@triflux/remote 10.41.1 → 10.43.0

package/hub/team/uds-orchestrator.mjs

@@ -6,6 +6,11 @@ import { tmpdir } from "node:os";
 import { join as pathJoin } from "node:path";
 
 import { execute as defaultExecuteCodex } from "@triflux/core/hub/codex-adapter.mjs";
+import {
+  createActivityLifecycle,
+  isActivityLifecycleEnabled,
+  resolveHardCeilingMs,
+} from "@triflux/core/hub/lib/worker-lifecycle.mjs";
 import { JsonRpcWsUdsClient } from "../workers/lib/jsonrpc-ws-uds.mjs";
 import {
   buildClaudePromptDispatchPayload,
@@ -141,8 +146,11 @@ export async function runUdsOrchestration({ mode, task, claude, codex } = {}) {
   throw new Error(`Unsupported UDS orchestration mode: ${selectedMode}`);
 }
 
-function scanMessage(message, marker, state) {
+function scanMessage(message, marker, state, onActivity = () => {}) {
   const scan = (text) => {
+    // Only stream/snapshot content advances liveness. "state" heartbeats do
+    // not keep an otherwise silent turn alive forever.
+    onActivity();
     state.streamBytes += Buffer.byteLength(text);
     state.stream.push(text);
     if (/⏺/.test(stripAnsi(text))) state.assistantStarted = true;
@@ -167,7 +175,10 @@ export function subscribeClaudeUntilMarker(
   controlSock,
   short,
   marker,
-  { timeoutMs = DEFAULT_TIMEOUT_MS } = {},
+  {
+    timeoutMs = DEFAULT_TIMEOUT_MS,
+    maxTurnMs = Math.min(resolveHardCeilingMs(), 15 * 60_000),
+  } = {},
 ) {
   return new Promise((resolve) => {
     const socket = net.connect(controlSock);
@@ -185,7 +196,23 @@ export function subscribeClaudeUntilMarker(
       stream: [],
       assistantStarted: false,
     };
-    const timer = setTimeout(() => finish({ timedOut: true }), timeoutMs);
+    const activityEnabled = isActivityLifecycleEnabled();
+    const lifecycle = createActivityLifecycle({
+      enabled: activityEnabled,
+      interventionMs: timeoutMs,
+      hardCeilingMs: maxTurnMs,
+    });
+    let timer = null;
+
+    const armTimer = () => {
+      timer = setTimeout(async () => {
+        if (!activityEnabled) return finish({ timedOut: true });
+        const reason = await lifecycle.check();
+        if (reason) return finish({ timedOut: true, timeoutReason: reason });
+        armTimer();
+      }, timeoutMs);
+    };
+    armTimer();
 
     function finish(extra = {}) {
       if (finished) return;
@@ -209,7 +236,9 @@ export function subscribeClaudeUntilMarker(
         data = data.slice(index + 1);
         if (!line) continue;
         try {
-          scanMessage(JSON.parse(line), marker, state);
+          scanMessage(JSON.parse(line), marker, state, () =>
+            lifecycle.observe(),
+          );
         } catch (_error) {
           state.messageCount += 1;
         }
@@ -263,6 +292,7 @@ export function createClaudeUdsEndpoint({
   daemonPaths = deriveClaudeDaemonPaths(),
   cwd = process.cwd(),
   timeoutMs = DEFAULT_TIMEOUT_MS,
+  maxTurnMs = Math.min(resolveHardCeilingMs(), 15 * 60_000),
   markerFactory = () =>
     `TFX_UDS_ORCH_DONE_${crypto.randomBytes(6).toString("hex")}`,
   shortFactory,
@@ -299,7 +329,7 @@ export function createClaudeUdsEndpoint({
         sock,
         payload.short,
         marker,
-        { timeoutMs },
+        { timeoutMs, maxTurnMs },
       );
       await teardownDaemonJob({
         controlSock: sock,
@@ -441,6 +471,7 @@ export function createCodexAppServerUdsEndpoint({
   cwd = process.cwd(),
   model,
   timeoutMs = DEFAULT_CODEX_APP_SERVER_UDS_TIMEOUT_MS,
+  maxTurnMs = Math.min(resolveHardCeilingMs(), 15 * 60_000),
   bootstrapTimeoutMs = DEFAULT_CODEX_APP_SERVER_UDS_BOOTSTRAP_MS,
   clientFactory = (opts) => new JsonRpcWsUdsClient(opts),
   spawnFn = spawn,
@@ -536,10 +567,12 @@ export function createCodexAppServerUdsEndpoint({
         let offDelta = () => {};
         let offError = () => {};
         let offDone = () => {};
+        let offActivity = () => {};
         const cleanup = () => {
           offDelta();
           offError();
           offDone();
+          offActivity();
         };
         const completion = new Promise((resolve) => {
           offDelta = client.onNotification(
@@ -566,12 +599,32 @@ export function createCodexAppServerUdsEndpoint({
           { threadId, input: [{ type: "text", text: prompt }] },
           timeoutMs,
         );
+        const activityEnabled = isActivityLifecycleEnabled();
+        const lifecycle = createActivityLifecycle({
+          enabled: activityEnabled,
+          interventionMs: timeoutMs,
+          hardCeilingMs: maxTurnMs,
+        });
+        offActivity = client.onNotification("*", () => lifecycle.observe());
         let timeoutHandle = null;
         const timeoutPromise = new Promise((resolve) => {
-          timeoutHandle = setTimeout(() => {
-            cleanup();
-            resolve({ status: "timeout" });
-          }, timeoutMs);
+          const arm = () => {
+            timeoutHandle = setTimeout(async () => {
+              if (!activityEnabled) {
+                cleanup();
+                resolve({ status: "timeout" });
+                return;
+              }
+              const reason = await lifecycle.check();
+              if (reason) {
+                cleanup();
+                resolve({ status: "timeout", reason });
+                return;
+              }
+              arm();
+            }, timeoutMs);
+          };
+          arm();
         });
         let settled;
         try {

