token-goat 2.9.25 → 2.9.28

package/dist/{token-goat-chunk-Z5ZTBSHL.mjs → token-goat-chunk-CBMY2FGI.mjs}

@@ -1,17 +1,5 @@
 import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
-import {
-  compareSemver
-} from "./token-goat-chunk-EZVRN44Y.mjs";
-import {
-  buildCopilotWasteReport,
-  findLatestCopilotSession,
-  findProjectSession,
-  isCopilotTranscript
-} from "./token-goat-chunk-UEQUZDHQ.mjs";
-import {
-  buildResumePacket
-} from "./token-goat-chunk-K4TNHLGS.mjs";
 import {
   ALL_SYMBOLS_IN_FILE_LIMIT,
   AMBIGUOUS_HEADING_LIMIT,
@@ -90,6 +78,7 @@ import {
   runScreenshot,
   runSection,
   runSemantic,
+  runSemanticMulti,
   runSimilar,
   runSkeleton,
   runSqliteQuery,
@@ -107,7 +96,21 @@ import {
   symbolNamesInFile,
   upsertNote,
   warnIfFilesStale
-} from "./token-goat-chunk-Y463KPAQ.mjs";
+} from "./token-goat-chunk-VWZKZPSR.mjs";
+import {
+  compareSemver
+} from "./token-goat-chunk-5NNYIUGV.mjs";
+import {
+  MCP_DISABLE_NOTE,
+  buildCopilotWasteReport,
+  findLatestCopilotSession,
+  findProjectSession,
+  isCopilotTranscript,
+  unusedMcpServers
+} from "./token-goat-chunk-JXK2HQXS.mjs";
+import {
+  buildResumePacket
+} from "./token-goat-chunk-XI2VFAV6.mjs";
 import {
   DEFAULT_RECONCILE_BUDGET_MS,
   HOOK_EVENTS,
@@ -126,19 +129,9 @@ import {
   runRecallCommand,
   runReconcile,
   storeWebOutput
-} from "./token-goat-chunk-2SSDSUSF.mjs";
-import {
-  buildWasteReport,
-  extractResultText,
-  findLatestTranscript,
-  projectTranscriptsDir,
-  safeStringify
-} from "./token-goat-chunk-UGCNTVF4.mjs";
+} from "./token-goat-chunk-VE27HPIF.mjs";
 import {
-  buildManifest
-} from "./token-goat-chunk-IEF2NZFZ.mjs";
-import {
-  GEMINI_TOOL_NAME_MAP,
+  HINT_CATEGORIES,
   MAX_FILES_SCANNED,
   SKIP_DIRS,
   WORKER_HEARTBEAT_STALE_MS,
@@ -208,15 +201,26 @@ import {
   visionTokensSavedByText,
   walkProject,
   writeCompact
-} from "./token-goat-chunk-TWVFMUTZ.mjs";
+} from "./token-goat-chunk-6Z5ULNE5.mjs";
+import {
+  GEMINI_TOOL_NAME_MAP
+} from "./token-goat-chunk-IZXKVT4A.mjs";
 import {
   CompressedOutput,
   TOOL_FILTERS,
   ToolFilter,
   deliverCompressed,
   detectFromCommand
-} from "./token-goat-chunk-G7YWBH25.mjs";
+} from "./token-goat-chunk-RJH64KQH.mjs";
 import {
+  buildWasteReport,
+  extractResultText,
+  findLatestTranscript,
+  projectTranscriptsDir,
+  safeStringify
+} from "./token-goat-chunk-6DQNNFJ6.mjs";
+import {
+  COPILOT_CLI_HOOK_SCRIPT,
   HOOKS_SCRIPT_FILE,
   MATERIALIZE_SHRUNK_IMAGE_JS,
   buildGuidanceBlock,
@@ -253,7 +257,14 @@ import {
   visualStudioProjectMcpPath,
   visualStudioSolutionVscodeMcpPath,
   visualStudioUserMcpPath
-} from "./token-goat-chunk-OHMKCBZI.mjs";
+} from "./token-goat-chunk-MMLMALWK.mjs";
+import {
+  buildManifest,
+  clearAll,
+  loadEntries,
+  setEntry,
+  unsetEntry
+} from "./token-goat-chunk-L7SDVGBT.mjs";
 import {
   AGENT_SALT_MARKER,
   CONTEXT_AUTOCOMPACT_TOKENS,
@@ -266,8 +277,6 @@ import {
   findLatestSessionId,
   formatAge,
   getContextPressure,
-  getSessionFiles,
-  getSessionId,
   getSkillFilePath,
   incrementSkillHit,
   listOutputs,
@@ -279,27 +288,39 @@ import {
   skillOutputsDir,
   storeCompact,
   storeOutput
-} from "./token-goat-chunk-VAIJUZG6.mjs";
+} from "./token-goat-chunk-6CCQDAYY.mjs";
+import {
+  getSessionFiles,
+  getSessionId
+} from "./token-goat-chunk-GGLEE35R.mjs";
 import {
-  capJsonRows,
   claudeConfigDir,
-  estimateTokens,
-  estimateTokensFromLength,
   formatBytes,
-  formatTokenEstimate,
-  trimToBudget
-} from "./token-goat-chunk-QZZPWFVF.mjs";
+  formatTokenEstimate
+} from "./token-goat-chunk-MAMQPC43.mjs";
 import {
   BASH_OUTPUT_SUBDIR,
-  clipLongMatchLine,
-  combineStreams,
   getBashOutput,
   isRecallCacheType
-} from "./token-goat-chunk-BIBZQRC6.mjs";
+} from "./token-goat-chunk-HXNAC4ZF.mjs";
 import {
-  C,
   DEFAULT_MAX_AGE_MS,
   DEFAULT_MAX_COUNT,
+  listBlobs,
+  pruneBlobs
+} from "./token-goat-chunk-BJBRGPBX.mjs";
+import {
+  capJsonRows,
+  estimateTokens,
+  estimateTokensFromLength,
+  trimToBudget
+} from "./token-goat-chunk-4JMWPWCS.mjs";
+import {
+  clipLongMatchLine,
+  combineStreams
+} from "./token-goat-chunk-4RN64ZND.mjs";
+import {
+  C,
   HOOK_STATS_RETENTION_DAYS,
   RESET,
   _useRichStats,
@@ -308,8 +329,6 @@ import {
   fg,
   formatLocalTimestamp,
   getGlobalDb,
-  listBlobs,
-  pruneBlobs,
   pruneStalePatternCoveredUnmappedTools,
   readUnmappedTools,
   recordStat,
@@ -321,19 +340,19 @@ import {
   statsHasHarnessColumn,
   stripAnsiEscapes,
   summarize
-} from "./token-goat-chunk-KOL5WXDW.mjs";
+} from "./token-goat-chunk-MVSWBNMD.mjs";
 import {
   docxOutline,
   docxTables,
   docxText,
   formatDocxTables
-} from "./token-goat-chunk-ZDFDCXU2.mjs";
+} from "./token-goat-chunk-XKY4VKJ4.mjs";
 import {
   pptxNotesText,
   pptxOutline,
   pptxSlideText,
   pptxTextGrep
-} from "./token-goat-chunk-OUQIGPW3.mjs";
+} from "./token-goat-chunk-Q4S3UQGO.mjs";
 import {
   formatXlsxColumns,
   formatXlsxRange,
@@ -342,11 +361,11 @@ import {
   querySheet,
   rangeSheet,
   xlsxColumns
-} from "./token-goat-chunk-RLDBVMXR.mjs";
+} from "./token-goat-chunk-RSS3TLXU.mjs";
 import {
   formatCsvTable,
   parseWhereSpecs
-} from "./token-goat-chunk-BQ6ZDLTF.mjs";
+} from "./token-goat-chunk-YWSP6IU7.mjs";
 import {
   assetEmbedSha,
   deleteFileEmbeddings,
@@ -372,12 +391,12 @@ import {
   readSection,
   treeSitterCoreAvailable,
   treeSitterCoreLoadError
-} from "./token-goat-chunk-7PQYG6TN.mjs";
+} from "./token-goat-chunk-D5ICEPSB.mjs";
 import {
   getFileEntry,
   getProjectFileEntries,
   querySymbols
-} from "./token-goat-chunk-YZ67F2HJ.mjs";
+} from "./token-goat-chunk-HUDC5GS5.mjs";
 import {
   TREE_SITTER_LANGUAGES,
   detectLanguage,
@@ -388,7 +407,7 @@ import {
   matchGroovySlashy,
   nonTreeSitterLanguageCount,
   redactIfDotenv
-} from "./token-goat-chunk-3FSAZR32.mjs";
+} from "./token-goat-chunk-M56BWPBN.mjs";
 import {
   CONFIG_KEY_ENV_OVERRIDES,
   PROJECT_LOCKED_KEYS,
@@ -417,7 +436,7 @@ import {
   stringify,
   validateEnumField,
   validateNumericField
-} from "./token-goat-chunk-UTKNLKYE.mjs";
+} from "./token-goat-chunk-CC2PYJM7.mjs";
 import {
   ENV_KEYS,
   LOCK_WAIT_MS_HARDENED,
@@ -478,7 +497,7 @@ import {
   withRetryOnLock,
   writeIfDifferent,
   writeJsonSettings
-} from "./token-goat-chunk-YE4TGC4Z.mjs";
+} from "./token-goat-chunk-L45ZQRT7.mjs";
 import {
   UNTRUSTED_FILE_TAG,
   UNTRUSTED_TOOL_TAG,
@@ -3626,9 +3645,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path42) {
-    if (path42 === void 0) return this._executableDir;
-    this._executableDir = path42;
+  executableDir(path41) {
+    if (path41 === void 0) return this._executableDir;
+    this._executableDir = path41;
     return this;
   }
   /**
@@ -3928,8 +3947,8 @@ function attemptedCommandName(argv) {
 }
 
 // src/cli.ts
-import * as fs45 from "fs";
-import * as path41 from "path";
+import * as fs44 from "fs";
+import * as path40 from "path";
 
 // src/walk_index.ts
 init_define_import_meta_env();
@@ -4210,6 +4229,8 @@ var CANONICAL_SKILL_MD = gunzipSync(Buffer.from(CANONICAL_SKILL_GZIP_BASE64, "ba
 var HOOK_EVENT_MAP = [
   ["PreToolUse", "pre_tool_use"],
   ["PostToolUse", "post_tool_use"],
+  // A failed call never reaches PostToolUse: Claude Code 2.1.281 sends a missing-file Read and a non-zero Bash exit here instead, carrying `error`, `is_interrupt` and `duration_ms` (captured, 2026-09-24).
+  ["PostToolUseFailure", "post_tool_use_failure"],
   ["PreCompact", "pre_compact"],
   ["PostCompact", "post_compact"],
   ["UserPromptSubmit", "user_prompt_submit"],
@@ -4423,16 +4444,19 @@ function uninstallHooksScoped(scope) {
   return true;
 }
 function isInstalled(scope = "user") {
-  const settings = readSettings(settingsPath(scope));
-  const hooks = settings.hooks;
-  if (hooks === void 0) return false;
+  if (!fs3.existsSync(claudeHookScriptPath())) return false;
+  const missing = missingHookEvents(scope);
+  return missing !== null && missing.length === 0;
+}
+function missingHookEvents(scope = "user") {
+  const hooks = readSettings(settingsPath(scope)).hooks;
+  if (hooks === void 0) return null;
+  if (!HOOK_EVENT_MAP.some(([eventKey]) => groupHasTokenGoat(hooks[eventKey], isTokenGoatHookCommand))) return null;
   const scriptPath = claudeHookScriptPath();
-  if (!fs3.existsSync(scriptPath)) return false;
-  for (const [eventKey, eventArg] of HOOK_EVENT_MAP) {
+  return HOOK_EVENT_MAP.filter(([eventKey, eventArg]) => {
     const expected = expectedHookEntryFor(scriptPath, eventArg);
-    if (!groupHasTokenGoat(hooks[eventKey], (c, a) => hookEntryMatches(c, a, expected))) return false;
-  }
-  return true;
+    return !groupHasTokenGoat(hooks[eventKey], (c, a) => hookEntryMatches(c, a, expected));
+  }).map(([eventKey]) => eventKey);
 }
 var CLAUDE_MD_BEGIN = "<!-- token-goat-begin -->";
 var CLAUDE_MD_END = "<!-- token-goat-end -->";
@@ -7329,6 +7353,15 @@ function checkVscodeClaudeHooks(useClaudeHooks, claudeHooksInstalled, vscodeHook
     message: vscodeHooksInstalled2 ? "VS Code has chat.useClaudeHooks on and token-goat hooks are in both ~/.claude/settings.json and the Copilot hooks file, so each hook fires twice in VS Code. Turn chat.useClaudeHooks off in VS Code settings." : 'VS Code has chat.useClaudeHooks on, so it runs the token-goat hooks from ~/.claude/settings.json in Claude Code wire format, which VS Code reads only in part. Run "token-goat install --vscode" and turn chat.useClaudeHooks off in VS Code settings.'
   };
 }
+function checkClaudeHookEvents(missing) {
+  const name = "Claude Code hook events";
+  if (missing.user === null && missing.project === null) return null;
+  const gaps = [];
+  if (missing.user !== null && missing.user.length > 0) gaps.push(`user scope lacks ${missing.user.join(", ")}; run: token-goat install`);
+  if (missing.project !== null && missing.project.length > 0) gaps.push(`project scope lacks ${missing.project.join(", ")}; run: token-goat install --project`);
+  if (gaps.length === 0) return { name, status: "ok", message: "every event this build handles is wired" };
+  return { name, status: "warn", message: `${gaps.join(". ")}. Those events never reach token-goat until then; restart any running session afterwards.` };
+}
 function dedupeByResolvedPath(paths) {
   const seen = /* @__PURE__ */ new Set();
   return paths.filter((p) => {
@@ -8055,8 +8088,22 @@ function checkCopilotCli(configPath2, scriptPath) {
       message: 'hook did not return valid JSON -- Copilot treats this as a hook error and denies every tool call. Recovery: run "token-goat install --copilot", then fully restart Copilot CLI.'
     };
   }
+  if (!shimIsCurrent(scriptPath, COPILOT_CLI_HOOK_SCRIPT)) {
+    return { name: "Copilot CLI", status: "warn", message: staleShimMessage(scriptPath, "Copilot", "token-goat install --copilot") + ", then fully restart Copilot CLI." };
+  }
   return { name: "Copilot CLI", status: "ok", message: "preToolUse hook invokes cleanly and returns valid JSON" };
 }
+function shimIsCurrent(scriptPath, expected) {
+  return fs18.readFileSync(scriptPath, "utf-8").replace(/\r\n/g, "\n") === expected.replace(/\r\n/g, "\n");
+}
+function staleShimMessage(scriptPath, harness, reinstall) {
+  return `hook shim at ${scriptPath} was written by an older token-goat build, so fixes to it since then are not reaching ${harness}. Recovery: run "${reinstall}"`;
+}
+function checkHookShim(name, scriptPath, expected, reinstall) {
+  if (!fs18.existsSync(scriptPath)) return null;
+  if (shimIsCurrent(scriptPath, expected)) return { name, status: "ok", message: `hook shim at ${scriptPath} matches this build` };
+  return { name, status: "warn", message: staleShimMessage(scriptPath, name, reinstall) + ", then restart any running session." };
+}
 var COMPACTION_CHANNEL_WINDOW = 5;
 var COMPACTION_STATS_BATCH_SIZE = 50;
 var COMPACTION_STATS_SCAN_CEILING = 2e3;
@@ -8218,6 +8265,12 @@ function runDoctor(dataDir2, configPath2, rootDir, processes) {
   results.push(checkDiskSpace(actualDataDir));
   const copilotResult = checkCopilotCli(copilotCliConfigPath(), copilotCliScriptPath());
   if (copilotResult) results.push(copilotResult);
+  const claudeShimResult = checkHookShim("Claude Code", claudeHookScriptPath(), CLAUDECODE_HOOK_SCRIPT, isInstalled("user") || !isInstalled("project") ? "token-goat install" : "token-goat install --project");
+  if (claudeShimResult) results.push(claudeShimResult);
+  const claudeEventsResult = checkClaudeHookEvents({ user: missingHookEvents("user"), project: missingHookEvents("project") });
+  if (claudeEventsResult) results.push(claudeEventsResult);
+  const codexShimResult = checkHookShim("Codex", codexHookScriptPath(), CODEX_HOOK_SCRIPT, "token-goat install --codex");
+  if (codexShimResult) results.push(codexShimResult);
   const vscodeHooksResult = checkVscodeClaudeHooks(
     vscodeUsesClaudeHooks(),
     isInstalled("user") || isInstalled("project"),
@@ -8470,7 +8523,7 @@ async function runDoctorAndExit(opts) {
     }
   }
   try {
-    const { checkUpdateStatus } = await import("./token-goat-chunk-ORO4GOMA.mjs");
+    const { checkUpdateStatus } = await import("./token-goat-chunk-4JJBFT7V.mjs");
     const update = await checkUpdateStatus(1500);
     if (update.updateAvailable && update.latest) {
       console.log(`
@@ -8566,7 +8619,7 @@ function generateCompactHelp() {
     "  -h, --help                      display help for command",
     "",
     "Reads: symbol, read, brief, section, semantic, skeleton, outline, refs, scope,",
-    "  similar, context-for, call-chain, impact, callers, dead, test-for",
+    "  similar, context-for, call-chain, impact, callers, dead, test-for, locate",
     "",
     "Analysis: arch, affected, blame, deps, types, coverage-gaps, changed, diff, log,",
     "  exports, imports, find, grep",
@@ -8579,19 +8632,18 @@ function generateCompactHelp() {
     "",
     "Index & Search: index, map, reconcile, doctor, commands, ask, answer, pack, tokens,",
     "  budget, failures, todo, trace, logfold, lockdeps, dep-docs, recent, hot,",
-    "  snapshot-snapshot, baseline, cost, coverage-report-gaps, clean-cache,",
+    "  baseline, cost, coverage-report-gaps, clean-cache,",
     "  cache-audit, reclaim-index, project",
     "",
     "Session: stats, waste, session-outline, session-audit, session-slice,",
     "  session-summary, context-stats, bootstrap-audit, memory, hint-stats,",
-    "  session-schema, mcp-audit",
+    "  session-schema, mcp-audit, audit",
     "",
     "Skills: skill-body, skill-compact, skill-list, skill-size, skill-history,",
     "  skill-diff, skill-section",
     "",
     "Compression: compress-text, retrieve, handoff-create, handoff-resolve,",
-    "  compress, recall, bash-output, web-output, mcp-output, compress-text,",
-    "  compress, bench",
+    "  compress, recall, bash-output, web-output, mcp-output, bench",
     "",
     "Config & Integration: install, uninstall, upgrade, mcp-serve, mcp-status, hook,",
     "  bridges-status, worker, statusline, version, config, config-get,",
@@ -8600,9 +8652,9 @@ function generateCompactHelp() {
     "Data: note, note-add, note-get, note-list, describe, sqlite-query,",
     "  sqlite-tables, sqlite-schema, csv-profile, csv-query",
     "",
-    "Utils: ignores, bash-history, web-history, openapi-op, openapi-outline,",
-    "  gdrive-sections, screenshot, opencode-*, fetch-image, image-meta,",
-    "  image-text, start, stop, resume, replace, insert-section, pr-slice,",
+    "Utils: ignores, bash-history, web-history, history, openapi-op, openapi-outline,",
+    "  gdrive-sections, screenshot, fetch-image, image-meta,",
+    "  image-text, resume, replace, insert-section, pr-slice,",
     "  sharepoint-resolve, transcript, transcript-outline, video-chapters,",
     "  write-file, zip-list, zip-read, mcp-history, compact-doc, compact-hint,",
     "  conflicts, prune-cache",
@@ -8904,12 +8956,9 @@ function performHttpFetch(targetUrl, opts) {
   });
 }
 
