@triflux/core 10.0.2 → 10.1.0

package/hooks/error-context.mjs

@@ -4,7 +4,8 @@
 // 도구 실패 시 에러 패턴을 분석하여 해결 힌트를 additionalContext로 주입한다.
 // Claude가 동일 에러를 반복하지 않도록 구체적 가이드를 제공.
 
-import { readFileSync } from "node:fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
 
 // ── 에러 패턴 → 해결 힌트 매핑 ─────────────────────────────
 const ERROR_HINTS = [
@@ -128,16 +129,43 @@ function main() {
     JSON.stringify(input.tool_result || ""),
   ].join("\n");
 
+  // ── reflexion 적응형 학습: safety-guard/headless-guard 차단을 패널티로 기록 ──
+  const isSafetyBlock = /\[(?:safety-guard|headless-guard)\].*(?:BLOCKED|차단)/i.test(errorText);
+  if (isSafetyBlock) {
+    try {
+      const home = process.env.HOME || process.env.USERPROFILE || "";
+      const penaltyDir = join(home, ".triflux", "reflexion");
+      mkdirSync(penaltyDir, { recursive: true });
+      const penaltyFile = join(penaltyDir, "pending-penalties.jsonl");
+      const command = input.tool_input?.command || "";
+      const entry = {
+        ts: new Date().toISOString(),
+        type: "guard_block",
+        tool: input.tool_name || "Bash",
+        error_pattern: errorText.match(/\[.*?\]\s*(.{0,120})/)?.[1] || errorText.slice(0, 120),
+        command_preview: command.slice(0, 200),
+        source: errorText.includes("safety-guard") ? "safety-guard" : "headless-guard",
+      };
+      writeFileSync(penaltyFile, JSON.stringify(entry) + "\n", { flag: "a" });
+    } catch { /* reflexion 기록 실패는 무시 — 힌트 출력에 영향 주지 않음 */ }
+  }
+
   const hints = findHints(errorText);
-  if (hints.length === 0) process.exit(0);
+  // safety-guard 차단에는 guard가 이미 구체적 안내를 제공하므로 추가 힌트 불필요
+  if (hints.length === 0 && !isSafetyBlock) process.exit(0);
 
   const toolName = input.tool_name || "Unknown";
-  const output = {
-    systemMessage:
-      `[error-context] ${toolName} 실패 — 해결 힌트:\n` +
-      hints.map((h) => `  → ${h}`).join("\n"),
-  };
+  const parts = [];
+  if (hints.length > 0) {
+    parts.push(`[error-context] ${toolName} 실패 — 해결 힌트:\n` + hints.map((h) => `  → ${h}`).join("\n"));
+  }
+  if (isSafetyBlock) {
+    parts.push("[reflexion] 이 패턴이 적응형 학습에 기록되었습니다. 다음 세션에서 동일 패턴 시 사전 차단됩니다.");
+  }
+
+  if (parts.length === 0) process.exit(0);
 
+  const output = { systemMessage: parts.join("\n") };
   process.stdout.write(JSON.stringify(output));
 }
 

package/hooks/hook-orchestrator.mjs

@@ -340,6 +340,20 @@ async function main() {
     }
   }
 
+  // ── PostToolUse:Skill 완료 시 라우팅 가중치 기록 ──
+  if (eventName === "PostToolUse" && toolName === "Skill" && !blocked) {
+    try {
+      const input = JSON.parse(stdinRaw);
+      const skillName = input.tool_input?.skill || "";
+      if (skillName && skillName.startsWith("tfx-")) {
+        const mode = skillName.replace(/^tfx-/, "");
+        const gitRoot = process.env.GIT_WORK_TREE || process.cwd();
+        const slug = gitRoot.split(/[\\/]/).pop() || "unknown";
+        recordRouteOutcome(slug, mode, "completion");
+      }
+    } catch { /* 가중치 기록 실패 무시 */ }
+  }
+
   // 결과 출력
   if (blocked) {
     process.exit(2);

