@herbertgao/pi-extensions 2026.9.1 → 2026.9.2

package/node_modules/pi-lens/dist/mcp/build-staleness.js

@@ -31,7 +31,7 @@
  * per-call I/O" shape) and reuses the last verdict in between.
  */
 import * as fs from "node:fs";
-export const realStat = (targetPath) => {
+const realStat = (targetPath) => {
     try {
         return fs.statSync(targetPath);
     }

package/node_modules/pi-lens/dist/scripts/lib/process-scan.mjs

@@ -46,7 +46,7 @@ function runningOnWindows() {
     return process.platform === "win32";
 }
 /** Default ceiling for one process listing. */
-export const DEFAULT_SNAPSHOT_TIMEOUT_MS = 4_000;
+const DEFAULT_SNAPSHOT_TIMEOUT_MS = 4_000;
 /**
  * @typedef {"pid" | "ppid" | "ageMs" | "rssBytes" | "cpuKernel100ns" | "cpuUser100ns" | "startedAt" | "command"} ProcessField
  * @typedef {{ pid: number, ppid: number, command: string, ageMs?: number, rssBytes?: number, cpuKernel100ns?: number, cpuUser100ns?: number, startedAt?: string, cwd?: string }} ProcRow

package/node_modules/pi-lens/dist/scripts/lib/skills-predicate.mjs

@@ -52,7 +52,7 @@ import * as path from "node:path";
  * @param {import("node:fs").Dirent} entry
  * @returns {"file" | "dir" | "other"}
  */
-export function resolvedEntryKind(fullPath, entry) {
+function resolvedEntryKind(fullPath, entry) {
     if (entry.isSymbolicLink()) {
         try {
             const stats = fs.statSync(fullPath);

package/node_modules/pi-lens/dist/tools/lens-diagnostics.js

@@ -1115,7 +1115,7 @@ function tallyLspPrimaryVsAuxiliary(results) {
     }
     return { primary, auxiliary };
 }
-export function mergeDiagnosticsWithWidgetSummaries(widgetSummaries, lspResults, projectSnapshot, projectDelta, 
+function mergeDiagnosticsWithWidgetSummaries(widgetSummaries, lspResults, projectSnapshot, projectDelta, 
 /**
  * #1993: resolved paths covered by a CONFIRMED, fully-covered LSP result
  * in `lspResults`. The fresh sweep is AUTHORITATIVE for these files - any

