@tokmizer/plugin 0.9.57 → 0.9.58

package/dist/native/manifest.json

@@ -1,22 +1,32 @@
 {
   "darwin-arm64": {
-    "version": "0.9.57",
+    "version": "0.9.58",
     "file": "tkr-exec-darwin-arm64",
-    "sha256": "c3979c74dc1faea94b6c5e3f974c3dd34df9615ca6dd3448a28a356c51f1948f"
+    "sha256": "e50af875107c01b7a8bd892a00b7debc305d025d116d84a1fd778642eb039fec"
   },
   "darwin-x64": {
-    "version": "0.9.57",
+    "version": "0.9.58",
     "file": "tkr-exec-darwin-x64",
-    "sha256": "645abd7bf9bf7723db091de56d7aebefa5eeb4189303a1843739ab76529e6e1f"
+    "sha256": "14333667d09b4b2721d783a6294dd5c5b7a6170fd89596dbbf22588cac2d91dc"
   },
   "linux-arm64": {
-    "version": "0.9.57",
+    "version": "0.9.58",
     "file": "tkr-exec-linux-arm64",
-    "sha256": "06f615141483965cc840c9eeec3da63149daf2a09603b9390471a712124ab160"
+    "sha256": "2178af8eece9a1a3f8bb3668339cf093276db8defa8e6afb170d5d0097f30248"
   },
   "linux-x64": {
-    "version": "0.9.57",
+    "version": "0.9.58",
     "file": "tkr-exec-linux-x64",
-    "sha256": "1a8ff65bdfb5f31444c3b2df2b68cd556ca2ebfdcc21c2e89d976f15f53e5dd2"
+    "sha256": "8dbbe896fa8df2e2dfdce1ea429a5b4d140116785241b5e15c433811144701be"
+  },
+  "win32-arm64": {
+    "version": "0.9.58",
+    "file": "tkr-exec-win32-arm64.exe",
+    "sha256": "91fa46e8e512c8f212152c96547815648429bbfc382b4c625ef3eda6bd6c4737"
+  },
+  "win32-x64": {
+    "version": "0.9.58",
+    "file": "tkr-exec-win32-x64.exe",
+    "sha256": "e77522c9abebc8113a1ace6290d72d23590044932e19c7e5a119e0b635d240e8"
   }
 }

package/dist/native/single.json

@@ -0,0 +1,38 @@
+{
+  "darwin-arm64": {
+    "version": "0.9.58",
+    "package": "@tokmizer/plugin-darwin-arm64",
+    "file": "tkr",
+    "sha256": "17caa69f27d337f4eb6592f1ddc1a3272fa4c54703f474c3005fcce631e0c0f7"
+  },
+  "darwin-x64": {
+    "version": "0.9.58",
+    "package": "@tokmizer/plugin-darwin-x64",
+    "file": "tkr",
+    "sha256": "325caeb23f6bdb17a9bdddb3f15302aa150a0da26df7d985d8f1360deabfb926"
+  },
+  "linux-arm64": {
+    "version": "0.9.58",
+    "package": "@tokmizer/plugin-linux-arm64",
+    "file": "tkr",
+    "sha256": "b27429d17ef185819646c35b008e5bca6b61b33dd37412443ada4edf4b04ce93"
+  },
+  "linux-x64": {
+    "version": "0.9.58",
+    "package": "@tokmizer/plugin-linux-x64",
+    "file": "tkr",
+    "sha256": "f33976feeaa39bfc9b073fcf81d056e7a329d5ec9ceab49ff637cedada11b5bc"
+  },
+  "win32-arm64": {
+    "version": "0.9.58",
+    "package": "@tokmizer/plugin-win32-arm64",
+    "file": "tkr.exe",
+    "sha256": "b5e6ed96373bb546568cf50a16e47c0560e7af2a583b6580f25aae963a5b0987"
+  },
+  "win32-x64": {
+    "version": "0.9.58",
+    "package": "@tokmizer/plugin-win32-x64",
+    "file": "tkr.exe",
+    "sha256": "55668f0ad9f3916cb4b3cd486dd48637f879b4ae24b90d440d3e165834bda0d7"
+  }
+}

