claude-spotter 1.4.25 → 1.4.26

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 1.4.26 — 2026-07-20
+
+- **SessionEnd cleanupを冪等化。** daemonが未起動または既に停止済みの`E_UNREACHABLE`は
+  `already-stopped`として記録し、正常な終了状態をstderr warningへ誤分類しない。他のcleanup
+  failureは従来どおりwarningと構造eventを残す。
+- **Windows native Codex hookをPowerShell実行可能に修正。** quoted Node commandの先頭へ
+  Windowsだけcall operator `&`を付ける。installerのownership判定は新旧両形式を認識し、
+  再installで旧形式をcanonicalへ更新、uninstallでも除去できる。
+- **Windows runtime error storeのACL処理を安定化。** 混雑したWindows runnerでも
+  PowerShellによるprivate ACL設定が誤ってtimeoutしないよう、上限を15秒へ拡張した。
+
 ## 1.4.25 — 2026-07-14
 
 - **Windows Codex CLI実行経路を修正。** `spotter install`、`spotter doctor`、Codex hook /
@@ -12,7 +23,9 @@
   POSIXと実体`.exe`の直接spawn、stdin prompt、非0終了時のfail-loud診断は維持する。
 - **検証。** 530 tests（528 pass / 2 platform skip）、68-file pack、FOX Windows nativeの
   tarball仮導入、install、warning 0のdoctor、Codex hooks / catalog、実Codex CLI auditor、
-  codex-sidecar auditor diagnostics、dotagents `verify-install`を通過した。
+  codex-sidecar auditor diagnostics、dotagents `verify-install`を通過した。公開commit
+  `65bccf8`をnpm `latest`、`v1.4.25` tag、GitHub Releaseへ同期し、Mac、main-server、
+  FOX WSL2、FOX Windows nativeのregistry版global installとwarning 0のdoctorを確認した。
 
 ## 1.4.24 — 2026-07-14
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-spotter",
-  "version": "1.4.25",
+  "version": "1.4.26",
   "description": "Audit agent running alongside Claude Code that catches missed tool calls — 気づく役と実行する役の分離",
   "type": "module",
   "bin": {

package/src/cli/codex-hook-cmd.mjs

@@ -464,11 +464,11 @@ export async function runCodexHookDiagnosticsCommand({
   writeOutput(JSON.stringify(result, null, 2) + '\n');
 }
 
-export async function installCodexHooks({ codexHome = defaultCodexHome(), nodePath = resolveCodexHookNodePath(), spotterBin = SPOTTER_BIN } = {}) {
+export async function installCodexHooks({ codexHome = defaultCodexHome(), nodePath = resolveCodexHookNodePath(), spotterBin = SPOTTER_BIN, platform = process.platform } = {}) {
   const hooksPath = join(codexHome, 'hooks.json');
   const configPath = join(codexHome, 'config.toml');
   const current = await loadJson(hooksPath);
-  const next = mergeCodexHooks(current, { nodePath, spotterBin });
+  const next = mergeCodexHooks(current, { nodePath, spotterBin, platform });
   const hooksChanged = JSON.stringify(current) !== JSON.stringify(next);
   if (hooksChanged) {
     await mkdir(dirname(hooksPath), { recursive: true });
@@ -879,14 +879,15 @@ async function loadJson(path) {
   }
 }
 
-function mergeCodexHooks(current, { nodePath, spotterBin }) {
+function mergeCodexHooks(current, { nodePath, spotterBin, platform = process.platform }) {
   const next = structuredClone(current ?? {});
   next.hooks = next.hooks ?? {};
-  addCodexHook(next, 'SessionStart', `${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook session-start`, {
+  const prefix = platform === 'win32' ? '& ' : '';
+  addCodexHook(next, 'SessionStart', `${prefix}${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook session-start`, {
     timeout: 5,
   });
-  addCodexHook(next, 'UserPromptSubmit', `${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook user-prompt-submit`);
-  addCodexHook(next, 'Stop', `${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook stop`);
+  addCodexHook(next, 'UserPromptSubmit', `${prefix}${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook user-prompt-submit`);
+  addCodexHook(next, 'Stop', `${prefix}${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook stop`);
   return next;
 }
 
@@ -943,7 +944,7 @@ function isSpotterCodexHook(hook) {
 }
 
 function isSpotterCodexCommand(command, event = null) {
-  const match = command.match(/^(?:"((?:\\.|[^"\\])*)"|(\S+))\s+(?:"((?:\\.|[^"\\])*)"|(\S+))\s+codex-hook\s+(session-start|user-prompt-submit|stop)\s*$/);
+  const match = command.match(/^(?:&\s+)?(?:"((?:\\.|[^"\\])*)"|(\S+))\s+(?:"((?:\\.|[^"\\])*)"|(\S+))\s+codex-hook\s+(session-start|user-prompt-submit|stop)\s*$/);
   if (!match) return false;
   const nodePath = unescapeQuotedCommandToken(match[1] ?? match[2]);
   const spotterPath = unescapeQuotedCommandToken(match[3] ?? match[4]);

package/src/core/runtime-error-store.mjs

@@ -635,7 +635,7 @@ async function runWindowsAcl(path, { directory }, options) {
   const executable = options.powerShellPath ?? 'powershell.exe';
   const script = buildWindowsAclPowerShell({ directory });
   await spawnForExit(executable, ['-NoProfile', '-NonInteractive', '-Command', script], {
-    timeoutMs: options.aclTimeoutMs ?? 3_000,
+    timeoutMs: options.aclTimeoutMs ?? 15_000,
     env: { ...process.env, SPOTTER_ACL_PATH: path },
   });
 }

package/src/hooks/session-end.mjs

@@ -20,6 +20,7 @@ export async function runSessionEnd({
   readInput = readStdinJson,
   sendRequestFn = sendRequest,
   recordHookEventFn = recordClaudeHookEvent,
+  writeError = (text) => process.stderr.write(text),
 } = {}) {
   if (isChildCall()) return;
   const input = await readInput();
@@ -41,6 +42,13 @@ export async function runSessionEnd({
       event: { hook: 'SessionEnd', status: 'shutdown', durationMs: Date.now() - startedAt },
     });
   } catch (err) {
+    if (err?.code === 'E_UNREACHABLE') {
+      await recordHookEventFn({
+        projectRoot,
+        event: { hook: 'SessionEnd', status: 'already-stopped', durationMs: Date.now() - startedAt },
+      });
+      return;
+    }
     await recordHookEventFn({
       projectRoot,
       event: {
@@ -51,8 +59,7 @@ export async function runSessionEnd({
       },
     });
     // §14.1 exception — don't fail the Claude Code session just because cleanup failed.
-    process.stderr.write(`spotter-hook: session-end shutdown warning: ${err.code ?? '?'}: ${err.message}\n`);
-    process.exit(0);
+    writeError(`spotter-hook: session-end shutdown warning: ${err.code ?? '?'}: ${err.message}\n`);
   }
 }