@triflux/remote 10.50.1 → 10.51.0

package/cto/hygiene-actions.mjs

@@ -1,355 +0,0 @@
-import { createHash } from "node:crypto";
-import {
-  copyFileSync,
-  cpSync,
-  existsSync,
-  lstatSync,
-  mkdirSync,
-  renameSync,
-  rmSync,
-  statSync,
-  unlinkSync,
-} from "node:fs";
-import {
-  basename,
-  dirname,
-  isAbsolute,
-  join,
-  relative,
-  resolve,
-} from "node:path";
-
-const ARCHIVABLE_ACTIONS = new Set([
-  "archive_or_resume_session",
-  "prune_superseded_checkpoint",
-]);
-
-function shortHash(value) {
-  const str = String(value ?? "");
-  let h = 5381;
-  for (let i = 0; i < str.length; i += 1) {
-    h = (h * 33) ^ str.charCodeAt(i);
-  }
-  return (h >>> 0).toString(36);
-}
-
-function stewardRootHash(rootDir) {
-  return createHash("sha256")
-    .update(String(rootDir || ""))
-    .digest("hex")
-    .slice(0, 12);
-}
-
-function hygieneKeyForRow(row) {
-  return `${row.kind}:${row.id}`;
-}
-
-function yyyymmdd(value) {
-  const date = value ? new Date(value) : new Date();
-  if (Number.isNaN(date.getTime())) return yyyymmdd(new Date().toISOString());
-  return date.toISOString().slice(0, 10).replace(/-/gu, "");
-}
-
-function safeLabel(value) {
-  return (
-    String(value || "item")
-      .toLowerCase()
-      .replace(/[^a-z0-9._-]+/gu, "-")
-      .replace(/^-+|-+$/gu, "")
-      .slice(0, 80) || "item"
-  );
-}
-
-function isInside(parent, child) {
-  const rel = relative(resolve(parent), resolve(child));
-  return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
-}
-
-function normalizeActiveSessions(active) {
-  const sessions = Array.isArray(active)
-    ? active
-    : Array.isArray(active?.sessions)
-      ? active.sessions
-      : Array.isArray(active?.live_sessions)
-        ? active.live_sessions
-        : [];
-  return sessions
-    .map((session) => ({
-      sessionId: String(session?.sessionId || session?.session_id || "").trim(),
-      phase: String(
-        session?.phase || session?.status || "active",
-      ).toLowerCase(),
-    }))
-    .filter((session) => session.sessionId);
-}
-
-function isLiveOwned(row, activeSessions) {
-  const rowSession = String(row?.session_id || row?.id || "").trim();
-  if (!rowSession) return false;
-  return activeSessions.some(
-    (session) => session.sessionId === rowSession && session.phase !== "stale",
-  );
-}
-
-function assertProjectHash(row, rootDir) {
-  if (!row?.project_root_hash) return;
-  const allowed = new Set([shortHash(rootDir), stewardRootHash(rootDir)]);
-  if (!allowed.has(String(row.project_root_hash))) {
-    throw new Error(
-      `project_root_hash mismatch for ${hygieneKeyForRow(row)}: ${row.project_root_hash}`,
-    );
-  }
-}
-
-function assertLakePath(lakeRoot, path, label) {
-  if (!isInside(lakeRoot, path)) {
-    throw new Error(`${label} must be under lakeRoot: ${path}`);
-  }
-}
-
-function sourceBytes(path) {
-  const info = statSync(path);
-  if (info.isFile()) return info.size;
-  if (!info.isDirectory()) return info.size || 0;
-  return 0;
-}
-
-function targetPathFor({ lakeRoot, row, sourcePath, now }) {
-  const archiveDir = join(lakeRoot, "archive", yyyymmdd(now));
-  const label = safeLabel(hygieneKeyForRow(row));
-  return join(archiveDir, `${label}-${basename(sourcePath)}`);
-}
-
-function hasSecondActorApproval(opts = {}) {
-  if (opts.humanAck === true || opts.humanGate === true) return true;
-  const actorSessionId = String(opts.actorSessionId || "").trim();
-  if (!actorSessionId) return false;
