aiterm-mcp 0.29.3 → 0.29.6

package/dist/core.js

@@ -13,7 +13,7 @@ import * as path from "node:path";
 import { createHash, randomBytes } from "node:crypto";
 import * as rtk from "./rtk.js";
 import { AitermError, telemetryOwnedFailure, ownTelemetryFailure } from "./errors.js";
-import { isWin, SOCKDIR, tmuxCommand, loadPtyBufferChunk, pasteBufferBaseArgs, TMUX_EMPTY_CONFIG, attachCommand, normalizePaneCommand, appendMarkSentinel, settlePaneLog, paneCwdArgument, } from "./tmux-runtime.js";
+import { isWin, SOCKDIR, tmuxCommand, sendPsmuxPayload, loadPtyBufferChunk, pasteBufferBaseArgs, TMUX_EMPTY_CONFIG, attachCommand, normalizePaneCommand, appendMarkSentinel, settlePaneLog, paneCwdArgument, } from "./tmux-runtime.js";
 import { sleep, currentUid, runtimeStateBase, safeStatSize, readFileRange, writeJson0600, createEmpty0600, shq, LAUNCH_ID_RE, AGENT_DONE_POLL_MS, AGENT_EVENT_MAX_BYTES, assertSessionName, agentsDir, agentEventPath, agentMetadataPath, writeAgentMetadata, AGENT_EVENT_TAIL_BYTES, agentLabel, agentHarness, subagentInstruction, agentLineageFields, } from "./agent-shared.js";
 import { GROK_MODEL_DEFAULTS, realGrokHome, resolveAndValidateGrokAuth, assertGrokModelAvailable, grokEventsTranscript, latestGrokCompletion, observeGrokDone, buildGrokAgentCmd, grokLaunchNote, grokEnvTokens, grokTuiReady, GROK_COMPOSER_MARKER_RE, grokFooterHasConfiguration, grokTranscriptText, createGrokAgentMetadata, } from "./harnesses/grok.js";
 import { bindCodexTranscriptSession, latestCodexCompletion, observeCodexDone, buildCodexAgentCmd, codexLaunchNote, codexTuiReady, codexLaunchBlockingDialog, CODEX_COMPOSER_MARKER_RE, codexModelChoice, codexEffortChoice, codexMoreReasoningChoice, codexTranscriptText, createCodexAgentMetadata, } from "./harnesses/codex.js";
@@ -75,7 +75,7 @@ const MAX_SEND_BYTES = 64 * 1024;
 const PTY_PASTE_CHUNK_BYTES = 256;
 const PTY_PASTE_CHUNK_PAUSE_MS = 10;
 const PTY_PASTE_PAUSE_BUFFER = new Int32Array(new SharedArrayBuffer(4));
-const SESSION_SEND_LOCK_WAIT_MS = 10_000;
+const SESSION_SEND_LOCK_WAIT_MS = isWin ? 130_000 : 10_000;
 const SESSION_SEND_LOCK_POLL_MS = 25;
 // 安全: send 前に弾く破壊的コマンド（外部システム境界の防御）
 const DESTRUCTIVE = [
@@ -121,6 +121,15 @@ function paneCurrentCommand(name) {
         return "";
     return normalizePaneCommand(r.stdout.trim());
 }
+function paneCurrentCommandForMark(name) {
+    const foreground = paneCurrentCommand(name);
+    if (!isWin || foreground === "powershell" || foreground === "pwsh")
+        return foreground;
+    // psmuxはnew-session直後だけpane_current_commandへ起動元shellを返すことがある。
+    // 現在の末尾画面にPowerShell promptが描画済みなら、mark構文はその実効shellへ合わせる。
+    const screen = captureScreen(name, 4).replace(/\x1b\[[0-9;?]*[a-zA-Z]/g, "");
+    return /(?:^|\n)PS [^\r\n]*>\s*$/m.test(screen) ? "pwsh" : foreground;
+}
 function pasteBufferSupportsNoSanitizeFlag() {
     const listed = tmux("list-commands");
     if (listed.code !== 0) {
@@ -658,7 +667,7 @@ export function send(name, text, o = {}) {
     if (o.mark) {
         // mark の sentinel は POSIX シェル構文。前面が fish/csh/tcsh 等の非 POSIX 対話シェルだと "$?" が
         // 壊れて sentinel が成立しない。黙って壊れた完了検出を作らず、明示エラーで until を促す（B8）。
-        fg = paneCurrentCommand(name);
+        fg = paneCurrentCommandForMark(name);
         if (NON_POSIX_MARK_SHELLS.has(fg)) {
