ai-worklens-agent 0.1.5 → 0.1.7

package/README.md

@@ -35,13 +35,23 @@ npm run mcp
 
 如果管理员已经把员工端发布到 npm 或企业私有 npm 源，可以使用 `npx` 首次安装：
 
+Windows 命令提示符或 PowerShell 使用一行命令，不要混用 macOS/Linux 的反斜杠换行：
+
+```bat
+npx -y --loglevel=error --registry https://registry.npmjs.org -p ai-worklens-agent@0.1.7 worklens-agent-install --server-url http://192.168.1.241:8797 --tool codex --employee-pinyin zhangpeng
+```
+
+macOS / Linux：
+
 ```bash
-NPM_CONFIG_UPDATE_NOTIFIER=false npx -y --loglevel=error -p ai-worklens-agent@0.1.5 worklens-agent-install \
+NPM_CONFIG_UPDATE_NOTIFIER=false npx -y --loglevel=error -p ai-worklens-agent@0.1.7 worklens-agent-install \
   --server-url http://192.168.1.241:8797 \
   --tool codex \
   --employee-pinyin zhangsan
 ```
 
+安装完成后请重新打开一个新的 Codex 会话。第一次触发 Hook 时，如果 Codex 提示信任或允许 Hook，请选择信任/允许；否则 `codex-hook.cmd` 手动验证可以成功，但真实 Codex 会话不会触发采集。
+
 发布到公共 npm 源需要 npm 账号 token。Scoped 包名需要账号拥有对应 scope。
 
 ```bash
@@ -60,7 +70,7 @@ NPM_TOKEN=<npm_token> npm run client:npm:publish -- \
 如果管理员在官网发布了直链安装包，可以下载安装包后执行包内安装脚本：
 
 ```bash
-curl -fL http://192.168.1.241:8797/site/downloads/ai-worklens-codex-0.1.5.sh \
+curl -fL http://192.168.1.241:8797/site/downloads/ai-worklens-codex-0.1.7.sh \
   -o ai-worklens-install.sh
 chmod +x ai-worklens-install.sh
 ./ai-worklens-install.sh zhangsan
@@ -83,6 +93,14 @@ npm run agent -- event \
 echo '{"event":"plugin_use","pluginName":"Spreadsheets","message":"整理报价清单"}' | npm run hook:codex
 ```
 
+Windows 命令提示符验证 Codex hook 是否真实可执行：
+
+```bat
+echo {"hook_event_name":"UserPromptSubmit","prompt":"worklens windows smoke","session_id":"manual-smoke"} | "%USERPROFILE%\.ai-worklens\codex-hook.cmd"
+```
+
+如果这条命令成功上报，但真实 Codex 会话仍没有数据，优先检查是否已经在 Codex 中信任/允许了 Hook，并确认使用的是安装后新打开的 Codex 会话。
+
 模拟 Claude Code 工具 hook 输入：
 
 ```bash
@@ -154,11 +172,11 @@ WORKLENS_QUEUE_FILE=/path/to/queue.json
 
 - `client.json`：中心端地址、员工身份、上传配置。
 - `install-manifest.json`：MCP server、Hook adapter、CLI event entrypoint。
-- `codex-mcp-snippet.toml` / `codex-hook.sh`：Codex 配置片段。
-- `claude-code-mcp.json` / `claude-code-hook.sh` / `claude-code-hooks-settings.json`：Claude Code 配置片段和官方 hooks events 覆盖。
-- `opencode-mcp.jsonc` / `opencode-hook.sh` / `opencode-ai-worklens-plugin.js`：OpenCode MCP 配置和本地插件事件覆盖。
-- `worklens-checkin.sh`：同步远程规则、补传离线队列并上报健康状态。
-- `worklens-auto-update.sh`：补传离线队列，拉取中心端静默更新策略，自动重写本地采集组件。
+- `codex-mcp-snippet.toml` / `codex-hook.sh` / `codex-hook.cmd`：Codex 配置片段。
+- `claude-code-mcp.json` / `claude-code-hook.sh` / `claude-code-hook.cmd` / `claude-code-hooks-settings.json`：Claude Code 配置片段和官方 hooks events 覆盖。
+- `opencode-mcp.jsonc` / `opencode-hook.sh` / `opencode-hook.cmd` / `opencode-ai-worklens-plugin.js`：OpenCode MCP 配置和本地插件事件覆盖。
+- `worklens-checkin.sh` / `worklens-checkin.cmd`：同步远程规则、补传离线队列并上报健康状态。
+- `worklens-auto-update.sh` / `worklens-auto-update.cmd`：补传离线队列，拉取中心端静默更新策略，自动重写本地采集组件。
 - `worklens-register-autoupdate.sh`：在 macOS 用户级 LaunchAgent 注册后台巡检任务。
 - `worklens-unregister-autoupdate.sh`：移除后台巡检任务。
 - `worklens-install-or-update.sh`：同步配置、静默更新、注册后台任务并自检。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-worklens-agent",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Employee-side collector agent for AI WorkLens.",
   "type": "module",
   "bin": {
@@ -18,5 +18,10 @@
     "claude-code",
     "opencode"
   ],
-  "license": "UNLICENSED"
+  "license": "UNLICENSED",
+  "private": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  }
 }

package/src/config.mjs

@@ -121,6 +121,14 @@ export function defaultQueueFile(configFile = defaultConfigFile()) {
   return envValue(process.env, "WORKLENS_QUEUE_FILE") || path.join(path.dirname(configFile), "queue.json");
 }
 
+export function defaultStateFile(configFile = defaultConfigFile()) {
+  return envValue(process.env, "WORKLENS_STATE_FILE") || path.join(path.dirname(configFile), "state.json");
+}
+
+export function defaultLogDir(configFile = defaultConfigFile()) {
+  return envValue(process.env, "WORKLENS_LOG_DIR") || path.join(path.dirname(configFile), "logs");
+}
+
 export function loadClientConfig(options = {}) {
   const configFile = options.configFile || defaultConfigFile();
   const fileConfig = readJson(configFile);
@@ -150,6 +158,8 @@ export function loadClientConfig(options = {}) {
     configFile,
     homeDir,
     queueFile: options.queueFile || defaultQueueFile(configFile),
+    stateFile: options.stateFile || defaultStateFile(configFile),
+    logDir: options.logDir || defaultLogDir(configFile),
     serverUrl,
     collectorToken: options.collectorToken || envValue(env, "WORKLENS_COLLECTOR_TOKEN") || fileConfig.collectorToken || "",
     clientId: options.clientId || envValue(env, "WORKLENS_CLIENT_ID") || fileConfig.clientId || defaultClientId(),

package/src/hook-adapter.mjs

@@ -2,6 +2,8 @@
 import { loadClientConfig } from "./config.mjs";
 import { buildEvent } from "./event-builder.mjs";
 import { ClientAgent } from "./uploader.mjs";
+import { appendRuntimeLog, eventLogEntry, updateRuntimeState } from "./runtime-state.mjs";
+import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 
@@ -152,6 +154,10 @@ function modeFromPayload(payload) {
   );
 }
 
