triflux 10.50.1 → 10.50.2

package/CLAUDE.md

@@ -28,14 +28,14 @@ macOS/Linux는 플랫폼 보호기가 아무 작업도 하지 않게 처리하
 
 위 `<psmux-wt>` 룰셋은 Windows 전용이다. macOS/Linux 환경에서 triflux가 터미널/세션을 다루는 방식.
 
-### terminal-opener.mjs 3단계 대체 경로(`hub/team/terminal-opener.mjs:124~149`)
+### terminal-opener.mjs 3단계 대체 경로(`hub/team/terminal-opener.mjs` 의 `openCommand`)
 
 `openCommand()` 가 순차 평가하는 분기:
 
 | 우선순위 | 조건 | 동작 | API |
 |---------|------|------|-----|
 | 1 | `platform === "win32"` | `wt-manager.createTab` | `hub/team/wt-manager.mjs` |
-| 2 | `isTmuxLikeMux(mux, platform)` (`detectMultiplexer()` → `getMultiplexerType()`/`hasMultiplexer()`/`hasTmux()` + 리터럴 psmux 검사) | `tmux new-window -n <title> <command>` | 셸 직접 호출 |
+| 2 | `isTmuxLikeMux(mux)` (`detectMultiplexer()` → `getMultiplexerType()`/`hasMultiplexer()`/`hasTmux()`) | `tmux new-window -n <title> <command>` | 셸 직접 호출 |
 | 3 | `platform === "darwin"` (대체 경로) | `open -a Terminal` | macOS `open` 명령 |
 | — | Linux(멀티플렉서 없음) | 미지원(`false` 반환) | — |
 
@@ -43,9 +43,9 @@ macOS/Linux는 플랫폼 보호기가 아무 작업도 하지 않게 처리하
 
 | 후보 | 필요성 | 이유 |
 |------|--------|------|
-| iTerm2 관리자 | **불필요** | `hub/lib/env-detect.mjs:96`이 `TERM_PROGRAM === "iTerm.app"`을 감지하지만 별도 GUI 패인 조작은 tmux/psmux로 처리한다. 새 창은 `open -a Terminal` 대체 경로로 충분하다. |
-| tmux 관리자 | **불필요** | psmux 자체가 tmux 포크다. `terminal-opener.mjs`가 `tmux new-window`로 직접 호출한다. |
-| psmux 관리자 | **이미 있음** | `hub/team/psmux.mjs`가 `IS_WINDOWS`/`IS_MAC`으로 플랫폼을 분기한다. |
+| iTerm2 관리자 | **불필요** | `hub/lib/env-detect.mjs:96`이 `TERM_PROGRAM === "iTerm.app"`을 감지하지만 별도 GUI 패인 조작은 tmux로 처리한다. 새 창은 `open -a Terminal` 대체 경로로 충분하다. |
+| tmux 관리자 | **불필요** | `terminal-opener.mjs`가 `tmux new-window`로 직접 호출한다. |
+| psmux 관리자 | **이미 있음** | `hub/team/psmux.mjs`가 Windows에서는 psmux, macOS/Linux에서는 tmux를 사용한다. |
 
 참고 사례: OMC(`oh-my-claudecode`)도 운영체제별 관리자를 만들지 않고 Tmux 관리자·워크트리 관리자·Claude 실행기 세 구성 요소로 정리한다. 이 저장소 결정의 외부 근거가 아니라 비교 참고로만 본다.
 