package/hub/tools.mjs

@@ -10,6 +10,7 @@ import {
 } from "@triflux/core/hub/pipeline/state.mjs";
 import { sendInputToConductorSession } from "./team/conductor-registry.mjs";
 import { getTeamBridge } from "@triflux/core/hub/team-bridge.mjs";
+import { DEFAULT_ASSIGN_TIMEOUT_MS, DEFAULT_ASSIGN_TTL_MS, DEFAULT_HANDOFF_TTL_MS } from "@triflux/core/hub/lib/timeout-defaults.mjs";
 
 const TEAM_BRIDGE_NOT_REGISTERED = "bridge_not_registered";
 
@@ -155,10 +156,7 @@ export function createTools(store, router, hitl, pipe = null) {
           },
         },
       },
-      handler: wrap("REGISTER_FAILED", (args) => {
-        const data = router.registerAgent(args);
-        return { ok: true, data };
-      }),
+      handler: wrap("REGISTER_FAILED", (args) => router.registerAgent(args)),
     },
 
     // ── 2. status ──
@@ -362,7 +360,7 @@ export function createTools(store, router, hitl, pipe = null) {
             type: "integer",
             minimum: 1000,
             maximum: 86400000,
-            default: 600000,
+            default: DEFAULT_HANDOFF_TTL_MS,
           },
           trace_id: { type: "string" },
           correlation_id: { type: "string" },
@@ -399,13 +397,13 @@ export function createTools(store, router, hitl, pipe = null) {
             type: "integer",
             minimum: 1000,
             maximum: 86400000,
-            default: 600000,
+            default: DEFAULT_ASSIGN_TTL_MS,
           },
           timeout_ms: {
             type: "integer",
             minimum: 1000,
             maximum: 86400000,
-            default: 600000,
+            default: DEFAULT_ASSIGN_TIMEOUT_MS,
           },
           max_retries: { type: "integer", minimum: 0, maximum: 20, default: 0 },
           trace_id: { type: "string" },

package/hub/workers/codex-app-server-worker.mjs

@@ -12,6 +12,12 @@ import { createHash, randomUUID } from "node:crypto";
 import { isAbsolute } from "node:path";
 import process from "node:process";
 
+import {
+  createActivityLifecycle,
+  isActivityLifecycleEnabled,
+  resolveHardCeilingMs,
+  resolveStallInterventionMs,
+} from "@triflux/core/hub/lib/worker-lifecycle.mjs";
 import {
   JsonRpcProtocolError,
   JsonRpcStdioClient,
@@ -25,6 +31,7 @@ export const CODEX_APP_SERVER_TRANSPORT_EXIT_CODE = 70;
 export const CODEX_APP_SERVER_TIMEOUT_EXIT_CODE = 124;
 
