token-goat 2.9.14 → 2.9.15

package/dist/{token-goat-chunk-DAMXYVIW.mjs → token-goat-chunk-GMQQA7E4.mjs}

@@ -20,6 +20,7 @@ import {
   isAvailable as isAvailable2,
   load,
   loadError,
+  queryJson,
   rankSimilarNames,
   resolveBody,
   resolveHandoff,
@@ -89,13 +90,15 @@ import {
   symbolNamesInFile,
   upsertNote,
   warnIfFilesStale
-} from "./token-goat-chunk-RUDOKYPJ.mjs";
+} from "./token-goat-chunk-LCZBPOIN.mjs";
 import {
   DEFAULT_RECONCILE_BUDGET_MS,
   HOOK_EVENTS,
   WEB_OUTPUT_SUBDIR,
   buildCommandManifest,
   checkSymbolBodySize,
+  cmdDescribe,
+  cmdSessionSchema,
   filterCommandManifest,
   formatCommandManifest,
   getWebOutput,
@@ -104,12 +107,11 @@ import {
   readStdinJson,
   runReconcile,
   storeWebOutput
-} from "./token-goat-chunk-ZYNNQ36L.mjs";
+} from "./token-goat-chunk-OUGNPMDA.mjs";
 import {
   AGENT_SALT_MARKER,
   CONTEXT_AUTOCOMPACT_TOKENS,
   MAX_FILES_SCANNED,
-  PARSER_FINGERPRINT,
   SESSIONS_SUBDIR,
   SKILLS_OUTPUT_SUBDIR,
   SKIP_DIRS,
@@ -123,6 +125,7 @@ import {
   buildManifestWithCount,
   buildProjectMap,
   buildStats,
+  cmdReclaimIndex,
   compactDoc,
   compactPathFor,
   confirmAndApply,
@@ -131,15 +134,11 @@ import {
   detectWalkMode,
   dirtyQueuePathFor,
   drainHeartbeatPathFor,
-  embeddingBackendLoadError,
-  embeddingsDepsAvailable,
   emptyIndexMessage,
   enqueueDirtyPathSafe,
-  ensureEmbeddingProvenance,
   extractChecklistSection,
   extractCompactFromMarker,
   extractNamedSection,
-  extractSection,
   fenceUntrusted,
   findClaudeMdFiles,
   findContentDuplicates,
@@ -166,37 +165,25 @@ import {
   getSkillFilePath,
   getTrackedFiles,
   incrementSkillHit,
-  indexFileEmbeddings,
-  indexFileSync,
-  indexedPathSpellingIsStale,
   injectionFencingEnabled,
-  isAvailable,
   isCompactFresh,
-  isEmbedFresh,
-  isEmbeddableDocument,
   isHintCategory,
-  isParseSkipEligible,
   isPrivateIpv4Octets,
   isPrivateIpv6Groups,
   isSuppressionCategory,
-  isTreeSitterAvailable,
   isWorkerRunning,
   listOutputs,
-  listSections,
   listSkills,
-  loadRegexExtractors,
   loadSessionCache,
   mapLookupBytesSaved,
   markCategoryEffective,
   markCategoryIneffective,
-  missingTreeSitterGrammarPackages,
   pruneBlockedRoot,
   pruneDeletedFiles,
   pruneOrphanedChunks,
   pruneSkillOutputs,
   pruneSystemTempFiles,
   readCompactBody,
-  readSection,
   removeFileFromIndex,
   resetHintStats,
   runContextStats,
@@ -209,13 +196,11 @@ import {
   storeCompact,
   storeOutput,
   summarizeResidentContext,
-  treeSitterCoreAvailable,
-  treeSitterCoreLoadError,
   urlPolicyDenialReason,
   visionTokensSavedByText,
   walkProject,
   writeCompact
-} from "./token-goat-chunk-IT6O3PNN.mjs";
+} from "./token-goat-chunk-BL5LNGBG.mjs";
 import {
   BASH_OUTPUT_SUBDIR,
   CompressedOutput,
@@ -243,7 +228,6 @@ import {
   estimateTokensFromLength,
   findStrayClaudeMdBlocks,
   getBashOutput,
-  getFileEntry,
   groupHasTokenGoat,
   hasManagedServer,
   installClaudeMd,
@@ -265,7 +249,6 @@ import {
   listRecentRecall,
   normalizeCommandForCacheKey,
   otherScopeHasManagedServer,
-  querySymbols,
   readCopilotMcpTools,
   readServersJson,
   searchRecall,
@@ -294,19 +277,19 @@ import {
   vscodeHooksInstalled,
   vscodeScopeFromFlags,
   vscodeUsesClaudeHooks
-} from "./token-goat-chunk-VZYD4OZB.mjs";
+} from "./token-goat-chunk-YQ7WI2CO.mjs";
 import {
   docxOutline,
   docxTables,
   docxText,
   formatDocxTables
-} from "./token-goat-chunk-4SDX3QP3.mjs";
+} from "./token-goat-chunk-5V7DAC7V.mjs";
 import {
   pptxNotesText,
   pptxOutline,
   pptxSlideText,
   pptxTextGrep
-} from "./token-goat-chunk-2ESBO4IN.mjs";
+} from "./token-goat-chunk-ASYEPR3S.mjs";
 import {
   formatXlsxColumns,
   formatXlsxRange,
@@ -315,41 +298,69 @@ import {
   querySheet,
   rangeSheet,
   xlsxColumns
-} from "./token-goat-chunk-ZFM4PWXL.mjs";
+} from "./token-goat-chunk-NU7TLMQK.mjs";
 import {
   formatCsvTable,
   parseWhereSpecs
-} from "./token-goat-chunk-EG3663UT.mjs";
+} from "./token-goat-chunk-YKG35VHC.mjs";
+import {
+  PARSER_FINGERPRINT,
+  embeddingBackendLoadError,
+  embeddingsDepsAvailable,
+  ensureEmbeddingProvenance,
+  extractSection,
+  indexFileEmbeddings,
+  indexFileSync,
+  indexedPathSpellingIsStale,
+  isAvailable,
+  isEmbedFresh,
+  isEmbeddableDocument,
+  isParseSkipEligible,
+  isTreeSitterAvailable,
+  listSections,
+  loadRegexExtractors,
+  missingTreeSitterGrammarPackages,
+  readSection,
+  treeSitterCoreAvailable,
+  treeSitterCoreLoadError
+} from "./token-goat-chunk-NDRP4KJQ.mjs";
+import {
+  getFileEntry,
+  querySymbols
+} from "./token-goat-chunk-2X2EBBC6.mjs";
 import {
   C,
   DEFAULT_MAX_AGE_MS,
   DEFAULT_MAX_COUNT,
   RESET,
-  TREE_SITTER_LANGUAGES,
   _useRichStats,
   colorStdout,
   compileCustomPatterns,
-  detectLanguage,
-  detectLanguageOfFile,
-  fenceFor,
   fg,
   formatLocalTimestamp,
-  getDb,
-  isDotenvPath,
   listBlobs,
   loadBlob,
-  nonTreeSitterLanguageCount,
   pruneBlobs,
   readUnmappedTools,
   recordStat,
-  redactIfDotenv,
   redactSecrets,
   renderShortStats,
   renderStats,
   savedTokensFromBytes,
   stripAnsi,
   summarize
-} from "./token-goat-chunk-T2IWWTHB.mjs";
+} from "./token-goat-chunk-IVUQLQWN.mjs";
+import {
+  TREE_SITTER_LANGUAGES,
+  detectLanguage,
+  detectLanguageOfFile,
+  fenceFor,
+  getDb,
+  isDotenvPath,
+  matchGroovySlashy,
+  nonTreeSitterLanguageCount,
+  redactIfDotenv
+} from "./token-goat-chunk-K7F2BFIK.mjs";
 import {
   CONFIG_KEY_ENV_OVERRIDES,
   PROJECT_LOCKED_KEYS,
@@ -377,17 +388,11 @@ import {
   saveConfig,
   validateEnumField,
   validateNumericField
-} from "./token-goat-chunk-SAQ5PG4L.mjs";
-import {
-  matchGroovySlashy
-} from "./token-goat-chunk-POBYR64E.mjs";
+} from "./token-goat-chunk-S4XRY446.mjs";
 import {
   ENV_KEYS,
   LOCK_WAIT_MS_HARDENED,
   PACKAGE_NAME,
-  UNTRUSTED_FILE_TAG,
-  UNTRUSTED_TOOL_TAG,
-  UNTRUSTED_WEB_TAG,
   VERSION,
   atomicWriteBytes,
   atomicWriteText,
@@ -399,24 +404,17 @@ import {
   dataDir,
   decodeSource,
   detectSourceEncoding,
-  displaySafeJson,
-  displaySafePath,