package/README.ko.md

@@ -131,12 +131,11 @@ Codex는 이름 붙은 프로필로 실행한다. 모델 ID는 `~/.codex/<프로
 | `tfx hub` | 로컬 Hub: `start`, `stop`, `status`, `ensure` |
 | `tfx mcp` | 관리형 MCP 레지스트리: `list`, `sync`, `add`, `remove` |
 | `tfx handoff` | 현재 맥락을 다른 세션이나 호스트로 넘길 프롬프트로 묶음 |
-| `tfx cto` | 저장소 단위 권위 콘솔: `collect`, `status`, `dashboard`, `hygiene`, `steward`, `event` |
+| `tfx cto` | 저장소 단위 권위 콘솔: `collect`, `status`, `hygiene`(dry-run) |
 | `tfx review` / `tfx codex-team` | Codex git diff 리뷰 / Codex 주도 팀 모드 |
 | `tfx stealth-fetch <url>` | cloakbrowser로 URL 하나를 가져옴(JSON을 stdout으로) |
 | `tfx notion-read`, `tfx why`, `tfx schema`, `tfx list`, `tfx monitor`, `tfx update`, `tfx version` | Notion → Markdown, 커밋 intent 트레일러, CLI 스키마, 설치된 스킬, TUI 모니터, 업데이트, 버전 |
 | `tfx-live` | 라이브 세션 브리지(`/tfx-live` 스킬과 같은 명령) |
-| `tfx-profile` | 대화형 Codex 프로필 관리자 |
 
 정확한 인자는 `tfx <명령> --help`나 `tfx schema <명령>`으로 확인한다.
 
@@ -168,10 +167,10 @@ Claude Code Bash 도구의 600초 제한에 걸리지 않는다. 이후 `--job-s
 다른 경로로 넘어가지 않고 실패한다. 자세한 내용은
 [`.claude/rules/tfx-machine-profile.md`](.claude/rules/tfx-machine-profile.md).
 
-**CTO lake.** `tfx cto`는 저장소에서 일어난 일을 `.triflux/lake/`에 덧붙이기 전용으로 남긴다. 자동
-동작은 기본으로 꺼져 있고 `TFX_CTO_AUTO_COLLECT=1`이나 `TFX_CTO_NORTH_STAR=1`로
-켠다([ADR-0018](docs/adr/0018-cto-auto-behaviors-opt-in.md)). 예전 트레이 UI는 제거됐다
-([ADR-0022](docs/adr/0022-remove-cto-tray.md)).
+**CTO lake.** `tfx cto collect`로 `.triflux/lake/`의 저장소 스냅샷을 갱신하고,
+`tfx cto status`로 생성 시각과 경과 시간을 확인한다. `tfx cto hygiene --dry-run`는 dry-run 결과를
+보고한다. 트레이와 쓰이지 않는 CTO 운영 명령은 제거했다
+([ADR-0024](docs/adr/0024-cto-explicit-queries-only.md)). 자동 수집은 기본으로 꺼져 있고 `TFX_CTO_AUTO_COLLECT=1` 로 켠다([ADR-0018](docs/adr/0018-cto-auto-behaviors-opt-in.md)).
 
 **원격 호스트.** `/tfx-remote`와 `--remote <host>`는 `~/.config/triflux/hosts.json`
 (Windows는 `%APPDATA%\triflux\hosts.json`)에서 호스트를 읽는다. `/tfx-remote setup`으로 호스트를

package/README.md

@@ -132,12 +132,11 @@ escalation chain: [`.claude/rules/tfx-escalation-chain.md`](.claude/rules/tfx-es
 | `tfx hub` | Local Hub: `start`, `stop`, `status`, `ensure` |
 | `tfx mcp` | Managed MCP registry: `list`, `sync`, `add`, `remove` |
 | `tfx handoff` | Serialize the current context for another session or host |
-| `tfx cto` | Repo-local authority console: `collect`, `status`, `dashboard`, `hygiene`, `steward`, `event` |
+| `tfx cto` | Repo-local authority console: `collect`, `status`, `hygiene` (dry-run) |
 | `tfx review` / `tfx codex-team` | Codex git-diff review / Codex-led team mode |
 | `tfx stealth-fetch <url>` | Fetch one URL through cloakbrowser (JSON on stdout) |
 | `tfx notion-read`, `tfx why`, `tfx schema`, `tfx list`, `tfx monitor`, `tfx update`, `tfx version` | Notion → Markdown, commit intent trailers, CLI schemas, installed skills, TUI monitor, update, version |
 | `tfx-live` | Live session bridge (same as the `/tfx-live` skill) |
-| `tfx-profile` | Interactive Codex profile manager |
 
 `tfx <command> --help` and `tfx schema <command>` print the exact arguments.
 
