aiterm-mcp 0.27.7 → 0.27.8

package/dist/vendors/claude.js

@@ -0,0 +1,210 @@
+// Claude Code 固有の制御。完了正本は launch 固有 Stop hook が書く event/result（ADR 0025）。
+// core 所有のサービス（transcript 不在エラー）は引数で注入し、
+// 依存方向を core → vendors → agent-shared の一方向に保つ。
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { fileURLToPath } from "node:url";
+import { AitermError } from "../errors.js";
+import { modeBitsWorldAccessible } from "../tmux-runtime.js";
+import { spawnAgentControlCommand } from "../agent-resolver.js";
+import { currentUid, writeJson0600, shq, subagentInstruction, writeScopeLaunchNote, agentEventPath, createEmpty0600, writeAgentMetadata, agentLineageFields, assertSessionName, agentsDir, LAUNCH_ID_RE, } from "../agent-shared.js";
+export const OPERATION_ID_RE = /^sha256:[0-9a-f]{64}$/;
+export const CLAUDE_RESULT_MAX_BYTES = 4 * 1024 * 1024;
+export const CLAUDE_EFFORTS = new Set(["low", "medium", "high", "xhigh", "max"]);
+export function agentManagedClaudeSettingsPath(name, launchId) {
+    assertSessionName(name);
+    if (!LAUNCH_ID_RE.test(launchId))
+        throw new AitermError(`launch_id が不正です: ${launchId}`, 2);
+    return path.join(agentsDir(), `${name}.${launchId}.claude-settings.json`);
+}
+export function agentClaudeResultPath(name, launchId) {
+    assertSessionName(name);
+    if (!LAUNCH_ID_RE.test(launchId))
+        throw new AitermError(`launch_id が不正です: ${launchId}`, 2);
+    return path.join(agentsDir(), `${name}.${launchId}.claude-result.json`);
+}
+export function agentClaudeOperationPath(name, launchId) {
+    assertSessionName(name);
+    if (!LAUNCH_ID_RE.test(launchId))
+        throw new AitermError(`launch_id が不正です: ${launchId}`, 2);
+    return path.join(agentsDir(), `${name}.${launchId}.claude-operation.json`);
+}
+export function agentClaudeApprovalReceiptPath(name, launchId) {
+    assertSessionName(name);
+    if (!LAUNCH_ID_RE.test(launchId))
+        throw new AitermError(`launch_id が不正です: ${launchId}`, 2);
+    return path.join(agentsDir(), `${name}.${launchId}.claude-approval.json`);
+}
+export function agentClaudeDispatchReceiptPath(name, launchId, operationId) {
+    assertSessionName(name);
+    if (!LAUNCH_ID_RE.test(launchId))
+        throw new AitermError(`launch_id が不正です: ${launchId}`, 2);
+    const validated = validateOperationId(operationId);
+    return path.join(agentsDir(), `${name}.${launchId}.${validated.slice("sha256:".length)}.claude-dispatch`);
+}
+function claudeHookScriptPath() {
+    // この module は dist/vendors/ に置かれるが、stop hook 実体は dist/ 直下に build される。
+    return path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "claude-stop-hook.js");
+}
+// process.execPath は Homebrew 等では Cellar の版付き実体を指す。長寿命 MCP server の起動後に
+// runtime が更新されるとその実体だけが消え、既に生成済みの hook が exit 127 になる。
+// hook は server と同じ継承 PATH から node を毎回解決し、安定した package script を実行する。
+function nodeHookCommand(hookScript) {
+    return `${shq("node")} ${shq(hookScript)}`;
+}
+export function createClaudeCorrelationSettings(name, launchId, model, effort) {
+    const hookScript = claudeHookScriptPath();
+    if (!fs.existsSync(hookScript)) {
+        throw new AitermError(`Claude Stop hook wrapper が見つかりません。npm run build を実行してください: ${hookScript}`, 2);
+    }
+    const settings = agentManagedClaudeSettingsPath(name, launchId);
+    writeJson0600(settings, {
+        ...(model ? { model } : {}),
+        ...(effort ? { effortLevel: effort } : {}),
+        hooks: {
+            Stop: [
+                {
+                    hooks: [
+                        {
+                            type: "command",
+                            command: nodeHookCommand(hookScript),
+                            timeout: 10,
+                        },
+                    ],
+                },
+            ],
+        },
+    });
+    return settings;
+}
+export function validateOperationId(operationId) {
+    if (typeof operationId !== "string" || !OPERATION_ID_RE.test(operationId)) {
+        throw new AitermError("operation_id は sha256:<64 lowercase hex> で指定してください", 2);
+    }
+    return operationId;
+}
+export function readClaudeResultText(meta, done, operationId, transcriptUnavailable) {
+    if (meta.kind !== "claude" || !meta.result_file || !done.result_digest || done.result_bytes == null) {
+        transcriptUnavailable();
+    }
+    let st;
+    try {
+        st = fs.lstatSync(meta.result_file);
+    }
+    catch {
+        transcriptUnavailable();
+    }
+    if (!st.isFile() ||
+        st.isSymbolicLink() ||
+        st.uid !== currentUid() ||
+        st.nlink !== 1 ||
+        modeBitsWorldAccessible(st.mode) ||
+        st.size > CLAUDE_RESULT_MAX_BYTES + 4096) {
+        throw new AitermError("Claude result file の安全検証に失敗しました", 2);
+    }
+    let result;
+    try {
+        result = JSON.parse(fs.readFileSync(meta.result_file, "utf8"));
+    }
+    catch {
+        throw new AitermError("Claude result file を読めません", 2);
+    }
+    const keys = result && typeof result === "object" && !Array.isArray(result) ? Object.keys(result).sort() : [];
+    if (keys.join(",") !== "operation_id,result_bytes,result_digest,schema,text,vendor_session_id" ||
+        result.schema !== "aiterm.claude-turn-result.v2" ||
+        result.operation_id !== done.operation_id ||
+        (operationId !== null && result.operation_id !== operationId) ||
+        result.vendor_session_id !== meta.vendor_session_id ||
+        result.result_digest !== done.result_digest ||
+        result.result_bytes !== done.result_bytes ||
+        typeof result.text !== "string" ||
+        Buffer.byteLength(result.text, "utf8") !== done.result_bytes ||
+        createHash("sha256").update(result.text, "utf8").digest("hex") !== done.result_digest) {
