token-goat 2.8.6 → 2.9.2

package/dist/{token-goat-chunk-U7M2LTGP.mjs → token-goat-chunk-KKIB7O3Z.mjs}

@@ -5,6 +5,7 @@ import {
   AMBIGUOUS_HEADING_LIMIT,
   CONTENT_MAX_INPUT_CHARS,
   WHOLE_FILE_NOTE_SYMBOL,
+  buildImportGraph,
   compressText,
   computeFileFingerprint,
   createHandoff,
@@ -15,7 +16,6 @@ import {
   extractTranscriptText,
   filterSimilarHeadings,
   findSpecSeparator,
-  getTrackedFiles,
   healStaleIndex,
   isAvailable as isAvailable2,
   listSections,
@@ -86,43 +86,38 @@ import {
   runZipRead,
   symbolNamesInFile,
   upsertNote
-} from "./token-goat-chunk-XAWIELXH.mjs";
+} from "./token-goat-chunk-FXAPKVRG.mjs";
 import {
-  BASH_OUTPUT_SUBDIR,
+  DEFAULT_RECONCILE_BUDGET_MS,
   GEMINI_TOOL_NAME_MAP,
   HOOK_EVENTS,
-  RECALL_DEFAULT_LIMIT,
   WEB_OUTPUT_SUBDIR,
   accumulateResidentLine,
   buildCommandManifest,
   checkSymbolBodySize,
-  commandHash,
   createResidentContextStats,
   filterCommandManifest,
   formatBytes,
   formatCommandManifest,
   formatTokenEstimate,
-  getBashOutput,
   getWebOutput,
   getWebOutputByUrlFromDisk,
   getWebOutputRaw,
-  isRecallCacheType,
-  listRecentRecall,
-  normalizeCommandForCacheKey,
   readCopilotMcpTools,
   readStdinJson,
-  searchRecall,
+  runReconcile,
   storeWebOutput,
   summarizeResidentContext
-} from "./token-goat-chunk-TELKICYU.mjs";
+} from "./token-goat-chunk-VCNW7BGU.mjs";
 import {
   AGENT_SALT_MARKER,
+  BASH_OUTPUT_SUBDIR,
   CONTEXT_AUTOCOMPACT_TOKENS,
   DEFAULT_MAX_AGE_MS,
   DEFAULT_MAX_COUNT,
-  MATERIALIZE_SHRUNK_IMAGE_JS,
   MAX_FILES_SCANNED,
   PARSER_FINGERPRINT,
+  RECALL_DEFAULT_LIMIT,
   SESSIONS_SUBDIR,
   SKILLS_OUTPUT_SUBDIR,
   SKIP_DIRS,
@@ -131,7 +126,6 @@ import {
   UNTRUSTED_WEB_TAG,
   WORKER_HEARTBEAT_STALE_MS,
   WorkerAlreadyRunningError,
-  anchoredMarkerPattern,
   applyIndexingPriority,
   auditClaudeMd,
   buildExtractiveCompact,
@@ -140,14 +134,11 @@ import {
   buildProjectMap,
   buildStats,
   capJsonRows,
+  commandHash,
   compactDoc,
   compactPathFor,
   confirmAndApply,
   contentHash,
-  copilotCliConfigPath,
-  copilotCliMcpToolsDir,
-  copilotCliScriptPath,
-  copilotCliUserRoot,
   detectWalkMode,
   dirtyQueuePathFor,
   docxOutline,
@@ -171,13 +162,13 @@ import {
   findMemSuggestionCandidates,
   findMemoryMd,
   findOrphanedChunkPaths,
-  findStrayClaudeMdBlocks,
   findSystemTempFiles,
   formatAge,
   formatCsvTable,
   formatMemSuggestions,
   formatProjectMap,
   formatXlsxRange,
+  getBashOutput,
   getContextPressure,
   getDirtyPathsFor,
   getEmbeddingCoverage,
@@ -188,35 +179,24 @@ import {
   getSessionFiles,
   getSessionId,
   getSkillFilePath,
-  groupHasTokenGoat,
+  getTrackedFiles,
   headSheet,
   incrementSkillHit,
   indexFileEmbeddings,
   indexFileSync,
   indexedPathSpellingIsStale,
   injectionFencingEnabled,
-  installClaudeMd,
-  installCodex,
-  installCopilotCli,
-  installGrok,
-  installHooks,
-  installKimi,
-  installSkill,
-  installVscode,
   isAvailable,
-  isCodexInstalled,
   isCompactFresh,
-  isCopilotCliInstalled,
   isEmbedFresh,
   isEmbeddableDocument,
-  isGrokInstalled,
   isHintCategory,
-  isInstalled,
-  isKimiInstalled,
   isParseSkipEligible,
+  isRecallCacheType,
   isWorkerRunning,
   listBlobs,
   listOutputs,
+  listRecentRecall,
   listSheets,
   listSkills,
   loadBlob,
@@ -224,7 +204,7 @@ import {
   mapLookupBytesSaved,
   markCategoryEffective,
   markCategoryIneffective,
-  otherScopeHasManagedServer,
+  normalizeCommandForCacheKey,
   parseWhereSpecs,
   pptxNotesText,
   pptxOutline,
@@ -245,6 +225,7 @@ import {
   runContextStats,
   runDetachedWorkerDaemon,
   scanAndRecord,
+  searchRecall,
   shrinkImage,
   skillOutputsDir,
   startDetachedWorker,
@@ -253,33 +234,35 @@ import {
   storeOutput,
   tokenGoatHome,
   trimToBudget,
-  uninstallClaudeMd,
-  uninstallCodex,
-  uninstallCopilotCli,
-  uninstallGrok,
-  uninstallHooks,
-  uninstallKimi,
-  uninstallSkill,
-  uninstallVscode,
   urlPolicyDenialReason,
-  vscodeDecoderConfigured,
+  visionTokensSavedByText,
   walkProject,
   writeCompact
-} from "./token-goat-chunk-DK4VLLYB.mjs";
+} from "./token-goat-chunk-LJ3CHCTT.mjs";
 import {
   C,
   CONFIG_KEY_ENV_OVERRIDES,
   ENV_KEYS,
   FILTERS,
   LOCK_WAIT_MS_HARDENED,
+  MATERIALIZE_SHRUNK_IMAGE_JS,
+  PROJECT_LOCKED_KEYS,
+  PROJECT_LOCKED_SECTIONS,
   RESET,
   VERSION,
   _useRichStats,
+  anchoredMarkerPattern,
   atomicWriteBytes,
   atomicWriteText,
   canonicalize,
+  cappedSourceBytesSaved,
   colorStdout,
+  compileCustomPatterns,
   configPath,
+  copilotCliConfigPath,
+  copilotCliMcpToolsDir,
+  copilotCliScriptPath,
+  copilotCliUserRoot,
   countNoun,
   dataDir,
   decodeSource,
@@ -289,11 +272,13 @@ import {
   encodeSource,
   ensureDirSync,
   ensureNewline,
+  envBool,
   escapeRegExp,
   extractErrorMessage,
   fg,
   fileIsAbsent,
   findProject,
+  findStrayClaudeMdBlocks,
   fingerprintContent,
   fingerprintFile,
   foldPath,
@@ -304,9 +289,24 @@ import {
   getLastProjectConfigParseError,
   getProjectConfigInfo,
   globalDbPath,
+  groupHasTokenGoat,
+  installClaudeMd,
+  installCodex,
+  installCopilotCli,
+  installGrok,
+  installHooks,
+  installKimi,
   installSingleFilePlugin,
+  installSkill,
+  installVscode,
   invalidateConfigCache,
+  isCodexInstalled,
+  isCopilotCliInstalled,
   isDotenvPath,
+  isGrokInstalled,
+  isInstalled,
+  isKimiInstalled,
+  isTestFile,
   isUnderBlockedRoot,
   isWindows,
   lastProjectConfigLockedKeys,
@@ -314,6 +314,7 @@ import {
   loadPersistedConfig,
   normalizeDarwinSystemAlias,
   normalizePath,
+  otherScopeHasManagedServer,
   pad,
   parse,
   pushAll,
@@ -341,14 +342,23 @@ import {
   summarize,
   toDisplayPath,
   toKB,
+  uninstallClaudeMd,
+  uninstallCodex,
+  uninstallCopilotCli,
+  uninstallGrok,
+  uninstallHooks,
+  uninstallKimi,
   uninstallSingleFilePlugin,
+  uninstallSkill,
+  uninstallVscode,
   validateEnumField,
   validateNumericField,
+  vscodeDecoderConfigured,
   withExtension,
   withFileLock,
   withRetryOnLock,
   writeJsonSettings
-} from "./token-goat-chunk-2JZ66BBE.mjs";
+} from "./token-goat-chunk-UZ2NFOOZ.mjs";
 import {
   __export
 } from "./token-goat-chunk-AEX54RUZ.mjs";
@@ -3467,9 +3477,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path29) {
-    if (path29 === void 0) return this._executableDir;
-    this._executableDir = path29;
+  executableDir(path30) {
+    if (path30 === void 0) return this._executableDir;
+    this._executableDir = path30;
     return this;
   }
   /**
@@ -3769,7 +3779,7 @@ function attemptedCommandName(argv) {
 
 // src/cli.ts
 import * as fs28 from "fs";
-import * as path28 from "path";
+import * as path29 from "path";
 import { homedir as homedir13 } from "os";
 
 // src/walk_index.ts
@@ -4311,7 +4321,7 @@ function materializeShrunkImage(context: string | undefined): string | undefined
   try {
     pruneMaterializedShrinks();
     const buf = Buffer.from(match[2], "base64");
-    const name = \`token-goat-shrink-\${process.pid}-\${Date.now()}-\${Math.random().toString(36).slice(2)}.\${match[1]}\`;
+    const name = \`token-goat-shrink-\${process.pid}-\${Date.now()}-\${globalThis.crypto.randomUUID()}.\${match[1]}\`;
     const file = path.join(os.tmpdir(), name);
     fs.writeFileSync(file, buf);
     return file;
@@ -5657,9 +5667,110 @@ function formatCues(cues) {
   return cues.map((cue) => `[${formatTimestamp(cue.startSeconds)}]${cue.speaker !== null ? ` ${cue.speaker}:` : ""} ${cue.text}`).join("\n");
 }
 
+// src/affected.ts
+import * as path9 from "node:path";
+var DEFAULT_AFFECTED_DEPTH = 5;
+function emit(text) {
+  const payload = colorStdout() ? text : stripAnsi(text);
+  process.stdout.write(ensureNewline(payload));
+}
+function emitErr(text) {
+  process.stderr.write(ensureNewline(text));
+}
+function computeAffected(opts) {
+  const cwd = opts.cwd ?? process.cwd();
+  const depth = opts.depth ?? DEFAULT_AFFECTED_DEPTH;
+  const { files, importedBy } = buildImportGraph(cwd);
+  const trackedByFolded = /* @__PURE__ */ new Map();
+  for (const f of files) trackedByFolded.set(foldPath(normalizePath(f)), f);
+  const unknownSeeds = [];
+  let frontier = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of opts.files) {
+    const abs = normalizePath(path9.resolve(cwd, raw));
+    const tracked = trackedByFolded.get(foldPath(abs));
+    if (tracked === void 0) {
+      unknownSeeds.push(raw);
+      continue;
+    }
+    if (seen.has(tracked)) continue;
+    seen.add(tracked);
+    frontier.push(tracked);
+  }
+  let hops = 0;
+  while (frontier.length > 0 && hops < depth) {
+    const next = [];
+    for (const file of frontier) {
+      for (const importer of importedBy.get(file) ?? []) {
+        if (seen.has(importer)) continue;
+        seen.add(importer);
+        next.push(importer);
+      }
+    }
+    frontier = next;
+    hops++;
+  }
+  const depthLimited = frontier.length > 0;
+  const matcher = opts.filter === void 0 ? null : new RegExp(opts.filter);
+  const isAffectedTest = (f) => matcher === null ? isTestFile(f) : matcher.test(f);
+  const root = getDisplayRoot(cwd);
+  const testFiles = [...seen].filter(isAffectedTest).map((f) => toDisplayPath(root, f)).sort();
+  return {
+    testFiles,
+    reachedCount: seen.size,
+    unknownSeeds,
+    depthLimited,
+    unexploredAtFrontier: frontier.length,
+    depth
+  };
+}
+function runAffected(opts) {
+  if (opts.depth !== void 0 && opts.depth <= 0) {
+    emitErr(`--depth must be a positive number, got: ${opts.depth}`);
+    return 1;
+  }
+  if (opts.files.length === 0) {
+    emitErr("No changed files given. Pass paths as arguments, or pipe them in with --stdin.");
+    return 1;
+  }
+  if (opts.filter !== void 0) {
+    try {
+      new RegExp(opts.filter);
+    } catch (err2) {
+      emitErr(`--filter is not a valid regular expression: ${err2 instanceof Error ? err2.message : String(err2)}`);
+      return 1;
+    }
+  }
+  const result = computeAffected(opts);
+  if (opts.json === true) {
+    emit(JSON.stringify(result, null, 2));
+    return 0;
+  }
+  if (opts.quiet === true) {
+    for (const f of result.testFiles) emit(f);
+  } else if (result.testFiles.length === 0) {
+    const traced = opts.files.length - result.unknownSeeds.length;
+    if (traced === 0) {
+      emit(`Nothing could be traced: ${result.unknownSeeds.length === 1 ? "the file given is not tracked" : "none of the files given are tracked"} in this project.`);
+    } else {
+      emit(`No test files import ${countNoun(traced, "changed file")} (within ${countNoun(result.depth, "hop")}).`);
+    }
+  } else {
+    emit(`${countNoun(result.testFiles.length, "affected test file")} (${countNoun(result.reachedCount, "file")} reached within ${countNoun(result.depth, "hop")}):`);
+    for (const f of result.testFiles) emit(`  ${f}`);
+  }
+  if (result.unknownSeeds.length > 0) {
+    emitErr(`Not tracked in this project, so nothing was traced from ${result.unknownSeeds.length === 1 ? "it" : "them"}: ${result.unknownSeeds.join(", ")}`);
+  }
+  if (result.depthLimited) {
+    emitErr(`Stopped at --depth ${result.depth} with ${countNoun(result.unexploredAtFrontier, "file")} still unexplored; more tests may be affected (raise --depth).`);
+  }
+  return 0;
+}
+
 // src/purge.ts
 import * as fs10 from "node:fs";
-import * as path9 from "node:path";
+import * as path10 from "node:path";
 function directorySize(root) {
   let total = 0;
   let entries;
@@ -5669,7 +5780,7 @@ function directorySize(root) {
     return 0;
   }
   for (const entry of entries) {
-    const full = path9.join(root, entry.name);
+    const full = path10.join(root, entry.name);
     if (entry.isDirectory()) {
       total += directorySize(full);
       continue;
@@ -5712,7 +5823,7 @@ function formatBytes2(bytes) {
 
