aiterm-mcp 0.28.3 → 0.29.0

package/README.ja.md

@@ -459,7 +459,7 @@ handoff contextを前置きできる。この任意経路は`throughline >= 0.9.
 - **Node.js >= 18**
 - **tmux または psmux**（実行時の前提）
   - **macOS / Linux / WSL2** は tmux を直接使う。macOS は同梱されないので `brew install tmux` で導入する。MCP クライアントがターミナルでなく **GUI から起動**された場合、Homebrew の bin（Apple Silicon: `/opt/homebrew/bin`、Intel: `/usr/local/bin`）が `PATH` に入らないことがある。その場合 aiterm が自動で探索するか、**`AITERM_TMUX=/path/to/tmux`** で明示指定する。
-  - **Windows ネイティブ**は WSL を使わず、tmux CLI互換の [psmux](https://github.com/psmux/psmux) **3.3.8以上**を直接使う（`winget install marlocarlo.psmux`）。pane shell用に Git for Windows も必要。解決先は **`AITERM_PSMUX`**／**`AITERM_BASH`** で上書きできる。Windows toolはSSHと同じく入れ子で握れ、`pty_send "powershell.exe"`でPowerShellへ入れる。
+  - **Windows ネイティブ**は WSL を使わず、tmux CLI互換の [psmux](https://github.com/psmux/psmux) **3.3.8以上**をAitermのterminal/session multiplexer backendとして使う（`winget install marlocarlo.psmux`）。**psmuxはshellではない。** `pty_open`の既定shellはPowerShell 7（`pwsh.exe`）で、Windows PowerShell 5.1・PowerShell 6・`cmd.exe`へfallbackしない。5.1しかなければMicrosoft公式installer／package managerで7を導入してから使う。Git for Windowsはharness launcherが内部で明示するBash shell用に引き続き必要。解決先は **`AITERM_PSMUX`**／**`AITERM_BASH`** で上書きできる。他製品はpsmuxへ直接依存せず、永続端末をAiterm公開APIから利用する。
 - **agent harness**を使う場合: 対応CLIを製品所有者の公式経路で導入・認証する。CursorはmacOS／Linux／WSLで`curl https://cursor.com/install -fsS | bash`、Windows nativeで`irm 'https://cursor.com/install?win32=true' | iex`を使い、`agent login`で認証、`agent update`で更新する。Aitermは`cursor-agent`を起動する。portable forkだけは追加で`throughline >= 0.9.0`が必要。
 - 任意: [`rtk`](https://github.com/rtk-ai/rtk) バイナリ（`pty_send` の `rtk: true` 委譲で使う。無くても動く）
 

package/README.md

@@ -501,7 +501,7 @@ Sessions live on a shared tmux socket on POSIX or a shared psmux namespace on na
 - **Node.js >= 18**
 - **tmux or psmux** (platform runtime prerequisite)
   - **macOS / Linux / WSL2** run tmux directly. On macOS install it with `brew install tmux` (stock macOS ships none). If your MCP client is launched from the **GUI** rather than a terminal, Homebrew's bin (`/opt/homebrew/bin` on Apple Silicon, `/usr/local/bin` on Intel) may be off its `PATH`; aiterm auto-searches those locations, or set **`AITERM_TMUX=/path/to/tmux`** to point at it explicitly.
-  - **Native Windows** has no tmux, so aiterm drives [psmux](https://github.com/psmux/psmux) — a tmux-CLI-compatible native multiplexer — with a per-install `-L` namespace. **No WSL is required.** Install psmux **3.3.8 or newer** (`winget install marlocarlo.psmux`; 3.3.8 is the first release whose `pipe-pane` file sink, byte-exact `paste-buffer` wire, and foreground `#{pane_current_command}` behave the way aiterm's capture/dispatch paths rely on), plus [Git for Windows](https://gitforwindows.org/) whose `bash.exe` becomes the pane shell (System32's `bash.exe` is the WSL launcher and is deliberately not used). Override resolution with **`AITERM_PSMUX`** / **`AITERM_BASH`** when the binaries live elsewhere. You reach Windows tools the same way you reach SSH: `pty_send "powershell.exe …"` nests into PowerShell. The `grok-cli` harness and its deprecated aliases launch the **Windows-native** Grok CLI (`%USERPROFILE%\.grok\bin\grok.exe`, or `GROK_BIN` pointing at a `.exe`) as a Windows process, and a WSL-side grok is rejected before a session is created so product auth and session records never split across an OS boundary.
+  - **Native Windows** has no tmux, so aiterm drives [psmux](https://github.com/psmux/psmux) — a tmux-CLI-compatible native terminal/session multiplexer — with a per-install `-L` namespace. **psmux is not a shell.** `pty_open` defaults to PowerShell 7 (`pwsh.exe`) and never falls back to Windows PowerShell 5.1, PowerShell 6, or `cmd.exe`; if only 5.1 is installed, use Microsoft's official installer or package manager first. Install psmux **3.3.8 or newer** (`winget install marlocarlo.psmux`; 3.3.8 is the first release whose `pipe-pane` file sink, byte-exact `paste-buffer` wire, and foreground `#{pane_current_command}` behave the way aiterm's capture/dispatch paths rely on). [Git for Windows](https://gitforwindows.org/) remains required for the explicit Bash shell used internally by harness launchers; System32's `bash.exe` is the WSL launcher and is deliberately not used. Override multiplexer/Bash resolution with **`AITERM_PSMUX`** / **`AITERM_BASH`**. Other products consume persistent terminals through Aiterm's public API instead of depending on psmux directly.
 - For **agent harnesses**: the selected CLI, installed and authenticated through its product owner's official path — `claude`, `codex`, `grok`, or Cursor's `cursor-agent`. Portable fork additionally needs `throughline >= 0.9.0`; ordinary clean launch does not. (Not needed if you only use the PTY tools.)
 - Optional: the [`rtk`](https://github.com/rtk-ai/rtk) binary (used by `pty_send`'s `rtk: true` delegation; works fine without it)
 

