@herbertgao/pi-extensions 2026.9.1 → 2026.9.2

package/node_modules/pi-lens/dist/clients/recent-touches.js

@@ -37,7 +37,7 @@ import { getProjectDataDir } from "./file-utils.js";
 import { normalizeFilePath } from "./path-utils.js";
 export const RECENT_TOUCHES_MAX_ENTRIES = 50;
 /** Freshness window for the CHILD session_start consumer (15 minutes). */
-export const RECENT_TOUCHES_FRESHNESS_MS = 15 * 60 * 1000;
+const RECENT_TOUCHES_FRESHNESS_MS = 15 * 60 * 1000;
 function recentTouchesPath(cwd) {
     return path.join(getProjectDataDir(cwd), "recent-touches.json");
 }
@@ -46,7 +46,7 @@ function recentTouchesPath(cwd) {
 // INTO the same nudge pipeline, so one switch governs the whole path
 // (producer, both consumers) as specified in the issue.
 let _enabledCache;
-export function isRecentTouchesEnabled() {
+function isRecentTouchesEnabled() {
     if (_enabledCache === undefined) {
         _enabledCache = process.env.PI_LENS_AGENT_NUDGE !== "0";
     }

package/node_modules/pi-lens/dist/clients/review-graph/builder.js

@@ -92,8 +92,6 @@ const MAIN_KINDS = new Set([
 // so a repo heavy in JSON/YAML/Markdown doesn't trip the cap on files the graph
 // would have filtered out anyway (the cap is on the walk, not on noise). #250.
 const MAIN_KIND_EXTENSIONS = Array.from(MAIN_KINDS).flatMap((kind) => KIND_EXTENSIONS[kind] ?? []);
-/** The bounded, source-filtered extension set shared by graph cache readers. */
-export const REVIEW_GRAPH_SOURCE_EXTENSIONS = MAIN_KIND_EXTENSIONS;
 const CHANGED_SYMBOLS_PREFIX = "session.reviewGraph.changedSymbols:";
 const extractorCache = new Map();
 const REVIEW_GRAPH_MAX_WARM_WORKSPACES = 8;
@@ -407,7 +405,7 @@ export function estimateReviewGraphStoreBytes(totalNodes, totalEdges) {
 // cleared). Bounding only the cache left the full graph resident on the fact, so
 // both sites go through `retainedGraph` below, memoized per graph instance so the
 // two sites share ONE bounded object instead of trimming twice (#2255 review F2).
-export const GRAPH_MAX_IN_MEMORY_BYTES_DEFAULT = 512 * 1024 * 1024;
+const GRAPH_MAX_IN_MEMORY_BYTES_DEFAULT = 512 * 1024 * 1024;
 function graphMaxInMemoryBytes() {
     const raw = Number(process.env.PI_LENS_GRAPH_MAX_IN_MEMORY_BYTES);
     return Number.isFinite(raw) && raw > 0
@@ -967,7 +965,7 @@ function diffSignatureMaps(previous, next) {
 // `RUNTIME_CONFIG.reviewGraph.maxFiles` constant as the fallback — the ratio
 // table reproduces that same 1,000-file default at the default base, so this
 // is behavior-neutral when nothing is configured.
-export function getReviewGraphMaxFiles(cwd) {
+function getReviewGraphMaxFiles(cwd) {
     const override = Number.parseInt(process.env.PI_LENS_REVIEW_GRAPH_MAX_FILES ?? "", 10);
     return Number.isFinite(override) && override > 0
         ? override
@@ -3481,7 +3479,7 @@ function addTreeSitterFile(graph, cwd, filePath, languageId, extracted, ignoredI
  * SymbolInformation results (including native TypeScript 7) recover the same
  * containment through `containerName` when the owner is present in the result.
  */
-export function addLspFallbackSymbols(graph, filePath, languageId, symbols) {
+function addLspFallbackSymbols(graph, filePath, languageId, symbols) {
     const normalized = normalizeMapKey(filePath);
     const fileNodeId = `file:${normalized}`;
     let added = 0;

