token-goat 2.9.28 → 2.9.29

package/dist/{token-goat-chunk-CBMY2FGI.mjs → token-goat-chunk-HUYUHODZ.mjs}

@@ -9,7 +9,7 @@ import {
   compressText,
   computeFileFingerprint,
   createHandoff,
-  didYouMean,
+  didYouMeanLines,
   emit,
   emitErr,
   enclosingSymbol,
@@ -93,13 +93,16 @@ import {
   runYamlQuery,
   runZipList,
   runZipRead,
+  statThroughHandle,
   symbolNamesInFile,
   upsertNote,
   warnIfFilesStale
-} from "./token-goat-chunk-VWZKZPSR.mjs";
+} from "./token-goat-chunk-NMBWLRHW.mjs";
+import "./token-goat-chunk-VZQEWRVH.mjs";
 import {
   compareSemver
-} from "./token-goat-chunk-5NNYIUGV.mjs";
+} from "./token-goat-chunk-2NNUA2LR.mjs";
+import "./token-goat-chunk-PQ53BSCF.mjs";
 import {
   MCP_DISABLE_NOTE,
   buildCopilotWasteReport,
@@ -107,10 +110,10 @@ import {
   findProjectSession,
   isCopilotTranscript,
   unusedMcpServers
-} from "./token-goat-chunk-JXK2HQXS.mjs";
+} from "./token-goat-chunk-C5YPNZKQ.mjs";
 import {
   buildResumePacket
-} from "./token-goat-chunk-XI2VFAV6.mjs";
+} from "./token-goat-chunk-RLP6J7WR.mjs";
 import {
   DEFAULT_RECONCILE_BUDGET_MS,
   HOOK_EVENTS,
@@ -129,7 +132,7 @@ import {
   runRecallCommand,
   runReconcile,
   storeWebOutput
-} from "./token-goat-chunk-VE27HPIF.mjs";
+} from "./token-goat-chunk-DNRPXHYH.mjs";
 import {
   HINT_CATEGORIES,
   MAX_FILES_SCANNED,
@@ -146,6 +149,7 @@ import {
   compactDoc,
   compactPathFor,
   confirmAndApply,
+  dataDirWriteRefusal,
   detectWalkMode,
   dirtyQueuePathFor,
   drainHeartbeatPathFor,
@@ -163,6 +167,7 @@ import {
   formatSymbolLocation,
   getDirtyPathsFor,
   getEmbeddingCoverage,
+  getHintSpendTotals,
   getHintStatsSummary,
   getHintStatsTotals,
   getParserFreshness,
@@ -201,28 +206,32 @@ import {
   visionTokensSavedByText,
   walkProject,
   writeCompact
-} from "./token-goat-chunk-6Z5ULNE5.mjs";
+} from "./token-goat-chunk-RTMVLHWX.mjs";
+import "./token-goat-chunk-L7H3U27L.mjs";
+import "./token-goat-chunk-RRNZMM3A.mjs";
 import {
   GEMINI_TOOL_NAME_MAP
-} from "./token-goat-chunk-IZXKVT4A.mjs";
+} from "./token-goat-chunk-E5TK5DNO.mjs";
 import {
   CompressedOutput,
   TOOL_FILTERS,
   ToolFilter,
   deliverCompressed,
   detectFromCommand
-} from "./token-goat-chunk-RJH64KQH.mjs";
+} from "./token-goat-chunk-ZER6EAXZ.mjs";
 import {
   buildWasteReport,
   extractResultText,
   findLatestTranscript,
   projectTranscriptsDir,
   safeStringify
-} from "./token-goat-chunk-6DQNNFJ6.mjs";
+} from "./token-goat-chunk-44BM7DDQ.mjs";
 import {
   COPILOT_CLI_HOOK_SCRIPT,
   HOOKS_SCRIPT_FILE,
+  LEGACY_HOOKS_SCRIPT_FILE,
   MATERIALIZE_SHRUNK_IMAGE_JS,
+  SHIM_TRY_SERVER,
   buildGuidanceBlock,
   buildGuidanceBody,
   bundledCliPath,
@@ -257,14 +266,14 @@ import {
   visualStudioProjectMcpPath,
   visualStudioSolutionVscodeMcpPath,
   visualStudioUserMcpPath
-} from "./token-goat-chunk-MMLMALWK.mjs";
+} from "./token-goat-chunk-EUSDXRXU.mjs";
 import {
   buildManifest,
   clearAll,
   loadEntries,
   setEntry,
   unsetEntry
-} from "./token-goat-chunk-L7SDVGBT.mjs";
+} from "./token-goat-chunk-G7IWXCFF.mjs";
 import {
   AGENT_SALT_MARKER,
   CONTEXT_AUTOCOMPACT_TOKENS,
@@ -288,37 +297,37 @@ import {
   skillOutputsDir,
   storeCompact,
   storeOutput
-} from "./token-goat-chunk-6CCQDAYY.mjs";
+} from "./token-goat-chunk-H5J3C56Q.mjs";
 import {
   getSessionFiles,
   getSessionId
-} from "./token-goat-chunk-GGLEE35R.mjs";
+} from "./token-goat-chunk-TDUT2CL6.mjs";
 import {
   claudeConfigDir,
   formatBytes,
   formatTokenEstimate
-} from "./token-goat-chunk-MAMQPC43.mjs";
+} from "./token-goat-chunk-ONXH6NZ5.mjs";
 import {
   BASH_OUTPUT_SUBDIR,
   getBashOutput,
   isRecallCacheType
-} from "./token-goat-chunk-HXNAC4ZF.mjs";
+} from "./token-goat-chunk-O6I2XU4P.mjs";
 import {
   DEFAULT_MAX_AGE_MS,
   DEFAULT_MAX_COUNT,
   listBlobs,
   pruneBlobs
-} from "./token-goat-chunk-BJBRGPBX.mjs";
+} from "./token-goat-chunk-D4ETHJD6.mjs";
 import {
   capJsonRows,
   estimateTokens,
   estimateTokensFromLength,
   trimToBudget
-} from "./token-goat-chunk-4JMWPWCS.mjs";
+} from "./token-goat-chunk-52NSDWYY.mjs";
 import {
   clipLongMatchLine,
   combineStreams
-} from "./token-goat-chunk-4RN64ZND.mjs";
+} from "./token-goat-chunk-2WOUYWLM.mjs";
 import {
   C,
   HOOK_STATS_RETENTION_DAYS,
@@ -340,19 +349,28 @@ import {
   statsHasHarnessColumn,
   stripAnsiEscapes,
   summarize
-} from "./token-goat-chunk-MVSWBNMD.mjs";
+} from "./token-goat-chunk-CIQ2FTY3.mjs";
+import {
+  queryServers,
+  serverStatuses
+} from "./token-goat-chunk-RQGGMPCR.mjs";
+import {
+  readMarker,
+  touchMarker
+} from "./token-goat-chunk-DPNLUJWB.mjs";
+import "./token-goat-chunk-SE6E4BKJ.mjs";
 import {
   docxOutline,
   docxTables,
   docxText,
   formatDocxTables
-} from "./token-goat-chunk-XKY4VKJ4.mjs";
+} from "./token-goat-chunk-UA5BKWWQ.mjs";
 import {
   pptxNotesText,
   pptxOutline,
   pptxSlideText,
   pptxTextGrep
-} from "./token-goat-chunk-Q4S3UQGO.mjs";
+} from "./token-goat-chunk-HNFZZHFW.mjs";
 import {
   formatXlsxColumns,
   formatXlsxRange,
@@ -361,11 +379,16 @@ import {
   querySheet,
   rangeSheet,
   xlsxColumns
-} from "./token-goat-chunk-RSS3TLXU.mjs";
+} from "./token-goat-chunk-PYSUADX4.mjs";
 import {
   formatCsvTable,
   parseWhereSpecs
-} from "./token-goat-chunk-YWSP6IU7.mjs";
+} from "./token-goat-chunk-DNSPXQXQ.mjs";
+import "./token-goat-chunk-3BTK54F3.mjs";
+import "./token-goat-chunk-UXSXQQIY.mjs";
+import "./token-goat-chunk-XTQAOTSO.mjs";
+import "./token-goat-chunk-AH6QILZM.mjs";
+import "./token-goat-chunk-PGTH2U4C.mjs";
 import {
   assetEmbedSha,
   deleteFileEmbeddings,
@@ -387,18 +410,21 @@ import {
   maxChunksEmbedSha,
   missingTreeSitterGrammarPackages,
   modelFilesPresent,
+  oversizeEmbedSha,
   parserFingerprintForLanguage,
   readSection,
   treeSitterCoreAvailable,
   treeSitterCoreLoadError
-} from "./token-goat-chunk-D5ICEPSB.mjs";
+} from "./token-goat-chunk-VMFWNHGR.mjs";
 import {
   getFileEntry,
   getProjectFileEntries,
+  projectScopeClause,
   querySymbols
-} from "./token-goat-chunk-HUDC5GS5.mjs";
+} from "./token-goat-chunk-435UQTKD.mjs";
 import {
   TREE_SITTER_LANGUAGES,
+  allowReadOnlyIndex,
   detectLanguage,
   detectLanguageOfFile,
   fenceFor,
@@ -407,14 +433,13 @@ import {
   matchGroovySlashy,
   nonTreeSitterLanguageCount,
   redactIfDotenv
-} from "./token-goat-chunk-M56BWPBN.mjs";
+} from "./token-goat-chunk-7CPMDFGB.mjs";
 import {
   CONFIG_KEY_ENV_OVERRIDES,
   PROJECT_LOCKED_KEYS,
   PROJECT_LOCKED_SECTIONS,
   SUPPORTED_OCR_LANG_CODES,
   defaultConfig,
-  envBool,
   fileIsAbsent,
   findProject,
   fingerprintContent,
@@ -423,8 +448,10 @@ import {
   getLastConfigParseError,
   getLastProjectConfigParseError,
   getProjectConfigInfo,
+  hookServerEnabled,
   invalidateConfigCache,
   isSupportedOcrLang,
+  isUnderSystemTemp,
   lastProjectConfigLockedKeys,
   loadConfig,
   loadPersistedConfig,
@@ -436,22 +463,21 @@ import {
   stringify,
   validateEnumField,
   validateNumericField
-} from "./token-goat-chunk-CC2PYJM7.mjs";
+} from "./token-goat-chunk-TGOXNAHW.mjs";
+import "./token-goat-chunk-XB5KKOCG.mjs";
+import "./token-goat-chunk-YZAAZU2S.mjs";
+import {
+  envBool
+} from "./token-goat-chunk-IVE6U7KV.mjs";
 import {
-  ENV_KEYS,
   LOCK_WAIT_MS_HARDENED,
-  PACKAGE_NAME,
-  VERSION,
   assertProjectScopeTarget,
   assertWriteInScope,
   atomicWriteBytes,
   atomicWriteText,
   backupFile,
-  canonicalize,
   cappedSourceBytesSaved,
-  configPath,
   countNoun,
-  dataDir,
   decodeSource,
   detectSourceEncoding,
   encodeSource,
@@ -459,19 +485,16 @@ import {
   ensureNewline,
   escapeRegExp,
   extractErrorMessage,
-  foldPath,
-  globalDbPath,
+  hasCreatedConfig,
   hookCommandFor,
   hookExecPartsFor,
   installSingleFilePlugin,
   isTestFile,
   isUnderBlockedRoot,
-  isWindows,
   pad,
   projectPathIsConsultable,
   projectScopeRoot,
   pushAll,
-  quoteShellPath,
   recordCreatedConfig,
   redactUrlQuery,
   removeCreatedBackups,
@@ -479,16 +502,13 @@ import {
   removeFileInScope,
   requireNonNegativeStrictInt,
   requirePositiveStrictInt,
-  resolveOnPath,
   runGit,
-  sleepSync,
   stripDelimitedBlock,
   stripLower,
   stripOwnHooksFromMap,
   stripStaleGroupHooks,
   takeCreatedConfig,
   toKB,
-  tokenGoatHome,
   uninstallSingleFilePlugin,
   upsertDelimitedBlock,
   withExtension,
@@ -497,7 +517,15 @@ import {
   withRetryOnLock,
   writeIfDifferent,
   writeJsonSettings
-} from "./token-goat-chunk-L45ZQRT7.mjs";
+} from "./token-goat-chunk-XYWPOSCN.mjs";
+import {
+  canonicalize,
+  foldPath,
+  isWindows,
+  quoteShellPath,
+  resolveOnPath,
+  sleepSync
+} from "./token-goat-chunk-TCQANXYC.mjs";
 import {
   UNTRUSTED_FILE_TAG,
   UNTRUSTED_TOOL_TAG,
@@ -512,9 +540,19 @@ import {
   resolveIndexPath,
   toDisplayPath
 } from "./token-goat-chunk-NMTKNYGF.mjs";
+import {
+  ENV_KEYS,
+  PACKAGE_NAME,
+  VERSION,
+  configPath,
+  dataDir,
+  globalDbPath,
+  tokenGoatHome
+} from "./token-goat-chunk-MELOKFDJ.mjs";
+import "./token-goat-chunk-Y4AFKTHK.mjs";
 import {
   compileGuardedRegex
-} from "./token-goat-chunk-GMOUBOX4.mjs";
+} from "./token-goat-chunk-JTKCQMQA.mjs";
 import {
   __export,
   init_define_import_meta_env
@@ -4010,6 +4048,18 @@ init_define_import_meta_env();
 
