peertable 0.8.22 → 0.8.25

package/skill/scripts/launch-seat.sh

@@ -98,11 +98,10 @@ brief_file=""
 brief_max_bytes=65536
 brief_completed=false
 brief_dispatched=false
+brief_sent=false
+brief_event_cursor=""
 seat_created=false
 rollback_done=false
-# ready を観測できないだけの不確実性は、投入後の真失敗と分ける。これは
-# Aiterm から手動 dispatch できる空席として残し、席数へ成功着任とは数えない。
-brief_not_ready=false
 sock=""
 sess=""
 url=""
@@ -177,7 +176,7 @@ on_exit() {
   local rollback_rc
   trap - EXIT
   cleanup_brief
-  if [ "$seat_created" = true ] && [ "$brief_completed" != true ] && [ "$brief_not_ready" != true ] && [ "$rollback_done" != true ]; then
+  if [ "$seat_created" = true ] && [ "$brief_completed" != true ] && [ "$rollback_done" != true ]; then
     rollback_done=true
     if rollback_brief "$exit_rc"; then
       :
@@ -214,6 +213,10 @@ if [ -n "$brief" ] && [ "$brief_dispatched" != true ]; then
   fi
 fi
 
+# 既存卓も正規着座入口の一回で現行generated assetへ収束させる。alarm輸送helperや
+# member規約の更新を利用側の事前resume順序へ委ねない。
+"$peertable_script_dir/upgrade-team-assets.sh" "$proj"
+
 # **画面の文字列は「model が使えること」を意味しない。** 2026-08-11 実測: fable-5 の席は
 # Claude の channels バナーが出たので下の着席判定を通ったが、その後の入力は全て
 # model unavailable で 0 秒失敗し、席は一度も仕事をできなかった（room [11]）。
@@ -241,7 +244,7 @@ case "$harness" in
       exit 1
     fi
     cp "${HOME}/.grok/auth.json" "${grok_home}/auth.json"
-    printf '%s\n' '[ui]' 'permission_mode = "always-approve"' >"${grok_home}/config.toml"
+    node "$peertable_script_dir/grok-seat-config.mjs" "$proj" "${grok_home}/config.toml"
     echo "grok preflight: GROK_HOME=${grok_home} ${grok_bin} --model ${model} --reasoning-effort ${effort} -p ping"
     preflight_cmd=(env GROK_HOME="$grok_home" "$grok_bin" --model "$model" --reasoning-effort "$effort" -p "ping")
     ;;
@@ -346,7 +349,7 @@ if [ "$harness" = grok ]; then
   fi
   cp "${HOME}/.grok/auth.json" "${grok_home}/auth.json"
   chmod 600 "${grok_home}/auth.json" 2>/dev/null || true
-  printf '%s\n' '[ui]' 'permission_mode = "always-approve"' >"${grok_home}/config.toml"
+  node "$peertable_script_dir/grok-seat-config.mjs" "$proj" "${grok_home}/config.toml"
 fi
 
