token-goat 2.8.0 → 2.8.2

package/dist/{token-goat-chunk-VXSYZGBA.mjs → token-goat-chunk-2MWF3OGR.mjs}

@@ -2,6 +2,7 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   ALL_SYMBOLS_IN_FILE_LIMIT,
+  AMBIGUOUS_HEADING_LIMIT,
   CONTENT_MAX_INPUT_CHARS,
   WHOLE_FILE_NOTE_SYMBOL,
   compressText,
@@ -60,6 +61,7 @@ import {
   runOpenApiOutline,
   runOutline,
   runPdfExtractText,
+  runPdfLocate,
   runPdfMeta,
   runPdfOutline,
   runPrSlice,
@@ -84,7 +86,7 @@ import {
   runZipRead,
   symbolNamesInFile,
   upsertNote
-} from "./token-goat-chunk-SRAR6DOK.mjs";
+} from "./token-goat-chunk-LILS6TIU.mjs";
 import {
   BASH_OUTPUT_SUBDIR,
   GEMINI_TOOL_NAME_MAP,
@@ -111,7 +113,7 @@ import {
   searchRecall,
   storeWebOutput,
   summarizeResidentContext
-} from "./token-goat-chunk-AO6MFFTW.mjs";
+} from "./token-goat-chunk-5MLXFSRI.mjs";
 import {
   AGENT_SALT_MARKER,
   CONTEXT_AUTOCOMPACT_TOKENS,
@@ -254,7 +256,7 @@ import {
   vscodeDecoderConfigured,
   walkProject,
   writeCompact
-} from "./token-goat-chunk-2F6TFBZE.mjs";
+} from "./token-goat-chunk-AM23GDIS.mjs";
 import {
   C,
   CONFIG_KEY_ENV_OVERRIDES,
@@ -307,6 +309,7 @@ import {
   parse,
   pushAll,
   readConfigSource,
+  readUnmappedTools,
   recordStat,
   redactIfDotenv,
   redactUrlQuery,
@@ -335,11 +338,14 @@ import {
   withFileLock,
   withRetryOnLock,
   writeJsonSettings
-} from "./token-goat-chunk-44Y77VHR.mjs";
+} from "./token-goat-chunk-IVCTQPZD.mjs";
 import {
   __export
 } from "./token-goat-chunk-AEX54RUZ.mjs";
 
+// src/cli.ts
+import { randomBytes } from "node:crypto";
+
 // node_modules/commander/lib/error.js
 var CommanderError = class extends Error {
   /**
@@ -4081,7 +4087,8 @@ var PI_EXTENSION_SCRIPT = `// token-goat bridge extension for pi (pi-coding-agen
 // Bridges pi's extension events to token-goat's subprocess hook protocol.
 // https://github.com/DFKHelper/token-goat
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { spawnSync } from "node:child_process";
+import { spawnSync } from "node:child_process"
+import crypto from "node:crypto";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
@@ -4540,6 +4547,7 @@ var OPENCODE_PLUGIN_SCRIPT = `// token-goat bridge plugin for opencode
 // Bridges opencode's plugin hooks to token-goat's subprocess hook protocol.
 // https://github.com/DFKHelper/token-goat
 import { spawnSync } from "node:child_process"
+import crypto from "node:crypto"
 import fs from "node:fs"
 import os from "node:os"
 import path from "node:path"
@@ -5012,11 +5020,23 @@ var NO_SERVER_HANDLER_REASON = "token-goat has no registered server-side handler
 var NO_POST_COMPACT_EVENT_REASON = "post_compact is a Claude Code event (hook_event_name PostCompact, carrying compact_summary); no equivalent has been confirmed for this harness, so it is left unwired rather than guessed at";
 var NO_SEPARATE_FAILURE_EVENT_REASON = "post_tool_use_failure exists because Copilot CLI routes a failed tool result to a separate postToolUseFailure event instead of postToolUse. No separate failure event is wired for this harness, so a failed tool call either arrives on post_tool_use like any other result or is not seen; which of the two has not been checked here";
 var COPILOT_NO_POST_COMPACT_REASON = "Copilot CLI has no post-compaction hook: its HookType enum (schemas/api.schema.json, 1.0.79 and 1.0.80) declares preCompact and no postCompact, and both preCompact call sites in app.js await the hook and never assign its result. Whether the summary is reachable another way is open. app.js does emit session.compaction_complete carrying summaryContent, and the session event writer subscribes to '*' -- but emit() vs emitEphemeral() does NOT gate that writer: dispatchEventHandlers runs outside the ephemeral branch in emitInternal, on('*') early-returns past every filter, and the writer's callback applies no filter of its own before handing the JSON to native recordEventJson. The durable-vs-ephemeral decision is in Rust (api_session_event_writer.rs) and was not readable. Nor is the event uniformly summary-bearing: two of the four emit sites are the branches taken when no summary exists, summaryContent is optional in the schema, and the relay session class emits the same event via emitEphemeral. No compaction has ever been observed on the machines checked, so nothing empirical anchors any of it. Context can be written back on the next turn through userPromptSubmitted additionalContext";
