token-goat 2.6.34 → 2.6.36

package/dist/{token-goat-hook-chunk-CNLMPHXT.mjs → token-goat-hook-chunk-Y2WHX2P3.mjs}

@@ -8,7 +8,7 @@ import {
 import { createRequire } from "node:module";
 function resolveVersion() {
   if (true) {
-    return "2.6.34";
+    return "2.6.36";
   }
   const require2 = createRequire(import.meta.url);
   const pkg = require2("../package.json");
@@ -742,6 +742,9 @@ function countContentLines(content) {
   const n = content.split("\n").length;
   return content.endsWith("\n") ? n - 1 : n;
 }
+function pushAll(target, items) {
+  for (const item of items) target.push(item);
+}
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -1183,6 +1186,9 @@ function getDisplayRoot(explicitRoot) {
   _displayRootCache = { cwd, root };
   return root;
 }
+registerReset(() => {
+  _displayRootCache = null;
+});
 function isUnderSystemTemp(filePath) {
   let sysTemp;
   try {
@@ -2433,7 +2439,6 @@ var ENV_KEYS2 = [
   "TOKEN_GOAT_OVERFLOW_MAX_TOKENS",
   "TOKEN_GOAT_HINT_JSON_SIDECAR",
   "TOKEN_GOAT_LARGE_READ_BYTES",
-  "TOKEN_GOAT_CURATOR",
   "TOKEN_GOAT_HINT_BUDGET",
   "TOKEN_GOAT_HOOK_WATCHDOG_MS",
   "TOKEN_GOAT_WEB_COMPRESS",
@@ -2494,8 +2499,19 @@ var _lastProjectConfigParseError = null;
 function getLastProjectConfigParseError() {
   return _lastProjectConfigParseError;
 }
-var PROJECT_LOCKED_SECTIONS = ["injection", "webfetch", "gdrive", "mcp", "network"];
-var PROJECT_LOCKED_KEYS = ["indexing.cross_project_symbols"];
+var PROJECT_LOCKED_SECTIONS = [
+  "injection",
+  "webfetch",
+  "gdrive",
+  "mcp",
+  "network",
+  "screenshot"
+];
+var PROJECT_LOCKED_KEYS = [
+  "image_shrink.max_image_pixels",
+  "indexing.cross_project_symbols",
+  "worker.blocked_roots"
+];
 var _lastProjectConfigLockedKeys = [];
 function stripLockedProjectKeys(projectRaw) {
   const cleaned = {};
@@ -2626,10 +2642,12 @@ function resolveConfigKeyLayer(key, effectiveValue, cfg, projectInfo) {
   if (rawValueEquals(rawValue, effectiveValue)) return { layer: "project", path: projectInfo.path };
   return { layer: "project-invalid", path: projectInfo.path, rawValue, effectiveValue, reason: rejectionReason(key, rawValue, effectiveValue, cfg) };
 }
+function readConfigSource(p) {
+  return decodeSource(fs5.readFileSync(p));
+}
 function readConfigToml(p) {
   try {
-    const text = fs5.readFileSync(p, "utf8");
-    return { raw: parse(text), parseError: null };
+    return { raw: parse(readConfigSource(p)), parseError: null };
   } catch (e) {
     const code = e.code;
     if (code === "ENOENT") return { raw: {}, parseError: null };
@@ -2638,7 +2656,7 @@ function readConfigToml(p) {
 }
 function readConfigText(p) {
   try {
-    return { text: fs5.readFileSync(p, "utf8"), readError: null };
+    return { text: readConfigSource(p), readError: null };
   } catch (e) {
     const code = e.code;
     if (code === "ENOENT") return { text: null, readError: null };
@@ -2667,6 +2685,9 @@ function resolveConfigProjectRoot() {
   _projectRootCache = { cwd, root };
   return root;
 }
+registerReset(() => {
+  _projectRootCache = null;
+});
 function isAutoTriggerMultiplierExplicit() {
   const setsMultiplier = (text) => {
     const raw = parse(text);
@@ -2677,11 +2698,11 @@ function isAutoTriggerMultiplierExplicit() {
     return ca_raw["auto_trigger_multiplier"] !== void 0;
   };
   try {
-    if (setsMultiplier(fs5.readFileSync(configPath(), "utf8"))) return true;
