@triflux/remote 10.50.1 → 10.51.0

package/hub/team/event-log.mjs

@@ -1,84 +0,0 @@
-// hub/team/event-log.mjs — JSONL 블랙박스 리코더
-// Conductor 세션 lifecycle 이벤트를 JSONL 파일에 기록한다.
-// 기존 hub/server.mjs의 batch-events.jsonl(MCP 이벤트)과 독립. 공존.
-
-import { createWriteStream, mkdirSync } from "node:fs";
-import { dirname } from "node:path";
-
-/**
- * JSONL event log 팩토리.
- * @param {string} filePath — 로그 파일 경로 (.jsonl)
- * @param {object} [opts]
- * @param {string} [opts.sessionId] — 모든 이벤트에 자동 삽입할 세션 ID
- * @returns {{ append, flush, close, filePath }}
- */
-export function createEventLog(filePath, opts = {}) {
-  const { sessionId } = opts;
-
-  mkdirSync(dirname(filePath), { recursive: true });
-  const stream = createWriteStream(filePath, { flags: "a" });
-
-  let closed = false;
-  let pending = 0;
-
-  /**
-   * 이벤트를 JSONL 한 줄로 기록.
-   * @param {string} event — 이벤트 타입 (spawn, health, kill, stateChange, ...)
-   * @param {object} [data] — 이벤트 페이로드
-   */
-  function append(event, data = {}) {
-    if (closed) return;
-    const entry = {
-      ts: new Date().toISOString(),
-      ...(sessionId ? { session: sessionId } : {}),
-      event,
-      ...data,
-    };
-    pending += 1;
-    stream.write(JSON.stringify(entry) + "\n", () => {
-      pending -= 1;
-    });
-  }
-
-  /**
-   * 버퍼된 이벤트를 디스크에 flush.
-   * @returns {Promise<void>}
-   */
-  function flush() {
-    if (closed) return Promise.resolve();
-    return new Promise((resolve, reject) => {
-      stream.once("error", reject);
-      stream.write("", () => {
-        stream.removeListener("error", reject);
-        resolve();
-      });
-    });
-  }
-
-  /**
-   * 스트림 종료. flush 후 close.
-   * @returns {Promise<void>}
-   */
-  function close() {
-    if (closed) return Promise.resolve();
-    closed = true;
-    return new Promise((resolve) => {
-      stream.end(() => resolve());
-    });
-  }
-
-  return Object.freeze({
-    append,
-    flush,
-    close,
-    get filePath() {
-      return filePath;
-    },
-    get pending() {
-      return pending;
-    },
-    get closed() {
-      return closed;
-    },
-  });
-}

package/hub/team/execution-mode.mjs

@@ -1,324 +0,0 @@
-// hub/team/execution-mode.mjs — headless vs interactive execution mode selection
-
-import { existsSync, readFileSync } from "node:fs";
-import { dirname, resolve as pathResolve } from "node:path";
-import { resolveNestedCodexAgentProfile } from "../../scripts/lib/cli-codex.mjs";
-import { codexProfileConfigOverrides } from "../../scripts/lib/codex-profile-config.mjs";
-import {
-  resolveGeminiModel,
-  resolveGeminiProfileForPurpose,
-} from "../../scripts/lib/gemini-profiles.mjs";
-import {
-  buildDisabledCliError,
-  normalizeCliName,
-  resolveCliPolicy,
-} from "../../scripts/lib/machine-profile.mjs";
-import { whichCommand } from "@triflux/core/hub/platform.mjs";
-
-const WIN32_EXT_PRECEDENCE = [".cmd", ".exe", ".bat", ".ps1"];
-
-// #128: parse npm-cmd-shim wrapper to extract the underlying .js entry point.
-// npm shim wrappers end with: "%_prog%" "%dp0%\node_modules\...\<cli>.js" %*
-// %* is cmd batch arg pass-through which mangles multi-line / fenced prompts.
-// Bypass cmd entirely by spawning node + the .js directly.