+function sessionIdFromPayload(payload) {
+  return firstText(payload.sessionId, payload.session_id, payload.localSessionId, payload.conversationId, payload.conversation_id);
+}
+
 function skillNameFromPayload(payload) {
   return firstText(
     payload.skillName,
@@ -341,7 +347,51 @@ function fileRefsFromPayload(payload) {
     payload.toolInput?.filePath;
 }
 
-function pickSummary(payload, name, eventType) {
+function compactSummaryText(value, options = {}) {
+  const text = String(value || "").replace(/\s+/g, " ").trim();
+  if (!text) return "";
+  if (options.allowRaw) return text;
+  const longPatch = /\*\*\*\s+Begin Patch|\bdiff --git\b|(?:^|\s)@@\s|^\s*[+-]{3}\s/m.test(String(value || ""));
+  if (longPatch && text.length > 240) {
+    return "围绕代码补丁或文件修改进行协作，包含较长 diff/patch 内容，已在采集端摘要化。";
+  }
+  const longCommand = options.kind && ["command", "verification", "tool_call", "tool_result"].includes(options.kind);
+  if (longCommand && text.length > 420) {
+    return `${text.slice(0, 220)} ...（较长工具输入已摘要）`;
+  }
+  if (text.length <= 420) return text;
+  return `${text.slice(0, 260)} ... ${text.slice(-100)}`;
+}
+
+function allowRawContent(config, eventType) {
+  if (eventType === "user_prompt") return config.collection?.storeRawPrompts === true;
+  if (eventType === "assistant_response") return config.collection?.storeFullReplies === true;
+  return false;
+}
+
+function isDiagnosticPayload(payload, args, name) {
+  const sessionId = sessionIdFromPayload(payload);
+  const text = [
+    payload.prompt,
+    payload.message,
+    payload.summary,
+    payload.content,
+    payload.title,
+    payload.input?.prompt,
+    payload.input?.message
+  ].map((item) => String(item || "")).join(" ");
+  return Boolean(
+    args.diagnostic === true ||
+    args.diagnostic === "true" ||
+    payload.diagnostic === true ||
+    payload.metadata?.diagnostic === true ||
+    /^smoke-|^hook-smoke$|^manual-smoke$/i.test(sessionId) ||
+    /worklens\s+(?:windows\s+)?smoke|hook\s+smoke|ai-worklens\s+smoke/i.test(text) ||
+    /hook-smoke/i.test(name)
+  );
+}
+
+function pickSummary(payload, name, eventType, config) {
   if (eventType === "mode_change") {
     const previousMode = previousModeFromPayload(payload);
     const nextMode = nextModeFromPayload(payload);
@@ -390,18 +440,22 @@ function pickSummary(payload, name, eventType) {
     payload.error ||
     payload.status ||
     `hook:${name}`;
-  return { title, content };
+  return {
+    title: compactSummaryText(title, { allowRaw: true }),
+    content: compactSummaryText(content, { allowRaw: allowRawContent(config, eventType), kind: eventType })
+  };
 }
 
 export function normalizeHookPayload(payload, args, config) {
   const name = hookName(payload, args);
   const eventType = eventTypeFromHook(name, payload);
-  const summary = pickSummary(payload, name, eventType);
+  const summary = pickSummary(payload, name, eventType, config);
   const metadata = payload.metadata && typeof payload.metadata === "object" ? payload.metadata : {};
   const skillName = skillNameFromPayload(payload);
   const pluginName = pluginNameFromPayload(payload);
   const mcpServer = mcpServerFromPayload(payload);
   const toolName = toolNameFromPayload(payload);
+  const diagnostic = isDiagnosticPayload(payload, args, name);
   return buildEvent({
     ...payload,
     eventType,
@@ -409,7 +463,7 @@ export function normalizeHookPayload(payload, args, config) {
     title: summary.title,
     content: summary.content,
     hookName: name,
-    localSessionId: payload.sessionId || payload.session_id || payload.localSessionId,
+    localSessionId: sessionIdFromPayload(payload),
     turnIndex: payload.turnIndex || payload.turn_index,
     skillName,
     pluginName,
@@ -435,7 +489,8 @@ export function normalizeHookPayload(payload, args, config) {
       permissionDecision: permissionDecisionFromPayload(payload),
       exitCode: payload.exitCode ?? payload.exit_code,
       success: payload.success,
-      status: statusFromPayload(payload)
+      status: statusFromPayload(payload),
+      diagnostic
     },
     process: {
       interactionType: eventType,
@@ -453,6 +508,108 @@ export function normalizeHookPayload(payload, args, config) {
   }, config);
 }
 