+var VERIFICATION_RANK = {
+  dogfooded: 0,
+  sourced: 1,
+  documented: 2
+};
+var VERIFICATION_BLURB = {
+  dogfooded: "driven against the real harness binary",
+  sourced: "wire format read from the harness's own source or declarations, never driven against it",
+  documented: "wired from the harness's documentation only, never driven against it"
+};
 var BRIDGE_CAPABILITY_MATRIX = [
   {
     harness: "claudecode",
     label: "Claude Code",
     sourceFile: "src/install.ts (HOOK_EVENT_MAP)",
+    verification: "dogfooded",
+    verificationNote: "The harness this repo is developed and released under; CLAUDE.md requires every CLI/hook change be run against the built binary here before it ships.",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "post_compact", "user_prompt_submit", "subagent_stop", "session_start"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5027,6 +5047,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "codex",
     label: "Codex CLI",
     sourceFile: "src/bridges/codex_install.ts (CODEX_HOOK_EVENTS, CODEX_GLOBAL_HOOK_EVENTS)",
+    verification: "sourced",
+    verificationNote: "Wire format pinned to Codex 0.137.0+'s declared hookSpecificOutput schema (src/bridges/codex.ts); no run against a Codex binary is recorded here.",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "user_prompt_submit", "subagent_stop"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5042,6 +5064,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "grok",
     label: "Grok CLI",
     sourceFile: "src/bridges/grok_install.ts (GROK_HOOK_EVENTS)",
+    verification: "dogfooded",
+    verificationNote: "grok 0.2.93, 2026-07-09: observed executing the global settings.json hooks config unmodified and setting GROK_SESSION_ID on every hook subprocess (src/bridges/registry.ts, src/hooks_cli.ts).",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "user_prompt_submit", "subagent_stop"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5106,6 +5130,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "copilot_cli",
     label: "Copilot CLI",
     sourceFile: "src/bridges/copilot_cli_install.ts (COPILOT_CLI_HOOK_EVENTS), src/bridges/copilot_cli.ts (COPILOT_TO_TG_EVENT)",
+    verification: "dogfooded",
+    verificationNote: "doctor's checkCopilotCli drives the installed shim end to end, and every hook payload field is cross-checked against Copilot's own declarations pinned at 1.0.80 (schemas/copilot_cli.hooks.json).",
     implemented: /* @__PURE__ */ new Set([
       "session_start",
       "pre_tool_use",
@@ -5128,6 +5154,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "gemini",
     label: "Gemini CLI",
     sourceFile: "src/bridges/gemini_install.ts (GEMINI_HOOK_EVENTS)",
+    verification: "sourced",
+    verificationNote: "Verified against Gemini CLI's published hooks reference (src/bridges/gemini_install.ts); no run against a Gemini binary is recorded here.",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5142,6 +5170,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "qwen",
     label: "Qwen Code",
     sourceFile: "src/bridges/qwen_install.ts (QWEN_HOOK_EVENTS)",
+    verification: "documented",
+    verificationNote: "Wired from QwenLM/qwen-code's hooks.md, which src/bridges/qwen_install.ts states was not live-tested against a running install.",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "user_prompt_submit", "subagent_stop"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5161,6 +5191,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "kimi",
     label: "Kimi Code CLI",
     sourceFile: "src/bridges/kimi_install.ts (KIMI_EVENT_ARG), src/bridges/kimi.ts (KIMI_HOOK_SCRIPT)",
+    verification: "sourced",
+    verificationNote: "Payload keys and response contract read from MoonshotAI/kimi-code's own source (externalHooksRunner/runner.ts, externalHooksService.ts); no run against a Kimi binary is recorded here.",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "user_prompt_submit", "subagent_stop", "session_start"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5172,6 +5204,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "opencode",
