aiterm-mcp 0.61.3 → 0.61.4

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.61.4] - 2026-10-22
+
+### 修正
+
+- POSIXのnative実行口で最初の`agent_launch`がtmuxソケット未作成時に`EXECUTION_UNSUPPORTED`で止まっていた。発行直前にも空状態を確かめ、最初の`new-session`自身が作ったserverのPID・開始識別子とsession IDを実receiptから照合して起動する。補助sessionや入力再送は作らず、読取不能・receipt不一致は未確認で止める。
+
 ## [0.61.3] - 2026-10-22
 
 ### Fixed
@@ -18,7 +24,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### 修正
 
-- tmuxがまだ起動しておらず、対象ソケットが存在しない時、新規実行の登録が`EXECUTION_UNCONFIRMED`で止まっていた。実行世代の観測でもソケット未作成を空状態として扱い、初回の席を起動できるようにした。別ソケットや権限・接続の異常は引き続き不明として止める。
+- tmuxがまだ起動しておらず、対象ソケットが存在しない時、新規実行の登録が`EXECUTION_UNCONFIRMED`で止まっていた。実行世代の観測でもソケット未作成を空状態として扱う。別ソケットや権限・接続の異常は引き続き不明として止める。この版では、その次の初回席作成が既存serverを要求しており、冷間起動はまだ完了しなかった。
 
 ## [0.61.1] - 2026-10-22
 
@@ -2722,7 +2728,8 @@ prototype (preserved under `prototype/python/` as the porting source and referen
   `ubuntu-latest` for Node 18/20/22, publishing to npm on `v*` tags with
   provenance.
 
-[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.61.3...HEAD
+[Unreleased]: https://github.com/kitepon/aiterm-mcp/compare/v0.61.4...HEAD
+[0.61.4]: https://github.com/kitepon/aiterm-mcp/compare/v0.61.3...v0.61.4
 [0.61.3]: https://github.com/kitepon/aiterm-mcp/compare/v0.61.2...v0.61.3
 [0.61.2]: https://github.com/kitepon/aiterm-mcp/compare/v0.61.1...v0.61.2
 [0.61.1]: https://github.com/kitepon/aiterm-mcp/compare/v0.61.0...v0.61.1

package/README.ja.md

@@ -209,7 +209,7 @@ runtime-error store は canonical dotagents config の `collection.enabled: true
 場合だけ収集し、既定OFF、network送信は行いません。tag起点CIのnpm provenance（OIDC Trusted
 Publishing）で公開し、GitHub Release が Official MCP Registry を再登録します。
 
-**状態:** 開発継続中 · 現行公開版 **v0.61.3** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
+**状態:** 開発継続中 · 現行公開版 **v0.61.4** · 動作対象は Linux · WSL2 · macOS · Windows ネイティブ · MIT · [変更履歴](CHANGELOG.md)。
 
 ### 更新と巻き戻し
 
@@ -736,6 +736,7 @@ agent_launch({ "harness": "codex-cli", "remote": { "host": "rabbit" }, "cwd": "/
 ## 人が覗く
 
 セッションは共有tmux socket（Windows nativeはpsmux namespace）上にある。`pty_open`／`agent_launch`の戻り値に表示されるattachコマンドで、人間がClaude／Codex／Grok／Cursor harnessの同じ端末へ入り、途中でキーボードを引き取れる。
+POSIXでは、tmuxのソケットがまだ無くても最初の`agent_launch`でserverを起動できる。Aitermは作成したsessionとserverを実際のreceiptから照合して受付を確定し、不明な結果を入力の再送で補わない。
 
 ## 要件
 

package/README.md

@@ -227,7 +227,7 @@ collection is off by default and performs no network I/O. It ships via
 tag-triggered CI with npm provenance (OIDC Trusted Publishing); the GitHub
 Release re-registers the Official MCP Registry entry.
 