 export const DEFAULT_CODEX_APP_SERVER_BOOTSTRAP_TIMEOUT_MS = 10_000;
+// Legacy wall-clock default retained for TFX_ACTIVITY_LIFECYCLE=0 compatibility.
 export const DEFAULT_CODEX_APP_SERVER_EXECUTION_TIMEOUT_MS = 10 * 60 * 1000;
 export const DEFAULT_UNKNOWN_METHOD_WARN_THRESHOLD = 5;
 /**
@@ -327,6 +334,7 @@ export class CodexAppServerWorker {
    * @param {number} [options.unknownMethodWarnThreshold]
    * @param {(method: string) => void} [options.onUnknownMethod]
    * @param {(label: string, payload: object) => void} [options.warn]
+   * @param {(context: object) => Promise<boolean|string>|boolean|string} [options.interveneFn]
    */
   constructor(options = {}) {
     this.command = options.command || process.env.CODEX_BIN || "codex";
@@ -370,6 +378,8 @@ export class CodexAppServerWorker {
       typeof options.onUnknownMethod === "function"
         ? options.onUnknownMethod
         : null;
+    this._interveneFn =
+      typeof options.interveneFn === "function" ? options.interveneFn : null;
 
     /** @type {import('node:child_process').ChildProcess | null} */
     this.child = null;
@@ -643,6 +653,8 @@ export class CodexAppServerWorker {
     }
 
     const outputParts = [];
+    let lastActivityAt = Date.now();
+    let activityLifecycle = null;
     const unknownMethodsThisTurn = new Set();
     let threadId =
       typeof opts.threadId === "string" && opts.threadId ? opts.threadId : null;
@@ -714,6 +726,10 @@ export class CodexAppServerWorker {
       };
 
       const handleNotification = (method, params) => {
+        // Any notification, including unknown and opt-out methods, proves the
+        // transport is live. Content filtering below remains unchanged.
+        lastActivityAt = Date.now();
+        activityLifecycle?.observe();
         // AC5 defense: opt-out should already be filtered server-side.
         if (OPT_OUT_METHODS.includes(method)) return;
 
@@ -854,16 +870,40 @@ export class CodexAppServerWorker {
         };
       }
 
-      // Timeout: SIGTERM + partial WorkerResult (AC8)
+      // In activity mode timeoutMs is the inactivity window. Notifications
+      // re-arm the lifecycle; hardCeilingMs remains the leak-prevention bound.
+      const activityEnabled = isActivityLifecycleEnabled();
       const timeoutMs = Number.isFinite(opts.timeoutMs)
         ? opts.timeoutMs
-        : DEFAULT_CODEX_APP_SERVER_EXECUTION_TIMEOUT_MS;
+        : activityEnabled
+          ? resolveStallInterventionMs()
+          : DEFAULT_CODEX_APP_SERVER_EXECUTION_TIMEOUT_MS;
+      const hardCeilingMs = Number.isFinite(opts.hardCeilingMs)
+        ? opts.hardCeilingMs
+        : resolveHardCeilingMs();
       // Capture current child so a stale timer (post-result) cannot SIGTERM a
       // later reused worker's child process.
       const capturedChild = this.child;
+      activityLifecycle = createActivityLifecycle({
+        enabled: activityEnabled,
+        interventionMs: timeoutMs,
+        hardCeilingMs,
+        onIntervene: async (context) => {
+          if (this._interveneFn) {
+            const result = await this._interveneFn({
+              threadId,
+              client,
+              lastActivityAt,
+              ...context,
+            });
+            return result === true || result === "resolved";
+          }
+          return false;
+        },
+      });
       const timeoutPromise = new Promise((resolve) => {
-        timer = setTimeout(() => {
-          this._warn("execution timeout", { timeoutMs });
+        const fire = (reason) => {
+          this._warn("execution timeout", { timeoutMs, reason });
           try {
             capturedChild?.kill?.("SIGTERM");
           } catch {}
@@ -878,7 +918,16 @@ export class CodexAppServerWorker {
             ),
             raw: null,
           });
-        }, timeoutMs);
+        };
+        const arm = () => {
+          timer = setTimeout(async () => {
+            if (!activityEnabled) return fire("timeout");
+            const reason = await activityLifecycle.check({ threadId, client });
+            if (reason) return fire(reason);
+            arm();
+          }, timeoutMs);
+        };
+        arm();
       });
 
       const result = await Promise.race([resultPromise, timeoutPromise]);

package/hub/workers/codex-mcp.mjs

@@ -119,7 +119,7 @@ function readTomlScalar(raw, key) {
 }
 
 /**
- * Resolve a Codex effort profile name (e.g. "gpt55_high") to its concrete
+ * Resolve a Codex effort profile name (e.g. "gpt56_terra_high") to its concrete
  * `model` + reasoning effort. SSOT = the per-profile file written by
  * `tfx setup` at `~/.codex/<profile>.config.toml`. Falls back to deriving the
  * effort from the `<...>_<effort>` naming convention when the file is absent.

