token-goat 2.8.3 → 2.8.6

package/dist/{token-goat-chunk-NKNCHJ4H.mjs → token-goat-chunk-MA5237JN.mjs}

@@ -23,7 +23,7 @@ import {
   summarizeOutputDelta,
   summarizeResidentContext,
   taskListPruneHint
-} from "./token-goat-chunk-4HIMCBYK.mjs";
+} from "./token-goat-chunk-TELKICYU.mjs";
 import {
   BODY_FIRST_TOOL_RESPONSE_KEYS,
   OUTPUT_FIRST_TOOL_RESPONSE_KEYS,
@@ -42,14 +42,14 @@ import {
   countSymbols,
   denyOutput,
   emitRewrite,
+  emitRewriteIfChanged,
   enqueueDirtyPathSafe,
   ensureWorkerAlive,
   estimateTokens,
-  estimateTokensFromLength,
   extractCompactFromMarker,
   extractToolResponseField,
   extractToolResultText,
-  fenceUntrustedContent,
+  fenceWithMatches,
   formatProjectMap,
   formatShrinkSummary,
   getBashOutputId,
@@ -89,6 +89,7 @@ import {
   matchesDenyPattern,
   meetsSavingsFloor,
   passOutput,
+  probeImageMeta,
   recordBashOutput,
   recordBashRerun,
   recordCliRead,
@@ -108,7 +109,7 @@ import {
   removeOutstandingAgentSpawn,
   runHook,
   saveSessionState,
-  scanForInjectionPatterns,
+  scanAndRecord,
   serializeOutput,
   sessionOutputBodyBytes,
   sessionSidecarPath,
@@ -117,10 +118,12 @@ import {
   storeBlob,
   storeOutput,
   takePendingLargeFileHint,
+  visionTokens,
+  visionTokensSaved,
   wasCliReadThisSession,
   wasFileReadThisSession,
   wasHintShown
-} from "./token-goat-chunk-PWVXXPCC.mjs";
+} from "./token-goat-chunk-DK4VLLYB.mjs";
 import {
   canRunWrappedShell,
   compressOutput,
@@ -131,7 +134,7 @@ import {
   isRewriteWorthwhile,
   resolveMinNetSavingsBytes,
   shlexSplit
-} from "./token-goat-chunk-EFF2XCLB.mjs";
+} from "./token-goat-chunk-GUNYAGOZ.mjs";
 import {
   PER_FILE_COUNTERFACTUAL_CEILING,
   VERSION,
@@ -150,9 +153,10 @@ import {
   redactSecrets,
   resolveIndexPath,
   runGit,
+  savedTokensFromBytes,
   shortFingerprint,
   toKB
-} from "./token-goat-chunk-6ODZ6PZK.mjs";
+} from "./token-goat-chunk-2JZ66BBE.mjs";
 
 // src/hooks_grep.ts
 function grepIntInput(toolInput, key) {
@@ -167,7 +171,7 @@ function grepIntInput(toolInput, key) {
 function grepSignature(toolInput) {
   const pattern = toolInput["pattern"];
   if (typeof pattern !== "string" || pattern === "") return null;
-  const path2 = typeof toolInput["path"] === "string" ? toolInput["path"] : "";
+  const path3 = typeof toolInput["path"] === "string" ? toolInput["path"] : "";
   const outputMode = typeof toolInput["output_mode"] === "string" ? toolInput["output_mode"] : "files_with_matches";
   const glob = typeof toolInput["glob"] === "string" ? toolInput["glob"] : "";
   const type = typeof toolInput["type"] === "string" ? toolInput["type"] : "";
@@ -182,7 +186,7 @@ function grepSignature(toolInput) {
   const offset = grepIntInput(toolInput, "offset");
   return JSON.stringify([
     pattern,
-    path2,
+    path3,
     outputMode,
     glob,
     type,
@@ -218,8 +222,7 @@ function foldGrepContentHandler(event) {
     if (toolInput["-n"] === false) return passOutput();
     const rawText = extractToolResponseField(event.raw, OUTPUT_FIRST_TOOL_RESPONSE_KEYS);
     if (!rawText) return passOutput();
-    const redacted = redactSecrets(rawText);
-    const text = redacted.text;
+    const text = redactSecrets(rawText).text;
     const rawLines = text.split(/\r\n|\r|\n/);
     const parsed = [];
     for (const line of rawLines) {
@@ -260,10 +263,7 @@ function foldGrepContentHandler(event) {
     })) {
       return passOutput();
     }
-    const bytesDelta = originalBytes - rewrittenBytes;
-    recordStat("grep:fold", bytesDelta, Math.round(bytesDelta / 4));
-    if (redacted.count > 0) recordStat("secret_redacted", 0, redacted.count, void 0, "grep");
-    return { hookType: "rewriteOutput", updatedOutput: rewritten };
+    return emitRewrite(rewritten, "grep", { kind: "grep:fold", originalBytes });
   } catch {
     return passOutput();
   }
@@ -281,8 +281,8 @@ registerHook("post_tool_use", postGrepHandler, { toolName: "Grep" });
 function globSignature(toolInput) {
   const pattern = toolInput["pattern"];
   if (typeof pattern !== "string" || pattern === "") return null;
-  const path2 = typeof toolInput["path"] === "string" ? toolInput["path"] : "";
-  return JSON.stringify([pattern, path2]);
+  const path3 = typeof toolInput["path"] === "string" ? toolInput["path"] : "";
+  return JSON.stringify([pattern, path3]);
 }
 var { post: postGlobHandler, pre: preGlobDedupHandler } = makeDedupHintHandlers({
   toolName: "Glob",
@@ -430,6 +430,9 @@ function renderReadRow(entry) {
   const edited = entry.wasEdited ? ", edited" : "";
   return `- ${entry.path} (${kb}kb, ${entry.readCount} ${plural}${edited})`;
 }
+function renderSymbolReadRow(entry) {
+  return `- ${entry.path} (symbols: ${(entry.symbols_read ?? []).join(", ")})`;
+}
 function mergeManifestFiles(parent, siblingFiles) {
   const byPath = /* @__PURE__ */ new Map();
   for (const f of parent) byPath.set(foldPath(f.path), f);
@@ -457,6 +460,7 @@ function buildManifest(sessionId, cwd) {
   const files = siblingFiles.length > 0 ? mergeManifestFiles(ownFiles, siblingFiles) : ownFiles;
   const editedFiles = files.filter((f) => f.wasEdited);
   const readFiles = files.filter((f) => f.readCount > 0 && !f.wasEdited);
+  const symbolOnlyFiles = files.filter((f) => f.readCount === 0 && !f.wasEdited && (f.symbols_read?.length ?? 0) > 0);
   const webFetches = [...getSessionWebFetches().entries()];
   const lines = [];
   lines.push("## Session context");
@@ -469,6 +473,7 @@ function buildManifest(sessionId, cwd) {
     editedFiles.map((entry) => `- ${entry.path}`),
     MAX_ROWS
   );
+  appendCappedSection(lines, "### Surgically read files (symbol/section reads, never read whole)", symbolOnlyFiles.map(renderSymbolReadRow), MAX_ROWS);
   appendCappedSection(
     lines,
     "### Web URLs fetched",
@@ -613,7 +618,7 @@ function postCompactHandler(event) {
     0,
     0,
     void 0,
-    `trigger=${trigger} bytes=${bytes} est_tokens=${estimateTokensFromLength(summary.length)} manifest_paths=${survived}/${sample.length}`
+    `trigger=${trigger} bytes=${bytes} est_tokens=${savedTokensFromBytes(bytes)} manifest_paths=${survived}/${sample.length}`
   );
   return passOutput();
 }
@@ -626,7 +631,7 @@ import crypto from "node:crypto";
 var TRACKED_SKILL = "token-goat";
 var MAX_COMMANDS_SHOWN = 8;
 async function currentCommandNames() {
-  const { buildProgram } = await import("./token-goat-chunk-4OM2Q2SX.mjs");
+  const { buildProgram } = await import("./token-goat-chunk-SHN4UTL4.mjs");
   return flattenCommandNames(buildCommandManifest(buildProgram()));
 }
 async function recordSkillVersionSnapshot(sessionId, skillName) {
@@ -1470,11 +1475,11 @@ function mapInner(r, f) {
 function mapOuter(r, f) {
   return r.matched ? f(r) : r;
 }
-function ab(pa, pb, join) {
-  return (data, i) => mapOuter(pa(data, i), (ma) => mapInner(pb(data, ma.position), (vb, j) => join(ma.value, vb, data, i, j)));