package/hooks/hook-registry.json

@@ -1,246 +1,256 @@
-{
-  "$schema": "hook-registry-schema",
-  "version": 1,
-  "description": "훅 우선순위 레지스트리 — 오케스트레이터가 이 파일을 읽어 순차 실행한다. priority 낮을수록 먼저 실행.",
-  "defaults": {
-    "triflux_priority": 0,
-    "omc_priority": 50,
-    "external_priority": 100
-  },
-  "events": {
-    "PreToolUse": [
-      {
-        "id": "tfx-safety-guard",
-        "source": "triflux",
-        "matcher": "Bash",
-        "command": "node \"${PLUGIN_ROOT}/hooks/safety-guard.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": true,
-        "description": "위험 Bash 명령 사전 차단 (rm -rf, force push 등)"
-      },
-      {
-        "id": "tfx-agent-route-guard",
-        "source": "triflux",
-        "matcher": "Agent",
-        "command": "node \"${PLUGIN_ROOT}/hooks/agent-route-guard.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "서브에이전트 스폰 시 triflux 컨텍스트 주입"
-      },
-      {
-        "id": "tfx-cross-review-gate",
-        "source": "triflux",
-        "matcher": "Bash",
-        "command": "node \"${PLUGIN_ROOT}/scripts/cross-review-gate.mjs\"",
-        "priority": 1,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": true,
-        "description": "git commit 전 교차 리뷰 미검증 파일 차단/경고"
-      },
-      {
-        "id": "omc-headless-guard",
-        "source": "omc",
-        "matcher": "Bash|Agent",
-        "command": "bash \"${HOME}/.claude/scripts/headless-guard-fast.sh\"",
-        "priority": 50,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "psmux headless 가드"
-      },
-      {
-        "id": "omc-tfx-gate-activate",
-        "source": "omc",
-        "matcher": "Skill",
-        "command": "node \"${HOME}/.claude/scripts/tfx-gate-activate.mjs\"",
-        "priority": 50,
-        "enabled": true,
-        "timeout": 2,
-        "blocking": false,
-        "description": "tfx-multi 상태 추적 게이트"
-      }
-    ],
-    "PostToolUse": [
-      {
-        "id": "tfx-cross-review-tracker",
-        "source": "triflux",
-        "matcher": "Edit|Write",
-        "command": "node \"${PLUGIN_ROOT}/hooks/cross-review-tracker.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "파일 수정 추적 → 교차 리뷰 nudge"
-      },
-      {
-        "id": "tfx-mcp-config-watcher",
-        "source": "triflux",
-        "matcher": "Edit|Write",
-        "command": "node \"${PLUGIN_ROOT}/hooks/mcp-config-watcher.mjs\"",
-        "priority": 1,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "감시 대상 MCP 설정 변경 감지 → stdio MCP 자동 치환"
-      }
-    ],
-    "PostToolUseFailure": [
-      {
-        "id": "tfx-error-context",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/hooks/error-context.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "도구 실패 시 에러 힌트 자동 주입"
-      },
-      {
-        "id": "tfx-adaptive-collector",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/hooks/hook-adaptive-collector.mjs\"",
-        "priority": 1,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "에러 패턴 수집 → Neural Memory adaptive engine 학습"
-      }
-    ],
-    "UserPromptSubmit": [
-      {
-        "id": "tfx-keyword-detector",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/scripts/run.cjs\" \"${PLUGIN_ROOT}/scripts/keyword-detector.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 5,
-        "blocking": false,
-        "description": "키워드 매칭 → 스킬 자동 라우팅"
-      }
-    ],
-    "SessionStart": [
-      {
-        "id": "tfx-setup",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/scripts/setup.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 10,
-        "blocking": false,
-        "description": "triflux 환경 초기화"
-      },
-      {
-        "id": "tfx-mcp-safety-guard",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/scripts/mcp-safety-guard.mjs\"",
-        "priority": 1,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "Gemini stdio MCP 자동 감지 + 제거 (spawn EPERM 방지)"
-      },
-      {
-        "id": "tfx-hub-ensure",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/scripts/hub-ensure.mjs\"",
-        "priority": 2,
-        "enabled": true,
-        "timeout": 8,
-        "blocking": false,
-        "description": "tfx-hub 서비스 헬스체크 및 시작"
-      },
-      {
-        "id": "tfx-preflight-cache",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/scripts/preflight-cache.mjs\"",
-        "priority": 3,
-        "enabled": true,
-        "timeout": 5,
-        "blocking": false,
-        "description": "CLI/Hub 가용성 캐시 (hub-ensure 완료 후 실행)"
-      },
-      {
-        "id": "tfx-mcp-gateway-ensure",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/scripts/mcp-gateway-ensure.mjs\"",
-        "priority": 4,
-        "enabled": true,
-        "timeout": 8,
-        "blocking": false,
-        "description": "supergateway MCP 서비스 헬스체크 및 자동 기동"
-      },
-      {
-        "id": "ext-session-vault-start",
-        "source": "session-vault",
-        "matcher": "*",
-        "command": "bash \"${HOME}/Desktop/Projects/tools/session-vault/scripts/start_hook.sh\"",
-        "priority": 100,
-        "enabled": true,
-        "timeout": 10,
-        "blocking": false,
-        "description": "세션 볼트 로깅 시작"
-      }
-    ],
-    "Stop": [
-      {
-        "id": "tfx-pipeline-stop",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/hooks/pipeline-stop.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 5,
-        "blocking": true,
-        "description": "활성 파이프라인 감지 → 종료 차단"
-      },
-      {
-        "id": "ext-session-vault-export",
-        "source": "session-vault",
-        "matcher": "*",
-        "command": "bash \"${HOME}/Desktop/Projects/tools/session-vault/scripts/export_hook.sh\"",
-        "priority": 100,
-        "enabled": true,
-        "timeout": 30,
-        "blocking": false,
-        "description": "세션 트랜스크립트 내보내기"
-      },
-      {
-        "id": "ext-mcp-cleanup",
-        "source": "system",
-        "matcher": "*",
-        "command": "powershell -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \"${HOME}/.claude/scripts/mcp-cleanup.ps1\"",
-        "priority": 100,
-        "enabled": true,
-        "timeout": 8,
-        "blocking": false,
-        "description": "MCP 고아 프로세스 정리"
-      }
-    ],
-    "SubagentStop": [
-      {
-        "id": "tfx-subagent-verifier",
-        "source": "triflux",
-        "matcher": "*",
-        "command": "node \"${PLUGIN_ROOT}/hooks/subagent-verifier.mjs\"",
-        "priority": 0,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "서브에이전트 결과 품질 체크"
-      }
-    ]
-  }
-}
+{
+  "$schema": "hook-registry-schema",
+  "version": 1,
+  "description": "훅 우선순위 레지스트리 — 오케스트레이터가 이 파일을 읽어 순차 실행한다. priority 낮을수록 먼저 실행.",
