aiterm-mcp 0.37.1 → 0.37.2

package/CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.37.2] - 2026-09-13
+
+### 修正
+
+- Codex Steerの引数、通信中継、設定の有効化・復元をmacOSとWindowsで共通化した。OS差は起動API・接続・権限・設定保存に限定する。
+- Windowsで公式Codexの直接の親がDesktopではなくなり、他アプリの公式CLI検出を妨げていた構成を修正した。公式CodexをDesktopの直接の子、中継を公式Codexの子として起動する。
+- Windowsだけの既存launcher共有を廃止し、Macと同じくAitermのlauncherへ設定して解除時に元へ戻す。旧共有設定も次のenableで移行する。
+
 ## [0.37.1] - 2026-09-13
 
 ### 修正
@@ -1671,7 +1679,8 @@ prototype (preserved under `prototype/python/` as the porting source and referen
   `ubuntu-latest` for Node 18/20/22, publishing to npm on `v*` tags with
   provenance.
 
-[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.1...HEAD
+[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.2...HEAD
+[0.37.2]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.1...v0.37.2
 [0.37.1]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.0...v0.37.1
 [0.37.0]: https://github.com/kitepon/aiterm-mcp/compare/v0.36.0...v0.37.0
 [0.36.0]: https://github.com/kitepon/aiterm-mcp/compare/v0.35.1...v0.36.0

package/README.ja.md

@@ -66,8 +66,9 @@ Windowsはユーザー環境変数`CODEX_CLI_PATH`で起動設定を維持しま
 SteerはmacOS・Windowsの公式Codex Desktopと同梱CLI 0.154以上に対応します。Steer有効時の宛先は中継で起動したDesktopに限ります。
 Windowsでは公式Desktopが展開した実行ファイルを照合し、認証付きのローカル接続へ中継します。
 Aitermのpackageがlauncher・中継・設定・親への配送を含み、gpt-connectorやdotagentsの導入は不要です。
-既存の互換launcherがある場合は、稼働中のDesktop接続を確認した時だけ共有し、その起動設定を変更しません。
-互換性を確認できない設定は理由付きで停止します。WindowsのDesktop更新後はsetupを再実行してください。
+両OSで公式CodexをDesktopの直接の子として保ち、中継は公式Codexの子として動きます。
+有効化時は元の起動設定を保存してAitermのlauncherを設定し、解除時に元へ戻します。選択後に他から変更された値は上書きしません。
+WindowsのDesktop更新後はsetupを再実行してください。
 LinuxのSteer付き導入は理由付き`unsupported`を返します。Aiterm単品は従来どおり利用できます。
 
 cloneもビルドも不要。どのクライアントでも公開パッケージを次のコマンドで起動する:
@@ -195,7 +196,7 @@ runtime-error store は canonical dotagents config の `collection.enabled: true
 場合だけ収集し、既定OFF、network送信は行いません。tag起点CIのnpm provenance（OIDC Trusted
 Publishing）で公開し、GitHub Release が Official MCP Registry を再登録します。
 
-**状態:** 開発継続中 · 現行公開版 **v0.37.1** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
+**状態:** 開発継続中 · 現行公開版 **v0.37.2** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
 
 ### 更新と巻き戻し
 

package/README.md

@@ -66,8 +66,9 @@ Windowsはユーザー環境変数`CODEX_CLI_PATH`で起動設定を維持しま
 SteerはmacOS・Windowsの公式Codex Desktopと同梱CLI 0.154以上に対応します。Steer有効時の宛先は中継で起動したDesktopに限ります。
 Windowsでは公式Desktopが展開した実行ファイルを照合し、認証付きのローカル接続へ中継します。
 Aitermのpackageがlauncher・中継・設定・親への配送を含み、gpt-connectorやdotagentsの導入は不要です。
-既存の互換launcherがある場合は、稼働中のDesktop接続を確認した時だけ共有し、その起動設定を変更しません。
-互換性を確認できない設定は理由付きで停止します。WindowsのDesktop更新後はsetupを再実行してください。
+両OSで公式CodexをDesktopの直接の子として保ち、中継は公式Codexの子として動きます。
+有効化時は元の起動設定を保存してAitermのlauncherを設定し、解除時に元へ戻します。選択後に他から変更された値は上書きしません。
+WindowsのDesktop更新後はsetupを再実行してください。
 LinuxのSteer付き導入は理由付き`unsupported`を返します。Aiterm単品は従来どおり利用できます。
 
 No clone or build is required. Each client launches the published package with:
@@ -209,7 +210,7 @@ collection is off by default and performs no network I/O. It ships via
 tag-triggered CI with npm provenance (OIDC Trusted Publishing); the GitHub
 Release re-registers the Official MCP Registry entry.
 
-**Status:** actively maintained · current public release **v0.37.1** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
+**Status:** actively maintained · current public release **v0.37.2** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
 
 ### Update and rollback
 

package/dist/codex-relay-arguments.js

@@ -0,0 +1,36 @@
+// transportを切り替える条件と引数の扱いは全OSで共通にする。
+export function codexServerArguments(args) {
+    let server = false;
+    const result = [];
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (["-c", "--config", "--enable", "--disable"].includes(arg)) {
+            result.push(arg, args[++i]);
+            continue;
+        }
+        if (/^(?:--config=|--enable=|--disable=|-c.)/.test(arg)) {
+            result.push(arg);
+            continue;
+        }
+        if (!server) {
+            if (arg !== "app-server")
+                return null;
+            server = true;
+            result.push(arg);
+            continue;
+        }
+        if (["proxy", "daemon", "start", "stop", "status", "generate-ts", "generate-json-schema", "--help", "-h", "--version", "-V"].includes(arg))
+            return null;
+        if (arg === "--stdio" || arg === "--listen=stdio://")
+            continue;
+        if (arg === "--listen") {
+            if (args[++i] !== "stdio://")
+                throw new Error("stdio以外の接続指定は変更できません");
+            continue;
+        }
+        if (arg.startsWith("--listen=") || arg.startsWith("--ws-"))
+            throw new Error("既存の接続・認証指定は変更できません");
+        result.push(arg);
+    }
+    return server ? result : null;
+}

package/dist/codex-relay-launcher.js

@@ -1,63 +1,26 @@
-// POSIXのexecで公式CLIのPIDとDesktopからの親子関係を維持する。
-const quote = (text) => `'${text.replace(/'/g, `'"'"'`)}'`;
+// POSIXのexecで公式CLIとDesktopの直接の親子関係を維持する。
+import { codexServerArguments } from "./codex-relay-arguments.js";
+import { prepareRelayDirectory } from "./codex-relay-config.js";
+const quote = (text) => "'" + text.replace(/'/g, "'\"'\"'") + "'";
 export function codexRelayLauncher(options) {
-    return `#!/bin/sh
-binary=${quote(options.binary)}
-node=${quote(options.node)}
-relay=${quote(options.relay)}
-root=${quote(options.socket_root)}
-mode=root
-value=no
-for arg do
-  if [ "$value" = yes ]; then value=no; continue; fi
-  case "$arg" in
-    -c|--config|--enable|--disable|--listen) value=yes; continue ;;
-  esac
-  if [ "$mode" = root ]; then
-    case "$arg" in
-      --config=*|--enable=*|--disable=*|-c?*) ;;
-      app-server) mode=server ;;
-      *) mode=other; break ;;
-    esac
-  else
-    case "$arg" in
-      proxy|start|stop|status|generate-ts|generate-json-schema|--help|-h|--version|-V) mode=other; break ;;
-    esac
-  fi
-done
-if [ "$mode" != server ]; then exec "$binary" "$@"; fi
-
-# 引数を一巡させ、stdio指定だけを公式Unix受付へ変更する。
-remaining=$#
-value=no
-while [ "$remaining" -gt 0 ]; do
-  arg=$1
-  shift
-  remaining=$((remaining - 1))
-  if [ "$value" = yes ]; then
-    set -- "$@" "$arg"
-    value=no
-    continue
-  fi
-  case "$arg" in
-    -c|--config|--enable|--disable) value=yes; set -- "$@" "$arg" ;;
-    --stdio) ;;
-    --listen)
-      if [ "$remaining" -eq 0 ] || [ "$1" != stdio:// ]; then
-        echo 'aiterm-relay: stdio以外の接続指定は変更できません' >&2
-        exit 2
-      fi
-      shift
-      remaining=$((remaining - 1)) ;;
-    --listen=stdio://) ;;
-    --listen=*) echo 'aiterm-relay: stdio以外の接続指定は変更できません' >&2; exit 2 ;;
-    *) set -- "$@" "$arg" ;;
-  esac
-done
-"$node" "$relay" --prepare "$root" || exit $?
-socket="$root/$$.sock"
-exec 3<&0
-"$node" "$relay" "$socket" "$$" <&3 3<&- &
-exec "$binary" "$@" --listen "unix://$socket" </dev/null >/dev/null 3<&-
-`;
+    return [
+        "#!/bin/sh",
+        "command=$(" + [options.node, options.relay, "--prepare", options.socket_root, options.binary, options.node, options.relay].map(quote).join(" ") + ' "$$" "$@") || exit $?',
+        'exec /bin/sh -c "$command"',
+        "",
+    ].join("\n");
+}
+export function preparePosixRelayLaunch(root, binary, node, relay, pid, args) {
+    const serverArgs = codexServerArguments(args);
+    if (!serverArgs)
+        return ["exec", binary, ...args].map((arg, i) => i === 0 ? arg : quote(arg)).join(" ");
+    if (!/^[1-9][0-9]*$/.test(pid) || Buffer.byteLength(root + "/9999999999.sock") >= 104)
+        throw new Error("socketのpathまたは親processの指定が不正です");
+    prepareRelayDirectory(root);
+    const socket = root + "/" + pid + ".sock";
+    return [
+        "exec 3<&0",
+        [node, relay, socket, pid].map(quote).join(" ") + " <&3 3<&- &",
+        "exec " + [binary, ...serverArgs, "--listen", "unix://" + socket].map(quote).join(" ") + " </dev/null >/dev/null 3<&-",
+    ].join("\n");
 }

