@ashx-j/lunr 0.2.26 → 0.2.28

package/dist/node-runtime/{runtime-4VA6JKNF.js → runtime-EDUUGAQD.js}

@@ -121,6 +121,13 @@ Connection: close\r
 }
 
 // packages/coding-agent/dist/core/browser/runtime.js
+function closeOwnedResources(owner) {
+  return owner?.browser && (owner.browserClose ??= Promise.resolve().then(() => owner.browser.close())), owner?.proxy && (owner.proxyClose ??= Promise.resolve().then(() => owner.proxy.close())), Promise.allSettled([owner?.browserClose, owner?.proxyClose]).then((results) => {
+    for (let result of results)
+      if (result.status === "rejected")
+        throw result.reason;
+  });
+}
 function boundedBrowserText(text) {
   let result = truncateHead(text.replace(/[\x00-\x08\x0b-\x1f\x7f-\x9f]/g, ""), { maxBytes: 16384, maxLines: 300 });
   return result.content + (result.truncated ? `
@@ -141,6 +148,8 @@ async function uniqueTarget(page, input) {
 }
 var BrowserSession = class {
   resources;
+  owner;
+  activeCancellation;
   queue = Promise.resolve();
   closing = Promise.resolve();
   generation = 0;
@@ -152,20 +161,11 @@ var BrowserSession = class {
     this.allowPrivate = allowPrivate, this.idleMs = idleMs;
   }
   async close() {
-    this.generation++, clearTimeout(this.idle);
-    let pending = this.resources;
-    this.resources = void 0;
-    let previous = this.closing, closing = (async () => {
-      await previous;
-      let resources = await pending?.catch(() => {
-      });
-      if (resources)
-        try {
-          await resources.browser.close();
-        } finally {
-          await resources.proxy.close();
-        }
-    })();
+    this.generation++, clearTimeout(this.idle), this.activeCancellation?.abort();
+    let owner = this.owner;
+    this.owner = void 0, this.resources = void 0;
+    let closing = Promise.all([this.closing, closeOwnedResources(owner)]).then(() => {
+    });
     return this.closing = closing.catch(() => {
     }), closing;
   }
@@ -178,38 +178,40 @@ var BrowserSession = class {
       if (signal?.aborted || generation !== this.generation)
         throw new Error("Browser operation cancelled; navigate again in a new call.");
       clearTimeout(this.idle);
-      let cancellation = new AbortController(), abort = () => {
-        cancellation.abort(), this.close().catch(() => {
+      let cancellation = new AbortController();
+      this.activeCancellation = cancellation;
+      let ownedGeneration = generation, abort = () => {
+        cancellation.abort(), ownedGeneration === this.generation && this.close().catch(() => {
         });
-      };
+      }, cancellationError = new Error("Browser cancelled or exceeded 30s; browser cleanup requested. External effects may already have occurred."), checkCurrent = () => {
+        if (cancellation.signal.aborted || generation !== this.generation)
+          throw cancellationError;
+      }, rejectCancellation, interrupted = new Promise((_resolve, reject) => {
+        rejectCancellation = () => reject(cancellationError), cancellation.signal.addEventListener("abort", rejectCancellation, { once: !0 });
+      }), wait = (pending) => Promise.race([pending, interrupted]);
       signal?.addEventListener("abort", abort, { once: !0 });
       let deadline = setTimeout(abort, 3e4);
       try {
-        if (input.action === "close")
-          return await this.close(), {
+        if (input.action === "close") {
+          this.activeCancellation = void 0;
+          let closing = this.close();
+          return ownedGeneration = this.generation, await wait(closing), {
             content: [{ type: "text", text: "Browser closed; ephemeral cookies and tabs discarded." }],
             details: { action: input.action }
           };
-        if (await this.closing, signal?.aborted || generation !== this.generation)
-          throw new Error("Browser operation cancelled.");
-        if (!this.resources && input.action !== "navigate" && !(input.action === "tabs" && input.operation === "create"))
+        }
+        if (await wait(this.closing), checkCurrent(), !this.resources && input.action !== "navigate" && !(input.action === "tabs" && input.operation === "create"))
           throw new Error("No browser is open. Use navigate or tabs/create first. Idle cleanup discards tabs after 5 minutes.");
-        this.resources ??= this.open().catch((error) => {
-          throw generation === this.generation && (this.resources = void 0), error;
-        });
-        let resources = await this.resources;
-        if (generation !== this.generation)