package/dist/agent-resolver.js

@@ -5,6 +5,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import * as os from "node:os";
 import { AitermError } from "./errors.js";
+import { resolveWindowsPowerShell7 } from "./windows-powershell.js";
 import { isWin } from "./tmux-runtime.js";
 export function isUsableExecutableFile(candidate) {
     try {
@@ -84,7 +85,12 @@ export function spawnAgentControlCommand(bin, args, _cwd, options) {
     return spawnSync(bin, args, options);
 }
 export function resolveWinPaneShell(shell) {
-    if (!isWin || shell !== "bash")
+    if (!isWin)
+        return shell;
+    if (["powershell", "powershell.exe", "pwsh", "pwsh.exe"].includes(path.basename(shell).toLowerCase())) {
+        return resolveWindowsPowerShell7();
+    }
+    if (shell !== "bash")
         return shell;
     const fromEnv = process.env.AITERM_BASH;
     if (fromEnv) {
@@ -166,7 +172,7 @@ export function runThroughlineHandoffContext(bin, sessionId) {
     if (isWin && /\.(?:cmd|bat)$/i.test(bin)) {
         const ps1 = path.join(path.dirname(bin), `${path.basename(bin, path.extname(bin))}.ps1`);
         if (fs.existsSync(ps1)) {
-            return spawnSync("powershell.exe", [
+            return spawnSync(resolveWindowsPowerShell7(), [
                 "-NoLogo",
                 "-NoProfile",
                 "-NonInteractive",

