@triflux/core 10.53.0 → 10.55.0

package/hub/codex-preflight.mjs

@@ -1,219 +0,0 @@
-import { execSync } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-import { whichCommandAsync } from "./platform.mjs";
-
-let _cachedVersion = null;
-
-function escapeRegExp(value) {
-  return String(value).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
-function readConfigText(configPath = join(homedir(), ".codex", "config.toml")) {
-  if (!existsSync(configPath)) return "";
-  try {
-    return readFileSync(configPath, "utf8");
-  } catch {
-    return "";
-  }
-}
-
-function readTomlString(text, key) {
-  const match = String(text).match(
-    new RegExp(`^\\s*${escapeRegExp(key)}\\s*=\\s*"([^"]*)"\\s*$`, "mu"),
-  );
-  return match?.[1] ?? null;
-}
-
-function readSection(text, name) {
-  const lines = String(text).split(/\r?\n/u);
-  const header = `[${name}]`;
-  const start = lines.findIndex((line) => line.trim() === header);
-  if (start < 0) return "";
-  const body = [];
-  for (const line of lines.slice(start + 1)) {
-    if (/^\s*\[[^\]]+\]\s*$/u.test(line)) break;
-    body.push(line);
-  }
-  return body.join("\n");
-}
-
-/**
- * `codex --version` 실행 결과를 파싱하여 마이너 버전 숫자 반환.
- * 파싱 실패 시 0 반환 (구버전으로 간주).
- * @returns {number} 마이너 버전 (예: 0.117.0 → 117)
- */
-export function getCodexVersion() {
-  if (_cachedVersion !== null) return _cachedVersion;
-  try {
-    const out = execSync("codex --version", {
-      encoding: "utf8",
-      timeout: 5000,
-    }).trim();
-    // "codex 0.117.0" 또는 "0.117.0" 형식 대응
-    const match = out.match(/(\d+)\.(\d+)\.(\d+)/);
-    _cachedVersion = match ? parseInt(match[2], 10) : 0;
-  } catch {
-    _cachedVersion = 0;
-  }
-  return _cachedVersion;
-}
-
-async function checkCodexInstalled() {
-  const codexPath = await whichCommandAsync("codex");
-  if (codexPath) return { codexPath, ok: true, warnings: [] };
-  return {
-    codexPath: null,
-    ok: false,
-    warnings: [
-      "Codex CLI not found. Install Codex and ensure `codex` is available on PATH.",
-    ],
-  };
-}
-
-function checkApprovalMode(configText, opts = {}) {
-  const approvalPolicy = readTomlString(configText, "approval_policy");
-  const subcommand = opts.subcommand || "exec";
-  return {
-    needsBypass: subcommand === "exec" || approvalPolicy !== "never",
-  };
-}
-
-async function verifyServerHealth(name, configText) {
-  const section = readSection(configText, `mcp_servers.${name}`);
-  if (!section)
-    return { ok: false, warning: `MCP server '${name}' is not configured.` };
-  if (/^\s*enabled\s*=\s*false\s*$/mu.test(section)) {
-    return {
-      ok: false,
-      warning: `MCP server '${name}' is disabled in config.toml.`,
-    };
-  }
-
-  const command = readTomlString(section, "command");
-  if (command) {
-    const resolved = await whichCommandAsync(command);
-    return resolved
-      ? { ok: true, warning: "" }
-      : {
-          ok: false,
-          warning: `MCP server '${name}' command not found: ${command}`,
-        };
-  }
-
-  const url = readTomlString(section, "url");
-  if (!url || !/^https?:\/\//u.test(url)) return { ok: true, warning: "" };
-  try {
-    const response = await fetch(url, { signal: AbortSignal.timeout(2000) });
-    return response.status < 500
-      ? { ok: true, warning: "" }
-      : {
-          ok: false,
-          warning: `MCP server '${name}' returned HTTP ${response.status}.`,
-        };
-  } catch {
-    return {
-      ok: false,
-      warning: `MCP server '${name}' is unreachable at ${url}.`,
-    };
-  }
-}
-
-async function checkMcpHealth(mcpServers, configText) {
-  const excludeMcpServers = [];
-  const warnings = [];
-
-  for (const name of Array.isArray(mcpServers) ? mcpServers : []) {
-    const server = String(name ?? "").trim();
