token-pilot 0.28.1 → 0.28.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -6,14 +6,14 @@
6
6
  },
7
7
  "metadata": {
8
8
  "description": "Token Pilot \u2014 save 60-90% tokens when AI reads code",
9
- "version": "0.28.1"
9
+ "version": "0.28.2"
10
10
  },
11
11
  "plugins": [
12
12
  {
13
13
  "name": "token-pilot",
14
14
  "source": "./",
15
15
  "description": "Reduces token consumption by 60-90% via AST-aware lazy file reading, structural symbol navigation, and cross-session tool-usage analytics. 22 MCP tools + 19 subagents + budget watchdog hooks.",
16
- "version": "0.28.1",
16
+ "version": "0.28.2",
17
17
  "author": {
18
18
  "name": "Digital-Threads"
19
19
  },
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "token-pilot",
3
- "version": "0.28.1",
3
+ "version": "0.28.2",
4
4
  "description": "Saves 60-90% tokens when AI reads code. AST-aware lazy reading, symbol navigation, cross-session tool-usage analytics, 22 subagents (haiku/sonnet/opus-tiered) with budget watchdog.",
5
5
  "author": {
6
6
  "name": "Digital-Threads",
package/CHANGELOG.md CHANGED
@@ -5,6 +5,48 @@ All notable changes to Token Pilot will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [0.28.2] - 2026-04-19
9
+
10
+ ### Fixed — plugin hooks were never actually reaching Claude Code
11
+
12
+ **Critical: all our PreToolUse hooks (Read, Edit, Bash, Grep) in the plugin-install path have been silently non-functional since v0.1.0.**
13
+
14
+ Live verification by Sonnet 4.6 on Windows surfaced the symptom: `grep -r`, `cat <code-file>`, and `bare git log` — documented as blocked in v0.28.0 — were not being blocked. Pattern-based deny from our hook-pre-bash / hook-pre-grep never fired. The tests passed because the pure decision logic is correct; the issue was that **Claude Code never called our hook at all**.
15
+
16
+ Root cause, confirmed against the [official Anthropic plugin-dev skill](https://github.com/anthropics/claude-code/blob/main/plugins/plugin-dev/skills/hook-development/SKILL.md):
17
+
18
+ > **For plugin hooks** in `hooks/hooks.json`, use wrapper format
19
+
20
+ Canonical plugin hook location is **`<plugin-root>/hooks/hooks.json`**, not `<plugin-root>/.claude-plugin/hooks/hooks.json`. We'd been putting it inside `.claude-plugin/` since v0.1.0 based on a misreading — Claude Code's plugin loader never looked there.
21
+
22
+ The fact that Read-hook blocking "seemed to work" earlier was because `npx token-pilot install-hook` copied the same hooks into `~/.claude/settings.json` directly (a separate code path that works). When I cleaned up duplicates via `uninstall-hook` in v0.28.0, the plugin-side fallback I thought existed turned out never to have existed — and *no one's hooks were firing at all*.
23
+
24
+ Reference comparison — `claude-context-mode@0.7.2` ships hooks.json in both locations. The `hooks/hooks.json` copy is what actually works; the `.claude-plugin/hooks/hooks.json` is dead weight.
25
+
26
+ ### Change
27
+
28
+ `git mv .claude-plugin/hooks/hooks.json hooks/hooks.json`. Also:
29
+
30
+ - `package.json` `files` now includes `hooks/hooks.json`.
31
+ - Regression test updated to read from the new canonical path.
32
+ - Code comments in `src/hooks/installer.ts` and `src/index.ts` that referenced the old path corrected.
33
+
34
+ ### After upgrade — required user action
35
+
36
+ Plugin users on 0.27.x / 0.28.0 / 0.28.1 need to reinstall the plugin so the hook files land in the correct location:
37
+
38
+ ```bash
39
+ claude plugin marketplace update token-pilot
40
+ claude plugin uninstall token-pilot@token-pilot
41
+ claude plugin install token-pilot@token-pilot
42
+ ```
43
+
44
+ Then restart Claude Code. PreToolUse hooks for all four matchers (Read / Edit / Bash / Grep) will fire in the new session. Verify with Sonnet's test: a `Grep(pattern="getUserById")` in a new session must now return a deny with the find_usages suggestion.
45
+
46
+ npm-install users on `install-hook` are unaffected (their hooks live in `~/.claude/settings.json` and always worked).
47
+
48
+ 1019 tests still passing.
49
+
8
50
  ## [0.28.1] - 2026-04-19
9
51
 