package/hooks/on-session-start.d.mts

@@ -0,0 +1 @@
+export {};

package/hooks/on-session-start.mjs

@@ -5,9 +5,13 @@ import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, rename
 import { homedir } from "node:os";
 
 const home = process.env.TOKMIZER_HOME || join(homedir(), ".tokmizer");
+const single = process.env.TOKMIZER_SINGLE_BINARY === "1";
+const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || (single ? join(dirname(process.execPath), "..", "..") : join(dirname(fileURLToPath(import.meta.url)), ".."));
+const networkOff =
+  ["0", "off", "false", "no"].includes(String(process.env.TOKMIZER_NETWORK ?? "").trim().toLowerCase()) ||
+  existsSync(join(home, "network-off"));
 
 try {
-  const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || join(dirname(fileURLToPath(import.meta.url)), "..");
   const srcDir = join(pluginRoot, "command-templates");
   const destDir = process.env.TOKMIZER_CLAUDE_COMMANDS_DIR || join(homedir(), ".claude", "commands");
   const MARKER = "managed-by: tokmizer";
@@ -30,7 +34,6 @@ try {
 } catch {}
 
 try {
-  const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || join(dirname(fileURLToPath(import.meta.url)), "..");
   const SEMVER = /^\d+\.\d+\.\d+$/;
   const self = basename(pluginRoot);
   if (SEMVER.test(self)) {
@@ -68,6 +71,22 @@ try {
   }
 } catch {}
 
+try {
+  const noticeFile = join(home, "network-notice-shown");
+  if (!networkOff && !existsSync(noticeFile)) {
+    console.log(
+      [
+        "Tokmizer contacts tokmizer.com to keep its rules up to date and to improve the product. No account or email is needed.",
+        "It sends a random install ID, your computer name, OS and CPU model, a hash of your network card address and of your user name, and the plugin version. Command contents and output are never sent.",
+        "Usage stats (command names and token counts) are sent only while they are on. Check with: tkr telemetry status.",
+        "Turn all network access off: tkr network off. Usage stats only: tkr telemetry off."
+      ].join("\n")
+    );
+    mkdirSync(home, { recursive: true });
+    writeFileSync(noticeFile, String(Date.now()));
+  }
+} catch {}
+
 try {
   const onboardFile = join(home, "onboarded");
   const shimNudge = join(home, "shim-nudge");
@@ -126,8 +145,7 @@ try {
 } catch {}
 
 try {
-  const here = dirname(fileURLToPath(import.meta.url));
-  const manifest = JSON.parse(readFileSync(join(here, "..", ".claude-plugin", "plugin.json"), "utf8"));
+  const manifest = JSON.parse(readFileSync(join(pluginRoot, ".claude-plugin", "plugin.json"), "utf8"));
   const state = JSON.parse(readFileSync(join(home, "state.json"), "utf8"));
   const latest = state.latestPluginVersion;
   if (latest && manifest.version && latest !== manifest.version) {
@@ -149,13 +167,12 @@ try {
     last = Number(readFileSync(throttleFile, "utf8")) || 0;
   } catch {}
 
