@triflux/remote 10.43.0 → 10.45.0

package/hub/team/backend.mjs

@@ -21,10 +21,12 @@ export function buildAntigravityCommand(
   // and `"` reach the shell verbatim (P1: shell injection).
   const promptFile = `${resultFile}.prompt`;
   writeFileSync(promptFile, prompt);
+  // agy 1.1.27 부터 --print 는 값(프롬프트)이 필수이고 stdin 프롬프트는 거부된다.
+  // 파일 내용을 셸이 재해석하지 않는 형태(따옴표 안 명령 치환 / Get-Content 식)로 값에 넣는다.
   if (isWindows) {
-    return `Get-Content -Raw '${promptFile}' | agy --print --dangerously-skip-permissions > '${resultFile}' 2>'${resultFile}.err'`;
+    return `agy --dangerously-skip-permissions --print (Get-Content -Raw '${promptFile}') > '${resultFile}' 2>'${resultFile}.err'`;
   }
-  return `agy --print --dangerously-skip-permissions < '${promptFile}' > '${resultFile}' 2>'${resultFile}.err'`;
+  return `agy --dangerously-skip-permissions --print "$(cat '${promptFile}')" > '${resultFile}' 2>'${resultFile}.err'`;
 }
 
 const _require = createRequire(import.meta.url);

package/hub/team/claude-daemon-control.mjs

@@ -321,10 +321,12 @@ export async function probeClaudeDaemonCandidates({
   short,
   sessionId,
   timeoutMs = 6000,
+  tmpRoot = "/tmp",
 } = {}) {
   const candidates = await buildClaudeDaemonDiscoveryCandidates({
     configDir,
     env,
+    tmpRoot,
   });
   const callerProvenance = detectCallerProvenance(env);
   const targetRequested = Boolean(short || sessionId);

package/hub/team/cli/commands/start/start-headless.mjs

@@ -88,6 +88,8 @@ export async function startHeadlessTeam({
     timeoutSec: timeoutSec || 900,
     layout,
     autoAttach: !!autoAttach,
+    leadPane: process.env.TMUX_PANE,
+    leadTmux: process.env.TMUX,
     dashboard: !!dashboard,
     dashboardLayout,
     dashboardSize: dashboardSize ?? 0.5,

package/hub/team/cli/commands/start/start-mux.mjs

@@ -5,6 +5,7 @@ import {
   attachSession,
   configureTeammateKeybindings,
   createSession,
+  splitAttachToClient,
 } from "../../../session.mjs";
 import { BOLD, DIM, GREEN, RESET } from "../../../shared.mjs";
 import { ok, warn } from "../../render.mjs";
@@ -62,12 +63,23 @@ export async function startMuxTeam({
 
   ok("CLI 초기화 대기 (3초)...");
   await new Promise((resolve) => setTimeout(resolve, 3000));
-  await orchestrate(sessionId, assignments, {
+  const promptInjectionFailures = await orchestrate(sessionId, assignments, {
     hubUrl,
     teammateMode,
     lead: { target: leadTarget, cli: lead, task },
+    onInjectionFailure(failure) {
+      warn(
+        `${failure.cli} ${failure.role} prompt 제출 실패 (${failure.target}): ${failure.message}`,
+      );
+    },
   });
-  ok("리드/워커 프롬프트 주입 완료");
+  if (promptInjectionFailures.length === 0) {
+    ok("리드/워커 프롬프트 주입 완료");
+  } else {
+    warn(
+      `prompt 제출 실패 ${promptInjectionFailures.length}건 — 세션 상태에 기록함`,
+    );
+  }
 
