aiterm-mcp 0.47.0 → 0.48.0

package/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.48.0] - 2026-10-03
+
+### 追加
+
+- 実行時エラーをBugHubへ報告する仕組み。既定では無効で、何も送らない。`aiterm-runtime-errors reporting enable`で明示して有効にし、かつBugHubの持ち主が置いた合鍵のファイルがある端末だけが送る。宛先は合鍵のファイルから読む。送るのは別processで、きっかけはエラーの記録・解決や開き直し・MCPの起動（未報告がある時だけ、多くても1時間に1回）と`aiterm-runtime-errors report`。応答の署名まで確かめた時だけ受け取り済みにする。`aiterm-runtime-errors reporting status`で状態を見られる。
+- 報告を有効にした端末は、工場の収集設定が無くても実行時エラーの記録が有効になる。
+
+### 修正
+
+- 試験が、わざと起こした失敗を利用者の実行時エラーの記録へ書いていた（CIを走らせる端末で、試験のたびに1件増えていた）。試験の記録先を一時フォルダへ向けた。製品の動きは変わらない。
+
+## [0.47.1] - 2026-10-03
+
+### 修正
+
+- 混んだ端末で、agentの画面が描かれる前に入力受付の待ち（30秒）が切れ、`agent_launch`が`reason=unrecognized_screen`で初手を送らなかった。画面が起動コマンドの表示のままの時だけ、起動から50秒まで待つ。描かれた後の画面の扱いと、50秒でも描かれない時の未送信の返し方は変わらない。
+- Codex・Claude Code・Cursorを親にしたMCP processが、5秒おきに全processの一覧を2回ずつ取っていた（POSIXは`ps -axww`、WindowsはPowerShell）。processの多い端末でCPUを使い続け、その間MCPの応答も止まっていた。5秒おきの確認は他の持ち主のpidの存在だけを見て、開始時刻の照合は初めて見た持ち主と60秒に1回だけ、対象のpidに絞って行う。配送記録を引き継ぐ条件は変わらない。終了直後に同じpidが再利用された時だけ、引き継ぎが最長60秒遅れる。
+
 ## [0.47.0] - 2026-10-03
 
 ### 追加
@@ -1976,7 +1994,9 @@ prototype (preserved under `prototype/python/` as the porting source and referen
   `ubuntu-latest` for Node 18/20/22, publishing to npm on `v*` tags with
   provenance.
 
-[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.47.0...HEAD
+[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.48.0...HEAD
+[0.48.0]: https://github.com/kitepon/aiterm-mcp/compare/v0.47.1...v0.48.0
+[0.47.1]: https://github.com/kitepon/aiterm-mcp/compare/v0.47.0...v0.47.1
 [0.47.0]: https://github.com/kitepon/aiterm-mcp/compare/v0.46.1...v0.47.0
 [0.46.1]: https://github.com/kitepon/aiterm-mcp/compare/v0.46.0...v0.46.1
 [0.46.0]: https://github.com/kitepon/aiterm-mcp/compare/v0.45.2...v0.46.0

package/README.ja.md

@@ -209,7 +209,7 @@ runtime-error store は canonical dotagents config の `collection.enabled: true
 場合だけ収集し、既定OFF、network送信は行いません。tag起点CIのnpm provenance（OIDC Trusted
 Publishing）で公開し、GitHub Release が Official MCP Registry を再登録します。
 
-**状態:** 開発継続中 · 現行公開版 **v0.47.0** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
+**状態:** 開発継続中 · 現行公開版 **v0.48.0** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
 
 ### 更新と巻き戻し
 
@@ -514,6 +514,8 @@ aiterm は同じ核心の洞察——端末を出会いの場にする——を
 進め、入力受付とharness生存を確認して`startup.status="ready"`を返す。指定なしのpromptなし起動は`not_checked`。
 Claude Code初回起動の文字表示テーマ選択では、画面で選択済みの項目を確定して起動を続ける。
 続いてログイン方式の選択が出た場合は`vendor_onboarding_required`を返す。公式の対話型Claude Code CLIで初回設定を完了する。
+入力受付の待ちは30秒。混んだ端末でagentの画面がまだ描かれていない間に切れた時だけ、起動から50秒まで待つ。
+それでも描かれなければ、今までと同じく未送信（`initial_prompt=not_sent`）で返り、sessionは残る。
 WindowsのCodexもhook確認を認識し、npm shim経由の起動を一つのharnessとして識別する。
 初手の`initial_prompt.status`は`not_requested`／`not_sent`／`submitted_unconfirmed`／`started`を区別する。
 未送信・未確認の失敗もsession付きstructuredContentを保持する。未確認のpromptを再送せず、返ったcursorで観測する。
@@ -552,6 +554,17 @@ Claudeの相関済み承認は既存の`claude_approval`を使う。
 
 consumer は `aiterm-runtime-errors snapshot` を読み、durable ingestion 後に `aiterm-runtime-errors ack --cursor N` を呼ぶ。運用上の明示操作は `resolve|reopen --fingerprint SHA256`。MCP からの収集・diagnostic read は timeout 付き child process に隔離し、FIFOや停止 filesystem が端末本体を止めない。store mutation は期限付き bakery ticket queue で直列化する。各waiterは PID＋process start identity＋owner token を持つ再利用されない固有ticketを所有するため、死んだownerだけを固有名で除去でき、固定path回収のABAを作らない。queueの期限は正常な前任者を含む総待ち時間ではなく、同じ先頭ownerが進まない時間を測る。通常pollはprocessの生存確認だけを行い、process start identityはblockerがstallした時に照合する。POSIX state は `$XDG_STATE_HOME/aiterm-mcp/`（既定 `~/.local/state/aiterm-mcp/`）へ atomic replacement で置き、every read で owner/mode を再検証する。Windows native は `%LOCALAPPDATA%\aiterm-mcp\` で current SID の非継承 FullControl ACE 1件だけへ DACL を再構築し readback する。今回 Windows は path/DACL/timeout の純粋テストだけであり、新しい実機統合成功は主張しない。
 
+### BugHubへの報告（既定では無効）
+
+Aitermは、既定では実行時エラーをどこへも送らない。送るのは、次の2つがそろった端末だけ。
+
+1. `aiterm-runtime-errors reporting enable` で明示して有効にした。
+2. BugHubの持ち主が置いた合鍵のファイルがある（POSIXは `~/.config/bughub/product-credentials/aiterm-mcp.json`、Windowsは `%LOCALAPPDATA%\bughub\product-credentials\aiterm-mcp.json`）。本人だけが読める通常のファイルでなければ読まない。
+
+宛先は合鍵のファイルから読む。送る中身は、エラーのコード・回数・最初と最後の時刻・版・重さ・解決の印だけで、prompt・path・stackは保存も送信もしない。送るのは別processで、MCP processは通信しない。きっかけは、エラーを記録した時・解決や開き直しをした時・MCPの起動時（未報告がある時だけ、多くても1時間に1回）と、`aiterm-runtime-errors report`（その場で1回、1分に1回まで）。応答の署名まで確かめた時だけ受け取り済みにし、確かめられない時は次の機会に送り直す。
+
+`aiterm-runtime-errors reporting status` は、有効・無効、合鍵の状態（`ready`／`missing`／`rejected`）、未報告の件数、最後の送信の結果を返す。止める時は `aiterm-runtime-errors reporting disable`。報告を有効にした端末は、工場の収集設定が無くても記録が有効になる。
+
 ### 対話エージェントharness
 
 `agent_launch`は選んだharnessの対話TUIを新しい永続PTYに起動し、`session_id`を返す。harnessはagent loop・認証・hook・session・transcriptを所有し、modelは独立。以後は他sessionと同じ`pty_read`／`pty_send`で操作する。

package/README.md

@@ -223,7 +223,7 @@ collection is off by default and performs no network I/O. It ships via
 tag-triggered CI with npm provenance (OIDC Trusted Publishing); the GitHub
 Release re-registers the Official MCP Registry entry.
 
