@herbertgao/pi-extensions 2026.9.0 → 2026.9.2

package/node_modules/pi-lens/docs/subagent-compat.md

@@ -17,7 +17,7 @@ every run.
 
 | # | Contract | Depended on by | Third-party file (as of the versions below) | Verified against |
 |---|----------|-----------------|-------------------------------------------------|-------------------|
-| 1 | `PI_SUBAGENT_CHILD` is set to the literal string `"1"` in every spawned child's env; `PI_SUBAGENT_RUN_ID` / `PI_SUBAGENT_CHILD_AGENT` are set alongside it for best-effort identity. | `clients/subagent-mode.ts` (`isSubagentSession()`, `getSubagentIdentity()`) | `pi-subagents@0.34.0` — `src/runs/shared/pi-args.ts` (`SUBAGENT_CHILD_ENV`/`SUBAGENT_RUN_ID_ENV`/`SUBAGENT_CHILD_AGENT_ENV` consts + the `env[SUBAGENT_CHILD_ENV] = "1"` assignment) | `checkNicobailonChildEnv` |
+| 1 | `PI_SUBAGENT_CHILD` is set to the literal string `"1"` on every process that hosts a child session. | `clients/subagent-mode.ts` (`isSubagentSession()`, `getSubagentIdentity()`) | `pi-subagents@0.34.0` — co-located in `src/runs/shared/pi-args.ts` (`SUBAGENT_CHILD_ENV` const + the `env[SUBAGENT_CHILD_ENV] = "1"` assignment); as of `pi-subagents@0.66.0` the const moved to `src/runs/shared/child-runtime-config.ts` and the assignment to `src/runs/background/subagent-runner.ts` (#2581) — `compat-contract-locator.mjs`'s `locateContractSources` tries both layouts and concatenates whichever resolves. | `checkNicobailonChildEnv` |
 | 1b | avtc-pi-subagent sets `PI_SUBAGENT_CHILD_AGENT` + `PI_SUBAGENT_PARENT_PID` (never `PI_SUBAGENT_CHILD`) on the per-spawn subagent env; `isSubagentSession()` treats the PAIR (both non-empty) as an additional subagent signal (#507). | `clients/subagent-mode.ts` (`isSubagentSession()`, `getSubagentIdentity()`) | `avtc-pi-subagent@1.0.3` — `src/process-runner.ts` (`subagentEnv.PI_SUBAGENT_CHILD_AGENT = agent.name` + `subagentEnv.PI_SUBAGENT_PARENT_PID = String(process.pid)`) | `checkAvtcChildEnv` |
 | 2a | The pi SDK's extension loader keeps a **process-global** cache (`extensionCache = new Map()`). This is what makes an in-process `bindExtensions()` reuse pi-lens's own module-scope singletons instead of a fresh isolated instance. | `clients/session-lifecycle.ts` (the whole premise of the concurrent-session guard) | `@earendil-works/pi-coding-agent@0.80.6` — `dist/core/extensions/loader.js` | `checkSdkExtensionCache` |
 | 2b | `AgentSession.bindExtensions()` **unconditionally** emits a `session_start`-typed event (`this._extensionRunner.emit(this._sessionStartEvent)`). | Same as 2a — this is why an in-process subagent bind re-triggers pi-lens's `session_start` handler at all. | `@earendil-works/pi-coding-agent@0.80.6` — `dist/core/agent-session.js` (`bindExtensions()`, ~line 1717) | `checkSdkBindExtensionsEmitsSessionStart` |
@@ -30,7 +30,24 @@ unit-tested regex matchers against RESILIENT semantic shapes (never a line
 number — those drift on every third-party release). `scripts/compat-contracts.mjs`
 is the orchestration script: it `npm install`s the four packages (SDK,
 `pi-subagents`, `avtc-pi-subagent`, `@tintinweb/pi-subagents`) into a scratch
-directory, reads the specific files above, and runs every check.
+directory, resolves each contract's source file(s) independently (see
+"Layer A" below) and runs every check.
+
+**Contract 1's identity vars were removed upstream, not relocated (#2581).**
+The doc used to also pin `PI_SUBAGENT_RUN_ID` / `PI_SUBAGENT_CHILD_AGENT` as
+part of contract 1 — nicobailon/pi-subagents set them alongside
+`PI_SUBAGENT_CHILD=1` for best-effort child identity. `pi-subagents@0.65.0`'s
+rewrite to run subagents as native, in-process `AgentSession`s (instead of
+spawning a separate `pi` CLI process per child) deleted both vars from the
+package entirely — grep-verified absent from the whole 0.66.0 source tree;
+child identity now travels through an in-process `ChildRuntimeConfig` object
+that never touches `process.env`. This is real, permanent upstream drift, but
+it needed no pi-lens code change: `getSubagentIdentity()` was already
+documented and tested as best-effort, returning `runId`/`agentName: undefined`
+when the vars are absent (`tests/clients/subagent-mode.test.ts`) — exactly the
+degraded state this vocabulary is now always in. `checkNicobailonChildEnv`
+no longer requires them; only the `PI_SUBAGENT_CHILD='1'` flag pi-lens's
+light-mode detection actually depends on behaviorally still gates the check.
 
