@triflux/core 10.43.0 → 10.45.0

package/hooks/codex-session-hook.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 
+import { spawn } from "node:child_process";
 import { argv, exit, stdin, stdout } from "node:process";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { drainPendingSynapse as defaultDrainPendingSynapse } from "../hub/team/synapse-http.mjs";
 import {
   heartbeatInteractiveSession as defaultHeartbeatInteractiveSession,
@@ -51,6 +52,66 @@ function normalizeMode(mode, payload) {
   return "";
 }
 
+/**
+ * Start a detached bridge call so Codex/OMX presence reaches both the Synapse
+ * session registry and the hub agents table. This is intentionally independent
+ * of the legacy session-start work below: a missing or unavailable hub must
+ * never delay or fail SessionStart.
+ */
+export function launchCodexPresenceRegistration(payload, opts = {}) {
+  try {
+    const sessionId = String(payload?.session_id || "").trim();
+    if (!sessionId) return false;
+
+    const cwd =
+      typeof payload?.cwd === "string" && payload.cwd.trim()
+        ? payload.cwd
+        : process.cwd();
+    const bridgePath =
+      opts.bridgePath ||
+      fileURLToPath(new URL("../hub/bridge.mjs", import.meta.url));
+    const spawnFn = opts.spawnFn || spawn;
+    const canonicalSessionId = String(process.env.OMX_SESSION_ID || "").trim();
+    const tmuxSession = String(
+      process.env.OMX_TMUX_SESSION_NAME || process.env.OMX_TMUX_SESSION || "",
+    ).trim();
+    const tmuxPane = String(process.env.TMUX_PANE || "").trim();
+    const args = [
+      bridgePath,
+      "register",
+      "--session-id",
+      sessionId,
+      "--cwd",
+      cwd,
+      "--worktree-path",
+      cwd,
+      "--session-kind",
+      "interactive",
+      "--host",
+      "local",
+      "--codex-session-id",
+      sessionId,
+    ];
+    if (canonicalSessionId && canonicalSessionId !== sessionId) {
+      args.push("--omx-session-id", canonicalSessionId);
+    }
+    if (tmuxSession) args.push("--tmux-session", tmuxSession);
+    if (tmuxPane) args.push("--tmux-pane", tmuxPane);
+
+    const child = spawnFn(process.execPath, args, {
+      detached: true,
+      stdio: "ignore",
+      windowsHide: true,
+      env: process.env,
+    });
+    child?.once?.("error", () => {});
+    child?.unref?.();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 function swallowStdoutWrite(_chunk, encodingOrCallback, callback) {
   const done =
     typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
@@ -91,10 +152,15 @@ export async function runCodexSessionHook(stdinData, opts = {}) {
     opts.heartbeatInteractiveSession || defaultHeartbeatInteractiveSession;
   const drainPendingSynapse =
     opts.drainPendingSynapse || defaultDrainPendingSynapse;
+  const launchPresenceRegistration =
+    opts.launchPresenceRegistration || launchCodexPresenceRegistration;
 
   try {
     await runHookSideEffectsWithStdoutSuppressed(async () => {
       if (mode === "register") {
+        try {
+          launchPresenceRegistration(parsed.payload);
+        } catch {}
         try {
           await hubEnsureRun(stdinData);
         } catch {}

package/hooks/cto-north-star-brief.mjs

@@ -11,6 +11,8 @@ import {
 } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 
+import { resolveRoleControlSnapshot } from "../hub/lib/cto-env.mjs";
+
 const MAX_CONTEXT_BYTES = 2048;
 const HEADER = "[CTO NORTH STAR - READ ONLY]";
 const INSTRUCTION =
@@ -45,21 +47,6 @@ function sha256(input) {
   return createHash("sha256").update(input).digest("hex");
 }
 