+function textFromContent(value, depth = 0) {
+  if (depth > 5 || value === undefined || value === null) return "";
+  if (typeof value === "string") return value;
+  if (typeof value === "number" || typeof value === "boolean") return String(value);
+  if (Array.isArray(value)) return value.map((item) => textFromContent(item, depth + 1)).filter(Boolean).join(" ");
+  if (typeof value === "object") {
+    if (typeof value.text === "string") return value.text;
+    if (typeof value.content === "string") return value.content;
+    if (Array.isArray(value.content)) return textFromContent(value.content, depth + 1);
+    if (typeof value.message === "string") return value.message;
+    if (value.message && typeof value.message === "object") return textFromContent(value.message, depth + 1);
+    if (typeof value.summary === "string") return value.summary;
+  }
+  return "";
+}
+
+function transcriptAssistantSummary(filePath) {
+  if (!filePath) return null;
+  try {
+    if (!fs.existsSync(filePath)) return null;
+    const stats = fs.statSync(filePath);
+    const maxBytes = 1_000_000;
+    const raw = fs.readFileSync(filePath, "utf8");
+    const content = stats.size > maxBytes ? raw.slice(-maxBytes) : raw;
+    let lastAssistantText = "";
+    let turnIndex = 0;
+    for (const line of content.split(/\r?\n/)) {
+      if (!line.trim()) continue;
+      let item = null;
+      try {
+        item = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      const message = item.message && typeof item.message === "object" ? item.message : item;
+      const role = String(message.role || item.role || item.type || "").toLowerCase();
+      const text = textFromContent(message.content || message.text || message.summary || message);
+      if (!text) continue;
+      if (role.includes("user")) turnIndex += 1;
+      if (role.includes("assistant")) lastAssistantText = text;
+    }
+    if (!lastAssistantText) return null;
+    return { text: lastAssistantText, turnIndex };
+  } catch {
+    return null;
+  }
+}
+
+function assistantSummaryFromPayload(payload) {
+  const direct = firstText(
+    payload.assistantSummary,
+    payload.assistant_summary,
+    payload.assistantResponse,
+    payload.assistant_response,
+    payload.responseSummary,
+    payload.response_summary,
+    payload.outputSummary,
+    payload.output_summary,
+    payload.output?.summary,
+    payload.output?.responseSummary,
+    payload.result?.summary
+  );
+  if (direct) return { text: direct, turnIndex: Number(payload.turnIndex || payload.turn_index || 0) };
+  return transcriptAssistantSummary(payload.transcript_path || payload.transcriptPath);
+}
+
+function assistantEventFromHook(payload, args, config, baseEvent) {
+  const name = hookName(payload, args);
+  if (baseEvent.eventType === "assistant_response") return null;
+  if (baseEvent.eventType !== "session_end") return null;
+  const summary = assistantSummaryFromPayload(payload);
+  if (!summary?.text) return null;
+  const diagnostic = Boolean(baseEvent.metadata?.diagnostic);
+  return buildEvent({
+    eventType: "assistant_response",
+    source: payload.source || `${config.tool}_hook`,
+    title: "AI 回复摘要",
+    content: compactSummaryText(summary.text, { allowRaw: allowRawContent(config, "assistant_response"), kind: "assistant_response" }),
+    localSessionId: sessionIdFromPayload(payload) || baseEvent.session?.localSessionId,
+    turnIndex: summary.turnIndex || payload.turnIndex || payload.turn_index,
+    durationSeconds: payload.assistantDurationSeconds || payload.assistant_duration_seconds || 0,
+    metadata: {
+      hookAdapter: "ai-worklens",
+      sourceTool: config.tool,
+      rawHookEvent: name,
+      hookEventName: payload.hook_event_name || payload.hookEventName || payload.event || payload.type || name,
+      derivedFrom: payload.transcript_path || payload.transcriptPath ? "transcript" : "hook_payload",
+      transcriptPath: payload.transcript_path || payload.transcriptPath,
+      diagnostic
+    },
+    process: {
+      interactionType: "assistant_response"
+    }
+  }, config);
+}
+
+export function normalizeHookEvents(payload, args, config) {
+  const baseEvent = normalizeHookPayload(payload, args, config);
+  const assistantEvent = assistantEventFromHook(payload, args, config, baseEvent);
+  return assistantEvent ? [baseEvent, assistantEvent] : [baseEvent];
+}
+
 async function main() {
   const args = parseArgs(process.argv.slice(2));
   const payload = await readStdin();
@@ -475,10 +632,32 @@ async function main() {
     workspaceRoot: args.workspace,
     branch: args.branch
   });
-  const event = normalizeHookPayload(payload, args, config);
+  const events = normalizeHookEvents(payload, args, config);
   const agent = new ClientAgent(config);
-  const result = await agent.record(event);
-  process.stdout.write(`${JSON.stringify({ ok: true, hook: event.metadata.rawHookEvent, eventType: event.eventType, eventId: event.eventId, result })}\n`);
+  const results = [];
+  for (const event of events) {
+    appendRuntimeLog(config, "hook", {
+      action: "received",
+      rawHookEvent: event.metadata.rawHookEvent,
+      ...eventLogEntry(event)
+    });
+    updateRuntimeState(config, {
+      lastHookAt: event.occurredAt,
+      lastHookEventType: event.eventType,
+      lastHookEventId: event.eventId,
+      lastHookRawEvent: event.metadata.rawHookEvent || "",
+      lastHookDiagnostic: Boolean(event.metadata.diagnostic)
+    });
+    results.push({ eventId: event.eventId, eventType: event.eventType, result: await agent.record(event) });
+  }
+  process.stdout.write(`${JSON.stringify({
+    ok: true,
+    hook: events[0]?.metadata.rawHookEvent,
+    eventType: events[0]?.eventType,
+    eventId: events[0]?.eventId,
+    eventIds: events.map((event) => event.eventId),
+    events: results
+  })}\n`);
 }
 
 if (fileURLToPath(import.meta.url) === path.resolve(process.argv[1] || "")) {

package/src/install.mjs

@@ -38,6 +38,7 @@ function readPackageVersion() {
 
 export function buildInstallManifest(targetDir, options = {}) {
   const node = process.execPath;
+  const platform = normalizePlatform(options.platform);
   const selectedTool = normalizeToolId(options.tool || "codex");
   const profile = getToolProfile(selectedTool);
   const serverUrl = options.serverUrl || "http://127.0.0.1:8797";
@@ -50,6 +51,7 @@ export function buildInstallManifest(targetDir, options = {}) {
   const artifacts = buildToolArtifacts({
     targetDir,
     displayTargetDir,
+    platform,
     selectedTool,
     configFile,
     serverUrl,
@@ -61,6 +63,7 @@ export function buildInstallManifest(targetDir, options = {}) {
   const selectedArtifact = artifacts[selectedTool];
   return {
     version: 1,
+    platform,
     targetDir: displayTargetDir,
     selectedTool,
     supportedTools: listToolProfiles(),
@@ -93,6 +96,9 @@ export function buildInstallManifest(targetDir, options = {}) {
       autoUpdateScript: path.join(targetDir, "worklens-auto-update.sh"),
       registerAutoUpdateScript: path.join(targetDir, "worklens-register-autoupdate.sh"),
       unregisterAutoUpdateScript: path.join(targetDir, "worklens-unregister-autoupdate.sh"),
+      windowsCheckinScript: path.join(targetDir, "worklens-checkin.cmd"),
+      windowsSelfCheckScript: path.join(targetDir, "worklens-self-check.cmd"),
+      windowsAutoUpdateScript: path.join(targetDir, "worklens-auto-update.cmd"),
       windowsRegisterAutoUpdateScript: path.join(targetDir, "worklens-register-autoupdate.ps1"),
       installOrUpdateScript: path.join(targetDir, "worklens-install-or-update.sh"),
       readme: path.join(targetDir, "README.md")
@@ -112,6 +118,7 @@ export function buildInstallManifest(targetDir, options = {}) {
 }
 
