triflux 10.0.0 → 10.0.2

package/hooks/pipeline-stop.mjs

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+// hooks/pipeline-stop.mjs — Stop 훅: 활성 파이프라인 감지 시 구조화 decision 반환
+//
+// Claude Code Stop 이벤트에서 실행.
+// 비터미널 단계의 파이프라인이 있으면 decision:"block" + reason으로 중단을 방지한다.
+// 파이프라인이 없으면 정상 종료를 허용한다.
+
+import { existsSync } from "node:fs";
+
+let getPipelineStateDbPath;
+let ensurePipelineTable;
+let listPipelineStates;
+try {
+  ({
+    getPipelineStateDbPath,
+    ensurePipelineTable,
+    listPipelineStates,
+  } = await import("../hub/pipeline/state.mjs"));
+} catch {
+  // hub/pipeline 모듈 없으면 훅 무동작
+  process.exit(0);
+}
+
+const PROJECT_ROOT = process.env.CLAUDE_CWD || process.cwd();
+const HUB_DB_PATH = getPipelineStateDbPath(PROJECT_ROOT);
+const TERMINAL = new Set(["complete", "failed"]);
+
+async function checkActivePipelines() {
+  if (!existsSync(HUB_DB_PATH)) return [];
+
+  try {
+    const { default: Database } = await import("better-sqlite3");
+
+    const db = new Database(HUB_DB_PATH, { readonly: true });
+    ensurePipelineTable(db);
+    const states = listPipelineStates(db);
+    db.close();
+
+    return states.filter((s) => !TERMINAL.has(s.phase));
+  } catch {
+    return [];
+  }
+}
+
+try {
+  const active = await checkActivePipelines();
+
+  if (active.length === 0) {
+    // 활성 파이프라인 없음 → 정상 종료 허용
+    process.exit(0);
+  }
+
+  // 활성 파이프라인 발견 → 구조화 decision으로 block
+  const lines = active.map(
+    (s) =>
+      `  - 팀 ${s.team_name}: ${s.phase} 단계 (fix: ${s.fix_attempt}/${s.fix_max}, ralph: ${s.ralph_iteration}/${s.ralph_max})`
+  );
+
+  const reason =
+    `[tfx-multi 파이프라인 진행 중]\n` +
+    `활성 파이프라인 ${active.length}개가 아직 완료되지 않았습니다:\n` +
+    `${lines.join("\n")}\n\n` +
+    `파이프라인을 이어서 진행하려면 /tfx-multi status 로 상태를 확인하세요.\n` +
+    `강제 종료하려면 /tfx-multi cancel 을 먼저 실행하세요.`;
+
+  // 구조화된 Stop hook 출력: decision + reason
+  const output = {
+    decision: "block",
+    reason,
+  };
+
+  process.stdout.write(JSON.stringify(output));
+} catch {
+  // 훅 실패 시 종료 허용
+  process.exit(0);
+}

package/hooks/safety-guard.mjs

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+// hooks/safety-guard.mjs — PreToolUse:Bash 훅
+//
+// 위험한 Bash 명령을 사전 차단(exit 2)하거나 경고(additionalContext)한다.
+// hooks.json에서 `if: "Bash(*)"` 필터와 함께 사용.