-  if (existsSync(stateFile) && Date.now() - last >= THROTTLE_MS) {
+  if (!networkOff && existsSync(stateFile) && Date.now() - last >= THROTTLE_MS) {
     try {
       writeFileSync(throttleFile, String(Date.now()));
     } catch {}
-    const here = dirname(fileURLToPath(import.meta.url));
-    const tkr = join(here, "..", "dist", "bin", "tkr.js");
-    const child = spawn(process.execPath, [tkr, "heartbeat"], {
+    const args = single ? ["heartbeat"] : [join(dirname(fileURLToPath(import.meta.url)), "..", "dist", "bin", "tkr.js"), "heartbeat"];
+    const child = spawn(process.execPath, args, {
       detached: true,
       stdio: "ignore"
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokmizer/plugin",
-  "version": "0.9.57",
+  "version": "0.9.58",
   "description": "Tokmizer reduces token consumption for AI coding tools (Claude Code, Codex, Cursor, Aider, Gemini CLI, Cline, Windsurf, Copilot). Cross-OS.",
   "type": "module",
   "engines": {
@@ -12,6 +12,17 @@
     "tkr-exec": "dist/bin/tkr-exec",
     "tkr-shim": "dist/bin/tkr-shim.js",
     "tkr-codex-hook": "dist/bin/tkr-codex-hook.js",
+    "tkr-cursor-hook": "dist/bin/tkr-cursor-hook.js",
+    "tkr-gemini-hook": "dist/bin/tkr-gemini-hook.js",
+    "tkr-agent-hook": "dist/bin/tkr-agent-hook.js",
+    "tkr-copilot-hook": "dist/bin/tkr-copilot-hook.js",
+    "tkr-droid-hook": "dist/bin/tkr-droid-hook.js",
+    "tkr-trae-hook": "dist/bin/tkr-trae-hook.js",
+    "tkr-qwen-hook": "dist/bin/tkr-qwen-hook.js",
+    "tkr-crush-hook": "dist/bin/tkr-crush-hook.js",
+    "tkr-junie-hook": "dist/bin/tkr-junie-hook.js",
+    "tkr-zcode-hook": "dist/bin/tkr-zcode-hook.js",
+    "tkr-grok-hook": "dist/bin/tkr-grok-hook.js",
     "tkr-daemon": "dist/bin/tkr-daemon.js"
   },
   "files": [
@@ -20,6 +31,7 @@
     ".claude-plugin",
     "hooks",
     "command-templates",
+    "agent-plugins",
     "scripts/install-mac-linux.sh",
     "scripts/install-windows.ps1",
     "scripts/install-native.mjs",
@@ -31,7 +43,9 @@
     "build": "tsc -p tsconfig.json --noEmit && node scripts/bundle.mjs",
     "build:native": "node scripts/build-native.mjs",
     "postinstall": "node scripts/install-native.mjs",
-    "prepublishOnly": "npm run build && node scripts/check-native-artifacts.mjs && ( cd ../.. && npx vitest run packages/plugin ) && node scripts/check-prod-key.mjs && node scripts/check-version.mjs && node scripts/check-dist-clean.mjs && node scripts/check-pack-clean.mjs && node dist/bin/tkr-exec.js echo dist-smoke-ok && node dist/bin/tkr.js help > /dev/null"
+    "prepublishOnly": "npm run build && node scripts/check-native-artifacts.mjs && ( cd ../.. && npx vitest run packages/plugin ) && node scripts/check-prod-key.mjs && node scripts/check-version.mjs && node scripts/check-dist-clean.mjs && node scripts/check-pack-clean.mjs && node scripts/smoke-dist.mjs",
+    "build:single": "node scripts/build-single.mjs",
+    "pack:single": "node scripts/pack-single.mjs"
   },
   "devDependencies": {
     "@types/cross-spawn": "^6.0.6",
@@ -41,6 +55,14 @@
     "smol-toml": "^1.9.0",
     "zod": "^3.23.8"
   },
+  "optionalDependencies": {
+    "@tokmizer/plugin-darwin-arm64": "0.9.58",
+    "@tokmizer/plugin-darwin-x64": "0.9.58",
+    "@tokmizer/plugin-linux-arm64": "0.9.58",
+    "@tokmizer/plugin-linux-x64": "0.9.58",
+    "@tokmizer/plugin-win32-arm64": "0.9.58",
+    "@tokmizer/plugin-win32-x64": "0.9.58"
+  },
   "publishConfig": {
     "access": "public"
   },

package/scripts/README-INSTALL.md

@@ -2,7 +2,7 @@
 
 Tokmizer works with **Claude Code, OpenAI Codex, Cursor, Cline, Aider, Gemini CLI, Windsurf, and GitHub Copilot** — on **macOS, Linux, and Windows**.
 
-Claude Code and Codex use native hooks. Other tools can use command wrappers configured by `tkr shim install`. Node.js 20.11 or newer is required for npm installation. Tokmizer is free and requires no account.
+Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, Factory Droid, Trae, Qwen Code, Crush, Junie CLI, ZCode, Grok Build and Kilo Code use native hooks or plugins (`tkr setup-<tool>` installs them; see the table below). Other tools can use command wrappers configured by `tkr shim install`. Node.js 20.11 or newer is required for npm installation. Tokmizer is free and requires no account.
 
