@herbertgao/pi-extensions 2026.8.13 → 2026.8.15

package/node_modules/pi-lens/dist/mcp/build-staleness.js

@@ -50,22 +50,23 @@ export function computeBuildStamp(entryPath, stat = realStat) {
     const info = stat(entryPath);
     if (!info)
         return undefined;
-    return { entryPath, mtimeMs: info.mtimeMs };
+    return { entryPath, mtimeMs: info.mtimeMs, size: info.size };
 }
 /**
  * One-shot comparison: re-stats `stamp.entryPath` and compares against the
- * startup mtime. A failed re-stat (file briefly missing mid-rebuild-write, or
- * an installed-package layout) is treated as NOT stale — we only ever flag a
- * build change we can positively observe, never assume one from an I/O
- * hiccup (false positives would make every tool call route to fresh, which
- * defeats the warm server's entire purpose).
+ * startup mtime AND size (#2300 — a same-mtime-bucket rebuild that changes
+ * the bundle's length is otherwise invisible). A failed re-stat (file briefly
+ * missing mid-rebuild-write, or an installed-package layout) is treated as
+ * NOT stale — we only ever flag a build change we can positively observe,
+ * never assume one from an I/O hiccup (false positives would make every tool
+ * call route to fresh, which defeats the warm server's entire purpose).
  */
 export function checkStaleness(stamp, stat = realStat) {
     const info = stat(stamp.entryPath);
     if (!info)
         return { stale: false, stamp, currentMtimeMs: undefined };
     return {
-        stale: info.mtimeMs !== stamp.mtimeMs,
+        stale: info.mtimeMs !== stamp.mtimeMs || info.size !== stamp.size,
         stamp,
         currentMtimeMs: info.mtimeMs,
     };

package/node_modules/pi-lens/dist/mcp/cli.js

@@ -47,7 +47,9 @@ async function buildGraph() {
     if (!stat.isDirectory())
         fail(`cwd is not a directory: ${cwd}`);
     const startedAt = Date.now();
-    const graph = await buildOrUpdateGraph(cwd, [], new FactStore());
+    // Subject labels this store's capacity-eviction telemetry distinctly from
+    // the other five production FactStore instances (#2243 review round 3, F1).
+    const graph = await buildOrUpdateGraph(cwd, [], new FactStore("mcp-cli"));
     const attempt = getLastReviewGraphBuildAttempt(cwd);
     // "succeeded" can still carry a `reason` string — persistGraph() stamps one
     // on to explain a partial (over-cap) persist, which is NOT a failure (#960

package/node_modules/pi-lens/dist/mcp/server.js

@@ -32,6 +32,7 @@ import { createLensDiagnosticsTool } from "../tools/lens-diagnostics.js";
 import { peekMcpSessionRuntime } from "../clients/mcp/session.js";
 import { createLspDiagnosticsTool } from "../tools/lsp-diagnostics.js";
 import { createLspNavigationTool } from "../tools/lsp-navigation.js";
+import { shouldInitializeSessionRoot } from "../clients/lsp/session-roots.js";
 import { computeBuildStamp, STALE_SERVED_BY_FRESH, STALE_WARN_ONLY, StalenessGate, stalenessCheckEnabled, } from "./build-staleness.js";
 // Any stray stdout write corrupts the JSON-RPC stream; force it onto stderr.
 console.log = (...args) => {
@@ -131,8 +132,12 @@ const REPO_ROOT = process.env.PI_LENS_MCP_REPO_ROOT
     : findRepoRoot(SERVER_DIR);
 async function ensureReady(cwd) {
     const normalized = path.resolve(cwd);
-    if (lspReadyCwds.has(normalized))
+    // #2052 R1: the session-root registry evicts old roots at a fixed cap. The
+    // readiness memo is only a fast path; consult the registry so an evicted
+    // root can initialize again when it is used later.
+    if (!shouldInitializeSessionRoot(normalized, lspReadyCwds)) {
         return;
+    }
     try {
         await ensureLspConfig(normalized);
         // pi-lens-ignore: missing-error-propagation