+  "defaults": {
+    "triflux_priority": 0,
+    "omc_priority": 50,
+    "external_priority": 100
+  },
+  "events": {
+    "PreToolUse": [
+      {
+        "id": "tfx-safety-guard",
+        "source": "triflux",
+        "matcher": "Bash",
+        "command": "node \"${PLUGIN_ROOT}/hooks/safety-guard.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": true,
+        "description": "위험 Bash 명령 사전 차단 (rm -rf, force push 등)"
+      },
+      {
+        "id": "tfx-agent-route-guard",
+        "source": "triflux",
+        "matcher": "Agent",
+        "command": "node \"${PLUGIN_ROOT}/hooks/agent-route-guard.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "서브에이전트 스폰 시 triflux 컨텍스트 주입"
+      },
+      {
+        "id": "tfx-cross-review-gate",
+        "source": "triflux",
+        "matcher": "Bash",
+        "command": "node \"${PLUGIN_ROOT}/scripts/cross-review-gate.mjs\"",
+        "priority": 1,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": true,
+        "description": "git commit 전 교차 리뷰 미검증 파일 차단/경고"
+      },
+      {
+        "id": "omc-headless-guard",
+        "source": "omc",
+        "matcher": "Bash|Agent",
+        "command": "bash \"${HOME}/.claude/scripts/headless-guard-fast.sh\"",
+        "priority": 50,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "psmux headless 가드"
+      },
+      {
+        "id": "omc-tfx-gate-activate",
+        "source": "omc",
+        "matcher": "Skill",
+        "command": "node \"${HOME}/.claude/scripts/tfx-gate-activate.mjs\"",
+        "priority": 50,
+        "enabled": true,
+        "timeout": 2,
+        "blocking": false,
+        "description": "tfx-multi 상태 추적 게이트"
+      },
+      {
+        "id": "tfx-write-edit-passthrough",
+        "source": "triflux",
+        "matcher": "Edit|Write",
+        "command": "exit 0",
+        "priority": 999,
+        "enabled": true,
+        "blocking": false,
+        "description": "Edit/Write passthrough"
+      }
+    ],
+    "PostToolUse": [
+      {
+        "id": "tfx-cross-review-tracker",
+        "source": "triflux",
+        "matcher": "Edit|Write",
+        "command": "node \"${PLUGIN_ROOT}/hooks/cross-review-tracker.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "파일 수정 추적 → 교차 리뷰 nudge"
+      },
+      {
+        "id": "tfx-mcp-config-watcher",
+        "source": "triflux",
+        "matcher": "Edit|Write",
+        "command": "node \"${PLUGIN_ROOT}/hooks/mcp-config-watcher.mjs\"",
+        "priority": 1,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "감시 대상 MCP 설정 변경 감지 → stdio MCP 자동 치환"
+      }
+    ],
+    "PostToolUseFailure": [
+      {
+        "id": "tfx-error-context",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/hooks/error-context.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "도구 실패 시 에러 힌트 자동 주입"
+      },
+      {
+        "id": "tfx-adaptive-collector",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/hooks/hook-adaptive-collector.mjs\"",
+        "priority": 1,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "에러 패턴 수집 → Neural Memory adaptive engine 학습"
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "id": "tfx-keyword-detector",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/scripts/run.cjs\" \"${PLUGIN_ROOT}/scripts/keyword-detector.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 5,
+        "blocking": false,
+        "description": "키워드 매칭 → 스킬 자동 라우팅"
+      }
+    ],
+    "SessionStart": [
+      {
+        "id": "tfx-setup",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/scripts/setup.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 10,
+        "blocking": false,
+        "description": "triflux 환경 초기화"
+      },
+      {
+        "id": "tfx-mcp-safety-guard",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/scripts/mcp-safety-guard.mjs\"",
+        "priority": 1,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "Gemini stdio MCP 자동 감지 + 제거 (spawn EPERM 방지)"
+      },
+      {
+        "id": "tfx-hub-ensure",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/scripts/hub-ensure.mjs\"",
+        "priority": 2,
+        "enabled": true,
+        "timeout": 8,
+        "blocking": false,
+        "description": "tfx-hub 서비스 헬스체크 및 시작"
+      },
+      {
+        "id": "tfx-preflight-cache",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/scripts/preflight-cache.mjs\"",
+        "priority": 3,
+        "enabled": true,
+        "timeout": 5,
+        "blocking": false,
+        "description": "CLI/Hub 가용성 캐시 (hub-ensure 완료 후 실행)"
+      },
+      {
+        "id": "tfx-mcp-gateway-ensure",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/scripts/mcp-gateway-ensure.mjs\"",
+        "priority": 4,
+        "enabled": true,
+        "timeout": 8,
+        "blocking": false,
+        "description": "supergateway MCP 서비스 헬스체크 및 자동 기동"
+      },
+      {
+        "id": "ext-session-vault-start",
+        "source": "session-vault",
+        "matcher": "*",
+        "command": "bash \"${HOME}/Desktop/Projects/tools/session-vault/scripts/start_hook.sh\"",
+        "priority": 100,
+        "enabled": true,
+        "timeout": 10,
+        "blocking": false,
+        "description": "세션 볼트 로깅 시작"
+      }
+    ],
+    "Stop": [
+      {
+        "id": "tfx-pipeline-stop",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/hooks/pipeline-stop.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 5,
+        "blocking": true,
+        "description": "활성 파이프라인 감지 → 종료 차단"
+      },
+      {
+        "id": "ext-session-vault-export",
+        "source": "session-vault",
+        "matcher": "*",
+        "command": "bash \"${HOME}/Desktop/Projects/tools/session-vault/scripts/export_hook.sh\"",
+        "priority": 100,
+        "enabled": true,
+        "timeout": 30,
+        "blocking": false,
+        "description": "세션 트랜스크립트 내보내기"
+      },
+      {
+        "id": "ext-mcp-cleanup",
+        "source": "system",
+        "matcher": "*",
+        "command": "powershell -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \"${HOME}/.claude/scripts/mcp-cleanup.ps1\"",
+        "priority": 100,
+        "enabled": true,
+        "timeout": 8,
+        "blocking": false,
+        "description": "MCP 고아 프로세스 정리"
+      }
+    ],
+    "SubagentStop": [
+      {
+        "id": "tfx-subagent-verifier",
+        "source": "triflux",
+        "matcher": "*",
+        "command": "node \"${PLUGIN_ROOT}/hooks/subagent-verifier.mjs\"",
+        "priority": 0,
+        "enabled": true,
+        "timeout": 3,
+        "blocking": false,
+        "description": "서브에이전트 결과 품질 체크"
+      }
+    ]
+  }
+}