-// src/config_commands.ts
-function saveConfigSafe(cfg) {
-  ensureDirSync(path18.dirname(configPath()));
-  saveConfig(cfg);
-}
-function levenshtein(a, b, cap = 3) {
+// src/util_suggest.ts
+init_define_import_meta_env();
+function levenshteinDistance(a, b, cap = 3) {
   if (Math.abs(a.length - b.length) > cap) return cap + 1;
   const prev = Array.from({ length: b.length + 1 }, (_, i) => i);
   for (let i = 1; i <= a.length; i++) {
@@ -8922,8 +8971,17 @@ function levenshtein(a, b, cap = 3) {
   }
   return prev[b.length] ?? cap + 1;
 }
+function suggestPackageNames(query, names) {
+  return [...new Set(names)].map((n) => ({ n, d: levenshteinDistance(query.toLowerCase(), n.toLowerCase()) })).filter((x) => x.d <= 3).sort((a, b) => a.d - b.d).slice(0, 5).map((x) => x.n);
+}
+
+// src/config_commands.ts
+function saveConfigSafe(cfg) {
+  ensureDirSync(path18.dirname(configPath()));
+  saveConfig(cfg);
+}
 function closestKeys(unknown, known) {
-  return known.map((k) => ({ k, d: levenshtein(unknown, k) })).filter((x) => x.d <= 3).sort((a, b) => a.d - b.d).slice(0, 3).map((x) => x.k);
+  return known.map((k) => ({ k, d: levenshteinDistance(unknown, k) })).filter((x) => x.d <= 3).sort((a, b) => a.d - b.d).slice(0, 3).map((x) => x.k);
 }
 function didYouMeanKeySuffix(unknownKey) {
   const knownKeys = flattenConfig(defaultConfig()).map(([k]) => k);
@@ -14012,13 +14070,13 @@ function registerFormatCommands(program2, guard) {
     []
   ).option("--head <n>", "limit to the first N matching rows").option("--json", "emit rows as a JSON array of objects instead of CSV").option("--delimiter <char>", "field delimiter (default: ,)").option("--no-header", "treat the first row as data, not a header (columns become col1, col2, ...)").action(guard(cmdCsvQuery));
   program2.command("csv-profile <file>").description("per-column type/null/distinct/range summary of a CSV instead of a raw Read").option("--delimiter <char>", "field delimiter (default: ,)").option("--no-header", "treat the first row as data, not a header (columns become col1, col2, ...)").action(guard(cmdCsvProfile));
-  program2.command("json-outline <file>").description("structural summary of a JSON document (array shape / object key types) instead of a raw Read").option("--json", "emit the outline as JSON instead of text").action(guard(cmdJsonOutline));
+  program2.command("json-outline <file>").description("structural summary of a JSON document (array shape / object key types) instead of a raw Read").option("--json", "emit the outline as JSON instead of text").option("--filter <text>", "list only the top-level keys containing TEXT (case-insensitive), with a count of how many matched").action(guard(cmdJsonOutline));
   program2.command("json-query <file> <path>").description(
-    "extract one value or a projected/filtered subset from a JSON document by dot-path instead of a raw Read\n\npath grammar: dot-separated keys with optional bracket segments -- [n] index, [*] wildcard (projects every element/value), [field=value] filter (keeps array elements whose field stringifies to value). Examples: data.items[3].name, items[*].id, items[status=active]"
+    'extract one value or a projected/filtered subset from a JSON document by dot-path instead of a raw Read\n\npath grammar: dot-separated keys with optional bracket segments -- [n] index, [*] wildcard (projects every element/value), [field=value] filter (keeps array elements whose field stringifies to value), ["key"] for a key holding a dot or space. Examples: data.items[3].name, items[*].id, items[status=active], ["a.b"].c'
   ).option("--head <n>", "limit a projected/filtered result to the first N items").option("--json", "emit the result as JSON instead of text").action(guard(cmdJsonQuery));
-  program2.command("yaml-outline <file>").description("structural summary of a YAML document (array shape / object key types) instead of a raw Read -- multi-document streams (---separated) outline as an array of documents").option("--json", "emit the outline as JSON instead of text").action(guard(cmdYamlOutline));
+  program2.command("yaml-outline <file>").description("structural summary of a YAML document (array shape / object key types) instead of a raw Read -- multi-document streams (---separated) outline as an array of documents").option("--json", "emit the outline as JSON instead of text").option("--filter <text>", "list only the top-level keys containing TEXT (case-insensitive), with a count of how many matched").action(guard(cmdYamlOutline));
   program2.command("yaml-query <file> <path>").description(
-    "extract one value or a projected/filtered subset from a YAML document by dot-path instead of a raw Read (same grammar as json-query)\n\npath grammar: dot-separated keys with optional bracket segments -- [n] index, [*] wildcard (projects every element/value), [field=value] filter (keeps array elements whose field stringifies to value). Examples: spec.containers[0].image, items[*].name, items[kind=Service]"
+    'extract one value or a projected/filtered subset from a YAML document by dot-path instead of a raw Read (same grammar as json-query)\n\npath grammar: dot-separated keys with optional bracket segments -- [n] index, [*] wildcard (projects every element/value), [field=value] filter (keeps array elements whose field stringifies to value), ["key"] for a key holding a dot or space. Examples: spec.containers[0].image, items[*].name, items[kind=Service]'
   ).option("--head <n>", "limit a projected/filtered result to the first N items").option("--json", "emit the result as JSON instead of text").action(guard(cmdYamlQuery));
   program2.command("xml-outline <file>").description("structural summary of an XML document (element hierarchy / attribute names / child counts) instead of a raw Read").option("--json", "emit the outline as JSON instead of text").option("--max-depth <n>", "max depth of element hierarchy to show").option("--depth <n>", "alias for --max-depth").action(guard(cmdXmlOutline));
   program2.command("xml-query <file> [path]").description(
@@ -14383,153 +14441,13 @@ function runAffected(opts) {
 
 // src/text_commands.ts
 init_define_import_meta_env();
-import * as fs32 from "fs";
-import * as path29 from "path";
-
-// src/project_memory.ts
-init_define_import_meta_env();
-import * as fs28 from "node:fs";
-import * as path26 from "node:path";
-var MAX_ENTRIES = 30;
-var KEY_RE2 = /^[A-Za-z0-9_-]{1,80}$/;
-function ordinal(a, b) {
-  return a < b ? -1 : a > b ? 1 : 0;
-}
-function memoryPath(projectHash) {
-  return path26.join(dataDir(), "projects", `${projectHash}_memory.toml`);
-}
-function validateKey2(key) {
-  if (!KEY_RE2.test(key)) {
-    throw new Error(
-      `Invalid memory key ${JSON.stringify(key)}: use only letters, digits, hyphens, underscores (max 80 chars)`
-    );
-  }
-}
-function parseTOML(content) {
-  const result = {};
-  for (const line of content.split("\n")) {
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) {
-      continue;
-    }
-    const match2 = trimmed.match(/^([A-Za-z0-9_-]+)\s*=\s*"(.*)"\s*$/);
-    if (match2) {
-      const [, key, value] = match2;
-      if (key && value !== void 0) {
-        const unescaped = value.replace(/\\([\\nrt"])/g, (_, c) => {
-          switch (c) {
-            case "\\":
-              return "\\";
-            case "n":
-              return "\n";
-            case "r":
-              return "\r";
-            case '"':
-              return '"';
-            default:
-              return _;
-          }
-        });
-        result[key] = unescaped;
-      }
-    }
-  }
-  return result;
-}
-function loadRaw(filePath) {
-  try {
-    if (!fs28.existsSync(filePath)) {
-      return {};
-    }
-    const content = fs28.readFileSync(filePath, "utf-8");
-    return parseTOML(content);
-  } catch {
-    return {};
-  }
-}
-function save(filePath, entries) {
-  const lines = [];
-  const sorted = Object.entries(entries).sort(([a], [b]) => ordinal(a, b));
-  for (const [k, v] of sorted) {
-    const escaped = v.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\r/g, "\\r").replace(/\n/g, "\\n");
-    lines.push(`${k} = "${escaped}"`);
-  }
-  const content = lines.length > 0 ? lines.join("\n") + "\n" : "";
-  const dir = path26.dirname(filePath);
-  ensureDirSync(dir);
-  atomicWriteText(filePath, content);
-}
-function loadEntries(projectHash) {
-  return loadRaw(memoryPath(projectHash));
-}
-function setEntry(projectHash, key, value) {
-  validateKey2(key);
-  const p = memoryPath(projectHash);
-  const dir = path26.dirname(p);
-  ensureDirSync(dir);
-  const doSet = () => {
-    const entries = loadRaw(p);
-    const isNewKey = !(key in entries);
-    if (isNewKey && Object.keys(entries).length >= MAX_ENTRIES) {
-      const keysToKeep = MAX_ENTRIES - 1;
-      const allKeys = Object.keys(entries).sort((a, b) => ordinal(a, b));
-      for (const k of allKeys.slice(keysToKeep)) {
-        delete entries[k];
-      }
-    }
-    entries[key] = value;
-    save(p, entries);
-    return true;
-  };
-  if (withFileLock(`${p}.lock`, doSet) === void 0) doSet();
-}
-function unsetEntry(projectHash, key) {
-  validateKey2(key);
-  const p = memoryPath(projectHash);
-  const doUnset = () => {
-    const entries = loadRaw(p);
-    if (key in entries) {
-      delete entries[key];
-      save(p, entries);
-    }
-    return true;
-  };
-  if (withFileLock(`${p}.lock`, doUnset) === void 0) doUnset();
-}
-function clearAll(projectHash) {
-  const p = memoryPath(projectHash);
-  const doClear = () => {
-    if (fs28.existsSync(p)) {
-      save(p, {});
-    }
-    return true;
-  };
-  if (withFileLock(`${p}.lock`, doClear) === void 0) doClear();
-}
-
-// src/util_suggest.ts
-init_define_import_meta_env();
-function packageNameDistance(a, b, cap = 3) {
-  if (Math.abs(a.length - b.length) > cap) return cap + 1;
-  const prev = Array.from({ length: b.length + 1 }, (_, i) => i);
-  for (let i = 1; i <= a.length; i++) {
-    const curr = [i];
-    for (let j = 1; j <= b.length; j++) {
-      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
-      curr.push(Math.min((curr[j - 1] ?? 0) + 1, (prev[j] ?? 0) + 1, (prev[j - 1] ?? 0) + cost));
-    }
-    prev.splice(0, prev.length, ...curr);
-  }
-  return prev[b.length] ?? cap + 1;
-}
-function suggestPackageNames(query, names) {
-  return [...new Set(names)].map((n) => ({ n, d: packageNameDistance(query.toLowerCase(), n.toLowerCase()) })).filter((x) => x.d <= 3).sort((a, b) => a.d - b.d).slice(0, 5).map((x) => x.n);
-}
+import * as fs31 from "fs";
+import * as path28 from "path";
 
 // src/text_todo.ts
 init_define_import_meta_env();
-import * as fs29 from "fs";
-import * as path27 from "path";
+import * as fs28 from "fs";
+import * as path26 from "path";
 var DEFAULT_KINDS = ["TODO", "FIXME", "HACK", "XXX", "NOTE"];
 function splitLines(text) {
   return text.split(/\r?\n/);
@@ -14558,7 +14476,7 @@ function isMarkerOccurrence(matched, hasColon) {
 function scanFileForTodos(filePath, kindSet) {
   let text;
   try {
-    text = decodeSource(fs29.readFileSync(filePath));
+    text = decodeSource(fs28.readFileSync(filePath));
   } catch {
     return [];
   }
@@ -14586,9 +14504,9 @@ function collectTodoFiles(patterns) {
   if (patterns.length > 0) {
     const results = [];
     for (const p of patterns) {
-      const abs = path27.resolve(p);
+      const abs = path26.resolve(p);
       try {
-        const stat = fs29.statSync(abs);
+        const stat = fs28.statSync(abs);
         if (stat.isDirectory()) {
           pushAll(results, walkProject(abs).files);
         } else {
@@ -14653,11 +14571,11 @@ function cmdTodo(patterns, opts) {
 
