From 1b1e4d16d2c4f16b109f7ec261d502a3ff0c1d9b Mon Sep 17 00:00:00 2001
From: Akash Goenka <akash.goenka@rocketmail.com>
Date: Tue, 11 Aug 2026 11:04:30 +0530
Subject: [PATCH] release: 2.2.18
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Windows windowsHide fix (#149, #151) — see CHANGELOG.md.
---
 CHANGELOG.md      | 14 ++++++++++++++
 package-lock.json |  4 ++--
 package.json      |  2 +-
 server.json       |  4 ++--
 4 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5056fc9..5076a1b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.18] - 2026-08-11
+
+### Fixed
+- **Windows: every `child_process` spawn was missing `windowsHide`, so the daemon (and any hook
+  spawned by Claude Code/Cursor/Codex) flashed a visible console/terminal window constantly.**
+  Reported and first patched by [@lnorton89](https://github.com/lnorton89) (7 sites: `keeper.js`
+  self-relaunch, `git`/ripgrep probes, the notebook viewer's browser-open call). This release adds
+  `windowsHide: true` to 4 more sites in `src/indexer/git.ts` (high-frequency: fires on every
+  keeper cache save/reconcile) and ~13 more across `hooks/*.mjs` (the recall/nudge/elicit hooks
+  shipped by `coldstart init`), found via an exhaustive audit of every `execFile`/`execFileSync`/
+  `spawn` call site. A permanent static test (`tests/windows-hide-coverage.test.ts`) now guards
+  against any future call site reintroducing the gap. Verified on a real `windows-latest` CI
+  runner (daemon/CLI shape) and on real Windows 11 hardware (hooks shape). (#149, #151)
+
 ## [2.2.17] - 2026-08-08
 
 ### Changed
diff --git a/package-lock.json b/package-lock.json
index 1b26920..ea6bdf4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@cstart/coldstart",
-  "version": "2.2.17",
+  "version": "2.2.18",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@cstart/coldstart",
-      "version": "2.2.17",
+      "version": "2.2.18",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",
diff --git a/package.json b/package.json
index c38f69c..e2ff689 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cstart/coldstart",
-  "version": "2.2.17",
+  "version": "2.2.18",
   "mcpName": "io.github.AkashGoenka/coldstart",
   "publishConfig": {
     "access": "public"
diff --git a/server.json b/server.json
index 0e01617..89cb044 100644
--- a/server.json
+++ b/server.json
@@ -7,7 +7,7 @@
     "url": "https://github.com/AkashGoenka/coldstart",
     "source": "github"
   },
-  "version": "2.2.17",
+  "version": "2.2.18",
   "websiteUrl": "https://coldstartmcp.dev/",
   "icons": [
     {
@@ -21,7 +21,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@cstart/coldstart",
-      "version": "2.2.17",
+      "version": "2.2.18",
       "transport": {
         "type": "stdio"
       }