 ## macOS / Linux
 
@@ -35,14 +35,22 @@ brew install norwelltw/tokmizer/tokmizer && tkr shim install
 
 | Tool          | Adapter         | Setup                                                          |
 |---------------|-----------------|----------------------------------------------------------------|
-| Claude Code   | Native hooks    | `/plugin marketplace add norwelltw/Tokmizer` then `/plugin install tokmizer@tokmizer` |
+| Claude Code   | Native hooks    | `/plugin marketplace add norwelltw/Tokmizer` then `/plugin install tokmizer@tokmizer`. Without Node.js, `install.sh` runs `tkr setup-claude` for you (`tkr setup-claude --remove` undoes it) |
 | Codex CLI     | Native hook     | Install tkr (npm or brew), run `tkr setup-codex`, restart Codex, then approve in `/hooks` |
-| Cursor        | Shell-shim      | Open a new terminal after install.                             |
+| Cursor        | Native hook     | Install tkr (npm or brew), run `tkr setup-cursor`, then restart Cursor. The shell-shim keeps working without the hook. |
 | Cline         | Shell-shim      | Open a new terminal after install.                             |
 | Aider         | Shell-shim      | Open a new terminal after install.                             |
-| Gemini CLI    | Shell-shim      | Open a new terminal after install.                             |
+| Gemini CLI    | Native hook     | Install tkr (npm or brew), run `tkr setup-gemini`, then restart Gemini CLI. The shell-shim keeps working without the hook. |
 | Windsurf      | Shell-shim      | Open a new terminal after install.                             |
-| GitHub Copilot| Shell-shim      | Open a new terminal after install.                             |
+| GitHub Copilot| Native hook     | Install tkr (npm or brew), run `tkr setup-copilot`, then restart VS Code or Copilot CLI. The shell-shim keeps working without the hook. |
+| Factory Droid | Native hook     | Run `tkr setup-droid`, then restart Droid.                      |
+| Trae          | Native hook     | Run `tkr setup-trae`, then restart Trae.                        |
+| Qwen Code     | Native hook     | Run `tkr setup-qwen`, then restart Qwen Code.                   |
+| Crush         | Native hook     | Run `tkr setup-crush`, then restart Crush.                      |
+| Junie CLI     | Native hook     | Run `tkr setup-junie`, then restart Junie.                      |
+| ZCode         | Native hook     | Run `tkr setup-zcode`, then restart ZCode.                      |
+| Grok Build    | Native hook     | Run `tkr setup-grok`, then restart Grok Build (1.0.4 or newer). |
+| Kilo Code     | Plugin          | Run `tkr setup-kilo`, then restart Kilo Code.                   |
 | Plain shell   | Shell-shim      | Works out of the box.                                          |
 
 Open a new terminal after installation and run `tkr status`. If activation is pending because the service could not be reached, rerun `tkr status` when online. Connecting an account is optional: `tkr link <your-key>`.

package/scripts/install-mac-linux.sh

@@ -4,15 +4,81 @@ set -euo pipefail
 err() { printf 'tkr install: %s\n' "$*" >&2; exit 1; }
 log() { printf 'tkr: %s\n' "$*"; }
 
-command -v node >/dev/null 2>&1 || err "Node.js 20.11+ is required."
-command -v npm >/dev/null 2>&1 || err "npm is required."
-node -e 'const [major, minor] = process.versions.node.split(".").map(Number); process.exit(major > 20 || major === 20 && minor >= 11 ? 0 : 1)' || err "Node.js 20.11+ is required."
+node_ready() {
+  command -v node >/dev/null 2>&1 && command -v npm >/dev/null 2>&1 &&
+    node -e 'const [major, minor] = process.versions.node.split(".").map(Number); process.exit(major > 20 || major === 20 && minor >= 11 ? 0 : 1)' 2>/dev/null
+}
 