-**Status:** actively maintained · current public release **v0.61.3** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
+**Status:** actively maintained · current public release **v0.61.4** · runs on Linux · WSL2 · macOS · native Windows (tmux on POSIX, the tmux-CLI-compatible [psmux](https://github.com/psmux/psmux) on native Windows — no WSL required) · MIT · see the [CHANGELOG](CHANGELOG.md).
 
 ### Update and rollback
 
@@ -794,6 +794,7 @@ Each `pty_send` accepts at most 64 KiB of UTF-8 text. Sends to the same session
 ## A human can watch
 
 Sessions live on a shared tmux socket on POSIX or a shared psmux namespace on native Windows. The attach line printed by `pty_open` and `agent_launch` lets a human attach to the same terminal and intervene, including a Claude/Codex/Grok/Cursor harness session: `tmux -S … attach -t <id>` on POSIX, or `psmux -L <namespace> attach -t <id>` on native Windows.
+On POSIX, the first `agent_launch` can create the tmux server when its socket does not yet exist. Aiterm verifies the exact created session and server before accepting that launch; an uncertain result is reported without retrying the input.
 
 ## Requirements
 

package/dist/execution-effect.js

@@ -197,10 +197,13 @@ export function prepareExecutionCreation() {
         refuse(scope, "EXECUTION_UNSUPPORTED");
     try {
         const server = scope.creation.prepare();
-        if (!Number.isSafeInteger(server?.pid) || server.pid < 1 || typeof server.started_identity !== "string" || !server.started_identity)
+        if (server !== null && (!Number.isSafeInteger(server?.pid) || server.pid < 1
+            || typeof server.started_identity !== "string" || !server.started_identity))
             throw new ExecutionError("EXECUTION_UNSUPPORTED");
-        scope.creationServer = { ...server };
+        if (server)
+            scope.creationServer = { ...server };
         scope.creationPrepared = true;
+        return server === null;
     }
     catch (error) {
         scope.failure = new ExecutionError(error instanceof ExecutionError ? error.code : "EXECUTION_UNCONFIRMED", "not_started");
@@ -208,7 +211,7 @@ export function prepareExecutionCreation() {
     }
 }
 /** Private core metadata stamp, derived only from this frame's actual create
- * receipt and pre-existing native server proof. Not a tool input or lookup.
+ * receipt and verified native server proof. Not a tool input or name lookup.
  */
 export function executionCreatedNativeBinding(session) {
     const scope = scopes.getStore();
@@ -237,7 +240,14 @@ export function captureExecutionCreatedNative(receipt) {
     if (!parsed || parsed[2] !== scope.session || (scope.createdNative && scope.createdNative !== parsed[1]))
         refuse(scope, "EXECUTION_CONFLICT");
     try {
-        scope.creation.native(scope.session, parsed[1], Number(parsed[3]));
+        const server = scope.creation.native(scope.session, parsed[1], Number(parsed[3]));
+        if (server) {
+            if (!Number.isSafeInteger(server.pid) || server.pid < 1 || typeof server.started_identity !== "string" || !server.started_identity)
+                throw new ExecutionError("EXECUTION_UNCONFIRMED", "possible");
+            scope.creationServer = { ...server };
+        }
+        if (!scope.creationServer)
+            throw new ExecutionError("EXECUTION_UNCONFIRMED", "possible");
     }
     catch (error) {
         scope.failure = new ExecutionError(error instanceof ExecutionError ? error.code : "EXECUTION_UNCONFIRMED", "possible");

package/dist/execution-runtime.js

@@ -84,11 +84,13 @@ export function createExecutionRuntime(bindings) {
                             session_id: executionLaunchSchema.shape.session_id, native_id: z.string().regex(/^\$\d+$/),
                         }).strict()) }).strict().parse(bindings.observeNativeSessionsSync());
                     if (new Set(parsed.sessions.map(value => value.session_id)).size !== parsed.sessions.length
-                        || new Set(parsed.sessions.map(value => value.native_id)).size !== parsed.sessions.length)
+                        || new Set(parsed.sessions.map(value => value.native_id)).size !== parsed.sessions.length
+                        || (parsed.server === null && parsed.sessions.length > 0))
                         return { state: "unknown" };
+                    const server = parsed.server === null ? { server: null } : parsed.server ? { server: parsed.server } : {};
                     const target = parsed.sessions.find(value => value.session_id === session);
-                    return target ? { state: "present", native_id: target.native_id, ...(parsed.server ? { server: parsed.server } : {}) }
-                        : { state: "absent", ...(parsed.server ? { server: parsed.server } : {}) };
+                    return target ? { state: "present", native_id: target.native_id, ...server }
+                        : { state: "absent", ...server };
                 }
                 catch {
                     return { state: "unknown" };

