throughline 0.10.8 → 0.10.9

package/CHANGELOG.md

@@ -10,6 +10,16 @@ shipped to npm but were not individually tagged on GitHub.
 
 ## [Unreleased]
 
+## [0.10.9] — 2026-09-01
+
+### Fixed
+
+- `handoff-context --supplement-file`は、capture済みsessionに会話本文がまだ無い場合でも、
+  同じprojectに束縛された補足記憶だけを9,500字予算内で返す。Cursorの初回Workspace
+  Trust直後など、session行だけが先に作られたBotも記憶付きで再起動できる。
+- Windowsの子プロセスとowner-only ACL処理を、工場標準のPowerShell 7へ統一した。
+  製品CIも現行の3環境（macOS・Linux workstation・Windows native）を直接検証する。
+
 ## [0.10.8] — 2026-09-01
 
 ### Added
@@ -1387,7 +1397,8 @@ two attempts, instrument first instead of patching again.
 
 ---
 
-[Unreleased]: https://github.com/kitepon/Throughline/compare/v0.10.8...HEAD
+[Unreleased]: https://github.com/kitepon/Throughline/compare/v0.10.9...HEAD
+[0.10.9]: https://github.com/kitepon/Throughline/compare/v0.10.8...v0.10.9
 [0.10.8]: https://github.com/kitepon/Throughline/compare/v0.10.7...v0.10.8
 [0.10.7]: https://github.com/kitepon/Throughline/compare/v0.10.6...v0.10.7
 [0.10.6]: https://github.com/kitepon/Throughline/compare/v0.10.5...v0.10.6

package/README.md

@@ -817,7 +817,7 @@ entry to the `tasks` array yourself:
 
