token-goat 2.6.23 → 2.6.24

package/README.md

@@ -403,11 +403,11 @@ This writes `.pi/extensions/token-goat.ts` in the current project only. Remove i
 token-goat install --copilot
 ```
 
-The `--copilot` flag patches Claude Code and registers a Copilot CLI hook config: `~/.copilot/hooks/token-goat.json` (a `{ version, hooks }` file registering `preToolUse`, `postToolUse`, `preCompact`, `agentStop`, `subagentStop`, and `userPromptSubmitted`, per Copilot's own [hooks reference](https://docs.github.com/en/copilot/reference/hooks-reference)) plus the shim script it points at, `~/.copilot/hooks/token-goat-shim.js`. Unlike Codex, Copilot's event names and response schema (`permissionDecision`/`modifiedArgs` for `preToolUse`, `modifiedResult`/`additionalContext` for `postToolUse`, `decision`/`reason` for `agentStop`/`subagentStop`) genuinely differ from Claude Code's, so the shim translates rather than passes through.
+The `--copilot` flag patches Claude Code and registers a Copilot CLI hook config: `~/.copilot/hooks/token-goat.json` (a `{ version, hooks }` file registering `sessionStart`, `preToolUse`, `postToolUse`, `preCompact`, `agentStop`, `subagentStop`, and `userPromptSubmitted`, per Copilot's own [hooks reference](https://docs.github.com/en/copilot/reference/hooks-reference)) plus the shim script it points at, `~/.copilot/hooks/token-goat-shim.js`. Unlike Codex, Copilot's event names and response schema (`permissionDecision`/`modifiedArgs` for `preToolUse`, `modifiedResult`/`additionalContext` for `postToolUse`, `decision`/`reason` for `agentStop`/`subagentStop`) genuinely differ from Claude Code's, so the shim translates rather than passes through.
 
-What works: **bash output compression and re-read denial** (`preToolUse` returns `modifiedArgs` or `permissionDecision: "deny"`), **image shrinking and post-edit indexing** (`postToolUse` returns `additionalContext`), and **stop-hallucination logging** (`agentStop`/`subagentStop` map a token-goat `deny` onto `decision: "block"`, everything else onto `decision: "allow"`). `preCompact` and `userPromptSubmitted` are notification-only on real Copilot CLI, per its docs: Copilot never reads a response body for either, so token-goat's compaction manifest and prompt-context hints have no surfacing channel there. The shim still calls through for both so token-goat's internal side effects keep running, but nothing gets injected back into the agent. Copilot's built-in tool names (`view`, `edit`, `create`, `bash`/`powershell`, `web_fetch`, `grep`, `glob`, `memory`, and MCP-server calls) are remapped onto token-goat's internal names where a clear match exists (`view`→Read, `edit`→Edit, `create`→Write, `bash`/`powershell`→Bash, `web_fetch`→WebFetch, `grep`→Grep, `glob`→Glob); `memory`, `task`, `ask_user`, and MCP tool calls pass through unmapped and simply no-op.
+What works: **the command-routing reminder** (`sessionStart` returns `additionalContext`, so Copilot is told token-goat exists before it picks its first read tool — this is the one channel that lands ahead of that decision), **bash output compression and re-read denial** (`preToolUse` returns `modifiedArgs` or `permissionDecision: "deny"`), **image shrinking and post-edit indexing** (`postToolUse` returns `additionalContext`), and **stop-hallucination logging** (`agentStop`/`subagentStop` map a token-goat `deny` onto `decision: "block"`, everything else onto `decision: "allow"`). `preCompact` and `userPromptSubmitted` are notification-only on real Copilot CLI, per its docs: Copilot never reads a response body for either, so token-goat's compaction manifest and prompt-context hints have no surfacing channel there. The shim still calls through for both so token-goat's internal side effects keep running, but nothing gets injected back into the agent. Copilot's built-in tool names (`view`, `edit`, `create`, `bash`/`powershell`, `web_fetch`, `grep`, `glob`, `memory`, and MCP-server calls) are remapped onto token-goat's internal names where a clear match exists (`view`→Read, `edit`→Edit, `create`→Write, `bash`/`powershell`→Bash, `web_fetch`→WebFetch, `grep`→Grep, `glob`→Glob); `memory`, `task`, `ask_user`, and MCP tool calls pass through unmapped and simply no-op.
 
-No ambient environment variable documents "this process is running under Copilot CLI" the way Codex/opencode set one, so the shim sets `TOKEN_GOAT_HARNESS_OVERRIDE=copilot_cli` itself before calling `token-goat hook` (same workaround `--pi` uses). Install also writes a token-goat routing block into `~/.copilot/copilot-instructions.md` (the same delimited-block gate written to `~/.claude/CLAUDE.md` and `~/.codex/AGENTS.md`), merged idempotently so any hand-written content outside the markers is preserved byte-for-byte. To install for one project instead of user scope: `token-goat install --copilot --local` (writes `.github/hooks/token-goat.json` and `.github/copilot-instructions.md` in the current project). To remove: `token-goat uninstall --copilot`.
+No ambient environment variable documents "this process is running under Copilot CLI" the way Codex/opencode set one, so the shim sets `TOKEN_GOAT_HARNESS_OVERRIDE=copilot_cli` itself before calling `token-goat hook` (same workaround `--pi` uses). Install also writes a token-goat routing block into `~/.copilot/copilot-instructions.md` (the same delimited-block gate written to `~/.claude/CLAUDE.md` and `~/.codex/AGENTS.md`), merged idempotently so any hand-written content outside the markers is preserved byte-for-byte. If you set `COPILOT_HOME`, install follows it — hooks go to `$COPILOT_HOME/hooks/` and the routing block to `$COPILOT_HOME/copilot-instructions.md`, matching where Copilot CLI actually reads them. To install for one project instead of user scope: `token-goat install --copilot --local` (writes `.github/hooks/token-goat.json` and `.github/copilot-instructions.md` in the current project). To remove: `token-goat uninstall --copilot`.