+        throw new AitermError("Claude result file が完了eventと一致しません", 2);
+    }
+    return result.text;
+}
+const CLAUDE_AUTH_STATUS_TIMEOUT_MS = 5_000;
+export function assertClaudeAuthenticationReady(bin) {
+    const result = spawnAgentControlCommand(bin, ["auth", "status", "--json"], process.cwd(), {
+        encoding: "utf8",
+        timeout: CLAUDE_AUTH_STATUS_TIMEOUT_MS,
+        maxBuffer: 64 * 1024,
+    });
+    let status = null;
+    try {
+        status = JSON.parse((result.stdout ?? "").trim());
+    }
+    catch {
+        status = null;
+    }
+    if (result.error == null &&
+        result.status === 0 &&
+        status !== null &&
+        typeof status === "object" &&
+        !Array.isArray(status) &&
+        status.loggedIn === true) {
+        return;
+    }
+    if (status !== null &&
+        typeof status === "object" &&
+        !Array.isArray(status) &&
+        status.loggedIn === false) {
+        throw new AitermError("Claude Codeの認証を利用できません。sessionは作成していません。" +
+            "通常端末で `claude doctor` を実行し、Keychain／credential storeを直してから一度だけ `claude auth login` を実行してください。" +
+            "aiterm相関付きClaude session内で /login を繰り返さないでください。", 2);
+    }
+    const timedOut = result.error && result.error.code === "ETIMEDOUT";
+    throw new AitermError(`Claude Codeの認証状態を起動前に確認できません${timedOut ? "（5秒でtimeout）" : ""}。sessionは作成していません。` +
+        "`claude auth status --json` と `claude doctor` が成功することを通常端末で確認してください。", 2);
+}
+export function buildClaudeAgentCmd(bin, model, effort, prompt, meta) {
+    const parts = [shq(bin)];
+    if (meta?.kind === "claude") {
+        parts.push("--setting-sources", shq("user,project,local"), "--settings", shq(meta.claude_settings ?? ""), "--session-id", shq(meta.vendor_session_id ?? ""), "--append-system-prompt", shq(subagentInstruction(meta)));
+    }
+    if (model)
+        parts.push("--model", shq(model));
+    if (effort)
+        parts.push("--effort", shq(effort));
+    if (prompt)
+        parts.push(shq(prompt)); // 初手プロンプト（任意）
+    return parts.join(" ");
+}
+export function claudeLaunchNote(model, effort, meta) {
+    const writeScopeNote = writeScopeLaunchNote("claude", meta?.write_scope);
+    return `起動設定: model=${model ?? "CLI既定"} effort=${effort ?? "CLI既定"}。${writeScopeNote}`;
+}
+export function claudeTuiReady(screen) {
+    return screen.includes("Claude Code") && /(^|\n)\s*❯/.test(screen);
+}
+// submit座礁観測のcomposer領域マーカー（ready判定と同じ記号を行頭基準で探す）。
+export const CLAUDE_COMPOSER_MARKER_RE = /^\s*❯/;
+export function createClaudeAgentMetadata(name, cwd, initialPrompt, launchOperationId, launchRequestDigest, lineageContext, model, effort) {
+    const launchId = randomBytes(16).toString("hex");
+    const eventFile = agentEventPath(name, launchId);
+    const resultFile = agentClaudeResultPath(name, launchId);
+    createEmpty0600(eventFile);
+    createEmpty0600(resultFile);
+    const claudeSettings = createClaudeCorrelationSettings(name, launchId, model, effort);
+    const meta = {
+        kind: "claude",
+        aiterm_session: name,
+        launch_id: launchId,
+        event_file: eventFile,
+        created_at: new Date().toISOString(),
+        cwd,
+        vendor_session_id: randomUUID(),
+        initial_prompt: initialPrompt,
+        launch_operation_id: launchOperationId,
+        launch_request_digest: launchRequestDigest,
+        hook_route: "shared_claude_settings",
+        ...agentLineageFields(lineageContext),
+        node_platform: process.platform,
+        claude_settings: claudeSettings,
+        result_file: resultFile,
+    };
+    writeAgentMetadata(meta);
+    return meta;
+}

package/dist/vendors/codex.js

@@ -0,0 +1,481 @@
+// Codex 固有の制御。完了正本は root rollout transcript の task_complete（ADR 0022）。
+// core 所有のサービス（transcript 行読取・rate limit 検知）は引数で注入し、
+// 依存方向を core → vendors → agent-shared の一方向に保つ。
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { randomBytes } from "node:crypto";
+import { AitermError } from "../errors.js";
+import { shq, subagentInstruction, writeScopeLaunchNote, safeStatSize, readFileRange, sleep, agentMetadataPath, writeAgentMetadata, agentEventPath, createEmpty0600, agentLineageFields, AGENT_DONE_POLL_MS, AGENT_EVENT_MAX_BYTES, AGENT_EVENT_TAIL_BYTES, CODEX_TRANSCRIPT_INCREMENT_MAX_BYTES, } from "../agent-shared.js";
+export function realCodexHome() {
+    return process.env.CODEX_HOME || path.join(process.env.HOME ?? os.homedir(), ".codex");
+}
+export function readCodexConfigPins(configPath) {
+    let body;
+    try {
+        body = fs.readFileSync(configPath, "utf8");
+    }
+    catch {
+        return { model: { present: false, value: null }, effort: { present: false, value: null } };
+    }
+    const rows = body.split(/\r?\n/);
+    let firstTable = rows.findIndex((l) => /^\s*\[/.test(l));
+    if (firstTable === -1)
+        firstTable = rows.length;
+    const pick = (key) => {
+        for (const l of rows.slice(0, firstTable)) {
+            const m = l.match(new RegExp(`^\\s*(?:"${key}"|'${key}'|${key})\\s*=\\s*(.*)$`));
+            if (m) {
+                const v = m[1].trim().match(/^"([^"\\]*)"\s*(?:#.*)?$/);
+                return { present: true, value: v ? v[1] : null };
+            }
+        }
+        return { present: false, value: null };
+    };
+    return { model: pick("model"), effort: pick("model_reasoning_effort") };
+}
+export function codexConfigSummary(configPath) {
+    let body;
+    try {
+        body = fs.readFileSync(configPath, "utf8");
+    }
+    catch {
+        return "";
+    }
+    const rows = body.split(/\r?\n/);
+    const mcpServers = rows.filter((line) => /^\s*\[mcp_servers\./.test(line)).length;
+    const firstTable = rows.findIndex((line) => /^\s*\[/.test(line));