 # 前の卓の残骸を回収してから、Aiterm の公開 agent launcher を唯一の席起動経路として呼ぶ。
@@ -435,9 +438,14 @@ print('dispatched' if cursor is not None and residue is not True
 PY
 )
   case "$brief_receipt_state" in
-    dispatched) brief_dispatched=true ;;
+    dispatched)
+      brief_dispatched=true
+      brief_sent=true
+      brief_event_cursor=$(python3 -c 'import json,sys;print(json.loads(sys.argv[1]).get("event_cursor", ""))' "$launch_receipt")
+      ;;
     residue)
       brief_in_composer=true
+      brief_event_cursor=$(python3 -c 'import json,sys;print(json.loads(sys.argv[1]).get("event_cursor", ""))' "$launch_receipt")
       echo "SEAT_BRIEF_SUBMIT_RESIDUE: brief は入力欄に残り submit が落ちた。着席確認後に submit し直す" >&2
       ;;
     *)
@@ -476,31 +484,29 @@ claude_trust_accepted=false
 codex_dialog_helper="$peertable_script_dir/codex-dialog.mjs"
 claude_dialog_helper="$peertable_script_dir/claude-dialog.mjs"
 pass_codex_pane() {
-  local json key
-  json=$(printf '%s' "$1" | node "$codex_dialog_helper" || true)
-  [ -n "$json" ] && [ "$json" != "null" ] || return 1
+  local keys key
+  keys=$(printf '%s' "$1" | node "$codex_dialog_helper" --keys || true)
+  [ -n "$keys" ] || return 1
+  sleep .3
   while IFS= read -r key; do
     [ -n "$key" ] || continue
     tmux_at send-keys -t "$sess" "$key" || return 1
     sleep .3
-  done < <(python3 -c 'import json,sys
-a=json.loads(sys.stdin.read() or "null")
-print("\n".join(a.get("keys") or []) if isinstance(a, dict) else "")' <<<"$json")
+    sleep .3
+  done <<<"$keys"
   return 0
 }
 codex_pane_blocks_ready() {
   printf '%s' "$1" | node "$codex_dialog_helper" --ready-ok
 }
 pass_claude_mcp_pane() {
-  local json key
-  json=$(printf '%s' "$1" | node "$claude_dialog_helper" || true)
-  [ -n "$json" ] && [ "$json" != "null" ] || return 1
+  local keys key
+  keys=$(printf '%s' "$1" | node "$claude_dialog_helper" --keys || true)
+  [ -n "$keys" ] || return 1
   while IFS= read -r key; do
     [ -n "$key" ] || continue
     tmux_at send-keys -t "$sess" "$key" || return 1
-  done < <(python3 -c 'import json,sys
-a=json.loads(sys.stdin.read() or "null")
-print("\n".join(a.get("keys") or []) if isinstance(a, dict) else "")' <<<"$json")
+  done <<<"$keys"
   return 0
 }
 while [ $SECONDS -lt "$room_ready_deadline" ]; do
@@ -592,6 +598,11 @@ if [ "$room_ready" != true ]; then
   exit 1
 fi
 echo "room ready: ${room}/${name}"
+
+# ここから先のdialog処理・稼働状態・DM配送に必要なruntimeは、利用側へ順序を
+# 委ねず正規着座入口が現行Peertable版へ収束させる。
+PEERTABLE_CREDENTIAL_FILE="$credential_file" "$peertable_script_dir/ensure-project-runtime.sh" "$proj"
+
 if [ "$harness" = codex ]; then
   # member 登録後の最初の tool 呼び出しで MCP Allow が出る。出ている間だけ通し、沈黙5秒で抜ける。
   codex_post_ready_deadline=$((SECONDS + 90))
@@ -611,14 +622,16 @@ if [ "$harness" = codex ]; then
   done
 fi
 if [ "$brief_dispatched" = true ]; then
-  brief_completed=true
   echo "briefed: ${sess}（Aiterm launch prompt）"
 fi
 
 if [ -n "$brief" ] && [ "$brief_dispatched" != true ]; then
   if [ "$brief_in_composer" != true ]; then
-    if node "$peertable_script_dir/aiterm-send.mjs" "$sess" "$brief_file" >/dev/null; then
-      brief_completed=true
+    # TUIの入力可能判定とsubmitはAitermの公開 pty_send が所有する。ここで独自の
+    # prompt連続観測を重ねると、正常なTUI描画差だけでdispatch前に席を落とす。
+    if brief_send_receipt=$(node "$peertable_script_dir/aiterm-send.mjs" "$sess" "$brief_file"); then
+      brief_sent=true
+      brief_event_cursor=$(python3 -c 'import json,sys;print(json.loads(sys.argv[1]).get("event_cursor", ""))' "$brief_send_receipt")
       echo "briefed: $sess（Aiterm pty_send）"
     else
       echo "LAUNCH_BRIEF_SEND_FAILED: Aiterm pty_sendでbriefをdispatchできない" >&2
@@ -645,14 +658,15 @@ if [ -n "$brief" ] && [ "$brief_dispatched" != true ]; then
     sleep 1
   done
   if [ "$brief_ready" != true ]; then
-    brief_not_ready=true
-    echo "LAUNCH_BRIEF_NOT_READY: brief を受け付ける入力 prompt を観測できない（brief未投入・空席を保持。Aiterm手動dispatch対象）" >&2
+    tmux_at capture-pane -t "$sess" -p >"$proj/.team/${name}-pane-on-fail.txt" 2>/dev/null || true
+    echo "LAUNCH_BRIEF_NOT_READY: brief を受け付ける入力promptを観測できない" >&2
+    echo "pane saved: $proj/.team/${name}-pane-on-fail.txt" >&2
+    exit 1
   else
     # prompt の描画とキー入力受理の境界を分ける。Codex のTUIが入力欄を
     # mountした直後に paste と Enter を同一tickで受けると、Enterだけ落ちる。
     sleep 1
 
-  brief_before=$(tmux_at capture-pane -S -1000 -t "$sess" -p 2>/dev/null || true)
   # submit_residue の席は本文が composer に残っている。貼り直すと二重になるので Enter だけ打つ。
   if [ "$brief_in_composer" != true ]; then
     brief_buffer="peertable-brief-${name}-$$"
@@ -672,28 +686,46 @@ if [ -n "$brief" ] && [ "$brief_dispatched" != true ]; then
     exit 1
   fi
 
-  # 入力欄へ置けた事実だけでは着任成功としない。既存の席状態判定と同じ live marker が、
-  # brief 投入後に画面へ現れたことを観測する。高速な fake/CLI の残像を拾わないよう、投入前の
-  # 画面と異なることも同時に要求する。dispatch は Aiterm の手動送信と同じく、この1回だけ行う。
-  brief_deadline=$((SECONDS + 30))
-  brief_turn_started=false
-  while [ $SECONDS -lt "$brief_deadline" ]; do
-    brief_screen=$(tmux_at capture-pane -S -1000 -t "$sess" -p 2>/dev/null || true)
-    case "$brief_screen" in
-      *"esc to interrupt"*)
-        if [ "$brief_screen" != "$brief_before" ]; then brief_turn_started=true; break; fi
-        ;;
-    esac
+  brief_sent=true
+  echo "briefed: $sess"
+  fi
+fi
+fi
+
+# 「promptを渡した」ではなく、全harness共通で実ターンが始まったことを成功条件にする。
+# 1秒未満で完了するturnはAitermの完了正本で拾い、通常turnは現在paneのbusyランプで拾う。
+if [ -n "$brief" ] && [ "$brief_sent" = true ]; then
+  command -v aiterm-wait >/dev/null 2>&1 || { echo "LAUNCH_AITERM_WAIT_MISSING: 実ターン開始を確認できない" >&2; exit 1; }
+  brief_active_deadline=$((SECONDS + 60))
+  brief_turn_observed=false
+  while [ $SECONDS -lt "$brief_active_deadline" ]; do
+    brief_screen=$(tmux_at capture-pane -t "$sess" -p 2>/dev/null || true)
+    if [ "$harness" = codex ] && pass_codex_pane "$brief_screen"; then
+      sleep 1
+      continue
+    fi
+    brief_pane_status=$(printf '%s' "$brief_screen" | node "$peertable_script_dir/agent-pane-status.mjs")
+    if [ "$brief_pane_status" = busy ]; then
+      brief_turn_observed=true
+      break
+    fi
+    if [ -n "$brief_event_cursor" ]; then
+      wait_receipt=$(aiterm-wait --session "$sess" --cursor "$brief_event_cursor" --timeout 0 2>/dev/null || true)
+      if printf '%s' "$wait_receipt" | node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{try{process.exit(JSON.parse(s).outcome==="done"?0:1)}catch{process.exit(1)}})'; then
+        brief_turn_observed=true
+        break
+      fi
+    fi
     sleep 1
   done
-  if [ "$brief_turn_started" != true ]; then
-    echo "LAUNCH_BRIEF_TURN_NOT_STARTED: brief 投入後の turn 開始を観測できない（席は着席済み）" >&2
+  if [ "$brief_turn_observed" != true ]; then
+    tmux_at capture-pane -t "$sess" -p >"$proj/.team/${name}-pane-on-fail.txt" 2>/dev/null || true
+    echo "LAUNCH_BRIEF_TURN_NOT_STARTED: Aiterm dispatch後に${harness}の実ターン開始も完了も観測できない" >&2
+    echo "pane saved: $proj/.team/${name}-pane-on-fail.txt" >&2
     exit 1
   fi
   brief_completed=true
-  echo "briefed: $sess"
-  fi
-fi
+  echo "active: $sess（実ターン開始を観測）"
 fi
 
 # 席の本人性（pid / 起動時刻 / argv digest）を room 台帳の member 行へ登録する。
@@ -762,28 +794,5 @@ else
   echo "SEAT_LEDGER_INCOMPLETE: 台帳の member 行に素性または本人性が欠けている（席は着席済み。doctor で確認）" >&2
 fi
 
-PEERTABLE_CREDENTIAL_FILE="$credential_file" "$(dirname "$0")/ensure-bridge.sh" "$proj" alarm   || echo "alarm-bridge の起動確認に失敗した（席は着席済み）" >&2
-if PEERTABLE_CREDENTIAL_FILE="$credential_file" "$(dirname "$0")/ensure-bridge.sh" "$proj" seat-status; then
-  echo "seat-status-bridge: 起動確認済み"
-else
-  echo "seat-status-bridge の起動確認に失敗した（席は着席済み）" >&2
-fi
-
-# Claude 席の新着は room client の notifications/claude/channel。TUI 配達は channels を持たない
-# Codex / Grok 席だけ。Claude に立てると channel と二重配達になる。
-if [ "$harness" = codex ] || [ "$harness" = grok ]; then
-  if PEERTABLE_CREDENTIAL_FILE="$credential_file" "$(dirname "$0")/ensure-bridge.sh" "$proj" wakeup; then
-    echo "wakeup-bridge: TUI配達 起動確認済み"
-  else
-    echo "SEAT_WAKEUP_BRIDGE_NOT_READY: Codex／Grok席の TUI 配達を準備できない" >&2
-    exit 1
-  fi
-fi
-
 if [ -z "$brief" ]; then brief_completed=true; fi
 credential_persist=true
-if [ "$brief_not_ready" = true ]; then
-  # 空席の後段セットアップ（identity / metadata / bridge）まで済ませたうえで、
-  # 呼び出し側にはready未確認を非0で返す。席はAiterm手動dispatchへ引き継ぐ。
-  exit 1
-fi

package/skill/scripts/parent-watch.mjs

@@ -330,9 +330,7 @@ async function catchUp() {
 // 長寿命なのはbackground taskのloopだけで、端末sessionやNode processは常駐させない。
 if (mode === '--poll') {
   await catchUp()
-  process.exit(0)
-}
-
+} else {
 const nextWindowMs = Number(process.env.PEERTABLE_PARENT_WATCH_WINDOW_MS ?? 55_000)
 if (mode === '--next' && (!Number.isFinite(nextWindowMs) || nextWindowMs < 100)) {
   console.error('PARENT_WATCH_WINDOW_INVALID')
@@ -411,3 +409,4 @@ for (;;) {
     await sleep(Math.min(2000, Math.max(1, deadline - Date.now())))
   }
 }
+}

package/skill/scripts/platform/windows/build-bridge-command.mjs

@@ -28,9 +28,14 @@ export function buildWindowsBridgeLaunch({
     const value = env[name]
     if (value) statements.push(`$env:${name} = ${quotePowerShell(value)}`)
   }
+  statements.push('$utf8 = [System.Text.UTF8Encoding]::new($false)')
+  statements.push('[Console]::InputEncoding = $utf8')
+  statements.push('[Console]::OutputEncoding = $utf8')
+  statements.push('$OutputEncoding = $utf8')
   const command = [node, script, project, ...args].map(quotePowerShell).join(' ')
-  statements.push(`& ${command} *>> ${quotePowerShell(log)}`)
-  statements.push('exit $LASTEXITCODE')
+  statements.push(`& ${command} 2>&1 | Out-File -FilePath ${quotePowerShell(log)} -Append -Encoding utf8`)
+  statements.push('$bridgeExit = $LASTEXITCODE')
+  statements.push('exit $bridgeExit')
   const encoded = Buffer.from(statements.join('; '), 'utf16le').toString('base64')
   const argv = ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', encoded]
   return {

package/skill/scripts/resume.sh

@@ -150,15 +150,8 @@ done < <(node -e '
 ' "$seats_file")
 rm -f "$seats_file"
 
-# Phase C: bridge の再起動
-for kind in alarm seat-status wakeup; do
-  if "$script_dir/ensure-bridge.sh" "$proj" "$kind"; then
-    echo "[実施] ${kind}-bridge: ready"
-  else
-    echo "[未実施] ${kind}-bridge: 起動を確認できなかった（ログ $proj/.team/${kind}-bridge.log）" >&2
-    exit 1
-  fi
-done
+# Phase C: runtime を一回の入口で現行版へ収束
+"$script_dir/ensure-project-runtime.sh" "$proj"
 
 # Phase D: fresh heartbeat の読み戻しと probe DM の配送 receipt 確認
 RESUME_PROJ="$proj" RESUME_PROBE="$probe" RESUME_SCRIPT_DIR="$script_dir" node --input-type=module <<'NODE'

package/skill/scripts/runtime-contract.test.mjs

@@ -0,0 +1,158 @@
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+import test from 'node:test'
+
+import { keysForCodexPane } from './codex-dialog.mjs'
+import { buildWindowsBridgeLaunch } from './platform/windows/build-bridge-command.mjs'
+import { paneStatusTail } from './seat-usage.mjs'
+import { classifyGrokPaneTail } from './vendors/grok/pane-status.mjs'
+import { latticeTaskAvailable } from './alarm-condition.mjs'
+import { boundedRecent, boundedUnread } from '../../room/message-bounds.mjs'
+
+test('Grokの通信失敗はWaiting表示が残ってもbusyにしない', () => {
+  const tail = [
+    'Connection failed — reqwest error stream: error sending request.',
+    'Check your network and try again.',
+    'Waiting for response… 29s [stop]',
+  ].join('\n')
+  assert.equal(classifyGrokPaneTail(tail), 'blocked')
+})
+
+test('通信失敗の無いGrok応答待ちはbusy', () => {
+  assert.equal(classifyGrokPaneTail('Waiting for response… 12s [stop]'), 'busy')
+})
+
+test('状態判定窓は折返しで14行より上へ出た通信失敗を含む', () => {
+  const pane = ['Connection failed — reqwest error stream', ...Array(20).fill('wrapped line'), 'Waiting for response…'].join('\n')
+  assert.ok(paneStatusTail(pane).includes('Connection failed'))
+})
+
+test('Codexのroom許可とcommand許可は固定選択肢だけを通す', () => {
+  assert.deepEqual(keysForCodexPane([
+    'Allow the room MCP server to run tool "members"?',
+    '3. Always allow',
+  ].join('\n')), { kind: 'mcp-allow', keys: ['Down', 'Down', 'Enter'] })
+  assert.deepEqual(keysForCodexPane([
+    'Would you like to run the following command?',
+    "2. Yes, and don't ask again for commands that start with Get-Content",
+  ].join('\n')), { kind: 'command-approval', keys: ['Down', 'Enter'] })
+})
+
+test('Codexの現在busy／idle composerはscrollbackの古い許可文より優先する', () => {
+  const stale = [
+    'Would you like to run the following command?',
+    "2. Yes, and don't ask again for commands that start with rg",
+  ]
+  assert.equal(keysForCodexPane([...stale, '• Working (8s • esc to interrupt)', '› Ask Codex to do anything', 'gpt-5.6-terra high · ~/work'].join('\n')), null)
+  assert.equal(keysForCodexPane([...stale, '› Ask Codex to do anything', 'gpt-5.6-terra high · ~/work'].join('\n')), null)
+})
+
+test('着座はAiterm dispatch前に独自prompt連続判定を重ねない', () => {
+  const source = readFileSync(new URL('./launch-seat.sh', import.meta.url), 'utf8')
+  const activeBranch = source.slice(
+    source.indexOf('if [ "$brief_in_composer" != true ]; then'),
+    source.indexOf('  else\n  # Codex はヘッダを描いた後も MCP 初期化を続ける。'),
+  )
+  assert.ok(activeBranch.includes('aiterm-send.mjs'))
+  assert.ok(!activeBranch.includes('brief_ready_streak'))
+  assert.ok(source.includes('brief_turn_observed'))
+  assert.ok(source.includes('agent-pane-status.mjs'))
+  assert.ok(source.includes('aiterm-wait --session'))
+})
+
+test('wakeup bridgeはpending DMが無くてもCodex既知dialogを巡回する', () => {
+  const source = readFileSync(new URL('./wakeup-bridge.mjs', import.meta.url), 'utf8')
+  assert.ok(source.includes('dialogSweepRunning'))
+  assert.ok(source.includes('await passKnownCodexDialog(member)'))
+})
+
+test('円卓runtimeは3bridgeを固定順で一括収束する', () => {
+  const source = readFileSync(new URL('./ensure-project-runtime.sh', import.meta.url), 'utf8')
+  assert.ok(source.includes('for kind in alarm seat-status wakeup'))
+})
+
+test('bridge更新は版数だけでなくruntime source digestへ束縛する', () => {
+  const digest = spawnSync(process.execPath, [fileURLToPath(new URL('./runtime-digest.mjs', import.meta.url))], { encoding: 'utf8' })
+  assert.equal(digest.status, 0, digest.stderr)
+  assert.match(digest.stdout, /^[0-9a-f]{64}$/u)
