token-pilot 0.35.0 → 0.36.0

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Token Pilot \u2014 save 60-90% tokens when AI reads code",
-    "version": "0.35.0"
+    "version": "0.36.0"
   },
   "plugins": [
     {
       "name": "token-pilot",
       "source": "./",
       "description": "Reduces token consumption by 60-90% via AST-aware lazy file reading, structural symbol navigation, and cross-session tool-usage analytics. 22 MCP tools + 19 subagents + budget watchdog hooks.",
-      "version": "0.35.0",
+      "version": "0.36.0",
       "author": {
         "name": "Digital-Threads"
       },

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "token-pilot",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "description": "Saves 60-90% tokens on AI code reading. AST-aware lazy reads, symbol navigation, find_usages, structural git diff/log, edit-safety guard, Task-routing matcher, cross-session telemetry (errors + diagnostics), 25 tp-* subagents tiered to haiku/sonnet/opus with budget watchdog.",
   "author": {
     "name": "Digital-Threads",

package/README.md

@@ -232,6 +232,43 @@ lines instead of bouncing the call. The structural summary still
 rides along in `additionalContext`. Default OFF because the field
 is undocumented and may change.
 
+## What's new for Claude Code 2.1.151+
+
+These notes are about behaviour you'll see automatically once you
+update both Claude Code and `token-pilot@latest`. No extra
+configuration required.
+
+### Session title badge (`[TP] Nk saved`)
+
+The SessionStart hook now sets the window/tab title to the cumulative
+token savings for the current project, using Claude Code 2.1.152's
+`hookSpecificOutput.sessionTitle` field. You'll see a badge like
+`[TP] 1.2M saved` in the title bar so you can confirm at a glance
+that the plugin is doing its job.
+
+### Hardened skills (`disallowed-tools`)
+
+The three bundled skills (`guide`, `install`, `stats`) declare
+`disallowed-tools` (Claude Code 2.1.152+) so a runaway model can't
+issue `Write` / `Edit` / `Task` while the skill is on display. The
+install skill keeps `Bash` because it has to run
+`npx token-pilot install-ast-index`; the other two have Bash
+disallowed too.
+
+### Auto mode on third-party providers
+
+Claude Code 2.1.158 opened auto mode to Bedrock / Vertex / Foundry
+on Opus 4.7 + 4.8. If you're on one of those, opt in with
+`CLAUDE_CODE_ENABLE_AUTO_MODE=1`. token-pilot's deny-Read /
+deny-Bash gates still run on top — auto mode never bypasses them.
+
+### Opus 4.8 as fast-mode default
+
+Claude Code 2.1.154 made Opus 4.8 the default for high effort. The
+tp-* agents that already declared `model: haiku` keep their cheaper
+tier (90 %+ of the agent roster); the few sonnet/opus-tier ones
+ride the upgrade automatically.
+
 ## Troubleshooting
 
 ```bash

package/agents/tp-api-surface-tracker.md

@@ -9,7 +9,7 @@ tools:
   - mcp__token-pilot__read_symbol
   - Bash
 model: haiku
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: dd184501203fa7f3c73f419c4ffbe33c4be75400cb64a7a51733a3fe23f6e085
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-audit-scanner.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Read
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: d172f600bf32277ea6eb4cbbee4542ddd698a986dcd96997d33930561964569b
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-commit-writer.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__test_summary
   - mcp__token-pilot__outline
   - Bash
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: de64a406b5176de19f7422619c7de7949b1f28865f225402c9cea9255f377428
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-context-engineer.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Glob
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 68b32af2dacd82ebe52c4eec93edb903d452688274c3065218270627c564d8b0
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-dead-code-finder.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Read
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: d9b7f5b7ae6f4ae21305c775361bcab097cc774370a6d976c093571d46d55021
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-debugger.md

@@ -12,7 +12,7 @@ tools:
   - Read
   - Bash
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 052413de8d92377edcde6ae5c823f5378db304baccfa29e8866467f42553a500
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-dep-health.md

@@ -9,7 +9,7 @@ tools:
   - Bash
   - Read
 model: haiku
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: e14dc57493d816f8c2e017963e2ef5f66bea50fd0b805a80e8a0d97c968427e7
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-doc-writer.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Glob
 model: haiku
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 57d741794ab40e31a7ac49c68ea39a9088f5827cdef866ce81bfca1b7c9180cf
