Merge chore/hardening-coverage: 0.1.1 — install fix + coverage hardening

Author: cballou

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "session-cost",
   "displayName": "Session Cost Tracker",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Track estimated per-session Claude Code spend, report it with /session-cost:report, and optionally enforce soft/hard budget limits from ~/.claude/budgets.json",
   "author": {
     "name": "OpenSea",
@@ -15,6 +15,5 @@
     "budget",
     "tracking",
     "usage"
-  ],
-  "hooks": "./hooks/hooks.json"
+  ]
 }

.covboot/sitecustomize.py

@@ -0,0 +1,2 @@
+import coverage
+coverage.process_startup()

.coverage

@@ -0,0 +1,8 @@
+[run]
+branch = True
+parallel = True
+source = scripts
+
+[report]
+precision = 1
+show_missing = True

.coveragerc

@@ -19,3 +19,9 @@ Initial release.
 - Team totals via `CLAUDE_TEAM_NAME`.
 - Pricing table: Fable 5, Opus 4.5–4.8, Sonnet 4.5/4.6, Haiku 4.5
   (Anthropic published rates, 2026).
+
+## 0.1.1 — 2026-06-10
+
+- Fix: remove duplicate `hooks` declaration from plugin.json — `hooks/hooks.json`
+  is auto-loaded by convention and redeclaring it fails plugin load with
+  "Duplicate hooks file detected". Caught by live install verification.

CHANGELOG.md

@@ -65,7 +65,9 @@ def _parse_transcript_delta(path, offset, seen_ids):
             continue
         if not isinstance(entry, dict) or entry.get("type") != "assistant":
             continue
-        message = entry.get("message") or {}
+        message = entry.get("message")
+        if not isinstance(message, dict):
+            continue
         usage = message.get("usage")
         if not isinstance(usage, dict):
             continue

scripts/cost-track.py

@@ -104,7 +104,7 @@ def session_report(session_id, cost_dir, budgets_path=DEFAULT_BUDGETS_PATH, proj
     """Build a spend report dict for one session, or None if unreadable."""
     cost_file = os.path.join(cost_dir, f"{_COST_PREFIX}{session_id}.json")
     data = _load_json(cost_file)
-    if not data:
+    if not isinstance(data, dict) or not data:
         return None
 
     total = data.get("total_estimated_usd", 0)

scripts/session-cost.py

@@ -147,6 +147,26 @@ def test_team_hard_limit_blocks(self, env):
         assert r.returncode == 2
         assert "alpha" in r.stderr
 
+    def test_team_soft_limit_warns(self, env):
+        env.write_budgets({"default": {"team_soft_limit_usd": 5.0}})
+        env.write_cost("sess-1", 3.0, team_name="alpha")
+        env.write_cost("sess-2", 3.0, team_name="alpha")
+        r = env.run(hook_input(), CLAUDE_TEAM_NAME="alpha")
+        assert r.returncode == 0
+        out = json.loads(r.stdout)
+        assert "alpha" in out["systemMessage"]
+        assert "$6.00" in out["systemMessage"]
+
+    def test_team_name_falls_back_to_cost_file(self, env):
+        """When CLAUDE_TEAM_NAME isn't in the env, the session's own cost
+        file team_name still drives team enforcement."""
+        env.write_budgets({"default": {"team_hard_limit_usd": 5.0}})
+        env.write_cost("sess-1", 3.0, team_name="alpha")
+        env.write_cost("sess-2", 3.0, team_name="alpha")
+        r = env.run(hook_input())  # no CLAUDE_TEAM_NAME
+        assert r.returncode == 2
+        assert "alpha" in r.stderr
+
 
 class TestFailOpen:
     def test_malformed_stdin_allows(self, env):

tests/test_budget_guard.py

@@ -18,10 +18,21 @@ def test_parses_and_has_required_fields(self):
         assert manifest["version"]
         assert manifest["license"] == "MIT"
 
-    def test_hooks_path_exists(self):
+    def test_default_hooks_file_exists(self):
+        assert (ROOT / "hooks" / "hooks.json").exists()
+
+    def test_manifest_does_not_redeclare_default_hooks(self):
+        """hooks/hooks.json is auto-loaded by convention; declaring it again
+        in plugin.json makes Claude Code load it twice and fail at install
+        ('Duplicate hooks file detected'). manifest.hooks is only for
+        ADDITIONAL hook files."""
         manifest = load(".claude-plugin/plugin.json")
-        hooks_rel = manifest.get("hooks", "./hooks/hooks.json")
-        assert (ROOT / hooks_rel).exists()
+        hooks = manifest.get("hooks")
+        if hooks is not None:
+            paths = [hooks] if isinstance(hooks, str) else hooks
+            assert all(
+                p.lstrip("./") != "hooks/hooks.json" for p in paths if isinstance(p, str)
+            )
 
 
 class TestHooksJson:

tests/test_plugin_manifests.py

@@ -129,6 +129,12 @@ def test_missing_or_malformed_returns_none(self, cost_env):
         (cost_env.cost_dir / "claude-cost-bad.json").write_text("{x")
         assert self.report(cost_env, "bad") is None
 
+    def test_non_dict_cost_file_returns_none(self, cost_env):
+        (cost_env.cost_dir / "claude-cost-listy.json").write_text("[1, 2]")
+        assert self.report(cost_env, "listy") is None
+        (cost_env.cost_dir / "claude-cost-str.json").write_text('"hello"')
+        assert self.report(cost_env, "str") is None
+
     def test_malformed_budgets_still_reports(self, cost_env):
         cost_env.budgets_path.write_text("{broken")
         cost_env.write_cost("s1", 1.5)