fix: bash compression hook -- missing hookEventName + hardcoded python3 (#26)

Two bugs prevented Bash compression from working since Claude Code
v2.1.101 tightened hook schema validation:

1. hookSpecificOutput was missing the required hookEventName field,
   causing every rewrite to be rejected with a validation error.
2. The rewritten command hardcoded python3 instead of routing through
   python-launcher.sh, breaking Windows (Store shim) and bypassing the
   cross-platform interpreter discovery.

Also adds an explicit anti-recursion guard: shell interpreters (bash, sh,
zsh, dash, fish) are now excluded from the whitelist so the rewritten
command can never trigger the hook again.

Closes #26

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: alexgreensh

.claude-plugin/marketplace.json

@@ -13,7 +13,7 @@
       "name": "token-optimizer",
       "source": "./",
       "description": "Audit, fix, and monitor Claude Code context window usage. Find the ghost tokens.",
-      "version": "5.6.0",
+      "version": "5.6.1",
       "author": {
         "name": "Alex Greenshpun",
         "url": "https://linkedin.com/in/alexgreensh"

.claude-plugin/plugin.json

@@ -7,7 +7,7 @@
   },
   "homepage": "https://github.com/alexgreensh/token-optimizer",
   "repository": "https://github.com/alexgreensh/token-optimizer",
-  "version": "5.6.0",
+  "version": "5.6.1",
   "license": "PolyForm-Noncommercial-1.0.0",
   "keywords": ["token", "optimization", "context", "audit", "cost", "coach"]
 }

README.md

@@ -3,7 +3,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/alexgreensh/token-optimizer/releases"><img src="https://img.shields.io/badge/version-5.6.0-green" alt="Version 5.6.0"></a>
+  <a href="https://github.com/alexgreensh/token-optimizer/releases"><img src="https://img.shields.io/badge/version-5.6.1-green" alt="Version 5.6.1"></a>
   <a href="https://github.com/alexgreensh/token-optimizer"><img src="https://img.shields.io/badge/Claude_Code-Plugin-blueviolet" alt="Claude Code Plugin"></a>
   <a href="https://github.com/alexgreensh/token-optimizer/tree/main/openclaw"><img src="https://img.shields.io/badge/OpenClaw-v2.4.0-brightgreen" alt="OpenClaw v2.4.0"></a>
   <a href="https://github.com/alexgreensh/token-optimizer/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-PolyForm%20Noncommercial-blue.svg" alt="License: PolyForm Noncommercial"></a>

skills/token-optimizer/scripts/bash_hook.py

@@ -157,8 +157,8 @@ def _is_whitelisted(command_str):
                 return False
         return True
 
-    # Check for sudo/su prefix (never rewrite)
-    if cmd in ("sudo", "su"):
+    # Never rewrite shell interpreters or privilege-escalation wrappers (also prevents recursion on rewritten commands).
+    if cmd in ("bash", "sh", "zsh", "dash", "fish", "sudo", "su"):
         return False
 
     return False
@@ -201,14 +201,24 @@ def main():
     if not compress_path.exists():
         return  # Wrapper missing, exit silently
 
+    # Route through python-launcher.sh so Windows Store shim / py launcher are handled.
+    plugin_root = script_dir.parent.parent.parent
+    launcher_path = plugin_root / "hooks" / "python-launcher.sh"
+    if not launcher_path.exists():
+        return  # Launcher missing, exit silently
+
     # Build rewritten command with proper quoting for each token
     try:
         original_tokens = shlex.split(command)
     except ValueError:
         return
 
     # Re-quote each token to handle paths with spaces safely (ARCH-F3)
-    rewritten = "python3 " + shlex.quote(str(compress_path)) + " " + " ".join(shlex.quote(t) for t in original_tokens)
+    rewritten = (
+        "bash " + shlex.quote(str(launcher_path))
+        + " " + shlex.quote(str(compress_path))
+        + " " + " ".join(shlex.quote(t) for t in original_tokens)
+    )
 
     # Log rewrite event to sidecar JSONL
     try:
@@ -229,6 +239,7 @@ def main():
     # Emit updatedInput response
     response = {
         "hookSpecificOutput": {
+            "hookEventName": "PreToolUse",
             "permissionDecision": "allow",
             "updatedInput": {
                 "command": rewritten,