package/hooks/safety-guard.mjs

@@ -8,7 +8,8 @@
 //   BLOCK (exit 2)  — 복구 불가능한 파괴적 명령
 //   WARN  (allow + context) — 주의가 필요한 명령
 
-import { readFileSync } from "node:fs";
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
 
 // ── 차단 규칙 ──────────────────────────────────────────────
 const BLOCK_RULES = [
@@ -38,6 +39,21 @@ const WT_DIRECT_PATTERNS = [
 const WT_DIRECT_BLOCK_MESSAGE =
   "[safety-guard] wt.exe 직접 호출 차단됨. → hub/team/wt-manager.mjs의 createTab() / splitPane() / applySplitLayout()을 사용하세요.";
 
+// ── SSH+PowerShell bash 문법 차단 ────────────────────────────
+// 원격 기본 셸이 PowerShell인 호스트에 bash redirect/glob을 보내면 오동작
+const BASH_SYNTAX_IN_SSH = [
+  /2>\/dev\/null/,          // 2>/dev/null → PowerShell에서 Out-File C:\dev\null
+  />\s*\/dev\/null/,        // >/dev/null
+  /&>\s*\/dev\/null/,       // &>/dev/null
+  /\$\(/,                   // $(cmd) → PowerShell에서 다른 의미
+  /\bsource\s+/,            // source → PowerShell에 없음
+  /\bexport\s+\w+=/,        // export VAR= → PowerShell에 없음
+];
+
+const SSH_POWERSHELL_HINT =
+  "원격 셸이 PowerShell입니다. bash 문법 직접 전달 금지. scp + pwsh -File 패턴 사용. " +
+  "2>/dev/null → 2>$null, $() → $(), export → $env:, source → . (dot-source)";
+
 // ── 경고 규칙 ──────────────────────────────────────────────
 const WARN_RULES = [
   { pattern: /\bgit\s+push\b(?!.*--force)/i, warn: "git push 감지. 원격 저장소에 반영됩니다." },
@@ -50,6 +66,20 @@ const WARN_RULES = [
   { pattern: /\bcurl\s.*\|\s*(bash|sh)\b/i, warn: "curl | sh 감지. 원격 스크립트 실행 주의." },
 ];
 
+// ── reflexion 적응형 패널티 로드 ──────────────────────────────
+function loadReflexionPenalties() {
+  try {
+    const home = process.env.HOME || process.env.USERPROFILE || "";
+    const penaltyFile = join(home, ".triflux", "reflexion", "pending-penalties.jsonl");
+    if (!existsSync(penaltyFile)) return [];
+    return readFileSync(penaltyFile, "utf8")
+      .split("\n")
+      .filter(Boolean)
+      .map(line => { try { return JSON.parse(line); } catch { return null; } })
+      .filter(Boolean);
+  } catch { return []; }
+}
+
 function readStdin() {
   try {
     return readFileSync(0, "utf8");
@@ -127,6 +157,45 @@ function main() {
     blockCommand(WT_DIRECT_BLOCK_MESSAGE, command);
   }
 