package/node_modules/pi-lens/dist/tools/lens-diagnostics.js

@@ -929,6 +929,9 @@ const UNCONFIRMED_REASON_SENTENCE = {
     // completely different failure from a timeout. Must never collapse into
     // "within budget", the exact string this PR exists to stop misrendering.
     binding_mismatch: "the file changed on disk since this result was computed",
+    // #2052: no server was asked. Say WHY and say it is permanent for this
+    // path, so the reader does not read an empty result as "clean" or retry it.
+    outside_project_root: "the file is outside every initialized session project root, so no language server was asked",
 };
 // Short per-reason label used only when MORE than one reason is present, so
 // the note can still say "N timed out, M errored" instead of collapsing to
@@ -940,6 +943,7 @@ const UNCONFIRMED_REASON_COUNT_LABEL = {
     service_destroyed: "service reset mid-sweep",
     error: "errored",
     binding_mismatch: "stale binding",
+    outside_project_root: "outside project root",
 };
 /**
  * #1618: a result predating the `unconfirmedReason` field (a legacy/test

package/node_modules/pi-lens/dist/tools/lsp-diagnostics.js

@@ -559,6 +559,7 @@ async function collectDiagnosticsForFile(absPath, lspService, waitMs, serverScop
     return {
         diagnostics: filtered,
         timedOut,
+        skipReason: touched?.skipReason,
         confirmedByTouch,
         // #1470: only a touch actually contributes a coverage gap; the
         // openFile+getDiagnostics fallback never reports one, which is honest —
@@ -813,7 +814,7 @@ onConfirmedNoBlockers) {
             };
         }
     }
-    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, content: collectedContent, binding, } = await collectDiagnosticsForFile(file, lspService, waitMs, serverScope);
+    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, content: collectedContent, binding, skipReason, } = await collectDiagnosticsForFile(file, lspService, waitMs, serverScope);
     const health = lspService.getDiagnosticsHealth?.(file);
     // #570: a timed-out priming check is never a confirmed "clean" — treat it
     // as unconfirmed without consulting the (unrelated) silent-tier
@@ -824,7 +825,10 @@ onConfirmedNoBlockers) {
     // be merged in rather than discarded.
     let effectiveRawDiags = rawDiags;
     let confirmation;
-    if (timedOut) {
+    if (skipReason !== undefined) {
+        confirmation = "unconfirmed";
+    }
+    else if (timedOut) {
         if (applySeverityFilter(rawDiags, severity).length === 0) {
             confirmation = "unconfirmed";
         }
@@ -887,7 +891,7 @@ onConfirmedNoBlockers) {
         unconfirmedServerIds.length === 0) {
         cacheCtx.record(file, scopeKey, effectiveRawDiags, stat.mtimeMs, collectedContent !== undefined
             ? hashDiagnosticContent(collectedContent)
-            : undefined);
+            : undefined, stat.size);
     }
     return {
         file,
@@ -895,6 +899,7 @@ onConfirmedNoBlockers) {
         unavailable: lspUnavailableMessage(file, health),
         confirmation,
         timedOut: confirmation === "unconfirmed" ? timedOut : undefined,
+        ...(skipReason !== undefined && { skipReason }),
         primaryServerId: primaryServerId(file),
     };
 }
@@ -905,7 +910,7 @@ onConfirmedNoBlockers) {
     // Reserve the token before awaiting this file's LSP result. The direct-file
     // path performs its own confirmation/reconciliation below (#1198).
     const writeIndex = nextWriteIndex?.();
-    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, content: collectedContent, binding, } = await collectDiagnosticsForFile(absPath, lspService, waitMs, serverScope);
+    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, content: collectedContent, binding, skipReason, } = await collectDiagnosticsForFile(absPath, lspService, waitMs, serverScope);
     const lspHealth = lspService.getDiagnosticsHealth?.(absPath);
     const unavailable = lspUnavailableMessage(absPath, lspHealth);
     // #533: an empty result needs a confirmed/unconfirmed verdict — a push-only,
@@ -919,7 +924,10 @@ onConfirmedNoBlockers) {
     // diagnostics it surfaces are merged in, not discarded.
     let effectiveRawDiags = rawDiags;
     let confirmation;
-    if (timedOut) {
+    if (skipReason !== undefined) {
+        confirmation = "unconfirmed";
+    }
+    else if (timedOut) {
         if (applySeverityFilter(rawDiags, severity).length === 0) {
             confirmation = "unconfirmed";
         }
@@ -1060,6 +1068,7 @@ onConfirmedNoBlockers) {
             truncated,
             unconfirmed,
             timedOut: unconfirmed ? timedOut : undefined,
+            ...(skipReason !== undefined && { skipReason }),
             // #1470: which servers this result does NOT speak for. Absent when it
             // speaks for all of them.
             ...(unconfirmedServerIds.length > 0 && {

