feat: Windows shell write/delete detection (#46 follow-up)

[Cannon07]

Follow-up to the merged claudecode Windows slice (#73). Fixes the reported bug: on Windows, deleting/writing a file via the shell did not mark neo-tree.

Root cause (STEP 0, gathered on a real Windows box)

Claude Code on Windows exposes a distinct PowerShell tool alongside Bash and routes shell file ops through it (the Haiku model deletes via Remove-Item, moves via Move-Item, writes via Set-Content/Out-File). tool_name is "PowerShell" with a Bash-shaped {command} payload. Two things were wrong, not one:

1. The PreToolUse matcher (Edit|Write|MultiEdit|Bash) never matched PowerShell, so the hook never fired.
2. Even for git-bash (Opus emits POSIX rm with Windows paths), the detector was Unix-path-only.

The fix — three layers

• Matcher: claudecode Pre/PostToolUse matchers gain PowerShell (harmless on Unix; no such tool there).
• Normaliser: fold tool_name="PowerShell" → canonical Bash, so the dispatcher/emitters/detector need no awareness of a separate tool.
• Detector (bash_detect.lua → shell_detect.lua, behind the unchanged M.detect): split into two independent axes per ADR-0009 —
  • an OS-selected path-convention adapter (Unix byte-identical; Windows handles C:\/C:/, UNC, backslashes, relative-against-backslash-cwd, canonical backslash output);
  • a PowerShell command grammar (Remove-Item/Set-Content/Out-File/Add-Content/Move-Item/Copy-Item + aliases, -Path/-Destination/positional, comma-lists, here-strings). POSIX stays byte-identical — the PS tables exclude the bash aliases, so the vocabularies never collide.

Also: diff.lua git-root reveal switched to list-form systemlist (drops the POSIX-only 2>/dev/null that misbehaves under Windows cmd).

Testing

• macOS/Linux: full suite green (shell_detect spec = 58, normaliser = 38, etc.). POSIX rows run on Unix.
• Windows CI (windows-test): now runs the whole tests/plugin dir (the old bash_detect exclusion is removed); the spec's Windows rows (real Haiku samples — comma-lists, here-strings, UNC, aliases, Move/Copy) execute there. This PR's windows-test run is the first CI validation of those rows.
• test_install.sh updated to assert the new matcher (stricter, not looser).

Docs

• ADR-0009 records the axis split (and why per-OS / Windows-branch were rejected).

Known scope / minor follow-up

• The POSIX matchers remain per-verb functions (not folded into one grammar table) — functionally meets "second grammar slots in as data"; full POSIX table refactor is out of scope (ADR-0009).
• Minor: detect_ps() also runs on Unix. Harmless for known cases (PS tables exclude bash aliases), but a Unix command whose first word is del/move/copy/etc. could yield a spurious Tier-1 indicator. Vanishingly rare; could be gated behind is_windows() in a later pass.

🤖 Generated with Claude Code