-  const hygieneKey = opts.hygieneKey;
-  const approvals = Array.isArray(opts.approvals) ? opts.approvals : [];
-  return approvals.some((entry) => {
-    const ref = entry?.ref && typeof entry.ref === "object" ? entry.ref : {};
-    if (ref.hygiene_key !== hygieneKey) return false;
-    const approverSession = String(ref?.actor?.session_id || "").trim();
-    return Boolean(approverSession && approverSession !== actorSessionId);
-  });
-}
-
-function movePath(sourcePath, targetPath, fsOps = {}) {
-  const ops = {
-    copyFileSync,
-    cpSync,
-    existsSync,
-    lstatSync,
-    mkdirSync,
-    renameSync,
-    rmSync,
-    unlinkSync,
-    ...fsOps,
-  };
-  ops.mkdirSync(dirname(targetPath), { recursive: true });
-  try {
-    ops.renameSync(sourcePath, targetPath);
-    return "rename";
-  } catch (error) {
-    if (error?.code !== "EXDEV") throw error;
-    const info = ops.lstatSync(sourcePath);
-    if (info.isDirectory()) {
-      ops.cpSync(sourcePath, targetPath, { recursive: true, force: false });
-      ops.rmSync(sourcePath, { recursive: true, force: false });
-    } else {
-      ops.copyFileSync(sourcePath, targetPath);
-      ops.unlinkSync(sourcePath);
-    }
-    return "copy_unlink";
-  }
-}
-
-function digestOperations(operations) {
-  const payload = operations.map((operation) => ({
-    hygiene_key: operation.hygiene_key,
-    status: operation.status,
-    source_path: operation.source_path,
-    target_path: operation.target_path,
-    bytes: operation.bytes,
-    reason: operation.reason,
-  }));
-  return createHash("sha256").update(JSON.stringify(payload)).digest("hex");
-}
-
-function rowsFromProjection(projection) {
-  return Array.isArray(projection?.rows) ? projection.rows : [];
-}
-
-export async function applyHygieneArchiveActions({
-  rootDir,
-  lakeRoot,
-  projection,
-  dryRun = true,
-  now = new Date().toISOString(),
-  applyMode = "off",
-  active = {},
-  humanAck = false,
-  humanGate = false,
-  actorSessionId = null,
-  approvals = [],
-  fsOps = {},
-} = {}) {
-  const archiveRoot = join(lakeRoot, "archive", yyyymmdd(now));
-  assertLakePath(lakeRoot, archiveRoot, "archive target");
-
-  const activeSessions = normalizeActiveSessions(active);
-  const operations = [];
-
-  for (const row of rowsFromProjection(projection)) {
-    const hygieneKey = hygieneKeyForRow(row);
-    if (row?.kind === "worktree" && row?.status === "orphaned") {
-      operations.push({
-        hygiene_key: hygieneKey,
-        kind: row.kind,
-        id: row.id,
-        action: row.action,
-        status: "blocked",
-        reason: "orphan_worktree_requires_human",
-        bytes: 0,
-      });
-      continue;
-    }
-
-    if (!ARCHIVABLE_ACTIONS.has(row?.action)) continue;
-
-    assertProjectHash(row, rootDir);
-
-    if (isLiveOwned(row, activeSessions)) {
-      operations.push({
-        hygiene_key: hygieneKey,
-        kind: row.kind,
-        id: row.id,
-        action: row.action,
-        status: "skipped",
-        reason: "live_session_owned",
-        bytes: 0,
-      });
-      continue;
-    }
-
-    const sourcePath = row.artifact_path ? resolve(row.artifact_path) : null;
-    if (!sourcePath) {
-      operations.push({
-        hygiene_key: hygieneKey,
-        kind: row.kind,
-        id: row.id,
-        action: row.action,
-        status: "skipped",
-        reason: "missing_artifact_path",
-        bytes: 0,
-      });
-      continue;
-    }
-    // lake 밖 산출물은 자동 이동 대상이 아니다 — 크래시 대신 skip으로 보고한다.