-function ctoNorthStarEnabled() {
-  switch (process.env.TFX_CTO_NORTH_STAR || "1") {
-    case "0":
-    case "false":
-    case "FALSE":
-    case "off":
-    case "OFF":
-    case "no":
-    case "NO":
-      return false;
-    default:
-      return true;
-  }
-}
-
 function wrapBrief(brief) {
   return [HEADER, INSTRUCTION, BEGIN, brief, END].join("\n");
 }
@@ -89,7 +76,7 @@ function writeMarker(markerPath, state) {
 }
 
 function main() {
-  if (!ctoNorthStarEnabled()) return;
+  if (!resolveRoleControlSnapshot().north_star_enabled) return;
 
   const input = readStdinJson();
   if (input.hook_event_name && input.hook_event_name !== "UserPromptSubmit") {

package/hooks/error-context.mjs

@@ -129,9 +129,8 @@ function main() {
     JSON.stringify(input.tool_result || ""),
   ].join("\n");
 
-  // ── reflexion 적응형 학습: safety-guard/headless-guard 차단을 패널티로 기록 ──
-  const isSafetyBlock =
-    /\[(?:safety-guard|headless-guard)\].*(?:BLOCKED|차단)/i.test(errorText);
+  // ── reflexion 적응형 학습: safety-guard 차단을 패널티로 기록 ──
+  const isSafetyBlock = /\[safety-guard\].*(?:BLOCKED|차단)/i.test(errorText);
   if (isSafetyBlock) {
     try {
       const home = process.env.HOME || process.env.USERPROFILE || "";
@@ -147,9 +146,7 @@ function main() {
           errorText.match(/\[.*?\]\s*(.{0,120})/)?.[1] ||
           errorText.slice(0, 120),
         command_preview: command.slice(0, 200),
-        source: errorText.includes("safety-guard")
-          ? "safety-guard"
-          : "headless-guard",
+        source: "safety-guard",
       };
       writeFileSync(penaltyFile, JSON.stringify(entry) + "\n", { flag: "a" });
     } catch {

package/hooks/hook-manager.mjs

@@ -113,7 +113,7 @@ function identifySource(cmd) {
   if (/oh-my-claudecode|omc/i.test(cmd)) return "omc";
   if (/session-vault/i.test(cmd)) return "session-vault";
   if (/compact-helper/i.test(cmd)) return "compact-helper";
-  if (/headless-guard|tfx-gate/i.test(cmd)) return "omc";
+  if (/tfx-gate/i.test(cmd)) return "omc";
   if (/mcp-cleanup/i.test(cmd)) return "system";
   return "unknown";
 }

package/hooks/hook-registry.json

@@ -68,17 +68,6 @@
         "blocking": true,
         "description": "git commit 전 교차 리뷰 미검증 파일 차단/경고"
       },
-      {
-        "id": "omc-headless-guard",
-        "source": "omc",
-        "matcher": "Bash|Agent",
-        "command": "bash \"${HOME}/.claude/scripts/headless-guard-fast.sh\"",
-        "priority": 50,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "primary multiplexer headless 가드"
-      },
       {
         "id": "omc-tfx-gate-activate",
         "source": "omc",

