aiterm-mcp 0.37.9 → 0.38.0

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.38.0] - 2026-09-22
+
+### 追加
+
+- Cursor親（`cursor-vscode`）へ子の回答を自動配送する。`aiterm-setup`が`~/.cursor/hooks.json`へ`afterMCPExecution`と`postToolUse`を追加し、作業中は次のツール返りへ`additional_context`で本文を差し込む。ターンを終える前にreceiptの`wait_process`を背景で起動すると、idle中の完了でも受け口が本文を出して起きる。hook未登録は送信前に`CURSOR_PARENT_HOOK_UNAVAILABLE`で止める。解除は`aiterm-setup --remove-cursor-parent-hooks`。Codex／Claude Codeの配送契約は変えない。
+
+## [0.37.10] - 2026-09-21
+
+### 修正
+
+- Codex 0.155.1 の「Approaching rate limits」model切替dialogを専用に認識する。通常の`pty_send`と`agent_configure`は同じsessionで一時的な「Keep current model」だけを選び、入力受付を再確認してから進める。model変更と今後の表示抑止は選ばない。復旧不能時はtyped errorで本文・設定変更を送らない。
+
 ## [0.37.9] - 2026-09-21
 
 ### 修正
@@ -1726,7 +1738,9 @@ prototype (preserved under `prototype/python/` as the porting source and referen
   `ubuntu-latest` for Node 18/20/22, publishing to npm on `v*` tags with
   provenance.
 
-[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.9...HEAD
+[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.38.0...HEAD
+[0.38.0]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.10...v0.38.0
+[0.37.10]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.9...v0.37.10
 [0.37.9]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.8...v0.37.9
 [0.37.8]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.7...v0.37.8
 [0.37.7]: https://github.com/kitepon/aiterm-mcp/compare/v0.37.6...v0.37.7

package/README.ja.md

@@ -202,7 +202,7 @@ runtime-error store は canonical dotagents config の `collection.enabled: true
 場合だけ収集し、既定OFF、network送信は行いません。tag起点CIのnpm provenance（OIDC Trusted
 Publishing）で公開し、GitHub Release が Official MCP Registry を再登録します。
 
-**状態:** 開発継続中 · 現行公開版 **v0.37.9** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
+**状態:** 開発継続中 · 現行公開版 **v0.38.0** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
 
 ### 更新と巻き戻し
 
@@ -250,6 +250,8 @@ Grok／Composerがread-only sandboxの適用を拒否した場合、prompt送信
 
 この判定はGrok専用アダプターが所有し、同じCLIを使うComposerにも適用する。初回prompt付きの`agent_launch`と通常の`pty_send`で、入力受付待ち中に拒否を検出すると未送信のエラーを返す。promptなし・`trust_project`指定なしの起動応答は入力受付を保証しない。`trust_project:true`では入力受付まで確認し、`startup.status`を返す。Grokのprivacy notice起動設定も同アダプターが所有する。実装の責務分担は[DESIGN](docs/DESIGN.md#failure-and-recovery)を参照。
 
+Codex 0.155.1の「Approaching rate limits」model切替dialogは、通常の`pty_send`と`agent_configure`で同じsessionのまま一時的な**2. Keep current model**だけを選ぶ。入力受付を再確認してから本文または設定変更を進め、dispatch receiptの`pane_input_recovery`には`codex_rate_limit_model_switch_kept_current`を記録する。model切替と今後の表示抑止は選ばない。入力受付へ戻らなければ`CODEX_RATE_LIMIT_MODEL_SWITCH_RECOVERY_FAILED`となり、本文・設定変更は未送信。このdialogは`agent_approval`の対象ではなく、inspectは`reason="rate_limit_model_switch"`だけを返し、prompt digestとchoicesを出さない。
+
 ```text
 agent_launch({ harness: "codex-cli", session_name: "codex1", cwd: "/repo",
               prompt: "port test/legacy.py to vitest",
@@ -548,11 +550,11 @@ SSH先がPowerShellの場合、`mark:true`は現在の標準`PS ...>`プロン
 
 `pty_read({ wait: true })`は通常PTYを、process終了／`mark:true` sentinel／`until`一致／shell復帰を伴う出力静止／timeoutの5層で判定する。agent sessionは第6の正確な層を使い、Codexは通常rollout、Grokは通常session event、Claudeはlaunch相関Stop event、Cursorは通常agent transcriptの`turn_ended`を`aiterm-wait --cursor`が観測する。親はブロックもポーリングもしない。
 
-### Codex／Claude Code親への回答自動配送
+### Codex／Claude Code／Cursor親への回答自動配送
 
 Codex／Claude Codeから子を起動・通常dispatchした後は、別作業へ進むか親のturnを終了するだけでよい。Aitermが完了を観測し、加工前の回答を保存して親へ届ける。waiter、`pty_read`による回答回収、子への送信指示は不要。子は全対応harnessから選べる。
 
-自動配送時はreceiptに`parent_delivery`が付き、`wait_process`／`wait_command`はnullになる。`pty_observe`の`parent_deliveries`で`waiting`、`ready`、`sending`、`submitted`、`failed`、`unknown`を確認できる。`submitted`はCodexの公式受信口での受付またはClaudeのhookへの本文出力を示し、modelの読了ではない。MCP再接続後は未送信の記録を再開し、送信中に接続が切れて結果が分からない場合は本文を保持して`unknown`とする。自動再送はしない。
+Codex／Claude Codeの自動配送ではreceiptに`parent_delivery`が付き、`wait_process`／`wait_command`はnullになる。`pty_observe`の`parent_deliveries`で`waiting`、`ready`、`sending`、`submitted`、`failed`、`unknown`を確認できる。`submitted`はCodexの公式受信口での受付またはClaudeのhookへの本文出力を示し、modelの読了ではない。MCP再接続後は未送信の記録を再開し、送信中に接続が切れて結果が分からない場合は本文を保持して`unknown`とする。自動再送はしない。
 
 単品導入のCodexにはMCPの`_meta.threadId`と公式`thread/queue` APIが必要で、Codex CLI 0.154.0で確認している。`aiterm-setup`はインストールされた公式queue入口を確認し、各dispatchでは実際の親threadの受入可否を確認する。Codexのnative sub-agentは外部からのqueue入力を拒否するため、自動配送の親としては未対応。
 
@@ -562,6 +564,8 @@ Claude Codeは2.1.259以上の対話sessionに対応する。`aiterm-setup`が
 
 hookを持たない旧版へ戻す時は、install前に`aiterm-setup --remove-claude-parent-hooks`を実行する。Aiterm専用hookだけを解除し、他製品のhookと設定は保持する。
 
+Cursor親（`clientInfo.name`が`cursor-vscode`）も同じ完了観測と本文保存を使う。`aiterm-setup`が`~/.cursor/hooks.json`へ`afterMCPExecution`と`postToolUse`を追加し、他製品のhookと順序は保持する。hookが無い場合は子への送信前に`CURSOR_PARENT_HOOK_UNAVAILABLE`で止める。作業を続けていれば次のツール返りへ`additional_context`で本文が差し込まれ、ターンを終える前にreceiptの`wait_process`を背景で起動しておけばidle中の完了でも起きられる。`wait_command`はnull。`submitted`はhookまたは受け口が本文を受け取った状態であり、modelの読了ではない。24時間以内に受け取りが無ければ`failed`とし、本文は残して自動再送しない。解除は`aiterm-setup --remove-cursor-parent-hooks`。Cursor Cloud Agent／Background Agentはこの受信契約に含めない。
+
 Claudeをリンク経由の`cwd`から起動した場合も、実体パスに対応する会話記録を参照する。
 
 

package/README.md

@@ -216,7 +216,7 @@ collection is off by default and performs no network I/O. It ships via
 tag-triggered CI with npm provenance (OIDC Trusted Publishing); the GitHub
 Release re-registers the Official MCP Registry entry.
 
-**Status:** actively maintained · current public release **v0.37.9** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
+**Status:** actively maintained · current public release **v0.38.0** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
 
 ### Update and rollback
 
@@ -270,6 +270,8 @@ Grok／Composerがread-only sandboxの適用を拒否した場合、prompt送信
 
 この判定はGrok専用アダプターが所有し、同じCLIを使うComposerにも適用する。初回prompt付きの`agent_launch`と通常の`pty_send`で、入力受付待ち中に拒否を検出すると未送信のエラーを返す。promptなし・`trust_project`指定なしの起動応答は入力受付を保証しない。`trust_project:true`では入力受付まで確認し、`startup.status`を返す。Grokのprivacy notice起動設定も同アダプターが所有する。実装の責務分担は[DESIGN](docs/DESIGN.md#failure-and-recovery)を参照。
 
+Codex 0.155.1の「Approaching rate limits」model切替dialogは、通常の`pty_send`と`agent_configure`で同じsessionのまま一時的な**2. Keep current model**だけを選ぶ。入力受付を再確認してから本文または設定変更を進め、dispatch receiptの`pane_input_recovery`には`codex_rate_limit_model_switch_kept_current`を記録する。model切替と今後の表示抑止は選ばない。入力受付へ戻らなければ`CODEX_RATE_LIMIT_MODEL_SWITCH_RECOVERY_FAILED`となり、本文・設定変更は未送信。このdialogは`agent_approval`の対象ではなく、inspectは`reason="rate_limit_model_switch"`だけを返し、prompt digestとchoicesを出さない。
+
 For a correlated Claude turn stopped at `Do you want to proceed?`, use `claude_approval(action: "inspect", ...)` to capture the active operation and SHA-256 screen digest, review the displayed command, then call `respond` with that exact digest and either `approve_once` or `deny`. The relay rechecks the operation and screen under the send lock, never exposes arbitrary input or permanent approval, keeps the active marker intact, and records a prompt-free owner-only receipt. `pty_send(force: true)` does not bypass this boundary.
 