 
 **If Copilot CLI starts denying every tool call with `Denied by preToolUse hook ... (hook errored)`:** this is Copilot's own fail-closed behavior for a `preToolUse` hook that crashes, exits non-zero, or returns unparseable output -- it isn't limited to token-goat's own tool calls, since a fail-closed `preToolUse` hook blocks the whole session. Copilot caches hook configs at session start, so **renaming or reinstalling the hook mid-session has no effect** -- the only recovery is: run `token-goat install --copilot` (or `token-goat doctor`, which now checks the installed hook end-to-end and calls out a stale node-binary path from an nvm/fnm/volta upgrade specifically), then **fully restart Copilot CLI**.
 

package/dist/token-goat-hook.mjs

@@ -49,7 +49,7 @@ var init_define_import_meta_env = __esm({
 import { createRequire } from "node:module";
 function resolveVersion() {
   if (true) {
-    return "2.6.23";
+    return "2.6.24";
   }
   const require2 = createRequire(import.meta.url);
   const pkg = require2("../package.json");
@@ -1464,8 +1464,8 @@ function normalizeDarwinSystemAlias(p) {
 }
 function resolveIndexPath(file2, base = process.cwd()) {
   const isWindowsAbsolute = (s) => /^[a-zA-Z]:[/\\]/.test(s);
-  const resolve24 = isWindowsAbsolute(file2) || isWindowsAbsolute(base) ? path2.win32.resolve : path2.resolve;
-  return normalizePath(resolve24(base, file2));
+  const resolve25 = isWindowsAbsolute(file2) || isWindowsAbsolute(base) ? path2.win32.resolve : path2.resolve;
+  return normalizePath(resolve25(base, file2));
 }
 function toDisplayPath(root, target) {
   if (root === void 0) return target;
@@ -2653,14 +2653,23 @@ const path = require('node:path')
 const { pathToFileURL } = require('node:url')
 
 // Copilot event name -> token-goat internal HookEventName (src/types.ts's
-// HOOK_EVENTS). Only these six have a token-goat handler; every other real
+// HOOK_EVENTS). Only these seven have a token-goat handler; every other real
 // Copilot event (sessionEnd, postToolUseFailure, subagentStart,
 // errorOccurred, notification, permissionRequest) is left unimplemented
 // rather than guessed at, and falls through to the default no-op below.
-// 'sessionStart' is handled as a permanent no-op even though it's a real
-// Copilot event, because token-goat has no internal session_start handler
-// (mirrors PI_EXTENSION_SCRIPT's documented precedent).
+// 'sessionStart' was previously a permanent no-op on the stated grounds that
+// token-goat has no internal session_start handler. That was simply wrong --
+// hooks_session_start.ts has long emitted the command-routing reminder that
+// every other harness receives -- and the no-op was the reason Copilot CLI
+// sessions alone never got told token-goat exists. It is wired now: verified
+// against Copilot CLI 1.0.77 that a hooks.json sessionStart entry returning
+// {additionalContext} does reach the model. The github/copilot-cli#2142
+// fire-and-forget bug that would have made this dead wiring was fixed in a
+// pre-release months before that version, and its companion multi-extension
+// hook-overwrite bug never applied here: it hit runtime *extension* hooks,
+// while this config-file hooks.json path goes through Copilot's own merge.
 const COPILOT_TO_TG_EVENT = {
+  sessionStart: 'session_start',
   preToolUse: 'pre_tool_use',
   postToolUse: 'post_tool_use',
   preCompact: 'pre_compact',
@@ -2772,11 +2781,6 @@ async function tryInProcess(entryPath, tgEvent, canonical) {
 async function main() {
   const copilotEvent = process.argv[2] || ''
 
-  if (copilotEvent === 'sessionStart') {
-    process.stdout.write('{}')
-    return
-  }
-
   const tgEvent = COPILOT_TO_TG_EVENT[copilotEvent]
   if (!tgEvent) {
     process.stdout.write('{}')
@@ -2902,7 +2906,10 @@ function translate(copilotEvent, resp) {
     return {}
   }
 
-  if (copilotEvent === 'postToolUse') {
+  if (copilotEvent === 'postToolUse' || copilotEvent === 'sessionStart') {
+    // Both surface token-goat's context through the same field. sessionStart is
+    // the one channel that reaches the model before it picks its first read
+    // tool, so this is where the routing reminder has to land.
     const context = extractContext(resp)
     if (context) return { additionalContext: context }
     return {}
@@ -2926,9 +2933,8 @@ function translate(copilotEvent, resp) {
   // doc that both are notification-only -- Copilot never reads a response
   // body for either, so any additionalContext/systemMessage token-goat
   // produces has no surfacing channel here. This still routes through the
-  // token-goat hook call above (unlike sessionStart's early no-op) so the
-  // internal handler's own side effects keep running; only the response is
-  // discarded.
+  // token-goat hook call above so the internal handler's own side effects keep
+  // running; only the response is discarded.
