claude-spotter 1.4.26 → 1.4.28

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 1.4.28 — 2026-07-21
+
+- **Windows Codex SessionStartの誤timeoutを修正。** detached refreshを起動するSpotter所有hookの
+  host側上限を5秒から30秒へ変更し、Windows nativeのNode起動・project discoveryが5秒を超えても
+  SessionStart失敗として切られないようにした。再installは旧5秒設定をcanonical 30秒へ正規化する。
+
+## 1.4.27 — 2026-07-21
+
+- **Windows PowerShell 5.1向け診断JSONをASCII安全化。** `spotter diagnostics logs --json`は
+  非ASCII文字をJSONのUnicode escapeとして出力する。履歴上のtool名に全角括弧などが含まれても、
+  Windows PowerShell 5.1のnative stdout誤復号でJSON構造が壊れず、`ConvertFrom-Json`で読める。
+
 ## 1.4.26 — 2026-07-20
 
 - **SessionEnd cleanupを冪等化。** daemonが未起動または既に停止済みの`E_UNREACHABLE`は

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-spotter",
-  "version": "1.4.26",
+  "version": "1.4.28",
   "description": "Audit agent running alongside Claude Code that catches missed tool calls — 気づく役と実行する役の分離",
   "type": "module",
   "bin": {

package/src/cli/codex-hook-cmd.mjs

@@ -39,6 +39,7 @@ const HERE = dirname(fileURLToPath(import.meta.url));
 const PACKAGE_ROOT = resolve(HERE, '..', '..');
 const SPOTTER_BIN = join(PACKAGE_ROOT, 'bin', 'spotter.mjs');
 const CODEX_HOOK_TIMEOUT_SEC = 60;
+const CODEX_SESSION_START_TIMEOUT_SEC = 30;
 const DEFAULT_CODEX_HOOK_AUDITOR_TIMEOUT_MS = 20_000;
 const DEFAULT_CODEX_STOP_SHORT_FINAL_MAX_CHARS = 120;
 const CODEX_HOOK_FEATURE_NAMES = ['hooks', 'codex_hooks'];
@@ -623,6 +624,7 @@ function validateSpotterCodexHookEvent(settings, event) {
   const candidates = allEntries.filter((hook) => isSpotterCodexCommand(String(hook?.command ?? '')));
   const expectedCandidates = candidates.filter((hook) => isSpotterCodexCommand(String(hook.command ?? ''), event));
   const expected = expectedCandidates.filter((hook) => hook?.type === 'command');
+  const expectedTimeout = event === 'SessionStart' ? CODEX_SESSION_START_TIMEOUT_SEC : CODEX_HOOK_TIMEOUT_SEC;
   const issues = [];
   if (expectedCandidates.length === 0) issues.push('missing');
   if (expectedCandidates.length > 1) issues.push('duplicate');
@@ -632,6 +634,7 @@ function validateSpotterCodexHookEvent(settings, event) {
     if (hook.async === true) issues.push('async:true');
     if (!Object.hasOwn(hook, 'timeout')) issues.push('timeout:missing');
     else if (!Number.isFinite(hook.timeout) || hook.timeout <= 0) issues.push('timeout-invalid');
+    else if (hook.timeout !== expectedTimeout) issues.push(`timeout!=${expectedTimeout}`);
     if (Object.hasOwn(hook, 'timeoutSec')) issues.push('timeoutSec');
     if (hook.async === false) issues.push('async:false');
     if (hook.statusMessage === null) issues.push('statusMessage:null');
@@ -658,6 +661,8 @@ function isIncompatibleSpotterHookIssue(issue) {
     'type!=command',
     'async:true',
     'timeout-invalid',
+    'timeout!=30',
+    'timeout!=60',
     'timeoutSec',
     'commandWindows-invalid',
   ].includes(issue);
@@ -884,7 +889,7 @@ function mergeCodexHooks(current, { nodePath, spotterBin, platform = process.pla
   next.hooks = next.hooks ?? {};
   const prefix = platform === 'win32' ? '& ' : '';
   addCodexHook(next, 'SessionStart', `${prefix}${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook session-start`, {
-    timeout: 5,
+    timeout: CODEX_SESSION_START_TIMEOUT_SEC,
   });
   addCodexHook(next, 'UserPromptSubmit', `${prefix}${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook user-prompt-submit`);
   addCodexHook(next, 'Stop', `${prefix}${quoteArg(nodePath)} ${quoteArg(spotterBin)} codex-hook stop`);

package/src/cli/diagnostics-cmd.mjs

@@ -53,12 +53,18 @@ export async function runDiagnosticsLogsCommand({
   const runtimeErrors = await readRuntimeErrorStoreStatusFn();
   const merged = { ...summary, hookEvents, runtimeErrors };
   if (opts.json) {
-    writeOutput(JSON.stringify(merged, null, 2) + '\n');
+    writeOutput(stringifyAsciiJson(merged) + '\n');
     return;
   }
   writeOutput(formatDaemonLogSummary(merged));
 }
 
+function stringifyAsciiJson(value) {
+  return JSON.stringify(value, null, 2).replace(/[\u007f-\uffff]/g, (character) =>
+    `\\u${character.charCodeAt(0).toString(16).padStart(4, '0')}`
+  );
+}
+
 export function formatDaemonLogSummary(summary) {
   const lines = [
     'spotter diagnostics logs',