 // src/bridges/shim_common.ts
 init_define_import_meta_env();
+var SHIM_FILE = "token-goat-shim.cjs";
+var LEGACY_SHIM_FILE = "token-goat-shim.js";
+function legacyShimForwarder(noOp) {
+  const answer = noOp === "" ? "" : `
+  try { process.stdout.write('${noOp}') } catch {}`;
+  return `#!/usr/bin/env node
+// Forwards to token-goat-shim.cjs for hook commands wired before the shim was renamed.
+import('./token-goat-shim.cjs').catch(() => {${answer}
+  process.exitCode = 0
+});
+`;
+}
 var SHIM_REQUIRES = `const { spawnSync } = require('node:child_process')
 const path = require('node:path')
 const { pathToFileURL } = require('node:url')`;
@@ -4041,10 +4091,12 @@ var SHIM_TRY_IN_PROCESS = `// Attempts the in-process hook call: import()s dist/
 async function tryInProcess(entryPath, eventName, input, harnessWaitMs) {
   if (!entryPath) return undefined
   try {
+    const payload = JSON.parse(input)
+    const served = await tryServer(entryPath, eventName, input, harnessWaitMs)
+    if (served !== undefined) return served
     const hookLibPath = path.join(path.dirname(entryPath), 'token-goat-hook.mjs')
     if (!require('node:fs').existsSync(hookLibPath)) return undefined
     const mod = await import(pathToFileURL(hookLibPath).href)
-    const payload = JSON.parse(input)
     return await mod.relayInProcess(eventName, payload, harnessWaitMs)
   } catch {
     return undefined
@@ -4130,6 +4182,8 @@ ${SHIM_REQUIRES}
 
 ${SHIM_VALID_HOOK_EVENTS}
 
+${SHIM_TRY_SERVER}
+
 ${SHIM_TRY_IN_PROCESS}
 
 ${SHIM_MAX_BUFFER_CONST}
@@ -4280,21 +4334,46 @@ function execFormSupportedForVersionOutput(stdout) {
 function expectedHookEntryFor(scriptPath, event) {
   return claudeExecFormHooksSupported() ? hookExecPartsFor(scriptPath, event) : { command: hookCommandFor(scriptPath, event) };
 }
+function realPathOrNull(p) {
+  if (!path3.isAbsolute(p)) return null;
+  try {
+    return fs3.realpathSync.native(p);
+  } catch {
+    return null;
+  }
+}
+function sameHookWord(a, b) {
+  if (a === b) return true;
+  const realA = realPathOrNull(a);
+  return realA !== null && realA === realPathOrNull(b);
+}
+function stringFormHookWords(command) {
+  const words = [];
+  for (const m of command.matchAll(/"((?:\\.|[^"\\])*)"|(\S+)/g)) {
+    const quoted = m[1];
+    words.push(quoted === void 0 ? m[2] : process.platform === "win32" ? quoted : quoted.replace(/\\(.)/g, "$1"));
+  }
+  return words;
+}
 function hookEntryMatches(command, args, expected) {
-  if (command !== expected.command) return false;
-  const a = args ?? [];
-  const b = expected.args ?? [];
-  return a.length === b.length && a.every((v, i) => v === b[i]);
+  const execForm = expected.args !== void 0;
+  if (!execForm && args !== void 0 && args.length > 0) return false;
+  const a = execForm ? [command, ...args ?? []] : stringFormHookWords(command);
+  const b = execForm ? [expected.command, ...expected.args] : stringFormHookWords(expected.command);
+  return a.length === b.length && a.every((v, i) => sameHookWord(v, b[i]));
 }
 function claudeHookScriptPath() {
-  return path3.join(claudeConfigDir(), "hooks", "token-goat-shim.js");
+  return path3.join(claudeConfigDir(), "hooks", SHIM_FILE);
+}
+function claudeLegacyHookScriptPath() {
+  return path3.join(claudeConfigDir(), "hooks", LEGACY_SHIM_FILE);
 }
-function anyScopeReferencesShim(scriptPath, currentScope, alreadyStripped) {
+function anyScopeReferencesShim(scriptPaths, currentScope, alreadyStripped) {
   const referencesIn = (map) => {
     for (const groups of Object.values(map ?? {})) {
       for (const group of groups) {
         for (const h of group.hooks ?? []) {
-          if (h.command.includes(scriptPath) || (h.args ?? []).some((a) => a.includes(scriptPath))) return true;
+          if (scriptPaths.some((p) => h.command.includes(p) || (h.args ?? []).some((a) => a.includes(p)))) return true;
         }
       }
     }
@@ -4363,7 +4442,9 @@ function installHooksScoped(scope) {
   const scriptPath = claudeHookScriptPath();
   const scriptChanged = withInstallScope(void 0, () => {
     ensureDirSync(path3.dirname(scriptPath));
-    return writeIfDifferent(scriptPath, CLAUDECODE_HOOK_SCRIPT);
+    const forwarderChanged = writeIfDifferent(claudeLegacyHookScriptPath(), legacyShimForwarder("{}"));
+    const scriptChanged2 = writeIfDifferent(scriptPath, CLAUDECODE_HOOK_SCRIPT);
+    return scriptChanged2 || forwarderChanged;
   });
   let settingsChanged = false;
   for (const [eventKey, eventArg] of HOOK_EVENT_MAP) {
@@ -4430,8 +4511,8 @@ function uninstallHooksScoped(scope) {
   const removed = stripOwnHooksFromMap(hooks, isTokenGoatHookCommand);
   const scriptPath = claudeHookScriptPath();
   let removedScript = false;
-  if (!anyScopeReferencesShim(scriptPath, scope, hooks)) {
-    removedScript = withInstallScope(void 0, () => removeFileInScope(scriptPath));
+  if (!anyScopeReferencesShim([scriptPath, claudeLegacyHookScriptPath()], scope, hooks)) {
+    removedScript = withInstallScope(void 0, () => [scriptPath, claudeLegacyHookScriptPath()].map((p2) => removeFileInScope(p2)).some(Boolean));
   }
   if (!removed) return removedScript;
   if (Object.keys(hooks).length === 0) {
@@ -4610,6 +4691,8 @@ function stripTg(value) {
   return value
 }
 
+${SHIM_TRY_SERVER}
+
 ${SHIM_TRY_IN_PROCESS}
 
 ${SHIM_MAX_BUFFER_CONST}
@@ -4729,7 +4812,10 @@ function codexAgentsPath() {
   return path4.join(os2.homedir(), ".codex", "AGENTS.md");
 }
 function codexHookScriptPath() {
-  return path4.join(os2.homedir(), ".codex", "hooks", "token-goat-shim.js");
+  return path4.join(os2.homedir(), ".codex", "hooks", SHIM_FILE);
+}
+function codexLegacyHookScriptPath() {
+  return path4.join(os2.homedir(), ".codex", "hooks", LEGACY_SHIM_FILE);
 }
 function readCodexConfig(p, opts = {}) {
   let raw;
@@ -4786,6 +4872,7 @@ function installCodex() {
   const scriptPath = codexHookScriptPath();
   ensureDirSync(path4.dirname(scriptPath));
   atomicWriteText(scriptPath, CODEX_HOOK_SCRIPT);
+  atomicWriteText(codexLegacyHookScriptPath(), legacyShimForwarder("{}"));
   const config = readCodexConfig(configPath2, { strict: true });
   const hooks = config.hooks ?? {};
   let hooksChanged = false;
@@ -4939,10 +5026,12 @@ function uninstallCodex() {
   if (stripAgentsBlock(agentsPath)) {
     removedAny = true;
   }
-  try {
-    fs4.unlinkSync(scriptPath);
-    removedAny = true;
-  } catch {
+  for (const p of [scriptPath, codexLegacyHookScriptPath()]) {
+    try {
+      fs4.unlinkSync(p);
+      removedAny = true;
+    } catch {
+    }
   }
   removeCreatedBackups(configPath2);
   return removedAny;
@@ -5320,6 +5409,8 @@ function toKimi(parsed) {
   return ''
 }
 
+${SHIM_TRY_SERVER}
+
 ${SHIM_TRY_IN_PROCESS}
 
 ${SHIM_MAX_BUFFER_CONST}
@@ -5393,7 +5484,10 @@ function kimiAgentsPath() {
   return path7.join(kimiHome(), "AGENTS.md");
 }
 function kimiHookScriptPath() {
-  return path7.join(kimiHome(), "hooks", "token-goat-shim.js");
+  return path7.join(kimiHome(), "hooks", SHIM_FILE);
+}
+function kimiLegacyHookScriptPath() {
+  return path7.join(kimiHome(), "hooks", LEGACY_SHIM_FILE);
 }
 function kimiSkillDir() {
   return path7.join(kimiHome(), "skills", "token-goat");
@@ -5463,6 +5557,7 @@ function installKimi() {
   const scriptPath = kimiHookScriptPath();
   ensureDirSync(path7.dirname(scriptPath));
   atomicWriteText(scriptPath, KIMI_HOOK_SCRIPT);
+  atomicWriteText(kimiLegacyHookScriptPath(), legacyShimForwarder(""));
   const config = readKimiConfig(configPath2, { strict: true });
   const existing = Array.isArray(config.hooks) ? config.hooks : [];
   const desired = KIMI_HOOK_EVENTS.map((event) => ({
@@ -5514,12 +5609,14 @@ function uninstallKimi() {
     }
   } catch {
   }
-  try {
-    if (fs7.existsSync(kimiHookScriptPath())) {
-      fs7.rmSync(kimiHookScriptPath(), { force: true });
-      removed = true;
+  for (const p of [kimiHookScriptPath(), kimiLegacyHookScriptPath()]) {
+    try {
+      if (fs7.existsSync(p)) {
+        fs7.rmSync(p, { force: true });
+        removed = true;
+      }
+    } catch {
     }
-  } catch {
   }
   removeCreatedBackups(configPath2);
   return removed;
@@ -5613,7 +5710,7 @@ function resolveEntryPath(): string | undefined {
 // undefined (triggering the spawnSync fallback below) when entryPath is absent, the
 // sibling file doesn't exist (an install predating this file), or anything else goes
 // wrong -- this must never throw.
-type RelayInProcessFn = (event: string, payload: unknown) => Promise<string>;
+type RelayInProcessFn = (event: string, payload: unknown, harnessWaitMs?: number, opts?: { elapsedMs?: () => number }) => Promise<string>;
 let cachedRelayInProcess: RelayInProcessFn | undefined;
 async function resolveRelayInProcess(): Promise<RelayInProcessFn | undefined> {
   if (cachedRelayInProcess) return cachedRelayInProcess;
@@ -5681,11 +5778,13 @@ function callHookViaSpawn(event: string, payload: Record<string, unknown>): Reco
 // its own fail-open null rather than being force-killed by pi's own hook timeout
 // budget, ~5000ms) when the in-process path is unavailable or throws.
 async function callHook(event: string, payload: Record<string, unknown>): Promise<Record<string, unknown> | null> {
+  // Timed from here, not from process start: this host lives far longer than one call, so the hook library's default clock (process age) would record the host's uptime as this call's duration.
+  const start = performance.now();
   const relay = await resolveRelayInProcess();
   if (relay) {
     try {
       process.env.TOKEN_GOAT_HARNESS_OVERRIDE = "pi";
-      const out = await relay(event, payload);
+      const out = await relay(event, payload, undefined, { elapsedMs: () => performance.now() - start });
       const trimmed = out?.trim();
       if (!trimmed) return null;
       return JSON.parse(trimmed) as Record<string, unknown>;
@@ -6047,10 +6146,12 @@ function callHookViaSpawn(event, payload) {
 // its own fail-open null rather than being force-killed by the host's own hook timeout
 // budget, ~5000ms) when the in-process path is unavailable or throws.
 async function callHook(event, payload) {
+  // Timed from here, not from process start: this host lives far longer than one call, so the hook library's default clock (process age) would record the host's uptime as this call's duration.
+  const start = performance.now();
   const relay = await resolveRelayInProcess();
   if (relay) {
     try {
-      const out = await relay(event, payload);
+      const out = await relay(event, payload, undefined, { elapsedMs: () => performance.now() - start });
       const trimmed = out ? out.trim() : "";
       if (!trimmed) return null;
       return JSON.parse(trimmed);
@@ -6580,6 +6681,8 @@ function allowResponse(eventName) {
   return eventName === 'pre_tool_use' ? '{"decision":"allow"}' : '{}'
 }
 
