token-pilot 0.43.0 → 0.44.0

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Token Pilot — save 60-90% tokens when AI reads code",
-    "version": "0.43.0"
+    "version": "0.44.0"
   },
   "plugins": [
     {
       "name": "token-pilot",
       "source": "./",
-      "description": "Reduces token consumption by 60-90% via AST-aware lazy file reading, structural symbol navigation, and cross-session tool-usage analytics. 22 MCP tools + 19 subagents + budget watchdog hooks.",
-      "version": "0.43.0",
+      "description": "Reduces token consumption by 60-90% via AST-aware lazy file reading, structural symbol navigation, and cross-session tool-usage analytics. 23 MCP tools + 25 subagents + budget watchdog hooks.",
+      "version": "0.44.0",
       "author": {
         "name": "Digital-Threads"
       },

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "token-pilot",
-  "version": "0.43.0",
+  "version": "0.44.0",
   "description": "Saves 60-90% tokens on AI code reading. AST-aware lazy reads, symbol navigation, find_usages, structural git diff/log, edit-safety guard, Task-routing matcher, cross-session telemetry (errors + diagnostics), 25 tp-* subagents tiered to haiku/sonnet/opus with budget watchdog.",
   "author": {
     "name": "Digital-Threads",

package/CHANGELOG.md

@@ -5,6 +5,38 @@ All notable changes to Token Pilot will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.44.0] - 2026-06-10
+
+### Changed — adaptive deny threshold ON by default
+
+`hooks.adaptiveThreshold` now defaults to `true`. The curve is a no-op below
+30% session burn, so short / light sessions read exactly as before. Once an
+agent has already pulled many large files — the long-session degradation users
+actually report — the Read-hook deny threshold tightens (300 → 225 → 150 → 90,
+floor 50 lines), pushing the agent back onto `smart_read` / `read_symbol` when
+context is most precious. Opt out with `adaptiveThreshold: false`.
+
+### Added — pre-bash catches `sed` / `head` / `tail` raw-range dumps
+
+The Bash pre-hook already blocked `cat <code-file>`; agents under pressure
+worked around it with `sed -n '1,500p' file.ts` or `head -n 500 file.ts` to
+pull a large slice straight to stdout. These now deny with a pointer to
+`read_range` / `read_symbol` / `smart_read`. Exempt, as before: pipes
+(processing), redirects (writing), `sed -i` (in-place edit), and small
+`head` / `tail` counts (< 300 lines — the sanctioned bounded read).
+
+### Maintenance
+
+`@ast-index/cli` lockfile tracks `3.47.0` (floor `^3.44.0` unchanged).
+
+## [0.43.1] - 2026-06-06
+
+### Fixed — `@ast-index/cli` floor raised to `^3.44.0`
+
+`module_route` (0.43.0) needs the ast-index `module-route` command, which
+exists only in ast-index 3.44+. The floor was `^3.38.0`, so an install
+resolving ast-index below 3.44 would have `module_route` fail. No API change.
+
 ## [0.43.0] - 2026-06-06
 
 Bundled release: everything actionable from **ast-index 3.41→3.45** and

package/agents/tp-api-surface-tracker.md

@@ -9,7 +9,7 @@ tools:
   - mcp__token-pilot__read_symbol
   - Bash
 model: haiku
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: dd184501203fa7f3c73f419c4ffbe33c4be75400cb64a7a51733a3fe23f6e085
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-audit-scanner.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Read
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: d172f600bf32277ea6eb4cbbee4542ddd698a986dcd96997d33930561964569b
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-commit-writer.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__test_summary
   - mcp__token-pilot__outline
   - Bash
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: de64a406b5176de19f7422619c7de7949b1f28865f225402c9cea9255f377428
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-context-engineer.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Glob
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 68b32af2dacd82ebe52c4eec93edb903d452688274c3065218270627c564d8b0
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-dead-code-finder.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Read
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: d9b7f5b7ae6f4ae21305c775361bcab097cc774370a6d976c093571d46d55021
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-debugger.md

@@ -12,7 +12,7 @@ tools:
   - Read
   - Bash
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 052413de8d92377edcde6ae5c823f5378db304baccfa29e8866467f42553a500
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-dep-health.md