 ## The three env levers
 
@@ -45,10 +62,46 @@ directory, reads the specific files above, and runs every check.
 ### Layer A — pinned-contract verification (`scripts/compat-contracts.mjs`)
 
 No `pi` process, no LLM turn. Installs the real packages (table above) and
-mechanically re-checks all six contracts against the installed source. Exit
-0 = all pass; exit 1 = at least one contract check failed (real drift); exit
-2 = infrastructure failure (npm install of the third-party packages itself
-failed — usually a registry/network issue, not a contract regression).
+mechanically re-checks all seven contracts against the installed source.
+
+Each contract resolves independently to one of **three outcomes**, printed
+per-contract and rolled up into a run-level `outcome` (also exposed as a
+GITHUB_OUTPUT for the workflow's alert step, distinct from the GH step's own
+success/failure) and exit code:
+
+- **verified** (exit 0 when every contract is this) — the contract's source
+  file(s) were found and their content matches the pinned shape.
+- **drift** (exit 1) — the source file(s) were found, but the content no
+  longer matches. This is an actual upstream behavioral change worth
+  investigating (see "What to do when the nightly alerts" below).
+- **infra** (exit 2, when nothing drifted but at least one contract hit
+  this) — the contract's source file could not be located at ANY of its
+  known candidate paths (each `CONTRACTS` entry's `parts` field in
+  `scripts/lib/compat-contracts.mjs`, resolved via
+  `compat-contract-locator.mjs` and `compat-contract-resolution.mjs`), or
+  the `npm install` of the four packages itself failed. This means Layer A
+  has NOT actually re-checked that contract's content at all — it is
+  distinct from drift and must never be reported as one. #2581: before this
+  three-way split, a single relocated file (`pi-subagents@0.65.0` moving
+  `src/runs/shared/pi-args.ts`) threw inside one shared try/catch, aborted
+  the whole run, and got reported — both in the run log and the tracking
+  issue's body — as generic "failure" alongside the other six contracts that
+  were never actually re-checked that run either. A contract's own outcome
+  only becomes "infra" when ITS candidate paths are all missing; every other
+  contract is still resolved and checked independently in the same run.
+
+Candidate paths are walked NEWEST-observed-layout first, not oldest (#2680
+F1) — a stale leftover file at an old path (left behind by a partial
+publish, or an npm install that added files without pruning ones the
+package's current `files` list no longer references) must never outrank the
+package's actual current layout. When a candidate path list needs a NEW
+entry (the package relocated the file again), APPEND it to that contract's
+`parts` in the `CONTRACTS` list (`scripts/lib/compat-contracts.mjs`) —
+oldest-observed-layout first in how the list reads, rather than replacing
+the old entry — the locator resolves the newest EXISTING one regardless of
+authored order, so older installs stay covered too. `parts` and `package`
+live directly on each `CONTRACTS` entry, not a second table keyed by a
+string id (#2680 F2) — there is nowhere else to update.
 
