@triflux/remote 10.43.0 → 10.44.0

package/hub/team/conductor.mjs

@@ -19,6 +19,8 @@ import {
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { createRegistry } from "@triflux/core/mesh/mesh-registry.mjs";
+import { resolveNestedCodexAgentProfile } from "../../scripts/lib/cli-codex.mjs";
+import { codexProfileConfigOverrides } from "../../scripts/lib/codex-profile-config.mjs";
 import { broker } from "@triflux/core/hub/account-broker.mjs";
 import { runPreflight as runCodexPreflight } from "@triflux/core/hub/codex-preflight.mjs";
 import {
@@ -608,7 +610,9 @@ export function createConductor(opts = {}) {
       cli: session.config.agent,
       prompt: session.config.prompt,
       profile: session.config.profile,
+      role: session.config.role,
       model: session.config.model,
+      env: session.config.env,
       mcpServers: session.config.mcpServers,
       excludeMcpServers,
       resolveCommand: opts.deps?.resolveCliExecutable,
@@ -902,8 +906,25 @@ export function createConductor(opts = {}) {
     } else if (agent === "gemini") {
       remoteBin = "gemini -y";
     } else {
-      remoteBin =
-        "codex exec -s danger-full-access --dangerously-bypass-approvals-and-sandbox";
+      const codexHome = session.config.env?.CODEX_HOME;
+      const profile = resolveNestedCodexAgentProfile(
+        session.config.role || "executor",
+        {
+          profileOverride: session.config.profile ?? "auto",
+          globalProfile:
+            session.config.env?.TFX_CODEX_PROFILE ??
+            process.env.TFX_CODEX_PROFILE,
+          codexHome,
+        },
+      );
+      const configArgs = codexProfileConfigOverrides(profile, {
+        codexHome,
+        disallowUltra: true,
+        enforceCanonicalProfile: true,
+      })
+        .map((override) => `-c '${override.replace(/'/g, `'\\''`)}'`)
+        .join(" ");
+      remoteBin = `codex exec${configArgs ? ` ${configArgs}` : ""} -s danger-full-access --dangerously-bypass-approvals-and-sandbox`;
     }
 
     // prompt는 stdin으로 전달 — 셸 이스케이프 문제 완전 회피

package/hub/team/execution-mode.mjs

@@ -2,12 +2,7 @@
 
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, resolve as pathResolve } from "node:path";
-
-// scripts/lib is bundled into @triflux/remote itself (package.json files), so
-// import the local mirror relatively rather than via @triflux/core. The core
-// peer range (^10.0.0-alpha.1) could resolve to a build that predates this
-// export, which would fail at import time; the bundled copy is version-skew
-// safe and always carries the matching codexProfileConfigOverrides.
+import { resolveNestedCodexAgentProfile } from "../../scripts/lib/cli-codex.mjs";
 import { codexProfileConfigOverrides } from "../../scripts/lib/codex-profile-config.mjs";
 import { whichCommand } from "@triflux/core/hub/platform.mjs";
 
@@ -165,7 +160,17 @@ export function buildSpawnSpecForMode(mode, opts = {}) {
   // still contains an inline [profiles.X] table (which codex re-injects on
   // config rewrite). These go straight to spawn argv (shell: false), so push
   // the raw TOML-scalar overrides without shell-quoting.
-  for (const override of codexProfileConfigOverrides(opts.profile)) {
+  const codexHome = opts.env?.CODEX_HOME;
+  const codexProfile = resolveNestedCodexAgentProfile(opts.role || "executor", {
+    profileOverride: opts.profile ?? "auto",
+    globalProfile: opts.env?.TFX_CODEX_PROFILE ?? process.env.TFX_CODEX_PROFILE,
+    codexHome,
+  });
+  for (const override of codexProfileConfigOverrides(codexProfile, {
+    codexHome,
+    disallowUltra: true,
+    enforceCanonicalProfile: true,
+  })) {
     args.push("-c", override);
   }
   if (Array.isArray(opts.mcpServers)) {