+function ab(pa, pb, join2) {
+  return (data, i) => mapOuter(pa(data, i), (ma) => mapInner(pb(data, ma.position), (vb, j) => join2(ma.value, vb, data, i, j)));
 }
-function abc(pa, pb, pc, join) {
-  return (data, i) => mapOuter(pa(data, i), (ma) => mapOuter(pb(data, ma.position), (mb) => mapInner(pc(data, mb.position), (vc, j) => join(ma.value, mb.value, vc, data, i, j))));
+function abc(pa, pb, pc, join2) {
+  return (data, i) => mapOuter(pa(data, i), (ma) => mapOuter(pb(data, ma.position), (mb) => mapInner(pc(data, mb.position), (vc, j) => join2(ma.value, mb.value, vc, data, i, j))));
 }
 function ahead(p) {
   return (data, i) => mapOuter(p(data, i), (m1) => ({
@@ -5391,8 +5396,8 @@ function trimCharacterEnd(str, char) {
 function unicodeEscape(str) {
   return str.replace(/[\s\S]/g, (c) => "\\u" + c.charCodeAt().toString(16).padStart(4, "0"));
 }
-function get(obj, path2) {
-  for (const key of path2) {
+function get(obj, path3) {
+  for (const key of path3) {
     if (!obj) {
       return void 0;
     }
@@ -6593,8 +6598,8 @@ function withBrackets(str, brackets) {
   const rbr = typeof brackets[1] === "string" ? brackets[1] : "]";
   return lbr + str + rbr;
 }
-function pathRewrite(path2, rewriter, baseUrl, metadata, elem) {
-  const modifiedPath = typeof rewriter === "function" ? rewriter(path2, metadata, elem) : path2;
+function pathRewrite(path3, rewriter, baseUrl, metadata, elem) {
+  const modifiedPath = typeof rewriter === "function" ? rewriter(path3, metadata, elem) : path3;
   return modifiedPath[0] === "/" && baseUrl ? trimCharacterEnd(baseUrl, "/") + modifiedPath : modifiedPath;
 }
 function formatImage(elem, walk, builder, formatOptions) {
@@ -6918,9 +6923,9 @@ function handleDeprecatedOptions(options) {
     options.selectors.push(...tagDefinitions);
     options.selectors = mergeDuplicatesPreferLast(options.selectors, ((s) => s.selector));
   }
-  function set(obj, path2, value) {
-    const valueKey = path2.pop();
-    for (const key of path2) {
+  function set(obj, path3, value) {
+    const valueKey = path3.pop();
+    for (const key of path3) {
       let nested = obj[key];
       if (!nested) {
         nested = {};
@@ -7011,7 +7016,7 @@ function preFetchHandler(event) {
     if (cached !== null) {
       const cachedBytes = Buffer.byteLength(cached, "utf-8");
       if (cachedBytes >= loadConfig().hints.web_dedup_min_bytes) {
-        recordStat("webfetch:recall", cachedBytes, Math.round(cachedBytes / 4));
+        recordStat("webfetch:recall", cachedBytes, savedTokensFromBytes(cachedBytes));
         return denyOutput(
           "Already fetched this URL with this prompt; the response is cached. Use `token-goat web-output " + cacheId + "` to recall it (append `--grep PATTERN` to filter or `--section Heading` for a markdown section) instead of re-fetching."
         );
@@ -7031,29 +7036,13 @@ function postFetchHandler(event) {
     const { toolInput, url } = urlCtx;
     recordStat("web_fetch");
     const body = extractToolResponse(event.raw);
-    const injCfg = loadConfig().injection;
-    const injectionMatches = injCfg.enabled && body ? scanForInjectionPatterns(body) : [];
-    if (injectionMatches.length > 0) {
-      recordStat("injection_detected", 0, 0, void 0, injectionMatches.join(","));
-    }
+    const injectionMatches = body ? scanAndRecord(body) : [];
     const bodyRedacted = body ? redactSecrets(body) : { text: body, count: 0 };
     if (!event.sessionId) {
-      if (injectionMatches.length > 0) {
-        return emitRewrite(fenceUntrustedContent(bodyRedacted.text, injectionMatches), "fetch");
-      }
-      if (bodyRedacted.count > 0) {
-        return emitRewrite(bodyRedacted.text, "fetch");
-      }
-      return passOutput();
+      return emitRewriteIfChanged(body, fenceWithMatches(bodyRedacted.text, injectionMatches), "fetch");
     }
     if (!body || body.length < 1024) {
-      if (injectionMatches.length > 0) {
-        return emitRewrite(fenceUntrustedContent(bodyRedacted.text, injectionMatches), "fetch");
-      }
-      if (bodyRedacted.count > 0) {
-        return emitRewrite(bodyRedacted.text, "fetch");
-      }
-      return passOutput();
+      return emitRewriteIfChanged(body, fenceWithMatches(bodyRedacted.text, injectionMatches), "fetch");
     }
     const prompt = typeof toolInput["prompt"] === "string" ? toolInput["prompt"] : "";
     let storedBody = body;
@@ -7068,31 +7057,24 @@ function postFetchHandler(event) {
     const cacheId = storeWebOutput(url, storedBody, `${url}\0${prompt}`, storedBody !== body ? body : void 0);
     recordWebFetch(url, prompt, cacheId);
     const storedRedacted = storedBody === body ? bodyRedacted : redactSecrets(storedBody);
-    if (injectionMatches.length > 0) {
-      return emitRewrite(fenceUntrustedContent(storedRedacted.text, injectionMatches), "fetch");
-    }
+    const fencedStored = fenceWithMatches(storedRedacted.text, injectionMatches);
     if (storedBody !== body) {
       const noticeFor = (id) => `
 [token-goat: WebFetch body compressed via extractCleanText; use \`token-goat web-output ${id} --raw\` to recall it]`;
       const notice = noticeFor(cacheId);
       const noticeBytes = Buffer.byteLength(notice, "utf-8");
       const originalBytes = Buffer.byteLength(body, "utf-8");
-      const rewrittenBytes = Buffer.byteLength(storedBody, "utf-8");
+      const rewrittenBytes = Buffer.byteLength(fencedStored, "utf-8");
       if (isRewriteWorthwhile({
         originalBytes,
         rewrittenBytes,
         noticeBytes,
         minNetSavingsBytes: resolveMinNetSavingsBytes()
       })) {
-        const bytesDelta = originalBytes - rewrittenBytes;
-        recordStat("webfetch:compress", bytesDelta, Math.round(bytesDelta / 4));
-        return emitRewrite(storedRedacted.text + notice, "fetch");
+        return emitRewrite(fencedStored + notice, "fetch", { kind: "webfetch:compress", originalBytes });
       }
     }
-    if (storedRedacted.count > 0) {
-      return emitRewrite(storedRedacted.text, "fetch");
-    }
-    return passOutput();
+    return emitRewriteIfChanged(body, fencedStored, "fetch");
   } catch {
     return passOutput();
   }
@@ -7146,7 +7128,7 @@ async function preSkillHandler(event) {
     if (await hasSessionOutput(event.sessionId, skillName)) {
       const cachedBytes = await sessionOutputBodyBytes(event.sessionId, skillName);
       const denyCredit = cachedBytes !== null ? Math.min(cachedBytes, PER_FILE_COUNTERFACTUAL_CEILING) : 0;
-      recordStat("session_hint", denyCredit, Math.round(denyCredit / 4));
+      recordStat("session_hint", denyCredit, savedTokensFromBytes(denyCredit));
       return denyOutput(
         "Skill `" + skillName + "` was already loaded this session and is cached. Use `token-goat skill-body " + skillName + " --compact` to recall the compact slice (or `token-goat skill-body " + skillName + "` for the full body) instead of re-loading it."