     label: "opencode",
     sourceFile: "src/bridges/opencode.ts",
+    verification: "sourced",
+    verificationNote: "Tool ids, parameter keys and handler behavior read directly from opencode's own source (src/bridges/opencode.ts); no run against a running gateway is recorded here.",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5186,6 +5220,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "openclaw",
     label: "OpenClaw",
     sourceFile: "src/bridges/openclaw.ts",
+    verification: "sourced",
+    verificationNote: "Verified against the live plugin docs and OpenClaw's aristotle-agent/types.ts; the bridge's own note lists what stays unverified without a live instance (built-in tool names, session id).",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5200,6 +5236,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     harness: "pi",
     label: "pi (pi-coding-agent)",
     sourceFile: "src/bridges/pi.ts",
+    verification: "sourced",
+    verificationNote: "Response shape verified against pi's own TextContent/ImageContent types (src/bridges/pi.ts); no run against a pi binary is recorded here.",
     implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact"]),
     reasons: [
       { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
@@ -5223,7 +5261,15 @@ function bridgesStatusToJson(matrix = BRIDGE_CAPABILITY_MATRIX) {
         reasons[event] = reason;
       }
     }
-    return { harness: row.harness, label: row.label, sourceFile: row.sourceFile, events, reasons };
+    return {
+      harness: row.harness,
+      label: row.label,
+      sourceFile: row.sourceFile,
+      verification: row.verification,
+      verificationNote: row.verificationNote,
+      events,
+      reasons
+    };
   });
 }
 function formatBridgesStatus(matrix = BRIDGE_CAPABILITY_MATRIX) {
@@ -5234,7 +5280,8 @@ function formatBridgesStatus(matrix = BRIDGE_CAPABILITY_MATRIX) {
   lines.push("Read-only static analysis of src/bridges/*_install.ts and *.ts -- never invokes a real harness binary.");
   lines.push("");
   const harnessWidth = Math.max(...matrix.map((r) => r.harness.length), "harness".length);
-  const header = ["harness".padEnd(harnessWidth), ...HOOK_EVENTS.map((e) => e), "score"].join("  ");
+  const verifyWidth = Math.max(...matrix.map((r) => r.verification.length), "verified".length);
+  const header = ["harness".padEnd(harnessWidth), ...HOOK_EVENTS.map((e) => e), "score", "verified".padEnd(verifyWidth)].join("  ");
   lines.push(header);
   for (const row of matrix) {
     const cells = HOOK_EVENTS.map((event) => {
@@ -5242,7 +5289,16 @@ function formatBridgesStatus(matrix = BRIDGE_CAPABILITY_MATRIX) {
       return cell.padEnd(event.length);
     });
     const score = `${row.implemented.size}/${HOOK_EVENTS.length}`;
-    lines.push([row.harness.padEnd(harnessWidth), ...cells, score].join("  "));
+    lines.push([row.harness.padEnd(harnessWidth), ...cells, score, row.verification.padEnd(verifyWidth)].join("  "));
+  }
+  lines.push("");
+  lines.push("## How each row was established");
+  for (const level of Object.keys(VERIFICATION_RANK)) {
+    lines.push(`- ${level}: ${VERIFICATION_BLURB[level]}`);
+  }
+  lines.push("");
+  for (const row of [...matrix].sort((a, b) => VERIFICATION_RANK[a.verification] - VERIFICATION_RANK[b.verification])) {
+    lines.push(`- ${row.harness} (${row.verification}): ${row.verificationNote}`);
   }
   const gapRows = matrix.filter((r) => r.reasons.length > 0);
   if (gapRows.length > 0) {
@@ -5256,6 +5312,11 @@ function formatBridgesStatus(matrix = BRIDGE_CAPABILITY_MATRIX) {
   }
   return lines.join("\n");
 }
+function installVerificationNotice(harness) {
+  const row = BRIDGE_CAPABILITY_MATRIX.find((r) => r.harness === harness);
+  if (row === void 0 || row.verification === "dogfooded") return null;
+  return `NOTE: the ${row.label} bridge is ${row.verification} -- ${VERIFICATION_BLURB[row.verification]}. If a token-goat feature seems to do nothing here, run \`token-goat doctor\` (its "Tool names" check reports what ${row.label} actually sent) and please open an issue. Details: token-goat bridges-status.`;
