@triflux/core 10.0.0-alpha.1 → 10.0.0

package/hooks/hook-adaptive-collector.mjs

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+
+import { existsSync, readFileSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { createAdaptiveEngine } from '../hub/adaptive.mjs';
+
+let engine = null;
+let createEngine = createAdaptiveEngine;
+
+function readStdin() {
+  try {
+    return readFileSync(0, 'utf8');
+  } catch {
+    return '';
+  }
+}
+
+function inferProjectSlug(cwd = process.cwd()) {
+  const packagePath = join(cwd, 'package.json');
+  if (existsSync(packagePath)) {
+    try {
+      const pkg = JSON.parse(readFileSync(packagePath, 'utf8'));
+      if (typeof pkg.name === 'string' && pkg.name.trim()) return pkg.name.trim();
+    } catch {}
+  }
+  return basename(cwd) || 'default';
+}
+
+function getEngine() {
+  if (engine) return engine;
+  engine = createEngine({
+    projectSlug: inferProjectSlug(),
+    repoRoot: process.cwd(),
+  });
+  engine.startSession?.();
+  return engine;
+}
+
+function buildErrorContext(event = {}) {
+  return {
+    exitCode: event.exitCode,
+    stderr: String(event.stderr || '').slice(0, 500),
+    tool: event.tool,
+    command: String(event.command || '').slice(0, 200),
+    timestamp: new Date().toISOString(),
+  };
+}
+
+export default function hookAdaptiveCollector(event = {}) {
+  if (Number(event.exitCode) === 0) return null;
+  if (!event.tool || event.tool === 'Read') return null;
+
+  const result = getEngine().handleError(buildErrorContext(event));
+  if (result?.diagnosed) {
+    console.error(`[adaptive] 에러 패턴 감지: ${result.rule?.id || 'unknown'}`);
+    if (result.promoted) {
+      console.error(`[adaptive] 규칙 승격 → Tier ${result.rule?.tier ?? '?'}`);
+    }
+  }
+  return result;
+}
+
+export function __setAdaptiveCollectorFactoryForTests(factory) {
+  createEngine = factory;
+  engine = null;
+}
+
+export function __resetAdaptiveCollectorForTests() {
+  createEngine = createAdaptiveEngine;
+  engine = null;
+}
+
+function main() {
+  const raw = readStdin();
+  if (!raw.trim()) return;
+  try {
+    hookAdaptiveCollector(JSON.parse(raw));
+  } catch {}
+}
+
+const isEntrypoint = process.argv[1] && pathToFileURL(process.argv[1]).href === import.meta.url;
+if (isEntrypoint) {
+  main();
+}

package/hooks/hook-manager.mjs

@@ -12,7 +12,7 @@
 //
 // Claude 대화에서 AskUserQuestion으로 UI를 제공하며 내부적으로 이 명령들을 호출합니다.
 
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { PLUGIN_ROOT } from "./lib/resolve-root.mjs";
@@ -21,7 +21,15 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
 const HOME = process.env.HOME || process.env.USERPROFILE || "";
 const SETTINGS_PATH = join(HOME, ".claude", "settings.json");
 const BACKUP_PATH = join(HOME, ".claude", "settings.hooks-backup.json");
-const REGISTRY_PATH = join(__dirname, "hook-registry.json");
+const BUNDLED_REGISTRY_PATH = join(__dirname, "hook-registry.json");
+const REGISTRY_PATH = join(HOME, ".claude", "cache", "hook-registry.json");
+
+function ensureUserRegistry() {
+  if (!existsSync(REGISTRY_PATH) && existsSync(BUNDLED_REGISTRY_PATH)) {
+    mkdirSync(dirname(REGISTRY_PATH), { recursive: true });
+    writeFileSync(REGISTRY_PATH, readFileSync(BUNDLED_REGISTRY_PATH, "utf8"), "utf8");
+  }
+}
 