+    const topLevel = rows.slice(0, firstTable === -1 ? rows.length : firstTable);
+    const valueOf = (key) => {
+        const row = topLevel.find((line) => new RegExp(`^\\s*(?:"${key}"|'${key}'|${key})\\s*=\\s*(.+?)\\s*(?:#.*)?$`).test(line));
+        if (!row)
+            return null;
+        const raw = row.match(/=\s*(.+?)(?:\s+#.*)?$/)?.[1].trim() ?? null;
+        if (!raw)
+            return null;
+        const quoted = raw.match(/^(?:"([^"\\]*)"|'([^'\\]*)')$/);
+        return quoted ? quoted[1] ?? quoted[2] : raw;
+    };
+    const bits = [`mcp_servers ${mcpServers} 個継承`];
+    const approvalPolicy = valueOf("approval_policy");
+    const sandboxMode = valueOf("sandbox_mode");
+    if (approvalPolicy)
+        bits.push(`approval_policy=${approvalPolicy}`);
+    if (sandboxMode)
+        bits.push(`sandbox_mode=${sandboxMode}`);
+    return `共有 config: ${bits.join(" / ")}`;
+}
+export function findLatestCodexTranscript(codexHome, vendorSessionId) {
+    const sessionsDir = path.join(codexHome, "sessions");
+    let latestFile = null;
+    let latestMtime = -Infinity;
+    const visit = (dir) => {
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const file = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                visit(file);
+                continue;
+            }
+            if (!entry.isFile() || !entry.name.startsWith("rollout-") || !entry.name.endsWith(".jsonl") || !entry.name.includes(vendorSessionId))
+                continue;
+            try {
+                const mtimeMs = fs.statSync(file).mtimeMs;
+                if (mtimeMs > latestMtime) {
+                    latestFile = file;
+                    latestMtime = mtimeMs;
+                }
+            }
+            catch {
+                // 探索中に消えた transcript は候補にしない。候補が無ければ明示エラーにする。
+            }
+        }
+    };
+    visit(sessionsDir);
+    return latestFile;
+}
+export function listCodexTranscripts(codexHome) {
+    const sessionsDir = path.join(codexHome, "sessions");
+    const files = [];
+    const visit = (dir) => {
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const file = path.join(dir, entry.name);
+            if (entry.isDirectory())
+                visit(file);
+            else if (entry.isFile() && entry.name.startsWith("rollout-") && entry.name.endsWith(".jsonl"))
+                files.push(file);
+        }
+    };
+    visit(sessionsDir);
+    return files.sort();
+}
+export function codexTranscriptMatchesLaunch(file, meta) {
+    const createdAt = Date.parse(meta.created_at);
+    try {
+        const st = fs.statSync(file);
+        if (Number.isFinite(createdAt) && st.mtimeMs + 5_000 < createdAt)
+            return false;
+    }
+    catch {
+        return false;
+    }
+    const size = Math.min(safeStatSize(file), 1024 * 1024);
+    if (size === 0)
+        return false;
+    const marker = `AITERM_AGENT_LAUNCH_ID=${meta.launch_id}`;
+    let rootCli = false;
+    let launchMarker = false;
+    for (const line of readFileRange(file, 0, size).toString("utf8").split("\n")) {
+        if (!line.trim())
+            continue;
+        let record;
+        try {
+            record = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        if (record?.type === "session_meta") {
+            rootCli = record?.payload?.originator === "codex-tui" && record?.payload?.source === "cli";
+            if (!rootCli)
+                return false;
+        }
+        if (record?.type === "response_item" &&
+            record?.payload?.type === "message" &&
+            record?.payload?.role === "developer" &&
+            Array.isArray(record?.payload?.content)) {
+            launchMarker ||= record.payload.content.some((item) => (item?.type === "input_text" || item?.type === "output_text") &&
+                typeof item?.text === "string" &&
+                item.text.includes(marker));
+        }
+        if (rootCli && launchMarker)
+            return true;
+    }
+    return false;
+}
+export function codexTranscriptSessionId(file) {
+    const size = Math.min(safeStatSize(file), AGENT_EVENT_TAIL_BYTES);
+    if (size === 0)
+        return null;
+    const text = readFileRange(file, 0, size).toString("utf8");
+    for (const line of text.split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            const record = JSON.parse(line);
+            if (record?.type === "session_meta" && typeof record?.payload?.id === "string" && record.payload.id) {
+                return record.payload.id;
+            }
+        }
+        catch {
+            // startup中の未完結行は後のpollで読み直す。
+        }
+    }
+    return null;
+}
+export function codexRootTranscript(meta) {
+    if (meta.kind !== "codex" || !meta.codex_home)
+        return null;
+    if (meta.vendor_session_id)
+        return findLatestCodexTranscript(meta.codex_home, meta.vendor_session_id);
+    if (meta.hook_route === "shared_codex_home") {
+        const matches = listCodexTranscripts(meta.codex_home).filter((file) => codexTranscriptMatchesLaunch(file, meta));
+        if (matches.length > 1) {
+            throw new AitermError("共有CODEX_HOMEに同じlaunch markerのroot rolloutが複数あります。sessionを閉じて起動し直してください。", 2);
+        }
+        return matches[0] ?? null;
+    }
+    return listCodexTranscripts(meta.codex_home)[0] ?? null;
+}
+export function bindCodexTranscriptSession(meta) {
+    const transcript = codexRootTranscript(meta);
+    if (!transcript)
+        return null;
+    const vendorSessionId = codexTranscriptSessionId(transcript);
+    if (vendorSessionId && !meta.vendor_session_id) {
+        meta.vendor_session_id = vendorSessionId;
+        writeAgentMetadata(meta);
+    }
+    return transcript;
+}
+export function codexCompletionEvent(meta, vendorSessionId, record) {