 ### Layer B — real-pi behavioral smoke (`scripts/compat-smoke-behavioral.mjs`)
 
@@ -71,7 +124,7 @@ first session.
 Assertions:
 
 1. **Subagent light mode engages** — with `PI_SUBAGENT_CHILD=1` set,
-   `subagent_light_mode` is logged to `~/.pi-lens/latency.log` (a `type:
+   `subagent_light_mode` is logged to `$PI_LENS_HOME/latency.log` (a `type:
    "phase"` entry) and none of the seven heavyweight-scan phases
    (`knip`/`jscpd`/`madge`/`dead-code`/`govulncheck`/`gitleaks`/`trivy`) are
    logged for that run.
@@ -99,22 +152,32 @@ Assertions:
    `PI_SUBAGENT_PARENT_PID`), no `subagent_light_mode` phase is logged.
    `subagent-mode.ts`'s doc comment requires the PAIR — a lone var set by
    some unrelated tool must not trigger light mode.
-6. **`concurrent_session_bind` (#473) — NOT asserted, documented TODO.**
+6. **`concurrent_session_bind` (#473) and its `concurrent_session_bind_rollup`
+   session-end summary (#2249) — NOT asserted, documented TODO.**
    The guard is fully wired on master (PR #477): `index.ts`'s `session_start`
    handler calls `decideSessionStart()` and logs a `concurrent_session_bind`
    latency phase for a concurrent-secondary bind — so the phase exists to
-   observe. The blocker is DRIVING it keylessly: reproducing tintinweb's
-   in-process model for real (mirroring `agent-runner.ts`'s
-   `createAgentSession()` + `DefaultResourceLoader` + `bindExtensions()`
-   sequence) requires full session construction, which in turn needs
-   model/provider config — not cheaply stubbable without a real model key,
-   and #476 explicitly asks not to ship something flaky here. The unit +
-   behavioral coverage in `tests/clients/session-lifecycle.test.ts` guards
-   the classifier and the no-reset contract in-repo; what Layer B cannot yet
-   add is the end-to-end SDK-driven variant. **Revisit if the pi SDK grows a
-   model-free session constructor or stub provider** — at that point add a
-   Layer B assertion analogous to 1-3 checking the `concurrent_session_bind`
-   phase and the absence of a second LSP fleet teardown.
+   observe. `clients/session-start-observability.ts` also keeps a bounded,
+   process-singleton-backed tally of declined binds by classification
+   (`concurrent-secondary` / `secondary-root`), which `index.ts`'s
+   `session_shutdown` handler logs as one `concurrent_session_bind_rollup`
+   row (primary sessions only) and clears — same primary-only placement as
+   `session_end_bus_rollup`/`path_attribution_verified_rollup`. The blocker is
+   DRIVING either keylessly: reproducing tintinweb's in-process model for real
+   (mirroring `agent-runner.ts`'s `createAgentSession()` +
+   `DefaultResourceLoader` + `bindExtensions()` sequence) requires full
+   session construction, which in turn needs model/provider config — not
+   cheaply stubbable without a real model key, and #476 explicitly asks not
+   to ship something flaky here. The unit + behavioral coverage in
+   `tests/clients/session-lifecycle.test.ts` guards the classifier and the
+   no-reset contract, and `tests/clients/session-start-observability.test.ts`
+   plus `tests/index-integration.test.ts` guard the rollup's counting,
+   process-singleton survival, and primary-only reset/emit wiring, all
+   in-repo; what Layer B cannot yet add is the end-to-end SDK-driven variant.
+   **Revisit if the pi SDK grows a model-free session constructor or stub
+   provider** — at that point add a Layer B assertion analogous to 1-3
+   checking the `concurrent_session_bind`/`concurrent_session_bind_rollup`
+   phases and the absence of a second LSP fleet teardown.
 
