@herbertgao/pi-extensions 2026.8.10 → 2026.8.12

package/node_modules/pi-lens/dist/tools/symbol-search.js

@@ -7,7 +7,7 @@
  */
 import * as path from "node:path";
 import { Type } from "../clients/deps/typebox.js";
-import { symbolSearch } from "../clients/lens-engine.js";
+import { symbolSearch, } from "../clients/lens-engine.js";
 import { baseName, compactRenderResult } from "./render-compact.js";
 /**
  * Machine-actionable follow-up hint (#771) — mirrors ast-grep-search.ts's
@@ -136,7 +136,10 @@ export function createSymbolSearchTool(getProjectRoot) {
             };
             return {
                 content: [
-                    { type: "text", text: `${lines.join("\n")}\n\n${JSON.stringify(payload)}` },
+                    {
+                        type: "text",
+                        text: `${lines.join("\n")}\n\n${JSON.stringify(payload)}`,
+                    },
                 ],
                 details: {
                     available: true,

package/node_modules/pi-lens/docs/durable-store-audit-1202.md

@@ -22,7 +22,7 @@ audit classifies stores reachable by extension, MCP, CLI, and subagent processes
 | Diagnostic dispositions — `<project>/cache/diagnostic-dispositions.json` | extension, MCP, CLI tools, subagents | read-modify-write behavior gate | (c) possible, harmful | **fixed here:** exclusive pid lock, in-lock disk re-read, and per-anchor merge refuse stale whole-file promotion. |
 | Recent touches — `<project>/recent-touches.json` | every extension/subagent publisher | read-append-overwrite bounded attribution ring | (b) possible, benign | explicitly best-effort nudge attribution; lost entries do not gate edits/checks and later touches replenish it. Accepted benign. |
 | Instance registry — `<global>/instances.json` | every host/MCP/subagent process and reaper | read-modify-overwrite observability registry | (b) possible, benign | explicitly best-effort. Backstop orphan reaping intentionally kills untracked managed processes on dead-parent confirmation; missing registry entries allow this (intentional, #1267-adjacent; no fix needed). |
-| Project snapshot — `<project>/cache/project-snapshot.json.gz` + `.meta.json` | extension/MCP/CLI builders, subagents | monotonic derived snapshot | (a) impossible | durable project sequence/source identity and generation-gated staged promotion; body embeds its seq so mismatched metadata is rejected. |
+| Project snapshot — `<project>/cache/project-snapshot.json.gz` + `.meta.json` | extension/MCP/CLI builders, subagents | monotonic derived snapshot | (a) impossible | durable project sequence/source identity, one active plus latest queued request per root, worker-earned semantic fingerprint dedupe, and generation-gated staged promotion; body embeds its seq so mismatched metadata is rejected. |
 | Review graph + checkpoint — `<project>/cache/review-graph.json.gz`, `review-graph.checkpoint.json.gz` | extension/MCP/CLI builders, subagents | overwrite-only derived graph | (a) impossible | source signature/project-seq validation plus staged, generation-gated promotion; stale content is rejected on load. |
 | Probe cache — `<global>/probe-cache.json` | every installer/prober | read-modify-write tool availability | (a) impossible | existing bounded cross-process lock + in-lock re-read/change merge (#1263). |
 | Stop-hook status — OS temp `pi-lens-turn-end-*.json` | concurrent CLI Stop hooks | read-modify-overwrite counters | (b) possible, benign | atomic publication; explicitly bounded best-effort telemetry. Accepted benign. |

package/node_modules/pi-lens/docs/servercapabilities.md

@@ -6,7 +6,7 @@ server's `initialize` handshake. Generated by `node scripts/server-capabilities.
 absent on the generating host are listed under *Unavailable* — run in a
 provisioned environment (the nightly) to capture those rows.
 