-export function unwrapCmdToJsScript(cmdPath, opts = {}) {
-  const readFile = opts.readFile || readFileSync;
-  const existsFn = opts.existsSyncFn || existsSync;
-  try {
-    const content = readFile(cmdPath, "utf8");
-    const match = content.match(/"%dp0%[\\/]([^"]+\.[cm]?js)"/i);
-    if (!match) return null;
-    const dir = dirname(cmdPath);
-    const jsPath = pathResolve(dir, match[1].replace(/\\/g, "/"));
-    return existsFn(jsPath) ? jsPath : null;
-  } catch {
-    return null;
-  }
-}
-
-export const MODES = Object.freeze({
-  HEADLESS: "headless",
-  INTERACTIVE: "interactive",
-  AUTO: "auto",
-});
-
-function asPrompt(prompt) {
-  return typeof prompt === "string" ? prompt : "";
-}
-
-function pushFlag(args, flag, value) {
-  if (typeof value === "string" && value.length > 0) {
-    args.push(flag, value);
-  }
-}
-
-// #116-C: codex headless 의 argv-inline prompt 가 macOS oh-my-codex hook
-// SessionStart Failed 회귀를 유발 (codex CLI v0.130.0). cli-adapter-base 의
-// buildExecCommand 가 shell command 형태에서 동일 fix 를 적용했고
-// (TFX_CODEX_STDIN_PROMPT=0 opt-out), 본 함수의 spawn-args 형태에서도 같은
-// 정신으로 prompt 를 stdin transport 로 분리한다. 동일 env var 를 재사용해
-// 사용자가 한 곳만 끄면 양쪽 path 모두 비활성.
-export function resolveStdinPromptMode(explicit, envSource) {
-  if (typeof explicit === "boolean") return explicit;
-  const env = (envSource || process.env).TFX_CODEX_STDIN_PROMPT;
-  if (env === "0" || env === "false") return false;
-  return true;
-}
-
-function normalizeCli(cli) {
-  const value = String(cli || "codex").toLowerCase();
-  if (value === "gemini" || value === "antigravity" || value === "agy") {
-    return "antigravity";
-  }
-  return value;
-}
-
-export function resolveCliExecutable(cli, opts = {}) {
-  const name = String(cli || "codex");
-  const resolveCommand = opts.resolveCommand || whichCommand;
-  const resolved = resolveCommand(name) || name;
-
-  // Windows: Node spawn({ shell: false }) calls CreateProcess directly and does NOT
-  // search PATHEXT. npm-installed CLIs (codex, gemini) live at `<npm>/codex` (Git Bash
-  // shell script) alongside `<npm>/codex.cmd` (Windows batch wrapper). whichCommand
-  // returns the extensionless path, which Windows cannot execute → ENOENT "The system
-  // cannot find the file specified." Append the correct extension when the resolved
-  // path has none.
-  const platform = opts.platform || process.platform;
-  if (platform === "win32" && resolved) {
-    const hasExt = /\.[^\\/.]+$/.test(resolved);
-    if (!hasExt) {
-      const existsFn = opts.existsSyncFn || existsSync;
-      for (const ext of WIN32_EXT_PRECEDENCE) {
-        const candidate = `${resolved}${ext}`;
-        try {
-          if (existsFn(candidate)) return candidate;
-        } catch {
-          // ignore stat failures, try next extension
-        }
-      }
-    }
-  }
-
-  return resolved;
-}
-
-export function buildSpawnSpecForMode(mode, opts = {}) {
-  const cli = normalizeCli(opts.cli || "codex");
-
-  // TFX_DISABLE_* SSOT 집행. route 를 우회하는 spawn 경로도 tfx-route.sh 와 같은
-  // 정책을 따른다. 정책 판독은 런타임 process.env 와 machine profile 만 쓰고,
-  // 자식에게 넘길 세션 env(opts.env)는 쓰지 않는다. 주입 시임은 opts.cliPolicy
-  // (계산된 정책)와 opts.policyEnv(env 객체) 둘뿐이다.
-  // claude 처럼 정책 대상이 아닌 CLI 는 프로파일 파일을 읽지 않는다.
-  if (normalizeCliName(cli)) {
-    const cliPolicy =
-      opts.cliPolicy ?? resolveCliPolicy(opts.policyEnv ?? process.env);
-    const blockedCli = buildDisabledCliError(cli, cliPolicy);
-    if (blockedCli) throw blockedCli;
-  }
-
-  const prompt = asPrompt(opts.prompt);
-  const commandName = cli === "antigravity" ? "agy" : cli;
-  const resolvedCommand = resolveCliExecutable(commandName, opts);
-  const platform = opts.platform || process.platform;
-
-  // Node v20.12+ (CVE-2024-27980) rejects spawn of .cmd/.bat files with shell:false
-  // (EINVAL). npm-installed Windows wrappers (e.g. codex.cmd) hit this.
