token-goat 2.8.1 → 2.8.3

package/dist/{token-goat-chunk-2G6RAB4G.mjs → token-goat-chunk-PWVXXPCC.mjs}

@@ -13,6 +13,7 @@ import {
   buildLineIndex,
   countContentLines,
   countNoun,
+  countRedactionPlaceholders,
   dataDir,
   decodeSource,
   detectHarness,
@@ -91,7 +92,7 @@ import {
   withFileLock,
   writeIfDifferent,
   writeJsonSettings
-} from "./token-goat-chunk-ELDJRLHZ.mjs";
+} from "./token-goat-chunk-6ODZ6PZK.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-AO2QD2AG.mjs";
@@ -325,12 +326,81 @@ function parseXml(xml) {
   return Object.fromEntries(root.children);
 }
 
+// src/zip_bounds.ts
+var MAX_ZIP_INPUT_BYTES = 50 * 1024 * 1024;
+var MAX_ZIP_OUTPUT_BYTES = 500 * 1024 * 1024;
+var STREAM_CHUNK_BYTES = 64 * 1024;
+var ZipOutputTooLargeError = class extends Error {
+  constructor(entryName, limitBytes, decompressedSoFarBytes) {
+    super(
+      `zip entry '${entryName}' is over the ${Math.round(limitBytes / (1024 * 1024))}MB decompressed-size limit (over ${Math.round(decompressedSoFarBytes / (1024 * 1024))}MB decompressed so far)`
+    );
+    this.name = "ZipOutputTooLargeError";
+  }
+};
+var ZipInputTooLargeError = class extends Error {
+  constructor(filePath, sizeBytes, limitBytes) {
+    super(`${filePath} is ${Math.round(sizeBytes / (1024 * 1024))}MB, over the ${Math.round(limitBytes / (1024 * 1024))}MB limit for zip-format archives`);
+    this.name = "ZipInputTooLargeError";
+  }
+};
+function concatChunks(chunks, total) {
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    out.set(chunk, offset);
+    offset += chunk.length;
+  }
+  return out;
+}
+function unzipBounded(mod, data, opts) {
+  mod.unzipSync(data, { filter: () => false });
+  const results = {};
+  let firstError;
+  let totalDecompressed = 0;
+  const unzip = new mod.Unzip((file) => {
+    if (firstError !== void 0 || !opts.shouldExtract(file.name)) return;
+    if (typeof file.originalSize === "number" && totalDecompressed + file.originalSize > opts.limitBytes) {
+      firstError = new ZipOutputTooLargeError(file.name, opts.limitBytes, totalDecompressed + file.originalSize);
+      return;
+    }
+    const chunks = [];
+    let entryTotal = 0;
+    file.ondata = (err, chunk, final) => {
+      if (firstError !== void 0) return;
+      if (err) {
+        firstError = err instanceof Error ? err : new Error(String(err));
+        return;
+      }
+      entryTotal += chunk.length;
+      totalDecompressed += chunk.length;
+      if (totalDecompressed > opts.limitBytes) {
+        firstError = new ZipOutputTooLargeError(file.name, opts.limitBytes, totalDecompressed);
+        return;
+      }
+      chunks.push(chunk);
+      if (final) results[file.name] = concatChunks(chunks, entryTotal);
+    };
+    file.start();
+  });
+  unzip.register(mod.UnzipInflate);
+  let offset = 0;
+  for (; ; ) {
+    const end = Math.min(offset + STREAM_CHUNK_BYTES, data.length);
+    const isFinal = end >= data.length;
+    unzip.push(data.subarray(offset, end), isFinal);
+    offset = end;
+    if (firstError !== void 0 || isFinal) break;
+  }
+  if (firstError !== void 0) throw firstError;
+  return results;
+}
+
 // src/ooxml_extract.ts
 var loadFflate = createLazyModuleLoader(
   async () => await import("fflate"),
   "office-file reading disabled (fflate unavailable)"
 );
-var MAX_OOXML_INPUT_BYTES = 50 * 1024 * 1024;
 function accessFailureMessage(err, filePath) {
   const code = err?.code;