-_Last generated: 2026-08-20 on linux; 30 servers captured, 14 unavailable._
+_Last generated: 2026-08-21 on linux; 30 servers captured, 14 unavailable._
 
 ## Diagnostic mode + navigation/edit operations
 

package/node_modules/pi-lens/package.json

@@ -1,158 +1,162 @@
 {
-  "name": "pi-lens",
-  "version": "4.1.1",
-  "type": "module",
-  "description": "Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/apmantza/pi-lens.git"
-  },
-  "main": "./dist/index.js",
-  "bin": {
-    "pi-lens": "dist/mcp/cli.js",
-    "pi-lens-mcp": "dist/mcp/server.js",
-    "pi-lens-analyze": "dist/mcp/analyze-cli.js"
-  },
-  "scripts": {
-    "build": "tsc --project tsconfig.build.json",
-    "build:dist": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && npx --yes -p typescript@7.0.2 tsc --project tsconfig.dist.json --noCheck && npm run bundle:dist",
-    "bundle:dist": "node scripts/bundle-dist.mjs",
-    "prepare": "npm run build:dist && node scripts/download-grammars.js --core --dest grammars && node scripts/setup-git-hooks.mjs && node scripts/warm-loader-cache.mjs",
-    "lint": "tsc --project tsconfig.json",
-    "watch": "tsc --watch",
-    "test": "node scripts/with-test-lock.mjs -- vitest run",
-    "test:unit": "node scripts/with-test-lock.mjs -- vitest run",
-    "test:integration": "node scripts/with-test-lock.mjs -- vitest run tests/index-integration.test.ts tests/clients/lsp/integration.test.ts",
-    "test:watch": "vitest",
-    "check": "node scripts/check-extensions.mjs",
-    "selftest:install": "node scripts/install-selftest.mjs",
-    "check:lockfile": "node scripts/check-lockfile-sync.mjs",
-    "check:grammars": "node scripts/check-grammar-provenance.mjs",
-    "check:grammar-load": "node scripts/check-grammar-load.mjs",
-    "audit:tree-sitter": "node scripts/audit-tree-sitter-rules.mjs",
-    "audit:rule-catalog": "node scripts/validate-rule-catalog.mjs",
-    "audit:astgrep-rule-pairs": "node scripts/audit-astgrep-rule-pairs.mjs",
-    "astgrep:self-scan": "node scripts/run-astgrep-pi-lens.mjs",
-    "astgrep:self-scan:update-baseline": "node scripts/run-astgrep-pi-lens.mjs --update-baseline",
-    "audit:playground": "node scripts/playground-verify-rule.mjs",
-    "bench:cascade-budget": "node scripts/bench-cascade-budget.mjs",
-    "logs:smells": "node scripts/analyze-pi-lens-logs.mjs",
-    "changelog:check": "node scripts/rollup-changelog.mjs --check",
-    "changelog:release": "node scripts/changelog-release.mjs",
-    "changelog:extract": "node scripts/changelog-extract.mjs",
-    "release:backfill-notes": "node scripts/backfill-github-releases.mjs",
-    "release:backfill-thanks": "node scripts/backfill-release-thanks.mjs",
-    "docs:rule-catalogs": "node scripts/gen-rule-catalogs.mjs",
-    "banner": "npx -y sharp-cli --input banner.svg --output banner.png resize 2200 620",
-    "download-grammars": "node scripts/download-grammars.js",
-    "harness:poc": "node scripts/run-harness.mjs cases/ts/pipeline-dispatch-poc",
-    "harness:python-poc": "node scripts/run-harness.mjs cases/python/pipeline-dispatch-poc",
-    "harness:ts-format-poc": "node scripts/run-harness.mjs cases/ts/format-default-poc",
-    "harness:python-autofix-poc": "node scripts/run-harness.mjs cases/python/autofix-default-poc",
-    "harness:go-poc": "node scripts/run-harness.mjs cases/go/pipeline-dispatch-poc"
-  },
-  "keywords": [
-    "pi",
-    "pi-extension",
-    "pi-package",
-    "linter",
-    "biome",
-    "ast-grep",
-    "ruff",
-    "typescript",
-    "code-quality",
-    "feedback",
-    "type-coverage",
-    "jscpd",
-    "knip"
-  ],
-  "author": "Apostolos Mantzaris",