+    if (setsMultiplier(readConfigSource(configPath()))) return true;
   } catch {
   }
   try {
-    return setsMultiplier(fs5.readFileSync(projectConfigPath(resolveConfigProjectRoot()), "utf8"));
+    return setsMultiplier(readConfigSource(projectConfigPath(resolveConfigProjectRoot())));
   } catch {
     return false;
   }
@@ -4158,7 +4179,9 @@ function propagateEndLinesToSymbols(symbols, sections) {
     return sym;
   });
 }
-function findMatchingBraceEndLine(content, openBraceIndex, totalLines, lineIndex, lineCommentPrefix) {
+function findMatchingBraceEndLine(content, openBraceIndex, totalLines, lineIndex, lineCommentPrefix, opts) {
+  const block = opts?.blockComment;
+  const backtick = opts?.backtickQuote === true;
   let depth = 0;
   let quote = null;
   for (let i = openBraceIndex; i < content.length; i++) {
@@ -4171,11 +4194,16 @@ function findMatchingBraceEndLine(content, openBraceIndex, totalLines, lineIndex
       if (ch === quote) quote = null;
       continue;
     }
+    if (block !== void 0 && content.startsWith(block[0], i)) {
+      const close = content.indexOf(block[1], i + block[0].length);
+      i = close === -1 ? content.length : close + block[1].length - 1;
+      continue;
+    }
     if (lineCommentPrefix !== void 0 && content.startsWith(lineCommentPrefix, i)) {
       while (i < content.length && content[i] !== "\n") i++;
       continue;
     }
-    if (ch === '"' || ch === "'") {
+    if (ch === '"' || ch === "'" || backtick && ch === "`") {
       quote = ch;
       continue;
     }
@@ -4187,7 +4215,106 @@ function findMatchingBraceEndLine(content, openBraceIndex, totalLines, lineIndex
       }
     }
   }
-  return totalLines;
+  return opts?.noMatchValue ?? totalLines;
+}
+function assignBraceBlockSpans(symbols, content, lineCommentPrefix) {
+  if (symbols.length === 0) return [...symbols];
+  const lines = content.split("\n");
+  const totalLines = lines.length;
+  const lineIndex = buildLineIndex(content);
+  const starts = [...new Set(symbols.map((s) => s.lineStart))].sort((a, b) => a - b);
+  const blockComment = lineCommentPrefix === "//" ? ["/*", "*/"] : lineCommentPrefix === "#" ? ["<#", "#>"] : void 0;
+  return symbols.map((sym) => {
+    if (sym.lineEnd !== sym.lineStart) return sym;
+    const nextStart = starts.find((s) => s > sym.lineStart);
+    const lastSearchLine = Math.min(nextStart !== void 0 ? nextStart - 1 : totalLines, sym.lineStart + BRACE_SEARCH_MAX_LINES);
+    const openIndex = findBlockOpenBrace(content, lineIndex, sym.lineStart, lastSearchLine, lineCommentPrefix, blockComment);
+    if (openIndex === null) return sym;
+    const endLine = findMatchingBraceEndLine(
+      content,
+      openIndex,
+      totalLines,
+      lineIndex,
+      lineCommentPrefix,
+      blockComment === void 0 ? { noMatchValue: -1 } : { blockComment, noMatchValue: -1 }
+    );
+    if (endLine <= sym.lineStart) return sym;
+    return { ...sym, lineEnd: endLine, body: lines.slice(sym.lineStart - 1, endLine).join("\n") };
+  });
+}
+var BRACE_SEARCH_MAX_LINES = 10;
+function findBlockOpenBrace(content, lineIndex, startLine, lastSearchLine, lineCommentPrefix, blockComment) {
+  const from = lineIndex[startLine - 1];
+  if (from === void 0) return null;
+  const to = lineIndex[lastSearchLine] ?? content.length;
+  let quote = null;