+    if (record?.type !== "event_msg" ||
+        record?.payload?.type !== "task_complete" ||
+        typeof record?.payload?.turn_id !== "string" ||
+        !record.payload.turn_id)
+        return null;
+    return {
+        type: "agent_done",
+        vendor: "codex",
+        aiterm_session: meta.aiterm_session,
+        launch_id: meta.launch_id,
+        vendor_session_id: vendorSessionId,
+        turn_id: record.payload.turn_id,
+        operation_id: null,
+        reason: "Codex transcript task_complete",
+        done_status: "turn_done",
+        stop_hook_active: false,
+        at: typeof record.timestamp === "string" ? record.timestamp : new Date().toISOString(),
+    };
+}
+export function latestCodexCompletion(meta, readTranscriptLines) {
+    const transcript = codexRootTranscript(meta);
+    if (!transcript)
+        return null;
+    const vendorSessionId = meta.vendor_session_id ?? codexTranscriptSessionId(transcript);
+    let latest = null;
+    for (const line of readTranscriptLines(transcript)) {
+        if (!line.trim())
+            continue;
+        try {
+            latest = codexCompletionEvent(meta, vendorSessionId, JSON.parse(line)) ?? latest;
+        }
+        catch {
+            // Codexが末尾を書込み中なら、その行は次の観測で完結してから読む。
+        }
+    }
+    return latest;
+}
+export async function observeCodexDone(meta, timeout, requestedCursor, detectRateLimit) {
+    const metadataFile = agentMetadataPath(meta.aiterm_session, meta.launch_id);
+    let transcript = codexRootTranscript(meta);
+    const startOffset = requestedCursor ?? (transcript ? safeStatSize(transcript) : 0);
+    let cursor = startOffset;
+    let carry = "";
+    let malformedEvents = 0;
+    let discardLeadingFragment = false;
+    let initializedBoundary = false;
+    const deadline = performance.now() + timeout * 1000;
+    const observation = (outcome, ev = null, rateLimit = null) => ({
+        schema: "aiterm.agent-wait-result.v1",
+        session_id: meta.aiterm_session,
+        launch_id: meta.launch_id,
+        vendor: "codex",
+        outcome,
+        operation_id: null,
+        vendor_session_id: ev?.vendor_session_id ?? meta.vendor_session_id ?? null,
+        turn_id: ev?.turn_id ?? null,
+        malformed_events: malformedEvents,
+        at: ev?.at ?? null,
+        rate_limit: rateLimit,
+    });
+    for (;;) {
+        if (!fs.existsSync(metadataFile))
+            return observation("closed");
+        transcript ??= codexRootTranscript(meta);
+        if (transcript) {
+            if (!initializedBoundary) {
+                if (cursor > 0) {
+                    const previous = readFileRange(transcript, cursor - 1, cursor).toString("utf8");
+                    discardLeadingFragment = previous !== "\n";
+                }
+                initializedBoundary = true;
+            }
+            const size = safeStatSize(transcript);
+            if (size < cursor) {
+                throw new AitermError("Codex transcript が完了待機中に短くなりました。該当セッションを閉じて起動し直してください。", 2);
+            }
+            if (size - startOffset > CODEX_TRANSCRIPT_INCREMENT_MAX_BYTES) {
+                throw new AitermError("Codex transcript のturn増分が大きすぎます。該当セッションを閉じて起動し直してください。", 2);
+            }
+            if (size > cursor) {
+                carry += readFileRange(transcript, cursor, size).toString("utf8");
+                cursor = size;
+                const parts = carry.split("\n");
+                carry = parts.pop() ?? "";
+                if (discardLeadingFragment && parts.length > 0) {
+                    parts.shift();
+                    discardLeadingFragment = false;
+                }
+                const vendorSessionId = meta.vendor_session_id ?? codexTranscriptSessionId(transcript);
+                for (const line of parts) {
+                    if (!line.trim())
+                        continue;
+                    if (Buffer.byteLength(line, "utf8") > AGENT_EVENT_MAX_BYTES) {
+                        malformedEvents++;
+                        continue;
+                    }
+                    try {
+                        const done = codexCompletionEvent(meta, vendorSessionId, JSON.parse(line));
+                        if (done)
+                            return observation("done", done);
+                    }
+                    catch {
+                        malformedEvents++;
+                    }
+                }
+            }
+        }
+        {
+            const limited = detectRateLimit(meta.kind, meta.aiterm_session);
+            if (limited)
+                return observation("rate_limited", null, limited);
+        }
+        if (performance.now() >= deadline)
+            return observation(timeout === 0 ? "running" : "timeout");
+        await sleep(AGENT_DONE_POLL_MS);
+    }
+}
+export function buildCodexAgentCmd(bin, model, effort, prompt, meta) {
+    const parts = [shq(bin)];
+    // `codex --help` で確認した実在フラグ。read-only 宣言だけはCLI sandboxへ落とし、
+    // launcher自身が実効能力壁を作る。パス説明はCodex CLIに同等のallowlist引数がないため宣言のまま残す。
+    if (meta?.kind === "codex" && meta.write_scope === "read-only")
+        parts.push("--sandbox", "read-only");
+    // model/effort は共有configを書き換えず、CLI引数で明示して起動単位に優先する。
+    if (model)
+        parts.push("-m", shq(model));
+    if (effort)
+        parts.push("-c", `model_reasoning_effort=${shq(effort)}`);
+    if (meta?.kind === "codex" && meta.hook_route === "shared_codex_home") {
+        parts.push("-c", `developer_instructions=${shq(subagentInstruction(meta))}`);
+    }
+    if (prompt)
+        parts.push(shq(prompt)); // 初手プロンプト（任意）
+    return parts.join(" ");
+}
+// 起動応答にモデル/effort の実効値と出所を明示する。codex は端末 config のピン（model /
+// model_reasoning_effort）が対話子へ波及する構造のため、引数・端末config継承・CLI既定の