package/node_modules/pi-lens/dist/tools/lsp-navigation.js

@@ -467,6 +467,8 @@ function formatCapabilities(snapshots, filePath) {
         ["hover", (s) => !!s.operationSupport.hover],
         ["rename", (s) => !!s.operationSupport.rename],
         ["codeAction", (s) => !!s.operationSupport.codeAction],
+        ["codeAction/resolve", (s) => !!s.operationSupport.codeActionResolve],
+        ["workspace/willRenameFiles", (s) => !!s.operationSupport.willRenameFiles],
         ["workspaceSymbol", (s) => !!s.operationSupport.workspaceSymbol],
         ["implementation", (s) => !!s.operationSupport.implementation],
         ["signatureHelp", (s) => !!s.operationSupport.signatureHelp],
@@ -480,7 +482,7 @@ function formatCapabilities(snapshots, filePath) {
         [
             "rename_file",
             () => true,
-            "willRenameFiles/didRenameFiles helper available",
+            "filesystem rename; preflight support shown above",
         ],
     ];
     const lines = [];

package/node_modules/pi-lens/docs/agent-guide.md

@@ -143,8 +143,10 @@ Edits fail or warn when:
 
 A blocked edit returns a retryable message, e.g.:
 
-> `🔄 RETRYABLE — Edit without read … Read the file first, then retry the edit:
-> read path="<file>"`
+```text
+🔄 RETRYABLE — Edit without read: you have not read `<file>` in this
+conversation. Read it first, then retry: `read path="<file>"`.
+```
 
 **Correct behavior:** read the file (or the relevant range/symbol) *before* editing.
 Helpful mechanics you can rely on:

package/node_modules/pi-lens/docs/ast-grep_rules_catalog.md

@@ -2,16 +2,17 @@
 
 <!-- GENERATED by scripts/gen-rule-catalogs.mjs — do not edit by hand. Run `npm run docs:rule-catalogs` after changing rules. -->
 
-pi-lens bundles **455 enabled** ast-grep rules (271 pi-lens-authored + 184 vendored from CodeRabbit) across **16 languages**, plus 16 disabled.
+pi-lens bundles **481 enabled** ast-grep rules (297 pi-lens-authored + 184 vendored from CodeRabbit) across **17 languages**, plus 16 disabled.
 
 See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `rules/ast-grep-rules/rules/` (pi-lens), `rules/ast-grep-rules/coderabbit/rules/` (vendored).
 
 ## Enabled rules
 
-### C (9)
+### C (10)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
+| `c-no-malloc-free` | warning | no | pi-lens | Manual malloc/calloc/realloc/free; verify ownership and error handling |
 | `dont-call-system-c` | warning | no | CodeRabbit | Don't call `system`. It's a high-level wrapper that allows for stacking multiple commands. Always prefer a more restrictive API such as cal… |
 | `file-access-before-action-c` | warning | no | CodeRabbit | A check is done with `access` and then the file is later used. There is no guarantee that the status of the file has not changed since the… |
 | `file-stat-before-action-c` | warning | no | CodeRabbit | A check is done with `stat` and then the file is used. There is no guarantee that the status of the file has not changed since the call to… |
@@ -22,10 +23,12 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `small-key-size-c` | warning | no | CodeRabbit | $KEY_FUNCTION` is using a key size of only $KEY_BITS bits. This is less than the recommended key size of 2048 bits. |
 | `world-writable-file-c` | warning | no | CodeRabbit | This call makes a world-writable file which allows any user on a machine to write to the file. This may allow attackers to influence the be… |
 