 // src/cli_stats.ts
 import * as fs11 from "node:fs";
-import * as path10 from "node:path";
+import * as path11 from "node:path";
 function writeRaw(text) {
   const payload = colorStdout() ? text : stripAnsi(text);
   process.stdout.write(ensureNewline(payload));
@@ -5724,7 +5835,7 @@ function formatTopFiles(ranked) {
   if (ranked.length === 0) return "";
   const lines = ["Top files this session:"];
   for (const { path: filePath, count } of ranked) {
-    const basename8 = path10.basename(filePath);
+    const basename8 = path11.basename(filePath);
     lines.push(`  ${count.toString().padStart(3)}x  ${basename8}  (${filePath})`);
   }
   return lines.join("\n");
@@ -5741,12 +5852,12 @@ function renderTopSessionFiles(topN = 5) {
 }
 function renderTopSessionFilesFromDisk(topN = 5, overrideSessionsDir) {
   try {
-    const sessionsDir = overrideSessionsDir ?? path10.join(dataDir(), "sessions");
+    const sessionsDir = overrideSessionsDir ?? path11.join(dataDir(), "sessions");
     if (!fs11.existsSync(sessionsDir)) return "";
-    const files = fs11.readdirSync(sessionsDir).filter((f) => f.endsWith(".json")).map((f) => ({ name: f, mtime: fs11.statSync(path10.join(sessionsDir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).slice(0, 3);
+    const files = fs11.readdirSync(sessionsDir).filter((f) => f.endsWith(".json")).map((f) => ({ name: f, mtime: fs11.statSync(path11.join(sessionsDir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).slice(0, 3);
     for (const { name } of files) {
       try {
-        const raw = fs11.readFileSync(path10.join(sessionsDir, name), "utf-8");
+        const raw = fs11.readFileSync(path11.join(sessionsDir, name), "utf-8");
         const data = JSON.parse(raw);
         const filesList = data["files"];
         if (!Array.isArray(filesList)) continue;
@@ -5766,8 +5877,8 @@ function renderTopSessionFilesFromDisk(topN = 5, overrideSessionsDir) {
 var METHODOLOGY = {
   estimate_scope: "Local estimate of content avoided or reduced by token-goat.",
   billing: "They are not GitHub Copilot usage, provider-reported token consumption, or billing data.",
-  byte_derived_formula: "Most read, hook, and command entries go through savedTokensFromBytes in src/stats.ts, which is Math.round(bytes_saved / 4).",
-  filter_estimates: "Output compressors record their filter-calculated delta; image entries use the byte-derived approximation unless the source provides a narrower estimate.",
+  byte_derived_formula: "Most read, hook, and command entries go through savedTokensFromBytes in src/stats.ts, which is Math.round(bytes_saved / 4). Image entries are the exception: they are priced in visual tokens, not bytes.",
+  filter_estimates: "Output compressors record their filter-calculated delta, measured against what the harness would actually have delivered rather than the full command output. Image entries are priced in visual tokens (28x28-pixel patches, capped at the configured vision tier), because an image is not billed by its byte size; where the pixel dimensions are unavailable the tier ceiling is used.",
   advisory_events: "Zero-byte, zero-token advisory events show that guidance fired, not that an agent followed it.",
   audit: "Use stats --full or stats --json for source and command breakdowns; reconcile billing with provider-exported usage data."
 };
@@ -5835,12 +5946,12 @@ function runStats(opts = {}) {
 // src/cli_doctor.ts
 import * as fs12 from "fs";
 import * as os8 from "os";
-import * as path11 from "path";
+import * as path12 from "path";
 import { execSync, spawnSync as spawnSync2 } from "child_process";
 function globalMcpConfigPath() {
   const copilotHome = process.env["COPILOT_HOME"];
-  const root = copilotHome !== void 0 && copilotHome.trim() !== "" ? path11.resolve(copilotHome) : path11.join(os8.homedir(), ".copilot");
-  return path11.join(root, "mcp-config.json");
+  const root = copilotHome !== void 0 && copilotHome.trim() !== "" ? path12.resolve(copilotHome) : path12.join(os8.homedir(), ".copilot");
+  return path12.join(root, "mcp-config.json");
 }
 function checkGlobalMcpConfig(configPath2 = globalMcpConfigPath()) {
   if (!fs12.existsSync(configPath2)) {
@@ -5957,7 +6068,7 @@ function checkWorkerRunning(dataDir2) {
 }
 var DB_SIZE_WARN_BYTES = 1024 * 1024 * 1024;
 function checkDbExists(dataDir2) {
-  const dbPath = path11.join(dataDir2, "global.db");
+  const dbPath = path12.join(dataDir2, "global.db");
   if (!fs12.existsSync(dbPath)) {
     return {
       name: "Database",
@@ -6295,6 +6406,40 @@ function checkStrayClaudeMdBlocks(searchRoot) {
     message: `${strays.length} stray cop${strays.length === 1 ? "y" : "ies"} outside CLAUDE.md (never refreshed by install, never removed by uninstall, will go stale): ${strays.join(", ")}`
   };
 }
+var LOCKED_BOOLEAN_SAFE_VALUE = {
+  "gdrive.enabled": false,
+  "injection.enabled": true,
+  "redaction.strict": true,
+  "mcp.confine_reads_to_project_root": true,
+  "screenshot.block_private_targets": true,
+  "network.offline": true,
+  "indexing.cross_project_symbols": false,
+  "webfetch.compress_bodies": true
+};
+function lockedEnvOverridableKeys() {
+  const out2 = [];
+  for (const key of Object.keys(CONFIG_KEY_ENV_OVERRIDES)) {
+    const section = key.split(".")[0] ?? "";
+    const locked = PROJECT_LOCKED_SECTIONS.includes(section) || PROJECT_LOCKED_KEYS.includes(key);
+    if (locked && (CONFIG_KEY_ENV_OVERRIDES[key] ?? []).length > 0) out2.push(key);
+  }
+  return out2.sort();
+}
+function envOverriddenSecuritySettings() {
+  const out2 = [];
+  for (const setting of lockedEnvOverridableKeys()) {
+    const safe = LOCKED_BOOLEAN_SAFE_VALUE[setting];
+    for (const envVar of CONFIG_KEY_ENV_OVERRIDES[setting] ?? []) {
+      if (safe === void 0) {
+        const raw = process.env[envVar];
+        if (raw !== void 0 && raw.trim() !== "") out2.push({ setting, envVar, kind: "replaced" });
+      } else if (envBool(envVar, safe) !== safe) {
+        out2.push({ setting, envVar, kind: "weakened" });
+      }
+    }
+  }
+  return out2;
+}
 function checkSecurityPosture(cfg, dataDirPath) {
   const results = [];
   results.push({
@@ -6317,6 +6462,19 @@ function checkSecurityPosture(cfg, dataDirPath) {
     status: "ok",
     message: allow > 0 ? `${allow} allowed host pattern${allow === 1 ? "" : "s"}, ${deny} denied: nothing outside the allow list is fetched` : `no allow list, ${deny} denied pattern${deny === 1 ? "" : "s"}: any host not denied can be fetched`
   });
+  const custom = compileCustomPatterns(cfg.redaction.custom_patterns);
+  const strictNote = cfg.redaction.strict ? "strict mode on" : "strict mode off (redaction.strict)";
+  const patternNote = custom.patterns.length === 0 ? "built-in patterns only" : `${custom.patterns.length} custom pattern${custom.patterns.length === 1 ? "" : "s"} plus the built-in ones`;
+  results.push(
+    custom.problems.length > 0 ? {
+      name: "Security redaction",
+      // A pattern the operator believes is redacting, but which never compiled, is the one
+      // failure here that is invisible from the output itself -- so it warns rather than
+      // being reported as a healthy count that happens to be short.
+      status: "warn",
+      message: `${custom.problems.length} custom redaction pattern${custom.problems.length === 1 ? "" : "s"} could not be used and ${custom.problems.length === 1 ? "is" : "are"} not redacting anything: ` + custom.problems.map((p) => `${p.pattern} (${p.reason})`).join("; ")
+    } : { name: "Security redaction", status: "ok", message: `${patternNote}, ${strictNote}` }
+  );
   const extraRoots = cfg.mcp.allowed_roots.length;
   results.push(
     cfg.mcp.confine_reads_to_project_root ? {
@@ -6325,6 +6483,27 @@ function checkSecurityPosture(cfg, dataDirPath) {
       message: extraRoots === 0 ? "reads are confined to the project root" : `reads are confined to the project root plus ${extraRoots} configured root${extraRoots === 1 ? "" : "s"}`
     } : { name: "Security mcp roots", status: "warn", message: "confinement is off (mcp.confine_reads_to_project_root): a read can leave the project" }
   );
+  const overridden = envOverriddenSecuritySettings();
+  const weakened = overridden.filter((o) => o.kind === "weakened");
+  const replaced = overridden.filter((o) => o.kind === "replaced");
+  const describe = (o) => `${o.setting} (${o.envVar})`;
+  const parts = [];
+  if (weakened.length > 0) parts.push(`held open: ${weakened.map(describe).join(", ")}`);
+  if (replaced.length > 0) parts.push(`set from the environment: ${replaced.map(describe).join(", ")}`);
+  results.push(
+    overridden.length === 0 ? {
+      name: "Security config overrides",
+      status: "ok",
+      // Naming the count keeps this from reading as a guarantee about settings it never looked
+      // at, which is what the first version of this line did while nine locked keys went
+      // unchecked behind it.
+      message: `no environment variable is overriding any of the ${lockedEnvOverridableKeys().length} project-locked settings`
+    } : {
+      name: "Security config overrides",
+      status: "warn",
+      message: `the environment, not the config file, is deciding ${overridden.length === 1 ? "a" : "these"} project-locked setting${overridden.length === 1 ? "" : "s"}. ${parts.join("; ")}. A project config cannot change these; an environment variable can, and one can be set by a file in a cloned repository.`
+    }
+  );
   results.push(dataDirPermissionResult(dataDirPath));
   return results;
 }
@@ -6428,15 +6607,15 @@ function runDoctor(dataDir2, configPath2, rootDir, processes) {
   results.push(checkStrayClaudeMdBlocks());
   results.push(checkWorkerRunning(actualDataDir) ? { name: "Worker", status: "ok", message: "running" } : { name: "Worker", status: "warn", message: "not running" });
   results.push(checkDbExists(actualDataDir));
-  results.push(checkSymbolBodySize(path11.join(actualDataDir, "global.db")));
-  results.push(checkSymbolCount(path11.join(actualDataDir, "global.db"), rootDir));
+  results.push(checkSymbolBodySize(path12.join(actualDataDir, "global.db")));
+  results.push(checkSymbolCount(path12.join(actualDataDir, "global.db"), rootDir));
   results.push(checkDirtyQueueHealth(actualDataDir));
-  results.push(checkCompactionChannel(path11.join(actualDataDir, "global.db")));
-  results.push(checkUnmappedTools(path11.join(actualDataDir, "global.db")));
+  results.push(checkCompactionChannel(path12.join(actualDataDir, "global.db")));
+  results.push(checkUnmappedTools(path12.join(actualDataDir, "global.db")));
   const actualConfigPath = configPath2 || configPath();
   results.push(checkConfigValid(actualConfigPath));
   results.push(checkEmbeddings(loadConfig(rootDir)));
-  results.push(checkEmbeddingCoverage(path11.join(actualDataDir, "global.db"), rootDir));
+  results.push(checkEmbeddingCoverage(path12.join(actualDataDir, "global.db"), rootDir));
   for (const result of checkSecurityPosture(loadConfig(rootDir), actualDataDir)) results.push(result);
   results.push(checkDiskSpace(actualDataDir));
   const copilotResult = checkCopilotCli(copilotCliConfigPath(), copilotCliScriptPath());
@@ -6477,7 +6656,7 @@ async function runDoctorAndExit(opts) {
     console.log();
     try {
       const dir = skillOutputsDir();
-      const pregenPath = path11.join(dir, "pregen.json");
+      const pregenPath = path12.join(dir, "pregen.json");
       if (fs12.existsSync(pregenPath)) {
         const content = JSON.parse(fs12.readFileSync(pregenPath, "utf-8"));
         const pregenNames = new Set(content.names || []);
@@ -6487,7 +6666,7 @@ async function runDoctorAndExit(opts) {
           for (const entry of entries) {
             if (!entry.isFile() || !entry.name.endsWith(".meta")) continue;
             try {
-              const meta = JSON.parse(fs12.readFileSync(path11.join(dir, entry.name), "utf-8"));
+              const meta = JSON.parse(fs12.readFileSync(path12.join(dir, entry.name), "utf-8"));
               if (meta.skillName && !pregenNames.has(meta.skillName)) {
                 skillsSeen.add(meta.skillName);
               }
@@ -6509,12 +6688,96 @@ async function runDoctorAndExit(opts) {
   return results.some((r) => r.status === "fail") ? 1 : 0;
 }
 
+// src/capabilities.ts
+function collectCapabilities(config = loadConfig()) {
+  const online = !config.network.offline;
+  return [
+    {
+      id: "network.http_fetch",
+      kind: "egress",
+      what: "Fetches a URL when a command asks for one, including page text and remote images.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/webfetch.ts::performHttpFetch"
+    },
+    {
+      id: "network.google_drive",
+      kind: "egress",
+      what: "Exports a Google Doc so a section of it can be read.",
+      // Two independent gates, so this reports the conjunction: turning either one off is enough.
+      enabled: online && config.gdrive.enabled,
+      controlledBy: "gdrive.enabled, network.offline",
+      enforcedAt: "src/gdrive.ts::fetchDoc (network gate in src/webfetch.ts::performHttpFetch)"
+    },
+    {
+      id: "network.embedding_model_download",
+      kind: "egress",
+      what: "Downloads the local embedding model once, so semantic search can run without a server.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/embed_model.ts"
+    },
+    {
+      id: "network.ocr_data_download",
+      kind: "egress",
+      what: "Downloads OCR language data once, so text can be read out of an image.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/image_ocr.ts"
+    },
+    {
+      id: "network.screenshot",
+      kind: "egress",
+      what: "Loads a page in a browser to capture it.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/screenshot.ts"
+    },
+    {
+      id: "at_rest.symbol_index",
+      kind: "at-rest",
+      what: "Stores the text of indexed source files in a local database, so a symbol can be returned without re-reading the file.",
+      // Always on: it is the product. Reported anyway, because a reviewer deciding about data at
+      // rest needs the always-on items more than the optional ones.
+      enabled: true,
+      controlledBy: "always on (this is what the tool does)",
+      enforcedAt: "src/db.ts"
+    },
+    {
+      id: "at_rest.command_output_cache",
+      kind: "at-rest",
+      what: "Keeps recent command and web output on disk so it can be recalled instead of re-run. Expires after 24 hours.",
+      enabled: true,
+      controlledBy: "always on, 24-hour expiry",
+      enforcedAt: "src/disk_cache.ts"
+    }
+  ];
+}
+function renderCapabilities(caps) {
+  const lines = [];
+  for (const kind of ["egress", "at-rest"]) {
+    const group = caps.filter((c) => c.kind === kind);
+    if (group.length === 0) continue;
+    lines.push(kind === "egress" ? "Can send data off this machine:" : "Leaves data on this machine:");
+    for (const c of group) {
+      lines.push(`  [${c.enabled ? "ON " : "OFF"}] ${c.id}`);
+      lines.push(`         ${c.what}`);
+      lines.push(`         controlled by: ${c.controlledBy}`);
+      lines.push(`         enforced at:   ${c.enforcedAt}`);
+    }
+    lines.push("");
+  }
+  lines.push("Verify rather than trust: `token-goat capabilities --json` reports the state of the");
+  lines.push('binary you have installed, and each "enforced at" names the code that decides it.');
+  return lines.join("\n");
+}
+
 // src/webfetch.ts
 import { existsSync as existsSync7, readdirSync as readdirSync5, statSync as statSync4, unlinkSync as unlinkSync2 } from "fs";
 import * as http from "http";
 import * as https from "https";
 import { isIPv4, isIPv6 } from "net";
-import { resolve as resolve4, join as join10 } from "path";
+import { resolve as resolve5, join as join10 } from "path";
 import { URL as URL2 } from "url";
 import { promisify } from "util";
 import { lookup as dnsLookup } from "dns";
@@ -6703,7 +6966,7 @@ function cleanupStaleDownloads() {
     const files = readdirSync5(cacheDir);
     for (const file of files) {
       if (file.endsWith(".tmp")) {
-        const filePath = resolve4(cacheDir, file);
+        const filePath = resolve5(cacheDir, file);
         try {
           const stat = statSync4(filePath);
           if (Date.now() - stat.mtimeMs < STALE_DOWNLOAD_AGE_MS) continue;
@@ -6969,7 +7232,7 @@ async function getSectionContent(fileId, heading, opts = {}) {
 
 // src/pack.ts
 import * as fs13 from "node:fs";
-import * as path13 from "node:path";
+import * as path14 from "node:path";
 