-log "Installing @tokmizer/plugin from npm..."
-npm install -g @tokmizer/plugin
-command -v tkr >/dev/null 2>&1 || err "tkr is not on PATH. Add the npm global bin directory to PATH and run tkr shim install."
+work=""
+
+sha256_of() {
+  if command -v sha256sum >/dev/null 2>&1; then sha256sum "$1" | cut -d' ' -f1
+  else shasum -a 256 "$1" | cut -d' ' -f1
+  fi
+}
+
+install_standalone() {
+  local os arch key base line name sum root bindir unavailable
+  unavailable="Install Node.js 20.11+ and retry."
+  case "$(uname -s)" in
+    Darwin) os=darwin ;;
+    Linux) os=linux ;;
+    *) err "No standalone build for $(uname -s). $unavailable" ;;
+  esac
+  case "$(uname -m)" in
+    arm64|aarch64) arch=arm64 ;;
+    x86_64|amd64) arch=x64 ;;
+    *) err "No standalone build for $(uname -m). $unavailable" ;;
+  esac
+  key="$os-$arch"
+  base="${TOKMIZER_DOWNLOAD_BASE:-https://github.com/norwelltw/Tokmizer/releases/latest/download}"
+  root="${TOKMIZER_INSTALL_DIR:-$HOME/.local/share/tokmizer}"
+  bindir="${TOKMIZER_BIN_DIR:-$HOME/.local/bin}"
+  command -v curl >/dev/null 2>&1 || err "curl is required."
+  command -v tar >/dev/null 2>&1 || err "tar is required."
+  work="$(mktemp -d)"
+  trap 'rm -rf "${work:-}"' EXIT
+  curl -fsSL "$base/SHA256SUMS" -o "$work/SHA256SUMS" || err "Could not download the standalone build. $unavailable"
+  line="$(grep -E "^[0-9a-f]{64}  tokmizer-[0-9][^ /]*-$key\.tar\.gz$" "$work/SHA256SUMS" | head -n 1)" || true
+  [ -n "$line" ] || err "No standalone build for $key. $unavailable"
+  sum="${line%%  *}"
+  name="${line#*  }"
+  log "Downloading $name..."
+  curl -fsSL "$base/$name" -o "$work/$name" || err "Could not download $name."
+  [ "$(sha256_of "$work/$name")" = "$sum" ] || err "Checksum mismatch for $name."
+  tar -xzf "$work/$name" -C "$work"
+  "$work/${name%.tar.gz}/dist/bin/tkr" --single-check >/dev/null 2>&1 || err "The downloaded executable does not run on this system. $unavailable"
+  mkdir -p "$root" "$bindir"
+  rm -rf "${root:?}/${name%.tar.gz}"
+  mv "$work/${name%.tar.gz}" "$root/${name%.tar.gz}"
+  ln -sfn "${name%.tar.gz}" "$root/current"
+  ln -sf "$root/current/dist/bin/tkr" "$bindir/tkr"
+  ln -sf "$root/current/dist/bin/tkr-exec" "$bindir/tkr-exec"
+  case ":$PATH:" in
+    *":$bindir:"*) ;;
+    *) PATH="$bindir:$PATH"; log "Add $bindir to your PATH." ;;
+  esac
+}
+
+claude_code_present() {
+  [ -d "${CLAUDE_CONFIG_DIR:-$HOME/.claude}" ] || command -v claude >/dev/null 2>&1
+}
+
+standalone=0
+if [ "${TOKMIZER_STANDALONE:-}" = "1" ] || ! node_ready; then
+  log "Installing the standalone tkr executable (Node.js not needed)..."
+  install_standalone
+  standalone=1
+else
+  log "Installing @tokmizer/plugin from npm..."
+  npm install -g @tokmizer/plugin
+fi
+command -v tkr >/dev/null 2>&1 || err "tkr is not on PATH. Add its directory to PATH and run tkr shim install."
 
 tkr shim install </dev/null
+if [ "$standalone" = "1" ] && claude_code_present; then
+  tkr setup-claude </dev/null || log "Could not add the Claude Code hooks. Run: tkr setup-claude"
+fi
 log "Done. Open a new terminal. Tokmizer is free and does not require an account."
 log "For Codex, also run: tkr setup-codex"
 log "Check the installation with: tkr status"

package/scripts/install-native.mjs

@@ -1,26 +1,88 @@
 import { createHash, randomUUID } from "node:crypto";
 import { execFileSync } from "node:child_process";
-import { chmodSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, linkSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { createRequire } from "node:module";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const packageDirectory = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const sessionStartCommand = '"${CLAUDE_PLUGIN_ROOT}/dist/bin/tkr-exec" --session-start';
+const windowsCommand = "${CLAUDE_PLUGIN_ROOT}/dist/bin/tkr-exec.exe";
 