   return {
     sessionName: sessionId,
@@ -78,6 +90,7 @@ export async function startMuxTeam({
     teammateMode,
     startedAt: Date.now(),
     hubUrl,
+    promptInjectionFailures,
     members,
     panes: Object.fromEntries(
       members.map((member) => [
@@ -113,7 +126,15 @@ export async function startMuxTeam({
       );
       console.log(`  ${DIM}Ctrl+B → D: 세션 분리 (백그라운드)${RESET}\n`);
       if (process.stdout.isTTY && process.stdin.isTTY) attachSession(sessionId);
-      else {
+      else if (
+        splitAttachToClient(sessionId, {
+          targetPane: process.env.TMUX_PANE,
+          tmuxEnv: process.env.TMUX,
+        })
+      ) {
+        ok("non-TTY 환경: 바깥 tmux 클라이언트 창을 분할해 attach함");
+        console.log(`  ${DIM}분할 pane에서 나가기: Ctrl+B → D${RESET}\n`);
+      } else {
         warn("TTY 미지원 환경이라 자동 attach를 생략함");
         console.log(`  ${DIM}수동 연결: tfx multi attach${RESET}\n`);
       }

package/hub/team/cli/services/runtime-mode.mjs

@@ -5,16 +5,28 @@ import {
   sessionExists,
 } from "../../session.mjs";
 
-export function normalizeTeammateMode(mode = "auto") {
+export function normalizeTeammateMode(mode = "auto", deps = {}) {
+  const platform = deps.platform || process.platform;
+  const env = deps.env || process.env;
+  const detectMux = deps.detectMultiplexer || detectMultiplexer;
   const raw = String(mode).toLowerCase();
   if (raw === "inline" || raw === "native") return "in-process";
   if (raw === "headless" || raw === "hl") return "headless";
-  if (raw === "in-process" || raw === "tmux" || raw === "psmux" || raw === "wt")
-    return raw;
-  if (raw === "windows-terminal" || raw === "windows_terminal") return "wt";
+  if (raw === "in-process" || raw === "tmux") return raw;
+  if (raw === "psmux") return platform === "win32" ? "psmux" : "in-process";
+  if (
+    raw === "wt" ||
+    raw === "windows-terminal" ||
+    raw === "windows_terminal"
+  ) {
+    return platform === "win32" ? "wt" : "in-process";
+  }
   if (raw === "auto") {
-    if (process.env.TMUX) return "tmux";
-    const mux = detectMultiplexer();
+    if (env.TMUX) return "tmux";
+    const mux = detectMux();
+    if (platform !== "win32") {
+      return mux === "tmux" ? "tmux" : "in-process";
+    }
     if (mux === "psmux") return "psmux";
     if (mux === "tmux") return "tmux";
     return "in-process";
@@ -57,9 +69,11 @@ export function isTeamAlive(state) {
   return sessionExists(state.sessionName);
 }
 
-export function ensureTmuxOrExit() {
-  const mux = detectMultiplexer();
-  if (mux) return mux;
+export function ensureTmuxOrExit(deps = {}) {
+  const platform = deps.platform || process.platform;
+  const detectMux = deps.detectMultiplexer || detectMultiplexer;
+  const mux = detectMux();
+  if (mux && (platform === "win32" || mux === "tmux")) return mux;
   const error = new Error("tmux 미발견");
   error.code = "TMUX_REQUIRED";
   throw error;

package/hub/team/conductor.mjs

@@ -19,6 +19,13 @@ import {
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { createRegistry } from "@triflux/core/mesh/mesh-registry.mjs";
+import { resolveNestedCodexAgentProfile } from "../../scripts/lib/cli-codex.mjs";
+import { codexProfileConfigOverrides } from "../../scripts/lib/codex-profile-config.mjs";
+import {
+  buildDisabledCliError,
+  normalizeCliName,
+  resolveCliPolicy,
+} from "../../scripts/lib/machine-profile.mjs";
 import { broker } from "@triflux/core/hub/account-broker.mjs";
 import { runPreflight as runCodexPreflight } from "@triflux/core/hub/codex-preflight.mjs";
 import {
@@ -604,28 +611,53 @@ export function createConductor(opts = {}) {
       }
     }
 
