triflux 10.18.2 → 10.20.0

package/.claude-plugin/marketplace.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
+  "name": "triflux",
+  "description": "CLI-first multi-model orchestrator — Codex/Gemini/Claude routing with DAG execution, auto-triage, and cost optimization",
+  "owner": {
+    "name": "tellang"
+  },
+  "plugins": [
+    {
+      "name": "triflux",
+      "description": "Tri-CLI orchestrator for Claude Code. Routes tasks across Claude + Codex + Gemini with consensus intelligence, natural language routing, 42 skills, and cross-model review.",
+      "version": "10.20.0",
+      "author": {
+        "name": "tellang"
+      },
+      "source": {
+        "source": "npm",
+        "package": "triflux"
+      },
+      "category": "productivity",
+      "homepage": "https://github.com/tellang/triflux",
+      "tags": [
+        "multi-model",
+        "codex",
+        "gemini",
+        "cli-routing",
+        "orchestration",
+        "cost-optimization",
+        "dag-execution"
+      ]
+    }
+  ],
+  "version": "10.20.0"
+}

package/.claude-plugin/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "triflux",
+  "version": "10.20.0",
+  "description": "CLI-first multi-model orchestrator for Claude Code — route tasks to Codex, Gemini, and Claude",
+  "author": {
+    "name": "tellang"
+  },
+  "repository": "https://github.com/tellang/triflux",
+  "homepage": "https://github.com/tellang/triflux",
+  "license": "MIT",
+  "keywords": [
+    "claude-code",
+    "plugin",
+    "codex",
+    "gemini",
+    "cli-routing",
+    "orchestration",
+    "multi-model"
+  ],
+  "skills": "./skills/",
+  "hooks": "./hooks/hooks.json"
+}

package/config/mcp-registry.json

@@ -0,0 +1,44 @@
+{
+  "$schema": "mcp-registry-schema",
+  "version": 1,
+  "description": "MCP 서버 중앙 레지스트리 — 진실의 원천",
+  "defaults": {
+    "transport": "hub-url",
+    "hub_base": "http://127.0.0.1:27888"
+  },
+  "policy_notes": {
+    "transport": "Server transport accepts \"hub-url\" for the existing triflux Hub URL flow or \"http\" for direct Streamable HTTP MCP endpoints. Direct stdio registration via command/args is intentionally unsupported.",
+    "headers": "Optional headers are allowed only for HTTP-compatible transports. Each header value must be a descriptor: {\"value\":\"literal\"} for non-secret static values, {\"env\":\"ENV_VAR_NAME\"} for secrets resolved at sync/runtime, or {\"env\":\"ENV_VAR_NAME\",\"prefix\":\"Bearer \"} for common authorization formats.",
+    "secret_safety": "Resolved secret values must not be written back to this registry file. Missing env vars warn during sync and do not emit empty secret headers.",
+    "sync_denylist": "Array of client:server strings skipped by proactive registry sync, for example gemini:tfx-hub."
+  },
+  "servers": {
+    "tfx-hub": {
+      "transport": "hub-url",
+      "url": "http://127.0.0.1:27888/mcp",
+      "safe": true,
+      "targets": ["claude", "gemini", "codex"],
+      "description": "triflux Hub MCP 서버"
+    },
+    "context7": {
+      "transport": "http",
+      "url": "https://mcp.context7.com/mcp",
+      "safe": true,
+      "targets": ["claude", "gemini", "codex"],
+      "description": "Upstash Context7 — 라이브러리 문서/코드 컨텍스트 (HTTP MCP, API key 불필요)"
+    }
+  },
+  "policies": {
+    "stdio_action": "replace-with-hub",
+    "unknown_server_action": "warn",
+    "sync_denylist": [],
+    "watched_paths": [
+      "~/.gemini/settings.json",
+      "~/.codex/config.toml",
+      "~/.claude/settings.json",
+      "~/.claude/settings.local.json",
+      ".claude/mcp.json",
+      ".mcp.json"
+    ]
+  }
+}