+  // 0.1. reflexion 적응형 패널티 — 이전 세션에서 차단된 패턴 사전 경고
+  const penalties = loadReflexionPenalties();
+  if (penalties.length > 0) {
+    for (const penalty of penalties) {
+      if (penalty.error_pattern && new RegExp(penalty.error_pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").slice(0, 80), "i").test(command)) {
+        const output = {
+          hookSpecificOutput: {
+            hookEventName: "PreToolUse",
+            permissionDecision: "allow",
+            additionalContext:
+              `[reflexion] 이전 세션에서 차단된 패턴과 유사합니다 (${penalty.source}, ${penalty.ts?.slice(0, 10)}). ` +
+              `이전 차단 사유: ${penalty.error_pattern?.slice(0, 100)}`,
+          },
+        };
+        process.stdout.write(JSON.stringify(output));
+        process.exit(0);
+      }
+    }
+  }
+
+  // 0.5. SSH → PowerShell 호스트에 bash 문법 전달 차단
+  // 세그먼트 시작 위치에서 ssh 명령인 경우만 (문자열/코드 안의 ssh는 무시)
+  if (hasSegmentInvocation(command, [/^\s*ssh\s+/i])) {
+    // 세그먼트 분리 후 ssh로 시작하는 세그먼트의 payload만 검사
+    const segments = command.split(/\s*(?:&&|;|\|\||\|)\s*/);
+    for (const seg of segments) {
+      const sshMatch = seg.trim().match(/^ssh\s+\S+\s+(.*)/s);
+      if (!sshMatch) continue;
+      const sshPayload = sshMatch[1];
+      const bashSyntax = BASH_SYNTAX_IN_SSH.find(p => p.test(sshPayload));
+      if (bashSyntax) {
+        blockCommand(
+          `[safety-guard] SSH 명령에 bash 전용 문법 감지: ${bashSyntax}. ${SSH_POWERSHELL_HINT}`,
+          command,
+        );
+      }
+    }
+  }
+
   // 1. BLOCK 체크 — exit 2로 차단
   for (const rule of BLOCK_RULES) {
     if (rule.skipIfGit && !isPsmuxInvocation(command)) continue;

package/hub/assign-callbacks.mjs

@@ -34,12 +34,12 @@ function buildAssignCallbackEvent(event = {}, row = null) {
     trace_id: source.trace_id || null,
     correlation_id: source.correlation_id || null,
     last_message_id: source.last_message_id || null,
-    result: Object.prototype.hasOwnProperty.call(source, 'result')
+    result: Object.hasOwn(source, 'result')
       ? source.result
-      : (Object.prototype.hasOwnProperty.call(event, 'result') ? event.result : null),
-    error: Object.prototype.hasOwnProperty.call(source, 'error')
+      : (Object.hasOwn(event, 'result') ? event.result : null),
+    error: Object.hasOwn(source, 'error')
       ? source.error
-      : (Object.prototype.hasOwnProperty.call(event, 'error') ? event.error : null),
+      : (Object.hasOwn(event, 'error') ? event.error : null),
     created_at_ms: Number.isFinite(createdAtMs) ? createdAtMs : null,
     updated_at_ms: Number.isFinite(updatedAtMs) ? updatedAtMs : null,
     started_at_ms: Number.isFinite(Number(source.started_at_ms)) ? Number(source.started_at_ms) : null,

package/hub/bridge.mjs

@@ -96,7 +96,7 @@ export async function requestJson(path, { method = 'POST', body, timeoutMs = 500
     const headers = {};
     const token = readHubToken();
     if (token) {
-      headers['Authorization'] = `Bearer ${token}`;
+      headers.Authorization = `Bearer ${token}`;
     }
     if (body !== undefined) {
       headers['Content-Type'] = 'application/json';

package/hub/codex-adapter.mjs

@@ -29,7 +29,7 @@ function inferStallMode(stdout, stderr) {
 // ── Codex command building ──────────────────────────────────────
 
 function commandWithOverrides(command, prompt, codexPath, overrides = []) {
-  let next = codexPath ? command.replace(/^codex\b/u, shellQuote(codexPath)) : command;
+  const next = codexPath ? command.replace(/^codex\b/u, shellQuote(codexPath)) : command;
   if (!overrides.length) return next;
   const promptArg = JSON.stringify(prompt);
   const flags = overrides.flatMap((value) => ['-c', shellQuote(value)]).join(' ');

package/hub/codex-compat.mjs

@@ -1,5 +1,6 @@
 // hub/codex-compat.mjs — backward-compatible facade for legacy imports
 
+/** @experimental */
 export {
   CODEX_MCP_EXECUTION_EXIT_CODE,
   CODEX_MCP_TRANSPORT_EXIT_CODE,

package/hub/fullcycle.mjs

@@ -13,6 +13,7 @@ function safeResolve(baseDir, relativePath) {
   return target;
 }
 
+/** @experimental */
 export function createFullcycleRunId(now = new Date()) {
   return now
     .toISOString()

package/hub/intent.mjs

@@ -54,7 +54,10 @@ function _tryCodexClassify(prompt) {
   }
 }
 
-/** triflux 특화 의도 카테고리 (10개) */
+/**
+ * @experimental
+ * triflux 특화 의도 카테고리 (10개)
+ */
 export const INTENT_CATEGORIES = {
   implement:  { agent: 'executor',       mcp: 'implement', effort: 'codex53_high' },
   debug:      { agent: 'debugger',       mcp: 'implement', effort: 'codex53_high' },

package/hub/lib/memory-store.mjs

@@ -68,6 +68,9 @@ export function buildAdaptiveRuleRow({
   hit_count = 1,
   last_seen_ms,
   created_ms,
+  error_message,
+  solution,
+  context,
 } = {}) {
   const identity = normalizeAdaptiveRuleIdentity(project_slug, pattern);
   if (!identity) return null;
@@ -79,6 +82,9 @@ export function buildAdaptiveRuleRow({
     hit_count: clampHitCount(hit_count, 1),
     last_seen_ms: lastSeenAt,
     created_ms: createdAt,
+    error_message: typeof error_message === 'string' ? error_message : null,
+    solution: typeof solution === 'string' ? solution : null,
+    context: typeof context === 'string' ? context : null,
   };
 }
 