@@ -169,10 +168,10 @@ the `claude agents` panel unless you pass `--no-native-bridge-ui`.
 removes a CLI from routing; if no allowed CLI is available the route fails instead of silently
 falling back. Details: [`.claude/rules/tfx-machine-profile.md`](.claude/rules/tfx-machine-profile.md).
 
-**CTO lake.** `tfx cto` keeps an append-only history of the repo in `.triflux/lake/`. Automatic
-behavior is off by default; opt in with `TFX_CTO_AUTO_COLLECT=1` or `TFX_CTO_NORTH_STAR=1`
-([ADR-0018](docs/adr/0018-cto-auto-behaviors-opt-in.md)). The old tray UI was removed
-([ADR-0022](docs/adr/0022-remove-cto-tray.md)).
+**CTO lake.** Run `tfx cto collect` to refresh the repo snapshot in `.triflux/lake/`, then
+`tfx cto status` to inspect it with its generation time and age. `tfx cto hygiene --dry-run` reports
+dry-run findings. The tray and unused CTO operating commands were removed
+([ADR-0024](docs/adr/0024-cto-explicit-queries-only.md)). Automatic collection stays off unless `TFX_CTO_AUTO_COLLECT=1` is set ([ADR-0018](docs/adr/0018-cto-auto-behaviors-opt-in.md)).
 
 **Remote hosts.** `/tfx-remote` and `--remote <host>` read hosts from `~/.config/triflux/hosts.json`
 (Windows: `%APPDATA%\triflux\hosts.json`). Run `/tfx-remote setup` to add one, then

package/bin/triflux.mjs

@@ -476,62 +476,13 @@ const CLI_COMMAND_SCHEMAS = Object.freeze({
     },
   },
   cto: {
-    usage: "tfx cto <collect|status|dashboard|hygiene|steward|event> [options]",
+    usage: "tfx cto <collect|status|hygiene> [options]",
     description: "repo-local authority layer console",
     subcommands: {
       collect: "refresh .triflux/lake/current.json from authority sources",
       status: "print the current authority summary",
-      dashboard: "render the CTO console dashboard, optionally with --watch",
-      hygiene: "project CTO hygiene counts and actionable dry-run rows",
-      steward: {
-        usage:
-          "tfx cto steward [--watch] [--max-runs N] [--interval-ms N] [--apply|--dry-run] [--json] [--no-collect]",
-        description:
-          "periodically collect and invoke one-shot CTO hygiene without destructive cleanup",
-        options: [
-          {
-            name: "--watch",
-            type: "boolean",
-            description:
-              "run repeatedly until interrupted or --max-runs is reached",
-          },
-          {
-            name: "--max-runs",
-            type: "number",
-            description:
-              "maximum steward iterations; required for --watch --json",
-          },
-          {
-            name: "--interval-ms",
-            type: "number",
-            description: "delay between watch iterations in milliseconds",
-          },
-          {
-            name: "--apply",
-            type: "boolean",
-            description:
-              "invoke hygiene apply mode (ledger acknowledgement only)",
-          },
-          {
-            name: "--dry-run",
-            type: "boolean",
-            description: "invoke hygiene dry-run mode (default)",
-          },
-          {
-            name: "--json",
-            type: "boolean",
-            description:
-              "print one finite steward JSON summary object; with --watch requires --max-runs",
-          },
-          {
-            name: "--no-collect",
-            type: "boolean",
-            description: "skip the collect pass before hygiene",
-          },
-        ],
-      },
-      event:
-        "append wrapper lineage events: context-save, context-restore, pr-created, pr-merged-or-closed",
+      hygiene:
+        "project CTO hygiene counts and actionable dry-run rows (--dry-run)",
     },
   },
   multi: {
@@ -2583,26 +2534,6 @@ async function cmdDoctor(options = {}) {
           });
           warn("Codex 레이트 리밋 캐시 재생성 실패");
         }
-        try {
-          execFileSync(
-            process.execPath,
-            [hudScript, "--refresh-gemini-quota"],
-            { timeout: 15000, stdio: "ignore", windowsHide: true },
-          );
-          report.actions.push({
-            type: "rebuild",
-            name: "gemini-quota-cache",
-            status: "ok",
-          });
-          ok("Gemini 쿼터 캐시 재생성됨");
-        } catch {
-          report.actions.push({
-            type: "rebuild",
-            name: "gemini-quota-cache",
-            status: "failed",
-          });
-          warn("Gemini 쿼터 캐시 재생성 실패");
-        }
       }
       try {
         const { buildAll } = await import("../scripts/cache-warmup.mjs");