-  "license": "MIT",
-  "files": [
-    "dist/",
-    "docs/",
-    "grammars/",
-    "vendor/grammars/",
-    "config/",
-    "rules/",
-    "skills/",
-    "scripts/download-grammars.js",
-    "scripts/grammars.lock.json",
-    "scripts/analyze-pi-lens-logs.mjs",
-    "scripts/install-selftest.mjs",
-    "scripts/lib/host-provided-deps.mjs",
-    "scripts/lib/warm-loader-cache.mjs",
-    "scripts/warm-loader-cache.mjs",
-    "scripts/rpc-load-check.mjs",
-    "README.md",
-    "CHANGELOG.md",
-    "banner.svg",
-    "banner.png"
-  ],
-  "dependencies": {
-    "@ast-grep/cli": "^0.45.0",
-    "@ast-grep/napi": "^0.45.0",
-    "js-yaml": "^5.2.2",
-    "minimatch": "^10.2.6",
-    "pidusage": "^4.0.1",
-    "vscode-jsonrpc": "^9.0.0"
-  },
-  "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "*",
-    "@earendil-works/pi-tui": "^0.84.1",
-    "typebox": "^1.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@earendil-works/pi-coding-agent": {
-      "optional": true
-    },
-    "@earendil-works/pi-tui": {
-      "optional": true
-    },
-    "typebox": {
-      "optional": true
-    }
-  },
-  "optionalDependencies": {
-    "jiti": "^2.7.0",
-    "web-tree-sitter": "0.25.10"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "^2.4.10",
-    "@earendil-works/pi-coding-agent": "^0.84.1",
-    "@earendil-works/pi-tui": "^0.84.1",
-    "@types/node": "^26.0.0",
-    "@types/pidusage": "^2.0.5",
-    "@vitest/coverage-v8": "^4.1.5",
-    "husky": "^9.1.7",
-    "typebox": "^1.0.0",
-    "typescript": "^7.0.2",
-    "typescript-language-server": "^5.1.3",
-    "vitest": "^4.1.1"
-  },
-  "pi": {
-    "extensions": [
-      "./dist/index.js"
-    ],
-    "skills": [
-      "../../skills"
-    ]
-  },
-  "knip": {
-    "entry": [
-      "index.ts"
-    ],
-    "project": [
-      "**/*.ts",
-      "!**/*.test.ts"
-    ],
-    "ignore": [
-      "**/*.test.ts"
-    ]
-  },
-  "allowScripts": {
-    "@ast-grep/cli@0.45.1": true,
-    "@google/genai@1.52.0": true,
-    "protobufjs@7.6.5": true
-  }
+	"name": "pi-lens",
+	"version": "4.1.2",
+	"type": "module",
+	"description": "Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/apmantza/pi-lens.git"
+	},
+	"main": "./dist/index.js",
+	"bin": {
+		"pi-lens": "dist/mcp/cli.js",
+		"pi-lens-mcp": "dist/mcp/server.js",
+		"pi-lens-analyze": "dist/mcp/analyze-cli.js"
+	},
+	"scripts": {
+		"build": "tsc --project tsconfig.build.json",
+		"build:dist": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && npx --yes -p typescript@7.0.2 tsc --project tsconfig.dist.json --noCheck && npm run bundle:dist",
+		"bundle:dist": "node scripts/bundle-dist.mjs",
+		"prepare": "npm run build:dist && node scripts/download-grammars.js --core --dest grammars && node scripts/setup-git-hooks.mjs && node scripts/warm-loader-cache.mjs",
+		"lint": "tsc --project tsconfig.json",
+		"fmt": "oxfmt",
+		"fmt:check": "oxfmt --check",
+		"watch": "tsc --watch",
+		"test": "node scripts/with-test-lock.mjs -- vitest run",
+		"test:unit": "node scripts/with-test-lock.mjs -- vitest run",
+		"test:integration": "node scripts/with-test-lock.mjs -- vitest run tests/index-integration.test.ts tests/clients/lsp/integration.test.ts",
+		"test:watch": "vitest",
+		"check": "node scripts/check-extensions.mjs",
+		"selftest:install": "node scripts/install-selftest.mjs",
+		"check:lockfile": "node scripts/check-lockfile-sync.mjs",
+		"check:grammars": "node scripts/check-grammar-provenance.mjs",
+		"check:grammar-load": "node scripts/check-grammar-load.mjs",
+		"audit:tree-sitter": "node scripts/audit-tree-sitter-rules.mjs",