 ```text
@@ -585,9 +587,9 @@ For PowerShell over SSH, `mark:true` recognizes the current standard `PS ...>` p
 
 ### Completion push for parent agents (`aiterm-wait`)
 
-**Codex／Claude Code親には子の回答本文が自動で届く。** 子を起動・dispatchした後は、別作業へ進むか親のturnを終える。Aitermが完了を観測し、加工前の本文を保存して親へ渡す。waiter、`pty_read`による回答回収、子への返送指示は不要。子は全対応harnessから選べる。
+**Codex／Claude Code／Cursor親には子の回答本文が自動で届く。** Codex／Claude Codeでは、子を起動・dispatchした後は別作業へ進むか親のturnを終える。Aitermが完了を観測し、加工前の本文を保存して親へ渡す。waiter、`pty_read`による回答回収、子への返送指示は不要。子は全対応harnessから選べる。
 
-自動配送のreceiptには`parent_delivery`が付き、`wait_process`／`wait_command`はnullになる。`pty_observe`の`parent_deliveries`で`waiting`、`ready`、`sending`、`submitted`、`failed`、`unknown`を確認できる。`submitted`はCodexの公式受信口での受付またはClaudeのhookへの本文出力を示し、modelの読了ではない。MCP再接続後は未送信の記録を再開し、出力中断で結果が分からない場合は本文を保持して`unknown`とする。自動再送はしない。
+Codex／Claude Codeの自動配送ではreceiptに`parent_delivery`が付き、`wait_process`／`wait_command`はnullになる。`pty_observe`の`parent_deliveries`で`waiting`、`ready`、`sending`、`submitted`、`failed`、`unknown`を確認できる。`submitted`はCodexの公式受信口での受付またはClaudeのhookへの本文出力を示し、modelの読了ではない。MCP再接続後は未送信の記録を再開し、出力中断で結果が分からない場合は本文を保持して`unknown`とする。自動再送はしない。
 
 For queue delivery, use a Codex runtime that supplies MCP `_meta.threadId` and the official `thread/queue` API (verified with Codex CLI 0.154.0). `aiterm-setup` checks the installed queue entry point; Aiterm verifies the requesting thread before each dispatch. Codex native sub-agents reject external queue input and cannot be automatic-delivery parents. Steer相当の選択時も公式キューへ投入し、専用hookが同一ターンへ取り込みます。
 
@@ -597,6 +599,8 @@ Claude Codeは2.1.259以上の対話sessionに対応する。`aiterm-setup`が
 
 hookを持たない旧版へ戻す時は、install前に`aiterm-setup --remove-claude-parent-hooks`を実行する。Aiterm専用hookだけを解除し、他製品のhookと設定は保持する。
 
+Cursor parents (`clientInfo.name` of `cursor-vscode`) use the same completion capture. `aiterm-setup` adds `afterMCPExecution` and `postToolUse` to `~/.cursor/hooks.json` and keeps every other hook and its position. A missing registration fails the dispatch with `CURSOR_PARENT_HOOK_UNAVAILABLE` before the child is sent. While the parent keeps calling tools, the answer is injected through `additional_context` on the next tool result. If the parent ends the turn, start the receipt `wait_process` in the background first; that receiver exits when the answer arrives. `wait_command` is null. `submitted` means the hook or the receiver claimed the text, not that the model has read it. No claim within 24 hours is `failed`, the text is kept, and nothing is resent. Remove only Aiterm's entries with `aiterm-setup --remove-cursor-parent-hooks`. Cursor Cloud Agents and Background Agents are outside this contract.
+
 Claudeをリンク経由の`cwd`から起動した場合も、実体パスに対応する会話記録を参照する。
 
 **For other parent hosts**, dispatch and start the receipt's waiter in a separate process:

package/dist/agent-shared.js

@@ -113,6 +113,46 @@ export function ensureStateRoot() {
 export function agentsDir() {
     return path.join(ensureStateRoot(), "agents");
 }
+/** directory内の状態変化を待つ。inspectが値を返した時点でresolveする。timeoutMsを省くと期限なし。 */
+export function waitForFileState(dir, inspect, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        let finished = false;
+        let timer;
+        let timeout;
+        const watcher = fs.watch(dir, () => check());
+        const finish = (error, value) => {
+            if (finished)
+                return;
+            finished = true;
+            watcher.close();
+            if (timer)
+                clearInterval(timer);
+            if (timeout)
+                clearTimeout(timeout);
+            if (error)
+                reject(error);
+            else
+                resolve(value);
+        };
+        const check = () => {
+            if (finished)
+                return;
+            try {
+                const value = inspect();
+                if (value !== undefined)
+                    finish(null, value);
+            }
+            catch (error) {
+                finish(error);
+            }
+        };
+        watcher.on("error", error => finish(error));
+        timer = setInterval(check, 5000);
+        if (timeoutMs !== undefined)
+            timeout = setTimeout(() => finish(new Error("WAIT_FOR_FILE_TIMEOUT")), timeoutMs);
+        check();
+    });
+}
 export function agentEventPath(name, launchId) {
     assertSessionName(name);
     if (!LAUNCH_ID_RE.test(launchId))

package/dist/claude-parent-receiver.js

@@ -2,7 +2,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { z } from "zod";
-import { ensureStateRoot, writeJson0600 } from "./agent-shared.js";
+import { ensureStateRoot, waitForFileState, writeJson0600 } from "./agent-shared.js";
 import { readRuntimeProcesses } from "./process-runtime.js";
 import { AitermError } from "./errors.js";
 const requestId = z.string().regex(/^[A-Za-z0-9_-]{1,160}$/);
@@ -99,41 +99,6 @@ export function closeClaudeParentSession(input, root = defaultRoot()) {
             writeJson0600(path.join(root, entry.name, "closed.json"), { session_id });
     }
 }
-// filesystemの通知を先に登録してから状態を読む。producerの終了は低頻度のprocess照合でも検出する。
-function waitForFileState(dir, inspect) {
-    return new Promise((resolve, reject) => {
-        let finished = false;
-        let timer;
-        const watcher = fs.watch(dir, () => check());
-        const finish = (error, value) => {
-            if (finished)
-                return;
-            finished = true;
-            watcher.close();
-            if (timer)
-                clearInterval(timer);
-            if (error)
-                reject(error);
-            else
-                resolve(value);
-        };
-        const check = () => {
-            if (finished)
-                return;
-            try {
-                const value = inspect();
-                if (value !== undefined)
-                    finish(null, value);
-            }
-            catch (error) {
-                finish(error);
-            }
-        };
-        watcher.on("error", error => finish(error));
-        timer = setInterval(check, 5000);
-        check();
-    });
-}
 function assertParentAlive(invocation) {
     if (processIdentity(invocation.parent_pid) !== invocation.parent_started_identity) {
         throw new ClaudeDeliveryError("CLAUDE_PARENT_PROCESS_CLOSED", "依頼元のClaude processは終了しました。回答は保存したままです");