-### C++ (15)
+### C++ (17)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
+| `cpp-no-malloc-free` | warning | no | pi-lens | Manual malloc/calloc/realloc/free in C++; consider RAII (new/unique_ptr/vector) |
+| `cpp-no-printf` | warning | no | pi-lens | Avoid printf in C++; prefer std::cout/std::format for type-safe formatting |
 | `dont-call-system-cpp` | warning | no | CodeRabbit | Don't call `system`. It's a high-level wrapper that allows for stacking multiple commands. Always prefer a more restrictive API such as cal… |
 | `file-access-before-action-cpp` | warning | no | CodeRabbit | A check is done with `access` and then the file is later used. There is no guarantee that the status of the file has not changed since the… |
 | `file-stat-before-action-cpp` | warning | no | CodeRabbit | A check is done with `stat` and then the file is used. There is no guarantee that the status of the file has not changed since the call to… |
@@ -58,13 +61,24 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `stacktrace-disclosure-csharp` | warning | no | CodeRabbit | Stacktrace information is displayed in a non-Development environment. Accidentally disclosing sensitive stack trace information in a produc… |
 | `use-ecb-mode-csharp` | warning | no | CodeRabbit | "Usage of the insecure ECB mode detected. You should use an authenticated encryption mode instead, which is implemented by the classes AesG… |
 
-### Go (23)
+### CSS (1)
+
+| Rule | Severity | Fixable | Source | Description |
+|---|---|---|---|---|
+| `no-important` | warning | no | pi-lens | Avoid `!important` — increase selector specificity instead |
+
+### Go (28)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
 | `avoid-bind-to-all-interfaces-go` | warning | no | CodeRabbit | "Detected a network listener listening on 0.0.0.0 or an empty string. This could unexpectedly expose the server publicly as it binds to all… |
 | `defer-in-loop` | warning | no | pi-lens | defer is used inside a loop. This defers execution until after the entire function, not each iteration. |
 | `go-defer-func-call-antipattern` | warning | yes | pi-lens | defer with function-call args — arguments are evaluated immediately, not at defer time |
+| `go-no-fmt-println` | warning | no | pi-lens | Avoid fmt.Println/Printf-family calls in production code; use a structured logger |
+| `go-no-panic-in-lib` | warning | no | pi-lens | Avoid panic() in library code; return errors instead |
+| `go-no-underscore-func-name` | hint | no | pi-lens | Use camelCase for Go function names, not snake_case |
+| `go-prefer-errors-is` | hint | no | pi-lens | Use errors.Is(err, target) instead of direct comparison for error checking |
+| `go-prefer-string-builder` | hint | no | pi-lens | Use strings.Builder instead of repeated string concatenation |
 | `go-test-functions` | warning | yes | pi-lens | Go test function detected — verify it follows the project's test naming convention |
 | `gorilla-cookie-store-hardcoded-session-key-go` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 | `gorilla-csrf-hardcoded-auth-key-go` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
@@ -92,7 +106,7 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 |---|---|---|---|---|
 | `plaintext-http-link-html` | warning | no | CodeRabbit | "This link points to a plaintext HTTP URL. Prefer an encrypted HTTPS URL if possible." |
 
-### Java (36)
+### Java (40)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
@@ -118,7 +132,11 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `missing-httponly-java` | warning | no | CodeRabbit | Detected a cookie where the `HttpOnly` flag is either missing or disabled. The `HttpOnly` cookie flag instructs the browser to forbid clien… |
 | `missing-secure-java` | warning | no | CodeRabbit | Detected a cookie where the `Secure` flag is either missing or disabled. The `Secure` cookie flag instructs the browser to forbid sending t… |
 | `no-null-cipher-java` | warning | no | CodeRabbit | NullCipher was detected. This will not encrypt anything; the cipher text will be the same as the plain text. Use a valid, secure cipher: Ci… |
+| `no-raw-types` | warning | no | pi-lens | Use parameterized types instead of raw types. |
+| `no-string-concat-in-loop` | warning | no | pi-lens | Use StringBuilder instead of string concatenation in loops. |
+| `no-system-out-println` | warning | no | pi-lens | Avoid System.out.println; use a logging framework instead. |
 | `passwordauthentication-hardcoded-password-java` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
+| `prefer-string-is-empty` | warning | no | pi-lens | Use .isEmpty() instead of .length() == 0 or .equals(""). |
 | `rsa-no-padding-java` | warning | no | CodeRabbit | Using RSA without OAEP mode weakens the encryption. |
 | `simple-command-injection-direct-input-java` | warning | no | CodeRabbit | "Untrusted input might be injected into a command executed by the application, which can lead to a command injection vulnerability. An atta… |
 | `system-setproperty-hardcoded-secret-java` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
@@ -217,13 +235,21 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `unchecked-throwing-call-js` | error | no | pi-lens | $CALL without try/catch — throws on invalid input |
 | `weak-rsa-key-js` | error | no | pi-lens | Weak RSA key size — use at least 2048 bits |
 