+		"audit:rule-catalog": "node scripts/validate-rule-catalog.mjs",
+		"audit:astgrep-rule-pairs": "node scripts/audit-astgrep-rule-pairs.mjs",
+		"astgrep:self-scan": "node scripts/run-astgrep-pi-lens.mjs",
+		"astgrep:self-scan:update-baseline": "node scripts/run-astgrep-pi-lens.mjs --update-baseline",
+		"audit:playground": "node scripts/playground-verify-rule.mjs",
+		"bench:cascade-budget": "node scripts/bench-cascade-budget.mjs",
+		"logs:smells": "node scripts/analyze-pi-lens-logs.mjs",
+		"changelog:check": "node scripts/rollup-changelog.mjs --check",
+		"changelog:release": "node scripts/changelog-release.mjs",
+		"changelog:extract": "node scripts/changelog-extract.mjs",
+		"release:backfill-notes": "node scripts/backfill-github-releases.mjs",
+		"release:backfill-thanks": "node scripts/backfill-release-thanks.mjs",
+		"docs:rule-catalogs": "node scripts/gen-rule-catalogs.mjs",
+		"banner": "npx -y sharp-cli --input banner.svg --output banner.png resize 2200 620",
+		"download-grammars": "node scripts/download-grammars.js",
+		"harness:poc": "node scripts/run-harness.mjs cases/ts/pipeline-dispatch-poc",
+		"harness:python-poc": "node scripts/run-harness.mjs cases/python/pipeline-dispatch-poc",
+		"harness:ts-format-poc": "node scripts/run-harness.mjs cases/ts/format-default-poc",
+		"harness:python-autofix-poc": "node scripts/run-harness.mjs cases/python/autofix-default-poc",
+		"harness:go-poc": "node scripts/run-harness.mjs cases/go/pipeline-dispatch-poc"
+	},
+	"keywords": [
+		"pi",
+		"pi-extension",
+		"pi-package",
+		"linter",
+		"biome",
+		"ast-grep",
+		"ruff",
+		"typescript",
+		"code-quality",
+		"feedback",
+		"type-coverage",
+		"jscpd",
+		"knip"
+	],
+	"author": "Apostolos Mantzaris",
+	"license": "MIT",
+	"files": [
+		"dist/",
+		"docs/",
+		"grammars/",
+		"vendor/grammars/",
+		"config/",
+		"rules/",
+		"skills/",
+		"scripts/download-grammars.js",
+		"scripts/grammars.lock.json",
+		"scripts/analyze-pi-lens-logs.mjs",
+		"scripts/install-selftest.mjs",
+		"scripts/lib/host-provided-deps.mjs",
+		"scripts/lib/warm-loader-cache.mjs",
+		"scripts/warm-loader-cache.mjs",
+		"scripts/rpc-load-check.mjs",
+		"README.md",
+		"CHANGELOG.md",
+		"banner.svg",
+		"banner.png"
+	],
+	"dependencies": {
+		"@ast-grep/cli": "^0.45.0",
+		"@ast-grep/napi": "^0.45.0",
+		"js-yaml": "^5.2.2",
+		"minimatch": "^10.2.6",
+		"pidusage": "^4.0.1",
+		"vscode-jsonrpc": "^9.0.0"
+	},
+	"peerDependencies": {
+		"@earendil-works/pi-coding-agent": "*",
+		"@earendil-works/pi-tui": "^0.84.1",
+		"typebox": "^1.0.0"
+	},
+	"peerDependenciesMeta": {
+		"@earendil-works/pi-coding-agent": {
+			"optional": true
+		},
+		"@earendil-works/pi-tui": {
+			"optional": true
+		},
+		"typebox": {
+			"optional": true
+		}
+	},
+	"optionalDependencies": {
+		"jiti": "^2.7.0",
+		"web-tree-sitter": "0.25.10"
+	},
+	"devDependencies": {
+		"@biomejs/biome": "^2.4.10",
+		"@earendil-works/pi-coding-agent": "^0.84.1",
+		"@earendil-works/pi-tui": "^0.84.1",
+		"@types/node": "^26.0.0",
+		"@types/pidusage": "^2.0.5",
+		"@vitest/coverage-v8": "^4.1.5",
+		"husky": "^9.1.7",
+		"oxfmt": "0.64.0",
+		"oxlint": "1.79.0",
+		"typebox": "^1.0.0",
+		"typescript": "^7.0.2",
+		"typescript-language-server": "^6.0.0",
+		"vitest": "^4.1.1"
+	},
+	"pi": {
+		"extensions": [
+			"./dist/index.js"
+		],
+		"skills": [
+			"../../skills"
+		]
+	},
+	"knip": {
+		"entry": [
+			"index.ts"
+		],
+		"project": [
+			"**/*.ts",
+			"!**/*.test.ts"
+		],
+		"ignore": [
+			"**/*.test.ts"
+		]
+	},
+	"allowScripts": {
+		"@ast-grep/cli@0.45.1": true,
+		"@google/genai@1.52.0": true,
+		"protobufjs@7.6.5": true
+	}
 }