 export function installClient(options = {}) {
+  const platform = normalizePlatform(options.platform);
   const targetDir = options.targetDir || path.join(os.homedir(), ".ai-worklens");
   const homeDir = options.homeDir || os.homedir();
   fs.mkdirSync(targetDir, { recursive: true, mode: 0o700 });
@@ -123,6 +130,9 @@ export function installClient(options = {}) {
   const autoUpdateScriptFile = path.join(targetDir, "worklens-auto-update.sh");
   const registerAutoUpdateScriptFile = path.join(targetDir, "worklens-register-autoupdate.sh");
   const unregisterAutoUpdateScriptFile = path.join(targetDir, "worklens-unregister-autoupdate.sh");
+  const windowsCheckinScriptFile = path.join(targetDir, "worklens-checkin.cmd");
+  const windowsSelfCheckScriptFile = path.join(targetDir, "worklens-self-check.cmd");
+  const windowsAutoUpdateScriptFile = path.join(targetDir, "worklens-auto-update.cmd");
   const windowsRegisterAutoUpdateScriptFile = path.join(targetDir, "worklens-register-autoupdate.ps1");
   const installOrUpdateScriptFile = path.join(targetDir, "worklens-install-or-update.sh");
   const readmeFile = path.join(targetDir, "README.md");
@@ -162,13 +172,13 @@ export function installClient(options = {}) {
     collection: options.collection || {},
     update: updatePolicy
   });
-  const manifest = buildInstallManifest(targetDir, options);
+  const manifest = buildInstallManifest(targetDir, { ...options, platform });
   fs.writeFileSync(manifestFile, `${JSON.stringify(manifest, null, 2)}\n`, { mode: 0o600 });
   fs.chmodSync(manifestFile, 0o600);
   for (const artifact of Object.values(manifest.toolArtifacts)) {
     fs.writeFileSync(artifact.configFile, `${artifact.config}\n`, { mode: 0o600 });
     fs.chmodSync(artifact.configFile, 0o600);
-    fs.writeFileSync(artifact.hookFile, buildHookScript(artifact.hook.command, artifact.hook.args), { mode: 0o700 });
+    fs.writeFileSync(artifact.hookFile, buildHookScript(artifact.hook.command, artifact.hook.args, platform), { mode: 0o700 });
     fs.chmodSync(artifact.hookFile, 0o700);
     for (const file of Object.values(artifact.extraFiles || {})) {
       fs.writeFileSync(file.file, `${file.content}\n`, { mode: file.mode || 0o600 });
@@ -182,6 +192,12 @@ export function installClient(options = {}) {
   fs.chmodSync(selfCheckScriptFile, 0o700);
   fs.writeFileSync(autoUpdateScriptFile, buildAutoUpdateScript(manifest.eventCli.command, manifest.eventCli.args), { mode: 0o700 });
   fs.chmodSync(autoUpdateScriptFile, 0o700);
+  fs.writeFileSync(windowsCheckinScriptFile, buildWindowsCheckinScript(manifest.eventCli.command, manifest.eventCli.args), { mode: 0o600 });
+  fs.chmodSync(windowsCheckinScriptFile, 0o600);
+  fs.writeFileSync(windowsSelfCheckScriptFile, buildWindowsSelfCheckScript(manifest.eventCli.command, manifest.eventCli.args), { mode: 0o600 });
+  fs.chmodSync(windowsSelfCheckScriptFile, 0o600);
+  fs.writeFileSync(windowsAutoUpdateScriptFile, buildWindowsAutoUpdateScript(manifest.eventCli.command, manifest.eventCli.args), { mode: 0o600 });
+  fs.chmodSync(windowsAutoUpdateScriptFile, 0o600);
   fs.writeFileSync(registerAutoUpdateScriptFile, buildRegisterAutoUpdateScript(targetDir), { mode: 0o700 });
   fs.chmodSync(registerAutoUpdateScriptFile, 0o700);
   fs.writeFileSync(unregisterAutoUpdateScriptFile, buildUnregisterAutoUpdateScript(), { mode: 0o700 });
@@ -234,13 +250,26 @@ function upperFirst(value) {
   return input ? `${input[0].toUpperCase()}${input.slice(1)}` : input;
 }
 
-function buildToolArtifacts({ targetDir, displayTargetDir, configFile, serverUrl, mcpCommand, mcpArgs }) {
+function normalizePlatform(value = process.platform) {
+  return String(value || process.platform).toLowerCase() === "win32" ? "win32" : "posix";
+}
+
+function isWindowsPlatform(platform = process.platform) {
+  return normalizePlatform(platform) === "win32";
+}
+
+function hookFileNameFor(profile, platform = process.platform) {
+  if (!isWindowsPlatform(platform)) return profile.hookFileName;
+  return profile.hookFileName.replace(/\.sh$/i, ".cmd");
+}
+
+function buildToolArtifacts({ targetDir, displayTargetDir, platform, configFile, serverUrl, mcpCommand, mcpArgs }) {
   return Object.fromEntries(listToolProfiles().map((profile) => {
     const hookArgs = [path.join(agentSrcDir, "hook-adapter.mjs"), "--config", configFile, "--tool", profile.id];
     const artifact = {
       profile,
       configFile: path.join(targetDir, profile.configFileName),
-      hookFile: path.join(targetDir, profile.hookFileName),
+      hookFile: path.join(targetDir, hookFileNameFor(profile, platform)),
       hook: {
         name: profile.hookName,
         command: mcpCommand,
@@ -263,6 +292,7 @@ function buildToolArtifacts({ targetDir, displayTargetDir, configFile, serverUrl
       }),
       extraFiles: extraFilesFor(profile, {
         targetDir,
+        platform,
         configFile,
         mcpCommand,
         mcpArgs,
@@ -315,12 +345,12 @@ function toolConfigFor(profile, { configFile, serverUrl, mcpCommand, mcpArgs, ho
   return JSON.stringify({ command: mcpCommand, args: mcpArgs, env: { WORKLENS_CONFIG_FILE: configFile, WORKLENS_TOOL: profile.id, WORKLENS_SERVER_URL: serverUrl } }, null, 2);
 }
 