 // src/text_trace.ts
 init_define_import_meta_env();
-import * as fs30 from "fs";
-import * as path28 from "path";
+import * as fs29 from "fs";
+import * as path27 from "path";
 function readInput(src) {
-  if (src !== void 0) return fs30.readFileSync(src, "utf8");
-  return fs30.readFileSync(0, "utf8");
+  if (src !== void 0) return fs29.readFileSync(src, "utf8");
+  return fs29.readFileSync(0, "utf8");
 }
 function splitLines2(text) {
   return text.split(/\r?\n/);
@@ -14869,7 +14787,7 @@ function isProjectFrame(framePath, cwd) {
   if (framePath.includes("/rustc/")) return false;
   if (framePath.includes(".cargo/registry") || framePath.includes(".cargo\\registry")) return false;
   if (/^<.+>$/.test(framePath)) return false;
-  if (!path28.isAbsolute(framePath) && !framePath.startsWith("..")) return true;
+  if (!path27.isAbsolute(framePath) && !framePath.startsWith("..")) return true;
   return false;
 }
 function resolveFrameSymbol(frame, projectRoot) {
@@ -14977,7 +14895,7 @@ function cmdTrace(src, opts) {
 
 // src/text_logfold.ts
 init_define_import_meta_env();
-import * as fs31 from "fs";
+import * as fs30 from "fs";
 
 // src/filters.ts
 init_define_import_meta_env();
@@ -15107,8 +15025,8 @@ function applyFiltersAndFold(lines, noNormalize, foldRepeats) {
   return folded;
 }
 function readInput2(src) {
-  if (src !== void 0) return fs31.readFileSync(src, "utf8");
-  return fs31.readFileSync(0, "utf8");
+  if (src !== void 0) return fs30.readFileSync(src, "utf8");
+  return fs30.readFileSync(0, "utf8");
 }
 function splitLines3(text) {
   return text.split(/\r?\n/);
@@ -15159,21 +15077,21 @@ var LOCK_PRIORITY = [
   "Cargo.lock"
 ];
 function findLockfile(startPath) {
-  const stat = fs32.statSync(startPath, { throwIfNoEntry: false });
+  const stat = fs31.statSync(startPath, { throwIfNoEntry: false });
   if (stat !== void 0 && stat.isFile()) {
     return { file: startPath, others: [] };
   }
-  const dir = stat !== void 0 && stat.isDirectory() ? startPath : path29.dirname(startPath);
+  const dir = stat !== void 0 && stat.isDirectory() ? startPath : path28.dirname(startPath);
   const found = [];
   for (const name of LOCK_PRIORITY) {
-    const candidate = path29.join(dir, name);
-    if (fs32.existsSync(candidate)) found.push(candidate);
+    const candidate = path28.join(dir, name);
+    if (fs31.existsSync(candidate)) found.push(candidate);
   }
   try {
-    const entries = fs32.readdirSync(dir);
+    const entries = fs31.readdirSync(dir);
     for (const e of entries) {
       if (/^requirements.*\.txt$/.test(e)) {
-        const p = path29.join(dir, e);
+        const p = path28.join(dir, e);
         if (!found.includes(p)) found.push(p);
       }
     }
@@ -15370,8 +15288,8 @@ function parsePnpmLock(content) {
   return deps;
 }
 function parseLockFile(filePath) {
-  const base = path29.basename(filePath);
-  const content = fs32.readFileSync(filePath, "utf8");
+  const base = path28.basename(filePath);
+  const content = fs31.readFileSync(filePath, "utf8");
   if (base === "package-lock.json") return { format: "npm", deps: parsePackageLockJson(content) };
   if (base === "yarn.lock") return { format: "yarn", deps: parseYarnLock(content) };
   if (base === "pnpm-lock.yaml") return { format: "pnpm", deps: parsePnpmLock(content) };
@@ -15444,7 +15362,7 @@ function cmdLockdepsPackage(lockfile, format, deps, query, json) {
   }
   const primary = matches2.find((d) => d.kind === "direct") ?? matches2[0];
   const otherVersions = [...new Set(matches2.filter((d) => d.version !== primary.version).map((d) => d.version))];
-  const graph = format === "npm" ? buildNpmEdges(fs32.readFileSync(lockfile, "utf8")) : null;
+  const graph = format === "npm" ? buildNpmEdges(fs31.readFileSync(lockfile, "utf8")) : null;
   const graphAvailable = graph !== null;
   const dependsOn = graph !== null ? [...graph.edges.get(query) ?? []].sort() : [];
   const dependedOnBy = graph !== null ? findReverseDirectDeps(query, graph.edges, graph.directNames) : [];
@@ -15484,7 +15402,7 @@ Depended on by direct/top-level deps (${dependedOnBy.length}):
 `);
 }
 function cmdLockdeps(filePath, opts) {
-  const target = filePath !== void 0 ? path29.resolve(filePath) : process.cwd();
+  const target = filePath !== void 0 ? path28.resolve(filePath) : process.cwd();
   const found = findLockfile(target);
   if (found === null) {
     throw new Error("No lockfile found. Expected one of: " + LOCK_PRIORITY.join(", ") + ", requirements*.txt");
@@ -15572,20 +15490,20 @@ function cmdNote(action, key, value, opts) {
   throw new Error(`Unknown note action: ${action}. Use: set, get, unset, list, clear`);
 }
 function loadAllSessionReadCounts() {
-  const sessionsDir2 = path29.join(tokenGoatHome(), "sessions");
+  const sessionsDir2 = path28.join(tokenGoatHome(), "sessions");
   const totals = /* @__PURE__ */ new Map();
   let entries;
   try {
-    entries = fs32.readdirSync(sessionsDir2, { withFileTypes: true });
+    entries = fs31.readdirSync(sessionsDir2, { withFileTypes: true });
   } catch {
     return totals;
   }
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-    const filePath = path29.join(sessionsDir2, entry.name);
+    const filePath = path28.join(sessionsDir2, entry.name);
     let raw;
     try {
-      raw = JSON.parse(fs32.readFileSync(filePath, "utf8"));
+      raw = JSON.parse(fs31.readFileSync(filePath, "utf8"));
     } catch {
       continue;
     }
@@ -15718,7 +15636,7 @@ function cmdIgnores(opts) {
 }
 function countPackIgnorePatterns(root) {
   try {
-    return fs32.readFileSync(path29.join(root, ".tokengoatignore"), "utf8").split("\n").map((ln) => ln.trim()).filter((ln) => ln.length > 0 && !ln.startsWith("#")).length;
+    return fs31.readFileSync(path28.join(root, ".tokengoatignore"), "utf8").split("\n").map((ln) => ln.trim()).filter((ln) => ln.length > 0 && !ln.startsWith("#")).length;
   } catch {
     return 0;
   }
@@ -15727,8 +15645,8 @@ function countPackIgnorePatterns(root) {
 // src/dep_docs.ts
 init_define_import_meta_env();
 import { createRequire } from "node:module";
-import * as fs33 from "node:fs";
-import * as path30 from "node:path";
+import * as fs32 from "node:fs";
+import * as path29 from "node:path";
 var _require = createRequire(import.meta.url);
 var _ts = null;
 var _tsLoadAttempted = false;
@@ -15747,21 +15665,21 @@ function loadTs() {
 }
 function dirExists(p) {
   try {
-    return fs33.statSync(p).isDirectory();
+    return fs32.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function fileExists(p) {
   try {
-    return fs33.statSync(p).isFile();
+    return fs32.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function readFileTextOrNull(p) {
   try {
-    return fs33.readFileSync(p, "utf8");
+    return fs32.readFileSync(p, "utf8");
   } catch {
     return null;
   }
@@ -15769,7 +15687,7 @@ function readFileTextOrNull(p) {
 function listInstalledPackageNames(nodeModulesDir) {
   let entries;
   try {
-    entries = fs33.readdirSync(nodeModulesDir, { withFileTypes: true });
+    entries = fs32.readdirSync(nodeModulesDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -15779,7 +15697,7 @@ function listInstalledPackageNames(nodeModulesDir) {
     if (entry.name.startsWith("@")) {
       let scoped;
       try {
-        scoped = fs33.readdirSync(path30.join(nodeModulesDir, entry.name), { withFileTypes: true });
+        scoped = fs32.readdirSync(path29.join(nodeModulesDir, entry.name), { withFileTypes: true });
       } catch {
         continue;
       }
@@ -15796,12 +15714,12 @@ var README_NAME_RE = /^readme(\.(md|markdown|txt))?$/i;
 function findReadmeFile(pkgDir) {
   const direct = findReadmeIn(pkgDir);
   if (direct !== null) return direct;
-  return findReadmeIn(path30.join(pkgDir, "docs"));
+  return findReadmeIn(path29.join(pkgDir, "docs"));
 }
 function findReadmeIn(dir) {
   let entries;
   try {
-    entries = fs33.readdirSync(dir, { withFileTypes: true });
+    entries = fs32.readdirSync(dir, { withFileTypes: true });
   } catch {
     return null;
   }
@@ -15813,7 +15731,7 @@ function findReadmeIn(dir) {
     return 1;
   };
   matches2.sort((a, b) => rank(a.name) - rank(b.name));
-  return path30.join(dir, matches2[0].name);
+  return path29.join(dir, matches2[0].name);
 }
 function typesPackageDirName(pkgName) {
   if (pkgName.startsWith("@")) {
@@ -15840,30 +15758,30 @@ function resolveTypesLocation(pkgDir, pkgJson, nodeModulesDir, pkgName) {
   if (declared !== void 0) {
     const candidates = [declared, declared.endsWith(".d.ts") ? declared : `${declared}.d.ts`, declared.replace(/\.[cm]?[jt]s$/, ".d.ts")];
     for (const c of candidates) {
-      const p = path30.join(pkgDir, c);
+      const p = path29.join(pkgDir, c);
       if (fileExists(p)) return { path: p, source: "bundled" };
     }
   }
   const main = typeof pkgJson["main"] === "string" ? pkgJson["main"] : "index.js";
-  const mainDts = path30.join(pkgDir, main.replace(/\.[cm]?js$/, ".d.ts"));
+  const mainDts = path29.join(pkgDir, main.replace(/\.[cm]?js$/, ".d.ts"));
   if (fileExists(mainDts)) return { path: mainDts, source: "bundled" };
-  const indexDts = path30.join(pkgDir, "index.d.ts");
+  const indexDts = path29.join(pkgDir, "index.d.ts");
   if (fileExists(indexDts)) return { path: indexDts, source: "bundled" };
   const typesDirName = typesPackageDirName(pkgName);
-  const typesPkgDir = path30.join(nodeModulesDir, "@types", typesDirName);
-  const typesPkgJsonRaw = readFileTextOrNull(path30.join(typesPkgDir, "package.json"));
+  const typesPkgDir = path29.join(nodeModulesDir, "@types", typesDirName);
+  const typesPkgJsonRaw = readFileTextOrNull(path29.join(typesPkgDir, "package.json"));
   if (typesPkgJsonRaw !== null) {
     try {
       const typesPkgJson = JSON.parse(typesPkgJsonRaw);
       const entry = (typeof typesPkgJson["types"] === "string" ? typesPkgJson["types"] : void 0) ?? (typeof typesPkgJson["main"] === "string" ? typesPkgJson["main"] : void 0) ?? "index.d.ts";
       const entryCandidates = [entry, entry.endsWith(".d.ts") ? entry : `${entry}.d.ts`, entry.replace(/\.[cm]?[jt]s$/, ".d.ts")];
       for (const c of entryCandidates) {
-        const entryPath = path30.join(typesPkgDir, c);
+        const entryPath = path29.join(typesPkgDir, c);
         if (fileExists(entryPath)) return { path: entryPath, source: "@types" };
       }
     } catch {
     }
-    const fallback = path30.join(typesPkgDir, "index.d.ts");
+    const fallback = path29.join(typesPkgDir, "index.d.ts");
     if (fileExists(fallback)) return { path: fallback, source: "@types" };
   }
   return null;
@@ -15930,16 +15848,16 @@ function recordDepDocsStat(fullSourceBytes, emittedText, packageName) {
 }
 function runDepDocs(opts) {
   const root = resolveProjectRoot({ project: opts.projectRoot ?? process.cwd() });
-  const nodeModulesDir = path30.join(root, "node_modules");
-  const pkgDir = path30.join(nodeModulesDir, opts.packageName);
-  const pkgJsonPath = path30.join(pkgDir, "package.json");
+  const nodeModulesDir = path29.join(root, "node_modules");
+  const pkgDir = path29.join(nodeModulesDir, opts.packageName);
+  const pkgJsonPath = path29.join(pkgDir, "package.json");
   if (!dirExists(pkgDir) || !fileExists(pkgJsonPath)) {
     const known = listInstalledPackageNames(nodeModulesDir);
     const suggestions = suggestPackageNames(opts.packageName, known);
     const hint = suggestions.length > 0 ? ` (did you mean: ${suggestions.map(displaySafeText).join(", ")}?)` : "";
     return { text: `Package '${displaySafeText(opts.packageName)}' not found under ${displaySafeText(nodeModulesDir)}${hint}`, code: 1 };
   }
-  const pkgJsonRaw = fs33.readFileSync(pkgJsonPath, "utf8");
+  const pkgJsonRaw = fs32.readFileSync(pkgJsonPath, "utf8");
   let pkgJson;
   try {
     pkgJson = JSON.parse(pkgJsonRaw);
@@ -16352,13 +16270,13 @@ function renderCapabilities(caps) {
 
 // src/cli_session.ts
 init_define_import_meta_env();
-import * as fs40 from "node:fs";
+import * as fs39 from "node:fs";
 