   if (code === "ENOENT") return `File not found: ${filePath}`;
@@ -346,8 +416,8 @@ async function readOoxmlZip(filePath, kind) {
     throw new Error(accessFailureMessage(err, filePath), { cause: err });
   }
   if (!stat2.isFile()) throw new Error(`not a valid ${kind} file: ${filePath}`);
-  if (stat2.size > MAX_OOXML_INPUT_BYTES) {
-    throw new Error(`${filePath} is ${Math.round(stat2.size / (1024 * 1024))}MB, over the ${MAX_OOXML_INPUT_BYTES / (1024 * 1024)}MB limit for OOXML files`);
+  if (stat2.size > MAX_ZIP_INPUT_BYTES) {
+    throw new Error(`${filePath} is ${Math.round(stat2.size / (1024 * 1024))}MB, over the ${MAX_ZIP_INPUT_BYTES / (1024 * 1024)}MB limit for OOXML files`);
   }
   let data;
   try {
@@ -356,8 +426,9 @@ async function readOoxmlZip(filePath, kind) {
     throw new Error(accessFailureMessage(err, filePath), { cause: err });
   }
   try {
-    return fflate.unzipSync(new Uint8Array(data));
+    return unzipBounded(fflate, new Uint8Array(data), { limitBytes: MAX_ZIP_OUTPUT_BYTES, shouldExtract: () => true });
   } catch (err) {
+    if (err instanceof ZipOutputTooLargeError) throw err;
     throw new Error(`not a valid ${kind} file: ${filePath}`, { cause: err });
   }
 }
@@ -3408,6 +3479,15 @@ function denyOutput(message) {
 function contextOutput(context) {
   return { hookType: "context", context };
 }
+function emitRewrite(updatedOutput, detail, savings) {
+  const count = countRedactionPlaceholders(updatedOutput);
+  if (count > 0) recordStat("secret_redacted", 0, count, void 0, detail);
+  if (savings !== void 0) {
+    const bytesSaved = savings.originalBytes - Buffer.byteLength(updatedOutput, "utf-8");
+    if (bytesSaved > 0) recordStat(savings.kind, bytesSaved, Math.round(bytesSaved / 4));
+  }
+  return { hookType: "rewriteOutput", updatedOutput };
+}
 function countNonEmptyLines(text) {
   return text.split(/\r\n|\r|\n/).filter((line) => line.length > 0).length;
 }
@@ -3735,8 +3815,7 @@ function getHintStatsTotals() {
   return {
     savedBytes,
     spentBytes,
-    legacyEmissions,
-    netBytes: spentBytes === null ? null : savedBytes - spentBytes
+    legacyEmissions
   };
 }
 function resetHintStats() {
@@ -6855,6 +6934,7 @@ ${neutralizeFenceMarkers(text, UNTRUSTED_FILE_TAG)}
 </${UNTRUSTED_FILE_TAG}>`;
 }
 var UNTRUSTED_TOOL_TAG = "untrusted-tool-output";
+var UNTRUSTED_GITHUB_TAG = "untrusted-github-content";
 
 // src/skill_cache.ts
 import * as fs14 from "fs/promises";
@@ -7045,6 +7125,21 @@ async function hasSessionOutput(sessionId, skillName) {
     return false;
   }
 }
+async function sessionOutputBodyBytes(sessionId, skillName) {
+  try {
+    if (!sessionId) return null;
+    const name = safeSkillName(skillName);
+    if (!name) return null;
+    const safeSession = safeSessionFragment(sessionId);
+    const metas = await listOutputs();
+    const matches = metas.filter((m) => m.skillName === name && m.outputId.startsWith(`${safeSession}-`));
+    if (matches.length === 0) return null;
+    matches.sort((a, b) => b.ts - a.ts);
+    return matches[0].bodyBytes;
+  } catch {
+    return null;
+  }
+}
 async function findCrossSessionEntry(skillName, contentSha) {
   const name = safeSkillName(skillName);
   if (!name || !contentSha) return null;
@@ -7085,9 +7180,11 @@ async function storeOutput(sessionId, skillName, body, opts) {
     const ts = Date.now();
     const bodyBytes = Buffer.byteLength(body, "utf-8");
     const truncated = bodyBytes > 256 * 1024;