package/node_modules/pi-lens/dist/clients/review-graph/import-resolvers.js

@@ -90,7 +90,7 @@ function resolveDart(cwd, filePath, source) {
 // JS/TS extension from the specifier before re-appending candidate extensions
 // lets that universal pattern resolve to the real source file. Exported so
 // builder.ts's warm `localImportToFile` shares the exact same regex (#694).
-export const JS_TS_EXT_RE = /\.(mjs|cjs|mts|cts|jsx?|tsx?)$/i;
+const JS_TS_EXT_RE = /\.(mjs|cjs|mts|cts|jsx?|tsx?)$/i;
 /**
  * Ordered candidate list for resolving a relative JS/TS import specifier
  * (already resolved to an absolute base path) to an on-disk file, with

package/node_modules/pi-lens/dist/clients/runtime-agent-end.js

@@ -19,7 +19,7 @@ import { getAutofixPolicyForFile, hasBiomeConfig, hasDetektConfig, hasEslintConf
  * path at all (they match on `ownerSessionId`), so this only trades a little
  * extra staleness for guaranteed eventual formatting. (#791)
  */
-export const DEFERRED_FORMAT_STALE_AFTER_MS = 10 * 60_000;
+const DEFERRED_FORMAT_STALE_AFTER_MS = 10 * 60_000;
 const DEFERRED_FORMAT_CONCURRENCY = 3;
 function recordProjectChange(args) {
     // One mutation seam (#2000 phase 1): bump + receipt + change-log live in

