@triflux/core 10.44.0 → 10.46.0

package/hooks/codex-session-hook.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 
+import { spawn } from "node:child_process";
 import { argv, exit, stdin, stdout } from "node:process";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { drainPendingSynapse as defaultDrainPendingSynapse } from "../hub/team/synapse-http.mjs";
 import {
   heartbeatInteractiveSession as defaultHeartbeatInteractiveSession,
@@ -51,6 +52,66 @@ function normalizeMode(mode, payload) {
   return "";
 }
 
+/**
+ * Start a detached bridge call so Codex/OMX presence reaches both the Synapse
+ * session registry and the hub agents table. This is intentionally independent
+ * of the legacy session-start work below: a missing or unavailable hub must
+ * never delay or fail SessionStart.
+ */
+export function launchCodexPresenceRegistration(payload, opts = {}) {
+  try {
+    const sessionId = String(payload?.session_id || "").trim();
+    if (!sessionId) return false;
+
+    const cwd =
+      typeof payload?.cwd === "string" && payload.cwd.trim()
+        ? payload.cwd
+        : process.cwd();
+    const bridgePath =
+      opts.bridgePath ||
+      fileURLToPath(new URL("../hub/bridge.mjs", import.meta.url));
+    const spawnFn = opts.spawnFn || spawn;
+    const canonicalSessionId = String(process.env.OMX_SESSION_ID || "").trim();
+    const tmuxSession = String(
+      process.env.OMX_TMUX_SESSION_NAME || process.env.OMX_TMUX_SESSION || "",
+    ).trim();
+    const tmuxPane = String(process.env.TMUX_PANE || "").trim();
+    const args = [
+      bridgePath,
+      "register",
+      "--session-id",
+      sessionId,
+      "--cwd",
+      cwd,
+      "--worktree-path",
+      cwd,
+      "--session-kind",
+      "interactive",
+      "--host",
+      "local",
+      "--codex-session-id",
+      sessionId,
+    ];
+    if (canonicalSessionId && canonicalSessionId !== sessionId) {
+      args.push("--omx-session-id", canonicalSessionId);
+    }
+    if (tmuxSession) args.push("--tmux-session", tmuxSession);
+    if (tmuxPane) args.push("--tmux-pane", tmuxPane);
+
+    const child = spawnFn(process.execPath, args, {
+      detached: true,
+      stdio: "ignore",
+      windowsHide: true,
+      env: process.env,
+    });
+    child?.once?.("error", () => {});
+    child?.unref?.();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 function swallowStdoutWrite(_chunk, encodingOrCallback, callback) {
   const done =
     typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
@@ -91,10 +152,15 @@ export async function runCodexSessionHook(stdinData, opts = {}) {
     opts.heartbeatInteractiveSession || defaultHeartbeatInteractiveSession;
   const drainPendingSynapse =
     opts.drainPendingSynapse || defaultDrainPendingSynapse;
+  const launchPresenceRegistration =
+    opts.launchPresenceRegistration || launchCodexPresenceRegistration;
 
   try {
     await runHookSideEffectsWithStdoutSuppressed(async () => {
       if (mode === "register") {
+        try {
+          launchPresenceRegistration(parsed.payload);
+        } catch {}
         try {
           await hubEnsureRun(stdinData);
         } catch {}

package/hooks/cto-north-star-brief.mjs

@@ -11,6 +11,8 @@ import {
 } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 
+import { resolveRoleControlSnapshot } from "../hub/lib/cto-env.mjs";
+
 const MAX_CONTEXT_BYTES = 2048;
 const HEADER = "[CTO NORTH STAR - READ ONLY]";
 const INSTRUCTION =
@@ -45,21 +47,6 @@ function sha256(input) {
   return createHash("sha256").update(input).digest("hex");
 }
 