-### Kotlin (5)
+### Kotlin (13)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
 | `des-is-deprecated-kotlin` | warning | no | CodeRabbit | DES is considered deprecated. AES is the recommended cipher. Upgrade to use AES. See https://www.nist.gov/news-events/news/2005/06/nist-wit… |
 | `desede-is-deprecated-kotlin` | warning | no | CodeRabbit | Triple DES (3DES or DESede) is considered deprecated. AES is the recommended cipher. Upgrade to use AES. |
 | `jwt-hardcode-kotlin` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
+| `kotlin-no-lateinit` | warning | no | pi-lens | Avoid lateinit var; prefer a nullable type or constructor injection |
+| `kotlin-no-nullable-boolean` | warning | no | pi-lens | Avoid a nullable Boolean; a two-value enum or a non-null default is usually clearer |
+| `kotlin-no-println` | warning | no | pi-lens | Avoid println/print; use a structured logger |
+| `kotlin-no-unnecessary-let` | warning | no | pi-lens | let on a non-null-checked receiver adds indirection; use the value directly |
+| `kotlin-no-unsafe-cast` | warning | no | pi-lens | Unsafe cast (as) throws ClassCastException on a mismatch; consider as? |
+| `kotlin-no-var` | warning | no | pi-lens | Prefer val over var; mutability should be explicit and scoped |
+| `kotlin-prefer-data-class` | warning | no | pi-lens | This class looks like a plain value holder; consider a data class |
+| `kotlin-prefer-is-empty` | warning | no | pi-lens | Use isEmpty() instead of comparing size/length to zero |
 | `rsa-no-padding-kotlin` | warning | no | CodeRabbit | Using RSA without OAEP mode weakens the encryption. |
 | `system-setproperty-hardcoded-secret-kotlin` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 
@@ -234,7 +260,7 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `openssl-cbc-static-iv-php` | warning | no | CodeRabbit | Static IV used with AES in CBC mode. Static IVs enable chosen-plaintext attacks against encrypted data. |
 | `search-active-debug-php` | warning | no | CodeRabbit | Debug logging is explicitly enabled. This can potentially disclose sensitive information and should never be active on production systems. |
 
-### Python (96)
+### Python (98)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
@@ -308,6 +334,7 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `python-mysqlclient-hardcoded-secret-python` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 | `python-neo4j-empty-password-python` | warning | no | CodeRabbit | The application creates a database connection with an empty password. This can lead to unauthorized access by either an internal or externa… |
 | `python-neo4j-hardcoded-secret-python` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
+| `python-optional-type` | hint | no | pi-lens | Optional[T] requires Python 3.10+ to rewrite as T \| None |
 | `python-peewee-mysql-empty-password-python` | warning | no | CodeRabbit | The application creates a database connection with an empty password. This can lead to unauthorized access by either an internal or externa… |
 | `python-peewee-mysql-hardcoded-secret-python` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 | `python-peewee-pg-empty-password-python` | warning | no | CodeRabbit | The application creates a database connection with an empty password. This can lead to unauthorized access by either an internal or externa… |
@@ -333,9 +360,10 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `python-urllib3-hardcoded-secret-python` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 | `python-webrepl-empty-password-python` | warning | no | CodeRabbit | The application creates a database connection with an empty password. This can lead to unauthorized access by either an internal or externa… |
 | `python-webrepl-hardcoded-secret-python` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
+| `reducible-list-comprehension` | warning | yes | pi-lens | A list comprehension is unnecessary here; use a generator expression |
 | `unchecked-throwing-call-python` | error | no | pi-lens | Call without try/except — throws on invalid input or missing file |
 