package/dist/codex-relay-setup.js

@@ -0,0 +1,44 @@
+import { readRelayConfig } from "./codex-relay-config.js";
+import { SetupError } from "./setup-platform.js";
+// 設定・競合・再実行・復元・実効確認の順序は全OSで同じにする。
+export async function configureRelay(action, runtime) {
+    const previous = readRelayConfig(runtime.directory);
+    if (action === "status") {
+        if (!previous?.enabled)
+            return { status: "disabled" };
+        if (runtime.getGui("CODEX_CLI_PATH") !== previous.launcher)
+            return { status: "failed", reason_code: "codex_steer_configuration_changed" };
+        return await runtime.live(previous) ? { status: "ready" } : { status: "restart_required", reason_code: "codex_restart_required" };
+    }
+    if (action === "disable") {
+        if (!previous?.enabled)
+            return { status: "disabled" };
+        if (![previous.launcher, previous.previous_cli_path].includes(runtime.getGui("CODEX_CLI_PATH")))
+            throw new SetupError("codex_steer_configuration_changed", "起動設定が他から変更されています。所有外の値は上書きしません");
+        runtime.unpersist(previous.launcher);
+        runtime.setGui("CODEX_CLI_PATH", previous.previous_cli_path);
+        if (runtime.getGui("CODEX_CLI_PATH") !== previous.previous_cli_path)
+            throw new SetupError("codex_steer_readback_failed", "元の起動設定を確認できません");
+        runtime.save(runtime.directory, { ...previous, enabled: false });
+        return { status: "restart_required", reason_code: "codex_restart_required" };
+    }
+    for (const key of ["CODEX_APP_SERVER_WS_URL", "CODEX_APP_SERVER_USE_LOCAL_DAEMON", "CODEX_APP_SERVER_FORCE_CLI"]) {
+        if (runtime.getGui(key))
+            throw new SetupError("codex_steer_configuration_conflict", `${key}が設定されています。既存の接続設定は上書きしません`);
+    }
+    const binary = runtime.findBinary();
+    const current = runtime.getGui("CODEX_CLI_PATH");
+    if (previous?.enabled && ![previous.launcher, previous.previous_cli_path].includes(current))
+        throw new SetupError("codex_steer_configuration_changed", "起動設定が他から変更されています");
+    runtime.prepare(runtime.directory);
+    const launcher = await runtime.build(binary);
+    const config = { schema: "aiterm.codex-relay.v1", enabled: true, binary, node: runtime.node,
+        launcher, socket_root: runtime.socket_root, previous_cli_path: previous?.enabled ? previous.previous_cli_path : current };
+    // 起動設定の変更前に復元値を保存する。読戻し不一致を成功扱いしない。
+    runtime.save(runtime.directory, config);
+    runtime.persist(launcher);
+    runtime.setGui("CODEX_CLI_PATH", launcher);
+    if (runtime.getGui("CODEX_CLI_PATH") !== launcher)
+        throw new SetupError("codex_steer_readback_failed", "Steerの起動設定を確認できません");
+    return await runtime.live(config) ? { status: "ready" } : { status: "restart_required", reason_code: "codex_restart_required" };
+}

package/dist/codex-relay-stdio.js

@@ -0,0 +1,81 @@
+// Desktopと公式App Serverを結ぶ共通のJSONL中継。OS adapterは接続先とprocess終了だけを供給する。
+import { createInterface } from "node:readline";
+import { once } from "node:events";
+import { setTimeout as delay } from "node:timers/promises";
+export async function relayCodexStdio(adapter) {
+    let socket;
+    let ending = false;
+    let failure;
+    let stopping;
+    const stop = () => stopping ??= adapter.stop();
+    const input = createInterface({ input: process.stdin, crlfDelay: Infinity });
+    // 接続準備中に届いたinitializeとEOFも同じ順序で扱う。
+    const lines = input[Symbol.asyncIterator]();
+    const end = () => { ending = true; void stop().catch(error => { failure = error; }); socket?.terminate(); input.close(); process.stdin.destroy(); };
+    const outputFailed = (error) => { failure = error; end(); };
+    process.stdout.once("error", outputFailed);
+    const drain = () => socket?.resume();
+    process.stdout.on("drain", drain);
+    try {
+        const deadline = Date.now() + 15_000;
+        while (!ending) {
+            if (!adapter.alive())
+                throw new Error("公式App Serverが起動中に終了しました");
+            socket = adapter.socket();
+            const candidate = socket;
+            let opened = false;
+            candidate.once("open", () => { opened = true; });
+            // upgradeと最初のframeが同じ受信単位でも、openのawaitより先に受け付ける。
+            candidate.on("message", (data, binary) => {
+                if (binary) {
+                    failure = new Error("公式App Serverから予期しないバイナリ応答を受信しました");
+                    end();
+                    return;
+                }
+                if (!process.stdout.write(data.toString() + "\n"))
+                    candidate.pause();
+            });
+            candidate.on("error", error => { if (opened) {
+                failure = error;
+                end();
+            } });
+            candidate.on("close", () => {
+                if (opened && !ending) {
+                    failure = new Error("公式App Serverとの接続が終了しました");
+                    end();
+                }
+            });
+            try {
+                await once(socket, "open");
+                break;
+            }
+            catch (error) {
+                socket.on("error", () => { });
+                socket.terminate();
+                if (ending)
+                    break;
+                // 公式受付の作成だけを待つ。送信済みRPCは再送しない。
+                if (!["ENOENT", "ECONNREFUSED"].includes(error.code ?? "") || Date.now() >= deadline)
+                    throw error;
+                await delay(25);
+            }
+        }
+        if (ending) {
+            if (failure)
+                throw failure;
+            return;
+        }
+        const connected = socket;
+        adapter.connected?.();
+        for await (const line of lines)
+            await new Promise((resolve, reject) => connected.send(line, error => error ? reject(error) : resolve()));
+        if (failure)
+            throw failure;
+    }
+    finally {
+        end();
+        await stop();
+        process.stdout.off("error", outputFailed);
+        process.stdout.off("drain", drain);
+    }
+}