package/node_modules/pi-lens/dist/tools/lsp-diagnostics.js

@@ -245,6 +245,10 @@ onConfirmedNoBlockers) {
             // compact-render as a bare "N diagnostics" — that erases the fact some
             // files' clean status was never actually confirmed by the server.
             const unconfirmedFiles = details?.unconfirmedFiles ?? 0;
+            const navigationOnlyFiles = details?.navigationOnlyFiles ?? 0;
+            if (navigationOnlyFiles > 0) {
+                return `lsp_diagnostics${scope} — ${count} ${noun} · ${details?.cleanFiles ?? 0} clean · ${navigationOnlyFiles} navigation-only`;
+            }
             if (unconfirmedFiles > 0) {
                 const cleanFiles = details?.cleanFiles ?? 0;
                 const timedOutFiles = details?.timedOutFiles ?? 0;
@@ -470,6 +474,7 @@ async function collectDiagnosticsForFile(absPath, lspService, waitMs, serverScop
                     // field across the socket. An older incumbent omits it → empty → the
                     // pre-#1470 handling, unchanged.
                     unconfirmedServerIds: attached.response.unconfirmedServerIds ?? [],
+                    diagnosticsUnsupportedServerIds: [],
                     content,
                 };
             }
@@ -528,6 +533,7 @@ async function collectDiagnosticsForFile(absPath, lspService, waitMs, serverScop
         // the getDiagnostics fallback never reports one, which is honest — that
         // path claims no confirmation at all.
         unconfirmedServerIds: touchCoverageGap(touched),
+        diagnosticsUnsupportedServerIds: touched?.diagnosticsUnsupportedServerIds ?? [],
         content,
         binding,
     };
@@ -777,7 +783,7 @@ onConfirmedNoBlockers) {
             };
         }
     }
-    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, content: collectedContent, binding, skipReason, } = await collectDiagnosticsForFile(file, lspService, waitMs, serverScope);
+    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, diagnosticsUnsupportedServerIds, content: collectedContent, binding, skipReason, } = await collectDiagnosticsForFile(file, lspService, waitMs, serverScope);
     const health = lspService.getDiagnosticsHealth?.(file);
     // #570: a timed-out priming check is never a confirmed "clean" — treat it
     // as unconfirmed without consulting the (unrelated) silent-tier
@@ -788,7 +794,12 @@ onConfirmedNoBlockers) {
     // be merged in rather than discarded.
     let effectiveRawDiags = rawDiags;
     let confirmation;
-    if (skipReason !== undefined) {
+    if (diagnosticsUnsupportedServerIds.length > 0) {
+        // No diagnostic provider and no push evidence is a capability boundary,
+        // not a clean result and not a timeout.
+        confirmation = undefined;
+    }
+    else if (skipReason !== undefined) {
         confirmation = "unconfirmed";
     }
     else if (timedOut) {
@@ -851,6 +862,7 @@ onConfirmedNoBlockers) {
     if (cacheCtx &&
         scopeKey !== undefined &&
         confirmation !== "unconfirmed" &&
+        diagnosticsUnsupportedServerIds.length === 0 &&
         unconfirmedServerIds.length === 0) {
         cacheCtx.record(file, scopeKey, effectiveRawDiags, stat.mtimeMs, collectedContent !== undefined
             ? hashDiagnosticContent(collectedContent)
@@ -864,6 +876,7 @@ onConfirmedNoBlockers) {
         timedOut: confirmation === "unconfirmed" ? timedOut : undefined,
         ...(skipReason !== undefined && { skipReason }),
         primaryServerId: primaryServerId(file),
+        diagnosticsUnsupported: diagnosticsUnsupportedServerIds.length > 0,
     };
 }
 async function runFileDiagnostics(absPath, severity, lspService, waitMs, nextWriteIndex, serverScope = "all", cwd = process.cwd(), 
@@ -873,7 +886,7 @@ onConfirmedNoBlockers) {
     // Reserve the token before awaiting this file's LSP result. The direct-file
     // path performs its own confirmation/reconciliation below (#1198).
     const writeIndex = nextWriteIndex?.();
-    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, content: collectedContent, binding, skipReason, } = await collectDiagnosticsForFile(absPath, lspService, waitMs, serverScope);
+    const { diagnostics: rawDiags, timedOut, confirmedByTouch, unconfirmedServerIds, diagnosticsUnsupportedServerIds, content: collectedContent, binding, skipReason, } = await collectDiagnosticsForFile(absPath, lspService, waitMs, serverScope);
     const lspHealth = lspService.getDiagnosticsHealth?.(absPath);
     const unavailable = lspUnavailableMessage(absPath, lspHealth);
     // #533: an empty result needs a confirmed/unconfirmed verdict — a push-only,
@@ -887,7 +900,10 @@ onConfirmedNoBlockers) {
     // diagnostics it surfaces are merged in, not discarded.
     let effectiveRawDiags = rawDiags;
     let confirmation;
-    if (skipReason !== undefined) {
+    if (diagnosticsUnsupportedServerIds.length > 0) {
+        confirmation = undefined;
+    }
+    else if (skipReason !== undefined) {
         confirmation = "unconfirmed";
     }
     else if (timedOut) {
@@ -955,6 +971,9 @@ onConfirmedNoBlockers) {
     // auxiliary findings exist — a wall of ast-grep/opengrep noise must never
     // bury whether the actual language server confirmed the file clean.
     const primaryLine = (() => {
+        if (diagnosticsUnsupportedServerIds.length > 0) {
+            return `Primary LSP${primaryId ? ` (${primaryId})` : ""}: navigation-only — diagnostics unsupported (no pull provider or publish evidence).`;
+        }
         if (timedOut) {
             return ("Primary LSP: check timed out — NOT the same as 0 diagnostics; the " +
                 "file may still have errors that just hadn't been reported yet. " +
@@ -1031,6 +1050,7 @@ onConfirmedNoBlockers) {
             truncated,
             unconfirmed,
             timedOut: unconfirmed ? timedOut : undefined,
+            navigationOnlyFiles: diagnosticsUnsupportedServerIds.length > 0 ? 1 : undefined,
             ...(skipReason !== undefined && { skipReason }),
             // #1470: which servers this result does NOT speak for. Absent when it
             // speaks for all of them.
@@ -1054,7 +1074,12 @@ function tallyConfirmation(results) {
     let clean = 0;
     let unconfirmed = 0;
     let timedOut = 0;
+    let navigationOnly = 0;
     for (const result of results) {
+        if (result.diagnosticsUnsupported) {
+            navigationOnly += 1;
+            continue;
+        }
         if (result.diagnostics.length > 0)
             continue;
         if (result.confirmation === "unconfirmed") {
@@ -1068,11 +1093,13 @@ function tallyConfirmation(results) {
             clean += 1;
         }
     }
-    return { clean, unconfirmed, timedOut };
+    return { clean, unconfirmed, timedOut, navigationOnly };
 }
 function classifyBatchFileOutcome(result) {
     if (result.error)
         return "failed";
+    if (result.diagnosticsUnsupported)
+        return "unsupported";
     // A timed-out/unconfirmed answer may contain partial findings, but it cannot
     // honestly be called a complete findings result. Keep the raw findings for
     // investigation while making the aggregate incomplete.
@@ -1228,6 +1255,7 @@ async function runBatchFileDiagnostics(absPaths, severity, lspService, options)
         };
     }
     const { results, fileErrors, lspHealthWarnings, total, truncated, display, primaryDisplay, auxiliaryDisplay, clean, unconfirmed, timedOut, outcomeCounts, incompleteFiles, } = await collectBatchDiagnostics(absPaths, severity, lspService, options);
+    const navigationOnly = results.filter((result) => result.diagnosticsUnsupported).length;
     const lines = [
         `Files checked: ${results.length}`,
         `Total diagnostics: ${total}`,
@@ -1298,6 +1326,7 @@ async function runBatchFileDiagnostics(absPaths, severity, lspService, options)
             truncated,
             cleanFiles: clean,
             unconfirmedFiles: unconfirmed,
+            navigationOnlyFiles: navigationOnly > 0 ? navigationOnly : undefined,
             timedOutFiles: timedOut > 0 ? timedOut : undefined,
             outcomes: results.map((result) => ({
                 file: result.file,
@@ -1366,7 +1395,8 @@ async function runDirectoryDiagnostics(absPath, severity, lspService, options) {
     }
     const wasCapped = collectedFiles.length > MAX_FILES;
     const filesToProcess = collectedFiles.slice(0, MAX_FILES);
-    const { fileErrors, lspHealthWarnings, total, truncated, display, primaryDisplay, auxiliaryDisplay, clean, unconfirmed, timedOut, } = await collectBatchDiagnostics(filesToProcess, severity, lspService, options);
+    const { results, fileErrors, lspHealthWarnings, total, truncated, display, primaryDisplay, auxiliaryDisplay, clean, unconfirmed, timedOut, } = await collectBatchDiagnostics(filesToProcess, severity, lspService, options);
+    const navigationOnly = results.filter((result) => result.diagnosticsUnsupported).length;
     let text;
     if (total === 0) {
         // #533/#570: an unconfirmed-containing directory result must never
@@ -1450,6 +1480,7 @@ async function runDirectoryDiagnostics(absPath, severity, lspService, options) {
             truncated,
             cleanFiles: clean,
             unconfirmedFiles: unconfirmed,
+            navigationOnlyFiles: navigationOnly > 0 ? navigationOnly : undefined,
             timedOutFiles: timedOut > 0 ? timedOut : undefined,
             fileErrors: fileErrors.length > 0 ? fileErrors : undefined,
             lspHealthWarnings: lspHealthWarnings.length > 0 ? lspHealthWarnings : undefined,