package/hooks/keyword-rules.json

@@ -55,7 +55,7 @@
           "flags": "i"
         }
       ],
-      "skill": "tfx-swarm",
+      "skill": "tfx-auto",
       "priority": 1,
       "supersedes": ["tfx-codex"],
       "exclusive": false,
@@ -96,6 +96,102 @@
       "state": null,
       "mcp_route": null
     },
+    {
+      "id": "tfx-review",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?review\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-review",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-analysis",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?analysis\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-analysis",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-plan",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?plan\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-plan",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-qa",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?qa\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-qa",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-research",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?research\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-research",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
+    {
+      "id": "tfx-find",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?find\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-find",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
     {
       "id": "tfx-unified",
       "patterns": [
@@ -127,10 +223,6 @@
           "source": "(?:찾아봐|조사해|검색해)",
           "flags": "i"
         },
-        {
-          "source": "(?:정리해|슬롭|클린업)",
-          "flags": "i"
-        },
         {
           "source": "(?:병렬|동시에|parallel|concurrent)",
           "flags": "i"
@@ -155,6 +247,41 @@
       "state": null,
       "mcp_route": null
     },
+    {
+      "id": "host-ai-slop-cleaner",
+      "patterns": [
+        {
+          "source": "(?:AI\\s*슬롭|ai\\s*slop|anti[\\s-]?slop|deslop)",
+          "flags": "i"
+        },
+        {
+          "source": "(?:슬롭|클린업)",
+          "flags": "i"
+        }
+      ],
+      "skill": "ai-slop-cleaner",
+      "priority": 1,
+      "supersedes": [],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null
+    },
+    {
+      "id": "tfx-prune",
+      "patterns": [
+        {
+          "source": "\\btfx[\\s-]?prune\\b",
+          "flags": "i"
+        }
+      ],
+      "skill": "tfx-prune",
+      "priority": 1,
+      "supersedes": ["tfx-unified"],
+      "exclusive": false,
+      "state": null,
+      "mcp_route": null,
+      "explicit": true
+    },
     {
       "id": "tfx-codex",
       "patterns": [
@@ -285,6 +412,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -304,6 +432,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -323,6 +452,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -342,6 +472,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -554,11 +685,11 @@
           "flags": "i"
         },
         {
-          "source": "\\b(?:checkpoint|resume|pick\\s*up|where\\s*was\\s*I)\\b",
+          "source": "\\b(?:resume|pick\\s*up|where\\s*was\\s*I)\\b",
           "flags": "i"
         }
       ],
-      "skill": "checkpoint",
+      "skill": "gstack-context-restore",
       "priority": 5,
       "supersedes": [],
       "exclusive": false,
@@ -586,19 +717,18 @@
     },
     {
       "id": "gstack-ship",
-      "disabled": true,
       "patterns": [
         {
           "source": "(?:배포해|PR\\s*만들|릴리스\\s*해|머지하고\\s*배포)",
           "flags": "i"
         },
         {
-          "source": "\\bship\\b(?!.*tfx)",
+          "source": "(?<![\\w-])ship\\b(?!.*tfx)",
           "flags": "i"
         }
       ],
       "skill": "ship",
-      "priority": 5,
+      "priority": 1,
       "supersedes": [],
       "exclusive": false,
       "state": null,
@@ -627,12 +757,12 @@
       "id": "gstack-cso",
       "patterns": [
         {
-          "source": "(?:보안\\s*(?:감사|점검|리뷰|스캔)|\\bcso\\b|\\bOWASP\\b|\\bSTRIDE\\b)",
+          "source": "(?:보안\\s*(?:감사|점검|리뷰|검토|스캔)|\\bcso\\b|\\bOWASP\\b|\\bSTRIDE\\b)",
           "flags": "i"
         }
       ],
       "skill": "cso",
-      "priority": 5,
+      "priority": 1,
       "supersedes": [],
       "exclusive": false,
       "state": null,
@@ -651,7 +781,7 @@
         }
       ],
       "skill": "qa",
-      "priority": 5,
+      "priority": 1,
       "supersedes": [],
       "exclusive": false,
       "state": null,
@@ -722,14 +852,6 @@
           "source": "/ship\\b",
           "flags": "i"
         },
-        {
-          "source": "\\brelease\\b",
-          "flags": "i"
-        },
-        {
-          "source": "\\bpublish\\b",
-          "flags": "i"
-        },
         {
           "source": "배포(?!자|사|장|처)",
           "flags": ""
@@ -744,11 +866,13 @@
         }
       ],
       "skill": "tfx-ship",
-      "priority": 3,
+      "priority": 1,
       "supersedes": ["gstack-ship"],
       "exclusive": false,
       "state": null,
-      "mcp_route": null
+      "mcp_route": null,
+      "repo_scope": ["triflux"],
+      "explicit": true
     }
   ]
 }

