approval-box 0.1.23 → 0.1.24

package/dist/THIRD_PARTY_NOTICES.md

@@ -28,7 +28,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## aiterm-steer-delivery@0.4.4 (MIT)
+## aiterm-steer-delivery@0.4.5 (MIT)
 
 ```
 MIT License

package/dist/approval-box-claude-hook.mjs

@@ -2,7 +2,7 @@ import { createRequire as __kbCreateRequire } from 'node:module'; const require
 import {
   PROFILE,
   runClaudeHookMain
-} from "./chunks/chunk-SN7I52NL.mjs";
+} from "./chunks/chunk-HBSDWG62.mjs";
 
 // src/hooks/claude.ts
 await runClaudeHookMain(PROFILE);

package/dist/approval-box-cursor-hook.mjs

@@ -5,7 +5,7 @@ import {
   handleCursorChannelHook,
   handleCursorHook,
   withoutBom
-} from "./chunks/chunk-SN7I52NL.mjs";
+} from "./chunks/chunk-HBSDWG62.mjs";
 
 // src/cursor-binding.ts
 async function bindCursorResult(profile, raw) {

package/dist/approval-box-receive.mjs

@@ -2,7 +2,7 @@ import { createRequire as __kbCreateRequire } from 'node:module'; const require
 import {
   PROFILE,
   runChannelReceiveMain
-} from "./chunks/chunk-SN7I52NL.mjs";
+} from "./chunks/chunk-HBSDWG62.mjs";
 
 // src/hooks/receive.ts
 await runChannelReceiveMain(PROFILE);

package/dist/chunks/{chunk-SN7I52NL.mjs → chunk-HBSDWG62.mjs}

@@ -20200,6 +20200,136 @@ function hookOwnerProcess(rows, pid) {
     current = byPid.get(current.parent_pid);
   return current;
 }
+function processExists(pid) {
+  if (!Number.isSafeInteger(pid) || pid <= 0)
+    return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error62) {
+    return error62.code === "EPERM";
+  }
+}
+function windowsJson(script, failure2) {
+  const source = ["$ErrorActionPreference='Stop'", "[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false)", script].join("\n");
+  const result = spawnSync3(resolveWindowsPowerShell7(), ["-NoLogo", "-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(source, "utf16le").toString("base64")], {
+    encoding: "utf8",
+    timeout: 15e3,
+    maxBuffer: 16 * 1024 * 1024,
+    windowsHide: true
+  });
+  if (result.error || result.status !== 0)
+    throw new ProcessTableError(failure2);
+  try {
+    return JSON.parse(result.stdout);
+  } catch {
+    throw new ProcessTableError(failure2);
+  }
+}
+function assertPids(pids) {
+  const wanted = [...new Set(pids)];
+  if (wanted.some((pid) => !Number.isSafeInteger(pid) || pid < 0))
+    throw new ProcessTableError("process\u7167\u4F1A\u306Epid\u304C\u4E0D\u6B63\u3067\u3059");
+  return wanted;
+}
+var WINDOWS_STARTED = [
+  "function Started($p) {",
+  "  try { return $p.StartTime.ToUniversalTime().ToString('o') }",
+  "  catch [InvalidOperationException] { return '' }",
+  `  catch { $w = Get-CimInstance Win32_Process -Filter "ProcessId=$($p.Id)" -Property CreationDate; if ($null -eq $w) { return '' }`,
+  "    if ($null -eq $w.CreationDate) { return $null }; return $w.CreationDate.ToUniversalTime().ToString('o') }",
+  "}"
+].join("\n");
+function readProcessIdentities(pids) {
+  const wanted = assertPids(pids).filter(processExists);
+  if (wanted.length === 0)
+    return [];
+  if (!isWin2) {
+    const result = spawnSync3("/bin/ps", ["-o", "pid=,lstart=", "-p", wanted.join(",")], {
+      encoding: "utf8",
+      env: { ...process.env, LC_ALL: "C" },
+      timeout: 1e4
+    });
+    if (result.error || result.status !== 0 && !(result.status === 1 && !result.stdout.trim())) {
+      throw new ProcessTableError("OS\u306Eprocess\u4E00\u89A7\u3092\u53D6\u5F97\u3067\u304D\u307E\u305B\u3093");
+    }
+    return result.stdout.split("\n").filter((line) => line.trim()).map((line) => {
+      const match = /^\s*(\d+)\s+(\S+\s+\S+\s+\d+\s+\S+\s+\d+)\s*$/.exec(line);
+      if (!match)
+        throw new ProcessTableError("process\u4E00\u89A7\u306E\u5F62\u5F0F\u3092\u8A8D\u8B58\u3067\u304D\u307E\u305B\u3093");
+      return { pid: Number(match[1]), started_identity: match[2].trim() };
+    });
+  }
+  const rows = windowsJson([