 // node_modules/minimatch/dist/esm/index.js
 var esm_exports = {};
@@ -8093,11 +8356,11 @@ var qmarksTestNoExtDot = ([$0]) => {
   return (f) => f.length === len && f !== "." && f !== "..";
 };
 var defaultPlatform = typeof process === "object" && process ? typeof process.env === "object" && process.env && process.env.__MINIMATCH_TESTING_PLATFORM__ || process.platform : "posix";
-var path12 = {
+var path13 = {
   win32: { sep: "\\" },
   posix: { sep: "/" }
 };
-var sep2 = defaultPlatform === "win32" ? path12.win32.sep : path12.posix.sep;
+var sep2 = defaultPlatform === "win32" ? path13.win32.sep : path13.posix.sep;
 minimatch.sep = sep2;
 var GLOBSTAR = /* @__PURE__ */ Symbol("globstar **");
 minimatch.GLOBSTAR = GLOBSTAR;
@@ -8882,7 +9145,7 @@ var LANG_MAP = {
   ".exs": "elixir"
 };
 function getLang(filePath) {
-  const ext2 = path13.extname(filePath).toLowerCase();
+  const ext2 = path14.extname(filePath).toLowerCase();
   return LANG_MAP[ext2] ?? "";
 }
 function matches(rel, patterns) {
@@ -8892,8 +9155,8 @@ function matches(rel, patterns) {
   return patterns.some((pat) => mm.minimatch(norm, pat) || mm.minimatch(base, pat));
 }
 function isPathWithinRoot(rootReal, resolvedPath) {
-  const rel = path13.relative(rootReal, resolvedPath);
-  return rel !== "" && rel !== ".." && !rel.startsWith(".." + path13.sep) && !path13.isAbsolute(rel);
+  const rel = path14.relative(rootReal, resolvedPath);
+  return rel !== "" && rel !== ".." && !rel.startsWith(".." + path14.sep) && !path14.isAbsolute(rel);
 }
 function openWithinRoot(rootReal, p) {
   let fd;
@@ -8933,11 +9196,11 @@ function openWithinRoot(rootReal, p) {
 }
 function* resolveOpenCandidates(projectRoot, patterns, rootReal, ignorePatterns, seen, skipped) {
   for (const pattern of patterns) {
-    const p = path13.isAbsolute(pattern) ? pattern : path13.join(projectRoot, pattern);
+    const p = path14.isAbsolute(pattern) ? pattern : path14.join(projectRoot, pattern);
     if (seen.has(p)) continue;
     let rel;
     try {
-      rel = path13.relative(projectRoot, p).replace(/\\/g, "/");
+      rel = path14.relative(projectRoot, p).replace(/\\/g, "/");
     } catch {
       skipped.push(`${p} (outside project root)`);
       continue;
@@ -9011,7 +9274,7 @@ function stripBlockComments(content, pattern, lineStates) {
   );
 }
 function stripComments(content, filePath) {
-  const ext2 = path13.extname(filePath).toLowerCase();
+  const ext2 = path14.extname(filePath).toLowerCase();
   const lineStates = computeLineStartQuoteStates(content);
   if (ext2 === ".py") {
     return stripLineComments(content, PY_LINE_COMMENT_RE, lineStates);
@@ -9049,7 +9312,7 @@ var SAFE_EXTS = /* @__PURE__ */ new Set([".png", ".jpg", ".jpeg", ".gif", ".webp
 function scanSecrets(files) {
   const hits = [];
   for (const pf of files) {
-    if (SAFE_EXTS.has(path13.extname(pf.path).toLowerCase())) {
+    if (SAFE_EXTS.has(path14.extname(pf.path).toLowerCase())) {
       continue;
     }
     for (const [lineno, line] of pf.content.split("\n").entries()) {
@@ -9072,7 +9335,7 @@ function scanSecrets(files) {
 function collectFiles(projectRoot, patterns, opts = {}) {
   const result = { files: [], skipped: [], total_lines: 0, total_tokens: 0 };
   const seen = /* @__PURE__ */ new Set();
-  const rootResolved = path13.resolve(projectRoot);
+  const rootResolved = path14.resolve(projectRoot);
   let rootReal;
   try {
     rootReal = fs13.realpathSync(rootResolved);
@@ -9247,7 +9510,7 @@ function formatPack(result, style, opts = {}) {
 function estimateBudget(projectRoot, patterns, opts = {}) {
   const result = { entries: [], skipped: [], total_lines: 0, total_tokens: 0 };
   const seen = /* @__PURE__ */ new Set();
-  const rootResolved = path13.resolve(projectRoot);
+  const rootResolved = path14.resolve(projectRoot);
   let rootReal;
   try {
     rootReal = fs13.realpathSync(rootResolved);
@@ -9744,7 +10007,7 @@ function formatFailureDeltaJson(delta, runner) {
 
 // src/failures_state.ts
 import * as fs14 from "node:fs";
-import * as path14 from "node:path";
+import * as path15 from "node:path";
 var KEY_RE = /^[A-Za-z0-9_-]{1,80}$/;
 var DEFAULT_FAILURES_STATE_KEY = "default";
 function validateKey(key) {
@@ -9756,7 +10019,7 @@ function validateKey(key) {
 }
 function failuresStatePath(projectHash, key) {
   validateKey(key);
-  return path14.join(dataDir(), "projects", `${projectHash}_failures_${key}.json`);
+  return path15.join(dataDir(), "projects", `${projectHash}_failures_${key}.json`);
 }
 function loadFailureSnapshot(projectHash, key) {
   const p = failuresStatePath(projectHash, key);
@@ -9777,7 +10040,7 @@ function loadFailureSnapshot(projectHash, key) {
 }
 function saveFailureSnapshot(projectHash, key, snapshot) {
   const p = failuresStatePath(projectHash, key);
-  const dir = path14.dirname(p);
+  const dir = path15.dirname(p);
   ensureDirSync(dir);
   const content = JSON.stringify(snapshot);
   const doSave = () => {
@@ -9789,18 +10052,18 @@ function saveFailureSnapshot(projectHash, key, snapshot) {
 
 // src/text_commands.ts
 import * as fs16 from "fs";
-import * as path16 from "path";
+import * as path17 from "path";
 
 // src/project_memory.ts
 import * as fs15 from "node:fs";
-import * as path15 from "node:path";
+import * as path16 from "node:path";
 var MAX_ENTRIES = 30;
 var KEY_RE2 = /^[A-Za-z0-9_-]{1,80}$/;
 function ordinal(a, b) {
   return a < b ? -1 : a > b ? 1 : 0;
 }
 function memoryPath(projectHash) {
-  return path15.join(dataDir(), "projects", `${projectHash}_memory.toml`);
+  return path16.join(dataDir(), "projects", `${projectHash}_memory.toml`);
 }
 function validateKey2(key) {
   if (!KEY_RE2.test(key)) {
@@ -9859,7 +10122,7 @@ function save(filePath, entries) {
     lines.push(`${k} = "${escaped}"`);
   }
   const content = lines.length > 0 ? lines.join("\n") + "\n" : "";
-  const dir = path15.dirname(filePath);
+  const dir = path16.dirname(filePath);
   ensureDirSync(dir);
   atomicWriteText(filePath, content);
 }
@@ -9869,7 +10132,7 @@ function loadEntries(projectHash) {
 function setEntry(projectHash, key, value) {
   validateKey2(key);
   const p = memoryPath(projectHash);
-  const dir = path15.dirname(p);
+  const dir = path16.dirname(p);
   ensureDirSync(dir);
   const doSet = () => {
     const entries = loadRaw(p);
@@ -9967,7 +10230,7 @@ function collectTodoFiles(patterns) {
   if (patterns.length > 0) {
     const results = [];
     for (const p of patterns) {
-      const abs = path16.resolve(p);
+      const abs = path17.resolve(p);
       try {
         const stat = fs16.statSync(abs);
         if (stat.isDirectory()) {
@@ -10238,7 +10501,7 @@ function isProjectFrame(framePath, cwd) {
   if (framePath.includes("/rustc/")) return false;
   if (framePath.includes(".cargo/registry") || framePath.includes(".cargo\\registry")) return false;
   if (/^<.+>$/.test(framePath)) return false;
-  if (!path16.isAbsolute(framePath) && !framePath.startsWith("..")) return true;
+  if (!path17.isAbsolute(framePath) && !framePath.startsWith("..")) return true;
   return false;
 }
 function resolveFrameSymbol(frame, projectRoot) {
@@ -10451,17 +10714,17 @@ function findLockfile(startPath) {
   if (stat !== void 0 && stat.isFile()) {
     return { file: startPath, others: [] };
   }
-  const dir = stat !== void 0 && stat.isDirectory() ? startPath : path16.dirname(startPath);
+  const dir = stat !== void 0 && stat.isDirectory() ? startPath : path17.dirname(startPath);
   const found = [];
   for (const name of LOCK_PRIORITY) {
-    const candidate = path16.join(dir, name);
+    const candidate = path17.join(dir, name);
     if (fs16.existsSync(candidate)) found.push(candidate);
   }
   try {
     const entries = fs16.readdirSync(dir);
     for (const e of entries) {
       if (/^requirements.*\.txt$/.test(e)) {
-        const p = path16.join(dir, e);
+        const p = path17.join(dir, e);
         if (!found.includes(p)) found.push(p);
       }
     }
@@ -10658,7 +10921,7 @@ function parsePnpmLock(content) {
   return deps;
 }
 function parseLockFile(filePath) {
-  const base = path16.basename(filePath);
+  const base = path17.basename(filePath);
   const content = fs16.readFileSync(filePath, "utf8");
   if (base === "package-lock.json") return { format: "npm", deps: parsePackageLockJson(content) };
   if (base === "yarn.lock") return { format: "yarn", deps: parseYarnLock(content) };
@@ -10774,7 +11037,7 @@ Depended on by direct/top-level deps (${dependedOnBy.length}):
 `);
 }
 function cmdLockdeps(filePath, opts) {
-  const target = filePath !== void 0 ? path16.resolve(filePath) : process.cwd();
+  const target = filePath !== void 0 ? path17.resolve(filePath) : process.cwd();
   const found = findLockfile(target);
   if (found === null) {
     throw new Error("No lockfile found. Expected one of: " + LOCK_PRIORITY.join(", ") + ", requirements*.txt");
@@ -10862,7 +11125,7 @@ function cmdNote(action, key, value, opts) {
   throw new Error(`Unknown note action: ${action}. Use: set, get, unset, list, clear`);
 }
 function loadAllSessionReadCounts() {
-  const sessionsDir = path16.join(tokenGoatHome(), "sessions");
+  const sessionsDir = path17.join(tokenGoatHome(), "sessions");
   const totals = /* @__PURE__ */ new Map();
   let entries;
   try {
@@ -10872,7 +11135,7 @@ function loadAllSessionReadCounts() {
   }
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-    const filePath = path16.join(sessionsDir, entry.name);
+    const filePath = path17.join(sessionsDir, entry.name);
     let raw;
     try {
       raw = JSON.parse(fs16.readFileSync(filePath, "utf8"));
@@ -11008,7 +11271,7 @@ function cmdIgnores(opts) {
 }
 function countPackIgnorePatterns(root) {
   try {
-    return fs16.readFileSync(path16.join(root, ".tokengoatignore"), "utf8").split("\n").map((ln) => ln.trim()).filter((ln) => ln.length > 0 && !ln.startsWith("#")).length;
+    return fs16.readFileSync(path17.join(root, ".tokengoatignore"), "utf8").split("\n").map((ln) => ln.trim()).filter((ln) => ln.length > 0 && !ln.startsWith("#")).length;
   } catch {
     return 0;
   }
@@ -11017,7 +11280,7 @@ function countPackIgnorePatterns(root) {
 // src/dep_docs.ts
 import { createRequire } from "node:module";
 import * as fs17 from "node:fs";
-import * as path17 from "node:path";
+import * as path18 from "node:path";
 var _require = createRequire(import.meta.url);
 var _ts = null;
 var _tsLoadAttempted = false;
@@ -11068,7 +11331,7 @@ function listInstalledPackageNames(nodeModulesDir) {
     if (entry.name.startsWith("@")) {
       let scoped;
       try {
-        scoped = fs17.readdirSync(path17.join(nodeModulesDir, entry.name), { withFileTypes: true });
+        scoped = fs17.readdirSync(path18.join(nodeModulesDir, entry.name), { withFileTypes: true });
       } catch {
         continue;
       }
@@ -11085,7 +11348,7 @@ var README_NAME_RE = /^readme(\.(md|markdown|txt))?$/i;
 function findReadmeFile(pkgDir) {
   const direct = findReadmeIn(pkgDir);
   if (direct !== null) return direct;
-  return findReadmeIn(path17.join(pkgDir, "docs"));
+  return findReadmeIn(path18.join(pkgDir, "docs"));
 }
 function findReadmeIn(dir) {
   let entries;
@@ -11102,7 +11365,7 @@ function findReadmeIn(dir) {
     return 1;
   };
   matches2.sort((a, b) => rank(a.name) - rank(b.name));
-  return path17.join(dir, matches2[0].name);
+  return path18.join(dir, matches2[0].name);
 }
 function typesPackageDirName(pkgName) {
   if (pkgName.startsWith("@")) {
@@ -11129,30 +11392,30 @@ function resolveTypesLocation(pkgDir, pkgJson, nodeModulesDir, pkgName) {
   if (declared !== void 0) {
     const candidates = [declared, declared.endsWith(".d.ts") ? declared : `${declared}.d.ts`, declared.replace(/\.[cm]?[jt]s$/, ".d.ts")];
     for (const c of candidates) {
-      const p = path17.join(pkgDir, c);
+      const p = path18.join(pkgDir, c);
       if (fileExists(p)) return { path: p, source: "bundled" };
     }
   }
   const main = typeof pkgJson["main"] === "string" ? pkgJson["main"] : "index.js";
-  const mainDts = path17.join(pkgDir, main.replace(/\.[cm]?js$/, ".d.ts"));
+  const mainDts = path18.join(pkgDir, main.replace(/\.[cm]?js$/, ".d.ts"));
   if (fileExists(mainDts)) return { path: mainDts, source: "bundled" };
-  const indexDts = path17.join(pkgDir, "index.d.ts");
+  const indexDts = path18.join(pkgDir, "index.d.ts");
   if (fileExists(indexDts)) return { path: indexDts, source: "bundled" };
   const typesDirName = typesPackageDirName(pkgName);
-  const typesPkgDir = path17.join(nodeModulesDir, "@types", typesDirName);
-  const typesPkgJsonRaw = readFileTextOrNull(path17.join(typesPkgDir, "package.json"));
+  const typesPkgDir = path18.join(nodeModulesDir, "@types", typesDirName);
+  const typesPkgJsonRaw = readFileTextOrNull(path18.join(typesPkgDir, "package.json"));
   if (typesPkgJsonRaw !== null) {
     try {
       const typesPkgJson = JSON.parse(typesPkgJsonRaw);
       const entry = (typeof typesPkgJson["types"] === "string" ? typesPkgJson["types"] : void 0) ?? (typeof typesPkgJson["main"] === "string" ? typesPkgJson["main"] : void 0) ?? "index.d.ts";
       const entryCandidates = [entry, entry.endsWith(".d.ts") ? entry : `${entry}.d.ts`, entry.replace(/\.[cm]?[jt]s$/, ".d.ts")];
       for (const c of entryCandidates) {
-        const entryPath = path17.join(typesPkgDir, c);
+        const entryPath = path18.join(typesPkgDir, c);
         if (fileExists(entryPath)) return { path: entryPath, source: "@types" };
       }
     } catch {
     }
-    const fallback = path17.join(typesPkgDir, "index.d.ts");
+    const fallback = path18.join(typesPkgDir, "index.d.ts");
     if (fileExists(fallback)) return { path: fallback, source: "@types" };
   }
   return null;
@@ -11219,9 +11482,9 @@ function recordDepDocsStat(fullSourceBytes, emittedText, packageName) {
 }
 function runDepDocs(opts) {
   const root = resolveProjectRoot({ project: opts.projectRoot ?? process.cwd() });
-  const nodeModulesDir = path17.join(root, "node_modules");
-  const pkgDir = path17.join(nodeModulesDir, opts.packageName);
-  const pkgJsonPath = path17.join(pkgDir, "package.json");
+  const nodeModulesDir = path18.join(root, "node_modules");
+  const pkgDir = path18.join(nodeModulesDir, opts.packageName);
+  const pkgJsonPath = path18.join(pkgDir, "package.json");
   if (!dirExists(pkgDir) || !fileExists(pkgJsonPath)) {
     const known = listInstalledPackageNames(nodeModulesDir);
     const suggestions = suggestPackageNames(opts.packageName, known);
@@ -11384,13 +11647,13 @@ async function buildResumePacket(sessionId) {
 }
 
 // src/cache_session_commands.ts
-function emitErr(text) {
+function emitErr2(text) {
   process.stderr.write(ensureNewline(text));
 }
 function capAndNote(rows, limit) {
   const shown = rows.slice(0, limit);
   if (shown.length < rows.length) {
-    emitErr(`Showing ${shown.length} of ${rows.length} entries (raise --limit to see the rest).`);
+    emitErr2(`Showing ${shown.length} of ${rows.length} entries (raise --limit to see the rest).`);
   }
   return shown;
 }
@@ -11400,11 +11663,11 @@ function parseLimitOpt(cmdName, limitStr, dflt = 30) {
   try {
     n = requireNonNegativeStrictInt("--limit", limitStr);
   } catch (e) {
-    emitErr(`${cmdName}: --limit must be a positive number, got: "${limitStr}"`);
+    emitErr2(`${cmdName}: --limit must be a positive number, got: "${limitStr}"`);
     throw new Error(`invalid --limit: ${limitStr}`, { cause: e });
   }
   if (n === 0) {
-    emitErr(`${cmdName}: --limit must be a positive number, got: "${limitStr}"`);
+    emitErr2(`${cmdName}: --limit must be a positive number, got: "${limitStr}"`);
     throw new Error(`invalid --limit: ${limitStr}`);
   }
   return n;
@@ -11738,7 +12001,7 @@ function cmdBaseline(opts) {
 