-**Status:** actively maintained · current public release **v0.47.0** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
+**Status:** actively maintained · current public release **v0.48.0** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
 
 ### Update and rollback
 
@@ -546,6 +546,8 @@ displayed token count or null. Callers do not need raw argv or pane-text parsing
 consent even without a prompt, then verifies input readiness and harness liveness before returning `startup.status="ready"`.
 For Claude Code's first-run text-style menu, it confirms the item already selected on screen before continuing startup.
 If the CLI then requests an account login method, the launch reports `vendor_onboarding_required`; complete that choice in the official interactive Claude Code CLI.
+The input-readiness wait is 30 seconds. Only when it expires while the agent has not drawn anything yet (a busy host), the launch
+waits up to 50 seconds from startup. If nothing is drawn by then, it still returns `initial_prompt=not_sent` and keeps the session.
 A prompt-free launch without this option retains `startup.status="not_checked"`. `initial_prompt.status` distinguishes
 `not_requested`, `not_sent`, `submitted_unconfirmed`, and `started`. Failure responses retain structured session information.
 WindowsのCodexもhook確認を認識し、npm shim経由の起動を一つのharnessとして識別する。
@@ -587,6 +589,18 @@ snapshotの`product_version`は各recordの最終実発生時の版を表す。s
 
 Consumer flow is `aiterm-runtime-errors snapshot`, then `aiterm-runtime-errors ack --cursor N` after durable ingestion. Operators can use `resolve|reopen --fingerprint SHA256`. MCP collection and diagnostic reads run in timeout-bounded child processes, so a FIFO or stalled filesystem cannot block terminal work; child failure emits only the fixed store diagnostic. Store mutation uses a bounded bakery ticket queue: every waiter owns a never-reused ticket containing PID, process-start identity, and an owner token, so dead owners are removed by unique filename without fixed-path reclaim ABA. The queue deadline measures lack of progress by the same head owner, not total wait behind healthy predecessors; normal polling uses the native process-liveness check and validates process-start identity only when a blocker stalls. Worker deadlines use forced termination so a SIGTERM-ignoring child cannot mutate state after timeout. POSIX state is atomically replaced under `$XDG_STATE_HOME/aiterm-mcp/` (default `~/.local/state/aiterm-mcp/`) with owner/mode rechecked on every read. Windows native uses `%LOCALAPPDATA%\aiterm-mcp\`; each DACL is rebuilt and read back as one non-inherited FullControl ACE for the current SID. Windows path/DACL/timeout behavior is covered by pure tests in this change; no new Windows integration success is claimed.
 
+**Reporting to BugHub is off by default.** Aiterm sends runtime errors nowhere unless both hold: the user ran
+`aiterm-runtime-errors reporting enable`, and a credential file placed by the BugHub owner exists
+(`~/.config/bughub/product-credentials/aiterm-mcp.json`, or `%LOCALAPPDATA%\bughub\product-credentials\aiterm-mcp.json` on Windows;
+it is read only when it is a regular file readable by its owner alone). The destination comes from that file. The payload is the
+cumulative error codes, counts, first/last timestamps, versions, severity, and resolution marks; prompts, paths, and stacks are neither
+stored nor sent. A separate process does the sending, never the MCP process, and there is no polling: a report is attempted when an error
+is recorded, when a record is resolved or reopened, and when the MCP server starts (only while something is unreported, at most once per
+hour), or on `aiterm-runtime-errors report` (once, at most once per minute). A record becomes acknowledged only after the response
+signature is verified; otherwise the next attempt resends the then-current totals. `aiterm-runtime-errors reporting status` shows the
+switch, the credential state, the unreported count, and the last attempt; `reporting disable` turns it off. Enabling reporting also
+enables collection on that host.
+
 ### Interactive agent harnesses
 
 `agent_launch` starts a selected harness's interactive coding-agent TUI inside a fresh persistent PTY and returns its `session_id`. The harness owns the agent loop, authentication, hooks, session, and transcript; `model` is independent. The TUI is a full-screen app, so read it with `pty_read({ screen: true })` for the rendered view.

