKind(override);
   if (!selectedOverride) {
     try {
-      const saved = require("../agentlas-config.cjs").loadPrefs(userDataDir()).runtime;
+      const saved = canonicalRuntimeKind(require("../agentlas-config.cjs").loadPrefs(userDataDir()).runtime);
       if (
         saved &&
         saved !== "auto" &&
@@ -81,7 +84,7 @@ function legacyWorkforceRuntime(db, override) {
   const active = ar
     ? runtimeFromSelection({
         role: "orchestrator",
-        kind: ar.kind,
+        kind: canonicalRuntimeKind(ar.kind),
         backend: ar.backend,
         source: ar.source,
         model: ar.model,
@@ -128,8 +131,17 @@ function resolveWorkforceRuntime(db, override) {
       },
     };
   }
-  const orchestrator = runtimeFromSelection(roleMembers(db, "orchestrator")[0] || null);
-  const worker = runtimeFromSelection(roleMembers(db, "worker")[0] || null);
+  const isAvailable = (selection) => {
+    const kind = canonicalRuntimeKind(selection && selection.kind);
+    if (capture.RUNTIME_BIN[kind]) return Boolean(capture.which(capture.RUNTIME_BIN[kind]));
+    return kind === "byok" && Boolean(selection.backend) || kind === "ollama";
+  };
+  const pickAvailableRole = (role) => {
+    const selected = pickRoleFromPool(db, role, isAvailable);
+    return selected && isAvailable(selected) ? runtimeFromSelection(selected) : null;
+  };
+  const orchestrator = pickAvailableRole("orchestrator");
+  const worker = pickAvailableRole("worker");
   if (!orchestrator || !worker) {
     const error = new Error("Dashboard orchestrator and worker priorities are required for Workforce execution.");
     error.code = "no_runtime_role_priority";

package/engine/workforce/local-core-transport.cjs

@@ -26,6 +26,10 @@ const crypto = require("node:crypto");
 const { createLocalCoreClient } = require("../hephaestus/local-core.cjs");
 
 const SOURCE_SCOPES = new Set(["network", "local", "cloud", "hub"]);
+const MAX_MAPPED_NODES = 100_000;
+const MAX_MAPPED_DEPTH = 64;
+const MAX_MAPPED_STRING_BYTES = 16 * 1024 * 1024;
+const FORBIDDEN_OBJECT_KEYS = new Set(["__proto__", "prototype", "constructor"]);
 
 /*
  * ── id 정규화 (실측 2026-08-05 라이브 런 실패의 수리) ──
@@ -87,18 +91,58 @@ function boundaryIssues(error) {
 }
 
 /** 깊은 순회로 문자열 값을 정확 일치 치환한 사본을 만든다. */
-function mapDeep(value, map) {
-  if (map.size === 0) return value;
-  if (typeof value === "string") return map.get(value) || value;
-  if (Array.isArray(value)) return value.map((item) => mapDeep(item, map));
+function mapDeep(value, map, state = { nodes: 0, stringBytes: 0 }, depth = 0) {
+  state.nodes += 1;
+  if (state.nodes > MAX_MAPPED_NODES || depth > MAX_MAPPED_DEPTH) {
+    const error = new Error("local Core payload exceeds the safe structure limit");
+    error.code = "local_core_payload_invalid";
+    throw error;
+  }
+  if (typeof value === "string") {
+    state.stringBytes += Buffer.byteLength(value, "utf8");
+    if (state.stringBytes > MAX_MAPPED_STRING_BYTES) {
+      const error = new Error("local Core payload exceeds the safe text limit");
+      error.code = "local_core_payload_invalid";
+      throw error;
+    }
+    return map.get(value) || value;
+  }
+  if (Array.isArray(value)) return value.map((item) => mapDeep(item, map, state, depth + 1));
   if (value && typeof value === "object") {
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== Object.prototype && proto !== null) {
+      const error = new Error("local Core payload contains a non-plain object");
+      error.code = "local_core_payload_invalid";
+      throw error;
+    }
     const out = {};
-    for (const [key, item] of Object.entries(value)) out[key] = mapDeep(item, map);
+    for (const [key, item] of Object.entries(value)) {
+      if (FORBIDDEN_OBJECT_KEYS.has(key)) {
+        const error = new Error(`local Core payload contains a forbidden key: ${key}`);
+        error.code = "local_core_payload_invalid";
+        throw error;
+      }
+      out[key] = mapDeep(item, map, state, depth + 1);
+    }
     return out;
   }
   return value;
 }
 
+function stablePayloadDigest(value) {
+  const mapped = mapDeep(value, new Map());
+  const canonical = (item) => {
+    if (Array.isArray(item)) return `[${item.map(canonical).join(",")}]`;
+    if (item && typeof item === "object") {
+      return `{${Object.keys(item).sort().filter((key) => item[key] !== undefined)
+        .map((key) => `${JSON.stringify(key)}:${canonical(item[key])}`).join(",")}}`;
+    }
+    const encoded = JSON.stringify(item);
+    return encoded === undefined ? "null" : encoded;
+  };
+  return sha256hex(canonical(mapped));
+}
+
 function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
   if (!SOURCE_SCOPES.has(sourceScope)) {
     const error = new Error(`sourceScope must be network|local|cloud|hub, got: ${String(sourceScope)}`);
@@ -123,6 +167,8 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
   // 반송해야 한다 — 반응형 reasonCode 수리가 있었으면 루프의 selection 을 다시
   // 변환한 것과 다르다(exact binding).
   let lastCoreSelection = null;
+  let lastWorkOrderDigest = null;
+  let lastSelectionDigest = null;
 
