agentlas 1.0.66 → 1.0.67

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 1.0.67 — 2026-08-30
+
+- Cloud local state, source markers, and project credential imports now use
+  anchored no-follow atomic publication and fail closed on directory/file swaps
+  or unexpected successors.
+- ACP JSON-RPC notifications no longer receive responses, while explicit
+  `id: null` requests retain normal request semantics.
+- CLI build/MCP output now keeps JSON, YAML, quiet, header, and color modes
+  consistent and returns typed errors for contradictory machine-format input.
+- Workforce candidate sets now require the exact WorkOrder ontology version,
+  and Experience packs reject duplicate MCP requirement identifiers before
+  they can persist invalid state.
+- MCP consent is bound to the command, arguments, and relevant environment
+  material at approval time, while Hub installs recheck managed parents and
+  publish atomically without following path swaps.
+
 ## 1.0.66 — 2026-08-30
 
 - API 스트리밍 요청이 연결·본문 읽기 중 실패하거나 취소돼도 부모 취소 리스너와 idle 타이머를 즉시 정리해, 오래 실행한 Terminal 세션에 실패한 요청의 리스너가 누적되지 않게 했습니다.

package/README.md

@@ -17,6 +17,12 @@ Use this existing independent Terminal as the command-line runtime: inspect owne
 
 Agent Trust is our product principle: agent packages are treated as portable, owner-scoped, inspectable, and restorable assets. (It does not imply regulated financial or fiduciary services.) Agent Cloud stores package assets in your private cloud account, while Agentlas Terminal verifies and executes local runtime copies on your host machine.
 
+Current release: 1.0.67. It hardens local Cloud and credential storage against
+path races, keeps ACP notifications protocol-correct, aligns CLI machine output
+and typed errors, binds Workforce selections to exact ontology versions,
+rejects duplicate Experience requirements, and makes MCP consent and Hub
+installs race-safe.
+
 ---
 
 ## Requirements

package/bin/agentlas.cjs

@@ -72,7 +72,7 @@ function dbPath() {
 // Keep the launcher's no-database path identical to the engine's CLI grammar.
 // A plain word "help" is valid task content (`agentlas run -p help`); only the
 // actual help/version command forms may skip first-run database bootstrap.
-function isMetadataOnlyInvocation(argv) {
+function isMetadataOnlyInvocation(argv, parsedOutput) {
   const args = Array.isArray(argv) ? argv : [];
   const helpRequested = args.some((arg) => arg === "--help" || arg === "-h");
   const helpCommand = args.find((arg) => arg !== "--help" && arg !== "-h" && !String(arg).startsWith("-"));
@@ -83,7 +83,7 @@ function isMetadataOnlyInvocation(argv) {
     if (arg === "--version" || arg === "-V") return "version";
     return arg;
   });
-  const { rest } = parseOutputFlags(normalized);
+  const { rest } = parsedOutput || parseOutputFlags(normalized);
   const [rawCommand, ...commandArgs] = rest;
   if (rawCommand === "help" || rawCommand === "version") return true;
   return SELF_HELP_COMMANDS.has(resolveCommandName(rawCommand)) && commandArgs[0] === "help";
@@ -556,8 +556,21 @@ function bootstrapDbIfMissing() {
 
 function main() {
   const args = process.argv.slice(2);
-  const { options: outputOptions } = parseOutputFlags(args);
-  const metadataOnly = isMetadataOnlyInvocation(args);
+  const normalized = args.map((arg) => {
+    if (arg === "--help" || arg === "-h") return "help";
+    if (arg === "--version" || arg === "-V") return "version";
+    return arg;
+  });
+  let parsedOutput;
+  try {
+    parsedOutput = parseOutputFlags(normalized);
+  } catch (error) {
+    process.stderr.write(renderError(error, { format: "table", noColor: true }) + "\n");
+    process.exitCode = 1;
+    return;
+  }
+  const { options: outputOptions } = parsedOutput;
+  const metadataOnly = isMetadataOnlyInvocation(args, parsedOutput);
   const sqliteDriver = probeSqliteDriver();
   const engineFound = exists(ENGINE);
 