+// どれで起動したかを起動時点で可視化し、実効 effort=ultra は proactive 自動委譲 ON を警告する。
+export function codexLaunchNote(model, effort, meta) {
+    const writeScopeNote = writeScopeLaunchNote("codex", meta?.write_scope);
+    const configPath = meta?.kind === "codex" && meta.codex_home
+        ? path.join(meta.codex_home, "config.toml")
+        : path.join(realCodexHome(), "config.toml");
+    const pins = readCodexConfigPins(configPath);
+    const describePin = (arg, pin) => arg
+        ? `${arg}（引数）`
+        : pin.present
+            ? pin.value
+                ? `${pin.value}（端末config継承）`
+                : "端末config継承（値未解析）"
+            : "CLI既定";
+    const effectiveEffort = effort ?? (pins.effort.present ? pins.effort.value : null);
+    const launch = `起動設定: model=${describePin(model, pins.model)} effort=${describePin(effort, pins.effort)}。` +
+        (effectiveEffort === "ultra"
+            ? "⚠ effort=ultra は max 推論＋proactive 自動委譲 ON（子エージェント自動生成・使用量急増に注意）。"
+            : "");
+    const summary = meta?.kind === "codex" && meta.codex_home ? codexConfigSummary(configPath) : "";
+    return (summary ? `${launch}\n${summary}\n` : launch) + writeScopeNote;
+}
+export function codexTuiReady(screen) {
+    // 起動直後は製品header、長寿命sessionでは常駐footerがCodex TUIの識別子になる。
+    // capture-paneは直近45行だけなので、会話が進むとheaderは正常に画面外へ流れる。
+    const codexFrontend = screen.includes("OpenAI Codex")
+        || /(^|\n)\s*\S+\s+(?:low|medium|high|xhigh|max|ultra)(?:\s+fast)?\s+·\s+\S.*$/m.test(screen);
+    return codexFrontend && /(^|\n)\s*[›>]/.test(screen);
+}
+// submit座礁観測のcomposer領域マーカー（ready判定と同じ記号を行頭基準で探す）。
+export const CODEX_COMPOSER_MARKER_RE = /^\s*[›>]/;
+export function codexModelChoice(screen, model) {
+    for (const line of screen.slice(screen.lastIndexOf("Select Model and Effort")).split("\n")) {
+        const match = line.match(/^\s*(?:›\s*)?(\d+)\.\s+(\S+)/);
+        if (match?.[2] === model)
+            return match[1];
+    }
+    return null;
+}
+export function codexEffortChoice(screen, effort) {
+    const labels = {
+        low: /^Low\b/i,
+        medium: /^Medium\b/i,
+        high: /^High\b/i,
+        xhigh: /^Extra high\b/i,
+        max: /^Max\b/i,
+        ultra: /^Ultra\b/i,
+    };
+    const wanted = labels[effort.toLowerCase()];
+    if (!wanted)
+        return null;
+    for (const line of screen.split("\n")) {
+        const match = line.match(/^\s*(?:›\s*)?(\d+)\.\s+(.+?)\s{2,}/);
+        if (match && wanted.test(match[2]))
+            return match[1];
+    }
+    return null;
+}
+export function codexMoreReasoningChoice(screen) {
+    for (const line of screen.split("\n")) {
+        const match = line.match(/^\s*(?:›\s*)?(\d+)\.\s+More reasoning/);
+        if (match)
+            return match[1];
+    }
+    return null;
+}
+// 回収対象turnの最終assistantメッセージをroot rollout transcriptから抽出する。
+export function codexTranscriptText(meta, turnId, readTranscriptLines, transcriptUnavailable) {
+    if (!meta.codex_home || !meta.vendor_session_id)
+        transcriptUnavailable();
+    const transcript = findLatestCodexTranscript(meta.codex_home, meta.vendor_session_id);
+    if (!transcript)
+        transcriptUnavailable();
+    const lines = readTranscriptLines(transcript);
+    const matching = [];
+    let finalAnswer = "";
+    for (const line of lines) {
+        if (!line.trim())
+            continue;
+        let record;
+        try {
+            record = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        const payload = record?.payload;
+        if (record?.type === "response_item" &&
+            payload?.type === "message" &&
+            payload?.role === "assistant" &&
+            payload?.internal_chat_message_metadata_passthrough?.turn_id === turnId &&
+            Array.isArray(payload?.content)) {
+            for (const item of payload.content) {
+                if (item?.type === "output_text" && typeof item.text === "string")
+                    matching.push(item.text);
+            }
+        }
+        if (record?.type === "event_msg" &&
+            payload?.type === "agent_message" &&
+            payload?.phase === "final_answer" &&
+            typeof payload?.message === "string") {
+            finalAnswer = payload.message;
+        }
+    }
+    return matching.join("\n") || finalAnswer;
+}
+export function createCodexAgentMetadata(name, cwd, initialPrompt, overrides = {}, writeScope, lineageContext) {
+    const launchId = randomBytes(16).toString("hex");
+    const eventFile = agentEventPath(name, launchId);
+    createEmpty0600(eventFile);
+    const codexHome = realCodexHome();
+    const meta = {
+        kind: "codex",
+        aiterm_session: name,
+        launch_id: launchId,
+        event_file: eventFile,
+        created_at: new Date().toISOString(),
+        cwd,
+        ...(writeScope === undefined ? {} : { write_scope: writeScope }),
+        vendor_session_id: null,
+        initial_prompt: initialPrompt,
+        hook_route: "shared_codex_home",
+        completion_route: "codex_transcript",
+        ...(lineageContext ? agentLineageFields(lineageContext) : {}),
+        node_platform: process.platform,
+        codex_home: codexHome,
+    };
+    writeAgentMetadata(meta);
+    return meta;
+}

package/dist/vendors/grok.js

@@ -0,0 +1,386 @@
+// Grok / Composer 固有の制御。Composer は grok CLI の別モデル起動プリセットであり、
+// モデル既定値と表示名以外は Grok と完全共通（実測 2026-08-23 棚卸し・docs/32）。
+// core 所有のサービス（transcript 行読取・rate limit 検知）は引数で注入し、
+// 依存方向を core → vendors → agent-shared の一方向に保つ。
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { randomBytes, randomUUID } from "node:crypto";
+import { AitermError } from "../errors.js";
+import { modeBitsWorldAccessible, modeBitsWritableByOthers } from "../tmux-runtime.js";
