# Hephaestus Cloud

> Use when the user types /hep-cloud or asks to find/route to one of THEIR OWN Agentlas cloud packages (보관함, 내 클라우드, 내 보관함, my cloud, my own agents). This is the owner-scoped leg of the three-scope model — it searches ONLY the signed-in user's own cloud packages, not the public marketplace (use hep-network for that) and not local cards. The user's own cloud packages are restorable/owned by them and…

- **Type:** Skill
- **Install:** `agentstack add skill-agentlas-ai-agentlas-os-hephaestus-cloud`
- **Verified:** Pending review
- **Seller:** [agentlas-ai](https://agentstack.voostack.com/s/agentlas-ai)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [agentlas-ai](https://github.com/agentlas-ai)
- **Source:** https://github.com/agentlas-ai/Agentlas-OS/tree/main/skills/hephaestus-cloud
- **Website:** https://agentlas.cloud

## Install

```sh
agentstack add skill-agentlas-ai-agentlas-os-hephaestus-cloud
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Hephaestus Cloud Routing (my own cloud / 보관함)

Route the request through the signed-in user's OWN Agentlas cloud packages only.
Never guess an agent yourself when this skill is active — the router/Hub decides.

## 0. Scope rule

`/hep-cloud` is owner-scoped: it queries ONLY the authenticated owner's
own cloud packages (보관함) via the Hub owner filter (`cargo.*`). It does **not**
search the public marketplace and does **not** search local private/plugin
cards.

- The user's own cloud packages are restorable/owned by them, call-priced at a
  flat **1 credit** per call.
- For the public marketplace (others' published, per-call-priced agents), use
  the `hephaestus-network` skill or `/hep-network` / `--hub-only` instead.
- For the combined search (local + own cloud + Hub, each priced by origin), use
  plain-language routing (`hephaestus route`).

## 1. Resolve the runner

Run this resolution in a shell and use the first hit:

```bash
RUNNER=""
for c in \
  "$HOME/.agentlas/runtime/current/bin/hephaestus" \
  ./bin/hephaestus
do [ -x "$c" ] && RUNNER="$c" && break; done
if [ -z "$RUNNER" ]; then
  for cache in \
    "$HOME/.claude/plugins/cache/agentlas-core-engine/hephaestus" \
    "$HOME/.codex/plugins/cache/agentlas-core-engine/hephaestus"; do
    newest="$(ls -d "$cache"/*/bin/hephaestus 2>/dev/null | sort -V | tail -1)"
    [ -n "$newest" ] && [ -x "$newest" ] && RUNNER="$newest" && break
  done
fi
```

If no runner exists, tell the user to run the one-touch installer:
`curl -fsSL https://raw.githubusercontent.com/agentlas-ai/Agentlas-OS/main/scripts/install-all-runtimes.sh | bash`

If shell execution is unavailable in this harness but MCP is, call the
`agentlas_authenticate` tool first, then call the `hephaestus_cloud_search` tool
from the `hephaestus-network` MCP server instead.

## 2. Agentlas sign-in (required)

The owner cloud is sign-in-gated. Before routing, ensure Agentlas is signed in:

```bash
if [ "${HEPHAESTUS_AUTH_AUTOPOPUP:-1}" != "0" ]; then
  "$RUNNER" auth ensure --timeout 180 >/dev/null 2>&1 || true
fi
```

This opens the user's default browser only when there is no valid local sign-in
yet, and reuses a saved sign-in silently. For CI/headless checks only, set
`HEPHAESTUS_AUTH_AUTOPOPUP=0` and skip this step.

## 3. Route (owner cloud only)

```bash
"$RUNNER" cloud "" --project .
```

`hephaestus cloud` is shorthand for `hephaestus route "" --scope cloud`
(owner-scoped Hub query; implies `--hub-only`). Via MCP, call
`hephaestus_cloud_search` instead.

## 4. Act on the JSON decision (`scope: "cloud"`)

- `action: "hub_candidates"` — these are the user's OWN cloud packages
  (`hub.results[].slug`, `name`). Report them, and on the user's pick invoke that
  package with the original request (call-priced at 1 credit).
- `action: "clarify"` — ask `clarify_question` with the candidate list and
  re-route with the answer (still cloud-scoped).
- `action: "propose_new"` — no matching package in the user's cloud. Offer to
  search the public marketplace (`/hep-network` / `--hub-only`) or to build
  a new agent via `/hep-build`.
- `action: "refuse"` — explain `reasons` (for example, loop guard). Do not retry.

## 5. Hard rules

- Never report public marketplace agents or local private/plugin cards as if
  they were the user's own cloud packages.
- The router only chooses a package or fetches a BYOM bundle; it does not
  execute payments, deletes, publishes, file writes, or external submissions.
- For actual tool execution, follow the host runtime's safety and permission
  model. Report the routing `receipt_id` in your final message.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [agentlas-ai](https://github.com/agentlas-ai)
- **Source:** [agentlas-ai/Agentlas-OS](https://github.com/agentlas-ai/Agentlas-OS)
- **License:** Apache-2.0
- **Homepage:** https://agentlas.cloud

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-agentlas-ai-agentlas-os-hephaestus-cloud
- Seller: https://agentstack.voostack.com/s/agentlas-ai
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.