package/dist/core.js

@@ -19,7 +19,7 @@ import { AitermError, telemetryOwnedFailure, ownTelemetryFailure } from "./error
 import { isWin, SOCKDIR, tmuxCommand, sendPsmuxPayload, loadPtyBufferChunk, pasteBufferBaseArgs, TMUX_EMPTY_CONFIG, attachCommand, normalizePaneCommand, atomicShellMultiline, appendMarkSentinel, markShellCommand, settlePaneLog, paneCwdArgument, sessionEnvironmentLaunch, } from "./tmux-runtime.js";
 import { sleep, currentUid, runtimeStateBase, safeStatSize, readFileRange, writeJson0600, createEmpty0600, shq, LAUNCH_ID_RE, AGENT_DONE_POLL_MS, AGENT_EVENT_MAX_BYTES, assertSessionName, agentsDir, agentEventPath, agentMetadataPath, writeAgentMetadata, AGENT_EVENT_TAIL_BYTES, agentLabel, agentHarness, subagentInstruction, agentLineageFields, } from "./agent-shared.js";
 import { GROK_MODEL_DEFAULTS, realGrokHome, resolveAndValidateGrokAuth, assertGrokModelAvailable, grokEventsTranscript, latestGrokCompletion, observeGrokDone, buildGrokAgentCmd, grokLaunchNote, grokEnvTokens, grokTuiReady, grokTuiBusy, grokPaneObservation, grokRateLimitDialog, grokStartupAction, grokLaunchBlockingDialog, assertGrokSandboxNotRejected, GROK_COMPOSER_MARKER_RE, grokFooterHasConfiguration, grokTranscriptText, createGrokAgentMetadata, } from "./harnesses/grok.js";
-import { bindCodexTranscriptSession, latestCodexCompletion, observeCodexDone, buildCodexAgentCmd, codexLaunchNote, codexTuiReady, codexPaneObservation, codexApprovalDialog, codexStartupAction, CODEX_COMPOSER_MARKER_RE, codexModelChoice, codexEffortChoice, codexMoreReasoningChoice, codexTranscriptText, createCodexAgentMetadata, } from "./harnesses/codex.js";
+import { bindCodexTranscriptSession, latestCodexCompletion, observeCodexDone, buildCodexAgentCmd, codexLaunchNote, codexTuiReady, codexPaneObservation, codexRateLimitModelSwitchDialog, codexApprovalDialog, codexStartupAction, CODEX_COMPOSER_MARKER_RE, codexModelChoice, codexEffortChoice, codexMoreReasoningChoice, codexTranscriptText, createCodexAgentMetadata, } from "./harnesses/codex.js";
 import { OPERATION_ID_RE, CLAUDE_RESULT_MAX_BYTES, CLAUDE_EFFORTS, agentManagedClaudeSettingsPath, agentClaudeResultPath, agentClaudeOperationPath, agentClaudeApprovalReceiptPath, agentClaudeDispatchReceiptPath, validateOperationId, readClaudeResultText, assertClaudeAuthenticationReady, buildClaudeAgentCmd, claudeLaunchNote, claudeTuiReady, claudePaneObservation, claudeStartupAction, CLAUDE_COMPOSER_MARKER_RE, createClaudeAgentMetadata, claudeSessionTranscriptPath, claudeApiErrorFromLine, } from "./harnesses/claude.js";
 import { bindCursorTranscriptSession, cursorTurnBoundary, latestCursorCompletion, observeCursorDone, cursorTranscriptText, assertCursorAuthenticationReady, assertCursorModelAvailable, buildCursorAgentCmd, cursorPromptWithLineage, createCursorAgentMetadata, cursorLaunchNote, cursorEffortNavigation, cursorTuiReady, cursorPaneObservation, CURSOR_SUBMIT_SEQUENCE, CURSOR_COMPOSER_CONTENT_MARKER_RE, validateCursorModelEffort, } from "./harnesses/cursor.js";
 import { resolveAgentBin, resolveThroughlineBin, runThroughlineHandoffContext, isWindowsNativeExecutable, agentBinForPaneShell, resolveWinPaneShell } from "./agent-resolver.js";
@@ -1414,7 +1414,7 @@ export function runAgentApproval(options) {
         const dialog = codexApprovalDialog(screen);
         if (!dialog) {
             result.status = state.state === "blocked" || state.state === "unknown" || action === "respond" ? "blocked" : "none";
-            result.reason = state.state === "blocked" ? "unknown_dialog" : state.state === "unknown" ? "unrecognized_screen" : "no_current_dialog";
+            result.reason = state.state === "blocked" ? state.reason : state.state === "unknown" ? "unrecognized_screen" : "no_current_dialog";
             return result;
         }
         result.kind = dialog.kind;
@@ -2556,7 +2556,13 @@ export function agentWaitProcess(session, cursor, runtime = {}) {
 // 親ホストの識別（MCP initialize の clientInfo.name）。配送の可否はMCP入口が検証し、ここは案内だけを作る。
 let parentClientName = null;
 function autoDeliveryParent() {
-    return parentClientName === "codex-mcp-client" ? "Codex" : parentClientName === "claude-code" ? "Claude Code" : null;
+    if (parentClientName === "codex-mcp-client")
+        return "Codex";
+    if (parentClientName === "claude-code")
+        return "Claude Code";
+    if (parentClientName === "cursor-vscode" || parentClientName?.startsWith("cursor-vscode "))
+        return "Cursor";
+    return null;
 }
 export function setParentClient(name) {
     const trimmed = typeof name === "string" ? name.trim() : "";
@@ -2573,6 +2579,11 @@ export function agentWaitLaunchForm(command) {
 // dispatch / 起動時 prompt 送信後の共通案内。第一文で「待たない」を宣言し、待ち方は後段に置く。
 export function agentDispatchGuide(session, cursor) {
     const parent = autoDeliveryParent();
+    if (parent === "Cursor") {
+        return "回答はこの会話へ自動で届く。作業を続ければ次のツール返りに差し込まれる。" +
+            "ターンを終える前にreceiptのwait_processを背景（block_until_ms: 0）で起動しておけば、idle中に完了しても起きられる。" +
+            "ポーリング・pty_read(agent_transcript:true)は不要。";
+    }
     if (parent) {
         return `回答本文はAitermがこの${parent}親へ自動配送する。wait起動・ポーリング・通常の回答回収は不要。` +
             "親は作業を続けるかターンを終え、順番待ちから届く子の回答で続行する。";
@@ -2585,6 +2596,8 @@ export function agentDispatchGuide(session, cursor) {
 // 未完了 session へ触った時の共通案内。ここでも待つのは waiter プロセスであって親ではない。
 export function agentWaitGuide(session) {
     const parent = autoDeliveryParent();
+    if (parent === "Cursor")
+        return "回答はこの会話へ届く。完了通知はreceiptのwait_processを背景で起動して受ける。ポーリングは不要。";
     if (parent)
         return `回答本文はこの${parent}親へ自動配送される。親は作業を続けるかターンを終える。`;
     const cmd = `aiterm-wait --session ${session ?? "<session_id>"} --cursor 0`;
@@ -3242,6 +3255,31 @@ function sendMenuChoice(name, choice) {
         throw new AitermError(`agent設定の選択を送れませんでした: ${sent.stderr.trim() || `code=${sent.code}`}`, 2);
     }
 }
+/** Codexの上限接近modalは承認APIへ出さず、一時keepの2だけを選んで共通ready gateへ戻す。 */
+async function recoverCodexRateLimitModelSwitch(name, meta) {
+    const dialog = meta.kind === "codex"
+        ? codexRateLimitModelSwitchDialog(captureScreen(name, AGENT_TUI_READY_LINES))
+        : null;
+    if (!dialog)
+        return false;
+    const live = observeSession(name);
+    if (live.harness_alive !== true) {
+        throw new AitermError(`CODEX_RATE_LIMIT_MODEL_SWITCH_RECOVERY_BLOCKED: ${live.reason}。今回の文字列は送信していません。`, 2);
+    }
+    sendMenuChoice(name, String(dialog.keepCurrentIndex));
+    return true;
+}
+/** ready待機中に現れたCodex利用上限modalも、同じ一時keep復旧へ戻す。 */
+async function waitAgentTuiReadyAfterCodexRateLimitRecovery(name, meta, timeoutMs) {
+    let codexRateLimitModelSwitch = await recoverCodexRateLimitModelSwitch(name, meta);
+    let ready = await waitAgentTuiReady(name, meta, timeoutMs);
+    if (!ready.ready && !codexRateLimitModelSwitch) {
+        codexRateLimitModelSwitch = await recoverCodexRateLimitModelSwitch(name, meta);
+        if (codexRateLimitModelSwitch)
+            ready = await waitAgentTuiReady(name, meta, timeoutMs);
+    }
+    return { ready, codexRateLimitModelSwitch };
+}
 /** 同じ対話sessionを保ったまま、harness標準の操作でmodel／effortを変更する。 */
 export async function configureAgent(name, opts) {
     assertSessionName(name);
@@ -3254,9 +3292,13 @@ export async function configureAgent(name, opts) {
     }
     const meta = loadAgentMetadata(name);
     bindCompletedInitialPrompt(meta);
-    const ready = await waitAgentTuiReady(name, meta, AGENT_TUI_READY_TIMEOUT_MS);
-    if (!ready.ready)
+    const { ready, codexRateLimitModelSwitch } = await waitAgentTuiReadyAfterCodexRateLimitRecovery(name, meta, AGENT_TUI_READY_TIMEOUT_MS);
+    if (!ready.ready) {
+        if (codexRateLimitModelSwitch) {
+            throw new AitermError(`CODEX_RATE_LIMIT_MODEL_SWITCH_RECOVERY_FAILED: ${codexPaneObservation(ready.lastScreen).reason}。設定変更は送信していません。`, 2);
+        }
         throw new AitermError(`agent session '${name}' は入力待ちではありません`, 2);
+    }
     if (meta.kind === "claude") {
         if (model) {
             await sendAgentPromptText(name, `/model ${model}`);
@@ -3441,6 +3483,7 @@ export async function dispatchAgentTurn(name, text, o = {}) {
         && agentCompletionCursor(meta) === 0
         && readClaudeOperationMarker(meta) === null;
     const paneInputRecovery = await ensureAgentOwnsPaneInput(name, meta.kind);
+    let codexRateLimitModelSwitch = false;
     const limitDialog = meta.kind === "grok" || meta.kind === "composer"
         ? grokRateLimitDialog(captureScreen(name, 0)) : null;
     if (limitDialog) {
@@ -3453,8 +3496,13 @@ export async function dispatchAgentTurn(name, text, o = {}) {
         sendKey(name, limitDialog.dismissKey);
     }
     if (meta.kind !== "claude" || claudeColdStart) {
-        const ready = await waitAgentTuiReady(name, meta, o.ready_timeout ?? AGENT_TUI_READY_TIMEOUT_MS);
+        const recovery = await waitAgentTuiReadyAfterCodexRateLimitRecovery(name, meta, o.ready_timeout ?? AGENT_TUI_READY_TIMEOUT_MS);
+        codexRateLimitModelSwitch = recovery.codexRateLimitModelSwitch;
+        const { ready } = recovery;
         if (!ready.ready) {
+            if (codexRateLimitModelSwitch) {
+                throw new AitermError(`CODEX_RATE_LIMIT_MODEL_SWITCH_RECOVERY_FAILED: ${codexPaneObservation(ready.lastScreen).reason}。今回の文字列は送信していません。`, 2);
+            }
             if (limitDialog) {
                 const reason = grokPaneObservation(ready.lastScreen).reason;
                 throw new AitermError(`GROK_RATE_LIMIT_RECOVERY_FAILED: ${reason}。上限パネル解除後の入力受付を確認できません。今回の文字列は送信していません。`, 2);
@@ -3463,6 +3511,8 @@ export async function dispatchAgentTurn(name, text, o = {}) {
                 "少し後で pty_read(screen:true) を確認し、TUI が起動済みなら再度 pty_send してください。", 2);
         }
     }
+    if (codexRateLimitModelSwitch)
+        paneInputRecovery.push("codex_rate_limit_model_switch_kept_current");
     if (limitDialog)
         paneInputRecovery.push("grok_rate_limit_dialog_dismissed");
     const startOffset = agentCompletionCursor(meta);

