ai-lens 0.8.100 → 0.8.102

package/.commithash

@@ -1 +1 @@
-3ebf574
+3747fae

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 History of changes to the `ai-lens` CLI package on npm. New entries go on top. Format: `## X.Y.Z — YYYY-MM-DD`, followed by user-facing bullets.
 
+## 0.8.102 — 2026-06-17
+- fix: the per-machine `settings.local.json` overlay for committed Claude Code hooks now also writes the absolute launcher form on Windows (matching the main install path), so a repo whose tracked `settings.json` carries `$CLAUDE_PROJECT_DIR` hooks captures correctly on Windows without manual fix-up. `ai-lens status`/`init` now flag any leftover `$CLAUDE_PROJECT_DIR`/`%CLAUDE_PROJECT_DIR%` Claude hook on Windows as outdated so it migrates to the absolute form.
+- fix: the Windows windowless hook launcher (`ai-lens-hook.ps1`) now sends the event payload to node as raw UTF-8 bytes (Cyrillic prompts and accented paths are no longer mangled by PowerShell's default codepage) and fails open — on any internal error it exits cleanly and writes nothing to stdout, so a launcher hiccup can never break a Cursor hook or disrupt the session.
+
+## 0.8.101 — 2026-06-17
+- fix: Claude Code hooks on Windows now use an absolute path to capture.js instead of `$CLAUDE_PROJECT_DIR`, which Claude Code does not expand on Windows (the v0.8.100 form failed to find the launcher and, when Cursor also ran the hook, produced a visible error). Capture is restored. Existing installs migrate on the next `ai-lens init` / `/setup`. macOS/Linux keep `$CLAUDE_PROJECT_DIR` (expanded there). Note: a brief console window can still flash on Claude Code hooks on Windows — that's an upstream Claude Code behaviour (it launches the hook shell without hiding the window) and can't be fixed from the hook side
+
 ## 0.8.100 — 2026-06-17
 - fix: Claude Code hooks on Windows now actually capture. The previous windowless wrapper (`conhost.exe --headless`) hid the console window but silently swallowed the hook's stdin, so the event payload never reached AI Lens and nothing was recorded. Claude Code now uses the same windowless launcher as Cursor (`ai-lens-hook.ps1`), which both suppresses the window and delivers the payload. Existing installs migrate on the next `ai-lens init` / `/setup`. macOS/Linux unchanged. (The launcher was renamed from `cursor-ai-lens-hook.ps1` since it now serves both tools.)
 

package/cli/hooks.js

@@ -316,16 +316,13 @@ export function captureCommand(opts = {}) {
   // binary or /home/<user> path. Windows Claude Code shells via cmd.exe (%VAR%);
   // POSIX shells use $VAR.
   if (projectDirRelPath != null) {
+    // POSIX/macOS only: bare node + $CLAUDE_PROJECT_DIR (the shell expands $VAR; the
+    // path stays machine-agnostic for committed hooks + cwd-robust). On WINDOWS this
+    // form must NOT be used — Claude Code's hook spawn (Git Bash / PowerShell) does NOT
+    // expand $CLAUDE_PROJECT_DIR nor %CLAUDE_PROJECT_DIR% (verified live: both reached
+    // the shell literally and the path failed). Callers therefore route Windows Claude
+    // hooks to the absolute getClaudeCodeHookDefsWithPath form instead of this one.
     const rel = projectDirRelPath.replace(/\\/g, '/').replace(/^\.?\/+/, '');
-    if (winLauncher) {
-      // Windowless form via the launcher. Uses $CLAUDE_PROJECT_DIR — Claude Code
-      // substitutes that variable itself before exec on every OS. The launcher ships
-      // next to capture.js, so it resolves under the same $CLAUDE_PROJECT_DIR path.
-      // node stays bare (committed/machine-agnostic form) — the launcher's
-      // ProcessStartInfo resolves it via PATH (Claude Code requires node on PATH).
-      const launcherRel = rel.replace(/[^/]*$/, 'ai-lens-hook.ps1');
-      return `powershell -NoProfile -ExecutionPolicy Bypass -File "$CLAUDE_PROJECT_DIR/${launcherRel}" node "$CLAUDE_PROJECT_DIR/${rel}"`;
-    }
     const dir = isWin ? '%CLAUDE_PROJECT_DIR%' : '$CLAUDE_PROJECT_DIR';
     return `node "${dir}/${rel}"`;
   }
@@ -926,14 +923,17 @@ function isAcceptableHookCommand(cmd) {
 export function isWrongPlatformProjectDirCommand(cmd, platform = process.platform) {
   if (!isClaudeProjectDirCommand(cmd)) return false;
   const n = (cmd || '').replace(/\\/g, '/');
-  // The Windows windowless launcher form (powershell … -File "$CLAUDE_PROJECT_DIR/…
-  // ai-lens-hook.ps1" …) and the older conhost.exe --headless form are unambiguously
-  // Windows commands. Both deliberately use $CLAUDE_PROJECT_DIR — Claude Code substitutes
-  // that itself before exec, so it expands on Windows. They are correct on win32 and
-  // wrong (won't run) anywhere else; the %VAR%/$VAR rule below doesn't apply to them.
-  if (/ai-lens-hook\.ps1/i.test(n) || isConhostHeadlessCommand(n)) return platform !== 'win32';
-  const correctVar = platform === 'win32' ? '%CLAUDE_PROJECT_DIR%' : '$CLAUDE_PROJECT_DIR';
-  return !n.includes(correctVar);
+  // The legacy conhost.exe --headless form is unambiguously a Windows command and uses
+  // $CLAUDE_PROJECT_DIR: correct on win32, wrong elsewhere. (Migration off conhost is
+  // driven separately by the wrapper-kind check in isCurrentAiLensHook.)
+  if (isConhostHeadlessCommand(n)) return platform !== 'win32';
+  // On Windows, NEITHER $CLAUDE_PROJECT_DIR nor %CLAUDE_PROJECT_DIR% actually expands in
+  // Claude Code's hook spawn (verified live) — so ANY variable-bearing form is wrong on
+  // win32 and must migrate to the absolute path form (incl. a stale $VAR-launcher or a
+  // %VAR% overlay). On POSIX the shell expands $CLAUDE_PROJECT_DIR, so $VAR is the only
+  // correct form there.
+  if (platform === 'win32') return true;
+  return !n.includes('$CLAUDE_PROJECT_DIR');
 }
 
 // Leading `conhost.exe --headless ` windowless wrapper, with the trailing space so a
@@ -1036,13 +1036,27 @@ export function analyzeClaudeLocalOverlay(tool, opts = {}) {
   if (!rel) return { applicable: false, reason: 'could not extract capture.js path from hook command' };
 
   const localPath = claudeLocalSettingsPath(tool);
+  // Committed-file → per-machine overlay mirror. On Windows $CLAUDE_PROJECT_DIR/%VAR% does
+  // NOT expand in Claude Code's hook spawn, so the overlay (like init's main path) writes
+  // the absolute windowless-launcher form — rel resolved against the project root, node
+  // resolved on this machine. POSIX keeps the $CLAUDE_PROJECT_DIR form (the shell expands it).
+  const overlayCtx = { ...(opts.ctx ?? {}), platform };
+  let overlayHookDefs;
+  if (platform === 'win32') {
+    const projectRoot = dirname(dirname(tool.configPath));
+    const absCapture = join(projectRoot, rel).replace(/\\/g, '/');
+    const nodeResolution = overlayCtx.nodeResolution ?? findStableNodePath({ platform });
+    overlayHookDefs = getClaudeCodeHookDefsWithPath(absCapture, { ...overlayCtx, nodeResolution });
+  } else {
+    overlayHookDefs = getClaudeCodeHookDefsWithProjectDir(rel, overlayCtx);
+  }
   const localTool = {
     ...tool,
     name: `${tool.name} (settings.local.json overlay)`,
     configPath: localPath,
     // Never backup/rename a user's settings.local.json wholesale on parse errors.
     sharedConfig: true,
-    hookDefs: getClaudeCodeHookDefsWithProjectDir(rel, { ...(opts.ctx ?? {}), platform }),
+    hookDefs: overlayHookDefs,
   };
   const overlayAnalysis = analyzeToolHooks(localTool, { platform, allowPlatformRewrite: true });
   return {