   return {}
 }
 
@@ -2968,8 +2974,13 @@ main()
 import * as fs4 from "node:fs";
 import * as os4 from "node:os";
 import * as path6 from "node:path";
+function copilotCliUserRoot() {
+  const override = process.env["COPILOT_HOME"];
+  if (override !== void 0 && override.trim() !== "") return path6.resolve(override);
+  return path6.join(os4.homedir(), ".copilot");
+}
 function copilotCliUserHooksDir() {
-  return path6.join(os4.homedir(), ".copilot", "hooks");
+  return path6.join(copilotCliUserRoot(), "hooks");
 }
 function copilotCliProjectHooksDir() {
   return path6.join(process.cwd(), ".github", "hooks");
@@ -3074,6 +3085,7 @@ var init_copilot_cli_install = __esm({
     init_copilot_cli();
     init_guidance_block();
     COPILOT_CLI_HOOK_EVENTS = [
+      "sessionStart",
       "preToolUse",
       "postToolUse",
       "preCompact",
@@ -11510,16 +11522,16 @@ var init_file_type_handler = __esm({
 
 // src/skill_cache.ts
 import * as fs16 from "fs/promises";
-import { resolve as resolve7 } from "path";
+import { resolve as resolve8 } from "path";
 import { homedir as homedir7 } from "os";
 import { readdirSync as readdirSync8, readFileSync as readFileSync12, existsSync as existsSync14, statSync as statSync7, unlinkSync as unlinkSync9 } from "node:fs";
 function skillOutputsDir() {
   if (_skillOutputsDirOverride) return _skillOutputsDirOverride;
-  return resolve7(dataDir(), SKILLS_OUTPUT_SUBDIR);
+  return resolve8(dataDir(), SKILLS_OUTPUT_SUBDIR);
 }
 function skillsSourceDir() {
   if (_skillsSourceDirOverride) return _skillsSourceDirOverride;
-  return resolve7(homedir7(), ".claude", "skills");
+  return resolve8(homedir7(), ".claude", "skills");
 }
 async function ensureSkillsDir() {
   try {
@@ -11662,7 +11674,7 @@ async function listOutputs() {
         continue;
       }
       try {
-        const content = await fs16.readFile(resolve7(dir, entry.name), "utf-8");
+        const content = await fs16.readFile(resolve8(dir, entry.name), "utf-8");
         const meta3 = JSON.parse(content);
         metas.push(meta3);
       } catch {
@@ -11696,7 +11708,7 @@ async function findCrossSessionEntry(skillName, contentSha) {
         continue;
       }
       const dir = skillOutputsDir();
-      const bodyPath = resolve7(dir, `${meta3.outputId}.txt`);
+      const bodyPath = resolve8(dir, `${meta3.outputId}.txt`);
       try {
         const bodyExists = await fs16.access(bodyPath).then(() => true).catch(() => false);
         if (bodyExists) {
@@ -11751,7 +11763,7 @@ async function storeOutput(sessionId, skillName, body, opts) {
       const truncBuf = buf.slice(truncStart);
       storedBody = truncBuf.toString("utf-8");
     }
-    await atomicWriteText(resolve7(dir, `${outId}.txt`), storedBody);
+    await atomicWriteText(resolve8(dir, `${outId}.txt`), storedBody);
     const meta3 = {
       outputId: outId,
       skillName: name2,
@@ -11761,7 +11773,7 @@ async function storeOutput(sessionId, skillName, body, opts) {
       truncated,
       sourcePath: opts?.sourcePath || ""
     };
-    await atomicWriteText(resolve7(dir, `${outId}.meta`), JSON.stringify(meta3, null, 2));
+    await atomicWriteText(resolve8(dir, `${outId}.meta`), JSON.stringify(meta3, null, 2));
     pruneSkillOutputs();
     return meta3;
   } catch {
@@ -11781,7 +11793,7 @@ async function storeCompact(sessionId, skillName, compactText, sourceSha) {
       text = `<!-- source_sha: ${sourceSha.slice(0, 12)} -->
 ${text}`;
     }
-    await atomicWriteText(resolve7(dir, fileId), text);
+    await atomicWriteText(resolve8(dir, fileId), text);
   } catch {
   }
 }
@@ -11801,7 +11813,7 @@ function getCompactAnySessionSync(skillName) {
     for (const entry of entries) {
       if (!matchesCompactSuffix(entry.name, entry.isFile(), suffix)) continue;
       try {
-        const text = readFileSync12(resolve7(dir, entry.name), "utf-8");
+        const text = readFileSync12(resolve8(dir, entry.name), "utf-8");
         if (text.trim()) return text;
       } catch {
         continue;
@@ -11829,7 +11841,7 @@ async function readSkillHits(skillName) {
     const name2 = safeSkillName(skillName);
     if (!name2) return { count: 0, lastTs: 0 };
     const dir = skillOutputsDir();
-    const hitsFile = resolve7(dir, `${sanitizeSkillId(name2)}.hits`);
+    const hitsFile = resolve8(dir, `${sanitizeSkillId(name2)}.hits`);
     const content = await fs16.readFile(hitsFile, "utf-8").catch(() => null);
     if (content) {
       const parsed = JSON.parse(content);
@@ -11879,7 +11891,7 @@ async function incrementSkillHit(skillName) {
     if (!name2) return;
     await ensureSkillsDir();
     const dir = skillOutputsDir();
-    const hitsFile = resolve7(dir, `${sanitizeSkillId(name2)}.hits`);
+    const hitsFile = resolve8(dir, `${sanitizeSkillId(name2)}.hits`);
     const lockPath = `${hitsFile}.lock`;
     await runExclusiveInProcess(lockPath, async () => {
       const locked = await acquireSkillHitLock(lockPath);
@@ -11926,14 +11938,14 @@ async function listSkills(sessionId) {
       let compactLen = 0;
       let compactText = "";
       try {
-        const stat2 = await fs16.stat(resolve7(dir, compactFileId));
+        const stat2 = await fs16.stat(resolve8(dir, compactFileId));
         compactLen = stat2.size;
-        compactText = await fs16.readFile(resolve7(dir, compactFileId), "utf-8").catch(() => "");
+        compactText = await fs16.readFile(resolve8(dir, compactFileId), "utf-8").catch(() => "");
       } catch {
         compactLen = 0;
       }
       const hasMarker = extractCompactFromMarker(
-        await fs16.readFile(resolve7(dir, `${meta3.outputId}.txt`), "utf-8").catch(() => "")
+        await fs16.readFile(resolve8(dir, `${meta3.outputId}.txt`), "utf-8").catch(() => "")
       ) !== null;
       const compactStale = isCompactStale(compactText, meta3.skillName, meta3.contentSha);
       const { count: hitCount } = await readSkillHits(meta3.skillName);
@@ -11969,7 +11981,7 @@ async function getSkillFilePath(skillName) {
   }
 }
 async function resolvePluginSkillPath(pluginName, skillSlug) {
-  const manifestPath = _pluginsManifestPathOverride ?? resolve7(homedir7(), ".claude", "plugins", "installed_plugins.json");
