token-goat 2.9.13 → 2.9.15

package/dist/{token-goat-chunk-QWSUZWFP.mjs → token-goat-chunk-SZWYESBS.mjs}

@@ -4,31 +4,26 @@ import {
   canRunWrappedShell,
   clipToDeliveryCap,
   deliveredOutputBytes
-} from "./token-goat-chunk-2WC4ZUXN.mjs";
+} from "./token-goat-chunk-YZX7EFG4.mjs";
 import {
   DEFAULT_RECONCILE_BUDGET_MS,
   HOOK_EVENTS,
-  accumulateResidentLines,
   buildCommandManifest,
   checkSymbolBodySize,
+  diagnoseSqlFailure,
   flattenCommandNames,
   getWebOutput,
   isReconcileClean,
-  lineMayCarryResidentSignal,
   readStdinJson,
-  readTranscriptTail,
   reconcileProject,
-  repeatedSkillBodyHint,
-  storeWebOutput,
-  summarizeResidentContext,
-  taskListPruneHint
-} from "./token-goat-chunk-FQCNJV4V.mjs";
+  storeWebOutput
+} from "./token-goat-chunk-OUGNPMDA.mjs";
 import {
-  BASH_OUTPUT_SUBDIR,
   GENERIC_SERVED_OUTPUT_KEY,
   OUTLINE_MAX_REPLACEMENT_RATIO,
   OUTLINE_MIN_HEADINGS,
   WEB_FETCH_KEY_SEP,
+  accumulateResidentLines,
   appendDirtyPath,
   applyHintTracking,
   buildDeltaCapsule,
@@ -36,24 +31,19 @@ import {
   classifyBashHint,
   classifyEditHint,
   clearCurlDownload,
-  commandHash,
   compactPathFor,
   computeAdaptiveBudget,
-  countSymbols,
   enqueueDirtyPathSafe,
   ensureWorkerAlive,
   extractCompactFromMarker,
-  extractMarkdownHeadings,
   fenceUntrusted,
   fenceUntrustedSpans,
   fenceWithMatches,
   foldDelivery,
   foldDetail,
   foldingEnabled,
-  formatHeadingTreeParts,
   formatProjectMap,
   formatShrinkSummary,
-  getBashOutput,
   getBashOutputId,
   getContextPressure,
   getCurlDownloadPath,
@@ -61,7 +51,6 @@ import {
   getFileServedOutputs,
   getGlobMatchCount,
   getGrepMatchCount,
-  getMonitoringRecallHint,
   getOutstandingAgentSpawns,
   getSessionBashOutputs,
   getSessionBashReruns,
@@ -71,15 +60,11 @@ import {
   hasSessionOutput,
   imageQualifiesForShrink,
   incrementSkillHit,
-  indexRecallEntry,
   indexServedBody,
   installedSkillPath,
-  isBashEntryStale,
-  isBuildCommand,
-  isScopedGitStatusOrDiffStatCommand,
   isStructuralRewriteAccepted,
-  isTestRunnerCommand,
   lastTabContextMatches,
+  lineMayCarryResidentSignal,
   listSiblingSessionStates,
   loadSessionCache,
   loadSessionState,
@@ -96,6 +81,7 @@ import {
   planSourceSkeleton,
   preToolPathDeclined,
   probeImageMeta,
+  readTranscriptTail,
   recordBashOutput,
   recordBashRerun,
   recordCliRead,
@@ -113,27 +99,31 @@ import {
   recordSymbolRead,
   recordWebFetch,
   removeOutstandingAgentSpawn,
+  repeatedSkillBodyHint,
   saveSessionState,
   scanAndRecord,
   servedRunNotice,
   sessionOutputBodyBytes,
   sessionSidecarPath,
   setLastTabContext,
+  setTranscriptPath,
   shrinkImage,
-  storeBashOutput,
   storeOutput,
-  summarizeOutputDelta,
+  summarizeResidentContext,
   takePendingLargeFileHint,
+  taskListPruneHint,
   visionTokens,
   visionTokensSaved,
   vscodePathAllowed,
   wasCliReadThisSession,
   wasFileReadThisSession,
   wasHintShown
-} from "./token-goat-chunk-ZZI3IDQZ.mjs";
+} from "./token-goat-chunk-BL5LNGBG.mjs";
 import {
+  BASH_OUTPUT_SUBDIR,
   BODY_FIRST_TOOL_RESPONSE_KEYS,
   OUTPUT_FIRST_TOOL_RESPONSE_KEYS,
+  commandHash,
   compressOutput,
   contextOutput,
   dedupeConsecutive,
@@ -145,14 +135,22 @@ import {
   extractToolResponseField,
   extractToolResultText,
   filterByName,
+  getBashOutput,
   getCwd,
   getFilePath,
+  getMonitoringRecallHint,
   getToolInput,
   getToolName,
+  getTranscriptPath,
   hasBareBackgroundOrNewline,
   hasUnquotedOperator,
+  indexRecallEntry,
+  isBashEntryStale,
+  isBuildCommand,
   isMcpErrorResponse,
   isRewriteWorthwhile,
+  isScopedGitStatusOrDiffStatCommand,
+  isTestRunnerCommand,
   isTextualContentBlock,
   makeDedupHintHandlers,
   mcpContentBlocks,
@@ -166,55 +164,68 @@ import {
   sessionStateKey,
   shlexSplit,
   splitOwnTrailingNotices,
+  storeBashOutput,
+  summarizeOutputDelta,
   withPreservedBlocks
-} from "./token-goat-chunk-JOXLE672.mjs";
+} from "./token-goat-chunk-YQ7WI2CO.mjs";
+import {
+  extractMarkdownHeadings,
+  formatHeadingTreeParts
+} from "./token-goat-chunk-NDRP4KJQ.mjs";
 import {
-  storeBlob
-} from "./token-goat-chunk-UM47DRD3.mjs";
+  countSymbols
+} from "./token-goat-chunk-2X2EBBC6.mjs";
+import {
+  recordStat,
+  redactSecrets,
+  savedTokensFromBytes,
+  storeBlob,
+  stripAnsiEscapes
+} from "./token-goat-chunk-IVUQLQWN.mjs";
 import {
-  detectHarness,
   detectLanguage,
+  getDb,
+  languageHasFlag
+} from "./token-goat-chunk-K7F2BFIK.mjs";
+import {
+  detectHarness,
   envBool,
   envInt,
   findProject,
-  getDb,
   getHarnessName,
   isUnderSystemTemp,
-  languageHasFlag,
   loadConfig,
-  recordStat,
-  redactSecrets,
-  savedTokensFromBytes,
-  shortFingerprint,
-  stripAnsiEscapes
-} from "./token-goat-chunk-UMXJN7DI.mjs";
+  shortFingerprint
+} from "./token-goat-chunk-S4XRY446.mjs";
 import {
   ENV_KEYS,
   IDENTICAL_READ_MIN_BODY_BYTES,
   PER_FILE_COUNTERFACTUAL_CEILING,
-  UNTRUSTED_TOOL_TAG,
   VERSION,
   atomicWriteText,
   containsLineRun,
   countNoun,
   dataDir,
-  displaySafePath,
-  displaySafeText,
   ensureDirSync,
   escapesOntoNetworkThroughLinks,
   extractErrorMessage,
-  fenceUntrustedFileContent,
   foldPath,
   globalDbPath,
   hasCreatedConfig,
   isInsideRoot,
+  runGit,
+  toKB
+} from "./token-goat-chunk-PM76YS22.mjs";
+import {
+  UNTRUSTED_TOOL_TAG,
+  displaySafePath,
+  displaySafeText,
+  fenceUntrustedFileContent,
   neutralizeSpokenMarkers,
   normalizePath,
   resolveIndexPath,
-  runGit,
-  toDisplayPath,
-  toKB
-} from "./token-goat-chunk-QKXBGBQR.mjs";
+  toDisplayPath
+} from "./token-goat-chunk-ERTXEKB6.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -747,7 +758,7 @@ function mergeManifestFiles(parent, siblingFiles) {
   }
   return Array.from(byPath.values());
 }
-function buildManifest(sessionId, cwd) {
+function buildManifest(sessionId, cwd, transcriptPath) {
   const ownFiles = [...getSessionFiles().values()];
   const siblingFiles = sessionId !== void 0 ? listSiblingSessionStates(sessionId).flatMap((s) => s.files) : [];
   const files = siblingFiles.length > 0 ? mergeManifestFiles(ownFiles, siblingFiles) : ownFiles;
@@ -779,7 +790,7 @@ function buildManifest(sessionId, cwd) {
   );
   lines.push(...buildSafeToDiscardSection(files));
   lines.push(...buildMemEpochSection());
-  return capManifestChars(lines.join("\n"), sessionId, cwd);
+  return capManifestChars(lines.join("\n"), sessionId, cwd, transcriptPath);
 }
 function gitDirtySignals(cwd) {
   const timeoutMs = loadConfig().hints.git_hint_max_ms;
@@ -797,11 +808,11 @@ function gitDirtySignals(cwd) {
   }
   return { hasPendingDiff, hasUncommittedChanges };
 }
-function adaptiveCharBonus(sessionId, cwd) {
+function adaptiveCharBonus(sessionId, cwd, transcriptPath) {
   if (!cwd) return 0;
   const cache = loadSessionCache(sessionId ?? "") ?? {};
   const ageSecs = cache.created_ts !== void 0 ? Math.max(0, Date.now() / 1e3 - cache.created_ts) : 0;
-  const contextPressure = getContextPressure(cache);
+  const contextPressure = getContextPressure(cache, transcriptPath);
   const { hasPendingDiff, hasUncommittedChanges } = gitDirtySignals(cwd);
   if (!hasPendingDiff && !hasUncommittedChanges) return 0;
   const baseline = computeAdaptiveBudget(cache, ageSecs, { contextPressure });
@@ -809,11 +820,11 @@ function adaptiveCharBonus(sessionId, cwd) {
   const deltaTokens = Math.max(0, withGitSignal - baseline);
   return deltaTokens * 3;
 }
-function capManifestChars(manifest, sessionId, cwd) {
+function capManifestChars(manifest, sessionId, cwd, transcriptPath) {
   const cap = loadConfig().compact_assist.max_manifest_chars;
   if (cap <= 0) return manifest;
   if (manifest.length <= cap) return manifest;
-  const effectiveCap = cap + adaptiveCharBonus(sessionId, cwd);
+  const effectiveCap = cap + adaptiveCharBonus(sessionId, cwd, transcriptPath);
   if (manifest.length <= effectiveCap) return manifest;
   const omitted = manifest.length - effectiveCap;
   return manifest.slice(0, effectiveCap) + `
@@ -886,7 +897,7 @@ function summaryBudgetDirective(budgetChars) {
 function preCompactHandler(event) {
   const out = loadConfig().compact_assist.enabled ? contextOutput(`${MANIFEST_PREAMBLE}${summaryBudgetDirective(loadConfig().compact_assist.summary_budget_chars)}
 
-${buildManifest(event.sessionId, getCwd(event))}`) : passOutput();
+${buildManifest(event.sessionId, getCwd(event), getTranscriptPath(event))}`) : passOutput();
   markCompacted();
   return out;
 }
@@ -934,7 +945,7 @@ init_define_import_meta_env();
 var TRACKED_SKILL = "token-goat";