+import { spawnAgentControlCommand } from "../agent-resolver.js";
+import { shq, subagentInstruction, writeScopeLaunchNote, currentUid, safeStatSize, readFileRange, sleep, agentMetadataPath, writeAgentMetadata, agentEventPath, createEmpty0600, agentLineageFields, AGENT_DONE_POLL_MS, AGENT_EVENT_MAX_BYTES, GROK_TRANSCRIPT_INCREMENT_MAX_BYTES, } from "../agent-shared.js";
+const GROK_AUTH_MAX_BYTES = 64 * 1024;
+const GROK_MODELS_MAX_BYTES = 1024 * 1024;
+const GROK_MODELS_TIMEOUT_MS = 15_000;
+// grok CLI はモデル未指定だと端末側 default に従うため、ツール契約として既定 slug を固定する。
+// codex は既定 slug を持たず端末 config／CLI 既定に委ねる（起動応答で実効値を報告する）。
+// grok 既定は dotagents 規範（docs/02_models.md: xAI 旗艦 = grok-4.6）に従う。
+export const GROK_MODEL_DEFAULTS = {
+    grok: "grok-4.6",
+    composer: "grok-composer-2.5-fast",
+};
+export function realGrokHome() {
+    return path.resolve(process.env.GROK_HOME || path.join(process.env.HOME ?? os.homedir(), ".grok"));
+}
+export function resolveAndValidateGrokAuth(srcHome) {
+    const inheritedSet = Object.prototype.hasOwnProperty.call(process.env, "GROK_AUTH_PATH");
+    const inherited = process.env.GROK_AUTH_PATH;
+    if (inheritedSet && (!inherited || !path.isAbsolute(inherited)))
+        throw new AitermError("GROK_AUTH_PATH は空でない絶対パスで指定してください", 2);
+    const authPath = inherited ?? path.join(srcHome, "auth.json");
+    let fd;
+    try {
+        fd = fs.openSync(authPath, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+        const st = fs.fstatSync(fd);
+        // isFile・nlink・owner・size・O_NOFOLLOW・realpath 検証は全OS共通に維持する
+        // （mode bit 検証のOS差は tmux-runtime の modeBits* が所有）。
+        const worldAccessible = modeBitsWorldAccessible(st.mode);
+        if (!st.isFile() || st.nlink !== 1 || st.uid !== currentUid() || worldAccessible || st.size > GROK_AUTH_MAX_BYTES) {
+            throw new AitermError("Grok 認証正本の安全検証に失敗しました", 2);
+        }
+        const value = JSON.parse(fs.readFileSync(fd, "utf8"));
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new AitermError("Grok 認証正本のJSONが不正です", 2);
+        // auth file 自体は O_NOFOLLOW で開いているが、中間 directory の symlink は辿り得る。
+        // vendor に渡す正本を path swap の入口にしないため、字句正規化した絶対 path と realpath を
+        // 一致させ、canonical な祖先も root まで検証する。same-UID race の排他は vendor lock の責務。
+        const lexicalPath = path.resolve(authPath);
+        const canonicalPath = fs.realpathSync(authPath);
+        if (lexicalPath !== canonicalPath)
+            throw new AitermError("Grok 認証正本の path に symlink を含められません", 2);
+        for (let dir = path.dirname(canonicalPath);; dir = path.dirname(dir)) {
+            const dirSt = fs.lstatSync(dir);
+            // /tmp のような root 所有 + sticky の共有 directory は、本人所有の private な
+            // 直下 directory を他 UID が rename/unlink できないため許可する。sticky 無しの
+            // group/other writable 祖先は path swap が可能なので従来どおり拒否する。
+            const writableByOthers = modeBitsWritableByOthers(dirSt.mode);
+            const protectedSharedRoot = dirSt.uid === 0 && (dirSt.mode & 0o1000) !== 0;
+            if (!dirSt.isDirectory()
+                || dirSt.isSymbolicLink()
+                || (dirSt.uid !== currentUid() && dirSt.uid !== 0)
+                || (writableByOthers && !protectedSharedRoot)) {
+                throw new AitermError("Grok 認証正本の祖先 directory が安全ではありません", 2);
+            }
+            const parent = path.dirname(dir);
+            if (parent === dir)
+                break;
+        }
+        return canonicalPath;
+    }
+    catch (e) {
+        if (e.code === "ENOENT" && !inheritedSet && process.env.XAI_API_KEY)
+            return null;
+        if (e instanceof AitermError)
+            throw e;
+        throw new AitermError(e.code === "ENOENT" ? "Grok 認証正本が見つかりません。先に grok login が必要です" : "Grok 認証正本を安全に開けません", 2);
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+    }
+}
+export function grokModelCatalog(bin, cwd) {
+    const result = spawnAgentControlCommand(bin, ["models"], cwd, {
+        cwd,
+        encoding: "utf8",
+        env: process.env,
+        timeout: GROK_MODELS_TIMEOUT_MS,
+        maxBuffer: GROK_MODELS_MAX_BYTES,
+        windowsHide: true,
+    });
+    if (result.error || result.status !== 0) {
+        const detail = result.error?.message || result.stderr?.trim() || `exit=${result.status ?? "unknown"}`;
+        throw new AitermError(`Grok model catalog を取得できません: ${detail}`, 2);
+    }
+    const text = result.stdout.replace(/\x1b\[[0-?]*[ -/]*[@-~]/g, "");
+    const marker = "Available models:";
+    const start = text.indexOf(marker);
+    if (start < 0)
+        throw new AitermError("Grok model catalog の出力形式が不正です（Available models がありません）", 2);
+    const models = [];
+    for (const line of text.slice(start + marker.length).split(/\r?\n/)) {
+        const match = line.match(/^\s{2}[-*]\s+(.+?)(?:\s+\(default\))?\s*$/);
+        if (match?.[1])
+            models.push(match[1]);
+    }
+    if (models.length === 0)
+        throw new AitermError("Grok model catalog に利用可能なmodelがありません", 2);
+    return models;
+}
+export function assertGrokModelAvailable(bin, cwd, model) {
+    const models = grokModelCatalog(bin, cwd);
+    if (!models.includes(model)) {
+        throw new AitermError(`Grok model catalog に ${JSON.stringify(model)} がありません。利用可能: ${models.join(", ")}。` +
+            "別modelへfallbackせず起動を中止しました", 2);
+    }
+}
+export function grokSessionDirectory(meta) {
+    if ((meta.kind !== "grok" && meta.kind !== "composer") || !meta.grok_home || !meta.vendor_session_id)
+        return null;
+    const cwd = meta.cwd ?? process.cwd();
+    return path.join(meta.grok_home, "sessions", encodeURIComponent(cwd), meta.vendor_session_id);
+}
+export function grokEventsTranscript(meta) {