       );
@@ -7161,7 +7143,7 @@ async function preSkillHandler(event) {
           const compactBytes = Buffer.byteLength(compact, "utf-8");
           if (compactBytes * 2 <= bodyBytes && compactBytes <= COMPACT_INLINE_MAX_BYTES) {
             const savedBytes = bodyBytes - compactBytes;
-            recordStat("skill_compact_inlined", savedBytes, Math.round(savedBytes / 4));
+            recordStat("skill_compact_inlined", savedBytes, savedTokensFromBytes(savedBytes));
             return denyOutput(
               "Skill `" + skillName + "` is large (" + bodyBytes + " bytes); its compact slice (" + compactBytes + " bytes) is inlined below instead of the full body. Run `token-goat skill-body " + skillName + "` if you need the full body.\n\n" + compact
             );
@@ -7485,16 +7467,16 @@ function isTempPath(fp) {
   return /^\/tmp\//i.test(norm) || /\/var\/folders\//i.test(norm) || /AppData\/Local\/Temp\//i.test(norm) || norm.startsWith("/c/Users/") && norm.includes("/AppData/Local/Temp/") || isUnderSystemTemp(fp);
 }
 function isOrchestratorStateFile(filePath) {
-  const basename2 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
-  return /^\.improve-state-/.test(basename2);
+  const basename3 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
+  return /^\.improve-state-/.test(basename3);
 }
 function extractCatSourceFile(cmd) {
   const m = /^cat\s+(\S+\.(?:java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less))\s*$/.exec(cmd);
   return m?.[1] ?? null;
 }
 function classifyFileExtensions(filePath) {
-  const basename2 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
-  const isEnvFile = /^\.env(\.\w+)?$/i.test(basename2);
+  const basename3 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
+  const isEnvFile = /^\.env(\.\w+)?$/i.test(basename3);
   const hasKnownExt = /\.(?:java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less|md|mdx|rst|txt|json|yaml|yml|toml|xml|conf|cfg|ini|properties|sql|ps1|psm1|env)$/i.test(filePath);
   if (!hasKnownExt && !isEnvFile) return null;
   const isSql = /\.sql$/i.test(filePath);
@@ -7516,12 +7498,14 @@ function classifyCatPath(filePath, cmd0) {
   return { filePath, ...flags, cmd0 };
 }
 function extractCatFile(cmd) {
-  const m = /^(cat|bat|type|Get-Content|gc)(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+?))(?:\s+-[a-zA-Z].*)?\s*$/i.exec(cmd);
+  const m = /^(cat|bat|type|Get-Content|gc)(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+?))(?:\s+-[a-zA-Z].*?)?(?:\s+2>(&1|\/dev\/null))?\s*$/i.exec(cmd);
   if (!m) return null;
   const cmd0 = m[1];
   const filePath = m[2] ?? m[3] ?? m[4];
   if (filePath === void 0) return null;
-  return classifyCatPath(filePath, cmd0);
+  const r = classifyCatPath(filePath, cmd0);
+  if (r === null) return null;
+  return { ...r, advisoryOnly: m[5] === "/dev/null" };
 }
 function extractCatFilesMulti(cmd) {
   if (/[|<>;&`]/.test(cmd) || cmd.includes("$(")) return null;
@@ -7769,11 +7753,12 @@ function extractPythonFileRead(cmd) {
   return null;
 }
 function extractHeadFile(cmd) {
-  const m = /^head(?:\s+-n\s+(\d+)|\s+-(\d+))?\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
-  if (!m) return null;
-  const n = parseInt(m[1] ?? m[2] ?? "0", 10);
+  const direct = /^head(?:\s+-n\s+(\d+)|\s+-(\d+))?\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
+  const piped = direct === null ? /^cat(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+?))(?:\s+2>(?:&1|\/dev\/null))?\s*\|\s*head(?:\s+-n\s+(\d+)|\s+-(\d+))?\s*$/.exec(cmd) : null;
+  if (direct === null && piped === null) return null;
+  const n = parseInt((direct !== null ? direct[1] ?? direct[2] : piped[4] ?? piped[5]) ?? "0", 10);
   if (n <= 10) return null;
-  const filePath = m[3] ?? m[4] ?? m[5];
+  const filePath = direct !== null ? direct[3] ?? direct[4] ?? direct[5] : piped[1] ?? piped[2] ?? piped[3];
   if (filePath === void 0) return null;
   if (isTempPath(filePath)) return null;
   if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh)$/i.test(filePath)) return null;
@@ -7781,12 +7766,12 @@ function extractHeadFile(cmd) {
   return { filePath, isDoc, isConfig, isSql, n };
 }
 function extractSedRange(cmd) {
-  const m = /^sed\s+-n\s+['"](?:\d+,\d+p)(?:;\d+,\d+p)*['"]\s+(?:"([^"]+)"|'([^']+)'|(\S+))(?:\s+2>\/dev\/null)?\s*$/.exec(cmd);
+  const m = /^sed\s+-n\s+(?:['"]((?:\d+,\d+p)(?:;\d+,\d+p)*)['"]|(\d+,\d+p))\s+(?:"([^"]+)"|'([^']+)'|(\S+))(?:\s+2>(?:\/dev\/null|&1))?\s*$/.exec(cmd);
   if (!m) return null;
-  const quotedAddress = /['"]([^'"]+)['"]/.exec(cmd);
-  if (!quotedAddress) return null;
+  const addressList = m[1] ?? m[2];
+  if (addressList === void 0) return null;
   const ranges = [];
-  for (const clause of quotedAddress[1].split(";")) {
+  for (const clause of addressList.split(";")) {
     const cm = /^(\d+),(\d+)p$/.exec(clause ?? "");
     if (!cm) return null;
     const start = parseInt(cm[1], 10);
@@ -7795,19 +7780,21 @@ function extractSedRange(cmd) {
     ranges.push([start, end]);
   }
   if (ranges.length === 0) return null;
-  const filePath = m[1] ?? m[2] ?? m[3];
+  const filePath = m[3] ?? m[4] ?? m[5];
   if (filePath === void 0) return null;
   if (isTempPath(filePath)) return null;
   return { filePath, ranges };
 }