+}
 
 // src/sharepoint_resolve.ts
 import * as fs8 from "node:fs";
@@ -5673,6 +5734,7 @@ function runStats(opts = {}) {
       by_project: summary.by_project,
       by_command: summary.by_command,
       by_source: summary.by_source,
+      by_harness: summary.by_harness,
       window_days: summary.window_days
     };
     process.stdout.write(JSON.stringify(out2) + "\n");
@@ -5767,7 +5829,9 @@ function checkMcpProcessHealth(processes) {
   const nodeProcesses = processes.filter((process3) => process3.name.toLowerCase() === "node.exe");
   const chromeLaunchers = nodeProcesses.filter((process3) => /npx-cli\.js.*chrome-devtools-mcp/i.test(process3.commandLine));
   const playwrightLaunchers = nodeProcesses.filter((process3) => /npx-cli\.js.*@playwright[\\/]mcp/i.test(process3.commandLine));
-  const orphanedNodeProcesses = nodeProcesses.filter((process3) => !byPid.has(process3.parentProcessId));
+  const orphanedNodeProcesses = nodeProcesses.filter(
+    (process3) => !byPid.has(process3.parentProcessId) && !/--worker-daemon\b/.test(process3.commandLine)
+  );
   const launchers = chromeLaunchers.length + playwrightLaunchers.length;
   if (launchers > 2 || orphanedNodeProcesses.length > 0) {
     const details = [];
@@ -6211,6 +6275,38 @@ function checkCompactionChannel(dbPath) {
     return { name, status: "warn", message: `could not read compaction stats: ${extractErrorMessage(e)}` };
   }
 }
+var UNMAPPED_TOOL_SAMPLE = 5;
+function checkUnmappedTools(dbPath) {
+  const name = "Tool names";
+  if (!fs12.existsSync(dbPath)) {
+    return { name, status: "ok", message: "no database yet" };
+  }
+  try {
+    const rows = readUnmappedTools(dbPath);
+    if (rows.length === 0) {
+      return { name, status: "ok", message: "every tool name seen so far reached a handler that wanted it" };
+    }
+    const nearMisses = rows.filter((r) => r.near_miss !== null && r.near_miss !== void 0);
+    if (nearMisses.length > 0) {
+      const shown2 = nearMisses.slice(0, UNMAPPED_TOOL_SAMPLE).map((r) => `${r.harness} sent "${r.tool_name}" where "${r.near_miss}" is handled (${r.event_name}, ${r.hits}x)`);
+      const more2 = nearMisses.length > UNMAPPED_TOOL_SAMPLE ? ` (+${nearMisses.length - UNMAPPED_TOOL_SAMPLE} more)` : "";
+      return {
+        name,
+        status: "warn",
+        message: `${shown2.join("; ")}${more2} -- these differ only by case or separators, so that bridge's tool-rename step is very likely not being applied and every handler behind those names is inert`
+      };
+    }
+    const shown = rows.slice(0, UNMAPPED_TOOL_SAMPLE).map((r) => `${r.tool_name} (${r.hits}x)`);
+    const more = rows.length > UNMAPPED_TOOL_SAMPLE ? `, +${rows.length - UNMAPPED_TOOL_SAMPLE} more` : "";
+    return {
+      name,
+      status: "ok",
+      message: `${rows.length} tool name(s) seen with no handler, none resembling one token-goat handles: ${shown.join(", ")}${more}`
+    };
+  } catch (e) {
+    return { name, status: "warn", message: `could not read the tool-name histogram: ${extractErrorMessage(e)}` };
+  }
+}
 function runDoctor(dataDir2, configPath2, rootDir, processes) {
   const results = [];
   const actualDataDir = dataDir2 || dataDir();
@@ -6223,6 +6319,7 @@ function runDoctor(dataDir2, configPath2, rootDir, processes) {
   results.push(checkSymbolCount(path11.join(actualDataDir, "global.db"), rootDir));
   results.push(checkDirtyQueueHealth(actualDataDir));
   results.push(checkCompactionChannel(path11.join(actualDataDir, "global.db")));
+  results.push(checkUnmappedTools(path11.join(actualDataDir, "global.db")));
   const actualConfigPath = configPath2 || configPath();
   results.push(checkConfigValid(actualConfigPath));
   results.push(checkEmbeddings(loadConfig(rootDir)));
@@ -9118,6 +9215,10 @@ var GO_FAIL = /^--- FAIL:\s+(\S+)/;
 var CARGO_FAIL = /^test (\S+) \.\.\. FAILED/;
 var CARGO_SECTION = /^---- (\S+) (?:stdout|stderr) ----$/;
 var CARGO_RESULT = /^test result:/;
+var VITEST_FAIL_HEADER = /^\s+FAIL\s+(.+?)\s*$/;
+var VITEST_BANNER = /⎯+\s*Failed Tests\s+\d+\s*⎯+/;
+var VITEST_SEPARATOR = /^⎯+.*⎯+$/;
+var VITEST_SUMMARY = /^\s*(Test Files|Tests|Start at|Duration)\s/;
 function detectRunner(text) {