-function ctoNorthStarEnabled() {
-  switch (process.env.TFX_CTO_NORTH_STAR || "1") {
-    case "0":
-    case "false":
-    case "FALSE":
-    case "off":
-    case "OFF":
-    case "no":
-    case "NO":
-      return false;
-    default:
-      return true;
-  }
-}
-
 function wrapBrief(brief) {
   return [HEADER, INSTRUCTION, BEGIN, brief, END].join("\n");
 }
@@ -89,7 +76,7 @@ function writeMarker(markerPath, state) {
 }
 
 function main() {
-  if (!ctoNorthStarEnabled()) return;
+  if (!resolveRoleControlSnapshot().north_star_enabled) return;
 
   const input = readStdinJson();
   if (input.hook_event_name && input.hook_event_name !== "UserPromptSubmit") {

package/hooks/error-context.mjs

@@ -129,9 +129,8 @@ function main() {
     JSON.stringify(input.tool_result || ""),
   ].join("\n");
 
-  // ── reflexion 적응형 학습: safety-guard/headless-guard 차단을 패널티로 기록 ──
-  const isSafetyBlock =
-    /\[(?:safety-guard|headless-guard)\].*(?:BLOCKED|차단)/i.test(errorText);
+  // ── reflexion 적응형 학습: safety-guard 차단을 패널티로 기록 ──
+  const isSafetyBlock = /\[safety-guard\].*(?:BLOCKED|차단)/i.test(errorText);
   if (isSafetyBlock) {
     try {
       const home = process.env.HOME || process.env.USERPROFILE || "";
@@ -147,9 +146,7 @@ function main() {
           errorText.match(/\[.*?\]\s*(.{0,120})/)?.[1] ||
           errorText.slice(0, 120),
         command_preview: command.slice(0, 200),
-        source: errorText.includes("safety-guard")
-          ? "safety-guard"
-          : "headless-guard",
+        source: "safety-guard",
       };
       writeFileSync(penaltyFile, JSON.stringify(entry) + "\n", { flag: "a" });
     } catch {

package/hooks/hook-manager.mjs

@@ -113,7 +113,7 @@ function identifySource(cmd) {
   if (/oh-my-claudecode|omc/i.test(cmd)) return "omc";
   if (/session-vault/i.test(cmd)) return "session-vault";
   if (/compact-helper/i.test(cmd)) return "compact-helper";
-  if (/headless-guard|tfx-gate/i.test(cmd)) return "omc";
+  if (/tfx-gate/i.test(cmd)) return "omc";
   if (/mcp-cleanup/i.test(cmd)) return "system";
   return "unknown";
 }

package/hooks/hook-registry.json

@@ -68,17 +68,6 @@
         "blocking": true,
         "description": "git commit 전 교차 리뷰 미검증 파일 차단/경고"
       },
-      {
-        "id": "omc-headless-guard",
-        "source": "omc",
-        "matcher": "Bash|Agent",
-        "command": "bash \"${HOME}/.claude/scripts/headless-guard-fast.sh\"",
-        "priority": 50,
-        "enabled": true,
-        "timeout": 3,
-        "blocking": false,
-        "description": "primary multiplexer headless 가드"
-      },
       {
         "id": "omc-tfx-gate-activate",
         "source": "omc",

package/hooks/keyword-rules.json

@@ -55,7 +55,7 @@
           "flags": "i"
         }
       ],
-      "skill": "tfx-swarm",
+      "skill": "tfx-auto",
       "priority": 1,
       "supersedes": ["tfx-codex"],
       "exclusive": false,
@@ -412,6 +412,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -431,6 +432,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -450,6 +452,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -469,6 +472,7 @@
         }
       ],
       "skill": "tfx-wt",
+      "platform": ["win32"],
       "priority": 1,
       "supersedes": ["tfx-unified"],
       "exclusive": false,
@@ -681,11 +685,11 @@
           "flags": "i"
         },
         {
-          "source": "\\b(?:checkpoint|resume|pick\\s*up|where\\s*was\\s*I)\\b",
+          "source": "\\b(?:resume|pick\\s*up|where\\s*was\\s*I)\\b",
           "flags": "i"
         }
       ],
-      "skill": "checkpoint",
+      "skill": "gstack-context-restore",
       "priority": 5,
       "supersedes": [],
       "exclusive": false,
@@ -719,7 +723,7 @@
           "flags": "i"
         },
         {
-          "source": "\\bship\\b(?!.*tfx)",
+          "source": "(?<![\\w-])ship\\b(?!.*tfx)",
           "flags": "i"
         }
       ],