package/node_modules/pi-lens/dist/clients/runtime-session.js

@@ -5,7 +5,7 @@ import { rotateMessageEndAttribution } from "./message-end-attribution.js";
 import { createDeadline, yieldIfOverBudget } from "./cooperative-budget.js";
 import { deadCodeIssueCount } from "./dead-code-client.js";
 import { logDeadCodeScan } from "./dead-code-logger.js";
-import { incrementDegradationCount, resetDegradationLedger, } from "./degradation-ledger.js";
+import { incrementDegradationCount, recordDegradationOnce, resetDegradationLedger, } from "./degradation-ledger.js";
 import { getDiagnosticTracker } from "./diagnostic-tracker.js";
 import { resetPsScriptAnalyzerAvailability } from "./dispatch/runners/psscriptanalyzer.js";
 import { resetInstallRetryLatches } from "./dispatch/runners/utils/availability-policy.js";
@@ -256,11 +256,14 @@ function logProjectSnapshotProbe(args) {
         args.dbg(`project_snapshot: miss reason=${args.missReason}`);
     }
 }
-function resolveStartupMode() {
+function resolveStartupMode(projectConfig, globalConfig) {
     const envMode = (process.env.PI_LENS_STARTUP_MODE ?? "").trim().toLowerCase();
     if (envMode === "full" || envMode === "minimal" || envMode === "quick") {
         return envMode;
     }
+    const configMode = projectConfig?.startup?.mode ?? globalConfig?.startup?.mode;
+    if (configMode)
+        return configMode;
     if (isPrintMode()) {
         return "quick";
     }
@@ -813,6 +816,15 @@ function scheduleStartupScans(deps, runtime, sessionGeneration, analysisRoot, sn
 /** The scan bodies, once the analyzers they need are resolved. */
 function scheduleStartupScansWithClients(deps, runtime, sessionGeneration, analysisRoot, snapshotRoot, languageProfile, dbg) {
     const { todoScanner, cacheManager, knipClient, jscpdClient, deadCodeClients, govulncheckClient, gitleaksClient, trivyClient, opengrepClient, astGrepClient, depChecker, } = deps;
+    const analyzerEnabled = (flag) => !deps.getFlag(flag);
+    if (!analyzerEnabled("no-complexity")) {
+        dbg("session_start complexity: skipped (disabled by config)");
+        recordDegradationOnce({
+            kind: "startup-analyzer-disabled",
+            subject: "complexity",
+            reason: "skipped (disabled by config)",
+        });
+    }
     // Some background scans are CPU-heavy and arrive on the event loop
     // just as the user is most likely typing (right after /new). Defer
     // those by a few seconds so the perceptible 50-100ms sync bursts they
@@ -869,7 +881,7 @@ function scheduleStartupScansWithClients(deps, runtime, sessionGeneration, analy
         scanNames.push("knip", "jscpd", "ast-grep exports", "project index");
     }
     dbg(`session_start: launching background scans (${scanNames.join(", ")})`);
-    runTask("todo", async () => {
+    void runTask("todo", async () => {
         if (!runtime.isCurrentSession(sessionGeneration))
             return;
         // The original implementation called todoScanner.scanDirectory(), which
@@ -906,9 +918,19 @@ function scheduleStartupScansWithClients(deps, runtime, sessionGeneration, analy
     const isSubagent = isSubagentSession();
     const skipHeavyweightScans = isSlowFs(analysisRoot) || isSubagent;
     const runHeavyweightTask = (name, task) => {
+        const flag = `no-${name}`;
+        if (name !== "opengrep" && name !== "trivy" && !analyzerEnabled(flag)) {
+            dbg(`session_start ${name}: skipped (disabled by config)`);
+            recordDegradationOnce({
+                kind: "startup-analyzer-disabled",
+                subject: name,
+                reason: "skipped (disabled by config)",
+            });
+            return;
+        }
         if (skipHeavyweightScans)
             return;
-        runTask(name, task);
+        void runTask(name, task);
     };
     if (skipHeavyweightScans) {
         dbg(`session_start: skipping knip/jscpd/madge/dead-code/govulncheck/gitleaks/trivy/opengrep (${isSubagent ? "subagent" : "slow-fs"})`);
@@ -1239,7 +1261,7 @@ function scheduleStartupScansWithClients(deps, runtime, sessionGeneration, analy
     // racing its independently deferred timer. Otherwise a slow graph build leaves
     // `runtime.callGraph` unset at this task's start and loses the model for the
     // entire session (#1070).
-    runTask("codebase-model", async () => {
+    void runTask("codebase-model", async () => {
         await callGraphTask;
         if (!runtime.isCurrentSession(sessionGeneration))
             return;
@@ -1258,7 +1280,7 @@ function scheduleStartupScansWithClients(deps, runtime, sessionGeneration, analy
             `${model.totalTokens} tokens, top symbols: ${top3 || "(none)"}`);
     });
     // ast-grep — export scan for duplicate detection
-    runTask("ast-grep-exports", async () => {
+    void runTask("ast-grep-exports", async () => {
         if (await astGrepClient.ensureAvailable()) {
             if (!runtime.isCurrentSession(sessionGeneration))
                 return;
@@ -1275,7 +1297,7 @@ function scheduleStartupScansWithClients(deps, runtime, sessionGeneration, analy
     // word-index — identifier inverted index + BM25 for ranked symbol search
     // (#162). Load -> rebuild-if-stale -> persist lifecycle (#348), shared with
     // the quick-mode cold-start warmup pass below.
-    runTask("word-index", async () => {
+    void runTask("word-index", async () => {
         await buildOrRefreshWordIndex({
             runtime,
             sessionGeneration,
@@ -1423,7 +1445,7 @@ export async function handleSessionStart(deps) {
     //   entirely — but only when PI_LENS_STARTUP_MODE is unset in the env
     //   (an explicit env var still takes highest precedence).
     // Tunable: PI_LENS_WARMUP_DELAY_MS adjusts the warmup delay.
-    let startupMode = resolveStartupMode();
+    let startupMode = resolveStartupMode(deps.projectConfig, deps.globalConfig);
     // SAFETY: these two flags are process-lifetime state pi-lens stashes on
     // `globalThis` so a second extension instance in the same process sees the
     // first one's warmup. There is no ambient declaration for them, and adding
@@ -1433,7 +1455,9 @@ export async function handleSessionStart(deps) {
     const isFirstSessionOfProcess = !processGlobals.__piLensFirstSessionDone;
     if (isFirstSessionOfProcess &&
         process.env.PI_LENS_COLD_START_QUICK !== "0" &&
-        !process.env.PI_LENS_STARTUP_MODE) {
+        !process.env.PI_LENS_STARTUP_MODE &&
+        !deps.projectConfig?.startup?.mode &&
+        !deps.globalConfig?.startup?.mode) {
         // Apply host-provided override (e.g. MCP server forces "full") before
         // falling back to the TUI quick-mode heuristic.
         startupMode = deps.startupModeOverride ?? "quick";
@@ -2271,7 +2295,10 @@ export async function handleSessionStart(deps) {
     else {
         dbg("session_start: no language defaults selected for pre-install");
     }
-    const startupScansWillRun = allowBootstrapTasks && startupScan.canWarmCaches;
+    const startupScansEnabled = deps.projectConfig?.startup?.scans?.enabled ??
+        deps.globalConfig?.startup?.scans?.enabled ??
+        true;
+    const startupScansWillRun = allowBootstrapTasks && startupScan.canWarmCaches && startupScansEnabled;
     const jstsHeavyScansWillRun = startupScansWillRun && canRunStartupHeavyScans(languageProfile, "jsts");
     if (allowBootstrapTasks) {
         scheduleDeferredToolProbes(deps, languageProfile, startupDefaults, jstsHeavyScansWillRun, dbg);
@@ -2326,6 +2353,14 @@ export async function handleSessionStart(deps) {
     if (!allowBootstrapTasks) {
         dbg("session_start: skipping startup background scans (startup mode)");
     }
+    else if (!startupScansEnabled) {
+        dbg("session_start: skipping startup background scans (disabled by config)");
+        recordDegradationOnce({
+            kind: "startup-analyzer-disabled",
+            subject: "startup-scans",
+            reason: "skipped (disabled by config)",
+        });
+    }
     else if (!startupScan.canWarmCaches) {
         dbg(`session_start: skipping heavy scans (${startupScan.reason ?? "unknown"})`);
         dbg(`session_start: skipping TODO scan (${startupScan.reason ?? "unknown"})`);