 function extractAwkRange(cmd) {
-  const m = /^awk\s+(?:'([^']+)'|"([^"]+)")\s+(?:"([^"]+)"|'([^']+)'|(\S+))(?:\s+2>\/dev\/null)?\s*$/.exec(cmd);
+  const m = /^awk\s+(?:'([^']+)'|"([^"]+)")\s+(?:"([^"]+)"|'([^']+)'|(\S+))(?:\s+2>(?:\/dev\/null|&1))?\s*$/.exec(cmd);
   if (!m) return null;
   const program = m[1] ?? m[2];
   if (program === void 0) return null;
-  const cmp = /^\s*NR\s*>=\s*(\d+)\s*&&\s*NR\s*<=\s*(\d+)\s*$/.exec(program);
-  const rng = /^\s*NR\s*==\s*(\d+)\s*,\s*NR\s*==\s*(\d+)\s*$/.exec(program);
+  const cmp = /^\s*NR\s*>=\s*(\d+)\s*&&\s*NR\s*<=\s*(\d+)\s*(\{.*\})?\s*$/.exec(program);
+  const rng = /^\s*NR\s*==\s*(\d+)\s*,\s*NR\s*==\s*(\d+)\s*(\{.*\})?\s*$/.exec(program);
   const hit = cmp ?? rng;
+  const action = hit?.[3];
+  if (action !== void 0 && !/^\{\s*(?:print(?:\s+NR\s*"[^"%]*"\s*\$0|\s+\$0)?|printf\s*"%d[^%"]*%s\\n"\s*,\s*NR\s*,\s*\$0)\s*\}$/.test(action)) return null;
   if (!hit) return null;
   const start = parseInt(hit[1], 10);
   const end = parseInt(hit[2], 10);
@@ -7817,13 +7804,47 @@ function extractAwkRange(cmd) {
   if (isTempPath(filePath)) return null;
   return { filePath, ranges: [[start, end]] };
 }
+function normalizeCatSedPipe(cmd) {
+  const m = /^cat(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+?))(?:\s+2>(?:&1|\/dev\/null))?\s*\|\s*sed\s+-n\s+('[^']+'|"[^"]+"|\d+,\d+p)\s*$/.exec(cmd);
+  if (!m) return null;
+  const filePath = m[1] ?? m[2] ?? m[3];
+  if (filePath === void 0 || filePath.includes('"')) return null;
+  return "sed -n " + m[4] + ' "' + filePath + '"';
+}
 function extractLineRangeRead(cmd) {
+  const catSed = normalizeCatSedPipe(cmd);
+  if (catSed !== null) cmd = catSed;
   const sed = extractSedRange(cmd);
   if (sed !== null) return { ...sed, tool: "sed" };
   const awk = extractAwkRange(cmd);
   if (awk !== null) return { ...awk, tool: "awk" };
   return null;
 }
+var FORMATTING_STAGE_RE = /^(?:fold|cut|cat|nl|head|tail)(?:\s+(?:-\S+|[\d,+-]+))*\s*$/;
+function extractLineRangeReadsCompound(cmd) {
+  const cleaned = cmd.replace(/\s2>(?:&1|\/dev\/null)/g, "");
+  const segments = splitShellSegments(cleaned);
+  if (segments.length < 2) return null;
+  const reads = [];
+  for (const seg of segments) {
+    const r = extractLineRangeRead(seg);
+    if (r !== null) {
+      reads.push(r);
+      continue;
+    }
+    if (/^echo\b[^<>]*$/.test(seg)) continue;
+    if (FORMATTING_STAGE_RE.test(seg)) continue;
+    return null;
+  }
+  if (reads.length === 0) return null;
+  const merged = /* @__PURE__ */ new Map();
+  for (const r of reads) {
+    const prev = merged.get(r.filePath);
+    if (prev !== void 0) prev.ranges.push(...r.ranges);
+    else merged.set(r.filePath, { filePath: r.filePath, ranges: [...r.ranges], tool: r.tool });
+  }
+  return [...merged.values()];
+}
 var SYMBOL_BEARING_LANGUAGES = /* @__PURE__ */ new Set([
   "python",
   "typescript",
@@ -7923,11 +7944,12 @@ function extractTailFile(cmd) {
   if (/-f\b/.test(cmd)) return null;
   if (/-c\b/.test(cmd)) return null;
   if (/-n\s*\+/.test(cmd)) return null;
-  const m = /^tail(?:\s+-n\s+(\d+)|\s+-(\d+))?\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
-  if (!m) return null;
-  const n = parseInt(m[1] ?? m[2] ?? "0", 10);
+  const direct = /^tail(?:\s+-n\s+(\d+)|\s+-(\d+))?\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
+  const piped = direct === null ? /^cat(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+?))(?:\s+2>(?:&1|\/dev\/null))?\s*\|\s*tail(?:\s+-n\s+(\d+)|\s+-(\d+))?\s*$/.exec(cmd) : null;
+  if (direct === null && piped === null) return null;
+  const n = parseInt((direct !== null ? direct[1] ?? direct[2] : piped[4] ?? piped[5]) ?? "0", 10);
   if (n <= 10) return null;
-  const filePath = m[3] ?? m[4] ?? m[5];
+  const filePath = direct !== null ? direct[3] ?? direct[4] ?? direct[5] : piped[1] ?? piped[2] ?? piped[3];
   if (!filePath) return null;
   if (isTempPath(filePath)) return null;
   if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh)$/i.test(filePath)) return null;
@@ -8381,10 +8403,19 @@ async function maybeCompressCompoundOutput(cmd, output, exitCode, cwd, cacheMinB
   });
   const minNet = resolveMinNetSavingsBytes();
   if (!compressed.worthApplying(minNet)) return null;
-  const id = await storeBashOutput(cmd, output, exitCode ?? 0, cwd);
-  recordStat("bash_compress:generic", compressed.bytesSaved, compressed.tokensSaved);
+  const id = await commandHash(cmd, cwd);
   const body = compressed.withMarker(minNet) + "\n[token-goat] full output: bash-output " + id + " --full";
-  return { hookType: "rewriteOutput", updatedOutput: body };
+  const emittedBytes = Buffer.byteLength(body, "utf-8");
+  if (!isRewriteWorthwhile({
+    originalBytes: compressed.originalBytes,
+    rewrittenBytes: emittedBytes,
+    noticeBytes: 0,
+    minNetSavingsBytes: minNet
+  })) {
+    return null;
+  }
+  await storeBashOutput(cmd, output, exitCode ?? 0, cwd);
+  return emitRewrite(body, "bash", { kind: "bash_compress:generic", originalBytes: compressed.originalBytes });
 }
 function unwrapCompressCommand(executed) {
   const t = executed.trim();
@@ -8610,25 +8641,28 @@ function preBashHandlerInner(event) {
       "Use `token-goat outline <file>` to see symbol names and line counts without loading files."