+${SHIM_TRY_SERVER}
+
 ${SHIM_TRY_IN_PROCESS}
 
 ${SHIM_MAX_BUFFER_CONST}
@@ -6673,7 +6776,10 @@ function grokConfigPath() {
   return path11.join(grokHooksDir(), "token-goat.json");
 }
 function grokHookScriptPath() {
-  return path11.join(grokHooksDir(), "token-goat-shim.js");
+  return path11.join(grokHooksDir(), SHIM_FILE);
+}
+function grokLegacyHookScriptPath() {
+  return path11.join(grokHooksDir(), LEGACY_SHIM_FILE);
 }
 function buildConfig(scriptPath) {
   const hooks = {};
@@ -6687,11 +6793,12 @@ function buildConfig(scriptPath) {
 function installGrok() {
   const configPath2 = grokConfigPath();
   const scriptPath = grokHookScriptPath();
+  const forwarderChanged = writeIfDifferent(grokLegacyHookScriptPath(), legacyShimForwarder("{}"));
   const scriptChanged = writeIfDifferent(scriptPath, GROK_HOOK_SCRIPT);
   const desiredText = `${JSON.stringify(buildConfig(scriptPath), null, 2)}
 `;
   const configChanged = writeIfDifferent(configPath2, desiredText, true);
-  return { configPath: configPath2, hookScriptPath: scriptPath, alreadyInstalled: !scriptChanged && !configChanged };
+  return { configPath: configPath2, hookScriptPath: scriptPath, alreadyInstalled: !scriptChanged && !forwarderChanged && !configChanged };
 }
 function uninstallGrok() {
   const configPath2 = grokConfigPath();
@@ -6702,10 +6809,12 @@ function uninstallGrok() {
     removedAny = true;
   } catch {
   }
-  try {
-    fs11.unlinkSync(scriptPath);
-    removedAny = true;
-  } catch {
+  for (const p of [scriptPath, grokLegacyHookScriptPath()]) {
+    try {
+      fs11.unlinkSync(p);
+      removedAny = true;
+    } catch {
+    }
   }
   removeCreatedBackups(configPath2);
   return removedAny;
@@ -7193,6 +7302,9 @@ init_define_import_meta_env();
 import { spawnSync as spawnSync2 } from "node:child_process";
 import * as fs15 from "node:fs";
 import * as path15 from "node:path";
+var ProcessListTimeout = class extends Error {
+};
+var PROCESS_LIST_TIMEOUT_MS = 2e4;
 var INTERPRETER_BASENAMES = /* @__PURE__ */ new Set(["node.exe", "python.exe", "python3.exe", "pwsh.exe", "powershell.exe", "cmd.exe"]);
 function describeProcess(commandLine) {
   for (const m of commandLine.matchAll(/[^\s"]+\.(?:js|mjs|cjs|ts|py|exe)\b/gi)) {
@@ -7203,11 +7315,14 @@ function describeProcess(commandLine) {
   return trimmed.length > 0 ? trimmed.length > 60 ? trimmed.slice(0, 60) + "\u2026" : trimmed : "(no command line)";
 }
 function checkMcpProcessHealth(processes) {
-  if (processes === null) {
+  if (!Array.isArray(processes)) {
+    const failure = processes;
+    const query = `Get-CimInstance Win32_Process -Filter "Name='node.exe'" | Select-Object ProcessId,ParentProcessId,CommandLine`;
+    const advice = failure.transient === true ? `Run doctor again once the machine is less busy, or list them yourself with: ${query}` : `List them yourself with: ${query}`;
     return {
       name: "MCP process health",
       status: "warn",
-      message: "could not read the process list (PowerShell did not answer), so duplicate MCP launchers and orphaned Node processes were not checked"
+      message: `could not read the process list (${displaySafeText(failure.reason)}), so duplicate MCP launchers and orphaned Node processes were not checked. ${advice}`
     };
   }
   const byPid = new Set(processes.map((process3) => process3.processId));
@@ -7240,19 +7355,37 @@ function runProcessListCommand() {
   const shell = path15.join(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
   const result = spawnSync2(fs15.existsSync(shell) ? shell : "powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", command], {
     encoding: "utf8",
-    timeout: 2e4,
+    timeout: PROCESS_LIST_TIMEOUT_MS,
     maxBuffer: 10 * 1024 * 1024,
     windowsHide: true
   });
-  if (result.error !== void 0) throw result.error;
-  return result.stdout ?? "";
+  return processListOutput(result);
+}
+function processListOutput(result) {
+  if (result.error !== void 0) {
+    const code = result.error.code;
+    if (code === "ETIMEDOUT") throw new ProcessListTimeout(`PowerShell did not finish within ${PROCESS_LIST_TIMEOUT_MS / 1e3}s`);
+    if (code === "ENOENT") throw new Error("powershell.exe was not found");
+    throw result.error;
+  }
+  const stdout = result.stdout ?? "";
+  if (result.status !== 0 && stdout.trim() === "") {
+    const firstLine2 = (result.stderr ?? "").split(/\r?\n/).map((line) => line.trim()).find((line) => line !== "");
+    throw new Error(`PowerShell exited with code ${String(result.status)}${firstLine2 !== void 0 ? `: ${firstLine2}` : ""}`);
+  }
+  return stdout;
 }
 function readWindowsProcesses(runCommand = runProcessListCommand) {
   if (process.platform !== "win32") return [];
   try {
     const output = runCommand().trim();
     if (output === "") return [];
-    const parsed = JSON.parse(output);
+    let parsed;
+    try {
+      parsed = JSON.parse(output);
+    } catch {
+      return { reason: "PowerShell printed something other than the JSON process list" };
+    }
     const rows = Array.isArray(parsed) ? parsed : [parsed];
     return rows.flatMap((row) => {
       if (typeof row !== "object" || row === null) return [];
@@ -7265,8 +7398,9 @@ function readWindowsProcesses(runCommand = runProcessListCommand) {
         commandLine: typeof value["CommandLine"] === "string" ? value["CommandLine"] : ""
       }];
     });
-  } catch {
-    return null;
+  } catch (e) {
+    const reason = e instanceof Error ? e.message : String(e);
+    return e instanceof ProcessListTimeout ? { reason, transient: true } : { reason };
   }
 }
 function checkWorkerRunning(dataDir2) {
@@ -7598,35 +7732,31 @@ function freelistBytes(header) {
   const rawPageSize = header.readUInt16BE(16);
   return (rawPageSize === 1 ? 65536 : rawPageSize) * header.readUInt32BE(36);
 }
-var CATEGORY_COLUMNS = [
-  { name: "symbol bodies", table: "symbols", column: "body", command: "'token-goat reclaim-index --rebuild' drops and re-derives them under the current parser's size cap" },
-  { name: "refs", table: "refs", column: "context", command: "'token-goat reclaim-index --rebuild' drops and re-derives them" },
-  { name: "chunk text", table: "chunks", column: "text", command: "'token-goat reclaim-index --rebuild' drops and re-derives them" },
-  { name: "stats detail", table: "stats", column: "detail", command: "ages out on its own (180-day retention) -- no manual command needed" }
+var STORAGE_GROUPS = [
+  { name: "refs", owns: /^refs$/, command: "grows with the files indexed, so it shrinks only when files leave the index" },
+  { name: "symbols and their search index", owns: /^symbols(_fts\w*)?$/, command: "grows with the files indexed, so it shrinks only when files leave the index" },
+  {
+    name: "embeddings",
+    owns: /^(chunks|chunk_vectors\w*)$/,
+    command: "these back 'semantic'; to drop them, set indexing.embeddings_enabled = false and indexing.auto_reclaim_embeddings = true, then run 'token-goat doctor --repair'"
+  },
+  { name: "usage stats", owns: /^(stats\w*|hint_\w+|unmapped_tools)$/, command: "ages out on its own (180-day retention)" },
+  { name: "recall cache", owns: /^cache_recall\w*$/, command: "ages out on its own" }
 ];
-var VECTOR_BYTES_PER_ROW = 384 * 4;
+var OWNER_BYTES_SQL = `SELECT COALESCE(m.tbl_name, s.name) AS owner, SUM(s.pgsize) AS bytes FROM dbstat AS s LEFT JOIN sqlite_master AS m ON m.name = s.name WHERE s.aggregate = 1 GROUP BY owner`;
 function dbCategoryBreakdown(dbPath) {
-  const db = getDb(dbPath);
-  const shares = [];
-  for (const cat of CATEGORY_COLUMNS) {
-    try {
-      const row = db.prepare(`SELECT COALESCE(SUM(LENGTH(${cat.column})), 0) as bytes FROM ${cat.table}`).get();
-      if (row.bytes > 0) shares.push({ name: cat.name, bytes: row.bytes, command: cat.command });
-    } catch {
-    }
-  }
+  let rows;
   try {
-    const row = db.prepare("SELECT COUNT(*) as n FROM chunk_vectors").get();
-    if (row.n > 0) {
-      shares.push({
-        name: "embedding vectors",
-        bytes: row.n * VECTOR_BYTES_PER_ROW,
-        command: "'token-goat reclaim-index --rebuild' drops them (set indexing.embeddings_enabled = false first so they don't regrow)"
-      });
-    }
+    rows = getDb(dbPath).prepare(OWNER_BYTES_SQL).all();
   } catch {
+    return [];
   }
-  return shares.sort((a, b) => b.bytes - a.bytes);
+  const shares = STORAGE_GROUPS.map((group) => ({
+    name: group.name,
+    bytes: rows.filter((r) => group.owns.test(r.owner)).reduce((sum, r) => sum + r.bytes, 0),
+    command: group.command
+  }));
+  return shares.filter((share) => share.bytes > 0).sort((a, b) => b.bytes - a.bytes);
 }
 function oversizeDbMessage(dbPath, sizeBytes, freeBytes, tempRows, categories = [], topConsumers = [], thresholdMb = 1500, autoReclaimEmbeddings = false) {
   const mb = (bytes) => Math.round(bytes / (1024 * 1024));
@@ -7637,15 +7767,18 @@ function oversizeDbMessage(dbPath, sizeBytes, freeBytes, tempRows, categories =
     advice.push(`'token-goat doctor --repair' will automatically reclaim embedding vectors and compact global.db`);
   }
   const head = `global.db is ${mb(sizeBytes)} MB at ${displaySafeText(dbPath)} (larger than threshold of ${thresholdMb} MB). `;
-  const totalCategoryBytes = categories.reduce((sum, c) => sum + c.bytes, 0);
+  const listed = categories.slice(0, 3);
+  const totalCategoryBytes = listed.reduce((sum, c) => sum + c.bytes, 0);
   const unmeasuredBytes = sizeBytes - totalCategoryBytes;
-  const breakdown = totalCategoryBytes > 0 && sizeBytes > 0 ? ` Where it went: ${categories.slice(0, 3).map((c) => `${c.name} ${mb(c.bytes)} MB (${Math.round(c.bytes / sizeBytes * 100)}%) -- ${c.command}`).join("; ")}.${unmeasuredBytes >= sizeBytes / 20 ? ` The other ${mb(unmeasuredBytes)} MB is row overhead and indexes, which these commands do not measure.` : ""}` : "";
+  const breakdown = totalCategoryBytes > 0 && sizeBytes > 0 ? ` Where it went: ${listed.map((c) => `${c.name} ${mb(c.bytes)} MB (${Math.round(c.bytes / sizeBytes * 100)}%) -- ${c.command}`).join("; ")}.${unmeasuredBytes >= sizeBytes / 20 ? ` The other ${mb(unmeasuredBytes)} MB is smaller tables and free pages.` : ""}` : "";
   let base = advice.length > 0 ? `${head}${advice.join("; ")}.${breakdown}` : `${head}Only ${mb(freeBytes)} MB of it is free pages and none of it is temp-dir scratch, so it is live index data that neither 'reclaim-index' nor 'project prune' will shrink.${breakdown}`;
-  if (topConsumers.length > 0) {
+  const [top] = topConsumers;
+  if (top !== void 0) {
     const list = topConsumers.map((c) => `${path17.basename(c.root) || c.root} (${countNoun(c.fileCount, "file")})`).join(", ");
     base += ` Top index consumers: ${list}.`;
+    base += ` To shrink it, take out a project you do not need surgical reads in: 'token-goat project exclude "${displaySafeText(top.root)}"' removes its rows, then 'token-goat reclaim-index' returns the space.`;
   }
-  return base;
+  return `${base} If this size is expected, raise indexing.max_db_size_mb above ${Math.ceil(sizeBytes / (1024 * 1024))}.`;
 }
 function checkDbExists(dataDir2, maxDbSizeMb) {
   const dbPath = path17.join(dataDir2, "global.db");
@@ -7749,6 +7882,29 @@ function checkSymbolCount(dbPath, rootDir) {
   }
 }
 var EMBED_COVERAGE_WARN_FRACTION = 0.25;
+function unembeddedReasons(dbPath, rootDir, symbolOnlyKb, maxChunks) {
+  const db = getDb(dbPath);
+  const scope = rootDir === void 0 ? null : projectScopeClause("path");
+  const rows = db.prepare(`SELECT path, sha, embed_sha FROM files${scope === null ? "" : ` WHERE ${scope.clause}`}`).all(...scope === null || rootDir === void 0 ? [] : scope.params(rootDir));
+  let owed = 0;
+  let overSizeCap = 0;
+  for (const row of rows) {
+    if (isUnderSystemTemp(row.path)) continue;
+    if (row.embed_sha === oversizeEmbedSha(row.sha, symbolOnlyKb)) overSizeCap += 1;
+    else if (!isEmbedFresh(row.embed_sha ?? void 0, row.sha, true, true, symbolOnlyKb, maxChunks)) owed += 1;
+  }
+  return { owed, overSizeCap };
+}
+function unembeddedReasonText(reasons, sizeKb) {
+  let text = "";
+  if (reasons.owed > 0) {
+    text += ` ${countNoun(reasons.owed, "file")} ${reasons.owed === 1 ? "is" : "are"} still owed an embed: the worker embeds them while it is idle, or run 'token-goat index' in the project to embed them now.`;
+  }
+  if (reasons.overSizeCap > 0) {
+    text += ` ${countNoun(reasons.overSizeCap, "file")} ${reasons.overSizeCap === 1 ? "is" : "are"} over indexing.large_file_symbol_only_kb (currently ${sizeKb} KB) and indexed for symbols only; raise it with 'token-goat config set indexing.large_file_symbol_only_kb <KB>' and the next 'token-goat index' embeds them.`;
+  }
+  return text;
+}
 function checkEmbeddingCoverage(dbPath, rootDir) {
   if (!fs18.existsSync(dbPath)) {
     return { name: "Embedding coverage", status: "ok", message: "no database yet" };
@@ -7768,7 +7924,7 @@ function checkEmbeddingCoverage(dbPath, rootDir) {
       return {
         name: "Embedding coverage",
         status: "warn",
-        message: `only ${embeddedFiles} of ${indexedFiles} indexed file(s) (${pct3}%) have embeddings \u2014 'semantic' searches those files only, and reports finding nothing in the same words it uses after searching everything. Files over indexing.large_file_symbol_only_kb (currently ${sizeKb} KB) are indexed for symbols only and are the usual reason; raise it with 'token-goat config set indexing.large_file_symbol_only_kb <KB>' and re-embed with 'token-goat index --force' to widen coverage. Exact symbol lookups are unaffected`
+        message: `only ${embeddedFiles} of ${indexedFiles} indexed file(s) (${pct3}%) have embeddings, so 'semantic' searches those files only, and reports finding nothing in the same words it uses after searching everything.` + unembeddedReasonText(unembeddedReasons(dbPath, rootDir, sizeKb, cfg.indexing.max_chunks_per_file), sizeKb) + ` Exact symbol lookups are unaffected`
       };
     }
     return {
@@ -8022,16 +8178,33 @@ function checkDiskSpace(dataDir2) {
   }
   return { name: "Disk Space", status: "warn", message: "disk space check unavailable on this platform" };
 }
-function checkCopilotCli(configPath2, scriptPath) {
-  if (!fs18.existsSync(configPath2) || !fs18.existsSync(scriptPath)) {
+function checkCopilotCli(configPath2, scriptPath, scope = "user") {
+  if (!fs18.existsSync(configPath2)) {
     return null;
   }
+  const name = scope === "project" ? "Copilot CLI (project)" : "Copilot CLI";
+  const { install, harness } = copilotHooksRecovery(path17.dirname(configPath2), scope);
+  if (scope === "project" && !hasCreatedConfig(configPath2)) {
+    return {
+      name,
+      status: "warn",
+      message: `hook config at ${configPath2} was not written by token-goat on this machine, so doctor does not run the command it names. If these hooks are yours, run "${install}" to rewrite them here.`
+    };
+  }
+  if (!fs18.existsSync(scriptPath)) {
+    if (!fs18.existsSync(path17.join(path17.dirname(scriptPath), LEGACY_HOOKS_SCRIPT_FILE))) return null;
+    return {
+      name,
+      status: "warn",
+      message: `hooks at ${path17.dirname(scriptPath)} still run ${LEGACY_HOOKS_SCRIPT_FILE} from an older token-goat build, which Node loads as an ES module under any package.json that says "type": "module" and then fails every tool call. Recovery: run "${install}", then fully restart ${harness}.`
+    };
+  }
   let config;
   try {