-    const spawnSpec = buildSpawnSpecForMode(MODES.HEADLESS, {
-      cli: session.config.agent,
-      prompt: session.config.prompt,
-      profile: session.config.profile,
-      model: session.config.model,
-      mcpServers: session.config.mcpServers,
-      excludeMcpServers,
-      resolveCommand: opts.deps?.resolveCliExecutable,
-      onWarning: (message, details = {}) => {
-        eventLog.append("mcp_server_skipped", {
-          session: session.id,
-          message,
-          ...details,
-        });
-        emitter.emit("warning", {
-          type: "mcp_server_skipped",
-          session: session.id,
-          message,
-          ...details,
-        });
-      },
-    });
+    let spawnSpec;
+    try {
+      spawnSpec = buildSpawnSpecForMode(MODES.HEADLESS, {
+        cli: session.config.agent,
+        prompt: session.config.prompt,
+        profile: session.config.profile,
+        role: session.config.role,
+        model: session.config.model,
+        env: session.config.env,
+        mcpServers: session.config.mcpServers,
+        excludeMcpServers,
+        resolveCommand: opts.deps?.resolveCliExecutable,
+        onWarning: (message, details = {}) => {
+          eventLog.append("mcp_server_skipped", {
+            session: session.id,
+            message,
+            ...details,
+          });
+          emitter.emit("warning", {
+            type: "mcp_server_skipped",
+            session: session.id,
+            message,
+            ...details,
+          });
+        },
+      });
+    } catch (err) {
+      // respawnSession 은 `void` 로 호출되므로 여기서 던지면 처리되지 않은 거부가
+      // 된다. spec 생성 실패를 명시 실패로 접어 세션이 매달리지 않게 한다.
+      // 정책 차단과 그 밖의 spec 생성 실패는 원인이 다르므로 이벤트를 나눈다.
+      const message = err?.message || String(err);
+      const blockedByPolicy = err?.code === "TFX_CLI_DISABLED";
+      const eventName = blockedByPolicy
+        ? "session_spawn_blocked"
+        : "session_spawn_failed";
+      const reason = blockedByPolicy ? "spawn_blocked" : "spawn_failed";
+      const detail = {
+        session: session.id,
+        agent: session.config.agent,
+        code: err?.code || null,
+        error: message,
+      };
+      eventLog.append(eventName, detail);
+      emitter.emit("warning", { type: eventName, ...detail });
+      handleFailure(session, `${reason}:${message}`);
+      return;
+    }
 
     // #90 branch guard: shard spawn cwd가 main 브랜치면 즉시 abort.
     // swarm shard는 반드시 shard 전용 worktree 브랜치에서 실행되어야 한다.
@@ -902,8 +934,25 @@ export function createConductor(opts = {}) {
     } else if (agent === "gemini") {
       remoteBin = "gemini -y";
     } else {
-      remoteBin =
-        "codex exec -s danger-full-access --dangerously-bypass-approvals-and-sandbox";
+      const codexHome = session.config.env?.CODEX_HOME;
+      const profile = resolveNestedCodexAgentProfile(
+        session.config.role || "executor",
+        {
+          profileOverride: session.config.profile ?? "auto",
+          globalProfile:
+            session.config.env?.TFX_CODEX_PROFILE ??
+            process.env.TFX_CODEX_PROFILE,
+          codexHome,
+        },
+      );
+      const configArgs = codexProfileConfigOverrides(profile, {
+        codexHome,
+        disallowUltra: true,
+        enforceCanonicalProfile: true,
+      })
+        .map((override) => `-c '${override.replace(/'/g, `'\\''`)}'`)
+        .join(" ");
+      remoteBin = `codex exec${configArgs ? ` ${configArgs}` : ""} -s danger-full-access --dangerously-bypass-approvals-and-sandbox`;
     }
 
     // prompt는 stdin으로 전달 — 셸 이스케이프 문제 완전 회피
@@ -1155,6 +1204,34 @@ export function createConductor(opts = {}) {
       }
     }
 