@@ -9,7 +9,7 @@ tools:
   - Bash
   - Read
 model: haiku
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: e14dc57493d816f8c2e017963e2ef5f66bea50fd0b805a80e8a0d97c968427e7
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-doc-writer.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Glob
 model: haiku
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 57d741794ab40e31a7ac49c68ea39a9088f5827cdef866ce81bfca1b7c9180cf
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-history-explorer.md

@@ -10,7 +10,7 @@ tools:
   - Bash
   - Read
 model: haiku
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 7b70fa76a60e3c58a1de4f56c32c0f166424137e203a0cf1c8654e7c9235d904
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-impact-analyzer.md

@@ -12,7 +12,7 @@ tools:
   - mcp__token-pilot__read_symbols
   - Read
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 351a987e11eba63852f5431a16d8eb53104f4f689f82fdcc5a2bf4db948ba92f
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-incident-timeline.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__read_symbol
   - Bash
 model: inherit
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: de5722bfea374eaab096c1ae635c37879e7a91370ee3cd0532f4240be03c91eb
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-incremental-builder.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Bash
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 375a824d0d847bb5453ec594c7a62ad566ee7e4d92717b0473f771f1a0477c60
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-migration-scout.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Glob
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 0334de1bf99b431b65359637d125cda7c44c6f780eb92c57cc538715b1939536
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-onboard.md

@@ -10,7 +10,7 @@ tools:
   - mcp__token-pilot__smart_read
   - mcp__token-pilot__smart_read_many
   - mcp__token-pilot__read_section
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 832e95633fbc8e9b0c10f3e540a327d4be062fb4b3f17a6cce6be13f414e2927
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-performance-profiler.md

@@ -11,7 +11,7 @@ tools:
   - Bash
   - Read
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: b61f06380d80798fa2e49d37bcba0653495bee04dd6bdbc1feff9a75607b0508
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-pr-reviewer.md

@@ -11,7 +11,7 @@ tools:
   - mcp__token-pilot__read_for_edit
   - Read
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: f83f50d05b4f70285ae7afed2b1a406fc436df56e61a0aedbfb31edc7f2b6e66
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-refactor-planner.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__outline
   - mcp__token-pilot__read_symbol
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: c5f6fc122c89e16e5cf774045f92169ee3468555320b898171ba13eca5323550
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-review-impact.md

@@ -9,7 +9,7 @@ tools:
   - mcp__token-pilot__module_info
   - Bash
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 8ef3c3341cbfed4eb8dd130126a9683edc57e378c92ff0ca764d584fd941c55c
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-run.md

@@ -16,7 +16,7 @@ tools:
   - Glob
   - Bash
 model: haiku
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 2b08618d34a61f00aafccbda9fed6d83243296dedb83440edbd2d5c28bb6dbc4
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-session-restorer.md

@@ -9,7 +9,7 @@ tools:
   - mcp__token-pilot__session_budget
   - Bash
   - Read
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 529374ed728f5eed5b758b3be3da65624783c0bf0c1a253d7d661a843eb5f767
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-ship-coordinator.md

@@ -11,7 +11,7 @@ tools:
   - Read
   - Grep
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: a60f6ae110eb3138064bce074e8ba26fa0ce5f4659df1624a9d9d3646803391b
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-spec-writer.md

@@ -9,7 +9,7 @@ tools:
   - Read
   - Write
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: c7a4e8b39228fd5158528f389c924c5ff2d98c4b9b05ee0106d54a26c5dc1350
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-test-coverage-gapper.md

@@ -10,7 +10,7 @@ tools:
   - mcp__token-pilot__test_summary
   - Glob
   - Grep
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: be81eed53a3720d146cf89e4a14a7a56577633f7c84c234c412ab70d64c05b11
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-test-triage.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__find_usages
   - mcp__token-pilot__read_symbol
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 362ecf4cb03b059421ea26933473700900073dc38b3a7fe271208dfb1ae14f90
 requiredMcpServers:
   - "token-pilot"

package/agents/tp-test-writer.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Bash
 model: sonnet
-token_pilot_version: "0.43.0"
+token_pilot_version: "0.44.0"
 token_pilot_body_hash: 269f2fe22ff4517c277d3f56ca67d8a5527b93290ab21079a83ba7af22c1b5a9
 requiredMcpServers:
   - "token-pilot"