-    let storedBody = body;
+    const redactedBody = redactSecrets(body);
+    if (redactedBody.count > 0) recordStat("secret_redacted", 0, redactedBody.count, void 0, SKILLS_OUTPUT_SUBDIR);
+    let storedBody = redactedBody.text;
     if (truncated) {
-      const buf = Buffer.from(body, "utf-8");
+      const buf = Buffer.from(redactedBody.text, "utf-8");
       let truncStart = Math.max(0, buf.length - 262144);
       if (truncStart < buf.length) {
         const byte = buf[truncStart];
@@ -7135,7 +7232,9 @@ async function storeCompact(sessionId, skillName, compactText, sourceSha) {
     const safeSession = safeSessionFragment(sessionId);
     const fileId = `${safeSession}@${sanitizeSkillId(name)}@compact`;
     const dir = skillOutputsDir();
-    let text = compactText;
+    const redacted = redactSecrets(compactText);
+    if (redacted.count > 0) recordStat("secret_redacted", 0, redacted.count, void 0, SKILLS_OUTPUT_SUBDIR);
+    let text = redacted.text;
     if (sourceSha) {
       text = `<!-- source_sha: ${sourceSha.slice(0, 12)} -->
 ${text}`;
@@ -7587,7 +7686,9 @@ async function probeImageMeta(input) {
   const sharp = await loadSharp();
   if (sharp === null) return null;
   try {
-    const meta = await sharp(input, { limitInputPixels: false }).metadata();
+    const cfg = loadConfig().image_shrink;
+    const limitInputPixels = cfg.max_image_pixels > 0 ? cfg.max_image_pixels : false;
+    const meta = await sharp(input, { limitInputPixels }).metadata();
     return { width: meta.width ?? 0, height: meta.height ?? 0, format: meta.format ?? null, pages: meta.pages ?? 1 };
   } catch (e) {
     throw new ImageDecodeError(e?.message ?? "image could not be decoded");
@@ -9922,7 +10023,7 @@ function extractMarkdownHeadings(content, limit = MAX_HEADINGS) {
   const lines2 = content.split("\n");
   for (const [i, line] of eachUnfencedLine(lines2)) {
     if (!line) continue;
-    const match = /^(#+)\s+(.+?)(?:\s+#+\s*)?$/.exec(line);
+    const match = /^(#+)\s+([^\r\n]+?)(?:\s+#+)?\s*$/.exec(line);
     if (!match || match.length < 3) continue;
     const hashes = match[1];
     const headingText = match[2];
@@ -10052,7 +10153,7 @@ function handleHtml(filePath, content, contentLengthHint) {
       message: `Large HTML file (${formatBytes(length)}) \u2014 too large to preview (exceeds the in-hook scan cap). Use token-goat section to extract a section by heading, or convert to text: pandoc "${filePath}" -t plain`
     };
   }
-  const title = content.match(/<title[^>]*>([^<]+)<\/title>/i)?.[1]?.trim();
+  const title = content.match(/<title[^>]*>([^<]*)<\/title>/i)?.[1]?.trim();
   const headings = findHtmlHeadingMatches(content).slice(0, 20).map(({ level, heading }) => {
     if (!heading) return "";
     return `${"  ".repeat(level - 1)}h${level}: ${heading}`;
@@ -11229,7 +11330,7 @@ function preReadHandlerInner(event) {
       const isSourceExt = isSourceExtension(basename12);
       if (isSourceExt && reads >= 2) {
         recordStat("read_count_deny", rereadCredit, Math.round(rereadCredit / 4));
-        recordStat("session_hint", rereadCredit, Math.round(rereadCredit / 4));
+        recordStat("session_hint", 0, 0);
         return denyOutput(
           "Read this file " + reads + ' times already \u2014 use `token-goat read "' + shown + '::Symbol"`, `token-goat skeleton ' + shown + "`, or `token-goat outline " + shown + "` to pull just the part you need. " + editAnywayHint(normalized)