package/dist/codex-stdio-relay.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-// DesktopのJSONLと公式App ServerのUnix WebSocketの中継。RPCの内容は変更しない。
+// Unix socketとPOSIX signalのadapter。中継するJSONLと終了契約はWindowsと共通。
 import { createConnection } from "node:net";
-import { createInterface } from "node:readline";
 import { setTimeout as delay } from "node:timers/promises";
-import { once } from "node:events";
 import { fileURLToPath } from "node:url";
 import WebSocket from "ws";
-import { prepareRelayDirectory } from "./codex-relay-config.js";
+import { preparePosixRelayLaunch } from "./codex-relay-launcher.js";
+import { relayCodexStdio } from "./codex-relay-stdio.js";
 export async function runCodexStdioRelay(socketPath, serverPid) {
-    let socket;
-    let ending = false;
-    let stopping;
-    function stopServer() {
-        return stopping ??= (async () => {
+    await relayCodexStdio({
+        alive: () => process.ppid === serverPid,
+        socket: () => new WebSocket("ws://localhost/rpc", {
+            createConnection: () => createConnection(socketPath), handshakeTimeout: 10_000, perMessageDeflate: false,
+        }),
+        stop: async () => {
             // 公式Unix受付は1回目でturn完了待ち、2回目で終了する。
             for (let i = 0; i < 2; i++) {
                 if (process.ppid !== serverPid)
@@ -28,93 +28,26 @@ export async function runCodexStdioRelay(socketPath, serverPid) {
                 if (i === 0)
                     await delay(100);
             }
-        })();
-    }
-    async function connectDuringStartup() {
-        const deadline = Date.now() + 15_000;
-        while (true) {
-            if (process.ppid !== serverPid)
-                throw new Error("公式App Serverが起動中に終了しました");
-            const candidate = new WebSocket("ws://localhost/rpc", {
-                createConnection: () => createConnection(socketPath), handshakeTimeout: 10_000, perMessageDeflate: false,
-            });
-            try {
-                await once(candidate, "open");
-                return candidate;
-            }
-            catch (error) {
-                candidate.on("error", () => { });
-                candidate.terminate();
-                // exec直後のsocket作成だけを待つ。送信済みRPCは再送しない。
-                if (!["ENOENT", "ECONNREFUSED"].includes(error.code ?? "") || Date.now() >= deadline)
-                    throw error;
-                await delay(25);
-            }
-        }
-    }
-    try {
-        socket = await connectDuringStartup();
-        const connected = socket;
-        connected.on("message", (data, binary) => {
-            if (binary) {
-                process.stderr.write("aiterm-relay: 予期しないバイナリ応答\n");
-                process.exitCode = 1;
-                void stopServer();
-                connected.terminate();
-                return;
-            }
-            if (!process.stdout.write(`${data.toString()}\n`))
-                connected.pause();
-        });
-        process.stdout.on("drain", () => connected.resume());
-        connected.on("error", () => {
-            process.stderr.write("aiterm-relay: 通信に失敗しました\n");
-            process.exitCode = 1;
-            void stopServer();
-        });
-        connected.on("close", () => {
-            if (!ending) {
-                process.stderr.write("aiterm-relay: 公式App Serverとの接続が終了しました\n");
-                process.exitCode = 1;
-            }
-            process.stdin.destroy();
-        });
-        process.stdout.on("error", () => { ending = true; void stopServer(); connected.terminate(); process.stdin.destroy(); });
-        const lines = createInterface({ input: process.stdin, crlfDelay: Infinity });
-        for await (const line of lines) {
-            await new Promise((resolve, reject) => connected.send(line, error => error ? reject(error) : resolve()));
-        }
-        ending = true;
-        await stopServer();
-        connected.terminate();
-    }
-    catch (error) {
-        process.stderr.write(`aiterm-relay: 中継失敗: ${error instanceof Error ? error.message : String(error)}\n`);
-        process.exitCode = 1;
-        await stopServer();
-        socket?.terminate();
-        process.stdin.destroy();
-    }
+        },
+    });
 }
 if (process.argv[1] === fileURLToPath(import.meta.url)) {
-    const [socket, pid] = process.argv.slice(2);
-    if (socket === "--prepare") {
-        try {
+    const [socket, pid, ...args] = process.argv.slice(2);
+    try {
+        if (socket === "--prepare") {
             if (process.platform === "win32")
-                throw new Error("WindowsのAF_UNIX中継は未対応です");
-            if (!pid || Buffer.byteLength(`${pid}/9999999999.sock`) >= 104)
-                throw new Error("socketのpathが長すぎます");
-            prepareRelayDirectory(pid);
-        }
-        catch (error) {
-            process.stderr.write(`aiterm-relay: ${error instanceof Error ? error.message : String(error)}\n`);
-            process.exitCode = 2;
+                throw new Error("POSIX launcherはこのOSで利用できません");
+            if (!pid || args.length < 4)
+                throw new Error("中継の起動指定がありません");
+            process.stdout.write(preparePosixRelayLaunch(pid, args[0], args[1], args[2], args[3], args.slice(4)));
         }
+        else if (!socket || !/^[1-9][0-9]*$/.test(pid ?? "") || Number(pid) !== process.ppid)
+            throw new Error("親processの指定が不正です");
+        else
+            await runCodexStdioRelay(socket, Number(pid));
     }
-    else if (!socket || !/^\d+$/.test(pid ?? "") || Number(pid) <= 1 || Number(pid) !== process.ppid) {
-        process.stderr.write("aiterm-relay: 親processの指定が不正です\n");
-        process.exitCode = 2;
+    catch (error) {
+        process.stderr.write("aiterm-relay: " + (error instanceof Error ? error.message : String(error)) + "\n");
+        process.exitCode = 1;
     }
-    else
-        await runCodexStdioRelay(socket, Number(pid));
 }

package/dist/setup-codex-relay.js

@@ -7,12 +7,13 @@ import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
 import { SetupError } from "./setup-platform.js";
 import { CodexDeliveryError } from "./codex-delivery-error.js";
-import { readRelayConfig, relayConfigDirectory, prepareRelayDirectory } from "./codex-relay-config.js";
+import { relayConfigDirectory, prepareRelayDirectory } from "./codex-relay-config.js";
 import { codexRelayLauncher } from "./codex-relay-launcher.js";
 import { withCodexRelay } from "./codex-relay-client.js";
 import { readRuntimeProcesses } from "./process-runtime.js";
 import { installRelayLogin, removeRelayLogin } from "./codex-relay-login.js";
-import { configureWindowsCodexSteer } from "./windows-codex-setup.js";
+import { windowsCodexRuntime } from "./windows-codex-setup.js";
+import { configureRelay } from "./codex-relay-setup.js";
 function command(executable, args) {
     const result = spawnSync(executable, args, { encoding: "utf8", timeout: 15_000 });
     if (result.error || result.status !== 0)
@@ -123,65 +124,31 @@ function writeConfig(directory, config) {
 }
 export async function configureCodexSteer(action = "status", overrides = {}) {
     if ((overrides.platform ?? process.platform) === "win32")
-        return configureWindowsCodexSteer(action, overrides);
+        return configureRelay(action, windowsCodexRuntime(overrides));
     const runtime = {
         platform: process.platform, directory: relayConfigDirectory(), socket_root: `/tmp/aiterm-codex-${process.getuid?.() ?? 0}`,
         node: process.execPath, relay: fileURLToPath(new URL("./codex-stdio-relay.js", import.meta.url)),
         findBinary: findDesktopBinary, getGui,
         setGui: (key, value) => { command("/bin/launchctl", value === null ? ["unsetenv", key] : ["setenv", key, value]); },
         persist: installRelayLogin, unpersist: removeRelayLogin,
-        verify: verifyRelayLauncher, live: liveRelay, ...overrides,
+        verify: verifyRelayLauncher, live: liveRelay, prepare: prepareRelayDirectory, save: writeConfig,
+        build: async (binary) => {
+            const launcher = path.join(runtime.directory, "codex");
+            const candidate = path.join(runtime.directory, `codex-${randomUUID()}`);
+            fs.writeFileSync(candidate, codexRelayLauncher({ binary, node: runtime.node, relay: runtime.relay, socket_root: runtime.socket_root }), { mode: 0o700, flag: "wx" });
+            try {
+                await runtime.verify(candidate);
+                fs.renameSync(candidate, launcher);
+            }
+            finally {
+                if (fs.existsSync(candidate))
+                    fs.unlinkSync(candidate);
+            }
+            return launcher;
+        }, ...overrides,
     };
     if (runtime.platform !== "darwin") {
         return action === "enable" ? { status: "unsupported", reason_code: "codex_steer_platform_unsupported" } : { status: "disabled" };
     }
-    const previous = readRelayConfig(runtime.directory);
-    if (action === "status") {
-        if (!previous?.enabled)
-            return { status: "disabled" };
-        if (runtime.getGui("CODEX_CLI_PATH") !== previous.launcher)
-            return { status: "failed", reason_code: "codex_steer_configuration_changed" };
-        return await runtime.live(previous) ? { status: "ready" } : { status: "restart_required", reason_code: "codex_restart_required" };
-    }
-    if (action === "disable") {
-        if (!previous?.enabled)
-            return { status: "disabled" };
-        if (![previous.launcher, previous.previous_cli_path].includes(runtime.getGui("CODEX_CLI_PATH")))
-            throw new SetupError("codex_steer_configuration_changed", "起動設定が他から変更されています。所有外の値は上書きしません");
-        runtime.unpersist(previous.launcher);
-        runtime.setGui("CODEX_CLI_PATH", previous.previous_cli_path);
-        if (runtime.getGui("CODEX_CLI_PATH") !== previous.previous_cli_path)
-            throw new SetupError("codex_steer_readback_failed", "元の起動設定を確認できません");
-        writeConfig(runtime.directory, { ...previous, enabled: false });
-        return { status: "restart_required", reason_code: "codex_restart_required" };
-    }
-    for (const key of ["CODEX_APP_SERVER_WS_URL", "CODEX_APP_SERVER_USE_LOCAL_DAEMON", "CODEX_APP_SERVER_FORCE_CLI"]) {
-        if (runtime.getGui(key))
-            throw new SetupError("codex_steer_configuration_conflict", `${key}が設定されています。既存の接続設定は上書きしません`);
-    }
-    const binary = runtime.findBinary();
-    const current = runtime.getGui("CODEX_CLI_PATH");
-    if (previous?.enabled && ![previous.launcher, previous.previous_cli_path].includes(current))
-        throw new SetupError("codex_steer_configuration_changed", "起動設定が他から変更されています");
-    prepareRelayDirectory(runtime.directory);
-    const launcher = path.join(runtime.directory, "codex");
-    const config = { schema: "aiterm.codex-relay.v1", enabled: true, binary, node: runtime.node,
-        launcher, socket_root: runtime.socket_root, previous_cli_path: previous?.enabled ? previous.previous_cli_path : current };
-    const candidate = path.join(runtime.directory, `codex-${randomUUID()}`);
-    fs.writeFileSync(candidate, codexRelayLauncher({ ...config, relay: runtime.relay }), { mode: 0o700, flag: "wx" });
-    try {
-        await runtime.verify(candidate);
-        fs.renameSync(candidate, launcher);
-    }
-    finally {
-        if (fs.existsSync(candidate))
-            fs.unlinkSync(candidate);
-    }
-    // 起動設定の変更前に復元値を保存する。読戻し不一致を成功扱いしない。
-    writeConfig(runtime.directory, config);
-    runtime.persist(launcher);
-    runtime.setGui("CODEX_CLI_PATH", launcher);
-    if (runtime.getGui("CODEX_CLI_PATH") !== launcher)
-        throw new SetupError("codex_steer_readback_failed", "Steerの起動設定を確認できません");
-    return await runtime.live(config) ? { status: "ready" } : { status: "restart_required", reason_code: "codex_restart_required" };
+    return configureRelay(action, runtime);
 }