+//
+// 차단 레벨:
+//   BLOCK (exit 2)  — 복구 불가능한 파괴적 명령
+//   WARN  (allow + context) — 주의가 필요한 명령
+
+import { readFileSync } from "node:fs";
+
+// ── 차단 규칙 ──────────────────────────────────────────────
+const BLOCK_RULES = [
+  { pattern: /\brm\s+(-[^\s]*)?-rf?\s+[/~](?!tmp\b)(?!\S*node_modules)/i, reason: "루트/홈 디렉토리 rm -rf 차단" },
+  { pattern: /\brm\s+(-[^\s]*)?-rf?\s+\.\s*$/i, reason: "현재 디렉토리 rm -rf . 차단" },
+  { pattern: /\bgit\s+push\s+.*--force\s+.*\b(main|master)\b/i, reason: "main/master force push 차단" },
+  { pattern: /\bgit\s+push\s+--force\s*$/i, reason: "대상 미지정 force push 차단" },
+  { pattern: /\bgit\s+reset\s+--hard\s+origin\//i, reason: "remote reset --hard 차단 — 로컬 작업 소실 위험" },
+  { pattern: /\bdrop\s+(table|database|schema)\b/i, reason: "SQL DROP 차단" },
+  { pattern: /\btruncate\s+table\b/i, reason: "SQL TRUNCATE 차단" },
+  { pattern: /\bformat\s+[a-z]:/i, reason: "디스크 포맷 차단" },
+  { pattern: /\b(del|rmdir)\s+\/[sq]\b/i, reason: "Windows 재귀 삭제 차단" },
+  { pattern: /\bgit\s+clean\s+.*-fd/i, reason: "git clean -fd 차단 — 추적되지 않은 파일 소실 위험" },
+  { pattern: /\bpsmux\s+kill-session\b/i, reason: "raw psmux kill-session 차단 — WT ConPTY 프리징 위험. 안전 경로: node hub/team/psmux.mjs kill --session <name>", skipIfGit: true },
+  { pattern: /\bpsmux\s+kill-server\b/i, reason: "psmux kill-server 차단 — 모든 세션이 즉시 종료됩니다. node hub/team/psmux.mjs kill-swarm 사용", skipIfGit: true },
+];
+
+const WT_DIRECT_PATTERNS = [
+  /\bwt\.exe\b/i,
+  /\bwt\s+new-tab\b/i,
+  /\bwt\s+split-pane\b/i,
+  /\bwt\s+-w\b/i,
+  /\bStart-Process\s+wt/i,
+  /\bStart-Process\s+['"]?wt\.exe/i,
+];
+
+const WT_DIRECT_BLOCK_MESSAGE =
+  "[safety-guard] wt.exe 직접 호출 차단됨. → hub/team/wt-manager.mjs의 createTab() / splitPane() / applySplitLayout()을 사용하세요.";
+
+// ── 경고 규칙 ──────────────────────────────────────────────
+const WARN_RULES = [
+  { pattern: /\bgit\s+push\b(?!.*--force)/i, warn: "git push 감지. 원격 저장소에 반영됩니다." },
+  { pattern: /\bgit\s+rebase\b/i, warn: "git rebase 감지. 커밋 히스토리가 변경됩니다." },
+  { pattern: /\bgit\s+branch\s+-[dD]\b/i, warn: "브랜치 삭제 감지." },
+  { pattern: /\bnpm\s+publish\b/i, warn: "npm publish 감지. 공개 레지스트리에 배포됩니다." },
+  { pattern: /\brm\s+(-[^\s]*)?-rf?\s/i, warn: "재귀 삭제 감지. 대상을 확인하세요." },
+  { pattern: /--no-verify\b/i, warn: "--no-verify 감지. 훅 건너뛰기는 권장하지 않습니다." },
+  { pattern: /\bchmod\s+777\b/i, warn: "chmod 777 감지. 보안 위험." },
+  { pattern: /\bcurl\s.*\|\s*(bash|sh)\b/i, warn: "curl | sh 감지. 원격 스크립트 실행 주의." },
+];
+
+function readStdin() {
+  try {
+    return readFileSync(0, "utf8");
+  } catch {
+    return "";
+  }
+}
+
+function shouldSkipSegment(segment) {
+  return !segment || segment.startsWith("#") || /^\s*(echo|printf|grep|git\s+commit)\b/i.test(segment);
+}
+
+function hasSegmentInvocation(cmd, patterns) {
+  if (!patterns.some((pattern) => pattern.test(cmd))) return false;
+
+  const lines = cmd.split(/\n/);
+  let heredocDelimiter = null;
+  return lines.some((line) => {
+    if (heredocDelimiter !== null) {
+      if (line.trim() === heredocDelimiter) heredocDelimiter = null;
+      return false;
+    }
+
+    const heredocMatch = line.match(/<<['"]?(\w+)['"]?/);
+    if (heredocMatch) {
+      heredocDelimiter = heredocMatch[1];
+      return false;
+    }
+
+    const segments = line.split(/\s*(?:&&|;|\|\|)\s*/);
+    return segments.some((seg) => {
+      const trimmed = seg.trim();
+      if (shouldSkipSegment(trimmed)) return false;
+      return patterns.some((pattern) => pattern.test(trimmed));
+    });
+  });
+}
+
+function blockCommand(message, command) {
+  process.stderr.write(
+    `${message}\n` +
+      `명령어: ${command.slice(0, 120)}${command.length > 120 ? "..." : ""}\n` +
+      "이 명령은 실행할 수 없습니다. 안전한 대안을 사용하세요."