 var MAX_COMMANDS_SHOWN = 8;
 async function currentCommandNames() {
-  const { buildProgram } = await import("./token-goat-chunk-JVNPCQB7.mjs");
+  const { buildProgram } = await import("./token-goat-chunk-NDPO7GAH.mjs");
   return flattenCommandNames(buildCommandManifest(buildProgram()));
 }
 async function recordSkillVersionSnapshot(sessionId, skillName) {
@@ -7645,114 +7656,20 @@ registerHook("post_tool_use", postSkillHandler, { toolName: "Skill" });
 
 // src/hooks_bash.ts
 init_define_import_meta_env();
-import { statSync as statSync4, existsSync, openSync as openSync2, readSync, closeSync as closeSync2 } from "node:fs";
-var CD_PREFIX_RE = /^(?:cd\s+(?:"[^"]*"|'[^']*'|\S+)[ \t]*(?:&&|;|\r?\n)\s*)+/;
-function stripCdPrefix(cmd) {
-  const stripped = cmd.replace(CD_PREFIX_RE, "");
-  return stripped.trim() || cmd;
-}
-function stripTrailingStderrRedirect(cmd) {
-  const stripped = cmd.replace(/\s*2>&1\s*$/, "");
-  return stripped.trim() || cmd;
-}
-function hasTestRunScopeOrBudget(cmd) {
-  const hasTimeout = /(?:^|\s)(?:timeout(?:\.exe)?\s+\S+|--(?:test)?timeout(?:=|\s)\S+)/i.test(cmd);
-  const hasSelector = /(?:\s::\S+|\s(?:-k|-t|-run|--(?:testNamePattern|last-failed|test|project))(?:=|\s)|\b(?:tests?|spec)\S*\.(?:[cm]?[jt]sx?|py|go|rs)\b|(?:^|\s)\.\/\S+)/i.test(cmd);
-  return hasTimeout || hasSelector;
-}
-function isDirectTestRunnerCommand(cmd) {
-  return /^(?:pytest|(?:npx\s+)?(?:jest|vitest)|go\s+test|cargo\s+test)\b/i.test(cmd);
-}
-function extractCdPrefixDirs(rawCmd) {
-  const prefixMatch = rawCmd.match(CD_PREFIX_RE);
-  if (prefixMatch === null) return [];
-  const dirs = [];
-  const segmentPattern = /cd\s+(?:"([^"]*)"|'([^']*)'|(\S+))[ \t]*(?:&&|;|\r?\n)/g;
-  let match;
-  while ((match = segmentPattern.exec(prefixMatch[0])) !== null) {
-    const dir = match[1] ?? match[2] ?? match[3];
-    if (dir !== void 0) dirs.push(dir);
-  }
-  return dirs;
-}
-function resolveCdHintPath(rawCmd, filePath, cwd) {
-  if (extractCdPrefixDirs(rawCmd).length === 0) return filePath;
-  return resolveIndexPath(filePath, cdPrefixCwd(rawCmd, cwd));
-}
-function cdPrefixCwd(rawCmd, cwd) {
-  let dir = cwd;
-  for (const target of extractCdPrefixDirs(rawCmd)) dir = resolveIndexPath(target, dir);
-  return dir;
-}
-function surgicalHintFor(hintPath, isEnv, isConfig, isDoc) {
-  return isEnv ? 'Use `token-goat config-get "' + hintPath + '" KEY_NAME` to read a specific variable.' : isConfig ? 'Use `token-goat config-get "' + hintPath + '" KEY_NAME` or `token-goat section "' + hintPath + '::sectionName"` to read a specific value.' : isDoc ? 'Use `token-goat section "' + hintPath + '::SectionHeading"` to read one section.' : 'Use `token-goat read "' + hintPath + '::SymbolName"` to read one function or class.';
-}
-function surgicalHintForConfigDoc(filePath, isConfig, isDoc, isSql) {
-  return isConfig ? 'Use `token-goat config-get "' + filePath + '" KEY_NAME` or `token-goat section "' + filePath + '::sectionName"` to read a specific value.' : isSql ? 'Use `token-goat section "' + filePath + '::table_name"` to pull one CREATE TABLE / CREATE TYPE block.' : isDoc ? 'Use `token-goat section "' + filePath + '::SectionHeading"` to read one section.' : 'Use `token-goat read "' + filePath + '::SymbolName"` or `token-goat skeleton "' + filePath + '"` to see the file structure.';
-}
-function stripOutputPipeline(cmd) {
-  let inSingle = false;
-  let inDouble = false;
-  let cut = cmd.length;
-  let backslashes = 0;
-  for (let i = 0; i < cmd.length; i++) {
-    const ch = cmd[i];
-    if (ch === "\\") {
-      backslashes++;
-      continue;
-    }
-    const escaped = backslashes % 2 === 1;
-    backslashes = 0;
-    if (ch === "'" && !inDouble) {
-      if (!escaped) inSingle = !inSingle;
-    } else if (ch === '"' && !inSingle) {
-      if (!escaped) inDouble = !inDouble;
-    } else if (ch === "|" && !inSingle && !inDouble) {
-      if (cmd[i + 1] === "|") {
-        i++;
-        continue;
-      }
-      cut = i;
-      break;
-    }
-  }
-  let base = cmd.slice(0, cut);
-  let prev;
-  do {
-    prev = base;
-    const masked = base.replace(/"((?:[^"\\]|\\.)*)"/g, (_m, inner) => '"' + " ".repeat(inner.length) + '"').replace(/'([^']*)'/g, (_m, inner) => "'" + " ".repeat(inner.length) + "'");
-    const newMasked = masked.replace(/\s*(?:[0-9]*>&[0-9]+|[0-9&]*>>?\s*(?:"[^"]*"|'[^']*'|[^\s|]+))\s*$/, "");
-    if (newMasked.length < masked.length) {
-      base = base.slice(0, newMasked.length);
-    }
-  } while (base !== prev);
-  return base.trim();
-}
-function pipelineDivergenceNote(cmd, entryCommand) {
-  if (entryCommand === cmd) return "";
-  const preview = entryCommand.length > 60 ? entryCommand.slice(0, 57) + "..." : entryCommand;
-  return " (cached from a differently-piped run, `" + preview + "` \u2014 verify it covers what you need before trusting it)";
-}
-function extractCommand(event) {
-  const cmd = event.toolInput["command"];
-  return typeof cmd === "string" && cmd.trim() !== "" ? cmd.trim() : void 0;
-}
-var HEAD_MOVING_GIT_RE = /^\s*git\s+(?:checkout|switch|pull|merge|rebase|reset|cherry-pick)\b/i;
-var PATH_SCOPED_CHECKOUT_RE = /^\s*git\s+checkout\s+(?:.*\s)?--(?:\s|$)/i;
-function isHeadMovingGitCommand(cmd) {
-  if (!HEAD_MOVING_GIT_RE.test(cmd)) return false;
-  if (PATH_SCOPED_CHECKOUT_RE.test(cmd)) return false;
-  return true;
+import { statSync as statSync6, existsSync } from "node:fs";
+
+// src/hooks_bash_commands.ts
+init_define_import_meta_env();
+import { statSync as statSync5 } from "node:fs";
+
+// src/bash_extractors.ts
+init_define_import_meta_env();
+import { statSync as statSync4, openSync as openSync2, readSync, closeSync as closeSync2 } from "node:fs";
+function surgicalHintFor(hintPath, isEnv, isConfig, isDoc, isXml = false) {
+  return isXml ? 'Use `token-goat xml-outline "' + hintPath + '"` to inspect structure, or `token-goat xml-query "' + hintPath + '" "<selector>"` to query specific nodes.' : isEnv ? 'Use `token-goat config-get "' + hintPath + '" KEY_NAME` to read a specific variable.' : isConfig ? 'Use `token-goat config-get "' + hintPath + '" KEY_NAME` or `token-goat section "' + hintPath + '::sectionName"` to read a specific value.' : isDoc ? 'Use `token-goat section "' + hintPath + '::SectionHeading"` to read one section.' : 'Use `token-goat read "' + hintPath + '::SymbolName"` to read one function or class.';
 }
-var ORIG_HEAD_ELIGIBLE_GIT_RE = /^\s*git\s+(?:pull|merge|rebase)\b/i;
-var ORIG_HEAD_REFLOG_MSG_RE = /^(merge\s|rebase\s\(|pull\s)/i;
-var GIT_RESTORE_RE = /^\s*git\s+restore\b/i;
-var GIT_RESTORE_STAGED_ONLY_RE = /(?:^|\s)(?:--staged|-S)(?:\s|$)/;
-var GIT_STASH_APPLY_RE = /^\s*git\s+stash\s+(?:pop|apply)\b/i;
-var PATCH_APPLY_SEGMENT_RE = /^\s*(?:\S*[/\\])?(?:git\s+apply|patch)\b/i;
-var PATCH_APPLY_INSPECT_ONLY_RE = /(?:^|\s)--(?:check|stat|numstat|summary|dry-run)(?:\s|=|$)/i;
-function isFormatterWriteSegment(segment) {
-  return /(?:^|\s|[/\\])(?:prettier|eslint)\b/i.test(segment) && /(?:^|\s)--(?:write|fix)(?:\s|$)/i.test(segment);
+function surgicalHintForConfigDoc(filePath, isConfig, isDoc, isSql, isXml = false) {
+  return isXml ? 'Use `token-goat xml-outline "' + filePath + '"` to inspect structure, or `token-goat xml-query "' + filePath + '" "<selector>"` to query specific nodes.' : isConfig ? 'Use `token-goat config-get "' + filePath + '" KEY_NAME` or `token-goat section "' + filePath + '::sectionName"` to read a specific value.' : isSql ? 'Use `token-goat section "' + filePath + '::table_name"` to pull one CREATE TABLE / CREATE TYPE block.' : isDoc ? 'Use `token-goat section "' + filePath + '::SectionHeading"` to read one section.' : 'Use `token-goat read "' + filePath + '::SymbolName"` or `token-goat skeleton "' + filePath + '"` to see the file structure.';
 }
 function splitShellSegments(cmd) {
   const segments = [];
@@ -7786,174 +7703,40 @@ function splitShellSegments(cmd) {
   segments.push(cur);
   return segments.map((s) => s.trim()).filter((s) => s.length > 0);
 }
-function safeShlexSplit(segment) {
-  try {
-    return shlexSplit(segment);
-  } catch {
-    return null;
-  }
+function isTempPath(fp) {
+  const norm = fp.replace(/\\/g, "/");
+  return /^\/tmp\//i.test(norm) || /\/var\/folders\//i.test(norm) || // Anchored to a local drive root on purpose. Unanchored, this clause said yes to
+  // `//host/share/AppData/Local/Temp/x.md`, and the caller's answer to yes is to stat the path --
+  // which on Windows opens an SMB session to whatever host a command named. A temp directory is
+  // somewhere on a local volume; nothing that starts with two separators is one.