-function extraFilesFor(profile, { targetDir, hookCommand, hookArgs }) {
+function extraFilesFor(profile, { targetDir, platform, hookCommand, hookArgs }) {
   if (profile.id === "claude-code") {
     return {
       hooksSettings: {
         file: path.join(targetDir, "claude-code-hooks-settings.json"),
-        content: buildClaudeHooksSettings(hookCommand, hookArgs)
+        content: buildClaudeHooksSettings(hookCommand, hookArgs, platform)
       }
     };
   }
@@ -336,7 +366,7 @@ function extraFilesFor(profile, { targetDir, hookCommand, hookArgs }) {
   return {};
 }
 
-function buildClaudeHooksSettings(command, baseArgs) {
+function buildClaudeHooksSettings(command, baseArgs, platform = process.platform) {
   const events = [
     "SessionStart",
     "ModeChange",
@@ -368,7 +398,7 @@ function buildClaudeHooksSettings(command, baseArgs) {
       hooks: [
         {
           type: "command",
-          command: commandLine(command, [...baseArgs, "--event", eventName]),
+          command: commandLine(command, [...baseArgs, "--event", eventName], platform),
           timeout: 10
         }
       ]
@@ -412,6 +442,7 @@ function selectedIntegrationTools(value, manifest) {
 
 function installCodexIntegration(manifest, homeDir) {
   const artifact = manifest.toolArtifacts.codex;
+  const platform = normalizePlatform(manifest.platform);
   const configPath = path.join(homeDir, ".codex", "config.toml");
   const hooksPath = path.join(homeDir, ".codex", "hooks.json");
   const config = readTextConfig(configPath);
@@ -423,7 +454,7 @@ function installCodexIntegration(manifest, homeDir) {
 
   const hooks = readJsonConfig(hooksPath, { hooks: {} });
   hooks.hooks = hooks.hooks && typeof hooks.hooks === "object" ? hooks.hooks : {};
-  const command = shellQuote(artifact.hookFile);
+  const command = isWindowsPlatform(platform) ? windowsCommandFileInvocation(artifact.hookFile) : shellQuote(artifact.hookFile);
   for (const eventName of ["SessionStart", "PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"]) {
     const entry = {
       hooks: [{ type: "command", command, ...(eventName === "Stop" ? { timeout: 30 } : {}) }]
@@ -492,7 +523,7 @@ function hookEntryContainsWorkLens(entry = {}) {
 }
 
 function workLensHookCommandPattern() {
-  return /(?:ai[-_]?worklens|worklens|silent-ai-observatory|hook-adapter\.mjs|codex-hook\.sh|claude-code-hook\.sh|opencode-hook\.sh)/i;
+  return /(?:ai[-_]?worklens|worklens|silent-ai-observatory|hook-adapter\.mjs|codex-hook\.(?:sh|cmd)|claude-code-hook\.(?:sh|cmd)|opencode-hook\.(?:sh|cmd))/i;
 }
 
 function ensureHookEntry(current, entry) {
@@ -502,8 +533,8 @@ function ensureHookEntry(current, entry) {
   return [...list, entry];
 }
 
-function commandLine(command, args) {
-  return [command, ...args].map(shellQuote).join(" ");
+function commandLine(command, args, platform = process.platform) {
+  return [command, ...args].map((item) => quoteForShell(item, platform)).join(" ");
 }
 
 function readTextConfig(filePath) {
@@ -695,7 +726,20 @@ function shellQuote(value) {
   return `'${String(value).replaceAll("'", "'\\''")}'`;
 }
 
-function buildHookScript(command, args) {
+function windowsQuote(value) {
+  return `"${String(value).replaceAll('"', '""')}"`;
+}
+
+function quoteForShell(value, platform = process.platform) {
+  return isWindowsPlatform(platform) ? windowsQuote(value) : shellQuote(value);
+}
+
+function windowsCommandFileInvocation(filePath) {
+  return `cmd.exe /d /s /c ${windowsQuote(filePath)}`;
+}
+
+function buildHookScript(command, args, platform = process.platform) {
+  if (isWindowsPlatform(platform)) return buildWindowsHookScript(command, args);
   return [
     "#!/usr/bin/env sh",
     "set -eu",
@@ -703,6 +747,14 @@ function buildHookScript(command, args) {
   ].join("\n") + "\n";
 }
 
+function buildWindowsHookScript(command, args) {
+  return [
+    "@echo off",
+    "setlocal",
+    commandLine(command, args, "win32")
+  ].join("\r\n") + "\r\n";
+}
+
 function buildCheckinScript(command, args) {
   return [
     "#!/usr/bin/env sh",
@@ -713,6 +765,17 @@ function buildCheckinScript(command, args) {
   ].join("\n") + "\n";
 }
 
+function buildWindowsCheckinScript(command, args) {
+  const base = commandLine(command, args, "win32");
+  return [
+    "@echo off",
+    "setlocal",
+    `${base} sync-config`,
+    `${base} recover --sync false --checkin false`,
+    `${base} checkin`
+  ].join("\r\n") + "\r\n";
+}
+
 function buildSelfCheckScript(command, args) {
   return [
     "#!/usr/bin/env sh",
@@ -721,6 +784,14 @@ function buildSelfCheckScript(command, args) {
   ].join("\n") + "\n";
 }
 
+function buildWindowsSelfCheckScript(command, args) {
+  return [
+    "@echo off",
+    "setlocal",
+    `${commandLine(command, args, "win32")} doctor`
+  ].join("\r\n") + "\r\n";
+}
+
 function buildAutoUpdateScript(command, args) {
   return [
     "#!/usr/bin/env sh",
@@ -730,6 +801,16 @@ function buildAutoUpdateScript(command, args) {
   ].join("\n") + "\n";
 }
 
+function buildWindowsAutoUpdateScript(command, args) {
+  const base = commandLine(command, args, "win32");
+  return [
+    "@echo off",
+    "setlocal",
+    `${base} recover --checkin false`,
+    `${base} auto-update`
+  ].join("\r\n") + "\r\n";
+}
+
 function buildRegisterAutoUpdateScript(targetDir) {
   const plist = "com.ai-worklens.autoupdate.plist";
   const interval = 1800;
@@ -793,11 +874,11 @@ function buildUnregisterAutoUpdateScript() {
 }
 
 function buildWindowsRegisterAutoUpdateScript(targetDir) {
-  const autoUpdate = path.win32.join("%USERPROFILE%", ".ai-worklens", "worklens-auto-update.sh");
+  const autoUpdate = path.win32.join("%USERPROFILE%", ".ai-worklens", "worklens-auto-update.cmd");
   return [
     "$TaskName = \"AIWorkLensAutoUpdate\"",
     `$AutoUpdate = \"${autoUpdate}\"`,
-    "$Action = New-ScheduledTaskAction -Execute \"wsl.exe\" -Argument \"sh $AutoUpdate\"",
+    "$Action = New-ScheduledTaskAction -Execute \"cmd.exe\" -Argument \"/d /s /c `\"$AutoUpdate`\"\"",
     "$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date).AddMinutes(5) -RepetitionInterval (New-TimeSpan -Hours 6)",
     "$Settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries",
     "Register-ScheduledTask -TaskName $TaskName -Action $Action -Trigger $Trigger -Settings $Settings -Force",
@@ -841,12 +922,12 @@ function buildReadme(manifest) {
     `- client.json: 员工端配置和中心端下发规则。`,
     `- install-manifest.json: 安装清单。`,
     `- *-mcp.*: 各 AI 工具的 MCP 配置片段。`,
-    `- *-hook.sh: 各 AI 工具的 hook adapter 启动脚本。`,
+    `- *-hook.sh / *-hook.cmd: 各 AI 工具的 hook adapter 启动脚本。`,
     `- claude-code-hooks-settings.json: Claude Code hooks 配置片段。`,
     `- opencode-ai-worklens-plugin.js: OpenCode 本地插件。`,
-    `- worklens-checkin.sh: 同步规则、补传离线队列并上报健康状态。`,
-    `- worklens-self-check.sh: 检查中心端连通性、本地配置和离线队列。`,
-    `- worklens-auto-update.sh: 拉取中心端版本策略，并在中心端恢复后自动补传离线队列。`,
+    `- worklens-checkin.sh / worklens-checkin.cmd: 同步规则、补传离线队列并上报健康状态。`,
+    `- worklens-self-check.sh / worklens-self-check.cmd: 检查中心端连通性、本地配置和离线队列。`,
+    `- worklens-auto-update.sh / worklens-auto-update.cmd: 拉取中心端版本策略，并在中心端恢复后自动补传离线队列。`,
     `- worklens-register-autoupdate.sh: 在 macOS 用户级 LaunchAgent 注册后台静默更新和恢复上报任务。`,
     `- worklens-unregister-autoupdate.sh: 移除后台静默更新任务。`,
     `- worklens-install-or-update.sh: 同步中心端规则、上报健康并执行自检。`,
@@ -860,13 +941,26 @@ function buildReadme(manifest) {
 
 function runPostInstall(result, args = {}) {
   if (args["post-install"] === "false") return { ok: true, skipped: true };
-  const checkin = spawnSync(result.generatedFiles.checkinScript, [], {
+  const platform = normalizePlatform(result.manifest?.platform || process.platform);
+  const timeout = Number(args["post-install-timeout-ms"] || 15000);
+  const checkinScript = isWindowsPlatform(platform)
+    ? result.generatedFiles.windowsCheckinScript
+    : result.generatedFiles.checkinScript;
+  const checkinCommand = isWindowsPlatform(platform) ? "cmd.exe" : checkinScript;
+  const checkinArgs = isWindowsPlatform(platform) ? ["/d", "/s", "/c", checkinScript] : [];
+  const registerCommand = isWindowsPlatform(platform)
+    ? "powershell.exe"
+    : result.generatedFiles.registerAutoUpdateScript;
+  const registerArgs = isWindowsPlatform(platform)
+    ? ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", result.generatedFiles.windowsRegisterAutoUpdateScript]
+    : [];
+  const checkin = spawnSync(checkinCommand, checkinArgs, {
     encoding: "utf8",
-    timeout: Number(args["post-install-timeout-ms"] || 15000)
+    timeout
   });
-  const register = spawnSync(result.generatedFiles.registerAutoUpdateScript, [], {
+  const register = spawnSync(registerCommand, registerArgs, {
     encoding: "utf8",
-    timeout: Number(args["post-install-timeout-ms"] || 15000)
+    timeout
   });
   return {
     ok: checkin.status === 0,

package/src/protocol/client-update-policy.mjs

@@ -1,4 +1,4 @@
-export const CLIENT_AGENT_VERSION = "0.1.5";
+export const CLIENT_AGENT_VERSION = "0.1.7";
 
 export const DEFAULT_CLIENT_UPDATE_POLICY = {
   enabled: true,

package/src/publish-npm.mjs

@@ -31,7 +31,7 @@ export function parseArgs(argv = []) {
   }
   options.packageName = options.packageName || process.env.WORKLENS_NPM_PACKAGE_NAME || "";
   options.version = options.version || process.env.WORKLENS_NPM_VERSION || "";
-  options.token = options.token || process.env.NPM_TOKEN || "";
+  options.token = options.token || process.env.NPM_TOKEN || process.env.WORKLENS_NPM_TOKEN || "";
   return options;
 }
 
@@ -40,11 +40,12 @@ export function usage() {
     "Usage:",
     "  npm run client:npm:publish -- --package-name <npm-package> --version <version> --tag latest --dry-run",
     "  NPM_TOKEN=<token> npm run client:npm:publish -- --package-name <npm-package> --version <version> --tag latest",
+    "  WORKLENS_NPM_TOKEN=<token> npm run client:npm:publish -- --package-name <npm-package> --version <version> --tag latest",
     "",
     "Notes:",
     "  - Public npm scoped packages require --access public.",
     "  - For @scope/name, the npm account token must have permission for that scope.",
-    "  - Token can be passed through NPM_TOKEN or --token; it is written only to a temporary .npmrc and deleted after publish."
+    "  - Token can be passed through NPM_TOKEN, WORKLENS_NPM_TOKEN or --token; it is written only to a temporary .npmrc and deleted after publish."
   ].join("\n");
 }
 