         );
@@ -12106,13 +12207,8 @@ function mapLookupBytesSaved(map, emittedText) {
     ...map.recentFiles.map((f) => normalizePath(path22.resolve(map.rootDir, f))),
     ...map.topSymbols.map((s) => normalizePath(s.filePath))
   ]);
-  let fullSourceBytes = 0;
-  for (const fp of referencedFiles) {
-    try {
-      fullSourceBytes += fs26.statSync(fp).size;
-    } catch {
-    }
-  }
+  const listingText = Array.from(referencedFiles).sort().join("\n");
+  const fullSourceBytes = Buffer.byteLength(listingText, "utf8");
   const emittedBytes = Buffer.byteLength(emittedText, "utf8");
   return Math.max(1, fullSourceBytes - emittedBytes);
 }
@@ -13581,7 +13677,7 @@ function extractDart(content, filePath) {
     const line = stripLineComment(blockStripped).trimEnd();
     const stripped = line.trim();
     if (!stripped) {
-      const braceLine2 = stripStringLiterals(line);
+      const braceLine2 = stripStringLiterals(line, { tripleQuotes: true });
       braceDepth += (braceLine2.match(/\{/g) ?? []).length - (braceLine2.match(/\}/g) ?? []).length;
       continue;
     }
@@ -13675,7 +13771,7 @@ function extractDart(content, filePath) {
         symbols.push(makeLineSymbol(filePath, fname, "function", lineNum, stripped.slice(0, 200), void 0, lines2, "c"));
       }
     }
-    const braceLine = stripStringLiterals(line);
+    const braceLine = stripStringLiterals(line, { tripleQuotes: true });
     for (const ch of braceLine) {
       if (ch === "{") {
         braceDepth++;
@@ -17572,8 +17668,8 @@ var NO_TREE_SITTER_EXTRACTORS = {
   toml: extractTomlSymbols,
   css: extractCssSymbols,
   dockerfile: extractDockerfileSymbols,
-  csharp: (content, filePath) => assignBraceBlockSpans(extractCsharp(content, filePath).symbols, content, "//"),
-  php: (content, filePath) => assignBraceBlockSpans(extractPhp(content, filePath).symbols, content, "//"),
+  csharp: (content, filePath) => assignBraceBlockSpans(extractCsharp(content, filePath).symbols, content, { lineComment: "//", stringEscapes: "csharp", rawStringQuotes: true }),
+  php: (content, filePath) => assignBraceBlockSpans(extractPhp(content, filePath).symbols, content, { lineComment: ["//", "#"], lineCommentExceptions: ["#["] }),
   html: (content, filePath) => {
     const r = extractHtml(content, filePath);
     return [...r.symbols, ...sectionsToHeadingSymbols(r.sections, filePath)];
@@ -17582,13 +17678,13 @@ var NO_TREE_SITTER_EXTRACTORS = {
     const r = extractLiquid(content, filePath);
     return [...r.symbols, ...sectionsToHeadingSymbols(r.sections, filePath)];
   },
-  kotlin: (content, filePath) => assignBraceBlockSpans(extractKotlin(content, filePath).symbols, content, "//"),
-  swift: (content, filePath) => assignBraceBlockSpans(extractSwift(content, filePath).symbols, content, "//"),
-  scala: (content, filePath) => assignBraceBlockSpans(extractScala(content, filePath).symbols, content, "//"),
+  kotlin: (content, filePath) => assignBraceBlockSpans(extractKotlin(content, filePath).symbols, content, { lineComment: "//", nestedBlockComments: true, tripleQuote: true }),
+  swift: (content, filePath) => assignBraceBlockSpans(extractSwift(content, filePath).symbols, content, { lineComment: "//", nestedBlockComments: true, tripleQuote: true }),
+  scala: (content, filePath) => assignBraceBlockSpans(extractScala(content, filePath).symbols, content, { lineComment: "//", nestedBlockComments: true, tripleQuote: true }),