-    // (checkpoint 등 실제 산출물은 대부분 lake 밖에 있으므로 throw 하면 apply 전체가 죽는다.)
-    if (!isInside(lakeRoot, sourcePath)) {
-      operations.push({
-        hygiene_key: hygieneKey,
-        kind: row.kind,
-        id: row.id,
-        action: row.action,
-        source_path: sourcePath,
-        status: "skipped",
-        reason: "source_outside_lake",
-        bytes: 0,
-      });
-      continue;
-    }
-
-    const targetPath = targetPathFor({ lakeRoot, row, sourcePath, now });
-    assertLakePath(lakeRoot, targetPath, "archive target");
-
-    if (!existsSync(sourcePath)) {
-      operations.push({
-        hygiene_key: hygieneKey,
-        kind: row.kind,
-        id: row.id,
-        action: row.action,
-        source_path: sourcePath,
-        target_path: targetPath,
-        status: existsSync(targetPath) ? "already_archived" : "skipped",
-        reason: existsSync(targetPath) ? undefined : "source_missing",
-        bytes: 0,
-      });
-      continue;
-    }
-
-    operations.push({
-      hygiene_key: hygieneKey,
-      kind: row.kind,
-      id: row.id,
-      action: row.action,
-      source_path: sourcePath,
-      target_path: targetPath,
-      status: "planned",
-      bytes: sourceBytes(sourcePath),
-    });
-  }
-
-  if (!dryRun) {
-    for (const operation of operations) {
-      if (operation.status !== "planned") continue;
-      if (applyMode !== "archive") {
-        operation.status = "blocked";
-        operation.reason = "apply_mode_off";
-        continue;
-      }
-      if (
-        !hasSecondActorApproval({
-          humanAck,
-          humanGate,
-          actorSessionId,
-          approvals,
-          hygieneKey: operation.hygiene_key,
-        })
-      ) {
-        operation.status = "blocked";
-        operation.reason = "second_actor_ack_required";
-        continue;
-      }
-      operation.move_method = movePath(
-        operation.source_path,
-        operation.target_path,
-        fsOps,
-      );
-      operation.status = "archived";
-    }
-  }
-
-  const plannedCount = operations.filter((operation) =>
-    ["planned", "archived", "already_archived"].includes(operation.status),
-  ).length;
-  const appliedCount = operations.filter(
-    (operation) => operation.status === "archived",
-  ).length;
-  const blockedCount = operations.filter(
-    (operation) => operation.status === "blocked",
-  ).length;
-
-  return {
-    schema_version: "cto-hygiene-actions.v1",
-    dry_run: Boolean(dryRun),
-    apply_mode: applyMode,
-    archive_root: archiveRoot,
-    planned_count: plannedCount,
-    applied_count: appliedCount,
-    blocked_count: blockedCount,
-    total_bytes: operations.reduce(
-      (sum, operation) => sum + Number(operation.bytes || 0),
-      0,
-    ),
-    digest: digestOperations(operations),
-    live_safety: {
-      active_session_count: activeSessions.length,
-      skipped_live_count: operations.filter(
-        (operation) => operation.reason === "live_session_owned",
-      ).length,
-    },
-    operations,
-  };
-}

package/cto/hygiene-notify.mjs

@@ -1,170 +0,0 @@
-import { createHash } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
-
-const ACTIONABLE_COUNT_KEYS = Object.freeze([
-  "active_tasks",
-  "stale_sessions",
-  "orphan_worktrees",
-  "superseded_checkpoints",
-  "unknown_owner",
-]);
-
-function stableValue(value) {
-  if (Array.isArray(value)) return value.map(stableValue);
-  if (value && typeof value === "object") {
-    return Object.fromEntries(
-      Object.keys(value)
-        .sort()
-        .map((key) => [key, stableValue(value[key])]),
-    );
-  }
-  return value;
-}
-
-function stableJson(value) {
-  return JSON.stringify(stableValue(value));
-}
-
-function normalizeCount(value) {
-  return Number.isFinite(Number(value)) ? Number(value) : 0;
-}
-
-function actionableCounts(projection = {}) {
-  const counts = projection?.counts || {};
-  return Object.fromEntries(
-    ACTIONABLE_COUNT_KEYS.map((key) => [key, normalizeCount(counts[key])]),
-  );
-}
-
-function normalizeRows(rows) {
-  return (Array.isArray(rows) ? rows : [])
-    .map((row) => ({
-      kind: String(row?.kind || ""),
