aiterm-mcp 0.29.22 → 0.29.24

package/CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.29.24] - 2026-09-02
+
+### Fixed
+
+- 無人Claude起動時のworkspace trust確認を起動処理内で完了し、初回promptを入力欄へ届ける。
+- Cursorの長文pasteで末尾が画面外にある場合も、本文入りcomposerを未submitとして検出し、偽の成功receiptを返さない。
+
+## [0.29.23] - 2026-09-02
+
+### Changed
+
+- Disable Codex startup update checks for centrally managed agents and launch managed Claude agents without interactive permission or workspace-trust prompts.
+
 ## [0.29.22] - 2026-09-02
 
 ### Fixed
@@ -1481,7 +1494,9 @@ prototype (preserved under `prototype/python/` as the porting source and referen
   `ubuntu-latest` for Node 18/20/22, publishing to npm on `v*` tags with
   provenance.
 
-[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.29.22...HEAD
+[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.29.24...HEAD
+[0.29.24]: https://github.com/kitepon/aiterm-mcp/compare/v0.29.23...v0.29.24
+[0.29.23]: https://github.com/kitepon/aiterm-mcp/compare/v0.29.22...v0.29.23
 [0.29.22]: https://github.com/kitepon/aiterm-mcp/compare/v0.29.21...v0.29.22
 [0.29.21]: https://github.com/kitepon/aiterm-mcp/compare/v0.29.20...v0.29.21
 [0.29.20]: https://github.com/kitepon/aiterm-mcp/compare/v0.29.19...v0.29.20

package/README.ja.md

@@ -153,7 +153,7 @@ runtime-error store は canonical dotagents config の `collection.enabled: true
 場合だけ収集し、既定OFF、network送信は行いません。tag起点CIのnpm provenance（OIDC Trusted
 Publishing）で公開し、GitHub Release が Official MCP Registry を再登録します。
 
-**状態:** 開発継続中 · 現行公開版 **v0.29.22** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
+**状態:** 開発継続中 · 現行公開版 **v0.29.24** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
 
 ### 更新と巻き戻し
 

package/README.md

@@ -169,7 +169,7 @@ collection is off by default and performs no network I/O. It ships via
 tag-triggered CI with npm provenance (OIDC Trusted Publishing); the GitHub
 Release re-registers the Official MCP Registry entry.
 
-**Status:** actively maintained · current public release **v0.29.22** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
+**Status:** actively maintained · current public release **v0.29.24** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
 
 ### Update and rollback
 

package/dist/core.js

@@ -2358,6 +2358,11 @@ function isAgentTuiActionRequired(kind, screen) {
     }
     return false;
 }
+function isClaudeWorkspaceTrustScreen(screen) {
+    return screen.includes("Is this a project you created or one you trust")
+        && screen.includes("No, exit")
+        && screen.includes("Yes, I trust this folder");
+}
 async function waitAgentTuiReadyImpl(kind, sample, sleepFn, opts = {}) {
     const timeoutMs = opts.timeoutMs ?? AGENT_TUI_READY_TIMEOUT_MS;
     const pollMs = opts.pollMs ?? AGENT_TUI_READY_POLL_MS;
@@ -2427,6 +2432,17 @@ function agentSubmitResidueOnScreen(kind, screen, tail) {
     }
     if (markerIdx < 0)
         return null;
+    if (kind === "cursor") {
+        // Cursorは長いpasteを入力欄の先頭側だけ表示することがあり、送信文の末尾一致では
+        // 座礁を検出できない。最新composerのmarkerと同じ行にplaceholder以外の本文が
+        // 残っていれば、その本文自体を未submitの陽性証拠とする。
+        const sameRowText = lines[markerIdx]
+            .replace(/^\s*(?:->|>|→)\s*/u, "")
+            .trim();
+        if (sameRowText.length > 0
+            && !/^(?:Add a follow-up|Plan,\s*search,\s*build anything)\b/iu.test(sameRowText))
+            return true;
+    }
     return normalizeResidueText(lines.slice(markerIdx).join("")).includes(tail);
 }
 async function detectAgentSubmitResidueImpl(kind, text, sample, sleepFn, opts = {}) {
@@ -2562,7 +2578,16 @@ export async function sendInitialAgentPrompt(name, text, o = {}) {
         throw new AitermError(`agent session '${name}' は起動時 prompt の完了待ちです。初回応答完了後に再度操作してください。`, 2);
     }
     setInitialPromptState(meta, "not_sent");
-    const ready = await waitAgentTuiReady(name, meta, o.ready_timeout ?? AGENT_TUI_READY_TIMEOUT_MS);
+    let ready = await waitAgentTuiReady(name, meta, o.ready_timeout ?? AGENT_TUI_READY_TIMEOUT_MS);
+    if (!ready.ready && meta.kind === "claude" && isClaudeWorkspaceTrustScreen(ready.lastScreen)) {
+        // BellTeam等からの無人起動では、Claudeのworkspace trustだけを起動処理の一部として
+        // 明示的に承認する。通常turn中の権限確認やMCP承認には触れない。
+        sendKey(name, "Down", { preserveAgentOperation: true });
+        await sleep(AGENT_SUBMIT_DELAY_MS);
+        sendKey(name, "Enter", { preserveAgentOperation: true });
+        await sleep(AGENT_SUBMIT_DELAY_MS);
+        ready = await waitAgentTuiReady(name, meta, o.ready_timeout ?? AGENT_TUI_READY_TIMEOUT_MS);
+    }
     if (!ready.ready) {
         // ready失敗は成功形で返さず明示エラーにする（実被弾 2026-08-25: Codexのupdate確認ダイアログで
         // 未送信のまま成功形receiptが返り、呼び出し側が40分気づけなかった）。sessionは調査/復旧用に残る。

package/dist/harnesses/claude.js

@@ -162,7 +162,7 @@ export function assertClaudeAuthenticationReady(bin) {
 export function buildClaudeAgentCmd(bin, model, effort, prompt, meta) {
     const parts = [shq(bin)];
     if (meta?.kind === "claude") {
-        parts.push("--setting-sources", shq("user,project,local"), "--settings", shq(meta.claude_settings ?? ""), "--session-id", shq(meta.vendor_session_id ?? ""), "--append-system-prompt", shq(subagentInstruction(meta)));
+        parts.push("--dangerously-skip-permissions", "--setting-sources", shq("user,project,local"), "--settings", shq(meta.claude_settings ?? ""), "--session-id", shq(meta.vendor_session_id ?? ""), "--append-system-prompt", shq(subagentInstruction(meta)));
     }
     if (model)
         parts.push("--model", shq(model));

package/dist/harnesses/codex.js

@@ -336,6 +336,8 @@ export function buildCodexAgentCmd(bin, model, effort, prompt, meta) {
     // launcher自身が実効能力壁を作る。パス説明はCodex CLIに同等のallowlist引数がないため宣言のまま残す。
     if (meta?.kind === "codex" && meta.write_scope === "read-only")
         parts.push("--sandbox", "read-only");
+    if (meta?.kind === "codex")
+        parts.push("-c", "check_for_update_on_startup=false");
     // model/effort は共有configを書き換えず、CLI引数で明示して起動単位に優先する。
     if (model)
         parts.push("-m", shq(model));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.29.22",
+  "version": "0.29.24",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent terminal MCP with one harness-based launcher for Claude Code, Codex CLI, Grok CLI, and Cursor Agent CLI, plus durable PTYs for SSH, containers, and REPLs.",
   "keywords": [