 ## What to do when the nightly alerts
 
@@ -125,18 +188,35 @@ third-party contract drift detected"** — search for it by title before
 assuming a NEW investigation is needed; the workflow already
 create-or-updates it, never duplicates.
 
-1. Read the linked run log — both layers print a `[PASS]`/`[FAIL]` line per
-   check with a one-line detail on exactly what didn't match.
-2. Find the failed check's row in the pinned-contracts table above and go
-   read the current third-party source at the referenced file — a Layer A
-   failure means the semantic shape genuinely changed upstream (a renamed
-   env var, a moved `emit()` call, a reworded error message, ...).
-3. Update the corresponding matcher in `scripts/lib/compat-contracts.mjs`
+1. Read the linked run log — the alert issue body now says which of Layer
+   A's three outcomes fired (**verified** / **drift** / **infra**, #2581 —
+   never just a generic "failure"); Layer A/B each print a `[PASS]`/`[FAIL]`
+   or `[INFRA]` line per check with a one-line detail on exactly what didn't
+   match or couldn't be found.
+2. **If Layer A says infra**: the run log's `INFRA` line names every
+   candidate path tried for that contract. Read the installed package at the
+   printed version and find where the file actually lives now, then append
+   it to that contract's `parts` in the `CONTRACTS` list
+   (`scripts/lib/compat-contracts.mjs`) — don't replace the old candidate,
+   the locator resolves whichever existing one is newest regardless of
+   authored order (#2680 F1), so older installs stay covered too. This is a
+   relocation, not a confirmed content change; only move to step 3 once the
+   check actually runs against the relocated file.
+3. **If Layer A says drift**: find the failed check's row in the
+   pinned-contracts table above and read the current third-party source at
+   the referenced file — the semantic shape genuinely changed upstream (a
+   renamed env var, a moved `emit()` call, a reworded error message, ...).
+   Update the corresponding matcher in `scripts/lib/compat-contracts.mjs`
    (and its test in `tests/scripts/compat-contracts.test.ts`) to match the
-   new shape, update the pinned-contracts table's version/line reference
-   above, and fix whichever pi-lens module (`subagent-mode.ts` /
+   new shape, update the pinned-contracts table's version/reference above,
+   and fix whichever pi-lens module (`subagent-mode.ts` /
    `session-lifecycle.ts` / `instance-reaper.ts`) actually depended on the
-   old shape if the drift broke real behavior — not just the check.
+   old shape if the drift broke real behavior — not just the check. If
+   pi-lens's own dependent code already tolerates the drift gracefully (as
+   with contract 1's now-removed identity vars, #2581), relaxing the check
+   to stop requiring what upstream removed IS the fix — don't keep a check
+   that can only ever report drift forever for something pi-lens never
+   needed to work.
 4. A Layer B failure (an assertion, not an infra error) means real pi-lens
    behavior regressed under a real `pi` — treat it like any other bug: write
    a fixture-level test if the gap wasn't otherwise covered, then fix.