 // src/session_audit.ts
 init_define_import_meta_env();
-import * as fs34 from "node:fs";
+import * as fs33 from "node:fs";
 import * as os16 from "node:os";
-import * as path31 from "node:path";
+import * as path30 from "node:path";
 import * as readline from "node:readline";
 var MODEL_VISIBLE_CATEGORIES = ["toolResults", "assistantText", "assistantThinking", "toolUseInputs", "attachments", "userTurns", "harnessMeta", "system"];
 function computeCalibration(estimated, measured) {
@@ -16419,10 +16337,13 @@ var ATTACHMENT_VISIBLE_FIELDS = {
 };
 var CACHE_WRITE_MULTIPLIER = 1.25;
 var CACHE_READ_MULTIPLIER = 0.1;
-var READ_DIVERT_MARKER_RE = /(?:was already read this session|Already read |You've already read|Use `token-goat (?:section|read|bash-output|config-get|skeleton)|token-goat bash-output --file)/;
+var READ_DIVERT_MARKER_RE = /(?:was already read this session|Already read |You've already read|(?:Use|Run) `token-goat (?:section|read|bash-output|config-get|skeleton|json-query|yaml-query)|token-goat bash-output --file)/;
 var READ_DIVERT_MAX_BYTES = 2500;
 var READ_FULL_SERVE_MIN_BYTES = 10240;
 var DENY_TEMPLATES = [
+  // hint_target.ts's sharpenRepeatedDeny replaces a verbatim repeat of any deny with this one line, so the kind the first copy had is not recoverable from the second.
+  { kind: "repeat_refusal_deny", re: /Repeat refusal of this exact call/, tool: "Read" },
+  { kind: "skill_repeat_refusal_deny", re: /Repeat refusal of this exact call/, tool: "Skill" },
   { kind: "node_modules_deny", re: /node_modules is typically noise/, tool: "Read" },
   { kind: "lock_file_deny", re: /Lock files are rarely useful to read in full/, tool: "Read" },
   { kind: "tsbuildinfo_deny", re: /TypeScript incremental build cache file/, tool: "Read" },
@@ -16432,13 +16353,7 @@ var DENY_TEMPLATES = [
   // Must stay ABOVE markdown_heading_tree_deny: this deny's message embeds the same "Large markdown file (N headings)" guidance block, so the generic alternative would swallow it and the new intervention would be uncountable. DENY_TEMPLATES is scanned with `.find`, so the more specific wording has to come first.
   { kind: "subagent_markdown_first_read_deny", re: /Subagent first read of a large markdown file/, tool: "Read" },
   { kind: "markdown_heading_tree_deny", re: /Large markdown file \(\d+ headings\)/, tool: "Read" },
-  // The first alternative is a wording hooks_read.ts no longer emits (it claimed a compact-manifest
-  // section that never existed, reworded in 3d044feb). It stays because this table classifies a
-  // historical corpus, not just today's output: transcripts written before the rewording still
-  // carry the old text, and dropping the alternative silently shrank this kind from 51 events to
-  // 30 -- 41% of its history -- with a green suite. A superseded alternative is only removable
-  // once no transcript contains it, which source code cannot tell you. See the superseded-wording
-  // test in tests/deny_outcomes.test.ts.
+  // The first alternative is a wording hooks_read.ts no longer emits (it claimed a compact-manifest section that never existed, reworded in 3d044feb). It stays because this table classifies a historical corpus, not just today's output: transcripts written before the rewording still carry the old text, and dropping the alternative silently shrank this kind from 51 events to 30 -- 41% of its history -- with a green suite. A superseded alternative is only removable once no transcript contains it, which source code cannot tell you. See the superseded-wording test in tests/deny_outcomes.test.ts.
   { kind: "memory_md_reread_deny", re: /MEMORY\.md was read this session\. Its content is in the compact manifest|already read this session\. Memory files rarely change mid-session/, tool: "Read" },
   { kind: "improve_state_reread_deny", re: /Orchestrator state already read this session/, tool: "Read" },
   { kind: "env_reread_deny", re: /Environment files rarely change mid-session/, tool: "Read" },
@@ -16448,12 +16363,12 @@ var DENY_TEMPLATES = [
   { kind: "session_artifact_large_deny", re: /(?:Session transcript|Tool-result file) is large \(/, tool: "Read" },
   { kind: "session_artifact_generic_reread_deny", re: /already read this session\. Use `token-goat bash-output --file/, tool: "Read" },
   { kind: "truncated_read_deny", re: /File was truncated on last read \(>33K tokens\)/, tool: "Read" },
-  { kind: "doc_unchanged_deny", re: /is unchanged since last read\. Use `token-goat (?:section|read)/, tool: "Read" },
-  { kind: "doc_diff_deny", re: /Content changed since last read of [\s\S]*?Use `token-goat (?:section|read)/, tool: "Read" },
+  { kind: "doc_unchanged_deny", re: /is unchanged since last read\. (?:Use|Run) `token-goat (?:section|read|skeleton|json-query|yaml-query)/, tool: "Read" },
+  { kind: "doc_diff_deny", re: /Content changed since last read of [\s\S]*?(?:Use|Run) `token-goat (?:section|read|skeleton|json-query|yaml-query)/, tool: "Read" },
   { kind: "read_served_deny", re: /was already served in this session, byte for byte/, tool: "Read" },
   // Its own kind rather than folded into read_served_deny above, whose stat name this branch shares: the wording is disjoint (a span, not a byte-for-byte whole serve) and so is the follow-up it invites, since the model still needs part of that span and has to choose a narrower call rather than recall the whole result.
   { kind: "range_reread_deny", re: /Lines \d+\.\.\d+ of [\s\S]*?was already read this session/, tool: "Read" },
-  { kind: "markdown_already_read_deny", re: /Markdown file already read this session\. Use `token-goat section/, tool: "Read" },
+  { kind: "markdown_already_read_deny", re: /Markdown file already read this session\./, tool: "Read" },
   { kind: "read_count_deny", re: /(?:Read|Tried to read) this file \d+ times already/, tool: "Read" },
   // Shares read_count_deny's stat name and matches none of its wording: this branch fires on the SHAPE of the reads (consecutive line windows walking one file) rather than on their count, and says so.
   { kind: "sequential_paging_deny", re: /Sequential line-range paging detected on /, tool: "Read" },
@@ -16543,9 +16458,9 @@ function toolResultText(content) {
   return "";
 }
 function listCorpusTranscripts(corpusDir) {
-  if (!fs34.existsSync(corpusDir)) return [];
+  if (!fs33.existsSync(corpusDir)) return [];
   try {
-    const stat = fs34.statSync(corpusDir);
+    const stat = fs33.statSync(corpusDir);
     if (stat.isFile()) {
       return corpusDir.endsWith(".jsonl") ? [corpusDir] : [];
     }
@@ -16555,13 +16470,13 @@ function listCorpusTranscripts(corpusDir) {
   const found = [];
   const walk = (dir, entries) => {
     for (const entry of entries) {
-      const full = path31.join(dir, entry.name);
+      const full = path30.join(dir, entry.name);
       if (entry.name.endsWith(".jsonl")) {
         found.push(full);
       } else if (entry.isDirectory()) {
         let inner;
         try {
-          inner = fs34.readdirSync(full, { withFileTypes: true });
+          inner = fs33.readdirSync(full, { withFileTypes: true });
         } catch {
           continue;
         }
@@ -16570,31 +16485,41 @@ function listCorpusTranscripts(corpusDir) {
     }
   };
   try {
-    walk(corpusDir, fs34.readdirSync(corpusDir, { withFileTypes: true }));
+    walk(corpusDir, fs33.readdirSync(corpusDir, { withFileTypes: true }));
   } catch {
   }
   return found.sort();
 }
+var MS_PER_DAY = 24 * 60 * 60 * 1e3;
+function modifiedSince(files, sinceMs) {
+  return files.filter((file) => {
+    try {
+      return fs33.statSync(file).mtimeMs >= sinceMs;
+    } catch {
+      return false;
+    }
+  });
+}
 function defaultCorpusDir() {
-  const claudeDir = path31.join(claudeConfigDir(), "projects");
-  if (fs34.existsSync(claudeDir) && listCorpusTranscripts(claudeDir).length > 0) {
+  const claudeDir = path30.join(claudeConfigDir(), "projects");
+  if (fs33.existsSync(claudeDir) && listCorpusTranscripts(claudeDir).length > 0) {
     return claudeDir;
   }
   const home = os16.homedir();
-  const appData = process.env["APPDATA"] || path31.join(home, "AppData", "Roaming");
+  const appData = process.env["APPDATA"] || path30.join(home, "AppData", "Roaming");
   const candidates = [
     claudeDir,
-    path31.join(appData, "Code", "User", "workspaceStorage"),
-    path31.join(appData, "Code - Insiders", "User", "workspaceStorage"),
-    path31.join(home, "Library", "Application Support", "Code", "User", "workspaceStorage"),
-    path31.join(home, "Library", "Application Support", "Code - Insiders", "User", "workspaceStorage"),
-    path31.join(home, ".config", "Code", "User", "workspaceStorage"),
-    path31.join(home, ".config", "Code - Insiders", "User", "workspaceStorage"),
-    path31.join(home, ".copilot", "session-state")
+    path30.join(appData, "Code", "User", "workspaceStorage"),
+    path30.join(appData, "Code - Insiders", "User", "workspaceStorage"),
+    path30.join(home, "Library", "Application Support", "Code", "User", "workspaceStorage"),
+    path30.join(home, "Library", "Application Support", "Code - Insiders", "User", "workspaceStorage"),
+    path30.join(home, ".config", "Code", "User", "workspaceStorage"),
+    path30.join(home, ".config", "Code - Insiders", "User", "workspaceStorage"),
+    path30.join(home, ".copilot", "session-state")
   ];
   for (const cand of candidates) {
     try {
-      if (fs34.existsSync(cand) && listCorpusTranscripts(cand).length > 0) {
+      if (fs33.existsSync(cand) && listCorpusTranscripts(cand).length > 0) {
         return cand;
       }
     } catch {
@@ -16602,11 +16527,13 @@ function defaultCorpusDir() {
   }
   return claudeDir;
 }
-async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap, denyRows) {
+async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap, denyRows, toolErrorAcc) {
   const isLane = filePath.split(/[\\/]/).includes("subagents");
   let laneFirstPrefix = null;
   let laneBriefBytes = -1;
   const toolNameById = /* @__PURE__ */ new Map();
+  const modelById = /* @__PURE__ */ new Map();
+  const bashCommandById = /* @__PURE__ */ new Map();
   const bashHeadById = /* @__PURE__ */ new Map();
   let pendingBashReread = [];
   const readCallById = /* @__PURE__ */ new Map();
@@ -16645,7 +16572,7 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
     }
     pendingBashReread = keptBash;
   };
-  const stream = fs34.createReadStream(filePath);
+  const stream = fs33.createReadStream(filePath);
   const rl = readline.createInterface({ input: stream, crlfDelay: Infinity });
   const streamFailure = new Promise((_, reject) => stream.on("error", reject));
   const consume = (async () => {
@@ -16709,11 +16636,15 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
             if (!toolNameById.has(block["id"])) {
               toolNameById.set(block["id"], name);
               toolRollup(toolMap, name).calls += 1;
+              const model = typeof message.model === "string" && message.model !== "" ? message.model : void 0;
+              if (model !== void 0) modelById.set(block["id"], model);
+              toolErrorAcc.countCall(name, model);
               const input = block["input"] !== null && typeof block["input"] === "object" ? block["input"] : {};
               let readNorm;
               let editNorm;
               if (name === "Bash" && typeof input["command"] === "string") {
                 bashHeadById.set(block["id"], commandHead(input["command"]));
+                bashCommandById.set(block["id"], input["command"]);
               } else if (name === "Read" && typeof input["file_path"] === "string") {
                 readNorm = normalizeReadPath(input["file_path"]);
                 const priorEpoch = readPathEpoch.get(readNorm);
@@ -16767,9 +16698,17 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
           const name = toolNameById.get(id) ?? "(unknown)";
           addCategory(s.estimated.toolResults, bytes);
           const roll = toolRollup(toolMap, name);
-          if (!toolNameById.has(id)) roll.calls += 1;
+          if (!toolNameById.has(id)) {
+            roll.calls += 1;
+            toolErrorAcc.countCall(name, void 0);
+          }
           roll.resultBytes += bytes;
           roll.resultEstTokens += estimateTokensFromLength(bytes);
+          if (block["is_error"] === true) {
+            const denialKind = obj["toolDenialKind"];
+            const command = bashCommandById.get(id);
+            toolErrorAcc.countError(name, modelById.get(id), text, { ...typeof denialKind === "string" ? { denialKind } : {}, ...command !== void 0 ? { command } : {} });
+          }
           if (name === "Edit" && block["is_error"] === true) {
             s.editErrorBaseline.totalErrors += 1;
             editErrorById.set(id, true);
@@ -16777,13 +16716,13 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
           if (name === "Read" || name === "Skill") {
             const denyTemplate = DENY_TEMPLATES.find((t) => t.tool === name && t.re.test(text));
             if (denyTemplate !== void 0) {
-              const path42 = readPathById.get(id) ?? "";
-              const lastSlash = path42.lastIndexOf("/");
+              const path41 = readPathById.get(id) ?? "";
+              const lastSlash = path41.lastIndexOf("/");
               openDenies.push({
                 kind: denyTemplate.kind,
                 withheldBytes: parseWithheldBytes(denyTemplate.kind, text),
-                path: path42,
-                basename: lastSlash === -1 ? path42 : path42.slice(lastSlash + 1),
+                path: path41,
+                basename: lastSlash === -1 ? path41 : path41.slice(lastSlash + 1),
                 callIndexAtDeny: perCall.length,
                 compactEpochAtOpen: compactEpoch,
                 compactEpochAtWindow: null,
@@ -16973,7 +16912,7 @@ async function auditOneFile(filePath, s, toolMap, attachmentMap, hookMap, laneOb
   if (isLane) {
     let agentType = "(none)";
     try {
-      const meta = JSON.parse(fs34.readFileSync(filePath.replace(/\.jsonl$/i, ".meta.json"), "utf8"));
+      const meta = JSON.parse(fs33.readFileSync(filePath.replace(/\.jsonl$/i, ".meta.json"), "utf8"));
       if (typeof meta["agentType"] === "string" && meta["agentType"] !== "") agentType = meta["agentType"];
     } catch {
     }
@@ -17054,14 +16993,19 @@ function aggregateDenyOutcomes(rows) {
   return result.sort((a, b) => b.count - a.count || a.kind.localeCompare(b.kind));
 }
 async function auditSessionCorpus(opts = {}) {
-  const corpusDir = path31.resolve(opts.dir ?? defaultCorpusDir());
-  if (!fs34.existsSync(corpusDir)) {
+  const corpusDir = path30.resolve(opts.dir ?? defaultCorpusDir());
+  if (!fs33.existsSync(corpusDir)) {
     throw new Error(`session corpus directory not found: ${corpusDir}`);
   }
-  const files = listCorpusTranscripts(corpusDir);
-  if (files.length === 0) {
+  const windowDays = opts.windowDays ?? 0;
+  const allFiles = listCorpusTranscripts(corpusDir);
+  if (allFiles.length === 0) {
     throw new Error(`no .jsonl session transcripts found under ${corpusDir}`);
   }
+  const files = windowDays === 0 ? allFiles : modifiedSince(allFiles, Date.now() - windowDays * MS_PER_DAY);
+  if (files.length === 0) {
+    throw new Error(`no .jsonl session transcripts under ${corpusDir} were modified in the last ${windowDays} days`);
+  }
   const started = Date.now();
   const summary = {
     corpusDir,
@@ -17096,8 +17040,11 @@ async function auditSessionCorpus(opts = {}) {
     denyOutcomes: [],
     editErrorBaseline: { totalEdits: 0, totalErrors: 0, rate: 0 },
     lineTypes: {},
-    omissionMarkers: { fires: 0, linesOmitted: 0 }
+    omissionMarkers: { fires: 0, linesOmitted: 0 },
+    windowDays,
+    toolErrors: { byTool: [], byModel: [], unknownPrefixes: [] }
   };
+  const toolErrorAcc = (await import("./token-goat-chunk-LEG3JNJ6.mjs")).newToolErrorAccumulator();
   const toolMap = /* @__PURE__ */ new Map();
   const attachmentMap = /* @__PURE__ */ new Map();
   const hookMap = /* @__PURE__ */ new Map();
@@ -17106,7 +17053,7 @@ async function auditSessionCorpus(opts = {}) {
   const denyRows = [];
   for (const file of files) {
     try {
-      await auditOneFile(file, summary, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap, denyRows);
+      await auditOneFile(file, summary, toolMap, attachmentMap, hookMap, laneObservations, bashHeadMap, denyRows, toolErrorAcc);
       summary.filesScanned += 1;
     } catch {
       summary.filesFailed += 1;
@@ -17146,6 +17093,7 @@ async function auditSessionCorpus(opts = {}) {
   summary.denyOutcomes = aggregateDenyOutcomes(denyRows);
   summary.editErrorBaseline.rate = summary.editErrorBaseline.totalEdits === 0 ? 0 : summary.editErrorBaseline.totalErrors / summary.editErrorBaseline.totalEdits;
   summary.calibration = computeCalibration(summary.estimated, summary.measured);
+  summary.toolErrors = toolErrorAcc.finish();
   summary.runtimeMs = Date.now() - started;
   return summary;
 }
@@ -17266,17 +17214,17 @@ function formatSessionAudit(s) {
 
 // src/session_read.ts
 init_define_import_meta_env();
-import * as fs35 from "node:fs";
-import * as path32 from "node:path";
+import * as fs34 from "node:fs";
+import * as path31 from "node:path";
 import * as readline2 from "node:readline";
 function resolveSessionTranscript(arg, opts = {}) {
   if (arg !== void 0 && arg !== "") {
-    if (fs35.existsSync(arg) && fs35.statSync(arg).isFile()) return arg;
+    if (fs34.existsSync(arg) && fs34.statSync(arg).isFile()) return arg;
     const projectRoot2 = resolveProjectRoot(opts.project !== void 0 ? { project: opts.project } : {});
     const dir = projectTranscriptsDir(projectRoot2);
     const byId = arg.endsWith(".jsonl") ? arg : `${arg}.jsonl`;
-    const candidate = path32.join(dir, byId);
-    if (fs35.existsSync(candidate) && fs35.statSync(candidate).isFile()) return candidate;
+    const candidate = path31.join(dir, byId);
+    if (fs34.existsSync(candidate) && fs34.statSync(candidate).isFile()) return candidate;
     return null;
   }
   const projectRoot = resolveProjectRoot(opts.project !== void 0 ? { project: opts.project } : {});
@@ -17334,7 +17282,7 @@ function toolCallsForBlocks(blocks) {
   return blocks.filter((b) => b.type === "tool_use" && b.name !== void 0).map((b) => b.name);
 }
 async function* streamTurns(transcriptPath) {
-  const input = fs35.createReadStream(transcriptPath, { encoding: "utf8" });
+  const input = fs34.createReadStream(transcriptPath, { encoding: "utf8" });
   const rl = readline2.createInterface({ input, crlfDelay: Infinity });
   try {
     let lineNumber = 0;
@@ -17433,9 +17381,9 @@ function formatSessionSlice(turns) {
 