 // ── 유틸리티 ────────────────────────────────────────────────
 
@@ -45,6 +53,7 @@ function getNodeExe() {
 // ── scan: 현재 settings.json 훅 분석 ───────────────────────
 
 function scan() {
+  ensureUserRegistry();
   const settings = loadJSON(SETTINGS_PATH);
   if (!settings?.hooks) {
     return { status: "no_hooks", message: "settings.json에 훅이 없습니다.", events: {} };
@@ -115,6 +124,7 @@ function resolveVars(cmd) {
 // ── diff: 적용 시 변경점 미리보기 ───────────────────────────
 
 function diff() {
+  ensureUserRegistry();
   const settings = loadJSON(SETTINGS_PATH);
   if (!settings?.hooks) return { status: "no_hooks", changes: [] };
 
@@ -158,6 +168,7 @@ function isOrchestrator(matchers) {
 // ── apply: 오케스트레이터 적용 ──────────────────────────────
 
 function apply() {
+  ensureUserRegistry();
   const settings = loadJSON(SETTINGS_PATH);
   if (!settings) return { status: "error", message: "settings.json을 찾을 수 없습니다." };
 
@@ -250,6 +261,7 @@ function restore() {
 // ── set-priority: 우선순위 변경 ─────────────────────────────
 
 function setPriority(hookId, priority) {
+  ensureUserRegistry();
   const registry = loadJSON(REGISTRY_PATH);
   if (!registry) return { status: "error", message: "레지스트리를 찾을 수 없습니다." };
 
@@ -275,6 +287,7 @@ function setPriority(hookId, priority) {
 // ── toggle: 활성/비활성 토글 ────────────────────────────────
 
 function toggle(hookId) {
+  ensureUserRegistry();
   const registry = loadJSON(REGISTRY_PATH);
   if (!registry) return { status: "error", message: "레지스트리를 찾을 수 없습니다." };
 

package/hooks/hook-registry.json

@@ -31,6 +31,17 @@
         "blocking": false,
         "description": "서브에이전트 스폰 시 triflux 컨텍스트 주입"
       },
+      {
+        "id": "tfx-cross-review-gate",
+        "source": "triflux",
+        "matcher": "Bash",
+        "command": "node \"${PLUGIN_ROOT}/scripts/cross-review-gate.mjs\"",
+        "priority": 1,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": true,
+        "description": "git commit 전 교차 리뷰 미검증 파일 차단/경고"
+      },
       {
         "id": "omc-headless-guard",
         "source": "omc",
@@ -89,6 +100,17 @@
         "timeout": 3,
         "blocking": false,
         "description": "도구 실패 시 에러 힌트 자동 주입"
+      },
+      {
+        "id": "tfx-adaptive-collector",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/hooks/hook-adaptive-collector.mjs\"",
+        "priority": 1,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "에러 패턴 수집 → Neural Memory adaptive engine 학습"
       }
     ],
     "UserPromptSubmit": [
@@ -149,13 +171,24 @@
         "blocking": false,
         "description": "CLI/Hub 가용성 캐시 (hub-ensure 완료 후 실행)"
       },
+      {
+        "id": "tfx-mcp-gateway-ensure",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/scripts/mcp-gateway-ensure.mjs\"",
+        "priority": 4,
+        "enabled": true,
+        "timeout": 8,
+        "blocking": false,
+        "description": "supergateway MCP 서비스 헬스체크 및 자동 기동"
+      },
       {
         "id": "ext-session-vault-start",
         "source": "session-vault",
         "matcher": "*",
-        "command": "${HOME}/Desktop/Projects/cli/session-vault/scripts/start_hook.sh",
+        "command": "bash \"${HOME}/Desktop/Projects/tools/session-vault/scripts/start_hook.sh\"",
         "priority": 100,
-        "enabled": false,
+        "enabled": true,
         "timeout": 10,
         "blocking": false,
         "description": "세션 볼트 로깅 시작"
@@ -177,9 +210,9 @@
         "id": "ext-session-vault-export",
         "source": "session-vault",
         "matcher": "*",
-        "command": "${HOME}/Desktop/Projects/cli/session-vault/scripts/export_hook.sh",
+        "command": "bash \"${HOME}/Desktop/Projects/tools/session-vault/scripts/export_hook.sh\"",
         "priority": 100,
-        "enabled": false,
+        "enabled": true,
         "timeout": 30,
         "blocking": false,
         "description": "세션 트랜스크립트 내보내기"

package/hooks/keyword-rules.json

@@ -49,7 +49,8 @@
           "flags": "i"
         }
       ],
-      "skill": "tfx-codex-swarm",
+      "skill": "tfx-swarm",
+      "deprecated_from": "tfx-codex-swarm",
       "priority": 1,
       "supersedes": [
         "tfx-codex"