package/node_modules/pi-lens/rules/typos/_typos.toml

@@ -13,5 +13,5 @@
 # dictionary here; every entry must have a provenance comment.
 
 [default.extend-identifiers]
-dito = "dito"            # #967 — real model/vendor namespace (provider-failover normalization prefix), not a misspelling of "ditto"
-unparseable = "unparseable"  # #967 — valid English spelling ("un-parseable"), not a typo of "unparsable"
+dito = "dito"               # #967 — real model/vendor namespace (provider-failover normalization prefix), not a misspelling of "ditto"
+unparseable = "unparseable" # #967 — valid English spelling ("un-parseable"), not a typo of "unparsable"

package/node_modules/pi-lens/scripts/analyze-pi-lens-logs.mjs

@@ -25,7 +25,11 @@ import { minimatch } from "minimatch";
 const DEFAULT_ROOT = path.join(os.homedir(), ".pi-lens");
 const DEFAULT_SINCE = "2d";
 const DEFAULT_LIMIT = 12;
-const DEFAULT_EXCLUDE_GLOBS = ["**/AppData/Local/Temp/claude/**", "**/heap-corpus*/**", "**/.plegma/work/**"];
+const DEFAULT_EXCLUDE_GLOBS = [
+	"**/AppData/Local/Temp/claude/**",
+	"**/heap-corpus*/**",
+	"**/.plegma/work/**",
+];
 
 const args = parseArgs(process.argv.slice(2));
 const root = path.resolve(expandHome(args.root ?? DEFAULT_ROOT));
@@ -36,7 +40,11 @@ const outputJson = Boolean(args.json);
 const includeArchived = Boolean(args.archived);
 const excludeGlobs = [
 	...DEFAULT_EXCLUDE_GLOBS,
-	...(Array.isArray(args.exclude) ? args.exclude : args.exclude ? [args.exclude] : []),
+	...(Array.isArray(args.exclude)
+		? args.exclude
+		: args.exclude
+			? [args.exclude]
+			: []),
 ];
 
