tokenSaver 1.0.8 — Status line, Search and CLI fixes

• Status line: tips now rotate through every entry (default weights pinned a single tip); a tip replaces the row of zeros before the first savings; tips no longer point at commands that are unavailable from a plugin install.
• Fixed-locale number formatting (1,234,567) so thousands separators can't be confused with decimals; compactNumber rolls over to 1.0M/1.0B instead of 1000K.
• Router JSONC: a trailing comma followed by a comment no longer breaks parsing.
• Search: one truncation notice instead of two; the if_modified_since reminder appears only when output was cut.
• Edit batching nudge is tracked per session, so parallel sessions no longer trigger it for each other.
• doctor removes its probe file and checks the review agent; status reuses the savings engine's time estimate.
• Docs: network access stated accurately (dependency install + daily update check), full hook list, how to run the CLI from a plugin install, router config path.
• Removed dead code.
• Eight regression tests added. Validation: 256 passed, four DuckDB tests skipped when its CLI is unavailable.

tokenSaver 1.0.7 — Host isolation and accounting fixes

• Keep envelope-detected Codex selection across hook configuration modules.
• Honor CODEX_HOME, CLAUDE_CONFIG_DIR and the Codex plugin-home SQL-policy override.
• Isolate both hosts' settings in the test runner; inherited session markers cannot redirect fixtures to real settings.
• Skip Claude status-line checks in Codex doctor; align recall with explicit CLI host selection.
• Recompute saved aggregates after merging session slices and repair lifetime reads of stale aggregates.
• Separate cached and cache-written Codex input before calculating costs; reject savings credit for failed MCP outputs, including exec wrappers.
• Prevent transcript model names from modifying object prototypes or resolving inherited pricing entries.
• Align review instructions with available collaboration schemas and concurrency limits; document Bash and PowerShell commands separately.
• Correct settings instructions and expose updateCheck through the CLI.
• Add nine regression tests. Validation: 248 passed, four DuckDB tests skipped when its CLI is unavailable.

Existing recorded cost estimates retain their original calculation; new transcript deltas use the corrected accounting.

tokenSaver 1.0.6 — Codex CLI support + host-aware core

tokenSaver now runs on Codex CLI (codex plugin marketplace add Brucee/tokensaver) as well as Claude Code. Host adapters with capability flags keep host-specific behavior isolated; Claude behavior is unchanged.

Codex CLI

• MCP Search/Edit/Sql work through the dual-launcher .mcp.json.
• Tool redirect nudges native apply_patch and Windows PowerShell commands (reported as Bash) toward the MCP tools.
• Savings accounting parses rollout transcripts incrementally: usage, model, MCP-equivalent calls, edit lines — including subagent transcripts via per-agent state slices.
• Post-compaction digest from compacted/replacement_history records; recall CLI works on rollout files.
• Review pipeline fans out through spawn_agent/wait_agent with model pinning and high reasoning effort; raw-git fallback when the sandbox blocks node child processes.
• Host-aware update tips, settings file, and SQL policy paths.

Fixes benefiting both hosts

• Session state saves union-merge concurrent writers — parallel subagent hooks can no longer clobber each other.
• pendingSaver credits and the session model now persist across hook deltas (MCP calls were undercounted).
• Post-compaction digest deduplicates by turn anchor.
• Prototype-polluting agent ids cannot corrupt session state.
• review-diff reports sandbox spawn failures honestly instead of "not a git repository".