+  let parenDepth = 0;
+  let linesSeen = 0;
+  let atLineStart = false;
+  for (let i = from; i < to; i++) {
+    const ch = content[i];
+    if (ch === void 0) break;
+    if (quote !== null) {
+      if (ch === "\\") {
+        i++;
+        continue;
+      }
+      if (ch === quote) quote = null;
+      continue;
+    }
+    if (ch === "\n") {
+      linesSeen++;
+      atLineStart = true;
+      continue;
+    }
+    if (blockComment !== void 0 && content.startsWith(blockComment[0], i)) {
+      const close = content.indexOf(blockComment[1], i + blockComment[0].length);
+      if (close === -1) return null;
+      i = close + blockComment[1].length - 1;
+      continue;
+    }
+    if (lineCommentPrefix !== void 0 && content.startsWith(lineCommentPrefix, i)) {
+      while (i + 1 < to && content[i + 1] !== "\n") i++;
+      continue;
+    }
+    if (atLineStart && !/\s/.test(ch)) {
+      atLineStart = false;
+      if (parenDepth === 0 && linesSeen >= 1 && startsWithBlockKeyword(content, i, to)) return null;
+    }
+    if (ch === '"' || ch === "'") {
+      quote = ch;
+      continue;
+    }
+    if (ch === "(" || ch === "[") parenDepth++;
+    else if (ch === ")" || ch === "]") {
+      if (parenDepth > 0) parenDepth--;
+    } else if (ch === ";") return null;
+    else if (ch === "{") return i;
+  }
+  return null;
+}
+var BLOCK_OPENING_KEYWORDS = /* @__PURE__ */ new Set([
+  "if",
+  "for",
+  "while",
+  "do",
+  "switch",
+  "when",
+  "match",
+  "try",
+  "foreach",
+  "loop",
+  "guard",
+  "repeat",
+  "unless",
+  "until"
+]);
+function startsWithBlockKeyword(content, i, to) {
+  const first = content[i];
+  if (first === void 0 || !/[A-Za-z_]/.test(first)) return false;
+  let j = i + 1;
+  while (j < to && /[A-Za-z0-9_]/.test(content[j])) j++;
+  return BLOCK_OPENING_KEYWORDS.has(content.slice(i, j));
 }
 
 // src/languages/ini_idx.ts
@@ -4599,7 +4726,7 @@ function purgeDotenvEmbeddings(conn) {
 var MIGRATIONS = {
   // v1 -> v2: adds files.embed_sha, tracked separately from files.sha so embedding freshness can be gated independently of parse freshness (see makeIndexer in worker.ts). A pre-existing v1 database's `files` table predates the column, so it needs an explicit ALTER TABLE here; a brand-new database already has the column from SCHEMA_SQL's CREATE TABLE above, so the ALTER TABLE would fail with "duplicate column name" there -- swallow exactly that error and rethrow anything else, so a genuine ALTER TABLE failure is never silently lost.
   1: (conn) => alterTableIdempotent(conn, "ALTER TABLE files ADD COLUMN embed_sha TEXT"),
-  // v2 -> v3: adds files.retry_count, a durable per-path counter for consecutive transient-read-failure requeues (see MAX_TRANSIENT_RETRIES / requeueDirtyPath / resetTransientRetryCount in worker.ts). Previously this counter lived only in an in-memory Map inside worker.ts, which meant resetTransientRetryCount -- called from appendDirtyPath (hooks_index.ts) in the short-lived hook CLI process -- could never actually reach the long-lived detached daemon process's own copy of that Map: they are different Node processes with no shared memory, so the reset was a silent no-op in the real deployed topology. Persisting the counter in `files` makes it visible to both processes via the one thing they do share: the index DB. Same swallow-duplicate-column pattern as v1 -> v2 above.