+    WINDOWS_STARTED,
+    "$rows=@()",
+    `foreach ($id in @(${wanted.join(",")})) {`,
+    "  try { $p=[Diagnostics.Process]::GetProcessById($id) } catch [ArgumentException] { continue }",
+    "  $started=Started $p",
+    "  if ($started -eq '') { continue }",
+    "  $rows += [ordered]@{ pid=[int]$id; started_identity=$started }",
+    "}",
+    "ConvertTo-Json -Compress -InputObject $rows"
+  ].join("\n"), "Windows\u306Eprocess\u306E\u958B\u59CB\u6642\u523B\u3092\u53D6\u5F97\u3067\u304D\u307E\u305B\u3093");
+  if (!Array.isArray(rows))
+    throw new ProcessTableError("Windows process\u306E\u8AAD\u307F\u304C\u914D\u5217\u3067\u306F\u3042\u308A\u307E\u305B\u3093");
+  return rows.map((row) => {
+    if (!row || !Number.isSafeInteger(row.pid))
+      throw new ProcessTableError("Windows process\u306E\u8AAD\u307F\u306Efield\u304C\u4E0D\u6B63\u3067\u3059");
+    if (row.started_identity === null)
+      return { pid: row.pid, started_identity: null };
+    if (typeof row.started_identity !== "string" || !Number.isFinite(Date.parse(row.started_identity)))
+      throw new ProcessTableError("Windows process\u306E\u8AAD\u307F\u306Efield\u304C\u4E0D\u6B63\u3067\u3059");
+    return { pid: row.pid, started_identity: new Date(row.started_identity).toISOString() };
+  });
+}
+function processIsRunning(pid, startedIdentity) {
+  return processExists(pid) && readProcessIdentities([pid])[0]?.started_identity === startedIdentity;
+}
+function readProcessLineage(pid, depth = 8) {
+  if (!isWin2)
+    return readRuntimeProcesses();
+  if (!Number.isSafeInteger(pid) || pid <= 0 || !Number.isSafeInteger(depth) || depth <= 0)
+    throw new ProcessTableError("process\u7167\u4F1A\u306Epid\u304C\u4E0D\u6B63\u3067\u3059");
+  let rows;
+  try {
+    rows = windowsJson([
+      "$rows=@(); $child=$null",
+      `$id=${pid}`,
+      `for ($i=0; $i -lt ${depth} -and $id -gt 0; $i++) {`,
+      "  try { $p=Get-Process -Id $id; $started=$p.StartTime.ToUniversalTime() } catch { break }",
+      // Windowsの親PIDは親の終了後も残り、別のprocessへ使い回される。子より後に始まったprocessは親でない。
+      "  if ($null -ne $child -and $started -gt $child) { break }",
+      "  $parent=0; try { if ($null -ne $p.Parent) { $parent=[int]$p.Parent.Id } } catch { }",
+      "  $exe=''; try { $exe=[string]$p.Path } catch { }",
+      "  if (-not $exe) { $exe=[string]$p.ProcessName }",
+      "  $cpu=0.0; try { $cpu=[double]$p.TotalProcessorTime.TotalSeconds } catch { }",
+      "  $rows += [ordered]@{ pid=[int]$p.Id; parent_pid=$parent; executable=$exe; started_identity=$started.ToString('o'); cpu_seconds=$cpu }",
+      "  $child=$started; $id=$parent",
+      "}",
+      "ConvertTo-Json -Compress -InputObject $rows"
+    ].join("\n"), "Windows\u306Eprocess\u306E\u5148\u7956\u3092\u53D6\u5F97\u3067\u304D\u307E\u305B\u3093");
+  } catch {
+    return readRuntimeProcesses();
+  }
+  if (!Array.isArray(rows) || rows[0]?.pid !== pid)
+    return readRuntimeProcesses();
+  return rows.map((row) => {
+    if (!row || !Number.isSafeInteger(row.pid) || !Number.isSafeInteger(row.parent_pid) || typeof row.executable !== "string" || !Number.isFinite(row.cpu_seconds) || typeof row.started_identity !== "string" || !Number.isFinite(Date.parse(row.started_identity)))
+      throw new ProcessTableError("Windows process\u306E\u8AAD\u307F\u306Efield\u304C\u4E0D\u6B63\u3067\u3059");
+    return {
+      pid: row.pid,
+      parent_pid: row.parent_pid,
+      process_group_id: null,
+      stopped: null,
+      executable: row.executable,
+      started_identity: new Date(row.started_identity).toISOString(),
+      command: row.executable,
+      cpu_seconds: row.cpu_seconds,
+      argv_digest: createHash2("sha256").update(row.executable).digest("hex")
+    };
+  });
+}
 function readRuntimeProcesses() {
   if (!isWin2) {
     const result2 = spawnSync3("/bin/ps", ["-axww", "-o", "pid=,ppid=,pgid=,stat=,lstart=,time=,command="], {