package/hooks/mcp-config-watcher.mjs

@@ -7,7 +7,7 @@
 import { readFileSync } from "node:fs";
 import {
   isWatchedPath,
-  loadRegistry,
+  loadRegistryOrDefault,
   remediate,
   scanForStdioServers,
 } from "../scripts/lib/mcp-guard-engine.mjs";
@@ -60,12 +60,7 @@ function main() {
   const filePath = input.tool_input?.file_path || "";
   if (!filePath || !isWatchedPath(filePath)) process.exit(0);
 
-  let registry;
-  try {
-    registry = loadRegistry();
-  } catch {
-    process.exit(0);
-  }
+  const registry = loadRegistryOrDefault();
 
   const stdioServers = scanForStdioServers(filePath);
   if (stdioServers.length === 0) process.exit(0);

package/hooks/safety-guard.mjs

@@ -22,6 +22,8 @@ const BLOCK_RULES = [
   { pattern: /\bformat\s+[a-z]:/i, reason: "디스크 포맷 차단" },
   { pattern: /\b(del|rmdir)\s+\/[sq]\b/i, reason: "Windows 재귀 삭제 차단" },
   { pattern: /\bgit\s+clean\s+.*-fd/i, reason: "git clean -fd 차단 — 추적되지 않은 파일 소실 위험" },
+  { pattern: /\bpsmux\s+kill-session\b/i, reason: "raw psmux kill-session 차단 — WT ConPTY 프리징 위험. 안전 경로: node hub/team/psmux.mjs kill --session <name>", skipIfGit: true },
+  { pattern: /\bpsmux\s+kill-server\b/i, reason: "psmux kill-server 차단 — 모든 세션이 즉시 종료됩니다. node hub/team/psmux.mjs kill-swarm 사용", skipIfGit: true },
 ];
 
 // ── 경고 규칙 ──────────────────────────────────────────────
@@ -60,8 +62,43 @@ function main() {
   const command = (input.tool_input?.command || "").trim();
   if (!command) process.exit(0);
 
+  // psmux 명령이 실제 CLI 호출인지 판별 (오탐 방지)
+  // git commit 메시지, echo, grep, cat, heredoc 안의 텍스트는 무시
+  function isPsmuxInvocation(cmd) {
+    // psmux kill-session/server가 명령에 없으면 즉시 false
+    if (!/\bpsmux\s+kill-(session|server)\b/i.test(cmd)) return false;
+
+    // 줄 분할 → heredoc 경계 추적 → 세그먼트 분할(&&, ;, ||)로 각 명령 단위 검사
+    // 세그먼트가 echo/grep/git-commit으로 시작하면 인자 텍스트이므로 무시
+    const lines = cmd.split(/\n/);
+    let heredocDelimiter = null;
+    return lines.some((line) => {
+      // heredoc 내부이면 닫는 구분자인지만 확인하고 건너뜀
+      if (heredocDelimiter !== null) {
+        if (line.trim() === heredocDelimiter) heredocDelimiter = null;
+        return false;
+      }
+      // heredoc 시작 감지: <<'WORD', <<"WORD", <<WORD
+      const heredocMatch = line.match(/<<['"]?(\w+)['"]?/);
+      if (heredocMatch) {
+        heredocDelimiter = heredocMatch[1];
+        // heredoc 시작 줄 자체는 실제 명령이므로 계속 검사하되
+        // 시작 줄에 psmux kill이 포함될 리 없으므로 여기서 false 반환
+        return false;
+      }
+      const segments = line.split(/\s*(?:&&|;|\|\|)\s*/);
+      return segments.some((seg) => {
+        const t = seg.trim();
+        if (!t || t.startsWith("#")) return false;
+        if (/^\s*(echo|printf|grep|git\s+commit)\b/i.test(t)) return false;
+        return /\bpsmux\s+kill-(session|server)\b/i.test(t);
+      });
+    });
+  }
+
   // 1. BLOCK 체크 — exit 2로 차단
   for (const rule of BLOCK_RULES) {
+    if (rule.skipIfGit && !isPsmuxInvocation(command)) continue;
     if (rule.pattern.test(command)) {
       process.stderr.write(
         `[triflux safety-guard] BLOCKED: ${rule.reason}\n` +

