token-goat 2.9.15 → 2.9.16

package/dist/{token-goat-chunk-YQ7WI2CO.mjs → token-goat-chunk-5USHO7B6.mjs}

@@ -1,65 +1,33 @@
 import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
-import {
-  sanitizeFtsQuery
-} from "./token-goat-chunk-2X2EBBC6.mjs";
 import {
   DEFAULT_MAX_AGE_MS,
   blobPath,
-  countRedactionPlaceholders,
   isBlobStale,
   loadBlob,
-  recordStat,
-  recordUnmappedTool,
   redactSecrets,
   savedTokensFromBytes,
   storeBlob,
   stripAnsiEscapes
-} from "./token-goat-chunk-IVUQLQWN.mjs";
+} from "./token-goat-chunk-DMQ32ZSR.mjs";
+import {
+  sanitizeFtsQuery
+} from "./token-goat-chunk-63QWJ6UM.mjs";
 import {
   getDb
-} from "./token-goat-chunk-K7F2BFIK.mjs";
+} from "./token-goat-chunk-R3X5TCPB.mjs";
 import {
-  detectHarness,
   loadConfig,
-  parse,
-  shortFingerprint,
-  stringify
-} from "./token-goat-chunk-S4XRY446.mjs";
+  shortFingerprint
+} from "./token-goat-chunk-H3DXI6VD.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-EEIDFMEM.mjs";
 import {
-  assertProjectScopeTarget,
-  assertWriteInScope,
-  atomicWriteText,
-  backupFile,
-  ensureDirSync,
-  escapeRegExp,
-  extractErrorMessage,
   globalDbPath,
-  hookCommandFor,
-  hookPowershellCommand,
-  projectPathIsConsultable,
-  projectScopeRoot,
-  recordCreatedConfig,
-  removeCreatedBackups,
-  removeFileInScope,
-  runGit,
-  safeSlice,
-  stripDelimitedBlock,
-  stripOwnHooksFromMap,
-  stripStaleGroupHooks,
-  takeCreatedConfig,
-  upsertDelimitedBlock,
-  withInstallScope,
-  writeIfDifferent,
-  writeJsonSettings
-} from "./token-goat-chunk-PM76YS22.mjs";
+  runGit
+} from "./token-goat-chunk-3H6FQT62.mjs";
 import {
-  displaySafeText,
-  neutralizeOutsideFences,
-  normalizeDarwinSystemAlias,
   normalizePath,
   resolveIndexPath
 } from "./token-goat-chunk-ERTXEKB6.mjs";
@@ -67,1222 +35,10 @@ import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
 
-// src/bridges/visualstudio_install.ts
-init_define_import_meta_env();
-import * as fs2 from "node:fs";
-import * as os from "node:os";
-import * as path2 from "node:path";
-
-// src/bridges/guidance_block.ts
-init_define_import_meta_env();
-function buildGuidanceBody(fallbackToolClause, opts = {}) {
-  const gdrive = opts.gdrive !== false;
-  return [
-    "## token-goat",
-    "",
-    "**Gate \u2014 before every file read, answer one question first: is there a token-goat command that returns just what I need?** If yes, run it. A read tool invoked without answering the gate is a violation, not an oversight. The gate is per file: batched or parallel reads do not exempt it.",
-    "",
-    `This gate decides *whether* to reach for a read tool at all. ${fallbackToolClause} only pick the *fallback* once token-goat has been ruled out for this read \u2014 they never authorize skipping the gate.`,
-    "",
-    "Fallback clauses may name your harness's own native read, search, and edit tools, or its shell helpers. Shell binaries and editor programs are commands invoked through the shell tool, never tool identifiers, and must never appear in an agent's tools frontmatter or an allowed-tools list. This paragraph deliberately names no specific tool or binary: instruction-file loaders harvest such names into a tool allowlist and then warn that every one of them is unknown.",
-    "",
-    "Exemptions (gate passes, read directly): the file is under ~200 lines and you need all of it; it was never indexed (new, untracked, or generated this turn); it is a genuinely opaque binary (not an image); the target has no symbol handle (e.g. a literal mid-function).",
-    "",
-    "Failure shapes to catch yourself in, and the command that replaces each:",
-    '- a shell text search with context flags to find a function body \u2192 `read "file::symbol"`',
-    '- paging one function with view/view_range \u2192 `read "file::symbol"`',
-    '- reading a symbol plus chasing its callers and containing doc section as separate reads \u2192 `brief "file::symbol"`',
-    '- reading one heading of a large doc \u2192 `section "file::Heading"`',
-    "- searching for a symbol's callers \u2192 `refs file::symbol --callers`",
-    '- searching for a *concept* rather than a literal string \u2192 `semantic "description"`',
-    "- re-reading output you already captured \u2192 `bash-output`/`web-output`/`mcp-output` by ID",
-    "- a directory listing or recursive wildcard walk to orient in an unfamiliar repo \u2192 `map --compact`",
-    "- pulling one value or subtree out of a JSON/YAML/XML file (manifest, lockfile, spec, config) \u2192 `json-query file 'a.b.c'` / `yaml-query file 'a.b.c'` / `xml-query file 'a.b.c'`",
-    "- opening an image to check its dimensions, format, or size \u2192 `image-meta file`",
-    "- opening a screenshot, diagram, or scan to read the text in it \u2192 `image-text file`",
-    "- opening a PDF or Office document \u2192 inspect its format first, then read a narrow slice: PDF `pdf-meta`/`pdf-outline` then `pdf-locate` to find the pages and `pdf-extract` only those; Word `docx-outline` then `docx-tables`/`docx-text`; PowerPoint `pptx-outline` then `pptx-slide`/`pptx-notes`; Excel `xlsx-sheets` then `xlsx-columns`/`xlsx-head`/`xlsx-range`/`xlsx-query`",
-    "",
-    'Commands: `symbol NAME`, `read "file::symbol"`, `brief "file::symbol"`, `section "file::Heading"`, `semantic "description"`, `outline file`/`skeleton file`, `map --compact`, `refs file::symbol --callers`, `changed --symbol`, `config-get file KEY`, `json-query file \'a.b.c\'`/`yaml-query`/`xml-query`, `json-outline file`/`yaml-outline`/`xml-outline`, `bash-output`/`web-output`/`mcp-output`, ' + (gdrive ? "`gdrive-sections <file-id>`, " : "") + "`image-meta file`/`image-text file`, `pdf-meta`/`pdf-outline`/`pdf-locate`/`pdf-extract`, `docx-outline`/`docx-tables`/`docx-text`, `pptx-outline`/`pptx-slide`/`pptx-notes`/`pptx-text`, `xlsx-sheets`/`xlsx-columns`/`xlsx-head`/`xlsx-range`/`xlsx-query`.",
-    "",
-    "Sub-agent briefs must carry this gate verbatim: a sub-agent inherits none of this context and its reads spend the same token budget.",
-    "",
-    "`token-goat stats` \u2014 self-check. Flat counts during code work mean the gate is being skipped."
-  ].join("\n");
-}
-function skillDescriptionLine(gdrive) {
-  return `description: Use before reading whole files or grepping wide. token-goat commands (symbol, read, section, semantic, outline, skeleton, map, refs, changed, config-get, bash-output, web-output${gdrive ? ", gdrive-sections" : ""}) return narrow slices of code and docs at a fraction of the token cost.`;
-}
-function buildGuidanceBlock(h) {
-  return [h.beginMarker, buildGuidanceBody(h.fallbackToolClause, h.gdrive === void 0 ? {} : { gdrive: h.gdrive }), h.endMarker].join("\n");
-}
-
-// src/bridges/mcp_servers_json.ts
+// src/tool_filters/helpers.ts
 init_define_import_meta_env();
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { createRequire } from "node:module";
-import { fileURLToPath } from "node:url";
-var jsoncParser;
-function jsonc() {
-  jsoncParser ??= createRequire(import.meta.url)("jsonc-parser");
-  return jsoncParser;
-}
-function bundledCliPath() {
-  const here = path.dirname(fileURLToPath(import.meta.url));
-  const bundled = path.join(here, "token-goat.mjs");
-  if (fs.existsSync(bundled)) return bundled;
-  return path.resolve(here, "..", "..", "dist", "token-goat.mjs");
-}
-function managedServer() {
-  return {
-    type: "stdio",
-    command: process.execPath,
-    args: [bundledCliPath(), "mcp-serve"]
-  };
-}
-function isManagedServer(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
-  const entry = value;
-  const args = entry["args"];
-  return entry["type"] === "stdio" && Array.isArray(args) && args.length === 2 && typeof args[0] === "string" && path.basename(args[0]).toLowerCase() === "token-goat.mjs" && args[1] === "mcp-serve";
-}
-function readServersJson(filePath, label) {
-  const text = fs.existsSync(filePath) ? fs.readFileSync(filePath, "utf8") : "{}\n";
-  const errors = [];
-  const parsed = jsonc().parse(text, errors, { allowTrailingComma: true, disallowComments: false });
-  if (errors.length > 0) {
-    throw new Error(`malformed ${label} MCP JSON at ${filePath}`);
-  }
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error(`malformed ${label} MCP JSON at ${filePath}: expected a JSON object`);
-  }
-  return { text, value: parsed };
-}
-function serversOf(config, filePath, label, rootKey = "servers") {
-  const servers = config.value[rootKey];
-  if (servers === void 0) return {};
-  if (servers === null || typeof servers !== "object" || Array.isArray(servers)) {
-    throw new Error(`malformed ${label} MCP JSON at ${filePath}: ${rootKey} must be an object`);
-  }
-  return servers;
-}
-var FORMAT = { insertSpaces: true, tabSize: 2, eol: "\n" };
-function editAt(text, jsonPath, value) {
-  let out = text;
-  for (const e of [...jsonc().modify(text, jsonPath, value, {})].sort((a, b) => b.offset - a.offset)) {
-    out = out.slice(0, e.offset) + e.content + out.slice(e.offset + e.length);
-    if (e.content.length > 0) out = jsonc().applyEdits(out, jsonc().format(out, { offset: e.offset, length: e.content.length }, FORMAT));
-  }
-  return out;
-}
-function setTokenGoatServer(text, value, rootKey = "servers") {
-  if (value !== void 0 && /^\s*\{\s*\}\s*$/.test(text)) return `${JSON.stringify({ [rootKey]: { "token-goat": value } }, null, 2)}
-`;
-  return editAt(text, [rootKey, "token-goat"], value);
-}
-function holdsOnlyManagedServer(value) {
-  const keys = Object.keys(value);
-  if (keys.length !== 1) return false;
-  const root = keys[0];
-  if (root !== "servers" && root !== "mcpServers") return false;
-  const servers = value[root];
-  if (servers === null || typeof servers !== "object" || Array.isArray(servers)) return false;
-  const names = Object.keys(servers);
-  return names.length === 1 && names[0] === "token-goat" && isManagedServer(servers["token-goat"]);
-}
-function dropEmptyServers(text, rootKey = "servers") {
-  const parsed = parseObject(text);
-  if (parsed === null) return text;
-  const servers = parsed[rootKey];
-  if (servers === null || typeof servers !== "object" || Array.isArray(servers) || Object.keys(servers).length > 0) return text;
-  return editAt(text, [rootKey], void 0);
-}
-function parseObject(text) {
-  const parsed = jsonc().parse(text, [], { allowTrailingComma: true, disallowComments: false });
-  return parsed === null || typeof parsed !== "object" || Array.isArray(parsed) ? null : parsed;
-}
-function ensureMcpServersKey(text) {
-  const parsed = parseObject(text);
-  if (parsed === null || "mcpServers" in parsed) return text;
-  return editAt(text, ["mcpServers"], {});
-}
-function dropLoneEmptyMcpServers(text) {
-  const parsed = parseObject(text);
-  if (parsed === null || Object.keys(parsed).length !== 1) return text;
-  const mcpServers = parsed["mcpServers"];
-  if (mcpServers === null || typeof mcpServers !== "object" || Array.isArray(mcpServers) || Object.keys(mcpServers).length > 0) return text;
-  return editAt(text, ["mcpServers"], void 0);
-}
-function hasManagedServer(filePath, label, rootKey = "servers", isManaged = isManagedServer) {
-  if (!fs.existsSync(filePath)) return false;
-  try {
-    const config = readServersJson(filePath, label);
-    return isManaged(serversOf(config, filePath, label, rootKey)["token-goat"]);
-  } catch {
-    return false;
-  }
-}
-
-// src/bridges/visualstudio_install.ts
-var LABEL = "Visual Studio";
-var VISUALSTUDIO_GUIDANCE_BEGIN = "<!-- token-goat-visualstudio-begin -->";
-var VISUALSTUDIO_GUIDANCE_END = "<!-- token-goat-visualstudio-end -->";
-var SIBLING_GATE_MARKERS = [
-  ["<!-- token-goat-vscode-begin -->", "<!-- token-goat-vscode-end -->"],
-  ["<!-- token-goat-begin -->", "<!-- token-goat-end -->"]
-];
-function visualStudioUserMcpPath() {
-  return path2.join(os.homedir(), ".mcp.json");
-}
-function visualStudioProjectMcpPath(projectRoot = process.cwd()) {
-  return path2.join(path2.resolve(projectRoot), ".mcp.json");
-}
-function visualStudioMcpPath(opts = {}) {
-  return opts.project === true ? visualStudioProjectMcpPath(opts.projectRoot) : visualStudioUserMcpPath();
-}
-function otherScopeMcpPath(opts) {
-  return opts.project === true ? visualStudioUserMcpPath() : visualStudioProjectMcpPath(opts.projectRoot);
-}
-function visualStudioInstructionsPath(opts = {}) {
-  return opts.project === true ? path2.join(path2.resolve(opts.projectRoot ?? process.cwd()), ".github", "copilot-instructions.md") : path2.join(os.homedir(), "copilot-instructions.md");
-}
-function visualStudioOtherScopeHasManagedServer(opts = {}) {
-  return hasManagedServer(otherScopeMcpPath(opts), LABEL);
-}
-function isVisualStudioInstalled(opts = {}) {
-  return hasManagedServer(visualStudioMcpPath(opts), LABEL);
-}
-function visualStudioSolutionVscodeMcpPath(projectRoot = process.cwd()) {
-  return path2.join(path2.resolve(projectRoot), ".vscode", "mcp.json");
-}
-function visualStudioManagedRegistrations(projectRoot = process.cwd()) {
-  return [visualStudioUserMcpPath(), visualStudioProjectMcpPath(projectRoot), visualStudioSolutionVscodeMcpPath(projectRoot)].filter((p) => hasManagedServer(p, LABEL));
-}
-function visualStudioDuplicateNote(projectRoot = process.cwd()) {
-  const found = visualStudioManagedRegistrations(projectRoot);
-  if (found.length < 2) return null;
-  const lead = `Note: Visual Studio reads ${found.join(" and ")}, and each registers token-goat, so it will list the token-goat server more than once for this solution.`;
-  if (!found.includes(visualStudioSolutionVscodeMcpPath(projectRoot))) return `${lead} Keep one: run "token-goat uninstall --visualstudio" or "token-goat uninstall --visualstudio -p".`;
-  return `${lead} Keep one: if you do not use VS Code in this folder, run "token-goat uninstall --vscode -p"; otherwise run "token-goat uninstall --visualstudio${found.includes(visualStudioUserMcpPath()) ? "" : " -p"}".`;
-}
-function visualStudioMcpStatus(opts = {}) {
-  const checkedPaths = [visualStudioUserMcpPath()];
-  if (opts.projectRoot !== void 0) checkedPaths.push(visualStudioProjectMcpPath(opts.projectRoot));
-  return { configured: checkedPaths.some((p) => hasManagedServer(p, LABEL)), checkedPaths };
-}
-function visualStudioManagedEntry(filePath) {
-  if (!fs2.existsSync(filePath)) return null;
-  try {
-    const entry = serversOf(readServersJson(filePath, LABEL), filePath, LABEL)["token-goat"];
-    if (!isManagedServer(entry)) return null;
-    const { command, args } = entry;
-    return { command: typeof command === "string" ? command : "", bundlePath: args[0] ?? "" };
-  } catch {
-    return null;
-  }
-}
-var FALLBACK_TOOL_CLAUSE = "Visual Studio\u2019s built-in readfile, code_search, and find_references tools";
-var RETRIEVE_NOTE = "**Compressed payloads:** a message containing a token-goat payload block (recognizable by a `recovery: token-goat retrieve <id>` line) is compressed text, not an answer. Call the MCP tool `retrieve_text` with that id to recover the original text, then answer the question the message asks using the recovered text. Never present the raw payload to the user as the response; if the `retrieve_text` tool is unavailable (the MCP server is not running, or its tools are not ticked in the chat Tools picker), say so plainly and ask the user to turn on the token-goat tools.";
-var SUPPORT_NOTE = "Visual Studio support: token-goat install --visualstudio registers a stdio MCP server under the servers root key of %USERPROFILE%\\.mcp.json (with --project, the .mcp.json in the solution folder). Visual Studio runs no token-goat hooks, so nothing denies a repeated read, adds a hint, shrinks an image, or folds what readfile returns there: the narrow reads come only from calling the token-goat MCP tools, or the token-goat CLI through runcommandinterminal.";
-function buildVisualStudioGuidanceBlock(sharesFileWithGate) {
-  const lead = sharesFileWithGate ? ["## token-goat in Visual Studio", "", `The token-goat gate elsewhere in this file applies in Visual Studio too; there, ${FALLBACK_TOOL_CLAUSE} are the fallback it names.`] : [buildGuidanceBody(FALLBACK_TOOL_CLAUSE, { gdrive: loadConfig().gdrive.enabled })];
-  return [VISUALSTUDIO_GUIDANCE_BEGIN, ...lead, "", RETRIEVE_NOTE, "", SUPPORT_NOTE, VISUALSTUDIO_GUIDANCE_END].join("\n");
-}
-function hasBlock(text, begin, end) {
-  const b = text.indexOf(begin);
-  const e = text.indexOf(end);
-  return b !== -1 && e > b;
-}
-function readText(filePath) {
-  try {
-    return fs2.readFileSync(filePath, "utf8");
-  } catch {
-    return "";
-  }
-}
-function writeGuidance(filePath) {
-  const text = readText(filePath);
-  const shares = SIBLING_GATE_MARKERS.some(([begin, end]) => hasBlock(text, begin, end));
-  return upsertDelimitedBlock(filePath, VISUALSTUDIO_GUIDANCE_BEGIN, VISUALSTUDIO_GUIDANCE_END, buildVisualStudioGuidanceBlock(shares));
-}
-function syncVisualStudioProjectGuidance(filePath) {
-  if (!hasBlock(readText(filePath), VISUALSTUDIO_GUIDANCE_BEGIN, VISUALSTUDIO_GUIDANCE_END)) return false;
-  return writeGuidance(filePath);
-}
-function installVisualStudio(opts = {}) {
-  return withInstallScope(projectScopeRoot(opts), () => installVisualStudioScoped(opts));
-}
-function installVisualStudioScoped(opts) {
-  const scope = opts.project === true ? "project" : "user";
-  const mcpPath = visualStudioMcpPath(opts);
-  const instructionsPath = visualStudioInstructionsPath(opts);
-  if (visualStudioOtherScopeHasManagedServer(opts)) {
-    const otherScope = scope === "project" ? "user" : "project";
-    throw new Error(
-      `token-goat is already registered in Visual Studio ${otherScope} scope (${otherScopeMcpPath(opts)}). Visual Studio reads both files, so installing into ${scope} scope too would register it twice. Run "token-goat uninstall --visualstudio${otherScope === "project" ? " --project" : ""}" first if you want to move it, or drop --visualstudio from this run.`
-    );
-  }
-  const mcpExisted = fs2.existsSync(mcpPath);
-  const config = readServersJson(mcpPath, LABEL);
-  const ownedAlready = mcpExisted && holdsOnlyManagedServer(config.value);
-  const current = serversOf(config, mcpPath, LABEL)["token-goat"];
-  if (current !== void 0 && !isManagedServer(current)) {
-    throw new Error(`Visual Studio MCP JSON at ${mcpPath} already has a non-token-goat-managed server named "token-goat"`);
-  }
-  const next = ensureMcpServersKey(setTokenGoatServer(config.text, managedServer()));
-  if (config.text !== next) {
-    ensureDirSync(path2.dirname(mcpPath));
-    backupFile(mcpPath);
-    atomicWriteText(mcpPath, next);
-    if (!mcpExisted || ownedAlready) recordCreatedConfig(mcpPath);
-  }
-  const guidanceChanged = writeGuidance(instructionsPath);
-  return { mcpPath, instructionsPath, alreadyInstalled: config.text === next && !guidanceChanged, scope };
-}
-function uninstallVisualStudio(opts = {}) {
-  return withInstallScope(projectScopeRoot(opts), () => uninstallVisualStudioScoped(opts));
-}
-function uninstallVisualStudioScoped(opts) {
-  const mcpPath = visualStudioMcpPath(opts);
-  let removed = false;
-  if (fs2.existsSync(mcpPath)) {
-    const config = readServersJson(mcpPath, LABEL);
-    if (isManagedServer(serversOf(config, mcpPath, LABEL)["token-goat"])) {
-      const next = dropEmptyServers(setTokenGoatServer(config.text, void 0));
-      if (/^\s*\{\s*\}\s*$/.test(dropLoneEmptyMcpServers(next)) && takeCreatedConfig(mcpPath)) removeFileInScope(mcpPath);
-      else {
-        backupFile(mcpPath);
-        atomicWriteText(mcpPath, ensureMcpServersKey(next));
-      }
-      removeCreatedBackups(mcpPath);
-      removed = true;
-    }
-  }
-  const instructionsPath = visualStudioInstructionsPath(opts);
-  if (stripDelimitedBlock(instructionsPath, VISUALSTUDIO_GUIDANCE_BEGIN, VISUALSTUDIO_GUIDANCE_END)) {
-    removed = true;
-    if (readText(instructionsPath).trim() === "") removeFileInScope(instructionsPath);
-  }
-  return removed;
-}
-
-// src/bridges/copilot_cli_install.ts
-init_define_import_meta_env();
-import * as fs3 from "node:fs";
-import * as os2 from "node:os";
-import * as path3 from "node:path";
-
-// src/bridges/copilot_cli.ts
-init_define_import_meta_env();
-
-// src/bridges/shrink_block.ts
-init_define_import_meta_env();
-var MATERIALIZE_SHRUNK_IMAGE_JS = `// Best-effort sweep of previously materialized shrunk copies in the OS temp dir. The temp file only needs to outlive the single tool call whose path argument was rewritten to it, so anything older than an hour is finished with; the "token-goat-shrink-" prefix check confines the sweep to this mechanism's own files (same defense-in-depth rule as pruneShrinkCache in src/image_shrink.ts). Throttled per process; runs only when a shrink payload actually arrives, so the common no-image path never pays for it.
-const MATERIALIZED_SHRINK_MAX_AGE_MS = 60 * 60 * 1000
-let lastMaterializedShrinkSweepAtMs = 0
-function pruneMaterializedShrinks() {
-  const now = Date.now()
-  if (now - lastMaterializedShrinkSweepAtMs < MATERIALIZED_SHRINK_MAX_AGE_MS) return
-  lastMaterializedShrinkSweepAtMs = now
-  try {
-    const dir = os.tmpdir()
-    for (const file of fs.readdirSync(dir)) {
-      if (!file.startsWith("token-goat-shrink-")) continue
-      const full = path.join(dir, file)
-      try {
-        const st = fs.statSync(full)
-        if (st.isFile() && now - st.mtimeMs > MATERIALIZED_SHRINK_MAX_AGE_MS) fs.unlinkSync(full)
-      } catch {
-        // Best-effort per-file cleanup; one bad stat/unlink must not abort the sweep.
-      }
-    }
-  } catch {
-    // Best-effort; a readdir failure must never break the materialization below.
-  }
-}
-
-// Decode a token-goat image-shrink additionalContext payload ("<summary>\\ndata:image/<fmt>;base64,<data>") into a real file on disk, since the host's pre-tool hook has no context-injection channel to hand the shrunk image to the model directly -- only argument rewriting. The temp filename is derived from pid/time/random alone, never from the source image's own name, so an attacker-chosen filename cannot steer the write; the format suffix comes from the data-URL's media subtype, whose character class ([a-zA-Z0-9.+-]) admits no path separators. Returns undefined (leaving the original path argument untouched, so a failed shrink falls back to the original image) if the context isn't a shrink payload or anything goes wrong writing it.
-function materializeShrunkImage(context) {
-  if (typeof context !== "string") return undefined
-  const idx = context.indexOf("data:image/")
-  if (idx === -1) return undefined
-  const match = /^data:image\\/([a-zA-Z0-9.+-]+);base64,([A-Za-z0-9+/=]+)$/.exec(context.slice(idx).trim())
-  if (!match) return undefined
-  try {
-    pruneMaterializedShrinks()
-    const buf = Buffer.from(match[2], "base64")
-    const name = \`token-goat-shrink-\${process.pid}-\${Date.now()}-\${globalThis.crypto.randomUUID()}.\${match[1]}\`
-    const file = path.join(os.tmpdir(), name)
-    // Owner-only: the copy is of a workspace image and sits in the shared temp dir.
-    fs.writeFileSync(file, buf, { mode: 0o600 })
-    return file
-  } catch {
-    return undefined
-  }
-}`;
-
-// src/bridges/copilot_cli.ts
-var COPILOT_CLI_HOOK_SCRIPT = `#!/usr/bin/env node
-// token-goat Copilot CLI hook shim. Translates Copilot's hook event names and
-// request/response schema to/from token-goat's internal hook protocol.
-'use strict'
-const { spawnSync } = require('node:child_process')
-const fs = require('node:fs')
-const os = require('node:os')
-const path = require('node:path')
-const { pathToFileURL } = require('node:url')
-
-// Copilot event name -> token-goat internal HookEventName (src/types.ts's
-// HOOK_EVENTS). Only these eight have a token-goat handler; every other real
-// Copilot event (sessionEnd, subagentStart, errorOccurred, notification,
-// permissionRequest) is left unimplemented
-// rather than guessed at, and falls through to the default no-op below.
-// postToolUseFailure is the newest of the eight and the only one whose channel
-// costs tokens instead of saving them: it fires instead of postToolUse when a
-// tool result is a failure, and accepts only additionalContext back --
-// modifiedResult and suppressOutput are not honored there, so a failed result
-// still cannot be fenced, compressed or shrunk. It is wired anyway because
-// additionalContext demonstrably reaches the model (see the postToolUseFailure
-// branch in translate() for the bundle offset), and hooks_tool_failure.ts
-// spends that channel only on an exact repeat failure, where staying silent
-// costs a whole wasted retry.
-// 'sessionStart' was previously a permanent no-op on the stated grounds that
-// token-goat has no internal session_start handler. That was simply wrong --
-// hooks_session_start.ts has long emitted the command-routing reminder that
-// every other harness receives -- and the no-op was the reason Copilot CLI
-// sessions alone never got told token-goat exists. It is wired now: verified
-// against Copilot CLI 1.0.77 that a hooks.json sessionStart entry returning
-// {additionalContext} does reach the model. The github/copilot-cli#2142
-// fire-and-forget bug that would have made this dead wiring was fixed in a
-// pre-release months before that version, and its companion multi-extension
-// hook-overwrite bug never applied here: it hit runtime *extension* hooks,
-// while this config-file hooks.json path goes through Copilot's own merge.
-const COPILOT_TO_TG_EVENT = {
-  sessionStart: 'session_start',
-  preToolUse: 'pre_tool_use',
-  postToolUse: 'post_tool_use',
-  preCompact: 'pre_compact',
-  agentStop: 'stop',
-  subagentStop: 'subagent_stop',
-  userPromptSubmitted: 'user_prompt_submit',
-  postToolUseFailure: 'post_tool_use_failure',
-}
-
-// Copilot built-in tool name -> token-goat internal tool name. Confirmed via
-// @github/copilot-sdk type definitions and multiple real GitHub issue payload
-// dumps -- supersedes an earlier docs-based guess (shell/read/write/url) that
-// didn't hold up in practice; 'write' in particular was never a real
-// toolName value, only a Copilot permission-pattern keyword. 'powershell'
-// maps to the same 'Bash' handler as 'bash' since both are shell-command
-// execution from token-goat's perspective (mirrors how hooks_bash.ts's own
-// filters already treat powershell-wrapped commands as part of the Bash
-// pipeline, not a separate tool). 'task', 'ask_user', 'memory', and
-// MCP-server tool invocations (<server-name>-<tool-name>) have no
-// token-goat equivalent and are passed through unmapped (safe no-op for
-// handlers that don't recognize the name).