package/node_modules/pi-lens/docs/tree-sitter_rules_catalog.md

@@ -135,10 +135,10 @@ Rule source: `rules/tree-sitter-queries/<language>/`.
 | `open-invalid-mode` | error | reliability | open() called with invalid mode '{{MODE}}' |
 | `python-assert-production` | warning | correctness | assert statement stripped by Python -O flag — use explicit checks with exceptions in production code |
 | `python-command-injection` | error | security | Potential command injection sink — avoid shell execution with dynamic input |
-| `python-cross-language-method` | warning | correctness | '{METHOD}' is not a Python method — likely a {LANG} idiom leaking in |
+| `python-cross-language-method` | warning | correctness | '{{METHOD}}' is not a Python method — likely a cross-language idiom leaking in |
 | `python-debugger` | warning | debugging | Debugger call '{{FUNC}}' — remove before committing |
 | `python-empty-except` | warning | reliability | Except block only contains 'pass' — handle or re-raise the exception |
-| `python-hallucinated-import` | warning | correctness | Hallucinated import — '{NAME}' does not exist in '{MODULE}' |
+| `python-hallucinated-import` | warning | correctness | Hallucinated import — '{{NAME}}' does not exist in '{{MODULE}}' |
 | `python-hardcoded-secrets` | warning | security | Hardcoded {{VARNAME}} — use environment variables or a secrets manager |
 | `python-insecure-deserialization` | error | security | Potential insecure deserialization sink — avoid unsafe loaders |
 | `python-insecure-random` | warning | security | Insecure randomness source detected — use secrets or os.urandom for security-sensitive values |

package/node_modules/pi-lens/docs/word-index.md

@@ -156,7 +156,7 @@ the cwd, falling back to the stateless snapshot read otherwise.
 
 ## Caps and boundaries
 
-- **≤6000 files, ≤512KB per file** (`WORD_INDEX_MAX_FILES`,
+- **≤6000 files, ≤512KB per file** (the file cap is passed into the walk;
   `WORD_INDEX_MAX_BYTES` in `clients/word-index.ts`) — shared by every
   build path and the per-edit update path alike.
 - **Deletions aren't plumbed at the per-edit seam** — the cascade only ever