+    const dir = grokSessionDirectory(meta);
+    return dir ? path.join(dir, "events.jsonl") : null;
+}
+export function grokCompletionEvent(meta, record) {
+    if ((meta.kind !== "grok" && meta.kind !== "composer") ||
+        record?.type !== "turn_ended" ||
+        (record?.outcome !== "completed" && record?.outcome !== "cancelled"))
+        return null;
+    const turnId = typeof record?.ts === "string" || typeof record?.ts === "number" ? String(record.ts) : null;
+    return {
+        type: "agent_done",
+        vendor: meta.kind,
+        aiterm_session: meta.aiterm_session,
+        launch_id: meta.launch_id,
+        vendor_session_id: meta.vendor_session_id,
+        turn_id: turnId,
+        operation_id: null,
+        reason: `Grok transcript turn_ended:${record.outcome}`,
+        done_status: "turn_done",
+        stop_hook_active: false,
+        at: typeof record?.ts === "string" ? record.ts : new Date().toISOString(),
+    };
+}
+export function latestGrokCompletion(meta, readTranscriptLines) {
+    const transcript = grokEventsTranscript(meta);
+    if (!transcript || !fs.existsSync(transcript))
+        return null;
+    let latest = null;
+    for (const line of readTranscriptLines(transcript)) {
+        if (!line.trim())
+            continue;
+        try {
+            latest = grokCompletionEvent(meta, JSON.parse(line)) ?? latest;
+        }
+        catch {
+            // 末尾書込み中のlineは次の観測で完結してから読む。
+        }
+    }
+    return latest;
+}
+export function grokInitializationComplete(meta) {
+    const transcript = grokEventsTranscript(meta);
+    if (!transcript || !fs.existsSync(transcript))
+        return false;
+    const size = safeStatSize(transcript);
+    const from = Math.max(0, size - GROK_TRANSCRIPT_INCREMENT_MAX_BYTES);
+    const lines = readFileRange(transcript, from, size).toString("utf8").split("\n");
+    if (from > 0)
+        lines.shift();
+    for (let index = lines.length - 1; index >= 0; index -= 1) {
+        const line = lines[index].trim();
+        if (!line)
+            continue;
+        try {
+            const record = JSON.parse(line);
+            if (record?.type === "mcp_init_completed")
+                return true;
+            if (record?.type === "mcp_init_started")
+                return false;
+        }
+        catch {
+            // 末尾書込み中や無関係な破損lineはready判定を進めない。
+        }
+    }
+    return false;
+}
+export async function observeGrokDone(meta, timeout, requestedCursor, detectRateLimit) {
+    const metadataFile = agentMetadataPath(meta.aiterm_session, meta.launch_id);
+    const transcript = grokEventsTranscript(meta);
+    if (!transcript)
+        throw new AitermError("Grok transcriptのsession相関情報がありません", 2);
+    const startOffset = requestedCursor ?? safeStatSize(transcript);
+    let cursor = startOffset;
+    let carry = "";
+    let malformedEvents = 0;
+    let discardLeadingFragment = false;
+    let initializedBoundary = false;
+    const deadline = performance.now() + timeout * 1000;
+    const observation = (outcome, ev = null, rateLimit = null) => ({
+        schema: "aiterm.agent-wait-result.v1",
+        session_id: meta.aiterm_session,
+        launch_id: meta.launch_id,
+        vendor: meta.kind,
+        outcome,
+        operation_id: null,
+        vendor_session_id: meta.vendor_session_id,
+        turn_id: ev?.turn_id ?? null,
+        malformed_events: malformedEvents,
+        at: ev?.at ?? null,
+        rate_limit: rateLimit,
+    });
+    for (;;) {
+        if (!fs.existsSync(metadataFile))
+            return observation("closed");
+        if (fs.existsSync(transcript)) {
+            if (!initializedBoundary) {
+                if (cursor > 0) {
+                    const previous = readFileRange(transcript, cursor - 1, cursor).toString("utf8");
+                    discardLeadingFragment = previous !== "\n";
+                }
+                initializedBoundary = true;
+            }
+            const size = safeStatSize(transcript);
+            if (size < cursor) {
+                throw new AitermError("Grok transcript が完了待機中に短くなりました。該当セッションを閉じて起動し直してください。", 2);
+            }
+            if (size - startOffset > GROK_TRANSCRIPT_INCREMENT_MAX_BYTES) {
+                throw new AitermError("Grok transcript のturn増分が大きすぎます。該当セッションを閉じて起動し直してください。", 2);
+            }
+            if (size > cursor) {
+                carry += readFileRange(transcript, cursor, size).toString("utf8");
+                cursor = size;
+                const parts = carry.split("\n");
+                carry = parts.pop() ?? "";
+                if (discardLeadingFragment && parts.length > 0) {
+                    parts.shift();
+                    discardLeadingFragment = false;
+                }
+                for (const line of parts) {
+                    if (!line.trim())
+                        continue;
+                    if (Buffer.byteLength(line, "utf8") > AGENT_EVENT_MAX_BYTES) {
+                        malformedEvents++;
+                        continue;
+                    }
+                    try {
+                        const done = grokCompletionEvent(meta, JSON.parse(line));
+                        if (done)
+                            return observation("done", done);
+                    }
+                    catch {
+                        malformedEvents++;
+                    }
+                }
+            }
+        }
+        {
+            const limited = detectRateLimit(meta.kind, meta.aiterm_session);
+            if (limited)
+                return observation("rate_limited", null, limited);
+        }
+        if (performance.now() >= deadline)
+            return observation(timeout === 0 ? "running" : "timeout");