package/hub/team/headless.mjs

@@ -20,6 +20,7 @@ import net from "node:net";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { resolveNestedCodexAgentProfile } from "../../scripts/lib/cli-codex.mjs";
 import { requestJson } from "@triflux/core/hub/bridge.mjs";
 import { escapePwshSingleQuoted } from "@triflux/core/hub/cli-adapter-base.mjs";
 import { getMaxSpawnPerSec } from "@triflux/core/hub/lib/spawn-trace.mjs";
@@ -42,15 +43,15 @@ import {
 import { startClaudeNativeBridge } from "./claude-native-bridge.mjs";
 import { removeClaudeSessionProjection } from "./claude-session-projection.mjs";
 import { resolveDashboardLayout } from "./dashboard-layout.mjs";
-import {
-  createFileActivitySource,
-  createInterventionLadder,
-} from "./intervention.mjs";
 import {
   formatHandoffForLead,
   HANDOFF_INSTRUCTION_SHORT,
   processHandoff,
 } from "./handoff.mjs";
+import {
+  createFileActivitySource,
+  createInterventionLadder,
+} from "./intervention.mjs";
 import {
   capturePsmuxPane,
   createPsmuxSession,
@@ -366,6 +367,14 @@ export function buildHeadlessCommand(cli, prompt, resultFile, opts = {}) {
   writeFileSync(promptFile, fullPrompt, "utf8");
   void IS_WINDOWS; // referenced for diagnostic guard chain below
 
+  const codexProfile =
+    resolvedCli === "codex"
+      ? resolveNestedCodexAgentProfile(opts.role || cli, {
+          profileOverride: opts.profile ?? "auto",
+          globalProfile: process.env.TFX_CODEX_PROFILE,
+          codexHome: process.env.CODEX_HOME,
+        })
+      : undefined;
   const backendCommand =
     resolvedCli === "antigravity"
       ? buildRouteBackedHeadlessCommand(resolvedCli, promptFile, resultFile, {
@@ -375,6 +384,10 @@ export function buildHeadlessCommand(cli, prompt, resultFile, opts = {}) {
       : getBackend(resolvedCli).buildArgs(fullPrompt, resultFile, {
           ...opts,
           model,
+          profile: codexProfile,
+          codexHome: process.env.CODEX_HOME,
+          disallowUltra: true,
+          enforceCanonicalProfile: true,
           promptFile,
         });
   const safeCwd =
@@ -571,7 +584,8 @@ export function createStallMonitor(paneId, resultFile, config, deps = {}) {
 
 function createHeadlessIntervention(dispatch, fallback) {
   return async (context) => {
-    if (typeof fallback === "function") return (await fallback(context)) === true;
+    if (typeof fallback === "function")
+      return (await fallback(context)) === true;
 
     const isDaemon = context.channel === "daemon";
     const readActivitySignature = isDaemon
@@ -606,6 +620,8 @@ function createHeadlessIntervention(dispatch, fallback) {
           },
       readActivitySignature,
       deps: {
+        // 이 트랙이 재실행 소유자다. pane 채널은 기존 completion wrapper를 다시
+        // dispatch하여 token/result 계약을 보존한다.
         resumeHandler: async () => {
           if (isDaemon || !dispatch.command) return { ok: false };
           const restarted = dispatchCommand(
@@ -631,6 +647,7 @@ export function createActivityPollGuard({
   const controller = new AbortController();
   let lastMtime = 0;
   let checking = false;
+
   const finishIfTimedOut = async () => {
     if (checking || controller.signal.aborted) return;
     checking = true;
@@ -640,6 +657,7 @@ export function createActivityPollGuard({
       checking = false;
     }
   };
+
   return Object.freeze({
     signal: controller.signal,
     observe(content) {
@@ -989,6 +1007,7 @@ async function dispatchProgressive(sessionName, assignments, opts = {}) {
         mcp: assignment.mcp,
         role: assignment.role,
         model: assignment.model,
+        profile: assignment.profile,
         cwd: assignment.cwd || assignment.workdir,
       },
     );
@@ -1071,6 +1090,7 @@ async function dispatchBatch(sessionName, assignments, opts = {}) {
           mcp: assignment.mcp,
           role: assignment.role,
           model: assignment.model,
+          profile: assignment.profile,
           cwd: assignment.cwd || assignment.workdir,
         },
       );
@@ -1134,6 +1154,7 @@ async function dispatchDaemonBatch(sessionName, assignments, opts = {}) {
           mcp: assignment.mcp,
           role: assignment.role,
           model: assignment.model,
+          profile: assignment.profile,
           cwd: assignment.cwd || assignment.workdir,
         },
       );
@@ -1306,12 +1327,11 @@ async function awaitAll(
             {
               pollInterval: stallOpts.pollInterval,
               stallTimeout: stallOpts.stallTimeout,
-              hardCeiling:
-                lifecycle?.enabled
-                  ? (stallOpts.hardCeiling ??
-                    stallOpts.completionTimeout ??
-                    lifecycle.hardCeilingMs)
-                  : (stallOpts.completionTimeout ?? timeoutSec * 1000),
+              hardCeiling: lifecycle?.enabled
+                ? (stallOpts.hardCeiling ??
+                  stallOpts.completionTimeout ??
+                  lifecycle.hardCeilingMs)
+                : (stallOpts.completionTimeout ?? timeoutSec * 1000),
               maxRestarts: stallOpts.maxRestarts,
               maxInterventions: stallOpts.maxInterventions,
               command: d.command,
@@ -1443,7 +1463,10 @@ export async function waitForDaemonCompletion(
     ? createActivityLifecycle({
         interventionMs: lifecycle.interventionMs,
         hardCeilingMs: lifecycle.hardCeilingMs,
-        onIntervene: createHeadlessIntervention(dispatch, lifecycle.onIntervene),
+        onIntervene: createHeadlessIntervention(
+          dispatch,
+          lifecycle.onIntervene,
+        ),
       })
     : null;
 