package/dist/core.js

@@ -16,7 +16,7 @@ import { AitermError, telemetryOwnedFailure, ownTelemetryFailure } from "./error
 import { isWin, SOCKDIR, tmuxCommand, loadPtyBufferChunk, pasteBufferBaseArgs, TMUX_EMPTY_CONFIG, attachCommand, normalizePaneCommand, appendMarkSentinel, settlePaneLog, paneCwdArgument, } from "./tmux-runtime.js";
 import { sleep, currentUid, runtimeStateBase, safeStatSize, readFileRange, writeJson0600, createEmpty0600, shq, LAUNCH_ID_RE, AGENT_DONE_POLL_MS, AGENT_EVENT_MAX_BYTES, assertSessionName, agentsDir, agentEventPath, agentMetadataPath, writeAgentMetadata, AGENT_EVENT_TAIL_BYTES, agentLabel, agentHarness, subagentInstruction, agentLineageFields, } from "./agent-shared.js";
 import { GROK_MODEL_DEFAULTS, realGrokHome, resolveAndValidateGrokAuth, assertGrokModelAvailable, grokEventsTranscript, latestGrokCompletion, grokInitializationComplete, observeGrokDone, buildGrokAgentCmd, grokLaunchNote, grokEnvTokens, grokTuiReady, GROK_COMPOSER_MARKER_RE, grokFooterHasConfiguration, grokTranscriptText, createGrokAgentMetadata, } from "./harnesses/grok.js";
-import { bindCodexTranscriptSession, latestCodexCompletion, observeCodexDone, buildCodexAgentCmd, codexLaunchNote, codexTuiReady, CODEX_COMPOSER_MARKER_RE, codexModelChoice, codexEffortChoice, codexMoreReasoningChoice, codexTranscriptText, createCodexAgentMetadata, } from "./harnesses/codex.js";
+import { bindCodexTranscriptSession, latestCodexCompletion, observeCodexDone, buildCodexAgentCmd, codexLaunchNote, codexTuiReady, codexLaunchBlockingDialog, CODEX_COMPOSER_MARKER_RE, codexModelChoice, codexEffortChoice, codexMoreReasoningChoice, codexTranscriptText, createCodexAgentMetadata, } from "./harnesses/codex.js";
 import { OPERATION_ID_RE, CLAUDE_RESULT_MAX_BYTES, CLAUDE_EFFORTS, agentManagedClaudeSettingsPath, agentClaudeResultPath, agentClaudeOperationPath, agentClaudeApprovalReceiptPath, agentClaudeDispatchReceiptPath, validateOperationId, readClaudeResultText, assertClaudeAuthenticationReady, buildClaudeAgentCmd, claudeLaunchNote, claudeTuiReady, CLAUDE_COMPOSER_MARKER_RE, createClaudeAgentMetadata, } from "./harnesses/claude.js";
 import { bindCursorTranscriptSession, cursorTurnBoundary, latestCursorCompletion, observeCursorDone, cursorTranscriptText, assertCursorAuthenticationReady, assertCursorModelAvailable, buildCursorAgentCmd, createCursorAgentMetadata, cursorLaunchNote, cursorEffortNavigation, cursorTuiReady, CURSOR_COMPOSER_MARKER_RE, validateCursorModelEffort, } from "./harnesses/cursor.js";
 import { resolveAgentBin, resolveThroughlineBin, runThroughlineHandoffContext, isWindowsNativeExecutable, agentBinForPaneShell, resolveWinPaneShell } from "./agent-resolver.js";
@@ -2508,12 +2508,14 @@ export async function sendInitialAgentPrompt(name, text, o = {}) {
     setInitialPromptState(meta, "not_sent");
     const ready = await waitAgentTuiReady(name, meta, o.ready_timeout ?? AGENT_TUI_READY_TIMEOUT_MS);
     if (!ready.ready) {
-        return {
-            text: `initial_prompt=not_sent vendor=${meta.kind} ready=false samples=${ready.samples} harness=${agentHarness(meta.kind)}\n` +
-                `agent session '${name}' の ${agentLabel(meta.kind)} TUI が入力受付状態になりません。prompt は送信していません。`,
-            event_cursor: null,
-            submit_residue: null,
-        };
+        // ready失敗は成功形で返さず明示エラーにする（実被弾 2026-08-25: Codexのupdate確認ダイアログで
+        // 未送信のまま成功形receiptが返り、呼び出し側が40分気づけなかった）。sessionは調査/復旧用に残る。
+        const dialog = meta.kind === "codex" ? codexLaunchBlockingDialog(ready.lastScreen) : null;
+        const causeNote = dialog
+            ? `${dialog}が入力を塞いでいます。pty_read(screen:true)で画面を確認し、pty_keyでダイアログに応答してから、pty_sendでpromptを送ってください。`
+            : `pty_read(screen:true)で画面を確認し、入力受付になってからpty_sendでpromptを送ってください。`;
+        throw new AitermError(`initial_prompt=not_sent vendor=${meta.kind} ready=false samples=${ready.samples} harness=${agentHarness(meta.kind)}\n` +
+            `agent session '${name}' の ${agentLabel(meta.kind)} TUI が入力受付状態にならず、prompt は送信していません。${causeNote}`, 2);
     }
     const startOffset = agentCompletionCursor(meta);
     try {

package/dist/harnesses/codex.js

@@ -381,6 +381,20 @@ export function codexTuiReady(screen) {
 }
 // submit座礁観測のcomposer領域マーカー（ready判定と同じ記号を行頭基準で探す）。
 export const CODEX_COMPOSER_MARKER_RE = /^\s*[›>]/;
+// Codexの起動前modalダイアログ検知。表示中はheader/footerが描かれず codexTuiReady が
+// 恒久falseになるため、ready gate失敗の原因究明用に画面から種別を特定する
+// （実被弾 2026-08-25: update確認で初手prompt未送信のまま30秒timeout→40分停滞）。
+// 文字列は実機captureの逐語。既知2種に一致しない「Press enter to continue」も
+// 同型のmodalとして拾う（種別不明のまま握りつぶさない）。
+export function codexLaunchBlockingDialog(screen) {
+    if (screen.includes("Update available!"))
+        return "update確認ダイアログ";
+    if (screen.includes("Do you trust the contents of this directory"))
+        return "directory trust確認ダイアログ";
+    if (screen.includes("Press enter to continue"))
+        return "起動時ダイアログ（種別未特定）";
+    return null;
+}
 export function codexModelChoice(screen, model) {
     for (const line of screen.slice(screen.lastIndexOf("Select Model and Effort")).split("\n")) {
         const match = line.match(/^\s*(?:›\s*)?(\d+)\.\s+(\S+)/);