 ## Commands
 
-**The current release is v0.10.8.** Throughline supports Claude Code, Codex,
+**The current release is v0.10.9.** Throughline supports Claude Code, Codex,
 Grok, and Cursor as documented host adapters. The versioned, read-only
 `handoff-context` boundary opens only an existing database and leaves baton
 state, session ownership, and memory rows unchanged. Factory diagnostics,
@@ -924,7 +924,9 @@ inheritance text used by SessionStart. A launcher may append
 ```
 
 The supplement is included only when `projectPath` matches the source session
-and shares the 9,500-character budget with conversation memory. The command does not create or migrate a
+and shares the 9,500-character budget with conversation memory. If the captured
+session has no dialogue context yet, a valid project-bound supplement is returned
+by itself. The command does not create or migrate a
 database, consume a baton, merge sessions, infer a latest session, change
 `sessions.merged_into`, or reassign L1/L2/L3 rows. AIterm uses this boundary for
 its optional cross-harness portable fork; the Observer feed is a separate

package/docs/04_public_release_plan.md

@@ -6,7 +6,7 @@
 
 ## 現行状態
 
-- release candidateのpackage版は `0.10.8`。tagとnpmの公開確認はpublish後に行う。
+- release candidateのpackage版は `0.10.9`。tagとnpmの公開確認はpublish後に行う。
 - Claude Code、Codex、Grok、Cursorをfirst-class hostとして扱う。
 - 現行DB schemaはv9。schemaの正本は [src/db.mjs](../src/db.mjs) の
   `CURRENT_VERSION`、二相handoffの判断は

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "throughline",
-    "version": "0.10.8",
+    "version": "0.10.9",
     "type": "module",
     "description": "Persistent memory hooks for Claude Code, Codex, Grok, and Cursor (/clear-safe context compression)",
     "keywords": [

package/src/cli/handoff-context.mjs

@@ -82,11 +82,11 @@ export function readHandoffContext(sessionId, {
       isInheritance: true,
       maxChars: INJECTION_BUDGET_CHARS - (supplementContext?.length ?? 0) - separator.length,
     })?.text ?? null;
-    if (!context) return null;
+    if (!context && !supplementContext) return null;
 
-    const combined = supplementContext
+    const combined = supplementContext && context
       ? `${supplementContext}${separator}${context}`
-      : context;
+      : supplementContext ?? context;
     if (combined.length > INJECTION_BUDGET_CHARS) {
       throw new RangeError('handoff context exceeds injection budget');
     }

package/src/cli/handoff-context.test.mjs

@@ -169,6 +169,40 @@ test('handoff-context adds a project-bound supplement inside the shared budget',
   }
 });
 
+test('handoff-context returns a project-bound supplement when the captured session has no dialogue yet', () => {
+  const home = mkdtempSync(join(tmpdir(), 'tl-handoff-supplement-only-'));
+  try {
+    const { db, dbPath } = createFixture(home);
+    db.exec('DELETE FROM details; DELETE FROM bodies; DELETE FROM skeletons;');
+    const before = ownershipSnapshot(db);
+    db.close();
+    const supplementFile = join(home, 'supplement.json');
+    writeFileSync(supplementFile, JSON.stringify({
+      schema: 'throughline.handoff_supplement.v1',
+      projectPath: '/work/project',
+      sections: [{ title: 'Botプロフィール', content: '名前はCursor確認担当' }],
+    }));
+
+    const result = runCli(home, [
+      'handoff-context', '--session', SESSION_ID, '--json',
+      '--supplement-file', supplementFile,
+    ]);
+    assert.equal(result.status, 0, result.stderr);
+    assert.deepEqual(JSON.parse(result.stdout), {
+      schema: 'throughline.handoff_context.v1',
+      status: 'ready',
+      sessionId: SESSION_ID,
+      context: '## このBotの長期記憶と関連知識\n\n### Botプロフィール\n名前はCursor確認担当',
+    });
+
+    const verify = new DatabaseSync(dbPath, { readOnly: true });
+    assert.deepEqual(ownershipSnapshot(verify), before);
+    verify.close();
+  } finally {
+    rmSync(home, { recursive: true, force: true });
+  }
+});
+
 test('handoff-context refuses a supplement from another bot project', () => {