package/dist/windows-codex-connection.js

@@ -76,33 +76,25 @@ export function windowsSocketConnection(file) {
         invalid("Steer認証情報が不正です。");
     return { url: record.endpoint, options: { headers: { Authorization: `Bearer ${token}` } } };
 }
-/** 登録済みlauncherとDesktopの子孫にある、対応する公式接続だけを共有できる。 */
-export function windowsDesktopRelay(launcher, rows = readWindowsProcesses()) {
+/** 公式CLIの直接の親がDesktopであり、選択したlauncherの接続先を使っていることを確認する。 */
+export function windowsDesktopRelay(launcher, rows = readWindowsProcesses(), root = join(dirname(launcher), "sessions")) {
     const parents = new Map(rows.map(row => [row.pid, row]));
     for (const server of rows) {
         if (basename(server.executable).toLowerCase() !== "codex.exe" || !server.command.includes("--ws-token-file"))
             continue;
-        let row = parents.get(server.parent_pid);
-        let matchedLauncher = false;
-        let matchedDesktop = false;
-        const seen = new Set();
-        while (row && !seen.has(row.pid)) {
-            seen.add(row.pid);
-            if (row.executable.toLowerCase() === launcher.toLowerCase())
-                matchedLauncher = true;
-            if (/\\WindowsApps\\OpenAI\.Codex_[^\\]+\\app\\(?:ChatGPT|Codex)\.exe$/i.test(row.executable)) {
-                matchedDesktop = true;
-                break;
-            }
-            row = parents.get(row.parent_pid);
-        }
-        if (!matchedLauncher || !matchedDesktop)
+        const desktop = parents.get(server.parent_pid);
+        if (!desktop || !/\\WindowsApps\\OpenAI\.Codex_[^\\]+\\app\\(?:ChatGPT|Codex)\.exe$/i.test(desktop.executable))
+            continue;
+        if (!rows.some(row => row.parent_pid === desktop.pid && row.executable.toLowerCase() === launcher.toLowerCase()))
             continue;
         const token = /(?:^|\s)--ws-token-file\s+(?:"([^"]+)"|(\S+))/.exec(server.command);
         const tokenFile = token?.[1] ?? token?.[2];
         if (!tokenFile || !isAbsolute(tokenFile) || basename(tokenFile) !== "token")
             continue;
         const file = join(dirname(tokenFile), "connection.json");
+        const location = relative(root, file);
+        if (isAbsolute(location) || location === ".." || location.startsWith("..\\") || location.startsWith("../"))
+            continue;
         if (readWindowsRelay(file, rows).serverPid !== server.pid)
             invalid("Steer接続記録と親Codexが一致しません。");
         return file;

package/dist/windows-codex-launcher.js

@@ -0,0 +1,61 @@
+import { windowsNativeProcessSource } from "./windows-codex-native.js";
+// POSIXのexecに対応するWindows adapter。公式CLIを起動元の直接の子、中継を公式CLIの子として起動する。
+export function windowsLauncherSource(node, relay, binary, root) {
+    const literal = (value) => JSON.stringify(value);
+    return `using System;
+using System.Diagnostics;
+using System.Text;
+using System.IO;
+using System.ComponentModel;
+using System.Runtime.InteropServices;
+using System.Runtime.Serialization;
+using System.Runtime.Serialization.Json;
+${windowsNativeProcessSource}
+[DataContract] public sealed class LaunchPlan {
+  [DataMember] public string directory;
+  [DataMember] public string endpoint;
+  [DataMember] public string[] arguments;
+}
+public static class AitermLauncher {
+  static LaunchPlan Prepare(string[] args) {
+    var arguments=new StringBuilder();
+    foreach(var value in new string[] { ${[relay, "--prepare", root].map(literal).join(", ")} }) arguments.Append(AitermNativeProcess.Quote(value)).Append(' ');
+    foreach(var value in args) arguments.Append(AitermNativeProcess.Quote(value)).Append(' ');
+    var start=new ProcessStartInfo(${literal(node)},arguments.ToString());
+    start.UseShellExecute=false; start.CreateNoWindow=true;
+    start.RedirectStandardInput=true; start.RedirectStandardOutput=true; start.RedirectStandardError=true;
+    start.StandardOutputEncoding=new UTF8Encoding(false);
+    using(var child=Process.Start(start)) {
+      child.StandardInput.Close();
+      var output=child.StandardOutput.ReadToEndAsync();
+      var error=child.StandardError.BaseStream.CopyToAsync(Console.OpenStandardError());
+      child.WaitForExit(); System.Threading.Tasks.Task.WaitAll(output,error);
+      if(child.ExitCode!=0) throw new InvalidOperationException("中継の起動準備に失敗しました");
+      using(var stream=new MemoryStream(Encoding.UTF8.GetBytes(output.Result)))
+        return (LaunchPlan)new DataContractJsonSerializer(typeof(LaunchPlan)).ReadObject(stream);
+    }
+  }
+  public static int Main(string[] args) {
+    LaunchPlan plan=null;
+    try {
+      Console.OutputEncoding=new UTF8Encoding(false);
+      plan=Prepare(args);
+      using(var lifetime=new AitermNativeProcess.Lifetime())
+      using(var server=AitermNativeProcess.Start(AitermNativeProcess.ParentId(),${literal(binary)},plan.arguments,plan.directory!=null,lifetime)) {
+        if(plan.directory==null) return server.Wait();
+        // 中継は公式CLIのjobを継承する。launcherは終了監視だけを担い、JSON-RPCを通さない。
+        using(var bridge=AitermNativeProcess.Start(server.Pid,${literal(node)},new string[] {
+          ${literal(relay)},"--serve",${literal(binary)},plan.directory,plan.endpoint,server.Pid.ToString()
+        },false,null)) {
+          int code=bridge.Wait();
+          lifetime.Dispose();
+          server.Wait();
+          return code;
+        }
+      }
+    } catch(Exception error) { Console.Error.WriteLine("aiterm-mcp: Windows起動失敗: "+error.Message); return 1; }
+    finally { if(plan!=null && plan.directory!=null && Directory.Exists(plan.directory)) Directory.Delete(plan.directory,true); }
+  }
+}
+`;
+}