+  /^[a-z]:\/(?:[^/]+\/)*AppData\/Local\/Temp\//i.test(norm) || norm.startsWith("/c/Users/") && norm.includes("/AppData/Local/Temp/") || isUnderSystemTemp(fp);
 }
-function segmentCommandIs(segment, name2) {
-  return new RegExp("^\\s*(?:\\S*[/\\\\])?" + name2 + "(?:\\.exe)?\\b", "i").test(segment);
+function isOrchestratorStateFile(filePath) {
+  const basename3 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
+  return /^\.improve-state-/.test(basename3);
 }
-function extractSedInPlaceFiles(segment) {
-  if (!segmentCommandIs(segment, "sed")) return [];
-  const tokens = safeShlexSplit(segment);
-  if (tokens === null) return [];
-  const rest = tokens.slice(1);
-  const inPlaceIdx = rest.findIndex((t) => t === "--in-place" || t.startsWith("--in-place=") || /^-[a-zA-Z]*i/.test(t));
-  if (inPlaceIdx === -1) return [];
-  const files = [];
-  let scriptTaken = rest.some((t) => t === "-e" || t === "-f" || t.startsWith("--expression") || t.startsWith("--file"));
-  for (let i = 0; i < rest.length; i++) {
-    const t = rest[i];
-    if (i === inPlaceIdx) {
-      if (t === "-i" && rest[i + 1] === "") i++;
-      continue;
-    }
-    if (t === "-e" || t === "-f" || t === "--expression" || t === "--file") {
-      i++;
-      continue;
-    }
-    if (t.length > 1 && t.startsWith("-")) continue;
-    if (!scriptTaken) {
-      scriptTaken = true;
-      continue;
-    }
-    files.push(t);
-  }
-  return files;
+function extractCatSourceFile(cmd) {
+  const m = /^cat\s+(\S+\.(?:java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less))\s*$/.exec(cmd);
+  return m?.[1] ?? null;
 }
-function extractTeeFiles(segment) {
-  if (!segmentCommandIs(segment, "tee")) return [];
-  const tokens = safeShlexSplit(segment);
-  if (tokens === null) return [];
-  return tokens.slice(1).filter((t) => t.length > 0 && !t.startsWith("-"));
+function classifyFileExtensions(filePath) {
+  const basename3 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
+  const isEnvFile = /^\.env(\.\w+)?$/i.test(basename3);
+  const hasKnownExt = /\.(?:java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less|md|mdx|rst|txt|json|yaml|yml|toml|xml|dtsx|ampkg|xaml|conf|cfg|ini|properties|sql|ps1|psm1|env)$/i.test(filePath);
+  if (!hasKnownExt && !isEnvFile) return null;
+  const isSql = /\.sql$/i.test(filePath);
+  const isDoc = /\.(?:md|mdx|rst|txt)$/i.test(filePath);
+  const isEnv = isEnvFile || /\.env$/i.test(filePath);
+  const isConfig = /\.(?:json|yaml|yml|toml|conf|cfg|ini|properties)$/i.test(filePath);
+  const isXml = /\.(?:xml|dtsx|ampkg|xaml)$/i.test(filePath);
+  return { isDoc, isEnv, isConfig, isSql, isXml };
 }
-function extractRedirectTargets(segment) {
-  const targets = [];
-  const re = /(?:^|\s)[0-9]?>>?\s*("[^"]*"|'[^']*'|[^\s|&<>]+)/g;
-  let m;
-  while ((m = re.exec(segment)) !== null) {
-    const raw = m[1];
-    targets.push(raw.length >= 2 && (raw[0] === '"' || raw[0] === "'") ? raw.slice(1, -1) : raw);
-  }
-  return targets;
-}
-function extractGitRestorePathspecs(cmd) {
-  const m = /^\s*git\s+restore\b(.*)$/i.exec(cmd);
-  if (m === null) return [];
-  const tokens = safeShlexSplit(m[1] ?? "");
-  if (tokens === null) return [];
-  const dashDash = tokens.indexOf("--");
-  if (dashDash !== -1) return tokens.slice(dashDash + 1);
-  const specs = [];
-  let skipNext = false;
-  for (const t of tokens) {
-    if (skipNext) {
-      skipNext = false;
-      continue;
-    }
-    if (t === "-s" || t === "--source") {
-      skipNext = true;
-      continue;
-    }
-    if (t.startsWith("-")) continue;
-    specs.push(t);
-  }
-  return specs;
-}
-function gitRepoRoot(gitDir) {
-  const toplevel = runGit(["rev-parse", "--show-toplevel"], { cwd: gitDir, timeoutMs: 5e3 });
-  return toplevel.exitCode === 0 && toplevel.stdout.trim() !== "" ? toplevel.stdout.trim() : gitDir;
-}
-function expandGitPathspecs(specs, gitDir) {
-  if (specs.length === 0) return [];
-  const listed = runGit(["ls-files", "--full-name", "--", ...specs], { cwd: gitDir, timeoutMs: 5e3 });
-  if (listed.exitCode !== 0) return [];
-  const repoRoot = gitRepoRoot(gitDir);
-  return listed.stdout.split("\n").map((l) => l.trim()).filter((l) => l.length > 0).map((rel) => resolveIndexPath(rel, repoRoot));
-}
-function workingTreeStatusPaths(gitDir) {
-  const status = runGit(["status", "--porcelain"], { cwd: gitDir, timeoutMs: 5e3 });
-  if (status.exitCode !== 0) return [];
-  const repoRoot = gitRepoRoot(gitDir);
-  const out = [];
-  for (const line of status.stdout.split("\n")) {
-    if (line.length < 4) continue;
-    let rel = line.slice(3).trim();
-    if (rel.length === 0) continue;
-    const arrow = rel.lastIndexOf(" -> ");
-    if (arrow !== -1) rel = rel.slice(arrow + 4);
-    if (rel.startsWith('"')) {
-      try {
-        rel = JSON.parse(rel);
-      } catch {
-        continue;
-      }
-    }
-    out.push(resolveIndexPath(rel, repoRoot));
-  }
-  return out;
-}
-function enqueueRewrittenPath(absPath) {
-  if (/(?:^|[/\\])(?:NUL|nul)$/.test(absPath) || absPath.replace(/\\/g, "/").endsWith("/dev/null")) return;
-  try {
-    if (!statSync4(absPath).isFile()) return;
-  } catch {
-    return;
-  }
-  enqueueDirtyPathSafe(absPath, { alreadyResolved: true });
-}
-function enqueueNonHeadMovingRewrites(cmd, rawCmd, cwd) {
-  const atCwd = (f) => resolveIndexPath(resolveCdHintPath(rawCmd, f, cwd), cwd);
-  const paths = [];
-  let needsStatusSweep = GIT_STASH_APPLY_RE.test(cmd);
-  if (GIT_RESTORE_RE.test(cmd) && !GIT_RESTORE_STAGED_ONLY_RE.test(cmd)) {
-    paths.push(...expandGitPathspecs(extractGitRestorePathspecs(cmd), cwd));
-  }
-  for (const segment of splitShellSegments(cmd)) {
-    if (PATCH_APPLY_SEGMENT_RE.test(segment) && !PATCH_APPLY_INSPECT_ONLY_RE.test(segment)) needsStatusSweep = true;
-    if (isFormatterWriteSegment(segment)) needsStatusSweep = true;
-    for (const f of extractSedInPlaceFiles(segment)) paths.push(atCwd(f));
-    for (const f of extractTeeFiles(segment)) paths.push(atCwd(f));
-    for (const f of extractRedirectTargets(segment)) paths.push(atCwd(f));
-  }
-  if (needsStatusSweep) paths.push(...workingTreeStatusPaths(cwd));
-  for (const p of paths) enqueueRewrittenPath(p);
-}
-function isTempPath(fp) {
-  const norm = fp.replace(/\\/g, "/");
-  return /^\/tmp\//i.test(norm) || /\/var\/folders\//i.test(norm) || // Anchored to a local drive root on purpose. Unanchored, this clause said yes to
-  // `//host/share/AppData/Local/Temp/x.md`, and the caller's answer to yes is to stat the path --
-  // which on Windows opens an SMB session to whatever host a command named. A temp directory is
-  // somewhere on a local volume; nothing that starts with two separators is one.
-  /^[a-z]:\/(?:[^/]+\/)*AppData\/Local\/Temp\//i.test(norm) || norm.startsWith("/c/Users/") && norm.includes("/AppData/Local/Temp/") || isUnderSystemTemp(fp);
-}
-function isOrchestratorStateFile(filePath) {
-  const basename3 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
-  return /^\.improve-state-/.test(basename3);
-}
-function extractCatSourceFile(cmd) {
-  const m = /^cat\s+(\S+\.(?:java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less))\s*$/.exec(cmd);
-  return m?.[1] ?? null;
-}
-function classifyFileExtensions(filePath) {
-  const basename3 = (filePath.includes("/") ? filePath.split("/").at(-1) : filePath.split("\\").at(-1)) ?? filePath;
-  const isEnvFile = /^\.env(\.\w+)?$/i.test(basename3);
-  const hasKnownExt = /\.(?:java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less|md|mdx|rst|txt|json|yaml|yml|toml|xml|conf|cfg|ini|properties|sql|ps1|psm1|env)$/i.test(filePath);
-  if (!hasKnownExt && !isEnvFile) return null;
-  const isSql = /\.sql$/i.test(filePath);
-  const isDoc = /\.(?:md|mdx|rst|txt)$/i.test(filePath);
-  const isEnv = isEnvFile || /\.env$/i.test(filePath);
-  const isConfig = /\.(?:json|yaml|yml|toml|conf|cfg|ini|properties)$/i.test(filePath);
-  return { isDoc, isEnv, isConfig, isSql };
-}
-function classifyDocConfig(filePath) {
-  const isDoc = /\.(?:md|mdx|rst|txt)$/i.test(filePath);
-  const isConfig = /\.(?:json|yaml|yml|toml|conf|cfg|ini|properties)$/i.test(filePath);
-  const isSql = /\.sql$/i.test(filePath);
-  return { isDoc, isConfig, isSql };
+function classifyDocConfig(filePath) {
+  const isDoc = /\.(?:md|mdx|rst|txt)$/i.test(filePath);
+  const isConfig = /\.(?:json|yaml|yml|toml|conf|cfg|ini|properties)$/i.test(filePath);
+  const isSql = /\.sql$/i.test(filePath);
+  const isXml = /\.(?:xml|dtsx|ampkg|xaml)$/i.test(filePath);
+  return { isDoc, isConfig, isSql, isXml };
 }
 function classifyCatPath(filePath, cmd0) {
   if (isTempPath(filePath)) return null;
@@ -8030,10 +7813,10 @@ function extractPowerShellFileMethodRead(cmd, event) {
   }
   const flags = classifyFileExtensions(filePath);
   if (flags === null) {
-    const { isDoc, isConfig, isSql } = classifyDocConfig(filePath);
-    return { filePath, isDoc, isEnv: false, isConfig, isSql };
+    const { isDoc, isConfig, isSql, isXml } = classifyDocConfig(filePath);
+    return { filePath, isDoc, isEnv: false, isConfig, isSql, isXml };
   }
-  return { filePath, isDoc: flags.isDoc, isEnv: flags.isEnv, isConfig: flags.isConfig, isSql: flags.isSql };
+  return { filePath, isDoc: flags.isDoc, isEnv: flags.isEnv, isConfig: flags.isConfig, isSql: flags.isSql, isXml: flags.isXml };
 }
 function extractRgSymbolSearch(cmd) {
   if (!/^(?:rg|grep)\s+/.test(cmd)) return null;
@@ -8188,7 +7971,7 @@ function pythonOpenPathsAreAllLiteral(text) {
   const calls = pythonOpenCalls(text);
   return calls.length > 0 && calls.every((call) => call.pathLiteral !== null);
 }
-var KNOWN_PYTHON_EXT_STR = "java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less|md|mdx|rst|txt|json|yaml|yml|toml|xml|html|htm|conf|cfg|ini|properties|sql|ps1|psm1|env";
+var KNOWN_PYTHON_EXT_STR = "java|py|ts|tsx|js|jsx|go|rb|rs|cpp|cc|cxx|c|h|hpp|kt|swift|cs|php|scala|clj|css|scss|sass|less|md|mdx|rst|txt|json|yaml|yml|toml|xml|dtsx|ampkg|xaml|html|htm|conf|cfg|ini|properties|sql|ps1|psm1|env";
 var OPEN_EXT = new RegExp(`\\.(?:${KNOWN_PYTHON_EXT_STR})$`, "i");
 function extractPythonFileRead(cmd) {
   let inner = cmd.trim();
@@ -8214,11 +7997,11 @@ function extractPythonFileRead(cmd) {
   const classifyResult = (filePath) => {
     const flags = classifyFileExtensions(filePath);
     if (flags !== null) {
-      return { filePath, isDoc: flags.isDoc, isConfig: flags.isConfig, isEnv: flags.isEnv, isSql: flags.isSql, isOutputFile: false };
+      return { filePath, isDoc: flags.isDoc, isConfig: flags.isConfig, isEnv: flags.isEnv, isSql: flags.isSql, isXml: flags.isXml, isOutputFile: false };
     }
-    const { isDoc, isConfig, isSql } = classifyDocConfig(filePath);
+    const { isDoc, isConfig, isSql, isXml } = classifyDocConfig(filePath);
     const isEnv = /\.env(\.\w+)?$/i.test(filePath);
-    return { filePath, isDoc, isConfig, isEnv, isSql, isOutputFile: false };
+    return { filePath, isDoc, isConfig, isEnv, isSql, isXml, isOutputFile: false };
   };
   const heredocMatch = /^python3?\s+-\s+<<\s*'?(\w+)'?\s*\n([\s\S]*?)\n\1\s*$/.exec(pythonBody);
   if (heredocMatch) {
@@ -8272,9 +8055,9 @@ function extractHeadFile(cmd) {
   const filePath = direct !== null ? direct[3] ?? direct[4] ?? direct[5] : piped[1] ?? piped[2] ?? piped[3];
   if (filePath === void 0) return null;
   if (isTempPath(filePath)) return null;
-  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh)$/i.test(filePath)) return null;
-  const { isDoc, isConfig, isSql } = classifyDocConfig(filePath);
-  return { filePath, isDoc, isConfig, isSql, n };
+  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh|xml|dtsx|ampkg|xaml)$/i.test(filePath)) return null;
+  const { isDoc, isConfig, isSql, isXml } = classifyDocConfig(filePath);
+  return { filePath, isDoc, isConfig, isSql, isXml, n };
 }
 function extractSedRange(cmd) {