package/node_modules/pi-lens/dist/tools/lsp-structured-output.js

@@ -9,7 +9,7 @@ function finiteNumber(value) {
         ? value
         : undefined;
 }
-export function lspStatusFromFailureKind(failureKind) {
+function lspStatusFromFailureKind(failureKind) {
     if (failureKind === "success" || failureKind === "fallback_success") {
         return "success";
     }
@@ -145,7 +145,7 @@ function collectCallHierarchyLocationSummaries(result, operation) {
     }
     return out;
 }
-export function collectLspToolLocationsForOperation(operation, result, filePath) {
+function collectLspToolLocationsForOperation(operation, result, filePath) {
     if ([
         "definition",
         "typeDefinition",
@@ -210,7 +210,7 @@ function parseBalancedJsonPrefix(text) {
     }
     return undefined;
 }
-export function parseLspNavigationTextPayload(text) {
+function parseLspNavigationTextPayload(text) {
     const notes = [];
     const hints = [];
     const errors = [];

package/node_modules/pi-lens/dist/tools/render-compact.js

@@ -65,7 +65,7 @@ export function selectCompactText(result, args, expanded, summarize) {
 }
 /** Apply a CompactStyle to text. `brand` uses raw blue ANSI; the rest defer to
  * the theme so error-red and normal output stay consistent with the host. */
-export function paintCompact(style, text, theme) {
+function paintCompact(style, text, theme) {
     if (style === "brand") {
         return `${PI_LENS_BLUE_FG}${text}${RESET_FG}`;
     }

package/node_modules/pi-lens/dist/tools/symbol-search.js

@@ -8,7 +8,7 @@
 import * as path from "node:path";
 import { Type } from "../clients/deps/typebox.js";
 import { symbolSearch, } from "../clients/lens-engine.js";
-import { baseName, compactRenderResult } from "./render-compact.js";
+import { compactRenderResult } from "./render-compact.js";
 /**
  * Machine-actionable follow-up hint (#771) — mirrors ast-grep-search.ts's
  * `suggestedDump` pattern. Cheap enough to attach per hit rather than only the
@@ -153,4 +153,3 @@ export function createSymbolSearchTool(getProjectRoot) {
 }
 // Re-exported so tests importing from this module can reach baseName without
 // a second import path.
-export { baseName };