-### Ruby (19)
+### Ruby (20)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
@@ -358,8 +386,9 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `ruby-pg-hardcoded-secret-ruby` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 | `ruby-redis-empty-password-ruby` | warning | no | CodeRabbit | The application creates a database connection with an empty password. This can lead to unauthorized access by either an internal or externa… |
 | `ruby-redis-hardcoded-secret-ruby` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
+| `ruby-symbol-to-proc-candidate` | warning | yes | pi-lens | Use a symbol-to-proc shorthand for this simple iterator block |
 
-### Rust (11)
+### Rust (12)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
@@ -370,6 +399,7 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `redundant-unsafe-function` | error | no | pi-lens | Unsafe function without unsafe block inside |
 | `reqwest-accept-invalid-rust` | warning | no | CodeRabbit | Dangerously accepting invalid TLS |
 | `rust-2024-let-chain-candidate` | info | no | pi-lens | nested if conditions can be collapsed into a Rust 2024 let-chain |
+| `rust-no-chars-enumerate` | warning | no | pi-lens | chars().enumerate() may confuse character indices with byte offsets |
 | `secrets-reqwest-hardcoded-auth-rust` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 | `ssl-verify-none-rust` | warning | no | CodeRabbit | SSL verification disabled, this allows for MitM attacks |
 | `tokio-postgres-empty-password-rust` | warning | no | CodeRabbit | The application uses an empty credential. This can lead to unauthorized access by either an internal or external malicious actor. It is rec… |
@@ -392,10 +422,11 @@ See [`docs/custom-rules.md`](custom-rules.md) to add your own. Rule sources: `ru
 | `insecure-biometrics-swift` | info | no | CodeRabbit | The application was observed to leverage biometrics via Local Authentication, which returns a simple boolean result for authentication. Thi… |
 | `rabbit-hardcoded-secret-swift` | warning | no | CodeRabbit | A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive da… |
 
-### TSX (7)
+### TSX (8)
 
 | Rule | Severity | Fixable | Source | Description |
 |---|---|---|---|---|
+| `hyphenated-svg-attribute` | warning | no | pi-lens | Use camelCase for this known SVG attribute in JSX |
 | `inline-styles` | hint | no | pi-lens | Inline styles — use CSS modules or styled components |
 | `jsx-boolean-short-circuit` | error | yes | pi-lens | React JSX && pitfall — potentially renders 0 or NaN |
 | `no-nested-links` | error | no | pi-lens | Nested <a> tags are invalid HTML and cause unexpected behavior |

package/node_modules/pi-lens/docs/astplayground.md

@@ -27,38 +27,49 @@ released `ast-grep`), so we get a fresh-engine cross-check.
 
 ## What the playground actually does
 
-The playground's source code is **fixed** — the user cannot inject custom
-source via the URL hash. The URL hash only carries:
+The verifier encodes `--code` into the playground's URL-hash state so the
+upstream engine matches the rule against it. The state (`ast-grep/ast-
+grep.github.io`, `website/src/components/astGrep/state.ts` +
+`index.ts`) carries:
 
 - `mode: "Config"` + `config: <rule YAML>` (the rule)
-- `query` (an ast-grep pattern string, only used in `mode: "Pattern"`)
+- `source: <code>` — the code the rule is matched against, in **both**
+  modes
+- `query` — an ast-grep pattern string, used only in `mode: "Pattern"`
+  (irrelevant here; the verifier always requests Config mode)
 
-So this verifier is a **pattern-level smoke test**: "does the rule's
-pattern fire on the playground's hardcoded sample source?" It catches:
+So this verifier checks: "does the rule match `--code` on the upstream
+engine, and does the count agree with the local `ast-grep` CLI?" It catches:
 
 - **YAML/pattern rejection** — the playground shows an error if the rule's
   YAML uses features the upstream engine doesn't support
 - **Pattern-engine divergence** — local ast-grep matches but upstream
   doesn't (or vice versa)
 - **Match-count drift** — `Found N match(es)` count differs between local
-  and upstream
+  and upstream, for the *same* source
 
-It does **not** catch rule-vs-source bugs where the source is what the user
-wrote — the local CLI test is the source of truth for that.
+#2208: earlier versions of this verifier wrote `--code` into `query`
+instead of `source`. Since `query` is ignored in Config mode, the hash
+carried no source at all, and the playground's `{...defaultState,
+...parsed}` state merge silently fell back to its own hardcoded sample —
+every run graded that fixed sample, not `--code`. Every "ok:true
+matches:N" this verifier produced before the fix reflected the playground's
+sample source, never the caller's code.
 