     config = JSON.parse(fs18.readFileSync(configPath2, "utf-8"));
   } catch (err2) {
     return {
-      name: "Copilot CLI",
+      name,
       status: "fail",
       message: `hook config at ${configPath2} is not valid JSON: ${extractErrorMessage(err2, "unknown error")}`
     };
@@ -8039,17 +8212,17 @@ function checkCopilotCli(configPath2, scriptPath) {
   const preToolUseCommand = config.hooks?.["preToolUse"]?.[0]?.command;
   if (typeof preToolUseCommand !== "string" || preToolUseCommand === "") {
     return {
-      name: "Copilot CLI",
+      name,
       status: "fail",
-      message: `hook config at ${configPath2} has no preToolUse entry; run: token-goat install --copilot`
+      message: `hook config at ${configPath2} has no preToolUse entry; run: ${install}`
     };
   }
   const bakedExecPath = /^"([^"]+)"/.exec(preToolUseCommand)?.[1];
   if (bakedExecPath !== void 0 && !fs18.existsSync(bakedExecPath)) {
     return {
-      name: "Copilot CLI",
+      name,
       status: "fail",
-      message: `hook points at a node binary that no longer exists (${bakedExecPath}) -- likely stale after an nvm/fnm/volta node upgrade. Recovery: run "token-goat install --copilot", then fully restart Copilot CLI (renaming/reinstalling the hook has no effect on an already-running session -- Copilot caches hook configs at startup).`
+      message: `hook points at a node binary that no longer exists (${bakedExecPath}) -- likely stale after an nvm/fnm/volta node upgrade. Recovery: run "${install}", then fully restart ${harness} (renaming/reinstalling the hook has no effect on an already-running session -- hook configs are cached at startup).`
     };
   }
   const synthetic = JSON.stringify({
@@ -8067,31 +8240,38 @@ function checkCopilotCli(configPath2, scriptPath) {
   });
   if (res.error) {
     return {
-      name: "Copilot CLI",
+      name,
       status: "fail",
-      message: `hook failed to launch: ${extractErrorMessage(res.error, "unknown error")}. Recovery: run "token-goat install --copilot", then fully restart Copilot CLI.`
+      message: `hook failed to launch: ${extractErrorMessage(res.error, "unknown error")}. Recovery: run "${install}", then fully restart ${harness}.`
     };
   }
   if (res.status !== 0) {
     return {
-      name: "Copilot CLI",
+      name,
       status: "fail",
-      message: `hook exited with status ${res.status} -- Copilot's preToolUse fails closed on a non-zero exit and denies every tool call for the rest of the session. Recovery: run "token-goat install --copilot", then fully restart Copilot CLI (a live session won't pick up the fix).`
+      message: `hook exited with status ${res.status} -- Copilot's preToolUse fails closed on a non-zero exit and denies every tool call for the rest of the session. Recovery: run "${install}", then fully restart ${harness} (a live session won't pick up the fix).`
     };
   }
   try {
     JSON.parse(res.stdout ?? "");
   } catch {
     return {
-      name: "Copilot CLI",
+      name,
       status: "fail",
-      message: 'hook did not return valid JSON -- Copilot treats this as a hook error and denies every tool call. Recovery: run "token-goat install --copilot", then fully restart Copilot CLI.'
+      message: `hook did not return valid JSON -- Copilot treats this as a hook error and denies every tool call. Recovery: run "${install}", then fully restart ${harness}.`
     };
   }
   if (!shimIsCurrent(scriptPath, COPILOT_CLI_HOOK_SCRIPT)) {
-    return { name: "Copilot CLI", status: "warn", message: staleShimMessage(scriptPath, "Copilot", "token-goat install --copilot") + ", then fully restart Copilot CLI." };
+    return { name, status: "warn", message: staleShimMessage(scriptPath, "Copilot", install) + `, then fully restart ${harness}.` };
+  }
+  return { name, status: "ok", message: "preToolUse hook invokes cleanly and returns valid JSON" };
+}
+function copilotHooksRecovery(hooksDir, scope) {
+  const owners = readCopilotHooksOwners(hooksDir);
+  if (!owners.has("copilot") && owners.has("vscode")) {
+    return { install: scope === "project" ? "token-goat install --vscode" : "token-goat install --vscode --user", harness: "VS Code" };
   }
-  return { name: "Copilot CLI", status: "ok", message: "preToolUse hook invokes cleanly and returns valid JSON" };
+  return { install: scope === "project" ? "token-goat install --copilot --local" : "token-goat install --copilot", harness: "Copilot CLI" };
 }
 function shimIsCurrent(scriptPath, expected) {
   return fs18.readFileSync(scriptPath, "utf-8").replace(/\r\n/g, "\n") === expected.replace(/\r\n/g, "\n");
@@ -8100,7 +8280,14 @@ function staleShimMessage(scriptPath, harness, reinstall) {
   return `hook shim at ${scriptPath} was written by an older token-goat build, so fixes to it since then are not reaching ${harness}. Recovery: run "${reinstall}"`;
 }
 function checkHookShim(name, scriptPath, expected, reinstall) {
-  if (!fs18.existsSync(scriptPath)) return null;
+  if (!fs18.existsSync(scriptPath)) {
+    if (!fs18.existsSync(path17.join(path17.dirname(scriptPath), LEGACY_SHIM_FILE))) return null;
+    return {
+      name,
+      status: "warn",
+      message: `hooks at ${path17.dirname(scriptPath)} still run ${LEGACY_SHIM_FILE} from an older token-goat build, which Node loads as an ES module under any package.json that says "type": "module" and then fails every tool call. Recovery: run "${reinstall}", then restart any running session.`
+    };
+  }
   if (shimIsCurrent(scriptPath, expected)) return { name, status: "ok", message: `hook shim at ${scriptPath} matches this build` };
   return { name, status: "warn", message: staleShimMessage(scriptPath, name, reinstall) + ", then restart any running session." };
 }
@@ -8239,6 +8426,28 @@ function checkUnmappedTools(dbPath, options) {
     return { name, status: "warn", message: `could not read the tool-name histogram: ${extractErrorMessage(e)}` };
   }
 }
+function checkWorker(dir) {
+  if (checkWorkerRunning(dir)) return { name: "Worker", status: "ok", message: "running" };
+  const refusal2 = fs18.existsSync(dir) ? dataDirWriteRefusal(dir) : void 0;
+  if (refusal2 !== void 0) {
+    return { name: "Worker", status: "fail", message: `not running, and cannot start: ${displaySafeText(dir)} cannot be written (${displaySafeText(extractErrorMessage(refusal2))}); make it writable, then run 'token-goat worker start'` };
+  }
+  return { name: "Worker", status: "warn", message: "not running" };
+}
+function checkHookServer(state) {
+  const name = "Hook server";
+  if (!state.enabled) return { name, status: "ok", message: "off (hooks.server or TOKEN_GOAT_HOOK_SERVER); every hook call starts its own process" };
+  if (state.statuses.length > 0) return { name, status: "ok", message: `${state.statuses.length} running (${state.statuses.map((s) => `slot ${s.slot}, pid ${s.pid}, ${s.served} served`).join("; ")})` };
+  if (state.failure !== void 0) return { name, status: "warn", message: `not running, and the last start failed: ${state.failure}. Run 'token-goat hook-server run' to see it in the foreground` };
+  return { name, status: "ok", message: "not running; the next hook call starts one" };
+}
+async function runDoctorChecks(dataDir2, configPath2, rootDir, processes) {
+  const results = runDoctor(dataDir2, configPath2, rootDir, processes);
+  const enabled = hookServerEnabled();
+  const dir = dataDir2 || dataDir();
+  results.push(checkHookServer({ enabled, statuses: enabled ? await serverStatuses(dir) : [], failure: readMarker("failed", dir) }));
+  return results;
+}
 function runDoctor(dataDir2, configPath2, rootDir, processes) {
   const results = [];
   const actualDataDir = dataDir2 || dataDir();
@@ -8246,7 +8455,7 @@ function runDoctor(dataDir2, configPath2, rootDir, processes) {
   results.push(checkTsCompiler());
   results.push(checkTreeSitter());
   results.push(checkStrayClaudeMdBlocks());
-  results.push(checkWorkerRunning(actualDataDir) ? { name: "Worker", status: "ok", message: "running" } : { name: "Worker", status: "warn", message: "not running" });
+  results.push(checkWorker(actualDataDir));
   const cfg = loadConfig(rootDir);
   results.push(checkDbExists(actualDataDir, cfg.indexing.max_db_size_mb));
   results.push(checkSymbolBodySize(path17.join(actualDataDir, "global.db")));
@@ -8265,6 +8474,8 @@ function runDoctor(dataDir2, configPath2, rootDir, processes) {
   results.push(checkDiskSpace(actualDataDir));
   const copilotResult = checkCopilotCli(copilotCliConfigPath(), copilotCliScriptPath());
   if (copilotResult) results.push(copilotResult);
+  const copilotProjectResult = checkCopilotCli(copilotCliConfigPath({ local: true }), copilotCliScriptPath({ local: true }), "project");
+  if (copilotProjectResult) results.push(copilotProjectResult);
   const claudeShimResult = checkHookShim("Claude Code", claudeHookScriptPath(), CLAUDECODE_HOOK_SCRIPT, isInstalled("user") || !isInstalled("project") ? "token-goat install" : "token-goat install --project");
   if (claudeShimResult) results.push(claudeShimResult);
   const claudeEventsResult = checkClaudeHookEvents({ user: missingHookEvents("user"), project: missingHookEvents("project") });
@@ -8485,7 +8696,7 @@ async function runDoctorAndExit(opts) {
       console.log();
     }
   }
-  const results = runDoctor(options.dataDir, options.configPath, options.rootDir, options.processes);
+  const results = await runDoctorChecks(options.dataDir, options.configPath, options.rootDir, options.processes);
   printDoctorResults(results);
   if (options.context === true) {
     console.log("\n## Context footprint\n");
@@ -8523,7 +8734,7 @@ async function runDoctorAndExit(opts) {
     }
   }
   try {
-    const { checkUpdateStatus } = await import("./token-goat-chunk-4JJBFT7V.mjs");
+    const { checkUpdateStatus } = await import("./token-goat-chunk-YAGLESS3.mjs");
     const update = await checkUpdateStatus(1500);
     if (update.updateAvailable && update.latest) {
       console.log(`
@@ -8646,7 +8857,7 @@ function generateCompactHelp() {
     "  compress, recall, bash-output, web-output, mcp-output, bench",
     "",
     "Config & Integration: install, uninstall, upgrade, mcp-serve, mcp-status, hook,",
-    "  bridges-status, worker, statusline, version, config, config-get,",
+    "  bridges-status, worker, hook-server, statusline, version, config, config-get,",
     "  capabilities, help",
     "",
     "Data: note, note-add, note-get, note-list, describe, sqlite-query,",
@@ -11569,11 +11780,12 @@ function openWithinRoot(rootReal, p) {
     if (!isPathWithinRoot(rootReal, realPath)) return "outside-root";
     let realStat;
     try {
-      realStat = fs21.statSync(realPath);
+      realStat = statThroughHandle(realPath);
     } catch {
       return "outside-root";
     }
-    if (realStat.dev !== stat.dev || realStat.ino !== stat.ino) return "outside-root";
+    const fdStat = fs21.fstatSync(fd, { bigint: true });
+    if (realStat.dev !== fdStat.dev || realStat.ino !== fdStat.ino) return "outside-root";
     ownershipTransferred = true;
     return { fd, stat };
   } finally {
@@ -13580,9 +13792,9 @@ function cmdNoteAdd(file, opts) {
       const messages = [`No symbol named '${opts.symbol}' is indexed in '${file}'`];
       const allNames = symbolNamesInFile(resolvedPath);
       const available = rankSimilarNames(allNames, opts.symbol);
-      if (available.length > 0) messages.push(didYouMean(available));
+      if (available.length > 0) messages.push(...didYouMeanLines(available));
       else if (allNames.length > 0) messages.push(`Try: token-goat outline ${file}`);
-      throw new CliError(messages.join("\n"));
+      throw new CliError(messages);
     }
     symbol = opts.symbol;
     fingerprint = fingerprintContent(match2.body);
@@ -13911,9 +14123,9 @@ function cmdInsertSection(file, opts) {
     const allHeadings = listSections(file);
     const messages = [`Section '${opts.after}' not found in '${file}'`];
     const available = filterSimilarHeadings(allHeadings, opts.after);
-    if (available.length > 0) messages.push(didYouMean(available));
+    if (available.length > 0) messages.push(...didYouMeanLines(available));
     else if (allHeadings.length > 0) messages.push(`Try: token-goat outline ${file}`);
-    throw new CliError(messages.join("\n"));
+    throw new CliError(messages);
   }
   if (result.occurrences !== void 0) {
     const lines = [
@@ -13925,7 +14137,7 @@ function cmdInsertSection(file, opts) {
     if (result.occurrences.length > AMBIGUOUS_HEADING_LIMIT) {
       lines.push(`  (${result.occurrences.length - AMBIGUOUS_HEADING_LIMIT} more not shown)`);
     }
-    throw new CliError(lines.join("\n"));
+    throw new CliError(lines);
   }
   let rawBytes;
   try {
@@ -16233,8 +16445,7 @@ function collectCapabilities(config = loadConfig()) {
       id: "at_rest.symbol_index",
       kind: "at-rest",
       what: "Stores the text of indexed source files in a local database, so a symbol can be returned without re-reading the file.",
-      // Always on: it is the product. Reported anyway, because a reviewer deciding about data at
-      // rest needs the always-on items more than the optional ones.
+      // Always on: it is the product. Reported anyway, because a reviewer deciding about data at rest needs the always-on items more than the optional ones.
       enabled: true,
       controlledBy: "always on (this is what the tool does)",
       enforcedAt: "src/db.ts"
@@ -16246,15 +16457,24 @@ function collectCapabilities(config = loadConfig()) {
       enabled: true,
       controlledBy: "always on, 24-hour expiry",
       enforcedAt: "src/disk_cache.ts"
+    },
+    {
+      id: "ipc.hook_server",
+      kind: "local-ipc",
+      what: "Keeps up to three hook servers running between hook calls, each on a named pipe (Windows) or Unix socket (elsewhere) that answers only a caller holding the key file in the data directory.",
+      // Read the way the server reads it, which a project's config cannot change.
+      enabled: hookServerEnabled(),
+      controlledBy: "hooks.server (global config only), TOKEN_GOAT_HOOK_SERVER",
+      enforcedAt: "src/hook_server.ts::runHookServer"
     }
   ];
 }
 function renderCapabilities(caps) {
   const lines = [];
-  for (const kind of ["egress", "at-rest"]) {
+  for (const [kind, heading] of [["egress", "Can send data off this machine:"], ["at-rest", "Leaves data on this machine:"], ["local-ipc", "Listens for other processes on this machine:"]]) {
     const group = caps.filter((c) => c.kind === kind);
     if (group.length === 0) continue;
-    lines.push(kind === "egress" ? "Can send data off this machine:" : "Leaves data on this machine:");
+    lines.push(heading);
     for (const c of group) {
       lines.push(`  [${c.enabled ? "ON " : "OFF"}] ${displaySafeText(c.id)}`);
       lines.push(`         ${c.what}`);
@@ -17044,7 +17264,7 @@ async function auditSessionCorpus(opts = {}) {
     windowDays,
     toolErrors: { byTool: [], byModel: [], unknownPrefixes: [] }
   };
-  const toolErrorAcc = (await import("./token-goat-chunk-LEG3JNJ6.mjs")).newToolErrorAccumulator();
+  const toolErrorAcc = (await import("./token-goat-chunk-G23DWHV4.mjs")).newToolErrorAccumulator();
   const toolMap = /* @__PURE__ */ new Map();
   const attachmentMap = /* @__PURE__ */ new Map();
   const hookMap = /* @__PURE__ */ new Map();
@@ -18270,6 +18490,11 @@ async function runStatuslineCommand(opts = {}) {
 