-  //
-  // #128 (BUG-A): the cmd /c wrapper used to be the workaround, but cmd batch
-  // %* arg pass-through mangles multi-line and fenced (```bash) prompts before
-  // they reach the underlying .js. We now unwrap the .cmd to the node script
-  // it launches and spawn `node <script>` directly, bypassing cmd entirely.
-  // Falls back to cmd /c if the .cmd cannot be parsed.
-  const needsCmdWrap =
-    platform === "win32" && /\.(cmd|bat)$/i.test(resolvedCommand);
-  const unwrappedJs = needsCmdWrap
-    ? (opts.unwrapCmdFn || unwrapCmdToJsScript)(resolvedCommand)
-    : null;
-  const wrap = (args) => {
-    if (unwrappedJs) {
-      const nodeBin = opts.nodeExecPath || process.execPath;
-      return { command: nodeBin, args: [unwrappedJs, ...args] };
-    }
-    if (needsCmdWrap) {
-      return { command: "cmd", args: ["/c", resolvedCommand, ...args] };
-    }
-    return { command: resolvedCommand, args };
-  };
-
-  if (cli === "antigravity") {
-    // agy 1.1.27: --print 는 값(프롬프트)을 받는 마지막 인자다. stdin 프롬프트는
-    // "empty prompt" 로 거부되므로 argv 로 넘긴다.
-    // effort 는 역할별 SSOT(scripts/lib/gemini-profiles.mjs). 명시 model 이 우선한다.
-    const model =
-      typeof opts.model === "string" && opts.model.trim()
-        ? resolveGeminiModel(opts.model.trim(), {
-            profilesPath: opts.geminiProfilesPath,
-          })
-        : resolveGeminiModel(
-            resolveGeminiProfileForPurpose(opts.role || opts.agent),
-            { profilesPath: opts.geminiProfilesPath },
-          );
-    const args = ["--dangerously-skip-permissions"];
-    if (model) args.push("--model", model);
-    args.push("--print", prompt);
-    return {
-      ...wrap(args),
-      useExec: true,
-      shell: false,
-      stdinPrompt: false,
-      prompt,
-    };
-  }
-
-  if (mode === MODES.INTERACTIVE || mode === MODES.AUTO) {
-    return { ...wrap([]), useExec: false, shell: false };
-  }
-
-  if (cli === "claude") {
-    const args = [];
-    pushFlag(args, "--model", opts.model);
-    args.push("-p", prompt);
-    return { ...wrap(args), useExec: true, shell: false };
-  }
-
-  const args = [];
-  args.push(
-    "exec",
-    "--dangerously-bypass-approvals-and-sandbox",
-    "--skip-git-repo-check",
-    "--color",
-    "never",
-  );
-  // Select the effort profile via `-c` config overrides instead of
-  // `--profile <name>`: codex 0.134+ rejects `--profile X` whenever config.toml
-  // still contains an inline [profiles.X] table (which codex re-injects on
-  // config rewrite). These go straight to spawn argv (shell: false), so push
-  // the raw TOML-scalar overrides without shell-quoting.
-  const codexHome = opts.env?.CODEX_HOME;
-  const codexProfile = resolveNestedCodexAgentProfile(opts.role || "executor", {
-    profileOverride: opts.profile ?? "auto",
-    globalProfile: opts.env?.TFX_CODEX_PROFILE ?? process.env.TFX_CODEX_PROFILE,
-    codexHome,
-  });
-  for (const override of codexProfileConfigOverrides(codexProfile, {
-    codexHome,
-    disallowUltra: true,
-    enforceCanonicalProfile: true,
-  })) {
-    args.push("-c", override);
-  }
-  if (Array.isArray(opts.mcpServers)) {
-    const excludedMcpServers = new Set(
-      (Array.isArray(opts.excludeMcpServers) ? opts.excludeMcpServers : [])
-        .map((server) => String(server ?? "").trim())
-        .filter(Boolean),
-    );
-    for (const rawServer of opts.mcpServers) {
-      const server = String(rawServer ?? "").trim();
-      if (!server) continue;
-      if (excludedMcpServers.has(server)) {
-        const message = `Skipping MCP server '${server}' because Codex preflight did not find an enabled config entry.`;
-        if (typeof opts.onWarning === "function") {
-          opts.onWarning(message, { type: "mcp_server_skipped", server });
-        }
-        continue;
-      }
-      args.push("-c", `mcp_servers.${server}.enabled=true`);
-    }
-  }
-
-  // #116-C: codex headless 의 argv-inline prompt → macOS oh-my-codex hook
-  // SessionStart Failed 회귀 (codex v0.130.0). default 가 stdin transport.