             throw new AitermError(`mark は POSIX シェル(bash/sh/zsh/dash)前提です。前面が ${fg} のため sentinel の "$?" が` +
                 `正しく展開されません。until で完了パターンを指定してください。`, 2);
@@ -702,42 +711,44 @@ export function send(name, text, o = {}) {
                 /* noop */
             }
         }
-        // `send-keys -l`と単発`paste-buffer`は、長文をPTY入力queueへ一度に流すと、OSを問わず
-        // 途中以降が欠落しても tmux 自体は code=0 を返す。UTF-8を壊さない256byte以下に分け、
-        // 全chunk＋Enterをsession単位のcross-process lock内で直列化する。
-        const pasteSupportsNoSanitize = pasteBufferSupportsNoSanitizeFlag();
-        const chunks = splitPtyText(text);
-        const bufferBase = `aiterm-${process.pid}-${randomBytes(8).toString("hex")}`;
-        for (let i = 0; i < chunks.length; i += 1) {
-            const bufferName = `${bufferBase}-${i}`;
-            const partial = i > 0
-                ? " 先行chunkはPTYに入力済みでEnterは未送信です。再送前に入力を確認・消去してください。"
-                : "";
-            const loaded = loadPtyBufferChunk(true, bufferName, chunks[i]);
-            if (loaded.code !== 0) {
-                tmuxCleanup("delete-buffer", "-b", bufferName);
-                throw new AitermError(`tmux bufferへの送信準備に失敗しました` +
-                    `（chunk ${i + 1}/${chunks.length}）: ${loaded.stderr.trim() || `code=${loaded.code}`}.${partial}`, 2);
-            }
-            // -Sは対応新版だけでvis(3)制御文字変換を無効化する。
-            // send 自身の raw/sanitize 契約だけを真実とし、tmux 側で黙って再変換させない。
-            const pasteArgs = pasteBufferBaseArgs();
-            if (o.bracketedPaste)
-                pasteArgs.push("-p");
-            if (pasteSupportsNoSanitize)
-                pasteArgs.push("-S");
-            pasteArgs.push("-b", bufferName, "-t", name);
-            const pasted = tmux(...pasteArgs);
-            if (pasted.code !== 0) {
-                // paste 失敗時は -d で消えないbufferを明示的に掃除する。元エラーを優先する。
-                tmuxCleanup("delete-buffer", "-b", bufferName);
-                throw new AitermError(`tmux bufferのPTY送信に失敗しました` +
-                    `（chunk ${i + 1}/${chunks.length}）: ${pasted.stderr.trim() || `code=${pasted.code}`}.${partial}`, 2);
+        // POSIX tmuxはUTF-8安全な256byte pasteへ分割する。Windows psmuxは認証済み
+        // server commandでpayload全体を単一SendBytesへ変換し、別processとの交差を構造的に防ぐ。
+        if (isWin) {
+            const sent = sendPsmuxPayload(true, name, text, !!o.bracketedPaste);
+            if (sent.code !== 0) {
+                throw new AitermError(`psmuxのPTY送信に失敗しました: ${sent.stderr.trim() || `code=${sent.code}`}`, 2);
             }
-            if (i + 1 < chunks.length) {
-                // tmux clientの終了だけでは、serverが前chunkをPTYへdrainしたことを保証しない。
-                // 次chunkまで短く間を空け、外部PTY入力queueの飽和による黙った末尾欠落を防ぐ。
-                Atomics.wait(PTY_PASTE_PAUSE_BUFFER, 0, 0, PTY_PASTE_CHUNK_PAUSE_MS);
+        }
+        else {
+            const chunks = splitPtyText(text);
+            const pasteSupportsNoSanitize = pasteBufferSupportsNoSanitizeFlag();
+            const bufferBase = `aiterm-${process.pid}-${randomBytes(8).toString("hex")}`;
+            for (let i = 0; i < chunks.length; i += 1) {
+                const bufferName = `${bufferBase}-${i}`;
+                const partial = i > 0
+                    ? " 先行chunkはPTYに入力済みでEnterは未送信です。再送前に入力を確認・消去してください。"
+                    : "";
+                const loaded = loadPtyBufferChunk(true, bufferName, chunks[i]);