package/cli/init.js

@@ -182,9 +182,13 @@ function makeNestedClaudeTool(projectDir, capturePathInHooks, ctx = null) {
     // cwd. Absolute/tilde paths keep the legacy <node> <capture.js> form.
     const rel = capturePathInHooks.replace(/\\/g, '/');
     const isRelative = !rel.startsWith('/') && !rel.startsWith('~') && !/^[a-zA-Z]:\//.test(rel);
-    tool.hookDefs = (isRelative && /(?:^|\/)ai-lens\//.test(rel))
+    // $CLAUDE_PROJECT_DIR is expanded by the shell on POSIX but NOT on Windows (Claude's
+    // hook spawn takes it literally) — so on Windows resolve rel to an absolute path
+    // against the nested project root instead of using the projectDir form.
+    const useProjectDir = isRelative && /(?:^|\/)ai-lens\//.test(rel) && ctx?.platform !== 'win32';
+    tool.hookDefs = useProjectDir
       ? getClaudeCodeHookDefsWithProjectDir(rel, ctx)
-      : getClaudeCodeHookDefsWithPath(capturePathInHooks, ctx);
+      : getClaudeCodeHookDefsWithPath(isRelative ? join(projectDir, rel).replace(/\\/g, '/') : capturePathInHooks, ctx);
   }
   return tool;
 }
@@ -513,9 +517,13 @@ export default async function init() {
       : repoPathAbs.replace(/\\/g, '/');
     for (const tool of tools) {
       if (tool.name.startsWith('Claude Code')) {
-        tool.hookDefs = claudeProjectDirRel
+        // On Windows, Claude Code's hook spawn does NOT expand $CLAUDE_PROJECT_DIR (Git
+        // Bash / PowerShell take it literally), so the projectDir form can't resolve —
+        // use the resolved absolute repo path instead (per-machine, so absolute is fine).
+        // POSIX/macOS keep $CLAUDE_PROJECT_DIR (cwd-robust + the shell expands it).
+        tool.hookDefs = (claudeProjectDirRel && ctx?.platform !== 'win32')
           ? getClaudeCodeHookDefsWithProjectDir(claudeProjectDirRel, ctx)
-          : getClaudeCodeHookDefsWithPath(pathInHooks, ctx);
+          : getClaudeCodeHookDefsWithPath(claudeProjectDirRel ? repoPathAbs.replace(/\\/g, '/') : pathInHooks, ctx);
       }
       else if (tool.name.startsWith('Cursor')) tool.hookDefs = getCursorHookDefsWithPath(pathInHooks, ctx);
       else if (tool.name.startsWith('Codex')) tool.hookDefs = getCodexHookDefsWithPath(codexPathInHooks, ctx);

package/client/ai-lens-hook.ps1

@@ -8,7 +8,8 @@
 #     never reaches capture.js (it reads empty stdin and drops the event).
 # This launcher instead starts node via ProcessStartInfo with CreateNoWindow=$true (no
 # window) and RedirectStandardInput (real stdin forwarded) — so capture works AND there's
-# no flash, and nothing extra is written to stdout.
+# no flash. It is fail-open: on ANY error it exits 0 and writes NOTHING to stdout (Cursor
+# parses a hook's stdout as JSON — leaking an error there would break the hook).
 #
 # Payload source differs by caller, so read BOTH:
 #   - Cursor pipes it through the PowerShell pipeline → $input.
@@ -18,22 +19,32 @@
 # Args: $args[0] = node path, $args[1] = capture.js path.
 
 $ErrorActionPreference = 'Stop'
-$node = $args[0]
-$capture = $args[1]
+try {
+  $node = $args[0]
+  $capture = $args[1]
 
-$payload = @($input) -join "`n"
-if ([string]::IsNullOrEmpty($payload)) {
-  $payload = [Console]::In.ReadToEnd()
-}
+  $payload = @($input) -join "`n"
+  if ([string]::IsNullOrEmpty($payload)) {
+    $payload = [Console]::In.ReadToEnd()
+  }
 
-$psi = New-Object System.Diagnostics.ProcessStartInfo
-$psi.FileName = $node
-$psi.Arguments = '"' + $capture + '"'
-$psi.UseShellExecute = $false
-$psi.CreateNoWindow = $true
-$psi.RedirectStandardInput = $true
+  $psi = New-Object System.Diagnostics.ProcessStartInfo
+  $psi.FileName = $node
+  $psi.Arguments = '"' + $capture + '"'
+  $psi.UseShellExecute = $false
+  $psi.CreateNoWindow = $true
+  $psi.RedirectStandardInput = $true
 
-$proc = [System.Diagnostics.Process]::Start($psi)
-$proc.StandardInput.Write($payload)
-$proc.StandardInput.Close()
-$proc.WaitForExit()
+  $proc = [System.Diagnostics.Process]::Start($psi)
+  # Write the payload as raw UTF-8 bytes to node's stdin (capture.js reads UTF-8). Going
+  # through BaseStream avoids the StreamWriter's default codepage on Windows PowerShell
+  # 5.1 mangling non-ASCII content (e.g. Cyrillic prompts, accented paths).
+  $bytes = [System.Text.Encoding]::UTF8.GetBytes($payload)
+  $proc.StandardInput.BaseStream.Write($bytes, 0, $bytes.Length)
+  $proc.StandardInput.BaseStream.Flush()
+  $proc.StandardInput.Close()
+  $proc.WaitForExit()
+} catch {
+  # Fail-open: never disrupt the session, never emit non-JSON to the hook's stdout.
+  exit 0
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-lens",
-  "version": "0.8.100",
+  "version": "0.8.102",
   "type": "module",
   "description": "Centralized session analytics for AI coding tools",
   "bin": {