 // src/cli_bootstrap_audit.ts
 init_define_import_meta_env();
-import * as fs36 from "node:fs";
+import * as fs35 from "node:fs";
 import * as os17 from "node:os";
-import * as path33 from "node:path";
+import * as path32 from "node:path";
 import * as readline3 from "node:readline";
 var FRONTMATTER_KEYS = /* @__PURE__ */ new Set(["description", "tools", "allowed-tools", "allowed_tools"]);
 function parseBudget(name, value) {
@@ -17444,7 +17392,7 @@ function parseBudget(name, value) {
   return value;
 }
 async function readFrontmatter(filePath) {
-  const stream = fs36.createReadStream(filePath, { encoding: "utf8" });
+  const stream = fs35.createReadStream(filePath, { encoding: "utf8" });
   const lines = readline3.createInterface({ input: stream, crlfDelay: Infinity });
   let first = true;
   let inFrontmatter = false;
@@ -17490,44 +17438,44 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
   let logicalRoot;
   let rootIsLink;
   try {
-    rootIsLink = (await fs36.promises.lstat(root)).isSymbolicLink();
-    logicalRoot = await fs36.promises.realpath(root);
+    rootIsLink = (await fs35.promises.lstat(root)).isSymbolicLink();
+    logicalRoot = await fs35.promises.realpath(root);
   } catch (error) {
     if (error.code === "ENOENT") return entries;
-    diagnostics.push({ path: path33.resolve(root), reason: "unreadable root" });
+    diagnostics.push({ path: path32.resolve(root), reason: "unreadable root" });
     return entries;
   }
   if (rootIsLink && !followLinks) {
-    diagnostics.push({ path: path33.resolve(root), reason: "external root link skipped (use --follow-links)" });
+    diagnostics.push({ path: path32.resolve(root), reason: "external root link skipped (use --follow-links)" });
     return entries;
   }
   const canonicalKey = (candidate) => process.platform === "win32" ? candidate.toLocaleLowerCase() : candidate;
   const isContained = (candidate, allowedRoot) => {
-    const relative3 = path33.relative(canonicalKey(allowedRoot), canonicalKey(candidate));
-    return relative3 === "" || relative3 !== ".." && !relative3.startsWith(`..${path33.sep}`) && !path33.isAbsolute(relative3);
+    const relative3 = path32.relative(canonicalKey(allowedRoot), canonicalKey(candidate));
+    return relative3 === "" || relative3 !== ".." && !relative3.startsWith(`..${path32.sep}`) && !path32.isAbsolute(relative3);
   };
   async function visit(candidate, allowedRoot, topLevel = false) {
     let real;
     let candidateIsLink;
     try {
-      candidateIsLink = (await fs36.promises.lstat(candidate)).isSymbolicLink();
-      real = await fs36.promises.realpath(candidate);
+      candidateIsLink = (await fs35.promises.lstat(candidate)).isSymbolicLink();
+      real = await fs35.promises.realpath(candidate);
     } catch {
-      diagnostics.push({ path: path33.resolve(candidate), reason: "broken or unreadable link" });
+      diagnostics.push({ path: path32.resolve(candidate), reason: "broken or unreadable link" });
       return;
     }
     const withinAllowedRoot = allowedRoot === void 0 ? isContained(real, logicalRoot) : isContained(real, allowedRoot);
     const canFollowExternal = followLinks && topLevel;
     if (!withinAllowedRoot && !canFollowExternal) {
-      diagnostics.push({ path: path33.resolve(candidate), reason: candidateIsLink ? "external link skipped (use --follow-links)" : "canonical target outside scan root" });
+      diagnostics.push({ path: path32.resolve(candidate), reason: candidateIsLink ? "external link skipped (use --follow-links)" : "canonical target outside scan root" });
       return;
     }
     const trustedRoot = !withinAllowedRoot && canFollowExternal ? real : allowedRoot ?? real;
     let stat;
     try {
-      stat = await fs36.promises.stat(real);
+      stat = await fs35.promises.stat(real);
     } catch {
-      diagnostics.push({ path: path33.resolve(candidate), reason: "unreadable" });
+      diagnostics.push({ path: path32.resolve(candidate), reason: "unreadable" });
       return;
     }
     const canonical = process.platform === "win32" ? real.toLocaleLowerCase() : real;
@@ -17536,16 +17484,16 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
       visitedDirs.add(canonical);
       let children;
       try {
-        children = await fs36.promises.readdir(real, { withFileTypes: true });
+        children = await fs35.promises.readdir(real, { withFileTypes: true });
       } catch {
-        diagnostics.push({ path: path33.resolve(candidate), reason: "unreadable directory" });
+        diagnostics.push({ path: path32.resolve(candidate), reason: "unreadable directory" });
         return;
       }
       children.sort((a, b) => a.name.localeCompare(b.name));
-      for (const child of children) await visit(path33.join(real, child.name), trustedRoot);
+      for (const child of children) await visit(path32.join(real, child.name), trustedRoot);
       return;
     }
-    if (!stat.isFile() || path33.extname(real).toLowerCase() !== ".md") return;
+    if (!stat.isFile() || path32.extname(real).toLowerCase() !== ".md") return;
     if (seenFiles.has(canonical)) return;
     seenFiles.add(canonical);
     try {
@@ -17555,35 +17503,35 @@ async function scanMetadataRoot(root, kind, diagnostics, visitedDirs = /* @__PUR
       const toolsBytes = Buffer.byteLength(metadata.tools, "utf8");
       entries.push({
         kind,
-        path: path33.resolve(real),
+        path: path32.resolve(real),
         description_bytes: descriptionBytes,
         tools_bytes: toolsBytes,
         metadata_bytes: descriptionBytes + toolsBytes,
         estimated_tokens: Math.floor((descriptionBytes + toolsBytes) / 4)
       });
     } catch {
-      diagnostics.push({ path: path33.resolve(candidate), reason: "unreadable file" });
+      diagnostics.push({ path: path32.resolve(candidate), reason: "unreadable file" });
     }
   }
   try {
-    const children = await fs36.promises.readdir(logicalRoot, { withFileTypes: true });
+    const children = await fs35.promises.readdir(logicalRoot, { withFileTypes: true });
     children.sort((a, b) => a.name.localeCompare(b.name));
-    for (const child of children) await visit(path33.join(logicalRoot, child.name), void 0, true);
+    for (const child of children) await visit(path32.join(logicalRoot, child.name), void 0, true);
   } catch {
-    diagnostics.push({ path: path33.resolve(root), reason: "unreadable root" });
+    diagnostics.push({ path: path32.resolve(root), reason: "unreadable root" });
   }
   return entries;
 }
 async function buildBootstrapAudit(opts = {}) {
   const project = resolveProjectRoot(opts.project === void 0 ? {} : { project: opts.project });
-  const home = path33.resolve(opts.home ?? os17.homedir());
+  const home = path32.resolve(opts.home ?? os17.homedir());
   const context = buildStats(project, home, opts.project === void 0 ? [] : [opts.project]);
   const diagnostics = [];
   const top = opts.top === void 0 ? 10 : parseBudget("--top", opts.top) ?? 10;
   const visitedDirs = /* @__PURE__ */ new Set();
   const seenFiles = /* @__PURE__ */ new Set();
-  const agents = await scanMetadataRoot(path33.join(claudeConfigDir(home), "agents"), "agent", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
-  const skills = await scanMetadataRoot(path33.join(claudeConfigDir(home), "skills"), "skill", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
+  const agents = await scanMetadataRoot(path32.join(claudeConfigDir(home), "agents"), "agent", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
+  const skills = await scanMetadataRoot(path32.join(claudeConfigDir(home), "skills"), "skill", diagnostics, visitedDirs, seenFiles, opts.followLinks === true);
   const rankedEntries = [...agents, ...skills].sort((a, b) => b.metadata_bytes - a.metadata_bytes || a.path.localeCompare(b.path));
   const largestTotal = rankedEntries.length;
   const largest = rankedEntries.slice(0, top);
@@ -17650,8 +17598,8 @@ async function runBootstrapAudit(opts = {}) {
 
 // src/cli_memory.ts
 init_define_import_meta_env();
-import * as fs37 from "node:fs";
-import * as path34 from "node:path";
+import * as fs36 from "node:fs";
+import * as path33 from "node:path";
 function removeExactDupLines(text, report) {
   if (report.exactDupLines.length === 0) return text;
   const toRemove = new Set(report.exactDupLines.map(([, dupIdx]) => dupIdx));
@@ -17709,7 +17657,7 @@ function printReport(reports, clusters) {
   } else {
     for (const cluster of clusters) {
       w(
-        `  [${cluster.method}, similarity ${cluster.similarity}, ~${cluster.tokens} tok] ${cluster.members.map((m) => displaySafeText(path34.basename(m))).join(", ")}
+        `  [${cluster.method}, similarity ${cluster.similarity}, ~${cluster.tokens} tok] ${cluster.members.map((m) => displaySafeText(path33.basename(m))).join(", ")}
 `
       );
     }
@@ -17724,7 +17672,7 @@ async function runMemoryCommand(opts = {}) {
   const claudeMds = findClaudeMdFiles(projectRoot);
   const reports = auditClaudeMd(claudeMds);
   const memoryMdPath = findMemoryMd(projectRoot);
-  const clusters = memoryMdPath !== null ? await findContentDuplicates(path34.dirname(memoryMdPath)) : [];
+  const clusters = memoryMdPath !== null ? await findContentDuplicates(path33.dirname(memoryMdPath)) : [];
   printReport(reports, clusters);
   if (opts.fix !== true) return;
   const changes = [];
@@ -17732,7 +17680,7 @@ async function runMemoryCommand(opts = {}) {
     if (report.exactDupLines.length === 0) continue;
     let before;
     try {
-      before = fs37.readFileSync(report.path, "utf-8");
+      before = fs36.readFileSync(report.path, "utf-8");
     } catch {
       continue;
     }
@@ -17770,8 +17718,8 @@ async function runMemoryCommand(opts = {}) {
 
 // src/cli_waste.ts
 init_define_import_meta_env();
-import * as fs38 from "node:fs";
-import * as path35 from "node:path";
+import * as fs37 from "node:fs";
+import * as path34 from "node:path";
 function printCopilotReport(report) {
   const w = (text) => {
     process.stdout.write(text);
@@ -17825,8 +17773,9 @@ function printCopilotReport(report) {
   } else {
     for (const server of mcp.servers) {
       const tokens = server.estimatedTokens.toLocaleString();
+      const calls = report.mcpCalls === null ? "" : `, ${countNoun(report.mcpCalls[server.serverName] ?? 0, "call")} this session`;
       w(`  ${server.serverName}: ${countNoun(server.toolCount, "tool")}, `);
-      w(`${formatBytes(server.definitionBytes)}, ~${tokens} tok
+      w(`${formatBytes(server.definitionBytes)}, ~${tokens} tok${calls}
 `);
     }
     const mcpTokens = mcp.servers.reduce((sum, server) => sum + server.estimatedTokens, 0);
@@ -17846,6 +17795,15 @@ function printCopilotReport(report) {
       w("  tool-filter flags above still can.\n");
     }
     w("  Dropping a server saves its line above on every request for the rest of the session.\n");
+    const unused = unusedMcpServers(report);
+    if (unused === null) {
+      w("  This log records no tool calls, so it cannot say which servers went unused.\n");
+    } else {
+      for (const server of unused) w(`  Never called this session: \`copilot mcp disable ${server.serverName}\` drops it from future sessions.
+`);
+      if (unused.length > 0) w(`  ${MCP_DISABLE_NOTE}
+`);
+    }
   }
   if (mcp.unreadable > 0) {
     const verb = mcp.unreadable === 1 ? "is" : "are";
@@ -17972,8 +17930,8 @@ function printResidentContext(resident, w) {
 async function runWasteCommand(opts = {}) {
   const projectRoot = resolveProjectRoot(opts.project !== void 0 ? { project: opts.project } : {});
   if (opts.transcript !== void 0) {
-    const resolvedPath = path35.resolve(opts.transcript);
-    if (!fs38.existsSync(resolvedPath)) {
+    const resolvedPath = path34.resolve(opts.transcript);
+    if (!fs37.existsSync(resolvedPath)) {
       if (opts.copilot === true) {
         const detail = `Copilot session event log not found: ${resolvedPath}`;
         if (opts.json === true) {
@@ -18013,7 +17971,7 @@ async function runWasteCommand(opts = {}) {
   }
   if (opts.copilot === true) {
     const eventsPath = opts.project !== void 0 ? findLatestCopilotSession({ projectRoot }) : findLatestCopilotSession({ projectRoot }) ?? findLatestCopilotSession();
-    if (eventsPath === null || !fs38.existsSync(eventsPath)) {
+    if (eventsPath === null || !fs37.existsSync(eventsPath)) {
       const detail = eventsPath === null ? "no Copilot CLI session found under <copilot-home>/session-state" : `Copilot session event log not found: ${eventsPath}`;
       if (opts.json === true) {
         process.stdout.write(`${displaySafeJson({ error: detail }, 0)}
@@ -18070,13 +18028,13 @@ async function runWasteCommand(opts = {}) {
 
 // src/cli_mcp_audit.ts
 init_define_import_meta_env();
-import * as fs39 from "node:fs";
+import * as fs38 from "node:fs";
 import * as os18 from "node:os";
-import * as path36 from "node:path";
+import * as path35 from "node:path";
 function readMcpJsonFile(configPath2) {
   try {
-    if (!fs39.existsSync(configPath2)) return null;
-    const content = fs39.readFileSync(configPath2, "utf-8");
+    if (!fs38.existsSync(configPath2)) return null;
+    const content = fs38.readFileSync(configPath2, "utf-8");
     const parsed = JSON.parse(content);
     const servers = parsed && typeof parsed === "object" ? parsed.mcpServers ?? ("servers" in parsed ? null : parsed) : null;
     return servers && typeof servers === "object" ? servers : null;
@@ -18092,8 +18050,8 @@ function driveLetterCaseVariants(p) {
 }
 function readClaudeJsonConfig(claudeJsonPath, projectRoot) {
   try {
-    if (!fs39.existsSync(claudeJsonPath)) return null;
-    const parsed = JSON.parse(fs39.readFileSync(claudeJsonPath, "utf-8"));
+    if (!fs38.existsSync(claudeJsonPath)) return null;
+    const parsed = JSON.parse(fs38.readFileSync(claudeJsonPath, "utf-8"));
     const projects = parsed && typeof parsed === "object" ? parsed.projects : null;
     if (!projects || typeof projects !== "object") return null;
     const slashForms = [projectRoot, projectRoot.replace(/\\/g, "/"), projectRoot.replace(/\//g, "\\")];
@@ -18111,9 +18069,9 @@ function readClaudeJsonConfig(claudeJsonPath, projectRoot) {
   }
 }
 function discoverMcpConfig(projectRoot, home) {
-  const mcpJsonPath = path36.join(projectRoot, ".mcp.json");
-  const claudeJsonPath = path36.join(home, ".claude.json");
-  const copilotJsonPath = path36.join(home, ".copilot", "mcp-config.json");
+  const mcpJsonPath = path35.join(projectRoot, ".mcp.json");
+  const claudeJsonPath = path35.join(home, ".claude.json");
+  const copilotJsonPath = path35.join(home, ".copilot", "mcp-config.json");
   const sourcesChecked = [mcpJsonPath, claudeJsonPath, copilotJsonPath];
   const fromMcpJson = readMcpJsonFile(mcpJsonPath);
   if (fromMcpJson !== null) return { servers: fromMcpJson, sourcePath: mcpJsonPath, sourcesChecked };
@@ -18434,7 +18392,7 @@ function cmdWaste(opts = {}) {
   });
 }
 async function cmdAudit(opts = {}) {
-  const { runAuditCommand } = await import("./token-goat-chunk-25NRXKIW.mjs");
+  const { runAuditCommand } = await import("./token-goat-chunk-IHKZ3QNA.mjs");
   return runAuditCommand({
     ...opts.project !== void 0 ? { project: opts.project } : {},
     ...opts.transcript !== void 0 ? { transcript: opts.transcript } : {},
@@ -18444,10 +18402,15 @@ async function cmdAudit(opts = {}) {
 async function cmdSessionAudit(opts = {}) {
   let summary;
   try {
-    summary = await auditSessionCorpus({ ...opts.dir !== void 0 ? { dir: opts.dir } : {} });
+    summary = await auditSessionCorpus({ ...opts.dir !== void 0 ? { dir: opts.dir } : {}, ...opts.windowDays !== void 0 ? { windowDays: opts.windowDays } : {} });
   } catch (err2) {
     throw new CliError(err2 instanceof Error ? err2.message : String(err2));
   }
+  if (opts.toolErrors === true) {
+    const { formatToolErrorCensus } = await import("./token-goat-chunk-LEG3JNJ6.mjs");
+    out(opts.json === true ? displaySafeJson({ filesScanned: summary.filesScanned, windowDays: summary.windowDays, ...summary.toolErrors }, 0) : formatToolErrorCensus(summary.toolErrors, summary));
+    return;
+  }
   out(opts.json === true ? displaySafeJson(summary, 0) : formatSessionAudit(summary));
 }
 async function cmdSessionOutline(sessionIdOrPath, opts = {}) {
@@ -18467,7 +18430,7 @@ ${formatSessionOutline(turns)}`;
 }
 function sessionTranscriptSize(transcriptPath) {
   try {
-    return fs40.statSync(transcriptPath).size;
+    return fs39.statSync(transcriptPath).size;
   } catch {
     return 0;
   }
@@ -18512,10 +18475,10 @@ function cmdStatusline(opts = {}) {
 }
 function cmdHintStats(opts = {}) {
   if (opts.markEffective !== void 0 && !isHintCategory(opts.markEffective)) {
-    throw new CliError(`--mark-effective must be one of: bash_redirect, bash_recall, read_reread_dedup, read_structural_nav, edit_reread_suggest (got: ${opts.markEffective})`);
+    throw new CliError(`--mark-effective must be one of: ${HINT_CATEGORIES.join(", ")} (got: ${opts.markEffective})`);
   }
   if (opts.markIneffective !== void 0 && !isHintCategory(opts.markIneffective)) {
-    throw new CliError(`--mark-ineffective must be one of: bash_redirect, bash_recall, read_reread_dedup, read_structural_nav, edit_reread_suggest (got: ${opts.markIneffective})`);
+    throw new CliError(`--mark-ineffective must be one of: ${HINT_CATEGORIES.join(", ")} (got: ${opts.markIneffective})`);
   }
   runHintStatsCommand({
     ...opts.json === true ? { json: true } : {},
@@ -18527,14 +18490,14 @@ function cmdHintStats(opts = {}) {
 