+  );
+  process.exit(2);
+}
+
+function main() {
+  const raw = readStdin();
+  if (!raw.trim()) process.exit(0);
+
+  let input;
+  try {
+    input = JSON.parse(raw);
+  } catch {
+    process.exit(0);
+  }
+
+  if (input.tool_name !== "Bash") process.exit(0);
+
+  const command = (input.tool_input?.command || "").trim();
+  if (!command) process.exit(0);
+
+  // psmux 명령이 실제 CLI 호출인지 판별 (오탐 방지)
+  // git commit 메시지, echo, grep, cat, heredoc 안의 텍스트는 무시
+  function isPsmuxInvocation(cmd) {
+    return hasSegmentInvocation(cmd, [/\bpsmux\s+kill-(session|server)\b/i]);
+  }
+
+  function isWtDirectInvocation(cmd) {
+    return hasSegmentInvocation(cmd, WT_DIRECT_PATTERNS);
+  }
+
+  if (isWtDirectInvocation(command)) {
+    blockCommand(WT_DIRECT_BLOCK_MESSAGE, command);
+  }
+
+  // 1. BLOCK 체크 — exit 2로 차단
+  for (const rule of BLOCK_RULES) {
+    if (rule.skipIfGit && !isPsmuxInvocation(command)) continue;
+    if (rule.pattern.test(command)) {
+      blockCommand(`[triflux safety-guard] BLOCKED: ${rule.reason}`, command);
+    }
+  }
+
+  // 2. WARN 체크 — allow + additionalContext
+  const warnings = [];
+  for (const rule of WARN_RULES) {
+    if (rule.pattern.test(command)) {
+      warnings.push(rule.warn);
+    }
+  }
+
+  if (warnings.length > 0) {
+    const output = {
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "allow",
+        additionalContext:
+          `[safety-guard] ⚠ ${warnings.join(" | ")}\n` +
+          `명령어: ${command.slice(0, 200)}`,
+      },
+    };
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+  }
+
+  // 3. 안전한 명령 → 통과
+  process.exit(0);
+}
+
+try {
+  main();
+} catch {
+  // 훅 실패 시 블로킹하지 않음
+  process.exit(0);
+}

package/hooks/subagent-verifier.mjs

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+// hooks/subagent-verifier.mjs — SubagentStop 훅
+//
+// 서브에이전트 완료 시 결과 품질을 체크한다:
+//   - 빈 결과 감지 → 재시도 제안
+//   - 에러 종료 감지 → 원인 분석 컨텍스트 주입
+//   - 과도한 토큰 사용 감지 → 효율성 알림
+
+import { readFileSync } from "node:fs";
+
+function readStdin() {
+  try {
+    return readFileSync(0, "utf8");
+  } catch {
+    return "";
+  }
+}
+
+function main() {
+  const raw = readStdin();
+  if (!raw.trim()) process.exit(0);
+
+  let input;
+  try {
+    input = JSON.parse(raw);
+  } catch {
+    process.exit(0);
+  }
+
+  const agentType = input.agent_type || input.subagent_type || "unknown";
+  const result = input.tool_output || input.result || "";
+  const resultStr = typeof result === "string" ? result : JSON.stringify(result);
+
+  const issues = [];
+
+  // 1. 빈 결과 체크
+  if (!resultStr.trim() || resultStr.trim().length < 20) {
+    issues.push(
+      `서브에이전트(${agentType})가 거의 빈 결과를 반환했습니다. ` +
+        "프롬프트를 더 구체적으로 작성하거나, 다른 subagent_type을 시도하세요."
+    );
+  }
+
+  // 2. 에러 키워드 감지
+  const errorPatterns = [
+    /error:|exception:|traceback|failed to|fatal:/i,
+    /❌|FAILED|ERROR/,
+  ];
+  const hasError = errorPatterns.some((p) => p.test(resultStr));
+  if (hasError && resultStr.length > 50) {
+    issues.push(
+      `서브에이전트(${agentType}) 결과에 에러 신호가 감지되었습니다. ` +
+        "결과를 검토하고, 필요 시 다른 접근 방식을 사용하세요."
+    );
+  }
+
+  // 3. 결과가 너무 길면 요약 필요 알림
+  if (resultStr.length > 15000) {
+    issues.push(
+      `서브에이전트(${agentType}) 결과가 ${Math.round(resultStr.length / 1000)}K 자입니다. ` +
+        "핵심만 추출하여 컨텍스트 윈도우를 절약하세요."