   const home = mkdtempSync(join(tmpdir(), 'tl-handoff-supplement-scope-'));
   try {

package/src/cli/latest-session.test.mjs

@@ -1,7 +1,7 @@
 import assert from 'node:assert/strict';
 import { mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { join, resolve } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
 import test from 'node:test';
 
@@ -49,7 +49,7 @@ test('readyとemptyをJSONで返す', () => {
   assert.deepEqual(JSON.parse(stdout.read()), {
     schema: 'throughline.latest_session.v1',
     status: 'ready',
-    projectPath: '/bots/a',
+    projectPath: resolve('/bots/a'),
     sessionId: 'claude:abc',
     updatedAt: 'now',
   });

package/src/cli/self-update.mjs

@@ -1,6 +1,6 @@
 import { createRequire } from 'node:module';
 import { realpathSync } from 'node:fs';
-import { dirname, isAbsolute, join, win32 } from 'node:path';
+import { dirname, join, posix, win32 } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 import { spawnPortableSync } from '../os/portable-spawn-sync.mjs';
@@ -94,7 +94,7 @@ export function resolveGlobalCliPath(result, platform = process.platform) {
   if (!succeeded(result) || typeof result.stdout !== 'string') return null;
   const lines = result.stdout.split(/\r?\n/u).map((line) => line.trim()).filter(Boolean);
   if (lines.length !== 1) return null;
-  const path = platform === 'win32' ? win32 : { isAbsolute, join };
+  const path = platform === 'win32' ? win32 : posix;
   if (!path.isAbsolute(lines[0])) return null;
   return path.join(lines[0], 'throughline', 'bin', 'throughline.mjs');
 }
@@ -110,7 +110,7 @@ export function validateSelfUpdateIdentity(value, {
   if (Object.keys(value).sort().join('\0') !== exact.sort().join('\0')) return false;
   if (value.schema !== SELF_UPDATE_IDENTITY_SCHEMA || value.version !== version ||
     typeof value.cliPath !== 'string') return false;
-  const path = platform === 'win32' ? win32 : { isAbsolute };
+  const path = platform === 'win32' ? win32 : posix;
   if (!path.isAbsolute(value.cliPath) || !path.isAbsolute(cliPath ?? '')) return false;
   try {
     const actual = canonicalizePath(value.cliPath);

package/src/cli/self-update.test.mjs

@@ -118,6 +118,7 @@ test('self-update delegates post-install work to the newly installed CLI', () =>
     env: { PATH: '/fixture/bin' },
     runner,
     packageVersion: '0.10.4',
+    platform: 'linux',
     nodePath: '/node',
     cliPath: '/old-throughline.mjs',
     canonicalizePath: fakeCanonicalizePath,
@@ -160,6 +161,7 @@ test('new CLI completes install, migration, and diagnostics in order', () => {
     },
     runner,
     packageVersion: '0.10.5',
+    platform: 'linux',
     nodePath: '/node',
     cliPath: '/throughline.mjs',
   }), 0);
@@ -257,6 +259,7 @@ test('old CLI help with exit 0 cannot satisfy the post-install protocol', () =>
     stderr: sink(),
     runner,
     packageVersion: '0.10.4',
+    platform: 'linux',
     nodePath: '/node',
     canonicalizePath: fakeCanonicalizePath,
   }), 1);
@@ -293,6 +296,7 @@ test('post-install non-JSON failure preserves child stderr as the cause', () =>
     stderr,
     runner,
     packageVersion: '0.10.4',
+    platform: 'linux',
     nodePath: '/node',
     canonicalizePath: fakeCanonicalizePath,
   }), 1);
@@ -330,6 +334,7 @@ test('post-install structured failure preserves its stage and stderr', () => {
     stderr,
     runner,
     packageVersion: '0.10.4',
+    platform: 'linux',
     nodePath: '/node',
     canonicalizePath: fakeCanonicalizePath,
   }), 7);

package/src/completed-turn-receipts.test.mjs

@@ -148,7 +148,7 @@ test('completed turn receipt: one Windows mutation spends ACL processes only on
   try {
     writeCompletedTurnReceipt(input(1), options);
     assert.equal(calls.length, 3, 'new directory, lock, and store each require one apply+verify process');
-    assert.ok(calls.every((call) => call.command === 'powershell.exe'));