   lua: (content, filePath) => extractLua(content, filePath).symbols,
   elixir: (content, filePath) => extractElixir(content, filePath).symbols,
-  dart: (content, filePath) => assignBraceBlockSpans(extractDart(content, filePath).symbols, content, "//"),
-  zig: (content, filePath) => assignBraceBlockSpans(extractZig(content, filePath).symbols, content, "//"),
+  dart: (content, filePath) => assignBraceBlockSpans(extractDart(content, filePath).symbols, content, { lineComment: "//", nestedBlockComments: true, tripleQuote: true, tripleSingleQuote: true }),
+  zig: (content, filePath) => assignBraceBlockSpans(extractZig(content, filePath).symbols, content, { lineComment: "//", blockComment: null, lineStringPrefix: "\\\\" }),
   r: (content, filePath) => extractR(content, filePath).symbols,
   graphql: (content, filePath) => extractGraphql(content, filePath).symbols,
   sql: extractSql,
@@ -17596,7 +17692,7 @@ var NO_TREE_SITTER_EXTRACTORS = {
   makefile: extractMakefile,
   proto: (content, filePath) => extractProto(content, filePath).symbols,
   terraform: extractTerraform,
-  powershell: (content, filePath) => assignBraceBlockSpans(extractPowershell(content, filePath).symbols, content, "#"),
+  powershell: (content, filePath) => assignBraceBlockSpans(extractPowershell(content, filePath).symbols, content, { lineComment: "#", stringEscapes: "powershell" }),
   apex: (content, filePath) => extractApex(content, filePath).symbols,
   salesforce_metadata: (content, filePath) => extractSalesforceMetadata(content, filePath).symbols,
   env_file: extractEnv,
@@ -18945,6 +19041,11 @@ export {
   locatePdfPages,
   extractPdfOutline,
   extractPdfMeta,
+  MAX_ZIP_INPUT_BYTES,
+  MAX_ZIP_OUTPUT_BYTES,
+  ZipOutputTooLargeError,
+  ZipInputTooLargeError,
+  unzipBounded,
   docxOutline,
   docxText,
   pptxOutline,
@@ -18979,6 +19080,7 @@ export {
   passOutput,
   denyOutput,
   contextOutput,
+  emitRewrite,
   makeDedupHintHandlers,
   registerHook,
   runHook,
@@ -19092,7 +19194,9 @@ export {
   scanForInjectionPatterns,
   UNTRUSTED_WEB_TAG,
   fenceUntrustedContent,
+  UNTRUSTED_FILE_TAG,
   UNTRUSTED_TOOL_TAG,
+  UNTRUSTED_GITHUB_TAG,
   SKILLS_OUTPUT_SUBDIR,
   skillOutputsDir,
   contentHash,
@@ -19101,6 +19205,7 @@ export {
   extractChecklistSection,
   listOutputs,
   hasSessionOutput,
+  sessionOutputBodyBytes,
   storeOutput,
   storeCompact,
   incrementSkillHit,

package/dist/{token-goat-chunk-RMDQFTQD.mjs → token-goat-chunk-TX4JFJTD.mjs}

@@ -4,8 +4,13 @@ import {
   IMPORT_RE,
   ImageDecodeError,
   MAX_OVER_FETCH,
+  MAX_ZIP_INPUT_BYTES,
+  MAX_ZIP_OUTPUT_BYTES,
   OVER_FETCH_FACTOR,
   SKIP_DIRS,
+  UNTRUSTED_GITHUB_TAG,
+  ZipInputTooLargeError,
+  ZipOutputTooLargeError,
   capJsonRows,
   countRefs,
   countSymbols,
@@ -18,6 +23,7 @@ import {
   extractPdfMeta,
   extractPdfOutline,
   extractPdfText,
+  fenceUntrustedContent,
   formatCsvProfile,
   formatCsvTable,
   getFileEntry,
@@ -42,6 +48,7 @@ import {
   queryRefs,
   queryRefsByContext,
   querySymbols,
+  scanForInjectionPatterns,
   searchEvidenceSemantically,
   searchSemantic,
   searchSymbolsFts,
@@ -50,11 +57,12 @@ import {
   stripLeadingAttributes,
   tomlBracketDelta,
   trimToBudget,
+  unzipBounded,
   urlPolicyDenialReason,
   walkProject,
   yamlLineClosesQuote,
   yamlOpenQuoteAfter
-} from "./token-goat-chunk-2G6RAB4G.mjs";
+} from "./token-goat-chunk-PWVXXPCC.mjs";
 import {
   Database,
   PER_FILE_COUNTERFACTUAL_CEILING,