package/hub/account-broker.mjs

@@ -66,9 +66,17 @@ const TIER_PRIORITY = { pro: 0, plus: 1, unknown: 2, free: 3 };
 const LEASE_TTL_MS = 30 * 60 * 1000; // 30 minutes
 const CIRCUIT_WINDOW_MS = 10 * 60_000; // 10 minutes
 const CIRCUIT_MAX_FAILURES = 3;
-const AUTH_BASE_PATH = join(homedir(), ".claude", "cache", "tfx-hub");
-const CODEX_AUTH_SOURCE_PATH = join(homedir(), ".codex", "auth.json");
-const STATE_PERSIST_PATH = join(AUTH_BASE_PATH, "broker-state.json");
+function getAuthBasePath() {
+  return join(homedir(), ".claude", "cache", "tfx-hub");
+}
+
+function getCodexAuthSourcePath() {
+  return join(homedir(), ".codex", "auth.json");
+}
+
+function getStatePersistPath() {
+  return join(getAuthBasePath(), "broker-state.json");
+}
 const AUTH_SYNC_LOCK_TIMEOUT_MS = 5_000;
 const AUTH_SYNC_LOCK_RETRY_MS = 25;
 const AUTH_SYNC_LOCK_STALE_MS = 30_000;
@@ -78,6 +86,8 @@ const AUTH_SYNC_SAB = new Int32Array(new SharedArrayBuffer(4));
 
 function persistState(stateMap) {
   try {
+    const authBasePath = getAuthBasePath();
+    const statePersistPath = getStatePersistPath();
     const now = Date.now();
     const entries = {};
     for (const [id, acct] of stateMap) {
@@ -96,8 +106,8 @@ function persistState(stateMap) {
         };
       }
     }
-    mkdirSync(AUTH_BASE_PATH, { recursive: true });
-    writeFileSync(STATE_PERSIST_PATH, JSON.stringify({ ts: now, entries }));
+    mkdirSync(authBasePath, { recursive: true });
+    writeFileSync(statePersistPath, JSON.stringify({ ts: now, entries }));
   } catch (err) {
     try {
       console.error("[account-broker] persistState failed:", err.message);
@@ -107,8 +117,9 @@ function persistState(stateMap) {
 
 function loadPersistedState() {
   try {
-    if (!existsSync(STATE_PERSIST_PATH)) return null;
-    return JSON.parse(readFileSync(STATE_PERSIST_PATH, "utf8"));
+    const statePersistPath = getStatePersistPath();
+    if (!existsSync(statePersistPath)) return null;
+    return JSON.parse(readFileSync(statePersistPath, "utf8"));
   } catch {
     return null;
   }
@@ -239,6 +250,19 @@ function withLockFile(lockPath, opts, task) {
 
 // ── AccountBroker ────────────────────────────────────────────────
 
+/**
+ * AccountBroker는 codex/gemini 계정 풀 + lease/cooldown/circuit breaker 를 관리한다.
+ *
+ * **Resolved-at-construction 정책 (lazy/eager mix 주의)**
+ *
+ * `getAuthBasePath()` / `getCodexAuthSourcePath()` 는 호출 시점에 `homedir()` 를
+ * 다시 평가하는 lazy getter 다. 그러나 default 파라미터 (`_authBasePath = getAuthBasePath()`)
+ * 는 생성자 호출 시점에 한 번만 평가되고 결과가 `#authBasePath` 등 private field 에 박힌다.
+ *
+ * 결과: 생성자 이후 process.env.HOME 변경은 broker 가 보는 경로에 전파되지 않는다.
+ * 테스트에서 HOME 을 갈아끼우려면 `new AccountBroker(config, { _authBasePath, _codexAuthSourcePath })`
+ * 로 오버라이드를 직접 주입하거나, broker 자체를 재생성해야 한다.
+ */
 class AccountBroker extends EventEmitter {
   #config;
   #state; // Map<accountId, accountState>
@@ -253,8 +277,8 @@ class AccountBroker extends EventEmitter {
     config,
     {
       _skipPersistence = false,
-      _authBasePath = AUTH_BASE_PATH,
-      _codexAuthSourcePath = CODEX_AUTH_SOURCE_PATH,
+      _authBasePath = getAuthBasePath(),
+      _codexAuthSourcePath = getCodexAuthSourcePath(),
       _authSyncLockTimeoutMs = AUTH_SYNC_LOCK_TIMEOUT_MS,
       _authSyncLockRetryMs = AUTH_SYNC_LOCK_RETRY_MS,
       _authSyncLockStaleMs = AUTH_SYNC_LOCK_STALE_MS,