+    assert.ok(calls.every((call) => call.command === 'pwsh.exe'));
     calls.length = 0;
 
     writeCompletedTurnReceipt(input(2), options);

package/src/docs-contract.test.mjs

@@ -1,6 +1,5 @@
 import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
-import { spawnSync } from 'node:child_process';
 import { test } from 'node:test';
 import { fileURLToPath } from 'node:url';
 
@@ -8,6 +7,7 @@ import {
   extractMarkdownTargets,
   findMissingPackedTargets,
 } from '../scripts/verify-pack-markdown-links.mjs';
+import { spawnPortableSync } from './os/portable-spawn-sync.mjs';
 
 test('Markdown-only CI runs the product-owned documentation contract', () => {
   const packageJson = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
@@ -36,7 +36,7 @@ test('Markdown-only CI runs the product-owned documentation contract', () => {
   );
 
   const npmCommand = process.platform === 'win32' ? 'npm.cmd' : 'npm';
-  const result = spawnSync(npmCommand, ['run', 'verify:docs', '--silent'], {
+  const result = spawnPortableSync(npmCommand, ['run', 'verify:docs', '--silent'], {
     cwd: fileURLToPath(new URL('..', import.meta.url)),
     encoding: 'utf8',
   });

package/src/os/portable-spawn-sync.mjs

@@ -43,7 +43,7 @@ export function spawnPortableSync(command, args, options = {}) {
     return spawnSync(process.execPath, [resolved, ...args], spawnOptions);
   }
   if (extension === '.ps1') {
-    return spawnSync('powershell.exe', [
+    return spawnSync('pwsh.exe', [
       '-NoLogo',
       '-NoProfile',
       '-NonInteractive',

package/src/os/windows-acl-test-helper.mjs

@@ -16,9 +16,9 @@ $acl.SetOwner($sid); $acl.SetAccessRuleProtection($true,$false)
 $inherit=if($isDir){[System.Security.AccessControl.InheritanceFlags]'ContainerInherit,ObjectInherit'}else{[System.Security.AccessControl.InheritanceFlags]::None}
 $rule=New-Object System.Security.AccessControl.FileSystemAccessRule($sid,'FullControl',$inherit,[System.Security.AccessControl.PropagationFlags]::None,[System.Security.AccessControl.AccessControlType]::Allow)
 $acl.AddAccessRule($rule)
-if($isDir){[System.IO.Directory]::SetAccessControl($target,$acl)}else{[System.IO.File]::SetAccessControl($target,$acl)}
+Set-Acl -LiteralPath $target -AclObject $acl
 `;
-  const result = spawnSync('powershell.exe', [
+  const result = spawnSync('pwsh.exe', [
     '-NoLogo', '-NoProfile', '-NonInteractive', '-Command', script,
   ], {
     encoding: 'utf8',
@@ -39,7 +39,7 @@ export function verifyWindowsPrivateAcl(path, directory = false) {
 $ErrorActionPreference='Stop'
 $target=$env:THROUGHLINE_TEST_ACL_PATH; $isDir=$env:THROUGHLINE_TEST_ACL_DIRECTORY -eq '1'
 $sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value
-$acl=if($isDir){[System.IO.Directory]::GetAccessControl($target)}else{[System.IO.File]::GetAccessControl($target)}
+$acl=Get-Acl -LiteralPath $target
 $owner=$acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value
 if($owner -ne $sid){exit 41}
 $rules=@($acl.GetAccessRules($true,$true,[System.Security.Principal.SecurityIdentifier]))
@@ -47,7 +47,7 @@ if($rules.Count -ne 1){exit 42}
 $rule=$rules[0]
 if($rule.IdentityReference.Value -ne $sid -or $rule.AccessControlType -ne 'Allow' -or $rule.IsInherited -or ($rule.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -ne [System.Security.AccessControl.FileSystemRights]::FullControl){exit 43}
 `;
-  const result = spawnSync('powershell.exe', [
+  const result = spawnSync('pwsh.exe', [
     '-NoLogo', '-NoProfile', '-NonInteractive', '-Command', script,
   ], {
     encoding: 'utf8',

package/src/os/windows-acl.mjs

@@ -33,7 +33,7 @@ export function verifyWindowsAcl(path, directory) {
 }
 
 function runWindowsAclScript(path, directory, script) {
-  const result = childProcess.spawnSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script], {
+  const result = childProcess.spawnSync('pwsh.exe', ['-NoProfile', '-NonInteractive', '-Command', script], {