+  // v2 -> v3: adds files.retry_count, a durable per-path counter for consecutive transient-read-failure requeues (see MAX_TRANSIENT_RETRIES / requeueDirtyPath / clearRetryCount in worker.ts). Previously this counter lived only in an in-memory Map inside worker.ts, which meant the retry-count reset -- run at the time in the short-lived hook CLI process -- could never actually reach the long-lived detached daemon process's own copy of that Map: they are different Node processes with no shared memory, so the reset was a silent no-op in the real deployed topology. Persisting the counter in `files` makes it visible to both processes via the one thing they do share: the index DB. Same swallow-duplicate-column pattern as v1 -> v2 above.
   2: (conn) => alterTableIdempotent(conn, "ALTER TABLE files ADD COLUMN retry_count INTEGER NOT NULL DEFAULT 0"),
   // v8 -> v9: adds symbols.parent (see SCHEMA_VERSION comment above for why). A pre-existing v8 database's `symbols` table predates the column, so it needs an explicit ALTER TABLE here; a brand-new database already has the column from SCHEMA_SQL's CREATE TABLE above, so the ALTER TABLE would fail with "duplicate column name" there -- swallow exactly that error and rethrow anything else, same pattern as v1 -> v2 / v2 -> v3 above.
   8: (conn) => alterTableIdempotent(conn, "ALTER TABLE symbols ADD COLUMN parent TEXT NOT NULL DEFAULT ''"),
@@ -4619,13 +4746,32 @@ function runMigrations(conn, fromVersion, toVersion) {
     MIGRATIONS[v]?.(conn);
   }
 }
-function initConnection(conn) {
-  const walMode = conn.pragma("journal_mode = WAL", { simple: true });
-  if (String(walMode).toLowerCase() !== "wal") {
-    throw new Error(`db: failed to enable WAL mode (got: ${walMode})`);
+var WAL_SWITCH_DEADLINE_MS = 15e3;
+function enableWalWithRetry(conn, budgetMs = WAL_SWITCH_DEADLINE_MS) {
+  const deadline = Date.now() + budgetMs;
+  let lastError;
+  for (; ; ) {
+    try {
+      const mode = conn.pragma("journal_mode = WAL", { simple: true });
+      if (String(mode).toLowerCase() === "wal") return;
+      lastError = new Error(`got: ${String(mode)}`);
+    } catch (e) {
+      lastError = e;
+    }
+    try {
+      if (String(conn.pragma("journal_mode", { simple: true })).toLowerCase() === "wal") return;
+    } catch {
+    }
+    if (Date.now() >= deadline) {
+      throw new Error(`db: failed to enable WAL mode (${lastError instanceof Error ? lastError.message : String(lastError)})`);
+    }
+    sleepSync(25);
   }
-  conn.pragma("synchronous = NORMAL");
+}
+function initConnection(conn) {
   conn.pragma("busy_timeout = 15000");
+  enableWalWithRetry(conn);
+  conn.pragma("synchronous = NORMAL");
   conn.function(
     "TG_LOWER",
     { deterministic: true },
@@ -5970,13 +6116,26 @@ var SECRET_PATTERNS = [
   // directly against the header name and the scheme directly against the space, so a body like
   // {"Authorization": "Bearer <token>"} -- the shape any logged fetch or MCP result arrives in
   // -- matched nothing and the token was cached verbatim.