@@ -20506,7 +20636,7 @@ var claudeParentSchema = external_exports.object({
   hook_root: external_exports.string()
 }).strict();
 function processIdentity(pid) {
-  return readRuntimeProcesses().find((entry) => entry.pid === pid)?.started_identity;
+  return readProcessIdentities([pid])[0]?.started_identity ?? void 0;
 }
 function directory(parent) {
   return path7.join(parent.hook_root, parent.request_id);
@@ -20530,8 +20660,7 @@ function assertOpen(parent) {
 }
 function prepareClaudeHookRequest(input2, root) {
   const event = external_exports.object({ session_id: external_exports.uuid(), tool_use_id: requestId, agent_id: external_exports.string().optional() }).parse(input2);
-  const rows = readRuntimeProcesses();
-  const owner = hookOwnerProcess(rows, process.ppid);
+  const owner = hookOwnerProcess(readProcessLineage(process.ppid), process.ppid);
   if (!owner)
     throw new ClaudeDeliveryError("CLAUDE_PARENT_PROCESS_UNAVAILABLE", "hook\u3092\u8D77\u52D5\u3057\u305F\u89AAprocess\u3092\u78BA\u8A8D\u3067\u304D\u307E\u305B\u3093");
   const dir = path7.join(root, event.tool_use_id);
@@ -20544,13 +20673,14 @@ function prepareClaudeHookRequest(input2, root) {
     parent_started_identity: owner.started_identity
   });
   try {
-    sweepClaudeHookRequests(root, rows);
+    sweepClaudeHookRequests(root, processIsRunning);
   } catch {
   }
 }
 var STALE_REQUEST_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_FILES = /* @__PURE__ */ new Set(["request.json", "delivery.json", "answer.json", "hook.json", "sending.json", "emitted.json", "failed.json", "closed.json"]);
 function sweepClaudeHookRequests(root, rows, now = Date.now()) {
+  const running = typeof rows === "function" ? rows : (pid, startedIdentity) => rows.find((row) => row.pid === pid)?.started_identity === startedIdentity;
   let entries;
   try {
     entries = fs5.readdirSync(root, { withFileTypes: true });
@@ -20576,7 +20706,7 @@ function sweepClaudeHookRequests(root, rows, now = Date.now()) {
           invocation = invocationSchema.parse(JSON.parse(fs5.readFileSync(path7.join(dir, "request.json"), "utf8")));
         } catch {
         }
-        if (invocation && rows.find((row) => row.pid === invocation.parent_pid)?.started_identity === invocation.parent_started_identity)
+        if (invocation && running(invocation.parent_pid, invocation.parent_started_identity))
           continue;
       }
       fs5.rmSync(dir, { recursive: true, force: true });
@@ -20635,7 +20765,7 @@ function closeClaudeParentSession(input2, root) {
     throw failure2;
 }
 function assertParentAlive(invocation) {
-  if (processIdentity(invocation.parent_pid) !== invocation.parent_started_identity) {
+  if (!processIsRunning(invocation.parent_pid, invocation.parent_started_identity)) {
     throw new ClaudeDeliveryError("CLAUDE_PARENT_PROCESS_CLOSED", "\u4F9D\u983C\u5143\u306EClaude process\u306F\u7D42\u4E86\u3057\u307E\u3057\u305F\u3002\u56DE\u7B54\u306F\u4FDD\u5B58\u3057\u305F\u307E\u307E\u3067\u3059");
   }
 }
@@ -21146,7 +21276,7 @@ function channelDir(profile, channelId) {
   return path9.join(channelRoot(profile), uuid3.parse(channelId));
 }
 function processIdentity2(pid) {
-  return readRuntimeProcesses().find((entry) => entry.pid === pid)?.started_identity;
+  return readProcessIdentities([pid])[0]?.started_identity ?? void 0;
 }
 function mkdirs(...dirs) {
   for (const dir of dirs)
@@ -21255,7 +21385,7 @@ function channelDeliveryState(profile, channelId, deliveryId) {
       return "unknown";
     if (value.state === "withdrawn")
       return "withdrawn";
-    if (typeof value.pid === "number" && typeof value.started_identity === "string" && processIdentity2(value.pid) !== value.started_identity)
+    if (typeof value.pid === "number" && typeof value.started_identity === "string" && !processIsRunning(value.pid, value.started_identity))
       return "unknown";
     return "sending";
