@triflux/core 10.42.0 → 10.44.0

package/hooks/keyword-rules.json

@@ -96,6 +96,102 @@
       "state": null,
       "mcp_route": null
     },
+    {
+      "id": "tfx-review",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?review\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-review",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-analysis",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?analysis\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-analysis",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-plan",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?plan\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-plan",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-qa",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?qa\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-qa",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-research",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?research\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-research",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-find",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?find\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-find",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
     {
       "id": "tfx-unified",
       "patterns": [
@@ -127,10 +223,6 @@
           "source": "(?:찾아봐|조사해|검색해)",
           "flags": "i"
         },
-        {
-          "source": "(?:정리해|슬롭|클린업)",
-          "flags": "i"
-        },
         {
           "source": "(?:병렬|동시에|parallel|concurrent)",
           "flags": "i"
@@ -155,6 +247,41 @@
       "state": null,
       "mcp_route": null
     },
+    {
+      "id": "host-ai-slop-cleaner",
+      "patterns": [
+        {
+          "source": "(?:AI\\s*슬롭|ai\\s*slop|anti[\\s-]?slop|deslop)",
+          "flags": "i"
+        },
+        {
+          "source": "(?:슬롭|클린업)",
+          "flags": "i"
+        }
+      ],
+      "skill": "ai-slop-cleaner",
+      "priority": 1,
+      "supersedes": [],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null
+    },
+    {
+      "id": "tfx-prune",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?prune\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-prune",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
     {
       "id": "tfx-codex",
       "patterns": [
@@ -586,7 +713,6 @@
     },
     {
       "id": "gstack-ship",
-      "disabled": true,
       "patterns": [
         {
           "source": "(?:배포해|PR\\s*만들|릴리스\\s*해|머지하고\\s*배포)",
@@ -598,7 +724,7 @@
         }
       ],
       "skill": "ship",
-      "priority": 5,
+      "priority": 1,
       "supersedes": [],
       "exclusive": false,
       "state": null,
@@ -627,12 +753,12 @@
       "id": "gstack-cso",
       "patterns": [
         {
-          "source": "(?:보안\\s*(?:감사|점검|리뷰|스캔)|\\bcso\\b|\\bOWASP\\b|\\bSTRIDE\\b)",
+          "source": "(?:보안\\s*(?:감사|점검|리뷰|검토|스캔)|\\bcso\\b|\\bOWASP\\b|\\bSTRIDE\\b)",
           "flags": "i"
         }
       ],
       "skill": "cso",
-      "priority": 5,
+      "priority": 1,
       "supersedes": [],
       "exclusive": false,
       "state": null,
@@ -651,7 +777,7 @@
         }
       ],
       "skill": "qa",
-      "priority": 5,
+      "priority": 1,
       "supersedes": [],
       "exclusive": false,
       "state": null,
@@ -722,14 +848,6 @@
           "source": "/ship\\b",
           "flags": "i"
         },
-        {
-          "source": "\\brelease\\b",
-          "flags": "i"
-        },
-        {
-          "source": "\\bpublish\\b",
-          "flags": "i"
-        },
         {
           "source": "배포(?!자|사|장|처)",
           "flags": ""
@@ -744,11 +862,13 @@
         }
       ],
       "skill": "tfx-ship",
-      "priority": 3,
+      "priority": 1,
       "supersedes": ["gstack-ship"],
       "exclusive": false,
       "state": null,
-      "mcp_route": null
+      "mcp_route": null,
+      "repo_scope": ["triflux"],
+      "explicit": true
     }
   ]
 }

package/hooks/pipeline-stop.mjs

@@ -152,7 +152,7 @@ function contextPercentsFromObject(value) {
     value.total_tokens ??
     value.totalTokens;
   // Fall back to a 1M context window when the payload omits one — Opus 4.x
-  // [1M] and Codex gpt-5.5 both run on a 1M window, and assuming 200K there
+  // [1M] and Codex GPT-5.6 family run on a 1M window, and assuming 200K there
   // false-positives at ~15% real usage. Override via
   // TFX_CONTEXT_DEFAULT_MAX_TOKENS for narrower setups.
   const envFallback = Number(process.env.TFX_CONTEXT_DEFAULT_MAX_TOKENS);

package/hub/bridge.mjs

@@ -99,6 +99,11 @@ const HUB_OPERATIONS = Object.freeze({
     action: "register",
     httpPath: "/bridge/register",
   },
+  heartbeat: {
+    transport: "command",
+    action: "heartbeat",
+    httpPath: "/bridge/heartbeat",
+  },
   result: {
     transport: "command",
     action: "result",
@@ -637,6 +642,14 @@ async function cmdRegister(args) {
   return emitJson(result || unavailableResult());
 }
 