-  displaySafeText,
   encodeSource,
   ensureDirSync,
   ensureNewline,
   escapeRegExp,
   extractErrorMessage,
-  fenceUntrustedContent,
-  fenceUntrustedOcrText,
   foldPath,
   globalDbPath,
   installSingleFilePlugin,
   isTestFile,
   isUnderBlockedRoot,
   isWindows,
-  normalizeDarwinSystemAlias,
-  normalizePath,
   pad,
   projectScopeRoot,
   pushAll,
@@ -427,7 +425,6 @@ import {
   removeFileInScope,
   requireNonNegativeStrictInt,
   requirePositiveStrictInt,
-  resolveIndexPath,
   resolveOnPath,
   runGit,
   safeSlice,
@@ -436,7 +433,6 @@ import {
   stripOwnHooksFromMap,
   stripStaleGroupHooks,
   takeCreatedConfig,
-  toDisplayPath,
   toKB,
   tokenGoatHome,
   uninstallSingleFilePlugin,
@@ -446,7 +442,21 @@ import {
   withRetryOnLock,
   writeIfDifferent,
   writeJsonSettings
-} from "./token-goat-chunk-AMYCQJX4.mjs";
+} from "./token-goat-chunk-PM76YS22.mjs";
+import {
+  UNTRUSTED_FILE_TAG,
+  UNTRUSTED_TOOL_TAG,
+  UNTRUSTED_WEB_TAG,
+  displaySafeJson,
+  displaySafePath,
+  displaySafeText,
+  fenceUntrustedContent,
+  fenceUntrustedOcrText,
+  normalizeDarwinSystemAlias,
+  normalizePath,
+  resolveIndexPath,
+  toDisplayPath
+} from "./token-goat-chunk-ERTXEKB6.mjs";
 import {
   compileGuardedRegex
 } from "./token-goat-chunk-GMOUBOX4.mjs";
@@ -3580,9 +3590,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path40) {
-    if (path40 === void 0) return this._executableDir;
-    this._executableDir = path40;
+  executableDir(path39) {
+    if (path39 === void 0) return this._executableDir;
+    this._executableDir = path39;
     return this;
   }
   /**
@@ -3882,8 +3892,8 @@ function attemptedCommandName(argv) {
 }
 
 // src/cli.ts
-import * as fs43 from "fs";
-import * as path39 from "path";
+import * as fs42 from "fs";
+import * as path38 from "path";
 import { homedir as homedir15 } from "os";
 
 // src/walk_index.ts
@@ -5432,13 +5442,16 @@ function checkMcpProcessHealth(processes) {
   const launchers = chromeLaunchers.length + playwrightLaunchers.length;
   if (launchers > 2 || orphanedNodeProcesses.length > 0) {
     const details = [];
-    if (chromeLaunchers.length > 1) details.push(`${chromeLaunchers.length} Chrome DevTools MCP launchers`);
-    if (playwrightLaunchers.length > 1) details.push(`${playwrightLaunchers.length} Playwright MCP launchers`);
-    if (orphanedNodeProcesses.length > 0) details.push(`${orphanedNodeProcesses.length} orphaned Node process${orphanedNodeProcesses.length === 1 ? "" : "es"}`);
+    if (chromeLaunchers.length > 1) details.push(`${chromeLaunchers.length} Chrome DevTools MCP launchers (PIDs: ${chromeLaunchers.map((p) => p.processId).join(", ")})`);
+    if (playwrightLaunchers.length > 1) details.push(`${playwrightLaunchers.length} Playwright MCP launchers (PIDs: ${playwrightLaunchers.map((p) => p.processId).join(", ")})`);
+    if (orphanedNodeProcesses.length > 0) {
+      const pids = orphanedNodeProcesses.map((p) => p.processId).join(", ");
+      details.push(`${orphanedNodeProcesses.length} orphaned Node process${orphanedNodeProcesses.length === 1 ? "" : "es"} (PIDs: ${pids})`);
+    }
     return {
       name: "MCP process health",
       status: "warn",
-      message: `${details.join("; ")} detected. These are host-managed processes; close stale Copilot sessions before terminating a specific confirmed orphan.`
+      message: `${details.join("; ")} detected. These are host-managed processes left by closed terminal/CLI sessions; close stale sessions or terminate specific confirmed orphan PIDs with Stop-Process -Id <PID>.`
     };
   }
   return { name: "MCP process health", status: "ok", message: "no duplicate MCP launchers or orphaned Node processes detected" };
@@ -6356,7 +6369,7 @@ async function runDoctorAndExit(opts) {
     }
   }
   try {
-    const { checkUpdateStatus } = await import("./token-goat-chunk-7OGKZ7AP.mjs");
+    const { checkUpdateStatus } = await import("./token-goat-chunk-A4JYKD5H.mjs");
     const update = await checkUpdateStatus(1500);
     if (update.updateAvailable && update.latest) {
       console.log(`
@@ -6469,7 +6482,7 @@ function generateCompactHelp() {
     "",
     "Session: stats, waste, session-outline, session-audit, session-slice,",
     "  session-summary, context-stats, bootstrap-audit, memory, hint-stats,",
-    "  mcp-audit",
+    "  session-schema, mcp-audit",
     "",
     "Skills: skill-body, skill-compact, skill-list, skill-size, skill-history,",
     "  skill-diff, skill-section",
@@ -6482,8 +6495,8 @@ function generateCompactHelp() {
     "  bridges-status, worker, statusline, version, config, config-get,",
     "  capabilities, help",
     "",
-    "Data: note, note-add, note-get, note-list, sqlite-query, sqlite-tables,",
-    "  sqlite-schema, csv-profile, csv-query",
+    "Data: note, note-add, note-get, note-list, describe, sqlite-query,",
+    "  sqlite-tables, sqlite-schema, csv-profile, csv-query",
     "",
     "Utils: ignores, bash-history, web-history, openapi-op, openapi-outline,",
     "  gdrive-sections, screenshot, opencode-*, fetch-image, image-meta,",
@@ -7490,14 +7503,14 @@ init_define_import_meta_env();
 init_define_import_meta_env();
 var balanced = (a, b, str) => {
   const ma = a instanceof RegExp ? maybeMatch(a, str) : a;
-  const mb2 = b instanceof RegExp ? maybeMatch(b, str) : b;
-  const r = ma !== null && mb2 != null && range(ma, mb2, str);
+  const mb = b instanceof RegExp ? maybeMatch(b, str) : b;
+  const r = ma !== null && mb != null && range(ma, mb, str);
   return r && {
     start: r[0],
     end: r[1],
     pre: str.slice(0, r[0]),
     body: str.slice(r[0] + ma.length, r[1]),
-    post: str.slice(r[1] + mb2.length)
+    post: str.slice(r[1] + mb.length)
   };
 };
 var maybeMatch = (reg, str) => {
@@ -11107,14 +11120,33 @@ function cmdYamlQuery(file, yamlPath, opts) {
   process.exitCode = runYamlQuery({ file, path: yamlPath, ...opts });
 }
 function cmdXmlOutline(file, opts) {
+  const depthStr = opts.depth ?? opts.maxDepth;
   process.exitCode = runXmlOutline({
     file,
     ...opts.json === true ? { json: true } : {},