package/cto/collect.mjs

@@ -1,23 +1,23 @@
 import { execFileSync } from "node:child_process";
 import {
-  appendFileSync,
-  closeSync,
   existsSync,
   mkdirSync,
-  openSync,
   readdirSync,
   readFileSync,
-  renameSync,
   statSync,
-  unlinkSync,
-  writeFileSync,
 } from "node:fs";
 import { homedir } from "node:os";
-import { basename, dirname, join, relative } from "node:path";
+import { join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 
 import { renderBrief } from "./brief.mjs";
-import { resolveLakeRootDir } from "./lake-root.mjs";
+import { appendCtoEvent } from "./events.mjs";
+import {
+  firstExisting,
+  readJsonLines,
+  resolveLakeRootDir,
+  writeAtomic,
+} from "./lake-root.mjs";
 
 const SCHEMA_VERSION = "cto-lake.v1";
 const SOURCE_REGISTRY = [
@@ -69,24 +69,6 @@ const SOURCE_REGISTRY = [
     probe: ".omx/handoffs/*",
     enabled: true,
   },
-  {
-    id: "session_vault",
-    kind: "optional-durable-ref",
-    probe: ".triflux/session-vault.json, sessions_v2.db, or .session-vault",
-    enabled: true,
-  },
-  {
-    id: "agy",
-    kind: "optional-durable-ref",
-    probe: ".agy/state.json or .agy/refs.json",
-    enabled: true,
-  },
-  {
-    id: "gbrain",
-    kind: "optional-durable-ref",
-    probe: ".gbrain/refs.json or .gbrain/config.json",
-    enabled: true,
-  },
 ];
 const SOURCE_IDS = SOURCE_REGISTRY.map((source) => source.id);
 
@@ -104,10 +86,6 @@ function isoNow(opts) {
   return value.toISOString();
 }
 
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
 function sourceState(available, status, detail, collectedAt) {
   return {
     available,
@@ -130,25 +108,6 @@ function readJson(filePath) {
   return JSON.parse(readFileSync(filePath, "utf8"));
 }
 
-function readJsonLines(filePath, limit = 20) {
-  if (!existsSync(filePath)) return [];
-  const lines = readFileSync(filePath, "utf8")
-    .split(/\r?\n/u)
-    .map((line) => line.trim())
-    .filter(Boolean);
-  return lines.slice(-limit).flatMap((line) => {
-    try {
-      return [JSON.parse(line)];
-    } catch {
-      return [];
-    }
-  });
-}
-
-function findFirstExisting(candidates) {
-  return candidates.find((candidate) => existsSync(candidate)) || null;
-}
-
 function listDirFiles(dirPath, rootDir, limit = 10) {
   if (!existsSync(dirPath)) return [];
   try {
@@ -237,7 +196,7 @@ function collectJsonArtifact(
   collectedAt,
   summarize = safeSummary,
 ) {
-  const filePath = findFirstExisting(candidates);
+  const filePath = firstExisting(candidates);
   if (!filePath) {
     return missingSource(
       "no_shell_readable_artifact",
@@ -429,59 +388,6 @@ function collectHandoffs(rootDir, collectedAt) {
   );
 }
 