+async function cmdHeartbeat(args) {
+  const outcome = await requestHub(HUB_OPERATIONS.heartbeat, {
+    agent_id: args.agent,
+    ttl_ms: args["ttl-ms"] != null ? Number(args["ttl-ms"]) : undefined,
+  });
+  return emitJson(outcome?.result || unavailableResult());
+}
+
 async function cmdResult(args) {
   let output = "";
   if (args.file && existsSync(args.file)) {
@@ -1559,6 +1572,68 @@ async function cmdRetryStatus(args) {
   return true;
 }
 
+// intervene-run은 hub transport를 거치지 않는다. heartbeat가 hub 장애 중에도
+// process/daemon/pane 사다리를 실행할 수 있도록 순수 로컬 모듈만 호출한다.
+async function cmdInterveneRun(args) {
+  try {
+    const payload = readBridgePayload(args);
+    const intervention = await import("./team/intervention.mjs");
+    let rolloutFile = payload.rolloutFile || null;
+    if (!rolloutFile && payload.cli === "codex" && payload.pid) {
+      rolloutFile = await intervention.resolveCodexRolloutFile({
+        pid: numericOption(payload.pid, undefined),
+        codexHome: payload.codexHome,
+      });
+    }
+    const seconds = (value) => {
+      const parsed = numericOption(value, undefined);
+      return parsed > 0 ? parsed * 1_000 : undefined;
+    };
+    const readActivitySignature = intervention.createFileActivitySource({
+      files: [payload.stdoutLog, payload.stderrLog, payload.resultFile].filter(
+        Boolean,
+      ),
+      rolloutFile,
+    });
+    const ladder = intervention.createInterventionLadder({
+      target: {
+        channel: payload.channel,
+        pid: numericOption(payload.pid, undefined),
+        paneId: payload.paneId,
+        interactive: payload.interactive === true,
+        cli: payload.cli,
+        sessionId: payload.sessionId,
+        codexHome: payload.codexHome,
+        rolloutFile,
+        daemon: payload.daemon,
+      },
+      reinstructPrompt: payload.reinstructPrompt || undefined,
+      readActivitySignature,
+      config: {
+        ...(seconds(payload.reinstructWaitSec)
+          ? { reinstructWaitMs: seconds(payload.reinstructWaitSec) }
+          : {}),
+        ...(seconds(payload.resumeWaitSec)
+          ? { resumeWaitMs: seconds(payload.resumeWaitSec) }
+          : {}),
+        ...(seconds(payload.sigtermGraceSec)
+          ? { sigtermGraceMs: seconds(payload.sigtermGraceSec) }
+          : {}),
+      },
+      log: (event) =>
+        process.stderr.write(`[tfx-intervene] ${JSON.stringify(event)}\n`),
+    });
+    return emitJson(await ladder.intervene());
+  } catch (error) {
+    return emitJson({
+      ok: false,
+      outcome: "failed",
+      step: null,
+      error: error?.message || String(error),
+    });
+  }
+}
+
 export async function main(argv = process.argv.slice(2)) {
   const cmd = argv[0];
   const args = parseArgs(argv.slice(1));
@@ -1566,6 +1641,8 @@ export async function main(argv = process.argv.slice(2)) {
   switch (cmd) {
     case "register":
       return await cmdRegister(args);
+    case "heartbeat":
+      return await cmdHeartbeat(args);
     case "result":
       return await cmdResult(args);
     case "control":
@@ -1630,9 +1707,11 @@ export async function main(argv = process.argv.slice(2)) {
       return await cmdRetryRun(args);
     case "retry-status":
       return await cmdRetryStatus(args);
+    case "intervene-run":
+      return await cmdInterveneRun(args);
     default:
       console.error(
-        "사용법: bridge.mjs <register|result|control|handoff|publish|takeover-role|send-input|context|deregister|assign-async|assign-result|assign-status|assign-retry|team-info|team-task-list|team-task-update|team-send-message|pipeline-state|pipeline-advance|pipeline-init|pipeline-list|ping|delegator-delegate|delegator-reply|delegator-status|hitl-request|hitl-submit|hitl-pending|daemon-probe|daemon-attach|daemon-interrupt|retry-run|retry-status> [--옵션]",
+        "사용법: bridge.mjs <register|heartbeat|result|control|handoff|publish|takeover-role|send-input|context|deregister|assign-async|assign-result|assign-status|assign-retry|team-info|team-task-list|team-task-update|team-send-message|pipeline-state|pipeline-advance|pipeline-init|pipeline-list|ping|delegator-delegate|delegator-reply|delegator-status|hitl-request|hitl-submit|hitl-pending|daemon-probe|daemon-attach|daemon-interrupt|retry-run|retry-status|intervene-run> [--옵션]",
       );
       process.exit(1);
   }