@@ -1873,11 +1896,24 @@ export async function runHeadless(sessionName, assignments, opts = {}) {
     const idx = parseInt(match[1], 10) - 1;
     const agentId = getHeadlessWorkerAgentId(sessionName, idx);
     const nowMs = Date.now();
-    if ((lastHubBeatByWorker.get(agentId) || 0) + HUB_ACTIVITY_MIN_INTERVAL_MS > nowMs) return;
+    if (
+      (lastHubBeatByWorker.get(agentId) || 0) + HUB_ACTIVITY_MIN_INTERVAL_MS >
+      nowMs
+    )
+      return;
     lastHubBeatByWorker.set(agentId, nowMs);
-    requestJson("/bridge/heartbeat", { method: "POST", body: { agent_id: agentId }, timeoutMs: 500 }).catch(() => {});
+    requestJson("/bridge/heartbeat", {
+      method: "POST",
+      body: { agent_id: agentId },
+      timeoutMs: 500,
+    }).catch(() => {});
     const assignJobId = normalizedAssignments[idx]?.assignJobId;
-    if (assignJobId) requestJson("/bridge/assign/result", { method: "POST", body: { job_id: assignJobId, worker_agent: agentId, status: "running" }, timeoutMs: 500 }).catch(() => {});
+    if (assignJobId)
+      requestJson("/bridge/assign/result", {
+        method: "POST",
+        body: { job_id: assignJobId, worker_agent: agentId, status: "running" },
+        timeoutMs: 500,
+      }).catch(() => {});
   };
 
   // onProgress 예외를 삼켜 실행 흐름 보호 (onPoll과 동일 패턴)

package/hub/team/intervention.mjs

@@ -5,11 +5,11 @@ import { statSync } from "node:fs";
 import { readdir, readlink } from "node:fs/promises";
 import { promisify } from "node:util";
 import { isPidAlive } from "@triflux/core/hub/lib/process-utils.mjs";
-import { killProcess } from "@triflux/core/hub/platform.mjs";
 import {
   resolveHardCeilingMs,
   resolveStallInterventionMs as resolveStallThresholdMs,
 } from "@triflux/core/hub/lib/timeout-defaults.mjs";
+import { killProcess } from "@triflux/core/hub/platform.mjs";
 
 export { resolveHardCeilingMs, resolveStallThresholdMs };
 

package/hub/team/notify.mjs

@@ -54,12 +54,17 @@ function normalizeEvent(event, defaults = {}) {
   });
 }
 
-function defaultChannelConfig(name, env) {
+function defaultChannelConfig(name, env, platform = process.platform) {
   switch (name) {
     case "bell":
-      return { enabled: true };
+      return { enabled: envFlag(env?.TRIFLUX_NOTIFY_BELL, true) };
     case "toast":
-      return { enabled: true };
+      return {
+        // macOS `osascript display notification` can surface Script Editor
+        // authorization/UI prompts. Keep it opt-in there; Windows keeps the
+        // historical toast default, and other platforms skip as unsupported.
+        enabled: envFlag(env?.TRIFLUX_NOTIFY_TOAST, platform !== "darwin"),
+      };
     case "webhook": {
       const url = String(env?.TRIFLUX_NOTIFY_WEBHOOK || "");
       return { enabled: Boolean(url), url };
@@ -69,8 +74,13 @@ function defaultChannelConfig(name, env) {
   }
 }
 