+  const manifestPath = _pluginsManifestPathOverride ?? resolve8(homedir7(), ".claude", "plugins", "installed_plugins.json");
   let raw;
   try {
     raw = await fs16.readFile(manifestPath, "utf8");
@@ -11992,7 +12004,7 @@ async function resolvePluginSkillPath(pluginName, skillSlug) {
       if (typeof entry !== "object" || entry === null) continue;
       const installPath = entry["installPath"];
       if (typeof installPath !== "string" || installPath === "") continue;
-      const diskPath = resolve7(installPath, "skills", skillSlug, "SKILL.md");
+      const diskPath = resolve8(installPath, "skills", skillSlug, "SKILL.md");
       try {
         await fs16.access(diskPath);
         return diskPath;
@@ -12011,7 +12023,7 @@ async function installedSkillPath(skillName) {
     const pluginPath = await resolvePluginSkillPath(name2.slice(0, colonIdx), name2.slice(colonIdx + 1));
     if (pluginPath !== null) return pluginPath;
   }
-  const diskPath = resolve7(skillsSourceDir(), name2, "SKILL.md");
+  const diskPath = resolve8(skillsSourceDir(), name2, "SKILL.md");
   try {
     await fs16.access(diskPath);
     return diskPath;
@@ -12031,11 +12043,11 @@ function pruneSkillOutputs(maxCount = DEFAULT_MAX_COUNT, maxAgeMs = DEFAULT_MAX_
       const outputId = file2.slice(0, -".meta".length);
       let ts;
       try {
-        const parsed = JSON.parse(readFileSync12(resolve7(dir, file2), "utf-8"));
+        const parsed = JSON.parse(readFileSync12(resolve8(dir, file2), "utf-8"));
         ts = parsed.ts;
       } catch {
         try {
-          ts = statSync7(resolve7(dir, file2)).mtimeMs;
+          ts = statSync7(resolve8(dir, file2)).mtimeMs;
         } catch {
           continue;
         }
@@ -12045,7 +12057,7 @@ function pruneSkillOutputs(maxCount = DEFAULT_MAX_COUNT, maxAgeMs = DEFAULT_MAX_
     const removeEntry = (outputId) => {
       for (const ext2 of [".meta", ".txt"]) {
         try {
-          unlinkSync9(resolve7(dir, `${outputId}${ext2}`));
+          unlinkSync9(resolve8(dir, `${outputId}${ext2}`));
         } catch {
         }
       }
@@ -12159,7 +12171,7 @@ async function ocrImage(input) {
   if (_ocrUnavailableThisProcess) return null;
   const entryPath = resolveTesseractEntry();
   if (entryPath === null) return null;
-  return new Promise((resolve24) => {
+  return new Promise((resolve25) => {
     let settled = false;
     let child;
     try {
@@ -12168,7 +12180,7 @@ async function ocrImage(input) {
       });
     } catch {
       _ocrUnavailableThisProcess = true;
-      resolve24(null);
+      resolve25(null);
       return;
     }
     const chunks = [];
@@ -12181,7 +12193,7 @@ async function ocrImage(input) {
         child.kill();
       } catch {
       }
-      resolve24(result);
+      resolve25(result);
     };
     const timer = setTimeout(() => finish(null, true), _ocrTimeoutMs);
     child.stdout?.on("data", (c) => chunks.push(c));
@@ -13619,7 +13631,7 @@ function ensureTransformerLoaded() {
   }
 }
 function sleep(ms) {
-  return new Promise((resolve24) => setTimeout(resolve24, ms));
+  return new Promise((resolve25) => setTimeout(resolve25, ms));
 }
 async function buildExtractorWithRetry(pipelineFn, modelName) {
   let lastError;
@@ -23932,7 +23944,7 @@ import * as readline from "node:readline";
 async function defaultConfirm(question) {
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
   try {
-    const answer = await new Promise((resolve24) => rl.question(question, resolve24));
+    const answer = await new Promise((resolve25) => rl.question(question, resolve25));
     return /^y(es)?$/i.test(answer.trim());
   } finally {
     rl.close();
@@ -48520,7 +48532,7 @@ init_util2();
 init_disk_cache();
 init_lang_patterns();
 import { readdirSync as readdirSync11, readFileSync as readFileSync21, statSync as statSync15 } from "fs";
-import { resolve as resolve9 } from "path";
+import { resolve as resolve10 } from "path";
 
 // src/recall_index.ts
 init_define_import_meta_env();
@@ -48753,7 +48765,7 @@ function depLockfileFingerprintSync(cmd, cwd) {
   if (!candidates) return null;
   for (const lockfile of candidates) {
     try {
-      const content = readFileSync21(resolve9(cwd, lockfile));
+      const content = readFileSync21(resolve10(cwd, lockfile));
       return shortFingerprint(content);
     } catch {
       continue;
@@ -48906,7 +48918,7 @@ function extractFirstPathArg(cmd, cwd, fallback) {
     const token2 = tokens[i];
     if (!token2.startsWith("-")) {
       if (!token2.startsWith("/")) {
-        return resolve9(cwd, token2);
+        return resolve10(cwd, token2);
       }
       return token2;
     }
@@ -64250,15 +64262,19 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "copilot_cli",
     label: "Copilot CLI",
     sourceFile: "src/bridges/copilot_cli_install.ts (COPILOT_CLI_HOOK_EVENTS), src/bridges/copilot_cli.ts (COPILOT_TO_TG_EVENT)",
-    implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "stop", "subagent_stop", "user_prompt_submit"]),
+    implemented: /* @__PURE__ */ new Set([
+      "session_start",
+      "pre_tool_use",
+      "post_tool_use",
+      "pre_compact",
+      "stop",
+      "subagent_stop",
+      "user_prompt_submit"
+    ]),
     reasons: [
       {
         events: ["notification"],
         reason: "Copilot CLI has a real 'notification' hook event, but copilot_cli.ts's COPILOT_TO_TG_EVENT deliberately leaves it (and sessionEnd/postToolUseFailure/subagentStart/errorOccurred/permissionRequest) unimplemented rather than guessed at"
-      },
-      {
-        events: ["session_start"],
-        reason: "COPILOT_TO_TG_EVENT has no session-start mapping wired yet -- left unimplemented rather than guessed at"
       }
     ]
   },
@@ -69571,7 +69587,7 @@ import { existsSync as existsSync33, readdirSync as readdirSync20, statSync as s
 import * as http from "http";
 import * as https from "https";
 import { isIPv4, isIPv6 } from "net";
-import { resolve as resolve17, join as join41 } from "path";
+import { resolve as resolve18, join as join41 } from "path";
 import { URL as URL2 } from "url";
 import { promisify } from "util";
 import { lookup as dnsLookup } from "dns";
@@ -69743,7 +69759,7 @@ function cleanupStaleDownloads() {