package/dist/core.js

@@ -51,6 +51,11 @@ const AGENT_DONE_SCREEN_SETTLE_MIN_SAMPLES = 3;
 const AGENT_SUBMIT_DELAY_MS = 250;
 const AGENT_METADATA_NEGATIVE_CACHE_TTL_MS = 2_000;
 const AGENT_TUI_READY_TIMEOUT_MS = 30_000;
+// 画面が起動コマンドの表示のまま（agentがまだ何も描いていない）で上の待ちが切れた時に、起動から待つ上限。
+// Codex親の既定のtool timeout（60秒）の内側に収める。越えると親には時間切れに見えたまま子へ初手が送られる。
+const AGENT_TUI_FIRST_DRAW_TIMEOUT_MS = 50_000;
+const LAUNCH_ECHO_TAIL_CHARS = 24;
+const LAUNCH_ECHO_MIN_CHARS = 8;
 const AGENT_TUI_READY_POLL_MS = 500;
 const AGENT_TUI_READY_STABLE_SAMPLES = 11;
 const AGENT_TUI_READY_LINES = 45;
@@ -1272,6 +1277,7 @@ function closeSessionInternal(name, observeDependency = true) {
         }
     }
     cleanupAgentState(name);
+    agentLaunchLines.delete(name);
     return `closed ${name}`;
 }
 export function closeSession(name) {
@@ -2829,11 +2835,32 @@ function isClaudeBypassPermissionsScreen(screen) {
 function isClaudeManagedLaunchConfirmation(screen) {
     return isClaudeWorkspaceTrustScreen(screen) || isClaudeBypassPermissionsScreen(screen);
 }
+/**
+ * 画面の末尾が、Aitermが打った起動コマンドの表示のままかを見る（純粋関数）。
+ * 混んだ端末ではagentのTUIが描かれる前にready待ちが切れる。画面の最後の文字列が起動コマンドの一部なら、
+ * agentはまだ何も描いていない。空白と行頭の継続prompt（`> `／`>> `）は端末の折返しとshellの表示なので比べない。
+ */
+export function launchEchoIsLastOnScreen(screen, launchLine) {
+    const command = launchLine.replace(/\s+/g, "");
+    const lines = screen.split("\n");
+    let tail = "";
+    for (let i = lines.length - 1; i >= 0 && tail.length < LAUNCH_ECHO_TAIL_CHARS; i--) {
+        tail = lines[i].replace(/^\s*>{1,2}(?:\s|$)/, "").replace(/\s+/g, "") + tail;
+    }
+    tail = tail.slice(-LAUNCH_ECHO_TAIL_CHARS);
+    return tail.length >= LAUNCH_ECHO_MIN_CHARS && command.includes(tail);
+}
+// 起動コマンドはopenAgentだけが知っている。同じprocess内のready待ちが、TUI未描画の判定に使う。
+const agentLaunchLines = new Map();
 async function waitAgentTuiReadyImpl(kind, sample, sleepFn, opts = {}) {
     const timeoutMs = opts.timeoutMs ?? AGENT_TUI_READY_TIMEOUT_MS;
     const pollMs = opts.pollMs ?? AGENT_TUI_READY_POLL_MS;
     const stableSamples = opts.stableSamples ?? agentTuiReadyStableSamplesTestOverride ?? AGENT_TUI_READY_STABLE_SAMPLES;
-    const deadline = performance.now() + timeoutMs;
+    const now = opts.now ?? (() => performance.now());
+    const start = now();
+    let deadline = start + timeoutMs;
+    // 呼ぶ側が既定より短い待ちを指定した時は、その待ちを守る（延ばさない）。
+    const firstDrawDeadline = timeoutMs >= AGENT_TUI_READY_TIMEOUT_MS ? start + AGENT_TUI_FIRST_DRAW_TIMEOUT_MS : deadline;
     let samples = 0;
     let readyStreak = 0;
     let lastScreen = "";
@@ -2852,13 +2879,21 @@ async function waitAgentTuiReadyImpl(kind, sample, sleepFn, opts = {}) {
             if (isAgentTuiActionRequired(kind, lastScreen))
                 return { ready: false, samples, lastScreen };
         }
-        if (performance.now() >= deadline)
-            return { ready: false, samples, lastScreen };
+        if (now() >= deadline) {
+            // TUIが一度も描かれていない間に切れた時だけ、決めた上限まで待ちを延ばす。描かれた後の画面は今までどおり扱う。
+            if (deadline >= firstDrawDeadline || opts.launchLine === undefined
+                || !launchEchoIsLastOnScreen(lastScreen, opts.launchLine))
+                return { ready: false, samples, lastScreen };
+            deadline = firstDrawDeadline;
+        }
         await sleepFn(pollMs);
     }
 }
 async function waitAgentTuiReady(name, meta, timeoutMs = AGENT_TUI_READY_TIMEOUT_MS) {
-    return waitAgentTuiReadyImpl(meta.kind, () => captureScreen(name, AGENT_TUI_READY_LINES), sleep, { timeoutMs });
+    const result = await waitAgentTuiReadyImpl(meta.kind, () => captureScreen(name, AGENT_TUI_READY_LINES), sleep, { timeoutMs, launchLine: agentLaunchLines.get(name) });
+    if (result.ready)
+        agentLaunchLines.delete(name);
+    return result;
 }
 async function waitAgentTuiReadyByKind(name, kind, timeoutMs = AGENT_TUI_READY_TIMEOUT_MS) {
     return waitAgentTuiReadyImpl(kind, () => captureScreen(name, AGENT_TUI_READY_LINES), sleep, { timeoutMs });
@@ -3036,9 +3071,13 @@ export async function __testWaitAgentTuiReady(kind, samples, opts = {}) {
         throw new AitermError("agent ready test samples が空です", 2);
     let i = 0;
     const sleeps = [];
+    // virtualClockは待った分だけ進む時計。実時間を使わずに締切の扱いを確かめる。
+    let clock = 0;
+    const { virtualClock, ...waitOpts } = opts;
     const result = await waitAgentTuiReadyImpl(kind, () => samples[Math.min(i++, samples.length - 1)], async (ms) => {
         sleeps.push(ms);
-    }, opts);
+        clock += ms;
+    }, virtualClock ? { ...waitOpts, now: () => clock } : waitOpts);
     return { ...result, sleeps };
 }
 export function __testIsAgentTuiIdleReady(kind, screen) {
@@ -4357,6 +4396,8 @@ export function openAgent(kind, opts = {}) {
             const envPrefix = agentEnvPrefix(meta, sid, envVars);
             full = cwdForCmd ? `cd ${shq(cwdForCmd)} && ${envPrefix}${cmd}` : `${envPrefix}${cmd}`;
         }
+        if (meta)
+            agentLaunchLines.set(sid, full);
         // force:true はagent sessionへの手動介入を表す。起動コマンド自体はAitermが組み立てて素送信する。
         send(sid, full, {
             enter: true,

package/dist/index.js

@@ -15,6 +15,7 @@ import { z } from "zod";
 import { agentModelsResult } from "./model-catalog.js";
 import * as core from "./core.js";
 import { runtimeErrorStoreDiagnostic } from "./runtime-error-store.js";
+import { triggerRuntimeErrorReport } from "./runtime-error-report.js";
 import { createRequire } from "node:module";
 import { ParentDeliveryManager, deliveryKey } from "./parent-delivery.js";
 import { acceptRemote, callRemoteTool, observeRemoteAgentDone, remoteInputDescription, remoteInputSchema, remoteLabel, remoteWaitProcess } from "./remote.js";
@@ -1120,6 +1121,8 @@ async function main() {
     };
     const transport = new StdioServerTransport();
     await server.connect(transport);
+    // 受け口がまだ受け取っていない実行時エラーがあれば、別processで送る（明示して有効にした端末だけ。既定では何も起動しない）。
+    triggerRuntimeErrorReport();
 }
 main().catch((e) => {
     console.error("aiterm-mcp fatal:", e);