package/engine/acp/server.cjs

@@ -170,8 +170,13 @@ class AcpAgentServer {
     this.output.write(JSON.stringify(obj) + "\n");
   }
   notify(method, params) { this.send({ jsonrpc: "2.0", method, params }); }
-  reply(id, result) { this.send({ jsonrpc: "2.0", id, result }); }
-  error(id, code, message, data) { this.send({ jsonrpc: "2.0", id, error: { code, message, ...(data !== undefined ? { data } : {}) } }); }
+  // JSON-RPC notifications have no response channel. Keep `id: null` as a
+  // request (the protocol distinguishes an absent id from an explicit null).
+  reply(id, result) { if (id === undefined) return; this.send({ jsonrpc: "2.0", id, result }); }
+  error(id, code, message, data) {
+    if (id === undefined) return;
+    this.send({ jsonrpc: "2.0", id, error: { code, message, ...(data !== undefined ? { data } : {}) } });
+  }
 
   start() {
     const rl = readline.createInterface({ input: this.input, crlfDelay: Infinity });

package/engine/agentlas-workforce.cjs

@@ -1111,6 +1111,7 @@ function validateCandidateSet(value, workOrder, now = new Date(), options = {})
   assertId(set.selectionSessionId, "candidateSet.selectionSessionId");
   if (set.workOrderId !== workOrder.workOrderId) fail("candidate_set_invalid", "candidate set workOrderId mismatch");
   assertId(set.ontologyVersion, "candidateSet.ontologyVersion");
+  if (set.ontologyVersion !== workOrder.ontologyVersion) fail("candidate_set_invalid", "candidate set ontologyVersion mismatch");
   assertHash(set.candidateSetDigest, "candidateSet.candidateSetDigest");
   if (set.decisionOwner !== "host_llm") fail("candidate_set_invalid", "Hub candidate set tried to take selection authority");
   if (set.historyInfluence !== "none") fail("candidate_set_invalid", "history/popularity influenced candidate retrieval");

package/engine/agentlas.cjs

@@ -189,7 +189,17 @@ function main() {
 
   // 전역 출력 플래그는 명령에 닿기 전에 한 곳에서 뜯어낸다 —
   // 명령마다 --json 유무가 갈리던 것을 구조로 막는다.
-  const { options: outputOptions, rest: commandArgv } = parseOutputFlags(normalized);
+  // --json + --yaml 은 모순된 요청이라 JSON/YAML 중 하나를 임의로 고르지 않고,
+  // 진입점에서 결정적인 평문 INVALID_ARGUMENT 로 멈춘다.
+  let parsedOutput;
+  try {
+    parsedOutput = parseOutputFlags(normalized);
+  } catch (error) {
+    process.stderr.write(renderError(error, { format: "table", noColor: true }) + "\n");
+    process.exitCode = 1;
+    return;
+  }
+  const { options: outputOptions, rest: commandArgv } = parsedOutput;
   const ctx = buildCtx();
   ctx.output = outputOptions;
   let code;

package/engine/cli-output.cjs

@@ -276,19 +276,33 @@ function renderError(error, options = {}) {
 function parseOutputFlags(argv, env = process.env, isTty = Boolean(process.stdout.isTTY)) {
   const rest = [];
   const options = { ...DEFAULT_OPTIONS };
+  let sawJson = false;
+  let sawYaml = false;
   for (let index = 0; index < argv.length; index += 1) {
     const token = argv[index];
     if (token === "--") {
       rest.push(...argv.slice(index + 1));
       break;
     }
-    if (token === "--json") options.format = "json";
-    else if (token === "--yaml") options.format = "yaml";
+    if (token === "--json") {
+      sawJson = true;
+      options.format = "json";
+    }
+    else if (token === "--yaml") {
+      sawYaml = true;
+      options.format = "yaml";
+    }
     else if (token === "--quiet" || token === "-q") options.quiet = true;
     else if (token === "--no-headers") options.noHeaders = true;
     else if (token === "--no-color") options.noColor = true;
     else rest.push(token);
   }
+  if (sawJson && sawYaml) {
+    const error = new Error("--json and --yaml cannot be used together");
+    error.code = "INVALID_ARGUMENT";
+    error.details = { flags: ["--json", "--yaml"] };
+    throw error;
+  }
   if (env && (env.NO_COLOR || env.AGENTLAS_NO_COLOR)) options.noColor = true;
   if (!isTty) options.noColor = true;
   return { options, rest };