-    ...opts.maxDepth !== void 0 ? { maxDepth: requireNonNegativeInt2("--max-depth", opts.maxDepth) } : {}
+    ...depthStr !== void 0 ? { maxDepth: requireNonNegativeInt2("--max-depth", depthStr) } : {}
   });
 }
-function cmdXmlQuery(file, xmlPath, opts) {
-  process.exitCode = runXmlQuery({ file, path: xmlPath, ...opts });
+function cmdXmlQuery(file, pathOrOpts, optsMaybe) {
+  let xmlPath;
+  let opts = {};
+  if (typeof pathOrOpts === "string") {
+    xmlPath = pathOrOpts;
+    opts = optsMaybe ?? {};
+  } else if (typeof pathOrOpts === "object" && pathOrOpts !== null) {
+    opts = pathOrOpts;
+  } else if (typeof optsMaybe === "object" && optsMaybe !== null) {
+    opts = optsMaybe;
+  }
+  process.exitCode = runXmlQuery({
+    file,
+    ...xmlPath !== void 0 ? { path: xmlPath } : {},
+    ...opts.xpath !== void 0 ? { xpath: opts.xpath } : {},
+    ...opts.head !== void 0 ? { head: opts.head } : {},
+    ...opts.json === true ? { json: true } : {},
+    ...opts.withLines === true ? { withLines: true } : {},
+    ...opts.decodeEmbeddedXml === true ? { decodeEmbeddedXml: true } : {}
+  });
 }
 function cmdHtmlOutline(file, opts) {
   process.exitCode = runHtmlOutline({ file, ...opts });
@@ -11764,7 +11796,7 @@ ${msg}`;
     out(text2);
     return;
   }
-  const shrinkLine = meta.wouldShrink && meta.shrunkBytes !== null ? `Shrink: would save ${meta.bytes - meta.shrunkBytes} bytes (${meta.bytes} -> ${meta.shrunkBytes})` : "Shrink: no benefit (already small/optimal)";
+  const shrinkLine = meta.wouldShrink && meta.shrunkBytes !== null ? `Shrink: would save ${meta.bytes - meta.shrunkBytes} bytes (${meta.bytes} -> ${meta.shrunkBytes})` : !meta.shrinkable ? `Shrink: not attempted (token-goat re-encodes png, jpeg, bmp and gif; this is ${meta.format ?? "an unknown format"})` : "Shrink: no benefit (already small/optimal)";
   const lines = [
     `Dimensions: ${meta.width}x${meta.height}`,
     `Format: ${meta.format ?? "(unknown)"}`,
@@ -11865,10 +11897,10 @@ function registerFormatCommands(program2, guard) {
   program2.command("yaml-query <file> <path>").description(
     "extract one value or a projected/filtered subset from a YAML document by dot-path instead of a raw Read (same grammar as json-query)\n\npath grammar: dot-separated keys with optional bracket segments -- [n] index, [*] wildcard (projects every element/value), [field=value] filter (keeps array elements whose field stringifies to value). Examples: spec.containers[0].image, items[*].name, items[kind=Service]"
   ).option("--head <n>", "limit a projected/filtered result to the first N items").option("--json", "emit the result as JSON instead of text").action(guard(cmdYamlQuery));
-  program2.command("xml-outline <file>").description("structural summary of an XML document (element hierarchy / attribute names / child counts) instead of a raw Read").option("--json", "emit the outline as JSON instead of text").option("--max-depth <n>", "max depth of element hierarchy to show").action(guard(cmdXmlOutline));
-  program2.command("xml-query <file> <path>").description(
-    "extract elements or attributes from an XML document by tag path instead of a raw Read\n\npath grammar: slash- or dot-separated tag names with optional bracket segments and attribute selectors -- [n] index, [*] wildcard, [@attr] or [@attr=value] filter, and trailing @attr to extract attribute value. Examples: root.child, catalog/book[@id=101]/title, /feed/entry[*]/@href"
-  ).option("--head <n>", "limit a matching result list to the first N items").option("--json", "emit the result as JSON instead of text").action(guard(cmdXmlQuery));
+  program2.command("xml-outline <file>").description("structural summary of an XML document (element hierarchy / attribute names / child counts) instead of a raw Read").option("--json", "emit the outline as JSON instead of text").option("--max-depth <n>", "max depth of element hierarchy to show").option("--depth <n>", "alias for --max-depth").action(guard(cmdXmlOutline));
+  program2.command("xml-query <file> [path]").description(
+    "extract elements or attributes from an XML document by tag path or XPath expression instead of a raw Read\n\npath grammar: slash- or dot-separated tag names with optional bracket segments and attribute selectors -- [n] index, [*] wildcard, [@attr] or [@attr=value] filter, and trailing @attr to extract attribute value. Bracket clauses stack and apply left to right, so an index after a filter counts within the filtered set. A clause may also be a comparison, contains() or starts-with() on an attribute or text(), joined with and/or; a clause outside that set, such as not(), matches nothing rather than being ignored, so you get an empty result instead of the unfiltered list. Examples: root.child, catalog/book[@id=101]/title, catalog/book[@genre=Fantasy][0], /feed/entry[*]/@href, //DTS:Executable[@DTS:ExecutableType='...']"
+  ).option("--head <n>", "limit a matching result list to the first N items").option("--xpath <expression>", "query using an XPath expression").option("--with-lines", "show exact source line numbers for matched nodes").option("--decode-embedded-xml", "decode and format embedded entity-encoded XML/AML in text and attributes").option("--json", "emit the result as JSON instead of text").action(guard(cmdXmlQuery));
   program2.command("html-outline <file>").description("structural summary of an HTML document (title, doctype, landmarks, headings, tables, forms, scripts, styles) instead of a raw Read").option("--json", "emit the outline as JSON instead of text").action(guard(cmdHtmlOutline));
   program2.command("html-query <file> <selector>").description(
     'extract elements, text, or attributes from an HTML document by CSS selector instead of a raw Read\n\nselector grammar: tags, #id, .class, [attr=val], child (>), descendant (space), comma-separated union, or trailing @attr. Examples: #main, .inquiry-row, table > tbody > tr, a[href^="https"], div@id'
@@ -14011,10 +14043,10 @@ var SHELL_READER_TOKEN_RE = /\b(?:sed|grep|cat|head|tail|awk|rg|less|nl|python3?
