triflux 10.0.6 → 10.1.1

package/.claude-plugin/marketplace.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
+  "name": "triflux",
+  "description": "CLI-first multi-model orchestrator — Codex/Gemini/Claude routing with DAG execution, auto-triage, and cost optimization",
+  "owner": {
+    "name": "tellang"
+  },
+  "plugins": [
+    {
+      "name": "triflux",
+      "description": "CLI-first multi-model orchestrator for Claude Code. Routes tasks to Codex, Gemini, and Claude CLIs with automatic triage, DAG-based parallel execution, headless psmux sessions, and cost-optimized routing. Includes 41 skills, HUD status bar, hook orchestrator, and shell-based CLI routing.",
+      "version": "9.7.14",
+      "author": {
+        "name": "tellang"
+      },
+      "source": {
+        "source": "npm",
+        "package": "triflux"
+      },
+      "category": "productivity",
+      "homepage": "https://github.com/tellang/triflux",
+      "tags": [
+        "multi-model",
+        "codex",
+        "gemini",
+        "cli-routing",
+        "orchestration",
+        "cost-optimization",
+        "dag-execution"
+      ]
+    }
+  ],
+  "version": "9.7.14"
+}

package/.claude-plugin/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "triflux",
+  "version": "10.0.0",
+  "description": "CLI-first multi-model orchestrator for Claude Code — route tasks to Codex, Gemini, and Claude",
+  "author": {
+    "name": "tellang"
+  },
+  "repository": "https://github.com/tellang/triflux",
+  "homepage": "https://github.com/tellang/triflux",
+  "license": "MIT",
+  "keywords": [
+    "claude-code",
+    "plugin",
+    "codex",
+    "gemini",
+    "cli-routing",
+    "orchestration",
+    "multi-model"
+  ],
+  "skills": "./skills/",
+  "hooks": "./hooks/hooks.json"
+}

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 tellang
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2025 tellang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/triflux.mjs

@@ -27,7 +27,7 @@ import {
 import {
   SYNC_MAP, SKILL_ALIASES, REQUIRED_CODEX_PROFILES, LEGACY_CODEX_MODELS,
   syncAliasedSkillDir, hasProfileSection, replaceProfileSection,
-  ensureCodexProfiles, getVersion, cleanupStaleSkills, DEPRECATED_SKILLS,
+  ensureCodexProfiles, getVersion, cleanupStaleSkills, 
   extractManagedHookFilename, getManagedRegistryHooks, ensureHooksInSettings,
   ensureCodexHubServerConfig,
 } from "../scripts/setup.mjs";
@@ -65,14 +65,14 @@ const GREEN_BRIGHT = "\x1b[38;5;82m";
 const RED_BRIGHT = "\x1b[38;5;196m";
 
 // ── 브랜드 요소 ──
-const BRAND = `${AMBER}${BOLD}triflux${RESET}`;
+const _BRAND = `${AMBER}${BOLD}triflux${RESET}`;
 const VER = `${DIM}v${PKG.version}${RESET}`;
 const LINE = `${GRAY}${"─".repeat(48)}${RESET}`;
-const DOT = `${GRAY}·${RESET}`;
+const _DOT = `${GRAY}·${RESET}`;
 const STALE_TEAM_MAX_AGE_SEC = 3600;
 const ANSI_PATTERN = /\x1B\[[0-?]*[ -/]*[@-~]/g;
 
-const EXIT_SUCCESS = 0;
+const _EXIT_SUCCESS = 0;
 const EXIT_ERROR = 1;
 const EXIT_ARG_ERROR = 2;
 const EXIT_CLI_MISSING = 3;
@@ -719,12 +719,11 @@ function previewMcpRegistrationActions(mcpUrl) {
 function previewClaudeRoutingAction() {
   const globalClaudePath = join(CLAUDE_DIR, "CLAUDE.md");
   const projectClaudePath = join(PKG_ROOT, "CLAUDE.md");
-  const projectContent = existsSync(projectClaudePath)
-    ? readFileSync(projectClaudePath, "utf8")
-    : "";
-  const projectSection = extractMarkdownSection(projectContent, TFX_SECTION_HEADING);
 
-  if (!projectSection) {
+  let _routingTable;
+  try {
+    _routingTable = getLatestRoutingTable();
+  } catch {
     return {
       type: "claude-guidance",
       path: globalClaudePath,
@@ -734,18 +733,23 @@ function previewClaudeRoutingAction() {
     };
   }
 