package/hooks/permission-safe-allow.mjs

@@ -3,6 +3,8 @@
 import { stdin, stdout } from "node:process";
 
 const META_PATTERNS = [/&&/, /\|\|/, /[;|<>`]/, /\$\(/];
+const SHELL_EXPANSION_PATTERN =
+  /(?:^|[^\\])\$(?:[A-Za-z_][A-Za-z0-9_]*|\{[^}]*\}|[?*#@$!0-9-])|(?:^|\s)~[A-Za-z0-9_-]*(?=\/|$)/;
 const RISKY_PATTERNS = [
   /(^|\s)rm(\s|$)/,
   /(^|\s)mv(\s|$)/,
@@ -19,6 +21,25 @@ const RISKY_PATTERNS = [
   /(^|\s)pnpm\s+publish(\s|$)/,
   /(^|\s)yarn\s+publish(\s|$)/,
 ];
+const SEARCH_EXTERNAL_INPUT_FLAGS = new Set([
+  "--exclude-from",
+  "--file",
+  "--files-from",
+  "--ignore-file",
+  "--pre",
+  "--pre-glob",
+]);
+const FIND_SIDE_EFFECT_OPERATORS = new Set([
+  "-delete",
+  "-exec",
+  "-execdir",
+  "-fprint",
+  "-fprint0",
+  "-fprintf",
+  "-fls",
+  "-ok",
+  "-okdir",
+]);
 
 function silentlyExit() {
   process.exit(0);
@@ -57,10 +78,21 @@ function isRepoRelativePath(value) {
 function hasUnsafeSurface(command) {
   return (
     META_PATTERNS.some((pattern) => pattern.test(command)) ||
+    SHELL_EXPANSION_PATTERN.test(command) ||
     RISKY_PATTERNS.some((pattern) => pattern.test(command))
   );
 }
 
+function isExternalSearchInputFlag(word) {
+  return (
+    SEARCH_EXTERNAL_INPUT_FLAGS.has(word) ||
+    [...SEARCH_EXTERNAL_INPUT_FLAGS].some((flag) =>
+      word.startsWith(`${flag}=`),
+    ) ||
+    /^-[^-]*f/.test(word)
+  );
+}
+
 function allowGit(words, command) {
   if (command === "git status" || command === "git status --short")
     return "git status";
@@ -97,8 +129,7 @@ function allowListing(words) {
 
   if (words[0] === "find") {
     const args = words.slice(1);
-    if (args.some((word) => word === "-delete" || word.startsWith("-exec")))
-      return null;
+    if (args.some((word) => FIND_SIDE_EFFECT_OPERATORS.has(word))) return null;
     const firstOption = args.findIndex((word) => word.startsWith("-"));
     const pathArgs = (
       firstOption === -1 ? args : args.slice(0, firstOption)
@@ -118,7 +149,10 @@ function allowSearch(words) {
   if (
     args.some(
       (word) =>
+        isExternalSearchInputFlag(word) ||
         word.startsWith("/") ||
+        word.startsWith("~") ||
+        word.startsWith("$") ||
         word === ".." ||
         word.startsWith("../") ||
         word.includes("/../"),

package/hooks/session-start-fast.mjs

@@ -20,6 +20,10 @@ import {
   registerSynapseSession,
 } from "../hub/team/synapse-http.mjs";
 import { createModuleLogger } from "../scripts/lib/logger.mjs";
+import {
+  formatCliPolicyLine,
+  resolveCliPolicy,
+} from "../scripts/lib/machine-profile.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const SCRIPTS = join(__dirname, "..", "scripts");
@@ -314,6 +318,36 @@ export function heartbeatInteractiveSession(stdinData, seams = {}) {
   }
 }
 