+                if (loaded.code !== 0) {
+                    tmuxCleanup("delete-buffer", "-b", bufferName);
+                    throw new AitermError(`tmux bufferへの送信準備に失敗しました` +
+                        `（chunk ${i + 1}/${chunks.length}）: ${loaded.stderr.trim() || `code=${loaded.code}`}.${partial}`, 2);
+                }
+                const pasteArgs = pasteBufferBaseArgs();
+                if (o.bracketedPaste)
+                    pasteArgs.push("-p");
+                if (pasteSupportsNoSanitize)
+                    pasteArgs.push("-S");
+                pasteArgs.push("-b", bufferName, "-t", name);
+                const pasted = tmux(...pasteArgs);
+                if (pasted.code !== 0) {
+                    tmuxCleanup("delete-buffer", "-b", bufferName);
+                    throw new AitermError(`tmux bufferのPTY送信に失敗しました` +
+                        `（chunk ${i + 1}/${chunks.length}）: ${pasted.stderr.trim() || `code=${pasted.code}`}.${partial}`, 2);
+                }
+                if (i + 1 < chunks.length) {
+                    Atomics.wait(PTY_PASTE_PAUSE_BUFFER, 0, 0, PTY_PASTE_CHUNK_PAUSE_MS);
+                }
             }
         }
         if (enter) {

package/dist/psmux-send-worker.js

@@ -0,0 +1,99 @@
+import * as fs from "node:fs";
+import * as net from "node:net";
+import * as os from "node:os";
+import * as path from "node:path";
+const MAX_PAYLOAD_BYTES = 64 * 1024 + 12;
+const PTY_CHUNK_BYTES = 256;
+const MAX_FINAL_DRAIN_MS = 3_000;
+const SESSION_BASE_RE = /^[A-Za-z0-9_-]{1,160}$/;
+const KEY_RE = /^[0-9a-f]{16}$/i;
+async function readPayload() {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of process.stdin) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+        total += bytes.length;
+        if (total > MAX_PAYLOAD_BYTES)
+            throw new Error(`payload exceeds ${MAX_PAYLOAD_BYTES} bytes`);
+        chunks.push(bytes);
+    }
+    return Buffer.concat(chunks);
+}
+function psmuxDataDir() {
+    const override = process.env.PSMUX_DATA_DIR;
+    if (override) {
+        if (!path.isAbsolute(override))
+            throw new Error("PSMUX_DATA_DIR must be absolute");
+        return override;
+    }
+    return path.join(process.env.USERPROFILE || os.homedir(), ".psmux");
+}
+async function sendCommand(port, key, command, expectedResponse) {
+    await new Promise((resolve, reject) => {
+        const socket = net.createConnection({ host: "127.0.0.1", port });
+        let response = "";
+        let settled = false;
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.destroy();
+            if (error)
+                reject(error);
+            else
+                resolve();
+        };
+        socket.setTimeout(2_000, () => finish(new Error("psmux command timed out")));
+        socket.on("connect", () => socket.end(`AUTH ${key}\n${command}\n`));
+        socket.on("data", (chunk) => {
+            response += chunk.toString("utf8");
+        });
+        socket.on("end", () => {
+            if (response.split(/\r?\n/).includes("OK") &&
+                (expectedResponse == null || response.includes(expectedResponse)))
+                finish();
+            else
+                finish(new Error(`psmux authentication failed: ${response.trim() || "empty response"}`));
+        });
