peertable 0.3.8 → 0.3.10

package/skill/scripts/change-seat.sh

@@ -0,0 +1,253 @@
+#!/bin/bash
+# 席の vendor / model / effort を変更する。
+# usage: change-seat.sh <project_dir> <member> [--vendor <vendor>] [--model <model>] [--effort <effort>] [--parent <name>] [--reason <text>]
+#
+# **自然文の依頼を再解釈しない。** 依頼の意味・本人の意図・変更してよい局面を判断するのは親である AI で、
+# この script が受け取るのは親が確定した target だけである（旧 change-effort.sh の
+# 「本人→親の単独DMが `[effort変更依頼] <level>` と完全一致すること」という機械判定は廃止した。
+# 明確な自然文の依頼を、同じ文面の再送を求めて拒否していたため）。
+# この script が持つのは、親には出来ない外部境界の仕事だけである:
+#   現在の素性の取得 / target の live catalog 検証 / 同値no-op / busy保護 / 再起動 /
+#   metadata の読み返し / room 履歴 / 失敗時の旧設定への1回だけの明示rollback。
+#
+# 会話contextは引き継がない。作業状態はroomログ・工程正本・gitから再着任で回収する。
+set -eu
+
+# token値はこの制御processや再起動する席へ継承しない。launch後のroom記録も席別file経由で行う。
+unset PEERTABLE_POST_TOKEN
+script_dir=$(cd "$(dirname "$0")" && pwd -P)
+credential_helper="${PEERTABLE_CREDENTIAL_HELPER:-$script_dir/seat-credential.mjs}"
+
+proj="${1:-}"; name="${2:-}"
+shift 2 2>/dev/null || true
+opt_vendor=""; opt_model=""; opt_effort=""; parent="bell"; reason=""
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --vendor) opt_vendor="${2:-}"; shift 2 || true ;;
+    --model)  opt_model="${2:-}";  shift 2 || true ;;
+    --effort) opt_effort="${2:-}"; shift 2 || true ;;
+    --parent) parent="${2:-}";     shift 2 || true ;;
+    --reason) reason="${2:-}";     shift 2 || true ;;
+    *) echo "SEAT_CHANGE_ARGS_INVALID: 不明な引数 $1" >&2; exit 2 ;;
+  esac
+done
+[ -n "$proj" ] && [ -n "$name" ] || {
+  echo "SEAT_CHANGE_ARGS_INVALID: usage: change-seat.sh <project_dir> <member> [--vendor <vendor>] [--model <model>] [--effort <effort>] [--parent <name>] [--reason <text>]" >&2
+  exit 2
+}
+[ -n "$opt_model" ] || [ -n "$opt_effort" ] || {
+  echo "SEAT_CHANGE_ARGS_INVALID: --model と --effort の少なくとも一方が要る" >&2; exit 2
+}
+case "$name:$parent" in
+  *[!A-Za-z0-9._:-]*) echo "SEAT_CHANGE_ARGS_INVALID: member/parent名に使えない文字がある" >&2; exit 2 ;;
+esac
+
+state="$proj/.team/setup-state.json"
+[ -f "$state" ] || { echo "SEAT_CHANGE_STATE_MISSING: $state" >&2; exit 1; }
+read -r room url <<EOF
+$(python3 -c "import json;d=json.load(open('$state'));print(d['room'],d['server_url'])")
+EOF
+
+members=$(curl -sf "$url/api/$room/members") || {
+  echo "SEAT_CHANGE_ROOM_UNREACHABLE: membersを読めない" >&2; exit 1;
+}
+meta=$(printf '%s' "$members" | python3 -c '
+import json,sys
+name=sys.argv[1]
+member=next((m for m in json.load(sys.stdin).get("members",[]) if m.get("name")==name),None)
+if not member or member.get("vendor") not in ("claude","codex") or not member.get("model"):
+    raise SystemExit(1)
+print("\t".join((member["vendor"],member["model"],member.get("effort") or "",member.get("aiterm_session_id") or "")))
+' "$name") || { echo "SEAT_CHANGE_MEMBER_METADATA_MISSING: ${name} のvendor/modelが要る" >&2; exit 1; }
+IFS=$'\t' read -r old_vendor old_model old_effort aiterm_session_id <<EOF
+$meta
+EOF
+
+vendor="${opt_vendor:-$old_vendor}"
+case "$vendor" in
+  claude|codex) ;;