+/**
+ * TFX_DISABLE_* SSOT 를 읽어 세션 문맥에 넣을 cli-policy 한 줄을 만든다.
+ *
+ * 형식은 scripts/lib/machine-profile.mjs 의 formatCliPolicyLine 이 고정한다.
+ * 리더는 파일 하나를 동기 읽기하므로 ms 단위이고, 어떤 실패도 빈 문자열로
+ * 흡수해서 SessionStart 가 이 단계 때문에 죽지 않게 한다.
+ *
+ * 프로파일 파싱 경고나 0/1 밖의 값이 있으면 둘째 줄로 함께 노출한다. 경고를
+ * 삼키면 잘못 적은 프로파일이 조용히 "허용"으로 읽혀서 원인을 못 찾는다.
+ *
+ * @param {NodeJS.ProcessEnv} [env] 판독할 환경변수
+ * @param {{ resolve?: Function }} [opts] resolve 는 리더 대체 주입용 테스트 시임
+ * @returns {string} 한 줄 또는 두 줄, 실패 시 빈 문자열
+ */
+export function buildCliPolicyContext(env = process.env, opts = {}) {
+  try {
+    const resolvePolicy = opts.resolve || resolveCliPolicy;
+    const policy = resolvePolicy(env, opts);
+    if (!policy) return "";
+    const line = formatCliPolicyLine(policy);
+    const warnings = Array.isArray(policy.warnings) ? policy.warnings : [];
+    if (warnings.length === 0) return line;
+    // 경고에 줄바꿈이 섞이면 additionalContext 에 라벨 없는 줄이 생기므로 한 줄로 접는다.
+    const folded = warnings.join("; ").replace(/[\r\n]+/gu, " ");
+    return `${line}\ncli-policy-warning: ${folded}`;
+  } catch {
+    return "";
+  }
+}
+
 /**
  * BLOCKING 훅을 순차 실행. 하나라도 throw하면 로그만 남기고 계속.
  * @param {string} stdinData
@@ -388,6 +422,21 @@ async function runBlocking(stdinData) {
     );
   }
 
+  // 4. cli-policy: TFX_DISABLE_* SSOT 를 세션 문맥에 한 줄로 주입
+  try {
+    const t0 = performance.now();
+    const line = buildCliPolicyContext();
+    const dur = performance.now() - t0;
+    timings.push({ hook: "cli-policy", dur_ms: Math.round(dur) });
+    if (line) output.stdout += line + "\n";
+    log.info({ hook: "cli-policy", dur_ms: Math.round(dur) }, "hook.completed");
+  } catch (err) {
+    log.error(
+      { hook: "cli-policy", err: String(err.message || err) },
+      "hook.failed",
+    );
+  }
+
   return { ...output, timings };
 }
 
@@ -509,7 +558,7 @@ export async function execute(stdinData, externalHooks = []) {
   log.info(
     {
       total_ms: Math.round(totalDur),
-      blocking_count: 3,
+      blocking_count: 4,
       deferred_count: 2,
       bg_count: 1,
     },

package/hooks/session-start-lake.mjs

@@ -4,6 +4,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 
+import { resolveRoleControlSnapshot } from "../hub/lib/cto-env.mjs";
+
 const MAX_CONTEXT_BYTES = 2048;
 const HEADER = "[CTO NORTH STAR - READ ONLY]";
 const INSTRUCTION =
@@ -34,21 +36,6 @@ function capUtf8(input, maxBytes) {
   return output;
 }
 
-function ctoNorthStarEnabled() {
-  switch (process.env.TFX_CTO_NORTH_STAR || "1") {
-    case "0":
-    case "false":
-    case "FALSE":
-    case "off":
-    case "OFF":
-    case "no":
-    case "NO":
-      return false;
-    default:
-      return true;
-  }
-}
-
 function wrapBrief(brief) {
   return [HEADER, INSTRUCTION, BEGIN, brief, END].join("\n");
 }
@@ -60,7 +47,7 @@ function buildAdditionalContext(brief) {
 }
 
 function main() {
-  if (!ctoNorthStarEnabled()) return;
+  if (!resolveRoleControlSnapshot().north_star_enabled) return;
 
   const input = readStdinJson();
   if (input.hook_event_name && input.hook_event_name !== "SessionStart") {