package/hub/account-broker.mjs

@@ -0,0 +1,251 @@
+// hub/account-broker.mjs — Multi-account CLI pool broker
+// Manages lease/release/cooldown for Codex and Gemini accounts.
+// Singleton export. All state changes create new objects (immutable pattern).
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import * as z from 'zod';
+
+// ── Zod schema ───────────────────────────────────────────────────
+
+const AccountSchema = z.object({
+  id: z.string().min(1),
+  mode: z.enum(['profile', 'env', 'auth']),
+  profile: z.string().optional(),
+  env: z.record(z.string(), z.string()).optional(),
+  authFile: z.string().optional(),
+  tier: z.enum(['pro', 'plus', 'free', 'unknown']).optional().default('unknown'),
+}).superRefine((val, ctx) => {
+  if (val.mode === 'auth' && !val.authFile) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: 'authFile is required when mode is "auth"',
+      path: ['authFile'],
+    });
+  }
+});
+
+const ConfigSchema = z.object({
+  defaults: z.object({
+    cooldownMs: z.number().int().positive().optional(),
+  }).optional(),
+  codex: z.array(AccountSchema).optional(),
+  gemini: z.array(AccountSchema).optional(),
+});
+
+const DEFAULT_COOLDOWN_MS = 300_000; // 5 minutes
+const TIER_PRIORITY = { pro: 0, plus: 1, unknown: 2, free: 3 };
+const LEASE_TTL_MS = 30 * 60 * 1000; // 30 minutes
+const AUTH_BASE_PATH = join(homedir(), '.claude', 'cache', 'tfx-hub');
+
+// ── env var resolution ───────────────────────────────────────────
+
+function resolveEnvValues(env) {
+  if (!env) return undefined;
+  const resolved = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (typeof value === 'string' && value.startsWith('$')) {
+      const varName = value.slice(1);
+      resolved[key] = process.env[varName] ?? '';
+    } else {
+      resolved[key] = value;
+    }
+  }
+  return resolved;
+}
+
+// ── AccountBroker ────────────────────────────────────────────────
+
+class AccountBroker {
+  #config;
+  #state; // Map<accountId, accountState>
+  #roundRobinIndex; // Map<provider, number>
+
+  constructor(config) {
+    const parsed = ConfigSchema.parse(config);
+    this.#config = parsed;
+
+    this.#state = new Map();
+    this.#roundRobinIndex = new Map();
+
+    const allAccounts = [
+      ...(parsed.codex || []).map((a) => ({ ...a, provider: 'codex' })),
+      ...(parsed.gemini || []).map((a) => ({ ...a, provider: 'gemini' })),
+    ];
+
+    for (const account of allAccounts) {
+      this.#state.set(account.id, {
+        id: account.id,
+        provider: account.provider,
+        mode: account.mode,
+        profile: account.profile,
+        env: account.env,
+        authFile: account.authFile,
+        tier: account.tier ?? 'unknown',
+        busy: false,
+        leasedAt: null,
+        cooldownUntil: 0,
+        failures: 0,
+        lastUsedAt: 0,
+        totalSessions: 0,
+      });
+    }
+  }
+
+  // ── lease TTL pruning ──────────────────────────────────────────
+
+  #pruneExpiredLeases(now) {
+    for (const [id, acct] of this.#state) {
+      if (acct.busy && acct.leasedAt !== null && now - acct.leasedAt > LEASE_TTL_MS) {
+        this.#state.set(id, { ...acct, busy: false, leasedAt: null });
+      }
+    }
+  }
+
+  // ── lease ─────────────────────────────────────────────────────
+
+  lease({ provider }) {
+    const now = Date.now();
+    this.#pruneExpiredLeases(now);
+
+    const accounts = [...this.#state.values()].filter((a) => a.provider === provider);
+    if (!accounts.length) return null;
+
+    // group available accounts by tier, preserving insertion order within each tier
+    const available = accounts.filter((a) => !a.busy && a.cooldownUntil <= now);
+    if (!available.length) return null;
+
+    // sort by tier priority; stable sort preserves original order within same priority
+    const sorted = [...available].sort(