-  const globalContent = existsSync(globalClaudePath)
-    ? readFileSync(globalClaudePath, "utf8")
-    : "";
-  const preview = ensureTfxSection(globalContent, { scope: "global", projectSection });
+  if (!existsSync(globalClaudePath)) {
+    return {
+      type: "claude-guidance",
+      path: globalClaudePath,
+      source: projectClaudePath,
+      change: "create",
+    };
+  }
+
+  const globalContent = readFileSync(globalClaudePath, "utf8");
+  const hasRouting = globalContent.includes("<routing>") || globalContent.includes("## triflux CLI 라우팅");
 
   return {
     type: "claude-guidance",
     path: globalClaudePath,
     source: projectClaudePath,
-    change: preview.changed ? (existsSync(globalClaudePath) ? "update" : "create") : "noop",
-    heading: TFX_SECTION_HEADING,
-    summary: TFX_GLOBAL_SUMMARY_SECTION,
+    change: hasRouting ? "noop" : "create",
   };
 }
 
@@ -2073,7 +2077,7 @@ async function cmdDoctor(options = {}) {
   // 14. Stale Teams (Claude teams/ + tasks/ 자동 감지)
   section("Stale Teams");
   const teamsDir = join(CLAUDE_DIR, "teams");
-  const tasksDir = join(CLAUDE_DIR, "tasks");
+  const _tasksDir = join(CLAUDE_DIR, "tasks");
   if (existsSync(teamsDir)) {
     try {
       const teamDirs = readdirSync(teamsDir).filter(d => {
@@ -2130,8 +2134,8 @@ async function cmdDoctor(options = {}) {
             // 프로세스 명령줄에서 세션 ID 매칭 (tmux 없는 in-process 팀 지원)
             if (!hasActiveMember && teamConfig.leadSessionId) {
               try {
-                const sessionToken = teamConfig.leadSessionId.toLowerCase();
-                const safeToken = teamConfig.leadSessionId.slice(0, 8).replace(/[^a-zA-Z0-9\-]/g, '');
+                const _sessionToken = teamConfig.leadSessionId.toLowerCase();
+                const safeToken = teamConfig.leadSessionId.slice(0, 8).replace(/[^a-zA-Z0-9-]/g, '');
                 // Claude Code 프로세스에서 세션 ID 검색
                 if (process.platform === "win32") {
                   const psOut = execSync(
@@ -3723,7 +3727,7 @@ async function cmdHub(args = [], options = {}) {
         process.kill(info.pid, "SIGTERM");
         try { unlinkSync(HUB_PID_FILE); } catch {}
         console.log(`\n  ${GREEN_BRIGHT}✓${RESET} hub 종료됨 (PID ${info.pid})\n`);
-      } catch (e) {
+      } catch (_e) {
         try { unlinkSync(HUB_PID_FILE); } catch {}
         console.log(`\n  ${DIM}hub 프로세스 없음 — PID 파일 정리됨${RESET}\n`);
       }
@@ -3884,6 +3888,12 @@ async function main() {
     case "hub":
       await cmdHub(cmdArgs, { json: JSON_OUTPUT && (cmdArgs[0] || "status") === "status" });
       return;
+    case "monitor": {
+      const { createMonitor } = await import("../tui/monitor.mjs");
+      const mon = createMonitor();
+      await mon.start();
+      break;
+    }
     case "tray": {
       const trayUrl = new URL("../hub/tray.mjs", import.meta.url);
       const trayPath = fileURLToPath(trayUrl);

package/config/mcp-registry.json

@@ -0,0 +1,29 @@
+{
+  "$schema": "mcp-registry-schema",
+  "version": 1,
+  "description": "MCP 서버 중앙 레지스트리 — 진실의 원천",
+  "defaults": {
+    "transport": "hub-url",
+    "hub_base": "http://127.0.0.1:27888"
+  },
+  "servers": {
+    "tfx-hub": {
+      "transport": "hub-url",
+      "url": "http://127.0.0.1:27888/mcp",
+      "safe": true,
+      "targets": ["claude", "gemini", "codex"],
+      "description": "triflux Hub MCP 서버"
+    }
+  },
+  "policies": {
+    "stdio_action": "replace-with-hub",
+    "unknown_server_action": "warn",
+    "watched_paths": [
+      "~/.gemini/settings.json",
+      "~/.codex/config.toml",
+      "~/.claude/settings.json",
+      "~/.claude/settings.local.json",
+      ".mcp.json"
+    ]
+  }
+}

package/hooks/error-context.mjs

@@ -4,7 +4,8 @@
 // 도구 실패 시 에러 패턴을 분석하여 해결 힌트를 additionalContext로 주입한다.
 // Claude가 동일 에러를 반복하지 않도록 구체적 가이드를 제공.
 
-import { readFileSync } from "node:fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
 
 // ── 에러 패턴 → 해결 힌트 매핑 ─────────────────────────────
 const ERROR_HINTS = [
@@ -128,16 +129,43 @@ function main() {
     JSON.stringify(input.tool_result || ""),
   ].join("\n");
 
+  // ── reflexion 적응형 학습: safety-guard/headless-guard 차단을 패널티로 기록 ──
+  const isSafetyBlock = /\[(?:safety-guard|headless-guard)\].*(?:BLOCKED|차단)/i.test(errorText);
+  if (isSafetyBlock) {
+    try {
+      const home = process.env.HOME || process.env.USERPROFILE || "";
+      const penaltyDir = join(home, ".triflux", "reflexion");
+      mkdirSync(penaltyDir, { recursive: true });
+      const penaltyFile = join(penaltyDir, "pending-penalties.jsonl");
+      const command = input.tool_input?.command || "";
+      const entry = {
+        ts: new Date().toISOString(),
+        type: "guard_block",
+        tool: input.tool_name || "Bash",
+        error_pattern: errorText.match(/\[.*?\]\s*(.{0,120})/)?.[1] || errorText.slice(0, 120),
+        command_preview: command.slice(0, 200),
+        source: errorText.includes("safety-guard") ? "safety-guard" : "headless-guard",
+      };
+      writeFileSync(penaltyFile, JSON.stringify(entry) + "\n", { flag: "a" });
+    } catch { /* reflexion 기록 실패는 무시 — 힌트 출력에 영향 주지 않음 */ }
+  }
+
   const hints = findHints(errorText);
-  if (hints.length === 0) process.exit(0);
+  // safety-guard 차단에는 guard가 이미 구체적 안내를 제공하므로 추가 힌트 불필요
+  if (hints.length === 0 && !isSafetyBlock) process.exit(0);
 
   const toolName = input.tool_name || "Unknown";
-  const output = {
-    systemMessage:
-      `[error-context] ${toolName} 실패 — 해결 힌트:\n` +
-      hints.map((h) => `  → ${h}`).join("\n"),
-  };
+  const parts = [];
+  if (hints.length > 0) {
+    parts.push(`[error-context] ${toolName} 실패 — 해결 힌트:\n` + hints.map((h) => `  → ${h}`).join("\n"));
+  }
+  if (isSafetyBlock) {
+    parts.push("[reflexion] 이 패턴이 적응형 학습에 기록되었습니다. 다음 세션에서 동일 패턴 시 사전 차단됩니다.");
+  }
+
+  if (parts.length === 0) process.exit(0);
 
+  const output = { systemMessage: parts.join("\n") };
   process.stdout.write(JSON.stringify(output));
 }
 

package/hooks/hook-orchestrator.mjs

@@ -340,6 +340,20 @@ async function main() {
     }
   }
 
+  // ── PostToolUse:Skill 완료 시 라우팅 가중치 기록 ──
+  if (eventName === "PostToolUse" && toolName === "Skill" && !blocked) {
+    try {
+      const input = JSON.parse(stdinRaw);
+      const skillName = input.tool_input?.skill || "";
+      if (skillName && skillName.startsWith("tfx-")) {
+        const mode = skillName.replace(/^tfx-/, "");
+        const gitRoot = process.env.GIT_WORK_TREE || process.cwd();
+        const slug = gitRoot.split(/[\\/]/).pop() || "unknown";
+        recordRouteOutcome(slug, mode, "completion");
+      }
+    } catch { /* 가중치 기록 실패 무시 */ }
+  }
+
   // 결과 출력
   if (blocked) {
     process.exit(2);

package/hooks/hook-registry.json

@@ -63,6 +63,16 @@
         "timeout": 2,
         "blocking": false,
         "description": "tfx-multi 상태 추적 게이트"
+      },
+      {
+        "id": "tfx-write-edit-passthrough",
+        "source": "triflux",
+        "matcher": "Edit|Write",
+        "command": "exit 0",
+        "priority": 999,
+        "enabled": true,
+        "blocking": false,
+        "description": "Edit/Write passthrough"
       }
     ],
     "PostToolUse": [

package/hooks/safety-guard.mjs

@@ -8,7 +8,8 @@
 //   BLOCK (exit 2)  — 복구 불가능한 파괴적 명령
 //   WARN  (allow + context) — 주의가 필요한 명령
 
-import { readFileSync } from "node:fs";
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
 
 // ── 차단 규칙 ──────────────────────────────────────────────
 const BLOCK_RULES = [
@@ -38,6 +39,21 @@ const WT_DIRECT_PATTERNS = [
 const WT_DIRECT_BLOCK_MESSAGE =
   "[safety-guard] wt.exe 직접 호출 차단됨. → hub/team/wt-manager.mjs의 createTab() / splitPane() / applySplitLayout()을 사용하세요.";
 
+// ── SSH+PowerShell bash 문법 차단 ────────────────────────────
+// 원격 기본 셸이 PowerShell인 호스트에 bash redirect/glob을 보내면 오동작
+const BASH_SYNTAX_IN_SSH = [
+  /2>\/dev\/null/,          // 2>/dev/null → PowerShell에서 Out-File C:\dev\null
+  />\s*\/dev\/null/,        // >/dev/null
+  /&>\s*\/dev\/null/,       // &>/dev/null
+  /\$\(/,                   // $(cmd) → PowerShell에서 다른 의미
+  /\bsource\s+/,            // source → PowerShell에 없음
+  /\bexport\s+\w+=/,        // export VAR= → PowerShell에 없음
+];
+
+const SSH_POWERSHELL_HINT =
+  "원격 셸이 PowerShell입니다. bash 문법 직접 전달 금지. scp + pwsh -File 패턴 사용. " +
+  "2>/dev/null → 2>$null, $() → $(), export → $env:, source → . (dot-source)";
+
 // ── 경고 규칙 ──────────────────────────────────────────────
 const WARN_RULES = [
   { pattern: /\bgit\s+push\b(?!.*--force)/i, warn: "git push 감지. 원격 저장소에 반영됩니다." },
@@ -50,6 +66,20 @@ const WARN_RULES = [
   { pattern: /\bcurl\s.*\|\s*(bash|sh)\b/i, warn: "curl | sh 감지. 원격 스크립트 실행 주의." },
 ];
 
+// ── reflexion 적응형 패널티 로드 ──────────────────────────────
+function loadReflexionPenalties() {
+  try {
+    const home = process.env.HOME || process.env.USERPROFILE || "";
+    const penaltyFile = join(home, ".triflux", "reflexion", "pending-penalties.jsonl");
+    if (!existsSync(penaltyFile)) return [];
+    return readFileSync(penaltyFile, "utf8")
+      .split("\n")
+      .filter(Boolean)
+      .map(line => { try { return JSON.parse(line); } catch { return null; } })
+      .filter(Boolean);
+  } catch { return []; }
+}
+
 function readStdin() {
   try {
     return readFileSync(0, "utf8");
@@ -127,6 +157,45 @@ function main() {
     blockCommand(WT_DIRECT_BLOCK_MESSAGE, command);
   }
 
+  // 0.1. reflexion 적응형 패널티 — 이전 세션에서 차단된 패턴 사전 경고
+  const penalties = loadReflexionPenalties();
+  if (penalties.length > 0) {
+    for (const penalty of penalties) {
+      if (penalty.error_pattern && new RegExp(penalty.error_pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").slice(0, 80), "i").test(command)) {
+        const output = {
+          hookSpecificOutput: {
+            hookEventName: "PreToolUse",
+            permissionDecision: "allow",
+            additionalContext:
+              `[reflexion] 이전 세션에서 차단된 패턴과 유사합니다 (${penalty.source}, ${penalty.ts?.slice(0, 10)}). ` +
+              `이전 차단 사유: ${penalty.error_pattern?.slice(0, 100)}`,
+          },
+        };
+        process.stdout.write(JSON.stringify(output));
+        process.exit(0);
+      }
+    }
+  }
+
+  // 0.5. SSH → PowerShell 호스트에 bash 문법 전달 차단
+  // 세그먼트 시작 위치에서 ssh 명령인 경우만 (문자열/코드 안의 ssh는 무시)
+  if (hasSegmentInvocation(command, [/^\s*ssh\s+/i])) {
+    // 세그먼트 분리 후 ssh로 시작하는 세그먼트의 payload만 검사
+    const segments = command.split(/\s*(?:&&|;|\|\||\|)\s*/);
+    for (const seg of segments) {
+      const sshMatch = seg.trim().match(/^ssh\s+\S+\s+(.*)/s);
+      if (!sshMatch) continue;
+      const sshPayload = sshMatch[1];
+      const bashSyntax = BASH_SYNTAX_IN_SSH.find(p => p.test(sshPayload));
+      if (bashSyntax) {
+        blockCommand(
+          `[safety-guard] SSH 명령에 bash 전용 문법 감지: ${bashSyntax}. ${SSH_POWERSHELL_HINT}`,
+          command,
+        );
+      }
+    }
+  }
+
   // 1. BLOCK 체크 — exit 2로 차단
   for (const rule of BLOCK_RULES) {
     if (rule.skipIfGit && !isPsmuxInvocation(command)) continue;

package/hub/adaptive-inject.mjs

@@ -183,4 +183,4 @@ export function createAdaptiveInjector(opts = {}) {
   });
 }
 
-export default createAdaptiveInjector;
+export default createAdaptiveInjector;