package/node_modules/pi-lens/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-lens",
-	"version": "4.1.3",
+	"version": "4.1.5",
 	"type": "module",
 	"description": "Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo",
 	"repository": {
@@ -15,21 +15,29 @@
 	},
 	"scripts": {
 		"build": "tsc --project tsconfig.build.json",
-		"build:dist": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && npx --yes -p typescript@7.0.2 tsc --project tsconfig.dist.json --noCheck && npm run bundle:dist",
+		"build:dist": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && node scripts/build-dist-tsc.mjs tsconfig.dist.json && npm run bundle:dist",
 		"bundle:dist": "node scripts/bundle-dist.mjs",
 		"prepare": "npm run build:dist && node scripts/download-grammars.js --core --dest grammars && node scripts/setup-git-hooks.mjs && node scripts/warm-loader-cache.mjs",
-		"lint": "tsc --project tsconfig.json",
+		"prepack": "node scripts/strip-dev-deps-for-pack.mjs --strip",
+		"postpack": "node scripts/strip-dev-deps-for-pack.mjs --restore",
+		"lint": "tsc --project tsconfig.json && npm run lint:js",
+		"lint:js": "oxlint --deny-warnings --import-plugin --promise-plugin -D block-scoped-var -D import/default -D import/namespace -D import/no-absolute-path -D import/no-empty-named-blocks -D import/no-named-as-default -D import/no-self-import -D no-extend-native -D no-extra-bind -D no-implied-eval -D no-new -D no-unexpected-multiline -D no-useless-constructor -D oxc/approx-constant -D oxc/misrefactored-assign-op -D oxc/no-accumulating-spread -D oxc/no-async-endpoint-handlers -D oxc/no-this-in-exported-function -D promise/no-callback-in-promise -D promise/no-multiple-resolved -D promise/no-new-statics -D promise/valid-params -D typescript/no-confusing-non-null-assertion -D typescript/no-extraneous-class -D typescript/no-unnecessary-type-constraint -D typescript/no-unsafe-enum-comparison -D unicorn/no-accessor-recursion -D unicorn/no-array-fill-with-reference-type -D unicorn/no-confusing-array-with -D unicorn/no-instanceof-builtins -D unicorn/prefer-array-flat-map -D unicorn/require-module-specifiers --ignore-pattern \"tests/**/*.ts\" --ignore-pattern \"tests/**/*.tsx\" --ignore-pattern \"**/*.d.mts\" --ignore-pattern \"tests/fixtures/autofix-smoke/**\" --ignore-pattern \"tests/fixtures/format-smoke/**\" --ignore-pattern \"tests/fixtures/tool-smoke/**\" --ignore-pattern \"tests/fixtures/call-graph/javascript/**\" --ignore-pattern \"tests/fixtures/function-facts/javascript-parameter.js\" .",
+		"lint:js:advisory": "node scripts/lint-js-advisory.mjs --deny-warnings --format default -D correctness -D suspicious -D perf --import-plugin --promise-plugin --type-aware -A no-underscore-dangle -A no-await-in-loop -A unicorn/no-array-sort -A unicorn/consistent-function-scoping -A promise/no-promise-in-callback -A no-useless-call -A import/no-unassigned-import -A no-unmodified-loop-condition --ignore-pattern \"**/*.d.mts\" --ignore-pattern \"tests/fixtures/autofix-smoke/**\" --ignore-pattern \"tests/fixtures/format-smoke/**\" --ignore-pattern \"tests/fixtures/tool-smoke/**\" --ignore-pattern \"tests/fixtures/call-graph/javascript/**\" --ignore-pattern \"tests/fixtures/function-facts/javascript-parameter.js\" .",
 		"depcruise:check": "depcruise --validate --config .dependency-cruiser.cjs --ignore-known .dependency-cruiser-known-violations.json --output-type err index.ts \"clients/**/*.ts\"",
 		"fmt": "oxfmt",
 		"fmt:check": "oxfmt --check",
+		"taplo": "taplo check $(git ls-files '*.toml' ':!tests/fixtures/**') && taplo fmt --check $(git ls-files '*.toml' ':!tests/fixtures/**' ':!config/ruff/core.toml') # taplo 0.7.0 panics on this file's comments; lint it above",
 		"watch": "tsc --watch",
 		"test": "node scripts/with-test-lock.mjs -- vitest run",
 		"test:unit": "node scripts/with-test-lock.mjs -- vitest run",
 		"test:integration": "node scripts/with-test-lock.mjs -- vitest run tests/index-integration.test.ts tests/clients/lsp/integration.test.ts",
+		"test:targeted": "node scripts/with-test-lock.mjs --shared -- vitest run",
 		"test:watch": "vitest",
+		"hygiene": "node scripts/prune-agent-worktrees.mjs",
 		"check": "node scripts/check-extensions.mjs",
 		"selftest:install": "node scripts/install-selftest.mjs",
 		"check:lockfile": "node scripts/check-lockfile-sync.mjs",
+		"knip": "node scripts/run-knip.mjs",
 		"check:grammars": "node scripts/check-grammar-provenance.mjs",
 		"check:grammar-load": "node scripts/check-grammar-load.mjs",
 		"audit:tree-sitter": "node scripts/audit-tree-sitter-rules.mjs",
@@ -72,6 +80,9 @@
 	],
 	"author": "Apostolos Mantzaris",
 	"license": "MIT",
+	"engines": {
+		"node": ">=22.19.0"
+	},
 	"files": [
 		"dist/",
 		"docs/",
@@ -85,6 +96,7 @@
 		"scripts/analyze-pi-lens-logs.mjs",
 		"scripts/install-selftest.mjs",
 		"scripts/lib/host-provided-deps.mjs",
+		"scripts/lib/skills-predicate.mjs",
 		"scripts/lib/warm-loader-cache.mjs",
 		"scripts/warm-loader-cache.mjs",
 		"scripts/rpc-load-check.mjs",
@@ -103,7 +115,7 @@
 	},
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": "*",
-		"@earendil-works/pi-tui": "^0.84.1",
+		"@earendil-works/pi-tui": "^0.84.1 || ^0.85.0",
 		"typebox": "^1.0.0"
 	},
 	"peerDependenciesMeta": {
@@ -121,45 +133,16 @@
 		"jiti": "^2.7.0",
 		"web-tree-sitter": "0.25.10"
 	},
-	"devDependencies": {
-		"@biomejs/biome": "^2.4.10",
-		"@earendil-works/pi-coding-agent": "^0.84.1",
-		"@earendil-works/pi-tui": "^0.84.1",
-		"@types/node": "^26.0.0",
-		"@types/pidusage": "^2.0.5",
-		"@vitest/coverage-v8": "^4.1.5",
-		"dependency-cruiser": "^18.2.0",
-		"husky": "^9.1.7",
-		"json5": "^2.2.3",
-		"oxfmt": "0.64.0",
-		"oxlint": "1.79.0",
-		"typebox": "^1.0.0",
-		"typescript": "^7.0.2",
-		"typescript-language-server": "^6.0.0",
-		"vitest": "^4.1.1"
-	},
 	"pi": {
 		"extensions": [
 			"./dist/index.js"
 		],
 		"skills": [
-			"../../skills"
-		]
-	},
-	"knip": {
-		"entry": [
-			"index.ts"
-		],
-		"project": [
-			"**/*.ts",
-			"!**/*.test.ts"
-		],
-		"ignore": [
-			"**/*.test.ts"
+			"./skills"
 		]
 	},
 	"allowScripts": {
-		"@ast-grep/cli@0.45.1": true,
+		"@ast-grep/cli@0.45.3": true,
 		"@google/genai@1.52.0": true,
 		"protobufjs@7.6.5": true
 	}