 ## Usage
 
 ```bash
-# Smoke-test a single rule (auto-launches headless Chrome on 9224, then kills it)
-node scripts/playground-verify-rule.mjs rules/ast-grep-rules/rules/no-console-except-error.yml --code "ignored"
+# Smoke-test a single rule against a snippet it matches
+# (auto-launches headless Chrome on 9224, then kills it)
+node scripts/playground-verify-rule.mjs rules/ast-grep-rules/rules/no-console-except-error.yml --code "console.log('x');"
 
 # Assert a specific match count
 node scripts/playground-verify-rule.mjs rules/ast-grep-rules/rules/jsx-boolean-short-circuit.yml \
-  --code "ignored" --expected 0
+  --code "const a = 1;" --expected 0
 
 # Keep Chrome alive for follow-up runs (avoids the 5–10s cold-start cost)
 node scripts/playground-verify-rule.mjs rules/ast-grep-rules/rules/no-console-except-error.yml \
-  --code "ignored" --keep-chrome
+  --code "console.log('x');" --keep-chrome
 
 ```
 
@@ -142,7 +153,9 @@ Three scripts, one job each:
   resolution, accessibility tree, and network tracing stripped out.
 - `playground-verify-rule.mjs` — the CLI the user invokes. Reads the rule,
   builds the playground URL, runs the page through CDP, scrapes the
-  result, prints JSON, kills Chrome.
+  result, prints JSON, and kills Chrome. Its source-drift sentinel reads only
+  the first `.monaco-editor` in the source pane, not the config editor, so a
+  rule note cannot satisfy the check by repeating the fixture text.
 
 ## Skipping the test
 
@@ -165,10 +178,6 @@ auto-skipped when Google Chrome is not on `PATH` and
 
 ## Known limitations
 
-- **Source is fixed.** The playground uses its own hardcoded sample
-  source. Custom source code passed via `--code` is ignored by the
-  upstream playground in `mode: "Config"`. This is by design — the
-  playground is a manual tool, not a test harness.
 - **Slow.** ~11s per rule. Don't enable in the default `npm test` run.
 - **Line numbers are best-effort.** The playground's gutter layout
   changes between builds. If the line-extraction JS misses, `lines` is

package/node_modules/pi-lens/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-lens",
-	"version": "4.1.2",
+	"version": "4.1.3",
 	"type": "module",
 	"description": "Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo",
 	"repository": {
@@ -19,6 +19,7 @@
 		"bundle:dist": "node scripts/bundle-dist.mjs",
 		"prepare": "npm run build:dist && node scripts/download-grammars.js --core --dest grammars && node scripts/setup-git-hooks.mjs && node scripts/warm-loader-cache.mjs",
 		"lint": "tsc --project tsconfig.json",
+		"depcruise:check": "depcruise --validate --config .dependency-cruiser.cjs --ignore-known .dependency-cruiser-known-violations.json --output-type err index.ts \"clients/**/*.ts\"",
 		"fmt": "oxfmt",
 		"fmt:check": "oxfmt --check",
 		"watch": "tsc --watch",
@@ -38,6 +39,7 @@
 		"astgrep:self-scan:update-baseline": "node scripts/run-astgrep-pi-lens.mjs --update-baseline",
 		"audit:playground": "node scripts/playground-verify-rule.mjs",
 		"bench:cascade-budget": "node scripts/bench-cascade-budget.mjs",
+		"bench:word-index-replacement": "node scripts/bench-word-index-replacement.mjs",
 		"logs:smells": "node scripts/analyze-pi-lens-logs.mjs",
 		"changelog:check": "node scripts/rollup-changelog.mjs --check",
 		"changelog:release": "node scripts/changelog-release.mjs",
@@ -126,7 +128,9 @@
 		"@types/node": "^26.0.0",
 		"@types/pidusage": "^2.0.5",
 		"@vitest/coverage-v8": "^4.1.5",
+		"dependency-cruiser": "^18.2.0",
 		"husky": "^9.1.7",
+		"json5": "^2.2.3",
 		"oxfmt": "0.64.0",
 		"oxlint": "1.79.0",
 		"typebox": "^1.0.0",