@@ -127,7 +128,7 @@ export function normalizeNpmPublishTag(value = "latest") {
 
 export function publishToNpm(options = {}) {
   if (!options.dryRun && !options.token) {
-    throw new Error("NPM_TOKEN is required for real public npm publish; use --dry-run to preview without token");
+    throw new Error("NPM_TOKEN or WORKLENS_NPM_TOKEN is required for real public npm publish; use --dry-run to preview without token");
   }
   let prepared = null;
   try {

package/src/runtime-state.mjs

@@ -0,0 +1,79 @@
+import fs from "node:fs";
+import path from "node:path";
+
+function baseDir(config = {}) {
+  return path.dirname(config.configFile || config.queueFile || path.join(process.cwd(), "client.json"));
+}
+
+export function runtimeStateFile(config = {}) {
+  return config.stateFile || path.join(baseDir(config), "state.json");
+}
+
+export function runtimeLogDir(config = {}) {
+  return config.logDir || path.join(baseDir(config), "logs");
+}
+
+function readJson(filePath, fallback) {
+  try {
+    if (!fs.existsSync(filePath)) return fallback;
+    return JSON.parse(fs.readFileSync(filePath, "utf8"));
+  } catch {
+    return fallback;
+  }
+}
+
+function writeJsonAtomic(filePath, value) {
+  fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
+  const tempPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.${process.pid}.${Date.now()}.tmp`);
+  fs.writeFileSync(tempPath, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
+  fs.renameSync(tempPath, filePath);
+  fs.chmodSync(filePath, 0o600);
+}
+
+export function readRuntimeState(config = {}) {
+  return readJson(runtimeStateFile(config), {});
+}
+
+export function updateRuntimeState(config = {}, patch = {}) {
+  try {
+    const filePath = runtimeStateFile(config);
+    const current = readJson(filePath, {});
+    const next = {
+      ...current,
+      ...patch,
+      updatedAt: new Date().toISOString()
+    };
+    writeJsonAtomic(filePath, next);
+    return next;
+  } catch {
+    return null;
+  }
+}
+
+export function appendRuntimeLog(config = {}, name, entry = {}) {
+  try {
+    const directory = runtimeLogDir(config);
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const filePath = path.join(directory, `${name}.log`);
+    const line = {
+      at: new Date().toISOString(),
+      ...entry
+    };
+    fs.appendFileSync(filePath, `${JSON.stringify(line)}\n`, { mode: 0o600 });
+    fs.chmodSync(filePath, 0o600);
+    return filePath;
+  } catch {
+    return "";
+  }
+}
+
+export function eventLogEntry(event = {}) {
+  return {
+    eventId: event.eventId,
+    eventType: event.eventType,
+    source: event.source,
+    sessionId: event.session?.localSessionId || "",
+    turnIndex: event.session?.turnIndex || 0,
+    diagnostic: Boolean(event.metadata?.diagnostic)
+  };
+}

package/src/uploader.mjs

@@ -5,6 +5,7 @@ import { writeClientConfig } from "./config.mjs";
 import { normalizeCollectionSettings } from "./protocol/collection-settings.mjs";
 import { normalizeClientUpdatePolicy, updateNeeded } from "./protocol/client-update-policy.mjs";
 import { installClient } from "./install.mjs";
+import { appendRuntimeLog, eventLogEntry, readRuntimeState, updateRuntimeState } from "./runtime-state.mjs";
 
 async function requestJson(url, config, options = {}) {
   const controller = new AbortController();
@@ -69,7 +70,30 @@ export class ClientAgent {
 
   async record(event) {
     const length = await this.queue.enqueue(event);
+    appendRuntimeLog(this.config, "events", {
+      action: "enqueue",
+      queueSize: length,
+      ...eventLogEntry(event)
+    });
+    updateRuntimeState(this.config, {
+      lastEventAt: event.occurredAt,
+      lastEventId: event.eventId,
+      lastEventType: event.eventType,
+      lastQueueSize: length
+    });
     if (this.config.collection?.enabled === false) {
+      appendRuntimeLog(this.config, "upload", {
+        action: "skip",
+        reason: "collection_disabled",
+        queueSize: length,
+        ...eventLogEntry(event)
+      });
+      updateRuntimeState(this.config, {
+        lastUploadStatus: "skipped",
+        lastUploadError: "collection_disabled",
+        lastUploadRemaining: length,
+        lastQueueSize: length
+      });
       return {
         ok: true,
         queued: length,
@@ -108,6 +132,22 @@ export class ClientAgent {
         await this.queue.markFailed(failedItems.map((item) => item.id), "partial_upload_not_accepted");
       }
       const stats = await this.queue.stats();
+      appendRuntimeLog(this.config, "upload", {
+        action: "flush",
+        ok: failedItems.length === 0,
+        sent: accepted,
+        remaining: stats.total,
+        postponed: stats.waiting,
+        partial: failedItems.length > 0
+      });
+      updateRuntimeState(this.config, {
+        lastUploadAt: new Date().toISOString(),
+        lastUploadStatus: failedItems.length === 0 ? "ok" : "partial",
+        lastUploadError: failedItems.length ? "partial_upload_not_accepted" : "",
+        lastUploadSent: accepted,
+        lastUploadRemaining: stats.total,
+        lastQueueSize: stats.total
+      });
       return {
         ok: failedItems.length === 0,
         sent: accepted,
@@ -120,6 +160,22 @@ export class ClientAgent {
     } catch (error) {
       await this.queue.markFailed(batch.map((item) => item.id), error);
       const stats = await this.queue.stats();
+      appendRuntimeLog(this.config, "upload", {
+        action: "flush",
+        ok: false,
+        sent: 0,
+        remaining: stats.total,
+        postponed: stats.waiting,
+        error: error.message
+      });
+      updateRuntimeState(this.config, {
+        lastUploadAt: new Date().toISOString(),
+        lastUploadStatus: "failed",
+        lastUploadError: error.message,
+        lastUploadSent: 0,
+        lastUploadRemaining: stats.total,
+        lastQueueSize: stats.total
+      });
       return {
         ok: false,
         sent: 0,
@@ -180,6 +236,7 @@ export class ClientAgent {
 