-function collectDurableRefs(
-  id,
-  candidates,
-  rootDir,
-  collectedAt,
-  unavailableStatus = "no_shell_readable_artifact",
-) {
-  const filePath = findFirstExisting(candidates);
-  if (!filePath) {
-    return missingSource(
-      unavailableStatus,
-      `${id} exposes no shell-readable durable artifact`,
-      collectedAt,
-    );
-  }
-  try {
-    const stat = statSync(filePath);
-    if (stat.isDirectory()) {
-      return sourceState(
-        true,
-        "ok",
-        {
-          path: relPath(rootDir, filePath),
-          files: listDirFiles(filePath, rootDir, 10),
-        },
-        collectedAt,
-      );
-    }
-    const parsed = basename(filePath).endsWith(".json")
-      ? readJson(filePath)
-      : readFileSync(filePath, "utf8");
-    return sourceState(
-      true,
-      "ok",
-      {
-        path: relPath(rootDir, filePath),
-        summary: safeSummary(parsed),
-      },
-      collectedAt,
-    );
-  } catch (error) {
-    return sourceState(
-      true,
-      "read_error",
-      {
-        path: relPath(rootDir, filePath),
-        error: error?.message || `${id} read failed`,
-      },
-      collectedAt,
-    );
-  }
-}
-
 function buildSummary(current) {
   const repo = current.repo;
   const omxGoals = current.sources.ultragoal_omx.detail?.active_goals || [];
@@ -633,48 +539,6 @@ function validateCurrent(current) {
   }
 }
 
-function writeAtomic(filePath, body) {
-  mkdirSync(dirname(filePath), { recursive: true });
-  const tmpPath = join(
-    dirname(filePath),
-    `.${basename(filePath)}.${process.pid}.${Date.now()}.tmp`,
-  );
-  writeFileSync(tmpPath, body, "utf8");
-  renameSync(tmpPath, filePath);
-}
-
-async function appendLedgerEvent(lakeRoot, event, stderr) {
-  mkdirSync(lakeRoot, { recursive: true });
-  const ledgerPath = join(lakeRoot, "ledger.jsonl");
-  const lockPath = join(lakeRoot, "ledger.jsonl.lock");
-  let fd = null;
-  for (let attempt = 0; attempt < 3; attempt += 1) {
-    try {
-      fd = openSync(lockPath, "wx", 0o600);
-      break;
-    } catch (error) {
-      if (error?.code !== "EEXIST") throw error;
-      if (attempt < 2) await sleep(100);
-    }
-  }
-  if (fd === null) {
-    stderr.write(
-      "[tfx cto collect] warning: ledger lock timeout; skipped ledger append\n",
-    );
-    return false;
-  }
-
-  try {
-    appendFileSync(ledgerPath, `${JSON.stringify(event)}\n`, "utf8");
-    return true;
-  } finally {
-    closeSync(fd);
-    try {
-      unlinkSync(lockPath);
-    } catch {}
-  }
-}
-
 function collectSources(rootDir, collectedAt, execFileSyncFn, opts = {}) {
   const home = homedir();
   const hostArtifactCandidates =
@@ -748,34 +612,6 @@ function collectSources(rootDir, collectedAt, execFileSyncFn, opts = {}) {
       collectedAt,
     ),
     handoffs: collectHandoffs(rootDir, collectedAt),
-    session_vault: collectDurableRefs(
-      "session_vault",
-      [
-        join(rootDir, ".triflux", "session-vault.json"),
-        join(rootDir, "sessions_v2.db"),
-        join(rootDir, ".session-vault"),
-      ],
-      rootDir,
-      collectedAt,
-      "not_shell_collectable",
-    ),
-    agy: collectDurableRefs(
-      "agy",
-      [join(rootDir, ".agy", "state.json"), join(rootDir, ".agy", "refs.json")],
-      rootDir,
-      collectedAt,
-      "not_shell_collectable",
-    ),
-    gbrain: collectDurableRefs(
-      "gbrain",
-      [
-        join(rootDir, ".gbrain", "refs.json"),
-        join(rootDir, ".gbrain", "config.json"),
-      ],
-      rootDir,
-      collectedAt,
-      "not_shell_collectable",
-    ),
   };
 