package/dist/cursor-parent-hook.js

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+// Cursorが起動する公式hook。MCP stdioとは別processで、差し込み文をstdoutのJSONへ返す。
+import { fileURLToPath } from "node:url";
+import * as fs from "node:fs";
+import { handleCursorHook } from "./cursor-parent-receiver.js";
+async function main() {
+    let input = "";
+    process.stdin.setEncoding("utf8");
+    for await (const chunk of process.stdin)
+        input += chunk;
+    const result = await handleCursorHook(input.length > 0 ? input : "{}");
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+}
+function isDirectExecution() {
+    const entry = process.argv[1];
+    if (!entry)
+        return false;
+    try {
+        const self = fileURLToPath(import.meta.url);
+        const a = fs.realpathSync(entry);
+        const b = fs.realpathSync(self);
+        if (a === b)
+            return true;
+        return process.platform === "win32" && a.toLowerCase() === b.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+}
+if (isDirectExecution()) {
+    main().catch(error => {
+        process.stderr.write(`${error instanceof Error ? error.message : "CURSOR_PARENT_HOOK_FAILED"}\n`);
+        process.exitCode = 2;
+    });
+}

package/dist/cursor-parent-receive.js

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+// Cursor親がidleのとき、背景で起動して回答本文の到着を待つ受け口。
+import { fileURLToPath } from "node:url";
+import * as fs from "node:fs";
+import { cursorHookRoot, receiveCursorAnswer } from "./cursor-parent-receiver.js";
+import { windowsStartProcessArgumentList } from "./core.js";
+export function cursorReceiveProcess(deliveryId, executable = process.execPath) {
+    const args = [fileURLToPath(import.meta.url), "--delivery", deliveryId];
+    return {
+        executable,
+        args,
+        windows_start_process_argument_list: process.platform === "win32" ? windowsStartProcessArgumentList(args) : null,
+    };
+}
+function emit(value) {
+    process.stdout.write(JSON.stringify(value) + "\n");
+}
+export async function main(argv) {
+    if (argv.length !== 2 || argv[0] !== "--delivery" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(argv[1])) {
+        emit({ ok: false, code: "CURSOR_PARENT_RECEIVE_USAGE", message: "usage: cursor-parent-receive --delivery <uuid>" });
+        return 1;
+    }
+    const result = await receiveCursorAnswer(cursorHookRoot(), argv[1]);
+    if (result.outcome === "timeout") {
+        emit({ delivery_id: argv[1], outcome: "timeout" });
+        return 3;
+    }
+    if (result.outcome === "delivered_by_hook") {
+        emit({ delivery_id: argv[1], outcome: "delivered_by_hook" });
+        return 0;
+    }
+    emit({ delivery_id: argv[1], outcome: "delivered", text: result.text });
+    return 0;
+}
+function isDirectExecution() {
+    const entry = process.argv[1];
+    if (!entry)
+        return false;
+    try {
+        const self = fileURLToPath(import.meta.url);
+        const a = fs.realpathSync(entry);
+        const b = fs.realpathSync(self);
+        if (a === b)
+            return true;
+        return process.platform === "win32" && a.toLowerCase() === b.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+}
+if (isDirectExecution()) {
+    main(process.argv.slice(2)).then(code => { process.exitCode = code; }).catch(error => {
+        emit({ ok: false, code: "CURSOR_PARENT_RECEIVE_FAILED", message: error instanceof Error ? error.message : "cursor-parent-receive: operation failed" });
+        process.exitCode = 1;
+    });
+}