10
52
  ### Fixed — `session_analytics` hidden in `nav` profile defeated the whole point of profiles
@@ -9,7 +9,7 @@ tools:
9
9
  - mcp__token-pilot__read_symbol
10
10
  - Bash
11
11
  model: haiku
12
- token_pilot_version: "0.28.1"
12
+ token_pilot_version: "0.28.2"
13
13
  token_pilot_body_hash: f30fb3378463d6518041650487f1074b5411c6c3d6d7df315d21267f25f812d6
14
14
  ---
15
15
 
@@ -11,7 +11,7 @@ tools:
11
11
  - Grep
12
12
  - Read
13
13
  model: sonnet
14
- token_pilot_version: "0.28.1"
14
+ token_pilot_version: "0.28.2"
15
15
  token_pilot_body_hash: a740dc6c928d11d7c2c5fbaa953c50b0e35f2abc2dd6e5ef5117bf469a2d0207
16
16
  ---
17
17
 
@@ -8,7 +8,7 @@ tools:
8
8
  - mcp__token-pilot__test_summary
9
9
  - mcp__token-pilot__outline
10
10
  - Bash
11
- token_pilot_version: "0.28.1"
11
+ token_pilot_version: "0.28.2"
12
12
  token_pilot_body_hash: 559a0b61d20974bf33e35bc4c80dcf1b41d10d4df46cf9d05d3d5620713cd46f
13
13
  ---
14
14
 
@@ -13,7 +13,7 @@ tools:
13
13
  - Edit
14
14
  - Glob
15
15
  model: sonnet
16
- token_pilot_version: "0.28.1"
16
+ token_pilot_version: "0.28.2"
17
17
  token_pilot_body_hash: 8977f452021085a9ba63338bf94e8903e56b30e199dc32e41acc4ec3173a931d
18
18
  ---
19
19
 
@@ -11,7 +11,7 @@ tools:
11
11
  - Grep
12
12
  - Read
13
13
  model: sonnet
14
- token_pilot_version: "0.28.1"
14
+ token_pilot_version: "0.28.2"
15
15
  token_pilot_body_hash: 33798b70002a206c4547d08ff46caefe6dbe5a9300f94ab5dad4a57ab5fb4478
16
16
  ---
17
17
 
@@ -12,7 +12,7 @@ tools:
12
12
  - Read
13
13
  - Bash
14
14
  model: sonnet
15
- token_pilot_version: "0.28.1"
15
+ token_pilot_version: "0.28.2"
16
16
  token_pilot_body_hash: ada78a5a3f029721fa51e7cd203395ff0e87f0ab614cc7cf0d5bcc1bf9a80435
17
17
  ---
18
18
 
@@ -9,7 +9,7 @@ tools:
9
9
  - Bash
10
10
  - Read
11
11
  model: haiku
12
- token_pilot_version: "0.28.1"
12
+ token_pilot_version: "0.28.2"
13
13
  token_pilot_body_hash: 6224d989835ea284985b474005b8b46052b7007c4610e661b10658286b5c6624
14
14
  ---
15
15
 
@@ -13,7 +13,7 @@ tools:
13
13
  - Edit
14
14
  - Glob
15
15
  model: haiku
16
- token_pilot_version: "0.28.1"
16
+ token_pilot_version: "0.28.2"
17
17
  token_pilot_body_hash: 72347b06aaea75ed960972e96e2523c221b2ea7c892a3931aa0e7c32e4c86555
18
18
  ---
19
19
 
@@ -10,7 +10,7 @@ tools:
10
10
  - Bash
11
11
  - Read
12
12
  model: haiku
13
- token_pilot_version: "0.28.1"
13
+ token_pilot_version: "0.28.2"
14
14
  token_pilot_body_hash: b2daca007e959eaf26bf9a4d92ba36c3aa277a51de4ca4db674833d36acbe11b
15
15
  ---
16
16
 
@@ -12,7 +12,7 @@ tools:
12
12
  - mcp__token-pilot__read_symbols
13
13
  - Read
14
14
  model: sonnet
15
- token_pilot_version: "0.28.1"
15
+ token_pilot_version: "0.28.2"
16
16
  token_pilot_body_hash: 0be2620ce0303f912f6b3334f261d169f064970c0d16602fa1e76db4cb2ea441
17
17
  ---
18
18
 
@@ -8,7 +8,7 @@ tools:
8
8
  - mcp__token-pilot__read_symbol
9
9
  - Bash
10
10
  model: inherit
11
- token_pilot_version: "0.28.1"
11
+ token_pilot_version: "0.28.2"
12
12
  token_pilot_body_hash: 420ffc423c7479a8d4e1b226cf73eb98d6d41388317c74a950d7f3b6240b6786
13
13
  ---
14
14
 
@@ -13,7 +13,7 @@ tools:
13
13
  - Edit
14
14
  - Bash
15
15
  model: sonnet
16
- token_pilot_version: "0.28.1"
16
+ token_pilot_version: "0.28.2"
17
17
  token_pilot_body_hash: 9cb0bdf6e209d8ac613487385c01ef269d827dc3eddaf81b8eba581a3150b1e3
18
18
  ---
19
19
 
@@ -11,7 +11,7 @@ tools:
11
11
  - Grep
12
12
  - Glob
13
13
  model: sonnet
14
- token_pilot_version: "0.28.1"
14
+ token_pilot_version: "0.28.2"
15
15
  token_pilot_body_hash: cf32cdee777430ecc6732db32b3f883a685c8a02b6dc93379d71b15555e79b3e
16
16
  ---
17
17
 
@@ -10,7 +10,7 @@ tools:
10
10
  - mcp__token-pilot__smart_read
11
11
  - mcp__token-pilot__smart_read_many
12
12
  - mcp__token-pilot__read_section
13
- token_pilot_version: "0.28.1"
13
+ token_pilot_version: "0.28.2"
14
14
  token_pilot_body_hash: ae0b86eaffaf34bf283b94b5572481fa8c2d6a2a25193f1173b70bef0fbe1919
15
15
  ---
16
16
 
@@ -11,7 +11,7 @@ tools:
11
11
  - Bash
12
12
  - Read
13
13
  model: sonnet
14
- token_pilot_version: "0.28.1"
14
+ token_pilot_version: "0.28.2"
15
15
  token_pilot_body_hash: 14b6fb4423a839c119120c2ea12c9dd6ab6ad1aeb13df1e7c22807b290cf1f9c
16
16
  ---
17
17
 
@@ -11,7 +11,7 @@ tools:
11
11
  - mcp__token-pilot__read_for_edit
12
12
  - Read
13
13
  model: sonnet
14
- token_pilot_version: "0.28.1"
14
+ token_pilot_version: "0.28.2"
15
15
  token_pilot_body_hash: 73ba5844c8354088dcb10c671622daecc0e8589568de15a6001e1cf951eea586
16
16
  ---
17
17
 
@@ -8,7 +8,7 @@ tools:
8
8
  - mcp__token-pilot__outline
9
9
  - mcp__token-pilot__read_symbol
10
10
  model: sonnet
11
- token_pilot_version: "0.28.1"
11
+ token_pilot_version: "0.28.2"
12
12
  token_pilot_body_hash: dcc2c2aaeb443cc9688639b4337c6069b9d5bf21e3ed757fc8b3ac8a9d61bc03
13
13
  ---
14
14
 
@@ -9,7 +9,7 @@ tools:
9
9
  - mcp__token-pilot__module_info
10
10
  - Bash
11
11
  model: sonnet
12
- token_pilot_version: "0.28.1"
12
+ token_pilot_version: "0.28.2"
13
13
  token_pilot_body_hash: 72b635f511492188587d6cb6fd70f936ae34cf5df1f9cd9eff7849cf1231e185
14
14
  ---
15
15
 
package/agents/tp-run.md CHANGED
@@ -16,7 +16,7 @@ tools:
16
16
  - Glob
17
17
  - Bash
18
18
  model: haiku
19
- token_pilot_version: "0.28.1"
19
+ token_pilot_version: "0.28.2"
20
20
  token_pilot_body_hash: d665d57085db38077d0eeab74bda8bdb84c9ad59688495486059af5d3fac67cf
21
21
  ---
22
22
 
@@ -9,7 +9,7 @@ tools:
9
9
  - mcp__token-pilot__session_budget
10
10
  - Bash
11
11
  - Read
12
- token_pilot_version: "0.28.1"
12
+ token_pilot_version: "0.28.2"
13
13
  token_pilot_body_hash: 35b7f333a28c94e7dc89fcc3171703c4b466225f55cd5c701b7592f4f6486440
14
14
  ---
15
15
 
@@ -11,7 +11,7 @@ tools:
11
11
  - Read
12
12
  - Grep
13
13
  model: sonnet
14
- token_pilot_version: "0.28.1"
14
+ token_pilot_version: "0.28.2"
15
15
  token_pilot_body_hash: e8f9c28da23e318328f5afd85b09e8e7b96e0dab21a4c6779ba798cd709ced64
16
16
  ---
17
17
 