 // src/cli_hint_stats.ts
 init_define_import_meta_env();
+var SESSION_JSON_SCOPE = {
+  session: ["emitted", "actedOn", "efficacyPct", "unobservable", "detected", "bytesEmitted", "legacyEmissions", "totals.spentBytes", "totals.legacyEmissions"],
+  allTime: ["suppressed", "suppressionPermanent", "manualEffective", "manualIneffective"],
+  unavailable: ["totals.savedBytes"]
+};
 function formatSpentCell(row) {
   if (row.emitted === 0) return "n/a";
   if (row.bytesEmitted === null) return "n/a (legacy)";
@@ -18309,6 +18534,16 @@ TOTAL   saved-bytes=${totals.savedBytes} (all-time, every hint kind)   spent-byt
 `
   );
 }
+function printSessionTotals(totals) {
+  const spent = totals.spentBytes === null ? "n/a" : String(totals.spentBytes);
+  const legacyNote = totals.legacyEmissions > 0 ? ` (excludes ${totals.legacyEmissions} legacy emission(s) recorded before spend tracking)` : "";
+  process.stdout.write(
+    `
+TOTAL (this session)   spent-bytes=${spent} (hint_emissions ledger only)${legacyNote}
+saved-bytes: not available per session, because the stats ledger it comes from records no session id. Run \`token-goat hint-stats\` without --session-id for the all-time figure.
+`
+  );
+}
 function runHintStatsCommand(opts = {}) {
   if (opts.reset === true) {
     resetHintStats();
@@ -18327,13 +18562,24 @@ function runHintStatsCommand(opts = {}) {
 `);
     return;
   }
-  const rows = getHintStatsSummary();
+  const session = opts.sessionId;
+  const rows = getHintStatsSummary(session);
   if (opts.json === true) {
-    process.stdout.write(`${displaySafeJson(rows, 0)}
+    const payload = session === void 0 ? rows : { session, scope: SESSION_JSON_SCOPE, rows, totals: { savedBytes: null, ...getHintSpendTotals(session) } };
+    process.stdout.write(`${displaySafeJson(payload, 0)}
 `);
     return;
   }
-  if (rows.every((r) => r.emitted === 0 && r.actedOn === 0 && r.unobservable === 0 && r.detected === 0)) {
+  const noEmissions = rows.every((r) => r.emitted === 0 && r.actedOn === 0 && r.unobservable === 0 && r.detected === 0);
+  if (session !== void 0) {
+    process.stdout.write(
+      `Session: ${displaySafeText(session)}
+emitted, undisplayed, acted-on, efficacy and spent-bytes count this session only. suppressed, manual+ and manual- are all-time, across every session: suppression is decided on the whole history, and manual marks carry no session.
+`
+    );
+    if (noEmissions) process.stdout.write("No hint emissions were recorded for this session, so every per-session figure below is 0.\n");
+  }
+  if (session === void 0 && noEmissions) {
     process.stdout.write("No hint emissions recorded yet \u2014 the zeros below are absence of data, not measured ineffectiveness.\n");
   }
   printSummary(rows);
@@ -18359,7 +18605,8 @@ function runHintStatsCommand(opts = {}) {
 hints.backoff_thresholds is empty, so suppression here is permanent rather than a self-healing throttle: ${names} will not emit again on any occasion. Set backoff_thresholds to re-enable probe emissions, or run \`token-goat hint-stats --reset\` to clear the ledger.
 `);
   }
-  printTotals(getHintStatsTotals());
+  if (session === void 0) printTotals(getHintStatsTotals());
+  else printSessionTotals(getHintSpendTotals(session));
 }
 