package/dist/parent-delivery.js

@@ -4,7 +4,7 @@ import * as path from "node:path";
 import { randomUUID, createHash } from "node:crypto";
 import { z } from "zod";
 import { ensureStateRoot, writeJson0600 } from "./agent-shared.js";
-import { readRuntimeProcesses } from "./process-runtime.js";
+import { readProcessIdentities } from "./process-runtime.js";
 import { CodexDeliveryError, submitCodexParentAnswer, verifyCodexParent } from "./codex-parent-receiver.js";
 import { claudeParentSchema, ClaudeDeliveryError, bindClaudeParentDelivery, submitClaudeParentAnswer, verifyClaudeParent } from "./claude-parent-receiver.js";
 import { cursorParentSchema, CursorDeliveryError, prepareCursorDelivery, submitCursorParentAnswer, verifyCursorParent } from "./cursor-parent-receiver.js";
@@ -57,6 +57,22 @@ async function submitParentAnswer(parent, deliveryId, text) {
         return submitCursorParentAnswer(parent, deliveryId, text);
     return submitCodexParentAnswer(parent, deliveryId, text);
 }
+// 開始時刻の照会はprocessの起動を伴い、processの多い端末では1回が重い（macOSのpsは-pでも全processを歩く）。
+// 5秒おきの確認はpidの存在だけを見て、開始時刻は初めて見た持ち主とこの間隔でだけ照合する。
+// 持ち主が終了した直後に同じpidが再利用された時だけ、回収が最長でこの間隔だけ遅れる。生きている持ち主の記録は引き取らない。
+const OWNER_IDENTITY_RECHECK_MS = 60_000;
+function processExists(pid) {
+    // 0以下はprocess groupを指す。持ち主のpidにはならない。
+    if (pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
 function readRecord(file) {
     try {
         const record = recordSchema.parse(JSON.parse(fs.readFileSync(file, "utf8")));
@@ -98,11 +114,14 @@ export class ParentDeliveryManager {
     registering = new Map();
     timer;
     recovering = null;
+    // 他の持ち主の開始時刻を最後に照合した時刻（持ち主の保存場所ごと）。
+    verifiedOwners = new Map();
     serviceError = null;
     closing = false;
     constructor(options = {}) {
         this.deps = { observe: observeAnywhere, answer: answerAnywhere, submit: submitParentAnswer,
-            verify: verifyParent, processes: readRuntimeProcesses, ...options.dependencies };
+            verify: verifyParent, processes: readProcessIdentities, exists: processExists,
+            now: () => performance.now(), ...options.dependencies };
         const stateRoot = ensureStateRoot();
         // 別端末の子の記録はremote-で始まる保存場所へ分け、boundary.remoteを知らない旧版のreaderへ渡さない。
         const prefix = options.remote ? "remote-" : "";
@@ -118,7 +137,7 @@ export class ParentDeliveryManager {
         this.active = path.join(this.root, "active");
         this.results = path.join(this.root, "results");
         this.claims = path.join(options.root ?? path.join(stateRoot, prefix + "parent-deliveries"), "claims");
-        const ownProcess = this.deps.processes().find((entry) => entry.pid === process.pid);
+        const ownProcess = this.deps.processes([process.pid]).find((entry) => entry.pid === process.pid);
         if (!ownProcess)
             throw new AitermError("PARENT_DELIVERY_OWNER_UNKNOWN: 配送processを識別できません", 2);
         this.owner = { pid: process.pid, started_identity: ownProcess.started_identity, closed: false };
@@ -375,13 +394,49 @@ export class ParentDeliveryManager {
         return this.recovering;
     }
     async recoverOrphans() {
-        const processes = this.deps.processes();
-        for (const directory of fs.readdirSync(this.active, { withFileTypes: true })) {
-            if (!directory.isDirectory())
+        // 生存を確かめる相手は、closeしていない他の持ち主だけ。居なければOSへ問い合わせない。
+        // この処理は5秒おきに全MCP processで回る。全processの一覧を取ると、processの多い端末で負荷になる。
+        const directories = fs.readdirSync(this.active, { withFileTypes: true })
+            .filter((directory) => directory.isDirectory() && path.join(this.active, directory.name) !== this.ownerDir);
+        const now = this.deps.now();
+        const alive = new Map();
+        const unverified = [];
+        for (const directory of directories) {
+            let owner;
+            try {
+                owner = JSON.parse(fs.readFileSync(path.join(this.active, directory.name, "owner.json"), "utf8"));
+            }
+            catch {
+                continue; /* 形式の検査と失敗の扱いは下の回収で行う */
+            }
+            if (owner?.closed !== false || !Number.isSafeInteger(owner.pid) || typeof owner.started_identity !== "string")
                 continue;
-            const oldDir = path.join(this.active, directory.name);
-            if (oldDir === this.ownerDir)
+            const pid = owner.pid;
+            if (!this.deps.exists(pid)) {
+                alive.set(directory.name, false);
                 continue;
+            }
+            const verified = this.verifiedOwners.get(directory.name);
+            if (verified && verified.pid === pid && verified.started_identity === owner.started_identity
+                && now - verified.at < OWNER_IDENTITY_RECHECK_MS)
+                alive.set(directory.name, true);
+            else
+                unverified.push({ name: directory.name, pid, started_identity: owner.started_identity });
+        }
+        if (unverified.length > 0) {
+            const processes = this.deps.processes([...new Set(unverified.map((entry) => entry.pid))]);
+            for (const entry of unverified) {
+                const same = processes.some((row) => row.pid === entry.pid && row.started_identity === entry.started_identity);
+                alive.set(entry.name, same);
+                if (same)
+                    this.verifiedOwners.set(entry.name, { pid: entry.pid, started_identity: entry.started_identity, at: now });
+            }
+        }
+        for (const name of this.verifiedOwners.keys())
+            if (alive.get(name) !== true)
+                this.verifiedOwners.delete(name);
+        for (const directory of directories) {
+            const oldDir = path.join(this.active, directory.name);
             let owner;
             try {
                 owner = JSON.parse(fs.readFileSync(path.join(oldDir, "owner.json"), "utf8"));
@@ -394,7 +449,8 @@ export class ParentDeliveryManager {
             if (!Number.isSafeInteger(owner.pid) || typeof owner.started_identity !== "string" || typeof owner.closed !== "boolean") {
                 throw new AitermError("PARENT_DELIVERY_OWNER_INVALID: 配送所有者の形式が不正です", 2);
             }
-            if (!owner.closed && processes.some((entry) => entry.pid === owner.pid && entry.started_identity === owner.started_identity))
+            // 生死を確かめた後に現れた持ち主は、次の回で扱う。生きている持ち主の記録は引き取らない。
+            if (!owner.closed && alive.get(directory.name) !== false)
                 continue;
             for (const name of fs.readdirSync(oldDir).filter((name) => name !== "owner.json" && name.endsWith(".json"))) {
                 const oldFile = path.join(oldDir, name);