package/hub/cli-adapter-base.mjs

@@ -2,7 +2,7 @@
 // Phase 2: codex-adapter.mjs에서 추출한 재사용 가능 유틸리티
 
 import { execSync, spawn } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync, statSync } from "node:fs";
 
 import { IS_WINDOWS, killProcess } from "./platform.mjs";
 
@@ -391,7 +391,18 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
     });
   }
 
+  const resultFileSignature = () => {
+    if (!resultFile) return "";
+    try {
+      const info = statSync(resultFile);
+      return `${info.size}:${info.mtimeMs}`;
+    } catch {
+      return "";
+    }
+  };
+
   let lastBytes = 0;
+  let lastResultFileSignature = resultFileSignature();
   let lastChange = Date.now();
   const touch = () => {
     lastChange = Date.now();
@@ -420,8 +431,14 @@ export async function runProcess(command, workdir, timeout, opts = {}) {
   }, timeout);
   const stallTimer = setInterval(() => {
     const size = Buffer.byteLength(stdout) + Buffer.byteLength(stderr);
-    if (size !== lastBytes) {
+    const currentResultFileSignature = resultFileSignature();
+    if (
+      size !== lastBytes ||
+      currentResultFileSignature !== lastResultFileSignature
+    ) {
       lastBytes = size;
+      lastResultFileSignature = currentResultFileSignature;
+      touch();
       return;
     }
     if (Date.now() - lastChange >= stallThresholdMs)

package/hub/team/dashboard-open.mjs

@@ -1,25 +1,9 @@
-import { psmuxExec } from "./psmux.mjs";
-import { detectMultiplexer, hasWindowsTerminal, tmuxExec } from "./session.mjs";
-import { createWtManager } from "./wt-manager.mjs";
-
-function sanitizeWindowTitle(value, fallback = "triflux") {
-  const text = String(value || "")
-    .replace(/[\r\n]+/g, " ")
-    .trim();
-  return text || fallback;
-}
+import { createTerminalOpener } from "./terminal-opener.mjs";
 
 function sanitizeSessionName(value) {
   return String(value || "").replace(/[^a-zA-Z0-9_-]/g, "") || "tfx-session";
 }
 
-function sanitizeWorkingDirectory(value) {
-  const text = String(value || "")
-    .replace(/[\r\n\x00-\x1f]/g, "")
-    .trim();
-  return text || process.cwd();
-}
-
 export function parseWorkerNumber(value) {
   const text = String(value || "").trim();
   const workerMatch = text.match(/^worker-(\d+)$/i);
@@ -29,118 +13,43 @@ export function parseWorkerNumber(value) {
   return null;
 }
 
-export function decideDashboardOpenMode({
-  openAll = false,
-  hasWtSession = !!process.env.WT_SESSION,
-} = {}) {
-  if (openAll) return hasWtSession ? "tab" : "window";
-  return hasWtSession ? "split" : "window";
+function ignoreAsyncFailure(value) {
+  if (value && typeof value.then === "function") void value.catch(() => {});
 }
 