-    if (!server) continue;
-    const result = await verifyServerHealth(server, configText);
-    if (!result.ok) excludeMcpServers.push(server);
-    if (result.warning) warnings.push(result.warning);
-  }
-
-  return { excludeMcpServers, warnings };
-}
-
-/**
- * Detects codex config drift between global (~/.codex/config.toml) and the
- * target workdir. Covers:
- *   1. workdir-local `.codex/config.toml` overriding global approval_policy/sandbox_mode
- *   2. instruction-file asymmetry (AGENTS.md vs CLAUDE.md)
- *
- * @param {string} [workdir] absolute path to the invocation workdir
- * @param {string} [globalConfigText] already-read ~/.codex/config.toml content
- * @returns {{ warnings: string[] }}
- */
-export function detectWorkdirDrift(workdir, globalConfigText = "") {
-  if (!workdir || typeof workdir !== "string") return { warnings: [] };
-  const warnings = [];
-
-  const localCodexConfig = join(workdir, ".codex", "config.toml");
-  if (existsSync(localCodexConfig)) {
-    let localText = "";
-    try {
-      localText = readFileSync(localCodexConfig, "utf8");
-    } catch {
-      localText = "";
-    }
-    const keys = ["approval_policy", "sandbox_mode", "model"];
-    for (const key of keys) {
-      const local = readTomlString(localText, key);
-      const global = readTomlString(globalConfigText, key);
-      if (local && local !== global) {
-        warnings.push(
-          `workdir '.codex/config.toml' overrides ${key}='${local}' (global='${global || "unset"}').`,
-        );
-      }
-    }
-  }
-
-  const hasAgentsMd = existsSync(join(workdir, "AGENTS.md"));
-  const hasClaudeMd = existsSync(join(workdir, "CLAUDE.md"));
-  if (hasAgentsMd !== hasClaudeMd) {
-    const present = hasAgentsMd ? "AGENTS.md" : "CLAUDE.md";
-    const missing = hasAgentsMd ? "CLAUDE.md" : "AGENTS.md";
-    warnings.push(
-      `workdir has ${present} but not ${missing}; codex and other CLIs may read different instruction sources.`,
-    );
-  }
-
-  return { warnings };
-}
-
-export async function runPreflight(opts = {}) {
-  const install = await checkCodexInstalled();
-  if (!install.ok) {
-    return {
-      codexPath: null,
-      version: 0,
-      needsBypass: true,
-      excludeMcpServers: [],
-      warnings: install.warnings,
-      ok: false,
-    };
-  }
-
-  const warnings = [...install.warnings];
-  const version = getCodexVersion();
-
-  const configText = readConfigText(opts.configPath);
-  const approval = checkApprovalMode(configText, opts);
-
-  const mcp = await checkMcpHealth(opts.mcpServers, configText);
-  warnings.push(...mcp.warnings);
-
-  const drift = detectWorkdirDrift(opts.workdir, configText);
-  warnings.push(...drift.warnings);
-
-  return {
-    codexPath: install.codexPath,
-    version,
-    needsBypass: approval.needsBypass,
-    excludeMcpServers: mcp.excludeMcpServers,
-    warnings,
-    ok: true,
-  };
-}

package/hub/lib/cto-env.mjs

@@ -1,70 +0,0 @@
-const OFF_VALUES = new Set(["0", "false", "off", "no"]);
-const ON_VALUES = new Set(["1", "true", "on", "yes"]);
-
-function normalizeEnvValue(name) {
-  return String(process.env[name] ?? "")
-    .trim()
-    .toLowerCase();
-}
-
-function isExplicitlyOff(name) {
-  return OFF_VALUES.has(normalizeEnvValue(name));
-}
-
-function isExplicitlyOn(name) {
-  return ON_VALUES.has(normalizeEnvValue(name));
-}
-
-function normalizeEnv(env, name) {
-  return String(env?.[name] ?? "")
-    .trim()
-    .toLowerCase();
-}
-
-function isEnvOff(env, name) {
-  return OFF_VALUES.has(normalizeEnv(env, name));
-}
-
-function isEnvOn(env, name) {
-  return ON_VALUES.has(normalizeEnv(env, name));
-}
-
-/**
- * Resolve the C6a control plane without mutating environment or runtime
- * state. Callers own storing and incrementing the returned generation.