-  ["auth_bearer_token", /(?<=Authorization["']?[ \t]{0,8}:[ \t]{0,8}["']?[ \t]{0,8}Bearer[ \t])[A-Za-z0-9\-._~+/]{10,}=*/gi],
+  // `token` is the second scheme spelling in wide use -- it is what curl and gh examples pass for
+  // GitHub and many other APIs -- and an opaque value behind it carries exactly the same authority
+  // as one behind `Bearer`. The trailing gap is `{1,8}` rather than a single space for the same
+  // reason every other gap in this lookbehind already is: a hand-aligned or reformatted header
+  // ("Authorization:  Bearer  <token>") is ordinary, and demanding exactly one space there made
+  // this the one position in the pattern that a second space defeated.
+  ["auth_bearer_token", /(?<=Authorization["']?[ \t]{0,8}:[ \t]{0,8}["']?[ \t]{0,8}(?:Bearer|token)[ \t]{1,8})[A-Za-z0-9\-._~+/]{10,}=*/gi],
   ["auth_basic_token", /(?<=Authorization["']?[ \t]{0,8}:[ \t]{0,8}["']?[ \t]{0,8}Basic[ \t])[A-Za-z0-9+/]{6,}=*/gi],
   // JWTs have no distinctive prefix of their own, but the base64url encoding of the smallest
   // realistic header ('{"alg":' or similar) always starts with "eyJ", so that's the practical
   // anchor here -- each of the three dot-separated segments requires a minimum length to avoid
   // matching a short, coincidentally dotted token.
-  ["jwt", /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g],
+  //
+  // The trailing `={0,2}` on each segment is what makes a padded token match. Base64url as the JWT
+  // spec defines it drops the `=` padding, but producers that reach for a plain base64 encoder
+  // emit it anyway, and a `=` in the header or payload segment used to defeat the match outright:
+  // not a partial redaction, but none at all, so the entire token was printed. `=` cannot appear
+  // anywhere except the end of a segment, since it is not one of the characters the segment body
+  // allows, so accepting it here cannot widen the match onto anything else.
+  ["jwt", /eyJ[A-Za-z0-9_-]{10,}={0,2}\.[A-Za-z0-9_-]{10,}={0,2}\.[A-Za-z0-9_-]{10,}={0,2}/g],
   ["npm_token", /npm_[A-Za-z0-9]{36}/g],
   // rk_live_ (restricted keys) share the sk_live_/sk_test_ secret-key shape and risk level, so
   // one pattern covers all three rather than adding a near-duplicate entry.
@@ -6024,7 +6183,22 @@ var SECRET_PATTERNS = [
   // SECRET_KEY=, and DB_PASSWORD_HASH= all passed through in full. That class matches
   // identifier characters only, so prose that merely mentions a keyword still never reaches
   // a separator and stays unredacted. api[_-]?key covers the apikey and api-key spellings too.
-  ["generic_secret_assignment", /(?<=(?:password|passwd|secret|api[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token)[a-z0-9_-]{0,64}["']?[ \t]{0,8}[:=][ \t]{0,8}["']?)(?:\\[^\n]|[^\s\\&;#'"[\],{}:]){4,}/gi]
+  // `& ; # , :` play two incompatible roles. They separate one field from the next (a query
+  // string, a cookie header, an inline env list), and they are also perfectly ordinary password
+  // characters. Rejecting them outright got the first role right and the second badly wrong: the
+  // match stopped at the first one and left everything after it in plain text, so
+  // `password=corr&horse&battery` redacted four characters and printed the rest, and
+  // `DB_PASSWORD=Aa1:xyz` matched nothing at all because the run before the `:` was under the
+  // four-character floor. A tail left sitting in the open is the outcome this module's header
+  // calls worse than no redaction, because it reads as handled.
+  //
+  // So the separator role is decided by what follows rather than assumed: one of these characters
+  // ends the value only when the next thing along is another `name=` / `name:` pair, which is what
+  // an actual field separator is always followed by. `,OTHER=public` and `; other=1` still end it;
+  // the `&` in the middle of a passphrase does not. Whitespace, quotes and brackets are unchanged
+  // -- they end a value unconditionally, which is also what keeps this pattern from re-matching
+  // the `[REDACTED:...]` placeholder it just wrote.