   return { repo: git.repo, sources };
@@ -786,6 +622,12 @@ function hasFlag(args, flag) {
 }
 
 export async function runCollect(args = [], opts = {}) {
+  if (hasFlag(args, "--help")) {
+    (opts.stdout || process.stdout).write(
+      "Usage: tfx cto collect [--json]\nRefresh the CTO lake from durable authority sources.\n",
+    );
+    return;
+  }
   const rootDir = opts.rootDir || resolveLakeRootDir(process.cwd());
   const lakeRoot = opts.lakeRoot || join(rootDir, ".triflux", "lake");
   const stdout = opts.stdout || process.stdout;
@@ -822,7 +664,7 @@ export async function runCollect(args = [], opts = {}) {
       sources_json: "sources.json",
     },
   };
-  const appended = await appendLedgerEvent(lakeRoot, event, stderr);
+  const { appended } = await appendCtoEvent(lakeRoot, event, { stderr });
   if (appended) current.ledger_tail = readLedgerTail(lakeRoot);
 
   validateCurrent(current);

package/cto/current.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://triflux.local/schemas/cto/current.schema.json",
   "title": "Triflux CTO Lake Current Authority State",
-  "description": "Contract for .triflux/lake/current.json. .triflux/lake is a triflux-owned, namespace-neutral cross-agent rollup for durable artifacts across Claude, Codex/OMX, OMC, AGY, gstack, gbrain, and Triflux state. It reads and aggregates .omx/ultragoal and .omc/ultragoal execution ledgers without replacing or duplicating their authority. ledger.jsonl and sources.json companion contracts are documented in $defs.",
+  "description": "Contract for .triflux/lake/current.json. .triflux/lake is a triflux-owned, namespace-neutral cross-agent rollup for durable artifacts across Claude, Codex/OMX, OMC, and Triflux state. It reads and aggregates .omx/ultragoal and .omc/ultragoal execution ledgers without replacing or duplicating their authority. ledger.jsonl and sources.json companion contracts are documented in $defs.",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -44,7 +44,7 @@
     },
     "sources": {
       "type": "object",
-      "description": "Durable artifact source states only. Live Claude /goal state and AGY internal state are not shell-collectable; a source reports available:false when no shell-readable durable artifact exists.",
+      "description": "Durable artifact source states only. A source reports available:false when no shell-readable durable artifact exists.",
       "additionalProperties": false,
       "required": [
         "git",
@@ -54,10 +54,7 @@
         "tfx_synapse",
         "ultragoal_omx",
         "ultragoal_omc",
-        "handoffs",
-        "session_vault",
-        "agy",
-        "gbrain"
+        "handoffs"
       ],
       "properties": {
         "git": {
@@ -83,21 +80,12 @@
         },
         "handoffs": {
           "$ref": "#/$defs/sourceState"
-        },
-        "session_vault": {
-          "$ref": "#/$defs/sourceState"
-        },
-        "agy": {
-          "$ref": "#/$defs/sourceState"
-        },
-        "gbrain": {
-          "$ref": "#/$defs/sourceState"
         }
       }
     },
     "summary": {
       "type": "object",
-      "description": "Human- and dashboard-oriented synthesized authority summary derived from durable artifacts and live Triflux synapse session status. Phase 1 may add source-derived fields here without changing the top-level contract.",
+      "description": "Human-oriented synthesized authority summary derived from durable artifacts and live Triflux synapse session status. Phase 1 may add source-derived fields here without changing the top-level contract.",
       "additionalProperties": true
     },
     "ledger_tail": {