package/node_modules/pi-lens/dist/clients/runtime-tool-call.js

@@ -773,7 +773,8 @@ async function handleToolCallImpl(deps) {
     // is the client's own answer, hoisted into `tree-sitter-shared.ts` where it
     // needs nothing but the extension registry; `ComplexityClient.isSupportedFile`
     // delegates to it, so this is not a second copy.
-    if (!isExternalOrVendor &&
+    if (!getFlag("no-complexity") &&
+        !isExternalOrVendor &&
         filePath &&
         !runtime.complexityBaselines.has(filePath) &&
         isComplexitySupportedFile(filePath)) {
@@ -803,6 +804,15 @@ async function handleToolCallImpl(deps) {
             });
         }
     }
+    else if (getFlag("no-complexity") &&
+        filePath &&
+        isComplexitySupportedFile(filePath)) {
+        recordDegradationOnce({
+            kind: "startup-analyzer-disabled",
+            subject: "complexity",
+            reason: "skipped (disabled by config)",
+        });
+    }
     // --- Read-Before-Edit Guard: check edits ---
     // write = full replacement; no prior read needed (you're starting fresh).
     // edit = partial modification; guard enforced to prevent blind overwrites.

package/node_modules/pi-lens/dist/clients/sanitize.js

@@ -43,17 +43,6 @@ const DETAIL_PATTERNS = [
 export function stripAnsi(text) {
     return text.replace(ANSI_ESCAPE, "").replace(ANSI_ESCAPE_EXTENDED, "");
 }
-/**
- * Normalize whitespace in a string.
- * Collapses multiple spaces/tabs to single space, trims lines.
- */
-export function normalizeWhitespace(text) {
-    return text
-        .split(/\r?\n/)
-        .map((line) => line.replace(/\s+/g, " ").trim())
-        .filter((line) => line.length > 0)
-        .join("\n");
-}
 /**
  * Check if a line contains error indicators.
  */