-function configureHook(directory, native) {
+function sessionStartHook(hook) {
+  return hook.command === sessionStartCommand || (hook.command === windowsCommand && Array.isArray(hook.args) && hook.args.length === 1 && hook.args[0] === "--session-start");
+}
+
+function configureSessionStart(manifest, mode) {
+  const groups = manifest.hooks?.SessionStart;
+  if (!Array.isArray(groups) || groups.length === 0) return false;
+  const wanted = mode === "windows" ? { type: "command", command: windowsCommand, args: ["--session-start"], timeout: 5 } : mode === "unix" ? { type: "command", command: sessionStartCommand, timeout: 5 } : null;
+  const present = groups.flatMap((group) => (group.hooks ?? []).filter(sessionStartHook));
+  if (wanted && present.length === 1 && present[0].command === wanted.command) return false;
+  if (!wanted && present.length === 0) return false;
+  for (const group of groups) if (group.hooks) group.hooks = group.hooks.filter((hook) => !sessionStartHook(hook));
+  if (wanted) (groups[0].hooks ??= []).unshift(wanted);
+  return true;
+}
+
+const root = "${CLAUDE_PLUGIN_ROOT}";
+const knownHooks = [
+  { event: "PreToolUse", node: `node "${root}/dist/hooks-host/pre-tool-use.js"`, words: ["hook", "pre-tool-use"], flag: "--pre-tool-use" },
+  { event: "PostToolUse", node: `node "${root}/dist/hooks-host/post-tool-use.js"`, words: ["hook", "post-tool-use"], flag: "--post-tool-use" },
+  { event: "SessionStart", node: `node "${root}/hooks/on-session-start.mjs"`, words: ["hook", "session-start"] },
+  { event: "SessionStart", node: `node "${root}/dist/hooks-host/reducer-session-start.js"`, words: ["hook", "reducer-session-start"] },
+  { event: "SessionStart", node: `node "${root}/dist/hooks-host/session-recap.js"`, words: ["hook", "session-recap"] },
+  { event: "UserPromptSubmit", node: `node "${root}/dist/hooks-host/reducer-prompt-submit.js"`, words: ["hook", "reducer-prompt-submit"] },
+  { event: "Stop", node: `node "${root}/dist/hooks-host/reducer-stop.js"`, words: ["hook", "reducer-stop"] }
+];
+
+function hookForms(spec) {
+  const forms = {
+    node: { command: spec.node },
+    singleUnix: { command: `"${root}/dist/bin/tkr" ${spec.words.join(" ")}` },
+    singleWindows: { command: `${root}/dist/bin/tkr.exe`, args: spec.words }
+  };
+  if (spec.flag) {
+    forms.nativeUnix = { command: `"${root}/dist/bin/tkr-exec" ${spec.flag}` };
+    forms.nativeWindows = { command: windowsCommand, args: [spec.flag] };
+  }
+  return forms;
+}
+
+function sameArgs(left, right) {
+  return Array.isArray(left) && left.length === right.length && left.every((value, index) => value === right[index]);
+}
+
+function matchesForm(hook, form) {
+  return hook.command === form.command && (!form.args || sameArgs(hook.args, form.args));
+}
+
+function wantedForm(forms, mode, single, windows) {
+  if (forms.nativeUnix && mode === "unix") return forms.nativeUnix;
+  if (forms.nativeWindows && mode === "windows") return forms.nativeWindows;
+  if (single) return windows ? forms.singleWindows : forms.singleUnix;
+  return forms.node;
+}
+
+function configureHook(directory, mode, single = false, windows = mode === "windows") {
   const path = join(directory, "hooks", "hooks.json");
   let manifest;
   try { manifest = JSON.parse(readFileSync(path, "utf8")); } catch { return; }
-  const nodeCommand = 'node "${CLAUDE_PLUGIN_ROOT}/dist/hooks-host/pre-tool-use.js"';
-  const nativeCommand = '"${CLAUDE_PLUGIN_ROOT}/dist/bin/tkr-exec" --pre-tool-use';
-  let changed = false;
-  for (const group of manifest.hooks?.PreToolUse ?? []) {
-    for (const hook of group.hooks ?? []) {
-      if (hook.command !== nodeCommand && hook.command !== nativeCommand) continue;
-      const command = native ? nativeCommand : nodeCommand;
-      if (hook.command !== command) { hook.command = command; changed = true; }
+  const before = JSON.stringify(manifest);
+  configureSessionStart(manifest, mode);
+  for (const spec of knownHooks) {
+    const forms = hookForms(spec);
+    const wanted = wantedForm(forms, mode, single, windows);
+    for (const group of manifest.hooks?.[spec.event] ?? []) {
+      for (const hook of group.hooks ?? []) {
+        if (!Object.values(forms).some((form) => matchesForm(hook, form))) continue;
+        hook.command = wanted.command;
+        if (wanted.args) hook.args = [...wanted.args];
+        else delete hook.args;
+      }
     }
   }
-  if (!changed) return;
+  if (JSON.stringify(manifest) === before) return;
   const temporary = `${path}.${randomUUID()}.tmp`;
   try {
     writeFileSync(temporary, JSON.stringify(manifest, null, 2) + "\n", { flag: "wx", mode: 0o644 });
@@ -30,37 +92,114 @@ function configureHook(directory, native) {
   }
 }
 