@@ -9,7 +9,7 @@ tools:
9
9
  - Read
10
10
  - Write
11
11
  model: sonnet
12
- token_pilot_version: "0.28.1"
12
+ token_pilot_version: "0.28.2"
13
13
  token_pilot_body_hash: ed0b9f938c152c0d7be5a6a5eaf3c97c19b27ae4a9540aec342f0edb0927cb27
14
14
  ---
15
15
 
@@ -10,7 +10,7 @@ tools:
10
10
  - mcp__token-pilot__test_summary
11
11
  - Glob
12
12
  - Grep
13
- token_pilot_version: "0.28.1"
13
+ token_pilot_version: "0.28.2"
14
14
  token_pilot_body_hash: cc3d1f46fdb95ac3caf9344f69f1ddcd5ce5a175ee70aa150b7f9fda93edb152
15
15
  ---
16
16
 
@@ -8,7 +8,7 @@ tools:
8
8
  - mcp__token-pilot__find_usages
9
9
  - mcp__token-pilot__read_symbol
10
10
  model: sonnet
11
- token_pilot_version: "0.28.1"
11
+ token_pilot_version: "0.28.2"
12
12
  token_pilot_body_hash: 255912c47661d203c8f9a735237bc419f97e937f788a01811bbe126ee3dd5878
13
13
  ---
14
14
 
@@ -13,7 +13,7 @@ tools:
13
13
  - Edit
14
14
  - Bash
15
15
  model: sonnet
16
- token_pilot_version: "0.28.1"
16
+ token_pilot_version: "0.28.2"
17
17
  token_pilot_body_hash: 96211a3e7f6b52dd47fef286eec3584b1c269fb3464c1102f8b7edbe470700e6
18
18
  ---
19
19
 
@@ -92,7 +92,7 @@ function createHookConfig(options) {
92
92
  */
93
93
  export async function installHook(projectRoot, options) {
94
94
  // Skip auto-install when running as a Claude Code plugin —
95
- // the plugin system already registers hooks via .claude-plugin/hooks/hooks.json
95
+ // the plugin system already registers hooks via hooks/hooks.json
96
96
  if (process.env.CLAUDE_PLUGIN_ROOT) {
97
97
  return {
98
98
  installed: false,
package/dist/index.js CHANGED
@@ -589,13 +589,13 @@ export function handleHookEdit() {
589
589
  export async function handleInstallHook(projectRoot) {
590
590
  // v0.26.5 — plugin-aware early-return. If we're running as a Claude
591
591
  // Code plugin (CLAUDE_PLUGIN_ROOT set) the hooks are already declared
592
- // in .claude-plugin/hooks/hooks.json and Claude Code wires them up
592
+ // in hooks/hooks.json and Claude Code wires them up
593
593
  // on install. Calling install-hook in that context would write a
594
594
  // duplicate entry to the user's settings.json and emit two hooks for
595
595
  // every event. Bail early.
596
596
  if (process.env.CLAUDE_PLUGIN_ROOT) {
597
597
  console.log("token-pilot is running as a Claude Code plugin — hooks are already\n" +
598
- "declared in .claude-plugin/hooks/hooks.json and registered by the\n" +
598
+ "declared in hooks/hooks.json and registered by the\n" +
599
599
  "plugin installer. `install-hook` is only needed for npm/npx setups.\n" +
600
600
  "Skipping to avoid duplicate hook entries.");
601
601
  process.exit(0);
@@ -652,7 +652,7 @@ export async function handleDoctor() {
652
652
  // ── Installation mode ──
653
653
  // v0.26.5 — tell the user HOW token-pilot is installed. Matters
654
654
  // because plugin users don't need `install-hook` (hooks come from
655
- // .claude-plugin/hooks/hooks.json); npm users do. dev/worktree users
655
+ // hooks/hooks.json); npm users do. dev/worktree users
656
656
  // are usually contributors running from a local checkout.
657
657
  let installMode;
658
658
  if (process.env.CLAUDE_PLUGIN_ROOT) {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "token-pilot",
3
- "version": "0.28.1",
3
+ "version": "0.28.2",
4
4
  "description": "Save up to 80% tokens when AI reads code \u2014 MCP server for token-efficient code navigation, AST-aware structural reading instead of dumping full files into context window",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -15,6 +15,7 @@
15
15
  "scripts/postinstall.mjs",
16
16
  "start.sh",
17
17
  ".claude-plugin/",
18
+ "hooks/hooks.json",
18
19
  ".mcp.json",
19
20
  "skills/",
20
21
  "README.md",
File without changes