     env: { ...process.env, THROUGHLINE_ACL_PATH: path, THROUGHLINE_ACL_DIRECTORY: directory ? '1' : '0' },
     stdio: 'ignore', timeout: WINDOWS_ACL_TIMEOUT_MS, windowsHide: true,
   });
@@ -42,7 +42,7 @@ function runWindowsAclScript(path, directory, script) {
 
 const WINDOWS_ACL_VERIFY_SCRIPT = String.raw`
 $p=$env:THROUGHLINE_ACL_PATH; $isDir=$env:THROUGHLINE_ACL_DIRECTORY -eq '1'; $sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value
-$acl=if($isDir){[System.IO.Directory]::GetAccessControl($p)}else{[System.IO.File]::GetAccessControl($p)}
+$acl=Get-Acl -LiteralPath $p
 $owner=$acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value
 if($owner -ne $sid){exit 41}; $rules=@($acl.GetAccessRules($true,$true,[System.Security.Principal.SecurityIdentifier])); if($rules.Count -ne 1){exit 42}
 $r=$rules[0]; if($r.IdentityReference.Value -ne $sid -or $r.AccessControlType -ne 'Allow' -or $r.IsInherited -or ($r.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -ne [System.Security.AccessControl.FileSystemRights]::FullControl){exit 43}
@@ -53,5 +53,5 @@ $p=$env:THROUGHLINE_ACL_PATH; $sid=[System.Security.Principal.WindowsIdentity]::
 $isDir=$env:THROUGHLINE_ACL_DIRECTORY -eq '1'; $acl=if($isDir){New-Object System.Security.AccessControl.DirectorySecurity}else{New-Object System.Security.AccessControl.FileSecurity}; $acl.SetAccessRuleProtection($true,$false)
 $flags=if($isDir){[System.Security.AccessControl.InheritanceFlags]'ContainerInherit, ObjectInherit'}else{[System.Security.AccessControl.InheritanceFlags]::None}
 $rule=New-Object System.Security.AccessControl.FileSystemAccessRule($sid,'FullControl',$flags,[System.Security.AccessControl.PropagationFlags]::None,[System.Security.AccessControl.AccessControlType]::Allow)
-$acl.SetOwner($sid); $acl.AddAccessRule($rule); if($isDir){[System.IO.Directory]::SetAccessControl($p,$acl)}else{[System.IO.File]::SetAccessControl($p,$acl)}
+$acl.SetOwner($sid); $acl.AddAccessRule($rule); Set-Acl -LiteralPath $p -AclObject $acl
 ` + WINDOWS_ACL_VERIFY_SCRIPT;

package/src/runtime-error-store.test.mjs

@@ -123,7 +123,7 @@ test('runtime error store: one Windows mutation spends ACL processes only on dis
 
   assert.equal(observeRuntimeError({ code: 'HOOK_CODEX_FAILED' }, options).status, 'recorded');
   assert.equal(calls.length, 3, 'new directory, lock, and store each require one apply+verify process');
-  assert.ok(calls.every((call) => call.command === 'powershell.exe'));
+  assert.ok(calls.every((call) => call.command === 'pwsh.exe'));
   calls.length = 0;
 
   assert.equal(observeRuntimeError({ code: 'HOOK_CODEX_FAILED' }, options).status, 'recorded');

package/src/test-env.mjs

@@ -15,8 +15,9 @@ process.env.NODE_NO_WARNINGS = '1';
 // app-server fixtures.  Run their .mjs bodies with this test runner's Node
 // executable, preserving the command arguments the production code sends.
 import childProcess from 'node:child_process';
-import { readFileSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { syncBuiltinESMExports } from 'node:module';
+import { basename, dirname, extname, join } from 'node:path';
 
 const { spawn: nativeSpawn, spawnSync: nativeSpawnSync } = childProcess;
 
@@ -25,6 +26,16 @@ function normalizeNodeFixture(command, args = []) {
     return [command, args];
   }
   if (command.endsWith('.mjs')) return [process.execPath, [command, ...args]];
+  const extension = extname(command).toLowerCase();
+  if (extension === '.cmd' || extension === '.bat') {
+    const sibling = join(dirname(command), `${basename(command, extension)}.ps1`);
+    if (existsSync(sibling)) {
+      return ['pwsh.exe', ['-NoLogo', '-NoProfile', '-NonInteractive', '-File', sibling, ...args]];
+    }
+  }
+  if (extension === '.ps1') {
+    return ['pwsh.exe', ['-NoLogo', '-NoProfile', '-NonInteractive', '-File', command, ...args]];
+  }
   try {
     const header = readFileSync(command, 'utf8').slice(0, 128);
     if (/^#!.*\bnode(?:\.exe)?\b/.test(header)) return [process.execPath, [command, ...args]];