Function cbm_build_claude_hook_command

src/cli/cli.c:2461–2483

Build the hook command string written into Claude Code's settings.json. * POSIX embeds a safely quoted absolute custom config path or a portable $HOME * path. Windows explicitly invokes cmd.exe so the hook also works when Claude * falls back from Git Bash to PowerShell. The Windows command defers expansion * of custom paths to cmd.exe and disables delayed expansion, so user path bytes * never

 * of custom paths to cmd.exe and disables delayed expansion, so user path bytes
 * never become source text in either outer shell. */
static int cbm_build_claude_hook_command(const char *script_name, const char *config_dir,
                                         bool windows, char *out, size_t out_sz) {
    if (!cbm_hook_script_name_safe(script_name) || !out || out_sz == 0U) {
        return CLI_ERR;
    }
    out[0] = '\0';
    if (windows) {
        const char *base =
            config_dir && config_dir[0] ? "%CLAUDE_CONFIG_DIR%" : "%USERPROFILE%\\.claude";
        int written = snprintf(out, out_sz, "cmd.exe /d /v:off /s /c '\"\"%s\\hooks\\%s\"\"'", base,
                               script_name);
        return written > 0 && (size_t)written < out_sz ? CLI_OK : CLI_ERR;
    }
    if (config_dir && config_dir[0]) {
        char path[CLI_BUF_1K];
        int written = snprintf(path, sizeof(path), "%s/hooks/%s", config_dir, script_name);
        return written > 0 && (size_t)written < sizeof(path)
                   ? cbm_shell_quote_word(path, out, out_sz)
                   : CLI_ERR;
    }
    int written = snprintf(out, out_sz, "\"$HOME/.claude/hooks/%s\"", script_name);
    return written > 0 && (size_t)written < out_sz ? CLI_OK : CLI_ERR;
}

static int cbm_resolve_hook_command(const char *script_name, char *out, size_t out_sz) {
    char env_buf[CLI_BUF_1K];