   if (text.includes("=== FAILURES ===") || text.includes("=== ERRORS ===")) {
     return "pytest";
@@ -9125,6 +9226,9 @@ function detectRunner(text) {
   if (/\bFAILED\b.+::test_/.test(text) || /short test summary/i.test(text)) {
     return "pytest";
   }
+  if (VITEST_BANNER.test(text) || /^\s*Test Files\s+/m.test(text) && /^\s*Tests\s+\d+\s+(failed|passed)/m.test(text)) {
+    return "vitest";
+  }
   if (/^\s+●\s/m.test(text) || /^FAIL\s+\S+\.test\b/m.test(text)) {
     return "jest";
   }
@@ -9249,6 +9353,44 @@ function extractJest(lines) {
   }
   return result;
 }
+function extractVitest(lines) {
+  const result = { runner: "vitest", blocks: [], summaryLines: [], statsLine: "" };
+  let inBlock = false;
+  let currentName = "";
+  let currentBody = [];
+  const flush = () => {
+    if (inBlock && currentName) result.blocks.push({ name: currentName, body: currentBody.join("\n").trimEnd() });
+    inBlock = false;
+    currentName = "";
+    currentBody = [];
+  };
+  for (const line of lines) {
+    const s = line.trimEnd();
+    const header = VITEST_FAIL_HEADER.exec(s);
+    if (header) {
+      flush();
+      currentName = header[1] ?? "";
+      currentBody = [];
+      inBlock = true;
+      result.summaryLines.push(currentName);
+      continue;
+    }
+    if (VITEST_SUMMARY.test(s)) {
+      if (/^\s*Tests\s/.test(s)) result.statsLine = s.trim();
+      flush();
+      continue;
+    }
+    if (inBlock) {
+      if (VITEST_SEPARATOR.test(s)) {
+        flush();
+        continue;
+      }
+      currentBody.push(s);
+    }
+  }
+  flush();
+  return result;
+}
 function extractGo(lines) {
   const result = {
     runner: "go",
@@ -9371,6 +9513,9 @@ function extractFailures(text, options) {
   if (detected === "pytest") {
     return extractPytest(lines);
   }
+  if (detected === "vitest") {
+    return extractVitest(lines);
+  }
   if (detected === "jest") {
     return extractJest(lines);
   }
@@ -9836,7 +9981,7 @@ function parseNodeBlock(lines, start) {
   }
   return { block: { frames, exception: header }, nextIndex: i };
 }
-var RUST_PANIC_HEADER_RE = /^thread '[^']*' panicked at (.+):(\d+):(\d+):\s*$/;
+var RUST_PANIC_HEADER_RE = /^thread '[^']*' panicked at ([^:\r\n]+):(\d+):(\d+):\s*$/;
 var RUST_BACKTRACE_NOTE_RE = /^note: run with `RUST_BACKTRACE=1`/;
 var RUST_BACKTRACE_NUM_RE = /^\s*\d+:\s+(.+)$/;
 var RUST_BACKTRACE_AT_RE = /^\s+at\s+(.+):(\d+):(\d+)\s*$/;
@@ -9882,7 +10027,7 @@ function parseRustBlock(lines, start) {
   }
   return { block: { frames: [panicFrame], exception }, nextIndex: i };
 }
-var JVM_HEADER_RE = /^(?:Exception in thread "[^"]*" )?(?:Caused by: )?((?:[A-Za-z_$][\w$]*\.)+[A-Za-z_$][\w$]*): (.*)$/;
+var JVM_HEADER_RE = /^(?:Exception in thread "[^"\r\n]*" )?(?:Caused by: )?((?:[A-Za-z_$][\w$]*\.)+[A-Za-z_$][\w$]*): (.*)$/;
 var JVM_FRAME_RE = /^\s+at\s+(\S+)\(([^)]*)\)\s*$/;
 var JVM_MORE_RE = /^\s*\.\.\.\s+\d+\s+more\s*$/;
 function parseJvmFrameLine(line) {
@@ -13898,7 +14043,7 @@ async function cmdMcpServe() {
   let StdioServerTransport;
   try {
     ;
-    ({ createMcpServer } = await import("./token-goat-chunk-FBGBTICM.mjs"));
+    ({ createMcpServer } = await import("./token-goat-chunk-AL644JUV.mjs"));
     ({ StdioServerTransport } = await import("./token-goat-chunk-324QOJYZ.mjs"));
   } catch (err2) {
     process.stderr.write(
@@ -13915,11 +14060,15 @@ async function cmdMcpServe() {
     server.onclose = resolve12;
   });
 }
+function printBridgeVerificationNotice(harness) {
+  const notice = installVerificationNotice(harness);
+  if (notice !== null) out(notice);
+}
 async function cmdHook(event, opts) {
   if (typeof opts.harness === "string" && opts.harness.length > 0) {
     process.env[ENV_KEYS.HARNESS_OVERRIDE] = opts.harness;
   }
-  const { relay } = await import("./token-goat-chunk-A62K4XW2.mjs");
+  const { relay } = await import("./token-goat-chunk-JU7QESB3.mjs");
   await relay(event);
 }
 async function cmdInstall(opts) {
@@ -13946,6 +14095,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat Codex CLI integration \u2192 ${codexResult.configPath}, ${codexResult.agentsPath}`);
     }
+    printBridgeVerificationNotice("codex");
   }
   if (opts.gemini === true) {
     const geminiResult = installGemini();