 const thresholds = {
@@ -390,10 +398,7 @@ async function analyzeLatency(files, state) {
 							// Vintage-attribution fallback: no `unconfirmedByReason` means
 							// this line predates #1618 — the absent field IS the signal,
 							// not proof every file here was really a budget timeout.
-							ws.unconfirmedByReason.inc(
-								"budget (pre-#1618 build)",
-								timedOut,
-							);
+							ws.unconfirmedByReason.inc("budget (pre-#1618 build)", timedOut);
 						}
 						state.smellTotals.inc("lsp-workspace-file-timeouts");
 						pushTop(
@@ -708,7 +713,9 @@ async function analyzeActionableWarnings(files, state) {
 				state.actionable.reports++;
 				const summary = meta.summary ?? {};
 				state.actionable.suppressed += Number(summary.suppressed ?? 0);
-				state.actionable.autoFixEligible += Number(summary.autoFixEligible ?? 0);
+				state.actionable.autoFixEligible += Number(
+					summary.autoFixEligible ?? 0,
+				);
 			}
 			if (event === "advisory_injected") {
 				state.actionable.injected++;
@@ -758,8 +765,12 @@ async function analyzeAstGrepTools(files, state) {
 						tool,
 						errorKind: entry.errorKind,
 						durationMs: entry.durationMs,
-						message: String(entry.errorRaw ?? "").replace(/\s+/g, " ").slice(0, 180),
-						pattern: String(entry.pattern ?? "").replace(/\s+/g, " ").slice(0, 80),
+						message: String(entry.errorRaw ?? "")
+							.replace(/\s+/g, " ")
+							.slice(0, 180),
+						pattern: String(entry.pattern ?? "")
+							.replace(/\s+/g, " ")
+							.slice(0, 80),
 					},
 					limit * 3,
 					(a, b) => String(b.ts).localeCompare(String(a.ts)),
@@ -773,7 +784,9 @@ async function analyzeAstGrepTools(files, state) {
 						tool,
 						durationMs: entry.durationMs,
 						matchCount: entry.matchCount,
-						pattern: String(entry.pattern ?? "").replace(/\s+/g, " ").slice(0, 80),
+						pattern: String(entry.pattern ?? "")
+							.replace(/\s+/g, " ")
+							.slice(0, 80),
 					},
 					limit * 3,
 					byDuration,
@@ -810,7 +823,8 @@ async function analyzeWorklog(files, state) {
 			if (entry.autoFixed) row.autoFixed += 1;
 			state.worklog.byRuleModel.set(key, row);
 			state.worklog.byModel.inc(model || "(unknown)");
-			if (entry.autoFixed) state.worklog.byModelAutoFixed.inc(model || "(unknown)");
+			if (entry.autoFixed)
+				state.worklog.byModelAutoFixed.inc(model || "(unknown)");
 			state.worklog.byProvider.inc(provider || "(unknown)");
 		});
 	}
@@ -842,7 +856,9 @@ function isExcludedEntry(entry) {
 
 function pathValues(value, key = "") {
 	if (typeof value === "string") {
-		return /(file|path|cwd|root|project)/i.test(key) ? [normalizePath(value)] : [];
+		return /(file|path|cwd|root|project)/i.test(key)
+			? [normalizePath(value)]
+			: [];
 	}
 	if (!value || typeof value !== "object") return [];
 	return Object.entries(value).flatMap(([childKey, child]) =>
@@ -1259,7 +1275,9 @@ function buildReport(state) {
 		"lsp-workspace-file-timeouts",
 		smellCount("lsp-workspace-file-timeouts"),
 		`Full LSP sweeps produced an unconfirmed file (${ws.timedOutFilesTotal} files across ${ws.timedOutSweeps} sweeps)` +
-			(unconfirmedReasonBreakdown ? ` — by reason: ${unconfirmedReasonBreakdown}` : ""),
+			(unconfirmedReasonBreakdown
+				? ` — by reason: ${unconfirmedReasonBreakdown}`
+				: ""),
 		ws.sweeps.slice(0, limit),
 	);
 

package/node_modules/pi-lens/scripts/download-grammars.js

@@ -59,11 +59,15 @@ export const VENDORED_GRAMMARS = {
 export const VENDORED_DIR = "vendor/grammars";
 /** The package a grammar's sidecar records (override or the global aggregator). */
 export function expectedPackage(filename, manifest) {
-    return manifest.overrides?.[filename]?.package ?? SOURCE_OVERRIDES[filename]?.package ?? manifest.package;
+    return (manifest.overrides?.[filename]?.package ??
+        SOURCE_OVERRIDES[filename]?.package ??
+        manifest.package);
 }
 /** The version a grammar's sidecar records (override or the global aggregator). */
 export function expectedVersion(filename, manifest) {
-    return manifest.overrides?.[filename]?.version ?? SOURCE_OVERRIDES[filename]?.version ?? manifest.version;
+    return (manifest.overrides?.[filename]?.version ??
+        SOURCE_OVERRIDES[filename]?.version ??
+        manifest.version);
 }
 export const GRAMMARS = [
     // Core typed languages
@@ -227,7 +231,9 @@ async function regenerateManifest() {
         package: PACKAGE,
         version: TREE_SITTER_WASMS_VERSION,
         grammars: sorted,
-        ...(Object.keys(SOURCE_OVERRIDES).length ? { overrides: SOURCE_OVERRIDES } : {}),
+        ...(Object.keys(SOURCE_OVERRIDES).length
+            ? { overrides: SOURCE_OVERRIDES }
+            : {}),
         // Re-emitted from the map above, not copied from the old manifest: a
         // `--write-manifest` run on a tree-sitter-wasms bump must not silently
         // drop the committed grammars' provenance, which would leave the guard