 // src/index_reclaim.ts
 import * as fs18 from "node:fs";
-import * as path18 from "node:path";
+import * as path19 from "node:path";
 var DERIVED_TABLES = ["chunk_vectors", "chunks", "refs", "symbols", "files"];
 function indexSizeBytes(dbPath) {
   let total = 0;
@@ -11822,7 +12085,7 @@ function mb(bytes) {
 }
 function cmdReclaimIndex(opts) {
   const dbPath = opts.dbPath ?? globalDbPath();
-  if (opts.force !== true && isWorkerRunning(path18.dirname(dbPath))) {
+  if (opts.force !== true && isWorkerRunning(path19.dirname(dbPath))) {
     throw new Error(
       "reclaim-index: the worker daemon is running and writing to this index. Stop it first with 'token-goat worker stop', then re-run. Pass --force to proceed anyway (results may be inaccurate if the worker is really live)."
     );
@@ -11856,7 +12119,7 @@ function cmdReclaimIndex(opts) {
   }
   if (result.checkpointBusy) {
     process.stdout.write(
-      `  note: a concurrent reader blocked WAL truncation, so some space is still held in ${path18.basename(dbPath)}-wal and the figures above count the main file only. The next checkpoint releases it
+      `  note: a concurrent reader blocked WAL truncation, so some space is still held in ${path19.basename(dbPath)}-wal and the figures above count the main file only. The next checkpoint releases it
 `
     );
   }
@@ -11865,16 +12128,16 @@ function cmdReclaimIndex(opts) {
 // src/config_commands.ts
 import * as fs19 from "node:fs";
 import * as os9 from "node:os";
-import * as path19 from "node:path";
-function emit(text) {
+import * as path20 from "node:path";
+function emit2(text) {
   const payload = colorStdout() ? text : stripAnsi(text);
   process.stdout.write(ensureNewline(payload));
 }
-function emitErr2(text) {
+function emitErr3(text) {
   process.stderr.write(ensureNewline(text));
 }
 function saveConfigSafe(cfg) {
-  ensureDirSync(path19.dirname(configPath()));
+  ensureDirSync(path20.dirname(configPath()));
   saveConfig(cfg);
 }
 function levenshtein(a, b, cap = 3) {
@@ -12036,16 +12299,16 @@ function cmdConfig(opts) {
         if (state.layer !== "global" && state.layer !== "project-unparsed") sources[k] = layerJson(state);
       }
       if (Object.keys(sources).length > 0) payload["_sources"] = sources;
-      emit(JSON.stringify(payload, null, 2));
+      emit2(JSON.stringify(payload, null, 2));
       return;
     }
     for (const [k, v] of pairs) {
       const state = resolveConfigKeyLayer(k, v, cfg, projectInfo);
-      emit(`${k} = ${JSON.stringify(v)}${state.layer === "project-unparsed" ? "" : layerAnnotation(state)}`);
+      emit2(`${k} = ${JSON.stringify(v)}${state.layer === "project-unparsed" ? "" : layerAnnotation(state)}`);
     }
     if (projectInfo !== null) {
-      emit("");
-      emit(
+      emit2("");
+      emit2(
         projectInfo.parseError !== null ? `# project override ${projectInfo.path} failed to parse (${projectInfo.parseError}); ignored` : `# project override: ${projectInfo.path}`
       );
     }
@@ -12063,11 +12326,11 @@ function cmdConfig(opts) {
     }
     const getState = resolveConfigKeyLayer(opts.key, result.value, cfg, getProjectConfigInfo());
     if (opts.json === true) {
-      emit(JSON.stringify({ key: opts.key, value: result.value, ...layerJson(getState) }, null, 2));
+      emit2(JSON.stringify({ key: opts.key, value: result.value, ...layerJson(getState) }, null, 2));
       return;
     }
     const rendered = typeof result.value === "string" ? result.value : JSON.stringify(result.value);
-    emit(`${rendered}${layerAnnotation(getState)}`);
+    emit2(`${rendered}${layerAnnotation(getState)}`);
     return;
   }
   if (action === "set") {
@@ -12086,7 +12349,7 @@ function cmdConfig(opts) {
       if (parseErrAtLoad !== null) {
         try {
           fs19.copyFileSync(configPath(), `${configPath()}.bak`);
-          emitErr2(`config set: warning: config.toml failed to parse (${parseErrAtLoad}); backed up the original to config.toml.bak and rewriting it from defaults`);
+          emitErr3(`config set: warning: config.toml failed to parse (${parseErrAtLoad}); backed up the original to config.toml.bak and rewriting it from defaults`);
         } catch {
         }
       }
@@ -12121,8 +12384,8 @@ function cmdConfig(opts) {
       saveConfigSafe(cfg);
       return coercedValue;
     };
-    ensureDirSync(path19.dirname(configPath()));
-    const lockPath = path19.join(path19.dirname(configPath()), ".config.lock");
+    ensureDirSync(path20.dirname(configPath()));
+    const lockPath = path20.join(path20.dirname(configPath()), ".config.lock");
     const lockResult = withFileLock(lockPath, applySet, { waitMs: LOCK_WAIT_MS_HARDENED });
     const coerced = lockResult === void 0 ? applySet() : lockResult;
     invalidateConfigCache();
@@ -12131,19 +12394,19 @@ function cmdConfig(opts) {
     const setState = resolveConfigKeyLayer(key, setEffective.found ? setEffective.value : void 0, effectiveCfg, getProjectConfigInfo());
     const shadowed = setEffective.found && setEffective.value !== coerced;
     if (shadowed && setState.layer === "env") {
-      emitErr2(`config set: warning: ${key} was saved to config.toml, but ${setState.envVar} is currently set and overrides it at runtime \u2014 unset ${setState.envVar} for this change to take effect`);
+      emitErr3(`config set: warning: ${key} was saved to config.toml, but ${setState.envVar} is currently set and overrides it at runtime \u2014 unset ${setState.envVar} for this change to take effect`);
     } else if (shadowed && setState.layer === "env-invalid") {
-      emitErr2(`config set: warning: ${key} was saved to config.toml, but ${setState.envVar} is currently set to ${JSON.stringify(setState.rawValue)}${setState.reason !== null ? ` (${setState.reason})` : ""} and still overrides it at runtime, taking effect as ${JSON.stringify(setState.effectiveValue)} \u2014 unset ${setState.envVar} for this change to take effect`);
+      emitErr3(`config set: warning: ${key} was saved to config.toml, but ${setState.envVar} is currently set to ${JSON.stringify(setState.rawValue)}${setState.reason !== null ? ` (${setState.reason})` : ""} and still overrides it at runtime, taking effect as ${JSON.stringify(setState.effectiveValue)} \u2014 unset ${setState.envVar} for this change to take effect`);
     } else if (setState.layer === "project") {
-      emitErr2(`config set: warning: ${key} was saved to config.toml, but ${setState.path} also sets it and overrides it in this project \u2014 remove it there for this change to take effect here`);
+      emitErr3(`config set: warning: ${key} was saved to config.toml, but ${setState.path} also sets it and overrides it in this project \u2014 remove it there for this change to take effect here`);
     } else if (setState.layer === "project-invalid") {
-      emitErr2(`config set: warning: ${key} was saved to config.toml, but ${setState.path} sets it to ${JSON.stringify(setState.rawValue)}${setState.reason !== null ? ` (${setState.reason})` : ""} and still overrides it in this project, taking effect as ${JSON.stringify(setState.effectiveValue)} \u2014 remove it there for this change to take effect here`);
+      emitErr3(`config set: warning: ${key} was saved to config.toml, but ${setState.path} sets it to ${JSON.stringify(setState.rawValue)}${setState.reason !== null ? ` (${setState.reason})` : ""} and still overrides it in this project, taking effect as ${JSON.stringify(setState.effectiveValue)} \u2014 remove it there for this change to take effect here`);
     }
     if (opts.json === true) {
-      emit(JSON.stringify({ key, value: coerced }, null, 2));
+      emit2(JSON.stringify({ key, value: coerced }, null, 2));
       return;
     }
-    emit(`${key} = ${JSON.stringify(coerced)}`);
+    emit2(`${key} = ${JSON.stringify(coerced)}`);
     return;
   }
   if (action === "validate") {
@@ -12211,19 +12474,19 @@ function cmdConfig(opts) {
     }
     if (findings.length > 0) process.exitCode = 1;
     if (opts.json === true) {
-      emit(JSON.stringify({ findings, ok: findings.length === 0 }, null, 2));
+      emit2(JSON.stringify({ findings, ok: findings.length === 0 }, null, 2));
       return;
     }
     if (findings.length === 0) {
-      emit("config validate: no issues found");
+      emit2("config validate: no issues found");
       return;
     }
     for (const f of findings) {
       const isNearMiss = f.kind === "unknown_section" || f.kind === "unknown_key";
       const hint = f.suggestion === void 0 ? "" : isNearMiss ? ` (did you mean: ${f.suggestion}?)` : ` (${f.suggestion})`;
-      emit(`[${f.kind}] ${f.key}${hint}`);
+      emit2(`[${f.kind}] ${f.key}${hint}`);
     }
-    emit(`config validate: ${findings.length} issue(s) found`);
+    emit2(`config validate: ${findings.length} issue(s) found`);
     return;
   }
   throw new Error(`config: unknown action '${action}'. Use list, get, set, or validate.`);
@@ -12235,33 +12498,33 @@ function cmdProject(opts) {
     const active = findProject(process.cwd());
     const blocked = cfg.worker.blocked_roots;
     if (opts.json === true) {
-      emit(JSON.stringify({ active: active ? { root: active.root, hash: active.hash, marker: active.marker } : null, blocked_roots: blocked }, null, 2));
+      emit2(JSON.stringify({ active: active ? { root: active.root, hash: active.hash, marker: active.marker } : null, blocked_roots: blocked }, null, 2));
       return;
     }
     if (active) {
-      emit(`Active project: ${active.root}`);
-      emit(`  marker: ${active.marker}`);
+      emit2(`Active project: ${active.root}`);
+      emit2(`  marker: ${active.marker}`);
     } else {
-      emit("Active project: (none \u2014 not inside a recognized project root)");
+      emit2("Active project: (none \u2014 not inside a recognized project root)");
     }
     if (blocked.length === 0) {
-      emit("Blocked roots: (none)");
+      emit2("Blocked roots: (none)");
     } else {
-      emit("Blocked roots:");
-      for (const r of blocked) emit(`  ${r}`);
+      emit2("Blocked roots:");
+      for (const r of blocked) emit2(`  ${r}`);
     }
     return;
   }
   if (action === "exclude") {
     if (!opts.pathArg) {
-      emitErr2("project exclude requires a path argument");
+      emitErr3("project exclude requires a path argument");
       throw new Error("missing path");
     }
-    const target = path19.resolve(opts.pathArg);
+    const target = path20.resolve(opts.pathArg);
     const cfg = loadPersistedConfig();
     const targetFolded = foldPath(normalizePath(target));
     if (cfg.worker.blocked_roots.some((r) => foldPath(normalizePath(r)) === targetFolded)) {
-      emit(`Already excluded: ${target}`);
+      emit2(`Already excluded: ${target}`);
       return;
     }
     cfg.worker.blocked_roots = [...cfg.worker.blocked_roots, target];
@@ -12269,12 +12532,12 @@ function cmdProject(opts) {
     invalidateConfigCache();
     const purged = pruneBlockedRoot(target);
     if (opts.json === true) {
-      emit(JSON.stringify({ excluded: target, purgedFromIndex: purged.length, blocked_roots: cfg.worker.blocked_roots }, null, 2));
+      emit2(JSON.stringify({ excluded: target, purgedFromIndex: purged.length, blocked_roots: cfg.worker.blocked_roots }, null, 2));
       return;
     }
-    emit(`Excluded: ${target}`);
+    emit2(`Excluded: ${target}`);
     if (purged.length > 0) {
-      emit(`Removed ${purged.length} already-indexed file${purged.length === 1 ? "" : "s"} under it from the index.`);
+      emit2(`Removed ${purged.length} already-indexed file${purged.length === 1 ? "" : "s"} under it from the index.`);
     }
     return;
   }
@@ -12294,26 +12557,26 @@ function cmdProject(opts) {
     const orphanChunkPaths = findOrphanedChunkPaths();
     if (opts.dryRun === true) {
       if (opts.json === true) {
-        emit(JSON.stringify({ dryRun: true, wouldPrune: removed, stale, wouldPruneTempFiles: staleTempFiles.length, staleTempFiles, wouldPruneOrphanChunkFiles: orphanChunkPaths.length, orphanChunkPaths, blocked_roots: before }, null, 2));
+        emit2(JSON.stringify({ dryRun: true, wouldPrune: removed, stale, wouldPruneTempFiles: staleTempFiles.length, staleTempFiles, wouldPruneOrphanChunkFiles: orphanChunkPaths.length, orphanChunkPaths, blocked_roots: before }, null, 2));
         return;
       }
       if (removed === 0) {
-        emit("Would prune 0 stale root(s). Nothing to do.");
+        emit2("Would prune 0 stale root(s). Nothing to do.");
       } else {
-        emit(`Would prune ${removed} stale root(s):`);
-        for (const r of stale) emit(`  ${r}`);
+        emit2(`Would prune ${removed} stale root(s):`);
+        for (const r of stale) emit2(`  ${r}`);
       }
       if (staleTempFiles.length === 0) {
-        emit("Would prune 0 stale indexed temp-dir file(s). Nothing to do.");
+        emit2("Would prune 0 stale indexed temp-dir file(s). Nothing to do.");
       } else {
-        emit(`Would prune ${staleTempFiles.length} stale indexed temp-dir file(s):`);
-        for (const p of staleTempFiles) emit(`  ${p}`);
+        emit2(`Would prune ${staleTempFiles.length} stale indexed temp-dir file(s):`);
+        for (const p of staleTempFiles) emit2(`  ${p}`);
       }
       if (orphanChunkPaths.length === 0) {
-        emit("Would prune 0 orphaned embedding chunk file(s). Nothing to do.");
+        emit2("Would prune 0 orphaned embedding chunk file(s). Nothing to do.");
       } else {
-        emit(`Would prune orphaned embedding chunks for ${orphanChunkPaths.length} file(s):`);
-        for (const p of orphanChunkPaths) emit(`  ${p}`);
+        emit2(`Would prune orphaned embedding chunks for ${orphanChunkPaths.length} file(s):`);
+        for (const p of orphanChunkPaths) emit2(`  ${p}`);
       }
       return;
     }
@@ -12323,37 +12586,37 @@ function cmdProject(opts) {
     const prunedTempFiles = pruneSystemTempFiles();
     const prunedOrphanChunks = pruneOrphanedChunks();
     if (opts.json === true) {
-      emit(JSON.stringify({ pruned: removed, blocked_roots: after, prunedTempFiles: prunedTempFiles.length, prunedOrphanChunkFiles: prunedOrphanChunks.length }, null, 2));
+      emit2(JSON.stringify({ pruned: removed, blocked_roots: after, prunedTempFiles: prunedTempFiles.length, prunedOrphanChunkFiles: prunedOrphanChunks.length }, null, 2));
       return;
     }
-    emit(`Pruned ${removed} stale root(s). Remaining: ${after.length}`);
-    emit(`Pruned ${prunedTempFiles.length} stale indexed temp-dir file(s).`);
-    emit(`Pruned orphaned embedding chunks for ${prunedOrphanChunks.length} file(s).`);
+    emit2(`Pruned ${removed} stale root(s). Remaining: ${after.length}`);
+    emit2(`Pruned ${prunedTempFiles.length} stale indexed temp-dir file(s).`);
+    emit2(`Pruned orphaned embedding chunks for ${prunedOrphanChunks.length} file(s).`);
     return;
   }
-  emitErr2(`project: unknown action '${action}'. Use list, exclude, or prune.`);
+  emitErr3(`project: unknown action '${action}'. Use list, exclude, or prune.`);
   throw new Error(`unknown project action: ${action}`);
 }
 function recordCompactDocStat(fullSourceBytes, emittedText, detail) {
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(emittedText, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(emittedText, "utf8"));
   recordStat("compact_doc", bytesSaved, savedTokensFromBytes(bytesSaved), void 0, detail);
 }
 function cmdCompactDoc(opts) {
-  const resolved = path19.resolve(opts.filePath);
+  const resolved = path20.resolve(opts.filePath);
   if (opts.heading !== void 0) {
     const result = compactDoc(resolved, opts.heading);
     if (result === null) {
-      emitErr2(`compact-doc: could not read or compact '${resolved}'`);
+      emitErr3(`compact-doc: could not read or compact '${resolved}'`);
       throw new Error(`could not compact: ${resolved}`);
     }
     const legacyFullBytes = fs19.statSync(resolved).size;
     if (opts.json === true) {
       const jsonText = JSON.stringify({ path: resolved, compact: result }, null, 2);
-      emit(jsonText);
+      emit2(jsonText);
       recordCompactDocStat(legacyFullBytes, jsonText, resolved);
       return;
     }
-    emit(result);
+    emit2(result);
     recordCompactDocStat(legacyFullBytes, result, resolved);
     return;
   }
@@ -12362,7 +12625,7 @@ function cmdCompactDoc(opts) {
     try {
       sentences = requirePositiveStrictInt("--sentences", opts.sentences);
     } catch (e) {
-      emitErr2(`compact-doc: --sentences must be a positive number, got: "${opts.sentences}"`);
+      emitErr3(`compact-doc: --sentences must be a positive number, got: "${opts.sentences}"`);
       throw new Error(`invalid --sentences: ${opts.sentences}`, { cause: e });
     }
   }
@@ -12375,7 +12638,7 @@ function cmdCompactDoc(opts) {
     try {
       sourceText = fs19.readFileSync(resolved, "utf-8");
     } catch {
-      emitErr2(`compact-doc: could not read or compact '${resolved}'`);
+      emitErr3(`compact-doc: could not read or compact '${resolved}'`);
       throw new Error(`could not compact: ${resolved}`);
     }
     body = buildExtractiveCompact(sourceText, sentences);
@@ -12384,7 +12647,7 @@ function cmdCompactDoc(opts) {
   } else {
     const existing = readCompactBody(compactPath);
     if (existing === null) {
-      emitErr2(`compact-doc: could not read or compact '${resolved}'`);
+      emitErr3(`compact-doc: could not read or compact '${resolved}'`);
       throw new Error(`could not compact: ${resolved}`);
     }
     body = existing;
@@ -12392,16 +12655,16 @@ function cmdCompactDoc(opts) {
   const extractiveFullBytes = fs19.statSync(resolved).size;
   if (opts.json === true) {
     const jsonText = JSON.stringify({ path: resolved, compactPath, rebuilt, compact: body }, null, 2);
-    emit(jsonText);
+    emit2(jsonText);
     recordCompactDocStat(extractiveFullBytes, jsonText, resolved);
     return;
   }
   if (opts.show === true) {
-    emit(body);
+    emit2(body);
     recordCompactDocStat(extractiveFullBytes, body, resolved);
     return;
   }
-  emit(
+  emit2(
     `Compact sidecar ${rebuilt ? "built" : "already fresh"} at ${compactPath} (source: ${resolved}). Use --show to print it, --force to rebuild.`
   );
 }
@@ -12442,11 +12705,11 @@ async function cmdFetchImage(opts) {
   try {
     fetched = await fetchBuffer(opts.url);
   } catch (e) {
-    emitErr2(`fetch-image: network error \u2014 ${extractErrorMessage(e)}`);
+    emitErr3(`fetch-image: network error \u2014 ${extractErrorMessage(e)}`);
     throw new Error(`fetch failed: ${opts.url}`, { cause: e });
   }
   const buf = fetched.body;
-  const outPath = opts.out ?? path19.join(os9.tmpdir(), `tg-fetch-${Date.now()}${extensionForContentType(fetched.contentType)}`);
+  const outPath = opts.out ?? path20.join(os9.tmpdir(), `tg-fetch-${Date.now()}${extensionForContentType(fetched.contentType)}`);
   const originalBytes = buf.length;
   let shrunkBytes;
   let outData;
@@ -12469,11 +12732,11 @@ async function cmdFetchImage(opts) {
   }
   atomicWriteBytes(finalPath, outData);
   if (opts.json === true) {
-    emit(JSON.stringify({ url: opts.url, out: finalPath, originalBytes, shrunkBytes, wasShrunk }, null, 2));
+    emit2(JSON.stringify({ url: opts.url, out: finalPath, originalBytes, shrunkBytes, wasShrunk }, null, 2));
     return;
   }
   const savings = wasShrunk ? ` (saved ${originalBytes - shrunkBytes} bytes)` : " (not shrunk \u2014 already small or unsupported format)";
-  emit(`Fetched ${originalBytes} bytes \u2192 ${finalPath}${savings}`);
+  emit2(`Fetched ${originalBytes} bytes \u2192 ${finalPath}${savings}`);
 }
 function cmdHistory(opts) {
   let limit = 30;
@@ -12481,11 +12744,11 @@ function cmdHistory(opts) {
     try {
       limit = requireNonNegativeStrictInt("--limit", opts.limit);
     } catch (e) {
-      emitErr2(`history: --limit must be a non-negative number, got: "${opts.limit}"`);
+      emitErr3(`history: --limit must be a non-negative number, got: "${opts.limit}"`);
       throw new Error(`invalid --limit: ${opts.limit}`, { cause: e });
     }
     if (limit === 0) {
-      emitErr2(`history: --limit must be a positive number, got: "${opts.limit}"`);
+      emitErr3(`history: --limit must be a positive number, got: "${opts.limit}"`);
       throw new Error(`invalid --limit: ${opts.limit}`);
     }
   }
@@ -12520,21 +12783,21 @@ function cmdHistory(opts) {
     return;
   }
   if (items.length === 0) {
-    emit("No history entries found (no cached bash outputs or web fetches).");
+    emit2("No history entries found (no cached bash outputs or web fetches).");
     return;
   }
   const pad2 = (s, n) => s.length >= n ? s : s + " ".repeat(n - s.length);
-  emit(`${pad2("type", 5)}  ${pad2("id", 18)}  summary`);
+  emit2(`${pad2("type", 5)}  ${pad2("id", 18)}  summary`);
   for (const item of items) {
     const preview = item.summary.length > 80 ? item.summary.slice(0, 77) + "..." : item.summary;
-    emit(`${pad2(item.type, 5)}  ${pad2(item.id, 18)}  ${preview}`);
+    emit2(`${pad2(item.type, 5)}  ${pad2(item.id, 18)}  ${preview}`);
   }
 }
 