@@ -106,7 +114,7 @@ import {
   unsupportedLanguageName,
   windowsCmdQuoteArg,
   withExtension
-} from "./token-goat-chunk-ELDJRLHZ.mjs";
+} from "./token-goat-chunk-6ODZ6PZK.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-AO2QD2AG.mjs";
@@ -139,7 +147,7 @@ function getTrackedFiles(cwd = process.cwd()) {
 // src/section_reader.ts
 import { readFileSync } from "node:fs";
 function parseHeadingSpec(spec, headers) {
-  const m = /^(.*?)#(\d+)$/.exec(spec);
+  const m = /^([^#\r\n]+)#(\d+)$/.exec(spec);
   if (m !== null && m[1] !== void 0 && m[2] !== void 0) {
     const specLower = spec.trim().toLowerCase();
     const isLiteralHeading = headers?.some((h) => h.heading.trim().toLowerCase() === specLower) ?? false;
@@ -163,7 +171,7 @@ function normalizeHeadingStrip(s) {
   return n.replace(/\s+/g, " ").trim();
 }
 var MIN_WIDEN_WORD_LEN = 3;
-var MARKDOWN_HEADER_RE = /^(#{1,6})\s+(.+?)(?:\s+#+)?\s*$/;
+var MARKDOWN_HEADER_RE = /^(#{1,6})\s+([^\r\n]+?)(?:\s+#+)?\s*$/;
 var TABLE_HEADER_RE = /^\s*\[+\s*([^\]]+?)\s*\]+\s*(?:[#;].*)?$/;
 var PYTHON_HEADER_RE = /^(\s*)(?:async\s+)?(?:def|class)\s+([A-Za-z_]\w*)/;
 var KEYVALUE_HEADER_RE = /^([A-Za-z_][\w.-]*)\s*(?:=|:(?!\/\/))/;
@@ -3612,7 +3620,7 @@ function formatZipList(entries) {
 }
 async function extractZipEntry(data, entryPath) {
   const fflate = await requireFflate();
-  const result = fflate.unzipSync(data, { filter: (file) => file.name === entryPath });
+  const result = unzipBounded(fflate, data, { limitBytes: MAX_ZIP_OUTPUT_BYTES, shouldExtract: (name) => name === entryPath });
   return result[entryPath];
 }
 
@@ -5262,10 +5270,16 @@ function readFileBytes(p) {
       verifyStillAbsent(p);
       return null;
     }
-    if (pinned !== void 0) return readPinnedBytes(p, pinned);
+    if (pinned !== void 0) {
+      const bytes = readPinnedBytes(p, pinned);
+      if (bytes.length > MAX_ZIP_INPUT_BYTES) throw new ZipInputTooLargeError(p, bytes.length, MAX_ZIP_INPUT_BYTES);
+      return bytes;
+    }
+    const stat = fs5.statSync(p);
+    if (stat.size > MAX_ZIP_INPUT_BYTES) throw new ZipInputTooLargeError(p, stat.size, MAX_ZIP_INPUT_BYTES);
     return fs5.readFileSync(p);
   } catch (err) {
-    if (err instanceof ConfinementIdentityError) throw err;
+    if (err instanceof ConfinementIdentityError || err instanceof ZipInputTooLargeError) throw err;
     return null;
   }
 }
@@ -5333,6 +5347,17 @@ function guardText(text, command) {
   const cfg = loadConfig();
   return cfg.overflow_guard.enabled ? trimToBudget(text, cfg.overflow_guard.max_tokens, command) : text;
 }
+function fenceGithubTextIfMatched(text) {
+  let matches = [];
+  try {
+    if (loadConfig().injection.enabled) matches = scanForInjectionPatterns(text);
+  } catch {
+    matches = [];
+  }
+  if (matches.length === 0) return text;
+  recordStat("injection_detected", 0, 0, void 0, matches.join(","));
+  return fenceUntrustedContent(text, matches, UNTRUSTED_GITHUB_TAG);
+}
 function guardJsonRows(items) {
   const cfg = loadConfig();
   if (!cfg.overflow_guard.enabled) return { items: [...items], truncated: false, totalCount: items.length };
@@ -7021,11 +7046,20 @@ function runOpenApiOp(opts) {
   return 0;
 }
 function archiveReadFailure(err, file) {
-  if (err instanceof ArchiveDependencyMissingError) return err.message;
+  if (err instanceof ArchiveDependencyMissingError || err instanceof ZipOutputTooLargeError) return err.message;