+  const source = readFileSync(new URL('./ensure-bridge.sh', import.meta.url), 'utf8')
+  assert.ok(source.includes('peertable_runtime_digest'))
+})
+
+test('Windows bridgeはUTF-8を明示してログへ書く', () => {
+  const launch = buildWindowsBridgeLaunch({ script: 'bridge.mjs', project: 'C:\\work', log: 'C:\\work\\bridge.log' })
+  const encodedAt = launch.argv.indexOf('-EncodedCommand')
+  const decoded = Buffer.from(launch.argv[encodedAt + 1], 'base64').toString('utf16le')
+  assert.ok(decoded.includes('[Console]::OutputEncoding = $utf8'))
+  assert.ok(decoded.includes('Out-File'))
+  assert.ok(decoded.includes('-Encoding utf8'))
+})
+
+test('alarm writerは日本語noteをUTF-8 stdinから保存する', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'peertable-alarm-'))
+  const out = join(dir, 'alarm.json')
+  try {
+    const input = ['script', 'yuna', 't04-integration が ready になったら工程を確認する', 'exit 0'].join('\0')
+    const result = spawnSync(process.execPath, [fileURLToPath(new URL('./alarm-write.mjs', import.meta.url)), out], {
+      input: Buffer.from(input, 'utf8'),
+      encoding: 'utf8',
+    })
+    assert.equal(result.status, 0, result.stderr)
+    const saved = JSON.parse(readFileSync(out, 'utf8'))
+    assert.equal(saved.note, 't04-integration が ready になったら工程を確認する')
+  } finally {
+    rmSync(dir, { recursive: true, force: true })
+  }
+})
+
+test('Lattice task alarmはready/activeだけで成立し未出現taskでは発火しない', () => {
+  const status = {
+    next_ready: [{ plan_key: 'p', task_id: 't04' }],
+    active_set: [{ plan_key: 'p', task_id: 't03' }],
+  }
+  assert.equal(latticeTaskAvailable(status, 't04', 'p'), true)
+  assert.equal(latticeTaskAvailable(status, 't03', 'p'), true)
+  assert.equal(latticeTaskAvailable(status, 't05', 'p'), false)
+  assert.equal(latticeTaskAvailable(status, 't04', 'other'), false)
+})
+
+test('Grok席configはClaude/Cursor互換を止めroom以外のproject MCPを無効化する', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'peertable-grok-seat-'))
+  const output = join(dir, 'seat', 'config.toml')
+  try {
+    writeFileSync(join(dir, '.mcp.json'), JSON.stringify({ mcpServers: {
+      booth: { command: 'node' }, room: { command: 'node' }, extra: { command: 'node' },
+    } }))
+    const result = spawnSync(process.execPath, [fileURLToPath(new URL('./grok-seat-config.mjs', import.meta.url)), dir, output], { encoding: 'utf8' })
+    assert.equal(result.status, 0, result.stderr)
+    const config = readFileSync(output, 'utf8')
+    assert.match(config, /\[compat\.claude\][\s\S]*mcps = false/u)
+    assert.match(config, /\[compat\.cursor\][\s\S]*hooks = false/u)
+    assert.match(config, /disabled_mcp_servers = \["booth","extra"\]/u)
+    assert.doesNotMatch(config, /"room"/u)
+  } finally {
+    rmSync(dir, { recursive: true, force: true })
+  }
+})
+
+test('room logは20件・UTF-8 12KB以内で古い分を明示省略する', () => {
+  const messages = Array.from({ length: 30 }, (_, index) => ({ seq: index + 1, body: `本文${index + 1}`.repeat(300) }))
+  const result = boundedRecent(messages, message => `[${message.seq}] ${message.body}`, 50)
+  assert.ok(Buffer.byteLength(result.text, 'utf8') <= 12_100)
+  assert.ok(result.requested === 20)
+  assert.match(result.text, /古い \d+ 件を出力上限のため省略/u)
+  assert.match(result.text, /\[30\]/u)
+})
+
+test('room未読は返した位置までだけ進み残りを次回へ保つ', () => {
+  const messages = Array.from({ length: 6 }, (_, index) => ({ seq: index + 1, body: `未読${index + 1}`.repeat(500) }))
+  const first = boundedUnread(messages, () => true, message => `[${message.seq}] ${message.body}`, 4000)
+  assert.ok(first.omitted > 0)
+  assert.ok(first.consumedSeq < 6)
+  assert.match(first.text, /read_unreadを再実行/u)
+})