 function escapeRegExp2(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function shellReadMatch(command, basename11) {
-  if (basename11 === "" || !SHELL_READER_TOKEN_RE.test(command)) return "none";
-  if (!command.includes(basename11)) return "none";
-  const escaped = escapeRegExp2(basename11);
+function shellReadMatch(command, basename10) {
+  if (basename10 === "" || !SHELL_READER_TOKEN_RE.test(command)) return "none";
+  if (!command.includes(basename10)) return "none";
+  const escaped = escapeRegExp2(basename10);
   const strict = new RegExp(`(?:^|["'\`/\\\\\\s])${escaped}(?:$|["'\`/\\\\\\s,;:)])`);
   return strict.test(command) ? "match" : "ambiguous";
 }
@@ -14267,13 +14299,13 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
           if (name === "Read" || name === "Skill") {
             const denyTemplate = DENY_TEMPLATES.find((t) => t.tool === name && t.re.test(text));
             if (denyTemplate !== void 0) {
-              const path40 = readPathById.get(id) ?? "";
-              const lastSlash = path40.lastIndexOf("/");
+              const path39 = readPathById.get(id) ?? "";
+              const lastSlash = path39.lastIndexOf("/");
               openDenies.push({
                 kind: denyTemplate.kind,
                 withheldBytes: parseWithheldBytes(denyTemplate.kind, text),
-                path: path40,
-                basename: lastSlash === -1 ? path40 : path40.slice(lastSlash + 1),
+                path: path39,
+                basename: lastSlash === -1 ? path39 : path39.slice(lastSlash + 1),
                 callIndexAtDeny: perCall.length,
                 compactEpochAtOpen: compactEpoch,
                 compactEpochAtWindow: null,
@@ -16654,133 +16686,6 @@ async function cmdSkillSection(nameHeading, headingArg) {
   out(extracted);
 }
 
-// src/index_reclaim.ts
-init_define_import_meta_env();
-import * as fs39 from "node:fs";
-import * as path35 from "node:path";
-var DERIVED_TABLES = ["chunk_vectors", "chunks", "refs", "symbols", "files"];
-function indexSizeBytes(dbPath) {
-  let total = 0;
-  for (const p of [dbPath, `${dbPath}-wal`]) {
-    try {
-      total += fs39.statSync(p).size;
-    } catch {
-    }
-  }
-  return total;
-}
-function comparableSizes(result) {
-  const walInFlight = result.checkpointBusy && result.afterBytes > result.beforeBytes;
-  const before = walInFlight ? result.beforeDbBytes : result.beforeBytes;
-  const after = walInFlight ? result.afterDbBytes : result.afterBytes;
-  return { before, after, freed: before - after };
-}
-function dbFileBytes(dbPath) {
-  try {
-    return fs39.statSync(dbPath).size;
-  } catch {
-    return 0;
-  }
-}
-function tableExists(db, table) {
-  const row = db.prepare(`SELECT 1 AS present FROM sqlite_master WHERE type IN ('table','view') AND name = ?`).get(table);
-  return row?.present === 1;
-}
-function reclaimIndex(dbPath, opts = {}) {
-  const rebuild = opts.rebuild === true;
-  const beforeBytes = indexSizeBytes(dbPath);
-  const beforeDbBytes = dbFileBytes(dbPath);
-  const db = getDb(dbPath);
-  const dropped = {};
-  if (rebuild) {
-    db.transaction(() => {
-      for (const table of DERIVED_TABLES) {
-        if (!tableExists(db, table)) continue;
-        const before = db.prepare(`SELECT count(*) AS c FROM "${table}"`).get().c;
-        db.prepare(`DELETE FROM "${table}"`).run();
-        dropped[table] = before;
-      }
-    }).immediate();
-    if (tableExists(db, "symbols_fts")) {
-      try {
-        db.prepare(`INSERT INTO symbols_fts(symbols_fts) VALUES('rebuild')`).run();
-      } catch {
-      }
-    }
-  }
-  const checkpointBusy = walCheckpointBusy(db);
-  const vacuumDeferred = !vacuumOrDefer(db);
-  const finalCheckpointBusy = walCheckpointBusy(db);
-  return {
-    beforeBytes,
-    afterBytes: indexSizeBytes(dbPath),
-    beforeDbBytes,
-    afterDbBytes: dbFileBytes(dbPath),
-    dropped,
-    rebuilt: rebuild,
-    checkpointBusy: checkpointBusy || finalCheckpointBusy,
-    vacuumDeferred
-  };
-}
-function vacuumOrDefer(db) {
-  try {
-    db.exec("VACUUM");
-    return true;
-  } catch (err2) {
-    const code = err2.code ?? "";
-    if (!code.startsWith("SQLITE_BUSY") && !code.startsWith("SQLITE_LOCKED")) throw err2;
-    return false;
-  }
-}
-function walCheckpointBusy(db) {
-  const rows = db.pragma("wal_checkpoint(TRUNCATE)");
-  return rows[0]?.busy === 1;
-}
-function mb(bytes) {
-  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
-}
-function cmdReclaimIndex(opts) {
-  const dbPath = opts.dbPath ?? globalDbPath();
-  if (opts.force !== true && isWorkerRunning(path35.dirname(dbPath))) {
-    throw new Error(
-      "reclaim-index: the worker daemon is running and writing to this index. Stop it first with 'token-goat worker stop', then re-run. Pass --force to proceed anyway (results may be inaccurate if the worker is really live)."
-    );
-  }
-  const result = reclaimIndex(dbPath, { rebuild: opts.rebuild === true });
-  if (opts.json === true) {
-    process.stdout.write(displaySafeJson({ dbPath, ...result }) + "\n");
-    return;
-  }
-  const { before, after, freed } = comparableSizes(result);
-  const delta = freed >= 0 ? `freed ${mb(freed)}` : `grew ${mb(-freed)}`;
-  process.stdout.write(`reclaim-index: ${displaySafeText(dbPath)}
-`);
-  process.stdout.write(`  ${mb(before)} -> ${mb(after)} (${delta})
-`);
-  if (result.rebuilt) {
-    for (const [table, n] of Object.entries(result.dropped)) {
-      process.stdout.write(`  dropped ${n} row(s) from ${displaySafeText(table)}
-`);
-    }
-    process.stdout.write(
-      `  derived rows dropped -- run 'token-goat index' in each project to rebuild them
-`
-    );
-  }
-  if (result.vacuumDeferred) {
-    process.stdout.write(
-      `  note: VACUUM could not get an exclusive lock and was skipped, so on-disk size may be unchanged. The index itself was reclaimed; re-run 'token-goat reclaim-index' once nothing else is using the database to release the freed pages
-`
-    );
-  }
-  if (result.checkpointBusy) {
-    process.stdout.write(
-      `  note: a concurrent reader blocked WAL truncation, so some space is still held in ${path35.basename(dbPath)}-wal and the figures above count the main file only. The next checkpoint releases it
-`
-    );
-  }
-}
-
 // src/cache_session_commands.ts
 init_define_import_meta_env();
 
@@ -16868,8 +16773,8 @@ async function buildResumePacket(sessionId) {
 
 // src/cli_stats.ts
 init_define_import_meta_env();
-import * as fs40 from "node:fs";
-import * as path36 from "node:path";
+import * as fs39 from "node:fs";
+import * as path35 from "node:path";
 function writeRaw(text) {
   const payload = colorStdout() ? text : stripAnsi(text);
   process.stdout.write(ensureNewline(payload));
@@ -16881,8 +16786,8 @@ function formatTopFiles(ranked) {
   if (ranked.length === 0) return "";
   const lines = ["Top files this session:"];
   for (const { path: filePath, count } of ranked) {
-    const basename11 = path36.basename(filePath);
-    lines.push(`  ${count.toString().padStart(3)}x  ${basename11}  (${filePath})`);
+    const basename10 = path35.basename(filePath);
+    lines.push(`  ${count.toString().padStart(3)}x  ${basename10}  (${filePath})`);
   }
   return lines.join("\n");
 }
@@ -16898,12 +16803,12 @@ function renderTopSessionFiles(topN = 5) {
 }