   return `Failed to read archive (not a valid zip-format file): ${file}`;
 }
 async function runZipList(opts) {
-  const data = readFileBytes(opts.file);
+  let data;
+  try {
+    data = readFileBytes(opts.file);
+  } catch (err) {
+    if (err instanceof ZipInputTooLargeError) {
+      emitErr(err.message);
+      return 1;
+    }
+    throw err;
+  }
   if (data === null) {
     emitErr(`Could not read: ${opts.file}`);
     return 1;
@@ -7050,7 +7084,16 @@ async function runZipList(opts) {
   return 0;
 }
 async function runZipRead(opts) {
-  const data = readFileBytes(opts.file);
+  let data;
+  try {
+    data = readFileBytes(opts.file);
+  } catch (err) {
+    if (err instanceof ZipInputTooLargeError) {
+      emitErr(err.message);
+      return 1;
+    }
+    throw err;
+  }
   if (data === null) {
     emitErr(`Could not read: ${opts.file}`);
     return 1;
@@ -7146,11 +7189,11 @@ function runPrSlice(opts) {
         }
         const fullSourceBytes = Buffer.byteLength(diffText, "utf8");
         if (opts.json === true) {
-          const jsonText = JSON.stringify({ path: parsed.path, diff: fileDiff });
+          const jsonText = JSON.stringify({ path: parsed.path, diff: fenceGithubTextIfMatched(fileDiff) });
           emit(jsonText);
           recordReadStat("pr_slice", fullSourceBytes, jsonText, `${repo}#${opts.pr} diff:${parsed.path}`);
         } else {
-          emitGuarded(fileDiff, "pr-slice");
+          emitGuarded(fenceGithubTextIfMatched(fileDiff), "pr-slice");
           recordReadStat("pr_slice", fullSourceBytes, fileDiff, `${repo}#${opts.pr} diff:${parsed.path}`);
         }
         return 0;
@@ -7159,13 +7202,14 @@ function runPrSlice(opts) {
         const comments = fetchPrComments(opts.pr, repo);
         const fullSourceBytes = Buffer.byteLength(JSON.stringify(comments), "utf8");
         if (opts.json === true) {
-          const capped = guardJsonRows(comments);
+          const fencedComments = comments.map((c) => ({ ...c, body: fenceGithubTextIfMatched(c.body) }));
+          const capped = guardJsonRows(fencedComments);
           const jsonText = JSON.stringify({ items: capped.items, truncated: capped.truncated, totalCount: capped.totalCount });
           emit(jsonText);
           recordReadStat("pr_slice", fullSourceBytes, jsonText, `${repo}#${opts.pr} comments`);
         } else {
           const text = formatCommentsSlice(comments);
-          emitGuarded(text, "pr-slice");
+          emitGuarded(fenceGithubTextIfMatched(text), "pr-slice");
           recordReadStat("pr_slice", fullSourceBytes, text, `${repo}#${opts.pr} comments`);
         }
         return 0;
@@ -7174,12 +7218,17 @@ function runPrSlice(opts) {
         const desc = fetchPrDescription(opts.pr, repo);
         const fullSourceBytes = Buffer.byteLength(JSON.stringify(desc), "utf8");
         if (opts.json === true) {
-          const jsonText = JSON.stringify(desc);
+          const fencedDesc = {
+            ...desc,
+            title: fenceGithubTextIfMatched(desc.title),
+            body: desc.body !== null ? fenceGithubTextIfMatched(desc.body) : null
+          };
+          const jsonText = JSON.stringify(fencedDesc);
           emit(jsonText);
           recordReadStat("pr_slice", fullSourceBytes, jsonText, `${repo}#${opts.pr} description`);
         } else {
           const text = formatDescriptionSlice(desc);
-          emitGuarded(text, "pr-slice");
+          emitGuarded(fenceGithubTextIfMatched(text), "pr-slice");