     const files = readdirSync20(cacheDir);
     for (const file2 of files) {
       if (file2.endsWith(".tmp")) {
-        const filePath = resolve17(cacheDir, file2);
+        const filePath = resolve18(cacheDir, file2);
         try {
           const stat2 = statSync26(filePath);
           if (Date.now() - stat2.mtimeMs < STALE_DOWNLOAD_AGE_MS) continue;
@@ -72320,8 +72336,8 @@ async function cmdMcpServe() {
   const server = createMcpServer2();
   const transport = new StdioServerTransport();
   await server.connect(transport);
-  await new Promise((resolve24) => {
-    server.server.onclose = resolve24;
+  await new Promise((resolve25) => {
+    server.server.onclose = resolve25;
   });
 }
 async function cmdHook(event, opts) {
@@ -73533,7 +73549,7 @@ function cmdWriteFile(dest, opts) {
     throw new CliError(`TOKEN_GOAT_MAX_STDIN_MB must be a positive integer; got '${process.env["TOKEN_GOAT_MAX_STDIN_MB"] ?? ""}'`);
   }
   const maxBytes = maxMB * 1024 * 1024;
-  return new Promise((resolve24, reject) => {
+  return new Promise((resolve25, reject) => {
     const chunks = [];
     let totalBytes = 0;
     let settled = false;
@@ -73557,7 +73573,7 @@ function cmdWriteFile(dest, opts) {
       try {
         atomicWriteBuffer(dest, Buffer.concat(chunks));
         enqueueDirtyPathSafe(dest);
-        resolve24();
+        resolve25();
       } catch (e) {
         try {
           mapFsError(e, void 0, dest);
@@ -82989,7 +83005,7 @@ init_image_shrink();
 var DEFAULT_STDIN_TIMEOUT_MS = 5e3;
 var MAX_STDIN_BYTES = 64 * 1024 * 1024;
 function readStdinJson(timeoutMs = DEFAULT_STDIN_TIMEOUT_MS, maxBytes = MAX_STDIN_BYTES) {
-  return new Promise((resolve24, reject) => {
+  return new Promise((resolve25, reject) => {
     const chunks = [];
     let totalBytes = 0;
     let settled = false;
@@ -83024,7 +83040,7 @@ function readStdinJson(timeoutMs = DEFAULT_STDIN_TIMEOUT_MS, maxBytes = MAX_STDI
           return;
         }
         try {
-          resolve24(JSON.parse(text));
+          resolve25(JSON.parse(text));
         } catch (err2) {
           reject(err2 instanceof Error ? err2 : new Error(String(err2)));
         }

package/dist/token-goat.mjs

@@ -3050,7 +3050,7 @@ var require_commander = __commonJS({
 import { createRequire } from "node:module";
 function resolveVersion() {
   if (true) {
-    return "2.6.23";
+    return "2.6.24";
   }
   const require2 = createRequire(import.meta.url);
   const pkg = require2("../package.json");
@@ -4283,8 +4283,8 @@ function normalizeDarwinSystemAlias(p) {
 }
 function resolveIndexPath(file2, base = process.cwd()) {
   const isWindowsAbsolute = (s) => /^[a-zA-Z]:[/\\]/.test(s);
-  const resolve24 = isWindowsAbsolute(file2) || isWindowsAbsolute(base) ? path2.win32.resolve : path2.resolve;
-  return normalizePath(resolve24(base, file2));
+  const resolve25 = isWindowsAbsolute(file2) || isWindowsAbsolute(base) ? path2.win32.resolve : path2.resolve;
+  return normalizePath(resolve25(base, file2));
 }
 function toDisplayPath(root, target) {
   if (root === void 0) return target;
@@ -12084,14 +12084,23 @@ const path = require('node:path')
 const { pathToFileURL } = require('node:url')
 
 // Copilot event name -> token-goat internal HookEventName (src/types.ts's
-// HOOK_EVENTS). Only these six have a token-goat handler; every other real
+// HOOK_EVENTS). Only these seven have a token-goat handler; every other real
 // Copilot event (sessionEnd, postToolUseFailure, subagentStart,
 // errorOccurred, notification, permissionRequest) is left unimplemented
 // rather than guessed at, and falls through to the default no-op below.
-// 'sessionStart' is handled as a permanent no-op even though it's a real
-// Copilot event, because token-goat has no internal session_start handler
-// (mirrors PI_EXTENSION_SCRIPT's documented precedent).
+// 'sessionStart' was previously a permanent no-op on the stated grounds that
+// token-goat has no internal session_start handler. That was simply wrong --
+// hooks_session_start.ts has long emitted the command-routing reminder that
+// every other harness receives -- and the no-op was the reason Copilot CLI
+// sessions alone never got told token-goat exists. It is wired now: verified
+// against Copilot CLI 1.0.77 that a hooks.json sessionStart entry returning
+// {additionalContext} does reach the model. The github/copilot-cli#2142
+// fire-and-forget bug that would have made this dead wiring was fixed in a
+// pre-release months before that version, and its companion multi-extension
+// hook-overwrite bug never applied here: it hit runtime *extension* hooks,
+// while this config-file hooks.json path goes through Copilot's own merge.
 const COPILOT_TO_TG_EVENT = {
+  sessionStart: 'session_start',
   preToolUse: 'pre_tool_use',
   postToolUse: 'post_tool_use',
   preCompact: 'pre_compact',
@@ -12203,11 +12212,6 @@ async function tryInProcess(entryPath, tgEvent, canonical) {
 async function main() {
   const copilotEvent = process.argv[2] || ''
 
-  if (copilotEvent === 'sessionStart') {
-    process.stdout.write('{}')
-    return
-  }
-
   const tgEvent = COPILOT_TO_TG_EVENT[copilotEvent]
   if (!tgEvent) {
     process.stdout.write('{}')
@@ -12333,7 +12337,10 @@ function translate(copilotEvent, resp) {
     return {}
   }
 
-  if (copilotEvent === 'postToolUse') {
+  if (copilotEvent === 'postToolUse' || copilotEvent === 'sessionStart') {
+    // Both surface token-goat's context through the same field. sessionStart is
+    // the one channel that reaches the model before it picks its first read
+    // tool, so this is where the routing reminder has to land.
     const context = extractContext(resp)
     if (context) return { additionalContext: context }
     return {}
@@ -12357,9 +12364,8 @@ function translate(copilotEvent, resp) {
   // doc that both are notification-only -- Copilot never reads a response
   // body for either, so any additionalContext/systemMessage token-goat
   // produces has no surfacing channel here. This still routes through the
-  // token-goat hook call above (unlike sessionStart's early no-op) so the
-  // internal handler's own side effects keep running; only the response is
-  // discarded.