     );
   }
-  const sedRange = extractLineRangeRead(cmd);
-  if (sedRange !== null) {
-    const { filePath, ranges, tool } = sedRange;
-    const hintPath = cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath;
+  const singleLineRangeRead = extractLineRangeRead(cmd);
+  const sedReads = singleLineRangeRead !== null ? [singleLineRangeRead] : extractLineRangeReadsCompound(cmd);
+  if (sedReads !== null) {
     recordStat("session_hint", 0, 0);
-    const sedDedupKey = resolveIndexPath(hintPath, preHookCwd ?? process.cwd());
-    const overlapHints = [];
-    const freshRanges = [];
-    for (const [start, end] of ranges) {
-      const priorOverlap = findRangeOverlap(getFileLineRanges(sedDedupKey), start, end);
-      recordFileLineRange(sedDedupKey, start, end);
-      if (priorOverlap !== null) {
-        overlapHints.push(sedOverlapHint(hintPath, priorOverlap, start, end));
-      } else {
-        freshRanges.push([start, end]);
+    const hints = [];
+    for (const { filePath, ranges, tool } of sedReads) {
+      const hintPath = cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath;
+      const sedDedupKey = resolveIndexPath(hintPath, preHookCwd ?? process.cwd());
+      const overlapHints = [];
+      const freshRanges = [];
+      for (const [start, end] of ranges) {
+        const priorOverlap = findRangeOverlap(getFileLineRanges(sedDedupKey), start, end);
+        recordFileLineRange(sedDedupKey, start, end);
+        if (priorOverlap !== null) {
+          overlapHints.push(sedOverlapHint(hintPath, priorOverlap, start, end));
+        } else {
+          freshRanges.push([start, end]);
+        }
       }
+      hints.push(...overlapHints);
+      if (freshRanges.length > 0) hints.push(sedRangeHint(hintPath, freshRanges, tool));
     }
-    const hints = [...overlapHints];
-    if (freshRanges.length > 0) hints.push(sedRangeHint(hintPath, freshRanges, tool));
     return contextOutput(hints.join(" "));
   }
   const catJsonPipe = extractCatJsonPipe(cmd);
@@ -8642,7 +8676,7 @@ function preBashHandlerInner(event) {
   }
   const catResult = extractCatFile(cmd);
   if (catResult !== null) {
-    const { filePath, isDoc, isEnv, isConfig, isSql, cmd0 } = catResult;
+    const { filePath, isDoc, isEnv, isConfig, isSql, cmd0, advisoryOnly } = catResult;
     const hintPath = cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath;
     recordStat("session_hint", 0, 0);
     if (isSql) {
@@ -8651,7 +8685,7 @@ function preBashHandlerInner(event) {
       );
     }
     const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc);
-    return cdStripped ? contextOutput("`" + cmd0 + "` loads the entire file into context. " + hint) : denyOutput("`" + cmd0 + "` loads the entire file into context. " + hint);
+    return cdStripped || advisoryOnly ? contextOutput("`" + cmd0 + "` loads the entire file into context. " + hint) : denyOutput("`" + cmd0 + "` loads the entire file into context. " + hint);
   }
   const catMulti = extractCatFilesMulti(cmd);
   if (catMulti !== null) {
@@ -8790,13 +8824,13 @@ function preBashHandlerInner(event) {
       const monBytes = monEntry.sizeBytes;
       const catFile = extractCatSourceFile(cmd);
       if (catFile !== null) {
-        recordStat("bash_compress:recall", monBytes, Math.round(monBytes / 4));
+        recordStat("bash_compress:recall", monBytes, savedTokensFromBytes(monBytes));
         return contextOutput(
           "Prior output from `" + cmd + "`" + pipelineDivergenceNote(cmd, monEntry.command) + " is cached. Use `token-goat bash-output " + monOutputId + "` to recall the full file, or `token-goat read '" + catFile + "::SymbolName'` to extract only the symbol you need."
         );
       }
       const cmdSummary = cmd.length > 60 ? cmd.slice(0, 57) + "..." : cmd;
-      recordStat("bash_compress:recall", monBytes, Math.round(monBytes / 4));
+      recordStat("bash_compress:recall", monBytes, savedTokensFromBytes(monBytes));
       return contextOutput(
         "Prior output from `" + cmdSummary + "`" + pipelineDivergenceNote(cmd, monEntry.command) + " is cached.\nUse `token-goat bash-output " + monOutputId + " " + monitoringHint + "` to re-inspect without re-running."
       );
@@ -8823,7 +8857,7 @@ function preBashHandlerInner(event) {
     const curlEntry = curlEntryRaw !== null && !isBashEntryStale(curlEntryRaw, cmd, preHookCwd) ? curlEntryRaw : null;
     if (curlOutputId !== null && curlEntry !== null && curlEntry.sizeBytes >= loadConfig().hints.bash_dedup_min_bytes && meetsSavingsFloor(curlEntry.sizeBytes)) {
       const curlBytes = curlEntry.sizeBytes;
-      recordStat("bash_compress:recall", curlBytes, Math.round(curlBytes / 4));
+      recordStat("bash_compress:recall", curlBytes, savedTokensFromBytes(curlBytes));
       const curlPreview = cmd.length > 60 ? cmd.slice(0, 57) + "..." : cmd;
       return contextOutput(
         "curl response cached (`" + curlPreview + "`)." + pipelineDivergenceNote(cmd, curlEntry.command) + " Use `token-goat bash-output " + curlOutputId + "` to recall it. Append `--grep PATTERN` to filter or `--section HeadingName` for a markdown section."
@@ -8837,7 +8871,7 @@ function preBashHandlerInner(event) {
     const ghEntry = ghEntryRaw !== null && !isBashEntryStale(ghEntryRaw, cmd, preHookCwd) ? ghEntryRaw : null;
     if (ghOutputId !== null && ghEntry !== null && ghEntry.sizeBytes >= loadConfig().hints.bash_dedup_min_bytes && meetsSavingsFloor(ghEntry.sizeBytes)) {
       const ghBytes = ghEntry.sizeBytes;
-      recordStat("bash_compress:recall", ghBytes, Math.round(ghBytes / 4));
+      recordStat("bash_compress:recall", ghBytes, savedTokensFromBytes(ghBytes));
       const ghPreview = cmd.length > 60 ? cmd.slice(0, 57) + "..." : cmd;
       return contextOutput(
         "gh api response cached (`" + ghPreview + "`)." + pipelineDivergenceNote(cmd, ghEntry.command) + " Use `token-goat bash-output " + ghOutputId + "` to recall it. Append `--jq '.field'` on the original call, or `--grep PATTERN` / `--max-matches N` here, to narrow it."
@@ -8851,7 +8885,7 @@ function preBashHandlerInner(event) {
     const gitScopedEntry = gitScopedEntryRaw !== null && !isBashEntryStale(gitScopedEntryRaw, cmd, preHookCwd) ? gitScopedEntryRaw : null;
     if (gitScopedOutputId !== null && gitScopedEntry !== null && gitScopedEntry.sizeBytes >= loadConfig().hints.bash_dedup_min_bytes && meetsSavingsFloor(gitScopedEntry.sizeBytes)) {
       const gitScopedBytes = gitScopedEntry.sizeBytes;
-      recordStat("bash_compress:recall", gitScopedBytes, Math.round(gitScopedBytes / 4));
+      recordStat("bash_compress:recall", gitScopedBytes, savedTokensFromBytes(gitScopedBytes));
       const gitScopedPreview = cmd.length > 60 ? cmd.slice(0, 57) + "..." : cmd;
       return contextOutput(
         "Output from `" + gitScopedPreview + "`" + pipelineDivergenceNote(cmd, gitScopedEntry.command) + " is cached and unchanged (no edits to that path or HEAD since). Use `token-goat bash-output " + gitScopedOutputId + "` to recall it instead of re-running."