           recordReadStat("pr_slice", fullSourceBytes, text, `${repo}#${opts.pr} description`);
         }
         return 0;
@@ -7222,7 +7271,6 @@ function runSqliteQuery(opts) {
     const totalCount = result.rows.length;
     const headTruncated = head !== void 0 && result.rows.length > head;
     const rows = head !== void 0 ? result.rows.slice(0, head) : result.rows;
-    const fullSourceBytes = sumFileSizes([opts.file]);
     if (opts.json === true) {
       const capped = guardJsonRows(rows);
       const jsonText = JSON.stringify({
@@ -7233,11 +7281,20 @@ function runSqliteQuery(opts) {
         rowCapped: result.rowCapped
       });
       emit(jsonText);
-      recordReadStat("sqlite_query", fullSourceBytes, jsonText, opts.file);
+      const uncappedFull = guardJsonRows(result.rows);
+      const baselineJsonText = JSON.stringify({
+        columns: result.columns,
+        items: uncappedFull.items,
+        truncated: uncappedFull.truncated || result.rowCapped,
+        totalCount,
+        rowCapped: result.rowCapped
+      });
+      recordReadStat("sqlite_query", Buffer.byteLength(baselineJsonText, "utf8"), jsonText, opts.file);
     } else {
       const text = formatSqliteQueryTable({ ...result, rows }, { headTruncated });
       emit(text);
-      recordReadStat("sqlite_query", fullSourceBytes, text, opts.file);
+      const baselineText = formatSqliteQueryTable({ ...result, rows: result.rows }, { headTruncated: false });
+      recordReadStat("sqlite_query", Buffer.byteLength(baselineText, "utf8"), text, opts.file);
     }
     return 0;
   } catch (e) {

package/dist/{token-goat-chunk-I6TOUPLP.mjs → token-goat-chunk-VAGPOZHO.mjs}

@@ -10,11 +10,11 @@ import {
   selectFilter,
   shlexSplit,
   wrappedShell
-} from "./token-goat-chunk-7JDXDERZ.mjs";
+} from "./token-goat-chunk-EFF2XCLB.mjs";
 import {
   loadConfig,
   recordStat
-} from "./token-goat-chunk-ELDJRLHZ.mjs";
+} from "./token-goat-chunk-6ODZ6PZK.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 

package/dist/token-goat-hook.mjs

@@ -2,11 +2,11 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   relayInProcess
-} from "./token-goat-chunk-AOBZUFNJ.mjs";
-import "./token-goat-chunk-XEDQH5DA.mjs";
-import "./token-goat-chunk-2G6RAB4G.mjs";
-import "./token-goat-chunk-7JDXDERZ.mjs";
-import "./token-goat-chunk-ELDJRLHZ.mjs";
+} from "./token-goat-chunk-NKNCHJ4H.mjs";
+import "./token-goat-chunk-4HIMCBYK.mjs";
+import "./token-goat-chunk-PWVXXPCC.mjs";
+import "./token-goat-chunk-EFF2XCLB.mjs";
+import "./token-goat-chunk-6ODZ6PZK.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 export {

package/dist/token-goat.core.mjs

@@ -2,13 +2,13 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   run
-} from "./token-goat-chunk-VBXBLGTO.mjs";
-import "./token-goat-chunk-RMDQFTQD.mjs";
-import "./token-goat-chunk-XEDQH5DA.mjs";
-import "./token-goat-chunk-2G6RAB4G.mjs";
+} from "./token-goat-chunk-222VPFP2.mjs";
+import "./token-goat-chunk-TX4JFJTD.mjs";
+import "./token-goat-chunk-4HIMCBYK.mjs";
+import "./token-goat-chunk-PWVXXPCC.mjs";
 import {
   installEpipeGuard
-} from "./token-goat-chunk-ELDJRLHZ.mjs";
+} from "./token-goat-chunk-6ODZ6PZK.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-goat",
-  "version": "2.8.1",
+  "version": "2.8.3",
   "description": "Surgical token-reduction companion for Claude Code and other AI coding agents",
   "type": "module",
   "main": "./dist/token-goat.mjs",