 function renderTopSessionFilesFromDisk(topN = 5, overrideSessionsDir) {
   try {
-    const sessionsDir = overrideSessionsDir ?? path36.join(dataDir(), "sessions");
-    if (!fs40.existsSync(sessionsDir)) return "";
-    const files = fs40.readdirSync(sessionsDir).filter((f) => f.endsWith(".json")).map((f) => ({ name: f, mtime: fs40.statSync(path36.join(sessionsDir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).slice(0, 3);
+    const sessionsDir = overrideSessionsDir ?? path35.join(dataDir(), "sessions");
+    if (!fs39.existsSync(sessionsDir)) return "";
+    const files = fs39.readdirSync(sessionsDir).filter((f) => f.endsWith(".json")).map((f) => ({ name: f, mtime: fs39.statSync(path35.join(sessionsDir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).slice(0, 3);
     for (const { name } of files) {
       try {
-        const raw = fs40.readFileSync(path36.join(sessionsDir, name), "utf-8");
+        const raw = fs39.readFileSync(path35.join(sessionsDir, name), "utf-8");
         const data = JSON.parse(raw);
         const filesList = data["files"];
         if (!Array.isArray(filesList)) continue;
@@ -17442,6 +17347,8 @@ function registerSessionCommands(program2, guard) {
     ...opts.sentences !== void 0 ? { sentences: opts.sentences } : {},
     ...opts.show === true ? { show: true } : {}
   }))());
+  program2.command("session-schema [table]").description("authoritative schema discovery for Copilot session_store_sql (DuckDB/SQLite) and session SQLite tables instead of trial-and-error SELECT *").option("-j, --json", "output as JSON").action(guard(cmdSessionSchema));
+  program2.command("describe [target] [table]").description("describe columns and structure of a session store table or SQLite database file instead of querying SELECT *").option("-j, --json", "output as JSON").action(guard(cmdDescribe));
 }
 
 // src/bridges_status.ts
@@ -17780,25 +17687,25 @@ function installVerificationNotice(harness) {
 
 // src/purge.ts
 init_define_import_meta_env();
-import * as fs41 from "node:fs";
-import * as path37 from "node:path";
+import * as fs40 from "node:fs";
+import * as path36 from "node:path";
 function directorySize(root) {
   let total = 0;
   let entries;
   try {
-    entries = fs41.readdirSync(root, { withFileTypes: true });
+    entries = fs40.readdirSync(root, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const entry of entries) {
-    const full = path37.join(root, entry.name);
+    const full = path36.join(root, entry.name);
     if (entry.isDirectory()) {
       total += directorySize(full);
       continue;
     }
     if (!entry.isFile()) continue;
     try {
-      total += fs41.statSync(full).size;
+      total += fs40.statSync(full).size;
     } catch {
     }
   }
@@ -17817,7 +17724,7 @@ function purgeDataDirectories() {
     }
     const bytes = directorySize(root);
     try {
-      fs41.rmSync(root, { recursive: true, force: true });
+      fs40.rmSync(root, { recursive: true, force: true });
       result.removed.push({ path: root, bytes });
     } catch (e) {
       result.failed.push({ path: root, reason: e instanceof Error ? e.message : String(e) });
@@ -17964,8 +17871,8 @@ async function getSectionContent(fileId, heading, opts = {}) {
 
 // src/cli_bench.ts
 init_define_import_meta_env();
-import * as fs42 from "node:fs";
-import * as path38 from "node:path";
+import * as fs41 from "node:fs";
+import * as path37 from "node:path";
 var ControlFilter = class extends ToolFilter {
   constructor(name, transform) {
     super();
@@ -17986,13 +17893,13 @@ var CONTROL_FILTERS = {
 };
 var MAX_BENCH_FILE_BYTES = 5 * 1024 * 1024;
 function readCaseFile(id, filePath, what) {
-  const bytes = fs42.statSync(filePath).size;
+  const bytes = fs41.statSync(filePath).size;
   if (bytes > MAX_BENCH_FILE_BYTES) {
     throw new Error(
       `bench case ${id}: ${what} is ${bytes} bytes, over the ${MAX_BENCH_FILE_BYTES}-byte limit for a corpus file (${filePath})`
     );
   }
-  return fs42.readFileSync(filePath, "utf8");
+  return fs41.readFileSync(filePath, "utf8");
 }
 function parseCase(id, metaPath, outputPath) {
   const metaText = readCaseFile(id, metaPath, "metadata");
@@ -18027,7 +17934,7 @@ function parseCase(id, metaPath, outputPath) {
 function loadCorpus(dir) {
   let entries;
   try {
-    entries = fs42.readdirSync(dir);
+    entries = fs41.readdirSync(dir);
   } catch {
     throw new Error(`bench corpus not found: ${dir}`);
   }
@@ -18035,9 +17942,9 @@ function loadCorpus(dir) {
   for (const entry of entries.sort()) {
     if (!entry.endsWith(".json")) continue;
     const id = entry.slice(0, -".json".length);
-    const outputPath = path38.join(dir, `${id}.txt`);
-    if (!fs42.existsSync(outputPath)) throw new Error(`bench case ${id}: missing output file ${outputPath}`);
-    cases.push(parseCase(id, path38.join(dir, entry), outputPath));
+    const outputPath = path37.join(dir, `${id}.txt`);
+    if (!fs41.existsSync(outputPath)) throw new Error(`bench case ${id}: missing output file ${outputPath}`);
+    cases.push(parseCase(id, path37.join(dir, entry), outputPath));
   }
   if (cases.length === 0) throw new Error(`bench corpus is empty: ${dir}`);
   return cases;
@@ -18157,10 +18064,10 @@ function appendTsv(file, report, commit) {
     report.mustKeepTotal,
     report.coveredFilters
   ].join("	");
-  const dir = path38.dirname(path38.resolve(file));
-  fs42.mkdirSync(dir, { recursive: true });
-  const header = fs42.existsSync(file) ? "" : TSV_HEADER;
-  fs42.appendFileSync(file, header + row + "\n", "utf8");
+  const dir = path37.dirname(path37.resolve(file));
+  fs41.mkdirSync(dir, { recursive: true });
+  const header = fs41.existsSync(file) ? "" : TSV_HEADER;
+  fs41.appendFileSync(file, header + row + "\n", "utf8");
 }
 function currentCommit(cwd) {
   const opts = cwd === void 0 ? {} : { cwd };
@@ -18200,10 +18107,10 @@ function readBoundedText(text, file) {
   if (text === void 0 && file === void 0) throw new CliError("provide text or --file");
   let value;
   if (file !== void 0) {
-    if (fs43.statSync(file).size > CONTENT_MAX_INPUT_CHARS) {
+    if (fs42.statSync(file).size > CONTENT_MAX_INPUT_CHARS) {
       throw new CliError(`file exceeds the ${CONTENT_MAX_INPUT_CHARS}-byte safety limit`);
     }
-    value = fs43.readFileSync(file, "utf8");
+    value = fs42.readFileSync(file, "utf8");
   } else {
     if (text === void 0) throw new CliError("provide text or --file");
     value = text;
@@ -18273,12 +18180,17 @@ function requirePositiveInt2(flag, raw) {
   return n;
 }
 async function cmdSemantic(query, opts) {
+  if (!query && !opts.preflight && !opts.warm) {
+    throw new CliError("missing required argument: query");
+  }
   const limit = opts.limit !== void 0 ? requireNonNegativeInt2("--limit", opts.limit) : 20;
-  const { text, code } = await runSemantic(query, {
+  const { text, code } = await runSemantic(query ?? "", {
     limit,
     ...opts.json === true ? { json: true } : {},
     ...opts.grep !== void 0 ? { grep: opts.grep } : {},
-    ...opts.excludeTests === true ? { excludeTests: true } : {}
+    ...opts.excludeTests === true ? { excludeTests: true } : {},
+    ...opts.preflight === true ? { preflight: true } : {},
+    ...opts.warm === true ? { warm: true } : {}
   });
   (opts.json === true || code === 0 ? out : err)(text);