package/hub/workers/delegator-mcp.mjs

@@ -64,24 +64,24 @@ const AGENT_TIMEOUT_SEC = Object.freeze({
 });
 
 const CODEX_PROFILE_BY_AGENT = Object.freeze({
-  executor: "gpt55_high",
-  "build-fixer": "gpt55_low",
-  debugger: "gpt55_xhigh",
-  "deep-executor": "gpt55_xhigh",
-  architect: "gpt55_xhigh",
-  planner: "gpt55_xhigh",
-  critic: "gpt55_xhigh",
-  analyst: "gpt55_xhigh",
-  "code-reviewer": "gpt55_high",
-  "security-reviewer": "gpt55_xhigh",
-  "quality-reviewer": "gpt55_high",
-  scientist: "gpt55_high",
-  "scientist-deep": "gpt55_xhigh",
-  "document-specialist": "gpt55_high",
-  verifier: "gpt55_high",
-  designer: "gpt55_xhigh",
-  writer: "gpt55_low",
-  spark: "gpt55_low",
+  executor: "gpt56_terra_high",
+  "build-fixer": "gpt56_luna_low",
+  debugger: "gpt56_sol_xhigh",
+  "deep-executor": "gpt56_sol_xhigh",
+  architect: "gpt56_sol_xhigh",
+  planner: "gpt56_sol_xhigh",
+  critic: "gpt56_sol_xhigh",
+  analyst: "gpt56_sol_xhigh",
+  "code-reviewer": "gpt56_terra_high",
+  "security-reviewer": "gpt56_sol_xhigh",
+  "quality-reviewer": "gpt56_terra_high",
+  scientist: "gpt56_terra_high",
+  "scientist-deep": "gpt56_sol_xhigh",
+  "document-specialist": "gpt56_terra_high",
+  verifier: "gpt56_terra_high",
+  designer: "gpt56_sol_xhigh",
+  writer: "gpt56_luna_low",
+  spark: "gpt56_luna_low",
 });
 
 const REVIEW_INSTRUCTION_BY_AGENT = Object.freeze({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@triflux/remote",
-  "version": "10.41.1",
+  "version": "10.43.0",
   "description": "triflux remote — team mode, psmux, MCP workers, SQLite store.",
   "type": "module",
   "main": "hub/index.mjs",

package/scripts/lib/cli-agy.mjs

@@ -5,6 +5,7 @@
 //
 // 출처: scripts/tfx-route.sh route_agent() L1052-L1059, run_codex_exec() L2036-L2046.
 //        .claude/rules/tfx-update-logic.md Antigravity CLI 1.0.0 정밀 sanity matrix.
+// timeoutSec은 lane 예상 소요 시간(advisory)이다. hard ceiling 집행은 Bash route가 소유한다.
 
 export const id = "agy";
 export const cliType = "antigravity";

package/scripts/lib/cli-claude.mjs

@@ -5,6 +5,7 @@
 //
 // 출처: scripts/tfx-route.sh route_agent() L1062-L1063 (explore|claude),
 //        L1196-L1203 (TFX_CLI_MODE=gemini fallback), TFX_VERIFIER_OVERRIDE=claude.
+// timeoutSec은 lane 예상 소요 시간(advisory)이다. hard ceiling 집행은 Bash route가 소유한다.
 
 export const id = "claude";
 export const cliType = "claude-native";

package/scripts/lib/cli-codex.mjs

@@ -5,6 +5,7 @@
 //
 // 진입점: tfx-route.mjs → selectAdapter("codex") → plan({...}).
 // 출처: scripts/tfx-route.sh route_agent() L1001-L1079 case 문 미러.
+// timeoutSec은 lane 예상 소요 시간(advisory)이다. hard ceiling 집행은 Bash route가 소유한다.
 