@@ -8893,7 +8927,7 @@ function preBashHandlerInner(event) {
   const entry = entryRaw !== null && !isBashEntryStale(entryRaw, cmd, preHookCwd) ? entryRaw : null;
   if (outputId !== null && entry !== null && entry.sizeBytes >= loadConfig().hints.bash_dedup_min_bytes && meetsSavingsFloor(entry.sizeBytes)) {
     const bytes = entry.sizeBytes;
-    recordStat("bash_compress:recall", bytes, Math.round(bytes / 4));
+    recordStat("bash_compress:recall", bytes, savedTokensFromBytes(bytes));
     return contextOutput(buildRecallHint(cmd, outputId));
   }
   return maybeCompressRewrite(event, rawCmd, cmd) ?? passOutput();
@@ -9189,12 +9223,23 @@ function getTaskId(toolInput) {
   const value = toolInput["task_id"];
   return typeof value === "string" && value !== "" ? value : void 0;
 }
+function extractTaskOutputText(raw) {
+  const tr = raw["tool_response"];
+  if (tr !== null && typeof tr === "object" && !Array.isArray(tr)) {
+    const task = tr["task"];
+    if (task !== null && typeof task === "object" && !Array.isArray(task)) {
+      const output = task["output"];
+      if (typeof output === "string") return output;
+    }
+  }
+  return extractToolResultText(raw);
+}
 function postTaskOutputHandler(event) {
   try {
     if (getToolName(event) !== "TaskOutput" || !event.sessionId) return passOutput();
     const taskId = getTaskId(getToolInput(event));
     if (taskId === void 0) return passOutput();
-    const rawOutput = extractToolResultText(event.raw);
+    const rawOutput = extractTaskOutputText(event.raw);
     if (!rawOutput) return passOutput();
     const output = redactSecrets(rawOutput).text;
     if (!output) return passOutput();
@@ -9366,10 +9411,10 @@ ${PLAN_OMIT_POINTER}`;
     })) {
       return passOutput();
     }
-    return {
-      hookType: "rewriteOutput",
-      updatedOutput: `${prefix}${notice}`
-    };
+    return emitRewrite(`${prefix}${notice}`, "exitplanmode", {
+      kind: "plan_echo_collapse",
+      originalBytes: Buffer.byteLength(output, "utf-8")
+    });
   } catch {
     return passOutput();
   }
@@ -9437,6 +9482,9 @@ function storeMcpOutput(sessionId, toolName, toolInput, resultText) {
 ${redactedOutput}`, entry.storedAt);
   return id;
 }
+function mcpOutputBytes(id) {
+  return getBashOutput(id)?.sizeBytes ?? 0;
+}
 function getMcpOutput(sessionId, toolName, toolInput, ttlMs = Number.POSITIVE_INFINITY) {
   if (!sessionId) return null;
   const id = mcpOutputId(sessionId, mcpHash(toolName, toolInput));
@@ -9759,6 +9807,8 @@ function preMcpHandler(event) {
   const ttlMs = loadConfig().hints.mcp_dedup_ttl_secs * 1e3;
   const id = getMcpOutput(event.sessionId, toolName, toolInput, ttlMs);
   if (!id) return passOutput();
+  const denyCredit = Math.min(mcpOutputBytes(id), PER_FILE_COUNTERFACTUAL_CEILING);
+  recordStat("mcp:recall", denyCredit, savedTokensFromBytes(denyCredit));
   return denyOutput(
     "Identical read-only MCP call already cached this session. Use `token-goat bash-output " + id + "` to recall the result (add `--grep PATTERN`, `--tail N`, or `--head N` to slice) instead of repeating the call."
   );
@@ -9769,23 +9819,14 @@ function postMcpHandler(event) {
   const toolInput = getToolInput(event);
   const resultText = extractToolResultText(event.raw);
   if (!resultText) return passOutput();
-  let injectionMatches = [];
-  try {
-    if (loadConfig().injection.enabled) injectionMatches = scanForInjectionPatterns(resultText);
-  } catch {
-    injectionMatches = [];
-  }
-  if (injectionMatches.length > 0) recordStat("injection_detected", 0, 0, void 0, injectionMatches.join(","));
+  const injectionMatches = scanAndRecord(resultText);
   const redactedResult = redactSecrets(resultText);
-  const fenced = () => emitRewrite(
-    fenceUntrustedContent(redactedResult.text, injectionMatches, UNTRUSTED_TOOL_TAG),
+  const fenced = () => emitRewriteIfChanged(
+    resultText,
+    fenceWithMatches(redactedResult.text, injectionMatches, UNTRUSTED_TOOL_TAG),
     "mcp"
   );
-  const passOrFence = () => {
-    if (injectionMatches.length > 0) return fenced();
-    if (redactedResult.count > 0) return emitRewrite(redactedResult.text, "mcp");
-    return passOutput();
-  };
+  const passOrFence = () => fenced();
   if (!event.sessionId) return passOrFence();
   if (isMcpErrorResponse(event.raw)) return passOrFence();
   const readOnly = isMcpReadOnly(toolName, toolInput);
@@ -9803,16 +9844,18 @@ function postMcpHandler(event) {
         const redactedBody = redactSecrets(compressed).text;
         const notice = `[token-goat: compressed, full via mcp-output ${id}]
 `;
+        const originalBytes = Buffer.byteLength(resultText, "utf-8");
         const worthwhile = isRewriteWorthwhile({
-          originalBytes: Buffer.byteLength(resultText, "utf-8"),
+          originalBytes,
           rewrittenBytes: Buffer.byteLength(redactedBody, "utf-8"),
           noticeBytes: Buffer.byteLength(notice, "utf-8"),
           minNetSavingsBytes: resolveMinNetSavingsBytes()
         });
         if (worthwhile) {
           return emitRewrite(
-            injectionMatches.length > 0 ? `${notice}${fenceUntrustedContent(redactedBody, injectionMatches, UNTRUSTED_TOOL_TAG)}` : `${notice}${redactedBody}`,
-            "mcp"
+            `${notice}${fenceWithMatches(redactedBody, injectionMatches, UNTRUSTED_TOOL_TAG)}`,
+            "mcp",
+            { kind: "mcp:compress", originalBytes }
           );
         }
       }
@@ -9862,23 +9905,9 @@ function postWebSearchHandler(event) {
     if (getToolName(event) !== "WebSearch") return passOutput();
     const resultText = extractToolResultText(event.raw);
     if (!resultText) return passOutput();
-    let injectionMatches = [];
-    try {
-      if (loadConfig().injection.enabled) injectionMatches = scanForInjectionPatterns(resultText);
-    } catch {
-      injectionMatches = [];
-    }
-    if (injectionMatches.length > 0) recordStat("injection_detected", 0, 0, void 0, injectionMatches.join(","));
+    const injectionMatches = scanAndRecord(resultText);
     const redacted = redactSecrets(resultText);
-    const passOrFence = () => {
-      if (injectionMatches.length > 0) {
-        return emitRewrite(fenceUntrustedContent(redacted.text, injectionMatches), "websearch");
-      }
-      if (redacted.count > 0) {
-        return emitRewrite(redacted.text, "websearch");
-      }
-      return passOutput();
-    };
+    const passOrFence = () => emitRewriteIfChanged(resultText, fenceWithMatches(redacted.text, injectionMatches), "websearch");
     if (!event.sessionId) return passOrFence();
     const signature = webSearchSignatureInput(getToolInput(event));
     if (signature === null) return passOrFence();
@@ -9934,13 +9963,15 @@ async function shrinkImageBlock(block) {
   const mediaType = typeof source?.media_type === "string" ? source.media_type : "image/png";
   const data = typeof source?.data === "string" ? source.data : "";
   const originalDataUrl = `data:${mediaType};base64,${data}`;
-  if (source?.type !== "base64" || data === "") return { text: originalDataUrl, changed: false, savedBytes: 0 };
+  if (source?.type !== "base64" || data === "") return { text: originalDataUrl, changed: false, savedBytes: 0, savedTokens: 0 };
   let buffer;
   try {
     buffer = Buffer.from(data, "base64");
   } catch {
-    return { text: originalDataUrl, changed: false, savedBytes: 0 };
+    return { text: originalDataUrl, changed: false, savedBytes: 0, savedTokens: 0 };
   }
+  const meta = await probeImageMeta(buffer);
+  const tier = loadConfig().image_shrink.vision_tier;
   const fingerprint = screenshotFingerprint(data);
   const alreadyShown = hasSeenImage(fingerprint);
   recordSeenImage(fingerprint);
@@ -9955,16 +9986,23 @@ async function shrinkImageBlock(block) {
       return {
         text: SCREENSHOT_REPEAT_NOTICE,
         changed: true,
-        savedBytes: originalDataUrl.length - SCREENSHOT_REPEAT_NOTICE.length
+        // Decoded image bytes, not base64 characters. Both branches of this function file under the same `image_shrink` kind, and the shrink branch below credits `result.originalBytes - result.shrunkBytes` -- decoded bytes, the convention documented at image_shrink.ts's own recordStat call. Base64 inflates by 4/3, so crediting `originalDataUrl.length` here booked roughly 33% more for a repeat screenshot than an identical shrink of the same image, and the ledger summed the two units into one row. The gate above deliberately still measures the data URL: it decides whether the rewrite pays off on the wire, where base64 characters are what is actually sent.