 // src/cli_bootstrap_audit.ts
 import * as fs20 from "node:fs";
 import * as os10 from "node:os";
-import * as path20 from "node:path";
+import * as path21 from "node:path";
 import * as readline from "node:readline";
 var FRONTMATTER_KEYS = /* @__PURE__ */ new Set(["description", "tools", "allowed-tools", "allowed_tools"]);
 function parseBudget(name, value) {
@@ -12593,17 +12856,17 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
     logicalRoot = await fs20.promises.realpath(root);
   } catch (error) {
     if (error.code === "ENOENT") return entries;
-    diagnostics.push({ path: path20.resolve(root), reason: "unreadable root" });
+    diagnostics.push({ path: path21.resolve(root), reason: "unreadable root" });
     return entries;
   }
   if (rootIsLink && !followLinks) {
-    diagnostics.push({ path: path20.resolve(root), reason: "external root link skipped (use --follow-links)" });
+    diagnostics.push({ path: path21.resolve(root), reason: "external root link skipped (use --follow-links)" });
     return entries;
   }
   const canonicalKey = (candidate) => process.platform === "win32" ? candidate.toLocaleLowerCase() : candidate;
   const isContained = (candidate, allowedRoot) => {
-    const relative3 = path20.relative(canonicalKey(allowedRoot), canonicalKey(candidate));
-    return relative3 === "" || relative3 !== ".." && !relative3.startsWith(`..${path20.sep}`) && !path20.isAbsolute(relative3);
+    const relative3 = path21.relative(canonicalKey(allowedRoot), canonicalKey(candidate));
+    return relative3 === "" || relative3 !== ".." && !relative3.startsWith(`..${path21.sep}`) && !path21.isAbsolute(relative3);
   };
   async function visit(candidate, allowedRoot, topLevel = false) {
     let real;
@@ -12612,13 +12875,13 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
       candidateIsLink = (await fs20.promises.lstat(candidate)).isSymbolicLink();
       real = await fs20.promises.realpath(candidate);
     } catch {
-      diagnostics.push({ path: path20.resolve(candidate), reason: "broken or unreadable link" });
+      diagnostics.push({ path: path21.resolve(candidate), reason: "broken or unreadable link" });
       return;
     }
     const withinAllowedRoot = allowedRoot === void 0 ? isContained(real, logicalRoot) : isContained(real, allowedRoot);
     const canFollowExternal = followLinks && topLevel;
     if (!withinAllowedRoot && !canFollowExternal) {
-      diagnostics.push({ path: path20.resolve(candidate), reason: candidateIsLink ? "external link skipped (use --follow-links)" : "canonical target outside scan root" });
+      diagnostics.push({ path: path21.resolve(candidate), reason: candidateIsLink ? "external link skipped (use --follow-links)" : "canonical target outside scan root" });
       return;
     }
     const trustedRoot = !withinAllowedRoot && canFollowExternal ? real : allowedRoot ?? real;
@@ -12626,7 +12889,7 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
     try {
       stat = await fs20.promises.stat(real);
     } catch {
-      diagnostics.push({ path: path20.resolve(candidate), reason: "unreadable" });
+      diagnostics.push({ path: path21.resolve(candidate), reason: "unreadable" });
       return;
     }
     const canonical = process.platform === "win32" ? real.toLocaleLowerCase() : real;
@@ -12637,14 +12900,14 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
       try {
         children = await fs20.promises.readdir(real, { withFileTypes: true });
       } catch {
-        diagnostics.push({ path: path20.resolve(candidate), reason: "unreadable directory" });
+        diagnostics.push({ path: path21.resolve(candidate), reason: "unreadable directory" });
         return;
       }
       children.sort((a, b) => a.name.localeCompare(b.name));
-      for (const child of children) await visit(path20.join(real, child.name), trustedRoot);
+      for (const child of children) await visit(path21.join(real, child.name), trustedRoot);
       return;
     }
-    if (!stat.isFile() || path20.extname(real).toLowerCase() !== ".md") return;
+    if (!stat.isFile() || path21.extname(real).toLowerCase() !== ".md") return;
     if (seenFiles.has(canonical)) return;
     seenFiles.add(canonical);
     try {
@@ -12654,35 +12917,35 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
       const toolsBytes = Buffer.byteLength(metadata.tools, "utf8");
       entries.push({
         kind,
-        path: path20.resolve(real),
+        path: path21.resolve(real),
         description_bytes: descriptionBytes,
         tools_bytes: toolsBytes,
         metadata_bytes: descriptionBytes + toolsBytes,
         estimated_tokens: Math.floor((descriptionBytes + toolsBytes) / 4)
       });
     } catch {
-      diagnostics.push({ path: path20.resolve(candidate), reason: "unreadable file" });
+      diagnostics.push({ path: path21.resolve(candidate), reason: "unreadable file" });
     }
   }
   try {
     const children = await fs20.promises.readdir(logicalRoot, { withFileTypes: true });
     children.sort((a, b) => a.name.localeCompare(b.name));
-    for (const child of children) await visit(path20.join(logicalRoot, child.name), void 0, true);
+    for (const child of children) await visit(path21.join(logicalRoot, child.name), void 0, true);
   } catch {
-    diagnostics.push({ path: path20.resolve(root), reason: "unreadable root" });
+    diagnostics.push({ path: path21.resolve(root), reason: "unreadable root" });
   }
   return entries;
 }
 async function buildBootstrapAudit(opts = {}) {
   const project = resolveProjectRoot(opts.project === void 0 ? {} : { project: opts.project });
-  const home = path20.resolve(opts.home ?? os10.homedir());
+  const home = path21.resolve(opts.home ?? os10.homedir());
   const context = buildStats(project, home, opts.project === void 0 ? [] : [opts.project]);
   const diagnostics = [];
   const top = opts.top === void 0 ? 10 : parseBudget("--top", opts.top) ?? 10;
   const visitedDirs = /* @__PURE__ */ new Set();
   const seenFiles = /* @__PURE__ */ new Set();
-  const agents = await scanMetadataRoot(path20.join(home, ".claude", "agents"), "agent", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
-  const skills = await scanMetadataRoot(path20.join(home, ".claude", "skills"), "skill", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
+  const agents = await scanMetadataRoot(path21.join(home, ".claude", "agents"), "agent", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
+  const skills = await scanMetadataRoot(path21.join(home, ".claude", "skills"), "skill", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
   const rankedEntries = [...agents, ...skills].sort((a, b) => b.metadata_bytes - a.metadata_bytes || a.path.localeCompare(b.path));
   const largestTotal = rankedEntries.length;
   const largest = rankedEntries.slice(0, top);
@@ -12749,7 +13012,7 @@ async function runBootstrapAudit(opts = {}) {
 
 // src/cli_memory.ts
 import * as fs21 from "node:fs";
-import * as path21 from "node:path";
+import * as path22 from "node:path";
 function removeExactDupLines(text, report) {
   if (report.exactDupLines.length === 0) return text;
   const toRemove = new Set(report.exactDupLines.map(([, dupIdx]) => dupIdx));
@@ -12807,7 +13070,7 @@ function printReport(reports, clusters) {
   } else {
     for (const cluster of clusters) {
       w(
-        `  [${cluster.method}, similarity ${cluster.similarity}, ~${cluster.tokens} tok] ${cluster.members.map((m) => path21.basename(m)).join(", ")}
+        `  [${cluster.method}, similarity ${cluster.similarity}, ~${cluster.tokens} tok] ${cluster.members.map((m) => path22.basename(m)).join(", ")}
 `
       );
     }
@@ -12822,7 +13085,7 @@ async function runMemoryCommand(opts = {}) {
   const claudeMds = findClaudeMdFiles(projectRoot);
   const reports = auditClaudeMd(claudeMds);
   const memoryMdPath = findMemoryMd(projectRoot);
-  const clusters = memoryMdPath !== null ? await findContentDuplicates(path21.dirname(memoryMdPath)) : [];
+  const clusters = memoryMdPath !== null ? await findContentDuplicates(path22.dirname(memoryMdPath)) : [];
   printReport(reports, clusters);
   if (opts.fix !== true) return;
   const changes = [];
@@ -12868,16 +13131,16 @@ async function runMemoryCommand(opts = {}) {
 
 // src/cli_waste.ts
 import * as fs24 from "node:fs";
-import * as path24 from "node:path";
+import * as path25 from "node:path";
 
 // src/waste.ts
 import * as fs22 from "node:fs";
 import * as os11 from "node:os";
-import * as path22 from "node:path";
+import * as path23 from "node:path";
 function projectTranscriptsDir(projectRoot) {
-  const rootStr = path22.resolve(projectRoot);
+  const rootStr = path23.resolve(projectRoot);
   const slug = rootStr.replace(/[^A-Za-z0-9]/g, "-");
-  return path22.join(os11.homedir(), ".claude", "projects", slug);
+  return path23.join(os11.homedir(), ".claude", "projects", slug);
 }
 function findLatestTranscript(projectRoot) {
   const dir = projectTranscriptsDir(projectRoot);
@@ -12889,7 +13152,7 @@ function findLatestTranscript(projectRoot) {
   }
   let best = null;
   for (const name of entries) {
-    const full = path22.join(dir, name);
+    const full = path23.join(dir, name);
     let stat;
     try {
       stat = fs22.statSync(full);
@@ -13119,7 +13382,7 @@ async function buildWasteReport(transcriptPath, opts = {}) {
 
 // src/copilot_waste.ts
 import * as fs23 from "node:fs";
-import * as path23 from "node:path";
+import * as path24 from "node:path";
 var HOOK_RECORD_TYPES = /* @__PURE__ */ new Set(["hook.start", "hook.end"]);
 function splitInjectedBlocks(transformed) {
   const out2 = [];
@@ -13138,7 +13401,7 @@ function splitInjectedBlocks(transformed) {
   return out2;
 }
 function findLatestCopilotSession() {
-  const root = path23.join(copilotCliUserRoot(), "session-state");
+  const root = path24.join(copilotCliUserRoot(), "session-state");
   let entries;
   try {
     entries = fs23.readdirSync(root);
@@ -13148,7 +13411,7 @@ function findLatestCopilotSession() {
   let best = null;
   let bestMtime = -Infinity;
   for (const entry of entries) {
-    const candidate = path23.join(root, entry, "events.jsonl");
+    const candidate = path24.join(root, entry, "events.jsonl");
     try {
       const st = fs23.statSync(candidate);
       if (!st.isFile()) continue;
@@ -13169,7 +13432,7 @@ function buildCopilotWasteReport(eventsPath) {
   const raw = fs23.readFileSync(eventsPath, "utf-8");
   const report = {
     sessionPath: eventsPath,
-    sessionId: path23.basename(path23.dirname(eventsPath)),
+    sessionId: path24.basename(path24.dirname(eventsPath)),
     turns: 0,
     tokens: null,
     blocks: [],
@@ -13448,7 +13711,7 @@ function printResidentContext(resident, w) {
 }
 async function runWasteCommand(opts = {}) {
   if (opts.copilot === true) {
-    const eventsPath = opts.transcript !== void 0 ? path24.resolve(opts.transcript) : findLatestCopilotSession();
+    const eventsPath = opts.transcript !== void 0 ? path25.resolve(opts.transcript) : findLatestCopilotSession();
     if (eventsPath === null || !fs24.existsSync(eventsPath)) {
       const detail = eventsPath === null ? "no Copilot CLI session found under <copilot-home>/session-state" : `Copilot session event log not found: ${eventsPath}`;
       if (opts.json === true) {
@@ -13472,7 +13735,7 @@ async function runWasteCommand(opts = {}) {
     return;
   }
   const projectRoot = resolveProjectRoot(opts.project !== void 0 ? { project: opts.project } : {});
-  const transcriptPath = opts.transcript !== void 0 ? path24.resolve(opts.transcript) : findLatestTranscript(projectRoot);
+  const transcriptPath = opts.transcript !== void 0 ? path25.resolve(opts.transcript) : findLatestTranscript(projectRoot);
   if (transcriptPath === null) {
     if (opts.json === true) {
       process.stdout.write(`${JSON.stringify({ error: "no session transcript found", project: projectRoot })}
@@ -13503,7 +13766,7 @@ async function runWasteCommand(opts = {}) {
 