-export function installNative(directory = packageDirectory, platform = process.platform, arch = process.arch) {
-  const target = join(directory, "dist", "bin", "tkr-exec");
+function singlePath(directory, platform) {
+  return join(directory, "dist", "bin", platform === "win32" ? "tkr.exe" : "tkr");
+}
+
+function probeSingle(path, version) {
+  try {
+    return execFileSync(path, ["--single-check"], { encoding: "utf8", timeout: 5000, maxBuffer: 1024, stdio: ["ignore", "pipe", "ignore"], windowsHide: true }).trim() === `tokmizer-single ${version}`;
+  } catch {
+    return false;
+  }
+}
+
+function packageVersion(directory) {
+  return JSON.parse(readFileSync(join(directory, "package.json"), "utf8")).version;
+}
+
+export function singleInstalled(directory = packageDirectory, platform = process.platform) {
+  if (process.env.TOKMIZER_SINGLE_EXEC === "0") return false;
+  const path = singlePath(directory, platform);
+  try {
+    return existsSync(path) && probeSingle(path, packageVersion(directory));
+  } catch {
+    return false;
+  }
+}
+
+export function installSingle(directory = packageDirectory, platform = process.platform, arch = process.arch) {
+  const target = singlePath(directory, platform);
   const temporary = `${target}.${randomUUID()}.tmp`;
-  const replace = (bytes) => {
-    writeFileSync(temporary, bytes, { flag: "wx", mode: 0o755 });
+  const discard = () => {
+    try { rmSync(target, { force: true }); } catch {}
+    return false;
+  };
+  try {
+    if (process.env.TOKMIZER_SINGLE_EXEC === "0" || !["darwin", "linux", "win32"].includes(platform) || !["arm64", "x64"].includes(arch)) return discard();
+    const version = packageVersion(directory);
+    const key = `${platform}-${arch}`;
+    const entry = JSON.parse(readFileSync(join(directory, "dist", "native", "single.json"), "utf8"))[key];
+    if (!entry || entry.version !== version || entry.package !== `@tokmizer/plugin-${key}` || entry.file !== (platform === "win32" ? "tkr.exe" : "tkr") || !/^[0-9a-f]{64}$/.test(entry.sha256)) return discard();
+    const source = join(dirname(createRequire(join(directory, "package.json")).resolve(`${entry.package}/package.json`)), entry.file);
+    const bytes = readFileSync(source);
+    if (createHash("sha256").update(bytes).digest("hex") !== entry.sha256) return discard();
+    try { chmodSync(source, 0o755); } catch {}
+    if (!probeSingle(source, version)) return discard();
+    try {
+      linkSync(source, temporary);
+    } catch {
+      writeFileSync(temporary, bytes, { flag: "wx", mode: 0o755 });
+    }
     chmodSync(temporary, 0o755);
+    if (createHash("sha256").update(readFileSync(temporary)).digest("hex") !== entry.sha256) return discard();
     renameSync(temporary, target);
+    return probeSingle(target, version) || discard();
+  } catch {
+    return discard();
+  } finally {
+    try { rmSync(temporary, { force: true }); } catch {}
+  }
+}
+
+export function installNative(directory = packageDirectory, platform = process.platform, arch = process.arch, single = singleInstalled(directory, platform)) {
+  const windows = platform === "win32";
+  const launcher = join(directory, "dist", "bin", "tkr-exec");