package/hooks/permission-safe-allow.mjs

@@ -3,6 +3,8 @@
 import { stdin, stdout } from "node:process";
 
 const META_PATTERNS = [/&&/, /\|\|/, /[;|<>`]/, /\$\(/];
+const SHELL_EXPANSION_PATTERN =
+  /(?:^|[^\\])\$(?:[A-Za-z_][A-Za-z0-9_]*|\{[^}]*\}|[?*#@$!0-9-])|(?:^|\s)~[A-Za-z0-9_-]*(?=\/|$)/;
 const RISKY_PATTERNS = [
   /(^|\s)rm(\s|$)/,
   /(^|\s)mv(\s|$)/,
@@ -19,6 +21,25 @@ const RISKY_PATTERNS = [
   /(^|\s)pnpm\s+publish(\s|$)/,
   /(^|\s)yarn\s+publish(\s|$)/,
 ];
+const SEARCH_EXTERNAL_INPUT_FLAGS = new Set([
+  "--exclude-from",
+  "--file",
+  "--files-from",
+  "--ignore-file",
+  "--pre",
+  "--pre-glob",
+]);
+const FIND_SIDE_EFFECT_OPERATORS = new Set([
+  "-delete",
+  "-exec",
+  "-execdir",
+  "-fprint",
+  "-fprint0",
+  "-fprintf",
+  "-fls",
+  "-ok",
+  "-okdir",
+]);
 
 function silentlyExit() {
   process.exit(0);
@@ -57,10 +78,21 @@ function isRepoRelativePath(value) {
 function hasUnsafeSurface(command) {
   return (
     META_PATTERNS.some((pattern) => pattern.test(command)) ||
+    SHELL_EXPANSION_PATTERN.test(command) ||
     RISKY_PATTERNS.some((pattern) => pattern.test(command))
   );
 }
 
+function isExternalSearchInputFlag(word) {
+  return (
+    SEARCH_EXTERNAL_INPUT_FLAGS.has(word) ||
+    [...SEARCH_EXTERNAL_INPUT_FLAGS].some((flag) =>
+      word.startsWith(`${flag}=`),
+    ) ||
+    /^-[^-]*f/.test(word)
+  );
+}
+
 function allowGit(words, command) {
   if (command === "git status" || command === "git status --short")
     return "git status";
@@ -97,8 +129,7 @@ function allowListing(words) {
 
   if (words[0] === "find") {
     const args = words.slice(1);
-    if (args.some((word) => word === "-delete" || word.startsWith("-exec")))
-      return null;
+    if (args.some((word) => FIND_SIDE_EFFECT_OPERATORS.has(word))) return null;
     const firstOption = args.findIndex((word) => word.startsWith("-"));
     const pathArgs = (
       firstOption === -1 ? args : args.slice(0, firstOption)
@@ -118,7 +149,10 @@ function allowSearch(words) {
   if (
     args.some(
       (word) =>
+        isExternalSearchInputFlag(word) ||
         word.startsWith("/") ||
+        word.startsWith("~") ||
+        word.startsWith("$") ||
         word === ".." ||
         word.startsWith("../") ||
         word.includes("/../"),

package/hooks/session-start-fast.mjs

@@ -20,6 +20,10 @@ import {
   registerSynapseSession,
 } from "../hub/team/synapse-http.mjs";
 import { createModuleLogger } from "../scripts/lib/logger.mjs";
+import {
+  formatCliPolicyLine,
+  resolveCliPolicy,
+} from "../scripts/lib/machine-profile.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const SCRIPTS = join(__dirname, "..", "scripts");
@@ -314,6 +318,36 @@ export function heartbeatInteractiveSession(stdinData, seams = {}) {
   }
 }
 