+    // TFX_DISABLE_* SSOT 집행. 계정 임대와 worker sandbox 생성보다 앞에 둔다.
+    // 뒤에 두면 정책으로 거부된 세션이 샌드박스 디렉터리와 auth.json 사본을
+    // 남기고, 임대 반납이 회로 차단기 실패로 집계돼 멀쩡한 계정이 cooldown 에
+    // 들어간다. 다른 CLI 로 자동 전환하지 않고 호출자에게 그대로 던진다.
+    // claude 처럼 정책 대상이 아닌 agent 는 프로파일 파일을 읽지 않는다 (F4 와 동일).
+    if (!config.remote && normalizeCliName(config.agent)) {
+      const blockedCli = buildDisabledCliError(
+        config.agent,
+        resolveCliPolicy(process.env),
+      );
+      if (blockedCli) {
+        eventLog.append("session_spawn_blocked", {
+          session: config.id,
+          agent: config.agent,
+          code: blockedCli.code || null,
+          error: blockedCli.message,
+        });
+        emitter.emit("warning", {
+          type: "session_spawn_blocked",
+          session: config.id,
+          agent: config.agent,
+          code: blockedCli.code || null,
+          error: blockedCli.message,
+        });
+        throw blockedCli;
+      }
+    }
+
     // broker lease (graceful — broker null if accounts.json absent)
     let lease = null;
     const activeBroker = getActiveBroker();

package/hub/team/cto-auto-collect.mjs

@@ -2,16 +2,12 @@ import { existsSync, statSync } from "node:fs";
 import { join } from "node:path";
 
 import { resolveLakeRootDir } from "../../cto/lake-root.mjs";
+import { resolveRoleControlSnapshot } from "@triflux/core/hub/lib/cto-env.mjs";
 
 const DEFAULT_DEBOUNCE_MS = 120_000;
-const OFF_VALUES = new Set(["0", "false", "off", "no"]);
 
 export function isCtoAutoCollectDisabled(env = process.env) {
-  return OFF_VALUES.has(
-    String(env?.TFX_CTO_AUTO_COLLECT ?? "")
-      .trim()
-      .toLowerCase(),
-  );
+  return !resolveRoleControlSnapshot(env).auto_collect_enabled;
 }
 
 function freshCurrentMd(projectRoot, now, debounceMs) {

package/hub/team/cto-pull.mjs

@@ -1,6 +1,8 @@
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 
+import { resolveRoleControlSnapshot } from "@triflux/core/hub/lib/cto-env.mjs";
+
 function defaultLakeRoot() {
   return join(process.cwd(), ".triflux", "lake");
 }
@@ -9,9 +11,11 @@ function defaultLakeRoot() {
  * Read the CTO north-star lake snapshot without affecting runtime control flow.
  * @param {object} [opts]
  * @param {string} [opts.lakeRoot] Directory containing current.json.
+ * @param {object} [opts.env] Environment values used for the CTO kill-switch.
  * @returns {object|null}
  */
 export function readCtoSnapshot(opts = {}) {
+  if (!resolveRoleControlSnapshot(opts.env).north_star_enabled) return null;
   try {
     const lakeRoot = opts.lakeRoot || defaultLakeRoot();
     const parsed = JSON.parse(

package/hub/team/dashboard-open.mjs

@@ -47,6 +47,7 @@ export async function openHeadlessDashboardTarget(sessionName, opts = {}) {
       title: title || `▲ ${safeSession}`,
       cwd,
       profile: opts.profile ?? "triflux",
+      targetPane: opts.targetPane,
     });
     return await opened;
   } catch {

package/hub/team/execution-mode.mjs

@@ -2,13 +2,17 @@
 
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, resolve as pathResolve } from "node:path";
-
-// scripts/lib is bundled into @triflux/remote itself (package.json files), so
-// import the local mirror relatively rather than via @triflux/core. The core
-// peer range (^10.0.0-alpha.1) could resolve to a build that predates this
-// export, which would fail at import time; the bundled copy is version-skew
-// safe and always carries the matching codexProfileConfigOverrides.
+import { resolveNestedCodexAgentProfile } from "../../scripts/lib/cli-codex.mjs";
 import { codexProfileConfigOverrides } from "../../scripts/lib/codex-profile-config.mjs";
+import {
+  resolveGeminiModel,
+  resolveGeminiProfileForPurpose,
+} from "../../scripts/lib/gemini-profiles.mjs";
+import {
+  buildDisabledCliError,
+  normalizeCliName,
+  resolveCliPolicy,
+} from "../../scripts/lib/machine-profile.mjs";
 import { whichCommand } from "@triflux/core/hub/platform.mjs";
 