package/node_modules/pi-lens/scripts/rpc-load-check.mjs

@@ -22,7 +22,8 @@ const pi = spawn(piBin, ["--mode", "rpc", "--no-session"], {
 	env: {
 		...process.env,
 		// RPC needs a provider configured to start; get_commands never calls it.
-		ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY || "sk-ant-dummy-rpc-load-check",
+		ANTHROPIC_API_KEY:
+			process.env.ANTHROPIC_API_KEY || "sk-ant-dummy-rpc-load-check",
 	},
 });
 
@@ -33,15 +34,27 @@ const finish = (code, msg) => {
 	if (done) return;
 	done = true;
 	if (msg) console.log(msg);
-	try { pi.kill("SIGKILL"); } catch {}
+	try {
+		pi.kill("SIGKILL");
+	} catch {}
 	process.exit(code);
 };
-const timer = setTimeout(() => finish(2, "TIMEOUT waiting for get_commands response"), 30000);
+const timer = setTimeout(
+	() => finish(2, "TIMEOUT waiting for get_commands response"),
+	30000,
+);
 
 function handle(line) {
 	let m;
-	try { m = JSON.parse(line); } catch { return; }
-	if ((m.type === "event" && m.event === "extension_error") || m.type === "extension_error") {
+	try {
+		m = JSON.parse(line);
+	} catch {
+		return;
+	}
+	if (
+		(m.type === "event" && m.event === "extension_error") ||
+		m.type === "extension_error"
+	) {
 		extErrors.push(m);
 		console.log("extension_error:", JSON.stringify(m).slice(0, 300));
 	}
@@ -54,9 +67,15 @@ function handle(line) {
 			`total commands: ${cmds.length}; pi-lens commands: ${lens.map((c) => c.name).join(", ") || "(none)"}`,
 		);
 		clearTimeout(timer);
-		if (extErrors.length) finish(1, `FAIL: ${extErrors.length} extension_error event(s)`);
-		else if (!lens.length) finish(1, "FAIL: pi-lens registered no commands (did it load?)");
-		else finish(0, `PASS: pi-lens loaded — ${lens.length} lens-* commands registered`);
+		if (extErrors.length)
+			finish(1, `FAIL: ${extErrors.length} extension_error event(s)`);
+		else if (!lens.length)
+			finish(1, "FAIL: pi-lens registered no commands (did it load?)");
+		else
+			finish(
+				0,
+				`PASS: pi-lens loaded — ${lens.length} lens-* commands registered`,
+			);
 	}
 }
 
@@ -76,5 +95,7 @@ pi.on("exit", (c) => {
 
 // Give extensions a moment to register, then request the command list.
 setTimeout(() => {
-	try { pi.stdin.write(`${JSON.stringify({ type: "get_commands" })}\n`); } catch {}
+	try {
+		pi.stdin.write(`${JSON.stringify({ type: "get_commands" })}\n`);
+	} catch {}
 }, 2500);