-// 'read_bash'/'read_powershell' are the background-shell output pollers, and
-// they are the exact shape of Claude Code's BashOutput: Copilot's shell tool
-// is async, so a long-running command is started once and then re-read over
-// and over within one turn, each read returning the accumulated output again.
-// hooks_bashoutput.ts already collapses that into a delta (or a short
-// "unchanged" marker) for Claude Code, and now does the same here. Both the
-// names and the argument key were read out of the shipping 1.0.80 bundle
-// rather than guessed: the builtin tool-name table in
-// prebuilds/win32-x64/runtime.node lists read_bash/stop_bash/list_bash and
-// read_powershell/stop_powershell/list_powershell, and the poller's own input
-// schema in app.js is {shellId, delay} -- so the shell id needs the
-// POLL_ID_ARG_KEY remap below to reach postBashOutputHandler, which reads
-// 'bash_id'. read_shell/stop_shell/list_shells, which an earlier static sweep
-// of the same binary suggested were the real names, are internal Rust
-// identifiers (tool_read_shell_prepare_input, tool_list_shells_descriptor,
-// PreparedStopShellInput, and the serde field names of the shell config
-// struct), never wire tool names, so they are deliberately absent here.
-// stop_bash/list_bash and their powershell twins stay unmapped because
-// token-goat has no KillShell-equivalent handler for them to reach; a mapping
-// would be pure decoration.
-// 'bash'/'powershell' stay exactly as they were. The same sweep suggested the
-// executor had been renamed to write_bash/write_powershell and that this
-// mapping was dead, and that is not what the bundle says: app.js resolves the
-// executor as shellConfig?.shellToolName ?? "bash" (with "powershell" as the
-// Windows default of the same config), and its command lives under 'command'
-// exactly as hooks_bash.ts expects. write_bash/write_powershell are real tool
-// names, but they are a different tool -- their schema is {shellId, input,
-// delay} and the bundle files them under the subtype "write_shell", i.e. send
-// stdin to an already-running shell, not run a command. Mapping them to Bash
-// would label a stdin write as a shell execution, so they are left unmapped.
-// 'task', 'read_agent' and 'memory'-family tools are likewise left alone:
-// task's result is assembled in the native addon and its shape is unknown,
-// read_agent is an incremental poll that postAgentHandler is not written for,
-// and the real tool names behind memory were never confirmed. Each would put
-// a handler that rewrites model-visible output in front of a payload shape
-// nobody has seen, which is worse than leaving the compression on the table.
-const TOOL_TO_TG = {
-  bash: 'Bash',
-  powershell: 'Bash',
-  read_bash: 'BashOutput',
-  read_powershell: 'BashOutput',
-  view: 'Read',
-  create: 'Write',
-  edit: 'Edit',
-  web_fetch: 'WebFetch',
-  web_search: 'WebSearch',
-  grep: 'Grep',
-  glob: 'Glob',
-  skill: 'Skill',
-  exit_plan_mode: 'ExitPlanMode',
-}
-
-function foldToolName(name) {
-  return typeof name === 'string' ? name.toLowerCase().replace(/[_-]/g, '') : ''
-}
-
-const FOLDED_TOOL_TO_TG = {}
-for (const [k, v] of Object.entries(TOOL_TO_TG)) {
-  FOLDED_TOOL_TO_TG[foldToolName(k)] = v
-}
-// Also register folded entries for canonical TG tool names directly (e.g. WebSearch -> websearch)
-for (const v of Object.values(TOOL_TO_TG)) {
-  FOLDED_TOOL_TO_TG[foldToolName(v)] = v
-}
-
-function resolveCanonicalToolName(name) {
-  if (!name || typeof name !== 'string') return name
-  const direct = TOOL_TO_TG[name]
-  if (direct !== undefined) return direct
-  const folded = foldToolName(name)
-  return FOLDED_TOOL_TO_TG[folded] || name
-}
-
-// Confirmed via github/copilot-cli#3349 (open, unresolved as of writing): some
-// real Copilot CLI invocations send toolArgs as a JSON-*encoded string*
-// rather than a parsed object, contradicting the documented schema. Left
-// unhandled, canonical.tool_input would become a raw string and every
-// downstream event.toolInput[key] lookup in token-goat's handlers would
-// silently return undefined -- the deny/dedup mechanism would no-op with no
-// error surfaced. Parse it defensively; on a non-string, absent, or
-// unparsable value, fall back to {} rather than throwing (this shim's
-// convention throughout is fail-open, never crash on a malformed payload).
-function parseMaybeJsonObject(value) {
-  if (value && typeof value === 'object') return value
-  if (typeof value === 'string') {
-    try {
-      const parsed = JSON.parse(value)
-      if (parsed && typeof parsed === 'object') return parsed
-    } catch {
-      // fall through to {}
-    }
-  }
-  return {}
-}
-
-// view/edit/create send the file path under 'path'; every token-goat handler these
-// three tools reach only ever looks for 'file_path' (getFilePath in hooks_common.ts).
-// Keyed by the ORIGINAL Copilot tool name (before TOOL_TO_TG renames it) since that's
-// the name toolArgs' shape is keyed to, not token-goat's internal tool name.
-const FILE_PATH_ARG_KEY = {
-  view: 'path',
-  edit: 'path',
-  create: 'path',
-}
-
-// read_bash/read_powershell send the background shell's id under 'shellId' (confirmed
-// against the poller's input schema in the shipping 1.0.80 app.js: {shellId, delay});
-// postBashOutputHandler reads 'bash_id'. Without this the tool-name mapping above would
-// be inert -- the handler bails on a missing bash_id and every poll would keep costing
-// the full accumulated output. Same keying convention as FILE_PATH_ARG_KEY: the ORIGINAL
-// Copilot tool name, since that is what the argument shape belongs to.
-const POLL_ID_ARG_KEY = {
-  read_bash: 'shellId',
-  read_powershell: 'shellId',
-}
-
-// Copilot spawns a brand-new process for every single hook invocation (no long-lived plugin
-// process the way OpenClaw's is -- OPENCLAW_HOOK_SCRIPT's own \`copilot-\${process.pid}-\${Date.now()}\`
-// fallback is safe there specifically because that process lives for the whole session, so the
-// pid stays constant across calls). If Copilot ever omits \`sessionId\` from a payload, falling
-// back to \`process.pid\` here would mint a DIFFERENT id on every single call for what's really
-// the same session, since process.pid varies per invocation -- breaking token-goat's
-// session-based dedup/state ledger, which never accumulates across calls as a result. Derive a
-// stable id instead from the one thing that's actually constant across calls for the same
-// session: the working directory Copilot reports. That field is \`workingDirectory\`, declared
-// required on BaseHookInput in copilot-sdk/types.d.ts since 1.0.76, so it is present on EVERY
-// hook event. This previously read \`payload.cwd\`, which Copilot has never sent under any name in
-// any version -- the key simply did not exist, so this derived every fallback id from
-// process.cwd() instead and \`canonical.cwd\` below was undefined on every single call. It went
-// unnoticed because process.cwd() happens to be the project directory Copilot spawns the hook in,
-// so the fallback was accidentally right; nothing about that was by design. \`cwd\` is still read
-// as a secondary in case a future version adds it under the shorter name.
-function stableFallbackSessionId(cwd) {
-  const key = typeof cwd === 'string' && cwd ? cwd : process.cwd()
-  const hash = require('node:crypto').createHash('sha256').update(key).digest('hex').slice(0, 16)
-  return 'copilot-' + hash
-}
-
-function remapToolInput(copilotToolName, input) {
-  if (!input || typeof input !== 'object') return input
-  let out = input
-  // Add the canonical key alongside the original rather than renaming it, so nothing that
-  // might read the original 'path'/'shellId' key elsewhere (e.g. a future handler) loses it.
-  const folded = foldToolName(copilotToolName)
-  const pathKey = FILE_PATH_ARG_KEY[copilotToolName] || (folded === 'view' || folded === 'edit' || folded === 'create' ? 'path' : undefined)
-  if (pathKey !== undefined && pathKey in out) {
-    out = Object.assign({}, out, { file_path: out[pathKey] })
-  }
-  const idKey = POLL_ID_ARG_KEY[copilotToolName] || (folded === 'readbash' || folded === 'readpowershell' ? 'shellId' : undefined)
-  if (idKey !== undefined && idKey in out) {
-    out = Object.assign({}, out, { bash_id: out[idKey] })
-  }
-  if (Array.isArray(out.view_range) && out.view_range.length >= 1) {
-    const rawStart = Number(out.view_range[0])
-    if (Number.isFinite(rawStart) && rawStart >= 1) {
-      const mapped = { offset: Math.floor(rawStart) }
-      if (out.view_range.length >= 2) {
-        const rawEnd = Number(out.view_range[1])
-        if (Number.isFinite(rawEnd) && rawEnd >= rawStart) {
-          mapped.limit = Math.floor(rawEnd - rawStart + 1)
-        }
-      }
-      out = Object.assign({}, out, mapped)
-    }
-  }
-  if ('old_str' in out && !('old_string' in out)) {
-    out = Object.assign({}, out, { old_string: out.old_str })
-  }
-  if ('new_str' in out && !('new_string' in out)) {
-    out = Object.assign({}, out, { new_string: out.new_str })
-  }
-  return out
-}
-
-// Attempts the in-process hook call: import()s dist/token-goat-hook.mjs (a sibling of
-// the baked token-goat entry path, built with zero load-time side effects -- unlike
-// the CLI entry, which runs the full argv-parsing CLI as a side effect of being
-// loaded) and calls its exported relayInProcess() directly, avoiding a second node
-// process spawn entirely. Returns undefined (triggering the spawnSync fallback below)
-// when entryPath is absent, the sibling file doesn't exist (an older install predating
-// this file), or anything else goes wrong -- this must never throw.
-async function tryInProcess(entryPath, tgEvent, canonical, harness) {
-  if (!entryPath) return undefined
-  try {
-    const hookLibPath = path.join(path.dirname(entryPath), 'token-goat-hook.mjs')
-    if (!require('node:fs').existsSync(hookLibPath)) return undefined
-    const mod = await import(pathToFileURL(hookLibPath).href)
-    process.env.TOKEN_GOAT_HARNESS_OVERRIDE = harness
-    // Which hooks directory VS Code loaded this shim from is the only thing separating a
-    // user-scope copy from a project-scope one -- the two files are byte-identical and so are
-    // their payloads. vscode_duplicate.ts needs it to stand the redundant copy down.
-    if (harness === 'vscode') process.env.TOKEN_GOAT_VSCODE_HOOKS_DIR = __dirname
-    return await mod.relayInProcess(tgEvent, canonical)
-  } catch {
-    return undefined
-  }
-}
-
-// VS Code's built-in agent reads this same hooks file (~/.copilot/hooks and .github/hooks are both
-// on its hook-source list) and runs these same entries, but it sends Claude Code's payload shape:
-// hook_event_name, session_id, tool_name, tool_input, tool_response. Copilot CLI's payload never
-// carries hook_event_name and always names its tool in toolName, so that pair tells them apart.
-// The payload goes to token-goat as-is under the vscode harness, which does its own tool-name
-// mapping and writes a response VS Code reads directly, so nothing here translates it.
-function isVscodePayload(payload) {
-  return payload !== null && typeof payload === 'object' && typeof payload.hook_event_name === 'string' && payload.toolName === undefined
-}
-
-async function relayVscode(entryPath, tgEvent, payload) {
-  // VS Code omits session_id when the chat has no session resource yet; key the state on the workspace instead, the same fallback the Copilot path uses.
-  const input = typeof payload.session_id === 'string' && payload.session_id !== ''
-    ? payload
-    : Object.assign({}, payload, { session_id: stableFallbackSessionId(process.cwd()) })
-  let stdout = await tryInProcess(entryPath, tgEvent, input, 'vscode')
-  if (stdout === undefined) {
-    // tgEvent is a value of the closed COPILOT_TO_TG_EVENT map (gated in main) and the harness is a literal, so nothing caller-controlled reaches the shell string below.
-    const spawnOpts = {
-      input: JSON.stringify(input),
-      encoding: 'utf8',
-      windowsHide: true,
-      timeout: 3000,
-      killSignal: 'SIGKILL',
-      maxBuffer: 32 * 1024 * 1024,
-      env: Object.assign({}, process.env, { TOKEN_GOAT_HARNESS_OVERRIDE: 'vscode', TOKEN_GOAT_VSCODE_HOOKS_DIR: __dirname }),
-    }
-    const res = entryPath
-      ? spawnSync(process.execPath, [entryPath, 'hook', tgEvent, '--harness', 'vscode'], spawnOpts)
-      : spawnSync('token-goat hook ' + tgEvent + ' --harness vscode', Object.assign({ shell: true }, spawnOpts))
-    if (res.status !== 0 || !res.stdout) return '{}'
-    stdout = res.stdout
-  }
-  try {
-    const parsed = JSON.parse(stdout)
-    return parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed) ? JSON.stringify(parsed) : '{}'
-  } catch {
-    return '{}'
-  }
-}
-
-async function main() {
-  const copilotEvent = process.argv[2] || ''
-
-  // hasOwnProperty, not a bare lookup: the map is a plain object literal, so eight keys it never
-  // declares ('constructor', 'toString', '__proto__' and the rest of Object.prototype) come back
-  // truthy and sail past the check below. tgEvent is then a Function, and 'token-goat hook ' +
-  // tgEvent is concatenated into a shell command string by the fallback at the bottom of this
-  // shim. No member of Object.prototype stringifies with a shell metacharacter, so this was a
-  // failed spawn rather than a second command -- but argv reaching a shell string through a gate
-  // that reads like it stops it is the shape worth closing, not the payload that happened to be
-  // harmless. The four shims built on shim_common.ts validate against a closed Set, which has no
-  // equivalent hole.
-  const tgEvent = Object.prototype.hasOwnProperty.call(COPILOT_TO_TG_EVENT, copilotEvent)
-    ? COPILOT_TO_TG_EVENT[copilotEvent]
-    : undefined
-  if (!tgEvent) {
-    process.stdout.write('{}')
-    return
-  }
-
-  let raw = ''
-  try {
-    raw = require('node:fs').readFileSync(0, 'utf8')
-  } catch {
-    process.stdout.write('{}')
-    return
-  }
-
-  let payload
-  try {
-    payload = JSON.parse(raw)
-  } catch {
-    process.stdout.write('{}')
-    return
-  }
-
-  if (isVscodePayload(payload)) {
-    process.stdout.write(await relayVscode(process.argv[3], tgEvent, payload))
-    return
-  }
-
-  const toolName = payload && payload.toolName
-  const canonical = {
-    session_id:
-      (payload && payload.sessionId) ||
-      stableFallbackSessionId(payload && (payload.workingDirectory || payload.cwd)),
-    cwd: payload && (payload.workingDirectory || payload.cwd),
-  }
-
-  // Subagent correlation and W3C Trace Context propagation from Copilot CLI payloads
-  const agentId = payload && (payload.agent_id || payload.agentId)
-  if (typeof agentId === 'string' && agentId !== '') {
-    canonical.agent_id = agentId
-  }
-  const traceparent = payload && (payload.traceparent || payload.traceParent)
-  if (typeof traceparent === 'string' && traceparent !== '') {
-    canonical.traceparent = traceparent
-  }
-  const tracestate = payload && (payload.tracestate || payload.traceState)
-  if (typeof tracestate === 'string' && tracestate !== '') {
-    canonical.tracestate = tracestate
-  }
-
-  // userPromptSubmitted only: Copilot declares \`prompt\` required on UserPromptSubmittedHookInput.
-  // hooks_session.ts's userPromptSubmitHandler reads it as \`event.raw['prompt']\` and gates every
-  // branch it has on the text, so without this it saw '' on every Copilot prompt and the
-  // embedded-skill dedup hint could never fire. Same shape as the postToolUseFailure \`error\`
-  // drop: a required field the canonical builder simply did not list.
-  if (typeof (payload && payload.prompt) === 'string' && payload.prompt !== '') {
-    canonical.prompt = payload.prompt
-  }
-  let originalToolArgs = {}
-  if (toolName) {
-    originalToolArgs = parseMaybeJsonObject(payload && payload.toolArgs)
-    canonical.tool_name = resolveCanonicalToolName(toolName)
-    canonical.tool_input = remapToolInput(toolName, originalToolArgs)
-  }
-
-  // postToolUse only: confirmed via https://docs.github.com/en/copilot/reference/hooks-reference
-  // that Copilot's toolResult is an object ({resultType, textResultForLlm}), not a bare string
-  // or array. Without this, token-goat's tool_response consumers (hooks_read.ts's
-  // extractReadOutput, hooks_bash.ts's extractBashOutput, etc. -- all of which check for a
-  // string or an object keyed by output/content/text/body) never see any content, so
-  // post-read/post-bash stats stay empty no matter how many tool calls happen. Extract the
-  // LLM-facing text directly rather than forwarding the raw object, since textResultForLlm
-  // isn't one of those recognized object keys.
-  // postToolUseFailure only: Copilot's PostToolUseFailureHookInput (copilot-sdk/types.d.ts:1042)
-  // carries {toolName, toolArgs, error} and no toolResult at all -- the failure text lives in
-  // \`error\`, a plain string. Without forwarding it, hooks_tool_failure.ts's extractFailureText
-  // finds nothing to key on and the repeat-failure brake returns pass on every single call: wired,
-  // green, and doing nothing. Found by driving the installed shim rather than by a test, because
-  // the handler's own tests hand it a raw payload that already has the field.
-  if (typeof (payload && payload.error) === 'string' && payload.error !== '') {
-    canonical.error = payload.error
-  }
-
-  const rawResult = payload && payload.toolResult
-  if (rawResult && typeof rawResult === 'object') {
-    const tr = rawResult
-    // text_result_for_llm: Copilot's docs also describe a "VS Code compatible" snake_case
-    // wire format (tool_result.text_result_for_llm) alongside the camelCase one above; try
-    // both rather than assuming only the camelCase shape ever reaches this shim.
-    const text = typeof tr.textResultForLlm === 'string' ? tr.textResultForLlm : tr.text_result_for_llm
-    if (typeof text === 'string') canonical.tool_response = text
-  }
-
-  // process.argv[3], when present, is the absolute path to the token-goat CLI entry that ran
-  // \`token-goat install --copilot\` (baked in by hookCommandFor in copilot_cli_install.ts).
-  // Invoking it directly via process.execPath sidesteps PATH/cmd.exe resolution for this
-  // inner call too -- confirmed live-production root cause of an *intermittent* (not the
-  // original, already-fixed github/copilot-cli#4001) "(hook errored)" deny-all: even once the
-  // outer command launches via its own baked process.execPath, this inner call still shelled
-  // out to a bare \`token-goat\`, which depends on the npm global bin being on whatever PATH
-  // Copilot spawns this hook subprocess with. Falls back to the old PATH-based shell:true
-  // invocation when argv[3] is absent (an older cached hook config still pointing at a
-  // freshly-reinstalled shim, or a direct dev/test invocation), so this is a pure hardening,
-  // never a behavior break for configs installed before this fix. An args array (not a
-  // template string) is safe here specifically because entryPath and tgEvent never touch a
-  // shell -- no DEP0190 concern, unlike the shell:true fallback below.
-  const entryPath = process.argv[3]
-  // Try the in-process hook lib first (tryInProcess above), which avoids spawning a
-  // second node process altogether. If that's unavailable, invoking the entry directly
-  // via process.execPath sidesteps PATH/cmd.exe resolution for this inner call, per the
-  // note above this function's original single-spawn form documented. A 3000ms
-  // timeout/killSignal on both spawnSync fallbacks keeps them well under Copilot CLI's
-  // own hook timeout budget (~30000ms), so token-goat degrades to its own fail-open
-  // '{}' rather than being force-killed by Copilot first.
-  let stdout = await tryInProcess(entryPath, tgEvent, canonical, 'copilot_cli')
-  if (stdout === undefined) {
-    const res = entryPath
-      ? spawnSync(process.execPath, [entryPath, 'hook', tgEvent], {
-          input: JSON.stringify(canonical),
-          encoding: 'utf8',
-          windowsHide: true,
-          timeout: 3000,
-          killSignal: 'SIGKILL',
-          maxBuffer: 32 * 1024 * 1024,
-          env: Object.assign({}, process.env, { TOKEN_GOAT_HARNESS_OVERRIDE: 'copilot_cli' }),
-        })
-      : spawnSync('token-goat hook ' + tgEvent, {
-          input: JSON.stringify(canonical),
-          encoding: 'utf8',
-          shell: true,
-          windowsHide: true,
-          timeout: 3000,
-          killSignal: 'SIGKILL',
-          maxBuffer: 32 * 1024 * 1024,
-          env: Object.assign({}, process.env, { TOKEN_GOAT_HARNESS_OVERRIDE: 'copilot_cli' }),
-        })
-    if (res.status !== 0 || !res.stdout) {
-      process.stdout.write('{}')
-      return
-    }
-    stdout = res.stdout
-  }
-
-  let resp
-  try {
-    resp = JSON.parse(stdout)
-  } catch {
-    process.stdout.write('{}')
-    return
-  }
-
-  process.stdout.write(JSON.stringify(translate(copilotEvent, resp, toolName, originalToolArgs, payload)))
-}
-
-${MATERIALIZE_SHRUNK_IMAGE_JS}
-
-function translate(copilotEvent, resp, toolName, originalToolArgs, payload) {
-  if (copilotEvent === 'preToolUse') {
-    const hso = resp && resp.hookSpecificOutput
-    const denied = resp && (resp.decision === 'block' || (hso && hso.permissionDecision === 'deny'))
-    if (denied) {
-      const reason =
-        (resp && resp.reason) || (hso && hso.permissionDecisionReason) || 'blocked by token-goat'
-      return { permissionDecision: 'deny', permissionDecisionReason: reason }
-    }
-    const updated = hso && hso.updatedInput
-    if (updated && typeof updated === 'object') {
-      return { modifiedArgs: updated }
-    }
-    // Image shrink has no context channel on this event (Copilot's preToolUse output schema carries no additionalContext; docs/hook-channel-matrix.md footnote 7) -- translate it into a rewritten view path pointing at a materialized shrunk copy instead, via the same modifiedArgs channel the updatedInput branch above already uses. modifiedArgs REPLACES the tool call's args wholesale (ESr in the 1.0.80 bundle, see this module's header docblock), so the full original toolArgs are spread and only Copilot's own path key is swapped.
-    if (toolName === 'view' || foldToolName(toolName) === 'view') {
-      const shrunkPath = materializeShrunkImage(extractContext(resp))
-      if (shrunkPath) return { modifiedArgs: Object.assign({}, originalToolArgs, { path: shrunkPath }) }
-    }
-    return {}
-  }
-
-  if (copilotEvent === 'postToolUse') {
-    // modifiedResult is honored on success: rewriteOutput (compression, fencing, image shrink) reaches LLM.
-    // additionalContext is dropped on Copilot CLI JS path; we fold context into modifiedResult.textResultForLlm.
-    const hso = resp && resp.hookSpecificOutput
-    const updatedToolOutput = hso && hso.updatedToolOutput
-    const context = extractContext(resp)
-    const out = {}
-    if (typeof updatedToolOutput === 'string') {
-      out.modifiedResult = { resultType: 'success', textResultForLlm: updatedToolOutput }
-    } else if (context) {
-      const rawResult = payload && payload.toolResult
-      const originalText = rawResult && (typeof rawResult.textResultForLlm === 'string' ? rawResult.textResultForLlm : typeof rawResult.text_result_for_llm === 'string' ? rawResult.text_result_for_llm : undefined)
-      if (typeof originalText === 'string') {
-        out.modifiedResult = { resultType: 'success', textResultForLlm: originalText + '\\n\\n[token-goat: ' + context + ']' }
-      }
-    }
-    if (context) out.additionalContext = context
-    return out
-  }
-
-  if (copilotEvent === 'postToolUseFailure') {
-    // The failed-tool twin of postToolUse, and the only response field it accepts is
-    // additionalContext: the shipped copilot-sdk/types.d.ts says "modifiedResult or suppressOutput
-    // are not honored for failure hooks", so nothing here can fence, compress or shrink the failed
-    // output -- that gap is real and stays open. What is NOT open, and was the reason this event
-    // went unwired for so long, is whether additionalContext reaches the model at all. It does:
-    // app.js 1.0.80 at offset 2043380 either folds it into textResultForLlm (when
-    // appendFailureContextToToolResult is set) or has the native
-    // hookAppendPostToolUseFailureContext push {content, source:'system'} onto
-    // toolResult.newMessages. That is the exact opposite of postToolUse, whose additionalContext
-    // the JS side drops on the floor, so neither event's behaviour generalises to the other.
-    //
-    // Because this channel spends tokens rather than saving them, the handler behind it
-    // (hooks_tool_failure.ts) is silent on a first failure and speaks only on an exact repeat.
-    const context = extractContext(resp)
-    if (context) return { additionalContext: context }
-    return {}
-  }
-
-  if (copilotEvent === 'sessionStart') {
-    // sessionStart has no tool result to modify -- only additionalContext applies, and it's the
-    // one channel that reaches the model before it picks its first read tool, so this is where
-    // the routing reminder has to land.
-    const context = extractContext(resp)
-    if (context) return { additionalContext: context }
-    return {}
-  }
-
-  if (copilotEvent === 'agentStop' || copilotEvent === 'subagentStop') {
-    // Confirmed against the hooks reference doc: the only accepted response
-    // shape for these two events is {decision, reason} -- additionalContext
-    // is not part of their schema and Copilot silently ignores it there.
-    // token-goat's internal 'stop'/'subagent_stop' handlers never return a
-    // real deny today (subagentStopHandler only ever logs and passes), but a
-    // future deny is mapped through here rather than silently dropped.
-    if (resp && resp.decision === 'block') {
-      const reason = (resp && resp.reason) || 'blocked by token-goat'
-      return { decision: 'block', reason: reason }
-    }
-    return { decision: 'allow' }
-  }
-
-  if (copilotEvent === 'userPromptSubmitted') {
-    // Copilot's own hooks reference says command-hook output here "is dropped, including
-    // modifiedPrompt", and this branch used to believe it and return nothing. That is wrong for
-    // additionalContext on 1.0.80, established by experiment rather than by reading: a config-file
-    // command hook (at <cwd>/.github/hooks/, the project scope -- the user scope ~/.copilot/hooks/
-    // was never exercised) returned {"additionalContext":"<marker>"} and the marker turned up
-    // verbatim inside the session's user.message.transformedContent, wrapped in a
-    // <system_reminder> block. What settles that it reached the model rather than only the on-disk
-    // record is the billing: the provider's returned usage charged ~140 input tokens for a turn
-    // whose raw content field is 35 bytes, so the marker's bytes were paid for whichever field
-    // carried them. (The weaker argument first offered for this -- that transformedContent carries
-    // an envelope the content field lacks, 29 B vs 195 B -- was measured on the control turn that
-    // had no marker in it, and proves nothing about the marker.) That the model sees it is the
-    // whole point: hook.start/hook.end records also persist and reach nothing.
-    //
-    // Scope of the finding, stated honestly: demonstrated ONCE on 1.0.80, not shown to be
-    // reliable. Of two turns in that experiment, one delivered the marker and one fired a
-    // userPromptSubmitted hook that produced no output and never ran the script; no explanation
-    // was established and the rate is unknown. A hint that silently fails to arrive costs nothing
-    // and breaks nothing here, which is why the direct return is still the right default.
-    //
-    // modifiedPrompt is NOT claimed to work and is not wanted: rewriting a user's prompt is far
-    // more invasive than anything token-goat does, so only additionalContext is forwarded.
-    //
-    // This is also the write end of any post-compaction channel. Copilot has no postCompact hook.
-    // Whether the summary is recoverable from events.jsonl is NOT settled -- the emit()/
-    // emitEphemeral() distinction does not gate the writer, and the real decision is in native
-    // code; see COPILOT_NO_POST_COMPACT_REASON in ../bridges_status.ts for what was and was not
-    // established. The read end that IS confirmed is preCompact, which fires as a notification, so
-    // a manifest can be built there and drained here without reading the event log at all.
-    const context = extractContext(resp)
-    if (context) return { additionalContext: context }
-    return {}
-  }
-
-  // preCompact is the genuine notification-only case, and the contrast with userPromptSubmitted
-  // above is why this fallthrough is worth a comment at all. The hooks reference marks it
-  // "No -- notification only" for output processing, and unlike the additionalContext claim that
-  // turned out to be false, this one is confirmed in the shipping bundle: both preCompact call
-  // sites in app.js (1.0.79 and re-checked in 1.0.80) await the hook and never assign its result.
-  // There is no field to aim at here, so nothing to reconsider on the next version bump.
-  return {}
-}
-
-function extractContext(resp) {
-  const hso = resp && resp.hookSpecificOutput
-  if (hso && typeof hso.additionalContext === 'string') return hso.additionalContext
-  if (resp && typeof resp.systemMessage === 'string') return resp.systemMessage
-  return undefined
-}
-
-// Hard outer safety net, on top of main()'s own per-step try/catch fallbacks
-// (JSON.parse, readFileSync, spawnSync): a hook error must never itself cause
-// Copilot's fail-closed "(hook errored)" behavior, which denies EVERY tool
-// call unconditionally (the exact live-production failure mode behind
-// github/copilot-cli#4001). Any uncaught exception anywhere in this script --
-// including one a future code path adds that the existing per-step guards
-// don't anticipate -- still guarantees stdout gets valid JSON and the
-// process exits 0. process.exitCode is set explicitly and unconditionally at
-// the very end of every path so nothing upstream (e.g. an unhandled-rejection
-// warning in some Node versions nudging exit-code inference) can flip it.
-main()
-  .catch(() => {
-    try {
-      process.stdout.write('{}')
-    } catch {
-      // stdout itself is broken; nothing more can be done here.
-    }
-  })
-  .finally(() => {
-    process.exitCode = 0
-  })
-`;
-function foldToolName(name) {
-  return typeof name === "string" ? name.toLowerCase().replace(/[_-]/g, "") : "";
-}
-var TOOL_TO_TG_MAPPING = {
-  bash: "Bash",
-  powershell: "Bash",
-  read_bash: "BashOutput",
-  read_powershell: "BashOutput",
-  view: "Read",
-  create: "Write",
-  edit: "Edit",
-  web_fetch: "WebFetch",
-  web_search: "WebSearch",
-  grep: "Grep",
-  glob: "Glob",
-  skill: "Skill",
-  exit_plan_mode: "ExitPlanMode"
-};
-var FOLDED_MAPPING = {};
-for (const [k, v] of Object.entries(TOOL_TO_TG_MAPPING)) {
-  FOLDED_MAPPING[foldToolName(k)] = v;
-  FOLDED_MAPPING[foldToolName(v)] = v;
-}
-
-// src/bridges/copilot_cli_install.ts
-var COPILOT_CLI_HOOK_EVENTS = [
-  "sessionStart",
-  "preToolUse",
-  "postToolUse",
-  "preCompact",
-  "agentStop",
-  "subagentStop",
-  "userPromptSubmitted",
-  "postToolUseFailure"
-];
-function copilotCliUserRoot() {
-  const override = process.env["COPILOT_HOME"];
-  if (override !== void 0 && override.trim() !== "") return path3.resolve(override);
-  return path3.join(os2.homedir(), ".copilot");
-}
-function copilotCliUserHooksDir() {
-  return path3.join(copilotCliUserRoot(), "hooks");
-}
-function copilotCliProjectHooksDir() {
-  return path3.join(process.cwd(), ".github", "hooks");
-}
-function copilotCliCacheRoot() {
-  const override = process.env["COPILOT_CACHE_HOME"];
-  if (override !== void 0 && override.trim() !== "") return path3.resolve(override);
-  const home = os2.homedir();
-  if (process.platform === "darwin") return path3.join(home, "Library", "Caches", "copilot");
-  if (process.platform === "win32") {
-    const local = process.env["LOCALAPPDATA"];
-    const base2 = local !== void 0 && local.trim() !== "" ? local : path3.join(home, ".cache");
-    return path3.join(base2, "copilot");
-  }
-  const xdg = process.env["XDG_CACHE_HOME"];
-  const base = xdg !== void 0 && xdg.trim() !== "" ? xdg : path3.join(home, ".cache");
-  return path3.join(base, "copilot");
-}
-function copilotCliMcpToolsDir() {
-  return path3.join(copilotCliCacheRoot(), "mcp-tools");
-}
-function copilotCliHooksDir(opts = {}) {
-  return opts.local === true ? copilotCliProjectHooksDir() : copilotCliUserHooksDir();
-}
-function copilotCliConfigPath(opts = {}) {
-  return path3.join(copilotCliHooksDir(opts), HOOKS_CONFIG_FILE);
-}
-function copilotCliScriptPath(opts = {}) {
-  return path3.join(copilotCliHooksDir(opts), HOOKS_SCRIPT_FILE);
-}
-function copilotCliInstructionsPath(opts = {}) {
-  return path3.join(path3.dirname(copilotCliHooksDir(opts)), "copilot-instructions.md");
-}
-var COPILOT_INSTRUCTIONS_BEGIN = "<!-- token-goat-begin -->";
-var COPILOT_INSTRUCTIONS_END = "<!-- token-goat-end -->";
-function buildCopilotInstructionsBlock() {
-  return stripInlineCodeSpans(
-    buildGuidanceBlock({
-      beginMarker: COPILOT_INSTRUCTIONS_BEGIN,
-      endMarker: COPILOT_INSTRUCTIONS_END,
-      fallbackToolClause: "Copilot CLI's native `view`, `grep`, and `glob` tools (with PowerShell commands `Get-Content`/`Select-String` as search fallbacks)",
-      gdrive: loadConfig().gdrive.enabled
-    })
-  );
-}
-function stripInlineCodeSpans(text) {
-  return text.replace(/`([^`]+)`/g, "$1");
-}
-function writeCopilotInstructionsBlock(p) {
-  const changed = upsertDelimitedBlock(p, COPILOT_INSTRUCTIONS_BEGIN, COPILOT_INSTRUCTIONS_END, buildCopilotInstructionsBlock());
-  const visualStudioChanged = syncVisualStudioProjectGuidance(p);
-  return changed || visualStudioChanged;
-}
-function stripCopilotInstructionsBlock(p) {
-  const removed = stripDelimitedBlock(p, COPILOT_INSTRUCTIONS_BEGIN, COPILOT_INSTRUCTIONS_END);
-  if (removed) syncVisualStudioProjectGuidance(p);
-  return removed;
-}
-function hookPowershellCommandFor(scriptPath, event) {
-  return `& ${hookPowershellCommand(scriptPath, event)}`;
-}
-var HOOK_TIMEOUT_SEC = 60;
-var ALLOWED_ENV_VARS = [
-  "TRACEPARENT",
-  "TRACESTATE",
-  "COPILOT_HOME",
-  "COPILOT_CACHE_HOME",
-  "TOKEN_GOAT_LOG"
-];
-function buildConfig(scriptPath) {
-  const hooks = {};
-  for (const event of COPILOT_CLI_HOOK_EVENTS) {
-    hooks[event] = [
-      {
-        type: "command",
-        command: hookCommandFor(scriptPath, event),
-        bash: hookCommandFor(scriptPath, event),
-        powershell: hookPowershellCommandFor(scriptPath, event),
-        timeoutSec: HOOK_TIMEOUT_SEC,
-        allowedEnvVars: [...ALLOWED_ENV_VARS]
-      }
-    ];
-  }
-  return { version: 1, hooks };
-}
-var HOOKS_CONFIG_FILE = "token-goat.json";
-var HOOKS_SCRIPT_FILE = "token-goat-shim.js";
-var HOOKS_OWNERS_FILE = "token-goat.owners";
-function copilotHooksOwnersPath(hooksDir) {
-  return path3.join(hooksDir, HOOKS_OWNERS_FILE);
-}
-function copilotHooksFilePaths(hooksDir) {
-  return [path3.join(hooksDir, HOOKS_CONFIG_FILE), path3.join(hooksDir, HOOKS_SCRIPT_FILE), copilotHooksOwnersPath(hooksDir)];
-}
-function readCopilotHooksOwners(hooksDir) {
-  const owners = /* @__PURE__ */ new Set();
-  let text;
-  try {
-    text = fs3.readFileSync(copilotHooksOwnersPath(hooksDir), "utf8");
-  } catch {
-    if (fs3.existsSync(path3.join(hooksDir, HOOKS_CONFIG_FILE))) owners.add("copilot");
-    return owners;
-  }
-  for (const line of text.split(/\r?\n/)) {
-    const name = line.trim();
-    if (name === "copilot" || name === "vscode") owners.add(name);
-  }
-  return owners;
-}
-function installCopilotHooksFile(hooksDir, owner) {
-  const configPath = path3.join(hooksDir, HOOKS_CONFIG_FILE);
-  const scriptPath = path3.join(hooksDir, HOOKS_SCRIPT_FILE);
-  const owners = readCopilotHooksOwners(hooksDir);
-  const scriptChanged = writeIfDifferent(scriptPath, COPILOT_CLI_HOOK_SCRIPT);
-  const desiredText = JSON.stringify(buildConfig(scriptPath), null, 2) + "\n";
-  const configChanged = writeIfDifferent(configPath, desiredText, true);
-  recordCreatedConfig(configPath);
-  owners.add(owner);
-  const ownersChanged = writeIfDifferent(copilotHooksOwnersPath(hooksDir), [...owners].sort().join("\n") + "\n");
-  return { configPath, scriptPath, changed: scriptChanged || configChanged || ownersChanged };
-}
-function releaseCopilotHooksFile(hooksDir, owner, keepBackups = false) {
-  const ownersPath = copilotHooksOwnersPath(hooksDir);
-  const hadSidecar = fs3.existsSync(ownersPath);
-  const owners = readCopilotHooksOwners(hooksDir);
-  if (!owners.has(owner) && (hadSidecar || owner !== "copilot")) return false;
-  owners.delete(owner);
-  if (owners.size > 0) {
-    writeIfDifferent(ownersPath, [...owners].sort().join("\n") + "\n");
-    return true;
-  }
-  const configRemoved = removeFileInScope(path3.join(hooksDir, HOOKS_CONFIG_FILE));
-  if (!keepBackups) removeCreatedBackups(path3.join(hooksDir, HOOKS_CONFIG_FILE));
-  takeCreatedConfig(path3.join(hooksDir, HOOKS_CONFIG_FILE));
-  const scriptRemoved = removeFileInScope(path3.join(hooksDir, HOOKS_SCRIPT_FILE));
-  const ownersRemoved = removeFileInScope(ownersPath);
-  return configRemoved || scriptRemoved || ownersRemoved;
-}
-function installCopilotCli(opts = {}) {
-  return withInstallScope(projectScopeRoot(opts), () => installCopilotCliScoped(opts));
-}
-function installCopilotCliScoped(opts) {
-  const instructionsPath = copilotCliInstructionsPath(opts);
-  const hooks = installCopilotHooksFile(copilotCliHooksDir(opts), "copilot");
-  const instructionsChanged = writeCopilotInstructionsBlock(instructionsPath);
-  return {
-    configPath: hooks.configPath,
-    scriptPath: hooks.scriptPath,
-    instructionsPath,
-    alreadyInstalled: !hooks.changed && !instructionsChanged
-  };
-}
-function uninstallCopilotCliScope(opts) {
-  return withInstallScope(projectScopeRoot(opts), () => uninstallCopilotCliScopeInner(opts));
-}
-function uninstallCopilotCliScopeInner(opts) {
-  let removedAny = releaseCopilotHooksFile(copilotCliHooksDir(opts), "copilot");
-  if (stripCopilotInstructionsBlock(copilotCliInstructionsPath(opts))) {
-    removedAny = true;
-  }
-  return removedAny;
-}
-function uninstallCopilotCli(opts = {}) {
-  if (opts.local === true) {
-    return uninstallCopilotCliScope({ local: true });
-  }
-  const userRemoved = uninstallCopilotCliScope({ local: false });
-  const localRemoved = uninstallCopilotCliScope({ local: true });
-  return userRemoved || localRemoved;
-}
-function isCopilotCliInstalled(opts = {}) {
-  if (!fs3.existsSync(copilotCliConfigPath(opts)) || !fs3.existsSync(copilotCliScriptPath(opts))) {
-    return false;
-  }
-  if (!readCopilotHooksOwners(copilotCliHooksDir(opts)).has("copilot")) return false;
-  let instructions;
-  try {
-    instructions = fs3.readFileSync(copilotCliInstructionsPath(opts), "utf8");
-  } catch {
-    return false;
-  }
-  return instructions.includes(COPILOT_INSTRUCTIONS_BEGIN) && instructions.includes(COPILOT_INSTRUCTIONS_END);
-}
-
-// src/hooks_cli.ts
-init_define_import_meta_env();
-
-// src/copilot_mcp_names.ts
-init_define_import_meta_env();
-
-// src/copilot_mcp_tools.ts
-init_define_import_meta_env();
-import fs4 from "node:fs";
-import path4 from "node:path";
-
-// src/overflow_guard.ts
-init_define_import_meta_env();
 
 // src/bash_compress.ts
 init_define_import_meta_env();
@@ -1353,853 +109,7 @@ function stripAnsiCodes(text) {
   return stripAnsiEscapes(text);
 }
 
-// src/overflow_guard.ts
-function estimateTokensFromLength(length) {
-  return Math.max(1, Math.floor(Math.max(0, length) / 3) + 1);
-}
-function estimateTokens(text) {
-  return estimateTokensFromLength(stripAnsiCodes(text).length);
-}
-function trimToBudget(text, budgetTokens, command) {
-  const markerMarginTokens = 64;
-  const totalTokens = estimateTokens(text);
-  if (totalTokens <= budgetTokens) {
-    return text;
-  }
-  const lines = text.split("\n");
-  if (lines.length > 1 && lines[lines.length - 1] === "") lines.pop();
-  const totalLines = lines.length;
-  const bodyBudget = Math.max(1, budgetTokens - markerMarginTokens);
-  const charBudget = bodyBudget * 3;
-  const kept = [];
-  let used = 0;
-  for (const ln of lines) {
-    const stripped = stripAnsiCodes(ln);
-    const cost = ln.length + 1;
-    if (kept.length === 0 && cost > charBudget) {
-      const truncated = safeSlice(stripped, charBudget);
-      kept.push(truncated);
-      break;
-    }
-    if (kept.length > 0 && used + cost > charBudget) {
-      break;
-    }
-    kept.push(ln);
-    used += cost;
-  }
-  const shown = kept.length;
-  const hint = getHintFor(command);
-  const marker = `[token-goat: output capped at ~${budgetTokens} tokens to protect context \u2014 showing ${shown} of ${totalLines} lines. ${hint}]`;
-  return kept.join("\n") + "\n" + marker;
-}
-function capJsonRows(items, budgetTokens) {
-  const totalCount = items.length;
-  const charBudget = Math.max(1, budgetTokens * 3);
-  const kept = [];
-  let used = 0;
-  for (const item of items) {
-    const cost = JSON.stringify(item).length + 2;
-    if (kept.length > 0 && used + cost > charBudget) break;
-    kept.push(item);
-    used += cost;
-  }
-  return { items: kept, truncated: kept.length < totalCount, totalCount };
-}
-function getHintFor(command) {
-  const cmd = (command || "").toLowerCase().trim();
-  if (cmd === "symbol") {
-    return "Request a specific method (file.py::Class.method) or use --json for structured access.";
-  }
-  if (cmd === "heading" || cmd === "section") {
-    return "Request a narrower sub-heading, e.g. 'doc.md::Section#2'.";
-  }
-  if (cmd === "lines") {
-    return "Request a smaller line range, e.g. 'file.py@100-150'.";
-  }
-  if (cmd === "bash-output" || cmd === "web-output") {
-    return "Use --grep PATTERN, --section HEADING, or --tail N to narrow the cached output.";
-  }
-  if (cmd === "semantic") {
-    return "Narrow your query text or pass --limit to reduce the number of matches returned.";
-  }
-  return "Narrow your query or raise overflow_guard max_tokens in config.";
-}
-
-// src/copilot_mcp_tools.ts
-function wireShapeLength(tools) {
-  const wire = tools.map((tool) => {
-    const out = {};
-    if (typeof tool.name === "string") out["name"] = tool.name;
-    if (typeof tool.description === "string") out["description"] = tool.description;
-    if (tool.inputSchema !== void 0) out["inputSchema"] = tool.inputSchema;
-    return out;
-  });
-  return JSON.stringify(wire).length;
-}
-function readCopilotMcpTools(dir = copilotCliMcpToolsDir()) {
-  let entries;
-  try {
-    entries = fs4.readdirSync(dir);
-  } catch {
-    return { cacheFound: false, servers: [], unreadable: 0 };
-  }
-  const newest = /* @__PURE__ */ new Map();
-  let unreadable = 0;
-  for (const entry of entries) {
-    if (!entry.toLowerCase().endsWith(".json")) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(fs4.readFileSync(path4.join(dir, entry), "utf8"));
-    } catch {
-      unreadable += 1;
-      continue;
-    }
-    if (typeof parsed !== "object" || parsed === null) {
-      unreadable += 1;
-      continue;
-    }
-    const record = parsed;
-    const serverName = typeof record.serverName === "string" ? record.serverName.trim() : "";
-    if (serverName === "") {
-      unreadable += 1;
-      continue;
-    }
-    const tools = Array.isArray(record.tools) ? record.tools : [];
-    const updatedAt = typeof record.updatedAt === "string" ? record.updatedAt : "";
-    const definitionBytes = wireShapeLength(tools);
-    const candidate = {
-      serverName,
-      toolCount: tools.length,
-      definitionBytes,
-      estimatedTokens: estimateTokensFromLength(definitionBytes),
-      updatedAt,
-      // `tools` is an unchecked cast off a JSON array, so every element is
-      // treated as untrusted here rather than trusted to match CachedTool.
-      toolNames: tools.map((t) => t?.name).filter((n) => typeof n === "string" && n !== "")
-    };
-    const existing = newest.get(serverName);
-    if (existing === void 0 || candidate.updatedAt > existing.updatedAt) newest.set(serverName, candidate);
-  }
-  const servers = [...newest.values()].sort(
-    (a, b) => b.definitionBytes - a.definitionBytes || a.serverName.localeCompare(b.serverName)
-  );
-  return { cacheFound: true, servers, unreadable };
-}
-
-// src/copilot_mcp_names.ts
-var _cached = null;
-function copilotMcpToolNameMap() {
-  if (_cached) return _cached;
-  const map = /* @__PURE__ */ new Map();
-  try {
-    for (const server of readCopilotMcpTools().servers) {
-      for (const toolName of server.toolNames) {
-        map.set(`${server.serverName}-${toolName}`, `mcp__${server.serverName}__${toolName}`);
-      }
-    }
-  } catch {
-  }
-  _cached = map;
-  return map;
-}
-function canonicalizeCopilotMcpToolName(toolName) {
-  return copilotMcpToolNameMap().get(toolName) ?? toolName;
-}
-
-// src/hooks_cli.ts
-var _LOG = {
-  warn: (msg, ...args) => console.warn(`[hooks_cli] ${msg}`, ...args),
-  debug: (msg, ...args) => console.error(`[hooks_cli] ${msg}`, ...args),
-  error: (msg, err, ...args) => console.error(`[hooks_cli] ${msg}`, ...err ? [err] : [], ...args)
-};
-var CODEX_TOOL_NAME_MAP = {
-  bash: "Bash",
-  // Codex's actual shell tool is named 'shell', per this repo's own Codex user-facing guidance text (codex_install.ts's buildAgentsBlock fallbackToolClause: "Codex's native `shell`, `apply_patch`, and `view_image` tools") -- the pre-existing 'bash' key above was never matched by a real Codex payload, so every real Codex shell call fell through unmapped and never reached hooks_bash.ts's Bash-only handlers; kept 'bash' too in case some Codex version or fork still sends it.
-  shell: "Bash",
-  edit_file: "Edit",
-  edit: "Edit",
-  apply_patch: "Edit",
-  write_file: "Write",
-  search_files: "Grep",
-  grep: "Grep",
-  list_files: "Glob",
-  glob: "Glob",
-  web_search: "WebFetch",
-  // Codex's only wired image-viewing tool (CODEX_MATCHERS in codex_install.ts wires the matcher 'view_image|Bash', with the codex_install.ts docstring calling out that 'view_image|Bash' covers image reads and shell execution together, mirroring Claude Code's Read handling) -- without this entry, tool_name stayed the literal 'view_image', which matches neither preReadHandler's nor image_shrink.ts's preReadImageHandler's toolName: 'Read' filter, so every Codex image view silently skipped image shrinking and read-session tracking entirely.
-  view_image: "Read"
-};
-var GEMINI_TOOL_NAME_MAP = {
-  run_shell_command: "Bash",
-  read_file: "Read",
-  read_many_files: "Read",
-  // Deliberately 'Read', not 'Glob', even though list_directory enumerates a directory the way a Glob call does: Grok's equivalent list_dir maps to 'Glob' instead, but Grok's GROK_INPUT_KEY_MAP never remaps a 'pattern' key for it either, so on Grok this call is inert (preGlobHandler/globSignature require a non-empty toolInput['pattern'], which a plain directory listing never sends). Gemini's Read mapping, by contrast, is confirmed live: preReadHandler's node_modules deny fires on a list_directory call targeting node_modules (dogfooded in commit f1fc02de), which Glob's handler has no equivalent check for. Read was the considered choice, not an oversight; kept even though the two harnesses disagree.
-  list_directory: "Read",
-  write_file: "Write",
-  replace: "Edit",
-  glob: "Glob",
-  grep_search: "Grep",
-  // 'search_file_content' was GREP_TOOL_NAME's value before gemini-cli renamed it to 'grep_search' (confirmed against gemini-cli's current base-declarations.ts, which now defines GREP_TOOL_NAME = 'grep_search'; some of gemini-cli's own docs pages still lag the rename). Kept as a backward-compat entry for older installed gemini-cli versions that still emit the pre-rename name -- not dead/hallucinated, just legacy.
-  search_file_content: "Grep",
-  // Gemini's real web-search tool is registered as 'google_web_search' (WEB_SEARCH_TOOL_NAME in gemini-cli's tool-names.ts) -- 'web_search' is not a tool name Gemini CLI ever emits, so the old entry here silently never matched a real invocation.
-  // Previously mapped to 'WebFetch' as a workaround for GEMINI_PRE_TOOLS/POST_TOOLS (gemini_install.ts) excluding 'WebSearch' -- that made the hook fire under the installer's matcher, but hooks_fetch.ts's preFetchHandler/postFetchHandler require a `url` tool-input key, which a search call never sends (it sends `query`), so every google_web_search call silently no-op'd through WebFetch's handler: no URL policy check ever applied to it (it has no URL to check) and no search-result dedup ever ran. Now mapped to the dedicated 'WebSearch' handler (hooks_websearch.ts), which reads `query` directly; the installer gate above was extended to include 'WebSearch' so the hook stays wired.
-  google_web_search: "WebSearch",
-  web_fetch: "WebFetch"
-};
-var GEMINI_INPUT_KEY_MAP = {
-  // Gemini's real write_file/replace tool schemas already use 'file_path' (and replace's 'old_string'/'new_string') verbatim -- identical to token-goat's own canonical keys (see getFilePath() in hooks_common.ts, which reads event.toolInput['file_path']) -- confirmed against gemini-cli's own EditToolParams/WriteFileToolParams interfaces. No remap is needed for Write/Edit; the previous entries here actively renamed a key that was already correct (file_path -> path), which would have silently corrupted the path argument on every real Gemini Write/Edit call.
-  // 'Read' covers THREE distinct raw Gemini tools (see GEMINI_TOOL_NAME_MAP above), and they do NOT share one schema: read_file already uses 'file_path' verbatim, no remap needed; list_directory uses 'dir_path' (confirmed against gemini-cli's LSToolParams) -- remapped to 'file_path' below, exactly mirroring Grep's existing dir_path->path fix; read_many_files uses 'include' (confirmed against gemini-cli's ReadManyFilesParams), an ARRAY of glob patterns, not a single file path -- there is no single string to remap it to, so it is deliberately left unmapped. getFilePath() (hooks_common.ts) will return undefined for this call, and preReadHandler/postReadHandler already fall back to passOutput() on an undefined path (see preReadHandler's `if (filePath === undefined) return passOutput()`), so a real read_many_files call still succeeds normally; it just doesn't get session-dedup tracking or read-count hints. Accepted limitation, not a bug to force-fit.
-  Read: { dir_path: "file_path" },
-  // Grep's real tool (grep_search) calls its target-directory argument 'dir_path', which preReadHandler's Grep fallback (event.toolInput['path']) doesn't recognize, so that one remains remapped.
-  Grep: { dir_path: "path" }
-};
-var GROK_TOOL_NAME_MAP = {
-  read_file: "Read",
-  write: "Write",
-  search_replace: "Edit",
-  run_terminal_command: "Bash",
-  // The grok 0.2.93 binary registers its shell tool as `tool.run_terminal_cmd` (tracing-id table in ~/.grok/bin/agent.exe) and its newer embedded hooks doc's PreToolUse example sends `"toolName": "run_terminal_cmd"`, while the older embedded doc revision and a 2026-07-09 live capture on the same version both show `run_terminal_command`. Which spelling arrives is profile/version dependent, so BOTH are mapped: an unmatched extra entry is a harmless no-op, a missing one silently kills every Bash hook (compression, wrap, hints) on that profile.
-  run_terminal_cmd: "Bash",
-  grep: "Grep",
-  list_dir: "Glob",
-  // `glob` is a distinct registered grok tool (tool.glob in the 0.2.93 binary's tracing-id table), separate from list_dir; unmapped it arrived as lowercase 'glob' and matched no handler.
-  glob: "Glob",
-  // web_fetch/web_search were entirely absent from this map, so grok's URL fetches bypassed token-goat's WebFetch pipeline (URL-policy deny included) and its searches bypassed the WebSearch dedup/compression. Verified against the 0.2.93 binary: tool.web_fetch / tool.web_search registered ids, grok_build WebFetchInput's field described as "The URL to fetch content from" (i.e. `url`), grok_build WebSearchInput's fields query/citations/allowed_domains -- all matching the keys hooks_fetch.ts / hooks_websearch.ts already read, so a name map alone revives both.
-  web_fetch: "WebFetch",
-  web_search: "WebSearch",
-  // The Hashline prompt profile registers hashline_read/hashline_edit/hashline_grep (tool.hashline_* in the binary; grok's own hook alias table pairs them with Read/Edit/Grep). Their input key shapes were not individually verified: if one differs, the mapped handler degrades to the same no-op as an unmapped name, never a wrong rewrite. The *_concise twins are the GrokBuildConcise profile's registrations of the same three core tools.
-  hashline_read: "Read",
-  hashline_edit: "Edit",
-  hashline_grep: "Grep",
-  read_file_concise: "Read",
-  search_replace_concise: "Edit",
-  run_terminal_cmd_concise: "Bash"
-};
-var GROK_INPUT_KEY_MAP = {
-  Read: { target_file: "file_path" }
-};
-var KIMI_TOOL_NAME_MAP = {
-  FetchURL: "WebFetch",
-  ReadMediaFile: "Read"
-};
-var KIMI_INPUT_KEY_MAP = {
-  // line_offset/n_lines are Kimi's Read paging arguments (ReadInputSchema in MoonshotAI/kimi-code packages/agent-core-v2/src/agent/tools/os/read/read.ts: `path`, `line_offset` "the line number to start reading from", `n_lines` "the number of lines to read"). Unmapped, every ranged Kimi read looked unbounded to hooks_read.ts's estimateRequestedSlice and was gated on the whole file's size -- a small slice of a big file could draw the large-file deny meant for full reads. line_offset's 1-indexed positive form matches Read's own offset semantics exactly; its negative tail-read form has no token-goat equivalent and is clamped to 1 by estimateRequestedSlice's `offset >= 1` guard, degrading to a window of the right SIZE (which is all the gate consumes). ReadMediaFile shares this map via its Read rename and carries only `path`, so the extra entries never touch it.
-  Read: { path: "file_path", line_offset: "offset", n_lines: "limit" },
-  Write: { path: "file_path" },
-  Edit: { path: "file_path" }
-};
-var QWEN_TOOL_NAME_MAP = {
-  read_file: "Read",
-  write_file: "Write",
-  edit: "Edit",
-  replace: "Edit",
-  notebook_edit: "NotebookEdit",
-  run_shell_command: "Bash",
-  grep_search: "Grep",
-  search_file_content: "Grep",
-  glob: "Glob",
-  web_fetch: "WebFetch",
-  web_search: "WebSearch",
-  // Same deliberate 'Read' choice as Gemini's list_directory entry above (see its comment): node_modules deny fires, Grok's rival 'Glob' mapping is inert for the equivalent tool anyway.
-  list_directory: "Read"
-};
-var QWEN_INPUT_KEY_MAP = {
-  Read: { path: "file_path" }
-};
-var VSCODE_TOOL_NAME_MAP = {
-  read_file: "Read",
-  view_image: "Read",
-  list_dir: "Read",
-  grep_search: "Grep",
-  file_search: "Glob",
-  create_file: "Write",
-  replace_string_in_file: "Edit",
-  insert_edit_into_file: "Edit",
-  edit_notebook_file: "NotebookEdit",
-  run_in_terminal: "Bash"
-};
-var VSCODE_INPUT_KEY_MAP = {
-  read_file: { filePath: "file_path" },
-  view_image: { filePath: "file_path" },
-  list_dir: { path: "file_path" },
-  grep_search: { query: "pattern", includePattern: "glob" },
-  file_search: { query: "pattern" },
-  create_file: { filePath: "file_path" },
-  replace_string_in_file: { filePath: "file_path", oldString: "old_string", newString: "new_string" },
-  insert_edit_into_file: { filePath: "file_path" },
-  edit_notebook_file: { filePath: "notebook_path" },
-  run_in_terminal: {}
-};
-var VSCODE_TOOL_NAME_KEY = "_tg_vscode_tool_name";
-function vscodeNativeToolInput(vscodeToolName2, canonicalInput) {
-  const inverse = {};
-  for (const [nativeKey, canonicalKey] of Object.entries(VSCODE_INPUT_KEY_MAP[vscodeToolName2] ?? {})) {
-    inverse[canonicalKey] = nativeKey;
-  }
-  return remapInputKeys(canonicalInput, inverse);
-}
-function remapInputKeys(input, keyMap) {
-  const newInput = {};
-  for (const [k, v] of Object.entries(input)) {
-    newInput[keyMap[k] || k] = v;
-  }
-  return newInput;
-}
-function remapToolName(obj, toolName, nameMap, inputKeyMap) {
-  const mapped = nameMap[toolName] ?? toolName;
-  const result = { ...obj };
-  result["tool_name"] = mapped;
-  const rawInput = obj["tool_input"];
-  const keyMap = inputKeyMap[mapped];
-  if (keyMap && typeof rawInput === "object" && rawInput !== null && !Array.isArray(rawInput)) {
-    result["tool_input"] = remapInputKeys(rawInput, keyMap);
-  }
-  return result;
-}
-function grokToCanonicalWire(obj) {
-  const wire = { ...obj };
-  if (typeof wire["toolName"] === "string" && wire["tool_name"] === void 0) {
-    wire["tool_name"] = wire["toolName"];
-  }
-  if (typeof wire["toolInput"] === "object" && wire["toolInput"] !== null && !Array.isArray(wire["toolInput"]) && wire["tool_input"] === void 0) {
-    wire["tool_input"] = wire["toolInput"];
-  }
-  if (typeof wire["sessionId"] === "string" && wire["session_id"] === void 0) {
-    wire["session_id"] = wire["sessionId"];
-  }
-  const toolResult = wire["toolResult"];
-  if (toolResult !== null && typeof toolResult === "object" && !Array.isArray(toolResult)) {
-    const tr = toolResult;
-    if (typeof tr["output_for_prompt"] === "string") {
-      wire["tool_response"] = { content: tr["output_for_prompt"], exit_code: tr["exit_code"] };
-    } else {
-      const firstString = Object.entries(tr).find(([k, v]) => k !== "type" && typeof v === "string");
-      if (firstString) {
-        wire["tool_response"] = { content: firstString[1] };
-      }
-    }
-  }
-  return wire;
-}
-function aliasLlmContentToOutput(result) {
-  const toolResponse = result["tool_response"];
-  if (toolResponse === null || typeof toolResponse !== "object" || Array.isArray(toolResponse)) return;
-  const responseRecord = toolResponse;
-  if (typeof responseRecord["llmContent"] === "string" && responseRecord["output"] === void 0) {
-    result["tool_response"] = { ...responseRecord, output: responseRecord["llmContent"] };
-  }
-}
-function normalizePayload(payload, harness = "claude") {
-  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
-    _LOG.warn("normalizePayload: payload is not a dict; received %s", typeof payload);
-    return {};
-  }
-  const rawObj = payload;
-  const obj = harness === "grok" ? grokToCanonicalWire(rawObj) : rawObj;
-  const toolName = obj["tool_name"];
-  if (typeof toolName !== "string" || !toolName.trim()) {
-    _LOG.debug("normalizePayload: tool_name missing or invalid; received %s", toolName);
-    return {};
-  }
-  if (harness === "grok") {
-    const result2 = remapToolName(obj, toolName, GROK_TOOL_NAME_MAP, GROK_INPUT_KEY_MAP);
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "codex") {
-    const mapped = CODEX_TOOL_NAME_MAP[toolName];
-    const result2 = { ...obj };
-    if (mapped) {
-      result2["tool_name"] = mapped;
-    }
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "copilot_cli") {
-    const result2 = { ...obj };
-    result2["tool_name"] = canonicalizeCopilotMcpToolName(toolName);
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "vscode") {
-    const result2 = { ...obj };
-    result2["tool_name"] = VSCODE_TOOL_NAME_MAP[toolName] ?? toolName;
-    const keyMap = VSCODE_INPUT_KEY_MAP[toolName];
-    const rawInput = obj["tool_input"];
-    if (keyMap && typeof rawInput === "object" && rawInput !== null && !Array.isArray(rawInput)) {
-      result2["tool_input"] = remapInputKeys(rawInput, keyMap);
-    }
-    result2[VSCODE_TOOL_NAME_KEY] = toolName;
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "kimi") {
-    const result2 = remapToolName(obj, toolName, KIMI_TOOL_NAME_MAP, KIMI_INPUT_KEY_MAP);
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "qwen") {
-    const result2 = remapToolName(obj, toolName, QWEN_TOOL_NAME_MAP, QWEN_INPUT_KEY_MAP);
-    aliasLlmContentToOutput(result2);
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "gemini") {
-    const result2 = remapToolName(obj, toolName, GEMINI_TOOL_NAME_MAP, GEMINI_INPUT_KEY_MAP);
-    if ("functionCallId" in result2 && !("toolUseId" in result2)) {
-      result2["toolUseId"] = result2["functionCallId"];
-      delete result2["functionCallId"];
-    }
-    aliasLlmContentToOutput(result2);
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  const result = { ...obj };
-  result["_tg_harness"] = harness;
-  return result;
-}
-
-// src/hook_registry.ts
-init_define_import_meta_env();
-
-// src/hooks_common.ts
-init_define_import_meta_env();
-function getToolName(event) {
-  return event.toolName;
-}
-function getToolInput(event) {
-  return event.toolInput;
-}
-function getFilePath(event) {
-  const value = event.toolInput["file_path"];
-  if (typeof value === "string" && value !== "") return value;
-  const notebookValue = event.toolInput["notebook_path"];
-  return typeof notebookValue === "string" && notebookValue !== "" ? notebookValue : void 0;
-}
-function getCwd(event) {
-  const value = event.raw && typeof event.raw === "object" ? event.raw["cwd"] : void 0;
-  return typeof value === "string" && value !== "" ? value : void 0;
-}
-function getTranscriptPath(event) {
-  const value = event.raw && typeof event.raw === "object" ? event.raw["transcript_path"] : void 0;
-  return typeof value === "string" && value !== "" ? value : void 0;
-}
-function extractToolResponseField(raw, keys) {
-  const resp = raw["tool_response"];
-  if (typeof resp === "string") return resp;
-  if (resp !== null && typeof resp === "object") {
-    const r = resp;
-    const path12 = resolveToolResponseFieldPath(r, keys);
-    if (path12 !== null) return readAtPath(r, path12);
-  }
-  return "";
-}
-var NESTED_TOOL_RESPONSE_PATHS = [["file", "content"]];
-function readAtPath(resp, path12) {
-  let cur = resp;
-  for (const seg of path12) {
-    if (cur === null || typeof cur !== "object") return "";
-    cur = cur[seg];
-  }
-  return typeof cur === "string" ? cur : "";
-}
-function resolveToolResponseFieldPath(resp, keys) {
-  for (const key of keys) {
-    if (typeof resp[key] === "string" && resp[key] !== "") return [key];
-  }
-  for (const path12 of NESTED_TOOL_RESPONSE_PATHS) {
-    if (readAtPath(resp, path12) !== "") return path12;
-  }
-  return null;
-}
-function replaceToolResponseField(resp, keys, newText) {
-  const path12 = resolveToolResponseFieldPath(resp, keys);
-  if (path12 === null) return null;
-  const root = { ...resp };
-  let cur = root;
-  for (let i = 0; i < path12.length - 1; i++) {
-    const seg = path12[i];
-    const child = cur[seg];
-    if (child === null || typeof child !== "object") return null;
-    const cloned = { ...child };
-    cur[seg] = cloned;
-    cur = cloned;
-  }
-  cur[path12[path12.length - 1]] = newText;
-  return root;
-}
-var OUTPUT_FIRST_TOOL_RESPONSE_KEYS = ["output", "content", "text", "body", "stdout", "stderr"];
-var BODY_FIRST_TOOL_RESPONSE_KEYS = ["output", "body", "text", "content", "result"];
-function isMcpErrorResponse(raw) {
-  const tr = raw["tool_response"];
-  if (!tr || typeof tr !== "object") return false;
-  return tr["isError"] === true;
-}
-var MCP_CONTENT_BLOCK_TYPES = /* @__PURE__ */ new Set(["text", "image", "audio", "resource", "resource_link"]);
-function blocksToText(blocks) {
-  if (!Array.isArray(blocks)) return null;
-  const parts = [];
-  let recognised = false;
-  for (const block of blocks) {
-    if (!block || typeof block !== "object") continue;
-    const rec = block;
-    const type = rec["type"];
-    if (typeof type === "string" && MCP_CONTENT_BLOCK_TYPES.has(type)) recognised = true;
-    if (typeof rec["text"] === "string") {
-      parts.push(rec["text"]);
-      continue;
-    }
-    const resource = rec["resource"];
-    if (resource !== null && typeof resource === "object") {
-      const nested = resource["text"];
-      if (typeof nested === "string") parts.push(nested);
-      continue;
-    }
-    if (rec["type"] === "resource_link") {
-      const link = ["name", "uri", "description"].map((k) => rec[k]).filter((v) => typeof v === "string" && v !== "");
-      if (link.length > 0) parts.push(link.join(" "));
-    }
-  }
-  if (parts.length > 0) return parts.join("\n");
-  return recognised ? "" : null;
-}
-function extractToolResultText(raw) {
-  const tr = raw["tool_response"];
-  if (typeof tr === "string") return tr;
-  if (!tr || typeof tr !== "object") return "";
-  const bare = blocksToText(tr);
-  if (bare !== null) return bare;
-  const resp = tr;
-  const content = resp["content"];
-  const joined = blocksToText(content);
-  if (joined !== null) return joined;
-  for (const key of ["output", "text", "body"]) {
-    if (typeof resp[key] === "string") return resp[key];
-  }
-  if (typeof content === "string") return content;
-  try {
-    return JSON.stringify(resp);
-  } catch {
-    return "";
-  }
-}
-function asContentBlocks(value) {
-  if (!Array.isArray(value)) return null;
-  const blocks = value.filter((b) => b !== null && typeof b === "object");
-  const typed = blocks.some((b) => typeof b["type"] === "string" && MCP_CONTENT_BLOCK_TYPES.has(b["type"]));
-  return typed ? blocks : null;
-}
-function mcpContentBlocks(raw) {
-  const tr = raw["tool_response"];
-  if (tr === null || typeof tr !== "object") return null;
-  return asContentBlocks(tr) ?? asContentBlocks(tr["content"]);
-}
-function isTextualContentBlock(block) {
-  if (block === null || typeof block !== "object") return false;
-  const rec = block;
-  if (typeof rec["text"] === "string") return true;
-  if (rec["type"] === "resource_link") return true;
-  const resource = rec["resource"];
-  return resource !== null && typeof resource === "object" && typeof resource["text"] === "string";
-}
-function withPreservedBlocks(output, blocks) {
-  if (output.hookType !== "rewriteOutput" || blocks.length === 0) return output;
-  return { ...output, updatedBlocks: [{ type: "text", text: output.updatedOutput }, ...blocks] };
-}
-function passOutput() {
-  return { hookType: "pass" };
-}
-function denyOutput(message) {
-  return { hookType: "deny", message: `[tg] ${neutralizeOutsideFences(message)}` };
-}
-function contextOutput(context) {
-  return { hookType: "context", context };
-}
-function emitRewrite(updatedOutput, detail, savings, redaction = "count-here") {
-  if (detectHarness() === "vscode") return passOutput();
-  if (redaction === "count-here") {
-    const count = countRedactionPlaceholders(updatedOutput);
-    if (count > 0) recordStat("secret_redacted", 0, count, void 0, detail);
-  }
-  if (savings !== void 0) {
-    const bytesSaved = savings.originalBytes - Buffer.byteLength(updatedOutput, "utf-8");
-    if (bytesSaved > 0) recordStat(savings.kind, bytesSaved, savedTokensFromBytes(bytesSaved), void 0, savings.detail);
-  }
-  return { hookType: "rewriteOutput", updatedOutput };
-}
-function emitRewriteIfChanged(original, emitted, detail) {
-  if (emitted === original) return passOutput();
-  return emitRewrite(emitted, detail);
-}
-function countNonEmptyLines(text) {
-  return text.split(/\r\n|\r|\n/).filter((line) => line.length > 0).length;
-}
-function estimateResultCount(text) {
-  const firstLine = text.split(/\r\n|\r|\n/).find((line) => line.trim().length > 0);
-  if (firstLine !== void 0) {
-    const trimmed = firstLine.trim();
-    if (/^No (?:files|matches) found\.?$/i.test(trimmed)) return 0;
-    const found = /^Found (\d+) (?:files?|matches?)\.?$/i.exec(trimmed);
-    if (found) return Number.parseInt(found[1], 10);
-  }
-  return countNonEmptyLines(text);
-}
-function makeDedupHintHandlers(opts) {
-  const post = (event) => {
-    try {
-      if (getToolName(event) !== opts.toolName) return passOutput();
-      const signature = opts.buildSignature(getToolInput(event));
-      if (signature === null) return passOutput();
-      const text = extractToolResponseField(event.raw, OUTPUT_FIRST_TOOL_RESPONSE_KEYS);
-      opts.recordQuery(signature, estimateResultCount(text));
-      return passOutput();
-    } catch {
-      return passOutput();
-    }
-  };
-  const pre = (event) => {
-    try {
-      if (getToolName(event) !== opts.toolName) return passOutput();
-      const toolInput = getToolInput(event);
-      const signature = opts.buildSignature(toolInput);
-      if (signature === null) return passOutput();
-      const priorCount = opts.getMatchCount(signature);
-      if (priorCount === null) return passOutput();
-      if (priorCount < loadConfig().hints[opts.minMatchesConfigKey]) return passOutput();
-      recordStat(opts.statName, 0, 0);
-      const pattern = displaySafeText(typeof toolInput["pattern"] === "string" ? toolInput["pattern"] : "");
-      return contextOutput(
-        "Note: an identical " + opts.toolName + ' for "' + pattern + '" already ran this session and returned ' + priorCount + (priorCount === 1 ? " match" : " matches") + ". If that result already answers this, you can skip re-running it."
-      );
-    } catch {
-      return passOutput();
-    }
-  };
-  return { post, pre };
-}
-
-// src/bridges/vscode_hooks.ts
-init_define_import_meta_env();
-import * as crypto from "node:crypto";
-import * as fs5 from "node:fs";
-import * as os3 from "node:os";
-import * as path5 from "node:path";
-function vscodeToolName(event) {
-  const name = event?.raw[VSCODE_TOOL_NAME_KEY];
-  return typeof name === "string" ? name : void 0;
-}
-var SHRINK_PREFIX = "token-goat-shrink-";
-var MATERIALIZED_MAX_AGE_MS = 60 * 60 * 1e3;
-function pruneMaterialized() {
-  const now = Date.now();
-  try {
-    const dir = os3.tmpdir();
-    for (const file of fs5.readdirSync(dir)) {
-      if (!file.startsWith(SHRINK_PREFIX)) continue;
-      const full = path5.join(dir, file);
-      try {
-        const st = fs5.statSync(full);
-        if (st.isFile() && now - st.mtimeMs > MATERIALIZED_MAX_AGE_MS) fs5.unlinkSync(full);
-      } catch {
-      }
-    }
-  } catch {
-  }
-}
-function materializeShrunkImageFile(context) {
-  const idx = context.indexOf("data:image/");
-  if (idx === -1) return void 0;
-  const match = /^data:image\/([a-zA-Z0-9.+-]+);base64,([A-Za-z0-9+/=]+)$/.exec(context.slice(idx).trim());
-  if (!match) return void 0;
-  try {
-    pruneMaterialized();
-    const file = path5.join(os3.tmpdir(), `${SHRINK_PREFIX}${process.pid}-${Date.now()}-${crypto.randomUUID()}.${match[1]}`);
-    fs5.writeFileSync(file, Buffer.from(match[2], "base64"), { mode: 384 });
-    return file;
-  } catch {
-    return void 0;
-  }
-}
-var NESTED_DECISION_EVENTS = /* @__PURE__ */ new Set(["stop", "subagent_stop"]);
-function serializeVscodeOutput(output, eventName, hookEventName, event) {
-  switch (output.hookType) {
-    case "deny":
-      if (eventName === "pre_tool_use") {
-        return JSON.stringify({
-          hookSpecificOutput: { hookEventName, permissionDecision: "deny", permissionDecisionReason: output.message }
-        });
-      }
-      if (NESTED_DECISION_EVENTS.has(eventName)) {
-        return JSON.stringify({ hookSpecificOutput: { hookEventName, decision: "block", reason: output.message } });
-      }
-      return JSON.stringify({ decision: "block", reason: output.message });
-    case "context": {
-      if (NESTED_DECISION_EVENTS.has(eventName)) return "{}";
-      if (eventName === "pre_compact" || eventName === "notification") return JSON.stringify({ systemMessage: output.context });
-      if (eventName === "pre_tool_use" && output.context.includes("data:image/")) return "{}";
-      return JSON.stringify({ hookSpecificOutput: { hookEventName, additionalContext: output.context } });
-    }
-    case "rewriteInput": {
-      const tool = vscodeToolName(event);
-      const updatedInput = tool === void 0 ? output.updatedInput : vscodeNativeToolInput(tool, output.updatedInput);
-      return JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", updatedInput } });
-    }
-    case "rewriteOutput":
-      return "{}";
-    case "pass":
-      return "{}";
-  }
-}
-
-// src/hook_registry.ts
-function sessionStateKey(event) {
-  return event.agentId !== void 0 ? `${event.sessionId}:agent:${event.agentId}` : event.sessionId;
-}
-var _handlers = /* @__PURE__ */ new Map();
-function registerHook(eventName, handler, opts) {
-  let list = _handlers.get(eventName);
-  if (list === void 0) {
-    list = [];
-    _handlers.set(eventName, list);
-  }
-  list.push({
-    handler,
-    toolName: opts?.toolName,
-    toolPattern: opts?.toolPattern,
-    advisory: opts?.advisory === true,
-    followsMatcher: opts?.followsMatcher === true
-  });
-}
-function toolMatcherFor(eventName) {
-  const list = _handlers.get(eventName);
-  if (list === void 0 || list.length === 0) return null;
-  const parts = [];
-  for (const { toolName, toolPattern, followsMatcher } of list) {
-    if (followsMatcher) continue;
-    if (toolName === void 0 && toolPattern === void 0) return null;
-    for (const part of [toolName === void 0 ? void 0 : `^${toolName}$`, toolPattern]) {
-      if (part !== void 0 && part !== "" && !parts.includes(part)) parts.push(part);
-    }
-  }
-  if (parts.length === 0) return null;
-  return parts.join("|");
-}
-function foldToolName2(name) {
-  return name.toLowerCase().replace(/[_-]/g, "");
-}
-function noteUnrecognizedTool(event, list) {
-  const toolName = event.toolName;
-  if (typeof toolName !== "string" || toolName === "") return;
-  const named = [];
-  for (const { toolName: want } of list) {
-    if (want === void 0) continue;
-    if (want === toolName) return;
-    named.push(want);
-  }
-  if (named.length === 0) return;
-  const folded = foldToolName2(toolName);
-  const nearMiss = named.find((n) => foldToolName2(n) === folded) ?? null;
-  recordUnmappedTool(toolName, event.eventName, nearMiss);
-}
-async function runHook(event) {
-  const list = _handlers.get(event.eventName);
-  if (list === void 0) return { hookType: "pass" };
-  noteUnrecognizedTool(event, list);
-  let advisoryResult;
-  for (const { handler, toolName, advisory } of list) {
-    if (toolName !== void 0 && toolName !== event.toolName) continue;
-    let result;
-    try {
-      result = await handler(event);
-    } catch {
-      continue;
-    }
-    if (result.hookType !== "pass") {
-      if (advisory) {
-        advisoryResult = result;
-        continue;
-      }
-      return result;
-    }
-  }
-  return advisoryResult ?? { hookType: "pass" };
-}
-function clearHooks() {
-  _handlers.clear();
-}
-registerReset(clearHooks);
-var CLAUDE_CODE_EVENT_NAMES = {
-  pre_tool_use: "PreToolUse",
-  post_tool_use: "PostToolUse",
-  notification: "Notification",
-  stop: "Stop",
-  pre_compact: "PreCompact",
-  post_compact: "PostCompact",
-  user_prompt_submit: "UserPromptSubmit",
-  subagent_stop: "SubagentStop",
-  session_start: "SessionStart",
-  // Claude Code has no separate failure event -- a failed tool arrives on PostToolUse there,
-  // and only Copilot splits it out. This entry exists because the map is exhaustive over
-  // HookEventName, and it is a spelling for the response envelope rather than a claim that
-  // Claude Code will ever send this event. Nothing iterates this map to build install config,
-  // so naming an event Claude Code does not have cannot register one.
-  post_tool_use_failure: "PostToolUseFailure"
-};
-var EVENTS_WITHOUT_ADDITIONAL_CONTEXT = /* @__PURE__ */ new Set([
-  "notification",
-  "pre_compact"
-]);
-var EVENTS_WITH_RAW_STDOUT_CONTEXT = /* @__PURE__ */ new Set(["pre_compact"]);
-var BODY_FIRST_REWRITE_TOOLS = /* @__PURE__ */ new Set(["WebFetch", "Skill"]);
-function shapedUpdatedToolOutput(updatedOutput, harness, event) {
-  if (harness !== "claudecode") return updatedOutput;
-  const resp = event?.raw["tool_response"];
-  if (resp === null || resp === void 0 || typeof resp !== "object") return updatedOutput;
-  const keys = BODY_FIRST_REWRITE_TOOLS.has(event?.toolName ?? "") ? BODY_FIRST_TOOL_RESPONSE_KEYS : OUTPUT_FIRST_TOOL_RESPONSE_KEYS;
-  return replaceToolResponseField(resp, keys, updatedOutput) ?? updatedOutput;
-}
-function serializeOutput(output, eventName, harness, event) {
-  if (harness === "vscode") return serializeVscodeOutput(output, eventName, CLAUDE_CODE_EVENT_NAMES[eventName], event);
-  switch (output.hookType) {
-    case "deny":
-      return JSON.stringify({ decision: "block", reason: output.message });
-    case "context":
-      if (EVENTS_WITH_RAW_STDOUT_CONTEXT.has(eventName) && harness === "claudecode") {
-        return output.context;
-      }
-      if (EVENTS_WITHOUT_ADDITIONAL_CONTEXT.has(eventName)) {
-        return JSON.stringify({ systemMessage: output.context });
-      }
-      return JSON.stringify({
-        hookSpecificOutput: {
-          hookEventName: CLAUDE_CODE_EVENT_NAMES[eventName],
-          additionalContext: output.context
-        }
-      });
-    case "rewriteInput":
-      return JSON.stringify({
-        hookSpecificOutput: {
-          hookEventName: "PreToolUse",
-          permissionDecision: "allow",
-          updatedInput: output.updatedInput
-        }
-      });
-    case "rewriteOutput":
-      return JSON.stringify({
-        hookSpecificOutput: {
-          hookEventName: "PostToolUse",
-          // A block array is emitted only when the handler built one, and only for Claude Code: every other harness token-goat bridges to reads this field as a plain string into a text block of its own, so handing it an array there is the same mistake in the other direction. See HookOutput's `updatedBlocks` for the capture that proves Claude Code takes the array.
-          updatedToolOutput: output.updatedBlocks !== void 0 && harness === "claudecode" ? output.updatedBlocks : shapedUpdatedToolOutput(output.updatedOutput, harness, event)
-        }
-      });
-    case "pass":
-      return JSON.stringify({});
-  }
-}
-
 // src/tool_filters/helpers.ts
-init_define_import_meta_env();
-import * as fs6 from "node:fs";
-import * as path6 from "node:path";
 var DEFAULT_MAX_LINES = 1e3;
 var DEFAULT_MAX_BYTES = 64 * 1024;
 var MAX_INSPECT_BYTES = 2 * 1024 * 1024;
@@ -2680,7 +590,7 @@ function loadPackageScripts(candidate, stat) {
   if (cached && cached.mtimeMs === stat.mtimeMs) return cached.scripts;
   let scripts = {};
   try {
-    const parsed = JSON.parse(fs6.readFileSync(candidate, "utf8"));
+    const parsed = JSON.parse(fs.readFileSync(candidate, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       const raw = parsed["scripts"];
       if (raw && typeof raw === "object" && !Array.isArray(raw)) scripts = raw;
@@ -2693,13 +603,13 @@ function loadPackageScripts(candidate, stat) {
 function findNearestPackageScripts(startDir) {
   let dir = startDir;
   for (; ; ) {
-    const candidate = path6.join(dir, "package.json");
+    const candidate = path.join(dir, "package.json");
     try {
-      const stat = fs6.statSync(candidate);
+      const stat = fs.statSync(candidate);
       if (stat.isFile()) return loadPackageScripts(candidate, stat);
     } catch {
     }
-    const parent = path6.dirname(dir);
+    const parent = path.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -2992,8 +902,8 @@ function byteLength(s) {
 
 // src/bash_output_cache.ts
 init_define_import_meta_env();
-import { readdirSync as readdirSync2, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
-import { resolve as resolve4 } from "path";
+import { readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { resolve } from "path";
 
 // src/hints/lang_patterns.ts
 init_define_import_meta_env();
@@ -3132,15 +1042,15 @@ var LOCK_FILE_COUNT = LOCK_FILE_NAMES.size;
 var MANIFEST_FILE_COUNT = MANIFEST_FILE_NAMES.size + MANIFEST_EXTENSIONS.size + MANIFEST_BASENAME_PATTERNS.length;
 var BUILD_DIR_COUNT = BUILD_DIR_NAMES.size;
 var GENERATED_EXT_COUNT = ALWAYS_GENERATED_EXTS.size + CONDITIONALLY_GENERATED_EXTS.size;
-function isLockFile(basename2) {
-  return LOCK_FILE_NAMES.has(basename2.toLowerCase());
+function isLockFile(basename) {
+  return LOCK_FILE_NAMES.has(basename.toLowerCase());
 }
-function isManifestFile(basename2) {
-  const lower = basename2.toLowerCase();
+function isManifestFile(basename) {
+  const lower = basename.toLowerCase();
   if (MANIFEST_FILE_NAMES.has(lower)) return true;
   const dot = lower.lastIndexOf(".");
   if (dot !== -1 && MANIFEST_EXTENSIONS.has(lower.slice(dot))) return true;
-  if (MANIFEST_BASENAME_PATTERNS.some((re) => re.test(basename2))) return true;
+  if (MANIFEST_BASENAME_PATTERNS.some((re) => re.test(basename))) return true;
   return false;
 }
 function pathSegments(filePath) {
@@ -3272,14 +1182,14 @@ function getMonitoringRecallHint(cmd) {
 
 // src/recall_index.ts
 init_define_import_meta_env();
-import * as fs7 from "node:fs";
+import * as fs2 from "node:fs";
 function subdirForCacheType(cacheType) {
   return cacheType === "web" ? "web_outputs" : "bash_outputs";
 }
 function blobStillExists(cacheType, id) {
   try {
     const p = blobPath(subdirForCacheType(cacheType), id);
-    return p !== null && fs7.existsSync(p);
+    return p !== null && fs2.existsSync(p);
   } catch {
     return false;
   }
@@ -3496,11 +1406,11 @@ function gitStateFingerprintSync(cwd) {
   }
 }
 var DIR_FINGERPRINT_LISTING_CAP_ENTRIES = 1e4;
-function dirStateFingerprintSync(path12) {
+function dirStateFingerprintSync(path2) {
   try {
-    const stat = statSync3(path12);
+    const stat = statSync2(path2);
     if (!stat.isDirectory()) return null;
-    const entries = readdirSync2(path12);
+    const entries = readdirSync(path2);
     if (entries.length <= DIR_FINGERPRINT_LISTING_CAP_ENTRIES) {
       return shortFingerprint(entries.slice().sort().join("\0"));
     }
@@ -3510,12 +1420,12 @@ function dirStateFingerprintSync(path12) {
   }
 }
 var FILE_FINGERPRINT_CONTENT_CAP_BYTES = 2 * 1024 * 1024;
-function fileStateFingerprintSync(path12) {
+function fileStateFingerprintSync(path2) {
   try {
-    const stat = statSync3(path12);
+    const stat = statSync2(path2);
     if (!stat.isFile()) return null;
     if (stat.size <= FILE_FINGERPRINT_CONTENT_CAP_BYTES) {
-      return shortFingerprint(readFileSync5(path12));
+      return shortFingerprint(readFileSync2(path2));
     }
     return shortFingerprint(`${stat.mtimeMs}\0${stat.size}`);
   } catch {
@@ -3531,7 +1441,7 @@ function depLockfileFingerprintSync(cmd, cwd) {
   if (!candidates) return null;
   for (const lockfile of candidates) {
     try {
-      const content = readFileSync5(resolve4(cwd, lockfile));
+      const content = readFileSync2(resolve(cwd, lockfile));
       return shortFingerprint(content);
     } catch {
       continue;
@@ -3607,1690 +1517,179 @@ function commandHashSync(command, cwd = null) {
   }
   return shortFingerprint(key);
 }
-function commandHash(command, cwd = null) {
-  return Promise.resolve(commandHashSync(command, cwd));
-}
-function computeBashFingerprints(command, cwd) {
-  const fingerprints = {};
-  if (cwd && (isGitMutableCommand(command) || isGitPushCommand(command) || isTestRunnerCommand2(command) || isLintCommand(command) || isBuildCommand(command) || isNpmRunScriptCommand(command))) {
-    const fp = gitStateFingerprintSync(cwd);
-    if (fp) fingerprints.git = fp;
-  }
-  if (cwd && isDirListingCommand(command)) {
-    const target = extractFirstPathArg(command, cwd, cwd);
-    if (target) {
-      const fp = dirStateFingerprintSync(target);
-      if (fp) fingerprints.dir = fp;
-    }
-  }
-  if (isDepListCommand(command) || cwd && (isNpmInstallCommand(command) || isNpmAuditCommand(command) || isNpmOutdatedCommand(command))) {
-    const fp = depLockfileFingerprintSync(command, cwd);
-    if (fp) fingerprints.lockfile = fp;
-  }
-  if (cwd && isCatCommand(command)) {
-    const target = extractFirstPathArg(command, cwd, null);
-    if (target) {
-      const fp = fileStateFingerprintSync(target);
-      if (fp) fingerprints.file = fp;
-    }
-  }
-  return Object.keys(fingerprints).length > 0 ? fingerprints : void 0;
-}
-function isBashEntryStale(entry, command, cwd) {
-  const stored = entry.fingerprints;
-  if (!stored) return false;
-  const current = computeBashFingerprints(command, cwd);
-  if (stored.git !== void 0 && stored.git !== current?.git) return true;
-  if (stored.dir !== void 0 && stored.dir !== current?.dir) return true;
-  if (stored.lockfile !== void 0 && stored.lockfile !== current?.lockfile) return true;
-  if (stored.file !== void 0 && stored.file !== current?.file) return true;
-  return false;
-}
-function tokenizeShellArgs(cmd) {
-  const trimmed = cmd.trim();
-  const tokens = [];
-  let current = "";
-  let quoteChar = null;
-  let hasToken = false;
-  for (let i = 0; i < trimmed.length; i++) {
-    const ch = trimmed[i];
-    if (quoteChar !== null) {
-      if (ch === quoteChar) {
-        quoteChar = null;
-      } else {
-        current += ch;
-      }
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quoteChar = ch;
-      hasToken = true;
-      continue;
-    }
-    if (/\s/.test(ch)) {
-      if (hasToken) {
-        tokens.push(current);
-        current = "";
-        hasToken = false;
-      }
-      continue;
-    }
-    current += ch;
-    hasToken = true;
-  }
-  if (hasToken) tokens.push(current);
-  return tokens;
-}
-function extractFirstPathArg(cmd, cwd, fallback) {
-  const tokens = tokenizeShellArgs(cmd);
-  for (let i = 1; i < tokens.length; i++) {
-    const token = tokens[i];
-    if (!token.startsWith("-")) {
-      if (!token.startsWith("/")) {
-        return resolve4(cwd, token);
-      }
-      return token;
-    }
-  }
-  return fallback;
-}
-var ISSUE_LINE_PATTERN = /\b(?:error|fail(?:ed|ure)?|warning)\b/i;
-function summarizeOutputDelta(oldOutput, newOutput) {
-  if (oldOutput === newOutput) return null;
-  const oldLines = oldOutput.split("\n");
-  const newLines = newOutput.split("\n");
-  const oldIssueLines = oldLines.filter((l) => ISSUE_LINE_PATTERN.test(l));
-  if (oldIssueLines.length > 0) {
-    const newIssueLines = newLines.filter((l) => ISSUE_LINE_PATTERN.test(l));
-    const priorTotal = oldIssueLines.length;
-    const availableCounts = /* @__PURE__ */ new Map();
-    for (const l of newIssueLines) availableCounts.set(l, (availableCounts.get(l) ?? 0) + 1);
-    let resolved = 0;
-    for (const l of oldIssueLines) {
-      const avail = availableCounts.get(l) ?? 0;
-      if (avail > 0) {
-        availableCounts.set(l, avail - 1);
-      } else {
-        resolved++;
-      }
-    }
-    const remaining = newIssueLines.length;
-    return `[token-goat: delta] ${resolved} of ${priorTotal} prior issues resolved; remaining: ${remaining}`;
-  }
-  return `[token-goat: delta] output changed: ${oldLines.length} -> ${newLines.length} lines`;
-}
-function storeBashOutputSync(command, output, exitCode, cwd = null) {
-  const id = commandHashSync(command, cwd);
-  const fingerprints = computeBashFingerprints(command, cwd);
-  const redactedOutput = redactSecrets(output).text;
-  const redactedCommand = redactSecrets(command).text;
-  const entry = {
-    id,
-    command: redactedCommand,
-    output: redactedOutput,
-    exitCode,
-    storedAt: Date.now(),
-    sizeBytes: Buffer.byteLength(redactedOutput, "utf-8"),
-    ...fingerprints ? { fingerprints } : {}
-  };
-  _byId.set(id, entry);
-  storeBlob(BASH_OUTPUT_SUBDIR, id, entry);
-  indexRecallEntry("bash", id, redactedCommand, `${redactedCommand}
-${redactedOutput}`, entry.storedAt);
-  return id;
-}
-function storeBashOutput(command, output, exitCode, cwd = null) {
-  return Promise.resolve(storeBashOutputSync(command, output, exitCode, cwd));
-}
-function coerceBashEntry(raw) {
-  if (raw === null || typeof raw !== "object") return null;
-  const o = raw;
-  if (typeof o["id"] !== "string" || typeof o["command"] !== "string" || typeof o["output"] !== "string" || typeof o["exitCode"] !== "number" || typeof o["storedAt"] !== "number" || typeof o["sizeBytes"] !== "number") {
-    return null;
-  }
-  const entry = {
-    id: o["id"],
-    command: o["command"],
-    output: o["output"],
-    exitCode: o["exitCode"],
-    storedAt: o["storedAt"],
-    sizeBytes: o["sizeBytes"]
-  };
-  const rawFingerprints = o["fingerprints"];
-  if (rawFingerprints !== null && typeof rawFingerprints === "object") {
-    const f = rawFingerprints;
-    const fingerprints = {};
-    if (typeof f["git"] === "string") fingerprints.git = f["git"];
-    if (typeof f["dir"] === "string") fingerprints.dir = f["dir"];
-    if (typeof f["lockfile"] === "string") fingerprints.lockfile = f["lockfile"];
-    if (typeof f["file"] === "string") fingerprints.file = f["file"];
-    if (Object.keys(fingerprints).length > 0) return { ...entry, fingerprints };
-  }
-  return entry;
-}
-function getBashOutput(id) {
-  const hit = _byId.get(id);
-  if (hit !== void 0) return hit;
-  if (isBlobStale(BASH_OUTPUT_SUBDIR, id)) return null;
-  const entry = coerceBashEntry(loadBlob(BASH_OUTPUT_SUBDIR, id));
-  if (entry === null) return null;
-  _byId.set(id, entry);
-  return entry;
-}
-registerReset(() => {
-  _byId = /* @__PURE__ */ new Map();
-});
-
-// src/install.ts
-init_define_import_meta_env();
-import * as fs8 from "node:fs";
-import * as os4 from "node:os";
-import * as path7 from "node:path";
-
-// src/bridges/claudecode.ts
-init_define_import_meta_env();
-
-// src/bridges/shim_common.ts
-init_define_import_meta_env();
-var SHIM_REQUIRES = `const { spawnSync } = require('node:child_process')
-const path = require('node:path')
-const { pathToFileURL } = require('node:url')`;
-var SHIM_VALID_HOOK_EVENTS = `// Keep in sync with HOOK_EVENTS in src/types.ts. eventName is validated against this closed
-// set before being concatenated into a shell command string, so a hostile argv (e.g.
-// 'pre_tool_use & calc.exe') can never reach the shell parser.
-const VALID_HOOK_EVENTS = new Set([
-  'pre_tool_use',
-  'post_tool_use',
-  'notification',
-  'stop',
-  'pre_compact',
-  'post_compact',
-  'user_prompt_submit',
-  'subagent_stop',
-  'session_start',
-  'post_tool_use_failure',
-])`;
-var SHIM_TRY_IN_PROCESS = `// Attempts the in-process hook call: import()s dist/token-goat-hook.mjs (a sibling of
-// the baked token-goat entry path, built with zero load-time side effects -- unlike
-// the CLI entry, which runs the full argv-parsing CLI as a side effect of being
-// loaded) and calls its exported relayInProcess() directly, avoiding a second node
-// process spawn entirely. Returns undefined (triggering the spawnSync fallback below)
-// when entryPath is absent, the sibling file doesn't exist (an older install predating
-// this file), or anything else goes wrong -- this must never throw.
-async function tryInProcess(entryPath, eventName, input) {
-  if (!entryPath) return undefined
-  try {
-    const hookLibPath = path.join(path.dirname(entryPath), 'token-goat-hook.mjs')
-    if (!require('node:fs').existsSync(hookLibPath)) return undefined
-    const mod = await import(pathToFileURL(hookLibPath).href)
-    const payload = JSON.parse(input)
-    return await mod.relayInProcess(eventName, payload)
-  } catch {
-    return undefined
-  }
-}`;
-var SHIM_SPAWN_LADDER = `    const res = entryPath
-      ? spawnSync(process.execPath, [entryPath, 'hook', eventName], {
-          input,
-          encoding: 'utf8',
-          timeout: 3000,
-          killSignal: 'SIGKILL',
-          maxBuffer: SHIM_MAX_BUFFER_BYTES,
-        })`;
-var SHIM_MAX_BUFFER_CONST = `const SHIM_MAX_BUFFER_BYTES = 32 * 1024 * 1024`;
-
-// src/bridges/claudecode.ts
-var CLAUDECODE_HOOK_SCRIPT = `#!/usr/bin/env node
-// token-goat Claude Code hook shim. Reads the hook payload on stdin, forwards it to \`token-goat hook <event>\`, and relays the response on stdout.
-'use strict'
-// Cache V8's compiled bytecode for the 3.4 MB hook bundle this shim import()s below. Without it
-// every hook invocation recompiles that bundle from source, which profiled at ~40ms of the ~148ms
-// a single hook takes -- and a hook fires on every tool call. Worth ~23ms per invocation, measured
-// twice on the installed shim by interleaving both variants: 148ms to 125ms, and later 186ms to
-// 163ms on a busier machine. The floor moves with load; the 23ms it removes does not.
-//
-// It has to be here rather than inside the bundle: a module is compiled before any of its own code
-// runs, so a bundle cannot enable the cache for itself. This shim is small enough to compile in
-// well under a millisecond, and the dynamic import() happens after this line, so the bundle is
-// compiled with the cache already active. Same reason the MCP SDK could not be deferred from
-// inside mcp_server.ts -- what a module can affect starts after it is already compiled.
-//
-// enableCompileCache landed in Node 22.1 and package.json allows >=22.0.0, so a miss is possible;
-// it is also best-effort by nature (read-only cache dir, full disk). Swallow everything: this shim
-// must never fail a tool call to save itself 23ms.
-try { require('node:module').enableCompileCache() } catch { /* older Node, or an unwritable cache dir: run uncached */ }
-${SHIM_REQUIRES}
-
-${SHIM_VALID_HOOK_EVENTS}
-
-${SHIM_TRY_IN_PROCESS}
-
-${SHIM_MAX_BUFFER_CONST}
-
-async function main() {
-  const eventName = process.argv[2] || ''
-  if (!VALID_HOOK_EVENTS.has(eventName)) {
-    process.stdout.write('{}')
-    return
-  }
-  let input = ''
-  try {
-    input = require('node:fs').readFileSync(0, 'utf8')
-  } catch {
-    process.stdout.write('{}')
-    return
-  }
-  // process.argv[3], when present, is the absolute path to the running token-goat CLI
-  // entry (mirrors the same argv[3]-baked-entry convention used by the Codex/Copilot
-  // CLI shims). Try the in-process hook lib first (tryInProcess above), which avoids
-  // spawning a second node process altogether; fall back to the entry path directly via
-  // process.execPath, then finally to the old PATH-based shell:true invocation (an
-  // older cached hook config with no argv[3], or a config wired directly to
-  // \`token-goat hook <event>\` rather than through this shim). A 3000ms
-  // timeout/killSignal on both spawnSync fallbacks means token-goat degrades to its own
-  // fail-open '{}' rather than being force-killed by Claude Code's own hook timeout.
-  const entryPath = process.argv[3]
-  let stdout = await tryInProcess(entryPath, eventName, input)
-  if (stdout === undefined) {
-${SHIM_SPAWN_LADDER}
-      : spawnSync('token-goat hook ' + eventName, {
-          input,
-          encoding: 'utf8',
-          shell: true,
-          timeout: 3000,
-          killSignal: 'SIGKILL',
-          maxBuffer: SHIM_MAX_BUFFER_BYTES,
-        })
-    if (res.status !== 0 || !res.stdout) {
-      process.stdout.write('{}')
-      return
-    }
-    stdout = res.stdout
-  }
-  process.stdout.write(stdout)
-}
-
-main().catch(() => {
-  process.stdout.write('{}')
-})
-`;
-
-// src/install.ts
-var HOOK_EVENT_MAP = [
-  ["PreToolUse", "pre_tool_use"],
-  ["PostToolUse", "post_tool_use"],
-  ["PreCompact", "pre_compact"],
-  ["PostCompact", "post_compact"],
-  ["UserPromptSubmit", "user_prompt_submit"],
-  ["SubagentStop", "subagent_stop"],
-  ["SessionStart", "session_start"]
-];
-var SHIM_COMMAND_MARKER = "token-goat-shim";
-var COMMAND_MARKER = "token-goat hook";
-var LEGACY_COMMAND_MARKERS = ["tokenwise", "token_goat", "tg-hook", "token-goat-hook"];
-function anchoredMarkerPattern(marker) {
-  const escaped = escapeRegExp(marker);
-  return new RegExp(`(?<![a-zA-Z0-9_-])${escaped}(?![a-zA-Z0-9_-])`);
-}
-var HOOK_MARKER_PATTERNS = [SHIM_COMMAND_MARKER, COMMAND_MARKER, ...LEGACY_COMMAND_MARKERS].map(anchoredMarkerPattern);
-function isTokenGoatHookCommand(command) {
-  return HOOK_MARKER_PATTERNS.some((pattern) => pattern.test(command));
-}
-function claudeHookScriptPath() {
-  return path7.join(os4.homedir(), ".claude", "hooks", "token-goat-shim.js");
-}
-function anyScopeReferencesShim(scriptPath, currentScope, alreadyStripped) {
-  const referencesIn = (map) => {
-    for (const groups of Object.values(map ?? {})) {
-      for (const group of groups) {
-        for (const h of group.hooks ?? []) {
-          if (h.command.includes(scriptPath)) return true;
-        }
-      }
-    }
-    return false;
-  };
-  if (referencesIn(alreadyStripped)) return true;
-  for (const scope of ["user", "project"]) {
-    if (scope === currentScope) continue;
-    if (referencesIn(readSettings(settingsPath(scope)).hooks)) return true;
-  }
-  return false;
-}
-function settingsPath(scope) {
-  const root = scope === "user" ? os4.homedir() : normalizeDarwinSystemAlias(process.cwd());
-  const base = path7.join(root, ".claude");
-  return path7.join(base, "settings.json");
-}
-var SettingsParseError = class extends Error {
-};
-function readSettings(p, opts = {}) {
-  let raw;
-  try {
-    raw = fs8.readFileSync(p, "utf8");
-  } catch {
-    return {};
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    if (opts.strict === true) {
-      throw new SettingsParseError(
-        `settings file '${p}' exists but contains invalid JSON. Fix or back up the file before running install.`
-      );
-    }
-    return {};
-  }
-  if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
-    return parsed;
-  }
-  if (opts.strict === true) {
-    throw new SettingsParseError(
-      `settings file '${p}' does not contain a JSON object at the top level. Fix or back up the file before running install.`
-    );
-  }
-  return {};
-}
-function groupHasTokenGoat(groups, predicate) {
-  if (groups === void 0) return false;
-  for (const group of groups) {
-    for (const h of group.hooks ?? []) {
-      if (predicate(h.command)) return true;
-    }
-  }
-  return false;
-}
-function installHooks(scope = "user") {
-  return withInstallScope(hookScopeRoot(scope), () => installHooksScoped(scope));
-}
-function hookScopeRoot(scope) {
-  return scope === "project" ? normalizeDarwinSystemAlias(process.cwd()) : void 0;
-}
-function installHooksScoped(scope) {
-  const p = settingsPath(scope);
-  const settings = readSettings(p, { strict: true });
-  const hooks = settings.hooks ?? {};
-  const scriptPath = claudeHookScriptPath();
-  const scriptChanged = withInstallScope(void 0, () => {
-    ensureDirSync(path7.dirname(scriptPath));
-    return writeIfDifferent(scriptPath, CLAUDECODE_HOOK_SCRIPT);
-  });
-  let settingsChanged = false;
-  for (const [eventKey, eventArg] of HOOK_EVENT_MAP) {
-    const expectedCommand = hookCommandFor(scriptPath, eventArg);
-    const existingGroups = hooks[eventKey] ?? [];
-    const groups = [];
-    let strippedStale = false;
-    for (const group of existingGroups) {
-      const keptHooks = (group.hooks ?? []).filter((h) => {
-        const isStale = isTokenGoatHookCommand(h.command) && h.command !== expectedCommand;
-        if (isStale) strippedStale = true;
-        return !isStale;
-      });
-      if (keptHooks.length > 0) {
-        groups.push({ ...group, hooks: keptHooks });
-      } else if ((group.hooks ?? []).length === 0) {
-        groups.push(group);
-      }
-    }
-    const isOurs = (command) => command === expectedCommand;
-    if (groupHasTokenGoat(groups, isOurs)) {
-      const narrowed = toolMatcherFor(eventArg);
-      let renarrowed = false;
-      if (narrowed !== null) {
-        for (let i = 0; i < groups.length; i++) {
-          const group = groups[i];
-          if (group === void 0) continue;
-          const ownHooks = group.hooks ?? [];
-          const isOwnGroup = ownHooks.length > 0 && ownHooks.every((h) => isOurs(h.command));
-          if (isOwnGroup && group.matcher !== narrowed) {
-            groups[i] = { ...group, matcher: narrowed };
-            renarrowed = true;
-          }
-        }
-      }
-      if (strippedStale || renarrowed) {
-        hooks[eventKey] = groups;
-        settingsChanged = true;
-      }
-      continue;
-    }
-    const matcher = toolMatcherFor(eventArg) ?? "";
-    groups.push({ matcher, hooks: [{ type: "command", command: expectedCommand }] });
-    hooks[eventKey] = groups;
-    settingsChanged = true;
-  }
-  if (!settingsChanged && !scriptChanged) {
-    return { scope, settingsPath: p, alreadyInstalled: true };
-  }
-  if (settingsChanged) {
-    settings.hooks = hooks;
-    writeJsonSettings(p, settings);
-  }
-  return { scope, settingsPath: p, alreadyInstalled: false };
-}
-function uninstallHooks(scope = "user") {
-  return withInstallScope(hookScopeRoot(scope), () => uninstallHooksScoped(scope));
-}
-function uninstallHooksScoped(scope) {
-  const p = settingsPath(scope);
-  const settings = readSettings(p);
-  const hooks = settings.hooks;
-  if (hooks === void 0) return false;
-  const removed = stripOwnHooksFromMap(hooks, isTokenGoatHookCommand);
-  const scriptPath = claudeHookScriptPath();
-  let removedScript = false;
-  if (!anyScopeReferencesShim(scriptPath, scope, hooks)) {
-    removedScript = withInstallScope(void 0, () => removeFileInScope(scriptPath));
-  }
-  if (!removed) return removedScript;
-  if (Object.keys(hooks).length === 0) {
-    delete settings.hooks;
-  } else {
-    settings.hooks = hooks;
-  }
-  writeJsonSettings(p, settings);
-  removeCreatedBackups(p);
-  return true;
-}
-function isInstalled(scope = "user") {
-  const settings = readSettings(settingsPath(scope));
-  const hooks = settings.hooks;
-  if (hooks === void 0) return false;
-  const scriptPath = claudeHookScriptPath();
-  if (!fs8.existsSync(scriptPath)) return false;
-  for (const [eventKey, eventArg] of HOOK_EVENT_MAP) {
-    const expectedCommand = hookCommandFor(scriptPath, eventArg);
-    if (!groupHasTokenGoat(hooks[eventKey], (c) => c === expectedCommand)) return false;
-  }
-  return true;
-}
-var CLAUDE_MD_BEGIN = "<!-- token-goat-begin -->";
-var CLAUDE_MD_END = "<!-- token-goat-end -->";
-function claudeMdPath() {
-  return path7.join(os4.homedir(), ".claude", "CLAUDE.md");
-}
-function buildClaudeMdBlock() {
-  return buildGuidanceBlock({
-    beginMarker: CLAUDE_MD_BEGIN,
-    endMarker: CLAUDE_MD_END,
-    fallbackToolClause: "Claude Code's own Read, Grep, and Glob preference rules",
-    gdrive: loadConfig().gdrive.enabled
-  });
-}
-function writeClaudeMdBlock(p) {
-  return upsertDelimitedBlock(p, CLAUDE_MD_BEGIN, CLAUDE_MD_END, buildClaudeMdBlock());
-}
-function stripClaudeMdBlock(p) {
-  return stripDelimitedBlock(p, CLAUDE_MD_BEGIN, CLAUDE_MD_END);
-}
-function installClaudeMd() {
-  const p = claudeMdPath();
-  const changed = writeClaudeMdBlock(p);
-  return { path: p, alreadyInstalled: !changed };
-}
-function uninstallClaudeMd() {
-  return stripClaudeMdBlock(claudeMdPath());
-}
-function findStrayClaudeMdBlocks(searchRoot) {
-  const root = searchRoot ?? path7.join(os4.homedir(), ".claude");
-  const canonical = path7.resolve(claudeMdPath());
-  const found = [];
-  if (!fs8.existsSync(root)) return found;
-  const SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git"]);
-  const MAX_DEPTH = 6;
-  const hasRealBlock = (text) => {
-    let sawBegin = false;
-    for (const line of text.split(/\r?\n/)) {
-      const trimmed = line.trim();
-      if (trimmed === CLAUDE_MD_BEGIN) sawBegin = true;
-      else if (sawBegin && trimmed === CLAUDE_MD_END) return true;
-    }
-    return false;
-  };
-  const walk = (dir, depth) => {
-    if (depth > MAX_DEPTH) return;
-    let entries;
-    try {
-      entries = fs8.readdirSync(dir, { withFileTypes: true });
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      const full = path7.join(dir, entry.name);
-      if (entry.isDirectory()) {
-        if (!SKIP_DIRS.has(entry.name)) walk(full, depth + 1);
-        continue;
-      }
-      if (!entry.isFile() || !entry.name.toLowerCase().endsWith(".md")) continue;
-      if (path7.resolve(full) === canonical) continue;
-      let text;
-      try {
-        text = fs8.readFileSync(full, "utf8");
-      } catch {
-        continue;
-      }
-      if (hasRealBlock(text)) found.push(full);
-    }
-  };
-  walk(root, 0);
-  return found.sort();
-}
-function skillMdFrontmatter(gdrive) {
-  return `---
-name: token-goat
-${skillDescriptionLine(gdrive)}
-allowed-tools:
-  - Bash
-  - Read
-  - Grep
-  - Glob
----`;
-}
-function skillMdContent() {
-  const gdrive = loadConfig().gdrive.enabled;
-  return `${skillMdFrontmatter(gdrive)}
-
-${buildGuidanceBody("Claude Code's own Read, Grep, and Glob preference rules", { gdrive })}
-`;
-}
-function skillDir() {
-  return path7.join(os4.homedir(), ".claude", "skills", "token-goat");
-}
-function skillPath() {
-  return path7.join(skillDir(), "SKILL.md");
-}
-function installSkill() {
-  const p = skillPath();
-  let existing = null;
-  try {
-    existing = fs8.readFileSync(p, "utf8");
-  } catch {
-  }
-  const skillContent = skillMdContent();
-  if (existing === skillContent) return { path: p, alreadyInstalled: true };
-  ensureDirSync(skillDir());
-  backupFile(p);
-  atomicWriteText(p, skillContent);
-  return { path: p, alreadyInstalled: false };
-}
-function uninstallSkill() {
-  const dir = skillDir();
-  if (!fs8.existsSync(dir)) return false;
-  removeCreatedBackups(skillPath());
-  assertWriteInScope(dir);
-  fs8.rmSync(dir, { recursive: true, force: true });
-  return true;
-}
-
-// src/bridges/codex_install.ts
-init_define_import_meta_env();
-import * as crypto2 from "node:crypto";
-import * as fs9 from "node:fs";
-import * as os5 from "node:os";
-import * as path8 from "node:path";
-
-// src/bridges/codex.ts
-init_define_import_meta_env();
-var CODEX_HOOK_SCRIPT = `#!/usr/bin/env node
-// token-goat Codex hook shim. Forwards the hook payload to \`token-goat hook <event>\`, then strips _tg_* keys and injects hookEventName so the response satisfies Codex's strict (additionalProperties:false) schema.
-'use strict'
-${SHIM_REQUIRES}
-
-${SHIM_VALID_HOOK_EVENTS}
-
-// Keep in sync with CLAUDE_CODE_EVENT_NAMES in src/hook_registry.ts -- the
-// live/wired 'token-goat hook <event>' path (src/relay.ts) always emits this
-// PascalCase spelling for hookSpecificOutput.hookEventName, never the raw
-// snake_case event name.
-const HOOK_EVENT_NAME_MAP = {
-  pre_tool_use: 'PreToolUse',
-  post_tool_use: 'PostToolUse',
-  notification: 'Notification',
-  stop: 'Stop',
-  pre_compact: 'PreCompact',
-  post_compact: 'PostCompact',
-  user_prompt_submit: 'UserPromptSubmit',
-  subagent_stop: 'SubagentStop',
-  session_start: 'SessionStart',
-  post_tool_use_failure: 'PostToolUseFailure',
-}
-
-function stripTg(value) {
-  if (Array.isArray(value)) return value.map(stripTg)
-  if (value && typeof value === 'object') {
-    const out = {}
-    for (const [k, v] of Object.entries(value)) {
-      if (k.startsWith('_tg_')) continue
-      out[k] = stripTg(v)
-    }
-    return out
-  }
-  return value
-}
-
-${SHIM_TRY_IN_PROCESS}
-
-${SHIM_MAX_BUFFER_CONST}
-
-async function main() {
-  const eventName = process.argv[2] || ''
-  if (!VALID_HOOK_EVENTS.has(eventName)) {
-    process.stdout.write('{}')
-    return
-  }
-  let input = ''
-  try {
-    input = require('node:fs').readFileSync(0, 'utf8')
-  } catch {
-    process.stdout.write('{}')
-    return
-  }
-  // process.argv[3], when present, is the absolute path to the token-goat CLI entry
-  // that ran 'token-goat install --codex' (baked in by hookCommandFor in
-  // codex_install.ts). Try the in-process hook lib first (tryInProcess above) --
-  // this avoids spawning a second node process altogether. If that's unavailable,
-  // invoking the entry directly via process.execPath sidesteps PATH/shell resolution
-  // for this inner call, the same single-point-of-failure class fixed for the Copilot
-  // CLI bridge's inner hook call (a bare 'token-goat' on PATH failing to resolve
-  // crashes this call, and Codex -- like Copilot -- fails closed on a non-zero-exit
-  // hook). Falls back further to the old PATH-based shell:true invocation when argv[3]
-  // is absent (an older cached hook config). A 3000ms timeout/killSignal on both
-  // spawnSync fallbacks bounds them well under Codex's own hook timeout budget, so
-  // token-goat degrades to its own fail-open '{}' rather than being force-killed by
-  // Codex first.
-  const entryPath = process.argv[3]
-  let stdout = await tryInProcess(entryPath, eventName, input)
-  if (stdout === undefined) {
-${SHIM_SPAWN_LADDER}
-      : spawnSync('token-goat hook ' + eventName, {
-          input,
-          encoding: 'utf8',
-          shell: true,
-          timeout: 3000,
-          killSignal: 'SIGKILL',
-          maxBuffer: SHIM_MAX_BUFFER_BYTES,
-        })
-    if (res.status !== 0 || !res.stdout) {
-      process.stdout.write('{}')
-      return
-    }
-    stdout = res.stdout
-  }
-  let parsed
-  try {
-    parsed = JSON.parse(stdout)
-  } catch {
-    process.stdout.write('{}')
-    return
-  }
-  parsed = stripTg(parsed)
-  const hso = parsed && parsed.hookSpecificOutput
-  if (hso && typeof hso === 'object' && !hso.hookEventName) {
-    hso.hookEventName = HOOK_EVENT_NAME_MAP[eventName] || eventName
-  }
-  process.stdout.write(JSON.stringify(parsed))
-}
-
-main().catch(() => {
-  process.stdout.write('{}')
-})
-`;
-
-// src/bridges/matcher_group.ts
-init_define_import_meta_env();
-function findTokenGoatEntryPosition(groups, matcher, predicate) {
-  if (groups === void 0) return void 0;
-  for (let groupIndex = 0; groupIndex < groups.length; groupIndex++) {
-    const group = groups[groupIndex];
-    if (group.matcher !== matcher) continue;
-    const hookList = group.hooks ?? [];
-    for (let hookIndex = 0; hookIndex < hookList.length; hookIndex++) {
-      if (predicate(hookList[hookIndex].command)) return { groupIndex, hookIndex };
-    }
-  }
-  return void 0;
-}
-function findAnyTokenGoatEntryPosition(groups, predicate) {
-  if (groups === void 0) return void 0;
-  for (let groupIndex = 0; groupIndex < groups.length; groupIndex++) {
-    const hookList = groups[groupIndex].hooks ?? [];
-    for (let hookIndex = 0; hookIndex < hookList.length; hookIndex++) {
-      if (predicate(hookList[hookIndex].command)) return { groupIndex, hookIndex };
-    }
-  }
-  return void 0;
-}
-function groupHasTokenGoat2(groups, matcher, predicate) {
-  return findTokenGoatEntryPosition(groups, matcher, predicate) !== void 0;
-}
-
-// src/bridges/codex_install.ts
-var CODEX_COMMAND_MARKER = "token-goat-shim";
-var CODEX_MATCHERS = ["view_image|shell|bash", "apply_patch", "web_search"];
-var CODEX_HOOK_EVENTS = ["PreToolUse", "PostToolUse"];
-var CODEX_EVENT_ARG = {
-  PreToolUse: "pre_tool_use",
-  PostToolUse: "post_tool_use"
-};
-var CODEX_GLOBAL_HOOK_EVENTS = ["PreCompact", "UserPromptSubmit", "SubagentStop"];
-var CODEX_GLOBAL_EVENT_ARG = {
-  PreCompact: "pre_compact",
-  UserPromptSubmit: "user_prompt_submit",
-  SubagentStop: "subagent_stop"
-};
-var CodexConfigParseError = class extends Error {
-};
-function codexConfigPath() {
-  return path8.join(os5.homedir(), ".codex", "config.toml");
-}
-function codexAgentsPath() {
-  return path8.join(os5.homedir(), ".codex", "AGENTS.md");
-}
-function codexHookScriptPath() {
-  return path8.join(os5.homedir(), ".codex", "hooks", "token-goat-shim.js");
-}
-function readCodexConfig(p, opts = {}) {
-  let raw;
-  try {
-    raw = fs9.readFileSync(p, "utf8");
-  } catch {
-    return {};
-  }
-  try {
-    const parsed = parse(raw);
-    return parsed;
-  } catch (e) {
-    if (opts.strict === true) {
-      throw new CodexConfigParseError(
-        `Codex config file '${p}' exists but contains invalid TOML. Fix or back up the file before running install. (${extractErrorMessage(e)})`
-      );
-    }
-    return {};
-  }
-}
-var CODEX_MARKER_PATTERN = anchoredMarkerPattern(CODEX_COMMAND_MARKER);
-function isCodexTokenGoatCommand(command) {
-  return typeof command === "string" && CODEX_MARKER_PATTERN.test(command);
-}
-function anyGroupHasTokenGoat(groups, predicate = isCodexTokenGoatCommand) {
-  return findAnyTokenGoatEntryPosition(groups, predicate) !== void 0;
-}
-function codexHookCommandFor(scriptPath, eventArg) {
-  const base = hookCommandFor(scriptPath, eventArg);
-  return process.platform === "win32" ? `& ${base}` : base;
-}
-function computeCodexHookHash(eventArg, command, matcher) {
-  const norm = {
-    event_name: eventArg,
-    hooks: [
-      {
-        async: false,
-        command,
-        timeout: 600,
-        type: "command"
-      }
-    ]
-  };
-  if (matcher !== void 0) {
-    norm["matcher"] = matcher;
-  }
-  const serialized = JSON.stringify(norm);
-  const hash = crypto2.createHash("sha256").update(serialized).digest("hex");
-  return `sha256:${hash}`;
-}
-function installCodex() {
-  const configPath = codexConfigPath();
-  const agentsPath = codexAgentsPath();
-  const scriptPath = codexHookScriptPath();
-  ensureDirSync(path8.dirname(scriptPath));
-  atomicWriteText(scriptPath, CODEX_HOOK_SCRIPT);
-  const config = readCodexConfig(configPath, { strict: true });
-  const hooks = config.hooks ?? {};
-  let hooksChanged = false;
-  const staleStateKeysToRemove = [];
-  for (const event of CODEX_HOOK_EVENTS) {
-    const eventArg = CODEX_EVENT_ARG[event];
-    const expectedCommand = codexHookCommandFor(scriptPath, eventArg);
-    const groups = Array.isArray(hooks[event]) ? [...hooks[event]] : [];
-    let removedGroups = 0;
-    for (let idx = 0; idx < groups.length; idx++) {
-      const g = groups[idx];
-      if (g.matcher === void 0 || CODEX_MATCHERS.includes(g.matcher)) continue;
-      const hookList = g.hooks ?? [];
-      const keptHooks = hookList.filter((h) => !isCodexTokenGoatCommand(h.command));
-      if (keptHooks.length === hookList.length) continue;
-      const originalIdx = idx + removedGroups;
-      hookList.forEach((h, hi) => {
-        if (isCodexTokenGoatCommand(h.command)) staleStateKeysToRemove.push(`${configPath}:${eventArg}:${originalIdx}:${hi}`);
-      });
-      hooksChanged = true;
-      if (keptHooks.length > 0) {
-        groups[idx] = { ...g, hooks: keptHooks };
-      } else {
-        groups.splice(idx, 1);
-        idx--;
-        removedGroups++;
-      }
-    }
-    for (const matcher of CODEX_MATCHERS) {
-      if (groupHasTokenGoat2(groups, matcher, (c) => c === expectedCommand)) continue;
-      const nextGroups = stripStaleGroupHooks(groups, isCodexTokenGoatCommand, { matcher });
-      groups.length = 0;
-      groups.push(...nextGroups);
-      groups.push({ matcher, hooks: [{ type: "command", command: expectedCommand }] });
-      hooksChanged = true;
-    }
-    hooks[event] = groups;
-  }
-  for (const event of CODEX_GLOBAL_HOOK_EVENTS) {
-    const eventArg = CODEX_GLOBAL_EVENT_ARG[event];
-    const expectedCommand = codexHookCommandFor(scriptPath, eventArg);
-    const groups = Array.isArray(hooks[event]) ? [...hooks[event]] : [];
-    if (anyGroupHasTokenGoat(groups, (c) => c === expectedCommand)) {
-      hooks[event] = groups;
-      continue;
-    }
-    const nextGroups = stripStaleGroupHooks(groups, isCodexTokenGoatCommand);
-    nextGroups.push({ hooks: [{ type: "command", command: expectedCommand }] });
-    hooks[event] = nextGroups;
-    hooksChanged = true;
-  }
-  const agentsChanged = writeAgentsBlock(agentsPath);
-  const hooksState = hooks["state"] ?? {};
-  for (const key of staleStateKeysToRemove) {
-    if (key in hooksState) {
-      delete hooksState[key];
-      hooksChanged = true;
-    }
-  }
-  for (const event of CODEX_HOOK_EVENTS) {
-    const eventArg = CODEX_EVENT_ARG[event];
-    const groups = hooks[event] ?? [];
-    for (let groupIndex = 0; groupIndex < groups.length; groupIndex++) {
-      const g = groups[groupIndex];
-      if (g && g.matcher && CODEX_MATCHERS.includes(g.matcher)) {
-        const hookList = g.hooks ?? [];
-        for (let hookIndex = 0; hookIndex < hookList.length; hookIndex++) {
-          const h = hookList[hookIndex];
-          if (h && isCodexTokenGoatCommand(h.command)) {
-            const stateKey = `${configPath}:${eventArg}:${groupIndex}:${hookIndex}`;
-            const hash = computeCodexHookHash(eventArg, h.command, g.matcher);
-            if (hooksState[stateKey]?.trusted_hash !== hash) {
-              hooksState[stateKey] = { ...hooksState[stateKey], trusted_hash: hash };
-              hooksChanged = true;
-            }
-          }
-        }
-      }
-    }
-  }
-  for (const event of CODEX_GLOBAL_HOOK_EVENTS) {
-    const eventArg = CODEX_GLOBAL_EVENT_ARG[event];
-    const groups = hooks[event] ?? [];
-    for (let groupIndex = 0; groupIndex < groups.length; groupIndex++) {
-      const g = groups[groupIndex];
-      if (!g) continue;
-      const hookList = g.hooks ?? [];
-      for (let hookIndex = 0; hookIndex < hookList.length; hookIndex++) {
-        const h = hookList[hookIndex];
-        if (h && isCodexTokenGoatCommand(h.command)) {
-          const stateKey = `${configPath}:${eventArg}:${groupIndex}:${hookIndex}`;
-          const hash = computeCodexHookHash(eventArg, h.command);
-          if (hooksState[stateKey]?.trusted_hash !== hash) {
-            hooksState[stateKey] = { ...hooksState[stateKey], trusted_hash: hash };
-            hooksChanged = true;
-          }
-        }
-      }
-    }
-  }
-  if (Object.keys(hooksState).length > 0) {
-    hooks["state"] = hooksState;
-  }
-  if (hooksChanged) {
-    config.hooks = hooks;
-    ensureDirSync(path8.dirname(configPath));
-    backupFile(configPath);
-    atomicWriteText(configPath, stringify(config));
-  }
-  return {
-    configPath,
-    agentsPath,
-    hookScriptPath: scriptPath,
-    alreadyInstalled: !hooksChanged && !agentsChanged
-  };
-}
-function uninstallCodex() {
-  const configPath = codexConfigPath();
-  const agentsPath = codexAgentsPath();
-  const scriptPath = codexHookScriptPath();
-  let removedAny = false;
-  const config = readCodexConfig(configPath);
-  const hooks = config.hooks;
-  if (hooks !== void 0) {
-    const hooksRemoved = stripOwnHooksFromMap(hooks, isCodexTokenGoatCommand);
-    const hooksState = hooks["state"];
-    let stateRemoved = false;
-    if (hooksState && typeof hooksState === "object") {
-      const prefix = `${configPath}:`;
-      for (const key of Object.keys(hooksState)) {
-        if (key.startsWith(prefix)) {
-          delete hooksState[key];
-          stateRemoved = true;
-        }
-      }
-      if (Object.keys(hooksState).length === 0) {
-        delete hooks["state"];
-      }
-    }
-    if (hooksRemoved || stateRemoved) {
-      if (Object.keys(hooks).length === 0) {
-        delete config.hooks;
-      } else {
-        config.hooks = hooks;
-      }
-      backupFile(configPath);
-      atomicWriteText(configPath, stringify(config));
-      removedAny = true;
-    }
-  }
-  if (stripAgentsBlock(agentsPath)) {
-    removedAny = true;
-  }
-  try {
-    fs9.unlinkSync(scriptPath);
-    removedAny = true;
-  } catch {
-  }
-  removeCreatedBackups(configPath);
-  return removedAny;
-}
-function isCodexInstalled() {
-  const configPath = codexConfigPath();
-  const config = readCodexConfig(configPath);
-  const hooks = config.hooks;
-  if (hooks === void 0) return false;
-  const scriptPath = codexHookScriptPath();
-  const hooksState = hooks["state"] ?? {};
-  for (const event of CODEX_HOOK_EVENTS) {
-    const eventArg = CODEX_EVENT_ARG[event];
-    const expectedCommand = codexHookCommandFor(scriptPath, eventArg);
-    const groups = hooks[event] ?? [];
-    for (const matcher of CODEX_MATCHERS) {
-      const position = findTokenGoatEntryPosition(groups, matcher, (c) => c === expectedCommand);
-      if (position === void 0) return false;
-      const stateKey = `${configPath}:${eventArg}:${position.groupIndex}:${position.hookIndex}`;
-      const expectedHash = computeCodexHookHash(eventArg, expectedCommand, matcher);
-      if (hooksState[stateKey]?.trusted_hash !== expectedHash) return false;
-    }
-  }
-  for (const event of CODEX_GLOBAL_HOOK_EVENTS) {
-    const eventArg = CODEX_GLOBAL_EVENT_ARG[event];
-    const expectedCommand = codexHookCommandFor(scriptPath, eventArg);
-    const groups = hooks[event] ?? [];
-    const position = findAnyTokenGoatEntryPosition(groups, (c) => c === expectedCommand);
-    if (position === void 0) return false;
-    const stateKey = `${configPath}:${eventArg}:${position.groupIndex}:${position.hookIndex}`;
-    const expectedHash = computeCodexHookHash(eventArg, expectedCommand);
-    if (hooksState[stateKey]?.trusted_hash !== expectedHash) return false;
-  }
-  if (!fs9.existsSync(scriptPath)) return false;
-  let agents;
-  try {
-    agents = fs9.readFileSync(codexAgentsPath(), "utf8");
-  } catch {
-    return false;
-  }
-  return agents.includes(AGENTS_BEGIN) && agents.includes(AGENTS_END);
-}
-var AGENTS_BEGIN = "<!-- token-goat-codex-begin -->";
-var AGENTS_END = "<!-- token-goat-codex-end -->";
-function buildAgentsBlock() {
-  return buildGuidanceBlock({
-    beginMarker: AGENTS_BEGIN,
-    endMarker: AGENTS_END,
-    fallbackToolClause: "Codex's native `shell`, `apply_patch`, and `view_image` tools (shell commands like `cat`/`type` run inside `shell`)",
-    gdrive: loadConfig().gdrive.enabled
-  });
-}
-function writeAgentsBlock(p) {
-  return upsertDelimitedBlock(p, AGENTS_BEGIN, AGENTS_END, buildAgentsBlock());
-}
-function stripAgentsBlock(p) {
-  return stripDelimitedBlock(p, AGENTS_BEGIN, AGENTS_END);
-}
-
-// src/bridges/kimi_install.ts
-init_define_import_meta_env();
-import * as fs10 from "node:fs";
-import * as os6 from "node:os";
-import * as path9 from "node:path";
-
-// src/bridges/kimi.ts
-init_define_import_meta_env();
-var KIMI_HOOK_SCRIPT = `#!/usr/bin/env node
-// token-goat Kimi Code hook shim. Forwards the hook payload to \`token-goat hook <event>\`, then rewrites the response into Kimi's own contract: permissionDecision "deny" for a block, top-level "message" for a hint, empty stdout for a no-op.
-'use strict'
-${SHIM_REQUIRES}
-
-${SHIM_VALID_HOOK_EVENTS}
-
-// Kimi Code publishes no ambient per-session env var identifying its own hook
-// subprocesses, so the harness identity has to be injected here for
-// detectHarness() (src/bridges/registry.ts) to resolve 'kimi'.
-process.env.TOKEN_GOAT_HARNESS_OVERRIDE = 'kimi'
-
-// Pull the hint text out of a token-goat response: hookSpecificOutput.additionalContext
-// (most events) or the top-level systemMessage (notification/pre_compact, which Claude
-// Code rejects additionalContext on). Kimi reads neither, so both fold into its 'message'.
-function hintText(parsed) {
-  if (!parsed || typeof parsed !== 'object') return ''
-  const hso = parsed.hookSpecificOutput
-  if (hso && typeof hso === 'object' && typeof hso.additionalContext === 'string') return hso.additionalContext
-  if (typeof parsed.systemMessage === 'string') return parsed.systemMessage
-  return ''
-}
-
-// Translate a token-goat (Claude Code shaped) response into Kimi's contract.
-// Returns '' for anything Kimi cannot act on, which the caller writes as empty
-// stdout rather than '{}' -- see this module's docstring for why that matters
-// on UserPromptSubmit.
-function toKimi(parsed) {
-  if (!parsed || typeof parsed !== 'object') return ''
-  if (parsed.decision === 'block' && typeof parsed.reason === 'string' && parsed.reason) {
-    return JSON.stringify({
-      message: parsed.reason,
-      hookSpecificOutput: { permissionDecision: 'deny', permissionDecisionReason: parsed.reason },
-    })
-  }
-  const hint = hintText(parsed)
-  if (hint) return JSON.stringify({ message: hint })
-  return ''
-}
-
-${SHIM_TRY_IN_PROCESS}
-
-${SHIM_MAX_BUFFER_CONST}
-
-async function main() {
-  const eventName = process.argv[2] || ''
-  if (!VALID_HOOK_EVENTS.has(eventName)) return
-  let input = ''
-  try {
-    input = require('node:fs').readFileSync(0, 'utf8')
-  } catch {
-    return
-  }
-  // process.argv[3], when present, is the absolute path to the token-goat CLI entry that ran
-  // 'token-goat install --kimi' (baked in by hookCommandFor in kimi_install.ts). Same three-step
-  // ladder as the Codex shim: in-process hook lib, then the baked entry via process.execPath,
-  // then a PATH-based shell:true invocation for an older cached hook config. The 3000ms
-  // timeout keeps both spawn fallbacks well inside Kimi's own 30s default hook timeout
-  // (docs/en/customization/hooks.md), so token-goat degrades to its own fail-open no-op.
-  const entryPath = process.argv[3]
-  let stdout = await tryInProcess(entryPath, eventName, input)
-  if (stdout === undefined) {
-${SHIM_SPAWN_LADDER}
-      : spawnSync('token-goat hook ' + eventName, {
-          input,
-          encoding: 'utf8',
-          shell: true,
-          timeout: 3000,
-          killSignal: 'SIGKILL',
-          maxBuffer: SHIM_MAX_BUFFER_BYTES,
-        })
-    if (res.status !== 0 || !res.stdout) return
-    stdout = res.stdout
-  }
-  let parsed
-  try {
-    parsed = JSON.parse(stdout)
-  } catch {
-    return
-  }
-  const out = toKimi(parsed)
-  if (out) process.stdout.write(out)
-}
-
-main().catch(() => {
-  // Fail open: write nothing, exit 0. Kimi treats a silent hook as "allow".
-})
-`;
-
-// src/bridges/kimi_install.ts
-var KIMI_EVENT_ARG = {
-  PreToolUse: "pre_tool_use",
-  PostToolUse: "post_tool_use",
-  PreCompact: "pre_compact",
-  UserPromptSubmit: "user_prompt_submit",
-  SubagentStop: "subagent_stop",
-  SessionStart: "session_start"
-};
-var KIMI_HOOK_EVENTS = Object.keys(KIMI_EVENT_ARG);
-var KimiConfigParseError = class extends Error {
-};
-function kimiHome() {
-  const override = process.env["KIMI_CODE_HOME"];
-  if (override !== void 0 && override.trim() !== "") return path9.resolve(override);
-  return path9.join(os6.homedir(), ".kimi-code");
-}
-function kimiConfigPath() {
-  return path9.join(kimiHome(), "config.toml");
-}
-function kimiAgentsPath() {
-  return path9.join(kimiHome(), "AGENTS.md");
-}
-function kimiHookScriptPath() {
-  return path9.join(kimiHome(), "hooks", "token-goat-shim.js");
-}
-function kimiSkillDir() {
-  return path9.join(kimiHome(), "skills", "token-goat");
-}
-function kimiSkillPath() {
-  return path9.join(kimiSkillDir(), "SKILL.md");
-}
-function readKimiConfig(p, opts = {}) {
-  let raw;
-  try {
-    raw = fs10.readFileSync(p, "utf8");
-  } catch {
-    return {};
-  }
-  try {
-    return parse(raw);
-  } catch (e) {
-    if (opts.strict === true) {
-      throw new KimiConfigParseError(
-        `Kimi Code config file '${p}' exists but contains invalid TOML. Fix or back up the file before running install. (${extractErrorMessage(e)})`
-      );
-    }
-    return {};
-  }
-}
-var KIMI_COMMAND_MARKER = "token-goat";
-var KIMI_MARKER_PATTERN = anchoredMarkerPattern(KIMI_COMMAND_MARKER);
-function isKimiTokenGoatCommand(command) {
-  return typeof command === "string" && KIMI_MARKER_PATTERN.test(command);
-}
-var AGENTS_BEGIN2 = "<!-- token-goat-kimi-begin -->";
-var AGENTS_END2 = "<!-- token-goat-kimi-end -->";
-function buildKimiAgentsBlock() {
-  return buildGuidanceBlock({
-    beginMarker: AGENTS_BEGIN2,
-    endMarker: AGENTS_END2,
-    fallbackToolClause: "Kimi Code's native `Read`, `Grep`, `Glob`, and `ReadMediaFile` tools (shell commands like `cat`/`type` run inside `Bash`)",
-    gdrive: loadConfig().gdrive.enabled
-  });
-}
-function writeKimiAgentsBlock(p) {
-  return upsertDelimitedBlock(p, AGENTS_BEGIN2, AGENTS_END2, buildKimiAgentsBlock());
-}
-function stripKimiAgentsBlock(p) {
-  return stripDelimitedBlock(p, AGENTS_BEGIN2, AGENTS_END2);
-}
-function kimiSkillContent() {
-  const gdrive = loadConfig().gdrive.enabled;
-  const frontmatter = [
-    "---",
-    "name: token-goat",
-    skillDescriptionLine(gdrive),
-    "---"
-  ].join("\n");
-  const body = buildGuidanceBody("Kimi Code's own Read, Grep, and Glob preference rules", { gdrive });
-  return `${frontmatter}
-
-${body}
-`;
-}
-function writeKimiSkill() {
-  return writeIfDifferent(kimiSkillPath(), kimiSkillContent(), true);
-}
-function installKimi() {
-  const configPath = kimiConfigPath();
-  const agentsPath = kimiAgentsPath();
-  const scriptPath = kimiHookScriptPath();
-  ensureDirSync(path9.dirname(scriptPath));
-  atomicWriteText(scriptPath, KIMI_HOOK_SCRIPT);
-  const config = readKimiConfig(configPath, { strict: true });
-  const existing = Array.isArray(config.hooks) ? config.hooks : [];
-  const desired = KIMI_HOOK_EVENTS.map((event) => ({
-    event,
-    command: hookCommandFor(scriptPath, KIMI_EVENT_ARG[event] ?? "")
-  }));
-  const foreign = existing.filter((h) => !isKimiTokenGoatCommand(h?.command));
-  const ours = existing.filter((h) => isKimiTokenGoatCommand(h?.command));
-  const hooksChanged = JSON.stringify(ours) !== JSON.stringify(desired);
-  const agentsChanged = writeKimiAgentsBlock(agentsPath);
-  const skillChanged = writeKimiSkill();
-  if (hooksChanged) {
-    config.hooks = [...foreign, ...desired];
-    ensureDirSync(path9.dirname(configPath));
-    backupFile(configPath);
-    atomicWriteText(configPath, stringify(config));
-  }
-  return {
-    configPath,
-    agentsPath,
-    hookScriptPath: scriptPath,
-    skillPath: kimiSkillPath(),
-    alreadyInstalled: !hooksChanged && !agentsChanged && !skillChanged
-  };
-}
-function uninstallKimi() {
-  const configPath = kimiConfigPath();
-  const config = readKimiConfig(configPath);
-  let removed = false;
-  if (Array.isArray(config.hooks)) {
-    const kept = config.hooks.filter((h) => !isKimiTokenGoatCommand(h?.command));
-    if (kept.length !== config.hooks.length) {
-      if (kept.length === 0) {
-        delete config.hooks;
-      } else {
-        config.hooks = kept;
-      }
-      backupFile(configPath);
-      atomicWriteText(configPath, stringify(config));
-      removed = true;
-    }
-  }
-  if (stripKimiAgentsBlock(kimiAgentsPath())) removed = true;
-  try {
-    if (fs10.existsSync(kimiSkillDir())) {
-      removeCreatedBackups(kimiSkillPath());
-      fs10.rmSync(kimiSkillDir(), { recursive: true, force: true });
-      removed = true;
-    }
-  } catch {
-  }
-  try {
-    if (fs10.existsSync(kimiHookScriptPath())) {
-      fs10.rmSync(kimiHookScriptPath(), { force: true });
-      removed = true;
-    }
-  } catch {
-  }
-  removeCreatedBackups(configPath);
-  return removed;
-}
-function isKimiInstalled() {
-  const config = readKimiConfig(kimiConfigPath());
-  if (!Array.isArray(config.hooks)) return false;
-  const scriptPath = kimiHookScriptPath();
-  for (const event of KIMI_HOOK_EVENTS) {
-    const expected = hookCommandFor(scriptPath, KIMI_EVENT_ARG[event] ?? "");
-    if (!config.hooks.some((h) => h?.event === event && h?.command === expected)) return false;
-  }
-  return true;
-}
-
-// src/bridges/grok_install.ts
-init_define_import_meta_env();
-import * as fs11 from "node:fs";
-import * as os7 from "node:os";
-import * as path10 from "node:path";
-
-// src/bridges/grok.ts
-init_define_import_meta_env();
-var GROK_HOOK_SCRIPT = `#!/usr/bin/env node
-// token-goat Grok CLI hook shim. Forwards the hook payload to \`token-goat hook <event>\`, then -- for pre_tool_use only -- translates token-goat's {"decision":"block",...} deny shape into Grok's documented {"decision":"deny",...} shape and sets exit code 2.
-'use strict'
-${SHIM_REQUIRES}
-
-// Keep in sync with HOOK_EVENTS in src/types.ts.
-const VALID_HOOK_EVENTS = new Set([
-  'pre_tool_use',
-  'post_tool_use',
-  'notification',
-  'stop',
-  'pre_compact',
-  'user_prompt_submit',
-  'subagent_stop',
-])
-
-function allowResponse(eventName) {
-  return eventName === 'pre_tool_use' ? '{"decision":"allow"}' : '{}'
-}
-
-${SHIM_TRY_IN_PROCESS}
-
-${SHIM_MAX_BUFFER_CONST}
-
-async function main() {
-  const eventName = process.argv[2] || ''
-  if (!VALID_HOOK_EVENTS.has(eventName)) {
-    process.stdout.write('{}')
-    return
-  }
-  let input = ''
-  try {
-    input = require('node:fs').readFileSync(0, 'utf8')
-  } catch {
-    process.stdout.write(allowResponse(eventName))
-    return
-  }
-  // process.argv[3], when present, is the absolute path to the token-goat CLI entry
-  // that ran 'token-goat install --grok' (baked in by hookCommandFor in
-  // grok_install.ts). Try the in-process hook lib first (tryInProcess above) -- this
-  // avoids spawning a second node process altogether. If that's unavailable, invoking
-  // the entry directly via process.execPath sidesteps PATH resolution for this inner
-  // call, the same reasoning as every other bridge shim's inner call. Falls back
-  // further to the old PATH-based shell:true invocation when argv[3] is absent. A
-  // 3000ms timeout/killSignal on both spawnSync fallbacks bounds them well under
-  // Grok's own hook timeout (default 5s, per the hooks doc), so token-goat degrades to
-  // its own fail-open response rather than being force-killed by Grok first.
-  const entryPath = process.argv[3]
-  let stdout = await tryInProcess(entryPath, eventName, input)
-  if (stdout === undefined) {
-${SHIM_SPAWN_LADDER}
-      : spawnSync('token-goat hook ' + eventName, {
-          input,
-          encoding: 'utf8',
-          shell: true,
-          timeout: 3000,
-          killSignal: 'SIGKILL',
-          maxBuffer: SHIM_MAX_BUFFER_BYTES,
-        })
-    if (res.status !== 0 || !res.stdout) {
-      process.stdout.write(allowResponse(eventName))
-      return
-    }
-    stdout = res.stdout
-  }
-  let parsed
-  try {
-    parsed = JSON.parse(stdout)
-  } catch {
-    process.stdout.write(allowResponse(eventName))
-    return
-  }
-
-  if (eventName !== 'pre_tool_use') {
-    // Passive events: Grok ignores stdout entirely (per the hooks doc), so the exact
-    // shape doesn't matter -- forward token-goat's response verbatim.
-    process.stdout.write(JSON.stringify(parsed))
-    return
-  }
-
-  if (parsed && parsed.decision === 'block') {
-    process.stdout.write(JSON.stringify({ decision: 'deny', reason: parsed.reason || 'blocked by token-goat' }))
-    process.exitCode = 2
-    return
-  }
-  process.stdout.write('{"decision":"allow"}')
-}
-
-main().catch((err) => {
-  try {
-    process.stdout.write(allowResponse(process.argv[2] || ''))
-  } catch {
-    // stdout itself is broken; nothing more can be done here.
-  }
-})
-`;
-
-// src/bridges/grok_install.ts
-var GROK_HOOK_EVENTS = ["PreToolUse", "PostToolUse", "PreCompact", "UserPromptSubmit", "SubagentStop"];
-var GROK_EVENT_ARG = {
-  PreToolUse: "pre_tool_use",
-  PostToolUse: "post_tool_use",
-  PreCompact: "pre_compact",
-  UserPromptSubmit: "user_prompt_submit",
-  SubagentStop: "subagent_stop"
-};
-function grokHooksDir() {
-  return path10.join(os7.homedir(), ".grok", "hooks");
-}
-function grokConfigPath() {
-  return path10.join(grokHooksDir(), "token-goat.json");
-}
-function grokHookScriptPath() {
-  return path10.join(grokHooksDir(), "token-goat-shim.js");
-}
-function buildConfig2(scriptPath) {
-  const hooks = {};
-  for (const event of GROK_HOOK_EVENTS) {
-    hooks[event] = [
-      { matcher: "", hooks: [{ type: "command", command: hookCommandFor(scriptPath, GROK_EVENT_ARG[event]) }] }
-    ];
-  }
-  return { hooks };
-}
-function installGrok() {
-  const configPath = grokConfigPath();
-  const scriptPath = grokHookScriptPath();
-  const scriptChanged = writeIfDifferent(scriptPath, GROK_HOOK_SCRIPT);
-  const desiredText = `${JSON.stringify(buildConfig2(scriptPath), null, 2)}
-`;
-  const configChanged = writeIfDifferent(configPath, desiredText, true);
-  return { configPath, hookScriptPath: scriptPath, alreadyInstalled: !scriptChanged && !configChanged };
+function commandHash(command, cwd = null) {
+  return Promise.resolve(commandHashSync(command, cwd));
 }
-function uninstallGrok() {
-  const configPath = grokConfigPath();
-  const scriptPath = grokHookScriptPath();
-  let removedAny = false;
-  try {
-    fs11.unlinkSync(configPath);
-    removedAny = true;
-  } catch {
+function computeBashFingerprints(command, cwd) {
+  const fingerprints = {};
+  if (cwd && (isGitMutableCommand(command) || isGitPushCommand(command) || isTestRunnerCommand2(command) || isLintCommand(command) || isBuildCommand(command) || isNpmRunScriptCommand(command))) {
+    const fp = gitStateFingerprintSync(cwd);
+    if (fp) fingerprints.git = fp;
   }
-  try {
-    fs11.unlinkSync(scriptPath);
-    removedAny = true;
-  } catch {
+  if (cwd && isDirListingCommand(command)) {
+    const target = extractFirstPathArg(command, cwd, cwd);
+    if (target) {
+      const fp = dirStateFingerprintSync(target);
+      if (fp) fingerprints.dir = fp;
+    }
   }
-  removeCreatedBackups(configPath);
-  return removedAny;
-}
-function isGrokInstalled() {
-  return fs11.existsSync(grokConfigPath()) && fs11.existsSync(grokHookScriptPath());
-}
-
-// src/bridges/vscode_install.ts
-init_define_import_meta_env();
-import * as fs12 from "node:fs";
-import * as os8 from "node:os";
-import * as path11 from "node:path";
-var VSCODE_GUIDANCE_BEGIN = "<!-- token-goat-vscode-begin -->";
-var VSCODE_GUIDANCE_END = "<!-- token-goat-vscode-end -->";
-var BEGIN = VSCODE_GUIDANCE_BEGIN;
-var END = VSCODE_GUIDANCE_END;
-function vscodeUserConfigDir() {
-  if (process.platform === "win32") {
-    const appData = process.env["APPDATA"];
-    const base = appData !== void 0 && appData.trim() !== "" ? appData : path11.join(os8.homedir(), "AppData", "Roaming");
-    return path11.join(base, "Code", "User");
-  }
-  if (process.platform === "darwin") {
-    return path11.join(os8.homedir(), "Library", "Application Support", "Code", "User");
-  }
-  return path11.join(os8.homedir(), ".config", "Code", "User");
-}
-function vscodeUserMcpPath() {
-  return path11.join(vscodeUserConfigDir(), "mcp.json");
-}
-function vscodeProjectMcpPath(projectRoot = process.cwd()) {
-  return path11.join(path11.resolve(projectRoot), ".vscode", "mcp.json");
-}
-function vscodeMcpPath(opts = {}) {
-  return opts.project === true ? vscodeProjectMcpPath(opts.projectRoot) : vscodeUserMcpPath();
-}
-function otherScopeMcpPath2(opts) {
-  return opts.project === true ? vscodeUserMcpPath() : vscodeProjectMcpPath(opts.projectRoot);
-}
-function vscodeInstructionsPath(opts = {}) {
-  return opts.project === true ? path11.join(path11.resolve(opts.projectRoot ?? process.cwd()), ".github", "copilot-instructions.md") : path11.join(os8.homedir(), ".copilot", "instructions", "token-goat.instructions.md");
-}
-var USER_INSTRUCTIONS_FRONTMATTER = "---\ndescription: 'token-goat: when to use its MCP tools and CLI instead of reading whole files'\napplyTo: '**'\n---\n";
-function vscodeHooksDir(opts = {}) {
-  return opts.project === true ? path11.join(path11.resolve(opts.projectRoot ?? process.cwd()), ".github", "hooks") : path11.join(os8.homedir(), ".copilot", "hooks");
-}
-function vscodeScopeFromFlags(flags) {
-  return { project: flags.user !== true };
-}
-function vscodeHooksInstalled(opts = {}) {
-  return readCopilotHooksOwners(vscodeHooksDir(opts)).has("vscode");
-}
-function vscodeUserSettingsPath() {
-  return path11.join(vscodeUserConfigDir(), "settings.json");
-}
-function vscodeUsesClaudeHooks(settingsPath2 = vscodeUserSettingsPath()) {
-  let text;
-  try {
-    text = fs12.readFileSync(settingsPath2, "utf8");
-  } catch {
-    return false;
+  if (isDepListCommand(command) || cwd && (isNpmInstallCommand(command) || isNpmAuditCommand(command) || isNpmOutdatedCommand(command))) {
+    const fp = depLockfileFingerprintSync(command, cwd);
+    if (fp) fingerprints.lockfile = fp;
+  }
+  if (cwd && isCatCommand(command)) {
+    const target = extractFirstPathArg(command, cwd, null);
+    if (target) {
+      const fp = fileStateFingerprintSync(target);
+      if (fp) fingerprints.file = fp;
+    }
   }
-  const parsed = jsonc().parse(text, [], { allowTrailingComma: true, disallowComments: false });
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return false;
-  return parsed["chat.useClaudeHooks"] === true;
+  return Object.keys(fingerprints).length > 0 ? fingerprints : void 0;
 }
-function readConfig(filePath) {
-  return readServersJson(filePath, "VS Code");
+function isBashEntryStale(entry, command, cwd) {
+  const stored = entry.fingerprints;
+  if (!stored) return false;
+  const current = computeBashFingerprints(command, cwd);
+  if (stored.git !== void 0 && stored.git !== current?.git) return true;
+  if (stored.dir !== void 0 && stored.dir !== current?.dir) return true;
+  if (stored.lockfile !== void 0 && stored.lockfile !== current?.lockfile) return true;
+  if (stored.file !== void 0 && stored.file !== current?.file) return true;
+  return false;
 }
-var updateConfig = setTokenGoatServer;
-function otherScopeHasManagedServer(opts) {
-  const otherPath = otherScopeMcpPath2(opts);
-  if (opts.project !== true && !projectPathIsConsultable(otherPath, path11.resolve(opts.projectRoot ?? process.cwd()))) return false;
-  if (!fs12.existsSync(otherPath)) return false;
-  try {
-    const config = readConfig(otherPath);
-    const servers = config.value["servers"];
-    if (servers === null || typeof servers !== "object" || Array.isArray(servers)) return false;
-    return isManagedServer(servers["token-goat"]);
-  } catch {
-    return false;
+function tokenizeShellArgs(cmd) {
+  const trimmed = cmd.trim();
+  const tokens = [];
+  let current = "";
+  let quoteChar = null;
+  let hasToken = false;
+  for (let i = 0; i < trimmed.length; i++) {
+    const ch = trimmed[i];
+    if (quoteChar !== null) {
+      if (ch === quoteChar) {
+        quoteChar = null;
+      } else {
+        current += ch;
+      }
+      continue;
+    }
+    if (ch === '"' || ch === "'") {
+      quoteChar = ch;
+      hasToken = true;
+      continue;
+    }
+    if (/\s/.test(ch)) {
+      if (hasToken) {
+        tokens.push(current);
+        current = "";
+        hasToken = false;
+      }
+      continue;
+    }
+    current += ch;
+    hasToken = true;
   }
+  if (hasToken) tokens.push(current);
+  return tokens;
 }
-function vscodeDecoderConfigured(opts = {}) {
-  const checkedPaths = [vscodeUserMcpPath()];
-  if (opts.projectRoot !== void 0) {
-    const projectPath = vscodeProjectMcpPath(opts.projectRoot);
-    if (projectPathIsConsultable(projectPath, path11.resolve(opts.projectRoot))) checkedPaths.push(projectPath);
-  }
-  for (const candidate of checkedPaths) {
-    if (!fs12.existsSync(candidate)) continue;
-    try {
-      const config = readConfig(candidate);
-      const servers = config.value["servers"];
-      if (servers === null || typeof servers !== "object" || Array.isArray(servers)) continue;
-      if (isManagedServer(servers["token-goat"])) {
-        return { configured: true, checkedPaths };
+function extractFirstPathArg(cmd, cwd, fallback) {
+  const tokens = tokenizeShellArgs(cmd);
+  for (let i = 1; i < tokens.length; i++) {
+    const token = tokens[i];
+    if (!token.startsWith("-")) {
+      if (!token.startsWith("/")) {
+        return resolve(cwd, token);
       }
-    } catch {
+      return token;
     }
   }
-  return { configured: false, checkedPaths };
-}
-function writeGuidance2(filePath, userScope) {
-  let created = false;
-  if (userScope && !fs12.existsSync(filePath)) {
-    ensureDirSync(path11.dirname(filePath));
-    atomicWriteText(filePath, USER_INSTRUCTIONS_FRONTMATTER);
-    created = true;
-  }
-  const body = [
-    BEGIN,
-    buildGuidanceBody("VS Code\u2019s supported MCP integration and its built-in file-read tools", { gdrive: loadConfig().gdrive.enabled }),
-    "",
-    "**Compressed payloads:** a message containing a token-goat payload block (recognizable by a `recovery: token-goat retrieve <id>` line) is compressed text, not an answer. Call the MCP tool `retrieve_text` with that id to recover the original text, then answer the question the message asks using the recovered text. Never present the raw payload to the user as the response; if the `retrieve_text` tool is unavailable (the MCP server is not running, or the chat is not in Agent mode), say so plainly and ask the user to switch to Agent mode or run `token-goat install --vscode`.",
-    "",
-    "VS Code support: token-goat install --vscode configures a stdio MCP server under the servers root key in your user-profile mcp.json by default (add --project for the workspace .vscode/mcp.json instead), and agent hooks that see VS Code\u2019s built-in tool calls. The hooks can deny a repeated read, add a hint, and shrink an image before view_image loads it; they cannot fold or trim what a built-in read returns, and they leave terminal commands unchanged.",
-    END
-  ].join("\n");
-  return upsertDelimitedBlock(filePath, BEGIN, END, body) || created;
+  return fallback;
 }
-function assertProjectTargetsAreInTheProject(opts) {
-  if (opts.project !== true) return;
-  const root = path11.resolve(opts.projectRoot ?? process.cwd());
-  for (const target of [vscodeMcpPath(opts), vscodeInstructionsPath(opts), ...copilotHooksFilePaths(vscodeHooksDir(opts))]) {
-    assertProjectScopeTarget(target, root);
+var ISSUE_LINE_PATTERN = /\b(?:error|fail(?:ed|ure)?|warning)\b/i;
+function summarizeOutputDelta(oldOutput, newOutput) {
+  if (oldOutput === newOutput) return null;
+  const oldLines = oldOutput.split("\n");
+  const newLines = newOutput.split("\n");
+  const oldIssueLines = oldLines.filter((l) => ISSUE_LINE_PATTERN.test(l));
+  if (oldIssueLines.length > 0) {
+    const newIssueLines = newLines.filter((l) => ISSUE_LINE_PATTERN.test(l));
+    const priorTotal = oldIssueLines.length;
+    const availableCounts = /* @__PURE__ */ new Map();
+    for (const l of newIssueLines) availableCounts.set(l, (availableCounts.get(l) ?? 0) + 1);
+    let resolved = 0;
+    for (const l of oldIssueLines) {
+      const avail = availableCounts.get(l) ?? 0;
+      if (avail > 0) {
+        availableCounts.set(l, avail - 1);
+      } else {
+        resolved++;
+      }
+    }
+    const remaining = newIssueLines.length;
+    return `[token-goat: delta] ${resolved} of ${priorTotal} prior issues resolved; remaining: ${remaining}`;
   }
+  return `[token-goat: delta] output changed: ${oldLines.length} -> ${newLines.length} lines`;
+}
+function storeBashOutputSync(command, output, exitCode, cwd = null) {
+  const id = commandHashSync(command, cwd);
+  const fingerprints = computeBashFingerprints(command, cwd);
+  const redactedOutput = redactSecrets(output).text;
+  const redactedCommand = redactSecrets(command).text;
+  const entry = {
+    id,
+    command: redactedCommand,
+    output: redactedOutput,
+    exitCode,
+    storedAt: Date.now(),
+    sizeBytes: Buffer.byteLength(redactedOutput, "utf-8"),
+    ...fingerprints ? { fingerprints } : {}
+  };
+  _byId.set(id, entry);
+  storeBlob(BASH_OUTPUT_SUBDIR, id, entry);
+  indexRecallEntry("bash", id, redactedCommand, `${redactedCommand}
+${redactedOutput}`, entry.storedAt);
+  return id;
 }
-function installVscode(opts = {}) {
-  return withInstallScope(projectScopeRoot(opts), () => installVscodeScoped(opts));
+function storeBashOutput(command, output, exitCode, cwd = null) {
+  return Promise.resolve(storeBashOutputSync(command, output, exitCode, cwd));
 }
-function installVscodeScoped(opts) {
-  assertProjectTargetsAreInTheProject(opts);
-  const scope = opts.project === true ? "project" : "user";
-  const mcpPath = vscodeMcpPath(opts);
-  const instructionsPath = vscodeInstructionsPath(opts);
-  let migratedFromUserScope = false;
-  if (scope === "project" && (otherScopeHasManagedServer(opts) || vscodeHooksInstalled())) {
-    migratedFromUserScope = uninstallVscode({ keepBackups: true });
-  } else if (otherScopeHasManagedServer(opts)) {
-    const otherPath = otherScopeMcpPath2(opts);
-    throw new Error(
-      `token-goat is already registered in VS Code project scope (${otherPath}). Installing into user scope too would register it twice and duplicate its tool schemas in this workspace. Run "token-goat uninstall --vscode --project" first if you want to move it, or drop --vscode from this run.`
-    );
+function coerceBashEntry(raw) {
+  if (raw === null || typeof raw !== "object") return null;
+  const o = raw;
+  if (typeof o["id"] !== "string" || typeof o["command"] !== "string" || typeof o["output"] !== "string" || typeof o["exitCode"] !== "number" || typeof o["storedAt"] !== "number" || typeof o["sizeBytes"] !== "number") {
+    return null;
   }
-  const config = readConfig(mcpPath);
-  const existingServers = config.value["servers"];
-  if (existingServers !== void 0 && (existingServers === null || typeof existingServers !== "object" || Array.isArray(existingServers))) {
-    throw new Error(`malformed VS Code MCP JSON at ${mcpPath}: servers must be an object`);
-  }
-  const servers = existingServers ?? {};
-  const current = servers["token-goat"];
-  if (current !== void 0 && !isManagedServer(current)) {
-    throw new Error(`VS Code MCP JSON at ${mcpPath} already has a non-token-goat-managed server named "token-goat"`);
-  }
-  const next = updateConfig(config.text, managedServer());
-  const mcpExisted = fs12.existsSync(mcpPath);
-  ensureDirSync(path11.dirname(mcpPath));
-  if (config.text !== next) {
-    backupFile(mcpPath);
-    atomicWriteText(mcpPath, next);
-    if (!mcpExisted) recordCreatedConfig(mcpPath);
-  }
-  const guidanceChanged = writeGuidance2(instructionsPath, scope === "user");
-  if (scope === "project") syncVisualStudioProjectGuidance(instructionsPath);
-  const hooks = installCopilotHooksFile(vscodeHooksDir(opts), "vscode");
-  return {
-    mcpPath,
-    instructionsPath,
-    hooksConfigPath: hooks.configPath,
-    alreadyInstalled: config.text === next && !guidanceChanged && !hooks.changed && !migratedFromUserScope,
-    scope,
-    migratedFromUserScope
+  const entry = {
+    id: o["id"],
+    command: o["command"],
+    output: o["output"],
+    exitCode: o["exitCode"],
+    storedAt: o["storedAt"],
+    sizeBytes: o["sizeBytes"]
   };
+  const rawFingerprints = o["fingerprints"];
+  if (rawFingerprints !== null && typeof rawFingerprints === "object") {
+    const f = rawFingerprints;
+    const fingerprints = {};
+    if (typeof f["git"] === "string") fingerprints.git = f["git"];
+    if (typeof f["dir"] === "string") fingerprints.dir = f["dir"];
+    if (typeof f["lockfile"] === "string") fingerprints.lockfile = f["lockfile"];
+    if (typeof f["file"] === "string") fingerprints.file = f["file"];
+    if (Object.keys(fingerprints).length > 0) return { ...entry, fingerprints };
+  }
+  return entry;
 }
-function uninstallVscode(opts = {}) {
-  return withInstallScope(projectScopeRoot(opts), () => uninstallVscodeScoped(opts));
-}
-function uninstallVscodeScoped(opts) {
-  assertProjectTargetsAreInTheProject(opts);
-  const mcpPath = vscodeMcpPath(opts);
-  let removed = false;
-  if (fs12.existsSync(mcpPath)) {
-    const config = readConfig(mcpPath);
-    const servers = config.value["servers"];
-    if (servers !== void 0 && (servers === null || typeof servers !== "object" || Array.isArray(servers))) {
-      throw new Error(`malformed VS Code MCP JSON at ${mcpPath}: servers must be an object`);
-    }
-    if (servers && isManagedServer(servers["token-goat"])) {
-      const next = dropEmptyServers(updateConfig(config.text, void 0));
-      if (/^\s*\{\s*\}\s*$/.test(next) && takeCreatedConfig(mcpPath)) removeFileInScope(mcpPath);
-      else {
-        backupFile(mcpPath);
-        atomicWriteText(mcpPath, next);
-      }
-      if (opts.keepBackups !== true) removeCreatedBackups(mcpPath);
-      removed = true;
-    }
-  }
-  const instructionsPath = vscodeInstructionsPath(opts);
-  if (stripDelimitedBlock(instructionsPath, BEGIN, END, opts.keepBackups === true)) {
-    removed = true;
-    if (opts.project !== true && fs12.readFileSync(instructionsPath, "utf8").trim() === USER_INSTRUCTIONS_FRONTMATTER.trim()) removeFileInScope(instructionsPath);
-  }
-  if (opts.project === true) syncVisualStudioProjectGuidance(instructionsPath);
-  if (releaseCopilotHooksFile(vscodeHooksDir(opts), "vscode", opts.keepBackups === true)) removed = true;
-  return removed;
+function getBashOutput(id) {
+  const hit = _byId.get(id);
+  if (hit !== void 0) return hit;
+  if (isBlobStale(BASH_OUTPUT_SUBDIR, id)) return null;
+  const entry = coerceBashEntry(loadBlob(BASH_OUTPUT_SUBDIR, id));
+  if (entry === null) return null;
+  _byId.set(id, entry);
+  return entry;
 }
-
-// src/bridges/index.ts
-init_define_import_meta_env();
+registerReset(() => {
+  _byId = /* @__PURE__ */ new Map();
+});
 
 // src/tool_filters/base.ts
 init_define_import_meta_env();
@@ -5513,7 +1912,7 @@ ${stderr.replace(/\s+$/, "")}`;
         notes.push(`input exceeded inspect budget (${Math.floor(MAX_INSPECT_BYTES / 1024)} KiB); fell back to truncation`);
         body = fallbackTruncate(normOut, normErr, maxLines);
       } else {
-        body = this.compress(normOut, normErr, exitCode, argv, { inputTruncated: soClamped !== null || seClamped !== null });
+        body = this.compress(normOut, normErr, exitCode, argv, { inputTruncated: soClamped !== null || seClamped !== null, maxLines });
       }
     } catch (exc) {
       const kind = exc instanceof Error ? exc.constructor.name : "Error";
@@ -10999,16 +7398,16 @@ function _scoreAndCapHunks(hunkLines, maxHunks) {
 var DiffFilter = class extends ToolFilter {
   name = "diff";
   binaries = /* @__PURE__ */ new Set(["diff", "diff3", "sdiff", "colordiff", "wdiff"]);
-  compressBody(stdout, stderr, _exitCode, _argv) {
+  compressBody(stdout, stderr, _exitCode, _argv, ctx = {}) {
     const text = this.combineOutput(stdout, stderr);
     const lines = text.split("\n");
     const nonEmpty = lines.filter((l) => l);
     if (nonEmpty.length <= 50) return text;
     const hasUnified = lines.slice(0, 20).some((l) => _DIFF_HUNK_RE.test(l));
-    if (hasUnified) return this._compressUnified(lines);
-    return compressTestOutput(lines, 300);
+    if (hasUnified) return this._compressUnified(lines, ctx.maxLines);
+    return compressTestOutput(lines, ctx.maxLines === void 0 ? 300 : Math.min(300, ctx.maxLines) - 1);
   }
-  _compressUnified(lines) {
+  _compressUnified(lines, maxLines) {
     const text = lines.join("\n");
     const rawBlocks = _mergeDiffEchoBlocks(_splitDiffFileBlocks(text));
     const realFiles = rawBlocks.filter((b) => _DIFF_FILE_HEADER_RE.test(b.split("\n")[0] ?? ""));
@@ -11062,9 +7461,48 @@ var DiffFilter = class extends ToolFilter {
       const capped = _scoreAndCapHunks(blockLines, maxHunksPerFile);
       outParts.push(capped.join("\n"));
     }
+    if (maxLines !== void 0 && outParts.join("\n").split("\n").length > maxLines) {
+      return _collapsePlainDiffBlocksToCap(outParts, maxLines).join("\n");
+    }
     return outParts.join("\n");
   }
 };
+function _collapsePlainDiffBlocksToCap(outBlocks, maxLines) {
+  const isFileBlock = outBlocks.map((block) => _DIFF_FILE_HEADER_RE.test(block.split("\n")[0] ?? ""));
+  const collapsedFormOf = (block) => {
+    const blockLines = block.split("\n");