package/node_modules/pi-lens/docs/globalconfig.md

@@ -27,6 +27,20 @@ Each runtime toggle is settable from the CLI *and* from `config.json`. The two a
 | `--lens-compact-tool-line` | `ui.compactToolLine` | `false` |
 | `--no-lazy-tools` | `tools.lazy` | `true` |
 | `--lens-turn-end-madge` | `turnEnd.madge.enabled` | `false` |
+| `--no-knip` | `knip.enabled` | `true` |
+| `--no-jscpd` | `jscpd.enabled` | `true` |
+| `--no-madge` | `madge.enabled` | `true` |
+| `--no-gitleaks` | `gitleaks.enabled` | `true` |
+| `--no-govulncheck` | `govulncheck.enabled` | `true` |
+| `--no-dead-code` | `deadCode.enabled` | `true` |
+| `--no-complexity` | `complexity.enabled` | `true` |
+
+## Startup controls
+
+| Configuration key | Default | Accepted values |
+| --- | --- | --- |
+| `startup.mode` | `full` | `quick`, `full`, or `minimal`; `PI_LENS_STARTUP_MODE` wins |
+| `startup.scans.enabled` | `true` | `true` or `false` |
 
 By default pi-lens registers six situational tools (the `ast_grep_*` family,
 `lsp_navigation`, `lens_diagnostic_mark`) inactive and exposes a small loader,
@@ -249,6 +263,12 @@ Explicit override for the review graph's own file budget (#775), for monorepos t
 
 ### Schema rules
 
+Session-start analyzer keys default to `true` and work in both the global
+config and `.pi-lens.json`. Set one to `false` to skip that analyzer; pi-lens
+records the disabled skip. `startup.mode` accepts `quick`, `full`, or
+`minimal`, and `startup.scans.enabled: false` disables background startup scans
+while leaving diagnostics and LSP active. `PI_LENS_STARTUP_MODE` still wins.
+
 - Unknown rule ids are ignored (forward-compat). Unrecognized **top-level** keys are logged once and then ignored — never fatal to the parse. The LSP namespaces a shared file legitimately carries (`servers`, `serverOverrides`, `disabledServers`, `warmFiles`) and `$schema` are tolerated silently; a user-level-only lens key placed here (e.g. `lsp`, `tests`, `delta`) is logged as "not honored at project scope"; anything else is logged as a likely typo. The raw parsed JSON is still exposed for forward-compat consumers regardless.
 - Every toggle key in the table above must be a boolean, and its containing section must be an object. A wrong type is logged once and the key is treated as absent, so the flag falls through to its default rather than the whole file being rejected.
 - A malformed JSON file is logged once and treated as "no config" — your diagnostics never get blocked by a syntax error in your own config.

package/node_modules/pi-lens/docs/lsp-capability-matrix.md

@@ -35,11 +35,19 @@ they share a server id but not a verified clean-signal behavior.
 | **2 — push, publishes-versioned** | `publishDiagnostics([])` **with version** on every scan, incl. clean→clean | YES, currency-proven via version | ast-grep |
 | **2\* — push, publishes-unversioned** | re-publishes on a clean scan but **version-less** — the wait still early-returns (the client accepts a version-less publish as fresh: it can't be proven stale), but currency is only *temporally correlated*, not proven | YES at runtime, with a staleness-risk caveat (not a latency cost) | opengrep |
 | **3 — push, silent on clean** | server publishes nothing when nothing changed | **NO** — budget-wait floor (safe; a timeout is *not* a false clean). **This tier is #458's learned-deadline target set.** | typescript-language-server |
+| **Navigation-only — custom, no evidence** | custom `lsp.servers.*` entry has no pull provider and has not published in this session | **NO** — diagnostics are unsupported; skip the wait and report navigation-only | Dexter |
 
 Detection is **cached** at `initialize` (`detectWorkspaceDiagnosticsSupport` →
 `state.workspaceDiagnosticsSupport.mode`, upgraded on `client/registerCapability`),
 so the tier is free at collection time — no per-edit probe.
 
+Custom servers without a pull provider begin with one bounded first-contact
+probe. The probe uses the smaller of the server's push-wait budget and the live
+hook deadline. If the hook cuts it off first, the result remains unconfirmed and
+the next touch probes again. Only silence through the full push budget latches
+that server id as navigation-only for the service session. A publish upgrades it
+to the ordinary push-wait policy.
+
 ## Matrix (dev box + CI nightly; mode last refreshed 2026-06-17 from run 27713958681, clean-behavior probed on the dev box 2026-07-08 — #460)
 
 `mode` from cached capabilities; `clean-behavior` from the phase-aware publish-trace
@@ -74,7 +82,7 @@ classification standing.
 | toml | taplo | push-only | publishes-unversioned | 2* | dev+ci |
 | terraform | terraform-ls | push-only | TBD | 2/3? | dev+ci |
 | prisma | @prisma/language-server | push-only | publishes-unversioned | 2* | dev+ci |
-| php | intelephense | push-only | TBD | 2/3? | dev |
+| php | intelephense | push-only | TBD | 2/3? | dev+ci |
 | zig | zls | push-only | publishes-unversioned | 2* | dev+ci |
 | vue | @vue/language-server | push-only | TBD | 2/3? | dev+ci |
 | dart | dart language-server | push-only | publishes-unversioned | 2* | ci |

package/node_modules/pi-lens/docs/pi-lens-reviewer.md

@@ -6,6 +6,12 @@ Assume the implementation's claims are incomplete. Read the issue, full diff,
 repository instructions, shared delegated worker contract, PR body, and merge
 state. Keep the review read-only.
 
+Diff the change from its merge base (`git diff origin/master...HEAD`, or
+`git diff $(git merge-base origin/master HEAD)..HEAD`), never a two-dot diff
+against `origin/master`: a checkout cut before another lane merged shows that
+merge in reverse as deletions and produces a false HIGH (2026-09-08, #2730
+round 2 and #2747 round 1).
+
 Reproduce the build and targeted tests. Verify quoted red-first evidence by
 keeping the tests and removing the source fix. Mutate every new guard and demand
 a red test. Probe inversions, concurrency, input channels, trust boundaries,

package/node_modules/pi-lens/docs/pi-lens-subagent.md

@@ -30,7 +30,18 @@ real store, sink, coordinator, or registry, use it and assert the durable result
 Git authority is separate from the role. Commit, push, or open a PR only when
 the delegation explicitly grants that authority after worktree verification.
 Otherwise, edit and test with the assigned worktree as the command working
-directory, then return the patch and evidence to the orchestrator. Never merge.
+directory, leave every change uncommitted, and write two handoff files at the
+worktree root: `PR_BODY.md` (the full PR body, transcripts pasted) and
+`COMMIT_MSG.txt` (subject, body, issue ref, trailers). Name any path inside the
+worktree that must not be committed. The orchestrator commits from those files;
+they are never committed themselves. Never merge.
+
+A sandboxed worker may find the shared `.git` and the linked `node_modules`
+read-only and the network absent (the codex `workspace-write` sandbox does
+this; see plegma#311). Run Vitest as
+`node_modules/.bin/vitest run <files> --configLoader runner`, and if the
+tree-sitter grammar prefetch hangs offline, verify through direct probes of the
+built code and say so; the orchestrator re-runs the files outside the sandbox.
 
 When Git authority is granted, use one logical commit with an imperative,
 conventional-prefix subject of at most 50 characters, a blank line, and a

package/node_modules/pi-lens/docs/release-qa-baseline.md

@@ -11,10 +11,11 @@ Every child process the runner spawns — `pi`, the MCP server, `node`, `npm`
 runs under a pinned environment: `HOME`, `USERPROFILE`, `PI_LENS_HOME`,
 `PILENS_DATA_DIR`, `PI_LENS_INSTALL_LOG` and `npm_config_cache` all inside the
 scratch root. `PI_LENS_INSTALL_LOG` is on that list by hard experience: it is
-what `scripts/warm-loader-cache.mjs` keys its install log on, `PI_LENS_HOME`
-does NOT redirect it, and the runner's first six runs — which pinned the pi-lens
-home but passed no environment to `npm` at all — put 41 records into the
-maintainer's real `~/.pi-lens/install.log` (#2619 review F1). The pack runs in a
+what `scripts/warm-loader-cache.mjs` keys its install log on, with
+`PI_LENS_HOME/install.log` as the fallback when it is unset, and the runner's
+first six runs — which pinned the pi-lens home but passed no environment to
+`npm` at all — put 41 records into the maintainer's real
+`~/.pi-lens/install.log` (#2619 review F1). The pack runs in a
 `git archive HEAD` export, never the live checkout, because `npm pack` fires our
 own `prepack` (rewrites `package.json` + `package-lock.json`) and `prepare`
 (rebuilds `dist/`, downloads grammars, reinstalls git hooks).
@@ -61,6 +62,13 @@ arithmetic.
 | `mcp-stdio` | an MCP client speaking JSON-RPC to `dist/mcp/server.js` |
 | `git-install` | `pi install git:...` against a pushed ref |
 
+Static packaging shape under `npm-pack` is NOT a matrix row: CI's
+`ci.yml` `prod-install-build` job already runs `publint` (gating) on every
+PR's packed tarball (#2700, the check #2587 was missing). `attw`
+(arethetypeswrong) is not run there or here — the package ships no
+`.d.ts` at all (`tsconfig.dist.json` sets `"declaration": false`, no
+`types`/`exports` in `package.json`), so there is nothing for it to grade.
+
 ## The matrix
 
 | row id | feature | modality | entry point | pass criterion | witness | reuse | umbrella |

package/node_modules/pi-lens/docs/servercapabilities.md

@@ -6,7 +6,7 @@ server's `initialize` handshake. Generated by `node scripts/server-capabilities.
 absent on the generating host are listed under *Unavailable* — run in a
 provisioned environment (the nightly) to capture those rows.
 