@@ -741,6 +747,22 @@ export function createMemoryStore() {
       }
       return removed;
     },
+
+    listAdaptiveRules(projectSlug) {
+      const results = [];
+      for (const rule of adaptiveRules.values()) {
+        if (!projectSlug || rule.project_slug === projectSlug) {
+          results.push(clone(rule));
+        }
+      }
+      return results.sort((a, b) => b.confidence - a.confidence);
+    },
+
+    deleteAdaptiveRule(projectSlug, pattern) {
+      const identity = normalizeAdaptiveRuleIdentity(projectSlug, pattern);
+      if (!identity) return false;
+      return adaptiveRules.delete(getAdaptiveRuleKey(identity.project_slug, identity.pattern));
+    },
   };
 
   return store;

package/hub/quality/deslop.mjs

@@ -4,7 +4,7 @@
  */
 
 import { readdir, readFile, writeFile, stat } from 'node:fs/promises';
-import { join, relative } from 'node:path';
+import { join, } from 'node:path';
 
 /** @type {ReadonlyArray<{type: string, pattern: RegExp, severity: string, autoFixable: boolean, multiline: boolean}>} */
 export const SLOP_PATTERNS = Object.freeze([

package/hub/reflexion.mjs

@@ -7,6 +7,7 @@ const DEFAULT_CONFIDENCE = 0.5;
 const ACTIVE_RULE_CONFIDENCE = 0.5;
 const ADAPTIVE_PROMOTION_STEP = 0.1;
 const ADAPTIVE_DECAY_STEP = 0.1;
+/** @deprecated 세션 기반 decay에서 시간 기반으로 변경됨. 미사용. */
 const ADAPTIVE_DECAY_WINDOW = 5;
 const ADAPTIVE_DELETE_THRESHOLD = 0.3;
 
@@ -31,6 +32,7 @@ function pickString(...values) {
   );
 }
 
+/** @deprecated 세션 기반 decay 제거로 미사용. 세션 인식 복원 시 재활용 예정. */
 function pickSessionCount(...values) {
   const raw = values.find((value) => Number.isFinite(Number(value)));
   return raw == null ? 0 : Math.max(0, Math.trunc(Number(raw)));
@@ -109,6 +111,7 @@ function normalizeSessionIds(sessionIds) {
   ];
 }
 
+/** @deprecated reflexion_entries 기반. adaptive_rules에서는 미사용. 세션 인식 복원 시 재활용 예정. */
 function getAdaptiveState(rule = {}) {
   const state = rule.adaptive_state || {};
   const session_ids = normalizeSessionIds(state.session_ids);
@@ -125,6 +128,7 @@ function getAdaptiveState(rule = {}) {
   };
 }
 
+/** @deprecated reflexion_entries 기반. adaptive_rules에서는 미사용. 세션 인식 복원 시 재활용 예정. */
 function mergeAdaptiveState(rule, errorContext = {}) {
   const current = getAdaptiveState(rule);
   const sessionId = pickSessionId(errorContext);
@@ -185,6 +189,7 @@ export function normalizeError(errorMessage) {
 
 /**
  * 에러에 대한 기존 솔루션 검색
+ * @deprecated reflexion_entries 기반. adaptive_rules로 통합 예정. 현재 런타임 호출 없음.
  * @param {object} store - createStore() 반환 객체
  * @param {string} errorMessage - 원본 에러 메시지
  * @param {object} [context={}] - { file, function, cli, agent }
@@ -200,6 +205,7 @@ export function lookupSolution(store, errorMessage, context = {}) {
 
 /**
  * 에러 해결 후 학습 저장
+ * @deprecated reflexion_entries 기반. adaptive_rules로 통합 예정. 현재 런타임 호출 없음.
  * 동일 패턴이 존재하면 hit 업데이트, 없으면 새로 생성
  * @param {object} store
  * @param {{ error: string, solution: string, context?: object, success?: boolean }} opts
@@ -233,6 +239,7 @@ export function learnFromError(
 
 /**
  * 솔루션 적용 결과 피드백
+ * @deprecated reflexion_entries 기반. adaptive_rules로 통합 예정. 현재 런타임 호출 없음.
  * @param {object} store
  * @param {string} entryId
  * @param {boolean} success
@@ -280,82 +287,59 @@ export function adaptiveRuleFromError(errorContext = {}) {
 
 /**
  * 동일 패턴이 여러 세션에서 재발하면 adaptive rule confidence를 승격
- * @param {object} store
- * @param {string} ruleId
- * @param {object} [errorContext={}]
+ * @param {object} store — store-adapter 인스턴스 (findAdaptiveRule, updateRuleConfidence 필요)
+ * @param {string} projectSlug
+ * @param {string} pattern
  * @returns {object|null}
  */
-export function promoteRule(store, ruleId, errorContext = {}) {
-  const rule = store.getReflexion(ruleId);
-  if (!rule || rule.type !== ADAPTIVE_RULE_TYPE || !store.patchReflexion)
-    return null;
-  const current = getAdaptiveState(rule);
-  const next = mergeAdaptiveState(rule, errorContext);
-  const newSession = next.session_occurrences > current.session_occurrences;
-  const promoted =
-    newSession && next.session_occurrences >= 2
-      ? clampConfidence(rule.confidence + ADAPTIVE_PROMOTION_STEP)
-      : rule.confidence;
-  return store.patchReflexion(ruleId, {
-    adaptive_state: next,
-    confidence: promoted,
-    hit_count: (rule.hit_count || 0) + 1,
-    last_hit_ms: Date.now(),
-  });
+export function promoteRule(store, projectSlug, pattern) {
+  if (!store.findAdaptiveRule || !store.updateRuleConfidence) return null;
+  const rule = store.findAdaptiveRule(projectSlug, pattern);
+  if (!rule) return null;
+  const promoted = clampConfidence(rule.confidence + ADAPTIVE_PROMOTION_STEP);
+  return store.updateRuleConfidence(projectSlug, pattern, promoted, { hit_count_increment: 1 });
 }
 
