v1.0.1

Fixed

• Token tracking read 0/0 (the headline v1.0.0 bug). Usage is now derived from the session transcript
  JSONL — the Stop hook payload carries no token fields — so context/output tokens and the turn counter are
  real values, not zeros.
• The post-compact recovery pointer never reached the model. It was injected on the PostCompact event,
  which has no decision control and cannot return additionalContext (verified against the Claude Code hook
  docs). It now uses the SessionStart compact hook, which fires after auto/manual compaction and supports
  additionalContext, so the pointer to the pre-compact vault actually lands.
• Session-scoped state resets consistently; the real PreCompact trigger (auto/manual) is recorded.

Added

• A dependency-free test suite (npm test) covering the hooks, the token parser, install/uninstall path-dedupe,
  and the status.js --json contract; plus push/PR CI (Ubuntu + Windows).
• Canonical DISCLAIMER + acceptable-use terms, linked from the README.

Changed

• README corrected to shipped reality (+ a vault-privacy note); FORWARD-PLAN refreshed.