package/dist/process-runtime.js

@@ -75,6 +75,60 @@ export function readRuntimeProcesses() {
         };
     });
 }
+/**
+ * 指定したpidの開始時刻だけを引く。readRuntimeProcessesと同じ開始時刻を返し、存在しないpidは結果に含めない。
+ * 全processのargvを読む一覧取得は、processの多い端末で重い（定期実行から呼ばない）。
+ */
+export function readProcessIdentities(pids) {
+    const wanted = [...new Set(pids)];
+    if (wanted.length === 0)
+        return [];
+    if (wanted.some(pid => !Number.isSafeInteger(pid) || pid < 0))
+        throw new AitermError("process照会のpidが不正です", 2);
+    if (!isWin) {
+        const result = spawnSync("/bin/ps", ["-o", "pid=,lstart=", "-p", wanted.join(",")], {
+            encoding: "utf8", env: { ...process.env, LC_ALL: "C" }, timeout: 10000,
+        });
+        // 該当するprocessが一つも無い時、psは何も出さずstatus 1で終わる。
+        if (result.error || (result.status !== 0 && !(result.status === 1 && !result.stdout.trim()))) {
+            throw new AitermError("OSのprocess一覧を取得できません", 2);
+        }
+        return result.stdout.split("\n").filter(line => line.trim()).map(line => {
+            const match = /^\s*(\d+)\s+(\S+\s+\S+\s+\d+\s+\S+\s+\d+)\s*$/.exec(line);
+            if (!match)
+                throw new AitermError("process一覧の形式を認識できません", 2);
+            return { pid: Number(match[1]), started_identity: match[2].trim() };
+        });
+    }
+    const script = [
+        "$ErrorActionPreference='Stop'",
+        "[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false)",
+        `$rows=@(Get-CimInstance Win32_Process -Filter "${wanted.map(pid => `ProcessId=${pid}`).join(" OR ")}" | Where-Object { $null -ne $_.CreationDate -and $null -ne $_.CommandLine } | ForEach-Object {`,
+        "[ordered]@{ pid=[int]$_.ProcessId; started_identity=$_.CreationDate.ToUniversalTime().ToString('o') }",
+        "})",
+        "ConvertTo-Json -Compress -InputObject $rows",
+    ].join("\n");
+    const result = spawnSync(resolveWindowsPowerShell7(), ["-NoLogo", "-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
+        encoding: "utf8", timeout: 15000, windowsHide: true,
+    });
+    if (result.error || result.status !== 0)
+        throw new AitermError("Windowsのnative process一覧を取得できません", 2);
+    let rows;
+    try {
+        rows = JSON.parse(result.stdout);
+    }
+    catch {
+        throw new AitermError("Windows process一覧のJSONを読めません", 2);
+    }
+    if (!Array.isArray(rows))
+        throw new AitermError("Windows process一覧が配列ではありません", 2);
+    return rows.map(row => {
+        if (!row || !Number.isSafeInteger(row.pid) || typeof row.started_identity !== "string"
+            || !Number.isFinite(Date.parse(row.started_identity)))
+            throw new AitermError("Windows process一覧のfieldが不正です", 2);
+        return { pid: row.pid, started_identity: new Date(row.started_identity).toISOString() };
+    });
+}
 // Windowsの親PIDは親の終了後も残り、別processへ再利用される。子より後に始まったprocessは
 // 本当の親ではないので、親子関係として辿らない（辿ると循環や無関係なprocessの混入が起きる）。
 export function parentProcess(row, byPid) {

package/dist/runtime-error-os.js

@@ -23,6 +23,50 @@ export function defaultRuntimeErrorPaths(options = {}) {
         storePath: path.join(stateHome, "aiterm-mcp", "runtime-errors.json"),
     };
 }
+// BugHubへの報告で使う場所。有効スイッチはAiterm自身の設定、合鍵はBugHubの持ち主が端末へ置くファイル。
+export function defaultRuntimeErrorReportPaths(options = {}) {
+    const platform = options.platform ?? process.platform;
+    const home = options.home ?? os.homedir();
+    if (platform === "win32") {
+        const base = options.localAppData ?? process.env.LOCALAPPDATA ?? path.win32.join(home, "AppData", "Local");
+        return {
+            reportingConfigPath: path.win32.join(base, "aiterm-mcp", "runtime-error-reporting.json"),
+            credentialPath: path.win32.join(base, "bughub", "product-credentials", "aiterm-mcp.json"),
+            reportStatePath: path.win32.join(base, "aiterm-mcp", "runtime-errors-report.json"),
+        };
+    }
+    const configHome = options.xdgConfigHome ?? process.env.XDG_CONFIG_HOME ?? path.join(home, ".config");
+    const stateHome = options.xdgStateHome ?? process.env.XDG_STATE_HOME ?? path.join(home, ".local", "state");
+    return {
+        reportingConfigPath: path.join(configHome, "aiterm-mcp", "runtime-error-reporting.json"),
+        credentialPath: path.join(configHome, "bughub", "product-credentials", "aiterm-mcp.json"),
+        reportStatePath: path.join(stateHome, "aiterm-mcp", "runtime-errors-report.json"),
+    };
+}
+const MAX_REPORTING_CONFIG_BYTES = 4 * 1024;
+/** 報告の有効スイッチの状態。ファイルが無ければ無効（既定）。形が違うファイルは有効とみなさない。 */
+export function runtimeErrorReportingStatus(file, platform = process.platform) {
+    let text;
+    try {
+        text = readBoundedFile(file, MAX_REPORTING_CONFIG_BYTES, platform, false);
+    }
+    catch (error) {
+        return error.code === "ENOENT" ? "disabled" : "malformed";
+    }
+    try {
+        const config = JSON.parse(text);
+        if (typeof config !== "object" || config === null || Array.isArray(config))
+            return "malformed";
+        const keys = Object.keys(config);
+        const value = config;
+        if (keys.length !== 2 || value.schema_version !== "1.0" || typeof value.enabled !== "boolean")
+            return "malformed";
+        return value.enabled ? "enabled" : "disabled";
+    }
+    catch {
+        return "malformed";
+    }
+}
 const WINDOWS_DACL_VERIFY_SCRIPT = String.raw `
 $ErrorActionPreference='Stop'
 $target=$env:AITERMMCP_ACL_PATH; $kind=$env:AITERMMCP_ACL_KIND