+        savedBytes: buffer.length - Buffer.byteLength(SCREENSHOT_REPEAT_NOTICE, "utf-8"),
+        // The whole image is withheld here rather than resized, so the visual tokens saved are its
+        // entire billed cost less the notice standing in for it. Billed cost, not raw patch count:
+        // an oversized screenshot would have been capped by the API's own downscale, so pricing the
+        // untouched dimensions would credit a bill that was never going to be sent.
+        savedTokens: Math.max(0, visionTokens(meta?.width ?? 0, meta?.height ?? 0, tier) - savedTokensFromBytes(Buffer.byteLength(SCREENSHOT_REPEAT_NOTICE, "utf-8")))
       };
     }
   }
   const result = await imageQualifiesForShrink(buffer) ? await shrinkImage(buffer, { sizeThresholdBytes: 0 }) : null;
-  if (result === null) return { text: originalDataUrl, changed: false, savedBytes: 0 };
+  if (result === null) return { text: originalDataUrl, changed: false, savedBytes: 0, savedTokens: 0 };
   const saved = result.originalBytes - result.shrunkBytes;
   const { summary, dataUrl } = formatShrinkSummary(result, "an inline browser screenshot");
+  const savedTokens = visionTokensSaved(result.originalWidth, result.originalHeight, result.width, result.height, tier);
   return { text: `${summary}
-${dataUrl}`, changed: true, savedBytes: saved };
+${dataUrl}`, changed: true, savedBytes: saved, savedTokens };
 }
 var TAB_CONTEXT_UNCHANGED_NOTICE = "(tabs unchanged since last check)";
 function dedupTabContext(text) {
@@ -9992,15 +10030,19 @@ async function postBrowserImageHandler(event) {
     const parts = [];
     for (const block of blocks) {
       if (block.type === "image") {
-        const { text, changed, savedBytes } = await shrinkImageBlock(block);
+        const { text, changed, savedBytes, savedTokens } = await shrinkImageBlock(block);
         if (changed) {
           anyChanged = true;
-          recordStat("image_shrink", savedBytes, Math.round(savedBytes / 4), void 0, toolName);
+          recordStat("image_shrink", savedBytes, savedTokens, void 0, toolName);
         }
         parts.push(text);
       } else if (block.type === "text" && typeof block.text === "string") {
         const { text, changed } = dedupTabContext(block.text);
-        if (changed) anyChanged = true;
+        if (changed) {
+          anyChanged = true;
+          const savedBytes = Buffer.byteLength(block.text, "utf-8") - Buffer.byteLength(text, "utf-8");
+          if (savedBytes > 0) recordStat("browser_tab_dedup", savedBytes, savedTokensFromBytes(savedBytes), void 0, toolName);
+        }
         parts.push(text);
       } else {
         try {
@@ -10011,7 +10053,7 @@ async function postBrowserImageHandler(event) {
       }
     }
     if (!anyChanged) return passOutput();
-    return { hookType: "rewriteOutput", updatedOutput: parts.join("\n") };
+    return emitRewrite(parts.join("\n"), toolName);
   } catch {
     return passOutput();
   }
@@ -10020,6 +10062,9 @@ registerHook("post_tool_use", postBrowserImageHandler, { toolPattern: "^mcp__" }
 
 // src/hooks_agent_spawn.ts
 import { createHash as createHash2 } from "node:crypto";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path2 from "node:path";
 var BRIEFING_TARGET_TOKENS = 550;
 function buildSubagentBriefing() {
   try {
@@ -10091,8 +10136,11 @@ function findDuplicateOutstandingPrompt(prompt) {
 function truncateForWarning(text, max) {
   return text.length > max ? text.slice(0, max) + "..." : text;
 }
+function isAgentTool(toolName) {
+  return toolName === "Agent" || toolName === "task" || toolName === "Task";
+}
 function preAgentHandler(event) {
-  if (event.toolName !== "Agent") return passOutput();
+  if (!isAgentTool(event.toolName)) return passOutput();
   const toolInput = event.toolInput;
   const prompt = toolInput["prompt"];
   if (typeof prompt !== "string" || prompt.trim() === "") return passOutput();
@@ -10114,7 +10162,7 @@ function preAgentHandler(event) {
     return passOutput();
   }
 }
-var FENCE_LINE_RE = /^ {0,3}(`{3,}|~{3,})(.*)$/;
+var FENCE_LINE_RE = /^ {0,3}(`{3,}|~{3,})([^\n]*)$/;
 function findFencedBlockLines(lines) {
   const blocks = [];
   let fenceStart = -1;
@@ -10214,9 +10262,100 @@ function collapseBlankRunsInFences(text) {
   out.push(...lines.slice(cursor));
   return changedAny ? out.join("\n") : text;
 }
+var SPAWN_RESTRICT_HINT_KEY = "agent-spawn-restrict-hint";
+var SPAWN_RESTRICT_MAX_NAMES = 3;
+var ROSTER_WALK_MAX_DEPTH = 4;
+var ROSTER_WALK_MAX_FILES = 400;
+function parseAgentDefinition(text, fallbackName) {
+  const fmMatch = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(text);
+  if (!fmMatch) return null;
+  const fm = fmMatch[1];
+  const nameMatch = /^name:(.*)$/m.exec(fm);
+  const rawName = nameMatch ? nameMatch[1].trim().replace(/^["']|["']$/g, "") : "";
+  const name2 = rawName !== "" ? rawName : fallbackName;
+  const toolsMatch = /^tools:(.*)$/m.exec(fm);
+  if (!toolsMatch) return { name: name2, restricted: false };
+  const inline = toolsMatch[1].trim();
+  if (inline === "*" || inline === '"*"' || inline === "'*'") return { name: name2, restricted: false };
+  if (inline !== "") return { name: name2, restricted: true };
+  const after = fm.slice(toolsMatch.index + toolsMatch[0].length);
+  for (const line of after.split(/\r?\n/)) {
+    if (/^\s+-\s*\S/.test(line)) return { name: name2, restricted: true };
+    if (/^\S/.test(line)) break;
+  }
+  return { name: name2, restricted: false };
+}
+function findRestrictedAgentNames(roots) {
+  const scanRoots = roots ?? [path2.join(os.homedir(), ".claude", "agents")];
+  const names = /* @__PURE__ */ new Set();
+  const visited = /* @__PURE__ */ new Set();
+  let filesSeen = 0;
+  const walk = (dir, depth) => {
+    if (depth > ROSTER_WALK_MAX_DEPTH || filesSeen >= ROSTER_WALK_MAX_FILES) return;
+    let real;
+    try {
+      real = fs.realpathSync(dir);
+    } catch {
+      return;
+    }
+    const key = process.platform === "win32" ? real.toLocaleLowerCase() : real;
+    if (visited.has(key)) return;
+    visited.add(key);
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (filesSeen >= ROSTER_WALK_MAX_FILES) return;
+      const full = path2.join(dir, entry.name);
+      let stat;
+      try {
+        stat = fs.statSync(full);
+      } catch {
+        continue;
+      }
+      if (stat.isDirectory()) {
+        walk(full, depth + 1);
+        continue;
+      }
+      if (!stat.isFile() || !entry.name.toLowerCase().endsWith(".md")) continue;
+      filesSeen++;
+      let text;
+      try {
+        text = fs.readFileSync(full, "utf-8");
+      } catch {
+        continue;
+      }