package/dist/cursor-parent-receiver.js

@@ -0,0 +1,247 @@
+// Cursor親の受信口。会話への差し込みはCursor公式hookのadditional_context、idle時の起床は受け口processが担う。
+import * as fs from "node:fs";
+import { homedir } from "node:os";
+import * as path from "node:path";
+import { z } from "zod";
+import { ensureStateRoot, waitForFileState, writeJson0600 } from "./agent-shared.js";
+import { AitermError } from "./errors.js";
+export const cursorParentSchema = z.object({
+    kind: z.literal("cursor"),
+    hook_root: z.string(),
+}).strict();
+const deliveryIdSchema = z.string().uuid();
+const dispatchTools = new Set([
+    "agent_launch", "claude_agent", "codex_agent", "grok_agent", "composer_agent", "pty_send", "claude_turn",
+]);
+export class CursorDeliveryError extends AitermError {
+    delivery_code;
+    outcome_unknown;
+    constructor(delivery_code, message, outcome_unknown = false) {
+        super(`${delivery_code}: ${message}`, 2);
+        this.delivery_code = delivery_code;
+        this.outcome_unknown = outcome_unknown;
+    }
+}
+export function isCursorMcpClient(clientName) {
+    if (clientName === undefined)
+        return false;
+    return clientName === "cursor-vscode" || clientName.startsWith("cursor-vscode ");
+}
+export function cursorHookRoot(state = ensureStateRoot()) {
+    return path.join(state, "cursor-parent-hooks");
+}
+export function cursorHooksFile(home = process.env.HOME ?? homedir()) {
+    return path.join(process.env.CURSOR_HOME ?? path.join(home, ".cursor"), "hooks.json");
+}
+export function cursorParentHooksRegistered(document) {
+    if (document === null || typeof document !== "object" || Array.isArray(document))
+        return false;
+    const hooks = document.hooks;
+    if (hooks === null || typeof hooks !== "object" || Array.isArray(hooks))
+        return false;
+    const owns = (event) => {
+        const list = hooks[event];
+        return Array.isArray(list) && list.some(entry => {
+            if (entry === null || typeof entry !== "object")
+                return false;
+            const command = entry.command;
+            return typeof command === "string" && command.includes("cursor-parent-hook.js");
+        });
+    };
+    return owns("postToolUse") && owns("afterMCPExecution");
+}
+export function verifyCursorParent(parent, hooksFile = cursorHooksFile()) {
+    cursorParentSchema.parse(parent);
+    let document;
+    try {
+        document = JSON.parse(fs.readFileSync(hooksFile, "utf8"));
+    }
+    catch {
+        throw new CursorDeliveryError("CURSOR_PARENT_HOOK_UNAVAILABLE", "Cursorのhookが登録されていません。aiterm-setupを実行してください");
+    }
+    if (!cursorParentHooksRegistered(document)) {
+        throw new CursorDeliveryError("CURSOR_PARENT_HOOK_UNAVAILABLE", "Cursorのhookが登録されていません。aiterm-setupを実行してください");
+    }
+}
+export function cursorParentFromRequest(clientName, options = {}) {
+    if (!isCursorMcpClient(clientName))
+        return null;
+    const parent = { kind: "cursor", hook_root: options.hookRoot ?? cursorHookRoot() };
+    verifyCursorParent(parent, options.hooksFile);
+    return parent;
+}
+function deliveryDir(parent, deliveryId) {
+    return path.join(parent.hook_root, "deliveries", deliveryIdSchema.parse(deliveryId));
+}
+export function prepareCursorDelivery(parent, deliveryId) {
+    cursorParentSchema.parse(parent);
+    fs.mkdirSync(deliveryDir(parent, deliveryId), { recursive: true, mode: 0o700 });
+}
+export async function submitCursorParentAnswer(parent, deliveryId, text, timeoutMs = 86_400_000) {
+    const dir = deliveryDir(parent, deliveryId);
+    writeJson0600(path.join(dir, "answer.json"), { delivery_id: deliveryId, text });
+    try {
+        await waitForFileState(dir, () => fs.existsSync(path.join(dir, "claim.json")) ? true : undefined, timeoutMs);
+    }
+    catch (error) {
+        if (error instanceof Error && error.message === "WAIT_FOR_FILE_TIMEOUT") {
+            throw new CursorDeliveryError("CURSOR_PARENT_DELIVERY_UNCLAIMED", "Cursor親が時間内に回答を受け取りませんでした。回答は保存したままです");
+        }
+        throw error;
+    }
+    return { queued_submission_id: null };
+}
+function conversationId(value) {
+    if (typeof value !== "string" || value.length === 0 || value.length > 200)
+        return null;
+    if (value.includes("/") || value.includes("\\") || value.includes(".."))
+        return null;
+    return value;
+}
+function parseJson(value) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return null;
+    }
+}
+function deliveryIdFromResult(value, depth = 0) {
+    if (depth > 3 || value === null || value === undefined)
+        return null;
+    const parsed = typeof value === "string" ? parseJson(value) : value;
+    if (parsed === null || typeof parsed !== "object")
+        return null;
+    const record = parsed;
+    const structured = record.structuredContent;
+    const carrier = structured !== null && typeof structured === "object" ? structured : record;
+    const parentDelivery = carrier.parent_delivery;
+    if (parentDelivery !== null && typeof parentDelivery === "object") {
+        const id = parentDelivery.delivery_id;
+        if (typeof id === "string" && deliveryIdSchema.safeParse(id).success)
+            return id;
+    }
+    if (depth === 0 && Array.isArray(record.content)) {
+        for (const entry of record.content) {
+            if (entry !== null && typeof entry === "object" && entry.type === "text") {
+                const text = entry.text;
+                if (typeof text === "string") {
+                    const id = deliveryIdFromResult(text, depth + 1);
+                    if (id)
+                        return id;
+                }
+            }
+        }
+    }
+    return null;
+}
+function toolBaseName(name) {
+    const tail = name.split(/[:.]/).pop() ?? name;
+    return tail.replace(/^mcp__aiterm__/, "");
+}
+function claim(dir, channel) {
+    try {
+        fs.writeFileSync(path.join(dir, "claim.json"), JSON.stringify({ channel, at: new Date().toISOString() }), { flag: "wx", mode: 0o600 });
+        return true;
+    }
+    catch (error) {
+        if (error.code === "EEXIST")
+            return false;
+        throw error;
+    }
+}
+function bind(hookRoot, deliveryId, conv) {
+    const dir = path.join(hookRoot, "deliveries", deliveryId);
+    if (!fs.existsSync(dir))
+        return;
+    const bindFile = path.join(dir, "bind.json");
+    if (!fs.existsSync(bindFile)) {
+        writeJson0600(bindFile, { conversation_id: conv, created_at: new Date().toISOString() });
+    }
+    const indexDir = path.join(hookRoot, "conversations", conv);
+    fs.mkdirSync(indexDir, { recursive: true, mode: 0o700 });
+    const index = path.join(indexDir, deliveryId);
+    if (!fs.existsSync(index))
+        fs.writeFileSync(index, "", { mode: 0o600 });
+}
+function inject(hookRoot, conv) {
+    const indexDir = path.join(hookRoot, "conversations", conv);
+    if (!fs.existsSync(indexDir))
+        return [];
+    const pending = fs.readdirSync(indexDir).flatMap(deliveryId => {
+        const dir = path.join(hookRoot, "deliveries", deliveryId);
+        const answerFile = path.join(dir, "answer.json");
+        const bindFile = path.join(dir, "bind.json");
+        if (!fs.existsSync(answerFile) || !fs.existsSync(bindFile))
+            return [];
+        const answer = z.object({ delivery_id: z.string(), text: z.string() }).parse(JSON.parse(fs.readFileSync(answerFile, "utf8")));
+        const bound = z.object({ conversation_id: z.string(), created_at: z.string() }).parse(JSON.parse(fs.readFileSync(bindFile, "utf8")));
+        if (answer.delivery_id !== deliveryId || bound.conversation_id !== conv)
+            return [];
+        return [{ deliveryId, dir, created_at: bound.created_at, text: answer.text }];
+    }).sort((a, b) => a.created_at.localeCompare(b.created_at));
+    const texts = [];
+    for (const item of pending) {
+        const index = path.join(indexDir, item.deliveryId);
+        if (!claim(item.dir, "hook")) {
+            if (fs.existsSync(path.join(item.dir, "claim.json")))
+                fs.rmSync(index, { force: true });
+            continue;
+        }
+        texts.push(item.text);
+        fs.rmSync(index, { force: true });
+    }
+    return texts;
+}
+export async function handleCursorHook(raw, hookRoot = cursorHookRoot()) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+    if (parsed === null || typeof parsed !== "object")
+        return {};
+    const event = parsed;
+    const name = event.hook_event_name;
+    if (name !== "afterMCPExecution" && name !== "postToolUse" && name !== "postToolUseFailure")
+        return {};
+    const conv = conversationId(event.conversation_id);
+    if (!conv)
+        return {};
+    const toolName = typeof event.tool_name === "string" ? event.tool_name : "";
+    if (dispatchTools.has(toolBaseName(toolName))) {
+        const payload = name === "afterMCPExecution" ? event.result_json : event.tool_output;
+        const deliveryId = deliveryIdFromResult(payload);
+        if (deliveryId)
+            bind(hookRoot, deliveryId, conv);
+    }
+    if (name === "postToolUse" || name === "postToolUseFailure") {
+        const texts = inject(hookRoot, conv);
+        if (texts.length > 0)
+            return { additional_context: texts.join("\n\n") };
+    }
+    return {};
+}
+export async function receiveCursorAnswer(hookRoot, deliveryId, timeoutMs = 86_400_000) {
+    const id = deliveryIdSchema.parse(deliveryId);
+    const dir = path.join(hookRoot, "deliveries", id);
+    if (!fs.existsSync(dir))
+        throw new CursorDeliveryError("CURSOR_PARENT_DELIVERY_UNKNOWN", "Cursor配送の記録がありません");
+    const answerFile = path.join(dir, "answer.json");
+    try {
+        await waitForFileState(dir, () => fs.existsSync(answerFile) ? true : undefined, timeoutMs);
+    }
+    catch (error) {
+        if (error instanceof Error && error.message === "WAIT_FOR_FILE_TIMEOUT")
+            return { outcome: "timeout" };
+        throw error;
+    }
+    const answer = z.object({ delivery_id: z.string(), text: z.string() }).parse(JSON.parse(fs.readFileSync(answerFile, "utf8")));
+    if (answer.delivery_id !== id)
+        throw new CursorDeliveryError("CURSOR_PARENT_DELIVERY_MISMATCH", "保存された回答の配送IDが一致しません");
+    if (!claim(dir, "receiver"))
+        return { outcome: "delivered_by_hook" };
+    return { outcome: "delivered", text: answer.text };
+}

package/dist/harnesses/codex.js

@@ -390,7 +390,7 @@ function currentCodexDialog(screen) {
     // 過去の完了footerより前の質問・選択番号を、現在のdialogへ持ち込まない。
     const previousFooter = footers.at(-2);
     const current = previousFooter ? screen.slice(previousFooter.index + previousFooter[0].length) : screen;
-    const heading = [...current.matchAll(/Would you like to run the following command\?|Allow the [^\n]+ MCP server to run tool|Hooks need review|Do you trust the contents of this directory|Update available!/g)].at(-1);
+    const heading = [...current.matchAll(/Would you like to run the following command\?|Allow the [^\n]+ MCP server to run tool|Hooks need review|Do you trust the contents of this directory|Update available!|Approaching rate limits/g)].at(-1);
     return heading ? current.slice(heading.index) : current;
 }
 export function codexPaneObservation(screen) {
@@ -400,7 +400,7 @@ export function codexPaneObservation(screen) {
     const tail = screen.split("\n").slice(-24).join("\n");
     // 現在のmodal footerがある時だけ、折返しで上へ出た質問を画面全体から探す。
     const lastComposer = [...tail.matchAll(/(?:^|\n)[ \t]*[›>](?![ \t]*\d+\.)/g)].at(-1)?.index ?? -1;
-    const lastDialog = [...tail.matchAll(/Press enter to confirm or esc to (?:cancel|go back)|enter to submit\s*\|\s*esc to cancel|Would you like to run the following command\?|Allow the [^\n]+ MCP server to run tool|Hooks need review|Do you trust the contents of this directory|Update available!/gi)].at(-1)?.index ?? -1;
+    const lastDialog = [...tail.matchAll(/Press enter to confirm or esc to (?:cancel|go back)|enter to submit\s*\|\s*esc to cancel|Would you like to run the following command\?|Allow the [^\n]+ MCP server to run tool|Hooks need review|Do you trust the contents of this directory|Update available!|Approaching rate limits/gi)].at(-1)?.index ?? -1;
     const modal = lastDialog > lastComposer;
     if (!modal) {
         if (/esc to interrupt/i.test(tail))
@@ -415,12 +415,35 @@ export function codexPaneObservation(screen) {
         return { state: "blocked", reason: "mcp_approval" };
     if (/Hooks need review/.test(current))
         return { state: "blocked", reason: "hooks_review" };
+    if (codexRateLimitModelSwitchDialog(current))
+        return { state: "blocked", reason: "rate_limit_model_switch" };
     if (codexLaunchBlockingDialog(current))
         return { state: "blocked", reason: "startup_dialog" };
     if (modal)
         return { state: "blocked", reason: "unknown_dialog" };
     return { state: "unknown", reason: "unrecognized_screen" };
 }
+/**
+ * Codex 0.155.1 の利用上限接近modal。agent_approvalの対象ではないため、選択肢は公開しない。
+ * 1はmodel切替、3は今後の表示抑止なので、Aitermが選んでよいのは一時keepの2だけである。
+ */
+export function codexRateLimitModelSwitchDialog(screen) {
+    const current = currentCodexDialog(screen);
+    const footer = current.lastIndexOf("Press enter to confirm or esc to go back");
+    const composer = [...current.matchAll(/(?:^|\n)[ \t]*[›>](?![ \t]*\d+\.)/g)].at(-1)?.index ?? -1;
+    // 現在のcomposerがmodal footerより後なら、scrollbackの古いmodalである。
+    if (composer > footer)
+        return null;
+    if (!/(?:^|\n)\s*Approaching rate limits\s*(?:\n|$)/.test(current)
+        || !/(?:^|\n)\s*Switch to gpt-5\.6-luna for lower credit usage\?\s*(?:\n|$)/.test(current)
+        || !/(?:^|\n)[ \t]*(?:›[ \t]*)?1\. Switch to gpt-5\.6-luna(?:[ \t]{2,}[^\n]*)?[ \t]*(?:\n|$)/.test(current)
+        || !/(?:^|\n)[ \t]*(?:›[ \t]*)?2\. Keep current model[ \t]*(?:\n|$)/.test(current)
+        || !/(?:^|\n)[ \t]*(?:›[ \t]*)?3\. Keep current model \(never show again\)(?:[ \t]{2,}[^\n]*)?[ \t]*(?:\n|$)/.test(current)
+        || !/Press enter to confirm or esc to go back/i.test(current))
+        return null;
+    const selected = current.match(/(?:^|\n)[ \t]*›[ \t]*([123])\. (?:Switch to gpt-5\.6-luna|Keep current model(?: \(never show again\))?)(?:[ \t]{2,}[^\n]*)?[ \t]*(?:\n|$)/)?.[1];
+    return { keepCurrentIndex: 2, selectedIndex: selected ? Number(selected) : null };
+}
 export function codexStartupFailure(screen) {
     return /(?:^|\n)[ \t]*[›>]?[ \t]*Error loading config\.toml:/m.test(screen)
         ? "configuration_error" : null;