   const m = /^sed\s+-n\s+(?:['"]((?:\d+,\d+p)(?:;\d+,\d+p)*)['"]|(\d+,\d+p))\s+(?:"([^"]+)"|'([^']+)'|(\S+))(?:\s+2>(?:\/dev\/null|&1))?\s*$/.exec(cmd);
@@ -8376,7 +8159,7 @@ function leadingLinesHint(lead, hintPath, start, end, flags, preHookCwd) {
   const key = resolveIndexPath(hintPath, preHookCwd ?? process.cwd());
   const prior = findRangeOverlap(getFileLineRanges(key), start, end);
   if (prior !== null) return sedOverlapHint(hintPath, prior, start, end);
-  return lead + surgicalHintForConfigDoc(hintPath, flags.isConfig, flags.isDoc, flags.isSql);
+  return lead + surgicalHintForConfigDoc(hintPath, flags.isConfig, flags.isDoc, flags.isSql, flags.isXml ?? false);
 }
 function findRangeOverlap(prior, start, end) {
   let best = null;
@@ -8433,9 +8216,9 @@ function extractTailFile(cmd) {
   const filePath = direct !== null ? direct[3] ?? direct[4] ?? direct[5] : piped[1] ?? piped[2] ?? piped[3];
   if (!filePath) return null;
   if (isTempPath(filePath)) return null;
-  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh)$/i.test(filePath)) return null;
-  const { isDoc, isConfig, isSql } = classifyDocConfig(filePath);
-  return { filePath, isDoc, isConfig, isSql };
+  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh|xml|dtsx|ampkg|xaml)$/i.test(filePath)) return null;
+  const { isDoc, isConfig, isSql, isXml } = classifyDocConfig(filePath);
+  return { filePath, isDoc, isConfig, isSql, isXml };
 }
 function extractGetContentTail(cmd) {
   const tailMatch = /-Tail\s+(\d+)/i.exec(cmd);
@@ -8450,9 +8233,9 @@ function extractGetContentTail(cmd) {
   const filePath = (beforeTail || afterTail).replace(/^["']|["']$/g, "");
   if (!filePath) return null;
   if (isTempPath(filePath)) return null;
-  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh|ps1|psm1)$/i.test(filePath)) return null;
-  const { isDoc, isConfig, isSql } = classifyDocConfig(filePath);
-  return { filePath, isDoc, isConfig, isSql };
+  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh|ps1|psm1|xml|dtsx|ampkg|xaml)$/i.test(filePath)) return null;
+  const { isDoc, isConfig, isSql, isXml } = classifyDocConfig(filePath);
+  return { filePath, isDoc, isConfig, isSql, isXml };
 }
 function extractGetContentSelectFirst(cmd) {
   const m = /^(Get-Content|gc)\s+([^|]+)\s*\|\s*(Select-Object|select)\s+(-First\s+(\d+))/i.exec(cmd);
@@ -8462,9 +8245,9 @@ function extractGetContentSelectFirst(cmd) {
   if (n <= 10) return null;
   if (!filePath) return null;
   if (isTempPath(filePath)) return null;
-  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh|ps1|psm1)$/i.test(filePath)) return null;
-  const { isDoc, isConfig, isSql } = classifyDocConfig(filePath);
-  return { filePath, isDoc, isConfig, isSql, n };
+  if (!/\.(?:ts|tsx|js|jsx|py|go|java|rs|rb|cs|md|mdx|rst|txt|json|yaml|yml|toml|sql|sh|ps1|psm1|xml|dtsx|ampkg|xaml)$/i.test(filePath)) return null;
+  const { isDoc, isConfig, isSql, isXml } = classifyDocConfig(filePath);
+  return { filePath, isDoc, isConfig, isSql, isXml, n };
 }
 function taskOutputIsJsonlTranscript(outPath) {
   let fd = null;
@@ -8839,120 +8622,549 @@ function isCompressibleSingleCommand(cmd) {
   if (hasBareBackgroundOrNewline(cmd)) return false;
   return true;
 }
-function maybeCompressRewrite(event, rawCmd, cmd) {
-  if (process.env["TOKEN_GOAT_BASH_COMPRESS"] === "0") return null;
-  if (event.raw["_tg_harness"] === "vscode") return null;
-  let cfg;
-  try {
-    cfg = loadConfig().bash_compress;
-  } catch {
-    return null;
+function extractTerminalXmlParsing(cmd) {
+  const trimmed = cmd.trim();
+  if (!trimmed) return null;
+  const selectXmlM = /\bSelect-Xml\b(?:\s+(?:-Path\s+)?["']?([^"'\s|;]+(?:\.xml|\.dtsx|\.ampkg|\.xaml))["']?)?/i.exec(trimmed);
+  if (selectXmlM) {
+    const rawPath = selectXmlM[1];
+    const filePath = rawPath && !rawPath.startsWith("-") ? rawPath : void 0;
+    return { filePath, toolOrScript: "Select-Xml" };
+  }
+  const psXmlCastM = /\[(?:xml|System\.Xml\.XmlDocument)\]/i.exec(trimmed);
+  if (psXmlCastM) {
+    const fileM = /["']([^"'\r\n]+\.(?:xml|dtsx|ampkg|xaml))["']/i.exec(trimmed) || /(?:Get-Content|gc|ReadAllText)\s+["']?([^"'\s|;)]+\.(?:xml|dtsx|ampkg|xaml))["']?/i.exec(trimmed);
+    const filePath = fileM?.[1];
+    return { filePath, toolOrScript: psXmlCastM[0] };
+  }
+  const inspectScriptM = /(?:powershell|pwsh|&|\.)?\s*["']?(\.?[/\\]?inspect_[^"'\s|;]+\.ps1)["']/i.exec(trimmed) || /\b(inspect_[^"'\s|;]+\.ps1)\b/i.exec(trimmed);
+  if (inspectScriptM) {
+    const fileM = /["']([^"'\r\n]+\.(?:xml|dtsx|ampkg|xaml))["']/i.exec(trimmed);
+    const filePath = fileM?.[1];
+    return { filePath, toolOrScript: inspectScriptM[1] ?? "inspect script" };
+  }
+  const pyXmlM = /\bpython(?:\d+(?:\.\d+)?)?(?:\.exe)?\b.*-c\s+["'].*?\b(xml\.etree|BeautifulSoup|minidom|lxml)\b/i.exec(trimmed);
+  if (pyXmlM) {
+    const fileM = /["']([^"'\r\n]+\.(?:xml|dtsx|ampkg|xaml))["']/i.exec(trimmed);
+    const filePath = fileM?.[1];
+    return { filePath, toolOrScript: `python ${pyXmlM[1]}` };
+  }
+  const cliXmlM = /\b(xmllint|xmlstarlet|xidel)\b/i.exec(trimmed);
+  if (cliXmlM) {
+    const fileM = /["']?([^"'\s|;]+\.(?:xml|dtsx|ampkg|xaml))["']?/i.exec(trimmed);
+    const rawPath = fileM?.[1];
+    const filePath = rawPath && !rawPath.startsWith("-") ? rawPath : void 0;
+    return { filePath, toolOrScript: cliXmlM[1] };
   }
-  if (!cfg.enabled) return null;
-  if (!canRunWrappedShell()) return null;
-  const gateCmd = stripTrailingStderrRedirect(cmd);
-  const detected = detectFromCommand(gateCmd, getCwd(event));
-  let filterName;
-  if (detected !== null) {
-    filterName = detected.filter.name;
-  } else if (isCompressibleSingleCommand(gateCmd)) {
-    filterName = "generic";
-  } else {
-    return null;
+  return null;
+}
+
+// src/hooks_bash_commands.ts
+var CD_PREFIX_RE = /^(?:cd\s+(?:"[^"]*"|'[^']*'|\S+)[ \t]*(?:&&|;|\r?\n)\s*)+/;
+function stripCdPrefix(cmd) {
+  const stripped = cmd.replace(CD_PREFIX_RE, "");
+  return stripped.trim() || cmd;
+}
+function stripTrailingStderrRedirect(cmd) {
+  const stripped = cmd.replace(/\s*2>&1\s*$/, "");
+  return stripped.trim() || cmd;
+}
+function hasTestRunScopeOrBudget(cmd) {
+  const hasTimeout = /(?:^|\s)(?:timeout(?:\.exe)?\s+\S+|--(?:test)?timeout(?:=|\s)\S+)/i.test(cmd);
+  const hasSelector = /(?:\s::\S+|\s(?:-k|-t|-run|--(?:testNamePattern|last-failed|test|project))(?:=|\s)|\b(?:tests?|spec)\S*\.(?:[cm]?[jt]sx?|py|go|rs)\b|(?:^|\s)\.\/\S+)/i.test(cmd);
+  return hasTimeout || hasSelector;
+}
+function isDirectTestRunnerCommand(cmd) {
+  return /^(?:pytest|(?:npx\s+)?(?:jest|vitest)|go\s+test|cargo\s+test)\b/i.test(cmd);
+}
+function extractCdPrefixDirs(rawCmd) {
+  const prefixMatch = rawCmd.match(CD_PREFIX_RE);
+  if (prefixMatch === null) return [];
+  const dirs = [];
+  const segmentPattern = /cd\s+(?:"([^"]*)"|'([^']*)'|(\S+))[ \t]*(?:&&|;|\r?\n)/g;
+  let match;
+  while ((match = segmentPattern.exec(prefixMatch[0])) !== null) {
+    const dir = match[1] ?? match[2] ?? match[3];
+    if (dir !== void 0) dirs.push(dir);
   }
-  if (cfg.disabled_filters.includes(filterName)) return null;
-  const wrapped = `token-goat compress -f ${filterName} --timeout ${cfg.timeout_seconds} -c ${shellQuoteSingle(rawCmd)}`;
-  return { hookType: "rewriteInput", updatedInput: { ...event.toolInput, command: wrapped } };
+  return dirs;
 }
-var PIPELINE_PASSTHROUGH_HEADS = /* @__PURE__ */ new Set(["head", "tail", "cat", "tee", "less", "more"]);
-var CI_BUILD_TEST_FILTER_NAMES = /* @__PURE__ */ new Set([
-  "generic-ci",
-  "jest",
-  "vitest",
-  "pytest",
-  "go_test",
-  "cargo_test",
-  "cargo",
-  "go",
-  "make",
-  "cmake",
-  "gradle",
-  "maven",
-  "dotnet",
-  "turbo",
-  "nx",
-  "lerna",
-  "webpack",
-  "eslint",
-  "ruff",
-  "clippy",
-  "flake8",
-  "mypy",
-  "prettier",
-  "tsc"
-]);
-function isCiBuildTestSegment(cleaned, cwd) {
-  if (isTestRunnerCommand(cleaned) || isBuildCommand(cleaned) || isTscCommand(cleaned)) return true;
-  if (/^\s*(npm|pnpm|yarn|bun)\s+(run\s+)?(test|build|lint|typecheck|check|ci|guards)\b/i.test(cleaned)) return true;
-  if (/^\s*(cargo|go|dotnet|make|gradle|mvn|pytest|vitest|jest|eslint|ruff)\b/i.test(cleaned)) return true;
-  const detected = detectFromCommand(cleaned, cwd ?? void 0);
-  if (detected !== null && CI_BUILD_TEST_FILTER_NAMES.has(detected.filter.name)) return true;
-  return false;
+function resolveCdHintPath(rawCmd, filePath, cwd) {
+  if (extractCdPrefixDirs(rawCmd).length === 0) return filePath;
+  return resolveIndexPath(filePath, cdPrefixCwd(rawCmd, cwd));
 }
-function pipelineShapeFilter(cmd, cwd) {
-  if (hasUnquotedOperator(cmd, ["&&", "||", ";"])) {
-    const forSplit2 = cmd.replace(/\s2>(?:&1|\/dev\/null)/g, "");
-    if (hasBareBackgroundOrNewline(forSplit2)) return null;
-    const segments2 = splitShellSegments(forSplit2);
-    if (segments2.length >= 2) {
-      let recognizedCiCount = 0;
-      for (const segment of segments2) {
-        const cleaned = stripOutputPipeline(segment.trim());
-        if (cleaned.length === 0) continue;
-        if (isCiBuildTestSegment(cleaned, cwd)) {
-          recognizedCiCount++;
-        }
-      }
-      if (recognizedCiCount > 0) {
-        return filterByName("generic-ci");
+function cdPrefixCwd(rawCmd, cwd) {
+  let dir = cwd;
+  for (const target of extractCdPrefixDirs(rawCmd)) dir = resolveIndexPath(target, dir);
+  return dir;
+}
+function stripOutputPipeline(cmd) {
+  let inSingle = false;
+  let inDouble = false;
+  let cut = cmd.length;
+  let backslashes = 0;
+  for (let i = 0; i < cmd.length; i++) {
+    const ch = cmd[i];
+    if (ch === "\\") {
+      backslashes++;
+      continue;
+    }
+    const escaped = backslashes % 2 === 1;
+    backslashes = 0;
+    if (ch === "'" && !inDouble) {
+      if (!escaped) inSingle = !inSingle;
+    } else if (ch === '"' && !inSingle) {
+      if (!escaped) inDouble = !inDouble;
+    } else if (ch === "|" && !inSingle && !inDouble) {
+      if (cmd[i + 1] === "|") {
+        i++;
+        continue;
       }
+      cut = i;
+      break;
+    }
+  }
+  let base = cmd.slice(0, cut);
+  let prev;
+  do {
+    prev = base;
+    const masked = base.replace(/"((?:[^"\\]|\\.)*)"/g, (_m, inner) => '"' + " ".repeat(inner.length) + '"').replace(/'([^']*)'/g, (_m, inner) => "'" + " ".repeat(inner.length) + "'");
+    const newMasked = masked.replace(/\s*(?:[0-9]*>&[0-9]+|[0-9&]*>>?\s*(?:"[^"]*"|'[^']*'|[^\s|]+))\s*$/, "");
+    if (newMasked.length < masked.length) {
+      base = base.slice(0, newMasked.length);
     }
+  } while (base !== prev);
+  return base.trim();
+}
+function pipelineDivergenceNote(cmd, entryCommand) {
+  if (entryCommand === cmd) return "";
+  const preview = entryCommand.length > 60 ? entryCommand.slice(0, 57) + "..." : entryCommand;
+  return " (cached from a differently-piped run, `" + preview + "` \u2014 verify it covers what you need before trusting it)";
+}
+function extractCommand(event) {
+  const cmd = event.toolInput["command"];
+  return typeof cmd === "string" && cmd.trim() !== "" ? cmd.trim() : void 0;
+}
+var HEAD_MOVING_GIT_RE = /^\s*git\s+(?:checkout|switch|pull|merge|rebase|reset|cherry-pick)\b/i;
+var PATH_SCOPED_CHECKOUT_RE = /^\s*git\s+checkout\s+(?:\S.*?\s)?--(?:\s|$)/i;
+function isHeadMovingGitCommand(cmd) {
+  if (!HEAD_MOVING_GIT_RE.test(cmd)) return false;
+  if (PATH_SCOPED_CHECKOUT_RE.test(cmd)) return false;
+  return true;
+}
+var ORIG_HEAD_ELIGIBLE_GIT_RE = /^\s*git\s+(?:pull|merge|rebase)\b/i;
+var ORIG_HEAD_REFLOG_MSG_RE = /^(merge\s|rebase\s\(|pull\s)/i;
+var GIT_RESTORE_RE = /^\s*git\s+restore\b/i;
+var GIT_RESTORE_STAGED_ONLY_RE = /(?:^|\s)(?:--staged|-S)(?:\s|$)/;
+var GIT_STASH_APPLY_RE = /^\s*git\s+stash\s+(?:pop|apply)\b/i;
+var PATCH_APPLY_SEGMENT_RE = /^\s*(?:\S*[/\\])?(?:git\s+apply|patch)\b/i;
+var PATCH_APPLY_INSPECT_ONLY_RE = /(?:^|\s)--(?:check|stat|numstat|summary|dry-run)(?:\s|=|$)/i;