- */
-export function resolveRoleControlSnapshot(env = process.env, options = {}) {
-  const masterEnabled = !isEnvOff(env, "TFX_CTO");
-  const ctoManagerEnabled = masterEnabled && isEnvOn(env, "TFX_CTO_MANAGER");
-  const leadManagerEnabled =
-    ctoManagerEnabled && isEnvOn(env, "TFX_LEAD_MANAGER");
-  const northStarEnabled = masterEnabled && isEnvOn(env, "TFX_CTO_NORTH_STAR");
-  const autoCollectEnabled =
-    masterEnabled && isEnvOn(env, "TFX_CTO_AUTO_COLLECT");
-  const values = {
-    master_enabled: masterEnabled,
-    cto_manager_enabled: ctoManagerEnabled,
-    lead_manager_enabled: leadManagerEnabled,
-    north_star_enabled: northStarEnabled,
-    auto_collect_enabled: autoCollectEnabled,
-  };
-  const previous = options.previous;
-  const changed = Object.keys(values).some(
-    (field) => previous?.[field] !== values[field],
-  );
-  const generation = previous
-    ? Number(previous.generation || 0) + (changed ? 1 : 0)
-    : Number.isSafeInteger(options.generation) && options.generation >= 0
-      ? options.generation
-      : 0;
-  return { generation, ...values };
-}
-
-export function isCtoDisabled() {
-  return isExplicitlyOff("TFX_CTO");
-}
-
-export function isCtoRetentionEnabled() {
-  if (isExplicitlyOff("TFX_CTO")) return false;
-  return isExplicitlyOn("TFX_CTO_RETENTION");
-}

package/scripts/lib/remote-spawn-transfer.mjs

@@ -1,226 +0,0 @@
-import { existsSync, readFileSync, statSync } from "fs";
-import { basename, dirname, isAbsolute, resolve } from "path";
-
-const URL_LIKE_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//u;
-const WINDOWS_ABS_RE = /^[a-zA-Z]:[\\/]/u;
-
-function normalizeMarkdownTarget(raw) {
-  const trimmed = String(raw || "").trim();
-  const match = /^<?([^>\s]+)>?(?:\s+["'][^"']*["'])?$/u.exec(trimmed);
-  return match ? match[1] : trimmed;
-}
-
-function sanitizeToken(raw) {
-  let token = String(raw || "").trim();
-  if (!token) return "";
-  token = token
-    .replace(/^[<(]+/u, "")
-    .replace(/[)>.,;:!?]+$/u, "")
-    .trim();
-  return token;
-}
-
-function isLikelyPathToken(token) {
-  if (!token || URL_LIKE_RE.test(token)) return false;
-  if (
-    token.startsWith("app://") ||
-    token.startsWith("plugin://") ||
-    token.startsWith("mention://")
-  )
-    return false;
-  if (token === "~") return false;
-
-  const hasPathSeparator = token.includes("/") || token.includes("\\");
-  const hasDotPrefix =
-    token.startsWith("./") || token.startsWith("../") || token.startsWith(".");
-  const isHomeRelative = token.startsWith("~/") || token.startsWith("~\\");
-  const isWindowsAbs = WINDOWS_ABS_RE.test(token);
-  const hasFileLikeSuffix = /\.[a-zA-Z0-9]{1,16}$/u.test(token);
-
-  return (
-    hasPathSeparator ||
-    hasDotPrefix ||
-    isHomeRelative ||
-    isWindowsAbs ||
-    hasFileLikeSuffix
-  );
-}
-
-export function extractExplicitFileTokens(text) {
-  const content = String(text || "");
-  const candidates = [];
-
-  for (const match of content.matchAll(/\[[^\]]+\]\(([^)\n]+)\)/gu)) {
-    candidates.push(normalizeMarkdownTarget(match[1]));
-  }
-  for (const match of content.matchAll(/`([^`\n]+)`/gu)) {