   async checkin(overrides = {}) {
     const queueItems = await this.queue.list();
+    const runtime = readRuntimeState(this.config);
     return postJson("/api/clients/checkin", {
       employeeId: this.config.employee.id,
       employeeName: this.config.employee.name,
@@ -193,7 +250,15 @@ export class ClientAgent {
       mcpReady: overrides.mcpReady ?? true,
       hookReady: overrides.hookReady ?? true,
       uploadQueueSize: queueItems.length,
-      issues: overrides.issues || []
+      issues: overrides.issues || [],
+      lastHookAt: overrides.lastHookAt ?? runtime.lastHookAt ?? "",
+      lastHookEventType: overrides.lastHookEventType ?? runtime.lastHookEventType ?? "",
+      lastHookEventId: overrides.lastHookEventId ?? runtime.lastHookEventId ?? "",
+      lastUploadAt: overrides.lastUploadAt ?? runtime.lastUploadAt ?? "",
+      lastUploadStatus: overrides.lastUploadStatus ?? runtime.lastUploadStatus ?? "",
+      lastUploadError: overrides.lastUploadError ?? runtime.lastUploadError ?? "",
+      lastUploadSent: overrides.lastUploadSent ?? runtime.lastUploadSent ?? 0,
+      lastUploadRemaining: overrides.lastUploadRemaining ?? runtime.lastUploadRemaining ?? queueItems.length
     }, this.config);
   }
 
@@ -355,8 +420,11 @@ export class ClientAgent {
       clientId: this.config.clientId,
       configFile: this.config.configFile,
       queueFile: this.config.queueFile,
+      stateFile: this.config.stateFile,
+      logDir: this.config.logDir,
       queueSize: queueItems.length,
       queue: queueStats,
+      runtime: readRuntimeState(this.config),
       collection: this.config.collection,
       update: this.config.update
     };
@@ -410,6 +478,11 @@ export class ClientAgent {
         codexHooks.enabled,
         codexHooks.message
       ));
+      checks.push(check(
+        "codex_hooks_executable",
+        codexHooks.executable,
+        codexHooks.executableMessage || "Codex hook 指向的脚本不存在，或不是当前系统可执行的脚本格式"
+      ));
       status.codexHooks = codexHooks;
     }
 
@@ -435,13 +508,18 @@ function codexHookDiagnostics(config) {
   const configPath = path.join(homeDir, ".codex", "config.toml");
   const hookEvents = new Set(["session_start", "pre_tool_use", "post_tool_use", "user_prompt_submit", "stop"]);
   const configuredEvents = codexConfiguredHookEvents(hooksPath);
+  const hookCommands = codexConfiguredHookCommands(hooksPath);
   const disabledStates = codexDisabledHookStates(configPath, hooksPath, hookEvents);
+  const executableState = codexHookExecutableState(hookCommands);
   return {
     hooksPath,
     configPath,
     configured: configuredEvents.length > 0,
     configuredEvents,
+    hookCommands,
     enabled: disabledStates.length === 0,
+    executable: executableState.ok,
+    executableMessage: executableState.message,
     disabledStates,
     message: disabledStates.length
       ? `Codex hook 已配置但未启用：${disabledStates.join("、")}，请重新运行安装命令或执行 worklens-agent-install 修复。`
@@ -461,6 +539,20 @@ function codexConfiguredHookEvents(hooksPath) {
   }
 }
 
+function codexConfiguredHookCommands(hooksPath) {
+  try {
+    if (!fs.existsSync(hooksPath)) return [];
+    const hooks = JSON.parse(fs.readFileSync(hooksPath, "utf8"));
+    return Object.values(hooks.hooks || {})
+      .flatMap((entries) => Array.isArray(entries) ? entries : [])
+      .flatMap((entry) => Array.isArray(entry.hooks) ? entry.hooks : [])
+      .map((hook) => String(hook.command || ""))
+      .filter((command) => workLensHookPattern().test(command));
+  } catch {
+    return [];
+  }
+}
+
 function entriesContainWorkLensHook(entries) {
   return (Array.isArray(entries) ? entries : []).some((entry) => {
     return (entry.hooks || []).some((hook) => workLensHookPattern().test(String(hook.command || "")));
@@ -468,7 +560,30 @@ function entriesContainWorkLensHook(entries) {
 }
 
 function workLensHookPattern() {
-  return /(?:ai[-_]?worklens|worklens|silent-ai-observatory|hook-adapter\.mjs|codex-hook\.sh)/i;
+  return /(?:ai[-_]?worklens|worklens|silent-ai-observatory|hook-adapter\.mjs|codex-hook\.(?:sh|cmd))/i;
+}
+
+function codexHookExecutableState(commands) {
+  if (!commands.length) return { ok: false, message: "未找到 AI WorkLens Codex hook 命令" };
+  const scriptPaths = commands.map(extractCodexHookScriptPath).filter(Boolean);
+  if (!scriptPaths.length) return { ok: false, message: "Codex hook 命令中未找到 codex-hook 脚本路径" };
+  for (const scriptPath of scriptPaths) {
+    if (!fs.existsSync(scriptPath)) return { ok: false, message: `Codex hook 脚本不存在：${scriptPath}` };
+    if (process.platform === "win32" && !/\.cmd$/i.test(scriptPath)) {
+      return { ok: false, message: `Windows 需要 codex-hook.cmd，当前是：${scriptPath}` };
+    }
+    if (process.platform !== "win32" && !/\.sh$/i.test(scriptPath)) {
+      return { ok: false, message: `macOS/Linux 需要 codex-hook.sh，当前是：${scriptPath}` };
+    }
+  }
+  return { ok: true, message: "" };
+}
+
+function extractCodexHookScriptPath(command) {
+  const quoted = String(command || "").match(/["']([^"']*codex-hook\.(?:sh|cmd))["']/i);
+  if (quoted) return quoted[1];
+  const unquoted = String(command || "").match(/([^\s]+codex-hook\.(?:sh|cmd))/i);
+  return unquoted ? unquoted[1] : "";
 }
 
 function codexDisabledHookStates(configPath, hooksPath, hookEvents) {