@@ -13954,6 +14104,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat Gemini CLI integration \u2192 ${geminiResult.settingsPath}`);
     }
+    printBridgeVerificationNotice("gemini");
   }
   if (opts.qwen === true) {
     const qwenResult = installQwen();
@@ -13962,6 +14113,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat Qwen Code integration \u2192 ${qwenResult.settingsPath}`);
     }
+    printBridgeVerificationNotice("qwen");
   }
   if (opts.kimi === true) {
     const kimiResult = installKimi();
@@ -13970,6 +14122,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat Kimi Code integration \u2192 ${kimiResult.configPath}, ${kimiResult.hookScriptPath}, ${kimiResult.agentsPath}, ${kimiResult.skillPath}`);
     }
+    printBridgeVerificationNotice("kimi");
   }
   if (opts.pi === true) {
     const piResult = installPi({ local: opts.local === true });
@@ -13978,6 +14131,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat pi extension \u2192 ${piResult.extensionPath}`);
     }
+    printBridgeVerificationNotice("pi");
   }
   if (opts.openclaw === true) {
     const openclawResult = installOpenclaw();
@@ -13986,6 +14140,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat OpenClaw integration \u2192 ${openclawResult.configPath}, ${openclawResult.pluginPath}`);
     }
+    printBridgeVerificationNotice("openclaw");
   }
   if (opts.copilot === true) {
     const copilotResult = installCopilotCli({ local: opts.local === true });
@@ -13994,6 +14149,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat Copilot CLI integration \u2192 ${copilotResult.configPath}, ${copilotResult.scriptPath}, ${copilotResult.instructionsPath}`);
     }
+    printBridgeVerificationNotice("copilot_cli");
   }
   if (opts.opencode === true) {
     const opencodeResult = installOpencode();
@@ -14002,6 +14158,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat opencode plugin \u2192 ${opencodeResult.pluginPath}`);
     }
+    printBridgeVerificationNotice("opencode");
   }
   if (opts.grok === true) {
     const grokResult = installGrok();
@@ -14010,6 +14167,7 @@ async function cmdInstall(opts) {
     } else {
       out(`Installed token-goat Grok CLI integration \u2192 ${grokResult.configPath}, ${grokResult.hookScriptPath}`);
     }
+    printBridgeVerificationNotice("grok");
   }
   if (opts.vscode === true) {
     const vscodeResult = installVscode({ project: opts.project === true });
@@ -14344,10 +14502,11 @@ function _applyFiltersAndPrint(content, opts, fenceUntrusted = false, fenceTag =
       content = [...matched.slice(0, cap), "[token-goat: showing first " + cap + " of " + matched.length + " matching lines; raise --max-matches for more]"].join("\n");
     }
   }
-  const lines = content.split(/\r?\n/);
+  const rawLines = content.split(/\r?\n/);
   if (opts.full === true) {
-    return emit2(lines.join("\n"));
+    return emit2(rawLines.join("\n"));
   }
+  const lines = rawLines.length > 1 && rawLines[rawLines.length - 1] === "" ? rawLines.slice(0, -1) : rawLines;
   const headN = opts.head !== void 0 ? requireNonNegativeInt("--head", opts.head) : 30;
   const tailN = opts.tail !== void 0 ? requireNonNegativeInt("--tail", opts.tail) : 80;
   const applyElision = (lines2, headN2, tailN2) => lines2.length > headN2 + tailN2 + 1 ? [...lines2.slice(0, headN2), "...(elided)...", ...lines2.slice(lines2.length - tailN2)] : lines2;
@@ -14431,6 +14590,33 @@ async function cmdPdfExtract(file, opts) {
   const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(printed, "utf8"));
   recordStat("pdf_extract", bytesSaved, Math.round(bytesSaved / 4));
 }
+async function cmdPdfLocate(file, pattern, opts) {
+  const locateOpts = {
+    ignoreCase: opts.ignoreCase === true
+  };
+  if (opts.maxMatches !== void 0) locateOpts.maxMatches = requirePositiveInt("--max-matches", opts.maxMatches);
+  if (opts.context !== void 0) locateOpts.context = requirePositiveInt("--context", opts.context);
+  if (opts.pages !== void 0) locateOpts.pages = opts.pages;
+  const matches2 = await runPdfLocate(file, pattern, locateOpts);
+  const pages = matches2.map((m) => m.page);
+  let printed;
+  if (opts.json === true) {
+    printed = JSON.stringify({ file, pattern, matchCount: matches2.length, pages, matches: matches2 }, null, 2);