+  const target = windows ? `${launcher}.exe` : launcher;
+  const temporaries = [];
+  const replace = (destination, bytes) => {
+    const temporary = `${destination}.${randomUUID()}.tmp`;
+    temporaries.push(temporary);
+    writeFileSync(temporary, bytes, { flag: "wx", mode: 0o755 });
+    chmodSync(temporary, 0o755);
+    renameSync(temporary, destination);
   };
   try {
-    configureHook(directory, false);
-    replace(readFileSync(join(directory, "dist", "bin", "tkr-exec.js")));
-    if (process.env.TOKMIZER_NATIVE_EXEC === "0" || !["darwin", "linux"].includes(platform) || !["arm64", "x64"].includes(arch)) return false;
+    configureHook(directory, "node", single, windows);
+    replace(launcher, readFileSync(join(directory, "dist", "bin", "tkr-exec.js")));
+    if (windows) rmSync(target, { force: true });
+    if (process.env.TOKMIZER_NATIVE_EXEC === "0" || !["darwin", "linux", "win32"].includes(platform) || !["arm64", "x64"].includes(arch)) return false;
     const { version } = JSON.parse(readFileSync(join(directory, "package.json"), "utf8"));
     const manifest = JSON.parse(readFileSync(join(directory, "dist", "native", "manifest.json"), "utf8"));
     const key = `${platform}-${arch}`;
     const entry = manifest[key];
-    if (!entry || entry.version !== version || entry.file !== `tkr-exec-${key}` || !/^[0-9a-f]{64}$/.test(entry.sha256)) return false;
+    if (!entry || entry.version !== version || entry.file !== `tkr-exec-${key}${windows ? ".exe" : ""}` || !/^[0-9a-f]{64}$/.test(entry.sha256)) return false;
     const source = join(directory, "dist", "native", entry.file);
     const bytes = readFileSync(source);
     if (createHash("sha256").update(bytes).digest("hex") !== entry.sha256) return false;
     chmodSync(source, 0o755);
-    const probe = execFileSync(source, ["--native-check"], { encoding: "utf8", timeout: 2000, maxBuffer: 1024, stdio: ["ignore", "pipe", "ignore"] });
-    if (probe.trim() !== `tokmizer-native ${version} protocol=2`) return false;
-    replace(bytes);
-    configureHook(directory, true);
+    const probe = (path) => execFileSync(path, ["--native-check"], { encoding: "utf8", timeout: 2000, maxBuffer: 1024, stdio: ["ignore", "pipe", "ignore"], windowsHide: true }).trim() === `tokmizer-native ${version} protocol=2`;
+    if (!probe(source)) return false;
+    replace(target, bytes);
+    let installed = false;
+    try { installed = probe(target); } catch {}
+    if (!installed) {
+      if (windows) rmSync(target, { force: true });
+      else replace(launcher, readFileSync(join(directory, "dist", "bin", "tkr-exec.js")));
+      return false;
+    }
+    configureHook(directory, windows ? "windows" : "unix", single, windows);
     return true;
   } catch {
     return false;
   } finally {
-    try { rmSync(temporary, { force: true }); } catch {}
+    for (const temporary of temporaries) {
+      try { rmSync(temporary, { force: true }); } catch {}
+    }
   }
 }
 
-if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) installNative();
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  installSingle();
+  installNative();
+}