+function isFormatterWriteSegment(segment) {
+  return /(?:^|\s|[/\\])(?:prettier|eslint)\b/i.test(segment) && /(?:^|\s)--(?:write|fix)(?:\s|$)/i.test(segment);
+}
+function safeShlexSplit(segment) {
+  try {
+    return shlexSplit(segment);
+  } catch {
     return null;
   }
-  const forSplit = cmd.replace(/\s2>(?:&1|\/dev\/null)/g, "");
-  if (hasBareBackgroundOrNewline(forSplit)) return null;
-  const segments = splitShellSegments(forSplit);
-  if (segments.length < 2) return null;
-  for (const segment of segments.slice(1)) {
-    const head = safeShlexSplit(segment)?.[0];
-    if (head === void 0) return null;
-    if (!PIPELINE_PASSTHROUGH_HEADS.has(head.replace(/^.*[/\\]/, ""))) return null;
+}
+function segmentCommandIs(segment, name2) {
+  return new RegExp("^\\s*(?:\\S*[/\\\\])?" + name2 + "(?:\\.exe)?\\b", "i").test(segment);
+}
+function extractSedInPlaceFiles(segment) {
+  if (!segmentCommandIs(segment, "sed")) return [];
+  const tokens = safeShlexSplit(segment);
+  if (tokens === null) return [];
+  const rest = tokens.slice(1);
+  const inPlaceIdx = rest.findIndex((t) => t === "--in-place" || t.startsWith("--in-place=") || /^-[a-zA-Z]*i/.test(t));
+  if (inPlaceIdx === -1) return [];
+  const files = [];
+  let scriptTaken = rest.some((t) => t === "-e" || t === "-f" || t.startsWith("--expression") || t.startsWith("--file"));
+  for (let i = 0; i < rest.length; i++) {
+    const t = rest[i];
+    if (i === inPlaceIdx) {
+      if (t === "-i" && rest[i + 1] === "") i++;
+      continue;
+    }
+    if (t === "-e" || t === "-f" || t === "--expression" || t === "--file") {
+      i++;
+      continue;
+    }
+    if (t.length > 1 && t.startsWith("-")) continue;
+    if (!scriptTaken) {
+      scriptTaken = true;
+      continue;
+    }
+    files.push(t);
+  }
+  return files;
+}
+function extractTeeFiles(segment) {
+  if (!segmentCommandIs(segment, "tee")) return [];
+  const tokens = safeShlexSplit(segment);
+  if (tokens === null) return [];
+  return tokens.slice(1).filter((t) => t.length > 0 && !t.startsWith("-"));
+}
+function extractRedirectTargets(segment) {
+  const targets = [];
+  const re = /(?:^|\s)[0-9]?>>?\s*("[^"]*"|'[^']*'|[^\s|&<>]+)/g;
+  let m;
+  while ((m = re.exec(segment)) !== null) {
+    const raw = m[1];
+    targets.push(raw.length >= 2 && (raw[0] === '"' || raw[0] === "'") ? raw.slice(1, -1) : raw);
+  }
+  return targets;
+}
+function extractGitRestorePathspecs(cmd) {
+  const m = /^\s*git\s+restore\b(.*)$/i.exec(cmd);
+  if (m === null) return [];
+  const tokens = safeShlexSplit(m[1] ?? "");
+  if (tokens === null) return [];
+  const dashDash = tokens.indexOf("--");
+  if (dashDash !== -1) return tokens.slice(dashDash + 1);
+  const specs = [];
+  let skipNext = false;
+  for (const t of tokens) {
+    if (skipNext) {
+      skipNext = false;
+      continue;
+    }
+    if (t === "-s" || t === "--source") {
+      skipNext = true;
+      continue;
+    }
+    if (t.startsWith("-")) continue;
+    specs.push(t);
+  }
+  return specs;
+}
+function gitRepoRoot(gitDir) {
+  const toplevel = runGit(["rev-parse", "--show-toplevel"], { cwd: gitDir, timeoutMs: 5e3 });
+  return toplevel.exitCode === 0 && toplevel.stdout.trim() !== "" ? toplevel.stdout.trim() : gitDir;
+}
+function expandGitPathspecs(specs, gitDir) {
+  if (specs.length === 0) return [];
+  const listed = runGit(["ls-files", "--full-name", "--", ...specs], { cwd: gitDir, timeoutMs: 5e3 });
+  if (listed.exitCode !== 0) return [];
+  const repoRoot = gitRepoRoot(gitDir);
+  return listed.stdout.split("\n").map((l) => l.trim()).filter((l) => l.length > 0).map((rel) => resolveIndexPath(rel, repoRoot));
+}
+function workingTreeStatusPaths(gitDir) {
+  const status = runGit(["status", "--porcelain"], { cwd: gitDir, timeoutMs: 5e3 });
+  if (status.exitCode !== 0) return [];
+  const repoRoot = gitRepoRoot(gitDir);
+  const out = [];
+  for (const line of status.stdout.split("\n")) {
+    if (line.length < 4) continue;
+    let rel = line.slice(3).trim();
+    if (rel.length === 0) continue;
+    const arrow = rel.lastIndexOf(" -> ");
+    if (arrow !== -1) rel = rel.slice(arrow + 4);
+    if (rel.startsWith('"')) {
+      try {
+        rel = JSON.parse(rel);
+      } catch {
+        continue;
+      }
+    }
+    out.push(resolveIndexPath(rel, repoRoot));
+  }
+  return out;
+}
+function enqueueRewrittenPath(absPath) {
+  if (/(?:^|[/\\])(?:NUL|nul)$/.test(absPath) || absPath.replace(/\\/g, "/").endsWith("/dev/null")) return;
+  try {
+    if (!statSync5(absPath).isFile()) return;
+  } catch {
+    return;
+  }
+  enqueueDirtyPathSafe(absPath, { alreadyResolved: true });
+}
+function enqueueNonHeadMovingRewrites(cmd, rawCmd, cwd) {
+  const atCwd = (f) => resolveIndexPath(resolveCdHintPath(rawCmd, f, cwd), cwd);
+  const paths = [];
+  let needsStatusSweep = GIT_STASH_APPLY_RE.test(cmd);
+  if (GIT_RESTORE_RE.test(cmd) && !GIT_RESTORE_STAGED_ONLY_RE.test(cmd)) {
+    paths.push(...expandGitPathspecs(extractGitRestorePathspecs(cmd), cwd));
+  }
+  for (const segment of splitShellSegments(cmd)) {
+    if (PATCH_APPLY_SEGMENT_RE.test(segment) && !PATCH_APPLY_INSPECT_ONLY_RE.test(segment)) needsStatusSweep = true;
+    if (isFormatterWriteSegment(segment)) needsStatusSweep = true;
+    for (const f of extractSedInPlaceFiles(segment)) paths.push(atCwd(f));
+    for (const f of extractTeeFiles(segment)) paths.push(atCwd(f));
+    for (const f of extractRedirectTargets(segment)) paths.push(atCwd(f));
+  }
+  if (needsStatusSweep) paths.push(...workingTreeStatusPaths(cwd));
+  for (const p of paths) enqueueRewrittenPath(p);
+}
+var PIPELINE_PASSTHROUGH_HEADS = /* @__PURE__ */ new Set(["head", "tail", "cat", "tee", "less", "more"]);
+var CI_FILTER_NAMES = /^(?:generic-ci|jest|vitest|pytest|go_test|cargo_test|cargo|go|make|cmake|gradle|maven|dotnet|turbo|nx|lerna|webpack|eslint|ruff|clippy|flake8|mypy|prettier|tsc)$/;
+function isCiBuildTestSegment(cleaned, cwd) {
+  if (isTestRunnerCommand(cleaned) || isBuildCommand(cleaned) || isTscCommand(cleaned)) return true;
+  if (/^\s*(npm|pnpm|yarn|bun)\s+(run\s+)?(test|build|lint|typecheck|check|ci|guards)\b/i.test(cleaned)) return true;
+  if (/^\s*(cargo|go|dotnet|make|gradle|mvn|pytest|vitest|jest|eslint|ruff)\b/i.test(cleaned)) return true;
+  const detected = detectFromCommand(cleaned, cwd ?? void 0);
+  if (detected !== null && CI_FILTER_NAMES.test(detected.filter.name)) return true;
+  return false;
+}
+function pipelineShapeFilter(cmd, cwd) {
+  if (hasUnquotedOperator(cmd, ["&&", "||", ";"])) {
+    const forSplit2 = cmd.replace(/\s2>(?:&1|\/dev\/null)/g, "");
+    if (hasBareBackgroundOrNewline(forSplit2)) return null;
+    const segments2 = splitShellSegments(forSplit2);
+    if (segments2.length >= 2) {
+      let recognizedCiCount = 0;
+      for (const segment of segments2) {
+        const cleaned = stripOutputPipeline(segment.trim());
+        if (cleaned.length === 0) continue;
+        if (isCiBuildTestSegment(cleaned, cwd)) {
+          recognizedCiCount++;
+        }
+      }
+      if (recognizedCiCount > 0) {
+        return filterByName("generic-ci");
+      }
+    }
+    return null;
+  }
+  const forSplit = cmd.replace(/\s2>(?:&1|\/dev\/null)/g, "");
+  if (hasBareBackgroundOrNewline(forSplit)) return null;
+  const segments = splitShellSegments(forSplit);
+  if (segments.length < 2) return null;
+  for (const segment of segments.slice(1)) {
+    const head = safeShlexSplit(segment)?.[0];
+    if (head === void 0) return null;
+    if (!PIPELINE_PASSTHROUGH_HEADS.has(head.replace(/^.*[/\\]/, ""))) return null;
+  }
+  const detected = detectFromCommand(stripOutputPipeline(cmd), cwd ?? void 0);
+  return detected === null ? null : detected.filter;
+}
+function pureFileReadPath(cmd) {
+  const single = extractCatFile(cmd)?.filePath ?? extractHeadFile(cmd)?.filePath ?? extractTailFile(cmd)?.filePath ?? extractLineRangeRead(cmd)?.filePath;
+  if (single !== void 0) return single;
+  return singleFileCompoundReadPath(cmd);
+}
+function singleFileCompoundReadPath(cmd) {
+  const reads = extractLineRangeReadsCompound(cmd);
+  if (reads === null || reads.length !== 1) return null;
+  return reads[0]?.filePath ?? null;
+}
+function deliveredLineNumbers(cmd, lineCount) {
+  const ranged = extractLineRangeRead(cmd);
+  if (ranged !== null) {
+    const nums = [];
+    for (const [lo, hi] of ranged.ranges) for (let n = lo; n <= hi; n++) nums.push(n);
+    if (nums.length === 0) return null;
+    while (nums.length < lineCount) nums.push((nums[nums.length - 1] ?? 0) + 1);
+    return nums;
+  }
+  if (extractCatFile(cmd) !== null || extractHeadFile(cmd) !== null) return Array.from({ length: lineCount }, (_, i) => i + 1);
+  if (singleFileCompoundReadPath(cmd) !== null) return Array.from({ length: lineCount }, () => null);
+  return null;
+}
+var WHOLE_FILE_DUMP_RE = /^(?:(?:cat|type|Get-Content|gc)|(?:head|tail)[ \t]+-n[ \t]+\d+)[ \t]+(?:"([A-Za-z0-9._\-/\\:+@ ]+)"|'([A-Za-z0-9._\-/\\:+@ ]+)'|([A-Za-z0-9._\-/\\:+@]+))(?:[ \t]+2>(?:&1|\/dev\/null))?[ \t]*$/i;
+function isWholeFileDump(cmd, extractedPath) {
+  const m = WHOLE_FILE_DUMP_RE.exec(cmd);
+  if (m === null) return false;
+  const shaped = m[1] ?? m[2] ?? m[3];
+  return shaped !== void 0 && shaped === extractedPath;
+}
+function unwrapCompressCommand(executed) {
+  const t = executed.trim();
+  if (!/^(?:token-goat|tg)\s+compress\b/.test(t)) return null;
+  let argv;
+  try {
+    argv = shlexSplit(t);
+  } catch {
+    return null;
+  }
+  for (let i = 0; i + 1 < argv.length; i++) {
+    const tok = argv[i];
+    if (tok === "-c" || tok === "--cmd") return argv[i + 1] ?? null;
+    if (tok === "--cmd-b64") {
+      try {
+        return Buffer.from(argv[i + 1] ?? "", "base64").toString("utf8");
+      } catch {
+        return null;
+      }
+    }
+  }
+  return null;
+}
+function detectUnbalancedShellSyntax(cmd) {
+  let inSingle = false;
+  let inDouble = false;
+  let i = 0;
+  while (i < cmd.length) {
+    const ch = cmd[i];
+    if (inSingle) {
+      if (ch === "'") {
+        inSingle = false;
+      }
+      i++;
+      continue;
+    }
+    if (inDouble) {
+      if (ch === "\\" && i + 1 < cmd.length) {
+        i += 2;
+        continue;
+      }
+      if (ch === '"') {
+        inDouble = false;
+      }
+      i++;
+      continue;
+    }
+    if (ch === "\\" && i + 1 < cmd.length) {
+      i += 2;
+      continue;
+    }
+    if (ch === "$" && cmd[i + 1] === "(" && cmd[i + 2] === "(") {
+      let depth = 2;
+      let j = i + 3;
+      while (j < cmd.length && depth > 0) {
+        if (cmd[j] === "(") depth++;
+        else if (cmd[j] === ")") depth--;
+        j++;
+      }
+      i = j;
+      continue;
+    }
+    if (ch === "$" && cmd[i + 1] === "'") {
+      let j = i + 2;
+      let closed = false;
+      while (j < cmd.length) {
+        if (cmd[j] === "\\") {
+          j += 2;
+          continue;
+        }
+        if (cmd[j] === "'") {
+          j++;
+          closed = true;
+          break;
+        }
+        j++;
+      }
+      if (!closed) {
+        inSingle = true;
+        break;
+      }
+      i = j;
+      continue;
+    }
+    if (ch === "#" && (i === 0 || /\s/.test(cmd[i - 1] ?? ""))) {
+      const nl2 = cmd.indexOf("\n", i);
+      i = nl2 === -1 ? cmd.length : nl2 + 1;
+      continue;
+    }
+    if (ch === "'") {
+      inSingle = true;
+      i++;
+      continue;
+    }
+    if (ch === '"') {
+      inDouble = true;
+      i++;
+      continue;
+    }
+    if (ch === "<" && i + 1 < cmd.length && cmd[i + 1] === "<") {
+      if (i + 2 < cmd.length && cmd[i + 2] === "<") {
+        i += 3;
+        continue;
+      }
+      let j = i + 2;
+      let hasIndentModifier = false;
+      if (j < cmd.length && (cmd[j] === "-" || cmd[j] === "~")) {
+        hasIndentModifier = true;
+        j++;
+      }