package/node_modules/pi-lens/rules/tree-sitter-queries/python/python-cross-language-method.yml

@@ -9,7 +9,7 @@ defect_class: hallucination
 inline_tier: warning
 language: python
 
-message: "'{METHOD}' is not a Python method — likely a {LANG} idiom leaking in"
+message: "'{{METHOD}}' is not a Python method — likely a cross-language idiom leaking in"
 
 description: |
   A method name from another language is being called on a Python object.
@@ -27,7 +27,7 @@ query: |
     function: (attribute
       object: (_) @OBJ
       attribute: (identifier) @METHOD)
-    (#match? @METHOD "^(push|forEach|indexOf|charAt|substring|hasOwnProperty|unshift|flatMap|padStart|padEnd|trimStart|trimEnd|equals|isEmpty|println|printf|getClass|hashCode|toCharArray|getBytes|compareTo|equalsIgnoreCase|startsWith|endsWith|each|collect|select|reject|detect|inject|chomp|chop|gsub|upcase|downcase|present|blank|Add|Contains|ToLower|ToUpper|Trim|Substring|WriteLine|ReadLine|TryParse|forEach|includes|assign|freeze|splice|unshift|shift|flatMap)$"))
+    (#match? @METHOD "^(push|forEach|indexOf|charAt|substring|hasOwnProperty|unshift|flatMap|padStart|padEnd|trimStart|trimEnd|equals|isEmpty|println|printf|getClass|hashCode|toCharArray|getBytes|compareTo|equalsIgnoreCase|startsWith|endsWith|each|collect|reject|detect|inject|chomp|chop|gsub|upcase|downcase|present|blank|Add|Contains|ToLower|ToUpper|Trim|Substring|WriteLine|ReadLine|TryParse|forEach|includes|assign|freeze|splice|unshift|shift|flatMap)$"))
 
 metavars:
   - OBJ
@@ -35,7 +35,7 @@ metavars:
 