+    out(printed);
+  } else if (matches2.length === 0) {
+    printed = "(no matches)";
+    out(printed);
+  } else {
+    const lines = matches2.map((m) => `p${m.page}: ${m.snippet}`);
+    printed = `${lines.join("\n")}
+
+${countNoun(matches2.length, "match", "matches")} across ${countNoun(pages.length, "page")}`;
+    out(printed);
+  }
+  const fullSourceBytes = fileSizeOrZero(file);
+  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(printed, "utf8"));
+  recordStat("pdf_locate", bytesSaved, Math.round(bytesSaved / 4));
+}
 async function cmdPdfOutline(file, opts) {
   const entries = await runPdfOutline(file);
   if (entries.length === 0) {
@@ -14777,7 +14963,7 @@ function emitExtraFileArgsNote(command, first, extras, opts = {}) {
 }
 async function cmdCompress(opts) {
   try {
-    const bashRunner = await import("./token-goat-chunk-4KZILRZN.mjs");
+    const bashRunner = await import("./token-goat-chunk-BTZSUIYA.mjs");
     if (opts.compress === false) {
       process.exitCode = bashRunner.runRaw(opts.cmd, parseTimeout(opts.timeout, bashRunner.DEFAULT_TIMEOUT_SECONDS));
       return;
@@ -15027,8 +15213,13 @@ async function cmdSkillSection(nameHeading, headingArg) {
   const body = decodeSource(fs27.readFileSync(filePath));
   const extracted = extractNamedSection(body, heading);
   if (!extracted) {
-    process.exitCode = 1;
-    return;
+    const messages = [`Section '${heading}' not found in skill '${skillName}'`];
+    const allHeadings = listSections(filePath);
+    const available = filterSimilarHeadings(allHeadings, heading);
+    if (available.length > 0) messages.push(didYouMean(available));
+    else if (allHeadings.length === 0) messages.push(`skill '${skillName}' has no headings`);
+    else messages.push(`Try: token-goat outline ${filePath}`);
+    throw new CliError(messages.join("\n"));
   }
   out(extracted);
 }
@@ -15041,7 +15232,7 @@ function atomicWriteBuffer(dest, data) {
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
   }
-  const rnd = Math.random().toString(36).slice(2, 8);
+  const rnd = randomBytes(4).toString("hex");
   const tmp = path27.join(path27.dirname(path27.resolve(dest)), `.tmp.${process.pid}.${rnd}`);
   try {
     fs27.writeFileSync(tmp, data, { mode: 384 });
@@ -15081,7 +15272,7 @@ function mapFsError(e, src, dest, srcLabel = "source") {
   if (fe.code === "ENOENT") {
     const errPath = fe.path ?? "";
     const isSource = src !== void 0 && path27.resolve(errPath) === path27.resolve(src);
-    if (isSource) throw new CliError(`${srcLabel} file not found: ${src}`);
+    if (isSource) throw new CliError(`${/\bfile$/i.test(srcLabel) ? srcLabel : `${srcLabel} file`} not found: ${src}`);
     const destDir = dest ? path27.dirname(path27.resolve(dest)) : path27.dirname(path27.resolve(errPath || "."));
     throw new CliError(`destination directory does not exist: ${destDir}`);
   }
@@ -15612,6 +15803,18 @@ function cmdInsertSection(file, opts) {
     else if (allHeadings.length > 0) messages.push(`Try: token-goat outline ${file}`);
     throw new CliError(messages.join("\n"));
   }
+  if (result.occurrences !== void 0) {
+    const lines = [
+      `Ambiguous heading '${opts.after}' in '${file}': ${countNoun(result.occurrences.length, "heading")} match. Retry with one of the qualified forms below to pick one:`
+    ];
+    for (const [i, line] of result.occurrences.slice(0, AMBIGUOUS_HEADING_LIMIT).entries()) {
+      lines.push(`  - line ${line}  ->  --after "${opts.after}#${i + 1}"`);
+    }
+    if (result.occurrences.length > AMBIGUOUS_HEADING_LIMIT) {
+      lines.push(`  (${result.occurrences.length - AMBIGUOUS_HEADING_LIMIT} more not shown)`);
+    }
+    throw new CliError(lines.join("\n"));
+  }
   let rawBytes;
   try {
     rawBytes = fs27.readFileSync(file);
@@ -16266,6 +16469,9 @@ function buildProgram() {
   );
   program2.command("config-get <file> <key>").description("read one value from a config file (TOML/JSON/YAML/INI)").action((file, key) => runExit(() => runConfigGet({ file, key })));