package/dist/index.js

@@ -84,13 +84,14 @@ server.registerTool("diagnostics", {
     description: "Factory 向け read-only 診断。安全な状態語彙だけを機械可読 JSON で返す（PTY 内容・認証情報・path・環境値は返さない）。",
     inputSchema: {},
 }, async () => ok(await factoryDiagnostics()));
+const DEFAULT_PTY_SHELL = process.platform === "win32" ? "pwsh" : "bash";
 server.registerTool("pty_open", {
     description: "ローカル永続端末(tmux セッション)を1個開き、session_id を返す。tmux サーバ常駐ゆえ本サーバや " +
         "クライアントが再起動してもセッションは生存する。リモート操作は専用ツールにせず、開いた端末の中で " +
         'pty_send(session_id, "ssh host") と打って入る。',
     inputSchema: {
         name: z.string().nullish().describe("セッション名（省略時は t1, t2... を自動採番）"),
-        shell: z.string().default("bash").describe("起動シェル（既定 bash）"),
+        shell: z.string().default(DEFAULT_PTY_SHELL).describe(`起動シェル（既定 ${DEFAULT_PTY_SHELL}）`),
     },
 }, async ({ name, shell }) => {
     try {

package/dist/runtime-error-os.js

@@ -5,6 +5,7 @@ import { spawn, spawnSync } from "node:child_process";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+import { resolveWindowsPowerShell7, windowsPowerShell7Command } from "./windows-powershell.js";
 export function defaultRuntimeErrorPaths(options = {}) {
     const platform = options.platform ?? process.platform;
     const home = options.home ?? os.homedir();
@@ -26,7 +27,9 @@ const WINDOWS_DACL_VERIFY_SCRIPT = String.raw `
 $ErrorActionPreference='Stop'
 $target=$env:AITERMMCP_ACL_PATH; $kind=$env:AITERMMCP_ACL_KIND
 $sid=[Security.Principal.WindowsIdentity]::GetCurrent().User
-$check=if($kind -eq 'directory'){[IO.Directory]::GetAccessControl($target)}else{[IO.File]::GetAccessControl($target)}
+$item=Get-Item -LiteralPath $target
+$sections=[Security.AccessControl.AccessControlSections]::Access -bor [Security.AccessControl.AccessControlSections]::Owner
+$check=[IO.FileSystemAclExtensions]::GetAccessControl($item,$sections)
 $ownerSid=$check.GetOwner([Security.Principal.SecurityIdentifier]).Value
 $rules=@($check.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier]))
 if($ownerSid -ne $sid.Value -or $rules.Count -ne 1 -or $rules[0].IdentityReference.Value -ne $sid.Value -or $rules[0].AccessControlType -ne 'Allow' -or $rules[0].IsInherited -or (($rules[0].FileSystemRights -band [Security.AccessControl.FileSystemRights]::FullControl) -ne [Security.AccessControl.FileSystemRights]::FullControl)){exit 9}
@@ -38,18 +41,18 @@ $sid=[Security.Principal.WindowsIdentity]::GetCurrent().User
 if($kind -eq 'directory'){$acl=New-Object Security.AccessControl.DirectorySecurity;$inherit=[Security.AccessControl.InheritanceFlags]'ContainerInherit,ObjectInherit'}else{$acl=New-Object Security.AccessControl.FileSecurity;$inherit=[Security.AccessControl.InheritanceFlags]::None}
 $acl.SetOwner($sid); $acl.SetAccessRuleProtection($true,$false)
 $rule=New-Object Security.AccessControl.FileSystemAccessRule($sid,[Security.AccessControl.FileSystemRights]::FullControl,$inherit,[Security.AccessControl.PropagationFlags]::None,[Security.AccessControl.AccessControlType]::Allow)
-$acl.AddAccessRule($rule); if($kind -eq 'directory'){[IO.Directory]::SetAccessControl($target,$acl)}else{[IO.File]::SetAccessControl($target,$acl)}
+$acl.AddAccessRule($rule); $item=Get-Item -LiteralPath $target; [IO.FileSystemAclExtensions]::SetAccessControl($item,$acl)
 ` + WINDOWS_DACL_VERIFY_SCRIPT;
 export function windowsPrivateDaclCommand(target, kind = "directory") {
     return {
-        command: "powershell.exe",
+        command: windowsPowerShell7Command(),
         args: ["-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", WINDOWS_DACL_SCRIPT],
         env: { ...process.env, AITERMMCP_ACL_PATH: target, AITERMMCP_ACL_KIND: kind },
     };
 }
 export function windowsPrivateDaclVerifyCommand(target, kind = "file") {
     return {
-        command: "powershell.exe",
+        command: windowsPowerShell7Command(),
         args: ["-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", WINDOWS_DACL_VERIFY_SCRIPT],
         env: { ...process.env, AITERMMCP_ACL_PATH: target, AITERMMCP_ACL_KIND: kind },
     };
@@ -128,7 +131,7 @@ export function processStartIdentity(pid, platform, timeoutMs = 1000) {
     }
     if (platform === "win32") {
         const script = "$p=Get-Process -Id $env:AITERMMCP_PROCESS_ID -ErrorAction Stop; $p.StartTime.ToUniversalTime().Ticks";
-        const result = spawnSync("powershell.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", script], {
+        const result = spawnSync(resolveWindowsPowerShell7(), ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", script], {
             encoding: "utf8", timeout: timeoutMs, maxBuffer: 4096, windowsHide: true,
             env: { ...process.env, AITERMMCP_PROCESS_ID: String(pid) },
         });