+      while (j < cmd.length && cmd[j] === " ") {
+        j++;
+      }
+      if (j < cmd.length) {
+        let delimStart = j;
+        if (cmd[j] === '"' || cmd[j] === "'") {
+          delimStart = j + 1;
+          const quoteChar = cmd[j];
+          let delimEnd = delimStart;
+          while (delimEnd < cmd.length && cmd[delimEnd] !== quoteChar) {
+            delimEnd++;
+          }
+          if (delimEnd >= cmd.length) {
+            return "an unclosed quote in a heredoc opener";
+          }
+          j = delimEnd + 1;
+        } else {
+          let delimEnd = delimStart;
+          while (delimEnd < cmd.length && /\w/.test(cmd.charAt(delimEnd))) {
+            delimEnd++;
+          }
+          j = delimEnd;
+        }
+        const delimiter = cmd.slice(delimStart, j).replace(/["']/g, "");
+        if (delimiter) {
+          let scanPos = j;
+          let terminatorEnd = -1;
+          while (scanPos <= cmd.length) {
+            const nl2 = cmd.indexOf("\n", scanPos);
+            const lineEnd = nl2 === -1 ? cmd.length : nl2;
+            let line = cmd.slice(scanPos, lineEnd);
+            if (line.endsWith("\r")) {
+              line = line.slice(0, -1);
+            }
+            const isMatch = hasIndentModifier ? line.trim() === delimiter : line === delimiter;
+            if (isMatch) {
+              terminatorEnd = nl2 === -1 ? cmd.length : nl2 + 1;
+              break;
+            }
+            if (nl2 === -1) break;
+            scanPos = nl2 + 1;
+          }
+          if (terminatorEnd === -1) {
+            return `an unterminated heredoc (${delimiter} never appears on its own line)`;
+          }
+          i = terminatorEnd;
+          continue;
+        }
+      }
+    }
+    i++;
+  }
+  if (inSingle) {
+    return "an unclosed single quote";
+  }
+  if (inDouble) {
+    return "an unclosed double quote";
   }
-  const detected = detectFromCommand(stripOutputPipeline(cmd), cwd ?? void 0);
-  return detected === null ? null : detected.filter;
-}
-function pureFileReadPath(cmd) {
-  const single = extractCatFile(cmd)?.filePath ?? extractHeadFile(cmd)?.filePath ?? extractTailFile(cmd)?.filePath ?? extractLineRangeRead(cmd)?.filePath;
-  if (single !== void 0) return single;
-  return singleFileCompoundReadPath(cmd);
-}
-function singleFileCompoundReadPath(cmd) {
-  const reads = extractLineRangeReadsCompound(cmd);
-  if (reads === null || reads.length !== 1) return null;
-  return reads[0]?.filePath ?? null;
+  return null;
 }
-function deliveredLineNumbers(cmd, lineCount) {
-  const ranged = extractLineRangeRead(cmd);
-  if (ranged !== null) {
-    const nums = [];
-    for (const [lo, hi] of ranged.ranges) for (let n = lo; n <= hi; n++) nums.push(n);
-    if (nums.length === 0) return null;
-    while (nums.length < lineCount) nums.push((nums[nums.length - 1] ?? 0) + 1);
-    return nums;
+
+// src/hooks_bash.ts
+function maybeCompressRewrite(event, rawCmd, cmd) {
+  if (process.env["TOKEN_GOAT_BASH_COMPRESS"] === "0") return null;
+  if (event.raw["_tg_harness"] === "vscode") return null;
+  let cfg;
+  try {
+    cfg = loadConfig().bash_compress;
+  } catch {
+    return null;
   }
-  if (extractCatFile(cmd) !== null || extractHeadFile(cmd) !== null) return Array.from({ length: lineCount }, (_, i) => i + 1);
-  if (singleFileCompoundReadPath(cmd) !== null) return Array.from({ length: lineCount }, () => null);
-  return null;
+  if (!cfg.enabled) return null;
+  if (!canRunWrappedShell()) return null;
+  const gateCmd = stripTrailingStderrRedirect(cmd);
+  const detected = detectFromCommand(gateCmd, getCwd(event));
+  let filterName;
+  if (detected !== null) {
+    filterName = detected.filter.name;
+  } else if (isCompressibleSingleCommand(gateCmd)) {
+    filterName = "generic";
+  } else {
+    return null;
+  }
+  if (cfg.disabled_filters.includes(filterName)) return null;
+  const wrapped = `token-goat compress -f ${filterName} --timeout ${cfg.timeout_seconds} -c ${shellQuoteSingle(rawCmd)}`;
+  return { hookType: "rewriteInput", updatedInput: { ...event.toolInput, command: wrapped } };
 }
 function elideServedShellLines(cmd, output, priorIds, unknownLineNumbers = false) {
   if (priorIds.length === 0) return null;
@@ -9006,19 +9218,12 @@ function foldShellReadBodies(cmd, output, fileKey, cwd) {
   if (folded === null) return null;
   return { text: folded.numbered.join("\n"), folds: folded.folds };
 }
-var WHOLE_FILE_DUMP_RE = /^(?:(?:cat|type|Get-Content|gc)|(?:head|tail)[ \t]+-n[ \t]+\d+)[ \t]+(?:"([A-Za-z0-9._\-/\\:+@ ]+)"|'([A-Za-z0-9._\-/\\:+@ ]+)'|([A-Za-z0-9._\-/\\:+@]+))(?:[ \t]+2>(?:&1|\/dev\/null))?[ \t]*$/i;
-function isWholeFileDump(cmd, extractedPath) {
-  const m = WHOLE_FILE_DUMP_RE.exec(cmd);
-  if (m === null) return false;
-  const shaped = m[1] ?? m[2] ?? m[3];
-  return shaped !== void 0 && shaped === extractedPath;
-}
 function foldShellReadStructure(cmd, filePath, output, fileKey, cwd) {
   if (!isWholeFileDump(cmd, filePath)) return null;
   const originalBytes = Buffer.byteLength(output, "utf-8");
   let onDisk;
   try {
-    onDisk = statSync4(fileKey).size;
+    onDisk = statSync6(fileKey).size;
   } catch {
     return null;
   }
@@ -9123,9 +9328,9 @@ async function maybeElideServedGenericOutput(cmd, output, exitCode, cwd, cacheMi
   if (rewrittenText === null) return null;
   return emitRewrite(rewrittenText, "already-served shell output collapsed", { kind: "bash_compress:generic-served-elision", originalBytes: deliveredOutputBytes(originalBytes) });
 }
-async function maybeCompressCompoundOutput(cmd, output, exitCode, cwd, cacheMinBytes) {
+async function maybeCompressCompoundOutput(cmd, output, exitCode, cwd, cacheMinBytes, isUnwrapped = false) {
   if (process.env["TOKEN_GOAT_BASH_COMPRESS"] === "0") return null;
-  if (isCompressibleSingleCommand(cmd)) return null;
+  if (!isUnwrapped && isCompressibleSingleCommand(cmd)) return null;
   if (exitCode !== null && exitCode !== 0) return null;
   let cfg;
   try {
@@ -9135,7 +9340,7 @@ async function maybeCompressCompoundOutput(cmd, output, exitCode, cwd, cacheMinB
   }
   if (!cfg.enabled || cfg.disabled_filters.includes("generic")) return null;
   if (Buffer.byteLength(output, "utf-8") < cacheMinBytes) return null;
-  const shaped = pipelineShapeFilter(cmd, cwd);
+  const shaped = pipelineShapeFilter(cmd, cwd) ?? (isUnwrapped ? detectFromCommand(cmd, cwd ?? void 0)?.filter ?? null : null);
   const filter3 = shaped !== null && !cfg.disabled_filters.includes(shaped.name) ? shaped : filterByName("generic");
   if (filter3 === null) return null;
   const compressed = compressOutput(filter3, output, "", exitCode ?? 0, [], {
@@ -9216,168 +9421,6 @@ function maybeFoldCurlHtml(cmd, output, id) {
   }
   return emitRewrite(notice + fenced, "curl HTML body cleaned", { kind: "bash_compress:curl-html", originalBytes: deliveredOutputBytes(originalBytes) });
 }
-function unwrapCompressCommand(executed) {
-  const t = executed.trim();
-  if (!/^(?:token-goat|tg)\s+compress\b/.test(t)) return null;
-  let argv;
-  try {
-    argv = shlexSplit(t);
-  } catch {
-    return null;
-  }
-  for (let i = 0; i + 1 < argv.length; i++) {
-    const tok = argv[i];
-    if (tok === "-c" || tok === "--cmd") return argv[i + 1] ?? null;
-  }
-  return null;
-}
-function detectUnbalancedShellSyntax(cmd) {
-  let inSingle = false;
-  let inDouble = false;
-  let i = 0;
-  while (i < cmd.length) {
-    const ch = cmd[i];
-    if (inSingle) {
-      if (ch === "'") {
-        inSingle = false;
-      }
-      i++;
-      continue;
-    }
-    if (inDouble) {
-      if (ch === "\\" && i + 1 < cmd.length) {
-        i += 2;
-        continue;
-      }
-      if (ch === '"') {
-        inDouble = false;
-      }
-      i++;
-      continue;
-    }
-    if (ch === "\\" && i + 1 < cmd.length) {
-      i += 2;
-      continue;
-    }
-    if (ch === "$" && cmd[i + 1] === "(" && cmd[i + 2] === "(") {
-      let depth = 2;
-      let j = i + 3;
-      while (j < cmd.length && depth > 0) {
-        if (cmd[j] === "(") depth++;
-        else if (cmd[j] === ")") depth--;
-        j++;
-      }
-      i = j;
-      continue;
-    }
-    if (ch === "$" && cmd[i + 1] === "'") {
-      let j = i + 2;
-      let closed = false;
-      while (j < cmd.length) {
-        if (cmd[j] === "\\") {
-          j += 2;
-          continue;
-        }
-        if (cmd[j] === "'") {
-          j++;
-          closed = true;
-          break;
-        }
-        j++;
-      }
-      if (!closed) {
-        inSingle = true;
-        break;
-      }
-      i = j;
-      continue;
-    }
-    if (ch === "#" && (i === 0 || /\s/.test(cmd[i - 1] ?? ""))) {
-      const nl2 = cmd.indexOf("\n", i);
-      i = nl2 === -1 ? cmd.length : nl2 + 1;
-      continue;
-    }
-    if (ch === "'") {
-      inSingle = true;
-      i++;
-      continue;
-    }
-    if (ch === '"') {
-      inDouble = true;
-      i++;
-      continue;
-    }
-    if (ch === "<" && i + 1 < cmd.length && cmd[i + 1] === "<") {
-      if (i + 2 < cmd.length && cmd[i + 2] === "<") {
-        i += 3;
-        continue;
-      }
-      let j = i + 2;
-      let hasIndentModifier = false;
-      if (j < cmd.length && (cmd[j] === "-" || cmd[j] === "~")) {
-        hasIndentModifier = true;
-        j++;
-      }
-      while (j < cmd.length && cmd[j] === " ") {
-        j++;
-      }
-      if (j < cmd.length) {
-        let delimStart = j;
-        if (cmd[j] === '"' || cmd[j] === "'") {
-          delimStart = j + 1;
-          const quoteChar = cmd[j];
-          let delimEnd = delimStart;
-          while (delimEnd < cmd.length && cmd[delimEnd] !== quoteChar) {
-            delimEnd++;
-          }
-          if (delimEnd >= cmd.length) {
-            return "an unclosed quote in a heredoc opener";
-          }
-          j = delimEnd + 1;
-        } else {
-          let delimEnd = delimStart;
-          while (delimEnd < cmd.length && /\w/.test(cmd.charAt(delimEnd))) {
-            delimEnd++;
-          }
-          j = delimEnd;
-        }
-        const delimiter = cmd.slice(delimStart, j).replace(/["']/g, "");
-        if (delimiter) {
-          let scanPos = j;
-          let terminatorEnd = -1;
-          while (scanPos <= cmd.length) {
-            const nl2 = cmd.indexOf("\n", scanPos);
-            const lineEnd = nl2 === -1 ? cmd.length : nl2;
-            let line = cmd.slice(scanPos, lineEnd);
-            if (line.endsWith("\r")) {
-              line = line.slice(0, -1);
-            }
-            const isMatch = hasIndentModifier ? line.trim() === delimiter : line === delimiter;
-            if (isMatch) {
-              terminatorEnd = nl2 === -1 ? cmd.length : nl2 + 1;
-              break;
-            }
-            if (nl2 === -1) break;
-            scanPos = nl2 + 1;
-          }
-          if (terminatorEnd === -1) {
-            return `an unterminated heredoc (${delimiter} never appears on its own line)`;
-          }
-          i = terminatorEnd;
-          continue;
-        }
-      }
-    }
-    i++;
-  }
-  if (inSingle) {
-    return "an unclosed single quote";
-  }
-  if (inDouble) {
-    return "an unclosed double quote";
-  }
-  return null;
-}
 function preBashHandlerInner(event) {
   const rawCmd = extractCommand(event);
   if (rawCmd === void 0) return passOutput();
@@ -9408,7 +9451,7 @@ function preBashHandlerInner(event) {
   }
   const toolResults = extractToolResultsFile(cmd);
   if (toolResults !== null) {
-    const { path: outPath } = toolResults;
+    const outPath = displaySafePath(toolResults.path);
     recordStat("session_hint", 0, 0);
     return contextOutput(
       "Tool output " + outPath + ' is a plain-text artifact. Use `token-goat bash-output --file "' + outPath + '"` to read it with surgical narrowing via `--grep PATTERN` or `--tail N`, instead of reading the whole file.'