   process.exitCode = code;
@@ -18344,7 +18256,7 @@ async function cmdIndex(pathArg, opts = {}) {
       continue;
     }
     const sha = fingerprintFile(key);
-    if (sha === null && !fs43.existsSync(key)) continue;
+    if (sha === null && !fs42.existsSync(key)) continue;
     const entry = sha !== null ? getFileEntry(key, dbPath) : null;
     const spellingStale = entry !== null && indexedPathSpellingIsStale(entry.filePath, key);
     const parseUnchanged = !force && !spellingStale && sha !== null && entry?.sha === sha && entry.parserSha === PARSER_FINGERPRINT;
@@ -18377,7 +18289,7 @@ async function cmdIndex(pathArg, opts = {}) {
         }
         continue;
       }
-      if (!fs43.existsSync(key)) continue;
+      if (!fs42.existsSync(key)) continue;
     }
     if (!embedUnchanged) {
       paintProgress("embedding");
@@ -18437,7 +18349,7 @@ async function cmdMcpServe() {
   let StdioServerTransport;
   try {
     ;
-    ({ createMcpServer } = await import("./token-goat-chunk-YTQHZJXW.mjs"));
+    ({ createMcpServer } = await import("./token-goat-chunk-DQ4J5AFF.mjs"));
     ({ StdioServerTransport } = await import("./token-goat-chunk-EVC4TOLE.mjs"));
   } catch (err2) {
     process.stderr.write(
@@ -18462,11 +18374,11 @@ async function cmdHook(event, opts) {
   if (typeof opts.harness === "string" && opts.harness.length > 0) {
     process.env[ENV_KEYS.HARNESS_OVERRIDE] = opts.harness;
   }
-  const { relay } = await import("./token-goat-chunk-ZD4EM4LR.mjs");
+  const { relay } = await import("./token-goat-chunk-6DLVZDB6.mjs");
   await relay(event);
 }
 function projectHooksCommitNote(pathFiles, hooksConfigPath) {
-  const shim = hooksConfigPath === void 0 ? "" : ` (${displaySafePath(path39.join(path39.dirname(hooksConfigPath), HOOKS_SCRIPT_FILE))} is generated with them)`;
+  const shim = hooksConfigPath === void 0 ? "" : ` (${displaySafePath(path38.join(path38.dirname(hooksConfigPath), HOOKS_SCRIPT_FILE))} is generated with them)`;
   return `Note: ${pathFiles.map((p) => displaySafePath(p)).join(", ")} ${pathFiles.length === 1 ? "holds" : "hold"} absolute paths to node and token-goat on this machine${shim}, so do not commit them: list them in .git/info/exclude or .gitignore.`;
 }
 function visualStudioManualSteps(scope) {
@@ -18499,7 +18411,7 @@ async function cmdInstall(opts) {
   if (opts.project === true && opts.user === true) {
     throw new Error("install takes either -p/--project or --user, not both.");
   }
-  await import("./token-goat-chunk-ZD4EM4LR.mjs");
+  await import("./token-goat-chunk-6DLVZDB6.mjs");
   const scope = opts.project === true ? "project" : "user";
   if (wantsClaudeCodeBase(opts)) {
     const result = installHooks(scope);
@@ -18645,16 +18557,16 @@ async function cmdInstall(opts) {
     );
   }
   try {
-    const skillDir = path39.join(homedir15(), ".claude", "skills");
-    if (fs43.existsSync(skillDir)) {
-      const entries = fs43.readdirSync(skillDir, { withFileTypes: true });
+    const skillDir = path38.join(homedir15(), ".claude", "skills");
+    if (fs42.existsSync(skillDir)) {
+      const entries = fs42.readdirSync(skillDir, { withFileTypes: true });
       const skillNames = [];
       const sessionId = getSessionId();
       for (const entry of entries) {
         if (!entry.isDirectory()) continue;
-        const skillFile = path39.join(skillDir, entry.name, "SKILL.md");
-        if (fs43.existsSync(skillFile)) {
-          const body = fs43.readFileSync(skillFile, "utf-8");
+        const skillFile = path38.join(skillDir, entry.name, "SKILL.md");
+        if (fs42.existsSync(skillFile)) {
+          const body = fs42.readFileSync(skillFile, "utf-8");
           const compact = extractCompactFromMarker(body);
           if (compact === null) continue;
           const sourceSha = contentHash(body);
@@ -18665,9 +18577,9 @@ async function cmdInstall(opts) {
       if (skillNames.length > 0) {
         const dir = skillOutputsDir();
         ensureDirSync(dir);
-        const pregenPath = path39.join(dir, "pregen.json");
+        const pregenPath = path38.join(dir, "pregen.json");
         const pregenData = { ts: Date.now(), names: skillNames };
-        await fs43.promises.writeFile(pregenPath, JSON.stringify(pregenData, null, 2));
+        await fs42.promises.writeFile(pregenPath, JSON.stringify(pregenData, null, 2));
         out(`Pre-generated ${skillNames.length} skill compacts.`);
       }
     }
@@ -18908,6 +18820,15 @@ function _applyFiltersAndPrint(content, opts, fenceByProvenance = false, fenceTa
   return emit3(result.join("\n"));
 }
 function cmdBashOutput(id, opts) {
+  const parseVerifyThreshold = (optVal) => {
+    if (optVal === void 0 || optVal === false) return void 0;
+    if (typeof optVal === "string" && optVal.trim() !== "" && !isNaN(Number(optVal))) {
+      const parsed = Number(optVal);
+      return parsed >= 0 ? parsed : 60;
+    }
+    return 60;
+  };
+  const verifyThresholdSec = parseVerifyThreshold(opts.verifyLastWrite);
   if (opts.file !== void 0) {
     if (opts.file.includes("\0")) {
       throw new CliError("--file path contains a null byte");
@@ -18917,11 +18838,22 @@ function cmdBashOutput(id, opts) {
     }
     let content;
     try {
-      const st = fs43.statSync(opts.file);
+      const st = fs42.statSync(opts.file);
       if (st.isFIFO() || st.isSocket()) {
         throw new CliError(`--file '${opts.file}' is a special file (FIFO or socket) \u2014 only regular files are supported`);
       }
-      content = redactIfDotenv(opts.file, decodeSource(fs43.readFileSync(opts.file)));
+      if (verifyThresholdSec !== void 0) {
+        const ageSec = Math.round((Date.now() - st.mtimeMs) / 1e3);
+        if (ageSec > verifyThresholdSec) {
+          const msg = `stale write: '${opts.file}' was modified ${ageSec}s ago (threshold: ${verifyThresholdSec}s). Terminal command may have silently failed or no-op'd.`;
+          if (opts.strict === true) {
+            throw new CliError(msg);
+          }
+          process.stderr.write(`[tg: stale-write] ${msg}
+`);
+        }
+      }
+      content = redactIfDotenv(opts.file, decodeSource(fs42.readFileSync(opts.file)));
     } catch (e) {
       if (e instanceof CliError) throw e;
       throw new CliError(`cannot read file: ${opts.file}`);
@@ -18936,6 +18868,17 @@ function cmdBashOutput(id, opts) {
   if (entry === null) {
     throw new CliError(`no cached bash output for id: ${id}. If this id is from a background task, recall its output file directly with: token-goat bash-output --file <path-to-output-file>`);
   }
+  if (verifyThresholdSec !== void 0) {
+    const ageSec = Math.round((Date.now() - entry.storedAt) / 1e3);
+    if (ageSec > verifyThresholdSec) {
+      const msg = `stale write: cached output '${id}' was recorded ${ageSec}s ago (threshold: ${verifyThresholdSec}s). Terminal command may have silently failed or not re-run.`;
+      if (opts.strict === true) {
+        throw new CliError(msg);
+      }
+      process.stderr.write(`[tg: stale-write] ${msg}
+`);
+    }
+  }
   _applyFiltersAndPrint(entry.output, opts, true, UNTRUSTED_TOOL_TAG);
 }
 function cmdWebOutput(id, opts) {
@@ -18948,18 +18891,95 @@ function cmdWebOutput(id, opts) {
   }
   _applyFiltersAndPrint(content, opts, true);
 }
-function cmdMcpOutput(id, opts) {
-  if (id === void 0) {