+/**
+ * TFX_DISABLE_* SSOT 를 읽어 세션 문맥에 넣을 cli-policy 한 줄을 만든다.
+ *
+ * 형식은 scripts/lib/machine-profile.mjs 의 formatCliPolicyLine 이 고정한다.
+ * 리더는 파일 하나를 동기 읽기하므로 ms 단위이고, 어떤 실패도 빈 문자열로
+ * 흡수해서 SessionStart 가 이 단계 때문에 죽지 않게 한다.
+ *
+ * 프로파일 파싱 경고나 0/1 밖의 값이 있으면 둘째 줄로 함께 노출한다. 경고를
+ * 삼키면 잘못 적은 프로파일이 조용히 "허용"으로 읽혀서 원인을 못 찾는다.
+ *
+ * @param {NodeJS.ProcessEnv} [env] 판독할 환경변수
+ * @param {{ resolve?: Function }} [opts] resolve 는 리더 대체 주입용 테스트 시임
+ * @returns {string} 한 줄 또는 두 줄, 실패 시 빈 문자열
+ */
+export function buildCliPolicyContext(env = process.env, opts = {}) {
+  try {
+    const resolvePolicy = opts.resolve || resolveCliPolicy;
+    const policy = resolvePolicy(env, opts);
+    if (!policy) return "";
+    const line = formatCliPolicyLine(policy);
+    const warnings = Array.isArray(policy.warnings) ? policy.warnings : [];
+    if (warnings.length === 0) return line;
+    // 경고에 줄바꿈이 섞이면 additionalContext 에 라벨 없는 줄이 생기므로 한 줄로 접는다.
+    const folded = warnings.join("; ").replace(/[\r\n]+/gu, " ");
+    return `${line}\ncli-policy-warning: ${folded}`;
+  } catch {
+    return "";
+  }
+}
+
 /**
  * BLOCKING 훅을 순차 실행. 하나라도 throw하면 로그만 남기고 계속.
  * @param {string} stdinData
@@ -388,6 +422,21 @@ async function runBlocking(stdinData) {
     );
   }
 
+  // 4. cli-policy: TFX_DISABLE_* SSOT 를 세션 문맥에 한 줄로 주입
+  try {
+    const t0 = performance.now();
+    const line = buildCliPolicyContext();
+    const dur = performance.now() - t0;
+    timings.push({ hook: "cli-policy", dur_ms: Math.round(dur) });
+    if (line) output.stdout += line + "\n";
+    log.info({ hook: "cli-policy", dur_ms: Math.round(dur) }, "hook.completed");
+  } catch (err) {
+    log.error(
+      { hook: "cli-policy", err: String(err.message || err) },
+      "hook.failed",
+    );
+  }
+
   return { ...output, timings };
 }
 
@@ -509,7 +558,7 @@ export async function execute(stdinData, externalHooks = []) {
   log.info(
     {
       total_ms: Math.round(totalDur),
-      blocking_count: 3,
+      blocking_count: 4,
       deferred_count: 2,
       bg_count: 1,
     },

package/hooks/session-start-lake.mjs

@@ -4,6 +4,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 
+import { resolveRoleControlSnapshot } from "../hub/lib/cto-env.mjs";
+
 const MAX_CONTEXT_BYTES = 2048;
 const HEADER = "[CTO NORTH STAR - READ ONLY]";
 const INSTRUCTION =
@@ -34,21 +36,6 @@ function capUtf8(input, maxBytes) {
   return output;
 }
 
-function ctoNorthStarEnabled() {
-  switch (process.env.TFX_CTO_NORTH_STAR || "1") {
-    case "0":
-    case "false":
-    case "FALSE":
-    case "off":
-    case "OFF":
-    case "no":
-    case "NO":
-      return false;
-    default:
-      return true;
-  }
-}
-
 function wrapBrief(brief) {
   return [HEADER, INSTRUCTION, BEGIN, brief, END].join("\n");
 }
@@ -60,7 +47,7 @@ function buildAdditionalContext(brief) {
 }
 
 function main() {
-  if (!ctoNorthStarEnabled()) return;
+  if (!resolveRoleControlSnapshot().north_star_enabled) return;
 
   const input = readStdinJson();
   if (input.hook_event_name && input.hook_event_name !== "SessionStart") {

package/hub/bridge.mjs

@@ -400,6 +400,16 @@ export function parseArgs(argv) {
       command: { type: "string" },
       role: { type: "string" },
       "session-id": { type: "string" },
+      cwd: { type: "string" },
+      "worktree-path": { type: "string" },
+      branch: { type: "string" },
+      host: { type: "string" },
+      "session-kind": { type: "string" },
+      "is-remote": { type: "string" },
+      "tmux-session": { type: "string" },
+      "tmux-pane": { type: "string" },
+      "omx-session-id": { type: "string" },
+      "codex-session-id": { type: "string" },
       reason: { type: "string" },
       type: { type: "string" },
       from: { type: "string" },
@@ -606,6 +616,71 @@ function unavailableResult() {
   return { ok: false, reason: "hub_unavailable" };
 }
 