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-history-explorer.md

@@ -10,7 +10,7 @@ tools:
   - Bash
   - Read
 model: haiku
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 7b70fa76a60e3c58a1de4f56c32c0f166424137e203a0cf1c8654e7c9235d904
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-impact-analyzer.md

@@ -12,7 +12,7 @@ tools:
   - mcp__token-pilot__read_symbols
   - Read
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 351a987e11eba63852f5431a16d8eb53104f4f689f82fdcc5a2bf4db948ba92f
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-incident-timeline.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__read_symbol
   - Bash
 model: inherit
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: de5722bfea374eaab096c1ae635c37879e7a91370ee3cd0532f4240be03c91eb
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-incremental-builder.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Bash
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 375a824d0d847bb5453ec594c7a62ad566ee7e4d92717b0473f771f1a0477c60
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-migration-scout.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Glob
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 0334de1bf99b431b65359637d125cda7c44c6f780eb92c57cc538715b1939536
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-onboard.md

@@ -10,7 +10,7 @@ tools:
   - mcp__token-pilot__smart_read
   - mcp__token-pilot__smart_read_many
   - mcp__token-pilot__read_section
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 832e95633fbc8e9b0c10f3e540a327d4be062fb4b3f17a6cce6be13f414e2927
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-performance-profiler.md

@@ -11,7 +11,7 @@ tools:
   - Bash
   - Read
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: b61f06380d80798fa2e49d37bcba0653495bee04dd6bdbc1feff9a75607b0508
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-pr-reviewer.md

@@ -11,7 +11,7 @@ tools:
   - mcp__token-pilot__read_for_edit
   - Read
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: f83f50d05b4f70285ae7afed2b1a406fc436df56e61a0aedbfb31edc7f2b6e66
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-refactor-planner.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__outline
   - mcp__token-pilot__read_symbol
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: c5f6fc122c89e16e5cf774045f92169ee3468555320b898171ba13eca5323550
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-review-impact.md

@@ -9,7 +9,7 @@ tools:
   - mcp__token-pilot__module_info
   - Bash
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 8ef3c3341cbfed4eb8dd130126a9683edc57e378c92ff0ca764d584fd941c55c
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-run.md

@@ -16,7 +16,7 @@ tools:
   - Glob
   - Bash
 model: haiku
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 2b08618d34a61f00aafccbda9fed6d83243296dedb83440edbd2d5c28bb6dbc4
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-session-restorer.md

@@ -9,7 +9,7 @@ tools:
   - mcp__token-pilot__session_budget
   - Bash
   - Read
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 529374ed728f5eed5b758b3be3da65624783c0bf0c1a253d7d661a843eb5f767
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-ship-coordinator.md

@@ -11,7 +11,7 @@ tools:
   - Read
   - Grep
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: a60f6ae110eb3138064bce074e8ba26fa0ce5f4659df1624a9d9d3646803391b
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-spec-writer.md

@@ -9,7 +9,7 @@ tools:
   - Read
   - Write
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: c7a4e8b39228fd5158528f389c924c5ff2d98c4b9b05ee0106d54a26c5dc1350
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-test-coverage-gapper.md

@@ -10,7 +10,7 @@ tools:
   - mcp__token-pilot__test_summary
   - Glob
   - Grep
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: be81eed53a3720d146cf89e4a14a7a56577633f7c84c234c412ab70d64c05b11
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-test-triage.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__find_usages
   - mcp__token-pilot__read_symbol
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 362ecf4cb03b059421ea26933473700900073dc38b3a7fe271208dfb1ae14f90
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-test-writer.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Bash
 model: sonnet
-token_pilot_version: "0.35.0"
+token_pilot_version: "0.36.0"
 token_pilot_body_hash: 269f2fe22ff4517c277d3f56ca67d8a5527b93290ab21079a83ba7af22c1b5a9
 requiredMcpServers:
   - "token-pilot"

package/dist/hooks/session-start.js

@@ -274,11 +274,60 @@ export async function handleSessionStart(opts) {
             ".token-pilot/snapshots/latest.md",
             ".token-pilot/hook-events.jsonl",