-          throw new Error("Browser operation cancelled.");
-        let content = await Promise.race([
-          this.perform(resources, input),
-          new Promise((_resolve, reject) => {
-            let cancelled = () => reject(new Error("Browser cancelled or exceeded 30s; browser closed. External effects may already have occurred."));
-            cancellation.signal.aborted ? cancelled() : cancellation.signal.addEventListener("abort", cancelled, { once: !0 });
-          })
-        ]);
-        if (signal?.aborted || generation !== this.generation)
-          throw new Error("Browser operation cancelled; external effects may already have occurred. Inspect before retrying.");
-        return this.idle = setTimeout(() => {
+        if (!this.resources) {
+          let owner = { generation };
+          this.owner = owner, this.resources = this.open(owner).catch((error) => {
+            throw this.owner === owner && (this.resources = void 0, this.owner = void 0), error;
+          });
+        }
+        let resources = await wait(this.resources);
+        checkCurrent();
+        let content = await wait(this.perform(resources, input));
+        return checkCurrent(), this.idle = setTimeout(() => {
           this.close().catch(() => {
           });
         }, this.idleMs), this.idle.unref(), { content, details: { action: input.action } };
@@ -221,7 +223,7 @@ var BrowserSession = class {
         let message = error instanceof Error ? error.message : String(error);
         throw new Error(boundedBrowserText(message));
       } finally {
-        clearTimeout(deadline), signal?.removeEventListener("abort", abort);
+        clearTimeout(deadline), signal?.removeEventListener("abort", abort), cancellation.signal.removeEventListener("abort", rejectCancellation), this.activeCancellation === cancellation && (this.activeCancellation = void 0);
       }
     });
     this.queue = operation.catch(() => {
@@ -232,31 +234,39 @@ var BrowserSession = class {
       this.queued--;
     }
   }
-  async open() {
-    let proxy = await createBrowserProxy(this.allowPrivate), browser;
+  async open(owner) {
+    let checkCurrent = () => {
+      if (owner.generation !== this.generation)
+        throw new Error("Browser operation cancelled.");
+    };
     try {
+      let proxy = await createBrowserProxy(this.allowPrivate);
+      owner.proxy = proxy, checkCurrent();
       let { chromium } = await import("playwright-core");
-      browser = await chromium.launch({
+      checkCurrent();
+      let browser = await chromium.launch({
         headless: !0,
         timeout: 15e3,
         chromiumSandbox: !0,
         proxy: { server: proxy.url, bypass: "<-loopback>" },
         args: ["--disable-quic", "--force-webrtc-ip-handling-policy=disable_non_proxied_udp"]
       });
+      owner.browser = browser, checkCurrent();
       let context = await browser.newContext({
         acceptDownloads: !1,
         serviceWorkers: "block",
         permissions: [],
         viewport: { width: 1280, height: 800 }
       });
-      context.setDefaultTimeout(1e4), context.setDefaultNavigationTimeout(15e3), await context.route("**/*", async (route) => {
+      owner.generation !== this.generation && (context.close().catch(() => {
+      }), checkCurrent()), context.setDefaultTimeout(1e4), context.setDefaultNavigationTimeout(15e3), await context.route("**/*", async (route) => {
         try {
           browserUrl(route.request().url()), await route.continue();
         } catch {
           await route.abort().catch(() => {
           });
         }
-      }), await context.routeWebSocket("**/*", (socket) => socket.close());
+      }), checkCurrent(), await context.routeWebSocket("**/*", (socket) => socket.close()), checkCurrent();
       let resources = { browser, context, proxy, pages: /* @__PURE__ */ new Map(), nextId: 1 };
       return context.on("page", (page) => {
         if (resources.pages.size >= 4) {
@@ -274,8 +284,8 @@ var BrowserSession = class {
         });
       }), resources;
     } catch (error) {
-      await browser?.close().catch(() => {
-      }), await proxy.close();
+      await closeOwnedResources(owner).catch(() => {
+      });
       let message = error instanceof Error ? error.message : String(error);
       throw new Error(`Browser launch failed. Matching Chromium may be missing after --ignore-scripts or offline installation. Ask the user to run lunr browser install when online. Nothing was installed by this call. ${message}`);
     }