+    const hunkIdx = blockLines.findIndex((ln) => _DIFF_HUNK_RE.test(ln));
+    const headerLines = hunkIdx === -1 ? blockLines : blockLines.slice(0, hunkIdx);
+    const hunkCount = blockLines.filter((ln) => _DIFF_HUNK_RE.test(ln)).length;
+    const added = blockLines.filter(_isDiffAdd).length;
+    const removed = blockLines.filter(_isDiffRemove).length;
+    const summary = `[token-goat: ${hunkCount} hunk(s), +${added} -${removed} lines collapsed to fit the line cap]`;
+    return { headerLines, summary, size: headerLines.length + 1 };
+  };
+  const collapsedSizes = outBlocks.map((block, i) => isFileBlock[i] ? collapsedFormOf(block).size : 0);
+  const reserve = new Array(outBlocks.length).fill(0);
+  for (let i = outBlocks.length - 2; i >= 0; i--) reserve[i] = reserve[i + 1] + collapsedSizes[i + 1];
+  let budget = maxLines;
+  const result = [];
+  for (let i = 0; i < outBlocks.length; i++) {
+    const block = outBlocks[i];
+    if (!isFileBlock[i]) {
+      result.push(block);
+      budget -= block.split("\n").length;
+      continue;
+    }
+    const lineCount = block.split("\n").length;
+    if (lineCount <= budget - reserve[i]) {
+      result.push(block);
+      budget -= lineCount;
+    } else {
+      const { headerLines, summary, size } = collapsedFormOf(block);
+      result.push(headerLines.join("\n") + "\n" + summary);
+      budget -= size;
+    }
+  }
+  return result;
+}
 var _FFMPEG_VERSION_RE = /^ff(?:mpeg|probe|play)\s+version\s/i;
 var _FFMPEG_BUILD_NOISE_RE = /^\s+(?:built with\b|configuration:|lib(?:av|sw|post)\w+\s+\d)/;
 var _FFMPEG_METADATA_SECTION_RE = /^\s{2,}Metadata:\s*$/;
@@ -14813,42 +11251,41 @@ var _GIT_LOG_ONELINE_GRAPH_RE = /^[|\\/* ]*[0-9a-f]{7,}\s/;
 var _GIT_LOG_MERGE_RE = /^Merge:/;
 var _GIT_LOG_AUTHOR_RE = /^Author:\s+(.+)/;
 var _GIT_LOG_DATE_RE = /^Date:\s+(.+)/;
+function _summariseCommitHeader(lines) {
+  const hashLine = lines[0] ?? "";
+  const merge = lines.find((ln) => _GIT_LOG_MERGE_RE.test(ln)) ?? "";
+  let author = "";
+  let dateStr = "";
+  let subject = "";
+  for (const ln of lines) {
+    if (!author) {
+      const m = _GIT_LOG_AUTHOR_RE.exec(ln);
+      if (m) author = (m[1] ?? "").split("<")[0].trim();
+    }
+    if (!dateStr) {
+      const m = _GIT_LOG_DATE_RE.exec(ln);
+      if (m) dateStr = (m[1] ?? "").trim();
+    }
+    if (!subject && ln.startsWith("    ") && ln.trim()) {
+      subject = ln.trim();
+    }
+  }
+  const parts = [hashLine];
+  if (merge) parts.push(merge);
+  const detailParts = [];
+  if (author) detailParts.push(author);
+  if (dateStr) detailParts.push(dateStr);
+  if (subject) detailParts.push(`"${subject}"`);
+  if (detailParts.length) parts.push("  " + detailParts.join(" | "));
+  return parts;
+}
 function _compressGitLogFull(stdout, stderr) {
   const blocks = splitBlocks(stdout, _GIT_LOG_COMMIT_RE);
   if (!blocks.length) return stdout;
   const prelude = !_GIT_LOG_COMMIT_RE.test(blocks[0]) ? blocks[0] : "";
   const commits = blocks.filter((b) => _GIT_LOG_COMMIT_RE.test(b));
   if (commits.length <= 10) return stdout;
-  const collapsed = [];
-  for (const block of commits) {
-    const lines = block.split("\n");
-    const hashLine = lines[0] ?? "";
-    const merge = lines.find((ln) => _GIT_LOG_MERGE_RE.test(ln)) ?? "";
-    let author = "";
-    let dateStr = "";
-    let subject = "";
-    for (const ln of lines) {
-      if (!author) {
-        const m = _GIT_LOG_AUTHOR_RE.exec(ln);
-        if (m) author = (m[1] ?? "").split("<")[0].trim();
-      }
-      if (!dateStr) {
-        const m = _GIT_LOG_DATE_RE.exec(ln);
-        if (m) dateStr = (m[1] ?? "").trim();
-      }
-      if (!subject && ln.startsWith("    ") && ln.trim()) {
-        subject = ln.trim();
-      }
-    }
-    const parts = [hashLine];
-    if (merge) parts.push(merge);
-    const detailParts = [];
-    if (author) detailParts.push(author);
-    if (dateStr) detailParts.push(dateStr);
-    if (subject) detailParts.push(`"${subject}"`);
-    if (detailParts.length) parts.push("  " + detailParts.join(" | "));
-    collapsed.push(parts.join("\n"));
-  }
+  const collapsed = commits.map((block) => _summariseCommitHeader(block.split("\n")).join("\n"));
   let text = (prelude ? prelude + "\n" : "") + collapsed.join("\n\n");
   if (stderr.trim()) text += "\n---\n" + stderr.replace(/\s+$/, "");
   return text;
@@ -14871,19 +11308,31 @@ function _capPatchLinesInBlock(block, maxLines) {
   }
   return [...headerLines, ...diffLines].join("\n");
 }
-function _compressGitLogCapped(stdout, stderr, capBlock) {
+var _GIT_LOG_MESSAGE_LINE_RE = /^ {4}/;
+function _collapseCommitBody(block) {
+  const lines = block.split("\n");
+  const header = _summariseCommitHeader(lines);
+  const isHeaderLine = (ln) => _GIT_LOG_COMMIT_RE.test(ln) || _GIT_LOG_MERGE_RE.test(ln) || _GIT_LOG_AUTHOR_RE.test(ln) || _GIT_LOG_DATE_RE.test(ln);
+  const rest = lines.filter((ln) => ln.trim() && !_GIT_LOG_MESSAGE_LINE_RE.test(ln) && !isHeaderLine(ln));
+  return [...header, ...rest].join("\n");
+}
+function _compressGitLogCapped(stdout, stderr, capBlock, maxLines) {
   const blocks = splitBlocks(stdout, _GIT_LOG_COMMIT_RE);
   if (!blocks.length) return stdout;
   const prelude = !_GIT_LOG_COMMIT_RE.test(blocks[0]) ? blocks[0] : "";
   const commits = blocks.filter((b) => _GIT_LOG_COMMIT_RE.test(b));
-  const outBlocks = commits.map(capBlock);
+  let outBlocks = commits.map(capBlock);
+  if (maxLines !== void 0) {
+    const lineCount = ((prelude ? prelude + "\n" : "") + outBlocks.join("\n")).split("\n").length;
+    if (lineCount > maxLines) outBlocks = outBlocks.map(_collapseCommitBody);
+  }
   let text = (prelude ? prelude + "\n" : "") + outBlocks.join("\n");
   if (stderr.trim()) text += "\n---\n" + stderr.replace(/\s+$/, "");
   return text;
 }
-function _compressGitLogPatch(stdout, stderr) {
+function _compressGitLogPatch(stdout, stderr, maxLines) {
   const MAX_PATCH_LINES = 30;
-  return _compressGitLogCapped(stdout, stderr, (block) => _capPatchLinesInBlock(block, MAX_PATCH_LINES));
+  return _compressGitLogCapped(stdout, stderr, (block) => _capPatchLinesInBlock(block, MAX_PATCH_LINES), maxLines);
 }
 function _capStatLinesInBlock(block, maxFiles) {
   const lines = block.split("\n");
@@ -14908,11 +11357,11 @@ function _capStatLinesInBlock(block, maxFiles) {
   }
   return newLines.join("\n");
 }
-function _compressGitLogStat(stdout, stderr) {
+function _compressGitLogStat(stdout, stderr, maxLines) {
   const MAX_STAT_FILES = 20;
-  return _compressGitLogCapped(stdout, stderr, (block) => _capStatLinesInBlock(block, MAX_STAT_FILES));
+  return _compressGitLogCapped(stdout, stderr, (block) => _capStatLinesInBlock(block, MAX_STAT_FILES), maxLines);
 }
-function _compressGitLogEnhanced(stdout, stderr, argv, inputTruncated = false) {
+function _compressGitLogEnhanced(stdout, stderr, argv, inputTruncated = false, maxLines) {
   const flags = new Set(argv);
   let isOneline = flags.has("--oneline") || flags.has("--format=oneline") || flags.has("--pretty=oneline") || argv.some((a) => a.startsWith("--format=%h") || a.startsWith("--pretty=%h"));
   if (!isOneline) {
@@ -14922,7 +11371,7 @@ function _compressGitLogEnhanced(stdout, stderr, argv, inputTruncated = false) {
     }
   }
   const isPatch = flags.has("-p") || flags.has("--patch") || flags.has("-u");
-  const isStat = flags.has("--stat") || flags.has("--shortstat") || flags.has("--name-status");
+  const isStat = flags.has("--stat") || argv.some((a) => a.startsWith("--stat=")) || flags.has("--shortstat") || flags.has("--name-status") || flags.has("--name-only") || flags.has("--numstat");
   if (isOneline) {
     const ONELINE_CAP = 50;
     let blocks;
@@ -14945,15 +11394,15 @@ function _compressGitLogEnhanced(stdout, stderr, argv, inputTruncated = false) {
     if (stderr.trim()) out += "\n---\n" + stderr.replace(/\s+$/, "");
     return out;
   }
-  if (isPatch) return _compressGitLogPatch(stdout, stderr);
-  if (isStat) return _compressGitLogStat(stdout, stderr);
+  if (isPatch) return _compressGitLogPatch(stdout, stderr, maxLines);
+  if (isStat) return _compressGitLogStat(stdout, stderr, maxLines);
   return _compressGitLogFull(stdout, stderr);
 }
 var GitLogFilter = class extends GitBaseFilter {
   name = "git-log";
   subcommands = /* @__PURE__ */ new Set(["log"]);
   compress(stdout, stderr, _exitCode, argv, ctx = {}) {
-    return _compressGitLogEnhanced(stdout, stderr, argv, ctx.inputTruncated === true);
+    return _compressGitLogEnhanced(stdout, stderr, argv, ctx.inputTruncated === true, ctx.maxLines);
   }
 };
 var _GIT_DIFF_BINARY_RE = /^Binary files?(?: .+)? differ$/;
@@ -15116,7 +11565,43 @@ function _capHunksByDensity(hunks, maxHunksPerFile) {
     note: `[token-goat: ${dropped.length} more hunks, avg density ${avg.toFixed(2)} \u2014 likely whitespace/formatting]`
   };
 }
-function _compressGitDiffBody(stdout, stderr, maxHunksPerFile = 10) {
+function _collapseDiffBlocksToCap(outBlocks, maxLines) {
+  const isFileBlock = outBlocks.map((block) => _GIT_DIFF_FILE_RE.test(block));
+  const collapsedFormOf = (block) => {
+    const lines = block.split("\n");
+    const hunkIdx = lines.findIndex((ln) => _GIT_DIFF_HUNK_RE.test(ln));
+    const headerLines = hunkIdx === -1 ? lines : lines.slice(0, hunkIdx);
+    const hunkCount = lines.filter((ln) => _GIT_DIFF_HUNK_RE.test(ln)).length;
+    const added = lines.filter(_isDiffAdd2).length;
+    const removed = lines.filter(_isDiffRemove2).length;
+    const summary = `[token-goat: ${hunkCount} hunk(s), +${added} -${removed} lines collapsed to fit the line cap]`;
+    return { headerLines, summary, size: headerLines.length + 1 };
+  };
+  const collapsedSizes = outBlocks.map((block, i) => isFileBlock[i] ? collapsedFormOf(block).size : 0);
+  const reserve = new Array(outBlocks.length).fill(0);
+  for (let i = outBlocks.length - 2; i >= 0; i--) reserve[i] = reserve[i + 1] + collapsedSizes[i + 1];
+  let budget = maxLines;
+  const result = [];
+  for (let i = 0; i < outBlocks.length; i++) {
+    const block = outBlocks[i];
+    if (!isFileBlock[i]) {
+      result.push(block);
+      budget -= block.split("\n").length;
+      continue;
+    }
+    const lineCount = block.split("\n").length;
+    if (lineCount <= budget - reserve[i]) {
+      result.push(block);
+      budget -= lineCount;
+    } else {
+      const { headerLines, summary, size } = collapsedFormOf(block);
+      result.push(headerLines.join("\n") + "\n" + summary);
+      budget -= size;
+    }
+  }
+  return result;
+}
+function _compressGitDiffBody(stdout, stderr, maxHunksPerFile = 10, maxLines) {
   const MAX_HUNK_CHANGED = 25;
   const HUNK_HEAD_KEEP = 15;
   const HUNK_TAIL_KEEP = 5;
@@ -15190,11 +11675,15 @@ function _compressGitDiffBody(stdout, stderr, maxHunksPerFile = 10) {
     if (hunkCapNote) compressedHunks.push(hunkCapNote);
     outBlocks.push(compressedHunks.join("\n"));
   }
-  let text = outBlocks.join("\n");
+  let finalBlocks = outBlocks;
+  if (maxLines !== void 0 && outBlocks.join("\n").split("\n").length > maxLines) {
+    finalBlocks = _collapseDiffBlocksToCap(outBlocks, maxLines);
+  }
+  let text = finalBlocks.join("\n");
   if (stderr.trim()) text += "\n---\n" + stderr.replace(/\s+$/, "");
   return text;
 }
-function _compressGitDiffEnhanced(stdout, stderr, argv) {
+function _compressGitDiffEnhanced(stdout, stderr, argv, maxLines) {
   const flags = new Set(argv);
   const isStat = flags.has("--stat") || flags.has("--shortstat") || flags.has("--name-only");
   if (isStat) return _compressGitDiffStat(stdout, stderr, argv);
@@ -15204,13 +11693,13 @@ function _compressGitDiffEnhanced(stdout, stderr, argv) {
   } catch {
     maxHunksPerFile = void 0;
   }
-  return maxHunksPerFile === void 0 ? _compressGitDiffBody(stdout, stderr) : _compressGitDiffBody(stdout, stderr, maxHunksPerFile);
+  return maxHunksPerFile === void 0 ? _compressGitDiffBody(stdout, stderr, void 0, maxLines) : _compressGitDiffBody(stdout, stderr, maxHunksPerFile, maxLines);
 }
 var GitDiffFilter = class extends GitBaseFilter {
   name = "git-diff";
   subcommands = /* @__PURE__ */ new Set(["diff", "show"]);
-  compress(stdout, stderr, _exitCode, argv) {
-    return _compressGitDiffEnhanced(stdout, stderr, argv);
+  compress(stdout, stderr, _exitCode, argv, ctx = {}) {
+    return _compressGitDiffEnhanced(stdout, stderr, argv, ctx.maxLines);
   }
 };
 var _SHORT_STATUS_RE = /^[MADRCU?! ][MADRCU?! ] /;
@@ -15349,6 +11838,7 @@ function _compressGitBlamePorcelain(lines, stderr) {
   let currentAuthor = null;
   let runCount = 0;
   let blockLines = [];
+  const authorByHash = /* @__PURE__ */ new Map();
   function flushBlock() {
     if (!blockLines.length) return;
     out.push(...blockLines);
@@ -15372,14 +11862,17 @@ function _compressGitBlamePorcelain(lines, stderr) {
       }
       flushBlock();
       currentHash = commitHash;
-      currentAuthor = null;
+      currentAuthor = authorByHash.get(commitHash) ?? null;
       runCount = 1;
       blockLines = [line];
       i++;
       while (i < lines.length && !lines[i].startsWith("	")) {
         const meta = lines[i];
         const am = _GIT_BLAME_AUTHOR_LINE_RE.exec(meta);
-        if (am) currentAuthor = (am[1] ?? "").trim();
+        if (am) {
+          currentAuthor = (am[1] ?? "").trim();
+          authorByHash.set(commitHash, currentAuthor);
+        }
         blockLines.push(meta);
         i++;
       }
@@ -15713,11 +12206,11 @@ var GitFilter = class extends GitBaseFilter {
     if (!super.matches(argv)) return false;
     return gitPositionalArgs(argv.slice(1))[0] !== "grep";
   }
-  compress(stdout, stderr, exitCode, argv) {
+  compress(stdout, stderr, exitCode, argv, ctx = {}) {
     const positionals = gitPositionalArgs(argv.slice(1));
     const subcommand = positionals[0] ?? "";
     if (subcommand === "diff" || subcommand === "show") {
-      return _compressGitDiffEnhanced(stdout, stderr, argv);
+      return _compressGitDiffEnhanced(stdout, stderr, argv, ctx.maxLines);
     }
     if (subcommand === "ls-files" || subcommand === "ls-tree")
       return _truncateListing(stdout, stderr, 100);
@@ -16111,14 +12604,14 @@ function _eslintSingleLineIssuePath(line) {
 var ESLintFilter = class extends ToolFilter {
   name = "eslint";
   binaries = /* @__PURE__ */ new Set(["eslint"]);
-  compress(stdout, stderr, exitCode, _argv) {
+  compress(stdout, stderr, exitCode, _argv, ctx = {}) {
     const merged = this.combineOutput(stdout, stderr);
     const lines = merged.split("\n");
     if (exitCode === 0 && !lines.some((ln) => _eslintIssueSeverity(ln) !== null)) {
       const summary = lines.find((ln) => _ESLINT_SUMMARY_RE.test(ln.trim()));
       return summary ?? "ESLint: no errors";
     }
-    const out = [];
+    const blocks = [];
     let currentFileHeader = null;
     let currentIssues = [];
     let currentHasIssues = false;
@@ -16128,29 +12621,7 @@ var ESLintFilter = class extends ToolFilter {
         currentHasIssues = false;
         return;
       }
-      if (!currentHasIssues) {
-        currentFileHeader = null;
-        currentIssues = [];
-        currentHasIssues = false;
-        return;
-      }
-      out.push(currentFileHeader);
-      const warnByRule = /* @__PURE__ */ new Map();
-      for (const issue of currentIssues) {
-        const severity = _eslintIssueSeverity(issue);
-        if (severity === "warning") {
-          const rule = issue.trimEnd().split(/\s+/).pop() ?? "__unknown__";
-          const bucket = warnByRule.get(rule) ?? [];
-          bucket.push(issue);
-          warnByRule.set(rule, bucket);
-        } else {
-          out.push(issue);
-        }
-      }
-      for (const [rule, entries] of [...warnByRule.entries()].sort()) {
-        out.push(...entries.slice(0, 3));
-        if (entries.length > 3) out.push(`  [token-goat: +${entries.length - 3} more ${rule} warnings]`);
-      }
+      if (currentHasIssues) blocks.push({ kind: "file", header: currentFileHeader, issues: currentIssues });
       currentFileHeader = null;
       currentIssues = [];
       currentHasIssues = false;
@@ -16158,7 +12629,7 @@ var ESLintFilter = class extends ToolFilter {
     for (const line of lines) {
       if (_ESLINT_SUMMARY_RE.test(line.trim())) {
         flushFile();
-        out.push(line);
+        blocks.push({ kind: "line", text: line });
         continue;
       }
       const singleLinePath = _eslintSingleLineIssuePath(line);
@@ -16184,13 +12655,62 @@ var ESLintFilter = class extends ToolFilter {
         continue;
       }
       if (currentFileHeader === null) {
-        out.push(line);
+        blocks.push({ kind: "line", text: line });
       } else {
         currentIssues.push(line);
       }
     }
     flushFile();
-    return squeezeBlankLines(out.join("\n"));
+    const renderFile = (header, issues, tier) => {
+      if (tier === 2) {
+        const errorsByRule2 = /* @__PURE__ */ new Map();
+        const warningsByRule2 = /* @__PURE__ */ new Map();
+        for (const issue of issues) {
+          const severity = _eslintIssueSeverity(issue);
+          const bucket = severity === "error" ? errorsByRule2 : severity === "warning" ? warningsByRule2 : null;
+          if (bucket !== null) {
+            const rule = issue.trimEnd().split(/\s+/).pop() ?? "__unknown__";
+            bucket.set(rule, (bucket.get(rule) ?? 0) + 1);
+          }
+        }
+        const summarize = (byRule, noun) => {
+          const total = [...byRule.values()].reduce((a, b) => a + b, 0);
+          if (total === 0) return null;
+          return `${total} ${noun}${plural(total)}: ${[...byRule.entries()].sort().map(([rule, n]) => `${rule} \xD7${n}`).join(", ")}`;
+        };
+        const parts = [summarize(errorsByRule2, "error"), summarize(warningsByRule2, "warning")].filter((p) => p !== null);
+        return parts.length > 0 ? [`${header}  [token-goat: ${parts.join("; ")}]`] : [header];
+      }
+      const fileOut = [header];
+      const errorsByRule = /* @__PURE__ */ new Map();
+      const warningsByRule = /* @__PURE__ */ new Map();
+      for (const issue of issues) {
+        const severity = _eslintIssueSeverity(issue);
+        const byRule = severity === "warning" ? warningsByRule : tier === 1 && severity === "error" ? errorsByRule : null;
+        if (byRule === null) {
+          fileOut.push(issue);
+          continue;
+        }
+        const rule = issue.trimEnd().split(/\s+/).pop() ?? "__unknown__";
+        const bucket = byRule.get(rule) ?? [];
+        bucket.push(issue);
+        byRule.set(rule, bucket);
+      }
+      for (const [byRule, noun] of [[errorsByRule, "error"], [warningsByRule, "warning"]]) {
+        for (const [rule, entries] of [...byRule.entries()].sort()) {
+          fileOut.push(...entries.slice(0, 3));
+          if (entries.length > 3) fileOut.push(`  [token-goat: +${entries.length - 3} more ${rule} ${noun}s]`);
+        }
+      }
+      return fileOut;
+    };
+    const render = (tier) => squeezeBlankLines(blocks.flatMap((block) => block.kind === "line" ? [block.text] : renderFile(block.header, block.issues, tier)).join("\n"));
+    let text = render(0);
+    if (ctx.maxLines !== void 0) {
+      if (text.split("\n").length > ctx.maxLines) text = render(1);
+      if (text.split("\n").length > ctx.maxLines) text = render(2);
+    }
+    return text;
   }
 };
 var _MYPY_LINE_RE = /^(?<file>.+?):(?<line>\d+):(?:\d+:)?\s+(?<level>error|note|warning):/;
@@ -17248,7 +13768,7 @@ var VCPKG_ELAPSED_RE = /^Elapsed\s+time\s+for\s+package\s+\S+:\s+\d/;
 var VCPKG_DONE_RE = /^(?:Total\s+install\s+time:|CMake\s+projects\s+should\s+use|All\s+requested\s+packages\s+are\s+currently\s+installed|Package\s+\S+:\S+\s+is\s+already\s+installed)/i;
 var VCPKG_EXTRACTING_RE = /^\s*--\s+(?:Extracting\s+source|Applying\s+patch|Using\s+cached\s+archive|Downloading\s+https?:\/\/|Fetching\s+\S+|Stored\s+binaries\s+in\s+)/i;
 var NPM_PROGRESS_RE = /^[⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏]\s|^npm\s+(?:WARN\s+deprecated|sill|http|verb|timing)\s/;
-var NPM_DEPRECATED_GENERAL_RE = /\bdeprecated\b/i;
+var NPM_DEPRECATED_GENERAL_RE = /^npm\s+warn\s+deprecated\b/i;
 var NPM_AUDIT_PKG_RE = /^(?:npm\s+)?(?:found|run `npm audit`|packages are looking for funding)/i;
 var NPM_ERR_RE = /^npm (?:ERR!|error)/i;
 var DEP_LIST_THRESHOLD = 30;
@@ -18233,6 +14753,7 @@ var PACKAGE_MANAGER_FILTERS = [
 init_define_import_meta_env();
 var XDIST_PREFIX_RE = /^\[gw\d+\]\s*(?:\[\s*\d+%\]\s*)?/;
 var DOTS_RE = /^[.FxXEsS]+\s*(\[\s*\d+%\])?\s*$/;
+var FILE_DOTS_RE = /^\S+\s+[.FxXEsS]+\s+\[\s*\d+%\]\s*$/;
 var BANNER_RE = /^(?:platform\s|cachedir:\s|rootdir:\s|plugins:\s|configfile:\s|bringing up\s|cacheprovider-)/;
 var PREAMBLE_RE = /^collecting\s/;
 var HEADER_RE = /^=+\s*(?:test session starts|FAILURES|ERRORS|short test summary info|warnings summary|slowest \d+ durations|\d+ failed|\d+ passed|\d+ error)\b/;
@@ -18268,7 +14789,7 @@ var PytestFilter = class extends ToolFilter {
     let pendingWarnHeader = null;
     for (let line of lines) {
       if (XDIST_PREFIX_RE.test(line)) line = line.replace(XDIST_PREFIX_RE, "");
-      if (DOTS_RE.test(line)) continue;
+      if (DOTS_RE.test(line) || FILE_DOTS_RE.test(line)) continue;
       if (BANNER_RE.test(line)) continue;
       if (PREAMBLE_RE.test(line)) continue;
       if (HEADER_RE.test(line)) {
@@ -18588,66 +15109,8 @@ function filterByName(name) {
 init_define_import_meta_env();
 
 export {
-  getToolName,
-  getToolInput,
-  getFilePath,
-  getCwd,
-  getTranscriptPath,
-  extractToolResponseField,
-  OUTPUT_FIRST_TOOL_RESPONSE_KEYS,
-  BODY_FIRST_TOOL_RESPONSE_KEYS,
-  isMcpErrorResponse,
-  extractToolResultText,
-  mcpContentBlocks,
-  isTextualContentBlock,
-  withPreservedBlocks,
-  passOutput,
-  denyOutput,
-  contextOutput,
-  emitRewrite,
-  emitRewriteIfChanged,
-  makeDedupHintHandlers,
-  MATERIALIZE_SHRUNK_IMAGE_JS,
-  bundledCliPath,
-  readServersJson,
-  serversOf,
-  setTokenGoatServer,
-  dropEmptyServers,
-  hasManagedServer,
-  visualStudioUserMcpPath,
-  visualStudioProjectMcpPath,
-  visualStudioOtherScopeHasManagedServer,
-  isVisualStudioInstalled,
-  visualStudioSolutionVscodeMcpPath,
-  visualStudioDuplicateNote,
-  visualStudioMcpStatus,
-  visualStudioManagedEntry,
-  installVisualStudio,
-  uninstallVisualStudio,
-  copilotCliUserRoot,
-  copilotCliMcpToolsDir,
-  copilotCliConfigPath,
-  copilotCliScriptPath,
-  HOOKS_SCRIPT_FILE,
-  readCopilotHooksOwners,
-  installCopilotCli,
-  uninstallCopilotCli,
-  isCopilotCliInstalled,
   FILTERS,
-  estimateTokensFromLength,
-  estimateTokens,
-  trimToBudget,
-  capJsonRows,
-  readCopilotMcpTools,
-  GEMINI_TOOL_NAME_MAP,
-  VSCODE_TOOL_NAME_KEY,
-  normalizePayload,
-  materializeShrunkImageFile,
-  sessionStateKey,
-  registerHook,
-  toolMatcherFor,
-  runHook,
-  serializeOutput,
+  stripAnsiCodes,
   combineStreams,
   hasBareBackgroundOrNewline,
   hasUnquotedOperator,
@@ -18677,33 +15140,6 @@ export {
   storeBashOutputSync,
   storeBashOutput,
   getBashOutput,
-  anchoredMarkerPattern,
-  settingsPath,
-  installHooks,
-  uninstallHooks,
-  isInstalled,
-  installClaudeMd,
-  uninstallClaudeMd,
-  findStrayClaudeMdBlocks,
-  installSkill,
-  uninstallSkill,
-  groupHasTokenGoat2 as groupHasTokenGoat,
-  installCodex,
-  uninstallCodex,
-  isCodexInstalled,
-  installKimi,
-  uninstallKimi,
-  isKimiInstalled,
-  installGrok,
-  uninstallGrok,
-  isGrokInstalled,
-  vscodeScopeFromFlags,
-  vscodeHooksInstalled,
-  vscodeUsesClaudeHooks,
-  otherScopeHasManagedServer,
-  vscodeDecoderConfigured,
-  installVscode,
-  uninstallVscode,
   resolveMinNetSavingsBytes,
   isRewriteWorthwhile,
   compressedTokensSaved,