package/hub/cli-adapter-base.mjs

@@ -6,7 +6,14 @@ import { existsSync, readFileSync, statSync } from "node:fs";
 
 import { codexProfileConfigOverrides } from "../scripts/lib/codex-profile-config.mjs";
 import { writePromptToTmpFile } from "./lib/prompt-tmp.mjs";
+import {
+  createActivityLifecycle,
+  isActivityLifecycleEnabled,
+  resolveHardCeilingMs,
+  resolveStallInterventionMs,
+} from "./lib/worker-lifecycle.mjs";
 import { IS_WINDOWS, killProcess } from "./platform.mjs";
+import { createInterventionLadder } from "./team/intervention.mjs";
 
 // ── Quota retry-after 파싱 ──────────────────────────────────────
 
@@ -160,7 +167,7 @@ export const CODEX_MCP_EXECUTION_EXIT_CODE = 1;
  *
  * @param {string} prompt
  * @param {string|null} resultFile — null이면 --output-last-message 생략
- * @param {{ profile?: string, skipGitRepoCheck?: boolean, sandboxBypass?: boolean, cwd?: string, mcpServers?: string[], stdinPrompt?: boolean }} [opts]
+ * @param {{ profile?: string, codexHome?: string, disallowUltra?: boolean, enforceCanonicalProfile?: boolean, skipGitRepoCheck?: boolean, sandboxBypass?: boolean, cwd?: string, mcpServers?: string[], stdinPrompt?: boolean }} [opts]
  * @returns {string} 실행할 셸 커맨드
  */
 export function buildExecCommand(prompt, resultFile = null, opts = {}) {
@@ -170,6 +177,9 @@ export function buildExecCommand(prompt, resultFile = null, opts = {}) {
     sandboxBypass = true,
     mcpServers,
     stdinPrompt,
+    codexHome,
+    disallowUltra,
+    enforceCanonicalProfile,
   } = opts;
 
   const parts = ["codex"];
@@ -178,7 +188,13 @@ export function buildExecCommand(prompt, resultFile = null, opts = {}) {
   // still contains an inline [profiles.X] table (and codex re-injects such
   // tables when it rewrites config.toml), so the `-c model=.. -c
   // model_reasoning_effort=..` form is immune and mutates no config.
-  const profileOverrides = profile ? codexProfileConfigOverrides(profile) : [];
+  const profileOverrides = profile
+    ? codexProfileConfigOverrides(profile, {
+        codexHome,
+        disallowUltra,
+        enforceCanonicalProfile,
+      })
+    : [];
 
   if (FEATURES.execSubcommand) {
     parts.push("exec");
@@ -397,19 +413,36 @@ export async function terminateChild(pid, opts = {}) {
  *
  * @param {string} command — shell command to run
  * @param {string} workdir — cwd for the child process
- * @param {number} timeout — max duration in ms
+ * @param {number} timeout — legacy wall-clock duration (TFX_ACTIVITY_LIFECYCLE=0 only)
  * @param {object} [opts]
  * @param {string} [opts.resultFile] — file to read output from (if CLI writes there)
  * @param {function} [opts.inferStallMode] — (stdout, stderr) => string. Default: () => 'timeout'
  * @param {number} [opts.stallCheckIntervalMs] — stall check interval (default 10_000)
- * @param {number} [opts.stallThresholdMs] — stall threshold (default 30_000)
+ * @param {number} [opts.stallThresholdMs] — inactivity threshold
+ * @param {number} [opts.hardCeilingMs] — activity-independent maximum duration
+ * @param {(context: object) => Promise<boolean|string>|boolean|string} [opts.onStallIntervene]
+ *   T5 intervention seam; true or "resolved" keeps the process alive
+ * @param {object} [opts.deps] — clock/process/timer overrides for deterministic tests
  * @returns {Promise<object>} createResult-shaped object
  */
 export async function runProcess(command, workdir, timeout, opts = {}) {
-  const startedAt = Date.now();
+  const deps = opts.deps || {};
+  const now = deps.now || Date.now;
+  const spawnProcess = deps.spawn || spawn;
+  const scheduleTimeout = deps.setTimeout || setTimeout;
+  const cancelTimeout = deps.clearTimeout || clearTimeout;
+  const scheduleInterval = deps.setInterval || setInterval;
+  const cancelInterval = deps.clearInterval || clearInterval;
+  const terminateProcess = deps.terminateChild || terminateChild;
+  const startedAt = now();
   const inferStallMode = opts.inferStallMode || (() => "timeout");
   const stallCheckIntervalMs = opts.stallCheckIntervalMs ?? 10_000;
-  const stallThresholdMs = opts.stallThresholdMs ?? 30_000;
+  const legacyLifecycle = !isActivityLifecycleEnabled();
+  const stallThresholdMs =
+    opts.stallThresholdMs ??
+    (legacyLifecycle ? 30_000 : resolveStallInterventionMs());
+  const hardCeilingMs = opts.hardCeilingMs ?? resolveHardCeilingMs();
+  const earlyClassifyMs = opts.earlyClassifyMs ?? 30_000;
   const resultFile = opts.resultFile || null;
 
   let stdout = "";
@@ -421,7 +454,7 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
   try {
     // PRD A1: opts.spawnEnv 가 있으면 그 env 로 spawn (lease 의 authFile/env 적용).
     // undefined 면 spawn 의 default 동작 (부모 process env inherit) 유지.
-    child = spawn(command, {
+    child = spawnProcess(command, {
       cwd: workdir,
       shell: true,
       windowsHide: true,
@@ -430,7 +463,7 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
   } catch (error) {
     return createResult(false, {
       stderr: String(error?.message || error),
-      duration: Date.now() - startedAt,
+      duration: now() - startedAt,
     });
   }
 
@@ -446,9 +479,40 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
 
   let lastBytes = 0;
   let lastResultFileSignature = resultFileSignature();
-  let lastChange = Date.now();
+  let lastChange = now();
+  const activitySignature = () =>
+    `${Buffer.byteLength(stdout) + Buffer.byteLength(stderr)}:${resultFileSignature()}`;
+  let ladder = null;
+  const lifecycle = createActivityLifecycle({
+    enabled: !legacyLifecycle,
+    interventionMs: stallThresholdMs,
+    hardCeilingMs,
+    now,
+    onIntervene: async (context) => {
+      if (typeof opts.onStallIntervene === "function") {
+        const result = await opts.onStallIntervene(context);
+        return result === true || result === "resolved";
+      }
+      ladder ??= createInterventionLadder({
+        target: {
+          pid: child.pid,
+          cli: opts.cli,
+          codexHome: opts.codexHome,
+          rolloutFile: opts.rolloutFile,
+        },
+        readActivitySignature: activitySignature,
+        deps:
+          typeof opts.resumeHandler === "function"
+            ? { resumeHandler: opts.resumeHandler }
+            : {},
+      });
+      const result = await ladder.intervene();
+      return result?.outcome === "reactivated" || result?.outcome === "resumed";
+    },
+  });
   const touch = () => {
-    lastChange = Date.now();
+    lastChange = now();
+    lifecycle.observe(activitySignature());
   };
   child.stdout?.on("data", (chunk) => {
     stdout += String(chunk);
@@ -466,13 +530,15 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
   const stopFor = async (mode) => {
     if (failureMode) return;
     failureMode = mode;
-    await terminateChild(child.pid);
+    await terminateProcess(child.pid);
   };
 
-  const timeoutTimer = setTimeout(() => {
-    void stopFor("timeout");
-  }, timeout);
-  const stallTimer = setInterval(() => {
+  const timeoutTimer = legacyLifecycle
+    ? scheduleTimeout(() => {
+        void stopFor("timeout");
+      }, timeout)
+    : null;
+  const stallTimer = scheduleInterval(() => {
     const size = Buffer.byteLength(stdout) + Buffer.byteLength(stderr);
     const currentResultFileSignature = resultFileSignature();
     if (
@@ -482,13 +548,37 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
       lastBytes = size;
       lastResultFileSignature = currentResultFileSignature;
       touch();
+    }
+    if (legacyLifecycle) {
+      if (now() - lastChange >= stallThresholdMs)
+        void stopFor(inferStallMode(stdout, stderr));
       return;
     }
-    if (Date.now() - lastChange >= stallThresholdMs)
+    const quietMs = now() - lastChange;
+    const mode = inferStallMode(stdout, stderr);
+    if (
+      quietMs >= earlyClassifyMs &&
+      (mode === "rate_limited" || mode === "auth_stall")
+    ) {
       void stopFor(inferStallMode(stdout, stderr));
+      return;
+    }
+    void lifecycle
+      .check({
+        pid: child.pid,
+        command,
+        workdir,
+        mode,
+        stdoutTail: stdout.slice(-2000),
+        stderrTail: stderr.slice(-2000),
+      })
+      .then((reason) => {
+        if (!reason) return;
+        void stopFor(reason === "hard_ceiling" ? "timeout" : mode);
+      });
   }, stallCheckIntervalMs);
-  timeoutTimer.unref?.();
-  stallTimer.unref?.();
+  timeoutTimer?.unref?.();
+  stallTimer?.unref?.();
 
   await new Promise((resolve) =>
     child.on("close", (code) => {
@@ -496,8 +586,8 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
       resolve();
     }),
   );
-  clearTimeout(timeoutTimer);
-  clearInterval(stallTimer);
+  if (timeoutTimer) cancelTimeout(timeoutTimer);
+  cancelInterval(stallTimer);
 
   const fileOutput =
     resultFile && existsSync(resultFile)
@@ -509,7 +599,7 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
     output,
     stderr,
     exitCode,
-    duration: Date.now() - startedAt,
+    duration: now() - startedAt,
     failureMode: ok ? null : failureMode || "crash",
   });
 }

package/hub/codex-adapter.mjs

@@ -11,6 +11,7 @@ import {
   shellQuote,
 } from "./cli-adapter-base.mjs";
 import { runPreflight } from "./codex-preflight.mjs";
+import { isActivityLifecycleEnabled } from "./lib/worker-lifecycle.mjs";
 
 // ── Codex-specific stall inference ──────────────────────────────
 
@@ -64,9 +65,10 @@ function buildAttempts(opts, preflight) {
     forceBypass: preflight.needsBypass,
   };
   if (opts.retryOnFail === false) return [base];
+  const retryTimeout = isActivityLifecycleEnabled() ? timeout : timeout * 2;
   return [
     base,
-    { ...base, timeout: timeout * 2, excluded: requested, forceBypass: true },
+    { ...base, timeout: retryTimeout, excluded: requested, forceBypass: true },
   ];
 }
 
@@ -116,6 +118,9 @@ export function buildExecArgs(opts = {}) {
   const prompt = typeof opts.prompt === "string" ? opts.prompt : "";
   const command = buildExecCommand(prompt, opts.resultFile || null, {
     profile: opts.profile,
+    codexHome: opts.codexHome,
+    disallowUltra: opts.disallowUltra,
+    enforceCanonicalProfile: opts.enforceCanonicalProfile,
     skipGitRepoCheck: true,
     sandboxBypass: true,
     cwd: opts.cwd,
@@ -183,6 +188,8 @@ async function runCodex(prompt, workdir, preflight, attempt, lease) {
     resultFile,
     inferStallMode,
     spawnEnv,
+    cli: "codex",
+    codexHome: spawnEnv?.CODEX_HOME,
   });
 }
 

package/hub/dynamic-routing-engine.mjs

@@ -45,7 +45,7 @@ function makeFallback(policy, trigger, inputsHash, now) {
       {
         cli: fb.default_cli ?? "codex",
         accountId: null,
-        model: fb.default_model ?? "gpt-5.5",
+        model: fb.default_model ?? "gpt-5.6-terra",
         riskTier: "safe",
         reason: trigger,
       },

package/hub/gemini-adapter.mjs

@@ -9,6 +9,7 @@ import {
   normalizePathForShell,
   runProcess,
 } from "./cli-adapter-base.mjs";
+import { isActivityLifecycleEnabled } from "./lib/worker-lifecycle.mjs";
 import { whichCommandAsync } from "./platform.mjs";
 
 function shellSingleQuote(value) {
@@ -88,7 +89,8 @@ function buildAttempts(opts, preflight) {
     excludeMcpServers: [...(preflight.excludeMcpServers || [])],
   };
   if (opts.retryOnFail === false) return [base];
-  return [base, { ...base, timeout: timeout * 2, allowedMcpServers: [] }];
+  const retryTimeout = isActivityLifecycleEnabled() ? timeout : timeout * 2;
+  return [base, { ...base, timeout: retryTimeout, allowedMcpServers: [] }];
 }
 
 // ── Public: buildExecArgs ───────────────────────────────────────