package/dist/config/defaults.js

@@ -27,7 +27,11 @@ export const DEFAULT_CONFIG = {
         autoInstall: true,
         denyThreshold: 300,
         mode: "deny-enhanced",
-        adaptiveThreshold: false,
+        // v0.44.0 — ON by default. The curve is a no-op below 30% session
+        // burn (short/light sessions read exactly as before), and only
+        // tightens the deny threshold once an agent has already pulled many
+        // large files — i.e. the long-session degradation users actually hit.
+        adaptiveThreshold: true,
         adaptiveBudgetTokens: 100_000,
     },
     context: {

package/dist/hooks/pre-bash.js

@@ -25,6 +25,11 @@
  * v0.28.0; tighten only if tool-audit shows repeated escapes.
  */
 const CODE_EXT_RE = /\.(ts|tsx|js|jsx|mjs|cjs|py|rb|go|rs|java|kt|swift|php|cs|cpp|c|h|hpp|scala|clj|ex|exs|elm|ml|fs|dart|lua|sh|bash|zsh)(\s|$|;|\||&|>|<)/;
+// v0.44.0 — a `head -n N` / `tail -n N` slice this large on a code file is
+// a whole-file dump in disguise. Mirrors the Read-hook denyThreshold (300)
+// so the two layers agree on what counts as "too big". Smaller slices are
+// the sanctioned bounded alternative and pass through.
+const RAW_SLICE_DENY_LINES = 300;
 /** Check whether the command contains a specific utility invocation at
  *  top level (not inside a quoted string). Cheap lexical match. */
 function invokes(command, utility) {
@@ -133,6 +138,37 @@ function detectHeavyPatternSingle(command) {
                 "For head/tail access use `head -n N` or `tail -n N`.",
         };
     }
+    // 3b. sed / head / tail reading a code file as a raw range dump.
+    // v0.44.0 — closes the leak the cat rule left open: an agent under
+    // context pressure reaches for `sed -n '1,500p' file.ts` or
+    // `head -n 500 file.ts` to pull a big slice straight to stdout,
+    // sidestepping both the Read hook and the cat rule. Exempt the same
+    // shapes cat exempts — pipes (processing) and redirects (writing) —
+    // plus `sed -i` (in-place edit, not a read).
+    const dumpsCodeFile = CODE_EXT_RE.test(cmd) && !cmd.includes("|") && !/>/.test(cmd);
+    if (dumpsCodeFile && invokes(cmd, "sed") && !/\bsed\b[^|>]*\s-i\b/.test(cmd)) {
+        return {
+            kind: "deny",
+            reason: "`sed` on a code file dumps a raw range into context. " +
+                "Use mcp__token-pilot__read_range(path, start, end) for a bounded slice, " +
+                "read_symbol(path, name) for one function, or smart_read(path) for structure.",
+        };
+    }
+    if (dumpsCodeFile && (invokes(cmd, "head") || invokes(cmd, "tail"))) {
+        // Match an explicit line count: `-500`, `-n 500`, `-n500`. A `-c N`
+        // byte count or the default (no flag → 10 lines) never matches, so
+        // genuinely small slices pass through untouched.
+        const m = cmd.match(/(?:^|\s)-(?:n\s*)?(\d+)\b/);
+        const n = m ? parseInt(m[1], 10) : 0;
+        if (n >= RAW_SLICE_DENY_LINES) {
+            return {
+                kind: "deny",
+                reason: "`head`/`tail` with a large line count dumps a big slice into context. " +
+                    "Use mcp__token-pilot__read_range(path, start, end) for a bounded slice, " +
+                    "or smart_read(path) for a structural overview.",
+            };
+        }
+    }
     // 4. git log without -n / -N / -<N> (short-form max-count) / --max-count
     // v0.30.3: added -<N> support — `git log --oneline -5` is canonical
     // bounded syntax and must not trip the heuristic.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-pilot",
-  "version": "0.43.0",
+  "version": "0.44.0",
   "description": "Save up to 80% tokens when AI reads code — MCP server for token-efficient code navigation, AST-aware structural reading instead of dumping full files into context window",
   "type": "module",
   "main": "dist/index.js",
@@ -68,7 +68,7 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
-    "@ast-index/cli": "^3.38.0",
+    "@ast-index/cli": "^3.44.0",
     "chokidar": "^4.0.3"
   },
   "devDependencies": {