 const WIN32_EXT_PRECEDENCE = [".cmd", ".exe", ".bat", ".ps1"];
@@ -101,6 +105,19 @@ export function resolveCliExecutable(cli, opts = {}) {
 
 export function buildSpawnSpecForMode(mode, opts = {}) {
   const cli = normalizeCli(opts.cli || "codex");
+
+  // TFX_DISABLE_* SSOT 집행. route 를 우회하는 spawn 경로도 tfx-route.sh 와 같은
+  // 정책을 따른다. 정책 판독은 런타임 process.env 와 machine profile 만 쓰고,
+  // 자식에게 넘길 세션 env(opts.env)는 쓰지 않는다. 주입 시임은 opts.cliPolicy
+  // (계산된 정책)와 opts.policyEnv(env 객체) 둘뿐이다.
+  // claude 처럼 정책 대상이 아닌 CLI 는 프로파일 파일을 읽지 않는다.
+  if (normalizeCliName(cli)) {
+    const cliPolicy =
+      opts.cliPolicy ?? resolveCliPolicy(opts.policyEnv ?? process.env);
+    const blockedCli = buildDisabledCliError(cli, cliPolicy);
+    if (blockedCli) throw blockedCli;
+  }
+
   const prompt = asPrompt(opts.prompt);
   const commandName = cli === "antigravity" ? "agy" : cli;
   const resolvedCommand = resolveCliExecutable(commandName, opts);
@@ -131,12 +148,26 @@ export function buildSpawnSpecForMode(mode, opts = {}) {
   };
 
   if (cli === "antigravity") {
-    const args = ["--print", "--dangerously-skip-permissions"];
+    // agy 1.1.27: --print 는 값(프롬프트)을 받는 마지막 인자다. stdin 프롬프트는
+    // "empty prompt" 로 거부되므로 argv 로 넘긴다.
+    // effort 는 역할별 SSOT(scripts/lib/gemini-profiles.mjs). 명시 model 이 우선한다.
+    const model =
+      typeof opts.model === "string" && opts.model.trim()
+        ? resolveGeminiModel(opts.model.trim(), {
+            profilesPath: opts.geminiProfilesPath,
+          })
+        : resolveGeminiModel(
+            resolveGeminiProfileForPurpose(opts.role || opts.agent),
+            { profilesPath: opts.geminiProfilesPath },
+          );
+    const args = ["--dangerously-skip-permissions"];
+    if (model) args.push("--model", model);
+    args.push("--print", prompt);
     return {
       ...wrap(args),
       useExec: true,
       shell: false,
-      stdinPrompt: prompt.length > 0,
+      stdinPrompt: false,
       prompt,
     };
   }
@@ -165,7 +196,17 @@ export function buildSpawnSpecForMode(mode, opts = {}) {
   // still contains an inline [profiles.X] table (which codex re-injects on
   // config rewrite). These go straight to spawn argv (shell: false), so push
   // the raw TOML-scalar overrides without shell-quoting.
-  for (const override of codexProfileConfigOverrides(opts.profile)) {
+  const codexHome = opts.env?.CODEX_HOME;
+  const codexProfile = resolveNestedCodexAgentProfile(opts.role || "executor", {
+    profileOverride: opts.profile ?? "auto",
+    globalProfile: opts.env?.TFX_CODEX_PROFILE ?? process.env.TFX_CODEX_PROFILE,
+    codexHome,
+  });
+  for (const override of codexProfileConfigOverrides(codexProfile, {
+    codexHome,
+    disallowUltra: true,
+    enforceCanonicalProfile: true,
+  })) {
     args.push("-c", override);
   }
   if (Array.isArray(opts.mcpServers)) {