 // src/session_read.ts
 import * as fs25 from "node:fs";
-import * as path25 from "node:path";
+import * as path26 from "node:path";
 import * as readline2 from "node:readline";
 function resolveSessionTranscript(arg, opts = {}) {
   if (arg !== void 0 && arg !== "") {
@@ -13511,7 +13774,7 @@ function resolveSessionTranscript(arg, opts = {}) {
     const projectRoot2 = resolveProjectRoot(opts.project !== void 0 ? { project: opts.project } : {});
     const dir = projectTranscriptsDir(projectRoot2);
     const byId = arg.endsWith(".jsonl") ? arg : `${arg}.jsonl`;
-    const candidate = path25.join(dir, byId);
+    const candidate = path26.join(dir, byId);
     if (fs25.existsSync(candidate) && fs25.statSync(candidate).isFile()) return candidate;
     return null;
   }
@@ -13670,7 +13933,7 @@ function formatSessionSlice(turns) {
 // src/session_audit.ts
 import * as fs26 from "node:fs";
 import * as os12 from "node:os";
-import * as path26 from "node:path";
+import * as path27 from "node:path";
 import * as readline3 from "node:readline";
 function emptyMeasured() {
   return { apiCalls: 0, inputTokens: 0, cacheCreationTokens: 0, cacheReadTokens: 0, outputTokens: 0 };
@@ -13717,6 +13980,64 @@ var CACHE_READ_MULTIPLIER = 0.1;
 var READ_DIVERT_MARKER_RE = /(?:was already read this session|Already read |You've already read|Use `token-goat (?:section|read|bash-output|config-get|skeleton)|token-goat bash-output --file)/;
 var READ_DIVERT_MAX_BYTES = 2500;
 var READ_FULL_SERVE_MIN_BYTES = 10240;
+var DENY_TEMPLATES = [
+  { kind: "node_modules_deny", re: /node_modules is typically noise/ },
+  { kind: "lock_file_deny", re: /Lock files are rarely useful to read in full/ },
+  { kind: "tsbuildinfo_deny", re: /TypeScript incremental build cache file/ },
+  { kind: "generated_build_deny", re: /Generated\/build artifact — read the source file instead\./ },
+  { kind: "compact_sidecar_served", re: /Serving the extractive compact sidecar in place of the full file/ },
+  { kind: "notebook_sidecar_served", re: /Serving the output-stripped notebook in place of the full file/ },
+  // Must stay ABOVE markdown_heading_tree_deny: this deny's message embeds the same "Large markdown file (N headings)" guidance block, so the generic alternative would swallow it and the new intervention would be uncountable. DENY_TEMPLATES is scanned with `.find`, so the more specific wording has to come first.
+  { kind: "subagent_markdown_first_read_deny", re: /Subagent first read of a large markdown file/ },
+  { kind: "markdown_heading_tree_deny", re: /Large markdown file \(\d+ headings\)/ },
+  // The first alternative is a wording hooks_read.ts no longer emits (it claimed a compact-manifest
+  // section that never existed, reworded in 3d044feb). It stays because this table classifies a
+  // historical corpus, not just today's output: transcripts written before the rewording still
+  // carry the old text, and dropping the alternative silently shrank this kind from 51 events to
+  // 30 -- 41% of its history -- with a green suite. A superseded alternative is only removable
+  // once no transcript contains it, which source code cannot tell you. See the superseded-wording
+  // test in tests/deny_outcomes.test.ts.
+  { kind: "memory_md_reread_deny", re: /MEMORY\.md was read this session\. Its content is in the compact manifest|already read this session\. Memory files rarely change mid-session/ },
+  { kind: "improve_state_reread_deny", re: /Orchestrator state already read this session/ },
+  { kind: "env_reread_deny", re: /Environment files rarely change mid-session/ },
+  { kind: "session_artifact_truncated_deny", re: /File was truncated on last read\. Use `token-goat bash-output/ },
+  { kind: "session_artifact_unchanged_deny", re: /is unchanged since last read\. Use `token-goat bash-output/ },
+  { kind: "session_artifact_diff_deny", re: /Content changed since last read of [\s\S]*?bash-output --file/ },
+  { kind: "session_artifact_large_deny", re: /(?:Session transcript|Tool-result file) is large \(/ },
+  { kind: "session_artifact_generic_reread_deny", re: /already read this session\. Use `token-goat bash-output --file/ },
+  { kind: "truncated_read_deny", re: /File was truncated on last read \(>33K tokens\)/ },
+  { kind: "doc_unchanged_deny", re: /is unchanged since last read\. Use `token-goat (?:section|read)/ },
+  { kind: "doc_diff_deny", re: /Content changed since last read of [\s\S]*?Use `token-goat (?:section|read)/ },
+  { kind: "read_served_deny", re: /was already served in this session, byte for byte/ },
+  { kind: "markdown_already_read_deny", re: /Markdown file already read this session\. Use `token-goat section/ },
+  { kind: "read_count_deny", re: /Read this file \d+ times already/ },
+  { kind: "generic_reread_deny", re: /was already read this session \(\d+ read/ },
+  { kind: "large_file_deny", re: /is very large \(\d+(?:\.\d+)?KB\)\./ },
+  { kind: "file_type_handler_deny", re: /too large to preview \(exceeds the in-hook scan cap\)|cannot be read as text\.|Read cannot return spreadsheet content|Read cannot return slide content|Read cannot return document content|Use Read with offset and limit parameters to read specific line ranges/ }
+];
+var DENY_KINDS_WITH_SIZE = /* @__PURE__ */ new Set(["large_file_deny", "session_artifact_large_deny", "file_type_handler_deny"]);
+var DENY_SIZE_RE = /(\d+(?:\.\d+)?)\s*(B|KB|MB|GB|TB)\b/;
+function parseWithheldBytes(kind, text) {
+  if (!DENY_KINDS_WITH_SIZE.has(kind)) return null;
+  const m = DENY_SIZE_RE.exec(text);
+  if (m === null) return null;
+  const n = Number.parseFloat(m[1]);
+  const unit = m[2].toUpperCase();
+  const mult = unit === "B" ? 1 : unit === "KB" ? 1024 : unit === "MB" ? 1024 * 1024 : unit === "GB" ? 1024 ** 3 : 1024 ** 4;
+  return Math.round(n * mult);
+}
+var SURGICAL_COMMAND_RE = /(?:^|[\s;&|(])(?:token-goat|tg|node\s+\S*token-goat\.mjs)\s+(read|section|symbol|skeleton|outline|bash-output|config-get|skill-section|skill-body)\b/;
+var SHELL_READER_TOKEN_RE = /\b(?:sed|grep|cat|head|tail|awk|rg|less|nl|python3?|node)\b/;
+function escapeRegExp2(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function shellReadMatch(command, basename8) {
+  if (basename8 === "" || !SHELL_READER_TOKEN_RE.test(command)) return "none";
+  if (!command.includes(basename8)) return "none";
+  const escaped = escapeRegExp2(basename8);
+  const strict = new RegExp(`(?:^|["'\`/\\\\\\s])${escaped}(?:$|["'\`/\\\\\\s,;:)])`);
+  return strict.test(command) ? "match" : "ambiguous";
+}
 var BASH_FILTER_MARKER_RE = /\[token-goat[:\]]/;
 var BASH_SMALL_RESULT_MAX_BYTES = 1024;
 function commandHead(raw) {
@@ -13771,7 +14092,7 @@ function listCorpusTranscripts(corpusDir) {
   const found = [];
   const walk = (dir, entries) => {
     for (const entry of entries) {
-      const full = path26.join(dir, entry.name);
+      const full = path27.join(dir, entry.name);
       if (entry.name.endsWith(".jsonl")) {
         found.push(full);
       } else if (entry.isDirectory()) {
@@ -13789,9 +14110,9 @@ function listCorpusTranscripts(corpusDir) {
   return found.sort();
 }
 function defaultCorpusDir() {
-  return path26.join(os12.homedir(), ".claude", "projects");
+  return path27.join(os12.homedir(), ".claude", "projects");
 }
-async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap) {
+async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap, denyRows) {
   const isLane = filePath.split(/[\\/]/).includes("subagents");
   let laneFirstPrefix = null;
   let laneBriefBytes = -1;
@@ -13799,8 +14120,12 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
   const bashHeadById = /* @__PURE__ */ new Map();
   let pendingBashReread = [];
   const readCallById = /* @__PURE__ */ new Map();
+  const readPathById = /* @__PURE__ */ new Map();
+  const editPathById = /* @__PURE__ */ new Map();
+  const editErrorById = /* @__PURE__ */ new Map();
   const readPathEpoch = /* @__PURE__ */ new Map();
   let compactEpoch = 0;
+  const openDenies = [];
   let sawTokenGoatHook = false;
   let fileRepeats = 0;
   let fileRepeatsFullNoRange = 0;
@@ -13895,13 +14220,38 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
               toolNameById.set(block["id"], name);
               toolRollup(toolMap, name).calls += 1;
               const input = block["input"] !== null && typeof block["input"] === "object" ? block["input"] : {};
+              let readNorm;
+              let editNorm;
               if (name === "Bash" && typeof input["command"] === "string") {
                 bashHeadById.set(block["id"], commandHead(input["command"]));
               } else if (name === "Read" && typeof input["file_path"] === "string") {
-                const norm = normalizeReadPath(input["file_path"]);
-                const priorEpoch = readPathEpoch.get(norm);
+                readNorm = normalizeReadPath(input["file_path"]);
+                const priorEpoch = readPathEpoch.get(readNorm);
                 readCallById.set(block["id"], { wasSeenBefore: priorEpoch !== void 0, hasRange: input["offset"] !== void 0 || input["limit"] !== void 0, afterCompaction: priorEpoch !== void 0 && compactEpoch > priorEpoch });
-                readPathEpoch.set(norm, compactEpoch);
+                readPathById.set(block["id"], readNorm);
+                readPathEpoch.set(readNorm, compactEpoch);
+              } else if (name === "Edit" && typeof input["file_path"] === "string") {
+                editNorm = normalizeReadPath(input["file_path"]);
+                editPathById.set(block["id"], editNorm);
+                s.editErrorBaseline.totalEdits += 1;
+              }
+              if (openDenies.length > 0) {
+                const bashCommand = name === "Bash" && typeof input["command"] === "string" ? input["command"] : void 0;
+                for (const o of openDenies) {
+                  if (o.toolCalls.length >= 10) continue;
+                  const isReadSamePath = readNorm !== void 0 && o.path !== "" && readNorm === o.path;
+                  const isSurgicalSamePath = bashCommand !== void 0 && o.basename !== "" && SURGICAL_COMMAND_RE.test(bashCommand) && bashCommand.includes(o.basename);
+                  const shellRead = bashCommand !== void 0 && o.basename !== "" ? shellReadMatch(bashCommand, o.basename) : "none";
+                  const isEditSamePath = editNorm !== void 0 && o.path !== "" && editNorm === o.path;
+                  o.toolCalls.push({
+                    isReadSamePath,
+                    isSurgicalSamePath,
+                    isShellReadSamePath: shellRead === "match",
+                    isShellReadAmbiguous: shellRead === "ambiguous",
+                    editCallId: isEditSamePath ? block["id"] : void 0
+                  });
+                  if (o.toolCalls.length === 3) o.compactEpochAtWindow = compactEpoch;
+                }
               }
             }
             let inputBytes;
@@ -13930,8 +14280,27 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
           if (!toolNameById.has(id)) roll.calls += 1;
           roll.resultBytes += bytes;
           roll.resultEstTokens += estimateTokensFromLength(bytes);
+          if (name === "Edit" && block["is_error"] === true) {
+            s.editErrorBaseline.totalErrors += 1;
+            editErrorById.set(id, true);
+          }
           if (name === "Read") {
             s.readInterception.readResults += 1;
+            const denyTemplate = DENY_TEMPLATES.find((t) => t.re.test(text));
+            if (denyTemplate !== void 0) {
+              const path30 = readPathById.get(id) ?? "";
+              const lastSlash = path30.lastIndexOf("/");
+              openDenies.push({
+                kind: denyTemplate.kind,
+                withheldBytes: parseWithheldBytes(denyTemplate.kind, text),
+                path: path30,
+                basename: lastSlash === -1 ? path30 : path30.slice(lastSlash + 1),
+                callIndexAtDeny: perCall.length,
+                compactEpochAtOpen: compactEpoch,
+                compactEpochAtWindow: null,
+                toolCalls: []
+              });
+            }
             if (bytes < READ_DIVERT_MAX_BYTES && READ_DIVERT_MARKER_RE.test(text)) {
               s.readInterception.divertedByMarker += 1;
               s.readInterception.divertedBytes += bytes;
@@ -14068,6 +14437,42 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
   }
   flushLane(0);
   flushLane(1);
+  for (const o of openDenies) {
+    if (o.compactEpochAtWindow === null) o.compactEpochAtWindow = compactEpoch;
+    const windowCalls = o.toolCalls.slice(0, 3);
+    let outcome;
+    if (o.compactEpochAtWindow > o.compactEpochAtOpen) {
+      outcome = "compacted";
+    } else if (windowCalls.some((c) => c.isReadSamePath)) {
+      outcome = "retried";
+    } else if (windowCalls.some((c) => c.isSurgicalSamePath)) {
+      outcome = "substituted";
+    } else if (windowCalls.some((c) => c.isShellReadSamePath)) {
+      outcome = "shell_read";
+    } else if (o.toolCalls.length < 3) {
+      outcome = "unresolved";
+    } else {
+      outcome = "abandoned";
+    }
+    const retriedWithin10 = o.toolCalls.some((c) => c.isReadSamePath);
+    const shellReadAmbiguous = windowCalls.some((c) => c.isShellReadAmbiguous);
+    const editWithin10 = o.toolCalls.some((c) => c.editCallId !== void 0);
+    const editErrorWithin10 = o.toolCalls.some((c) => c.editCallId !== void 0 && editErrorById.get(c.editCallId) === true);
+    const R = perCall.length - o.callIndexAtDeny;
+    const nextCall = perCall[o.callIndexAtDeny];
+    denyRows.push({
+      kind: o.kind,
+      withheldBytes: o.withheldBytes,
+      R,
+      nextCallInputTotal: nextCall?.inputTotal ?? 0,
+      nextCallCacheRead: nextCall?.cacheRead ?? 0,
+      outcome,
+      retriedWithin10,
+      shellReadAmbiguous,
+      editWithin10,
+      editErrorWithin10
+    });
+  }
   if (sawTokenGoatHook) {
     s.readInterception.repeatInHookedSessions += fileRepeats;
     s.readInterception.repeatFullNoRangeInHookedSessions += fileRepeatsFullNoRange;
@@ -14117,8 +14522,47 @@ function hookRollup(hookMap, origin, event) {
   }
   return roll;
 }
+function median(arr) {
+  if (arr.length === 0) return 0;
+  const sorted = [...arr].sort((a, b) => a - b);
+  return sorted[Math.floor(sorted.length / 2)];
+}
+function aggregateDenyOutcomes(rows) {
+  const byKind = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    const bucket = byKind.get(r.kind);
+    if (bucket === void 0) byKind.set(r.kind, [r]);
+    else bucket.push(r);
+  }
+  const result = [];
+  for (const [kind, kindRows] of byKind) {
+    const count = kindRows.length;
+    const rateOf = (outcome) => kindRows.filter((r) => r.outcome === outcome).length / count;
+    const knownBytes = kindRows.map((r) => r.withheldBytes).filter((b) => b !== null);
+    result.push({
+      kind,
+      count,
+      compactedRate: rateOf("compacted"),
+      retriedRate: rateOf("retried"),
+      substitutedRate: rateOf("substituted"),
+      shellReadRate: rateOf("shell_read"),
+      unresolvedRate: rateOf("unresolved"),
+      abandonedRate: rateOf("abandoned"),
+      retriedWithin10Rate: kindRows.filter((r) => r.retriedWithin10).length / count,
+      medianWithheldBytes: knownBytes.length === 0 ? null : median(knownBytes),
+      withheldBytesUnknownFraction: (count - knownBytes.length) / count,
+      medianR: median(kindRows.map((r) => r.R)),
+      medianNextCallInputTotal: median(kindRows.map((r) => r.nextCallInputTotal)),
+      medianNextCallCacheRead: median(kindRows.map((r) => r.nextCallCacheRead)),
+      shellReadAmbiguousCount: kindRows.filter((r) => r.shellReadAmbiguous).length,
+      editWithin10Count: kindRows.filter((r) => r.editWithin10).length,
+      editErrorWithin10Count: kindRows.filter((r) => r.editErrorWithin10).length
+    });
+  }
+  return result.sort((a, b) => b.count - a.count || a.kind.localeCompare(b.kind));
+}
 async function auditSessionCorpus(opts = {}) {
-  const corpusDir = path26.resolve(opts.dir ?? defaultCorpusDir());
+  const corpusDir = path27.resolve(opts.dir ?? defaultCorpusDir());