-    candidates.push(match[1]);
-  }
-  for (const match of content.matchAll(/"([^"\n]+)"/gu)) {
-    candidates.push(match[1]);
-  }
-  for (const match of content.matchAll(/'([^'\n]+)'/gu)) {
-    candidates.push(match[1]);
-  }
-
-  const unique = new Set();
-  for (const raw of candidates) {
-    const token = sanitizeToken(raw);
-    if (!isLikelyPathToken(token)) continue;
-    unique.add(token);
-  }
-
-  return Array.from(unique);
-}
-
-function validateTransferFile(filePath, maxBytes) {
-  if (!existsSync(filePath)) {
-    throw new Error(`referenced file not found: ${filePath}`);
-  }
-  const stats = statSync(filePath);
-  if (!stats.isFile()) {
-    throw new Error(`referenced path is not a file: ${filePath}`);
-  }
-  if (stats.size > maxBytes) {
-    throw new Error(
-      `referenced file too large: ${stats.size} bytes (max ${maxBytes}) for ${filePath}`,
-    );
-  }
-  return stats.size;
-}
-
-function resolveReferencePath(token, handoffAbsPath, cwd) {
-  if (WINDOWS_ABS_RE.test(token) || isAbsolute(token)) {
-    return resolve(token);
-  }
-
-  if (token.startsWith("~/") || token.startsWith("~\\")) {
-    if (!process.env.HOME && !process.env.USERPROFILE) {
-      return null;
-    }
-    const homeDir = process.env.HOME || process.env.USERPROFILE;
-    return resolve(homeDir, token.slice(2));
-  }
-
-  const handoffDir = dirname(handoffAbsPath);
-  const primary = resolve(handoffDir, token);
-  if (existsSync(primary)) {
-    return primary;
-  }
-
-  const fallback = resolve(cwd, token);
-  return existsSync(fallback) ? fallback : primary;
-}
-
-function toRemotePath(stageRoot, relativePath) {
-  const root = String(stageRoot).replace(/\\/gu, "/").replace(/\/+$/u, "");
-  const rel = String(relativePath).replace(/\\/gu, "/").replace(/^\/+/, "");
-  return `${root}/${rel}`;
-}
-
-export function buildRemoteTransferPlan(options = {}) {
-  const {
-    cwd = process.cwd(),
-    handoffPath = null,
-    maxBytes,
-    remoteStageRoot,
-    userPrompt = null,
-    maxReferenceFiles = 32,
-  } = options;
-
-  if (!handoffPath) {
-    return {
-      prompt: userPrompt || "",
-      replacements: [],
-      stagedHandoffPath: null,
-      transfers: [],
-    };
-  }
-
-  if (!remoteStageRoot) {
-    throw new Error("remoteStageRoot is required when handoffPath is provided");
-  }
-
-  if (!Number.isFinite(maxBytes) || maxBytes <= 0) {
-    throw new Error("maxBytes must be a positive number");
-  }
-
-  const absoluteHandoffPath = resolve(cwd, handoffPath);
-  validateTransferFile(absoluteHandoffPath, maxBytes);
-  const handoffContent = readFileSync(absoluteHandoffPath, "utf8").trim();
-
-  const stagedHandoffPath = toRemotePath(
-    remoteStageRoot,
-    `handoff/${basename(absoluteHandoffPath)}`,
-  );
-  const transfers = [
-    {
-      localPath: absoluteHandoffPath,
-      remotePath: stagedHandoffPath,
-      type: "handoff",
-    },
-  ];
-
-  const tokens = extractExplicitFileTokens(handoffContent);
-  if (tokens.length > maxReferenceFiles) {
-    throw new Error(
-      `too many referenced files: ${tokens.length} (max ${maxReferenceFiles})`,
-    );
-  }
-