 // src/cli_session.ts
@@ -18392,7 +18639,7 @@ function cmdWaste(opts = {}) {
   });
 }
 async function cmdAudit(opts = {}) {
-  const { runAuditCommand } = await import("./token-goat-chunk-IHKZ3QNA.mjs");
+  const { runAuditCommand } = await import("./token-goat-chunk-67BNIKKO.mjs");
   return runAuditCommand({
     ...opts.project !== void 0 ? { project: opts.project } : {},
     ...opts.transcript !== void 0 ? { transcript: opts.transcript } : {},
@@ -18407,7 +18654,7 @@ async function cmdSessionAudit(opts = {}) {
     throw new CliError(err2 instanceof Error ? err2.message : String(err2));
   }
   if (opts.toolErrors === true) {
-    const { formatToolErrorCensus } = await import("./token-goat-chunk-LEG3JNJ6.mjs");
+    const { formatToolErrorCensus } = await import("./token-goat-chunk-G23DWHV4.mjs");
     out(opts.json === true ? displaySafeJson({ filesScanned: summary.filesScanned, windowDays: summary.windowDays, ...summary.toolErrors }, 0) : formatToolErrorCensus(summary.toolErrors, summary));
     return;
   }
@@ -18474,6 +18721,13 @@ function cmdStatusline(opts = {}) {
   return runStatuslineCommand({ ...opts.json === true ? { json: true } : {} });
 }
 function cmdHintStats(opts = {}) {
+  if (opts.sessionId !== void 0) {
+    const mutating = [opts.reset === true ? "--reset" : null, opts.markEffective !== void 0 ? "--mark-effective" : null, opts.markIneffective !== void 0 ? "--mark-ineffective" : null].filter((f) => f !== null);
+    if (mutating.length > 0) {
+      throw new CliError(`--session-id cannot be combined with ${mutating.join(", ")}: those change cross-session state (every session's emissions and marks), not one session's view`);
+    }
+  }
+  const session = opts.sessionId === void 0 ? void 0 : resolveHintStatsSession(opts.sessionId);
   if (opts.markEffective !== void 0 && !isHintCategory(opts.markEffective)) {
     throw new CliError(`--mark-effective must be one of: ${HINT_CATEGORIES.join(", ")} (got: ${opts.markEffective})`);
   }
@@ -18484,9 +18738,18 @@ function cmdHintStats(opts = {}) {
     ...opts.json === true ? { json: true } : {},
     ...opts.reset === true ? { reset: true } : {},
     ...opts.markEffective !== void 0 && isHintCategory(opts.markEffective) ? { markEffective: opts.markEffective } : {},
-    ...opts.markIneffective !== void 0 && isHintCategory(opts.markIneffective) ? { markIneffective: opts.markIneffective } : {}
+    ...opts.markIneffective !== void 0 && isHintCategory(opts.markIneffective) ? { markIneffective: opts.markIneffective } : {},
+    ...session !== void 0 ? { sessionId: session } : {}
   });
 }
+function resolveHintStatsSession(arg) {
+  const trimmed = arg.trim();
+  if (trimmed === "") throw new CliError("--session-id needs a session id, or `latest` for the most recent session");
+  if (trimmed !== "latest") return trimmed;
+  const latest = findLatestSessionId();
+  if (latest === null) throw new CliError("--session-id latest: no session state found on disk; pass a session id explicitly");
+  return latest;
+}
 
 // src/cli_skills.ts
 init_define_import_meta_env();
@@ -18751,10 +19014,10 @@ async function cmdSkillSection(nameHeading, headingArg) {
     }
     const messages = [`Section '${heading}' not found in skill '${skillName}'`];
     const available = filterSimilarHeadings(allHeadings, heading);
-    if (available.length > 0) messages.push(didYouMean(available));
+    if (available.length > 0) messages.push(...didYouMeanLines(available));
     else if (allHeadings.length === 0) messages.push(`skill '${skillName}' has no headings`);
     else messages.push(`Try: token-goat outline ${filePath}`);
-    throw new CliError(messages.join("\n"));
+    throw new CliError(messages);
   }
   out(extracted);
 }
@@ -18821,6 +19084,7 @@ var METHODOLOGY = {
   billing: "They are not GitHub Copilot usage, provider-reported token consumption, or billing data.",
   byte_derived_formula: "Most read, hook, and command entries go through savedTokensFromBytes in src/stats.ts, which is Math.round(bytes_saved / 4). Image entries are the exception: they are priced in visual tokens, not bytes.",
   filter_estimates: "Output compressors record their filter-calculated delta, measured against what the harness would actually have delivered rather than the full command output. Image entries are priced in visual tokens (28x28-pixel patches, capped at the configured vision tier), because an image is not billed by its byte size; where the pixel dimensions are unavailable the tier ceiling is used.",
+  read_command_baselines: "A read command is credited the bytes of what it replaced, less what it printed. Naming a file (read, section, outline and the rest) replaces reading that file whole, capped at 100,000 bytes per file, about what one Read returns before it truncates. A search over files the caller did not name (symbol NAME, semantic) replaces a search plus a read of the one file wanted, so it is credited the largest matched file under the same cap, not every match. refs is credited the one line per reference a plain text search prints, and changed the diff it stands in for; both are shell output, so both are first cut to what the harness would have delivered of it.",
   advisory_events: "Zero-byte, zero-token advisory events show that guidance fired, not that an agent followed it.",
   audit: "Use stats --full or stats --json for source and command breakdowns; reconcile billing with provider-exported usage data."
 };
@@ -18836,6 +19100,7 @@ function renderMethodology(json = false) {
     `\`tokens saved\` is a ${METHODOLOGY.estimate_scope.toLowerCase()} ${METHODOLOGY.billing}`,
     "",
     `- ${METHODOLOGY.byte_derived_formula}`,
+    `- ${METHODOLOGY.read_command_baselines}`,
     `- ${METHODOLOGY.filter_estimates}`,
     `- ${METHODOLOGY.advisory_events}`,
     `- ${METHODOLOGY.audit}`,
@@ -19251,7 +19516,7 @@ function registerSessionCommands(program2, guard) {
       })
     )
   );
-  program2.command("capabilities").description("report every capability that can send data off this machine, and its current state").option("-j, --json", "emit as JSON, for asserting on in a pipeline").action(
+  program2.command("capabilities").description("report every capability that can send data off this machine, leave data on it, or listen for other processes on it, and its current state").option("-j, --json", "emit as JSON, for asserting on in a pipeline").action(
     guard((opts) => {
       const caps = collectCapabilities();
       console.log(opts.json ? displaySafeJson({ version: VERSION, capabilities: caps }) : renderCapabilities(caps));
@@ -19274,7 +19539,7 @@ function registerSessionCommands(program2, guard) {
   ));
   program2.command("mcp-audit").description("MCP server schema cost-vs-usage report: estimate per-server token cost from cached tool calls").option("--project <path>", "project root to analyze").option("--json", "output JSON").action(guard(cmdMcpAudit));
   program2.command("recall [query]").description("search across every cached bash-output, web-output, and mcp-output entry (full-text); with no query, list them newest-first").option("--type <type>", "filter to one cache type: bash, web, or mcp").option("--limit <n>", "max results to return (default: 10)").option("--json", "output JSON").action(guard(cmdRecall));
-  program2.command("hint-stats").description("per-category efficacy report for token-goat's discretionary hint hooks (emitted/acted-on/suppression)").option("--json", "output JSON").option("--reset", "clear all tracked emissions and manual marks").option("--mark-effective <category>", 'record a manual "effective" vote for a hint category').option("--mark-ineffective <category>", 'record a manual "ineffective" vote for a hint category').action(guard(cmdHintStats));
+  program2.command("hint-stats").description("per-category efficacy report for token-goat's discretionary hint hooks (emitted/acted-on/suppression); all-time unless --session-id narrows it").option("--json", "output JSON").option("--session-id <id>", "scope emission counts, efficacy and spend to one session id (or `latest`); suppression and manual marks stay all-time, and saved-bytes has no per-session figure").option("--reset", "clear all tracked emissions and manual marks").option("--mark-effective <category>", 'record a manual "effective" vote for a hint category').option("--mark-ineffective <category>", 'record a manual "ineffective" vote for a hint category').action(guard(cmdHintStats));
   program2.command("statusline").description("render one line of terminal status text from a harness statusline payload on stdin (Claude Code statusLine.command)").option("--json", "emit the underlying data as JSON instead of a rendered line (debug)").action(guard(cmdStatusline));
   program2.command("skill-body <name>").description("retrieve a skill's cached body").option("-c, --compact", "print compact slice instead of full body").action(guard(cmdSkillBody));
   program2.command("skill-compact [name]").description("regenerate and cache compact slice for a skill").option("--path <file>", "read the skill body from this file instead of resolving by name").option("--all", "regenerate compacts for all skills, skipping fresh ones").action(guard(cmdSkillCompact));
@@ -19350,6 +19615,39 @@ function registerSessionCommands(program2, guard) {
   program2.command("describe [target] [table]").description("describe columns and structure of a session store table or SQLite database file instead of querying SELECT *").option("-j, --json", "output as JSON").action(guard(cmdDescribe));
 }
 
+// src/cli_hook_server.ts
+init_define_import_meta_env();
+async function cmdHookServerRun(opts) {
+  const slot = Number(opts.slot ?? "0");
+  const { runHookServer } = await import("./token-goat-chunk-ORNFMIER.mjs");
+  try {
+    await runHookServer(slot, (argv) => run(argv));
+  } catch (e) {
+    const message = e instanceof Error ? e.message : String(e);
+    touchMarker("failed", `slot ${slot}: ${message}`);
+    throw new CliError(message);
+  }
+}
+function formatHookServerStatus(s, now = Date.now()) {
+  return `slot ${s.slot}: pid ${s.pid}, v${s.version}, up ${formatAge(now - s.startedAt)}, served ${s.served}, errors ${s.errors}, idle ${formatAge(now - s.lastUsedAt)}`;
+}
+async function cmdHookServerStatus(opts) {
+  const statuses = await serverStatuses();
+  if (opts.json === true) {
+    out(displaySafeJson(statuses));
+    return;
+  }
+  if (statuses.length === 0) {
+    out("No hook server is running. The next hook call starts one.");
+    return;
+  }
+  for (const s of statuses) out(formatHookServerStatus(s));
+}
+async function cmdHookServerStop() {
+  const stopped = await queryServers("stop");
+  out(stopped.length === 0 ? "No hook server is running." : `Stopped ${stopped.length} hook server${stopped.length === 1 ? "" : "s"}.`);
+}
+
 // src/bridges_status.ts
 init_define_import_meta_env();
 var NO_SERVER_HANDLER_REASON = "token-goat has no registered server-side handler for this event (zero registerHook('notification'|'stop', ...) call sites in src/) -- wiring it client-side would currently be a no-op";
@@ -20043,7 +20341,16 @@ function runBenchCommand(opts) {
 