 /**
- * 지정 세션 수만큼 관측되지 않은 adaptive rules confidence 감소
- * @param {object} store
- * @param {number} sessionCount
+ * 7일 이상 미관측된 adaptive rules의 confidence를 -0.1 감소, 임계값 이하면 삭제
+ * @param {object} store — store-adapter 인스턴스 (listAdaptiveRules, updateRuleConfidence, deleteAdaptiveRule 필요)
+ * @param {number} _sessionCount — 하위 호환용 (현재 미사용)
+ * @param {string} [projectSlug] — 특정 프로젝트만 대상. 미지정 시 전체 스캔
  * @returns {{ updated: Array, deleted: string[] }}
  */
-export function decayRules(store, sessionCount) {
-  const currentSession = pickSessionCount(sessionCount);
-  if (!store.listReflexion || !store.patchReflexion || !store.deleteReflexion) {
-    return { updated: [], deleted: [] };
-  }
+export function decayRules(store, _sessionCount, projectSlug) {
+  if (!store.listAdaptiveRules) return { updated: [], deleted: [] };
   const result = { updated: [], deleted: [] };
-  for (const rule of store.listReflexion({ type: ADAPTIVE_RULE_TYPE })) {
-    const state = getAdaptiveState(rule);
-    const baseline = Math.max(
-      state.last_seen_session,
-      state.last_decay_session,
-    );
-    const decaySteps = Math.floor(
-      (currentSession - baseline) / ADAPTIVE_DECAY_WINDOW,
-    );
-    if (decaySteps <= 0) continue;
-    const confidence = clampConfidence(
-      rule.confidence - decaySteps * ADAPTIVE_DECAY_STEP,
-    );
-    if (confidence <= ADAPTIVE_DELETE_THRESHOLD) {
-      if (store.deleteReflexion(rule.id)) result.deleted.push(rule.id);
+  const rules = store.listAdaptiveRules(projectSlug);
+  for (const rule of rules) {
+    // 7일 이상 미관측된 규칙만 decay 대상
+    const ageDays = (Date.now() - (rule.last_seen_ms || 0)) / (24 * 3600 * 1000);
+    if (ageDays < 7) continue;
+    const decayed = clampConfidence(rule.confidence - ADAPTIVE_DECAY_STEP);
+    if (decayed <= ADAPTIVE_DELETE_THRESHOLD) {
+      if (store.deleteAdaptiveRule(rule.project_slug, rule.pattern)) {
+        result.deleted.push(`${rule.project_slug}:${rule.pattern}`);
+      }
       continue;
     }
-    const updated = store.patchReflexion(rule.id, {
-      confidence,
-      adaptive_state: {
-        ...state,
-        last_decay_session: baseline + decaySteps * ADAPTIVE_DECAY_WINDOW,
-      },
-    });
-    if (updated) result.updated.push(updated);
+    if (decayed < rule.confidence) {
+      const updated = store.updateRuleConfidence(rule.project_slug, rule.pattern, decayed, { hit_count_increment: 0 });
+      if (updated) result.updated.push(updated);
+    }
   }
   return result;
 }
 
 /**
  * 현재 활성화된 adaptive rules 조회
- * @param {object} store
+ * @param {object} store — store-adapter 인스턴스 (listAdaptiveRules 필요)
  * @param {string} projectSlug
  * @returns {Array}
  */
 export function getActiveAdaptiveRules(store, projectSlug) {
-  if (!store.listReflexion) return [];
-  return store
-    .listReflexion({ type: ADAPTIVE_RULE_TYPE, projectSlug })
-    .filter((rule) => rule.confidence > ACTIVE_RULE_CONFIDENCE);
+  if (!store.listAdaptiveRules) return [];
+  return store.listAdaptiveRules(projectSlug)
+    .filter((rule) => rule.confidence >= ACTIVE_RULE_CONFIDENCE);
 }
 
 /**

package/hub/research.mjs

@@ -6,6 +6,7 @@ import { join, resolve } from 'node:path';
 import { TFX_REPORTS_DIR } from './paths.mjs';
 