package/node_modules/pi-lens/dist/clients/scan-utils.js

@@ -1,59 +1,4 @@
-import { isExcludedDirName, isTestFile } from "./file-utils.js";
-import { collectSourceFiles, collectSourceFilesAsync, isBuildArtifact, } from "./source-filter.js";
-/**
- * Common parsing logic for ast-grep JSON output (handles both array and NDJSON).
- */
-// biome-ignore lint/suspicious/noExplicitAny: ast-grep JSON output is untyped
-export function parseAstGrepJson(raw) {
-    if (!raw)
-        return [];
-    const trimmed = raw.trim();
-    if (trimmed.startsWith("[")) {
-        try {
-            return JSON.parse(trimmed);
-        }
-        catch {
-            return [];
-        }
-    }
-    return trimmed.split("\n").flatMap((l) => {
-        try {
-            return [JSON.parse(l)];
-        }
-        catch {
-            return [];
-        }
-    });
-}
-/**
- * Check if a file should be ignored based on project type and common patterns.
- *
- * @deprecated Use `isBuildArtifact()` from `source-filter.js` instead for artifact
- * detection, or compose your own filter using `collectSourceFiles()`. This function
- * is kept for backward compatibility.
- */
-export function shouldIgnoreFile(filePath, isTsProject) {
-    const relPath = filePath.replace(/\\/g, "/");
-    // Use new source-filter module for artifact detection
-    if (isTsProject && isBuildArtifact(filePath))
-        return true;
-    // Legacy: simple JS check for non-TS projects (hand-written JS)
-    const isJs = relPath.endsWith(".js") ||
-        relPath.endsWith(".mjs") ||
-        relPath.endsWith(".cjs");
-    if (isTsProject && isJs)
-        return true;
-    // Ignore test scripts and common test patterns
-    if (isTestFile(filePath))
-        return true;
-    // Ignore hidden directories and common build outputs
-    const pathParts = relPath.split("/").filter(Boolean);
-    for (const segment of pathParts.slice(0, -1)) {
-        if (isExcludedDirName(segment))
-            return true;
-    }
-    return false;
-}
+import { collectSourceFiles, collectSourceFilesAsync, } from "./source-filter.js";
 /**
  * Recursively find source files in a directory, respecting common excludes.
  *

package/node_modules/pi-lens/dist/clients/session-summary.js

@@ -1,30 +1,6 @@
 /**
  * Session Summary — generates turn_end and session-end summaries
  */
-export function formatSessionSummary(stats) {
-    if (stats.totalShown === 0)
-        return "";
-    const lines = [
-        "## Diagnostic Summary",
-        "",
-        `Shown to agent: ${stats.totalShown}`,
-        `Auto-fixed: ${stats.totalAutoFixed} (${pct(stats.totalAutoFixed, stats.totalShown)}%)`,
-        `Fixed by agent: ${stats.totalAgentFixed} (${pct(stats.totalAgentFixed, stats.totalShown)}%)`,
-        "",
-    ];
-    if (stats.topViolations.length > 0) {
-        lines.push("Top violations:");
-        for (const { ruleId, count } of stats.topViolations.slice(0, 5)) {
-            lines.push(`  - ${ruleId} (${count}x)`);
-        }
-    }
-    return lines.join("\n");
-}
-function pct(part, total) {
-    if (total === 0)
-        return "0";
-    return Math.round((part / total) * 100).toString();
-}
 export function formatSlopScoreSummary(summary) {
     if (summary.totalRuleDiagnostics === 0 || summary.totalKlocWritten <= 0) {
         return "";

package/node_modules/pi-lens/dist/clients/sgconfig.js

@@ -8,7 +8,7 @@ import { findLocalToolConfig } from "./path-utils.js";
 // ast-grep's root config marker. The `ast-grep lsp` server is workspace-gated:
 // it only operates in a project that has an `sgconfig.y[a]ml` at (or above) the
 // file. These are the names ast-grep itself looks for as root markers.
-export const SGCONFIG_NAMES = ["sgconfig.yml", "sgconfig.yaml"];
+const SGCONFIG_NAMES = ["sgconfig.yml", "sgconfig.yaml"];
 /**
  * Nearest `sgconfig.y[a]ml` walking up from `startDir`, or undefined if none.
  * Deliberately UNCEILINGED at $HOME (refs #2472 review round 3, F1): ast-grep
@@ -65,10 +65,6 @@ export function getAstGrepRuleSources(projectRoot = process.cwd()) {
         return true;
     });
 }
-/** Compatibility export retained for callers that only need ordered dirs. */
-export function shippedRuleDirsInPrecedenceOrder(projectRoot = process.cwd()) {
-    return getAstGrepRuleSources(projectRoot).map((source) => source.dir);
-}
 function findYamlFiles(dir) {
     const files = [];
     let entries;