-      id: String(row?.id || ""),
-      status: String(row?.status || ""),
-      action: row?.action == null ? "" : String(row.action),
-      owner: row?.owner == null ? "" : String(row.owner),
-    }))
-    .sort((a, b) =>
-      [a.kind, a.id, a.status, a.action, a.owner]
-        .join("\u0000")
-        .localeCompare(
-          [b.kind, b.id, b.status, b.action, b.owner].join("\u0000"),
-        ),
-    );
-}
-
-export function ctoHygieneStateHash(projection = {}) {
-  const canonical = {
-    counts: actionableCounts(projection),
-    rows: normalizeRows(projection.rows),
-  };
-  return createHash("sha256").update(stableJson(canonical)).digest("hex");
-}
-
-function plural(count, singular, pluralWord = `${singular}s`) {
-  return `${count} ${count === 1 ? singular : pluralWord}`;
-}
-
-function summarizeCounts(counts) {
-  const parts = [];
-  if (counts.active_tasks)
-    parts.push(plural(counts.active_tasks, "active task"));
-  if (counts.stale_sessions)
-    parts.push(plural(counts.stale_sessions, "stale session"));
-  if (counts.orphan_worktrees)
-    parts.push(plural(counts.orphan_worktrees, "orphan worktree"));
-  if (counts.superseded_checkpoints)
-    parts.push(plural(counts.superseded_checkpoints, "superseded checkpoint"));
-  if (counts.unknown_owner)
-    parts.push(plural(counts.unknown_owner, "unknown owner"));
-  return parts;
-}
-
-export function buildCtoHygieneNotification(projection = {}, opts = {}) {
-  const counts = actionableCounts(projection);
-  const actionable = ACTIONABLE_COUNT_KEYS.some((key) => counts[key] > 0);
-  const hash = ctoHygieneStateHash(projection);
-  if (!actionable) {
-    return { actionable, hash, event: null, counts };
-  }
-
-  const summary = `CTO hygiene needs action: ${summarizeCounts(counts).join(", ")}`;
-  return {
-    actionable,
-    hash,
-    counts,
-    event: {
-      type: "ctoHygiene",
-      sessionId: opts.sessionId || "cto-hygiene",
-      summary,
-      timestamp:
-        typeof opts.now === "function"
-          ? opts.now()
-          : (opts.timestamp ?? new Date().toISOString()),
-    },
-  };
-}
-
-async function readState(stateFile) {
-  if (!stateFile) return null;
-  try {
-    return JSON.parse(await readFile(stateFile, "utf8"));
-  } catch {
-    return null;
-  }
-}
-
-async function writeState(stateFile, state) {
-  if (!stateFile) return;
-  await mkdir(dirname(stateFile), { recursive: true });
-  await writeFile(stateFile, `${JSON.stringify(state, null, 2)}\n`, "utf8");
-}
-
-export async function notifyCtoHygieneOnce(projection = {}, opts = {}) {
-  const notification = buildCtoHygieneNotification(projection, opts);
-  const previous = await readState(opts.stateFile);
-  const unchanged = previous?.hash === notification.hash;
-  const checkedAt =
-    typeof opts.now === "function" ? opts.now() : new Date().toISOString();
-
-  if (!notification.actionable) {
-    await writeState(opts.stateFile, {
-      hash: notification.hash,
-      actionable: false,
-      checkedAt,
-    });
-    return {
-      actionable: false,
-      notified: false,
-      reason: "not-actionable",
-      hash: notification.hash,
-    };
-  }
-
-  if (unchanged) {
-    return {
-      actionable: true,
-      notified: false,
-      reason: "unchanged-state",
-      hash: notification.hash,
-    };
-  }
-
-  const notifierResult = await opts.notifier.notify(notification.event);
-  await writeState(opts.stateFile, {
-    hash: notification.hash,
-    actionable: true,
-    notifiedAt: notification.event.timestamp,
-  });
-
-  return {
-    actionable: true,
-    notified: true,
-    reason: "changed-actionable-state",
-    hash: notification.hash,
-    event: notification.event,
-    notify: notifierResult,
-  };
-}

package/hub/team/build-worker-prompt.mjs

@@ -1,92 +0,0 @@
-// hub/team/build-worker-prompt.mjs — append Completion Protocol to PRD prompt (#125)
-//
-// swarm-hypervisor injects a Completion Protocol appendix into every worker
-// prompt so that workers emit a sentinel-framed JSON payload conductor.mjs can
-// reliably capture (see sentinel-capture.mjs and extract-completion-payload.mjs).