+      const parsed = parseAgentDefinition(text, path2.basename(entry.name, path2.extname(entry.name)));
+      if (parsed !== null && parsed.restricted) names.add(parsed.name);
+    }
+  };
+  for (const root of scanRoots) walk(root, 0);
+  return Array.from(names).sort();
+}
+function buildUnrestrictedSpawnAdvisory(toolInput) {
+  try {
+    if (getHarnessName() === "copilot_cli") return "";
+    const rawType = toolInput["subagent_type"];
+    const spawnType = typeof rawType === "string" ? rawType.trim() : "";
+    if (spawnType !== "" && spawnType !== "general-purpose") return "";
+    if (wasHintShown(SPAWN_RESTRICT_HINT_KEY)) return "";
+    const names = findRestrictedAgentNames();
+    if (names.length === 0) return "";
+    markHintShown(SPAWN_RESTRICT_HINT_KEY);
+    recordStat("session_hint", 0, 0, void 0, "agent-spawn-restrict");
+    const shown = names.slice(0, SPAWN_RESTRICT_MAX_NAMES).join(", ");
+    const more = names.length > SPAWN_RESTRICT_MAX_NAMES ? ` and ${names.length - SPAWN_RESTRICT_MAX_NAMES} more` : "";
+    return `[token-goat] This spawn ran as general-purpose (the default when subagent_type is omitted), which is unrestricted: its lane starts by paying for every tool and MCP schema on the machine. Tools-restricted agent definitions exist here: ${shown}${more}. A future spawn that fits one of them can pass that name as subagent_type to start with a much smaller prefix. Advisory only: this spawn has already run, and this notice saved nothing.`;
+  } catch {
+    return "";
+  }
+}
 function postAgentHandler(event) {
   try {
-    if (event.toolName !== "Agent" || !event.sessionId) return passOutput();
+    if (!isAgentTool(event.toolName) || !event.sessionId) return passOutput();
     const finishedPrompt = event.toolInput["prompt"];
     if (typeof finishedPrompt === "string" && finishedPrompt !== "") {
       removeOutstandingAgentSpawn(finishedPrompt);
@@ -10224,13 +10363,17 @@ function postAgentHandler(event) {
     const redactedReport = redactSecrets(extractToolResultText(event.raw));
     const resultText = redactedReport.text;
     const agentReportCfg = loadConfig().agent_report;
-    if (!resultText || resultText.length < agentReportCfg.min_bytes) return passOutput();
-    const id = storeMcpOutput(event.sessionId, "Agent", event.toolInput, resultText);
-    if (id === null) return passOutput();
+    const spawnAdvisory = buildUnrestrictedSpawnAdvisory(event.toolInput);
+    if (!resultText || resultText.length < agentReportCfg.min_bytes) {
+      return spawnAdvisory === "" ? passOutput() : contextOutput(spawnAdvisory);
+    }
+    const id = storeMcpOutput(event.sessionId, event.toolName ?? "Agent", event.toolInput, resultText);
+    if (id === null) return spawnAdvisory === "" ? passOutput() : contextOutput(spawnAdvisory);
     if (redactedReport.count > 0) recordStat("secret_redacted", 0, redactedReport.count, void 0, "agent");
     recordStat("session_hint", 0, 0);
     const recallHint = `token-goat mcp-output ${id} --full`;
-    const notice = `[token-goat] This subagent report (${toKB(resultText.length)}KB) is cached for later recall: ${recallHint}`;
+    const notice = `[token-goat] This subagent report (${toKB(resultText.length)}KB) is cached for later recall: ${recallHint}${spawnAdvisory === "" ? "" : `
+${spawnAdvisory}`}`;
     const collapsed = collapseFencedBlocks(resultText, recallHint, agentReportCfg.fence_collapse_min_lines, agentReportCfg.fence_collapse_keep_lines);
     const deduped = dedupeFencedBlocks(collapsed, resultText, recallHint);
     const final = collapseBlankRunsInFences(deduped);
@@ -10247,8 +10390,8 @@ function postAgentHandler(event) {
 
 ${notice}`;
         const savedBytes = originalBytes - Buffer.byteLength(updatedOutput, "utf-8");
-        if (savedBytes > 0) recordStat("agent_report_compact", savedBytes, Math.round(savedBytes / 4));
-        return { hookType: "rewriteOutput", updatedOutput };
+        if (savedBytes > 0) recordStat("agent_report_compact", savedBytes, savedTokensFromBytes(savedBytes));
+        return emitRewrite(updatedOutput, "agent", void 0, "counted-elsewhere");
       }
       recordStat("agent_report_compact_declined", 0, 0);
     }
@@ -10258,7 +10401,11 @@ ${notice}`;
   }
 }
 registerHook("pre_tool_use", preAgentHandler, { toolName: "Agent" });
+registerHook("pre_tool_use", preAgentHandler, { toolName: "task" });
+registerHook("pre_tool_use", preAgentHandler, { toolName: "Task" });
 registerHook("post_tool_use", postAgentHandler, { toolName: "Agent" });
+registerHook("post_tool_use", postAgentHandler, { toolName: "task" });
+registerHook("post_tool_use", postAgentHandler, { toolName: "Task" });
 
 // src/relay.ts
 function isHookEventName(name2) {
@@ -10274,7 +10421,11 @@ function buildEvent(eventName, payload) {
   const sessionId = typeof rawSession === "string" ? rawSession : "";
   const rawAgentId = obj["agent_id"] ?? obj["agentId"];
   const agentId = typeof rawAgentId === "string" && rawAgentId !== "" ? rawAgentId : void 0;
-  return { eventName, toolName, toolInput, sessionId, agentId, raw: obj };
+  const rawTraceparent = obj["traceparent"] ?? obj["traceParent"] ?? process.env["TRACEPARENT"] ?? process.env["traceparent"];
+  const traceparent = typeof rawTraceparent === "string" && rawTraceparent.trim() !== "" ? rawTraceparent.trim() : void 0;
+  const rawTracestate = obj["tracestate"] ?? obj["traceState"] ?? process.env["TRACESTATE"] ?? process.env["tracestate"];
+  const tracestate = typeof rawTracestate === "string" && rawTracestate.trim() !== "" ? rawTracestate.trim() : void 0;
+  return { eventName, toolName, toolInput, sessionId, agentId, traceparent, tracestate, raw: obj };
 }
 function sessionStateKey(event) {
   return event.agentId !== void 0 ? `${event.sessionId}:agent:${event.agentId}` : event.sessionId;
@@ -10285,6 +10436,7 @@ function harnessForNormalization() {
   if (detected === "gemini") return "gemini";
   if (detected === "grok") return "grok";
   if (detected === "kimi") return "kimi";
+  if (detected === "qwen") return "qwen";
   if (detected === "copilot_cli") return "copilot_cli";
   return "claude";
 }
@@ -10299,6 +10451,12 @@ async function relayInProcess(eventName, rawPayload) {
     if (!process.env["CLAUDE_CODE_SESSION_ID"] && event.sessionId) {
       process.env["CLAUDE_CODE_SESSION_ID"] = event.sessionId;
     }
+    if (!process.env["TRACEPARENT"] && event.traceparent) {
+      process.env["TRACEPARENT"] = event.traceparent;
+    }
+    if (!process.env["TRACESTATE"] && event.tracestate) {
+      process.env["TRACESTATE"] = event.tracestate;
+    }
     const stateKey = sessionStateKey(event);
     try {
       loadSessionState(stateKey);