+function nonEmptyString(value, fallback = "") {
+  const normalized = String(value ?? "").trim();
+  return normalized || fallback;
+}
+
+function readBoolean(value) {
+  return ["1", "true", "yes"].includes(nonEmptyString(value).toLowerCase());
+}
+
+function sessionAgentId(sessionId) {
+  return `codex-session-${sessionId.replace(/[^A-Za-z0-9._-]/g, "_")}`;
+}
+
+export function buildInteractiveSessionRegistrationPayload(args = {}) {
+  const sessionId = nonEmptyString(args["session-id"]);
+  if (!sessionId) return null;
+
+  const cwd = nonEmptyString(args.cwd, process.cwd());
+  const worktreePath = nonEmptyString(args["worktree-path"], cwd);
+  const host = nonEmptyString(args.host, "local");
+  const sessionKind = nonEmptyString(args["session-kind"], "interactive");
+  const agentId = nonEmptyString(args.agent, sessionAgentId(sessionId));
+  const metadata = {
+    pid: process.ppid,
+    registered_at: Date.now(),
+    cwd,
+    worktree_path: worktreePath,
+    branch: nonEmptyString(args.branch),
+    host,
+    session_kind: sessionKind,
+    is_remote: readBoolean(args["is-remote"]),
+    ...(nonEmptyString(args["tmux-session"])
+      ? { tmux_session: nonEmptyString(args["tmux-session"]) }
+      : {}),
+    ...(nonEmptyString(args["tmux-pane"])
+      ? { tmux_pane: nonEmptyString(args["tmux-pane"]) }
+      : {}),
+    ...(nonEmptyString(args["omx-session-id"])
+      ? { omx_session_id: nonEmptyString(args["omx-session-id"]) }
+      : {}),
+    ...(nonEmptyString(args["codex-session-id"])
+      ? { codex_session_id: nonEmptyString(args["codex-session-id"]) }
+      : {}),
+  };
+
+  return {
+    sessionId,
+    cwd,
+    worktreePath,
+    branch: nonEmptyString(args.branch),
+    host,
+    sessionKind,
+    isRemote: readBoolean(args["is-remote"]),
+    agent_id: agentId,
+    cli: nonEmptyString(args.cli, "codex"),
+    capabilities: args.capabilities
+      ? String(args.capabilities).split(",")
+      : ["code"],
+    topics: args.topics ? String(args.topics).split(",") : [],
+    heartbeat_ttl_ms: 300000,
+    session_id: sessionId,
+    metadata,
+  };
+}
+
 function emitJson(payload) {
   if (payload !== undefined) {
     console.log(JSON.stringify(payload));
@@ -613,17 +688,33 @@ function emitJson(payload) {
   return payload?.ok !== false;
 }
 
+const HUB_STORE_CLI_VALUES = new Set(["codex", "gemini", "claude", "other"]);
+function normalizeCliForStore(cli) {
+  return HUB_STORE_CLI_VALUES.has(cli) ? cli : "other";
+}
+
 async function cmdRegister(args) {
+  const interactiveSession = buildInteractiveSessionRegistrationPayload(args);
+  if (interactiveSession) {
+    const result = await requestJson("/synapse/register", {
+      body: interactiveSession,
+      timeoutMs: 3000,
+    });
+    return emitJson(result || unavailableResult());
+  }
+
   const agentId = args.agent;
   const timeoutSec = parseInt(args.timeout || "600", 10);
+  const rawCli = args.cli || "other";
   const outcome = await requestHub(HUB_OPERATIONS.register, {
     agent_id: agentId,
-    cli: args.cli || "other",
+    cli: normalizeCliForStore(rawCli),
     timeout_sec: timeoutSec,
     heartbeat_ttl_ms: (timeoutSec + 120) * 1000,
     topics: args.topics ? args.topics.split(",") : [],
     capabilities: args.capabilities ? args.capabilities.split(",") : ["code"],
     metadata: {
+      cli: rawCli,
       pid: process.ppid,
       registered_at: Date.now(),
     },
@@ -634,8 +725,12 @@ async function cmdRegister(args) {
     return emitJson({
       ok: true,
       agent_id: agentId,
+      lease_id: result.data?.lease_id,
+      presence_generation: result.data?.presence_generation,
       lease_expires_ms: result.data?.lease_expires_ms,
       pipe_path: result.data?.pipe_path || getHubPipePath(),
+      hub_instance_id: result.data?.hub_instance_id,
+      store_fingerprint: result.data?.store_fingerprint,
     });
   }
 