package/dist/execution-service.js

@@ -408,7 +408,7 @@ export class ExecutionService {
             if (record.operations.launch !== "preparing" || record.relation.lifecycle === "retired")
                 throw new ExecutionError("EXECUTION_CONFLICT");
             const native = this.runtime.nativeSessionSync(record.reservation.target.session_id);
-            if (native.state !== "absent" || !native.server)
+            if (native.state !== "absent" || native.server === undefined)
                 throw new ExecutionError("EXECUTION_UNSUPPORTED");
             return native.server;
         }, { readOnly: true });
@@ -441,7 +441,7 @@ export class ExecutionService {
             throw new ExecutionError("EXECUTION_UNSUPPORTED");
         this.store.transactionSync(state => {
             const record = find(state, request), native = this.runtime.nativeSessionSync?.(record.reservation.target.session_id);
-            if (!native?.server || !same(native.server, expected))
+            if (native?.state !== "absent" || !same(native.server, expected))
                 throw new ExecutionError("EXECUTION_UNCONFIRMED");
         }, { readOnly: true });
     }
@@ -449,18 +449,23 @@ export class ExecutionService {
         const { request } = executionRefMetaSchema.parse(metaInput);
         if (!/^\$\d+$/.test(nativeId) || !this.store.transactionSync)
             throw new ExecutionError("EXECUTION_UNSUPPORTED", "possible");
-        this.store.transactionSync(state => {
+        return this.store.transactionSync(state => {
             const record = find(state, request), slot = state.slots.find(value => same(value.request, request) && value.stage === "launch");
+            // A cold first new-session creates the server itself. Prove its owner
+            // from the exact receipt and a stable native listing before stamping it.
+            const observed = expectedServer ? null : this.runtime.nativeSessionSync?.(session);
+            const server = expectedServer ?? (observed?.state === "present" && observed.native_id === nativeId ? observed.server : undefined);
             if (!slot || slot.state !== "issued" || record.operations.launch !== "issued" || slot.session_id !== session
                 || record.reservation.target.expected_launch_id !== null || record.relation.lifecycle === "retired"
-                || expectedServer.pid !== receiptPid
+                || !server || server.pid !== receiptPid
                 || (slot.created_native_id && slot.created_native_id !== nativeId)
-                || (slot.created_server && !same(slot.created_server, expectedServer)))
+                || (slot.created_server && !same(slot.created_server, server)))
                 throw new ExecutionError("EXECUTION_CONFLICT", "possible");
             // Preserve this genuine native receipt even if a stop is already fencing
             // its caller. Binding metadata does not authorize another native action.
             slot.created_native_id = nativeId;
-            slot.created_server = expectedServer;
+            slot.created_server = server;
+            return server;
         });
     }
     bindCreatedLaunch(metaInput, input) {

package/dist/execution-tools.js

@@ -126,12 +126,12 @@ async function runExecutionReceipt(service, meta, stage, body, targetSessionId,
                     return run();
                 }, stage === "launch" ? {
                     prepare: () => { expectedServer = service.prepareCreation(ref); return expectedServer; },
-                    verifyServer: () => { if (!expectedServer)
+                    verifyServer: () => { if (expectedServer === undefined)
                         throw new ExecutionError("EXECUTION_UNSUPPORTED"); service.verifyCreationServer(ref, expectedServer); },
                     native: (session, nativeId, serverPid) => {
-                        if (!expectedServer)
+                        if (expectedServer === undefined)
                             throw new ExecutionError("EXECUTION_UNSUPPORTED");
-                        service.captureCreatedNative(ref, session, nativeId, expectedServer, serverPid);
+                        return service.captureCreatedNative(ref, session, nativeId, expectedServer, serverPid);
                     },
                     launch: launch => service.bindCreatedLaunch(ref, launch),
                 } : undefined, prepare);

package/dist/tmux-runtime.js

@@ -493,12 +493,12 @@ export function registeredSessionEnvironment(name) {
 export function tmuxNewSession(observe, name, launch, registered = []) {
     const guarded = hasExecutionCreationScope();
     // Windows per-session server creation needs a separate native-owner proof.
-    // The legacy public launcher is unchanged; guarded creation cannot assume
-    // POSIX's existing shared-server identity or bootstrap a missing server.
+    // The legacy public launcher is unchanged.
+    let cold = false;
     if (guarded) {
         if (isWin)
             throw new ExecutionError("EXECUTION_UNSUPPORTED");
-        prepareExecutionCreation();
+        cold = prepareExecutionCreation();
     }
     const printNative = guarded ? ["-P", "-F", "#{session_id}\t#{session_name}\t#{pid}"] : [];
     if (isWin) {
@@ -508,6 +508,15 @@ export function tmuxNewSession(observe, name, launch, registered = []) {
         return result;
     }
     const env = sessionCallerEnvironment();
+    if (cold) {
+        // With no server, there is no global environment to adjust. The first
+        // new-session inherits this caller's environment and prints its native ID
+        // and newly created server PID for the guarded receipt proof.
+        const r = runTmux(observe, undefined, ["new-session", "-d", "-s", name, ...printNative, ...launch.args, launch.shell], env);
+        if (r.code === 0 || r.stdout)
+            captureExecutionCreatedNative(r.stdout);
+        return r;
+    }
     const wildcard = tmuxHasSessionEnvironmentFlags();
     // tmux は起動時に PWD を共通環境へ足す。
     const others = new Set(["PWD"]);

package/docs/DESIGN.md

@@ -28,8 +28,10 @@ native emit直前に照合したhook参照は既存deliveryへ保存する。Cod
 POSIXのraw tty回復もnative作用であり、tmux打鍵と同じ受付を通す。ttyは正確なsession selectorで読み、
 実stty直前にも同じdeviceを確認する。停止や世代/tty交代後に古いdeviceへ回復を発行しない。
 一つのRPCが複数のnative作用を発行するときも、各回に同じissued slotとsource/target世代・停止を再確認する。
-新launchは、既存POSIX serverのnative owner、new-session自身のnative ID receipt、core内部で生成したlaunch世代を
-同じ要求slotへ段階結合する。物理shell準備はnative IDへ固定し、未結合の同名世代を採用しない。
+新launchは、既存POSIX serverのnative owner、またはserver未作成の完全な空観測を受付時と発行直前に確認する。
+冷間時は最初のnew-session自身でserverを作り、その実receiptのnative IDとserver PIDを、作成後の安定したnative一覧とprocess開始識別子で照合する。
+既存server時も冷間時も、作成したsessionのnative ID・server owner・core内部のlaunch世代を同じ要求slotへ段階結合する。
+物理shell準備はnative IDへ固定し、未結合の同名世代を採用しない。冷間起動のための補助sessionや再送は作らない。
 作成時のnative ID/server ownerをmanaged metadataへ保存し、private runtimeの世代読取と期待closeでも再照合する。
 古いmetadataの欠測を現観測で補わず、既存席の自動登録は行わない。
 証拠の無い新server起動、Windows固有のserver作成、auto-name/通常PTY/auth等はまだunsupported。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiterm-mcp",
-  "version": "0.61.3",
+  "version": "0.61.4",
   "mcpName": "io.github.kitepon/aiterm-mcp",
   "description": "Persistent terminal MCP with one harness-based launcher for Claude Code, Codex CLI, Grok CLI, and Cursor Agent CLI, plus durable PTYs for SSH, containers, and REPLs.",
   "keywords": [