   const invalid = (message) => {
     const error = new Error(message);
@@ -135,6 +181,9 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
       maps = buildIdMaps(args.workOrder);
       coreCandidateSet = null;
       lastValidationEnvelope = null;
+      lastCoreSelection = null;
+      lastSelectionDigest = null;
+      lastWorkOrderDigest = stablePayloadDigest(args.workOrder);
       // Current Core keeps the full dossier in its pinned session and returns a
       // numbered decision menu. Do not request the legacy full-echo form.
       let envelope;
@@ -171,6 +220,11 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
         error.code = "local_core_lineage_missing";
         throw error;
       }
+      if (stablePayloadDigest(args.workOrder) !== lastWorkOrderDigest) {
+        const error = new Error("validate_selection workOrder differs from the searched local Core lineage");
+        error.code = "local_core_lineage_mismatch";
+        throw error;
+      }
       // The host-authored selection must point at the exact summary menu just
       // returned. Core independently reloads and verifies the full pinned set.
       if (args.selection?.candidateSetDigest !== coreCandidateSet.candidateSetDigest) {
@@ -208,6 +262,7 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
       if (!envelope || typeof envelope.selectionValidation !== "object") throw invalid("local Core validation returned no selectionValidation receipt");
       lastValidationEnvelope = envelope;
       lastCoreSelection = coreSelection;
+      lastSelectionDigest = stablePayloadDigest(args.selection);
       return mapDeep(envelope.selectionValidation, maps.reverse);
     }
     if (name === "workforce.prepare_execution") {
@@ -216,6 +271,14 @@ function createLocalCoreHubTool({ sourceScope, projectDir, cwd, client } = {}) {
         error.code = "local_core_lineage_missing";
         throw error;
       }
+      if (
+        stablePayloadDigest(args.workOrder) !== lastWorkOrderDigest ||
+        stablePayloadDigest(args.selection) !== lastSelectionDigest
+      ) {
+        const error = new Error("prepare_execution input differs from the validated local Core lineage");
+        error.code = "local_core_lineage_mismatch";
+        throw error;
+      }
       const envelope = await core.call(name, {
         workOrder: mapDeep(args.workOrder, maps.forward),
         // validate 가 수락한 정확한 본 — 반응형 reasonCode 수리를 반영한다.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlas",
-  "version": "1.0.65",
+  "version": "1.0.67",
   "description": "Agentlas project terminal — run project controllers and task-scoped agent teams from the terminal. Standalone: no desktop app process required.",
   "bin": {
     "agentlas": "bin/agentlas.cjs"

package/engine/commands/career-graph.cjs

@@ -1,51 +0,0 @@
-"use strict";
-/*
- * career-graph — 커리어 그래프 상태/소스 등록 + 인덱스 실행 위임 (v1 cmdCareerGraph 포팅).
- *
- * ingest|query|verify|trace|public-card 는 파생 인덱스 실행이며 Agentlas OS /
- * Hephaestus 런타임(career_graph 파이썬 모듈)이 소유한다 — 런타임이 있으면
- * 그대로 위임 실행하고, 없으면 정직 정지(대신 계산하는 척 금지).
- */
-const { runCareerGraphCli } = require("../project/career-graph.cjs");
-const { resolveCoreRuntimeRoot, resolvePython, spawnCoreModule } = require("../agentlas-core-harness.cjs");
-
-const INDEX_SUBCOMMANDS = new Set(["ingest", "query", "verify", "trace", "public-card"]);
-
-async function run(ctx, args) {
-  const sub = String((args && args[0]) || "status");
-  if (INDEX_SUBCOMMANDS.has(sub)) {
-    const coreRoot = resolveCoreRuntimeRoot();
-    if (!coreRoot || !resolvePython()) {
-      ctx.err(ctx.lang === "ko"
-        ? "Career Graph 인덱스 실행은 Agentlas OS / Hephaestus 런타임이 필요합니다 (~/.agentlas/runtime/current). 런타임 없이 결과를 지어내지 않습니다."
-        : "Career Graph index execution requires the Agentlas OS / Hephaestus runtime (~/.agentlas/runtime/current). No runtime — no fabricated result.");
-      return 1;
-    }
-    const graphArgs = args.slice();
-    if (!graphArgs.includes("--project")) graphArgs.push("--project", process.cwd());
-    const child = spawnCoreModule("career_graph", graphArgs, { cwd: process.cwd(), stdio: "inherit" }, coreRoot);
-    if (!child) {
-      ctx.err("Agentlas Core runtime or Python 3.9+ is unavailable.");
-      return 1;
-    }
-    return await new Promise((resolve) => {
-      child.on("error", (e) => { ctx.err(String((e && e.message) || e)); resolve(1); });
-      child.on("close", (code) => resolve(code == null ? 1 : code));
-    });
-  }
-  try {
-    const lines = await runCareerGraphCli(args, {
-      cwd: process.cwd(),
-      projectPath: process.cwd(),
-      lang: ctx.lang,
-      notify: (line) => ctx.out(line),
-    });
-    for (const line of lines) ctx.out(line);
-    return 0;
-  } catch (e) {
-    ctx.err(String((e && e.message) || e));
-    return 1;
-  }
-}
-
-module.exports = { run };