+        socket.on("error", (error) => finish(error));
+    });
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function send() {
+    const sessionBase = process.argv[2] ?? "";
+    if (!SESSION_BASE_RE.test(sessionBase))
+        throw new Error("invalid psmux session base");
+    const payload = await readPayload();
+    const dir = psmuxDataDir();
+    const portText = fs.readFileSync(path.join(dir, `${sessionBase}.port`), "utf8").trim();
+    const key = fs.readFileSync(path.join(dir, `${sessionBase}.key`), "utf8").trim();
+    const port = Number(portText);
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new Error("invalid psmux port");
+    if (!KEY_RE.test(key))
+        throw new Error("invalid psmux auth key");
+    const subcommands = [];
+    for (let offset = 0; offset < payload.length; offset += PTY_CHUNK_BYTES) {
+        const chunk = payload.subarray(offset, offset + PTY_CHUNK_BYTES);
+        const hex = Array.from(chunk, (byte) => byte.toString(16).padStart(2, "0")).join(" ");
+        subcommands.push(`send -H ${hex}`);
+    }
+    const chunkDrainMs = payload.length > 1024 ? 300 : 100;
+    for (const command of subcommands) {
+        await sendCommand(port, key, command);
+        await delay(chunkDrainMs);
+    }
+    const completionMarker = `AITERM_PSMUX_SEND_DONE_${process.pid}`;
+    await sendCommand(port, key, `display-message -p ${completionMarker}`, completionMarker);
+    const finalDrainMs = Math.min(MAX_FINAL_DRAIN_MS, Math.max(200, Math.ceil(payload.length / 1024) * 500));
+    await delay(finalDrainMs);
+    if (process.env.AITERM_PSMUX_DEBUG === "1") {
+        process.stderr.write(`psmux-send-worker debug: chunks=${subcommands.length} sent=${subcommands.length}\n`);
+    }
+}
+send().catch((error) => {
+    process.stderr.write(`psmux-send-worker: ${error instanceof Error ? error.message : String(error)}\n`);
+    process.exitCode = 1;
+});

package/dist/runtime-error-store.js

@@ -11,7 +11,12 @@ const STORE_SCHEMA = "aiterm-mcp.runtime-errors.v1";
 const STATE_SCHEMA = "1.0";
 const MAX_CONFIG_BYTES = 16 * 1024;
 const MAX_STORE_BYTES = 1024 * 1024;
-const WORKER_TIMEOUT_MS = 2_000;
+const POSIX_WORKER_TIMEOUT_MS = 2_000;
+// Windows はprivate DACLの適用とreadbackをPowerShell 7境界で行う。診断は最大2回、
+// 記録はlock queueとstate更新で複数回この境界を通るため、process起動だけを想定した
+// POSIXの2秒上限では正常処理まで強制終了する。各境界自身の5秒上限は維持し、worker全体だけ分ける。
+const WINDOWS_DIAGNOSTIC_WORKER_TIMEOUT_MS = 12_000;
+const WINDOWS_RECORD_WORKER_TIMEOUT_MS = 30_000;
 export const RUNTIME_ERROR_DEFINITIONS = Object.freeze({
     "AITERM.PTY_DEPENDENCY_UNAVAILABLE": Object.freeze({
         component: "pty-dependency", message_template: "PTY dependency is unavailable", severity: "high",
@@ -635,6 +640,11 @@ export class RuntimeErrorStore {
 }
 const WORKER = fileURLToPath(new URL("./runtime-error-worker.js", import.meta.url));
 function fixedStoreFailure(stderr) { stderr("aiterm: runtime error store unavailable\n"); }
+function defaultWorkerTimeoutMs(action) {
+    if (process.platform !== "win32")
+        return POSIX_WORKER_TIMEOUT_MS;
+    return action === "record" ? WINDOWS_RECORD_WORKER_TIMEOUT_MS : WINDOWS_DIAGNOSTIC_WORKER_TIMEOUT_MS;
+}
 export function recordRuntimeError(code, options = {}) {
     validateRuntimeObservation({ code });
