@triflux/core 10.88.1 → 10.88.3

package/hub/lib/jev-addon.mjs

@@ -1,6 +1,6 @@
 // hub/lib/jev-addon.mjs
 // Opt-in Jev (System One) 판단 애드온.
-// JEV_API_KEY / TYPESAFE_API_KEY 환경변수 또는 jev CLI(TFX_JEV=1)가 있을 때만 동작하고,
+// 환경변수, 명시 CLI 또는 host 설정으로 활성화하며,
 // 설정이 없거나 호출이 실패하면 항상 null을 반환해 기존 결정론적 로직을 그대로 유지한다.
 
 import { execFile } from "node:child_process";
@@ -9,6 +9,7 @@ import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { promisify } from "node:util";
 import { whichCommand } from "../platform.mjs";
+import { readJevHostApiKey, readJevHostConfig } from "./jev-host-config.mjs";
 
 const execFileAsync = promisify(execFile);
 
@@ -41,7 +42,12 @@ function isExplicitlyEnabled(env = process.env) {
 
 export function resolveJevApiKey(env = process.env) {
   const key = env.JEV_API_KEY || env.TYPESAFE_API_KEY || "";
-  return String(key).trim() || null;
+  return (
+    String(key).trim() ||
+    (isExplicitlyDisabled(env) || resolveJevCliBin(env)
+      ? null
+      : readJevHostApiKey(env))
+  );
 }
 
 export function resolveJevCliBin(env = process.env) {
@@ -75,6 +81,8 @@ function isDirectEnvObject(obj) {
     return false;
   }
   return (
+    "HOME" in obj ||
+    "XDG_CONFIG_HOME" in obj ||
     "TFX_JEV" in obj ||
     "JEV_API_KEY" in obj ||
     "TYPESAFE_API_KEY" in obj ||
@@ -102,8 +110,9 @@ export function isJevEnabled(options = {}) {
   ) {
     return true;
   }
-  if (resolveJevApiKey(env)) return true;
+  if (String(env.JEV_API_KEY || env.TYPESAFE_API_KEY || "").trim()) return true;
   if (resolveJevCliBin(env)) return true;
+  if (readJevHostConfig(env)) return true;
   return false;
 }
 

package/hub/lib/jev-host-config.mjs

@@ -0,0 +1,76 @@
+import { closeSync, constants, fstatSync, openSync, readSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join } from "node:path";
+
+const MAX_FILE_BYTES = 64 * 1024;
+
+function readConfigFile(path, privateFile = false) {
+  let fd;
+  try {
+    fd = openSync(
+      path,
+      constants.O_RDONLY |
+        (constants.O_NOFOLLOW || 0) |
+        (constants.O_NONBLOCK || 0),
+    );
+    const stat = fstatSync(fd);
+    if (!stat.isFile() || stat.size > MAX_FILE_BYTES) return null;
+    if (typeof process.getuid !== "function" || stat.uid !== process.getuid())
+      return null;
+    if (
+      privateFile ? (stat.mode & 0o7777) !== 0o600 : (stat.mode & 0o022) !== 0
+    )
+      return null;
+    const buffer = Buffer.alloc(MAX_FILE_BYTES + 1);
+    const size = readSync(fd, buffer, 0, buffer.length, 0);
+    return size <= MAX_FILE_BYTES ? buffer.toString("utf8", 0, size) : null;
+  } catch {
+    return null;
+  } finally {
+    if (fd !== undefined) closeSync(fd);
+  }
+}
+
+export function readJevHostConfig(env = process.env) {
+  // 명시 env fixture는 주입한 HOME/XDG만 사용한다. 빈 객체는 실제 홈을 읽지 않는다.
+  const configHome =
+    env.XDG_CONFIG_HOME ||
+    (env.HOME
+      ? join(env.HOME, ".config")
+      : env === process.env
+        ? join(homedir(), ".config")
+        : null);
+  if (!configHome || !isAbsolute(configHome)) return null;
+  try {
+    const config = JSON.parse(
+      readConfigFile(join(configHome, "triflux", "jev.json")),
+    );
+    return config?.enabled === true ? config : null;
+  } catch {
+    return null;
+  }
+}
+
+export function readJevHostApiKey(env = process.env) {
+  const config = readJevHostConfig(env);
+  if (typeof config?.apiKeyFile !== "string" || !isAbsolute(config.apiKeyFile))
+    return null;
+  const text = readConfigFile(config.apiKeyFile, true);
+  if (text == null) return null;
+  const keys = {};
+  for (const line of text.split(/\r?\n/)) {
+    const assignment = line.match(
+      /^\s*(?:export\s+)?(JEV_API_KEY|TYPESAFE_API_KEY)\s*=(.*)$/,
+    );
+    if (!assignment) continue;
+    const [, name, raw] = assignment;
+    const literal = raw
+      .trim()
+      .match(/^(?:'([^']*)'|"([^"]*)"|([^\s'";#]+))\s*(?:#.*)?$/);
+    if (!literal || name in keys) return null;
+    const value = (literal[1] ?? literal[2] ?? literal[3]).trim();
+    if (!value || /[$`\\\x00-\x1f\x7f]/.test(value)) return null;
+    keys[name] = value;
+  }
+  return keys.JEV_API_KEY || keys.TYPESAFE_API_KEY || null;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@triflux/core",
-  "version": "10.88.1",
+  "version": "10.88.3",
   "description": "triflux core — CLI routing, adapters. Zero native dependencies.",
   "type": "module",
   "main": "hub/index.mjs",