v1.7.4

1.7.4 — 2026-05-25

Patch — pre-HN-launch cleanup. Two Bugsink-noise fixes against v1.7.1 and a CLI-side legal addition.

Added

• Terms of Service acceptance gate in the CLI setup wizard. First npx @lynox-ai/core / lynox init shows the ELv2 / no-warranty terms with a confirm prompt, persists acceptance in ~/.lynox/.tos-accepted-1. Bumping TOS_VERSION re-prompts (versioned consent). Closes Item 17 of the 2026-05-25 pre-HN legal audit (#613).

Fixed

• WorkerLoop benign workflow-not-found races no longer surface to Bugsink. When a saved workflow is deleted between cron-scheduling and the executor tick, executePipeline records the skip via recordAndNotify ("no longer exists (skipped)") instead of rethrowing the typed error. Closes Bugsink ENGINE-8 (#614).
• Session-run returns a friendly 400 when no LLM key is configured instead of letting the Anthropic SDK deep-throw from validateHeaders(). Adds a pre-flight check on POST /api/sessions/:id/run that mirrors the configured.api_key logic in GET /api/secrets/status. Closes Bugsink STAGING-ENGINE-6 + STAGING-ENGINE-7 (#615).

Internal

• User-facing string casing LYNOX → lynox in 4 boundary surfaces (http-api startup log, Google-auth HTML pages, content-extractor User-Agent header). Closes pre-HN legal audit trademark item P1-19 (#612).