     const stderr = options.stderr ?? ((line) => process.stderr.write(line));
@@ -647,7 +657,7 @@ export function recordRuntimeError(code, options = {}) {
         const child = spawn(process.execPath, [options.workerPath ?? WORKER, "record", code], {
             stdio: "ignore", windowsHide: true, env: process.env,
         });
-        const timer = setTimeout(() => { report(); forceKill(child); }, options.timeoutMs ?? WORKER_TIMEOUT_MS);
+        const timer = setTimeout(() => { report(); forceKill(child); }, options.timeoutMs ?? defaultWorkerTimeoutMs("record"));
         timer.unref();
         child.once("error", report);
         child.once("exit", (exitCode, signal) => { clearTimeout(timer); if (exitCode !== 0 || signal)
@@ -686,7 +696,7 @@ export async function runtimeErrorStoreDiagnostic(options = {}) {
             finish(fallback);
             return;
         }
-        const timer = setTimeout(() => { forceKill(child); finish(fallback); }, options.timeoutMs ?? WORKER_TIMEOUT_MS);
+        const timer = setTimeout(() => { forceKill(child); finish(fallback); }, options.timeoutMs ?? defaultWorkerTimeoutMs("diagnostic"));
         child.stdout.setEncoding("utf8");
         child.stdout.on("data", (chunk) => { if (stdout.length <= 4096)
             stdout += chunk; });

package/dist/tmux-runtime.js

@@ -6,6 +6,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import * as os from "node:os";
 import { createHash } from "node:crypto";
+import { fileURLToPath } from "node:url";
 import { AitermError, ptyDependencyError } from "./errors.js";
 // Windows ネイティブには tmux が無いため、tmux CLI 互換の native psmux を叩く
 // （POSIX = Linux/WSL2/macOS は従来どおり tmux を直接叩く。WSL 橋は e3f5fc8 で全廃）。
@@ -129,6 +130,28 @@ export function tmuxCommandWithInput(observe, input, ...args) {
 export function tmuxCommand(observe, ...args) {
     return tmuxCommandWithInput(observe, undefined, ...args);
 }
+export function sendPsmuxPayload(observe, sessionName, text, bracketedPaste) {
+    if (!isWin)
+        return { code: 1, stdout: "", stderr: "psmux direct send is Windows-only" };
+    ensureWinPsmux(observe);
+    const worker = fileURLToPath(new URL("./psmux-send-worker.js", import.meta.url));
+    const body = bracketedPaste ? `\x1b[200~${text}\x1b[201~` : text;
+    const result = spawnSync(process.execPath, [worker, `${WIN_NS}__${sessionName}`], {
+        encoding: "utf8",
+        maxBuffer: 1024 * 1024,
+        input: Buffer.from(body, "utf8"),
+        env: tmuxSpawnEnv(),
+        timeout: 120_000,
+    });
+    if (result.error) {
+        return {
+            code: 1,
+            stdout: result.stdout ?? "",
+            stderr: `${result.error.code ?? "worker error"}: ${result.error.message}`,
+        };
+    }
+    return { code: result.status ?? 1, stdout: result.stdout ?? "", stderr: result.stderr ?? "" };
+}
 // psmux の load-buffer は stdin (`-`) 非対応で path 位置引数だけを取る。
 // Windows は owner-only の SOCKDIR 内へ一時ファイル経由で渡し、POSIX は stdin で渡す。
 export function loadPtyBufferChunk(observe, bufferName, chunk) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.29.3",
+  "version": "0.29.6",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent terminal MCP with one harness-based launcher for Claude Code, Codex CLI, Grok CLI, and Cursor Agent CLI, plus durable PTYs for SSH, containers, and REPLs.",
   "keywords": [