   if (!fs26.existsSync(corpusDir)) {
     throw new Error(`session corpus directory not found: ${corpusDir}`);
   }
@@ -14156,6 +14600,8 @@ async function auditSessionCorpus(opts = {}) {
     laneAgentTypes: [],
     readInterception: { readResults: 0, divertedByMarker: 0, divertedBytes: 0, fullServesOver10k: 0, fullServeBytesOver10k: 0, fullServesFirstRead: 0, fullServesRepeat: 0, repeatBytes: 0, repeatWithRange: 0, repeatFullNoRange: 0, repeatInHookedSessions: 0, repeatFullNoRangeInHookedSessions: 0, repeatFullNoRangeHookedAfterCompaction: 0, fullServesPathUnknown: 0 },
     bashInterception: { bashResults: 0, markedByFilter: 0, markedBytes: 0, smallUntouched: 0, smallUntouchedBytes: 0, untouched: 0, untouchedBytes: 0, untouchedEstTokens: 0, untouchedRereadTokens: 0, untouchedBilledEquivTokens: 0, untouchedHeads: [] },
+    denyOutcomes: [],
+    editErrorBaseline: { totalEdits: 0, totalErrors: 0, rate: 0 },
     lineTypes: {},
     omissionMarkers: { fires: 0, linesOmitted: 0 }
   };
@@ -14164,9 +14610,10 @@ async function auditSessionCorpus(opts = {}) {
   const hookMap = /* @__PURE__ */ new Map();
   const laneObservations = [];
   const bashHeadMap = /* @__PURE__ */ new Map();
+  const denyRows = [];
   for (const file of files) {
     try {
-      await auditOneFile(file, summary, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap);
+      await auditOneFile(file, summary, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap, denyRows);
       summary.filesScanned += 1;
     } catch {
       summary.filesFailed += 1;
@@ -14203,6 +14650,8 @@ async function auditSessionCorpus(opts = {}) {
   }
   summary.attachmentKinds = [...attachmentMap.values()].sort((a, b) => b.billedEquivTokens - a.billedEquivTokens || b.injections - a.injections || a.kind.localeCompare(b.kind));
   summary.hookOutputs = [...hookMap.values()].sort((a, b) => b.contextBytes - a.contextBytes || b.fires - a.fires || a.origin.localeCompare(b.origin) || a.event.localeCompare(b.event));
+  summary.denyOutcomes = aggregateDenyOutcomes(denyRows);
+  summary.editErrorBaseline.rate = summary.editErrorBaseline.totalEdits === 0 ? 0 : summary.editErrorBaseline.totalErrors / summary.editErrorBaseline.totalEdits;
   summary.runtimeMs = Date.now() - started;
   return summary;
 }
@@ -14288,6 +14737,15 @@ function formatSessionAudit(s) {
   lines.push(`Full-serve split (same transcript file; a session's lanes are separate files, so repeats UNDER-count): first read ${fmt(ri.fullServesFirstRead)}, repeat ${fmt(ri.fullServesRepeat)} (${fmt(ri.repeatBytes)} bytes), path unknown ${fmt(ri.fullServesPathUnknown)}`);
   lines.push(`Repeats: with offset/limit ${fmt(ri.repeatWithRange)} (deliberate paging), whole-file ${fmt(ri.repeatFullNoRange)} (divert-miss candidates), in sessions with a token-goat hook fire ${fmt(ri.repeatInHookedSessions)} (whole-file among them: ${fmt(ri.repeatFullNoRangeInHookedSessions)}, of which post-compaction and so correct by design: ${fmt(ri.repeatFullNoRangeHookedAfterCompaction)})`);
   lines.push("");
+  lines.push("## Deny outcomes (what actually happened after a token-goat Read deny; raw tokens, not billed units)");
+  const eb = s.editErrorBaseline;
+  lines.push(`Edit-error baseline (all Edit tool_results, corpus-wide, independent of any deny): ${fmt(eb.totalErrors)}/${fmt(eb.totalEdits)} (${(eb.rate * 100).toFixed(1)}%) -- compare each row's edit-error<=10 ratio against this rate.`);
+  for (const d of s.denyOutcomes) {
+    const editErrorRatio = d.editWithin10Count > 0 ? `${fmt(d.editErrorWithin10Count)}/${fmt(d.editWithin10Count)}` : "n/a";
+    lines.push(`${d.kind.padEnd(34)} n ${fmt(d.count).padStart(6)}  compacted ${pct(d.compactedRate * d.count, d.count)}  retried ${pct(d.retriedRate * d.count, d.count)}  substituted ${pct(d.substitutedRate * d.count, d.count)}  shell-read ${pct(d.shellReadRate * d.count, d.count)}  unresolved ${pct(d.unresolvedRate * d.count, d.count)}  abandoned ${pct(d.abandonedRate * d.count, d.count)}  retried<=10 ${pct(d.retriedWithin10Rate * d.count, d.count)}  median-withheld ${d.medianWithheldBytes === null ? "n/a" : fmt(d.medianWithheldBytes) + "B"} (unknown ${pct(d.withheldBytesUnknownFraction * d.count, d.count)})  median-R ${fmt(d.medianR)}  shell-read-ambiguous ${fmt(d.shellReadAmbiguousCount)}  edit-error<=10 ${editErrorRatio}`);
+  }
+  if (s.denyOutcomes.length === 0) lines.push("(no denies matched a known template)");
+  lines.push("");
   lines.push("## Bash filter fire-rate (token-goat in-band markers inside Bash tool results)");
   const bi = s.bashInterception;
   lines.push(`Bash results: ${fmt(bi.bashResults)}; marked by a filter: ${fmt(bi.markedByFilter)} (${fmt(bi.markedBytes)} bytes); small unmarked <${fmt(BASH_SMALL_RESULT_MAX_BYTES)} B: ${fmt(bi.smallUntouched)} (${fmt(bi.smallUntouchedBytes)} bytes)`);
@@ -14306,7 +14764,7 @@ function formatSessionAudit(s) {
 // src/cli_mcp_audit.ts
 import * as fs27 from "node:fs";
 import * as os13 from "node:os";
-import * as path27 from "node:path";
+import * as path28 from "node:path";
 function readMcpJsonFile(configPath2) {
   try {
     if (!fs27.existsSync(configPath2)) return null;
@@ -14345,8 +14803,8 @@ function readClaudeJsonConfig(claudeJsonPath, projectRoot) {
   }
 }
 function discoverMcpConfig(projectRoot, home) {
-  const mcpJsonPath = path27.join(projectRoot, ".mcp.json");
-  const claudeJsonPath = path27.join(home, ".claude.json");
+  const mcpJsonPath = path28.join(projectRoot, ".mcp.json");
+  const claudeJsonPath = path28.join(home, ".claude.json");
   const sourcesChecked = [mcpJsonPath, claudeJsonPath];
   const fromMcpJson = readMcpJsonFile(mcpJsonPath);
   if (fromMcpJson !== null) return { servers: fromMcpJson, sourcePath: mcpJsonPath, sourcesChecked };
@@ -14906,7 +15364,7 @@ async function cmdMcpServe() {
   let StdioServerTransport;
   try {
     ;
-    ({ createMcpServer } = await import("./token-goat-chunk-ZIPBLIUZ.mjs"));
+    ({ createMcpServer } = await import("./token-goat-chunk-LEBYARO3.mjs"));
     ({ StdioServerTransport } = await import("./token-goat-chunk-324QOJYZ.mjs"));
   } catch (err2) {
     process.stderr.write(
@@ -14919,8 +15377,8 @@ async function cmdMcpServe() {
   const server = await createMcpServer();
   const transport = new StdioServerTransport();
   await server.connect(transport);
-  await new Promise((resolve13) => {
-    server.onclose = resolve13;
+  await new Promise((resolve14) => {
+    server.onclose = resolve14;
   });
 }
 function printBridgeVerificationNotice(harness) {
@@ -14931,7 +15389,7 @@ async function cmdHook(event, opts) {
   if (typeof opts.harness === "string" && opts.harness.length > 0) {
     process.env[ENV_KEYS.HARNESS_OVERRIDE] = opts.harness;
   }
-  const { relay } = await import("./token-goat-chunk-LJEETTER.mjs");
+  const { relay } = await import("./token-goat-chunk-ZVN5WHTO.mjs");
   await relay(event);
 }
 async function cmdInstall(opts) {
@@ -15044,14 +15502,14 @@ async function cmdInstall(opts) {
     );
   }
   try {
-    const skillDir = path28.join(homedir13(), ".claude", "skills");
+    const skillDir = path29.join(homedir13(), ".claude", "skills");
     if (fs28.existsSync(skillDir)) {
       const entries = fs28.readdirSync(skillDir, { withFileTypes: true });
       const skillNames = [];
       const sessionId = getSessionId();
       for (const entry of entries) {
         if (!entry.isDirectory()) continue;
-        const skillFile = path28.join(skillDir, entry.name, "SKILL.md");
+        const skillFile = path29.join(skillDir, entry.name, "SKILL.md");
         if (fs28.existsSync(skillFile)) {
           const body = fs28.readFileSync(skillFile, "utf-8");
           const compact = extractCompactFromMarker(body);
@@ -15064,7 +15522,7 @@ async function cmdInstall(opts) {
       if (skillNames.length > 0) {
         const dir = skillOutputsDir();
         await fs28.promises.mkdir(dir, { recursive: true });
-        const pregenPath = path28.join(dir, "pregen.json");
+        const pregenPath = path29.join(dir, "pregen.json");
         const pregenData = { ts: Date.now(), names: skillNames };
         await fs28.promises.writeFile(pregenPath, JSON.stringify(pregenData, null, 2));
         out(`Pre-generated ${skillNames.length} skill compacts.`);
@@ -15265,7 +15723,7 @@ async function cmdSessionOutline(sessionIdOrPath, opts = {}) {
 ${formatSessionOutline(turns)}`;
   out(text);
   const fullSourceBytes = sessionTranscriptSize(transcriptPath);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(text, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(text, "utf8"));
   recordStat("session_outline", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 function sessionTranscriptSize(transcriptPath) {
@@ -15287,7 +15745,7 @@ async function cmdSessionSlice(sessionIdOrPath, opts) {
   const text = opts.json === true ? JSON.stringify({ transcriptPath, turns }) : formatSessionSlice(turns);
   out(text);
   const fullSourceBytes = sessionTranscriptSize(transcriptPath);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(text, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(text, "utf8"));
   recordStat("session_slice", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 function cmdMcpAudit(opts = {}) {
@@ -15328,7 +15786,7 @@ function cmdHintStats(opts = {}) {
   });
 }
 function _applyFiltersAndPrint(content, opts, fenceByProvenance = false, fenceTag = UNTRUSTED_WEB_TAG) {
-  const emit2 = (text) => {
+  const emit3 = (text) => {
     if (!fenceByProvenance || text === "") {
       out(text);
       return text;
@@ -15365,7 +15823,7 @@ function _applyFiltersAndPrint(content, opts, fenceByProvenance = false, fenceTa
   }
   const rawLines = content.split(/\r?\n/);
   if (opts.full === true) {
-    return emit2(rawLines.join("\n"));
+    return emit3(rawLines.join("\n"));
   }
   const lines = rawLines.length > 1 && rawLines[rawLines.length - 1] === "" ? rawLines.slice(0, -1) : rawLines;
   const headN = opts.head !== void 0 ? requireNonNegativeInt("--head", opts.head) : 30;
@@ -15388,7 +15846,7 @@ function _applyFiltersAndPrint(content, opts, fenceByProvenance = false, fenceTa
     result = lines.slice(Math.max(0, lines.length - tailN));
     noteLineCap("last", "tail", result.length, lines.length);
   }
-  return emit2(result.join("\n"));
+  return emit3(result.join("\n"));
 }
 function fenceFileText(text) {
   return fenceUntrusted(text, UNTRUSTED_FILE_TAG);
@@ -15463,7 +15921,7 @@ async function cmdPdfExtract(file, opts) {
   const text = await runPdfExtractText(file, opts.pages, opts.layout === true);
   const printed = _applyFiltersAndPrint(text, opts, true, UNTRUSTED_FILE_TAG);
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(printed, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(printed, "utf8"));
   recordStat("pdf_extract", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 async function cmdPdfLocate(file, pattern, opts) {
@@ -15493,7 +15951,7 @@ ${countNoun(matches2.length, "match", "matches")} across ${countNoun(pages.lengt
     out(printed);
   }
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(printed, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(printed, "utf8"));
   recordStat("pdf_locate", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 async function cmdPdfOutline(file, opts) {
@@ -15509,7 +15967,7 @@ async function cmdPdfOutline(file, opts) {
   const text = opts.json === true ? JSON.stringify(entries.map((e) => ({ ...e, title: fenceFileFieldIfMatched(e.title) })), null, 2) : fenceFileText(entries.map((e) => `${"  ".repeat(e.level)}${e.title}${e.page !== null ? `  (p.${e.page})` : ""}`).join("\n"));
   out(text);
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(text, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(text, "utf8"));
   recordStat("pdf_outline", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 async function cmdPdfMeta(file, opts = {}) {
@@ -15523,7 +15981,7 @@ async function cmdPdfMeta(file, opts = {}) {
   const text = opts.json === true ? JSON.stringify({ pageCount: meta.pageCount, title: meta.title, author: meta.author, hasTextLayer: meta.hasTextLayer }, null, 2) : lines.join("\n");
   out(text);
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(text, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(text, "utf8"));
   recordStat("pdf_meta", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 async function cmdImageMeta(file, opts = {}) {
@@ -15545,8 +16003,8 @@ ${msg}`;
   const text = opts.json === true ? JSON.stringify(meta, null, 2) : lines.join("\n");
   out(text);
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(text, "utf8"));
-  recordStat("image_meta", bytesSaved, savedTokensFromBytes(bytesSaved));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(text, "utf8"));
+  recordStat("image_meta", bytesSaved, visionTokensSavedByText(meta.width, meta.height, Buffer.byteLength(text, "utf8"), loadConfig().image_shrink.vision_tier));
 }
 function fenceOcrText(text) {
   if (!injectionFencingEnabled()) return text;
@@ -15577,8 +16035,8 @@ ${fenceOcrText(result.text)}` : `${lines.join("\n")}
   }
   out(text);
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(text, "utf8"));
-  recordStat("image_text", bytesSaved, savedTokensFromBytes(bytesSaved));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(text, "utf8"));
+  recordStat("image_text", bytesSaved, visionTokensSavedByText(null, null, Buffer.byteLength(text, "utf8"), loadConfig().image_shrink.vision_tier));
 }
 function cmdVideoChapters(file) {
   const { chapters, subtitleStreams } = extractVideoChapters(file);
@@ -15603,7 +16061,7 @@ function cmdVideoChapters(file) {
   const text = lines.join("\n");
   out(text);
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(text, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(text, "utf8"));
   recordStat("video_chapters", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 function formatVideoTimestamp(totalSeconds) {
@@ -15630,7 +16088,7 @@ function cmdSharepointResolve(url) {
 }
 function recordXlsxStat(kind, file, emitted) {
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(emitted, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(emitted, "utf8"));
   recordStat(kind, bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 async function cmdXlsxSheets(file, opts = {}) {
@@ -15665,7 +16123,7 @@ async function cmdXlsxQuery(file, opts) {
 }
 function recordDocStat(kind, file, emitted) {
   const fullSourceBytes = fileSizeOrZero(file);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(emitted, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(emitted, "utf8"));
   recordStat(kind, bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 async function cmdPptxOutline(file, opts) {
@@ -15823,6 +16281,18 @@ function cmdConflicts(targetPath, opts) {
 async function cmdScreenshot(url, destPath, opts) {
   out(await runScreenshot(url, destPath, opts));
 }
+function readStdinPaths() {
+  if (process.stdin.isTTY) {
+    throw new CliError("--stdin requires piped input, e.g. `git diff --name-only | token-goat affected --stdin`");
+  }
+  let raw;
+  try {
+    raw = fs28.readFileSync(0, "utf8");
+  } catch (e) {
+    throw new CliError(`could not read the file list from stdin: ${extractErrorMessage(e)}`);
+  }
+  return raw.split("\n").map((line) => line.trim()).filter((line) => line !== "");
+}
 function runExit(fn) {
   try {
     process.exitCode = fn();
@@ -15853,7 +16323,7 @@ function emitExtraFileArgsNote(command, first, extras, opts = {}) {
 }
 async function cmdCompress(opts) {
   try {
-    const bashRunner = await import("./token-goat-chunk-L2XHDICZ.mjs");
+    const bashRunner = await import("./token-goat-chunk-NY4HYRSK.mjs");
     if (opts.compress === false) {
       process.exitCode = bashRunner.runRaw(opts.cmd, parseTimeout(opts.timeout, bashRunner.DEFAULT_TIMEOUT_SECONDS));
       return;
@@ -15951,8 +16421,8 @@ async function cmdSkillCompact(name, opts) {
       }
       throw new CliError(`failed to read skill file '${opts.path}': ${extractErrorMessage(e)}`);
     }
-    cacheName = name ?? path28.basename(path28.dirname(path28.resolve(opts.path)));