package/dist/windows-codex-native.js

@@ -0,0 +1,118 @@
+// Windowsの標準process作成APIで、公式CLIの直接の親と必要なstdioだけを引き継ぐ。
+// launcherと公式CLIのPIDは異なる。Macのexecと同じPIDだとは扱わない。
+export const windowsNativeProcessSource = String.raw `
+public static class AitermNativeProcess {
+  [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct StartupInfo {
+    public int cb; public string reserved,desktop,title;
+    public int x,y,xSize,ySize,xChars,yChars,fill,flags; public short show,reservedSize;
+    public IntPtr reservedBytes,input,output,error;
+  }
+  [StructLayout(LayoutKind.Sequential)] struct StartupInfoEx { public StartupInfo startup; public IntPtr attributes; }
+  [StructLayout(LayoutKind.Sequential)] struct ProcessInfo { public IntPtr process,thread; public int pid,tid; }
+  [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct ProcessEntry {
+    public uint size,usage,pid; public UIntPtr heap; public uint module,threads,parent; public int priority; public uint flags;
+    [MarshalAs(UnmanagedType.ByValTStr, SizeConst=260)] public string executable;
+  }
+  [StructLayout(LayoutKind.Sequential)] struct JobLimits {
+    public long processTime,jobTime; public uint flags; public UIntPtr minWorking,maxWorking;
+    public uint activeProcesses; public UIntPtr affinity; public uint priority,scheduling;
+  }
+  [StructLayout(LayoutKind.Sequential)] struct JobInfo {
+    public JobLimits limits; public ulong reads,writes,others,readBytes,writeBytes,otherBytes;
+    public UIntPtr processMemory,jobMemory,peakProcessMemory,peakJobMemory;
+  }
+  [DllImport("kernel32.dll",SetLastError=true)] static extern IntPtr CreateToolhelp32Snapshot(uint flags,uint pid);
+  [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern bool Process32FirstW(IntPtr snapshot,ref ProcessEntry entry);
+  [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern bool Process32NextW(IntPtr snapshot,ref ProcessEntry entry);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern IntPtr OpenProcess(uint access,bool inherit,int pid);
+  [DllImport("kernel32.dll")] static extern IntPtr GetCurrentProcess();
+  [DllImport("kernel32.dll")] static extern IntPtr GetStdHandle(int kind);
+  [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern IntPtr CreateFileW(string path,uint access,uint share,IntPtr security,uint creation,uint flags,IntPtr template);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern bool DuplicateHandle(IntPtr source,IntPtr handle,IntPtr target,out IntPtr duplicate,uint access,bool inherit,uint options);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern bool InitializeProcThreadAttributeList(IntPtr list,int count,int flags,ref IntPtr size);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern bool UpdateProcThreadAttribute(IntPtr list,uint flags,IntPtr attribute,IntPtr value,IntPtr size,IntPtr previous,IntPtr returned);
+  [DllImport("kernel32.dll")] static extern void DeleteProcThreadAttributeList(IntPtr list);
+  [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern bool CreateProcessW(string app,StringBuilder command,IntPtr processSecurity,IntPtr threadSecurity,bool inherit,uint flags,IntPtr environment,string cwd,ref StartupInfoEx startup,out ProcessInfo info);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern IntPtr CreateJobObjectW(IntPtr security,IntPtr name);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern bool SetInformationJobObject(IntPtr job,int kind,ref JobInfo info,uint size);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern bool AssignProcessToJobObject(IntPtr job,IntPtr process);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern uint ResumeThread(IntPtr thread);
+  [DllImport("kernel32.dll")] static extern bool TerminateProcess(IntPtr process,uint code);
+  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
+  [DllImport("kernel32.dll")] static extern uint WaitForSingleObject(IntPtr handle,uint time);
+  [DllImport("kernel32.dll",SetLastError=true)] static extern bool GetExitCodeProcess(IntPtr process,out uint exitCode);
+  static void Check(bool ok) { if (!ok) throw new Win32Exception(Marshal.GetLastWin32Error()); }
+  public static int ParentId() {
+    IntPtr snapshot=CreateToolhelp32Snapshot(2,0); Check(snapshot!=new IntPtr(-1));
+    try {
+      var entry=new ProcessEntry(); entry.size=(uint)Marshal.SizeOf(entry);
+      Check(Process32FirstW(snapshot,ref entry)); int current=Process.GetCurrentProcess().Id;
+      do { if(entry.pid==current) return (int)entry.parent; } while(Process32NextW(snapshot,ref entry));
+      throw new InvalidOperationException("launcherの親processが見つかりません");
+    } finally { CloseHandle(snapshot); }
+  }
+  public static string Quote(string text) {
+    if(text.Length>0 && text.IndexOfAny(new char[] {' ','\t','\n','\v','"'})<0) return text;
+    var result=new StringBuilder().Append('"'); int slashes=0;
+    foreach(char c in text) {
+      if(c=='\\') { slashes++; continue; }
+      if(c=='"') { result.Append('\\',slashes*2+1); result.Append(c); }
+      else { result.Append('\\',slashes); result.Append(c); }
+      slashes=0;
+    }
+    result.Append('\\',slashes*2); return result.Append('"').ToString();
+  }
+  public sealed class Child : IDisposable {
+    internal IntPtr handle; public readonly int Pid;
+    internal Child(IntPtr process,int pid) { handle=process; Pid=pid; }
+    public int Wait() { WaitForSingleObject(handle,0xffffffff); uint code; Check(GetExitCodeProcess(handle,out code)); return (int)code; }
+    public void Dispose() { if(handle!=IntPtr.Zero) { CloseHandle(handle); handle=IntPtr.Zero; } }
+  }
+  public sealed class Lifetime : IDisposable {
+    internal IntPtr handle;
+    public Lifetime() {
+      handle=CreateJobObjectW(IntPtr.Zero,IntPtr.Zero); Check(handle!=IntPtr.Zero);
+      var info=new JobInfo(); info.limits.flags=0x2000;
+      try { Check(SetInformationJobObject(handle,9,ref info,(uint)Marshal.SizeOf(info))); }
+      catch { Dispose(); throw; }
+    }
+    public void Dispose() { if(handle!=IntPtr.Zero) { CloseHandle(handle); handle=IntPtr.Zero; } }
+  }
+  public static Child Start(int parentId,string binary,string[] args,bool quiet,Lifetime lifetime) {
+    IntPtr parent=IntPtr.Zero,list=IntPtr.Zero,parentValue=IntPtr.Zero,handleList=IntPtr.Zero,nul=IntPtr.Zero;
+    var remote=new IntPtr[3]; var info=new ProcessInfo(); bool initialized=false;
+    try {
+      parent=OpenProcess(0x80|0x40,false,parentId); Check(parent!=IntPtr.Zero);
+      var current=GetCurrentProcess();
+      if(quiet) { nul=CreateFileW("NUL",0xc0000000,3,IntPtr.Zero,3,0,IntPtr.Zero); Check(nul!=new IntPtr(-1)); }
+      // 指定した親へ必要な3 handleだけを一時複製し、child作成直後に親から閉じる。
+      for(int i=0;i<3;i++) Check(DuplicateHandle(current,quiet && i<2 ? nul : GetStdHandle(-10-i),parent,out remote[i],0,true,2));
+      IntPtr size=IntPtr.Zero; InitializeProcThreadAttributeList(IntPtr.Zero,2,0,ref size);
+      list=Marshal.AllocHGlobal(size); Check(InitializeProcThreadAttributeList(list,2,0,ref size)); initialized=true;
+      parentValue=Marshal.AllocHGlobal(IntPtr.Size); Marshal.WriteIntPtr(parentValue,parent);
+      Check(UpdateProcThreadAttribute(list,0,(IntPtr)0x20000,parentValue,(IntPtr)IntPtr.Size,IntPtr.Zero,IntPtr.Zero));
+      handleList=Marshal.AllocHGlobal(3*IntPtr.Size);
+      for(int i=0;i<3;i++) Marshal.WriteIntPtr(handleList,i*IntPtr.Size,remote[i]);
+      Check(UpdateProcThreadAttribute(list,0,(IntPtr)0x20002,handleList,(IntPtr)(3*IntPtr.Size),IntPtr.Zero,IntPtr.Zero));
+      var startup=new StartupInfoEx(); startup.startup.cb=Marshal.SizeOf(startup); startup.attributes=list;
+      startup.startup.flags=0x100; startup.startup.input=remote[0]; startup.startup.output=remote[1]; startup.startup.error=remote[2];
+      var command=new StringBuilder(Quote(binary)); foreach(var arg in args) command.Append(' ').Append(Quote(arg));
+      Check(CreateProcessW(binary,command,IntPtr.Zero,IntPtr.Zero,true,0x80000|0x8000000|4,IntPtr.Zero,Environment.CurrentDirectory,ref startup,out info));
+      if(lifetime!=null) Check(AssignProcessToJobObject(lifetime.handle,info.process));
+      for(int i=0;i<3;i++) { IntPtr local; Check(DuplicateHandle(parent,remote[i],current,out local,0,false,3)); CloseHandle(local); remote[i]=IntPtr.Zero; }
+      Check(ResumeThread(info.thread)!=0xffffffff);
+      var child=new Child(info.process,info.pid); info.process=IntPtr.Zero; return child;
+    } catch {
+      if(info.process!=IntPtr.Zero) TerminateProcess(info.process,1);
+      throw;
+    } finally {
+      if(nul!=IntPtr.Zero && nul!=new IntPtr(-1)) CloseHandle(nul);
+      if(info.thread!=IntPtr.Zero) CloseHandle(info.thread); if(info.process!=IntPtr.Zero) CloseHandle(info.process);
+      foreach(var handle in remote) if(handle!=IntPtr.Zero) { IntPtr local; if(DuplicateHandle(parent,handle,GetCurrentProcess(),out local,0,false,3)) CloseHandle(local); }
+      if(initialized) DeleteProcThreadAttributeList(list);
+      if(list!=IntPtr.Zero) Marshal.FreeHGlobal(list); if(parentValue!=IntPtr.Zero) Marshal.FreeHGlobal(parentValue); if(handleList!=IntPtr.Zero) Marshal.FreeHGlobal(handleList);
+      if(parent!=IntPtr.Zero) CloseHandle(parent);
+    }
+  }
+}
+`;