-    throw new CliError("provide an mcp-output <id>");
-  }
-  if (!id.startsWith("mcp_")) {
-    throw new CliError(`not an mcp-output id: ${id} (expected an id starting with 'mcp_')`);
+function extractJsonFromMcpOutput(text) {
+  const trimmed = text.trim();
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    const cleaned = trimmed.replace(/^\[token-goat:[^\]]+\]\r?\n?/i, "").replace(/^<untrusted-tool-output[^>]*>\r?\n?/i, "").replace(/\r?\n?<\/untrusted-tool-output>$/i, "").trim();
+    try {
+      return JSON.parse(cleaned);
+    } catch {
+      const blockMatch = /```(?:json)?\r?\n([\s\S]*?)```/.exec(trimmed);
+      if (blockMatch && blockMatch[1]) {
+        try {
+          return JSON.parse(blockMatch[1].trim());
+        } catch {
+        }
+      }
+      throw new CliError("content is not valid JSON for --json-query");
+    }
   }
-  const entry = getBashOutput(id);
-  if (entry === null) {
-    throw new CliError(`no cached mcp output for id: ${id}. The cache may have expired; re-run the MCP tool call to repopulate it.`);
+}
+function cmdMcpOutput(id, opts) {
+  let content;
+  if (opts.file !== void 0) {
+    if (opts.file.includes("\0")) {
+      throw new CliError("--file path contains a null byte");
+    }
+    if (!fs42.existsSync(opts.file)) {
+      throw new CliError(`file not found: ${opts.file}`);
+    }
+    try {
+      const st = fs42.statSync(opts.file);
+      if (st.isFIFO() || st.isSocket()) {
+        throw new CliError(`--file '${opts.file}' is a special file (FIFO or socket) \u2014 only regular files are supported`);
+      }
+      content = decodeSource(fs42.readFileSync(opts.file));
+    } catch (e) {
+      if (e instanceof CliError) throw e;
+      throw new CliError(`cannot read file: ${opts.file}`);
+    }
+  } else if (id !== void 0) {
+    if (!id.startsWith("mcp_")) {
+      throw new CliError(`not an mcp-output id: ${id} (expected an id starting with 'mcp_')`);
+    }
+    const entry = getBashOutput(id);
+    if (entry === null) {
+      throw new CliError(`no cached mcp output for id: ${id}. The cache may have expired; re-run the MCP tool call to repopulate it.`);
+    }
+    content = entry.output;
+  } else {
+    throw new CliError("provide an mcp-output <id> or --file <path>");
+  }
+  if (opts.jsonQuery !== void 0) {
+    const data = extractJsonFromMcpOutput(content);
+    let head;
+    if (opts.head !== void 0) {
+      head = requireNonNegativeInt2("--head", opts.head);
+    }
+    const queryResult = queryJson(data, opts.jsonQuery);
+    const { head: _omittedHead, ...restOpts } = opts;
+    const printOpts = { ...restOpts, full: true };
+    if (!queryResult.fanned) {
+      const val = queryResult.items[0];
+      const formatted = opts.json === true ? displaySafeJson(val, 0) : displaySafeJson(val);
+      _applyFiltersAndPrint(formatted, printOpts, true, UNTRUSTED_TOOL_TAG);
+      return;
+    }
+    const totalCount = queryResult.items.length;
+    const limited = head !== void 0 ? queryResult.items.slice(0, head) : queryResult.items;
+    const headTruncated = limited.length < totalCount;
+    if (opts.json === true) {
+      const capped = guardJsonRows(limited);
+      const jsonText = displaySafeJson(
+        { items: capped.items, truncated: capped.truncated || headTruncated || queryResult.truncated, totalCount },
+        0
+      );
+      _applyFiltersAndPrint(jsonText, printOpts, true, UNTRUSTED_TOOL_TAG);
+    } else {
+      const lines = limited.map((item) => displaySafeJson(item, 0));
+      if (headTruncated) {
+        lines.push(`...(${totalCount - limited.length} more items elided; use --head to see more)`);
+      }
+      if (queryResult.truncated) {
+        lines.push(`...(the search stopped early at this tool's traversal limit; these are not necessarily all the matches. Narrow the path to search less of the document.)`);
+      }
+      _applyFiltersAndPrint(lines.join("\n"), printOpts, true, UNTRUSTED_TOOL_TAG);
+    }
+    return;
   }
-  _applyFiltersAndPrint(entry.output, opts, true, UNTRUSTED_TOOL_TAG);
+  _applyFiltersAndPrint(content, opts, true, UNTRUSTED_TOOL_TAG);
 }
 function cmdPrSlice(pr, slice, opts) {
   process.exitCode = runPrSlice({ pr, slice, ...opts });
@@ -18978,7 +18998,7 @@ async function cmdCompress(commandArgs, opts = {}) {
       process.exitCode = 1;
       return;
     }
-    const bashRunner = await import("./token-goat-chunk-PGGDW7DZ.mjs");
+    const bashRunner = await import("./token-goat-chunk-ATIFTMRC.mjs");
     if (opts.compress === false) {
       process.exitCode = bashRunner.runRaw(command, parseTimeout(opts.timeout, bashRunner.DEFAULT_TIMEOUT_SECONDS));
       return;
@@ -19138,7 +19158,7 @@ function buildProgram() {
       () => noteExtraFileArgs("section", spec, more, () => runSection({ spec, ...opts.json === true ? { json: true } : {} }), { noun: "spec" })
     )
   );
-  program2.command("semantic <query>").description("semantic search (falls back to full-text search)").option("-l, --limit <n>", "max results").option("-j, --json", "output as JSON").option("--grep <pattern>", "filter to hits whose file path matches this regex (literal substring if it is not valid regex); matched against the path as rendered").option("--exclude-tests", "hide hits whose file is a test file (opt-in; default output is unchanged)").action(guard(cmdSemantic));
+  program2.command("semantic [query]").description("semantic search (falls back to full-text search)").option("-l, --limit <n>", "max results").option("-j, --json", "output as JSON").option("--grep <pattern>", "filter to hits whose file path matches this regex (literal substring if it is not valid regex); matched against the path as rendered").option("--exclude-tests", "hide hits whose file is a test file (opt-in; default output is unchanged)").option("--preflight", "run semantic embedding preflight check and exit").option("--warm", "warm up the embedding model session in memory").action(guard(cmdSemantic));
   const registerSymbolListing = (name, description, run2) => {
     program2.command(`${name} <file> [more...]`).description(description).option("-j, --json", "output as JSON").option("--min-lines <n>", "only show symbols at least N lines long").option("--grep <pattern>", "only show symbols whose name matches this regex (literal substring if it is not valid regex)").option("--force-refresh", "reparse file from disk before querying (ignore stale index)").option("--stats", "add per-symbol reference count and doc-coverage flag").action(
       (file, more, opts) => runExitText(
@@ -19194,7 +19214,7 @@ function buildProgram() {
   program2.command("bench").description("replay a corpus of captured command output through the compressors; prints the byte savings ratio and a fidelity check, and exits 1 when a must-keep line was dropped").option("--corpus <dir>", "corpus directory (default: tests/fixtures/bench, relative to the working directory)").option("--tsv <path>", "append one result row, keyed by the current commit, creating the file and its header if absent").option("--validate", "score the corpus with control filters instead: proves the ratio has a floor and the fidelity guard can actually fail").option("-j, --json", "output as JSON").action(
     (opts) => runExitText(
       () => runBenchCommand({
-        corpus: opts.corpus ?? path39.join("tests", "fixtures", "bench"),