 /**
+ * @experimental
  * 주제에서 검색 쿼리 3-5개를 자동 생성한다.
  * 한국어 주제 → 한국어 + 영어 혼합, 영어 주제 → 영어 쿼리.
  * @param {string} topic - 리서치 주제

package/hub/router.mjs

@@ -610,7 +610,7 @@ export function createRouter(store) {
         status || payload?.status,
         mergedMetadata,
       );
-      const nextResult = result ?? (Object.prototype.hasOwnProperty.call(payload || {}, 'result') ? payload.result : payload);
+      const nextResult = result ?? (Object.hasOwn(payload || {}, 'result') ? payload.result : payload);
       const nextError = error ?? payload?.error ?? null;
 
       if (normalizedStatus === 'running') {

package/hub/session-fingerprint.mjs

@@ -87,7 +87,7 @@ function collectRawPathCandidates(context = {}) {
   const direct = [context.file_path, context.filePath, context.path, context.target_path, context.targetPath];
   const fromArrays = [context.files, context.paths, context.targets]
     .filter(Array.isArray)
-    .flatMap((entry) => entry)
+    .flat()
     .map((entry) => (typeof entry === 'string' ? entry : entry?.path));
   return [...direct, ...fromArrays].filter((entry) => typeof entry === 'string' && entry.trim().length > 0);
 }
@@ -130,7 +130,7 @@ function collectActivityTimestamps(context = {}, now = Date.now) {
   const nowValue = typeof now === 'function' ? now() : now;
   const fromList = [context.activity_timestamps, context.activityTimestamps, context.timestamps]
     .filter(Array.isArray)
-    .flatMap((entry) => entry)
+    .flat()
     .map(toTimestamp)
     .filter((entry) => entry != null);
   const singles = [context.timestamp, context.started_at, context.startedAt]

package/hub/token-mode.mjs

@@ -1,7 +1,10 @@
 // hub/token-mode.mjs — Token Efficiency Mode
 // GAP 분석 P2 #7: 심볼 통신 + 약어로 30-50% 토큰 절감
 
-/** @type {Array<{ from: string[], to: string, type: 'symbol'|'abbrev' }>} */
+/**
+ * @experimental
+ * @type {Array<{ from: string[], to: string, type: 'symbol'|'abbrev' }>}
+ */
 export const COMPACT_RULES = [
   // ── 심볼 치환 (긴 매칭 우선 정렬) ──
   { from: ['greater than or equal'],                to: '≥',  type: 'symbol' },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@triflux/core",
-  "version": "10.0.2",
+  "version": "10.1.0",
   "description": "triflux core — CLI routing, pipeline, adapters. Zero native dependencies.",
   "type": "module",
   "main": "hub/index.mjs",

package/scripts/lib/mcp-filter.mjs

@@ -606,7 +606,7 @@ export function buildMcpPolicy(options = {}) {
   // Phase-aware post-filter: 파이프라인 단계별 서버 제한 적용
   const phase = options.phase;
   const phaseOverride = phase && PHASE_OVERRIDES[phase];
-  if (phaseOverride && phaseOverride.blockedServers) {
+  if (phaseOverride?.blockedServers) {
     const blocked = new Set(phaseOverride.blockedServers);
     allowedServers = allowedServers.filter((s) => !blocked.has(s));
   }
@@ -626,7 +626,7 @@ export function buildMcpPolicy(options = {}) {
 }
 
 function shellEscape(value) {
-  return `'${String(value).replace(/'/g, `'\"'\"'`)}'`;
+  return `'${String(value).replace(/'/g, `'"'"'`)}'`;
 }
 
 function shellArray(name, values) {

package/scripts/lib/mcp-guard-engine.mjs

@@ -218,7 +218,7 @@ function getHubServerEntry(registry) {
     || entries[0];
 }
 
-function makeHubRuntimeConfig() {
+function _makeHubRuntimeConfig() {
   return { url: resolveHubUrl() };
 }
 

package/scripts/lib/psmux-info.mjs

@@ -84,10 +84,10 @@ export function probePsmuxSupport(options = {}) {
     }
 
     const missingCommands = PSMUX_REQUIRED_COMMANDS.filter(
-      (command) => !helpOutput || !helpOutput.includes(command),
+      (command) => !helpOutput?.includes(command),
     );
     const missingOptionalCommands = PSMUX_OPTIONAL_COMMANDS.filter(
-      (command) => !helpOutput || !helpOutput.includes(command),
+      (command) => !helpOutput?.includes(command),
     );
 
     return {

package/scripts/lib/skill-template.mjs

@@ -13,9 +13,9 @@ function isTruthy(value) {
 }
 
 function normalizeVariable(context, key) {
-  if (Object.prototype.hasOwnProperty.call(context, key)) return context[key];
+  if (Object.hasOwn(context, key)) return context[key];
   const upper = key.toUpperCase();
-  if (Object.prototype.hasOwnProperty.call(context, upper)) return context[upper];
+  if (Object.hasOwn(context, upper)) return context[upper];
   return undefined;
 }
 
@@ -176,7 +176,7 @@ function normalizeIncludeName(includeName) {
 
 function resolveIncludeContent(includeName, options) {
   const normalizedName = normalizeIncludeName(includeName);
-  if (Object.prototype.hasOwnProperty.call(options.includes, normalizedName)) {
+  if (Object.hasOwn(options.includes, normalizedName)) {
     return options.includes[normalizedName];
   }
   if (!options.includeBaseDir) {
@@ -264,7 +264,7 @@ function readAllTemplateFiles(rootDir, currentDir = rootDir) {
 
 function setPartial(partials, key, value) {
   if (!key) return;
-  if (!Object.prototype.hasOwnProperty.call(partials, key)) {
+  if (!Object.hasOwn(partials, key)) {
     partials[key] = value;
   }
 }