package/node_modules/pi-lens/dist/clients/shared-checkout-guard.js

@@ -115,7 +115,7 @@ function isCleanDryRun(argsAfterVerb) {
  * replacement for the forbidden `git stash`. Blocking it would push
  * operators back toward stash.
  */
-export const WORKTREE_MUTATING_GIT_MATCHER = {
+const WORKTREE_MUTATING_GIT_MATCHER = {
     id: "worktree-mutating",
     indirectAlwaysMatches: false,
     // `git checkout --help` opens documentation and changes nothing. This

package/node_modules/pi-lens/dist/clients/smells-rollup.js

@@ -58,11 +58,11 @@ import * as path from "node:path";
 import { getGlobalPiLensLogDir } from "./probe-home-state.js";
 /** Bounded tail-read budget PER source log file — never a full-file scan. */
 export const SMELLS_TAIL_BYTES_PER_FILE = 64 * 1024;
-export const SMELLS_ROLLING_WINDOW_MS = 24 * 60 * 60_000;
+const SMELLS_ROLLING_WINDOW_MS = 24 * 60 * 60_000;
 /** Re-check cadence at `turn_end`, mirroring `memory-sampler.ts`'s pattern —
  *  cheap enough (bounded ~128KB I/O) not to need finer throttling, but a
  *  fixed interval keeps it from running on every single turn. */
-export const SMELLS_TURN_CHECK_INTERVAL = 20;
+const SMELLS_TURN_CHECK_INTERVAL = 20;
 /** Trivial threshold constants (#1123 item 3's explicit design ask). Counts
  *  strictly below these never surface anywhere. */
 export const SMELLS_THRESHOLDS = {

package/node_modules/pi-lens/dist/clients/startup-scan.js

@@ -16,7 +16,7 @@ import { isAtOrAboveHomeDir } from "./path-utils.js";
 import { getStartupScanMaxSourceFilesDerived } from "./project-scale.js";
 import { shouldRecurseIntoDir, walkTreeStackAsync, walkTreeStackSync, } from "./source-walker.js";
 import { getDirectoryMarkers, registerWorkspaceTopologyReset, } from "./workspace-topology.js";
-export const PROJECT_ROOT_MARKERS = [
+const PROJECT_ROOT_MARKERS = [
     ".git",
     "package.json",
     "pyproject.toml",
@@ -24,16 +24,8 @@ export const PROJECT_ROOT_MARKERS = [
     "go.mod",
     "composer.json",
 ];
-// Deprecated (#776): no longer read directly below — `computeStartupScanContext`
-// / `resolveStartupScanContextAsync` now default `maxSourceFiles` to
-// `getStartupScanMaxSourceFilesDerived(cwd)` (project-scale.ts's
-// `maxProjectFiles` knob), which reproduces this same 2,000 value at the
-// default base. Kept exported for tests/callers that still reference the
-// literal.
-export const MAX_STARTUP_SOURCE_FILES = 2000;
 // #758: hard ceiling on the number of directory entries the startup source
 // count walk will visit before it gives up and declares the tree too big to
-// warm. The source-file early-exit (MAX_STARTUP_SOURCE_FILES) only fires when
 // a project has MANY source files — a repo with FEW source files but a huge
 // pile of non-source files (e.g. a game mod: 300 scripts among 84k data files)
 // never trips it, so the pre-#758 walk traversed the entire tree, dominated by
@@ -77,7 +69,7 @@ export const _resetStartupScanMaxEntriesForTests = _maxEntries._resetForTests;
  *
  * The content-derived reasons `too-many-source-files` and `too-many-entries`
  * (#758) are the ones that are TTL'd. They can go stale on their own: the repo
- * can shrink below `MAX_STARTUP_SOURCE_FILES` (or below the entry ceiling)
+ * can shrink below the source-file cap (or below the entry ceiling)
  * between sessions, and nothing else would notice
  * — the seq-based freshness check that guards every other
  * `project-snapshot.json` field never fires for them, because pi-lens never