package/dist/windows-codex-relay.js

@@ -1,154 +1,94 @@
-// gpt-connectorのWindows実装をMIT条件で移植。実行時の外部製品依存は持たない。
-// Windowsの起動processと認証付きloopback接続を所有する。JSON-RPC本文は変更しない。
-import { spawn } from "node:child_process";
+// Windowsの認証付きloopback接続と接続情報だけを所有する。起動・stdio中継の契約は共通。
 import { createServer } from "node:net";
-import { createInterface } from "node:readline";
 import { once } from "node:events";
 import { randomBytes, randomUUID } from "node:crypto";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { writeFileSync, rmSync } from "node:fs";
-import { setTimeout as delay } from "node:timers/promises";
 import WebSocket from "ws";
 import { ensurePrivateDirectory, makeFilePrivate } from "./windows-codex-state.js";
 import { readWindowsProcesses } from "./windows-codex-connection.js";
-export function windowsServerArguments(args) {
-    let server = false;
-    const result = [];
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        if (["-c", "--config", "--enable", "--disable"].includes(arg)) {
-            result.push(arg, args[++i]);
-            continue;
-        }
-        if (/^(?:--config=|--enable=|--disable=|-c.)/.test(arg)) {
-            result.push(arg);
-            continue;
-        }
-        if (!server) {
-            if (arg !== "app-server")
-                return null;
-            server = true;
-            result.push(arg);
-            continue;
-        }
-        if (["proxy", "daemon", "start", "stop", "status", "generate-ts", "generate-json-schema", "--help", "-h", "--version", "-V"].includes(arg))
-            return null;
-        if (arg === "--stdio" || arg === "--listen=stdio://")
-            continue;
-        if (arg === "--listen") {
-            if (args[++i] !== "stdio://")
-                throw new Error("stdio以外の接続指定は変更できません");
-            continue;
-        }
-        if (arg.startsWith("--listen=") || arg.startsWith("--ws-"))
-            throw new Error("既存の接続・認証指定は変更できません");
-        result.push(arg);
-    }
-    return server ? result : null;
-}
-export async function runWindowsCodexRelay(binary, root, args) {
-    const serverArgs = windowsServerArguments(args);
-    if (!serverArgs) {
-        const child = spawn(binary, args, { stdio: "inherit", windowsHide: true });
-        return (await once(child, "close"))[0] ?? 1;
-    }
+import { codexServerArguments } from "./codex-relay-arguments.js";
+import { relayCodexStdio } from "./codex-relay-stdio.js";
+export { codexServerArguments as windowsServerArguments } from "./codex-relay-arguments.js";
+export async function prepareWindowsRelay(root, args) {
+    const serverArgs = codexServerArguments(args);
+    if (!serverArgs)
+        return { directory: null, endpoint: null, arguments: args };
     const directory = join(root, randomUUID());
     ensurePrivateDirectory(directory);
-    const file = join(directory, "connection.json");
-    const tokenFile = join(directory, "token");
-    const token = randomBytes(32).toString("hex");
-    writeFileSync(tokenFile, token, { flag: "wx" });
-    makeFilePrivate(tokenFile);
-    // OSが割り当てた空きportを使い、取得競合は公式serverの起動失敗として明示する。
-    const reservation = createServer();
-    reservation.listen(0, "127.0.0.1");
-    await once(reservation, "listening");
-    const port = reservation.address().port;
-    await new Promise((resolve, reject) => reservation.close(error => error ? reject(error) : resolve()));
-    const endpoint = `ws://127.0.0.1:${port}`;
-    const child = spawn(binary, [...serverArgs, "--listen", endpoint, "--ws-auth", "capability-token", "--ws-token-file", tokenFile], {
-        stdio: ["ignore", "ignore", "pipe"], windowsHide: true,
-    });
-    const exited = new Promise(resolve => child.once("close", () => resolve()));
-    let failed;
-    child.on("error", error => { failed = error; });
-    // WebSocketの定型起動案内だけを除き、公式CLIの診断はDesktopへそのまま返す。
-    const diagnostics = createInterface({ input: child.stderr });
-    diagnostics.on("line", line => {
-        if (!/^(?:\s*|codex app-server \(WebSockets\)| {2}(?:listening on:|readyz:|healthz:|note:).*)$/.test(line))
-            process.stderr.write(line + "\n");
-    });
-    let socket;
-    const input = createInterface({ input: process.stdin, crlfDelay: Infinity });
-    const lines = input[Symbol.asyncIterator]();
-    let ending = false;
-    const stop = () => { ending = true; child.kill(); socket?.terminate(); input.close(); process.stdin.destroy(); };
-    input.once("close", stop);
-    process.stdout.once("error", stop);
     try {
-        const deadline = Date.now() + 15_000;
-        while (!socket) {
-            if (failed || child.exitCode !== null || child.signalCode !== null)
-                throw new Error("公式Codexの起動に失敗しました", { cause: failed });
-            const candidate = new WebSocket(endpoint, { headers: { Authorization: `Bearer ${token}` }, handshakeTimeout: 1_000 });
-            try {
-                await once(candidate, "open");
-                socket = candidate;
+        const tokenFile = join(directory, "token");
+        writeFileSync(tokenFile, randomBytes(32).toString("hex"), { flag: "wx" });
+        makeFilePrivate(tokenFile);
+        // port取得後の競合は公式serverの起動失敗として明示する。
+        const reservation = createServer();
+        reservation.listen(0, "127.0.0.1");
+        await once(reservation, "listening");
+        const port = reservation.address().port;
+        await new Promise((resolve, reject) => reservation.close(error => error ? reject(error) : resolve()));
+        const endpoint = "ws://127.0.0.1:" + port;
+        return { directory, endpoint, arguments: [...serverArgs, "--listen", endpoint, "--ws-auth", "capability-token", "--ws-token-file", tokenFile] };
+    }
+    catch (error) {
+        rmSync(directory, { recursive: true, force: true });
+        throw error;
+    }
+}
+export async function serveWindowsRelay(binary, directory, endpoint, serverPid) {
+    if (process.ppid !== serverPid)
+        throw new Error("公式Codexの子として中継を起動してください");
+    const { readFileSync } = await import("node:fs");
+    const token = readFileSync(join(directory, "token"), "utf8");
+    try {
+        await relayCodexStdio({
+            alive: () => { try {
+                process.kill(serverPid, 0);
+                return true;
             }
             catch (error) {
-                candidate.on("error", () => { });
-                candidate.terminate();
-                if (error.code !== "ECONNREFUSED" || Date.now() >= deadline)
-                    throw error;
-                await delay(50);
-            }
-        }
-        const server = readWindowsProcesses().find(row => row.pid === child.pid);
-        if (!server)
-            throw new Error("公式Codexのprocess情報がありません");
-        const record = { schema: "aiterm.windows-relay.v1", serverPid: server.pid, serverStarted: server.started, binary, endpoint };
-        writeFileSync(file, JSON.stringify(record), { flag: "wx" });
-        makeFilePrivate(file);
-        const connected = socket;
-        connected.on("message", (data, binary) => {
-            if (binary) {
-                failed = new Error("公式Codexから予期しないバイナリ応答を受信しました");
-                stop();
-                return;
-            }
-            if (!process.stdout.write(data.toString() + "\n"))
-                connected.pause();
+                if (error.code === "ESRCH")
+                    return false;
+                throw error;
+            } },
+            socket: () => new WebSocket(endpoint, { headers: { Authorization: "Bearer " + token }, handshakeTimeout: 1_000, perMessageDeflate: false }),
+            stop: async () => {
+                // launcherが保持するprocess handleにより、このPIDは終了確認まで再利用されない。
+                try {
+                    process.kill(serverPid);
+                }
+                catch (error) {
+                    if (error.code !== "ESRCH")
+                        throw error;
+                }
+            },
+            connected: () => {
+                const server = readWindowsProcesses().find(row => row.pid === serverPid);
+                if (!server || server.executable.toLowerCase() !== binary.toLowerCase())
+                    throw new Error("公式Codexの起動を確認できません");
+                const record = { schema: "aiterm.windows-relay.v1", serverPid, serverStarted: server.started, binary, endpoint };
+                const file = join(directory, "connection.json");
+                writeFileSync(file, JSON.stringify(record), { flag: "wx" });
+                makeFilePrivate(file);
+            },
         });
-        process.stdout.on("drain", () => connected.resume());
-        connected.on("error", () => { failed = new Error("公式Codexとの接続に失敗しました"); stop(); });
-        connected.on("close", () => { if (!ending) {
-            failed = new Error("公式Codexとの接続が終了しました");
-            stop();
-        } });
-        // initializeが接続準備前に届いても失わないよう、iteratorを接続前から保持する。
-        for await (const line of lines)
-            await new Promise((resolve, reject) => connected.send(line, error => error ? reject(error) : resolve()));
-        if (failed)
-            throw failed;
-        return 0;
     }
     finally {
-        stop();
-        await exited;
-        diagnostics.close();
         rmSync(directory, { recursive: true, force: true });
     }
 }
 if (process.argv[1] === fileURLToPath(import.meta.url)) {
-    const [binary, root, ...args] = process.argv.slice(2);
+    const [mode, ...args] = process.argv.slice(2);
     try {
-        if (!binary || !root)
-            throw new Error("Windows中継の起動指定がありません");
-        process.exitCode = await runWindowsCodexRelay(binary, root, args);
+        if (mode === "--prepare" && args[0])
+            process.stdout.write(JSON.stringify(await prepareWindowsRelay(args[0], args.slice(1))));
+        else if (mode === "--serve" && args.length === 4 && /^[1-9][0-9]*$/.test(args[3]))
+            await serveWindowsRelay(args[0], args[1], args[2], Number(args[3]));
+        else
+            throw new Error("Windows中継の起動指定が不正です");
     }
     catch (error) {
-        process.stderr.write(`aiterm-mcp: ${error instanceof Error ? error.message : "Windows中継が失敗しました"}\n`);
+        process.stderr.write("aiterm-mcp: " + (error instanceof Error ? error.message : "Windows中継が失敗しました") + "\n");
         process.exitCode = 1;
     }
 }