package/dist/runtime-error-report.js

@@ -0,0 +1,260 @@
+// BugHubへの実行時エラーの報告。明示して有効にした端末だけが、合鍵のファイルにある宛先へ累計を送る。
+// 既定では通信しない。送るのは常に別processで、MCP processは通信しない。判断はADR 0079。
+import { spawn } from "node:child_process";
+import { createHash, createHmac, randomUUID, timingSafeEqual } from "node:crypto";
+import * as fs from "node:fs";
+import { createRequire } from "node:module";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { defaultRuntimeErrorReportPaths, readBoundedFile, runtimeErrorReportingStatus } from "./runtime-error-os.js";
+import { RuntimeErrorStore } from "./runtime-error-store.js";
+const pkg = createRequire(import.meta.url)("../package.json");
+const WORKER = fileURLToPath(new URL("./runtime-error-worker.js", import.meta.url));
+const REPORT_SCHEMA = "1.0";
+const REPORT_STATE_SCHEMA = "1.0";
+const MAX_REPORT_RECORDS = 500;
+const MAX_REPORT_BYTES = 512 * 1024;
+const MAX_CREDENTIAL_BYTES = 8 * 1024;
+const MAX_RESPONSE_BYTES = 64 * 1024;
+const REQUEST_TIMEOUT_MS = 10_000;
+// 受け口の上限は端末×製品ごとに1分に1回。自動の送信は、未受領がある時だけ、多くても1時間に1回。
+const MANUAL_MIN_INTERVAL_MS = 60_000;
+const AUTO_MIN_INTERVAL_MS = 60 * 60_000;
+const LOCK_STALE_MS = 2 * 60_000;
+/** 契約にある項目だけを載せる。端末名・OS・arch・保存用の連番は送らない（端末は合鍵から決まる）。 */
+export function buildRuntimeErrorReport(records, options) {
+    if (records.length > MAX_REPORT_RECORDS)
+        throw new Error(`1回のreportは${MAX_REPORT_RECORDS}件までです`);
+    return {
+        schema_version: REPORT_SCHEMA,
+        report_id: options.reportId,
+        product_id: "aiterm-mcp",
+        installed_version: options.installedVersion,
+        observed_at: options.observedAt,
+        runtime_errors: records.map((record) => ({
+            fingerprint: record.fingerprint, error_code: record.error_code, component: record.component,
+            message_template: record.message_template, severity: record.severity, status: record.status,
+            occurrence_count: record.occurrence_count, first_seen: record.first_seen, last_seen: record.last_seen,
+            product_version: record.product_version, state_schema_version: record.state_schema_version,
+        })),
+        resolutions: records.filter((record) => record.status === "resolved" && record.resolved_at !== null && record.reason_code !== null)
+            .map((record) => ({ fingerprint: record.fingerprint, resolved_at: record.resolved_at, reason_code: record.reason_code })),
+    };
+}
+export function reportBodyDigest(body) {
+    return createHash("sha256").update(body).digest("hex");
+}
+/** sig = HMAC-SHA256(secret, ts + "\n" + 送ったバイト列のSHA-256の16進)。secretは文字列をそのままUTF-8で鍵にする。 */
+export function signReport(secret, ts, body) {
+    return createHmac("sha256", Buffer.from(secret, "utf8")).update(`${ts}\n${reportBodyDigest(body)}`).digest("hex");
+}
+export function reportAuthorization(keyId, ts, sig) {
+    return `BugHub-HMAC-SHA256 key_id=${keyId}, ts=${ts}, sig=${sig}`;
+}
+/** 受領とみなすのは、accepted・report_idの一致・応答の署名がそろった時だけ。別の機器が返した200を受領にしない。 */
+export function verifyReportResponse(secret, reportId, response) {
+    if (typeof response !== "object" || response === null || Array.isArray(response))
+        return false;
+    const value = response;
+    if (value.accepted !== true || value.report_id !== reportId)
+        return false;
+    if (typeof value.received_at !== "string" || typeof value.sig !== "string" || !/^[0-9a-f]{64}$/.test(value.sig))
+        return false;
+    const expected = createHmac("sha256", Buffer.from(secret, "utf8")).update(`${reportId}\n${value.received_at}`).digest();
+    return timingSafeEqual(expected, Buffer.from(value.sig, "hex"));
+}
+/** 合鍵のファイルは、本人だけが読める通常のファイルだけを読む。無い端末は「無い」と返し、失敗にしない。 */
+export function readProductCredential(file, platform = process.platform) {
+    let text;
+    try {
+        text = readBoundedFile(file, MAX_CREDENTIAL_BYTES, platform, true);
+    }
+    catch (error) {
+        return error.code === "ENOENT" ? { status: "missing" } : { status: "rejected", reason: "unsafe_file" };
+    }
+    try {
+        const value = JSON.parse(text);
+        if (typeof value !== "object" || value === null || Array.isArray(value))
+            return { status: "rejected", reason: "malformed" };
+        const credential = value;
+        if (Object.keys(credential).sort().join(",") !== "key_id,secret,url")
+            return { status: "rejected", reason: "malformed" };
+        if (typeof credential.url !== "string" || typeof credential.key_id !== "string" || typeof credential.secret !== "string"
+            || !/^[A-Za-z0-9._-]{1,128}$/.test(credential.key_id) || credential.secret.length < 1 || credential.secret.length > 1024) {
+            return { status: "rejected", reason: "malformed" };
+        }
+        const url = new URL(credential.url);
+        if (url.protocol !== "http:" && url.protocol !== "https:")
+            return { status: "rejected", reason: "malformed" };
+        return { status: "ready", credential: { url: credential.url, key_id: credential.key_id, secret: credential.secret } };
+    }
+    catch {
+        return { status: "rejected", reason: "malformed" };
+    }
+}
+export function setRuntimeErrorReporting(file, enabled) {
+    fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
+    const temp = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(temp, `${JSON.stringify({ schema_version: "1.0", enabled })}\n`, { mode: 0o600 });
+    fs.renameSync(temp, file);
+}
+const EMPTY_REPORT_STATE = () => ({
+    schema_version: REPORT_STATE_SCHEMA, last_attempt_at: null, last_status: null, last_http_status: null,
+    last_accepted_at: null, halted_credential_mtime_ms: null,
+});
+export function readReportState(file) {
+    try {
+        const value = JSON.parse(fs.readFileSync(file, "utf8"));
+        if (value?.schema_version !== REPORT_STATE_SCHEMA)
+            return EMPTY_REPORT_STATE();
+        return { ...EMPTY_REPORT_STATE(), ...value };
+    }
+    catch {
+        return EMPTY_REPORT_STATE();
+    }
+}
+function writeReportState(file, state) {
+    fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
+    const temp = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(temp, `${JSON.stringify(state)}\n`, { mode: 0o600 });
+    fs.renameSync(temp, file);
+}
+/**
+ * 未受領の記録がある時に、その時点の累計を1回送る。受領を確かめられた時だけ受け取り済みにする。
+ * 届いたか分からない時は何も進めない。次の機会に、その時点の累計を新しいreport_idで送り直す。
+ */
+export async function reportRuntimeErrors(options) {
+    const platform = options.platform ?? process.platform;
+    const paths = options.paths ?? defaultRuntimeErrorReportPaths({ platform });
+    const now = options.now ?? (() => new Date());
+    const result = (status, extra = {}) => ({ status, http_status: null, reported_records: 0, acknowledged_cursor: null, ...extra });
+    if (runtimeErrorReportingStatus(paths.reportingConfigPath, platform) !== "enabled")
+        return result("disabled");
+    const credential = readProductCredential(paths.credentialPath, platform);
+    if (credential.status === "missing")
+        return result("no_credential");
+    if (credential.status === "rejected")
+        return result("credential_rejected");
+    const store = options.store ?? new RuntimeErrorStore();
+    const snapshot = store.snapshot();
+    if (snapshot.collection !== "enabled" || snapshot.cursor <= snapshot.acknowledged_cursor)
+        return result("nothing_to_report");
+    const lock = `${paths.reportStatePath}.lock`;
+    fs.mkdirSync(path.dirname(lock), { recursive: true, mode: 0o700 });
+    try {
+        fs.mkdirSync(lock);
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        // 別のprocessが送っている。途中で落ちたprocessの残りだけ、時間を置いて引き取る。
+        let stale = false;
+        try {
+            stale = now().getTime() - fs.statSync(lock).mtimeMs > LOCK_STALE_MS;
+        }
+        catch { /* 相手が外した */ }
+        if (!stale)
+            return result("deferred");
+        try {
+            fs.rmdirSync(lock);
+            fs.mkdirSync(lock);
+        }
+        catch {
+            return result("deferred");
+        }
+    }
+    try {
+        const state = readReportState(paths.reportStatePath);
+        const started = now();
+        const sinceLast = state.last_attempt_at === null ? Infinity : started.getTime() - Date.parse(state.last_attempt_at);
+        if (sinceLast < (options.trigger === "auto" ? AUTO_MIN_INTERVAL_MS : MANUAL_MIN_INTERVAL_MS))
+            return result("deferred");
+        let credentialMtime = null;
+        try {
+            credentialMtime = fs.statSync(paths.credentialPath).mtimeMs;
+        }
+        catch { /* 読めた直後に消えた時は下の送信結果に任せる */ }
+        if (options.trigger === "auto" && state.halted_credential_mtime_ms !== null && state.halted_credential_mtime_ms === credentialMtime) {
+            return result("halted");
+        }
+        // tsとobserved_atは同じ時刻から作る（受け口は両者が10分より離れたreportを断る）。
+        const ts = String(Math.floor(started.getTime() / 1000));
+        const reportId = randomUUID();
+        const report = buildRuntimeErrorReport(snapshot.records, {
+            installedVersion: options.installedVersion ?? pkg.version, reportId,
+            observedAt: new Date(Number(ts) * 1000).toISOString(),
+        });
+        const body = Buffer.from(JSON.stringify(report), "utf8");
+        if (body.byteLength > MAX_REPORT_BYTES)
+            throw new Error("reportが大きすぎます");
+        const finish = (status, httpStatus, acknowledged = null) => {
+            writeReportState(paths.reportStatePath, {
+                ...state, last_attempt_at: started.toISOString(), last_status: status, last_http_status: httpStatus,
+                last_accepted_at: status === "accepted" ? started.toISOString() : state.last_accepted_at,
+                halted_credential_mtime_ms: status === "halted" ? credentialMtime : null,
+            });
+            return result(status, { http_status: httpStatus, reported_records: report.runtime_errors.length, acknowledged_cursor: acknowledged });
+        };
+        let response;
+        let text;
+        try {
+            response = await (options.fetch ?? fetch)(credential.credential.url, {
+                method: "POST", redirect: "error", signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+                headers: {
+                    "content-type": "application/json",
+                    authorization: reportAuthorization(credential.credential.key_id, ts, signReport(credential.credential.secret, ts, body)),
+                },
+                body,
+            });
+            text = (await response.text()).slice(0, MAX_RESPONSE_BYTES);
+        }
+        catch {
+            return finish("delivery_unknown", null);
+        }
+        if (response.status === 200) {
+            let parsed = null;
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch { /* 署名を確かめられない200は受領にしない */ }
+            if (!verifyReportResponse(credential.credential.secret, reportId, parsed))
+                return finish("delivery_unknown", 200);
+            store.acknowledge(snapshot.cursor);
+            return finish("accepted", 200, snapshot.cursor);
+        }
+        // 合鍵が無効な間は、同じファイルのまま自動で送り続けない。時刻のずれ（401 timestamp_skew）は合鍵の問題ではない。
+        if ((response.status === 401 && !/skew/i.test(text)) || response.status === 403)
+            return finish("halted", response.status);
+        if (response.status === 429)
+            return finish("rate_limited", 429);
+        if (response.status >= 500)
+            return finish("delivery_unknown", response.status);
+        return finish("rejected", response.status);
+    }
+    finally {
+        try {
+            fs.rmdirSync(lock);
+        }
+        catch { /* 古いlockとして引き取られた */ }
+    }
+}
+/**
+ * 自動の送信を別processへ頼む。呼ぶ側（MCP process・記録のworker・CLI）は通信しない。
+ * 有効でない端末では何も起動しない。node:testの子で動く時も起動しない（試験が、その端末の本物の記録を
+ * 開発中の版の名前で送らないように）。
+ */
+export function triggerRuntimeErrorReport(env = process.env) {
+    if (env.NODE_TEST_CONTEXT)
+        return false;
+    try {
+        if (runtimeErrorReportingStatus(defaultRuntimeErrorReportPaths().reportingConfigPath) !== "enabled")
+            return false;
+        const child = spawn(process.execPath, [WORKER, "report"], { stdio: "ignore", detached: true, windowsHide: true, env });
+        child.once("error", () => { });
+        child.unref();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/runtime-error-store.js

@@ -3,6 +3,7 @@ import { spawn, spawnSync } from "node:child_process";
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { createRequire } from "node:module";
+import { defaultRuntimeErrorReportPaths, runtimeErrorReportingStatus } from "./runtime-error-os.js";
 import { defaultRuntimeErrorPaths, windowsPrivateDaclCommand, expectedHostProfiles, readBoundedFile, processStartIdentity, forceKill } from "./runtime-error-os.js";
 export { defaultRuntimeErrorPaths, windowsPrivateDaclCommand, windowsPrivateDaclVerifyCommand } from "./runtime-error-os.js";
 import { fileURLToPath } from "node:url";
@@ -183,6 +184,7 @@ function validateState(value, maxRecords = 256) {
 export class RuntimeErrorStore {
     configPath;
     storePath;
+    reportingConfigPath;
     platform;
     arch;
     productVersion;
@@ -194,6 +196,9 @@ export class RuntimeErrorStore {
         const defaults = defaultRuntimeErrorPaths(options);
         this.configPath = options.configPath ?? defaults.configPath;
         this.storePath = options.storePath ?? defaults.storePath;
+        this.reportingConfigPath = options.reportingConfigPath !== undefined ? options.reportingConfigPath
+            : options.configPath !== undefined || options.storePath !== undefined ? null
+                : defaultRuntimeErrorReportPaths(options).reportingConfigPath;
         this.platform = options.platform ?? process.platform;
         if (!ARCHES.has(options.arch ?? process.arch))
             throw new Error("arch が不正です");
@@ -206,7 +211,12 @@ export class RuntimeErrorStore {
         if (!Number.isInteger(this.maxRecords) || this.maxRecords < 1 || this.maxRecords > 256)
             throw new Error("maxRecords は 1..256 必須です");
     }
-    collectionStatus() { return collectionStatus(this.configPath, this.platform); }
+    // 報告を有効にした端末は、記録も有効。工場の収集設定が無くても、製品が自分の記録を持てる。
+    collectionStatus() {
+        if (this.reportingConfigPath !== null && runtimeErrorReportingStatus(this.reportingConfigPath, this.platform) === "enabled")
+            return "enabled";
+        return collectionStatus(this.configPath, this.platform);
+    }
     assertPrivateDirectory(dir) {
         const info = fs.lstatSync(dir);
         if (!info.isDirectory() || info.isSymbolicLink())

package/dist/runtime-error-worker.js

@@ -1,13 +1,20 @@
 #!/usr/bin/env node
 import process from "node:process";
 import { RuntimeErrorStore, validateRuntimeObservation } from "./runtime-error-store.js";
-function main() {
+import { reportRuntimeErrors, triggerRuntimeErrorReport } from "./runtime-error-report.js";
+async function main() {
     const [action, code, ...rest] = process.argv.slice(2);
     if (rest.length > 0)
         throw new Error("invalid args");
+    if (action === "report" && code === undefined) {
+        await reportRuntimeErrors({ trigger: "auto" });
+        return;
+    }
     const store = new RuntimeErrorStore();
     if (action === "record" && code) {
-        store.record(validateRuntimeObservation({ code }));
+        // 記録できた時だけ、受け口への報告を別processへ頼む（有効にした端末だけ）。このworkerは通信しない。
+        if (store.record(validateRuntimeObservation({ code })))
+            triggerRuntimeErrorReport();
         return;
     }
     if (action === "diagnostic" && code === undefined) {
@@ -16,9 +23,4 @@ function main() {
     }
     throw new Error("invalid action");
 }
-try {
-    main();
-}
-catch {
-    process.exitCode = 1;
-}
+main().catch(() => { process.exitCode = 1; });

package/dist/runtime-errors-cli.js

@@ -3,6 +3,8 @@ import process from "node:process";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { RuntimeErrorStore } from "./runtime-error-store.js";
+import { defaultRuntimeErrorReportPaths, runtimeErrorReportingStatus } from "./runtime-error-os.js";
+import { readProductCredential, readReportState, reportRuntimeErrors, setRuntimeErrorReporting, triggerRuntimeErrorReport, } from "./runtime-error-report.js";
 function parseArgs(argv) {
     const [name, flag, value, ...rest] = argv;
     if (rest.length > 0)
@@ -18,13 +20,46 @@ function parseArgs(argv) {
         if (/^[0-9a-f]{64}$/.test(value))
             return { name, fingerprint: value };
     }
-    throw new Error("使い方: aiterm-runtime-errors snapshot | ack --cursor N | resolve|reopen --fingerprint SHA256");
+    if (name === "report" && flag === undefined)
+        return { name };
+    if (name === "reporting" && (flag === "enable" || flag === "disable" || flag === "status") && value === undefined) {
+        return { name, action: flag };
+    }
+    throw new Error("使い方: aiterm-runtime-errors snapshot | ack --cursor N | resolve|reopen --fingerprint SHA256 | report | reporting enable|disable|status");
 }
 function emit(value) {
     process.stdout.write(`${JSON.stringify(value)}\n`);
 }
-export function main(argv = process.argv.slice(2)) {
+// 報告の状態。宛先・合鍵・pathは出さない。
+function reportingStatus() {
+    const paths = defaultRuntimeErrorReportPaths();
+    const snapshot = new RuntimeErrorStore().snapshot();
+    const state = readReportState(paths.reportStatePath);
+    return {
+        reporting: runtimeErrorReportingStatus(paths.reportingConfigPath),
+        credential: readProductCredential(paths.credentialPath).status,
+        collection: snapshot.collection,
+        unreported: Math.max(0, snapshot.cursor - snapshot.acknowledged_cursor),
+        last_attempt_at: state.last_attempt_at, last_status: state.last_status,
+        last_http_status: state.last_http_status, last_accepted_at: state.last_accepted_at,
+    };
+}
+export async function main(argv = process.argv.slice(2)) {
     const command = parseArgs(argv);
+    if (command.name === "report") {
+        const result = await reportRuntimeErrors({ trigger: "manual" });
+        emit({ ok: result.status === "accepted" || result.status === "nothing_to_report", command: command.name, result });
+        if (result.status !== "accepted" && result.status !== "nothing_to_report")
+            process.exitCode = 1;
+        return;
+    }
+    if (command.name === "reporting") {
+        if (command.action !== "status") {
+            setRuntimeErrorReporting(defaultRuntimeErrorReportPaths().reportingConfigPath, command.action === "enable");
+        }
+        emit({ ok: true, command: command.name, action: command.action, status: reportingStatus() });
+        return;
+    }
     const store = new RuntimeErrorStore();
     if (command.name === "snapshot") {
         emit({ ok: true, command: command.name, snapshot: store.snapshot() });
@@ -38,6 +73,9 @@ export function main(argv = process.argv.slice(2)) {
         ? store.resolve(command.fingerprint)
         : store.reopen(command.fingerprint);
     emit({ ok: true, command: command.name, changed, snapshot: store.snapshot() });
+    // 解決・開き直しも受け口へ知らせる（有効にした端末だけ。送るのは別process）。
+    if (changed)
+        triggerRuntimeErrorReport();
 }
 function isDirectExecution() {
     if (!process.argv[1])
@@ -54,13 +92,10 @@ function isDirectExecution() {
     }
 }
 if (isDirectExecution()) {
-    try {
-        main();
-    }
-    catch {
+    main().catch(() => {
         // CLI も privacy allowlist を守り、store/config の生例外や path を stdout/stderr に反射しない。
         process.stderr.write("aiterm-runtime-errors: operation failed\n");
         emit({ ok: false, code: "AITERM_RUNTIME_ERROR_STORE_OPERATION_FAILED" });
         process.exitCode = 1;
-    }
+    });
 }

package/docs/DESIGN.md

@@ -136,6 +136,8 @@ Codexの配送記録と本文はAiterm stateの`parent-deliveries`へ保存す
 再接続後は終了したownerの記録だけを原子的に引き継ぐ。`waiting`は同じ境界から観測を再開し、
 `ready`は保存した本文を送る。送信中断は`unknown`として本文を残し、自動再送しない。
 受信口が明示拒否した場合は`failed`、子の異常終了はそのoutcomeを配送する。
+生存の確認は5秒おきにpidの存在だけをOSへ聞き、開始識別子の照合は初めて見たownerと60秒に1回だけ行う。
+全processの一覧は取らない。終了直後に同じpidが再利用された時だけ、引き継ぎが最長60秒遅れる（ADR 0078）。
 このstateは既存のPTY／harness stateと独立し、旧版は配送を再開しない。
 
 ### Claude Code親への自動配送
@@ -195,6 +197,8 @@ Claude Codeの初回テーマ選択は選択済みの項目を確定し、後続
 ログイン方式の選択はユーザーのアカウント設定として扱い、composerと誤認せず`vendor_onboarding_required`で止める。
 promptなしでも入力受付とharness生存を確認して`startup.ready`を返す。指定なしのpromptなし起動は
 従来どおり`startup.not_checked`で返す。初手receiptは未要求・未送信・送信済み未確認・開始確認を分ける。
+入力受付の待ちは30秒。画面が起動コマンドの表示のまま（agentがまだ何も描いていない）で切れた時だけ、
+起動から50秒まで待つ。Codex親の既定のtool timeout（60秒）の内側に収める（ADR 0078）。
 開始の証拠は送信後の実行表示、実行中の既知承認、または同じcursor以降の完了だけとし、残存なしでは代用しない。
 Codexの設定エラー等でCLIが終了した場合は、残った画面へ送らず未送信で止める。
 
@@ -316,7 +320,9 @@ privacy案内は現在の枠付きcomposerとmodel footerが見える場合だ
 ## Diagnostics and local error state
 
 `diagnostics`はread-onlyで、PTY backendとagent dependencyを検査する。runtime error aggregateは
-製品所有のlocal stateに固定codeと集約metadataだけを保存し、network I/Oを持たない。工場reporterとの
+製品所有のlocal stateに固定codeと集約metadataだけを保存し、既定ではnetwork I/Oを持たない。
+BugHubへの報告は、利用者が明示して有効にし、合鍵のファイルがある端末だけが、別processで行う。
+きっかけは記録・解決・起動・手動の4つで、定期的な見張りは置かない。受け取り済みにするのは応答の署名まで確かめた時だけ（ADR 0079）。工場reporterとの
 連携は明示opt-inの任意adapterであり、未設定時もAiterm本体は単独動作する。raw error、prompt、出力、
 transcript、path、credentialを保存・公開しない。
 親配送hook（Claude Code・Cursor）の登録状態は`src/parent-hook-diagnostic.ts`が利用者設定の読取りだけで要約し、

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.47.0",
+  "version": "0.48.0",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent terminal MCP with one harness-based launcher for Claude Code, Codex CLI, Grok CLI, and Cursor Agent CLI, plus durable PTYs for SSH, containers, and REPLs.",
   "keywords": [