 export const id = "codex";
 export const cliType = "codex";
@@ -12,84 +13,84 @@ export const command = "codex";
 
 const AGENT_PROFILES = {
   executor: {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1080,
     runMode: "fg",
     opusOversight: false,
     mcpHint: "implement",
   },
   codex: {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1080,
     runMode: "fg",
     opusOversight: false,
     mcpHint: "implement",
   },
   "build-fixer": {
-    profile: "gpt55_low",
+    profile: "gpt56_luna_low",
     timeoutSec: 540,
     runMode: "fg",
     opusOversight: false,
     mcpHint: "implement",
   },
   cleanup: {
-    profile: "gpt55_med",
+    profile: "gpt56_terra_med",
     timeoutSec: 540,
     runMode: "fg",
     opusOversight: false,
     mcpHint: "implement",
   },
   deslop: {
-    profile: "gpt55_med",
+    profile: "gpt56_terra_med",
     timeoutSec: 540,
     runMode: "fg",
     opusOversight: false,
     mcpHint: "implement",
   },
   debugger: {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 900,
     runMode: "bg",
     opusOversight: false,
     mcpHint: "implement",
   },
   "deep-executor": {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 3600,
     runMode: "bg",
     opusOversight: true,
     mcpHint: "implement",
   },
   architect: {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 3600,
     runMode: "bg",
     opusOversight: true,
     mcpHint: "analyze",
   },
   critic: {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 3600,
     runMode: "bg",
     opusOversight: true,
     mcpHint: "analyze",
   },
   planner: {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 3600,
     runMode: "fg",
     opusOversight: true,
     mcpHint: "analyze",
   },
   analyst: {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 3600,
     runMode: "fg",
     opusOversight: true,
     mcpHint: "analyze",
   },
   "code-reviewer": {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1800,
     runMode: "bg",
     opusOversight: false,
@@ -97,7 +98,7 @@ const AGENT_PROFILES = {
     subcommand: "review",
   },
   "quality-reviewer": {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1800,
     runMode: "bg",
     opusOversight: false,
@@ -105,7 +106,7 @@ const AGENT_PROFILES = {
     subcommand: "review",
   },
   "security-reviewer": {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 1800,
     runMode: "bg",
     opusOversight: true,
@@ -113,28 +114,28 @@ const AGENT_PROFILES = {
     subcommand: "review",
   },
   scientist: {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1440,
     runMode: "bg",
     opusOversight: false,
     mcpHint: "analyze",
   },
   "document-specialist": {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1440,
     runMode: "bg",
     opusOversight: false,
     mcpHint: "analyze",
   },
   "scientist-deep": {
-    profile: "gpt55_xhigh",
+    profile: "gpt56_sol_xhigh",
     timeoutSec: 3600,
     runMode: "bg",
     opusOversight: false,
     mcpHint: "analyze",
   },
   verifier: {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1200,
     runMode: "fg",
     opusOversight: false,
@@ -142,14 +143,14 @@ const AGENT_PROFILES = {
     subcommand: "review",
   },
   "test-engineer": {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1200,
     runMode: "bg",
     opusOversight: false,
     mcpHint: "implement",
   },
   "qa-tester": {
-    profile: "gpt55_high",
+    profile: "gpt56_terra_high",
     timeoutSec: 1200,
     runMode: "bg",
     opusOversight: false,
@@ -157,7 +158,7 @@ const AGENT_PROFILES = {
     subcommand: "review",
   },
   spark: {
-    profile: "gpt55_low",
+    profile: "gpt56_luna_low",
     timeoutSec: 180,
     runMode: "fg",
     opusOversight: false,

package/scripts/lib/codex-profile-config.mjs

@@ -29,7 +29,7 @@ function readProfileScalar(raw, key) {
 }
 
 /**
- * Resolve a Codex effort profile name (e.g. "gpt55_high") to the `-c key=value`
+ * Resolve a Codex effort profile name (e.g. "gpt56_terra_high") to the `-c key=value`
  * config overrides that `codex exec` accepts, so the headless CLI lanes can
  * select a profile WITHOUT `codex exec --profile <name>`. codex 0.134+ rejects
  * `--profile X` whenever config.toml still contains an inline `[profiles.X]`
@@ -47,7 +47,7 @@ function readProfileScalar(raw, key) {
  *
  * @param {string} profileName
  * @param {{ codexHome?: string }} [opts]
- * @returns {string[]} e.g. ['model="gpt-5.5"', 'model_reasoning_effort="high"']
+ * @returns {string[]} e.g. ['model="gpt-5.6-terra"', 'model_reasoning_effort="high"']
  */
 export function codexProfileConfigOverrides(profileName, opts = {}) {
   if (typeof profileName !== "string" || !profileName) return [];