-  // conductor.respawnSession 이 spec.prompt 를 child.stdin.write 로 주입한다.
-  const useStdin =
-    resolveStdinPromptMode(opts.stdinPrompt, opts.env) && prompt.length > 0;
-  if (useStdin) {
-    return {
-      ...wrap(args),
-      useExec: true,
-      shell: false,
-      stdinPrompt: true,
-      prompt,
-    };
-  }
-
-  args.push(prompt);
-  return { ...wrap(args), useExec: true, shell: false };
-}
-
-/**
- * @param {{
- *   cli: "codex"|"gemini"|"antigravity"|"agy"|"claude",
- *   taskType?: "implement"|"review"|"research"|"test"|"analyze",
- *   needsInput?: boolean,
- *   estimatedDuration?: number,
- *   hasHub?: boolean,
- * }} opts
- * @returns {{ mode: string, reason: string }}
- */
-export function selectExecutionMode(opts = {}) {
-  const {
-    cli: rawCli = "codex",
-    taskType = "research",
-    needsInput = false,
-    estimatedDuration = 0,
-    hasHub = false,
-  } = opts;
-
-  const cli = normalizeCli(rawCli);
-
-  if (!hasHub) {
-    return {
-      mode: MODES.HEADLESS,
-      reason: "interactive mode requires hub; falling back to headless",
-    };
-  }
-
-  if (cli === "antigravity") {
-    return {
-      mode: MODES.HEADLESS,
-      reason: "antigravity CLI uses headless stdin print mode",
-    };
-  }
-
-  if (taskType === "implement" && !needsInput) {
-    return {
-      mode: MODES.HEADLESS,
-      reason: "implementation without expected input fits headless execution",
-    };
-  }
-
-  if (taskType === "review" || taskType === "analyze") {
-    return {
-      mode: MODES.HEADLESS,
-      reason: "review and analyze tasks default to headless execution",
-    };
-  }
-
-  if (needsInput === true) {
-    return {
-      mode: MODES.INTERACTIVE,
-      reason: "task may require operator input during execution",
-    };
-  }
-
-  if (estimatedDuration > 300) {
-    return {
-      mode: MODES.INTERACTIVE,
-      reason: "long-running work benefits from monitored interactive mode",
-    };
-  }
-
-  return {
-    mode: MODES.HEADLESS,
-    reason: "defaulting to headless execution",
-  };
-}
-
-// buildCommandForMode 는 caller 가 없어 제거됨 (v10.20.x). argv-inline 프롬프트와
-// `-s danger-full-access` flag 가 PR #252 의 stdin redirect 패턴과 정합하지
-// 않아 회귀 위험이 있었다. 실제 헤드리스 spawn 은 buildSpawnSpecForMode
-// (conductor.mjs:544) 가 담당하며, 셸 명령 형태가 필요한 경우는
-// hub/cli-adapter-base.mjs:buildExecCommand 를 사용한다.

package/hub/team/extract-completion-payload.mjs

@@ -1,110 +0,0 @@
-// hub/team/extract-completion-payload.mjs — worker stdout tail → completion JSON
-//
-// Two-tier extraction:
-//   1) Sentinel-framed (preferred, #125): worker emits the payload between
-//      `<<<TFX_COMPLETION_BEGIN>>>` and `<<<TFX_COMPLETION_END>>>` markers
-//      that each occupy their own line. If a standalone-line BEGIN is present
-//      but END is missing, this is a deterministic truncation signal and we
-//      return null instead of falling back. Substring matches inside log
-//      lines (e.g. `[debug] saw <<<TFX_COMPLETION_BEGIN>>> earlier`) do NOT
-//      trigger Tier 1 (Codex R1 LOW finding).
-//   2) Brace-scan fallback (legacy, #115): for workers that haven't adopted
-//      the sentinel protocol yet (or for unit fixtures), scan the tail for
-//      the latest `{...}` pair that parses as a JSON object.
-//
-// The hypervisor's F7 guard (validateWorkerCompletion) decides whether the
-// parsed payload is semantically valid — this layer only handles extraction.