 post_filter: match_captures
 post_filter_params:
-  METHOD: "^(push|forEach|indexOf|charAt|substring|hasOwnProperty|unshift|flatMap|padStart|padEnd|trimStart|trimEnd|equals|isEmpty|println|printf|getClass|hashCode|toCharArray|getBytes|compareTo|equalsIgnoreCase|startsWith|endsWith|each|collect|select|reject|detect|inject|chomp|chop|gsub|upcase|downcase|present|blank|Add|Contains|ToLower|ToUpper|Trim|Substring|WriteLine|ReadLine|TryParse|forEach|includes|assign|freeze|splice|unshift|shift|flatMap)$"
+  METHOD: "^(push|forEach|indexOf|charAt|substring|hasOwnProperty|unshift|flatMap|padStart|padEnd|trimStart|trimEnd|equals|isEmpty|println|printf|getClass|hashCode|toCharArray|getBytes|compareTo|equalsIgnoreCase|startsWith|endsWith|each|collect|reject|detect|inject|chomp|chop|gsub|upcase|downcase|present|blank|Add|Contains|ToLower|ToUpper|Trim|Substring|WriteLine|ReadLine|TryParse|forEach|includes|assign|freeze|splice|unshift|shift|flatMap)$"
 
 has_fix: false
 

package/node_modules/pi-lens/rules/tree-sitter-queries/python/python-hallucinated-import.yml

@@ -9,7 +9,7 @@ defect_class: hallucination
 inline_tier: blocking
 language: python
 
-message: "Hallucinated import — '{NAME}' does not exist in '{MODULE}'"
+message: "Hallucinated import — '{{NAME}}' does not exist in '{{MODULE}}'"
 
 description: |
   This import is from the wrong package. A name from one framework is being
@@ -32,7 +32,7 @@ metavars:
 
 post_filter: match_captures
 post_filter_params:
-  MODULE: "^(requests|flask|django|typing|collections|asyncio|json|unittest|pytest|urllib|sqlalchemy)$"
+  MODULE: "^(requests|flask|django|typing|collections|asyncio|json|unittest|pytest|urllib)$"
   NAME: "^(JSONResponse|HTMLResponse|RedirectResponse|StreamingResponse|Depends|Query|Path|Body|Header|Cookie|Form|File|UploadFile|FastAPI|APIRouter|HTTPException|BackgroundTasks|dataclass|fields|BaseModel|Field|validator|aiohttp|parse|stringify|fixture|TestCase|get|post|put|delete|Model|Session|Column|Integer|String)$"
 
 has_fix: false

package/node_modules/pi-lens/rules/tree-sitter-queries/python/python-sql-injection.yml

@@ -18,8 +18,18 @@ description: |
   
   Suppressed:
   - cursor.execute(query, params) — parameterized query (safe)
-  - session.execute(select(...)) — SQLAlchemy ORM (safe by construction)
-  - cursor.execute(f"...") — f-string with literal-only interpolation (rare false positive)
+  - session.execute(...) — receiver conventionally named for a SQLAlchemy session
+  - x.execute(select(...)) — statement builder in argument position (safe by
+    construction)
+  - db.query(...) / db.execute(stmt) where `db: Session` and `Session` is proven
+    from a same-file `sqlalchemy.orm` / `sqlalchemy.ext.asyncio` import, and
+    `stmt` is bound exactly once to a builder call
+  - cursor.execute(sql.SQL("...").format(sql.Identifier(...))) where `sql` is
+    an unshadowed same-file psycopg or psycopg2 import and every format argument
+    is an Identifier
+
+  Other raw, dynamic, or ambiguous SQL remains diagnostic so this rule fails
+  closed when it cannot prove the safe API provenance.
   
   ✅ FIX: use placeholders and parameter binding instead of string composition.
 

package/node_modules/pi-lens/rules/typos/_typos.toml

@@ -13,5 +13,7 @@
 # dictionary here; every entry must have a provenance comment.
 
 [default.extend-identifiers]
-dito = "dito"               # #967 — real model/vendor namespace (provider-failover normalization prefix), not a misspelling of "ditto"
-unparseable = "unparseable" # #967 — valid English spelling ("un-parseable"), not a typo of "unparsable"
+# #967 — real model/vendor namespace (provider-failover normalization prefix), not a misspelling of "ditto"
+dito = "dito"
+# #967 — valid English spelling ("un-parseable"), not a typo of "unparsable"
+unparseable = "unparseable"