-//
-// Pure module — no I/O — so the appendix and merge logic can be unit-tested
-// without spawning conductors.
-
-import { SENTINEL_BEGIN, SENTINEL_END } from "./sentinel-capture.mjs";
-
-function normalizeLeaseFiles(leaseFiles) {
-  if (!Array.isArray(leaseFiles)) return [];
-  return leaseFiles
-    .map((file) => (typeof file === "string" ? file.trim() : ""))
-    .filter(Boolean);
-}
-
-function formatLeaseFiles(leaseFiles) {
-  const normalized = normalizeLeaseFiles(leaseFiles);
-  if (normalized.length === 0) return "- (none declared)";
-  return normalized.map((file) => `- ${file}`).join("\n");
-}
-
-function normalizeWorktreePath(worktreePath) {
-  return typeof worktreePath === "string" ? worktreePath.trim() : "";
-}
-
-export function buildLeaseScopedAcceptanceAppendix({
-  leaseFiles = [],
-  worktreePath,
-} = {}) {
-  const normalizedWorktreePath = normalizeWorktreePath(worktreePath);
-  const rootLine = normalizedWorktreePath
-    ? `작업 루트(절대경로): ${normalizedWorktreePath} — 아래 lease 경로와 모든 상대경로는 이 루트 기준으로만 해석한다.\n`
-    : "";
-
-  return `
-
-## Lease-scoped Acceptance / Lint Guard (자동 삽입됨)
-${rootLine}- 위 PRD 본문의 모든 제약과 acceptance 기준은 이 appendix 이후에도 그대로 유효하다.
-- 이 shard 의 파일 lease:
-${formatLeaseFiles(leaseFiles)}
-- Acceptance, lint, and format checks are scoped to files changed by this shard; if that set is unclear, use only the lease list above.
-- Do not run repo-wide format/lint fixers such as \`biome check --write .\`, \`biome --write .\`, \`npm run lint:fix\`, or broad \`npm run lint\` to absorb unrelated drift.
-- For Biome, use \`npx biome check <changed-files-or-lease-files>\`; add \`--write\` only when every target is a changed/leased file you intend to commit.
-- Pre-existing lint drift outside the lease is not this shard's acceptance responsibility; report it instead of editing it.
-`;
-}
-
-export const COMPLETION_PROTOCOL_APPENDIX = `
-
-## Completion Protocol (자동 삽입됨)
-<!-- swarm hypervisor 가 이 섹션을 worker prompt 에 자동 주입합니다.
-     PRD 작성자는 이 섹션을 수정하지 마세요.
-     상세: hub/team/build-worker-prompt.mjs / sentinel-capture.mjs (#125). -->
-
-작업의 마지막 단계로, stdout 에 다음 형식의 완료 payload 를 정확히 한 번 출력하라:
-
-${SENTINEL_BEGIN}
-{"shard":"<shard name>","status":"ok","commits_made":[{"sha":"<40-char full sha>","message":"<commit msg>"}]}
-${SENTINEL_END}
-
-규약:
-- 두 sentinel 마커는 각자 자기 줄에 단독으로 출력 (앞뒤 newline)
-- 마커 사이 본문은 단일 JSON object (배열/primitive 금지)
-- status 값은 ok | failed | blocked 중 하나
-- payload 출력 직전 \`git log -1 --format=%H\` 로 보고할 sha 가 실재하는지 검증하라
-- 코드 변경이 기대되는 shard 에서 변경/커밋을 못 했으면 status:failed 와 함께 reason 필드로 사유를 보고하라 — 그 경우 빈 commits_made 에 status:ok 는 금지
-- no-op shard 는 status:ok + 빈 commits_made 배열 허용
-- 마커 쌍은 stdout 에 정확히 한 번만 출력해야 함. 재emit 시 conductor 는 첫 BEGIN..END 한 쌍만 채택하며, 이후 stdout 은 무시한다.