package/dist/windows-codex-setup.js

@@ -1,18 +1,20 @@
 // gpt-connectorのWindows実装をMIT条件で移植。実行時の外部製品依存は持たない。
 // Windows Desktop用の実行file、ユーザー環境変数、親processの接続確認を所有する。
 import { existsSync, readFileSync, writeFileSync, renameSync, readdirSync, rmSync } from "node:fs";
-import { join, dirname } from "node:path";
+import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawnSync } from "node:child_process";
 import { randomUUID, createHash } from "node:crypto";
 import { homedir } from "node:os";
-import { relayConfigDirectory, readRelayConfig } from "./codex-relay-config.js";
+import { relayConfigDirectory } from "./codex-relay-config.js";
 import { SetupError } from "./setup-platform.js";
 import { verifyRelayLauncher } from "./setup-codex-relay.js";
 import { withCodexRelay } from "./codex-relay-client.js";
 import { windowsPowerShellSync, quotePowerShell } from "./windows-codex-state.js";
 import { ensurePrivateDirectory, makeFilePrivate } from "./windows-codex-state.js";
-import { readWindowsRelay, windowsDesktopRelay } from "./windows-codex-connection.js";
+import { windowsDesktopRelay } from "./windows-codex-connection.js";
+import { configureRelay } from "./codex-relay-setup.js";
+import { windowsLauncherSource } from "./windows-codex-launcher.js";
 export function findWindowsCodexCache(resources, cache) {
     // Desktopが展開した4実行fileを配布元と照合する。展開・更新はDesktop自身が所有する。
     const names = ["codex.exe", "codex-code-mode-host.exe", "codex-windows-sandbox-setup.exe", "codex-command-runner.exe"];
@@ -60,48 +62,7 @@ $result = [UIntPtr]::Zero
 [void][AitermEnvironment]::SendMessageTimeout([IntPtr]0xffff, 0x1a, [UIntPtr]::Zero, 'Environment', 2, 5000, [ref]$result)
 `, 10_000);
 }
-export function windowsLauncherSource(node, relay, binary, root) {
-    return `using System;
-using System.Diagnostics;
-using System.Text;
-public static class AitermLauncher {
-  static async System.Threading.Tasks.Task Input(Process child) {
-    var input = Console.OpenStandardInput(); var output = child.StandardInput.BaseStream;
-    var buffer = new byte[8192]; int count;
-    while ((count = await input.ReadAsync(buffer, 0, buffer.Length)) > 0) {
-      await output.WriteAsync(buffer, 0, count); await output.FlushAsync();
-    }
-    child.StandardInput.Close();
-  }
-  static string Quote(string text) {
-    var result = new StringBuilder().Append('"'); int slashes = 0;
-    foreach (char c in text) {
-      if (c == '\\\\') { slashes++; continue; }
-      if (c == '"') { result.Append('\\\\', slashes * 2 + 1); result.Append(c); }
-      else { result.Append('\\\\', slashes); result.Append(c); }
-      slashes = 0;
-    }
-    result.Append('\\\\', slashes * 2); return result.Append('"').ToString();
-  }
-  public static int Main(string[] args) {
-    try {
-      var arguments = new StringBuilder();
-      foreach (var value in new string[] { ${[relay, binary, root].map(value => JSON.stringify(value)).join(", ")} }) arguments.Append(Quote(value)).Append(' ');
-      foreach (var value in args) arguments.Append(Quote(value)).Append(' ');
-      var start = new ProcessStartInfo(${JSON.stringify(node)}, arguments.ToString());
-      start.UseShellExecute = false; start.CreateNoWindow = true;
-      start.RedirectStandardInput = true; start.RedirectStandardOutput = true; start.RedirectStandardError = true;
-      using (var child = Process.Start(start)) {
-        Input(child).ContinueWith(task => { if (task.IsFaulted && !child.HasExited) child.Kill(); });
-        var output = child.StandardOutput.BaseStream.CopyToAsync(Console.OpenStandardOutput());
-        var error = child.StandardError.BaseStream.CopyToAsync(Console.OpenStandardError());
-        child.WaitForExit(); System.Threading.Tasks.Task.WaitAll(output, error); return child.ExitCode;
-      }
-    } catch { Console.Error.WriteLine("aiterm-mcp: Windows中継を起動できません"); return 1; }
-  }
-}
-`;
-}
+export { windowsLauncherSource } from "./windows-codex-launcher.js";
 export function buildWindowsLauncher(directory, source) {
     const digest = createHash("sha256").update(source).digest("hex").slice(0, 16);
     const launcher = join(directory, `codex-${digest}.exe`);
@@ -113,80 +74,38 @@ export function buildWindowsLauncher(directory, source) {
         throw new SetupError("codex_launcher_compiler_unavailable", "Windows標準.NET Frameworkのコンパイラが見つかりません。");
     writeFileSync(sourceFile, source);
     makeFilePrivate(sourceFile);
-    const result = spawnSync(compiler, ["/nologo", "/target:exe", `/out:${launcher}`, sourceFile], { encoding: "utf8", windowsHide: true, timeout: 20_000 });
+    const result = spawnSync(compiler, ["/nologo", "/target:exe", "/reference:System.Runtime.Serialization.dll", `/out:${launcher}`, sourceFile], { encoding: "utf8", windowsHide: true, timeout: 20_000 });
     if (result.status !== 0)
         throw new SetupError("codex_launcher_build_failed", "Windows用のCodex起動fileを作成できません。");
     makeFilePrivate(launcher);
     return launcher;
 }
 async function live(config) {
-    const file = windowsDesktopRelay(config.launcher);
+    const file = windowsDesktopRelay(config.launcher, undefined, config.socket_root);
     if (!file)
         return false;
     await withCodexRelay(file, request => request("thread/loaded/list", { limit: 1 }));
     return true;
 }
+export function windowsCodexRuntime(overrides = {}) {
+    const directory = overrides.directory ?? relayConfigDirectory();
+    const runtime = {
+        directory, socket_root: join(directory, "sessions"), node: process.execPath,
+        relay: fileURLToPath(new URL("./windows-codex-relay.js", import.meta.url)),
+        findBinary: findWindowsCodexBinary, getGui, setGui, verify: verifyRelayLauncher, live,
+        // User環境変数はsetGuiの一操作で永続化される。
+        persist: () => { }, unpersist: () => { }, prepare: ensurePrivateDirectory, save,
+        build: async (binary) => {
+            ensurePrivateDirectory(runtime.socket_root);
+            const launcher = buildWindowsLauncher(runtime.directory, windowsLauncherSource(runtime.node, runtime.relay, binary, runtime.socket_root));
+            await runtime.verify(launcher);
+            return launcher;
+        }, ...overrides,
+    };
+    return runtime;
+}
 export async function configureWindowsCodexSteer(action, overrides = {}) {
-    const runtime = { directory: relayConfigDirectory(), node: process.execPath,
-        relay: fileURLToPath(new URL("./windows-codex-relay.js", import.meta.url)), findBinary: findWindowsCodexBinary, getGui, setGui,
-        verify: verifyRelayLauncher, live,
-        shared: async (launcher) => {
-            const file = windowsDesktopRelay(launcher);
-            if (!file)
-                return null;
-            await withCodexRelay(file, request => request("thread/loaded/list", { limit: 1 }));
-            return { binary: readWindowsRelay(file).binary, root: dirname(dirname(file)) };
-        }, ...overrides };
-    const previous = readRelayConfig(runtime.directory);
-    const current = runtime.getGui("CODEX_CLI_PATH");
-    if (action === "status") {
-        if (!previous?.enabled)
-            return { status: "disabled" };
-        if (current !== previous.launcher)
-            return { status: "failed", reason_code: "codex_steer_configuration_changed" };
-        return await runtime.live(previous) ? { status: "ready" } : { status: "restart_required", reason_code: "codex_restart_required" };
-    }
-    if (action === "disable") {
-        if (!previous?.enabled)
-            return { status: "disabled" };
-        if (current !== previous.launcher)
-            throw new SetupError("codex_steer_configuration_changed", "変更されたCodex起動設定は上書きしません。");
-        if (previous.launcher !== previous.previous_cli_path)
-            runtime.setGui("CODEX_CLI_PATH", previous.previous_cli_path);
-        if (runtime.getGui("CODEX_CLI_PATH") !== previous.previous_cli_path)
-            throw new SetupError("codex_steer_readback_failed", "元の起動設定を確認できません。");
-        save(runtime.directory, { ...previous, enabled: false });
-        return { status: "restart_required", reason_code: "codex_restart_required" };
-    }
-    if (previous?.enabled && previous.launcher !== previous.previous_cli_path && ![previous.launcher, previous.previous_cli_path].includes(current)) {
-        throw new SetupError("codex_steer_configuration_changed", "変更されたCodex起動設定は上書きしません。");
-    }
-    if (current && (current !== previous?.launcher || previous.launcher === previous.previous_cli_path)) {
-        const shared = await runtime.shared(current);
-        if (!shared)
-            throw new SetupError("codex_steer_configuration_conflict", "別のCodex起動設定との互換接続を確認できないため変更していません。");
-        ensurePrivateDirectory(runtime.directory);
-        save(runtime.directory, { schema: "aiterm.codex-relay.v1", enabled: true, binary: shared.binary,
-            node: runtime.node, launcher: current, socket_root: shared.root, previous_cli_path: current });
-        return { status: "ready" };
-    }
-    for (const key of ["CODEX_APP_SERVER_WS_URL", "CODEX_APP_SERVER_USE_LOCAL_DAEMON", "CODEX_APP_SERVER_FORCE_CLI"]) {
-        if (runtime.getGui(key))
-            throw new SetupError("codex_steer_configuration_conflict", `${key}が設定されているため変更していません。`);
-    }
-    ensurePrivateDirectory(runtime.directory);
-    const binary = runtime.findBinary();
-    const root = join(runtime.directory, "sessions");
-    ensurePrivateDirectory(root);
-    const launcher = buildWindowsLauncher(runtime.directory, windowsLauncherSource(runtime.node, runtime.relay, binary, root));
-    await runtime.verify(launcher);
-    const config = { schema: "aiterm.codex-relay.v1", enabled: true, binary, node: runtime.node, launcher,
-        socket_root: root, previous_cli_path: previous?.enabled && previous.launcher !== previous.previous_cli_path ? previous.previous_cli_path : current };
-    save(runtime.directory, config);
-    runtime.setGui("CODEX_CLI_PATH", launcher);
-    if (runtime.getGui("CODEX_CLI_PATH") !== launcher)
-        throw new SetupError("codex_steer_readback_failed", "WindowsのCodex起動設定を確認できません。");
-    return await runtime.live(config) ? { status: "ready" } : { status: "restart_required", reason_code: "codex_restart_required" };
+    return configureRelay(action, windowsCodexRuntime(overrides));
 }
 function save(directory, config) {
     const file = join(directory, `${randomUUID()}.tmp`);