@@ -646,6 +741,10 @@ async function cmdHeartbeat(args) {
   const outcome = await requestHub(HUB_OPERATIONS.heartbeat, {
     agent_id: args.agent,
     ttl_ms: args["ttl-ms"] != null ? Number(args["ttl-ms"]) : undefined,
+    presence_generation:
+      args.generation != null ? Number(args.generation) : undefined,
+    hub_instance_id: args["hub-instance-id"],
+    store_fingerprint: args["store-fingerprint"],
   });
   return emitJson(outcome?.result || unavailableResult());
 }
@@ -731,6 +830,8 @@ async function cmdTakeoverRole(args) {
     agent_id: agentId,
     reason: args.reason || "manual",
     requested_by: args["requested-by"] || "bridge",
+    hub_instance_id: args["hub-instance-id"],
+    store_fingerprint: args["store-fingerprint"],
   });
   const result = outcome?.result;
   return emitJson(result || unavailableResult());
@@ -748,6 +849,8 @@ async function cmdSendInput(args) {
 async function cmdContext(args) {
   const outcome = await requestHub(HUB_OPERATIONS.context, {
     agent_id: args.agent,
+    presence_generation:
+      args.generation != null ? Number(args.generation) : undefined,
     topics: args.topics ? args.topics.split(",") : undefined,
     max_messages: parseInt(args.max || "10", 10),
     auto_ack: true,
@@ -793,13 +896,13 @@ async function cmdContext(args) {
 async function cmdDeregister(args) {
   const outcome = await requestHub(HUB_OPERATIONS.deregister, {
     agent_id: args.agent,
+    presence_generation:
+      args.generation != null ? Number(args.generation) : undefined,
+    hub_instance_id: args["hub-instance-id"],
+    store_fingerprint: args["store-fingerprint"],
   });
   const result = outcome?.result;
 
-  if (result?.ok) {
-    return emitJson({ ok: true, agent_id: args.agent, status: "offline" });
-  }
-
   return emitJson(result || unavailableResult());
 }
 
@@ -1291,6 +1394,7 @@ async function cmdDaemonProbe(args) {
       short: payload.short,
       sessionId: payload.sessionId,
       timeoutMs: numericOption(payload.timeoutMs, 6000),
+      tmpRoot: payload.tmpRoot,
     });
     return emitJson(probe);
   } catch (error) {
@@ -1314,6 +1418,7 @@ async function cmdDaemonAttach(args) {
       short: payload.short,
       sessionId: payload.sessionId,
       timeoutMs: numericOption(payload.timeoutMs, 6000),
+      tmpRoot: payload.tmpRoot,
     });
     if (!probe.ok) return emitJson(daemonAttachProbeFailureResult(probe));
     const short = payload.short ?? probe.target?.short;
@@ -1382,6 +1487,7 @@ async function cmdDaemonInterrupt(args) {
       short: payload.short,
       sessionId: payload.sessionId,
       timeoutMs: numericOption(payload.timeoutMs, 6000),
+      tmpRoot: payload.tmpRoot,
     });
     if (!probe.ok) return emitJson(daemonInterruptProbeFailureResult(probe));
     const short = payload.short ?? probe.target?.short;

package/hub/dynamic-routing-engine.mjs

@@ -45,7 +45,7 @@ function makeFallback(policy, trigger, inputsHash, now) {
       {
         cli: fb.default_cli ?? "codex",
         accountId: null,
-        model: fb.default_model ?? "gpt-5.6-terra",
+        model: fb.default_model ?? "gpt-6-sol",
         riskTier: "safe",
         reason: trigger,
       },