-- ${SENTINEL_BEGIN} 만 출력하고 ${SENTINEL_END} 누락 시 conductor 가 truncation 으로 명확히 reject
-`;
-
-/**
- * Append the Completion Protocol section to a PRD prompt.
- *
- * @param {string|null|undefined} prdPrompt — original PRD body
- * @param {{ leaseFiles?: string[], worktreePath?: string }} [opts] — shard file lease and absolute worktree root for scoped acceptance
- * @returns {string} prompt with appendix
- */
-export function buildWorkerPrompt(prdPrompt, opts = {}) {
-  const body = typeof prdPrompt === "string" ? prdPrompt : "";
-  return (
-    body +
-    buildLeaseScopedAcceptanceAppendix({
-      leaseFiles: opts.leaseFiles,
-      worktreePath: opts.worktreePath,
-    }) +
-    COMPLETION_PROTOCOL_APPENDIX
-  );
-}

package/hub/team/check-mcp-hub.mjs

@@ -1,49 +0,0 @@
-// hub/team/check-mcp-hub.mjs — health-probe L2 용 hub /health ping 체커.
-// health-probe.mjs 의 checkMcp 로 주입되어 `mcp_initializing` state 판정에 사용.
-// hub /health 가 200 이면 OK (MCP transport 인프라 살아있음), 그 외는 fail.
-
-const DEFAULT_HUB_URL = "http://127.0.0.1:27888";
-const DEFAULT_TIMEOUT_MS = 3000;
-
-function resolveHubHealthUrl(hubUrl) {
-  const base = hubUrl || process.env.TFX_HUB_URL || DEFAULT_HUB_URL;
-  // `/mcp` suffix 제거 (triflux convention — bridge.mjs:54, hub-client.mjs,
-  // lead-control.mjs, session-sync.mjs 전부 TFX_HUB_URL 을 MCP transport URL
-  // 로 쓰고 base URL 이 필요할 때 `/mcp$` 를 strip 한다). 제거하지 않으면
-  // `.../mcp/health` 가 되어 hub 가 404 로 응답 → L2 영구 fail → heartbeat
-  // 이 지속적으로 `mcp_initializing` 로 grace — #173 Codex P2 review.
-  return base.replace(/\/mcp\/?$/, "").replace(/\/+$/, "") + "/health";
-}
-
-/**
- * Hub /health 기반 L2 checker factory.
- * @param {object} [opts]
- * @param {string} [opts.hubUrl] — override. 미지정 시 TFX_HUB_URL env 또는 default.
- * @param {number} [opts.timeoutMs=3000] — fetch timeout (ms).
- * @param {typeof fetch} [opts.fetchFn] — fetch 오버라이드 (테스트용).
- * @returns {() => Promise<boolean>} — true = hub healthy, false = degraded/down/timeout.
- */
-export function createHubHealthChecker(opts = {}) {
-  const url = resolveHubHealthUrl(opts.hubUrl);
-  const timeoutMs = Number.isFinite(opts.timeoutMs)
-    ? opts.timeoutMs
-    : DEFAULT_TIMEOUT_MS;
-  const fetchFn = opts.fetchFn || globalThis.fetch;
-
-  return async function checkMcpHubHealth() {
-    if (typeof fetchFn !== "function") return false;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-      const res = await fetchFn(url, {
-        method: "GET",
-        signal: controller.signal,
-      });
-      return res.ok === true;
-    } catch {
-      return false;
-    } finally {
-      clearTimeout(timer);
-    }
-  };
-}