+  *) echo "SEAT_CHANGE_VENDOR_UNSUPPORTED: vendor=${vendor}（claude / codex のみ）" >&2; exit 2 ;;
+esac
+if [ "$vendor" != "$old_vendor" ] && { [ -z "$opt_model" ] || [ -z "$opt_effort" ]; }; then
+  echo "SEAT_CHANGE_ARGS_INVALID: vendor変更には --model と --effort の明示指定が要る" >&2
+  exit 2
+fi
+model="${opt_model:-$old_model}"
+effort="${opt_effort:-$old_effort}"
+# effort を持たない席（CLI 既定で走っている席）へ model だけ渡すと、再起動で effort が確定してしまう。
+# 既定値をここへ埋めない——launch-seat.sh と同じく「席を立てる時に決める」（オーナー裁定）。
+[ -n "$effort" ] || {
+  echo "SEAT_CHANGE_EFFORT_UNKNOWN: ${name} の現在effortがmetadataに無い。--effort を明示する" >&2; exit 1
+}
+
+if [ "$model" = "$old_model" ] && [ "$effort" = "$old_effort" ] && [ "$vendor" = "$old_vendor" ]; then
+  echo "SEAT_CHANGE_NOOP: ${name} は既に model=${model} / effort=${effort}（再起動しない）"
+  exit 0
+fi
+
+sock="${PEERTABLE_TMUX_SOCKET:-${TMPDIR:-/tmp/}claude-tmux-sockets/claude.sock}"
+sess="peer-$name"
+tmux -S "$sock" has-session -t "$sess" 2>/dev/null || {
+  echo "SEAT_CHANGE_SEAT_MISSING: ${sess}" >&2; exit 1;
+}
+screen=$(tmux -S "$sock" capture-pane -t "$sess" -p -S -25 2>/dev/null) || {
+  echo "SEAT_CHANGE_SEAT_UNREADABLE: $sess" >&2; exit 1;
+}
+# busy の判定文字列は seat-status-bridge と同じ（Claude のステータス行にも Codex の `Working (…)` にも出る）
+case "$screen" in
+  *"esc to interrupt"*) echo "SEAT_CHANGE_SEAT_BUSY: ${sess} は処理中。本人がidleになってから再実行する" >&2; exit 1 ;;
+esac
+
+# target の検証は live 面だけを使い、古くなる hardcode を足さない。
+case "$vendor" in
+  claude)
+    # Claude には非破壊で引ける model catalog が無い（`--help` の alias 例は catalog ではなく、
+    # 実際 2026-08-11 に `fable` は例に載ったまま live では unavailable だった）。
+    # よって **model 名は事前検証しない**——実 CLI の起動失敗と rollback が正式な検証境界である。
+    # effort は `--help` が live に列挙するので、そこから取る。
+    help_text=$(claude --help 2>/dev/null) || {
+      echo "SEAT_CHANGE_EFFORT_CATALOG_UNAVAILABLE: claude --help を読めない" >&2; exit 1;
+    }
+    levels=$(printf '%s' "$help_text" | python3 -c '
+import re,sys
+text=sys.stdin.read()
+i=text.find("--effort")
+m=re.search(r"\(([a-z0-9, ]+)\)", text[i:i+400]) if i>=0 else None
+if not m: raise SystemExit(1)
+print(" ".join(x.strip() for x in m.group(1).split(",") if x.strip()))
+') || {
+      echo "SEAT_CHANGE_EFFORT_CATALOG_UNAVAILABLE: claude --help が effort の水準を列挙しない" >&2; exit 1;
+    }
+    case " $levels " in
+      *" $effort "*) ;;
+      *) echo "SEAT_CHANGE_EFFORT_UNSUPPORTED: claude は effort=${effort} を提供していない（live: ${levels}）" >&2; exit 1 ;;
+    esac
+    ;;
+  codex)
+    catalog=$(codex debug models 2>/dev/null) || {
+      echo "SEAT_CHANGE_MODEL_CATALOG_UNAVAILABLE: codex debug models" >&2; exit 1;
+    }
+    verdict=$(printf '%s' "$catalog" | python3 -c '
+import json,sys
+model,effort=sys.argv[1:3]
+entry=next((m for m in json.load(sys.stdin).get("models",[]) if m.get("slug")==model),None)
+if entry is None:
+    print("model"); raise SystemExit(0)
+levels=[x.get("effort") for x in entry.get("supported_reasoning_levels",[])]
+print("ok" if effort in levels else "effort")
+' "$model" "$effort") || {
+      echo "SEAT_CHANGE_MODEL_CATALOG_UNAVAILABLE: codex debug models の出力を読めない" >&2; exit 1;
+    }
+    case "$verdict" in
+      model)  echo "SEAT_CHANGE_MODEL_UNSUPPORTED: codex catalog に model=${model} が無い" >&2; exit 1 ;;
+      effort) echo "SEAT_CHANGE_EFFORT_UNSUPPORTED: codex/${model} は effort=${effort} をcatalogで提供していない" >&2; exit 1 ;;
+    esac
+    ;;
+esac
+
+changes=""
+[ "$vendor" = "$old_vendor" ] || changes="vendor ${old_vendor} → ${vendor}"
+[ "$model" = "$old_model" ] || {
+  [ -z "$changes" ] || changes="$changes / "
+  changes="${changes}model ${old_model} → ${model}"
+}
+if [ "$effort" != "$old_effort" ]; then
+  [ -z "$changes" ] || changes="$changes / "
+  changes="${changes}effort ${old_effort:-default} → ${effort}"
+fi
+
+credential_file=$(env -u PEERTABLE_POST_TOKEN node "$credential_helper" path "$proj" "$room" "$name") || {
+  echo "SEAT_CHANGE_CREDENTIAL_MISSING: ${name} のroom credentialを特定できない" >&2; exit 1
+}
+
+if [ "$vendor" = "$old_vendor" ]; then
+  [ -n "$aiterm_session_id" ] || {
+    echo "SEAT_CHANGE_AITERM_SESSION_MISSING: ${name} にAiterm managed session_idが無い" >&2; exit 1
+  }
+  configure_args=("$aiterm_session_id")
+  [ -z "$opt_model" ] || configure_args+=(--model "$model")
+  [ -z "$opt_effort" ] || configure_args+=(--effort "$effort")
+  node "$script_dir/aiterm-configure.mjs" "${configure_args[@]}" >/dev/null || {
+    echo "SEAT_CHANGE_AITERM_CONFIGURE_FAILED: ${name} の設定は変更していない" >&2; exit 1
+  }
+  identity=$(python3 -c 'import json,sys;print(json.dumps({"name":sys.argv[1],"vendor":sys.argv[2],"model":sys.argv[3],"effort":sys.argv[4],"aiterm_session_id":sys.argv[5]}))' "$name" "$vendor" "$model" "$effort" "$aiterm_session_id")
+  env -u PEERTABLE_POST_TOKEN node "$credential_helper" request "$credential_file" POST \
+    "$url/api/$room/members" "$identity" >/dev/null || {
+    echo "SEAT_CHANGE_CHANGED_BUT_METADATA_FAILED: ${name} は設定済み、room metadataを同期できない" >&2; exit 1
+  }
+  change_method="同一sessionを維持"
+else
+  leave="$script_dir/leave-seat.sh"
+  if ! "$leave" "$proj" "$name"; then
+    echo "SEAT_CHANGE_RESTART_PREPARE_FAILED: ${name} の旧席を安全に撤去できないため再起動しない" >&2
+    exit 1
+  fi
+  launch="$script_dir/launch-seat.sh"
+  brief="席設定が変更され（${changes}）、席を再起動しました。.team/roles/member.mdと工程正本・roomログから再着任し、進行中taskを続けてください。"
+  if ! "$launch" "$proj" "$name" "$model" "$vendor" "$effort" "$brief"; then
+    echo "SEAT_CHANGE_RESTART_FAILED: ${changes}。旧設定（vendor=${old_vendor} / model=${old_model} / effort=${old_effort:-default}）へrollbackする" >&2
+    rollback_brief="席設定の変更に失敗して旧設定へrollbackしました。.team/roles/member.mdと工程正本・roomログから再着任してください。"
+    if "$launch" "$proj" "$name" "$old_model" "$old_vendor" "$old_effort" "$rollback_brief"; then
+      echo "SEAT_CHANGE_ROLLED_BACK: ${name} は vendor=${old_vendor} / model=${old_model} / effort=${old_effort:-default} で再着席" >&2
+    else
+      echo "SEAT_CHANGE_ROLLBACK_FAILED: ${name} の席を手動で復旧する必要がある" >&2
+    fi
+    exit 1
+  fi
+  change_method="席を再起動"
+fi
+
+members_after=$(curl -sf "$url/api/$room/members") || {
+  echo "SEAT_CHANGE_CHANGED_BUT_UNVERIFIED: 席は再起動済み、membersを読めない" >&2; exit 1;
+}
+if ! printf '%s' "$members_after" | python3 -c '
+import json,sys
+name,vendor,model,effort=sys.argv[1:5]
+m=next((m for m in json.load(sys.stdin).get("members",[]) if m.get("name")==name),{})
+raise SystemExit(0 if m.get("vendor")==vendor and m.get("model")==model and m.get("effort")==effort else 1)
+' "$name" "$vendor" "$model" "$effort"; then
+  echo "SEAT_CHANGE_CHANGED_BUT_UNVERIFIED: 席は再起動済み、member metadataが vendor=${vendor} / model=${model} / effort=${effort} でない" >&2
+  exit 1
+fi
+
+body="[席設定変更] ${parent} が ${name} の ${changes} に変更（${change_method}）"
+[ -z "$reason" ] || body="${body}。理由: ${reason}"
+history=$(python3 -c 'import json,sys;print(json.dumps({"from":sys.argv[1],"to":sys.argv[2],"body":sys.argv[3]},ensure_ascii=False))' "$parent" "$name" "$body")
+history_response=$(env -u PEERTABLE_POST_TOKEN node "$credential_helper" request "$credential_file" POST \
+  "$url/api/$room/messages" "$history") || {
+  echo "SEAT_CHANGE_CHANGED_BUT_HISTORY_FAILED: ${name} は ${changes} で再着席済み、room履歴の記録に失敗" >&2
+  exit 1
+}
+history_seq=$(printf '%s' "$history_response" | python3 -c '
+import json,sys
+try:
+    seq=json.load(sys.stdin).get("seq")
+except (ValueError, TypeError):
+    raise SystemExit(1)
+print(seq)
+raise SystemExit(0 if isinstance(seq, int) else 1)
+') || {
+  echo "SEAT_CHANGE_CHANGED_BUT_HISTORY_FAILED: ${name} は ${changes} で再着席済み、room履歴POST応答のseqを読めない" >&2
+  exit 1
+}
+
+messages_after=$(env -u PEERTABLE_POST_TOKEN node "$credential_helper" request "$credential_file" GET \
+  "$url/api/$room/messages") || {
+  echo "SEAT_CHANGE_CHANGED_BUT_HISTORY_FAILED: ${name} は ${changes} で再着席済み、room履歴を読み返せない" >&2
+  exit 1
+}
+if ! printf '%s' "$messages_after" | python3 -c '
+import json,sys
+seq,parent,name,body=sys.argv[1:5]
+try:
+    messages=json.load(sys.stdin).get("messages",[])
+except (ValueError, TypeError):
+    raise SystemExit(1)
+matched=next((m for m in messages if str(m.get("seq")) == seq), None)
+raise SystemExit(0 if matched and matched.get("from") == parent and matched.get("to") == name and matched.get("body") == body else 1)
+' "$history_seq" "$parent" "$name" "$body"; then
+  echo "SEAT_CHANGE_CHANGED_BUT_HISTORY_FAILED: ${name} は ${changes} で再着席済み、room履歴の読返しがtargetと一致しない" >&2
+  exit 1
+fi
+
+echo "SEAT_CHANGE_OK: ${name} ${changes}（parent=${parent}）"

package/skill/scripts/codex-parent-watch.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+set -eu
+
+project=${1:?usage: codex-parent-watch.sh <project> [parent]}
+parent=${2:-bell}
+here=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+
+exec node "$here/parent-watch.mjs" "$project" "$parent" --poll

package/skill/scripts/ensure-bridge.sh

@@ -10,7 +10,11 @@ if [ "${1:-}" = "--force" ]; then force=true; shift; fi
 if [ $# -eq 0 ] && [ -f "$record" ]; then
   saved=()
   while IFS= read -r arg; do saved+=("$arg"); done < <(node -e 'const x=require(process.argv[1]); for (const a of x.args||[]) console.log(a)' "$record")
-  set -- "${saved[@]}"
+  # macOS 標準 bash 3.2 の set -u では、空配列の展開が unbound variable になる。
+  # args が空なら現在の「引数なし」を保ち、値がある時だけ復元する。
+  if [ "${#saved[@]}" -gt 0 ]; then
+    set -- "${saved[@]}"
+  fi
 fi
 if [ -f "$record" ]; then
   pid=$(node -e 'try{process.stdout.write(String(require(process.argv[1]).pid||""))}catch{}' "$record")
@@ -29,7 +33,7 @@ rm -f "$record"
 # 呼び出し元 client の環境ではないので、素で起こすと `PEERTABLE_TMUX_SOCKET` の手渡しが黙って消え、
 # 常駐が別の socket（本番の既定）を観測しにいく（2026-08-11 実測）。決定73 と同じ形の裏返しである。
 env_prefix=""
-for v in PEERTABLE_TMUX_SOCKET PEERTABLE_POST_TOKEN PEERTABLE_URL; do
+for v in PEERTABLE_TMUX_SOCKET PEERTABLE_POST_TOKEN PEERTABLE_CREDENTIAL_FILE PEERTABLE_URL PEERTABLE_PARENT_NAME; do
   eval "val=\${$v:-}"
   [ -n "$val" ] && env_prefix="$env_prefix $v=$(printf '%q' "$val")"
 done

package/skill/scripts/ensure-codex-room-mcp.mjs

@@ -0,0 +1,152 @@
+#!/usr/bin/env node
+// Codexが読むproject設定へ、Peertable所有のroom MCP blockだけを追加・撤去する。
+import {
+  chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync,
+  renameSync, rmdirSync, statSync, unlinkSync, writeFileSync,
+} from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { execFileSync } from 'node:child_process'
+
+const fail = (code, message) => {
+  process.stderr.write(`${code}: ${message}\n`)
+  process.exit(1)
+}
+
+const [action, project, peertableRepo] = process.argv.slice(2)
+if (!['ensure', 'remove'].includes(action) || !project || !peertableRepo)
+  fail('SEAT_CODEX_ROOM_MCP_ARGS_INVALID', '<ensure|remove> <project> <peertable_repo>')
+
+const configDir = resolve(project, '.codex')
+const configFile = join(configDir, 'config.toml')
+const startPattern = /^# BEGIN PEERTABLE ROOM MCP added_newline=([01])$/mu
+const endMarker = '# END PEERTABLE ROOM MCP'
+const roomHeader = /^\s*\[mcp_servers\.room\]\s*$/mu
+const seatEnvNames = [
+  'PEERTABLE_URL', 'PEERTABLE_ROOM', 'PEERTABLE_MEMBER', 'PEERTABLE_CREDENTIAL_FILE',
+  'PEERTABLE_VENDOR', 'PEERTABLE_MODEL', 'PEERTABLE_EFFORT', 'PEERTABLE_ROLE',
+  'PEERTABLE_PLAN', 'LATTICE_CLI', 'LATTICE_TODO_ACTOR_HOST',
+  'LATTICE_TODO_ACTOR_SESSION', 'LATTICE_TODO_ACTOR_AGENT',
+]
+const requiredSeatEnv = seatEnvNames.slice(0, 8)
+
+function atomicWrite(file, body, mode = 0o644) {
+  mkdirSync(dirname(file), { recursive: true })
+  const temporary = `${file}.${process.pid}.tmp`
+  let fd
+  try {
+    fd = openSync(temporary, 'wx', mode)
+    writeFileSync(fd, body, 'utf8')
+    fsyncSync(fd)
+    closeSync(fd)
+    fd = undefined
+    renameSync(temporary, file)
+    chmodSync(file, mode)
+  } catch (error) {
+    if (fd !== undefined) closeSync(fd)
+    try { unlinkSync(temporary) } catch {}
+    throw error
+  }
+}
+
+function markerRange(text) {
+  const starts = [...text.matchAll(new RegExp(startPattern.source, 'gmu'))]
+  const ends = [...text.matchAll(new RegExp(`^${endMarker}$`, 'gmu'))]
+  if (starts.length === 0 && ends.length === 0) return null
+  if (starts.length !== 1 || ends.length !== 1 || ends[0].index < starts[0].index)