@@ -9440,6 +9483,15 @@ function preBashHandlerInner(event) {
       "Use `token-goat outline <file>` to see symbol names and line counts without loading files."
     );
   }
+  const terminalXml = extractTerminalXmlParsing(cmd);
+  if (terminalXml !== null) {
+    const { filePath, toolOrScript } = terminalXml;
+    recordStat("session_hint", 0, 0);
+    const target = filePath ? displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath) : "<file>";
+    return contextOutput(
+      `token-goat available for this file type, consider 'token-goat xml-query "${target}" "<xpath>"' or 'token-goat xml-outline "${target}"' first instead of terminal XML parsing (${toolOrScript}).`
+    );
+  }
   const singleLineRangeRead = extractLineRangeRead(cmd);
   const sedReads = singleLineRangeRead !== null ? [singleLineRangeRead] : extractLineRangeReadsCompound(cmd);
   if (sedReads !== null) {
@@ -9466,17 +9518,17 @@ function preBashHandlerInner(event) {
   }
   const gcTailResult = extractGetContentTail(cmd);
   if (gcTailResult !== null) {
-    const { filePath, isDoc, isConfig, isSql } = gcTailResult;
+    const { filePath, isDoc, isConfig, isSql, isXml } = gcTailResult;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
-    return contextOutput("`Get-Content -Tail` bypasses read hooks. " + surgicalHintForConfigDoc(hintPath, isConfig, isDoc, isSql));
+    return contextOutput("`Get-Content -Tail` bypasses read hooks. " + surgicalHintForConfigDoc(hintPath, isConfig, isDoc, isSql, isXml));
   }
   const gcSelectResult = extractGetContentSelectFirst(cmd);
   if (gcSelectResult !== null) {
-    const { filePath, isDoc, isConfig, isSql, n } = gcSelectResult;
+    const { filePath, isDoc, isConfig, isSql, isXml, n } = gcSelectResult;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
-    return contextOutput(leadingLinesHint("`Select-Object -First` bypasses read hooks. ", hintPath, 1, n, { isConfig, isDoc, isSql }, preHookCwd));
+    return contextOutput(leadingLinesHint("`Select-Object -First` bypasses read hooks. ", hintPath, 1, n, { isConfig, isDoc, isSql, isXml }, preHookCwd));
   }
   const catJsonPipe = extractCatJsonPipe(cmd);
   if (catJsonPipe !== null) {
@@ -9489,7 +9541,7 @@ function preBashHandlerInner(event) {
   }
   const catResult = extractCatFile(cmd);
   if (catResult !== null) {
-    const { filePath, isDoc, isEnv, isConfig, isSql, cmd0, advisoryOnly } = catResult;
+    const { filePath, isDoc, isEnv, isConfig, isSql, isXml, cmd0, advisoryOnly } = catResult;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
     if (isSql) {
@@ -9497,16 +9549,16 @@ function preBashHandlerInner(event) {
         "`" + cmd0 + '` loads the entire file into context. Use `token-goat section "' + hintPath + '::table_name"` to pull one CREATE TABLE / CREATE TYPE block.'
       );
     }
-    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc);
+    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc, isXml);
     return cdStripped || advisoryOnly ? contextOutput("`" + cmd0 + "` loads the entire file into context. " + hint) : denyOutput("`" + cmd0 + "` loads the entire file into context. " + hint);
   }
   const catMulti = extractCatFilesMulti(cmd);
   if (catMulti !== null) {
     recordStat("session_hint", 0, 0);
     const cmd0 = catMulti[0].cmd0;
-    const perPath = catMulti.map(({ filePath, isDoc, isEnv, isConfig, isSql }) => {
+    const perPath = catMulti.map(({ filePath, isDoc, isEnv, isConfig, isSql, isXml }) => {
       const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
-      const how = isSql ? 'token-goat section "' + hintPath + '::table_name"' : isEnv || isConfig ? 'token-goat config-get "' + hintPath + '" KEY_NAME' : isDoc ? 'token-goat section "' + hintPath + '::SectionHeading"' : 'token-goat read "' + hintPath + '::SymbolName"';
+      const how = isXml ? 'token-goat xml-outline "' + hintPath + '" or token-goat xml-query "' + hintPath + '" "<selector>"' : isSql ? 'token-goat section "' + hintPath + '::table_name"' : isEnv || isConfig ? 'token-goat config-get "' + hintPath + '" KEY_NAME' : isDoc ? 'token-goat section "' + hintPath + '::SectionHeading"' : 'token-goat read "' + hintPath + '::SymbolName"';
       return "  " + hintPath + " -> `" + how + "`";
     });
     const msg = "`" + cmd0 + "` on multiple files loads them all into context. Read each surgically instead:\n" + perPath.join("\n");
@@ -9514,19 +9566,19 @@ function preBashHandlerInner(event) {
   }
   const psGetContentResult = extractPowerShellWrappedGetContent(cmd, event);
   if (psGetContentResult !== null) {
-    const { filePath, isDoc, isEnv, isConfig, isSql } = psGetContentResult;
+    const { filePath, isDoc, isEnv, isConfig, isSql, isXml } = psGetContentResult;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
     const lead = "`Get-Content` via a `powershell -Command` wrapper bypasses read hooks and loads the entire file into context. ";
     if (isSql) {
       return contextOutput(lead + 'Use `token-goat section "' + hintPath + '::table_name"` to pull one CREATE TABLE / CREATE TYPE block.');
     }
-    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc);
+    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc, isXml);
     return cdStripped ? contextOutput(lead + hint) : denyOutput(lead + hint);
   }
   const wslCatResult = extractWslCatFile(cmd);
   if (wslCatResult !== null) {
-    const { filePath, isDoc, isEnv, isConfig, isSql } = wslCatResult;
+    const { filePath, isDoc, isEnv, isConfig, isSql, isXml } = wslCatResult;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
     if (isSql) {
@@ -9534,12 +9586,12 @@ function preBashHandlerInner(event) {
         '`cat` loads the entire file into context. Use `token-goat section "' + hintPath + '::table_name"` to pull one CREATE TABLE / CREATE TYPE block.'
       );
     }
-    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc);
+    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc, isXml);
     return cdStripped ? contextOutput("`cat` loads the entire file into context. " + hint) : denyOutput("`cat` loads the entire file into context. " + hint);
   }
   const pyRead = extractPythonFileRead(cmd);
   if (pyRead !== null) {
-    const { filePath, isDoc, isConfig, isEnv, isSql, isOutputFile } = pyRead;
+    const { filePath, isDoc, isConfig, isEnv, isSql, isXml, isOutputFile } = pyRead;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
     if (isOutputFile) {
@@ -9556,22 +9608,22 @@ function preBashHandlerInner(event) {
         'Python `open()` file reads bypass read hooks. Use `token-goat section "' + hintPath + '::table_name"` to pull one CREATE TABLE / CREATE TYPE block.'
       );
     }
-    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc);
+    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc, isXml);
     return cdStripped ? contextOutput("Python `open()` file reads bypass read hooks. " + hint) : denyOutput("Python `open()` file reads bypass read hooks. " + hint);
   }
   const tailResult = extractTailFile(cmd);
   if (tailResult !== null) {
-    const { filePath, isDoc, isConfig, isSql } = tailResult;
+    const { filePath, isDoc, isConfig, isSql, isXml } = tailResult;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
-    return contextOutput("`tail` bypasses read hooks. " + surgicalHintForConfigDoc(hintPath, isConfig, isDoc, isSql));
+    return contextOutput("`tail` bypasses read hooks. " + surgicalHintForConfigDoc(hintPath, isConfig, isDoc, isSql, isXml));
   }
   const headResult = extractHeadFile(cmd);
   if (headResult !== null) {
-    const { filePath, isDoc, isConfig, isSql, n } = headResult;
+    const { filePath, isDoc, isConfig, isSql, isXml, n } = headResult;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     recordStat("session_hint", 0, 0);
-    return contextOutput(leadingLinesHint("`head` bypasses read hooks. ", hintPath, 1, n, { isConfig, isDoc, isSql }, preHookCwd));
+    return contextOutput(leadingLinesHint("`head` bypasses read hooks. ", hintPath, 1, n, { isConfig, isDoc, isSql, isXml }, preHookCwd));
   }
   const nodeRead = extractNodeFileRead(cmd);
   if (nodeRead !== null) {
@@ -9588,14 +9640,14 @@ function preBashHandlerInner(event) {
   }
   const psMethodRead = extractPowerShellFileMethodRead(cmd, event);
   if (psMethodRead !== null) {
-    const { filePath, isDoc, isEnv, isConfig, isSql } = psMethodRead;
+    const { filePath, isDoc, isEnv, isConfig, isSql, isXml } = psMethodRead;
     const hintPath = displaySafePath(cdStripped ? resolveCdHintPath(rawCmd, filePath, hintCwd) : filePath);
     const lead = "PowerShell `[IO.File]::ReadAllText()` bypasses read hooks. ";
     if (isSql) {
       recordStat("session_hint", 0, 0);
       return contextOutput(lead + 'Use `token-goat section "' + hintPath + '::table_name"` to pull one CREATE TABLE / CREATE TYPE block.');
     }
-    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc);
+    const hint = surgicalHintFor(hintPath, isEnv, isConfig, isDoc, isXml);
     recordStat("session_hint", 0, 0);
     return cdStripped ? contextOutput(lead + hint) : denyOutput(lead + hint);
   }
@@ -9659,7 +9711,7 @@ function preBashHandlerInner(event) {
     const prevResolvedPath = prevPath !== null && commandPathIsTouchable(prevPath, event) ? resolveIndexPath(prevPath, preHookCwd ?? process.cwd()) : null;
     if (prevPath !== null && prevResolvedPath !== null && !existsSync(prevResolvedPath)) {
       clearCurlDownload(curlDl.url);
-    } else if (prevPath !== null && prevResolvedPath !== null && statSync4(prevResolvedPath).size >= loadConfig().hints.bash_dedup_min_bytes) {
+    } else if (prevPath !== null && prevResolvedPath !== null && statSync6(prevResolvedPath).size >= loadConfig().hints.bash_dedup_min_bytes) {
       recordStat("session_hint", 0, 0);
       return denyOutput(
         "Already downloaded to " + prevPath + " earlier this session. Use `rg '<pattern>' " + prevPath + '` to search it, or `token-goat read "' + prevPath + '::SectionName"` to read a part of it.'