-async function spawnWindowsTerminal(spec, opts = {}) {
-  if (!hasWindowsTerminal()) return false;
-
-  const wt = createWtManager();
-  const {
-    mode = "window",
-    title = "triflux",
-    cwd = process.cwd(),
-    split = { orientation: "H", size: 0.5 },
-  } = opts;
-
-  const safeTitle = sanitizeWindowTitle(title);
-  const safeCwd = sanitizeWorkingDirectory(cwd);
-
-  try {
-    if (mode === "split") {
-      await wt.splitPane({
-        direction: split?.orientation === "V" ? "V" : "H",
-        size: (split?.size || 0.5) * 100,
-        title: safeTitle,
-        cwd: safeCwd,
-        command: spec.args
-          ? `${spec.command} ${spec.args.join(" ")}`
-          : spec.command,
-        profile: "triflux",
-      });
-    } else {
-      await wt.createTab({
-        title: safeTitle,
-        cwd: safeCwd,
-        command: spec.args
-          ? `${spec.command} ${spec.args.join(" ")}`
-          : spec.command,
-        profile: "triflux",
-      });
-    }
-    return true;
-  } catch {
-    return false;
-  }
-}
+export async function openHeadlessDashboardTarget(sessionName, opts = {}) {
+  const { openAll = false, cwd = process.cwd(), title } = opts;
+  const safeSession = sanitizeSessionName(sessionName);
+  const workerNumber =
+    opts.workerNumber ??
+    (opts.worker == null ? null : parseWorkerNumber(opts.worker));
 
-async function spawnMacTerminal(spec, opts = {}) {
-  const mux = detectMultiplexer();
-  if (mux === "tmux") {
-    try {
-      const title = sanitizeWindowTitle(opts.title);
-      const command = spec.args
-        ? `${spec.command} ${spec.args.join(" ")}`
-        : spec.command;
-      tmuxExec(`new-window -n "${title}" "${command}"`);
-      return true;
-    } catch {
-      return false;
-    }
-  }
-  // tmux 없으면 기본 터미널
+  let opener;
   try {
-    const { exec } = await import("node:child_process");
-    exec(`open -a Terminal`, { timeout: 5000 });
-    return true;
+    const deps = opts._deps ?? {};
+    const openerFactory = deps.createTerminalOpener ?? createTerminalOpener;
+    opener = openerFactory(deps);
   } catch {
-    return false;
+    return !openAll && workerNumber != null;
   }
-}
-
-export function openHeadlessDashboardTarget(sessionName, opts = {}) {
-  const { worker = null, openAll = false, cwd = process.cwd(), title } = opts;
-
-  const safeSession = sanitizeSessionName(sessionName);
-  const workerNumber = worker == null ? null : parseWorkerNumber(worker);
 
   // 선택 워커 → pane focus만 (새 창 열지 않음)
   if (!openAll && workerNumber != null) {
     try {
-      const mux = detectMultiplexer();
-      if (mux === "psmux") {
-        psmuxExec(["select-pane", "-t", `${safeSession}:0.${workerNumber}`]);
-      } else if (
-        mux === "tmux" ||
-        mux === "wsl-tmux" ||
-        mux === "git-bash-tmux"
-      ) {
-        tmuxExec(`select-pane -t ${safeSession}:0.${workerNumber}`);
-      }
+      ignoreAsyncFailure(opener.focusPane(safeSession, workerNumber));
     } catch {}
     return true;
   }
 
   // 전체 열기 (Shift+Enter) → 새 창으로 세션 attach
-  if (process.platform === "win32") {
-    void spawnWindowsTerminal(
-      { command: "psmux", args: ["attach-session", "-t", safeSession] },
-      {
-        mode: decideDashboardOpenMode({ openAll }),
-        title: title || `▲ ${safeSession}`,
-        cwd,
-      },
-    );
-  } else {
-    void spawnMacTerminal(
-      { command: "tmux", args: ["attach-session", "-t", safeSession] },
-      { title: title || `▲ ${safeSession}`, cwd },
-    );
+  try {
+    const opened = opener.openSession(safeSession, {
+      title: title || `▲ ${safeSession}`,
+      cwd,
+      profile: opts.profile ?? "triflux",
+    });
+    return await opened;
+  } catch {
+    return false;
   }
-  return true;
 }

package/hub/team/headless.mjs

@@ -1370,6 +1370,7 @@ export async function autoAttachTerminal(
   opts = {},
   workerCount = 2,
 ) {
+  if (process.platform !== "win32") return false;
   if (!process.env.WT_SESSION) return false;
 
   const wt = createWtManager();

package/hub/team/notify.mjs

@@ -18,6 +18,13 @@ function escapePowerShellSingleQuoted(value) {
   return String(value ?? "").replaceAll("'", "''");
 }
 