package/dist/index.js

@@ -18,6 +18,7 @@ import { createRequire } from "node:module";
 import { ParentDeliveryManager } from "./parent-delivery.js";
 import { codexParentFromRequest } from "./codex-parent-receiver.js";
 import { claudeParentFromRequest } from "./claude-parent-receiver.js";
+import { cursorParentFromRequest, isCursorMcpClient } from "./cursor-parent-receiver.js";
 // package.json の version を実行時に読み、MCP initialize で配るサーバ版と一致させる。
 // createRequire を使うのは、import 属性 `with { type: "json" }` が Node 18.20+ 限定で
 // engines "node >=18"（18.0〜18.19）を SyntaxError で壊し、旧 `assert` 構文は逆に Node 22 で
@@ -25,15 +26,29 @@ import { claudeParentFromRequest } from "./claude-parent-receiver.js";
 const pkg = createRequire(import.meta.url)("../package.json");
 const server = new McpServer({ name: "aiterm", version: pkg.version });
 let parentDelivery = null;
+function deliveryParentKind(clientName) {
+    if (clientName === "claude-code")
+        return "claude";
+    if (isCursorMcpClient(clientName))
+        return "cursor";
+    return undefined;
+}
 async function deliveryForRequest(extra) {
     const clientName = server.server.getClientVersion()?.name;
-    const parent = codexParentFromRequest(clientName, extra._meta) ?? claudeParentFromRequest(clientName, extra._meta);
+    const parent = codexParentFromRequest(clientName, extra._meta) ?? claudeParentFromRequest(clientName, extra._meta) ?? cursorParentFromRequest(clientName);
     if (!parent)
         return null;
-    parentDelivery ??= new ParentDeliveryManager({ parent_kind: clientName === "claude-code" ? "claude" : undefined });
+    parentDelivery ??= new ParentDeliveryManager({ parent_kind: deliveryParentKind(clientName) });
     await parentDelivery.prepare(parent);
     return parentDelivery.request(parent);
 }
+function completionWait(delivery, session, eventCursor) {
+    if (eventCursor === null)
+        return { wait_process: null, wait_command: null };
+    if (delivery)
+        return { wait_process: delivery.wait_process(), wait_command: null };
+    return { wait_process: core.agentWaitProcess(session, eventCursor), wait_command: `aiterm-wait --session ${session} --cursor ${eventCursor}` };
+}
 /**
  * dispatch 系の説明で共有する非ブロック規範。tool description は registerTool 時＝initialize 前に
  * 固定されるため親ホストを名指しできない（ホスト別の具体形は receipt 側が core.agentWaitLaunchForm で出す）。
@@ -41,6 +56,7 @@ async function deliveryForRequest(extra) {
  */
 const NON_BLOCKING_RULE = "dispatch した子は投げっぱなしでよい＝親はここで待たない。" +
     "Codex親とClaude Code親にはAitermが回答本文を自動配送する。parent_deliveryがある場合はwait起動も通常の回答回収も不要。親は作業を続けるかターンを終える。" +
+    "Cursor親にはparent_deliveryとwait_processが付く。作業を続ければ次のツール返りに回答が差し込まれ、ターンを終える前にwait_processを背景で起動するとidle中の完了でも起きられる。ポーリングとpty_read(agent_transcript:true)は不要。" +
     "その他の親では、完了通知をreceiptの `wait_process.executable` と `wait_process.args` をそのまま親のターンを塞がない別プロセスAPIへ渡して受け、" +
     "PowerShell 7のStart-Processだけは `windows_start_process_argument_list` を単一文字列として渡す。" +
     `exit を完了通知として扱う（${core.AITERM_WAIT_OUTCOME_NOTE}。ポーリング不要）。` +
@@ -190,7 +206,7 @@ server.registerTool("pty_send", {
                 throw new Error("agent session への dispatch は rtk:true と併用できません");
             delivery = await deliveryForRequest(extra);
             const receipt = await core.dispatchAgentTurn(session_id, core.attachImages(text, image), { raw, before_send: delivery?.before_send });
-            const waitProcess = delivery ? null : core.agentWaitProcess(receipt.session_id, receipt.event_cursor);
+            const waited = completionWait(delivery, receipt.session_id, receipt.event_cursor);
             return {
                 content: [
                     {
@@ -205,7 +221,7 @@ server.registerTool("pty_send", {
                     mode: "agent_dispatch",
                     session_id: receipt.session_id,
                     event_cursor: receipt.event_cursor,
-                    wait_process: waitProcess,
+                    wait_process: waited.wait_process,
                     ...(delivery?.result() ? { parent_delivery: delivery.result() } : {}),
                     launch_id: receipt.launch_id,
                     vendor: receipt.vendor,
@@ -687,8 +703,7 @@ async function launchAgent(kind, args, extra) {
             session_id: sid,
             managed_completion: true,
             event_cursor: eventCursor,
-            wait_process: eventCursor === null || delivery ? null : core.agentWaitProcess(sid, eventCursor),
-            wait_command: eventCursor === null || delivery ? null : `aiterm-wait --session ${sid} --cursor ${eventCursor}`,
+            ...completionWait(delivery, sid, eventCursor),
             ...(delivery?.result() ? { parent_delivery: delivery.result() } : {}),
             submit_residue: submitResidue,
             initial_prompt: initialDelivery,
@@ -716,8 +731,7 @@ async function launchAgent(kind, args, extra) {
                 structuredContent: {
                     schema: "aiterm.agent-launch-result.v1", provider: kind, harness: core.agentHarness(kind),
                     session_id: e.session_id, managed_completion: true, event_cursor: e.event_cursor,
-                    wait_process: e.event_cursor === null || delivery ? null : core.agentWaitProcess(e.session_id, e.event_cursor),
-                    wait_command: e.event_cursor === null || delivery ? null : `aiterm-wait --session ${e.session_id} --cursor ${e.event_cursor}`,
+                    ...completionWait(delivery, e.session_id, e.event_cursor),
                     ...(delivery?.result() ? { parent_delivery: delivery.result() } : {}),
                     submit_residue: null, initial_prompt: e.initial_prompt, startup: e.startup,
                 },
@@ -863,8 +877,9 @@ async function main() {
     server.server.oninitialized = () => {
         const name = server.server.getClientVersion()?.name;
         core.setParentClient(name ?? null);
-        if (name === "codex-mcp-client" || name === "claude-code")
-            parentDelivery ??= new ParentDeliveryManager({ parent_kind: name === "claude-code" ? "claude" : undefined });
+        if (name === "codex-mcp-client" || name === "claude-code" || isCursorMcpClient(name)) {
+            parentDelivery ??= new ParentDeliveryManager({ parent_kind: deliveryParentKind(name) });
+        }
     };
     server.server.onclose = () => {
         void parentDelivery?.close().catch(() => process.stderr.write("aiterm: PARENT_DELIVERY_CLOSE_FAILED\n"));