package/node_modules/pi-mcp-adapter/CHANGELOG.md

@@ -7,6 +7,40 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.28.0] - 2026-08-26
+
+### Highlights
+- MCP connections are less fragile when servers fail, recover, move slowly, or refresh their catalogs.
+- Direct MCP tools are safer to expose, with stricter input checks and bounded result details when hosts opt in.
+- Other Pi extensions can register MCP servers at runtime without sharing module state.
+- Proxy calls now show live server progress in the interactive UI.
+- Package installs and public helper imports are easier to use from downstream hosts.
+
+### Added
+- Persistent metadata cache entries now honor server `ttlMs` hints without extending the default max age. Thanks to [@Seinra](https://github.com/Seinra) for #431.
+- Proxy tool calls now forward server progress notifications to the interactive UI. Thanks to [@Seinra](https://github.com/Seinra) for PR #440 and for mapping the area in #431.
+- Added a pure `mcp:` reference resolver API for consumers that validate adapter tool names from explicit config and cache inputs. Thanks to [@abdwhb-png](https://github.com/abdwhb-png) for PR #420.
+- Direct tools can opt into strict advertised-schema validation with one-layer JSON recovery for object and array properties. Thanks to [@4ndr3wxh1ll](https://github.com/4ndr3wxh1ll) for PR #430.
+- Direct tools can opt into guarded raw MCP result details, retaining bounded structured fields while summarizing oversized values.
+- Embedding hosts can import the configuration loader and metadata cache helpers from public package subpaths, and can validate cached metadata against an explicit private process environment.
+
+### Fixed
+- Runtime MCP registration now works across separately loaded Pi extensions through a versioned shared event contract. Thanks to [@fmoda3](https://github.com/fmoda3) for #443.
+- Stdio MCP startup errors now identify a configured missing or non-directory `cwd` instead of blaming the executable. Thanks to [@SoyElf](https://github.com/SoyElf) for #442.
+- Package installs with `--omit=dev` no longer run the public helper build during `prepare`; Git installs and package tarballs still include the built public exports. Thanks to [@KripaMishra](https://github.com/KripaMishra) for #441.
+- MCP gateway descriptions now stay stable across metadata-only refreshes and keep live counts behind `mcp({})`. Thanks to [@voidfreud](https://github.com/voidfreud) for PR #432.
+- Failed MCP servers in active backoff no longer remain advertised through cached direct tools, gateway list/search/describe results, or status tool counts. Thanks to [@voidfreud](https://github.com/voidfreud) for PR #434.
+- OAuth token invalidation now preserves credentials replaced by another Pi process instead of letting a stale refresh delete newly authorized shared credentials. Thanks to [@mjlbach](https://github.com/mjlbach) for PR #422.
+- Failed first-time MCP initialization no longer leaves the session permanently stuck with only `MCP not initialized`; the gateway keeps the failure reason and retries initialization on the next `mcp(...)` call. Thanks to [@hara-seihun](https://github.com/hara-seihun) for #428.
+- HTTP 202 and unauthenticated HTTP 401 endpoint probes now report ambiguous endpoint shape instead of claiming the URL is not MCP. Thanks to [@jayshah5696](https://github.com/jayshah5696) for #415.
+- Expanded `mcpScript` calls now show bounded submitted code. Thanks to [@DenisBalan](https://github.com/DenisBalan) for #413.
+- Gateway parameters nested inside `args` now fail with top-level guidance instead of dispatching inconsistently. Thanks to [@voidfreud](https://github.com/voidfreud) for PR #417.
+- Large direct-tool advisories now explain how to hide them with `settings.warnOnLargeDirectTools: false`. Thanks to [@afrodao2394](https://github.com/afrodao2394) for #412.
+- Namespace proxy tools now use valid cached metadata, include resource-only proxy servers, clean up only prior namespace registrations, follow `MCP_DIRECT_TOOLS` selection, and skip ambiguous normalized server names. Thanks to [@abdwhb-png](https://github.com/abdwhb-png) for PR #414.
+- Kept transient HTTP 503 connection failures as availability errors without multiplying gateway retries or misdiagnosing the endpoint as non-MCP. Thanks to [@elkaix](https://github.com/elkaix) for PR #411.
+- Preserved cached keep-alive catalogs during transient 503 refresh outages while deferred recovery continues with bounded backoff.
+- Startup connections that fail with a transient HTTP 503 now surface one quiet "temporarily unavailable; retry later" warning instead of the full hard failure; documented lifecycle behavior is unchanged, and keep-alive health checks continue their existing self-healing path. Thanks to [@elkaix](https://github.com/elkaix) for PR #424.
+
 ## [2.27.0] - 2026-08-20
 
 ### Highlights