+  // token-goat hook call above so the internal handler's own side effects keep
+  // running; only the response is discarded.
   return {}
 }
 
@@ -12399,8 +12405,13 @@ main()
 import * as fs11 from "node:fs";
 import * as os5 from "node:os";
 import * as path11 from "node:path";
+function copilotCliUserRoot() {
+  const override = process.env["COPILOT_HOME"];
+  if (override !== void 0 && override.trim() !== "") return path11.resolve(override);
+  return path11.join(os5.homedir(), ".copilot");
+}
 function copilotCliUserHooksDir() {
-  return path11.join(os5.homedir(), ".copilot", "hooks");
+  return path11.join(copilotCliUserRoot(), "hooks");
 }
 function copilotCliProjectHooksDir() {
   return path11.join(process.cwd(), ".github", "hooks");
@@ -12505,6 +12516,7 @@ var init_copilot_cli_install = __esm({
     init_copilot_cli();
     init_guidance_block();
     COPILOT_CLI_HOOK_EVENTS = [
+      "sessionStart",
       "preToolUse",
       "postToolUse",
       "preCompact",
@@ -15646,16 +15658,16 @@ var init_file_type_handler = __esm({
 
 // src/skill_cache.ts
 import * as fs18 from "fs/promises";
-import { resolve as resolve7 } from "path";
+import { resolve as resolve8 } from "path";
 import { homedir as homedir7 } from "os";
 import { readdirSync as readdirSync8, readFileSync as readFileSync13, existsSync as existsSync14, statSync as statSync8, unlinkSync as unlinkSync9 } from "node:fs";
 function skillOutputsDir() {
   if (_skillOutputsDirOverride) return _skillOutputsDirOverride;
-  return resolve7(dataDir(), SKILLS_OUTPUT_SUBDIR);
+  return resolve8(dataDir(), SKILLS_OUTPUT_SUBDIR);
 }
 function skillsSourceDir() {
   if (_skillsSourceDirOverride) return _skillsSourceDirOverride;
-  return resolve7(homedir7(), ".claude", "skills");
+  return resolve8(homedir7(), ".claude", "skills");
 }
 async function ensureSkillsDir() {
   try {
@@ -15798,7 +15810,7 @@ async function listOutputs() {
         continue;
       }
       try {
-        const content = await fs18.readFile(resolve7(dir, entry.name), "utf-8");
+        const content = await fs18.readFile(resolve8(dir, entry.name), "utf-8");
         const meta3 = JSON.parse(content);
         metas.push(meta3);
       } catch {
@@ -15832,7 +15844,7 @@ async function findCrossSessionEntry(skillName, contentSha) {
         continue;
       }
       const dir = skillOutputsDir();
-      const bodyPath = resolve7(dir, `${meta3.outputId}.txt`);
+      const bodyPath = resolve8(dir, `${meta3.outputId}.txt`);
       try {
         const bodyExists = await fs18.access(bodyPath).then(() => true).catch(() => false);
         if (bodyExists) {
@@ -15887,7 +15899,7 @@ async function storeOutput(sessionId, skillName, body, opts) {
       const truncBuf = buf.slice(truncStart);
       storedBody = truncBuf.toString("utf-8");
     }
-    await atomicWriteText(resolve7(dir, `${outId}.txt`), storedBody);
+    await atomicWriteText(resolve8(dir, `${outId}.txt`), storedBody);
     const meta3 = {
       outputId: outId,
       skillName: name2,
@@ -15897,7 +15909,7 @@ async function storeOutput(sessionId, skillName, body, opts) {
       truncated,
       sourcePath: opts?.sourcePath || ""
     };
-    await atomicWriteText(resolve7(dir, `${outId}.meta`), JSON.stringify(meta3, null, 2));
+    await atomicWriteText(resolve8(dir, `${outId}.meta`), JSON.stringify(meta3, null, 2));
     pruneSkillOutputs();
     return meta3;
   } catch {
@@ -15917,7 +15929,7 @@ async function storeCompact(sessionId, skillName, compactText, sourceSha) {
       text = `<!-- source_sha: ${sourceSha.slice(0, 12)} -->
 ${text}`;
     }
-    await atomicWriteText(resolve7(dir, fileId), text);
+    await atomicWriteText(resolve8(dir, fileId), text);
   } catch {
   }
 }
@@ -15937,7 +15949,7 @@ function getCompactAnySessionSync(skillName) {
     for (const entry of entries) {
       if (!matchesCompactSuffix(entry.name, entry.isFile(), suffix)) continue;
       try {
-        const text = readFileSync13(resolve7(dir, entry.name), "utf-8");
+        const text = readFileSync13(resolve8(dir, entry.name), "utf-8");
         if (text.trim()) return text;
       } catch {
         continue;
@@ -15965,7 +15977,7 @@ async function readSkillHits(skillName) {
     const name2 = safeSkillName(skillName);
     if (!name2) return { count: 0, lastTs: 0 };
     const dir = skillOutputsDir();
-    const hitsFile = resolve7(dir, `${sanitizeSkillId(name2)}.hits`);
+    const hitsFile = resolve8(dir, `${sanitizeSkillId(name2)}.hits`);
     const content = await fs18.readFile(hitsFile, "utf-8").catch(() => null);
     if (content) {
       const parsed = JSON.parse(content);
@@ -16015,7 +16027,7 @@ async function incrementSkillHit(skillName) {
     if (!name2) return;
     await ensureSkillsDir();
     const dir = skillOutputsDir();
-    const hitsFile = resolve7(dir, `${sanitizeSkillId(name2)}.hits`);
+    const hitsFile = resolve8(dir, `${sanitizeSkillId(name2)}.hits`);
     const lockPath = `${hitsFile}.lock`;
     await runExclusiveInProcess(lockPath, async () => {
       const locked = await acquireSkillHitLock(lockPath);
@@ -16062,14 +16074,14 @@ async function listSkills(sessionId) {
       let compactLen = 0;
       let compactText = "";
       try {