+    fail('SEAT_CODEX_ROOM_MCP_UNREADABLE', `${configFile} のPeertable block境界が壊れている`)
+  let end = ends[0].index + endMarker.length
+  if (text[end] === '\n') end += 1
+  return { start: starts[0].index, end, addedNewline: starts[0][1] === '1' }
+}
+
+function expectedBlock(addedNewline) {
+  const client = resolve(peertableRepo, 'room', 'client.mjs')
+  const explicitEnv = seatEnvNames
+    .filter((name) => process.env[name] !== undefined && process.env[name] !== '')
+    .map((name) => `${name} = ${JSON.stringify(process.env[name])}`)
+  return [
+    `# BEGIN PEERTABLE ROOM MCP added_newline=${addedNewline ? '1' : '0'}`,
+    '[mcp_servers.room]',
+    'command = "node"',
+    `args = [${JSON.stringify(client)}]`,
+    'env_vars = ["TMUX", "TMUX_PANE"]',
+    '[mcp_servers.room.env]',
+    ...explicitEnv,
+    endMarker,
+    '',
+  ].join('\n')
+}
+
+function gitExcludePath() {
+  try {
+    return execFileSync('git', [
+      '-C', project, 'rev-parse', '--path-format=absolute', '--git-path', 'info/exclude',
+    ], {
+      encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim()
+  } catch { return '' }
+}
+
+function ensureExclude() {
+  const file = gitExcludePath()
+  if (!file) return
+  const marker = '# peertable:codex-room-mcp'
+  const rule = '/.codex/config.toml'
+  const text = existsSync(file) ? readFileSync(file, 'utf8') : ''
+  if (text.split(/\r?\n/u).includes(rule)) return
+  const prefix = text.length === 0 || text.endsWith('\n') ? text : `${text}\n`
+  atomicWrite(file, `${prefix}${marker}\n${rule}\n`, existsSync(file) ? statSync(file).mode & 0o777 : 0o644)
+}
+
+function removeExclude() {
+  const file = gitExcludePath()
+  if (!file || !existsSync(file)) return
+  const lines = readFileSync(file, 'utf8').split('\n')
+  const marker = '# peertable:codex-room-mcp'
+  const rule = '/.codex/config.toml'
+  const index = lines.findIndex((line, at) => line === marker && lines[at + 1] === rule)
+  if (index < 0) return
+  lines.splice(index, 2)
+  atomicWrite(file, lines.join('\n'), statSync(file).mode & 0o777)
+}
+
+try {
+  if (action === 'ensure') {
+    const missing = requiredSeatEnv.filter((name) => !process.env[name])
+    if (missing.length > 0)
+      fail('SEAT_CODEX_ROOM_MCP_ENV_MISSING', `seat環境が無い: ${missing.join(',')}`)
+    const current = existsSync(configFile) ? readFileSync(configFile, 'utf8') : ''
+    const range = markerRange(current)
+    let next
+    if (range) {
+      next = `${current.slice(0, range.start)}${expectedBlock(range.addedNewline)}${current.slice(range.end)}`
+    } else {
+      if (roomHeader.test(current))
+        fail('SEAT_CODEX_ROOM_MCP_CONFLICT', `${configFile} にproject所有のmcp_servers.roomがある`)
+      const addedNewline = current.length > 0 && !current.endsWith('\n')
+      next = `${current}${addedNewline ? '\n' : ''}${expectedBlock(addedNewline)}`
+    }
+    if (next !== current)
+      atomicWrite(configFile, next, existsSync(configFile) ? statSync(configFile).mode & 0o777 : 0o644)