-_Last generated: 2026-08-21 on linux; 30 servers captured, 14 unavailable._
+_Last generated: 2026-09-08 on linux; 30 servers captured, 18 unavailable._
 
 ## Diagnostic mode + navigation/edit operations
 
@@ -60,7 +60,7 @@ Legend: ✓ advertised, · not. **mode** = document diagnostics (`pull` = `textD
 - **deno**: callHierarchyProvider, codeActionProvider, codeLensProvider, completionProvider, definitionProvider, diagnosticProvider, documentFormattingProvider, documentHighlightProvider, documentSymbolProvider, executeCommandProvider, experimental, foldingRangeProvider, hoverProvider, implementationProvider, inlayHintProvider, notebookDocumentSync, referencesProvider, renameProvider, selectionRangeProvider, semanticTokensProvider, signatureHelpProvider, textDocumentSync, typeDefinitionProvider, workspace, workspaceSymbolProvider
 - **docker**: codeActionProvider, completionProvider, definitionProvider, documentFormattingProvider, documentHighlightProvider, documentLinkProvider, documentOnTypeFormattingProvider, documentRangeFormattingProvider, documentSymbolProvider, foldingRangeProvider, hoverProvider, renameProvider, signatureHelpProvider, textDocumentSync
 - **expert**: codeActionProvider, codeLensProvider, completionProvider, definitionProvider, documentFormattingProvider, documentSymbolProvider, executeCommandProvider, experimental, hoverProvider, referencesProvider, textDocumentSync, workspace, workspaceSymbolProvider
-- **fsharp**: callHierarchyProvider, codeActionProvider, codeLensProvider, completionProvider, definitionProvider, documentFormattingProvider, documentHighlightProvider, documentRangeFormattingProvider, documentSymbolProvider, foldingRangeProvider, hoverProvider, implementationProvider, inlayHintProvider, inlineValueProvider, referencesProvider, renameProvider, selectionRangeProvider, semanticTokensProvider, signatureHelpProvider, textDocumentSync, typeDefinitionProvider, workspaceSymbolProvider
+- **fsharp**: callHierarchyProvider, codeActionProvider, codeLensProvider, completionProvider, definitionProvider, documentFormattingProvider, documentHighlightProvider, documentRangeFormattingProvider, documentSymbolProvider, foldingRangeProvider, hoverProvider, implementationProvider, inlayHintProvider, referencesProvider, renameProvider, selectionRangeProvider, semanticTokensProvider, signatureHelpProvider, textDocumentSync, typeDefinitionProvider, workspaceSymbolProvider
 - **gleam**: codeActionProvider, completionProvider, definitionProvider, documentFormattingProvider, documentHighlightProvider, documentSymbolProvider, foldingRangeProvider, hoverProvider, referencesProvider, renameProvider, signatureHelpProvider, textDocumentSync, typeDefinitionProvider, workspace
 - **go**: callHierarchyProvider, codeActionProvider, codeLensProvider, completionProvider, definitionProvider, documentFormattingProvider, documentHighlightProvider, documentLinkProvider, documentSymbolProvider, executeCommandProvider, experimental, foldingRangeProvider, hoverProvider, implementationProvider, inlayHintProvider, referencesProvider, renameProvider, selectionRangeProvider, semanticTokensProvider, signatureHelpProvider, textDocumentSync, typeDefinitionProvider, typeHierarchyProvider, workspace, workspaceSymbolProvider
 - **html**: colorProvider, definitionProvider, diagnosticProvider, documentFormattingProvider, documentHighlightProvider, documentLinkProvider, documentRangeFormattingProvider, documentSymbolProvider, foldingRangeProvider, hoverProvider, linkedEditingRangeProvider, referencesProvider, renameProvider, selectionRangeProvider, signatureHelpProvider, textDocumentSync
@@ -109,12 +109,12 @@ Toolchain/binary not installed here, so capabilities weren't captured
 (many are the toolchain-gated family tracked in #241):
 
 - @prisma/language-server
+- @vue/language-server
 - PowerShell Editor Services (pwsh Start-EditorServices.ps1 -Stdio)
 - clangd
 - cmake-language-server
 - fish-lsp
 - haskell-language-server
-- intelephense
 - jdtls
 - jdtls + lombok javaagent
 - kotlin-language-server
@@ -122,3 +122,7 @@ Toolchain/binary not installed here, so capabilities weren't captured
 - ocamllsp
 - rust-analyzer
 - sourcekit-lsp
+- typescript native (clean file)
+- typescript native (tsc --lsp --stdio, TS7+)
+- typescript-language-server
+- typescript-language-server (clean file)

package/node_modules/pi-lens/docs/word-index.md

@@ -156,7 +156,7 @@ the cwd, falling back to the stateless snapshot read otherwise.
 