 // src/cli.ts
 var CliError = class extends Error {
+  lines;
+  constructor(message) {
+    super(typeof message === "string" ? message : message.join("\n"));
+    this.lines = typeof message === "string" ? void 0 : message;
+  }
 };
+function formatCommandError(e) {
+  if (e instanceof CliError && e.lines !== void 0) return "token-goat: " + e.lines.map(displaySafeText).join("\n");
+  return "token-goat: " + displaySafeText(extractErrorMessage(e));
+}
 function out(text) {
   const payload = colorStdout() ? text : stripAnsiEscapes(text);
   process.stdout.write(ensureNewline(payload));
@@ -20284,7 +20591,7 @@ async function cmdMcpServe() {
   let StdioServerTransport;
   try {
     ;
-    ({ createMcpServer } = await import("./token-goat-chunk-SJEKA7Y2.mjs"));
+    ({ createMcpServer } = await import("./token-goat-chunk-PKRWMHVP.mjs"));
     ({ StdioServerTransport } = await import("./token-goat-chunk-EVC4TOLE.mjs"));
   } catch (err2) {
     process.stderr.write(
@@ -20309,7 +20616,7 @@ async function cmdHook(event, opts) {
   if (typeof opts.harness === "string" && opts.harness.length > 0) {
     process.env[ENV_KEYS.HARNESS_OVERRIDE] = opts.harness;
   }
-  const { relay } = await import("./token-goat-chunk-7MAFDRVR.mjs");
+  const { relay } = await import("./token-goat-chunk-Z6KBMOBI.mjs");
   await relay(event);
 }
 function projectHooksCommitNote(pathFiles, hooksConfigPath) {
@@ -20346,7 +20653,7 @@ async function cmdInstall(opts) {
   if (opts.project === true && opts.user === true) {
     throw new Error("install takes either -p/--project or --user, not both.");
   }
-  await import("./token-goat-chunk-7MAFDRVR.mjs");
+  await import("./token-goat-chunk-Z6KBMOBI.mjs");
   const scope = opts.project === true ? "project" : "user";
   if (wantsClaudeCodeBase(opts)) {
     const result = installHooks(scope);
@@ -20528,7 +20835,7 @@ function cmdMcpStatus(opts) {
   const scope = opts.project === true ? { projectRoot: process.cwd() } : {};
   out(displaySafeJson(opts.vscode === true ? vscodeDecoderConfigured(scope) : visualStudioMcpStatus(scope), 0));
 }
-function cmdUninstall(opts) {
+async function cmdUninstall(opts) {
   if (opts.project === true && opts.user === true) {
     throw new Error("uninstall takes either -p/--project or --user, not both.");
   }
@@ -20578,7 +20885,7 @@ function cmdUninstall(opts) {
   if (opts.hermes === true) {
     out("No separate Hermes integration to remove (it shares the Claude Code hook entries).");
   }
-  if (opts.purge === true) runPurge();
+  if (opts.purge === true) await runPurge();
 }
 function leftoverIntegrations(opts) {
   const candidates = [
@@ -20620,7 +20927,8 @@ function leftoverIntegrations(opts) {
   }
   return found;
 }
-function runPurge() {
+async function runPurge() {
+  await queryServers("stop");
   if (isWorkerRunning()) {
     err('token-goat: the background worker is running, so --purge would delete files it is about to rewrite. Run "token-goat worker stop" first.');
     return;
@@ -20681,7 +20989,7 @@ async function cmdDoctor(opts) {
     doctorOpts.rootDir = project.root;
   }
   if (opts.json === true) {
-    const results = runDoctor(doctorOpts.dataDir, doctorOpts.configPath, doctorOpts.rootDir);
+    const results = await runDoctorChecks(doctorOpts.dataDir, doctorOpts.configPath, doctorOpts.rootDir);
     out(displaySafeJson(results, 0));
     if (results.some((r) => r.status === "fail")) {
       throw new CliError("doctor checks failed");
@@ -20937,7 +21245,7 @@ async function cmdCompress(commandArgs, opts = {}) {
       process.exitCode = 1;
       return;
     }
-    const bashRunner = await import("./token-goat-chunk-BCN2YQC6.mjs");
+    const bashRunner = await import("./token-goat-chunk-VQ6F6T7X.mjs");
     if (opts.compress === false) {
       process.exitCode = bashRunner.runRaw(
         command,
@@ -20959,7 +21267,7 @@ async function cmdCompress(commandArgs, opts = {}) {
       ...opts.shell !== void 0 ? { shellType: opts.shell } : {}
     });
   } catch (e) {
-    err(`token-goat: ${displaySafeText(extractErrorMessage(e))}`);
+    err(formatCommandError(e));
     process.exitCode = 1;
   }
 }
@@ -20991,11 +21299,41 @@ ${content}`;
   const bytesSaved = cappedSourceBytesSaved(fullSourceBytes, Buffer.byteLength(toEmit, "utf8"));
   recordStat("gdrive_sections", bytesSaved, savedTokensFromBytes(bytesSaved));
 }
+var READ_ONLY_INDEX_COMMANDS = /* @__PURE__ */ new Set([
+  "symbol",
+  "read",
+  "brief",
+  "section",
+  "semantic",
+  "skeleton",
+  "outline",
+  "refs",
+  "answer",
+  "ask",
+  "map",
+  "exports",
+  "imports",
+  "find",
+  "locate",
+  "callers",
+  "call-chain",
+  "impact",
+  "dead",
+  "deps",
+  "types",
+  "scope",
+  "similar",
+  "context-for",
+  "test-for"
+]);
 var originalHelpInformation = null;
 function buildProgram() {
   const program2 = new Command();
   program2.name("token-goat").description("Surgical token-reduction companion for AI coding agents").version(VERSION, "-v, --version", "print the token-goat version").option("--cwd <path>", "run as if invoked from this directory (overrides the real working directory)").option("--notice <text>", "print this line to stdout before the command's own output");
-  program2.hook("preAction", (thisCommand) => {
+  program2.hook("preAction", (thisCommand, actionCommand) => {
+    if (actionCommand.parent === program2 && READ_ONLY_INDEX_COMMANDS.has(actionCommand.name())) {
+      allowReadOnlyIndex(() => err("token-goat: the index database cannot be written here, so this run reads it without writing: no stats are recorded and changed files are not reindexed."));
+    }
     const opts = thisCommand.opts();
     const cwdOverride = opts.cwd;
     if (cwdOverride !== void 0) {
@@ -21030,8 +21368,7 @@ function buildProgram() {
         process.exitCode = 0;
       }
     } catch (e) {
-      const msg = extractErrorMessage(e);
-      err(`token-goat: ${displaySafeText(msg)}`);
+      err(formatCommandError(e));
       process.exitCode = 1;
     }
   };
@@ -21188,13 +21525,17 @@ function buildProgram() {
   program2.command("handoff-create <name> [text]").description("create a project-local named compressed handoff").option("--file <path>", "read handoff text from a local file instead of the argument").action(guard(cmdHandoffCreate));
   program2.command("handoff-resolve <name>").description("resolve a project-local handoff compactly, or return it in full").option("--full", "return the full handoff text").action(guard(cmdHandoffResolve));
   program2.command("hook <event>").description("hook relay entrypoint (reads JSON on stdin)").option("--harness <name>", "override harness detection for this invocation (sets TOKEN_GOAT_HARNESS_OVERRIDE)").action(guard(cmdHook));
-  program2.command("install").description("install hooks into Claude Code settings").option("-p, --project", "install into project scope instead of user scope").option("--user", "with --vscode, install into user scope instead of this project (every project at once, but nothing past the first folder of a multi-root workspace)").option("--codex", "also patch Codex CLI (~/.codex/config.toml, ~/.codex/AGENTS.md)").option("--gemini", "also patch Gemini CLI (~/.gemini/settings.json)").option("--qwen", "also patch Qwen Code (~/.qwen/settings.json)").option("--kimi", "also register a Kimi Code hook config, shim, instructions block and skill ($KIMI_CODE_HOME or ~/.kimi-code: config.toml, hooks/token-goat-shim.js, AGENTS.md, skills/token-goat/SKILL.md)").option("--pi", "also drop a pi (pi-coding-agent) extension (~/.pi/agent/extensions/token-goat.ts)").option("--opencode", "also drop an opencode plugin (~/.config/opencode/plugins/token-goat.ts, %APPDATA%\\opencode\\plugins\\token-goat.ts on Windows)").option("--hermes", "verify token-goat hooks are present for Hermes Agent (writes nothing new)").option("--openclaw", "also register an OpenClaw plugin (~/.openclaw/openclaw.json, ~/.openclaw/plugins/token-goat.ts)").option("--copilot", "also register a Copilot CLI hook config and routing block (~/.copilot/hooks/token-goat.json, ~/.copilot/hooks/token-goat-shim.js, ~/.copilot/copilot-instructions.md; with --local, <project>/.github/hooks/token-goat.json, <project>/.github/hooks/token-goat-shim.js, <project>/.github/copilot-instructions.md)").option("--grok", "also register a Grok CLI (xAI Grok Build) hook config (~/.grok/hooks/token-goat.json, ~/.grok/hooks/token-goat-shim.js)").option("--vscode", "also configure a VS Code MCP server (the workspace .vscode/mcp.json by default; --user for the user-profile mcp.json) and Copilot routing guidance").option("--visualstudio", "also configure a Visual Studio (2022 17.14+ / 2026) Copilot MCP server and routing guidance, no hooks (%USERPROFILE%\\.mcp.json and %USERPROFILE%\\copilot-instructions.md; -p/--project for <project>/.mcp.json and <project>/.github/copilot-instructions.md)").option("--zed", "also register token-goat as a Zed MCP context server (%APPDATA%\\Zed\\settings.json on Windows, ~/.config/zed/settings.json elsewhere, plus a generated shim script); Zed has no hooks API, so this is user scope only, no -p/--project support").option("--cursor", 'also register a Cursor MCP server (~/.cursor/mcp.json by default; -p/--project for <project>/.cursor/mcp.json); writes no Cursor hooks config -- Cursor already imports the Claude Code hooks "token-goat install" writes to ~/.claude/settings.json').option("--local", "with --pi, install the project-local extension (<project>/.pi/extensions/token-goat.ts) instead of the global one").action(guard(cmdInstall));
-  program2.command("uninstall").description("remove token-goat hooks from Claude Code settings").option("-p, --project", "uninstall from project scope instead of user scope").option("--user", "with --vscode, remove the user-scope install instead of this project one").option("--codex", "also strip the Codex CLI integration (~/.codex/config.toml, ~/.codex/AGENTS.md)").option("--gemini", "also strip the Gemini CLI integration (~/.gemini/settings.json)").option("--qwen", "also strip the Qwen Code integration (~/.qwen/settings.json)").option("--kimi", "also strip the Kimi Code integration (config.toml hooks, hooks/token-goat-shim.js, the AGENTS.md block and skills/token-goat under $KIMI_CODE_HOME or ~/.kimi-code)").option("--pi", "also remove the pi (pi-coding-agent) extension").option("--opencode", "also remove the opencode plugin").option("--hermes", "no-op verification flag for symmetry with install (removes no files)").option("--openclaw", "also remove the OpenClaw plugin and config entry").option("--copilot", "also remove the Copilot CLI hook config and shim script, and strip the token-goat block from ~/.copilot/copilot-instructions.md (or <project>/.github/copilot-instructions.md with --local)").option("--grok", "also remove the Grok CLI hook config and shim script").option("--vscode", "also remove the VS Code MCP server (project scope by default; --user for the user-profile one) and routing guidance").option("--visualstudio", "also remove the Visual Studio MCP server entry and routing guidance (user scope by default; -p/--project for the project one)").option("--zed", "also remove the Zed MCP context server entry and its generated shim script").option("--cursor", "also remove the Cursor MCP server entry (user scope by default; -p/--project for the project one)").option("--local", "with --pi, remove the project-local extension instead of the global one").option("--purge", "also delete the data directories (index, caches, session state, logs); refuses while the worker is running").action(guard(cmdUninstall));