-  const stagedByLocalPath = new Map();
-  const replacements = [];
-  let fileIndex = 0;
-
-  for (const token of tokens) {
-    const resolvedPath = resolveReferencePath(token, absoluteHandoffPath, cwd);
-    validateTransferFile(resolvedPath, maxBytes);
-
-    if (!stagedByLocalPath.has(resolvedPath)) {
-      fileIndex += 1;
-      const stagedPath = toRemotePath(
-        remoteStageRoot,
-        `refs/${String(fileIndex).padStart(2, "0")}-${basename(resolvedPath)}`,
-      );
-      stagedByLocalPath.set(resolvedPath, stagedPath);
-      transfers.push({
-        localPath: resolvedPath,
-        remotePath: stagedPath,
-        type: "reference",
-      });
-    }
-
-    replacements.push({
-      token,
-      stagedPath: stagedByLocalPath.get(resolvedPath),
-    });
-  }
-
-  const replacementEntries = Array.from(
-    replacements
-      .reduce((map, entry) => map.set(entry.token, entry.stagedPath), new Map())
-      .entries(),
-  ).sort((a, b) => b[0].length - a[0].length);
-
-  let rewrittenHandoff = handoffContent;
-  for (const [token, stagedPath] of replacementEntries) {
-    rewrittenHandoff = rewrittenHandoff.split(token).join(stagedPath);
-  }
-
-  const prefix = `Staged handoff file: ${stagedHandoffPath}`;
-  let prompt = rewrittenHandoff ? `${prefix}\n\n${rewrittenHandoff}` : prefix;
-
-  if (userPrompt) {
-    prompt = `${prompt}\n\n---\n\n${userPrompt}`;
-  }
-
-  return {
-    prompt,
-    replacements: replacementEntries.map(([token, stagedPath]) => ({
-      stagedPath,
-      token,
-    })),
-    stagedHandoffPath,
-    transfers,
-  };
-}

package/scripts/lib/session-presence.mjs

@@ -1,151 +0,0 @@
-// Codex와 Antigravity 세션 hook이 공유하는 presence 기록 함수.
-import { execFileSync } from "node:child_process";
-import { join } from "node:path";
-import { resolveRoleControlSnapshot } from "../../hub/lib/cto-env.mjs";
-
-function parseStartPayload(stdinData) {
-  try {
-    const raw = typeof stdinData === "string" ? stdinData : "";
-    return raw.trim() ? JSON.parse(raw) : {};
-  } catch {
-    return {};
-  }
-}
-
-function inferParticipantCli(payload) {
-  const direct = String(
-    payload?.actor_cli || payload?.cli || payload?.actor?.cli || "",
-  )
-    .trim()
-    .toLowerCase();
-  if (direct) return direct;
-
-  const eventName = String(payload?.hook_event_name || "").trim();
-  if (eventName === "SessionStart") return "claude";
-  if (eventName.toLowerCase().replace(/-/g, "_") === "session_start") {
-    return "codex";
-  }
-  return "participant";
-}
-
-async function defaultAppendParticipantCtoEvent(lakeRoot, event) {
-  const { appendCtoEvent } = await import("../../cto/events.mjs");
-  return appendCtoEvent(lakeRoot, event, {
-    lockRetries: 1,
-    lockRetryDelayMs: 0,
-  });
-}
-
-async function defaultResolveParticipantLakeRoot(cwd) {
-  const { resolveLakeRootDir } = await import("../../cto/lake-root.mjs");
-  const projectRoot = resolveLakeRootDir(cwd, {
-    execFileSync: (cmd, args, options = {}) =>
-      execFileSync(cmd, args, {
-        ...options,
-        timeout: 500,
-        killSignal: "SIGKILL",
-      }),
-  });
-  return {
-    projectRoot,
