triflux 10.9.28 → 10.9.29

package/hub/account-broker.mjs

@@ -77,7 +77,7 @@ function persistState(stateMap) {
     }
     mkdirSync(AUTH_BASE_PATH, { recursive: true });
     writeFileSync(STATE_PERSIST_PATH, JSON.stringify({ ts: now, entries }));
-  } catch { /* best-effort */ }
+  } catch (err) { try { console.error("[account-broker] persistState failed:", err.message); } catch {} }
 }
 
 function loadPersistedState() {

package/hub/server.mjs

@@ -80,6 +80,7 @@ const AIMD_WINDOW_MS = 30 * 60 * 1000;
 const AIMD_INITIAL_BATCH_SIZE = 3;
 const AIMD_MIN_BATCH_SIZE = 1;
 const AIMD_MAX_BATCH_SIZE = 10;
+const SYNAPSE_VALID_OPS = new Set(["checkout", "rebase", "cherry-pick", "reset", "stash-pop", "worktree-remove"]);
 const HUB_IDLE_TIMEOUT_DEFAULT_MS = 0; // 0 = 영구 실행 (idle shutdown 비활성). TFX_HUB_IDLE_TIMEOUT_MS 환경변수로 오버라이드 가능
 const HUB_IDLE_SWEEP_DEFAULT_MS = 60 * 1000;
 const STATIC_CONTENT_TYPES = Object.freeze({
@@ -839,14 +840,13 @@ export async function startHub({
       }
 
       if (path === "/synapse/preflight" && req.method === "POST") {
-        const VALID_OPS = new Set(["checkout", "rebase", "cherry-pick", "reset", "stash-pop", "worktree-remove"]);
         try {
           const body = await parseBody(req);
           const { op, args = {}, sessionContext = {} } = body;
           if (!op || typeof op !== "string") {
             return writeJson(res, 400, { ok: false, error: "op 필수" });
           }
-          if (!VALID_OPS.has(op)) {
+          if (!SYNAPSE_VALID_OPS.has(op)) {
             return writeJson(res, 400, { ok: false, error: `invalid op: ${op}` });
           }
           const result = gitPreflight.check(op, args, sessionContext);
@@ -1814,6 +1814,7 @@ const QUOTA_CACHE_PATH = join(CACHE_DIR, "broker-quota-cache.json");
 async function checkSingleAccountQuota(acct) {
   try {
     const authPath = join(PID_DIR, acct.authFile);
+    if (!authPath.startsWith(PID_DIR + sep)) return { id: acct.id, status: "path_blocked" };
     if (!existsSync(authPath)) return { id: acct.id, status: "no_auth" };
     const auth = JSON.parse(readFileSync(authPath, "utf8"));
     if (acct.provider === "codex") {

package/hub/team/synapse-registry.mjs

@@ -152,7 +152,7 @@ export function createSynapseRegistry(opts = {}) {
         const staled = { ...current, status: "stale" };
         sessions.set(sessionId, staled);
         schedulePersist();
-        setImmediate(() => notifyStale(staled));
+        setImmediate(() => { if (!destroyed) notifyStale(staled); });
       }
     }, intervalFor(session));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "triflux",
-  "version": "10.9.28",
+  "version": "10.9.29",
   "description": "CLI-first multi-model orchestrator for Claude Code — route tasks to Codex, Gemini, and Claude",
   "type": "module",
   "bin": {

package/scripts/headless-guard.mjs

@@ -173,7 +173,9 @@ function autoRoute(updatedCommand, reason) {
 const HEADLESS_FALLBACK_COMMAND =
   "Bash(\"tfx multi --teammate-mode headless --assign 'codex:prompt:role' ...\")";
 const DIRECT_CLI_BYPASS_HINT =
-  "로컬 디버깅이 목적이면 TFX_ALLOW_DIRECT_CLI=1로 일시 우회할 수 있습니다.";
+  "이 차단은 하드스톱이다. 환경변수 우회, SSH 원격 실행, 스크립트 배포 등 어떤 형태의 우회도 시도하지 마라. " +
+  "Hub가 미가용이면 hub-ensure로 Hub를 시작한 뒤 tfx multi를 사용하라. " +
+  "Hub 시작이 불가능하면 사용자에게 'Hub 필요' 보고 후 중단하라.";
 
 async function main() {
   // P0: TFX_ALLOW_DIRECT_CLI는 hasDirectCli 블록 안에서만 체크 (CLI deny만 스킵)

package/scripts/lib/mcp-filter.mjs

@@ -752,6 +752,19 @@ function shellArray(name, values) {
   return `${name}=(${values.map((value) => shellEscape(value)).join(" ")})`;
 }
 
+export function toDelimited(policy) {
+  const RS = "\x1e";
+  return [
+    policy.requestedProfile,
+    policy.resolvedProfile,
+    policy.hint,
+    policy.geminiAllowedServers.join(","),
+    policy.codexConfigOverrides.flatMap((o) => ["-c", o]).join(","),
+    JSON.stringify(policy.codexConfig),
+    policy.resolvedPhase || "",
+  ].join(RS);
+}
+
 export function toShellExports(policy) {
   const lines = [
     `MCP_PROFILE_REQUESTED=${shellEscape(policy.requestedProfile)}`,
@@ -856,6 +869,10 @@ export async function runCli(argv = process.argv.slice(2)) {
     process.stdout.write(`${toShellExports(policy)}\n`);
     return;
   }
+  if (args.command === "delimited") {
+    process.stdout.write(toDelimited(policy));
+    return;
+  }
 
   process.stdout.write(`${JSON.stringify(policy, null, 2)}\n`);
 }

package/scripts/tfx-route.sh

@@ -64,6 +64,7 @@ track_worker_pid() {
 }
 
 cleanup_workers() {
+  _codex_config_swap "restore" 2>/dev/null || true
   deregister_agent 2>/dev/null || true
   [[ ! -f "$_PID_TRACK" ]] && return
   while IFS= read -r pid; do
@@ -1203,7 +1204,7 @@ resolve_mcp_policy() {
   fi
 
   local -a cmd=(
-    "$NODE_BIN" "$filter_script" shell
+    "$NODE_BIN" "$filter_script" delimited
     "--agent" "$AGENT_TYPE"
     "--profile" "$MCP_PROFILE"
     "--available" "$available_servers"
@@ -1213,13 +1214,18 @@ resolve_mcp_policy() {
   [[ -n "$TFX_SEARCH_TOOL" ]] && cmd+=("--search-tool" "$TFX_SEARCH_TOOL")
   [[ -n "$TFX_WORKER_INDEX" ]] && cmd+=("--worker-index" "$TFX_WORKER_INDEX")
 
-  local shell_exports
-  if ! shell_exports="$("${cmd[@]}")"; then
+  local _raw
+  if ! _raw="$("${cmd[@]}")"; then
     echo "[tfx-route] ERROR: MCP 정책 계산 실패" >&2
     return 1
   fi
 
-  eval "$shell_exports"
+  local _gemini_servers _codex_flags _phase
+  IFS=$'\x1e' read -r MCP_PROFILE_REQUESTED MCP_RESOLVED_PROFILE MCP_HINT \
+    _gemini_servers _codex_flags CODEX_CONFIG_JSON _phase <<< "$_raw"
+  IFS=',' read -r -a GEMINI_ALLOWED_SERVERS <<< "$_gemini_servers"
+  IFS=',' read -r -a CODEX_CONFIG_FLAGS <<< "$_codex_flags"
+  [[ -n "$_phase" ]] && MCP_PIPELINE_PHASE="$_phase"
 }
 
 get_claude_model() {