+      (a, b) => (TIER_PRIORITY[a.tier] ?? 2) - (TIER_PRIORITY[b.tier] ?? 2),
+    );
+
+    // pick the best tier, then apply round-robin within that tier's accounts
+    const bestTier = sorted[0].tier;
+    const sameTierAccounts = sorted.filter((a) => a.tier === bestTier);
+
+    // use a per-provider+tier round-robin key to distribute within the tier
+    const rrKey = `${provider}:${bestTier}`;
+    const rrCurrent = this.#roundRobinIndex.get(rrKey) ?? 0;
+    const tierCount = sameTierAccounts.length;
+    const idx = rrCurrent % tierCount;
+    const acct = sameTierAccounts[idx];
+
+    // advance round-robin index for this tier
+    this.#roundRobinIndex.set(rrKey, (idx + 1) % tierCount);
+
+    // update state (immutable)
+    this.#state.set(acct.id, {
+      ...acct,
+      busy: true,
+      leasedAt: now,
+      lastUsedAt: now,
+      totalSessions: acct.totalSessions + 1,
+    });
+
+    return {
+      id: acct.id,
+      mode: acct.mode,
+      profile: acct.mode === 'profile' ? acct.profile : undefined,
+      env: acct.mode === 'env' ? resolveEnvValues(acct.env) : undefined,
+      authFile: acct.mode === 'auth' ? join(AUTH_BASE_PATH, acct.authFile) : undefined,
+    };
+  }
+
+  // ── release ───────────────────────────────────────────────────
+
+  release(accountId, result) {
+    const acct = this.#state.get(accountId);
+    if (!acct) return;
+
+    const ok = result?.ok === true;
+    const newFailures = ok ? 0 : acct.failures + 1;
+    const cooldownMs = this.#config.defaults?.cooldownMs ?? DEFAULT_COOLDOWN_MS;
+
+    const updated = {
+      ...acct,
+      busy: false,
+      leasedAt: null,
+      failures: newFailures,
+    };
+
+    // consecutive failure guard: 3+ failures → auto-cooldown
+    if (newFailures >= 3) {
+      updated.cooldownUntil = Date.now() + cooldownMs;
+      updated.failures = 0; // reset after cooldown triggered
+    }
+
+    this.#state.set(accountId, updated);
+  }
+
+  // ── markRateLimited ───────────────────────────────────────────
+
+  markRateLimited(id, coolMs) {
+    const acct = this.#state.get(id);
+    if (!acct) return;
+    this.#state.set(id, {
+      ...acct,
+      busy: false,
+      leasedAt: null,
+      cooldownUntil: Date.now() + coolMs,
+    });
+  }
+
+  // ── snapshot ──────────────────────────────────────────────────
+
+  snapshot() {
+    return [...this.#state.values()].map((acct) => ({ ...acct }));
+  }
+
+  // ── nextAvailableEta ──────────────────────────────────────────
+
+  nextAvailableEta(provider) {
+    const now = Date.now();
+    this.#pruneExpiredLeases(now);
+
+    const accounts = [...this.#state.values()].filter((a) => a.provider === provider);
+    if (!accounts.length) return null;
+
+    // find minimum cooldownUntil among accounts that are in cooldown or busy
+    let earliest = null;
+    for (const acct of accounts) {
+      if (!acct.busy && acct.cooldownUntil <= now) {
+        // this account is available now — no ETA needed
+        return null;
+      }
+      const eta = acct.busy ? (acct.leasedAt ?? now) + LEASE_TTL_MS : acct.cooldownUntil;
+      if (earliest === null || eta < earliest) {
+        earliest = eta;
+      }
+    }
+    return earliest;
+  }
+}
+
+// ── Config loader ────────────────────────────────────────────────
+
+function loadConfig() {
+  const configPath = join(homedir(), '.claude', 'cache', 'tfx-hub', 'accounts.json');
+  if (!existsSync(configPath)) return null;
+  try {
+    return JSON.parse(readFileSync(configPath, 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+// ── Singleton ────────────────────────────────────────────────────
+
+function createBroker() {
+  const config = loadConfig();
+  if (!config) return null;
+  try {
+    return new AccountBroker(config);
+  } catch {
+    return null;
+  }
+}
+
+export const broker = createBroker();
+export { AccountBroker };