+  ["generic_secret_assignment", /(?<=(?:password|passwd|secret|api[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token)[a-z0-9_-]{0,64}["']?[ \t]{0,8}[:=][ \t]{0,8}["']?)(?:\\[^\n]|[^\s\\&;#,:'"[\]{}]|[&;#,:](?![ \t]*[A-Za-z_][A-Za-z0-9_.-]*[ \t]*[:=])){4,}/gi]
 ];
 function redactSecrets(text) {
   let count = 0;
@@ -6152,6 +6326,7 @@ export {
   countNoun,
   excludeTestsHiddenNote,
   countContentLines,
+  pushAll,
   escapeRegExp,
   windowsCmdQuoteArg,
   redactUrlQuery,
@@ -6192,6 +6367,7 @@ export {
   lastProjectConfigLockedKeys,
   getProjectConfigInfo,
   resolveConfigKeyLayer,
+  readConfigSource,
   isAutoTriggerMultiplierExplicit,
   loadConfig,
   invalidateConfigCache,
@@ -6221,6 +6397,7 @@ export {
   assignFlatEndLines,
   propagateEndLinesToSymbols,
   findMatchingBraceEndLine,
+  assignBraceBlockSpans,
   extractIni,
   _lineClosesQuote,
   _detectOpenQuote,

package/dist/token-goat-hook.mjs

@@ -2,11 +2,11 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   relayInProcess
-} from "./token-goat-hook-chunk-BU5OFDGQ.mjs";
-import "./token-goat-hook-chunk-2ISZ4AZR.mjs";
-import "./token-goat-hook-chunk-6C5RN3CM.mjs";
-import "./token-goat-hook-chunk-6QTWMSRO.mjs";
-import "./token-goat-hook-chunk-CNLMPHXT.mjs";
+} from "./token-goat-hook-chunk-BDR6C6IE.mjs";
+import "./token-goat-hook-chunk-3ZDBWJDF.mjs";
+import "./token-goat-hook-chunk-5UH54CW6.mjs";
+import "./token-goat-hook-chunk-A77A26A7.mjs";
+import "./token-goat-hook-chunk-Y2WHX2P3.mjs";
 import "./token-goat-hook-chunk-BUOCULAM.mjs";
 import "./token-goat-hook-chunk-RFRLWOQH.mjs";
 export {

package/dist/token-goat.core.mjs

@@ -2,13 +2,13 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   run
-} from "./token-goat-chunk-GXBPEQR2.mjs";
-import "./token-goat-chunk-IYYQOPY4.mjs";
-import "./token-goat-chunk-OA3GFKP2.mjs";
-import "./token-goat-chunk-CN7GUPX6.mjs";
+} from "./token-goat-chunk-KYFJC37X.mjs";
+import "./token-goat-chunk-IYTVE6KN.mjs";
+import "./token-goat-chunk-VYMGEVZS.mjs";
+import "./token-goat-chunk-UFOVM7ZN.mjs";
 import {
   installEpipeGuard
-} from "./token-goat-chunk-7FWBSPCT.mjs";
+} from "./token-goat-chunk-V465YKOR.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "token-goat",
-  "version": "2.6.34",
+  "version": "2.6.36",
   "description": "Surgical token-reduction companion for Claude Code and other AI coding agents",
   "type": "module",
   "main": "./dist/token-goat.mjs",
   "bin": {
-    "token-goat": "./dist/token-goat.mjs"
+    "token-goat": "./dist/token-goat.mjs",
+    "tg": "./dist/token-goat.mjs"
   },
   "repository": {
     "type": "git",
@@ -50,7 +51,8 @@
     "dist/",
     "README.md",
     "SECURITY.md",
-    "LICENSE"
+    "LICENSE",
+    "scripts/install-git-hooks.mjs"
   ],
   "license": "PolyForm-Noncommercial-1.0.0",
   "engines": {
@@ -58,30 +60,30 @@
   },
   "dependencies": {
     "better-sqlite3": "^12.11.1",
-    "commander": "^15.0.0",
-    "csv-parse": "^7.0.2",
-    "js-yaml": "^5.2.1",
-    "jsonc-parser": "^3.3.1",
-    "smol-toml": "^1.8.0",
-    "zod": "^4.4.3"
+    "jsonc-parser": "^3.3.1"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^26.2.0",
+    "commander": "^15.0.0",
+    "csv-parse": "^7.0.2",
     "esbuild": "^0.28.2",
     "eslint": "^10.8.1",