 ## Caps and boundaries
 
-- **≤6000 files, ≤512KB per file** (`WORD_INDEX_MAX_FILES`,
+- **≤6000 files, ≤512KB per file** (the file cap is passed into the walk;
   `WORD_INDEX_MAX_BYTES` in `clients/word-index.ts`) — shared by every
   build path and the per-edit update path alike.
 - **Deletions aren't plumbed at the per-edit seam** — the cascade only ever

package/node_modules/pi-lens/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-lens",
-	"version": "4.1.4",
+	"version": "4.1.5",
 	"type": "module",
 	"description": "Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo",
 	"repository": {
@@ -21,10 +21,12 @@
 		"prepack": "node scripts/strip-dev-deps-for-pack.mjs --strip",
 		"postpack": "node scripts/strip-dev-deps-for-pack.mjs --restore",
 		"lint": "tsc --project tsconfig.json && npm run lint:js",
-		"lint:js": "oxlint --deny-warnings --ignore-pattern \"tests/**/*.ts\" --ignore-pattern \"tests/**/*.tsx\" --ignore-pattern \"**/*.d.mts\" --ignore-pattern \"tests/fixtures/autofix-smoke/**\" --ignore-pattern \"tests/fixtures/format-smoke/**\" --ignore-pattern \"tests/fixtures/tool-smoke/**\" --ignore-pattern \"tests/fixtures/call-graph/javascript/**\" --ignore-pattern \"tests/fixtures/function-facts/javascript-parameter.js\" .",
+		"lint:js": "oxlint --deny-warnings --import-plugin --promise-plugin -D block-scoped-var -D import/default -D import/namespace -D import/no-absolute-path -D import/no-empty-named-blocks -D import/no-named-as-default -D import/no-self-import -D no-extend-native -D no-extra-bind -D no-implied-eval -D no-new -D no-unexpected-multiline -D no-useless-constructor -D oxc/approx-constant -D oxc/misrefactored-assign-op -D oxc/no-accumulating-spread -D oxc/no-async-endpoint-handlers -D oxc/no-this-in-exported-function -D promise/no-callback-in-promise -D promise/no-multiple-resolved -D promise/no-new-statics -D promise/valid-params -D typescript/no-confusing-non-null-assertion -D typescript/no-extraneous-class -D typescript/no-unnecessary-type-constraint -D typescript/no-unsafe-enum-comparison -D unicorn/no-accessor-recursion -D unicorn/no-array-fill-with-reference-type -D unicorn/no-confusing-array-with -D unicorn/no-instanceof-builtins -D unicorn/prefer-array-flat-map -D unicorn/require-module-specifiers --ignore-pattern \"tests/**/*.ts\" --ignore-pattern \"tests/**/*.tsx\" --ignore-pattern \"**/*.d.mts\" --ignore-pattern \"tests/fixtures/autofix-smoke/**\" --ignore-pattern \"tests/fixtures/format-smoke/**\" --ignore-pattern \"tests/fixtures/tool-smoke/**\" --ignore-pattern \"tests/fixtures/call-graph/javascript/**\" --ignore-pattern \"tests/fixtures/function-facts/javascript-parameter.js\" .",
+		"lint:js:advisory": "node scripts/lint-js-advisory.mjs --deny-warnings --format default -D correctness -D suspicious -D perf --import-plugin --promise-plugin --type-aware -A no-underscore-dangle -A no-await-in-loop -A unicorn/no-array-sort -A unicorn/consistent-function-scoping -A promise/no-promise-in-callback -A no-useless-call -A import/no-unassigned-import -A no-unmodified-loop-condition --ignore-pattern \"**/*.d.mts\" --ignore-pattern \"tests/fixtures/autofix-smoke/**\" --ignore-pattern \"tests/fixtures/format-smoke/**\" --ignore-pattern \"tests/fixtures/tool-smoke/**\" --ignore-pattern \"tests/fixtures/call-graph/javascript/**\" --ignore-pattern \"tests/fixtures/function-facts/javascript-parameter.js\" .",
 		"depcruise:check": "depcruise --validate --config .dependency-cruiser.cjs --ignore-known .dependency-cruiser-known-violations.json --output-type err index.ts \"clients/**/*.ts\"",
 		"fmt": "oxfmt",
 		"fmt:check": "oxfmt --check",
+		"taplo": "taplo check $(git ls-files '*.toml' ':!tests/fixtures/**') && taplo fmt --check $(git ls-files '*.toml' ':!tests/fixtures/**' ':!config/ruff/core.toml') # taplo 0.7.0 panics on this file's comments; lint it above",
 		"watch": "tsc --watch",
 		"test": "node scripts/with-test-lock.mjs -- vitest run",
 		"test:unit": "node scripts/with-test-lock.mjs -- vitest run",
@@ -35,6 +37,7 @@
 		"check": "node scripts/check-extensions.mjs",
 		"selftest:install": "node scripts/install-selftest.mjs",
 		"check:lockfile": "node scripts/check-lockfile-sync.mjs",
+		"knip": "node scripts/run-knip.mjs",
 		"check:grammars": "node scripts/check-grammar-provenance.mjs",
 		"check:grammar-load": "node scripts/check-grammar-load.mjs",
 		"audit:tree-sitter": "node scripts/audit-tree-sitter-rules.mjs",
@@ -138,20 +141,8 @@
 			"./skills"
 		]
 	},
-	"knip": {
-		"entry": [
-			"index.ts"
-		],
-		"project": [
-			"**/*.ts",
-			"!**/*.test.ts"
-		],
-		"ignore": [
-			"**/*.test.ts"
-		]
-	},
 	"allowScripts": {
-		"@ast-grep/cli@0.45.2": true,
+		"@ast-grep/cli@0.45.3": true,
 		"@google/genai@1.52.0": true,
 		"protobufjs@7.6.5": true
 	}