+        await sleep(AGENT_DONE_POLL_MS);
+    }
+}
+export function buildGrokAgentCmd(kind, bin, model, effort, prompt, meta) {
+    const parts = [shq(bin)];
+    // grok / composer は同じ grok CLI をモデル違いで起動する。
+    parts.push("--no-auto-update");
+    if (meta?.kind === "grok" || meta?.kind === "composer")
+        parts.push("--no-alt-screen");
+    parts.push("--model", shq(model ?? GROK_MODEL_DEFAULTS[kind]));
+    if (effort)
+        parts.push("--reasoning-effort", shq(effort));
+    if ((meta?.kind === "grok" || meta?.kind === "composer") && meta.write_scope === "read-only") {
+        // read-only は sandbox が実効書込み禁止を作るため、MCP ツール許可ダイアログの自動承認を
+        // 付けても能力は増えない。無人 subagent が初回 MCP 使用の許可待ちで停止する実障害への対処。
+        // read-only 以外の launch には付けない＝権限拡大しない。
+        parts.push("--sandbox", "read-only", "--always-approve");
+    }
+    if ((meta?.kind === "grok" || meta?.kind === "composer") && meta.hook_route === "shared_grok_home") {
+        parts.push("--session-id", shq(meta.vendor_session_id ?? ""), "--rules", shq(subagentInstruction(meta)));
+    }
+    if ((meta?.kind === "grok" || meta?.kind === "composer") && prompt)
+        parts.push("--verbatim");
+    if (prompt)
+        parts.push(shq(prompt)); // 初手プロンプト（任意）
+    return parts.join(" ");
+}
+export function grokLaunchNote(kind, model, effort, meta) {
+    const writeScopeNote = writeScopeLaunchNote(kind, meta?.write_scope);
+    return (`起動設定: model=${model ?? GROK_MODEL_DEFAULTS[kind]}（${model ? "引数" : "ツール既定"}）。` +
+        `effort=${effort ?? "CLI／model既定"}。` + writeScopeNote);
+}
+// grok/composer: 検証済み auth 正本をそのままの path 形で渡す。Windows では native 強制により
+// vendor は Windows process なので、Windows ドライブパスが正しい形（WSL 形への変換はしない）。
+export function grokEnvTokens(meta) {
+    return [
+        ...(meta.grok_auth_path ? [`GROK_AUTH_PATH=${shq(meta.grok_auth_path)}`] : []),
+        "GROK_DISABLE_AUTOUPDATER=1",
+    ];
+}
+export function grokTuiReady(screen) {
+    // Grok Build 0.2.117 は起動完了後に製品名を消し、model footerだけを残す。
+    // Composerも同じfrontendでmodel名だけが異なるため、両方をvendor UIの根拠にする。
+    // Windows native grok.exe（1.0.4 実測）は入力欄markerを `❯` でなく `>` で描画するため両方を受ける。
+    const grokFrontend = screen.includes("Grok Build") || /\b(?:Grok|Composer)\s+[\w.()-]+/.test(screen);
+    return grokFrontend && /(^|\n|\s)[❯>]/.test(screen);
+}
+// submit座礁観測のcomposer領域マーカー（Windows native描画の `>` も ready 判定と同様に受ける）。
+export const GROK_COMPOSER_MARKER_RE = /(^|\s)[❯>]/;
+export function grokFooterHasConfiguration(screen, model, effort) {
+    const modelMatch = model?.match(/^grok-(\d+(?:\.\d+)*)$/) ?? null;
+    if (model && !modelMatch)
+        return false;
+    const modelLabel = modelMatch ? `Grok ${modelMatch[1]}` : null;
+    return screen.split("\n").some((line) => {
+        if (!line.includes("·"))
+            return false;
+        if (modelLabel && !line.includes(`${modelLabel} (`))
+            return false;
+        if (effort && !line.includes(`(${effort})`))
+            return false;
+        return modelLabel !== null || effort !== null;
+    });
+}
+// 最後のuser発話以降のassistantメッセージをchat_history.jsonlから抽出する。
+export function grokTranscriptText(meta, readTranscriptLines, transcriptUnavailable) {
+    if (!meta.grok_home || !meta.vendor_session_id)
+        transcriptUnavailable();
+    // cwd 未指定で起動した TUI はサーバープロセスの cwd を継承する。metadata に null が残る既存
+    // launch との互換のため、その実際の起動 cwd を path 導出に使う（launch 側は変更しない）。
+    const cwd = meta.cwd ?? process.cwd();
+    const transcript = path.join(meta.grok_home, "sessions", encodeURIComponent(cwd), meta.vendor_session_id, "chat_history.jsonl");
+    const lines = readTranscriptLines(transcript);
+    let lastUser = -1;
+    const records = [];
+    for (const line of lines) {
+        if (!line.trim())
+            continue;
+        try {
+            const record = JSON.parse(line);
+            records.push(record);
+            if (record?.type === "user" && !("synthetic_reason" in record))
+                lastUser = records.length - 1;
+        }
+        catch {
+            // 外部 transcript の壊れた1行は残りの完結行を読む妨げにしない。
+        }
+    }
+    return records
+        .slice(lastUser + 1)
+        .filter((record) => record?.type === "assistant" && typeof record?.content === "string")
+        .map((record) => record.content)
+        .join("\n");
+}
+export function createGrokAgentMetadata(kind, name, cwd, initialPrompt, authPath, writeScope, lineageContext) {
+    const launchId = randomBytes(16).toString("hex");
+    const eventFile = agentEventPath(name, launchId);
+    createEmpty0600(eventFile);
+    const grokHome = realGrokHome();
+    const meta = {
+        kind,
+        aiterm_session: name,
+        launch_id: launchId,
+        event_file: eventFile,
+        created_at: new Date().toISOString(),
+        cwd,
+        ...(writeScope === undefined ? {} : { write_scope: writeScope }),
+        vendor_session_id: randomUUID(),
+        initial_prompt: initialPrompt,
+        hook_route: "shared_grok_home",
+        completion_route: "grok_transcript",
+        ...(lineageContext ? agentLineageFields(lineageContext) : {}),
+        node_platform: process.platform,
+        grok_home: grokHome,
+        grok_auth_path: authPath,
+    };
+    writeAgentMetadata(meta);
+    return meta;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.27.7",
+  "version": "0.27.8",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent tmux terminal MCP for launching and driving Claude, Codex, Grok, or Composer from any MCP client, cross-vendor or same-vendor. Also runs durable PTY sessions for SSH, containers, and REPLs.",
   "keywords": [
@@ -45,6 +45,7 @@
   },
   "files": [
     "dist/*.js",
+    "dist/vendors/*.js",
     "README.md",
     "LICENSE"
   ],