+function escapeAppleScriptString(value) {
+  return String(value ?? "")
+    .replaceAll("\\", "\\\\")
+    .replaceAll('"', '\\"')
+    .replace(/\r?\n/g, " ");
+}
+
 function normalizeTimestamp(value) {
   if (value instanceof Date) return value.toISOString();
   if (value == null || value === "") return new Date().toISOString();
@@ -215,8 +222,8 @@ async function sendToast(event, config, deps) {
   if ((deps.platform || process.platform) === "darwin") {
     const title = formatEventTitle(event);
     const body = formatEventBody(event);
-    const safeTitle = title.replace(/\\/g, "\\\\").replace(/'/g, "'\"'\"'");
-    const safeBody = body.replace(/\\/g, "\\\\").replace(/'/g, "'\"'\"'");
+    const safeTitle = escapeAppleScriptString(title);
+    const safeBody = escapeAppleScriptString(body);
     try {
       await execFileAsync(
         "osascript",

package/hub/team/runtime-strategy.mjs

@@ -60,9 +60,25 @@ export function createPsmuxRuntime(adapter = defaultPsmuxAdapter) {
 // tmux 어댑터
 // ---------------------------------------------------------------------------
 
+// tmux 세션 이름은 tmuxExec 명령 문자열에 직접 보간되므로 shell 메타문자가 들어오면 위험.
+// 현 호출처는 모두 safe identifier (slug/uuid 류) 이지만 어댑터 export 가 contract 를
+// 강제하지 않아 외부 호출자가 임의 문자열을 주입할 수 있다 → 보수적으로 검증.
+const TMUX_SAFE_SESSION_NAME = /^[A-Za-z0-9_.:-]+$/;
+
+function assertSafeTmuxSessionName(sessionName) {
+  const value = String(sessionName ?? "");
+  if (!TMUX_SAFE_SESSION_NAME.test(value)) {
+    throw new Error(
+      `Unsafe tmux session name: ${JSON.stringify(value)} (allowed: A-Za-z0-9_.:-)`,
+    );
+  }
+  return value;
+}
+
 function tmuxSessionExists(sessionName) {
+  const safe = assertSafeTmuxSessionName(sessionName);
   try {
-    tmuxExec(`has-session -t ${sessionName}`);
+    tmuxExec(`has-session -t ${safe}`);
     return true;
   } catch {
     return false;
@@ -70,12 +86,25 @@ function tmuxSessionExists(sessionName) {
 }
 
 function createTmuxSession(sessionName, opts = {}) {
-  tmuxExec(`new-session -d -s ${sessionName} -x 220 -y 55`);
+  const safe = assertSafeTmuxSessionName(sessionName);
+  tmuxExec(`new-session -d -s ${safe} -x 220 -y 55`);
+}
+
+function sendPromptToTmuxSession(sessionName, prompt) {
+  const safe = assertSafeTmuxSessionName(sessionName);
+  const quotedPrompt = String(prompt).replace(/'/g, "'\\''");
+  tmuxExec(`send-keys -t ${safe}:0.0 '${quotedPrompt}' Enter`);
 }
 
 function killTmuxSessionByName(sessionName) {
+  let safe;
   try {
-    tmuxExec(`kill-session -t ${sessionName}`);
+    safe = assertSafeTmuxSessionName(sessionName);
+  } catch {
+    return;
+  }
+  try {
+    tmuxExec(`kill-session -t ${safe}`);
   } catch {
     // 이미 종료된 세션 — 무시
   }
@@ -83,6 +112,7 @@ function killTmuxSessionByName(sessionName) {
 