+    "exceljs": "^4.4.0",
     "html-to-text": "^10.0.1",
+    "js-yaml": "^5.2.1",
     "lefthook": "^2.1.10",
+    "smol-toml": "^1.8.0",
     "tsx": "^4.23.12",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.67.0",
-    "vitest": "^4.1.11"
+    "vitest": "^4.1.11",
+    "zod": "^4.4.3"
   },
   "optionalDependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@xenova/transformers": "^2.17.2",
-    "exceljs": "^4.4.0",
     "fast-xml-parser": "^5.9.3",
     "fflate": "^0.8.3",
     "pdfjs-dist": "^6.1.200",

package/scripts/install-git-hooks.mjs

@@ -0,0 +1,55 @@
+/**
+ * `prepare` hook: wire up lefthook's git hooks for a development checkout.
+ *
+ * Runs `lefthook install` when lefthook is actually present, and skips quietly when it isn't.
+ *
+ * The skip matters because npm runs `prepare` for more than the dev-checkout case it was added
+ * for. `npm install -g .` runs it in a context without this project's node_modules/.bin on PATH,
+ * so a bare `lefthook install` dies with "'lefthook' is not recognized" and fails the global
+ * install that CLAUDE.md prescribes as the dogfood step for every CLI/hook change. Installing
+ * token-goat as a dependency has the same shape: no devDependencies, and no git repo to hook.
+ *
+ * Skipping is deliberately conditioned on lefthook being *absent*, not on the command failing.
+ * A developer whose `lefthook install` genuinely breaks still gets a hard error, because these
+ * hooks were decorative once already -- configured in lefthook.yml but never installed, so every
+ * guard in it silently did nothing -- and swallowing failures here is how that recurs.
+ */
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+import path from 'node:path'
+import fs from 'node:fs'
+
+/**
+ * Absolute path to the lefthook CLI shim, or null when lefthook isn't installed here.
+ *
+ * Looks for npm's own `.bin` shim rather than resolving the package, because the shim is what
+ * npm creates for a devDependency and it is the exact thing missing in the contexts we skip.
+ * `.cmd` first: on Windows the extensionless file is a shell script Node can't spawn directly.
+ */
+function findLefthookBin(startDir) {
+  const binDir = path.join(startDir, 'node_modules', '.bin')
+  for (const name of ['lefthook.cmd', 'lefthook']) {
+    const candidate = path.join(binDir, name)
+    if (fs.existsSync(candidate)) return candidate
+  }
+  return null
+}
+
+const projectRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
+const bin = findLefthookBin(projectRoot)
+
+if (bin === null) {
+  // Not a dev checkout with lefthook installed: a global install, a published-package install, or
+  // a pack/prepare temp dir. Nothing to wire up and nothing wrong -- exit 0 so the install works.
+  process.exit(0)
+}
+
+// npm's Windows shim is a .cmd batch file, which Node refuses to spawn without a shell. Quote the
+// path in that case, since `shell: true` re-parses the command string and the path can contain
+// spaces (a checkout under "C:\Program Files", a user profile with a space in the name).
+const needsShell = /\.(cmd|bat)$/i.test(bin)
+const result = spawnSync(needsShell ? `"${bin}"` : bin, ['install'], {
+  stdio: 'inherit',
+  shell: needsShell,
+})
+process.exit(result.status ?? 1)