package/node_modules/pi-lens/rules/typos/_typos.toml

@@ -13,5 +13,7 @@
 # dictionary here; every entry must have a provenance comment.
 
 [default.extend-identifiers]
-dito = "dito"               # #967 — real model/vendor namespace (provider-failover normalization prefix), not a misspelling of "ditto"
-unparseable = "unparseable" # #967 — valid English spelling ("un-parseable"), not a typo of "unparsable"
+# #967 — real model/vendor namespace (provider-failover normalization prefix), not a misspelling of "ditto"
+dito = "dito"
+# #967 — valid English spelling ("un-parseable"), not a typo of "unparsable"
+unparseable = "unparseable"

package/node_modules/pi-lens/scripts/lib/skills-predicate.mjs

@@ -54,7 +54,7 @@ import * as path from "node:path";
  * @param {import("node:fs").Dirent} entry
  * @returns {"file" | "dir" | "other"}
  */
-export function resolvedEntryKind(fullPath, entry) {
+function resolvedEntryKind(fullPath, entry) {
 	if (entry.isSymbolicLink()) {
 		try {
 			const stats = fs.statSync(fullPath);

package/node_modules/pi-lens/scripts/lib/warm-loader-cache.mjs

@@ -281,5 +281,5 @@ export function appendBounded(
 	return lines.slice(Math.max(0, lines.length - max));
 }
 
-/** Cap for `~/.pi-lens/install.log`. */
+/** Cap for the install log under `PI_LENS_HOME` or `~/.pi-lens`. */
 export const INSTALL_LOG_MAX_LINES = 100;

package/node_modules/pi-lens/scripts/warm-loader-cache.mjs

@@ -44,7 +44,8 @@ function log(message) {
 }
 
 /**
- * Append one JSONL record to ~/.pi-lens/install.log.
+ * Append one JSONL record to PI_LENS_INSTALL_LOG, or install.log under
+ * PI_LENS_HOME (falling back to ~/.pi-lens when neither is set).
  *
  * pi's install output scrolls away, so without this there is no record that the
  * warm ran, was skipped, or failed. One bounded line per install keeps the
@@ -54,10 +55,11 @@ function log(message) {
 function record(entry) {
 	try {
 		const override = process.env.PI_LENS_INSTALL_LOG;
+		const home = process.env.PI_LENS_HOME?.trim();
 		const file =
 			typeof override === "string" && override.length > 0
 				? override
-				: path.join(os.homedir(), ".pi-lens", "install.log");
+				: path.join(home || path.join(os.homedir(), ".pi-lens"), "install.log");
 		fs.mkdirSync(path.dirname(file), { recursive: true });
 		const existing = fs.existsSync(file)
 			? fs.readFileSync(file, "utf8").split("\n")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@herbertgao/pi-extensions",
-  "version": "2026.9.1",
+  "version": "2026.9.2",
   "description": "Aggregate installer for HerbertGao-maintained Pi extensions.",
   "keywords": [
     "extensions",
@@ -56,7 +56,7 @@
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mozilla/readability": "^0.6.0",
     "@napi-rs/keyring": "^1.3.0",
-    "@narumitw/pi-btw": "0.57.0",
+    "@narumitw/pi-btw": "0.58.0",
     "@narumitw/pi-caffeinate": "0.49.7",
     "@narumitw/pi-tui-kit": "^0.59.0",
     "@noble/ed25519": "^3.1.0",
@@ -90,7 +90,7 @@
     "open": "^10.2.0",
     "p-limit": "^6.1.0",
     "pi-footer": "0.5.1",
-    "pi-lens": "4.1.4",
+    "pi-lens": "4.1.5",
     "pi-mcp-adapter": "2.32.1",
     "pi-web-access": "0.28.0",
     "pidusage": "^4.0.1",