-        const stat2 = await fs18.stat(resolve7(dir, compactFileId));
+        const stat2 = await fs18.stat(resolve8(dir, compactFileId));
         compactLen = stat2.size;
-        compactText = await fs18.readFile(resolve7(dir, compactFileId), "utf-8").catch(() => "");
+        compactText = await fs18.readFile(resolve8(dir, compactFileId), "utf-8").catch(() => "");
       } catch {
         compactLen = 0;
       }
       const hasMarker = extractCompactFromMarker(
-        await fs18.readFile(resolve7(dir, `${meta3.outputId}.txt`), "utf-8").catch(() => "")
+        await fs18.readFile(resolve8(dir, `${meta3.outputId}.txt`), "utf-8").catch(() => "")
       ) !== null;
       const compactStale = isCompactStale(compactText, meta3.skillName, meta3.contentSha);
       const { count: hitCount } = await readSkillHits(meta3.skillName);
@@ -16105,7 +16117,7 @@ async function getSkillFilePath(skillName) {
   }
 }
 async function resolvePluginSkillPath(pluginName, skillSlug) {
-  const manifestPath = _pluginsManifestPathOverride ?? resolve7(homedir7(), ".claude", "plugins", "installed_plugins.json");
+  const manifestPath = _pluginsManifestPathOverride ?? resolve8(homedir7(), ".claude", "plugins", "installed_plugins.json");
   let raw;
   try {
     raw = await fs18.readFile(manifestPath, "utf8");
@@ -16128,7 +16140,7 @@ async function resolvePluginSkillPath(pluginName, skillSlug) {
       if (typeof entry !== "object" || entry === null) continue;
       const installPath = entry["installPath"];
       if (typeof installPath !== "string" || installPath === "") continue;
-      const diskPath = resolve7(installPath, "skills", skillSlug, "SKILL.md");
+      const diskPath = resolve8(installPath, "skills", skillSlug, "SKILL.md");
       try {
         await fs18.access(diskPath);
         return diskPath;
@@ -16147,7 +16159,7 @@ async function installedSkillPath(skillName) {
     const pluginPath = await resolvePluginSkillPath(name2.slice(0, colonIdx), name2.slice(colonIdx + 1));
     if (pluginPath !== null) return pluginPath;
   }
-  const diskPath = resolve7(skillsSourceDir(), name2, "SKILL.md");
+  const diskPath = resolve8(skillsSourceDir(), name2, "SKILL.md");
   try {
     await fs18.access(diskPath);
     return diskPath;
@@ -16167,11 +16179,11 @@ function pruneSkillOutputs(maxCount = DEFAULT_MAX_COUNT, maxAgeMs = DEFAULT_MAX_
       const outputId = file2.slice(0, -".meta".length);
       let ts;
       try {
-        const parsed = JSON.parse(readFileSync13(resolve7(dir, file2), "utf-8"));
+        const parsed = JSON.parse(readFileSync13(resolve8(dir, file2), "utf-8"));
         ts = parsed.ts;
       } catch {
         try {
-          ts = statSync8(resolve7(dir, file2)).mtimeMs;
+          ts = statSync8(resolve8(dir, file2)).mtimeMs;
         } catch {
           continue;
         }
@@ -16181,7 +16193,7 @@ function pruneSkillOutputs(maxCount = DEFAULT_MAX_COUNT, maxAgeMs = DEFAULT_MAX_
     const removeEntry = (outputId) => {
       for (const ext2 of [".meta", ".txt"]) {
         try {
-          unlinkSync9(resolve7(dir, `${outputId}${ext2}`));
+          unlinkSync9(resolve8(dir, `${outputId}${ext2}`));
         } catch {
         }
       }
@@ -16273,7 +16285,7 @@ async function ocrImage(input) {
   if (_ocrUnavailableThisProcess) return null;
   const entryPath = resolveTesseractEntry();
   if (entryPath === null) return null;
-  return new Promise((resolve24) => {
+  return new Promise((resolve25) => {
     let settled = false;
     let child;
     try {
@@ -16282,7 +16294,7 @@ async function ocrImage(input) {
       });
     } catch {
       _ocrUnavailableThisProcess = true;
-      resolve24(null);
+      resolve25(null);
       return;
     }
     const chunks = [];
@@ -16295,7 +16307,7 @@ async function ocrImage(input) {
         child.kill();
       } catch {
       }
-      resolve24(result);
+      resolve25(result);
     };
     const timer = setTimeout(() => finish(null, true), _ocrTimeoutMs);
     child.stdout?.on("data", (c) => chunks.push(c));
@@ -17537,7 +17549,7 @@ import * as readline from "node:readline";
 async function defaultConfirm(question) {
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
   try {
-    const answer = await new Promise((resolve24) => rl.question(question, resolve24));
+    const answer = await new Promise((resolve25) => rl.question(question, resolve25));
     return /^y(es)?$/i.test(answer.trim());
   } finally {
     rl.close();
@@ -17603,7 +17615,7 @@ function ensureTransformerLoaded() {
   }
 }
 function sleep(ms) {
-  return new Promise((resolve24) => setTimeout(resolve24, ms));
+  return new Promise((resolve25) => setTimeout(resolve25, ms));
 }
 async function buildExtractorWithRetry(pipelineFn, modelName) {
   let lastError;
@@ -24655,10 +24667,10 @@ function embedFileSerialized(absPath, dbPath, sha) {
       activeEmbedSlots += 1;
       return dispatchEmbed();
     }
-    return new Promise((resolve24) => {
+    return new Promise((resolve25) => {
       embedSlotWaiters.push(() => {
         activeEmbedSlots += 1;
-        resolve24(dispatchEmbed());
+        resolve25(dispatchEmbed());
       });
     });
   };
@@ -25064,7 +25076,7 @@ async function runWorkerLoop(dir, pollIntervalMs, shouldStop = () => false) {
       lastKnownRootsSweepMs = Date.now();