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/c-no-malloc-free-test.yml

@@ -0,0 +1,20 @@
+id: c-no-malloc-free
+valid:
+  - |
+    int sum(const int *values, int count) {
+        int total = 0;
+        for (int i = 0; i < count; i++) {
+            total += values[i];
+        }
+        return total;
+    }
+invalid:
+  - |
+    int *make_buffer(int count) {
+        int *buf = malloc(sizeof(int) * count);
+        return buf;
+    }
+  - |
+    void release(int *buf) {
+        free(buf);
+    }

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/cpp-no-malloc-free-test.yml

@@ -0,0 +1,25 @@
+id: cpp-no-malloc-free
+valid:
+  - |
+    std::unique_ptr<int[]> make_buffer(int count) {
+        return std::make_unique<int[]>(count);
+    }
+invalid:
+  - |
+    int* make_buffer(int count) {
+        int* buf = static_cast<int*>(malloc(sizeof(int) * count));
+        return buf;
+    }
+  - |
+    void release(int* buf) {
+        free(buf);
+    }
+  - |
+    int* make_buffer(int count) {
+        int* buf = static_cast<int*>(std::malloc(sizeof(int) * count));
+        return buf;
+    }
+  - |
+    void release(int* buf) {
+        ::free(buf);
+    }

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/cpp-no-printf-test.yml

@@ -0,0 +1,19 @@
+id: cpp-no-printf
+valid:
+  - |
+    void report(int count) {
+        std::cout << "count: " << count << "\n";
+    }
+  - |
+    void log(const char* msg) {
+        fprintf(stderr, "%s\n", msg);
+    }
+invalid:
+  - |
+    void report(int count) {
+        printf("count: %d\n", count);
+    }
+  - |
+    void report(int count) {
+        std::printf("count: %d\n", count);
+    }

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/go-no-fmt-println-test.yml

@@ -0,0 +1,19 @@
+id: go-no-fmt-println
+valid:
+  - |
+    func main() {
+        slog.Info("hello", "key", "value")
+    }
+  - |
+    func main() {
+        log.Printf("started on port %d", port)
+    }
+invalid:
+  - |
+    func main() {
+        fmt.Println("hello")
+    }
+  - |
+    func main() {
+        fmt.Printf("value: %d\n", 42)
+    }

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/go-no-panic-in-lib-test.yml

@@ -0,0 +1,17 @@
+id: go-no-panic-in-lib
+valid:
+  - |
+    func divide(a, b int) (int, error) {
+        if b == 0 {
+            return 0, errors.New("division by zero")
+        }
+        return a / b, nil
+    }
+invalid:
+  - |
+    func mustDivide(a, b int) int {
+        if b == 0 {
+            panic("division by zero")
+        }
+        return a / b
+    }

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/go-no-underscore-func-name-test.yml

@@ -0,0 +1,18 @@
+id: go-no-underscore-func-name
+valid:
+  - |
+    func handleRequest(w http.ResponseWriter, r *http.Request) {
+    }
+  - |
+    func getUserName(id int) string {
+        return ""
+    }
+invalid:
+  - |
+    func _helper() string {
+        return ""
+    }
+  - |
+    func get_user_name(id int) string {
+        return ""
+    }

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/go-prefer-errors-is-test.yml

@@ -0,0 +1,15 @@
+id: go-prefer-errors-is
+valid:
+  - |
+    if errors.Is(err, os.ErrNotExist) {
+        return nil
+    }
+invalid:
+  - |
+    if err == os.ErrNotExist {
+        return nil
+    }
+  - |
+    if err != os.ErrNotExist {
+        return nil
+    }

package/node_modules/pi-lens/rules/ast-grep-rules/rule-tests/go-prefer-string-builder-test.yml

@@ -0,0 +1,21 @@
+id: go-prefer-string-builder
+valid:
+  - |
+    func build(parts []string) string {
+        var b strings.Builder
+        for _, p := range parts {
+            b.WriteString(p)
+        }
+        return b.String()
+    }
+invalid:
+  - |
+    func concat(a string, b string) string {
+        a = a + b
+        return a
+    }
+  - |
+    func appendSuffix(s string) string {
+        s += "suffix"
+        return s
+    }