-    lakeRoot: projectRoot ? join(projectRoot, ".triflux", "lake") : "",
-  };
-}
-
-/** 참가 세션의 시작 이벤트만 기록한다. */
-export async function emitParticipantSessionStarted(stdinData, seams = {}) {
-  try {
-    if (
-      !resolveRoleControlSnapshot(seams.env || process.env).auto_collect_enabled
-    ) {
-      return null;
-    }
-    const payload = parseStartPayload(stdinData);
-    const sessionId = String(payload?.session_id || "").trim();
-    if (!sessionId) return null;
-    const cwd = typeof payload?.cwd === "string" ? payload.cwd : process.cwd();
-    const resolveLakeRoot =
-      seams.resolveLakeRoot || defaultResolveParticipantLakeRoot;
-    const resolved = await resolveLakeRoot(cwd);
-    const projectRoot =
-      typeof resolved === "string"
-        ? resolved
-        : String(resolved?.projectRoot || "");
-    const lakeRoot =
-      typeof resolved === "string"
-        ? join(resolved, ".triflux", "lake")
-        : String(resolved?.lakeRoot || "");
-    if (!lakeRoot) return null;
-
-    const event = {
-      event: "session_started",
-      source: "tfx_participant_hook",
-      session_id: sessionId,
-      project_root: projectRoot || cwd,
-      worktree_path: cwd,
-      branch: typeof payload?.branch === "string" ? payload.branch : "",
-      status: "active",
-      actor: {
-        cli: inferParticipantCli(payload),
-        session_id: sessionId,
-        host: typeof payload?.host === "string" ? payload.host : "local",
-      },
-      summary: `${inferParticipantCli(payload)} session_started ${sessionId}`,
-      now: seams.now,
-    };
-
-    const append = seams.ctoAppend || defaultAppendParticipantCtoEvent;
-    return await append(lakeRoot, event);
-  } catch {
-    return null;
-  }
-}
-
-function readAncestorCommands(pid = process.ppid, maxDepth = 6) {
-  if (process.platform === "win32") return [];
-  const commands = [];
-  let currentPid = Number(pid);
-  for (let depth = 0; depth < maxDepth; depth++) {
-    if (!Number.isInteger(currentPid) || currentPid <= 1) break;
-    try {
-      const output = execFileSync(
-        "ps",
-        ["-o", "ppid=", "-o", "command=", "-p", String(currentPid)],
-        {
-          encoding: "utf8",
-          timeout: 200,
-          windowsHide: true,
-        },
-      ).trim();
-      const match = output.match(/^(\d+)\s+([\s\S]+)$/);
-      if (!match) break;
-      commands.push(match[2]);
-      currentPid = Number(match[1]);
-    } catch {
-      break;
-    }
-  }
-  return commands;
-}
-
-function commandUsesClaudePrintMode(command) {
-  return /\bclaude(?:\s+\S+)*\s+(?:--print|-p)(?:\s|=|$)/u.test(
-    String(command || ""),
-  );
-}
-
-export function shouldSkipInteractiveRegistration(payload, seams = {}) {
-  const declaredKind = String(
-    payload?.sessionKind || payload?.session_kind || "",
-  )
-    .trim()
-    .toLowerCase();
-  if (declaredKind === "headless") return true;
-
-  const ancestorCommands = Array.isArray(seams.ancestorCommands)
-    ? seams.ancestorCommands
-    : readAncestorCommands(seams.parentPid);
-  return ancestorCommands.some((command) =>
-    commandUsesClaudePrintMode(command),
-  );
-}