     }
     if (shouldStop()) break;
-    await new Promise((resolve24) => setTimeout(resolve24, pollIntervalMs));
+    await new Promise((resolve25) => setTimeout(resolve25, pollIntervalMs));
   }
 }
 function runDetachedWorkerDaemon() {
@@ -49089,7 +49101,7 @@ init_util2();
 init_disk_cache();
 init_lang_patterns();
 import { readdirSync as readdirSync13, readFileSync as readFileSync24, statSync as statSync17 } from "fs";
-import { resolve as resolve12 } from "path";
+import { resolve as resolve13 } from "path";
 
 // src/recall_index.ts
 init_define_import_meta_env();
@@ -49322,7 +49334,7 @@ function depLockfileFingerprintSync(cmd, cwd) {
   if (!candidates) return null;
   for (const lockfile of candidates) {
     try {
-      const content = readFileSync24(resolve12(cwd, lockfile));
+      const content = readFileSync24(resolve13(cwd, lockfile));
       return shortFingerprint(content);
     } catch {
       continue;
@@ -49475,7 +49487,7 @@ function extractFirstPathArg(cmd, cwd, fallback) {
     const token2 = tokens[i];
     if (!token2.startsWith("-")) {
       if (!token2.startsWith("/")) {
-        return resolve12(cwd, token2);
+        return resolve13(cwd, token2);
       }
       return token2;
     }
@@ -72393,7 +72405,7 @@ init_image_shrink();
 var DEFAULT_STDIN_TIMEOUT_MS = 5e3;
 var MAX_STDIN_BYTES = 64 * 1024 * 1024;
 function readStdinJson(timeoutMs = DEFAULT_STDIN_TIMEOUT_MS, maxBytes = MAX_STDIN_BYTES) {
-  return new Promise((resolve24, reject) => {
+  return new Promise((resolve25, reject) => {
     const chunks = [];
     let totalBytes = 0;
     let settled = false;
@@ -72428,7 +72440,7 @@ function readStdinJson(timeoutMs = DEFAULT_STDIN_TIMEOUT_MS, maxBytes = MAX_STDI
           return;
         }
         try {
-          resolve24(JSON.parse(text));
+          resolve25(JSON.parse(text));
         } catch (err2) {
           reject(err2 instanceof Error ? err2 : new Error(String(err2)));
         }
@@ -73878,15 +73890,19 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "copilot_cli",
     label: "Copilot CLI",
     sourceFile: "src/bridges/copilot_cli_install.ts (COPILOT_CLI_HOOK_EVENTS), src/bridges/copilot_cli.ts (COPILOT_TO_TG_EVENT)",
-    implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "stop", "subagent_stop", "user_prompt_submit"]),
+    implemented: /* @__PURE__ */ new Set([
+      "session_start",
+      "pre_tool_use",
+      "post_tool_use",
+      "pre_compact",
+      "stop",
+      "subagent_stop",
+      "user_prompt_submit"
+    ]),
     reasons: [
       {
         events: ["notification"],
         reason: "Copilot CLI has a real 'notification' hook event, but copilot_cli.ts's COPILOT_TO_TG_EVENT deliberately leaves it (and sessionEnd/postToolUseFailure/subagentStart/errorOccurred/permissionRequest) unimplemented rather than guessed at"
-      },
-      {
-        events: ["session_start"],
-        reason: "COPILOT_TO_TG_EVENT has no session-start mapping wired yet -- left unimplemented rather than guessed at"
       }
     ]
   },
@@ -78722,7 +78738,7 @@ import { existsSync as existsSync34, readdirSync as readdirSync20, statSync as s
 import * as http from "http";
 import * as https from "https";
 import { isIPv4, isIPv6 } from "net";
-import { resolve as resolve17, join as join41 } from "path";
+import { resolve as resolve18, join as join41 } from "path";
 import { URL as URL2 } from "url";
 import { promisify } from "util";
 import { lookup as dnsLookup } from "dns";
@@ -78894,7 +78910,7 @@ function cleanupStaleDownloads() {
     const files = readdirSync20(cacheDir);
     for (const file2 of files) {
       if (file2.endsWith(".tmp")) {
-        const filePath = resolve17(cacheDir, file2);
+        const filePath = resolve18(cacheDir, file2);
         try {
           const stat2 = statSync27(filePath);
           if (Date.now() - stat2.mtimeMs < STALE_DOWNLOAD_AGE_MS) continue;
@@ -81471,8 +81487,8 @@ async function cmdMcpServe() {
   const server = createMcpServer2();
   const transport = new StdioServerTransport();
   await server.connect(transport);
-  await new Promise((resolve24) => {
-    server.server.onclose = resolve24;
+  await new Promise((resolve25) => {
+    server.server.onclose = resolve25;
   });
 }
 async function cmdHook(event, opts) {
@@ -82684,7 +82700,7 @@ function cmdWriteFile(dest, opts) {
     throw new CliError(`TOKEN_GOAT_MAX_STDIN_MB must be a positive integer; got '${process.env["TOKEN_GOAT_MAX_STDIN_MB"] ?? ""}'`);
   }
   const maxBytes = maxMB * 1024 * 1024;
-  return new Promise((resolve24, reject) => {
+  return new Promise((resolve25, reject) => {
     const chunks = [];
     let totalBytes = 0;
     let settled = false;
@@ -82708,7 +82724,7 @@ function cmdWriteFile(dest, opts) {
       try {
         atomicWriteBuffer(dest, Buffer.concat(chunks));
         enqueueDirtyPathSafe(dest);
-        resolve24();
+        resolve25();
       } catch (e) {
         try {
           mapFsError(e, void 0, dest);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-goat",
-  "version": "2.6.23",
+  "version": "2.6.24",
   "description": "Surgical token-reduction companion for Claude Code and other AI coding agents",
   "type": "module",
   "main": "./dist/token-goat.mjs",