+        corpus: opts.corpus ?? path38.join("tests", "fixtures", "bench"),
         ...opts.tsv !== void 0 ? { tsv: opts.tsv } : {},
         ...opts.validate === true ? { validate: true } : {},
         ...opts.json === true ? { json: true } : {}
@@ -19215,9 +19235,9 @@ function buildProgram() {
   worker.command("status").description("check if the indexer is running").action(guard(cmdWorkerStatus));
   program2.command("stats").description("show session statistics (bare = totals only; --full for the breakdown)").option("-j, --json", "output as JSON").option("--full", "show the full breakdown (by source, by command, by day)").option("--short", "force the rich short KPI view even when stdout is not a TTY (e.g. piped)").option("--methodology", "explain local savings estimates and their billing limits").option("--window-days <days>", "days to include (0 = all time)", "30").option("--home-dir <path>", "home directory (for testing)").action(guard(cmdStats));
   program2.command("doctor").description("diagnose token-goat health").option("--context", "include context footprint analysis").option("--json", "emit check results as JSON instead of text").action(guard(cmdDoctor));
-  program2.command("bash-output [id]").description("retrieve cached bash output by ID or file").option("--head <n>", "show first N lines").option("--tail <n>", "show last N lines").option("--grep <pattern>", "filter lines matching regex").option("--max-matches <n>", "cap --grep output to the first N matching lines").option("--section <heading>", "extract a specific section from the output").option("--full", "print the entire cached entry with no head/tail elision").option("--file <path>", "read from raw output file instead of cache").option("--transcript", "parse the --file as a JSONL agent transcript: keep assistant text blocks in order before filtering").action(guard(cmdBashOutput));
+  program2.command("bash-output [id]").description("retrieve cached bash output by ID or file").option("--head <n>", "show first N lines").option("--tail <n>", "show last N lines").option("--grep <pattern>", "filter lines matching regex").option("--max-matches <n>", "cap --grep output to the first N matching lines").option("--section <heading>", "extract a specific section from the output").option("--full", "print the entire cached entry with no head/tail elision").option("--file <path>", "read from raw output file instead of cache").option("--transcript", "parse the --file as a JSONL agent transcript: keep assistant text blocks in order before filtering").option("--verify-last-write [seconds]", "verify the file or cache entry was written within [seconds] (default: 60s) to catch stale/no-op terminal output").option("--strict", "exit non-zero when --verify-last-write detects stale output").action(guard(cmdBashOutput));
   program2.command("web-output [id]").description("retrieve a cached WebFetch response body by ID").option("--head <n>", "show first N lines").option("--tail <n>", "show last N lines").option("--grep <pattern>", "filter lines matching regex").option("--max-matches <n>", "cap --grep output to the first N matching lines").option("--section <heading>", "extract a specific section from the response").option("--full", "print the entire cached entry with no head/tail elision").option("--raw", "return the body as actually fetched, before extractCleanText cleaning, instead of the default cleaned text").action(guard(cmdWebOutput));
-  program2.command("mcp-output [id]").description("retrieve a cached MCP tool result by ID (the id an MCP post_tool_use hook cached, or a `[token-goat: compressed, full via mcp-output <id>]` label points here)").option("--head <n>", "show first N lines").option("--tail <n>", "show last N lines").option("--grep <pattern>", "filter lines matching regex").option("--max-matches <n>", "cap --grep output to the first N matching lines").option("--section <heading>", "extract a specific section from the result").option("--full", "print the entire cached entry with no head/tail elision").action(guard(cmdMcpOutput));
+  program2.command("mcp-output [id]").description("retrieve a cached MCP tool result by ID (the id an MCP post_tool_use hook cached, or a `[token-goat: compressed, full via mcp-output <id>]` label points here)").option("--head <n>", "show first N lines (or first N items with --json-query)").option("--tail <n>", "show last N lines").option("--grep <pattern>", "filter lines matching regex").option("--max-matches <n>", "cap --grep output to the first N matching lines").option("--section <heading>", "extract a specific section from the result").option("--full", "print the entire cached entry with no head/tail elision").option("--json-query <path>", 'query JSON content using a dot/bracket path expression (e.g. "issues[*].key")').option("--file <path>", "read and query an on-disk tool spill file (e.g. content.json) instead of cache").option("--json", "emit query results as structured JSON envelope").action(guard(cmdMcpOutput));
   program2.command("pr-slice <pr> <slice>").description(
     "one slice of a GitHub PR (files / one file's diff / review comments / description) via `gh` instead of a full `gh pr view`/`gh pr diff` dump\n\npr is a PR number or URL. slice is one of: files (changed files with +/- counts), diff:<path> (one file's diff hunk), comments (review comments), description (title/body/metadata)"
   ).option("--repo <owner/repo>", "target repo (default: resolved from the current directory's git remote 'origin')").option("--json", "emit the slice as JSON instead of text").action(guard(cmdPrSlice));
@@ -19228,7 +19248,7 @@ function buildProgram() {
   program2.command("compress [command...]").alias("bash").alias("run").description("run a shell command (under a POSIX shell / bash) and emit a compressed view of its output").allowUnknownOption(true).option("-c, --cmd <command>", "the shell command to run, as one string (use / for paths across platforms)").option("--cmd-b64 <payload>", "the shell command as a base64-encoded string (preserves quotes, backslashes, and symbols across platforms)").option("-f, --filter <name>", "filter name (auto-detected from the command when omitted)").option("--timeout <seconds>", "wall-clock timeout in seconds (0 = built-in default)").option("--no-compress", "stream output raw without compression (debug the wrapper)").option("--profile <name>", "compression profile: aggressive | balanced | minimal").option("--max-tokens <n>", "post-compress token cap (0 = no cap)").option("-q, --quiet-success", "on exit code 0, emit only [tg: ok] summary and store full output for recall via bash-output").option("--native", "use native platform shell (e.g. cmd.exe on Windows) instead of bash, preserving Windows path backslashes").action(cmdCompress);
   program2.command("upgrade").alias("update").description("check for updates and upgrade token-goat to the latest version").option("--check", "check whether an update is available without installing").option("-j, --json", "emit version check status as JSON").action(
     (opts) => guard(async () => {
-      const { cmdUpgrade } = await import("./token-goat-chunk-7OGKZ7AP.mjs");
+      const { cmdUpgrade } = await import("./token-goat-chunk-A4JYKD5H.mjs");
       await cmdUpgrade(opts, () => cmdInstall({}));
     })()
   );