-
-import { SENTINEL_BEGIN, SENTINEL_END } from "./sentinel-capture.mjs";
-
-function isLineEdgeChar(ch) {
-  return ch === "\n" || ch === "\r";
-}
-
-function findStandaloneMarkerLast(text, marker) {
-  let from = 0;
-  let last = -1;
-  while (from <= text.length - marker.length) {
-    const idx = text.indexOf(marker, from);
-    if (idx === -1) return last;
-    const before = idx === 0 || isLineEdgeChar(text[idx - 1]);
-    const afterIdx = idx + marker.length;
-    const after = afterIdx === text.length || isLineEdgeChar(text[afterIdx]);
-    if (before && after) last = idx;
-    from = idx + 1;
-  }
-  return last;
-}
-
-function findStandaloneMarkerFrom(text, marker, fromIdx) {
-  let from = fromIdx;
-  while (from <= text.length - marker.length) {
-    const idx = text.indexOf(marker, from);
-    if (idx === -1) return -1;
-    const before = idx === 0 || isLineEdgeChar(text[idx - 1]);
-    const afterIdx = idx + marker.length;
-    const after = afterIdx === text.length || isLineEdgeChar(text[afterIdx]);
-    if (before && after) return idx;
-    from = idx + 1;
-  }
-  return -1;
-}
-
-/**
- * @param {string} tail raw stdout (sentinel snapshot or 16 KiB sliding tail)
- * @returns {{payload: object} | null}
- */
-export function extractCompletionPayload(tail) {
-  if (typeof tail !== "string" || tail.length === 0) return null;
-
-  // Tier 1: sentinel-framed. Use last standalone-line BEGIN so a worker that
-  // emitted multiple payloads (retry, debug log) yields the most recent one.
-  const beginIdx = findStandaloneMarkerLast(tail, SENTINEL_BEGIN);
-  if (beginIdx !== -1) {
-    const innerStart = beginIdx + SENTINEL_BEGIN.length;
-    const endIdx = findStandaloneMarkerFrom(tail, SENTINEL_END, innerStart);
-    if (endIdx === -1) return null; // BEGIN without END → truncation/incomplete
-    const inner = tail.slice(innerStart, endIdx).trim();
-    try {
-      const parsed = JSON.parse(inner);
-      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-        return { payload: parsed };
-      }
-    } catch {
-      // Sentinel-framed but invalid JSON — do not fall back to brace scan,
-      // because the worker explicitly tried (and failed) to use the protocol.
-    }
-    return null;
-  }
-
-  // Tier 2: brace-scan fallback. Iterate from the latest `}` backward; for
-  // each close, try every `{` that sits before it (nearest first, widening
-  // outward). Tolerates trailing noise containing `}` (`noise } more`) and
-  // dangling `{` (`{ broken`) after the real payload.
-  const closes = [];
-  const opens = [];
-  for (let i = 0; i < tail.length; i += 1) {
-    const ch = tail[i];
-    if (ch === "}") closes.push(i);
-    else if (ch === "{") opens.push(i);
-  }
-  if (closes.length === 0 || opens.length === 0) return null;
-
-  for (let c = closes.length - 1; c >= 0; c -= 1) {
-    const closeIdx = closes[c];
-    for (let o = opens.length - 1; o >= 0; o -= 1) {
-      const openIdx = opens[o];
-      if (openIdx >= closeIdx) continue;
-      const candidate = tail.slice(openIdx, closeIdx + 1);
-      try {
-        const parsed = JSON.parse(candidate);
-        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-          return { payload: parsed };
-        }
-      } catch {
-        // try an earlier `{` for this close, then an earlier `}`.
-      }
-    }
-  }
-  return null;
-}

package/hub/team/headless-bridge-session.mjs

@@ -1,17 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-
-export async function writeBridgeSession(sessionId, socketPath, baseDir) {
-  const sessionsDir = path.join(baseDir, "sessions");
-  await fs.mkdir(sessionsDir, { recursive: true });
-
-  const sessionData = {
-    session_id: sessionId,
-    messagingSock: socketPath,
-    status: "RUNNING",
-    created_at: new Date().toISOString(),
-  };
-
-  const filePath = path.join(sessionsDir, `${sessionId}.json`);
-  await fs.writeFile(filePath, JSON.stringify(sessionData, null, 2), "utf8");
-}