package/skill/scripts/runtime-digest.mjs

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { createHash } from 'node:crypto'
+import { readdirSync, readFileSync } from 'node:fs'
+import { dirname, join, relative } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const root = dirname(fileURLToPath(import.meta.url))
+const files = []
+function walk(dir) {
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    const path = join(dir, entry.name)
+    if (entry.isDirectory()) walk(path)
+    else if ((entry.name.endsWith('.mjs') || entry.name.endsWith('.sh')) && !entry.name.endsWith('.test.mjs')) files.push(path)
+  }
+}
+walk(root)
+files.sort((a, b) => relative(root, a).localeCompare(relative(root, b), 'en'))
+const hash = createHash('sha256')
+for (const file of files) {
+  hash.update(relative(root, file).replaceAll('\\', '/'))
+  hash.update('\0')
+  hash.update(readFileSync(file))
+  hash.update('\0')
+}
+process.stdout.write(hash.digest('hex'))

package/skill/scripts/seat-status-bridge.mjs

@@ -27,7 +27,7 @@ import { execFileSync } from 'node:child_process'
 import { existsSync, readFileSync, renameSync, writeFileSync, unlinkSync } from 'node:fs'
 import { join } from 'node:path'
 
-import { STOP_DECLARATION, attributeJobSession, combineSeatLamp, isPaneHarnessMissing, hasActiveDescendant, subtreeCpuSeconds, patrolTargets, classifyPaneTail, decideBridgeContinuation, deriveMissingSession, isPaneProcessStopped, parsePaneTokenHint, resolveLatticeExecutable, resolvePostToken, resolveSeatObservation, resolveTmuxSocket, supportsMemberObservation, tmuxArgv, tmuxPanePid } from './seat-usage.mjs'
+import { STOP_DECLARATION, attributeJobSession, combineSeatLamp, isPaneHarnessMissing, hasActiveDescendant, subtreeCpuSeconds, patrolTargets, classifyPaneTail, decideBridgeContinuation, deriveMissingSession, isPaneProcessStopped, paneStatusTail, parsePaneTokenHint, resolveLatticeExecutable, resolvePostToken, resolveSeatObservation, resolveTmuxSocket, supportsMemberObservation, tmuxArgv, tmuxPanePid } from './seat-usage.mjs'
 import { updateBridgeProgress } from './bridge-record-live.mjs'
 
 const args = process.argv.slice(2)
@@ -111,7 +111,7 @@ function readSeat(member, previous, observedAt) {
   }
   const pane = tmux(target.socket, 'capture-pane', '-t', target.target, '-p')
   if (pane === null) return { status: 'dead', busySince: null, paneTokenHint: null }
-  const tail = pane.split('\n').slice(-14).join('\n')
+  const tail = paneStatusTail(pane)
   const tentativeStatus = classifyPaneTail(tail)
   // pane 自体は生きたまま中の CLI プロセスだけが停止する局面（Lattice pull run の accept hold 等）を
   // 拾う。画面の残像だけでは idle に誤判定するため、idle と読めた時だけ実プロセスの stat を見る。

package/skill/scripts/seat-usage.mjs

@@ -202,6 +202,14 @@ export const BLOCKED_MARKERS = [
 
 export { isGrokPrivacyBanner }
 
+// 承認画面や接続失敗は折返し・キュー表示で14行より上へ押し出される。現在のturnを
+// 覆いながら、古いscrollback全体を状態に混ぜない固定窓として32行を読む。
+export const PANE_STATUS_TAIL_LINES = 32
+
+export function paneStatusTail(pane) {
+  return String(pane ?? '').split('\n').slice(-PANE_STATUS_TAIL_LINES).join('\n')
+}
+
 /**
  * pane 末尾の生文字列から画面状態を判定する。判定順は busy → blocked → idle
  * （承認プロンプト表示中は `esc to interrupt` が消えるので busy を先に見る）。

package/skill/scripts/setup.sh

@@ -121,6 +121,8 @@ else
 fi
 # 目覚まし係の登録口は全モード共通で配る（member.md の待機作法が参照する）
 cp "$repo/skill/scripts/alarm-set.sh" "$tdir/scripts/alarm-set.sh" && chmod +x "$tdir/scripts/alarm-set.sh"
+cp "$repo/skill/scripts/alarm-write.mjs" "$tdir/scripts/alarm-write.mjs" && chmod +x "$tdir/scripts/alarm-write.mjs"
+cp "$repo/skill/scripts/alarm-condition.mjs" "$tdir/scripts/alarm-condition.mjs" && chmod +x "$tdir/scripts/alarm-condition.mjs"
 # member.md が attach 手順で参照する。配り漏れると席が attach できず停止する（実被弾 2026-08-22）
 cp "$repo/skill/scripts/pull-attach-input.mjs" "$tdir/scripts/pull-attach-input.mjs" && chmod +x "$tdir/scripts/pull-attach-input.mjs"
 # room MCP 定義は project root の .mcp.json が正（channels は --mcp-config を解決しない。決定44）
@@ -209,11 +211,6 @@ fi
 # 4時間 HTTP 403 を撃ち続け、参加者一覧には点が1つも出なかった＝起こしていないのと見分けがつかない）。
 # AI は使わず席へも1バイト送らないので卓の作業を邪魔しない。**書けない時は常駐せずに死ぬ**ので、
 # ここで壊れた常駐が黙って残ることは無い。setup-state.json を読むので、必ずその後で起こす。
-"$repo/skill/scripts/ensure-bridge.sh" "$proj" alarm || echo "alarm-bridge の起動確認に失敗した（席は使える・目覚まし係だけ後で ensure-bridge.sh で立てる）" >&2
-if "$repo/skill/scripts/ensure-bridge.sh" "$proj" seat-status; then
-  echo "seat-status-bridge: ready_at を確認した（ログ $tdir/seat-status-bridge.log・停止は teardown が行う）"
-else
-  echo "seat-status-bridge: 起動を確認できなかった（ログ $tdir/seat-status-bridge.log）" >&2
-fi
+"$repo/skill/scripts/ensure-project-runtime.sh" "$proj"
 
 echo "scaffold done: $tdir"