   program2.command("pdf-extract <file>").description("extract plain text from a PDF (optionally --pages N or N-M) instead of a raw Read").option("--pages <spec>", "page range to extract, e.g. 1-5 or 3 (default: all pages)").option("--layout", "heuristic column-aware reading-order reconstruction from text-item coordinates (imperfect on rotated/overlapping text)").option("--head <n>", "show only the first N lines").option("--tail <n>", "show only the last N lines").option("--grep <pattern>", "filter to lines matching this regex").option("--section <heading>", "extract one markdown section by heading").option("--max-matches <n>", "cap the number of --grep matches shown").action(guard(cmdPdfExtract));
+  program2.command("pdf-locate <file> <pattern>").description(
+    "find which pages of a PDF match a regex, with a snippet per match, so you can pdf-extract only those pages instead of the whole document"
+  ).option("-i, --ignore-case", "case-insensitive matching").option("--max-matches <n>", "stop after this many page matches (default: 50)").option("--context <n>", "snippet length in characters around each match (default: 80)").option("--pages <spec>", "page range to scan, e.g. 1-5 or 3 (default: all pages)").option("-j, --json", "output as JSON").action(guard(cmdPdfLocate));
   program2.command("pdf-outline <file>").description("list a PDF's bookmark/outline tree with page numbers instead of a raw Read").option("-j, --json", "output as JSON").action(guard(cmdPdfOutline));
   program2.command("pdf-meta <file>").description("page count, title/author, and whether a PDF has an extractable text layer").option("-j, --json", "output as JSON").action(guard(cmdPdfMeta));
   program2.command("image-meta <file>").description("dimensions, byte size, format, and what a shrink would cost -- sharp metadata only, never runs OCR").option("-j, --json", "output as JSON").action(guard(cmdImageMeta));

package/dist/{token-goat-chunk-AO6MFFTW.mjs → token-goat-chunk-5MLXFSRI.mjs}

@@ -8,7 +8,7 @@ import {
   loadBlob,
   sanitizeFtsQuery,
   storeBlob
-} from "./token-goat-chunk-2F6TFBZE.mjs";
+} from "./token-goat-chunk-AM23GDIS.mjs";
 import {
   SYMBOL_BODY_CHAR_CAP,
   extractErrorMessage,
@@ -18,7 +18,7 @@ import {
   redactSecrets,
   runGit,
   shortFingerprint
-} from "./token-goat-chunk-44Y77VHR.mjs";
+} from "./token-goat-chunk-IVCTQPZD.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-AO2QD2AG.mjs";
@@ -404,10 +404,10 @@ var COMMAND_PATTERNS = {
   gitImmutable: /^\s*git\s+show\s+[0-9a-f]{40}\b/i,
   gitDiffScoped: /\s--\s+\S/,
   dirListing: /^\s*(?:ls|eza|exa|dir|Get-ChildItem|gci)\b/i,
-  depList: /^\s*(?:npm\s+(?:-\S+\s+)*(?:ls|list)\b|pip\s+(?:-\S+\s+)*(?:list|freeze)\b|uv\s+pip\s+(?:-\S+\s+)*(?:list|freeze)\b|pnpm\s+(?:-\S+\s+)*(?:list|ls)\b|yarn\s+(?:-\S+\s+)*(?:list)\b|cargo\s+(?:-\S+\s+)*tree\b|bundle\s+(?:-\S+\s+)*(?:list|show)\b|composer\s+(?:-\S+\s+)*show\b)/i,
-  npmInstall: /^\s*npm\s+(?:-\S+\s+)*(?:install|ci)\b/i,
-  npmAudit: /^\s*npm\s+(?:-\S+\s+)*audit\b(?!.*(?:--fix|fix)\b)/i,
-  npmOutdated: /^\s*npm\s+(?:-\S+\s+)*outdated\b/i,
+  depList: /^\s*(?:npm\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*(?:ls|list)\b|pip\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*(?:list|freeze)\b|uv\s+pip\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*(?:list|freeze)\b|pnpm\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*(?:list|ls)\b|yarn\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*(?:list)\b|cargo\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*tree\b|bundle\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*(?:list|show)\b|composer\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*show\b)/i,
+  npmInstall: /^\s*npm\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*(?:install|ci)\b/i,
+  npmAudit: /^\s*npm\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*audit\b(?!.*(?:--fix|fix)\b)/i,
+  npmOutdated: /^\s*npm\s+(?:--?[a-zA-Z0-9_-]+(?:\s+|=)?)*outdated\b/i,
   envProbe: /^\s*(?:node\s+(?:-v|--version)|npm\s+(?:-v|--version)|python3?\s+(?:(?:-V)\b|--?version)|git\s+--version|uv\s+--version|go\s+version|rustc\s+--version|cargo\s+--version|java\s+--version|ruby\s+--version|gem\s+--version|php\s+--version|which\b|where\b)/i,
   npx: /^\s*npx\s+(?:--?yes\s+)?(?!.*\b(?:install|add|remove|uninstall|i|rm|update|upgrade|set|get|publish|link|ci|audit|shrinkwrap|dedupe|prune|rebuild)\b)/i,
   gitPush: /^\s*git\s+push\b/i,