package/dist/windows-powershell.js

@@ -0,0 +1,42 @@
+// Windows PowerShell実体の唯一の解決境界。5.1／cmd fallbackを持たず、検出したpwsh自身の
+// edition／majorを実行時に検証してから絶対pathを返す。
+import { spawnSync } from "node:child_process";
+import * as path from "node:path";
+import { AitermError } from "./errors.js";
+export const WINDOWS_POWERSHELL_7_COMMAND = "pwsh.exe";
+export const WINDOWS_POWERSHELL_7_INSTALL = "winget install --id Microsoft.PowerShell --source winget";
+export const WINDOWS_POWERSHELL_7_FIXTURE = "C:\\Program Files\\PowerShell\\7\\pwsh.exe";
+const defaultProbe = (command, args) => spawnSync(command, [...args], {
+    encoding: "utf8", timeout: 5000, maxBuffer: 16 * 1024, windowsHide: true,
+});
+let resolvedDefault = null;
+export function resolveWindowsPowerShell7(probe = defaultProbe) {
+    if (probe === defaultProbe && resolvedDefault !== null)
+        return resolvedDefault;
+    const located = probe("where.exe", [WINDOWS_POWERSHELL_7_COMMAND]);
+    const resolved = located.stdout?.split(/\r?\n/u)
+        .find(candidate => path.win32.isAbsolute(candidate)
+        && path.win32.basename(candidate).toLowerCase() === WINDOWS_POWERSHELL_7_COMMAND);
+    const fail = () => {
+        throw new AitermError(`PowerShell 7が必要です。Microsoft公式経路で導入してください: ${WINDOWS_POWERSHELL_7_INSTALL}`, 2);
+    };
+    if (located.status !== 0 || typeof resolved !== "string")
+        fail();
+    const executable = resolved;
+    const version = probe(executable, ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command",
+        '[ordered]@{ edition = $PSVersionTable.PSEdition; major = $PSVersionTable.PSVersion.Major } | ConvertTo-Json -Compress']);
+    let identity = null;
+    try {
+        identity = JSON.parse(version.stdout?.trim() ?? "");
+    }
+    catch { /* typed failure below */ }
+    if (version.status !== 0 || identity?.edition !== "Core"
+        || !Number.isInteger(identity.major) || Number(identity.major) < 7)
+        fail();
+    if (probe === defaultProbe)
+        resolvedDefault = executable;
+    return executable;
+}
+export function windowsPowerShell7Command(platform = process.platform) {
+    return platform === "win32" ? resolveWindowsPowerShell7() : WINDOWS_POWERSHELL_7_FIXTURE;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.28.3",
+  "version": "0.29.0",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent terminal MCP with one harness-based launcher for Claude Code, Codex CLI, Grok CLI, and Cursor Agent CLI, plus durable PTYs for SSH, containers, and REPLs.",
   "keywords": [