 // src/cli_skills.ts
 init_define_import_meta_env();
-import * as fs41 from "node:fs";
-import * as path37 from "node:path";
+import * as fs40 from "node:fs";
+import * as path36 from "node:path";
 async function cmdSkillBody(name, opts) {
   const filePath = await getSkillFilePath(name);
   if (filePath === null) {
     throw new CliError(`skill '${name}' not found`);
   }
-  const body = decodeSource(fs41.readFileSync(filePath));
+  const body = decodeSource(fs40.readFileSync(filePath));
   if (opts.compact === true) {
     const emitted = extractCompactFromMarker(body) ?? body;
     out(emitted);
@@ -18561,7 +18524,7 @@ async function cmdSkillCompact(name, opts) {
       }
       let body2;
       try {
-        body2 = decodeSource(fs41.readFileSync(filePath));
+        body2 = decodeSource(fs40.readFileSync(filePath));
       } catch {
         unresolvable++;
         continue;
@@ -18595,19 +18558,19 @@ async function cmdSkillCompact(name, opts) {
     if (!opts.path.trim()) {
       throw new CliError("--path cannot be empty");
     }
-    if (!fs41.existsSync(opts.path)) {
+    if (!fs40.existsSync(opts.path)) {
       throw new CliError(`skill file not found: ${opts.path}`);
     }
     try {
-      body = fs41.readFileSync(opts.path, "utf-8");
+      body = fs40.readFileSync(opts.path, "utf-8");
     } catch (e) {
       if (e.code === "ENOENT") {
         throw new CliError(`skill file not found: ${opts.path}`);
       }
       throw new CliError(`failed to read skill file '${opts.path}': ${extractErrorMessage(e)}`);
     }
-    cacheName = name ?? path37.basename(path37.dirname(path37.resolve(opts.path)));
-    sourcePath = path37.resolve(opts.path);
+    cacheName = name ?? path36.basename(path36.dirname(path36.resolve(opts.path)));
+    sourcePath = path36.resolve(opts.path);
   } else {
     if (name === void 0 || !name.trim()) {
       throw new CliError("skill-compact requires a <name> or --path <file>");
@@ -18616,7 +18579,7 @@ async function cmdSkillCompact(name, opts) {
     if (filePath === null) {
       throw new CliError(`skill '${name}' not found`);
     }
-    body = fs41.readFileSync(filePath, "utf-8");
+    body = fs40.readFileSync(filePath, "utf-8");
     cacheName = name;
     sourcePath = filePath;
   }
@@ -18748,8 +18711,8 @@ async function cmdSkillDiff(name) {
   }
   const newer = versions[0];
   const older = versions[1];
-  const newerBody = await fs41.promises.readFile(path37.resolve(dir, `${newer.outputId}.txt`), "utf-8").catch(() => null);
-  const olderBody = await fs41.promises.readFile(path37.resolve(dir, `${older.outputId}.txt`), "utf-8").catch(() => null);
+  const newerBody = await fs40.promises.readFile(path36.resolve(dir, `${newer.outputId}.txt`), "utf-8").catch(() => null);
+  const olderBody = await fs40.promises.readFile(path36.resolve(dir, `${older.outputId}.txt`), "utf-8").catch(() => null);
   if (newerBody === null || olderBody === null) {
     out(`a cached version of '${name}' was evicted while diffing -- try again`);
     return;
@@ -18778,7 +18741,7 @@ async function cmdSkillSection(nameHeading, headingArg) {
   if (!filePath) {
     throw new CliError(`skill '${skillName}' not found`);
   }
-  const body = decodeSource(fs41.readFileSync(filePath));
+  const body = decodeSource(fs40.readFileSync(filePath));
   const extracted = extractNamedSection(body, heading);
   if (!extracted) {
     const allHeadings = listSections(filePath);
@@ -18801,8 +18764,8 @@ init_define_import_meta_env();
 