+    ensureExclude()
+    process.stdout.write(`codex room MCP: ${configFile}\n`)
+  } else {
+    if (existsSync(configFile)) {
+      const current = readFileSync(configFile, 'utf8')
+      const range = markerRange(current)
+      if (range) {
+        const start = range.addedNewline && range.start > 0 && current[range.start - 1] === '\n'
+          ? range.start - 1 : range.start
+        const next = `${current.slice(0, start)}${current.slice(range.end)}`
+        if (next.length === 0) {
+          unlinkSync(configFile)
+          try { rmdirSync(configDir) } catch {}
+        } else atomicWrite(configFile, next, statSync(configFile).mode & 0o777)
+      }
+    }
+    removeExclude()
+    process.stdout.write('codex room MCP: removed\n')
+  }
+} catch (error) {
+  fail(action === 'ensure' ? 'SEAT_CODEX_ROOM_MCP_UPDATE_FAILED' : 'SEAT_CODEX_ROOM_MCP_REMOVE_FAILED', error.message)
+}

package/skill/scripts/ensure-room-mcp.mjs

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+// Claude channelsが読むproject rootのroom MCPを、同じPeertable treeのclientへ束縛する。
+import {
+  closeSync, fsyncSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync,
+} from 'node:fs'
+import { join, resolve } from 'node:path'
+
+const fail = (code, message) => {
+  process.stderr.write(`${code}: ${message}\n`)
+  process.exit(1)
+}
+
+const [project, peertableRepo, ownership] = process.argv.slice(2)
+if (!project || !peertableRepo || !['managed', 'preexisting'].includes(ownership))
+  fail('SEAT_ROOM_MCP_ARGS_INVALID', '<project> <peertable_repo> <managed|preexisting>')
+
+const file = resolve(project, '.mcp.json')
+let config
+try { config = JSON.parse(readFileSync(file, 'utf8')) } catch {
+  fail('SEAT_ROOM_MCP_UNREADABLE', `${file} をJSONとして読めない`)
+}
+if (!config || typeof config !== 'object' || Array.isArray(config))
+  fail('SEAT_ROOM_MCP_INVALID', `${file} のrootがobjectでない`)
+const expected = { command: 'node', args: [resolve(peertableRepo, 'room', 'client.mjs')] }
+const current = config?.mcpServers?.room
+if (current && typeof current === 'object' && !Array.isArray(current)
+    && Object.keys(current).sort().join(',') === 'args,command'
+    && current.command === expected.command
+    && Array.isArray(current.args)
+    && current.args.length === 1
+    && current.args[0] === expected.args[0]) process.exit(0)
+
+if (ownership !== 'managed')
+  fail('SEAT_ROOM_MCP_STALE', '既存.mcp.jsonのroom serverをcurrent-tree clientへmergeする必要がある')
+
+config.mcpServers ??= {}
+config.mcpServers.room = expected
+const temporary = join(project, `.mcp.json.${process.pid}.tmp`)
+let fd
+try {
+  const mode = statSync(file).mode & 0o777
+  fd = openSync(temporary, 'wx', mode)
+  writeFileSync(fd, `${JSON.stringify(config, null, 2)}\n`, 'utf8')
+  fsyncSync(fd)
+  closeSync(fd)
+  fd = undefined
+  renameSync(temporary, file)
+} catch (error) {
+  if (fd !== undefined) closeSync(fd)
+  try { unlinkSync(temporary) } catch {}
+  fail('SEAT_ROOM_MCP_UPDATE_FAILED', error.message)
+}