@@ -9767,15 +9819,25 @@ function extractExitCode(raw) {
   return null;
 }
 var GH_SECURITY_PATHS = ["/security_advisories", "/advisories", "security_events"];
-var GH_SCOPE_PHRASES = ["Must have push access", "Resource not accessible by integration", "Must be an admin"];
+var GH_SCOPE_PHRASES = [
+  "Must have push access",
+  "Resource not accessible by integration",
+  "Must be an admin",
+  "You are not authorized to perform this operation"
+];
+var GH_NOT_FOUND = /^gh: .*\(HTTP 404\)|"status":\s*"404"/m;
 function buildGhApiHint(cmd, stdout, exitCode) {
   if (stdout === "" || !cmd.startsWith("gh api")) return null;
   const hints = [];
   const isSecurityPath = GH_SECURITY_PATHS.some((p) => cmd.includes(p));
   const hasScopePhrase = GH_SCOPE_PHRASES.some((p) => stdout.includes(p));
-  const failedSecurityCall = exitCode !== null && exitCode !== 0 && isSecurityPath;
-  if (hasScopePhrase || failedSecurityCall) {
+  const ambiguousSecurity404 = exitCode !== null && exitCode !== 0 && isSecurityPath && GH_NOT_FOUND.test(stdout);
+  if (hasScopePhrase) {
     hints.push("[token-goat] GitHub API scope issue: try gh auth refresh -s security_events");
+  } else if (ambiguousSecurity404) {
+    hints.push(
+      "[token-goat] GitHub answers 404 both for a resource that does not exist and for one your token cannot see: check the owner/repo spelling, then gh auth status for the security_events scope."
+    );
   }
   const trimmed = stdout.trimStart();
   if (trimmed.startsWith("{")) {
@@ -9849,6 +9911,7 @@ async function postBashHandler(event) {
   try {
     const rawCmdRaw = extractCommand(event);
     if (rawCmdRaw === void 0) return passOutput();
+    const isUnwrapped = unwrapCompressCommand(rawCmdRaw) === null;
     const rawCmd = unwrapCompressCommand(rawCmdRaw) ?? rawCmdRaw;
     const cmd = stripCdPrefix(rawCmd);
     const output = extractBashOutput(event.raw);
@@ -9932,13 +9995,19 @@ async function postBashHandler(event) {
       const gitScopedCacheId = await storeBashOutput(cmd, output, exitCode ?? 0, cwd);
       recordBashOutput(gitScopedCacheHash, gitScopedCacheId, Buffer.byteLength(output, "utf-8"));
     }
+    if (isUnwrapped && /^git(?:\s+-[^\s]+|\s+--[^\s]+)*\s+diff\b/i.test(cmd)) {
+      const unwrappedCompressed = await maybeCompressCompoundOutput(cmd, output, exitCode, cwd, cacheMinBytes, isUnwrapped);
+      if (unwrappedCompressed !== null) return unwrappedCompressed;
+    }
     const isMonitoring = getMonitoringRecallHint(cmd) !== null;
     const isFileRead = pureFileReadPath(cmd) !== null;
     if (isFileRead || !isMonitoring && !isBuildCommand(cmd) && !isCurlGetCommand(cmd)) {
       const identical = await maybeCollapseIdenticalRead(cmd, rawCmd, output, exitCode, cwd, cacheMinBytes);
       if (identical !== null) return identical;
-      const compound = await maybeCompressCompoundOutput(cmd, output, exitCode, cwd, cacheMinBytes);
-      if (compound !== null) return compound;
+      if (!isFileRead && (!isUnwrapped || !isCompressibleSingleCommand(cmd))) {
+        const compound = await maybeCompressCompoundOutput(cmd, output, exitCode, cwd, cacheMinBytes, isUnwrapped);
+        if (compound !== null) return compound;
+      }
       if (!isFileRead && extractLineRangeReadsCompound(cmd) === null) {
         const genericElision = await maybeElideServedGenericOutput(cmd, output, exitCode, cwd, cacheMinBytes);
         if (genericElision !== null) return genericElision;
@@ -10151,7 +10220,7 @@ registerHook("post_tool_use", postTaskOutputHandler, { toolName: "TaskOutput" })
 
 // src/hooks_tool_failure.ts
 init_define_import_meta_env();
-import { existsSync as existsSync2, readFileSync as readFileSync3, statSync as statSync5, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3, statSync as statSync7, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2, relative } from "node:path";
 var FAILURE_SUFFIX = ".tool-failures.json";
 var MAX_TRACKED_FAILURES = 64;
@@ -10220,7 +10289,7 @@ function diagnoseEditFailure(event, errorText) {
   const absPath = normalizePath(filePath);
   if (!existsSync2(absPath)) return null;
   try {
-    const stat = statSync5(absPath);
+    const stat = statSync7(absPath);
     if (stat.size > MAX_EDIT_DIAGNOSE_BYTES) return null;
     const fileContent = readFileSync3(absPath, "utf8");
     const relDisplay = displaySafeText(relative(process.cwd(), absPath).replace(/\\/g, "/") || absPath);
@@ -10279,6 +10348,7 @@ function postToolUseFailureHandler(event) {
     const ledger = readLedger(target);
     const priorState = ledger.seen[signature];
     const editDiagnostic = diagnoseEditFailure(event, errorText);
+    const sqlDiagnostic = diagnoseSqlFailure(event, errorText);
     if (priorState === void 0) {
       ledger.seen[signature] = false;
       ledger.order.push(signature);
@@ -10292,6 +10362,11 @@ function postToolUseFailureHandler(event) {
         writeLedger(target, ledger);
         return contextOutput(editDiagnostic);
       }
+      if (sqlDiagnostic !== null) {
+        ledger.seen[signature] = true;
+        writeLedger(target, ledger);
+        return contextOutput(sqlDiagnostic);
+      }
       return passOutput();
     }
     if (priorState) return passOutput();
@@ -10300,6 +10375,9 @@ function postToolUseFailureHandler(event) {
     if (editDiagnostic !== null) {
       return contextOutput(editDiagnostic);
     }
+    if (sqlDiagnostic !== null) {
+      return contextOutput(sqlDiagnostic);
+    }
     return contextOutput(repeatFailureNotice(toolName));
   } catch {
     return passOutput();
@@ -10576,6 +10654,37 @@ function compressGithubMcpResult(toolName, resultText) {
   const stripped = deepStrip(parsed, githubShouldStrip);
   return finishWithGenericPass(resultText, stripped);
 }
+var ATLASSIAN_TOOL_RE = /(?:jira|confluence|atlassian)/i;
+var ATLASSIAN_STRIP_EXACT_KEYS = /* @__PURE__ */ new Set([
+  "avatarUrls",
+  "avatarUrl",
+  "iconUrl",
+  "iconUrls",
+  "self",
+  "expand",
+  "schema",
+  "operations",
+  "editmeta",
+  "names",
+  "_links",
+  "_expandable",
+  "extensions",
+  "timeZone"
+]);
+function atlassianShouldStrip(key) {
+  return ATLASSIAN_STRIP_EXACT_KEYS.has(key);
+}
+function compressAtlassianMcpResult(toolName, resultText) {
+  if (!ATLASSIAN_TOOL_RE.test(toolName)) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(resultText);
+  } catch {
+    return null;
+  }
+  const stripped = deepStrip(parsed, atlassianShouldStrip);
+  return finishWithGenericPass(resultText, stripped);
+}
 var BROWSER_TOOL_RE = /^mcp__.*(?:chrome-devtools|claude-in-chrome|playwright).*__/i;
 var BROWSER_CONSOLE_METHOD_RE = /(?:^|_)(?:read|list)_console_messages$/i;
 var BROWSER_NETWORK_METHOD_RE = /(?:^|_)(?:read|list)_network_requests$/i;
@@ -10726,10 +10835,11 @@ function stripBase64DataUrls(resultText) {
 function compressMcpResultWithPacks(toolName, resultText) {
   const base64Stripped = stripBase64DataUrls(resultText);
   const text = base64Stripped ?? resultText;
-  return compressGithubMcpResult(toolName, text) ?? compressBrowserMcpResult(toolName, text) ?? compressGWorkspaceMcpResult(toolName, text) ?? base64Stripped;
+  return compressGithubMcpResult(toolName, text) ?? compressAtlassianMcpResult(toolName, text) ?? compressBrowserMcpResult(toolName, text) ?? compressGWorkspaceMcpResult(toolName, text) ?? base64Stripped;
 }
 
 // src/hooks_mcp.ts
+var MCP_OVERSIZED_THRESHOLD_BYTES = 25e3;
 function preMcpHandler(event) {
   const toolName = getToolName(event);
   if (!toolName || !event.sessionId) return passOutput();
@@ -10787,9 +10897,15 @@ function postMcpHandler(event) {
           minNetSavingsBytes: resolveMinNetSavingsBytes()
         });
         if (worthwhile) {
+          const bodyBytes = Buffer.byteLength(redactedBody, "utf-8");
+          let finalBody = redactedBody;
+          if (bodyBytes >= MCP_OVERSIZED_THRESHOLD_BYTES) {
+            const preview = clipToDeliveryCap(redactedBody, Buffer.byteLength(notice, "utf-8") + 500);
+            finalBody = preview.text + (preview.clipped ? "\n\n...[preview truncated by token-goat; use mcp-output above to query full payload]..." : "");
+          }
           return preserve(
             emitRewrite(
-              `${notice}${fenceWithMatches(redactedBody, injectionMatches, UNTRUSTED_TOOL_TAG)}`,
+              `${notice}${fenceWithMatches(finalBody, injectionMatches, UNTRUSTED_TOOL_TAG)}`,
               "mcp",
               { kind: "mcp:compress", originalBytes }
             )
@@ -10798,6 +10914,29 @@ function postMcpHandler(event) {
       }
     }
   }
+  const rawBytes = Buffer.byteLength(resultText, "utf-8");
+  if (rawBytes >= MCP_OVERSIZED_THRESHOLD_BYTES && process.env["TOKEN_GOAT_MCP_COMPRESS"] !== "0") {
+    if (id === null) id = storeMcpOutput(event.sessionId, toolName, toolInput, resultText);
+    if (id !== null) {
+      const notice = `[token-goat: oversized MCP result (${rawBytes} bytes) cached as ${id}]
+The full payload was cached to prevent harness context spill. Slicing commands:
+  token-goat mcp-output ${id} --json-query '<path>' (e.g. 'issues[*].key', 'values[*].id')
+  token-goat mcp-output ${id} --section '<heading>'
+  token-goat mcp-output ${id} --grep '<regex>' --max-matches 20
+  token-goat mcp-output ${id} --head 50
+
+`;
+      const preview = clipToDeliveryCap(redactedResult.text, Buffer.byteLength(notice, "utf-8") + 500);
+      const previewBody = preview.text + (preview.clipped ? "\n\n...[preview truncated by token-goat; use mcp-output above to query full payload]..." : "");
+      return preserve(
+        emitRewrite(
+          `${notice}${fenceWithMatches(previewBody, injectionMatches, UNTRUSTED_TOOL_TAG)}`,
+          "mcp",
+          { kind: "mcp:oversized", originalBytes: rawBytes }
+        )
+      );
+    }
+  }
   return passOrFence();
 }
 registerHook("pre_tool_use", preMcpHandler, { toolPattern: "^mcp__" });
@@ -11419,6 +11558,10 @@ async function relayInProcess(eventName, rawPayload) {
     if (!process.env["CLAUDE_CODE_SESSION_ID"] && event.sessionId) {
       process.env["CLAUDE_CODE_SESSION_ID"] = event.sessionId;
     }
+    const rawTranscriptPath = event.raw["transcript_path"];
+    if (typeof rawTranscriptPath === "string" && rawTranscriptPath !== "") {
+      setTranscriptPath(rawTranscriptPath, event.sessionId ?? "");
+    }
     if (!process.env["TRACEPARENT"] && event.traceparent) {
       process.env["TRACEPARENT"] = event.traceparent;
     }