 // src/cli_stats.ts
 init_define_import_meta_env();
-import * as fs42 from "node:fs";
-import * as path38 from "node:path";
+import * as fs41 from "node:fs";
+import * as path37 from "node:path";
 function writeRaw(text) {
   const payload = colorStdout() ? text : stripAnsiEscapes(text);
   process.stdout.write(ensureNewline(payload));
@@ -18814,7 +18777,7 @@ function formatTopFiles(ranked) {
   if (ranked.length === 0) return "";
   const lines = ["Top files this session:"];
   for (const { path: filePath, count } of ranked) {
-    const basename10 = path38.basename(filePath);
+    const basename10 = path37.basename(filePath);
     lines.push(`  ${count.toString().padStart(3)}x  ${basename10}  (${filePath})`);
   }
   return lines.join("\n");
@@ -18832,11 +18795,11 @@ function renderTopSessionFiles(topN = 5) {
 function renderTopSessionFilesFromDisk(topN = 5, overrideSessionsDir) {
   try {
     const dir = overrideSessionsDir ?? sessionsDir();
-    if (!fs42.existsSync(dir)) return "";
-    const files = fs42.readdirSync(dir).filter((f) => f.endsWith(".json")).map((f) => ({ name: f, mtime: fs42.statSync(path38.join(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).slice(0, 3);
+    if (!fs41.existsSync(dir)) return "";
+    const files = fs41.readdirSync(dir).filter((f) => f.endsWith(".json")).map((f) => ({ name: f, mtime: fs41.statSync(path37.join(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).slice(0, 3);
     for (const { name } of files) {
       try {
-        const raw = fs42.readFileSync(path38.join(dir, name), "utf-8");
+        const raw = fs41.readFileSync(path37.join(dir, name), "utf-8");
         const data = JSON.parse(raw);
         const filesList = data["files"];
         if (!Array.isArray(filesList)) continue;
@@ -18971,6 +18934,19 @@ function getNewestSessionFiles() {
   const filesArr = Array.isArray(raw["files"]) ? raw["files"] : [];
   return { id: newest.id, sessionCount: blobs.length, filesArr };
 }
+function emitHistoryOutput(allItems, limit, json, emptyMessage, printTable) {
+  const sorted = allItems.sort((a, b) => b.storedAt - a.storedAt);
+  const items = capAndNote(sorted, limit);
+  if (json === true) {
+    process.stdout.write(displaySafeJson(items) + "\n");
+    return;
+  }
+  if (items.length === 0) {
+    process.stdout.write(emptyMessage);
+    return;
+  }
+  printTable(items);
+}
 function cmdBashHistory(opts) {
   const limit = parseLimitOpt("bash-history", opts.limit);
   const blobs = listBlobs(BASH_OUTPUT_SUBDIR);
@@ -18985,24 +18961,17 @@ function cmdBashHistory(opts) {
       exitCode: typeof v["exitCode"] === "number" ? v["exitCode"] : -1,
       sizeBytes: typeof v["sizeBytes"] === "number" ? v["sizeBytes"] : 0
     };
-  }).filter((x) => x !== null).sort((a, b) => b.storedAt - a.storedAt);
-  const items = capAndNote(allItems, limit);
-  if (opts.json === true) {
-    process.stdout.write(displaySafeJson(items) + "\n");
-    return;
-  }
-  if (items.length === 0) {
-    process.stdout.write("No bash output entries cached.\n");
-    return;
-  }
-  process.stdout.write(`${pad("id", 18)}  ${pad("bytes", 8)}  ${pad("exit", 4)}  command
+  }).filter((x) => x !== null);
+  emitHistoryOutput(allItems, limit, opts.json, "No bash output entries cached.\n", (items) => {
+    process.stdout.write(`${pad("id", 18)}  ${pad("bytes", 8)}  ${pad("exit", 4)}  command
 `);
-  for (const item of items) {
-    const flatCommand = displaySafeText(item.command);
-    const preview = flatCommand.length > 80 ? flatCommand.slice(0, 77) + "..." : flatCommand;
-    process.stdout.write(`${pad(displaySafeText(item.id), 18)}  ${pad(String(item.sizeBytes), 8)}  ${pad(String(item.exitCode), 4)}  ${preview}
+    for (const item of items) {
+      const flatCommand = displaySafeText(item.command);
+      const preview = flatCommand.length > 80 ? flatCommand.slice(0, 77) + "..." : flatCommand;
+      process.stdout.write(`${pad(displaySafeText(item.id), 18)}  ${pad(String(item.sizeBytes), 8)}  ${pad(String(item.exitCode), 4)}  ${preview}
 `);
-  }
+    }
+  });
 }
 function cmdWebHistory(opts) {
   const limit = parseLimitOpt("web-history", opts.limit);
@@ -19016,22 +18985,15 @@ function cmdWebHistory(opts) {
       bytes: typeof v["content"] === "string" ? Buffer.byteLength(v["content"], "utf8") : 0,
       storedAt: mtime
     };
-  }).filter((x) => x !== null).sort((a, b) => b.storedAt - a.storedAt);
-  const items = capAndNote(allItems, limit);
-  if (opts.json === true) {
-    process.stdout.write(displaySafeJson(items) + "\n");
-    return;
-  }
-  if (items.length === 0) {
-    process.stdout.write("No web output entries cached.\n");
-    return;
-  }
-  process.stdout.write(`${pad("id", 18)}  ${pad("bytes", 8)}  url
+  }).filter((x) => x !== null);
+  emitHistoryOutput(allItems, limit, opts.json, "No web output entries cached.\n", (items) => {
+    process.stdout.write(`${pad("id", 18)}  ${pad("bytes", 8)}  url
 `);
-  for (const item of items) {
-    process.stdout.write(`${pad(displaySafeText(item.id), 18)}  ${pad(String(item.bytes), 8)}  ${displaySafeText(item.url)}
+    for (const item of items) {
+      process.stdout.write(`${pad(displaySafeText(item.id), 18)}  ${pad(String(item.bytes), 8)}  ${displaySafeText(item.url)}
 `);
-  }
+    }
+  });
 }
 function cmdMcpHistory(opts) {
   const limit = parseLimitOpt("mcp-history", opts.limit);
@@ -19047,22 +19009,15 @@ function cmdMcpHistory(opts) {
       storedAt: typeof v["storedAt"] === "number" ? v["storedAt"] : mtime,
       sizeBytes: typeof v["sizeBytes"] === "number" ? v["sizeBytes"] : 0
     };
-  }).filter((x) => x !== null).sort((a, b) => b.storedAt - a.storedAt);
-  const items = capAndNote(allItems, limit);
-  if (opts.json === true) {
-    process.stdout.write(displaySafeJson(items) + "\n");
-    return;
-  }
-  if (items.length === 0) {
-    process.stdout.write("No mcp output entries cached.\n");
-    return;
-  }
-  process.stdout.write(`${pad("id", 18)}  ${pad("bytes", 8)}  tool
+  }).filter((x) => x !== null);
+  emitHistoryOutput(allItems, limit, opts.json, "No mcp output entries cached.\n", (items) => {
+    process.stdout.write(`${pad("id", 18)}  ${pad("bytes", 8)}  tool
 `);
-  for (const item of items) {
-    process.stdout.write(`${pad(displaySafeText(item.id), 18)}  ${pad(String(item.sizeBytes), 8)}  ${displaySafeText(item.toolName)}
+    for (const item of items) {
+      process.stdout.write(`${pad(displaySafeText(item.id), 18)}  ${pad(String(item.sizeBytes), 8)}  ${displaySafeText(item.toolName)}
 `);
-  }
+    }
+  });
 }
 function cmdCleanCache(opts) {
   const removed = {};
@@ -19309,7 +19264,14 @@ function registerSessionCommands(program2, guard) {
   program2.command("audit").description("session retrospective: analyze the current session transcript (Copilot CLI or Claude Code) and emit a Maintainer Feedback Card").option("--project <path>", "project root to analyze").option("--transcript <path>", "explicit transcript path (default: active or newest session for this project)").option("-j, --json", "output as JSON").action(guard(cmdAudit));
   program2.command("session-outline [session-id-or-path]").description("turn-by-turn structure (role, preview, tool calls, approx size) of a Claude Code session JSONL transcript, instead of a raw Read; defaults to the current project's most recent session").option("--project <path>", "project root to resolve the session transcript against").option("--json", "output JSON").action(guard(cmdSessionOutline));
   program2.command("session-slice [session-id-or-path]").description("full content of one turn range from a Claude Code session JSONL transcript (see session-outline for turn numbers), instead of a raw Read").requiredOption("--range <spec>", "turn range, e.g. 5-9 or 12 (see session-outline for turn numbers)").option("--project <path>", "project root to resolve the session transcript against").option("--json", "output JSON").action(guard(cmdSessionSlice));
-  program2.command("session-audit").alias("audit-session").description("corpus-wide token attribution across every local Claude Code session transcript: measured billed usage, estimated content size by source and by tool, and billed cost by session position (aggregate counts only, never transcript content)").option("--dir <path>", "transcript corpus root to scan (default: ~/.claude/projects)").option("--json", "output JSON").action(guard(cmdSessionAudit));
+  program2.command("session-audit").alias("audit-session").description("corpus-wide token attribution across every local Claude Code session transcript: measured billed usage, estimated content size by source and by tool, and billed cost by session position (aggregate counts only, never transcript content)").option("--dir <path>", "transcript corpus root to scan (default: ~/.claude/projects)").option("--window-days <days>", "only transcripts whose file was modified in the last N days (0 = all time)", "0").option("--tool-errors", "print only the failed-tool-call report: calls, errors, expected failures by reason and unknown ones, per tool and per model, with the top unknown error prefixes").option("--json", "output JSON").action(guard(
+    (opts) => cmdSessionAudit({
+      ...opts.dir !== void 0 ? { dir: opts.dir } : {},
+      ...opts.json === true ? { json: true } : {},
+      ...opts.toolErrors === true ? { toolErrors: true } : {},
+      windowDays: requireNonNegativeInt("--window-days", opts.windowDays)
+    })
+  ));
   program2.command("mcp-audit").description("MCP server schema cost-vs-usage report: estimate per-server token cost from cached tool calls").option("--project <path>", "project root to analyze").option("--json", "output JSON").action(guard(cmdMcpAudit));
   program2.command("recall [query]").description("search across every cached bash-output, web-output, and mcp-output entry (full-text); with no query, list them newest-first").option("--type <type>", "filter to one cache type: bash, web, or mcp").option("--limit <n>", "max results to return (default: 10)").option("--json", "output JSON").action(guard(cmdRecall));
   program2.command("hint-stats").description("per-category efficacy report for token-goat's discretionary hint hooks (emitted/acted-on/suppression)").option("--json", "output JSON").option("--reset", "clear all tracked emissions and manual marks").option("--mark-effective <category>", 'record a manual "effective" vote for a hint category').option("--mark-ineffective <category>", 'record a manual "ineffective" vote for a hint category').action(guard(cmdHintStats));
@@ -19392,7 +19354,7 @@ function registerSessionCommands(program2, guard) {
 init_define_import_meta_env();
 var NO_SERVER_HANDLER_REASON = "token-goat has no registered server-side handler for this event (zero registerHook('notification'|'stop', ...) call sites in src/) -- wiring it client-side would currently be a no-op";
 var NO_POST_COMPACT_EVENT_REASON = "post_compact is a Claude Code event (hook_event_name PostCompact, carrying compact_summary); no equivalent has been confirmed for this harness, so it is left unwired rather than guessed at";
-var NO_SEPARATE_FAILURE_EVENT_REASON = "post_tool_use_failure exists because Copilot CLI routes a failed tool result to a separate postToolUseFailure event instead of postToolUse. No separate failure event is wired for this harness, so a failed tool call either arrives on post_tool_use like any other result or is not seen; which of the two has not been checked here";
+var NO_SEPARATE_FAILURE_EVENT_REASON = "post_tool_use_failure exists because Copilot CLI (postToolUseFailure) and Claude Code (PostToolUseFailure) route a failed tool result to a separate event instead of their post-tool one. No separate failure event is wired for this harness, so a failed tool call either arrives on post_tool_use like any other result or is not seen; which of the two has not been checked here";
 var COPILOT_NO_POST_COMPACT_REASON = "Copilot CLI has no post-compaction hook: its HookType enum (schemas/api.schema.json, 1.0.79 and 1.0.80) declares preCompact and no postCompact, and both preCompact call sites in app.js await the hook and never assign its result. Whether the summary is reachable another way is open. app.js does emit session.compaction_complete carrying summaryContent, and the session event writer subscribes to '*' -- but emit() vs emitEphemeral() does NOT gate that writer: dispatchEventHandlers runs outside the ephemeral branch in emitInternal, on('*') early-returns past every filter, and the writer's callback applies no filter of its own before handing the JSON to native recordEventJson. The durable-vs-ephemeral decision is in Rust (api_session_event_writer.rs) and was not readable. Nor is the event uniformly summary-bearing: two of the four emit sites are the branches taken when no summary exists, summaryContent is optional in the schema, and the relay session class emits the same event via emitEphemeral. No compaction has ever been observed on the machines checked, so nothing empirical anchors any of it. Context can be written back on the next turn through userPromptSubmitted additionalContext";
 var VERIFICATION_RANK = {
   dogfooded: 0,
@@ -19411,9 +19373,8 @@ var BRIDGE_CAPABILITY_MATRIX = [
     sourceFile: "src/install.ts (HOOK_EVENT_MAP)",
     verification: "dogfooded",
     verificationNote: "The harness this repo is developed and released under; CLAUDE.md requires every CLI/hook change be run against the built binary here before it ships.",
-    implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "pre_compact", "post_compact", "user_prompt_submit", "subagent_stop", "session_start"]),
+    implemented: /* @__PURE__ */ new Set(["pre_tool_use", "post_tool_use", "post_tool_use_failure", "pre_compact", "post_compact", "user_prompt_submit", "subagent_stop", "session_start"]),
     reasons: [
-      { events: ["post_tool_use_failure"], reason: NO_SEPARATE_FAILURE_EVENT_REASON },
       { events: ["notification", "stop"], reason: NO_SERVER_HANDLER_REASON }
     ]
   },
@@ -19450,55 +19411,7 @@ var BRIDGE_CAPABILITY_MATRIX = [
       }
     ]
   },
-  /**
-   * What Copilot CLI's wired events can actually carry, read from the shipping 1.0.80 bundle
-   * rather than from its hooks reference page. A row's `implemented` set says an event is wired;
-   * it deliberately says nothing about how much of that event's response the harness honors, and
-   * for Copilot the difference matters:
-   *
-   * - `pre_tool_use` deny is real, and the reason text reaches the model. The native string table
-   *   (runtime.node offset 98057208) carries `permissionDecision`, `permissionDecisionReason`, the
-   *   default "No reason provided." and the formatter "Denied by preToolUse hook: " as distinct
-   *   literals, and app.js sets `{textResultForLlm: reason, resultType: "denied"}` per denial and
-   *   filters that call out of execution. This was previously only an inference drawn from an
-   *   incident comment; it is now confirmed. The fail-closed "(hook errored)" deny-all strings sit
-   *   beside these, so that incident was behavior layered on top of a working deny handler, not a
-   *   substitute for one.
-   * - `post_tool_use` honors `modifiedResult`, so compression, injection fencing and image shrink
-   *   do reach the model: `postToolExecution` (app.js offset 2043150) assigns the returned
-   *   `toolResultJson` onto the tool result in place.
-   * - `post_tool_use` drops `additionalContext` on the JS path -- no supplier for the
-   *   `onAdditionalContext` callback anywhere in the bundle, and no `additional_contexts` key in
-   *   that event's native return payload, unlike its pre-tool sibling. Whether native folds it
-   *   into the returned result instead was not verified.
-   * - Failed tool calls never reach `post_tool_use` at all. Copilot routes them to a separate
-   *   `postToolUseFailure` event, which is handed only a stringified error and honors only
-   *   `additionalContext`; `modifiedResult` is documented as not honored there. So on Copilot the
-   *   output of a failed tool call reaches the model unfenced, uncompressed and unshrunk, and no
-   *   response shape token-goat's shim can emit changes that. Known gap, deliberately recorded.
-   *   What `additionalContext` does on that event is no longer doc-derived: app.js offset 2043380
-   *   reads the native processor's return and, when it carries `additionalContext`, either folds
-   *   it into `textResultForLlm` (if `appendFailureContextToToolResult` is set) or formats it and
-   *   pushes `{content, source: "system"}` onto `toolResult.newMessages`. So the channel is real
-   *   and model-visible -- it just carries advice alongside the failure, never a replacement for
-   *   it. It is wired now, as its own `post_tool_use_failure` event rather than a reuse of
-   *   `post_tool_use`: routing failures through the success event would let success-path handlers
-   *   mark a file as successfully read when the read failed. Because the channel spends tokens
-   *   instead of saving them, its handler (`src/hooks_tool_failure.ts`) stays silent on a first
-   *   failure and speaks only on an exact repeat.
-   * - `pre_compact` is wired and fires, but nothing it returns can reach the model. Both dispatch
-   *   sites call it in statement position and drop the result: app.js offset 2467452 (the manual
-   *   `/compact` path) and offset 2571216 (`case "execute_pre_compact_hook"`). The contrast is
-   *   what makes this conclusive rather than an absence of evidence -- the same `event()` runner's
-   *   return IS read for other events, e.g. `notification` at offset 2296123 assigns it and
-   *   forwards `additionalContext` as a prepended system prompt. The compaction prompt is then
-   *   built from session history and the user's own focus text, with no hook channel into it.
-   *   So token-goat's `pre_compact` registration here is observe-only by construction, not merely
-   *   unused: a future attempt to inject a session manifest through it would silently do nothing.
-   *   Not verified: whether the native declarative runner applies `additionalContext` itself. The
-   *   trail ends in stripped Rust. That it would make the explicit JS handling for `notification`
-   *   and `userPromptSubmitted` redundant is an argument, not a proof.
-   */
+  /** What Copilot CLI's wired events can actually carry, read from the shipping 1.0.80 bundle rather than from its hooks reference page. A row's `implemented` set says an event is wired; it deliberately says nothing about how much of that event's response the harness honors, and for Copilot the difference matters: - `pre_tool_use` deny is real, and the reason text reaches the model. The native string table (runtime.node offset 98057208) carries `permissionDecision`, `permissionDecisionReason`, the default "No reason provided." and the formatter "Denied by preToolUse hook: " as distinct literals, and app.js sets `{textResultForLlm: reason, resultType: "denied"}` per denial and filters that call out of execution. This was previously only an inference drawn from an incident comment; it is now confirmed. The fail-closed "(hook errored)" deny-all strings sit beside these, so that incident was behavior layered on top of a working deny handler, not a substitute for one. - `post_tool_use` honors `modifiedResult`, so compression, injection fencing and image shrink do reach the model: `postToolExecution` (app.js offset 2043150) assigns the returned `toolResultJson` onto the tool result in place. - `post_tool_use` drops `additionalContext` on the JS path -- no supplier for the `onAdditionalContext` callback anywhere in the bundle, and no `additional_contexts` key in that event's native return payload, unlike its pre-tool sibling. Whether native folds it into the returned result instead was not verified. - Failed tool calls never reach `post_tool_use` at all. Copilot routes them to a separate `postToolUseFailure` event, which is handed only a stringified error and honors only `additionalContext`; `modifiedResult` is documented as not honored there. So on Copilot the output of a failed tool call reaches the model unfenced, uncompressed and unshrunk, and no response shape token-goat's shim can emit changes that. Known gap, deliberately recorded. What `additionalContext` does on that event is no longer doc-derived: app.js offset 2043380 reads the native processor's return and, when it carries `additionalContext`, either folds it into `textResultForLlm` (if `appendFailureContextToToolResult` is set) or formats it and pushes `{content, source: "system"}` onto `toolResult.newMessages`. So the channel is real and model-visible -- it just carries advice alongside the failure, never a replacement for it. It is wired now, as its own `post_tool_use_failure` event rather than a reuse of `post_tool_use`: routing failures through the success event would let success-path handlers mark a file as successfully read when the read failed. Because the channel spends tokens instead of saving them, its handler (`src/hooks_tool_failure.ts`) stays silent on a first failure and speaks only on an exact repeat. - `pre_compact` is wired and fires, but nothing it returns can reach the model. Both dispatch sites call it in statement position and drop the result: app.js offset 2467452 (the manual `/compact` path) and offset 2571216 (`case "execute_pre_compact_hook"`). The contrast is what makes this conclusive rather than an absence of evidence -- the same `event()` runner's return IS read for other events, e.g. `notification` at offset 2296123 assigns it and forwards `additionalContext` as a prepended system prompt. The compaction prompt is then built from session history and the user's own focus text, with no hook channel into it. So token-goat's `pre_compact` registration here is observe-only by construction, not merely unused: a future attempt to inject a session manifest through it would silently do nothing. Not verified: whether the native declarative runner applies `additionalContext` itself. The trail ends in stripped Rust. That it would make the explicit JS handling for `notification` and `userPromptSubmitted` redundant is an argument, not a proof. */
   {
     harness: "copilot_cli",
     label: "Copilot CLI",
@@ -19723,25 +19636,25 @@ function installVerificationNotice(harness) {
 
 // src/purge.ts
 init_define_import_meta_env();
-import * as fs43 from "node:fs";
-import * as path39 from "node:path";
+import * as fs42 from "node:fs";
+import * as path38 from "node:path";
 function directorySize(root) {
   let total = 0;
   let entries;
   try {
-    entries = fs43.readdirSync(root, { withFileTypes: true });
+    entries = fs42.readdirSync(root, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const entry of entries) {
-    const full = path39.join(root, entry.name);
+    const full = path38.join(root, entry.name);
     if (entry.isDirectory()) {
       total += directorySize(full);
       continue;
     }
     if (!entry.isFile()) continue;
     try {
-      total += fs43.statSync(full).size;
+      total += fs42.statSync(full).size;
     } catch {
     }
   }
@@ -19760,7 +19673,7 @@ function purgeDataDirectories() {
     }
     const bytes = directorySize(root);
     try {
-      fs43.rmSync(root, { recursive: true, force: true });
+      fs42.rmSync(root, { recursive: true, force: true });
       result.removed.push({ path: root, bytes });
     } catch (e) {
       result.failed.push({ path: root, reason: e instanceof Error ? e.message : String(e) });
@@ -19907,8 +19820,8 @@ async function getSectionContent(fileId, heading, opts = {}) {
 