package/docs/DESIGN.md

@@ -68,7 +68,7 @@ Cursorのsubmitはadapterがextended keyboard protocolのEnterへ変換し、呼
 宛先はCodexのMCP handshakeと各要求の`_meta.threadId`から取得する。modelが指定したIDや環境変数で代用しない。
 単品導入の`src/codex-parent-receiver.ts`は同じ`CODEX_HOME`の公式app-serverへstdioで接続し、
 `thread/read`と`thread/queue/list`で宛先を確認してから`thread/queue/add`へ本文をJSONで渡す。
-Steerを選択したmacOS Desktopでは、MCP processの祖先にある公式App Serverの本人所有socketへ接続する。
+Steerを選択したmacOS・Windows Desktopでは、MCP processの祖先にある公式App Serverの本人専用接続へ接続する。
 `thread/loaded/list`と`thread/read`で同じ親を確認し、公式`turn/start`へ一度だけ送る。
 公式の`start_or_steer_turn`が実行中なら同じturnへ追加入力し、終了後なら同じtaskの次turnを開始する。
 状態を読んでから送信方法を選ぶraceや再送は作らない。model・権限のoverrideも渡さない。
@@ -84,17 +84,20 @@ macOSのユーザーLaunchAgentはログイン時に同じ起動設定を適用
 保存した元の`CODEX_CLI_PATH`へ戻す。他から変更された設定は上書きしない。
 `status=ready`は公式binary・Desktopの直接子・同じsocketのRPC応答を確認した場合だけ返す。
 初回の設定保存後は`restart_required`であり、Desktopの完全終了・再起動を要する。
-WindowsはAitermのnative launcherからNode中継と公式Desktop CLIを起動し、通常の親子関係を保つ。
-Windows標準の.NET Frameworkでlauncherを作り、引数とstdioをそのまま中継する。
+引数の解釈、JSONL中継、設定の有効化・競合・復元は両OSで共通の処理を使う。
+Windows標準の.NET Frameworkでlauncherを作り、`CreateProcessW`の親process属性と継承handle一覧で、
+公式CLIをDesktopの直接の子、中継Nodeを公式CLIの直接の子として起動する。
+launcherは終了監視だけを担い、JSON-RPCを通さない。Windowsには同一PIDでのexecがないためPIDは変わるが、
+公式binary、起動元との直接の親子関係、通常の環境とstdioは維持する。
 公式Desktopが展開した4実行ファイルを配布元のSHA-256と照合し、AitermがCodexをコピー・再配布しない。
 公式CLIの認証付きloopback WebSocketを使い、本人専用ACLのtokenと接続記録をAitermのsessions下へ置く。
 Windowsのprocess情報はprocess-runtimeが所有し、接続はPID・開始時刻・実行ファイル・token引数で照合する。
 MCP processの祖先から親を選び、同じloaded taskへ送る。開始時刻は小数桁の表記差を正規化して比較する。
-stdio EOFで自分が起動した公式serverを停止し、接続記録を削除する。
-既存の互換launcherは公式serverからlauncherとDesktopへの祖先関係、ACL、RPCが成立した場合だけ共有する。
-対応する接続記録はaiterm.windows-relay.v1とgpt-connector.windows-relay.v1で、後者もAiterm内で解釈する。
-共有時はlauncherとprevious_cli_pathを同値で記録し、enableとdisableで所有外の起動設定を変更しない。
-接続共有は任意であり、他製品のコード・設定・コマンドはAiterm単独導入の前提にならない。
+stdio EOFで自分が起動した公式serverを停止し、接続記録を削除する。native launcherはJob Objectで
+所有するprocessだけを終了し、公式serverの終了確認後に戻る。
+両OSとも有効化前に元の起動設定を保存し、Aitermのlauncherを設定する。解除は元の値へ戻す。
+旧Windows版で既存launcherを共有した設定は読取り可能だが、次のenableでAitermのlauncherへ移行する。
+起動・配送・設定・診断は他製品のコード、設定、コマンドへ依存しない。
 LinuxのSteer選択はunsupportedとする。通常の単品導入・queue配送は全対応OSで維持する。
 
 単品導入のqueue配送は親の実行中turnを中断せず、親がidleになった後に処理される。

package/docs/RELEASE.md

@@ -41,7 +41,7 @@ Codex Steerを変更した場合は、公式バイナリを指定した`test/cod
 再起動後の`aiterm-setup --codex-steer status`が`ready`であることと、通常の親からの子の回答配送を確認する。
 接続があるだけで成功とせず、公式binaryとDesktopの親子関係まで確認する。
 Windowsは`AITERM_TEST_CODEX_BINARY`に公式Desktopの実行fileを指定し、
-`test/windows-codex.test.mjs`で単独launcher、ACL、親識別、既存接続共有、設定解除も確認する。
+`test/windows-codex.test.mjs`で単独launcher、ACL、親識別、元の起動設定の保存と解除も確認する。
 同じ環境変数で`test/codex-relay-official.test.mjs`の実行中Steer・終了後再開・承認中継・EOFを確認できる。
 Linuxの未対応Steer選択が理由付きで停止することもCIで確認する。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.37.1",
+  "version": "0.37.2",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent terminal MCP with one harness-based launcher for Claude Code, Codex CLI, Grok CLI, and Cursor Agent CLI, plus durable PTYs for SSH, containers, and REPLs.",
   "keywords": [