package/dist/parent-delivery.js

@@ -8,6 +8,8 @@ import { ensureStateRoot, writeJson0600 } from "./agent-shared.js";
 import { readRuntimeProcesses } from "./process-runtime.js";
 import { CodexDeliveryError, submitCodexParentAnswer, verifyCodexParent } from "./codex-parent-receiver.js";
 import { claudeParentSchema, ClaudeDeliveryError, bindClaudeParentDelivery, submitClaudeParentAnswer, verifyClaudeParent } from "./claude-parent-receiver.js";
+import { cursorParentSchema, CursorDeliveryError, prepareCursorDelivery, submitCursorParentAnswer, verifyCursorParent } from "./cursor-parent-receiver.js";
+import { cursorReceiveProcess } from "./cursor-parent-receive.js";
 import { AitermError } from "./errors.js";
 import { codexHookDeliveryState } from "./codex-hook-state.js";
 const recordSchema = z.object({
@@ -15,7 +17,7 @@ const recordSchema = z.object({
     delivery_id: z.uuid(),
     created_at: z.string(),
     updated_at: z.string(),
-    parent: z.union([z.object({ thread_id: z.uuid(), codex_home: z.string() }).strict(), claudeParentSchema]),
+    parent: z.union([z.object({ thread_id: z.uuid(), codex_home: z.string() }).strict(), claudeParentSchema, cursorParentSchema]),
     boundary: z.object({
         session_id: z.string().regex(/^[A-Za-z0-9_-]{1,64}$/),
         launch_id: z.string().regex(/^[0-9a-f]{32}$/),
@@ -31,14 +33,22 @@ const recordSchema = z.object({
     queued_submission_id: z.string().nullable(),
 }).strict();
 const isClaude = (parent) => "kind" in parent && parent.kind === "claude";
+const isCursor = (parent) => "kind" in parent && parent.kind === "cursor";
+const isCodex = (parent) => !isClaude(parent) && !isCursor(parent);
 async function verifyParent(parent) {
     if (isClaude(parent))
         verifyClaudeParent(parent);
+    else if (isCursor(parent))
+        verifyCursorParent(parent);
     else
         await verifyCodexParent(parent);
 }
 async function submitParentAnswer(parent, deliveryId, text) {
-    return isClaude(parent) ? submitClaudeParentAnswer(parent, deliveryId, text) : submitCodexParentAnswer(parent, deliveryId, text);
+    if (isClaude(parent))
+        return submitClaudeParentAnswer(parent, deliveryId, text);
+    if (isCursor(parent))
+        return submitCursorParentAnswer(parent, deliveryId, text);
+    return submitCodexParentAnswer(parent, deliveryId, text);
 }
 function readRecord(file) {
     try {
@@ -54,7 +64,7 @@ function readRecord(file) {
     }
 }
 function receipt(record) {
-    const hookState = !isClaude(record.parent) && record.state === "submitted"
+    const hookState = isCodex(record.parent) && record.state === "submitted"
         ? codexHookDeliveryState(record.parent.codex_home, record.parent.thread_id, record.delivery_id) : null;
     return { delivery_id: record.delivery_id, state: hookState ?? record.state, child_outcome: record.child_outcome,
         child_turn_id: record.child_turn_id, queued_submission_id: record.queued_submission_id,
@@ -87,9 +97,15 @@ export class ParentDeliveryManager {
         this.deps = { observe: observeAgentDone, answer: readAgentTranscriptResult, submit: submitParentAnswer,
             verify: verifyParent, processes: readRuntimeProcesses, ...options.dependencies };
         const stateRoot = ensureStateRoot();
-        this.root = options.root ?? path.join(stateRoot, options.parent_kind === "claude" ? "claude-parent-deliveries" : "parent-deliveries");
-        // 旧版のCodex readerへ未知のparentを渡さない。公開照会と子の予約だけは両方で共有する。
-        this.recordRoots = options.root ? [options.root] : [path.join(stateRoot, "parent-deliveries"), path.join(stateRoot, "claude-parent-deliveries")];
+        const directory = options.parent_kind === "claude" ? "claude-parent-deliveries"
+            : options.parent_kind === "cursor" ? "cursor-parent-deliveries" : "parent-deliveries";
+        this.root = options.root ?? path.join(stateRoot, directory);
+        // 旧版のCodex／Claude readerへ未知のparentを渡さない。公開照会と子の予約だけは保存場所を横断する。
+        this.recordRoots = options.root ? [options.root] : [
+            path.join(stateRoot, "parent-deliveries"),
+            path.join(stateRoot, "claude-parent-deliveries"),
+            path.join(stateRoot, "cursor-parent-deliveries"),
+        ];
         this.active = path.join(this.root, "active");
         this.results = path.join(this.root, "results");
         this.claims = path.join(options.root ?? path.join(stateRoot, "parent-deliveries"), "claims");
@@ -148,6 +164,17 @@ export class ParentDeliveryManager {
                     }
                     if (isClaude(parent))
                         bindClaudeParentDelivery(parent, record.delivery_id);
+                    if (isCursor(parent)) {
+                        try {
+                            prepareCursorDelivery(parent, record.delivery_id);
+                        }
+                        catch (error) {
+                            this.releaseClaim(job);
+                            fs.unlinkSync(job.file);
+                            job = null;
+                            throw error;
+                        }
+                    }
                     this.jobs.set(record.delivery_id, job);
                     this.watch(job);
                 });
@@ -161,6 +188,7 @@ export class ParentDeliveryManager {
                 }
             },
             result: () => job ? receipt(job.record) : null,
+            wait_process: () => job && isCursor(parent) ? cursorReceiveProcess(job.record.delivery_id) : null,
             failed: (error) => {
                 if (!job || job.record.state !== "waiting")
                     return;
@@ -264,7 +292,8 @@ export class ParentDeliveryManager {
             job.record.state = "submitted";
         }
         catch (error) {
-            job.record.state = (error instanceof CodexDeliveryError || error instanceof ClaudeDeliveryError) && !error.outcome_unknown ? "failed" : "unknown";
+            const known = error instanceof CodexDeliveryError || error instanceof ClaudeDeliveryError || error instanceof CursorDeliveryError;
+            job.record.state = known && !error.outcome_unknown ? "failed" : "unknown";
             job.record.error = error instanceof Error ? error.message : String(error);
         }
         this.finish(job);

package/dist/setup-cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { runSetup } from "./setup.js";
-import { removeClaudeParentHooks } from "./setup-integrations.js";
+import { removeClaudeParentHooks, removeCursorParentHooks } from "./setup-integrations.js";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { createInterface } from "node:readline/promises";
@@ -16,8 +16,18 @@ if (args.length === 1 && args[0] === "--remove-claude-parent-hooks") {
         process.exitCode = 2;
     }
 }
+else if (args.length === 1 && args[0] === "--remove-cursor-parent-hooks") {
+    try {
+        const status = removeCursorParentHooks(join(process.env.CURSOR_HOME ?? join(process.env.HOME ?? homedir(), ".cursor"), "hooks.json"));
+        process.stdout.write(`${JSON.stringify({ schema: "aiterm.cursor-parent-hooks-remove-result.v1", status })}\n`);
+    }
+    catch (error) {
+        process.stderr.write(`aiterm-setup: ${error instanceof Error ? error.message : String(error)}\n`);
+        process.exitCode = 2;
+    }
+}
 else if (args.length === 1 && ["--help", "-h"].includes(args[0])) {
-    process.stdout.write("使い方: aiterm-setup [--json] [--codex-steer enable|disable|status]\n依存準備、AIへの登録、MCPと端末の実動作確認を行います。対話実行ではAiterm単品かCodex Desktop Steer付きかを選べます。SteerはmacOS・Windows対応で、初回はCodexの再起動が必要です。disableは専用hookを解除し、statusは公式hookの登録・承認と再起動の必要性を確認します。旧中継はhook導入後に解除します。--jsonは対話せず、Steerの選択を維持します。\n旧版へ戻す前のClaude専用hook解除: --remove-claude-parent-hooks\n");
+    process.stdout.write("使い方: aiterm-setup [--json] [--codex-steer enable|disable|status]\n依存準備、AIへの登録、MCPと端末の実動作確認を行います。対話実行ではAiterm単品かCodex Desktop Steer付きかを選べます。SteerはmacOS・Windows対応で、初回はCodexの再起動が必要です。disableは専用hookを解除し、statusは公式hookの登録・承認と再起動の必要性を確認します。旧中継はhook導入後に解除します。--jsonは対話せず、Steerの選択を維持します。\n旧版へ戻す前のClaude専用hook解除: --remove-claude-parent-hooks\n旧版へ戻す前のCursor専用hook解除: --remove-cursor-parent-hooks\n");
 }
 else {
     try {