package/dist/node-runtime/{runtime-EFPPD2UW.js → runtime-UGXM4NPQ.js}

@@ -6,9 +6,9 @@ import {
   resolveRuntimeArchive,
   runtimeEnvironment,
   runtimeInventory
-} from "./chunk-5B6VKFEV.js";
+} from "./chunk-ZIQUS5QO.js";
 import "./chunk-URD2SLIT.js";
-import "./chunk-FQMM2EZ2.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 export {

package/dist/node-runtime/{runtime-bridges-7WVCLI76.js → runtime-bridges-DNKMNJCF.js}

@@ -1,19 +1,19 @@
 import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
 import {
   bindRuntimeBridges
-} from "./chunk-SPVDBUOS.js";
-import "./chunk-I74LN5JG.js";
-import "./chunk-UOEDI7RP.js";
-import "./chunk-2HMIRK7W.js";
+} from "./chunk-6O3IW3IA.js";
+import "./chunk-HUD2RFJW.js";
+import "./chunk-4KNKQGHM.js";
+import "./chunk-LHV3V67B.js";
 import "./chunk-URD2SLIT.js";
 import "./chunk-FY4A63RK.js";
 import "./chunk-4EULYYR4.js";
 import "./chunk-UJOCPOMX.js";
 import "./chunk-2TKODGBZ.js";
-import "./chunk-2MI5OPMN.js";
+import "./chunk-HNNHHJAB.js";
 import "./chunk-IMLCWLPI.js";
-import "./chunk-B4HP6ZWM.js";
-import "./chunk-FQMM2EZ2.js";
+import "./chunk-RHCGYWO7.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 export {

package/dist/node-runtime/{service-MDQIPQ26.js → service-IHLGFLBT.js}

@@ -13,9 +13,10 @@ import {
   serviceStatusText,
   startGatewayService,
   startupSpec,
-  stopGatewayService
-} from "./chunk-SLVOAQOY.js";
-import "./chunk-FQMM2EZ2.js";
+  stopGatewayService,
+  teardownGatewayService
+} from "./chunk-WXYNALHD.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 export {
@@ -32,5 +33,6 @@ export {
   serviceStatusText,
   startGatewayService,
   startupSpec,
-  stopGatewayService
+  stopGatewayService,
+  teardownGatewayService
 };

package/dist/node-runtime/{session-handoff-GWARVEWT.js → session-handoff-LYH53ESV.js}

@@ -11,11 +11,11 @@ import {
   recordTuiActivity,
   registerTransferHandler,
   requestSessionTransfer
-} from "./chunk-I54LGHWM.js";
-import "./chunk-2KIPT4HJ.js";
+} from "./chunk-STMX7W5I.js";
+import "./chunk-PWHTSQC4.js";
 import "./chunk-FVDOXRUD.js";
-import "./chunk-UAEOTO52.js";
-import "./chunk-FQMM2EZ2.js";
+import "./chunk-MNQXDFPV.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 export {

package/dist/node-runtime/{session-manager-JB5J6XBN.js → session-manager-ZJ3N5Q74.js}

@@ -12,10 +12,10 @@ import {
   migrateSessionEntries,
   parseSessionEntries,
   sessionEntryToContextMessages
-} from "./chunk-2KIPT4HJ.js";
+} from "./chunk-PWHTSQC4.js";
 import "./chunk-FVDOXRUD.js";
-import "./chunk-UAEOTO52.js";
-import "./chunk-FQMM2EZ2.js";
+import "./chunk-MNQXDFPV.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 export {

package/dist/node-runtime/{session-selector-GIM4DHQ2.js → session-selector-I73U3EIO.js}

@@ -1,13 +1,13 @@
 import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
 import {
   SessionSelectorComponent
-} from "./chunk-PCEW76PM.js";
-import "./chunk-UAEOTO52.js";
-import "./chunk-5EFIU3OM.js";
-import "./chunk-6VYZ5UFP.js";
-import "./chunk-GS42T6MX.js";
-import "./chunk-RDDAZOMU.js";
-import "./chunk-FQMM2EZ2.js";
+} from "./chunk-2OIPYKLZ.js";
+import "./chunk-MNQXDFPV.js";
+import "./chunk-FTKEZL27.js";
+import "./chunk-FLGEEH27.js";
+import "./chunk-QW3AAHWN.js";
+import "./chunk-JL4HYQXK.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 export {

package/dist/node-runtime/{settings-manager-DJDM5AHM.js → settings-manager-P2TKGYTR.js}

@@ -8,15 +8,15 @@ import {
   bindSubagentCommunicationSetting,
   parseSkillTagCharacter,
   subagentCommunicationEnabled
-} from "./chunk-I74LN5JG.js";
-import "./chunk-UOEDI7RP.js";
-import "./chunk-2HMIRK7W.js";
+} from "./chunk-HUD2RFJW.js";
+import "./chunk-4KNKQGHM.js";
+import "./chunk-LHV3V67B.js";
 import "./chunk-URD2SLIT.js";
 import "./chunk-FY4A63RK.js";
 import "./chunk-UJOCPOMX.js";
 import "./chunk-IMLCWLPI.js";
-import "./chunk-B4HP6ZWM.js";
-import "./chunk-FQMM2EZ2.js";
+import "./chunk-RHCGYWO7.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 export {

package/dist/node-runtime/{setup-JBKOLJ6F.js → setup-H7CCELIL.js}

@@ -1,13 +1,27 @@
 import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
+import {
+  isBunBinary
+} from "./chunk-64XTQNLA.js";
+import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 
 // packages/coding-agent/dist/core/browser/setup.js
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 async function installBrowser(explicit = !0) {
+  if (isBunBinary) {
+    let notice = "Chromium installation is unavailable in the compiled standalone executable. Install the same lunR version through npm and run lunr browser install there. Use the same PLAYWRIGHT_BROWSERS_PATH for installation and standalone execution.";
+    if (explicit)
+      throw new Error(notice);
+    console.warn(notice);
+    return;
+  }
   let script = fileURLToPath(new URL("../../../scripts/install-browser.mjs", new URL("../core/browser/setup.js", import.meta.url).href));
   await new Promise((resolve, reject) => {
-    let child = spawn(process.execPath, [script, ...explicit ? ["--explicit"] : []], { stdio: "inherit", windowsHide: !0 });
+    let child = spawn(process.execPath, [script, ...explicit ? ["--explicit"] : []], {
+      stdio: "inherit",
+      windowsHide: !0
+    });
     child.once("error", reject), child.once("exit", (code) => {
       code === 0 ? resolve() : reject(new Error(`Chromium setup failed (${code}). Retry lunr browser install when online.`));
     });

package/dist/node-runtime/{setup-PFBWRNUI.js → setup-OLQ4GXWS.js}

@@ -4,49 +4,49 @@ import {
 } from "./chunk-H4K3JDRB.js";
 import {
   createPairingStore
-} from "./chunk-RMQZU2YU.js";
+} from "./chunk-NNNR3QIY.js";
 import {
   configureStartup,
   loadServiceSettings,
   startGatewayService
-} from "./chunk-SLVOAQOY.js";
+} from "./chunk-WXYNALHD.js";
 import {
   createStartupTui,
   showStartupInput,
   startStartupTui
-} from "./chunk-X3PGBLQ7.js";
+} from "./chunk-IHHTWSXN.js";
 import "./chunk-YPHAIRZT.js";
-import "./chunk-RAK2QA2B.js";
-import "./chunk-DVGWF6A2.js";
+import "./chunk-UYRKUKFE.js";
 import "./chunk-OBMWP3I5.js";
+import "./chunk-DVGWF6A2.js";
 import {
   SettingsManager
-} from "./chunk-I74LN5JG.js";
-import "./chunk-UOEDI7RP.js";
+} from "./chunk-HUD2RFJW.js";
+import "./chunk-4KNKQGHM.js";
 import {
   loadInstallFeatures,
   saveInstallFeatures
-} from "./chunk-2HMIRK7W.js";
+} from "./chunk-LHV3V67B.js";
 import "./chunk-URD2SLIT.js";
 import "./chunk-CGBXPL3E.js";
 import "./chunk-FY4A63RK.js";
 import "./chunk-UJOCPOMX.js";
 import "./chunk-IMLCWLPI.js";
-import "./chunk-5EFIU3OM.js";
+import "./chunk-FTKEZL27.js";
 import {
   loadGatewayConfig,
   saveGatewayConfig
-} from "./chunk-B4HP6ZWM.js";
-import "./chunk-QH6YL7VK.js";
-import "./chunk-HMBGROQK.js";
+} from "./chunk-RHCGYWO7.js";
+import "./chunk-252ZVPPF.js";
+import "./chunk-GLDXBBL6.js";
 import "./chunk-I6R76AG7.js";
-import "./chunk-6VYZ5UFP.js";
-import "./chunk-GS42T6MX.js";
+import "./chunk-FLGEEH27.js";
+import "./chunk-QW3AAHWN.js";
 import {
   getSelectListTheme,
   theme
-} from "./chunk-RDDAZOMU.js";
-import "./chunk-FQMM2EZ2.js";
+} from "./chunk-JL4HYQXK.js";
+import "./chunk-64XTQNLA.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";
 
@@ -157,7 +157,7 @@ Guide: https://docs.discord.com/developers/quick-start/getting-started`);
       { label: "When the computer boots", value: "boot" }
     ], loadServiceSettings().startup);
     startup === "boot" && console.log("Boot startup may require administrator permission or OS-managed account credentials. lunR does not save your account password.");
-    let { ModelRuntime } = await import("./model-runtime-OO5HFLWE.js"), models = await (await ModelRuntime.create({ allowModelNetwork: !1 })).getAvailable();
+    let { ModelRuntime } = await import("./model-runtime-MZ2JMDV4.js"), models = await (await ModelRuntime.create({ allowModelNetwork: !1 })).getAvailable();
     if (!models.length)
       throw new Error("No saved model credentials found. Open lunr locally and use /login, then rerun gateway setup. Nothing saved.");
     let settings = SettingsManager.create(cfg.defaultProject), providers = [...new Set(models.map((model2) => model2.provider))], provider = await choose("Model provider", providers.map((value) => ({ label: value, value })), settings.getDefaultProvider()), choices = models.filter((model2) => model2.provider === provider), model = await choose("Model", choices.map((value) => ({ label: value.id, value })), choices.find((model2) => model2.id === settings.getDefaultModel()));

package/dist/node-runtime/{src-IVPNZ2BX.js → src-6RV4PXKJ.js}

@@ -22,16 +22,26 @@ import {
 import {
   typebox_exports
 } from "./chunk-PL6JKXWI.js";
+import {
+  withFileMutationQueue
+} from "./chunk-YSB6URMT.js";
 import {
   DEFAULT_MAX_BYTES,
   DEFAULT_MAX_LINES,
   truncateHead
 } from "./chunk-53YJI7JU.js";
+import {
+  protectedTargetWriteReason,
+  resolveToCwd
+} from "./chunk-F2V2F4ZG.js";
+import "./chunk-BDRGN3L2.js";
 import {
   isEditToolResult,
   isReadToolResult,
   isWriteToolResult
 } from "./chunk-OR4L3IB2.js";
+import "./chunk-64XTQNLA.js";
+import "./chunk-Q4Q6D4IY.js";
 import {
   __toESM
 } from "./chunk-BRJX2PRC.js";
@@ -41,7 +51,7 @@ var import_vscode_languageserver_protocol3 = __toESM(require_api(), 1);
 
 // packages/coding-agent/dist/builtin-extensions/pi-lsp-extension/src/runtime.js
 var defaultLoaders = {
-  loadLspManager: () => import("./lsp-manager-3ASUSO4T.js"),
+  loadLspManager: () => import("./lsp-manager-S554V5HR.js"),
   loadFileSync: () => import("./file-sync-HCOP2QVF.js"),
   loadTreeSitter: () => import("./parser-manager-TQHWYDH7.js"),
   loadWorkspaceIndex: () => import("./workspace-index-6DBXSTJ6.js")
@@ -1587,6 +1597,7 @@ function hasErrors(node) {
 }
 
 // packages/coding-agent/dist/builtin-extensions/pi-lsp-extension/src/tree-sitter/search-engine.js
+import { createHash } from "node:crypto";
 import { resolve as resolve2 } from "node:path";
 import { readdir as readdir2, readFile as readFile8, stat } from "node:fs/promises";
 async function searchFiles(pattern, rootDir, treeSitter, options = {}) {
@@ -1600,12 +1611,13 @@ async function searchFiles(pattern, rootDir, treeSitter, options = {}) {
       let content = await readFile8(file, "utf-8"), tree = await treeSitter.parseWithLanguage(file, content, pattern.languageId);
       if (!tree)
         continue;
-      let fileMatches = findMatches(tree.rootNode, pattern.root);
+      let sourceHash = createHash("sha256").update(content).digest("hex"), fileMatches = findMatches(tree.rootNode, pattern.root);
       for (let m of fileMatches) {
         if (matches.length >= maxResults)
           break;
         matches.push({
           file,
+          sourceHash,
           line: m.node.startPosition.row + 1,
           column: m.node.startPosition.column + 1,
           matchedText: m.node.text,
@@ -1800,6 +1812,8 @@ function createCodeSearchTool(rootDirOrGetter, treeSitter) {
 import { relative as relative8 } from "node:path";
 
 // packages/coding-agent/dist/builtin-extensions/pi-lsp-extension/src/tree-sitter/rewrite-engine.js
+import { createHash as createHash2 } from "node:crypto";
+import { dirname } from "node:path";
 import { readFile as readFile9, writeFile } from "node:fs/promises";
 var METAVAR_REF_RE = /\$\$\$([A-Z_][A-Z0-9_]*)|\$([A-Z_][A-Z0-9_]*)/g;
 function substituteCaptures(template, captures) {
@@ -1824,28 +1838,47 @@ function computeRewrites(matches, replacementTemplate) {
     };
   });
 }
-async function applyRewrites(matches, replacementTemplate) {
+async function applyRewrites(matches, replacementTemplate, cwd) {
   let byFile = /* @__PURE__ */ new Map();
-  for (let m of matches) {
-    let existing = byFile.get(m.file);
-    existing ? existing.push(m) : byFile.set(m.file, [m]);
+  for (let match of matches) {
+    let existing = byFile.get(match.file);
+    existing ? existing.push(match) : byFile.set(match.file, [match]);
+  }
+  let result = { changes: [], filesModified: 0, modifiedFiles: [], failures: [], skippedFiles: [] }, files = [...byFile.keys()];
+  for (let file of files) {
+    let reason = protectedTargetWriteReason(file, cwd ?? dirname(file));
+    reason && result.failures.push({ file, reason });
   }
-  let changes = [], filesModified = 0;
+  if (result.failures.length)
+    return result.skippedFiles = files.filter((file) => !result.failures.some((failure) => failure.file === file)), result;
   for (let [file, fileMatches] of byFile) {
-    let sorted = [...fileMatches].sort((a, b) => b.startIndex - a.startIndex), content = await readFile9(file, "utf-8"), modified = !1;
-    for (let m of sorted) {
-      let raw = substituteCaptures(replacementTemplate, m.captures), replacement = preserveTrailingSemicolon(m.matchedText, raw);
-      replacement !== m.matchedText && (content = content.slice(0, m.startIndex) + replacement + content.slice(m.endIndex), modified = !0), changes.push({
-        file,
-        line: m.line,
-        column: m.column,
-        before: m.matchedText,
-        after: replacement
+    let writeAttempted = !1;
+    try {
+      let applied = await withFileMutationQueue(file, async () => {
+        let reason = protectedTargetWriteReason(file, cwd ?? dirname(file));
+        if (reason)
+          throw new Error(reason);
+        let source = await readFile9(file, "utf-8"), sourceHash = createHash2("sha256").update(source).digest("hex"), sorted = [...fileMatches].sort((a, b) => b.startIndex - a.startIndex), nextStart = source.length;
+        for (let match of sorted) {
+          if (match.sourceHash !== sourceHash || !Number.isInteger(match.startIndex) || !Number.isInteger(match.endIndex) || match.startIndex < 0 || match.endIndex > nextStart || match.startIndex > match.endIndex || source.slice(match.startIndex, match.endIndex) !== match.matchedText)
+            throw new Error("Source changed or match offsets are invalid. Search again before applying a rewrite.");
+          nextStart = match.startIndex;
+        }
+        let content = source, changes = [];
+        for (let match of sorted) {
+          let raw = substituteCaptures(replacementTemplate, match.captures), replacement = preserveTrailingSemicolon(match.matchedText, raw);
+          content = content.slice(0, match.startIndex) + replacement + content.slice(match.endIndex), changes.push({ file, line: match.line, column: match.column, before: match.matchedText, after: replacement });
+        }
+        let modified = content !== source;
+        return modified && (writeAttempted = !0, await writeFile(file, content, "utf-8")), { changes: changes.reverse(), modified };
       });
+      result.changes.push(...applied.changes), applied.modified && result.modifiedFiles.push(file);
+    } catch (error) {
+      result.failures.push({ file, reason: error instanceof Error ? error.message : String(error), writeAttempted }), result.skippedFiles = files.slice(files.indexOf(file) + 1);
+      break;
     }
-    modified && (await writeFile(file, content, "utf-8"), filesModified++);
   }
-  return changes.reverse(), { changes, filesModified };
+  return result.filesModified = result.modifiedFiles.length, result;
 }
 
 // packages/coding-agent/dist/builtin-extensions/pi-lsp-extension/src/tools/code-rewrite.js
@@ -1861,7 +1894,7 @@ function createCodeRewriteTool(rootDirOrGetter, treeSitter, fileChangeCallback)
   return {
     name: "code_rewrite",
     label: "Code Rewrite",
-    description: "Transform code matching a structural pattern into a replacement. Use $NAME to capture and reuse single nodes, $$$NAME for sequences. Defaults to dry-run mode (preview only). Set dry_run=false to apply changes. For symbol renames, prefer lsp_rename instead (semantically correct).",
+    description: "Transform code matching a structural pattern into a replacement. Use $NAME to capture and reuse single nodes, $$$NAME for sequences. Defaults to dry-run mode (preview only). Set dry_run=false to apply changes. Apply rejects protected targets and stale source snapshots. Files apply sequentially; a later failure leaves earlier changes in place and reports skipped files. Search again after a stale-source failure. Inspect failed writes before retrying. For symbol renames, prefer lsp_rename instead (semantically correct).",
     parameters: RewriteParams,
     async execute(_toolCallId, params) {
       let rootDir = getRootDir(), { pattern: patternStr, replacement, language, path, dry_run } = params, isDryRun = dry_run !== !1, compiled;
@@ -1869,7 +1902,7 @@ function createCodeRewriteTool(rootDirOrGetter, treeSitter, fileChangeCallback)
         compiled = await compilePattern(patternStr, language, treeSitter);
       } catch (e) {
         return {
-          content: [{ type: "text", text: `Error: ${e.message}` }],
+          content: [{ type: "text", text: `Error: ${e instanceof Error ? e.message : String(e)}` }],
           details: { matchCount: 0, filesModified: 0, dryRun: isDryRun }
         };
       }
@@ -1883,7 +1916,7 @@ function createCodeRewriteTool(rootDirOrGetter, treeSitter, fileChangeCallback)
           };
       }
       let matches = await searchFiles(compiled, rootDir, treeSitter, {
-        path,
+        path: path ? resolveToCwd(path, rootDir) : void 0,
         maxResults: 500
       });
       if (matches.length === 0)
@@ -1919,13 +1952,16 @@ function createCodeRewriteTool(rootDirOrGetter, treeSitter, fileChangeCallback)
           details: { matchCount: matches.length, filesModified: uniqueFiles.size, dryRun: !0 }
         };
       }
-      let result = await applyRewrites(matches, replacement);
-      if (fileChangeCallback && result.filesModified > 0) {
-        let modifiedFiles = new Set(result.changes.map((c) => c.file));
-        for (let file of modifiedFiles)
+      let result = await applyRewrites(matches, replacement, rootDir);
+      if (fileChangeCallback && result.filesModified > 0)
+        for (let file of result.modifiedFiles)
           fileChangeCallback.onFileModified(file);
-      }
       let lines = [];
+      if (result.failures.length) {
+        lines.push(`Rewrite stopped. ${result.filesModified} file(s) changed before failure; earlier changes remain. ${result.skippedFiles.length} file(s) skipped.`), result.failures.some((failure) => failure.writeAttempted) && lines.push("A failed write may have partially changed its target. Inspect that file before retrying.");
+        for (let failure of result.failures)
+          lines.push(`${relative8(rootDir, failure.file)}: ${failure.reason}`);
+      }
       lines.push(`Applied ${result.changes.length} change${result.changes.length !== 1 ? "s" : ""} across ${result.filesModified} file${result.filesModified !== 1 ? "s" : ""}:
 `);
       for (let c of result.changes) {
@@ -1938,7 +1974,7 @@ function createCodeRewriteTool(rootDirOrGetter, treeSitter, fileChangeCallback)
 
 [Truncated: showing ${truncation.outputLines} of ${truncation.totalLines} lines]`), {
         content: [{ type: "text", text: output }],
-        details: { matchCount: matches.length, filesModified: result.filesModified, dryRun: !1 }
+        details: { matchCount: matches.length, filesModified: result.filesModified, dryRun: !1, failures: result.failures, skippedFiles: result.skippedFiles }
       };
     }
   };
@@ -2141,14 +2177,6 @@ function registerToolWithRuntime(pi, tool, ensure, host) {
   });
 }
 function lspExtension(pi) {
-  let origListeners = process.listeners("uncaughtException");
-  process.on("uncaughtException", (err) => {
-    if (err?.code !== "EPIPE") {
-      for (let listener of origListeners)
-        listener(err);
-      origListeners.length === 0 && console.error("[LSP] Uncaught exception:", err);
-    }
-  });
   let host = new LspRuntimeHost(), pendingProvider = null, latestCtx = null, projectConfig = null, sessionCwd = process.cwd(), withLatestCtx = (fn) => {
     let ctx = latestCtx;
     if (ctx)
@@ -2219,7 +2247,7 @@ function lspExtension(pi) {
     }
   }), ensureRuntime = async () => host.ensureServices(buildBindOptions(sessionCwd || process.cwd()));
   pi.on("session_start", async (_event, ctx) => {
-    latestCtx = ctx, sessionCwd = ctx.cwd, projectConfig = loadProjectConfig(ctx.cwd), await host.bindSession(buildBindOptions(ctx.cwd));
+    latestCtx = ctx, sessionCwd = ctx.cwd, projectConfig = ctx.isProjectTrusted() ? loadProjectConfig(ctx.cwd) : null, await host.bindSession(buildBindOptions(ctx.cwd));
     let statusText = pendingProvider?.getStatusText?.() ?? "";
     if (statusText ? ctx.ui.setStatus("lsp", ctx.ui.theme.fg("accent", `LSP: ${statusText}`)) : ctx.ui.setStatus("lsp", ctx.ui.theme.fg("dim", "LSP: idle")), projectConfig?.autoStart && projectConfig.autoStart.length > 0) {
       let langs = projectConfig.autoStart, generation = host.getGeneration();