 const defaultTmuxAdapter = {
   createSession: createTmuxSession,
+  sendPrompt: sendPromptToTmuxSession,
   killSession: killTmuxSessionByName,
   hasSession: tmuxSessionExists,
 };
@@ -90,28 +120,55 @@ const defaultTmuxAdapter = {
 /**
  * @param {{
  *   createSession: typeof createTmuxSession,
+ *   sendPrompt: typeof sendPromptToTmuxSession,
  *   killSession: typeof killTmuxSessionByName,
  *   hasSession: typeof tmuxSessionExists,
- * }} [adapter]
- * @returns {TeamRuntime & { name: "tmux" }}
+ * }} [opts.adapter]
+ * @param {string} [opts.sessionName]
+ * @returns {{
+ *   name: "tmux",
+ *   kind: "tmux",
+ *   sessionName: string,
+ *   createSession: (opts?: object) => unknown,
+ *   sendPrompt: (prompt: string) => unknown,
+ *   start: (sessionName: string, opts?: object) => unknown,
+ *   stop: (sessionName: string) => void,
+ *   isAlive: (sessionName: string) => boolean,
+ *   getStatus: (sessionName: string) => RuntimeStatus,
+ * }}
  */
-export function createTmuxRuntime(adapter = defaultTmuxAdapter) {
+export function createTmuxRuntime(opts = {}) {
+  const { adapter = defaultTmuxAdapter, sessionName = "" } = opts;
+
   return {
     name: "tmux",
-    start(sessionName, opts = {}) {
-      return adapter.createSession(sessionName, opts);
+    kind: "tmux",
+    sessionName,
+    // start() 와 동일하게 첫 인자로 sessionName override 를 받는다.
+    // 첫 인자가 string 이 아니면 (옵션 객체 등) closure sessionName 을 사용하는 legacy 형태로 폴백.
+    createSession(sessionNameArg, opts) {
+      if (typeof sessionNameArg === "string") {
+        return adapter.createSession(sessionNameArg, opts ?? {});
+      }
+      return adapter.createSession(sessionName, sessionNameArg ?? {});
     },
-    stop(sessionName) {
-      adapter.killSession(sessionName);
+    sendPrompt(prompt, sessionNameArg = sessionName) {
+      return adapter.sendPrompt(sessionNameArg, prompt);
     },
-    isAlive(sessionName) {
-      return adapter.hasSession(sessionName);
+    start(sessionNameArg = sessionName, opts = {}) {
+      return adapter.createSession(sessionNameArg, opts);
     },
-    getStatus(sessionName) {
+    stop(sessionNameArg = sessionName) {
+      adapter.killSession(sessionNameArg);
+    },
+    isAlive(sessionNameArg = sessionName) {
+      return adapter.hasSession(sessionNameArg);
+    },
+    getStatus(sessionNameArg = sessionName) {
       return {
         name: "tmux",
-        sessionName,
-        alive: adapter.hasSession(sessionName),
+        sessionName: sessionNameArg,
+        alive: adapter.hasSession(sessionNameArg),
       };
     },
   };
@@ -119,9 +176,10 @@ export function createTmuxRuntime(adapter = defaultTmuxAdapter) {
 
 /**
  * @param {string} mode
+ * @param {object} [opts]
  * @returns {TeamRuntime & { name: string }}
  */
-export function createRuntime(mode) {
+export function createRuntime(mode, opts = {}) {
   const normalizedMode = String(mode || "")
     .trim()
     .toLowerCase();
@@ -131,7 +189,7 @@ export function createRuntime(mode) {
   }
 
   if (normalizedMode === "tmux") {
-    return createTmuxRuntime();
+    return createTmuxRuntime(opts);
   }
 
   if (normalizedMode === "native" || normalizedMode === "wt") {