         ];
+        // v0.36.0 — sessionTitle was added in Claude Code 2.1.152. We surface
+        // the cumulative saved-token count for this project so users see the
+        // payoff at a glance in their window/tab title. Best-effort — if the
+        // savings file is unreadable we fall back to a neutral title.
+        let sessionTitle;
+        try {
+            const { loadSessionStats } = await import("../core/session-savings.js");
+            // Sum savings across all sessions in this project, not just one.
+            const stats = loadSessionStats(opts.projectRoot, "");
+            // sessionId="" makes loadSessionStats short-circuit; use a tiny
+            // dedicated reader instead.
+            const { readFileSync } = await import("node:fs");
+            const { join } = await import("node:path");
+            let total = 0;
+            try {
+                const raw = readFileSync(join(opts.projectRoot, ".token-pilot", "hook-events.jsonl"), "utf-8");
+                for (const line of raw.split("\n")) {
+                    if (!line)
+                        continue;
+                    try {
+                        const ev = JSON.parse(line);
+                        if (typeof ev.savedTokens === "number")
+                            total += ev.savedTokens;
+                    }
+                    catch {
+                        /* skip malformed line */
+                    }
+                }
+            }
+            catch {
+                /* no log file yet */
+            }
+            // Use the larger of "single-session" (loadSessionStats fallback)
+            // and the all-sessions sum so an empty single-session number
+            // doesn't override the meaningful project-wide total.
+            const surfaced = Math.max(total, stats.savedTokens);
+            if (surfaced > 0) {
+                const human = surfaced >= 1_000_000
+                    ? `${(surfaced / 1_000_000).toFixed(1)}M`
+                    : surfaced >= 1000
+                        ? `${Math.round(surfaced / 1000)}k`
+                        : `${surfaced}`;
+                sessionTitle = `[TP] ${human} saved`;
+            }
+        }
+        catch {
+            /* sessionTitle is best-effort decoration; never block startup */
+        }
         const output = {
             hookSpecificOutput: {
                 hookEventName: "SessionStart",
                 additionalContext: message,
                 watchPaths,
+                ...(sessionTitle ? { sessionTitle } : {}),
             },
         };
         return JSON.stringify(output);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-pilot",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "description": "Save up to 80% tokens when AI reads code — MCP server for token-efficient code navigation, AST-aware structural reading instead of dumping full files into context window",
   "type": "module",
   "main": "dist/index.js",

package/skills/guide/SKILL.md

@@ -3,6 +3,17 @@ name: guide
 description: Show a quick-reference guide for all Token Pilot tools — when to use each one
 command: guide
 user_invocable: true
+# v0.36.0 — disallowed-tools is a Claude Code 2.1.152+ field that
+# strips the listed tools from the model's surface while this skill
+# is active. The guide just renders Markdown; it never needs Edit /
+# Write / Bash / Task. Defense-in-depth so a runaway model can't
+# mutate the workspace while a help screen is on display.
+disallowed-tools:
+  - Bash
+  - Edit
+  - MultiEdit
+  - Write
+  - Task
 ---
 
 Display the following Token Pilot tool reference to the user. Show it exactly as formatted below.

package/skills/install/SKILL.md

@@ -3,6 +3,16 @@ name: install
 description: Install or check ast-index binary (auto-downloads if missing)
 command: install
 user_invocable: true
+# v0.36.0 — disallowed-tools (Claude Code 2.1.152+). The install
+# skill drives one `npx token-pilot install-ast-index` Bash command;
+# nothing else. Keep Bash, block all write/edit/delegation tools so
+# a rogue interpretation can't extend the install into arbitrary
+# workspace mutation.
+disallowed-tools:
+  - Edit
+  - MultiEdit
+  - Write
+  - Task
 ---
 
 Run the following command to install or verify the ast-index binary:

package/skills/stats/SKILL.md

@@ -3,6 +3,14 @@ name: stats
 description: Show Token Pilot session analytics — token savings, per-tool breakdown, top files, per-agent grouping
 command: stats
 user_invocable: true
+# v0.36.0 — disallowed-tools (Claude Code 2.1.152+). stats only reads
+# the events log and runs `token-pilot stats` variants. No
+# Edit/Write/Task ever — block them defensively.
+disallowed-tools:
+  - Edit
+  - MultiEdit
+  - Write
+  - Task
 ---
 
 Two entry points: