@herbertgao/pi-extensions 2026.10.2 → 2026.10.3

package/node_modules/pi-lens/dist/{chunk-ORTMY4Q4.js → chunk-D65GOCJB.js}

@@ -1,33 +1,34 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   getScratchTreeDirNames
-} from "./chunk-TO6WL3GM.js";
+} from "./chunk-J3FZR3YY.js";
 import {
   SecurityScanClient
-} from "./chunk-7F72PXY2.js";
+} from "./chunk-5JHXUETW.js";
+import "./chunk-IMSQR4WO.js";
 import {
   resolveOpengrepConfig
-} from "./chunk-VDBPVIKD.js";
-import "./chunk-EOKRQ3SA.js";
-import "./chunk-WONERJTP.js";
+} from "./chunk-U52SAGRM.js";
+import "./chunk-CMU4RMJB.js";
+import "./chunk-O7HZX7CA.js";
 import {
   safeSpawnAsync
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-T54VJRAD.js";
 import "./chunk-BW5KFIQC.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
 import {
   recordDegradationOnce
-} from "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+} from "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
 import {
   realpathOrResolve
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/opengrep-client.js
@@ -104,7 +105,13 @@ var OpengrepClient = class _OpengrepClient extends SecurityScanClient {
         // pattern matches that directory name anywhere in the tree,
         // independent of gitignore. Same `EXCLUDED_DIRS`-derived list
         // gitleaks/trivy use, so the three scanners can't drift apart.
-        ...getScratchTreeDirNames().flatMap((name) => ["--exclude", name]),
+        // Opengrep's git-mode walk already omits nested linked checkouts.
+        // Do not turn each registration into a wcmatch pattern: hundreds of
+        // patterns make the matcher quadratic and can hit its pattern limit.
+        ...getScratchTreeDirNames().flatMap((pattern) => [
+          "--exclude",
+          pattern
+        ]),
         cwd
       ], { cwd, timeout: SCAN_TIMEOUT_MS });
       if (result.error) {

package/node_modules/pi-lens/dist/{chunk-NTUJEGDZ.js → chunk-D6YF5HKX.js}

@@ -1,10 +1,10 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   recordDegradation
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-7ELY2CSM.js";
 import {
   logExtension
-} from "./chunk-O6TQT6RI.js";
+} from "./chunk-34OCDWOS.js";
 
 // dist/clients/project-trust.js
 var trustState = "unknown";

package/node_modules/pi-lens/dist/{chunk-BRJKOBZP.js → chunk-DMS52BEP.js}

@@ -1,20 +1,24 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   getSecretsLaneAllowlistPaths,
-  isUnderSecretsLaneScratchTree
-} from "./chunk-TO6WL3GM.js";
+  isUnderSecretsLaneScratchTree,
+  nestedWorktreeOffsets
+} from "./chunk-J3FZR3YY.js";
 import {
   SecurityScanClient
-} from "./chunk-7F72PXY2.js";
+} from "./chunk-5JHXUETW.js";
 import {
   collectTrackedFiles,
   collectUntrackedIgnoredIds,
   safeSpawnAsync
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-T54VJRAD.js";
+import {
+  escapeRegExp
+} from "./chunk-7ELY2CSM.js";
 import {
   normalizeEphemeralMapKey,
   normalizeMapKey
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/gitleaks-client.js
 import * as fs from "node:fs";
@@ -48,10 +52,17 @@ var PLACEHOLDER_SECRET_REGEXES = [
   String.raw`(?i)^x{3,}$`,
   String.raw`(?i)^(changeme|change[-_]me|example|placeholder|dummy|fake|redacted|xxxxxxxx)$`
 ];
+function worktreeAllowlistPath(worktree) {
+  const segments = worktree.split(/[/\\]/).map(escapeRegExp);
+  return `^${segments.join("[/\\\\]")}(?:[/\\\\].*)?$`;
+}
 function writeScopedGitleaksConfig(outDir, cwd) {
   const localConfig = findLocalGitleaksConfig(cwd);
   const extendLine = localConfig ? `path = ${JSON.stringify(localConfig)}` : "useDefault = true";
-  const pathPatterns = getSecretsLaneAllowlistPaths().map((p) => `    ${JSON.stringify(p)},`).join("\n");
+  const pathPatterns = [
+    ...getSecretsLaneAllowlistPaths(),
+    ...nestedWorktreeOffsets(cwd).map((offset) => worktreeAllowlistPath(path.join(cwd, offset)))
+  ].map((p) => `    ${JSON.stringify(p)},`).join("\n");
   const regexPatterns = PLACEHOLDER_SECRET_REGEXES.map((r) => `    ${JSON.stringify(r)},`).join("\n");
   const toml = `[extend]
 ${extendLine}

package/node_modules/pi-lens/dist/{chunk-NL5GLMFI.js → chunk-ELVWJYRV.js}

@@ -1,21 +1,21 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   collectSourceFiles
-} from "./chunk-6QIUX4EP.js";
-import "./chunk-VHQLPIRJ.js";
-import "./chunk-VN2AXLEX.js";
+} from "./chunk-USHG4DLH.js";
+import "./chunk-H5EV3VMF.js";
+import "./chunk-T54VJRAD.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-5ZEJHV35.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-64LU2OVH.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/todo-scanner.js

package/node_modules/pi-lens/dist/{chunk-4W2PLC4J.js → chunk-EUT3B22Y.js}

@@ -3,22 +3,22 @@ import {
   RustClient,
   resetRustAvailability,
   rustClient
-} from "./chunk-RPD5K5NC.js";
-import "./chunk-F3P7VQ7H.js";
-import "./chunk-EOKRQ3SA.js";
-import "./chunk-WONERJTP.js";
-import "./chunk-VN2AXLEX.js";
+} from "./chunk-3MRXIJ6I.js";
+import "./chunk-XHSCVSOL.js";
+import "./chunk-CMU4RMJB.js";
+import "./chunk-O7HZX7CA.js";
+import "./chunk-T54VJRAD.js";
 import "./chunk-BW5KFIQC.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   RustClient,

package/node_modules/pi-lens/dist/{chunk-GUOGVTCQ.js → chunk-F5VLZHUW.js}

@@ -1,7 +1,7 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   recordDegradationOnce
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-7ELY2CSM.js";
 
 // dist/clients/deadline-utils.js
 function combineAbortSignals(...signals) {

package/node_modules/pi-lens/dist/{chunk-I7SPGOWI.js → chunk-FGALODG3.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-2EECBNC5.js";
 import {
   LEDGER_FIELD_MAX
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-7ELY2CSM.js";
 
 // dist/clients/dispatch/runners/utils/spawn-outcome.js
 function firstOutputLine(text, max = LEDGER_FIELD_MAX) {

package/node_modules/pi-lens/dist/{chunk-Q5U6FMDI.js → chunk-G3RLJYA2.js}

@@ -2148,20 +2148,26 @@ function isUnderDir(child, parent) {
   const parentPrefix = normParent.endsWith("/") ? normParent : `${normParent}/`;
   return normChild === normParent || normChild.startsWith(parentPrefix);
 }
+function isOutsideProjectRoot(filePath, projectRoot) {
+  return !isUnderDir(filePath, projectRoot);
+}
 var VENDOR_DIR_NAMES = /* @__PURE__ */ new Set([
   "node_modules",
   "vendor",
   "vendors",
   "third_party",
-  "third-party"
+  "third-party",
+  ".venv",
+  "site-packages",
+  "bower_components"
 ]);
+function isVendorPath(filePath) {
+  return normalizeFilePath(filePath).split("/").some((segment) => VENDOR_DIR_NAMES.has(segment.toLowerCase()));
+}
 function isExternalOrVendorFile(filePath, projectRoot) {
-  if (!isUnderDir(filePath, projectRoot))
+  if (isOutsideProjectRoot(filePath, projectRoot))
     return true;
-  const normalized = normalizeFilePath(filePath);
-  const rootNorm = normalizeFilePath(projectRoot);
-  const rel = normalized.startsWith(rootNorm + "/") ? normalized.slice(rootNorm.length + 1) : normalized;
-  return rel.split("/").some((seg) => VENDOR_DIR_NAMES.has(seg));
+  return isVendorPath(filePath);
 }
 function nameMatchesMarkerGlob(name, pattern) {
   return minimatch(name, pattern, {

package/node_modules/pi-lens/dist/{chunk-FJNKANOS.js → chunk-GAYGGICG.js}

@@ -7,19 +7,19 @@ import {
   loadCallGraph,
   parseSymbolKey,
   saveCallGraph
-} from "./chunk-NKOUFPQF.js";
+} from "./chunk-WW5BLB74.js";
 import "./chunk-3MED75HT.js";
-import "./chunk-VN2AXLEX.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-T54VJRAD.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   CALL_GRAPH_CACHE_VERSION,

package/node_modules/pi-lens/dist/{chunk-HVUZXSWK.js → chunk-H2W2AXD3.js}

@@ -1,74 +1,74 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  nestedWorktreeOffsets
+} from "./chunk-J3FZR3YY.js";
 import {
   formatToolFailure
-} from "./chunk-ZMOL6RQC.js";
-import "./chunk-I7SPGOWI.js";
+} from "./chunk-TA5L5KWQ.js";
+import "./chunk-FGALODG3.js";
 import {
   createAvailabilityChecker,
   findManagedNodeToolBinary,
   resolveAvailableOrInstall
-} from "./chunk-7FBF7NPR.js";
-import "./chunk-HHYAELLJ.js";
-import {
-  canonicalDirectory,
-  listNestedLinkedWorktreeRoots
-} from "./chunk-3I5QFT3N.js";
-import "./chunk-B3I2UUT4.js";
-import "./chunk-DIULIWKU.js";
-import "./chunk-VDBPVIKD.js";
-import "./chunk-TGPXLY2J.js";
+} from "./chunk-NFXP47RV.js";
+import "./chunk-MGIWSROG.js";
+import "./chunk-IMSQR4WO.js";
+import "./chunk-IQZXOZ7S.js";
+import "./chunk-LNOMA3MP.js";
+import "./chunk-U52SAGRM.js";
+import "./chunk-KJCWXUUS.js";
 import "./chunk-QOZXJ4NA.js";
-import "./chunk-PAK6IDME.js";
-import "./chunk-GUOGVTCQ.js";
-import "./chunk-AJVLWNFN.js";
-import "./chunk-YGVYKNSN.js";
+import "./chunk-S6AMWKPC.js";
+import "./chunk-F5VLZHUW.js";
+import "./chunk-AXKPQ6ZI.js";
+import "./chunk-7BX5DWSA.js";
 import {
   getJscpdMaxEntriesDerived
-} from "./chunk-LNAKEO63.js";
+} from "./chunk-IUKPRZER.js";
 import "./chunk-Z3CCVDUB.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-OQGFCZJ4.js";
-import "./chunk-RUOG5D2C.js";
+import "./chunk-LD7WFTRX.js";
+import "./chunk-IUR76K6A.js";
 import {
   findNodeToolBinary
-} from "./chunk-U3VGR4VU.js";
-import "./chunk-NTUJEGDZ.js";
-import "./chunk-EOKRQ3SA.js";
-import "./chunk-WONERJTP.js";
-import "./chunk-22AVIGXS.js";
-import "./chunk-GVXA6CCE.js";
-import "./chunk-6QIUX4EP.js";
+} from "./chunk-T4QZ6FEH.js";
+import "./chunk-D6YF5HKX.js";
+import "./chunk-CMU4RMJB.js";
+import "./chunk-O7HZX7CA.js";
+import "./chunk-VYKKMYVT.js";
+import "./chunk-BNKLYOOO.js";
+import "./chunk-USHG4DLH.js";
 import {
   shouldRecurseIntoDir,
   walkTreeStackSync
-} from "./chunk-VHQLPIRJ.js";
+} from "./chunk-H5EV3VMF.js";
 import {
   getExcludedDirGlobs,
   getProjectIgnoreGlobs,
   getProjectIgnoreMatcher,
   safeSpawnAsync
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-T54VJRAD.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-5ZEJHV35.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-64LU2OVH.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
 import {
   incrementDegradationCount
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-7ELY2CSM.js";
 import {
   createSubsystemLogger
-} from "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+} from "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
 import {
   isAtOrAboveHomeDir,
   isFullyQualified,
   toPosix
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/jscpd-client.js
@@ -76,7 +76,6 @@ import * as fs from "node:fs";
 import { mkdtempSync } from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
-import { relative } from "node:path";
 var EMPTY_RESULT = {
   success: false,
   clones: [],
@@ -113,10 +112,9 @@ function readProjectJscpdConfig(cwd) {
   return null;
 }
 function worktreeIgnoreGlobs(cwd) {
-  const base = canonicalDirectory(cwd);
   const globs = [];
-  for (const worktree of listNestedLinkedWorktreeRoots(cwd)) {
-    const inside = toPosix(relative(base, worktree));
+  for (const offset of nestedWorktreeOffsets(cwd)) {
+    const inside = toPosix(offset);
     const unsafe = inside.includes(",") ? "comma-in-path" : /[*?[\]{}()!\\]/.test(inside) ? "glob-char-in-path" : null;
     if (unsafe) {
       incrementDegradationCount({

package/node_modules/pi-lens/dist/{chunk-VHQLPIRJ.js → chunk-H5EV3VMF.js}

@@ -1,14 +1,14 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   isExcludedDirName
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-T54VJRAD.js";
 import {
   createDeadline,
   yieldIfOverBudget
 } from "./chunk-QYF5S6P6.js";
 import {
   isGeneratedArtifactDirectoryName
-} from "./chunk-DQ2NZ7C4.js";
+} from "./chunk-N2IRDBZI.js";
 
 // dist/clients/source-walker.js
 import * as fs from "node:fs";

package/node_modules/pi-lens/dist/{chunk-27BBHSZC.js → chunk-HREZQCT3.js}

@@ -1,9 +1,9 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   createSubsystemLogger
-} from "./chunk-O6TQT6RI.js";
-import "./chunk-UK3CMEAL.js";
-import "./chunk-Q5U6FMDI.js";
+} from "./chunk-34OCDWOS.js";
+import "./chunk-VSMJK3ZJ.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/metrics-client.js

package/node_modules/pi-lens/dist/{chunk-TT22N74J.js → chunk-HSIRMK2D.js}

@@ -4,46 +4,46 @@ import {
 } from "./chunk-7U2IDNXN.js";
 import {
   getScratchTreeFnmatchPatterns
-} from "./chunk-TO6WL3GM.js";
+} from "./chunk-J3FZR3YY.js";
 import {
   formatToolFailure
-} from "./chunk-ZMOL6RQC.js";
+} from "./chunk-TA5L5KWQ.js";
 import {
   firstOutputLine,
   spawnFailedWithNoOutput
-} from "./chunk-I7SPGOWI.js";
+} from "./chunk-FGALODG3.js";
 import {
   listNestedLinkedWorktreeRoots
-} from "./chunk-3I5QFT3N.js";
+} from "./chunk-IMSQR4WO.js";
 import {
   extractTomlTableSection,
   parseTomlStringArray
-} from "./chunk-PAK6IDME.js";
+} from "./chunk-S6AMWKPC.js";
 import {
   VENV_BIN_DIRS,
   findLocalBinsAt
-} from "./chunk-U3VGR4VU.js";
+} from "./chunk-T4QZ6FEH.js";
 import {
   probeToolAsync
-} from "./chunk-EOKRQ3SA.js";
+} from "./chunk-CMU4RMJB.js";
 import {
   classifyProbeFailure,
   createAvailabilityLatch,
   logAvailabilityDecision,
   startHostStallSampler
-} from "./chunk-WONERJTP.js";
+} from "./chunk-O7HZX7CA.js";
 import {
   safeSpawnAsync
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-T54VJRAD.js";
 import {
   incrementDegradationCount
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-7ELY2CSM.js";
 import {
   createSubsystemLogger
-} from "./chunk-O6TQT6RI.js";
+} from "./chunk-34OCDWOS.js";
 import {
   findNearestMarkerRoot
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/dead-code-client.js
 import * as fs from "node:fs";

package/node_modules/pi-lens/dist/{chunk-3I5QFT3N.js → chunk-IMSQR4WO.js}

@@ -4,7 +4,7 @@ import {
   normalizeFilePath,
   pathsEqual,
   walkUpDirs
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/review-graph/git-identity.js
 import * as fs from "node:fs";
@@ -108,8 +108,11 @@ function listLinkedWorktreeRoots(commonDir) {
     try {
       const entryDir = join2(commonDir, "worktrees", name);
       const gitFile = fs.readFileSync(join2(entryDir, "gitdir"), "utf-8").trim();
-      if (gitFile)
-        roots.push(canonicalDirectory(dirname(resolve2(entryDir, gitFile))));
+      if (gitFile) {
+        const root = canonicalDirectory(dirname(resolve2(entryDir, gitFile)));
+        if (fs.existsSync(join2(root, ".git")))
+          roots.push(root);
+      }
     } catch {
     }
   }