   }
@@ -21380,7 +21510,7 @@ function acquireWaiter(index) {
       owner = JSON.parse(fs7.readFileSync(file2, "utf8"));
     } catch {
     }
-    if (typeof owner.pid === "number" && typeof owner.started_identity === "string" && processIdentity2(owner.pid) === owner.started_identity)
+    if (typeof owner.pid === "number" && typeof owner.started_identity === "string" && processIsRunning(owner.pid, owner.started_identity))
       return null;
     try {
       fs7.renameSync(file2, path9.join(index, `waiter.${randomUUID3()}.stale`));
@@ -21401,9 +21531,10 @@ function releaseWaiter(index, identity) {
   }
 }
 function currentHookOwner() {
-  const owner = hookOwnerProcess(readRuntimeProcesses(), process.ppid);
+  const owner = hookOwnerProcess(readProcessLineage(process.ppid), process.ppid);
   return owner ? { pid: owner.pid, started_identity: owner.started_identity } : null;
 }
+var WAITER_OWNER_IDENTITY_RECHECK_MS = 6e4;
 async function runClaudeChannelWaiter(profile, input2, emit, options = {}) {
   const event = external_exports.object({ session_id: external_exports.uuid() }).loose().parse(input2);
   if (!openClaudeChannels(profile, event.session_id).length)
@@ -21414,15 +21545,22 @@ async function runClaudeChannelWaiter(profile, input2, emit, options = {}) {
   if (!identity)
     return 0;
   const deadline = Date.now() + (options.wait_ms ?? 8634e4);
+  const runtime = options.runtime ?? { exists: processExists, identity: processIdentity2 };
+  const recheckMs = options.identity_recheck_ms ?? WAITER_OWNER_IDENTITY_RECHECK_MS;
   let lastParentCheck = 0;
+  let lastIdentityCheck = null;
   try {
     for (; ; ) {
       const channels = openClaudeChannels(profile, event.session_id);
       if (!channels.length)
         return 0;
-      if (Date.now() - lastParentCheck >= 5e3) {
+      if (Date.now() - lastParentCheck >= (options.owner_check_ms ?? 5e3)) {
         lastParentCheck = Date.now();
-        const alive = owner ? processIdentity2(owner.pid) === owner.started_identity : channels.some((channel) => processIdentity2(channel.claude.parent_pid) === channel.claude.parent_started_identity);
+        const verify = lastIdentityCheck === null || lastParentCheck - lastIdentityCheck >= recheckMs;
+        if (verify)
+          lastIdentityCheck = lastParentCheck;
+        const running = (pid, identity2) => runtime.exists(pid) && (!verify || runtime.identity(pid) === identity2);
+        const alive = owner ? running(owner.pid, owner.started_identity) : channels.some((channel) => running(channel.claude.parent_pid, channel.claude.parent_started_identity));
         if (!alive)
           return 0;
       }

package/dist/cli.mjs

@@ -56,7 +56,7 @@ import {
   waitProcessCommandLine,
   withCodexReceiver,
   withdrawFromChannel
-} from "./chunks/chunk-SN7I52NL.mjs";
+} from "./chunks/chunk-HBSDWG62.mjs";
 
 // ../../node_modules/qrcode/lib/can-promise.js
 var require_can_promise = __commonJS({
@@ -15907,7 +15907,7 @@ function claudeChannelIsCurrent(profile, channelId, parent) {
 }
 
 // src/version.ts
-var VERSION = true ? "0.1.23" : "0.0.0-dev";
+var VERSION = true ? "0.1.24" : "0.0.0-dev";
 function osName() {
   return process.platform === "darwin" ? "macos" : process.platform === "win32" ? "windows" : process.platform;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "approval-box",
-  "version": "0.1.23",
+  "version": "0.1.24",
   "description": "Approval Box connector: lets Claude Code, Codex, Cursor and Grok ask you for a decision, and steers your answer back into the same session.",
   "license": "MIT",
   "homepage": "https://approval-box.kitepon.dev",
@@ -32,7 +32,7 @@
     "@modelcontextprotocol/sdk": "^1.31.0",
     "@types/node": "^25.9.1",
     "@types/qrcode": "^1.5.5",
-    "aiterm-steer-delivery": "0.4.4",
+    "aiterm-steer-delivery": "0.4.5",
     "esbuild": "^0.28.2",
     "qrcode": "^1.5.4",
     "typescript": "^6.0.3",