-function normalizeChannelConfig(name, value, env) {
-  const base = defaultChannelConfig(name, env);
+function envFlag(value, fallback) {
+  if (value === undefined || value === null || value === "") return fallback;
+  return !["0", "false", "no", "off"].includes(String(value).toLowerCase());
+}
+
+function normalizeChannelConfig(name, value, env, platform) {
+  const base = defaultChannelConfig(name, env, platform);
   const patch =
     typeof value === "boolean"
       ? { enabled: value }
@@ -103,16 +113,21 @@ function normalizeChannelConfig(name, value, env) {
   return freezeRecord(next);
 }
 
-function normalizeChannels(channels, env) {
+function normalizeChannels(channels, env, platform) {
   const source = channels && typeof channels === "object" ? channels : {};
   const normalized = {};
   for (const name of NOTIFY_CHANNELS) {
-    normalized[name] = normalizeChannelConfig(name, source[name], env);
+    normalized[name] = normalizeChannelConfig(
+      name,
+      source[name],
+      env,
+      platform,
+    );
   }
   return Object.freeze(normalized);
 }
 
-function updateChannelConfig(channels, channel, config, env) {
+function updateChannelConfig(channels, channel, config, env, platform) {
   if (!NOTIFY_CHANNELS.includes(channel)) {
     throw new TypeError(`Unknown notify channel: ${channel}`);
   }
@@ -126,6 +141,7 @@ function updateChannelConfig(channels, channel, config, env) {
         ...(typeof config === "boolean" ? { enabled: config } : config || {}),
       },
       env,
+      platform,
     ),
   });
 }
@@ -322,7 +338,7 @@ function createNotifierInstance(channels, deps) {
 
   function setChannel(channel, config) {
     return createNotifierInstance(
-      updateChannelConfig(channels, channel, config, deps.env),
+      updateChannelConfig(channels, channel, config, deps.env, deps.platform),
       deps,
     );
   }
@@ -349,17 +365,21 @@ function createNotifierInstance(channels, deps) {
  */
 export function createNotifier(opts = {}) {
   const env = opts.env || process.env;
+  const platform = opts.platform || process.platform;
   const deps = Object.freeze({
     env,
     stdout: opts.stdout || process.stdout,
     execFile: opts.deps?.execFile || execFile,
     fetch: opts.deps?.fetch || globalThis.fetch?.bind(globalThis),
-    platform: opts.platform || process.platform,
+    platform,
     hostname: opts.hostname || os.hostname(),
     powerShellCandidates: Object.freeze(
       opts.deps?.powerShellCandidates || ["pwsh", "powershell.exe"],
     ),
   });
 
-  return createNotifierInstance(normalizeChannels(opts.channels, env), deps);
+  return createNotifierInstance(
+    normalizeChannels(opts.channels, env, platform),
+    deps,
+  );
 }

package/hub/team/retry-state-machine.mjs

@@ -41,13 +41,13 @@ export const MODES = Object.freeze({
 const ESCALATION_CHAIN_CONFIG_PATH = ".triflux/config/escalation-chain.json";
 
 // Escalation chain (2026-05-27 정책):
-//   1. codex gpt-5.6-sol — 기존 최상위 Codex escalation 단계
+//   1. codex gpt-5.6-sol max — 최난도 단일 작업용 Codex escalation 단계
 //   2. claude opus-4-8 — 최종 수단
 const DEFAULT_ESCALATION_CHAIN = Object.freeze([
   Object.freeze({
     cli: "codex",
     model: "gpt-5.6-sol",
-    profile: "gpt56_sol_xhigh",
+    profile: "gpt56_sol_max",
   }),
   Object.freeze({ cli: "claude", model: "opus-4-8" }),
 ]);
@@ -295,7 +295,12 @@ function normalizeEscalationChainEntry(entry, index, source) {
     model: entry.model,
   };
   if (typeof entry.profile === "string" && entry.profile.trim() !== "") {
-    normalized.profile = entry.profile;
+    const profile = entry.profile.trim();
+    normalized.profile =
+      entry.cli === "codex" &&
+      (profile === "ultra" || profile === "gpt56_sol_ultra")
+        ? "gpt56_sol_max"
+        : profile;
   }
   return normalized;
 }