-    sourcePath = path28.resolve(opts.path);
+    cacheName = name ?? path29.basename(path29.dirname(path29.resolve(opts.path)));
+    sourcePath = path29.resolve(opts.path);
   } else {
     if (name === void 0 || !name.trim()) {
       throw new CliError("skill-compact requires a <name> or --path <file>");
@@ -16093,8 +16563,8 @@ async function cmdSkillDiff(name) {
   }
   const newer = versions[0];
   const older = versions[1];
-  const newerBody = await fs28.promises.readFile(path28.resolve(dir, `${newer.outputId}.txt`), "utf-8").catch(() => null);
-  const olderBody = await fs28.promises.readFile(path28.resolve(dir, `${older.outputId}.txt`), "utf-8").catch(() => null);
+  const newerBody = await fs28.promises.readFile(path29.resolve(dir, `${newer.outputId}.txt`), "utf-8").catch(() => null);
+  const olderBody = await fs28.promises.readFile(path29.resolve(dir, `${older.outputId}.txt`), "utf-8").catch(() => null);
   if (newerBody === null || olderBody === null) {
     out(`a cached version of '${name}' was evicted while diffing -- try again`);
     return;
@@ -16146,7 +16616,7 @@ function atomicWriteBuffer(dest, data) {
     if (e.code !== "ENOENT") throw e;
   }
   const rnd = randomBytes(4).toString("hex");
-  const tmp = path28.join(path28.dirname(path28.resolve(dest)), `.tmp.${process.pid}.${rnd}`);
+  const tmp = path29.join(path29.dirname(path29.resolve(dest)), `.tmp.${process.pid}.${rnd}`);
   try {
     fs28.writeFileSync(tmp, data, { mode: 384 });
     try {
@@ -16184,9 +16654,9 @@ function mapFsError(e, src, dest, srcLabel = "source") {
   const fe = e;
   if (fe.code === "ENOENT") {
     const errPath = fe.path ?? "";
-    const isSource = src !== void 0 && path28.resolve(errPath) === path28.resolve(src);
+    const isSource = src !== void 0 && path29.resolve(errPath) === path29.resolve(src);
     if (isSource) throw new CliError(`${/\bfile$/i.test(srcLabel) ? srcLabel : `${srcLabel} file`} not found: ${src}`);
-    const destDir = dest ? path28.dirname(path28.resolve(dest)) : path28.dirname(path28.resolve(errPath || "."));
+    const destDir = dest ? path29.dirname(path29.resolve(dest)) : path29.dirname(path29.resolve(errPath || "."));
     throw new CliError(`destination directory does not exist: ${destDir}`);
   }
   if (fe.code === "ENOTDIR") {
@@ -16197,7 +16667,7 @@ function mapFsError(e, src, dest, srcLabel = "source") {
   }
   if (fe.code === "EISDIR") {
     const errPath = fe.path ?? "";
-    const isSource = src !== void 0 && (errPath === "" || path28.resolve(errPath) === path28.resolve(src));
+    const isSource = src !== void 0 && (errPath === "" || path29.resolve(errPath) === path29.resolve(src));
     if (isSource) throw new CliError(`source is a directory, not a file: ${src}`);
     throw new CliError(`destination is a directory, not a file: ${dest ?? (errPath || "(unknown)")}`);
   }
@@ -16266,7 +16736,7 @@ function validateWritablePath(dest, label) {
     throw new CliError(`${label} path contains a null byte`);
   }
   if (isWindows()) {
-    const base = path28.basename(dest);
+    const base = path29.basename(dest);
     const stem = base.replace(/\.[^.]*$/, "").toUpperCase();
     if (WIN_RESERVED.has(stem)) {
       throw new CliError(`${label} '${base}' is a reserved Windows device name`);
@@ -16407,7 +16877,7 @@ function cmdWriteFile(dest, opts) {
     throw new CliError(`TOKEN_GOAT_MAX_STDIN_MB must be a positive integer; got '${process.env["TOKEN_GOAT_MAX_STDIN_MB"] ?? ""}'`);
   }
   const maxBytes = maxMB * 1024 * 1024;
-  return new Promise((resolve13, reject) => {
+  return new Promise((resolve14, reject) => {
     const chunks = [];
     let totalBytes = 0;
     let settled = false;
@@ -16431,7 +16901,7 @@ function cmdWriteFile(dest, opts) {
       try {
         atomicWriteBuffer(dest, Buffer.concat(chunks));
         enqueueDirtyPathSafe(dest);
-        resolve13();
+        resolve14();
       } catch (e) {
         try {
           mapFsError(e, void 0, dest);
@@ -16783,7 +17253,7 @@ ${content}`;
   }
   const toEmit = fenceUntrusted(emitted, UNTRUSTED_WEB_TAG);
   out(toEmit);
-  const bytesSaved = Math.max(1, fullSourceBytes - Buffer.byteLength(toEmit, "utf8"));
+  const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(toEmit, "utf8"));
   recordStat("gdrive_sections", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
 function expandGlobs(root, patterns, globFnOverride) {
@@ -16793,17 +17263,17 @@ function expandGlobs(root, patterns, globFnOverride) {
     if (globFn !== void 0 && (p.includes("*") || p.includes("?") || p.includes("{"))) {
       try {
         const hits = globFn(p, { cwd: root });
-        for (const h of hits) out2.push(path28.isAbsolute(h) ? h : path28.join(root, h));
+        for (const h of hits) out2.push(path29.isAbsolute(h) ? h : path29.join(root, h));
         continue;
       } catch {
       }
     }
-    out2.push(path28.isAbsolute(p) ? p : path28.join(root, p));
+    out2.push(path29.isAbsolute(p) ? p : path29.join(root, p));
   }
   return out2;
 }
 function readIgnoreFile(root) {
-  const ignorePath = path28.join(root, ".tokengoatignore");
+  const ignorePath = path29.join(root, ".tokengoatignore");
   let raw;
   try {
     raw = fs28.readFileSync(ignorePath, "utf8");
@@ -16874,7 +17344,7 @@ function cmdTokens(patterns, opts) {
   if (opts.tree === true) {
     const dirs = /* @__PURE__ */ new Map();
     for (const e of entries) {
-      const dir = path28.dirname(e.rel_path);
+      const dir = path29.dirname(e.rel_path);
       if (!dirs.has(dir)) dirs.set(dir, []);
       dirs.get(dir).push(e);
     }
@@ -16884,7 +17354,7 @@ function cmdTokens(patterns, opts) {
       const pct2 = result.total_tokens > 0 ? Math.round(dirTokens / result.total_tokens * 100) : 0;
       lines2.push(`${dir}/ (${dirTokens} tokens, ${pct2}%)`);
       for (const e of dirEntries) {
-        lines2.push(`  ${path28.basename(e.rel_path).padEnd(30)}  ${String(e.tokens).padStart(8)} tokens`);
+        lines2.push(`  ${path29.basename(e.rel_path).padEnd(30)}  ${String(e.tokens).padStart(8)} tokens`);
       }
     }
     out(lines2.join("\n"));
@@ -16935,6 +17405,64 @@ function cmdFailures(src, opts) {
   saveFailureSnapshot(project.hash, key, { signatures, runner: result.runner, storedAt: Date.now() });
   out(opts.json === true ? formatFailureDeltaJson(delta, result.runner) : formatFailureDeltaText(delta, result.runner));
 }
+var originalHelpInformation = null;
+function generateCompactHelp() {
+  const lines = [
+    "Usage: token-goat [options] [command]",
+    "",
+    "Surgical token-reduction companion for AI coding agents",
+    "",
+    "Options:",
+    "  -v, --version                   print the token-goat version",
+    "  --cwd <path>                    run as if invoked from this directory",
+    "  -h, --help                      display help for command",
+    "",
+    "Reads: symbol, read, brief, section, semantic, skeleton, outline, refs, scope,",
+    "  similar, context-for, call-chain, impact, callers, dead, test-for",
+    "",
+    "Analysis: arch, affected, blame, deps, types, coverage-gaps, changed, diff, log,",
+    "  exports, imports, find, grep",
+    "",
+    "File Formats: pdf-meta, pdf-outline, pdf-extract, pdf-locate, xlsx-sheets,",
+    "  xlsx-head, xlsx-query, xlsx-range, yaml-outline, yaml-query, json-outline,",
+    "  json-query, xml-outline, xml-query, docx-outline, docx-text, pptx-outline,",
+    "  pptx-slide, pptx-text, pptx-notes",
+    "",
+    "Index & Search: index, map, reconcile, doctor, commands, ask, pack, tokens,",
+    "  budget, failures, todo, trace, logfold, lockdeps, dep-docs, recent, hot,",
+    "  snapshot-snapshot, baseline, cost, coverage-report-gaps, clean-cache,",
+    "  cache-audit, reclaim-index, project",
+    "",
+    "Session: stats, waste, session-outline, session-audit, session-slice,",
+    "  session-summary, context-stats, bootstrap-audit, memory, hint-stats,",
+    "  mcp-audit",
+    "",
+    "Skills: skill-body, skill-compact, skill-list, skill-size, skill-history,",
+    "  skill-diff, skill-section",
+    "",
+    "Compression: compress-text, retrieve, handoff-create, handoff-resolve,",
+    "  compress, recall, bash-output, web-output, mcp-output, compress-text,",
+    "  compress",
+    "",
+    "Config & Integration: install, uninstall, mcp-serve, mcp-status, hook,",
+    "  bridges-status, worker, statusline, version, config, config-get,",
+    "  capabilities, help",
+    "",
+    "Data: note, note-add, note-get, note-list, sqlite-query, sqlite-schema,",
+    "  csv-profile, csv-query",
+    "",
+    "Utils: ignores, bash-history, web-history, openapi-op, openapi-outline,",
+    "  gdrive-sections, screenshot, opencode-*, fetch-image, image-meta,",
+    "  image-text, start, stop, resume, replace, insert-section, pr-slice,",
+    "  sharepoint-resolve, transcript, transcript-outline, video-chapters,",
+    "  write-file, zip-list, zip-read, mcp-history, compact-doc, compact-hint,",
+    "  conflicts, prune-cache",
+    "",
+    "Tip: look up one command instead of this whole list: 'token-goat help <command>', or 'token-goat commands --grep <pattern>' anchored ('^read$' ~700B; bare 'read' matches descriptions too, ~7KB).",
+    ""
+  ];
+  return lines.join("\n");
+}
 function buildProgram() {
   const program2 = new Command();
   program2.name("token-goat").description("Surgical token-reduction companion for AI coding agents").version(VERSION, "-v, --version", "print the token-goat version").option("--cwd <path>", "run as if invoked from this directory (overrides the real working directory)");
@@ -17113,6 +17641,21 @@ function buildProgram() {
   worker.command("stop").description("stop the background indexer").action(guard(cmdWorkerStop));
   worker.command("status").description("check if the indexer is running").action(guard(cmdWorkerStatus));
   program2.command("stats").description("show session statistics (bare = totals only; --full for the breakdown)").option("-j, --json", "output as JSON").option("--full", "show the full breakdown (by source, by command, by day)").option("--short", "force the rich short KPI view even when stdout is not a TTY (e.g. piped)").option("--methodology", "explain local savings estimates and their billing limits").option("--window-days <days>", "days to include (0 = all time)", "30").option("--home-dir <path>", "home directory (for testing)").action(guard(cmdStats));
+  program2.command("reconcile").description("sweep this project for files that changed while token-goat was not watching, and queue them for reindexing").option("--dry-run", "report the drift without queueing anything").option("--budget-ms <ms>", `wall-clock budget for the sweep (default ${DEFAULT_RECONCILE_BUDGET_MS})`).option("-j, --json", "output as JSON").action(
+    (opts) => runExit(
+      () => runReconcile({
+        ...opts.dryRun === true ? { dryRun: true } : {},
+        ...opts.budgetMs !== void 0 ? { budgetMs: requireNonNegativeInt("--budget-ms", opts.budgetMs) } : {},
+        ...opts.json === true ? { json: true } : {}
+      })
+    )
+  );
+  program2.command("capabilities").description("report every capability that can send data off this machine, and its current state").option("-j, --json", "emit as JSON, for asserting on in a pipeline").action(
+    guard((opts) => {
+      const caps = collectCapabilities();
+      console.log(opts.json ? JSON.stringify({ version: VERSION, capabilities: caps }, null, 2) : renderCapabilities(caps));
+    })
+  );
   program2.command("doctor").description("diagnose token-goat health").option("--context", "include context footprint analysis").option("--json", "emit check results as JSON instead of text").action(guard(cmdDoctor));
   program2.command("context-stats").description("show context statistics").option("--project <path>", "project root to analyze").option("-j, --json", "output as JSON").option("--fix", "apply automatic fixes (confirm-gated; shows a diff before writing)").option("-y, --yes", "with --fix, apply without prompting (non-interactive / scripted use)").action(guard(cmdContextStats));
   program2.command("bootstrap-audit").description("audit Claude Code startup-context contributors without reading prompt bodies").option("--project <path>", "project root to analyze").option("--home <path>", "home directory override (for CI/testing)").option("--follow-links", "follow external symlink/junction roots and direct children").option("-j, --json", "output as JSON").option("--top <n>", "largest metadata entries to show (default 10)", "10").option("--warn-tokens <n>", "warn when total estimated startup tokens exceed n").option("--fail-tokens <n>", "fail when total estimated startup tokens exceed n").option("--warn-bytes <n>", "warn when agent/skill metadata bytes exceed n").option("--fail-bytes <n>", "fail when agent/skill metadata bytes exceed n").action(guard(cmdBootstrapAudit));
@@ -17263,10 +17806,22 @@ function buildProgram() {
       })
     )
   );
-  program2.command("arch").description("internal import graph analysis: hubs, entry points, cycles").option("--top <n>", "limit hubs and entry points to top N (default 10)").option("-j, --json", "output as JSON").action(
+  program2.command("arch").description("internal import graph analysis: hubs, entry points, cycles, and with --modules the groups of files that mostly import each other").option("--top <n>", "limit hubs, entry points, modules and cross-module pairs to top N (default 10)").option("--modules", "also group files into modules by who imports whom, and report which modules reach into which (--json carries the full member list of each)").option("-j, --json", "output as JSON").action(
     (opts) => runExit(
       () => runArch({
         ...opts.top !== void 0 ? { top: requireNonNegativeInt("--top", opts.top) } : {},
+        ...opts.json === true ? { json: true } : {},
+        ...opts.modules === true ? { modules: true } : {}
+      })
+    )
+  );
+  program2.command("affected [files...]").description("test files that transitively import the given changed files (for narrowing a CI run)").option("--stdin", "read the changed-file list from stdin, one path per line").option("--depth <n>", `max reverse-import hops (default ${DEFAULT_AFFECTED_DEPTH})`).option("--filter <regex>", "regex deciding which reached files count as tests (default: the built-in test-file heuristic)").option("-q, --quiet", "print bare paths only, for piping into a test runner").option("-j, --json", "output as JSON").action(
+    (files, opts) => runExit(
+      () => runAffected({
+        files: opts.stdin === true ? [...files, ...readStdinPaths()] : files,
+        ...opts.depth !== void 0 ? { depth: requireNonNegativeInt("--depth", opts.depth) } : {},
+        ...opts.filter !== void 0 ? { filter: opts.filter } : {},
+        ...opts.quiet === true ? { quiet: true } : {},
         ...opts.json === true ? { json: true } : {}
       })
     )
@@ -17491,8 +18046,24 @@ function buildProgram() {
       out(VERSION);
     })
   );
-  const footer = "\nTip: look up one command instead of this whole list: 'token-goat help <command>', or 'token-goat commands --grep <pattern>' anchored ('^read$' ~700B; bare 'read' matches descriptions too, ~7KB).\n";
-  program2.addHelpText("after", footer);
+  program2.command("help [command]").description("show help for a command").option("--full", "show full original help instead of compact summary").action(
+    guard((cmd, opts) => {
+      const options = opts;
+      if (options?.["full"] && !cmd) {
+        out(originalHelpInformation ? originalHelpInformation() : generateCompactHelp());
+        return;
+      }
+      if (cmd) {
+        const argv = [process.argv[0] ?? "node", process.argv[1] ?? "token-goat", cmd, "--help"];
+        program2.parse(argv);
+      } else {
+        out(generateCompactHelp());
+      }
+    })
+  );
+  program2.helpOption("-h, --help", "display help for command");
+  originalHelpInformation = program2.helpInformation.bind(program2);
+  program2.helpInformation = () => generateCompactHelp();
   return program2;
 }
 function applyExitOverride(command) {