package/skill/scripts/tmux-at.bash

@@ -1,22 +1,22 @@
-# sourced by launch-seat / leave-seat / teardown / ensure-bridge / change-seat
-# POSIX は tmux -S <sock>。Windows psmux は -L <aiterm-ns>（-S は既定 namespace へ落ちる）。
-_peertable_tmux_scripts=$(CDPATH= cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)
-tmux_at() {
-  local prefix
-  prefix=$(node "$_peertable_tmux_scripts/tmux-socket.mjs" --prefix) || return 1
-  # shellcheck disable=SC2206
-  local -a conn=($prefix)
-  # tmux server は最初に立てた process の locale を一生使い、C/POSIX/未設定だと UTF-8 の
-  # send-keys/paste を破壊する（実被弾 2026-08-29: launchd の bridge 巡回が LANG 無しで
-  # server を立て、以後の日本語込み席起動コマンドが全て化けて Codex 席が着席不能になった）。
-  # launchd/cron 由来の呼び出しでも server が UTF-8 で立つよう、壊れた既定の時だけ注入する。
-  # 利用者が C/POSIX 以外を明示設定している場合はその選択を尊重して触らない（aiterm と同じ判定）。
-  local effective="${LC_ALL:-${LC_CTYPE:-${LANG:-}}}"
-  if [ -z "$effective" ] || [[ "$effective" =~ ^(C|POSIX)$ ]]; then
-    local ctype="C.UTF-8"
-    [ "$(uname)" = "Darwin" ] && ctype="UTF-8"
-    env -u LC_ALL LC_CTYPE="$ctype" tmux "${conn[@]}" "$@"
-  else
-    command tmux "${conn[@]}" "$@"
-  fi
-}
+# sourced by launch-seat / leave-seat / teardown / ensure-bridge / change-seat
+# POSIX は tmux -S <sock>。Windows psmux は -L <aiterm-ns>（-S は既定 namespace へ落ちる）。
+_peertable_tmux_scripts=$(CDPATH= cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)
+tmux_at() {
+  local prefix
+  prefix=$(node "$_peertable_tmux_scripts/tmux-socket.mjs" --prefix) || return 1
+  # shellcheck disable=SC2206
+  local -a conn=($prefix)
+  # tmux server は最初に立てた process の locale を一生使い、C/POSIX/未設定だと UTF-8 の
+  # send-keys/paste を破壊する（実被弾 2026-08-29: launchd の bridge 巡回が LANG 無しで
+  # server を立て、以後の日本語込み席起動コマンドが全て化けて Codex 席が着席不能になった）。
+  # launchd/cron 由来の呼び出しでも server が UTF-8 で立つよう、壊れた既定の時だけ注入する。
+  # 利用者が C/POSIX 以外を明示設定している場合はその選択を尊重して触らない（aiterm と同じ判定）。
+  local effective="${LC_ALL:-${LC_CTYPE:-${LANG:-}}}"
+  if [ -z "$effective" ] || [[ "$effective" =~ ^(C|POSIX)$ ]]; then
+    local ctype="C.UTF-8"
+    [ "$(uname)" = "Darwin" ] && ctype="UTF-8"
+    env -u LC_ALL LC_CTYPE="$ctype" tmux "${conn[@]}" "$@"
+  else
+    command tmux "${conn[@]}" "$@"
+  fi
+}

package/skill/scripts/upgrade-team-assets.sh

@@ -201,6 +201,10 @@ function main() {
   const common = [
     ['.team/CLAUDE.md', 'skill/templates/charter.md', 0o644],
     ['.team/roles/parent.md', 'skill/templates/parent.md', 0o644],
+    ['.team/scripts/alarm-set.sh', 'skill/scripts/alarm-set.sh', 0o755],
+    ['.team/scripts/alarm-write.mjs', 'skill/scripts/alarm-write.mjs', 0o755],
+    ['.team/scripts/alarm-condition.mjs', 'skill/scripts/alarm-condition.mjs', 0o755],
+    ['.team/scripts/pull-attach-input.mjs', 'skill/scripts/pull-attach-input.mjs', 0o755],
   ]
   const modeSpecific = state.mode === 'lattice'
     ? [

package/skill/scripts/vendors/grok/pane-status.mjs

@@ -4,6 +4,13 @@ export function classifyGrokPaneTail(tail) {
 
   if (isGrokPrivacyBanner(tail)) return 'blocked'
 
+  // Grok Build は通信失敗後も `Waiting for response` と `[stop]` を画面へ残し、
+  // 再試行中のように見せる。この状態を busy にすると「モデルが仕事を進めている」
+  // アクティブランプが点き続けるため、既知の接続失敗を先に blocked と判定する。
+  if (tail.includes('Connection failed — reqwest error')
+    || tail.includes('Connection failed - reqwest error')
+    || tail.includes('Check your network and try again.')) return 'blocked'
+
   // 完了後も `stop [hooks: 1/3]` はステータス行へ残る。入力欄が戻った
   // `Worked for ...` 行を先にidle扱いし、配達を永久保留しない。
   if (/Worked for\s+\d+(?:m\d+)?s[\s\S]*?stop\s+\[hooks:\s*\d+\/\d+\]/u.test(tail)) return 'idle'