+    );
+  }
+
+  if (issues.length === 0) process.exit(0);
+
+  const output = {
+    systemMessage:
+      `[subagent-verifier] ${agentType} 완료 — 주의사항:\n` +
+      issues.map((i) => `  → ${i}`).join("\n"),
+  };
+
+  process.stdout.write(JSON.stringify(output));
+}
+
+try {
+  main();
+} catch {
+  process.exit(0);
+}

package/hub/account-broker.mjs

@@ -0,0 +1,251 @@
+// hub/account-broker.mjs — Multi-account CLI pool broker
+// Manages lease/release/cooldown for Codex and Gemini accounts.
+// Singleton export. All state changes create new objects (immutable pattern).
+
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import * as z from 'zod';
+
+// ── Zod schema ───────────────────────────────────────────────────
+
+const AccountSchema = z.object({
+  id: z.string().min(1),
+  mode: z.enum(['profile', 'env', 'auth']),
+  profile: z.string().optional(),
+  env: z.record(z.string(), z.string()).optional(),
+  authFile: z.string().optional(),
+  tier: z.enum(['pro', 'plus', 'free', 'unknown']).optional().default('unknown'),
+}).superRefine((val, ctx) => {
+  if (val.mode === 'auth' && !val.authFile) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: 'authFile is required when mode is "auth"',
+      path: ['authFile'],
+    });
+  }
+});
+
+const ConfigSchema = z.object({
+  defaults: z.object({
+    cooldownMs: z.number().int().positive().optional(),
+  }).optional(),
+  codex: z.array(AccountSchema).optional(),
+  gemini: z.array(AccountSchema).optional(),
+});
+
+const DEFAULT_COOLDOWN_MS = 300_000; // 5 minutes
+const TIER_PRIORITY = { pro: 0, plus: 1, unknown: 2, free: 3 };
+const LEASE_TTL_MS = 30 * 60 * 1000; // 30 minutes
+const AUTH_BASE_PATH = join(homedir(), '.claude', 'cache', 'tfx-hub');
+
+// ── env var resolution ───────────────────────────────────────────
+
+function resolveEnvValues(env) {
+  if (!env) return undefined;
+  const resolved = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (typeof value === 'string' && value.startsWith('$')) {
+      const varName = value.slice(1);
+      resolved[key] = process.env[varName] ?? '';
+    } else {
+      resolved[key] = value;
+    }
+  }
+  return resolved;
+}
+
+// ── AccountBroker ────────────────────────────────────────────────
+
+class AccountBroker {
+  #config;
+  #state; // Map<accountId, accountState>
+  #roundRobinIndex; // Map<provider, number>
+
+  constructor(config) {
+    const parsed = ConfigSchema.parse(config);
+    this.#config = parsed;
+
+    this.#state = new Map();
+    this.#roundRobinIndex = new Map();
+
+    const allAccounts = [
+      ...(parsed.codex || []).map((a) => ({ ...a, provider: 'codex' })),
+      ...(parsed.gemini || []).map((a) => ({ ...a, provider: 'gemini' })),
+    ];
+
+    for (const account of allAccounts) {
+      this.#state.set(account.id, {
+        id: account.id,
+        provider: account.provider,
+        mode: account.mode,
+        profile: account.profile,
+        env: account.env,
+        authFile: account.authFile,
+        tier: account.tier ?? 'unknown',
+        busy: false,
+        leasedAt: null,
+        cooldownUntil: 0,
+        failures: 0,
+        lastUsedAt: 0,
+        totalSessions: 0,
+      });
+    }
+  }
+
+  // ── lease TTL pruning ──────────────────────────────────────────
+
+  #pruneExpiredLeases(now) {
+    for (const [id, acct] of this.#state) {
+      if (acct.busy && acct.leasedAt !== null && now - acct.leasedAt > LEASE_TTL_MS) {
+        this.#state.set(id, { ...acct, busy: false, leasedAt: null });
+      }
+    }
+  }
+
+  // ── lease ─────────────────────────────────────────────────────
+
+  lease({ provider }) {
+    const now = Date.now();
+    this.#pruneExpiredLeases(now);
+
+    const accounts = [...this.#state.values()].filter((a) => a.provider === provider);
+    if (!accounts.length) return null;
+
+    // group available accounts by tier, preserving insertion order within each tier
+    const available = accounts.filter((a) => !a.busy && a.cooldownUntil <= now);
+    if (!available.length) return null;
