triflux 8.11.2 → 8.12.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "triflux",
-  "version": "8.11.2",
+  "version": "8.12.1",
   "description": "CLI-first multi-model orchestrator for Claude Code — route tasks to Codex, Gemini, and Claude",
   "type": "module",
   "bin": {

package/scripts/mcp-gateway-ensure.mjs

@@ -4,7 +4,7 @@
 
 import { existsSync, readFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
-import { spawn } from 'node:child_process';
+import { execSync } from 'node:child_process';
 import { tmpdir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 
@@ -35,18 +35,16 @@ function hasManifest() {
   return existsSync(PID_FILE);
 }
 
-/** mcp-gateway-start.mjs를 detached로 기동 */
+/** mcp-gateway-start.mjs를 독립 프로세스로 기동 */
 function startGateway() {
   const scriptPath = join(PLUGIN_ROOT, 'scripts', 'mcp-gateway-start.mjs');
   if (!existsSync(scriptPath)) return false;
 
   try {
-    // hub-ensure.mjs 패턴: cmd.exe /c start /b → hook timeout에서 생존
-    const child = spawn('cmd.exe', ['/c', 'start', '/b', '', process.execPath, scriptPath], {
-      stdio: 'ignore',
-      windowsHide: true,
-    });
-    child.unref();
+    // PowerShell Start-Process: Windows Job Object에서 벗어나 부모 종료 후 생존
+    execSync(
+      `powershell -NoProfile -Command "Start-Process -WindowStyle Hidden -FilePath '${process.execPath}' -ArgumentList '${scriptPath.replaceAll("'", "''")}'"`
+    , { stdio: 'ignore', timeout: 10000 });
     return true;
   } catch {
     return false;

package/scripts/mcp-gateway-start.mjs

@@ -57,23 +57,43 @@ function sleep(ms) {
 // ── 시작 ──
 
 function spawnGateway(srv) {
-  // 단일 명령 문자열 — shell: true에서 공백 인자를 올바르게 쿼팅
-  const cmdStr = `npx -y supergateway --stdio "${srv.cmd}" --port ${srv.port} --outputTransport sse --healthEndpoint /healthz`;
-
-  // detached: true → 독립 프로세스 그룹 (부모 종료 후 생존)
-  // shell: true → Windows에서 npx.cmd 해석
-  const child = spawn(cmdStr, [], {
-    detached: true,
-    stdio: 'ignore',
-    shell: true,
-    windowsHide: true,
-    env: process.env,
-  });
-  child.unref();
-  return child.pid;
+  // 임시 .cmd 파일로 quoting 문제 회피
+  const cmdContent = `@echo off\nnpx -y supergateway --stdio "${srv.cmd}" --port ${srv.port} --outputTransport sse --healthEndpoint /healthz --cors "http://localhost"`;
+  const cmdFile = join(tmpdir(), `tfx-sg-${srv.name}.cmd`);
+  writeFileSync(cmdFile, cmdContent);
+
+  // PowerShell Start-Process: Windows Job Object에서 벗어나 부모 종료 후 생존
+  execSync(
+    `powershell -NoProfile -Command "Start-Process -WindowStyle Hidden -FilePath cmd.exe -ArgumentList '/c','${cmdFile.replaceAll("'", "''")}'"`
+  , { stdio: 'ignore', timeout: 10000 });
+}
+
+function ensureFirewallRule() {
+  if (process.platform !== 'win32') return;
+  const ports = SERVERS.map((s) => s.port).join(',');
+  const ruleName = 'TFX-MCP-Gateway-Block-External';
+  try {
+    // 기존 규칙 있으면 스킵
+    const check = execSync(
+      `netsh advfirewall firewall show rule name="${ruleName}" 2>&1`,
+      { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'], timeout: 5000 },
+    );
+    if (check.includes(ruleName)) return;
+  } catch { /* 규칙 없음 — 생성 */ }
+
+  try {
+    execSync(
+      `netsh advfirewall firewall add rule name="${ruleName}" dir=in action=block protocol=tcp localport=${ports} remoteip=any profile=any`,
+      { stdio: 'ignore', timeout: 5000 },
+    );
+    console.log(`[SEC] Firewall rule added: block external access to ports ${ports}`);
+  } catch {
+    console.log(`[SEC] WARNING: Could not add firewall rule — run as admin or manually block ports ${ports}`);
+  }
 }
 
 async function startAll() {
+  ensureFirewallRule();
   const launched = [];
 
   for (const srv of SERVERS) {
@@ -136,8 +156,14 @@ async function startAll() {
 function stopAll() {
   // supergateway + 하위 MCP 프로세스를 포트 기반으로 찾아 종료
   try {
-    const ps = `Get-CimInstance Win32_Process -Filter "Name='node.exe' OR Name='cmd.exe'" | Where-Object { $_.CommandLine -match 'supergateway' } | ForEach-Object { taskkill /F /T /PID $_.ProcessId 2>$null; Write-Output "[STOP] PID $($_.ProcessId)" }`;
-    const output = execSync(`powershell -NoProfile -Command "${ps}"`, {
+    // temp .ps1 파일로 bash/cmd 쿼팅 충돌 회피
+    const psFile = join(tmpdir(), 'tfx-sg-stop.ps1');
+    writeFileSync(psFile, [
+      `Get-CimInstance Win32_Process -Filter "Name='node.exe' OR Name='cmd.exe'" |`,
+      `  Where-Object { $_.CommandLine -match 'supergateway' } |`,
+      `  ForEach-Object { taskkill /F /T /PID $_.ProcessId 2>$null; Write-Output "[STOP] PID $($_.ProcessId)" }`,
+    ].join('\n'));
+    const output = execSync(`powershell -NoProfile -ExecutionPolicy Bypass -File "${psFile}"`, {
       encoding: 'utf8',
       timeout: 10000,
       stdio: ['pipe', 'pipe', 'ignore'],

package/scripts/mcp-gateway-verify.mjs

@@ -57,7 +57,7 @@ async function main() {
       : `${downCount}/${entries.length} gateways down`,
   );
 
-  process.exit(downCount > 0 ? 1 : 0);
+  process.exitCode = downCount > 0 ? 1 : 0;
 }
 
 main();