 // src/cli_bench.ts
 init_define_import_meta_env();
-import * as fs44 from "node:fs";
-import * as path40 from "node:path";
+import * as fs43 from "node:fs";
+import * as path39 from "node:path";
 var ControlFilter = class extends ToolFilter {
   constructor(name, transform) {
     super();
@@ -19929,13 +19842,13 @@ var CONTROL_FILTERS = {
 };
 var MAX_BENCH_FILE_BYTES = 5 * 1024 * 1024;
 function readCaseFile(id, filePath, what) {
-  const bytes = fs44.statSync(filePath).size;
+  const bytes = fs43.statSync(filePath).size;
   if (bytes > MAX_BENCH_FILE_BYTES) {
     throw new Error(
       `bench case ${id}: ${what} is ${bytes} bytes, over the ${MAX_BENCH_FILE_BYTES}-byte limit for a corpus file (${filePath})`
     );
   }
-  return fs44.readFileSync(filePath, "utf8");
+  return fs43.readFileSync(filePath, "utf8");
 }
 function parseCase(id, metaPath, outputPath) {
   const metaText = readCaseFile(id, metaPath, "metadata");
@@ -19970,7 +19883,7 @@ function parseCase(id, metaPath, outputPath) {
 function loadCorpus(dir) {
   let entries;
   try {
-    entries = fs44.readdirSync(dir);
+    entries = fs43.readdirSync(dir);
   } catch {
     throw new Error(`bench corpus not found: ${dir}`);
   }
@@ -19978,9 +19891,9 @@ function loadCorpus(dir) {
   for (const entry of entries.sort()) {
     if (!entry.endsWith(".json")) continue;
     const id = entry.slice(0, -".json".length);
-    const outputPath = path40.join(dir, `${id}.txt`);
-    if (!fs44.existsSync(outputPath)) throw new Error(`bench case ${id}: missing output file ${outputPath}`);
-    cases.push(parseCase(id, path40.join(dir, entry), outputPath));
+    const outputPath = path39.join(dir, `${id}.txt`);
+    if (!fs43.existsSync(outputPath)) throw new Error(`bench case ${id}: missing output file ${outputPath}`);
+    cases.push(parseCase(id, path39.join(dir, entry), outputPath));
   }
   if (cases.length === 0) throw new Error(`bench corpus is empty: ${dir}`);
   return cases;
@@ -20100,10 +20013,10 @@ function appendTsv(file, report, commit) {
     report.mustKeepTotal,
     report.coveredFilters
   ].join("	");
-  const dir = path40.dirname(path40.resolve(file));
-  fs44.mkdirSync(dir, { recursive: true });
-  const header = fs44.existsSync(file) ? "" : TSV_HEADER;
-  fs44.appendFileSync(file, header + row + "\n", "utf8");
+  const dir = path39.dirname(path39.resolve(file));
+  fs43.mkdirSync(dir, { recursive: true });
+  const header = fs43.existsSync(file) ? "" : TSV_HEADER;
+  fs43.appendFileSync(file, header + row + "\n", "utf8");
 }
 function currentCommit(cwd) {
   const opts = cwd === void 0 ? {} : { cwd };
@@ -20143,10 +20056,10 @@ function readBoundedText(text, file) {
   if (text === void 0 && file === void 0) throw new CliError("provide text or --file");
   let value;
   if (file !== void 0) {
-    if (fs45.statSync(file).size > CONTENT_MAX_INPUT_CHARS) {
+    if (fs44.statSync(file).size > CONTENT_MAX_INPUT_CHARS) {
       throw new CliError(`file exceeds the ${CONTENT_MAX_INPUT_CHARS}-byte safety limit`);
     }
-    value = fs45.readFileSync(file, "utf8");
+    value = fs44.readFileSync(file, "utf8");
   } else {
     if (text === void 0) throw new CliError("provide text or --file");
     value = text;
@@ -20191,19 +20104,23 @@ function cmdHandoffResolve(name, opts) {
   if (result === null) throw new CliError(`no local handoff named "${name}" in this project`);
   out(typeof result === "string" ? result : formatCompression(result, false, "payload withheld: inlining it would cost more tokens than the original text; pass --full to get the original text back outright"));
 }
-async function cmdSemantic(query, opts) {
+async function cmdSemantic(query, more, opts) {
   if (!query && !opts.preflight && !opts.warm) {
     throw new CliError("missing required argument: query");
   }
+  if (opts.preflight === true && more.length > 0) {
+    throw new CliError("--preflight checks the embedding setup and runs no query; drop the queries, or drop --preflight to search");
+  }
   const limit = opts.limit !== void 0 ? requireNonNegativeInt("--limit", opts.limit) : 20;
-  const { text, code } = await runSemantic(query ?? "", {
+  const semanticOpts = {
     limit,
     ...opts.json === true ? { json: true } : {},
     ...opts.grep !== void 0 ? { grep: opts.grep } : {},
     ...opts.excludeTests === true ? { excludeTests: true } : {},
     ...opts.preflight === true ? { preflight: true } : {},
     ...opts.warm === true ? { warm: true } : {}
-  });
+  };
+  const { text, code } = more.length > 0 ? await runSemanticMulti([query ?? "", ...more], semanticOpts) : await runSemantic(query ?? "", semanticOpts);
   (opts.json === true || code === 0 ? out : err)(text);
   process.exitCode = code;
 }
@@ -20269,7 +20186,7 @@ async function cmdIndex(pathArg, opts = {}) {
       continue;
     }
     const sha = fingerprintFile(key);
-    if (sha === null && !fs45.existsSync(key)) continue;
+    if (sha === null && !fs44.existsSync(key)) continue;
     recordKnownRootThrottled(key, dataDir(), dbPath);
     const entry = sha !== null ? getFileEntry(key, dbPath) : null;
     const spellingStale = entry !== null && indexedPathSpellingIsStale(entry.filePath, key);
@@ -20306,7 +20223,7 @@ async function cmdIndex(pathArg, opts = {}) {
         }
         continue;
       }
-      if (!fs45.existsSync(key)) continue;
+      if (!fs44.existsSync(key)) continue;
     }
     const embedFresh = parseUnchanged ? embedUnchanged : embedFreshFor(getFileEntry(key, dbPath)?.embedSha);
     if (!embedFresh) {
@@ -20367,7 +20284,7 @@ async function cmdMcpServe() {
   let StdioServerTransport;
   try {
     ;
-    ({ createMcpServer } = await import("./token-goat-chunk-T6652D3F.mjs"));
+    ({ createMcpServer } = await import("./token-goat-chunk-SJEKA7Y2.mjs"));
     ({ StdioServerTransport } = await import("./token-goat-chunk-EVC4TOLE.mjs"));
   } catch (err2) {
     process.stderr.write(
@@ -20392,11 +20309,11 @@ async function cmdHook(event, opts) {
   if (typeof opts.harness === "string" && opts.harness.length > 0) {
     process.env[ENV_KEYS.HARNESS_OVERRIDE] = opts.harness;
   }
-  const { relay } = await import("./token-goat-chunk-WEYODFTA.mjs");
+  const { relay } = await import("./token-goat-chunk-7MAFDRVR.mjs");
   await relay(event);
 }
 function projectHooksCommitNote(pathFiles, hooksConfigPath) {
-  const shim = hooksConfigPath === void 0 ? "" : ` (${displaySafePath(path41.join(path41.dirname(hooksConfigPath), HOOKS_SCRIPT_FILE))} is generated with them)`;
+  const shim = hooksConfigPath === void 0 ? "" : ` (${displaySafePath(path40.join(path40.dirname(hooksConfigPath), HOOKS_SCRIPT_FILE))} is generated with them)`;
   return `Note: ${pathFiles.map((p) => displaySafePath(p)).join(", ")} ${pathFiles.length === 1 ? "holds" : "hold"} absolute paths to node and token-goat on this machine${shim}, so do not commit them: list them in .git/info/exclude or .gitignore.`;
 }
 function visualStudioManualSteps(scope) {
@@ -20429,7 +20346,7 @@ async function cmdInstall(opts) {
   if (opts.project === true && opts.user === true) {
     throw new Error("install takes either -p/--project or --user, not both.");
   }
-  await import("./token-goat-chunk-WEYODFTA.mjs");
+  await import("./token-goat-chunk-7MAFDRVR.mjs");
   const scope = opts.project === true ? "project" : "user";
   if (wantsClaudeCodeBase(opts)) {
     const result = installHooks(scope);
@@ -20575,16 +20492,16 @@ async function cmdInstall(opts) {
     );
   }
   try {
-    const skillDir2 = path41.join(claudeConfigDir(), "skills");
-    if (fs45.existsSync(skillDir2)) {
-      const entries = fs45.readdirSync(skillDir2, { withFileTypes: true });
+    const skillDir2 = path40.join(claudeConfigDir(), "skills");
+    if (fs44.existsSync(skillDir2)) {
+      const entries = fs44.readdirSync(skillDir2, { withFileTypes: true });
       const skillNames = [];
       const sessionId = getSessionId();
       for (const entry of entries) {
         if (!entry.isDirectory()) continue;
-        const skillFile = path41.join(skillDir2, entry.name, "SKILL.md");
-        if (fs45.existsSync(skillFile)) {
-          const body = fs45.readFileSync(skillFile, "utf-8");
+        const skillFile = path40.join(skillDir2, entry.name, "SKILL.md");
+        if (fs44.existsSync(skillFile)) {
+          const body = fs44.readFileSync(skillFile, "utf-8");
           const compact = extractCompactFromMarker(body);
           if (compact === null) continue;
           const sourceSha = contentHash(body);
@@ -20595,9 +20512,9 @@ async function cmdInstall(opts) {
       if (skillNames.length > 0) {
         const dir = skillOutputsDir();
         ensureDirSync(dir);
-        const pregenPath = path41.join(dir, "pregen.json");
+        const pregenPath = path40.join(dir, "pregen.json");
         const pregenData = { ts: Date.now(), names: skillNames };
-        await fs45.promises.writeFile(pregenPath, JSON.stringify(pregenData, null, 2));
+        await fs44.promises.writeFile(pregenPath, JSON.stringify(pregenData, null, 2));
         out(`Pre-generated ${skillNames.length} skill compacts.`);
       }
     }
@@ -20860,7 +20777,7 @@ function cmdBashOutput(id, opts) {
     }
     let content;
     try {
-      const st = fs45.statSync(opts.file);
+      const st = fs44.statSync(opts.file);
       if (st.isFIFO() || st.isSocket()) {
         throw new CliError(`--file '${opts.file}' is a special file (FIFO or socket) \u2014 only regular files are supported`);
       }
@@ -20875,7 +20792,7 @@ function cmdBashOutput(id, opts) {
 `);
         }
       }
-      content = redactIfDotenv(opts.file, decodeSource(fs45.readFileSync(opts.file)));
+      content = redactIfDotenv(opts.file, decodeSource(fs44.readFileSync(opts.file)));
     } catch (e) {
       if (e instanceof CliError) throw e;
       throw new CliError(`cannot read file: ${opts.file}`);
@@ -20939,15 +20856,15 @@ function cmdMcpOutput(id, opts) {
     if (opts.file.includes("\0")) {
       throw new CliError("--file path contains a null byte");
     }
-    if (!fs45.existsSync(opts.file)) {
+    if (!fs44.existsSync(opts.file)) {
       throw new CliError(`file not found: ${opts.file}`);
     }
     try {
-      const st = fs45.statSync(opts.file);
+      const st = fs44.statSync(opts.file);
       if (st.isFIFO() || st.isSocket()) {
         throw new CliError(`--file '${opts.file}' is a special file (FIFO or socket) \u2014 only regular files are supported`);
       }
-      content = decodeSource(fs45.readFileSync(opts.file));
+      content = decodeSource(fs44.readFileSync(opts.file));
     } catch (e) {
       if (e instanceof CliError) throw e;
       throw new CliError(`cannot read file: ${opts.file}`);
@@ -21020,9 +20937,14 @@ async function cmdCompress(commandArgs, opts = {}) {
       process.exitCode = 1;
       return;
     }
-    const bashRunner = await import("./token-goat-chunk-KYV7E6ZJ.mjs");
+    const bashRunner = await import("./token-goat-chunk-BCN2YQC6.mjs");
     if (opts.compress === false) {
-      process.exitCode = bashRunner.runRaw(command, parseTimeout(opts.timeout, bashRunner.DEFAULT_TIMEOUT_SECONDS));
+      process.exitCode = bashRunner.runRaw(
+        command,
+        parseTimeout(opts.timeout, bashRunner.DEFAULT_TIMEOUT_SECONDS),
+        opts.native,
+        opts.shell
+      );
       return;
     }
     const maxTokens = opts.maxTokens !== void 0 ? requireNonNegativeInt("--max-tokens", opts.maxTokens) : 0;
@@ -21030,9 +20952,11 @@ async function cmdCompress(commandArgs, opts = {}) {
       filterName: opts.filter,
       timeout: parseTimeout(opts.timeout, bashRunner.DEFAULT_TIMEOUT_SECONDS),
       maxTokens,
+      ...opts.capHintB64 !== void 0 ? { capHint: Buffer.from(opts.capHintB64, "base64").toString("utf8") } : {},
       ...opts.profile !== void 0 ? { compressionProfile: opts.profile } : {},
       ...opts.quietSuccess === true ? { quietSuccess: true } : {},
-      ...opts.native === true ? { nativeShell: true } : {}
+      ...opts.native === true ? { nativeShell: true } : {},
+      ...opts.shell !== void 0 ? { shellType: opts.shell } : {}
     });
   } catch (e) {
     err(`token-goat: ${displaySafeText(extractErrorMessage(e))}`);
@@ -21196,7 +21120,7 @@ function buildProgram() {
       )
     );
   });
-  program2.command("semantic [query]").description("semantic search (falls back to full-text search)").option("-l, --limit <n>", "max results").option("-j, --json", "output as JSON").option("--grep <pattern>", "filter to hits whose file path matches this regex (literal substring if it is not valid regex); matched against the path as rendered").option("--exclude-tests", "hide hits whose file is a test file (opt-in; default output is unchanged)").option("--preflight", "run semantic embedding preflight check and exit").option("--warm", "warm up the embedding model session in memory").action(guard(cmdSemantic));
+  program2.command("semantic [query] [more...]").description("semantic search (falls back to full-text search); several queries run in one call, one headed block per query").option("-l, --limit <n>", "max results").option("-j, --json", "output as JSON").option("--grep <pattern>", "filter to hits whose file path matches this regex (literal substring if it is not valid regex); matched against the path as rendered").option("--exclude-tests", "hide hits whose file is a test file (opt-in; default output is unchanged)").option("--preflight", "run semantic embedding preflight check and exit").option("--warm", "warm up the embedding model session in memory").action(guard(cmdSemantic));
   const registerSymbolListing = (name, description, run2) => {
     program2.command(`${name} <file> [more...]`).description(description).option("-j, --json", "output as JSON").option("--min-lines <n>", "only show symbols at least N lines long").option("--grep <pattern>", "only show symbols whose name matches this regex (literal substring if it is not valid regex)").option("--force-refresh", "reparse file from disk before querying (ignore stale index)").option("--stats", "add per-symbol reference count and doc-coverage flag").action(
       (file, more, opts) => runExitText(
@@ -21252,7 +21176,7 @@ function buildProgram() {
   program2.command("bench").description("replay a corpus of captured command output through the compressors; prints the byte savings ratio and a fidelity check, and exits 1 when a must-keep line was dropped").option("--corpus <dir>", "corpus directory (default: tests/fixtures/bench, relative to the working directory)").option("--tsv <path>", "append one result row, keyed by the current commit, creating the file and its header if absent").option("--validate", "score the corpus with control filters instead: proves the ratio has a floor and the fidelity guard can actually fail").option("-j, --json", "output as JSON").action(
     (opts) => runExitText(
       () => runBenchCommand({
-        corpus: opts.corpus ?? path41.join("tests", "fixtures", "bench"),
+        corpus: opts.corpus ?? path40.join("tests", "fixtures", "bench"),
         ...opts.tsv !== void 0 ? { tsv: opts.tsv } : {},
         ...opts.validate === true ? { validate: true } : {},
         ...opts.json === true ? { json: true } : {}
@@ -21283,10 +21207,10 @@ function buildProgram() {
   registerAnalysisCommands(program2, guard);
   registerSessionCommands(program2, guard);
   program2.command("gdrive-sections <file-id>").description("fetch and list sections from a public Google Doc").option("--heading <name>", "get content of one named section").option("--fresh", "skip the on-disk cache and force a live fetch").action(guard(cmdGdriveSections));
-  program2.command("compress [command...]").alias("bash").alias("run").description("run a shell command (under a POSIX shell / bash) and emit a compressed view of its output").allowUnknownOption(true).option("-c, --cmd <command>", "the shell command to run, as one string (use / for paths across platforms)").option("--cmd-b64 <payload>", "the shell command as a base64-encoded string (preserves quotes, backslashes, and symbols across platforms)").option("-f, --filter <name>", "filter name (auto-detected from the command when omitted)").option("--timeout <seconds>", "wall-clock timeout in seconds (0 = built-in default)").option("--no-compress", "stream output raw without compression (debug the wrapper)").option("--profile <name>", "compression profile: aggressive | balanced | minimal").option("--max-tokens <n>", "post-compress token cap (0 = no cap)").option("-q, --quiet-success", "on exit code 0, emit only [tg: ok] summary and store full output for recall via bash-output").option("--native", "use native platform shell (e.g. cmd.exe on Windows) instead of bash, preserving Windows path backslashes").action(cmdCompress);
+  program2.command("compress [command...]").alias("bash").alias("run").description("run a shell command (under a POSIX shell / bash) and emit a compressed view of its output").allowUnknownOption(true).option("-c, --cmd <command>", "the shell command to run, as one string (use / for paths across platforms)").option("--cmd-b64 <payload>", "the shell command as a base64-encoded string (preserves quotes, backslashes, and symbols across platforms)").option("--shell <type>", "shell interpreter to run under: bash | pwsh | powershell | native").option("-f, --filter <name>", "filter name (auto-detected from the command when omitted)").option("--timeout <seconds>", "wall-clock timeout in seconds (0 = built-in default)").option("--no-compress", "stream output raw without compression (debug the wrapper)").option("--profile <name>", "compression profile: aggressive | balanced | minimal").option("--max-tokens <n>", "post-compress token cap (0 = no cap)").option("--cap-hint-b64 <payload>", "base64 text printed after the output when --max-tokens cut it (the Bash hook sets it to the narrower read command)").option("-q, --quiet-success", "on exit code 0, emit only [tg: ok] summary and store full output for recall via bash-output").option("--native", "use native platform shell (e.g. cmd.exe on Windows) instead of bash, preserving Windows path backslashes").action(cmdCompress);
   program2.command("upgrade").alias("update").description("check for updates and upgrade token-goat to the latest version").option("--check", "check whether an update is available without installing").option("-j, --json", "emit version check status as JSON").action(
     (opts) => guard(async () => {
-      const { cmdUpgrade } = await import("./token-goat-chunk-ORO4GOMA.mjs");
+      const { cmdUpgrade } = await import("./token-goat-chunk-4JJBFT7V.mjs");
       await cmdUpgrade(opts, () => cmdInstall({}));
     })()
   );
@@ -21303,8 +21227,19 @@ function buildProgram() {
         return;
       }
       if (cmd) {
+        const known = program2.commands.some((sub) => sub.name() === cmd || sub.aliases().includes(cmd));
+        if (!known) {
+          err(`token-goat: unknown command '${displaySafeText(cmd)}'. Run 'token-goat commands --grep <pattern>' to search the list.`);
+          process.exitCode = 1;
+          return;
+        }
         const argv = [process.argv[0] ?? "node", process.argv[1] ?? "token-goat", cmd, "--help"];
-        program2.parse(argv);
+        try {
+          program2.parse(argv);
+        } catch (e) {
+          const code = e.code;
+          if (code !== "commander.help" && code !== "commander.helpDisplayed") throw e;
+        }
       } else {
         out(generateCompactHelp());
       }