package/hub/team/swarm-hypervisor.mjs

@@ -20,8 +20,8 @@ import {
   isDynamicRoutingEnabled,
 } from "@triflux/core/hub/dynamic-routing-engine.mjs";
 import { cleanupShardProcesses } from "@triflux/core/hub/lib/process-utils.mjs";
-import { DEFAULT_SWARM_LOCK_TTL_MS } from "@triflux/core/hub/lib/timeout-defaults.mjs";
 import { getHostConfig } from "@triflux/core/hub/lib/ssh-command.mjs";
+import { DEFAULT_SWARM_LOCK_TTL_MS } from "@triflux/core/hub/lib/timeout-defaults.mjs";
 import { buildWorkerPrompt } from "./build-worker-prompt.mjs";
 import { registerSwarmShard } from "./claude-native-bridge.mjs";
 import { createConductor, STATES } from "./conductor.mjs";
@@ -678,6 +678,7 @@ export function createSwarmHypervisor(opts) {
     const config = {
       id: buildSwarmSessionId(shard),
       agent: shard.agent,
+      role: shard.role,
       // #125: append Completion Protocol appendix so workers emit a
       // sentinel-framed JSON payload that conductor can reliably capture.
       prompt: buildWorkerPrompt(shard.prompt, {
@@ -1964,7 +1965,8 @@ export function createSwarmHypervisor(opts) {
     lockRenewTimer = setInterval(() => {
       if (!lockManager) return;
       for (const shardName of workers.keys()) {
-        if (!completedShards.has(shardName) && !failures.has(shardName)) lockManager.renew(shardName);
+        if (!completedShards.has(shardName) && !failures.has(shardName))
+          lockManager.renew(shardName);
       }
     }, DEFAULT_SWARM_LOCK_TTL_MS / 2);
     lockRenewTimer.unref?.();

package/hub/team/swarm-preflight.mjs

@@ -1,6 +1,7 @@
 // hub/team/swarm-preflight.mjs — PRD swarm preflight report/gate (#188)
 // Predicts launch-time blockers before any worker session or worktree spawn.
 
+import { execFileSync } from "node:child_process";
 import { resolve } from "node:path";
 import { readHosts, resolveHost } from "@triflux/core/hub/lib/hosts-compat.mjs";
 import { whichCommand } from "@triflux/core/hub/platform.mjs";
@@ -83,6 +84,44 @@ function checkSensitive(plan, sensitiveDeny) {
   return makeCheck("sensitiveDeny", true, { matches });
 }
 
+function parseTrackedStatus(rawStatus) {
+  const files = [];
+  const records = String(rawStatus || "").split("\0");
+  for (let index = 0; index < records.length; index++) {
+    const record = records[index];
+    if (record.length < 4) continue;
+    const status = record.slice(0, 2);
+    files.push(normalizePath(record.slice(3)));
+    if (/[RC]/u.test(status) && records[index + 1]) {
+      files.push(normalizePath(records[++index]));
+    }
+  }
+  return unique(files);
+}
+
+function checkRootDirtyLease(plan, repoRoot, deps = {}) {
+  const gitStatus =
+    deps.gitStatus ||
+    ((cwd) =>
+      execFileSync(
+        "git",
+        ["status", "--porcelain=v1", "-z", "--untracked-files=no"],
+        { cwd, encoding: "utf8", windowsHide: true },
+      ));
+  const dirtyFiles = parseTrackedStatus(gitStatus(repoRoot));
+  const leasedFiles = unique(
+    [...plan.leaseMap.values()].flat().map(normalizePath),
+  );
+  const leaseSet = new Set(leasedFiles);
+  const overlappingFiles = dirtyFiles.filter((file) => leaseSet.has(file));
+
+  return makeCheck("rootDirtyLease", overlappingFiles.length === 0, {
+    dirtyFiles,
+    leasedFiles,
+    overlappingFiles,
+  });
+}
+
 function checkHosts(plan, repoRoot) {
   const registry = readHosts(repoRoot);
   const missing = [];
@@ -216,6 +255,13 @@ function collectMessages(checks) {
     );
   }
 
+  const rootDirtyLease = checks.rootDirtyLease;
+  if (rootDirtyLease && !rootDirtyLease.ok) {
+    errors.push(
+      `rootDir tracked changes overlap shard leases: ${rootDirtyLease.overlappingFiles.join(", ")}`,
+    );
+  }
+
   return { errors: unique(errors), warnings: unique(warnings) };
 }
 
@@ -258,6 +304,7 @@ export function runSwarmPreflight(prdPath, opts = {}) {
     leases: makeCheck("leases", plan.conflicts.length === 0, {
       conflicts: [...plan.conflicts],
     }),
+    rootDirtyLease: checkRootDirtyLease(plan, repoRoot, opts.deps),
     sensitiveDeny: checkSensitive(plan, sensitiveDeny),
     hosts: checkHosts(plan, repoRoot),
     workerCli: checkLocalWorkerClis(plan, opts.deps),