+  program2.command("install").description("install hooks into Claude Code settings, or with harness flags into those harnesses instead").option("-p, --project", "install into project scope instead of user scope").option("--user", "with --vscode, install into user scope instead of this project (every project at once, but nothing past the first folder of a multi-root workspace)").option("--codex", "patch Codex CLI (~/.codex/config.toml, ~/.codex/AGENTS.md)").option("--gemini", "patch Gemini CLI (~/.gemini/settings.json)").option("--qwen", "patch Qwen Code (~/.qwen/settings.json)").option("--kimi", "register a Kimi Code hook config, shim, instructions block and skill ($KIMI_CODE_HOME or ~/.kimi-code: config.toml, hooks/token-goat-shim.cjs, AGENTS.md, skills/token-goat/SKILL.md)").option("--pi", "drop a pi (pi-coding-agent) extension (~/.pi/agent/extensions/token-goat.ts)").option("--opencode", "drop an opencode plugin (~/.config/opencode/plugins/token-goat.ts, %APPDATA%\\opencode\\plugins\\token-goat.ts on Windows)").option("--hermes", "verify token-goat hooks are present for Hermes Agent (writes nothing new)").option("--openclaw", "register an OpenClaw plugin (~/.openclaw/openclaw.json, ~/.openclaw/plugins/token-goat.ts)").option("--copilot", "register a Copilot CLI hook config and routing block (~/.copilot/hooks/token-goat.json, ~/.copilot/hooks/token-goat-shim.cjs, ~/.copilot/copilot-instructions.md; with --local, <project>/.github/hooks/token-goat.json, <project>/.github/hooks/token-goat-shim.cjs, <project>/.github/copilot-instructions.md)").option("--grok", "register a Grok CLI (xAI Grok Build) hook config (~/.grok/hooks/token-goat.json, ~/.grok/hooks/token-goat-shim.cjs)").option("--vscode", "configure a VS Code MCP server (the workspace .vscode/mcp.json by default; --user for the user-profile mcp.json) and Copilot routing guidance").option("--visualstudio", "configure a Visual Studio (2022 17.14+ / 2026) Copilot MCP server and routing guidance, no hooks (%USERPROFILE%\\.mcp.json and %USERPROFILE%\\copilot-instructions.md; -p/--project for <project>/.mcp.json and <project>/.github/copilot-instructions.md)").option("--zed", "register token-goat as a Zed MCP context server (%APPDATA%\\Zed\\settings.json on Windows, ~/.config/zed/settings.json elsewhere, plus a generated shim script); Zed has no hooks API, so this is user scope only, no -p/--project support").option("--cursor", 'register a Cursor MCP server (~/.cursor/mcp.json by default; -p/--project for <project>/.cursor/mcp.json); writes no Cursor hooks config -- Cursor already imports the Claude Code hooks "token-goat install" writes to ~/.claude/settings.json').option("--local", "with --pi, install the project-local extension (<project>/.pi/extensions/token-goat.ts) instead of the global one").action(guard(cmdInstall));
+  program2.command("uninstall").description("remove token-goat hooks from Claude Code settings, or with harness flags from those harnesses instead").option("-p, --project", "uninstall from project scope instead of user scope").option("--user", "with --vscode, remove the user-scope install instead of this project one").option("--codex", "strip the Codex CLI integration (~/.codex/config.toml, ~/.codex/AGENTS.md)").option("--gemini", "strip the Gemini CLI integration (~/.gemini/settings.json)").option("--qwen", "strip the Qwen Code integration (~/.qwen/settings.json)").option("--kimi", "strip the Kimi Code integration (config.toml hooks, hooks/token-goat-shim.cjs, the AGENTS.md block and skills/token-goat under $KIMI_CODE_HOME or ~/.kimi-code)").option("--pi", "remove the pi (pi-coding-agent) extension").option("--opencode", "remove the opencode plugin").option("--hermes", "no-op verification flag for symmetry with install (removes no files)").option("--openclaw", "remove the OpenClaw plugin and config entry").option("--copilot", "remove the Copilot CLI hook config and shim script, and strip the token-goat block from ~/.copilot/copilot-instructions.md (or <project>/.github/copilot-instructions.md with --local)").option("--grok", "remove the Grok CLI hook config and shim script").option("--vscode", "remove the VS Code MCP server (project scope by default; --user for the user-profile one) and routing guidance").option("--visualstudio", "remove the Visual Studio MCP server entry and routing guidance (user scope by default; -p/--project for the project one)").option("--zed", "remove the Zed MCP context server entry and its generated shim script").option("--cursor", "remove the Cursor MCP server entry (user scope by default; -p/--project for the project one)").option("--local", "with --pi, remove the project-local extension instead of the global one").option("--purge", "also delete the data directories (index, caches, session state, logs); refuses while the worker is running").action(guard(cmdUninstall));
   program2.command("mcp-status").description("check whether an MCP integration is already configured (used by the VS Code extension)").option("--vscode", "check VS Code mcp.json (user scope, plus workspace scope with --project)").option("--visualstudio", "check the Visual Studio %USERPROFILE%\\.mcp.json (plus the project .mcp.json with --project)").option("-p, --project", "also check the project file: .vscode/mcp.json for --vscode, .mcp.json for --visualstudio (relative to --cwd or the real cwd)").action(guard(cmdMcpStatus));
   const worker = program2.command("worker").description("background indexer lifecycle");
   worker.command("start").description("start the background indexer").action(guard(cmdWorkerStart));
   worker.command("stop").description("stop the background indexer").action(guard(cmdWorkerStop));
   worker.command("status").description("check if the indexer is running").action(guard(cmdWorkerStatus));
+  const hookServer = program2.command("hook-server").description("resident processes that answer hook calls and read-only commands without starting Node for each one");
+  hookServer.command("run", { hidden: true }).description("serve one slot (started automatically by the first hook call)").option("--slot <n>", "which slot to serve", "0").action(guard(cmdHookServerRun));
+  hookServer.command("status").description("list the running hook servers").option("-j, --json", "output as JSON").action(guard(cmdHookServerStatus));
+  hookServer.command("stop").description("stop every running hook server (the next hook call starts a fresh one)").action(guard(cmdHookServerStop));
   program2.command("stats").description("show session statistics (bare = totals only; --full for the breakdown)").option("-j, --json", "output as JSON").option("--full", "show the full breakdown (by source, by command, by day)").option("--short", "force the rich short KPI view even when stdout is not a TTY (e.g. piped)").option("--methodology", "explain local savings estimates and their billing limits").option("--hooks", "show the per-event/per-harness hook latency breakdown (median/p95/slowest/last-seen)").option("--window-days <days>", "days to include (0 = all time)", "30").option("--home-dir <path>", "home directory (for testing)").action(guard(cmdStats));
   program2.command("doctor").description("diagnose token-goat health").option("--context", "include context footprint analysis").option("--json", "emit check results as JSON instead of text").option("--repair", "automatically repair fixable issues (permissive settings, missing semantics models)").option("--fix", "alias for --repair").action(guard(cmdDoctor));
   program2.command("bash-output [id]").description("retrieve cached bash output by ID or file").option("--head <n>", "show first N lines").option("--tail <n>", "show last N lines").option("--grep <pattern>", "filter lines matching regex").option("--max-matches <n>", "cap --grep output to the first N matching lines").option("--section <heading>", "extract a specific section from the output").option("--full", "print the entire cached entry with no head/tail elision").option("--file <path>", "read from raw output file instead of cache").option("--transcript", "parse the --file as a JSONL agent transcript: keep assistant text blocks in order before filtering").option("--verify-last-write [seconds]", "verify the file or cache entry was written within [seconds] (default: 60s) to catch stale/no-op terminal output").option("--strict", "exit non-zero when --verify-last-write detects stale output").action(guard(cmdBashOutput));
@@ -21210,7 +21551,7 @@ function buildProgram() {
   program2.command("compress [command...]").alias("bash").alias("run").description("run a shell command (under a POSIX shell / bash) and emit a compressed view of its output").allowUnknownOption(true).option("-c, --cmd <command>", "the shell command to run, as one string (use / for paths across platforms)").option("--cmd-b64 <payload>", "the shell command as a base64-encoded string (preserves quotes, backslashes, and symbols across platforms)").option("--shell <type>", "shell interpreter to run under: bash | pwsh | powershell | native").option("-f, --filter <name>", "filter name (auto-detected from the command when omitted)").option("--timeout <seconds>", "wall-clock timeout in seconds (0 = built-in default)").option("--no-compress", "stream output raw without compression (debug the wrapper)").option("--profile <name>", "compression profile: aggressive | balanced | minimal").option("--max-tokens <n>", "post-compress token cap (0 = no cap)").option("--cap-hint-b64 <payload>", "base64 text printed after the output when --max-tokens cut it (the Bash hook sets it to the narrower read command)").option("-q, --quiet-success", "on exit code 0, emit only [tg: ok] summary and store full output for recall via bash-output").option("--native", "use native platform shell (e.g. cmd.exe on Windows) instead of bash, preserving Windows path backslashes").action(cmdCompress);
   program2.command("upgrade").alias("update").description("check for updates and upgrade token-goat to the latest version").option("--check", "check whether an update is available without installing").option("-j, --json", "emit version check status as JSON").action(
     (opts) => guard(async () => {
-      const { cmdUpgrade } = await import("./token-goat-chunk-4JJBFT7V.mjs");
+      const { cmdUpgrade } = await import("./token-goat-chunk-YAGLESS3.mjs");
       await cmdUpgrade(opts, () => cmdInstall({}));
     })()
   );
@@ -21260,7 +21601,7 @@ async function run(argv = process.argv) {
     return;
   }
   if (argv[2] === "--batch-serve" && typeof argv[3] === "string") {
-    const { serveBatch } = await import("./token-goat-chunk-E3K3BTEQ.mjs");
+    const { serveBatch } = await import("./token-goat-chunk-ASLWOQ3I.mjs");
     serveBatch(argv[3], (a) => run(a));
     return;
   }
@@ -21284,80 +21625,81 @@ async function run(argv = process.argv) {
       process.exitCode = 1;
       return;
     }
-    const msg = extractErrorMessage(e);
-    err(`token-goat: ${displaySafeText(msg)}`);
+    err(formatCommandError(e));
     process.exitCode = 1;
   }
 }
-
 export {
-  requireInt,
-  requireNonNegativeInt,
-  requirePositiveInt,
-  expandGlobs,
-  fenceFileText,
-  fenceFileFieldIfMatched,
-  fileSizeOrZero,
-  cmdPdfExtract,
-  cmdPdfLocate,
-  cmdPdfOutline,
-  cmdPdfMeta,
-  cmdVideoChapters,
-  cmdSharepointResolve,
-  cmdXlsxSheets,
-  cmdXlsxHead,
-  cmdXlsxColumns,
-  cmdXlsxRange,
-  cmdXlsxQuery,
-  cmdPptxOutline,
-  cmdPptxSlide,
-  cmdPptxNotes,
-  cmdPptxText,
+  CliError,
+  _applyFiltersAndPrint,
+  applyExitOverride,
+  buildProgram,
+  cmdCsvProfile,
+  cmdCsvQuery,
+  cmdDescribe,
   cmdDocxOutline,
   cmdDocxTables,
   cmdDocxText,
-  cmdTranscriptOutline,
-  cmdTranscript,
-  cmdCsvQuery,
-  cmdCsvProfile,
-  cmdJsonOutline,
-  cmdJsonQuery,
-  cmdYamlOutline,
-  cmdYamlQuery,
-  cmdXmlOutline,
-  cmdXmlQuery,
+  cmdHtmlLint,
   cmdHtmlOutline,
   cmdHtmlQuery,
-  cmdHtmlLint,
-  cmdOpenApiOutline,
-  cmdOpenApiOp,
-  cmdZipList,
-  cmdZipRead,
-  cmdNoteAdd,
-  cmdWriteFile,
-  cmdReplace,
-  cmdInsertSection,
-  fenceOcrText,
   cmdImageMeta,
   cmdImageText,
-  cmdSqliteTables,
-  cmdSqliteSchema,
-  cmdSqliteQuery,
+  cmdIndex,
+  cmdInsertSection,
+  cmdJsonOutline,
+  cmdJsonQuery,
+  cmdNoteAdd,
+  cmdOpenApiOp,
+  cmdOpenApiOutline,
+  cmdPdfExtract,
+  cmdPdfLocate,
+  cmdPdfMeta,
+  cmdPdfOutline,
+  cmdPptxNotes,
+  cmdPptxOutline,
+  cmdPptxSlide,
+  cmdPptxText,
+  cmdReplace,
+  cmdSessionSchema,
+  cmdSharepointResolve,
   cmdSkillBody,
   cmdSkillCompact,
-  cmdSkillList,
-  cmdSkillSize,
-  cmdSkillHistory,
   cmdSkillDiff,
+  cmdSkillHistory,
+  cmdSkillList,
   cmdSkillSection,
-  CliError,
-  out,
+  cmdSkillSize,
+  cmdSqliteQuery,
+  cmdSqliteSchema,
+  cmdSqliteTables,
+  cmdTranscript,
+  cmdTranscriptOutline,
+  cmdVideoChapters,
+  cmdWriteFile,
+  cmdXlsxColumns,
+  cmdXlsxHead,
+  cmdXlsxQuery,
+  cmdXlsxRange,
+  cmdXlsxSheets,
+  cmdXmlOutline,
+  cmdXmlQuery,
+  cmdYamlOutline,
+  cmdYamlQuery,
+  cmdZipList,
+  cmdZipRead,
   err,
-  cmdIndex,
-  visualStudioManualSteps,
+  expandGlobs,
+  fenceFileFieldIfMatched,
+  fenceFileText,
+  fenceOcrText,
+  fileSizeOrZero,
+  formatCommandError,
   leftoverIntegrations,
-  _applyFiltersAndPrint,
-  buildProgram,
-  applyExitOverride,
-  run
+  out,
+  requireInt,
+  requireNonNegativeInt,
+  requirePositiveInt,
+  run,
+  visualStudioManualSteps
 };