package/dist/setup-integrations.js

@@ -156,6 +156,116 @@ export function removeClaudeParentHooks(file) {
         throw new SetupError("config_readback_failed", "Claude hook解除の読戻しが一致しません");
     return "removed";
 }
+function shellQuote(value) {
+    if (process.platform === "win32")
+        return `'${value.replace(/'/g, "''")}'`;
+    return `'${value.replace(/'/g, `'"'"'`)}'`;
+}
+export function cursorParentHookCommand(registration) {
+    const script = join(dirname(registration.args[0]), "cursor-parent-hook.js");
+    const command = `${shellQuote(registration.command)} ${shellQuote(script)}`;
+    return process.platform === "win32" ? `& ${command}` : command;
+}
+function ownsCursorParentHook(hook) {
+    return record(hook) && typeof hook.command === "string" && hook.command.includes("cursor-parent-hook.js");
+}
+export function mergeCursorParentHooks(file, registration) {
+    const target = existsSync(file) ? realpathSync(file) : file;
+    let current = { version: 1, hooks: {} };
+    if (existsSync(target)) {
+        try {
+            current = JSON.parse(readFileSync(target, "utf8"));
+        }
+        catch {
+            throw new SetupError("config_invalid", "Cursorのhook設定JSONを読めません");
+        }
+    }
+    else {
+        try {
+            if (lstatSync(file).isSymbolicLink())
+                throw new SetupError("config_invalid", "Cursorのhooks設定symlinkの参照先がありません");
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    }
+    if (!record(current) || (current.hooks !== undefined && !record(current.hooks))) {
+        throw new SetupError("config_invalid", "Cursorのhooks設定はobjectである必要があります");
+    }
+    const hooks = { ...current.hooks };
+    const entry = { command: cursorParentHookCommand(registration), timeout: 15 };
+    for (const event of ["afterMCPExecution", "postToolUse"]) {
+        const previous = hooks[event] ?? [];
+        if (!Array.isArray(previous))
+            throw new SetupError("config_invalid", `Cursorの${event} hook形式を読めません`);
+        const retained = previous.filter(hook => !ownsCursorParentHook(hook));
+        const owned = previous.filter(hook => ownsCursorParentHook(hook));
+        if (owned.length === 1 && isDeepStrictEqual(owned[0], entry) && retained.length + 1 === previous.length)
+            continue;
+        const index = previous.findIndex(hook => ownsCursorParentHook(hook));
+        hooks[event] = index < 0 ? [...retained, entry] : previous.map((hook, i) => i === index ? entry : hook).filter((hook, i) => i === index || !ownsCursorParentHook(hook));
+    }
+    const next = { ...current, version: current.version ?? 1, hooks };
+    if (isDeepStrictEqual(current, next))
+        return "unchanged";
+    mkdirSync(dirname(target), { recursive: true });
+    const temporary = `${target}.aiterm-${randomUUID()}`;
+    try {
+        writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+        if (existsSync(target))
+            copyFileSync(target, `${target}.aiterm-backup`);
+        renameSync(temporary, target);
+    }
+    finally {
+        if (existsSync(temporary))
+            unlinkSync(temporary);
+    }
+    if (!isDeepStrictEqual(JSON.parse(readFileSync(target, "utf8")), next)) {
+        throw new SetupError("config_readback_failed", "Cursorのhook登録の読戻しが一致しません");
+    }
+    return "configured";
+}
+export function removeCursorParentHooks(file) {
+    if (!existsSync(file))
+        return "unchanged";
+    const target = realpathSync(file);
+    const current = JSON.parse(readFileSync(target, "utf8"));
+    if (!record(current) || (current.hooks !== undefined && !record(current.hooks))) {
+        throw new SetupError("config_invalid", "Cursorのhook設定を読めません");
+    }
+    if (current.hooks === undefined)
+        return "unchanged";
+    const hooks = { ...current.hooks };
+    for (const event of ["afterMCPExecution", "postToolUse"]) {
+        if (hooks[event] === undefined)
+            continue;
+        if (!Array.isArray(hooks[event]))
+            throw new SetupError("config_invalid", "Cursorのhook設定を読めません");
+        const retained = hooks[event].filter(hook => !ownsCursorParentHook(hook));
+        if (retained.length)
+            hooks[event] = retained;
+        else
+            delete hooks[event];
+    }
+    const next = { ...current, hooks };
+    if (isDeepStrictEqual(current, next))
+        return "unchanged";
+    const temporary = `${target}.aiterm-${randomUUID()}`;
+    try {
+        writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+        copyFileSync(target, `${target}.aiterm-backup`);
+        renameSync(temporary, target);
+    }
+    finally {
+        if (existsSync(temporary))
+            unlinkSync(temporary);
+    }
+    if (!isDeepStrictEqual(JSON.parse(readFileSync(target, "utf8")), next)) {
+        throw new SetupError("config_readback_failed", "Cursor hook解除の読戻しが一致しません");
+    }
+    return "removed";
+}
 export function configureIntegrations(home, registration, run = runSetupCommand, resolveClient = resolveAgentBin) {
     const results = {};
     for (const client of ["claude", "codex", "grok", "cursor"]) {
@@ -169,6 +279,8 @@ export function configureIntegrations(home, registration, run = runSetupCommand,
                 const file = client === "cursor" ? join(home, ".cursor", "mcp.json")
                     : process.env.CLAUDE_CONFIG_DIR ? join(process.env.CLAUDE_CONFIG_DIR, ".claude.json") : join(home, ".claude.json");
                 mergeJsonMcp(file, client === "claude" ? { type: "stdio", ...registration } : registration);
+                if (client === "cursor")
+                    mergeCursorParentHooks(join(home, ".cursor", "hooks.json"), registration);
                 if (client === "claude") {
                     const version = /\b(\d+)\.(\d+)\.(\d+)\b/.exec(run(executable, ["--version"]));
                     if (!version || Number(version[1]) < 2 || (Number(version[1]) === 2 && (Number(version[2]) < 1 || (Number(version[2]) === 1 && Number(version[3]) < 259)))) {

package/docs/00_overview.md

@@ -20,12 +20,10 @@ Grok／Composerのsandbox起動拒否については、[DESIGNの失敗と復旧
 Codex親への回答の自動配送は[DESIGN](DESIGN.md#codex親への自動配送)に、対応範囲と失敗時の状態を置く。
 Claude Code親の非同期hookによる受信は[DESIGN](DESIGN.md#claude-code親への自動配送)を参照する。
 
-## 実装待ちの設計
-
-- [Grokの過去の利用上限表示からの復帰](https://github.com/kitepon/aiterm-mcp/blob/main/docs/grok-rate-limit-recovery-plan.md): 設計完了・実装未着手。通常dispatchでのパネル解除、現在の画面による上限観測、試験と実機受入を定める。
-
 ## 履歴と証拠
 
+- [Grokの上限パネル復帰の受入](https://github.com/kitepon/aiterm-mcp/blob/main/docs/adr/0069-grok-rate-limit-recovery.md): 通常送信による解除、公開package試験、本番導入と実機未検証範囲。
+
 - [`archive/`](https://github.com/kitepon/aiterm-mcp/tree/main/docs/archive): 完了・棄却・中断・失効・置換により現行制御から外れたsnapshot。
 - [`adr/`](https://github.com/kitepon/aiterm-mcp/tree/main/docs/adr): 採択・棄却した設計判断とrelease受入。
 - [`evidence/`](https://github.com/kitepon/aiterm-mcp/tree/main/docs/evidence): Lattice／campaignの検証証拠。

package/docs/DESIGN.md

@@ -151,6 +151,25 @@ Claude Desktopのチャット、Web、`agent_id`付きの会話（`--agent`で
 Claudeの起動metadataには指定cwdの実体パスを保存する。Claude Codeが実体パスから作るproject slugと
 APIエラー監視の参照先を一致させ、監視中のリンク変更で保存場所を取り違えない。
 
+### Cursor親への自動配送
+
+`aiterm-setup`は`~/.cursor/hooks.json`へAiterm専用の`afterMCPExecution`と`postToolUse`を追加する。
+他製品のhookと順序は保持し、`command`に`cursor-parent-hook.js`を含むentryだけを更新する。
+親の識別はMCP `initialize`の`clientInfo.name`が`cursor-vscode`（またはその後ろに空白を挟む派生名）であることだけで、
+会話IDはMCPの`_meta`に来ない。hook未登録は子への送信前に`CURSOR_PARENT_HOOK_UNAVAILABLE`で止め、waiterへ切り替えない。
+
+`afterMCPExecution`またはdispatch toolの`postToolUse`が、tool返りの`parent_delivery.delivery_id`とhook入力の
+`conversation_id`を結ぶ。`delivery_id`は`structuredContent`か、`content`のtextをJSONとして読んだ中から取る。
+完了観測と本文保存は`parent-delivery.ts`が所有し、記録は`cursor-parent-deliveries`へ分ける。子の予約`claims`は共有する。
+
+親が次のツールを呼ぶと`postToolUse`が未受領の本文を`additional_context`で会話へ差し込む。
+親がターンを終えている場合は、receiptの`wait_process`で起動した`cursor-parent-receive`が本文をstdoutへ出して終了する。
+`wait_command`はnull。受け取りは`claim.json`の排他作成で一つに決め、hookと受け口の両方へ本文を出さない。
+`submitted`はどちらかがclaimした状態であり、modelの読了ではない。24時間以内にclaimが無ければ`failed`とし、
+本文は残して自動再送しない。Cursor Cloud Agent／Background Agentはこの受信契約に含めない。
+
+hookを外す時は`aiterm-setup --remove-cursor-parent-hooks`で専用entryだけを解除する。
+
 `trust_project:true`は対象projectの既知のworkspace、hooks、MCP初期同意を起動準備として進める意図である。
 promptなしでも入力受付とharness生存を確認して`startup.ready`を返す。指定なしのpromptなし起動は
 従来どおり`startup.not_checked`で返す。初手receiptは未要求・未送信・送信済み未確認・開始確認を分ける。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.37.9",
+  "version": "0.38.0",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent terminal MCP with one harness-based launcher for Claude Code, Codex CLI, Grok CLI, and Cursor Agent CLI, plus durable PTYs for SSH, containers, and REPLs.",
   "keywords": [