+
+    // sort by tier priority; stable sort preserves original order within same priority
+    const sorted = [...available].sort(
+      (a, b) => (TIER_PRIORITY[a.tier] ?? 2) - (TIER_PRIORITY[b.tier] ?? 2),
+    );
+
+    // pick the best tier, then apply round-robin within that tier's accounts
+    const bestTier = sorted[0].tier;
+    const sameTierAccounts = sorted.filter((a) => a.tier === bestTier);
+
+    // use a per-provider+tier round-robin key to distribute within the tier
+    const rrKey = `${provider}:${bestTier}`;
+    const rrCurrent = this.#roundRobinIndex.get(rrKey) ?? 0;
+    const tierCount = sameTierAccounts.length;
+    const idx = rrCurrent % tierCount;
+    const acct = sameTierAccounts[idx];
+
+    // advance round-robin index for this tier
+    this.#roundRobinIndex.set(rrKey, (idx + 1) % tierCount);
+
+    // update state (immutable)
+    this.#state.set(acct.id, {
+      ...acct,
+      busy: true,
+      leasedAt: now,
+      lastUsedAt: now,
+      totalSessions: acct.totalSessions + 1,
+    });
+
+    return {
+      id: acct.id,
+      mode: acct.mode,
+      profile: acct.mode === 'profile' ? acct.profile : undefined,
+      env: acct.mode === 'env' ? resolveEnvValues(acct.env) : undefined,
+      authFile: acct.mode === 'auth' ? join(AUTH_BASE_PATH, acct.authFile) : undefined,
+    };
+  }
+
+  // ── release ───────────────────────────────────────────────────
+
+  release(accountId, result) {
+    const acct = this.#state.get(accountId);
+    if (!acct) return;
+
+    const ok = result?.ok === true;
+    const newFailures = ok ? 0 : acct.failures + 1;
+    const cooldownMs = this.#config.defaults?.cooldownMs ?? DEFAULT_COOLDOWN_MS;
+
+    const updated = {
+      ...acct,
+      busy: false,
+      leasedAt: null,
+      failures: newFailures,
+    };
+
+    // consecutive failure guard: 3+ failures → auto-cooldown
+    if (newFailures >= 3) {
+      updated.cooldownUntil = Date.now() + cooldownMs;
+      updated.failures = 0; // reset after cooldown triggered
+    }
+
+    this.#state.set(accountId, updated);
+  }
+
+  // ── markRateLimited ───────────────────────────────────────────
+
+  markRateLimited(id, coolMs) {
+    const acct = this.#state.get(id);
+    if (!acct) return;
+    this.#state.set(id, {
+      ...acct,
+      busy: false,
+      leasedAt: null,
+      cooldownUntil: Date.now() + coolMs,
+    });
+  }
+
+  // ── snapshot ──────────────────────────────────────────────────
+
+  snapshot() {
+    return [...this.#state.values()].map((acct) => ({ ...acct }));
+  }
+
+  // ── nextAvailableEta ──────────────────────────────────────────
+
+  nextAvailableEta(provider) {
+    const now = Date.now();
+    this.#pruneExpiredLeases(now);
+
+    const accounts = [...this.#state.values()].filter((a) => a.provider === provider);
+    if (!accounts.length) return null;
+
+    // find minimum cooldownUntil among accounts that are in cooldown or busy
+    let earliest = null;
+    for (const acct of accounts) {
+      if (!acct.busy && acct.cooldownUntil <= now) {
+        // this account is available now — no ETA needed
+        return null;
+      }
+      const eta = acct.busy ? (acct.leasedAt ?? now) + LEASE_TTL_MS : acct.cooldownUntil;
+      if (earliest === null || eta < earliest) {
+        earliest = eta;
+      }
+    }
+    return earliest;
+  }
+}
+
+// ── Config loader ────────────────────────────────────────────────
+
+function loadConfig() {
+  const configPath = join(homedir(), '.claude', 'cache', 'tfx-hub', 'accounts.json');
+  if (!existsSync(configPath)) return null;
+  try {
+    return JSON.parse(readFileSync(configPath, 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+// ── Singleton ────────────────────────────────────────────────────
+
+function createBroker() {
+  const config = loadConfig();
+  if (!config) return null;
+  try {
+    return new AccountBroker(config);
+  } catch {
+    return null;
+  }
+}
+
+export const broker = createBroker();
+export { AccountBroker };